@lotics/cli 0.100.2 → 0.101.1

package/dist/render_page.js

@@ -28695,6 +28695,73 @@ ${e.toString()}`);
       offsetYEmu
     };
   }
+  var EMU_PER_PT = 12700;
+  var VML_UNIT_TO_EMU = {
+    pt: EMU_PER_PT,
+    in: EMU_PER_PT * 72,
+    cm: EMU_PER_PT * 72 / 2.54,
+    mm: EMU_PER_PT * 72 / 25.4,
+    pc: EMU_PER_PT * 12,
+    px: EMU_PER_PT * 72 / 96
+  };
+  function readVmlLength(style, property) {
+    const match = new RegExp(`(?:^|;)\\s*${property}\\s*:\\s*([0-9.]+)([a-z]*)`, "i").exec(style);
+    if (!match) return null;
+    const value = Number.parseFloat(match[1]);
+    if (!Number.isFinite(value)) return null;
+    const unit = match[2].toLowerCase();
+    const perUnit = unit === "" ? EMU_PER_PT : VML_UNIT_TO_EMU[unit];
+    if (perUnit === void 0) return null;
+    return Math.round(value * perUnit);
+  }
+  function parsePict(pictXml) {
+    if (getTagName(pictXml) !== "w:pict") return null;
+    const imagedata = findFirstByTag(pictXml, "v:imagedata");
+    if (!imagedata) return null;
+    const relationshipId = getAttr(imagedata, "r:id") ?? getAttr(imagedata, "r:embed") ?? null;
+    if (relationshipId === null) return null;
+    const shape = findFirstByTag(pictXml, "v:shape") ?? findFirstByTag(pictXml, "v:rect");
+    const style = shape ? getAttr(shape, "style") ?? "" : "";
+    return {
+      relationshipId,
+      widthEmu: readVmlLength(style, "width"),
+      heightEmu: readVmlLength(style, "height"),
+      alt: (shape ? getAttr(shape, "alt") : void 0) ?? "",
+      // VML positioning is a CSS-ish `style`, not the wp: anchor vocabulary the
+      // anchor fields describe. Reporting it as inline keeps the renderer from
+      // acting on offsets that were never read.
+      inline: true,
+      wrap: null,
+      floatSide: null,
+      behindDoc: false,
+      offsetXEmu: null,
+      offsetYEmu: null
+    };
+  }
+  function parseAlternateContent(el) {
+    if (getTagName(el) !== "mc:AlternateContent") return null;
+    const branches = getChildren(el).filter((child) => {
+      const tag = getTagName(child);
+      return tag === "mc:Choice" || tag === "mc:Fallback";
+    });
+    const ordered = [
+      ...branches.filter((b) => getTagName(b) === "mc:Choice"),
+      ...branches.filter((b) => getTagName(b) === "mc:Fallback")
+    ];
+    for (const branch of ordered) {
+      const drawing = findFirstByTag(branch, "w:drawing");
+      if (drawing) {
+        const info = parseDrawing(drawing);
+        if (info && info.relationshipId !== null) return info;
+      }
+      const pict = findFirstByTag(branch, "w:pict");
+      if (pict) {
+        const info = parsePict(pict);
+        if (info) return info;
+      }
+    }
+    return null;
+  }
   function readPosOffset(containerEl, positionTag) {
     const position = findFirstByTag(containerEl, positionTag);
     if (!position) return null;
@@ -42936,6 +43003,24 @@ ${e.toString()}`);
       }
     };
   }
+  function imageNode(info, originalXml, marks) {
+    return docxSchema.nodes.image_inline.create(
+      {
+        relationshipId: info.relationshipId,
+        widthEmu: info.widthEmu,
+        heightEmu: info.heightEmu,
+        alt: info.alt,
+        originalXml,
+        wrap: info.wrap,
+        floatSide: info.floatSide,
+        behindDoc: info.behindDoc,
+        offsetXEmu: info.offsetXEmu,
+        offsetYEmu: info.offsetYEmu
+      },
+      void 0,
+      marks
+    );
+  }
   function convertRunChild(child, marks, state) {
     if (child.kind === "text") {
       if (child.value.length === 0) return [];
@@ -42963,26 +43048,15 @@ ${e.toString()}`);
     }
     if (tag === "w:drawing") {
       const info = parseDrawing(child.xml);
-      if (info) {
-        return [
-          docxSchema.nodes.image_inline.create(
-            {
-              relationshipId: info.relationshipId,
-              widthEmu: info.widthEmu,
-              heightEmu: info.heightEmu,
-              alt: info.alt,
-              originalXml: child.xml,
-              wrap: info.wrap,
-              floatSide: info.floatSide,
-              behindDoc: info.behindDoc,
-              offsetXEmu: info.offsetXEmu,
-              offsetYEmu: info.offsetYEmu
-            },
-            void 0,
-            marks
-          )
-        ];
-      }
+      if (info) return [imageNode(info, child.xml, marks)];
+    }
+    if (tag === "mc:AlternateContent") {
+      const info = parseAlternateContent(child.xml);
+      if (info) return [imageNode(info, child.xml, marks)];
+    }
+    if (tag === "w:pict") {
+      const info = parsePict(child.xml);
+      if (info) return [imageNode(info, child.xml, marks)];
     }
     return [
       docxSchema.nodes.opaque_inline.create({ xml: child.xml }, void 0, marks)

package/dist/src/cli.js

@@ -44955,6 +44955,7 @@ var LoticsClient = class {
       formData.append("capabilities", JSON.stringify(args.capabilities));
     }
     formData.append("workflow_aliases", JSON.stringify(args.workflow_aliases ?? []));
+    formData.append("query_aliases", JSON.stringify(args.query_aliases ?? []));
     const url2 = `${this.baseUrl}/v1/apps/${encodeURIComponent(args.app_id)}/versions`;
     const response = await fetch(url2, {
       method: "POST",
@@ -47256,10 +47257,35 @@ function undeclaredCapabilities(sourceText, declared) {
   }
   return used;
 }
-var ALIAS_CALL_HOOKS = { workflows: "useWorkflow", agents: "useAgentRun" };
+function driftedQueryAliases(a, b) {
+  const left = a ?? {};
+  const right = b ?? {};
+  return [.../* @__PURE__ */ new Set([...Object.keys(left), ...Object.keys(right)])].filter((alias) => canonicalJson(left[alias]) !== canonicalJson(right[alias])).sort();
+}
+function canonicalJson(value) {
+  const normalize = (v) => {
+    if (Array.isArray(v)) return v.map(normalize);
+    if (v === null || typeof v !== "object") return v;
+    const entries2 = Object.entries(v).sort(
+      ([x2], [y]) => x2 < y ? -1 : x2 > y ? 1 : 0
+    );
+    return entries2.map(([key, val]) => [key, normalize(val)]);
+  };
+  return JSON.stringify(normalize(value));
+}
+var ALIAS_CALL_HOOKS = {
+  queries: "useQuery",
+  workflows: "useWorkflow",
+  agents: "useAgentRun"
+};
 var LITERAL_ALIAS_ARG = `["'\`]([A-Za-z_$][A-Za-z0-9_$]*)["'\`]`;
 function calledAppAliases(sourceText) {
-  const out = { workflows: [], agents: [], dynamic: [] };
+  const out = {
+    queries: [],
+    workflows: [],
+    agents: [],
+    dynamic: []
+  };
   for (const [kind, hook] of Object.entries(ALIAS_CALL_HOOKS)) {
     const seen = /* @__PURE__ */ new Set();
     let isDynamic = false;
@@ -47274,12 +47300,15 @@ function calledAppAliases(sourceText) {
   }
   return out;
 }
-function unboundAliases(declared, bound) {
-  const boundWorkflows = new Set(bound.workflows ?? []);
-  const boundAgents = new Set(bound.agents ?? []);
+function unboundAliases(called, bound) {
+  const missing = (from, against) => {
+    const have = new Set(against ?? []);
+    return [...from ?? []].filter((alias) => !have.has(alias));
+  };
   return {
-    workflows: [...declared.workflows ?? []].filter((a) => !boundWorkflows.has(a)),
-    agents: [...declared.agents ?? []].filter((a) => !boundAgents.has(a))
+    queries: missing(called.queries, bound.queries),
+    workflows: missing(called.workflows, bound.workflows),
+    agents: missing(called.agents, bound.agents)
   };
 }
 
@@ -64923,12 +64952,16 @@ var appWorkflowContractSchema = zod_default.object({
   inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional(),
   outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional()
 });
+var MAX_APP_CAPABILITY_DESCRIPTION = 300;
 var appQueryDeclarationSchema = zod_default.object({
   ast: zod_default.unknown().describe(
     "Query AST template (a QueryNode). Validated server-side via parseQueryNode at deploy. May embed {{params.<name>}} tokens in filter value positions."
   ),
   params: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe(
     "Typed param schema. Keys are param names referenced as {{params.<name>}} in the ast; values declare type + constraints. The server validates the caller's params payload against this before interpolating. Omit for queries that take no params."
+  ),
+  description: zod_default.string().optional().describe(
+    `What this query returns, in one line \u2014 read by an agent choosing between the app's aliases. An alias is a JS identifier, which names a query without saying what it covers. Capped at ${MAX_APP_CAPABILITY_DESCRIPTION} characters.`
   )
 });
 var appAgentDeclarationSchema = zod_default.object({
@@ -70771,18 +70804,17 @@ async function appDeploy(client, args) {
     );
     console.error("Packaging dist...");
     await runTar(["-czf", tmpDist, "-C", distDir, "."], projectDir);
+    const liveQueries = await readLiveQueries(client, meta3.app_id);
     console.error("Uploading...");
     try {
       const result = await client.deployAppVersion({
+        queries: liveQueries,
         app_id: meta3.app_id,
         source_archive: fs4.readFileSync(tmpSource),
         dist_archive: fs4.readFileSync(tmpDist),
         prev_version_id: meta3.current_version_id,
         message: args.message,
-        // Sync apps.queries from the manifest. Server validates each query
-        // template (parseQueryNode, table access, param coverage).
-        queries: meta3.queries ?? {},
-        // Capabilities are manifest-authoritative (like queries): always send,
+        // Capabilities ARE manifest-authoritative: always send,
         // defaulting to `{}` when the manifest declares none — so deleting the
         // `capabilities` block turns every capability OFF on the next deploy
         // (fail-safe; the declaration is the grant).
@@ -70795,7 +70827,8 @@ async function appDeploy(client, args) {
         // typing artifact maintained by habit, so its keys answered this question
         // with whatever the author last remembered to write. Stop calling an
         // alias + redeploy to lift the guard before removing its binding.
-        workflow_aliases: called.workflows
+        workflow_aliases: called.workflows,
+        query_aliases: called.queries
       });
       writeAppMeta(projectDir, {
         ...meta3,
@@ -70808,6 +70841,7 @@ async function appDeploy(client, args) {
         const app = await client.getApp(meta3.app_id);
         warnIfUnbranded(app);
         warnIfUnboundAliases(app, called);
+        warnIfQueriesDiffer(app, meta3.queries ?? {});
       } catch (err2) {
         console.error(`(skipped post-deploy checks: ${err2.message})`);
       }
@@ -70838,17 +70872,47 @@ function warnIfUnbranded(app) {
   Find an icon:  lotics run search_app_icons '{"query":"<word>"}'`
   );
 }
+async function readLiveQueries(client, appId) {
+  try {
+    const app = await client.getApp(appId);
+    return app.queries ?? {};
+  } catch (err2) {
+    console.error(
+      `Could not read ${appId}'s current queries, which this deploy has to send back unchanged: ${err2 instanceof Error ? err2.message : String(err2)}
+  Nothing was deployed. Retry.`
+    );
+    process.exit(1);
+  }
+}
+function warnIfQueriesDiffer(app, manifest) {
+  const drifted = driftedQueryAliases(manifest, app.queries);
+  if (drifted.length === 0) return;
+  console.error(
+    `
+\u26A0 ${drifted.length} quer${drifted.length === 1 ? "y" : "ies"} in package.json differ from the app: ${drifted.join(", ")}
+  A deploy does not write them. Push yours with 'lotics app query set --all'
+  (or one alias at a time), or adopt the app's with 'lotics app pull'.`
+  );
+}
 function warnIfUnboundAliases(app, called) {
-  const { workflows: unboundWorkflows, agents: unboundAgents } = unboundAliases(called, {
+  const {
+    queries: unboundQueries,
+    workflows: unboundWorkflows,
+    agents: unboundAgents
+  } = unboundAliases(called, {
+    queries: Object.keys(app.queries ?? {}),
     workflows: Object.keys(app.workflows ?? {}),
     agents: Object.keys(app.agents ?? {})
   });
-  if (unboundWorkflows.length === 0 && unboundAgents.length === 0) return;
+  if (unboundQueries.length === 0 && unboundWorkflows.length === 0 && unboundAgents.length === 0) {
+    return;
+  }
   const lines = [
-    "\n\u26A0 This app CALLS aliases that are NOT bound on the server. Deploy ships code +",
-    '  queries only \u2014 it does NOT bind workflows/agents, so the app will throw "has no \u2026 alias"',
-    "  the first time it calls them. Bind each one:"
+    "\n\u26A0 This app CALLS aliases that are NOT bound on the server. A deploy ships code and",
+    '  binds nothing, so the app will throw "has no \u2026 alias" the first time it calls them.',
+    "  Bind each one:"
   ];
+  for (const alias of unboundQueries) lines.push(`  \u2022 query "${alias}"  \u2192  lotics app query set ${alias}`);
   for (const alias of unboundWorkflows) lines.push(`  \u2022 workflow "${alias}"  \u2192  lotics app workflow set ${alias}`);
   for (const alias of unboundAgents) lines.push(`  \u2022 agent "${alias}"  \u2192  bind with set_app_agent (lotics run set_app_agent \u2026)`);
   console.error(lines.join("\n"));
@@ -71158,20 +71222,31 @@ async function appWorkflowSet(client, args) {
 async function appQuerySet(client, args) {
   const projectDir = process.cwd();
   const meta3 = readAppMeta(projectDir);
-  const declaration = meta3.queries?.[args.alias];
-  if (!declaration) {
-    console.error(
-      `No query "${args.alias}" in package.json#lotics.queries. Declare it there (alias \u2192 { ast, params? }) first.`
-    );
-    process.exit(1);
+  const declared = meta3.queries ?? {};
+  const aliases = "all" in args ? Object.keys(declared).sort() : [args.alias];
+  if (aliases.length === 0) {
+    console.error("No queries in package.json#lotics.queries \u2014 nothing to push.");
+    return;
   }
-  const res = await client.setAppQuery(meta3.app_id, args.alias, declaration);
-  if (res.error) {
-    console.error(`Failed to set query "${args.alias}": ${res.error}`);
-    process.exit(1);
+  const pushed = [];
+  for (const alias of aliases) {
+    const declaration = declared[alias];
+    if (!declaration) {
+      console.error(
+        `No query "${alias}" in package.json#lotics.queries. Declare it there (alias \u2192 { ast, params? }) first.`
+      );
+      process.exit(1);
+    }
+    const res = await client.setAppQuery(meta3.app_id, alias, declaration);
+    if (res.error) {
+      if (pushed.length > 0) console.error(`Pushed before the failure: ${pushed.join(", ")}.`);
+      console.error(`Failed to set query "${alias}": ${res.error}`);
+      process.exit(1);
+    }
+    pushed.push(alias);
   }
   console.error(
-    `Set query "${args.alias}" on ${meta3.app_id}. (apps.queries is manifest-authoritative \u2014 the next 'lotics app deploy' re-syncs it.)`
+    `Set ${pushed.length} quer${pushed.length === 1 ? "y" : "ies"} on ${meta3.app_id}: ${pushed.join(", ")}.`
   );
 }
 async function appWorkflowPull(client) {
@@ -89579,37 +89654,47 @@ function extractParagraphText(el) {
   }
   return parts.join("");
 }
-function getRunsFromParagraph(el) {
-  const runs = [];
+function getParagraphTextSegments(el) {
+  const segments = [];
   for (const child of getChildren(el)) {
     if (getTagName(child) !== "w:r") continue;
-    let text = "";
-    let hasText = false;
+    let pending = [];
+    const flush = () => {
+      if (pending.length === 0) return;
+      const text = pending.map(
+        (node) => getChildren(node).reduce(
+          (acc, tn) => typeof tn["#text"] === "string" ? acc + tn["#text"] : acc,
+          ""
+        )
+      ).join("");
+      segments.push({ element: child, textNodes: pending, text });
+      pending = [];
+    };
     for (const grandchild of getChildren(child)) {
-      if (getTagName(grandchild) !== "w:t") continue;
-      hasText = true;
-      for (const tn of getChildren(grandchild)) {
-        if (typeof tn["#text"] === "string") text += tn["#text"];
+      if (getTagName(grandchild) === "w:t") {
+        pending.push(grandchild);
+        continue;
       }
+      flush();
     }
-    if (hasText) runs.push({ element: child, text });
+    flush();
   }
-  return runs;
+  return segments;
 }
-function writeRunText(runElement, newText) {
-  const children = getChildren(runElement);
-  const textNode = { "w:t": [{ "#text": newText }], ":@": { "@_xml:space": "preserve" } };
-  const indices = children.flatMap((c, i2) => getTagName(c) === "w:t" ? [i2] : []);
-  if (indices.length === 0) {
-    children.push(textNode);
-    return;
+function setSegmentText(segment, newText) {
+  const children = getChildren(segment.element);
+  const textNode = {
+    "w:t": [{ "#text": newText }],
+    ":@": { "@_xml:space": "preserve" }
+  };
+  const head = children.indexOf(segment.textNodes[0]);
+  children[head] = textNode;
+  for (let i2 = segment.textNodes.length - 1; i2 >= 1; i2--) {
+    const at2 = children.indexOf(segment.textNodes[i2]);
+    if (at2 >= 0) children.splice(at2, 1);
   }
-  children[indices[0]] = textNode;
-  for (let i2 = indices.length - 1; i2 >= 1; i2--) children.splice(indices[i2], 1);
-}
-function setRunText(run, newText) {
-  writeRunText(run.element, newText);
-  run.text = newText;
+  segment.textNodes = [textNode];
+  segment.text = newText;
 }
 function computeReplacementRanges(text, query, replacement, matchType, maxReplacements, startCount) {
   const ranges = [];
@@ -89644,39 +89729,39 @@ function computeReplacementRanges(text, query, replacement, matchType, maxReplac
   }
   return { ranges, count };
 }
-function applyRangeReplacements(runs, ranges) {
+function applyRangeReplacements(segments, ranges) {
   if (ranges.length === 0) return;
   const bounds = [];
   let offset = 0;
-  for (const run of runs) {
-    bounds.push({ run, start: offset, end: offset + run.text.length });
-    offset += run.text.length;
+  for (const segment of segments) {
+    bounds.push({ segment, start: offset, end: offset + segment.text.length });
+    offset += segment.text.length;
   }
-  const joined = runs.map((r) => r.text).join("");
+  const joined = segments.map((s) => s.text).join("");
   const sorted = [...ranges].sort((a, b) => a.start - b.start);
-  for (const { run, start: runStart, end: runEnd } of bounds) {
+  for (const { segment, start: segStart, end: segEnd } of bounds) {
     let next = "";
-    let cursor = runStart;
+    let cursor = segStart;
     for (const range2 of sorted) {
-      if (range2.end <= runStart || range2.start >= runEnd) continue;
-      const keepUntil = Math.min(range2.start, runEnd);
-      const from = Math.max(cursor, runStart);
+      if (range2.end <= segStart || range2.start >= segEnd) continue;
+      const keepUntil = Math.min(range2.start, segEnd);
+      const from = Math.max(cursor, segStart);
       if (keepUntil > from) next += joined.slice(from, keepUntil);
-      if (runStart <= range2.start && range2.start < runEnd) next += range2.replacement;
+      if (segStart <= range2.start && range2.start < segEnd) next += range2.replacement;
       cursor = Math.max(cursor, range2.end);
     }
-    const tail = Math.max(cursor, runStart);
-    if (runEnd > tail) next += joined.slice(tail, runEnd);
-    if (next !== run.text) setRunText(run, next);
+    const tail = Math.max(cursor, segStart);
+    if (segEnd > tail) next += joined.slice(tail, segEnd);
+    if (next !== segment.text) setSegmentText(segment, next);
   }
 }
 function replaceInParagraph(el, query, replacement, matchType, maxReplacements, replacementsMade) {
   if (!extractParagraphText(el)) return replacementsMade;
-  const runs = getRunsFromParagraph(el);
-  if (runs.length === 0) return replacementsMade;
-  const text = runs.length === 1 ? runs[0].text : runs.map((r) => r.text).join("");
+  const segments = getParagraphTextSegments(el);
+  if (segments.length === 0) return replacementsMade;
+  const text = segments.length === 1 ? segments[0].text : segments.map((s) => s.text).join("");
   const { ranges, count } = computeReplacementRanges(text, query, replacement, matchType, maxReplacements, replacementsMade);
-  applyRangeReplacements(runs, ranges);
+  applyRangeReplacements(segments, ranges);
   return count;
 }
 function replaceText(bodyElements, query, replacement, matchType = "contains", maxReplacements = Infinity) {
@@ -92707,11 +92792,15 @@ Available workspaces:`);
     if (subcommand === "query") {
       const action = toolArgs;
       if (action === "set") {
-        const alias = restArgs[0];
+        if (restArgs.includes("--all")) {
+          await appQuerySet(client, { all: true });
+          return;
+        }
+        const alias = restArgs.find((a) => !a.startsWith("--"));
         if (!alias) {
-          console.error("Usage: lotics app query set <alias>");
+          console.error("Usage: lotics app query set <alias> | --all");
           console.error(
-            "Pushes package.json#lotics.queries.<alias> to apps.queries via set_app_query (no deploy)."
+            "Pushes package.json#lotics.queries to apps.queries via set_app_query. A deploy does not."
           );
           process.exit(1);
         }
@@ -92720,7 +92809,10 @@ Available workspaces:`);
       }
       console.error("Usage:");
       console.error(
-        "  lotics app query set <alias>   Push package.json#lotics.queries.<alias> to apps.queries (no deploy)"
+        "  lotics app query set <alias>   Push package.json#lotics.queries.<alias> to apps.queries"
+      );
+      console.error(
+        "  lotics app query set --all     Push every declared query (a deploy does not write them)"
       );
       process.exit(1);
     }

package/dist/src/client.d.ts

@@ -222,6 +222,7 @@ export declare class LoticsClient {
         queries?: Record<string, {
             ast: unknown;
             params?: Record<string, unknown>;
+            description?: string;
         }> | null;
         /**
          * Live alias → agent declaration map from `apps.agents`. Source of truth for
@@ -866,6 +867,7 @@ export declare class LoticsClient {
     setAppQuery(app_id: string, alias: string, declaration: {
         ast: unknown;
         params?: Record<string, unknown>;
+        description?: string;
     }): Promise<ToolExecuteResult>;
     /**
      * Bind (create or replace) an app agent by alias via the `set_app_agent` tool
@@ -1006,14 +1008,16 @@ export declare class LoticsClient {
         prev_version_id?: string | null;
         message?: string | null;
         /**
-         * Alias → query declaration map from `package.json#lotics.queries`. Each
-         * value is `{ ast, params? }` — a fixed query AST template and an optional
-         * typed param schema. Always sent (empty object when none declared) so the
-         * server overwrites apps.queries authoritatively.
+         * Alias → query declaration map ECHOED BACK from the live row (see
+         * `readLiveQueries`), not read from the manifest. Every key the row holds
+         * must survive the round trip — `description` included — because a server
+         * that treats a present map as authoritative writes exactly what it is
+         * sent, so a lossy echo silently strips whatever it forgot.
          */
         queries?: Record<string, {
             ast: unknown;
             params?: Record<string, unknown>;
+            description?: string;
         }>;
         /**
          * Opt-in app capabilities from `package.json#lotics.capabilities`. The CLI
@@ -1032,6 +1036,7 @@ export declare class LoticsClient {
          * (empty array when none declared).
          */
         workflow_aliases?: string[];
+        query_aliases?: string[];
     }): Promise<{
         version_id: string;
         version_number: number;

package/dist/src/client.js

@@ -723,6 +723,7 @@ export class LoticsClient {
         // server records what the served version calls — the remove_app_workflow
         // guard reads this back. These are the manifest KEYS only, never bindings.
         formData.append("workflow_aliases", JSON.stringify(args.workflow_aliases ?? []));
+        formData.append("query_aliases", JSON.stringify(args.query_aliases ?? []));
         const url = `${this.baseUrl}/v1/apps/${encodeURIComponent(args.app_id)}/versions`;
         const response = await fetch(url, {
             method: "POST",

package/docs/cli_reference.md

@@ -30,13 +30,13 @@ Per-command syntax, flags, contracts, and gotchas for the public `lotics` CLI. S
 | `lotics knowledge rm <id>` | Archive the doc via `delete_knowledge` (`{ knowledge_doc_id }`). The REST execute path does not gate `needsApproval`, so this runs unattended. |
 | `lotics app create <name> [path]` | Scaffold a Vite+React+TS custom-code app project; POST /v1/apps; npm install; vite build; upload as v1 |
 | `lotics app pull <app_id> [path]` | Download source archive from R2 (presigned), extract, npm install, stamp package.json's `lotics` field. With no `[path]`: refresh the cwd IN PLACE when it's already this app's own project (its manifest `app_id` matches — the documented `cd <app> && lotics app pull` flow), else clone into an `<name>/` subdir; this avoids the stray nested `./<name>/` subdir a pull-from-inside-the-app used to drop. — `workflows` and `agents` are sourced from the live App row (NOT the archived manifest), so `set_app_workflow` / `set_app_agent` authoring survives the pull. Regenerates `.lotics/app_{workflows,queries,agents}.d.ts` so `useWorkflow` / `useQuery` / `useAgentRun` stay typed. Also writes one `src/workflows/<alias>.ts` per bound workflow (faithful body from `get_app_workflow`) and one `src/agents/<alias>.md` per bound agent (its instructions, straight off the live row) — so the prose an author actually edits lives in a file, and pull always overwrites it from live, leaving no second copy to drift. A legacy workflow alias with no rendered source, or an agent with no instructions, warns and is skipped. The stamped `lotics.agents` map carries the TYPED half only (`inputs`/`outputs`/`tool_names`/`model_id`/…) — an agent's prose lives solely in its `.md`, so there is never a second local copy to desync; a stale `instructions` left by an older CLI is inert and disappears on the next pull |
-| `lotics app deploy -m <message>` | **`-m` is REQUIRED** (CLI errors without a non-empty message) — each deploy is a version row read back by `lotics app versions`, so a blank message loses the audit trail. npm run build; tar source + dist; POST /v1/apps/{id}/versions multipart. Carries code + queries + capabilities only — workflow bindings are NOT a deploy concern (`set_app_workflow` / `remove_app_workflow` own `apps.workflows`; the manifest's `workflows` map is a pulled reflection used only for `useWorkflow` codegen). Deploy DOES send the manifest's `lotics.workflows` alias KEYS (not the bindings) as `workflow_aliases`, recorded on the version row so `remove_app_workflow` can refuse to unbind an alias the served version still declares. After a successful deploy it also **warns loudly about any `lotics.workflows` / `lotics.agents` alias declared in the manifest but NOT bound on the server** (a `getApp` diff via `warnIfUnboundAliases`) — since deploy never binds them, that would otherwise throw only at the app's first `useWorkflow` / `useAgentRun` call; the warning points to `lotics app workflow set` / `set_app_agent`. Advisory only (never fails the deploy). |
+| `lotics app deploy -m <message>` | **`-m` is REQUIRED** (CLI errors without a non-empty message) — each deploy is a version row read back by `lotics app versions`, so a blank message loses the audit trail. npm run build; tar source + dist; POST /v1/apps/{id}/versions multipart. Carries code + capabilities only — **neither queries nor workflow/agent bindings are a deploy concern** (`set_app_workflow` / `remove_app_workflow` own `apps.workflows`; the manifest's `workflows` map is a pulled reflection used only for `useWorkflow` codegen). Deploy DOES send the manifest's `lotics.workflows` alias KEYS (not the bindings) as `workflow_aliases`, recorded on the version row so `remove_app_workflow` can refuse to unbind an alias the served version still declares. It also reports any `lotics.queries` alias whose declaration DIFFERS from the app's, naming both recoveries (`app query set --all` to push yours, `app pull` to adopt the app's) — a deploy no longer writes them, so the two are allowed to drift. After a successful deploy it **warns loudly about any alias the source CALLS that is NOT bound on the server** (a `getApp` diff via `warnIfUnboundAliases`) — since deploy never binds them, that would otherwise throw only at the app's first `useWorkflow` / `useAgentRun` call; the warning points to `lotics app workflow set` / `set_app_agent`. Advisory only (never fails the deploy). |
 | `lotics app versions [app_id]` | `GET /v1/apps/{id}/versions` — print deploy history newest-first (version number, timestamp, deployer name, build status, the `-m` message; `*` marks the currently-served version). app_id from the local manifest, or pass one to inspect any app without pulling it. Admin-only server-side (mirrors deploy + source download). Answers "what shipped, when, by whom" — e.g. whether a fix was live at an incident's time. The deploy pipeline already persisted all of this in `app_versions`; this is the read surface. Title → stderr, table → stdout (pipeable). |
 | `lotics app codegen [path]` | Regenerate `.lotics/*` from the manifest + workspace schema **without a deploy**. The three `.d.ts` companions (`app_{workflows,queries,agents}.d.ts`) are always rewritten (synchronous, no network). When credentials resolve, also rewrites the **runtime** `.lotics/app_fields.ts` — **branched on whether the app is a package installation** (`getApp().package_id` set, from `generate_package_fields.ts`): a **linked/published** app emits the BINDING form (`F`/`OPT`/`ROLE` resolved from the installation's LIVE binding — via `appBinding` / the `binding` RPC — at module load through `getAppBinding()` + top-level await, so the source stays portable across every install); a **bespoke** app emits the BAKED form (`generate_app_fields.ts`) — a real `.ts` exporting `F` (table→field→`"fld_…"`) + `OPT` (table→select-field→option→`"opt_…"`) keyed by display-name aliases, for the tables the app's queries reference (+ optional `package.json#lotics.codegen.tables` allowlist). Both forms share the `F`/`OPT` shape (contract aliases derive from the same slugified display names), so a published origin's deployed source compiles unchanged. Writing the BINDING form also heals the project's vitest setup (`ensureAppVitestSetup`, folded into the same write boundary): the binding form awaits `getAppBinding()` (a network call) at module load, so without a stub `npm test` fails to collect any test that imports the app graph — the heal writes `vitest.setup.ts` (mocks only `getAppBinding`, returning an echo binding: any alias → a self-identifying `fld:test:…`/`opt:test:…`/`grp:test:…` id) if absent, and warns the one-liner to add to `vite.config.ts`'s `test.setupFiles` if the wiring is missing (TS source isn't safely munged, mirroring `ensureAppTsconfig`'s JSONC-tsconfig warn). New scaffolds ship both. Also refreshes each bound workflow's `.lotics/workflows/<alias>.globals.d.ts` + re-wraps its EXISTING `src/workflows/<alias>.ts` body in the current envelope (strips + re-wraps; never re-fetches the body, so local edits survive). A getApp / binding / schema / dts-fetch failure is non-fatal (warns, keeps the last-generated files). |
 | `lotics app workflow run <alias> '<json>'` | Execute a bound app workflow end-to-end via `appWorkflow`. `app_id` comes from the local manifest; the alias must be bound (`set_app_workflow`). Inputs ingest exactly like `lotics run` (inline JSON / `@file` / stdin — bulk inputs bypass `ARG_MAX`). Prints the full `{status,message,data,files,side_effects}` JSON to stdout + a one-line summary to stderr; exits non-zero on `status:"error"` (assertable). `--print-created` (alias `--report-effects`) renders the honest post-run harvest (GAP-58): created records grouped by table, a paste-ready `lotics run delete_records …` per table, then the **mandatory caveat** naming what cannot be auto-undone (external integrations + notifications) and that sub-workflows may have run. `--cleanup` (DEFAULT OFF, implies the report) additionally runs the deletes for harvested records ONLY — never files / external / notifications. Neither is a rollback — a rollback is structurally impossible here. |
 | `lotics app workflow set <alias>` | Push the edited `src/workflows/<alias>.ts` body through `set_app_workflow` (the single author of `apps.workflows`). Reads the body from disk (header + `/// <reference>` + `export {};` marker + the `__workflow` wrapper all stripped) + the typed `inputs`/`outputs` from `package.json#lotics.workflows.<alias>`; the **server** re-verifies the body and echoes the bound `outputs` (declared, else DERIVED from `return({ data })`). When the manifest declared NO `outputs`, the DERIVED echo is written back into `package.json#lotics.workflows.<alias>.outputs` (a SURGICAL write — preserves `knowledge`/`config` and every other manifest field) and that alias's types are refreshed in place, so `useWorkflow("<alias>")`'s `result.data` is typed immediately with no hand-copy and no second `lotics app codegen`; an explicitly-declared `outputs` is authoritative and never overwritten. Deploy still never authors workflows — this is a CLI convenience over the existing tool. Clear error + non-zero exit on a missing file, an alias absent from the manifest, or a verify failure. |
 | `lotics app agent set <alias>` | Push the edited `src/agents/<alias>.md` instructions back through `set_app_agent` — the agent mirror of `app workflow set`, and the deploy-free authoring path for `apps.agents`. Reads the prose from disk (the `<!-- lotics: … -->` header stripped) and the typed fields (`inputs`/`outputs`/`tool_names`/`model_id`/`effort_level`/`knowledge_doc_ids`/`query_aliases`/`workflow_aliases`) from `package.json#lotics.agents.<alias>`, then sends them as ONE declaration. That assembly is the point: **`set_app_agent` REPLACES the declaration rather than patching it**, so a hand-built payload that sets one field silently drops the instructions, the output schema and the model pin — a silent, unrecoverable edit against a live prompt. Clear error + non-zero exit on a missing file, an alias absent from the manifest, or a file that is empty once the header is stripped (refusing to push an empty prompt). `app pull` writes the file; edit, then `set`. |
-| `lotics app query set <alias>` | Push `package.json#lotics.queries.<alias>` (`{ ast, params? }`) to `apps.queries` through `set_app_query` — the deploy-free inner loop for named queries, the mirror of `app workflow set`. The **server** validates it exactly as a deploy does (alias identifier, workspace-only tables, resolvable fields, declared params). Note: `apps.queries` is manifest-authoritative, so the next `lotics app deploy` re-syncs the whole map from the manifest — keep the declaration in the manifest to survive. Clear error + non-zero exit on an alias absent from the manifest or a validation failure. |
+| `lotics app query set <alias>` \| `--all` | Push `package.json#lotics.queries` (`{ ast, params? }` per alias) to `apps.queries` through `set_app_query` — **the only author of a query binding**, the mirror of `app workflow set`. A deploy ships code and binds nothing. The **server** validates each one exactly as it always did (alias identifier, workspace-only tables, resolvable fields, declared params). `--all` pushes every declared alias, alias-sorted, stopping at the first failure and naming what already landed. Clear error + non-zero exit on an alias absent from the manifest or a validation failure. |
 | `lotics app agent run <app_id> <alias> ['<json>'\|@file\|stdin]` | Run a bound app agent end-to-end (GAP-87). A run needs no deployed UI bundle — just the app row + the bound agent declaration + member auth — so the **`app_id` is explicit** (not read from a local manifest). Inputs ingest exactly like `lotics run` (inline JSON / `@file` / stdin; empty = `{}`). Opens the run's SSE (`appAgentRunStream`), streams `text-delta` prose to **stderr** as live progress, then reports from the **settled run RECORD** (`listAgentRuns`, polled to a terminal status — the client stream can close a beat before the run settles, or drop while it runs on server-side): default prints the run's structured `output` (JSON) or final text to **stdout** + a status line to stderr; `--json` prints the full run summary to stdout. Selects THIS run by the `x-app-agent-run-id` header (ordering-independent). Exits 0 **only** when the settled status is `completed`; otherwise non-zero with the run's error surfaced. A settled run that never appears fails loudly (never a silent success). A fresh `session_id` is minted per run (self-contained); `--session <id>` continues an existing thread (prior runs become the agent's context). |
 | `lotics app workflow pull` | Rewrite every `src/workflows/<alias>.ts` from the server (faithful body per bound alias via `get_app_workflow`) **+ its `.lotics/workflows/<alias>.globals.d.ts`** (via `getAppWorkflowDts`, so the body is locally typecheckable via `lotics app workflow check`) without a full `app pull` (no source archive, no npm install). A legacy alias with no rendered source warns and is skipped; a dts-fetch failure is non-fatal (body still written with the fallback wrapper, typecheck degraded). Also idempotently patches the main `tsconfig.json` `exclude` to cover `src/workflows` + `.lotics/workflows` so a pre-existing app's `npm run typecheck` never loads the bodies or the colliding per-alias globals. |
 | `lotics app workflow check [alias]` | Check the editable workflow bodies locally, no auth / no network, in the **server's own order** — parse, then type-check. **Parse** runs `parseWorkflowJs` from `@lotics/shared` (the SAME module `verifyWorkflow` calls, never a second implementation — that is what let the two diverge once) over the stripped body `set` would upload, with `toolNames: undefined` (the CLI ships no tool registry, so tool-name resolution stays a server check while every shape/scope rule runs here). A body the subset rejects reports **that error alone** and skips the compiler — it never reaches the server's compiler either, so tsc's opinion of it is noise. **Type-check** then builds an **isolated** `ts.Program` per alias from exactly that alias's `{body, globals}` pair — mirroring the server, which verifies one body at a time — so the per-alias ambient `trigger` never collides and `trigger.app_workflow.inputs` is checked against the right alias (GAP-59). All aliases run in ONE node process (N programs, not N `tsc` spawns), with the SAME compile options the server uses at set-time verify (lib `es2022` with no DOM, target ES2022, strict, NodeNext, `types:[]`, skipLibCheck) and the app's OWN `typescript` (resolved from its `node_modules`, never bundled into the CLI). What the compiler sees is the **checked source**, not the file: `rewriteAccumulatorAppends` from `@lotics/shared` — the SAME transform the server applies before its set-time compile — is applied in memory, so a pulled body's canonical `out = concat(out, [item])` accumulator checks green here exactly as it saves there (compiling the raw text went red on it), and the body on disk is never rewritten. Reports `<file>:<line>:<col> - <TS####\|subset>` at the **physical** line in `src/workflows/<alias>.ts`, so an editor jump lands on the offending code (these are deliberately NOT `set`'s body-relative numbers — `set` prints no file path, so there is no format to agree with); exits non-zero if any alias fails. Green is honest but not total: `set` additionally resolves names, lints and structurally validates against the live workspace — passes that need its tables and tool schemas, so they cannot run offline, and the success line says so. A bound alias with no body file yet warns + skips; a body with no globals errors (run a pull). |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.100.2",
+  "version": "0.101.1",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {