@neocompose/cli 0.36.13 → 0.38.0

package/CHANGELOG.md

@@ -1,5 +1,93 @@
 # Changelog
 
+## [0.38.0] - 2026-08-26
+
+### Added
+
+- `neo doctor` audits unprojected value rows. A pulled base row that no emitted
+  file projects and that no other record names is read by `neo status` as
+  CLI-managed loose state, so no status run will ever mention it however it
+  diverges — the blind spot that made the P75 collapse's losses invisible. Each
+  orphan root is reported once, with the rows reachable only through it, and
+  `--json` carries them under the finding's `repair` entry. The Hello World
+  corpus reports 86 such rows.
+
+### Changed
+
+- **Breaking:** Unity export schema version is now 28. A structured-leaf field
+  override travels under the `~partial` envelope key where it previously
+  travelled under `$partial`; that key is the only thing telling a field
+  override apart from a whole-leaf record, so an SDK at 27 would silently
+  mis-apply the override rather than refuse the export. Authored `new { … }`
+  source is unchanged, and stored bodies are rewritten server-side.
+- Constructor arguments no longer emit `@id` pins. A named argument recovers
+  its row from the schema key its parameter settles, so the annotation was
+  machine identity written into hand-authored constructions — 125 of them in
+  the Neowyn corpus. A list entry, whose position recovers nothing, still
+  carries its identity.
+- A warm no-op `neo status` on the Neowyn corpus drops from ~25-28s to ~3s:
+  resolver documents are memoized across expansions, inheritance indexes and
+  merged-schema memos are validated against the snapshot instead of rebuilt,
+  the animation validation gate is scoped to what changed, and the
+  construction-expression prober caches its negative answers. Phase timings now
+  account for the full runtime.
+
+### Fixed
+
+- Emit a stored row that derives its content from its member's declared default
+  as absence rather than as a bare constructor call. The spelled-out form
+  claimed a construction the author never wrote and reported every required
+  member the declaration settles as unsettled; a child whose content diverges
+  from the default still emits its sparse override.
+- Emit an empty dictionary or ordered-list member default as `= {}` and `= []`.
+  Folding the empty container into no initializer at all made the declaration
+  read as required-and-unsettled, so every construction of the owning class
+  warned `unsettled-required-member`.
+- Preserve the stored shape of a construction pulled from before the P75
+  collapse. Re-lowering rewrote a legacy root into the collapsed shape
+  unconditionally, so a pull of an untouched corpus reported those roots as
+  locally edited and pushing that clean pull was a storage rewrite nobody asked
+  for.
+- Recover a constructor argument's structural path from a fully sparse root. A
+  row storing no body at all skipped the `constructorArgs` recovery, so the
+  next push minted a fresh subtree for an argument that had not changed.
+- Resolve a stored row at a member with a row-backed default by replaying that
+  default. Reads replayed the bare constructor while the emitter replayed the
+  default, and the disagreement dropped overrides the corpus genuinely holds.
+- Make `neo login`, `neo whoami`, and `neo logout` honor the current
+  workspace's `apiBaseUrl`. An explicit `--api` still wins, and commands run
+  outside a workspace keep the build default, so login no longer stores a
+  credential for a different origin than working-copy commands use.
+
+## [0.37.0] - 2026-08-24
+
+### Added
+
+- Store class instances sparsely (P75). A pushed construction persists its
+  root with the recorded constructor recipe and only the authored overrides;
+  omitted members resolve virtually from the class source and track later
+  default edits until overridden. Storage schema advances to 27.
+- Store forwarding constructors. A subclass that forwards its parameter to a
+  base constructor (`Child(seed) : Base(bank: seed)`) now lowers through the
+  base's projection instead of being refused as settling no member.
+
+### Fixed
+
+- Carry construction provenance through push. The pending-id seed rewrite
+  and the dry-run verifier both dropped the constructor recipe, so every
+  pushed construction materialized as a full eager default tree server-side.
+- Let `neo push --dry-run` accept source-authored constructions. Derived
+  virtual-value assignments now re-derive from their instance root instead
+  of failing the UUID shape gate, and seed mismatches name the first
+  differing path.
+- Round-trip override removal. Deleting an override line from an initializer
+  now plans the coherent root-update/child-delete pair and no longer fails
+  dry-run verification with "Stored member value … was not pulled".
+- Stop the post-push source rewrite corrupting a file that declares several
+  types. The preserved authored file no longer shadows the canonical
+  one-file-per-declaration split, which duplicated every non-first
+  declaration with an already-used stable ID.
+
 ## [0.36.13] - 2026-08-22
 
 ### Fixed

package/README.md

@@ -417,8 +417,8 @@ authorization boundary.
 | Command                                               | Purpose                                                                   |
 | ----------------------------------------------------- | ------------------------------------------------------------------------- |
 | `--version`                                           | Print the installed CLI package version.                                  |
-| `login`                                               | Authenticate the selected profile.                                        |
-| `whoami`                                              | Inspect the selected profile.                                             |
+| `login [--api <url>]`                                 | Authenticate the selected profile.                                        |
+| `whoami [--api <url>]`                                | Inspect the selected profile.                                             |
 | `logout [--api <url>]`                                | Delete the stored credential for one API origin and revoke its session.   |
 | `init --project <id> [--version <id>]`                | Create a format-4 working copy and perform its first reset pull.          |
 | `doctor`                                              | Validate format/compiler/editor/source/file contracts; no .NET discovery. |
@@ -445,6 +445,11 @@ tracked native source and `neo push`. Localization commands can mutate
 authoritative localization records that `.neo` does not fully represent; run
 `neo pull` immediately afterward before further source edits or push.
 
+`login`, `whoami`, and `logout` use the current workspace's `apiBaseUrl` when
+run beneath a `neo.json`. An explicit `--api` takes priority. Outside a
+workspace, they use the CLI build's default API origin. Login prints the
+selected origin before it requests or stores a credential.
+
 Tokens use the OS credential store when available and a protected local file
 only as fallback. CI can use `NEO_COMPOSE_TOKEN` or `--token-stdin`. The
 editor profile cannot publish releases; server authorization remains the