primitive-admin 1.1.0-alpha.9 → 1.1.0

package/dist/src/lib/function-versions.d.ts

@@ -0,0 +1,122 @@
+/**
+ * What `primitive functions configs` and `functions activate` render — #3462.
+ *
+ * Pure: every function here takes the server's JSON and answers strings or
+ * rows. The table's shape, the trigger summary, the activate output and the
+ * three messages `config pull` and `config diff` gained are all decisions about
+ * what an operator is told, and they are decided once here so they can be put
+ * to a test without a server or a spawned CLI.
+ */
+/** First twelve hex of a hash, or `-`. Enough to compare two by eye. */
+export declare function shortHash(value: unknown): string;
+/**
+ * The version's triggers, as one cell.
+ *
+ * `webhook`, `cron×2`, joined by `+`, `-` for a version that declares none. A
+ * server that predates a trigger kind sends no key for it, which reads as none
+ * rather than as an error.
+ */
+export declare function triggerSummary(triggers: unknown): string;
+export interface FunctionVersionRow {
+    configId: string;
+    createdAt: string;
+    active: string;
+    content: string;
+    envelope: string;
+    triggers: string;
+    by: string;
+}
+/**
+ * One row per version, in the order the server sent them (newest first).
+ *
+ * #3482 — there is no MODE cell. The config says nothing about how a function
+ * runs, so every version takes both verbs and a per-version column would say
+ * the same thing on every row of every function.
+ */
+export declare function functionVersionRows(items: unknown[]): FunctionVersionRow[];
+/**
+ * `Activated <date> by <adminId>` for the active version, from the header.
+ *
+ * A header written before #3462 carries neither field. It reads `unknown` — the
+ * pointer was moved by a push that did not record it, and saying so is better
+ * than naming an actor nobody verified.
+ */
+export declare function activatedLine(record: {
+    activeConfigActivatedAt?: unknown;
+    activeConfigActivatedBy?: unknown;
+}, formatDate: (value: string) => string): string;
+/** The `Version <id> (content <hash>)` line beneath `Key`. */
+export declare function versionLine(record: {
+    activeConfigId?: unknown;
+    contentHash?: unknown;
+}): string;
+/**
+ * `Newer version: <configId>, pushed <date>`, or null when the active version
+ * IS the newest.
+ *
+ * Read off the listing's first page: the route answers newest first, so one row
+ * is enough to know whether the function is rolled back.
+ */
+export declare function newerVersionLine(newest: {
+    configId?: unknown;
+    createdAt?: unknown;
+} | null | undefined, activeConfigId: unknown, formatDate: (value: string) => string): string | null;
+export interface ActivationAnswer {
+    configId?: unknown;
+    contentHash?: unknown;
+    createdAt?: unknown;
+    activated?: unknown;
+    previousConfigId?: unknown;
+    activatedAt?: unknown;
+    activatedBy?: unknown;
+}
+/**
+ * What `functions activate` prints.
+ *
+ * The already-active answer is its OWN sentence rather than the happy one with
+ * different numbers: the operator asked for a change and got none, and the
+ * thing that DID happen (the trigger rows were re-checked) is what they need to
+ * know.
+ */
+export declare function activationOutput(answer: ActivationAnswer, formatDate: (value: string) => string): {
+    headline: string;
+    lines: Array<[string, string]>;
+    changed: boolean;
+};
+/**
+ * What `functions activate` prints when the server refuses — D3462-004's
+ * "the server's message and code".
+ *
+ * The sentence is what an operator reads; the code is the stable identifier a
+ * script branches on, and it does not appear in the sentence. An archived
+ * function, an archived version, a held delete lease and a pointer another
+ * writer moved each owe a different next move, and the client parses `code`
+ * out of the body into its own field — so printing the message alone put it
+ * out of reach. The two 404s answer `{ error }` and nothing else, so the
+ * parenthetical is omitted rather than invented.
+ */
+export declare function activationRefusalLine(err: {
+    message?: unknown;
+    code?: unknown;
+}): string;
+/** The confirmation an activation asks for unless `-y`. */
+export declare function activationPrompt(functionId: string, configId: string): string;
+/**
+ * What `config pull` adds when the version it just wrote is not the newest.
+ *
+ * Pull writes the ACTIVE version's bytes, which is right — the tree should
+ * describe what runs — but on a rolled-back function that silently discards a
+ * newer version's code from the tree, so the line names both and both remedies.
+ */
+export declare function pullNewerVersionLine(functionKey: string, activeConfigId: string, newest: {
+    configId?: unknown;
+    createdAt?: unknown;
+}, formatDate: (value: string) => string): string;
+/**
+ * The hint `config diff` uses when the tree matches a version that exists and
+ * is simply not the active one.
+ *
+ * Without it the generic hint ("the built bundle or a source file differs")
+ * sends an operator looking for an edit they did not make.
+ */
+export declare function rollbackDiffHint(newestConfigId: string, activeConfigId: string): string;

package/dist/src/lib/function-versions.js

@@ -0,0 +1,182 @@
+/**
+ * What `primitive functions configs` and `functions activate` render — #3462.
+ *
+ * Pure: every function here takes the server's JSON and answers strings or
+ * rows. The table's shape, the trigger summary, the activate output and the
+ * three messages `config pull` and `config diff` gained are all decisions about
+ * what an operator is told, and they are decided once here so they can be put
+ * to a test without a server or a spawned CLI.
+ */
+/** First twelve hex of a hash, or `-`. Enough to compare two by eye. */
+export function shortHash(value) {
+    const text = value ? String(value) : "";
+    return text ? text.slice(0, 12) : "-";
+}
+/**
+ * The version's triggers, as one cell.
+ *
+ * `webhook`, `cron×2`, joined by `+`, `-` for a version that declares none. A
+ * server that predates a trigger kind sends no key for it, which reads as none
+ * rather than as an error.
+ */
+export function triggerSummary(triggers) {
+    const declaration = (triggers ?? {});
+    const parts = [];
+    if (declaration.webhook)
+        parts.push("webhook");
+    const cron = Array.isArray(declaration.cron) ? declaration.cron : [];
+    if (cron.length === 1)
+        parts.push("cron");
+    if (cron.length > 1)
+        parts.push(`cron×${cron.length}`);
+    // #3483 — the third kind went with the trigger the sponsor removed on
+    // 2026-09-15. An older server still answers a `databases` key; naming it
+    // here would summarize a version as doing something it no longer does.
+    return parts.length > 0 ? parts.join("+") : "-";
+}
+/**
+ * One row per version, in the order the server sent them (newest first).
+ *
+ * #3482 — there is no MODE cell. The config says nothing about how a function
+ * runs, so every version takes both verbs and a per-version column would say
+ * the same thing on every row of every function.
+ */
+export function functionVersionRows(items) {
+    return (items ?? []).map((raw) => {
+        const item = (raw ?? {});
+        return {
+            configId: String(item.configId ?? ""),
+            createdAt: item.createdAt ? String(item.createdAt) : "",
+            active: item.active === true ? "*" : "",
+            content: shortHash(item.contentHash),
+            envelope: shortHash(item.envelopeHash),
+            triggers: triggerSummary(item.triggers),
+            by: item.createdBy ? String(item.createdBy) : "-",
+        };
+    });
+}
+/**
+ * `Activated <date> by <adminId>` for the active version, from the header.
+ *
+ * A header written before #3462 carries neither field. It reads `unknown` — the
+ * pointer was moved by a push that did not record it, and saying so is better
+ * than naming an actor nobody verified.
+ */
+export function activatedLine(record, formatDate) {
+    const at = record?.activeConfigActivatedAt;
+    const by = record?.activeConfigActivatedBy;
+    if (!at && !by)
+        return "unknown";
+    const when = at ? formatDate(String(at)) : "unknown";
+    return `${when} by ${by ? String(by) : "unknown"}`;
+}
+/** The `Version <id> (content <hash>)` line beneath `Key`. */
+export function versionLine(record) {
+    if (!record?.activeConfigId)
+        return "none — no code has been pushed yet";
+    const hash = record.contentHash ? String(record.contentHash) : "";
+    return hash
+        ? `${String(record.activeConfigId)} (content ${hash})`
+        : String(record.activeConfigId);
+}
+/**
+ * `Newer version: <configId>, pushed <date>`, or null when the active version
+ * IS the newest.
+ *
+ * Read off the listing's first page: the route answers newest first, so one row
+ * is enough to know whether the function is rolled back.
+ */
+export function newerVersionLine(newest, activeConfigId, formatDate) {
+    if (!newest?.configId)
+        return null;
+    if (String(newest.configId) === String(activeConfigId ?? ""))
+        return null;
+    const when = newest.createdAt ? formatDate(String(newest.createdAt)) : "unknown";
+    return `${String(newest.configId)}, pushed ${when}`;
+}
+/**
+ * What `functions activate` prints.
+ *
+ * The already-active answer is its OWN sentence rather than the happy one with
+ * different numbers: the operator asked for a change and got none, and the
+ * thing that DID happen (the trigger rows were re-checked) is what they need to
+ * know.
+ */
+export function activationOutput(answer, formatDate) {
+    const configId = String(answer?.configId ?? "");
+    if (answer?.activated !== true) {
+        return {
+            headline: `Version ${configId} was already active; triggers re-checked, ` +
+                `nothing else changed.`,
+            lines: [],
+            changed: false,
+        };
+    }
+    const lines = [
+        ["Content Hash", answer.contentHash ? String(answer.contentHash) : "-"],
+        ["Pushed", answer.createdAt ? formatDate(String(answer.createdAt)) : "-"],
+        [
+            "Previous",
+            answer.previousConfigId
+                ? String(answer.previousConfigId)
+                : "none — this function had no active version",
+        ],
+        [
+            "Activated",
+            answer.activatedAt
+                ? `${formatDate(String(answer.activatedAt))} by ${answer.activatedBy ? String(answer.activatedBy) : "unknown"}`
+                : "-",
+        ],
+    ];
+    return { headline: `Version now active: ${configId}`, lines, changed: true };
+}
+/**
+ * What `functions activate` prints when the server refuses — D3462-004's
+ * "the server's message and code".
+ *
+ * The sentence is what an operator reads; the code is the stable identifier a
+ * script branches on, and it does not appear in the sentence. An archived
+ * function, an archived version, a held delete lease and a pointer another
+ * writer moved each owe a different next move, and the client parses `code`
+ * out of the body into its own field — so printing the message alone put it
+ * out of reach. The two 404s answer `{ error }` and nothing else, so the
+ * parenthetical is omitted rather than invented.
+ */
+export function activationRefusalLine(err) {
+    const message = err?.message ? String(err.message) : "Activation failed";
+    const code = err?.code ? String(err.code) : "";
+    return code ? `${message} (${code})` : message;
+}
+/** The confirmation an activation asks for unless `-y`. */
+export function activationPrompt(functionId, configId) {
+    return (`Activate version ${configId} for function ${functionId}? Request calls ` +
+        `and trigger fires use it from the next call; task runs in flight finish ` +
+        `on their own version.`);
+}
+// ── the messages `config pull` and `config diff` gained ───────────────────
+/**
+ * What `config pull` adds when the version it just wrote is not the newest.
+ *
+ * Pull writes the ACTIVE version's bytes, which is right — the tree should
+ * describe what runs — but on a rolled-back function that silently discards a
+ * newer version's code from the tree, so the line names both and both remedies.
+ */
+export function pullNewerVersionLine(functionKey, activeConfigId, newest, formatDate) {
+    const when = newest?.createdAt ? formatDate(String(newest.createdAt)) : "unknown";
+    return (`Wrote functions/${functionKey}.toml from the active version ${activeConfigId}; ` +
+        `a newer version ${String(newest?.configId ?? "")} (pushed ${when}) exists — ` +
+        "`primitive functions activate` switches, `config push` makes the tree the newest");
+}
+/**
+ * The hint `config diff` uses when the tree matches a version that exists and
+ * is simply not the active one.
+ *
+ * Without it the generic hint ("the built bundle or a source file differs")
+ * sends an operator looking for an edit they did not make.
+ */
+export function rollbackDiffHint(newestConfigId, activeConfigId) {
+    return (`the tree matches version ${newestConfigId}, which is not the active one ` +
+        `(${activeConfigId}) — \`config push\` re-activates it; \`config pull\` ` +
+        "takes the active version's bytes");
+}
+//# sourceMappingURL=function-versions.js.map

package/dist/src/lib/function-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function-versions.js","sourceRoot":"","sources":["../../../src/lib/function-versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,MAAM,WAAW,GAAG,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAChE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,sEAAsE;IACtE,yEAAyE;IACzE,uEAAuE;IACvE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAClD,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAgB;IAClD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC;QACpD,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACvC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;YACpC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;YACtC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG;SAClD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAgF,EAChF,UAAqC;IAErC,MAAM,EAAE,GAAG,MAAM,EAAE,uBAAuB,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,EAAE,uBAAuB,CAAC;IAC3C,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,WAAW,CAAC,MAG3B;IACC,IAAI,CAAC,MAAM,EAAE,cAAc;QAAE,OAAO,oCAAoC,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,OAAO,IAAI;QACT,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,IAAI,GAAG;QACtD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAsE,EACtE,cAAuB,EACvB,UAAqC;IAErC,IAAI,CAAC,MAAM,EAAE,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC;AACtD,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAwB,EACxB,UAAqC;IAErC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO;YACL,QAAQ,EACN,WAAW,QAAQ,4CAA4C;gBAC/D,uBAAuB;YACzB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAA4B;QACrC,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACzE;YACE,UAAU;YACV,MAAM,CAAC,gBAAgB;gBACrB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACjC,CAAC,CAAC,4CAA4C;SACjD;QACD;YACE,WAAW;YACX,MAAM,CAAC,WAAW;gBAChB,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OACvC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SACpD,EAAE;gBACJ,CAAC,CAAC,GAAG;SACR;KACF,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,uBAAuB,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAGrC;IACC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACzE,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,QAAgB;IAEhB,OAAO,CACL,oBAAoB,QAAQ,iBAAiB,UAAU,kBAAkB;QACzE,0EAA0E;QAC1E,uBAAuB,CACxB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAmB,EACnB,cAAsB,EACtB,MAAmD,EACnD,UAAqC;IAErC,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,OAAO,CACL,mBAAmB,WAAW,iCAAiC,cAAc,IAAI;QACjF,mBAAmB,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,YAAY,IAAI,aAAa;QAC9E,kFAAkF,CACnF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,cAAsB,EACtB,cAAsB;IAEtB,OAAO,CACL,4BAA4B,cAAc,gCAAgC;QAC1E,IAAI,cAAc,uDAAuD;QACzE,kCAAkC,CACnC,CAAC;AACJ,CAAC"}

package/dist/src/lib/generated-allowlist.d.ts

@@ -0,0 +1,28 @@
+/**
+ * GENERATED FILE — DO NOT EDIT BY HAND.
+ *
+ * Source of truth: the server step runners in `src/workflows/steps/*.ts` and
+ * the universal `BaseStepDefinition` shape in
+ * `src/workflows/runner/types.ts`.
+ *
+ * Regenerate with:
+ *   node cli/scripts/gen-allowlist.mjs       (runs automatically at CLI prebuild)
+ *
+ * A CI freshness guard (`cli/scripts/gen-allowlist.mjs --check`, also asserted
+ * by `cli/tests/unit/workflow-toml-validator-drift-guard.test.ts`) fails if this
+ * committed artifact does not match a fresh scan — see issue #998.
+ *
+ * Two exports:
+ *   - `GENERATED_ALLOWLISTED_FIELDS` — the union of universal step fields,
+ *     per-kind fields each runner READS (not what the type declares), and the
+ *     `collect` `step` structural pass-through. The validator accepts these as
+ *     top-level step fields for KNOWN kinds.
+ *   - `GENERATED_KNOWN_KINDS` — the step kinds the server registers. The
+ *     validator skips the per-field check for an UNKNOWN kind (an old CLI
+ *     against a newer server) while still running the kind-agnostic
+ *     misnested-header footgun detector (#685).
+ */
+/** Top-level step fields the validator accepts for a known kind (#998). */
+export declare const GENERATED_ALLOWLISTED_FIELDS: readonly string[];
+/** Step kinds the server registers (`defaultRegistry`). Unknown kinds skip the per-field check (#998). */
+export declare const GENERATED_KNOWN_KINDS: readonly string[];

package/dist/src/lib/generated-allowlist.js

@@ -0,0 +1,281 @@
+/**
+ * GENERATED FILE — DO NOT EDIT BY HAND.
+ *
+ * Source of truth: the server step runners in `src/workflows/steps/*.ts` and
+ * the universal `BaseStepDefinition` shape in
+ * `src/workflows/runner/types.ts`.
+ *
+ * Regenerate with:
+ *   node cli/scripts/gen-allowlist.mjs       (runs automatically at CLI prebuild)
+ *
+ * A CI freshness guard (`cli/scripts/gen-allowlist.mjs --check`, also asserted
+ * by `cli/tests/unit/workflow-toml-validator-drift-guard.test.ts`) fails if this
+ * committed artifact does not match a fresh scan — see issue #998.
+ *
+ * Two exports:
+ *   - `GENERATED_ALLOWLISTED_FIELDS` — the union of universal step fields,
+ *     per-kind fields each runner READS (not what the type declares), and the
+ *     `collect` `step` structural pass-through. The validator accepts these as
+ *     top-level step fields for KNOWN kinds.
+ *   - `GENERATED_KNOWN_KINDS` — the step kinds the server registers. The
+ *     validator skips the per-field check for an UNKNOWN kind (an old CLI
+ *     against a newer server) while still running the kind-agnostic
+ *     misnested-header footgun detector (#685).
+ */
+/** Top-level step fields the validator accepts for a known kind (#998). */
+export const GENERATED_ALLOWLISTED_FIELDS = [
+    "_testInputSchema",
+    "_testLock",
+    "_testSteps",
+    "action",
+    "aliasKey",
+    "appId",
+    "as",
+    "asBase64",
+    "attachments",
+    "batch",
+    "blobId",
+    "blobIds",
+    "blockKey",
+    "blockType",
+    "blocking",
+    "body",
+    "bodyMode",
+    "bucketId",
+    "bucketKey",
+    "cacheTtlSeconds",
+    "cases",
+    "category",
+    "channels",
+    "collapseId",
+    "collectionId",
+    "collectionType",
+    "concurrency",
+    "configId",
+    "content",
+    "contentBase64",
+    "contentType",
+    "context",
+    "contextId",
+    "continueOnError",
+    "create",
+    "cursor",
+    "cursorField",
+    "data",
+    "databaseId",
+    "databaseType",
+    "deepLink",
+    "default",
+    "description",
+    "direction",
+    "documentAlias",
+    "documentId",
+    "dryRun",
+    "durationMs",
+    "email",
+    "events",
+    "expect",
+    "expiresAt",
+    "expiresInSeconds",
+    "feature",
+    "filename",
+    "filter",
+    "filters",
+    "forEach",
+    "forward",
+    "groupBy",
+    "groupId",
+    "groupType",
+    "handle",
+    "handleId",
+    "htmlBody",
+    "iconUrl",
+    "id",
+    "idempotencyKey",
+    "includeRoot",
+    "includeUserDetails",
+    "initialMetadata",
+    "input",
+    "integrationKey",
+    "itemsField",
+    "iterationName",
+    "key",
+    "kind",
+    "limit",
+    "limits",
+    "maxItems",
+    "maxPages",
+    "message",
+    "messages",
+    "metadata",
+    "metadataFilter",
+    "metrics",
+    "model",
+    "modelName",
+    "modelOverride",
+    "ms",
+    "multipartFields",
+    "name",
+    "offset",
+    "onConflict",
+    "onPartialFailure",
+    "operationName",
+    "operations",
+    "options",
+    "output",
+    "ownerOnly",
+    "page",
+    "pageSize",
+    "params",
+    "payload",
+    "perUser",
+    "permission",
+    "plugins",
+    "pollMs",
+    "prompt",
+    "promptKey",
+    "query",
+    "queryType",
+    "recordId",
+    "recordIds",
+    "records",
+    "ref",
+    "request",
+    "resourceId",
+    "resourceType",
+    "route",
+    "runIf",
+    "saveAs",
+    "schema",
+    "scope",
+    "selector",
+    "signupDay",
+    "signupEndDay",
+    "signupStartDay",
+    "skipWhenSkipped",
+    "sort",
+    "source",
+    "step",
+    "strict",
+    "strictParams",
+    "subject",
+    "successWhen",
+    "systemBypass",
+    "tag",
+    "tags",
+    "temperature",
+    "templateType",
+    "textBody",
+    "thinkingLevel",
+    "threadId",
+    "timeout",
+    "timeoutMs",
+    "title",
+    "to",
+    "toUserId",
+    "tool_choice",
+    "tools",
+    "top_p",
+    "ttlMs",
+    "type",
+    "user",
+    "userId",
+    "userInfo",
+    "userUlid",
+    "value",
+    "variables",
+    "version",
+    "windowDays",
+    "with",
+    "workflowKey",
+    "writeOptions",
+];
+/** Step kinds the server registers (`defaultRegistry`). Unknown kinds skip the per-field check (#998). */
+export const GENERATED_KNOWN_KINDS = [
+    "analytics.query",
+    "analytics.write",
+    "analytics.writeForUser",
+    "blob.delete",
+    "blob.download",
+    "blob.signedUrl",
+    "blob.upload",
+    "block.call",
+    "collect",
+    "collection.addDocument",
+    "collection.create",
+    "collection.delete",
+    "collection.grantGroupPermission",
+    "collection.removeDocument",
+    "create",
+    "database.aggregate",
+    "database.aggregateForUser",
+    "database.applyToQuery",
+    "database.applyToQueryForUser",
+    "database.batch",
+    "database.batchForUser",
+    "database.count",
+    "database.countForUser",
+    "database.create",
+    "database.delete",
+    "database.mutate",
+    "database.mutateForUser",
+    "database.pipeline",
+    "database.pipelineForUser",
+    "database.query",
+    "database.queryForUser",
+    "database.syncIndexes",
+    "delay",
+    "document.bulkUpdate",
+    "document.count",
+    "document.create",
+    "document.delete",
+    "document.getForUser",
+    "document.getOrCreateWithAliasForUser",
+    "document.getRootForUser",
+    "document.listForCollection",
+    "document.listForGroup",
+    "document.listForUser",
+    "document.patch",
+    "document.query",
+    "document.queryOne",
+    "document.resolveAlias",
+    "document.resolveAliasForUser",
+    "document.save",
+    "email.send",
+    "event.wait",
+    "gemini.countTokens",
+    "gemini.generate",
+    "gemini.generateRaw",
+    "group.addMember",
+    "group.checkMembership",
+    "group.create",
+    "group.delete",
+    "group.listMembers",
+    "group.listUserMemberships",
+    "group.removeAll",
+    "group.removeMember",
+    "hash",
+    "integration.call",
+    "iterate-users",
+    "llm.chat",
+    "lock.acquire",
+    "lock.release",
+    "lock.renew",
+    "lock.status",
+    "metadata.delete",
+    "metadata.read",
+    "metadata.resolve",
+    "metadata.write",
+    "noop",
+    "notification.send",
+    "prompt.execute",
+    "render",
+    "script",
+    "switch",
+    "transform",
+    "user.get",
+    "user.resolve",
+    "workflow-lifecycle-step",
+    "workflow.call",
+];
+//# sourceMappingURL=generated-allowlist.js.map

package/dist/src/lib/generated-allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-allowlist.js","sourceRoot":"","sources":["../../../src/lib/generated-allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,OAAO;IACP,IAAI;IACJ,UAAU;IACV,aAAa;IACb,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,WAAW;IACX,UAAU;IACV,MAAM;IACN,UAAU;IACV,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO;IACP,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,UAAU;IACV,SAAS;IACT,eAAe;IACf,aAAa;IACb,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,MAAM;IACN,YAAY;IACZ,cAAc;IACd,UAAU;IACV,SAAS;IACT,aAAa;IACb,WAAW;IACX,eAAe;IACf,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,kBAAkB;IAClB,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,UAAU;IACV,UAAU;IACV,SAAS;IACT,IAAI;IACJ,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,iBAAiB;IACjB,OAAO;IACP,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,KAAK;IACL,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,UAAU;IACV,SAAS;IACT,UAAU;IACV,UAAU;IACV,gBAAgB;IAChB,SAAS;IACT,OAAO;IACP,WAAW;IACX,eAAe;IACf,IAAI;IACJ,iBAAiB;IACjB,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,MAAM;IACN,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;IACX,UAAU;IACV,WAAW;IACX,SAAS;IACT,KAAK;IACL,SAAS;IACT,YAAY;IACZ,cAAc;IACd,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,cAAc;IACd,SAAS;IACT,aAAa;IACb,cAAc;IACd,KAAK;IACL,MAAM;IACN,aAAa;IACb,cAAc;IACd,UAAU;IACV,eAAe;IACf,UAAU;IACV,SAAS;IACT,WAAW;IACX,OAAO;IACP,IAAI;IACJ,UAAU;IACV,aAAa;IACb,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,UAAU;IACV,OAAO;IACP,WAAW;IACX,SAAS;IACT,YAAY;IACZ,MAAM;IACN,aAAa;IACb,cAAc;CACf,CAAC;AAEF,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,iBAAiB;IACjB,iBAAiB;IACjB,wBAAwB;IACxB,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,SAAS;IACT,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,iCAAiC;IACjC,2BAA2B;IAC3B,QAAQ;IACR,oBAAoB;IACpB,2BAA2B;IAC3B,uBAAuB;IACvB,8BAA8B;IAC9B,gBAAgB;IAChB,uBAAuB;IACvB,gBAAgB;IAChB,uBAAuB;IACvB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,wBAAwB;IACxB,mBAAmB;IACnB,0BAA0B;IAC1B,gBAAgB;IAChB,uBAAuB;IACvB,sBAAsB;IACtB,OAAO;IACP,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,qBAAqB;IACrB,sCAAsC;IACtC,yBAAyB;IACzB,4BAA4B;IAC5B,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,8BAA8B;IAC9B,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,2BAA2B;IAC3B,iBAAiB;IACjB,oBAAoB;IACpB,MAAM;IACN,kBAAkB;IAClB,eAAe;IACf,UAAU;IACV,cAAc;IACd,cAAc;IACd,YAAY;IACZ,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,MAAM;IACN,mBAAmB;IACnB,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,cAAc;IACd,yBAAyB;IACzB,eAAe;CAChB,CAAC"}