@metabase/cli 0.5.4 → 0.5.5

package/dist/{transport-DZSxmmtY.mjs → transport-BWixD5Ww.mjs}

@@ -1,8 +1,8 @@
 import { f as ResponseShapeError, g as errorMessage, h as ValidationError, p as TimeoutError, u as NetworkError, y as isNonInterruptFailure } from "./predicates-0C0TsWcJ.mjs";
 import { F as CapabilityError, J as isRetryableStatus, K as HttpError, X as parseJson, Y as JSON_CONTENT_TYPE } from "./cli.mjs";
-import { G as credentialSecrets, H as serverInfoFromProperties, I as buildNetworkError, J as normalizeUrl, L as isConnectionClosed, Q as createServerProfile, R as PROBE_PATH, U as assertCredentialHeaderSafe, W as credentialAuthHeader, tt as SessionProperties, z as probeBudget } from "./runtime-iIsqiOwO.mjs";
+import { G as credentialSecrets, H as serverInfoFromProperties, I as buildNetworkError, J as normalizeUrl, L as isConnectionClosed, Q as createServerProfile, R as PROBE_PATH, U as assertCredentialHeaderSafe, W as credentialAuthHeader, tt as SessionProperties, z as probeBudget } from "./runtime-D5yfliIq.mjs";
 import { n as throwIfAborted, r as untilAborted, t as combineAborts } from "./signal-BNUlQjpc.mjs";
-import { n as featureFailures } from "./requirement-check-BoVSK1uK.mjs";
+import { n as featureFailures } from "./requirement-check-1fcffJj6.mjs";
 import { setTimeout } from "node:timers/promises";
 //#region ../client/src/http/response-shape.ts
 async function parseJsonResponse(text, schema, context) {

package/dist/{tree-DrYYCdXP.mjs → tree-IymKTTCK.mjs}

@@ -1,6 +1,6 @@
 import { o as ConfigError } from "./predicates-0C0TsWcJ.mjs";
 import { at as formatFlags, f as writeJson, it as connectionFlags, ut as profileFlag } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { m as CollectionTreeNode } from "./collection-Cz2qLX2m.mjs";
 import { z } from "zod";
 //#region src/commands/collection/tree.ts

package/dist/{typed-schema-DEzmTY3J.mjs → typed-schema-gaIKntyu.mjs}

@@ -1,5 +1,5 @@
 import { it as connectionFlags, p as writeText, ut as profileFlag } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { n as slugArg, t as parseSlug } from "./slug-COdwq63O.mjs";
 import { i as writeProjectFile } from "./data-app-project-DjDDWgUF.mjs";
 import { z } from "zod";

package/dist/{unpublish-D8hmulCx.mjs → unpublish-BnP0O_S2.mjs}

@@ -1,5 +1,5 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { i as tableSelectorFlags, n as parseTableSelectors } from "./table-selector-flags-BpFFoSaT.mjs";
 import { z } from "zod";
 //#region src/commands/library/unpublish.ts

package/dist/{unreferenced-C3CqO3tu.mjs → unreferenced-DDkcn8EQ.mjs}

@@ -1,5 +1,5 @@
 import { gt as listEnvelopeSchema, it as connectionFlags, lt as outputFlags, s as renderList, st as listFlags, ut as profileFlag } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as collectForOutput } from "./window-D1w7B0vh.mjs";
 import { d as DependencyNodeCompact } from "./dependency-C1DExO6k.mjs";
 import { i as dependencyNodeView } from "./dependency-DcM96XJ-.mjs";

package/dist/{update-552UGPAG.mjs → update-BAocDvnS.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { a as PulseUpdateInput, t as Pulse } from "./pulse-B2AmIWsO.mjs";
 import { t as pulseView } from "./pulse-CPSpum5U.mjs";

package/dist/{update-LlJM4tUd.mjs → update-BemK_tZ_.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { i as CardDetail, l as CardUpdateInput } from "./card-BJRZ5D5Q.mjs";
 import { n as cardView } from "./card-VipF12MJ.mjs";

package/dist/{update-l4WRN6Jh.mjs → update-Bfws2FN2.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { o as FieldDetail, u as FieldUpdateInput, v as hasDataSensitivity } from "./field-C2qOViFZ.mjs";
 import { c as fieldView, l as fieldWithDataSensitivityView } from "./field-CT4r6b92.mjs";

package/dist/{update-DmMHHn75.mjs → update-BiBazvzY.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { n as DataAction, s as DataActionUpdateInput } from "./data-action-CuvI17XF.mjs";
 import { DATA_ACTION_DATASET_QUERY, skipValidateFlag } from "./validate-query-Bf5FhhMI.mjs";

package/dist/{update-Zv7PP8nl.mjs → update-BsEG1dRm.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { C as TableUpdateInput, a as Table } from "./table-hgrX1i-R.mjs";
 import { u as tableView } from "./table-BNA9Or05.mjs";

package/dist/{update-CctMr2T1.mjs → update-C0p1E-hs.mjs}

@@ -1,9 +1,9 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { i as GlossaryUpdateInput, t as Glossary } from "./glossary-iPIWrEbP.mjs";
 import { t as glossaryView } from "./glossary-CQRW3Z4d.mjs";
-import { n as readEntryInput, t as entryFlags } from "./entry-flags-DLS6r8Vf.mjs";
+import { n as readEntryInput, t as entryFlags } from "./entry-flags-CswcY8bG.mjs";
 //#region src/commands/glossary/update.ts
 var update_default = defineMetabaseCommand({
 	meta: {

package/dist/{update-CcNYCalv.mjs → update-CFkOEnUu.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { i as TransformTagUpdateInput, t as TransformTag } from "./transform-tag-CcElGp3C.mjs";
 import { t as transformTagView } from "./transform-tag-Dmb4u3-Q.mjs";

package/dist/{update-4TDRNrV-.mjs → update-CKrLtJWZ.mjs}

@@ -2,7 +2,7 @@ import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as pro
 import { l as NotificationUpdateInput, r as Notification } from "./notification-B5yMuPmo.mjs";
 import { t as notificationView } from "./notification-BEJaEZS2.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as describeAlert } from "./summary-BytbDz6e.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 //#region src/commands/alert/update.ts

package/dist/{update-BVz0oIwS.mjs → update-C_VV1SP8.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { i as SegmentUpdateInput, t as Segment } from "./segment-Cf-DrdjE.mjs";
 import { SEGMENT_DEFINITION, skipValidateFlag } from "./validate-query-Bf5FhhMI.mjs";

package/dist/{update-B21GAnzT.mjs → update-CgJwzutJ.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { i as DocumentUpdateInput, t as Document } from "./document-BHOQq2T_.mjs";
 import { t as documentView } from "./document-lS1XZEF3.mjs";

package/dist/{update-CEDMvgJI.mjs → update-Cga4lrX5.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { f as TransformUpdateInput, t as Transform } from "./transform-B62craFM.mjs";
 import { TRANSFORM_SOURCE_QUERY, skipValidateFlag } from "./validate-query-Bf5FhhMI.mjs";

package/dist/{update-7iXRB23T2.mjs → update-CsH0lSpQ2.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { o as TransformJobUpdateInput, t as TransformJob } from "./transform-job-CDIb3B9o.mjs";
 import { t as transformJobView } from "./transform-job-D18XRLBK.mjs";

package/dist/{update-DVD77mVR.mjs → update-CyfLXFKR.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { c as TimelineUpdateInput, t as Timeline } from "./timeline-DcsCXNUt.mjs";
 import { n as timelineView } from "./timeline-BgWz8DYK.mjs";

package/dist/{update-DvGIaZdl.mjs → update-D9eA9UOf.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { a as TransformTestUpdateInput, t as TransformTest } from "./transform-test-Bexa_K89.mjs";
 import { n as transformTestView } from "./transform-test-C49ZTK7M.mjs";

package/dist/{update-BxRFktpB.mjs → update-D9fs-PSK.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { d as DashboardUpdateInput, o as DashboardDetail } from "./dashboard-Cwsf-e9T.mjs";
 import { n as dashboardView } from "./dashboard-Bx2sYijR.mjs";

package/dist/{update-sma1ZRm2.mjs → update-DL1Iex_M.mjs}

@@ -1,5 +1,5 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { o as DataAppUpdateInput, t as DataApp } from "./data-app-BUW-HlUo.mjs";
 import { t as dataAppView } from "./data-app-Blz61mG5.mjs";
@@ -10,7 +10,7 @@ var update_default = defineMetabaseCommand({
 		name: "update",
 		description: "Update a data app's fields, or enable or disable it"
 	},
-	details: "The JSON body carries only the fields to change: `display_name`, `description`, `allowed_hosts`, `enabled`, `bundle_path`, `version`. A disabled app is served only to admins. `mb data-app set-bundle` replaces the bundle from a built file.",
+	details: "The JSON body carries only the fields to change: `display_name`, `description`, `allowed_hosts`, `enabled`, `bundle_path`, `version`. A disabled app opens only in Data Studio (Data apps → the app → Overview). `mb data-app set-bundle` replaces the bundle from a built file.",
 	requires: ["dataApp.update"],
 	args: {
 		...outputFlags,
@@ -21,7 +21,7 @@ var update_default = defineMetabaseCommand({
 	},
 	inputSchema: DataAppUpdateInput,
 	outputSchema: DataApp,
-	examples: ["mb data-app update sales-overview --body '{\"enabled\":true}'", "mb data-app update sales-overview --body '{\"allowed_hosts\":[\"https://api.example.com\"]}'"],
+	examples: ["mb data-app update sales-overview --body '{\"display_name\":\"Sales overview\"}'", "mb data-app update sales-overview --body '{\"allowed_hosts\":[\"https://api.example.com\"]}'"],
 	async run({ args, ctx, getClient, readBody }) {
 		const slug = parseSlug(args.slug);
 		const body = await readBody({

package/dist/{update-3lRE8G9k.mjs → update-DntKWUl2.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { i as MeasureUpdateInput, t as Measure } from "./measure-BMWrX1ca.mjs";
 import { MEASURE_DEFINITION, skipValidateFlag } from "./validate-query-Bf5FhhMI.mjs";

package/dist/{update-CtuLA42g.mjs → update-K8FwdJEV.mjs}

@@ -1,7 +1,7 @@
 import { f as ResponseShapeError, l as MetabaseError, n as isBlank, o as ConfigError } from "./predicates-0C0TsWcJ.mjs";
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, mt as parseInteger, q as chainRequestFailure, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { O as givenValue, t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { O as givenValue, t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { g as CollectionUpdateInput, r as Collection } from "./collection-Cz2qLX2m.mjs";
 import { t as parseEnumFlag } from "./parse-enum-CEXPuN9H.mjs";

package/dist/{update-4sOfpwpv.mjs → update-ReSzm23m.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { i as SnippetUpdateInput, t as Snippet } from "./snippet-CyKAgIZl.mjs";
 import { t as snippetView } from "./snippet-oJLaYW9V.mjs";

package/dist/{update-dashcard-BijqiYQd.mjs → update-dashcard-Bpv45o1_.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { h as DashcardPatchInput, m as DashcardDetail } from "./dashboard-Cwsf-e9T.mjs";
 import { r as dashcardView } from "./dashboard-Bx2sYijR.mjs";

package/dist/{update-Ch6AAOeh.mjs → update-gAPjldWw.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
 import { i as TimelineEvent, s as TimelineEventUpdateInput } from "./timeline-DcsCXNUt.mjs";
 import { t as timelineEventView } from "./timeline-BgWz8DYK.mjs";

package/dist/{upgrade-TzILOkiM.mjs → upgrade-D3aDQZwd.mjs}

@@ -1,6 +1,6 @@
 import { g as errorMessage, i as AbortError, m as UnknownError, p as TimeoutError, u as NetworkError } from "./predicates-0C0TsWcJ.mjs";
 import { K as HttpError, X as parseJson, lt as outputFlags, nt as name, o as renderItem, p as writeText, rt as version, t as interruptSignal, v as promptConfirm } from "./cli.mjs";
-import { E as USER_AGENT, t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { E as USER_AGENT, t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { n as throwIfAborted, t as combineAborts } from "./signal-BNUlQjpc.mjs";
 import { n as streamProcess } from "./process-BQC3mK2k.mjs";
 import { z } from "zod";

package/dist/{upload-Do-kOGtc.mjs → upload-B8HbBXb8.mjs}

@@ -1,7 +1,7 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as ContentTranslationUploadResult } from "./content-translation-BrHOrmj9.mjs";
-import { n as requireUploadFilePath, t as readCsvFile } from "./upload-CdiDKe69.mjs";
+import { n as requireUploadFilePath, t as readCsvFile } from "./upload-BAD_9okY.mjs";
 //#region src/output/views/content-translation.ts
 const contentTranslationUploadView = {
 	compactPick: ContentTranslationUploadResult,

package/dist/{upload-CdiDKe69.mjs → upload-BAD_9okY.mjs}

@@ -1,5 +1,5 @@
 import { o as ConfigError, v as isFileNotFoundError } from "./predicates-0C0TsWcJ.mjs";
-import { D as fileNotFoundError } from "./runtime-iIsqiOwO.mjs";
+import { D as fileNotFoundError } from "./runtime-D5yfliIq.mjs";
 import { readFile } from "node:fs/promises";
 import { basename } from "node:path";
 //#region src/runtime/upload.ts

package/dist/{upload-B37bUVl_.mjs → upload-BqJLNCb1.mjs}

@@ -4,9 +4,9 @@ var upload_default = defineCommandGroup({
 	name: "upload",
 	description: "Upload CSV files into Metabase",
 	subCommands: {
-		csv: () => import("./csv-LP7sE-CS.mjs").then((m) => m.default),
-		append: () => import("./append-BPrVW4RB.mjs").then((m) => m.default),
-		replace: () => import("./replace-DoU0IFGd.mjs").then((m) => m.default)
+		csv: () => import("./csv-CxWsxJIB.mjs").then((m) => m.default),
+		append: () => import("./append-CdzKyHhn.mjs").then((m) => m.default),
+		replace: () => import("./replace-BfO6UFZN.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{uuid-Dqq2WfAT.mjs → uuid-BIDBDPLI.mjs}

@@ -1,6 +1,6 @@
 import { o as ConfigError } from "./predicates-0C0TsWcJ.mjs";
 import { f as writeJson, lt as outputFlags, mt as parseInteger, p as writeText } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 //#region src/commands/uuid.ts

package/dist/{values-CtY5zv0m.mjs → values-BDekphEw.mjs}

@@ -1,6 +1,6 @@
 import { h as formatScalar, it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { d as FieldValues } from "./field-C2qOViFZ.mjs";
 import { s as fieldValuesView } from "./field-CT4r6b92.mjs";
 //#region src/commands/field/values.ts

package/dist/{verify-DBTlWx-S.mjs → verify-BnZqq9Aw.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as ModerationReview } from "./moderation-review-Bf9bPNQI.mjs";
 import { i as moderationReviewView, n as verifyFlags, r as describeReview, t as reviewInput } from "./verify-flags-DEVMB9w0.mjs";
 //#region src/commands/dashboard/verify.ts

package/dist/{verify-BiB8jzXB.mjs → verify-CMTrDvAW.mjs}

@@ -1,6 +1,6 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
 import { t as parseId } from "./parse-id-EXZan40V.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { t as ModerationReview } from "./moderation-review-Bf9bPNQI.mjs";
 import { i as moderationReviewView, n as verifyFlags, r as describeReview, t as reviewInput } from "./verify-flags-DEVMB9w0.mjs";
 //#region src/commands/card/verify.ts

package/dist/{verify-DJ7fGyLL.mjs → verify-k0WHgc16.mjs}

@@ -1,7 +1,7 @@
-import { n as createClient } from "./client-DvWllzKd.mjs";
+import { n as createClient } from "./client-D2ycdMRO.mjs";
 import { g as errorMessage, l as MetabaseError, p as TimeoutError, u as NetworkError } from "./predicates-0C0TsWcJ.mjs";
 import { K as HttpError } from "./cli.mjs";
-import { B as probeServer, E as USER_AGENT } from "./runtime-iIsqiOwO.mjs";
+import { B as probeServer, E as USER_AGENT } from "./runtime-D5yfliIq.mjs";
 //#region src/core/auth/verify.ts
 const VERIFY_TIMEOUT_MS = 15e3;
 async function verifyAndProbe(url, credential, options = {}) {

package/dist/{wait-DEYagfq4.mjs → wait-C69z8PSw.mjs}

@@ -1,5 +1,5 @@
 import { it as connectionFlags, l as renderSummary, lt as outputFlags, ut as profileFlag } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-iIsqiOwO.mjs";
+import { t as defineMetabaseCommand } from "./runtime-D5yfliIq.mjs";
 import { n as DEFAULT_TIMEOUT_MS, t as DEFAULT_INTERVAL_MS } from "./poll-vxN__4cz.mjs";
 import { r as parseWaitSchedule } from "./wait-flags-C3cu_O0w.mjs";
 import { u as syncTaskView } from "./git-sync-D1aKczo6.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metabase/cli",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Metabase CLI",
   "license": "AGPL-3.0",
   "repository": {

package/skill-data/core/SKILL.md

@@ -156,7 +156,7 @@ What `--help` doesn't say: footguns and non-obvious behaviors.
 - **setup is one-shot.** `mb setup` walks `/api/setup` for a **fresh** instance only and errors on a configured one; mostly for bootstrapping local / e2e instances.
 - **eid** translates a string entity id → numeric id: `mb eid --model <model> <eid1,eid2> --json`. Entity ids are NanoIDs that can start with `-`, which the positional form misreads as a flag (shell quotes don't help) — for those, use `--body '{"entity_ids":{"card":["-…"]}}'` (the id is a JSON string value, immune to flag parsing).
 <!-- requires: library -->
-- **library.** The Library is a curated subtree (`library-data` "Data" + `library-metrics` "Metrics" under a `library` root): tables in **Data** lead data pickers and rank up in search; metrics in **Metrics** lead nav, search, and the query builder. `library get` shows its Data/Metrics collection ids; `library create` provisions it (idempotent). `library publish --table-ids/--db-ids/--schemas` publishes tables into Data, **resolving the Data collection and creating the Library if absent**; each `--schemas` entry is `<db-id>:<schema>` (`1:public`), not a bare name. `publish` cascades to upstream FK dependencies, `unpublish` to downstream dependents; both need **admin or data-analyst** (Curate alone won't publish) and exit **403** without write **and** query permission on every affected table. `table get`/`table list` carry `is_published` (`collection_id` under `--full`). Publishing leaves the Data collection out of git-sync scope: on a remote-sync instance, `mb git-sync add-collection <data-collection-id>` makes exports carry published tables' metadata (see `git-sync`).
+- **library.** The Library is a curated subtree (`library-data` "Data" + `library-metrics` "Metrics" under a `library` root): tables in **Data** lead data pickers and rank up in search; metrics in **Metrics** lead nav, search, and the query builder. `library get` shows its Data/Metrics collection ids; `library create` provisions it (idempotent). `library publish --table-ids/--db-ids/--schemas` publishes tables into Data, **resolving the Data collection and creating the Library if absent**; each `--schemas` entry is `<db-id>:<schema>` (`1:public`), not a bare name. `publish` cascades to upstream FK dependencies, `unpublish` to downstream dependents; both need **admin or data-analyst** (Curate alone won't publish) and exit **403** without write **and** query permission on every affected table. `table get`/`table list` carry `is_published` (`collection_id` under `--full`). On a remote-sync instance, `mb git-sync add-collection <library-id>` (the root) makes exports carry published tables' metadata (see `git-sync`).
 <!-- /requires -->
 - **query / uuid.** `mb query` runs MBQL (`--dry-run` → run; `mbql`). `mb uuid --count <n>` mints an aggregation's `lib/uuid` (`mbql`) and document node `_id`s (`document`).
 <!-- requires: library, tableListPublishedFilter -->
@@ -165,7 +165,7 @@ What `--help` doesn't say: footguns and non-obvious behaviors.
 
 ## Specialized skills (load on demand)
 
-This file is enough for any single-command task. For anything deeper, load the relevant skill **proactively** with `mb skills get <name>` — don't wing an MBQL body, a transform body, or the git-sync workflow from this overview.
+This file is enough for any single-command task. For anything deeper, load the relevant skill (`mb skills get <name>`) **proactively** — don't wing it from this overview.
 
 - **`mbql`** — authoring/fixing any MBQL query body (`mb query`, card `dataset_query`, transform `source.query`, measure/segment `definition`); reading `--dry-run` errors. The query-body reference.
 - **`native-sql`** — authoring a native SQL `dataset_query` with parameters: template tags, field filters vs. raw variables, snippets, card references, and wiring a tag to a dashboard filter. The SQL fallback when MBQL can't express it (`mbql` first).
@@ -185,6 +185,9 @@ This file is enough for any single-command task. For anything deeper, load the r
   <!-- /requires -->
   <!-- requires: remoteSync -->
 - **`git-sync`** — round-tripping content to/from a git remote.
+  <!-- /requires -->
+  <!-- requires: dataApps -->
+- **`data-app`** — data apps: create, preview, publish (start here).
 <!-- /requires -->
 - **`data-workflow`** — the guided, end-to-end data workflow: investigate raw data, build clean analysis-ready tables, define reusable segments/measures/metrics, answer questions, build dashboards. **Start here when the user states a goal rather than a single verb** — "make sense of my data", "build a data model", "be my data analyst". It detects where the data is and routes to the right stage.
 

package/skill-data/data-app/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: data-app
-description: Create, preview, publish and manage a Metabase data app — a React app Metabase serves at /apps/<slug> — create it, scaffold its project, run the dev preview and read its diagnostics feed, build and publish the bundle, turn it on or off, move it to another instance, delete it. Triggers — "build a data app", "make an internal tool in Metabase", "scaffold a data app", "publish my data app", "update the app", "the app is blank". Start here; the UI is in `data-app-ui`, questions and charts in `data-app-data`, filter controls in `data-app-filters`, writes in `data-app-actions`.
+description: Create, preview, publish and manage a Metabase data app — a React app Metabase serves at /apps/<slug> — create it, scaffold its project, run the dev preview and read its diagnostics feed, build and publish the bundle, turn it off, move it to another instance, delete it. Triggers — "build a data app", "make an internal tool in Metabase", "scaffold a data app", "publish my data app", "update the app", "the app is blank". Start here; the UI is in `data-app-ui`, questions and charts in `data-app-data`, filter controls in `data-app-filters`, writes in `data-app-actions`.
 allowed-tools: Read, Write, Edit, Bash, AskUserQuestion
 requires: [dataApps]
 ---
@@ -17,11 +17,11 @@ The work, in order:
 4. Start the dev preview (_Dev preview_), then write the UI under `src/` (`data-app-ui`; filter controls in `data-app-filters`).
 5. Build and publish (_Build and publish_).
 
-For every later change: regenerate `src/metabase.ts` if the app's collection changed, then build and set the bundle. Metabase receives only the built bundle; the source stays in the project directory, under git if the user keeps one.
+For every later change: regenerate `src/metabase.ts` if the app's collection changed, then build and set the bundle; in a synced repository, then export and commit the source as in _Move to another instance_. Metabase receives only the built bundle; the source stays in the project directory, which is the app's folder in the synced git repository when there is one (_Scaffold and install_).
 
 ## Before you start
 
-- Use an **admin** profile — only admins create apps and write the app's collection. `mb auth status --json | jq .user.isAdmin` prints `true` for one; otherwise ask the user for an admin profile (`mb auth list`).
+- Use an **admin** profile — only admins create apps and write the app's collection. `mb auth status --profile <name> --json | jq .user.isAdmin` prints `true` for one, and every command below takes that `--profile`; otherwise ask the user for an admin profile (`mb auth list`).
 - Run `mb data-app list`. A failure means the instance has no data apps: stop and tell the user.
 - Settle the **slug**, the `/apps/<slug>` URL: lowercase letters, digits and single dashes (`sales-overview`), at most 100 characters. If the app's purpose is unclear, ask "what's this app for?" and propose one.
 
@@ -31,18 +31,18 @@ For every later change: regenerate `src/metabase.ts` if the app's collection cha
 mb data-app create --body '{"name":"sales-overview","display_name":"Sales overview"}' --json
 ```
 
-`name` is the slug; `display_name` and `description` are optional. The app starts disabled, with an empty bundle. The answer's `resource_collection_id` is the id of the app's collection — note it. A `409` means the slug is taken: `mb data-app list` shows that app; reuse it or pick another slug.
+`name` is the slug; `display_name` and `description` are optional. The app starts enabled, with an empty bundle, open to admins until a group is assigned. The answer's `resource_collection_id` is the id of the app's collection — note it. A `409` means the slug is taken: `mb data-app list` shows that app; reuse it or pick another slug.
 
 ## Scaffold and install
 
 ```bash
-mb data-app scaffold sales-overview && cd sales-overview
+mb data-app scaffold <repo>/data_apps/sales-overview && cd <repo>/data_apps/sales-overview
 ```
 
-`scaffold [dir]` takes a **directory**, not the slug: it copies the Vite + React + TypeScript template into a new or empty directory (the current one when omitted) and needs no server. Then install the SDK, then the rest:
+`scaffold [dir]` takes a **directory**, not the slug: it copies the Vite + React + TypeScript template into a new or empty directory (the current one when omitted) and needs no server. When the instance syncs with a git repository (`mb git-sync status`), the directory is `data_apps/<slug>/` in a local clone of that repository (ask the user for its path, or clone the remote), where an export writes the app's `data_app.yaml` and bundle: an export leaves the source alone and an import ignores it, so the repository keeps the source with the app. `scaffold` needs an empty directory, so scaffold before the app's first export; for an app already in the repository, scaffold into a new directory and copy its files, dotfiles included (`cp -R <dir>/. data_apps/<slug>/`), in beside `data_app.yaml` and `dist/`; check `.gitignore` is there before `npm install`. Without a repository, use any new directory, and once remote sync is set up, move the project (without `node_modules/`, `dist/`, `.env.local` and a hand-written `data_app.yaml`) into `data_apps/<slug>/` before committing its source. Then install the SDK, then the rest:
 
 ```bash
-npm install @metabase/embedding-sdk-react@<major>-beta   # <major>: 66 for a version tag v1.66.x (`mb auth status --json | jq -r .version.tag`)
+npm install @metabase/embedding-sdk-react@<major>-beta   # <major>: 66 for a version tag v1.66.x (`mb auth status --profile <name> --json | jq -r .version.tag`)
 npm install && npm run typecheck && npm run build
 ```
 
@@ -58,12 +58,12 @@ The template is the bundle contract. Don't edit `package.json` by hand, and neve
 
 ```bash
 ( umask 077
-  URL=$(mb auth status --json | jq -r .url)
-  KEY=$(mb api-key create --body '{"name":"data-app <slug> dev","group_id":2}' --json | jq -r .unmasked_key)
+  URL=$(mb auth status --profile <name> --json | jq -r .url)
+  KEY=$(mb api-key create --profile <name> --body '{"name":"data-app <slug> dev","group_id":2}' --json | jq -r .unmasked_key)
   [ -n "$KEY" ] && [ "$KEY" != null ] && printf 'DATA_APP_MB_URL=%s\nDATA_APP_MB_API_KEY=%s\n' "$URL" "$KEY" > .env.local && echo written )
 ```
 
-Group `2` is Administrators. Never print `.env.local`. Delete the key at handoff (`mb api-key list`, then `mb api-key delete <id> --yes`); the next session writes a new one. A CORS error means the instance doesn't allow the preview's origin: ask the user to add `http://localhost:5174` under Admin → Embedding → Embedded analytics SDK → CORS.
+Group `2` is Administrators. Never print `.env.local`. Delete the key at handoff (`mb api-key list --profile <name>`, then `mb api-key delete <id> --yes --profile <name>`); the next session writes a new one. Metabase allows any localhost origin unless `MB_DISABLE_CORS_ON_LOCALHOST` is set, so a CORS error from the preview means it is: ask the user to unset it on this instance. Otherwise check `DATA_APP_MB_URL`.
 
 ### The diagnostics feed
 
@@ -96,7 +96,7 @@ curl -s "http://localhost:5174/__data-app/diagnostics?startEventId=0"
 - `clients: 0` means no tab is open, so empty `entries` prove nothing.
 - Before an edit, note `nextEventId`; after it, read again with that value as `startEventId`.
 - The feed answers for the running bundle: entries from replaced builds are counted in `staleEntries`, and anything still broken reports again under the new `buildId` (`?includeStale=true` shows the withheld ones). A failed build doesn't advance `buildId` and doesn't reach the feed — read the `npm run dev` terminal.
-- Quote `summary` as it is when you report it, and follow `hint` when there is one — except that you never add the Metabase URL to `allowed_hosts`. The feed keeps the last 200 entries; `curl -X DELETE …/__data-app/diagnostics` clears it.
+- Quote `summary` as it is when you report it, and follow `hint` when there is one — except that you never add the Metabase URL to `allowed_hosts`, and in a synced repository you set `allowed_hosts` with `mb data-app update`, export, and pull the export branch (_Move to another instance_) instead of editing `data_app.yaml`. A `frame-src` or `form-action` block can't be lifted in the preview (`data-app-ui`). The feed keeps the last 200 entries; `curl -X DELETE …/__data-app/diagnostics` clears it.
 
 | `kind`                             | Fix                                                                                                                 |
 | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------- |
@@ -110,12 +110,11 @@ curl -s "http://localhost:5174/__data-app/diagnostics?startEventId=0"
 ```bash
 npm run typecheck && npm run build
 mb data-app set-bundle sales-overview
-mb data-app set-enabled sales-overview true   # the first time
 ```
 
-`set-bundle` uploads `dist/index.js` (`--bundle` for another path) and replaces the app's bundle, live at once. A new app is disabled until `set-enabled` turns it on. Give the user `<metabase-url>/apps/<slug>`.
+`set-bundle` uploads `dist/index.js` (`--bundle` for another path) and replaces the app's bundle, live at once. A new app is on from the start; `mb data-app set-enabled <slug> false` turns it off, which only the user decides. An app turned off opens only in Data Studio → Data apps → the app → Overview; `/apps/<slug>` says "not found", for admins too. Give the user `<metabase-url>/apps/<slug>`.
 
-Admins open every app, enabled or not. Anyone else needs the app enabled (otherwise "not found") and one of their groups assigned to it (otherwise "You don't have access"), which only the user can do (Admin → Settings → Data apps → the app → Groups). A group reaches the app's collection and nothing more, so a viewer also needs data access to the tables its questions read.
+A viewer needs one of their groups assigned to the app (otherwise "You don't have access"), which only the user can do (Data Studio → Data apps → the app → Permissions). A group reaches the app's collection and nothing more, so a viewer also needs data access to the tables its questions read.
 
 ## Pitfalls
 
@@ -133,6 +132,6 @@ Admins open every app, enabled or not. Anyone else needs the app enabled (otherw
 ## Change, move, delete
 
 - **Turn off:** `mb data-app set-enabled <slug> false`. **Rename:** `mb data-app update <slug> --body '{"display_name":"…"}'` (also `description`, `allowed_hosts`).
-- **Outdated:** an app Metabase lists as _Outdated_ targets an older data-app contract: it won't open for anyone, and only admins see it listed, until it's migrated. Tell the user; don't change its code ad hoc.
-- **Move to another instance:** the app, its collection and what the collection holds are git-synced content. `mb git-sync export` (`git-sync`) writes `data_apps/<slug>/` with the bundle, and the collection under `collections/data_apps/`; importing the repository on the other instance recreates them with the same entity IDs, so the same `src/metabase.ts` and bundle work there. On a read-only instance the app's collection can't be edited: change it where it was built and export again.
-- **Delete:** confirm with the user, then `mb data-app delete <slug> --yes` — it removes the app, its bundle, its collection and the questions and actions in it. The project directory stays.
+- **Outdated:** an app Data Studio lists as _Outdated_ targets an older data-app contract: it won't open for anyone, and only admins see it, until it's migrated. Tell the user; don't change its code ad hoc.
+- **Move to another instance:** the app, its collection and what the collection holds are git-synced content. `mb git-sync export` (`git-sync`) writes `data_apps/<slug>/` with the bundle, and the collection under `collections/data_apps/`; importing the repository on the other instance recreates them with the same entity IDs, so the same `src/metabase.ts` works there. The first import there creates the app on, like `create`, open to admins until the user assigns groups; later imports keep its on/off state. The import doesn't check that the questions' tables are published on that instance, so the Library content they read goes in the same export: flag the Library root once (`mb git-sync add-collection <library-id>`, `git-sync`), or its metrics, measures and segments stay out of the repository; a data action needs its database's toggle on there too. Once the app is done, commit its source in `data_apps/<slug>/` on the branch you exported to, after the export. Pull the export branch: `git restore` a modified `dist/index.js`, then `git fetch`, `git switch <branch>`, `git pull --ff-only`. Then `git add data_apps/<slug>`, commit and push, and `mb git-sync import` whatever a cached `has-remote-changes` says, or the next export ends in `conflict`. The export writes `data_app.yaml` and `dist/index.js`, the bundle you uploaded; never edit or commit those two yourself, and when a fresh build changes `dist/index.js`, set the bundle and export again instead. The template's `.gitignore` keeps `node_modules/` and `.env.local` out. On a read-only synced instance only `set-enabled` works: creating, bundling, updating and deleting an app answer 403, and so does editing its collection; change it where it was built and export again.
+- **Delete:** confirm with the user, then `mb data-app delete <slug> --yes` — it removes the app, its bundle, its collection and the questions and actions in it. The project directory stays: in a synced repository, the next export removes the app's `data_app.yaml`, bundle and collection files; after that export, switch and pull the same way, delete the source in `data_apps/<slug>/` in a commit of your own, push, and import.

package/skill-data/data-app/template/README.md

@@ -7,7 +7,7 @@ and the `mb` data-app skills.
 ## Install
 
 Install the SDK tag matching the Metabase instance first, then the rest.
-`<major>` is 66 for a version tag v1.66.x (`mb auth status --json | jq -r .version.tag`);
+`<major>` is 66 for a version tag v1.66.x (`mb auth status --profile <name> --json | jq -r .version.tag`);
 `package.json` asks for any version, which would install `latest`.
 
 ```bash

package/skill-data/data-app-actions/SKILL.md

@@ -13,6 +13,8 @@ An **action** is a saved, parameterized SQL write — `INSERT`, `UPDATE` or `DEL
 2. Regenerate `src/metabase.ts` (`data-app-data`).
 3. Pass `actions.<name>` from it to `useAction`.
 
+An action in the app's collection can't be archived: to drop one, move it to a data actions collection (`mb data-action update <id> --body '{"collection_id":<id>}'`), then archive it.
+
 Each action there lists its parameters: the parameter slug (the key `execute` takes), `displayName` (a label, never a key), `jsType` (`string`, `number`, `Date`, `boolean` or `unknown`) and `required`. Never fake a call to an action `src/metabase.ts` doesn't list.
 
 ## The hook
@@ -83,6 +85,7 @@ export function NoteForm({ orderId, onSaved }: { orderId: number; onSaved: () =>
 After a write succeeds, refetch every query on screen it could have changed: `await Promise.all([orders.refetch(), totals.refetch()])`, the `refetch` that `useMetabaseQuery` returns.
 
 - Those queries live in a component above the trigger, which passes the refresh down; a query in the trigger's own component or below it can't be wired to it.
+- A `StaticQuestion` panel has no `refetch`: give it a `key` the parent bumps after the write, which remounts it and runs the question again.
 - Await the refresh before clearing the form or closing the modal, so stale rows never flash.
 - Never prepend `result` to a local list instead: ids, timestamps and computed columns come from the server.
 

package/skill-data/data-app-data/SKILL.md

@@ -15,11 +15,11 @@ A data app runs only the questions and actions in **the app's collection** (`dat
 
 ## Sources: the semantic layer only
 
-An app reads only what the user curated in the Library. These are hard rules:
+An app reads only what the user curated in the Library. Metabase refuses a question in the app's collection that breaks these rules:
 
-- **Tables published to the Library**, and nothing else: `mb table list --published-only --json`. That covers the question's source table, every join, and every table reached through a foreign key column.
-- **Metrics in the Library's Metrics collection** (its id is in `mb library get`; list it with `mb collection items <id> --json`), and the segments and measures of published tables (`mb segment list`, `mb measure list`). Prefer one that matches the concept over rebuilding it with filters and thresholds of your own.
-- **Other questions in the app's collection**, as a source. Never a question, model or metric from anywhere else.
+- **Tables published to the Library**, and nothing else: `mb table list --published-only --json`. That covers the question's source table, every join, every table reached through a foreign key column, the tables behind its segments and measures, and the tables whose columns Metabase shows in place of a foreign key.
+- **Metrics in the Library's Metrics collection**, as aggregations (its id is in `mb library get`; list it with `mb collection items <id> --json`), and the segments and measures of published tables (`mb segment list`, `mb measure list`). Prefer one that matches the concept over rebuilding it with filters and thresholds of your own.
+- **No other question as a source** — not a question in the app's collection, a model or a metric. Every question starts from a published table.
 - **MBQL only**, never native SQL.
 
 When the app needs a table or metric the Library lacks, stop: name what's missing and ask the user to publish the table or move the metric into the Library. Don't publish it yourself unless the user says to, and never work around the gap with an unpublished table, a copy of the data, or SQL.
@@ -44,7 +44,7 @@ mb card query <id> --json --max-bytes 0 | jq '{row_count, first: .data.rows[0]}'
 Plan the questions from what the app shows and picks from — each chart, KPI, table and filter option list needs one, and several panels may share one. Each takes one of two shapes:
 
 - **Aggregated**, when the breakdown is fixed: revenue by month, top products. Runtime clauses can then name only the columns it returns, its breakouts and aggregations.
-- **Rows**, when a runtime filter targets a column an aggregation would drop — revenue by month, filtered by product category. The question returns the raw columns (`CREATED_AT`, `TOTAL`, `CATEGORY`), and the hook filters and aggregates them at runtime (_Runtime clauses_).
+- **Rows**, when a runtime filter targets a column an aggregation would drop — revenue by month, filtered by product category. The question returns the raw columns (`CREATED_AT`, `TOTAL`, `CATEGORY`), and the hook filters and aggregates them at runtime (_Runtime clauses_). When a Library metric or measure defines the number, never rebuild it from rows: filter an aggregated question instead (_Runtime clauses_).
 
 Also:
 
@@ -150,7 +150,7 @@ const { query } = useMetabaseQueryObject(queries.orderRows, {
 - `filter(...)` takes one value: `filter(col, "=", [a, b])` compiles but is not an IN filter, and several filters AND together. So a filter picks one value or All; for a multi-select, ask the user whether a single choice will do.
 - Text operators are case-sensitive, with no option to change it: say so in the search box's placeholder.
 - `time-interval` (`[-30, "day"]`, `[0, "year"]` for this year) is relative to when the query runs: a fixed window belongs in the question, not the hook.
-- On a rows question, aggregate with any of `aggregations.count`, `sum`, `avg`, `median`, `min`, `max`, `distinct`, naming each result (`{ name: "revenue" }`) to order or read it by — two unnamed results of one operator collide, and generated names such as `sum_2` aren't stable. On an aggregated question, re-aggregate only sums and counts, which add up.
+- On a rows question, aggregate with any of `aggregations.count`, `sum`, `avg`, `median`, `min`, `max`, `distinct`, naming each result (`{ name: "revenue" }`) to order or read it by — two unnamed results of one operator collide, and generated names such as `sum_2` aren't stable. Never aggregate an aggregated question at runtime: a sum over its rows is wrong for distinct counts, averages, ratios and levels such as MRR. A runtime filter only picks its rows. So a date filter on it offers presets of whole, complete buckets at the question's own grain (Last month, Last 12 months on a month question), each range from the first bucket's start to the last bucket's start, and no Custom range; a KPI shows one bucket, as `scalar` (a `smartscalar` filtered to one bucket loses its comparison), with no All time. A filter on a column needs a question broken out by that column too; its All is no clause when the panel shows that column (a series per value), and otherwise a second question without that breakout, both hooks called and switched with `enabled`. When a request needs more, say so.
 - A sort the user picks: map each choice to a column explicitly (`{ revenue: "revenue", orders: "order_count" }`) rather than passing the user's value through.
 - `enabled: false` holds the query back, for example until the user picks an item.
 - Write the arrays inline (spreads are fine): the hooks compare by content, so a new array per render doesn't refetch. A clauses object built outside the call needs `as const`, or `aggregations` loses the tuple type `breakouts` need; a shared `ReturnType<typeof filter>[]` built with `push` breaks the operator types the same way.