primitive-admin 1.1.0-alpha.9 → 1.1.0

package/dist/src/lib/integration-request-config.js

@@ -0,0 +1,145 @@
+/**
+ * The CLI's mirror of the server's integration `requestConfig` normalization
+ * (issue #2880, DSO-003).
+ *
+ * `normalizeIntegrationRequestConfig` (`src/services/integration-utils.ts`)
+ * rewrites an accepted request config on the way in: the base URL gains a
+ * single trailing slash, methods are upper-cased and de-duplicated, header and
+ * query lists are trimmed, and the optional keys are materialized. So the state
+ * the server RETURNS is not the text a hand-authored file holds — and comparing
+ * the two raw makes an authored integration read `local-edited` on every run,
+ * with push re-applying the same update forever. Baseline restamping cannot
+ * save it: after an apply the remote hash equals the fresh baseline while the
+ * local hash still does not.
+ *
+ * Mirrored rather than imported: the published CLI must not import server
+ * `src/` at runtime (the same rule the vendored config surfaces follow). The
+ * acceptance fixture pinning this mirror is the tripwire if the server's rule
+ * moves — a disagreement then shows as an ordinary `Modified` row, never a
+ * crash, which is why every step here is total: an input the server would
+ * REJECT (a missing base URL, a bogus method) is left exactly as authored so
+ * the server's own error is what the operator sees.
+ */
+/** Trim, drop empties, optionally re-case, and de-duplicate. */
+function normalizeStringList(value, { lowercase = false, uppercase = false } = {}) {
+    if (!Array.isArray(value))
+        return [];
+    const out = [];
+    for (const item of value) {
+        if (typeof item !== "string")
+            continue;
+        let normalized = item.trim();
+        if (!normalized)
+            continue;
+        if (lowercase)
+            normalized = normalized.toLowerCase();
+        if (uppercase)
+            normalized = normalized.toUpperCase();
+        out.push(normalized);
+    }
+    return [...new Set(out)];
+}
+/** `https://host/v1///` → `https://host/v1/`; anything else stays as authored. */
+function canonicalBaseUrl(raw) {
+    if (typeof raw !== "string")
+        return raw;
+    const base = raw.trim();
+    if (!(base.startsWith("http://") ||
+        base.startsWith("https://") ||
+        base.startsWith("test://"))) {
+        // The server rejects this; leaving it alone keeps the rejection the
+        // server's to make and the difference visible in the meantime.
+        return base;
+    }
+    return `${base.replace(/\/+$/, "")}/`;
+}
+/**
+ * The request config as the server would store it, from what the file says.
+ *
+ * Applied to BOTH sides of the comparison (the remote side reaches it through
+ * the same projection), which is safe because the server's own output is
+ * already canonical and this is idempotent.
+ */
+export function canonicalizeIntegrationRequestConfig(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input))
+        return input;
+    const raw = input;
+    const allowedMethods = normalizeStringList(raw.allowedMethods, {
+        uppercase: true,
+    });
+    const defaultMethod = raw.defaultMethod
+        ? String(raw.defaultMethod).toUpperCase()
+        : allowedMethods[0] || "GET";
+    const methods = allowedMethods.length > 0 ? allowedMethods : ["GET"];
+    if (!methods.includes(defaultMethod))
+        methods.push(defaultMethod);
+    const allowedPaths = normalizeStringList(raw.allowedPaths).map((path) => path === "*" ? "/*" : path);
+    const defaultHeaders = {};
+    if (raw.defaultHeaders && typeof raw.defaultHeaders === "object") {
+        for (const [key, value] of Object.entries(raw.defaultHeaders)) {
+            if (!key)
+                continue;
+            defaultHeaders[key] = value == null ? "" : String(value);
+        }
+    }
+    const staticQuery = {};
+    if (raw.staticQuery && typeof raw.staticQuery === "object") {
+        for (const [key, value] of Object.entries(raw.staticQuery)) {
+            if (!key)
+                continue;
+            if (typeof value === "string" ||
+                typeof value === "number" ||
+                typeof value === "boolean") {
+                staticQuery[key] = value;
+            }
+        }
+    }
+    const validBodyModes = ["json", "raw", "multipart"];
+    const bodyMode = validBodyModes.includes(raw.bodyMode)
+        ? raw.bodyMode
+        : undefined;
+    let multipartFieldMapping;
+    if (Array.isArray(raw.multipartFieldMapping)) {
+        multipartFieldMapping = raw.multipartFieldMapping
+            .filter((f) => f &&
+            typeof f === "object" &&
+            typeof f.fieldName === "string" &&
+            (f.type === "attachment" || f.type === "value"))
+            .map((f) => ({
+            fieldName: f.fieldName,
+            type: f.type,
+            ...(f.attachmentIndex !== undefined && {
+                attachmentIndex: f.attachmentIndex,
+            }),
+            ...(f.attachmentName !== undefined && {
+                attachmentName: f.attachmentName,
+            }),
+            ...(f.value !== undefined && { value: f.value }),
+        }));
+        if (multipartFieldMapping.length === 0)
+            multipartFieldMapping = undefined;
+    }
+    return {
+        baseUrl: canonicalBaseUrl(raw.baseUrl),
+        allowedMethods: methods,
+        allowedPaths: allowedPaths.length > 0 ? allowedPaths : ["/*"],
+        defaultMethod,
+        defaultHeaders,
+        forwardHeaders: normalizeStringList(raw.forwardHeaders, {
+            lowercase: true,
+        }),
+        staticQuery,
+        forwardQueryParams: normalizeStringList(raw.forwardQueryParams, {
+            lowercase: true,
+        }),
+        // The server stores `true` unless the value is exactly `false`.
+        responsePassthrough: raw.responsePassthrough === false ? false : true,
+        ...(raw.exampleQuery && typeof raw.exampleQuery === "object"
+            ? { exampleQuery: raw.exampleQuery }
+            : {}),
+        ...(raw.exampleBody !== undefined ? { exampleBody: raw.exampleBody } : {}),
+        ...(bodyMode ? { bodyMode } : {}),
+        ...(multipartFieldMapping ? { multipartFieldMapping } : {}),
+    };
+}
+//# sourceMappingURL=integration-request-config.js.map

package/dist/src/lib/integration-request-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-request-config.js","sourceRoot":"","sources":["../../../src/lib/integration-request-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gEAAgE;AAChE,SAAS,mBAAmB,CAC1B,KAAc,EACd,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,EAAE;IAE7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QACvC,IAAI,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,SAAS;YAAE,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,SAAS;YAAE,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IACE,CAAC,CACC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAC3B,EACD,CAAC;QACD,oEAAoE;QACpE,+DAA+D;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,GAAG,GAAG,KAA4B,CAAC;IAEzC,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE;QAC7D,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa;QACrC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;QACzC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAElE,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtE,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAC3B,CAAC;IAEF,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,IAAI,GAAG,CAAC,cAAc,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACjE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAA8C,EAAE,CAAC;IAClE,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IACE,OAAO,KAAK,KAAK,QAAQ;gBACzB,OAAO,KAAK,KAAK,QAAQ;gBACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;gBACD,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QACpD,CAAC,CAAC,GAAG,CAAC,QAAQ;QACd,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,qBAAwC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC7C,qBAAqB,GAAG,GAAG,CAAC,qBAAqB;aAC9C,MAAM,CACL,CAAC,CAAM,EAAE,EAAE,CACT,CAAC;YACD,OAAO,CAAC,KAAK,QAAQ;YACrB,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAC/B,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAClD;aACA,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI;gBACrC,eAAe,EAAE,CAAC,CAAC,eAAe;aACnC,CAAC;YACF,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI;gBACpC,cAAc,EAAE,CAAC,CAAC,cAAc;aACjC,CAAC;YACF,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACjD,CAAC,CAAC,CAAC;QACN,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC;YAAE,qBAAqB,GAAG,SAAS,CAAC;IAC5E,CAAC;IAED,OAAO;QACL,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;QACtC,cAAc,EAAE,OAAO;QACvB,YAAY,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,aAAa;QACb,cAAc;QACd,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE;YACtD,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,WAAW;QACX,kBAAkB,EAAE,mBAAmB,CAAC,GAAG,CAAC,kBAAkB,EAAE;YAC9D,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,gEAAgE;QAChE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACrE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;YAC1D,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC"}

package/dist/src/lib/integration-selector.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Resolve the identifier the `integrations tests` verbs take (issue #3000).
+ *
+ * The block-testing endpoints key on the composite `integration#<blockId>` and
+ * never check that the block exists, so an identifier that names no
+ * integration came back as an empty page rather than a 404: `tests list`
+ * printed "No test cases found." and `tests run-all` printed
+ * `Total Tests: 0 / Failed: 0` and exited 0. That is success-shaped in CI and
+ * indistinguishable from an integration that genuinely has no cases, so a
+ * typo, an integration KEY, or an ID from another app all read as "nothing to
+ * run".
+ *
+ * Resolving here — against the app's own integration list — is what makes
+ * `Total Tests: 0` mean "this integration exists and has no cases". The list
+ * is the one call that can answer both halves: it maps a key to its ID (keys
+ * are stored lowercased, so the match is case-insensitive) and it proves the
+ * identifier belongs to THIS app. Archived integrations are included, because
+ * their cases stay inspectable.
+ */
+export interface ResolvedIntegration {
+    integrationId: string;
+    /** The integration's key, when the summary carries one. */
+    integrationKey?: string;
+}
+/** The one method this resolver needs from `ApiClient`. */
+export interface IntegrationLister {
+    listIntegrations(appId: string, params?: {
+        status?: string;
+        cursor?: string;
+        limit?: number;
+    }): Promise<{
+        items: any[];
+        nextCursor?: string | null;
+    }>;
+}
+/**
+ * Map an integration ID or key to its integration ID.
+ *
+ * Throws — naming the identifier — when nothing in the app matches, so the
+ * caller's existing catch prints the message and exits non-zero.
+ */
+export declare function resolveIntegrationSelector(client: IntegrationLister, appId: string, selector: string): Promise<ResolvedIntegration>;

package/dist/src/lib/integration-selector.js

@@ -0,0 +1,46 @@
+/**
+ * Resolve the identifier the `integrations tests` verbs take (issue #3000).
+ *
+ * The block-testing endpoints key on the composite `integration#<blockId>` and
+ * never check that the block exists, so an identifier that names no
+ * integration came back as an empty page rather than a 404: `tests list`
+ * printed "No test cases found." and `tests run-all` printed
+ * `Total Tests: 0 / Failed: 0` and exited 0. That is success-shaped in CI and
+ * indistinguishable from an integration that genuinely has no cases, so a
+ * typo, an integration KEY, or an ID from another app all read as "nothing to
+ * run".
+ *
+ * Resolving here — against the app's own integration list — is what makes
+ * `Total Tests: 0` mean "this integration exists and has no cases". The list
+ * is the one call that can answer both halves: it maps a key to its ID (keys
+ * are stored lowercased, so the match is case-insensitive) and it proves the
+ * identifier belongs to THIS app. Archived integrations are included, because
+ * their cases stay inspectable.
+ */
+import { paginateAll } from "./paginate.js";
+/**
+ * Map an integration ID or key to its integration ID.
+ *
+ * Throws — naming the identifier — when nothing in the app matches, so the
+ * caller's existing catch prints the message and exits non-zero.
+ */
+export async function resolveIntegrationSelector(client, appId, selector) {
+    const identifier = (selector ?? "").trim();
+    if (!identifier) {
+        throw new Error("An integration ID or key is required.");
+    }
+    const items = await paginateAll((cursor) => client.listIntegrations(appId, cursor ? { cursor } : {}));
+    const lowered = identifier.toLowerCase();
+    const match = items.find((item) => item?.integrationId === identifier) ??
+        items.find((item) => typeof item?.integrationKey === "string" &&
+            item.integrationKey.toLowerCase() === lowered);
+    if (!match) {
+        throw new Error(`No integration '${identifier}' in app ${appId}. ` +
+            `Pass an integration key or ID from 'primitive integrations list'.`);
+    }
+    return {
+        integrationId: match.integrationId ?? identifier,
+        ...(match.integrationKey ? { integrationKey: match.integrationKey } : {}),
+    };
+}
+//# sourceMappingURL=integration-selector.js.map

package/dist/src/lib/integration-selector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-selector.js","sourceRoot":"","sources":["../../../src/lib/integration-selector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAgB5C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAyB,EACzB,KAAa,EACb,QAAgB;IAEhB,MAAM,UAAU,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,WAAW,CAAM,CAAC,MAAM,EAAE,EAAE,CAC9C,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACzD,CAAC;IAEF,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,UAAU,CAAC;QACxD,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,EAAE,cAAc,KAAK,QAAQ;YACxC,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,OAAO,CAChD,CAAC;IAEJ,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,mBAAmB,UAAU,YAAY,KAAK,IAAI;YAChD,mEAAmE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,UAAU;QAChD,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC"}

package/dist/src/lib/ios-app-id.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The iOS client's Apple app identifier, per environment (#3081).
+ *
+ * Apple matches an association document against
+ * `<Application Identifier Prefix>.<Bundle Identifier>` — the prefix is ten
+ * alphanumerics, and it is USUALLY the Team ID but a legacy app's can differ
+ * (TN2311). Every message below therefore says "Application Identifier Prefix"
+ * and points at the signed app's `application-identifier` entitlement: a
+ * well-formed identifier with the wrong prefix produces a document that PARSES,
+ * so Apple caches it and both universal links and passkeys fail with nothing to
+ * read.
+ *
+ * One value per environment, because an app with alpha and production has one
+ * bundle id each. It is declared beside `webUrl` (#2982) — that pair is one
+ * cross-client link, the origin and the app it vouches for — and the Vue
+ * template's `scripts/deploy.mjs` generates the association document from it at
+ * deploy time.
+ *
+ * Returns the `string | true` shape `@inquirer/prompts` expects, like
+ * `validateWebUrl`, so the same function backs the flag check, the project
+ * config's field validation and any future prompt. `deploy.mjs` duplicates the
+ * shape rule (it is self-contained, node builtins only) but not these messages.
+ */
+/**
+ * Validates an Apple app identifier. Returns `true` when valid, otherwise the
+ * message to show the user.
+ */
+export declare function validateIosAppId(value: string): string | true;
+/**
+ * The stored form of an already-validated identifier: trimmed, and otherwise
+ * byte-for-byte what Apple matches. Case is NOT folded — a bundle id is
+ * case-sensitive to Apple, and the prefix is uppercase already.
+ */
+export declare function normalizeIosAppId(value: string): string;

package/dist/src/lib/ios-app-id.js

@@ -0,0 +1,69 @@
+/**
+ * The iOS client's Apple app identifier, per environment (#3081).
+ *
+ * Apple matches an association document against
+ * `<Application Identifier Prefix>.<Bundle Identifier>` — the prefix is ten
+ * alphanumerics, and it is USUALLY the Team ID but a legacy app's can differ
+ * (TN2311). Every message below therefore says "Application Identifier Prefix"
+ * and points at the signed app's `application-identifier` entitlement: a
+ * well-formed identifier with the wrong prefix produces a document that PARSES,
+ * so Apple caches it and both universal links and passkeys fail with nothing to
+ * read.
+ *
+ * One value per environment, because an app with alpha and production has one
+ * bundle id each. It is declared beside `webUrl` (#2982) — that pair is one
+ * cross-client link, the origin and the app it vouches for — and the Vue
+ * template's `scripts/deploy.mjs` generates the association document from it at
+ * deploy time.
+ *
+ * Returns the `string | true` shape `@inquirer/prompts` expects, like
+ * `validateWebUrl`, so the same function backs the flag check, the project
+ * config's field validation and any future prompt. `deploy.mjs` duplicates the
+ * shape rule (it is self-contained, node builtins only) but not these messages.
+ */
+/** The example every message ends with, so a rejection is actionable. */
+const SHAPE = "e.g. ABCDE12345.com.example.app";
+/** Where the authoritative value is, when the Team ID is not the prefix. */
+const VERIFY = "verify it against the signed app's application-identifier entitlement";
+/** `<Application Identifier Prefix>.<Bundle Identifier>`, after trimming. */
+const IOS_APP_ID = /^[A-Z0-9]{10}\.[A-Za-z0-9.-]+$/;
+/** The placeholder the template's `.example` document ships with. */
+const PLACEHOLDER_PREFIX = "TEAMID";
+/**
+ * Validates an Apple app identifier. Returns `true` when valid, otherwise the
+ * message to show the user.
+ */
+export function validateIosAppId(value) {
+    if (typeof value !== "string" || !value.trim()) {
+        return `iOS app id cannot be empty — ${SHAPE}`;
+    }
+    const trimmed = value.trim();
+    const dot = trimmed.indexOf(".");
+    if (dot === -1) {
+        return `iOS app id must be <Application Identifier Prefix>.<bundle id> — ${SHAPE}`;
+    }
+    const prefix = trimmed.slice(0, dot);
+    const bundleId = trimmed.slice(dot + 1);
+    if (prefix === PLACEHOLDER_PREFIX || bundleId === "BUNDLEID") {
+        return `iOS app id is still the "${PLACEHOLDER_PREFIX}.BUNDLEID" placeholder — replace it with this environment's Application Identifier Prefix (usually your Team ID; ${VERIFY}) and the iOS client's bundle id (${SHAPE})`;
+    }
+    if (!/^[A-Z0-9]{10}$/.test(prefix)) {
+        return `iOS app id must start with the 10-character Application Identifier Prefix (usually your Team ID; ${VERIFY}), not "${prefix}" — ${SHAPE}`;
+    }
+    if (!bundleId) {
+        return `iOS app id has no bundle id after the Application Identifier Prefix — ${SHAPE}`;
+    }
+    if (!IOS_APP_ID.test(trimmed)) {
+        return `iOS app id's bundle id may only contain letters, digits, dots and dashes — ${SHAPE}`;
+    }
+    return true;
+}
+/**
+ * The stored form of an already-validated identifier: trimmed, and otherwise
+ * byte-for-byte what Apple matches. Case is NOT folded — a bundle id is
+ * case-sensitive to Apple, and the prefix is uppercase already.
+ */
+export function normalizeIosAppId(value) {
+    return value.trim();
+}
+//# sourceMappingURL=ios-app-id.js.map

package/dist/src/lib/ios-app-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ios-app-id.js","sourceRoot":"","sources":["../../../src/lib/ios-app-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,yEAAyE;AACzE,MAAM,KAAK,GAAG,iCAAiC,CAAC;AAEhD,4EAA4E;AAC5E,MAAM,MAAM,GACV,uEAAuE,CAAC;AAE1E,6EAA6E;AAC7E,MAAM,UAAU,GAAG,gCAAgC,CAAC;AAEpD,qEAAqE;AACrE,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAEpC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,OAAO,gCAAgC,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,OAAO,oEAAoE,KAAK,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,kBAAkB,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC7D,OAAO,4BAA4B,kBAAkB,oHAAoH,MAAM,qCAAqC,KAAK,GAAG,CAAC;IAC/N,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,oGAAoG,MAAM,WAAW,MAAM,OAAO,KAAK,EAAE,CAAC;IACnJ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,yEAAyE,KAAK,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,8EAA8E,KAAK,EAAE,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/lib/list-options.d.ts

@@ -0,0 +1,68 @@
+/**
+ * The `--limit` / `--cursor` pair every paged `list` verb declares (#3646).
+ *
+ * Pagination is a property of the route, not of the verb that happens to have
+ * needed it first: a `list` backed by a paged server route carries both flags,
+ * prints exactly one page and reports the page boundary in its envelope; a
+ * `list` backed by an unpaged route carries neither. Declaring the pair from
+ * one place keeps the help text — and therefore the command manifest the docs
+ * gate reads — identical across the thirty-odd verbs that page.
+ *
+ * `cli/tests/unit/list-envelope-uniform-3646.test.ts` walks the manifest and
+ * fails a `list` that declares one of the two without the other.
+ */
+import { Option } from "commander";
+/** `--limit <n>`, for a list whose route pages. */
+export declare function pageLimitOption(): Option;
+/** `--cursor <cursor>`, for a list whose route pages. */
+export declare function pageCursorOption(): Option;
+/**
+ * Read `--limit` as a positive integer, or exit naming the flag.
+ *
+ * Refuses before the action asks anything of the server, so a typo costs a
+ * message rather than a page of rows the caller did not ask for.
+ *
+ * Only an absent flag means "the route's own default": an empty value is a
+ * value, and `--limit "$LIMIT"` with `LIMIT` unset is the ordinary way a script
+ * supplies one. Reading it as an omission would answer a malformed request with
+ * a page the caller never asked for, so it takes the same refusal as `--limit
+ * zero`.
+ */
+export declare function parsePageLimit(raw: unknown): number | undefined;
+/** A page as the human-readable half of a `list` verb reads it. */
+interface PageBoundary {
+    nextCursor?: string;
+}
+/**
+ * A cursor as it must appear after `--cursor` in a printed hint.
+ *
+ * A list cursor is the server's keyset position run through `JSON.stringify`
+ * (`encodeListCursor`, `src/app-api/helpers/list-params.ts`), so the token a
+ * page hands back is routinely `{"documentId":"01HXY…"}` — braces and quotes
+ * that a shell eats. The hint exists to be copied verbatim, so anything but a
+ * bare word is single-quoted POSIX-style (an embedded `'` closes, escapes and
+ * reopens the quoting).
+ */
+export declare function quoteCursorArg(cursor: string): string;
+/**
+ * The "there is another page" hint, printed only when there is one.
+ *
+ * The counterpart of the envelope's `nextCursor` for a reader who is not
+ * parsing JSON: the same token, spelled as the argument that fetches the next
+ * page.
+ */
+export declare function printPageHint(page: PageBoundary): void;
+/**
+ * The empty state for one page.
+ *
+ * An empty page is not the same thing as an empty listing: several routes cut
+ * the page from an index and filter it afterwards — `withoutFunctionOwned` and
+ * the status filter on webhooks, the bounded index scans — so a page can come
+ * back with no rows and a cursor pointing at matches further along. Before
+ * #3646 the draining readers hid that; now that a `list` prints one page,
+ * "No <subject> found." would be a lie in exactly that case, so it is said
+ * only when the server reported no next page, and the continuation is printed
+ * either way.
+ */
+export declare function printEmptyPage(page: PageBoundary, subject: string, emptyListing?: string): void;
+export {};

package/dist/src/lib/list-options.js

@@ -0,0 +1,89 @@
+/**
+ * The `--limit` / `--cursor` pair every paged `list` verb declares (#3646).
+ *
+ * Pagination is a property of the route, not of the verb that happens to have
+ * needed it first: a `list` backed by a paged server route carries both flags,
+ * prints exactly one page and reports the page boundary in its envelope; a
+ * `list` backed by an unpaged route carries neither. Declaring the pair from
+ * one place keeps the help text — and therefore the command manifest the docs
+ * gate reads — identical across the thirty-odd verbs that page.
+ *
+ * `cli/tests/unit/list-envelope-uniform-3646.test.ts` walks the manifest and
+ * fails a `list` that declares one of the two without the other.
+ */
+import { Option } from "commander";
+import { error, info } from "./output.js";
+/** `--limit <n>`, for a list whose route pages. */
+export function pageLimitOption() {
+    return new Option("--limit <n>", "Maximum rows in one page (the route's own default when omitted)");
+}
+/** `--cursor <cursor>`, for a list whose route pages. */
+export function pageCursorOption() {
+    return new Option("--cursor <cursor>", "Page to resume from: the `nextCursor` of a previous page");
+}
+/**
+ * Read `--limit` as a positive integer, or exit naming the flag.
+ *
+ * Refuses before the action asks anything of the server, so a typo costs a
+ * message rather than a page of rows the caller did not ask for.
+ *
+ * Only an absent flag means "the route's own default": an empty value is a
+ * value, and `--limit "$LIMIT"` with `LIMIT` unset is the ordinary way a script
+ * supplies one. Reading it as an omission would answer a malformed request with
+ * a page the caller never asked for, so it takes the same refusal as `--limit
+ * zero`.
+ */
+export function parsePageLimit(raw) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    const limit = Number(raw);
+    if (!Number.isInteger(limit) || limit <= 0) {
+        error("--limit must be a positive integer.");
+        process.exit(1);
+    }
+    return limit;
+}
+/**
+ * A cursor as it must appear after `--cursor` in a printed hint.
+ *
+ * A list cursor is the server's keyset position run through `JSON.stringify`
+ * (`encodeListCursor`, `src/app-api/helpers/list-params.ts`), so the token a
+ * page hands back is routinely `{"documentId":"01HXY…"}` — braces and quotes
+ * that a shell eats. The hint exists to be copied verbatim, so anything but a
+ * bare word is single-quoted POSIX-style (an embedded `'` closes, escapes and
+ * reopens the quoting).
+ */
+export function quoteCursorArg(cursor) {
+    if (/^[A-Za-z0-9._:/=+-]+$/.test(cursor))
+        return cursor;
+    return `'${cursor.replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * The "there is another page" hint, printed only when there is one.
+ *
+ * The counterpart of the envelope's `nextCursor` for a reader who is not
+ * parsing JSON: the same token, spelled as the argument that fetches the next
+ * page.
+ */
+export function printPageHint(page) {
+    if (!page.nextCursor)
+        return;
+    info(`More results available. Re-run with --cursor ${quoteCursorArg(page.nextCursor)}`);
+}
+/**
+ * The empty state for one page.
+ *
+ * An empty page is not the same thing as an empty listing: several routes cut
+ * the page from an index and filter it afterwards — `withoutFunctionOwned` and
+ * the status filter on webhooks, the bounded index scans — so a page can come
+ * back with no rows and a cursor pointing at matches further along. Before
+ * #3646 the draining readers hid that; now that a `list` prints one page,
+ * "No <subject> found." would be a lie in exactly that case, so it is said
+ * only when the server reported no next page, and the continuation is printed
+ * either way.
+ */
+export function printEmptyPage(page, subject, emptyListing = `No ${subject} found.`) {
+    info(page.nextCursor ? `No ${subject} on this page.` : emptyListing);
+    printPageHint(page);
+}
+//# sourceMappingURL=list-options.js.map

package/dist/src/lib/list-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-options.js","sourceRoot":"","sources":["../../../src/lib/list-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAE1C,mDAAmD;AACnD,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,MAAM,CACf,aAAa,EACb,iEAAiE,CAClE,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,MAAM,CACf,mBAAmB,EACnB,0DAA0D,CAC3D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAOD;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACxD,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO;IAC7B,IAAI,CACF,gDAAgD,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAClF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAkB,EAClB,OAAe,EACf,YAAY,GAAG,MAAM,OAAO,SAAS;IAErC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACrE,aAAa,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}

package/dist/src/lib/local-state.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Per-machine Primitive state: `.primitive/local.json` (#2873).
+ *
+ * `primitive env use` records which environment THIS machine is pointed at.
+ * That is not a team decision, so it must not land in the committed
+ * `primitive/config.json` — `defaultEnvironment` stays the team default a
+ * fresh clone resolves. The file sits beside `credentials.json`, which has the
+ * same "local, never committed" property.
+ *
+ * Reads go through the shared core (`env-resolver-core.ts`) so every reader —
+ * CLI, Vite plugin, Swift script — agrees; this module owns the writes and the
+ * ignore coverage that keeps the file out of `git status`.
+ */
+import { localStatePathForConfigPath, readLocalSelection } from "./env-resolver-core.js";
+export { localStatePathForConfigPath, readLocalSelection };
+/**
+ * Writes this machine's environment selection. Returns the path written so
+ * callers can name it in their success message.
+ */
+export declare function writeLocalSelection(configPath: string, name: string): string;
+/**
+ * Clears the selection if (and only if) it names `name`. Used by `env remove`
+ * so removing the selected environment can't leave a dangling selection that
+ * makes every later command fail.
+ */
+export declare function clearLocalSelection(configPath: string, name: string): boolean;
+export interface IgnoreCoverageOutcome {
+    /**
+     * - `not-a-repo`     — nothing to do; the file cannot show up in a diff.
+     * - `already-ignored`— a committed .gitignore (or an earlier exclude) covers it.
+     * - `excluded`       — we appended a pattern to the repo's info/exclude file.
+     * - `failed`         — git was unavailable or the write failed; caller warns.
+     */
+    status: "not-a-repo" | "already-ignored" | "excluded" | "failed";
+    /** The exclude file written, for `excluded`. */
+    excludePath?: string;
+    /** The pattern written, for `excluded`. */
+    pattern?: string;
+    /** Why, for `failed`. */
+    detail?: string;
+}
+/**
+ * Makes sure `.primitive/local.json` is ignored before it is written.
+ *
+ * Templates scaffolded from now on carry the entry in their `.gitignore`, but
+ * projects created before this change do not — and `env use` writing an
+ * untracked-but-committable file would be exactly the "switching backends
+ * dirties the repo" problem this replaced. When the file is not already
+ * covered we append an anchored pattern to the repository's exclude file,
+ * resolved via `git rev-parse --git-path info/exclude` so a linked worktree
+ * (where `.git` is a FILE) works, and anchored relative to
+ * `git rev-parse --show-toplevel` so a project root nested below the worktree
+ * root is not mis-rooted.
+ */
+export declare function ensureLocalStateIgnored(localStatePath: string): IgnoreCoverageOutcome;