@akanjs/cli 3.0.0-alpha.111 → 3.0.0-alpha.113

package/.build-stamp

@@ -1 +1 @@
-6660bf15940cbc9b4a53a24ab76036c90d4f22b143fc19f7a957598c4a8afd4f
+b043c91f5476cad8f328dc840b74670a9e53078810ca74b011b5b38b05f79242

package/guidelines/conventions/conventions.instruction.md

@@ -403,7 +403,9 @@ framework has no hard delete for a model table, and `delete` is deliberately lef
 The facade spells `Many`/`One` out on its writes (`updateOne` / `updateMany` / `removeOne` / `removeMany`); only the
 count was shortened to `count(query)`, with `countDocuments` kept as `@deprecated`. `updateById(id, update)` and
 `removeById(id)` are those same query-level writes narrowed to one id, **not** the document path: they fire no hooks,
-so a model whose removal cascades or carries a `_postRemove` still goes through `remove<Model>(id)`.
+so a model whose removal cascades or carries a `_postRemove` still goes through `remove<Model>(id)`. The
+write-through pair is `pickAndWrite(id, data)` / `pickOneAndWrite(query, data)` — pick the document, write into it
+and save it, so the save hooks do run; reach for those when the write has to be seen by them.
 
 **`<model>.service.ts`** — keep methods to a few lines: load → chain → `return await ….save()`. Write `return await`
 explicitly in tail position; do not "optimize" it away. Side effects belong in `override async _preUpdate` /
@@ -515,7 +517,12 @@ Full contract — filter-arg `ref` pickers, `getQueryMeta` summary counters, `la
   `[object Object]`. It is an admin API: `root:` is always `Admin`.
 - A slice's `exec` returns a `QueryOf` (an opaque query descriptor); you **cannot** chain `.sort()`/`.limit()` on
   it. Apply ordering/paging via the store `init` fetch option instead: `initX(..., { sort, page, limit })`. For a
-  chainable builder use the model facade's `findMany`/`findOne`.
+  chainable builder use the model facade's `find`/`findOne`.
+- **A projection is bare on the facade and nested under `select` on a filter accessor.** `pickById(id, { secret:
+  true })` and `find`/`findOne`/`findById`/`pickOne` take the projection as their second argument; a generated
+  `findBy<Filter>(...args, { select: { secret: true } })` takes it inside the option object. The shapes do not swap
+  — `{ select: … }` handed to the facade projects a field named `select`, which no model has, and the read comes
+  back empty with no error. This is the only way to read a `field.secret(...)` value.
 - **A slice list is either one window or an accumulated one.** `setPageOf<Model>` swaps the window;
   `loadMoreOf<Model>()` appends the rows after the ones loaded and takes **no page number** — it skips by
   `<model>List.length`, so the offset cannot drift from what is on screen when a live insertion moves the server's

package/guidelines/queryRule/queryRule.instruction.md

@@ -43,7 +43,12 @@ with it. `conventions` carries the invariants — this is the full contract behi
   the server just returned, so it survives `{ insight: false }` — which makes no count query at all — and cannot
   drift from the count a live event moved. `loadMoreOf<Model>()` is a no-op once it is false, and `Load.Units`
   draws no infinite-scroll sentinel.
-- Generated list accessors like `listBy(...)` return `Promise<Doc[]>`. For a chainable builder (`.sort().skip().limit().select()`) use the model facade's `findMany`/`findOne` (`FindManyChain`, `pkgs/akanjs/document/into.ts`).
+- Generated list accessors like `listBy(...)` return `Promise<Doc[]>`. For a chainable builder (`.sort().skip().limit().select()`) use the model facade's `find`/`findOne` (`FindManyChain`, `pkgs/akanjs/document/into.ts`).
+- **A projection is bare on the facade and nested under `select` on a filter accessor.** `pickById(id, { secretField:
+  true })` / `find(query, { secretField: true })` take the projection as their second argument; a generated
+  `findBy<Filter>(...args, { select: { secretField: true } })` takes it inside the option object. The shapes do not
+  swap: `{ select: … }` handed to the facade projects a field named `select`, which no model has, and the read comes
+  back empty with no error. This is the only way to read a `field.secret(...)` value, which is otherwise stripped.
 - **Hydrated vs raw:** server queries return hydrated `cnst.<Model>` instances (with `set`/`save`/`refresh`); client fetch results are raw `GetStateObject` plain data (functions stripped, `pkgs/akanjs/base/types.ts`).
 - Every filter generates fourteen methods: `list` · `listIds` · `find` · `findId` · `pick` · `pickId` · `exists` ·
   `count` · `insight` · `query` · **`remove`** · **`removeOne`** · **`update`** · **`updateOne`**. The last four are

package/guidelines/workspaceOnboarding/workspaceOnboarding.instruction.md

@@ -233,8 +233,12 @@ query-level writes are in the convention set above; these are the shapes that bu
   already exist. A collision can build green and fail only at runtime — pick a distinct verb.
 - **Numbers are `Int` or `Float`, never `Number`.** `field(Number)` / `.body("x", Number)` fail to typecheck.
 - **Array fields use `field([T])`** — `tags: field([String])`, `images: field([File])`.
-- **Reading a secret field needs an explicit select.** `field(...).secret()` values are stripped from query results
-  by default: `this.userModel.pickById(id, { select: { passwordHash: true } })`.
+- **Reading a secret field needs an explicit select, and the two call sites spell it differently.**
+  `field(...).secret()` values are stripped from query results by default. The model facade takes the projection
+  **bare** — `this.userModel.pickById(id, { passwordHash: true })`, likewise `pickOne` / `find` / `findOne` /
+  `findById`. A generated filter accessor takes it **inside the option object** —
+  `this.userModel.findByAccountId(accountId, statuses, { select: { passwordHash: true } })`. Handing `{ select: … }`
+  to the facade selects a field named `select`, which no model has: the value arrives empty, with no error.
 - **`cascade` names a direction, and the wrong one is a data loss** — `removeRef` on the relation the owner holds,
   `removeWith` on the child's reference to its owner. A query-level removal fires no hooks and therefore no cascade.
 - **`q.search()` is a filter node, not a slice requirement.** `bySearch: filter().arg("text", String).query((text,

package/index.js

@@ -24,7 +24,7 @@ var commandModules = {
   page: async () => (await import("./page.command-vs9s3zrh.js")).PageCommand,
   context: async () => (await import("./context.command-ez8a0zyz.js")).ContextCommand,
   cloud: async () => (await import("./cloud.command-gxqp8xdv.js")).CloudCommand,
-  subspace: async () => (await import("./subspace.command-35a3t6vv.js")).SubspaceCommand,
+  subspace: async () => (await import("./subspace.command-fwjfcts7.js")).SubspaceCommand,
   guideline: async () => (await import("./guideline.command-xmqwx8zm.js")).GuidelineCommand,
   scalar: async () => (await import("./scalar.command-6k1vhe9s.js")).ScalarCommand,
   primitive: async () => (await import("./primitive.command-cbxmqbtc.js")).PrimitiveCommand,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akanjs/cli",
-  "version": "3.0.0-alpha.111",
+  "version": "3.0.0-alpha.113",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -33,7 +33,7 @@
     "@langchain/openai": "^1.4.6",
     "@tailwindcss/node": "^4.3.0",
     "@trapezedev/project": "^7.1.4",
-    "akanjs": "3.0.0-alpha.111",
+    "akanjs": "3.0.0-alpha.113",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",
     "dayjs": "^1.11.20",

package/{subspace.command-35a3t6vv.js → subspace.command-fwjfcts7.js}

@@ -147,7 +147,7 @@ class Subspace {
     }
     const clone = new Executor(`subspace-${this.name}`, this.#clonePath);
     await clone.spawn("git", ["fetch", "--quiet", "origin", branch]);
-    await clone.spawn("git", ["checkout", "--quiet", "-B", branch, `origin/${branch}`]);
+    await clone.spawn("git", ["checkout", "--quiet", "-f", "-B", branch, `origin/${branch}`]);
     await clone.spawn("git", ["clean", "-qfd"]);
     return clone;
   }
@@ -324,7 +324,9 @@ class Subspace {
       "--",
       `libs/${lib}`
     ]);
-    const files = listed.split("\x00").filter((file) => !!file && !this.#isSubspaceOwned(file)).sort();
+    const candidates = listed.split("\x00").filter((file) => !!file && !this.#isSubspaceOwned(file)).sort();
+    const present = await Promise.all(candidates.map(async (file) => await FileSys.entryExists(path.join(this.#clonePath, file))));
+    const files = candidates.filter((_, index) => present[index]);
     const hasher = new Bun.CryptoHasher("sha256");
     for (const file of files) {
       const content = await FileSys.readText(path.join(this.#clonePath, file));