primitive-admin 1.1.0-alpha.44 → 1.1.0-alpha.45

package/dist/src/lib/workflow-codegen/generator.js

@@ -0,0 +1,186 @@
+/**
+ * `workflows codegen` orchestrator (issue #1442).
+ *
+ * Reads synced workflow TOMLs (`.primitive/sync/<env>/<appId>/workflows/*.toml`)
+ * and emits ONE generated file per workflow —
+ * `workflows/generated/<key>.generated.ts` — each containing the workflow's
+ * `<Key>Input`/`<Key>Output` types plus a typed `<key>(client)` invoker factory
+ * returning `{ runSync?, start }`. This mirrors `databases codegen`'s per-type
+ * `<Type>.generated.ts` layout (#1441's `<type>Ops`): per-file artifacts keep
+ * team merges conflict-free and let a `[workflow-key]` filter regenerate exactly
+ * one file.
+ *
+ * Design decisions (see the plan of record on #1442, post-pivot):
+ *   - Schemas are interpreted through the SHARED descriptor
+ *     (`generated-schema-descriptor.ts`, a vendored copy of the server's
+ *     `schema-validation` descriptor) so the generated types match runtime
+ *     validation exactly. A malformed schema throws (fail-and-exit).
+ *   - `.runSync` is emitted only for `syncCallable: true` workflows (the server
+ *     rejects run-sync otherwise); `.start` for every non-reserved workflow.
+ *   - `input` is a REQUIRED option iff the schema rejects `{}` (the client's
+ *     `input ?? {}` fallback would fail validation); otherwise `input?`.
+ *   - The runtime call always passes the ORIGINAL key string; only identifiers
+ *     are sanitized. `workflowKey` is set AFTER spreading `opts`, so a caller
+ *     cannot override it.
+ *   - Disk lifecycle (write / `--check` / suffix-based cleanup) delegates to the
+ *     shared `writeOrCheckGeneratedFiles`, exactly like `databases codegen`.
+ */
+import * as path from "path";
+import { parseConfigToml } from "../config-toml.js";
+import { safeJsonParse } from "../workflow-payload.js";
+import { writeOrCheckGeneratedFiles, } from "../codegen-shared/generatedFiles.js";
+import { fingerprintToml } from "../db-codegen/dbFingerprint.js";
+import { schemaToTsType, schemaRejectsEmptyObject } from "./schemaToTs.js";
+import { workflowInputTypeName, workflowOutputTypeName, workflowFactoryName, } from "./naming.js";
+/** Prefix marking a platform-owned workflow key (mirrors the server's
+ * `INTERNAL_WORKFLOW_KEY_PREFIX`; inlined because the CLI cannot import from
+ * `src/`). Such workflows are never client-invocable and are skipped. */
+const INTERNAL_WORKFLOW_KEY_PREFIX = "__internal.";
+/** Suffix identifying a generated file (shared with `databases codegen`). */
+export const GENERATED_FILE_SUFFIX = ".generated.ts";
+/** The client package the generated file imports its types from. */
+const CLIENT_PACKAGE = "js-bao-wss-client";
+/** True for a platform-owned workflow key. */
+function isReservedKey(key) {
+    return (typeof key === "string" &&
+        key.trim().toLowerCase().startsWith(INTERNAL_WORKFLOW_KEY_PREFIX));
+}
+/**
+ * Render a top-level `<Name>Input`/`<Name>Output` declaration. An absent schema
+ * → `unknown`. An object type → an `interface`; anything else → a `type` alias.
+ */
+function renderTypeDecl(name, schema) {
+    if (schema === undefined) {
+        return `export type ${name} = unknown;`;
+    }
+    const expr = schemaToTsType(schema, 0);
+    if (expr.startsWith("{")) {
+        return `export interface ${name} ${expr}`;
+    }
+    return `export type ${name} = ${expr};`;
+}
+/**
+ * Parse a single workflow TOML into the data the emitter needs. Throws on
+ * malformed schema JSON (fail-and-exit) — the honest `unknown` fallback is for
+ * valid-but-untypeable schemas only. Returns null for a reserved workflow.
+ */
+function parseWorkflow(input) {
+    // #1464 removed `@iarna/toml`; #1446 makes `sync pull` emit schemas as native
+    // TOML tables (incl. mixed-type enums like `enum = ["ok", 1]`, TOML 1.0). The
+    // `parseConfigToml` facade parses both. `safeJsonParse` still owns the
+    // string-vs-inline-table schema handling.
+    const data = parseConfigToml(input.tomlContent);
+    const workflow = data?.workflow ?? {};
+    const key = typeof workflow.key === "string" && workflow.key.length > 0
+        ? workflow.key
+        : input.fileStem;
+    if (isReservedKey(key))
+        return null;
+    // safeJsonParse throws on invalid JSON in a schema string — let it bubble.
+    const inputSchema = safeJsonParse(workflow.inputSchema);
+    const outputSchema = safeJsonParse(workflow.outputSchema);
+    const inputTypeName = workflowInputTypeName(key);
+    const outputTypeName = workflowOutputTypeName(key);
+    return {
+        key,
+        syncCallable: workflow.syncCallable === true,
+        inputTypeName,
+        outputTypeName,
+        factoryName: workflowFactoryName(key),
+        inputDecl: renderTypeDecl(inputTypeName, inputSchema),
+        outputDecl: renderTypeDecl(outputTypeName, outputSchema),
+        // `input` is required iff the schema rejects the client's `{}` fallback.
+        // A schema-less workflow (`undefined`) accepts anything → optional.
+        inputRequired: inputSchema !== undefined && schemaRejectsEmptyObject(inputSchema),
+    };
+}
+/** Render the typed invoker factory for one workflow. */
+function renderFactory(wf) {
+    const keyLiteral = JSON.stringify(wf.key);
+    const inputMember = wf.inputRequired
+        ? `input: ${wf.inputTypeName}`
+        : `input?: ${wf.inputTypeName}`;
+    const lines = [
+        `export function ${wf.factoryName}(client: JsBaoClient) {`,
+        `  return {`,
+    ];
+    // Spread `opts` FIRST, then set `workflowKey` LAST, so the factory's intended
+    // key always wins. `Omit<..., "workflowKey">` only rejects an excess
+    // `workflowKey` on object literals; a caller passing an options *variable*
+    // carrying an extra `workflowKey` (or any untyped JS caller) would otherwise
+    // override the key and invoke the wrong workflow if the spread came last.
+    if (wf.syncCallable) {
+        lines.push(`    runSync: (\n` +
+            `      opts: { ${inputMember} } & Omit<RunSyncWorkflowOptions, "workflowKey" | "input">\n` +
+            `    ) =>\n` +
+            `      client.workflows.runSync<${wf.inputTypeName}, ${wf.outputTypeName}>({\n` +
+            `        ...opts,\n` +
+            `        workflowKey: ${keyLiteral},\n` +
+            `      }),`);
+    }
+    lines.push(`    start: (\n` +
+        `      opts: { ${inputMember} } & Omit<StartWorkflowOptions, "workflowKey" | "input">\n` +
+        `    ) =>\n` +
+        `      client.workflows.start<${wf.inputTypeName}>({\n` +
+        `        ...opts,\n` +
+        `        workflowKey: ${keyLiteral},\n` +
+        `      }),`);
+    lines.push(`  };`, `}`);
+    return lines.join("\n");
+}
+/**
+ * Render the full `<key>.generated.ts` content for a single workflow TOML input.
+ * Returns null for a reserved (`__internal.*`) workflow. Pure — exported so
+ * tests can assert on the string directly.
+ */
+export function renderWorkflowFile(input) {
+    const wf = parseWorkflow(input);
+    if (!wf)
+        return null;
+    const fingerprint = fingerprintToml(input.tomlContent);
+    // Only import the option types actually referenced, so the generated file
+    // compiles under a consumer's `noUnusedLocals`.
+    const imports = ["JsBaoClient", "StartWorkflowOptions"];
+    if (wf.syncCallable)
+        imports.push("RunSyncWorkflowOptions");
+    imports.sort();
+    const blocks = [];
+    blocks.push([
+        `// AUTO-GENERATED FROM workflows/${wf.key}.toml — DO NOT EDIT.`,
+        "// Run `primitive workflows codegen` to regenerate.",
+        `// fingerprint: ${fingerprint}`,
+    ].join("\n"));
+    blocks.push(`import type {\n${imports
+        .map((i) => `  ${i},`)
+        .join("\n")}\n} from "${CLIENT_PACKAGE}";`);
+    blocks.push(wf.inputDecl);
+    blocks.push(wf.outputDecl);
+    blocks.push(renderFactory(wf));
+    return { key: wf.key, content: blocks.join("\n\n") + "\n" };
+}
+/**
+ * Run workflow codegen end-to-end. One `<key>.generated.ts` per workflow;
+ * delegates the disk lifecycle to the shared writer/checker, exactly like
+ * `databases codegen`.
+ */
+export async function generateWorkflowTypes(options) {
+    const outAbs = path.resolve(options.outputDir);
+    const filesToWrite = new Map();
+    for (const input of options.inputs) {
+        const rendered = renderWorkflowFile(input);
+        if (!rendered)
+            continue; // reserved workflow — no file
+        const filePath = path.join(outAbs, `${rendered.key}${GENERATED_FILE_SUFFIX}`);
+        filesToWrite.set(filePath, rendered.content);
+    }
+    return await writeOrCheckGeneratedFiles({
+        outputDir: outAbs,
+        filesToWrite,
+        check: options.check,
+        // A single-workflow filter run owns only a subset of the generated files,
+        // so orphan cleanup / stale detection must be scoped to the filtered file.
+        fullOwnership: options.singleWorkflow !== true,
+        generatedSuffix: GENERATED_FILE_SUFFIX,
+    });
+}
+//# sourceMappingURL=generator.js.map

package/dist/src/lib/workflow-codegen/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB;;yEAEyE;AACzE,MAAM,4BAA4B,GAAG,aAAa,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAErD,oEAAoE;AACpE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AA0C3C,8CAA8C;AAC9C,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAClE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAW;IAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,eAAe,IAAI,aAAa,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,oBAAoB,IAAI,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,eAAe,IAAI,MAAM,IAAI,GAAG,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAA2B;IAChD,8EAA8E;IAC9E,8EAA8E;IAC9E,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAQ,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GACP,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,GAAG;QACd,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IAErB,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,2EAA2E;IAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO;QACL,GAAG;QACH,YAAY,EAAE,QAAQ,CAAC,YAAY,KAAK,IAAI;QAC5C,aAAa;QACb,cAAc;QACd,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC;QACrC,SAAS,EAAE,cAAc,CAAC,aAAa,EAAE,WAAW,CAAC;QACrD,UAAU,EAAE,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC;QACxD,yEAAyE;QACzE,oEAAoE;QACpE,aAAa,EACX,WAAW,KAAK,SAAS,IAAI,wBAAwB,CAAC,WAAW,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,EAAkB;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa;QAClC,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;QAC9B,CAAC,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa;QACtB,mBAAmB,EAAE,CAAC,WAAW,yBAAyB;QAC1D,YAAY;KACb,CAAC;IACF,8EAA8E;IAC9E,qEAAqE;IACrE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,kBAAkB;YAChB,iBAAiB,WAAW,8DAA8D;YAC1F,YAAY;YACZ,kCAAkC,EAAE,CAAC,aAAa,KAAK,EAAE,CAAC,cAAc,OAAO;YAC/E,oBAAoB;YACpB,wBAAwB,UAAU,KAAK;YACvC,WAAW,CACd,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,gBAAgB;QACd,iBAAiB,WAAW,4DAA4D;QACxF,YAAY;QACZ,gCAAgC,EAAE,CAAC,aAAa,OAAO;QACvD,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA2B;IAE3B,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAErB,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEvD,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,OAAO,GAAG,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CACT;QACE,oCAAoC,EAAE,CAAC,GAAG,sBAAsB;QAChE,qDAAqD;QACrD,mBAAmB,WAAW,EAAE;KACjC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,MAAM,CAAC,IAAI,CACT,kBAAkB,OAAO;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;SACrB,IAAI,CAAC,IAAI,CAAC,aAAa,cAAc,IAAI,CAC7C,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/B,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,8BAA8B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,MAAM,EACN,GAAG,QAAQ,CAAC,GAAG,GAAG,qBAAqB,EAAE,CAC1C,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,0BAA0B,CAAC;QACtC,SAAS,EAAE,MAAM;QACjB,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,0EAA0E;QAC1E,2EAA2E;QAC3E,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;QAC9C,eAAe,EAAE,qBAAqB;KACvC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/lib/workflow-codegen/naming.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Identifier-naming helpers for `workflows codegen` (issue #1442).
+ *
+ * Workflow keys resolve case-insensitively server-side and may contain
+ * characters that aren't valid TS identifiers (`.`, `-`). Only the emitted
+ * identifiers are sanitized — the runtime call always passes the ORIGINAL key
+ * string.
+ *
+ * Type names: `pascalCase(key) + "Input" | "Output"` (reuses `pascalCase` from
+ * the database codegen so the two commands share one PascalCase rule).
+ * Factory property: a camelCase form of the key.
+ */
+/**
+ * `create-checkout-session` / `createCheckoutSession` → `CreateCheckoutSession`.
+ * A digit-leading key (`123-job` → `_123Job`) is prefixed with `_` so the
+ * emitted type name is a valid TS identifier.
+ */
+export declare function workflowTypeBaseName(key: string): string;
+/** PascalCase base + `Input` (e.g. `CreateCheckoutSessionInput`). */
+export declare function workflowInputTypeName(key: string): string;
+/** PascalCase base + `Output` (e.g. `CreateCheckoutSessionOutput`). */
+export declare function workflowOutputTypeName(key: string): string;
+/**
+ * camelCase factory function name for a workflow key: PascalCase, then lowercase
+ * the first character (`create-checkout-session` → `createCheckoutSession`,
+ * `refresh-sheet` → `refreshSheet`). Used as the top-level exported factory
+ * function name in the per-workflow generated file, so it must be a legal
+ * function identifier: a digit-leading key (`123-job` → `_123Job`) is
+ * underscore-prefixed, and a key that lands on a JS reserved word (`delete`,
+ * `new`, `import`) is underscore-suffixed (`delete_`). Only the emitted
+ * identifier changes; the runtime call still passes the ORIGINAL key string.
+ */
+export declare function workflowFactoryName(key: string): string;

package/dist/src/lib/workflow-codegen/naming.js

@@ -0,0 +1,81 @@
+/**
+ * Identifier-naming helpers for `workflows codegen` (issue #1442).
+ *
+ * Workflow keys resolve case-insensitively server-side and may contain
+ * characters that aren't valid TS identifiers (`.`, `-`). Only the emitted
+ * identifiers are sanitized — the runtime call always passes the ORIGINAL key
+ * string.
+ *
+ * Type names: `pascalCase(key) + "Input" | "Output"` (reuses `pascalCase` from
+ * the database codegen so the two commands share one PascalCase rule).
+ * Factory property: a camelCase form of the key.
+ */
+import { pascalCase } from "../db-codegen/dbNaming.js";
+/**
+ * Ensure an identifier is a valid TS identifier start. The server accepts
+ * workflow keys matching `^[a-z0-9][a-z0-9-_]{2,}$`, so a digit-leading key
+ * like `123-job` PascalCases to `123Job` — not a legal TS type name or
+ * unquoted object property, since identifiers can't start with a digit.
+ * Prefix an underscore in that case (`123Job` → `_123Job`). Only the emitted
+ * identifier changes; the runtime call still passes the ORIGINAL key string.
+ */
+function ensureValidIdentifierStart(name) {
+    const first = name.charAt(0);
+    if (first >= "0" && first <= "9") {
+        return `_${name}`;
+    }
+    return name;
+}
+/**
+ * `create-checkout-session` / `createCheckoutSession` → `CreateCheckoutSession`.
+ * A digit-leading key (`123-job` → `_123Job`) is prefixed with `_` so the
+ * emitted type name is a valid TS identifier.
+ */
+export function workflowTypeBaseName(key) {
+    return ensureValidIdentifierStart(pascalCase(key));
+}
+/** PascalCase base + `Input` (e.g. `CreateCheckoutSessionInput`). */
+export function workflowInputTypeName(key) {
+    return `${workflowTypeBaseName(key)}Input`;
+}
+/** PascalCase base + `Output` (e.g. `CreateCheckoutSessionOutput`). */
+export function workflowOutputTypeName(key) {
+    return `${workflowTypeBaseName(key)}Output`;
+}
+/**
+ * Reserved words that cannot be used as a bare `function <name>` declaration.
+ * The per-workflow factory is now a top-level exported function (not an
+ * object-literal property), so a key that camelCases to one of these must be
+ * escaped or `export function delete(client) {}` is a syntax error. Covers ES
+ * reserved words plus the strict-mode/future set — a workflow key resolves case
+ * -insensitively and matches `^[a-z0-9][a-z0-9-_]{2,}$`, so only the lowercase
+ * single-word forms can actually collide.
+ */
+const RESERVED_WORDS = new Set([
+    "break", "case", "catch", "class", "const", "continue", "debugger",
+    "default", "delete", "do", "else", "enum", "export", "extends", "false",
+    "finally", "for", "function", "if", "import", "in", "instanceof", "new",
+    "null", "return", "super", "switch", "this", "throw", "true", "try",
+    "typeof", "var", "void", "while", "with", "yield", "let", "static",
+    "implements", "interface", "package", "private", "protected", "public",
+    "await",
+]);
+/**
+ * camelCase factory function name for a workflow key: PascalCase, then lowercase
+ * the first character (`create-checkout-session` → `createCheckoutSession`,
+ * `refresh-sheet` → `refreshSheet`). Used as the top-level exported factory
+ * function name in the per-workflow generated file, so it must be a legal
+ * function identifier: a digit-leading key (`123-job` → `_123Job`) is
+ * underscore-prefixed, and a key that lands on a JS reserved word (`delete`,
+ * `new`, `import`) is underscore-suffixed (`delete_`). Only the emitted
+ * identifier changes; the runtime call still passes the ORIGINAL key string.
+ */
+export function workflowFactoryName(key) {
+    const pascal = pascalCase(key);
+    if (pascal.length === 0)
+        return pascal;
+    const camel = pascal.charAt(0).toLowerCase() + pascal.slice(1);
+    const safeStart = ensureValidIdentifierStart(camel);
+    return RESERVED_WORDS.has(safeStart) ? `${safeStart}_` : safeStart;
+}
+//# sourceMappingURL=naming.js.map

package/dist/src/lib/workflow-codegen/naming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/naming.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvD;;;;;;;GAOG;AACH,SAAS,0BAA0B,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACjC,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,0BAA0B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU;IAClE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO;IACvE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;IACvE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;IACnE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ;IAClE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ;IACtE,OAAO;CACR,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC"}

package/dist/src/lib/workflow-codegen/schemaToTs.d.ts

@@ -0,0 +1,55 @@
+/**
+ * JSON-Schema → TypeScript converter for `workflows codegen` (issue #1442).
+ *
+ * Workflow `inputSchema`/`outputSchema` are real JSON Schema. This converter
+ * types only the subset the server's validator descends into — and it reads
+ * that interpretation from the SAME descriptor the server validator consumes,
+ * vendored into the CLI as `generated-schema-descriptor.ts` (a byte copy of
+ * `src/workflows/schema-descriptor.ts`, kept fresh by
+ * `cli/scripts/gen-workflow-schema-descriptor.mjs` + its drift guard). So the
+ * generated type and the runtime validation can never disagree on:
+ *
+ *   - `type` single scalar (`string`/`number`/`integer`/`boolean`/`null`) →
+ *     the mapped TS scalar.
+ *   - `type` array-union — only when every member is a scalar/`null` → a TS
+ *     union. A union that contains `object` or `array` renders `unknown`,
+ *     because the server only walks `properties`/`items` for the bare string
+ *     `"object"`/`"array"` — a union is never descended, so a precise-looking
+ *     type would over-promise.
+ *   - `enum` → a scalar-literal union, intersected with the declared `type`
+ *     first (the server gates on `type` before checking `enum`).
+ *   - `type: "object"` with `properties` → a nested object type; `required[]`
+ *     drives `name:` vs `name?:`. An OPEN object (no `additionalProperties:
+ *     false`) also emits `[key: string]: unknown` so extra keys the runtime
+ *     validator accepts don't hit TS excess-property errors; a CLOSED object
+ *     (`additionalProperties: false`) omits the index signature.
+ *   - `type: "array"` with `items` → `T[]`.
+ *
+ * Everything the server ignores (`$ref`, `oneOf`/`anyOf`/`allOf`, `format`,
+ * `patternProperties`, numeric constraints, tuple `items`) renders `unknown`.
+ *
+ * Errors are NOT swallowed here — a malformed schema fails upstream at parse
+ * time; this walker only sees an already-parsed schema and returns `unknown`
+ * for anything it does not recognize.
+ */
+/**
+ * Convert a parsed JSON Schema node to a TypeScript type expression. Object
+ * types render multi-line (2-space indent per level); everything else renders
+ * on a single line. `indent` is the current indentation depth.
+ */
+export declare function schemaToTsType(schema: any, indent?: number): string;
+/**
+ * True when the schema REJECTS an empty object `{}` — i.e. the client's
+ * `rootInput: options.input ?? {}` fallback would fail validation, so `input`
+ * must be a compile-time-required option (issue #1442, P4). Derived from the
+ * shared descriptor so it matches the server validator exactly:
+ *
+ *   - a declared top-level `type` that `{}` does not satisfy (anything but
+ *     `object`, e.g. `string`/`array`, or a union with no `object` arm);
+ *   - a top-level `enum` (a fresh `{}` is never an enum member);
+ *   - `type: "object"` with a non-empty `required[]` (a missing required key).
+ *
+ * An all-optional object schema, or a schema with no top-level constraints,
+ * accepts `{}` → `input` is optional.
+ */
+export declare function schemaRejectsEmptyObject(schema: any): boolean;

package/dist/src/lib/workflow-codegen/schemaToTs.js

@@ -0,0 +1,237 @@
+/**
+ * JSON-Schema → TypeScript converter for `workflows codegen` (issue #1442).
+ *
+ * Workflow `inputSchema`/`outputSchema` are real JSON Schema. This converter
+ * types only the subset the server's validator descends into — and it reads
+ * that interpretation from the SAME descriptor the server validator consumes,
+ * vendored into the CLI as `generated-schema-descriptor.ts` (a byte copy of
+ * `src/workflows/schema-descriptor.ts`, kept fresh by
+ * `cli/scripts/gen-workflow-schema-descriptor.mjs` + its drift guard). So the
+ * generated type and the runtime validation can never disagree on:
+ *
+ *   - `type` single scalar (`string`/`number`/`integer`/`boolean`/`null`) →
+ *     the mapped TS scalar.
+ *   - `type` array-union — only when every member is a scalar/`null` → a TS
+ *     union. A union that contains `object` or `array` renders `unknown`,
+ *     because the server only walks `properties`/`items` for the bare string
+ *     `"object"`/`"array"` — a union is never descended, so a precise-looking
+ *     type would over-promise.
+ *   - `enum` → a scalar-literal union, intersected with the declared `type`
+ *     first (the server gates on `type` before checking `enum`).
+ *   - `type: "object"` with `properties` → a nested object type; `required[]`
+ *     drives `name:` vs `name?:`. An OPEN object (no `additionalProperties:
+ *     false`) also emits `[key: string]: unknown` so extra keys the runtime
+ *     validator accepts don't hit TS excess-property errors; a CLOSED object
+ *     (`additionalProperties: false`) omits the index signature.
+ *   - `type: "array"` with `items` → `T[]`.
+ *
+ * Everything the server ignores (`$ref`, `oneOf`/`anyOf`/`allOf`, `format`,
+ * `patternProperties`, numeric constraints, tuple `items`) renders `unknown`.
+ *
+ * Errors are NOT swallowed here — a malformed schema fails upstream at parse
+ * time; this walker only sees an already-parsed schema and returns `unknown`
+ * for anything it does not recognize.
+ */
+import { describeSchema, isType, } from "./generated-schema-descriptor.js";
+/** Scalar JSON-schema types this converter maps to a concrete TS scalar. */
+const SCALAR_TS = {
+    string: "string",
+    number: "number",
+    integer: "number",
+    boolean: "boolean",
+    null: "null",
+};
+/** A shared empty-object reference for the `{}`-rejection probe below. */
+const EMPTY_OBJECT = Object.freeze({});
+/**
+ * Render a scalar-literal union from an `enum` array. `JSON.stringify` emits a
+ * valid TS literal for a string, number, boolean, or `null`. An object/array
+ * member has no TS literal form, so the whole enum falls back to `unknown`
+ * (returns `null` here).
+ */
+function tsUnionFromScalarEnum(values) {
+    if (!Array.isArray(values) || values.length === 0)
+        return null;
+    const literals = [];
+    const seen = new Set();
+    for (const v of values) {
+        if (v !== null && (typeof v === "object" || Array.isArray(v))) {
+            // Objects/arrays are not representable as TS literals.
+            return null;
+        }
+        const literal = JSON.stringify(v);
+        if (literal === undefined)
+            return null; // e.g. `undefined` in the enum
+        if (!seen.has(literal)) {
+            seen.add(literal);
+            literals.push(literal);
+        }
+    }
+    return literals.length > 0 ? literals.join(" | ") : null;
+}
+/** True when a rendered type is a bare identifier safe to suffix with `[]`. */
+function isSimpleTypeExpr(expr) {
+    return /^[A-Za-z0-9_.]+(\[\])*$/.test(expr);
+}
+/**
+ * Convert a parsed JSON Schema node to a TypeScript type expression. Object
+ * types render multi-line (2-space indent per level); everything else renders
+ * on a single line. `indent` is the current indentation depth.
+ */
+export function schemaToTsType(schema, indent = 0) {
+    const d = describeSchema(schema);
+    // `enum` is the most specific constraint — the server checks it AFTER the
+    // type gate, so when both are present only the enum members that satisfy the
+    // declared type(s) are reachable. Emit just those (intersect with `type`
+    // via the shared `isType`). If the type filter leaves nothing representable,
+    // fall through to plain `type` rendering rather than over-promising.
+    if (d.enumValues) {
+        const allowedTypes = d.types;
+        const candidates = allowedTypes.length > 0
+            ? d.enumValues.filter((v) => allowedTypes.some((t) => isType(v, t)))
+            : d.enumValues;
+        if (candidates.length === 0) {
+            // No enum member satisfies the declared type gate (or the enum is empty),
+            // so the runtime rejects EVERY value: the type gate lets some values
+            // through, then `enum.includes(value)` fails them all. The reachable set
+            // is empty → an uninhabitable `never`. Widening to the declared type here
+            // (e.g. `{type:"string", enum:[1]}` → `string`) would let typed callers
+            // pass values the server always rejects.
+            return "never";
+        }
+        const union = tsUnionFromScalarEnum(candidates);
+        if (union !== null)
+            return union;
+        // Candidates survive the type gate but aren't representable as TS literals
+        // (object/array enum members). With no declared type there is nothing to
+        // fall back on → `unknown`; otherwise fall through to plain `type`.
+        if (allowedTypes.length === 0)
+            return "unknown";
+    }
+    // Array-union type (e.g. `["string", "null"]`). Only scalar/null members get
+    // a precise union — the server never descends `properties`/`items` for a
+    // union, so an object/array member forces `unknown`.
+    if (d.isUnion) {
+        const parts = [];
+        const seen = new Set();
+        for (const t of d.types) {
+            const mapped = SCALAR_TS[t];
+            if (mapped === undefined)
+                return "unknown"; // object/array/unknown member
+            if (!seen.has(mapped)) {
+                seen.add(mapped);
+                parts.push(mapped);
+            }
+        }
+        return parts.length > 0 ? parts.join(" | ") : "unknown";
+    }
+    if (d.singularType === null) {
+        // No usable single type and no enum — the server enforces nothing.
+        return "unknown";
+    }
+    // Object: the server walks `properties`/`required` ONLY when the type is
+    // exactly `"object"`. `d.object` is non-null only in that case with declared
+    // properties; a typed object with no properties is open → Record.
+    if (d.singularType === "object") {
+        if (d.object)
+            return renderObjectType(d.object, indent);
+        return "Record<string, unknown>";
+    }
+    // Array: the server walks `items` ONLY when the type is exactly `"array"`.
+    if (d.singularType === "array") {
+        const items = d.array ? d.array.items : undefined;
+        // Missing or tuple `items` (an array of schemas) is ignored → unknown[].
+        if (!items || typeof items !== "object" || Array.isArray(items)) {
+            return "unknown[]";
+        }
+        const elem = schemaToTsType(items, indent);
+        return isSimpleTypeExpr(elem) ? `${elem}[]` : `(${elem})[]`;
+    }
+    // Single scalar type.
+    const scalar = SCALAR_TS[d.singularType];
+    return scalar ?? "unknown";
+}
+/**
+ * Render an object descriptor (`describeSchema(...).object`) as a TS object
+ * type. `required[]` drives optionality. An OPEN object (not
+ * `additionalProperties: false`) emits `[key: string]: unknown` so extra keys
+ * the runtime accepts don't trip TS excess-property checks; a CLOSED object
+ * omits it.
+ */
+function renderObjectType(objectDesc, indent) {
+    const { properties, required, additionalPropertiesClosed } = objectDesc;
+    const propNames = Object.keys(properties);
+    const requiredSet = new Set(Array.isArray(required)
+        ? required.filter((k) => typeof k === "string")
+        : []);
+    const pad = "  ".repeat(indent + 1);
+    const closePad = "  ".repeat(indent);
+    const propNameSet = new Set(propNames);
+    const lines = ["{"];
+    for (const name of propNames) {
+        const childType = schemaToTsType(properties[name], indent + 1);
+        const optional = requiredSet.has(name) ? "" : "?";
+        lines.push(`${pad}${quotePropIfNeeded(name)}${optional}: ${childType};`);
+    }
+    // A key listed in `required` but absent from `properties` has no declared
+    // child schema, yet the validator still rejects an object missing it. Emit it
+    // as a required `unknown` member so the generated type demands the key too —
+    // otherwise `{properties:{}, required:["id"]}` would accept `{}`, which the
+    // runtime rejects.
+    for (const name of requiredSet) {
+        if (!propNameSet.has(name)) {
+            lines.push(`${pad}${quotePropIfNeeded(name)}: unknown;`);
+        }
+    }
+    // Open objects accept extra keys at runtime; model that with an index
+    // signature so a call site passing an unlisted key still compiles.
+    if (!additionalPropertiesClosed) {
+        lines.push(`${pad}[key: string]: unknown;`);
+    }
+    lines.push(`${closePad}}`);
+    return lines.join("\n");
+}
+/**
+ * Quote an object-property name when it is not a plain identifier (so keys with
+ * hyphens, dots, or other characters render as valid TS).
+ */
+function quotePropIfNeeded(name) {
+    if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name))
+        return name;
+    return JSON.stringify(name);
+}
+/**
+ * True when the schema REJECTS an empty object `{}` — i.e. the client's
+ * `rootInput: options.input ?? {}` fallback would fail validation, so `input`
+ * must be a compile-time-required option (issue #1442, P4). Derived from the
+ * shared descriptor so it matches the server validator exactly:
+ *
+ *   - a declared top-level `type` that `{}` does not satisfy (anything but
+ *     `object`, e.g. `string`/`array`, or a union with no `object` arm);
+ *   - a top-level `enum` (a fresh `{}` is never an enum member);
+ *   - `type: "object"` with a non-empty `required[]` (a missing required key).
+ *
+ * An all-optional object schema, or a schema with no top-level constraints,
+ * accepts `{}` → `input` is optional.
+ */
+export function schemaRejectsEmptyObject(schema) {
+    const d = describeSchema(schema);
+    // 1. Type gate: `{}` must satisfy at least one declared type.
+    if (d.types.length && !d.types.some((t) => isType(EMPTY_OBJECT, t))) {
+        return true;
+    }
+    // 2. Enum gate: a JSON enum never contains a value reference-equal to `{}`,
+    //    so any enum rejects it (mirrors `enum.includes(value)` at runtime).
+    if (d.enumValues && !d.enumValues.includes(EMPTY_OBJECT)) {
+        return true;
+    }
+    // 3. Object required: any required key is absent from `{}`.
+    if (d.object) {
+        for (const key of d.object.required) {
+            if (!(key in EMPTY_OBJECT))
+                return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=schemaToTs.js.map

package/dist/src/lib/workflow-codegen/schemaToTs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaToTs.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/schemaToTs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EACL,cAAc,EACd,MAAM,GAEP,MAAM,kCAAkC,CAAC;AAE1C,4EAA4E;AAC5E,MAAM,SAAS,GAA2B;IACxC,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,0EAA0E;AAC1E,MAAM,YAAY,GAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,MAAa;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,uDAAuD;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;QACvE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAW,EAAE,MAAM,GAAG,CAAC;IACpD,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEjC,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,qEAAqE;IACrE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC;QAC7B,MAAM,UAAU,GACd,YAAY,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAC7B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAC5C;YACH,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACnB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,0EAA0E;YAC1E,qEAAqE;YACrE,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,yCAAyC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACjC,2EAA2E;QAC3E,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;IAClD,CAAC;IAED,6EAA6E;IAC7E,yEAAyE;IACzE,qDAAqD;IACrD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC,CAAC,8BAA8B;YAC1E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC5B,mEAAmE;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,yEAAyE;QACzE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;IAC9D,CAAC;IAED,sBAAsB;IACtB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,UAAmD,EACnD,MAAc;IAEd,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,0BAA0B,EAAE,GAAG,UAAU,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE1C,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACpD,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,SAAS,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAa,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,mBAAmB;IACnB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,mEAAmE;IACnE,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,yBAAyB,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAW;IAClD,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEjC,8DAA8D;IAC9D,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,4DAA4D;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primitive-admin",
-  "version": "1.1.0-alpha.44",
+  "version": "1.1.0-alpha.45",
   "description": "CLI for administering Primitive applications",
   "type": "module",
   "bin": {
@@ -20,7 +20,9 @@
   "scripts": {
     "gen:allowlist": "node scripts/gen-allowlist.mjs",
     "gen:allowlist:check": "node scripts/gen-allowlist.mjs --check",
-    "prebuild": "node scripts/gen-allowlist.mjs",
+    "gen:workflow-descriptor": "node scripts/gen-workflow-schema-descriptor.mjs",
+    "gen:workflow-descriptor:check": "node scripts/gen-workflow-schema-descriptor.mjs --check",
+    "prebuild": "node scripts/gen-allowlist.mjs && node scripts/gen-workflow-schema-descriptor.mjs",
     "build": "tsc",
     "typecheck": "tsc --noEmit",
     "prepublishOnly": "pnpm run build",