primitive-admin 1.1.0-alpha.9 → 1.1.0

package/dist/src/lib/credentials-store.js

@@ -0,0 +1,336 @@
+/**
+ * Credentials storage with dual-mode support.
+ *
+ * Credentials are tokens and who they belong to, and nothing else: the app an
+ * invocation runs against is the resolved environment's `appId` (#3152), never
+ * a slot in this file.
+ *
+ * Mode A (project mode): credentials live at
+ *   <projectRoot>/.primitive/credentials.json
+ * with per-environment slots:
+ *   {
+ *     "environments": {
+ *       "dev":  { "accessToken": "...", "refreshToken": "...", ... },
+ *       "prod": { ... }
+ *     }
+ *   }
+ *
+ * Mode B (global mode): no primitive/config.json in scope, so we fall back to
+ *   ~/.primitive/credentials.json
+ * with the flat Credentials shape the CLI has always used.
+ *
+ * Mode B is NOT a default any more (#3154, intent criterion 5). It used to be
+ * the silent answer for every command run outside a project, which is how an
+ * app-scoped command could quietly operate against whatever server the last
+ * `login` happened to target. Now a command has to say out loud that it may
+ * work outside a project, by calling `allowGlobalCredentials()` in its own
+ * action; every other command gets `missing-config` here instead of a file.
+ *
+ * Exactly four commands say it: `login`, which creates the file; `logout`,
+ * which is the only way to clear what login wrote; `init`, which must call the
+ * API before a project can exist; and `bootstrap`, which creates the first
+ * super-admin on an empty no-OAuth database and therefore cannot be inside a
+ * project either. The last two are the divergence from the intent's "login and
+ * init and nothing else", adjudicated on #3154 as finding F1.
+ *
+ * The opt-in is per ACTION, not per argv: `primitive --env prod login` and
+ * `primitive login` reach the same line, so there is no flag shape for a
+ * pre-parse to miss. And it only PERMITS the global file — inside a project
+ * all four still use the per-environment slots.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { getCurrentEnvironment, getProjectConfig } from "./env-resolver.js";
+import { missingConfigMessage, PrimitiveEnvError } from "./env-resolver-core.js";
+export const PROJECT_LOCAL_DIR = ".primitive";
+export const PROJECT_CREDENTIALS_FILENAME = "credentials.json";
+/**
+ * Resolves the legacy config dir on each call (rather than capturing it
+ * at module load) so tests and environment variables can override it
+ * after the module has already been imported.
+ */
+function getLegacyConfigDir() {
+    return process.env.PRIMITIVE_CONFIG_DIR || join(homedir(), ".primitive");
+}
+function getLegacyCredentialsFile() {
+    return join(getLegacyConfigDir(), PROJECT_CREDENTIALS_FILENAME);
+}
+/**
+ * The keys the retired per-machine "current app" wrote (#3152).
+ *
+ * Dropping the fields from the types is not enough to stop them being written:
+ * project-mode saves preserve the environment slots they are not touching, and
+ * a legacy refresh spreads the credentials it loaded. So the keys are scrubbed
+ * where every path meets — on READ — and the legacy file is serialized from an
+ * explicit shape rather than from whatever object the caller handed over. An
+ * existing file's values stay readable to a human looking for the app id their
+ * environment should name; no code path carries them forward.
+ */
+const RETIRED_CURRENT_APP_KEYS = ["currentAppId", "currentAppName"];
+function stripRetiredCurrentApp(value) {
+    if (value && typeof value === "object") {
+        for (const key of RETIRED_CURRENT_APP_KEYS) {
+            delete value[key];
+        }
+    }
+    return value;
+}
+/** Returns true when a primitive/config.json is in scope (project mode active). */
+export function isProjectMode() {
+    return getProjectConfig() !== null;
+}
+/**
+ * Returns the path to the credentials file that will be used, based on
+ * whether we're in project mode or legacy mode.
+ */
+export function getCredentialsFilePath() {
+    const env = resolveCurrentEnvironment();
+    if (env) {
+        return join(env.projectRoot, PROJECT_LOCAL_DIR, PROJECT_CREDENTIALS_FILENAME);
+    }
+    return getLegacyCredentialsFile();
+}
+/**
+ * Set by the four actions that may read or write the global credentials file
+ * with no project in scope. Process-wide, because one invocation runs one
+ * command; never reset, because a command does not stop being `login`.
+ */
+let globalCredentialsAllowed = false;
+/**
+ * Declare that THIS command may fall back to `~/.primitive/credentials.json`
+ * when no project is in scope. Called at the top of `login`, `logout`, `init`
+ * and `bootstrap`, and nowhere else.
+ */
+export function allowGlobalCredentials() {
+    globalCredentialsAllowed = true;
+}
+/**
+ * Drop the declaration again. One invocation runs one command, so nothing in
+ * the CLI calls this — it exists so a test file can exercise both sides of the
+ * boundary in one process, the way `resetEnvResolver()` does for the resolver.
+ */
+export function resetGlobalCredentialsAllowance() {
+    globalCredentialsAllowed = false;
+}
+/**
+ * Resolves the current environment. If an environment CAN'T be resolved
+ * (e.g. --env points at an unknown name), this throws — we never silently
+ * fall back to global credentials because a typo in the env name must not
+ * cause the CLI to operate against the wrong app/server.
+ *
+ * Returns null only when there is no project config at all AND the running
+ * command declared itself allowed to work there; otherwise that case is the
+ * one refusal (#3154).
+ */
+function resolveCurrentEnvironment() {
+    const env = getCurrentEnvironment();
+    if (env)
+        return env;
+    if (globalCredentialsAllowed)
+        return null;
+    throw new PrimitiveEnvError("missing-config", missingConfigMessage(process.cwd()));
+}
+function ensureDir(dir) {
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+}
+function readJsonFile(path) {
+    try {
+        if (!existsSync(path))
+            return null;
+        const data = readFileSync(path, "utf-8");
+        return JSON.parse(data);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Loads a legacy (global) credentials file. Used for backwards compat.
+ */
+function loadLegacyCredentials() {
+    return stripRetiredCurrentApp(readJsonFile(getLegacyCredentialsFile()));
+}
+/**
+ * The legacy file's shape, field by field. Serializing the passed object
+ * wholesale is what let a token refresh write an old file's retired keys back
+ * out; an explicit record can only ever contain what credentials are.
+ */
+function legacyCredentialsRecord(credentials) {
+    return {
+        serverUrl: credentials.serverUrl,
+        accessToken: credentials.accessToken,
+        refreshToken: credentials.refreshToken,
+        expiresAt: credentials.expiresAt,
+        adminId: credentials.adminId,
+        email: credentials.email,
+        role: credentials.role,
+        name: credentials.name,
+        globalAdminAppId: credentials.globalAdminAppId,
+    };
+}
+/**
+ * Loads the project credentials file, if present. Never throws — returns
+ * an empty shape when the file is missing or unreadable.
+ */
+function loadProjectCredentialsFile(projectRoot) {
+    const path = join(projectRoot, PROJECT_LOCAL_DIR, PROJECT_CREDENTIALS_FILENAME);
+    const data = readJsonFile(path);
+    if (!data || typeof data !== "object" || !data.environments) {
+        return { environments: {} };
+    }
+    // EVERY slot, not just the one about to be written: each write reserializes
+    // the whole file, so a stale key anywhere would survive forever.
+    for (const slot of Object.values(data.environments)) {
+        stripRetiredCurrentApp(slot);
+    }
+    return data;
+}
+function writeProjectCredentialsFile(projectRoot, file) {
+    const dir = join(projectRoot, PROJECT_LOCAL_DIR);
+    ensureDir(dir);
+    const path = join(dir, PROJECT_CREDENTIALS_FILENAME);
+    writeFileSync(path, JSON.stringify(file, null, 2), { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Best-effort on Windows / weird filesystems
+    }
+}
+/**
+ * Reads credentials for the current environment (project mode) or the
+ * legacy global file. Returns the standard Credentials shape so existing
+ * callers don't need to change.
+ *
+ * In project mode, we blend the per-env stored creds with the serverUrl
+ * and appId from primitive/config.json to produce the Credentials the rest of
+ * the CLI expects.
+ */
+export function loadCredentialsStore() {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        return loadLegacyCredentials();
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    const stored = file.environments[env.name];
+    if (!stored)
+        return null;
+    return {
+        serverUrl: env.config.apiUrl,
+        accessToken: stored.accessToken,
+        refreshToken: stored.refreshToken,
+        expiresAt: stored.expiresAt,
+        adminId: stored.adminId,
+        email: stored.email,
+        role: stored.role,
+        name: stored.name,
+        globalAdminAppId: stored.globalAdminAppId,
+    };
+}
+/**
+ * Saves credentials. In project mode, writes to the per-env slot in the
+ * project credentials file. In legacy mode, writes the global file.
+ *
+ * The serverUrl on the incoming Credentials is used as-is for legacy
+ * mode, and ignored in project mode (the env's apiUrl is canonical).
+ */
+export function saveCredentialsStore(credentials) {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        ensureDir(getLegacyConfigDir());
+        writeFileSync(getLegacyCredentialsFile(), JSON.stringify(legacyCredentialsRecord(credentials), null, 2), { mode: 0o600 });
+        try {
+            chmodSync(getLegacyCredentialsFile(), 0o600);
+        }
+        catch {
+            // Best-effort
+        }
+        return;
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    file.environments[env.name] = {
+        accessToken: credentials.accessToken,
+        refreshToken: credentials.refreshToken,
+        expiresAt: credentials.expiresAt,
+        adminId: credentials.adminId,
+        email: credentials.email,
+        role: credentials.role,
+        name: credentials.name,
+        globalAdminAppId: credentials.globalAdminAppId,
+    };
+    writeProjectCredentialsFile(env.projectRoot, file);
+}
+/**
+ * Clears credentials for the current environment (project mode) or
+ * deletes the legacy file (legacy mode).
+ */
+export function clearCredentialsStore() {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        try {
+            if (existsSync(getLegacyCredentialsFile())) {
+                unlinkSync(getLegacyCredentialsFile());
+            }
+        }
+        catch {
+            // Ignore
+        }
+        return;
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    delete file.environments[env.name];
+    writeProjectCredentialsFile(env.projectRoot, file);
+}
+/**
+ * Removes the credentials slot for the named environment in a specific
+ * project's credentials file. Used by `env remove` so stale tokens from a
+ * previously-removed environment can never be silently re-used if the same
+ * name is later added back. Never throws.
+ */
+export function clearCredentialsForEnvInProject(projectRoot, envName) {
+    try {
+        const file = loadProjectCredentialsFile(projectRoot);
+        if (file.environments[envName]) {
+            delete file.environments[envName];
+            writeProjectCredentialsFile(projectRoot, file);
+        }
+    }
+    catch {
+        // Best-effort — removal is not a hard requirement for env removal to succeed.
+    }
+}
+/**
+ * Writes the credentials slot for the named environment in a specific
+ * project's credentials file. Used by `primitive init` to carry the session
+ * it just authenticated into the freshly scaffolded project, so the first
+ * in-project CLI command works without a second `primitive login`.
+ */
+export function seedCredentialsForEnvInProject(projectRoot, envName, credentials) {
+    const file = loadProjectCredentialsFile(projectRoot);
+    file.environments[envName] = {
+        accessToken: credentials.accessToken,
+        refreshToken: credentials.refreshToken,
+        expiresAt: credentials.expiresAt,
+        adminId: credentials.adminId,
+        email: credentials.email,
+        role: credentials.role,
+        name: credentials.name,
+        globalAdminAppId: credentials.globalAdminAppId,
+    };
+    writeProjectCredentialsFile(projectRoot, file);
+}
+/**
+ * Lists all environments that have stored credentials in project mode.
+ * Returns an empty array in legacy mode.
+ */
+export function listAuthenticatedEnvironments() {
+    const env = resolveCurrentEnvironment();
+    if (!env)
+        return [];
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    return Object.keys(file.environments);
+}
+//# sourceMappingURL=credentials-store.js.map

package/dist/src/lib/credentials-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../../src/lib/credentials-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAC9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAE/D;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,4BAA4B,CAAC,CAAC;AAClE,CAAC;AAkBD;;;;;;;;;;GAUG;AACH,MAAM,wBAAwB,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAU,CAAC;AAE7E,SAAS,sBAAsB,CAAI,KAAQ;IACzC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;YAC3C,OAAQ,KAAiC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa;IAC3B,OAAO,gBAAgB,EAAE,KAAK,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,IAAI,wBAAwB,GAAG,KAAK,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,wBAAwB,GAAG,IAAI,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B;IAC7C,wBAAwB,GAAG,KAAK,CAAC;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,yBAAyB;IAChC,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAC;IACpC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,IAAI,wBAAwB;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,iBAAiB,CACzB,gBAAgB,EAChB,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,OAAO,sBAAsB,CAC3B,YAAY,CAAc,wBAAwB,EAAE,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,WAAwB;IACvD,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,WAAmB;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,YAAY,CAAyB,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5D,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;IACD,4EAA4E;IAC5E,iEAAiE;IACjE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpD,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAClC,WAAmB,EACnB,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACrD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAwB;IAC3D,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChC,aAAa,CACX,wBAAwB,EAAE,EAC1B,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAC7D,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACF,IAAI,CAAC;YACH,SAAS,CAAC,wBAAwB,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;IACF,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,wBAAwB,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,WAAmB,EACnB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAClC,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,WAAmB,EACnB,OAAe,EACf,WAAwB;IAExB,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG;QAC3B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC/C,CAAC;IACF,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACxC,CAAC"}

package/dist/src/lib/csv.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Parse a CSV string into an array of row objects keyed by header.
+ *
+ * Quote-aware: respects double-quoted fields that may contain the delimiter,
+ * embedded newlines, and escaped double-quotes (`""`). Empty-string cells are
+ * omitted from the row object (matching the client). Headers-only / empty
+ * input yields `[]`.
+ */
+export declare function parseCsv(csv: string, delimiter?: string): Record<string, string>[];
+/**
+ * Coerce a string cell to a target type. Mirrors the client's `coerceValue`:
+ * a failed number coercion returns the original string (so the server's
+ * schema validation surfaces a precise error rather than a silent bad write).
+ */
+export declare function coerceValue(value: string, type: string): any;
+/**
+ * Rename row keys per a `{ "CSV Header": "fieldName" }` map. Keys not present
+ * in the map are preserved. No-op when `map` is undefined.
+ */
+export declare function applyColumnMap(rows: Record<string, any>[], map: Record<string, string> | undefined): Record<string, any>[];
+export interface BuildRowsOptions {
+    /** Model name passed in each batch item's params. */
+    modelName: string;
+    /** Type coercion overrides keyed by (post-column-map) field name. */
+    types?: Record<string, string>;
+    /** CSV column whose value to use as the record id (else a ULID is generated). */
+    idColumn?: string;
+}
+export interface BatchItem {
+    params: {
+        modelName: string;
+        id: string;
+        data: Record<string, any>;
+    };
+}
+export interface BuildRowsResult {
+    batch: BatchItem[];
+    rowCount: number;
+}
+/**
+ * Apply type coercion, assign each row an id (from `idColumn` or a generated
+ * ULID), and shape rows into `executeBatch` items
+ * (`{ params: { modelName, id, data } }`). Mirrors steps 5–7 of the client's
+ * `importCsv`.
+ */
+export declare function buildRows(rows: Record<string, any>[], options: BuildRowsOptions): BuildRowsResult;
+export { chunk } from "./batch.js";

package/dist/src/lib/csv.js

@@ -0,0 +1,172 @@
+/**
+ * CSV parsing + value coercion for `primitive databases import-csv`.
+ *
+ * This is a **thin port** of the client library's reference implementation
+ * (`src/client/api/databasesApi.ts` `parseCsv` :21 / `coerceValue` :94) so the
+ * CLI's import semantics match the client's `importCsv` exactly. It is a
+ * conscious 4th copy of the parser (client, web-admin, sample helper, now CLI);
+ * the shared-core extraction (design Option C) is deferred. **Parser edge-case
+ * fixes must be replicated across all copies** — see the plan-of-record
+ * duplication note (#145 Codex finding (b)).
+ *
+ * Zero dependencies beyond `ulid` (already a repo dependency).
+ */
+import { ulid } from "ulid";
+/**
+ * Parse a CSV string into an array of row objects keyed by header.
+ *
+ * Quote-aware: respects double-quoted fields that may contain the delimiter,
+ * embedded newlines, and escaped double-quotes (`""`). Empty-string cells are
+ * omitted from the row object (matching the client). Headers-only / empty
+ * input yields `[]`.
+ */
+export function parseCsv(csv, delimiter = ",") {
+    // Split into lines respecting quoted fields (which may contain newlines).
+    const lines = [];
+    let current = "";
+    let inQuotes = false;
+    for (let i = 0; i < csv.length; i++) {
+        const ch = csv[i];
+        if (ch === '"') {
+            if (inQuotes && i + 1 < csv.length && csv[i + 1] === '"') {
+                current += '"';
+                i++;
+            }
+            else {
+                inQuotes = !inQuotes;
+            }
+            current += ch;
+        }
+        else if ((ch === "\n" || ch === "\r") && !inQuotes) {
+            lines.push(current);
+            current = "";
+            if (ch === "\r" && i + 1 < csv.length && csv[i + 1] === "\n")
+                i++;
+        }
+        else {
+            current += ch;
+        }
+    }
+    if (current.length > 0)
+        lines.push(current);
+    const result = [];
+    if (lines.length === 0)
+        return result;
+    const parseRow = (line) => {
+        const fields = [];
+        let field = "";
+        let q = false;
+        let wasQuoted = false;
+        for (let i = 0; i < line.length; i++) {
+            const ch = line[i];
+            if (ch === '"') {
+                if (q && i + 1 < line.length && line[i + 1] === '"') {
+                    field += '"';
+                    i++;
+                }
+                else {
+                    q = !q;
+                    if (q)
+                        wasQuoted = true;
+                }
+            }
+            else if (ch === delimiter && !q) {
+                fields.push(wasQuoted ? field : field.trim());
+                field = "";
+                wasQuoted = false;
+            }
+            else {
+                field += ch;
+            }
+        }
+        fields.push(wasQuoted ? field : field.trim());
+        return fields;
+    };
+    const headers = parseRow(lines[0]);
+    for (let i = 1; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (!line)
+            continue;
+        const values = parseRow(line);
+        const row = {};
+        headers.forEach((h, idx) => {
+            if (values[idx] !== undefined && values[idx] !== "") {
+                row[h] = values[idx];
+            }
+        });
+        if (Object.keys(row).length > 0) {
+            result.push(row);
+        }
+    }
+    return result;
+}
+/**
+ * Coerce a string cell to a target type. Mirrors the client's `coerceValue`:
+ * a failed number coercion returns the original string (so the server's
+ * schema validation surfaces a precise error rather than a silent bad write).
+ */
+export function coerceValue(value, type) {
+    switch (type) {
+        case "number": {
+            const n = Number(value);
+            return isNaN(n) ? value : n;
+        }
+        case "boolean":
+            return value === "true" || value === "1" || value === "yes";
+        default:
+            return value;
+    }
+}
+/**
+ * Rename row keys per a `{ "CSV Header": "fieldName" }` map. Keys not present
+ * in the map are preserved. No-op when `map` is undefined.
+ */
+export function applyColumnMap(rows, map) {
+    if (!map)
+        return rows;
+    return rows.map((row) => {
+        const mapped = {};
+        for (const [key, value] of Object.entries(row)) {
+            const newKey = map[key] ?? key;
+            mapped[newKey] = value;
+        }
+        return mapped;
+    });
+}
+/**
+ * Apply type coercion, assign each row an id (from `idColumn` or a generated
+ * ULID), and shape rows into `executeBatch` items
+ * (`{ params: { modelName, id, data } }`). Mirrors steps 5–7 of the client's
+ * `importCsv`.
+ */
+export function buildRows(rows, options) {
+    const typeMap = options.types ?? {};
+    const batch = [];
+    for (const original of rows) {
+        const row = { ...original };
+        // Type coercion (only string cells, only declared types).
+        for (const [field, targetType] of Object.entries(typeMap)) {
+            if (field in row && typeof row[field] === "string") {
+                row[field] = coerceValue(row[field], targetType);
+            }
+        }
+        // Assign id.
+        let id;
+        if (options.idColumn && row[options.idColumn] != null) {
+            id = String(row[options.idColumn]);
+        }
+        else if (row.id != null) {
+            id = String(row.id);
+        }
+        else {
+            id = ulid();
+        }
+        row.id = id;
+        batch.push({ params: { modelName: options.modelName, id, data: row } });
+    }
+    return { batch, rowCount: batch.length };
+}
+// `chunk()` moved to ./batch.ts (shared with `databases import`). Re-exported
+// here so existing `import { chunk } from "../lib/csv.js"` callers keep working.
+export { chunk } from "./batch.js";
+//# sourceMappingURL=csv.js.map

package/dist/src/lib/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sourceRoot":"","sources":["../../../src/lib/csv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CACtB,GAAW,EACX,SAAS,GAAG,GAAG;IAEf,0EAA0E;IAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACzD,OAAO,IAAI,GAAG,CAAC;gBACf,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACvB,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE5C,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAY,EAAE;QAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,KAAK,CAAC;QACd,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACpD,KAAK,IAAI,GAAG,CAAC;oBACb,CAAC,EAAE,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,CAAC,GAAG,CAAC,CAAC,CAAC;oBACP,IAAI,CAAC;wBAAE,SAAS,GAAG,IAAI,CAAC;gBAC1B,CAAC;YACH,CAAC;iBAAM,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9C,KAAK,GAAG,EAAE,CAAC;gBACX,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,EAAE,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACzB,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;gBACpD,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,IAAY;IACrD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC;QAC9D;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAA2B,EAC3B,GAAuC;IAEvC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAoBD;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,IAA2B,EAC3B,OAAyB;IAEzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAwB,EAAE,GAAG,QAAQ,EAAE,CAAC;QACjD,0DAA0D;QAC1D,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACnD,GAAG,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,aAAa;QACb,IAAI,EAAU,CAAC;QACf,IAAI,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YACtD,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAC1B,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,IAAI,EAAE,CAAC;QACd,CAAC;QACD,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/lib/data-input.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Parse the `--data <json>` / `--data-file <path>` pair into a JSON object
+ * (#1969). Extracted from `commands/metadata.ts` so every write verb that takes
+ * a JSON body (metadata, database records save/patch, …) shares one
+ * resource-neutral parser and identical diagnostics.
+ *
+ * Exactly one of `--data` (inline JSON) or `--data-file` (a path to read) is
+ * expected; `--data-file` wins when both are given. On bad input — no value, an
+ * unreadable file, invalid JSON, or a non-object (array/scalar) — it prints a
+ * clear message and exits the process.
+ *
+ * @param label human-readable name of what is being provided, used in the "no
+ *   value" message (e.g. "metadata object", "record"). Defaults to "data".
+ * @param opts `allowArray` also accepts a bare JSON array, for the surfaces
+ *   whose payload is a list rather than an object (`documents records bulk`
+ *   takes either `{ operations: [...] }` or a bare operations array).
+ */
+export declare function parseDataOption(options: {
+    data?: string;
+    dataFile?: string;
+}, label?: string, opts?: {
+    allowArray?: boolean;
+}): Record<string, any>;

package/dist/src/lib/data-input.js

@@ -0,0 +1,50 @@
+import { readFileSync } from "fs";
+import { error } from "./output.js";
+/**
+ * Parse the `--data <json>` / `--data-file <path>` pair into a JSON object
+ * (#1969). Extracted from `commands/metadata.ts` so every write verb that takes
+ * a JSON body (metadata, database records save/patch, …) shares one
+ * resource-neutral parser and identical diagnostics.
+ *
+ * Exactly one of `--data` (inline JSON) or `--data-file` (a path to read) is
+ * expected; `--data-file` wins when both are given. On bad input — no value, an
+ * unreadable file, invalid JSON, or a non-object (array/scalar) — it prints a
+ * clear message and exits the process.
+ *
+ * @param label human-readable name of what is being provided, used in the "no
+ *   value" message (e.g. "metadata object", "record"). Defaults to "data".
+ * @param opts `allowArray` also accepts a bare JSON array, for the surfaces
+ *   whose payload is a list rather than an object (`documents records bulk`
+ *   takes either `{ operations: [...] }` or a bare operations array).
+ */
+export function parseDataOption(options, label = "data", opts = {}) {
+    let raw = options.data;
+    if (options.dataFile) {
+        try {
+            raw = readFileSync(options.dataFile, "utf-8");
+        }
+        catch (err) {
+            error(`Could not read --data-file: ${err.message}`);
+            process.exit(1);
+        }
+    }
+    if (!raw) {
+        error(`Provide the ${label} via --data '<json>' or --data-file <path>.`);
+        process.exit(1);
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object") {
+            throw new Error("expected a JSON object");
+        }
+        if (Array.isArray(parsed) && !opts.allowArray) {
+            throw new Error("expected a JSON object");
+        }
+        return parsed;
+    }
+    catch (err) {
+        error(`Invalid JSON for --data: ${err.message}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=data-input.js.map

package/dist/src/lib/data-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-input.js","sourceRoot":"","sources":["../../../src/lib/data-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA6C,EAC7C,KAAK,GAAG,MAAM,EACd,OAAiC,EAAE;IAEnC,IAAI,GAAG,GAAuB,OAAO,CAAC,IAAI,CAAC;IAC3C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,KAAK,CAAC,eAAe,KAAK,6CAA6C,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,4BAA4B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/src/lib/db-codegen/dbFingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Short fingerprint for a database-type TOML string (issue #814).
+ *
+ * Stamped in the header of every generated file so a human (or the
+ * `--check` CI guard) can tell at a glance whether the source TOML and the
+ * generated output are in sync. Mirrors codegen-v2's `fingerprintToml`
+ * (`packages/js-bao/src/cli/v2/fingerprint.ts`): 16 hex chars of SHA-256 —
+ * enough for a sanity check, short enough to fit on one comment line.
+ */
+export declare function fingerprintToml(tomlContent: string): string;