@lotics/cli 0.163.0 → 0.165.0

package/dist/src/cli.js

@@ -44480,6 +44480,16 @@ var LoticsClient = class {
   async retirePackage(package_id, body) {
     return this.request("POST", `/v1/packages/${encodeURIComponent(package_id)}/retire`, body);
   }
+  /**
+   * Edit a starter's registry listing — the name and description a stranger
+   * reads before copying, and what every copy's app row is created from.
+   *
+   * A version is an immutable snapshot; the listing is not. Omit a field to
+   * leave it, pass `description: null` to clear it. Owner-org admin-only.
+   */
+  async editPackageListing(package_id, body) {
+    return this.request("POST", `/v1/packages/${encodeURIComponent(package_id)}/listing`, body);
+  }
   // --- Packages (registry reads + installations) ---
   // Authoring is server-side: apps via `POST /v1/apps/{id}/package-publish|release`,
   // content packages via the `publish_content`/`release_content` tools. There is no
@@ -62975,7 +62985,20 @@ var readSourceSchema = zod_default.discriminatedUnion("from", [
   zod_default.object({ from: zod_default.literal("trigger_record") }),
   zod_default.object({ from: zod_default.literal("trigger_record_prev") }),
   zod_default.object({ from: zod_default.literal("trigger_changes") }),
-  zod_default.object({ from: zod_default.literal("foreach_item") }),
+  // `name` is the loop's bind name, and it is OPTIONAL for one reason: every
+  // body stored before names existed emits the bare form, and those resolve to
+  // the innermost frame — today's behaviour, and correct for any loop that is
+  // not nested. Without a name a read inside a NESTED loop cannot say which
+  // loop it means, so both binds resolve to the inner item and a join between
+  // two collections silently matches nothing. The parser emits the name now, so
+  // a body gets correct nesting the first time it is saved through it.
+  zod_default.object({ from: zod_default.literal("foreach_item"), name: zod_default.string().min(1).optional() }),
+  // No `name` here, deliberately: the JS surface spells the index as one
+  // reserved `index` keyword with no per-loop form, so the innermost loop is
+  // the only thing a read can mean. A name would be representable, honoured at
+  // run time, and silently rewritten to the innermost by the renderer — which
+  // prints every index as `index` — reintroducing the corruption above for a
+  // case nothing can author.
   zod_default.object({ from: zod_default.literal("foreach_index") }),
   zod_default.object({
     from: zod_default.literal("step_output"),
@@ -69170,7 +69193,7 @@ function walkRead(node, scope) {
     return readFromLambdaParam(root, chain2);
   }
   if (scope.foreachBinds.includes(root)) {
-    return readFromForeachItem(chain2);
+    return readFromForeachItem(root, chain2);
   }
   if (scope.stepIds.has(root)) {
     return readFromStepOutput(root, chain2);
@@ -69296,10 +69319,13 @@ function readFromRuntime(chain2) {
     return { kind: "read", source, path: path14 };
   });
 }
-function readFromForeachItem(chain2) {
+function readFromForeachItem(name2, chain2) {
   return wrapOptionalGuards(chain2, (segments) => ({
     kind: "read",
-    source: { from: "foreach_item" },
+    // NAMED, so a read inside a nested loop says which loop it means. Without
+    // it both binds resolved to the innermost item, and a join between two
+    // collections matched nothing while the workflow reported success.
+    source: { from: "foreach_item", name: name2 },
     path: classifyRecordPath(segments)
   }));
 }
@@ -70255,7 +70281,11 @@ function walkForOf(stmt, scope, stepIds, opts, stepId, description, nextSyntheti
         type: "bind",
         expression: patternEntryExpression(entry, {
           kind: "read",
-          source: { from: "foreach_item" },
+          // The loop's synthetic bind name, stated rather than left to the
+          // innermost-frame fallback — these bind steps happen to run where
+          // this loop IS innermost, and naming it keeps that true if the
+          // lowering ever moves.
+          source: { from: "foreach_item", name: bindName },
           path: [entry.segment]
         })
       });

package/dist/src/client.d.ts

@@ -328,6 +328,26 @@ export declare class LoticsClient {
         name: string;
         retired_at: string | null;
     }>;
+    /**
+     * Edit a starter's registry listing — the name and description a stranger
+     * reads before copying, and what every copy's app row is created from.
+     *
+     * A version is an immutable snapshot; the listing is not. Omit a field to
+     * leave it, pass `description: null` to clear it. Owner-org admin-only.
+     */
+    editPackageListing(package_id: string, body: {
+        name?: string;
+        description?: string | null;
+        icon?: string | null;
+        theme?: {
+            color: string;
+        } | null;
+    }): Promise<{
+        id: string;
+        name: string;
+        description: string | null;
+        icon?: string | null;
+    }>;
     /**
      * The starters this organization can copy — Lotics-reviewed ones plus its own,
      * never a catalogue of everything published. The server returns exactly what

package/dist/src/client.js

@@ -257,6 +257,16 @@ export class LoticsClient {
     async retirePackage(package_id, body) {
         return this.request("POST", `/v1/packages/${encodeURIComponent(package_id)}/retire`, body);
     }
+    /**
+     * Edit a starter's registry listing — the name and description a stranger
+     * reads before copying, and what every copy's app row is created from.
+     *
+     * A version is an immutable snapshot; the listing is not. Omit a field to
+     * leave it, pass `description: null` to clear it. Owner-org admin-only.
+     */
+    async editPackageListing(package_id, body) {
+        return this.request("POST", `/v1/packages/${encodeURIComponent(package_id)}/listing`, body);
+    }
     // --- Packages (registry reads + installations) ---
     // Authoring is server-side: apps via `POST /v1/apps/{id}/package-publish|release`,
     // content packages via the `publish_content`/`release_content` tools. There is no

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.163.0",
+  "version": "0.165.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {