@neocompose/cli 0.36.11 → 0.36.13

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [0.36.13] - 2026-08-22
+
+### Fixed
+
+- Refresh short-lived Convex JWTs during long-running commands. History plan
+  polling and other multi-request operations now keep using the existing CLI
+  device session instead of failing when the initial 15-minute JWT expires.
+
+## [0.36.12] - 2026-08-22
+
+### Fixed
+
+- Let project owners and admins plan, apply, inspect, and resume history
+  rewrites through the CLI device login. The editor profile now requests the
+  changelog write grant, the registered OAuth client allows it, and every
+  history rewrite endpoint declares its read or write scope. Existing CLI
+  sessions must run `neo logout` followed by `neo login` once after upgrading.
+
 ## [0.36.11] - 2026-08-21
 
 ### Fixed

package/dist/neo.mjs

@@ -572,6 +572,7 @@ var init_login = __esm({
       "project:version:create",
       "project:version:status:read",
       "project:version:changelog:read",
+      "project:version:changelog:write",
       "project:record:schema:read",
       "project:record:schema:write",
       "project:record:values:read",
@@ -64547,6 +64548,11 @@ var init_constructor_argument_ownership = __esm({
     init_compile_ns_property();
     init_value_row_owner_members();
     MaterializedValueGraphContext = class {
+      /**
+       * P79 §7a. Generic in the caller's document view so a pass typed against a
+       * narrowed view does not get the whole document handed back on the first
+       * line it reads `graph.document`.
+       */
       document;
       valuesById;
       childrenByContainerId;
@@ -72157,9 +72163,9 @@ function constructionInitEvaluator(ctx, createdValues, argumentScopes, construct
     let currentId = memberId;
     while (currentId !== void 0 && !visited.has(currentId)) {
       visited.add(currentId);
-      const declaringClassIds = indexes.declaringClassIdsByMemberId.get(currentId);
+      const declaringClassIds2 = indexes.declaringClassIdsByMemberId.get(currentId);
       const owner = inheritanceChain.find(
-        (schemaClass2) => declaringClassIds?.has(schemaClass2.id)
+        (schemaClass2) => declaringClassIds2?.has(schemaClass2.id)
       );
       if (owner !== void 0) return owner.id;
       currentId = indexes.containerMemberIdByEntryId.get(currentId) ?? indexes.memberById.get(currentId)?.extendsMemberId;
@@ -82139,8 +82145,17 @@ function transactionImpactsAnyOwnerMember(scope, impactedIds) {
 function collectNeoScriptRecompileTargets(args) {
   if (args.forceRecompile === true) return completeTargets(args.postDocument);
   const explicit = explicitTargetIds(args.changes);
-  const { impactedIds, impactedTypeNames, constructedClassIds } = collectChangedContractIds(args);
+  const {
+    impactedIds,
+    changedValueIds,
+    impactedTypeNames,
+    constructedClassIds
+  } = collectChangedContractIds(args);
   for (const id2 of args.additionalImpactedIds ?? []) impactedIds.add(id2);
+  for (const id2 of args.additionalChangedValueIds ?? []) {
+    changedValueIds.add(id2);
+    explicit.valueIds.add(id2);
+  }
   includeDerivedConstructionContracts(
     constructedClassIds,
     args.postDocument.classes
@@ -82157,7 +82172,7 @@ function collectNeoScriptRecompileTargets(args) {
       dependentsById.set(dependencyId, dependents);
     }
   }
-  const queue = [...impactedIds];
+  const queue = [...impactedIds, ...changedValueIds];
   for (let index = 0; index < queue.length; index += 1) {
     const dependencyId = queue[index];
     if (dependencyId === void 0) continue;
@@ -82166,22 +82181,24 @@ function collectNeoScriptRecompileTargets(args) {
     }
   }
   const constructorOwnerById = constructorOwners(args.postDocument);
-  const impactedSourceNames = collectImpactedSourceNames({
-    currentDocument: args.currentDocument,
-    postDocument: args.postDocument,
+  const gradesSourceOnlyBodies = impactedIds.size > 0 || impactedTypeNames.size > 0;
+  const impactScope = {
     impactedIds,
+    changedValueIds,
     impactedTypeNames,
-    constructedClassIds
-  });
-  const memberIds = new Set(explicit.memberIds);
-  for (const member of args.postDocument.members) {
-    if (recordDependsOnChangedContract(
-      member,
+    constructedClassIds,
+    impactedSourceNames: gradesSourceOnlyBodies ? collectImpactedSourceNames({
+      currentDocument: args.currentDocument,
+      postDocument: args.postDocument,
       impactedIds,
+      changedValueIds,
       impactedTypeNames,
-      constructedClassIds,
-      impactedSourceNames
-    )) {
+      constructedClassIds
+    }) : /* @__PURE__ */ new Set()
+  };
+  const memberIds = new Set(explicit.memberIds);
+  for (const member of args.postDocument.members) {
+    if (recordDependsOnChangedContract(member, impactScope)) {
       memberIds.add(member.id);
     }
   }
@@ -82189,10 +82206,7 @@ function collectNeoScriptRecompileTargets(args) {
   const valueIds = selectedRecordIds(
     postValues,
     explicit.valueIds,
-    impactedIds,
-    impactedTypeNames,
-    constructedClassIds,
-    impactedSourceNames
+    impactScope
   );
   if (impactedIds.size > 0 && postValues.length > 0) {
     const scope = withVariantOwnershipRoots(
@@ -82219,35 +82233,23 @@ function collectNeoScriptRecompileTargets(args) {
     constructorIds: selectedRecordIds(
       args.postDocument.constructors ?? [],
       explicit.constructorIds,
-      impactedIds,
-      impactedTypeNames,
-      constructedClassIds,
-      impactedSourceNames,
+      impactScope,
       (record3) => constructorOwnerById.get(record3.id) ?? null
     ),
     migrationIds: selectedRecordIds(
       args.postDocument.migrations ?? [],
       explicit.migrationIds,
-      impactedIds,
-      impactedTypeNames,
-      constructedClassIds,
-      impactedSourceNames
+      impactScope
     ),
     dialogueNodeIds: selectedRecordIds(
       args.postDocument.dialogueNodes ?? [],
       explicit.dialogueNodeIds,
-      impactedIds,
-      impactedTypeNames,
-      constructedClassIds,
-      impactedSourceNames
+      impactScope
     ),
     dialogueGroupIds: selectedRecordIds(
       args.postDocument.dialogueGroups ?? [],
       explicit.dialogueGroupIds,
-      impactedIds,
-      impactedTypeNames,
-      constructedClassIds,
-      impactedSourceNames
+      impactScope
     ),
     valueIds
   };
@@ -82323,6 +82325,7 @@ function isCompilerReferenceField(field) {
 }
 function collectChangedContractIds(args) {
   const impactedIds = /* @__PURE__ */ new Set();
+  const changedValueIds = /* @__PURE__ */ new Set();
   const impactedTypeNames = /* @__PURE__ */ new Set();
   const constructedClassIds = /* @__PURE__ */ new Set();
   const currentMembers = new Map(
@@ -82383,7 +82386,7 @@ function collectChangedContractIds(args) {
       const current2 = currentValues.get(change.recordId);
       const next2 = postValues.get(change.recordId);
       if (current2 === void 0 || next2 === void 0 || Reflect.get(current2, "classId") !== Reflect.get(next2, "classId")) {
-        impactedIds.add(change.recordId);
+        changedValueIds.add(change.recordId);
       }
       continue;
     }
@@ -82429,7 +82432,12 @@ function collectChangedContractIds(args) {
       }
     }
   }
-  return { impactedIds, impactedTypeNames, constructedClassIds };
+  return {
+    impactedIds,
+    changedValueIds,
+    impactedTypeNames,
+    constructedClassIds
+  };
 }
 function generatedConstructorMemberContractChanged(current, next) {
   if (current === void 0 || next === void 0) return true;
@@ -82616,50 +82624,51 @@ function explicitTargetIds(changes) {
   }
   return result;
 }
-function selectedRecordIds(records2, explicitIds, impactedIds, impactedTypeNames, constructedClassIds, impactedSourceNames, ownerId = () => null) {
+function selectedRecordIds(records2, explicitIds, scope, ownerId = () => null) {
   const selected = new Set(explicitIds);
   for (const record3 of records2) {
     const owner = ownerId(record3);
-    if (owner !== null && impactedIds.has(owner) || recordDependsOnChangedContract(
-      record3,
-      impactedIds,
-      impactedTypeNames,
-      constructedClassIds,
-      impactedSourceNames
-    )) {
+    if (owner !== null && scope.impactedIds.has(owner) || recordDependsOnChangedContract(record3, scope)) {
       selected.add(record3.id);
     }
   }
   return selected;
 }
-function recordDependsOnChangedContract(record3, impactedIds, impactedTypeNames, constructedClassIds, impactedSourceNames) {
+function recordDependsOnChangedContract(record3, scope) {
   const recordId = isObjectRecord4(record3) ? record3.id : void 0;
-  if (typeof recordId === "string" && impactedIds.has(recordId)) return true;
-  if (intersects(collectCompilerReferenceIds(record3), impactedIds)) return true;
-  if (intersects(collectCompilerReferenceNames(record3), impactedTypeNames)) {
+  if (typeof recordId === "string" && scope.impactedIds.has(recordId)) {
     return true;
   }
-  if (intersects(collectConstructedClassIds(record3), constructedClassIds)) {
+  const referenceIds = collectCompilerReferenceIds(record3);
+  if (intersects(referenceIds, scope.impactedIds)) return true;
+  if (intersects(referenceIds, scope.changedValueIds)) return true;
+  if (intersects(collectCompilerReferenceNames(record3), scope.impactedTypeNames)) {
     return true;
   }
-  if (impactedIds.size === 0 && impactedTypeNames.size === 0) return false;
+  if (intersects(collectConstructedClassIds(record3), scope.constructedClassIds)) {
+    return true;
+  }
+  if (scope.impactedIds.size === 0 && scope.impactedTypeNames.size === 0) {
+    return false;
+  }
   if (!containsAuthoredNeoScriptSource(record3)) return false;
   if (containsCompiledNeoScriptBody(record3)) return false;
-  if (impactedSourceNames === null) return true;
+  if (scope.impactedSourceNames === null) return true;
   const sourceIdentifiers = collectAuthoredNeoScriptSourceIdentifiers(record3);
   if (sourceIdentifiers === null) return true;
-  return intersects(sourceIdentifiers, impactedSourceNames);
+  return intersects(sourceIdentifiers, scope.impactedSourceNames);
 }
 function collectImpactedSourceNames(args) {
   const names = new Set(args.impactedTypeNames);
   let recoveredContract = args.impactedTypeNames.size > 0;
+  const isImpactedRecordId = (id2) => args.impactedIds.has(id2) || args.changedValueIds.has(id2);
   const collectDocument = (document) => {
     const classById = new Map(
       document.classes.map((schemaClass2) => [schemaClass2.id, schemaClass2])
     );
     const ownerByConstructorId = constructorOwners(document);
     const impactedValueIds = new Set(
-      (document.values ?? []).filter((value) => args.impactedIds.has(value.id)).map((value) => value.id)
+      (document.values ?? []).filter((value) => isImpactedRecordId(value.id)).map((value) => value.id)
     );
     const scope = withVariantOwnershipRoots(document, document.variants ?? []);
     const ownerByValueId = resolveOwnerMembersForValues(
@@ -82688,7 +82697,7 @@ function collectImpactedSourceNames(args) {
       ...document.values ?? []
     ];
     for (const record3 of records2) {
-      if (!args.impactedIds.has(record3.id)) continue;
+      if (!isImpactedRecordId(record3.id)) continue;
       recoveredContract = true;
       collectDeclaredSourceNames(record3, names);
       const ownerClassId = ownerByConstructorId.get(record3.id);
@@ -89997,7 +90006,7 @@ function prepareServerOwnedSchemaCommit(args) {
   const hasValueChange = authoredChanges.some(
     (change) => change.recordKind === "value"
   );
-  const hasAdditionalContractImpact = (args.additionalImpactedIds?.size ?? 0) > 0;
+  const hasAdditionalContractImpact = (args.additionalImpactedIds?.size ?? 0) > 0 || (args.additionalChangedValueIds?.size ?? 0) > 0;
   if (!hasSchemaChange && !hasMigrationChange && !hasDialogueSourceChange && !hasValueChange && !hasAdditionalContractImpact) {
     return authoredChanges;
   }
@@ -90010,6 +90019,7 @@ function prepareServerOwnedSchemaCommit(args) {
     postDocument: authoredPostDocument,
     changes: authoredChanges,
     additionalImpactedIds: args.additionalImpactedIds,
+    additionalChangedValueIds: args.additionalChangedValueIds,
     forceRecompile: args.forceRecompile
   });
   const currentById = new Map(
@@ -90319,7 +90329,8 @@ function materializePreparedInstanceInitializers(args) {
   const existingValueById = new Map(
     args.document.values.map((value) => [value.id, value])
   );
-  const currentGraph = new MaterializedValueGraphContext(args.document);
+  let currentGraph = null;
+  const requireCurrentGraph = () => currentGraph ??= new MaterializedValueGraphContext(args.document);
   const rootKinds = /* @__PURE__ */ new Map();
   const materializationScope = withVariantOwnershipRoots(
     compiledDocument,
@@ -90359,7 +90370,7 @@ function materializePreparedInstanceInitializers(args) {
     if (existingConstructedRoot) {
       if (!isLiteralValueContent(materialized.root) || existingRoot.classId !== materialized.root.classId || !replayedCreationDataMatches({
         currentDocument: args.document,
-        currentGraph,
+        currentGraph: requireCurrentGraph(),
         currentRoot: existingRoot,
         replayRoot: materialized.root,
         replayCreated: materialized.createdValues
@@ -91349,9 +91360,46 @@ function drainConstructedGraphValidations(args) {
     });
   }
 }
+function indexAuthoredSeedDocument(document) {
+  const declaringClassIdsByMemberId = /* @__PURE__ */ new Map();
+  for (const schemaClass2 of document.classes) {
+    const declared = /* @__PURE__ */ new Set();
+    for (const memberId of Object.values(schemaClass2.schema)) {
+      if (typeof memberId !== "string") continue;
+      if (declared.has(memberId)) continue;
+      declared.add(memberId);
+      const owners = declaringClassIdsByMemberId.get(memberId);
+      if (owners === void 0) {
+        declaringClassIdsByMemberId.set(memberId, [schemaClass2.id]);
+        continue;
+      }
+      owners.push(schemaClass2.id);
+    }
+  }
+  return {
+    valuesById: indexRecordsById(document.values),
+    membersById: indexRecordsById(document.members),
+    localizedTextIds: new Set(
+      (document.localizedTexts ?? []).map((text) => text.id)
+    ),
+    declaringClassIdsByMemberId
+  };
+}
+function declaringClassIds(index, memberId) {
+  return index.declaringClassIdsByMemberId.get(memberId) ?? [];
+}
+function hasLiveMemberChange(prepared) {
+  return prepared.some(
+    (change) => change.recordKind === "member" && change.operation !== "delete" && change.nextData !== void 0
+  );
+}
 function materializeAuthoredValueSeeds(args) {
+  if (args.authoredValueSeeds.length === 0 && !hasLiveMemberChange(args.prepared)) {
+    return;
+  }
   const pendingGraphValidations = [];
   materializeStaticSeedBindingMembers(args);
+  const documentIndex = indexAuthoredSeedDocument(args.document);
   const seedByMemberId = new Map(
     args.authoredValueSeeds.map((seed) => [seed.memberId, seed])
   );
@@ -91371,6 +91419,7 @@ function materializeAuthoredValueSeeds(args) {
       consumedSeedMemberIds.add(member.id);
       materializeInstanceDefaultSeed({
         document: args.document,
+        documentIndex,
         prepared: args.prepared,
         pendingGraphValidations,
         memberChange: { index, change },
@@ -91393,9 +91442,7 @@ function materializeAuthoredValueSeeds(args) {
         `Static Generic member "${member.name}" (${member.id}) cannot materialize a value.`
       );
     }
-    const owners = args.document.classes.filter(
-      (schemaClass2) => Object.values(schemaClass2.schema).includes(member.id)
-    );
+    const owners = declaringClassIds(documentIndex, member.id);
     if (owners.length !== 1) {
       throw new Error(
         `Stored static member "${member.name}" (${member.id}) must have exactly one direct declaring class; found ${owners.length}.`
@@ -91403,7 +91450,7 @@ function materializeAuthoredValueSeeds(args) {
     }
     if (change.operation === "update" && seed === void 0) continue;
     if (change.operation === "create" && seed === void 0 && typeof member.valueId === "string") {
-      if (!args.document.values.some((value) => value.id === member.valueId)) {
+      if (!documentIndex.valuesById.has(member.valueId)) {
         throw new Error(
           `Stored static member "${member.name}" (${member.id}) binds missing value "${member.valueId}".`
         );
@@ -91427,6 +91474,7 @@ function materializeAuthoredValueSeeds(args) {
       member: materializationMember
     }) : materializeAuthoredStaticSeed({
       document: args.document,
+      documentIndex,
       member: materializationMember,
       // P61 must leave a computed static root as an init-backed prepared
       // row until `materializePreparedInstanceInitializers` runs. The
@@ -91436,7 +91484,7 @@ function materializeAuthoredValueSeeds(args) {
       seed: { ...seed, values: seed.values ?? [] }
     });
     const { createdValues, localizedTexts, storageKeyDeclarations, rootValue } = materialized;
-    const ownedValueId = args.document.members.find((candidate) => candidate.id === member.id)?.valueId ?? derivedMemberValueId(member.id);
+    const ownedValueId = documentIndex.membersById.get(member.id)?.valueId ?? derivedMemberValueId(member.id);
     if (seed?.valueId !== void 0 && seed.valueId !== ownedValueId) {
       throw new Error(
         `Static value seed for member "${member.name}" (${member.id}) binds value "${seed.valueId}", but the member owns value "${ownedValueId}".`
@@ -91449,7 +91497,7 @@ function materializeAuthoredValueSeeds(args) {
     }
     if (seed?.values === void 0 && rootValue.id !== ownedValueId) {
       assertMintedRootValueIdIsFree({
-        document: args.document,
+        documentIndex,
         prepared: args.prepared,
         member,
         valueId: ownedValueId
@@ -91471,7 +91519,7 @@ function materializeAuthoredValueSeeds(args) {
           rootValue.id,
           {
             mapKey: null,
-            classId: owners[0].id
+            classId: owners[0]
           }
         ]
       ])
@@ -91519,12 +91567,11 @@ function materializeAuthoredValueSeeds(args) {
   }
   for (const seed of args.authoredValueSeeds) {
     if (consumedSeedMemberIds.has(seed.memberId)) continue;
-    const member = args.document.members.find(
-      (candidate) => candidate.id === seed.memberId
-    );
+    const member = documentIndex.membersById.get(seed.memberId);
     if (member !== void 0 && member.isStatic !== true && !isProjectRootMember(args.document.project, member.id)) {
       materializeInstanceDefaultSeed({
         document: args.document,
+        documentIndex,
         prepared: args.prepared,
         pendingGraphValidations,
         memberChange: null,
@@ -91536,6 +91583,7 @@ function materializeAuthoredValueSeeds(args) {
     }
     materializeExistingAuthoredValueSeed({
       document: args.document,
+      documentIndex,
       prepared: args.prepared,
       pendingGraphValidations,
       seed,
@@ -91550,9 +91598,7 @@ function materializeAuthoredValueSeeds(args) {
   });
 }
 function materializeExistingAuthoredValueSeed(args) {
-  const member = args.document.members.find(
-    (candidate) => candidate.id === args.seed.memberId
-  );
+  const member = args.documentIndex.membersById.get(args.seed.memberId);
   if (member === void 0) {
     throw new Error(
       `Member value seed "${args.seed.memberId}" does not target a stored member in this schema commit.`
@@ -91574,9 +91620,7 @@ function materializeExistingAuthoredValueSeed(args) {
       `Existing value graph seed for member "${member.name}" (${member.id}) targets value "${args.seed.valueId}", but the member binds "${String(member.valueId)}".`
     );
   }
-  const owners = args.document.classes.filter(
-    (schemaClass2) => Object.values(schemaClass2.schema).includes(member.id)
-  );
+  const owners = declaringClassIds(args.documentIndex, member.id);
   if (!isRootMember && owners.length !== 1) {
     throw new Error(
       `Stored static member "${member.name}" (${member.id}) must have exactly one direct declaring class; found ${owners.length}.`
@@ -91584,6 +91628,7 @@ function materializeExistingAuthoredValueSeed(args) {
   }
   const materialized = materializeAuthoredStaticSeed({
     document: args.document,
+    documentIndex: args.documentIndex,
     member,
     seed: { ...args.seed, values: args.seed.values },
     allowExistingRows: true
@@ -91604,7 +91649,7 @@ function materializeExistingAuthoredValueSeed(args) {
           mapKey: null,
           // A root member's row has no enclosing class, so declared storage
           // keys below it resolve against no parent class.
-          classId: owners[0]?.id
+          classId: owners[0]
         }
       ]
     ])
@@ -91623,9 +91668,7 @@ function materializeExistingAuthoredValueSeed(args) {
   });
   for (const value of materialized.createdValues) {
     if (materialized.existingValueIds.has(value.id)) {
-      if (isInitValueContent(value) && !isInitValueContent(
-        args.document.values.find((candidate) => candidate.id === value.id)
-      )) {
+      if (isInitValueContent(value) && !isInitValueContent(args.documentIndex.valuesById.get(value.id))) {
         args.prepared.push({
           recordKind: "value",
           recordId: value.id,
@@ -91829,9 +91872,7 @@ function materializeInstanceDefaultSeed(args) {
       `Constructed default seed for member "${args.member.name}" (${args.member.id}) requires a root value id and explicit value rows.`
     );
   }
-  const owners = args.document.classes.filter(
-    (schemaClass2) => Object.values(schemaClass2.schema).includes(args.member.id)
-  );
+  const owners = declaringClassIds(args.documentIndex, args.member.id);
   if (owners.length !== 1) {
     throw new Error(
       `Constructed default member "${args.member.name}" (${args.member.id}) must have exactly one direct declaring class; found ${owners.length}.`
@@ -91849,6 +91890,7 @@ function materializeInstanceDefaultSeed(args) {
     existingValueIds
   } = materializeAuthoredStaticSeed({
     document: args.document,
+    documentIndex: args.documentIndex,
     member: materializationMember,
     seed: { ...args.seed, values: args.seed.values },
     allowExistingRows: args.memberChange === null || args.memberChange.change.operation === "update"
@@ -91862,7 +91904,7 @@ function materializeInstanceDefaultSeed(args) {
         rootValue.id,
         {
           mapKey: null,
-          classId: owners[0].id
+          classId: owners[0]
         }
       ]
     ])
@@ -91953,7 +91995,7 @@ function materializeDefaultStaticSeed(args) {
   };
 }
 function assertMintedRootValueIdIsFree(args) {
-  if (args.document.values.some((value) => value.id === args.valueId)) {
+  if (args.documentIndex.valuesById.has(args.valueId)) {
     throw new Error(
       `Member "${args.member.name}" (${args.member.id}) owns value "${args.valueId}", which already exists in this version.`
     );
@@ -91990,7 +92032,7 @@ function materializeAuthoredStaticSeed(args) {
   const requestedIds = /* @__PURE__ */ new Set([requestedRootId, ...authoredRows.keys()]);
   const existingValueIds = /* @__PURE__ */ new Set();
   for (const id2 of requestedIds) {
-    const existing = args.document.values.find((value) => value.id === id2);
+    const existing = args.documentIndex.valuesById.get(id2);
     if (existing === void 0) continue;
     if (args.allowExistingRows !== true) {
       throw new Error(`Value "${id2}" already exists.`);
@@ -92008,6 +92050,7 @@ function materializeAuthoredStaticSeed(args) {
   const usedRows = /* @__PURE__ */ new Set();
   const rootValue = materializeAuthoredSeedRow({
     document: args.document,
+    documentIndex: args.documentIndex,
     member: args.member,
     row: seedRootRow(args.member, args.seed, requestedRootId),
     authoredRows,
@@ -92035,6 +92078,7 @@ function materializeAuthoredStaticSeed(args) {
   }
   const seededLocalizedTexts = materializeStaticLocalizedTexts({
     document: args.document,
+    documentIndex: args.documentIndex,
     seeds: args.seed.localizedTexts ?? [],
     createdValues
   });
@@ -92170,9 +92214,7 @@ function materializeStaticLocalizedTexts(args) {
       throw new Error(`Localized text seed repeats id "${seed.id}".`);
     }
     seen.add(seed.id);
-    if ((args.document.localizedTexts ?? []).some(
-      (text) => text.id === seed.id
-    ) || args.document.values.some((value) => value.id === seed.id)) {
+    if (args.documentIndex.localizedTextIds.has(seed.id) || args.documentIndex.valuesById.has(seed.id)) {
       throw new Error(`Localized text "${seed.id}" already exists.`);
     }
     const owner = args.createdValues.find((value) => value.id === seed.valueId);
@@ -92248,7 +92290,7 @@ function materializeAuthoredSeedRow(args) {
     ...isMemberClassBase(resolvedStoredMember) && args.row.classId !== null ? { topLevelClassId: args.row.classId } : {}
   });
   renameCreatedValueId({
-    document: args.document,
+    documentIndex: args.documentIndex,
     createdValues: args.createdValues,
     storageKeyDeclarations: args.storageKeyDeclarations,
     generatedId: generatedRoot.id,
@@ -92336,7 +92378,7 @@ function materializeAuthoredClassFields(args) {
         `Class "${effectiveClassId}" has no stored member "${schemaKey}".`
       );
     }
-    const childMember = requireDocumentMember(args.document, childMemberId);
+    const childMember = requireSeedMember(args.documentIndex, childMemberId);
     const currentBody = isStringValueRecord(args.rootValue.value) ? args.rootValue.value : {};
     const previousId = currentBody[schemaKey];
     if (previousId !== void 0 && previousId !== childId) {
@@ -92365,8 +92407,8 @@ function materializeAuthoredListItems(args) {
   if (!Array.isArray(args.row.value)) {
     throw new Error(`List value "${args.row.id}" requires an array body.`);
   }
-  const entryMember = requireDocumentMember(
-    args.document,
+  const entryMember = requireSeedMember(
+    args.documentIndex,
     args.member.entryMemberId
   );
   const unordered = listKindOf(args.member) === "unordered";
@@ -92397,8 +92439,8 @@ function materializeAuthoredDictionaryEntries(args) {
       `Dictionary value "${args.row.id}" requires an object body.`
     );
   }
-  const entryMember = requireDocumentMember(
-    args.document,
+  const entryMember = requireSeedMember(
+    args.documentIndex,
     args.member.entryMemberId
   );
   const body = {};
@@ -92416,9 +92458,7 @@ function materializeAuthoredChild(args) {
   if (authored !== void 0) {
     return materializeAuthoredSeedRow({ ...args, row: authored });
   }
-  const existing = args.document.values.find(
-    (value) => value.id === args.childId
-  );
+  const existing = args.documentIndex.valuesById.get(args.childId);
   if (existing === void 0) {
     throw new Error(
       `Authored value graph references missing row "${args.childId}".`
@@ -92428,7 +92468,7 @@ function materializeAuthoredChild(args) {
 }
 function renameCreatedValueId(args) {
   if (args.generatedId === args.requestedId) return;
-  if (args.document.values.some((value2) => value2.id === args.requestedId) && !args.replaceExistingIds.has(args.requestedId) || args.createdValues.some(
+  if (args.documentIndex.valuesById.has(args.requestedId) && !args.replaceExistingIds.has(args.requestedId) || args.createdValues.some(
     (value2) => value2.id === args.requestedId && value2.id !== args.generatedId
   )) {
     throw new Error(`Value "${args.requestedId}" already exists.`);
@@ -92500,10 +92540,8 @@ function collectStringReferences2(value, output) {
     collectStringReferences2(entry, output);
   }
 }
-function requireDocumentMember(document, memberId) {
-  const member = document.members.find(
-    (candidate) => candidate.id === memberId
-  );
+function requireSeedMember(documentIndex, memberId) {
+  const member = documentIndex.membersById.get(memberId);
   if (member === void 0) throw new Error(`Member "${memberId}" is missing.`);
   return member;
 }
@@ -92761,6 +92799,18 @@ function prepareServerOwnedValueInitializerBodies(args) {
     });
   }
 }
+function collectDelegateSweepRows(args) {
+  if (args.targetIds.size === 0) return [];
+  const preparedValueIds = indexChangesByRecordId(args.prepared, "value");
+  const sweepRows = [];
+  for (const value of args.postDocument.values) {
+    if (!args.targetIds.has(value.id)) continue;
+    if (preparedValueIds.has(value.id)) continue;
+    const row = delegateValueRow(value);
+    if (row !== null) sweepRows.push(row);
+  }
+  return sweepRows;
+}
 function delegateValueRow(value) {
   if (!isMemberValue(value) || !isLiteralValueContent(value)) return null;
   if (!isNSDelegateClosureValueDraft(value.value) && !isNSDelegateClosureValue(value.value)) {
@@ -92778,11 +92828,7 @@ function prepareServerOwnedDelegateValueBodies(args) {
     const row = delegateValueRow(change.nextData);
     if (row !== null) explicitRows.set(index, row);
   }
-  const sweepRows = args.postDocument.values.filter(
-    (value) => args.targetIds.has(value.id) && delegateValueRow(value) !== null && !args.prepared.some(
-      (change) => change.recordKind === "value" && change.recordId === value.id
-    )
-  );
+  const sweepRows = collectDelegateSweepRows(args);
   if (explicitRows.size === 0 && sweepRows.length === 0) return;
   const committedDocument = applyProjectVersionWriteChanges(
     args.postDocument,
@@ -93305,8 +93351,7 @@ function applyProjectVersionWriteChanges(document, changes) {
   const hasGranularDialogueNodes = document.dialogueNodes !== void 0 || changes.some((change) => change.recordKind === "dialogue-node");
   const dialogueRecords = hasGranularDialogueRecords ? applyArrayChanges(document.dialogueRecords ?? [], changes, "dialogue") : void 0;
   const dialogueNodes = hasGranularDialogueNodes ? applyArrayChanges(document.dialogueNodes ?? [], changes, "dialogue-node") : void 0;
-  return {
-    ...document,
+  const projected = {
     project: applySingletonChange(document.project, changes, "project"),
     members: applyArrayChanges(document.members, changes, "member"),
     classes: applyArrayChanges(document.classes, changes, "class"),
@@ -93360,8 +93405,6 @@ function applyProjectVersionWriteChanges(document, changes) {
     ),
     enums: applyArrayChanges(document.enums, changes, "enum"),
     interfaces: applyArrayChanges(document.interfaces, changes, "interface"),
-    ...dialogueRecords === void 0 ? {} : { dialogueRecords },
-    ...dialogueNodes === void 0 ? {} : { dialogueNodes },
     dialogues: dialogueRecords === void 0 || dialogueNodes === void 0 ? document.dialogues : materializeDialogues(
       dialogueRecords,
       dialogueNodes
@@ -93377,6 +93420,15 @@ function applyProjectVersionWriteChanges(document, changes) {
       "migration"
     )
   };
+  return {
+    ...document,
+    ...projected,
+    ...dialogueRecords === void 0 ? {} : { dialogueRecords },
+    ...dialogueNodes === void 0 ? {} : { dialogueNodes }
+    // The document spread above carries every bucket the caller's view declares
+    // beyond the projected ones, so the result is the same view; TypeScript
+    // cannot prove that of an object literal built over a type parameter.
+  };
 }
 function applySingletonChange(current, changes, recordKind) {
   const change = changes.find(
@@ -93417,6 +93469,16 @@ function canonicallyEqual2(left, right) {
   return canonicalJsonStringify(left) === canonicalJsonStringify(right);
 }
 function reconcileVariantConstructorArgs(args) {
+  const changeIndexByValueId = indexChangesByRecordId(args.prepared, "value");
+  const commitTouchesProjectionSchema = variantConstructorArgsSchemaIsTouched(
+    args.prepared
+  );
+  if (changeIndexByValueId.size === 0 && !commitTouchesProjectionSchema) {
+    return;
+  }
+  if ((args.document.variants ?? []).length === 0 && !args.prepared.some((change) => change.recordKind === "variant")) {
+    return;
+  }
   const postDocument = applyProjectVersionWriteChanges(
     args.document,
     args.prepared
@@ -93427,7 +93489,6 @@ function reconcileVariantConstructorArgs(args) {
   const classById = indexRecordsById(postDocument.classes);
   const memberById2 = indexRecordsById(postDocument.members);
   const constructorById = indexRecordsById(postDocument.constructors ?? []);
-  const changeIndexByValueId = indexChangesByRecordId(args.prepared, "value");
   let baseHashByValueId = null;
   for (const variant of variants) {
     const root = valueById.get(variant.valueId);
@@ -93444,6 +93505,9 @@ function reconcileVariantConstructorArgs(args) {
     if (constructorRecord === void 0) continue;
     if (typeof root.value !== "object" || root.value === null) continue;
     if (Array.isArray(root.value)) continue;
+    if (!commitTouchesProjectionSchema && !variantConstructorArgsAreTouched(root, changeIndexByValueId)) {
+      continue;
+    }
     const nextArgs = {};
     for (let index = 0; index < constructorRecord.argumentTypes.length; index += 1) {
       const argument2 = constructorRecord.argumentTypes[index];
@@ -93513,6 +93577,21 @@ function reconcileVariantConstructorArgs(args) {
     });
   }
 }
+function variantConstructorArgsSchemaIsTouched(prepared) {
+  return prepared.some(
+    (change) => VARIANT_CONSTRUCTOR_ARGS_SCHEMA_RECORD_KINDS.has(change.recordKind)
+  );
+}
+function variantConstructorArgsAreTouched(root, changeIndexByValueId) {
+  if (changeIndexByValueId.has(root.id)) return true;
+  const body = root.value;
+  for (const schemaKey of NEO_VARIANT_SCHEMA_KEY_BY_ARGUMENT_NAME.values()) {
+    const childId = body[schemaKey];
+    if (typeof childId !== "string") continue;
+    if (changeIndexByValueId.has(childId)) return true;
+  }
+  return false;
+}
 function variantConstructorArgumentIsRestValue(schemaKey, value) {
   if (value === null) return true;
   if (schemaKey === NEO_VARIANT_OVERRIDES_SCHEMA_KEY) {
@@ -93561,7 +93640,7 @@ function appendVariantGraphCascadeDeletes(args) {
     });
   }
 }
-var SERVER_COMPILATION_PROJECT_CACHE_LIMIT, serverCompilationProjectCache, READ_ONLY_SOURCE_CONVERSION_INTENT_SOURCE, SCHEMA_RECORD_KINDS, DIALOGUE_SOURCE_RECORD_KINDS, NEO_VARIANT_SCHEMA_KEY_BY_ARGUMENT_NAME;
+var SERVER_COMPILATION_PROJECT_CACHE_LIMIT, serverCompilationProjectCache, READ_ONLY_SOURCE_CONVERSION_INTENT_SOURCE, SCHEMA_RECORD_KINDS, DIALOGUE_SOURCE_RECORD_KINDS, NEO_VARIANT_SCHEMA_KEY_BY_ARGUMENT_NAME, VARIANT_CONSTRUCTOR_ARGS_SCHEMA_RECORD_KINDS;
 var init_project_version_schema_commit = __esm({
   "../src/database/project-version-schema-commit.ts"() {
     "use strict";
@@ -93623,6 +93702,9 @@ var init_project_version_schema_commit = __esm({
       ["overrides", NEO_VARIANT_OVERRIDES_SCHEMA_KEY],
       ["childoverrides", NEO_VARIANT_CHILD_OVERRIDES_SCHEMA_KEY]
     ]);
+    VARIANT_CONSTRUCTOR_ARGS_SCHEMA_RECORD_KINDS = /* @__PURE__ */ new Set(
+      ["constructor", "class", "member", "variant"]
+    );
   }
 });
 
@@ -105739,6 +105821,7 @@ var init_api = __esm({
 
 // src/convex.ts
 import { ConvexHttpClient } from "convex/browser";
+import { Buffer as Buffer2 } from "node:buffer";
 async function mintConvexJwt(apiBaseUrl) {
   const sessionToken = loadToken(apiBaseUrl);
   if (sessionToken === null) {
@@ -105796,9 +105879,10 @@ async function resolveConvexUrl(workspace) {
 }
 async function createConvexClient(workspace) {
   const convexUrl = await resolveConvexUrl(workspace);
-  const client = new ConvexHttpClient(convexUrl);
-  client.setAuth(await mintConvexJwt(workspace.config.apiBaseUrl));
-  return client;
+  return await createAuthenticatedConvexClient(
+    convexUrl,
+    workspace.config.apiBaseUrl
+  );
 }
 async function createConvexClientForApi(apiBaseUrl) {
   const fromEnv = process.env.NEXT_PUBLIC_CONVEX_URL;
@@ -105816,9 +105900,52 @@ async function createConvexClientForApi(apiBaseUrl) {
     });
     convexUrl = await discoverConvexUrlFromProjectsResponse(response);
   }
-  const client = new ConvexHttpClient(convexUrl);
-  client.setAuth(await mintConvexJwt(apiBaseUrl));
-  return client;
+  return await createAuthenticatedConvexClient(convexUrl, apiBaseUrl);
+}
+async function createAuthenticatedConvexClient(convexUrl, apiBaseUrl) {
+  const tokenCache = new ConvexJwtCache(apiBaseUrl);
+  const initialToken = await tokenCache.getToken();
+  const authenticatedFetch = async (input, init) => {
+    const headers = new Headers(
+      init?.headers ?? (input instanceof Request ? input.headers : void 0)
+    );
+    headers.set("Authorization", `Bearer ${await tokenCache.getToken()}`);
+    return await fetch(input, { ...init, headers });
+  };
+  return new ConvexHttpClient(convexUrl, {
+    auth: initialToken,
+    fetch: authenticatedFetch
+  });
+}
+function convexJwtExpiration(token) {
+  const segments = token.split(".");
+  if (segments.length !== 3) {
+    throw new Error("Convex token response is not a three-segment JWT.");
+  }
+  let payloadJson;
+  try {
+    payloadJson = Buffer2.from(segments[1], "base64url").toString("utf8");
+  } catch {
+    throw new Error(
+      "Convex token response has an invalid JWT payload encoding."
+    );
+  }
+  let payload;
+  try {
+    payload = JSON.parse(payloadJson);
+  } catch {
+    throw new Error("Convex token response has an invalid JWT payload.");
+  }
+  if (typeof payload !== "object" || payload === null) {
+    throw new Error("Convex token response has a non-object JWT payload.");
+  }
+  if (!("exp" in payload)) {
+    throw new Error('Convex token response JWT is missing an "exp" claim.');
+  }
+  if (typeof payload.exp !== "number" || !Number.isFinite(payload.exp)) {
+    throw new Error('Convex token response JWT has an invalid "exp" claim.');
+  }
+  return payload.exp * 1e3;
 }
 async function discoverConvexUrlFromProjectsResponse(response) {
   const headerUrl = response.headers.get("x-neo-convex-url");
@@ -105843,7 +105970,7 @@ function missingProjectsConvexUrlError() {
     "Could not discover the Convex deployment URL (/api/projects supplied neither a non-empty x-neo-convex-url header nor a non-empty convexUrl JSON field)."
   );
 }
-var generatedApiModule, generatedApiValue, api2;
+var generatedApiModule, generatedApiValue, api2, CONVEX_JWT_REFRESH_LEEWAY_MS, ConvexJwtCache;
 var init_convex = __esm({
   "src/convex.ts"() {
     "use strict";
@@ -105856,6 +105983,38 @@ var init_convex = __esm({
       throw new Error("The generated Convex API module did not export api.");
     }
     api2 = generatedApiValue;
+    CONVEX_JWT_REFRESH_LEEWAY_MS = 6e4;
+    ConvexJwtCache = class {
+      constructor(apiBaseUrl) {
+        this.apiBaseUrl = apiBaseUrl;
+      }
+      apiBaseUrl;
+      token = null;
+      expiresAt = 0;
+      refreshPromise = null;
+      async getToken() {
+        if (this.token !== null && Date.now() + CONVEX_JWT_REFRESH_LEEWAY_MS < this.expiresAt) {
+          return this.token;
+        }
+        const pending = this.refreshPromise ?? this.refresh();
+        this.refreshPromise = pending;
+        try {
+          return await pending;
+        } finally {
+          if (this.refreshPromise === pending) this.refreshPromise = null;
+        }
+      }
+      async refresh() {
+        const token = await mintConvexJwt(this.apiBaseUrl);
+        const expiresAt = convexJwtExpiration(token);
+        if (expiresAt <= Date.now()) {
+          throw new Error("Convex token response contains an expired JWT.");
+        }
+        this.token = token;
+        this.expiresAt = expiresAt;
+        return token;
+      }
+    };
   }
 });
 
@@ -114586,7 +114745,7 @@ var init_registry2 = __esm({
     PROJECT_SCHEMA_CONTRACT = Object.freeze({
       formatVersion: 3,
       contractVersion: "3.14",
-      cliVersion: "0.36.11",
+      cliVersion: "0.36.13",
       projectFileUploadBatchSize: 32,
       documentRecords: {
         member: {
@@ -121205,7 +121364,7 @@ There is no --keep-current: preserving current semantic state defines flatten.
 async function main() {
   const args = parseArgs(process.argv.slice(2));
   if (args.command === "--version") {
-    console.log("0.36.11");
+    console.log("0.36.13");
     return;
   }
   if (args.command === null || args.command === "help" || args.command === "--help" || args.command === "-h") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neocompose/cli",
-  "version": "0.36.11",
+  "version": "0.36.13",
   "description": "Neo Compose native project-source CLI with bidirectional sync.",
   "license": "MIT",
   "type": "module",
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "@inquirer/prompts": "^8.5.2",
-    "convex": "^1.40.0",
+    "convex": "^1.45.0",
     "ignore": "^7.0.6"
   },
   "devDependencies": {

package/skills/neocompose-cli/SKILL.md

@@ -9,7 +9,7 @@ description: >-
   `@neocompose/cli` or `node cli/bin/neo.mjs` in the neo-compose repository.
 ---
 
-<!-- reviewed-through-cli: 0.36.11 -->
+<!-- reviewed-through-cli: 0.36.13 -->
 
 # Neo Compose CLI
 

package/skills/neocompose-cli/references/cli-development.md

@@ -83,7 +83,7 @@ wrappers.
 The marker near the top of `SKILL.md` must exactly match the package version:
 
 ```html
-<!-- reviewed-through-cli: 0.36.11 -->
+<!-- reviewed-through-cli: 0.36.13 -->
 ```
 
 The quoted version above is checked too, so this instruction cannot go stale

package/skills/neocompose-cli/references/commands-and-sync.md

@@ -132,12 +132,24 @@ neo merge <branch> [--dry-run] [--migrate]
 neo release cut [--bump major|minor|patch] [--dry-run]
 neo history inspect
 neo history log
+neo history prune [--project <id|@latest|@current>]
+neo history flatten [--project <id|@latest|@current>] --version <id|@latest|@current>
+neo history apply --plan <plan-id> [--confirm-scope <project-id>[/<version-id>]]
+neo history status --run <run-id>
+neo history resume --run <run-id>
 ```
 
 Treat branches as copy-on-write forks and releases as immutable snapshots. The
 server derives the minimum compatibility bump; a caller may only raise it.
 Require the release login profile for release operations.
 
+History rewrites require project owner or admin authority. `prune` and
+`flatten` create immutable plans without deleting anything. `apply` starts the
+destructive run after the plan has sealed. Production also requires the exact
+scope confirmation shown by the plan. CLI
+tokens issued before 0.36.12 do not hold the history write grant, so run
+`neo logout` followed by `neo login` once after upgrading.
+
 ## Authentication and automation
 
 ```sh
@@ -155,7 +167,9 @@ targeted repair is handed instead of scanning a project to rediscover them.
 The Node CLI talks directly to authenticated Convex APIs through the
 session-gated CAS boundary. Tokens use the OS credential store when available
 and a protected file only as fallback. Use `NEO_COMPOSE_TOKEN` or
-`--token-stdin` in CI. The editor profile cannot publish releases; server
+`--token-stdin` in CI. The CLI automatically re-mints its short-lived Convex
+JWT before expiry during long-running commands; the stored device session
+remains the credential. The editor profile cannot publish releases; server
 scopes remain the security boundary.
 
 `neo logout [--api <url>]` deletes the stored credential for exactly one API