@lotics/cli 0.88.0 → 0.89.1

package/dist/render_page.js

@@ -55769,7 +55769,104 @@ ${e.toString()}`);
     return files;
   }
 
-  // ../xlsx/src/types.ts
+  // ../office-io/src/ole.ts
+  var OLE2_MAGIC = [208, 207, 17, 224, 161, 177, 26, 225];
+  var ENDOFCHAIN = 4294967294;
+  var FREESECT = 4294967295;
+  function isOle2(bytes) {
+    return bytes.length >= 8 && OLE2_MAGIC.every((b, i3) => bytes[i3] === b);
+  }
+  function readCfbStreams(bytes) {
+    const dv = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+    const u162 = (o) => dv.getUint16(o, true);
+    const u32 = (o) => dv.getUint32(o, true);
+    const sectorSize = 1 << u162(30);
+    const miniSectorSize = 1 << u162(32);
+    const firstDirSector = u32(48);
+    const miniCutoff = u32(56);
+    const firstMiniFatSector = u32(60);
+    const firstDifatSector = u32(68);
+    if (sectorSize < 512 || sectorSize > 1 << 20) {
+      throw new Error("Unsupported OLE2 file: invalid sector size");
+    }
+    const sectorOffset = (n) => sectorSize * (n + 1);
+    const maxSectors = Math.ceil(bytes.length / sectorSize) + 1;
+    const difat = [];
+    for (let i3 = 0; i3 < 109; i3++) {
+      const v = u32(76 + i3 * 4);
+      if (v !== FREESECT) difat.push(v);
+    }
+    let ds = firstDifatSector;
+    const entriesPerSector = sectorSize / 4;
+    const seenDifat = /* @__PURE__ */ new Set();
+    while (ds !== ENDOFCHAIN && ds !== FREESECT && ds < maxSectors && !seenDifat.has(ds)) {
+      seenDifat.add(ds);
+      const base2 = sectorOffset(ds);
+      for (let i3 = 0; i3 < entriesPerSector - 1; i3++) {
+        const v = u32(base2 + i3 * 4);
+        if (v !== FREESECT) difat.push(v);
+      }
+      ds = u32(base2 + (entriesPerSector - 1) * 4);
+    }
+    const fat = [];
+    for (const fatSector of difat) {
+      if (fat.length >= maxSectors) break;
+      if (fatSector >= maxSectors) continue;
+      const base2 = sectorOffset(fatSector);
+      for (let i3 = 0; i3 < entriesPerSector && fat.length < maxSectors; i3++) {
+        fat.push(u32(base2 + i3 * 4));
+      }
+    }
+    const readChain = (src, start, size, ss, offOf, chain) => {
+      const maxSectors2 = Math.floor(src.length / ss) + 2;
+      const parts = [];
+      let s = start;
+      for (let guard = 0; s !== ENDOFCHAIN && s !== FREESECT && s < chain.length && guard < maxSectors2; guard++) {
+        const o = offOf(s);
+        parts.push(src.subarray(o, o + ss));
+        s = chain[s];
+      }
+      const merged = concat(parts);
+      return size != null ? merged.subarray(0, size) : merged;
+    };
+    const readBig = (start, size) => readChain(bytes, start, size, sectorSize, sectorOffset, fat);
+    const dirBytes = readBig(firstDirSector, null);
+    const ddv = new DataView(dirBytes.buffer, dirBytes.byteOffset, dirBytes.byteLength);
+    const dir = [];
+    for (let off = 0; off + 128 <= dirBytes.length; off += 128) {
+      const nameLen = ddv.getUint16(off + 64, true);
+      const type = ddv.getUint8(off + 66);
+      if (nameLen < 2 || type === 0) continue;
+      const name = utf16le(dirBytes.subarray(off, off + nameLen - 2));
+      dir.push({ name, type, start: ddv.getUint32(off + 116, true), size: Number(ddv.getBigUint64(off + 120, true)) });
+    }
+    const root = dir.find((e) => e.type === 5);
+    const miniStream = root ? readBig(root.start, root.size) : new Uint8Array(0);
+    const miniFatBytes = readBig(firstMiniFatSector, null);
+    const miniFat = [];
+    for (let i3 = 0; i3 + 4 <= miniFatBytes.length; i3 += 4) miniFat.push(miniFatBytes[i3] | miniFatBytes[i3 + 1] << 8 | miniFatBytes[i3 + 2] << 16 | miniFatBytes[i3 + 3] << 24);
+    const readMini = (start, size) => readChain(miniStream, start, size, miniSectorSize, (n) => n * miniSectorSize, miniFat);
+    const readStream = (e) => e.size >= miniCutoff ? readBig(e.start, e.size) : readMini(e.start, e.size);
+    return dir.filter((e) => e.type === 2).map((e) => ({ name: e.name, bytes: readStream(e) }));
+  }
+  function utf16le(b) {
+    let s = "";
+    for (let i3 = 0; i3 + 1 < b.length; i3 += 2) s += String.fromCharCode(b[i3] | b[i3 + 1] << 8);
+    return s;
+  }
+  function concat(parts) {
+    let total = 0;
+    for (const p of parts) total += p.length;
+    const out = new Uint8Array(total);
+    let o = 0;
+    for (const p of parts) {
+      out.set(p, o);
+      o += p.length;
+    }
+    return out;
+  }
+
+  // ../office-io/src/password_protected_error.ts
   var PasswordProtectedError = class extends Error {
     constructor() {
       super("This file is password-protected and cannot be previewed");
@@ -55778,10 +55875,10 @@ ${e.toString()}`);
   };
 
   // ../xlsx/src/ooxml_zip.ts
-  var OLE2_MAGIC = [208, 207, 17, 224, 161, 177, 26, 225];
+  var OLE2_MAGIC2 = [208, 207, 17, 224, 161, 177, 26, 225];
   function unzipXlsx(buffer) {
     const bytes = new Uint8Array(buffer);
-    if (bytes.length >= 8 && OLE2_MAGIC.every((b, i3) => bytes[i3] === b)) {
+    if (bytes.length >= 8 && OLE2_MAGIC2.every((b, i3) => bytes[i3] === b)) {
       throw new PasswordProtectedError();
     }
     try {
@@ -58303,103 +58400,6 @@ ${e.toString()}`);
     return val && typeof val === "object" ? val : {};
   }
 
-  // ../shared/src/ole.ts
-  var OLE2_MAGIC2 = [208, 207, 17, 224, 161, 177, 26, 225];
-  var ENDOFCHAIN = 4294967294;
-  var FREESECT = 4294967295;
-  function isOle2(bytes) {
-    return bytes.length >= 8 && OLE2_MAGIC2.every((b, i3) => bytes[i3] === b);
-  }
-  function readCfbStreams(bytes) {
-    const dv = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-    const u162 = (o) => dv.getUint16(o, true);
-    const u32 = (o) => dv.getUint32(o, true);
-    const sectorSize = 1 << u162(30);
-    const miniSectorSize = 1 << u162(32);
-    const firstDirSector = u32(48);
-    const miniCutoff = u32(56);
-    const firstMiniFatSector = u32(60);
-    const firstDifatSector = u32(68);
-    if (sectorSize < 512 || sectorSize > 1 << 20) {
-      throw new Error("Unsupported OLE2 file: invalid sector size");
-    }
-    const sectorOffset = (n) => sectorSize * (n + 1);
-    const maxSectors = Math.ceil(bytes.length / sectorSize) + 1;
-    const difat = [];
-    for (let i3 = 0; i3 < 109; i3++) {
-      const v = u32(76 + i3 * 4);
-      if (v !== FREESECT) difat.push(v);
-    }
-    let ds = firstDifatSector;
-    const entriesPerSector = sectorSize / 4;
-    const seenDifat = /* @__PURE__ */ new Set();
-    while (ds !== ENDOFCHAIN && ds !== FREESECT && ds < maxSectors && !seenDifat.has(ds)) {
-      seenDifat.add(ds);
-      const base2 = sectorOffset(ds);
-      for (let i3 = 0; i3 < entriesPerSector - 1; i3++) {
-        const v = u32(base2 + i3 * 4);
-        if (v !== FREESECT) difat.push(v);
-      }
-      ds = u32(base2 + (entriesPerSector - 1) * 4);
-    }
-    const fat = [];
-    for (const fatSector of difat) {
-      if (fat.length >= maxSectors) break;
-      if (fatSector >= maxSectors) continue;
-      const base2 = sectorOffset(fatSector);
-      for (let i3 = 0; i3 < entriesPerSector && fat.length < maxSectors; i3++) {
-        fat.push(u32(base2 + i3 * 4));
-      }
-    }
-    const readChain = (src, start, size, ss, offOf, chain) => {
-      const maxSectors2 = Math.floor(src.length / ss) + 2;
-      const parts = [];
-      let s = start;
-      for (let guard = 0; s !== ENDOFCHAIN && s !== FREESECT && s < chain.length && guard < maxSectors2; guard++) {
-        const o = offOf(s);
-        parts.push(src.subarray(o, o + ss));
-        s = chain[s];
-      }
-      const merged = concat(parts);
-      return size != null ? merged.subarray(0, size) : merged;
-    };
-    const readBig = (start, size) => readChain(bytes, start, size, sectorSize, sectorOffset, fat);
-    const dirBytes = readBig(firstDirSector, null);
-    const ddv = new DataView(dirBytes.buffer, dirBytes.byteOffset, dirBytes.byteLength);
-    const dir = [];
-    for (let off = 0; off + 128 <= dirBytes.length; off += 128) {
-      const nameLen = ddv.getUint16(off + 64, true);
-      const type = ddv.getUint8(off + 66);
-      if (nameLen < 2 || type === 0) continue;
-      const name = utf16le(dirBytes.subarray(off, off + nameLen - 2));
-      dir.push({ name, type, start: ddv.getUint32(off + 116, true), size: Number(ddv.getBigUint64(off + 120, true)) });
-    }
-    const root = dir.find((e) => e.type === 5);
-    const miniStream = root ? readBig(root.start, root.size) : new Uint8Array(0);
-    const miniFatBytes = readBig(firstMiniFatSector, null);
-    const miniFat = [];
-    for (let i3 = 0; i3 + 4 <= miniFatBytes.length; i3 += 4) miniFat.push(miniFatBytes[i3] | miniFatBytes[i3 + 1] << 8 | miniFatBytes[i3 + 2] << 16 | miniFatBytes[i3 + 3] << 24);
-    const readMini = (start, size) => readChain(miniStream, start, size, miniSectorSize, (n) => n * miniSectorSize, miniFat);
-    const readStream = (e) => e.size >= miniCutoff ? readBig(e.start, e.size) : readMini(e.start, e.size);
-    return dir.filter((e) => e.type === 2).map((e) => ({ name: e.name, bytes: readStream(e) }));
-  }
-  function utf16le(b) {
-    let s = "";
-    for (let i3 = 0; i3 + 1 < b.length; i3 += 2) s += String.fromCharCode(b[i3] | b[i3 + 1] << 8);
-    return s;
-  }
-  function concat(parts) {
-    let total = 0;
-    for (const p of parts) total += p.length;
-    const out = new Uint8Array(total);
-    let o = 0;
-    for (const p of parts) {
-      out.set(p, o);
-      o += p.length;
-    }
-    return out;
-  }
-
   // ../xlsx/src/biff8_reader.ts
   var DEFAULT_MAX_ROWS = 1e4;
   var REC = {

package/dist/src/cli.js

@@ -30645,6 +30645,38 @@ import { tmpdir } from "node:os";
 var STARTER_FALLBACK_UI_VERSION = "6.1.0";
 var STARTER_FALLBACK_SDK_VERSION = "0.51.0";
 var STARTER_REACT_NATIVE_VERSION = "0.85.3";
+var VITEST_SETUP_FILENAME = "vitest.setup.ts";
+var VITEST_SETUP_CONTENT = `import { vi } from "vitest";
+
+// A package-linked app's generated .lotics/app_fields.ts resolves F/OPT/ROLE
+// from the installation's live binding at module load (\`await getAppBinding()\`,
+// a network call over the host bridge). Under vitest/jsdom there is no host, so
+// that call throws while a test is still COLLECTING \u2014 failing every test that
+// imports the app graph, even pure logic tests. getAppBinding is the network
+// boundary; mock it (and only it) so the module graph evaluates in tests.
+//
+// The stub returns an ECHO binding: any alias resolves to a synthetic,
+// self-identifying id (fld:test:<entity>.<field>, opt:test:\u2026, grp:test:\u2026). Echo,
+// not empty maps \u2014 app_fields's bound() throws on a missing key, so empty maps
+// would just re-break collection; and a ':test:' id can never be confused with a
+// real fld_\u2026/opt_\u2026/grp_\u2026 id, so a test that depends on a concrete binding fails
+// loud instead of silently reading undefined.
+vi.mock("@lotics/app-sdk", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("@lotics/app-sdk")>();
+  const echoIds = (prefix: string): Record<string, string> =>
+    new Proxy(
+      {},
+      {
+        get: (_target, key) => (typeof key === "string" ? \`\${prefix}:test:\${key}\` : undefined),
+      },
+    ) as Record<string, string>;
+  return {
+    ...actual,
+    getAppBinding: () =>
+      Promise.resolve({ fields: echoIds("fld"), options: echoIds("opt"), roles: echoIds("grp") }),
+  };
+});
+`;
 function buildStarterTemplate(args) {
   const uiVersion = args.ui_version ?? `^${STARTER_FALLBACK_UI_VERSION}`;
   const sdkVersion = args.sdk_version ?? `^${STARTER_FALLBACK_SDK_VERSION}`;
@@ -30883,6 +30915,11 @@ export default defineConfig({
   },
   test: {
     environment: "jsdom",
+    // Stub @lotics/app-sdk's getAppBinding (the network boundary) before any test
+    // collects. A package-linked app's generated .lotics/app_fields.ts awaits it
+    // at module load; without the stub that network call throws under jsdom and
+    // every test that imports the app graph fails to collect. See vitest.setup.ts.
+    setupFiles: ["./${VITEST_SETUP_FILENAME}"],
     // RN packages ship Flow (\`import typeof\`) in their native source, reached
     // transitively by RN-Web components (pickers, calendars, anything touching
     // Animated). Vitest's web optimizer is OFF by default and ignores the
@@ -31248,6 +31285,10 @@ describe("App", () => {
 });
 `
     },
+    {
+      path: VITEST_SETUP_FILENAME,
+      content: VITEST_SETUP_CONTENT
+    },
     {
       path: ".github/workflows/ci.yml",
       content: `name: CI
@@ -33070,8 +33111,29 @@ function writeBindingAppFields(projectDir, binding) {
   fs4.mkdirSync(dotLotics, { recursive: true });
   const file = path5.join(dotLotics, "app_fields.ts");
   fs4.writeFileSync(file, generatePackageAppFields(binding));
+  ensureAppVitestSetup(projectDir);
   return file;
 }
+function ensureAppVitestSetup(projectDir) {
+  const setupPath = path5.join(projectDir, VITEST_SETUP_FILENAME);
+  if (!fs4.existsSync(setupPath)) {
+    fs4.writeFileSync(setupPath, VITEST_SETUP_CONTENT);
+    console.error(`Wrote ${VITEST_SETUP_FILENAME} (stubs getAppBinding so \`npm test\` collects).`);
+  } else if (!fs4.readFileSync(setupPath, "utf-8").includes("getAppBinding")) {
+    console.error(
+      `\u26A0 ${VITEST_SETUP_FILENAME} exists but does not stub getAppBinding \u2014 \`npm test\` will fail to collect any test that imports the app graph (the binding-form .lotics/app_fields.ts awaits a network call). Add the stub to it:
+${VITEST_SETUP_CONTENT}`
+    );
+  }
+  const viteConfigPath = path5.join(projectDir, "vite.config.ts");
+  if (!fs4.existsSync(viteConfigPath)) return;
+  const viteConfig = fs4.readFileSync(viteConfigPath, "utf-8");
+  if (/setupFiles\s*:/.test(viteConfig) && viteConfig.includes(VITEST_SETUP_FILENAME)) return;
+  console.error(
+    `\u26A0 vite.config.ts does not wire ${VITEST_SETUP_FILENAME} \u2014 \`npm test\` will fail to collect any test that imports the app graph (the binding-form .lotics/app_fields.ts awaits a network call). Add it to the \`test\` block:
+    setupFiles: ["./${VITEST_SETUP_FILENAME}"],`
+  );
+}
 async function appCodegen(args) {
   const projectDir = path5.resolve(args.projectDir ?? process.cwd());
   const meta = readAppMeta(projectDir);
@@ -39600,7 +39662,104 @@ function unzipSync(data, opts) {
   return files;
 }
 
-// ../xlsx/src/types.ts
+// ../office-io/src/ole.ts
+var OLE2_MAGIC = [208, 207, 17, 224, 161, 177, 26, 225];
+var ENDOFCHAIN = 4294967294;
+var FREESECT = 4294967295;
+function isOle2(bytes) {
+  return bytes.length >= 8 && OLE2_MAGIC.every((b, i2) => bytes[i2] === b);
+}
+function readCfbStreams(bytes) {
+  const dv = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const u162 = (o) => dv.getUint16(o, true);
+  const u32 = (o) => dv.getUint32(o, true);
+  const sectorSize = 1 << u162(30);
+  const miniSectorSize = 1 << u162(32);
+  const firstDirSector = u32(48);
+  const miniCutoff = u32(56);
+  const firstMiniFatSector = u32(60);
+  const firstDifatSector = u32(68);
+  if (sectorSize < 512 || sectorSize > 1 << 20) {
+    throw new Error("Unsupported OLE2 file: invalid sector size");
+  }
+  const sectorOffset = (n) => sectorSize * (n + 1);
+  const maxSectors = Math.ceil(bytes.length / sectorSize) + 1;
+  const difat = [];
+  for (let i2 = 0; i2 < 109; i2++) {
+    const v = u32(76 + i2 * 4);
+    if (v !== FREESECT) difat.push(v);
+  }
+  let ds = firstDifatSector;
+  const entriesPerSector = sectorSize / 4;
+  const seenDifat = /* @__PURE__ */ new Set();
+  while (ds !== ENDOFCHAIN && ds !== FREESECT && ds < maxSectors && !seenDifat.has(ds)) {
+    seenDifat.add(ds);
+    const base = sectorOffset(ds);
+    for (let i2 = 0; i2 < entriesPerSector - 1; i2++) {
+      const v = u32(base + i2 * 4);
+      if (v !== FREESECT) difat.push(v);
+    }
+    ds = u32(base + (entriesPerSector - 1) * 4);
+  }
+  const fat = [];
+  for (const fatSector of difat) {
+    if (fat.length >= maxSectors) break;
+    if (fatSector >= maxSectors) continue;
+    const base = sectorOffset(fatSector);
+    for (let i2 = 0; i2 < entriesPerSector && fat.length < maxSectors; i2++) {
+      fat.push(u32(base + i2 * 4));
+    }
+  }
+  const readChain = (src, start, size, ss, offOf, chain) => {
+    const maxSectors2 = Math.floor(src.length / ss) + 2;
+    const parts = [];
+    let s = start;
+    for (let guard = 0; s !== ENDOFCHAIN && s !== FREESECT && s < chain.length && guard < maxSectors2; guard++) {
+      const o = offOf(s);
+      parts.push(src.subarray(o, o + ss));
+      s = chain[s];
+    }
+    const merged = concat(parts);
+    return size != null ? merged.subarray(0, size) : merged;
+  };
+  const readBig = (start, size) => readChain(bytes, start, size, sectorSize, sectorOffset, fat);
+  const dirBytes = readBig(firstDirSector, null);
+  const ddv = new DataView(dirBytes.buffer, dirBytes.byteOffset, dirBytes.byteLength);
+  const dir = [];
+  for (let off = 0; off + 128 <= dirBytes.length; off += 128) {
+    const nameLen = ddv.getUint16(off + 64, true);
+    const type = ddv.getUint8(off + 66);
+    if (nameLen < 2 || type === 0) continue;
+    const name = utf16le(dirBytes.subarray(off, off + nameLen - 2));
+    dir.push({ name, type, start: ddv.getUint32(off + 116, true), size: Number(ddv.getBigUint64(off + 120, true)) });
+  }
+  const root = dir.find((e) => e.type === 5);
+  const miniStream = root ? readBig(root.start, root.size) : new Uint8Array(0);
+  const miniFatBytes = readBig(firstMiniFatSector, null);
+  const miniFat = [];
+  for (let i2 = 0; i2 + 4 <= miniFatBytes.length; i2 += 4) miniFat.push(miniFatBytes[i2] | miniFatBytes[i2 + 1] << 8 | miniFatBytes[i2 + 2] << 16 | miniFatBytes[i2 + 3] << 24);
+  const readMini = (start, size) => readChain(miniStream, start, size, miniSectorSize, (n) => n * miniSectorSize, miniFat);
+  const readStream = (e) => e.size >= miniCutoff ? readBig(e.start, e.size) : readMini(e.start, e.size);
+  return dir.filter((e) => e.type === 2).map((e) => ({ name: e.name, bytes: readStream(e) }));
+}
+function utf16le(b) {
+  let s = "";
+  for (let i2 = 0; i2 + 1 < b.length; i2 += 2) s += String.fromCharCode(b[i2] | b[i2 + 1] << 8);
+  return s;
+}
+function concat(parts) {
+  let total = 0;
+  for (const p of parts) total += p.length;
+  const out = new Uint8Array(total);
+  let o = 0;
+  for (const p of parts) {
+    out.set(p, o);
+    o += p.length;
+  }
+  return out;
+}
+
+// ../office-io/src/password_protected_error.ts
 var PasswordProtectedError = class extends Error {
   constructor() {
     super("This file is password-protected and cannot be previewed");
@@ -39609,10 +39768,10 @@ var PasswordProtectedError = class extends Error {
 };
 
 // ../xlsx/src/ooxml_zip.ts
-var OLE2_MAGIC = [208, 207, 17, 224, 161, 177, 26, 225];
+var OLE2_MAGIC2 = [208, 207, 17, 224, 161, 177, 26, 225];
 function unzipXlsx(buffer) {
   const bytes = new Uint8Array(buffer);
-  if (bytes.length >= 8 && OLE2_MAGIC.every((b, i2) => bytes[i2] === b)) {
+  if (bytes.length >= 8 && OLE2_MAGIC2.every((b, i2) => bytes[i2] === b)) {
     throw new PasswordProtectedError();
   }
   try {
@@ -43352,103 +43511,6 @@ function ensureVmlArray(val) {
   return Array.isArray(val) ? val : [val];
 }
 
-// ../shared/src/ole.ts
-var OLE2_MAGIC2 = [208, 207, 17, 224, 161, 177, 26, 225];
-var ENDOFCHAIN = 4294967294;
-var FREESECT = 4294967295;
-function isOle2(bytes) {
-  return bytes.length >= 8 && OLE2_MAGIC2.every((b, i2) => bytes[i2] === b);
-}
-function readCfbStreams(bytes) {
-  const dv = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  const u162 = (o) => dv.getUint16(o, true);
-  const u32 = (o) => dv.getUint32(o, true);
-  const sectorSize = 1 << u162(30);
-  const miniSectorSize = 1 << u162(32);
-  const firstDirSector = u32(48);
-  const miniCutoff = u32(56);
-  const firstMiniFatSector = u32(60);
-  const firstDifatSector = u32(68);
-  if (sectorSize < 512 || sectorSize > 1 << 20) {
-    throw new Error("Unsupported OLE2 file: invalid sector size");
-  }
-  const sectorOffset = (n) => sectorSize * (n + 1);
-  const maxSectors = Math.ceil(bytes.length / sectorSize) + 1;
-  const difat = [];
-  for (let i2 = 0; i2 < 109; i2++) {
-    const v = u32(76 + i2 * 4);
-    if (v !== FREESECT) difat.push(v);
-  }
-  let ds = firstDifatSector;
-  const entriesPerSector = sectorSize / 4;
-  const seenDifat = /* @__PURE__ */ new Set();
-  while (ds !== ENDOFCHAIN && ds !== FREESECT && ds < maxSectors && !seenDifat.has(ds)) {
-    seenDifat.add(ds);
-    const base = sectorOffset(ds);
-    for (let i2 = 0; i2 < entriesPerSector - 1; i2++) {
-      const v = u32(base + i2 * 4);
-      if (v !== FREESECT) difat.push(v);
-    }
-    ds = u32(base + (entriesPerSector - 1) * 4);
-  }
-  const fat = [];
-  for (const fatSector of difat) {
-    if (fat.length >= maxSectors) break;
-    if (fatSector >= maxSectors) continue;
-    const base = sectorOffset(fatSector);
-    for (let i2 = 0; i2 < entriesPerSector && fat.length < maxSectors; i2++) {
-      fat.push(u32(base + i2 * 4));
-    }
-  }
-  const readChain = (src, start, size, ss, offOf, chain) => {
-    const maxSectors2 = Math.floor(src.length / ss) + 2;
-    const parts = [];
-    let s = start;
-    for (let guard = 0; s !== ENDOFCHAIN && s !== FREESECT && s < chain.length && guard < maxSectors2; guard++) {
-      const o = offOf(s);
-      parts.push(src.subarray(o, o + ss));
-      s = chain[s];
-    }
-    const merged = concat(parts);
-    return size != null ? merged.subarray(0, size) : merged;
-  };
-  const readBig = (start, size) => readChain(bytes, start, size, sectorSize, sectorOffset, fat);
-  const dirBytes = readBig(firstDirSector, null);
-  const ddv = new DataView(dirBytes.buffer, dirBytes.byteOffset, dirBytes.byteLength);
-  const dir = [];
-  for (let off = 0; off + 128 <= dirBytes.length; off += 128) {
-    const nameLen = ddv.getUint16(off + 64, true);
-    const type = ddv.getUint8(off + 66);
-    if (nameLen < 2 || type === 0) continue;
-    const name = utf16le(dirBytes.subarray(off, off + nameLen - 2));
-    dir.push({ name, type, start: ddv.getUint32(off + 116, true), size: Number(ddv.getBigUint64(off + 120, true)) });
-  }
-  const root = dir.find((e) => e.type === 5);
-  const miniStream = root ? readBig(root.start, root.size) : new Uint8Array(0);
-  const miniFatBytes = readBig(firstMiniFatSector, null);
-  const miniFat = [];
-  for (let i2 = 0; i2 + 4 <= miniFatBytes.length; i2 += 4) miniFat.push(miniFatBytes[i2] | miniFatBytes[i2 + 1] << 8 | miniFatBytes[i2 + 2] << 16 | miniFatBytes[i2 + 3] << 24);
-  const readMini = (start, size) => readChain(miniStream, start, size, miniSectorSize, (n) => n * miniSectorSize, miniFat);
-  const readStream = (e) => e.size >= miniCutoff ? readBig(e.start, e.size) : readMini(e.start, e.size);
-  return dir.filter((e) => e.type === 2).map((e) => ({ name: e.name, bytes: readStream(e) }));
-}
-function utf16le(b) {
-  let s = "";
-  for (let i2 = 0; i2 + 1 < b.length; i2 += 2) s += String.fromCharCode(b[i2] | b[i2 + 1] << 8);
-  return s;
-}
-function concat(parts) {
-  let total = 0;
-  for (const p of parts) total += p.length;
-  const out = new Uint8Array(total);
-  let o = 0;
-  for (const p of parts) {
-    out.set(p, o);
-    o += p.length;
-  }
-  return out;
-}
-
 // ../xlsx/src/biff8_reader.ts
 var DEFAULT_MAX_ROWS = 1e4;
 var REC = {

package/dist/{client.d.ts → src/client.d.ts}

@@ -1,4 +1,4 @@
-import type { ContractConfigEntry, KnowledgeUpgradeEntry, ModifiedArtifact, PackageContentBinding, UpgradeResolutions } from "@lotics/shared/schemas/packages";
+import type { ContractConfigEntry, KnowledgeUpgradeEntry, ModifiedArtifact, PackageContentBinding, UpgradeResolutions } from "./package_content_types";
 /**
  * The error message for a non-ok response. A genuine JSON error (a 4xx carrying
  * a `message`) surfaces verbatim; a non-JSON body (a gateway HTML page), any
@@ -539,6 +539,14 @@ export declare class LoticsClient {
         }>;
         /** `knowledge_expects` names the package's agents route to but it does not own (advisory). */
         missing_expected_docs: string[];
+        /** Orphan duplicate link fields (unbound links between binding-covered tables). Always empty on an origin. */
+        orphan_duplicate_links: Array<{
+            field_id: string;
+            field_name: string;
+            table_id: string;
+            table_name: string;
+            target_table_id: string;
+        }>;
     }>;
     /**
      * Preview a release — the dry run behind `opctl app release`. Runs the

package/dist/src/package_content_types.d.ts

@@ -0,0 +1,70 @@
+/** Theme colors an app config `color` entry may default to (Tailwind palette). */
+export type ContractConfigColor = "red" | "orange" | "amber" | "yellow" | "lime" | "green" | "emerald" | "teal" | "cyan" | "sky" | "blue" | "indigo" | "violet" | "purple" | "fuchsia" | "pink" | "rose" | "slate" | "gray" | "zinc" | "neutral" | "stone";
+/** A customization knob a package exposes; discriminated on `type`, each with a
+ *  typed `default` an installation may override. Variants are written flat (not
+ *  a shared base intersection) to match the zod schema's inferred shape exactly. */
+export type ContractConfigEntry = {
+    alias: string;
+    label: string;
+    description?: string;
+    type: "text";
+    default: string;
+} | {
+    alias: string;
+    label: string;
+    description?: string;
+    type: "boolean";
+    default: boolean;
+} | {
+    alias: string;
+    label: string;
+    description?: string;
+    type: "color";
+    default: ContractConfigColor;
+} | {
+    alias: string;
+    label: string;
+    description?: string;
+    type: "number";
+    default: number;
+} | {
+    alias: string;
+    label: string;
+    description?: string;
+    type: "select";
+    options: {
+        value: string;
+        label: string;
+    }[];
+    default: string;
+};
+/** Per-installation content binding: stable content alias → concrete workspace
+ *  id, per namespace. Absent namespaces default to `{}`. */
+export interface PackageContentBinding {
+    knowledge: Record<string, string>;
+    templates: Record<string, string>;
+}
+/** A package artifact edited in the workspace since install, flagged on upgrade
+ *  so the re-materialize doesn't silently revert the local edit. */
+export interface ModifiedArtifact {
+    kind: "queries" | "workflows" | "agents" | "template";
+    alias: string;
+    /** Templates only: the OLD pinned contract carried no `content_sha256`, so a
+     *  local edit vs. older upstream content can't be attributed — a one-time consent. */
+    baseline_unknown?: boolean;
+}
+/** One entry in a package-managed knowledge upgrade diff. */
+export interface KnowledgeUpgradeEntry {
+    alias: string;
+    name: string;
+    change: "added" | "changed" | "removed" | "drifted";
+    /** `changed`/`removed` only: the live doc diverged from the OLD pinned sha. */
+    modified: boolean;
+    /** The bound live doc id; null for `added`, or a `drifted` doc that is gone. */
+    doc_id: string | null;
+}
+/** The upgrade resolutions map: a namespaced key (`<namespace|kind>.<alias>` or
+ *  `knowledge.<alias>`) → the resolution for the entry it names. */
+export type UpgradeResolutions = Record<string, {
+    bind_to: string;
+} | "recreate" | "revert" | "keep" | "apply" | "archive" | "unbind">;

package/dist/src/package_content_types.js

@@ -0,0 +1,12 @@
+// Published-safe copies of the package-content types the `LoticsClient` SDK
+// surface exposes. Their source of truth is the zod schemas in the PRIVATE,
+// unpublished `@lotics/shared/schemas/packages`; importing them here would leak
+// an unresolvable `@lotics/shared` specifier into the published `client.d.ts`
+// (an external `import { LoticsClient } from "@lotics/cli"` cannot resolve it —
+// `@lotics/shared` is `private`, never on npm). We mirror them BY VALUE — the
+// same "no shared dep" parity the transport strings keep with `@lotics/app-sdk`.
+//
+// `package_content_types.test.ts` asserts these stay structurally identical to
+// the shared schemas' `z.infer` at typecheck time, so any drift is a build
+// failure — never a silent skew.
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.88.0",
+  "version": "0.89.1",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {
@@ -15,7 +15,7 @@
     "docs"
   ],
   "scripts": {
-    "build": "tsgo && node scripts/build_cli.mjs",
+    "build": "tsgo -p tsconfig.build.json && node scripts/build_cli.mjs",
     "typecheck": "tsgo --noEmit",
     "test": "vitest run",
     "prepublishOnly": "npm run build"