primitive-admin 1.1.0-alpha.87 → 1.1.0

package/dist/src/commands/settings.js

@@ -1,54 +0,0 @@
-/**
- * `primitive settings` — the app-settings READER (issue #1033, Phase 2;
- * narrowed to a reader by #2645).
- *
- * App settings are authored in `app.toml` and applied with `sync push`, so
- * this group carries the one thing the file cannot answer: what the server is
- * actually running. `settings get` renders the server-effective settings —
- * `get` rather than `show`, so the read verb is the same word on every
- * configuration surface.
- *
- * `settings pull`, `settings diff` and `settings push` are gone. They operated
- * on the same `app.toml` and the same `entities.app` hash `sync` owns, so they
- * were a second pathway to one piece of state; `sync pull|diff|push --only app`
- * is the single one. The remaining command logic lives in
- * `sync-app-settings.ts`, shared with `sync`.
- */
-import { ApiClient } from "../lib/api-client.js";
-import { resolveAppId } from "../lib/config.js";
-import { showAppSettings } from "./sync-app-settings.js";
-export function registerSettingsCommands(program) {
-    const settings = program
-        .command("settings")
-        .description("View the app settings the server is running")
-        .addHelpText("after", `
-Examples:
-  $ primitive settings get                  # Render current server settings
-  $ primitive settings get --json           # Machine-readable
-  $ primitive sync pull --only app          # Write server settings to app.toml
-  $ primitive config set app app.baseUrl=https://example.com
-  $ primitive sync diff --only app          # Show local app.toml vs server
-  $ primitive sync push --only app          # Apply app.toml edits to the server
-
-app.toml is the ONLY way to manage app configuration (issue #2645): a full
-\`sync push\` applies it, and \`sync push --only app\` applies it alone.
-\`primitive config fields app\` lists its keys, types and defaults. The Google OAuth
-client secret is an ordinary [auth] key holding a reference into the app's
-secret store, never the secret itself: store the value with
-'primitive secrets set GOOGLE_CLIENT_SECRET --value <secret>', then set
-googleClientSecret = "{{secrets.GOOGLE_CLIENT_SECRET}}" in app.toml. A literal
-secret there is rejected by the server.
-`);
-    // settings get
-    settings
-        .command("get")
-        .description("Show the current server-effective app settings")
-        .argument("[app-id]", "App ID (uses current app if not specified)")
-        .option("--app <app-id>", "App ID")
-        .option("--json", "Output as JSON")
-        .action(async (appId, options) => {
-        const resolvedAppId = resolveAppId(appId, options);
-        await showAppSettings(new ApiClient(), resolvedAppId, options);
-    });
-}
-//# sourceMappingURL=settings.js.map

package/dist/src/commands/settings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/commands/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,6CAA6C,CAAC;SAC1D,WAAW,CACV,OAAO,EACP;;;;;;;;;;;;;;;;;CAiBL,CACI,CAAC;IAEJ,eAAe;IACf,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,gDAAgD,CAAC;SAC7D,QAAQ,CAAC,UAAU,EAAE,4CAA4C,CAAC;SAClE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC;SAClC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,eAAe,CAAC,IAAI,SAAS,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/lib/app-match-guard.d.ts

@@ -1,44 +0,0 @@
-/**
- * `--app` must name the environment's own app on every tree command (#3153, F1).
- *
- * Before the move, `--app B` on `config pull` merely wrote into a different
- * slot: the tree path carried the app id, so app B's configuration landed in
- * app B's directory and nothing was corrupted. The move removes that segment —
- * an environment names exactly one app (#3152), so the path says the
- * environment and nothing else. `config pull --app B` while environment A is
- * selected would therefore fetch app B's configuration INTO environment A's
- * committed tree, and the next push would apply it to app A.
- *
- * So the mismatch is refused, before any file is read or written and before any
- * request is sent. A value that matches is accepted and inert. Removing the
- * flags outright is #3154's (intent criterion 4); the guard has to land with
- * the path change that creates the hazard.
- */
-import { type ResolvedEnvironment } from "./env-resolver.js";
-/**
- * Throws when `provided` names an app other than the resolved environment's.
- *
- * No-ops when nothing was provided (the environment answers), and when there is
- * no resolved environment (legacy bare-directory mode, which #3154 removes —
- * there is no environment tree to corrupt there).
- */
-export declare function assertAppMatchesEnvironment(provided: string | undefined | null, env: ResolvedEnvironment | null, commandLabel: string): void;
-/**
- * Whether `appId` is the app the resolved environment names — the question a
- * command asks before reading the auto-resolved tree on behalf of an app it was
- * handed rather than one it resolved.
- *
- * True when there is no resolved environment (legacy bare-directory mode) or
- * the environment cannot be resolved at all: there is no environment tree to
- * confuse in either case.
- */
-export declare function environmentNamesApp(appId: string): boolean;
-/**
- * The command-facing form: resolve the environment, apply the guard, and stop
- * the process with the CLI's usual non-zero exit when it does not hold.
- *
- * Called at the TOP of every tree command, before the config directory is
- * resolved and before the API client is built, so a refusal costs no file read
- * and no request.
- */
-export declare function assertTreeApp(provided: string | undefined | null, commandLabel: string): void;

package/dist/src/lib/app-match-guard.js

@@ -1,72 +0,0 @@
-/**
- * `--app` must name the environment's own app on every tree command (#3153, F1).
- *
- * Before the move, `--app B` on `config pull` merely wrote into a different
- * slot: the tree path carried the app id, so app B's configuration landed in
- * app B's directory and nothing was corrupted. The move removes that segment —
- * an environment names exactly one app (#3152), so the path says the
- * environment and nothing else. `config pull --app B` while environment A is
- * selected would therefore fetch app B's configuration INTO environment A's
- * committed tree, and the next push would apply it to app A.
- *
- * So the mismatch is refused, before any file is read or written and before any
- * request is sent. A value that matches is accepted and inert. Removing the
- * flags outright is #3154's (intent criterion 4); the guard has to land with
- * the path change that creates the hazard.
- */
-import { getCurrentEnvironment } from "./env-resolver.js";
-/**
- * Throws when `provided` names an app other than the resolved environment's.
- *
- * No-ops when nothing was provided (the environment answers), and when there is
- * no resolved environment (legacy bare-directory mode, which #3154 removes —
- * there is no environment tree to corrupt there).
- */
-export function assertAppMatchesEnvironment(provided, env, commandLabel) {
-    if (!provided || !env)
-        return;
-    const wanted = env.config.appId;
-    if (provided === wanted)
-        return;
-    throw new Error(`--app ${provided} does not match environment "${env.name}", which names app ${wanted}. ` +
-        `${commandLabel} reads and writes primitive/${env.name}/, the committed tree for that ` +
-        `environment, so running it for another app would put that app's configuration in this ` +
-        `environment's tree. Select the other app's environment with --env <name> instead.`);
-}
-/**
- * Whether `appId` is the app the resolved environment names — the question a
- * command asks before reading the auto-resolved tree on behalf of an app it was
- * handed rather than one it resolved.
- *
- * True when there is no resolved environment (legacy bare-directory mode) or
- * the environment cannot be resolved at all: there is no environment tree to
- * confuse in either case.
- */
-export function environmentNamesApp(appId) {
-    let env;
-    try {
-        env = getCurrentEnvironment();
-    }
-    catch {
-        return true;
-    }
-    return !env || env.config.appId === appId;
-}
-/**
- * The command-facing form: resolve the environment, apply the guard, and stop
- * the process with the CLI's usual non-zero exit when it does not hold.
- *
- * Called at the TOP of every tree command, before the config directory is
- * resolved and before the API client is built, so a refusal costs no file read
- * and no request.
- */
-export function assertTreeApp(provided, commandLabel) {
-    try {
-        assertAppMatchesEnvironment(provided, getCurrentEnvironment(), commandLabel);
-    }
-    catch (err) {
-        console.error(err.message);
-        process.exit(1);
-    }
-}
-//# sourceMappingURL=app-match-guard.js.map

package/dist/src/lib/app-match-guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-match-guard.js","sourceRoot":"","sources":["../../../src/lib/app-match-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,qBAAqB,EAA4B,MAAM,mBAAmB,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAmC,EACnC,GAA+B,EAC/B,YAAoB;IAEpB,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO;IAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;IAChC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO;IAChC,MAAM,IAAI,KAAK,CACb,SAAS,QAAQ,gCAAgC,GAAG,CAAC,IAAI,sBAAsB,MAAM,IAAI;QACvF,GAAG,YAAY,+BAA+B,GAAG,CAAC,IAAI,iCAAiC;QACvF,wFAAwF;QACxF,mFAAmF,CACtF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,GAA+B,CAAC;IACpC,IAAI,CAAC;QACH,GAAG,GAAG,qBAAqB,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAmC,EACnC,YAAoB;IAEpB,IAAI,CAAC;QACH,2BAA2B,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/src/lib/function-triggers.d.ts

@@ -1,66 +0,0 @@
-/**
- * `[function.triggers.*]`, read and checked locally (#3181).
- *
- * The SERVER is the authority: it derives the declaration from the TOML bytes
- * inside the version envelope and validates it there, so a direct API push
- * cannot ship a trigger the authored file does not declare (D3181-005). What
- * this file buys is the other half of the `entry` dual-validation shape #3179
- * established — an author who mistypes a key hears about it against their own
- * file, by name, before a request is made.
- *
- * It is deliberately a VENDORED copy of the shape rules in
- * `src/server-functions/trigger-declaration.ts` rather than an import: the CLI
- * compiles with `rootDir: "."` and cannot reach the worker sources, which is
- * the same constraint that made `generated-config-surfaces.ts` a vendored
- * artifact. `cli/tests/unit/function-triggers-3181.test.ts` drives both copies
- * from one fixture list so they cannot drift apart silently.
- *
- * Everything that needs the APP's state stays on the server: whether a
- * referenced secret exists, whether the scheme-specific config is valid under
- * this environment's JWKS policy, whether the app is at its webhook or cron
- * cap, whether a standalone webhook holds the key. A local copy of those would
- * be a preflight that can give a false all-clear.
- */
-/**
- * The resolved mode the declaration is checked against (#3281): the caller
- * resolves `mode`/`durable` once through the vendored `resolveDeclaredMode`
- * and hands the answer here, so this copy never reads the alias itself.
- */
-export interface TriggerModeOptions {
-    mode?: "request" | "task";
-}
-export interface WebhookTriggerDeclaration {
-    verificationScheme: string;
-    signingSecret?: string;
-    toleranceSeconds?: number;
-    deduplicationEnabled?: boolean;
-    deduplicationWindowMs?: number;
-    maxBodyBytes?: number;
-    secretGracePeriodMs?: number;
-    verification?: Record<string, unknown>;
-}
-export interface CronTriggerDeclaration {
-    name: string;
-    cron: string;
-    timezone?: string;
-    overlapPolicy?: string;
-    rootInput?: unknown;
-}
-/** One `[[function.triggers.database]]` entry, normalized (#3184). */
-export interface DatabaseTriggerDeclaration {
-    type: string;
-}
-export interface TriggerDeclaration {
-    webhook: WebhookTriggerDeclaration | null;
-    cron: CronTriggerDeclaration[];
-    databases: DatabaseTriggerDeclaration[];
-}
-export declare const MAX_CRON_TRIGGERS_PER_FUNCTION = 10;
-export declare const MAX_DATABASE_TRIGGERS_PER_FUNCTION = 5;
-export declare class TriggerDeclarationError extends Error {
-}
-/**
- * Normalize (and check) the `triggers` table of a parsed `[function]` table.
- * Returns null when nothing is declared, so a caller can skip the work.
- */
-export declare function normalizeFunctionTriggers(functionTable: any, options?: TriggerModeOptions): TriggerDeclaration | null;

package/dist/src/lib/function-triggers.js

@@ -1,285 +0,0 @@
-/**
- * `[function.triggers.*]`, read and checked locally (#3181).
- *
- * The SERVER is the authority: it derives the declaration from the TOML bytes
- * inside the version envelope and validates it there, so a direct API push
- * cannot ship a trigger the authored file does not declare (D3181-005). What
- * this file buys is the other half of the `entry` dual-validation shape #3179
- * established — an author who mistypes a key hears about it against their own
- * file, by name, before a request is made.
- *
- * It is deliberately a VENDORED copy of the shape rules in
- * `src/server-functions/trigger-declaration.ts` rather than an import: the CLI
- * compiles with `rootDir: "."` and cannot reach the worker sources, which is
- * the same constraint that made `generated-config-surfaces.ts` a vendored
- * artifact. `cli/tests/unit/function-triggers-3181.test.ts` drives both copies
- * from one fixture list so they cannot drift apart silently.
- *
- * Everything that needs the APP's state stays on the server: whether a
- * referenced secret exists, whether the scheme-specific config is valid under
- * this environment's JWKS policy, whether the app is at its webhook or cron
- * cap, whether a standalone webhook holds the key. A local copy of those would
- * be a preflight that can give a false all-clear.
- */
-export const MAX_CRON_TRIGGERS_PER_FUNCTION = 10;
-export const MAX_DATABASE_TRIGGERS_PER_FUNCTION = 5;
-const CRON_NAME_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9_-]*$/;
-/** The charset the grant grammar already uses for a database type key. */
-const DATABASE_TYPE_PATTERN = /^[A-Za-z0-9_-]+$/;
-const DATABASE_KEYS = ["type"];
-const WEBHOOK_KEYS = [
-    "verificationScheme",
-    "signingSecret",
-    "toleranceSeconds",
-    "deduplicationEnabled",
-    "deduplicationWindowMs",
-    "maxBodyBytes",
-    "secretGracePeriodMs",
-    "verification",
-];
-const CRON_KEYS = ["name", "cron", "timezone", "overlapPolicy", "rootInput"];
-const VALID_OVERLAP_POLICIES = ["skip", "allow"];
-export class TriggerDeclarationError extends Error {
-}
-/**
- * Normalize (and check) the `triggers` table of a parsed `[function]` table.
- * Returns null when nothing is declared, so a caller can skip the work.
- */
-export function normalizeFunctionTriggers(functionTable, options = {}) {
-    const triggers = functionTable?.triggers;
-    if (triggers === undefined || triggers === null)
-        return null;
-    if (typeof triggers !== "object" || Array.isArray(triggers)) {
-        throw new TriggerDeclarationError("[function.triggers] must be a table declaring `webhook` and/or `cron`");
-    }
-    for (const key of Object.keys(triggers)) {
-        if (key !== "webhook" && key !== "cron" && key !== "database") {
-            throw new TriggerDeclarationError(`unknown trigger kind '${key}' under [function.triggers]: the kinds are ` +
-                "`webhook`, `cron` and `database`");
-        }
-    }
-    const webhook = normalizeWebhook(triggers.webhook, options);
-    const cron = normalizeCron(triggers.cron, options);
-    const databases = normalizeDatabases(triggers.database, options);
-    if (!webhook && cron.length === 0 && databases.length === 0)
-        return null;
-    return { webhook, cron, databases };
-}
-/**
- * `[[function.triggers.database]]` — one accepted key, `type` (#3184).
- *
- * Sync mode only, permanently: a database-change fire runs inside the write
- * request with no run row, and there is no durable shape for that.
- */
-function normalizeDatabases(raw, options) {
-    if (raw === undefined || raw === null)
-        return [];
-    const entries = Array.isArray(raw) ? raw : [raw];
-    if (entries.length === 0)
-        return [];
-    if (options.mode === "task") {
-        throw new TriggerDeclarationError("database triggers require request mode: set `mode = \"request\"` (or " +
-            "remove `mode = \"task\"`), or remove the [[function.triggers.database]] " +
-            "entries");
-    }
-    if (entries.length > MAX_DATABASE_TRIGGERS_PER_FUNCTION) {
-        throw new TriggerDeclarationError(`a function may watch at most ${MAX_DATABASE_TRIGGERS_PER_FUNCTION} database ` +
-            `types, and this one declares ${entries.length}`);
-    }
-    const seen = new Set();
-    const normalized = [];
-    for (const entry of entries) {
-        if (entry === null || typeof entry !== "object" || Array.isArray(entry)) {
-            throw new TriggerDeclarationError("each [[function.triggers.database]] entry must be a table");
-        }
-        const table = entry;
-        for (const key of Object.keys(table)) {
-            if (!DATABASE_KEYS.includes(key)) {
-                throw new TriggerDeclarationError(`unknown key '${key}' in a [[function.triggers.database]] entry: the ` +
-                    `only accepted key is ${DATABASE_KEYS.join(", ")}`);
-            }
-        }
-        const type = String(table.type ?? "").trim();
-        if (!type) {
-            throw new TriggerDeclarationError("each [[function.triggers.database]] entry needs a `type`: it names the " +
-                "database type whose writes fire the function");
-        }
-        if (!DATABASE_TYPE_PATTERN.test(type)) {
-            throw new TriggerDeclarationError(`database trigger type '${type}' must contain only letters, digits, ` +
-                "'-' or '_'");
-        }
-        if (seen.has(type)) {
-            throw new TriggerDeclarationError(`duplicate database trigger type '${type}': a function fires once per ` +
-                "write request, so each type is declared once");
-        }
-        seen.add(type);
-        normalized.push({ type });
-    }
-    // Sorted, matching the server, so `config diff` compares the same canonical
-    // shape whichever order the file lists its blocks in.
-    normalized.sort((a, b) => a.type.localeCompare(b.type));
-    return normalized;
-}
-function normalizeWebhook(raw, options) {
-    if (raw === undefined || raw === null)
-        return null;
-    if (Array.isArray(raw)) {
-        throw new TriggerDeclarationError("[function.triggers.webhook] is a single table: one webhook trigger per " +
-            'function (the intent, "Webhook trigger URL and scheme?")');
-    }
-    if (typeof raw !== "object") {
-        throw new TriggerDeclarationError("[function.triggers.webhook] must be a table");
-    }
-    const table = raw;
-    for (const key of Object.keys(table)) {
-        if (!WEBHOOK_KEYS.includes(key)) {
-            throw new TriggerDeclarationError(`unknown key '${key}' under [function.triggers.webhook]: accepted keys ` +
-                `are ${WEBHOOK_KEYS.join(", ")}`);
-        }
-    }
-    if (options.mode === "task") {
-        throw new TriggerDeclarationError("webhook triggers require request mode: set `mode = \"request\"` (or " +
-            "remove `mode = \"task\"`), or remove [function.triggers.webhook]");
-    }
-    const scheme = String(table.verificationScheme ?? "").trim();
-    if (!scheme) {
-        throw new TriggerDeclarationError("[function.triggers.webhook] verificationScheme is required");
-    }
-    if (scheme === "none") {
-        throw new TriggerDeclarationError("verification scheme 'none' is not allowed for function triggers: an " +
-            "unauthenticated caller could run the function");
-    }
-    const declaration = { verificationScheme: scheme };
-    if (table.signingSecret !== undefined) {
-        declaration.signingSecret = String(table.signingSecret);
-    }
-    for (const key of [
-        "toleranceSeconds",
-        "deduplicationWindowMs",
-        "maxBodyBytes",
-        "secretGracePeriodMs",
-    ]) {
-        if (table[key] === undefined)
-            continue;
-        const value = Number(table[key]);
-        if (!Number.isFinite(value)) {
-            throw new TriggerDeclarationError(`[function.triggers.webhook] ${key} must be a number`);
-        }
-        declaration[key] = value;
-    }
-    if (table.deduplicationEnabled !== undefined) {
-        if (typeof table.deduplicationEnabled !== "boolean") {
-            throw new TriggerDeclarationError("[function.triggers.webhook] deduplicationEnabled must be a boolean");
-        }
-        declaration.deduplicationEnabled = table.deduplicationEnabled;
-    }
-    if (table.verification !== undefined) {
-        const verification = table.verification;
-        if (verification === null ||
-            typeof verification !== "object" ||
-            Array.isArray(verification)) {
-            throw new TriggerDeclarationError("[function.triggers.webhook.verification] must be a table");
-        }
-        declaration.verification = jsonSafe(verification);
-    }
-    return declaration;
-}
-function normalizeCron(raw, options) {
-    if (raw === undefined || raw === null)
-        return [];
-    const entries = Array.isArray(raw) ? raw : [raw];
-    if (entries.length === 0)
-        return [];
-    if (options.mode === "task") {
-        throw new TriggerDeclarationError("cron triggers require request mode: set `mode = \"request\"` (or " +
-            "remove `mode = \"task\"`), or remove the [[function.triggers.cron]] " +
-            "entries — a cron trigger on a task function is not available in this " +
-            "release");
-    }
-    if (entries.length > MAX_CRON_TRIGGERS_PER_FUNCTION) {
-        throw new TriggerDeclarationError(`a function may declare at most ${MAX_CRON_TRIGGERS_PER_FUNCTION} cron ` +
-            `trigger entries, and this one declares ${entries.length}`);
-    }
-    const seen = new Set();
-    const normalized = [];
-    for (const entry of entries) {
-        if (entry === null || typeof entry !== "object" || Array.isArray(entry)) {
-            throw new TriggerDeclarationError("each [[function.triggers.cron]] entry must be a table");
-        }
-        const table = entry;
-        for (const key of Object.keys(table)) {
-            if (!CRON_KEYS.includes(key)) {
-                throw new TriggerDeclarationError(`unknown key '${key}' in a [[function.triggers.cron]] entry: accepted ` +
-                    `keys are ${CRON_KEYS.join(", ")}`);
-            }
-        }
-        const name = String(table.name ?? "").trim();
-        if (!name) {
-            throw new TriggerDeclarationError("each [[function.triggers.cron]] entry needs a `name`: it is required " +
-                "because it is half of the trigger's key, `<functionKey>:<name>`");
-        }
-        if (!CRON_NAME_PATTERN.test(name)) {
-            throw new TriggerDeclarationError(`cron trigger name '${name}' must start with a letter or digit and ` +
-                "contain only letters, digits, '-' or '_'");
-        }
-        if (seen.has(name)) {
-            throw new TriggerDeclarationError(`duplicate cron trigger name '${name}': names are the trigger's key ` +
-                "within the function, so each must appear once");
-        }
-        seen.add(name);
-        const cron = String(table.cron ?? "").trim();
-        if (!cron) {
-            throw new TriggerDeclarationError(`cron trigger '${name}' needs a \`cron\` expression`);
-        }
-        // Shape only. The full grammar is the server's `parseCron` — the CLI
-        // refuses the mistake that is obvious from the text and leaves the
-        // authority where the DO's own parser is.
-        if (cron.trim().split(/\s+/).length !== 5) {
-            throw new TriggerDeclarationError(`cron trigger '${name}': a cron expression has exactly 5 fields, and ` +
-                `'${cron}' has ${cron.trim().split(/\s+/).length}`);
-        }
-        const declaration = { name, cron };
-        if (table.timezone !== undefined) {
-            declaration.timezone = String(table.timezone);
-        }
-        if (table.overlapPolicy !== undefined) {
-            const policy = String(table.overlapPolicy);
-            if (!VALID_OVERLAP_POLICIES.includes(policy)) {
-                throw new TriggerDeclarationError(`cron trigger '${name}': overlapPolicy must be one of ` +
-                    VALID_OVERLAP_POLICIES.join(", "));
-            }
-            declaration.overlapPolicy = policy;
-        }
-        if (table.rootInput !== undefined) {
-            declaration.rootInput = jsonSafe(table.rootInput);
-        }
-        normalized.push(declaration);
-    }
-    // Sorted by name, matching the server, so `config diff` compares the same
-    // canonical shape whichever order the file lists its entries in.
-    normalized.sort((a, b) => a.name.localeCompare(b.name));
-    return normalized;
-}
-function jsonSafe(value) {
-    if (value === null || value === undefined)
-        return value;
-    if (typeof value === "bigint")
-        return Number(value);
-    if (value instanceof Date)
-        return value.toISOString();
-    if (Array.isArray(value))
-        return value.map(jsonSafe);
-    if (typeof value === "object") {
-        const anyValue = value;
-        if (typeof anyValue.toISOString === "function") {
-            return String(anyValue.toISOString());
-        }
-        const out = {};
-        for (const [key, child] of Object.entries(anyValue)) {
-            out[key] = jsonSafe(child);
-        }
-        return out;
-    }
-    return value;
-}
-//# sourceMappingURL=function-triggers.js.map

package/dist/src/lib/function-triggers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"function-triggers.js","sourceRoot":"","sources":["../../../src/lib/function-triggers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAyCH,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AAEpD,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAExD,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,CAAC;AAE/B,MAAM,YAAY,GAAG;IACnB,oBAAoB;IACpB,eAAe;IACf,kBAAkB;IAClB,sBAAsB;IACtB,uBAAuB;IACvB,cAAc;IACd,qBAAqB;IACrB,cAAc;CACf,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;AAE7E,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;CAAG;AAErD;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,aAAkB,EAClB,UAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,uBAAuB,CAC/B,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9D,MAAM,IAAI,uBAAuB,CAC/B,yBAAyB,GAAG,6CAA6C;gBACvE,kCAAkC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,GAAY,EACZ,OAA2B;IAE3B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAC/B,uEAAuE;YACrE,0EAA0E;YAC1E,SAAS,CACZ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;QACxD,MAAM,IAAI,uBAAuB,CAC/B,gCAAgC,kCAAkC,YAAY;YAC5E,gCAAgC,OAAO,CAAC,MAAM,EAAE,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAiC,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,uBAAuB,CAC/B,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,uBAAuB,CAC/B,gBAAgB,GAAG,mDAAmD;oBACpE,wBAAwB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,uBAAuB,CAC/B,yEAAyE;gBACvE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,uBAAuB,CAC/B,0BAA0B,IAAI,uCAAuC;gBACnE,YAAY,CACf,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,uBAAuB,CAC/B,oCAAoC,IAAI,+BAA+B;gBACrE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAC5E,sDAAsD;IACtD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAY,EACZ,OAA2B;IAE3B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,uBAAuB,CAC/B,yEAAyE;YACvE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAC/B,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,uBAAuB,CAC/B,gBAAgB,GAAG,qDAAqD;gBACtE,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAC/B,sEAAsE;YACpE,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,uBAAuB,CAC/B,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAC/B,sEAAsE;YACpE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAA8B,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC9E,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,WAAW,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,GAAG,IAAI;QAChB,kBAAkB;QAClB,uBAAuB;QACvB,cAAc;QACd,qBAAqB;KACb,EAAE,CAAC;QACX,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAC/B,+BAA+B,GAAG,mBAAmB,CACtD,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,uBAAuB,CAC/B,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACxC,IACE,YAAY,KAAK,IAAI;YACrB,OAAO,YAAY,KAAK,QAAQ;YAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAA4B,CAAC;IAC/E,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CACpB,GAAY,EACZ,OAA2B;IAE3B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAC/B,mEAAmE;YACjE,sEAAsE;YACtE,uEAAuE;YACvE,SAAS,CACZ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,8BAA8B,EAAE,CAAC;QACpD,MAAM,IAAI,uBAAuB,CAC/B,kCAAkC,8BAA8B,QAAQ;YACtE,0CAA0C,OAAO,CAAC,MAAM,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAA6B,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,uBAAuB,CAC/B,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,uBAAuB,CAC/B,gBAAgB,GAAG,oDAAoD;oBACrE,YAAY,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,uBAAuB,CAC/B,uEAAuE;gBACrE,iEAAiE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,uBAAuB,CAC/B,sBAAsB,IAAI,0CAA0C;gBAClE,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,uBAAuB,CAC/B,gCAAgC,IAAI,iCAAiC;gBACnE,+CAA+C,CAClD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEf,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,IAAI,+BAA+B,CACrD,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,mEAAmE;QACnE,0CAA0C;QAC1C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,IAAI,iDAAiD;gBACpE,IAAI,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,WAAW,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3C,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,IAAI,kCAAkC;oBACrD,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CACpC,CAAC;YACJ,CAAC;YACD,WAAW,CAAC,aAAa,GAAG,MAAM,CAAC;QACrC,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,WAAW,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,0EAA0E;IAC1E,iEAAiE;IACjE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,KAAY,CAAC;QAC9B,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/lib/generated-workflow-model-fields.d.ts

@@ -1,20 +0,0 @@
-/**
- * GENERATED FILE — DO NOT EDIT BY HAND.
- *
- * Source of truth: the `WorkflowDefinition` model in the repo-root
- * `models.yaml` — the one statically-parseable server anchor for the
- * `[workflow]`-level config surface (issue #2326, Phase 1 of #1976).
- *
- * Regenerate with:
- *   node cli/scripts/gen-workflow-fields.mjs   (runs automatically at CLI prebuild)
- *
- * A CI freshness guard (`cli/scripts/gen-workflow-fields.mjs --check`, also
- * asserted by `cli/tests/unit/workflow-field-descriptor-drift-guard.test.ts`)
- * fails if this committed artifact does not match a fresh parse of
- * `models.yaml`. The same test asserts every field below is classified in
- * `cli/src/lib/workflow-field-descriptor.ts` as synced, structural, or
- * internal — so a new server-side workflow field cannot be silently ignored by
- * the CLI.
- */
-/** Every `WorkflowDefinition` field, in `models.yaml` declaration order (#2326). */
-export declare const GENERATED_WORKFLOW_MODEL_FIELDS: readonly string[];

package/dist/src/lib/generated-workflow-model-fields.js

@@ -1,53 +0,0 @@
-/**
- * GENERATED FILE — DO NOT EDIT BY HAND.
- *
- * Source of truth: the `WorkflowDefinition` model in the repo-root
- * `models.yaml` — the one statically-parseable server anchor for the
- * `[workflow]`-level config surface (issue #2326, Phase 1 of #1976).
- *
- * Regenerate with:
- *   node cli/scripts/gen-workflow-fields.mjs   (runs automatically at CLI prebuild)
- *
- * A CI freshness guard (`cli/scripts/gen-workflow-fields.mjs --check`, also
- * asserted by `cli/tests/unit/workflow-field-descriptor-drift-guard.test.ts`)
- * fails if this committed artifact does not match a fresh parse of
- * `models.yaml`. The same test asserts every field below is classified in
- * `cli/src/lib/workflow-field-descriptor.ts` as synced, structural, or
- * internal — so a new server-side workflow field cannot be silently ignored by
- * the CLI.
- */
-/** Every `WorkflowDefinition` field, in `models.yaml` declaration order (#2326). */
-export const GENERATED_WORKFLOW_MODEL_FIELDS = [
-    "workflowId",
-    "appId",
-    "workflowKey",
-    "name",
-    "status",
-    "latestRevision",
-    "description",
-    "stepsR2Key",
-    "draftStepsR2Key",
-    "draftInputSchema",
-    "draftOutputSchema",
-    "draftModifiedAt",
-    "activeConfigId",
-    "inputSchema",
-    "outputSchema",
-    "perUserMaxRunning",
-    "perUserMaxQueued",
-    "perAppMaxRunning",
-    "perAppMaxQueued",
-    "queueTtlSeconds",
-    "dequeueOrder",
-    "requiresClientApply",
-    "syncCallable",
-    "accessRule",
-    "metadataManifest",
-    "runAs",
-    "lock",
-    "capabilities",
-    "createdBy",
-    "createdAt",
-    "modifiedAt",
-];
-//# sourceMappingURL=generated-workflow-model-fields.js.map

package/dist/src/lib/generated-workflow-model-fields.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"generated-workflow-model-fields.js","sourceRoot":"","sources":["../../../src/lib/generated-workflow-model-fields.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,oFAAoF;AACpF,MAAM,CAAC,MAAM,+BAA+B,GAAsB;IAChE,YAAY;IACZ,OAAO;IACP,aAAa;IACb,MAAM;IACN,QAAQ;IACR,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,qBAAqB;IACrB,cAAc;IACd,YAAY;IACZ,kBAAkB;IAClB,OAAO;IACP,MAAM;IACN,cAAc;IACd,WAAW;IACX,WAAW;IACX,YAAY;CACb,CAAC"}