@lotics/cli 0.66.0 → 0.68.0

package/dist/app_commands.js

@@ -911,7 +911,16 @@ args) {
             });
             console.error(`Deployed v${result.version_number} (${result.version_id})`);
             console.error(`Bundle size: ${(result.bundle_size_bytes / 1024).toFixed(1)} KB`);
-            await warnIfUnbranded(client, meta.app_id);
+            // One post-deploy getApp feeds both advisory nudges (branding, unbound
+            // aliases). Deploy already succeeded — a failed check must not mask that.
+            try {
+                const app = await client.getApp(meta.app_id);
+                warnIfUnbranded(app);
+                warnIfUnboundAliases(app, meta.workflows ?? {}, meta.agents ?? {});
+            }
+            catch (err) {
+                console.error(`(skipped post-deploy checks: ${err.message})`);
+            }
         }
         catch (err) {
             const e = err;
@@ -935,24 +944,44 @@ args) {
  * generic tile in the launcher. Branding is set via `update_app` (the single
  * setter) — this only reminds; it never fails the deploy.
  */
-async function warnIfUnbranded(client, appId) {
-    try {
-        const app = await client.getApp(appId);
-        const missing = [];
-        if (!app.icon)
-            missing.push("icon");
-        if (!app.theme?.color)
-            missing.push("color");
-        if (missing.length === 0)
-            return;
-        console.error(`\n⚠ This app has no ${missing.join(" or ")} set — it shows a generic tile in the launcher.\n` +
-            `  Set it:  lotics run update_app '{"app_id":"${appId}","icon":"<lucide-name>","theme":{"color":"blue"}}'\n` +
-            `  Find an icon:  lotics run search_app_icons '{"query":"<word>"}'`);
-    }
-    catch (err) {
-        // Deploy already succeeded; a failed branding check must not mask that.
-        console.error(`(skipped branding check: ${err.message})`);
-    }
+function warnIfUnbranded(app) {
+    const missing = [];
+    if (!app.icon)
+        missing.push("icon");
+    if (!app.theme?.color)
+        missing.push("color");
+    if (missing.length === 0)
+        return;
+    console.error(`\n⚠ This app has no ${missing.join(" or ")} set — it shows a generic tile in the launcher.\n` +
+        `  Set it:  lotics run update_app '{"app_id":"${app.id}","icon":"<lucide-name>","theme":{"color":"blue"}}'\n` +
+        `  Find an icon:  lotics run search_app_icons '{"query":"<word>"}'`);
+}
+/**
+ * Non-blocking nudge after a successful deploy: catch manifest workflow/agent aliases
+ * that are NOT bound on the server. Deploy ships code + queries only — it never binds
+ * workflows/agents (`set_app_workflow` / `set_app_agent` own `apps.workflows`/`apps.agents`;
+ * the manifest maps are a pulled reflection). So an alias hand-added to `lotics.workflows`
+ * / `lotics.agents` (or bound then removed) compiles + deploys clean and only throws when
+ * the app first calls `useWorkflow` / `useAgentRun`. Surface that divergence HERE — at
+ * deploy time — instead of at the user's first click. Advisory only; never fails the deploy.
+ */
+function warnIfUnboundAliases(app, declaredWorkflows, declaredAgents) {
+    const boundWorkflows = new Set(Object.keys(app.workflows ?? {}));
+    const boundAgents = new Set(Object.keys(app.agents ?? {}));
+    const unboundWorkflows = Object.keys(declaredWorkflows).filter((a) => !boundWorkflows.has(a));
+    const unboundAgents = Object.keys(declaredAgents).filter((a) => !boundAgents.has(a));
+    if (unboundWorkflows.length === 0 && unboundAgents.length === 0)
+        return;
+    const lines = [
+        "\n⚠ The manifest declares aliases that are NOT bound on the server. Deploy ships code +",
+        "  queries only — it does NOT bind workflows/agents, so the app will throw \"has no … alias\"",
+        "  the first time it calls them. Bind each one:",
+    ];
+    for (const alias of unboundWorkflows)
+        lines.push(`  • workflow "${alias}"  →  lotics app workflow set ${alias}`);
+    for (const alias of unboundAgents)
+        lines.push(`  • agent "${alias}"  →  bind with set_app_agent (lotics run set_app_agent …)`);
+    console.error(lines.join("\n"));
 }
 /**
  * `lotics app dev [path] [--port=5174] [--vite-port=5173]`

package/dist/src/cli.js

@@ -30395,18 +30395,16 @@ function buildStarterTemplate(args) {
           },
           dependencies: {
             "@lotics/app-sdk": sdkVersion,
-            // Document preview engines for @lotics/ui FilePreview/FileGalleryModal
-            // (Word, Excel/CSV). Lazy-loaded — an app that never previews them
-            // pays no bundle cost; only node_modules size grows.
-            "@lotics/docx": "^0.1.0",
+            // The FilePreview engines (pdfjs-dist / @lotics/docx / @lotics/xlsx) are
+            // NOT listed here: they ship as @lotics/ui dependencies (7.14.0+), so
+            // every app gets them transitively — one version source, no skew. An app
+            // that IMPORTS @lotics/docx or @lotics/xlsx directly (its own doc/excel
+            // builders) declares its own dependency then.
             "@lotics/ui": uiVersion,
-            "@lotics/xlsx": "^0.1.0",
             "@react-native-picker/picker": "^2.7.0",
             "expo-image": "~3.0.9",
             "lucide-react": "^0.562.0",
             "lucide-react-native": "^0.562.0",
-            // PDF preview engine for FilePreview/FileGalleryModal — also lazy-loaded.
-            "pdfjs-dist": "^6.0.0",
             react: "^19.0.0",
             "react-dom": "^19.0.0",
             "react-native": STARTER_REACT_NATIVE_VERSION,
@@ -32758,7 +32756,13 @@ async function appDeploy(client, args) {
       });
       console.error(`Deployed v${result.version_number} (${result.version_id})`);
       console.error(`Bundle size: ${(result.bundle_size_bytes / 1024).toFixed(1)} KB`);
-      await warnIfUnbranded(client, meta.app_id);
+      try {
+        const app = await client.getApp(meta.app_id);
+        warnIfUnbranded(app);
+        warnIfUnboundAliases(app, meta.workflows ?? {}, meta.agents ?? {});
+      } catch (err2) {
+        console.error(`(skipped post-deploy checks: ${err2.message})`);
+      }
     } catch (err2) {
       const e = err2;
       if (e.code === "VERSION_CONFLICT") {
@@ -32774,22 +32778,32 @@ async function appDeploy(client, args) {
     if (fs4.existsSync(tmpDist)) fs4.unlinkSync(tmpDist);
   }
 }
-async function warnIfUnbranded(client, appId) {
-  try {
-    const app = await client.getApp(appId);
-    const missing = [];
-    if (!app.icon) missing.push("icon");
-    if (!app.theme?.color) missing.push("color");
-    if (missing.length === 0) return;
-    console.error(
-      `
+function warnIfUnbranded(app) {
+  const missing = [];
+  if (!app.icon) missing.push("icon");
+  if (!app.theme?.color) missing.push("color");
+  if (missing.length === 0) return;
+  console.error(
+    `
 \u26A0 This app has no ${missing.join(" or ")} set \u2014 it shows a generic tile in the launcher.
-  Set it:  lotics run update_app '{"app_id":"${appId}","icon":"<lucide-name>","theme":{"color":"blue"}}'
+  Set it:  lotics run update_app '{"app_id":"${app.id}","icon":"<lucide-name>","theme":{"color":"blue"}}'
   Find an icon:  lotics run search_app_icons '{"query":"<word>"}'`
-    );
-  } catch (err2) {
-    console.error(`(skipped branding check: ${err2.message})`);
-  }
+  );
+}
+function warnIfUnboundAliases(app, declaredWorkflows, declaredAgents) {
+  const boundWorkflows = new Set(Object.keys(app.workflows ?? {}));
+  const boundAgents = new Set(Object.keys(app.agents ?? {}));
+  const unboundWorkflows = Object.keys(declaredWorkflows).filter((a) => !boundWorkflows.has(a));
+  const unboundAgents = Object.keys(declaredAgents).filter((a) => !boundAgents.has(a));
+  if (unboundWorkflows.length === 0 && unboundAgents.length === 0) return;
+  const lines = [
+    "\n\u26A0 The manifest declares aliases that are NOT bound on the server. Deploy ships code +",
+    '  queries only \u2014 it does NOT bind workflows/agents, so the app will throw "has no \u2026 alias"',
+    "  the first time it calls them. Bind each one:"
+  ];
+  for (const alias of unboundWorkflows) lines.push(`  \u2022 workflow "${alias}"  \u2192  lotics app workflow set ${alias}`);
+  for (const alias of unboundAgents) lines.push(`  \u2022 agent "${alias}"  \u2192  bind with set_app_agent (lotics run set_app_agent \u2026)`);
+  console.error(lines.join("\n"));
 }
 async function appDev(client, args) {
   const projectDir = path5.resolve(args.projectDir ?? process.cwd());
@@ -42716,6 +42730,7 @@ function readCfbStreams(bytes) {
     throw new Error("Unsupported .xls: invalid OLE2 sector size");
   }
   const sectorOffset = (n) => sectorSize * (n + 1);
+  const maxSectors = Math.ceil(bytes.length / sectorSize) + 1;
   const difat = [];
   for (let i2 = 0; i2 < 109; i2++) {
     const v = u32(76 + i2 * 4);
@@ -42723,7 +42738,9 @@ function readCfbStreams(bytes) {
   }
   let ds = firstDifatSector;
   const entriesPerSector = sectorSize / 4;
-  for (let guard = 0; ds !== ENDOFCHAIN && ds !== FREESECT && guard < 1 << 20; guard++) {
+  const seenDifat = /* @__PURE__ */ new Set();
+  while (ds !== ENDOFCHAIN && ds !== FREESECT && ds < maxSectors && !seenDifat.has(ds)) {
+    seenDifat.add(ds);
     const base = sectorOffset(ds);
     for (let i2 = 0; i2 < entriesPerSector - 1; i2++) {
       const v = u32(base + i2 * 4);
@@ -42733,14 +42750,18 @@ function readCfbStreams(bytes) {
   }
   const fat = [];
   for (const fatSector of difat) {
+    if (fat.length >= maxSectors) break;
+    if (fatSector >= maxSectors) continue;
     const base = sectorOffset(fatSector);
-    for (let i2 = 0; i2 < entriesPerSector; i2++) fat.push(u32(base + i2 * 4));
+    for (let i2 = 0; i2 < entriesPerSector && fat.length < maxSectors; i2++) {
+      fat.push(u32(base + i2 * 4));
+    }
   }
   const readChain = (src, start, size, ss, offOf, chain) => {
-    const maxSectors = Math.floor(src.length / ss) + 2;
+    const maxSectors2 = Math.floor(src.length / ss) + 2;
     const parts = [];
     let s = start;
-    for (let guard = 0; s !== ENDOFCHAIN && s !== FREESECT && s < chain.length && guard < maxSectors; guard++) {
+    for (let guard = 0; s !== ENDOFCHAIN && s !== FREESECT && s < chain.length && guard < maxSectors2; guard++) {
       const o = offOf(s);
       parts.push(src.subarray(o, o + ss));
       s = chain[s];

package/dist/starter_template.js

@@ -80,18 +80,16 @@ export function buildStarterTemplate(args) {
                 },
                 dependencies: {
                     "@lotics/app-sdk": sdkVersion,
-                    // Document preview engines for @lotics/ui FilePreview/FileGalleryModal
-                    // (Word, Excel/CSV). Lazy-loaded — an app that never previews them
-                    // pays no bundle cost; only node_modules size grows.
-                    "@lotics/docx": "^0.1.0",
+                    // The FilePreview engines (pdfjs-dist / @lotics/docx / @lotics/xlsx) are
+                    // NOT listed here: they ship as @lotics/ui dependencies (7.14.0+), so
+                    // every app gets them transitively — one version source, no skew. An app
+                    // that IMPORTS @lotics/docx or @lotics/xlsx directly (its own doc/excel
+                    // builders) declares its own dependency then.
                     "@lotics/ui": uiVersion,
-                    "@lotics/xlsx": "^0.1.0",
                     "@react-native-picker/picker": "^2.7.0",
                     "expo-image": "~3.0.9",
                     "lucide-react": "^0.562.0",
                     "lucide-react-native": "^0.562.0",
-                    // PDF preview engine for FilePreview/FileGalleryModal — also lazy-loaded.
-                    "pdfjs-dist": "^6.0.0",
                     react: "^19.0.0",
                     "react-dom": "^19.0.0",
                     "react-native": STARTER_REACT_NATIVE_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.66.0",
+  "version": "0.68.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {
@@ -26,7 +26,7 @@
     "@types/node": "^22.15.21",
     "esbuild": "^0.28.1",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.7"
+    "vitest": "^4.1.9"
   },
   "keywords": [
     "lotics",