kintone-migrator 0.24.4 → 0.24.6

package/dist/index.mjs

@@ -4,9 +4,10 @@ import "dotenv/config";
 import { cli, define } from "gunshi";
 import * as p from "@clack/prompts";
 import { parse, stringify } from "yaml";
+import { KintoneRestAPIClient, KintoneRestAPIError } from "@kintone/rest-api-client";
 import { access, mkdir, readFile, writeFile } from "node:fs/promises";
 import { basename, dirname, extname, join, resolve } from "node:path";
-import { KintoneRestAPIClient, KintoneRestAPIError } from "@kintone/rest-api-client";
+import { realpathSync } from "node:fs";
 import * as v from "valibot";
 import pc from "picocolors";
 
@@ -290,6 +291,10 @@ var ConflictError = class extends ApplicationError {
 function isConflictError(error) {
 	return error instanceof ConflictError;
 }
+const UnauthenticatedErrorCode = {
+	AuthenticationRequired: "AUTHENTICATION_REQUIRED",
+	InvalidCredentials: "INVALID_CREDENTIALS"
+};
 var UnauthenticatedError = class extends ApplicationError {
 	name = "UnauthenticatedError";
 	constructor(code, message, cause) {
@@ -300,6 +305,7 @@ var UnauthenticatedError = class extends ApplicationError {
 function isUnauthenticatedError(error) {
 	return error instanceof UnauthenticatedError;
 }
+const ForbiddenErrorCode = { InsufficientPermissions: "INSUFFICIENT_PERMISSIONS" };
 var ForbiddenError = class extends ApplicationError {
 	name = "ForbiddenError";
 	constructor(code, message, cause) {
@@ -327,7 +333,8 @@ const SystemErrorCode = {
 	NetworkError: "NETWORK_ERROR",
 	StorageError: "STORAGE_ERROR",
 	DocumentGenerationError: "DOCUMENT_GENERATION_ERROR",
-	ExternalApiError: "EXTERNAL_API_ERROR"
+	ExternalApiError: "EXTERNAL_API_ERROR",
+	ExecutionError: "EXECUTION_ERROR"
 };
 var SystemError = class extends ApplicationError {
 	name = "SystemError";
@@ -549,6 +556,60 @@ async function applyAction({ container }) {
 	});
 }
 
+//#endregion
+//#region src/core/adapters/kintone/wrapKintoneError.ts
+const KINTONE_REVISION_CONFLICT_CODE = "GAIA_CO02";
+const KINTONE_MAINTENANCE_MODE_CODE = "GAIA_NO02";
+function formatMessage(message, error) {
+	if (error instanceof KintoneRestAPIError && error.message) return `${message}: ${error.message}`;
+	if (error instanceof Error && error.message) return `${message}: ${error.message}`;
+	return message;
+}
+/**
+* Converts an unknown error thrown during a kintone API call into the
+* appropriate application-layer error.
+*
+* - {@link BusinessRuleError} and {@link ApplicationError} (including all
+*   subclasses such as {@link SystemError}, {@link ValidationError}, etc.)
+*   are re-thrown as-is so that errors raised inside a try block are never
+*   silently converted.
+* - {@link KintoneRestAPIError} is mapped by HTTP status (401/403/404/409/400)
+*   and kintone-specific codes (`GAIA_CO02` revision conflict, `GAIA_NO02`
+*   maintenance mode).
+* - Everything else becomes a {@link SystemError} with code `ExternalApiError`.
+*
+* **Note on 400 mapping**: All 400 errors (except `GAIA_CO02`) are mapped to
+* {@link ValidationError}. This is intentionally simplified — some 400 codes
+* (e.g. `GAIA_RE18` record limit, `GAIA_AP01` app unavailable) may have
+* different semantics, but for this CLI tool a single `ValidationError`
+* with the original kintone message in the error detail is sufficient.
+*
+* @throws {UnauthenticatedError} when kintone returns 401
+* @throws {ForbiddenError} when kintone returns 403 (non-GAIA_NO02)
+* @throws {SystemError} when kintone returns 403 with GAIA_NO02 (maintenance mode)
+* @throws {NotFoundError} when kintone returns 404
+* @throws {ConflictError} when kintone returns 409 or GAIA_CO02
+* @throws {ValidationError} when kintone returns 400 (non-GAIA_CO02)
+* @throws {SystemError} for all other kintone errors and unknown errors
+*/
+function wrapKintoneError(error, message) {
+	if (isBusinessRuleError(error)) throw error;
+	if (error instanceof ApplicationError) throw error;
+	const detail = formatMessage(message, error);
+	if (error instanceof KintoneRestAPIError) {
+		if (error.status === 401) throw new UnauthenticatedError(UnauthenticatedErrorCode.InvalidCredentials, detail, error);
+		if (error.status === 403) {
+			if (error.code === KINTONE_MAINTENANCE_MODE_CODE) throw new SystemError(SystemErrorCode.ExternalApiError, `${detail} (app is in maintenance mode — GAIA_NO02)`, error);
+			throw new ForbiddenError(ForbiddenErrorCode.InsufficientPermissions, detail, error);
+		}
+		if (error.status === 404) throw new NotFoundError(NotFoundErrorCode.NotFound, detail, error);
+		if (error.code === KINTONE_REVISION_CONFLICT_CODE) throw new ConflictError(ConflictErrorCode.Conflict, `${detail} (revision conflict — GAIA_CO02). Please retry the operation.`, error);
+		if (error.status === 409) throw new ConflictError(ConflictErrorCode.Conflict, detail, error);
+		if (error.status === 400) throw new ValidationError(ValidationErrorCode.InvalidInput, detail, error);
+	}
+	throw new SystemError(SystemErrorCode.ExternalApiError, detail, error);
+}
+
 //#endregion
 //#region src/core/adapters/kintone/actionConfigurator.ts
 function fromKintoneDestApp(raw) {
@@ -634,9 +695,7 @@ var KintoneActionConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get app actions", error);
+			throw wrapKintoneError(error, "Failed to get app actions");
 		}
 	}
 	async updateActions(params) {
@@ -650,15 +709,22 @@ var KintoneActionConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateAppActions(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update app actions", error);
+			throw wrapKintoneError(error, "Failed to update app actions");
 		}
 	}
 };
 
 //#endregion
 //#region src/core/adapters/kintone/appDeployer.ts
+const VALID_DEPLOY_STATUSES = new Set([
+	"PROCESSING",
+	"SUCCESS",
+	"FAIL",
+	"CANCEL"
+]);
+function isDeployStatus(value) {
+	return VALID_DEPLOY_STATUSES.has(value);
+}
 const DEFAULT_POLL_INTERVAL_MS = 1e3;
 const DEFAULT_MAX_RETRIES = 180;
 var KintoneAppDeployer = class {
@@ -673,12 +739,10 @@ var KintoneAppDeployer = class {
 	async deploy() {
 		try {
 			await this.client.app.deployApp({ apps: [{ app: this.appId }] });
-			await this.waitForDeployment();
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to deploy app", error);
+			throw wrapKintoneError(error, "Failed to deploy app");
 		}
+		await this.waitForDeployment();
 	}
 	async waitForDeployment() {
 		let lastPollError;
@@ -692,20 +756,21 @@ var KintoneAppDeployer = class {
 				consecutivePollFailures = 0;
 			} catch (error) {
 				if (isBusinessRuleError(error)) throw error;
-				if (error instanceof SystemError) throw error;
+				if (error instanceof ApplicationError) throw error;
 				lastPollError = error;
 				consecutivePollFailures++;
 				if (consecutivePollFailures >= maxConsecutivePollFailures) throw new SystemError(SystemErrorCode.ExternalApiError, `Deploy status polling failed ${maxConsecutivePollFailures} consecutive times`, lastPollError);
 				continue;
 			}
-			const status = apps[0]?.status;
-			switch (status) {
+			if (apps.length === 0) throw new SystemError(SystemErrorCode.ExternalApiError, "Deploy status response contained no apps");
+			const rawStatus = apps[0].status;
+			if (rawStatus === void 0) throw new SystemError(SystemErrorCode.ExternalApiError, "Deploy status unavailable");
+			if (!isDeployStatus(rawStatus)) throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected deploy status: ${rawStatus}`);
+			switch (rawStatus) {
 				case "SUCCESS": return;
 				case "FAIL": throw new SystemError(SystemErrorCode.ExternalApiError, "App deployment failed");
 				case "CANCEL": throw new SystemError(SystemErrorCode.ExternalApiError, "App deployment was cancelled");
 				case "PROCESSING": continue;
-				case void 0: throw new SystemError(SystemErrorCode.ExternalApiError, "Deploy status unavailable");
-				default: throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected deploy status: ${status}`);
 			}
 		}
 		throw new SystemError(SystemErrorCode.ExternalApiError, "App deployment timed out", lastPollError);
@@ -834,9 +899,7 @@ var KintoneCustomizationConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get app customization", error);
+			throw wrapKintoneError(error, "Failed to get app customization");
 		}
 	}
 	async updateCustomization(params) {
@@ -857,9 +920,7 @@ var KintoneCustomizationConfigurator = class {
 			const response = await this.client.app.updateAppCustomize(requestParams);
 			return { revision: String(response.revision) };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update app customization", error);
+			throw wrapKintoneError(error, "Failed to update app customization");
 		}
 	}
 };
@@ -871,31 +932,77 @@ var KintoneFileDownloader = class {
 		this.client = client;
 	}
 	async download(fileKey) {
-		if (!fileKey) throw new SystemError(SystemErrorCode.ExternalApiError, "fileKey must not be empty");
+		if (!fileKey) throw new ValidationError(ValidationErrorCode.InvalidInput, "fileKey must not be empty");
 		try {
 			return await this.client.file.downloadFile({ fileKey });
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, `Failed to download file: ${fileKey}`, error);
+			throw wrapKintoneError(error, `Failed to download file: ${fileKey}`);
 		}
 	}
 };
 
+//#endregion
+//#region src/lib/safePath.ts
+/**
+* Returns `true` if {@link targetPath} resolves to a location within
+* {@link baseDir}. Follows symlinks via `realpathSync` for both the base
+* directory and the target path when they exist on disk, falling back to
+* textual `resolve` otherwise (e.g. in tests with virtual paths or when
+* the target does not yet exist).
+*
+* {@link targetPath} may be either a relative path (resolved against
+* {@link baseDir}) or an absolute path (used as-is by `path.resolve`).
+* When callers have already resolved the path via `path.resolve(baseDir, x)`,
+* passing the result as an absolute path is safe — `resolve(base, absPath)`
+* returns `absPath` unchanged.
+*
+* **Limitation — symlinks**: If the target path does not exist on disk,
+* symlink components within it cannot be resolved. The check falls back
+* to a textual prefix comparison, which still catches `..` traversal but
+* cannot detect symlink-based escapes for non-existent paths.
+*
+* **Limitation — TOCTOU**: This check is inherently subject to a
+* time-of-check-to-time-of-use race: the filesystem may change between
+* this call and the subsequent file operation. This is acceptable for a
+* CLI tool where the user controls the local environment.
+*
+* **Note**: This function performs synchronous I/O (`realpathSync`).
+*
+* Callers decide how to handle the result.
+*/
+function isSafePath(targetPath, baseDir) {
+	if (targetPath.includes("\0") || baseDir.includes("\0")) return false;
+	let resolvedBase;
+	try {
+		resolvedBase = realpathSync(baseDir);
+	} catch {
+		resolvedBase = resolve(baseDir);
+	}
+	const textualTarget = resolve(resolvedBase, targetPath);
+	let resolvedTarget;
+	try {
+		resolvedTarget = realpathSync(textualTarget);
+	} catch {
+		resolvedTarget = textualTarget;
+	}
+	return resolvedTarget.startsWith(`${resolvedBase}/`) || resolvedTarget === resolvedBase;
+}
+
 //#endregion
 //#region src/core/adapters/kintone/fileUploader.ts
 var KintoneFileUploader = class {
-	constructor(client) {
+	constructor(client, baseDir) {
 		this.client = client;
+		this.baseDir = baseDir;
 	}
 	async upload(filePath) {
-		if (!filePath) throw new SystemError(SystemErrorCode.ExternalApiError, "filePath must not be empty");
+		if (!filePath) throw new ValidationError(ValidationErrorCode.InvalidInput, "filePath must not be empty");
+		const resolvedPath = resolve(this.baseDir, filePath);
+		if (!isSafePath(resolvedPath, this.baseDir)) throw new ValidationError(ValidationErrorCode.InvalidInput, `Path traversal detected: "${resolvedPath}" escapes base directory "${this.baseDir}"`);
 		try {
-			return { fileKey: (await this.client.file.uploadFile({ file: { path: filePath } })).fileKey };
+			return { fileKey: (await this.client.file.uploadFile({ file: { path: resolvedPath } })).fileKey };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, `Failed to upload file: ${filePath}`, error);
+			throw wrapKintoneError(error, `Failed to upload file: ${filePath}`);
 		}
 	}
 };
@@ -911,7 +1018,7 @@ function hasControlChars(s) {
 	return false;
 }
 /** Replaces control characters (0x00–0x1f, 0x7f) with escaped `\\xNN` representation for safe display. */
-function sanitizeForDisplay(s) {
+function sanitizeForDisplay$1(s) {
 	let result = "";
 	for (let i = 0; i < s.length; i++) {
 		const ch = s.charCodeAt(i);
@@ -933,7 +1040,7 @@ function hasInvalidFieldCodeChars(code) {
 }
 const FieldCode = { create: (code) => {
 	if (code.length === 0) throw new BusinessRuleError(FormSchemaErrorCode.FsEmptyFieldCode, "Field code cannot be empty");
-	if (hasInvalidFieldCodeChars(code)) throw new BusinessRuleError(FormSchemaErrorCode.FsInvalidFieldCode, `Field code "${sanitizeForDisplay(code)}" contains invalid characters`);
+	if (hasInvalidFieldCodeChars(code)) throw new BusinessRuleError(FormSchemaErrorCode.FsInvalidFieldCode, `Field code "${sanitizeForDisplay$1(code)}" contains invalid characters`);
 	return code;
 } };
 
@@ -976,10 +1083,6 @@ const DECORATION_TYPES$1 = new Set([
 	"SPACER",
 	"HR"
 ]);
-const KINTONE_REVISION_CONFLICT_CODE = "GAIA_CO02";
-function isRevisionConflict(error) {
-	return error instanceof KintoneRestAPIError && error.code === KINTONE_REVISION_CONFLICT_CODE;
-}
 /**
 * Tracks the latest known kintone form revision for optimistic concurrency control.
 *
@@ -992,10 +1095,13 @@ function isRevisionConflict(error) {
 var RevisionTracker = class {
 	revision = void 0;
 	track(revision) {
-		if (this.revision === void 0 || Number(revision) > Number(this.revision)) this.revision = revision;
+		if (revision === "") throw new SystemError(SystemErrorCode.ExternalApiError, "Unexpected empty revision from kintone API");
+		const revisionNum = Number(revision);
+		if (!Number.isFinite(revisionNum)) throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected non-numeric revision from kintone API: "${revision}"`);
+		if (this.revision === void 0 || revisionNum > this.revision) this.revision = revisionNum;
 	}
 	get current() {
-		return this.revision;
+		return this.revision !== void 0 ? String(this.revision) : void 0;
 	}
 };
 function assertRecord(value, fieldPath) {
@@ -1267,7 +1373,7 @@ var KintoneFormConfigurator = class {
 				app: this.appId,
 				preview: true
 			});
-			this.revisionTracker.track(revision);
+			if (revision) this.revisionTracker.track(revision);
 			const fields = /* @__PURE__ */ new Map();
 			for (const [code, prop] of Object.entries(properties)) {
 				const kintoneProp = prop;
@@ -1278,9 +1384,7 @@ var KintoneFormConfigurator = class {
 			}
 			return fields;
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get form fields", error);
+			throw wrapKintoneError(error, "Failed to get form fields");
 		}
 	}
 	async addFields(fields) {
@@ -1294,10 +1398,7 @@ var KintoneFormConfigurator = class {
 			});
 			if (response.revision) this.revisionTracker.track(response.revision);
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			if (isRevisionConflict(error)) throw new ConflictError(ConflictErrorCode.Conflict, "Form configuration was modified by another process. Please retry the operation.", error);
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to add form fields", error);
+			throw wrapKintoneError(error, "Failed to add form fields");
 		}
 	}
 	async updateFields(fields) {
@@ -1311,10 +1412,7 @@ var KintoneFormConfigurator = class {
 			});
 			if (response.revision) this.revisionTracker.track(response.revision);
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			if (isRevisionConflict(error)) throw new ConflictError(ConflictErrorCode.Conflict, "Form configuration was modified by another process. Please retry the operation.", error);
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update form fields", error);
+			throw wrapKintoneError(error, "Failed to update form fields");
 		}
 	}
 	async deleteFields(fieldCodes) {
@@ -1326,10 +1424,7 @@ var KintoneFormConfigurator = class {
 			});
 			if (response.revision) this.revisionTracker.track(response.revision);
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			if (isRevisionConflict(error)) throw new ConflictError(ConflictErrorCode.Conflict, "Form configuration was modified by another process. Please retry the operation.", error);
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to delete form fields", error);
+			throw wrapKintoneError(error, "Failed to delete form fields");
 		}
 	}
 	async getLayout() {
@@ -1338,12 +1433,10 @@ var KintoneFormConfigurator = class {
 				app: this.appId,
 				preview: true
 			});
-			this.revisionTracker.track(response.revision);
+			if (response.revision) this.revisionTracker.track(response.revision);
 			return response.layout.map(fromKintoneLayoutItem);
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get form layout", error);
+			throw wrapKintoneError(error, "Failed to get form layout");
 		}
 	}
 	async updateLayout(layout) {
@@ -1356,10 +1449,7 @@ var KintoneFormConfigurator = class {
 			});
 			if (response.revision) this.revisionTracker.track(response.revision);
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			if (isRevisionConflict(error)) throw new ConflictError(ConflictErrorCode.Conflict, "Form configuration was modified by another process. Please retry the operation.", error);
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update form layout", error);
+			throw wrapKintoneError(error, "Failed to update form layout");
 		}
 	}
 };
@@ -1480,9 +1570,7 @@ var KintoneRecordManager = class {
 				};
 			});
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get records", error);
+			throw wrapKintoneError(error, "Failed to get records");
 		}
 	}
 	async addRecords(records) {
@@ -1493,9 +1581,7 @@ var KintoneRecordManager = class {
 				records: records.map(toKintoneRecord)
 			});
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to add records", error);
+			throw wrapKintoneError(error, "Failed to add records");
 		}
 	}
 	async updateRecords(records) {
@@ -1509,9 +1595,7 @@ var KintoneRecordManager = class {
 				}))
 			});
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update records", error);
+			throw wrapKintoneError(error, "Failed to update records");
 		}
 	}
 	async deleteAllRecords() {
@@ -1528,9 +1612,7 @@ var KintoneRecordManager = class {
 			});
 			return { deletedCount: records.length };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to delete all records", error);
+			throw wrapKintoneError(error, "Failed to delete all records");
 		}
 	}
 };
@@ -1544,10 +1626,15 @@ function createLocalFileCustomizationStorage(filePath) {
 //#endregion
 //#region src/core/adapters/local/fileWriter.ts
 var LocalFileWriter = class {
+	constructor(baseDir = process.cwd()) {
+		this.baseDir = baseDir;
+	}
 	async write(filePath, data) {
+		const resolvedPath = resolve(this.baseDir, filePath);
+		if (!isSafePath(resolvedPath, this.baseDir)) throw new ValidationError(ValidationErrorCode.InvalidInput, `Path traversal detected: "${resolvedPath}" escapes base directory "${this.baseDir}"`);
 		try {
-			await mkdir(dirname(filePath), { recursive: true });
-			await writeFile(filePath, Buffer.from(new Uint8Array(data)));
+			await mkdir(dirname(resolvedPath), { recursive: true });
+			await writeFile(resolvedPath, Buffer.from(new Uint8Array(data)));
 		} catch (error) {
 			throw new SystemError(SystemErrorCode.StorageError, `Failed to write file: ${filePath}`, error);
 		}
@@ -1594,9 +1681,9 @@ function createCustomizationCliContainer(config) {
 	return {
 		customizationConfigurator: new KintoneCustomizationConfigurator(client, config.appId),
 		customizationStorage: createLocalFileCustomizationStorage(config.customizeFilePath),
-		fileUploader: new KintoneFileUploader(client),
+		fileUploader: new KintoneFileUploader(client, process.cwd()),
 		fileDownloader: new KintoneFileDownloader(client),
-		fileWriter: new LocalFileWriter(),
+		fileWriter: new LocalFileWriter(process.cwd()),
 		appDeployer: new KintoneAppDeployer(client, config.appId)
 	};
 }
@@ -1799,7 +1886,7 @@ function hasInvalidAppNameChars(name) {
 }
 const AppName = { create: (name) => {
 	if (name.length === 0) throw new BusinessRuleError(ProjectConfigErrorCode.PcEmptyAppName, "App name cannot be empty");
-	if (hasInvalidAppNameChars(name)) throw new BusinessRuleError(ProjectConfigErrorCode.PcInvalidAppName, `App name "${sanitizeForDisplay(name)}" contains invalid characters (path separators or control characters are not allowed)`);
+	if (hasInvalidAppNameChars(name)) throw new BusinessRuleError(ProjectConfigErrorCode.PcInvalidAppName, `App name "${sanitizeForDisplay$1(name)}" contains invalid characters (path separators or control characters are not allowed)`);
 	if (name === "." || name === "..") throw new BusinessRuleError(ProjectConfigErrorCode.PcInvalidAppName, `App name "${name}" is not allowed (reserved path component)`);
 	return name;
 } };
@@ -2005,14 +2092,17 @@ function buildAppFilePaths(appName, baseDir) {
 	};
 }
 
-//#endregion
-//#region src/core/application/formSchema/deployApp.ts
-async function deployApp({ container }) {
-	await container.appDeployer.deploy();
-}
-
 //#endregion
 //#region src/cli/handleError.ts
+/**
+* Log error details without terminating the process.
+* Use this in contexts where multiple errors may be reported (e.g. multi-app results).
+*
+* Note: This function intentionally does NOT show the "Set VERBOSE=1 ..." hint.
+* The hint is only shown by `handleCliError`, which is the top-level CLI handler.
+* `logError` is used for per-app error reporting within multi-app runs where the
+* hint would be noisy if repeated for each failure.
+*/
 function logError(error) {
 	if (isBusinessRuleError(error)) {
 		p.log.error(`[BusinessRuleError] ${error.code}: ${error.message}`);
@@ -2021,11 +2111,14 @@ function logError(error) {
 	}
 	if (isValidationError(error)) {
 		p.log.error(`[ValidationError] ${error.code}: ${error.message}`);
+		p.log.warn("Hint: Please check your input values and configuration.");
 		logErrorDetails(error);
 		return;
 	}
 	if (isSystemError(error)) {
 		p.log.error(`[SystemError] ${error.code}: ${error.message}`);
+		const hint = systemErrorHints[error.code];
+		if (hint) p.log.warn(`Hint: ${hint}`);
 		logErrorDetails(error);
 		return;
 	}
@@ -2065,42 +2158,83 @@ function logError(error) {
 	}
 	p.log.error(`[Error] Unexpected error occurred: ${String(error)}`);
 }
+/**
+* Log error details and terminate the process with exit code 1.
+* Use this as the top-level error handler in CLI command `run` functions.
+*/
 function handleCliError(error) {
 	logError(error);
+	if (!isVerbose()) p.log.info("Set VERBOSE=1 for full stack traces.");
 	p.outro("Failed.");
 	process.exit(1);
 }
 function formatErrorForDisplay(error) {
-	if (error instanceof Error) return error.message;
-	if (typeof error === "object" && error !== null) return JSON.stringify(error, null, 2);
-	return String(error);
+	if (error instanceof Error) return sanitizeString(error.message);
+	if (typeof error === "object" && error !== null) return JSON.stringify(sanitizeForDisplay(error), null, 2);
+	return sanitizeString(String(error));
+}
+const systemErrorHints = {
+	NETWORK_ERROR: "Please check your network connection and kintone domain.",
+	EXTERNAL_API_ERROR: "The kintone API returned an unexpected error. Please retry or check the API status.",
+	STORAGE_ERROR: "Failed to read/write a local file. Please check file permissions.",
+	EXECUTION_ERROR: "One or more apps failed during execution. Check the individual errors above."
+};
+const SENSITIVE_KEYS = /^(authorization|apitoken|api-token|api_token|apikey|api-key|api_key|password|secret|credentials|x-cybozu-authorization)$/i;
+const SENSITIVE_VALUE_PATTERNS = /(?<=(?:password|apiToken|api[_-]?token|api[_-]?key|secret|credentials)[=:]\s*)\S+/gi;
+const AUTHORIZATION_VALUE_PATTERN = /(?<=authorization[=:]\s*)\S+(?:\s+\S+)?/gi;
+function sanitizeString(value) {
+	return value.replace(AUTHORIZATION_VALUE_PATTERN, "[REDACTED]").replace(SENSITIVE_VALUE_PATTERNS, "[REDACTED]");
+}
+function sanitizeForDisplay(obj, seen = /* @__PURE__ */ new WeakSet()) {
+	if (typeof obj !== "object" || obj === null) return obj;
+	if (seen.has(obj)) return "[Circular]";
+	seen.add(obj);
+	if (Array.isArray(obj)) return obj.map((item) => sanitizeForDisplay(item, seen));
+	const result = {};
+	if (obj instanceof Error) {
+		result.message = sanitizeString(obj.message);
+		if (obj.stack) result.stack = sanitizeString(obj.stack);
+	}
+	for (const [key, value] of Object.entries(obj)) if (SENSITIVE_KEYS.test(key)) result[key] = "[REDACTED]";
+	else if (typeof value === "object" && value !== null) result[key] = sanitizeForDisplay(value, seen);
+	else if (typeof value === "string") result[key] = sanitizeString(value);
+	else result[key] = value;
+	return result;
+}
+function isVerbose() {
+	return process.env.VERBOSE === "1" || process.env.VERBOSE === "true" || process.env.VERBOSE === "yes";
 }
 function logErrorDetails(error) {
 	if (error.cause) {
+		const seen = /* @__PURE__ */ new WeakSet();
+		seen.add(error);
 		p.log.warn(`Cause: ${formatErrorForDisplay(error.cause)}`);
-		logNestedErrorProperties(error.cause);
+		logNestedErrorProperties(error.cause, seen);
 	}
-	if (error.stack) p.log.warn(`Stack: ${error.stack}`);
+	if (isVerbose() && error.stack) p.log.warn(`Stack: ${error.stack}`);
 }
-function logNestedErrorProperties(target) {
+function logNestedErrorProperties(target, seen = /* @__PURE__ */ new WeakSet()) {
 	if (typeof target !== "object" || target === null) return;
+	if (seen.has(target)) return;
+	seen.add(target);
 	const record = target;
 	if (record.error instanceof Error) {
-		p.log.warn(`  Error: ${record.error.message}`);
-		const innerRecord = record.error;
-		if (innerRecord.errors && typeof innerRecord.errors === "object") p.log.warn(`  Details: ${JSON.stringify(innerRecord.errors, null, 2)}`);
+		p.log.warn(`  Error: ${sanitizeString(record.error.message)}`);
+		if (hasObjectProperty(record.error, "errors")) p.log.warn(`  Details: ${JSON.stringify(sanitizeForDisplay(record.error.errors), null, 2)}`);
 	}
 	if (Array.isArray(record.errors)) for (const e of record.errors) if (e instanceof Error) {
-		p.log.warn(`  - ${e.message}`);
-		const inner = e;
-		if (inner.errors && typeof inner.errors === "object") p.log.warn(`    ${JSON.stringify(inner.errors, null, 2)}`);
-	} else p.log.warn(`  - ${JSON.stringify(e, null, 2)}`);
-	else if (record.errors && typeof record.errors === "object" && !("error" in record)) p.log.warn(`Details: ${JSON.stringify(record.errors, null, 2)}`);
+		p.log.warn(`  - ${sanitizeString(e.message)}`);
+		if (hasObjectProperty(e, "errors")) p.log.warn(`    ${JSON.stringify(sanitizeForDisplay(e.errors), null, 2)}`);
+	} else p.log.warn(`  - ${JSON.stringify(sanitizeForDisplay(e), null, 2)}`);
+	else if (record.errors && typeof record.errors === "object" && !(record.error instanceof Error)) p.log.warn(`Details: ${JSON.stringify(sanitizeForDisplay(record.errors), null, 2)}`);
 	if (target instanceof Error && target.cause) {
 		p.log.warn(`  Caused by: ${formatErrorForDisplay(target.cause)}`);
-		logNestedErrorProperties(target.cause);
+		logNestedErrorProperties(target.cause, seen);
 	}
 }
+function hasObjectProperty(obj, key) {
+	return key in obj && typeof obj[key] === "object" && obj[key] !== null;
+}
 function isApplicationError(error) {
 	return error instanceof ApplicationError;
 }
@@ -2213,40 +2347,30 @@ async function confirmAndDeploy(containers, skipConfirm, successMessage = "Deplo
 	if (!skipConfirm) {
 		const shouldDeploy = await p.confirm({ message: "Deploy to production?" });
 		if (p.isCancel(shouldDeploy) || !shouldDeploy) {
-			p.log.warn("Applied to preview, but not deployed to production.");
+			const appNames = containers.map((c) => c.appName).filter((n) => n != null);
+			if (appNames.length > 0) p.log.warn(`Applied to preview, but not deployed to production: ${appNames.join(", ")}`);
+			else p.log.warn("Applied to preview, but not deployed to production.");
 			return;
 		}
 	}
 	const ds = p.spinner();
 	ds.start("Deploying to production...");
+	const deployedNames = [];
 	try {
-		for (const container of containers) await container.appDeployer.deploy();
+		for (const container of containers) {
+			await container.appDeployer.deploy();
+			if (container.appName) deployedNames.push(container.appName);
+		}
 		ds.stop("Deployed to production.");
 	} catch (error) {
 		ds.stop("Deployment failed.");
+		if (deployedNames.length > 0) p.log.warn(`${deployedNames.length}/${containers.length} app(s) were deployed before the failure: ${deployedNames.join(", ")}`);
+		const notDeployed = containers.map((c) => c.appName).filter((n) => n != null).filter((n) => !deployedNames.includes(n));
+		if (notDeployed.length > 0) p.log.warn(`Not deployed: ${notDeployed.join(", ")}`);
 		throw error;
 	}
 	p.log.success(successMessage);
 }
-async function promptDeploy(container, skipConfirm) {
-	if (!skipConfirm) {
-		const shouldDeploy = await p.confirm({ message: "Deploy to production?" });
-		if (p.isCancel(shouldDeploy) || !shouldDeploy) {
-			p.log.warn("Applied to preview, but not deployed to production.");
-			return;
-		}
-	}
-	const ds = p.spinner();
-	ds.start("Deploying to production...");
-	try {
-		await deployApp({ container });
-		ds.stop("Deployment complete.");
-	} catch (error) {
-		ds.stop("Deployment failed.");
-		throw error;
-	}
-	p.log.success("Deployed to production.");
-}
 
 //#endregion
 //#region src/cli/projectConfig.ts
@@ -2352,10 +2476,30 @@ async function routeMultiApp(values, handlers) {
 	}
 	await handlers.multiApp(target.plan, target.config);
 }
+/**
+* High-level multi-app executor that prints app headers before each executor call.
+* Use this when the executor does not print its own headers (most apply commands).
+* Delegates to `runMultiAppWithFailCheck` for execution and failure handling.
+*/
+async function runMultiAppWithHeaders(plan, executor, successMessage) {
+	await runMultiAppWithFailCheck(plan, async (app) => {
+		printAppHeader(app.name, app.appId);
+		await executor(app);
+	}, successMessage);
+}
+/**
+* Low-level multi-app executor that runs apps, prints results, and throws on failure.
+* Use this directly when the executor needs full control over output (e.g. schema migrate
+* prints its own headers and performs per-app deploy inside the executor callback).
+*/
 async function runMultiAppWithFailCheck(plan, executor, successMessage) {
 	const multiResult = await executeMultiApp(plan, executor);
 	printMultiAppResult(multiResult);
-	if (multiResult.hasFailure) throw new SystemError(SystemErrorCode.ExternalApiError, "Execution stopped due to failure.");
+	if (multiResult.hasFailure) {
+		const succeededCount = multiResult.results.filter((r) => r.status === "succeeded").length;
+		if (succeededCount > 0) p.log.warn(`${succeededCount} app(s) were applied to preview but may not have been deployed. Check their status in kintone.`);
+		throw new SystemError(SystemErrorCode.ExecutionError, "Execution stopped due to failure.");
+	}
 	if (successMessage) p.log.success(successMessage);
 }
 async function configFileExists(configPath) {
@@ -2482,12 +2626,13 @@ var apply_default$12 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveActionAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runAction(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runAction(resolveActionAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -2936,9 +3081,7 @@ var KintoneAdminNotesConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get admin notes", error);
+			throw wrapKintoneError(error, "Failed to get admin notes");
 		}
 	}
 	async updateAdminNotes(params) {
@@ -2951,9 +3094,7 @@ var KintoneAdminNotesConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateAdminNotes(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update admin notes", error);
+			throw wrapKintoneError(error, "Failed to update admin notes");
 		}
 	}
 };
@@ -3028,12 +3169,13 @@ var apply_default$11 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveAdminNotesAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runAdminNotes(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runAdminNotes(resolveAdminNotesAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -3303,9 +3445,7 @@ var KintoneAppPermissionConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get app ACL", error);
+			throw wrapKintoneError(error, "Failed to get app ACL");
 		}
 	}
 	async updateAppPermissions(params) {
@@ -3317,9 +3457,7 @@ var KintoneAppPermissionConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateAppAcl(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update app ACL", error);
+			throw wrapKintoneError(error, "Failed to update app ACL");
 		}
 	}
 };
@@ -3394,12 +3532,13 @@ var apply_default$10 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveAppAclAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runAppAcl(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runAppAcl(resolveAppAclAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -4021,12 +4160,13 @@ var apply_default$9 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveCustomizeAppConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await applyCustomizationForApp(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await applyCustomizationForApp(resolveCustomizeAppConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm, "Customization applied and deployed successfully.");
 				}
 			});
@@ -4212,9 +4352,7 @@ var KintoneFieldPermissionConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get field ACL", error);
+			throw wrapKintoneError(error, "Failed to get field ACL");
 		}
 	}
 	async updateFieldPermissions(params) {
@@ -4226,9 +4364,7 @@ var KintoneFieldPermissionConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateFieldAcl(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update field ACL", error);
+			throw wrapKintoneError(error, "Failed to update field ACL");
 		}
 	}
 };
@@ -4384,12 +4520,13 @@ var apply_default$8 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveFieldAclAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runFieldAcl(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runFieldAcl(resolveFieldAclAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -4557,6 +4694,14 @@ var field_acl_default = define({
 	run: () => {}
 });
 
+//#endregion
+//#region src/core/adapters/kintone/parseKintoneIntegerField.ts
+function parseKintoneIntegerField(raw, fieldName) {
+	const n = Number(raw);
+	if (!Number.isFinite(n) || !Number.isInteger(n)) throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected non-integer ${fieldName} from kintone API: ${raw}`);
+	return n;
+}
+
 //#endregion
 //#region src/core/adapters/kintone/generalSettingsConfigurator.ts
 const VALID_THEMES$1 = new Set([
@@ -4601,8 +4746,8 @@ function fromKintoneTitleField(raw) {
 function fromKintoneNumberPrecision(raw) {
 	if (!VALID_ROUNDING_MODES$1.has(raw.roundingMode)) throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected roundingMode from kintone API: ${raw.roundingMode}`);
 	return {
-		digits: Number(raw.digits),
-		decimalPlaces: Number(raw.decimalPlaces),
+		digits: parseKintoneIntegerField(raw.digits, "digits"),
+		decimalPlaces: parseKintoneIntegerField(raw.decimalPlaces, "decimalPlaces"),
 		roundingMode: raw.roundingMode
 	};
 }
@@ -4620,7 +4765,7 @@ function fromKintoneSettings(raw) {
 		...raw.enableDuplicateRecord !== void 0 ? { enableDuplicateRecord: raw.enableDuplicateRecord } : {},
 		...raw.enableInlineRecordEditing !== void 0 ? { enableInlineRecordEditing: raw.enableInlineRecordEditing } : {},
 		...raw.numberPrecision !== void 0 ? { numberPrecision: fromKintoneNumberPrecision(raw.numberPrecision) } : {},
-		...raw.firstMonthOfFiscalYear !== void 0 ? { firstMonthOfFiscalYear: Number(raw.firstMonthOfFiscalYear) } : {}
+		...raw.firstMonthOfFiscalYear !== void 0 ? { firstMonthOfFiscalYear: parseKintoneIntegerField(raw.firstMonthOfFiscalYear, "firstMonthOfFiscalYear") } : {}
 	};
 }
 function toKintoneIcon(icon) {
@@ -4673,9 +4818,7 @@ var KintoneGeneralSettingsConfigurator = class {
 				revision: raw.revision ?? "-1"
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get general settings", error);
+			throw wrapKintoneError(error, "Failed to get general settings");
 		}
 	}
 	async updateGeneralSettings(params) {
@@ -4687,9 +4830,7 @@ var KintoneGeneralSettingsConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateAppSettings(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update general settings", error);
+			throw wrapKintoneError(error, "Failed to update general settings");
 		}
 	}
 };
@@ -4764,8 +4905,7 @@ function fromKintonePerRecordNotification(raw) {
 	};
 }
 function fromKintoneReminderNotification(raw) {
-	const daysLater = Number(raw.timing.daysLater);
-	if (!Number.isFinite(daysLater)) throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected non-numeric daysLater from kintone API: ${raw.timing.daysLater}`);
+	const daysLater = parseKintoneIntegerField(raw.timing.daysLater, "daysLater");
 	const result = {
 		code: raw.timing.code,
 		daysLater,
@@ -4774,8 +4914,7 @@ function fromKintoneReminderNotification(raw) {
 		targets: raw.targets.map(fromKintoneTarget)
 	};
 	if ("hoursLater" in raw.timing) {
-		const hoursLater = Number(raw.timing.hoursLater);
-		if (!Number.isFinite(hoursLater)) throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected non-numeric hoursLater from kintone API: ${raw.timing.hoursLater}`);
+		const hoursLater = parseKintoneIntegerField(raw.timing.hoursLater, "hoursLater");
 		return {
 			...result,
 			hoursLater
@@ -4850,9 +4989,7 @@ var KintoneNotificationConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get general notifications", error);
+			throw wrapKintoneError(error, "Failed to get general notifications");
 		}
 	}
 	async updateGeneralNotifications(params) {
@@ -4865,9 +5002,7 @@ var KintoneNotificationConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateGeneralNotifications(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update general notifications", error);
+			throw wrapKintoneError(error, "Failed to update general notifications");
 		}
 	}
 	async getPerRecordNotifications() {
@@ -4881,9 +5016,7 @@ var KintoneNotificationConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get per-record notifications", error);
+			throw wrapKintoneError(error, "Failed to get per-record notifications");
 		}
 	}
 	async updatePerRecordNotifications(params) {
@@ -4895,9 +5028,7 @@ var KintoneNotificationConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updatePerRecordNotifications(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update per-record notifications", error);
+			throw wrapKintoneError(error, "Failed to update per-record notifications");
 		}
 	}
 	async getReminderNotifications() {
@@ -4913,9 +5044,7 @@ var KintoneNotificationConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get reminder notifications", error);
+			throw wrapKintoneError(error, "Failed to get reminder notifications");
 		}
 	}
 	async updateReminderNotifications(params) {
@@ -4928,9 +5057,7 @@ var KintoneNotificationConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateReminderNotifications(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update reminder notifications", error);
+			throw wrapKintoneError(error, "Failed to update reminder notifications");
 		}
 	}
 };
@@ -4974,22 +5101,18 @@ var KintonePluginConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get plugins", error);
+			throw wrapKintoneError(error, "Failed to get plugins");
 		}
 	}
 	async addPlugins(params) {
 		try {
 			return { revision: (await this.client.app.addPlugins({
 				app: this.appId,
-				ids: params.ids,
+				ids: [...params.ids],
 				revision: params.revision
 			})).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to add plugins", error);
+			throw wrapKintoneError(error, "Failed to add plugins");
 		}
 	}
 };
@@ -5122,9 +5245,7 @@ var KintoneProcessManagementConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get process management settings", error);
+			throw wrapKintoneError(error, "Failed to get process management settings");
 		}
 	}
 	async updateProcessManagement(params) {
@@ -5140,9 +5261,7 @@ var KintoneProcessManagementConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateProcessManagement(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update process management settings", error);
+			throw wrapKintoneError(error, "Failed to update process management settings");
 		}
 	}
 };
@@ -5225,9 +5344,7 @@ var KintoneRecordPermissionConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get record ACL", error);
+			throw wrapKintoneError(error, "Failed to get record ACL");
 		}
 	}
 	async updateRecordPermissions(params) {
@@ -5239,9 +5356,7 @@ var KintoneRecordPermissionConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateRecordAcl(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update record ACL", error);
+			throw wrapKintoneError(error, "Failed to update record ACL");
 		}
 	}
 };
@@ -5514,9 +5629,7 @@ var KintoneReportConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get reports", error);
+			throw wrapKintoneError(error, "Failed to get reports");
 		}
 	}
 	async updateReports(params) {
@@ -5530,9 +5643,7 @@ var KintoneReportConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateReports(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update reports", error);
+			throw wrapKintoneError(error, "Failed to update reports");
 		}
 	}
 };
@@ -5582,21 +5693,17 @@ function fromKintoneView(name, raw) {
 	}
 	return {
 		type: raw.type,
-		index: (() => {
-			const idx = typeof raw.index === "string" ? Number(raw.index) : raw.index;
-			if (!Number.isFinite(idx)) throw new SystemError(SystemErrorCode.ExternalApiError, `Unexpected non-numeric index from kintone API: ${raw.index}`);
-			return idx;
-		})(),
+		index: parseKintoneIntegerField(raw.index, "index"),
 		name,
-		...raw.builtinType !== void 0 && { builtinType: raw.builtinType },
-		...raw.fields !== void 0 && { fields: raw.fields },
-		...raw.date !== void 0 && { date: raw.date },
-		...raw.title !== void 0 && { title: raw.title },
-		...raw.html !== void 0 && { html: raw.html },
-		...raw.pager !== void 0 && { pager: raw.pager },
-		...device !== void 0 && { device },
-		...raw.filterCond !== void 0 && { filterCond: raw.filterCond },
-		...raw.sort !== void 0 && { sort: raw.sort }
+		...raw.builtinType !== void 0 ? { builtinType: raw.builtinType } : {},
+		...raw.fields !== void 0 ? { fields: raw.fields } : {},
+		...raw.date !== void 0 ? { date: raw.date } : {},
+		...raw.title !== void 0 ? { title: raw.title } : {},
+		...raw.html !== void 0 ? { html: raw.html } : {},
+		...raw.pager !== void 0 ? { pager: raw.pager } : {},
+		...device !== void 0 ? { device } : {},
+		...raw.filterCond !== void 0 ? { filterCond: raw.filterCond } : {},
+		...raw.sort !== void 0 ? { sort: raw.sort } : {}
 	};
 }
 function toKintoneView(config) {
@@ -5636,9 +5743,7 @@ var KintoneViewConfigurator = class {
 				revision: response.revision
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to get views", error);
+			throw wrapKintoneError(error, "Failed to get views");
 		}
 	}
 	async updateViews(params) {
@@ -5652,9 +5757,7 @@ var KintoneViewConfigurator = class {
 			if (params.revision !== void 0) requestParams.revision = params.revision;
 			return { revision: (await this.client.app.updateViews(requestParams)).revision };
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to update views", error);
+			throw wrapKintoneError(error, "Failed to update views");
 		}
 	}
 };
@@ -5770,7 +5873,7 @@ var KintoneSpaceReader = class {
 		this.client = client;
 	}
 	async getSpaceApps(spaceId) {
-		if (!spaceId) throw new SystemError(SystemErrorCode.ExternalApiError, "spaceId must not be empty");
+		if (!spaceId) throw new ValidationError(ValidationErrorCode.InvalidInput, "spaceId must not be empty");
 		try {
 			const rawApps = (await this.client.space.getSpace({ id: spaceId })).attachedApps;
 			if (rawApps === void 0) throw new SystemError(SystemErrorCode.ExternalApiError, `Space API response for space ID ${spaceId} does not contain attachedApps. The kintone API response format may have changed.`);
@@ -5789,9 +5892,7 @@ var KintoneSpaceReader = class {
 			}
 			return result;
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, `Failed to get space info for space ID: ${spaceId}`, error);
+			throw wrapKintoneError(error, `Failed to get space info for space ID: ${spaceId}`);
 		}
 	}
 };
@@ -6638,7 +6739,7 @@ var init_default = define({
 		try {
 			const values = ctx.values;
 			const spaceId = values["space-id"];
-			if (!/^\d+$/.test(spaceId)) throw new ValidationError(ValidationErrorCode.InvalidInput, `Invalid space ID: "${spaceId}" (must be a numeric value)`);
+			if (!/^[1-9]\d*$/.test(spaceId)) throw new ValidationError(ValidationErrorCode.InvalidInput, `Invalid space ID: "${spaceId}" (must be a positive integer, e.g. 1, 42, 100)`);
 			const kintoneDomain = values.domain ?? process.env.KINTONE_DOMAIN;
 			if (!kintoneDomain) throw new ValidationError(ValidationErrorCode.InvalidInput, "Missing required configuration:\n  KINTONE_DOMAIN is required");
 			const apiToken = values["api-token"] ?? process.env.KINTONE_API_TOKEN;
@@ -6941,12 +7042,13 @@ var apply_default$7 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveNotificationAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runNotification(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runNotification(resolveNotificationAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -7360,12 +7462,13 @@ var apply_default$6 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolvePluginAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runPlugin(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runPlugin(resolvePluginAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -7668,12 +7771,13 @@ var apply_default$5 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveProcessAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runProcessApply(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runProcessApply(resolveProcessAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -7991,12 +8095,13 @@ var apply_default$4 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveRecordAclAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runRecordAcl(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runRecordAcl(resolveRecordAclAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -8377,12 +8482,13 @@ var apply_default$3 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveReportAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runReport(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runReport(resolveReportAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -9167,7 +9273,7 @@ async function detectDiff({ container }) {
 //#region src/cli/commands/schema/diff.ts
 async function runDiff(container) {
 	const s = p.spinner();
-	s.start("Fetching form schema...");
+	s.start("Comparing schema...");
 	let result;
 	try {
 		result = await detectDiff({ container });
@@ -9175,7 +9281,7 @@ async function runDiff(container) {
 		s.stop("Comparison failed.");
 		throw error;
 	}
-	s.stop("Form schema fetched.");
+	s.stop("Comparison complete.");
 	printDiffResult(result);
 }
 var diff_default$2 = define({
@@ -9217,15 +9323,19 @@ var KintoneFormDumpReader = class {
 	}
 	async getRawFormData() {
 		try {
-			const [fields, layout] = await Promise.all([this.client.app.getFormFields({ app: this.appId }), this.client.app.getFormLayout({ app: this.appId })]);
+			const [fields, layout] = await Promise.all([this.client.app.getFormFields({
+				app: this.appId,
+				preview: true
+			}), this.client.app.getFormLayout({
+				app: this.appId,
+				preview: true
+			})]);
 			return {
 				fields,
 				layout
 			};
 		} catch (error) {
-			if (isBusinessRuleError(error)) throw error;
-			if (error instanceof SystemError) throw error;
-			throw new SystemError(SystemErrorCode.ExternalApiError, "Failed to fetch raw form data for dump", error);
+			throw wrapKintoneError(error, "Failed to fetch raw form data for dump");
 		}
 	}
 };
@@ -9233,11 +9343,16 @@ var KintoneFormDumpReader = class {
 //#endregion
 //#region src/core/adapters/local/dumpStorage.ts
 var LocalFileDumpStorage = class {
-	constructor(filePrefix) {
+	constructor(filePrefix, baseDir = process.cwd()) {
 		this.filePrefix = filePrefix;
+		this.baseDir = baseDir;
+		const fieldsPath = resolve(this.baseDir, `${this.filePrefix}fields.json`);
+		if (!isSafePath(fieldsPath, this.baseDir)) throw new ValidationError(ValidationErrorCode.InvalidInput, `Path traversal detected: "${fieldsPath}" escapes base directory "${this.baseDir}"`);
+		const layoutPath = resolve(this.baseDir, `${this.filePrefix}layout.json`);
+		if (!isSafePath(layoutPath, this.baseDir)) throw new ValidationError(ValidationErrorCode.InvalidInput, `Path traversal detected: "${layoutPath}" escapes base directory "${this.baseDir}"`);
 	}
 	async saveFields(content) {
-		const filePath = `${this.filePrefix}fields.json`;
+		const filePath = resolve(this.baseDir, `${this.filePrefix}fields.json`);
 		try {
 			await mkdir(dirname(filePath), { recursive: true });
 			await writeFile(filePath, content, "utf-8");
@@ -9246,7 +9361,7 @@ var LocalFileDumpStorage = class {
 		}
 	}
 	async saveLayout(content) {
-		const filePath = `${this.filePrefix}layout.json`;
+		const filePath = resolve(this.baseDir, `${this.filePrefix}layout.json`);
 		try {
 			await mkdir(dirname(filePath), { recursive: true });
 			await writeFile(filePath, content, "utf-8");
@@ -9261,7 +9376,7 @@ var LocalFileDumpStorage = class {
 function createDumpCliContainer(config) {
 	return {
 		formDumpReader: new KintoneFormDumpReader(config.client ?? createKintoneClient(config), config.appId),
-		dumpStorage: new LocalFileDumpStorage(config.filePrefix)
+		dumpStorage: new LocalFileDumpStorage(config.filePrefix, process.cwd())
 	};
 }
 
@@ -9332,16 +9447,25 @@ var dump_default = define({
 	}
 });
 
+//#endregion
+//#region src/core/application/formSchema/deployApp.ts
+async function deployApp({ container }) {
+	await container.appDeployer.deploy();
+}
+
 //#endregion
 //#region src/core/domain/formSchema/services/subtableFieldSplitter.ts
 function splitSubtableInnerFields(desired, current) {
 	const newInnerFields = /* @__PURE__ */ new Map();
 	const existingInnerFields = /* @__PURE__ */ new Map();
+	const deletedInnerFieldCodes = [];
 	for (const [code, def] of desired.properties.fields) if (current.properties.fields.has(code)) existingInnerFields.set(code, def);
 	else newInnerFields.set(code, def);
+	for (const code of current.properties.fields.keys()) if (!desired.properties.fields.has(code)) deletedInnerFieldCodes.push(code);
 	return {
 		newInnerFields,
-		existingInnerFields
+		existingInnerFields,
+		deletedInnerFieldCodes
 	};
 }
 
@@ -9448,6 +9572,11 @@ function validateReferenceTableRelatedApp(field) {
 	if (app.trim().length === 0) return [issue("error", field.code, field.type, "EMPTY_RELATED_APP", `Field "${field.code}" referenceTable.relatedApp.app must be non-empty`)];
 	return [];
 }
+function validateSubtableHasInnerFields(field) {
+	if (field.type !== "SUBTABLE") return [];
+	if (field.properties.fields.size === 0) return [issue("error", field.code, field.type, "EMPTY_SUBTABLE", `Subtable "${field.code}" must have at least one inner field`)];
+	return [];
+}
 const FIELD_VALIDATORS = [
 	validateLabelNonEmpty,
 	validateSelectionOptions,
@@ -9457,7 +9586,8 @@ const FIELD_VALIDATORS = [
 	validateFileThumbnailSize,
 	validateReferenceTableSize,
 	validateLookupStructure,
-	validateReferenceTableRelatedApp
+	validateReferenceTableRelatedApp,
+	validateSubtableHasInnerFields
 ];
 function validateField(field) {
 	return FIELD_VALIDATORS.flatMap((validator) => validator(field));
@@ -9506,6 +9636,7 @@ async function executeMigration({ container }) {
 	const deleted = diff.entries.filter((e) => e.type === "deleted");
 	const fieldsToAdd = [];
 	const fieldsToUpdate = [];
+	const innerFieldsToDelete = [];
 	for (const entry of added) {
 		if (entry.after === void 0) continue;
 		if (subtableInnerCodes.has(entry.fieldCode)) continue;
@@ -9517,22 +9648,21 @@ async function executeMigration({ container }) {
 		const after = entry.after;
 		const before = entry.before;
 		if (after.type === "SUBTABLE" && before !== void 0 && before.type === "SUBTABLE") {
-			const { newInnerFields, existingInnerFields } = splitSubtableInnerFields(after, before);
-			if (newInnerFields.size > 0) fieldsToAdd.push({
-				...after,
-				properties: { fields: newInnerFields }
-			});
+			const { newInnerFields, existingInnerFields, deletedInnerFieldCodes } = splitSubtableInnerFields(after, before);
+			if (newInnerFields.size > 0) throw new ValidationError(ValidationErrorCode.InvalidInput, `kintone REST API does not support adding fields to an existing subtable. Use the schema override command instead. Subtable: ${after.code}`);
 			if (existingInnerFields.size > 0) fieldsToUpdate.push({
 				...after,
 				properties: { fields: existingInnerFields }
 			});
-		} else fieldsToUpdate.push(after);
+			for (const code of deletedInnerFieldCodes) innerFieldsToDelete.push(code);
+		} else if (before !== void 0 && before.type !== after.type) throw new ValidationError(ValidationErrorCode.InvalidInput, `Field type change detected for "${after.code}" (${before.type} → ${after.type}). Use the schema override command instead.`);
+		else fieldsToUpdate.push(after);
 	}
 	if (fieldsToAdd.length > 0) await container.formConfigurator.addFields(fieldsToAdd);
 	if (fieldsToUpdate.length > 0) await container.formConfigurator.updateFields(fieldsToUpdate);
-	if (deleted.length > 0) {
+	if (deleted.length > 0 || innerFieldsToDelete.length > 0) {
 		const currentSubtableInnerCodes = collectSubtableInnerFieldCodes(currentFields);
-		const fieldCodes = deleted.filter((e) => !currentSubtableInnerCodes.has(e.fieldCode)).map((e) => e.fieldCode);
+		const fieldCodes = [...deleted.filter((e) => !currentSubtableInnerCodes.has(e.fieldCode)).map((e) => e.fieldCode), ...innerFieldsToDelete];
 		if (fieldCodes.length > 0) await container.formConfigurator.deleteFields(fieldCodes);
 	}
 	if (hasLayoutChanges) await container.formConfigurator.updateLayout(schema.layout);
@@ -9562,7 +9692,7 @@ async function runSingleMigrate(container, skipConfirm) {
 	await executeMigration({ container });
 	ms.stop("Migration applied.");
 	p.log.success("Migration completed successfully.");
-	await promptDeploy(container, skipConfirm);
+	await confirmAndDeploy([container], skipConfirm);
 }
 var migrate_default = define({
 	name: "migrate",
@@ -9611,7 +9741,7 @@ var migrate_default = define({
 					}
 					await runMultiAppWithFailCheck(plan, async (app) => {
 						const entry = appContainers.find((a) => a.app.name === app.name);
-						if (!entry) return;
+						if (!entry) throw new SystemError(SystemErrorCode.InternalServerError, `App container not found for "${app.name}"`);
 						const { container, hasChanges } = entry;
 						printAppHeader(app.name, app.appId);
 						if (!hasChanges) {
@@ -9647,22 +9777,35 @@ async function forceOverrideForm({ container }) {
 	const toAdd = [];
 	const toUpdate = [];
 	const toDelete = [];
+	const innerFieldsToDelete = [];
 	for (const [fieldCode, schemaDef] of schema.fields) {
 		if (subtableInnerCodes.has(fieldCode)) continue;
 		if (currentFields.has(fieldCode)) if (schemaDef.type === "SUBTABLE") {
 			const currentDef = currentFields.get(fieldCode);
 			if (currentDef !== void 0 && currentDef.type === "SUBTABLE") {
-				const { newInnerFields, existingInnerFields } = splitSubtableInnerFields(schemaDef, currentDef);
-				if (newInnerFields.size > 0) toAdd.push({
-					...schemaDef,
-					properties: { fields: newInnerFields }
-				});
-				if (existingInnerFields.size > 0) toUpdate.push({
-					...schemaDef,
-					properties: { fields: existingInnerFields }
-				});
+				const { newInnerFields, existingInnerFields, deletedInnerFieldCodes } = splitSubtableInnerFields(schemaDef, currentDef);
+				const allInnerFieldsRemoved = existingInnerFields.size === 0 && deletedInnerFieldCodes.length > 0;
+				if (newInnerFields.size > 0 || allInnerFieldsRemoved) {
+					toDelete.push(fieldCode);
+					toAdd.push(schemaDef);
+				} else {
+					toUpdate.push({
+						...schemaDef,
+						properties: { fields: existingInnerFields }
+					});
+					for (const code of deletedInnerFieldCodes) innerFieldsToDelete.push(code);
+				}
+			} else {
+				toDelete.push(fieldCode);
+				toAdd.push(schemaDef);
+			}
+		} else {
+			const currentDef = currentFields.get(fieldCode);
+			if (currentDef !== void 0 && currentDef.type !== schemaDef.type) {
+				toDelete.push(fieldCode);
+				toAdd.push(schemaDef);
 			} else toUpdate.push(schemaDef);
-		} else toUpdate.push(schemaDef);
+		}
 		else toAdd.push(schemaDef);
 	}
 	const currentSubtableInnerCodes = collectSubtableInnerFieldCodes(currentFields);
@@ -9670,9 +9813,9 @@ async function forceOverrideForm({ container }) {
 		if (currentSubtableInnerCodes.has(fieldCode)) continue;
 		if (!schema.fields.has(fieldCode)) toDelete.push(fieldCode);
 	}
+	if (toDelete.length > 0 || innerFieldsToDelete.length > 0) await container.formConfigurator.deleteFields([...toDelete, ...innerFieldsToDelete]);
 	if (toAdd.length > 0) await container.formConfigurator.addFields(toAdd);
 	if (toUpdate.length > 0) await container.formConfigurator.updateFields(toUpdate);
-	if (toDelete.length > 0) await container.formConfigurator.deleteFields(toDelete);
 	await container.formConfigurator.updateLayout(schema.layout);
 }
 
@@ -9707,7 +9850,7 @@ async function runSingleOverride(container, skipConfirm) {
 	await forceOverrideForm({ container });
 	s.stop("Force override applied.");
 	p.log.success("Force override completed successfully.");
-	await promptDeploy(container, skipConfirm);
+	await confirmAndDeploy([container], skipConfirm);
 }
 async function runSingleReset(container, skipConfirm) {
 	p.log.warn(`${pc.bold(pc.red("WARNING:"))} This will delete ALL custom fields, resetting the form to empty.`);
@@ -9723,7 +9866,7 @@ async function runSingleReset(container, skipConfirm) {
 	await resetForm({ container });
 	s.stop("Form reset applied.");
 	p.log.success("Reset completed successfully.");
-	await promptDeploy(container, skipConfirm);
+	await confirmAndDeploy([container], skipConfirm);
 }
 var override_default = define({
 	name: "override",
@@ -10436,12 +10579,13 @@ var apply_default$1 = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveSettingsAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runSettings(config);
-						containers.push(container);
-					}, "All general settings applied successfully.");
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runSettings(resolveSettingsAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});
@@ -10723,12 +10867,13 @@ var apply_default = define({
 				},
 				multiApp: async (plan, projectConfig) => {
 					const containers = [];
-					await runMultiAppWithFailCheck(plan, async (app) => {
-						const config = resolveViewAppContainerConfig(app, projectConfig, values);
-						printAppHeader(app.name, app.appId);
-						const container = await runView(config);
-						containers.push(container);
-					}, void 0);
+					await runMultiAppWithHeaders(plan, async (app) => {
+						const container = await runView(resolveViewAppContainerConfig(app, projectConfig, values));
+						containers.push({
+							appDeployer: container.appDeployer,
+							appName: app.name
+						});
+					});
 					await confirmAndDeploy(containers, skipConfirm);
 				}
 			});