@dashai/cli 0.23.0 → 0.24.0

package/dist/bin.js

@@ -3,7 +3,7 @@ import pc from 'picocolors';
 import { existsSync, readFileSync, writeFileSync, rmSync, mkdirSync, watch, readdirSync, chmodSync, renameSync, lstatSync, mkdtempSync, statSync } from 'fs';
 import { hostname, tmpdir, platform, homedir } from 'os';
 import { resolve, join, relative, dirname, basename, win32, sep } from 'path';
-import { spawn, spawnSync } from 'child_process';
+import { execFileSync, spawn, spawnSync } from 'child_process';
 import { intro, log, select, isCancel, cancel, spinner, outro, text, confirm, multiselect } from '@clack/prompts';
 import { Command, Option } from 'commander';
 import open from 'open';
@@ -1406,13 +1406,13 @@ async function resolveDevPort(requested) {
 }
 async function isPortFree(port) {
   const { createServer } = await import('net');
-  return new Promise((resolve14) => {
+  return new Promise((resolve15) => {
     const server = createServer();
     server.once("error", () => {
-      resolve14(false);
+      resolve15(false);
     });
     server.once("listening", () => {
-      server.close(() => resolve14(true));
+      server.close(() => resolve15(true));
     });
     server.listen(port, "0.0.0.0");
   });
@@ -1493,6 +1493,62 @@ var init_dev = __esm({
     PORT_PROBE_LIMIT = 10;
   }
 });
+function resolveSdkPackageJson(projectRoot) {
+  let dir = projectRoot;
+  for (; ; ) {
+    const candidate = join(dir, "node_modules", "@dashai", "sdk", "package.json");
+    if (existsSync(candidate)) return candidate;
+    const parent = dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function readInstalledSdk(projectRoot) {
+  const pkgPath = resolveSdkPackageJson(projectRoot);
+  if (pkgPath === null) return null;
+  try {
+    const parsed = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    if (typeof parsed.version !== "string" || parsed.version.length === 0) return null;
+    return { version: parsed.version };
+  } catch {
+    return null;
+  }
+}
+function compareVersions(a, b) {
+  const parse = (v) => {
+    const [core = "", pre] = v.trim().replace(/^[^0-9]*/, "").split("-", 2);
+    const nums = core.split(".").map((n) => Number.parseInt(n, 10) || 0);
+    while (nums.length < 3) nums.push(0);
+    return [nums.slice(0, 3), pre !== void 0 && pre.length > 0];
+  };
+  const [an, apre] = parse(a);
+  const [bn, bpre] = parse(b);
+  for (let i = 0; i < 3; i++) {
+    const d = (an[i] ?? 0) - (bn[i] ?? 0);
+    if (d !== 0) return d;
+  }
+  if (apre === bpre) return 0;
+  return apre ? -1 : 1;
+}
+function satisfiesFloor(version, floor) {
+  return compareVersions(version, floor) >= 0;
+}
+function checkSdkFloor(projectRoot, floor) {
+  const installed = readInstalledSdk(projectRoot);
+  if (installed === null) return { ok: true, installed: null, floor };
+  return {
+    ok: satisfiesFloor(installed.version, floor),
+    installed: installed.version,
+    floor
+  };
+}
+var USES_SDK_FLOOR, SCAFFOLD_SDK_RANGE;
+var init_sdk_version = __esm({
+  "src/lib/sdk-version.ts"() {
+    USES_SDK_FLOOR = "2.5.0";
+    SCAFFOLD_SDK_RANGE = "^2.5.0";
+  }
+});
 async function selectWorkspace(opts) {
   const workspaces = await apiRequest(
     "GET",
@@ -1551,62 +1607,6 @@ var init_workspaces = __esm({
     init_api_client();
   }
 });
-function resolveSdkPackageJson(projectRoot) {
-  let dir = projectRoot;
-  for (; ; ) {
-    const candidate = join(dir, "node_modules", "@dashai", "sdk", "package.json");
-    if (existsSync(candidate)) return candidate;
-    const parent = dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-}
-function readInstalledSdk(projectRoot) {
-  const pkgPath = resolveSdkPackageJson(projectRoot);
-  if (pkgPath === null) return null;
-  try {
-    const parsed = JSON.parse(readFileSync(pkgPath, "utf-8"));
-    if (typeof parsed.version !== "string" || parsed.version.length === 0) return null;
-    return { version: parsed.version };
-  } catch {
-    return null;
-  }
-}
-function compareVersions(a, b) {
-  const parse = (v) => {
-    const [core = "", pre] = v.trim().replace(/^[^0-9]*/, "").split("-", 2);
-    const nums = core.split(".").map((n) => Number.parseInt(n, 10) || 0);
-    while (nums.length < 3) nums.push(0);
-    return [nums.slice(0, 3), pre !== void 0 && pre.length > 0];
-  };
-  const [an, apre] = parse(a);
-  const [bn, bpre] = parse(b);
-  for (let i = 0; i < 3; i++) {
-    const d = (an[i] ?? 0) - (bn[i] ?? 0);
-    if (d !== 0) return d;
-  }
-  if (apre === bpre) return 0;
-  return apre ? -1 : 1;
-}
-function satisfiesFloor(version, floor) {
-  return compareVersions(version, floor) >= 0;
-}
-function checkSdkFloor(projectRoot, floor) {
-  const installed = readInstalledSdk(projectRoot);
-  if (installed === null) return { ok: true, installed: null, floor };
-  return {
-    ok: satisfiesFloor(installed.version, floor),
-    installed: installed.version,
-    floor
-  };
-}
-var USES_SDK_FLOOR, SCAFFOLD_SDK_RANGE;
-var init_sdk_version = __esm({
-  "src/lib/sdk-version.ts"() {
-    USES_SDK_FLOOR = "2.5.0";
-    SCAFFOLD_SDK_RANGE = "^2.5.0";
-  }
-});
 
 // src/lib/scaffold-locks/simple.json
 var simple_default;
@@ -9990,7 +9990,7 @@ function manifestJson(opts) {
           // everything on the default — a warning on every column just trains
           // people to click through warnings.
           fields: [
-            { slug: "title", type: "text", human_edit: "open" },
+            { slug: "title", type: "text", primary: true, human_edit: "open" },
             { slug: "done", type: "boolean", human_edit: "guarded" }
           ]
         }
@@ -12206,6 +12206,8 @@ function claudeMd(opts) {
 Instructions for AI coding agents (Claude Code, Cursor, etc.) working
 in this Dashwise module. Read this before making changes.
 
+Every table declares exactly one primary field (the row's name everywhere in Dashwise).
+
 ${opts.cloudReady === false ? "" : cloudAgentInstructions()}
 ## What this module is
 
@@ -12350,17 +12352,18 @@ which calls the schema endpoints and rewrites the local
 Common commands:
 
 \`\`\`
-dashwise table create <slug> --field <slug:type[:required]>
+dashwise table create <slug> --field title:text:primary
 dashwise table delete <slug>
 dashwise field add <table> <slug:type[:required]>
 dashwise field remove <table> <slug>
 dashwise field set-type <table> <slug> <type>
 \`\`\`
 
-Allowed field types (18): \`text\`, \`long_text\`, \`number\`, \`boolean\`,
+Allowed field types (21): \`text\`, \`long_text\`, \`number\`, \`boolean\`,
 \`date\`, \`datetime\`, \`single_select\`, \`multi_select\`,
 \`link_row\`, \`file\`, \`multi_file\`, \`email\`, \`url\`,
-\`phone\`, \`formula\`, \`ai\`, \`uuid\`, \`jsonb\`.
+\`phone\`, \`formula\`, \`ai\`, \`uuid\`, \`jsonb\`,
+\`rating\`, \`duration\`, \`autonumber\`.
 
 ### \`human_edit\` \u2014 who may hand-edit each column
 
@@ -12614,7 +12617,7 @@ what tables it owns.
 
 | Table | Columns | Notes |
 |---|---|---|
-| \`items\` | \`title:text\`, \`done:boolean\` | seeded example \u2014 edit or replace; \`dashwise table create <slug> --field <slug:type>\` adds more |
+| \`items\` | \`title:text:primary\`, \`done:boolean\` | seeded example \u2014 edit or replace; \`dashwise table create <slug> --field title:text:primary\` adds more |
 
 ## API / contract
 
@@ -12756,6 +12759,8 @@ function cloudAgentInstructions() {
 function agentsMd(opts) {
   return `# ${opts.name}: agent instructions
 
+Every table declares exactly one primary field (the row's name everywhere in Dashwise).
+
 ` + cloudAgentInstructions();
 }
 function nodeVersion() {
@@ -14023,6 +14028,16 @@ function printApplySummary(applied) {
   const updated = asArray(applied.tables_updated);
   const removed = asArray(applied.tables_removed);
   success(`Manifest applied to the dev install.`);
+  for (const warning of asArray(applied.warnings)) {
+    const message = strProp(warning, "message");
+    if (!message) continue;
+    const warningCode = strProp(warning, "code");
+    const table = strProp(warning, "table");
+    const field = strProp(warning, "field");
+    const location = table ? `${table}${field ? `.${field}` : ""}` : field;
+    const prefix = [warningCode, location].filter(Boolean).join(" ");
+    warn(`${prefix ? `${code(prefix)}: ` : ""}${message}`);
+  }
   if (created.length === 0 && updated.length === 0 && removed.length === 0) {
     info(dim("No table changes (metadata-only or already in sync)."));
     return;
@@ -14132,6 +14147,76 @@ var init_push = __esm({
   }
 });
 
+// ../sdk/dist/index.js
+function primaryDeclarationIssues(table) {
+  const invalid = table.fields.findIndex(
+    (field2) => field2.primary !== void 0 && field2.primary !== true
+  );
+  if (invalid !== -1) {
+    return [
+      { path: ["fields", invalid, "primary"], message: "primary must be literal true or omitted" }
+    ];
+  }
+  const marked = table.fields.filter((field2) => field2.primary === true);
+  if (marked.length !== 1) {
+    return [
+      {
+        path: ["fields"],
+        message: `Table ${table.slug}: mark exactly one field as primary: true (the row's label in links, pickers, titles)`
+      }
+    ];
+  }
+  const field = marked[0];
+  const path = ["fields", table.fields.indexOf(field), "primary"];
+  if (field.type === "formula") {
+    return [{ path, message: "formula fields cannot be the primary of a module table yet" }];
+  }
+  if (!PRIMARY_TYPES.has(field.type)) {
+    return [
+      {
+        path,
+        message: `Table ${table.slug}: mark a field that can be the primary with primary: true (${field.slug} of type ${field.type} cannot be primary)`
+      }
+    ];
+  }
+  return [];
+}
+function weakPrimaryWarning(table) {
+  const field = table.fields.find((field2) => field2.primary === true);
+  if (!field || !WEAK_PRIMARY_TYPES.has(field.type)) return void 0;
+  return `${field.slug} is a weak row label; prefer a short text field such as a name or title`;
+}
+var PRIMARY_TYPES, WEAK_PRIMARY_TYPES;
+var init_dist = __esm({
+  "../sdk/dist/index.js"() {
+    PRIMARY_TYPES = /* @__PURE__ */ new Set([
+      "text",
+      "long_text",
+      "number",
+      "date",
+      "datetime",
+      "single_select",
+      "multi_select",
+      "email",
+      "url",
+      "phone",
+      "rating",
+      "duration",
+      "autonumber"
+    ]);
+    WEAK_PRIMARY_TYPES = /* @__PURE__ */ new Set([
+      "single_select",
+      "multi_select",
+      "number",
+      "rating",
+      "duration",
+      "date",
+      "datetime",
+      "autonumber"
+    ]);
+  }
+});
+
 // src/lib/field-spec.ts
 function parseFieldSpec(spec) {
   const parts = spec.split(":");
@@ -14186,6 +14271,7 @@ function parseFieldSpec(spec) {
         );
       }
       if (flag === "required") result.required = true;
+      if (flag === "primary") result.primary = true;
     }
   }
   if ((type === "single_select" || type === "multi_select") && result.options === void 0) {
@@ -14228,6 +14314,9 @@ function parseFieldJson(json) {
       `--field-json missing or invalid ${quote("type")}. Allowed: ${FIELD_TYPES.join(", ")}.`
     );
   }
+  if (o.primary !== void 0 && o.primary !== true) {
+    throw new FieldSpecError("primary must be literal true or omitted");
+  }
   return o;
 }
 function quote(s) {
@@ -14240,6 +14329,9 @@ var init_field_spec = __esm({
       "text",
       "long_text",
       "number",
+      "rating",
+      "duration",
+      "autonumber",
       "boolean",
       "date",
       "datetime",
@@ -14255,7 +14347,7 @@ var init_field_spec = __esm({
       "ai"
     ];
     SLUG_REGEX = /^[a-z][a-z0-9_]*[a-z0-9]$/;
-    KNOWN_FLAGS = /* @__PURE__ */ new Set(["required"]);
+    KNOWN_FLAGS = /* @__PURE__ */ new Set(["required", "primary"]);
     DECIMALS_FLAG_REGEX = /^\d+$/;
     MAX_DECIMAL_PLACES = 10;
     FieldSpecError = class extends Error {
@@ -14276,7 +14368,7 @@ __export(create_exports, {
 });
 async function tableCreateCommand(slug, options) {
   if (!slug) {
-    fail("Usage: `dashwise table create <slug> --field <slug>:<type>[:required] [...]`");
+    fail("Usage: `dashwise table create <slug> --field <slug>:<type>[:primary,required] [...]`");
     return 1;
   }
   const fields = [];
@@ -14308,6 +14400,15 @@ async function tableCreateCommand(slug, options) {
     }
     seen.add(f.slug);
   }
+  const table = { slug, fields };
+  const issues = primaryDeclarationIssues(table);
+  if (issues.length > 0) {
+    for (const issue of issues) fail(issue.message);
+    info("Mark the row name explicitly, e.g. --field title:text:primary.");
+    return 1;
+  }
+  const primaryWarning = weakPrimaryWarning(table);
+  if (primaryWarning) warn(primaryWarning);
   let ctx;
   try {
     ctx = loadSchemaCommandContext({
@@ -14400,6 +14501,7 @@ function surfaceFailure(err) {
 }
 var init_create = __esm({
   "src/commands/table/create.ts"() {
+    init_dist();
     init_manifest_io();
     init_api_client();
     init_manifest_merge();
@@ -15021,6 +15123,433 @@ function toMe(cached) {
   };
 }
 
+// src/commands/doctor.ts
+init_api_client();
+init_config();
+init_output();
+init_sdk_version();
+var MIN_NODE_MAJOR = 20;
+var CLOUD_FILES = [
+  "scripts/cloud-setup.sh",
+  ".claude/settings.json",
+  "AGENTS.md",
+  "CLAUDE.md"
+];
+async function doctorCommand(options, deps) {
+  const checks = await runDoctorChecks(resolve(options.dir ?? process.cwd()), deps);
+  const ok = !checks.some((c2) => c2.status === "fail");
+  if (options.json) {
+    out(JSON.stringify({ ok, checks }, null, 2));
+  } else {
+    for (const c2 of checks) {
+      out(`${badge(c2.status)} ${c2.label}: ${c2.detail}`);
+      if (c2.fix) out(`    ${dim("\u2192")} ${c2.fix}`);
+    }
+    const fails = checks.filter((c2) => c2.status === "fail").length;
+    const warns = checks.filter((c2) => c2.status === "warn").length;
+    out("");
+    out(
+      fails === 0 && warns === 0 ? pc.green("Everything looks good.") : `${fails} problem${fails === 1 ? "" : "s"}, ${warns} warning${warns === 1 ? "" : "s"}.`
+    );
+  }
+  return ok ? 0 : 1;
+}
+async function runDoctorChecks(dir, deps) {
+  const checks = [];
+  const apiUrl = resolveApiUrl();
+  checks.push(targetCheck(apiUrl));
+  const cfg = safeReadConfig2();
+  let signedIn = false;
+  if (!cfg?.token) {
+    checks.push({
+      id: "login",
+      label: "Login",
+      status: "fail",
+      detail: "not signed in",
+      fix: `Run ${code("dashwise login")}.`
+    });
+    checks.push(await connectionOnly(apiUrl));
+  } else {
+    try {
+      const me = await apiRequest("GET", "/api/auth/me");
+      signedIn = true;
+      checks.push({
+        id: "login",
+        label: "Login",
+        status: "ok",
+        detail: `signed in as ${me.email}`
+      });
+      checks.push({
+        id: "connection",
+        label: "Connection",
+        status: "ok",
+        detail: `${apiUrl} answers`
+      });
+    } catch (err) {
+      if (err instanceof ApiError && err.code === "NETWORK_ERROR") {
+        checks.push({
+          id: "login",
+          label: "Login",
+          status: "skip",
+          detail: "not checked, Dashwise is not reachable"
+        });
+        checks.push(unreachable(apiUrl));
+      } else if (err instanceof ApiError && err.status === 401) {
+        checks.push({
+          id: "login",
+          label: "Login",
+          status: "fail",
+          detail: "the saved login is expired or was revoked",
+          fix: `Run ${code("dashwise login")} again.`
+        });
+        checks.push({
+          id: "connection",
+          label: "Connection",
+          status: "ok",
+          detail: `${apiUrl} answers`
+        });
+      } else {
+        checks.push({
+          id: "login",
+          label: "Login",
+          status: "fail",
+          detail: `could not check the login (${err.message})`,
+          fix: `Try again; if it stays, run ${code("dashwise login")}.`
+        });
+        checks.push({
+          id: "connection",
+          label: "Connection",
+          status: "warn",
+          detail: `${apiUrl} answered with an error`
+        });
+      }
+    }
+  }
+  checks.push(nodeCheck(deps.nodeVersion));
+  checks.push(
+    await versionCheck(
+      "cli",
+      "Dashwise CLI",
+      deps.cliVersion,
+      await deps.latestVersion("@dashai/cli"),
+      `Run ${code("npx @dashai/cli@latest <command>")} or ${code("npm install -g @dashai/cli@latest")}.`
+    )
+  );
+  const manifestPath2 = join(dir, "module.json");
+  if (!existsSync(manifestPath2)) {
+    checks.push({
+      id: "module",
+      label: "Module",
+      status: "skip",
+      detail: `no ${code("module.json")} here, so the module checks were skipped`,
+      fix: `Run ${code("dashwise doctor")} inside a module folder to check it too.`
+    });
+    return checks;
+  }
+  let parsed = false;
+  let manifest = null;
+  try {
+    manifest = JSON.parse(readFileSync(manifestPath2, "utf-8"));
+    parsed = true;
+  } catch (err) {
+    checks.push({
+      id: "module",
+      label: "module.json",
+      status: "fail",
+      detail: `cannot be read: ${err.message}`,
+      fix: `Fix the JSON in ${code("module.json")}.`
+    });
+  }
+  const header = manifest !== null && typeof manifest === "object" ? manifest.module : void 0;
+  const slug = typeof header?.slug === "string" ? header.slug : null;
+  if (parsed) checks.push(await manifestCheck(manifest, signedIn));
+  const sdk = readInstalledSdk(dir);
+  checks.push(
+    sdk ? await versionCheck(
+      "sdk",
+      "Dashwise SDK",
+      sdk.version,
+      await deps.latestVersion("@dashai/sdk"),
+      `Run ${code("npm install @dashai/sdk@latest")}.`
+    ) : {
+      id: "sdk",
+      label: "Dashwise SDK",
+      status: "warn",
+      detail: "not installed in this folder",
+      fix: `Run ${code("npm install")}.`
+    }
+  );
+  checks.push(await repoCheck(dir, slug, signedIn, deps));
+  const missing = CLOUD_FILES.filter((f) => !existsSync(join(dir, f)));
+  checks.push(
+    missing.length === 0 ? {
+      id: "cloud-setup",
+      label: "Cloud setup files",
+      status: "ok",
+      detail: "present (cloud agents can set up this module)"
+    } : {
+      id: "cloud-setup",
+      label: "Cloud setup files",
+      status: "warn",
+      detail: `missing: ${missing.join(", ")}`,
+      fix: `Copy them from a fresh ${code("dashwise init")} of the template, so Claude Code web and Codex cloud can set this module up.`
+    }
+  );
+  return checks;
+}
+function targetCheck(apiUrl) {
+  const source = process.env.DASHWISE_API_URL?.trim() ? "from DASHWISE_API_URL" : "from your saved login";
+  if (sameOrigin(apiUrl, KNOWN_API_URLS.prod)) {
+    return {
+      id: "target",
+      label: "Target",
+      status: "warn",
+      detail: `PRODUCTION (${apiUrl}, ${source}). Commands here change real company data.`,
+      fix: `To build against dev, run ${code(`dashwise login --api-url ${KNOWN_API_URLS.dev}`)} or set ${code(`DASHWISE_API_URL=${KNOWN_API_URLS.dev}`)}.`
+    };
+  }
+  if (sameOrigin(apiUrl, KNOWN_API_URLS.dev)) {
+    return {
+      id: "target",
+      label: "Target",
+      status: "ok",
+      detail: `dev (${apiUrl}, ${source})`
+    };
+  }
+  return {
+    id: "target",
+    label: "Target",
+    status: "ok",
+    detail: `custom (${apiUrl}, ${source})`
+  };
+}
+async function connectionOnly(apiUrl) {
+  try {
+    await apiRequest("GET", "/api/auth/me", void 0, { auth: "public" });
+  } catch (err) {
+    if (err instanceof ApiError && err.code === "NETWORK_ERROR") {
+      return unreachable(apiUrl);
+    }
+  }
+  return {
+    id: "connection",
+    label: "Connection",
+    status: "ok",
+    detail: `${apiUrl} answers`
+  };
+}
+function unreachable(apiUrl) {
+  return {
+    id: "connection",
+    label: "Connection",
+    status: "fail",
+    detail: `cannot reach ${apiUrl}`,
+    fix: "Check your network, VPN or proxy, and that the address is right."
+  };
+}
+function nodeCheck(version) {
+  const major = Number.parseInt(version.replace(/^v/, ""), 10);
+  return Number.isFinite(major) && major >= MIN_NODE_MAJOR ? { id: "node", label: "Node", status: "ok", detail: version } : {
+    id: "node",
+    label: "Node",
+    status: "fail",
+    detail: `${version} is too old`,
+    fix: `Install Node ${MIN_NODE_MAJOR} or newer (the template pins Node 22).`
+  };
+}
+async function versionCheck(id, label, installed, latest, fix) {
+  if (!latest) {
+    return {
+      id,
+      label,
+      status: "ok",
+      detail: `${installed} (could not look up the newest version)`
+    };
+  }
+  return compareVersions(installed, latest) < 0 ? {
+    id,
+    label,
+    status: "warn",
+    detail: `${installed}, newest is ${latest}`,
+    fix
+  } : { id, label, status: "ok", detail: `${installed} (newest)` };
+}
+async function manifestCheck(manifest, signedIn) {
+  if (manifest === null || typeof manifest !== "object" || Array.isArray(manifest)) {
+    return {
+      id: "module",
+      label: "module.json",
+      status: "fail",
+      detail: "is not a JSON object",
+      fix: `Run ${code("dashwise module validate")} and fix ${code("module.json")}.`
+    };
+  }
+  if (!signedIn) {
+    return {
+      id: "module",
+      label: "module.json",
+      status: "ok",
+      detail: "readable (not validated, you are not signed in)"
+    };
+  }
+  try {
+    await apiRequest("POST", "/api/modules/manifest/validate", manifest);
+    return {
+      id: "module",
+      label: "module.json",
+      status: "ok",
+      detail: "valid"
+    };
+  } catch (err) {
+    if (err instanceof ApiError && err.status === 400) {
+      return {
+        id: "module",
+        label: "module.json",
+        status: "fail",
+        detail: `invalid: ${err.message}`,
+        fix: `Run ${code("dashwise module validate")} for the full list.`
+      };
+    }
+    return {
+      id: "module",
+      label: "module.json",
+      status: "warn",
+      detail: `not validated (${err.message})`
+    };
+  }
+}
+async function repoCheck(dir, slug, signedIn, deps) {
+  const origin = deps.gitOrigin(dir);
+  if (!slug || !signedIn) {
+    return {
+      id: "repository",
+      label: "Repository",
+      status: "skip",
+      detail: !slug ? `no module slug in ${code("module.json")}` : "not checked, you are not signed in"
+    };
+  }
+  let linked = null;
+  try {
+    const mod = await apiRequest(
+      "GET",
+      `/api/modules/by-slug/${encodeURIComponent(slug)}`
+    );
+    if (!("repository_url" in mod)) {
+      return {
+        id: "repository",
+        label: "Repository",
+        status: "warn",
+        code: "REPOSITORY_NOT_VISIBLE",
+        detail: `you cannot see the repository of ${code(slug)}: only its builders and owners in its company can`,
+        fix: "Ask one of the module owners to add you as a builder."
+      };
+    }
+    linked = mod.repository_url ?? null;
+  } catch (err) {
+    return {
+      id: "repository",
+      label: "Repository",
+      status: "warn",
+      detail: err instanceof ApiError && err.status === 404 ? `module ${code(slug)} is not found in this Dashwise` : `could not read the module (${err.message})`,
+      fix: "Check the target above and that you can build this module."
+    };
+  }
+  if (!linked) {
+    return {
+      id: "repository",
+      label: "Repository",
+      status: "warn",
+      code: "REPOSITORY_NOT_LINKED",
+      detail: "the module has no repository linked in Dashwise",
+      fix: "Link one on the module's Build tab in Dashwise."
+    };
+  }
+  if (!origin) {
+    return {
+      id: "repository",
+      label: "Repository",
+      status: "warn",
+      detail: `linked to ${linked}, but this folder has no git origin`,
+      fix: `Run ${code(`git remote add origin ${linked}.git`)}.`
+    };
+  }
+  return sameRepo(origin, linked) ? {
+    id: "repository",
+    label: "Repository",
+    status: "ok",
+    detail: `${linked} (matches git origin)`
+  } : {
+    id: "repository",
+    label: "Repository",
+    status: "warn",
+    detail: `git origin is ${origin}, Dashwise builds from ${linked}`,
+    fix: `Push to ${linked}, or link this repository on the module's Build tab.`
+  };
+}
+function repoKey(url) {
+  const m = /github\.com[/:]([^/]+)\/([^/]+?)(?:\.git)?\/?$/i.exec(url.trim());
+  return m ? `${m[1]}/${m[2]}`.toLowerCase() : null;
+}
+function sameRepo(a, b) {
+  const ka = repoKey(a);
+  return ka !== null && ka === repoKey(b);
+}
+function sameOrigin(a, b) {
+  try {
+    return new URL(a).origin === new URL(b).origin;
+  } catch {
+    return false;
+  }
+}
+function safeReadConfig2() {
+  try {
+    return readConfig();
+  } catch {
+    return null;
+  }
+}
+function badge(status) {
+  switch (status) {
+    case "ok":
+      return pc.green("\u2714");
+    case "warn":
+      return pc.yellow("!");
+    case "fail":
+      return pc.red("\u2716");
+    default:
+      return dim("-");
+  }
+}
+function defaultDoctorDeps(cliVersion) {
+  return {
+    cliVersion,
+    nodeVersion: process.version,
+    latestVersion: async (pkg) => {
+      try {
+        const res = await fetch(
+          `https://registry.npmjs.org/${pkg.replace("/", "%2f")}/latest`,
+          { signal: AbortSignal.timeout(4e3) }
+        );
+        if (!res.ok) return null;
+        const body = await res.json();
+        return typeof body.version === "string" ? body.version : null;
+      } catch {
+        return null;
+      }
+    },
+    gitOrigin: (dir) => {
+      try {
+        return execFileSync("git", ["remote", "get-url", "origin"], {
+          cwd: dir,
+          stdio: ["ignore", "pipe", "ignore"]
+        }).toString().trim() || null;
+      } catch {
+        return null;
+      }
+    }
+  };
+}
+
 // src/commands/mcp.ts
 init_api_client();
 init_config();
@@ -15145,8 +15674,8 @@ function startMcpProxy(opts) {
   let streamUnavailable = false;
   let streamStarted = false;
   let resolveDone;
-  const done = new Promise((resolve14) => {
-    resolveDone = resolve14;
+  const done = new Promise((resolve15) => {
+    resolveDone = resolve15;
   });
   const trace = (line) => {
     if (verbose) log2(line);
@@ -15632,7 +16161,7 @@ async function revokeSession(endpointId) {
     () => false
   );
   const timeout = new Promise(
-    (resolve14) => setTimeout(() => resolve14(false), REVOKE_TIMEOUT_MS).unref()
+    (resolve15) => setTimeout(() => resolve15(false), REVOKE_TIMEOUT_MS).unref()
   );
   await Promise.race([attempt, timeout]);
 }
@@ -15810,7 +16339,7 @@ async function mcpAddCommand(options = {}) {
     fail(`Could not run \`claude\`: ${target.refused} Run the command above yourself.`);
     return 1;
   }
-  return await new Promise((resolve14) => {
+  return await new Promise((resolve15) => {
     const child = spawn(target.command, target.args, { shell: target.shell, stdio: "inherit" });
     let settled = false;
     child.on("error", (err) => {
@@ -15820,16 +16349,16 @@ async function mcpAddCommand(options = {}) {
         fail(
           `Claude Code is not on your PATH, so nothing was registered. Run the command above once ${code("claude")} is installed.`
         );
-        resolve14(1);
+        resolve15(1);
         return;
       }
       fail(`Could not run \`claude\`: ${err.message}`);
-      resolve14(1);
+      resolve15(1);
     });
     child.on("close", (codeOut) => {
       if (settled) return;
       settled = true;
-      resolve14(codeOut ?? 1);
+      resolve15(codeOut ?? 1);
     });
   });
 }
@@ -15948,10 +16477,10 @@ function upgradeCommand(plugin, marketplace) {
 var PLUGIN_NAME = "dashwise";
 var MARKETPLACE_NAME = "dashwise";
 var DEFAULT_MARKETPLACE_SOURCE = "Intuize/dashwise-cli";
-var defaultRunner = (cmd, args, opts) => new Promise((resolve14) => {
+var defaultRunner = (cmd, args, opts) => new Promise((resolve15) => {
   const target = spawnTarget(cmd, args);
   if ("refused" in target) {
-    resolve14({ code: null, stdout: "", stderr: target.refused, missing: false });
+    resolve15({ code: null, stdout: "", stderr: target.refused, missing: false });
     return;
   }
   const child = spawn(target.command, target.args, {
@@ -15966,7 +16495,7 @@ var defaultRunner = (cmd, args, opts) => new Promise((resolve14) => {
   child.on("error", (err) => {
     if (settled) return;
     settled = true;
-    resolve14({
+    resolve15({
       code: null,
       stdout,
       stderr: stderr || err.message,
@@ -15976,7 +16505,7 @@ var defaultRunner = (cmd, args, opts) => new Promise((resolve14) => {
   child.on("close", (exitCode) => {
     if (settled) return;
     settled = true;
-    resolve14({ code: exitCode, stdout, stderr, missing: false });
+    resolve15({ code: exitCode, stdout, stderr, missing: false });
   });
 });
 function readSkillsOnDisk() {
@@ -17670,7 +18199,14 @@ async function moduleInstallCommand(slugArg, options) {
   try {
     const installs = await listWorkspaceInstallations(workspace2.id, auth);
     const byKind = selectInstallsByKind(installs, mod.id);
-    existing = byKind.production;
+    const production = byKind.all.filter((row2) => !isDevInstallKind(row2.kind));
+    if (production.length > 1) {
+      fail(
+        "Several production installations exist for this module in this company. Select the installation to update in the app. Nothing was changed."
+      );
+      return 1;
+    }
+    existing = production[0];
     devInstall = byKind.dev;
   } catch (err) {
     fail(
@@ -17753,7 +18289,8 @@ async function moduleInstallCommand(slugArg, options) {
       mod.id,
       {
         workspaceId: workspace2.id,
-        ...options.version !== void 0 ? { version: options.version } : {},
+        version: targetVersion,
+        ...existing ? { installation_id: existing.id } : {},
         ...options.force !== void 0 ? { force: options.force } : {}
       },
       auth
@@ -17761,6 +18298,12 @@ async function moduleInstallCommand(slugArg, options) {
   } catch (err) {
     return surfaceInstallError(err, mod.slug, workspace2.slug, devInstallReplaced);
   }
+  if (existing && (isInstallGated(result) || result.installation.id !== existing.id)) {
+    fail(
+      `The backend did not confirm an in-place update of installation #${existing.id}. Check its state in the app before retrying; no fallback install will be attempted.`
+    );
+    return 1;
+  }
   if (isInstallGated(result)) {
     if (options.json) {
       out(JSON.stringify(result));
@@ -17780,7 +18323,9 @@ async function moduleInstallCommand(slugArg, options) {
   let verified = false;
   try {
     const after = await listWorkspaceInstallations(workspace2.id, auth);
-    row = selectInstallsByKind(after, mod.id).production;
+    row = after.find(
+      (candidate) => candidate.id === result.installation.id && candidate.module_id === mod.id && !isDevInstallKind(candidate.kind)
+    );
     verified = row !== void 0;
   } catch {
   }
@@ -18390,6 +18935,16 @@ function packedFileLines(files, cap = PACKED_FILE_LIST_CAP) {
   if (files.length <= cap) return [...files];
   return [...files.slice(0, cap), `\u2026 and ${files.length - cap} more`];
 }
+function repositoryLinkedDecision(input) {
+  if (!input.repositoryUrl || input.fromLocal || input.dryRun) return "proceed";
+  return input.interactive ? "confirm" : "refuse";
+}
+function canPrompt(stdin, stdout) {
+  return stdin.isTTY === true && stdout.isTTY === true;
+}
+function repositoryLinkedWarning(repositoryUrl) {
+  return `These files are not in ${repositoryUrl}; the next repository build replaces them.`;
+}
 async function modulePublishCommand(options) {
   const projectRoot = resolve(options.dir ?? process.cwd());
   const manifestPath2 = join(projectRoot, "module.json");
@@ -18486,6 +19041,35 @@ async function modulePublishCommand(options) {
     );
   }
   for (const w of tarball.warnings) warn(w);
+  if (mod.repository_url) {
+    const decision = repositoryLinkedDecision({
+      repositoryUrl: mod.repository_url,
+      fromLocal: options.fromLocal === true,
+      dryRun: options.dryRun === true,
+      interactive: canPrompt(process.stdin, process.stdout)
+    });
+    warn(repositoryLinkedWarning(mod.repository_url));
+    if (decision === "refuse") {
+      fail(
+        `${code(slug)} is linked to a repository. Re-run with ${code("--from-local")} to publish these local files anyway.`
+      );
+      return 1;
+    }
+    if (decision === "confirm") {
+      const answer = await select({
+        message: "Publish these local files anyway?",
+        options: [
+          { value: "go", label: "Yes, publish from local files" },
+          { value: "cancel", label: "No, abort" }
+        ],
+        initialValue: "cancel"
+      });
+      if (isCancel(answer) || answer === "cancel") {
+        fail("Aborted.");
+        return 130;
+      }
+    }
+  }
   if (!options.yes && process.stdout.isTTY && !options.dryRun) {
     const answer = await select({
       message: `Upload + publish ${code(`bump:${bump}`)}?`,
@@ -19022,7 +19606,7 @@ async function moduleReleaseCommand(slugArg, options) {
   }
   async function wait() {
     const remaining = Math.max(0, deadline - Date.now());
-    await new Promise((resolve14) => setTimeout(resolve14, Math.min(options.pollIntervalMs ?? 4e3, remaining)));
+    await new Promise((resolve15) => setTimeout(resolve15, Math.min(options.pollIntervalMs ?? 4e3, remaining)));
   }
 }
 
@@ -22430,7 +23014,7 @@ function formatTimestamp(iso) {
   return iso.slice(0, 19).replace("T", " ");
 }
 function sleep2(ms) {
-  return new Promise((resolve14) => setTimeout(resolve14, ms));
+  return new Promise((resolve15) => setTimeout(resolve15, ms));
 }
 
 // src/commands/module/action-log.ts
@@ -22532,7 +23116,7 @@ async function runTail2(installationId, options) {
       }
       dim(`(tail: transient error \u2014 ${err.message})`);
     }
-    await new Promise((resolve14) => setTimeout(resolve14, POLL_INTERVAL_MS2));
+    await new Promise((resolve15) => setTimeout(resolve15, POLL_INTERVAL_MS2));
   }
 }
 function printTable(rows) {
@@ -22917,7 +23501,7 @@ async function sleep3(ms, aborted) {
   const slice = 100;
   let waited = 0;
   while (waited < ms && !aborted()) {
-    await new Promise((resolve14) => setTimeout(resolve14, Math.min(slice, ms - waited)));
+    await new Promise((resolve15) => setTimeout(resolve15, Math.min(slice, ms - waited)));
     waited += slice;
   }
 }
@@ -23467,6 +24051,17 @@ program.command("login").description("Sign in via the device-code flow.").option
   });
   process.exitCode = exit;
 });
+program.command("doctor").description(
+  "Check your setup: which Dashwise you target (dev or prod), login, connection, Node, CLI and SDK versions, and inside a module folder module.json, the repository link and the cloud setup files. Each item says what to do. Exits 1 when something fails."
+).option("--dir <path>", "Module folder to check (default: current directory).").option("--json", "Print one JSON object { ok, checks } instead of the report.").action(async (cmdOpts) => {
+  process.exitCode = await doctorCommand(
+    {
+      ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
+      ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
+    },
+    defaultDoctorDeps(getVersion())
+  );
+});
 program.command("logout").description("Clear the local credentials and revoke the server-side token.").action(async () => {
   process.exitCode = await logoutCommand();
 });
@@ -24057,6 +24652,9 @@ moduleCmd.command("release [slug]").description("Release an exact pushed reposit
   });
 });
 moduleCmd.command("publish").description("Pack the current directory + upload it as a new module version.").option("--dir <path>", "Project root (default: current directory).").option("--bump <direction>", "Semver bump: patch | minor | major.").option("--dry-run", "Validate + upload but do not persist the version row.").option("-y, --yes", "Skip the confirmation prompt (for CI / scripted use).").option(
+  "--from-local",
+  "Publish local files to a module that has a linked repository (the next repository build replaces them)."
+).option(
   "--exclude <pattern...>",
   "Extra exclude patterns (segment-matched) appended to the defaults."
 ).option(
@@ -24076,6 +24674,7 @@ moduleCmd.command("publish").description("Pack the current directory + upload it
       ...cmdOpts.bump !== void 0 ? { bump: cmdOpts.bump } : {},
       ...cmdOpts.dryRun !== void 0 ? { dryRun: cmdOpts.dryRun } : {},
       ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {},
+      ...cmdOpts.fromLocal !== void 0 ? { fromLocal: cmdOpts.fromLocal } : {},
       ...cmdOpts.exclude !== void 0 ? { exclude: cmdOpts.exclude } : {},
       // commander maps `--no-respect-gitignore` to
       // `respectGitignore === false`.
@@ -24332,12 +24931,12 @@ tableCmd.command("create <slug>").description(
   "Create a new table. Pass --field flags to define columns. Calls POST /api/installations/:id/schema/tables and syncs the updated manifest back to local module.json."
 ).option("--dir <path>", "Project root (default: current directory).").option(
   "-f, --field <spec>",
-  "Field spec \u2014 `<slug>:<type>[:required]`. Repeat for multiple fields. For options/target/default, use --field-json instead. Example: `--field title:text:required --field done:boolean`.",
+  "Field spec: `<slug>:<type>[:primary,required]`. Exactly one eligible field must be primary. Repeat for multiple fields. For options/target/default, use --field-json instead. Example: `--field title:text:primary,required --field done:boolean`.",
   (val, prev = []) => [...prev, val],
   []
 ).option(
   "--field-json <json>",
-  "Field as a JSON object \u2014 `{slug,type,required?,options?,target?,default?}`. Repeatable. Use for fields where the simple syntax can't express the shape.",
+  "Field as a JSON object \u2014 `{slug,type,primary?:true,required?,options?,target?,default?}`. Repeatable. Use for fields where the simple syntax can't express the shape.",
   (val, prev = []) => [...prev, val],
   []
 ).action(
@@ -24401,7 +25000,7 @@ fieldCmd.command("set-type <table-slug> <field-slug> <new-type>").description(
   }
 );
 function getVersion() {
-  return "0.23.0";
+  return "0.24.0";
 }
 function parseIntOption(value) {
   const n = Number.parseInt(value, 10);