@chatlychat/cli 0.4.1 → 0.5.2

package/dist/wac/apply.js

@@ -62,8 +62,34 @@
  * result.
  */
 import { looksLikeCredential, routeForField } from './resources.js';
-function fill(path, id) {
-    return path.replace('{id}', encodeURIComponent(id));
+/**
+ * Substitute `{id}` and any other placeholder a nested route carries.
+ *
+ * Every workspace-level route has exactly one placeholder and `params` is
+ * empty for all of them. The Platform API's are nested
+ * (`/v1/platform/workspaces/{workspaceId}/users/{id}`), so the parent's id
+ * comes in through `params`.
+ *
+ * **An unfilled placeholder throws.** It is tempting to leave it, since the
+ * server would answer 404 and `apply` reports a failure either way — but the
+ * message would name a path containing a literal `{workspaceId}`, and a 404
+ * reads as "the resource is gone" rather than "this CLI built a broken URL".
+ * Worse, `encodeURIComponent` would not be reached for the braces, so the
+ * request would go out looking almost right. A thrown error is caught by
+ * `execute`'s per-op try and reported against the resource that produced it.
+ */
+function fill(path, id, params = {}) {
+    let out = path.replace('{id}', encodeURIComponent(id));
+    for (const [name, value] of Object.entries(params)) {
+        out = out.replaceAll(`{${name}}`, encodeURIComponent(value));
+    }
+    const unfilled = /\{([A-Za-z_][A-Za-z0-9_]*)\}/.exec(out);
+    if (unfilled !== null) {
+        throw new Error(`cannot build the request path: ${path} still has {${String(unfilled[1])}} unfilled. ` +
+            'That placeholder is a parent id this plan could not resolve — the reference that ' +
+            'supplies it either failed above or is missing from the document.');
+    }
+    return out;
 }
 /**
  * The writes one plan item needs, in order.
@@ -77,22 +103,33 @@ export function writesFor(def, item, refIds, opts) {
         if (!opts.prune || def.remove === null || opts.pruneUnsafe.includes(def.type)) {
             return [];
         }
-        return [{ method: 'DELETE', path: fill(def.remove.path, item.liveId ?? '') }];
+        return [{ method: 'DELETE', path: fill(def.remove.path, item.liveId ?? '', item.pathParams) }];
     }
     if (item.row === undefined || (item.action !== 'create' && item.action !== 'update')) {
         return [];
     }
-    /* References: resolved at plan time where possible, here where not. */
-    const wired = {};
-    for (const [wire, id] of Object.entries(item.resolved)) {
-        wired[wire] = id;
-    }
+    /*
+     * References: resolved at plan time where possible, here where not.
+     *
+     * Two destinations, and keeping them apart is the point. A BODY ref becomes
+     * a field in the request (`botRoutes` sends `botId`); a PATH ref becomes a
+     * segment of the URL and must NOT appear in the body, because
+     * `POST /v1/platform/workspaces/{id}/users` validates with a plain
+     * `z.object` and zod strips a key it has never heard of — a 201 that
+     * silently ignored half the request is the failure CLAUDE.md names twice.
+     */
+    const wired = { ...item.resolved };
+    const pathWired = { ...item.pathParams };
     for (const [wire, ref] of Object.entries(item.row.refs)) {
-        if (wired[wire] === undefined) {
-            const id = refIds.get(`${ref.type}/${ref.key}`);
-            if (id !== undefined) {
-                wired[wire] = id;
+        const id = refIds.get(`${ref.type}/${ref.key}`);
+        if (ref.pathParam === true) {
+            if (pathWired[wire] === undefined && id !== undefined) {
+                pathWired[wire] = id;
             }
+            continue;
+        }
+        if (wired[wire] === undefined && id !== undefined) {
+            wired[wire] = id;
         }
     }
     if (item.action === 'create') {
@@ -102,7 +139,7 @@ export function writesFor(def, item, refIds, opts) {
         return [
             {
                 method: 'POST',
-                path: def.create.path,
+                path: fill(def.create.path, '', pathWired),
                 body: { ...item.row.body, ...wired },
             },
         ];
@@ -119,7 +156,7 @@ export function writesFor(def, item, refIds, opts) {
         return [
             {
                 method: 'POST',
-                path: def.create.path,
+                path: fill(def.create.path, '', pathWired),
                 body: { id: liveId, ...item.row.body, ...wired },
             },
         ];
@@ -157,6 +194,7 @@ export function writesFor(def, item, refIds, opts) {
      * first would make it unreproducible as well, and a flaky request sequence
      * is a thing nobody can debug from a log.
      */
+    const changed = new Map(item.changes.map((c) => [c.name, c.to]));
     const ops = [];
     for (const route of def.update) {
         const body = {};
@@ -164,12 +202,14 @@ export function writesFor(def, item, refIds, opts) {
             if (routeForField(def, field) !== route) {
                 continue;
             }
-            body[field] = wired[field] ?? item.row.body[field];
+            // The diff's value for a field wins over the document's: a merge field with
+            // redacted leaves was planned WITHOUT them (unless `--write-only`).
+            body[field] = wired[field] ?? changed.get(field) ?? item.row.body[field];
         }
         if (Object.keys(body).length === 0) {
             continue;
         }
-        ops.push({ method: route.method, path: fill(route.path, liveId), body });
+        ops.push({ method: route.method, path: fill(route.path, liveId, pathWired), body });
     }
     return ops;
 }

package/dist/wac/apply.js.map

@@ -1 +1 @@
-{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../src/wac/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AACH,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAmCtF,SAAS,IAAI,CAAC,IAAY,EAAE,EAAU;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,GAAgB,EAChB,IAAc,EACd,MAAmC,EACnC,IAAkB;IAElB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,uEAAuE;IACvE,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAChD,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE;aACrC;SACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAEjC,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAChC;;;;;WAKG;QACH,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;gBACrB,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE;aACjD;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,GAAG,CAAC,WAAW,KAAK,IAAI;QACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,UAAU,CAAC;QACjF,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAgB,EAChB,IAAc,EACd,QAAiB;IAEjB,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IACE,GAAG,CAAC,MAAM,GAAG,CAAC;oBACd,GAAG,KAAK,cAAc;oBACtB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;oBAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,EAC5B,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;oBAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,QAAqC;IAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IAExD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAe,EAAU,EAAE,CACvC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;QACpF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,4CAA4C,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,4CAA4C,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB;;;;;;WAMG;QACH,KAAK,CAAC,IAAI,CACR,EAAE,EACF,qEAAqE,EACrE,oEAAoE,EACpE,qEAAqE,EACrE,uEAAuE,EACvE,uCAAuC,EACvC,EAAE,CACH,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,+DAA+D,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../src/wac/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AACH,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAmCtF;;;;;;;;;;;;;;;GAeG;AACH,SAAS,IAAI,CAAC,IAAY,EAAE,EAAU,EAAE,SAA2C,EAAE;IACnF,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,eAAe,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc;YACpF,mFAAmF;YACnF,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,GAAgB,EAChB,IAAc,EACd,MAAmC,EACnC,IAAkB;IAElB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,KAAK,GAA4B,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC5D,MAAM,SAAS,GAA2B,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACtD,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC;gBAC1C,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE;aACrC;SACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAEjC,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAChC;;;;;WAKG;QACH,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC;gBAC1C,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE;aACjD;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,GAAG,CAAC,WAAW,KAAK,IAAI;QACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,UAAU,CAAC;QACjF,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YACD,4EAA4E;YAC5E,oEAAoE;YACpE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAgB,EAChB,IAAc,EACd,QAAiB;IAEjB,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IACE,GAAG,CAAC,MAAM,GAAG,CAAC;oBACd,GAAG,KAAK,cAAc;oBACtB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;oBAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,EAC5B,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;oBAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,QAAqC;IAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IAExD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAe,EAAU,EAAE,CACvC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;QACpF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,4CAA4C,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,4CAA4C,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB;;;;;;WAMG;QACH,KAAK,CAAC,IAAI,CACR,EAAE,EACF,qEAAqE,EACrE,oEAAoE,EACpE,qEAAqE,EACrE,uEAAuE,EACvE,uCAAuC,EACvC,EAAE,CACH,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,+DAA+D,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/wac/diff-warnings.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The warnings `buildPlan` prints above a plan, one section at a time.
+ *
+ * Split out of `diff.ts` when CHT-F04's path parameters pushed that file past
+ * the 650-line ceiling. It is a real seam rather than a cut: nothing here
+ * decides an action. These functions only observe — a truncated list, rows
+ * with no natural key, a key on two rows, a field no live row carries — and
+ * the plan is the same with or without them.
+ */
+import { type ResourceDef } from './resources.js';
+import type { LiveIndex, LiveSection } from './diff.js';
+import type { DocumentRow } from './document.js';
+export declare function sectionWarnings(def: ResourceDef, rows: ReadonlyArray<DocumentRow>, live: LiveSection, index: LiveIndex): ReadonlyArray<string>;
+/**
+ * A field the document declares that NO live row carries.
+ *
+ * This is what stands in for a per-resource field allow-list, and it is
+ * better evidence than one: the vocabulary comes from the server on every
+ * run, so it cannot drift out of step with an API that shipped a field
+ * yesterday. CLAUDE.md's `helpProfile` / `profile` bug — a key zod strips,
+ * answering 200 while doing nothing — is exactly what it catches, and
+ * `unwritable` in `resources.ts` catches the mirror case (a field the server
+ * returns and no write path accepts).
+ *
+ * Two limits, both reported rather than hidden:
+ *
+ *  - With no live rows there is nothing to compare against, so a brand-new
+ *    workspace gets no warnings at all.
+ *  - A legitimately optional field nobody in this workspace has set produces
+ *    a false positive. That is why it is a warning and not a refusal: being
+ *    wrong costs one line of output, where refusing wrongly costs a config
+ *    file that cannot be applied.
+ */
+export declare function vocabularyWarnings(def: ResourceDef, rows: ReadonlyArray<DocumentRow>, liveRows: ReadonlyArray<Record<string, unknown>>): ReadonlyArray<string>;
+//# sourceMappingURL=diff-warnings.d.ts.map

package/dist/wac/diff-warnings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-warnings.d.ts","sourceRoot":"","sources":["../../src/wac/diff-warnings.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAkC,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElF,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAIjD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,EAChC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,SAAS,GACf,aAAa,CAAC,MAAM,CAAC,CAgCvB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,EAChC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC/C,aAAa,CAAC,MAAM,CAAC,CAgCvB"}

package/dist/wac/diff-warnings.js

@@ -0,0 +1,88 @@
+/**
+ * The warnings `buildPlan` prints above a plan, one section at a time.
+ *
+ * Split out of `diff.ts` when CHT-F04's path parameters pushed that file past
+ * the 650-line ceiling. It is a real seam rather than a cut: nothing here
+ * decides an action. These functions only observe — a truncated list, rows
+ * with no natural key, a key on two rows, a field no live row carries — and
+ * the plan is the same with or without them.
+ */
+import { looksLikeCredential, projected } from './resources.js';
+/* ── Warnings ─────────────────────────────────────────────────────────── */
+export function sectionWarnings(def, rows, live, index) {
+    const out = [];
+    if (live.possiblyTruncated === true) {
+        out.push(`${def.type}: the list route is @PaginationExempt and answered at its cap, so there may ` +
+            'be rows this plan cannot see. `--prune` is refused for this type while that holds — ' +
+            'a row past the cap is invisible, not absent.');
+    }
+    if (index.keyless > 0) {
+        out.push(`${def.type}: ${String(index.keyless)} ${def.label}(s) on the server have no ` +
+            `\`${def.naturalKey}\`, so this file can neither match nor prune them. They are not ` +
+            'listed below at all — ' +
+            (def.keylessHint ?? 'give them one in the dashboard to bring them under management.'));
+    }
+    for (const key of index.ambiguous) {
+        out.push(`${def.type}: ${def.naturalKey} "${key}" is on more than one ${def.label}` +
+            (def.keyEnforced
+                ? '.'
+                : ` — the database does not make \`${def.naturalKey}\` unique for this resource, so ` +
+                    'only this file does.'));
+    }
+    out.push(...vocabularyWarnings(def, rows, live.rows));
+    return out;
+}
+/**
+ * A field the document declares that NO live row carries.
+ *
+ * This is what stands in for a per-resource field allow-list, and it is
+ * better evidence than one: the vocabulary comes from the server on every
+ * run, so it cannot drift out of step with an API that shipped a field
+ * yesterday. CLAUDE.md's `helpProfile` / `profile` bug — a key zod strips,
+ * answering 200 while doing nothing — is exactly what it catches, and
+ * `unwritable` in `resources.ts` catches the mirror case (a field the server
+ * returns and no write path accepts).
+ *
+ * Two limits, both reported rather than hidden:
+ *
+ *  - With no live rows there is nothing to compare against, so a brand-new
+ *    workspace gets no warnings at all.
+ *  - A legitimately optional field nobody in this workspace has set produces
+ *    a false positive. That is why it is a warning and not a refusal: being
+ *    wrong costs one line of output, where refusing wrongly costs a config
+ *    file that cannot be applied.
+ */
+export function vocabularyWarnings(def, rows, liveRows) {
+    if (liveRows.length === 0 || rows.length === 0) {
+        return [];
+    }
+    const serverFields = new Set();
+    for (const raw of liveRows) {
+        for (const field of Object.keys(projected(def, raw))) {
+            serverFields.add(field);
+        }
+    }
+    const unknown = new Set();
+    for (const row of rows) {
+        for (const field of Object.keys(row.body)) {
+            if (serverFields.has(field) || def.opaque.includes(field)) {
+                continue;
+            }
+            // A credential-looking name is write-only by nature, not a typo.
+            if (looksLikeCredential(field)) {
+                continue;
+            }
+            unknown.add(field);
+        }
+    }
+    if (unknown.size === 0) {
+        return [];
+    }
+    return [
+        `${def.type}: ${[...unknown].map((f) => `\`${f}\``).join(', ')} — no ${def.label} on this ` +
+            `server carries ${unknown.size === 1 ? 'that field' : 'those fields'}. The API validates ` +
+            'with zod and zod STRIPS an unknown key, so a misspelling is a 200 that did nothing. ' +
+            `The fields it does return: ${[...serverFields].sort().join(', ')}.`,
+    ];
+}
+//# sourceMappingURL=diff-warnings.js.map

package/dist/wac/diff-warnings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-warnings.js","sourceRoot":"","sources":["../../src/wac/diff-warnings.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAoB,MAAM,gBAAgB,CAAC;AAKlF,6EAA6E;AAE7E,MAAM,UAAU,eAAe,CAC7B,GAAgB,EAChB,IAAgC,EAChC,IAAiB,EACjB,KAAgB;IAEhB,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CACN,GAAG,GAAG,CAAC,IAAI,8EAA8E;YACvF,sFAAsF;YACtF,8CAA8C,CACjD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CACN,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,4BAA4B;YAC5E,KAAK,GAAG,CAAC,UAAU,kEAAkE;YACrF,wBAAwB;YACxB,CAAC,GAAG,CAAC,WAAW,IAAI,gEAAgE,CAAC,CACxF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CACN,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,UAAU,KAAK,GAAG,yBAAyB,GAAG,CAAC,KAAK,EAAE;YACxE,CAAC,GAAG,CAAC,WAAW;gBACd,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,mCAAmC,GAAG,CAAC,UAAU,kCAAkC;oBACnF,sBAAsB,CAAC,CAC9B,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAgB,EAChB,IAAgC,EAChC,QAAgD;IAEhD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACrD,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,SAAS;YACX,CAAC;YACD,iEAAiE;YACjE,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,WAAW;YACzF,kBAAkB,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,sBAAsB;YAC1F,sFAAsF;YACtF,8BAA8B,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;KACvE,CAAC;AACJ,CAAC"}

package/dist/wac/diff.d.ts

@@ -1,55 +1,7 @@
-/**
- * The diff. Pure: a document plus the live rows in, a plan out.
- *
- * No transport, no filesystem, no clock, nothing injected. That is not
- * fastidiousness — it is what lets the spec drive this with literal objects,
- * and it is half the proof that `chatly plan` writes nothing: the function
- * that decides what WOULD change has no way to change anything. The other
- * half is a recording transport asserting zero non-GET requests, in
- * `wac.spec.ts`.
- *
- * ═══ WHAT A DIFF MUST NOT DO ══════════════════════════════════════════════
- *
- * Report a change that is not one. A plan that says "3 to change" against a
- * workspace nobody has touched is a plan people stop reading, and then
- * `apply` gets run blind — which is the failure this whole feature exists to
- * prevent. Four rules come out of that:
- *
- *  1. ONLY the fields the document declares are compared. A server field the
- *     file says nothing about is unmanaged and is never mentioned. So a
- *     document can describe four fields of a bot and leave the other twenty
- *     to the dashboard, which is how a team actually works.
- *
- *  2. A field that cannot be READ BACK is never compared. Two kinds, both
- *     handled: the ones declared `opaque` (a customer card's `headers` are
- *     write-only by design — the read shape returns `headerNames`, names and
- *     never values, because that is where the bearer token is), and the ones
- *     the server hands back as the literal `__redacted__`, detected at
- *     runtime so a field nobody told this file about still cannot produce a
- *     phantom change. Each is reported once, as a note, saying it is
- *     unknowable rather than unchanged.
- *
- *  3. `undefined` and absent are one state. JSON has no `undefined`, so a key
- *     the server omits and a key it sends as `undefined` are the same thing,
- *     and only `null` is a value.
- *
- *  4. The live row is PROJECTED into the document's vocabulary first. A bot's
- *     `webhookUrl` comes back under `externalAgent`; an email template's
- *     customised copy comes back under `override`. Comparing against the
- *     un-projected row reports a change on every run, for ever. See
- *     `resources.ts`.
- *
- * ═══ AND WHAT IT MUST DO ══════════════════════════════════════════════════
- *
- * Refuse to guess. Two live rows with one natural key, a reference to a bot
- * that neither exists nor is being created, a changed field no route can
- * write — each produces a `blocked` item that `apply` will not touch, with
- * the reason on the line. The alternative in every case is picking one and
- * being wrong silently, which is how the wrong resource gets overwritten.
- */
 import { type Action, type ResourceDef, type UpdateRoute } from './resources.js';
 import type { DocumentRow, WacDocument } from './document.js';
 export { isRedacted, REDACTED, sameValue } from './values.js';
+export { vocabularyWarnings } from './diff-warnings.js';
 export interface FieldChange {
     readonly name: string;
     /** Absent on a create. */
@@ -74,6 +26,21 @@ export interface PlanItem {
     readonly row: DocumentRow | undefined;
     /** Wire field → id, for references already resolvable at plan time. */
     readonly resolved: Readonly<Record<string, string>>;
+    /**
+     * Placeholder → id for a reference that fills the ROUTE PATH rather than
+     * the body (`ResourceRef.pathParam`).
+     *
+     * Separate from `resolved` because the two have opposite treatment: a body
+     * ref is COMPARED against the live row, and a path ref must never be — the
+     * live row has no such field, so a diff on it would report a change every
+     * run. Empty for every workspace-level resource, which declares no path
+     * refs at all.
+     *
+     * Carried on an ORPHAN too, where there is no document row to resolve from:
+     * the parent's id is read off the live row, because `--prune` needs it to
+     * build the DELETE path.
+     */
+    readonly pathParams: Readonly<Record<string, string>>;
     /** `type/key` for each reference, so apply can skip a failed dependency. */
     readonly dependsOn: ReadonlyArray<string>;
 }
@@ -90,6 +57,14 @@ export interface LiveSection {
     /** The route caps its answer and the answer came back at the cap. */
     readonly possiblyTruncated?: boolean;
 }
+export interface LiveIndex {
+    /** Normalised key → projected row. */
+    readonly byKey: ReadonlyMap<string, Record<string, unknown>>;
+    /** Keys that appeared more than once: matched to nothing, on purpose. */
+    readonly ambiguous: ReadonlySet<string>;
+    /** Rows whose natural key is null/absent: invisible to this file. */
+    readonly keyless: number;
+}
 /**
  * Build the plan.
  *
@@ -109,29 +84,24 @@ export interface PlanOptions {
      * ever tell you that for you.
      */
     readonly writeOnly?: boolean;
+    /**
+     * Live rows of a type the document REFERENCES without declaring a section
+     * for it — resolvable by a reference, never planned, never an orphan.
+     *
+     * The platform document's adoption shape needs it (CHT-F04): an `apiKeys`
+     * row naming `workspace: "acme"` for a tenant somebody else created, with
+     * no `workspaces:` section at all. Without this, `known` holds only
+     * declared types and the row is blocked as naming something "neither on
+     * the server nor created by this plan" — which is false, the tenant is on
+     * the server. Declaring the section instead would turn every other tenant
+     * into an orphan line. Empty for the workspace document.
+     */
+    readonly referenced?: ReadonlyArray<{
+        readonly def: ResourceDef;
+        readonly section: LiveSection;
+    }>;
 }
 export declare function buildPlan(doc: WacDocument, live: ReadonlyMap<string, LiveSection>, opts?: PlanOptions): Plan;
-/**
- * A field the document declares that NO live row carries.
- *
- * This is what stands in for a per-resource field allow-list, and it is
- * better evidence than one: the vocabulary comes from the server on every
- * run, so it cannot drift out of step with an API that shipped a field
- * yesterday. CLAUDE.md's `helpProfile` / `profile` bug — a key zod strips,
- * answering 200 while doing nothing — is exactly what it catches, and
- * `unwritable` in `resources.ts` catches the mirror case (a field the server
- * returns and no write path accepts).
- *
- * Two limits, both reported rather than hidden:
- *
- *  - With no live rows there is nothing to compare against, so a brand-new
- *    workspace gets no warnings at all.
- *  - A legitimately optional field nobody in this workspace has set produces
- *    a false positive. That is why it is a warning and not a refusal: being
- *    wrong costs one line of output, where refusing wrongly costs a config
- *    file that cannot be applied.
- */
-export declare function vocabularyWarnings(def: ResourceDef, rows: ReadonlyArray<DocumentRow>, liveRows: ReadonlyArray<Record<string, unknown>>): ReadonlyArray<string>;
 /** Counts for the summary line. */
 export declare function tally(plan: Plan): Record<Action, number>;
 //# sourceMappingURL=diff.d.ts.map

package/dist/wac/diff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/wac/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAuCD;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAgB,SAAS,CACvB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,IAAI,GAAE,WAAgB,GACrB,IAAI,CA4DN;AAoTD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,EAChC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC/C,aAAa,CAAC,MAAM,CAAC,CAgCvB;AAED,mCAAmC;AACnC,wBAAgB,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxD"}
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/wac/diff.ts"],"names":[],"mappings":"AAkDA,OAAO,EAIL,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAID,MAAM,WAAW,SAAS;IACxB,sCAAsC;IACtC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAyCD;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;CACnG;AAED,wBAAgB,SAAS,CACvB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,IAAI,GAAE,WAAgB,GACrB,IAAI,CA6EN;AAqVD,mCAAmC;AACnC,wBAAgB,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxD"}