safety

const (
	// DefaultMaxDocs is defaults.max_bulk (§4.2): the default blast-radius cap
	// on a bulk write. It is NOT a page size — see CheckLimitFlag.
	DefaultMaxDocs = 100
	// ChunkSize is how many ids go into one `?where={"id":{"in":[…]}}` request
	// during §12.3 phase 3.
	ChunkSize = 100
)

const (
	CmdFind            = "find"
	CmdGet             = "get"
	CmdCount           = "count"
	CmdDescribe        = "describe"
	CmdCollections     = "collections"
	CmdExplain         = "explain"
	CmdAccess          = "access"
	CmdCan             = "can"
	CmdWhoami          = "whoami"
	CmdDownload        = "download"
	CmdDiscover        = "discover"
	CmdDoctor          = "doctor"
	CmdCache           = "cache"
	CmdRaw             = "raw"
	CmdVersionsList    = "versions list"
	CmdVersionsGet     = "versions get"
	CmdVersionsDiff    = "versions diff"
	CmdGlobalsList     = "globals list"
	CmdGlobalsGet      = "globals get"
	CmdCreate          = "create"
	CmdUpdate          = "update"
	CmdUpload          = "upload"
	CmdDuplicate       = "duplicate"
	CmdPublish         = "publish"
	CmdUnpublish       = "unpublish"
	CmdDelete          = "delete"
	CmdRestore         = "restore"
	CmdGlobalsUpdate   = "globals update"
	CmdVersionsRestore = "versions restore"
	// CmdURL is `pay url` (F9). The --preview handshake GETs a site route that
	// issues a draft-mode cookie; it changes no content, so it is L0.
	CmdURL = "url"

	// The `pay blocks` family edits a document that arrives on stdin and puts
	// nothing on the wire, so every one of them is L0 — the same level as a
	// read, and for the same reason: nothing it does can be wrong on the
	// server. The write happens later, once, in `pay apply`.
	CmdBlocksList   = "blocks ls"
	CmdBlocksMove   = "blocks mv"
	CmdBlocksRemove = "blocks rm"
	CmdBlocksAdd    = "blocks add"
	CmdBlocksCopy   = "blocks cp"
	CmdBlocksSet    = "blocks set"

	// The block catalog (§7.10c) reads documents to learn what blocks exist,
	// never writes one, and reads nothing from stdin except `validate`'s
	// document. All six are L0.
	CmdBlocksTypes    = "blocks types"
	CmdBlocksSchema   = "blocks schema"
	CmdBlocksExample  = "blocks example"
	CmdBlocksNew      = "blocks new"
	CmdBlocksValidate = "blocks validate"
	CmdBlocksLearn    = "blocks learn"

	// The `pay lexical` family converts rich text between Lexical JSON and
	// Markdown on the local machine. Nothing it does reaches the server.
	CmdLexicalFromMD = "lexical from-md"
	CmdLexicalToMD   = "lexical to-md"
	CmdLexicalText   = "lexical text"

	// CmdApply is the pipeline's write half: one PATCH, one document,
	// addressed by the id the upstream envelope carries. It is exactly as
	// risky as `pay update <id>` and is levelled with it.
	CmdApply = "apply"

	// CmdBackupsRestore writes a §12.8 backup file back to the server: it
	// overwrites the current document wholesale (or re-creates a deleted
	// one), so it is levelled with `versions restore`. CmdBackupsPrune deletes
	// local backup files — the safety net itself — and is L2 for the same
	// reason a permanent delete is.
	CmdBackupsRestore = "backups restore"
	CmdBackupsPrune   = "backups prune"
)

const (
	// CmdUpsert creates the document its --match fields do not find, or
	// updates the one they do. It writes exactly one document, so it is
	// levelled with create/update (L1).
	CmdUpsert = "upsert"
	// CmdPlan reads a manifest directory and the server and reports what a
	// sync would do. It never writes: L0.
	CmdPlan = "plan"
	// CmdSync executes a plan: several documents (and globals) in one
	// invocation. It is L2 — it prompts on a TTY and requires --yes in a
	// non-TTY — because it can touch a global and many documents at once,
	// while every item is still a scoped, backed-up, audited write.
	CmdSync = "sync"
)

const (
	ActionCreate         = "create"
	ActionUpdate         = "update"
	ActionDelete         = "delete"
	ActionTrash          = "trash"
	ActionRestore        = "restore"
	ActionPublish        = "publish"
	ActionUnpublish      = "unpublish"
	ActionUpload         = "upload"
	ActionRestoreVersion = "restore_version"
	ActionRaw            = "raw"
	// ActionRestoreBackup is `pay backups restore` (§12.8).
	ActionRestoreBackup = "restore_backup"
)

const CmdDiff = "diff"

const CmdOutline = "outline"

const SampleLimit = 5