@descix/cli 2.0.0 → 2.0.2

package/bin/descix.js

@@ -2411,11 +2411,20 @@ siteCommand
         filesToUpload.forEach(f => console.log(chalk.gray(`  + ${f.path} (${(f.size / 1024).toFixed(1)}KB)`)));
         // The server's last deploy manifest names what it holds; the confirm step lists the
         // storage prefix itself, so this preview is the manifest's view of what would go.
-        const lastDeployed = Object.keys(existing_manifest?.files || {});
-        const wouldRemove = lastDeployed.filter(p => !(p in localFiles)).sort();
-        if (wouldRemove.length > 0) {
-          console.log(chalk.yellow('\n  Would remove from the server (in the last deploy, not in this build):'));
-          wouldRemove.forEach(f => console.log(chalk.gray(`  - ${f}`)));
+        // THE REMOVE SET IS ALWAYS STATED, including empty (regression from 1.0.20 measured
+        // 2026-10-10: the silent branch read as "didn't check", and an absence claim the
+        // instrument cannot make — no server manifest — must say THAT, not imply none).
+        if (existing_manifest?.files) {
+          const lastDeployed = Object.keys(existing_manifest.files);
+          const wouldRemove = lastDeployed.filter(p => !(p in localFiles)).sort();
+          if (wouldRemove.length > 0) {
+            console.log(chalk.yellow('\n  Would remove from the server (in the last deploy, not in this build):'));
+            wouldRemove.forEach(f => console.log(chalk.gray(`  - ${f}`)));
+          } else {
+            console.log(chalk.gray('\n  Would remove: none (every file of the last deploy is in this build)'));
+          }
+        } else {
+          console.log(chalk.gray('\n  Would remove: unknown — the server returned no previous deploy manifest (first deploy, or manifest unreadable)'));
         }
         console.log(chalk.gray(`\n  Site URL: ${site_url}\n`));
         return;

package/lib/commands/appInit.js

@@ -23,7 +23,8 @@ import { generateAgentFiles } from '../agent-files.js';
  */
 export async function runAppInit(apiClient, options) {
   let appId = options.app;
-  const kbId = options.kb || 'General';
+  let kbId = options.kb || 'General';
+  let createdHere = false;
 
   // v3 single-app: THIS directory becomes (or already is) the workspace root. A workspace at an
   // ANCESTOR is a refusal, loud, BEFORE anything is written anywhere — the walk-up used to
@@ -59,6 +60,7 @@ export async function runAppInit(apiClient, options) {
     const created = response.message || response;
     appId = created.app_id || appId;
     communityId = created.community_id || options.community;
+    createdHere = true;
     console.log(chalk.green(`\n✅ App created: ${appId}`));
     if (appId !== options.app) {
       console.log(chalk.gray(`  The platform composed the id from the community and the name you gave.`));
@@ -71,6 +73,35 @@ export async function runAppInit(apiClient, options) {
     );
   }
 
+  // MAPPING AN EXISTING APP ADOPTS ITS KNOWLEDGE BASES AND NEVER CREATES ONE (measured
+  // 2026-10-10: mapping `egpt` without --kb created an empty `General` on PROD beside its
+  // real `Corpus`). One existing KB → adopted; several → --kb must name one of THEM; a named
+  // KB that does not exist is a refusal, never a create. Only the CREATE leg above may create,
+  // because only a brand-new app has nothing to adopt.
+  if (!createdHere) {
+    const kbResp = await apiClient.invoke('list_knowledge_bases', { community_id: communityId, app_id: appId });
+    const existingKbs = ((kbResp.message || kbResp).knowledge_bases || []).map((kb) => kb.name);
+    if (options.kb) {
+      if (!existingKbs.includes(options.kb)) {
+        throw new Error(
+          `App '${appId}' has no KB named '${options.kb}' — it has: ${existingKbs.join(', ') || '(none)'}.\n` +
+          `Mapping an existing app never creates a KB; name one that exists with --kb, or create ` +
+          `one deliberately with its own verb.`
+        );
+      }
+      kbId = options.kb;
+    } else if (existingKbs.length === 1) {
+      kbId = existingKbs[0];
+    } else if (existingKbs.length > 1) {
+      throw new Error(
+        `App '${appId}' has ${existingKbs.length} knowledge bases: ${existingKbs.join(', ')}.\n` +
+        `Name the one this repo syncs with --kb <name>.`
+      );
+    }
+    // zero KBs: every app is guaranteed a default KB at creation, so an empty list is a
+    // platform-side anomaly — keep the declared kbId and let the sync surface report it.
+  }
+
   // 1. Workspace.json — THIS repo root is the workspace root and holds exactly this app (v3).
   // registerApp is idempotent for the same id and REFUSES a different one: a repo that already
   // holds another app errors loudly instead of being silently re-pointed.
@@ -100,9 +131,12 @@ export async function runAppInit(apiClient, options) {
   }
   console.log(chalk.gray(`  Created: site/, microservice/, assets/`));
 
-  // 3. Create KnowledgeBase Firestore doc (Git Mode — no Drive required)
-  const kbResponse = await apiClient.invoke('init_git_mode_kb', { app_id: appId, kb_name: kbId });
-  const kbResult = kbResponse.message || kbResponse;
+  // 3. The default KB — CREATE leg only (see the adopt block above: map never creates).
+  let kbResult = null;
+  if (createdHere) {
+    const kbResponse = await apiClient.invoke('init_git_mode_kb', { app_id: appId, kb_name: kbId });
+    kbResult = kbResponse.message || kbResponse;
+  }
 
   console.log(chalk.green(`\n✓ ${appId} initialized`));
   console.log(chalk.gray(`  Community: ${communityId}`));
@@ -119,7 +153,7 @@ export async function runAppInit(apiClient, options) {
       console.log(chalk.gray(`    Retry with: descix community refresh-identity -c ${communityId}`));
     }
   }
-  console.log(chalk.gray(`  KB: ${kbId} — ${kbResult.created ? 'created' : 'already exists'}\n`));
+  console.log(chalk.gray(`  KB: ${kbId} — ${kbResult ? (kbResult.created ? 'created' : 'already exists') : 'adopted (existing app; map never creates)'}\n`));
   console.log(chalk.gray(`  (every app is guaranteed a default KB at creation; an empty one`));
   console.log(chalk.gray(`   says so rather than answering from general knowledge)\n`));
 

package/lib/verb-invokes.generated.json

@@ -12,6 +12,7 @@
     "create_app_for_community",
     "get_product_context",
     "init_git_mode_kb",
+    "list_knowledge_bases",
     "update_community_metadata"
   ],
   "app invite": [
@@ -189,6 +190,7 @@
     "find_communities",
     "get_product_context",
     "init_git_mode_kb",
+    "list_knowledge_bases",
     "resolve_invite",
     "sync_auto_purchases",
     "update_community_metadata"

package/lib/workspace-config.js

@@ -194,6 +194,22 @@ export class WorkspaceUnreadableError extends Error {
   }
 }
 
+/**
+ * A workspace.json in a RETIRED format (v1, v2.1 multi-app). It is a TYPE, like
+ * WorkspaceUnreadableError, because tryLoad() has to branch on it: "there is no workspace
+ * here" and "the workspace here is in a retired format" are different answers, and only the
+ * first is a soft null. Measured 2026-10-10: the refusal threw a PLAIN Error, tryLoad
+ * swallowed it, and five app repos' stale v2.1 files silently resolved to the DEFAULT origin —
+ * the exact wrong-env hazard the loader exists to prevent.
+ */
+export class WorkspaceRetiredFormatError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = 'WorkspaceRetiredFormatError';
+    this.code = 'WORKSPACE_RETIRED_FORMAT';
+  }
+}
+
 /**
  * WorkspaceConfig - Manages workspace-specific configuration
  *
@@ -407,11 +423,11 @@ export class WorkspaceConfig {
     // `error.message.includes('v1 workspace format')` re-throw was narrow string matching
     // (DeSciX anti-pattern #6) guarding a catch that should never have been this wide.
     if (parsed.communities && !parsed.env) {
-      throw new Error(
-        'v1 workspace format is not supported. Migrate to v2.1.\n' +
+      throw new WorkspaceRetiredFormatError(
+        'v1 workspace format is not supported. Migrate to v3.\n' +
         `  File:   ${configPath}\n` +
         '\n' +
-        'This file is still on disk and has NOT been modified. There is no automatic v1 → v2.1\n' +
+        'This file is still on disk and has NOT been modified. There is no automatic v1 → v3\n' +
         'migration: no surviving code reads the v1 layout, so its contents cannot be converted\n' +
         'for you — but they are still readable BY YOU, and this file is the only copy of them.\n' +
         moveAsideRemedy(configPath, 'descix app init')
@@ -424,7 +440,7 @@ export class WorkspaceConfig {
     // multi-app dev is sibling checkouts behind one gateway config. Same posture as the v1
     // refusal above: loud, non-destructive, the remedy is one command per app repo.
     if (parsed.env && (parsed.env.platform || parsed.env.products)) {
-      throw new Error(
+      throw new WorkspaceRetiredFormatError(
         'v2.1 multi-app workspace format is not supported. Migrate to v3 (single-app).\n' +
         `  File:   ${configPath}\n` +
         '\n' +
@@ -464,8 +480,9 @@ export class WorkspaceConfig {
    * Try to load workspace configuration, return null if not found
    * Useful for commands that need to check if workspace exists
    *
-   * RETURNS NULL FOR ABSENT, THROWS FOR UNREADABLE. "There is no workspace here" and "the
-   * workspace here is damaged" are different answers and only the first one is a soft no.
+   * RETURNS NULL FOR ABSENT, THROWS FOR UNREADABLE AND FOR RETIRED FORMATS. "There is no
+   * workspace here", "the workspace here is damaged" and "the workspace here is in a retired
+   * format" are different answers and only the first one is a soft no.
    * Swallowing the second made a corrupt workspace look like a fresh directory, which is how a
    * damaged workspace silently fell back to the DEFAULT (prod) origin instead of stopping.
    *
@@ -478,6 +495,7 @@ export class WorkspaceConfig {
       return await WorkspaceConfig.load(startDir);
     } catch (error) {
       if (error instanceof WorkspaceUnreadableError) throw error;
+      if (error instanceof WorkspaceRetiredFormatError) throw error;
       return null;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descix/cli",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "description": "DeSciX CLI and MCP Server - Unified command-line interface for DeSciX platform",
   "repository": {
     "type": "git",