@neocompose/cli 0.37.0 → 0.38.1

package/CHANGELOG.md

@@ -1,5 +1,95 @@
 # Changelog
 
+## [0.38.1] - 2026-08-27
+
+### Changed
+
+- A stored construction from before the P75 collapse now converges to the
+  sparse shape on its next push. Such a row recorded every
+  constructor-settled member twice — once as creation data and once as a body
+  key — and re-lowering used to preserve that duplication forever. The
+  duplicate body keys are now dropped and the construction's provenance is
+  stamped explicitly. This is a one-time storage convergence with no change in
+  resolved values: each argument row is still named by the creation data that
+  already named it, so nothing is stranded, and the authored creation data is
+  untouched, so a converged push is not reported as an edit. Rows already in
+  the sparse shape are unaffected.
+
+### Fixed
+
+- Lower an authored default echo on a fresh row to absence instead of a stored
+  override. Spelling a member's declared default verbatim in a new
+  initializer — a leaf equal to its declaration, or a bare class construction
+  whose members the declaration wholly settles — minted a pending row that
+  push verification then rejected as absent from the verified source manifest.
+- Converge a stored inline member default toward the collapsed sparse shape
+  instead of re-minting its seed. A pre-collapse stored default that equals
+  its declaration reported `create 1 member value seed(s)` on every push of an
+  otherwise clean checkout.
+- Keep a compiled delegate action when a re-lowered argument's source code is
+  unchanged. Re-lowering emitted the code-only shape over the stored compiled
+  closure, so an untouched delegate argument round-tripped as an edit and
+  evaluation lost its compiled action until the next server compile.
+
+## [0.38.0] - 2026-08-26
+
+### Added
+
+- `neo doctor` audits unprojected value rows. A pulled base row that no emitted
+  file projects and that no other record names is read by `neo status` as
+  CLI-managed loose state, so no status run will ever mention it however it
+  diverges — the blind spot that made the P75 collapse's losses invisible. Each
+  orphan root is reported once, with the rows reachable only through it, and
+  `--json` carries them under the finding's `repair` entry. The Hello World
+  corpus reports 86 such rows.
+
+### Changed
+
+- **Breaking:** Unity export schema version is now 28. A structured-leaf field
+  override travels under the `~partial` envelope key where it previously
+  travelled under `$partial`; that key is the only thing telling a field
+  override apart from a whole-leaf record, so an SDK at 27 would silently
+  mis-apply the override rather than refuse the export. Authored `new { … }`
+  source is unchanged, and stored bodies are rewritten server-side.
+- Constructor arguments no longer emit `@id` pins. A named argument recovers
+  its row from the schema key its parameter settles, so the annotation was
+  machine identity written into hand-authored constructions — 125 of them in
+  the Neowyn corpus. A list entry, whose position recovers nothing, still
+  carries its identity.
+- A warm no-op `neo status` on the Neowyn corpus drops from ~25-28s to ~3s:
+  resolver documents are memoized across expansions, inheritance indexes and
+  merged-schema memos are validated against the snapshot instead of rebuilt,
+  the animation validation gate is scoped to what changed, and the
+  construction-expression prober caches its negative answers. Phase timings now
+  account for the full runtime.
+
+### Fixed
+
+- Emit a stored row that derives its content from its member's declared default
+  as absence rather than as a bare constructor call. The spelled-out form
+  claimed a construction the author never wrote and reported every required
+  member the declaration settles as unsettled; a child whose content diverges
+  from the default still emits its sparse override.
+- Emit an empty dictionary or ordered-list member default as `= {}` and `= []`.
+  Folding the empty container into no initializer at all made the declaration
+  read as required-and-unsettled, so every construction of the owning class
+  warned `unsettled-required-member`.
+- Preserve the stored shape of a construction pulled from before the P75
+  collapse. Re-lowering rewrote a legacy root into the collapsed shape
+  unconditionally, so a pull of an untouched corpus reported those roots as
+  locally edited and pushing that clean pull was a storage rewrite nobody asked
+  for.
+- Recover a constructor argument's structural path from a fully sparse root. A
+  row storing no body at all skipped the `constructorArgs` recovery, so the
+  next push minted a fresh subtree for an argument that had not changed.
+- Resolve a stored row at a member with a row-backed default by replaying that
+  default. Reads replayed the bare constructor while the emitter replayed the
+  default, and the disagreement dropped overrides the corpus genuinely holds.
+- Make `neo login`, `neo whoami`, and `neo logout` honor the current
+  workspace's `apiBaseUrl`. An explicit `--api` still wins, and commands run
+  outside a workspace keep the build default, so login no longer stores a
+  credential for a different origin than working-copy commands use.
+
 ## [0.37.0] - 2026-08-24
 
 ### Added

package/README.md

@@ -417,8 +417,8 @@ authorization boundary.
 | Command                                               | Purpose                                                                   |
 | ----------------------------------------------------- | ------------------------------------------------------------------------- |
 | `--version`                                           | Print the installed CLI package version.                                  |
-| `login`                                               | Authenticate the selected profile.                                        |
-| `whoami`                                              | Inspect the selected profile.                                             |
+| `login [--api <url>]`                                 | Authenticate the selected profile.                                        |
+| `whoami [--api <url>]`                                | Inspect the selected profile.                                             |
 | `logout [--api <url>]`                                | Delete the stored credential for one API origin and revoke its session.   |
 | `init --project <id> [--version <id>]`                | Create a format-4 working copy and perform its first reset pull.          |
 | `doctor`                                              | Validate format/compiler/editor/source/file contracts; no .NET discovery. |
@@ -445,6 +445,11 @@ tracked native source and `neo push`. Localization commands can mutate
 authoritative localization records that `.neo` does not fully represent; run
 `neo pull` immediately afterward before further source edits or push.
 
+`login`, `whoami`, and `logout` use the current workspace's `apiBaseUrl` when
+run beneath a `neo.json`. An explicit `--api` takes priority. Outside a
+workspace, they use the CLI build's default API origin. Login prints the
+selected origin before it requests or stores a credential.
+
 Tokens use the OS credential store when available and a protected local file
 only as fallback. CI can use `NEO_COMPOSE_TOKEN` or `--token-stdin`. The
 editor profile cannot publish releases; server authorization remains the