@lotics/cli 0.280.0 → 0.282.0

package/dist/src/cli.js

@@ -1197,13 +1197,13 @@ var require_ast = __commonJS({
         helperExpression: function helperExpression(node) {
           return node.type === "SubExpression" || (node.type === "MustacheStatement" || node.type === "BlockStatement") && !!(node.params && node.params.length || node.hash);
         },
-        scopedId: function scopedId(path15) {
-          return /^\.|this\b/.test(path15.original);
+        scopedId: function scopedId(path16) {
+          return /^\.|this\b/.test(path16.original);
         },
         // an ID is simple if it only has one part, and that part is not
         // `..` or `this`.
-        simpleId: function simpleId(path15) {
-          return path15.parts.length === 1 && !AST.helpers.scopedId(path15) && !path15.depth;
+        simpleId: function simpleId(path16) {
+          return path16.parts.length === 1 && !AST.helpers.scopedId(path16) && !path16.depth;
         }
       }
     };
@@ -2273,12 +2273,12 @@ var require_helpers2 = __commonJS({
         loc
       };
     }
-    function prepareMustache(path15, params, hash2, open, strip, locInfo) {
+    function prepareMustache(path16, params, hash2, open, strip, locInfo) {
       var escapeFlag = open.charAt(3) || open.charAt(2), escaped = escapeFlag !== "{" && escapeFlag !== "&";
       var decorator = /\*/.test(open);
       return {
         type: decorator ? "Decorator" : "MustacheStatement",
-        path: path15,
+        path: path16,
         params,
         hash: hash2,
         escaped,
@@ -2596,9 +2596,9 @@ var require_compiler = __commonJS({
       },
       DecoratorBlock: function DecoratorBlock(decorator) {
         var program = decorator.program && this.compileProgram(decorator.program);
-        var params = this.setupFullMustacheParams(decorator, program, void 0), path15 = decorator.path;
+        var params = this.setupFullMustacheParams(decorator, program, void 0), path16 = decorator.path;
         this.useDecorators = true;
-        this.opcode("registerDecorator", params.length, path15.original);
+        this.opcode("registerDecorator", params.length, path16.original);
       },
       PartialStatement: function PartialStatement(partial2) {
         this.usePartial = true;
@@ -2662,46 +2662,46 @@ var require_compiler = __commonJS({
         }
       },
       ambiguousSexpr: function ambiguousSexpr(sexpr, program, inverse) {
-        var path15 = sexpr.path, name = path15.parts[0], isBlock = program != null || inverse != null;
-        this.opcode("getContext", path15.depth);
+        var path16 = sexpr.path, name = path16.parts[0], isBlock = program != null || inverse != null;
+        this.opcode("getContext", path16.depth);
         this.opcode("pushProgram", program);
         this.opcode("pushProgram", inverse);
-        path15.strict = true;
-        this.accept(path15);
+        path16.strict = true;
+        this.accept(path16);
         this.opcode("invokeAmbiguous", name, isBlock);
       },
       simpleSexpr: function simpleSexpr(sexpr) {
-        var path15 = sexpr.path;
-        path15.strict = true;
-        this.accept(path15);
+        var path16 = sexpr.path;
+        path16.strict = true;
+        this.accept(path16);
         this.opcode("resolvePossibleLambda");
       },
       helperSexpr: function helperSexpr(sexpr, program, inverse) {
-        var params = this.setupFullMustacheParams(sexpr, program, inverse), path15 = sexpr.path, name = path15.parts[0];
+        var params = this.setupFullMustacheParams(sexpr, program, inverse), path16 = sexpr.path, name = path16.parts[0];
         if (this.options.knownHelpers[name]) {
           this.opcode("invokeKnownHelper", params.length, name);
         } else if (this.options.knownHelpersOnly) {
           throw new _exception2["default"]("You specified knownHelpersOnly, but used the unknown helper " + name, sexpr);
         } else {
-          path15.strict = true;
-          path15.falsy = true;
-          this.accept(path15);
-          this.opcode("invokeHelper", params.length, path15.original, _ast2["default"].helpers.simpleId(path15));
+          path16.strict = true;
+          path16.falsy = true;
+          this.accept(path16);
+          this.opcode("invokeHelper", params.length, path16.original, _ast2["default"].helpers.simpleId(path16));
         }
       },
-      PathExpression: function PathExpression(path15) {
-        this.addDepth(path15.depth);
-        this.opcode("getContext", path15.depth);
-        var name = path15.parts[0], scoped = _ast2["default"].helpers.scopedId(path15), blockParamId = !path15.depth && !scoped && this.blockParamIndex(name);
+      PathExpression: function PathExpression(path16) {
+        this.addDepth(path16.depth);
+        this.opcode("getContext", path16.depth);
+        var name = path16.parts[0], scoped = _ast2["default"].helpers.scopedId(path16), blockParamId = !path16.depth && !scoped && this.blockParamIndex(name);
         if (blockParamId) {
-          this.opcode("lookupBlockParam", blockParamId, path15.parts);
+          this.opcode("lookupBlockParam", blockParamId, path16.parts);
         } else if (!name) {
           this.opcode("pushContext");
-        } else if (path15.data) {
+        } else if (path16.data) {
           this.options.data = true;
-          this.opcode("lookupData", path15.depth, path15.parts, path15.strict);
+          this.opcode("lookupData", path16.depth, path16.parts, path16.strict);
         } else {
-          this.opcode("lookupOnContext", path15.parts, path15.falsy, path15.strict, scoped);
+          this.opcode("lookupOnContext", path16.parts, path16.falsy, path16.strict, scoped);
         }
       },
       StringLiteral: function StringLiteral(string4) {
@@ -3051,16 +3051,16 @@ var require_util = __commonJS({
     }
     exports.urlGenerate = urlGenerate;
     function normalize(aPath) {
-      var path15 = aPath;
+      var path16 = aPath;
       var url2 = urlParse(aPath);
       if (url2) {
         if (!url2.path) {
           return aPath;
         }
-        path15 = url2.path;
+        path16 = url2.path;
       }
-      var isAbsolute = exports.isAbsolute(path15);
-      var parts = path15.split(/\/+/);
+      var isAbsolute = exports.isAbsolute(path16);
+      var parts = path16.split(/\/+/);
       for (var part, up = 0, i = parts.length - 1; i >= 0; i--) {
         part = parts[i];
         if (part === ".") {
@@ -3077,15 +3077,15 @@ var require_util = __commonJS({
           }
         }
       }
-      path15 = parts.join("/");
-      if (path15 === "") {
-        path15 = isAbsolute ? "/" : ".";
+      path16 = parts.join("/");
+      if (path16 === "") {
+        path16 = isAbsolute ? "/" : ".";
       }
       if (url2) {
-        url2.path = path15;
+        url2.path = path16;
         return urlGenerate(url2);
       }
-      return path15;
+      return path16;
     }
     exports.normalize = normalize;
     function join2(aRoot, aPath) {
@@ -5868,8 +5868,8 @@ var require_printer = __commonJS({
       return this.accept(sexpr.path) + " " + params + hash2;
     };
     PrintVisitor.prototype.PathExpression = function(id) {
-      var path15 = id.parts.join("/");
-      return (id.data ? "@" : "") + "PATH:" + path15;
+      var path16 = id.parts.join("/");
+      return (id.data ? "@" : "") + "PATH:" + path16;
     };
     PrintVisitor.prototype.StringLiteral = function(string4) {
       return '"' + string4.value + '"';
@@ -5908,8 +5908,8 @@ var require_lib = __commonJS({
     handlebars.print = printer.print;
     module.exports = handlebars;
     function extension(module2, filename) {
-      var fs16 = __require("fs");
-      var templateString = fs16.readFileSync(filename, "utf8");
+      var fs17 = __require("fs");
+      var templateString = fs17.readFileSync(filename, "utf8");
       module2.exports = handlebars.compile(templateString);
     }
     if (typeof __require !== "undefined" && __require.extensions) {
@@ -5924,8 +5924,8 @@ import dns from "node:dns";
 import net from "node:net";
 
 // src/cli_dispatch.ts
-import fs15 from "node:fs";
-import path14 from "node:path";
+import fs16 from "node:fs";
+import path15 from "node:path";
 import readline from "node:readline";
 
 // ../shared/src/multipart_parts.ts
@@ -6237,8 +6237,8 @@ var LoticsClient = class {
     headers["x-request-id"] = newRequestId();
     return headers;
   }
-  async request(method, path15, body) {
-    const url2 = `${this.baseUrl}${path15}`;
+  async request(method, path16, body) {
+    const url2 = `${this.baseUrl}${path16}`;
     const headers = this.buildHeaders();
     const init = { method, headers };
     if (body !== void 0) {
@@ -6385,6 +6385,19 @@ var LoticsClient = class {
   async createApp(body) {
     return this.request("POST", "/v1/apps", body);
   }
+  async getApp(appId) {
+    return this.request("GET", `/v1/apps/${encodeURIComponent(appId)}`);
+  }
+  /** A built app version's project source, as the `source.tar.gz` its deploy uploaded. */
+  async downloadAppVersionSource(appId, versionId) {
+    const { url: url2 } = await this.request(
+      "GET",
+      `/v1/apps/${encodeURIComponent(appId)}/versions/${encodeURIComponent(versionId)}/source`
+    );
+    const response = await fetch(url2);
+    if (!response.ok) await this.throwResponseError(response);
+    return Buffer.from(await response.arrayBuffer());
+  }
   /**
    * Workspace-wide dangling-reference sweep — active app/workflow artifacts
    * whose prefixed schema ids no longer resolve. Backs
@@ -8177,10 +8190,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path15) {
-  if (!path15)
+function getElementAtPath(obj, path16) {
+  if (!path16)
     return obj;
-  return path15.reduce((acc, key) => acc?.[key], obj);
+  return path16.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys2 = Object.keys(promisesObj);
@@ -8589,11 +8602,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path15, issues) {
+function prefixIssues(path16, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path15);
+    iss.path.unshift(path16);
     return iss;
   });
 }
@@ -8740,16 +8753,16 @@ function flattenError(error52, mapper = (issue2) => issue2.message) {
 }
 function formatError(error52, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error53, path15 = []) => {
+  const processError = (error53, path16 = []) => {
     for (const issue2 of error53.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path15, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path16, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
       } else {
-        const fullpath = [...path15, ...issue2.path];
+        const fullpath = [...path16, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -8776,17 +8789,17 @@ function formatError(error52, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error52, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error53, path15 = []) => {
+  const processError = (error53, path16 = []) => {
     var _a3, _b;
     for (const issue2 of error53.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path15, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path16, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path15, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
       } else {
-        const fullpath = [...path15, ...issue2.path];
+        const fullpath = [...path16, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -8818,8 +8831,8 @@ function treeifyError(error52, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path15 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path15) {
+  const path16 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path16) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -21511,13 +21524,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path15 = ref.slice(1).split("/").filter(Boolean);
-  if (path15.length === 0) {
+  const path16 = ref.slice(1).split("/").filter(Boolean);
+  if (path16.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path15[0] === defsKey) {
-    const key = path15[1];
+  if (path16[0] === defsKey) {
+    const key = path16[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -21964,6 +21977,186 @@ function fixtureWriteOrder(entities) {
   return { cycle: entities.filter((entity) => !placed.has(entity.alias)).map((entity) => entity.alias) };
 }
 
+// ../shared/src/schemas/files.ts
+var processedFileSchema = zod_default.object({
+  id: zod_default.string().describe("Unique identifier for the processed file"),
+  filename: zod_default.string().describe("Original filename of the uploaded file"),
+  mime_type: zod_default.string().describe("MIME type of the file (e.g., 'image/png', 'application/pdf')"),
+  // Stable proxy URL (`/v1/files/<file_storage_key>`), resolved at serving time
+  // — never stored in the DB.
+  url: zod_default.string().optional().describe("Stable file serving URL, resolved at serving time"),
+  thumbnail_url: zod_default.string().optional().describe("Thumbnail URL for image files, resolved at serving time"),
+  preview_url: zod_default.string().optional().describe("Preview URL for legacy Excel files, resolved at serving time"),
+  provider: zod_default.string().describe("Storage provider name (e.g., 'aws', 'gcs')"),
+  file_storage_key: zod_default.string().describe("Storage key/path where the file is stored"),
+  workspace_id: zod_default.string().describe("ID of the workspace this file belongs to"),
+  size: zod_default.number().nullish().describe("Byte size of the stored object (null until backfilled)"),
+  created_at: zod_default.string().describe("Timestamp when file was uploaded"),
+  metadata: zod_default.unknown().describe("Additional metadata about the file"),
+  data: zod_default.unknown().describe("File-type-specific data (e.g., {width, height, orientation} for images)")
+});
+var fileUploadErrorSchema = zod_default.object({
+  filename: zod_default.string().describe("Original filename that failed to upload"),
+  error: zod_default.string().describe("Error message describing the failure reason")
+});
+var fileUploadResponseSchema = zod_default.object({
+  files: zod_default.array(processedFileSchema).describe("Successfully uploaded files"),
+  errors: zod_default.array(fileUploadErrorSchema).describe("Files that failed to upload with error details")
+});
+var fileFieldValueSchema = zod_default.object({
+  id: zod_default.string().describe("Unique identifier for the file"),
+  /**
+   * Present on a STORED cell and on its way off responses.
+   *
+   * Optional here because this schema types both, and a response is the half
+   * that loses it — no client reads it, and one that required it would reject
+   * the first response without it. Nothing weakens at write time: a file cell
+   * is written from file IDS and `resolveFileFieldIds` mints this from the
+   * `files` row, so a caller never supplies it and a stored cell always has it.
+   * Code that derives a serving URL guards for it (`file_url_resolver.ts`).
+   */
+  file_storage_key: zod_default.string().optional().describe("Storage key for the file"),
+  filename: zod_default.string().describe("Original filename"),
+  mime_type: zod_default.string().describe("MIME type of the file"),
+  url: zod_default.string().optional().describe("Public URL for the file, resolved at serving time"),
+  thumbnail_url: zod_default.string().optional().describe("Thumbnail URL for image files, resolved at serving time"),
+  preview_url: zod_default.string().optional().describe("Preview URL for legacy Excel files, resolved at serving time"),
+  // Immutable file-object metadata, resolved at serving time from the `files`
+  // row (never stored on the denormalized cell) — like `url`. `size` may be
+  // absent for older files not yet backfilled.
+  size: zod_default.number().nullish().describe("Byte size, resolved at serving time from the file object (null/absent until backfilled)"),
+  created_at: zod_default.string().optional().describe("Upload timestamp, resolved at serving time from the file object"),
+  document_template_id: zod_default.string().optional().describe("The document template the file was generated from, resolved at serving time from the file object; absent on a file a person brought")
+});
+var servedFileSchema = zod_default.object({
+  id: zod_default.string(),
+  filename: zod_default.string(),
+  mime_type: zod_default.string(),
+  url: zod_default.string().optional().describe("Serving URL, signed for 24 hours."),
+  thumbnail_url: zod_default.string().optional().describe("Signed thumbnail, for an image."),
+  preview_url: zod_default.string().optional(),
+  size: zod_default.number().nullish().describe("Bytes, where the object records it."),
+  created_at: zod_default.string().optional().describe("When the file was uploaded."),
+  document_template_id: zod_default.string().optional().describe("The document template the file was generated from.")
+});
+var SERVED_FILE_KEYS = servedFileSchema.keyof().options;
+var MAX_UPLOAD_FILE_SIZE = 2 * 1024 * 1024 * 1024;
+var PROFILE_IMAGE_MAX_SIZE = 10 * 1024 * 1024;
+var UPLOAD_TICKET_TTL_SECONDS = 5 * 60;
+var MAX_TICKET_UPLOAD_BYTES = 20 * 1024 * 1024;
+var uploadTicketRequestSchema = zod_default.object({
+  filename: zod_default.string().min(1),
+  mime_type: zod_default.string().optional(),
+  /** Declared up front so an oversize file is refused before its bytes move,
+   *  rather than after the transfer is already spent. Optional because a caller
+   *  streaming from a pipe may genuinely not know; the PUT enforces the cap
+   *  either way. */
+  size_bytes: zod_default.number().int().positive().optional()
+});
+var uploadTicketResponseSchema = zod_default.object({
+  upload_url: zod_default.string(),
+  ticket_id: zod_default.string(),
+  method: zod_default.literal("PUT"),
+  expires_at: zod_default.string(),
+  max_bytes: zod_default.number(),
+  required_headers: zod_default.record(zod_default.string(), zod_default.string())
+});
+var uploadTicketResultSchema = zod_default.object({
+  file_id: zod_default.string(),
+  file_name: zod_default.string(),
+  mime_type: zod_default.string(),
+  size_bytes: zod_default.number(),
+  sha256: zod_default.string(),
+  /** True when these bytes were already in the workspace and no second copy was
+   *  stored. Stated rather than left to inference, because the caller then gets
+   *  back a `file_name` it did not send — the stored file's, not the one it
+   *  uploaded under — and a silent difference reads as a bug. */
+  deduplicated: zod_default.boolean()
+});
+var fileSizeSchema = zod_default.number().int().positive().max(MAX_UPLOAD_FILE_SIZE);
+var directUploadInitRequestSchema = zod_default.object({
+  file_id: zod_default.string().optional(),
+  filename: zod_default.string(),
+  mime_type: zod_default.string(),
+  file_size: fileSizeSchema
+});
+var directUploadInitResponseSchema = zod_default.object({
+  file_id: zod_default.string(),
+  file_storage_key: zod_default.string(),
+  upload_url: zod_default.string()
+});
+var directUploadCompleteRequestSchema = zod_default.object({
+  file_id: zod_default.string(),
+  file_storage_key: zod_default.string(),
+  filename: zod_default.string(),
+  mime_type: zod_default.string(),
+  original_file_id: zod_default.string().optional().describe(
+    "When set, this upload becomes a new version of the original file. The server resolves the current latest, links the new row via source_file_id, and bumps the original's latest_version_id pointer."
+  )
+});
+var multipartInitRequestSchema = zod_default.object({
+  file_id: zod_default.string().optional(),
+  filename: zod_default.string(),
+  mime_type: zod_default.string(),
+  file_size: fileSizeSchema,
+  network_effective_type: zod_default.enum(["slow-2g", "2g", "3g", "4g"]).optional(),
+  network_rtt_ms: zod_default.number().nonnegative().optional()
+});
+var multipartInitResponseSchema = zod_default.object({
+  file_id: zod_default.string(),
+  upload_id: zod_default.string(),
+  file_storage_key: zod_default.string(),
+  part_size: zod_default.number(),
+  parts: zod_default.array(
+    zod_default.object({
+      part_number: zod_default.number(),
+      url: zod_default.string()
+    })
+  )
+});
+var multipartCompleteRequestSchema = zod_default.object({
+  file_id: zod_default.string(),
+  upload_id: zod_default.string(),
+  file_storage_key: zod_default.string(),
+  filename: zod_default.string(),
+  mime_type: zod_default.string(),
+  parts: zod_default.array(
+    zod_default.object({
+      part_number: zod_default.number(),
+      etag: zod_default.string()
+    })
+  ),
+  original_file_id: zod_default.string().optional().describe(
+    "When set, this upload becomes a new version of the original file. The server resolves the current latest, links the new row via source_file_id, and bumps the original's latest_version_id pointer."
+  )
+});
+var multipartAbortRequestSchema = zod_default.object({
+  upload_id: zod_default.string(),
+  file_storage_key: zod_default.string()
+});
+var fileVersionEntrySchema = zod_default.object({
+  id: zod_default.string(),
+  filename: zod_default.string(),
+  /**
+   * Resolved by the server, because deriving it needs the storage key and a
+   * caller that derives is a caller that must be handed one. Every other file
+   * shape already resolves its URL at serving time; this one did not, which is
+   * the whole reason the key still travels here.
+   */
+  url: zod_default.string(),
+  /** @deprecated Unread by any client — resolve bytes through `url` or `id`. */
+  file_storage_key: zod_default.string(),
+  mime_type: zod_default.string(),
+  created_at: zod_default.string(),
+  is_current: zod_default.boolean(),
+  source_file_id: zod_default.string().nullable()
+});
+var fileVersionListResponseSchema = zod_default.object({
+  original_file_id: zod_default.string(),
+  current_version_id: zod_default.string(),
+  versions: zod_default.array(fileVersionEntrySchema).describe("Ordered newest \u2192 oldest. Index 0 is the current version.")
+});
+
 // ../../node_modules/date-fns/constants.js
 var daysInYear = 365.2425;
 var maxTime = Math.pow(10, 8) * 24 * 60 * 60 * 1e3;
@@ -25281,16 +25474,16 @@ function conditionValueIssue(type, operator, value, fieldKey) {
       return null;
   }
 }
-function conditionIssues(node, path15, fieldMap) {
+function conditionIssues(node, path16, fieldMap) {
   if (!node || typeof node !== "object") {
-    return [`${path15}: expected condition object, got ${typeof node}`];
+    return [`${path16}: expected condition object, got ${typeof node}`];
   }
   const obj = node;
   if (obj.type === "locked") {
     const validOps2 = VALID_OPERATORS.locked;
     if (typeof obj.operator !== "string" || !validOps2.includes(obj.operator)) {
       return [
-        `${path15}: invalid operator '${String(obj.operator)}' for locked filter. Valid: ${validOps2.join(", ")}`
+        `${path16}: invalid operator '${String(obj.operator)}' for locked filter. Valid: ${validOps2.join(", ")}`
       ];
     }
     return [];
@@ -25299,12 +25492,12 @@ function conditionIssues(node, path15, fieldMap) {
     const validOps2 = VALID_OPERATORS.current_member;
     if (typeof obj.operator !== "string" || !validOps2.includes(obj.operator)) {
       return [
-        `${path15}: invalid operator '${String(obj.operator)}' for current_member filter. Valid: ${validOps2.join(", ")}`
+        `${path16}: invalid operator '${String(obj.operator)}' for current_member filter. Valid: ${validOps2.join(", ")}`
       ];
     }
     if (!Array.isArray(obj.value) || obj.value.length === 0 || !obj.value.every((v) => typeof v === "string" && v.length > 0)) {
       return [
-        `${path15}: current_member '${obj.operator}' expects a non-empty string[] of group IDs.`
+        `${path16}: current_member '${obj.operator}' expects a non-empty string[] of group IDs.`
       ];
     }
     return [];
@@ -25313,38 +25506,38 @@ function conditionIssues(node, path15, fieldMap) {
     const validOps2 = VALID_OPERATORS.record_id;
     if (typeof obj.operator !== "string" || !validOps2.includes(obj.operator)) {
       return [
-        `${path15}: invalid operator '${String(obj.operator)}' for record_id filter. Valid: ${validOps2.join(", ")}`
+        `${path16}: invalid operator '${String(obj.operator)}' for record_id filter. Valid: ${validOps2.join(", ")}`
       ];
     }
     if (!Array.isArray(obj.value) || obj.value.length === 0 || !obj.value.every((v) => typeof v === "string" && v.length > 0)) {
-      return [`${path15}: record_id '${obj.operator}' expects a non-empty string[] of record ids.`];
+      return [`${path16}: record_id '${obj.operator}' expects a non-empty string[] of record ids.`];
     }
     return [];
   }
   if (typeof obj.field_key !== "string" || !obj.field_key) {
-    return [`${path15}: field_key must be a non-empty string`];
+    return [`${path16}: field_key must be a non-empty string`];
   }
   let filterType;
   if (fieldMap) {
     filterType = fieldMap.get(obj.field_key);
     if (filterType === void 0) {
       const available = Array.from(fieldMap.keys()).join(", ");
-      return [`${path15}: unknown field_key '${obj.field_key}'. Available: ${available}`];
+      return [`${path16}: unknown field_key '${obj.field_key}'. Available: ${available}`];
     }
   } else if (typeof obj.type === "string") {
     filterType = obj.type;
   }
   if (filterType === "button") {
-    return [`${path15}: a button field holds no data and cannot be filtered.`];
+    return [`${path16}: a button field holds no data and cannot be filtered.`];
   }
   if (typeof filterType !== "string" || !VALID_FILTER_TYPES.includes(filterType)) {
     const named = fieldMap && filterType !== obj.type ? `'${String(filterType)}' (resolved from field '${obj.field_key}')` : `'${String(obj.type)}'`;
-    return [`${path15}: invalid filter type ${named}. Valid: ${VALID_FILTER_TYPES.join(", ")}`];
+    return [`${path16}: invalid filter type ${named}. Valid: ${VALID_FILTER_TYPES.join(", ")}`];
   }
   const validOps = VALID_OPERATORS[filterType];
   if (typeof obj.operator !== "string" || !validOps.includes(obj.operator)) {
     return [
-      `${path15}: invalid operator '${String(obj.operator)}' for ${filterType} filter. Valid: ${validOps.join(", ")}`
+      `${path16}: invalid operator '${String(obj.operator)}' for ${filterType} filter. Valid: ${validOps.join(", ")}`
     ];
   }
   if (obj.unit_option !== void 0 && (filterType !== "number" || typeof obj.unit_option !== "string")) {
@@ -25355,8 +25548,8 @@ function conditionIssues(node, path15, fieldMap) {
   const valueIssue = conditionValueIssue(filterType, obj.operator, obj.value, obj.field_key);
   return valueIssue ? [valueIssue] : [];
 }
-function validateFilterCondition(condition, path15 = "filter") {
-  return conditionIssues(condition, path15, void 0);
+function validateFilterCondition(condition, path16 = "filter") {
+  return conditionIssues(condition, path16, void 0);
 }
 function inheritedFilterType(type, format2, fallback) {
   switch (type) {
@@ -25546,11 +25739,11 @@ function perRowRefusals(value) {
     ...currencyField.map((message2) => ({ key: "currency_field", message: message2 }))
   ];
 }
-function figureIssue(path15) {
+function figureIssue(path16) {
   return (value, ctx) => {
     const refused = numberUnitRefusal(value.format, value.unit);
-    if (refused !== void 0) ctx.addIssue({ code: "custom", message: refused, path: [...path15, "unit"] });
-    for (const { key, message: message2 } of perRowRefusals(value)) ctx.addIssue({ code: "custom", message: message2, path: [...path15, key] });
+    if (refused !== void 0) ctx.addIssue({ code: "custom", message: refused, path: [...path16, "unit"] });
+    for (const { key, message: message2 } of perRowRefusals(value)) ctx.addIssue({ code: "custom", message: message2, path: [...path16, key] });
   };
 }
 var tableNumberFieldSchema = tableFieldBaseSchema.extend({
@@ -28030,9 +28223,9 @@ __export(expression_object_exports, {
   pick: () => pick2,
   values: () => values
 });
-function getNestedValue(obj, path15) {
+function getNestedValue(obj, path16) {
   if (obj == null) return void 0;
-  const parts = path15.split(".");
+  const parts = path16.split(".");
   let value = obj;
   for (const part of parts) {
     if (value == null) return void 0;
@@ -28071,11 +28264,11 @@ function entries(obj) {
   }
   return Object.entries(obj);
 }
-function get(obj, path15, defaultValue) {
-  if (typeof path15 !== "string") {
+function get(obj, path16, defaultValue) {
+  if (typeof path16 !== "string") {
     throw new Error("get: path must be a string");
   }
-  const value = getNestedValue(obj, path15);
+  const value = getNestedValue(obj, path16);
   return value !== void 0 ? value : defaultValue;
 }
 function pick2(obj, fields) {
@@ -31453,12 +31646,12 @@ function parseFixtureDateExpression(value) {
 function isFixtureScalarValue(value) {
   return value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean";
 }
-function checkTraversalFilter(node, path15, contextEntity, fieldByEntity, errors) {
+function checkTraversalFilter(node, path16, contextEntity, fieldByEntity, errors) {
   if (contextEntity === null) {
     errors.push({
       severity: "error",
       rule: "model.filter",
-      path: path15,
+      path: path16,
       message: `traversal filter "${node.path[0]}" resolves only directly over a from_table`
     });
     return;
@@ -31470,7 +31663,7 @@ function checkTraversalFilter(node, path15, contextEntity, fieldByEntity, errors
       errors.push({
         severity: "error",
         rule: "model.filter",
-        path: path15,
+        path: path16,
         message: `traversal path[${index}] "${hop}" is not an entity.field alias`
       });
       return;
@@ -31479,7 +31672,7 @@ function checkTraversalFilter(node, path15, contextEntity, fieldByEntity, errors
       errors.push({
         severity: "error",
         rule: "model.filter",
-        path: path15,
+        path: path16,
         message: index === 0 ? `traversal path[0] "${hop}" is addressed on entity "${parsed2.entity}", but the filter holding it reads "${current}"` : `traversal path[${index}] "${hop}" is addressed on entity "${parsed2.entity}", but the hop before it lands on "${current}"`
       });
       return;
@@ -31489,7 +31682,7 @@ function checkTraversalFilter(node, path15, contextEntity, fieldByEntity, errors
       errors.push({
         severity: "error",
         rule: "model.filter",
-        path: path15,
+        path: path16,
         message: `traversal path[${index}] "${hop}" is not a field on entity "${parsed2.entity}"`
       });
       return;
@@ -31498,7 +31691,7 @@ function checkTraversalFilter(node, path15, contextEntity, fieldByEntity, errors
       errors.push({
         severity: "error",
         rule: "model.filter",
-        path: path15,
+        path: path16,
         message: `traversal path[${index}] "${hop}" is a ${field.type} field, not select_record_link`
       });
       return;
@@ -31512,7 +31705,7 @@ function checkTraversalFilter(node, path15, contextEntity, fieldByEntity, errors
     errors.push({
       severity: "error",
       rule: "model.filter",
-      path: path15,
+      path: path16,
       message: `traversal condition "${innerField}" must be an entity.field alias on "${current}", the entity its path lands on`
     });
     return;
@@ -31522,12 +31715,12 @@ function checkTraversalFilter(node, path15, contextEntity, fieldByEntity, errors
     errors.push({
       severity: "error",
       rule: "model.filter",
-      path: path15,
+      path: path16,
       message: `traversal condition "${innerField}" is not a field on entity "${parsed.entity}"`
     });
     return;
   }
-  checkConditionShape(node.condition, parsed.entity, target, path15, fieldByEntity, errors);
+  checkConditionShape(node.condition, parsed.entity, target, path16, fieldByEntity, errors);
 }
 function contractFilterType(entityAlias, field, fieldByEntity, hops = 0) {
   if (field.type === "formula") return formulaResultType(field.formula);
@@ -31550,7 +31743,7 @@ function formulaSelectOptions(entityAlias, field, fieldByEntity, hops = 0) {
   const shown = fieldByEntity.get(source.target_entity)?.get(field.lookup_field_alias);
   return shown === void 0 ? void 0 : formulaSelectOptions(source.target_entity, shown, fieldByEntity, hops + 1);
 }
-function selectWordRefusals(entityAlias, expression, fieldByEntity, path15) {
+function selectWordRefusals(entityAlias, expression, fieldByEntity, path16) {
   const words = new Set([...expression.matchAll(/(["'])((?:(?!\1).)*)\1/g)].map((match2) => match2[2]));
   if (words.size === 0) return [];
   return parseFieldRefTokens(expression).flatMap((token2) => {
@@ -31564,19 +31757,19 @@ function selectWordRefusals(entityAlias, expression, fieldByEntity, path15) {
       {
         severity: "error",
         rule: "field.formula",
-        path: path15,
+        path: path16,
         message: held.own ? `compares {${token2}} to "${word}", and a select reaches a formula as the KEYS of its options, never their words \u2014 name the option {${token2}:${spelled.alias}}: includes({${token2}}, {${token2}:${spelled.alias}})` : `compares {${token2}} to "${word}", and a looked-up select reaches a formula as the KEYS of its options, never their words \u2014 test it on "${held.entity}", where the select lives ({field:option} names one there), and look that result up`
       }
     ];
   });
 }
-function formulaOptionRefusals(field, path15) {
+function formulaOptionRefusals(field, path16) {
   const { options, output_type: stated } = field.formula;
   if (options === void 0) {
-    return stated === "select" ? [{ severity: "error", rule: "field.formula", path: path15, message: 'states output_type "select" and no options \u2014 a formula yields one of the options it declares' }] : [];
+    return stated === "select" ? [{ severity: "error", rule: "field.formula", path: path16, message: 'states output_type "select" and no options \u2014 a formula yields one of the options it declares' }] : [];
   }
   const refusals = [];
-  const refuse = (message2) => refusals.push({ severity: "error", rule: "field.formula", path: path15, message: message2 });
+  const refuse = (message2) => refusals.push({ severity: "error", rule: "field.formula", path: path16, message: message2 });
   if (stated !== void 0 && stated !== "select") refuse(`states output_type "${stated}" beside options \u2014 a formula with options yields one of them`);
   const figure = ["format", "currency", "unit", "unit_field", "currency_field"].filter((key) => field.formula[key] !== void 0);
   if (figure.length > 0) refuse(`states ${figure.join(", ")} beside options \u2014 a formula yielding an option is no figure`);
@@ -31596,12 +31789,12 @@ function formulaOptionRefusals(field, path15) {
   }
   return refusals;
 }
-function checkConditionShape(condition, entityAlias, field, path15, fieldByEntity, errors) {
+function checkConditionShape(condition, entityAlias, field, path16, fieldByEntity, errors) {
   const type = contractFilterType(entityAlias, field, fieldByEntity);
   if (type === void 0 && condition.type === void 0) return;
   const typed = type === void 0 ? condition : { ...condition, type };
-  for (const message2 of validateFilterCondition(typed, path15)) {
-    errors.push({ severity: "error", rule: "model.filter", path: path15, message: message2.startsWith(`${path15}: `) ? message2.slice(path15.length + 2) : message2 });
+  for (const message2 of validateFilterCondition(typed, path16)) {
+    errors.push({ severity: "error", rule: "model.filter", path: path16, message: message2.startsWith(`${path16}: `) ? message2.slice(path16.length + 2) : message2 });
   }
   if (field.type !== "select") return;
   const declared = new Set(field.options.map((option) => option.alias));
@@ -31611,20 +31804,20 @@ function checkConditionShape(condition, entityAlias, field, path15, fieldByEntit
     errors.push({
       severity: "error",
       rule: "model.filter",
-      path: path15,
+      path: path16,
       message: `filters field "${field.alias}" on option "${raw}", which that field does not declare (${declared.size > 0 ? [...declared].join(", ") : "it declares none"})`
     });
   }
 }
-function checkFilterFields(filters, path15, contextEntity, fieldByEntity, errors, checkField) {
+function checkFilterFields(filters, path16, contextEntity, fieldByEntity, errors, checkField) {
   if (filters.node_type === "group") {
     for (const child of filters.children) {
-      checkFilterFields(child, path15, contextEntity, fieldByEntity, errors, checkField);
+      checkFilterFields(child, path16, contextEntity, fieldByEntity, errors, checkField);
     }
     return;
   }
   if (filters.node_type === "traversal") {
-    checkTraversalFilter(filters, path15, contextEntity, fieldByEntity, errors);
+    checkTraversalFilter(filters, path16, contextEntity, fieldByEntity, errors);
     return;
   }
   if (filters.type === "current_member") return;
@@ -31632,7 +31825,7 @@ function checkFilterFields(filters, path15, contextEntity, fieldByEntity, errors
   checkField(filters.field_key);
   if (contextEntity === null) return;
   const field = fieldByEntity.get(contextEntity)?.get(filters.field_key);
-  if (field !== void 0) checkConditionShape(filters, contextEntity, field, path15, fieldByEntity, errors);
+  if (field !== void 0) checkConditionShape(filters, contextEntity, field, path16, fieldByEntity, errors);
 }
 function findDuplicates(aliases) {
   const seen = /* @__PURE__ */ new Set();
@@ -31647,19 +31840,19 @@ function checkUniqueTuples(entity, fields) {
   const errors = [];
   const seen = /* @__PURE__ */ new Set();
   for (const [index, tuple2] of (entity.unique ?? []).entries()) {
-    const path15 = `entities.${entity.alias}.unique.${index}`;
+    const path16 = `entities.${entity.alias}.unique.${index}`;
     const key = [...new Set(tuple2)].sort().join("+");
     if (new Set(tuple2).size !== tuple2.length) {
-      errors.push({ severity: "error", rule: "entity.unique", path: path15, message: `names a field twice \u2014 a set of fields names each once` });
+      errors.push({ severity: "error", rule: "entity.unique", path: path16, message: `names a field twice \u2014 a set of fields names each once` });
     }
     if (seen.has(key)) {
-      errors.push({ severity: "error", rule: "entity.unique", path: path15, message: `states the set ${tuple2.join(" + ")} again \u2014 once is the rule` });
+      errors.push({ severity: "error", rule: "entity.unique", path: path16, message: `states the set ${tuple2.join(" + ")} again \u2014 once is the rule` });
     }
     seen.add(key);
     for (const alias2 of tuple2) {
       const field = fields.get(alias2);
       if (field === void 0) {
-        errors.push({ severity: "error", rule: "entity.unique", path: path15, message: `names "${alias2}", which is not a field of "${entity.alias}"` });
+        errors.push({ severity: "error", rule: "entity.unique", path: path16, message: `names "${alias2}", which is not a field of "${entity.alias}"` });
         continue;
       }
       const admitted = field.type === "select" && field.multi !== true || field.type === "select_record_link" && field.cardinality === "one" || field.type === "text" || field.type === "number" || field.type === "date";
@@ -31667,14 +31860,14 @@ function checkUniqueTuples(entity, fields) {
         errors.push({
           severity: "error",
           rule: "entity.unique",
-          path: path15,
+          path: path16,
           message: `names "${alias2}", which holds no single value to compare (a ${field.type}) \u2014 a unique set takes text, number, date, a single select, or a link of cardinality "one"`
         });
       }
     }
     const [only] = tuple2;
     if (tuple2.length === 1 && fields.get(only)?.type === "text") {
-      errors.push({ severity: "error", rule: "entity.unique", path: path15, message: `is "${only}" alone \u2014 declare \`unique: true\` on the text field itself` });
+      errors.push({ severity: "error", rule: "entity.unique", path: path16, message: `is "${only}" alone \u2014 declare \`unique: true\` on the text field itself` });
     }
   }
   return errors;
@@ -32567,8 +32760,8 @@ var MODEL_RULES = {
   "check.resolve": { sentence: "`resolve` names an act of this app on the rows the check stands on, pressed on one row, not refused by the check, and drawn as a button \u2014 never a correction." },
   "check.restates-meter": { sentence: "A warning reading a gated meter's figure against its bound or pass mark is refused \u2014 the meter draws it." }
 };
-var error51 = (rule, path15, message2) => ({ severity: "error", path: path15, message: message2, rule });
-var note = (rule, path15, message2) => ({ severity: "note", path: path15, message: message2, rule });
+var error51 = (rule, path16, message2) => ({ severity: "error", path: path16, message: message2, rule });
+var note = (rule, path16, message2) => ({ severity: "note", path: path16, message: message2, rule });
 
 // ../shared/src/schemas/app_spec_version.ts
 var APP_SPEC_VERSION = 13;
@@ -35073,9 +35266,9 @@ function templateFields(content) {
 }
 
 // ../shared/src/schemas/app_model_validate_parts.ts
-function checkOwnRows(model, entity, field, path15) {
+function checkOwnRows(model, entity, field, path16) {
   if (field.type !== "select_record_link" || !childList(model, entity, field)) return [];
-  return [error51("app.own-rows", path15, `"${field.alias}" lists "${field.target_entity}" rows that each belong to one "${entity.alias}" \u2014 they are this record's own rows: read them as a block, \`{ "rows": "${field.target_entity}" }\``)];
+  return [error51("app.own-rows", path16, `"${field.alias}" lists "${field.target_entity}" rows that each belong to one "${entity.alias}" \u2014 they are this record's own rows: read them as a block, \`{ "rows": "${field.target_entity}" }\``)];
 }
 function checkWhen(entities, entity, when, at2, place) {
   const findings = [];
@@ -35118,21 +35311,21 @@ function checkNarrowing(entities, entity, narrowing, at2) {
   return [...mine, ...checkWhen(entities, entity, conditions, at2, "offer")];
 }
 var MADE_FROM = ["html", "excel"];
-function checkTemplate(model, template, path15) {
+function checkTemplate(model, template, path16) {
   if (model.templates === void 0) return [];
   const declared = model.templates.find((one) => one.alias === template);
-  if (declared === void 0) return [error51("model.names-declared", path15, `names template "${template}", which this model does not declare`)];
+  if (declared === void 0) return [error51("model.names-declared", path16, `names template "${template}", which this model does not declare`)];
   if (!MADE_FROM.includes(declared.type)) {
-    return [error51("model.template-kind", path15, `names the ${declared.type} template "${template}" \u2014 a document is made from an html or an excel one`)];
+    return [error51("model.template-kind", path16, `names the ${declared.type} template "${template}" \u2014 a document is made from an html or an excel one`)];
   }
   return [];
 }
-function checkExportTemplate(model, entity, tabs, template, path15) {
-  const kind = checkTemplate(model, template, path15);
+function checkExportTemplate(model, entity, tabs, template, path16) {
+  const kind = checkTemplate(model, template, path16);
   if (kind.length > 0 || model.templates === void 0) return kind;
   const reports = APP_EXPORT_REPORT_KEYS;
   if (reports.includes(entity)) {
-    return [error51("register.export-template", path15, `lists its rows under "${entity}", a key the report fills itself (${reports.join(", ")}) \u2014 rename the entity`)];
+    return [error51("register.export-template", path16, `lists its rows under "${entity}", a key the report fills itself (${reports.join(", ")}) \u2014 rename the entity`)];
   }
   const fed = [...reports, entity, ...tabs];
   const content = templateContent(model, template);
@@ -35141,8 +35334,8 @@ function checkExportTemplate(model, entity, tabs, template, path15) {
     (app) => isDashboardApp(app) ? [] : (app.acts ?? []).flatMap((act) => [act.template, ...(act.templates ?? []).map((one) => one.template)].includes(template) ? [`${app.alias}.${act.alias}`] : [])
   );
   return [
-    ...unfed.length === 0 ? [] : [error51("register.export-template", path15, `reads ${unfed.map((root) => `"${root}"`).join(", ")} at its root, which an export does not fill \u2014 it fills ${fed.map((key) => `"${key}"`).join(", ")}`)],
-    ...acts.length === 0 ? [] : [error51("register.export-template", path15, `is also the document of ${acts.map((act) => `"${act}"`).join(", ")} \u2014 an act fills its template with a record's fields, an export with the report; give each its own`)]
+    ...unfed.length === 0 ? [] : [error51("register.export-template", path16, `reads ${unfed.map((root) => `"${root}"`).join(", ")} at its root, which an export does not fill \u2014 it fills ${fed.map((key) => `"${key}"`).join(", ")}`)],
+    ...acts.length === 0 ? [] : [error51("register.export-template", path16, `is also the document of ${acts.map((act) => `"${act}"`).join(", ")} \u2014 an act fills its template with a record's fields, an export with the report; give each its own`)]
   ];
 }
 
@@ -35192,9 +35385,9 @@ function checkReading(model, reading, at2) {
   const entity = entityOf(model, alias2);
   if (entity === void 0) return [error51("model.names-declared", `${at2}.${key}`, `names entity "${alias2}", which this model does not declare`)];
   const findings = [];
-  const own = (name, path15) => {
+  const own = (name, path16) => {
     const found = fieldOf(entity, name);
-    if (found === void 0) findings.push(error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`));
+    if (found === void 0) findings.push(error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`));
     return found;
   };
   if ("value" in reading && reading.value !== void 0) {
@@ -35231,31 +35424,31 @@ function checkReading(model, reading, at2) {
     if (refused !== void 0) findings.push(error51("reading.over", `${at2}.over`, `"${reading.over}" ${refused}`));
   }
   for (const [name, held] of Object.entries(reading.where ?? {})) {
-    const path15 = `${at2}.where.${name}`;
-    const named = own(name, path15);
+    const path16 = `${at2}.where.${name}`;
+    const named = own(name, path16);
     if (named === void 0) continue;
     if (held === "me") {
-      if (named.type !== "select_member") findings.push(error51("reading.where", path15, `"${name}" is ${kindOf(named, entity, model.entities)} \u2014 "me" narrows a member field to the reader`));
+      if (named.type !== "select_member") findings.push(error51("reading.where", path16, `"${name}" is ${kindOf(named, entity, model.entities)} \u2014 "me" narrows a member field to the reader`));
       continue;
     }
     const read = readField(model, entity, named);
     if (read === void 0 || read.several) {
-      findings.push(error51("reading.where", path15, `"${name}" is a lookup through a link holding several rows \u2014 a reading keeps a row by one value: look it up through links to one row`));
+      findings.push(error51("reading.where", path16, `"${name}" is a lookup through a link holding several rows \u2014 a reading keeps a row by one value: look it up through links to one row`));
       continue;
     }
     const { field, entity: holder } = read;
     if (typeof held === "boolean") {
-      if (!isYesNo(field, holder, model.entities)) findings.push(error51("reading.where", path15, `"${name}" is ${kindOf(field, holder, model.entities)} \u2014 true or false keeps rows by a yes/no, stored or a formula of one`));
+      if (!isYesNo(field, holder, model.entities)) findings.push(error51("reading.where", path16, `"${name}" is ${kindOf(field, holder, model.entities)} \u2014 true or false keeps rows by a yes/no, stored or a formula of one`));
       continue;
     }
     const options = contractSelectOptions(field);
     if (options === void 0) {
-      findings.push(error51("reading.where", path15, `"${name}" is a ${field.type} field \u2014 options keep rows by a select`));
+      findings.push(error51("reading.where", path16, `"${name}" is a ${field.type} field \u2014 options keep rows by a select`));
       continue;
     }
     const declared = new Set(options.map((option) => option.alias));
     for (const [index, option] of held.entries()) {
-      if (!declared.has(option)) findings.push(error51("model.names-declared", `${path15}.${index}`, `names "${option}", which is not an option of "${name}"`));
+      if (!declared.has(option)) findings.push(error51("model.names-declared", `${path16}.${index}`, `names "${option}", which is not an option of "${name}"`));
     }
   }
   if ("list" in reading) {
@@ -35279,18 +35472,18 @@ function checkMilestones(entities, entity, display, at2) {
   const findings = [];
   const seen = /* @__PURE__ */ new Set();
   for (const [index, stage] of stages.entries()) {
-    const path15 = `${at2}.status.milestones.${index}`;
+    const path16 = `${at2}.status.milestones.${index}`;
     const date5 = fieldOf(entity, stage.field);
     if (date5 === void 0) {
-      findings.push(error51("model.names-declared", path15, `names "${stage.field}", which is not a field of "${entity.alias}"`));
+      findings.push(error51("model.names-declared", path16, `names "${stage.field}", which is not a field of "${entity.alias}"`));
       continue;
     }
     if (date5.type !== "date" || !isAsked(date5)) {
-      findings.push(error51("records.milestones", path15, `"${stage.field}" is a ${date5.type === "date" ? "date the workspace stamps" : `${date5.type} field`} \u2014 a milestone is a date a person ticks`));
+      findings.push(error51("records.milestones", path16, `"${stage.field}" is a ${date5.type === "date" ? "date the workspace stamps" : `${date5.type} field`} \u2014 a milestone is a date a person ticks`));
     }
-    if (seen.has(stage.field)) findings.push(error51("records.milestones", path15, `"${stage.field}" is already a milestone \u2014 each date marks one stage`));
+    if (seen.has(stage.field)) findings.push(error51("records.milestones", path16, `"${stage.field}" is already a milestone \u2014 each date marks one stage`));
     seen.add(stage.field);
-    findings.push(...checkWhen(entities, entity, stage.when, `${path15}.when`, "stage"));
+    findings.push(...checkWhen(entities, entity, stage.when, `${path16}.when`, "stage"));
   }
   for (const [index, closed] of (display.status?.closed ?? []).entries()) {
     if (!seen.has(closed)) findings.push(error51("records.milestones", `${at2}.status.closed.${index}`, `names "${closed}", which is not one of the milestones`));
@@ -35301,11 +35494,11 @@ function checkMilestones(entities, entity, display, at2) {
   }
   return findings;
 }
-function checkCreateMilestones(model, entity, asked, path15) {
+function checkCreateMilestones(model, entity, asked, path16) {
   const stages = milestonesOf(recordDisplay(model, entity)) ?? [];
   const later = new Set(stages.slice(1).map((stage) => stage.field));
   return asked.flatMap(
-    (name, index) => later.has(name) ? [error51("records.milestone-add", `${path15}.${index}`, `asks "${name}", a later milestone of "${entity}" \u2014 a row starts at the first, and each after it is ticked in order`)] : []
+    (name, index) => later.has(name) ? [error51("records.milestone-add", `${path16}.${index}`, `asks "${name}", a later milestone of "${entity}" \u2014 a row starts at the first, and each after it is ticked in order`)] : []
   );
 }
 
@@ -35316,9 +35509,9 @@ function checkAppRow(model, app, at2) {
   const display = model.records?.[app.entity];
   if (row === void 0 || entity === void 0 || display === void 0) return [];
   const findings = [];
-  const field = (name, path15) => {
+  const field = (name, path16) => {
     const found = fieldOf(entity, name);
-    if (found === void 0) findings.push(error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`));
+    if (found === void 0) findings.push(error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`));
     return found;
   };
   const same = (part) => error51("app.row", `${at2}.row.${part}`, `restates \`records.${entity.alias}.${part}\` \u2014 a row reads it there already; drop it`);
@@ -35349,13 +35542,13 @@ function checkAppRow(model, app, at2) {
 }
 function checkApplies(model, entity, display, at2) {
   return Object.entries(display.applies ?? {}).flatMap(([name, conditions]) => {
-    const path15 = `${at2}.applies.${name}`;
+    const path16 = `${at2}.applies.${name}`;
     const applying = fieldOf(entity, name);
-    if (applying === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
-    if (name === display.title) return [error51("records.applies", path15, `"${name}" is the row's title, which names it wherever it is drawn \u2014 it always applies`)];
-    const own = applying.required === true && !hasDefault(applying) ? [error51("records.applies", path15, `"${name}" is required and starts at no \`default\` \u2014 where it does not apply no add asks it, so a row could not be made; give it a default, or make it optional`)] : [];
+    if (applying === void 0) return [error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`)];
+    if (name === display.title) return [error51("records.applies", path16, `"${name}" is the row's title, which names it wherever it is drawn \u2014 it always applies`)];
+    const own = applying.required === true && !hasDefault(applying) ? [error51("records.applies", path16, `"${name}" is required and starts at no \`default\` \u2014 where it does not apply no add asks it, so a row could not be made; give it a default, or make it optional`)] : [];
     const held = Object.entries(conditions).flatMap(([condition, value]) => {
-      const at3 = `${path15}.${condition}`;
+      const at3 = `${path16}.${condition}`;
       if (condition === name) return [error51("records.applies", at3, `"${name}" applies by itself \u2014 a field applies by another of the row's`)];
       const shape = appliesCondition(model, entity, condition);
       if ("refused" in shape) return [error51(shape.refused.startsWith("names") ? "model.names-declared" : "records.applies", at3, shape.refused)];
@@ -35378,9 +35571,9 @@ function checkRecords(model) {
       findings.push(error51("model.names-declared", at2, `names entity "${alias2}", which this model does not declare`));
       continue;
     }
-    const field = (name, path15) => {
+    const field = (name, path16) => {
       const found = fieldOf(entity, name);
-      if (found === void 0) findings.push(error51("model.names-declared", path15, `names "${name}", which is not a field of "${alias2}"`));
+      if (found === void 0) findings.push(error51("model.names-declared", path16, `names "${name}", which is not a field of "${alias2}"`));
       return found;
     };
     const valueType = (found) => resolvedFieldType(found, entity, model.entities);
@@ -35450,14 +35643,14 @@ function checkRecords(model) {
       }
     }
     for (const [name, start] of Object.entries(display.starts ?? {})) {
-      const path15 = `${at2}.starts.${name}`;
-      const started = field(name, path15);
+      const path16 = `${at2}.starts.${name}`;
+      const started = field(name, path16);
       if (started === void 0) continue;
-      if (!isAsked(started)) findings.push(error51("records.starts", path15, `"${name}" is a ${started.type} field nobody writes, so an add never starts it`));
+      if (!isAsked(started)) findings.push(error51("records.starts", path16, `"${name}" is a ${started.type} field nobody writes, so an add never starts it`));
       else if (start === "today" && (started.type !== "date" || started.format === "date_range" || started.format === "datetime_range")) {
-        findings.push(error51("records.starts", path15, `"${name}" is ${started.type === "date" ? "a span of days" : `a ${started.type} field`} \u2014 \`today\` starts a date or a moment`));
+        findings.push(error51("records.starts", path16, `"${name}" is ${started.type === "date" ? "a span of days" : `a ${started.type} field`} \u2014 \`today\` starts a date or a moment`));
       } else if (start === "me" && started.type !== "select_member") {
-        findings.push(error51("records.starts", path15, `"${name}" is a ${started.type} field \u2014 \`me\` starts a member field at the reader adding the row`));
+        findings.push(error51("records.starts", path16, `"${name}" is a ${started.type} field \u2014 \`me\` starts a member field at the reader adding the row`));
       }
     }
     for (const [index, name] of (display.due ?? []).entries()) {
@@ -35656,30 +35849,30 @@ function optionsWhereConditions(filter2, target) {
   }
   return out.length === 0 ? void 0 : out;
 }
-function checkBoundRef(entity, field, ref, byAlias, path15) {
+function checkBoundRef(entity, field, ref, byAlias, path16) {
   const entities = [...byAlias.values()];
   let on = entity;
   if ("link" in ref) {
     const link = entity.fields.find((one) => one.alias === ref.link);
     if (link === void 0 || link.type !== "select_record_link" || link.cardinality !== "one") {
-      return [error51("write.bounds", path15, `reads "${ref.link}", which is not a one-row link of ${entity.label} \u2014 a bound is read off this row or the one row a link names`)];
+      return [error51("write.bounds", path16, `reads "${ref.link}", which is not a one-row link of ${entity.label} \u2014 a bound is read off this row or the one row a link names`)];
     }
     const target = byAlias.get(link.target_entity);
-    if (target === void 0) return [error51("model.names-declared", path15, `reads "${ref.link}", whose entity "${link.target_entity}" this model does not declare`)];
+    if (target === void 0) return [error51("model.names-declared", path16, `reads "${ref.link}", whose entity "${link.target_entity}" this model does not declare`)];
     on = target;
   }
   const source = on.fields.find((one) => one.alias === ref.field);
-  if (source === void 0) return [error51("model.names-declared", path15, `names "${ref.field}", which is not a field of ${on.label}`)];
-  if (!("link" in ref) && source.alias === field.alias) return [error51("write.bounds", path15, `bounds ${field.label} by itself`)];
+  if (source === void 0) return [error51("model.names-declared", path16, `names "${ref.field}", which is not a field of ${on.label}`)];
+  if (!("link" in ref) && source.alias === field.alias) return [error51("write.bounds", path16, `bounds ${field.label} by itself`)];
   const from = resolvedFieldType(source, on, entities);
   const into = resolvedFieldType(field, entity, entities);
-  if (from !== into) return [error51("write.bounds", path15, `bounds ${field.label} (${String(into)}) by "${source.label}" (${String(from)}) \u2014 a bound is of the value's own type`)];
+  if (from !== into) return [error51("write.bounds", path16, `bounds ${field.label} (${String(into)}) by "${source.label}" (${String(from)}) \u2014 a bound is of the value's own type`)];
   const apart = boundUnitRefusal(field, source, entity, entities, "link" in ref ? { link: ref.link, on } : void 0);
-  return apart === void 0 ? [] : [error51("write.bounds", path15, apart)];
+  return apart === void 0 ? [] : [error51("write.bounds", path16, apart)];
 }
-function checkSame(entity, field, same, byAlias, path15) {
+function checkSame(entity, field, same, byAlias, path16) {
   if (field.type !== "select_record_link") {
-    return [error51("write.same", path15, `${field.label} is a ${field.type} field \u2014 \`same\` narrows the rows a LINK points at`)];
+    return [error51("write.same", path16, `${field.label} is a ${field.type} field \u2014 \`same\` narrows the rows a LINK points at`)];
   }
   const target = byAlias.get(field.target_entity);
   if (target === void 0) return [];
@@ -35687,7 +35880,7 @@ function checkSame(entity, field, same, byAlias, path15) {
   return same.flatMap((alias2, index) => {
     const own = oneLink(entity, alias2);
     const theirs = oneLink(target, alias2);
-    const at2 = `${path15}.${index}`;
+    const at2 = `${path16}.${index}`;
     if (own === void 0) return [error51("write.same", at2, `"${alias2}" is not a one-row link of ${entity.label}`)];
     if (theirs === void 0) return [error51("write.same", at2, `"${alias2}" is not a one-row link of ${target.label} \u2014 the row ${field.label} points at names nothing to compare`)];
     if (own.type !== "select_record_link" || theirs.type !== "select_record_link" || own.target_entity !== theirs.target_entity) {
@@ -35696,14 +35889,14 @@ function checkSame(entity, field, same, byAlias, path15) {
     return [];
   });
 }
-function checkSuggest(entity, field, stated, byAlias, path15) {
-  if (field.type !== "text") return [error51("write.suggest", path15, `${field.label} is a ${field.type} field \u2014 \`suggest\` offers values to a text field a person types`)];
+function checkSuggest(entity, field, stated, byAlias, path16) {
+  if (field.type !== "text") return [error51("write.suggest", path16, `${field.label} is a ${field.type} field \u2014 \`suggest\` offers values to a text field a person types`)];
   const ref = suggestRef(stated);
   const catalog = byAlias.get(ref.entity);
-  if (catalog === void 0) return [error51("model.names-declared", path15, `names entity "${ref.entity}", which this model does not declare`)];
+  if (catalog === void 0) return [error51("model.names-declared", path16, `names entity "${ref.entity}", which this model does not declare`)];
   const source = catalog.fields.find((one) => one.alias === ref.field);
-  if (source === void 0) return [error51("model.names-declared", path15, `names "${ref.field}", which is not a field of ${catalog.label}`)];
-  if (source.type !== "text") return [error51("write.suggest", path15, `offers the values of "${source.label}", a ${source.type} field of ${catalog.label} \u2014 the values offered are a stored text field's`)];
+  if (source === void 0) return [error51("model.names-declared", path16, `names "${ref.field}", which is not a field of ${catalog.label}`)];
+  if (source.type !== "text") return [error51("write.suggest", path16, `offers the values of "${source.label}", a ${source.type} field of ${catalog.label} \u2014 the values offered are a stored text field's`)];
   return [];
 }
 function checkNoOverlap(entity, rule, at2) {
@@ -35764,50 +35957,50 @@ function checkWriteRules(entities, rules) {
       }
     }
     for (const [fieldAlias2, rule] of Object.entries(entry.fields ?? {})) {
-      const path15 = `${at2}.fields.${fieldAlias2}`;
+      const path16 = `${at2}.fields.${fieldAlias2}`;
       const field = fieldByAlias.get(fieldAlias2);
       if (field === void 0) {
-        findings.push(error51("model.names-declared", path15, `names "${fieldAlias2}", which is not a field of ${entity.label}`));
+        findings.push(error51("model.names-declared", path16, `names "${fieldAlias2}", which is not a field of ${entity.label}`));
         continue;
       }
       if (rule.default_from !== void 0) {
-        findings.push(...checkDefaultFrom(entity, field, rule.default_from, byAlias, `${path15}.default_from`));
+        findings.push(...checkDefaultFrom(entity, field, rule.default_from, byAlias, `${path16}.default_from`));
       }
       const bounded = resolvedFieldType(field, entity, entities);
       if ((rule.min !== void 0 || rule.max !== void 0) && !BOUNDED_TYPES.includes(bounded ?? field.type)) {
-        findings.push(error51("write.bounds", path15, `${field.label} is a ${field.type} field \u2014 \`min\`/\`max\` bound a number or a date`));
+        findings.push(error51("write.bounds", path16, `${field.label} is a ${field.type} field \u2014 \`min\`/\`max\` bound a number or a date`));
       }
       for (const side of ["min", "max"]) {
         const bound = rule[side];
         if (typeof bound === "number" && bounded === "date") {
-          findings.push(error51("write.bounds", `${path15}.${side}`, `bounds the date ${field.label} by a number \u2014 a date is bounded by a date field`));
+          findings.push(error51("write.bounds", `${path16}.${side}`, `bounds the date ${field.label} by a number \u2014 a date is bounded by a date field`));
         }
         const perRow = typeof bound === "number" && bound !== 0 ? contractUnitSource(field, entity, entities) : void 0;
         if (perRow !== void 0) {
-          findings.push(error51("write.bound-per-row-unit", `${path15}.${side}`, `bounds ${field.label} by ${String(bound)}, which is in no ${perRow.vocabulary}, and each row reads it in the ${perRow.vocabulary} its ${unitSourceName(perRow)} holds \u2014 only 0 is the same in every ${perRow.vocabulary}`));
+          findings.push(error51("write.bound-per-row-unit", `${path16}.${side}`, `bounds ${field.label} by ${String(bound)}, which is in no ${perRow.vocabulary}, and each row reads it in the ${perRow.vocabulary} its ${unitSourceName(perRow)} holds \u2014 only 0 is the same in every ${perRow.vocabulary}`));
         }
         const ref = boundRef(bound);
-        if (ref !== void 0) findings.push(...checkBoundRef(entity, field, ref, byAlias, `${path15}.${side}`));
+        if (ref !== void 0) findings.push(...checkBoundRef(entity, field, ref, byAlias, `${path16}.${side}`));
       }
       if (typeof rule.min === "number" && typeof rule.max === "number" && rule.min > rule.max) {
-        findings.push(error51("write.bounds", `${path15}.min`, `is above \`max\` (${rule.min} > ${rule.max}) \u2014 the bound refuses every figure`));
+        findings.push(error51("write.bounds", `${path16}.min`, `is above \`max\` (${rule.min} > ${rule.max}) \u2014 the bound refuses every figure`));
       }
-      if (rule.same !== void 0) findings.push(...checkSame(entity, field, rule.same, byAlias, `${path15}.same`));
-      if (rule.suggest !== void 0) findings.push(...checkSuggest(entity, field, rule.suggest, byAlias, `${path15}.suggest`));
+      if (rule.same !== void 0) findings.push(...checkSame(entity, field, rule.same, byAlias, `${path16}.same`));
+      if (rule.suggest !== void 0) findings.push(...checkSuggest(entity, field, rule.suggest, byAlias, `${path16}.suggest`));
       if (rule.options_where === void 0) continue;
       if (field.type !== "select_record_link") {
-        findings.push(error51("write.options-where", `${path15}.options_where`, `${field.label} is a ${field.type} field \u2014 \`options_where\` narrows the rows a LINK may point at`));
+        findings.push(error51("write.options-where", `${path16}.options_where`, `${field.label} is a ${field.type} field \u2014 \`options_where\` narrows the rows a LINK may point at`));
         continue;
       }
       const target = byAlias.get(field.target_entity);
       if (target === void 0) continue;
       const conditions = optionsWhereConditions(rule.options_where, target);
       if (conditions === void 0) {
-        findings.push(error51("write.options-where", `${path15}.options_where`, `is not a narrowing this clause can both filter a picker by and refuse a write with: an \`and\` group of plain conditions over ${target.label}'s own fields, each \`field_key\` a field alias and each operator one of ${Object.entries(OPTIONS_WHERE_OPERATORS).map(([type, ops]) => `${type} ${ops.join("/")}`).join("; ")}`));
+        findings.push(error51("write.options-where", `${path16}.options_where`, `is not a narrowing this clause can both filter a picker by and refuse a write with: an \`and\` group of plain conditions over ${target.label}'s own fields, each \`field_key\` a field alias and each operator one of ${Object.entries(OPTIONS_WHERE_OPERATORS).map(([type, ops]) => `${type} ${ops.join("/")}`).join("; ")}`));
         continue;
       }
       for (const condition of conditions) {
-        const at3 = `${path15}.options_where`;
+        const at3 = `${path16}.options_where`;
         const perRow = condition.type === "number" ? contractUnitSource(condition.field, target, entities) : void 0;
         if (perRow !== void 0) {
           findings.push(error51("write.options-where", at3, `compares "${condition.field.label}", which each row reads in the ${perRow.vocabulary} its ${unitSourceName(perRow)} holds, with a bare number \u2014 a narrowing compares a figure read in one ${perRow.vocabulary} for every row`));
@@ -35831,42 +36024,42 @@ function checkWriteRules(entities, rules) {
   }
   return findings;
 }
-function checkDefaultFrom(entity, field, stated, byAlias, path15) {
+function checkDefaultFrom(entity, field, stated, byAlias, path16) {
   const entities = [...byAlias.values()];
   const [linkAlias, sourceAlias] = stated.split(".");
   const link = entity.fields.find((one) => one.alias === linkAlias);
   if (link === void 0 || link.type !== "select_record_link") {
     return [
-      error51("write.default-from", path15, `names "${linkAlias}", which is not a link field of ${entity.label} \u2014 a default is copied from a row this one points at`)
+      error51("write.default-from", path16, `names "${linkAlias}", which is not a link field of ${entity.label} \u2014 a default is copied from a row this one points at`)
     ];
   }
   if (link.cardinality !== "one") {
     return [
-      error51("write.default-from", path15, `reads "${link.label}", which holds MANY rows \u2014 a default copied from a list would take whichever row came back first`)
+      error51("write.default-from", path16, `reads "${link.label}", which holds MANY rows \u2014 a default copied from a list would take whichever row came back first`)
     ];
   }
   const target = byAlias.get(link.target_entity);
   const source = target?.fields.find((one) => one.alias === sourceAlias);
   if (target === void 0 || source === void 0) {
     return [
-      error51("model.names-declared", path15, `names "${sourceAlias}", which is not a field of entity "${link.target_entity}"`)
+      error51("model.names-declared", path16, `names "${sourceAlias}", which is not a field of entity "${link.target_entity}"`)
     ];
   }
   const from = resolvedFieldType(source, target, entities);
   const into = resolvedFieldType(field, entity, entities);
   if (from !== into) {
     return [
-      error51("write.default-from", path15, `copies ${target.label}'s "${source.label}" (${String(from)}) into a ${String(into)} field`)
+      error51("write.default-from", path16, `copies ${target.label}'s "${source.label}" (${String(from)}) into a ${String(into)} field`)
     ];
   }
   if (source.type !== "select" || field.type !== "select") return [];
   const findings = [];
   if (source.multi === true && field.multi !== true) {
-    findings.push(error51("write.default-from", path15, `copies ${target.label}'s "${source.label}", which holds several options, into ${field.label}, which holds one \u2014 a copy would keep whichever came first`));
+    findings.push(error51("write.default-from", path16, `copies ${target.label}'s "${source.label}", which holds several options, into ${field.label}, which holds one \u2014 a copy would keep whichever came first`));
   }
   const missing = source.options.filter((option) => !field.options.some((one) => one.alias === option.alias));
   if (missing.length > 0) {
-    findings.push(error51("write.default-from", path15, `copies ${target.label}'s "${source.label}" into ${field.label}, which declares no option ${missing.map((option) => `"${option.alias}"`).join(", ")} \u2014 a copied option is written as the one of the same alias`));
+    findings.push(error51("write.default-from", path16, `copies ${target.label}'s "${source.label}" into ${field.label}, which declares no option ${missing.map((option) => `"${option.alias}"`).join(", ")} \u2014 a copied option is written as the one of the same alias`));
   }
   return findings;
 }
@@ -36870,28 +37063,28 @@ var RECORDS_INPUT = "record_ids";
 var TEMPLATES_INPUT = "templates";
 
 // ../shared/src/schemas/app_model_validate_acts.ts
-function checkChildCheck(model, check2, children, acts, path15) {
+function checkChildCheck(model, check2, children, acts, path16) {
   const child = check2.of === void 0 ? void 0 : entityOf(model, check2.of);
   if (child === void 0 || !children.has(child.alias)) {
-    return [error51("check.of", `${path15}.of`, `names "${String(check2.of)}", which this record lists no rows of \u2014 a check of a child is of rows the record lists`)];
+    return [error51("check.of", `${path16}.of`, `names "${String(check2.of)}", which this record lists no rows of \u2014 a check of a child is of rows the record lists`)];
   }
   const field = fieldOf(child, check2.field);
-  if (field === void 0) return [error51("model.names-declared", `${path15}.field`, `names "${check2.field}", which is not a field of "${child.alias}"`)];
+  if (field === void 0) return [error51("model.names-declared", `${path16}.field`, `names "${check2.field}", which is not a field of "${child.alias}"`)];
   const result = field.type === "formula" ? resolvedFieldType(field, child, model.entities) : void 0;
   const findings = [];
   if (result === void 0 || !["boolean", "text"].includes(result)) {
-    findings.push(error51("check.field", `${path15}.field`, `"${check2.field}" is a ${field.type} field \u2014 a check is a yes/no or text formula that stands while true or non-empty`));
+    findings.push(error51("check.field", `${path16}.field`, `"${check2.field}" is a ${field.type} field \u2014 a check is a yes/no or text formula that stands while true or non-empty`));
   }
-  findings.push(...checkRestatesMeter(model, child, check2, path15));
+  findings.push(...checkRestatesMeter(model, child, check2, path16));
   if (check2.blocks !== void 0 && check2.blocks !== "all") {
     for (const [index, target] of check2.blocks.entries()) {
       if (target === "edit" || target === "delete" || acts.get(target) === child.alias) continue;
-      findings.push(error51("check.blocks", `${path15}.blocks.${index}`, `names "${target}" \u2014 a check of a child row refuses its saves ("edit"), its Delete ("delete"), an act of "${child.alias}" or "all"`));
+      findings.push(error51("check.blocks", `${path16}.blocks.${index}`, `names "${target}" \u2014 a check of a child row refuses its saves ("edit"), its Delete ("delete"), an act of "${child.alias}" or "all"`));
     }
   }
   return findings;
 }
-function checkRestatesMeter(model, entity, check2, path15) {
+function checkRestatesMeter(model, entity, check2, path16) {
   const display = model.records?.[entity.alias];
   const figure = display?.figure;
   const bound = figure === void 0 ? void 0 : display?.limits?.[figure];
@@ -36904,7 +37097,7 @@ function checkRestatesMeter(model, entity, check2, path15) {
   return [
     error51(
       "check.restates-meter",
-      `${path15}.field`,
+      `${path16}.field`,
       `"${check2.field}" reads "${figure}" against its pass mark ${pass}, which the figure's meter already draws \u2014 named under its track, amber until reached; drop the check`
     )
   ];
@@ -36929,9 +37122,9 @@ function checkAct(model, entity, act, at2) {
   if (act.on === "view" && (act.requires ?? []).length > 0) {
     findings.push(error51("act.view", `${at2}.requires`, "runs over every row in view, and a field one row lacks would refuse them all \u2014 state a `when` the view is narrowed to, or run it on each record"));
   }
-  const own = (name, path15) => {
+  const own = (name, path16) => {
     const found = fieldOf(entity, name);
-    if (found === void 0) findings.push(error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`));
+    if (found === void 0) findings.push(error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`));
     return found;
   };
   findings.push(...checkWhen(model.entities, entity, act.when, `${at2}.when`, "offer"));
@@ -36973,17 +37166,17 @@ function checkAct(model, entity, act, at2) {
 }
 function checkTemplates(model, entity, act, at2) {
   const templates = act.templates ?? [];
-  const path15 = `${at2}.templates`;
+  const path16 = `${at2}.templates`;
   const findings = [];
-  if (act.template !== void 0) findings.push(error51("act.templates", path15, "states `template` too \u2014 one paper is a `template`, several are `templates`; keep one"));
-  if (act.into === void 0) findings.push(error51("act.templates", path15, "keeps its papers in no field \u2014 name the files field of the record they are kept in (`into`)"));
-  if (act.workflow !== void 0) findings.push(error51("act.makes-or-runs", path15, "makes papers and runs an authored workflow \u2014 the workflow makes what it needs"));
-  if (act.of !== void 0 || (act.on ?? "record") !== "record") findings.push(error51("act.templates", path15, "makes a set of papers over several rows or a child's \u2014 a set is one record's, kept in its `into`"));
+  if (act.template !== void 0) findings.push(error51("act.templates", path16, "states `template` too \u2014 one paper is a `template`, several are `templates`; keep one"));
+  if (act.into === void 0) findings.push(error51("act.templates", path16, "keeps its papers in no field \u2014 name the files field of the record they are kept in (`into`)"));
+  if (act.workflow !== void 0) findings.push(error51("act.makes-or-runs", path16, "makes papers and runs an authored workflow \u2014 the workflow makes what it needs"));
+  if (act.of !== void 0 || (act.on ?? "record") !== "record") findings.push(error51("act.templates", path16, "makes a set of papers over several rows or a child's \u2014 a set is one record's, kept in its `into`"));
   if (act.asks !== void 0) {
     findings.push(error51("act.templates", `${at2}.asks`, `makes a set of papers and asks \u2014 its press is the papers ticked (sent as "${TEMPLATES_INPUT}"); place what it needs in its section and \`requires\` it`));
   }
   for (const [index, one] of templates.entries()) {
-    const each = `${path15}.${index}`;
+    const each = `${path16}.${index}`;
     findings.push(...checkTemplate(model, one.template, `${each}.template`), ...checkWhen(model.entities, entity, one.when, `${each}.when`, "offer"));
     if (templates.findIndex((other) => other.template === one.template) !== index) findings.push(error51("act.templates", `${each}.template`, `names "${one.template}" twice \u2014 each template is one paper of the set`));
   }
@@ -37084,53 +37277,53 @@ function checkIntake(model, app, act, at2) {
   if (act.fills === void 0) findings.push(error51("act.intake", at2, "reads papers and fills nothing \u2014 name what they fill in `fills`"));
   findings.push(...checkPapers(model, app, record2, act.intake, `${at2}.intake`));
   for (const [index, name] of (act.fills ?? []).entries()) {
-    const path15 = `${at2}.fills.${index}`;
-    if ((act.fills ?? []).indexOf(name) !== index) findings.push(error51("act.fills", path15, `names "${name}" twice \u2014 each is filled once`));
-    findings.push(...checkFill(model, app, record2, name, path15));
+    const path16 = `${at2}.fills.${index}`;
+    if ((act.fills ?? []).indexOf(name) !== index) findings.push(error51("act.fills", path16, `names "${name}" twice \u2014 each is filled once`));
+    findings.push(...checkFill(model, app, record2, name, path16));
   }
   return findings;
 }
-function checkPapers(model, app, record2, name, path15) {
+function checkPapers(model, app, record2, name, path16) {
   const child = entityOf(model, name);
-  if (child === void 0) return [error51("model.names-declared", path15, `names "${name}", which this model does not declare`)];
+  if (child === void 0) return [error51("model.names-declared", path16, `names "${name}", which this model does not declare`)];
   const title = model.records?.[child.alias]?.title;
   const kind = title === void 0 ? void 0 : fieldOf(child, title);
   const block = recordBlocks(app.record).find((one) => isRowsBlock(one) && one.rows === child.alias && one.expect !== void 0 && one.expect === title);
   if (block === void 0 || kind === void 0 || !isSingleSelect(kind)) {
-    return [error51("act.intake", path15, `"${name}" is listed in no rows block that expects its title as a single select \u2014 each paper is a line of its kind under the record: \`"expect": "<its title>"\``)];
+    return [error51("act.intake", path16, `"${name}" is listed in no rows block that expects its title as a single select \u2014 each paper is a line of its kind under the record: \`"expect": "<its title>"\``)];
   }
   const findings = [];
-  if (block.where !== void 0) findings.push(error51("act.intake", path15, `"${name}" is listed narrowed by \`where\` \u2014 a paper of any kind is filed; drop the \`where\``));
+  if (block.where !== void 0) findings.push(error51("act.intake", path16, `"${name}" is listed narrowed by \`where\` \u2014 a paper of any kind is filed; drop the \`where\``));
   const files = child.fields.filter((field) => field.type === "files" && isAsked(field));
-  if (files.length !== 1) findings.push(error51("act.intake", path15, `"${name}" holds ${files.length} files fields \u2014 a paper's file is kept in the one it holds`));
+  if (files.length !== 1) findings.push(error51("act.intake", path16, `"${name}" holds ${files.length} files fields \u2014 a paper's file is kept in the one it holds`));
   const link = childLink(child, record2.alias, block.via);
   const starts = Object.keys(model.records?.[child.alias]?.starts ?? {});
   const filled = ["link" in link ? link.link : "", kind.alias, ...files.map((field) => field.alias), ...starts];
   for (const needed of requiredOnCreate(model, child, filled)) {
-    findings.push(error51("act.intake", path15, `a paper's line is made from its kind and its file, and "${name}" requires "${needed}" too \u2014 give it a default`));
+    findings.push(error51("act.intake", path16, `a paper's line is made from its kind and its file, and "${name}" requires "${needed}" too \u2014 give it a default`));
   }
   return findings;
 }
-function checkFill(model, app, record2, name, path15) {
+function checkFill(model, app, record2, name, path16) {
   const [head, tail] = name.split(".");
   if (tail !== void 0) {
     const link2 = fieldOf(record2, head);
-    if (link2 === void 0) return [error51("model.names-declared", path15, `names "${head}", which is not a field of "${record2.alias}"`)];
+    if (link2 === void 0) return [error51("model.names-declared", path16, `names "${head}", which is not a field of "${record2.alias}"`)];
     if (link2.type !== "select_record_link" || link2.cardinality !== "one" || link2.required !== true) {
-      return [error51("act.fills", path15, `"${head}" is not a required one-row link \u2014 papers fill the row one names only where the record always names one`)];
+      return [error51("act.fills", path16, `"${head}" is not a required one-row link \u2014 papers fill the row one names only where the record always names one`)];
     }
     const party = entityOf(model, link2.target_entity);
     if (party === void 0) return [];
-    if (!peopleWrite(party)) return [error51("act.fills", path15, `"${party.alias}" rows are written by no person, so no paper fills one`)];
-    return fillable(model, party, tail, path15);
+    if (!peopleWrite(party)) return [error51("act.fills", path16, `"${party.alias}" rows are written by no person, so no paper fills one`)];
+    return fillable(model, party, tail, path16);
   }
   const listed = recordBlocks(app.record).filter((block2) => isRowsBlock(block2) && block2.rows === name);
-  if (listed.length === 0) return fillable(model, record2, name, path15);
+  if (listed.length === 0) return fillable(model, record2, name, path16);
   const child = entityOf(model, name);
   const block = listed.find((one) => one.expect === void 0 && one.under === void 0 && one.where === void 0 && one.create !== false);
   if (child === void 0) return [];
   if (block === void 0 || !peopleWrite(child)) {
-    return [error51("act.fills", path15, `"${name}" rows are added in no rows block without \`expect\`, \`under\` or \`where\` \u2014 papers add rows where the record lists them plainly`)];
+    return [error51("act.fills", path16, `"${name}" rows are added in no rows block without \`expect\`, \`under\` or \`where\` \u2014 papers add rows where the record lists them plainly`)];
   }
   const link = childLink(child, record2.alias, block.via);
   if (!("link" in link)) return [];
@@ -37141,7 +37334,7 @@ function checkFill(model, app, record2, name, path15) {
   });
   const starts = Object.keys(model.records?.[child.alias]?.starts ?? {});
   return requiredOnCreate(model, child, [link.link, ...filled, ...starts]).map(
-    (needed) => error51("act.fills", path15, `"${name}" rows need "${needed}", which their block does not add as a value papers fill \u2014 add it to the block's \`create\`, or give it a default`)
+    (needed) => error51("act.fills", path16, `"${name}" rows need "${needed}", which their block does not add as a value papers fill \u2014 add it to the block's \`create\`, or give it a default`)
   );
 }
 var RECORD_KEYS = /* @__PURE__ */ new Set(["alias", "label", "when", "requires", "record", "fills"]);
@@ -37151,25 +37344,25 @@ function checkRecord(model, app, act, at2) {
   const record2 = entityOf(model, app.entity);
   if (record2 === void 0) return [];
   const findings = [];
-  const path15 = `${at2}.record`;
+  const path16 = `${at2}.record`;
   for (const key of Object.keys(act).filter((one) => !RECORD_KEYS.has(one))) {
     findings.push(error51("act.record", `${at2}.${key}`, `states \`${key}\` beside \`record\` \u2014 an act recording a call files it under one record and fills what was said; drop it`));
   }
   const child = entityOf(model, recorded.into);
-  if (child === void 0) return [...findings, error51("model.names-declared", `${path15}.into`, `names "${recorded.into}", which this model does not declare`)];
+  if (child === void 0) return [...findings, error51("model.names-declared", `${path16}.into`, `names "${recorded.into}", which this model does not declare`)];
   const listing = recordBlocks(app.record).filter((one) => (isRowsBlock(one) ? one.rows : "timeline" in one ? one.timeline : void 0) === child.alias);
   if (listing.length === 0) {
-    return [...findings, error51("act.record", `${path15}.into`, `"${child.alias}" is drawn in no rows or timeline block of this record \u2014 a recording's row is seen where the record lists them`)];
+    return [...findings, error51("act.record", `${path16}.into`, `"${child.alias}" is drawn in no rows or timeline block of this record \u2014 a recording's row is seen where the record lists them`)];
   }
   const block = listing.find((one) => !isRowsBlock(one) || one.expect === void 0 && one.under === void 0 && one.where === void 0);
   if (block === void 0) {
-    return [...findings, error51("act.record", `${path15}.into`, `"${child.alias}" is listed only with \`expect\`, \`under\` or \`where\` \u2014 a recording's row is drawn among every one the record lists`)];
+    return [...findings, error51("act.record", `${path16}.into`, `"${child.alias}" is listed only with \`expect\`, \`under\` or \`where\` \u2014 a recording's row is drawn among every one the record lists`)];
   }
   const link = childLink(child, record2.alias, "via" in block ? block.via : void 0);
-  if ("refused" in link) return [...findings, error51("act.record", `${path15}.into`, link.refused)];
+  if ("refused" in link) return [...findings, error51("act.record", `${path16}.into`, link.refused)];
   const back = fieldOf(child, link.link);
   if (back?.type !== "select_record_link" || back.cardinality !== "one") {
-    findings.push(error51("act.record", `${path15}.into`, `"${child.alias}" links to "${record2.alias}" through "${link.link}", which holds several \u2014 a recording is filed under one record`));
+    findings.push(error51("act.record", `${path16}.into`, `"${child.alias}" links to "${record2.alias}" through "${link.link}", which holds several \u2014 a recording is filed under one record`));
   }
   const kinds = [
     { key: "audio", types: ["files"], what: "a files field" },
@@ -37184,16 +37377,16 @@ function checkRecord(model, app, act, at2) {
     if (name === void 0) continue;
     const field = fieldOf(child, name);
     if (field === void 0) {
-      findings.push(error51("model.names-declared", `${path15}.${key}`, `names "${name}", which is not a field of "${child.alias}"`));
+      findings.push(error51("model.names-declared", `${path16}.${key}`, `names "${name}", which is not a field of "${child.alias}"`));
       continue;
     }
-    if (!types.includes(field.type)) findings.push(error51("act.record", `${path15}.${key}`, `"${name}" is a ${field.type} field \u2014 the recording's ${key} is kept in ${what}`));
-    if (written.includes(name)) findings.push(error51("act.record", `${path15}.${key}`, `"${name}" is written twice by the recording \u2014 each is a field of its own`));
+    if (!types.includes(field.type)) findings.push(error51("act.record", `${path16}.${key}`, `"${name}" is a ${field.type} field \u2014 the recording's ${key} is kept in ${what}`));
+    if (written.includes(name)) findings.push(error51("act.record", `${path16}.${key}`, `"${name}" is written twice by the recording \u2014 each is a field of its own`));
     written.push(name);
   }
   const starts = Object.keys(model.records?.[child.alias]?.starts ?? {});
   for (const needed of requiredOnCreate(model, child, [...written, ...starts])) {
-    findings.push(error51("act.record", `${path15}.into`, `a recording's row is made from what was recorded, and "${child.alias}" requires "${needed}" too \u2014 give it a default`));
+    findings.push(error51("act.record", `${path16}.into`, `a recording's row is made from what was recorded, and "${child.alias}" requires "${needed}" too \u2014 give it a default`));
   }
   for (const [index, name] of (act.fills ?? []).entries()) {
     const filled = `${at2}.fills.${index}`;
@@ -37206,11 +37399,11 @@ function checkRecord(model, app, act, at2) {
   }
   return findings;
 }
-function fillable(model, entity, name, path15) {
+function fillable(model, entity, name, path16) {
   const field = fieldOf(entity, name);
-  if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
+  if (field === void 0) return [error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`)];
   const why = unfillable(model, entity, field);
-  return why === void 0 ? [] : [error51("act.fills", path15, `"${entity.alias}.${name}" is ${why}`)];
+  return why === void 0 ? [] : [error51("act.fills", path16, `"${entity.alias}.${name}" is ${why}`)];
 }
 function noteIntake(model, app, resolved, at2) {
   const record2 = entityOf(model, app.entity);
@@ -37233,12 +37426,12 @@ function noteIntake(model, app, resolved, at2) {
     if (intake === void 0) return [];
     const children = new Set(intake.rows.map((one) => one.entity));
     return (app.acts?.[index]?.fills ?? []).flatMap((name, order) => {
-      const path15 = `${at2}.acts.${index}.fills.${order}`;
+      const path16 = `${at2}.acts.${index}.fills.${order}`;
       if (children.has(name)) {
         const keyed = intake.rows.find((one) => one.entity === name)?.key.length ?? 0;
-        return keyed > 0 ? [] : [note("act.fills-new", path15, `"${name}" rows are only added: the papers fill no natural key to find one already listed \u2014 state \`natural_key\` on "${name}" of fields its block adds`)];
+        return keyed > 0 ? [] : [note("act.fills-new", path16, `"${name}" rows are only added: the papers fill no natural key to find one already listed \u2014 state \`natural_key\` on "${name}" of fields its block adds`)];
       }
-      return drawn(name) ? [] : [note("act.fills-drawn", path15, `"${name}" is drawn nowhere on the record \u2014 the review shows what it becomes, the record does not`)];
+      return drawn(name) ? [] : [note("act.fills-drawn", path16, `"${name}" is drawn nowhere on the record \u2014 the review shows what it becomes, the record does not`)];
     });
   });
 }
@@ -37250,7 +37443,7 @@ function offeredTogether2(one, other) {
     return held.some((option) => theirs.includes(option));
   });
 }
-function checkFootNeeds(model, entity, section, drawn, act, path15) {
+function checkFootNeeds(model, entity, section, drawn, act, path16) {
   const asked = new Set((act.asks ?? []).filter((ask) => typeof ask === "string"));
   const writers = registerApps(model).flatMap((app) => (app.acts ?? []).filter((one) => actEntity(app, one) === entity.alias));
   const writtenBy = (one) => [...Object.keys(one.set ?? {}), ...(one.asks ?? []).filter((ask) => typeof ask === "string"), ...one.into === void 0 ? [] : [one.into]];
@@ -37258,7 +37451,7 @@ function checkFootNeeds(model, entity, section, drawn, act, path15) {
   return (act.requires ?? []).flatMap((name, index) => {
     const field = fieldOf(entity, name);
     if (asked.has(name) || field === void 0 || !isAsked(field) && !owned.has(name)) return [];
-    const at2 = `${path15}.requires.${index}`;
+    const at2 = `${path16}.requires.${index}`;
     if (!drawn.has(name)) {
       return [error51("act.requires-drawn", at2, `"${act.alias}" needs "${name}", which "${section.title}" does not draw \u2014 its line would name a field the reader cannot see there; place it in the section, or have the act ask it`)];
     }
@@ -38414,11 +38607,11 @@ function checkBookEntities(model, app, at2) {
   const seen = /* @__PURE__ */ new Set();
   const bookless = app.register?.book === true && (app.books ?? []).length === 0 ? [error51("app.books", `${at2}.register.book`, "names the book of each row, but the app reads no `books`")] : [];
   return [...bookless, ...(app.books ?? []).flatMap((book, index) => {
-    const path15 = `${at2}.books.${index}.entity`;
+    const path16 = `${at2}.books.${index}.entity`;
     const findings = [];
-    if (entityOf(model, book.entity) === void 0) findings.push(error51("model.names-declared", path15, `names entity "${book.entity}", which this model does not declare`));
-    if (book.entity === app.entity) findings.push(error51("app.books", path15, `names "${book.entity}", the app's own entity \u2014 a book is another entity's rows`));
-    if (seen.has(book.entity)) findings.push(error51("app.books", path15, `names "${book.entity}" twice \u2014 each book is read once`));
+    if (entityOf(model, book.entity) === void 0) findings.push(error51("model.names-declared", path16, `names entity "${book.entity}", which this model does not declare`));
+    if (book.entity === app.entity) findings.push(error51("app.books", path16, `names "${book.entity}", the app's own entity \u2014 a book is another entity's rows`));
+    if (seen.has(book.entity)) findings.push(error51("app.books", path16, `names "${book.entity}" twice \u2014 each book is read once`));
     seen.add(book.entity);
     return findings;
   })];
@@ -38428,26 +38621,26 @@ function checkBookFields(model, app, book, reads, at2) {
   const entity = entityOf(model, book.entity);
   const stated = app.books?.[book.index];
   if (main2 === void 0 || entity === void 0 || stated === void 0) return [];
-  const path15 = `${at2}.books.${book.index}`;
+  const path16 = `${at2}.books.${book.index}`;
   const read = /* @__PURE__ */ new Set([...reads, ...book.named]);
   const mappable = /* @__PURE__ */ new Set([...read, ...exportsBooks(app) ? exportPrinted(model, main2.alias) : []]);
   const findings = [];
   for (const [alias2, held] of Object.entries(stated.fields ?? {})) {
-    if (fieldOf(main2, alias2) === void 0) findings.push(error51("model.names-declared", `${path15}.fields.${alias2}`, `maps "${alias2}", which is not a field of "${main2.alias}"`));
-    else if (!mappable.has(alias2)) findings.push(error51("app.books", `${path15}.fields.${alias2}`, `maps "${alias2}", which the app does not read`));
-    if (fieldOf(entity, held) === void 0) findings.push(error51("model.names-declared", `${path15}.fields.${alias2}`, `maps "${alias2}" to "${held}", which is not a field of "${entity.alias}"`));
+    if (fieldOf(main2, alias2) === void 0) findings.push(error51("model.names-declared", `${path16}.fields.${alias2}`, `maps "${alias2}", which is not a field of "${main2.alias}"`));
+    else if (!mappable.has(alias2)) findings.push(error51("app.books", `${path16}.fields.${alias2}`, `maps "${alias2}", which the app does not read`));
+    if (fieldOf(entity, held) === void 0) findings.push(error51("model.names-declared", `${path16}.fields.${alias2}`, `maps "${alias2}" to "${held}", which is not a field of "${entity.alias}"`));
   }
   for (const alias2 of read) {
     const own = fieldOf(main2, alias2);
     const lined = book.lineUp(alias2);
     const field = lined === void 0 ? void 0 : fieldOf(entity, lined);
     const apart = own === void 0 || field === void 0 ? void 0 : fieldMisfit(model, { entity: main2, field: own }, { entity, field });
-    if (apart !== void 0) findings.push(error51("app.books", path15, `reads "${alias2}" as "${entity.alias}.${field?.alias ?? alias2}", which ${apart} \u2014 a row of either stands in one column`));
+    if (apart !== void 0) findings.push(error51("app.books", path16, `reads "${alias2}" as "${entity.alias}.${field?.alias ?? alias2}", which ${apart} \u2014 a row of either stands in one column`));
     const options = own === void 0 ? void 0 : contractSelectOptions(own);
     for (const option of field === void 0 ? [] : contractSelectOptions(field) ?? []) {
       const kin = options?.find((one) => one.alias !== option.alias && sameLabel(one.label, option.label));
       if (kin !== void 0 && !options?.some((one) => one.alias === option.alias)) {
-        findings.push(note("app.book-option-kin", path15, `holds "${option.label}" of "${alias2}" as "${option.alias}", which "${main2.alias}" holds as "${kin.alias}"`));
+        findings.push(note("app.book-option-kin", path16, `holds "${option.label}" of "${alias2}" as "${option.alias}", which "${main2.alias}" holds as "${kin.alias}"`));
       }
     }
   }
@@ -38456,14 +38649,14 @@ function checkBookFields(model, app, book, reads, at2) {
 function sameLabel(a, b) {
   return a.trim().toLocaleLowerCase() === b.trim().toLocaleLowerCase();
 }
-function checkReportBooks(model, app, report, path15) {
+function checkReportBooks(model, app, report, path16) {
   const named = report.books;
   const main2 = entityOf(model, app.entity);
   if (named === void 0 || main2 === void 0) return [];
   const findings = [];
   const seen = /* @__PURE__ */ new Set();
   for (const [index, name] of named.entries()) {
-    const at2 = `${path15}.books.${index}`;
+    const at2 = `${path16}.books.${index}`;
     if (name !== app.entity && !(app.books ?? []).some((book) => book.entity === name)) findings.push(error51("app.books", at2, `names "${name}", which is neither "${app.entity}" nor one of the app's books`));
     if (seen.has(name)) findings.push(error51("app.books", at2, `names "${name}" twice \u2014 each book is read once`));
     seen.add(name);
@@ -38475,7 +38668,7 @@ function checkReportBooks(model, app, report, path15) {
     return stated !== void 0 && entity !== void 0 && bookField(main2, entity, stated, alias2) !== void 0;
   };
   for (const alias2 of [...Object.keys(report.where ?? {}), ...report.per === void 0 ? [] : [report.per]]) {
-    if (!named.some((name) => holds(name, alias2))) findings.push(error51("app.books", path15, `narrows by "${alias2}", which none of ${named.map((one) => `"${one}"`).join(", ")} holds \u2014 no row of the report would stand in its chip`));
+    if (!named.some((name) => holds(name, alias2))) findings.push(error51("app.books", path16, `narrows by "${alias2}", which none of ${named.map((one) => `"${one}"`).join(", ")} holds \u2014 no row of the report would stand in its chip`));
   }
   return findings;
 }
@@ -38570,18 +38763,18 @@ function checkRegisterApp(model, app, at2) {
 function noteTasks(model, resolved, at2) {
   return Object.entries(resolved.tasks).flatMap(([entity, task]) => taskNote(model, entity, task, at2));
 }
-function taskNote(model, entity, task, path15) {
+function taskNote(model, entity, task, path16) {
   if (task.close === void 0) {
     const status = model.records?.[entity]?.status?.field ?? "";
     return [
       note(
         "app.tasks",
-        path15,
+        path16,
         `"${entity}" rows are drawn as tasks and no write of this app moves one to a closed option \u2014 their ring stands disabled: add an act of "${entity}" setting "${status}" to one, or let people write it`
       )
     ];
   }
-  return task.close.act !== void 0 && task.reopen === void 0 ? [note("app.tasks", path15, `"${entity}" rows ticked done stay done: no act of this app moves one back from a closed option`)] : [];
+  return task.close.act !== void 0 && task.reopen === void 0 ? [note("app.tasks", path16, `"${entity}" rows ticked done stay done: no act of this app moves one back from a closed option`)] : [];
 }
 function checkReadsRows(model, reads, entities, at2) {
   const findings = [];
@@ -38646,7 +38839,7 @@ function checkCreates(model, resolved, at2) {
       ])
     )
   ];
-  return lists.flatMap(({ entity, asked, fills: filed, path: path15 }) => {
+  return lists.flatMap(({ entity, asked, fills: filed, path: path16 }) => {
     const declared = entityOf(model, entity);
     if (declared === void 0) return [];
     const fills = [...filed, ...Object.keys(model.records?.[entity]?.starts ?? {})];
@@ -38656,16 +38849,16 @@ function checkCreates(model, resolved, at2) {
       return by === void 0 ? void 0 : `apps.${by.app}.acts.${by.act}.set.${name}`;
     };
     return [
-      ...checkCreateMilestones(model, entity, asked, path15),
+      ...checkCreateMilestones(model, entity, asked, path16),
       // An act's outcome is the act's to write: an add stating it would decide what only the act decides. What the
       // add fills itself (the record, a document's lines) is no reader's statement.
       ...asked.filter((name) => !fills.includes(name)).flatMap((name) => {
         const act = setter(name);
-        return act === void 0 ? [] : [error51("act.set-not-asked", path15, `asks "${name}", which ${act} sets \u2014 the act writes it, so an add never states it; drop it here`)];
+        return act === void 0 ? [] : [error51("act.set-not-asked", path16, `asks "${name}", which ${act} sets \u2014 the act writes it, so an add never states it; drop it here`)];
       }),
       ...requiredOnCreate(model, declared, fills).filter((name) => !asked.includes(name)).map((name) => {
         const act = setter(name);
-        return act === void 0 ? error51("app.create-required", path15, `leaves out "${name}", which "${entity}" requires and nothing fills \u2014 ask it, or give it a default`) : error51("act.set-not-asked", path15, `leaves out "${name}", which "${entity}" requires and ${act} sets \u2014 give it a default`);
+        return act === void 0 ? error51("app.create-required", path16, `leaves out "${name}", which "${entity}" requires and nothing fills \u2014 ask it, or give it a default`) : error51("act.set-not-asked", path16, `leaves out "${name}", which "${entity}" requires and ${act} sets \u2014 give it a default`);
       })
     ];
   });
@@ -38678,9 +38871,9 @@ function checkApp(model, app, at2) {
   if (display === void 0) {
     return [error51("app.records-entry", `${at2}.entity`, `lists "${entity.alias}", which has no \`records\` entry \u2014 say how its row is recognised first`)];
   }
-  const own = (name, path15) => {
+  const own = (name, path16) => {
     const found = fieldOf(entity, name);
-    if (found === void 0) findings.push(error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`));
+    if (found === void 0) findings.push(error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`));
     return found;
   };
   const stages = new Set((milestonesOf(display) ?? []).map((stage) => stage.field));
@@ -38693,41 +38886,41 @@ function checkApp(model, app, at2) {
       findings.push(error51("app.scope", `${at2}.scope`, `"${scope}" is not required, so a row holding none belongs to no folder and is never listed \u2014 make it required`));
     }
   }
-  const scoped = (name, path15, where) => {
-    if (name === scope) findings.push(error51("app.scope", path15, `"${name}" is the folder the app is inside, the same on every row ${where} \u2014 drop it here`));
+  const scoped = (name, path16, where) => {
+    if (name === scope) findings.push(error51("app.scope", path16, `"${name}" is the folder the app is inside, the same on every row ${where} \u2014 drop it here`));
   };
   const rowParts = partsOf(display);
   const registerBounds = meterBounds(display, app.register?.columns ?? []);
   const columns = /* @__PURE__ */ new Map();
   for (const [index, name] of (app.register?.columns ?? []).entries()) {
-    const path15 = `${at2}.register.columns.${index}`;
-    const column = own(name, path15);
+    const path16 = `${at2}.register.columns.${index}`;
+    const column = own(name, path16);
     const part = rowParts.get(name);
-    if (column !== void 0 && part !== void 0) findings.push(error51("register.column-drawn", path15, `"${name}" is already drawn by the row itself, as ${part} \u2014 drop the column`));
+    if (column !== void 0 && part !== void 0) findings.push(error51("register.column-drawn", path16, `"${name}" is already drawn by the row itself, as ${part} \u2014 drop the column`));
     const meter = registerBounds.get(name);
-    if (meter !== void 0) findings.push(error51("register.column-drawn", path15, `"${name}" is the bound of the meter "${meter}" on the same row, which states it \u2014 drop the column`));
-    scoped(name, path15, "it lists");
+    if (meter !== void 0) findings.push(error51("register.column-drawn", path16, `"${name}" is the bound of the meter "${meter}" on the same row, which states it \u2014 drop the column`));
+    scoped(name, path16, "it lists");
     const first2 = columns.get(name);
-    if (first2 !== void 0) findings.push(error51("register.column-drawn", path15, `"${name}" is already column ${first2} \u2014 a field is one column`));
+    if (first2 !== void 0) findings.push(error51("register.column-drawn", path16, `"${name}" is already column ${first2} \u2014 a field is one column`));
     else columns.set(name, index);
   }
   const splits = new Set((app.register?.readings ?? []).flatMap((reading) => "metric" in reading ? [] : pressFields(modelPressed(reading))));
   for (const [index, stated] of (app.register?.filters ?? []).entries()) {
-    const path15 = `${at2}.register.filters.${index}`;
-    findings.push(...checkFilter(model, entity, stated, path15, { owner: "a register", chips: display.status?.field, splits }));
-    scoped(filterField(stated), path15, "it lists");
+    const path16 = `${at2}.register.filters.${index}`;
+    findings.push(...checkFilter(model, entity, stated, path16, { owner: "a register", chips: display.status?.field, splits }));
+    scoped(filterField(stated), path16, "it lists");
   }
   for (const [index, name] of (app.register?.search ?? []).entries()) {
-    const path15 = `${at2}.register.search.${index}`;
-    findings.push(...checkSearch(model, entity, name, path15));
-    scoped(name, path15, "it lists");
+    const path16 = `${at2}.register.search.${index}`;
+    findings.push(...checkSearch(model, entity, name, path16));
+    scoped(name, path16, "it lists");
   }
   findings.push(...checkOrder(entity, app.register?.sort, `${at2}.register.sort`));
   const tabs = app.register?.tabs ?? [];
-  const dated = (name, path15) => {
-    const field = own(name, path15);
+  const dated = (name, path16) => {
+    const field = own(name, path16);
     const type = field === void 0 ? void 0 : resolvedFieldType(field, entity, model.entities) ?? field.type;
-    if (field !== void 0 && type !== "date") findings.push(error51("register.tabs", path15, `"${name}" is a ${field.type} field \u2014 a tab places its rows in the period by a date`));
+    if (field !== void 0 && type !== "date") findings.push(error51("register.tabs", path16, `"${name}" is a ${field.type} field \u2014 a tab places its rows in the period by a date`));
   };
   if (tabs.length > 0 && !["table", "cards"].includes(app.register?.layout ?? "table")) {
     findings.push(error51("register.tabs", `${at2}.register.tabs`, `a ${app.register?.layout} reads its own window \u2014 tabs stand over a table or cards`));
@@ -38738,24 +38931,24 @@ function checkApp(model, app, at2) {
   const named = /* @__PURE__ */ new Set();
   const reportKeys = APP_EXPORT_REPORT_KEYS;
   for (const [index, tab] of tabs.entries()) {
-    const path15 = `${at2}.register.tabs.${index}`;
-    if (named.has(tab.tab)) findings.push(error51("register.tabs", `${path15}.tab`, `"${tab.tab}" names another tab already`));
+    const path16 = `${at2}.register.tabs.${index}`;
+    if (named.has(tab.tab)) findings.push(error51("register.tabs", `${path16}.tab`, `"${tab.tab}" names another tab already`));
     if (reportKeys.includes(tab.tab) || tab.tab === entity.alias) {
-      findings.push(error51("register.tabs", `${path15}.tab`, `"${tab.tab}" is a key a report already holds \u2014 name the tab otherwise`));
+      findings.push(error51("register.tabs", `${path16}.tab`, `"${tab.tab}" is a key a report already holds \u2014 name the tab otherwise`));
     }
     named.add(tab.tab);
-    if (tab.in !== void 0) dated(tab.in, `${path15}.in`);
+    if (tab.in !== void 0) dated(tab.in, `${path16}.in`);
     if (tab.open !== void 0) {
-      dated(tab.open.from, `${path15}.open.from`);
-      dated(tab.open.to, `${path15}.open.to`);
-      if (tab.open.from === tab.open.to) findings.push(error51("register.tabs", `${path15}.open`, `opens and closes on "${tab.open.from}" \u2014 a row is open between two dates`));
+      dated(tab.open.from, `${path16}.open.from`);
+      dated(tab.open.to, `${path16}.open.to`);
+      if (tab.open.from === tab.open.to) findings.push(error51("register.tabs", `${path16}.open`, `opens and closes on "${tab.open.from}" \u2014 a row is open between two dates`));
     }
-    findings.push(...checkNarrowing(model.entities, entity, tab.where, `${path15}.where`));
+    findings.push(...checkNarrowing(model.entities, entity, tab.where, `${path16}.where`));
     const status = display?.status?.field;
     if (status !== void 0 && tab.where?.[status] !== void 0) {
-      findings.push(error51("register.tabs", `${path15}.where.${status}`, `narrows by "${status}", the status \u2014 its chips split the rows by it, each with its count; a tab splits them by the period or another field`));
+      findings.push(error51("register.tabs", `${path16}.where.${status}`, `narrows by "${status}", the status \u2014 its chips split the rows by it, each with its count; a tab splits them by the period or another field`));
     }
-    findings.push(...checkOrder(entity, tab.sort, `${path15}.sort`));
+    findings.push(...checkOrder(entity, tab.sort, `${path16}.sort`));
   }
   const group = app.register?.group;
   if (group !== void 0 && group === app.scope) {
@@ -38775,37 +38968,37 @@ function checkApp(model, app, at2) {
     }
     if (!peopleWrite(entity)) findings.push(error51("app.create-asks", `${at2}.register.create`, `adds rows to "${entity.alias}", which no person writes`));
     for (const [index, name] of create.entries()) {
-      const path15 = `${at2}.register.create.${index}`;
-      const field = own(name, path15);
-      if (field !== void 0 && !isAsked(field)) findings.push(error51("app.asked-written", path15, `asks "${name}", a ${field.type} field nobody writes`));
-      if (field !== void 0) findings.push(...checkOwnRows(model, entity, field, path15));
-      if (name === scope) findings.push(error51("app.scope", path15, `asks "${name}", the folder the app is inside, which an add files the row under itself \u2014 drop it`));
+      const path16 = `${at2}.register.create.${index}`;
+      const field = own(name, path16);
+      if (field !== void 0 && !isAsked(field)) findings.push(error51("app.asked-written", path16, `asks "${name}", a ${field.type} field nobody writes`));
+      if (field !== void 0) findings.push(...checkOwnRows(model, entity, field, path16));
+      if (name === scope) findings.push(error51("app.scope", path16, `asks "${name}", the folder the app is inside, which an add files the row under itself \u2014 drop it`));
     }
   }
   findings.push(...checkReports(model, entity, app, display.status?.field, at2));
   for (const [index, reading] of (app.register?.readings ?? []).entries()) {
-    const path15 = `${at2}.register.readings.${index}`;
+    const path16 = `${at2}.register.readings.${index}`;
     if (readingEntity(reading) !== entity.alias) {
-      findings.push(error51("register.readings-own", path15, `reads "${readingEntity(reading)}" \u2014 a register's readings are over its own rows, "${entity.alias}"; put another entity's on a dashboard`));
+      findings.push(error51("register.readings-own", path16, `reads "${readingEntity(reading)}" \u2014 a register's readings are over its own rows, "${entity.alias}"; put another entity's on a dashboard`));
       continue;
     }
-    findings.push(...checkReading(model, reading, path15));
+    findings.push(...checkReading(model, reading, path16));
     const tab = "tab" in reading ? reading.tab : void 0;
     if (tab !== void 0 && !named.has(tab)) {
-      findings.push(error51("register.tabs", `${path15}.tab`, named.size === 0 ? `reads the tab "${tab}", and the register has no tabs` : `reads the tab "${tab}", which is none of the register's: ${[...named].join(", ")}`));
+      findings.push(error51("register.tabs", `${path16}.tab`, named.size === 0 ? `reads the tab "${tab}", and the register has no tabs` : `reads the tab "${tab}", which is none of the register's: ${[...named].join(", ")}`));
     }
     if ("metric" in reading && reading.value !== void 0 && reading.value === display.figure && reading.where === void 0) {
-      findings.push(error51("register.readings-restate", path15, `sums "${reading.value}", the register's figure, over the rows in view \u2014 the foot states that total; give it a \`where\` the foot does not carry, or drop it`));
+      findings.push(error51("register.readings-restate", path16, `sums "${reading.value}", the register's figure, over the rows in view \u2014 the foot states that total; give it a \`where\` the foot does not carry, or drop it`));
     }
     if ("metric" in reading && reading.value === void 0 && reading.where === void 0 && display.status !== void 0) {
-      findings.push(error51("register.readings-restate", path15, "counts the rows in view \u2014 the status chip states that count; give it a `where` or drop it"));
+      findings.push(error51("register.readings-restate", path16, "counts the rows in view \u2014 the status chip states that count; give it a `where` or drop it"));
     }
   }
   const placed = /* @__PURE__ */ new Map();
-  const place = (name, where, path15) => {
+  const place = (name, where, path16) => {
     const first2 = placed.get(name);
     if (first2 === HEADER_IMAGE && where === FILES_BLOCK) placed.set(name, where);
-    else if (first2 !== void 0) findings.push(error51("record.placed-once", path15, `places "${name}" a second time on the record (it is already in ${first2})`));
+    else if (first2 !== void 0) findings.push(error51("record.placed-once", path16, `places "${name}" a second time on the record (it is already in ${first2})`));
     else placed.set(name, where);
   };
   place(display.title, "the header's title", `${at2}.record`);
@@ -38824,21 +39017,21 @@ function checkApp(model, app, at2) {
   }
   const inFacts = /* @__PURE__ */ new Map();
   for (const [index, section] of sections.entries()) {
-    const path15 = `${at2}.record.sections.${index}`;
-    findings.push(...checkWhen(model.entities, entity, section.when, `${path15}.when`, "offer"));
+    const path16 = `${at2}.record.sections.${index}`;
+    findings.push(...checkWhen(model.entities, entity, section.when, `${path16}.when`, "offer"));
     if (section.fields === void 0 && section.blocks === void 0 && section.acts === void 0) {
-      findings.push(error51("record.section-holds", path15, `"${section.title}" holds no fields, blocks or acts \u2014 a section is where the reader fills, reads or does something; give it one, or drop it`));
+      findings.push(error51("record.section-holds", path16, `"${section.title}" holds no fields, blocks or acts \u2014 a section is where the reader fills, reads or does something; give it one, or drop it`));
     }
-    findings.push(...checkSectionAt(entity, display, section.at, `${path15}.at`));
+    findings.push(...checkSectionAt(entity, display, section.at, `${path16}.at`));
     for (const [order, name] of (section.fields ?? []).entries()) {
-      const fieldPath = `${path15}.fields.${order}`;
+      const fieldPath = `${path16}.fields.${order}`;
       const fact = own(name, fieldPath);
       if (fact !== void 0) place(name, `the section "${section.title}"`, fieldPath);
       if (fact !== void 0) inFacts.set(name, fieldPath);
       if (fact !== void 0) findings.push(...checkOwnRows(model, entity, fact, fieldPath));
     }
   }
-  for (const [name, path15] of inFacts) {
+  for (const [name, path16] of inFacts) {
     const fact = fieldOf(entity, name);
     if (fact?.type !== "lookup" || !(display.subtitle ?? []).includes(fact.source_field_alias)) continue;
     const link = fieldOf(entity, fact.source_field_alias);
@@ -38846,9 +39039,9 @@ function checkApp(model, app, at2) {
     const figure = target?.figure;
     const bound = figure === void 0 ? void 0 : target?.limits?.[figure];
     if (fact.lookup_field_alias !== figure && fact.lookup_field_alias !== bound) continue;
-    findings.push(error51("record.fact-restates", path15, `"${name}" looks up the ${fact.lookup_field_alias === figure ? "figure" : "bound"} of "${fact.source_field_alias}", which the header's line already reads with its meter \u2014 drop it from the section`));
+    findings.push(error51("record.fact-restates", path16, `"${name}" looks up the ${fact.lookup_field_alias === figure ? "figure" : "bound"} of "${fact.source_field_alias}", which the header's line already reads with its meter \u2014 drop it from the section`));
   }
-  for (const [name, path15] of inFacts) {
+  for (const [name, path16] of inFacts) {
     const fact = fieldOf(entity, name);
     if (fact?.type !== "lookup" || !inFacts.has(fact.source_field_alias)) continue;
     const link = fieldOf(entity, fact.source_field_alias);
@@ -38856,22 +39049,22 @@ function checkApp(model, app, at2) {
     if (target === void 0) continue;
     const part = fact.lookup_field_alias === target.title ? "title" : (target.subtitle ?? []).includes(fact.lookup_field_alias) ? "line under the title" : void 0;
     if (part === void 0) continue;
-    findings.push(error51("record.fact-restates", path15, `"${name}" looks up the ${part} of "${fact.source_field_alias}", whose row already reads it where the link stands \u2014 drop it from the section`));
+    findings.push(error51("record.fact-restates", path16, `"${name}" looks up the ${part} of "${fact.source_field_alias}", whose row already reads it where the link stands \u2014 drop it from the section`));
   }
   const blocksPlaced = /* @__PURE__ */ new Map();
   for (const [index, section] of sections.entries()) {
     for (const [order, block] of (section.blocks ?? []).entries()) {
-      const path15 = `${at2}.record.sections.${index}.blocks.${order}`;
-      findings.push(...checkWhen(model.entities, entity, block.when, `${path15}.when`, "offer"));
+      const path16 = `${at2}.record.sections.${index}.blocks.${order}`;
+      findings.push(...checkWhen(model.entities, entity, block.when, `${path16}.when`, "offer"));
       const listed = "timeline" in block ? block.timeline : isRowsBlock(block) ? block.rows : isAgendaBlock(block) ? block.agenda : void 0;
       if (listed !== void 0 && listed === display.status?.history) {
-        findings.push(error51("record.history", path15, `reads "${listed}", the record's status history \u2014 never a section: \`record.history\` draws it beside the record; drop the block`));
+        findings.push(error51("record.history", path16, `reads "${listed}", the record's status history \u2014 never a section: \`record.history\` draws it beside the record; drop the block`));
       }
       const identity = blockIdentity(block);
       const first2 = identity === void 0 ? void 0 : blocksPlaced.get(identity);
-      if (first2 !== void 0) findings.push(error51("record.placed-once", path15, `places the same block a second time on the record (it is already in ${first2}) \u2014 a block is read once`));
+      if (first2 !== void 0) findings.push(error51("record.placed-once", path16, `places the same block a second time on the record (it is already in ${first2}) \u2014 a block is read once`));
       else if (identity !== void 0) blocksPlaced.set(identity, `the section "${section.title}"`);
-      findings.push(...checkBlock(model, entity, block, path15, place, app.reads !== "shared", app.checks ?? []));
+      findings.push(...checkBlock(model, entity, block, path16, place, app.reads !== "shared", app.checks ?? []));
       if (!isRowsBlock(block)) continue;
       const child = entityOf(model, block.rows);
       const link = child === void 0 ? void 0 : childLink(child, entity.alias, block.via);
@@ -38894,34 +39087,34 @@ function checkApp(model, app, at2) {
   const children = new Set(recordChildren(model, entity.alias, recordBlocks(app.record)));
   const acts = /* @__PURE__ */ new Map();
   for (const [index, act] of (app.acts ?? []).entries()) {
-    const path15 = `${at2}.acts.${index}`;
-    if (acts.has(act.alias)) findings.push(error51("app.alias-unique", `${path15}.alias`, `"${act.alias}" names two acts of this app \u2014 an act alias is unique`));
+    const path16 = `${at2}.acts.${index}`;
+    if (acts.has(act.alias)) findings.push(error51("app.alias-unique", `${path16}.alias`, `"${act.alias}" names two acts of this app \u2014 an act alias is unique`));
     acts.set(act.alias, act.of);
     if (act.of !== void 0 && !children.has(act.of)) {
-      findings.push(error51("act.of", `${path15}.of`, `names "${act.of}", which this record lists no rows of \u2014 an act of a child works on rows the record lists`));
+      findings.push(error51("act.of", `${path16}.of`, `names "${act.of}", which this record lists no rows of \u2014 an act of a child works on rows the record lists`));
       continue;
     }
     if (act.of !== void 0 && act.on === "view") {
-      findings.push(error51("act.of", `${path15}.on`, `is "${act.on}", and an act of a child works on the one child row it is pressed on \u2014 drop it`));
+      findings.push(error51("act.of", `${path16}.on`, `is "${act.on}", and an act of a child works on the one child row it is pressed on \u2014 drop it`));
     }
     if (act.of !== void 0 && act.on === "rows" && !listsRows(app, act.of)) {
-      findings.push(error51("act.of", `${path15}.on`, `is "rows", and the record lists no "${act.of}" rows to pick together \u2014 list them in a rows block without \`expect\``));
+      findings.push(error51("act.of", `${path16}.on`, `is "rows", and the record lists no "${act.of}" rows to pick together \u2014 list them in a rows block without \`expect\``));
     }
     const on = entityOf(model, actEntity(app, act));
     if (on === void 0) continue;
-    findings.push(...checkAct(model, on, act, path15), ...checkIntake(model, app, act, path15), ...checkRecord(model, app, act, path15));
+    findings.push(...checkAct(model, on, act, path16), ...checkIntake(model, app, act, path16), ...checkRecord(model, app, act, path16));
     for (const expected of expectedKeys(model, on.alias)) {
       const writes = [...Object.keys(act.set ?? {}), ...(act.asks ?? []).filter((ask) => typeof ask === "string")];
       for (const name of [expected.via, expected.key].filter((one) => writes.includes(one))) {
-        findings.push(error51("act.writes-line-key", path15, `writes "${name}", which names the line a "${on.alias}" row is under its record \u2014 a line's key is stated by filling it`));
+        findings.push(error51("act.writes-line-key", path16, `writes "${name}", which names the line a "${on.alias}" row is under its record \u2014 a line's key is stated by filling it`));
       }
     }
-    findings.push(...checkHistoryCopies(model, on, act, path15));
+    findings.push(...checkHistoryCopies(model, on, act, path16));
     if (act.template !== void 0 && act.workflow !== void 0) {
-      findings.push(error51("act.makes-or-runs", `${path15}.template`, "makes a document and runs an authored workflow \u2014 the workflow makes what it needs"));
+      findings.push(error51("act.makes-or-runs", `${path16}.template`, "makes a document and runs an authored workflow \u2014 the workflow makes what it needs"));
     }
     if (act.on === "view" && act.template === void 0 && act.set === void 0 && act.workflow === void 0) {
-      findings.push(error51("act.view", `${path15}.on`, "runs over every row in view and neither writes nor makes a document \u2014 give it `set`, a `template` or a `workflow`"));
+      findings.push(error51("act.view", `${path16}.on`, "runs over every row in view and neither writes nor makes a document \u2014 give it `set`, a `template` or a `workflow`"));
     }
   }
   const actsPlaced = /* @__PURE__ */ new Map();
@@ -38939,20 +39132,20 @@ function checkApp(model, app, at2) {
   for (const [index, section] of sections.entries()) {
     const drawn = /* @__PURE__ */ new Set([...drawnBy(section), ...section.at === void 0 ? unstaged : []]);
     for (const [order, name] of (section.acts ?? []).entries()) {
-      const path15 = `${at2}.record.sections.${index}.acts.${order}`;
+      const path16 = `${at2}.record.sections.${index}.acts.${order}`;
       const act = (app.acts ?? []).find((one) => one.alias === name);
       const home = act === void 0 ? void 0 : actHome(model, app, act);
-      if (act === void 0) findings.push(error51("model.names-declared", path15, `names "${name}", which is not an act of this app`));
-      else if (act.of !== void 0) findings.push(error51("record.section-acts", path15, `names "${name}", an act of each "${act.of}" row \u2014 it stands on that row, never at a section's foot`));
-      else if ((act.on ?? "record") !== "record") findings.push(error51("record.section-acts", path15, `names "${name}", which runs over the register's rows \u2014 a section's foot holds the acts on this record`));
-      else if (home !== void 0 && home.section !== index) findings.push(error51("record.move-home", path15, misplacedMove(act, sections[home.section]?.title ?? "", home.entry)));
-      else if (home !== void 0 || isCorrectionAct(model, app, act)) findings.push(...checkFootNeeds(model, entity, section, drawn, act, path15));
-      else findings.push(...checkStagedAct(display, section, act, path15), ...checkFootNeeds(model, entity, section, drawn, act, path15));
+      if (act === void 0) findings.push(error51("model.names-declared", path16, `names "${name}", which is not an act of this app`));
+      else if (act.of !== void 0) findings.push(error51("record.section-acts", path16, `names "${name}", an act of each "${act.of}" row \u2014 it stands on that row, never at a section's foot`));
+      else if ((act.on ?? "record") !== "record") findings.push(error51("record.section-acts", path16, `names "${name}", which runs over the register's rows \u2014 a section's foot holds the acts on this record`));
+      else if (home !== void 0 && home.section !== index) findings.push(error51("record.move-home", path16, misplacedMove(act, sections[home.section]?.title ?? "", home.entry)));
+      else if (home !== void 0 || isCorrectionAct(model, app, act)) findings.push(...checkFootNeeds(model, entity, section, drawn, act, path16));
+      else findings.push(...checkStagedAct(display, section, act, path16), ...checkFootNeeds(model, entity, section, drawn, act, path16));
       if (act !== void 0 && hiddenWhenOffered(section.when, act.when)) {
-        findings.push(error51("record.act-hidden", path15, `"${name}" is offered only while "${section.title}" is hidden by its \`when\` \u2014 its button is never drawn; drop the section's \`when\`, or stand the act elsewhere`));
+        findings.push(error51("record.act-hidden", path16, `"${name}" is offered only while "${section.title}" is hidden by its \`when\` \u2014 its button is never drawn; drop the section's \`when\`, or stand the act elsewhere`));
       }
       const first2 = actsPlaced.get(name);
-      if (first2 !== void 0) findings.push(error51("record.placed-once", path15, `places "${name}" a second time on the record (it is already at the foot of ${first2})`));
+      if (first2 !== void 0) findings.push(error51("record.placed-once", path16, `places "${name}" a second time on the record (it is already at the foot of ${first2})`));
       else actsPlaced.set(name, `the section "${section.title}"`);
     }
   }
@@ -38973,27 +39166,27 @@ function checkApp(model, app, at2) {
     );
   }
   for (const [index, check2] of (app.checks ?? []).entries()) {
-    const path15 = `${at2}.checks.${index}`;
-    findings.push(...checkResolve(model, app, check2, `${path15}.resolve`));
+    const path16 = `${at2}.checks.${index}`;
+    findings.push(...checkResolve(model, app, check2, `${path16}.resolve`));
     if (check2.of !== void 0) {
-      findings.push(...checkChildCheck(model, check2, children, acts, path15));
+      findings.push(...checkChildCheck(model, check2, children, acts, path16));
       continue;
     }
-    const field = own(check2.field, `${path15}.field`);
+    const field = own(check2.field, `${path16}.field`);
     const result = field?.type === "formula" ? resolvedFieldType(field, entity, model.entities) : void 0;
     if (field !== void 0 && (result === void 0 || !["boolean", "text"].includes(result))) {
-      findings.push(error51("check.field", `${path15}.field`, `"${check2.field}" is a ${field.type} field \u2014 a check is a yes/no or text formula that stands while true or non-empty`));
+      findings.push(error51("check.field", `${path16}.field`, `"${check2.field}" is a ${field.type} field \u2014 a check is a yes/no or text formula that stands while true or non-empty`));
     }
     const drawn = placed.get(check2.field);
     if (drawn !== void 0) {
-      findings.push(error51("check.not-placed", `${path15}.field`, `"${check2.field}" is a check, whose line under the header says it, and it is also in ${drawn} \u2014 drop it there`));
+      findings.push(error51("check.not-placed", `${path16}.field`, `"${check2.field}" is a check, whose line under the header says it, and it is also in ${drawn} \u2014 drop it there`));
     }
-    findings.push(...checkRestatesMeter(model, entity, check2, path15));
+    findings.push(...checkRestatesMeter(model, entity, check2, path16));
     if (check2.blocks === void 0 || check2.blocks === "all") continue;
     for (const [at22, target] of check2.blocks.entries()) {
       if (target === "edit" || target === "delete") continue;
-      if (!acts.has(target)) findings.push(error51("check.blocks", `${path15}.blocks.${at22}`, `names "${target}", which is not an act of this app, "edit", "delete" or "all"`));
-      else if (acts.get(target) !== void 0) findings.push(error51("check.blocks", `${path15}.blocks.${at22}`, `names "${target}", an act of "${acts.get(target) ?? ""}" rows \u2014 a check of that child refuses it`));
+      if (!acts.has(target)) findings.push(error51("check.blocks", `${path16}.blocks.${at22}`, `names "${target}", which is not an act of this app, "edit", "delete" or "all"`));
+      else if (acts.get(target) !== void 0) findings.push(error51("check.blocks", `${path16}.blocks.${at22}`, `names "${target}", an act of "${acts.get(target) ?? ""}" rows \u2014 a check of that child refuses it`));
     }
   }
   return findings;
@@ -39002,14 +39195,14 @@ function noteChildLists(model, app, at2) {
   const placed = (app.record?.sections ?? []).flatMap(
     (section, index) => (section.blocks ?? []).flatMap((block, order) => isRowsBlock(block) ? [{ block, path: `${at2}.record.sections.${index}.blocks.${order}` }] : [])
   );
-  const planned = placed.flatMap(({ block, path: path15 }) => {
+  const planned = placed.flatMap(({ block, path: path16 }) => {
     const child = entityOf(model, block.rows);
     const axis = child === void 0 ? void 0 : agendaAxis(model, child);
     if (axis === void 0 || "refused" in axis || axis.time === void 0 && axis.part === void 0) return [];
     const within = axis.time === void 0 ? `in a "${axis.part ?? ""}"` : "at an hour";
-    return [note("block.agenda-note", path15, `lists "${block.rows}" rows, each on a day ("${axis.day}") ${within} \u2014 a table reads them as rows; an \`agenda\` draws them by day`)];
+    return [note("block.agenda-note", path16, `lists "${block.rows}" rows, each on a day ("${axis.day}") ${within} \u2014 a table reads them as rows; an \`agenda\` draws them by day`)];
   });
-  const covering = placed.flatMap(({ block, path: path15 }) => {
+  const covering = placed.flatMap(({ block, path: path16 }) => {
     if (!(entityOf(model, block.rows)?.fields.some((field) => field.type === "files") ?? false)) return [];
     if (Array.isArray(block.create)) return [];
     const covers = placed.find((other) => {
@@ -39022,7 +39215,7 @@ function noteChildLists(model, app, at2) {
         return !("refused" in shape) && shape.entity === block.rows;
       });
     });
-    return covers === void 0 ? [] : [note("block.under-note", path15, `"${block.rows}" rows cover "${covers.block.rows}" lines listed in ${covers.path} \u2014 draw them over the lines they cover: \`"under"\` on that block`)];
+    return covers === void 0 ? [] : [note("block.under-note", path16, `"${block.rows}" rows cover "${covers.block.rows}" lines listed in ${covers.path} \u2014 draw them over the lines they cover: \`"under"\` on that block`)];
   });
   return [...planned, ...covering];
 }
@@ -39036,10 +39229,10 @@ function checkDocumentsListed(model, entity, sections, at2) {
       return shape === void 0 || "refused" in shape ? [] : [[shape.entity, block.title ?? child?.label ?? block.rows]];
     })
   );
-  return placed.flatMap(({ block, path: path15 }) => {
+  return placed.flatMap(({ block, path: path16 }) => {
     if (!isRowsBlock(block)) return [];
     const lines = over.get(block.rows);
-    return lines === void 0 ? [] : [error51("block.under-once", path15, `lists "${block.rows}" rows, which stand over their lines in "${lines}" (\`under\`) \u2014 a second list says them twice; drop it`)];
+    return lines === void 0 ? [] : [error51("block.under-once", path16, `lists "${block.rows}" rows, which stand over their lines in "${lines}" (\`under\`) \u2014 a second list says them twice; drop it`)];
   });
 }
 function hiddenWhenOffered(shown, offered) {
@@ -39050,20 +39243,20 @@ function hiddenWhenOffered(shown, offered) {
     return !held.some((option) => options.includes(option));
   });
 }
-function checkFilter(model, entity, stated, path15, around) {
+function checkFilter(model, entity, stated, path16, around) {
   const name = filterField(stated);
   const filter2 = fieldOf(entity, name);
-  if (filter2 === void 0) return [error51("model.names-declared", typeof stated === "string" ? path15 : `${path15}.field`, `names "${name}", which is not a field of "${entity.alias}"`)];
+  if (filter2 === void 0) return [error51("model.names-declared", typeof stated === "string" ? path16 : `${path16}.field`, `names "${name}", which is not a field of "${entity.alias}"`)];
   const type = resolvedFieldType(filter2, entity, model.entities) ?? filter2.type;
-  if (name === around.chips) return [error51("register.filter", path15, `"${name}" is the status, already the register's chips \u2014 drop it`)];
+  if (name === around.chips) return [error51("register.filter", path16, `"${name}" is the status, already the register's chips \u2014 drop it`)];
   if (!FILTER_TYPES.has(type)) {
     const read = filter2.type === "lookup" ? readField(model, entity, filter2) : void 0;
     const kind = read === void 0 ? `a ${filter2.type} field` : `a lookup of a ${read.field.type} field`;
-    return [error51("register.filter", path15, `"${name}" is ${kind} \u2014 ${around.owner} narrows by a select, a member, a link, a date, a yes/no or a number`)];
+    return [error51("register.filter", path16, `"${name}" is ${kind} \u2014 ${around.owner} narrows by a select, a member, a link, a date, a yes/no or a number`)];
   }
-  if (typeof stated !== "string") return checkTiers(model, entity, filter2, type, `${path15}.tiers`);
+  if (typeof stated !== "string") return checkTiers(model, entity, filter2, type, `${path16}.tiers`);
   if (around.splits.has(name) && type !== "select_member") {
-    return [note("register.filter-split", path15, `"${name}" is also what a picture above the rows splits them by \u2014 a press on its part narrows by it`)];
+    return [note("register.filter-split", path16, `"${name}" is also what a picture above the rows splits them by \u2014 a press on its part narrows by it`)];
   }
   return [];
 }
@@ -39071,36 +39264,36 @@ function checkOrder(entity, sort, base) {
   const findings = [];
   const sorted = /* @__PURE__ */ new Set();
   for (const [index, key] of registerSortKeys(sort).entries()) {
-    const path15 = `${base}${Array.isArray(sort) ? `.${index}` : ""}.field`;
+    const path16 = `${base}${Array.isArray(sort) ? `.${index}` : ""}.field`;
     const field = fieldOf(entity, key.field);
-    if (field === void 0) findings.push(error51("model.names-declared", path15, `names "${key.field}", which is not a field of "${entity.alias}"`));
-    else if (!isSortableFieldType(field.type)) findings.push(error51("register.sort", path15, `"${key.field}" is a ${field.type} field, which holds no order`));
-    if (sorted.has(key.field)) findings.push(error51("register.sort", path15, `"${key.field}" is already a key of this order \u2014 a field orders the rows once`));
+    if (field === void 0) findings.push(error51("model.names-declared", path16, `names "${key.field}", which is not a field of "${entity.alias}"`));
+    else if (!isSortableFieldType(field.type)) findings.push(error51("register.sort", path16, `"${key.field}" is a ${field.type} field, which holds no order`));
+    if (sorted.has(key.field)) findings.push(error51("register.sort", path16, `"${key.field}" is already a key of this order \u2014 a field orders the rows once`));
     sorted.add(key.field);
   }
   return findings;
 }
-function checkSearch(model, entity, name, path15) {
+function checkSearch(model, entity, name, path16) {
   const field = fieldOf(entity, name);
-  if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
+  if (field === void 0) return [error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`)];
   const type = resolvedFieldType(field, entity, model.entities) ?? field.type;
-  return SEARCH_TYPES.has(type) ? [] : [error51("register.search", path15, `"${name}" is a ${field.type} field \u2014 a search matches words: text, a code, or a link by its row's title`)];
+  return SEARCH_TYPES.has(type) ? [] : [error51("register.search", path16, `"${name}" is a ${field.type} field \u2014 a search matches words: text, a code, or a link by its row's title`)];
 }
-function checkGroup(model, entity, display, name, path15, around) {
+function checkGroup(model, entity, display, name, path16, around) {
   const field = fieldOf(entity, name);
-  if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
+  if (field === void 0) return [error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`)];
   const type = resolvedFieldType(field, entity, model.entities) ?? field.type;
   const read = readField(model, entity, field);
   const held = read?.field ?? field;
   const several = read?.several === true || (held.type === "select" || held.type === "select_member") && held.multi === true;
   const many = held.type === "select_record_link" && held.cardinality !== "one";
   if (several || many || !GROUP_TYPES.has(type)) {
-    return [error51("register.group", path15, `"${name}" is a ${several || many ? `${field.type} field holding several values` : `${field.type} field`} \u2014 a row stands in one group: a single select, a one-row link, one member, a date, a yes/no or text`)];
+    return [error51("register.group", path16, `"${name}" is a ${several || many ? `${field.type} field holding several values` : `${field.type} field`} \u2014 a row stands in one group: a single select, a one-row link, one member, a date, a yes/no or text`)];
   }
-  if (name === around.chips) return [error51("register.group", path15, `"${name}" is the status, whose chips already split the rows \u2014 group by another field`)];
-  if (around.layout !== "table" && around.layout !== "gantt") return [error51("register.group", path15, `groups a ${around.layout} register \u2014 rows are grouped in a table, and a gantt's lanes`)];
+  if (name === around.chips) return [error51("register.group", path16, `"${name}" is the status, whose chips already split the rows \u2014 group by another field`)];
+  if (around.layout !== "table" && around.layout !== "gantt") return [error51("register.group", path16, `groups a ${around.layout} register \u2014 rows are grouped in a table, and a gantt's lanes`)];
   if (name === display.title && (display.subtitle ?? []).length === 0) {
-    return [error51("register.group", path15, `groups by "${name}", the row's title, so each row leads with its first subtitle \u2014 state \`records.${entity.alias}.subtitle\` (the person, the party)`)];
+    return [error51("register.group", path16, `groups by "${name}", the row's title, so each row leads with its first subtitle \u2014 state \`records.${entity.alias}.subtitle\` (the person, the party)`)];
   }
   return [];
 }
@@ -39122,16 +39315,16 @@ function likelySection(model, app, act, drawn) {
   const best = Math.max(0, ...scores);
   return best === 0 ? void 0 : scores.indexOf(best);
 }
-function checkResolve(model, app, check2, path15) {
+function checkResolve(model, app, check2, path16) {
   if (check2.resolve === void 0) return [];
   const act = (app.acts ?? []).find((one) => one.alias === check2.resolve);
-  if (act === void 0) return [error51("model.names-declared", path15, `names "${check2.resolve}", which is not an act of this app`)];
+  if (act === void 0) return [error51("model.names-declared", path16, `names "${check2.resolve}", which is not an act of this app`)];
   if (act.of !== check2.of) {
-    return [error51("check.resolve", path15, `"${act.alias}" works on "${act.of ?? app.entity}" rows and the check stands on "${check2.of ?? app.entity}" rows \u2014 its way out acts on the rows it stands on`)];
+    return [error51("check.resolve", path16, `"${act.alias}" works on "${act.of ?? app.entity}" rows and the check stands on "${check2.of ?? app.entity}" rows \u2014 its way out acts on the rows it stands on`)];
   }
-  if ((act.on ?? "record") !== "record") return [error51("check.resolve", path15, `"${act.alias}" runs over the register's rows \u2014 a check's way out acts on the one row it stands on`)];
-  if (checkRefuses(check2, act.alias)) return [error51("check.resolve", path15, `"${act.alias}" is an act this check refuses \u2014 its way out is one it lets through`)];
-  if (isCorrectionAct(model, app, act)) return [error51("check.resolve", path15, `"${act.alias}" corrects what is done and waits in a \u22EF, where the check's link cannot point \u2014 its way out is an act drawn as a button`)];
+  if ((act.on ?? "record") !== "record") return [error51("check.resolve", path16, `"${act.alias}" runs over the register's rows \u2014 a check's way out acts on the one row it stands on`)];
+  if (checkRefuses(check2, act.alias)) return [error51("check.resolve", path16, `"${act.alias}" is an act this check refuses \u2014 its way out is one it lets through`)];
+  if (isCorrectionAct(model, app, act)) return [error51("check.resolve", path16, `"${act.alias}" corrects what is done and waits in a \u22EF, where the check's link cannot point \u2014 its way out is an act drawn as a button`)];
   return [];
 }
 function checkPages(door, sections, at2) {
@@ -39139,16 +39332,16 @@ function checkPages(door, sections, at2) {
   const addressed = /* @__PURE__ */ new Map();
   for (const [index, section] of sections.entries()) {
     if (section.page !== true) continue;
-    const path15 = `${at2}.sections.${index}.page`;
+    const path16 = `${at2}.sections.${index}.page`;
     if (door === "drawer" || door === "beside") {
       const has = door === "drawer" ? "a drawer" : "a record beside the list";
-      findings.push(error51("record.page", path15, `"${section.title}" is a page of its own, and ${has} has no pages; drop \`page\`, or make the door a page`));
+      findings.push(error51("record.page", path16, `"${section.title}" is a page of its own, and ${has} has no pages; drop \`page\`, or make the door a page`));
     }
-    if (section.at !== void 0) findings.push(error51("record.page", path15, `"${section.title}" is a step of the record's path, read in its scroll \u2014 drop \`page\`, or \`at\``));
+    if (section.at !== void 0) findings.push(error51("record.page", path16, `"${section.title}" is a step of the record's path, read in its scroll \u2014 drop \`page\`, or \`at\``));
     const segment = pageSegment(section.title);
     const first2 = addressed.get(segment);
-    if (segment === "") findings.push(error51("record.page", path15, `"${section.title}" holds no letter or digit to name its page's address \u2014 retitle it`));
-    else if (first2 !== void 0) findings.push(error51("record.page", path15, `"${section.title}" and "${first2}" make one page address, "${segment}" \u2014 retitle one`));
+    if (segment === "") findings.push(error51("record.page", path16, `"${section.title}" holds no letter or digit to name its page's address \u2014 retitle it`));
+    else if (first2 !== void 0) findings.push(error51("record.page", path16, `"${section.title}" and "${first2}" make one page address, "${segment}" \u2014 retitle one`));
     else addressed.set(segment, section.title);
   }
   if (sections.length > 0 && sections.every((section) => section.page === true)) {
@@ -39175,20 +39368,20 @@ function checkRecordLayout(app, at2) {
   }
   return findings;
 }
-function checkSectionAt(entity, display, at2, path15) {
+function checkSectionAt(entity, display, at2, path16) {
   if (at2 === void 0) return [];
   const status = display.status;
-  if (status === void 0) return [error51("record.at", path15, `stages the section by the status, and "${entity.alias}" has none \u2014 state its \`records\` status, or drop \`at\``)];
+  if (status === void 0) return [error51("record.at", path16, `stages the section by the status, and "${entity.alias}" has none \u2014 state its \`records\` status, or drop \`at\``)];
   const stages = milestonesOf(display);
   if (stages !== void 0) {
     const named = new Set(stages.map((stage) => stage.field));
-    return at2.flatMap((name) => named.has(name) ? [] : [error51("record.at", path15, `names "${name}", which is not one of "${entity.alias}"'s milestones (${[...named].join(", ")})`)]);
+    return at2.flatMap((name) => named.has(name) ? [] : [error51("record.at", path16, `names "${name}", which is not one of "${entity.alias}"'s milestones (${[...named].join(", ")})`)]);
   }
   const field = status.field === void 0 ? void 0 : fieldOf(entity, status.field);
   const options = new Set(field?.type === "select" ? (field.options ?? []).map((option) => option.alias) : []);
-  return at2.flatMap((name) => options.has(name) ? [] : [error51("record.at", path15, `names "${name}", which is not an option of the status "${status.field ?? ""}"`)]);
+  return at2.flatMap((name) => options.has(name) ? [] : [error51("record.at", path16, `names "${name}", which is not an option of the status "${status.field ?? ""}"`)]);
 }
-function checkStagedAct(display, section, act, path15) {
+function checkStagedAct(display, section, act, path16) {
   const at2 = section.at;
   const status = display.status;
   if (at2 === void 0 || status === void 0) return [];
@@ -39201,16 +39394,16 @@ function checkStagedAct(display, section, act, path15) {
       return before !== void 0 && at2.includes(before);
     });
     if (inStep) return [];
-    return [error51("record.act-staged", path15, `"${act.alias}" stamps no step after ${at2.map((one) => `"${one}"`).join(" or ")}, so it is offered while "${section.title}" is not the work \u2014 ${elsewhere}`)];
+    return [error51("record.act-staged", path16, `"${act.alias}" stamps no step after ${at2.map((one) => `"${one}"`).join(" or ")}, so it is offered while "${section.title}" is not the work \u2014 ${elsewhere}`)];
   }
   const field = status.field;
   if (field === void 0) return [];
   const held = heldOptions(act.when, field);
   if (held === void 0) {
-    return [error51("record.act-staged", path15, `"${act.alias}" is offered whatever "${field}" holds, and "${section.title}" is the work only while it is ${at2.join(" or ")} \u2014 narrow its \`when\` to that, or ${elsewhere}`)];
+    return [error51("record.act-staged", path16, `"${act.alias}" is offered whatever "${field}" holds, and "${section.title}" is the work only while it is ${at2.join(" or ")} \u2014 narrow its \`when\` to that, or ${elsewhere}`)];
   }
   const outside = held.filter((option) => !at2.includes(option));
-  return outside.length === 0 ? [] : [error51("record.act-staged", path15, `"${act.alias}" is offered while "${field}" is ${outside.join(" or ")}, when "${section.title}" is not the work \u2014 ${elsewhere}`)];
+  return outside.length === 0 ? [] : [error51("record.act-staged", path16, `"${act.alias}" is offered while "${field}" is ${outside.join(" or ")}, when "${section.title}" is not the work \u2014 ${elsewhere}`)];
 }
 function blockIdentity(block) {
   if (isRowsBlock(block)) {
@@ -39224,20 +39417,20 @@ function blockIdentity(block) {
 }
 function checkWhere(child, block, at2) {
   return Object.entries(block.where ?? {}).flatMap(([name, options]) => {
-    const path15 = `${at2}.where.${name}`;
+    const path16 = `${at2}.where.${name}`;
     const field = fieldOf(child, name);
-    if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${child.alias}"`)];
+    if (field === void 0) return [error51("model.names-declared", path16, `names "${name}", which is not a field of "${child.alias}"`)];
     if (field.type !== "select" || field.multi === true) {
-      return [error51("block.where", path15, `"${name}" is a ${field.type === "select" ? "multi-select" : `${field.type} field`} \u2014 a block narrows its rows by a single select, each row holding one option`)];
+      return [error51("block.where", path16, `"${name}" is a ${field.type === "select" ? "multi-select" : `${field.type} field`} \u2014 a block narrows its rows by a single select, each row holding one option`)];
     }
     if (field.required !== true) {
-      return [error51("block.where", path15, `"${name}" is optional on "${child.alias}" \u2014 a row holding none would stand in no block while every unnarrowed total counts it; make it required`)];
+      return [error51("block.where", path16, `"${name}" is optional on "${child.alias}" \u2014 a row holding none would stand in no block while every unnarrowed total counts it; make it required`)];
     }
     const held = new Set((field.options ?? []).map((option) => option.alias));
     const stray = options.filter((option) => !held.has(option));
     return [
-      ...stray.length === 0 ? [] : [error51("block.where", path15, `names ${stray.map((one) => `"${one}"`).join(", ")}, which "${name}" has no option of`)],
-      ...options.length === 1 && (block.columns ?? []).includes(name) ? [error51("block.where", path15, `holds every row at "${options[0] ?? ""}", so its column says one thing on every row \u2014 drop the column`)] : []
+      ...stray.length === 0 ? [] : [error51("block.where", path16, `names ${stray.map((one) => `"${one}"`).join(", ")}, which "${name}" has no option of`)],
+      ...options.length === 1 && (block.columns ?? []).includes(name) ? [error51("block.where", path16, `holds every row at "${options[0] ?? ""}", so its column says one thing on every row \u2014 drop the column`)] : []
     ];
   });
 }
@@ -39248,19 +39441,19 @@ function checkChildColumns(model, child, names, back, expecting, at2) {
   const bounds = meterBounds(display, names);
   const columns = /* @__PURE__ */ new Map();
   for (const [index, name] of names.entries()) {
-    const path15 = `${at2}.columns.${index}`;
+    const path16 = `${at2}.columns.${index}`;
     if (fieldOf(child, name) === void 0) {
-      findings.push(error51("model.names-declared", path15, `names "${name}", which is not a field of "${child.alias}"`));
+      findings.push(error51("model.names-declared", path16, `names "${name}", which is not a field of "${child.alias}"`));
       continue;
     }
     const part = rowParts.get(name);
     const inPlace = expecting && name === display?.figure && expectedColumns(model, child, [name]).length > 0;
-    if (part !== void 0 && !inPlace) findings.push(error51("block.column-drawn", path15, `"${name}" is already drawn by the "${child.alias}" row itself, as ${part} \u2014 drop the column`));
+    if (part !== void 0 && !inPlace) findings.push(error51("block.column-drawn", path16, `"${name}" is already drawn by the "${child.alias}" row itself, as ${part} \u2014 drop the column`));
     const meter = bounds.get(name);
-    if (meter !== void 0) findings.push(error51("block.column-drawn", path15, `"${name}" is the bound of the meter "${meter}" on the same row, which states it \u2014 drop the column`));
-    if (name === back) findings.push(error51("block.column-drawn", path15, `"${name}" is the link back to this record, the same on every row of the block \u2014 drop the column`));
+    if (meter !== void 0) findings.push(error51("block.column-drawn", path16, `"${name}" is the bound of the meter "${meter}" on the same row, which states it \u2014 drop the column`));
+    if (name === back) findings.push(error51("block.column-drawn", path16, `"${name}" is the link back to this record, the same on every row of the block \u2014 drop the column`));
     const first2 = columns.get(name);
-    if (first2 !== void 0) findings.push(error51("block.column-drawn", path15, `"${name}" is already column ${first2} \u2014 a field is one column`));
+    if (first2 !== void 0) findings.push(error51("block.column-drawn", path16, `"${name}" is already column ${first2} \u2014 a field is one column`));
     else columns.set(name, index);
   }
   return findings;
@@ -39278,9 +39471,9 @@ function checkChildCreate(model, child, create, via, at2) {
   }
   return findings;
 }
-function checkUnder(model, entity, child, block, path15) {
+function checkUnder(model, entity, child, block, path16) {
   if (block.under === void 0) return [];
-  const at2 = `${path15}.under`;
+  const at2 = `${path16}.under`;
   const shape = documentUnder(model, entity.alias, child, block.under);
   if ("refused" in shape) return [error51("block.under", at2, shape.refused)];
   const findings = [];
@@ -39292,11 +39485,11 @@ function checkUnder(model, entity, child, block, path15) {
   for (const [index, name] of (block.columns ?? []).entries()) {
     const column = fieldOf(child, name);
     if (column?.type === "text" && column.format === "markdown") {
-      findings.push(error51("block.under", `${path15}.columns.${index}`, `"${name}" is long text, drawn whole on a card per row, and lines under a document are a table of short facts \u2014 drop the column or \`under\``));
+      findings.push(error51("block.under", `${path16}.columns.${index}`, `"${name}" is long text, drawn whole on a card per row, and lines under a document are a table of short facts \u2014 drop the column or \`under\``));
       continue;
     }
     if (name !== block.under && !(column?.type === "lookup" && column.source_field_alias === block.under)) continue;
-    findings.push(error51("block.under", `${path15}.columns.${index}`, `"${name}" reads the "${shape.entity}" each line stands under, which its heading already reads \u2014 drop the column`));
+    findings.push(error51("block.under", `${path16}.columns.${index}`, `"${name}" reads the "${shape.entity}" each line stands under, which its heading already reads \u2014 drop the column`));
   }
   return findings;
 }
@@ -39314,22 +39507,22 @@ function checkRoster(model, entity, app, at2) {
   const layout = app.register?.layout;
   const roster = app.register?.roster;
   const expect = app.register?.expect;
-  const path15 = `${at2}.register.roster`;
+  const path16 = `${at2}.register.roster`;
   if (roster === void 0) {
     return [
-      ...layout === "roster" ? [error51("register.roster", path15, `a roster fills each day with the rows of another entity \u2014 name it in \`roster\` (a shift, a trip, an attendance)`)] : [],
+      ...layout === "roster" ? [error51("register.roster", path16, `a roster fills each day with the rows of another entity \u2014 name it in \`roster\` (a shift, a trip, an attendance)`)] : [],
       ...expect === void 0 ? [] : [error51("register.roster", `${at2}.register.expect`, "names the columns of a roster's rows, and the register states no `roster` \u2014 name the rows first")],
       ...app.register?.of === void 0 || expect !== void 0 ? [] : [error51("register.roster", `${at2}.register.of`, "narrows a roster's expected columns, and the register expects none \u2014 state `expect` first")]
     ];
   }
-  if (layout !== "roster") return [error51("register.roster", path15, `names the rows a roster's days hold, and the register is ${layout === void 0 ? "a table" : `\`${layout}\``} \u2014 state \`layout: "roster"\`, or drop it`)];
+  if (layout !== "roster") return [error51("register.roster", path16, `names the rows a roster's days hold, and the register is ${layout === void 0 ? "a table" : `\`${layout}\``} \u2014 state \`layout: "roster"\`, or drop it`)];
   if ((app.register?.columns ?? []).length > 0) return [error51("register.roster", `${at2}.register.columns`, `a roster's width is its days, so it draws no columns \u2014 drop \`columns\`; a fact of each row stands in its record`)];
   if (app.register?.of !== void 0 && expect === void 0) return [error51("register.roster", `${at2}.register.of`, "narrows a roster's expected columns, and the register expects none \u2014 state `expect` first")];
   const shape = rosterShape(model, entity.alias, roster, expect === void 0);
-  if ("refused" in shape) return [error51("register.roster", path15, shape.refused)];
+  if ("refused" in shape) return [error51("register.roster", path16, shape.refused)];
   const child = entityOf(model, shape.entity);
   if (child === void 0) return [];
-  return [...checkRosterColumns(entity, child, app, at2), ...app.reads === "shared" ? [] : unruledChild(model, entity, child, shape.via, path15)];
+  return [...checkRosterColumns(entity, child, app, at2), ...app.reads === "shared" ? [] : unruledChild(model, entity, child, shape.via, path16)];
 }
 function checkRosterColumns(entity, child, app, at2) {
   const expect = app.register?.expect;
@@ -39354,16 +39547,16 @@ function checkLanes(model, entity, app, at2) {
   const layout = app.register?.layout;
   const lanes = app.register?.lanes;
   const loads = app.register?.loads;
-  const path15 = `${at2}.register.lanes`;
+  const path16 = `${at2}.register.lanes`;
   if (lanes === void 0) {
     return [
-      ...layout === "lanes" ? [error51("register.lanes", path15, "a lanes board stands each row in the lane its one-link names \u2014 name that link in `lanes` (a chair, a machine, a room)")] : [],
+      ...layout === "lanes" ? [error51("register.lanes", path16, "a lanes board stands each row in the lane its one-link names \u2014 name that link in `lanes` (a chair, a machine, a room)")] : [],
       ...loads === void 0 ? [] : [error51("register.loads", `${at2}.register.loads`, "names what a lane carries, and the register has no `lanes` \u2014 state the one-link its rows stand in, or drop it")]
     ];
   }
-  if (layout !== "lanes") return [error51("register.lanes", path15, `names the lanes a board stands its rows in, and the register is ${layout === void 0 ? "a table" : `\`${layout}\``} \u2014 state \`layout: "lanes"\`, or drop it`)];
+  if (layout !== "lanes") return [error51("register.lanes", path16, `names the lanes a board stands its rows in, and the register is ${layout === void 0 ? "a table" : `\`${layout}\``} \u2014 state \`layout: "lanes"\`, or drop it`)];
   const shape = lanesShape(model, entity.alias, lanes);
-  if ("refused" in shape) return [error51("register.lanes", path15, shape.refused)];
+  if ("refused" in shape) return [error51("register.lanes", path16, shape.refused)];
   if (loads === void 0) return [];
   const count2 = Object.keys(loads).length;
   if (count2 === 0 || count2 > LANE_LOADS) return [error51("register.loads", `${at2}.register.loads`, `names ${count2} loads \u2014 a lane reads one or ${LANE_LOADS}, the ones it runs out of first (its weight, its volume)`)];
@@ -39372,22 +39565,22 @@ function checkLanes(model, entity, app, at2) {
 function checkGantt(model, entity, app, at2) {
   const layout = app.register?.layout;
   const gantt = app.register?.gantt;
-  const path15 = `${at2}.register.gantt`;
+  const path16 = `${at2}.register.gantt`;
   if (gantt === void 0) {
-    return layout === "gantt" ? [error51("register.gantt", path15, "a gantt draws each row as a bar between two dates \u2014 name them in `gantt` (`start`, and `end` where the entity states no `due`)")] : [];
+    return layout === "gantt" ? [error51("register.gantt", path16, "a gantt draws each row as a bar between two dates \u2014 name them in `gantt` (`start`, and `end` where the entity states no `due`)")] : [];
   }
-  if (layout !== "gantt") return [error51("register.gantt", path15, `names the dates a gantt's bars run between, and the register is ${layout === void 0 ? "a table" : `\`${layout}\``} \u2014 state \`layout: "gantt"\`, or drop it`)];
+  if (layout !== "gantt") return [error51("register.gantt", path16, `names the dates a gantt's bars run between, and the register is ${layout === void 0 ? "a table" : `\`${layout}\``} \u2014 state \`layout: "gantt"\`, or drop it`)];
   const shape = ganttShape(model, entity.alias, gantt);
-  return "refused" in shape ? shape.refused.map((one) => error51("register.gantt", one.at === "" ? path15 : `${path15}.${one.at}`, one.reason)) : [];
+  return "refused" in shape ? shape.refused.map((one) => error51("register.gantt", one.at === "" ? path16 : `${path16}.${one.at}`, one.reason)) : [];
 }
-function checkTiers(model, entity, field, type, path15) {
-  if (type !== "number") return [error51("register.tiers", path15, `"${field.alias}" is a ${field.type} field \u2014 tiers band a number; name it bare`)];
+function checkTiers(model, entity, field, type, path16) {
+  if (type !== "number") return [error51("register.tiers", path16, `"${field.alias}" is a ${field.type} field \u2014 tiers band a number; name it bare`)];
   const select = contractFigureSelect(field, entity, model.entities);
   if (select === void 0) return [];
   return [
     error51(
       "register.tiers",
-      path15,
+      path16,
       `"${field.alias}" is read in each row's own ${select.vocabulary} ("${select.alias}"), so a breakpoint is a different amount on each row \u2014 name it bare: its range is typed in the ${select.vocabulary} the reader picks`
     )
   ];
@@ -39397,29 +39590,29 @@ function checkReports(model, entity, app, status, at2) {
   if (reports === void 0 || reports === true) return [];
   const named = /* @__PURE__ */ new Map();
   return reports.flatMap((report, index) => {
-    const path15 = `${at2}.register.export.${index}`;
+    const path16 = `${at2}.register.export.${index}`;
     const first2 = named.get(report.label);
     if (first2 === void 0) named.set(report.label, index);
-    const folder = Object.keys(report.where ?? {}).includes(app.scope ?? "") ? [error51("app.scope", `${path15}.where.${app.scope}`, `"${app.scope}" is the folder the app is inside \u2014 it already narrows every read; drop it here`)] : [];
+    const folder = Object.keys(report.where ?? {}).includes(app.scope ?? "") ? [error51("app.scope", `${path16}.where.${app.scope}`, `"${app.scope}" is the folder the app is inside \u2014 it already narrows every read; drop it here`)] : [];
     return [
-      ...first2 === void 0 ? [] : [error51("register.export-report", `${path15}.label`, `names "${report.label}", as report ${first2} does \u2014 a menu entry is one report`)],
-      ...report.template === void 0 ? [] : checkExportTemplate(model, entity.alias, (app.register?.tabs ?? []).map((tab) => tab.tab), report.template, `${path15}.template`),
-      ...checkNarrowing(model.entities, entity, report.where, `${path15}.where`),
+      ...first2 === void 0 ? [] : [error51("register.export-report", `${path16}.label`, `names "${report.label}", as report ${first2} does \u2014 a menu entry is one report`)],
+      ...report.template === void 0 ? [] : checkExportTemplate(model, entity.alias, (app.register?.tabs ?? []).map((tab) => tab.tab), report.template, `${path16}.template`),
+      ...checkNarrowing(model.entities, entity, report.where, `${path16}.where`),
       ...folder,
-      ...report.per === void 0 ? [] : checkPer(model, entity, report.per, { status, scope: app.scope, fixed: report.where?.[report.per] !== void 0 }, `${path15}.per`),
-      ...checkReportBooks(model, app, report, path15)
+      ...report.per === void 0 ? [] : checkPer(model, entity, report.per, { status, scope: app.scope, fixed: report.where?.[report.per] !== void 0 }, `${path16}.per`),
+      ...checkReportBooks(model, app, report, path16)
     ];
   });
 }
-function checkPer(model, entity, name, around, path15) {
+function checkPer(model, entity, name, around, path16) {
   const field = fieldOf(entity, name);
-  if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`)];
+  if (field === void 0) return [error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`)];
   const type = resolvedFieldType(field, entity, model.entities) ?? field.type;
-  if (name === around.status) return [error51("register.export-report", path15, `picks a value of "${name}", the status \u2014 its chips pick one; name it in \`where\``)];
-  if (name === around.scope) return [error51("app.scope", path15, `"${name}" is the folder the app is inside \u2014 it already narrows every read; drop it here`)];
-  if (type !== "select" && type !== "select_member" && type !== "select_record_link") return [error51("register.export-report", path15, `picks a value of "${name}", a ${type} field \u2014 one value is an option, a person or a linked row`)];
-  if (field.type === "select_record_link" && field.cardinality === "many") return [error51("register.export-report", path15, `picks a value of "${name}", a link holding several rows \u2014 a file of one value names one row per row of the report`)];
-  return around.fixed ? [error51("register.export-report", path15, `picks a value of "${name}", which its \`where\` already fixes \u2014 drop one`)] : [];
+  if (name === around.status) return [error51("register.export-report", path16, `picks a value of "${name}", the status \u2014 its chips pick one; name it in \`where\``)];
+  if (name === around.scope) return [error51("app.scope", path16, `"${name}" is the folder the app is inside \u2014 it already narrows every read; drop it here`)];
+  if (type !== "select" && type !== "select_member" && type !== "select_record_link") return [error51("register.export-report", path16, `picks a value of "${name}", a ${type} field \u2014 one value is an option, a person or a linked row`)];
+  if (field.type === "select_record_link" && field.cardinality === "many") return [error51("register.export-report", path16, `picks a value of "${name}", a link holding several rows \u2014 a file of one value names one row per row of the report`)];
+  return around.fixed ? [error51("register.export-report", path16, `picks a value of "${name}", which its \`where\` already fixes \u2014 drop one`)] : [];
 }
 function checkRegisterNarrowing(model, entity, app, at2) {
   const where = app.register?.where;
@@ -39427,9 +39620,9 @@ function checkRegisterNarrowing(model, entity, app, at2) {
   const filters = (app.register?.filters ?? []).map(filterField);
   const findings = [...checkWhen(model.entities, entity, where, `${at2}.register.where`, "offer"), ...checkNarrowing(model.entities, entity, opens, `${at2}.register.opens`)];
   for (const [name, kept] of Object.entries(where ?? {})) {
-    const path15 = `${at2}.register.where.${name}`;
-    if (filters.includes(name)) findings.push(error51("register.where-opens", path15, `"${name}" is fixed by \`where\`, so a chip on it narrows nothing the reader can change \u2014 drop it from \`filters\``));
-    if (name === app.scope) findings.push(error51("app.scope", path15, `"${name}" is the folder the app is inside \u2014 it already narrows every read; drop it here`));
+    const path16 = `${at2}.register.where.${name}`;
+    if (filters.includes(name)) findings.push(error51("register.where-opens", path16, `"${name}" is fixed by \`where\`, so a chip on it narrows nothing the reader can change \u2014 drop it from \`filters\``));
+    if (name === app.scope) findings.push(error51("app.scope", path16, `"${name}" is the folder the app is inside \u2014 it already narrows every read; drop it here`));
     const opened = opens?.[name];
     if (opened === void 0) continue;
     const stray = Array.isArray(opened) && Array.isArray(kept) ? opened.filter((option) => !kept.includes(option)) : void 0;
@@ -39457,10 +39650,10 @@ function checkFiltersShown(model, entity, app, at2) {
     ...(register.filters ?? []).map((stated, index) => ({ name: filterField(stated), path: `${at2}.register.filters.${index}`, says: unshown })),
     ...Object.entries(register.opens ?? {}).flatMap(([name, held]) => held === NARROW_ME ? [] : [{ name, path: `${at2}.register.opens.${name}`, says: unshown }]),
     ...(register.readings ?? []).flatMap((reading, index) => {
-      const path15 = `${at2}.register.readings.${index}`;
-      if (readingEntity(reading) !== entity.alias || checkReading(model, reading, path15).length > 0) return [];
+      const path16 = `${at2}.register.readings.${index}`;
+      if (readingEntity(reading) !== entity.alias || checkReading(model, reading, path16).length > 0) return [];
       const part = "metric" in reading ? "figure" : "pivot" in reading ? "cell" : "part";
-      return pressFields(modelPressed(reading)).map((name) => ({ name, path: path15, says: pressed(part) }));
+      return pressFields(modelPressed(reading)).map((name) => ({ name, path: path16, says: pressed(part) }));
     })
   ];
   return unshownFilters(model, entity, narrowed, shown, fixed);
@@ -39480,11 +39673,11 @@ function rowShows(model, entity, display, columns, more) {
   ]);
 }
 function unshownFilters(model, entity, narrowed, shown, fixed) {
-  return narrowed.flatMap(({ name, path: path15, says }) => {
+  return narrowed.flatMap(({ name, path: path16, says }) => {
     const field = fieldOf(entity, name);
     const type = field === void 0 ? void 0 : resolvedFieldType(field, entity, model.entities) ?? field.type;
     if (shown.has(name) || fixed.has(name) || type === void 0 || !FILTER_TYPES.has(type)) return [];
-    return [error51("register.filter-unshown", path15, says(name))];
+    return [error51("register.filter-unshown", path16, says(name))];
   });
 }
 function checkBlock(model, entity, block, at2, place, scoped, checks) {
@@ -39555,11 +39748,11 @@ function checkBlock(model, entity, block, at2, place, scoped, checks) {
   }
   if ("files" in block) {
     for (const [index, name] of block.files.entries()) {
-      const path15 = `${at2}.files.${index}`;
+      const path16 = `${at2}.files.${index}`;
       const field = fieldOf(entity, name);
-      if (field === void 0) findings.push(error51("model.names-declared", path15, `names "${name}", which is not a field of "${entity.alias}"`));
-      else if (field.type !== "files") findings.push(error51("block.field-kind", path15, `"${name}" is a ${field.type} field \u2014 a files block holds files fields`));
-      else place(name, FILES_BLOCK, path15);
+      if (field === void 0) findings.push(error51("model.names-declared", path16, `names "${name}", which is not a field of "${entity.alias}"`));
+      else if (field.type !== "files") findings.push(error51("block.field-kind", path16, `"${name}" is a ${field.type} field \u2014 a files block holds files fields`));
+      else place(name, FILES_BLOCK, path16);
     }
     return findings;
   }
@@ -39581,19 +39774,19 @@ function checkBlockNarrowing(model, child, block, back, checks, at2) {
   }
   const chips = isTaskBlock(model, block) ? display.status?.field : void 0;
   const fixed = /* @__PURE__ */ new Set([...back === void 0 ? [] : [back], ...Object.entries(block.where ?? {}).flatMap(([field, options]) => options.length === 1 ? [field] : [])]);
-  const same = (name, path15) => fixed.has(name) ? [error51("block.narrow", path15, `"${name}" is ${name === back ? "the link back to this record" : "held at one option by the block's `where`"}, the same on every row it narrows \u2014 drop it here`)] : [];
+  const same = (name, path16) => fixed.has(name) ? [error51("block.narrow", path16, `"${name}" is ${name === back ? "the link back to this record" : "held at one option by the block's `where`"}, the same on every row it narrows \u2014 drop it here`)] : [];
   for (const [index, stated] of filters.entries()) {
-    const path15 = `${at2}.filters.${index}`;
-    findings.push(...checkFilter(model, child, stated, path15, { owner: "a rows block", chips, splits: /* @__PURE__ */ new Set() }), ...same(filterField(stated), path15));
+    const path16 = `${at2}.filters.${index}`;
+    findings.push(...checkFilter(model, child, stated, path16, { owner: "a rows block", chips, splits: /* @__PURE__ */ new Set() }), ...same(filterField(stated), path16));
   }
   for (const [index, name] of (block.search ?? []).entries()) findings.push(...checkSearch(model, child, name, `${at2}.search.${index}`));
   findings.push(...checkOrder(child, block.sort, `${at2}.sort`));
   if (block.group !== void 0) {
-    const path15 = `${at2}.group`;
-    const fixedGroup = same(block.group, path15);
-    if (block.under !== void 0) findings.push(error51("block.narrow", path15, `stands its lines under their documents ("${block.under}"), which already group them \u2014 drop \`group\``));
+    const path16 = `${at2}.group`;
+    const fixedGroup = same(block.group, path16);
+    if (block.under !== void 0) findings.push(error51("block.narrow", path16, `stands its lines under their documents ("${block.under}"), which already group them \u2014 drop \`group\``));
     else if (fixedGroup.length > 0) findings.push(...fixedGroup);
-    else findings.push(...checkGroup(model, child, display, block.group, path15, { chips, layout: "table" }));
+    else findings.push(...checkGroup(model, child, display, block.group, path16, { chips, layout: "table" }));
   }
   const shown = rowShows(model, child, display, block.columns ?? [], [
     // A child row's line says the warnings standing on it.
@@ -39611,15 +39804,15 @@ function checkBlockEdits(model, child, block, at2) {
   const figure = recordDisplay(model, child.alias)?.figure;
   const shown = /* @__PURE__ */ new Set([...block.columns ?? [], ...figure === void 0 ? [] : [figure]]);
   return edits.flatMap((name, index) => {
-    const path15 = `${at2}.edits.${index}`;
+    const path16 = `${at2}.edits.${index}`;
     const field = fieldOf(child, name);
-    if (field === void 0) return [error51("model.names-declared", path15, `names "${name}", which is not a field of "${child.alias}"`)];
-    if (!shown.has(name)) return [error51("block.edits", path15, `"${name}" is drawn nowhere on the line \u2014 make it a column, or drop it here`)];
-    if (!isAsked(field)) return [error51("block.edits", path15, `"${name}" is a ${field.type} field nobody writes \u2014 a line writes a value a person keys`)];
+    if (field === void 0) return [error51("model.names-declared", path16, `names "${name}", which is not a field of "${child.alias}"`)];
+    if (!shown.has(name)) return [error51("block.edits", path16, `"${name}" is drawn nowhere on the line \u2014 make it a column, or drop it here`)];
+    if (!isAsked(field)) return [error51("block.edits", path16, `"${name}" is a ${field.type} field nobody writes \u2014 a line writes a value a person keys`)];
     const long = field.type === "text" && field.format === "markdown";
     const several = field.type === "select" && field.multi === true;
     if (!LINE_EDIT_TYPES.has(field.type) || long || several) {
-      return [error51("block.edits", path15, `"${name}" is a ${long ? "long text" : several ? "multi-select" : `${field.type}`} field \u2014 a line holds a number, a date, a few words or one option as its control; the row opens to write the rest`)];
+      return [error51("block.edits", path16, `"${name}" is a ${long ? "long text" : several ? "multi-select" : `${field.type}`} field \u2014 a line holds a number, a date, a few words or one option as its control; the row opens to write the rest`)];
     }
     return [];
   });
@@ -39698,14 +39891,14 @@ var workspaceModelFileSchema = workspaceModelContractSchema.extend({
 }).strict();
 function modelIssueFindings(issues) {
   const unfold = (issue2, at2) => {
-    const path15 = [...at2, ...issue2.path];
-    if (issue2.code !== "invalid_union") return [{ path: path15, message: issue2.message }];
+    const path16 = [...at2, ...issue2.path];
+    if (issue2.code !== "invalid_union") return [{ path: path16, message: issue2.message }];
     const meant = issue2.errors.filter((arm) => !arm.some((one) => one.path.length === 0 && one.code === "invalid_type"));
     const fewest = Math.min(...meant.map((arm) => arm.length));
     const closest = meant.filter((arm) => arm.length === fewest);
-    return closest.length === 1 ? closest[0].flatMap((one) => unfold(one, path15)) : [{ path: path15, message: issue2.message }];
+    return closest.length === 1 ? closest[0].flatMap((one) => unfold(one, path16)) : [{ path: path16, message: issue2.message }];
   };
-  return issues.flatMap((issue2) => unfold(issue2, [])).map(({ path: path15, message: message2 }) => error51("model.schema", path15.length === 0 ? "the file" : path15.map(String).join("."), message2));
+  return issues.flatMap((issue2) => unfold(issue2, [])).map(({ path: path16, message: message2 }) => error51("model.schema", path16.length === 0 ? "the file" : path16.map(String).join("."), message2));
 }
 var RETIRED_MODEL_KEYS = {
   field_roles: "`records` replaced it \u2014 state how each entity's row is recognised (title, subtitle, image, status, figure, due) once per entity; docs/app_system.md",
@@ -39775,13 +39968,13 @@ function validateModelRows(model, rows) {
       }
       seenRefs.add(row.ref);
       for (const [fieldAlias2, value] of Object.entries(row.fields)) {
-        const path15 = `rows.${alias2}.${row.ref}.${fieldAlias2}`;
+        const path16 = `rows.${alias2}.${row.ref}.${fieldAlias2}`;
         const field = fieldByAlias.get(fieldAlias2);
         if (field === void 0) {
-          errors.push(error51("model.names-declared", path15, `is not a field of entity "${alias2}" \u2014 a row's keys are field aliases (${fieldByAlias.size > 0 ? [...fieldByAlias.keys()].join(", ") : "this entity declares none"})`));
+          errors.push(error51("model.names-declared", path16, `is not a field of entity "${alias2}" \u2014 a row's keys are field aliases (${fieldByAlias.size > 0 ? [...fieldByAlias.keys()].join(", ") : "this entity declares none"})`));
           continue;
         }
-        checkValue(field, value, path15, refs, errors);
+        checkValue(field, value, path16, refs, errors);
       }
       for (const field of entity.fields) {
         if (field.required !== true || COMPUTED_FIELD_TYPES2.has(field.type)) continue;
@@ -39793,13 +39986,13 @@ function validateModelRows(model, rows) {
   return errors;
 }
 var COMPUTED_FIELD_TYPES2 = /* @__PURE__ */ new Set(["formula", "rollup", "lookup", "autonumber"]);
-function checkValue(field, value, path15, refs, errors) {
+function checkValue(field, value, path16, refs, errors) {
   switch (field.type) {
     case "select": {
       const declared = new Set(field.options.map((option) => option.alias));
       for (const raw of asList(value)) {
         if (typeof raw !== "string" || !declared.has(raw)) {
-          errors.push(error51("rows.value", path15, `${quote(raw)} is not an option of this field \u2014 use an option alias (${declared.size > 0 ? [...declared].join(", ") : "this field declares none"})`));
+          errors.push(error51("rows.value", path16, `${quote(raw)} is not an option of this field \u2014 use an option alias (${declared.size > 0 ? [...declared].join(", ") : "this field declares none"})`));
         }
       }
       return;
@@ -39807,30 +40000,30 @@ function checkValue(field, value, path15, refs, errors) {
     case "select_record_link": {
       for (const raw of asList(value)) {
         if (typeof raw !== "string" || !refs.has(raw)) {
-          errors.push(error51("rows.value", path15, `${quote(raw)} names no row in this request \u2014 use "<entity-alias>:<ref>"`));
+          errors.push(error51("rows.value", path16, `${quote(raw)} names no row in this request \u2014 use "<entity-alias>:<ref>"`));
           continue;
         }
         const named = raw.slice(0, raw.indexOf(":"));
         if (named === field.target_entity) continue;
-        errors.push(error51("rows.value", path15, `names a row of entity "${named}", but this field links to "${field.target_entity}"`));
+        errors.push(error51("rows.value", path16, `names a row of entity "${named}", but this field links to "${field.target_entity}"`));
       }
       return;
     }
     case "select_member": {
       if (value !== "self") {
-        errors.push(error51("rows.value", path15, `${quote(value)} is not a member this model can name \u2014 use "self"`));
+        errors.push(error51("rows.value", path16, `${quote(value)} is not a member this model can name \u2014 use "self"`));
       }
       return;
     }
     case "files": {
       for (const raw of asList(value)) {
         if (typeof raw !== "string" || raw === "") {
-          errors.push(error51("rows.value", path15, `${quote(raw)} is not a document \u2014 a path beside this file, or a fil_ id already uploaded here`));
+          errors.push(error51("rows.value", path16, `${quote(raw)} is not a document \u2014 a path beside this file, or a fil_ id already uploaded here`));
           continue;
         }
         if (isStoredFileId(raw)) continue;
         if (raw.startsWith("/") || raw.split(/[\\/]/).includes("..")) {
-          errors.push(error51("rows.value", path15, `"${raw}" must be a relative path beside this file, with no ".."`));
+          errors.push(error51("rows.value", path16, `"${raw}" must be a relative path beside this file, with no ".."`));
         }
       }
       return;
@@ -39839,23 +40032,23 @@ function checkValue(field, value, path15, refs, errors) {
     case "rollup":
     case "lookup":
     case "autonumber": {
-      errors.push(error51("rows.value", path15, `is a ${field.type} field, which the platform computes \u2014 drop the value`));
+      errors.push(error51("rows.value", path16, `is a ${field.type} field, which the platform computes \u2014 drop the value`));
       return;
     }
     default: {
       if (!isFixtureScalarValue(value)) {
-        errors.push(error51("rows.value", path15, `must be a string, number, boolean or null on a ${field.type} field`));
+        errors.push(error51("rows.value", path16, `must be a string, number, boolean or null on a ${field.type} field`));
         return;
       }
       const expression = field.type === "date" ? parseFixtureDateExpression(value) : void 0;
       if (expression?.kind === "invalid") {
-        errors.push(error51("rows.value", path15, `${quote(value)} is not a date \u2014 use ${FIXTURE_DATE_GRAMMAR}`));
+        errors.push(error51("rows.value", path16, `${quote(value)} is not a date \u2014 use ${FIXTURE_DATE_GRAMMAR}`));
       } else if (expression?.kind === "relative" && field.type === "date") {
         const clock = field.format === "datetime";
         if (clock && expression.time === void 0) {
-          errors.push(error51("rows.value", path15, `${quote(value)} places a date that holds its hour at no hour \u2014 state it after the day: "${String(value)} 09:00"`));
+          errors.push(error51("rows.value", path16, `${quote(value)} places a date that holds its hour at no hour \u2014 state it after the day: "${String(value)} 09:00"`));
         } else if (!clock && expression.time !== void 0) {
-          errors.push(error51("rows.value", path15, `${quote(value)} states an hour on a date that holds none \u2014 drop the hour`));
+          errors.push(error51("rows.value", path16, `${quote(value)} states an hour on a date that holds none \u2014 drop the hour`));
         }
       }
     }
@@ -40128,17 +40321,17 @@ function validateWorkspaceModel(model, rows) {
   errors.push(...checkModelSingulars(contract.entities, apps ?? []));
   return [...contractErrors, ...errors];
 }
-function unknownModelKeys(raw, kept, path15 = "") {
+function unknownModelKeys(raw, kept, path16 = "") {
   if (Array.isArray(raw)) {
     if (!Array.isArray(kept)) return [];
-    return raw.flatMap((item, i) => unknownModelKeys(item, kept[i], path15 === "" ? String(i) : `${path15}.${i}`));
+    return raw.flatMap((item, i) => unknownModelKeys(item, kept[i], path16 === "" ? String(i) : `${path16}.${i}`));
   }
   if (!isPlainObject2(raw) || !isPlainObject2(kept)) return [];
   if (isBareFilterNode(raw) && kept.node_type === "group" && Array.isArray(kept.children) && kept.children.length === 1) {
-    return unknownModelKeys(raw, kept.children[0], path15);
+    return unknownModelKeys(raw, kept.children[0], path16);
   }
   return Object.keys(raw).flatMap((key) => {
-    const here = path15 === "" ? key : `${path15}.${key}`;
+    const here = path16 === "" ? key : `${path16}.${key}`;
     if (!(key in kept)) return [error51("model.schema", here, "unknown key \u2014 not part of the model")];
     return unknownModelKeys(raw[key], kept[key], here);
   });
@@ -40251,8 +40444,8 @@ function resultSideEffects(result) {
 }
 
 // src/version.ts
-var VERSION = "0.280.0";
-var APP_SDK_VERSION = "0.108.0";
+var VERSION = "0.282.0";
+var APP_SDK_VERSION = "0.109.0";
 
 // src/timezone.ts
 function machineTimezone() {
@@ -40277,7 +40470,7 @@ var AGENTS_default = "# @lotics/cli \u2014 agent index\n\nThe model an agent nee
 var building_an_app_default = '# Building an app, end to end\n\nThe other references here describe **contracts** \u2014 what a model may state, what a tool takes. This\none describes the **sequence**: the order the steps go in, and why. Read it once for the shape, then\nreach for the area doc (`lotics docs`) whenever you need the detail.\n\n**The live app is the only edit surface.** Every change to an app \u2014 applying a model, deploying a\nbuild, setting one query or workflow \u2014 mints a new version of it, and rolling back to an earlier\nversion is the undo. Nothing about an app lives in a local directory the platform reads back, so\nthere is no project to keep in sync and no deploy to find out whether something works.\n\n**Rolling back restores the app, not the data.** A table change the model made, and every row a\nworkflow wrote while you tried it, stay where they are. Try a write on a throwaway record.\n\n---\n\n## 1 \u2014 Two kinds of app\n\n- **An app stated in a model** \u2014 the default, and the right one for almost every job. `model.json`\n  says how a row of each entity is recognised (`records`) and, in `apps`, one register over one\n  entity and the record its rows open: its columns and filters, its sections in the order its work\n  reaches them, its acts and the checks that guard them (`lotics docs model/apps`). The platform\n  compiles each app and draws it with the runtime every such app shares, so how each piece looks is\n  the platform\'s, one way per concept, and no key changes it. Every write the app makes is a\n  generated workflow that re-checks on the server what the model states.\n- **A custom-code app** \u2014 React you write, for a surface the model\'s vocabulary cannot state. It\n  reads and writes through `@lotics/app-sdk` (queries, workflows, files, AI) and draws with whatever\n  React you choose.\n\n## 2 \u2014 Clarify what is being asked, before modelling it\n\n**A metric name is not a definition.** "Revenue", "in stock", "active", "overdue" \u2014 each is a\nbusiness rule the person asking owns, and the cost of guessing is a screen that is confidently\nwrong. Ask until there is no ambiguity left:\n\n- Which rows count, keyed off which field \u2014 a date, a status, a flag?\n- Does the same metric need a **different rule per table**? One table may key off a date and\n  another off a status; one rule rarely covers both.\n- Snapshot or flow? "Current stock" is as-of-now; "revenue this month" is a window. They compile\n  to different filters.\n- If the data cannot support the definition asked for \u2014 the field simply is not there \u2014 **say so\n  and show the options.** Silently substituting a near-miss produces a number nobody can trace.\n\nThis is the step that gets skipped under time pressure, and it is the only one whose mistakes are\ninvisible in review: every later artifact is correct with respect to the wrong definition.\n\n## 3 \u2014 The data model, before any app\n\nGet this wrong and nothing above it can be precise. Each entity is its own table with links into\nthe spine; attributes and evidence are fields on their owner. A single table with a `type` column\nstanding in for three entities collapses the distinctions every later query needs.\n\n**Verify real VALUES, never just that a field exists.** `lotics run query_records` a sample and\nlook at fill rates \u2014 a field that is present and empty on 90% of rows will not support the screen\nyou are about to design.\n\n**That includes imagery.** If the entity has a likeness \u2014 a product, a property, a vehicle, a\nperson \u2014 its picture is the strongest identifier a register row can carry, and an empty image field\nis a data gap to fill before you design around it: `lotics file upload`, then `update_records`.\n\n**One fact, one column \u2014 and check before you add one.** Read the table\'s existing fields before\nadding any, because the fact is often already there in another shape: a place written as text\nbeside a link to the place record, a status word beside the select that decides it, a total beside\nthe formula that computes it. Two columns for one fact never stay equal. Prefer the link, the\nselect, or the formula, and compose the text when you READ.\n\n**Match on ids and option keys, never on rendered text.** Resolve a name to its `rec_\u2026` or `opt_\u2026`\nonce, at the boundary, and compare those. Treat an unresolved name as UNKNOWN, never as a wildcard.\n\n**How the tables RELATE is `lotics docs data_model`** \u2014 read it before designing a schema; those\ndecisions outlive any one app.\n\n**Empty is not the same as redundant.** A field nothing fills may still be the only home for a real\ndistinction. Read what a field MEANS before you remove it.\n\n## 4 \u2014 An app stated in a model\n\n```\nlotics docs model                       # how to write model.json, with a worked example\nlotics model apply model.json           # check it, apply the tables, mint a version of every app\nlotics model apply model.json --app orders   # only the apps named; the tables are applied whole\nlotics model apply model.json --plan    # what the apply would change, writing nothing\nlotics model pull -o model.json         # the workspace\'s model, as the file apply reads\n```\n\n`model apply` checks the whole file first \u2014 every problem in one run, before anything is uploaded\nor written. It then adopts or creates each table (the table this workspace bound it to, else one of the same\nlabel, is adopted and given what it lacks; no stored value changes), writes the first rows only where every bound\ntable is empty, and mints one version per app, printing each app\'s id, the version minted\n(`unchanged` when there was nothing to mint) and its address. Applying the same file again mints nothing.\nA table change is not undone by rolling an app back, so `--plan` first says what the apply would\ncreate or change in the tables and which apps it would create, update or refuse \u2014 writing nothing.\n\n**The model changes after the app exists, and applying it again is how it lands.** Edit the file,\napply it. An act whose write the model cannot say names its own `workflow`; that workflow\'s body is\nthe live one, and `lotics run set_app_workflow` changes it. An act that reads papers runs an agent\napply owns: made, replaced and removed with the act, and an agent of that alias apply did not make\nis refused, never rewritten.\n\n## 5 \u2014 A custom-code app\n\n```\nlotics app create "<name>" --custom     # the app, plus a Vite + React + TS project using @lotics/app-sdk\ncd <dir>\n# edit src/App.tsx \u2014 node_modules/@lotics/app-sdk/AGENTS.md is the reference\nnpm run typecheck && npm run lint && npm test\nlotics app deploy -m "<what changed>"   # build, upload, a new version live\n```\n\nWhat the app reads and writes is bound on the app, never in the project: `lotics run\nset_app_query` binds a named query, `lotics run set_app_workflow` a workflow body, and each mints a\nversion. `useQuery("<alias>")` and `useWorkflow("<alias>")` call them. A deploy uploads the build\nand carries every binding forward unchanged.\n\n**Named queries.** Author them as `kind: "project"` with a `filter`, naming each projected column\n(`{ "source": "fld_\u2026", "output": "total" }`), so a row reads as `r.total`. Scope per-user reads with\n`is_current_member` **inside the query** \u2014 a member id passed from the client is chosen by the\ncaller. Write one `description` per alias: it is the line a chat or MCP caller chooses by.\n\n**Workflows are the only way an app writes.** Every workflow bound to an app is also the chat\nagent\'s write surface, so its shape is an agent-facing decision: take a list where one job covers\nmany records, say in an optional input\'s `description` what omitting it means, make the write\nsurvive running twice, and gate anything irreversible with `wait_for_approval`.\n\n## 6 \u2014 Prove it, without a screen\n\nStatic checks prove parse, types and names \u2014 they evaluate nothing. Rehearse a write first:\n\n```\nlotics run dry_run_workflow \'{"trigger_type":"app_workflow","trigger_payload":{\u2026},"live_reads":true}\'\n```\n\nIt walks the real step tree and returns the resolved plan plus expression and tool-input errors,\ndispatching no write. **`live_reads: true` matters whenever the body reads anything**: without it\nevery read returns a stub, and every data-gated branch takes the empty path.\n\nThen run it end to end, on a throwaway record:\n\n```\nlotics run run_app_query \'{"app_id":"app_\u2026","alias":"\u2026","params":{\u2026}}\'\nlotics run run_app_workflow \'{"app_id":"app_\u2026","alias":"\u2026","inputs":{\u2026}}\'\n# exits non-zero when the run failed, so it is assertable\n```\n\nA workflow is also how an app **produces a document** \u2014 the `generate_*_from_template` tools fill a\ntemplate you registered once (`lotics docs document_templates`).\n\n## 7 \u2014 Look at it, then name it\n\nLook at every app you apply, at a desktop width and at a phone\'s \u2014 every check above reads the\ndefinition, none of them the pixels:\n\n```\nlotics run screenshot_app \'{"app_id":"app_\u2026"}\'\n# one PNG per width, saved as a workspace file; "path":"/rec_\u2026" opens a screen inside the app\nlotics download <file_id>\n```\n\nEach shot is one screen, as a member sees it; `"full_page":true` grows it to the list scrolling\ninside the app. Beside each image comes its `snapshot`, the screen\'s accessibility tree as text \u2014\nread it to check labels and values without opening the picture.\n\nThe app is drawn live, as you, read-only: a screen that writes when it opens shows that write\nrefused, and `errors` lists what failed on the page. A version that looks wrong is one\n`lotics run rollback_app` away from the one before.\n\nThen set the icon, the colour and the app\'s own `description` through `lotics run update_app`. The\n`description` heads the capability listing the member\'s chat agent reads on **every** turn, so a\nstanding process the app expects that agent to carry out belongs there and nowhere else.\n\n**A caller outside the team gets its own app.** Sharing an app publicly, or giving an API key\naccess to it, reaches every alias the app declares; no alias can be held back. So whatever\noutsiders may call is a SECOND app over the same tables: only the queries they may read and the\nworkflows they may run. The desk the team works in stays a separate, private app.\n';
 
 // docs/cli_reference.md
-var cli_reference_default = "# @lotics/cli \u2014 CLI Command Reference\n\nPer-command syntax, flags, contracts, and gotchas for the public `lotics` CLI. Start at [AGENTS.md](../AGENTS.md) for the model this reference assumes; `lotics --help` is the authoritative, always-current verb list.\n\n| Command | What it does |\n|---|---|\n| `lotics` / `lotics --help` | Show full help: capabilities, the verb list (\xA7 COMMANDS), flags, config. `lotics <verb> --help` prints that verb's entries alone (`lotics model --help`, `lotics file download --help`); `lotics report --help` prints the report frame. |\n| `lotics auth signup <email>` | Create account + org + API key, sends magic link email. Registers the new org as a profile; `--local` pins this directory to it (pointer) instead of setting the global default. |\n| `lotics auth login <email>` | Sign in an account that already exists, on a machine holding no key. **Two steps, and it does not wait for the person.** The first prints the page to open \u2014 `https://lotics.ai/cli_login/<request_id>`, also mailed \u2014 and the code that page must show, records the request, and exits 0. They sign in there if asked, check the code and press Confirm. **Then the next command that needs a credential collects the key** before it does its own work, so the second step is just re-running whatever was wanted; a command run before Confirm exits 1 naming the page and the code again, and once the 15 minutes are up it says to ask again. The handful that run WITHOUT a credential \u2014 `docs` among them \u2014 claim nothing, so one of those run after Confirm still answers as though signed out. `--wait` keeps one command instead, holding the terminal until Confirm; `--local` pins this directory to that org rather than setting the global default, and implies `--wait` (a pin names THIS directory, so only the terminal that stays in it can write one). `--json` prints `organization_id`, `workspace_id` and `organization_name` when it finishes signed in, and `request_id`, `confirm_url`, `code`, `email`, `expires_at` when it is the first step. The request's secret is never printed and the org's key never leaves the store. |\n| `lotics auth api-key [key]` | `whoami` \u2192 **upsert** the key's org as a profile in the global store (never overwrites). The profile records the instance the key was verified against (`LOTICS_API_URL`, default `https://api.lotics.ai`), and every later command for that org goes there. `--local` additionally pins this directory to it (pointer) instead of setting the global default. |\n| `lotics auth web` | Send a magic link email to access the web app (requires auth) |\n| `lotics auth whoami` | Print active account name, email, org, resolved workspace, the instance the credential belongs to, which **kind** of credential this machine holds (a sign-in from `auth login`, or an API key \u2014 read from the saved profile, and from the server when the profile does not say, which covers `--api-key`/`LOTICS_API_KEY` and a profile saved before the field existed; unknown only when neither can say), and the resolution **source** (flag/env/local/app-manifest/global). `--json` adds `workspace_id`, `api_url`, `credential_kind` + `source`. |\n| `lotics auth logout [<name\\|id>]` | In a pinned dir: delete the local pin. Else: remove the profile (default the active org), `--all` for every one. What happens server-side depends on which KIND of credential it is. A **sign-in** (`auth login` / `auth signup`) is revoked \u2014 logging that terminal out ends its credential rather than leaving a live one behind; a server that cannot be reached, or a credential already dead, never blocks the local forget, and one line names the org and Settings \u2192 Security \u2192 *Keys and terminals*. An **API key** (`auth api-key`) is only forgotten here \u2014 an admin issued it and it is routinely on a server and on other machines, so one terminal signing out must not kill it for everyone; the line says it is still active and names both pages, because Settings \u2192 API keys is admin-only and the credential may well be the holder's own sign-in, which they revoke themselves at Settings \u2192 Security \u2192 *Keys and terminals*. A profile saved before the kind was recorded states nothing, so the SERVER is asked (`auth whoami`) and it is revoked only if the answer is a sign-in: an older server, a credential minted before the column, and a request that fails all leave it alone. |\n| \u2014 | **A refused credential says which of three ways it is dead, and names the remedy that ends its kind.** `This credential expired.` / `was revoked.` / `belongs to a member who is no longer active in this organization.` carries `Run \\`lotics auth login <email>\\` to sign in again.` for a sign-in and `Ask an admin for a new API key (Settings \u2192 API keys).` for an issued key. A credential minted before that was recorded still gets BOTH in one sentence, because nothing on the row tells them apart \u2014 so a headless box is never sent looking for a browser alone. A key the server does not recognize at all gets one flat `Invalid or disabled API key.` \u2014 deliberately, so a guessed key learns nothing, not even that it named a row. The body carries `reason` for a script to branch on, since the code stays `unauthorized` for every 401. |\n| `lotics org` | List saved orgs (profiles) from the global store with the instance each belongs to, marks active for this directory (a local pin wins over the global default). |\n| `LOTICS_ORG=<name\\|id>` | Scope every command in this shell to one saved org. **Resolved once, before any command dispatches**, so a value matching no saved credential refuses every verb with one sentence \u2014 a read, a write, and a local check that needs no credential alike \u2014 and refuses it before the first byte is written. It refuses even when a credential arrives another way, because `--api-key` / `LOTICS_API_KEY` outrank it in the precedence chain and a write must never fall through to whatever THOSE name while the variable says otherwise; when the variable resolves and a key is also given, the key decides and the command says so. The refusal lists the orgs this machine holds, so it is answerable without another command (`lotics org` is refused by the same rule). A name is whatever the credential was SAVED under \u2014 a server-side rename never moves it, and the new name resolves too, so both keep working and `lotics org` prints the pair. |\n| `lotics org use <name\\|id> [--local]` | Switch the active org by org name (case-insensitive, ambiguous \u2192 error) or id. No flag \u2192 global `active_org`; `--local` \u2192 a `.lotics/config.json` pointer in the current dir. |\n| `lotics workspace` | List workspaces in the active org, marks current with `(current)` |\n| `lotics workspace select <id>` | Set the workspace in the **active scope** \u2014 a local pin if the dir has one, else the active org's global profile. Records the workspace's NAME beside its id, which is what the `lotics \u2192 <org> / <workspace>` echo prints; `workspace list`, `workspace create`, `workspace rename` and `org use` record it too, so a target is named rather than identified. Until one command has listed it, the echo prints the id and says the name is not known yet. |\n| `lotics workspace create <name> [--timezone <Area/City>] [--currency <ISO>]` | Create a new workspace (admin only), auto-switches to it. Neither flag is defaulted from THIS machine, unlike signup: an extra workspace is routinely created by an operator for somebody else. Without `--timezone` the new workspace inherits the zone of the org's OLDEST workspace; without `--currency` it takes the org's default. Both ride the create, so the workspace is never briefly denominated in a currency nobody asked for. `--currency` takes an ISO-4217 code (case-insensitive; anything else is refused). |\n| `lotics workspace rename <name>` | Rename the **current** workspace (admin only) \u2014 the endpoint takes its target from the request's workspace, never a path id, so switch with `workspace select <id>` first and read the `lotics \u2192 <org> / <workspace>` echo before trusting it \u2014 both halves are names, and the rename moves the cached one in the same act. Carries the workspace's existing `default_currency` and `timezone` through unchanged: the endpoint takes the whole settings triple, so sending only a name would blank the other two. |\n| `lotics workspace settings [--name <n>] [--currency <ISO>] [--timezone <Area/City>]` | Change the CURRENT workspace's name, default currency or timezone \u2014 `PATCH /v1/workspace`, admin only. Only what you name changes; the endpoint takes the whole triple, so the CLI carries the two you did not. `rename` is this verb with the name alone, which is why it can never forget the other two. Both values are invisible once they are wrong: the currency decides how every money field RENDERS and the zone decides how every date BUCKETS, on a workspace whose whole purpose may be to look like the customer's own. `--json` prints the updated workspace. |\n| `lotics workspace delete <id> --yes` | Delete a workspace by id (admin only). **Soft delete** \u2014 `archived_at` is set, so it drops out of listings, can no longer be selected, and its tables/records go dark, while the data is retained and recoverable. Its **apps are cascade-archived** too \u2014 every app entry point (embedded, public link, standalone subdomain, incl. anonymous public links) stops serving. Refuses the org's **only** active workspace (400) and any workspace outside the caller's org (404). Requires `--yes` to confirm (destructive; the CLI is used non-interactively). |\n| `lotics workspace doctor` | Report workspace-wide dangling schema references via `GET /v1/workspaces/dangling-references` \u2014 every active app/workflow artifact whose prefixed schema id no longer resolves, printed as `<referent.kind> \"<name>\" (<id>) \u2192 <namespace> <id> (missing)`; healthy prints a one-line all-clear. **Exits non-zero (exit 1) on findings** so scripts can gate on it. Resolves the first workspace like every data command (runs before the global workspace resolution). Admin-only. |\n| `lotics tools` | List tools by category with descriptions |\n| `lotics tools <name>` | Full description + JSON Schema for one tool |\n| `lotics run <tool> '<json>'` | Execute a tool (text output via toModelOutput). Args may also come from a file (`lotics run <tool> @args.json`) or stdin behind the `-` sentinel (`cat args.json \\| lotics run <tool> -`) \u2014 both bypass the OS `ARG_MAX` limit for large payloads (a knowledge-doc `content`, a bulk update). A leading `@` on the args is unambiguously a file path (JSON args start with `{`). **Stdin is asked for, never guessed.** `lotics run <tool>` with no payload runs the tool with no arguments and returns at once. `lotics report` takes the same sentinel. In PowerShell use `@file`: quotes inside an inline argument are consumed by the shell, and the CLI reports the JSON it received with its quotes gone \u2014 the error names both escapes. |\n| `lotics run <tool> --json '<json>'` | Execute a tool (full JSON output) |\n| `lotics run <tool>` \u2014 **file cells** | A file in a tool's result carries its `fil_\u2026` id and metadata and **no `url`**, on every tool and in both output modes. That is not a broken file \u2014 this surface resolves no URL for a cell. Reach the bytes with `lotics file download <file_id>`, which takes the id straight from the cell; the text output says so whenever a result carries one. |\n| \u2014 | **Every tool is invoked here, including the ones that RUN something** (`run_app_workflow`, `run_app_agent`, `run_app_query`) and every one that changes an app (`set_app_query`, `set_app_workflow`, `set_app_agent`, `update_app`, `rollback_app`). A command exists only for work that touches a local file: `model apply`, `model pull`, `app create --custom`, `app deploy`. |\n| \u2014 | **The exit code reports the WORK, not just the call \u2014 for the two tools that RUN one.** `run_app_workflow` and `run_app_agent` whose envelope carries a failed `status` (`error`/`failed`/`cancelled`) exit non-zero and print `<tool> \u2192 <status>: <message>` to stderr, so `lotics run \u2026 && next-step` cannot walk past a refused run. The rule is an allowlist of FAILURE \u2014 an unrecognized status exits 0, so a status added later never turns a working script red. A parked run (`awaiting_input`) is not a failure: it is waiting for an answer and the work is still live. Only a TOP-LEVEL `status` counts; one inside the data belongs to the data. Any OTHER tool's `status` is data, and exits 0. |\n| `lotics run <tool> --print-created` | Report the records the call created, grouped by table, with a paste-ready `delete_records` per table and the mandatory caveat naming what cannot be auto-undone (external integrations, notifications, possible sub-workflows). Works for any tool that returns a `side_effects` block, not workflows alone. |\n| `lotics run <tool> --cleanup` | Implies `--print-created`, then runs those deletes \u2014 harvested records **only**, never files / external calls / notifications. **Not a rollback**; a rollback is structurally impossible here. A partial cleanup exits non-zero so a script cannot read it as success. |\n| `lotics file upload <file\\|dir...>` (alias `lotics upload`) \xB7 `--stdin` \xB7 `--base64` \xB7 `--url <url>` | Upload files/directories. **The transport is chosen by size and is not a flag**: under 8 MiB the file is POSTed to `/v1/files` in one request, and several such files go in the same one; at or above it the CLI takes presigned part URLs and PUTs the bytes straight to object storage, so they never pass through the API. That threshold matches the AWS CLI's own `multipart_threshold`, and the number matters less than there being nothing to choose \u2014 one verb, any size, up to the 2 GiB a workspace may store. A large upload reads one part at a time, so memory stays flat regardless of file size, and a failure part-way abandons the parts already sent rather than leaving them billable and invisible. A directory expands to its immediate files; `--as <name>` renames a single upload. **Three alternative byte sources, for a caller that never had the bytes on disk** \u2014 an attachment decoded in memory, a generated document, a signed download link \u2014 each mutually exclusive with the others and with a path argument: `--stdin` takes raw bytes on stdin, `--base64` takes base64 on stdin (the shape attachments arrive in), `--url <url>` fetches the URL first. `--stdin`/`--base64` REQUIRE `--as`, because stdin carries no filename and the mime type is derived from it; `--url` falls back to `Content-Disposition` then the URL's last path segment. `--base64` decodes STRICTLY \u2014 `Buffer.from(s, \"base64\")` silently skips invalid characters and truncates on bad padding, so a corrupted pipe would otherwise store a short file that only fails when a human opens it. The `--url` fetch happens in the CLI, not the server: the URL comes from the operator running the command, so routing it through the backend would add an SSRF surface to buy what `curl` already does. |\n| `lotics file download <file_id> [<path>]` \xB7 `-o <dir>` | (alias `lotics download`) Download a stored file: `GET /v1/files/{id}/signed_url` \u2192 fetch the presigned URL and write it where you asked. **The two spellings mean two different things, and neither is read by shape: the positional `<path>` is the FILE to write, `-o <dir>` is the DIRECTORY to save into.** That is `cp` and `curl -o`, so nothing here consults an extension. A named file is written as named, its parent created, overwriting what is there \u2014 the point of naming it is that the next command opens that exact path. A directory is created if missing and written into under the stored filename (the response's `Content-Disposition`), taking a free spelling beside a file of that name already there so a repeat download never clobbers the first; with no destination at all, that filename lands in cwd. Give the destination once \u2014 a positional and `-o` together is refused, as is a positional that names an existing directory or ends in a separator (`a directory goes in -o`). The first argument is a **file id**, so a path in that slot is refused rather than sent as an id. The written path goes to **stdout** (under `--json`, `{file_id, path, filename, stored_filename}`) and the narration to stderr, so a download pipes into whatever opens it. `lotics file download record <record_id> <field_key> [-o <dir>]` spreads every file on a record's file field over a DIRECTORY \u2014 there is no single file for N files to be. |\n| `lotics file list [--limit <n>] [--cursor <token>]` | The workspace's files, newest first \u2014 id, upload time, bytes, MIME type, filename on stdout, one per line (`--json` for the object). `GET /v1/files` with no `file_ids`. A file holding the content of a knowledge doc or template you cannot use is left out. **A page, not a dump**: the store only ever grows, so the last line prints the command for the next page and `next_cursor` is null on the last one. The cursor is opaque and keyset \u2014 pass it back as given \u2014 so an upload landing mid-sweep cannot make a walk skip or repeat a row. Every other file verb takes an id, so this is the only answer to \"what is in here\" short of reading Postgres. |\n| `lotics file delete <file_id>` | Archive a stored file, over the `delete_file` tool. **Refused while a record cell, a comment, a knowledge doc, a document template or a voice session still references it** \u2014 the refusal names the referents, so this is safe to try. The bytes are left in object storage; the row no longer serves them, which is what \"deleted\" means here. There is no `lotics delete`: the verb needs its noun. |\n| `lotics knowledge list [--include-hidden]` | `GET /v1/knowledge_docs` \u2014 a table of id, name, tags, description (`--json` for the docs). **REST, not the `list_knowledge` tool**: the tool answers what the ASSISTANT may browse, and a hidden doc is out of that corpus by definition, so a tool-backed listing could never show one and the person who hid it would have no way back to it. Hidden docs are left out unless `--include-hidden` asks; those rows are marked `(hidden)`. |\n| `lotics knowledge create --name <n> [--description <d>] [--tags <a,b>] (--from <file.md> \\| --content <str>)` | Read the body client-side (a file XOR an inline string \u2014 exactly one required), then call `create_knowledge` with `{ name, description, content, tags? }` (description defaults to `\"\"`). `--tags` files the doc as it is made, which is the only moment a corpus reliably gets labelled. Prints the new id to stdout. Large files ride the POST body fine. |\n| `lotics knowledge get <id> [-o <file.md>]` | `GET /v1/knowledge_docs/{id}` (`getKnowledgeDoc`) \u2192 the doc with its **hydrated `content`** (the one content-read path for a non-sandbox client). `-o` writes the body via `writeFileAtomic`; else the body goes to stdout. `--json` prints the full doc instead. |\n| `lotics knowledge update <id> [--from <file.md> \\| --content <str>] [--name <n>] [--description <d>] [--tags <a,b>]` | Call `update_knowledge` with **only** the provided fields (a body from --from/--content becomes `content`; the tool diffs + CASes the content change internally, so the CLI passes no `expected_content_file_id`). `--tags` REPLACES the doc's label set \u2014 the single-doc form, where the caller is looking at one doc and can state what it should carry. At least one field required; --from and --content are mutually exclusive. |\n| `lotics knowledge tag <id...> [--add <a,b>] [--remove <c,d>]` | `PATCH /v1/knowledge_docs` with `{ knowledge_doc_ids, add_tags?, remove_tags? }` \u2014 one transaction over the whole set. A **DIFF applied to each doc's own labels**, never a replacement: the docs named on one command line carry different labels, so one array across them would strip whatever the others were filed under. Removal matches case-insensitively; adding a label a doc already carries writes nothing. Ids may be separate arguments or comma-separated. At least one of --add/--remove required. |\n| `lotics knowledge hide <id...>` / `lotics knowledge unhide <id...>` | `PATCH /v1/knowledge_docs` with `{ knowledge_doc_ids, hidden }`. Hiding takes docs out of every **listing** \u2014 the Library's list, `list_knowledge`, and the corpus `grep_knowledge` searches \u2014 while leaving IAM untouched and keeping them readable **by id** (`read_knowledge` with an id, a code run staging one, an app agent's declared set). So it can never silently break an app that depends on a doc, and unhiding costs nothing. Refuses the no-argument form rather than reading it as \"everything\". |\n| `lotics knowledge rm <id>` | Archive the doc via `delete_knowledge` (`{ knowledge_doc_id }`). The REST execute path does not gate `needsApproval`, so this runs unattended. |\n| `lotics setup <model.json> [--email <addr>] [--json]` | **The whole first run, in one command.** Creates an account when this machine has no credential (the same call `auth signup` makes \u2014 `--name` and `--timezone` apply), then applies the model to its workspace, then prints the one-time sign-in link. **When that email already has an account it hands over to the `lotics auth login` flow** \u2014 it prints the sign-in page to open and the code it must show, and **exits 1 having created nothing**; the person presses Confirm and runs the same command again, which collects the key and carries on into the model. (`--wait` holds the terminal through the Confirm instead, finishing in one command.) The re-run is not refused for naming an `--email` it is now signed in as \u2014 that address IS the account it holds, not a second one. The file is a workspace MODEL, and it is read and checked before an account is created, because a file with a typo in it must not leave an organization behind. Then it is `lotics model apply` run on the new workspace: its tables, rows and apps; the sign-in link lands on its app when it has one, else on the workspace's app list. It exists because the two-command form has a seam where the FIRST command exists only to produce a credential for the second, and a caller pasting a prompt has to get both right. **`--email` is only for creating an account**: with a credential already resolvable it is REFUSED rather than obeyed, because the two can name different organizations and preferring either one silently writes into an org the caller did not name \u2014 the message says how to do each thing on purpose. Without it, `setup` applies the model to the account you already have. A path positional after the file is accepted and IGNORED with a warning \u2014 `setup` writes nothing to disk \u2014 so a prompt that passes one still runs. **`--json` prints one object on stdout and nothing else** \u2014 what `lotics model apply --json` does (`tables`; `apps`, each with `alias`, `app_id`, `version_id`, `origin`, `address` and `findings`; and `findings`) plus `organization_id`, `workspace_id` and `signin_url`, and a `warnings` array carrying everything the prose form would have said out of band, such as a sign-in link that could not be minted. A warning is never merely silenced: when the command fails with an error before it can emit, the ones it had collected go to stderr alongside it. Reachable with no install: `npx -y @lotics/cli setup \u2026`. |\n| `lotics model apply <model.json> [--app <alias> ...] [--plan] [--json]` | **The model, applied to this workspace, through the `apply_model` tool.** The file is read and checked with the validator the server runs, every problem in one run, before anything is uploaded. Documents a row attaches by a path beside the file are uploaded first and the rows sent with their `fil_` ids; a path this workspace already recorded keeps its id, so a re-apply uploads nothing twice. Then the tool adopts or creates every table (the table this workspace bound the entity to, else an existing table of the same label, is ADOPTED and given the fields, options and views it lacks; no stored value changes), writes first rows only where every bound table is empty, and mints a new version of each app the model declares \u2014 `--app` (repeatable, comma-separated) narrows which apps, while the tables are applied whole. Prints one line per app \u2014 alias, `app_id`, `created`/`updated` with the version minted or `unchanged`, and the address it is served at \u2014 then the model's notes once, as the server states them. **`--plan` writes nothing and uploads nothing**: it prints what the apply would do to the tables (what it would create, what it leaves as the workspace has it, what the two disagree about), which apps it would create or update, and what it would refuse an app for, exiting 1 when it would refuse one; workflow bodies are checked only at apply, since they name fields a plan has not created. **A rollback restores an app's earlier version** (`lotics run rollback_app`); table changes and data writes stay. Resolves and ANNOUNCES its workspace first. `--json` prints `{workspace_id, tables, apps, findings}` on stdout (with `--plan`, each table and app is what the apply would do), or `{ok: false, findings}` when the file does not check. |\n| `lotics model pull [-o <model.json>]` | **This workspace's model, rebuilt from what owns each part** \u2014 the tables, fields, options, templates and roles the workspace holds, how rows are recognised, and each app's body from its current version \u2014 through the `get_model` tool, as the file `model apply` reads: to stdout, or to the file `-o` names. What the workspace holds that a model cannot state is printed on stderr, never written into the file. Applying what it wrote changes nothing. |\n| `lotics app create <name> --custom [path]` | **A custom-code app**: creates the app (`POST /v1/apps`), scaffolds a Vite + React + TypeScript project into `[path]` (default `./<name>`, refused when not empty \u2014 before the app row exists) that depends on `@lotics/app-sdk` alone and draws with plain React, and installs it (`npm install --ignore-scripts`), then writes the declarations of the app's live bindings (`get_app_types`) into `.lotics/`, which the project's `tsconfig.json` includes. `package.json#lotics` names the app and its workspace, which is how `app deploy` in that directory finds both. The app has no version until the first `lotics app deploy`. `--custom` is required: an app the runtime draws from a model is made by `lotics model apply`. The SDK's reference is `node_modules/@lotics/app-sdk/AGENTS.md` inside the project. |\n| `lotics app deploy [-m <message>]` | **Build this directory and upload it as a new version of the live app.** Rewrites `.lotics/` with the declarations of the app's live bindings (`get_app_types`, replacing each file there), then runs the project's `npm run typecheck` (warned about when absent) and `npm run build`, tars the source (without `node_modules`, `dist`, `.git`, `*.tsbuildinfo`) and `dist/`, and posts both to `POST /v1/apps/{id}/versions` on the version `package.json#lotics.current_version_id` names, then stamps the new one there. The version carries the app's queries, workflows, agents and capabilities forward unchanged \u2014 those are written through their tools. A project with no `build` script, or whose `package.json#lotics` still declares `queries`, `workflows`, `agents` or `capabilities`, is refused before anything is built; the refusal names the tool that sets each. **A 409 because another version went live since this directory's last deploy** (a deploy from elsewhere, a rollback) prints the server's sentence and the version that is live; to ship this directory over it, set `current_version_id` to that version and deploy again. `-m` (or a bare positional) is the version's message, optional. The workspace comes from `package.json#lotics.workspace_id` unless `--workspace` / `LOTICS_WORKSPACE` names another. |\n| `lotics docs` \\| `lotics docs <area>[/<section>]` | **This CLI's own references, carried inside the binary** \u2014 the model reference, this index, and every doc under `docs/` \u2014 so the doc a reader opens always describes the binary answering. Capped at ONE PAGE: a doc that does not fit prints its opening and the addresses of what it holds (`lotics docs <area>/<section>`, each section's size beside it, or a table's row names), and every address prints within a page. A custom-code app's SDK reference ships inside `@lotics/app-sdk` in the app's `node_modules`. |\n| `lotics upgrade` | Update this CLI in place. Runs the same installer a person would, chosen by how THIS copy arrived: an npm install upgrades through npm, a script install re-runs the script \u2014 the runtime knows which (the executable is compiled, the npm bin runs under node), so nobody has to. It downloads nothing itself; resolving a version, verifying the checksum and replacing a running executable already exist in the installers, and a second copy of that inside the binary would be a second thing to get right. Replacing the binary while it runs is safe \u2014 a rename leaves the running image mapped on unix, and on Windows the installer moves the old aside precisely because the file is in use. Already current is a no-op that says so. Needs no auth. |\n| `lotics docs model` \\| `lotics docs model/<section>[/\u2026]` | **The model reference, from inside the binary** \u2014 the one doc this CLI carries rather than resolves, because it describes this CLI's own model checker; listed first by `lotics docs`, at this CLI's version. Its first page is what a model composes with, the working order (jobs \u2192 entities and fields \u2192 `records` \u2192 one app per job \u2192 `model apply`) and the section addresses; every page of it is whole. Every top-level key of a `model.json`, every field `type` the contract admits with the config each one needs, the option / view / role / inline-template shapes, `records` (how a row of each entity is recognised), `write_rules`, `apps` (each register, record, act and check), the row format (relative dates `@today` / `@month-start` with whole-day offsets; links as `\"<entity-alias>:<ref>\"`), the rules, and one complete worked example; it points at `https://lotics.ai/presets/index.json` for complete example models of several trades. **Offline, no account.** |\n| `lotics report '<json>'` \\| `lotics report @report.json` | File a report with the Lotics team about what got in your way. **Covers the classes telemetry structurally cannot see**: a capability that does not exist (no command ran, so nothing was recorded), a command that exited 0 having done the wrong thing, an error whose message did not name the remedy, and anything that made authoring slower than it should be. **A frame, not a paragraph** \u2014 `{goal, actual, expected?, tried?, wanted?}`, `goal` and `actual` required, unknown keys dropped rather than refused. **No severity or category.** Ingest is inline JSON, `@file`, or `-` for stdin. A bare sentence is refused with the frame printed beside it, so the fix is one step; a bare invocation prints the frame BEFORE asking for a credential, since someone whose key will not resolve is exactly who has something to report. **Not spooled**: unlike telemetry it posts inline, prints whether it landed, and exits non-zero if it did not, echoing the report back so a failed send never loses it. Runs regardless of `LOTICS_TELEMETRY` \u2014 invoking it IS the consent that passive collection needs an opt-in for \u2014 but with telemetry off there are no recorded commands to attach, and it says so rather than implying context it does not have. Requires auth. Never paste records, file contents, or credentials. **Prints the id of each frame filed** \u2014 a filing nobody can cite cannot be answered about. The ids come from the server, so an instance that only logs the frames prints the count alone; the CLI never mints one of its own, which would hand back a token that resolves to nothing. |\n\n";
+var cli_reference_default = "# @lotics/cli \u2014 CLI Command Reference\n\nPer-command syntax, flags, contracts, and gotchas for the public `lotics` CLI. Start at [AGENTS.md](../AGENTS.md) for the model this reference assumes; `lotics --help` is the authoritative, always-current verb list.\n\n| Command | What it does |\n|---|---|\n| `lotics` / `lotics --help` | Show full help: capabilities, the verb list (\xA7 COMMANDS), flags, config. `lotics <verb> --help` prints that verb's entries alone (`lotics model --help`, `lotics file download --help`); `lotics report --help` prints the report frame. |\n| `lotics auth signup <email>` | Create account + org + API key, sends magic link email. Registers the new org as a profile; `--local` pins this directory to it (pointer) instead of setting the global default. |\n| `lotics auth login <email>` | Sign in an account that already exists, on a machine holding no key. **Two steps, and it does not wait for the person.** The first prints the page to open \u2014 `https://lotics.ai/cli_login/<request_id>`, also mailed \u2014 and the code that page must show, records the request, and exits 0. They sign in there if asked, check the code and press Confirm. **Then the next command that needs a credential collects the key** before it does its own work, so the second step is just re-running whatever was wanted; a command run before Confirm exits 1 naming the page and the code again, and once the 15 minutes are up it says to ask again. The handful that run WITHOUT a credential \u2014 `docs` among them \u2014 claim nothing, so one of those run after Confirm still answers as though signed out. `--wait` keeps one command instead, holding the terminal until Confirm; `--local` pins this directory to that org rather than setting the global default, and implies `--wait` (a pin names THIS directory, so only the terminal that stays in it can write one). `--json` prints `organization_id`, `workspace_id` and `organization_name` when it finishes signed in, and `request_id`, `confirm_url`, `code`, `email`, `expires_at` when it is the first step. The request's secret is never printed and the org's key never leaves the store. |\n| `lotics auth api-key [key]` | `whoami` \u2192 **upsert** the key's org as a profile in the global store (never overwrites). The profile records the instance the key was verified against (`LOTICS_API_URL`, default `https://api.lotics.ai`), and every later command for that org goes there. `--local` additionally pins this directory to it (pointer) instead of setting the global default. |\n| `lotics auth web` | Send a magic link email to access the web app (requires auth) |\n| `lotics auth whoami` | Print active account name, email, org, resolved workspace, the instance the credential belongs to, which **kind** of credential this machine holds (a sign-in from `auth login`, or an API key \u2014 read from the saved profile, and from the server when the profile does not say, which covers `--api-key`/`LOTICS_API_KEY` and a profile saved before the field existed; unknown only when neither can say), and the resolution **source** (flag/env/local/app-manifest/global). `--json` adds `workspace_id`, `api_url`, `credential_kind` + `source`. |\n| `lotics auth logout [<name\\|id>]` | In a pinned dir: delete the local pin. Else: remove the profile (default the active org), `--all` for every one. What happens server-side depends on which KIND of credential it is. A **sign-in** (`auth login` / `auth signup`) is revoked \u2014 logging that terminal out ends its credential rather than leaving a live one behind; a server that cannot be reached, or a credential already dead, never blocks the local forget, and one line names the org and Settings \u2192 Security \u2192 *Keys and terminals*. An **API key** (`auth api-key`) is only forgotten here \u2014 an admin issued it and it is routinely on a server and on other machines, so one terminal signing out must not kill it for everyone; the line says it is still active and names both pages, because Settings \u2192 API keys is admin-only and the credential may well be the holder's own sign-in, which they revoke themselves at Settings \u2192 Security \u2192 *Keys and terminals*. A profile saved before the kind was recorded states nothing, so the SERVER is asked (`auth whoami`) and it is revoked only if the answer is a sign-in: an older server, a credential minted before the column, and a request that fails all leave it alone. |\n| \u2014 | **A refused credential says which of three ways it is dead, and names the remedy that ends its kind.** `This credential expired.` / `was revoked.` / `belongs to a member who is no longer active in this organization.` carries `Run \\`lotics auth login <email>\\` to sign in again.` for a sign-in and `Ask an admin for a new API key (Settings \u2192 API keys).` for an issued key. A credential minted before that was recorded still gets BOTH in one sentence, because nothing on the row tells them apart \u2014 so a headless box is never sent looking for a browser alone. A key the server does not recognize at all gets one flat `Invalid or disabled API key.` \u2014 deliberately, so a guessed key learns nothing, not even that it named a row. The body carries `reason` for a script to branch on, since the code stays `unauthorized` for every 401. |\n| `lotics org` | List saved orgs (profiles) from the global store with the instance each belongs to, marks active for this directory (a local pin wins over the global default). |\n| `LOTICS_ORG=<name\\|id>` | Scope every command in this shell to one saved org. **Resolved once, before any command dispatches**, so a value matching no saved credential refuses every verb with one sentence \u2014 a read, a write, and a local check that needs no credential alike \u2014 and refuses it before the first byte is written. It refuses even when a credential arrives another way, because `--api-key` / `LOTICS_API_KEY` outrank it in the precedence chain and a write must never fall through to whatever THOSE name while the variable says otherwise; when the variable resolves and a key is also given, the key decides and the command says so. The refusal lists the orgs this machine holds, so it is answerable without another command (`lotics org` is refused by the same rule). A name is whatever the credential was SAVED under \u2014 a server-side rename never moves it, and the new name resolves too, so both keep working and `lotics org` prints the pair. |\n| `lotics org use <name\\|id> [--local]` | Switch the active org by org name (case-insensitive, ambiguous \u2192 error) or id. No flag \u2192 global `active_org`; `--local` \u2192 a `.lotics/config.json` pointer in the current dir. |\n| `lotics workspace` | List workspaces in the active org, marks current with `(current)` |\n| `lotics workspace select <id>` | Set the workspace in the **active scope** \u2014 a local pin if the dir has one, else the active org's global profile. Records the workspace's NAME beside its id, which is what the `lotics \u2192 <org> / <workspace>` echo prints; `workspace list`, `workspace create`, `workspace rename` and `org use` record it too, so a target is named rather than identified. Until one command has listed it, the echo prints the id and says the name is not known yet. |\n| `lotics workspace create <name> [--timezone <Area/City>] [--currency <ISO>]` | Create a new workspace (admin only), auto-switches to it. Neither flag is defaulted from THIS machine, unlike signup: an extra workspace is routinely created by an operator for somebody else. Without `--timezone` the new workspace inherits the zone of the org's OLDEST workspace; without `--currency` it takes the org's default. Both ride the create, so the workspace is never briefly denominated in a currency nobody asked for. `--currency` takes an ISO-4217 code (case-insensitive; anything else is refused). |\n| `lotics workspace rename <name>` | Rename the **current** workspace (admin only) \u2014 the endpoint takes its target from the request's workspace, never a path id, so switch with `workspace select <id>` first and read the `lotics \u2192 <org> / <workspace>` echo before trusting it \u2014 both halves are names, and the rename moves the cached one in the same act. Carries the workspace's existing `default_currency` and `timezone` through unchanged: the endpoint takes the whole settings triple, so sending only a name would blank the other two. |\n| `lotics workspace settings [--name <n>] [--currency <ISO>] [--timezone <Area/City>]` | Change the CURRENT workspace's name, default currency or timezone \u2014 `PATCH /v1/workspace`, admin only. Only what you name changes; the endpoint takes the whole triple, so the CLI carries the two you did not. `rename` is this verb with the name alone, which is why it can never forget the other two. Both values are invisible once they are wrong: the currency decides how every money field RENDERS and the zone decides how every date BUCKETS, on a workspace whose whole purpose may be to look like the customer's own. `--json` prints the updated workspace. |\n| `lotics workspace delete <id> --yes` | Delete a workspace by id (admin only). **Soft delete** \u2014 `archived_at` is set, so it drops out of listings, can no longer be selected, and its tables/records go dark, while the data is retained and recoverable. Its **apps are cascade-archived** too \u2014 every app entry point (embedded, public link, standalone subdomain, incl. anonymous public links) stops serving. Refuses the org's **only** active workspace (400) and any workspace outside the caller's org (404). Requires `--yes` to confirm (destructive; the CLI is used non-interactively). |\n| `lotics workspace doctor` | Report workspace-wide dangling schema references via `GET /v1/workspaces/dangling-references` \u2014 every active app/workflow artifact whose prefixed schema id no longer resolves, printed as `<referent.kind> \"<name>\" (<id>) \u2192 <namespace> <id> (missing)`; healthy prints a one-line all-clear. **Exits non-zero (exit 1) on findings** so scripts can gate on it. Resolves the first workspace like every data command (runs before the global workspace resolution). Admin-only. |\n| `lotics tools` | List tools by category with descriptions |\n| `lotics tools <name>` | Full description + JSON Schema for one tool |\n| `lotics run <tool> '<json>'` | Execute a tool (text output via toModelOutput). Args may also come from a file (`lotics run <tool> @args.json`) or stdin behind the `-` sentinel (`cat args.json \\| lotics run <tool> -`) \u2014 both bypass the OS `ARG_MAX` limit for large payloads (a knowledge-doc `content`, a bulk update). A leading `@` on the args is unambiguously a file path (JSON args start with `{`). **Stdin is asked for, never guessed.** `lotics run <tool>` with no payload runs the tool with no arguments and returns at once. `lotics report` takes the same sentinel. In PowerShell use `@file`: quotes inside an inline argument are consumed by the shell, and the CLI reports the JSON it received with its quotes gone \u2014 the error names both escapes. |\n| `lotics run <tool> --json '<json>'` | Execute a tool (full JSON output) |\n| `lotics run <tool>` \u2014 **file cells** | A file in a tool's result carries its `fil_\u2026` id and metadata and **no `url`**, on every tool and in both output modes. That is not a broken file \u2014 this surface resolves no URL for a cell. Reach the bytes with `lotics file download <file_id>`, which takes the id straight from the cell; the text output says so whenever a result carries one. |\n| \u2014 | **Every tool is invoked here, including the ones that RUN something** (`run_app_workflow`, `run_app_agent`, `run_app_query`) and every one that changes an app (`set_app_query`, `set_app_workflow`, `set_app_agent`, `update_app`, `rollback_app`). A command exists only for work that touches a local file: `model apply`, `model pull`, `app create --custom`, `app pull`, `app deploy`. |\n| \u2014 | **The exit code reports the WORK, not just the call \u2014 for the two tools that RUN one.** `run_app_workflow` and `run_app_agent` whose envelope carries a failed `status` (`error`/`failed`/`cancelled`) exit non-zero and print `<tool> \u2192 <status>: <message>` to stderr, so `lotics run \u2026 && next-step` cannot walk past a refused run. The rule is an allowlist of FAILURE \u2014 an unrecognized status exits 0, so a status added later never turns a working script red. A parked run (`awaiting_input`) is not a failure: it is waiting for an answer and the work is still live. Only a TOP-LEVEL `status` counts; one inside the data belongs to the data. Any OTHER tool's `status` is data, and exits 0. |\n| `lotics run <tool> --print-created` | Report the records the call created, grouped by table, with a paste-ready `delete_records` per table and the mandatory caveat naming what cannot be auto-undone (external integrations, notifications, possible sub-workflows). Works for any tool that returns a `side_effects` block, not workflows alone. |\n| `lotics run <tool> --cleanup` | Implies `--print-created`, then runs those deletes \u2014 harvested records **only**, never files / external calls / notifications. **Not a rollback**; a rollback is structurally impossible here. A partial cleanup exits non-zero so a script cannot read it as success. |\n| `lotics file upload <file\\|dir...>` (alias `lotics upload`) \xB7 `--stdin` \xB7 `--base64` \xB7 `--url <url>` | Upload files/directories. **The transport is chosen by size and is not a flag**: under 8 MiB the file is POSTed to `/v1/files` in one request, and several such files go in the same one; at or above it the CLI takes presigned part URLs and PUTs the bytes straight to object storage, so they never pass through the API. That threshold matches the AWS CLI's own `multipart_threshold`, and the number matters less than there being nothing to choose \u2014 one verb, any size, up to the 2 GiB a workspace may store. A large upload reads one part at a time, so memory stays flat regardless of file size, and a failure part-way abandons the parts already sent rather than leaving them billable and invisible. A directory expands to its immediate files; `--as <name>` renames a single upload. **Three alternative byte sources, for a caller that never had the bytes on disk** \u2014 an attachment decoded in memory, a generated document, a signed download link \u2014 each mutually exclusive with the others and with a path argument: `--stdin` takes raw bytes on stdin, `--base64` takes base64 on stdin (the shape attachments arrive in), `--url <url>` fetches the URL first. `--stdin`/`--base64` REQUIRE `--as`, because stdin carries no filename and the mime type is derived from it; `--url` falls back to `Content-Disposition` then the URL's last path segment. `--base64` decodes STRICTLY \u2014 `Buffer.from(s, \"base64\")` silently skips invalid characters and truncates on bad padding, so a corrupted pipe would otherwise store a short file that only fails when a human opens it. The `--url` fetch happens in the CLI, not the server: the URL comes from the operator running the command, so routing it through the backend would add an SSRF surface to buy what `curl` already does. |\n| `lotics file download <file_id> [<path>]` \xB7 `-o <dir>` | (alias `lotics download`) Download a stored file: `GET /v1/files/{id}/signed_url` \u2192 fetch the presigned URL and write it where you asked. **The two spellings mean two different things, and neither is read by shape: the positional `<path>` is the FILE to write, `-o <dir>` is the DIRECTORY to save into.** That is `cp` and `curl -o`, so nothing here consults an extension. A named file is written as named, its parent created, overwriting what is there \u2014 the point of naming it is that the next command opens that exact path. A directory is created if missing and written into under the stored filename (the response's `Content-Disposition`), taking a free spelling beside a file of that name already there so a repeat download never clobbers the first; with no destination at all, that filename lands in cwd. Give the destination once \u2014 a positional and `-o` together is refused, as is a positional that names an existing directory or ends in a separator (`a directory goes in -o`). The first argument is a **file id**, so a path in that slot is refused rather than sent as an id. The written path goes to **stdout** (under `--json`, `{file_id, path, filename, stored_filename}`) and the narration to stderr, so a download pipes into whatever opens it. `lotics file download record <record_id> <field_key> [-o <dir>]` spreads every file on a record's file field over a DIRECTORY \u2014 there is no single file for N files to be. |\n| `lotics file list [--limit <n>] [--cursor <token>]` | The workspace's files, newest first \u2014 id, upload time, bytes, MIME type, filename on stdout, one per line (`--json` for the object). `GET /v1/files` with no `file_ids`. A file holding the content of a knowledge doc or template you cannot use is left out. **A page, not a dump**: the store only ever grows, so the last line prints the command for the next page and `next_cursor` is null on the last one. The cursor is opaque and keyset \u2014 pass it back as given \u2014 so an upload landing mid-sweep cannot make a walk skip or repeat a row. Every other file verb takes an id, so this is the only answer to \"what is in here\" short of reading Postgres. |\n| `lotics file delete <file_id>` | Archive a stored file, over the `delete_file` tool. **Refused while a record cell, a comment, a knowledge doc, a document template or a voice session still references it** \u2014 the refusal names the referents, so this is safe to try. The bytes are left in object storage; the row no longer serves them, which is what \"deleted\" means here. There is no `lotics delete`: the verb needs its noun. |\n| `lotics knowledge list [--include-hidden]` | `GET /v1/knowledge_docs` \u2014 a table of id, name, tags, description (`--json` for the docs). **REST, not the `list_knowledge` tool**: the tool answers what the ASSISTANT may browse, and a hidden doc is out of that corpus by definition, so a tool-backed listing could never show one and the person who hid it would have no way back to it. Hidden docs are left out unless `--include-hidden` asks; those rows are marked `(hidden)`. |\n| `lotics knowledge create --name <n> [--description <d>] [--tags <a,b>] (--from <file.md> \\| --content <str>)` | Read the body client-side (a file XOR an inline string \u2014 exactly one required), then call `create_knowledge` with `{ name, description, content, tags? }` (description defaults to `\"\"`). `--tags` files the doc as it is made, which is the only moment a corpus reliably gets labelled. Prints the new id to stdout. Large files ride the POST body fine. |\n| `lotics knowledge get <id> [-o <file.md>]` | `GET /v1/knowledge_docs/{id}` (`getKnowledgeDoc`) \u2192 the doc with its **hydrated `content`** (the one content-read path for a non-sandbox client). `-o` writes the body via `writeFileAtomic`; else the body goes to stdout. `--json` prints the full doc instead. |\n| `lotics knowledge update <id> [--from <file.md> \\| --content <str>] [--name <n>] [--description <d>] [--tags <a,b>]` | Call `update_knowledge` with **only** the provided fields (a body from --from/--content becomes `content`; the tool diffs + CASes the content change internally, so the CLI passes no `expected_content_file_id`). `--tags` REPLACES the doc's label set \u2014 the single-doc form, where the caller is looking at one doc and can state what it should carry. At least one field required; --from and --content are mutually exclusive. |\n| `lotics knowledge tag <id...> [--add <a,b>] [--remove <c,d>]` | `PATCH /v1/knowledge_docs` with `{ knowledge_doc_ids, add_tags?, remove_tags? }` \u2014 one transaction over the whole set. A **DIFF applied to each doc's own labels**, never a replacement: the docs named on one command line carry different labels, so one array across them would strip whatever the others were filed under. Removal matches case-insensitively; adding a label a doc already carries writes nothing. Ids may be separate arguments or comma-separated. At least one of --add/--remove required. |\n| `lotics knowledge hide <id...>` / `lotics knowledge unhide <id...>` | `PATCH /v1/knowledge_docs` with `{ knowledge_doc_ids, hidden }`. Hiding takes docs out of every **listing** \u2014 the Library's list, `list_knowledge`, and the corpus `grep_knowledge` searches \u2014 while leaving IAM untouched and keeping them readable **by id** (`read_knowledge` with an id, a code run staging one, an app agent's declared set). So it can never silently break an app that depends on a doc, and unhiding costs nothing. Refuses the no-argument form rather than reading it as \"everything\". |\n| `lotics knowledge rm <id>` | Archive the doc via `delete_knowledge` (`{ knowledge_doc_id }`). The REST execute path does not gate `needsApproval`, so this runs unattended. |\n| `lotics setup <model.json> [--email <addr>] [--json]` | **The whole first run, in one command.** Creates an account when this machine has no credential (the same call `auth signup` makes \u2014 `--name` and `--timezone` apply), then applies the model to its workspace, then prints the one-time sign-in link. **When that email already has an account it hands over to the `lotics auth login` flow** \u2014 it prints the sign-in page to open and the code it must show, and **exits 1 having created nothing**; the person presses Confirm and runs the same command again, which collects the key and carries on into the model. (`--wait` holds the terminal through the Confirm instead, finishing in one command.) The re-run is not refused for naming an `--email` it is now signed in as \u2014 that address IS the account it holds, not a second one. The file is a workspace MODEL, and it is read and checked before an account is created, because a file with a typo in it must not leave an organization behind. Then it is `lotics model apply` run on the new workspace: its tables, rows and apps; the sign-in link lands on its app when it has one, else on the workspace's app list. It exists because the two-command form has a seam where the FIRST command exists only to produce a credential for the second, and a caller pasting a prompt has to get both right. **`--email` is only for creating an account**: with a credential already resolvable it is REFUSED rather than obeyed, because the two can name different organizations and preferring either one silently writes into an org the caller did not name \u2014 the message says how to do each thing on purpose. Without it, `setup` applies the model to the account you already have. A path positional after the file is accepted and IGNORED with a warning \u2014 `setup` writes nothing to disk \u2014 so a prompt that passes one still runs. **`--json` prints one object on stdout and nothing else** \u2014 what `lotics model apply --json` does (`tables`; `apps`, each with `alias`, `app_id`, `version_id`, `origin`, `address` and `findings`; and `findings`) plus `organization_id`, `workspace_id` and `signin_url`, and a `warnings` array carrying everything the prose form would have said out of band, such as a sign-in link that could not be minted. A warning is never merely silenced: when the command fails with an error before it can emit, the ones it had collected go to stderr alongside it. Reachable with no install: `npx -y @lotics/cli setup \u2026`. |\n| `lotics model apply <model.json> [--app <alias> ...] [--plan] [--json]` | **The model, applied to this workspace, through the `apply_model` tool.** The file is read and checked with the validator the server runs, every problem in one run, before anything is uploaded. Documents a row attaches by a path beside the file are uploaded first and the rows sent with their `fil_` ids; a path this workspace already recorded keeps its id, so a re-apply uploads nothing twice. Then the tool adopts or creates every table (the table this workspace bound the entity to, else an existing table of the same label, is ADOPTED and given the fields, options and views it lacks; no stored value changes), writes first rows only where every bound table is empty, and mints a new version of each app the model declares \u2014 `--app` (repeatable, comma-separated) narrows which apps, while the tables are applied whole. Prints one line per app \u2014 alias, `app_id`, `created`/`updated` with the version minted or `unchanged`, and the address it is served at \u2014 then the model's notes once, as the server states them. **`--plan` writes nothing and uploads nothing**: it prints what the apply would do to the tables (what it would create, what it leaves as the workspace has it, what the two disagree about), which apps it would create or update, and what it would refuse an app for, exiting 1 when it would refuse one; workflow bodies are checked only at apply, since they name fields a plan has not created. **A rollback restores an app's earlier version** (`lotics run rollback_app`); table changes and data writes stay. Resolves and ANNOUNCES its workspace first. `--json` prints `{workspace_id, tables, apps, findings}` on stdout (with `--plan`, each table and app is what the apply would do), or `{ok: false, findings}` when the file does not check. |\n| `lotics model pull [-o <model.json>]` | **This workspace's model, rebuilt from what owns each part** \u2014 the tables, fields, options, templates and roles the workspace holds, how rows are recognised, and each app's body from its current version \u2014 through the `get_model` tool, as the file `model apply` reads: to stdout, or to the file `-o` names. What the workspace holds that a model cannot state is printed on stderr, never written into the file. Applying what it wrote changes nothing. |\n| `lotics app create <name> --custom [path]` | **A custom-code app**: creates the app (`POST /v1/apps`), scaffolds a Vite + React + TypeScript project into `[path]` (default `./<name>`, refused when not empty \u2014 before the app row exists) that depends on `@lotics/app-sdk` alone and draws with plain React, and installs it (`npm install --ignore-scripts`), then writes the declarations of the app's live bindings (`get_app_types`) into `.lotics/`, which the project's `tsconfig.json` includes. `package.json#lotics` names the app and its workspace, which is how `app deploy` in that directory finds both. The app has no version until the first `lotics app deploy`. `--custom` is required: an app the runtime draws from a model is made by `lotics model apply`. The SDK's reference is `node_modules/@lotics/app-sdk/AGENTS.md` inside the project. |\n| `lotics app pull [app_id] [path]` | **A custom-code app's live source, as a project ready to deploy on it.** The target is `[path]`, else this directory when it is the app's project (or no app is named), else `./<name>`. **The app's own project is brought up to date in place** \u2014 but only when it holds no edit since the version `package.json#lotics.current_version_id` names: its source (packed as a deploy packs it) is compared with that version's archive, ignoring `.lotics/` and `package.json#lotics`, and any difference refuses the pull, naming the changed files; a pull never merges, so local work is never lost. Already at the live version is a no-op that says so. **An empty or new directory receives the source whole**; any other directory is refused. Downloads come from `GET /v1/apps/{id}/versions/{version_id}/source`. `package.json#lotics` is then set to exactly the app, its workspace and the pulled version, dropping every other key an older CLI wrote there, so the next `lotics app deploy` builds on the live version; then `.lotics/` is written (`get_app_types`) and dependencies installed (`npm ci` with a lockfile, else `npm install`, both `--ignore-scripts`). A JSON app has no source tree: the server's refusal names `get_model`, and `lotics model pull` is its pull. |\n| `lotics app deploy [-m <message>]` | **Build this directory and upload it as a new version of the live app.** Rewrites `.lotics/` with the declarations of the app's live bindings (`get_app_types`, replacing each file there), then runs the project's `npm run typecheck` (warned about when absent) and `npm run build`, tars the source (without `node_modules`, `dist`, `.git`, `*.tsbuildinfo`) and `dist/`, and posts both to `POST /v1/apps/{id}/versions` on the version `package.json#lotics.current_version_id` names, then stamps the new one there. The version carries the app's queries, workflows, agents and capabilities forward unchanged \u2014 those are written through their tools. A project with no `build` script, or whose `package.json#lotics` still declares `queries`, `workflows`, `agents` or `capabilities`, is refused before anything is built; the refusal names the tool that sets each. **A 409 because another version went live since this directory's last deploy** (a deploy from elsewhere, a rollback) prints the server's sentence and the version that is live, and names `lotics app pull`: run in this directory, it brings an unedited project up to date, and lists the files a project with edits changed, to carry over into a fresh pull. `-m` (or a bare positional) is the version's message, optional. The workspace comes from `package.json#lotics.workspace_id` unless `--workspace` / `LOTICS_WORKSPACE` names another. |\n| `lotics docs` \\| `lotics docs <area>[/<section>]` | **This CLI's own references, carried inside the binary** \u2014 the model reference, this index, and every doc under `docs/` \u2014 so the doc a reader opens always describes the binary answering. Capped at ONE PAGE: a doc that does not fit prints its opening and the addresses of what it holds (`lotics docs <area>/<section>`, each section's size beside it, or a table's row names), and every address prints within a page. A custom-code app's SDK reference ships inside `@lotics/app-sdk` in the app's `node_modules`. |\n| `lotics upgrade` | Update this CLI in place. Runs the same installer a person would, chosen by how THIS copy arrived: an npm install upgrades through npm, a script install re-runs the script \u2014 the runtime knows which (the executable is compiled, the npm bin runs under node), so nobody has to. It downloads nothing itself; resolving a version, verifying the checksum and replacing a running executable already exist in the installers, and a second copy of that inside the binary would be a second thing to get right. Replacing the binary while it runs is safe \u2014 a rename leaves the running image mapped on unix, and on Windows the installer moves the old aside precisely because the file is in use. Already current is a no-op that says so. Needs no auth. |\n| `lotics docs model` \\| `lotics docs model/<section>[/\u2026]` | **The model reference, from inside the binary** \u2014 the one doc this CLI carries rather than resolves, because it describes this CLI's own model checker; listed first by `lotics docs`, at this CLI's version. Its first page is what a model composes with, the working order (jobs \u2192 entities and fields \u2192 `records` \u2192 one app per job \u2192 `model apply`) and the section addresses; every page of it is whole. Every top-level key of a `model.json`, every field `type` the contract admits with the config each one needs, the option / view / role / inline-template shapes, `records` (how a row of each entity is recognised), `write_rules`, `apps` (each register, record, act and check), the row format (relative dates `@today` / `@month-start` with whole-day offsets; links as `\"<entity-alias>:<ref>\"`), the rules, and one complete worked example; it points at `https://lotics.ai/presets/index.json` for complete example models of several trades. **Offline, no account.** |\n| `lotics report '<json>'` \\| `lotics report @report.json` | File a report with the Lotics team about what got in your way. **Covers the classes telemetry structurally cannot see**: a capability that does not exist (no command ran, so nothing was recorded), a command that exited 0 having done the wrong thing, an error whose message did not name the remedy, and anything that made authoring slower than it should be. **A frame, not a paragraph** \u2014 `{goal, actual, expected?, tried?, wanted?}`, `goal` and `actual` required, unknown keys dropped rather than refused. **No severity or category.** Ingest is inline JSON, `@file`, or `-` for stdin. A bare sentence is refused with the frame printed beside it, so the fix is one step; a bare invocation prints the frame BEFORE asking for a credential, since someone whose key will not resolve is exactly who has something to report. **Not spooled**: unlike telemetry it posts inline, prints whether it landed, and exits non-zero if it did not, echoing the report back so a failed send never loses it. Runs regardless of `LOTICS_TELEMETRY` \u2014 invoking it IS the consent that passive collection needs an opt-in for \u2014 but with telemetry off there are no recorded commands to attach, and it says so rather than implying context it does not have. Requires auth. Never paste records, file contents, or credentials. **Prints the id of each frame filed** \u2014 a filing nobody can cite cannot be answered about. The ids come from the server, so an instance that only logs the frames prints the count alone; the CLI never mints one of its own, which would hand back a token that resolves to nothing. |\n\n";
 
 // docs/data_model.md
 var data_model_default = '# The data model \u2014 tables, their fields, and how they relate\n\nThe decisions here outlive any one app, and most become expensive the moment a second screen depends\non them. They stand apart from building an app on purpose: **every workspace starts with tables\nand many never get an app**, so schema design is not a chapter of app building.\n\nThe rules below share one signature. **Both sides read correctly on their own**, so nothing reports\nthe problem \u2014 no error, no empty column, no failing query. Each is found by looking for it. Then,\nunder **Fields**, what each field type takes.\n\n## One fact, one column\n\n**Read the table\'s existing fields first, and add nothing that stores a fact the table already\nstores.** A value written as text and the same value held as a `select_record_link` are one fact in\ntwo columns \u2014 a customer\'s city typed into a text box beside a link to the city record, a status\nword beside the select that decides it, a total beside the formula that computes it.\n\nTwo columns for one fact do not stay equal. Some writer sets only one of them, and nothing reports\nthe divergence: both rows still look correct on their own. A reader that then matches on the text\nhalf treats "Acme" and "Acme Ltd" as different records, so an import creates a duplicate every time\nit runs.\n\n- **Prefer the link, the select, or the formula.** Text is a RENDERING of a record; compose it when\n  you read, rather than storing it a second time.\n- **Renaming, retyping or re-pointing the existing field beats adding another.** A field\'s key is\n  stable, so a rename breaks nothing that addresses it by key.\n- **Superseding a field means DELETING it**, not leaving it beside its replacement with a\n  description that says which one is real.\n- **Empty is not the same as redundant.** A field nothing fills may still be the only home for a\n  real distinction \u2014 read what it MEANS before removing it.\n\n## One entity, one table \u2014 and the test is measurable\n\nVariation belongs in a column \u2014 a multi-select role, a kind, a stage \u2014 not in a second table. Two\ntables for one kind of thing give the same real-world entity two rows, two ids and two halves of its\nhistory, and each screen shows whichever half it happens to link to.\n\nSplit tables are often right. A supplier book beside a customer book is a normal shape, and merging\non suspicion is a large repoint bought for nothing. So do not argue it in the abstract:\n\n> **List both tables\' names and look for one that appears in both.**\n\nNone means the split is holding. One means it has broken \u2014 the usual cause is a party you begin to\ninvoice as well as buy from \u2014 and the fix is to merge before a second screen depends on the copy.\n\nWorth writing as a test rather than a note, because a note about a condition nobody re-checks goes\nstale in silence.\n\n## One vocabulary wherever values are COPIED between tables\n\nTwo `select` fields for one concept carry DIFFERENT option keys even when their labels match \u2014 keys\nare minted per field. So anything moving a value between them needs a hand-written key map.\n\nThat map is code. Put it in one named module with a test; written inline at the copy it is invisible,\nuntested, and silently wrong the first time somebody renames an option, because a rename leaves the\nkey intact and the map still compiling. Prefer a link to a shared reference table where the set is\nopen or growing; keep a map only for a small closed set.\n\nWhere one side genuinely holds MORE values than the other, that is not drift \u2014 it is the model\ntelling the truth. The wider side must **refuse** what the narrower one cannot express rather than\nquietly picking the nearest value.\n\n## A copy boundary accounts for EVERY source field\n\nEach field on the source gets a column on the destination, a deliberate drop with the reason written\ndown, or a refusal.\n\nA field with nowhere to land is data destroyed at the boundary, and it is invisible afterwards: the\ndestination is not empty and not obviously wrong \u2014 just a number that no longer agrees with where it\ncame from.\n\n## Provenance is a LINK, not a flag and not a copy\n\nA row created BY another row carries a link to it.\n\nThat link is what makes "is this the estimate or the actual", "where did this come from" and "have we\nalready imported this" answerable at all. A boolean records that something was true once; a link\nstays true, survives a rename, and lets the next write UPDATE the original instead of adding a second\nrow beside it.\n\n## Say what makes two rows the SAME row\n\nDeclare the natural key in the table\'s description.\n\nAnything that imports, reconciles or de-duplicates has to decide identity, and with no declared key\nit falls back to comparing displayed text \u2014 which is how one company arrives three times under three\nspellings. Name the key: a reference number, a tax id, a link plus a period. Then match on `rec_\u2026`\nand `opt_\u2026`, never on rendered labels.\n\n## A state\'s HISTORY is rows, not columns\n\nA `changed at` column says only how long a row has been where it is now \u2014 the next move overwrites\nit \u2014 and a date column per state holds until something re-enters a state it already left.\n\nMeasuring time-in-state or conversion needs one ROW per move: a link to the subject, the state left,\nthe state entered, when. Hold those states as the source field\'s own `opt_` keys so the log carries\nno second vocabulary, and write the rows from that table\'s own lifecycle workflows, which covers\nevery writer rather than one app\'s.\n\n## Keep derived chains shallow\n\nFormulas and rollups are computed and STORED when a row is written, and one that reads another\nrecomputes with it. A rollup over a formula over a formula is paid three times on every touch, and\nagain for every row upstream of it.\n\n**Depth costs more than row count.** This is the optimisation lever that actually exists here; row\nscanning is the platform\'s problem, chain depth is yours.\n\n## Changing a money formula on a live table\n\nFormula edits recompute every row, so the only honest proof that one changed nothing it should not is\nthe numbers themselves:\n\n1. Snapshot the affected totals to a file.\n2. Make the change.\n3. Diff. Identical is the pass.\n\nAnd when a formula gains a new field, **test that the value IS the one you want, never that it\ndiffers from it** \u2014 an empty cell reads as `""`, which differs from every option key, so the inverted\nspelling silently zeroes every row written before the field existed.\n\n## Fields\n\nWhat `create_table` and `update_table` take in `add_fields`, and `update_table` in `update_fields`.\n\n### Types and formats\n\n`type` is one of `text`, `number`, `date`, `boolean`, `select`, `select_member`,\n`select_record_link`, `files`, `formula`, `rollup`, `lookup`, `autonumber`. `button` is retired: an\nexisting button field keeps running, but none is created, converted to or edited.\n\nA URL, an email, markdown, a checkbox, a datetime, a currency or a percentage is a `format` on\nanother type, never a `type`:\n\n| Wanted | Field |\n|---|---|\n| URL or external link | `{ type: "text", format: "link" }` |\n| Email or phone | `{ type: "text" }` |\n| Markdown | `{ type: "text", format: "markdown" }` |\n| Checkbox | `{ type: "boolean" }` |\n| Money | `{ type: "number", format: "currency", currency: "USD" }` |\n| Percentage | `{ type: "number", format: "percentage" }` |\n| Datetime | `{ type: "date", format: "datetime" }` |\n| Date range | `{ type: "date", format: "date_range" }` |\n\n### Properties\n\nA type\'s properties sit **directly on the field object** \u2014 there is no `config` wrapper. A property\nmay itself hold an object (`formula`, `aggregate_option`, `filter`, `order_by`); its inner keys stay\ninside it. Each type takes only its own:\n\n- **text** \u2014 `format?` (`"text"` | `"link"` | `"markdown"`), `unique?`, `default_value?` (a string).\n- **number** \u2014 `format?` (`"number"` | `"currency"` | `"percentage"`), `currency?` (an ISO 4217\n  code), `unit?`, `unit_field?`, `currency_field?`, `default_value?` (a number). On `update_fields`,\n  null clears `currency`, `unit`, `unit_field` or `currency_field`.\n  - `unit`, beside format `"number"`: a measured code \u2014 g, kg, t, l, m3, cbm, mm, cm, m, km, m2,\n    min, h, day \u2014 or a counted noun such as `ki\u1EC7n`. A change between two units of one dimension\n    converts every stored figure; any other change relabels.\n  - `unit_field`: A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s unit: every option label is a unit as `unit` takes one. In place of `unit`; only beside format "number".\n  - `currency_field`: A single select on the same row, or a lookup of one through a one-link, whose chosen option is that row\'s currency: every option label is an ISO 4217 code. In place of `currency`; only beside format "currency".\n- **date** \u2014 `format?` (`"date"` | `"datetime"` | `"date_range"` | `"datetime_range"`), `timezone?`,\n  `derive_from?`, `default_value?` (a date string). `derive_from: "created_at"` stamps the row\'s\n  creation once, `"updated_at"` re-stamps on every update; the field is then read-only, takes no\n  `default_value`, and holds only the `date` and `datetime` formats.\n- **boolean** \u2014 `default_value?` (`true` | `false`).\n- **select** \u2014 `options` `[{ name, color?, mark? }]`, `multi?`, `default_value?`.\n- **select_member** \u2014 `multi?`, `default_value?` (member ids).\n- **select_record_link** \u2014 `table_id`, `display_field_keys?`, `sync_both_ways?`, `cardinality?`,\n  `paired_field_name?`, `paired_field_display_field_keys?`. Without `display_field_keys` a link shows\n  the target\'s autonumber, else its first text field. `sync_both_ways: true` on an existing one-way\n  link makes it two-way \u2014 never add a second link for that. `cardinality: "one"` marks the child\n  side of a parent-child pair (the linked record is this one\'s parent); two paired sides cannot both\n  be `"one"`. The `paired_*` keys name and label the back-reference the target gets.\n- **files** \u2014 no properties.\n- **autonumber** \u2014 `template` (`"INV-{YEAR}-{N:4}"`; tokens `{N}`, `{N:W}` zero-padded to W,\n  `{YEAR}`, `{YEAR:2}`, `{MONTH}`, `{DAY}`), or `prefix` + `padding` (1\u201320) for `PREFIX-0001`.\n- **any type**, at create \u2014 `confirm_before_update?`: a person confirms each later edit.\n\n`default_value` fills the field on a NEW record that states no value; existing records are never\nbackfilled, and null clears it. A select\'s or a member field\'s default is an ARRAY even when the\nfield holds one (`["Unread"]`, never `"Unread"`) \u2014 option names in `add_fields`, where the keys do\nnot exist yet, and option keys (`opt_\u2026`) in `update_fields`.\n\n### Computed fields\n\nRead-only in records. `formula` is one key holding an object; a rollup\'s and a lookup\'s properties\nare separate keys on the field \u2014 `rollup: {\u2026}` and `lookup: {\u2026}` are refused as unrecognized.\n\nformula: { expression, format?, currency?, unit?, unit_field?, currency_field? }\n\n- `{Field Name}` or `{fld_key}` names a field of the same table, stored as its key, so a rename never\n  breaks the formula. A reference to no field, or a call to something that is no helper, is refused.\n- A select reads as an ARRAY of option keys: `{Status}[0]` for a single select,\n  `includes({Tags}, "opt_\u2026")` for a multi.\n- The operators, the helpers and how an empty cell reads are the `model` reference, section `formula` \u2014 a model\n  names fields by alias where a table tool names them by name or key; the language is the same.\n- On `update_fields` a key left out keeps its stored value, and null clears `currency`, `unit`,\n  `unit_field` or `currency_field`. `get_table` marks a formula that is null when every field it\n  reads is empty.\n\nrollup \u2014 `source_field_key`, `aggregate_option: { field_key?, operation }`, `filter?`\n\n- `source_field_key` is a `select_record_link` of this table; `aggregate_option.field_key` is a\n  field of the linked table, required by every operation but `count`, which counts linked records.\n- Operations by the aggregated field\'s type \u2014 none: `count`; any: `empty`, `filled`,\n  `percent_empty`, `percent_filled`, `unique`, `percent_unique`; number: `sum`, `avg`, `median`,\n  `min`, `max`, `range`; date: `earliest`, `latest`, `date_range`.\n- The cell\'s type comes from the OPERATION: `earliest` and `latest` hold a date, every other\n  operation a number (`date_range` counts days). A "most recent linked date" is `latest` \u2014 `min` and\n  `max` are numeric and refuse a date. A rollup takes no format, currency or unit of its own: `sum`\n  over money carries the aggregated field\'s currency, over a weight its unit.\n- Over a figure read in each row\'s own unit or currency (`unit_field` / `currency_field`), `sum`,\n  `avg`, `median`, `min`, `max` and `range` hold only where that select is a lookup, through the\n  link paired with `source_field_key`, of a single select on this table \u2014 the total reads in this\n  row\'s option of it. A lookup of such a field has no unit.\n- `filter` aggregates only the linked records it matches: a full group over the LINKED table\'s\n  fields \u2014 `{ node_type: "group", logic, children: [{ node_type: "condition", type, field_key,\n  operator, value }] }`, a select condition using `has_any_of` with an ARRAY value.\n\nlookup \u2014 `source_field_key`, `lookup_field_key`, `order_by?`\n\n- `lookup_field_key` is a field of the linked table. Without `order_by` the cell holds every linked\n  record\'s value; with `order_by: { field_key, direction }` (`desc` latest, `asc` earliest) it holds\n  the picked field of the single extreme record \u2014 a "latest linked X" that maintains itself.\n  Ordered lookups sharing one `order_by` resolve to the SAME record.\n\n### Examples\n\n```\n{ name: "Gi\xE1 b\xE1n", type: "number", format: "currency", currency: "VND" }\n{ name: "Tr\u1ECDng l\u01B0\u1EE3ng", type: "number", unit: "kg" }\n{ name: "S\u1ED1 l\u01B0\u1EE3ng", type: "number", unit_field: "\u0110VT" }\n{ name: "Tr\u1EA1ng th\xE1i", type: "select", options: [{ name: "M\u1EDBi" }, { name: "Xong" }] }\n{ name: "M\xE3 \u0111\u01A1n", type: "autonumber", template: "SR-{YEAR}-{N:4}" }\n{ name: "Kh\xE1ch h\xE0ng", type: "select_record_link", table_id: "tbl_x", sync_both_ways: true }\n{ name: "Total", type: "formula", formula: { expression: "{Price} * {Qty}", format: "currency", currency: "VND" } }\n{ name: "SL \u0111\xE3 giao", type: "rollup", source_field_key: "Giao h\xE0ng", aggregate_option: { operation: "sum", field_key: "S\u1ED1 l\u01B0\u1EE3ng" } }\n{ name: "Customer Name", type: "lookup", source_field_key: "Customer", lookup_field_key: "Name" }\n{ name: "Latest note", type: "lookup", source_field_key: "Calls", lookup_field_key: "Note", order_by: { field_key: "At", direction: "desc" } }\n```\n\n### Changing a field\n\nA field added by `update_table` shows in a view only when `add_to_views` names it, at the view\'s far\nright; `update_view` with `move_field` places it beside the columns it belongs with.\n\nAn `update_fields` entry is `{ field_key, name?, description?, convert_to?, \u2026 }` with the same flat\nproperties as `add_fields`, plus what only an update does:\n\n- A select\'s options change through `add_options` `[{ name, color?, mark? }]`, `update_options`\n  `[{ key, name?, color?, mark? }]`, `remove_option_keys` and `reorder_options` (every existing\n  option once, in order; options added in the same call follow). An option is named by its `opt_\u2026`\n  key (its name also resolves); a rename keeps every record\'s value. `mark` is the option\'s brand\n  (`{ kind: "brand", name: "tiktok" }`) or kit glyph (`{ kind: "icon", name: "wrench" }`), drawn in\n  place of its colour dot \u2014 every option of a field has one or none does, so marking sets them all\n  in one call and `mark: null` on each clears them.\n- A link\'s `sync_both_ways: false` disconnects the pair; a new `table_id` re-points it and clears its\n  record data; `cardinality` is `"one"` for the child side of a parent-child pair, `"many"` for peers.\n';
@@ -40302,8 +40495,8 @@ var migration_default = "# @lotics/cli \u2014 migration notes\n\nWhat to DO when
 
 // ../shared/src/doc_pages.ts
 var DOC_LINKS = {
-  cli: (path15) => `lotics docs ${path15}`,
-  tool: (path15) => `docs path="${path15}"`
+  cli: (path16) => `lotics docs ${path16}`,
+  tool: (path16) => `docs path="${path16}"`
 };
 var SOURCES = [
   { area: "model", file: "src/model_reference.md", marker: "a workspace starts here", readers: ["cli", "tool"] },
@@ -40505,8 +40698,8 @@ function renderDocIndex(areas, usage) {
   const lines = areas.map((a, index) => `  ${names[index].padEnd(width)}${titleOf(a.text)}`);
   return [...lines, "", ...usage].join("\n");
 }
-function readDocs(areas, path15, surface) {
-  const asked = (path15 ?? "").trim();
+function readDocs(areas, path16, surface) {
+  const asked = (path16 ?? "").trim();
   if (asked === "") return { text: oneNewline(renderDocIndex(areas, surface.usage)) };
   let hits = matchDocArea(areas, asked);
   let section;
@@ -40517,11 +40710,11 @@ function readDocs(areas, path15, surface) {
       section = asked.slice(cut + 1);
     }
   }
-  if (hits.length === 0) return { error: `No reference area matching "${path15}".
+  if (hits.length === 0) return { error: `No reference area matching "${path16}".
   ${surface.listHint}` };
   if (hits.length > 1) {
     return {
-      error: `"${path15}" matches more than one reference:
+      error: `"${path16}" matches more than one reference:
 ${hits.map((a) => `  \u2022 ${surface.link(a.area)}`).join("\n")}`
     };
   }
@@ -40702,7 +40895,11 @@ var COMMANDS = [
       "                                       @lotics/app-sdk, installed, and typed by the app's",
       "                                       bindings in .lotics/. An app stated in a model is made",
       "                                       by lotics model apply",
-      "  lotics app deploy [-m <msg>]         Rewrite .lotics/ from the app's live bindings, then",
+      "  lotics app pull [app_id] [path]      The live version's source, installed and typed, ready to",
+      "                                       deploy on it: this app's project is brought up to date in",
+      "                                       place (refused, naming the files, when it has edits since",
+      "                                       its version); an empty or new [path] receives it whole",
+      "  lotics app deploy [-m <msg>]       Rewrite .lotics/ from the app's live bindings, then",
       "                                       typecheck + build this directory and upload it as a new",
       "                                       version of the live app. Its queries, workflows, agents",
       "                                       and capabilities carry forward unchanged \u2014 each is set",
@@ -40768,8 +40965,8 @@ function helpEntries(help) {
   }
   return entries2;
 }
-function commandHelp(path15) {
-  const words = path15.filter((word) => word !== "");
+function commandHelp(path16) {
+  const words = path16.filter((word) => word !== "");
   if (words.length === 0) return null;
   const group = COMMANDS.find(
     (g) => g.verbs.includes(words[0]) || (g.aliases ?? []).includes(words[0])
@@ -40982,6 +41179,9 @@ function readAppWorkspaceId(projectDir) {
     return null;
   }
 }
+function readProjectAppId(projectDir) {
+  return stringOrNull(readLotics(projectDir)?.app_id);
+}
 function readAppMeta(projectDir) {
   const lotics = readLotics(projectDir);
   const appId = stringOrNull(lotics?.app_id);
@@ -41000,6 +41200,15 @@ function readAppMeta(projectDir) {
     version_number: typeof versionNumber === "number" ? versionNumber : null
   };
 }
+function writePulledManifest(projectDir, manifest) {
+  const pkgPath = path7.join(projectDir, "package.json");
+  if (!fs7.existsSync(pkgPath)) fail(`The pulled source has no package.json at ${pkgPath}.`);
+  const pkg = JSON.parse(fs7.readFileSync(pkgPath, "utf-8"));
+  if (typeof pkg !== "object" || pkg === null) fail(`${pkgPath} is not a JSON object.`);
+  const lotics = { ...manifest, version_number: null };
+  fs7.writeFileSync(pkgPath, `${JSON.stringify({ ...pkg, lotics }, null, 2)}
+`);
+}
 function writeDeployedVersion(projectDir, version2) {
   const pkgPath = path7.join(projectDir, "package.json");
   const pkg = JSON.parse(fs7.readFileSync(pkgPath, "utf-8"));
@@ -41395,6 +41604,10 @@ function flushPendingWarnings() {
 }
 
 // src/app_toolchain.ts
+var ARCHIVE_EXCLUDES = ["node_modules", "dist", "*.tsbuildinfo", ".git"];
+function packSource(projectDir, archivePath) {
+  return runTar(["-czf", archivePath, ...ARCHIVE_EXCLUDES.map((pattern) => `--exclude=${pattern}`), "."], projectDir);
+}
 function runTar(args, cwd) {
   return new Promise((resolve, reject) => {
     const proc = spawn("tar", args, { cwd, stdio: ["ignore", "ignore", "pipe"] });
@@ -41580,10 +41793,110 @@ Ready. Next steps:`);
   return { app_id: app.id, path: targetPath };
 }
 
-// src/app_deploy.ts
+// src/app_pull.ts
 import fs11 from "node:fs";
 import path11 from "node:path";
 import { tmpdir } from "node:os";
+var NAMED_CHANGES = 20;
+async function appPull(client, args) {
+  const cwdAppId = readProjectAppId(process.cwd());
+  const appId = args.appId ?? cwdAppId;
+  if (appId === null) fail("This directory is not an app project. Name the app: lotics app pull <app_id> [path]");
+  const app = await client.getApp(appId);
+  const live = app.current_version_id;
+  if (live === null) fail(`App ${app.id} has no version yet, so there is nothing to pull.`);
+  const targetPath = path11.resolve(
+    args.targetPath ?? (args.appId === void 0 || cwdAppId === app.id ? process.cwd() : appDirName(app.name))
+  );
+  const targetAppId = readProjectAppId(targetPath);
+  if (targetAppId !== null && targetAppId !== app.id) {
+    fail(`${targetPath} is the project of ${targetAppId}, not ${app.id}.`);
+  }
+  if (targetAppId === null && fs11.existsSync(targetPath) && fs11.readdirSync(targetPath).length > 0) {
+    fail(`${targetPath} is not empty and is not this app's project. Pull into a new directory.`);
+  }
+  const scratch = fs11.mkdtempSync(path11.join(tmpdir(), "lotics-pull-"));
+  try {
+    if (targetAppId !== null) {
+      const base = readAppMeta(targetPath).current_version_id;
+      if (base === live) {
+        note2(`${targetPath} is already at the live version (${live}).`);
+        return { app_id: app.id, version_id: live, path: targetPath, outcome: "unchanged" };
+      }
+      if (base === null) {
+        fail(`${targetPath} was never deployed, so its edits cannot be told apart from ${live}. Pull into a new directory.`);
+      }
+      const local = await unpack(scratch, "local", (archive2) => packSource(targetPath, archive2));
+      const baseTree = await unpack(
+        scratch,
+        "base",
+        async (archive2) => fs11.writeFileSync(archive2, await client.downloadAppVersionSource(app.id, base))
+      );
+      const changed = changedSourcePaths(baseTree, local);
+      if (changed.length > 0) {
+        const named = changed.slice(0, NAMED_CHANGES).map((file2) => `  ${file2}`);
+        const rest = changed.length > NAMED_CHANGES ? [`  \u2026and ${changed.length - NAMED_CHANGES} more`] : [];
+        fail(
+          `${targetPath} has changes since ${base}, the version it was based on:
+${[...named, ...rest].join("\n")}
+Version ${live} is live. Pull it into a new directory (lotics app pull ${app.id} <new-directory>), carry these changes over, and deploy from there.`
+        );
+      }
+      for (const file2 of listFiles(local)) fs11.rmSync(path11.join(targetPath, file2));
+      removeEmptyDirs(targetPath, listDirs(local));
+    }
+    const archive = path11.join(scratch, "live.tar.gz");
+    fs11.writeFileSync(archive, await client.downloadAppVersionSource(app.id, live));
+    fs11.mkdirSync(targetPath, { recursive: true });
+    await runTar(["-xzf", archive], targetPath);
+  } finally {
+    fs11.rmSync(scratch, { recursive: true, force: true });
+  }
+  writePulledManifest(targetPath, { app_id: app.id, workspace_id: app.workspace_id, current_version_id: live });
+  await writeAppTypes(client, targetPath, app.id);
+  note2(`Pulled ${app.name} (${live}) into ${targetPath}`);
+  await runNpmInstall(targetPath);
+  return { app_id: app.id, version_id: live, path: targetPath, outcome: "pulled" };
+}
+async function unpack(scratch, name, write) {
+  const archive = path11.join(scratch, `${name}.tar.gz`);
+  const dir = path11.join(scratch, name);
+  await write(archive);
+  fs11.mkdirSync(dir);
+  await runTar(["-xzf", archive], dir);
+  return dir;
+}
+function changedSourcePaths(baseDir, localDir) {
+  const files = /* @__PURE__ */ new Set([...listFiles(baseDir), ...listFiles(localDir)]);
+  return [...files].filter((file2) => !file2.startsWith(`.lotics${path11.sep}`)).filter((file2) => !sameSource(path11.join(baseDir, file2), path11.join(localDir, file2), file2 === "package.json")).sort();
+}
+function sameSource(a, b, isManifest) {
+  if (!fs11.existsSync(a) || !fs11.existsSync(b)) return false;
+  if (!isManifest) return fs11.readFileSync(a).equals(fs11.readFileSync(b));
+  return JSON.stringify(withoutOwnRecord(a)) === JSON.stringify(withoutOwnRecord(b));
+}
+function withoutOwnRecord(pkgPath) {
+  const pkg = JSON.parse(fs11.readFileSync(pkgPath, "utf-8"));
+  if (typeof pkg !== "object" || pkg === null) return pkg;
+  return Object.fromEntries(Object.entries(pkg).filter(([key]) => key !== "lotics"));
+}
+function listFiles(dir) {
+  return fs11.readdirSync(dir, { recursive: true, withFileTypes: true }).filter((entry) => !entry.isDirectory()).map((entry) => path11.relative(dir, path11.join(entry.parentPath, entry.name)));
+}
+function listDirs(dir) {
+  return fs11.readdirSync(dir, { recursive: true, withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => path11.relative(dir, path11.join(entry.parentPath, entry.name)));
+}
+function removeEmptyDirs(root, dirs) {
+  for (const dir of [...dirs].sort((a, b) => b.length - a.length)) {
+    const full = path11.join(root, dir);
+    if (fs11.existsSync(full) && fs11.readdirSync(full).length === 0) fs11.rmdirSync(full);
+  }
+}
+
+// src/app_deploy.ts
+import fs12 from "node:fs";
+import path12 from "node:path";
+import { tmpdir as tmpdir2 } from "node:os";
 var BINDING_KEY_OWNERS = {
   queries: "set_app_query",
   workflows: "set_app_workflow",
@@ -41595,19 +41908,18 @@ function declaredBindingKeys(pkg) {
   if (typeof lotics !== "object" || lotics === null) return [];
   return Object.entries(BINDING_KEY_OWNERS).filter(([key]) => key in lotics).map(([key, tool]) => `package.json#lotics.${key}: the app's ${key} are set live with \`lotics run ${tool}\`.`);
 }
-var ARCHIVE_EXCLUDES = ["node_modules", "dist", "*.tsbuildinfo", ".git"];
 async function appDeploy(client, args) {
-  const projectDir = path11.resolve(args.projectDir ?? process.cwd());
+  const projectDir = path12.resolve(args.projectDir ?? process.cwd());
   const meta3 = readAppMeta(projectDir);
-  const pkg = JSON.parse(fs11.readFileSync(path11.join(projectDir, "package.json"), "utf-8"));
+  const pkg = JSON.parse(fs12.readFileSync(path12.join(projectDir, "package.json"), "utf-8"));
   const scripts = typeof pkg === "object" && pkg !== null && "scripts" in pkg ? pkg.scripts : void 0;
   if (typeof scripts !== "object" || scripts === null || !("build" in scripts)) {
-    fail(`${path11.join(projectDir, "package.json")} declares no \`build\` script, so there is no bundle to deploy.`);
+    fail(`${path12.join(projectDir, "package.json")} declares no \`build\` script, so there is no bundle to deploy.`);
   }
   const declared = declaredBindingKeys(pkg);
   if (declared.length > 0) {
     fail(
-      `${path11.join(projectDir, "package.json")} still declares bindings a deploy does not ship:
+      `${path12.join(projectDir, "package.json")} still declares bindings a deploy does not ship:
   ${declared.join("\n  ")}
 Delete these keys from package.json#lotics, then deploy again.`
     );
@@ -41616,26 +41928,26 @@ Delete these keys from package.json#lotics, then deploy again.`
   await runAppTypecheck(projectDir);
   note2("Building...");
   await runNpm(["run", "build"], projectDir);
-  const distDir = path11.join(projectDir, "dist");
-  if (!fs11.existsSync(distDir)) {
+  const distDir = path12.join(projectDir, "dist");
+  if (!fs12.existsSync(distDir)) {
     fail(`\`npm run build\` produced no dist/ in ${projectDir} \u2014 Vite writes one by default; check its outDir.`);
   }
   const stamp = Date.now();
-  const tmpSource = path11.join(tmpdir(), `lotics-source-${stamp}.tar.gz`);
-  const tmpDist = path11.join(tmpdir(), `lotics-dist-${stamp}.tar.gz`);
+  const tmpSource = path12.join(tmpdir2(), `lotics-source-${stamp}.tar.gz`);
+  const tmpDist = path12.join(tmpdir2(), `lotics-dist-${stamp}.tar.gz`);
   try {
     note2("Packaging...");
-    await runTar(["-czf", tmpSource, ...ARCHIVE_EXCLUDES.map((pattern) => `--exclude=${pattern}`), "."], projectDir);
+    await packSource(projectDir, tmpSource);
     await runTar(["-czf", tmpDist, "-C", distDir, "."], projectDir);
     note2("Uploading...");
     const result = await client.deployAppVersion({
       app_id: meta3.app_id,
-      source_archive: fs11.readFileSync(tmpSource),
-      dist_archive: fs11.readFileSync(tmpDist),
+      source_archive: fs12.readFileSync(tmpSource),
+      dist_archive: fs12.readFileSync(tmpDist),
       prev_version_id: meta3.current_version_id,
       ...args.message === void 0 ? {} : { message: args.message }
     }).catch((error52) => {
-      throw staleRefusal(error52, meta3.current_version_id);
+      throw staleRefusal(error52, meta3.current_version_id, meta3.app_id);
     });
     writeDeployedVersion(projectDir, result);
     note2(`Deployed v${result.version_number} (${result.version_id})`);
@@ -41643,18 +41955,18 @@ Delete these keys from package.json#lotics, then deploy again.`
     if (result.origin !== void 0) note2(`Address: ${result.origin}`);
     return result;
   } finally {
-    fs11.rmSync(tmpSource, { force: true });
-    fs11.rmSync(tmpDist, { force: true });
+    fs12.rmSync(tmpSource, { force: true });
+    fs12.rmSync(tmpDist, { force: true });
   }
 }
-function staleRefusal(error52, deployedFrom) {
+function staleRefusal(error52, deployedFrom, appId) {
   if (!(error52 instanceof LoticsRequestError) || error52.status !== 409) return error52;
   const served = error52.body.current_version_id;
   if (typeof served !== "string" || served === deployedFrom) return error52;
   const said = typeof error52.body.message === "string" ? error52.body.message : error52.message;
   return new CliError(
     `${said}
-  Version ${served} went live after this directory's last deploy. To ship this directory over it, set package.json#lotics.current_version_id to "${served}" and deploy again.`
+  Version ${served} went live after this directory's last deploy. Run \`lotics app pull\` here: it brings this directory up to date when it has no edits, and names the files it changed when it has, to carry over into \`lotics app pull ${appId} <new-directory>\`.`
   );
 }
 
@@ -41910,8 +42222,8 @@ function parseArgs(argv2) {
 }
 
 // src/model_commands.ts
-import fs12 from "node:fs";
-import path12 from "node:path";
+import fs13 from "node:fs";
+import path13 from "node:path";
 
 // ../shared/src/app_compile/history_rows.ts
 var LANDED = "@today 00:00";
@@ -42011,8 +42323,8 @@ function count(n, noun) {
   return `${n} ${noun}${n === 1 ? "" : "s"}`;
 }
 function besideFile(file2) {
-  const dir = path12.dirname(path12.resolve(file2));
-  return { documents: { dir, exists: (relative) => fs12.existsSync(path12.resolve(dir, relative)) } };
+  const dir = path13.dirname(path13.resolve(file2));
+  return { documents: { dir, exists: (relative) => fs13.existsSync(path13.resolve(dir, relative)) } };
 }
 function oneFinding(pathName, message2) {
   return [{ path: pathName, message: message2, severity: "error" }];
@@ -42020,7 +42332,7 @@ function oneFinding(pathName, message2) {
 function readModelFile(file2) {
   let raw;
   try {
-    raw = JSON.parse(fs12.readFileSync(file2, "utf-8"));
+    raw = JSON.parse(fs13.readFileSync(file2, "utf-8"));
   } catch (error52) {
     return { kind: "error", findings: oneFinding(file2, `cannot read: ${error52 instanceof Error ? error52.message : String(error52)}`) };
   }
@@ -42074,9 +42386,9 @@ async function uploadDocuments(client, read, file2) {
   const idByPath = new Map(Object.entries(known).filter(([relative]) => paths.includes(relative)));
   const fresh = paths.filter((relative) => !idByPath.has(relative));
   if (fresh.length > 0) note2(`Uploading ${count(fresh.length, "document")} the rows attach\u2026`);
-  const baseDir = path12.dirname(path12.resolve(file2));
+  const baseDir = path13.dirname(path13.resolve(file2));
   for (const relative of fresh) {
-    const uploaded = await client.uploadFiles([path12.resolve(baseDir, relative)]);
+    const uploaded = await client.uploadFiles([path13.resolve(baseDir, relative)]);
     const refused = uploaded.errors[0];
     if (refused !== void 0) fail(`"${relative}" could not be uploaded (${refused.error}), so nothing was applied.`);
     const id = uploaded.files[0]?.id;
@@ -42201,8 +42513,8 @@ async function modelPull(client, output) {
     process.stdout.write(text);
     return;
   }
-  fs12.writeFileSync(output, text);
-  note2(`Wrote ${path12.resolve(output)}.`);
+  fs13.writeFileSync(output, text);
+  note2(`Wrote ${path13.resolve(output)}.`);
 }
 
 // src/signin_link.ts
@@ -42382,7 +42694,7 @@ async function validateOrgWorkspacePin(client, orgId, profile) {
 }
 
 // src/knowledge.ts
-import fs14 from "node:fs";
+import fs15 from "node:fs";
 
 // ../shared/src/knowledge_tags.ts
 function isHiddenDoc(doc) {
@@ -42390,17 +42702,17 @@ function isHiddenDoc(doc) {
 }
 
 // src/cli_io.ts
-import fs13 from "node:fs";
-import path13 from "node:path";
+import fs14 from "node:fs";
+import path14 from "node:path";
 function writeFileAtomic(filePath, bytes) {
-  const dir = path13.dirname(path13.resolve(filePath));
-  const tmp = path13.join(dir, `.${path13.basename(filePath)}.${process.pid}.${Date.now()}.tmp`);
-  fs13.writeFileSync(tmp, bytes);
+  const dir = path14.dirname(path14.resolve(filePath));
+  const tmp = path14.join(dir, `.${path14.basename(filePath)}.${process.pid}.${Date.now()}.tmp`);
+  fs14.writeFileSync(tmp, bytes);
   try {
-    fs13.renameSync(tmp, filePath);
+    fs14.renameSync(tmp, filePath);
   } catch (error52) {
     try {
-      fs13.unlinkSync(tmp);
+      fs14.unlinkSync(tmp);
     } catch {
     }
     throw error52;
@@ -42410,8 +42722,8 @@ function writeFileAtomic(filePath, bytes) {
 
 // src/knowledge.ts
 function readBodyFile(filePath) {
-  if (!fs14.existsSync(filePath)) fail(`File not found: ${filePath}`);
-  return fs14.readFileSync(filePath, "utf-8");
+  if (!fs15.existsSync(filePath)) fail(`File not found: ${filePath}`);
+  return fs15.readFileSync(filePath, "utf-8");
 }
 function resolveBody(flags, required2) {
   if (flags.from !== void 0 && flags.content !== void 0) {
@@ -42768,8 +43080,8 @@ function prompt(question) {
     });
   });
 }
-async function publicPost(apiUrl, path15, body) {
-  const response = await fetch(`${apiUrl}${path15}`, {
+async function publicPost(apiUrl, path16, body) {
+  const response = await fetch(`${apiUrl}${path16}`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body)
@@ -43130,13 +43442,13 @@ async function resolveWorkspace(client, ctx) {
 function resolveUploadPaths(rawPaths) {
   const result = [];
   for (const p of rawPaths) {
-    const resolved = path14.resolve(p);
-    const stat = fs15.statSync(resolved);
+    const resolved = path15.resolve(p);
+    const stat = fs16.statSync(resolved);
     if (stat.isDirectory()) {
-      const entries2 = fs15.readdirSync(resolved, { withFileTypes: true });
+      const entries2 = fs16.readdirSync(resolved, { withFileTypes: true });
       for (const entry of entries2) {
         if (entry.isFile()) {
-          result.push(path14.join(resolved, entry.name));
+          result.push(path15.join(resolved, entry.name));
         }
       }
     } else {
@@ -43334,11 +43646,11 @@ async function main(argv2) {
     if (input.startsWith("@")) {
       source = "file";
       const file2 = input.slice(1);
-      if (!fs15.existsSync(file2)) {
+      if (!fs16.existsSync(file2)) {
         console.error(`No such file: ${file2}`);
         process.exit(1);
       }
-      input = fs15.readFileSync(file2, "utf-8");
+      input = fs16.readFileSync(file2, "utf-8");
     } else if (input === "-") {
       source = "stdin";
       input = await readStdin();
@@ -43559,6 +43871,7 @@ async function main(argv2) {
     console.error("Usage:");
     console.error("  lotics app create <name> --custom [path]  Create a custom-code app and scaffold it here");
     console.error("  lotics app deploy [-m <message>]          Build this directory and upload it as a new version");
+    console.error("  lotics app pull [app_id] [path]           The app's live source: this project brought up to date, or a new directory");
     console.error("  Everything else about an app is a tool: lotics tools, then lotics run <tool>.");
     process.exit(1);
   }
@@ -43851,6 +44164,15 @@ Available workspaces:`);
       if (flags.json) emitJson({ workspace_id: ctx.workspaceId, ...created });
       return;
     }
+    if (subcommand === "pull") {
+      if (flags.json) setMachineOutput(true);
+      const pulled = await appPull(client, {
+        ...toolArgs === void 0 ? {} : { appId: toolArgs },
+        ...restArgs[0] === void 0 ? {} : { targetPath: restArgs[0] }
+      });
+      if (flags.json) emitJson({ workspace_id: ctx.workspaceId, ...pulled });
+      return;
+    }
     if (subcommand === "deploy") {
       const message2 = (flags.message ?? toolArgs)?.trim();
       if (flags.json) setMachineOutput(true);
@@ -43946,7 +44268,7 @@ ${JSON.stringify(info.input_schema, null, 2)}`);
     const toolName = subcommand;
     const ingested = await ingestJsonArgs({
       rawArg: toolArgs,
-      readFile: (p) => fs15.readFileSync(p, "utf-8"),
+      readFile: (p) => fs16.readFileSync(p, "utf-8"),
       readStdin
     });
     if (ingested.kind === "error") {