primitive-admin 1.1.0-alpha.47 → 1.1.0-alpha.49

package/dist/src/lib/workflow-codegen/generator.js

@@ -16,11 +16,24 @@
  *     `schema-validation` descriptor) so the generated types match runtime
  *     validation exactly. A malformed schema throws (fail-and-exit).
  *   - `.runSync` is emitted only for `syncCallable: true` workflows (the server
- *     rejects run-sync otherwise); `.start` and `.getStatus` for every
- *     non-reserved workflow (the typed async path, issue #1512 — async-only
- *     workflows are exactly the ones that need a typed `getStatus`). No
- *     `.terminate` member is emitted (the factory stays a start/status helper;
- *     typed termination is available via the client's explicit `terminate<O>`).
+ *     rejects run-sync otherwise); `.start`, `.getStatus`, and `.terminate` for
+ *     every non-reserved workflow (the typed async path, issue #1512 —
+ *     async-only workflows are exactly the ones that need a typed `getStatus` /
+ *     `terminate`). `.terminate` binds `<Key>Output` (a terminated run can carry
+ *     partial output); issue #1543 added the member, reversing #1512's
+ *     start/status-only decision.
+ *   - `.define` is emitted only for an apply-mode workflow
+ *     (`requiresClientApply !== false`, the server's default). It binds
+ *     `<Key>Output` so the `onApply` handler's `output` is the workflow's real
+ *     output type rather than `any` (issue #1543, on top of #1542's
+ *     `define<O>` / `WorkflowDefineOptions<O>` generics). `getPendingApplies`
+ *     gets no member — #1542 made it a concrete `PendingApply[]` with no output
+ *     to bind, and it is scoped to a document rather than a workflow.
+ *   - `.cronTriggers.{create,update}` bind `<Key>Input` to the trigger's
+ *     `rootInput` and pin `workflowKey`, so a cron helper can't be redirected at
+ *     another workflow (issue #1543). `rootInput` is `Partial<<Key>Input>` for
+ *     an object-shaped input schema (an `inputMapping` may supply the rest) and
+ *     the full `<Key>Input` otherwise.
  *   - `input` is a REQUIRED option iff the schema rejects `{}` (the client's
  *     `input ?? {}` fallback would fail validation); otherwise `input?`.
  *   - The runtime call always passes the ORIGINAL key string; only identifiers
@@ -30,26 +43,16 @@
  *     shared `writeOrCheckGeneratedFiles`, exactly like `databases codegen`.
  */
 import * as path from "path";
-import { parseConfigToml } from "../config-toml.js";
-import { safeJsonParse } from "../workflow-payload.js";
 import { writeOrCheckGeneratedFiles, } from "../codegen-shared/generatedFiles.js";
 import { fingerprintToml } from "../db-codegen/dbFingerprint.js";
-import { schemaToTsType, schemaRejectsEmptyObject } from "./schemaToTs.js";
+import { schemaToTsType } from "./schemaToTs.js";
 import { describeSchema } from "./generated-schema-descriptor.js";
+import { describeWorkflowInvoker } from "./invokerIR.js";
 import { workflowInputTypeName, workflowOutputTypeName, workflowFactoryName, } from "./naming.js";
-/** Prefix marking a platform-owned workflow key (mirrors the server's
- * `INTERNAL_WORKFLOW_KEY_PREFIX`; inlined because the CLI cannot import from
- * `src/`). Such workflows are never client-invocable and are skipped. */
-const INTERNAL_WORKFLOW_KEY_PREFIX = "__internal.";
 /** Suffix identifying a generated file (shared with `databases codegen`). */
 export const GENERATED_FILE_SUFFIX = ".generated.ts";
 /** The client package the generated file imports its types from. */
 const CLIENT_PACKAGE = "js-bao-wss-client";
-/** True for a platform-owned workflow key. */
-function isReservedKey(key) {
-    return (typeof key === "string" &&
-        key.trim().toLowerCase().startsWith(INTERNAL_WORKFLOW_KEY_PREFIX));
-}
 /**
  * Render a top-level `<Name>Input`/`<Name>Output` declaration. An absent schema
  * → `unknown`. A plain object type → an `interface`; anything else → a `type`
@@ -74,35 +77,39 @@ function renderTypeDecl(name, schema) {
  * Parse a single workflow TOML into the data the emitter needs. Throws on
  * malformed schema JSON (fail-and-exit) — the honest `unknown` fallback is for
  * valid-but-untypeable schemas only. Returns null for a reserved workflow.
+ *
+ * The operation metadata (key, `syncCallable`, required-vs-optional `input`,
+ * parsed schemas) comes from the SHARED `describeWorkflowInvoker` IR so the TS
+ * and Swift invokers can never disagree (#1547 binding item 5). Only the
+ * TS-specific naming + type-declaration rendering happens here.
  */
 function parseWorkflow(input) {
     // #1464 removed `@iarna/toml`; #1446 makes `sync pull` emit schemas as native
     // TOML tables (incl. mixed-type enums like `enum = ["ok", 1]`, TOML 1.0). The
-    // `parseConfigToml` facade parses both. `safeJsonParse` still owns the
-    // string-vs-inline-table schema handling.
-    const data = parseConfigToml(input.tomlContent);
-    const workflow = data?.workflow ?? {};
-    const key = typeof workflow.key === "string" && workflow.key.length > 0
-        ? workflow.key
-        : input.fileStem;
-    if (isReservedKey(key))
-        return null;
-    // safeJsonParse throws on invalid JSON in a schema string — let it bubble.
-    const inputSchema = safeJsonParse(workflow.inputSchema);
-    const outputSchema = safeJsonParse(workflow.outputSchema);
-    const inputTypeName = workflowInputTypeName(key);
-    const outputTypeName = workflowOutputTypeName(key);
+    // shared IR uses `parseConfigToml` + `safeJsonParse` under the hood.
+    const ir = describeWorkflowInvoker({
+        fileStem: input.fileStem,
+        tomlContent: input.tomlContent,
+    });
+    if (!ir)
+        return null; // reserved workflow
+    const inputTypeName = workflowInputTypeName(ir.key);
+    const outputTypeName = workflowOutputTypeName(ir.key);
     return {
-        key,
-        syncCallable: workflow.syncCallable === true,
+        key: ir.key,
+        syncCallable: ir.syncCallable,
         inputTypeName,
         outputTypeName,
-        factoryName: workflowFactoryName(key),
-        inputDecl: renderTypeDecl(inputTypeName, inputSchema),
-        outputDecl: renderTypeDecl(outputTypeName, outputSchema),
-        // `input` is required iff the schema rejects the client's `{}` fallback.
-        // A schema-less workflow (`undefined`) accepts anything → optional.
-        inputRequired: inputSchema !== undefined && schemaRejectsEmptyObject(inputSchema),
+        factoryName: workflowFactoryName(ir.key),
+        inputDecl: renderTypeDecl(inputTypeName, ir.inputSchema),
+        outputDecl: renderTypeDecl(outputTypeName, ir.outputSchema),
+        inputRequired: ir.inputRequired,
+        // Object-shaped only when the schema declares exactly `type: "object"` —
+        // the one case where `Partial<<Key>Input>` is a sound cron `rootInput`
+        // type. Schema-less / union / scalar / array → not object-shaped.
+        inputIsObjectShaped: ir.inputSchema !== undefined &&
+            describeSchema(ir.inputSchema).singularType === "object",
+        requiresClientApply: ir.requiresClientApply,
     };
 }
 /** Render the typed invoker factory for one workflow. */
@@ -149,6 +156,65 @@ function renderFactory(wf) {
         `        ...opts,\n` +
         `        workflowKey: ${keyLiteral},\n` +
         `      }),`);
+    // Typed termination (#1543), emitted for EVERY non-reserved workflow — any
+    // run can be terminated. `output` is bound to `<Key>Output` (a terminated run
+    // can carry partial output), same schema-less → `unknown` rule as getStatus.
+    // `runKey` stays required. Same spread-first / key-last ordering so an untyped
+    // caller cannot override the key and terminate the wrong workflow's run. This
+    // member reverses #1512's start/status-only decision.
+    lines.push(`    terminate: (opts: Omit<TerminateWorkflowOptions, "workflowKey">) =>\n` +
+        `      client.workflows.terminate<${wf.outputTypeName}>({\n` +
+        `        ...opts,\n` +
+        `        workflowKey: ${keyLiteral},\n` +
+        `      }),`);
+    // Typed apply handler (#1543 Phase 2), emitted ONLY for an apply-mode
+    // workflow (`requiresClientApply !== false` — the same default the server
+    // uses to decide a completed run needs a client apply). `WorkflowDefineOptions<O>`
+    // and `WorkflowApplyHandler<O>` come from #1542; binding `<Key>Output` here
+    // makes the `onApply` callback's `output` the workflow's real output type
+    // instead of `any`. The key is passed as a positional argument, so there is
+    // no spread a caller could use to override it.
+    //
+    // No `getPendingApplies` member: #1542 shipped it as a concrete
+    // `PendingApply[]` (the server element carries no `output`, so there is no
+    // output generic to bind), and the call is scoped to a DOCUMENT rather than
+    // a workflow — a per-workflow member would bind nothing and would wrongly
+    // suggest the result only covers this workflow.
+    if (wf.requiresClientApply) {
+        lines.push(`    define: (options: WorkflowDefineOptions<${wf.outputTypeName}>) =>\n` +
+            `      client.workflows.define<${wf.outputTypeName}>(${keyLiteral}, options),`);
+    }
+    // Typed cron-trigger create/update (#1543), folded INTO the factory (not a
+    // separate export). The client's own `rootInput` generic (#1542) is bound to
+    // `<Key>Input`: `Partial<...>` for an object-shaped schema (an `inputMapping`
+    // may supply the rest), the full type otherwise. Binding the generic rather
+    // than restating the field keeps the caller-facing params in step with the
+    // client contract — notably `update` accepts `rootInput: null` to clear a
+    // stored root input, while `create` does not (the server rejects a null there
+    // with a 400). `workflowKey` is Omit-ted from the caller-facing params and
+    // pinned LAST so a caller can't redirect the trigger at another workflow.
+    // Nothing is spread after `workflowKey` — `rootInput` rides in via `...params`
+    // — preserving the key-last convention.
+    const rootInputType = wf.inputIsObjectShaped
+        ? `Partial<${wf.inputTypeName}>`
+        : wf.inputTypeName;
+    lines.push(`    cronTriggers: {\n` +
+        `      create: (\n` +
+        `        params: Omit<CreateCronTriggerParams<${rootInputType}>, "workflowKey">\n` +
+        `      ) =>\n` +
+        `        client.cronTriggers.create<${rootInputType}>({\n` +
+        `          ...params,\n` +
+        `          workflowKey: ${keyLiteral},\n` +
+        `        }),\n` +
+        `      update: (\n` +
+        `        triggerId: string,\n` +
+        `        params: Omit<UpdateCronTriggerParams<${rootInputType}>, "workflowKey">\n` +
+        `      ) =>\n` +
+        `        client.cronTriggers.update<${rootInputType}>(triggerId, {\n` +
+        `          ...params,\n` +
+        `          workflowKey: ${keyLiteral},\n` +
+        `        }),\n` +
+        `    },`);
     lines.push(`  };`, `}`);
     return lines.join("\n");
 }
@@ -163,15 +229,24 @@ export function renderWorkflowFile(input) {
         return null;
     const fingerprint = fingerprintToml(input.tomlContent);
     // Only import the option types actually referenced, so the generated file
-    // compiles under a consumer's `noUnusedLocals`. `GetWorkflowStatusOptions` is
-    // always referenced now — every factory emits a `getStatus` member (#1512).
+    // compiles under a consumer's `noUnusedLocals`. `GetWorkflowStatusOptions`,
+    // `TerminateWorkflowOptions`, and the two cron-param types are always
+    // referenced now — every factory emits `getStatus`, `terminate` (#1512 /
+    // #1543), and `cronTriggers.{create,update}` (#1543).
     const imports = [
+        "CreateCronTriggerParams",
         "GetWorkflowStatusOptions",
         "JsBaoClient",
         "StartWorkflowOptions",
+        "TerminateWorkflowOptions",
+        "UpdateCronTriggerParams",
     ];
     if (wf.syncCallable)
         imports.push("RunSyncWorkflowOptions");
+    // Only an apply-mode workflow emits `define`, so its option type is imported
+    // only then — a non-apply-mode file would otherwise fail `noUnusedLocals`.
+    if (wf.requiresClientApply)
+        imports.push("WorkflowDefineOptions");
     imports.sort();
     const blocks = [];
     blocks.push([

package/dist/src/lib/workflow-codegen/generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB;;yEAEyE;AACzE,MAAM,4BAA4B,GAAG,aAAa,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAErD,oEAAoE;AACpE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AA0C3C,8CAA8C;AAC9C,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAW;IAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,eAAe,IAAI,aAAa,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1D,OAAO,oBAAoB,IAAI,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,eAAe,IAAI,MAAM,IAAI,GAAG,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAA2B;IAChD,8EAA8E;IAC9E,8EAA8E;IAC9E,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAQ,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GACP,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,GAAG;QACd,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IAErB,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,2EAA2E;IAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO;QACL,GAAG;QACH,YAAY,EAAE,QAAQ,CAAC,YAAY,KAAK,IAAI;QAC5C,aAAa;QACb,cAAc;QACd,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC;QACrC,SAAS,EAAE,cAAc,CAAC,aAAa,EAAE,WAAW,CAAC;QACrD,UAAU,EAAE,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC;QACxD,yEAAyE;QACzE,oEAAoE;QACpE,aAAa,EACX,WAAW,KAAK,SAAS,IAAI,wBAAwB,CAAC,WAAW,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,EAAkB;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa;QAClC,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;QAC9B,CAAC,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa;QACtB,mBAAmB,EAAE,CAAC,WAAW,yBAAyB;QAC1D,YAAY;KACb,CAAC;IACF,8EAA8E;IAC9E,qEAAqE;IACrE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,kBAAkB;YAChB,iBAAiB,WAAW,8DAA8D;YAC1F,YAAY;YACZ,kCAAkC,EAAE,CAAC,aAAa,KAAK,EAAE,CAAC,cAAc,OAAO;YAC/E,oBAAoB;YACpB,wBAAwB,UAAU,KAAK;YACvC,WAAW,CACd,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,gBAAgB;QACd,iBAAiB,WAAW,4DAA4D;QACxF,YAAY;QACZ,gCAAgC,EAAE,CAAC,aAAa,OAAO;QACvD,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,4CAA4C;IAC5C,KAAK,CAAC,IAAI,CACR,2EAA2E;QACzE,oCAAoC,EAAE,CAAC,cAAc,OAAO;QAC5D,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA2B;IAE3B,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAErB,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEvD,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,OAAO,GAAG;QACd,0BAA0B;QAC1B,aAAa;QACb,sBAAsB;KACvB,CAAC;IACF,IAAI,EAAE,CAAC,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CACT;QACE,oCAAoC,EAAE,CAAC,GAAG,sBAAsB;QAChE,qDAAqD;QACrD,mBAAmB,WAAW,EAAE;KACjC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,MAAM,CAAC,IAAI,CACT,kBAAkB,OAAO;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;SACrB,IAAI,CAAC,IAAI,CAAC,aAAa,cAAc,IAAI,CAC7C,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/B,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,8BAA8B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,MAAM,EACN,GAAG,QAAQ,CAAC,GAAG,GAAG,qBAAqB,EAAE,CAC1C,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,0BAA0B,CAAC;QACtC,SAAS,EAAE,MAAM;QACjB,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,0EAA0E;QAC1E,2EAA2E;QAC3E,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;QAC9C,eAAe,EAAE,qBAAqB;KACvC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAErD,oEAAoE;AACpE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAyD3C;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAW;IAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,eAAe,IAAI,aAAa,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1D,OAAO,oBAAoB,IAAI,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,eAAe,IAAI,MAAM,IAAI,GAAG,CAAC;AAC1C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,KAA2B;IAChD,8EAA8E;IAC9E,8EAA8E;IAC9E,qEAAqE;IACrE,MAAM,EAAE,GAAG,uBAAuB,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IAE1C,MAAM,aAAa,GAAG,qBAAqB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,sBAAsB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAEtD,OAAO;QACL,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,YAAY,EAAE,EAAE,CAAC,YAAY;QAC7B,aAAa;QACb,cAAc;QACd,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC,GAAG,CAAC;QACxC,SAAS,EAAE,cAAc,CAAC,aAAa,EAAE,EAAE,CAAC,WAAW,CAAC;QACxD,UAAU,EAAE,cAAc,CAAC,cAAc,EAAE,EAAE,CAAC,YAAY,CAAC;QAC3D,aAAa,EAAE,EAAE,CAAC,aAAa;QAC/B,yEAAyE;QACzE,uEAAuE;QACvE,kEAAkE;QAClE,mBAAmB,EACjB,EAAE,CAAC,WAAW,KAAK,SAAS;YAC5B,cAAc,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,YAAY,KAAK,QAAQ;QAC1D,mBAAmB,EAAE,EAAE,CAAC,mBAAmB;KAC5C,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,EAAkB;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa;QAClC,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;QAC9B,CAAC,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa;QACtB,mBAAmB,EAAE,CAAC,WAAW,yBAAyB;QAC1D,YAAY;KACb,CAAC;IACF,8EAA8E;IAC9E,qEAAqE;IACrE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,kBAAkB;YAChB,iBAAiB,WAAW,8DAA8D;YAC1F,YAAY;YACZ,kCAAkC,EAAE,CAAC,aAAa,KAAK,EAAE,CAAC,cAAc,OAAO;YAC/E,oBAAoB;YACpB,wBAAwB,UAAU,KAAK;YACvC,WAAW,CACd,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,gBAAgB;QACd,iBAAiB,WAAW,4DAA4D;QACxF,YAAY;QACZ,gCAAgC,EAAE,CAAC,aAAa,OAAO;QACvD,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,4CAA4C;IAC5C,KAAK,CAAC,IAAI,CACR,2EAA2E;QACzE,oCAAoC,EAAE,CAAC,cAAc,OAAO;QAC5D,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,sDAAsD;IACtD,KAAK,CAAC,IAAI,CACR,2EAA2E;QACzE,oCAAoC,EAAE,CAAC,cAAc,OAAO;QAC5D,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,sEAAsE;IACtE,0EAA0E;IAC1E,mFAAmF;IACnF,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,+CAA+C;IAC/C,EAAE;IACF,gEAAgE;IAChE,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,gDAAgD;IAChD,IAAI,EAAE,CAAC,mBAAmB,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,+CAA+C,EAAE,CAAC,cAAc,SAAS;YACvE,iCAAiC,EAAE,CAAC,cAAc,KAAK,UAAU,aAAa,CACjF,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,aAAa,GAAG,EAAE,CAAC,mBAAmB;QAC1C,CAAC,CAAC,WAAW,EAAE,CAAC,aAAa,GAAG;QAChC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC;IACrB,KAAK,CAAC,IAAI,CACR,uBAAuB;QACrB,mBAAmB;QACnB,gDAAgD,aAAa,qBAAqB;QAClF,cAAc;QACd,sCAAsC,aAAa,OAAO;QAC1D,wBAAwB;QACxB,0BAA0B,UAAU,KAAK;QACzC,eAAe;QACf,mBAAmB;QACnB,8BAA8B;QAC9B,gDAAgD,aAAa,qBAAqB;QAClF,cAAc;QACd,sCAAsC,aAAa,kBAAkB;QACrE,wBAAwB;QACxB,0BAA0B,UAAU,KAAK;QACzC,eAAe;QACf,QAAQ,CACX,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA2B;IAE3B,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAErB,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEvD,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,OAAO,GAAG;QACd,yBAAyB;QACzB,0BAA0B;QAC1B,aAAa;QACb,sBAAsB;QACtB,0BAA0B;QAC1B,yBAAyB;KAC1B,CAAC;IACF,IAAI,EAAE,CAAC,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5D,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,EAAE,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,EAAE,CAAC;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CACT;QACE,oCAAoC,EAAE,CAAC,GAAG,sBAAsB;QAChE,qDAAqD;QACrD,mBAAmB,WAAW,EAAE;KACjC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,MAAM,CAAC,IAAI,CACT,kBAAkB,OAAO;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;SACrB,IAAI,CAAC,IAAI,CAAC,aAAa,cAAc,IAAI,CAC7C,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/B,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,8BAA8B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,MAAM,EACN,GAAG,QAAQ,CAAC,GAAG,GAAG,qBAAqB,EAAE,CAC1C,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,0BAA0B,CAAC;QACtC,SAAS,EAAE,MAAM;QACjB,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,0EAA0E;QAC1E,2EAA2E;QAC3E,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;QAC9C,eAAe,EAAE,qBAAqB;KACvC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/lib/workflow-codegen/invokerIR.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Shared workflow-invoker IR (issue #1547, Phase 3).
+ *
+ * The typed invoker factory is generated on BOTH the TypeScript side
+ * (`workflow-codegen/generator.ts`) and the Swift side
+ * (`swift-codegen/generator.ts`). The maintainer decision (item 5, binding)
+ * requires that invoker generation reuse ONE description of the workflow's
+ * operation metadata — the runtime key, whether `runSync` is emitted
+ * (`syncCallable`), whether `input` is a required argument, and whether the
+ * workflow is apply-mode (`requiresClientApply`) — rather than each language
+ * renderer re-deriving it from the TOML. This module is that
+ * single source: both renderers call `describeWorkflowInvoker` and read the
+ * SAME `WorkflowInvokerIR`, so the two clients can never disagree on which
+ * operations a workflow exposes or whether its input is required.
+ *
+ * What stays language-specific (and is therefore NOT in the IR): the emitted
+ * identifiers (the TS and Swift base names come from different naming helpers)
+ * and the rendered type declarations. The IR carries only the parsed schemas +
+ * the neutral operation flags; each renderer turns the schemas into its own
+ * syntax.
+ */
+/**
+ * Prefix marking a platform-owned workflow key (mirrors the server's
+ * `INTERNAL_WORKFLOW_KEY_PREFIX`; inlined because the CLI cannot import from
+ * `src/`). Such workflows are never client-invocable and are skipped. This is
+ * the single copy the TS and Swift generators now share.
+ */
+export declare const INTERNAL_WORKFLOW_KEY_PREFIX = "__internal.";
+/** Raw inputs a renderer already has on hand for one workflow TOML. */
+export interface WorkflowInvokerSource {
+    /** Source `.toml` filename stem (fallback key when `[workflow].key` is absent). */
+    fileStem: string;
+    /** Raw TOML content (already read from disk). */
+    tomlContent: string;
+}
+/**
+ * Language-neutral description of one workflow's invoker surface. Consumed by
+ * both the TS and Swift invoker renderers; neither reconstructs these decisions
+ * on its own.
+ */
+export interface WorkflowInvokerIR {
+    /**
+     * The ORIGINAL workflow key. The runtime call always passes this verbatim —
+     * only emitted identifiers are sanitized (per language).
+     */
+    key: string;
+    /**
+     * Whether the workflow is sync-callable. `runSync` is emitted ONLY when this
+     * is true (the server rejects run-sync for non-sync-callable workflows), on
+     * both clients.
+     */
+    syncCallable: boolean;
+    /**
+     * Whether `input` is a REQUIRED argument. True iff the input schema rejects
+     * the empty object `{}` (the client's `input ?? {}` fallback would then fail
+     * validation). A schema-less workflow accepts anything → optional. Computed
+     * ONCE here via `schemaRejectsEmptyObject`, shared with both renderers.
+     */
+    inputRequired: boolean;
+    /**
+     * Whether the workflow is apply-mode — its completed run waits for a client
+     * to apply the output. Mirrors the server's default: apply-mode unless the
+     * TOML sets `requiresClientApply = false` (`src/workflows/app-workflow.ts`).
+     * Only an apply-mode workflow gets a `define` member on the generated
+     * invoker (issue #1543). Parsed here, alongside `syncCallable`, so no
+     * renderer reparses the TOML for it.
+     */
+    requiresClientApply: boolean;
+    /** Parsed input schema, or `undefined` when absent. */
+    inputSchema: unknown;
+    /** Parsed output schema, or `undefined` when absent. */
+    outputSchema: unknown;
+}
+/** True for a platform-owned (reserved) workflow key. */
+export declare function isReservedWorkflowKey(key: string): boolean;
+/**
+ * Parse one workflow TOML into the shared invoker IR. Returns `null` for a
+ * reserved (`__internal.*`) workflow (no invoker is generated). Throws on
+ * malformed schema JSON (fail-and-exit) — the honest `undefined`/`unknown`
+ * fallback is for valid-but-untypeable schemas only.
+ *
+ * This is the ONE place that reads `syncCallable` / `requiresClientApply` and
+ * computes required-vs-optional `input`; both language generators call it.
+ */
+export declare function describeWorkflowInvoker(source: WorkflowInvokerSource): WorkflowInvokerIR | null;

package/dist/src/lib/workflow-codegen/invokerIR.js

@@ -0,0 +1,71 @@
+/**
+ * Shared workflow-invoker IR (issue #1547, Phase 3).
+ *
+ * The typed invoker factory is generated on BOTH the TypeScript side
+ * (`workflow-codegen/generator.ts`) and the Swift side
+ * (`swift-codegen/generator.ts`). The maintainer decision (item 5, binding)
+ * requires that invoker generation reuse ONE description of the workflow's
+ * operation metadata — the runtime key, whether `runSync` is emitted
+ * (`syncCallable`), whether `input` is a required argument, and whether the
+ * workflow is apply-mode (`requiresClientApply`) — rather than each language
+ * renderer re-deriving it from the TOML. This module is that
+ * single source: both renderers call `describeWorkflowInvoker` and read the
+ * SAME `WorkflowInvokerIR`, so the two clients can never disagree on which
+ * operations a workflow exposes or whether its input is required.
+ *
+ * What stays language-specific (and is therefore NOT in the IR): the emitted
+ * identifiers (the TS and Swift base names come from different naming helpers)
+ * and the rendered type declarations. The IR carries only the parsed schemas +
+ * the neutral operation flags; each renderer turns the schemas into its own
+ * syntax.
+ */
+import { parseConfigToml } from "../config-toml.js";
+import { safeJsonParse } from "../workflow-payload.js";
+import { schemaRejectsEmptyObject } from "./schemaToTs.js";
+/**
+ * Prefix marking a platform-owned workflow key (mirrors the server's
+ * `INTERNAL_WORKFLOW_KEY_PREFIX`; inlined because the CLI cannot import from
+ * `src/`). Such workflows are never client-invocable and are skipped. This is
+ * the single copy the TS and Swift generators now share.
+ */
+export const INTERNAL_WORKFLOW_KEY_PREFIX = "__internal.";
+/** True for a platform-owned (reserved) workflow key. */
+export function isReservedWorkflowKey(key) {
+    return (typeof key === "string" &&
+        key.trim().toLowerCase().startsWith(INTERNAL_WORKFLOW_KEY_PREFIX));
+}
+/**
+ * Parse one workflow TOML into the shared invoker IR. Returns `null` for a
+ * reserved (`__internal.*`) workflow (no invoker is generated). Throws on
+ * malformed schema JSON (fail-and-exit) — the honest `undefined`/`unknown`
+ * fallback is for valid-but-untypeable schemas only.
+ *
+ * This is the ONE place that reads `syncCallable` / `requiresClientApply` and
+ * computes required-vs-optional `input`; both language generators call it.
+ */
+export function describeWorkflowInvoker(source) {
+    const data = parseConfigToml(source.tomlContent);
+    const workflow = data?.workflow ?? {};
+    const key = typeof workflow.key === "string" && workflow.key.length > 0
+        ? workflow.key
+        : source.fileStem;
+    if (isReservedWorkflowKey(key))
+        return null;
+    // safeJsonParse throws on invalid JSON in a schema string — let it bubble.
+    const inputSchema = safeJsonParse(workflow.inputSchema);
+    const outputSchema = safeJsonParse(workflow.outputSchema);
+    return {
+        key,
+        syncCallable: workflow.syncCallable === true,
+        // `input` is required iff the schema rejects the client's `{}` fallback.
+        // A schema-less workflow (`undefined`) accepts anything → optional.
+        inputRequired: inputSchema !== undefined && schemaRejectsEmptyObject(inputSchema),
+        // Apply-mode unless explicitly disabled — the same `!== false` default the
+        // server applies when it decides whether a completed run needs a client
+        // apply. An absent key means apply-mode.
+        requiresClientApply: workflow.requiresClientApply !== false,
+        inputSchema,
+        outputSchema,
+    };
+}
+//# sourceMappingURL=invokerIR.js.map

package/dist/src/lib/workflow-codegen/invokerIR.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invokerIR.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/invokerIR.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,aAAa,CAAC;AAiD1D,yDAAyD;AACzD,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA6B;IAE7B,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAQ,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GACP,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,GAAG;QACd,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IAEtB,IAAI,qBAAqB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,2EAA2E;IAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE1D,OAAO;QACL,GAAG;QACH,YAAY,EAAE,QAAQ,CAAC,YAAY,KAAK,IAAI;QAC5C,yEAAyE;QACzE,oEAAoE;QACpE,aAAa,EACX,WAAW,KAAK,SAAS,IAAI,wBAAwB,CAAC,WAAW,CAAC;QACpE,2EAA2E;QAC3E,wEAAwE;QACxE,yCAAyC;QACzC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,KAAK,KAAK;QAC3D,WAAW;QACX,YAAY;KACb,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primitive-admin",
-  "version": "1.1.0-alpha.47",
+  "version": "1.1.0-alpha.49",
   "description": "CLI for administering Primitive applications",
   "type": "module",
   "bin": {
@@ -22,7 +22,9 @@
     "gen:allowlist:check": "node scripts/gen-allowlist.mjs --check",
     "gen:workflow-descriptor": "node scripts/gen-workflow-schema-descriptor.mjs",
     "gen:workflow-descriptor:check": "node scripts/gen-workflow-schema-descriptor.mjs --check",
-    "prebuild": "node scripts/gen-allowlist.mjs && node scripts/gen-workflow-schema-descriptor.mjs",
+    "gen:operation-def-descriptor": "node scripts/gen-operation-def-descriptor.mjs",
+    "gen:operation-def-descriptor:check": "node scripts/gen-operation-def-descriptor.mjs --check",
+    "prebuild": "node scripts/gen-allowlist.mjs && node scripts/gen-workflow-schema-descriptor.mjs && node scripts/gen-operation-def-descriptor.mjs",
     "build": "tsc",
     "typecheck": "tsc --noEmit",
     "prepublishOnly": "pnpm run build",