@lotics/cli 0.88.1 → 0.90.0

package/dist/src/cli.js

@@ -30643,8 +30643,40 @@ import { tmpdir } from "node:os";
 
 // src/starter_template.ts
 var STARTER_FALLBACK_UI_VERSION = "6.1.0";
-var STARTER_FALLBACK_SDK_VERSION = "0.51.0";
+var STARTER_FALLBACK_SDK_VERSION = "0.52.0";
 var STARTER_REACT_NATIVE_VERSION = "0.85.3";
+var VITEST_SETUP_FILENAME = "vitest.setup.ts";
+var VITEST_SETUP_CONTENT = `import { vi } from "vitest";
+
+// A package-linked app's generated .lotics/app_fields.ts resolves F/OPT/ROLE
+// from the installation's live binding at module load (\`await getAppBinding()\`,
+// a network call over the host bridge). Under vitest/jsdom there is no host, so
+// that call throws while a test is still COLLECTING \u2014 failing every test that
+// imports the app graph, even pure logic tests. getAppBinding is the network
+// boundary; mock it (and only it) so the module graph evaluates in tests.
+//
+// The stub returns an ECHO binding: any alias resolves to a synthetic,
+// self-identifying id (fld:test:<entity>.<field>, opt:test:\u2026, grp:test:\u2026). Echo,
+// not empty maps \u2014 app_fields's bound() throws on a missing key, so empty maps
+// would just re-break collection; and a ':test:' id can never be confused with a
+// real fld_\u2026/opt_\u2026/grp_\u2026 id, so a test that depends on a concrete binding fails
+// loud instead of silently reading undefined.
+vi.mock("@lotics/app-sdk", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("@lotics/app-sdk")>();
+  const echoIds = (prefix: string): Record<string, string> =>
+    new Proxy(
+      {},
+      {
+        get: (_target, key) => (typeof key === "string" ? \`\${prefix}:test:\${key}\` : undefined),
+      },
+    ) as Record<string, string>;
+  return {
+    ...actual,
+    getAppBinding: () =>
+      Promise.resolve({ fields: echoIds("fld"), options: echoIds("opt"), roles: echoIds("grp") }),
+  };
+});
+`;
 function buildStarterTemplate(args) {
   const uiVersion = args.ui_version ?? `^${STARTER_FALLBACK_UI_VERSION}`;
   const sdkVersion = args.sdk_version ?? `^${STARTER_FALLBACK_SDK_VERSION}`;
@@ -30761,8 +30793,32 @@ function buildStarterTemplate(args) {
       path: "vite.config.ts",
       content: `/// <reference types="vitest" />
 import { defineConfig } from "vite";
+import type { Plugin } from "vite";
 import react from "@vitejs/plugin-react";
 
+// @lotics/ui/icon.tsx deep-imports \`lucide-react-native/dist/esm/icons/<name>\`.
+// lucide-react-native's \`exports\` map lists only "." and "./icons", so a strict
+// resolver (the sandbox's vite dev optimizer) blocks the deep path with
+// \`Missing "./dist/esm/icons/<name>" specifier\`. lucide-react ships the same
+// per-icon files with NO exports map, so redirect there. A \`resolveId\` PLUGIN
+// (not \`resolve.alias\`) is required: the dep-optimizer SCAN runs plugin
+// resolveId hooks but does NOT apply regex \`resolve.alias\`, so the alias alone
+// fixes the production build but leaves the dev preview broken.
+function lucideIconsWebAlias(): Plugin {
+  return {
+    name: "lucide-icons-web-alias",
+    enforce: "pre",
+    async resolveId(source, importer, options) {
+      const m = /^lucide-react-native\\/dist\\/esm\\/icons\\/(.+)$/.exec(source);
+      if (!m) return null;
+      return this.resolve(\`lucide-react/dist/esm/icons/\${m[1]}\`, importer, {
+        ...options,
+        skipSelf: true,
+      });
+    },
+  };
+}
+
 // Vite default base (/) emits absolute asset URLs in index.html. Lotics's
 // render endpoint rewrites those to /v1/apps/{id}/asset/... so the bundle
 // loads via the platform's asset proxy. Don't change \`base\` unless you
@@ -30772,14 +30828,8 @@ import react from "@vitejs/plugin-react";
 // (View, Text, Pressable, StyleSheet, etc.) render in a pure-web environment.
 // .web.tsx is prioritized in resolve.extensions so per-target variants
 // (avatar.web.tsx, wave_avatar.web.tsx) win over the native .tsx file.
-//
-// @lotics/ui/icon.tsx imports from \`lucide-react-native/dist/esm/icons/<name>\`
-// \u2014 deep paths that lucide-react-native's package \`exports\` map blocks under
-// Vite's strict resolution. lucide-react has the same per-icon files with no
-// exports map, so we alias the deep path to use it. Web rendering of <svg>
-// is identical to RN-SVG when running under RN-Web.
 export default defineConfig({
-  plugins: [react()],
+  plugins: [lucideIconsWebAlias(), react()],
   // RN libraries reference globals Metro injects but Vite does not \u2014 undefined
   // \u21D2 the bundle throws. \`__DEV__\` (react-native-web, @react-native-picker's
   // UnimplementedView): throws at load, blank iframe. \`global\` (rn-web
@@ -30790,13 +30840,7 @@ export default defineConfig({
   // is safe. Define both so dev and the deployed build behave identically.
   define: { __DEV__: "false", global: "globalThis" },
   resolve: {
-    alias: [
-      {
-        find: /^lucide-react-native\\/dist\\/esm\\/icons\\/(.+)$/,
-        replacement: "lucide-react/dist/esm/icons/$1",
-      },
-      { find: "react-native", replacement: "react-native-web" },
-    ],
+    alias: [{ find: "react-native", replacement: "react-native-web" }],
     // \`.web.js\` resolves the web build of RN packages that ship \`X.js\` (native)
     // beside \`X.web.js\` (web) \u2014 e.g. @react-native-picker/picker, whose compiled
     // \`Picker.web.js\` renders a real <select>. Without it the extensionless
@@ -30875,6 +30919,12 @@ export default defineConfig({
     // iframe loads modules from api.lotics.ai which already permits null
     // origin via CORS.
     cors: { origin: "*" },
+    // Chat-authoring previews reach this dev server through the sandbox proxy
+    // at \`5173-<id>-<token>.lotics-sandbox.app\`. Vite \u22655.4.12 rejects HMR
+    // WebSocket upgrades whose Origin doesn't match a trusted host (its
+    // cross-site WS hijack fix) \u2014 without this entry the proxied preview page
+    // loads over HTTP but HMR never connects, so edits stop live-updating.
+    allowedHosts: [".lotics-sandbox.app"],
     // @lotics/ui/fonts.css references the API's /iframe/fonts/*.woff2 files
     // by root-relative URL. A deployed app is served from the API origin so
     // they resolve directly; under \`lotics app dev\` the app runs on
@@ -30883,6 +30933,11 @@ export default defineConfig({
   },
   test: {
     environment: "jsdom",
+    // Stub @lotics/app-sdk's getAppBinding (the network boundary) before any test
+    // collects. A package-linked app's generated .lotics/app_fields.ts awaits it
+    // at module load; without the stub that network call throws under jsdom and
+    // every test that imports the app graph fails to collect. See vitest.setup.ts.
+    setupFiles: ["./${VITEST_SETUP_FILENAME}"],
     // RN packages ship Flow (\`import typeof\`) in their native source, reached
     // transitively by RN-Web components (pickers, calendars, anything touching
     // Animated). Vitest's web optimizer is OFF by default and ignores the
@@ -31013,6 +31068,7 @@ mount(
 import { View } from "react-native";
 import { useNavigate, useParams } from "react-router-dom";
 import { AppRouter } from "@lotics/app-sdk/router";
+import { useAiContext } from "@lotics/app-sdk";
 import { Card } from "@lotics/ui/card";
 import { Text } from "@lotics/ui/text";
 import { Button } from "@lotics/ui/button";
@@ -31077,6 +31133,16 @@ function ItemDetailScreen() {
   const { id } = useParams();
   const navigate = useNavigate();
   const item = ITEMS.find((i) => i.id === id);
+  // Tell the member's ambient chat agent what this screen is showing, so a
+  // question like "summarise this" has context. This is PUSH-ONLY: a snapshot of
+  // what the app rendered to the member, never a channel for chat to pull app
+  // data \u2014 the text lands in the prompt as labeled data (not instructions) and
+  // any record refs would act only within the member's own IAM. Pass null to
+  // clear the slot (here: nothing to describe when the item isn't found).
+  useAiContext(
+    "item_detail",
+    item ? { description: \`Viewing item "\${item.name}".\`, data: { id: item.id } } : null,
+  );
   return (
     <Screen>
       {/* An in-app Back control; navigate(-1) walks the history (the browser Back
@@ -31166,9 +31232,9 @@ each alias lives in \`package.json#lotics.workflows.<alias>\`.
       path: "src/lucide-react-native.d.ts",
       content: `// Type shim for lucide-react-native's deep-icon imports
 // (\`lucide-react-native/dist/esm/icons/<name>\`). The package ships JS-only
-// files without per-file .d.ts. The Vite alias in vite.config.ts rewrites
-// these to lucide-react at bundle time; this declaration covers the
-// TypeScript compile-time gap.
+// files without per-file .d.ts. The lucideIconsWebAlias() plugin in
+// vite.config.ts redirects these to lucide-react at resolve time; this
+// declaration covers the TypeScript compile-time gap.
 declare module "lucide-react-native/dist/esm/icons/*" {
   import type { ComponentType } from "react";
   const Icon: ComponentType<{
@@ -31248,6 +31314,10 @@ describe("App", () => {
 });
 `
     },
+    {
+      path: VITEST_SETUP_FILENAME,
+      content: VITEST_SETUP_CONTENT
+    },
     {
       path: ".github/workflows/ci.yml",
       content: `name: CI
@@ -32225,48 +32295,10 @@ function openBrowser(url) {
   child.unref();
 }
 
-// src/generate_app_workflows_dts.ts
-var HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
-// DO NOT EDIT \u2014 regenerated from package.json#lotics.workflows.
-//
-// This file gives \`useWorkflow("alias")\` a typed input parameter at call
-// sites by augmenting the @lotics/app-sdk \`AppWorkflows\` interface.
-
-import "@lotics/app-sdk";
-`;
-function generateAppWorkflowsDts(workflows) {
-  const entries = Object.entries(workflows ?? {});
-  if (entries.length === 0) {
-    return `${HEADER}
-// No workflows declared in package.json#lotics.workflows.
-// Add an entry to enable typed useWorkflow<"alias"> at call sites.
-declare module "@lotics/app-sdk" {
-  interface AppWorkflows {}
-}
-`;
-  }
-  entries.sort(([a], [b]) => a.localeCompare(b));
-  const inputLines = [];
-  const resultLines = [];
-  for (const [alias, declaration] of entries) {
-    const valueType = declaration.inputs ? inputsToType(declaration.inputs, { nullableOptional: true }) : "Record<string, unknown>";
-    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
-    inputLines.push(`    ${aliasKey}: ${valueType};`);
-    if (declaration.outputs) {
-      resultLines.push(`    ${aliasKey}: ${objectFieldsToType(declaration.outputs)};`);
-    }
-  }
-  const resultsBlock = resultLines.length > 0 ? `
-  interface AppWorkflowResults {
-${resultLines.join("\n")}
-  }` : "";
-  return `${HEADER}
-declare module "@lotics/app-sdk" {
-  interface AppWorkflows {
-${inputLines.join("\n")}
-  }${resultsBlock}
-}
-`;
+// ../shared/src/app_dts.ts
+var IDENTIFIER_REGEX = /^[a-zA-Z_$][a-zA-Z0-9_$]*$/;
+function isValidIdentifier(name) {
+  return IDENTIFIER_REGEX.test(name);
 }
 function inputsToType(inputs, opts) {
   const nullableOptional = opts?.nullableOptional === true;
@@ -32380,28 +32412,56 @@ function outputDeclToTsType(decl) {
       return "unknown";
   }
 }
-var IDENTIFIER_REGEX = /^[a-zA-Z_$][a-zA-Z0-9_$]*$/;
-function isValidIdentifier(name) {
-  return IDENTIFIER_REGEX.test(name);
-}
+var QUERIES_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
+// DO NOT EDIT \u2014 regenerated from package.json#lotics.queries.
+//
+// This file gives \`useQuery("alias", params)\` typed params at call sites by
+// augmenting the @lotics/app-sdk \`AppQueries\` interface.
 
-// src/generate_app_agents_dts.ts
-var HEADER2 = `// Auto-generated by 'lotics app pull/dev/deploy'.
-// DO NOT EDIT \u2014 regenerated from package.json#lotics.agents.
+import "@lotics/app-sdk";
+`;
+function generateAppQueriesDts(queries) {
+  const entries = Object.entries(queries ?? {});
+  if (entries.length === 0) {
+    return `${QUERIES_HEADER}
+// No queries declared in package.json#lotics.queries.
+// Add an entry to enable typed useQuery("alias", params) at call sites.
+declare module "@lotics/app-sdk" {
+  interface AppQueries {}
+}
+`;
+  }
+  entries.sort(([a], [b]) => a.localeCompare(b));
+  const lines = [];
+  for (const [alias, declaration] of entries) {
+    const valueType = inputsToType(declaration.params ?? {});
+    const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
+    lines.push(`    ${aliasKey}: ${valueType};`);
+  }
+  return `${QUERIES_HEADER}
+declare module "@lotics/app-sdk" {
+  interface AppQueries {
+${lines.join("\n")}
+  }
+}
+`;
+}
+var WORKFLOWS_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
+// DO NOT EDIT \u2014 regenerated from package.json#lotics.workflows.
 //
-// This file gives \`useAgentRun("alias")\` typed input + output at call sites by
-// augmenting the @lotics/app-sdk \`AppAgents\` / \`AppAgentResults\` interfaces.
+// This file gives \`useWorkflow("alias")\` a typed input parameter at call
+// sites by augmenting the @lotics/app-sdk \`AppWorkflows\` interface.
 
 import "@lotics/app-sdk";
 `;
-function generateAppAgentsDts(agents) {
-  const entries = Object.entries(agents ?? {});
+function generateAppWorkflowsDts(workflows) {
+  const entries = Object.entries(workflows ?? {});
   if (entries.length === 0) {
-    return `${HEADER2}
-// No agents declared in package.json#lotics.agents.
-// Add an entry to enable typed useAgentRun<"alias"> at call sites.
+    return `${WORKFLOWS_HEADER}
+// No workflows declared in package.json#lotics.workflows.
+// Add an entry to enable typed useWorkflow<"alias"> at call sites.
 declare module "@lotics/app-sdk" {
-  interface AppAgents {}
+  interface AppWorkflows {}
 }
 `;
   }
@@ -32409,7 +32469,7 @@ declare module "@lotics/app-sdk" {
   const inputLines = [];
   const resultLines = [];
   for (const [alias, declaration] of entries) {
-    const valueType = declaration.inputs ? inputsToType(declaration.inputs) : "Record<string, unknown>";
+    const valueType = declaration.inputs ? inputsToType(declaration.inputs, { nullableOptional: true }) : "Record<string, unknown>";
     const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
     inputLines.push(`    ${aliasKey}: ${valueType};`);
     if (declaration.outputs) {
@@ -32417,53 +32477,78 @@ declare module "@lotics/app-sdk" {
     }
   }
   const resultsBlock = resultLines.length > 0 ? `
-  interface AppAgentResults {
+  interface AppWorkflowResults {
 ${resultLines.join("\n")}
   }` : "";
-  return `${HEADER2}
+  return `${WORKFLOWS_HEADER}
 declare module "@lotics/app-sdk" {
-  interface AppAgents {
+  interface AppWorkflows {
 ${inputLines.join("\n")}
   }${resultsBlock}
 }
 `;
 }
-
-// src/generate_app_queries_dts.ts
-var HEADER3 = `// Auto-generated by 'lotics app pull/dev/deploy'.
-// DO NOT EDIT \u2014 regenerated from package.json#lotics.queries.
+var AGENTS_HEADER = `// Auto-generated by 'lotics app pull/dev/deploy'.
+// DO NOT EDIT \u2014 regenerated from package.json#lotics.agents.
 //
-// This file gives \`useQuery("alias", params)\` typed params at call sites by
-// augmenting the @lotics/app-sdk \`AppQueries\` interface.
+// This file gives \`useAgentRun("alias")\` typed input + output at call sites by
+// augmenting the @lotics/app-sdk \`AppAgents\` / \`AppAgentResults\` interfaces.
 
 import "@lotics/app-sdk";
 `;
-function generateAppQueriesDts(queries) {
-  const entries = Object.entries(queries ?? {});
+function generateAppAgentsDts(agents) {
+  const entries = Object.entries(agents ?? {});
   if (entries.length === 0) {
-    return `${HEADER3}
-// No queries declared in package.json#lotics.queries.
-// Add an entry to enable typed useQuery("alias", params) at call sites.
+    return `${AGENTS_HEADER}
+// No agents declared in package.json#lotics.agents.
+// Add an entry to enable typed useAgentRun<"alias"> at call sites.
 declare module "@lotics/app-sdk" {
-  interface AppQueries {}
+  interface AppAgents {}
 }
 `;
   }
   entries.sort(([a], [b]) => a.localeCompare(b));
-  const lines = [];
+  const inputLines = [];
+  const resultLines = [];
   for (const [alias, declaration] of entries) {
-    const valueType = inputsToType(declaration.params ?? {});
+    const valueType = declaration.inputs ? inputsToType(declaration.inputs) : "Record<string, unknown>";
     const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
-    lines.push(`    ${aliasKey}: ${valueType};`);
+    inputLines.push(`    ${aliasKey}: ${valueType};`);
+    if (declaration.outputs) {
+      resultLines.push(`    ${aliasKey}: ${objectFieldsToType(declaration.outputs)};`);
+    }
   }
-  return `${HEADER3}
+  const resultsBlock = resultLines.length > 0 ? `
+  interface AppAgentResults {
+${resultLines.join("\n")}
+  }` : "";
+  return `${AGENTS_HEADER}
 declare module "@lotics/app-sdk" {
-  interface AppQueries {
-${lines.join("\n")}
-  }
+  interface AppAgents {
+${inputLines.join("\n")}
+  }${resultsBlock}
 }
 `;
 }
+var CAPABILITY_GATED_CALLS = {
+  comments: ["useComments", "createComment", "updateComment", "deleteComment"]
+};
+function undeclaredCapabilities(sourceText, declared) {
+  const used = [];
+  for (const [capability, calls] of Object.entries(CAPABILITY_GATED_CALLS)) {
+    const isCalled = calls.some((call) => new RegExp(`\\b${call}\\b`).test(sourceText));
+    if (isCalled && declared?.[capability] !== true) used.push(capability);
+  }
+  return used;
+}
+function unboundAliases(declared, bound) {
+  const boundWorkflows = new Set(bound.workflows ?? []);
+  const boundAgents = new Set(bound.agents ?? []);
+  return {
+    workflows: [...declared.workflows ?? []].filter((a) => !boundWorkflows.has(a)),
+    agents: [...declared.agents ?? []].filter((a) => !boundAgents.has(a))
+  };
+}
 
 // ../shared/src/app_query_ast.ts
 function collectQueryTableIds(node) {
@@ -32504,7 +32589,7 @@ function walk(node, visit) {
 }
 
 // src/generate_app_fields.ts
-var HEADER4 = `// Auto-generated by 'lotics app codegen' (and app pull/dev/deploy).
+var HEADER = `// Auto-generated by 'lotics app codegen' (and app pull/dev/deploy).
 // DO NOT EDIT \u2014 regenerated from the workspace schema.
 //
 // Runtime field + option ids addressed by stable display-name aliases:
@@ -32598,7 +32683,7 @@ ${tableBlocks.join("\n")}
 }
 function generateAppFields(tables) {
   if (tables.length === 0) {
-    return `${HEADER4}
+    return `${HEADER}
 export const F = {} as const;
 
 export const OPT = {} as const;
@@ -32610,7 +32695,7 @@ export type AppOptions = typeof OPT;
 `;
   }
   const aliased = aliasTables(tables);
-  return `${HEADER4}
+  return `${HEADER}
 ${emitFieldMap(aliased)}
 
 ${emitOptionMap(aliased)}
@@ -32623,7 +32708,7 @@ export type AppOptions = typeof OPT;
 }
 
 // src/generate_package_fields.ts
-var HEADER5 = `// Auto-generated by 'lotics app codegen' (linked/published app; also app pull/dev/deploy).
+var HEADER2 = `// Auto-generated by 'lotics app codegen' (linked/published app; also app pull/dev/deploy).
 // DO NOT EDIT \u2014 regenerated from the installation's live binding.
 //
 // A package installation resolves F/OPT/ROLE at MODULE LOAD from its binding
@@ -32723,7 +32808,7 @@ ${lines.join("\n")}
 }
 function generatePackageAppFields(binding) {
   const { entities, roles } = parseBinding(binding);
-  return `${HEADER5}
+  return `${HEADER2}
 ${emitFieldMap2(entities)}
 
 ${emitOptionMap2(entities)}
@@ -33070,8 +33155,29 @@ function writeBindingAppFields(projectDir, binding) {
   fs4.mkdirSync(dotLotics, { recursive: true });
   const file = path5.join(dotLotics, "app_fields.ts");
   fs4.writeFileSync(file, generatePackageAppFields(binding));
+  ensureAppVitestSetup(projectDir);
   return file;
 }
+function ensureAppVitestSetup(projectDir) {
+  const setupPath = path5.join(projectDir, VITEST_SETUP_FILENAME);
+  if (!fs4.existsSync(setupPath)) {
+    fs4.writeFileSync(setupPath, VITEST_SETUP_CONTENT);
+    console.error(`Wrote ${VITEST_SETUP_FILENAME} (stubs getAppBinding so \`npm test\` collects).`);
+  } else if (!fs4.readFileSync(setupPath, "utf-8").includes("getAppBinding")) {
+    console.error(
+      `\u26A0 ${VITEST_SETUP_FILENAME} exists but does not stub getAppBinding \u2014 \`npm test\` will fail to collect any test that imports the app graph (the binding-form .lotics/app_fields.ts awaits a network call). Add the stub to it:
+${VITEST_SETUP_CONTENT}`
+    );
+  }
+  const viteConfigPath = path5.join(projectDir, "vite.config.ts");
+  if (!fs4.existsSync(viteConfigPath)) return;
+  const viteConfig = fs4.readFileSync(viteConfigPath, "utf-8");
+  if (/setupFiles\s*:/.test(viteConfig) && viteConfig.includes(VITEST_SETUP_FILENAME)) return;
+  console.error(
+    `\u26A0 vite.config.ts does not wire ${VITEST_SETUP_FILENAME} \u2014 \`npm test\` will fail to collect any test that imports the app graph (the binding-form .lotics/app_fields.ts awaits a network call). Add it to the \`test\` block:
+    setupFiles: ["./${VITEST_SETUP_FILENAME}"],`
+  );
+}
 async function appCodegen(args) {
   const projectDir = path5.resolve(args.projectDir ?? process.cwd());
   const meta = readAppMeta(projectDir);
@@ -33299,17 +33405,6 @@ Ready. Next steps:`);
   console.error(`  # edit src/App.tsx`);
   console.error(`  lotics app deploy`);
 }
-var CAPABILITY_GATED_CALLS = {
-  comments: ["useComments", "createComment", "updateComment", "deleteComment"]
-};
-function undeclaredCapabilities(sourceText, declared) {
-  const used = [];
-  for (const [capability, calls] of Object.entries(CAPABILITY_GATED_CALLS)) {
-    const isCalled = calls.some((call) => new RegExp(`\\b${call}\\b`).test(sourceText));
-    if (isCalled && declared?.[capability] !== true) used.push(capability);
-  }
-  return used;
-}
 function readAppSourceText(projectDir) {
   const srcDir = path5.join(projectDir, "src");
   if (!fs4.existsSync(srcDir)) return "";
@@ -33430,10 +33525,10 @@ function warnIfUnbranded(app) {
   );
 }
 function warnIfUnboundAliases(app, declaredWorkflows, declaredAgents) {
-  const boundWorkflows = new Set(Object.keys(app.workflows ?? {}));
-  const boundAgents = new Set(Object.keys(app.agents ?? {}));
-  const unboundWorkflows = Object.keys(declaredWorkflows).filter((a) => !boundWorkflows.has(a));
-  const unboundAgents = Object.keys(declaredAgents).filter((a) => !boundAgents.has(a));
+  const { workflows: unboundWorkflows, agents: unboundAgents } = unboundAliases(
+    { workflows: Object.keys(declaredWorkflows), agents: Object.keys(declaredAgents) },
+    { workflows: Object.keys(app.workflows ?? {}), agents: Object.keys(app.agents ?? {}) }
+  );
   if (unboundWorkflows.length === 0 && unboundAgents.length === 0) return;
   const lines = [
     "\n\u26A0 The manifest declares aliases that are NOT bound on the server. Deploy ships code +",

package/dist/src/client.d.ts

@@ -539,6 +539,14 @@ export declare class LoticsClient {
         }>;
         /** `knowledge_expects` names the package's agents route to but it does not own (advisory). */
         missing_expected_docs: string[];
+        /** Orphan duplicate link fields (unbound links between binding-covered tables). Always empty on an origin. */
+        orphan_duplicate_links: Array<{
+            field_id: string;
+            field_name: string;
+            table_id: string;
+            table_name: string;
+            target_table_id: string;
+        }>;
     }>;
     /**
      * Preview a release — the dry run behind `opctl app release`. Runs the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.88.1",
+  "version": "0.90.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {