primitive-admin 1.2.0-alpha.10 → 1.2.0-alpha.12

package/dist/src/lib/generated-sdk-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"generated-sdk-types.js","sourceRoot":"","sources":["../../../src/lib/generated-sdk-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,q0vLAAq0vL,CAAC"}
+{"version":3,"file":"generated-sdk-types.js","sourceRoot":"","sources":["../../../src/lib/generated-sdk-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,yq+bAAyq+b,CAAC"}

package/dist/src/lib/init-assets.d.ts

@@ -18,12 +18,6 @@ export declare function platformLabel(platform: Platform): string;
  * file is the cheapest place for a reader to find that rule.
  */
 export declare const CANONICAL_SCHEMA_HEADER = "# The model schema for this app \u2014 ONE copy, shared by every client.\n#\n# The TOML keys here are the wire field names, so a second copy that drifts\n# orphans the other one's records. Every client reads THIS file:\n#   - the web client's codegen input points at it, and its generated barrel\n#     imports it directly\n#   - the Swift client names it in `bao-codegen.json` beside its sources\n# Add or change a model here, then re-run each client's codegen.\n";
-/**
- * A starter schema for the rare composition that has no template starter to
- * adopt. The scaffolded clients normally supply their own, which is what a
- * composed repo promotes to the root.
- */
-export declare const FALLBACK_STARTER_SCHEMA = "[models.user_prefs.fields.id]\ntype = \"id\"\nauto_assign = true\nindexed = true\nrequired = true\n\n[models.user_prefs.fields.key]\ntype = \"string\"\nindexed = true\nunique = true\n\n[models.user_prefs.fields.value]\ntype = \"string\"\n";
 /**
  * The app-wide `AGENTS.md` for a repository with several clients.
  *
@@ -36,4 +30,6 @@ export declare function rootAgentsMarkdown(input: {
         platform: Platform;
         dir: string;
     }>;
+    /** Whether the repository has `models/models.toml`; the layout names it only then. */
+    schema?: boolean;
 }): string;

package/dist/src/lib/init-assets.js

@@ -18,25 +18,6 @@ export const CANONICAL_SCHEMA_HEADER = `# The model schema for this app — ONE
 #   - the Swift client names it in \`bao-codegen.json\` beside its sources
 # Add or change a model here, then re-run each client's codegen.
 `;
-/**
- * A starter schema for the rare composition that has no template starter to
- * adopt. The scaffolded clients normally supply their own, which is what a
- * composed repo promotes to the root.
- */
-export const FALLBACK_STARTER_SCHEMA = `[models.user_prefs.fields.id]
-type = "id"
-auto_assign = true
-indexed = true
-required = true
-
-[models.user_prefs.fields.key]
-type = "string"
-indexed = true
-unique = true
-
-[models.user_prefs.fields.value]
-type = "string"
-`;
 /**
  * The app-wide `AGENTS.md` for a repository with several clients.
  *
@@ -44,13 +25,20 @@ type = "string"
  * own file is never replaced by init.
  */
 export function rootAgentsMarkdown(input) {
+    const schema = input.schema ?? true;
     const rows = input.clients
         .map((client) => `- \`${client.dir}/\` — ${platformLabel(client.platform)} client`)
         .join("\n");
+    const schemaRow = schema
+        ? `- \`models/models.toml\` — the model schema. ONE copy: its keys are the wire
+  field names, so a second copy that drifts orphans the other's records. Each
+  client's codegen reads this file in place; never copy it into a client.
+`
+        : "";
     return `# ${input.appName}
 
 One Primitive app, several clients. The app is the shared thing: one app ID,
-one set of environments, one exported server config, one model schema. Each
+one set of environments, one exported server config${schema ? ", one model schema" : ""}. Each
 client is an independent project in its own directory — there is no workspace
 file and no root \`package.json\`.
 
@@ -61,10 +49,7 @@ file and no root \`package.json\`.
 - \`primitive/<env>/\` — the exported server config (workflows,
   database type configs, app settings) that \`primitive config diff\` and
   \`primitive config push\` read and write.
-- \`models/models.toml\` — the model schema. ONE copy: its keys are the wire
-  field names, so a second copy that drifts orphans the other's records. Each
-  client's codegen reads this file in place; never copy it into a client.
-${rows}
+${schemaRow}${rows}
 
 ## Per app vs per client
 
@@ -72,8 +57,7 @@ ${rows}
 | --- | --- |
 | Environments and app ID | Generated code |
 | Exported server config | Dependencies and build config |
-| Model schema | Runtime connection settings |
-| Secrets | Deploy configuration |
+${schema ? "| Model schema | Runtime connection settings |\n| Secrets | Deploy configuration |" : "| Secrets | Runtime connection settings |\n| — | Deploy configuration |"}
 | — | Its own \`AGENTS.md\` |
 
 ## Running commands
@@ -90,7 +74,7 @@ primitive init <dir> --platform <web|ios>
 \`\`\`
 
 Run from inside this repository, that adds a client to THIS app: it reuses this
-config, wires the new client to \`models/models.toml\`, and creates no second
+config, ${schema ? "wires the new client to \`models/models.toml\`, " : ""}and creates no second
 \`.primitive/\` and no second git repository.
 `;
 }

package/dist/src/lib/init-assets.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-assets.js","sourceRoot":"","sources":["../../../src/lib/init-assets.ts"],"names":[],"mappings":"AAWA,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,QAAkB;IAC9C,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;CAQtC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;CAatC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAGlC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,GAAG,SAAS,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;SAClF,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,KAAK,KAAK,CAAC,OAAO;;;;;;;;;;;;;;;;;EAiBzB,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BL,CAAC;AACF,CAAC"}
+{"version":3,"file":"init-assets.js","sourceRoot":"","sources":["../../../src/lib/init-assets.ts"],"names":[],"mappings":"AAWA,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,QAAkB;IAC9C,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;CAQtC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAKlC;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,GAAG,SAAS,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;SAClF,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,MAAM;QACtB,CAAC,CAAC;;;CAGL;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,KAAK,KAAK,CAAC,OAAO;;;qDAG0B,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;EAWrF,SAAS,GAAG,IAAI;;;;;;;;EAQhB,MAAM,CAAC,CAAC,CAAC,oFAAoF,CAAC,CAAC,CAAC,yEAAyE;;;;;;;;;;;;;;;;;UAiBjK,MAAM,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,EAAE;;CAEzE,CAAC;AACF,CAAC"}

package/dist/src/lib/init-schema.d.ts

@@ -11,6 +11,14 @@ export declare function relativeSchemaPath(fromDir: string, toFile: string): str
  * none (the Swift starter is comment-only but the file is still there).
  */
 export declare function findClientSchema(clientDir: string, platform: Platform): string | null;
+/**
+ * Why a root client with no schema where either template keeps one cannot
+ * join a composed app, or null when it can: a web client whose codegen script
+ * feeds `js-bao-codegen-v2` a schema file that exists keeps it somewhere this
+ * run does not recognize. A client that reads no schema file joins with
+ * nothing moved (#4929).
+ */
+export declare function misplacedClientSchema(clientDir: string): string | null;
 /** The Swift target's source directory (`Sources/<AppName>`), if there is one. */
 export declare function findSwiftTargetDir(clientDir: string): string | null;
 /**

package/dist/src/lib/init-schema.js

@@ -20,6 +20,10 @@
  * Every function here reports what it changed rather than throwing on a shape
  * it does not recognize, so a caller can say precisely what it did and did not
  * rewire.
+ *
+ * A web client with no `src/models/models.toml` (the template since the
+ * fold-in, #4929, which generates its models from `primitive/<env>/db3-types/`)
+ * reads no schema, so it has nothing to check and nothing to wire.
  */
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync, } from "fs";
 import { createHash } from "crypto";
@@ -52,6 +56,29 @@ export function findClientSchema(clientDir, platform) {
     }
     return findSwiftSchema(clientDir);
 }
+/**
+ * Why a root client with no schema where either template keeps one cannot
+ * join a composed app, or null when it can: a web client whose codegen script
+ * feeds `js-bao-codegen-v2` a schema file that exists keeps it somewhere this
+ * run does not recognize. A client that reads no schema file joins with
+ * nothing moved (#4929).
+ */
+export function misplacedClientSchema(clientDir) {
+    const packageJsonPath = join(clientDir, "package.json");
+    if (!existsSync(packageJsonPath))
+        return null;
+    let codegen;
+    try {
+        codegen = JSON.parse(readFileSync(packageJsonPath, "utf-8")).scripts?.codegen;
+    }
+    catch {
+        return null;
+    }
+    const input = typeof codegen === "string" ? codegen.match(/js-bao-codegen-v2\b[^&|;]*?\s-i\s+(\S+)/)?.[1] : null;
+    return input && existsSync(join(clientDir, input))
+        ? `${packageJsonPath}'s codegen script reads ${input}`
+        : null;
+}
 /** `Sources/<AppName>/Models/models.toml`, whatever the app is called. */
 function findSwiftSchema(clientDir) {
     const sources = join(clientDir, "Sources");
@@ -189,6 +216,8 @@ export function checkClientWiring(clientDir, platform, schemaPath) {
         : checkSwiftWiring(clientDir, schemaPath);
 }
 function checkWebWiring(clientDir, schemaPath) {
+    if (!existsSync(join(clientDir, WEB_SCHEMA_RELATIVE)))
+        return null;
     const packageJsonPath = join(clientDir, "package.json");
     if (!existsSync(packageJsonPath)) {
         return `no package.json in ${clientDir}`;
@@ -235,6 +264,8 @@ function checkSwiftWiring(clientDir, schemaPath) {
     return null;
 }
 function wireWebClient(clientDir, schemaPath) {
+    if (!existsSync(join(clientDir, WEB_SCHEMA_RELATIVE)))
+        return { rewired: [] };
     const rewired = [];
     const packageJsonPath = join(clientDir, "package.json");
     // The codegen input: `-i src/models/models.toml` -> `-i ../models/models.toml`.

package/dist/src/lib/init-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-schema.js","sourceRoot":"","sources":["../../../src/lib/init-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,MAAM,EACN,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG1E,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAEvE,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAEjE,+DAA+D;AAC/D,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAE9D,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAE5E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAc;IAChE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,QAAkB;IAElB,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE,CAAC,CAAC,WAAW,EAAE,CAChB,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAQ,EAAE;QACnD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACzD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;gBACvC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjD,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC;YACpD,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,GAAG,IAAI,IAAI,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC;QACpD,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAKpC;IACC,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE7C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACvC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAClG,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,QAAkB,EAClB,UAAkB;IAElB,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACpD,OAAO,QAAQ,KAAK,KAAK;QACvB,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC;QACtC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,QAAkB,EAClB,UAAkB;IAElB,OAAO,QAAQ,KAAK,KAAK;QACvB,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC;QACvC,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,UAAkB;IAC3D,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,OAAO,sBAAsB,SAAS,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,mBAAmB,eAAe,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAuB,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvD,OAAO,gCAAgC,eAAe,EAAE,CAAC;IAC3D,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,OAAO,CACL,GAAG,UAAU,qEAAqE;YAClF,8BAA8B,UAAU,oCAAoC,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,UAAkB;IAC7D,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,kCAAkC,SAAS,EAAE,CAAC;IACvD,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,cAAc,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,oBAAoB,CACnC,SAAS,EACT,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,EACnC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAChC,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CACL,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,cAAc,8BAA8B;gBAC/E,wBAAwB,UAAU,oCAAoC,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,UAAkB;IAC1D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAExD,gFAAgF;IAChF,MAAM,cAAc,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,GAAG,GAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAW,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjF,GAAG,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CACnC,cAAc,EACd,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,cAAc,EAAE,CAC7D,CAAC;IACF,aAAa,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE9B,iEAAiE;IACjE,0EAA0E;IAC1E,iCAAiC;IACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAC9B,oBAAoB,EACpB,KAAK,eAAe,IAAI,CACzB,CAAC;QACF,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,oEAAoE;IACpE,+EAA+E;IAC/E,6EAA6E;IAC7E,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CACV,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAI,OAA2B,CAAC;IAChC,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC1D,MAAM,CAAC,WAAW,CAAC,CAAC;QACpB,OAAO,GAAG,WAAW,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,SAAiB,EAAE,aAAqB;IACrE,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,WAAW,EAAE,CAAC,CAAC;QACjG,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS;QAC/B,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAkB;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAE,CAAC;IAEjD,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEzB,6EAA6E;IAC7E,4CAA4C;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAChC,yBAAyB,EACzB,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CAChC,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAC1F,CAAC;YACF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC3B,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,6EAA6E;IAC7E,wCAAwC;IACxC,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CACV,GAAG,iBAAiB,CAClB,SAAS,EACT,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,EAChC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAChC,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAA2B,CAAC;IAChC,IAAI,WAAW,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,CAAC;QACpB,OAAO,GAAG,WAAW,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,OAAe;IACtE,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"init-schema.js","sourceRoot":"","sources":["../../../src/lib/init-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,MAAM,EACN,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG1E,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAEvE,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAEjE,+DAA+D;AAC/D,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAE9D,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAE5E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAc;IAChE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,QAAkB;IAElB,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GACT,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrG,OAAO,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,GAAG,eAAe,2BAA2B,KAAK,EAAE;QACtD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE,CAAC,CAAC,WAAW,EAAE,CAChB,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAQ,EAAE;QACnD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACzD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;gBACvC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjD,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC;YACpD,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,GAAG,IAAI,IAAI,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC;QACpD,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAKpC;IACC,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE7C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACvC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAClG,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,QAAkB,EAClB,UAAkB;IAElB,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACpD,OAAO,QAAQ,KAAK,KAAK;QACvB,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC;QACtC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,QAAkB,EAClB,UAAkB;IAElB,OAAO,QAAQ,KAAK,KAAK;QACvB,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC;QACvC,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,UAAkB;IAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,OAAO,sBAAsB,SAAS,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,mBAAmB,eAAe,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAuB,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvD,OAAO,gCAAgC,eAAe,EAAE,CAAC;IAC3D,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,OAAO,CACL,GAAG,UAAU,qEAAqE;YAClF,8BAA8B,UAAU,oCAAoC,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,UAAkB;IAC7D,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,kCAAkC,SAAS,EAAE,CAAC;IACvD,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,cAAc,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,oBAAoB,CACnC,SAAS,EACT,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,EACnC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAChC,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CACL,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,cAAc,8BAA8B;gBAC/E,wBAAwB,UAAU,oCAAoC,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,UAAkB;IAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAExD,gFAAgF;IAChF,MAAM,cAAc,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,GAAG,GAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAW,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjF,GAAG,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CACnC,cAAc,EACd,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,cAAc,EAAE,CAC7D,CAAC;IACF,aAAa,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE9B,iEAAiE;IACjE,0EAA0E;IAC1E,iCAAiC;IACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAC9B,oBAAoB,EACpB,KAAK,eAAe,IAAI,CACzB,CAAC;QACF,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,oEAAoE;IACpE,+EAA+E;IAC/E,6EAA6E;IAC7E,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CACV,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAI,OAA2B,CAAC;IAChC,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC1D,MAAM,CAAC,WAAW,CAAC,CAAC;QACpB,OAAO,GAAG,WAAW,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,SAAiB,EAAE,aAAqB;IACrE,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,WAAW,EAAE,CAAC,CAAC;QACjG,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS;QAC/B,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAkB;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAE,CAAC;IAEjD,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEzB,6EAA6E;IAC7E,4CAA4C;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAChC,yBAAyB,EACzB,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CAChC,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAC1F,CAAC;YACF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC3B,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,6EAA6E;IAC7E,wCAAwC;IACxC,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CACV,GAAG,iBAAiB,CAClB,SAAS,EACT,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,EAChC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAChC,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAA2B,CAAC;IAChC,IAAI,WAAW,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,CAAC;QACpB,OAAO,GAAG,WAAW,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,OAAe;IACtE,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/lib/session-scope.d.ts

@@ -0,0 +1,26 @@
+import type { Credentials } from "../types/index.js";
+/** The app a request is for, and its parent: a pin on either reaches it. */
+export interface ScopeTarget {
+    appId: string;
+    parentAppId?: string | null;
+}
+/**
+ * Whether a token holding `held` (undefined: unscoped, every scope) and
+ * pinned to `apps` can use `scope` on an app route of `target`, as the
+ * server's reach check decides: a pinned token reaches only its pinned apps
+ * and their children, and an unpinned token holding `admin` reaches only
+ * platform routes.
+ */
+export declare function tokenReachesScope(token: {
+    scope?: unknown;
+    apps?: unknown;
+}, scope: string, target: ScopeTarget): boolean;
+/**
+ * Whether `credentials` can use `scope` on `target`: the login's own token
+ * can (a token with no `scope` claim is unscoped and holds every scope), or
+ * an unexpired step-up stored beside it can, as the API client retries a
+ * request refused for `admin` with that step-up. Either must also reach the
+ * app ({@link tokenReachesScope}). Null when the login's token has no claims
+ * to read (an opaque CI token) and no step-up can.
+ */
+export declare function sessionHoldsScope(credentials: Credentials, scope: string, target: ScopeTarget, now?: number): boolean | null;

package/dist/src/lib/session-scope.js

@@ -0,0 +1,58 @@
+/**
+ * Whether the stored admin session holds a scope, read from its token's
+ * claims and the step-up stored beside it, with no request. The server is the
+ * judge of every request; this lets a command refuse up front what the server
+ * would refuse partway through.
+ */
+import { isCiToken } from "./session-id.js";
+function claimsOf(token) {
+    try {
+        const payload = JSON.parse(Buffer.from(token.split(".")[1] ?? "", "base64url").toString("utf-8"));
+        return payload && typeof payload === "object" ? payload : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Whether a token holding `held` (undefined: unscoped, every scope) and
+ * pinned to `apps` can use `scope` on an app route of `target`, as the
+ * server's reach check decides: a pinned token reaches only its pinned apps
+ * and their children, and an unpinned token holding `admin` reaches only
+ * platform routes.
+ */
+export function tokenReachesScope(token, scope, target) {
+    if (token.scope === undefined)
+        return true;
+    const held = Array.isArray(token.scope) ? token.scope : [];
+    if (!held.includes(scope))
+        return false;
+    const apps = Array.isArray(token.apps) ? token.apps : [];
+    if (apps.length === 0)
+        return !held.includes("admin");
+    return (apps.includes(target.appId) ||
+        (!!target.parentAppId && apps.includes(target.parentAppId)));
+}
+/**
+ * Whether `credentials` can use `scope` on `target`: the login's own token
+ * can (a token with no `scope` claim is unscoped and holds every scope), or
+ * an unexpired step-up stored beside it can, as the API client retries a
+ * request refused for `admin` with that step-up. Either must also reach the
+ * app ({@link tokenReachesScope}). Null when the login's token has no claims
+ * to read (an opaque CI token) and no step-up can.
+ */
+export function sessionHoldsScope(credentials, scope, target, now = Date.now()) {
+    const stepUp = credentials.stepUp;
+    if (stepUp &&
+        new Date(stepUp.expiresAt).getTime() > now &&
+        tokenReachesScope(stepUp, scope, target)) {
+        return true;
+    }
+    if (isCiToken(credentials.accessToken))
+        return null;
+    const claims = claimsOf(credentials.accessToken);
+    if (!claims)
+        return null;
+    return tokenReachesScope(claims, scope, target);
+}
+//# sourceMappingURL=session-scope.js.map

package/dist/src/lib/session-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-scope.js","sourceRoot":"","sources":["../../../src/lib/session-scope.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACtE,CAAC;QACF,OAAO,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA0C,EAC1C,KAAa,EACb,MAAmB;IAEnB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3B,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAwB,EACxB,KAAa,EACb,MAAmB,EACnB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,IACE,MAAM;QACN,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG;QAC1C,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,EACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/lib/sync-resource-types.d.ts

@@ -360,6 +360,12 @@ export interface PushPruneSpec {
      * fail-safe no shipped spec uses since #2762 wired the last one.
      */
     deleteEntity: ((client: ApiClient, appId: string, address: string) => Promise<void>) | null;
+    /**
+     * The delete is a hard delete (`?hard=true`), which needs the `admin` scope;
+     * a session without it is refused before the push applies anything
+     * ({@link pruneAdminScopeRefusal}).
+     */
+    deleteNeedsAdmin?: boolean;
     /**
      * A consequence of deleting this type the prune plan must state before the
      * operator confirms — printed under the item's "will delete" line, in
@@ -481,6 +487,10 @@ export type PushPruneDecision =
  * live `modifiedAt` matches prior state (or under `--force`). A 404 means the
  * work is already done (drop the stale state). Any other read failure, a missing
  * address, or a type without a delete surface leaves everything untouched.
+ *
+ * An archived row is still pending deletion, whatever its `modifiedAt`: it
+ * keeps its key, and archiving is what moved the timestamp. Status is
+ * server-owned and not in TOML, so the move is not drift.
  */
 export declare function decidePushPruneCandidate(input: {
     spec: PushPruneSpec;
@@ -489,6 +499,28 @@ export declare function decidePushPruneCandidate(input: {
     fetch: PushPruneFetch;
     force: boolean;
 }): PushPruneDecision;
+/** One candidate of a push-prune plan and what to do with it. */
+export interface PushPrunePlanItem {
+    spec: PushPruneSpec;
+    key: string;
+    entry: any;
+    address?: string;
+    decision: PushPruneDecision;
+}
+/**
+ * Plan a push-prune over `specs`: every prior-state key no local file declares
+ * and `includes` selects, each confirmed by a point read and decided by
+ * {@link decidePushPruneCandidate}. Reads only.
+ */
+export declare function planPushPrune(input: {
+    specs: readonly PushPruneSpec[];
+    configDir: string;
+    entities: Record<string, any> | undefined;
+    includes: (label: string, key: string) => boolean;
+    client: ApiClient;
+    appId: string;
+    force: boolean;
+}): Promise<PushPrunePlanItem[]>;
 /**
  * What a failed prune DELETE call means for the entity's sync-state slot.
  *
@@ -530,6 +562,28 @@ export declare function formatPrunePlan(items: Array<{
     key: string;
     decision: PushPruneDecision;
 }>): PrunePlanLine[];
+/** The step-up a prune's hard deletes need, valid for 15 minutes. */
+export declare const PRUNE_STEP_UP_COMMAND = "primitive login --step-up --scope write,admin";
+/**
+ * The refusal for a prune plan that hard-deletes, from a session without the
+ * `admin` scope: it names each hard delete, the missing scope and the step-up.
+ * A candidate whose point read failed is named too: the plan `config push`
+ * rebuilds after applying could find it and delete it. Null when the plan
+ * deletes nothing that needs `admin`. `config push` checks it before applying
+ * anything, so the push does not land halfway and then have its deletes
+ * refused one by one.
+ */
+export declare function pruneAdminScopeRefusal(items: Array<{
+    spec: PushPruneSpec;
+    key: string;
+    decision: PushPruneDecision;
+}>): string | null;
+/**
+ * The refusal for a prune plan that hard-deletes when the session's scope
+ * could not be read: the push stops rather than assume `admin` and apply
+ * everything else before the deletes are refused.
+ */
+export declare function pruneScopeUnknownRefusal(reason: string): string;
 /**
  * Remove a pruned block's sidecar `<key>.tests/` directory and its
  * `entities.testCases` state records. The main file is already gone (that is

package/dist/src/lib/sync-resource-types.js

@@ -636,6 +636,7 @@ export const PUSH_PRUNE_SPECS = [
         deleteEntity: async (c, a, id) => {
             await c.deleteIntegration(a, id, { hard: true });
         },
+        deleteNeedsAdmin: true,
     },
     {
         resourceType: pruneTypeFor("blob-bucket"),
@@ -661,6 +662,7 @@ export const PUSH_PRUNE_SPECS = [
         deleteEntity: async (c, a, id) => {
             await c.deletePrompt(a, id, true);
         },
+        deleteNeedsAdmin: true,
     },
     {
         // #3179 — server functions. Hard-delete rather than archive, following the
@@ -677,6 +679,7 @@ export const PUSH_PRUNE_SPECS = [
         deleteEntity: async (c, a, id) => {
             await c.deleteFunction(a, id, { hard: true });
         },
+        deleteNeedsAdmin: true,
     },
     {
         resourceType: pruneTypeFor("rule-set"),
@@ -821,6 +824,10 @@ export function collectPushPruneCandidates(input) {
  * live `modifiedAt` matches prior state (or under `--force`). A 404 means the
  * work is already done (drop the stale state). Any other read failure, a missing
  * address, or a type without a delete surface leaves everything untouched.
+ *
+ * An archived row is still pending deletion, whatever its `modifiedAt`: it
+ * keeps its key, and archiving is what moved the timestamp. Status is
+ * server-owned and not in TOML, so the move is not drift.
  */
 export function decidePushPruneCandidate(input) {
     const { spec, address, priorModifiedAt, fetch: fetchOutcome, force } = input;
@@ -833,7 +840,8 @@ export function decidePushPruneCandidate(input) {
         const unchanged = !!priorModifiedAt &&
             !!serverModifiedAt &&
             serverModifiedAt === priorModifiedAt;
-        if (force || unchanged) {
+        const archived = fetchOutcome.detail?.status === "archived";
+        if (force || unchanged || archived) {
             return { action: "delete", address, serverModifiedAt };
         }
         return { action: "skip", reason: "drift", serverModifiedAt };
@@ -844,6 +852,51 @@ export function decidePushPruneCandidate(input) {
         return { action: "drop-state" };
     return { action: "skip", reason: "unconfirmed" };
 }
+/**
+ * Plan a push-prune over `specs`: every prior-state key no local file declares
+ * and `includes` selects, each confirmed by a point read and decided by
+ * {@link decidePushPruneCandidate}. Reads only.
+ */
+export async function planPushPrune(input) {
+    const { configDir, entities, includes, client, appId, force } = input;
+    const items = [];
+    for (const spec of input.specs) {
+        const candidates = collectPushPruneCandidates({
+            spec,
+            configDir,
+            priorEntities: entities?.[spec.resourceType.stateSlot],
+        }).filter(({ key }) => includes(spec.resourceType.label, key));
+        for (const { key, entry } of candidates) {
+            const address = spec.addressOf(key, entry);
+            // Behavior 4: skip the point read for a candidate we could not
+            // delete anyway — no usable address (for metadata-category-configs
+            // that includes a state key that is not a `resourceType#category`
+            // pair, #2762), or a spec with no delete surface.
+            let fetchOutcome = { ok: false };
+            if (address && spec.deleteEntity) {
+                // Point read: confirm live presence + drift. Fail closed — any
+                // non-404 error leaves the entity and its state slot untouched.
+                try {
+                    fetchOutcome = { ok: true, detail: await spec.fetchDetail(client, appId, address) };
+                }
+                catch (err) {
+                    if (err?.statusCode === 404) {
+                        fetchOutcome = { ok: false, status: 404 };
+                    }
+                }
+            }
+            const decision = decidePushPruneCandidate({
+                spec,
+                address,
+                priorModifiedAt: entry?.modifiedAt,
+                fetch: fetchOutcome,
+                force,
+            });
+            items.push({ spec, key, entry, address, decision });
+        }
+    }
+    return items;
+}
 /**
  * Classify an error thrown by a prune delete — one arm for every type.
  *
@@ -896,6 +949,44 @@ export function formatPrunePlan(items) {
         };
     });
 }
+/** The step-up a prune's hard deletes need, valid for 15 minutes. */
+export const PRUNE_STEP_UP_COMMAND = "primitive login --step-up --scope write,admin";
+/**
+ * The refusal for a prune plan that hard-deletes, from a session without the
+ * `admin` scope: it names each hard delete, the missing scope and the step-up.
+ * A candidate whose point read failed is named too: the plan `config push`
+ * rebuilds after applying could find it and delete it. Null when the plan
+ * deletes nothing that needs `admin`. `config push` checks it before applying
+ * anything, so the push does not land halfway and then have its deletes
+ * refused one by one.
+ */
+export function pruneAdminScopeRefusal(items) {
+    const needsAdmin = items.filter(({ spec }) => spec.deleteNeedsAdmin);
+    const hard = needsAdmin.filter(({ decision }) => decision.action === "delete");
+    const unconfirmed = needsAdmin.filter(({ decision }) => decision.action === "skip" && decision.reason === "unconfirmed");
+    if (hard.length === 0 && unconfirmed.length === 0)
+        return null;
+    const names = (list) => list.map(({ spec, key }) => `${spec.resourceType.label} ${key}`).join(", ");
+    const what = [
+        ...(hard.length > 0 ? [`permanently deletes ${names(hard)}`] : []),
+        ...(unconfirmed.length > 0
+            ? [`may permanently delete ${names(unconfirmed)} (the read that would confirm it failed)`]
+            : []),
+    ].join(" and ");
+    return (`The prune plan ${what}, which needs the \`admin\` scope ` +
+        `this session lacks. Nothing was applied. Run \`${PRUNE_STEP_UP_COMMAND}\` ` +
+        `for a 15-minute step-up, then push again.`);
+}
+/**
+ * The refusal for a prune plan that hard-deletes when the session's scope
+ * could not be read: the push stops rather than assume `admin` and apply
+ * everything else before the deletes are refused.
+ */
+export function pruneScopeUnknownRefusal(reason) {
+    return (`Could not confirm this session holds the \`admin\` scope the prune plan's ` +
+        `permanent deletes need: ${reason}. Nothing was applied. Push again, or run ` +
+        `\`${PRUNE_STEP_UP_COMMAND}\` for a 15-minute step-up first.`);
+}
 /**
  * Remove a pruned block's sidecar `<key>.tests/` directory and its
  * `entities.testCases` state records. The main file is already gone (that is