@lotics/cli 0.186.0 → 0.187.0

package/dist/src/cli.js

@@ -45218,7 +45218,7 @@ var LoticsClient = class {
           while (filled < length2) {
             const { bytesRead } = await handle.read(buffer, filled, length2 - filled, offset + filled);
             if (bytesRead === 0) {
-              throw new Error(
+              throw new PermanentPartError(
                 `${input.filename} ended after ${offset + filled} bytes, short of the ${input.size} it reported \u2014 it changed while uploading`
               );
             }
@@ -45875,7 +45875,7 @@ function resultSideEffects(result) {
 }
 
 // src/version.ts
-var VERSION = "0.186.0";
+var VERSION = "0.187.0";
 
 // src/timezone.ts
 function machineTimezone() {
@@ -46146,7 +46146,7 @@ var COMMANDS = [
     help: [
       "  lotics app create <name> [path]      Create a new custom-code app + scaffold locally",
       "  lotics app pull <app_id> [path]      Bootstrap full local env (source + npm install + types)",
-      "  lotics app deploy [--prune] -m <msg> Build + upload current dir as a new version \u2014 COMMIT",
+      "  lotics app deploy [--prune] -m <msg> Typecheck + build + upload current dir as a new version \u2014 COMMIT",
       "                                       (-m is required \u2014 it's the version's audit trail;",
       "                                       carries code + queries only \u2014 workflow bindings are",
       "                                       managed by set_app_workflow / remove_app_workflow.",
@@ -46159,7 +46159,8 @@ var COMMANDS = [
       "  lotics app codegen [path]            Regenerate .lotics/* (types + field/option ids)",
       "                                       from the manifest + workspace schema \u2014 no deploy",
       "  lotics app check                     Run every deploy pre-flight WITHOUT building or",
-      "                                       shipping: agent schemas vs the live app, workflow",
+      "                                       shipping: the app's own typecheck over regenerated",
+      "                                       .lotics types, agent schemas vs the live app, workflow",
       "                                       declarations and BODIES vs what is live, aliases",
       "                                       the code calls but nothing bound, undeclared",
       "                                       capabilities, query drift. Plus two rules no",
@@ -46174,8 +46175,9 @@ var COMMANDS = [
       "  lotics app workflow check [alias]    Typecheck src/workflows bodies locally (one",
       "                                       isolated program per alias; the app's own tsc)",
       "  lotics app query set <alias>         Push package.json#lotics.queries.<alias> to",
-      "                                       apps.queries via set_app_query (no deploy;",
-      "                                       re-synced by the next deploy from the manifest)",
+      "                                       apps.queries via set_app_query and regenerate",
+      "                                       .lotics/app_queries.d.ts (no deploy; re-synced by",
+      "                                       the next deploy from the manifest)",
       "  lotics app agent set <alias>         Push the edited src/agents/<alias>.md instructions,",
       "                                       and ONLY those \u2014 the server merges, so the typed",
       "                                       fields keep whatever is bound (a manifest is a",
@@ -48177,605 +48179,6 @@ function flushPendingWarnings() {
   collectedWarnings.length = 0;
 }
 
-// ../shared/src/app_dts.ts
-var IDENTIFIER_REGEX = /^[a-zA-Z_$][a-zA-Z0-9_$]*$/;
-function isValidIdentifier(name2) {
-  return IDENTIFIER_REGEX.test(name2);
-}
-function inputsToType(inputs, opts) {
-  const nullableOptional = opts?.nullableOptional === true;
-  const fields = [];
-  for (const [key, decl] of Object.entries(inputs)) {
-    if (decl === null || typeof decl !== "object") continue;
-    const d = decl;
-    const tsType = inputDeclToTsType(d);
-    const isOptional = d.required === false;
-    const fieldType = isOptional && nullableOptional ? `${tsType} | null` : tsType;
-    const optional2 = isOptional ? "?" : "";
-    const fieldKey = isValidIdentifier(key) ? key : JSON.stringify(key);
-    fields.push(`      ${fieldKey}${optional2}: ${fieldType};`);
-  }
-  if (fields.length === 0) return "Record<string, never>";
-  return `{
-${fields.join("\n")}
-    }`;
-}
-function inputDeclToTsType(decl) {
-  const type = decl.type;
-  switch (type) {
-    case "text":
-    case "email":
-    case "date":
-    case "datetime":
-      return "string";
-    case "number":
-      return "number";
-    case "boolean":
-      return "boolean";
-    case "record_link":
-    case "member": {
-      const inner = "string";
-      return decl.multi === true ? `ReadonlyArray<${inner}>` : inner;
-    }
-    case "select": {
-      const options = Array.isArray(decl.options) ? decl.options : [];
-      const literals = options.map((o) => {
-        if (o !== null && typeof o === "object" && "value" in o && typeof o.value === "string") {
-          return JSON.stringify(o.value);
-        }
-        return null;
-      }).filter((v) => v !== null);
-      const inner = literals.length > 0 ? `${literals.join(" | ")} | (string & {})` : "string";
-      return decl.multi === true ? `ReadonlyArray<${inner}>` : inner;
-    }
-    case "date_range":
-      return "{ start: string; end: string }";
-    case "file":
-      return decl.multi === true ? "ReadonlyArray<string>" : "string";
-    case "object": {
-      const fields = decl.fields !== null && typeof decl.fields === "object" ? decl.fields : {};
-      return inputsToType(fields);
-    }
-    case "array": {
-      const items = decl.items !== null && typeof decl.items === "object" ? decl.items : null;
-      return items ? `ReadonlyArray<${inputDeclToTsType(items)}>` : "ReadonlyArray<unknown>";
-    }
-    case "json":
-      return "unknown";
-    default:
-      return "unknown";
-  }
-}
-function objectFieldsToType(fields) {
-  const parts = [];
-  for (const [key, decl] of Object.entries(fields)) {
-    if (decl === null || typeof decl !== "object") continue;
-    const d = decl;
-    const optional2 = d.required === false ? "?" : "";
-    const fieldKey = isValidIdentifier(key) ? key : JSON.stringify(key);
-    parts.push(`${fieldKey}${optional2}: ${outputDeclToTsType(d)}`);
-  }
-  if (parts.length === 0) return "Record<string, never>";
-  return `{ ${parts.join("; ")} }`;
-}
-function outputDeclToTsType(decl) {
-  const type = decl.type;
-  switch (type) {
-    case "text":
-    case "email":
-    case "date":
-    case "datetime":
-      return "string";
-    case "number":
-      return "number";
-    case "boolean":
-      return "boolean";
-    case "record_link":
-      return decl.multi === true ? "ReadonlyArray<string>" : "string";
-    case "select": {
-      const options = Array.isArray(decl.options) ? decl.options : [];
-      const literals = options.map(
-        (o) => o !== null && typeof o === "object" && "value" in o && typeof o.value === "string" ? JSON.stringify(o.value) : null
-      ).filter((v) => v !== null);
-      const inner = literals.length > 0 ? `${literals.join(" | ")} | (string & {})` : "string";
-      return decl.multi === true ? `ReadonlyArray<${inner}>` : inner;
-    }
-    case "object": {
-      const fields = decl.fields !== null && typeof decl.fields === "object" ? decl.fields : {};
-      return objectFieldsToType(fields);
-    }
-    case "array": {
-      const items = decl.items !== null && typeof decl.items === "object" ? decl.items : null;
-      return items ? `ReadonlyArray<${outputDeclToTsType(items)}>` : "ReadonlyArray<unknown>";
-    }
-    case "json":
-      return "unknown";
-    default:
-      return "unknown";
-  }
-}
-var QUERIES_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
-// DO NOT EDIT \u2014 regenerated from package.json#lotics.queries.
-//
-// This file gives \`useQuery("alias", params)\` typed params at call sites by
-// augmenting the @lotics/app-sdk \`AppQueries\` interface.
-
-import "@lotics/app-sdk";
-`;
-function generateAppQueriesDts(queries) {
-  const entries2 = Object.entries(queries ?? {});
-  if (entries2.length === 0) {
-    return `${QUERIES_HEADER}
-// No queries declared in package.json#lotics.queries.
-// Add an entry to enable typed useQuery("alias", params) at call sites.
-declare module "@lotics/app-sdk" {
-  interface AppQueries {}
-}
-`;
-  }
-  entries2.sort(([a], [b]) => a.localeCompare(b));
-  const lines = [];
-  for (const [alias, declaration] of entries2) {
-    const valueType = inputsToType(declaration.params ?? {});
-    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
-    lines.push(`    ${aliasKey}: ${valueType};`);
-  }
-  return `${QUERIES_HEADER}
-declare module "@lotics/app-sdk" {
-  interface AppQueries {
-${lines.join("\n")}
-  }
-}
-`;
-}
-var WORKFLOWS_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
-// DO NOT EDIT \u2014 regenerated from package.json#lotics.workflows.
-//
-// This file gives \`useWorkflow("alias")\` a typed input parameter at call
-// sites by augmenting the @lotics/app-sdk \`AppWorkflows\` interface.
-
-import "@lotics/app-sdk";
-`;
-function generateAppWorkflowsDts(workflows) {
-  const entries2 = Object.entries(workflows ?? {});
-  if (entries2.length === 0) {
-    return `${WORKFLOWS_HEADER}
-// No workflows declared in package.json#lotics.workflows.
-// Add an entry to enable typed useWorkflow<"alias"> at call sites.
-declare module "@lotics/app-sdk" {
-  interface AppWorkflows {}
-}
-`;
-  }
-  entries2.sort(([a], [b]) => a.localeCompare(b));
-  const inputLines = [];
-  const resultLines = [];
-  for (const [alias, declaration] of entries2) {
-    const valueType = declaration.inputs ? inputsToType(declaration.inputs, { nullableOptional: true }) : "Record<string, unknown>";
-    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
-    inputLines.push(`    ${aliasKey}: ${valueType};`);
-    if (declaration.outputs) {
-      resultLines.push(`    ${aliasKey}: ${objectFieldsToType(declaration.outputs)};`);
-    }
-  }
-  const resultsBlock = resultLines.length > 0 ? `
-  interface AppWorkflowResults {
-${resultLines.join("\n")}
-  }` : "";
-  return `${WORKFLOWS_HEADER}
-declare module "@lotics/app-sdk" {
-  interface AppWorkflows {
-${inputLines.join("\n")}
-  }${resultsBlock}
-}
-`;
-}
-var AGENTS_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
-// DO NOT EDIT \u2014 regenerated from package.json#lotics.agents.
-//
-// This file gives \`useAgentRun("alias")\` typed input + output at call sites by
-// augmenting the @lotics/app-sdk \`AppAgents\` / \`AppAgentResults\` interfaces.
-
-import "@lotics/app-sdk";
-`;
-function generateAppAgentsDts(agents) {
-  const entries2 = Object.entries(agents ?? {});
-  if (entries2.length === 0) {
-    return `${AGENTS_HEADER}
-// No agents declared in package.json#lotics.agents.
-// Add an entry to enable typed useAgentRun<"alias"> at call sites.
-declare module "@lotics/app-sdk" {
-  interface AppAgents {}
-}
-`;
-  }
-  entries2.sort(([a], [b]) => a.localeCompare(b));
-  const inputLines = [];
-  const resultLines = [];
-  for (const [alias, declaration] of entries2) {
-    const valueType = declaration.inputs ? inputsToType(declaration.inputs) : "Record<string, unknown>";
-    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
-    inputLines.push(`    ${aliasKey}: ${valueType};`);
-    if (declaration.outputs) {
-      resultLines.push(`    ${aliasKey}: ${objectFieldsToType(declaration.outputs)};`);
-    }
-  }
-  const resultsBlock = resultLines.length > 0 ? `
-  interface AppAgentResults {
-${resultLines.join("\n")}
-  }` : "";
-  return `${AGENTS_HEADER}
-declare module "@lotics/app-sdk" {
-  interface AppAgents {
-${inputLines.join("\n")}
-  }${resultsBlock}
-}
-`;
-}
-var LINK_TSCONFIG_PATH = ".lotics/tsconfig.link.json";
-function generateLinkTsconfig(paths) {
-  const header = Object.keys(paths).length > 0 ? `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
-// LOTICS_UI_SRC is set, so @lotics/ui resolves to your working copy for tsc,
-// vitest, eslint and your editor \u2014 the same copy Vite is bundling. The peer
-// pins keep ONE react / react-native in the program; without them the kit's
-// source resolves its own copies and every shared type stops matching.
-// Unset LOTICS_UI_SRC and re-run to go back to the published kit.
-` : `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
-// @lotics/ui resolves from node_modules as normal, so this is inert. It still
-// has to exist: tsconfig.json extends it, and a missing extends target fails
-// the build outright.
-`;
-  return `${header}${JSON.stringify({ compilerOptions: { paths } }, null, 2)}
-`;
-}
-var CAPABILITY_GATED_CALLS = {
-  comments: ["useComments", "createComment", "updateComment", "deleteComment"]
-};
-function undeclaredCapabilities(sourceText, declared) {
-  const code = codeWithoutComments(sourceText);
-  const used = [];
-  for (const [capability, calls] of Object.entries(CAPABILITY_GATED_CALLS)) {
-    const isCalled = calls.some((call) => new RegExp(`\\b${call}\\b`).test(code));
-    if (isCalled && declared?.[capability] !== true) used.push(capability);
-  }
-  return used;
-}
-function driftedQueryAliases(a, b) {
-  const left = a ?? {};
-  const right = b ?? {};
-  return [.../* @__PURE__ */ new Set([...Object.keys(left), ...Object.keys(right)])].filter((alias) => canonicalJson(left[alias]) !== canonicalJson(right[alias])).sort();
-}
-function canonicalJson(value2) {
-  const normalize = (v) => {
-    if (Array.isArray(v)) return v.map(normalize);
-    if (v === null || typeof v !== "object") return v;
-    const entries2 = Object.entries(v).sort(
-      ([x2], [y]) => x2 < y ? -1 : x2 > y ? 1 : 0
-    );
-    return entries2.map(([key, val]) => [key, normalize(val)]);
-  };
-  return JSON.stringify(normalize(value2));
-}
-var REGEX_MAY_FOLLOW = /* @__PURE__ */ new Set([
-  "return",
-  "typeof",
-  "case",
-  "in",
-  "of",
-  "delete",
-  "void",
-  "instanceof",
-  "new",
-  "do",
-  "else",
-  "yield",
-  "await",
-  "throw"
-]);
-function opensRegex(out, at2) {
-  let k = at2 - 1;
-  while (k >= 0 && (out[k] === " " || out[k] === "\n" || out[k] === "	" || out[k] === "\r")) k--;
-  if (k < 0) return true;
-  const prev = out[k];
-  if ("=(,:[!&|?{;+-*%>~^".includes(prev)) return true;
-  if (/[A-Za-z0-9_$]/.test(prev)) {
-    let s = k;
-    while (s >= 0 && /[A-Za-z0-9_$]/.test(out[s])) s--;
-    return REGEX_MAY_FOLLOW.has(out.slice(s + 1, k + 1).join(""));
-  }
-  return false;
-}
-function codeWithoutComments(sourceText) {
-  const out = sourceText.split("");
-  const n = sourceText.length;
-  const blank = (from, to) => {
-    for (let k = from; k < to; k++) if (out[k] !== "\n") out[k] = " ";
-  };
-  let i2 = 0;
-  while (i2 < n) {
-    const c = sourceText[i2];
-    const next = sourceText[i2 + 1];
-    if (c === "/" && next === "/") {
-      let j = i2;
-      while (j < n && sourceText[j] !== "\n") j++;
-      blank(i2, j);
-      i2 = j;
-      continue;
-    }
-    if (c === "/" && next === "*") {
-      let j = i2 + 2;
-      while (j < n && !(sourceText[j] === "*" && sourceText[j + 1] === "/")) j++;
-      j = j < n ? j + 2 : n;
-      blank(i2, j);
-      i2 = j;
-      continue;
-    }
-    if (c === '"' || c === "'") {
-      let j = i2 + 1;
-      while (j < n && sourceText[j] !== c && sourceText[j] !== "\n") {
-        j += sourceText[j] === "\\" ? 2 : 1;
-      }
-      i2 = j < n && sourceText[j] === c ? j + 1 : j;
-      continue;
-    }
-    if (c === "`") {
-      let j = i2 + 1;
-      while (j < n && sourceText[j] !== "`") {
-        j += sourceText[j] === "\\" ? 2 : 1;
-      }
-      i2 = j < n ? j + 1 : n;
-      continue;
-    }
-    if (c === "/" && opensRegex(out, i2)) {
-      let j = i2 + 1;
-      let inClass = false;
-      while (j < n) {
-        const ch = sourceText[j];
-        if (ch === "\\") {
-          j += 2;
-          continue;
-        }
-        if (ch === "\n") break;
-        if (ch === "[") inClass = true;
-        else if (ch === "]") inClass = false;
-        else if (ch === "/" && !inClass) {
-          j++;
-          break;
-        }
-        j++;
-      }
-      i2 = j;
-      continue;
-    }
-    i2++;
-  }
-  return out.join("");
-}
-var ALIAS_CALL_HOOKS = {
-  queries: ["useQuery", "usePaginatedQuery", "useInfiniteQuery", "useCount", "useFieldOptions"],
-  workflows: ["useWorkflow"],
-  agents: ["useAgentRun"]
-};
-var LITERAL_ALIAS_ARG = `["'\`]([A-Za-z_$][A-Za-z0-9_$]*)["'\`]`;
-function isAppSourcePath(projectRelativePath) {
-  const normalized = projectRelativePath.replace(/\\/g, "/").replace(/^\.\//, "");
-  return normalized.startsWith("src/") && /\.(ts|tsx|js|jsx)$/.test(normalized);
-}
-function calledAppAliases(sourceText) {
-  const code = codeWithoutComments(sourceText);
-  const out = {
-    queries: [],
-    workflows: [],
-    agents: [],
-    dynamic: []
-  };
-  for (const [kind, hooks] of Object.entries(ALIAS_CALL_HOOKS)) {
-    const seen = /* @__PURE__ */ new Set();
-    for (const hook of hooks) {
-      let isDynamic = false;
-      for (const call of code.matchAll(new RegExp(`\\b${hook}\\s*\\(`, "g"))) {
-        const rest2 = code.slice(call.index + call[0].length);
-        const literal2 = new RegExp(`^\\s*${LITERAL_ALIAS_ARG}`).exec(rest2);
-        if (literal2) seen.add(literal2[1]);
-        else isDynamic = true;
-      }
-      if (isDynamic) out.dynamic.push(hook);
-    }
-    out[kind] = [...seen];
-  }
-  return out;
-}
-function orphanedAliases(bound, called) {
-  return unboundAliases(bound, called);
-}
-function unboundAliases(called, bound) {
-  const missing = (from, against) => {
-    const have = new Set(against ?? []);
-    return [...from ?? []].filter((alias) => !have.has(alias));
-  };
-  return {
-    queries: missing(called.queries, bound.queries),
-    workflows: missing(called.workflows, bound.workflows),
-    agents: missing(called.agents, bound.agents)
-  };
-}
-
-// ../shared/src/app_query_ast.ts
-function collectQueryTableIds(node) {
-  const result = /* @__PURE__ */ new Set();
-  walk(node, (n) => {
-    if (n.kind === "from_table") result.add(n.table_id);
-  });
-  return result;
-}
-function walk(node, visit) {
-  visit(node);
-  switch (node.kind) {
-    case "from_table":
-      return;
-    case "project":
-    case "filter":
-    case "group":
-    case "window":
-    case "sort":
-    case "limit":
-    case "unpivot":
-    case "unnest":
-      walk(node.from, visit);
-      return;
-    case "join":
-      walk(node.left, visit);
-      walk(node.right, visit);
-      return;
-    case "union":
-      for (const child of node.sources) walk(child, visit);
-      return;
-    default: {
-      const _exhaustive = node;
-      void _exhaustive;
-      return;
-    }
-  }
-}
-
-// ../shared/src/generate_app_fields.ts
-var HEADER = `// Auto-generated by 'lotics app codegen' and 'lotics app pull'.
-// DO NOT EDIT \u2014 regenerated from the workspace schema.
-//
-// Runtime field + option ids addressed by stable display-name aliases:
-//   record.data[F.<TABLE>.<field>]            \u2192 "fld_\u2026"
-//   value === OPT.<TABLE>.<field>.<option>    \u2192 "opt_\u2026"
-// A rename on the platform re-runs codegen and moves these in lockstep.
-`;
-function slugifyAlias(name2, upper2) {
-  const stripped = name2.normalize("NFD").replace(/[̀-ͯ]/g, "").replace(/đ/g, "d").replace(/Đ/g, "D");
-  const cased = upper2 ? stripped.toUpperCase() : stripped.toLowerCase();
-  const slug = cased.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "");
-  if (slug === "") return "_";
-  return /^[0-9]/.test(slug) ? `_${slug}` : slug;
-}
-function dedupeAliases(names, upper2) {
-  const used = /* @__PURE__ */ new Map();
-  return names.map((name2) => {
-    const base = slugifyAlias(name2, upper2);
-    const seen = used.get(base);
-    if (seen === void 0) {
-      used.set(base, 1);
-      return base;
-    }
-    let n = seen + 1;
-    while (used.has(`${base}_${n}`)) n++;
-    used.set(base, n);
-    used.set(`${base}_${n}`, 1);
-    return `${base}_${n}`;
-  });
-}
-function propKey(alias) {
-  return isValidIdentifier(alias) ? alias : JSON.stringify(alias);
-}
-function aliasTables(tables) {
-  const tableAliases = dedupeAliases(
-    tables.map((t) => t.name),
-    true
-  );
-  return tables.map((table, i2) => {
-    const fieldAliases = dedupeAliases(
-      table.fields.map((f) => f.name),
-      false
-    );
-    return {
-      alias: tableAliases[i2],
-      table,
-      fields: table.fields.map((field, j) => ({ alias: fieldAliases[j], field }))
-    };
-  });
-}
-function emitFieldMap(aliased) {
-  const tableBlocks = aliased.map(({ alias, fields }) => {
-    const fieldLines = fields.map(
-      ({ alias: fieldAlias, field }) => `    ${propKey(fieldAlias)}: ${JSON.stringify(field.id)},`
-    );
-    return `  ${propKey(alias)}: {
-${fieldLines.join("\n")}
-  },`;
-  });
-  return `export const F = {
-${tableBlocks.join("\n")}
-} as const;`;
-}
-function emitOptionMap(aliased) {
-  const tableBlocks = [];
-  for (const { alias, fields } of aliased) {
-    const fieldBlocks = [];
-    for (const { alias: fieldAlias, field } of fields) {
-      const options = field.options ?? [];
-      if (options.length === 0) continue;
-      const optionAliases = dedupeAliases(
-        options.map((o) => o.label),
-        false
-      );
-      const optionLines = options.map(
-        (option, i2) => `      ${propKey(optionAliases[i2])}: ${JSON.stringify(option.id)},`
-      );
-      fieldBlocks.push(`    ${propKey(fieldAlias)}: {
-${optionLines.join("\n")}
-    },`);
-    }
-    if (fieldBlocks.length === 0) continue;
-    tableBlocks.push(`  ${propKey(alias)}: {
-${fieldBlocks.join("\n")}
-  },`);
-  }
-  if (tableBlocks.length === 0) return `export const OPT = {} as const;`;
-  return `export const OPT = {
-${tableBlocks.join("\n")}
-} as const;`;
-}
-function generateAppFields(tables) {
-  if (tables.length === 0) {
-    return `${HEADER}
-export const F = {} as const;
-
-export const OPT = {} as const;
-
-/** Field-id alias map (empty \u2014 no tables in scope). */
-export type AppFields = typeof F;
-/** Select-option alias map (empty \u2014 no tables in scope). */
-export type AppOptions = typeof OPT;
-`;
-  }
-  const aliased = aliasTables(tables);
-  return `${HEADER}
-${emitFieldMap(aliased)}
-
-${emitOptionMap(aliased)}
-
-/** Field-id alias map: \`F[<TABLE>][<field>]\` is the \`fld_\u2026\` id (literal-typed). */
-export type AppFields = typeof F;
-/** Select-option alias map: \`OPT[<TABLE>][<field>][<option>]\` is the \`opt_\u2026\` id. */
-export type AppOptions = typeof OPT;
-`;
-}
-function codegenTableIds(queries, allowlist) {
-  const ids = new Set(allowlist);
-  for (const declaration of Object.values(queries)) {
-    for (const id of collectQueryTableIds(declaration.ast)) ids.add(id);
-  }
-  return [...ids];
-}
-function readCodegenTablesAllowlist(pkg) {
-  const tables = pkg?.lotics?.codegen?.tables;
-  return Array.isArray(tables) ? tables.filter((t) => typeof t === "string") : [];
-}
-
-// src/app_workflow_check.ts
-import fs7 from "node:fs";
-import path8 from "node:path";
-import { createRequire } from "node:module";
-
-// ../shared/src/parse_workflow_js.ts
-var import_parser = __toESM(require_lib(), 1);
-
 // ../../node_modules/zod/v4/classic/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -63270,218 +62673,28 @@ __export(coerce_exports, {
   date: () => date4,
   number: () => number3,
   string: () => string3
-});
-function string3(params) {
-  return _coercedString(ZodString, params);
-}
-function number3(params) {
-  return _coercedNumber(ZodNumber, params);
-}
-function boolean3(params) {
-  return _coercedBoolean(ZodBoolean, params);
-}
-function bigint3(params) {
-  return _coercedBigint(ZodBigInt, params);
-}
-function date4(params) {
-  return _coercedDate(ZodDate, params);
-}
-
-// ../../node_modules/zod/v4/classic/external.js
-config(en_default());
-
-// ../../node_modules/zod/index.js
-var zod_default = external_exports;
-
-// ../shared/src/schemas/workflow_expressions.ts
-var runtimeKeySchema = zod_default.enum([
-  "timezone",
-  "workflow_id",
-  "execution_id",
-  "workspace_id",
-  "organization_id",
-  "now",
-  "change_origin",
-  // PARKED — accepted in stored ASTs, rejected for new saves at parse (see
-  // `PARKED_RUNTIME_KEYS` in walk_workflow_expression.ts). It is the OWNER's
-  // principal (a workflow runs under owner authority), so it can't answer the
-  // caller-authorization question anyone reads it for; the generated `.d.ts`
-  // omits it and the docs point at `current_member_in_any_group` /
-  // `runtime.triggered_by_member_id` instead. The entry stays so any stored
-  // AST keeps validating and executing — drop it only once a prod probe shows
-  // zero references (`workflows.steps_v2::text LIKE '%execution_principal%'`).
-  "execution_principal",
-  "triggered_by_member_id"
-]);
-var readSourceSchema = zod_default.discriminatedUnion("from", [
-  zod_default.object({ from: zod_default.literal("trigger") }),
-  zod_default.object({ from: zod_default.literal("trigger_record") }),
-  zod_default.object({ from: zod_default.literal("trigger_record_prev") }),
-  zod_default.object({ from: zod_default.literal("trigger_changes") }),
-  // `name` is the loop's bind name, and it is OPTIONAL for one reason: every
-  // body stored before names existed emits the bare form, and those resolve to
-  // the innermost frame — today's behaviour, and correct for any loop that is
-  // not nested. Without a name a read inside a NESTED loop cannot say which
-  // loop it means, so both binds resolve to the inner item and a join between
-  // two collections silently matches nothing. The parser emits the name now, so
-  // a body gets correct nesting the first time it is saved through it.
-  zod_default.object({ from: zod_default.literal("foreach_item"), name: zod_default.string().min(1).optional() }),
-  // No `name` here, deliberately: the JS surface spells the index as one
-  // reserved `index` keyword with no per-loop form, so the innermost loop is
-  // the only thing a read can mean. A name would be representable, honoured at
-  // run time, and silently rewritten to the innermost by the renderer — which
-  // prints every index as `index` — reintroducing the corruption above for a
-  // case nothing can author.
-  zod_default.object({ from: zod_default.literal("foreach_index") }),
-  zod_default.object({
-    from: zod_default.literal("step_output"),
-    step_id: zod_default.string().min(1)
-  }),
-  zod_default.object({
-    from: zod_default.literal("runtime"),
-    key: runtimeKeySchema
-  }),
-  // Lambda parameter — names a positional parameter on the innermost
-  // enclosing `lambda` expression. The walker emits this only inside
-  // higher-order helper callbacks (`filter(arr, x => x.Status == "open")`).
-  // The evaluator pushes a `lambda_params` frame each time it invokes a
-  // lambda, popping it after the body finishes. Outside a lambda body,
-  // these reads have no meaning and fail loudly.
-  zod_default.object({
-    from: zod_default.literal("lambda_param"),
-    name: zod_default.string().min(1)
-  }),
-  // Lexical (`let`) binding — names a block-scoped mutable variable
-  // declared by `let_declare` or assigned by `assign` somewhere in an
-  // enclosing block. The walker registers names on a per-block stack
-  // and emits this read source when a bare identifier matches. The
-  // evaluator maintains the matching frame stack on
-  // `WorkflowEvalContext.lexical_bindings`; reading walks it
-  // innermost-outward.
-  zod_default.object({
-    from: zod_default.literal("lexical"),
-    name: zod_default.string().min(1)
-  })
-]);
-var indexExpressionSchema = zod_default.lazy(
-  () => workflowExpressionSchema
-);
-var pathSegmentSchema = zod_default.discriminatedUnion("at", [
-  zod_default.object({ at: zod_default.literal("key"), key: zod_default.string().min(1) }),
-  zod_default.object({
-    at: zod_default.literal("index"),
-    /**
-     * Numeric literal indices stay as `number`; computed indices (e.g.
-     * `arr[i]` where `i` is a lambda param or `let` binding) carry a
-     * WorkflowExpression that the evaluator resolves at runtime. Authors
-     * who write `arr[<expr>]` get a working iteration pattern over arrays
-     * without forcing the parser to pre-evaluate the index.
-     */
-    index: zod_default.union([zod_default.number().int().nonnegative(), indexExpressionSchema])
-  }),
-  zod_default.object({ at: zod_default.literal("field"), key: zod_default.string().min(1) }),
-  zod_default.object({
-    at: zod_default.literal("linked"),
-    via: zod_default.string().min(1),
-    /**
-     * `number` — pick a single linked record by literal index.
-     * `"each"` — fan out; legal only inside foreach.items (validator-enforced).
-     * `WorkflowExpression` — computed index, resolved at runtime to pick a
-     * single linked record (same descent semantics as the numeric form).
-     */
-    index: zod_default.union([
-      zod_default.number().int().nonnegative(),
-      zod_default.literal("each"),
-      indexExpressionSchema
-    ])
-  })
-]);
-var binaryOpSchema = zod_default.enum([
-  "eq",
-  "neq",
-  "seq",
-  "sneq",
-  "gt",
-  "lt",
-  "gte",
-  "lte",
-  "and",
-  "or",
-  "add",
-  "sub",
-  "mul",
-  "div",
-  "mod"
-]);
-var unaryOpSchema = zod_default.enum(["not", "neg"]);
-var coerceSchema = zod_default.enum(["raw", "display"]);
-var literalValueSchema = zod_default.union([
-  zod_default.string(),
-  zod_default.number(),
-  zod_default.boolean(),
-  zod_default.null()
-]);
-var workflowExpressionSchema = zod_default.lazy(
-  () => zod_default.discriminatedUnion("kind", [
-    zod_default.object({ kind: zod_default.literal("lit"), value: literalValueSchema }),
-    zod_default.object({
-      kind: zod_default.literal("read"),
-      source: readSourceSchema,
-      path: zod_default.array(pathSegmentSchema),
-      coerce: coerceSchema.optional()
-    }),
-    zod_default.object({
-      kind: zod_default.literal("call"),
-      fn: zod_default.string().min(1),
-      args: zod_default.array(workflowExpressionSchema)
-    }),
-    zod_default.object({
-      kind: zod_default.literal("binary"),
-      op: binaryOpSchema,
-      left: workflowExpressionSchema,
-      right: workflowExpressionSchema
-    }),
-    zod_default.object({
-      kind: zod_default.literal("unary"),
-      op: unaryOpSchema,
-      arg: workflowExpressionSchema
-    }),
-    zod_default.object({
-      kind: zod_default.literal("ternary"),
-      cond: workflowExpressionSchema,
-      then: workflowExpressionSchema,
-      else: workflowExpressionSchema
-    }),
-    zod_default.object({
-      kind: zod_default.literal("template"),
-      parts: zod_default.array(templatePartSchema)
-    }),
-    zod_default.object({
-      kind: zod_default.literal("lambda"),
-      params: zod_default.array(zod_default.string().min(1)),
-      body: workflowExpressionSchema
-    }),
-    zod_default.object({
-      kind: zod_default.literal("array_literal"),
-      elements: zod_default.array(workflowExpressionSchema)
-    }),
-    zod_default.object({
-      kind: zod_default.literal("object_literal"),
-      entries: zod_default.array(
-        zod_default.object({
-          key: zod_default.string().min(1),
-          value: workflowExpressionSchema
-        })
-      )
-    })
-  ])
-);
-var templatePartSchema = zod_default.lazy(
-  () => zod_default.discriminatedUnion("t", [
-    zod_default.object({ t: zod_default.literal("text"), s: zod_default.string() }),
-    zod_default.object({ t: zod_default.literal("ex"), e: workflowExpressionSchema })
-  ])
-);
+});
+function string3(params) {
+  return _coercedString(ZodString, params);
+}
+function number3(params) {
+  return _coercedNumber(ZodNumber, params);
+}
+function boolean3(params) {
+  return _coercedBoolean(ZodBoolean, params);
+}
+function bigint3(params) {
+  return _coercedBigint(ZodBigInt, params);
+}
+function date4(params) {
+  return _coercedDate(ZodDate, params);
+}
+
+// ../../node_modules/zod/v4/classic/external.js
+config(en_default());
+
+// ../../node_modules/zod/index.js
+var zod_default = external_exports;
 
 // ../../node_modules/date-fns/constants.js
 var daysInYear = 365.2425;
@@ -65766,7 +64979,7 @@ var queryOutputColumnSchema = zod_default.object({
 var queryOutputSchemaSchema = zod_default.object({
   columns: zod_default.array(queryOutputColumnSchema)
 });
-var literalValueSchema2 = zod_default.union([
+var literalValueSchema = zod_default.union([
   zod_default.string(),
   zod_default.number(),
   zod_default.boolean(),
@@ -65775,7 +64988,7 @@ var literalValueSchema2 = zod_default.union([
 var querySourceSchema = zod_default.lazy(
   () => zod_default.union([
     zod_default.string(),
-    zod_default.object({ literal: literalValueSchema2 }),
+    zod_default.object({ literal: literalValueSchema }),
     zod_default.object({ eq: zod_default.tuple([querySourceSchema, querySourceSchema]) }),
     zod_default.object({ neq: zod_default.tuple([querySourceSchema, querySourceSchema]) }),
     zod_default.object({ isEmpty: querySourceSchema }),
@@ -65846,14 +65059,14 @@ var queryWindowFunctionColumnSchema = zod_default.discriminatedUnion("fn", [
     fn: zod_default.literal("lag"),
     input_column: zod_default.string().describe("Input column whose earlier-row value to read."),
     offset: zod_default.number().int().positive().optional().describe("Rows back. Defaults to 1."),
-    default: literalValueSchema2.optional().describe("Value at the partition's leading edge. Type must match the input column. Omit for NULL.")
+    default: literalValueSchema.optional().describe("Value at the partition's leading edge. Type must match the input column. Omit for NULL.")
   }).strict(),
   zod_default.object({
     output: zod_default.string().describe("Output column name"),
     fn: zod_default.literal("lead"),
     input_column: zod_default.string().describe("Input column whose later-row value to read."),
     offset: zod_default.number().int().positive().optional().describe("Rows forward. Defaults to 1."),
-    default: literalValueSchema2.optional().describe("Value at the partition's trailing edge. Type must match the input column. Omit for NULL.")
+    default: literalValueSchema.optional().describe("Value at the partition's trailing edge. Type must match the input column. Omit for NULL.")
   }).strict()
 ]);
 var queryJoinPredicateSchema = zod_default.object({
@@ -65927,360 +65140,1445 @@ var queryGroupNodeSchema = zod_default.object({
   by: zod_default.array(queryGroupKeySchema).describe(
     "Group keys: input column names, or `{ bucket: { source, granularity, output } }` date buckets. A bucket truncates a date/datetime column to the bucket START as a `date` column (wall-clock semantics; `week` starts on ISO Monday; null source \u2192 null bucket). Empty = single-row aggregate."
   ),
-  aggregates: zod_default.array(queryAggregateColumnSchema).min(1)
-});
-var queryWindowNodeSchema = zod_default.object({
-  kind: zod_default.literal("window"),
-  from: zod_default.lazy(() => queryNodeSchema),
-  partition_by: zod_default.array(zod_default.string()).describe("Input columns to partition by. Empty = single window over input."),
-  order_by: tableRecordSortSchema,
-  frame: queryWindowFrameSchema.optional(),
-  aggregates: zod_default.array(queryAggregateColumnSchema).optional().describe(
-    "Frame aggregates (running totals: sum/avg/min/max/count over a ROWS frame). Each becomes a new column on every input row, preserving input columns alongside. `frame` applies only to these."
+  aggregates: zod_default.array(queryAggregateColumnSchema).min(1)
+});
+var queryWindowNodeSchema = zod_default.object({
+  kind: zod_default.literal("window"),
+  from: zod_default.lazy(() => queryNodeSchema),
+  partition_by: zod_default.array(zod_default.string()).describe("Input columns to partition by. Empty = single window over input."),
+  order_by: tableRecordSortSchema,
+  frame: queryWindowFrameSchema.optional(),
+  aggregates: zod_default.array(queryAggregateColumnSchema).optional().describe(
+    "Frame aggregates (running totals: sum/avg/min/max/count over a ROWS frame). Each becomes a new column on every input row, preserving input columns alongside. `frame` applies only to these."
+  ),
+  functions: zod_default.array(queryWindowFunctionColumnSchema).optional().describe(
+    "Ranking / navigation window functions (row_number, rank, dense_rank, percent_rank, cume_dist, ntile, lag, lead). Never framed; require a non-empty order_by."
+  )
+});
+var querySortNodeSchema = zod_default.object({
+  kind: zod_default.literal("sort"),
+  from: zod_default.lazy(() => queryNodeSchema),
+  by: tableRecordSortSchema
+});
+var queryKeysetSchema = zod_default.object({
+  // The single sort key the cursor seeks on (0 or 1 — multi-key sorts fall back
+  // to OFFSET). `__source_record_id` ASC is always appended as the tiebreaker,
+  // so the order is total and pages never skip/duplicate on ties.
+  by: tableRecordSortSchema.max(1),
+  // The seek position — absent on the FIRST page (ordering only, no predicate).
+  after: zod_default.object({
+    // The sort key's value on the last row of the previous page (one per `by`
+    // entry), and that row's record id — together the seek position.
+    values: zod_default.array(zod_default.union([zod_default.string(), zod_default.number(), zod_default.boolean(), zod_default.null()])),
+    id: zod_default.string()
+  }).optional()
+});
+var queryLimitNodeSchema = zod_default.object({
+  kind: zod_default.literal("limit"),
+  from: zod_default.lazy(() => queryNodeSchema),
+  n: zod_default.number().int().positive(),
+  offset: zod_default.number().int().nonnegative().optional(),
+  // Keyset (seek) pagination — mutually exclusive with `offset`. When present,
+  // the node applies the ORDER BY (`by` + id tiebreaker) and a seek predicate
+  // itself, so `from` must NOT be pre-wrapped in a sort node.
+  keyset: queryKeysetSchema.optional()
+});
+var queryUnpivotPassthroughColumnSchema = zod_default.object({
+  output: zod_default.string(),
+  type: queryColumnTypeSchema,
+  source: querySourceSchema
+});
+var queryUnpivotRowColumnSchema = zod_default.object({
+  output: zod_default.string(),
+  type: queryColumnTypeSchema
+});
+var queryUnpivotNodeSchema = zod_default.object({
+  kind: zod_default.literal("unpivot"),
+  from: zod_default.lazy(() => queryNodeSchema),
+  passthrough: zod_default.array(queryUnpivotPassthroughColumnSchema).describe(
+    "Columns projected once from the source row and replicated across every fanned-out row. May be empty."
+  ),
+  row_columns: zod_default.array(queryUnpivotRowColumnSchema).min(1).describe(
+    "Schema of the row columns produced per fanned-out row. Types declared once; per-row sources live in `rows`."
+  ),
+  rows: zod_default.array(zod_default.record(zod_default.string(), querySourceSchema)).min(1).describe(
+    "Each entry produces one output row per source input row. Each entry must provide a source keyed by every `row_columns[*].output`."
+  )
+});
+var queryUnnestNodeSchema = zod_default.object({
+  kind: zod_default.literal("unnest"),
+  from: zod_default.lazy(() => queryNodeSchema),
+  source: zod_default.string().describe(
+    "Array-valued input column to fan out (select / select_member / select_record_link / files, incl. array-valued lookups)."
+  ),
+  output: zod_default.string().describe(
+    "New text column holding each element's identity: option key / member id / link id / file id, by the source column's type."
+  ),
+  display_output: zod_default.string().optional().describe(
+    "Links only: additional text column carrying the element's cached display text."
+  ),
+  keep_empty: zod_default.boolean().optional().describe(
+    "Keep source rows whose cell is NULL / empty as one output row with NULL element columns. Defaults to false (such rows are dropped)."
+  )
+});
+var appWorkflowInputBaseSchema = zod_default.object({
+  description: zod_default.string().optional().describe("Human-readable description of this input \u2014 surfaces in agent + CLI tooling"),
+  required: zod_default.boolean().optional().describe("Whether the input must be provided. Defaults to true.")
+});
+var appWorkflowInputTextSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("text")
+});
+var appWorkflowInputNumberSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("number")
+});
+var appWorkflowInputBooleanSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("boolean")
+});
+var appWorkflowInputDateSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("date")
+});
+var appWorkflowInputDatetimeSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("datetime")
+});
+var appWorkflowInputEmailSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("email")
+});
+var appWorkflowInputRecordLinkSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("record_link"),
+  table_id: zod_default.string().describe("Records must belong to this table. Validated at execute time + workflow save."),
+  multi: zod_default.boolean().optional().describe("When true, accept an array of record_ids. Defaults to single.")
+});
+var selectOptionSourceShape = {
+  options: zod_default.array(
+    zod_default.object({
+      label: zod_default.string(),
+      value: zod_default.string()
+    })
+  ).min(1).optional().describe("Inline option set. Provide EITHER `options` OR `field`, never both."),
+  field: zod_default.string().optional().describe(
+    "A select field's key (fld_\u2026) whose CURRENT options back this declaration \u2014 resolved at type-gen, validated at run time, drift-proof. Provide EITHER `field` OR `options`, never both."
+  ),
+  multi: zod_default.boolean().optional()
+};
+function checkExactlyOneOptionSource(kind) {
+  return (ctx) => {
+    const hasOptions = ctx.value.options !== void 0;
+    const hasField = ctx.value.field !== void 0;
+    if (hasOptions === hasField) {
+      ctx.issues.push({
+        code: "custom",
+        input: ctx.value,
+        message: `select ${kind} must declare exactly one of \`options\` (inline) or \`field\` (a fld_\u2026 key resolved to the field's current options) \u2014 not both, not neither`
+      });
+    }
+  };
+}
+var appWorkflowInputSelectSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("select"),
+  ...selectOptionSourceShape
+}).check(checkExactlyOneOptionSource("input"));
+var appWorkflowInputDateRangeSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("date_range"),
+  include_time: zod_default.boolean().optional().describe("When true, the range includes time components (datetime). Defaults to false.")
+});
+var appWorkflowInputMemberSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("member"),
+  multi: zod_default.boolean().optional(),
+  group: zod_default.string().optional().describe(
+    "Member group ID this input draws from. Gates `useMembers({ group })` to declared groups (an app can only list a group it declares here) and constrains the submitted member(s) to that group at execution."
+  )
+});
+var appWorkflowInputJsonSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("json")
+});
+var appWorkflowInputFileSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("file"),
+  // `multi` mirrors record_link/select/member: a single `file` → `FileId`, a
+  // `multi` file → `ReadonlyArray<FileId>` (directly assignable to a files field,
+  // so a workflow can attach several uploads to one record's files field).
+  multi: zod_default.boolean().optional()
+});
+var appWorkflowInputObjectSchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("object"),
+  fields: zod_default.record(
+    zod_default.string(),
+    zod_default.lazy(() => appWorkflowInputSchema)
+  )
+});
+var appWorkflowInputArraySchema = appWorkflowInputBaseSchema.extend({
+  type: zod_default.literal("array"),
+  items: zod_default.lazy(() => appWorkflowInputSchema)
+});
+var appWorkflowInputSchema = zod_default.lazy(
+  () => zod_default.discriminatedUnion("type", [
+    appWorkflowInputTextSchema,
+    appWorkflowInputNumberSchema,
+    appWorkflowInputBooleanSchema,
+    appWorkflowInputDateSchema,
+    appWorkflowInputDatetimeSchema,
+    appWorkflowInputEmailSchema,
+    appWorkflowInputRecordLinkSchema,
+    appWorkflowInputSelectSchema,
+    appWorkflowInputDateRangeSchema,
+    appWorkflowInputMemberSchema,
+    appWorkflowInputJsonSchema,
+    appWorkflowInputFileSchema,
+    appWorkflowInputObjectSchema,
+    appWorkflowInputArraySchema
+  ])
+);
+var MAX_APP_WORKFLOW_OUTPUT_DEPTH = 8;
+var appWorkflowOutputBaseSchema = zod_default.object({
+  description: zod_default.string().optional(),
+  /** Whether this field is always present in the returned data. Defaults to true. */
+  required: zod_default.boolean().optional()
+});
+var appWorkflowOutputSchema = zod_default.lazy(
+  () => zod_default.discriminatedUnion("type", [
+    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("text") }),
+    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("number") }),
+    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("boolean") }),
+    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("date") }),
+    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("datetime") }),
+    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("email") }),
+    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("json") }),
+    appWorkflowOutputBaseSchema.extend({
+      type: zod_default.literal("record_link"),
+      table_id: zod_default.string(),
+      multi: zod_default.boolean().optional()
+    }),
+    // The SAME shape and the SAME check as the select INPUT, not a copy of
+    // them: the two surfaces declare one vocabulary (GAP-294), so accepting
+    // `field` on one and not the other — or validating it differently — just
+    // moves the drift somewhere nobody looks.
+    appWorkflowOutputBaseSchema.extend({
+      type: zod_default.literal("select"),
+      ...selectOptionSourceShape
+    }).check(checkExactlyOneOptionSource("output")),
+    appWorkflowOutputBaseSchema.extend({
+      type: zod_default.literal("object"),
+      fields: zod_default.record(zod_default.string(), appWorkflowOutputSchema)
+    }),
+    appWorkflowOutputBaseSchema.extend({
+      type: zod_default.literal("array"),
+      items: appWorkflowOutputSchema
+    })
+  ])
+);
+function appWorkflowOutputDepth(output) {
+  if (output.type === "object") {
+    const fields = Object.values(output.fields);
+    return 1 + (fields.length === 0 ? 0 : Math.max(...fields.map(appWorkflowOutputDepth)));
+  }
+  if (output.type === "array") return 1 + appWorkflowOutputDepth(output.items);
+  return 1;
+}
+var appWorkflowDeclarationSchema = zod_default.object({
+  workflow_id: zod_default.string().describe("ID of the workflow this alias resolves to"),
+  inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe(
+    "Typed input schema for the workflow alias. Keys are input names; values declare type + constraints. The server validates payloads against this schema before invoking the workflow; CLI codegen emits typed `useWorkflow<alias>` signatures for the app side. Omit `inputs` for workflows that accept no inputs or whose shape isn't worth declaring."
+  ),
+  outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional().describe(
+    "Typed output schema for the data the workflow returns via `return({ data })`. Keys are field names; values declare type + (nested object/array) shape. The server validates the returned data against this schema at the app boundary and the workflow won't save unless its `return({ data })` matches; CLI codegen types `result.data`. Omit when the workflow returns no data, or pass it through untyped."
+  ).refine(
+    (outputs) => outputs === void 0 || Object.values(outputs).every((o) => appWorkflowOutputDepth(o) <= MAX_APP_WORKFLOW_OUTPUT_DEPTH),
+    { message: `output schema nesting exceeds the max depth of ${MAX_APP_WORKFLOW_OUTPUT_DEPTH}` }
   ),
-  functions: zod_default.array(queryWindowFunctionColumnSchema).optional().describe(
-    "Ranking / navigation window functions (row_number, rank, dense_rank, percent_rank, cume_dist, ntile, lag, lead). Never framed; require a non-empty order_by."
+  description: zod_default.string().optional().describe(
+    "What this workflow does, in one line \u2014 read by an agent choosing between the app's aliases, the same job a query's `description` does. `lotics app workflow set` sends it, so it lives beside the body in version control; omitted, the workflow keeps the description already on it."
+  ),
+  body_sha: zod_default.string().optional().describe(
+    "Fingerprint of the body currently bound to this alias, written by the server on every accepted `set_app_workflow`. Never sent by a caller \u2014 it is the value a caller's `expected_body_sha` is checked against, so that a push built on a stale copy of the body is refused instead of silently overwriting whatever replaced it. Absent on a binding last written before the field existed, where no comparison is possible."
   )
 });
-var querySortNodeSchema = zod_default.object({
-  kind: zod_default.literal("sort"),
-  from: zod_default.lazy(() => queryNodeSchema),
-  by: tableRecordSortSchema
-});
-var queryKeysetSchema = zod_default.object({
-  // The single sort key the cursor seeks on (0 or 1 — multi-key sorts fall back
-  // to OFFSET). `__source_record_id` ASC is always appended as the tiebreaker,
-  // so the order is total and pages never skip/duplicate on ties.
-  by: tableRecordSortSchema.max(1),
-  // The seek position — absent on the FIRST page (ordering only, no predicate).
-  after: zod_default.object({
-    // The sort key's value on the last row of the previous page (one per `by`
-    // entry), and that row's record id — together the seek position.
-    values: zod_default.array(zod_default.union([zod_default.string(), zod_default.number(), zod_default.boolean(), zod_default.null()])),
-    id: zod_default.string()
-  }).optional()
-});
-var queryLimitNodeSchema = zod_default.object({
-  kind: zod_default.literal("limit"),
-  from: zod_default.lazy(() => queryNodeSchema),
-  n: zod_default.number().int().positive(),
-  offset: zod_default.number().int().nonnegative().optional(),
-  // Keyset (seek) pagination — mutually exclusive with `offset`. When present,
-  // the node applies the ORDER BY (`by` + id tiebreaker) and a seek predicate
-  // itself, so `from` must NOT be pre-wrapped in a sort node.
-  keyset: queryKeysetSchema.optional()
-});
-var queryUnpivotPassthroughColumnSchema = zod_default.object({
-  output: zod_default.string(),
-  type: queryColumnTypeSchema,
-  source: querySourceSchema
-});
-var queryUnpivotRowColumnSchema = zod_default.object({
-  output: zod_default.string(),
-  type: queryColumnTypeSchema
+var appWorkflowContractSchema = zod_default.object({
+  inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional(),
+  outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional()
 });
-var queryUnpivotNodeSchema = zod_default.object({
-  kind: zod_default.literal("unpivot"),
-  from: zod_default.lazy(() => queryNodeSchema),
-  passthrough: zod_default.array(queryUnpivotPassthroughColumnSchema).describe(
-    "Columns projected once from the source row and replicated across every fanned-out row. May be empty."
+var MAX_APP_CAPABILITY_DESCRIPTION = 300;
+var appQueryDeclarationSchema = zod_default.object({
+  ast: zod_default.unknown().describe(
+    "Query AST template (a QueryNode). Validated server-side via parseQueryNode at deploy. May embed {{params.<name>}} tokens in filter value positions."
   ),
-  row_columns: zod_default.array(queryUnpivotRowColumnSchema).min(1).describe(
-    "Schema of the row columns produced per fanned-out row. Types declared once; per-row sources live in `rows`."
+  params: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe(
+    "Typed param schema. Keys are param names referenced as {{params.<name>}} in the ast; values declare type + constraints. The server validates the caller's params payload against this before interpolating. Omit for queries that take no params."
   ),
-  rows: zod_default.array(zod_default.record(zod_default.string(), querySourceSchema)).min(1).describe(
-    "Each entry produces one output row per source input row. Each entry must provide a source keyed by every `row_columns[*].output`."
+  description: zod_default.string().optional().describe(
+    `What this query returns, in one line \u2014 read by an agent choosing between the app's aliases. An alias is a JS identifier, which names a query without saying what it covers. Capped at ${MAX_APP_CAPABILITY_DESCRIPTION} characters.`
   )
 });
-var queryUnnestNodeSchema = zod_default.object({
-  kind: zod_default.literal("unnest"),
-  from: zod_default.lazy(() => queryNodeSchema),
-  source: zod_default.string().describe(
-    "Array-valued input column to fan out (select / select_member / select_record_link / files, incl. array-valued lookups)."
+var appAgentDeclarationSchema = zod_default.object({
+  instructions: zod_default.string().min(1).describe("System instructions for the agent \u2014 the task it performs per run."),
+  tool_names: zod_default.array(zod_default.string().min(1)).describe(
+    "Tools the agent may call, resolved against the shared registry minus the automation blacklist. The capability boundary \u2014 the run can use nothing else. May be empty for a pure-reasoning agent."
   ),
-  output: zod_default.string().describe(
-    "New text column holding each element's identity: option key / member id / link id / file id, by the source column's type."
+  knowledge_doc_ids: zod_default.array(zod_default.string().min(1)).optional().describe(
+    "Knowledge docs the agent may read, validated at declare time against the app owner's `use` access. Small docs are inlined into the agent's system prompt each run; a doc too large to inline requires the code tools (code_exec) in tool_names and is read by staging it into a code run. Omit for an agent that needs no knowledge."
   ),
-  display_output: zod_default.string().optional().describe(
-    "Links only: additional text column carrying the element's cached display text."
+  query_aliases: zod_default.array(zod_default.string().min(1)).optional().describe(
+    "Named queries from this app's manifest the agent may run via `run_app_query`, validated at declare time against the app's own queries. This is the agent's ENTIRE read surface over workspace data \u2014 a template fixes the tables, filters, and projection, so it bounds rows and columns, not just tables. Omit for an agent that reads no records."
   ),
-  keep_empty: zod_default.boolean().optional().describe(
-    "Keep source rows whose cell is NULL / empty as one output row with NULL element columns. Defaults to false (such rows are dropped)."
+  workflow_aliases: zod_default.array(zod_default.string().min(1)).optional().describe(
+    "Workflows from this app's manifest the agent may invoke via `run_app_workflow`, validated at declare time against the app's own workflows. This is the agent's ENTIRE write surface \u2014 the same declared mutation path the app's UI uses, so table hooks and side-effect harvesting apply. Omit for a read-only agent."
+  ),
+  model_tier: zod_default.enum(MODEL_TIERS).optional().describe(
+    "Model tier the agent runs on \u2014 `haiku`, `sonnet`, or `opus`. Omit to follow the platform default tier, resolved at run time: the preferred choice. A tier names capability, not a version, so the generation behind it moves with the platform and this declaration never needs a rewrite. Pin only a deliberate, tested choice."
+  ),
+  effort_level: zod_default.enum(EFFORT_LEVELS).optional().describe(
+    "Reasoning depth for adaptive-thinking tiers \u2014 one of the chosen tier's supported levels (validated against model_tier at declare time). Omit to use the model default; ignored on tiers without adaptive thinking."
+  ),
+  prefix_cache_ttl: zod_default.enum(PREFIX_CACHE_TTLS).optional().describe(
+    `How long this agent's prompt-cache prefix (tools + system block) is kept warm. Omit \u2014 the default (5m, Anthropic's own) is right for essentially every agent. "1h" doubles the write price (2x the input rate against 1.25x) to buy only the 5m..1h band, and an entry nothing re-reads inside the hour is paid for twice over; declining it still leaves the prefix cached at the default. Set it only from measured cadence, never a guess.`
+  ),
+  inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe(
+    "Typed input schema for one run. Keys are input names; values declare type + constraints. The server validates the run payload against this before invoking; CLI codegen emits a typed `useAgentRun<alias>` signature. Omit for an untyped payload."
+  ),
+  outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional().describe(
+    "Typed output schema for the structured result the agent emits. Keys are field names; values declare type + (nested object/array) shape. When declared, the run must emit a result matching it \u2014 the server validates before persisting and the SDK types `run.output`. Omit for a free-text run whose output is the final message."
+  ).refine(
+    (outputs) => outputs === void 0 || Object.values(outputs).every((o) => appWorkflowOutputDepth(o) <= MAX_APP_WORKFLOW_OUTPUT_DEPTH),
+    { message: `output schema nesting exceeds the max depth of ${MAX_APP_WORKFLOW_OUTPUT_DEPTH}` }
   )
 });
-var appWorkflowInputBaseSchema = zod_default.object({
-  description: zod_default.string().optional().describe("Human-readable description of this input \u2014 surfaces in agent + CLI tooling"),
-  required: zod_default.boolean().optional().describe("Whether the input must be provided. Defaults to true.")
-});
-var appWorkflowInputTextSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("text")
-});
-var appWorkflowInputNumberSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("number")
-});
-var appWorkflowInputBooleanSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("boolean")
-});
-var appWorkflowInputDateSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("date")
+var appThemeSchema = zod_default.object({
+  color: optionColorSchema.nullable().optional().describe("Theme color for the app")
 });
-var appWorkflowInputDatetimeSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("datetime")
+var appCapabilitiesSchema = zod_default.object({
+  comments: zod_default.boolean().optional().describe(
+    "Enable the members-only `useComments` primitive. When true, the app may read/write record comments \u2014 each operation under the VIEWING member's own table access, row-scope, and author identity (never the app owner's). Default off."
+  )
 });
-var appWorkflowInputEmailSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("email")
+var appSchema = zod_default.object({
+  id: zod_default.string().describe("Unique identifier for the app"),
+  name: zod_default.string().describe("Display name of the app"),
+  description: zod_default.string().nullable().optional().describe("Optional description of the app's purpose"),
+  icon: zod_default.string().nullable().optional().describe("Icon name for the app (e.g., 'home', 'chart-bar')"),
+  workspace_id: zod_default.string().describe("ID of the workspace this app belongs to"),
+  current_version_id: zod_default.string().nullable().optional().describe(
+    "Pointer to the currently-published app_versions row in R2. Set once the app has been deployed at least once via `lotics app deploy`; null before the first deploy."
+  ),
+  public_subdomain: zod_default.string().describe(
+    "DNS label for the app's public origin: `<public_subdomain>.lotics.app`. Server-generated, high-entropy, and distinct from `id` (app_ids are not valid DNS labels). Assigned at creation for every app."
+  ),
+  public_password_set: zod_default.boolean().optional().describe(
+    "Whether a shared password gates the public binding. True \u2192 anonymous visitors must authenticate at `/v1/apps/{app_id}/public/authenticate` before any publicAppAccess endpoint resolves. The hash itself is never sent over the wire; only this flag is exposed (and only on authenticated owner-side reads \u2014 the public by-subdomain response surfaces the same fact as `requires_password`)."
+  ),
+  workflows: zod_default.record(zod_default.string(), appWorkflowDeclarationSchema).nullable().optional().describe(
+    "Alias \u2192 workflow declaration map. Each alias resolves to a workflow_id and an optional typed inputs schema. Authored solely by `set_app_workflow` / `remove_app_workflow` (NOT by `lotics app deploy`, which never touches this map). The iframe SDK's useWorkflow(alias) resolves through this map; when an inputs schema is declared, the server validates payloads against it before invocation and the CLI codegen emits typed call-site signatures. The workflow always executes under the app's IAM principal."
+  ),
+  queries: zod_default.record(zod_default.string(), appQueryDeclarationSchema).nullable().optional().describe(
+    "Alias \u2192 query declaration map. Each alias resolves to a fixed query AST template with a typed param schema. Synced from the app's lotics.queries manifest on every `lotics app deploy`. The iframe SDK's useQuery(alias, params) resolves through this map; custom-code apps never send a raw AST. The query runs under the app's IAM principal."
+  ),
+  capabilities: appCapabilitiesSchema.nullable().optional().describe(
+    "Opt-in app capabilities, declared in the manifest's `lotics.capabilities` and synced on every deploy. Capabilities are off unless declared \u2014 least ambient authority. `comments` gates the members-only `useComments` primitive: only an app that declares it can read/write record comments (each under the VIEWING member's own authority)."
+  ),
+  agents: zod_default.record(zod_default.string(), appAgentDeclarationSchema).nullable().optional().describe(
+    "Alias \u2192 agent declaration map. Each alias binds a streaming tool-loop agent the app runs via `useAgentRun(alias)` (an SSE stream), with declared tools, model, and typed inputs/outputs. Synced from the app's `lotics.agents` manifest on every deploy. The agent runs under the app's IAM principal; runs persist a flat history per session."
+  ),
+  theme: appThemeSchema.nullable().optional().describe("Theme settings for the app"),
+  /**
+   * The starter this app is the ORIGIN of, when it is one — list enrichment,
+   * read from the registry rather than stored on the app.
+   *
+   * This is provenance in the only direction that exists under one-way copies:
+   * an app can have PUBLISHED a starter, but an app that was COPIED FROM one
+   * records nothing, because it owns everything it received outright. Null for
+   * every app that has published nothing.
+   */
+  starter_origin: zod_default.object({
+    starter_id: zod_default.string(),
+    /** The highest version published from this app. */
+    version: zod_default.number().int(),
+    is_official: zod_default.boolean()
+  }).nullable().optional(),
+  created_at: zod_default.string().describe("Timestamp when app was created"),
+  updated_at: zod_default.string().describe("Timestamp of last update")
 });
-var appWorkflowInputRecordLinkSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("record_link"),
-  table_id: zod_default.string().describe("Records must belong to this table. Validated at execute time + workflow save."),
-  multi: zod_default.boolean().optional().describe("When true, accept an array of record_ids. Defaults to single.")
+
+// ../../node_modules/@date-fns/tz/tzName/index.js
+function tzName(timeZone, date6, format2 = "long") {
+  return new Intl.DateTimeFormat("en-US", {
+    // Enforces engine to render the time. Without the option JavaScriptCore omits it.
+    hour: "numeric",
+    timeZone,
+    timeZoneName: format2
+  }).format(date6).split(/\s/g).slice(2).join(" ");
+}
+
+// ../../node_modules/@date-fns/tz/tzOffset/index.js
+var offsetFormatCache = {};
+var offsetCache = {};
+function tzOffset(timeZone, date6) {
+  try {
+    const format2 = offsetFormatCache[timeZone] ||= new Intl.DateTimeFormat("en-US", {
+      timeZone,
+      timeZoneName: "longOffset"
+    }).format;
+    const offsetStr = format2(date6).split("GMT")[1];
+    if (offsetStr in offsetCache) return offsetCache[offsetStr];
+    return calcOffset(offsetStr, offsetStr.split(":"));
+  } catch {
+    if (timeZone in offsetCache) return offsetCache[timeZone];
+    const captures = timeZone?.match(offsetRe);
+    if (captures) return calcOffset(timeZone, captures.slice(1));
+    return NaN;
+  }
+}
+var offsetRe = /([+-]\d\d):?(\d\d)?/;
+function calcOffset(cacheStr, values3) {
+  const hours = +(values3[0] || 0);
+  const minutes = +(values3[1] || 0);
+  const seconds = +(values3[2] || 0) / 60;
+  return offsetCache[cacheStr] = hours * 60 + minutes > 0 ? hours * 60 + minutes + seconds : hours * 60 - minutes - seconds;
+}
+
+// ../../node_modules/@date-fns/tz/date/mini.js
+var TZDateMini = class _TZDateMini extends Date {
+  //#region static
+  constructor(...args) {
+    super();
+    if (args.length > 1 && typeof args[args.length - 1] === "string") {
+      this.timeZone = args.pop();
+    }
+    this.internal = /* @__PURE__ */ new Date();
+    if (isNaN(tzOffset(this.timeZone, this))) {
+      this.setTime(NaN);
+    } else {
+      if (!args.length) {
+        this.setTime(Date.now());
+      } else if (typeof args[0] === "number" && (args.length === 1 || args.length === 2 && typeof args[1] !== "number")) {
+        this.setTime(args[0]);
+      } else if (typeof args[0] === "string") {
+        this.setTime(+new Date(args[0]));
+      } else if (args[0] instanceof Date) {
+        this.setTime(+args[0]);
+      } else {
+        this.setTime(+new Date(...args));
+        adjustToSystemTZ(this, NaN);
+        syncToInternal(this);
+      }
+    }
+  }
+  static tz(tz, ...args) {
+    return args.length ? new _TZDateMini(...args, tz) : new _TZDateMini(Date.now(), tz);
+  }
+  //#endregion
+  //#region time zone
+  withTimeZone(timeZone) {
+    return new _TZDateMini(+this, timeZone);
+  }
+  getTimezoneOffset() {
+    const offset = -tzOffset(this.timeZone, this);
+    return offset > 0 ? Math.floor(offset) : Math.ceil(offset);
+  }
+  //#endregion
+  //#region time
+  setTime(time3) {
+    Date.prototype.setTime.apply(this, arguments);
+    syncToInternal(this);
+    return +this;
+  }
+  //#endregion
+  //#region date-fns integration
+  [/* @__PURE__ */ Symbol.for("constructDateFrom")](date6) {
+    return new _TZDateMini(+new Date(date6), this.timeZone);
+  }
+  //#endregion
+};
+var re = /^(get|set)(?!UTC)/;
+Object.getOwnPropertyNames(Date.prototype).forEach((method) => {
+  if (!re.test(method)) return;
+  const utcMethod = method.replace(re, "$1UTC");
+  if (!TZDateMini.prototype[utcMethod]) return;
+  if (method.startsWith("get")) {
+    TZDateMini.prototype[method] = function() {
+      return this.internal[utcMethod]();
+    };
+  } else {
+    TZDateMini.prototype[method] = function() {
+      Date.prototype[utcMethod].apply(this.internal, arguments);
+      syncFromInternal(this);
+      return +this;
+    };
+    TZDateMini.prototype[utcMethod] = function() {
+      Date.prototype[utcMethod].apply(this, arguments);
+      syncToInternal(this);
+      return +this;
+    };
+  }
 });
-var selectOptionSourceShape = {
-  options: zod_default.array(
-    zod_default.object({
-      label: zod_default.string(),
-      value: zod_default.string()
-    })
-  ).min(1).optional().describe("Inline option set. Provide EITHER `options` OR `field`, never both."),
-  field: zod_default.string().optional().describe(
-    "A select field's key (fld_\u2026) whose CURRENT options back this declaration \u2014 resolved at type-gen, validated at run time, drift-proof. Provide EITHER `field` OR `options`, never both."
-  ),
-  multi: zod_default.boolean().optional()
+function syncToInternal(date6) {
+  date6.internal.setTime(+date6);
+  date6.internal.setUTCSeconds(date6.internal.getUTCSeconds() - Math.round(-tzOffset(date6.timeZone, date6) * 60));
+}
+function syncFromInternal(date6) {
+  Date.prototype.setFullYear.call(date6, date6.internal.getUTCFullYear(), date6.internal.getUTCMonth(), date6.internal.getUTCDate());
+  Date.prototype.setHours.call(date6, date6.internal.getUTCHours(), date6.internal.getUTCMinutes(), date6.internal.getUTCSeconds(), date6.internal.getUTCMilliseconds());
+  adjustToSystemTZ(date6);
+}
+function adjustToSystemTZ(date6) {
+  const baseOffset = tzOffset(date6.timeZone, date6);
+  const offset = baseOffset > 0 ? Math.floor(baseOffset) : Math.ceil(baseOffset);
+  const prevHour = /* @__PURE__ */ new Date(+date6);
+  prevHour.setUTCHours(prevHour.getUTCHours() - 1);
+  const systemOffset = -(/* @__PURE__ */ new Date(+date6)).getTimezoneOffset();
+  const prevHourSystemOffset = -(/* @__PURE__ */ new Date(+prevHour)).getTimezoneOffset();
+  const systemDSTChange = systemOffset - prevHourSystemOffset;
+  const dstShift = Date.prototype.getHours.apply(date6) !== date6.internal.getUTCHours();
+  if (systemDSTChange && dstShift) date6.internal.setUTCMinutes(date6.internal.getUTCMinutes() + systemDSTChange);
+  const offsetDiff = systemOffset - offset;
+  if (offsetDiff) Date.prototype.setUTCMinutes.call(date6, Date.prototype.getUTCMinutes.call(date6) + offsetDiff);
+  const systemDate = /* @__PURE__ */ new Date(+date6);
+  systemDate.setUTCSeconds(0);
+  const systemSecondsOffset = systemOffset > 0 ? systemDate.getSeconds() : (systemDate.getSeconds() - 60) % 60;
+  const secondsOffset = Math.round(-(tzOffset(date6.timeZone, date6) * 60)) % 60;
+  if (secondsOffset || systemSecondsOffset) {
+    date6.internal.setUTCSeconds(date6.internal.getUTCSeconds() + secondsOffset);
+    Date.prototype.setUTCSeconds.call(date6, Date.prototype.getUTCSeconds.call(date6) + secondsOffset + systemSecondsOffset);
+  }
+  const postBaseOffset = tzOffset(date6.timeZone, date6);
+  const postOffset = postBaseOffset > 0 ? Math.floor(postBaseOffset) : Math.ceil(postBaseOffset);
+  const postSystemOffset = -(/* @__PURE__ */ new Date(+date6)).getTimezoneOffset();
+  const postOffsetDiff = postSystemOffset - postOffset;
+  const offsetChanged = postOffset !== offset;
+  const postDiff = postOffsetDiff - offsetDiff;
+  if (offsetChanged && postDiff) {
+    Date.prototype.setUTCMinutes.call(date6, Date.prototype.getUTCMinutes.call(date6) + postDiff);
+    const newBaseOffset = tzOffset(date6.timeZone, date6);
+    const newOffset = newBaseOffset > 0 ? Math.floor(newBaseOffset) : Math.ceil(newBaseOffset);
+    const offsetChange = postOffset - newOffset;
+    if (offsetChange) {
+      date6.internal.setUTCMinutes(date6.internal.getUTCMinutes() + offsetChange);
+      Date.prototype.setUTCMinutes.call(date6, Date.prototype.getUTCMinutes.call(date6) + offsetChange);
+    }
+  }
+}
+
+// ../../node_modules/@date-fns/tz/date/index.js
+var TZDate = class _TZDate extends TZDateMini {
+  //#region static
+  static tz(tz, ...args) {
+    return args.length ? new _TZDate(...args, tz) : new _TZDate(Date.now(), tz);
+  }
+  //#endregion
+  //#region representation
+  toISOString() {
+    const [sign, hours, minutes] = this.tzComponents();
+    const tz = `${sign}${hours}:${minutes}`;
+    return this.internal.toISOString().slice(0, -1) + tz;
+  }
+  toString() {
+    return `${this.toDateString()} ${this.toTimeString()}`;
+  }
+  toDateString() {
+    const [day, date6, month, year] = this.internal.toUTCString().split(" ");
+    return `${day?.slice(0, -1)} ${month} ${date6} ${year}`;
+  }
+  toTimeString() {
+    const time3 = this.internal.toUTCString().split(" ")[4];
+    const [sign, hours, minutes] = this.tzComponents();
+    return `${time3} GMT${sign}${hours}${minutes} (${tzName(this.timeZone, this)})`;
+  }
+  toLocaleString(locales, options) {
+    return Date.prototype.toLocaleString.call(this, locales, {
+      ...options,
+      timeZone: options?.timeZone || this.timeZone
+    });
+  }
+  toLocaleDateString(locales, options) {
+    return Date.prototype.toLocaleDateString.call(this, locales, {
+      ...options,
+      timeZone: options?.timeZone || this.timeZone
+    });
+  }
+  toLocaleTimeString(locales, options) {
+    return Date.prototype.toLocaleTimeString.call(this, locales, {
+      ...options,
+      timeZone: options?.timeZone || this.timeZone
+    });
+  }
+  //#endregion
+  //#region private
+  tzComponents() {
+    const offset = this.getTimezoneOffset();
+    const sign = offset > 0 ? "-" : "+";
+    const hours = String(Math.floor(Math.abs(offset) / 60)).padStart(2, "0");
+    const minutes = String(Math.abs(offset) % 60).padStart(2, "0");
+    return [sign, hours, minutes];
+  }
+  //#endregion
+  withTimeZone(timeZone) {
+    return new _TZDate(+this, timeZone);
+  }
+  //#region date-fns integration
+  [/* @__PURE__ */ Symbol.for("constructDateFrom")](date6) {
+    return new _TZDate(+new Date(date6), this.timeZone);
+  }
+  //#endregion
+};
+
+// ../shared/src/app_query_ast.ts
+function collectQueryTableIds(node) {
+  const result = /* @__PURE__ */ new Set();
+  walk(node, (n) => {
+    if (n.kind === "from_table") result.add(n.table_id);
+  });
+  return result;
+}
+function walk(node, visit) {
+  visit(node);
+  switch (node.kind) {
+    case "from_table":
+      return;
+    case "project":
+    case "filter":
+    case "group":
+    case "window":
+    case "sort":
+    case "limit":
+    case "unpivot":
+    case "unnest":
+      walk(node.from, visit);
+      return;
+    case "join":
+      walk(node.left, visit);
+      walk(node.right, visit);
+      return;
+    case "union":
+      for (const child of node.sources) walk(child, visit);
+      return;
+    default: {
+      const _exhaustive = node;
+      void _exhaustive;
+      return;
+    }
+  }
+}
+
+// ../shared/src/app_query_output_schema.ts
+function normalizeProjectionColumn(proj) {
+  return typeof proj === "string" ? { source: proj } : proj;
+}
+function resolveProjectionOutput(proj) {
+  const col = normalizeProjectionColumn(proj);
+  if (col.output !== void 0) return col.output;
+  return typeof col.source === "string" ? col.source : void 0;
+}
+function queryOutputNames(node) {
+  switch (node.kind) {
+    case "from_table":
+      return void 0;
+    case "project": {
+      const names = [];
+      for (const proj of node.columns) {
+        const output = resolveProjectionOutput(proj);
+        if (output === void 0) return void 0;
+        names.push(output);
+      }
+      return names;
+    }
+    case "filter":
+    case "sort":
+    case "limit":
+      return queryOutputNames(node.from);
+    case "join": {
+      const left = queryOutputNames(node.left);
+      const right = queryOutputNames(node.right);
+      return left && right ? [...left, ...right] : void 0;
+    }
+    case "union":
+      return node.sources.length > 0 ? queryOutputNames(node.sources[0]) : void 0;
+    case "group":
+      return [
+        ...node.by.map((key) => typeof key === "string" ? key : key.bucket.output),
+        ...node.aggregates.map((agg) => agg.output)
+      ];
+    case "window": {
+      const input = queryOutputNames(node.from);
+      if (input === void 0) return void 0;
+      return [
+        ...input,
+        ...(node.aggregates ?? []).map((a) => a.output),
+        ...(node.functions ?? []).map((f) => f.output)
+      ];
+    }
+    case "unpivot":
+      return [...node.passthrough.map((p) => p.output), ...node.row_columns.map((c) => c.output)];
+    case "unnest": {
+      const input = queryOutputNames(node.from);
+      if (input === void 0) return void 0;
+      return [...input, node.output, ...node.display_output !== void 0 ? [node.display_output] : []];
+    }
+    default: {
+      const _exhaustive = node;
+      return _exhaustive;
+    }
+  }
+}
+
+// ../shared/src/app_dts.ts
+var IDENTIFIER_REGEX = /^[a-zA-Z_$][a-zA-Z0-9_$]*$/;
+function isValidIdentifier(name2) {
+  return IDENTIFIER_REGEX.test(name2);
+}
+function inputsToType(inputs, opts) {
+  const nullableOptional = opts?.nullableOptional === true;
+  const fields = [];
+  for (const [key, decl] of Object.entries(inputs)) {
+    if (decl === null || typeof decl !== "object") continue;
+    const d = decl;
+    const tsType = inputDeclToTsType(d);
+    const isOptional = d.required === false;
+    const fieldType = isOptional && nullableOptional ? `${tsType} | null` : tsType;
+    const optional2 = isOptional ? "?" : "";
+    const fieldKey = isValidIdentifier(key) ? key : JSON.stringify(key);
+    fields.push(`      ${fieldKey}${optional2}: ${fieldType};`);
+  }
+  if (fields.length === 0) return "Record<string, never>";
+  return `{
+${fields.join("\n")}
+    }`;
+}
+function inputDeclToTsType(decl) {
+  const type = decl.type;
+  switch (type) {
+    case "text":
+    case "email":
+    case "date":
+    case "datetime":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "record_link":
+    case "member": {
+      const inner = "string";
+      return decl.multi === true ? `ReadonlyArray<${inner}>` : inner;
+    }
+    case "select": {
+      const options = Array.isArray(decl.options) ? decl.options : [];
+      const literals = options.map((o) => {
+        if (o !== null && typeof o === "object" && "value" in o && typeof o.value === "string") {
+          return JSON.stringify(o.value);
+        }
+        return null;
+      }).filter((v) => v !== null);
+      const inner = literals.length > 0 ? `${literals.join(" | ")} | (string & {})` : "string";
+      return decl.multi === true ? `ReadonlyArray<${inner}>` : inner;
+    }
+    case "date_range":
+      return "{ start: string; end: string }";
+    case "file":
+      return decl.multi === true ? "ReadonlyArray<string>" : "string";
+    case "object": {
+      const fields = decl.fields !== null && typeof decl.fields === "object" ? decl.fields : {};
+      return inputsToType(fields);
+    }
+    case "array": {
+      const items = decl.items !== null && typeof decl.items === "object" ? decl.items : null;
+      return items ? `ReadonlyArray<${inputDeclToTsType(items)}>` : "ReadonlyArray<unknown>";
+    }
+    case "json":
+      return "unknown";
+    default:
+      return "unknown";
+  }
+}
+function objectFieldsToType(fields) {
+  const parts = [];
+  for (const [key, decl] of Object.entries(fields)) {
+    if (decl === null || typeof decl !== "object") continue;
+    const d = decl;
+    const optional2 = d.required === false ? "?" : "";
+    const fieldKey = isValidIdentifier(key) ? key : JSON.stringify(key);
+    parts.push(`${fieldKey}${optional2}: ${outputDeclToTsType(d)}`);
+  }
+  if (parts.length === 0) return "Record<string, never>";
+  return `{ ${parts.join("; ")} }`;
+}
+function outputDeclToTsType(decl) {
+  const type = decl.type;
+  switch (type) {
+    case "text":
+    case "email":
+    case "date":
+    case "datetime":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "record_link":
+      return decl.multi === true ? "ReadonlyArray<string>" : "string";
+    case "select": {
+      const options = Array.isArray(decl.options) ? decl.options : [];
+      const literals = options.map(
+        (o) => o !== null && typeof o === "object" && "value" in o && typeof o.value === "string" ? JSON.stringify(o.value) : null
+      ).filter((v) => v !== null);
+      const inner = literals.length > 0 ? `${literals.join(" | ")} | (string & {})` : "string";
+      return decl.multi === true ? `ReadonlyArray<${inner}>` : inner;
+    }
+    case "object": {
+      const fields = decl.fields !== null && typeof decl.fields === "object" ? decl.fields : {};
+      return objectFieldsToType(fields);
+    }
+    case "array": {
+      const items = decl.items !== null && typeof decl.items === "object" ? decl.items : null;
+      return items ? `ReadonlyArray<${outputDeclToTsType(items)}>` : "ReadonlyArray<unknown>";
+    }
+    case "json":
+      return "unknown";
+    default:
+      return "unknown";
+  }
+}
+var QUERIES_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
+// DO NOT EDIT \u2014 regenerated from package.json#lotics.queries.
+//
+// This file gives \`useQuery("alias", params)\` typed params at call sites by
+// augmenting the @lotics/app-sdk \`AppQueries\` interface.
+
+import "@lotics/app-sdk";
+`;
+function generateAppQueriesDts(queries) {
+  const entries2 = Object.entries(queries ?? {});
+  if (entries2.length === 0) {
+    return `${QUERIES_HEADER}
+// No queries declared in package.json#lotics.queries.
+// Add an entry to enable typed useQuery("alias", params) at call sites.
+declare module "@lotics/app-sdk" {
+  interface AppQueries {}
+}
+`;
+  }
+  entries2.sort(([a], [b]) => a.localeCompare(b));
+  const lines = [];
+  const columnLines = [];
+  for (const [alias, declaration] of entries2) {
+    const valueType = inputsToType(declaration.params ?? {});
+    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
+    lines.push(`    ${aliasKey}: ${valueType};`);
+    const parsed = declaration.ast === void 0 ? void 0 : queryNodeSchema.safeParse(declaration.ast);
+    if (parsed && !parsed.success) {
+      columnLines.push(`    // ${aliasKey}: query AST not readable by this CLI version \u2014 keys stay string`);
+      continue;
+    }
+    const names = parsed?.success ? queryOutputNames(parsed.data) : void 0;
+    if (names && names.length > 0) {
+      columnLines.push(`    ${aliasKey}: ${names.map((n) => JSON.stringify(n)).join(" | ")};`);
+    }
+  }
+  return `${QUERIES_HEADER}
+declare module "@lotics/app-sdk" {
+  interface AppQueries {
+${lines.join("\n")}
+  }
+  interface AppQueryColumns {
+${columnLines.join("\n")}
+  }
+}
+`;
+}
+var WORKFLOWS_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
+// DO NOT EDIT \u2014 regenerated from package.json#lotics.workflows.
+//
+// This file gives \`useWorkflow("alias")\` a typed input parameter at call
+// sites by augmenting the @lotics/app-sdk \`AppWorkflows\` interface.
+
+import "@lotics/app-sdk";
+`;
+function generateAppWorkflowsDts(workflows) {
+  const entries2 = Object.entries(workflows ?? {});
+  if (entries2.length === 0) {
+    return `${WORKFLOWS_HEADER}
+// No workflows declared in package.json#lotics.workflows.
+// Add an entry to enable typed useWorkflow<"alias"> at call sites.
+declare module "@lotics/app-sdk" {
+  interface AppWorkflows {}
+}
+`;
+  }
+  entries2.sort(([a], [b]) => a.localeCompare(b));
+  const inputLines = [];
+  const resultLines = [];
+  for (const [alias, declaration] of entries2) {
+    const valueType = declaration.inputs ? inputsToType(declaration.inputs, { nullableOptional: true }) : "Record<string, unknown>";
+    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
+    inputLines.push(`    ${aliasKey}: ${valueType};`);
+    if (declaration.outputs) {
+      resultLines.push(`    ${aliasKey}: ${objectFieldsToType(declaration.outputs)};`);
+    }
+  }
+  const resultsBlock = resultLines.length > 0 ? `
+  interface AppWorkflowResults {
+${resultLines.join("\n")}
+  }` : "";
+  return `${WORKFLOWS_HEADER}
+declare module "@lotics/app-sdk" {
+  interface AppWorkflows {
+${inputLines.join("\n")}
+  }${resultsBlock}
+}
+`;
+}
+var AGENTS_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
+// DO NOT EDIT \u2014 regenerated from package.json#lotics.agents.
+//
+// This file gives \`useAgentRun("alias")\` typed input + output at call sites by
+// augmenting the @lotics/app-sdk \`AppAgents\` / \`AppAgentResults\` interfaces.
+
+import "@lotics/app-sdk";
+`;
+function generateAppAgentsDts(agents) {
+  const entries2 = Object.entries(agents ?? {});
+  if (entries2.length === 0) {
+    return `${AGENTS_HEADER}
+// No agents declared in package.json#lotics.agents.
+// Add an entry to enable typed useAgentRun<"alias"> at call sites.
+declare module "@lotics/app-sdk" {
+  interface AppAgents {}
+}
+`;
+  }
+  entries2.sort(([a], [b]) => a.localeCompare(b));
+  const inputLines = [];
+  const resultLines = [];
+  for (const [alias, declaration] of entries2) {
+    const valueType = declaration.inputs ? inputsToType(declaration.inputs) : "Record<string, unknown>";
+    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
+    inputLines.push(`    ${aliasKey}: ${valueType};`);
+    if (declaration.outputs) {
+      resultLines.push(`    ${aliasKey}: ${objectFieldsToType(declaration.outputs)};`);
+    }
+  }
+  const resultsBlock = resultLines.length > 0 ? `
+  interface AppAgentResults {
+${resultLines.join("\n")}
+  }` : "";
+  return `${AGENTS_HEADER}
+declare module "@lotics/app-sdk" {
+  interface AppAgents {
+${inputLines.join("\n")}
+  }${resultsBlock}
+}
+`;
+}
+var LINK_TSCONFIG_PATH = ".lotics/tsconfig.link.json";
+function generateLinkTsconfig(paths) {
+  const header = Object.keys(paths).length > 0 ? `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
+// LOTICS_UI_SRC is set, so @lotics/ui resolves to your working copy for tsc,
+// vitest, eslint and your editor \u2014 the same copy Vite is bundling. The peer
+// pins keep ONE react / react-native in the program; without them the kit's
+// source resolves its own copies and every shared type stops matching.
+// Unset LOTICS_UI_SRC and re-run to go back to the published kit.
+` : `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
+// @lotics/ui resolves from node_modules as normal, so this is inert. It still
+// has to exist: tsconfig.json extends it, and a missing extends target fails
+// the build outright.
+`;
+  return `${header}${JSON.stringify({ compilerOptions: { paths } }, null, 2)}
+`;
+}
+var CAPABILITY_GATED_CALLS = {
+  comments: ["useComments", "createComment", "updateComment", "deleteComment"]
+};
+function undeclaredCapabilities(sourceText, declared) {
+  const code = codeWithoutComments(sourceText);
+  const used = [];
+  for (const [capability, calls] of Object.entries(CAPABILITY_GATED_CALLS)) {
+    const isCalled = calls.some((call) => new RegExp(`\\b${call}\\b`).test(code));
+    if (isCalled && declared?.[capability] !== true) used.push(capability);
+  }
+  return used;
+}
+function driftedQueryAliases(a, b) {
+  const left = a ?? {};
+  const right = b ?? {};
+  return [.../* @__PURE__ */ new Set([...Object.keys(left), ...Object.keys(right)])].filter((alias) => canonicalJson(left[alias]) !== canonicalJson(right[alias])).sort();
+}
+function canonicalJson(value2) {
+  const normalize = (v) => {
+    if (Array.isArray(v)) return v.map(normalize);
+    if (v === null || typeof v !== "object") return v;
+    const entries2 = Object.entries(v).sort(
+      ([x2], [y]) => x2 < y ? -1 : x2 > y ? 1 : 0
+    );
+    return entries2.map(([key, val]) => [key, normalize(val)]);
+  };
+  return JSON.stringify(normalize(value2));
+}
+var REGEX_MAY_FOLLOW = /* @__PURE__ */ new Set([
+  "return",
+  "typeof",
+  "case",
+  "in",
+  "of",
+  "delete",
+  "void",
+  "instanceof",
+  "new",
+  "do",
+  "else",
+  "yield",
+  "await",
+  "throw"
+]);
+function opensRegex(out, at2) {
+  let k = at2 - 1;
+  while (k >= 0 && (out[k] === " " || out[k] === "\n" || out[k] === "	" || out[k] === "\r")) k--;
+  if (k < 0) return true;
+  const prev = out[k];
+  if ("=(,:[!&|?{;+-*%>~^".includes(prev)) return true;
+  if (/[A-Za-z0-9_$]/.test(prev)) {
+    let s = k;
+    while (s >= 0 && /[A-Za-z0-9_$]/.test(out[s])) s--;
+    return REGEX_MAY_FOLLOW.has(out.slice(s + 1, k + 1).join(""));
+  }
+  return false;
+}
+function codeWithoutComments(sourceText) {
+  const out = sourceText.split("");
+  const n = sourceText.length;
+  const blank = (from, to) => {
+    for (let k = from; k < to; k++) if (out[k] !== "\n") out[k] = " ";
+  };
+  let i2 = 0;
+  while (i2 < n) {
+    const c = sourceText[i2];
+    const next = sourceText[i2 + 1];
+    if (c === "/" && next === "/") {
+      let j = i2;
+      while (j < n && sourceText[j] !== "\n") j++;
+      blank(i2, j);
+      i2 = j;
+      continue;
+    }
+    if (c === "/" && next === "*") {
+      let j = i2 + 2;
+      while (j < n && !(sourceText[j] === "*" && sourceText[j + 1] === "/")) j++;
+      j = j < n ? j + 2 : n;
+      blank(i2, j);
+      i2 = j;
+      continue;
+    }
+    if (c === '"' || c === "'") {
+      let j = i2 + 1;
+      while (j < n && sourceText[j] !== c && sourceText[j] !== "\n") {
+        j += sourceText[j] === "\\" ? 2 : 1;
+      }
+      i2 = j < n && sourceText[j] === c ? j + 1 : j;
+      continue;
+    }
+    if (c === "`") {
+      let j = i2 + 1;
+      while (j < n && sourceText[j] !== "`") {
+        j += sourceText[j] === "\\" ? 2 : 1;
+      }
+      i2 = j < n ? j + 1 : n;
+      continue;
+    }
+    if (c === "/" && opensRegex(out, i2)) {
+      let j = i2 + 1;
+      let inClass = false;
+      while (j < n) {
+        const ch = sourceText[j];
+        if (ch === "\\") {
+          j += 2;
+          continue;
+        }
+        if (ch === "\n") break;
+        if (ch === "[") inClass = true;
+        else if (ch === "]") inClass = false;
+        else if (ch === "/" && !inClass) {
+          j++;
+          break;
+        }
+        j++;
+      }
+      i2 = j;
+      continue;
+    }
+    i2++;
+  }
+  return out.join("");
+}
+var ALIAS_CALL_HOOKS = {
+  queries: ["useQuery", "usePaginatedQuery", "useInfiniteQuery", "useCount", "useFieldOptions"],
+  workflows: ["useWorkflow"],
+  agents: ["useAgentRun"]
 };
-function checkExactlyOneOptionSource(kind) {
-  return (ctx) => {
-    const hasOptions = ctx.value.options !== void 0;
-    const hasField = ctx.value.field !== void 0;
-    if (hasOptions === hasField) {
-      ctx.issues.push({
-        code: "custom",
-        input: ctx.value,
-        message: `select ${kind} must declare exactly one of \`options\` (inline) or \`field\` (a fld_\u2026 key resolved to the field's current options) \u2014 not both, not neither`
-      });
+var LITERAL_ALIAS_ARG = `["'\`]([A-Za-z_$][A-Za-z0-9_$]*)["'\`]`;
+function isAppSourcePath(projectRelativePath) {
+  const normalized = projectRelativePath.replace(/\\/g, "/").replace(/^\.\//, "");
+  return normalized.startsWith("src/") && /\.(ts|tsx|js|jsx)$/.test(normalized);
+}
+function calledAppAliases(sourceText) {
+  const code = codeWithoutComments(sourceText);
+  const out = {
+    queries: [],
+    workflows: [],
+    agents: [],
+    dynamic: []
+  };
+  for (const [kind, hooks] of Object.entries(ALIAS_CALL_HOOKS)) {
+    const seen = /* @__PURE__ */ new Set();
+    for (const hook of hooks) {
+      let isDynamic = false;
+      for (const call of code.matchAll(new RegExp(`\\b${hook}\\s*\\(`, "g"))) {
+        const rest2 = code.slice(call.index + call[0].length);
+        const literal2 = new RegExp(`^\\s*${LITERAL_ALIAS_ARG}`).exec(rest2);
+        if (literal2) seen.add(literal2[1]);
+        else isDynamic = true;
+      }
+      if (isDynamic) out.dynamic.push(hook);
     }
+    out[kind] = [...seen];
+  }
+  return out;
+}
+function orphanedAliases(bound, called) {
+  return unboundAliases(bound, called);
+}
+function unboundAliases(called, bound) {
+  const missing = (from, against) => {
+    const have = new Set(against ?? []);
+    return [...from ?? []].filter((alias) => !have.has(alias));
+  };
+  return {
+    queries: missing(called.queries, bound.queries),
+    workflows: missing(called.workflows, bound.workflows),
+    agents: missing(called.agents, bound.agents)
   };
 }
-var appWorkflowInputSelectSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("select"),
-  ...selectOptionSourceShape
-}).check(checkExactlyOneOptionSource("input"));
-var appWorkflowInputDateRangeSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("date_range"),
-  include_time: zod_default.boolean().optional().describe("When true, the range includes time components (datetime). Defaults to false.")
-});
-var appWorkflowInputMemberSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("member"),
-  multi: zod_default.boolean().optional(),
-  group: zod_default.string().optional().describe(
-    "Member group ID this input draws from. Gates `useMembers({ group })` to declared groups (an app can only list a group it declares here) and constrains the submitted member(s) to that group at execution."
-  )
-});
-var appWorkflowInputJsonSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("json")
-});
-var appWorkflowInputFileSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("file"),
-  // `multi` mirrors record_link/select/member: a single `file` → `FileId`, a
-  // `multi` file → `ReadonlyArray<FileId>` (directly assignable to a files field,
-  // so a workflow can attach several uploads to one record's files field).
-  multi: zod_default.boolean().optional()
-});
-var appWorkflowInputObjectSchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("object"),
-  fields: zod_default.record(
-    zod_default.string(),
-    zod_default.lazy(() => appWorkflowInputSchema)
-  )
-});
-var appWorkflowInputArraySchema = appWorkflowInputBaseSchema.extend({
-  type: zod_default.literal("array"),
-  items: zod_default.lazy(() => appWorkflowInputSchema)
-});
-var appWorkflowInputSchema = zod_default.lazy(
-  () => zod_default.discriminatedUnion("type", [
-    appWorkflowInputTextSchema,
-    appWorkflowInputNumberSchema,
-    appWorkflowInputBooleanSchema,
-    appWorkflowInputDateSchema,
-    appWorkflowInputDatetimeSchema,
-    appWorkflowInputEmailSchema,
-    appWorkflowInputRecordLinkSchema,
-    appWorkflowInputSelectSchema,
-    appWorkflowInputDateRangeSchema,
-    appWorkflowInputMemberSchema,
-    appWorkflowInputJsonSchema,
-    appWorkflowInputFileSchema,
-    appWorkflowInputObjectSchema,
-    appWorkflowInputArraySchema
-  ])
+
+// ../shared/src/generate_app_fields.ts
+var HEADER = `// Auto-generated by 'lotics app codegen' and 'lotics app pull'.
+// DO NOT EDIT \u2014 regenerated from the workspace schema.
+//
+// Runtime field + option ids addressed by stable display-name aliases:
+//   record.data[F.<TABLE>.<field>]            \u2192 "fld_\u2026"
+//   value === OPT.<TABLE>.<field>.<option>    \u2192 "opt_\u2026"
+// A rename on the platform re-runs codegen and moves these in lockstep.
+`;
+function slugifyAlias(name2, upper2) {
+  const stripped = name2.normalize("NFD").replace(/[̀-ͯ]/g, "").replace(/đ/g, "d").replace(/Đ/g, "D");
+  const cased = upper2 ? stripped.toUpperCase() : stripped.toLowerCase();
+  const slug = cased.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+  if (slug === "") return "_";
+  return /^[0-9]/.test(slug) ? `_${slug}` : slug;
+}
+function dedupeAliases(names, upper2) {
+  const used = /* @__PURE__ */ new Map();
+  return names.map((name2) => {
+    const base = slugifyAlias(name2, upper2);
+    const seen = used.get(base);
+    if (seen === void 0) {
+      used.set(base, 1);
+      return base;
+    }
+    let n = seen + 1;
+    while (used.has(`${base}_${n}`)) n++;
+    used.set(base, n);
+    used.set(`${base}_${n}`, 1);
+    return `${base}_${n}`;
+  });
+}
+function propKey(alias) {
+  return isValidIdentifier(alias) ? alias : JSON.stringify(alias);
+}
+function aliasTables(tables) {
+  const tableAliases = dedupeAliases(
+    tables.map((t) => t.name),
+    true
+  );
+  return tables.map((table, i2) => {
+    const fieldAliases = dedupeAliases(
+      table.fields.map((f) => f.name),
+      false
+    );
+    return {
+      alias: tableAliases[i2],
+      table,
+      fields: table.fields.map((field, j) => ({ alias: fieldAliases[j], field }))
+    };
+  });
+}
+function emitFieldMap(aliased) {
+  const tableBlocks = aliased.map(({ alias, fields }) => {
+    const fieldLines = fields.map(
+      ({ alias: fieldAlias, field }) => `    ${propKey(fieldAlias)}: ${JSON.stringify(field.id)},`
+    );
+    return `  ${propKey(alias)}: {
+${fieldLines.join("\n")}
+  },`;
+  });
+  return `export const F = {
+${tableBlocks.join("\n")}
+} as const;`;
+}
+function emitOptionMap(aliased) {
+  const tableBlocks = [];
+  for (const { alias, fields } of aliased) {
+    const fieldBlocks = [];
+    for (const { alias: fieldAlias, field } of fields) {
+      const options = field.options ?? [];
+      if (options.length === 0) continue;
+      const optionAliases = dedupeAliases(
+        options.map((o) => o.label),
+        false
+      );
+      const optionLines = options.map(
+        (option, i2) => `      ${propKey(optionAliases[i2])}: ${JSON.stringify(option.id)},`
+      );
+      fieldBlocks.push(`    ${propKey(fieldAlias)}: {
+${optionLines.join("\n")}
+    },`);
+    }
+    if (fieldBlocks.length === 0) continue;
+    tableBlocks.push(`  ${propKey(alias)}: {
+${fieldBlocks.join("\n")}
+  },`);
+  }
+  if (tableBlocks.length === 0) return `export const OPT = {} as const;`;
+  return `export const OPT = {
+${tableBlocks.join("\n")}
+} as const;`;
+}
+function generateAppFields(tables) {
+  if (tables.length === 0) {
+    return `${HEADER}
+export const F = {} as const;
+
+export const OPT = {} as const;
+
+/** Field-id alias map (empty \u2014 no tables in scope). */
+export type AppFields = typeof F;
+/** Select-option alias map (empty \u2014 no tables in scope). */
+export type AppOptions = typeof OPT;
+`;
+  }
+  const aliased = aliasTables(tables);
+  return `${HEADER}
+${emitFieldMap(aliased)}
+
+${emitOptionMap(aliased)}
+
+/** Field-id alias map: \`F[<TABLE>][<field>]\` is the \`fld_\u2026\` id (literal-typed). */
+export type AppFields = typeof F;
+/** Select-option alias map: \`OPT[<TABLE>][<field>][<option>]\` is the \`opt_\u2026\` id. */
+export type AppOptions = typeof OPT;
+`;
+}
+function codegenTableIds(queries, allowlist) {
+  const ids = new Set(allowlist);
+  for (const declaration of Object.values(queries)) {
+    for (const id of collectQueryTableIds(declaration.ast)) ids.add(id);
+  }
+  return [...ids];
+}
+function readCodegenTablesAllowlist(pkg) {
+  const tables = pkg?.lotics?.codegen?.tables;
+  return Array.isArray(tables) ? tables.filter((t) => typeof t === "string") : [];
+}
+
+// src/app_workflow_check.ts
+import fs7 from "node:fs";
+import path8 from "node:path";
+import { createRequire } from "node:module";
+
+// ../shared/src/parse_workflow_js.ts
+var import_parser = __toESM(require_lib(), 1);
+
+// ../shared/src/schemas/workflow_expressions.ts
+var runtimeKeySchema = zod_default.enum([
+  "timezone",
+  "workflow_id",
+  "execution_id",
+  "workspace_id",
+  "organization_id",
+  "now",
+  "change_origin",
+  // PARKED — accepted in stored ASTs, rejected for new saves at parse (see
+  // `PARKED_RUNTIME_KEYS` in walk_workflow_expression.ts). It is the OWNER's
+  // principal (a workflow runs under owner authority), so it can't answer the
+  // caller-authorization question anyone reads it for; the generated `.d.ts`
+  // omits it and the docs point at `current_member_in_any_group` /
+  // `runtime.triggered_by_member_id` instead. The entry stays so any stored
+  // AST keeps validating and executing — drop it only once a prod probe shows
+  // zero references (`workflows.steps_v2::text LIKE '%execution_principal%'`).
+  "execution_principal",
+  "triggered_by_member_id"
+]);
+var readSourceSchema = zod_default.discriminatedUnion("from", [
+  zod_default.object({ from: zod_default.literal("trigger") }),
+  zod_default.object({ from: zod_default.literal("trigger_record") }),
+  zod_default.object({ from: zod_default.literal("trigger_record_prev") }),
+  zod_default.object({ from: zod_default.literal("trigger_changes") }),
+  // `name` is the loop's bind name, and it is OPTIONAL for one reason: every
+  // body stored before names existed emits the bare form, and those resolve to
+  // the innermost frame — today's behaviour, and correct for any loop that is
+  // not nested. Without a name a read inside a NESTED loop cannot say which
+  // loop it means, so both binds resolve to the inner item and a join between
+  // two collections silently matches nothing. The parser emits the name now, so
+  // a body gets correct nesting the first time it is saved through it.
+  zod_default.object({ from: zod_default.literal("foreach_item"), name: zod_default.string().min(1).optional() }),
+  // No `name` here, deliberately: the JS surface spells the index as one
+  // reserved `index` keyword with no per-loop form, so the innermost loop is
+  // the only thing a read can mean. A name would be representable, honoured at
+  // run time, and silently rewritten to the innermost by the renderer — which
+  // prints every index as `index` — reintroducing the corruption above for a
+  // case nothing can author.
+  zod_default.object({ from: zod_default.literal("foreach_index") }),
+  zod_default.object({
+    from: zod_default.literal("step_output"),
+    step_id: zod_default.string().min(1)
+  }),
+  zod_default.object({
+    from: zod_default.literal("runtime"),
+    key: runtimeKeySchema
+  }),
+  // Lambda parameter — names a positional parameter on the innermost
+  // enclosing `lambda` expression. The walker emits this only inside
+  // higher-order helper callbacks (`filter(arr, x => x.Status == "open")`).
+  // The evaluator pushes a `lambda_params` frame each time it invokes a
+  // lambda, popping it after the body finishes. Outside a lambda body,
+  // these reads have no meaning and fail loudly.
+  zod_default.object({
+    from: zod_default.literal("lambda_param"),
+    name: zod_default.string().min(1)
+  }),
+  // Lexical (`let`) binding — names a block-scoped mutable variable
+  // declared by `let_declare` or assigned by `assign` somewhere in an
+  // enclosing block. The walker registers names on a per-block stack
+  // and emits this read source when a bare identifier matches. The
+  // evaluator maintains the matching frame stack on
+  // `WorkflowEvalContext.lexical_bindings`; reading walks it
+  // innermost-outward.
+  zod_default.object({
+    from: zod_default.literal("lexical"),
+    name: zod_default.string().min(1)
+  })
+]);
+var indexExpressionSchema = zod_default.lazy(
+  () => workflowExpressionSchema
 );
-var MAX_APP_WORKFLOW_OUTPUT_DEPTH = 8;
-var appWorkflowOutputBaseSchema = zod_default.object({
-  description: zod_default.string().optional(),
-  /** Whether this field is always present in the returned data. Defaults to true. */
-  required: zod_default.boolean().optional()
-});
-var appWorkflowOutputSchema = zod_default.lazy(
-  () => zod_default.discriminatedUnion("type", [
-    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("text") }),
-    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("number") }),
-    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("boolean") }),
-    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("date") }),
-    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("datetime") }),
-    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("email") }),
-    appWorkflowOutputBaseSchema.extend({ type: zod_default.literal("json") }),
-    appWorkflowOutputBaseSchema.extend({
-      type: zod_default.literal("record_link"),
-      table_id: zod_default.string(),
-      multi: zod_default.boolean().optional()
+var pathSegmentSchema = zod_default.discriminatedUnion("at", [
+  zod_default.object({ at: zod_default.literal("key"), key: zod_default.string().min(1) }),
+  zod_default.object({
+    at: zod_default.literal("index"),
+    /**
+     * Numeric literal indices stay as `number`; computed indices (e.g.
+     * `arr[i]` where `i` is a lambda param or `let` binding) carry a
+     * WorkflowExpression that the evaluator resolves at runtime. Authors
+     * who write `arr[<expr>]` get a working iteration pattern over arrays
+     * without forcing the parser to pre-evaluate the index.
+     */
+    index: zod_default.union([zod_default.number().int().nonnegative(), indexExpressionSchema])
+  }),
+  zod_default.object({ at: zod_default.literal("field"), key: zod_default.string().min(1) }),
+  zod_default.object({
+    at: zod_default.literal("linked"),
+    via: zod_default.string().min(1),
+    /**
+     * `number` — pick a single linked record by literal index.
+     * `"each"` — fan out; legal only inside foreach.items (validator-enforced).
+     * `WorkflowExpression` — computed index, resolved at runtime to pick a
+     * single linked record (same descent semantics as the numeric form).
+     */
+    index: zod_default.union([
+      zod_default.number().int().nonnegative(),
+      zod_default.literal("each"),
+      indexExpressionSchema
+    ])
+  })
+]);
+var binaryOpSchema = zod_default.enum([
+  "eq",
+  "neq",
+  "seq",
+  "sneq",
+  "gt",
+  "lt",
+  "gte",
+  "lte",
+  "and",
+  "or",
+  "add",
+  "sub",
+  "mul",
+  "div",
+  "mod"
+]);
+var unaryOpSchema = zod_default.enum(["not", "neg"]);
+var coerceSchema = zod_default.enum(["raw", "display"]);
+var literalValueSchema2 = zod_default.union([
+  zod_default.string(),
+  zod_default.number(),
+  zod_default.boolean(),
+  zod_default.null()
+]);
+var workflowExpressionSchema = zod_default.lazy(
+  () => zod_default.discriminatedUnion("kind", [
+    zod_default.object({ kind: zod_default.literal("lit"), value: literalValueSchema2 }),
+    zod_default.object({
+      kind: zod_default.literal("read"),
+      source: readSourceSchema,
+      path: zod_default.array(pathSegmentSchema),
+      coerce: coerceSchema.optional()
+    }),
+    zod_default.object({
+      kind: zod_default.literal("call"),
+      fn: zod_default.string().min(1),
+      args: zod_default.array(workflowExpressionSchema)
+    }),
+    zod_default.object({
+      kind: zod_default.literal("binary"),
+      op: binaryOpSchema,
+      left: workflowExpressionSchema,
+      right: workflowExpressionSchema
     }),
-    // The SAME shape and the SAME check as the select INPUT, not a copy of
-    // them: the two surfaces declare one vocabulary (GAP-294), so accepting
-    // `field` on one and not the other — or validating it differently — just
-    // moves the drift somewhere nobody looks.
-    appWorkflowOutputBaseSchema.extend({
-      type: zod_default.literal("select"),
-      ...selectOptionSourceShape
-    }).check(checkExactlyOneOptionSource("output")),
-    appWorkflowOutputBaseSchema.extend({
-      type: zod_default.literal("object"),
-      fields: zod_default.record(zod_default.string(), appWorkflowOutputSchema)
+    zod_default.object({
+      kind: zod_default.literal("unary"),
+      op: unaryOpSchema,
+      arg: workflowExpressionSchema
     }),
-    appWorkflowOutputBaseSchema.extend({
-      type: zod_default.literal("array"),
-      items: appWorkflowOutputSchema
+    zod_default.object({
+      kind: zod_default.literal("ternary"),
+      cond: workflowExpressionSchema,
+      then: workflowExpressionSchema,
+      else: workflowExpressionSchema
+    }),
+    zod_default.object({
+      kind: zod_default.literal("template"),
+      parts: zod_default.array(templatePartSchema)
+    }),
+    zod_default.object({
+      kind: zod_default.literal("lambda"),
+      params: zod_default.array(zod_default.string().min(1)),
+      body: workflowExpressionSchema
+    }),
+    zod_default.object({
+      kind: zod_default.literal("array_literal"),
+      elements: zod_default.array(workflowExpressionSchema)
+    }),
+    zod_default.object({
+      kind: zod_default.literal("object_literal"),
+      entries: zod_default.array(
+        zod_default.object({
+          key: zod_default.string().min(1),
+          value: workflowExpressionSchema
+        })
+      )
     })
   ])
 );
-function appWorkflowOutputDepth(output) {
-  if (output.type === "object") {
-    const fields = Object.values(output.fields);
-    return 1 + (fields.length === 0 ? 0 : Math.max(...fields.map(appWorkflowOutputDepth)));
-  }
-  if (output.type === "array") return 1 + appWorkflowOutputDepth(output.items);
-  return 1;
-}
-var appWorkflowDeclarationSchema = zod_default.object({
-  workflow_id: zod_default.string().describe("ID of the workflow this alias resolves to"),
-  inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe(
-    "Typed input schema for the workflow alias. Keys are input names; values declare type + constraints. The server validates payloads against this schema before invoking the workflow; CLI codegen emits typed `useWorkflow<alias>` signatures for the app side. Omit `inputs` for workflows that accept no inputs or whose shape isn't worth declaring."
-  ),
-  outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional().describe(
-    "Typed output schema for the data the workflow returns via `return({ data })`. Keys are field names; values declare type + (nested object/array) shape. The server validates the returned data against this schema at the app boundary and the workflow won't save unless its `return({ data })` matches; CLI codegen types `result.data`. Omit when the workflow returns no data, or pass it through untyped."
-  ).refine(
-    (outputs) => outputs === void 0 || Object.values(outputs).every((o) => appWorkflowOutputDepth(o) <= MAX_APP_WORKFLOW_OUTPUT_DEPTH),
-    { message: `output schema nesting exceeds the max depth of ${MAX_APP_WORKFLOW_OUTPUT_DEPTH}` }
-  ),
-  description: zod_default.string().optional().describe(
-    "What this workflow does, in one line \u2014 read by an agent choosing between the app's aliases, the same job a query's `description` does. `lotics app workflow set` sends it, so it lives beside the body in version control; omitted, the workflow keeps the description already on it."
-  ),
-  body_sha: zod_default.string().optional().describe(
-    "Fingerprint of the body currently bound to this alias, written by the server on every accepted `set_app_workflow`. Never sent by a caller \u2014 it is the value a caller's `expected_body_sha` is checked against, so that a push built on a stale copy of the body is refused instead of silently overwriting whatever replaced it. Absent on a binding last written before the field existed, where no comparison is possible."
-  )
-});
-var appWorkflowContractSchema = zod_default.object({
-  inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional(),
-  outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional()
-});
-var MAX_APP_CAPABILITY_DESCRIPTION = 300;
-var appQueryDeclarationSchema = zod_default.object({
-  ast: zod_default.unknown().describe(
-    "Query AST template (a QueryNode). Validated server-side via parseQueryNode at deploy. May embed {{params.<name>}} tokens in filter value positions."
-  ),
-  params: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe(
-    "Typed param schema. Keys are param names referenced as {{params.<name>}} in the ast; values declare type + constraints. The server validates the caller's params payload against this before interpolating. Omit for queries that take no params."
-  ),
-  description: zod_default.string().optional().describe(
-    `What this query returns, in one line \u2014 read by an agent choosing between the app's aliases. An alias is a JS identifier, which names a query without saying what it covers. Capped at ${MAX_APP_CAPABILITY_DESCRIPTION} characters.`
-  )
-});
-var appAgentDeclarationSchema = zod_default.object({
-  instructions: zod_default.string().min(1).describe("System instructions for the agent \u2014 the task it performs per run."),
-  tool_names: zod_default.array(zod_default.string().min(1)).describe(
-    "Tools the agent may call, resolved against the shared registry minus the automation blacklist. The capability boundary \u2014 the run can use nothing else. May be empty for a pure-reasoning agent."
-  ),
-  knowledge_doc_ids: zod_default.array(zod_default.string().min(1)).optional().describe(
-    "Knowledge docs the agent may read, validated at declare time against the app owner's `use` access. Small docs are inlined into the agent's system prompt each run; a doc too large to inline requires the code tools (code_exec) in tool_names and is read by staging it into a code run. Omit for an agent that needs no knowledge."
-  ),
-  query_aliases: zod_default.array(zod_default.string().min(1)).optional().describe(
-    "Named queries from this app's manifest the agent may run via `run_app_query`, validated at declare time against the app's own queries. This is the agent's ENTIRE read surface over workspace data \u2014 a template fixes the tables, filters, and projection, so it bounds rows and columns, not just tables. Omit for an agent that reads no records."
-  ),
-  workflow_aliases: zod_default.array(zod_default.string().min(1)).optional().describe(
-    "Workflows from this app's manifest the agent may invoke via `run_app_workflow`, validated at declare time against the app's own workflows. This is the agent's ENTIRE write surface \u2014 the same declared mutation path the app's UI uses, so table hooks and side-effect harvesting apply. Omit for a read-only agent."
-  ),
-  model_tier: zod_default.enum(MODEL_TIERS).optional().describe(
-    "Model tier the agent runs on \u2014 `haiku`, `sonnet`, or `opus`. Omit to follow the platform default tier, resolved at run time: the preferred choice. A tier names capability, not a version, so the generation behind it moves with the platform and this declaration never needs a rewrite. Pin only a deliberate, tested choice."
-  ),
-  effort_level: zod_default.enum(EFFORT_LEVELS).optional().describe(
-    "Reasoning depth for adaptive-thinking tiers \u2014 one of the chosen tier's supported levels (validated against model_tier at declare time). Omit to use the model default; ignored on tiers without adaptive thinking."
-  ),
-  prefix_cache_ttl: zod_default.enum(PREFIX_CACHE_TTLS).optional().describe(
-    `How long this agent's prompt-cache prefix (tools + system block) is kept warm. Omit \u2014 the default (5m, Anthropic's own) is right for essentially every agent. "1h" doubles the write price (2x the input rate against 1.25x) to buy only the 5m..1h band, and an entry nothing re-reads inside the hour is paid for twice over; declining it still leaves the prefix cached at the default. Set it only from measured cadence, never a guess.`
-  ),
-  inputs: zod_default.record(zod_default.string(), appWorkflowInputSchema).optional().describe(
-    "Typed input schema for one run. Keys are input names; values declare type + constraints. The server validates the run payload against this before invoking; CLI codegen emits a typed `useAgentRun<alias>` signature. Omit for an untyped payload."
-  ),
-  outputs: zod_default.record(zod_default.string(), appWorkflowOutputSchema).optional().describe(
-    "Typed output schema for the structured result the agent emits. Keys are field names; values declare type + (nested object/array) shape. When declared, the run must emit a result matching it \u2014 the server validates before persisting and the SDK types `run.output`. Omit for a free-text run whose output is the final message."
-  ).refine(
-    (outputs) => outputs === void 0 || Object.values(outputs).every((o) => appWorkflowOutputDepth(o) <= MAX_APP_WORKFLOW_OUTPUT_DEPTH),
-    { message: `output schema nesting exceeds the max depth of ${MAX_APP_WORKFLOW_OUTPUT_DEPTH}` }
-  )
-});
-var appThemeSchema = zod_default.object({
-  color: optionColorSchema.nullable().optional().describe("Theme color for the app")
-});
-var appCapabilitiesSchema = zod_default.object({
-  comments: zod_default.boolean().optional().describe(
-    "Enable the members-only `useComments` primitive. When true, the app may read/write record comments \u2014 each operation under the VIEWING member's own table access, row-scope, and author identity (never the app owner's). Default off."
-  )
-});
-var appSchema = zod_default.object({
-  id: zod_default.string().describe("Unique identifier for the app"),
-  name: zod_default.string().describe("Display name of the app"),
-  description: zod_default.string().nullable().optional().describe("Optional description of the app's purpose"),
-  icon: zod_default.string().nullable().optional().describe("Icon name for the app (e.g., 'home', 'chart-bar')"),
-  workspace_id: zod_default.string().describe("ID of the workspace this app belongs to"),
-  current_version_id: zod_default.string().nullable().optional().describe(
-    "Pointer to the currently-published app_versions row in R2. Set once the app has been deployed at least once via `lotics app deploy`; null before the first deploy."
-  ),
-  public_subdomain: zod_default.string().describe(
-    "DNS label for the app's public origin: `<public_subdomain>.lotics.app`. Server-generated, high-entropy, and distinct from `id` (app_ids are not valid DNS labels). Assigned at creation for every app."
-  ),
-  public_password_set: zod_default.boolean().optional().describe(
-    "Whether a shared password gates the public binding. True \u2192 anonymous visitors must authenticate at `/v1/apps/{app_id}/public/authenticate` before any publicAppAccess endpoint resolves. The hash itself is never sent over the wire; only this flag is exposed (and only on authenticated owner-side reads \u2014 the public by-subdomain response surfaces the same fact as `requires_password`)."
-  ),
-  workflows: zod_default.record(zod_default.string(), appWorkflowDeclarationSchema).nullable().optional().describe(
-    "Alias \u2192 workflow declaration map. Each alias resolves to a workflow_id and an optional typed inputs schema. Authored solely by `set_app_workflow` / `remove_app_workflow` (NOT by `lotics app deploy`, which never touches this map). The iframe SDK's useWorkflow(alias) resolves through this map; when an inputs schema is declared, the server validates payloads against it before invocation and the CLI codegen emits typed call-site signatures. The workflow always executes under the app's IAM principal."
-  ),
-  queries: zod_default.record(zod_default.string(), appQueryDeclarationSchema).nullable().optional().describe(
-    "Alias \u2192 query declaration map. Each alias resolves to a fixed query AST template with a typed param schema. Synced from the app's lotics.queries manifest on every `lotics app deploy`. The iframe SDK's useQuery(alias, params) resolves through this map; custom-code apps never send a raw AST. The query runs under the app's IAM principal."
-  ),
-  capabilities: appCapabilitiesSchema.nullable().optional().describe(
-    "Opt-in app capabilities, declared in the manifest's `lotics.capabilities` and synced on every deploy. Capabilities are off unless declared \u2014 least ambient authority. `comments` gates the members-only `useComments` primitive: only an app that declares it can read/write record comments (each under the VIEWING member's own authority)."
-  ),
-  agents: zod_default.record(zod_default.string(), appAgentDeclarationSchema).nullable().optional().describe(
-    "Alias \u2192 agent declaration map. Each alias binds a streaming tool-loop agent the app runs via `useAgentRun(alias)` (an SSE stream), with declared tools, model, and typed inputs/outputs. Synced from the app's `lotics.agents` manifest on every deploy. The agent runs under the app's IAM principal; runs persist a flat history per session."
-  ),
-  theme: appThemeSchema.nullable().optional().describe("Theme settings for the app"),
-  /**
-   * The starter this app is the ORIGIN of, when it is one — list enrichment,
-   * read from the registry rather than stored on the app.
-   *
-   * This is provenance in the only direction that exists under one-way copies:
-   * an app can have PUBLISHED a starter, but an app that was COPIED FROM one
-   * records nothing, because it owns everything it received outright. Null for
-   * every app that has published nothing.
-   */
-  starter_origin: zod_default.object({
-    starter_id: zod_default.string(),
-    /** The highest version published from this app. */
-    version: zod_default.number().int(),
-    is_official: zod_default.boolean()
-  }).nullable().optional(),
-  created_at: zod_default.string().describe("Timestamp when app was created"),
-  updated_at: zod_default.string().describe("Timestamp of last update")
-});
+var templatePartSchema = zod_default.lazy(
+  () => zod_default.discriminatedUnion("t", [
+    zod_default.object({ t: zod_default.literal("text"), s: zod_default.string() }),
+    zod_default.object({ t: zod_default.literal("ex"), e: workflowExpressionSchema })
+  ])
+);
 
 // ../shared/src/schemas/workflow_steps.ts
 var toolInputExpressionSchema = zod_default.lazy(
@@ -67799,6 +68097,358 @@ __export(expression_type_exports, {
   typeOf: () => typeOf
 });
 
+// ../shared/src/schemas/table_fields.ts
+var tableFieldTypeNameSchema = zod_default.enum([
+  "text",
+  "number",
+  "date",
+  "boolean",
+  "select",
+  "select_member",
+  "select_record_link",
+  "files",
+  "formula",
+  "rollup",
+  "lookup",
+  "button",
+  "autonumber"
+]);
+var tableFieldBaseSchema = zod_default.object({
+  key: zod_default.string().describe("Unique field key"),
+  name: zod_default.string().describe("Display name"),
+  description: zod_default.string().describe("Field description"),
+  confirm_before_update: zod_default.boolean().optional().describe("Show confirmation before AI updates")
+});
+var numberFormatSchema = zod_default.enum(["number", "currency", "percentage"]);
+var textFormatSchema = zod_default.enum(["text", "link", "markdown"]);
+var dateFormatSchema = zod_default.enum(["date", "datetime", "date_range", "datetime_range"]);
+var DEFAULT_VALUE_DESC = "Value pre-filled into a new record when none is supplied for this field. Applied on create only \u2014 existing records are never backfilled. null clears it.";
+var textDefaultValueSchema = zod_default.string().nullish().describe(DEFAULT_VALUE_DESC);
+var numberDefaultValueSchema = zod_default.number().nullish().describe(DEFAULT_VALUE_DESC);
+var booleanDefaultValueSchema = zod_default.boolean().nullish().describe(DEFAULT_VALUE_DESC);
+var dateDefaultValueSchema = zod_default.string().nullish().describe(`${DEFAULT_VALUE_DESC} A date string in the field's format.`);
+var selectDefaultValueSchema = zod_default.array(zod_default.string()).nullish().describe(`${DEFAULT_VALUE_DESC} Option key(s) \u2014 one for single-select.`);
+var memberDefaultValueSchema = zod_default.array(zod_default.string()).nullish().describe(`${DEFAULT_VALUE_DESC} Member ID(s) \u2014 one for single-select.`);
+var tableNumberFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("number"),
+  format: numberFormatSchema,
+  currency: zod_default.string().optional().describe("ISO 4217 code"),
+  default_value: numberDefaultValueSchema
+});
+var tableTextFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("text"),
+  unique: zod_default.boolean().optional().describe("Unique values required"),
+  // it's `optional` only for backward compatibility
+  format: textFormatSchema.optional(),
+  default_value: textDefaultValueSchema
+});
+var tableDateFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("date"),
+  format: dateFormatSchema.optional(),
+  timezone: zod_default.string().optional().describe("IANA timezone"),
+  derive_from: zod_default.enum(["created_at", "updated_at"]).optional().describe(
+    "Auto-populate from the row's system timestamp. `created_at` stamps once at insert time; `updated_at` re-stamps on every record edit. Derived fields are read-only \u2014 user-supplied values are silently ignored at write time, matching the formula/rollup/lookup pattern. Replaces the per-table after_create workflow pattern."
+  ),
+  // A derived date is read-only, so derive_from and default_value are mutually
+  // exclusive — enforced in validateFieldDefaultValue.
+  default_value: dateDefaultValueSchema
+});
+var tableBooleanFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("boolean"),
+  default_value: booleanDefaultValueSchema
+});
+var tableSelectFieldOptionSchema = zod_default.object({
+  key: zod_default.string(),
+  name: zod_default.string(),
+  color: optionColorSchema
+});
+var tableSelectFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("select"),
+  options: zod_default.array(tableSelectFieldOptionSchema),
+  multi: zod_default.boolean().optional().describe("Allow multiple selections"),
+  default_value: selectDefaultValueSchema
+});
+var tableSelectMemberFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("select_member"),
+  multi: zod_default.boolean().optional().describe("Allow multiple selections"),
+  default_value: memberDefaultValueSchema
+});
+var recordLinkItemSchema = zod_default.object({
+  id: zod_default.string(),
+  display: zod_default.string()
+});
+var selectRecordLinkValueSchema = zod_default.array(recordLinkItemSchema);
+var tableSelectRecordLinkFieldInputSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("select_record_link"),
+  table_id: zod_default.string().describe("Linked table ID"),
+  display_field_keys: zod_default.array(zod_default.string()).optional().describe(
+    "Field keys of the linked table shown as the link's display text and as the columns in the record picker. If omitted, auto-selects the first text field."
+  ),
+  display_field_widths: zod_default.record(zod_default.string(), zod_default.number().int().positive()).optional().describe(
+    "Per-column widths in pixels for the record picker, keyed by linked-table field key. Missing keys fall back to the default column width."
+  ),
+  sync_both_ways: zod_default.boolean().optional().describe("Enable bidirectional link sync. If the target table has exactly one existing unpaired link field pointing back, pairs with it instead of creating a new field."),
+  paired_field_display_field_keys: zod_default.array(zod_default.string()).optional().describe("Display fields for paired link"),
+  paired_field_name: zod_default.string().optional().describe(
+    "Name for the auto-created paired field on the target table when sync_both_ways=true. If omitted, falls back to the source table's name (auto-uniquified with a numeric suffix on collision). Rejected as a conflict if a field with this name already exists on the target."
+  ),
+  cardinality: zod_default.enum(["one", "many"]).optional().describe(
+    "How many linked records this field can hold. Default 'many' (multi-select). 'one' = single-select; this side holds exactly one link to the partner. Requires sync_both_ways/paired_field_key. Setting 'one' on both paired sides is rejected."
+  )
+});
+var tableSelectRecordLinkFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("select_record_link").describe("Field type for linking to records in another table"),
+  table_id: zod_default.string().describe("ID of the target table that records can be linked to"),
+  display_field_keys: zod_default.array(zod_default.string()).optional().default([]).describe(
+    "Field keys of the linked table shown as the link's display text and as the columns in the record picker. If empty, the picker shows all fields."
+  ),
+  display_field_widths: zod_default.record(zod_default.string(), zod_default.number().int().positive()).optional().describe(
+    "Per-column widths in pixels for the record picker, keyed by linked-table field key. Missing keys fall back to the default column width."
+  ),
+  paired_field_key: zod_default.string().optional().describe(
+    "Key of the paired link field in the linked table. If set to a string, this indicates a bidirectional link where both tables can reference each other and data synchronizes in both directions. Both fields have paired_field_key pointing to each other. If set to null, explicitly disconnects the bidirectional link (clears paired_field_key on both sides). If undefined, no change is made to the existing paired_field_key."
+  ),
+  cardinality: zod_default.enum(["one", "many"]).optional().describe(
+    "How many linked records this field can hold. Default 'many' (multi-select). 'one' = single-select; this side holds exactly one link to the partner. Requires paired_field_key. Two paired sides cannot both be 'one'."
+  )
+});
+var tableRollupFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("rollup").describe(
+    "Field type for aggregating values from linked records (sum, avg, filled, earliest, etc.)"
+  ),
+  source_field_key: zod_default.string().describe("The field key of the select_record_link field to rollup from"),
+  aggregate_option: aggregateOptionSchema.describe(
+    "The field aggregation function to apply (e.g., sum, avg, filled, earliest)"
+  ),
+  filter: tableRecordFiltersGroupNodeSchema.optional().describe(
+    "Optional filter to apply to linked records before aggregation. Only records matching the filter conditions will be included in the rollup calculation."
+  ),
+  aggregate_field_type: tableFieldTypeNameSchema.optional().describe(
+    "What this rollup's CELL holds \u2014 'date' for earliest/latest, 'number' for every other operation (counts, sums, percentages). Derived from the operation, not from the aggregated field: a 'filled' count over a files column is a number. Server-derived at write time; ignored on input."
+  ),
+  aggregate_field_format: zod_default.string().optional().describe(
+    "The format of this rollup's own value. Operations that preserve the aggregated value's unit (sum/avg/median/min/max/range/earliest/latest) inherit the target field's format; counting operations are 'number', percentages 'percentage'. Server-derived at write time; ignored on input."
+  ),
+  aggregate_field_currency: zod_default.string().optional().describe(
+    "The currency code of this rollup's own value (e.g. 'USD', 'VND'), inherited from the aggregated field only when the operation preserves its unit \u2014 a COUNT of a currency column carries no currency. Server-derived at write time; ignored on input."
+  )
+});
+var lookupOrderBySchema = zod_default.object({
+  field_key: zod_default.string(),
+  direction: zod_default.enum(["asc", "desc"])
+});
+var tableLookupFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("lookup").describe("Field type for displaying values from fields in linked records"),
+  source_field_key: zod_default.string().describe("The field key of the select_record_link field to lookup from"),
+  lookup_field_key: zod_default.string().describe("The field key from the linked records to display"),
+  lookup_field_type: tableFieldTypeNameSchema.optional().describe(
+    "The type of the target lookup field (e.g. 'text', 'number', 'date'). Resolved from the linked table's field definition at read time."
+  ),
+  lookup_field_format: zod_default.string().optional().describe(
+    "The format of the target lookup field (e.g. 'currency', 'percentage', 'datetime'). Resolved from the linked table's field definition at read time."
+  ),
+  lookup_field_currency: zod_default.string().optional().describe(
+    "The currency code of the target lookup field (e.g. 'USD', 'VND'). Resolved from the linked table's field definition at read time."
+  ),
+  lookup_field_options: zod_default.array(zod_default.object({ key: zod_default.string(), name: zod_default.string(), color: zod_default.string().optional() })).optional().describe(
+    "Options for select-type lookup fields. Synced from the source select field's options."
+  ),
+  order_by: lookupOrderBySchema.optional().describe(
+    "When set, sort the linked records by this field on the linked table and return ONLY the picked field from the single extreme record (desc=latest, asc=earliest), as a one-element array. Omit to return every linked record's value as an array. field_key must be a field on the linked table."
+  )
+});
+var tableFilesFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("files").describe("Field type for file attachments (images, PDFs, documents)")
+});
+var formulaInputSchema = zod_default.object({
+  expression: zod_default.string().describe(
+    "JavaScript expression. Uses {Field Name} for field references."
+  ),
+  format: zod_default.enum(["number", "currency", "percentage", "link"]).optional().describe(
+    "Display format. 'number' / 'currency' / 'percentage' for numeric results; 'link' for text-output formulas that return a URL \u2014 renders the result as a clickable link."
+  ),
+  currency: zod_default.string().optional().describe("ISO 4217 currency code, e.g. USD, VND, EUR")
+});
+var formulaSchema = formulaInputSchema.extend({
+  output_type: zod_default.enum(["number", "text", "date", "datetime", "boolean"]).optional().describe("Output type of the formula. Inferred by the backend from the expression \u2014 read-only on input. `datetime` when the result carries a time of day (references a datetime field or a time-bearing helper)."),
+  volatile: zod_default.boolean().optional().describe("Whether the formula's result depends on `now()` or other non-deterministic helpers. Inferred by the backend \u2014 read-only on input.")
+});
+var tableFormulaFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("formula").describe("Field type for calculated values based on expressions"),
+  formula: formulaSchema.describe("Formula configuration and expression")
+});
+var workflowMetadataSchema = zod_default.object({
+  table_ids: zod_default.array(zod_default.string()).describe("IDs of the tables this workflow affects"),
+  staged_for_app_id: zod_default.string().optional().describe(
+    "Present while the row is a draft-staged fork for this app; cleared when the app publishes the binding. Marked rows left unbound are archived at publish/discard."
+  )
+});
+var workflowSchema = zod_default.object({
+  id: zod_default.string().describe("Unique identifier for the workflow"),
+  name: zod_default.string().describe("Display name of the workflow"),
+  description: zod_default.string().describe("Human-readable description of what this workflow does"),
+  steps: zod_default.unknown().describe(
+    "AST-valued step tree (tool calls, conditionals, loops)."
+  ),
+  metadata: workflowMetadataSchema.nullable().optional().describe("Metadata for the workflow"),
+  current_version: zod_default.number().int().describe("Current version number"),
+  enabled: zod_default.boolean().describe("Whether this workflow is active"),
+  workspace_id: zod_default.string().describe("ID of the workspace this workflow belongs to"),
+  created_at: zod_default.string().describe("Timestamp when workflow was created"),
+  updated_at: zod_default.string().describe("Timestamp of last update")
+});
+var tableButtonFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("button").describe("Field type for action buttons"),
+  text: zod_default.string().describe("Button label text displayed to users"),
+  workflow_id: zod_default.string().nullable().optional().describe(
+    "ID of the workflow the button presses trigger. Null means no action configured \u2014 pressing the button is a no-op. Button authoring is retired: existing bindings keep running, but nothing sets a new one."
+  )
+});
+var tableAutonumberFieldSchema = tableFieldBaseSchema.extend({
+  type: zod_default.literal("autonumber"),
+  prefix: zod_default.string().optional().describe(
+    "Literal prefix prepended to every display value (e.g. 'KH-' \u2192 'KH-001'). Ignored when `template` is set."
+  ),
+  padding: zod_default.number().int().min(1).max(20).optional().describe(
+    "Zero-pad the integer to this width. Default 1 (no padding). 3 \u2192 '001', '012', '123', '1234' (overflow uses the actual width). Ignored when `template` is set."
+  ),
+  template: zod_default.string().optional().describe(
+    "Format template with placeholder tokens evaluated at insert time. Tokens: {N} (raw integer), {N:W} (zero-padded to width W, e.g. {N:3} \u2192 001), {YEAR} (4-digit year), {YEAR:2} (2-digit year), {MONTH} (2-digit month), {DAY} (2-digit day). Date tokens use the workspace timezone. Example: 'HM-{YEAR}-{N:3}' yields 'HM-2026-001'. Stored as the composed string; subsequent template edits do NOT re-format existing rows (date tokens would lose the original creation date)."
+  )
+});
+var tableFieldSchema = zod_default.discriminatedUnion("type", [
+  tableNumberFieldSchema,
+  tableTextFieldSchema,
+  tableDateFieldSchema,
+  tableBooleanFieldSchema,
+  tableSelectFieldSchema,
+  tableSelectMemberFieldSchema,
+  tableSelectRecordLinkFieldSchema,
+  tableRollupFieldSchema,
+  tableLookupFieldSchema,
+  tableFilesFieldSchema,
+  tableFormulaFieldSchema,
+  tableButtonFieldSchema,
+  tableAutonumberFieldSchema
+]);
+var tableFieldInputSchema = zod_default.discriminatedUnion("type", [
+  tableNumberFieldSchema,
+  tableTextFieldSchema,
+  tableDateFieldSchema,
+  tableBooleanFieldSchema,
+  tableSelectFieldSchema,
+  tableSelectMemberFieldSchema,
+  tableSelectRecordLinkFieldInputSchema,
+  tableRollupFieldSchema,
+  tableLookupFieldSchema,
+  tableFilesFieldSchema,
+  tableFormulaFieldSchema,
+  tableButtonFieldSchema,
+  tableAutonumberFieldSchema
+]);
+var tableFieldsSchema = zod_default.array(tableFieldSchema);
+var tableFieldCreateBaseSchema = zod_default.object({
+  name: zod_default.string().describe("Display name"),
+  description: zod_default.string().describe("Field description"),
+  confirm_before_update: zod_default.boolean().optional().describe("Show confirmation before AI updates")
+});
+var tableSelectFieldOptionCreateSchema = zod_default.object({
+  name: zod_default.string(),
+  color: optionColorSchema
+});
+var tableFieldTypeConfigSchema = zod_default.discriminatedUnion("type", [
+  zod_default.object({
+    type: zod_default.literal("number"),
+    format: numberFormatSchema.default("number"),
+    currency: zod_default.string().optional().describe("ISO 4217 code"),
+    default_value: numberDefaultValueSchema
+  }),
+  zod_default.object({
+    type: zod_default.literal("text"),
+    unique: zod_default.boolean().optional().describe("Unique values required"),
+    format: textFormatSchema.default("text"),
+    default_value: textDefaultValueSchema
+  }),
+  zod_default.object({
+    type: zod_default.literal("date"),
+    format: dateFormatSchema.optional(),
+    timezone: zod_default.string().optional().describe("IANA timezone"),
+    derive_from: zod_default.enum(["created_at", "updated_at"]).nullable().optional().describe("Auto-populate from row system timestamp; field becomes read-only. Only valid for date/datetime formats. Pass null to clear and revert to a manual date field."),
+    default_value: dateDefaultValueSchema
+  }),
+  zod_default.object({
+    type: zod_default.literal("boolean"),
+    default_value: booleanDefaultValueSchema
+  }),
+  zod_default.object({
+    type: zod_default.literal("select"),
+    options: zod_default.array(tableSelectFieldOptionCreateSchema),
+    multi: zod_default.boolean().optional().describe("Allow multiple selections"),
+    default_value: selectDefaultValueSchema
+  }),
+  zod_default.object({
+    type: zod_default.literal("select_member"),
+    multi: zod_default.boolean().optional().describe("Allow multiple selections"),
+    default_value: memberDefaultValueSchema
+  }),
+  zod_default.object({
+    type: zod_default.literal("select_record_link"),
+    table_id: zod_default.string().describe("Linked table ID"),
+    display_field_keys: zod_default.array(zod_default.string()).optional().describe(
+      "Field keys of the linked table shown as the link's display text and as the columns in the record picker. If omitted, auto-selects the first text field."
+    ),
+    display_field_widths: zod_default.record(zod_default.string(), zod_default.number().int().positive()).optional().describe(
+      "Per-column widths in pixels for the record picker, keyed by linked-table field key. Missing keys fall back to the default column width."
+    ),
+    sync_both_ways: zod_default.boolean().optional().describe("Enable bidirectional link sync. If the target table has exactly one existing unpaired link field pointing back, pairs with it instead of creating a new field."),
+    paired_field_display_field_keys: zod_default.array(zod_default.string()).optional().describe("Paired field display"),
+    paired_field_name: zod_default.string().optional().describe(
+      "Name for the auto-created paired field on the target table when sync_both_ways=true. Omit to default to the source table's name (auto-uniquified on collision). If supplied and a field with the same name already exists on the target, the create is rejected."
+    ),
+    cardinality: zod_default.enum(["one", "many"]).optional().describe(
+      "How many linked records this field can hold. Default 'many' (multi-select). 'one' = single-select; this side holds exactly one link to the partner. Requires sync_both_ways. Two paired sides cannot both be 'one'."
+    )
+  }),
+  zod_default.object({
+    type: zod_default.literal("rollup"),
+    source_field_key: zod_default.string().describe("Source link field key"),
+    aggregate_option: aggregateOptionSchema,
+    filter: tableRecordFiltersGroupNodeSchema.optional().describe("Filter linked records")
+  }),
+  zod_default.object({
+    type: zod_default.literal("lookup"),
+    source_field_key: zod_default.string().describe("Source link field key"),
+    lookup_field_key: zod_default.string().describe("Field to display"),
+    order_by: lookupOrderBySchema.optional().describe("Ordered lookup: pick only the extreme linked record's field (desc=latest, asc=earliest)")
+  }),
+  zod_default.object({
+    type: zod_default.literal("files")
+  }),
+  zod_default.object({
+    type: zod_default.literal("formula"),
+    formula: formulaInputSchema
+  }),
+  // `button` is deliberately absent: button fields are legacy — this union
+  // shapes CREATE input only, and new buttons can no longer be created
+  // (see LEGACY_FIELD_TYPES). Stored button fields still parse via the
+  // stored-field union above, and update paths keep accepting text edits.
+  zod_default.object({
+    type: zod_default.literal("autonumber"),
+    prefix: zod_default.string().optional().describe("Literal prefix prepended to display (ignored when template is set)"),
+    padding: zod_default.number().int().min(1).max(20).optional().describe("Zero-pad the integer to this width (default 1) (ignored when template is set)"),
+    template: zod_default.string().optional().describe(
+      "Format template \u2014 tokens evaluate at insert time: {N}, {N:W} (padded), {YEAR}, {YEAR:2}, {MONTH}, {DAY}. Date tokens use workspace timezone. Example: 'HM-{YEAR}-{N:3}' \u2192 'HM-2026-001'."
+    )
+  })
+]);
+var tableFieldCreateInputSchema = zod_default.intersection(
+  tableFieldCreateBaseSchema,
+  tableFieldTypeConfigSchema
+);
+var fieldVisibilitySchema = zod_default.enum(["visible", "hidden"]).describe(
+  "Field visibility state: 'visible' = shown to everyone, 'hidden' = not shown by default but members can toggle"
+);
+
 // ../shared/src/schemas/database_types.ts
 function isEmptyFieldValue(value2) {
   if (value2 === null || value2 === void 0) {
@@ -67880,228 +68530,6 @@ function typeOf(value2) {
   return typeof value2;
 }
 
-// ../../node_modules/@date-fns/tz/tzName/index.js
-function tzName(timeZone, date6, format2 = "long") {
-  return new Intl.DateTimeFormat("en-US", {
-    // Enforces engine to render the time. Without the option JavaScriptCore omits it.
-    hour: "numeric",
-    timeZone,
-    timeZoneName: format2
-  }).format(date6).split(/\s/g).slice(2).join(" ");
-}
-
-// ../../node_modules/@date-fns/tz/tzOffset/index.js
-var offsetFormatCache = {};
-var offsetCache = {};
-function tzOffset(timeZone, date6) {
-  try {
-    const format2 = offsetFormatCache[timeZone] ||= new Intl.DateTimeFormat("en-US", {
-      timeZone,
-      timeZoneName: "longOffset"
-    }).format;
-    const offsetStr = format2(date6).split("GMT")[1];
-    if (offsetStr in offsetCache) return offsetCache[offsetStr];
-    return calcOffset(offsetStr, offsetStr.split(":"));
-  } catch {
-    if (timeZone in offsetCache) return offsetCache[timeZone];
-    const captures = timeZone?.match(offsetRe);
-    if (captures) return calcOffset(timeZone, captures.slice(1));
-    return NaN;
-  }
-}
-var offsetRe = /([+-]\d\d):?(\d\d)?/;
-function calcOffset(cacheStr, values3) {
-  const hours = +(values3[0] || 0);
-  const minutes = +(values3[1] || 0);
-  const seconds = +(values3[2] || 0) / 60;
-  return offsetCache[cacheStr] = hours * 60 + minutes > 0 ? hours * 60 + minutes + seconds : hours * 60 - minutes - seconds;
-}
-
-// ../../node_modules/@date-fns/tz/date/mini.js
-var TZDateMini = class _TZDateMini extends Date {
-  //#region static
-  constructor(...args) {
-    super();
-    if (args.length > 1 && typeof args[args.length - 1] === "string") {
-      this.timeZone = args.pop();
-    }
-    this.internal = /* @__PURE__ */ new Date();
-    if (isNaN(tzOffset(this.timeZone, this))) {
-      this.setTime(NaN);
-    } else {
-      if (!args.length) {
-        this.setTime(Date.now());
-      } else if (typeof args[0] === "number" && (args.length === 1 || args.length === 2 && typeof args[1] !== "number")) {
-        this.setTime(args[0]);
-      } else if (typeof args[0] === "string") {
-        this.setTime(+new Date(args[0]));
-      } else if (args[0] instanceof Date) {
-        this.setTime(+args[0]);
-      } else {
-        this.setTime(+new Date(...args));
-        adjustToSystemTZ(this, NaN);
-        syncToInternal(this);
-      }
-    }
-  }
-  static tz(tz, ...args) {
-    return args.length ? new _TZDateMini(...args, tz) : new _TZDateMini(Date.now(), tz);
-  }
-  //#endregion
-  //#region time zone
-  withTimeZone(timeZone) {
-    return new _TZDateMini(+this, timeZone);
-  }
-  getTimezoneOffset() {
-    const offset = -tzOffset(this.timeZone, this);
-    return offset > 0 ? Math.floor(offset) : Math.ceil(offset);
-  }
-  //#endregion
-  //#region time
-  setTime(time3) {
-    Date.prototype.setTime.apply(this, arguments);
-    syncToInternal(this);
-    return +this;
-  }
-  //#endregion
-  //#region date-fns integration
-  [/* @__PURE__ */ Symbol.for("constructDateFrom")](date6) {
-    return new _TZDateMini(+new Date(date6), this.timeZone);
-  }
-  //#endregion
-};
-var re = /^(get|set)(?!UTC)/;
-Object.getOwnPropertyNames(Date.prototype).forEach((method) => {
-  if (!re.test(method)) return;
-  const utcMethod = method.replace(re, "$1UTC");
-  if (!TZDateMini.prototype[utcMethod]) return;
-  if (method.startsWith("get")) {
-    TZDateMini.prototype[method] = function() {
-      return this.internal[utcMethod]();
-    };
-  } else {
-    TZDateMini.prototype[method] = function() {
-      Date.prototype[utcMethod].apply(this.internal, arguments);
-      syncFromInternal(this);
-      return +this;
-    };
-    TZDateMini.prototype[utcMethod] = function() {
-      Date.prototype[utcMethod].apply(this, arguments);
-      syncToInternal(this);
-      return +this;
-    };
-  }
-});
-function syncToInternal(date6) {
-  date6.internal.setTime(+date6);
-  date6.internal.setUTCSeconds(date6.internal.getUTCSeconds() - Math.round(-tzOffset(date6.timeZone, date6) * 60));
-}
-function syncFromInternal(date6) {
-  Date.prototype.setFullYear.call(date6, date6.internal.getUTCFullYear(), date6.internal.getUTCMonth(), date6.internal.getUTCDate());
-  Date.prototype.setHours.call(date6, date6.internal.getUTCHours(), date6.internal.getUTCMinutes(), date6.internal.getUTCSeconds(), date6.internal.getUTCMilliseconds());
-  adjustToSystemTZ(date6);
-}
-function adjustToSystemTZ(date6) {
-  const baseOffset = tzOffset(date6.timeZone, date6);
-  const offset = baseOffset > 0 ? Math.floor(baseOffset) : Math.ceil(baseOffset);
-  const prevHour = /* @__PURE__ */ new Date(+date6);
-  prevHour.setUTCHours(prevHour.getUTCHours() - 1);
-  const systemOffset = -(/* @__PURE__ */ new Date(+date6)).getTimezoneOffset();
-  const prevHourSystemOffset = -(/* @__PURE__ */ new Date(+prevHour)).getTimezoneOffset();
-  const systemDSTChange = systemOffset - prevHourSystemOffset;
-  const dstShift = Date.prototype.getHours.apply(date6) !== date6.internal.getUTCHours();
-  if (systemDSTChange && dstShift) date6.internal.setUTCMinutes(date6.internal.getUTCMinutes() + systemDSTChange);
-  const offsetDiff = systemOffset - offset;
-  if (offsetDiff) Date.prototype.setUTCMinutes.call(date6, Date.prototype.getUTCMinutes.call(date6) + offsetDiff);
-  const systemDate = /* @__PURE__ */ new Date(+date6);
-  systemDate.setUTCSeconds(0);
-  const systemSecondsOffset = systemOffset > 0 ? systemDate.getSeconds() : (systemDate.getSeconds() - 60) % 60;
-  const secondsOffset = Math.round(-(tzOffset(date6.timeZone, date6) * 60)) % 60;
-  if (secondsOffset || systemSecondsOffset) {
-    date6.internal.setUTCSeconds(date6.internal.getUTCSeconds() + secondsOffset);
-    Date.prototype.setUTCSeconds.call(date6, Date.prototype.getUTCSeconds.call(date6) + secondsOffset + systemSecondsOffset);
-  }
-  const postBaseOffset = tzOffset(date6.timeZone, date6);
-  const postOffset = postBaseOffset > 0 ? Math.floor(postBaseOffset) : Math.ceil(postBaseOffset);
-  const postSystemOffset = -(/* @__PURE__ */ new Date(+date6)).getTimezoneOffset();
-  const postOffsetDiff = postSystemOffset - postOffset;
-  const offsetChanged = postOffset !== offset;
-  const postDiff = postOffsetDiff - offsetDiff;
-  if (offsetChanged && postDiff) {
-    Date.prototype.setUTCMinutes.call(date6, Date.prototype.getUTCMinutes.call(date6) + postDiff);
-    const newBaseOffset = tzOffset(date6.timeZone, date6);
-    const newOffset = newBaseOffset > 0 ? Math.floor(newBaseOffset) : Math.ceil(newBaseOffset);
-    const offsetChange = postOffset - newOffset;
-    if (offsetChange) {
-      date6.internal.setUTCMinutes(date6.internal.getUTCMinutes() + offsetChange);
-      Date.prototype.setUTCMinutes.call(date6, Date.prototype.getUTCMinutes.call(date6) + offsetChange);
-    }
-  }
-}
-
-// ../../node_modules/@date-fns/tz/date/index.js
-var TZDate = class _TZDate extends TZDateMini {
-  //#region static
-  static tz(tz, ...args) {
-    return args.length ? new _TZDate(...args, tz) : new _TZDate(Date.now(), tz);
-  }
-  //#endregion
-  //#region representation
-  toISOString() {
-    const [sign, hours, minutes] = this.tzComponents();
-    const tz = `${sign}${hours}:${minutes}`;
-    return this.internal.toISOString().slice(0, -1) + tz;
-  }
-  toString() {
-    return `${this.toDateString()} ${this.toTimeString()}`;
-  }
-  toDateString() {
-    const [day, date6, month, year] = this.internal.toUTCString().split(" ");
-    return `${day?.slice(0, -1)} ${month} ${date6} ${year}`;
-  }
-  toTimeString() {
-    const time3 = this.internal.toUTCString().split(" ")[4];
-    const [sign, hours, minutes] = this.tzComponents();
-    return `${time3} GMT${sign}${hours}${minutes} (${tzName(this.timeZone, this)})`;
-  }
-  toLocaleString(locales, options) {
-    return Date.prototype.toLocaleString.call(this, locales, {
-      ...options,
-      timeZone: options?.timeZone || this.timeZone
-    });
-  }
-  toLocaleDateString(locales, options) {
-    return Date.prototype.toLocaleDateString.call(this, locales, {
-      ...options,
-      timeZone: options?.timeZone || this.timeZone
-    });
-  }
-  toLocaleTimeString(locales, options) {
-    return Date.prototype.toLocaleTimeString.call(this, locales, {
-      ...options,
-      timeZone: options?.timeZone || this.timeZone
-    });
-  }
-  //#endregion
-  //#region private
-  tzComponents() {
-    const offset = this.getTimezoneOffset();
-    const sign = offset > 0 ? "-" : "+";
-    const hours = String(Math.floor(Math.abs(offset) / 60)).padStart(2, "0");
-    const minutes = String(Math.abs(offset) % 60).padStart(2, "0");
-    return [sign, hours, minutes];
-  }
-  //#endregion
-  withTimeZone(timeZone) {
-    return new _TZDate(+this, timeZone);
-  }
-  //#region date-fns integration
-  [/* @__PURE__ */ Symbol.for("constructDateFrom")](date6) {
-    return new _TZDate(+new Date(date6), this.timeZone);
-  }
-  //#endregion
-};
-
 // ../shared/src/expression_date.ts
 function hasTimezone(dateStr) {
   return /[Zz]|[+-]\d{2}:\d{2}$/.test(dateStr);
@@ -72226,6 +72654,15 @@ ${tail}`)
   });
 }
 var NPM_LOG_TAIL_BYTES = 8e3;
+async function runAppTypecheck(projectDir) {
+  const pkg = JSON.parse(fs8.readFileSync(path9.join(projectDir, "package.json"), "utf-8"));
+  if (!pkg.scripts?.typecheck) {
+    warn("package.json has no `typecheck` script \u2014 the app's types were not checked.");
+    return;
+  }
+  note("Typechecking...");
+  await runNpm(["run", "typecheck"], projectDir);
+}
 function npmInstallArgs(hasLockfile) {
   return [hasLockfile ? "ci" : "install", "--ignore-scripts"];
 }
@@ -73060,6 +73497,7 @@ async function appDeploy(client, args) {
   The build will use whatever is on disk \u2014 run 'lotics app codegen' if this app is published.`
     );
   }
+  await runAppTypecheck(projectDir);
   note("Building...");
   await runNpm(["run", "build"], projectDir);
   const distDir = path9.join(projectDir, "dist");
@@ -73229,6 +73667,7 @@ async function appCheck(client, args = {}) {
   const meta3 = readAppMeta(projectDir);
   const app = await client.getApp(meta3.app_id);
   assertProjectIsCurrent(meta3, app);
+  writeAppDts(projectDir, { workflows: meta3.workflows, queries: meta3.queries, agents: meta3.agents });
   const sourceText = readAppSourceText(projectDir);
   const called = calledAppAliases(sourceText);
   warnAboutDevLink(projectDir, "deploy");
@@ -73251,11 +73690,18 @@ async function appCheck(client, args = {}) {
   const unportable = scanProjectForIds(projectDir);
   reportPortabilityIds(unportable);
   const bodiesFailing = await countFailingWorkflowBodies(client, projectDir, meta3);
-  if (!nothingPending(pending) || unportable.length > 0 || bodiesFailing > 0) {
+  let typesFailing = false;
+  try {
+    await runAppTypecheck(projectDir);
+  } catch (err2) {
+    console.error(err2 instanceof Error ? err2.message : String(err2));
+    typesFailing = true;
+  }
+  if (!nothingPending(pending) || unportable.length > 0 || bodiesFailing > 0 || typesFailing) {
     process.exit(1);
   }
   console.error(
-    "Checked the app's bindings, capabilities, agent schemas, workflow bodies and id portability \u2014 nothing blocking."
+    "Checked the app's types, bindings, capabilities, agent schemas, workflow bodies and id portability \u2014 nothing blocking."
   );
 }
 async function countFailingWorkflowBodies(client, projectDir, meta3) {
@@ -74119,6 +74565,7 @@ async function appQuerySet(client, args) {
     writeSynced(projectDir, "queries", alias, { content: querySha, live: querySha });
     pushed.push(alias);
   }
+  writeAppDts(projectDir, { workflows: meta3.workflows, queries: meta3.queries, agents: meta3.agents });
   console.error(
     `Set ${pushed.length} quer${pushed.length === 1 ? "y" : "ies"} on ${meta3.app_id}: ${pushed.join(", ")}.`
   );