@lotics/cli 0.157.0 → 0.162.0

package/dist/src/cli.js

@@ -26822,12 +26822,12 @@ var require_tokens = __commonJS({
       });
     }
     exports2.assignCategoriesMapProp = assignCategoriesMapProp;
-    function singleAssignCategoriesToksMap(path13, nextNode) {
-      utils_1.forEach(path13, function(pathNode) {
+    function singleAssignCategoriesToksMap(path14, nextNode) {
+      utils_1.forEach(path14, function(pathNode) {
         nextNode.categoryMatchesMap[pathNode.tokenTypeIdx] = true;
       });
       utils_1.forEach(nextNode.CATEGORIES, function(nextCategory) {
-        var newPath = path13.concat(nextNode);
+        var newPath = path14.concat(nextNode);
         if (!utils_1.contains(newPath, nextCategory)) {
           singleAssignCategoriesToksMap(newPath, nextCategory);
         }
@@ -28590,10 +28590,10 @@ var require_interpreter = __commonJS({
       /** @class */
       (function(_super) {
         __extends(AbstractNextPossibleTokensWalker2, _super);
-        function AbstractNextPossibleTokensWalker2(topProd, path13) {
+        function AbstractNextPossibleTokensWalker2(topProd, path14) {
           var _this = _super.call(this) || this;
           _this.topProd = topProd;
-          _this.path = path13;
+          _this.path = path14;
           _this.possibleTokTypes = [];
           _this.nextProductionName = "";
           _this.nextProductionOccurrence = 0;
@@ -28647,9 +28647,9 @@ var require_interpreter = __commonJS({
       /** @class */
       (function(_super) {
         __extends(NextAfterTokenWalker2, _super);
-        function NextAfterTokenWalker2(topProd, path13) {
-          var _this = _super.call(this, topProd, path13) || this;
-          _this.path = path13;
+        function NextAfterTokenWalker2(topProd, path14) {
+          var _this = _super.call(this, topProd, path14) || this;
+          _this.path = path14;
           _this.nextTerminalName = "";
           _this.nextTerminalOccurrence = 0;
           _this.nextTerminalName = _this.path.lastTok.name;
@@ -29346,10 +29346,10 @@ var require_lookahead = __commonJS({
       }
       return result;
     }
-    function pathToHashKeys(path13) {
+    function pathToHashKeys(path14) {
       var keys3 = [""];
-      for (var i2 = 0; i2 < path13.length; i2++) {
-        var tokType = path13[i2];
+      for (var i2 = 0; i2 < path14.length; i2++) {
+        var tokType = path14[i2];
         var longerKeys = [];
         for (var j = 0; j < keys3.length; j++) {
           var currShorterKey = keys3[j];
@@ -29661,9 +29661,9 @@ var require_checks = __commonJS({
       return errors2;
     }
     exports2.validateRuleIsOverridden = validateRuleIsOverridden;
-    function validateNoLeftRecursion(topRule, currRule, errMsgProvider, path13) {
-      if (path13 === void 0) {
-        path13 = [];
+    function validateNoLeftRecursion(topRule, currRule, errMsgProvider, path14) {
+      if (path14 === void 0) {
+        path14 = [];
       }
       var errors2 = [];
       var nextNonTerminals = getFirstNoneTerminal(currRule.definition);
@@ -29676,15 +29676,15 @@ var require_checks = __commonJS({
           errors2.push({
             message: errMsgProvider.buildLeftRecursionError({
               topLevelRule: topRule,
-              leftRecursionPath: path13
+              leftRecursionPath: path14
             }),
             type: parser_1.ParserDefinitionErrorType.LEFT_RECURSION,
             ruleName
           });
         }
-        var validNextSteps = utils2.difference(nextNonTerminals, path13.concat([topRule]));
+        var validNextSteps = utils2.difference(nextNonTerminals, path14.concat([topRule]));
         var errorsFromNextSteps = utils2.map(validNextSteps, function(currRefRule) {
-          var newPath = utils2.cloneArr(path13);
+          var newPath = utils2.cloneArr(path14);
           newPath.push(currRefRule);
           return validateNoLeftRecursion(topRule, currRefRule, errMsgProvider, newPath);
         });
@@ -37293,8 +37293,8 @@ var require_utils4 = __commonJS({
       var result = transform2[inputType][outputType](input);
       return result;
     };
-    exports2.resolve = function(path13) {
-      var parts = path13.split("/");
+    exports2.resolve = function(path14) {
+      var parts = path14.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -43147,18 +43147,18 @@ var require_object = __commonJS({
       var object2 = new ZipObject(name2, zipObjectContent, o);
       this.files[name2] = object2;
     };
-    var parentFolder = function(path13) {
-      if (path13.slice(-1) === "/") {
-        path13 = path13.substring(0, path13.length - 1);
+    var parentFolder = function(path14) {
+      if (path14.slice(-1) === "/") {
+        path14 = path14.substring(0, path14.length - 1);
       }
-      var lastSlash = path13.lastIndexOf("/");
-      return lastSlash > 0 ? path13.substring(0, lastSlash) : "";
+      var lastSlash = path14.lastIndexOf("/");
+      return lastSlash > 0 ? path14.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path13) {
-      if (path13.slice(-1) !== "/") {
-        path13 += "/";
+    var forceTrailingSlash = function(path14) {
+      if (path14.slice(-1) !== "/") {
+        path14 += "/";
       }
-      return path13;
+      return path14;
     };
     var folderAdd = function(name2, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults2.createFolders;
@@ -44160,9 +44160,9 @@ var require_lib4 = __commonJS({
 // src/cli.ts
 import dns from "node:dns";
 import net2 from "node:net";
-import fs13 from "node:fs";
+import fs14 from "node:fs";
 import os4 from "node:os";
-import path12 from "node:path";
+import path13 from "node:path";
 import readline from "node:readline";
 
 // ../shared/src/transport_error.ts
@@ -44356,8 +44356,8 @@ var LoticsClient = class {
     }
     return headers;
   }
-  async request(method, path13, body) {
-    const url2 = `${this.baseUrl}${path13}`;
+  async request(method, path14, body) {
+    const url2 = `${this.baseUrl}${path14}`;
     const headers = this.buildHeaders();
     const init = { method, headers };
     if (body !== void 0) {
@@ -44400,8 +44400,8 @@ var LoticsClient = class {
   async deleteWorkspace(id) {
     return this.request("DELETE", `/v1/workspaces/${encodeURIComponent(id)}`);
   }
-  async login() {
-    return this.request("POST", "/v1/cli/login");
+  async login(body) {
+    return this.request("POST", "/v1/cli/login", body ?? {});
   }
   async listTools() {
     return this.request("GET", "/v1/tools");
@@ -44468,90 +44468,6 @@ var LoticsClient = class {
   async createApp(body) {
     return this.request("POST", "/v1/apps", body);
   }
-  /**
-   * Install a package version into the current workspace — ONE endpoint,
-   * kind-branched into a discriminated response (`kind`). An `app` package
-   * scaffolds the data model / deploys / materializes and returns the installation
-   * app (+ advisory knowledge warnings); a `content` package installs only its
-   * doc corpus and returns the installation row. `bind_to` (content only)
-   * resolves a name collision by adopting an existing same-named doc as
-   * package-managed. `version` omitted installs the latest published version.
-   */
-  async installPackage(package_id, body) {
-    return this.request(
-      "POST",
-      `/v1/packages/${encodeURIComponent(package_id)}/installations`,
-      body
-    );
-  }
-  /**
-   * Uninstall a standalone content package — delete the installation row. By
-   * default the package-bound docs are ARCHIVED; `keep_content` retains them as
-   * ordinary workspace docs. Admin-only. Backs `opctl uninstall`.
-   */
-  async uninstallContentPackage(installation_id, opts = {}) {
-    const qs = opts.keep_content ? "?keep_content=true" : "";
-    return this.request(
-      "DELETE",
-      `/v1/content-installations/${encodeURIComponent(installation_id)}${qs}`
-    );
-  }
-  /**
-   * Preview upgrading a standalone content installation — the knowledge namespace's
-   * per-alias `entries` (added/changed/removed/drifted + a `modified` flag) plus the
-   * consent-requiring `templates` (a template the target changed whose live content
-   * was locally edited; a clean one auto-updates and is absent). No writes.
-   * Admin-only.
-   */
-  async previewContentInstallationUpgrade(installation_id, opts = {}) {
-    const qs = opts.version !== void 0 ? `?version=${opts.version}` : "";
-    return this.request(
-      "GET",
-      `/v1/content-installations/${encodeURIComponent(installation_id)}/upgrade${qs}`
-    );
-  }
-  /**
-   * Apply a standalone content upgrade — propagate the target version's content per
-   * the resolutions (`knowledge`: a modified change/removal or drift needs consent;
-   * `templates`: a locally-edited changed template takes revert|keep), then advance
-   * the pin + binding. Returns the updated installation row. Admin-only.
-   */
-  async applyContentInstallationUpgrade(installation_id, body) {
-    return this.request(
-      "POST",
-      `/v1/content-installations/${encodeURIComponent(installation_id)}/upgrade`,
-      body
-    );
-  }
-  /**
-   * List a workspace's package-managed knowledge installations, each folded with
-   * registry status (name, kind, official badge, latest version, update-available).
-   * Member-accessible (workspace-scoped); backs the settings "Managed by" badge.
-   */
-  async listContentInstallations(workspace_id) {
-    return this.request(
-      "GET",
-      `/v1/workspaces/${encodeURIComponent(workspace_id)}/content-installations`
-    );
-  }
-  /**
-   * Uninstall a package installation (backs `opctl uninstall`). Does
-   * everything DELETE does plus archives the installation's lifecycle
-   * artifacts; with `archive_tables` it also archives the scaffolded entity
-   * tables — refused server-side unless this installation created them
-   * (provenance) and nothing else references them. Admin-only.
-   */
-  async uninstallAppPackage(app_id, body) {
-    return this.request("POST", `/v1/apps/${encodeURIComponent(app_id)}/uninstall`, body);
-  }
-  /**
-   * Partial-merge a package installation's config (backs `opctl package config
-   * --set`). Only the provided keys change; validated against the installed
-   * contract. Returns the full effective config. Admin-only.
-   */
-  async updateAppPackageConfig(app_id, body) {
-    return this.request("PATCH", `/v1/apps/${encodeURIComponent(app_id)}/package-config`, body);
-  }
   /**
    * Retire (or `undo` un-retire) a registry package (backs `lotics app
    * unpublish` — the endpoint/audit action keep the `retire` name to avoid API
@@ -44562,83 +44478,75 @@ var LoticsClient = class {
   async retirePackage(package_id, body) {
     return this.request("POST", `/v1/packages/${encodeURIComponent(package_id)}/retire`, body);
   }
+  // --- Packages (registry reads + installations) ---
+  // Authoring is server-side: apps via `POST /v1/apps/{id}/package-publish|release`,
+  // content packages via the `publish_content`/`release_content` tools. There is no
+  // client-side create-package / upload-bundle path.
   /**
-   * Eject an installation from its package — re-deploy the pinned version's
-   * source as a workspace-owned app version, then sever the package link
-   * (clears `package_id`/`package_version`, stamps `ejected_at`). One-way: the
-   * app becomes a normal bespoke app and can no longer be upgraded. Returns the
-   * resulting app.
+   * The starters this organization can copy — Lotics-reviewed ones plus its own,
+   * never a catalogue of everything published. The server returns exactly what
+   * instantiate would accept, so the list cannot offer a refusal. Admin-only.
    */
-  async ejectPackage(app_id) {
-    return this.request("POST", `/v1/apps/${encodeURIComponent(app_id)}/eject`);
+  async listStarters() {
+    return this.request("GET", "/v1/starters");
   }
   /**
-   * Fleet upgrade — bring every installation of a package across the CALLER'S
-   * org to the target version (latest when omitted) in one call. Hands-off
-   * applies only where the preview is clean; installations with breaking/
-   * drift/modified-core findings are skipped and reported for the normal
-   * per-installation consent flow. Backs `opctl upgrade <package_id>` (fleet).
-   * Admin-only; org-scoped (no workspace header needed).
-   */
-  /**
-   * Yank / unyank a published package version — refuses NEW installs/upgrades/
-   * adopts targeting it; pinned installations keep running. Owner-org
-   * admin-only. Backs `opctl package yank`.
+   * Copy a starter into the current workspace.
+   *
+   * Server-side this scaffolds the schema, creates the templates, docs and
+   * sample records, creates a BESPOKE app and materializes onto it — then stops.
+   * It deploys nothing: a starter ships source only, and the source has to be
+   * built where codegen can bake THIS workspace's field ids. `bundle_url` is a
+   * presigned GET of that source, and finishing the job is the caller's half.
+   * Admin-only.
    */
-  async yankPackageVersion(package_id, version2, yanked) {
+  async instantiateStarter(starter_id, body) {
     return this.request(
       "POST",
-      `/v1/packages/${encodeURIComponent(package_id)}/versions/${version2}/yank`,
-      { yanked }
-    );
-  }
-  async fleetUpgradePackage(package_id, body) {
-    return this.request(
-      "POST",
-      `/v1/packages/${encodeURIComponent(package_id)}/fleet-upgrade`,
+      `/v1/starters/${encodeURIComponent(starter_id)}/instantiate`,
       body
     );
   }
-  // --- Packages (registry reads + installations) ---
-  // Authoring is server-side: apps via `POST /v1/apps/{id}/package-publish|release`,
-  // content packages via the `publish_content`/`release_content` tools. There is no
-  // client-side create-package / upload-bundle path.
   /**
-   * Fetch a registry app package's metadata (incl. `kind`, `latest_version` and
-   * the Lotics-backed `is_official` trust badge). Admin-only; cross-tenant by id.
+   * Which starter this app is the origin of. 404 when it has published none.
+   *
+   * The app row carries no pin, so this is the only app→starter direction there
+   * is — provenance lives on the published version. Admin-only.
    */
-  async getPackage(package_id) {
-    return this.request("GET", `/v1/packages/${encodeURIComponent(package_id)}`);
-  }
-  /** Version history newest-first (no contract payloads) — backs `opctl package show`. Admin-only. */
-  async listPackageVersions(package_id) {
-    return this.request("GET", `/v1/packages/${encodeURIComponent(package_id)}/versions`);
+  async getAppOriginStarter(app_id) {
+    return this.request("GET", `/v1/apps/${encodeURIComponent(app_id)}/origin-starter`);
   }
   /**
-   * Upgrade a package installation to a newer published version — extends the
-   * binding additively, re-materializes the target version's
-   * queries/workflows/agents (preserving workspace overlay), prunes dropped
-   * package artifacts, and bumps the pin. `version` omitted upgrades to the
-   * latest. Returns the resulting app. Admin-only.
+   * Capture live records from this workspace as a starter's sample data.
+   *
+   * The alias-keyed shape is produced SERVER-side, because the contract alias
+   * space is minted by extract and exists nowhere a project can read it. Pure
+   * read — the caller writes the returned files into the project and reviews
+   * them, which matters: these rows are copied verbatim into every workspace
+   * that takes the starter. Admin-only.
    */
-  async upgradePackage(app_id, body) {
+  async captureStarterFixtures(app_id, opts = {}) {
+    const params = new URLSearchParams();
+    if (opts.entities !== void 0 && opts.entities.length > 0) {
+      params.set("entities", opts.entities.join(","));
+    }
+    if (opts.limit !== void 0) params.set("limit", String(opts.limit));
+    const qs = params.toString();
     return this.request(
-      "POST",
-      `/v1/apps/${encodeURIComponent(app_id)}/package-upgrade`,
-      body
+      "GET",
+      `/v1/apps/${encodeURIComponent(app_id)}/fixtures-capture${qs ? `?${qs}` : ""}`
     );
   }
   /**
-   * Preview a package upgrade — the additive plan, informational removals,
-   * breaking contract changes, the binding drift report, and the modified-core
-   * report — with no writes. Admin-only.
+   * Fetch a registry starter's metadata (`latest_version` and the Lotics-backed
+   * `is_official` trust badge). Admin-only; cross-tenant by id.
    */
-  async previewPackageUpgrade(app_id, opts = {}) {
-    const query = opts.version !== void 0 ? `?version=${opts.version}` : "";
-    return this.request(
-      "GET",
-      `/v1/apps/${encodeURIComponent(app_id)}/package-upgrade${query}`
-    );
+  async getPackage(package_id) {
+    return this.request("GET", `/v1/packages/${encodeURIComponent(package_id)}`);
+  }
+  /** Version history newest-first (no contract payloads) — backs `opctl package show`. Admin-only. */
+  async listPackageVersions(package_id) {
+    return this.request("GET", `/v1/packages/${encodeURIComponent(package_id)}/versions`);
   }
   /**
    * Workspace-wide dangling-reference sweep — active app/workflow artifacts
@@ -44648,14 +44556,6 @@ var LoticsClient = class {
   async getWorkspaceDanglingReferences() {
     return this.request("GET", "/v1/workspaces/dangling-references");
   }
-  /**
-   * Health check for a package installation — version pin vs. registry latest,
-   * binding drift, and locally modified core artifacts. Read-only; backs
-   * `opctl package doctor`. Admin-only.
-   */
-  async getPackageHealth(app_id) {
-    return this.request("GET", `/v1/apps/${encodeURIComponent(app_id)}/package-health`);
-  }
   /**
    * Preview a release — the dry run behind `opctl app release`. Runs the
    * binding-aware extract of the origin (aliases stable through the app's current
@@ -44671,9 +44571,6 @@ var LoticsClient = class {
     if (opts.knowledge !== void 0 && opts.knowledge.length > 0) {
       params.set("knowledge", JSON.stringify(opts.knowledge));
     }
-    if (opts.config !== void 0) {
-      params.set("config", JSON.stringify(opts.config));
-    }
     const query = params.toString();
     return this.request(
       "GET",
@@ -44706,9 +44603,6 @@ var LoticsClient = class {
     if (opts.knowledge !== void 0 && opts.knowledge.length > 0) {
       params.set("knowledge", JSON.stringify(opts.knowledge));
     }
-    if (opts.config !== void 0 && opts.config.length > 0) {
-      params.set("config", JSON.stringify(opts.config));
-    }
     if (opts.renames !== void 0 && opts.renames.length > 0) {
       params.set("renames", JSON.stringify(opts.renames));
     }
@@ -44812,10 +44706,6 @@ var LoticsClient = class {
     const qs = group_id ? `?group_id=${encodeURIComponent(group_id)}` : "";
     return this.request("GET", `/v1/apps/${encodeURIComponent(app_id)}/members${qs}`);
   }
-  /** A package installation's alias→id maps (fields/options/roles) — the app's runtime F/OPT resolution. */
-  async appBinding(app_id) {
-    return this.request("GET", `/v1/apps/${encodeURIComponent(app_id)}/binding`);
-  }
   /**
    * Resolve the full option set (key, label, color) of a named query's select
    * columns — the picker companion to `appQuery`. Mirrors
@@ -45955,12 +45845,23 @@ var COMMANDS = [
     ]
   },
   {
-    verbs: ["install"],
-    help: ["  lotics install <package_id>          Materialize a published package into this workspace"]
-  },
-  {
-    verbs: ["upgrade"],
-    help: ["  lotics upgrade                       Take the installed package's next version"]
+    verbs: ["starter"],
+    help: [
+      "  lotics starter list                  Starters you can copy into this workspace",
+      "  lotics starter show <starter_id>     What one carries: tables, docs, templates, sample data",
+      "  lotics starter init <starter_id> [path]",
+      "                                       Copy it in \u2014 schema, templates, knowledge docs,",
+      "                                       sample records and an editable app project. A COPY:",
+      "                                       everything it creates is yours outright, with no",
+      "                                       link back and nothing to upgrade. Builds and deploys",
+      "                                       locally, so it needs node + a few minutes.",
+      "                                       --no-sample-data skips the sample records;",
+      "                                       --adopt allows a workspace that is not empty",
+      "  lotics starter fixtures capture --entity <alias> --limit <n>",
+      "                                       (authoring) Write reviewable sample records into the",
+      "                                       app project. READ WHAT IT WROTE before committing \u2014",
+      "                                       these rows ship to everyone who copies the starter"
+    ]
   },
   {
     verbs: ["docs"],
@@ -46214,36 +46115,10 @@ import { tmpdir } from "node:os";
 // src/starter_template.ts
 var STARTER_REACT_NATIVE_VERSION = "0.85.3";
 var VITEST_SETUP_FILENAME = "vitest.setup.ts";
-var VITEST_SETUP_CONTENT = `import { vi } from "vitest";
-
-// A package-linked app's generated .lotics/app_fields.ts resolves F/OPT/ROLE
-// from the installation's live binding at module load (\`await getAppBinding()\`,
-// a network call over the host bridge). Under vitest/jsdom there is no host, so
-// that call throws while a test is still COLLECTING \u2014 failing every test that
-// imports the app graph, even pure logic tests. getAppBinding is the network
-// boundary; mock it (and only it) so the module graph evaluates in tests.
-//
-// The stub returns an ECHO binding: any alias resolves to a synthetic,
-// self-identifying id (fld:test:<entity>.<field>, opt:test:\u2026, grp:test:\u2026). Echo,
-// not empty maps \u2014 app_fields's bound() throws on a missing key, so empty maps
-// would just re-break collection; and a ':test:' id can never be confused with a
-// real fld_\u2026/opt_\u2026/grp_\u2026 id, so a test that depends on a concrete binding fails
-// loud instead of silently reading undefined.
-vi.mock("@lotics/app-sdk", async (importOriginal) => {
-  const actual = await importOriginal<typeof import("@lotics/app-sdk")>();
-  const echoIds = (prefix: string): Record<string, string> =>
-    new Proxy(
-      {},
-      {
-        get: (_target, key) => (typeof key === "string" ? \`\${prefix}:test:\${key}\` : undefined),
-      },
-    ) as Record<string, string>;
-  return {
-    ...actual,
-    getAppBinding: () =>
-      Promise.resolve({ fields: echoIds("fld"), options: echoIds("opt"), roles: echoIds("grp") }),
-  };
-});
+var VITEST_SETUP_CONTENT = `// Runs before every test file (wired by vite.config.ts \`test.setupFiles\`).
+// Empty by default \u2014 put global test setup here: custom matchers, a fetch stub,
+// timezone pinning, anything your suite needs before it collects.
+export {};
 `;
 function buildStarterTemplate(args) {
   const uiVersion = args.ui_version;
@@ -46472,7 +46347,7 @@ export default defineConfig({
   },
   test: {
     environment: "jsdom",
-    // Stub @lotics/app-sdk's getAppBinding (the network boundary) before any test
+    // Global test setup, run before every test file (empty until an author fills it)
     // collects. A package-linked app's generated .lotics/app_fields.ts awaits it
     // at module load; without the stub that network call throws under jsdom and
     // every test that imports the app graph fails to collect. See vitest.setup.ts.
@@ -46987,7 +46862,6 @@ var SUPPORTED_OPS = /* @__PURE__ */ new Set([
   "workflow",
   "members",
   "context",
-  "binding",
   "upload_url",
   "upload_complete",
   "agentRuns",
@@ -47008,11 +46882,10 @@ async function dispatchRpc(client, body, opts) {
   }
   switch (body.op) {
     case "context": {
-      const [who, app] = await Promise.all([client.whoami(), client.getApp(body.app_id)]);
+      const who = await client.whoami();
       return {
         member_id: who.member_id,
-        comments_enabled: opts?.commentsEnabled ?? false,
-        config: app.config ?? {}
+        comments_enabled: opts?.commentsEnabled ?? false
       };
     }
     case "query": {
@@ -47048,8 +46921,6 @@ async function dispatchRpc(client, body, opts) {
       const p = body.payload;
       return client.appMembers(body.app_id, p?.group);
     }
-    case "binding":
-      return client.appBinding(body.app_id);
     case "upload_url": {
       const p = body.payload;
       if (!p || typeof p.filename !== "string" || typeof p.mime_type !== "string" || typeof p.file_size !== "number") {
@@ -48490,123 +48361,6 @@ export type AppOptions = typeof OPT;
 `;
 }
 
-// src/generate_package_fields.ts
-var HEADER2 = `// Auto-generated by 'lotics app codegen' and 'lotics app pull' (linked/published app).
-// DO NOT EDIT \u2014 regenerated from the installation's live binding.
-//
-// A package installation resolves F/OPT/ROLE at MODULE LOAD from its binding
-// (contract alias \u2192 THIS workspace's concrete id) via the SDK's \`binding\` RPC.
-// Top-level await: the module graph waits for the binding before any importer
-// evaluates, so every entry is a plain string.
-import { getAppBinding } from "@lotics/app-sdk";
-
-const binding = await getAppBinding();
-
-function bound(map: Record<string, string>, key: string, kind: string): string {
-  const id = map[key];
-  if (id === undefined) {
-    throw new Error(
-      \`app_fields: \${kind} "\${key}" is not in this installation's binding \u2014 \` +
-        \`the generated app_fields.ts is stale relative to the installed contract version.\`,
-    );
-  }
-  return id;
-}
-`;
-function parseBinding(binding) {
-  const entities = [];
-  const entityByAlias = /* @__PURE__ */ new Map();
-  const fieldByKey = /* @__PURE__ */ new Map();
-  for (const key of Object.keys(binding.fields)) {
-    const dot = key.indexOf(".");
-    if (dot <= 0 || dot >= key.length - 1) continue;
-    const entityAlias = key.slice(0, dot);
-    const fieldAlias = key.slice(dot + 1);
-    let entity = entityByAlias.get(entityAlias);
-    if (entity === void 0) {
-      entity = { alias: entityAlias, fields: [] };
-      entityByAlias.set(entityAlias, entity);
-      entities.push(entity);
-    }
-    const field = { alias: fieldAlias, key, options: [] };
-    entity.fields.push(field);
-    fieldByKey.set(key, field);
-  }
-  for (const key of Object.keys(binding.options)) {
-    const colon = key.indexOf(":");
-    if (colon <= 0 || colon >= key.length - 1) continue;
-    const fieldKey = key.slice(0, colon);
-    const optionAlias = key.slice(colon + 1);
-    const field = fieldByKey.get(fieldKey);
-    if (field === void 0) continue;
-    field.options.push({ alias: optionAlias, key });
-  }
-  return { entities, roles: Object.keys(binding.roles) };
-}
-function emitFieldMap2(entities) {
-  if (entities.length === 0) return `export const F = {} as const;`;
-  const blocks = entities.map((entity) => {
-    const lines = entity.fields.map(
-      (field) => `    ${propKey(field.alias)}: bound(binding.fields, ${JSON.stringify(field.key)}, "field"),`
-    );
-    return `  ${propKey(entity.alias.toUpperCase())}: {
-${lines.join("\n")}
-  },`;
-  });
-  return `export const F = {
-${blocks.join("\n")}
-} as const;`;
-}
-function emitOptionMap2(entities) {
-  const entityBlocks = [];
-  for (const entity of entities) {
-    const fieldBlocks = [];
-    for (const field of entity.fields) {
-      if (field.options.length === 0) continue;
-      const lines = field.options.map(
-        (option) => `      ${propKey(option.alias)}: bound(binding.options, ${JSON.stringify(option.key)}, "option"),`
-      );
-      fieldBlocks.push(`    ${propKey(field.alias)}: {
-${lines.join("\n")}
-    },`);
-    }
-    if (fieldBlocks.length === 0) continue;
-    entityBlocks.push(`  ${propKey(entity.alias.toUpperCase())}: {
-${fieldBlocks.join("\n")}
-  },`);
-  }
-  if (entityBlocks.length === 0) return `export const OPT = {} as const;`;
-  return `export const OPT = {
-${entityBlocks.join("\n")}
-} as const;`;
-}
-function emitRoleMap(roles) {
-  if (roles.length === 0) return `export const ROLE = {} as const;`;
-  const lines = roles.map(
-    (role) => `  ${propKey(role)}: bound(binding.roles, ${JSON.stringify(role)}, "role"),`
-  );
-  return `export const ROLE = {
-${lines.join("\n")}
-} as const;`;
-}
-function generatePackageAppFields(binding) {
-  const { entities, roles } = parseBinding(binding);
-  return `${HEADER2}
-${emitFieldMap2(entities)}
-
-${emitOptionMap2(entities)}
-
-${emitRoleMap(roles)}
-
-/** Field-id alias map: \`F[<ENTITY>][<field>]\` is this installation's \`fld_\u2026\` id. */
-export type AppFields = typeof F;
-/** Select-option alias map: \`OPT[<ENTITY>][<field>][<option>]\` is this installation's \`opt_\u2026\` id. */
-export type AppOptions = typeof OPT;
-/** Role alias map: \`ROLE[<role>]\` is this installation's \`grp_\u2026\` id. */
-export type AppRoles = typeof ROLE;
-`;
-}
-
 // src/app_workflow_check.ts
 import fs7 from "node:fs";
 import path9 from "node:path";
@@ -49381,10 +49135,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path13) {
-  if (!path13)
+function getElementAtPath(obj, path14) {
+  if (!path14)
     return obj;
-  return path13.reduce((acc, key) => acc?.[key], obj);
+  return path14.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys3 = Object.keys(promisesObj);
@@ -49793,11 +49547,11 @@ function explicitlyAborted(x2, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path13, issues) {
+function prefixIssues(path14, issues) {
   return issues.map((iss) => {
     var _a4;
     (_a4 = iss).path ?? (_a4.path = []);
-    iss.path.unshift(path13);
+    iss.path.unshift(path14);
     return iss;
   });
 }
@@ -49944,16 +49698,16 @@ function flattenError(error52, mapper = (issue2) => issue2.message) {
 }
 function formatError(error52, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error53, path13 = []) => {
+  const processError = (error53, path14 = []) => {
     for (const issue2 of error53.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path14, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path14, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -49980,17 +49734,17 @@ function formatError(error52, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error52, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error53, path13 = []) => {
+  const processError = (error53, path14 = []) => {
     var _a4, _b2;
     for (const issue2 of error53.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path13, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path14, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path13, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path14, ...issue2.path]);
       } else {
-        const fullpath = [...path13, ...issue2.path];
+        const fullpath = [...path14, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -50022,8 +49776,8 @@ function treeifyError(error52, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path13 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path13) {
+  const path14 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path14) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -62715,13 +62469,13 @@ function resolveRef(ref2, ctx) {
   if (!ref2.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path13 = ref2.slice(1).split("/").filter(Boolean);
-  if (path13.length === 0) {
+  const path14 = ref2.slice(1).split("/").filter(Boolean);
+  if (path14.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path13[0] === defsKey) {
-    const key = path13[1];
+  if (path14[0] === defsKey) {
+    const key = path14[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref2}`);
     }
@@ -66073,15 +65827,21 @@ var appSchema = zod_default.object({
     "Alias \u2192 agent declaration map. Each alias binds a streaming tool-loop agent the app runs via `useAgentRun(alias)` (an SSE stream), with declared tools, model, and typed inputs/outputs. Synced from the app's `lotics.agents` manifest on every deploy. The agent runs under the app's IAM principal; runs persist a flat history per session."
   ),
   theme: appThemeSchema.nullable().optional().describe("Theme settings for the app"),
-  // App-package installation linkage (see docs/packages.md). Null on a
-  // bespoke (non-package) app or after eject — such apps behave exactly as before
-  // these columns existed. Declared inline (not imported from packages.ts) to
-  // avoid a circular import; the shapes mirror Binding / AppInstallationConfig.
-  package_id: zod_default.string().nullable().optional().describe("App-package registry id this app was installed from; null for a bespoke app or after eject."),
-  package_version: zod_default.number().int().nullable().optional().describe("Installed package version (the upgrade pin); null for a bespoke app or after eject."),
-  binding: zod_default.record(zod_default.string(), zod_default.record(zod_default.string(), zod_default.string())).nullable().optional().describe("App-package install join: per-namespace (entities/fields/options/templates/roles/workflows/knowledge) alias \u2192 concrete-id maps. Null for a bespoke app."),
-  config: zod_default.record(zod_default.string(), zod_default.union([zod_default.string(), zod_default.number(), zod_default.boolean()])).nullable().optional().describe("Installation-level customization config values (the customization-ladder first rung). Null for a bespoke app."),
-  ejected_at: zod_default.string().nullable().optional().describe("When the app was ejected from its package (severing upgrades); null if never ejected."),
+  /**
+   * The starter this app is the ORIGIN of, when it is one — list enrichment,
+   * read from the registry rather than stored on the app.
+   *
+   * This is provenance in the only direction that exists under one-way copies:
+   * an app can have PUBLISHED a starter, but an app that was COPIED FROM one
+   * records nothing, because it owns everything it received outright. Null for
+   * every app that has published nothing.
+   */
+  starter_origin: zod_default.object({
+    starter_id: zod_default.string(),
+    /** The highest version published from this app. */
+    version: zod_default.number().int(),
+    is_official: zod_default.boolean()
+  }).nullable().optional(),
   created_at: zod_default.string().describe("Timestamp when app was created"),
   updated_at: zod_default.string().describe("Timestamp of last update")
 });
@@ -67431,9 +67191,9 @@ __export(expression_object_exports, {
   pick: () => pick3,
   values: () => values2
 });
-function getNestedValue(obj, path13) {
+function getNestedValue(obj, path14) {
   if (obj == null) return void 0;
-  const parts = path13.split(".");
+  const parts = path14.split(".");
   let value2 = obj;
   for (const part of parts) {
     if (value2 == null) return void 0;
@@ -67472,11 +67232,11 @@ function entries(obj) {
   }
   return Object.entries(obj);
 }
-function get(obj, path13, defaultValue) {
-  if (typeof path13 !== "string") {
+function get(obj, path14, defaultValue) {
+  if (typeof path14 !== "string") {
     throw new Error("get: path must be a string");
   }
-  const value2 = getNestedValue(obj, path13);
+  const value2 = getNestedValue(obj, path14);
   return value2 !== void 0 ? value2 : defaultValue;
 }
 function pick3(obj, fields) {
@@ -69359,17 +69119,17 @@ function readFromChanges(chain2) {
     if (first3.kind === "bracket-number" || first3.kind === "bracket-expr") {
       fail(first3.node, "changes is keyed by field name, not numeric index.");
     }
-    const path13 = [{ at: "key", key: first3.key }];
+    const path14 = [{ at: "key", key: first3.key }];
     for (const seg of segments.slice(1)) {
       if (seg.kind === "bracket-number") {
-        path13.push({ at: "index", index: seg.index });
+        path14.push({ at: "index", index: seg.index });
       } else if (seg.kind === "bracket-expr") {
-        path13.push({ at: "index", index: seg.expr });
+        path14.push({ at: "index", index: seg.expr });
       } else {
-        path13.push({ at: "key", key: seg.key });
+        path14.push({ at: "key", key: seg.key });
       }
     }
-    return { kind: "read", source: { from: "trigger_changes" }, path: path13 };
+    return { kind: "read", source: { from: "trigger_changes" }, path: path14 };
   });
 }
 var TRIGGER_RECORD_VIEWS = /* @__PURE__ */ new Map([
@@ -69387,17 +69147,17 @@ function readFromTrigger(chain2) {
     return view === "trigger_changes" ? readFromChanges(lowered) : readFromRecord(view, lowered);
   }
   return wrapOptionalGuards(chain2, (segments) => {
-    const path13 = [];
+    const path14 = [];
     for (const seg of segments) {
       if (seg.kind === "bracket-number") {
-        path13.push({ at: "index", index: seg.index });
+        path14.push({ at: "index", index: seg.index });
       } else if (seg.kind === "bracket-expr") {
-        path13.push({ at: "index", index: seg.expr });
+        path14.push({ at: "index", index: seg.expr });
       } else {
-        path13.push({ at: "key", key: seg.key });
+        path14.push({ at: "key", key: seg.key });
       }
     }
-    return { kind: "read", source: { from: "trigger" }, path: path13 };
+    return { kind: "read", source: { from: "trigger" }, path: path14 };
   });
 }
 function readFromRuntime(chain2) {
@@ -69419,17 +69179,17 @@ function readFromRuntime(chain2) {
     const parked = PARKED_RUNTIME_KEYS.get(key);
     if (parked) fail(first3.node, parked, parkedRuntimeKeyConstruct(key));
     const source = { from: "runtime", key };
-    const path13 = [];
+    const path14 = [];
     for (const seg of segments.slice(1)) {
       if (seg.kind === "bracket-number") {
-        path13.push({ at: "index", index: seg.index });
+        path14.push({ at: "index", index: seg.index });
       } else if (seg.kind === "bracket-expr") {
-        path13.push({ at: "index", index: seg.expr });
+        path14.push({ at: "index", index: seg.expr });
       } else {
-        path13.push({ at: "key", key: seg.key });
+        path14.push({ at: "key", key: seg.key });
       }
     }
-    return { kind: "read", source, path: path13 };
+    return { kind: "read", source, path: path14 };
   });
 }
 function readFromForeachItem(chain2) {
@@ -69465,17 +69225,17 @@ function readFromLexical(name2, chain2) {
 }
 function readFromStepOutput(stepId, chain2) {
   return wrapOptionalGuards(chain2, (segments) => {
-    const path13 = [];
+    const path14 = [];
     for (const seg of segments) {
       if (seg.kind === "bracket-number") {
-        path13.push({ at: "index", index: seg.index });
+        path14.push({ at: "index", index: seg.index });
       } else if (seg.kind === "bracket-expr") {
-        path13.push({ at: "index", index: seg.expr });
+        path14.push({ at: "index", index: seg.expr });
       } else {
-        path13.push({ at: "key", key: seg.key });
+        path14.push({ at: "key", key: seg.key });
       }
     }
-    return { kind: "read", source: { from: "step_output", step_id: stepId }, path: path13 };
+    return { kind: "read", source: { from: "step_output", step_id: stepId }, path: path14 };
   });
 }
 function classifyRecordPath(segs) {
@@ -71226,1081 +70986,6 @@ function checkWorkflowBodies(tsApi, aliases) {
   }));
 }
 
-// ../shared/src/schemas/table_fields.ts
-var tableFieldTypeNameSchema = zod_default.enum([
-  "text",
-  "number",
-  "date",
-  "boolean",
-  "select",
-  "select_member",
-  "select_record_link",
-  "files",
-  "formula",
-  "rollup",
-  "lookup",
-  "button",
-  "autonumber"
-]);
-var tableFieldBaseSchema = zod_default.object({
-  key: zod_default.string().describe("Unique field key"),
-  name: zod_default.string().describe("Display name"),
-  description: zod_default.string().describe("Field description"),
-  confirm_before_update: zod_default.boolean().optional().describe("Show confirmation before AI updates")
-});
-var numberFormatSchema = zod_default.enum(["number", "currency", "percentage"]);
-var textFormatSchema = zod_default.enum(["text", "link", "markdown"]);
-var dateFormatSchema = zod_default.enum(["date", "datetime", "date_range", "datetime_range"]);
-var DEFAULT_VALUE_DESC = "Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. null clears it.";
-var textDefaultValueSchema = zod_default.string().nullish().describe(DEFAULT_VALUE_DESC);
-var numberDefaultValueSchema = zod_default.number().nullish().describe(DEFAULT_VALUE_DESC);
-var booleanDefaultValueSchema = zod_default.boolean().nullish().describe(DEFAULT_VALUE_DESC);
-var dateDefaultValueSchema = zod_default.string().nullish().describe(`${DEFAULT_VALUE_DESC} A date string in the field's format.`);
-var selectDefaultValueSchema = zod_default.array(zod_default.string()).nullish().describe(`${DEFAULT_VALUE_DESC} Option key(s) \u2014 one for single-select.`);
-var memberDefaultValueSchema = zod_default.array(zod_default.string()).nullish().describe(`${DEFAULT_VALUE_DESC} Member ID(s) \u2014 one for single-select.`);
-var tableNumberFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("number"),
-  format: numberFormatSchema,
-  currency: zod_default.string().optional().describe("ISO 4217 code"),
-  default_value: numberDefaultValueSchema
-});
-var tableTextFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("text"),
-  unique: zod_default.boolean().optional().describe("Unique values required"),
-  // it's `optional` only for backward compatibility
-  format: textFormatSchema.optional(),
-  default_value: textDefaultValueSchema
-});
-var tableDateFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("date"),
-  format: dateFormatSchema.optional(),
-  timezone: zod_default.string().optional().describe("IANA timezone"),
-  derive_from: zod_default.enum(["created_at", "updated_at"]).optional().describe(
-    "Auto-populate from the row's system timestamp. `created_at` stamps once at insert time; `updated_at` re-stamps on every record edit. Derived fields are read-only \u2014 user-supplied values are silently ignored at write time, matching the formula/rollup/lookup pattern. Replaces the per-table after_create workflow pattern."
-  ),
-  // A derived date is read-only, so derive_from and default_value are mutually
-  // exclusive — enforced in validateFieldDefaultValue.
-  default_value: dateDefaultValueSchema
-});
-var tableBooleanFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("boolean"),
-  default_value: booleanDefaultValueSchema
-});
-var tableSelectFieldOptionSchema = zod_default.object({
-  key: zod_default.string(),
-  name: zod_default.string(),
-  color: optionColorSchema
-});
-var tableSelectFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("select"),
-  options: zod_default.array(tableSelectFieldOptionSchema),
-  multi: zod_default.boolean().optional().describe("Allow multiple selections"),
-  default_value: selectDefaultValueSchema
-});
-var tableSelectMemberFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("select_member"),
-  multi: zod_default.boolean().optional().describe("Allow multiple selections"),
-  default_value: memberDefaultValueSchema
-});
-var recordLinkItemSchema = zod_default.object({
-  id: zod_default.string(),
-  display: zod_default.string()
-});
-var selectRecordLinkValueSchema = zod_default.array(recordLinkItemSchema);
-var tableSelectRecordLinkFieldInputSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("select_record_link"),
-  table_id: zod_default.string().describe("Linked table ID"),
-  display_field_keys: zod_default.array(zod_default.string()).optional().describe(
-    "Field keys of the linked table shown as the link's display text and as the columns in the record picker. If omitted, auto-selects the first text field."
-  ),
-  display_field_widths: zod_default.record(zod_default.string(), zod_default.number().int().positive()).optional().describe(
-    "Per-column widths in pixels for the record picker, keyed by linked-table field key. Missing keys fall back to the default column width."
-  ),
-  sync_both_ways: zod_default.boolean().optional().describe("Enable bidirectional link sync. If the target table has exactly one existing unpaired link field pointing back, pairs with it instead of creating a new field."),
-  paired_field_display_field_keys: zod_default.array(zod_default.string()).optional().describe("Display fields for paired link"),
-  paired_field_name: zod_default.string().optional().describe(
-    "Name for the auto-created paired field on the target table when sync_both_ways=true. If omitted, falls back to the source table's name (auto-uniquified with a numeric suffix on collision). Rejected as a conflict if a field with this name already exists on the target."
-  ),
-  cardinality: zod_default.enum(["one", "many"]).optional().describe(
-    "How many linked records this field can hold. Default 'many' (multi-select). 'one' = single-select; this side holds exactly one link to the partner. Requires sync_both_ways/paired_field_key. Setting 'one' on both paired sides is rejected."
-  )
-});
-var tableSelectRecordLinkFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("select_record_link").describe("Field type for linking to records in another table"),
-  table_id: zod_default.string().describe("ID of the target table that records can be linked to"),
-  display_field_keys: zod_default.array(zod_default.string()).optional().default([]).describe(
-    "Field keys of the linked table shown as the link's display text and as the columns in the record picker. If empty, the picker shows all fields."
-  ),
-  display_field_widths: zod_default.record(zod_default.string(), zod_default.number().int().positive()).optional().describe(
-    "Per-column widths in pixels for the record picker, keyed by linked-table field key. Missing keys fall back to the default column width."
-  ),
-  paired_field_key: zod_default.string().optional().describe(
-    "Key of the paired link field in the linked table. If set to a string, this indicates a bidirectional link where both tables can reference each other and data synchronizes in both directions. Both fields have paired_field_key pointing to each other. If set to null, explicitly disconnects the bidirectional link (clears paired_field_key on both sides). If undefined, no change is made to the existing paired_field_key."
-  ),
-  cardinality: zod_default.enum(["one", "many"]).optional().describe(
-    "How many linked records this field can hold. Default 'many' (multi-select). 'one' = single-select; this side holds exactly one link to the partner. Requires paired_field_key. Two paired sides cannot both be 'one'."
-  )
-});
-var tableRollupFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("rollup").describe(
-    "Field type for aggregating values from linked records (sum, avg, filled, earliest, etc.)"
-  ),
-  source_field_key: zod_default.string().describe("The field key of the select_record_link field to rollup from"),
-  aggregate_option: aggregateOptionSchema.describe(
-    "The field aggregation function to apply (e.g., sum, avg, filled, earliest)"
-  ),
-  filter: tableRecordFiltersGroupNodeSchema.optional().describe(
-    "Optional filter to apply to linked records before aggregation. Only records matching the filter conditions will be included in the rollup calculation."
-  ),
-  aggregate_field_type: tableFieldTypeNameSchema.optional().describe(
-    "What this rollup's CELL holds \u2014 'date' for earliest/latest, 'number' for every other operation (counts, sums, percentages). Derived from the operation, not from the aggregated field: a 'filled' count over a files column is a number. Server-derived at write time; ignored on input."
-  ),
-  aggregate_field_format: zod_default.string().optional().describe(
-    "The format of this rollup's own value. Operations that preserve the aggregated value's unit (sum/avg/median/min/max/range/earliest/latest) inherit the target field's format; counting operations are 'number', percentages 'percentage'. Server-derived at write time; ignored on input."
-  ),
-  aggregate_field_currency: zod_default.string().optional().describe(
-    "The currency code of this rollup's own value (e.g. 'USD', 'VND'), inherited from the aggregated field only when the operation preserves its unit \u2014 a COUNT of a currency column carries no currency. Server-derived at write time; ignored on input."
-  )
-});
-var lookupOrderBySchema = zod_default.object({
-  field_key: zod_default.string(),
-  direction: zod_default.enum(["asc", "desc"])
-});
-var tableLookupFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("lookup").describe("Field type for displaying values from fields in linked records"),
-  source_field_key: zod_default.string().describe("The field key of the select_record_link field to lookup from"),
-  lookup_field_key: zod_default.string().describe("The field key from the linked records to display"),
-  lookup_field_type: tableFieldTypeNameSchema.optional().describe(
-    "The type of the target lookup field (e.g. 'text', 'number', 'date'). Resolved from the linked table's field definition at read time."
-  ),
-  lookup_field_format: zod_default.string().optional().describe(
-    "The format of the target lookup field (e.g. 'currency', 'percentage', 'datetime'). Resolved from the linked table's field definition at read time."
-  ),
-  lookup_field_currency: zod_default.string().optional().describe(
-    "The currency code of the target lookup field (e.g. 'USD', 'VND'). Resolved from the linked table's field definition at read time."
-  ),
-  lookup_field_options: zod_default.array(zod_default.object({ key: zod_default.string(), name: zod_default.string(), color: zod_default.string().optional() })).optional().describe(
-    "Options for select-type lookup fields. Synced from the source select field's options."
-  ),
-  order_by: lookupOrderBySchema.optional().describe(
-    "When set, sort the linked records by this field on the linked table and return ONLY the picked field from the single extreme record (desc=latest, asc=earliest), as a one-element array. Omit to return every linked record's value as an array. field_key must be a field on the linked table."
-  )
-});
-var tableFilesFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("files").describe("Field type for file attachments (images, PDFs, documents)")
-});
-var formulaInputSchema = zod_default.object({
-  expression: zod_default.string().describe(
-    "JavaScript expression. Uses {Field Name} for field references."
-  ),
-  format: zod_default.enum(["number", "currency", "percentage", "link"]).optional().describe(
-    "Display format. 'number' / 'currency' / 'percentage' for numeric results; 'link' for text-output formulas that return a URL \u2014 renders the result as a clickable link."
-  ),
-  currency: zod_default.string().optional().describe("ISO 4217 currency code, e.g. USD, VND, EUR")
-});
-var formulaSchema = formulaInputSchema.extend({
-  output_type: zod_default.enum(["number", "text", "date", "datetime", "boolean"]).optional().describe("Output type of the formula. Inferred by the backend from the expression \u2014 read-only on input. `datetime` when the result carries a time of day (references a datetime field or a time-bearing helper)."),
-  volatile: zod_default.boolean().optional().describe("Whether the formula's result depends on `now()` or other non-deterministic helpers. Inferred by the backend \u2014 read-only on input.")
-});
-var tableFormulaFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("formula").describe("Field type for calculated values based on expressions"),
-  formula: formulaSchema.describe("Formula configuration and expression")
-});
-var workflowMetadataSchema = zod_default.object({
-  table_ids: zod_default.array(zod_default.string()).describe("IDs of the tables this workflow affects"),
-  staged_for_app_id: zod_default.string().optional().describe(
-    "Present while the row is a draft-staged fork for this app; cleared when the app publishes the binding. Marked rows left unbound are archived at publish/discard."
-  )
-});
-var workflowSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the workflow"),
-  name: zod_default.string().describe("Display name of the workflow"),
-  description: zod_default.string().describe("Human-readable description of what this workflow does"),
-  steps: zod_default.unknown().describe(
-    "AST-valued step tree (tool calls, conditionals, loops)."
-  ),
-  metadata: workflowMetadataSchema.nullable().optional().describe("Metadata for the workflow"),
-  current_version: zod_default.number().int().describe("Current version number"),
-  enabled: zod_default.boolean().describe("Whether this workflow is active"),
-  workspace_id: zod_default.string().describe("ID of the workspace this workflow belongs to"),
-  created_at: zod_default.string().describe("Timestamp when workflow was created"),
-  updated_at: zod_default.string().describe("Timestamp of last update")
-});
-var tableButtonFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("button").describe("Field type for action buttons"),
-  text: zod_default.string().describe("Button label text displayed to users"),
-  workflow_id: zod_default.string().nullable().optional().describe(
-    "ID of the workflow the button presses trigger. Null means no action configured \u2014 pressing the button is a no-op. Button authoring is retired: existing bindings keep running, but nothing sets a new one."
-  )
-});
-var tableAutonumberFieldSchema = tableFieldBaseSchema.extend({
-  type: zod_default.literal("autonumber"),
-  prefix: zod_default.string().optional().describe(
-    "Literal prefix prepended to every display value (e.g. 'KH-' \u2192 'KH-001'). Ignored when `template` is set."
-  ),
-  padding: zod_default.number().int().min(1).max(20).optional().describe(
-    "Zero-pad the integer to this width. Default 1 (no padding). 3 \u2192 '001', '012', '123', '1234' (overflow uses the actual width). Ignored when `template` is set."
-  ),
-  template: zod_default.string().optional().describe(
-    "Format template with placeholder tokens evaluated at insert time. Tokens: {N} (raw integer), {N:W} (zero-padded to width W, e.g. {N:3} \u2192 001), {YEAR} (4-digit year), {YEAR:2} (2-digit year), {MONTH} (2-digit month), {DAY} (2-digit day). Date tokens use the workspace timezone. Example: 'HM-{YEAR}-{N:3}' yields 'HM-2026-001'. Stored as the composed string; subsequent template edits do NOT re-format existing rows (date tokens would lose the original creation date)."
-  )
-});
-var tableFieldSchema = zod_default.discriminatedUnion("type", [
-  tableNumberFieldSchema,
-  tableTextFieldSchema,
-  tableDateFieldSchema,
-  tableBooleanFieldSchema,
-  tableSelectFieldSchema,
-  tableSelectMemberFieldSchema,
-  tableSelectRecordLinkFieldSchema,
-  tableRollupFieldSchema,
-  tableLookupFieldSchema,
-  tableFilesFieldSchema,
-  tableFormulaFieldSchema,
-  tableButtonFieldSchema,
-  tableAutonumberFieldSchema
-]);
-var tableFieldInputSchema = zod_default.discriminatedUnion("type", [
-  tableNumberFieldSchema,
-  tableTextFieldSchema,
-  tableDateFieldSchema,
-  tableBooleanFieldSchema,
-  tableSelectFieldSchema,
-  tableSelectMemberFieldSchema,
-  tableSelectRecordLinkFieldInputSchema,
-  tableRollupFieldSchema,
-  tableLookupFieldSchema,
-  tableFilesFieldSchema,
-  tableFormulaFieldSchema,
-  tableButtonFieldSchema,
-  tableAutonumberFieldSchema
-]);
-var tableFieldsSchema = zod_default.array(tableFieldSchema);
-var tableFieldCreateBaseSchema = zod_default.object({
-  name: zod_default.string().describe("Display name"),
-  description: zod_default.string().describe("Field description"),
-  confirm_before_update: zod_default.boolean().optional().describe("Show confirmation before AI updates")
-});
-var tableSelectFieldOptionCreateSchema = zod_default.object({
-  name: zod_default.string(),
-  color: optionColorSchema
-});
-var tableFieldTypeConfigSchema = zod_default.discriminatedUnion("type", [
-  zod_default.object({
-    type: zod_default.literal("number"),
-    format: numberFormatSchema.default("number"),
-    currency: zod_default.string().optional().describe("ISO 4217 code"),
-    default_value: numberDefaultValueSchema
-  }),
-  zod_default.object({
-    type: zod_default.literal("text"),
-    unique: zod_default.boolean().optional().describe("Unique values required"),
-    format: textFormatSchema.default("text"),
-    default_value: textDefaultValueSchema
-  }),
-  zod_default.object({
-    type: zod_default.literal("date"),
-    format: dateFormatSchema.optional(),
-    timezone: zod_default.string().optional().describe("IANA timezone"),
-    derive_from: zod_default.enum(["created_at", "updated_at"]).nullable().optional().describe("Auto-populate from row system timestamp; field becomes read-only. Only valid for date/datetime formats. Pass null to clear and revert to a manual date field."),
-    default_value: dateDefaultValueSchema
-  }),
-  zod_default.object({
-    type: zod_default.literal("boolean"),
-    default_value: booleanDefaultValueSchema
-  }),
-  zod_default.object({
-    type: zod_default.literal("select"),
-    options: zod_default.array(tableSelectFieldOptionCreateSchema),
-    multi: zod_default.boolean().optional().describe("Allow multiple selections"),
-    default_value: selectDefaultValueSchema
-  }),
-  zod_default.object({
-    type: zod_default.literal("select_member"),
-    multi: zod_default.boolean().optional().describe("Allow multiple selections"),
-    default_value: memberDefaultValueSchema
-  }),
-  zod_default.object({
-    type: zod_default.literal("select_record_link"),
-    table_id: zod_default.string().describe("Linked table ID"),
-    display_field_keys: zod_default.array(zod_default.string()).optional().describe(
-      "Field keys of the linked table shown as the link's display text and as the columns in the record picker. If omitted, auto-selects the first text field."
-    ),
-    display_field_widths: zod_default.record(zod_default.string(), zod_default.number().int().positive()).optional().describe(
-      "Per-column widths in pixels for the record picker, keyed by linked-table field key. Missing keys fall back to the default column width."
-    ),
-    sync_both_ways: zod_default.boolean().optional().describe("Enable bidirectional link sync. If the target table has exactly one existing unpaired link field pointing back, pairs with it instead of creating a new field."),
-    paired_field_display_field_keys: zod_default.array(zod_default.string()).optional().describe("Paired field display"),
-    paired_field_name: zod_default.string().optional().describe(
-      "Name for the auto-created paired field on the target table when sync_both_ways=true. Omit to default to the source table's name (auto-uniquified on collision). If supplied and a field with the same name already exists on the target, the create is rejected."
-    ),
-    cardinality: zod_default.enum(["one", "many"]).optional().describe(
-      "How many linked records this field can hold. Default 'many' (multi-select). 'one' = single-select; this side holds exactly one link to the partner. Requires sync_both_ways. Two paired sides cannot both be 'one'."
-    )
-  }),
-  zod_default.object({
-    type: zod_default.literal("rollup"),
-    source_field_key: zod_default.string().describe("Source link field key"),
-    aggregate_option: aggregateOptionSchema,
-    filter: tableRecordFiltersGroupNodeSchema.optional().describe("Filter linked records")
-  }),
-  zod_default.object({
-    type: zod_default.literal("lookup"),
-    source_field_key: zod_default.string().describe("Source link field key"),
-    lookup_field_key: zod_default.string().describe("Field to display"),
-    order_by: lookupOrderBySchema.optional().describe("Ordered lookup: pick only the extreme linked record's field (desc=latest, asc=earliest)")
-  }),
-  zod_default.object({
-    type: zod_default.literal("files")
-  }),
-  zod_default.object({
-    type: zod_default.literal("formula"),
-    formula: formulaInputSchema
-  }),
-  // `button` is deliberately absent: button fields are legacy — this union
-  // shapes CREATE input only, and new buttons can no longer be created
-  // (see LEGACY_FIELD_TYPES). Stored button fields still parse via the
-  // stored-field union above, and update paths keep accepting text edits.
-  zod_default.object({
-    type: zod_default.literal("autonumber"),
-    prefix: zod_default.string().optional().describe("Literal prefix prepended to display (ignored when template is set)"),
-    padding: zod_default.number().int().min(1).max(20).optional().describe("Zero-pad the integer to this width (default 1) (ignored when template is set)"),
-    template: zod_default.string().optional().describe(
-      "Format template \u2014 tokens evaluate at insert time: {N}, {N:W} (padded), {YEAR}, {YEAR:2}, {MONTH}, {DAY}. Date tokens use workspace timezone. Example: 'HM-{YEAR}-{N:3}' \u2192 'HM-2026-001'."
-    )
-  })
-]);
-var tableFieldCreateInputSchema = zod_default.intersection(
-  tableFieldCreateBaseSchema,
-  tableFieldTypeConfigSchema
-);
-var fieldVisibilitySchema = zod_default.enum(["visible", "hidden"]).describe(
-  "Field visibility state: 'visible' = shown to everyone, 'hidden' = not shown by default but members can toggle"
-);
-
-// ../shared/src/schemas/field_config.ts
-var fieldConfigEntrySchema = zod_default.object({
-  key: zod_default.string().min(1).describe("Field key"),
-  visibility: fieldVisibilitySchema,
-  width: zod_default.number().optional()
-});
-
-// ../shared/src/schemas/iam.ts
-var jsonSchemaSchema = zod_default.string();
-var organizationSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the organization"),
-  name: zod_default.string().describe("Display name of the organization"),
-  slug: zod_default.string().nullable().describe("Slug for the organization")
-});
-var memberSchema = zod_default.object({
-  member_id: zod_default.string().describe("Unique identifier for the member"),
-  organization_id: zod_default.string().describe("Organization ID the member belongs to"),
-  name: zod_default.string().describe("Display name of the member"),
-  email_address: zod_default.string().describe(
-    "What the member types to sign in: an email address for a self-managed member, an administrator-issued name (e.g. giamdoc.sunrise) for an admin-managed one. The latter is NOT an address and cannot receive mail \u2014 the field name predates the split."
-  ),
-  role: zod_default.enum(["owner", "admin", "member"]).describe("Organization role"),
-  image: zod_default.string().nullable().optional().describe("URL to the member's profile picture"),
-  account_type: zod_default.enum(["self_managed", "admin_managed"]).describe(
-    "How the account is credentialed. admin_managed means an admin chose the sign-in name and set the password; the account has NO email address at all, so nothing can be mailed to it until the member claims one they control."
-  ),
-  archived: zod_default.boolean().optional().describe(
-    "True when this person has been removed from the organization. The membership survives removal so records naming them keep resolving; it grants nothing. Optional because an older server omits it \u2014 absent means active."
-  ),
-  joined_at: zod_default.string().optional().describe(
-    "ISO timestamp of when this membership began. Optional because an older server omits it \u2014 absent means not told, never 'joined at the epoch'."
-  )
-});
-var pendingInvitationSchema = zod_default.object({
-  invitation_id: zod_default.string().describe("Unique identifier for the pending invitation"),
-  organization_id: zod_default.string().describe("Organization the invitee will join on accept"),
-  email: zod_default.string().describe("Email the invitation was sent to"),
-  name: zod_default.string().nullable().describe("Admin-supplied display name (carried onto member.name on accept; invitee can override at accept time)"),
-  role: zod_default.enum(["owner", "admin", "member"]).describe("Role the invitee will receive on accept"),
-  expires_at: zod_default.string().describe("ISO timestamp when the invitation expires")
-});
-var workspaceSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the workspace"),
-  name: zod_default.string().describe("Display name of the workspace"),
-  default_currency: zod_default.string().describe("Default currency code for the workspace"),
-  timezone: zod_default.string().describe("IANA timezone name (e.g., 'America/New_York', 'Asia/Tokyo')"),
-  organization_id: zod_default.string().describe("Organization ID this workspace belongs to"),
-  created_at: zod_default.string().describe("Timestamp when workspace was created")
-});
-var memberGroupSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the member group"),
-  name: zod_default.string().describe("Display name of the group"),
-  description: zod_default.string().optional().describe("Optional description of the group's purpose"),
-  member_ids: zod_default.array(zod_default.string()).describe("Array of member IDs in this group"),
-  invitation_ids: zod_default.array(zod_default.string()).describe("Array of pending invitation IDs pre-granted membership; migrated to member_ids on accept"),
-  organization_id: zod_default.string().describe("ID of the organization this group belongs to"),
-  created_at: zod_default.string().describe("Timestamp when group was created"),
-  created_by: zod_default.string().describe("Member ID of the user who created this group")
-});
-var principalGroupSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the member group"),
-  name: zod_default.string().describe("Display name of the group"),
-  description: zod_default.string().optional().describe("Optional description of the group's purpose"),
-  member_count: zod_default.number().int().describe("Number of accepted members in the group"),
-  invitation_count: zod_default.number().int().describe("Number of pending invitations pre-granted membership")
-});
-var PUBLIC_PRINCIPAL_ID = "public";
-var principalSchema = zod_default.discriminatedUnion("type", [
-  zod_default.object({
-    type: zod_default.literal("member").describe("Principal type: individual member"),
-    id: zod_default.string().describe("Member ID")
-  }),
-  zod_default.object({
-    type: zod_default.literal("member_group").describe("Principal type: group of members"),
-    id: zod_default.string().describe("Member group ID")
-  }),
-  zod_default.object({
-    type: zod_default.literal("organization").describe("Principal type: all members in organization"),
-    id: zod_default.string().describe("Organization ID")
-  }),
-  zod_default.object({
-    type: zod_default.literal("public").describe("Principal type: anyone, including unauthenticated visitors"),
-    id: zod_default.literal(PUBLIC_PRINCIPAL_ID).describe("Always the `public` sentinel \u2014 no entity")
-  }),
-  // Pending invitation as principal: lets admins pre-grant group membership and
-  // resource access before the invitee accepts. Never resolved as a Subject —
-  // a pending invitee cannot authenticate, so these bindings stay dormant until
-  // accept-time migration rewrites them to type:"member".
-  zod_default.object({
-    type: zod_default.literal("invitation").describe("Principal type: pending invitation (not yet accepted)"),
-    id: zod_default.string().describe("Invitation ID")
-  })
-]);
-var subjectSchema = zod_default.discriminatedUnion("type", [
-  zod_default.object({
-    type: zod_default.literal("member").describe("Subject type: authenticated member"),
-    id: zod_default.string().describe("Member ID")
-  }),
-  zod_default.object({
-    type: zod_default.literal("public").describe("Subject type: unauthenticated visitor")
-  })
-]);
-var resourceTypeSchema = zod_default.enum(["table", "table_view", "app", "automation", "skill", "document_template", "instruction", "knowledge_doc"]);
-var accessPrincipalSchema = zod_default.discriminatedUnion("type", [
-  zod_default.object({
-    type: zod_default.literal("member").describe("Principal type: an individual member"),
-    id: zod_default.string().describe("Member ID")
-  }),
-  zod_default.object({
-    type: zod_default.literal("member_group").describe("Principal type: a member group"),
-    id: zod_default.string().describe("Group ID")
-  }),
-  zod_default.object({
-    type: zod_default.literal("organization").describe("Principal type: everyone in the organization"),
-    id: zod_default.string().describe("Organization ID")
-  })
-]);
-var resourceAccessSchema = zod_default.object({
-  resource_id: zod_default.string().describe("ID of the resource these principals can reach"),
-  principals: zod_default.array(accessPrincipalSchema).describe("Members, groups and the organization that have been granted access")
-});
-var resourceRoleBindingSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the role binding"),
-  principal: principalSchema.describe(
-    "Who this role binding applies to (member, group, or organization)"
-  ),
-  resource_type: resourceTypeSchema.describe("Type of resource being accessed"),
-  resource_id: zod_default.string().describe("ID of the specific resource"),
-  role: zod_default.string().describe("Role name (e.g., 'viewer', 'editor', 'manager', 'user')")
-});
-
-// ../shared/src/schemas/table_records.ts
-var tableWorkflowEventSchema = zod_default.enum([
-  "before_create",
-  "after_create",
-  "before_update",
-  "after_update",
-  "before_delete",
-  "after_delete"
-]);
-var tableWorkflowSchema = zod_default.object({
-  id: zod_default.string().describe("Unique table-workflow binding ID (tbw_ prefix)"),
-  name: zod_default.string().describe("Human-readable name"),
-  description: zod_default.string().describe("Description of what this workflow does"),
-  enabled: zod_default.boolean().describe("Whether this workflow is active"),
-  event: tableWorkflowEventSchema.describe(
-    "Lifecycle event that fires this workflow. before_* runs synchronously and may reject the mutation; after_* runs after commit and does not block."
-  ),
-  workflow_id: zod_default.string().describe(
-    "ID of the workflow row that owns this binding's steps. The workflow's steps_v2 is the source of truth for the AST."
-  ),
-  // Recursive v2 expression AST. Lazy schema would crash the OpenAPI walker;
-  // runtime is `unknown` and the casted Zod type preserves the compile-time
-  // signature for callers. Write paths re-parse with the strict schema before
-  // storage.
-  if: zod_default.unknown().nullable().optional().describe(
-    "Optional pre-execution gate. Evaluated against the trigger context (record / prev_record / changes / runtime); the workflow fires only when truthy. Skip gating means the workflow always fires."
-  ),
-  created_at: zod_default.string().describe("When the binding was created"),
-  updated_at: zod_default.string().describe("When the binding was last modified"),
-  archived_at: zod_default.string().nullable().optional().describe(
-    "Set when the binding was removed (soft-delete). An archived binding never fires and is hidden from active listings, but is restorable; null/absent = active."
-  )
-});
-var tableWorkflowMessageSchema = zod_default.object({
-  table_workflow_id: zod_default.string().describe("tbw_* binding that emitted the message."),
-  workflow_name: zod_default.string().describe("Human name of the workflow at execution time."),
-  event: tableWorkflowEventSchema.describe(
-    "Lifecycle event that produced the message. Only before_* events can surface here."
-  ),
-  record_id: zod_default.string().describe(
-    "Record that triggered the workflow. Lets the UI scope the message to a specific row in bulk responses."
-  ),
-  message: zod_default.string().describe("Author-provided text from the workflow's return.message.")
-});
-var tableSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the table"),
-  workspace_id: zod_default.string().describe("ID of the workspace this table belongs to"),
-  name: zod_default.string().describe("Display name of the table"),
-  description: zod_default.string().describe("Description of the table's purpose"),
-  position: zod_default.number().int().optional().nullable().describe("Display ordering index for the table. Lower numbers are shown first. "),
-  fields: tableFieldsSchema.describe("Array of field definitions for this table"),
-  workflows: zod_default.array(tableWorkflowSchema).optional().describe(
-    "Workflows attached to this table that fire around record mutations. before_* run synchronously and may reject; after_* run after commit and do not block."
-  ),
-  private_filters: tableRecordFiltersGroupNodeSchema.nullable().optional().describe("Row-level private filters AND'd to every query as a security boundary (admin bypass)"),
-  colors: tableRecordColorsSchema.nullable().optional().describe("Color rules for styling records based on filter conditions"),
-  approvers: zod_default.array(principalSchema).nullable().optional().describe(
-    "Principals (members, groups, or the organization) who review locked-record change requests on this table. Null/empty = organization admins review. The requester never reviews their own request."
-  ),
-  created_at: zod_default.string().describe("Timestamp when table was created")
-});
-var recordDataTemplateSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the record data template"),
-  name: zod_default.string().describe("Display name of the record data template"),
-  description: zod_default.string().describe("Description of the record data template"),
-  table_id: zod_default.string().describe("ID of the table this record template belongs to"),
-  data: zod_default.record(zod_default.string(), zod_default.unknown()).describe("The data of the record template. The key is the Field key.")
-});
-var tableRecordSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the record"),
-  table_id: zod_default.string().describe("ID of the table this record belongs to"),
-  workspace_id: zod_default.string().describe("ID of the workspace this record belongs to"),
-  data: zod_default.record(zod_default.string(), zod_default.unknown()).describe("The data of the record. The key is the Field key."),
-  locked: zod_default.boolean().optional().describe("Whether the entire record is locked from editing"),
-  draft: zod_default.boolean().optional().describe("Whether the record is an unsubmitted draft \u2014 UI-only in-progress state, not yet a real row. Row-visibility scoping is enforced at submit, not while a draft is being filled in."),
-  updated_at: zod_default.string().describe("Timestamp of last update"),
-  created_at: zod_default.string().describe("Timestamp when record was created")
-});
-var viewSummaryEntrySchema = zod_default.object({
-  operation: zod_default.string().describe("Operation to perform on the field"),
-  field_key: zod_default.string().describe("Field key to display in the summary row")
-});
-var viewSummarySchema = zod_default.record(zod_default.string(), viewSummaryEntrySchema.nullable().optional()).nullable().optional().describe("Map of field keys to summary operations.");
-var visibleToEntrySchema = zod_default.object({
-  type: zod_default.enum(["member", "group"]).describe("Principal kind that may see the view: an individual member or a member group"),
-  id: zod_default.string().describe("Member ID (type=member) or member-group ID (type=group)")
-});
-var visibleToSchema = zod_default.array(visibleToEntrySchema).nullable();
-var tableViewSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the view"),
-  table_id: zod_default.string().describe("ID of the table this view displays"),
-  workspace_id: zod_default.string().describe("ID of the workspace this view belongs to"),
-  name: zod_default.string().describe("Display name of the view"),
-  description: zod_default.string().describe("Description of the view's purpose"),
-  visible_to: visibleToSchema.optional().describe(
-    "Sidebar declutter list (NOT access control). null/absent = every member with access to the parent table sees this view; a non-empty list of members/groups restricts who sees it in the explorer. [] is normalized to null on write."
-  ),
-  position: zod_default.number().int().nullable().describe(
-    "Display ordering index for the view. Lower numbers are shown first. Use incremental values with gaps (100, 200, 300) instead of consecutive numbers (1, 2, 3) to enable efficient reordering without updating multiple records. Example: To insert between 100 and 200, use 150."
-  ),
-  frozen_columns: zod_default.number().int().nullable().optional().describe("Number of columns to freeze. Frozen columns are not scrollable."),
-  summary: viewSummarySchema,
-  default_record_data_template_id: zod_default.string().nullable().optional().describe("ID of the record template to use as the default record initial data"),
-  field_config: zod_default.array(fieldConfigEntrySchema).describe(
-    "Ordered array of field config entries. Order = display order, visibility = per-entry. Fields not listed are hidden."
-  ),
-  sort: tableRecordSortSchema.nullable().describe("Sorting configuration for records in this view"),
-  filters: tableRecordFiltersGroupNodeSchema.nullable().describe("Filter conditions applied to records in this view"),
-  created_at: zod_default.string().describe("Timestamp when view was created")
-});
-var tableWithViewsSchema = tableSchema.extend({
-  views: zod_default.array(tableViewSchema).describe("Array of views for this table")
-});
-var explorerViewSchema = zod_default.object({
-  id: zod_default.string(),
-  name: zod_default.string(),
-  owner_member_id: zod_default.string(),
-  // Per-view sidebar declutter list (NOT access control). null = every member
-  // with table access sees this view; a non-empty member/group list restricts
-  // it. Surfaced here so the table share dialog can render and edit each view's
-  // audience without a second round-trip.
-  visible_to: visibleToSchema.optional(),
-  // Per-requesting-member sidebar preference: true if this member has hidden
-  // the view. Hiding is UX-only — it never affects access or other members.
-  hidden: zod_default.boolean()
-});
-var explorerTableSchema = zod_default.object({
-  id: zod_default.string(),
-  name: zod_default.string(),
-  position: zod_default.number().int().nullable().optional(),
-  views: zod_default.array(explorerViewSchema),
-  owner_member_id: zod_default.string(),
-  // Active package installations whose binding includes this table — the
-  // sidebar marks these so members see the structure is app-managed before
-  // they try to change it. Absent for unbound tables.
-  package_apps: zod_default.array(zod_default.object({ id: zod_default.string(), name: zod_default.string() })).optional()
-});
-var documentTemplateTypeSchema = zod_default.enum(["html", "pdf-form", "excel", "word", "email"]).describe("Template type: 'html' for HTML templates, 'pdf-form' for fillable PDF forms, 'excel' for Excel templates, 'word' for Word templates, 'email' for email HTML templates");
-var documentTemplateSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the document template"),
-  workspace_id: zod_default.string().describe("ID of the workspace this template belongs to"),
-  name: zod_default.string().describe("Display name of the template"),
-  description: zod_default.string().describe("What the template produces, shown under its name in the library"),
-  type: documentTemplateTypeSchema,
-  template: zod_default.string().describe("Template content with variable placeholders (e.g., {{customer_name}})"),
-  format: zod_default.string().describe("Supported document formats.").optional(),
-  orientation: zod_default.enum(["portrait", "landscape"]).describe("Page orientation for PDF generation").optional(),
-  variables: zod_default.record(zod_default.string(), zod_default.unknown()).describe("Data to pass to the template."),
-  current_version: zod_default.number().describe("Current version number of the template"),
-  owner_member_id: zod_default.string().nullable().optional().describe("Member who created the template, from the IAM registry. Absent on write responses."),
-  created_at: zod_default.string().describe("Timestamp when template was created"),
-  template_url: zod_default.string().nullable().describe("Signed URL to download the template file (pdf-form/excel only)")
-});
-
-// ../shared/src/schemas/packages.ts
-var contractAliasSchema = zod_default.string().regex(
-  /^[a-z][a-z0-9_]*$/,
-  "alias must be a lowercase slug: start with a letter, then letters/digits/underscores"
-);
-var runtimeAliasSchema = zod_default.string().min(1).max(200);
-var contractFieldBaseSchema = zod_default.object({
-  alias: contractAliasSchema.describe("Stable local alias, unique within the entity"),
-  // No braces: scaffold translates formula expressions from `{alias}` to the
-  // platform's `{Field Label}` reference form, so a brace inside a label would
-  // corrupt every formula that references the field.
-  label: zod_default.string().min(1).regex(/^[^{}]*$/, "field labels cannot contain { or }").describe("Display label used as the field name at scaffold time"),
-  description: zod_default.string().optional(),
-  required: zod_default.boolean().optional().describe(
-    "Advisory only: marks the field required for app-form/workflow UX. The table data model has no required constraint, so scaffold does NOT enforce it at the schema level \u2014 validation lives in the app/workflow layer."
-  )
-});
-var contractSelectOptionSchema = zod_default.object({
-  alias: contractAliasSchema.describe("Stable local alias, unique within the field"),
-  label: zod_default.string().min(1).describe("Display label for the option"),
-  color: optionColorSchema
-});
-var contractAutonumberConfigSchema = tableAutonumberFieldSchema.pick({
-  prefix: true,
-  padding: true,
-  template: true
-});
-var contractTextFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("text"),
-  unique: zod_default.boolean().optional().describe("Unique values required"),
-  format: textFormatSchema.optional()
-});
-var contractNumberFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("number"),
-  format: numberFormatSchema.optional(),
-  currency: zod_default.string().optional().describe("ISO 4217 code")
-});
-var contractDateFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("date"),
-  format: dateFormatSchema.optional(),
-  timezone: zod_default.string().optional().describe("IANA timezone"),
-  derive_from: zod_default.enum(["created_at", "updated_at"]).optional().describe("Auto-populate from the row's system timestamp; the field becomes read-only.")
-});
-var contractBooleanFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("boolean")
-});
-var contractSelectFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("select"),
-  options: zod_default.array(contractSelectOptionSchema).min(1),
-  multi: zod_default.boolean().optional().describe("Allow multiple selections")
-});
-var contractSelectMemberFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("select_member"),
-  multi: zod_default.boolean().optional().describe("Allow multiple selections")
-});
-var contractSelectRecordLinkFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("select_record_link"),
-  target_entity: contractAliasSchema.describe("Alias of the entity this field links to"),
-  sync_both_ways: zod_default.boolean().optional().describe("Create a paired link field on the target entity for bidirectional sync"),
-  paired_field_alias: contractAliasSchema.optional().describe(
-    "The pair edge of a bidirectional link: the field alias ON THE TARGET ENTITY that is this link's sync partner. Both sides of a pair carry it, each naming the other. Scaffold creates whichever side it reaches first WITH the pairing (the platform auto-creates the partner) and binds the partner alias to the auto-created field \u2014 without this edge the two contract fields would be created independently and collide with the auto-created partner."
-  ),
-  cardinality: zod_default.enum(["one", "many"]).optional().describe("How many linked records this field holds. Default 'many'."),
-  display_field_aliases: zod_default.array(contractAliasSchema).optional().describe("Field aliases on the target entity shown as the link's display text / picker columns")
-});
-var contractFilesFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("files")
-});
-var contractFormulaFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("formula"),
-  formula: formulaInputSchema.describe(
-    "Formula config. The expression references other fields on the SAME entity by alias in braces, e.g. `{quantity} * {unit_price}`."
-  )
-});
-var contractRollupFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("rollup"),
-  source_field_alias: contractAliasSchema.describe(
-    "Alias of a select_record_link field on this entity to roll up from"
-  ),
-  aggregate_option: aggregateOptionSchema.describe(
-    "Aggregation operation. Its `field_key` names a field alias on the linked entity."
-  )
-});
-var contractLookupFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("lookup"),
-  source_field_alias: contractAliasSchema.describe(
-    "Alias of a select_record_link field on this entity to look up through"
-  ),
-  lookup_field_alias: contractAliasSchema.describe(
-    "Alias of the field on the linked entity to display"
-  ),
-  order_by: lookupOrderBySchema.optional().describe("Ordered lookup. Its `field_key` names a field alias on the linked entity.")
-});
-var contractAutonumberFieldSchema = contractFieldBaseSchema.extend({
-  type: zod_default.literal("autonumber"),
-  ...contractAutonumberConfigSchema.shape
-});
-var contractFieldSchema = zod_default.discriminatedUnion("type", [
-  contractTextFieldSchema,
-  contractNumberFieldSchema,
-  contractDateFieldSchema,
-  contractBooleanFieldSchema,
-  contractSelectFieldSchema,
-  contractSelectMemberFieldSchema,
-  contractSelectRecordLinkFieldSchema,
-  contractFilesFieldSchema,
-  contractFormulaFieldSchema,
-  contractRollupFieldSchema,
-  contractLookupFieldSchema,
-  contractAutonumberFieldSchema
-]);
-var contractEntitySchema = zod_default.object({
-  alias: contractAliasSchema.describe("Stable entity alias, unique within the contract"),
-  label: zod_default.string().min(1).describe("Display label used as the table name at scaffold time"),
-  description: zod_default.string().optional(),
-  fields: zod_default.array(contractFieldSchema).min(1)
-});
-var contractRoleSchema = zod_default.object({
-  alias: contractAliasSchema.describe("Stable role alias, bound to a workspace group at install"),
-  label: zod_default.string().min(1)
-});
-var contractTemplateBaseSchema = zod_default.object({
-  alias: contractAliasSchema.describe("Stable template alias, unique within the contract"),
-  label: zod_default.string().min(1),
-  content_sha256: zod_default.string().optional().describe(
-    "sha256 (64-char lowercase hex) of the template content \u2014 inline: the utf-8 content string; file-backed: the bytes_ref bytes. The modified-detection reference. Optional in the schema so contracts published before template sha still parse; REQUIRED at publish (validatePackageContract)."
-  )
-});
-var contractInlineTemplateSchema = (templateType) => contractTemplateBaseSchema.extend({
-  type: zod_default.literal(templateType),
-  content: zod_default.string().min(1).describe("Inline template content; placeholders reference field aliases")
-});
-var contractFileTemplateSchema = (templateType) => contractTemplateBaseSchema.extend({
-  type: zod_default.literal(templateType),
-  bytes_ref: zod_default.string().min(1).describe("Path of the backing file within the package bundle; markers reference field aliases")
-});
-var contractTemplateSchema = zod_default.discriminatedUnion("type", [
-  contractInlineTemplateSchema("html"),
-  contractInlineTemplateSchema("email"),
-  contractFileTemplateSchema("excel"),
-  contractFileTemplateSchema("word"),
-  contractFileTemplateSchema("pdf-form")
-]);
-var contractFromTableNodeSchema = zod_default.object({
-  kind: zod_default.literal("from_table"),
-  from_entity: contractAliasSchema.describe("Entity alias this query reads from"),
-  filter: tableRecordFiltersSchema.optional(),
-  search: zod_default.string().optional(),
-  sort: tableRecordSortSchema.optional(),
-  limit: zod_default.number().optional()
-});
-var contractProjectNodeSchema = zod_default.object({
-  kind: zod_default.literal("project"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  columns: zod_default.array(queryProjectionColumnSchema).min(1)
-});
-var contractFilterNodeSchema = zod_default.object({
-  kind: zod_default.literal("filter"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  predicate: tableRecordFiltersSchema
-});
-var contractJoinNodeSchema = zod_default.object({
-  kind: zod_default.literal("join"),
-  left: zod_default.lazy(() => contractQueryNodeSchema),
-  right: zod_default.lazy(() => contractQueryNodeSchema),
-  on: queryJoinPredicateSchema,
-  type: zod_default.enum(["inner", "left"])
-});
-var contractUnionNodeSchema = zod_default.object({
-  kind: zod_default.literal("union"),
-  sources: zod_default.array(zod_default.lazy(() => contractQueryNodeSchema)).min(2)
-});
-var contractGroupNodeSchema = zod_default.object({
-  kind: zod_default.literal("group"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  by: zod_default.array(zod_default.string()),
-  aggregates: zod_default.array(queryAggregateColumnSchema).min(1)
-});
-var contractWindowNodeSchema = zod_default.object({
-  kind: zod_default.literal("window"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  partition_by: zod_default.array(zod_default.string()),
-  order_by: tableRecordSortSchema,
-  frame: queryWindowFrameSchema.optional(),
-  aggregates: zod_default.array(queryAggregateColumnSchema).optional(),
-  functions: zod_default.array(queryWindowFunctionColumnSchema).optional()
-});
-var contractSortNodeSchema = zod_default.object({
-  kind: zod_default.literal("sort"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  by: tableRecordSortSchema
-});
-var contractLimitNodeSchema = zod_default.object({
-  kind: zod_default.literal("limit"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  n: zod_default.number().int().positive(),
-  offset: zod_default.number().int().nonnegative().optional()
-});
-var contractUnpivotNodeSchema = zod_default.object({
-  kind: zod_default.literal("unpivot"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  passthrough: zod_default.array(queryUnpivotPassthroughColumnSchema),
-  row_columns: zod_default.array(queryUnpivotRowColumnSchema).min(1),
-  rows: zod_default.array(zod_default.record(zod_default.string(), querySourceSchema)).min(1)
-});
-var contractUnnestNodeSchema = zod_default.object({
-  kind: zod_default.literal("unnest"),
-  from: zod_default.lazy(() => contractQueryNodeSchema),
-  source: zod_default.string(),
-  output: zod_default.string(),
-  display_output: zod_default.string().optional(),
-  keep_empty: zod_default.boolean().optional()
-});
-var contractQueryNodeSchema = zod_default.lazy(
-  () => zod_default.discriminatedUnion("kind", [
-    contractFromTableNodeSchema,
-    contractProjectNodeSchema,
-    contractFilterNodeSchema,
-    contractJoinNodeSchema,
-    contractUnionNodeSchema,
-    contractGroupNodeSchema,
-    contractWindowNodeSchema,
-    contractSortNodeSchema,
-    contractLimitNodeSchema,
-    contractUnpivotNodeSchema,
-    contractUnnestNodeSchema
-  ])
-);
-var contractQuerySchema = zod_default.object({
-  alias: runtimeAliasSchema.describe(
-    "Stable query alias, unique within the contract \u2014 carried verbatim from the app (source invokes it at runtime)"
-  ),
-  params: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe("Typed param schema. Keys are param names referenced as {{params.<name>}} in the ast."),
-  ast: contractQueryNodeSchema
-});
-var contractLifecycleEventSchema = tableWorkflowEventSchema;
-var contractWorkflowTriggerSchema = zod_default.discriminatedUnion("type", [
-  zod_default.object({ type: zod_default.literal("app") }),
-  zod_default.object({
-    type: zod_default.literal("entity_lifecycle"),
-    entity: contractAliasSchema.describe("Alias of the entity whose lifecycle fires this workflow"),
-    event: contractLifecycleEventSchema
-  })
-]);
-var contractWorkflowSchema = zod_default.object({
-  alias: runtimeAliasSchema.describe(
-    "Stable workflow alias, unique within the contract \u2014 app-trigger aliases are carried verbatim from the app (source invokes them at runtime)"
-  ),
-  trigger: contractWorkflowTriggerSchema,
-  inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe("Typed inputs. record_link `table_id` names an entity alias; member `group` a role alias."),
-  outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional().describe("Typed outputs. record_link `table_id` names an entity alias."),
-  body: zod_default.string().min(1).describe("Alias-form JS-subset workflow source. Identifiers are resolved against the binding at materialize time.")
-});
-var contractAgentSchema = appAgentDeclarationSchema.extend({
-  alias: runtimeAliasSchema.describe(
-    "Stable agent alias, unique within the contract \u2014 carried verbatim from the app (source invokes it at runtime)"
-  ),
-  knowledge_expects: zod_default.array(zod_default.string().min(1)).optional().describe(
-    "Doc NAMES this agent must read that the package does NOT own \u2014 the installer's own docs. Resolved by name against the installing workspace: exactly one non-archived match binds, zero or several bind nothing and surface as an install warning, because doc names are not unique and picking one would be a guess. The agent installs either way."
-  ),
-  knowledge_aliases: zod_default.array(contractAliasSchema).optional().describe(
-    "Package knowledge docs this agent may read, by contract alias. Materialize resolves each against `binding.knowledge` to the installing workspace's own doc id and writes the agent's `knowledge_doc_ids`. Omit for an agent that reads no package knowledge \u2014 an agent whose declared set does not travel can read NOTHING, since a declared set bounds every read."
-  )
-});
-var contractConfigBaseSchema = zod_default.object({
-  alias: contractAliasSchema.describe("Stable config alias, unique within the contract"),
-  label: zod_default.string().min(1),
-  description: zod_default.string().optional()
-});
-var contractTextConfigSchema = contractConfigBaseSchema.extend({
-  type: zod_default.literal("text"),
-  default: zod_default.string()
-});
-var contractBooleanConfigSchema = contractConfigBaseSchema.extend({
-  type: zod_default.literal("boolean"),
-  default: zod_default.boolean()
-});
-var contractColorConfigSchema = contractConfigBaseSchema.extend({
-  type: zod_default.literal("color"),
-  default: optionColorSchema
-});
-var contractNumberConfigSchema = contractConfigBaseSchema.extend({
-  type: zod_default.literal("number"),
-  default: zod_default.number()
-});
-var contractSelectConfigSchema = contractConfigBaseSchema.extend({
-  type: zod_default.literal("select"),
-  options: zod_default.array(zod_default.object({ value: zod_default.string(), label: zod_default.string().min(1) })).min(1),
-  default: zod_default.string()
-});
-var contractConfigEntrySchema = zod_default.discriminatedUnion("type", [
-  contractTextConfigSchema,
-  contractBooleanConfigSchema,
-  contractColorConfigSchema,
-  contractNumberConfigSchema,
-  contractSelectConfigSchema
-]);
-var packageKindSchema = zod_default.enum(["app", "content"]);
-var contractKnowledgeEntrySchema = zod_default.object({
-  name: zod_default.string().min(1).describe(
-    "Display name \u2014 the runtime routing key an agent resolves the doc by; unique across the contract's knowledge"
-  ),
-  description: zod_default.string().describe("Doc description (may be empty)"),
-  // Optional so contracts published before tagging still parse; absent means
-  // untagged. A curated corpus is exactly the case where classification is
-  // authored deliberately, so install and upgrade have to carry it — otherwise
-  // every installed corpus lands unlabelled and the customer re-tags it by hand.
-  //
-  // ABSENT IS NOT EMPTY, and that distinction is load-bearing on the wire: a
-  // contract that says nothing about tags must leave the customer's own labels
-  // alone, or a routine content upgrade silently strips classification the
-  // workspace added. Every reader below branches on `undefined`, never on length.
-  tags: zod_default.array(zod_default.string()).optional().describe("Labels for the doc; omitted leaves existing labels alone"),
-  /**
-   * LEGACY, read-only, removed in a later release.
-   *
-   * Content packages published while knowledge docs had folders carry a `path`,
-   * and those contracts are stored verbatim in the workspaces that installed
-   * them. Dropping the field would make an installed contract fail to parse and
-   * would discard what the publisher declared, so it is still accepted and
-   * mapped to `tags` on install/upgrade (a path's segments were always labels;
-   * the hierarchy merely insisted on an order for them). Nothing EMITS it any
-   * more — `content_bundle` writes `tags` — so it disappears from a package the
-   * first time it is re-published.
-   */
-  path: zod_default.string().optional().describe("Deprecated: pre-tagging folder. Mapped to tags on install."),
-  content_ref: zod_default.string().min(1).describe("Path of the content file within the bundle \u2014 must be `knowledge/<alias>.md`"),
-  content_sha256: zod_default.string().describe("sha256 (64-char lowercase hex) of the content bytes \u2014 the modified-detection reference")
-});
-var contractKnowledgeSchema = zod_default.record(contractAliasSchema, contractKnowledgeEntrySchema);
-var packageContractSchema = zod_default.object({
-  entities: zod_default.array(contractEntitySchema).default([]),
-  roles: zod_default.array(contractRoleSchema).default([]),
-  templates: zod_default.array(contractTemplateSchema).default([]),
-  queries: zod_default.array(contractQuerySchema).default([]),
-  workflows: zod_default.array(contractWorkflowSchema).default([]),
-  agents: zod_default.array(contractAgentSchema).default([]),
-  config: zod_default.array(contractConfigEntrySchema).default([]),
-  // Package-managed knowledge docs (alias → metadata + content sha). Defaults to
-  // {} so contracts published before knowledge packaging still parse.
-  knowledge: contractKnowledgeSchema.default({}),
-  // Doc NAMES the package's agents route to but the package does not own —
-  // install/health WARN (advisory) when a name has no doc in the workspace.
-  // The first instance of the general cross-package "expects" contract.
-  knowledge_expects: zod_default.array(zod_default.string()).default([])
-});
-var bindingMapSchema = zod_default.record(zod_default.string().min(1), zod_default.string().min(1));
-var bindingSchema = zod_default.object({
-  entities: bindingMapSchema.default({}),
-  fields: bindingMapSchema.default({}),
-  options: bindingMapSchema.default({}),
-  templates: bindingMapSchema.default({}),
-  roles: bindingMapSchema.default({}),
-  // Artifact registry, not a schema binding: the package-owned table-workflow
-  // ROW id per entity_lifecycle workflow alias. Materialize matches/updates by
-  // this id (a display name is forgeable and renameable), upgrade prunes by
-  // it, and hashes look rows up through it. Excluded from BINDING_NAMESPACES:
-  // a deleted row is a modified-core finding (fingerprints), never binding
-  // drift, so validateBinding/applyDriftResolutions ignore it.
-  workflows: bindingMapSchema.default({}),
-  // The app's BUNDLED knowledge corpus: contract knowledge alias → the
-  // workspace's concrete `kdc_` id. One row, one pin — the app installation IS
-  // the anchor for its bundled docs (`package_content_installations` rows are
-  // standalone content packages only). Excluded from BINDING_NAMESPACES: a
-  // gone/edited doc is detected by the knowledge upgrade preview (live doc +
-  // content-sha reads), never by validateBinding's live-id sweep.
-  knowledge: bindingMapSchema.default({})
-});
-var BINDING_NAMESPACES = ["entities", "fields", "options", "templates", "roles"];
-var contentBindingMapSchema = zod_default.record(zod_default.string().min(1), zod_default.string().min(1));
-var packageContentBindingSchema = zod_default.object({
-  knowledge: contentBindingMapSchema.default({}),
-  templates: contentBindingMapSchema.default({})
-});
-var bindingDriftSchema = zod_default.object({
-  namespace: zod_default.enum(BINDING_NAMESPACES),
-  alias: zod_default.string(),
-  id: zod_default.string().describe("The stale concrete id the alias was bound to")
-});
-var driftResolutionSchema = zod_default.union([
-  zod_default.literal("recreate"),
-  zod_default.object({ bind_to: zod_default.string().min(1) })
-]);
-var MODIFIED_ARTIFACT_KINDS = ["queries", "workflows", "agents", "template"];
-var modifiedArtifactSchema = zod_default.object({
-  kind: zod_default.enum(MODIFIED_ARTIFACT_KINDS),
-  alias: zod_default.string(),
-  // Templates only: the OLD pinned contract carried no content_sha256, so the
-  // preview cannot attribute the divergence from the target to a local edit vs.
-  // the older upstream content — a one-time consent, converging once a
-  // sha-carrying version is pinned. Surfaces can say "can't verify local edits
-  // (older package version)".
-  baseline_unknown: zod_default.boolean().optional()
-});
-var packageArtifactHashesSchema = zod_default.object({
-  queries: zod_default.record(zod_default.string(), zod_default.string()),
-  workflows: zod_default.record(zod_default.string(), zod_default.string()),
-  agents: zod_default.record(zod_default.string(), zod_default.string())
-});
-var modificationResolutionSchema = zod_default.union([zod_default.literal("revert"), zod_default.literal("keep")]);
-var KNOWLEDGE_UPGRADE_CHANGES = ["added", "changed", "removed", "drifted"];
-var knowledgeUpgradeEntrySchema = zod_default.object({
-  alias: zod_default.string(),
-  name: zod_default.string().describe("The doc's display name \u2014 the target contract's name, or the live name for a drifted doc"),
-  change: zod_default.enum(KNOWLEDGE_UPGRADE_CHANGES),
-  /** `changed`/`removed` only: the live doc's content diverged from the OLD pinned sha. */
-  modified: zod_default.boolean(),
-  /** The bound live doc id; null for `added`, or for a `drifted` doc that is gone. */
-  doc_id: zod_default.string().nullable()
-});
-function knowledgeEntryNeedsConsent(entry) {
-  if (entry.change === "drifted") return true;
-  if (entry.change === "changed" || entry.change === "removed") return entry.modified;
-  return false;
-}
-var knowledgeResolutionSchema = zod_default.enum(["apply", "keep", "archive", "recreate", "unbind"]);
-var upgradeResolutionsSchema = zod_default.record(
-  zod_default.string(),
-  zod_default.union([driftResolutionSchema, modificationResolutionSchema, knowledgeResolutionSchema])
-);
-var knowledgeBindConsentSchema = zod_default.record(zod_default.string(), zod_default.string());
-var knowledgeUpgradeResolutionsSchema = zod_default.object({
-  resolutions: zod_default.record(zod_default.string(), knowledgeResolutionSchema).default({}),
-  bind_to: knowledgeBindConsentSchema.default({})
-});
-var knowledgeBoundRefSchema = zod_default.object({
-  alias: zod_default.string(),
-  name: zod_default.string(),
-  /** The bound doc id; null when the bound doc is gone/archived (drift). */
-  doc_id: zod_default.string().nullable()
-});
-var appInstallationConfigValueSchema = zod_default.union([zod_default.string(), zod_default.number(), zod_default.boolean()]);
-var appInstallationConfigSchema = zod_default.record(
-  contractAliasSchema,
-  appInstallationConfigValueSchema
-);
-var appInstallationProvenanceSchema = zod_default.enum(["install", "adopt"]);
-
 // ../shared/src/agent_instructions.ts
 function agentFilePath(alias) {
   return `src/agents/${alias}.md`;
@@ -72712,6 +71397,16 @@ function runNpm(args, cwd) {
     });
   });
 }
+function npmInstallArgs(hasLockfile) {
+  return [hasLockfile ? "ci" : "install", "--ignore-scripts"];
+}
+function runNpmInstall(cwd) {
+  const hasLockfile = fs8.existsSync(path10.join(cwd, "package-lock.json"));
+  console.error(
+    hasLockfile ? "Installing npm dependencies (npm ci \u2014 the lockfile's exact tree, no install scripts)..." : "Installing npm dependencies (no lockfile yet \u2014 resolving ranges, no install scripts)..."
+  );
+  return runNpm(npmInstallArgs(hasLockfile), cwd);
+}
 function readAppWorkspaceId(projectDir) {
   try {
     const pkgPath2 = path10.join(projectDir, "package.json");
@@ -72924,13 +71619,6 @@ function writeAppFields(projectDir, tables) {
   fs8.writeFileSync(file2, generateAppFields(tables));
   return file2;
 }
-function writeBindingAppFields(projectDir, binding) {
-  const dotLotics = path10.join(projectDir, ".lotics");
-  fs8.mkdirSync(dotLotics, { recursive: true });
-  const file2 = path10.join(dotLotics, "app_fields.ts");
-  fs8.writeFileSync(file2, generatePackageAppFields(binding));
-  return file2;
-}
 async function writeGeneratedAppFields(client, projectDir, app, queries) {
   if (client.viewAsMemberId) {
     console.error(
@@ -72939,14 +71627,7 @@ async function writeGeneratedAppFields(client, projectDir, app, queries) {
     return;
   }
   try {
-    if (app.package_id) {
-      const binding = await client.appBinding(app.app_id);
-      const fieldsPath = writeBindingAppFields(projectDir, binding);
-      const count = Object.keys(binding.fields).length;
-      console.error(
-        `Wrote ${fieldsPath} (binding form \u2014 linked to package ${app.package_id}; ${count} field alias${count === 1 ? "" : "es"} resolved per-install)`
-      );
-    } else {
+    {
       const tableIds = resolveCodegenTableIds(projectDir, queries);
       const tables = await client.getWorkspaceSchema(tableIds);
       const missing = tableIds.filter((id) => !tables.some((t) => t.id === id));
@@ -73068,19 +71749,14 @@ function ensureAppVitestSetup(projectDir) {
   const setupPath = path10.join(projectDir, VITEST_SETUP_FILENAME);
   if (!fs8.existsSync(setupPath)) {
     fs8.writeFileSync(setupPath, VITEST_SETUP_CONTENT);
-    console.error(`Wrote ${VITEST_SETUP_FILENAME} (stubs getAppBinding so \`npm test\` collects).`);
-  } else if (!fs8.readFileSync(setupPath, "utf-8").includes("getAppBinding")) {
-    console.error(
-      `\u26A0 ${VITEST_SETUP_FILENAME} exists but does not stub getAppBinding \u2014 \`npm test\` will fail to collect any test that imports the app graph (the binding-form .lotics/app_fields.ts awaits a network call). Add the stub to it:
-${VITEST_SETUP_CONTENT}`
-    );
+    console.error(`Wrote ${VITEST_SETUP_FILENAME} (wired by vite.config.ts; empty until you fill it).`);
   }
   const viteConfigPath = path10.join(projectDir, "vite.config.ts");
   if (!fs8.existsSync(viteConfigPath)) return;
   const viteConfig = fs8.readFileSync(viteConfigPath, "utf-8");
   if (/setupFiles\s*:/.test(viteConfig) && viteConfig.includes(VITEST_SETUP_FILENAME)) return;
   console.error(
-    `\u26A0 vite.config.ts does not wire ${VITEST_SETUP_FILENAME} \u2014 \`npm test\` will fail to collect any test that imports the app graph (the binding-form .lotics/app_fields.ts awaits a network call). Add it to the \`test\` block:
+    `\u26A0 vite.config.ts does not wire ${VITEST_SETUP_FILENAME}. Nothing is broken by that \u2014 it is the slot for global test setup (matchers, stubs, timezone pinning). Add it to the \`test\` block when you need one:
     setupFiles: ["./${VITEST_SETUP_FILENAME}"],`
   );
 }
@@ -73114,7 +71790,7 @@ async function appCodegen(args) {
     await writeGeneratedAppFields(
       args.client,
       projectDir,
-      { app_id: meta3.app_id, package_id: app.package_id },
+      { app_id: meta3.app_id },
       meta3.queries ?? {}
     );
   } catch (err2) {
@@ -73233,8 +71909,7 @@ async function materializeScaffold(targetPath, files) {
   }
   console.error(`Scaffolded ${files.length} files into ${targetPath}`);
   writeAppDts(targetPath, {});
-  console.error("Installing npm dependencies...");
-  await runNpm(["install"], targetPath);
+  await runNpmInstall(targetPath);
   writeAppDtsKitLinks(targetPath);
 }
 async function appCreate(client, args) {
@@ -73340,43 +72015,7 @@ function defaultPullTarget(appId, appName) {
   }
   return appDirName(appName);
 }
-async function appPull(client, args) {
-  const app = await client.getApp(args.app_id);
-  if (!app.current_version_id && args.version === void 0) {
-    throw new Error(
-      `App ${app.id} has no published version yet. Deploy from another machine first, or use 'lotics app create' to scaffold a new app.`
-    );
-  }
-  const versionId = args.version ?? app.current_version_id;
-  if (!versionId) throw new Error(`App ${app.id} has no version to pull.`);
-  const version2 = await client.getAppVersion(app.id, versionId);
-  const sourceUrl = await client.getAppVersionSourceUrl(app.id, version2.id);
-  const targetPath = path10.resolve(args.targetPath ?? defaultPullTarget(app.id, app.name));
-  fs8.mkdirSync(targetPath, { recursive: true });
-  const prior = readPriorStamp(targetPath);
-  const tmpFile = path10.join(tmpdir(), `lotics-app-${app.id}-${Date.now()}.tar.gz`);
-  console.error(`Downloading source archive...`);
-  await downloadToFile(sourceUrl, tmpFile);
-  const keptLocal = [];
-  const stagingDir = fs8.mkdtempSync(path10.join(tmpdir(), `lotics-pull-${app.id}-`));
-  try {
-    await runTar(["-xzf", tmpFile, "-C", stagingDir], stagingDir);
-    console.error(`Extracting to ${targetPath}...`);
-    keptLocal.push(
-      ...copyTree(stagingDir, targetPath, {
-        overwrite: args.force === true,
-        skip: [WORKFLOWS_DIR, AGENTS_DIR].map((d) => d.split(path10.sep).join("/"))
-      })
-    );
-  } finally {
-    if (fs8.existsSync(tmpFile)) fs8.unlinkSync(tmpFile);
-    fs8.rmSync(stagingDir, { recursive: true, force: true });
-  }
-  const stamp = stampAfterPull({
-    prior,
-    pulled: { id: versionId, number: version2.version },
-    keptCount: keptLocal.length
-  });
+async function hydrateAppProject(client, targetPath, app, opts) {
   stampPulledManifest(targetPath, {
     app_id: app.id,
     workspace_id: app.workspace_id,
@@ -73384,8 +72023,8 @@ async function appPull(client, args) {
     // after pulling an OLD one would let the next deploy ship that old source as
     // if it were built on the newest — the version guard exists to refuse
     // exactly that, and it can only do so if this tells the truth.
-    current_version_id: stamp.id,
-    version_number: stamp.number,
+    current_version_id: opts.stamp.id,
+    version_number: opts.stamp.number,
     workflows: app.workflows ?? {},
     queries: app.queries ?? {},
     agents: app.agents ?? {}
@@ -73397,14 +72036,14 @@ async function appPull(client, args) {
   await writeGeneratedAppFields(
     client,
     targetPath,
-    { app_id: app.id, package_id: app.package_id },
+    { app_id: app.id },
     app.queries ?? {}
   );
   const workflows = app.workflows ?? {};
   if (Object.keys(workflows).length > 0) {
     const written = await writeWorkflowFiles(client, targetPath, app.id, app.name, workflows, {
-      overwrite: args.force === true,
-      kept: keptLocal
+      overwrite: opts.force === true,
+      kept: opts.kept
     });
     if (written.length > 0) {
       console.error(
@@ -73415,8 +72054,8 @@ async function appPull(client, args) {
   const agents = app.agents ?? {};
   if (Object.keys(agents).length > 0) {
     const written = writeAgentFiles(targetPath, agents, {
-      overwrite: args.force === true,
-      kept: keptLocal
+      overwrite: opts.force === true,
+      kept: opts.kept
     });
     for (const alias of written) {
       const instructions = agents[alias]?.instructions;
@@ -73430,9 +72069,51 @@ async function appPull(client, args) {
       );
     }
   }
-  console.error(`Installing npm dependencies...`);
-  await runNpm(["install"], targetPath);
+  await runNpmInstall(targetPath);
   writeAppDtsKitLinks(targetPath);
+}
+async function appPull(client, args) {
+  const app = await client.getApp(args.app_id);
+  if (!app.current_version_id && args.version === void 0) {
+    throw new Error(
+      `App ${app.id} has no published version yet. Deploy from another machine first, or use 'lotics app create' to scaffold a new app.`
+    );
+  }
+  const versionId = args.version ?? app.current_version_id;
+  if (!versionId) throw new Error(`App ${app.id} has no version to pull.`);
+  const version2 = await client.getAppVersion(app.id, versionId);
+  const sourceUrl = await client.getAppVersionSourceUrl(app.id, version2.id);
+  const targetPath = path10.resolve(args.targetPath ?? defaultPullTarget(app.id, app.name));
+  fs8.mkdirSync(targetPath, { recursive: true });
+  const prior = readPriorStamp(targetPath);
+  const tmpFile = path10.join(tmpdir(), `lotics-app-${app.id}-${Date.now()}.tar.gz`);
+  console.error(`Downloading source archive...`);
+  await downloadToFile(sourceUrl, tmpFile);
+  const keptLocal = [];
+  const stagingDir = fs8.mkdtempSync(path10.join(tmpdir(), `lotics-pull-${app.id}-`));
+  try {
+    await runTar(["-xzf", tmpFile, "-C", stagingDir], stagingDir);
+    console.error(`Extracting to ${targetPath}...`);
+    keptLocal.push(
+      ...copyTree(stagingDir, targetPath, {
+        overwrite: args.force === true,
+        skip: [WORKFLOWS_DIR, AGENTS_DIR].map((d) => d.split(path10.sep).join("/"))
+      })
+    );
+  } finally {
+    if (fs8.existsSync(tmpFile)) fs8.unlinkSync(tmpFile);
+    fs8.rmSync(stagingDir, { recursive: true, force: true });
+  }
+  const stamp = stampAfterPull({
+    prior,
+    pulled: { id: versionId, number: version2.version },
+    keptCount: keptLocal.length
+  });
+  await hydrateAppProject(client, targetPath, app, {
+    stamp: { id: stamp.id, number: stamp.number },
+    ...args.force !== void 0 ? { force: args.force } : {},
+    kept: keptLocal
+  });
   reportKeptLocalFiles(keptLocal, app.id, {
     // `prior` is non-null whenever the stamp was held — `stampAfterPull` cannot
     // hold against nothing — so the fallback only covers the un-held branch,
@@ -73490,7 +72171,7 @@ async function appDeploy(client, args) {
     await writeGeneratedAppFields(
       client,
       projectDir,
-      { app_id: meta3.app_id, package_id: liveApp.package_id },
+      { app_id: meta3.app_id },
       meta3.queries ?? {}
     );
   } catch (err2) {
@@ -73650,80 +72331,6 @@ async function readLiveQueries(client, appId) {
     process.exit(1);
   }
 }
-async function installCommand(client, args) {
-  const res = await client.installPackage(args.packageId, {});
-  if (res.kind === "app") {
-    const { app } = res;
-    console.error(
-      `Installed "${app.name}" (${app.id})` + (app.package_version !== null ? ` at v${app.package_version}` : "") + `.
-  Open it from the workspace's app launcher.
-  To work on it locally:  lotics app pull ${app.id}
-  To give it an address:  lotics app subdomain <slug>   (from inside that project)`
-    );
-    reportKnowledgeWarnings(res.knowledge_warnings);
-    return;
-  }
-  console.error(
-    `Installed content package (${res.installation.id}).
-  Its documents and templates are now in this workspace.`
-  );
-  reportKnowledgeWarnings(res.warnings);
-}
-function reportKnowledgeWarnings(warnings) {
-  const missing = warnings.missing_expected_docs;
-  if (missing.length === 0) return;
-  console.error(
-    `
-\u26A0 ${missing.length} expected knowledge doc(s) are missing from this workspace:
-` + missing.map((name2) => `  \u2022 ${name2}`).join("\n") + `
-  An agent declaring one of these reads nothing from it \u2014 the run still completes,
-  answering from nowhere. Create them, then re-run the install.`
-  );
-}
-async function upgradeCommand(client, args) {
-  const projectDir = path10.resolve(args.projectDir ?? process.cwd());
-  const meta3 = readAppMeta(projectDir);
-  const plan = await client.previewPackageUpgrade(meta3.app_id, {});
-  if (plan.from_version === plan.to_version) {
-    console.error(`Already on v${plan.from_version} \u2014 nothing to take.`);
-    return;
-  }
-  const blockers = [
-    ...plan.diff.breaking.map(
-      (b) => `  \u2022 breaking: ${b.entity}.${b.alias} ${b.kind} ${b.from} \u2192 ${b.to}`
-    ),
-    ...plan.modified.map(
-      (m) => `  \u2022 locally modified: ${m.kind} "${m.alias}"` + (m.baseline_unknown === true ? " (no baseline recorded \u2014 cannot tell what changed)" : "")
-    ),
-    ...plan.drift.map((d) => `  \u2022 drifted: ${d.namespace} "${d.alias}"`),
-    // The FOURTH refusal source, and the one this originally missed. The server
-    // throws a BadRequestError for every entry `knowledgeEntryNeedsConsent`
-    // accepts, so leaving it out did not make those upgrades work — it swapped
-    // the carefully-framed refusal for a raw wire 400. Read the canonical
-    // predicate rather than re-deriving the rule: a hand-listed subset of a
-    // server-side decision is how three of four got covered in the first place.
-    ...plan.knowledge.filter(knowledgeEntryNeedsConsent).map(
-      (k) => `  \u2022 knowledge: "${k.alias}" (${k.change}${k.modified ? ", locally edited" : ""})`
-    )
-  ];
-  if (blockers.length > 0) {
-    console.error(
-      `v${plan.from_version} \u2192 v${plan.to_version} needs decisions this command will not make for you:
-` + blockers.join("\n") + `
-
-  Each one resolves by choosing what to KEEP, and guessing would discard
-  work nobody asked to lose. Resolve them, or ask an operator to run the
-  upgrade with explicit resolutions.`
-    );
-    process.exit(1);
-  }
-  const applied = await client.upgradePackage(meta3.app_id, { version: plan.to_version });
-  console.error(
-    `Upgraded to v${applied.package_version ?? plan.to_version}.` + (plan.changelog ? `
-  ${plan.changelog}` : "") + `
-  Run \`lotics app pull\` to bring this checkout in step.`
-  );
-}
 async function appCheck(client, args = {}) {
   const projectDir = path10.resolve(args.projectDir ?? process.cwd());
   const meta3 = readAppMeta(projectDir);
@@ -74669,6 +73276,10 @@ function parseArgs(argv) {
     printCreated: false,
     cleanup: false,
     prune: false,
+    noSampleData: false,
+    adopt: false,
+    entity: [],
+    limit: void 0,
     version: false,
     help: false
   };
@@ -74773,6 +73384,20 @@ function parseArgs(argv) {
       case "--cleanup":
         flags.cleanup = true;
         break;
+      case "--no-sample-data":
+        flags.noSampleData = true;
+        break;
+      case "--adopt":
+        flags.adopt = true;
+        break;
+      // Comma-separated AND repeatable, like `--tags` above: an agent scripting
+      // this reaches for whichever form it knows, and both accumulate.
+      case "--entity":
+        flags.entity = [...flags.entity, ...splitList(argv[++i2])];
+        break;
+      case "--limit":
+        flags.limit = argv[++i2];
+        break;
       case "--prune":
         flags.prune = true;
         break;
@@ -74816,6 +73441,207 @@ function parseArgs(argv) {
   return { command, subcommand, toolArgs, restArgs, flags, unknownFlag };
 }
 
+// src/starter_commands.ts
+import fs9 from "node:fs";
+import path11 from "node:path";
+import { tmpdir as tmpdir2 } from "node:os";
+async function starterList(client) {
+  const starters = await client.listStarters();
+  if (starters.length === 0) {
+    console.error(
+      "No starters available to this organization.\n  A starter is copyable when Lotics has reviewed it, or when your own organization published it."
+    );
+    return;
+  }
+  const width = Math.max(...starters.map((s) => s.id.length));
+  console.error(`${starters.length} starter${starters.length === 1 ? "" : "s"}:
+`);
+  for (const s of starters) {
+    const tags = [
+      s.is_official ? "official" : null,
+      s.owned_by_caller === true ? "yours" : null
+    ].filter((t) => t !== null);
+    console.log(
+      `  ${s.id.padEnd(width)}  ${s.name}${tags.length > 0 ? `  [${tags.join(", ")}]` : ""}`
+    );
+    if (s.description) console.log(`  ${" ".repeat(width)}  ${s.description}`);
+  }
+  console.error(`
+  lotics starter init <starter_id>   Copy one into this workspace`);
+}
+async function starterShow(client, starter_id) {
+  const starter = await client.getPackage(starter_id);
+  console.log(`${starter.name}  (${starter.id})`);
+  if (starter.description) console.log(starter.description);
+  console.log(
+    `
+version   ${starter.latest_version}
+trust     ${starter.is_official ? "official \u2014 reviewed by Lotics" : starter.owned_by_caller === true ? "your organization's own" : "not copyable from this organization"}`
+  );
+  if (starter.retired_at !== null) {
+    console.log(`retired   ${starter.retired_at} \u2014 can no longer be copied`);
+  }
+}
+function reportKnowledgeWarnings(warnings) {
+  const missing = warnings.missing_expected_docs;
+  if (missing.length === 0) return;
+  console.error(
+    `
+\u26A0 ${missing.length} knowledge doc(s) this starter's agents expect are missing here:
+` + missing.map((name2) => `  \u2022 ${name2}`).join("\n") + `
+  An agent declaring one of these reads nothing from it \u2014 the run still completes,
+  answering from nowhere. Create them with those names, or edit the agent.`
+  );
+}
+async function starterInit(client, args) {
+  const starter = await client.getPackage(args.starter_id);
+  console.error(
+    `Copying ${starter.name}${starter.is_official ? " (official)" : ""} into this workspace\u2026`
+  );
+  const result = await client.instantiateStarter(args.starter_id, {
+    ...args.noSampleData === true ? { no_sample_data: true } : {},
+    ...args.adopt === true ? { adopt: true } : {}
+  });
+  const entities = Object.keys(result.binding.entities ?? {}).length;
+  const docs = Object.keys(result.binding.knowledge ?? {}).length;
+  const templates = Object.keys(result.binding.templates ?? {}).length;
+  const records = Object.values(result.sample_record_ids).reduce((n, ids) => n + ids.length, 0);
+  console.error(
+    `  Created ${entities} table${entities === 1 ? "" : "s"}, ${templates} template${templates === 1 ? "" : "s"}, ${docs} knowledge doc${docs === 1 ? "" : "s"}, ${records} sample record${records === 1 ? "" : "s"}.`
+  );
+  reportKnowledgeWarnings(result.knowledge_warnings);
+  if (result.app_id === null || result.bundle_url === null) {
+    console.error(`
+Done. The documents and knowledge are yours to edit \u2014 nothing links back.`);
+    return;
+  }
+  const targetPath = path11.resolve(args.targetPath ?? appDirName(starter.name));
+  if (fs9.existsSync(targetPath) && fs9.readdirSync(targetPath).length > 0) {
+    throw new Error(
+      `Target directory ${targetPath} is not empty. The app (${result.app_id}) was created \u2014 pass an empty path and re-run, or finish it with "lotics app pull ${result.app_id}".`
+    );
+  }
+  fs9.mkdirSync(targetPath, { recursive: true });
+  console.error(`Downloading source\u2026`);
+  const bundleFile = path11.join(tmpdir2(), `lotics-starter-${args.starter_id}-${process.pid}.tar.gz`);
+  const wrapperDir = fs9.mkdtempSync(path11.join(tmpdir2(), `lotics-starter-`));
+  try {
+    await downloadToFile(result.bundle_url, bundleFile);
+    await runTar(["-xzf", bundleFile, "-C", wrapperDir], wrapperDir);
+    const sourceArchive = path11.join(wrapperDir, "source.tar.gz");
+    if (!fs9.existsSync(sourceArchive)) {
+      throw new Error(
+        `Starter bundle carried no source.tar.gz \u2014 the app (${result.app_id}) exists but has no code. Report this to the starter's publisher.`
+      );
+    }
+    await runTar(["-xzf", sourceArchive, "-C", targetPath], targetPath);
+  } finally {
+    if (fs9.existsSync(bundleFile)) fs9.unlinkSync(bundleFile);
+    fs9.rmSync(wrapperDir, { recursive: true, force: true });
+  }
+  for (const dir of ["knowledge", "fixtures"]) {
+    fs9.rmSync(path11.join(targetPath, dir), { recursive: true, force: true });
+  }
+  const app = await client.getApp(result.app_id);
+  const kept = [];
+  await hydrateAppProject(client, targetPath, app, {
+    // Nothing is deployed yet; the build below is what mints v1.
+    stamp: { id: null, number: null },
+    kept
+  });
+  if (starter.owned_by_caller !== true) {
+    console.error(
+      `
+Building ${starter.name} \u2014 this runs its build on your machine (its package scripts
+  and vite config are the publisher's code, executed as you).${starter.is_official ? " Lotics reviewed this starter." : ""}`
+    );
+  } else {
+    console.error(`Building and deploying\u2026`);
+  }
+  await runNpm(["run", "build"], targetPath);
+  await appDeploy(client, {
+    projectDir: targetPath,
+    message: `Copied from starter ${starter.name}`
+  });
+  let signInUrl = null;
+  try {
+    const link = await client.login({
+      return_link: true,
+      redirect_path: `/apps/${result.app_id}`
+    });
+    signInUrl = link.url ?? null;
+  } catch (error52) {
+    console.error(
+      `
+  (no sign-in link: ${error52 instanceof Error ? error52.message : String(error52)})
+  The copy is complete either way \u2014 open it with "lotics auth web".`
+    );
+    signInUrl = null;
+  }
+  console.error(
+    `
+Done \u2014 ${starter.name} is live and yours.
+  App:     ${result.app_id}
+  Project: ${targetPath}
+
+  Edit anything: the tables, the app source, the templates, the docs. There is no
+  link back to the starter and nothing to upgrade \u2014 this is your app now.
+  Ship a change:  cd ${path11.relative(process.cwd(), targetPath) || "."} && lotics app deploy -m "<what changed>"`
+  );
+  if (records > 0) {
+    console.error(
+      `
+  ${records} sample record${records === 1 ? "" : "s"} came with it. They are ordinary records \u2014
+  delete them whenever you like, or re-run with --no-sample-data next time.`
+    );
+  }
+  if (signInUrl !== null) {
+    console.error(
+      `
+  Open it \u2014 one-time sign-in link, expires in 15 minutes:
+    ${signInUrl}`
+    );
+  }
+}
+async function starterFixturesCapture(client, args) {
+  const projectDir = path11.resolve(args.projectDir ?? process.cwd());
+  const meta3 = readAppMeta(projectDir);
+  const result = await client.captureStarterFixtures(meta3.app_id, {
+    entities: args.entities,
+    ...args.limit !== void 0 ? { limit: args.limit } : {}
+  });
+  const fixturesDir = path11.join(projectDir, "fixtures");
+  fs9.mkdirSync(fixturesDir, { recursive: true });
+  let totalRows = 0;
+  for (const entry of result.captured) {
+    const file2 = path11.join(projectDir, entry.content_ref);
+    fs9.writeFileSync(file2, `${JSON.stringify(entry.file, null, 2)}
+`, "utf-8");
+    totalRows += entry.file.rows.length;
+    console.error(
+      `  ${entry.content_ref}  \u2014  ${entry.file.rows.length} row${entry.file.rows.length === 1 ? "" : "s"}`
+    );
+    for (const note of entry.notes) console.error(`      \u26A0 ${note}`);
+  }
+  if (result.captured.length === 0) {
+    console.error(
+      `This app declares no tables, so there is nothing to capture.
+  Entities available: ${result.available_entity_aliases.join(", ") || "(none)"}`
+    );
+    return;
+  }
+  console.error(
+    `
+Captured ${totalRows} row${totalRows === 1 ? "" : "s"} across ${result.captured.length} entit${result.captured.length === 1 ? "y" : "ies"}.
+
+  READ WHAT IT WROTE before committing. These rows ship inside the starter and are
+  created in every workspace that copies it \u2014 a real customer name, a real price or a
+  real address captured here is published.
+
+  Entities available: ${result.available_entity_aliases.join(", ")}`
+  );
+}
+
 // src/inputs.ts
 async function ingestJsonArgs(opts) {
   let raw = opts.rawArg;
@@ -74875,11 +73701,11 @@ async function validateOrgWorkspacePin(client, orgId, profile) {
 }
 
 // src/xlsx.ts
-import fs10 from "node:fs";
+import fs11 from "node:fs";
 
 // src/file_command_io.ts
-import fs9 from "node:fs";
-import path11 from "node:path";
+import fs10 from "node:fs";
+import path12 from "node:path";
 var CliError = class extends Error {
   constructor(message2) {
     super(message2);
@@ -74900,14 +73726,14 @@ function rejectExtraArgs(rest2, arity, usage) {
   fail2(`${usage} takes ${arity} argument${arity === 1 ? "" : "s"} after <file>, got ${rest2.length}. Unused: ${rest2.slice(arity).join(" ")}`);
 }
 function writeFileAtomic(filePath, bytes) {
-  const dir = path11.dirname(path11.resolve(filePath));
-  const tmp = path11.join(dir, `.${path11.basename(filePath)}.${process.pid}.${Date.now()}.tmp`);
-  fs9.writeFileSync(tmp, bytes);
+  const dir = path12.dirname(path12.resolve(filePath));
+  const tmp = path12.join(dir, `.${path12.basename(filePath)}.${process.pid}.${Date.now()}.tmp`);
+  fs10.writeFileSync(tmp, bytes);
   try {
-    fs9.renameSync(tmp, filePath);
+    fs10.renameSync(tmp, filePath);
   } catch (error52) {
     try {
-      fs9.unlinkSync(tmp);
+      fs10.unlinkSync(tmp);
     } catch {
     }
     throw error52;
@@ -77704,16 +76530,16 @@ var MatcherView = class {
    * @returns {string|undefined}
    */
   getCurrentTag() {
-    const path13 = this._matcher.path;
-    return path13.length > 0 ? path13[path13.length - 1].tag : void 0;
+    const path14 = this._matcher.path;
+    return path14.length > 0 ? path14[path14.length - 1].tag : void 0;
   }
   /**
    * Get current namespace.
    * @returns {string|undefined}
    */
   getCurrentNamespace() {
-    const path13 = this._matcher.path;
-    return path13.length > 0 ? path13[path13.length - 1].namespace : void 0;
+    const path14 = this._matcher.path;
+    return path14.length > 0 ? path14[path14.length - 1].namespace : void 0;
   }
   /**
    * Get current node's attribute value.
@@ -77721,9 +76547,9 @@ var MatcherView = class {
    * @returns {*}
    */
   getAttrValue(attrName) {
-    const path13 = this._matcher.path;
-    if (path13.length === 0) return void 0;
-    return path13[path13.length - 1].values?.[attrName];
+    const path14 = this._matcher.path;
+    if (path14.length === 0) return void 0;
+    return path14[path14.length - 1].values?.[attrName];
   }
   /**
    * Check if current node has an attribute.
@@ -77731,9 +76557,9 @@ var MatcherView = class {
    * @returns {boolean}
    */
   hasAttr(attrName) {
-    const path13 = this._matcher.path;
-    if (path13.length === 0) return false;
-    const current = path13[path13.length - 1];
+    const path14 = this._matcher.path;
+    if (path14.length === 0) return false;
+    const current = path14[path14.length - 1];
     return current.values !== void 0 && attrName in current.values;
   }
   /**
@@ -77759,18 +76585,18 @@ var MatcherView = class {
    * @returns {number}
    */
   getPosition() {
-    const path13 = this._matcher.path;
-    if (path13.length === 0) return -1;
-    return path13[path13.length - 1].position ?? 0;
+    const path14 = this._matcher.path;
+    if (path14.length === 0) return -1;
+    return path14[path14.length - 1].position ?? 0;
   }
   /**
    * Get current node's repeat counter (occurrence count of this tag name).
    * @returns {number}
    */
   getCounter() {
-    const path13 = this._matcher.path;
-    if (path13.length === 0) return -1;
-    return path13[path13.length - 1].counter ?? 0;
+    const path14 = this._matcher.path;
+    if (path14.length === 0) return -1;
+    return path14[path14.length - 1].counter ?? 0;
   }
   /**
    * Get current node's sibling index (alias for getPosition).
@@ -80651,14 +79477,14 @@ function isOle2(bytes) {
 }
 function readCfbStreams(bytes) {
   const dv = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  const u162 = (o) => dv.getUint16(o, true);
-  const u32 = (o) => dv.getUint32(o, true);
-  const sectorSize = 1 << u162(30);
-  const miniSectorSize = 1 << u162(32);
-  const firstDirSector = u32(48);
-  const miniCutoff = u32(56);
-  const firstMiniFatSector = u32(60);
-  const firstDifatSector = u32(68);
+  const u163 = (o) => dv.getUint16(o, true);
+  const u322 = (o) => dv.getUint32(o, true);
+  const sectorSize = 1 << u163(30);
+  const miniSectorSize = 1 << u163(32);
+  const firstDirSector = u322(48);
+  const miniCutoff = u322(56);
+  const firstMiniFatSector = u322(60);
+  const firstDifatSector = u322(68);
   if (sectorSize < 512 || sectorSize > 1 << 20) {
     throw new Error("Unsupported OLE2 file: invalid sector size");
   }
@@ -80666,7 +79492,7 @@ function readCfbStreams(bytes) {
   const maxSectors = Math.ceil(bytes.length / sectorSize) + 1;
   const difat = [];
   for (let i2 = 0; i2 < 109; i2++) {
-    const v = u32(76 + i2 * 4);
+    const v = u322(76 + i2 * 4);
     if (v !== FREESECT) difat.push(v);
   }
   let ds = firstDifatSector;
@@ -80676,10 +79502,10 @@ function readCfbStreams(bytes) {
     seenDifat.add(ds);
     const base = sectorOffset(ds);
     for (let i2 = 0; i2 < entriesPerSector - 1; i2++) {
-      const v = u32(base + i2 * 4);
+      const v = u322(base + i2 * 4);
       if (v !== FREESECT) difat.push(v);
     }
-    ds = u32(base + (entriesPerSector - 1) * 4);
+    ds = u322(base + (entriesPerSector - 1) * 4);
   }
   const fat = [];
   for (const fatSector of difat) {
@@ -80687,7 +79513,7 @@ function readCfbStreams(bytes) {
     if (fatSector >= maxSectors) continue;
     const base = sectorOffset(fatSector);
     for (let i2 = 0; i2 < entriesPerSector && fat.length < maxSectors; i2++) {
-      fat.push(u32(base + i2 * 4));
+      fat.push(u322(base + i2 * 4));
     }
   }
   const readChain = (src, start, size2, ss, offOf, chain2) => {
@@ -83428,10 +82254,10 @@ function resolveRelativePath(basePath, relativePath) {
   }
   return resolved.join("/");
 }
-function findZipEntry(zipEntries, path13) {
-  if (zipEntries[path13]) return zipEntries[path13];
-  if (zipEntries[`xl/${path13}`]) return zipEntries[`xl/${path13}`];
-  const noSlash = path13.replace(/^\//, "");
+function findZipEntry(zipEntries, path14) {
+  if (zipEntries[path14]) return zipEntries[path14];
+  if (zipEntries[`xl/${path14}`]) return zipEntries[`xl/${path14}`];
+  const noSlash = path14.replace(/^\//, "");
   if (zipEntries[noSlash]) return zipEntries[noSlash];
   return void 0;
 }
@@ -84547,6 +83373,221 @@ function ensureVmlArray(val) {
   return Array.isArray(val) ? val : [val];
 }
 
+// ../xlsx/src/biff8_styles.ts
+var DEFAULT_PALETTE = [
+  "#000000",
+  "#FFFFFF",
+  "#FF0000",
+  "#00FF00",
+  "#0000FF",
+  "#FFFF00",
+  "#FF00FF",
+  "#00FFFF",
+  "#000000",
+  "#FFFFFF",
+  "#FF0000",
+  "#00FF00",
+  "#0000FF",
+  "#FFFF00",
+  "#FF00FF",
+  "#00FFFF",
+  "#800000",
+  "#008000",
+  "#000080",
+  "#808000",
+  "#800080",
+  "#008080",
+  "#C0C0C0",
+  "#808080",
+  "#9999FF",
+  "#993366",
+  "#FFFFCC",
+  "#CCFFFF",
+  "#660066",
+  "#FF8080",
+  "#0066CC",
+  "#CCCCFF",
+  "#000080",
+  "#FF00FF",
+  "#FFFF00",
+  "#00FFFF",
+  "#800080",
+  "#800000",
+  "#008080",
+  "#0000FF",
+  "#00CCFF",
+  "#CCFFFF",
+  "#CCFFCC",
+  "#FFFF99",
+  "#99CCFF",
+  "#FF99CC",
+  "#CC99FF",
+  "#FFCC99",
+  "#3366FF",
+  "#33CCCC",
+  "#99CC00",
+  "#FFCC00",
+  "#FF9900",
+  "#FF6600",
+  "#666699",
+  "#969696",
+  "#003366",
+  "#339966",
+  "#003300",
+  "#333300",
+  "#993300",
+  "#993366",
+  "#333399",
+  "#333333"
+];
+var AUTOMATIC = /* @__PURE__ */ new Set([64, 65, 32767]);
+var u162 = (b, o) => b[o] | b[o + 1] << 8;
+var u32 = (b, o) => (u162(b, o) | u162(b, o + 2) << 16) >>> 0;
+function parsePalette(body) {
+  const palette = [...DEFAULT_PALETTE];
+  const count = u162(body, 0);
+  for (let i2 = 0; i2 < count && 2 + i2 * 4 + 3 < body.length; i2++) {
+    const o = 2 + i2 * 4;
+    const hex3 = (n) => n.toString(16).padStart(2, "0").toUpperCase();
+    palette[8 + i2] = `#${hex3(body[o])}${hex3(body[o + 1])}${hex3(body[o + 2])}`;
+  }
+  return palette;
+}
+function defaultPalette() {
+  return [...DEFAULT_PALETTE];
+}
+function parseFont2(body) {
+  const grbit = u162(body, 2);
+  const uls = body[10];
+  const sss = u162(body, 8);
+  let name2 = "";
+  if (body.length > 15) {
+    const cch = body[14];
+    const high = (body[15] & 1) !== 0;
+    for (let i2 = 0; i2 < cch; i2++) {
+      const o = 16 + (high ? i2 * 2 : i2);
+      if (o >= body.length) break;
+      name2 += String.fromCharCode(high ? body[o] | body[o + 1] << 8 : body[o]);
+    }
+  }
+  return {
+    size: u162(body, 0) / 20,
+    bold: u162(body, 6) >= 600,
+    italic: (grbit & 2) !== 0,
+    strike: (grbit & 8) !== 0,
+    underline: uls === 1 || uls === 33 ? "single" : uls === 2 || uls === 34 ? "double" : void 0,
+    vertAlign: sss === 1 ? "superscript" : sss === 2 ? "subscript" : void 0,
+    colorIndex: u162(body, 4),
+    name: name2
+  };
+}
+function parseXf2(body) {
+  const alignByte = body[6] ?? 0;
+  const indentByte = body[8] ?? 0;
+  const b1 = u32(body, 10);
+  const b22 = u32(body, 14);
+  const fill = u162(body, 18);
+  const HORIZ = [
+    void 0,
+    "left",
+    "center",
+    "right",
+    void 0,
+    void 0,
+    "center"
+  ];
+  const VERT = ["top", "middle", "bottom", "middle", "middle"];
+  const rot = body[7] ?? 0;
+  return {
+    fontIndex: u162(body, 0),
+    horizontal: HORIZ[alignByte & 7],
+    vertical: VERT[alignByte >> 4 & 7],
+    wrap: (alignByte & 8) !== 0,
+    shrink: (indentByte & 16) !== 0,
+    indent: indentByte & 15,
+    // 0–90 means degrees; 91–180 means −1…−90; 255 is stacked/vertical text.
+    rotation: rot === 255 ? 255 : rot <= 90 ? rot : -(rot - 90),
+    borders: {
+      left: b1 & 15,
+      right: b1 >> 4 & 15,
+      top: b1 >> 8 & 15,
+      bottom: b1 >> 12 & 15,
+      leftColor: b1 >> 16 & 127,
+      rightColor: b1 >> 23 & 127,
+      topColor: b22 & 127,
+      bottomColor: b22 >> 7 & 127
+    },
+    fillPattern: b22 >>> 26 & 63,
+    fillFore: fill & 127,
+    fillBack: fill >> 7 & 127
+  };
+}
+var BORDER_STYLES = [
+  "none",
+  "thin",
+  "medium",
+  "dashed",
+  "dotted",
+  "thick",
+  "double",
+  "hair",
+  "mediumDashed",
+  "dashDot",
+  "mediumDashDot",
+  "dashDotDot",
+  "mediumDashDotDot",
+  "slantDashDot"
+];
+var BORDER_WIDTH = { thick: 3, medium: 2, mediumDashed: 2, mediumDashDot: 2, mediumDashDotDot: 2, double: 3, hair: 1 };
+function colorOf(index, palette) {
+  if (AUTOMATIC.has(index)) return void 0;
+  return palette[index];
+}
+function borderOf(style, colorIndex, palette) {
+  if (style === 0) return void 0;
+  const name2 = BORDER_STYLES[style] ?? "thin";
+  return { width: BORDER_WIDTH[name2] ?? 1, style: name2, color: colorOf(colorIndex, palette) ?? "#000000" };
+}
+function toCellStyle(xf, fonts, palette) {
+  const style = {};
+  const font = fonts[xf.fontIndex];
+  if (font) {
+    if (font.bold) style.fontBold = true;
+    if (font.italic) style.fontItalic = true;
+    if (font.strike) style.fontStrike = true;
+    if (font.underline) style.fontUnderline = font.underline;
+    if (font.vertAlign) style.fontVertAlign = font.vertAlign;
+    if (font.size > 0) style.fontSize = font.size;
+    if (font.name) style.fontName = font.name;
+    const color = colorOf(font.colorIndex, palette);
+    if (color) style.fontColor = color;
+  }
+  if (xf.horizontal) style.horizontalAlign = xf.horizontal;
+  if (xf.vertical) style.verticalAlign = xf.vertical;
+  if (xf.wrap) style.wrapText = true;
+  if (xf.shrink) style.shrinkToFit = true;
+  if (xf.indent > 0) style.indent = xf.indent;
+  if (xf.rotation === 255) style.textRotation = "vertical";
+  else if (xf.rotation !== 0) style.textRotation = xf.rotation;
+  const left = borderOf(xf.borders.left, xf.borders.leftColor, palette);
+  const right = borderOf(xf.borders.right, xf.borders.rightColor, palette);
+  const top = borderOf(xf.borders.top, xf.borders.topColor, palette);
+  const bottom = borderOf(xf.borders.bottom, xf.borders.bottomColor, palette);
+  if (left) style.borderLeft = left;
+  if (right) style.borderRight = right;
+  if (top) style.borderTop = top;
+  if (bottom) style.borderBottom = bottom;
+  if (xf.fillPattern === 1) {
+    const bg = colorOf(xf.fillFore, palette);
+    if (bg) style.backgroundColor = bg;
+  } else if (xf.fillPattern > 1) {
+    const bg = colorOf(xf.fillBack, palette);
+    if (bg) style.backgroundColor = bg;
+    style.patternType = "gray125";
+  }
+  return style;
+}
+
 // ../xlsx/src/biff8_reader.ts
 var DEFAULT_MAX_ROWS = 1e4;
 var REC = {
@@ -84568,7 +83609,12 @@ var REC = {
   MULBLANK: 190,
   LABELSST: 253,
   SST: 252,
-  BOF: 2057
+  BOF: 2057,
+  DEFCOLWIDTH: 85,
+  COLINFO: 125,
+  FONT: 49,
+  PALETTE: 146,
+  ROW: 520
 };
 function* iterRecords(stream, from, to) {
   const dv = new DataView(stream.buffer, stream.byteOffset, stream.byteLength);
@@ -84586,6 +83632,9 @@ function parseGlobals(stream) {
   const sstChunks = [];
   const formats = /* @__PURE__ */ new Map();
   const xfFormatIds = [];
+  const xfRecords = [];
+  const fonts = [];
+  let palette = null;
   const boundsheets = [];
   let date1904 = false;
   let sawSst = false;
@@ -84629,8 +83678,17 @@ function parseGlobals(stream) {
       }
       case REC.XF: {
         xfFormatIds.push(readU16(r.body, 2));
+        xfRecords.push(r.body.slice());
+        break;
+      }
+      case REC.FONT: {
+        fonts.push(parseFont2(r.body));
+        if (fonts.length === 4) fonts.push(fonts[3]);
         break;
       }
+      case REC.PALETTE:
+        palette = parsePalette(r.body);
+        break;
       case REC.BOUNDSHEET: {
         const pos = dv.getUint32(r.offset + 4, true);
         boundsheets.push({ name: readUnicodeShort(r.body, 6, 1), pos });
@@ -84642,7 +83700,9 @@ function parseGlobals(stream) {
   }
   const sst = parseSst(sstChunks, sstUnique);
   const xfFormats = xfFormatIds.map((id) => formats.get(id) ?? builtinFormat(id));
-  return { sst, date1904, xfFormats, boundsheets };
+  const pal = palette ?? defaultPalette();
+  const xfStyles = xfRecords.map((body) => toCellStyle(parseXf2(body), fonts, pal));
+  return { sst, date1904, xfFormats, xfStyles, boundsheets };
 }
 function parseSst(chunks, count) {
   const out = [];
@@ -84727,26 +83787,55 @@ function parseSheet2(stream, start, name2, g, maxRows) {
       break;
     }
   }
+  const colDefs = /* @__PURE__ */ new Map();
+  const rowHeights = /* @__PURE__ */ new Map();
+  const hiddenRows = /* @__PURE__ */ new Set();
   for (const r of iterRecords(stream, start, end)) {
     switch (r.type) {
+      case REC.DEFCOLWIDTH: {
+        sheet.defaultColWidth = readU16(r.body, 0);
+        break;
+      }
+      case REC.COLINFO: {
+        const first3 = readU16(r.body, 0), last3 = readU16(r.body, 2);
+        const width = readU16(r.body, 4) / 256;
+        const grbit = readU16(r.body, 8);
+        const hidden = (grbit & 1) !== 0;
+        const outline = grbit >> 8 & 7;
+        for (let c = first3; c <= last3 && c <= 255; c++) {
+          colDefs.set(c, { index: c + 1, width, hidden, customWidth: true });
+          if (outline > 0) sheet.colOutlineLevels.set(c + 1, outline);
+        }
+        break;
+      }
+      case REC.ROW: {
+        const row = readU16(r.body, 0);
+        const grbit = readU16(r.body, 12);
+        const height = (readU16(r.body, 6) & 32767) / 20;
+        if (height > 0) rowHeights.set(row, height);
+        if ((grbit & 32) !== 0) hiddenRows.add(row);
+        const outline = grbit & 7;
+        if (outline > 0) sheet.rowOutlineLevels.set(row + 1, outline);
+        break;
+      }
       case REC.LABELSST: {
-        const row = readU16(r.body, 0), col = readU16(r.body, 2), isst = readU32(r.body, 6);
-        put(row, col, textCell(col, g.sst[isst] ?? ""));
+        const row = readU16(r.body, 0), col = readU16(r.body, 2), xf = readU16(r.body, 4), isst = readU32(r.body, 6);
+        put(row, col, textCell(col, g.sst[isst] ?? "", g.xfStyles[xf]));
         break;
       }
       case REC.LABEL: {
-        const row = readU16(r.body, 0), col = readU16(r.body, 2);
-        put(row, col, textCell(col, readUnicodeShort(r.body, 6, 2)));
+        const row = readU16(r.body, 0), col = readU16(r.body, 2), xf = readU16(r.body, 4);
+        put(row, col, textCell(col, readUnicodeShort(r.body, 6, 2), g.xfStyles[xf]));
         break;
       }
       case REC.NUMBER: {
         const row = readU16(r.body, 0), col = readU16(r.body, 2), xf = readU16(r.body, 4);
-        put(row, col, numberCell(col, readF64(r.body, 6), g.xfFormats[xf]));
+        put(row, col, numberCell(col, readF64(r.body, 6), g.xfFormats[xf], g.xfStyles[xf]));
         break;
       }
       case REC.RK: {
         const row = readU16(r.body, 0), col = readU16(r.body, 2), xf = readU16(r.body, 4);
-        put(row, col, numberCell(col, decodeRk(readU32(r.body, 6)), g.xfFormats[xf]));
+        put(row, col, numberCell(col, decodeRk(readU32(r.body, 6)), g.xfFormats[xf], g.xfStyles[xf]));
         break;
       }
       case REC.MULRK: {
@@ -84755,13 +83844,13 @@ function parseSheet2(stream, start, name2, g, maxRows) {
         for (let i2 = 0; i2 < n; i2++) {
           const xf = readU16(r.body, 4 + i2 * 6);
           const rk = readU32(r.body, 6 + i2 * 6);
-          put(row, first3 + i2, numberCell(first3 + i2, decodeRk(rk), g.xfFormats[xf]));
+          put(row, first3 + i2, numberCell(first3 + i2, decodeRk(rk), g.xfFormats[xf], g.xfStyles[xf]));
         }
         break;
       }
       case REC.FORMULA: {
         const row = readU16(r.body, 0), col = readU16(r.body, 2), xf = readU16(r.body, 4);
-        const cell = formulaCell(col, r.body, g.xfFormats[xf]);
+        const cell = formulaCell(col, r.body, g.xfFormats[xf], g.xfStyles[xf]);
         if (cell) put(row, col, cell);
         break;
       }
@@ -84775,17 +83864,23 @@ function parseSheet2(stream, start, name2, g, maxRows) {
     const r = grid.get(ri);
     if (!r) continue;
     const cells = [...r.values()].sort((a, b) => a.column - b.column);
-    rows.push({ index: ri + 1, height: sheet.defaultRowHeight, cells, hidden: false });
+    rows.push({
+      index: ri + 1,
+      height: rowHeights.get(ri) ?? sheet.defaultRowHeight,
+      cells,
+      hidden: hiddenRows.has(ri)
+    });
   }
   sheet.rows = rows;
+  sheet.columns = [...colDefs.values()].sort((a, b) => a.index - b.index);
   sheet.totalRowCount = maxRow + 1;
   sheet.truncated = truncated;
   return sheet;
 }
-function textCell(column, text) {
-  return { column: column + 1, value: text, typedValue: text, content: { type: "plain", text }, style: {} };
+function textCell(column, text, style = {}) {
+  return { column: column + 1, value: text, typedValue: text, content: { type: "plain", text }, style };
 }
-function numberCell(column, num3, numFmt) {
+function numberCell(column, num3, numFmt, style = {}) {
   const value2 = Number.isFinite(num3) ? String(num3) : "";
   return {
     column: column + 1,
@@ -84794,19 +83889,19 @@ function numberCell(column, num3, numFmt) {
     typedValue: num3,
     numFmtCode: numFmt && numFmt !== "General" ? numFmt : void 0,
     content: { type: "plain", text: value2 },
-    style: {}
+    style
   };
 }
-function formulaCell(column, body, numFmt) {
+function formulaCell(column, body, numFmt, style = {}) {
   if (readU16(body, 12) === 65535) {
     const kind = body[6];
     if (kind === 1) {
       const b = body[8] !== 0;
-      return { column: column + 1, value: b ? "TRUE" : "FALSE", typedValue: b, content: { type: "plain", text: b ? "TRUE" : "FALSE" }, style: {} };
+      return { column: column + 1, value: b ? "TRUE" : "FALSE", typedValue: b, content: { type: "plain", text: b ? "TRUE" : "FALSE" }, style };
     }
     return null;
   }
-  return numberCell(column, readF64(body, 6), numFmt);
+  return numberCell(column, readF64(body, 6), numFmt, style);
 }
 function decodeRk(rk) {
   const div100 = (rk & 1) !== 0;
@@ -85063,9 +84158,9 @@ function parseExcelFromZip(zip, options) {
   }
   return result;
 }
-function findEntry(zip, path13) {
-  if (zip[path13]) return zip[path13];
-  const lower2 = path13.toLowerCase();
+function findEntry(zip, path14) {
+  if (zip[path14]) return zip[path14];
+  const lower2 = path14.toLowerCase();
   for (const key of Object.keys(zip)) {
     if (key.toLowerCase() === lower2) return zip[key];
   }
@@ -85702,12 +84797,12 @@ function extractPivotRoundTripInfo(originalZip) {
     if (paths.length > 0) pivotTablesBySheetIndex.set(i2, paths);
   }
   const pivotXmlPaths = [];
-  for (const path13 of Object.keys(originalZip)) {
-    if (path13.startsWith("xl/pivotTables/") && path13.endsWith(".xml")) {
-      pivotXmlPaths.push(path13);
+  for (const path14 of Object.keys(originalZip)) {
+    if (path14.startsWith("xl/pivotTables/") && path14.endsWith(".xml")) {
+      pivotXmlPaths.push(path14);
     }
-    if (path13.startsWith("xl/pivotCache/") && path13.endsWith(".xml")) {
-      pivotXmlPaths.push(path13);
+    if (path14.startsWith("xl/pivotCache/") && path14.endsWith(".xml")) {
+      pivotXmlPaths.push(path14);
     }
   }
   return { cachesByWorkbook, pivotTablesBySheetIndex, pivotXmlPaths };
@@ -85715,15 +84810,15 @@ function extractPivotRoundTripInfo(originalZip) {
 function decode3(bytes) {
   return new TextDecoder().decode(bytes);
 }
-function pivotContentTypeFor(path13) {
-  if (path13.startsWith("xl/pivotTables/") && path13.endsWith(".xml")) {
-    return `<Override PartName="/${path13}" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.pivotTable+xml"/>`;
+function pivotContentTypeFor(path14) {
+  if (path14.startsWith("xl/pivotTables/") && path14.endsWith(".xml")) {
+    return `<Override PartName="/${path14}" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.pivotTable+xml"/>`;
   }
-  if (path13.includes("/pivotCacheDefinition") && path13.endsWith(".xml")) {
-    return `<Override PartName="/${path13}" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.pivotCacheDefinition+xml"/>`;
+  if (path14.includes("/pivotCacheDefinition") && path14.endsWith(".xml")) {
+    return `<Override PartName="/${path14}" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.pivotCacheDefinition+xml"/>`;
   }
-  if (path13.includes("/pivotCacheRecords") && path13.endsWith(".xml")) {
-    return `<Override PartName="/${path13}" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.pivotCacheRecords+xml"/>`;
+  if (path14.includes("/pivotCacheRecords") && path14.endsWith(".xml")) {
+    return `<Override PartName="/${path14}" ContentType="application/vnd.openxmlformats-officedocument.spreadsheetml.pivotCacheRecords+xml"/>`;
   }
   return void 0;
 }
@@ -85796,16 +84891,16 @@ function exportWorkbook(workbook, originalZip) {
       regeneratedPaths.add(`xl/worksheets/sheet${i2 + 1}.xml`);
       regeneratedPaths.add(`xl/worksheets/_rels/sheet${i2 + 1}.xml.rels`);
     }
-    for (const path13 of Object.keys(originalZip)) {
-      if (path13.startsWith("xl/drawings/") || path13.startsWith("xl/charts/") || path13.startsWith("xl/tables/") || path13.startsWith("xl/media/")) {
-        regeneratedPaths.add(path13);
+    for (const path14 of Object.keys(originalZip)) {
+      if (path14.startsWith("xl/drawings/") || path14.startsWith("xl/charts/") || path14.startsWith("xl/tables/") || path14.startsWith("xl/media/")) {
+        regeneratedPaths.add(path14);
       }
     }
-    for (const [path13, data2] of Object.entries(originalZip)) {
-      if (regeneratedPaths.has(path13)) continue;
-      const ext = path13.slice(path13.lastIndexOf(".") + 1).toLowerCase();
+    for (const [path14, data2] of Object.entries(originalZip)) {
+      if (regeneratedPaths.has(path14)) continue;
+      const ext = path14.slice(path14.lastIndexOf(".") + 1).toLowerCase();
       if (!DECLARED_EXTENSIONS.includes(ext)) continue;
-      entries2[path13] = data2;
+      entries2[path14] = data2;
     }
   }
   const sharedStrings = buildSharedStrings(workbook);
@@ -85821,8 +84916,8 @@ function exportWorkbook(workbook, originalZip) {
     buildWorkbookRels(workbook, pivotInfo)
   );
   const extraContentTypes = [];
-  for (const path13 of pivotInfo.pivotXmlPaths) {
-    const ct = pivotContentTypeFor(path13);
+  for (const path14 of pivotInfo.pivotXmlPaths) {
+    const ct = pivotContentTypeFor(path14);
     if (ct) extraContentTypes.push(ct);
   }
   let globalChartIndex = 1;
@@ -95008,14 +94103,14 @@ var DependencyGraph = class {
       stack.push({ cell: p, path: [cell, p] });
     }
     while (stack.length > 0) {
-      const { cell: current, path: path13 } = stack.pop();
-      if (current === cell || originCoarse.has(current)) return path13;
+      const { cell: current, path: path14 } = stack.pop();
+      if (current === cell || originCoarse.has(current)) return path14;
       if (visited.has(current)) continue;
       visited.add(current);
       const nextPrec = this.precedents.get(current);
       if (!nextPrec) continue;
       for (const p of nextPrec) {
-        stack.push({ cell: p, path: [...path13, p] });
+        stack.push({ cell: p, path: [...path14, p] });
       }
     }
     return null;
@@ -96461,8 +95556,8 @@ var SIMPLE_SHEET_KEYS = /* @__PURE__ */ new Set(["name", "cells", "merges", "fre
 var MAX_COLUMN = 16384;
 var MAX_ROW = 1048576;
 function loadFile(filePath) {
-  if (!fs10.existsSync(filePath)) fail2(`File not found: ${filePath}`);
-  const buffer = fs10.readFileSync(filePath);
+  if (!fs11.existsSync(filePath)) fail2(`File not found: ${filePath}`);
+  const buffer = fs11.readFileSync(filePath);
   const arrayBuffer = buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
   const originalZip = unzipXlsx(arrayBuffer);
   const parsed = parseExcelBuffer(arrayBuffer);
@@ -96512,7 +95607,7 @@ function lazyEngine(workbook) {
   };
 }
 function readToJson(filePath, filter3, opts) {
-  const buffer = fs10.readFileSync(filePath);
+  const buffer = fs11.readFileSync(filePath);
   const arrayBuffer = buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
   const parsed = parseExcelBuffer(arrayBuffer);
   let sheets = parsed.sheets;
@@ -97025,7 +96120,7 @@ async function runXlsxCommand(subcommand, toolArgs, restArgs) {
 }
 
 // src/docx.ts
-import fs11 from "node:fs";
+import fs12 from "node:fs";
 
 // ../ooxml/src/doc/errors.ts
 var DocParseError = class extends Error {
@@ -101854,8 +100949,8 @@ async function docModelToDocx(model) {
 // ../ooxml/src/opc.ts
 var import_jszip = __toESM(require_lib4(), 1);
 function dropFolderEntries(zip) {
-  for (const [path13, entry] of Object.entries(zip.files)) {
-    if (entry.dir) delete zip.files[path13];
+  for (const [path14, entry] of Object.entries(zip.files)) {
+    if (entry.dir) delete zip.files[path14];
   }
 }
 
@@ -102110,11 +101205,11 @@ async function parseDocx(buffer) {
   const zip = await import_jszip3.default.loadAsync(buffer);
   const parts = /* @__PURE__ */ new Map();
   const filePromises = [];
-  zip.forEach((path13, file2) => {
+  zip.forEach((path14, file2) => {
     if (file2.dir) return;
     filePromises.push(
       file2.async("uint8array").then((bytes) => {
-        parts.set(path13, bytes);
+        parts.set(path14, bytes);
       })
     );
   });
@@ -102346,9 +101441,9 @@ var DEFAULT_PARTS = [
   ["word/theme/theme1.xml", () => encoder.encode(THEME_XML)]
 ];
 function fillDefaultParts(parts) {
-  for (const [path13, makeBytes] of DEFAULT_PARTS) {
-    if (!parts.has(path13)) {
-      parts.set(path13, makeBytes());
+  for (const [path14, makeBytes] of DEFAULT_PARTS) {
+    if (!parts.has(path14)) {
+      parts.set(path14, makeBytes());
     }
   }
   return parts;
@@ -102358,9 +101453,9 @@ function fillDefaultParts(parts) {
 async function serializeDocx(doc) {
   const zip = new import_jszip4.default();
   const parts = fillDefaultParts(new Map(doc.parts));
-  for (const [path13, bytes] of parts) {
-    if (path13 === "word/document.xml") continue;
-    zip.file(path13, bytes);
+  for (const [path14, bytes] of parts) {
+    if (path14 === "word/document.xml") continue;
+    zip.file(path14, bytes);
   }
   const documentXml = serializeDocumentXml(doc);
   zip.file("word/document.xml", documentXml);
@@ -102447,8 +101542,8 @@ var DEFAULT_DOC_ATTRS = {
   "@_xmlns:w": "http://schemas.openxmlformats.org/wordprocessingml/2006/main"
 };
 async function loadFile2(filePath) {
-  if (!fs11.existsSync(filePath)) fail2(`File not found: ${filePath}`);
-  const bytes = fs11.readFileSync(filePath);
+  if (!fs12.existsSync(filePath)) fail2(`File not found: ${filePath}`);
+  const bytes = fs12.readFileSync(filePath);
   if (isLegacyDoc(bytes)) {
     const upgraded = await saveDocxToBuffer(await loadDocxFromBuffer(bytes));
     return parseDocx(new Uint8Array(upgraded));
@@ -102933,7 +102028,7 @@ async function runDocxCommand(subcommand, toolArgs, restArgs) {
 }
 
 // src/knowledge.ts
-import fs12 from "node:fs";
+import fs13 from "node:fs";
 
 // ../shared/src/knowledge_tags.ts
 function isHiddenDoc(doc) {
@@ -102942,8 +102037,8 @@ function isHiddenDoc(doc) {
 
 // src/knowledge.ts
 function readBodyFile(filePath) {
-  if (!fs12.existsSync(filePath)) fail2(`File not found: ${filePath}`);
-  return fs12.readFileSync(filePath, "utf-8");
+  if (!fs13.existsSync(filePath)) fail2(`File not found: ${filePath}`);
+  return fs13.readFileSync(filePath, "utf-8");
 }
 function resolveBody(flags, required2) {
   if (flags.from !== void 0 && flags.content !== void 0) {
@@ -103152,7 +102247,7 @@ async function runKnowledgeCommand(client, subcommand, toolArgs, flags, restArgs
 import { spawn as spawn3 } from "node:child_process";
 import { createServer } from "node:http";
 import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync2, mkdtempSync, rmSync, readdirSync } from "node:fs";
-import { tmpdir as tmpdir2 } from "node:os";
+import { tmpdir as tmpdir3 } from "node:os";
 import { join as join2, dirname, resolve, extname, basename } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { setTimeout as sleep } from "node:timers/promises";
@@ -103251,7 +102346,7 @@ async function runPreviewCommand(filePath, flags) {
   });
   await new Promise((r) => server.listen(0, "127.0.0.1", () => r()));
   const httpPort = server.address().port;
-  const udd = mkdtempSync(join2(tmpdir2(), "lotics-render-"));
+  const udd = mkdtempSync(join2(tmpdir3(), "lotics-render-"));
   const child = spawn3(chrome, [
     "--headless=new",
     "--disable-gpu",
@@ -103491,8 +102586,8 @@ function prompt(question) {
     });
   });
 }
-async function publicPost(path13, body) {
-  const response = await fetch(`${API_BASE_URL}${path13}`, {
+async function publicPost(path14, body) {
+  const response = await fetch(`${API_BASE_URL}${path14}`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body)
@@ -103660,13 +102755,13 @@ async function resolveWorkspace(client, ctx) {
 function resolveUploadPaths(rawPaths) {
   const result = [];
   for (const p of rawPaths) {
-    const resolved = path12.resolve(p);
-    const stat = fs13.statSync(resolved);
+    const resolved = path13.resolve(p);
+    const stat = fs14.statSync(resolved);
     if (stat.isDirectory()) {
-      const entries2 = fs13.readdirSync(resolved, { withFileTypes: true });
+      const entries2 = fs14.readdirSync(resolved, { withFileTypes: true });
       for (const entry of entries2) {
         if (entry.isFile()) {
-          result.push(path12.join(resolved, entry.name));
+          result.push(path13.join(resolved, entry.name));
         }
       }
     } else {
@@ -103715,23 +102810,69 @@ async function main() {
     console.log(VERSION);
     return;
   }
-  if (command === "install") {
-    if (!subcommand) {
-      console.error("Usage: lotics install <package_id>");
-      console.error("       Materializes a published package into the current workspace.");
-      process.exit(1);
+  if (command === "starter") {
+    if (subcommand === "list") {
+      const { client: client2, ctx: ctx2 } = requireClient(flags);
+      await resolveWorkspace(client2, ctx2);
+      await starterList(client2);
+      return;
     }
-    const { client: client2, ctx: ctx2 } = requireClient(flags);
-    await resolveWorkspace(client2, ctx2);
-    await installCommand(client2, { packageId: subcommand });
-    return;
-  }
-  if (command === "upgrade") {
-    const { client: client2, ctx: ctx2 } = requireClient(flags);
-    applyAppManifestWorkspace(ctx2, command, subcommand, void 0, flags);
-    await resolveWorkspace(client2, ctx2);
-    await upgradeCommand(client2, {});
-    return;
+    if (subcommand === "show") {
+      if (!toolArgs) {
+        console.error("Usage: lotics starter show <starter_id>");
+        process.exit(1);
+      }
+      const { client: client2, ctx: ctx2 } = requireClient(flags);
+      await resolveWorkspace(client2, ctx2);
+      await starterShow(client2, toolArgs);
+      return;
+    }
+    if (subcommand === "init") {
+      if (!toolArgs) {
+        console.error("Usage: lotics starter init <starter_id> [path] [--no-sample-data] [--adopt]");
+        console.error("       Copies a starter into this workspace: schema, templates, knowledge");
+        console.error("       docs, sample records and an editable app project. Builds and deploys");
+        console.error("       locally, so it needs node and a few minutes.");
+        process.exit(1);
+      }
+      const { client: client2, ctx: ctx2 } = requireClient(flags);
+      await resolveWorkspace(client2, ctx2);
+      await starterInit(client2, {
+        starter_id: toolArgs,
+        ...restArgs[0] !== void 0 ? { targetPath: restArgs[0] } : {},
+        ...flags.noSampleData === true ? { noSampleData: true } : {},
+        ...flags.adopt === true ? { adopt: true } : {}
+      });
+      return;
+    }
+    if (subcommand === "fixtures") {
+      if (toolArgs !== "capture") {
+        console.error("Usage: lotics starter fixtures capture [--entity <alias> ...] [--limit <n>]");
+        console.error("       Writes fixtures/<entity>.json into this app project from live records.");
+        console.error("       Repeat --entity to capture a linked set in one call: a link only");
+        console.error("       resolves within ONE capture, so separate calls lose the edge.");
+        process.exit(1);
+      }
+      let limit;
+      if (flags.limit !== void 0) {
+        limit = Number(flags.limit);
+        if (!Number.isInteger(limit) || limit < 1) {
+          console.error(`Invalid --limit "${flags.limit}" \u2014 expected a positive integer.`);
+          process.exit(1);
+        }
+      }
+      const { client: client2, ctx: ctx2 } = requireClient(flags);
+      await resolveWorkspace(client2, ctx2);
+      await starterFixturesCapture(client2, {
+        entities: flags.entity,
+        ...limit !== void 0 ? { limit } : {}
+      });
+      return;
+    }
+    console.error(
+      "Usage: lotics starter list | show <starter_id> | init <starter_id> [path] | fixtures capture"
+    );
+    process.exit(1);
   }
   if (command === "docs") {
     docsCommand({ area: subcommand });
@@ -103741,11 +102882,11 @@ async function main() {
     let input = subcommand ?? "";
     if (input.startsWith("@")) {
       const file2 = input.slice(1);
-      if (!fs13.existsSync(file2)) {
+      if (!fs14.existsSync(file2)) {
         console.error(`No such file: ${file2}`);
         process.exit(1);
       }
-      input = fs13.readFileSync(file2, "utf-8");
+      input = fs14.readFileSync(file2, "utf-8");
     } else if (input === "-") {
       input = await readStdin();
     }
@@ -103872,13 +103013,13 @@ async function main() {
   if (command === "preview") {
     if (subcommand && isStoredFileId(subcommand)) {
       const { client: client2 } = requireClient(flags);
-      const tmpDir = fs13.mkdtempSync(path12.join(os4.tmpdir(), "lotics-preview-"));
+      const tmpDir = fs14.mkdtempSync(path13.join(os4.tmpdir(), "lotics-preview-"));
       try {
         const { path: localPath, filename } = await client2.downloadFileById(subcommand, tmpDir);
         const output = flags.output ?? defaultPreviewOutputPath(filename, process.cwd());
         await runPreviewCommand(localPath, { output });
       } finally {
-        fs13.rmSync(tmpDir, { recursive: true, force: true });
+        fs14.rmSync(tmpDir, { recursive: true, force: true });
       }
       return;
     }
@@ -104426,7 +103567,7 @@ ${JSON.stringify(info.input_schema, null, 2)}`);
     const ingested = await ingestJsonArgs({
       rawArg: toolArgs,
       stdinIsTTY: process.stdin.isTTY ?? false,
-      readFile: (p) => fs13.readFileSync(p, "utf-8"),
+      readFile: (p) => fs14.readFileSync(p, "utf-8"),
       readStdin
     });
     if (ingested.kind === "error") {