primitive-admin 1.1.0-alpha.74 → 1.1.0-alpha.75

package/dist/src/lib/codegen-shared/resolveCodegenSourceDir.d.ts

@@ -5,7 +5,7 @@
  * Both commands read a set of `*.toml` schemas out of a synced sub-directory
  * (`workflows/` or `database-type-configs/`) and render `*.generated.ts` beside them.
  * Historically each command located that source directory by scanning EVERY
- * `.primitive/sync/<env>/<appId>/<subdir>` slot and either hard-erroring on
+ * `primitive/<env>/<subdir>` slot and either hard-erroring on
  * more than one (`workflows`) or silently merging across environments
  * (`databases`, via a `seenTypes` dedup). Neither did any environment
  * resolution, so `PRIMITIVE_ENV=dev workflows codegen` would happily generate
@@ -15,8 +15,10 @@
  *
  * This helper resolves the source directory the same way every other CLI
  * command targets an environment: `--env` → `PRIMITIVE_ENV` →
- * `defaultEnvironment` → single-env → error. `--dir` and `--app` remain
- * explicit overrides. It returns ONLY the resolved source directory; TOML
+ * `defaultEnvironment` → single-env → error. `--dir` remains an explicit
+ * override; `--app` is no longer one — since #3153 the tree path carries no
+ * app segment, so an app the environment does not name is refused on every
+ * branch, `--dir` included. It returns ONLY the resolved source directory; TOML
  * collection, type filtering/dedup, and output-dir defaulting stay in each
  * command.
  *
@@ -32,11 +34,12 @@
  *   - Preserve the `--app`-alone legacy fallback: when `--app` is given, NO
  *     environment was explicitly requested, and env resolution fails (or there
  *     is no project config / legacy bare-dir mode), scan
- *     `.primitive/sync/<env>/<app>/<subdir>` for that specific app, resolving
- *     when it appears under exactly one env and erroring (naming the candidate
- *     envs) when it appears under more than one. This keeps the existing
- *     integration contract
- *     (`cli/tests/integration/workflows-codegen.test.ts`) intact.
+ *     `primitive/<env>/<subdir>`, resolving when exactly one environment has
+ *     it and erroring (naming the candidates) otherwise. This keeps the
+ *     existing integration contract
+ *     (`cli/tests/integration/workflows-codegen.test.ts`) intact. A
+ *     `stale-layout` refusal is rethrown rather than falling in here — the
+ *     scan is exactly the old-tree read the refusal exists to prevent.
  *   - Do NOT fall through to that scan when an environment WAS explicitly named
  *     (`--env` or `PRIMITIVE_ENV`) but is invalid/unknown: surface the
  *     resolver's error instead, so an explicit env selection never silently

package/dist/src/lib/codegen-shared/resolveCodegenSourceDir.js

@@ -5,7 +5,7 @@
  * Both commands read a set of `*.toml` schemas out of a synced sub-directory
  * (`workflows/` or `database-type-configs/`) and render `*.generated.ts` beside them.
  * Historically each command located that source directory by scanning EVERY
- * `.primitive/sync/<env>/<appId>/<subdir>` slot and either hard-erroring on
+ * `primitive/<env>/<subdir>` slot and either hard-erroring on
  * more than one (`workflows`) or silently merging across environments
  * (`databases`, via a `seenTypes` dedup). Neither did any environment
  * resolution, so `PRIMITIVE_ENV=dev workflows codegen` would happily generate
@@ -15,8 +15,10 @@
  *
  * This helper resolves the source directory the same way every other CLI
  * command targets an environment: `--env` → `PRIMITIVE_ENV` →
- * `defaultEnvironment` → single-env → error. `--dir` and `--app` remain
- * explicit overrides. It returns ONLY the resolved source directory; TOML
+ * `defaultEnvironment` → single-env → error. `--dir` remains an explicit
+ * override; `--app` is no longer one — since #3153 the tree path carries no
+ * app segment, so an app the environment does not name is refused on every
+ * branch, `--dir` included. It returns ONLY the resolved source directory; TOML
  * collection, type filtering/dedup, and output-dir defaulting stay in each
  * command.
  *
@@ -32,20 +34,23 @@
  *   - Preserve the `--app`-alone legacy fallback: when `--app` is given, NO
  *     environment was explicitly requested, and env resolution fails (or there
  *     is no project config / legacy bare-dir mode), scan
- *     `.primitive/sync/<env>/<app>/<subdir>` for that specific app, resolving
- *     when it appears under exactly one env and erroring (naming the candidate
- *     envs) when it appears under more than one. This keeps the existing
- *     integration contract
- *     (`cli/tests/integration/workflows-codegen.test.ts`) intact.
+ *     `primitive/<env>/<subdir>`, resolving when exactly one environment has
+ *     it and erroring (naming the candidates) otherwise. This keeps the
+ *     existing integration contract
+ *     (`cli/tests/integration/workflows-codegen.test.ts`) intact. A
+ *     `stale-layout` refusal is rethrown rather than falling in here — the
+ *     scan is exactly the old-tree read the refusal exists to prevent.
  *   - Do NOT fall through to that scan when an environment WAS explicitly named
  *     (`--env` or `PRIMITIVE_ENV`) but is invalid/unknown: surface the
  *     resolver's error instead, so an explicit env selection never silently
  *     generates code from a different synced environment.
  */
-import { existsSync, readdirSync } from "fs";
+import { existsSync, readdirSync, statSync } from "fs";
 import { basename, dirname, join } from "path";
-import { getCurrentEnvironment, getExplicitEnvName } from "../env-resolver.js";
-import { resolveSyncDir, assertSafePathComponent } from "../sync-paths.js";
+import { assertAppMatchesEnvironment } from "../app-match-guard.js";
+import { PrimitiveEnvError, PROJECT_TREE_DIR } from "../env-resolver-core.js";
+import { getCurrentEnvironment, getExplicitEnvName, getProjectConfig, } from "../env-resolver.js";
+import { resolveSyncDir } from "../sync-paths.js";
 /**
  * Resolves the single source directory a codegen command should read its
  * `*.toml` schemas from. Throws a plain `Error` (with a user-facing message)
@@ -55,7 +60,18 @@ export function resolveCodegenSourceDir(args) {
     const { subdir, options } = args;
     const cwd = args.cwd ?? process.cwd();
     // 1. --dir is an explicit override: use <dir>/<subdir> verbatim.
+    //
+    //    Naming the directory answers WHERE to read; it does not answer which
+    //    app the caller may run as. An --app the environment does not name is
+    //    the same mismatch every other tree command refuses (#3153, F1), and
+    //    hearing about it must not depend on how the directory was chosen — so
+    //    the guard runs here too, before the directory is touched. When the
+    //    environment cannot be resolved at all there is nothing to compare
+    //    against and nothing to confuse: the tree was named outright.
     if (options.syncDir) {
+        if (options.app) {
+            assertAppMatchesEnvironment(options.app, safeCurrentEnvironment(), "codegen");
+        }
         return requireExisting(join(options.syncDir, subdir), subdir, undefined);
     }
     // 2. Resolve the active environment. Call getCurrentEnvironment() directly
@@ -78,8 +94,13 @@ export function resolveCodegenSourceDir(args) {
         env = getCurrentEnvironment();
     }
     catch (err) {
+        // A project holding the pre-#3153 layout must never fall into the scan:
+        // the scan is what would read the old tree, which is the one outcome the
+        // refusal exists to prevent.
+        if (err instanceof PrimitiveEnvError && err.kind === "stale-layout")
+            throw err;
         if (options.app && !explicitEnvRequested) {
-            return scanSyncTree({ subdir, appId: options.app, cwd });
+            return scanSyncTree({ subdir, cwd, app: options.app });
         }
         throw err;
     }
@@ -88,68 +109,101 @@ export function resolveCodegenSourceDir(args) {
     //    credentials slot naming a different app would be a codegen run reading
     //    another app's tree.
     if (env) {
-        const appId = options.app ?? env.config.appId;
-        // resolveSyncDir re-reads the (cached) resolved env and guards appId via
-        // assertSafePathComponent, so an unsafe --app is rejected here.
-        const dir = join(resolveSyncDir({ appId }), subdir);
-        return requireExisting(dir, subdir, appId);
+        // The app is the environment's, and only the environment's: the tree path
+        // no longer carries one (#3153). An --app naming a different app would
+        // generate this environment's types from another app's schema, so it is
+        // refused here, before any file is read.
+        assertAppMatchesEnvironment(options.app, env, "codegen");
+        const dir = join(resolveSyncDir(), subdir);
+        return requireExisting(dir, subdir, env.config.appId);
     }
-    // 4. Legacy / bare-dir mode (no .primitive/config.json): scan the sync tree,
-    //    filtered to --app when given. This preserves the pre-#1510 behavior.
-    return scanSyncTree({ subdir, appId: options.app, cwd });
+    // 4. Legacy / bare-dir mode (no primitive/config.json): scan the tree.
+    //    This preserves the pre-#1510 behavior; #3154 deletes it outright.
+    return scanSyncTree({ subdir, cwd, app: options.app });
 }
 /**
- * Legacy fallback: scan `<cwd>/.primitive/sync/<env>/<app>/<subdir>` for a
- * source directory. When `appId` is given, only that app's slots are
- * considered. Resolves to the single match; errors clearly on zero or on
- * ambiguity (naming the candidate apps or envs).
+ * The resolved environment, or null when none can be resolved — the form the
+ * `--dir` branch needs, where an unresolvable environment is not an error but
+ * simply nothing to check the app against. Every other branch surfaces the
+ * resolver's error, which is what makes an explicit `--env` selection binding.
+ */
+function safeCurrentEnvironment() {
+    try {
+        return getCurrentEnvironment();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Legacy fallback: scan `<cwd>/primitive/<env>/<subdir>` for a source
+ * directory. Resolves to the single match; errors clearly on zero or on
+ * ambiguity (naming the candidate envs), which `--env` resolves. #3154 deletes
+ * this branch.
+ *
+ * The tree path no longer carries the app segment that used to partition this
+ * scan (#3153), so when the project config IS readable — the environment just
+ * could not be selected — `--app` narrows the candidates itself: an
+ * environment the config binds to another app is not a directory this app's
+ * codegen may read. Without a config there is nothing to check against (bare
+ * mode), and every environment directory is a candidate as before.
  */
 function scanSyncTree(args) {
-    const { subdir, appId, cwd } = args;
-    // Defence-in-depth: an --app value flows into a file-system path below, so
-    // reject separators / `..` before using it.
-    if (appId)
-        assertSafePathComponent(appId, "appId");
-    const root = join(cwd, ".primitive", "sync");
+    const { subdir, cwd, app } = args;
+    const boundEnvs = app ? environmentsNamingApp(app) : null;
+    const root = join(cwd, PROJECT_TREE_DIR);
     const found = [];
     if (existsSync(root)) {
         for (const envName of readdirSync(root)) {
             const envDir = join(root, envName);
+            // `primitive/` also holds config.json; only directories are environments.
             try {
-                for (const app of readdirSync(envDir)) {
-                    if (appId && app !== appId)
-                        continue;
-                    const candidate = join(envDir, app, subdir);
-                    if (existsSync(candidate))
-                        found.push(candidate);
-                }
+                if (!statSync(envDir).isDirectory())
+                    continue;
             }
             catch {
-                // Not a directory (or unreadable) — skip.
+                continue;
             }
+            if (boundEnvs && !boundEnvs.has(envName))
+                continue;
+            const candidate = join(envDir, subdir);
+            if (existsSync(candidate))
+                found.push(candidate);
         }
     }
     if (found.length === 0) {
-        throw new Error(notFoundMessage(subdir, appId));
+        throw new Error(notFoundMessage(subdir, boundEnvs ? app : undefined));
     }
     if (found.length > 1) {
-        if (appId) {
-            const envs = [
-                ...new Set(found.map((d) => basename(dirname(dirname(d))))),
-            ];
-            throw new Error(`App "${appId}" has a ${subdir}/ directory under multiple environments: ` +
-                `${envs.join(", ")}.\n` +
-                found.map((d) => `  ${d}`).join("\n") +
-                `\nPass --env <name> or --dir to select one.`);
-        }
-        const apps = [...new Set(found.map((d) => basename(dirname(d))))];
-        throw new Error(`Found ${subdir}/ directories for more than one app/env:\n` +
+        const envs = [...new Set(found.map((d) => basename(dirname(d))))];
+        throw new Error(`Found ${subdir}/ directories under more than one environment: ` +
+            `${envs.join(", ")}.\n` +
             found.map((d) => `  ${d}`).join("\n") +
-            `\nCodegen writes into one output dir, so it must run against one app. ` +
-            `Pass --app <app-id> (found: ${apps.join(", ")}) or --dir to select one.`);
+            `\nCodegen writes into one output dir, so it must run against one ` +
+            `environment. Pass --env <name> or --dir to select one.`);
     }
     return found[0];
 }
+/**
+ * The environments the project config binds to `app`, or null when there is no
+ * readable project config (bare mode: nothing to narrow the scan with).
+ */
+function environmentsNamingApp(app) {
+    let config;
+    try {
+        config = getProjectConfig();
+    }
+    catch {
+        // A config that cannot be read cannot vouch for any environment; the scan
+        // stays as wide as it was rather than inventing a binding.
+        return null;
+    }
+    if (!config)
+        return null;
+    return new Set(Object.entries(config.environments)
+        .filter(([, entry]) => entry.appId === app)
+        .map(([name]) => name));
+}
 /** Verifies `dir` exists, throwing the standard "no source dir" error otherwise. */
 function requireExisting(dir, subdir, appId) {
     if (!existsSync(dir)) {
@@ -159,8 +213,8 @@ function requireExisting(dir, subdir, appId) {
 }
 function notFoundMessage(subdir, appId) {
     return appId
-        ? `No ${subdir}/ directory found for app "${appId}" under .primitive/sync/. ` +
-            `Check the --app id, pass --dir, or run \`primitive config pull\` first.`
+        ? `No ${subdir}/ directory found for app "${appId}" under primitive/<env>/. ` +
+            `Pass --dir, or run \`primitive config pull\` first.`
         : `No ${subdir}/ directory found. Pass --dir or run \`primitive config pull\` first.`;
 }
 //# sourceMappingURL=resolveCodegenSourceDir.js.map

package/dist/src/lib/codegen-shared/resolveCodegenSourceDir.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveCodegenSourceDir.js","sourceRoot":"","sources":["../../../../src/lib/codegen-shared/resolveCodegenSourceDir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAsB3E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAiC;IACvE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtC,iEAAiE;IACjE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,8EAA8E;IAC9E,0BAA0B;IAC1B,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,uEAAuE;IACvE,gBAAgB;IAChB,MAAM,oBAAoB,GACxB,kBAAkB,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/D,IAAI,GAA6C,CAAC;IAClD,IAAI,CAAC;QACH,GAAG,GAAG,qBAAqB,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACzC,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,4EAA4E;IAC5E,yBAAyB;IACzB,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9C,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAIrB;IACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEpC,2EAA2E;IAC3E,4CAA4C;IAC5C,IAAI,KAAK;QAAE,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtC,IAAI,KAAK,IAAI,GAAG,KAAK,KAAK;wBAAE,SAAS;oBACrC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5C,IAAI,UAAU,CAAC,SAAS,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG;gBACX,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5D,CAAC;YACF,MAAM,IAAI,KAAK,CACb,QAAQ,KAAK,WAAW,MAAM,2CAA2C;gBACvE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACrC,6CAA6C,CAChD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,SAAS,MAAM,4CAA4C;YACzD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,wEAAwE;YACxE,+BAA+B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,oFAAoF;AACpF,SAAS,eAAe,CACtB,GAAW,EACX,MAAc,EACd,KAAyB;IAEzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,KAAyB;IAChE,OAAO,KAAK;QACV,CAAC,CAAC,MAAM,MAAM,8BAA8B,KAAK,4BAA4B;YACzE,yEAAyE;QAC7E,CAAC,CAAC,MAAM,MAAM,uEAAuE,CAAC;AAC1F,CAAC"}
+{"version":3,"file":"resolveCodegenSourceDir.js","sourceRoot":"","sources":["../../../../src/lib/codegen-shared/resolveCodegenSourceDir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAsBlD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAiC;IACvE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtC,iEAAiE;IACjE,EAAE;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,2BAA2B,CAAC,OAAO,CAAC,GAAG,EAAE,sBAAsB,EAAE,EAAE,SAAS,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,8EAA8E;IAC9E,0BAA0B;IAC1B,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,uEAAuE;IACvE,gBAAgB;IAChB,MAAM,oBAAoB,GACxB,kBAAkB,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/D,IAAI,GAA6C,CAAC;IAClD,IAAI,CAAC;QACH,GAAG,GAAG,qBAAqB,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,yEAAyE;QACzE,6BAA6B;QAC7B,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,GAAG,CAAC;QAC/E,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACzC,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,4EAA4E;IAC5E,yBAAyB;IACzB,IAAI,GAAG,EAAE,CAAC;QACR,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,yCAAyC;QACzC,2BAA2B,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB;IAC7B,IAAI,CAAC;QACH,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,IAAmD;IACvE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnC,0EAA0E;YAC1E,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAS;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,SAAS,MAAM,iDAAiD;YAC9D,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,mEAAmE;YACnE,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,MAA2C,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,IAAI,GAAG,CACZ,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,eAAe,CACtB,GAAW,EACX,MAAc,EACd,KAAyB;IAEzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,KAAyB;IAChE,OAAO,KAAK;QACV,CAAC,CAAC,MAAM,MAAM,8BAA8B,KAAK,4BAA4B;YACzE,qDAAqD;QACzD,CAAC,CAAC,MAAM,MAAM,uEAAuE,CAAC;AAC1F,CAAC"}

package/dist/src/lib/config.d.ts

@@ -5,7 +5,7 @@
  * ~/.primitive/credentials.json and a handful of helpers here. After the
  * project-config overhaul (issue #373) credentials live per-environment
  * inside `<projectRoot>/.primitive/credentials.json` when a
- * .primitive/config.json is in scope, and fall back to the legacy global
+ * primitive/config.json is in scope, and fall back to the legacy global
  * file otherwise.
  *
  * The rest of the CLI continues to import from this module, so we keep
@@ -50,7 +50,7 @@ export declare function getServerUrl(): string;
  *   - Project mode → the active environment's `apiUrl` (canonical). Lets
  *     getCurrentEnvironment() throw on an unresolvable env (ambiguous/unknown
  *     --env) so the caller can fail loudly instead of silently targeting prod.
- *   - Legacy mode (no .primitive/config.json) → DEFAULT_SERVER_URL, which
+ *   - Legacy mode (no primitive/config.json) → DEFAULT_SERVER_URL, which
  *     honors the PRIMITIVE_SERVER_URL escape hatch (constants.ts).
  *
  * The trailing slash is stripped so callers can build `${url}/admin/api/...`.

package/dist/src/lib/config.js

@@ -5,7 +5,7 @@
  * ~/.primitive/credentials.json and a handful of helpers here. After the
  * project-config overhaul (issue #373) credentials live per-environment
  * inside `<projectRoot>/.primitive/credentials.json` when a
- * .primitive/config.json is in scope, and fall back to the legacy global
+ * primitive/config.json is in scope, and fall back to the legacy global
  * file otherwise.
  *
  * The rest of the CLI continues to import from this module, so we keep
@@ -100,7 +100,7 @@ export function getServerUrl() {
  *   - Project mode → the active environment's `apiUrl` (canonical). Lets
  *     getCurrentEnvironment() throw on an unresolvable env (ambiguous/unknown
  *     --env) so the caller can fail loudly instead of silently targeting prod.
- *   - Legacy mode (no .primitive/config.json) → DEFAULT_SERVER_URL, which
+ *   - Legacy mode (no primitive/config.json) → DEFAULT_SERVER_URL, which
  *     honors the PRIMITIVE_SERVER_URL escape hatch (constants.ts).
  *
  * The trailing slash is stripped so callers can build `${url}/admin/api/...`.

package/dist/src/lib/credentials-store.d.ts

@@ -15,7 +15,7 @@
  *     }
  *   }
  *
- * Mode B (legacy mode): no .primitive/config.json in scope, so we fall back to
+ * Mode B (legacy mode): no primitive/config.json in scope, so we fall back to
  *   ~/.primitive/credentials.json
  * with the flat Credentials shape the CLI has always used.
  *
@@ -25,7 +25,7 @@
 import type { Credentials } from "../types/index.js";
 export declare const PROJECT_LOCAL_DIR = ".primitive";
 export declare const PROJECT_CREDENTIALS_FILENAME = "credentials.json";
-/** Returns true when a .primitive/config.json is in scope (project mode active). */
+/** Returns true when a primitive/config.json is in scope (project mode active). */
 export declare function isProjectMode(): boolean;
 /**
  * Returns the path to the credentials file that will be used, based on
@@ -38,7 +38,7 @@ export declare function getCredentialsFilePath(): string;
  * callers don't need to change.
  *
  * In project mode, we blend the per-env stored creds with the serverUrl
- * and appId from .primitive/config.json to produce the Credentials the rest of
+ * and appId from primitive/config.json to produce the Credentials the rest of
  * the CLI expects.
  */
 export declare function loadCredentialsStore(): Credentials | null;

package/dist/src/lib/credentials-store.js

@@ -15,7 +15,7 @@
  *     }
  *   }
  *
- * Mode B (legacy mode): no .primitive/config.json in scope, so we fall back to
+ * Mode B (legacy mode): no primitive/config.json in scope, so we fall back to
  *   ~/.primitive/credentials.json
  * with the flat Credentials shape the CLI has always used.
  *
@@ -59,7 +59,7 @@ function stripRetiredCurrentApp(value) {
     }
     return value;
 }
-/** Returns true when a .primitive/config.json is in scope (project mode active). */
+/** Returns true when a primitive/config.json is in scope (project mode active). */
 export function isProjectMode() {
     return getProjectConfig() !== null;
 }
@@ -160,7 +160,7 @@ function writeProjectCredentialsFile(projectRoot, file) {
  * callers don't need to change.
  *
  * In project mode, we blend the per-env stored creds with the serverUrl
- * and appId from .primitive/config.json to produce the Credentials the rest of
+ * and appId from primitive/config.json to produce the Credentials the rest of
  * the CLI expects.
  */
 export function loadCredentialsStore() {

package/dist/src/lib/credentials-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../../src/lib/credentials-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAC9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAE/D;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,4BAA4B,CAAC,CAAC;AAClE,CAAC;AAkBD;;;;;;;;;;GAUG;AACH,MAAM,wBAAwB,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAU,CAAC;AAE7E,SAAS,sBAAsB,CAAI,KAAQ;IACzC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;YAC3C,OAAQ,KAAiC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa;IAC3B,OAAO,gBAAgB,EAAE,KAAK,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB;IAChC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,OAAO,sBAAsB,CAC3B,YAAY,CAAc,wBAAwB,EAAE,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,WAAwB;IACvD,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,WAAmB;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,YAAY,CAAyB,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5D,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;IACD,4EAA4E;IAC5E,iEAAiE;IACjE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAClC,WAAmB,EACnB,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACrD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAwB;IAC3D,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChC,aAAa,CACX,wBAAwB,EAAE,EAC1B,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAC7D,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACF,IAAI,CAAC;YACH,SAAS,CAAC,wBAAwB,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;IACF,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,wBAAwB,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,WAAmB,EACnB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAClC,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,WAAmB,EACnB,OAAe,EACf,WAAwB;IAExB,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG;QAC3B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;IACF,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../../src/lib/credentials-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAC9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAE/D;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,4BAA4B,CAAC,CAAC;AAClE,CAAC;AAkBD;;;;;;;;;;GAUG;AACH,MAAM,wBAAwB,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAU,CAAC;AAE7E,SAAS,sBAAsB,CAAI,KAAQ;IACzC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;YAC3C,OAAQ,KAAiC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa;IAC3B,OAAO,gBAAgB,EAAE,KAAK,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB;IAChC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,OAAO,sBAAsB,CAC3B,YAAY,CAAc,wBAAwB,EAAE,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,WAAwB;IACvD,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,WAAmB;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,YAAY,CAAyB,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5D,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;IACD,4EAA4E;IAC5E,iEAAiE;IACjE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAClC,WAAmB,EACnB,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACrD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAwB;IAC3D,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChC,aAAa,CACX,wBAAwB,EAAE,EAC1B,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAC7D,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACF,IAAI,CAAC;YACH,SAAS,CAAC,wBAAwB,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;IACF,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,wBAAwB,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,WAAmB,EACnB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAClC,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,WAAmB,EACnB,OAAe,EACf,WAAwB;IAExB,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG;QAC3B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;IACF,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC"}

package/dist/src/lib/document-export-permissions.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The `permissions.json` rows `primitive documents export` writes.
+ *
+ * Extracted from `exportSingleDocument` (#2951) so the shape change it went
+ * through is testable without a server. The export used to merge the legacy
+ * `GET /documents/:id/invitations` array — filtering `accepted` and
+ * `expiresAt` client-side — into the permission rows. That route is removed;
+ * pending entries now come from `GET /documents/:id/pending-invitations`,
+ * which returns a `{ items }` envelope of deferred grants the server has
+ * already filtered down to unresolved, unexpired, still-invited ones.
+ *
+ * The export tolerates the pending read failing (an older server answers 403
+ * or 404): the caller swallows the error and passes `null`, and the export
+ * still writes the permission rows.
+ */
+export interface ExportedPermissionRow {
+    email: string;
+    permission: string;
+    grantedAt?: string;
+    source?: "invitation";
+    status?: "pending";
+}
+/**
+ * Merge a document's permission rows and its pending deferred grants into the
+ * single email-keyed list `permissions.json` carries.
+ *
+ * @param permissionsResponse - `GET /documents/:id/permissions`, or `null` when the read failed.
+ * @param pendingResponse - `GET /documents/:id/pending-invitations`, or `null` when the read failed.
+ */
+export declare function buildPermissionsExport(permissionsResponse: unknown, pendingResponse: unknown): ExportedPermissionRow[];

package/dist/src/lib/document-export-permissions.js

@@ -0,0 +1,54 @@
+/**
+ * The `permissions.json` rows `primitive documents export` writes.
+ *
+ * Extracted from `exportSingleDocument` (#2951) so the shape change it went
+ * through is testable without a server. The export used to merge the legacy
+ * `GET /documents/:id/invitations` array — filtering `accepted` and
+ * `expiresAt` client-side — into the permission rows. That route is removed;
+ * pending entries now come from `GET /documents/:id/pending-invitations`,
+ * which returns a `{ items }` envelope of deferred grants the server has
+ * already filtered down to unresolved, unexpired, still-invited ones.
+ *
+ * The export tolerates the pending read failing (an older server answers 403
+ * or 404): the caller swallows the error and passes `null`, and the export
+ * still writes the permission rows.
+ */
+/** Unwrap a list that may arrive bare, or under `items`, or under a named key. */
+function rows(value, key) {
+    if (Array.isArray(value))
+        return value;
+    if (value && typeof value === "object") {
+        const envelope = value;
+        for (const candidate of ["items", key]) {
+            if (Array.isArray(envelope[candidate]))
+                return envelope[candidate];
+        }
+    }
+    return [];
+}
+/**
+ * Merge a document's permission rows and its pending deferred grants into the
+ * single email-keyed list `permissions.json` carries.
+ *
+ * @param permissionsResponse - `GET /documents/:id/permissions`, or `null` when the read failed.
+ * @param pendingResponse - `GET /documents/:id/pending-invitations`, or `null` when the read failed.
+ */
+export function buildPermissionsExport(permissionsResponse, pendingResponse) {
+    const granted = rows(permissionsResponse, "permissions")
+        .filter((p) => p?.email)
+        .map((p) => ({
+        email: p.email,
+        permission: p.permission,
+        grantedAt: p.grantedAt,
+    }));
+    const pending = rows(pendingResponse, "invitations")
+        .filter((i) => i?.email)
+        .map((i) => ({
+        email: i.email,
+        permission: i.permission,
+        source: "invitation",
+        status: "pending",
+    }));
+    return [...granted, ...pending];
+}
+//# sourceMappingURL=document-export-permissions.js.map

package/dist/src/lib/document-export-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-export-permissions.js","sourceRoot":"","sources":["../../../src/lib/document-export-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH,kFAAkF;AAClF,SAAS,IAAI,CAAC,KAAc,EAAE,GAAW;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAClD,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAAE,OAAO,QAAQ,CAAC,SAAS,CAAU,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,mBAA4B,EAC5B,eAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC;SACrD,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC;SAC5B,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC,CAAC,CAAC;IAEN,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC;SACjD,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC;SAC5B,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,YAAqB;QAC7B,MAAM,EAAE,SAAkB;KAC3B,CAAC,CAAC,CAAC;IAEN,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/src/lib/env-resolver-core.d.ts

@@ -29,20 +29,39 @@
  *   4. defaultEnvironment           (the committed team default)
  *   5. the sole environment, if there is exactly one
  */
-/** Schema version of `.primitive/config.json` this core understands. */
+/** Schema version of `primitive/config.json` this core understands. */
 export declare const PRIMITIVE_CONFIG_VERSION = 1;
 /** Schema version of `.primitive/local.json` this core writes and reads. */
 export declare const PRIMITIVE_LOCAL_STATE_VERSION = 1;
-export declare const PROJECT_CONFIG_DIR = ".primitive";
+/**
+ * The two directories, split apart by #3153 so one name never means two
+ * things: `primitive/` is the COMMITTED tree (the config and every
+ * environment's TOML), `.primitive/` is MACHINE-LOCAL state (credentials, this
+ * machine's selection, snapshot backups) and is gitignored whole.
+ */
+export declare const PROJECT_TREE_DIR = "primitive";
+export declare const PROJECT_LOCAL_STATE_DIR = ".primitive";
 export declare const PROJECT_CONFIG_FILENAME = "config.json";
 export declare const LOCAL_STATE_FILENAME = "local.json";
-export declare const PROJECT_CONFIG_DISPLAY_NAME = ".primitive/config.json";
+export declare const PROJECT_CONFIG_DISPLAY_NAME = "primitive/config.json";
 export declare const LOCAL_STATE_DISPLAY_NAME = ".primitive/local.json";
+/** The docs-site slug of the migration procedure (#3155 publishes the page). */
+export declare const MIGRATION_GUIDE_SLUG = "getting-started/cli-project-migration";
+/**
+ * The one refusal for a project still holding the pre-#3153 layout.
+ *
+ * There is no fallback read: a tool that quietly read `.primitive/sync/` after
+ * the move would let a half-migrated project look healthy while push and pull
+ * disagreed about which tree is the truth. So every reader — this core, the
+ * generated Vite-plugin copy, the Swift pre-build script — stops here and names
+ * the document that says what to move where.
+ */
+export declare function staleLayoutMessage(detail: string): string;
 /**
  * Error kinds callers branch on. Every failure is one of these — no reader is
  * ever left guessing what a broken config meant.
  */
-export type PrimitiveEnvErrorKind = "missing-config" | "malformed-config" | "unsupported-version" | "corrupt-local-state" | "unknown-environment" | "no-selection" | "missing-app-id";
+export type PrimitiveEnvErrorKind = "missing-config" | "malformed-config" | "unsupported-version" | "corrupt-local-state" | "unknown-environment" | "no-selection" | "missing-app-id" | "stale-layout";
 export declare class PrimitiveEnvError extends Error {
     readonly kind: PrimitiveEnvErrorKind;
     readonly path?: string;
@@ -152,22 +171,35 @@ export interface ResolveOptions {
  */
 export declare function deriveWsUrl(apiUrl: string): string;
 /**
- * Finds `.primitive/config.json` by walking up from `cwd`, or returns the
+ * Finds `primitive/config.json` by walking up from `cwd`, or returns the
  * PRIMITIVE_PROJECT_CONFIG override when it is set (and exists).
+ *
+ * The override is checked for provenance BEFORE the file is read (#3153, F2):
+ * it bypasses the walk, so without this an old-layout config could be handed
+ * straight to a reader and defeat the cutover.
+ *
+ * Every return is checked against the root it implies, not just the levels the
+ * walk passed through: this is the one function every reader goes through —
+ * `resolvePrimitiveEnv` and the CLI's own `loadProjectConfig`/`findProjectRoot`
+ * alike — so a half-migrated project must be refused HERE, or the commands that
+ * never call `resolvePrimitiveEnv` would read the new tree with the old one
+ * still beside it.
  */
 export declare function findPrimitiveConfigPath(options?: {
     cwd?: string;
     env?: Record<string, string | undefined>;
 }): string | null;
 /**
- * The project root for a config path: the parent of `.primitive/`, or the
+ * The project root for a config path: the parent of `primitive/`, or the
  * containing directory when the config was pointed at directly (a fixture via
- * PRIMITIVE_PROJECT_CONFIG, which is not inside a `.primitive/` directory).
+ * PRIMITIVE_PROJECT_CONFIG, which is not inside a `primitive/` directory).
  */
 export declare function projectRootForConfigPath(configPath: string): string;
 /**
- * Local state lives beside the config it belongs to, so a fixture-pointed
- * config never picks up a real project's selection and vice versa.
+ * Machine-local state lives under the project root's `.primitive/`, not beside
+ * the config — the config is committed now, and the two must not share a
+ * directory. A fixture-pointed bare config still gets its own `.primitive/`
+ * in its own directory, so it never picks up a real project's selection.
  */
 export declare function localStatePathForConfigPath(configPath: string): string;
 /**