latticesql 1.13.0 → 1.13.2

package/README.md

@@ -2066,12 +2066,25 @@ npx lattice gui --config ./lattice.config.yml --output ./context --port 4317
 
 **Options**
 
-| Flag                  | Default                | Description                                           |
-| --------------------- | ---------------------- | ----------------------------------------------------- |
-| `--config, -c <path>` | `./lattice.config.yml` | Path to the config file                               |
-| `--output <dir>`      | `./context`            | Output directory (used by the relationship graph)     |
-| `--port <number>`     | `4317`                 | Localhost port; auto-increments when the port is busy |
-| `--no-open`           | off                    | Print the URL without opening a browser               |
+| Flag                  | Default                | Description                                              |
+| --------------------- | ---------------------- | -------------------------------------------------------- |
+| `--config, -c <path>` | `./lattice.config.yml` | Path to the config file                                  |
+| `--output <dir>`      | (auto-detected)        | Output directory containing rendered context — see below |
+| `--port <number>`     | `4317`                 | Localhost port; auto-increments when the port is busy    |
+| `--no-open`           | off                    | Print the URL without opening a browser                  |
+
+**Output-directory auto-detection (v1.13.1+).** When `--output` is not passed explicitly, the GUI probes `./context`, `.`, and `./generated` in order and uses the first directory containing a `.lattice/manifest.json` (announced via a one-line `auto-detected rendered context at "<dir>"` log on stdout). Projects whose `lattice render` writes into the project root no longer need to pass `--output .` every time. An explicit `--output` is always honoured.
+
+**Entity-context discovery (v1.13.1+).** The Database panel's row-context viewer reads entity contexts from two layered sources so it works regardless of how you register them:
+
+1. **Live Lattice schema** — anything declared in `lattice.config.yml` or added programmatically via `db.defineEntityContext()` against the active Lattice. Exposed via the new public `Lattice.entityContexts()` accessor.
+2. **Render manifest fallback** — when a table has no schema-registered entity context but the on-disk `.lattice/manifest.json` names it (typical for projects that register entity contexts in a JS / TS module like `lattice.schema.mjs` that the GUI process never imports), the GUI derives the row → slug mapping heuristically from `row.slug` / `row.id` / `row.name` and surfaces the rendered files anyway.
+
+The convergence means you don't need to duplicate entity-context definitions in YAML for the GUI to find rendered files.
+
+**Database wizard form (v1.13.2+).** The Postgres connection form (used by Migrate to cloud + Connect to existing cloud) disables browser autocapitalize, autocorrect, and spellcheck on every text input, and trims whitespace on every read. This avoids silent failure modes where macOS Safari / iOS turned a Supabase tenant user `postgres.<ref>` into `Postgres.<ref>` on submit, and where pasted credentials carrying a trailing newline produced opaque "zero-length delimiter identifier" or SCRAM-mismatch errors. `probeCloud` also folds SQLSTATE + `routine` into `result.error` so the GUI's "Unreachable: …" surface is actionable.
+
+**Switch vs. migrate (v1.13.2+ wording).** "Connect to existing cloud" _switches_ the project's `db:` line to point at the cloud; the local SQLite file stays on disk and you can switch back by editing the YAML or via the Databases catalog under User Config. Use "Migrate to cloud" only when you want to _push_ the local data into a fresh empty target.
 
 **Views**
 

package/dist/cli.js

@@ -7,7 +7,7 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
 });
 
 // src/cli.ts
-import { resolve as resolve8, dirname as dirname7 } from "path";
+import { resolve as resolve9, dirname as dirname7 } from "path";
 import { readFileSync as readFileSync12 } from "fs";
 import { execSync } from "child_process";
 import { parse as parse2 } from "yaml";
@@ -3369,6 +3369,16 @@ var Lattice = class {
     this._schema.defineEntityContext(table, def);
     return this;
   }
+  /**
+   * All entity contexts currently registered on this Lattice — both those
+   * declared in `lattice.config.yml` and those added programmatically via
+   * `defineEntityContext()`.
+   *
+   * Returns a defensive copy so callers can't mutate the schema.
+   */
+  entityContexts() {
+    return new Map(this._schema.getEntityContexts());
+  }
   /**
    * Register a write hook that fires after insert/update/delete operations.
    * Hooks run synchronously after the DB write and audit emit.
@@ -5358,8 +5368,13 @@ var guiAppHtml = `<!doctype html>
     }
 
     /* \u2500\u2500 Layout \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
+    /* minmax(0, 1fr) on the content track lets a wide child (a table with
+       chip-heavy cells) shrink instead of forcing the page wider than the
+       viewport. Without the explicit 0 lower bound, the implicit auto
+       minimum keeps the track at content-width and the whole page scrolls
+       horizontally. */
     .layout {
-      display: grid; grid-template-columns: 220px 1fr;
+      display: grid; grid-template-columns: 220px minmax(0, 1fr);
       height: calc(100vh - 56px);
     }
     nav.sidebar {
@@ -5431,6 +5446,19 @@ var guiAppHtml = `<!doctype html>
     tbody tr { cursor: pointer; }
     tbody tr:hover td { background: var(--row-hover); }
     td.muted { color: var(--text-muted); }
+    /* Row cells truncate at 3 lines so a row with many chips or a long text
+       blob stays one consistent visual height instead of wrapping into a
+       paragraph. The wrapping <div class="cell-clip"> is necessary because
+       -webkit-line-clamp doesn't apply to <td> directly in all engines. */
+    td .cell-clip {
+      display: -webkit-box;
+      -webkit-line-clamp: 3;
+      -webkit-box-orient: vertical;
+      overflow: hidden;
+      line-height: 1.45;
+      max-height: calc(1.45em * 3);
+      word-break: break-word;
+    }
     .chip {
       display: inline-block; padding: 2px 8px; margin: 1px 3px 1px 0;
       background: var(--accent-soft); color: var(--accent);
@@ -6390,11 +6418,11 @@ var guiAppHtml = `<!doctype html>
               if (isSecretColumn(tableName, c) && r[c] != null && r[c] !== '') {
                 return '<td class="muted">' + SECRET_MASK + '</td>';
               }
-              return '<td>' + escapeHtml(truncate(r[c], 120)) + '</td>';
+              return '<td><div class="cell-clip">' + escapeHtml(truncate(r[c], 120)) + '</div></td>';
             });
             belongsTo.forEach(function (b) {
               var ref = (loadedTables[b.rel.table] || []).find(function (x) { return x.id === r[b.rel.foreignKey]; });
-              tds.push('<td>' + chipLink(b.rel.table, ref) + '</td>');
+              tds.push('<td><div class="cell-clip">' + chipLink(b.rel.table, ref) + '</div></td>');
             });
             junctions.forEach(function (j) {
               var matches = (loadedTables[j.junction] || []).filter(function (jr) { return jr[j.localFk] === r.id; });
@@ -6403,7 +6431,7 @@ var guiAppHtml = `<!doctype html>
                 var ref = (loadedTables[j.remoteRel.table] || []).find(function (x) { return x.id === jr[remoteFkCol]; });
                 return ref ? chipLink(j.remoteRel.table, ref) : '';
               }).join('');
-              tds.push('<td>' + (chips || '<span class="muted">\u2014</span>') + '</td>');
+              tds.push('<td><div class="cell-clip">' + (chips || '<span class="muted">\u2014</span>') + '</div></td>');
             });
             if (viewMode === 'trash') {
               tds.push('<td class="row-actions">' +
@@ -7971,27 +7999,39 @@ var guiAppHtml = `<!doctype html>
 
     function postgresFormHtml(prefill) {
       prefill = prefill || {};
+      // autocapitalize="off" + autocorrect="off" + spellcheck="false" keep
+      // mobile / macOS keyboards from "helpfully" capitalizing the first
+      // letter of usernames + host fragments. Supabase tenant users
+      // (postgres.<ref>) are case-sensitive and silently failed
+      // authentication when iOS Safari turned the leading "p" into "P".
+      var attrs = ' autocapitalize="off" autocorrect="off" spellcheck="false"';
       return (
         '<div class="grid" style="display:grid;grid-template-columns:repeat(2,1fr);gap:8px">' +
-          '<div><label class="field-label">Label</label><input type="text" id="w-label" placeholder="atlas" value="' + escapeHtml(prefill.label || '') + '" style="width:100%"></div>' +
-          '<div><label class="field-label">Host</label><input type="text" id="w-host" placeholder="db.example.com" value="' + escapeHtml(prefill.host || '') + '" style="width:100%"></div>' +
+          '<div><label class="field-label">Label</label><input type="text" id="w-label" placeholder="atlas" value="' + escapeHtml(prefill.label || '') + '" style="width:100%"' + attrs + '></div>' +
+          '<div><label class="field-label">Host</label><input type="text" id="w-host" placeholder="db.example.com" value="' + escapeHtml(prefill.host || '') + '" style="width:100%"' + attrs + '></div>' +
           '<div><label class="field-label">Port</label><input type="number" id="w-port" placeholder="5432" value="' + escapeHtml(String(prefill.port || 5432)) + '" style="width:100%"></div>' +
-          '<div><label class="field-label">Database name</label><input type="text" id="w-dbname" placeholder="app" value="' + escapeHtml(prefill.dbname || '') + '" style="width:100%"></div>' +
-          '<div><label class="field-label">User</label><input type="text" id="w-user" placeholder="lattice_user" value="' + escapeHtml(prefill.user || '') + '" style="width:100%"></div>' +
-          '<div><label class="field-label">Password</label><input type="password" id="w-password" placeholder="\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" style="width:100%"></div>' +
+          '<div><label class="field-label">Database name</label><input type="text" id="w-dbname" placeholder="app" value="' + escapeHtml(prefill.dbname || '') + '" style="width:100%"' + attrs + '></div>' +
+          '<div><label class="field-label">User</label><input type="text" id="w-user" placeholder="lattice_user" value="' + escapeHtml(prefill.user || '') + '" style="width:100%"' + attrs + '></div>' +
+          '<div><label class="field-label">Password</label><input type="password" id="w-password" placeholder="\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" style="width:100%"' + attrs + '></div>' +
         '</div>'
       );
     }
 
     function readPostgresWizardForm() {
+      // Every text field is trimmed \u2014 pasted credentials frequently carry a
+      // trailing newline or leading space that breaks URL construction
+      // (zero-length identifier errors from the Postgres parser) or SCRAM
+      // auth (silent password mismatch). Trim once, here, so every caller
+      // benefits.
+      var get = function (id) { return (document.getElementById(id).value || '').trim(); };
       return {
         type: 'postgres',
-        label: (document.getElementById('w-label').value || '').trim(),
-        host: (document.getElementById('w-host').value || '').trim(),
+        label: get('w-label'),
+        host: get('w-host'),
         port: Number(document.getElementById('w-port').value || 5432),
-        dbname: (document.getElementById('w-dbname').value || '').trim(),
-        user: document.getElementById('w-user').value || '',
-        password: document.getElementById('w-password').value || '',
+        dbname: get('w-dbname'),
+        user: get('w-user'),
+        password: get('w-password'),
       };
     }
 
@@ -8026,10 +8066,14 @@ var guiAppHtml = `<!doctype html>
     function showConnectExistingModal(onClose) {
       var bodyHtml =
         '<p style="margin:0 0 12px;font-size:13px;color:var(--text-muted)">' +
-          'Connect this project to an <strong>existing</strong> cloud Postgres. ' +
-          'Your local SQLite data will be ignored \u2014 use Migrate to cloud instead ' +
-          'if you want to push it. If the target is a teams DB you\\'ll be asked ' +
-          'for an invite token after the probe.' +
+          'Switch this project to an <strong>existing</strong> cloud Postgres. ' +
+          'Your local SQLite file is preserved \u2014 only this project\\'s active ' +
+          'connection changes. Switch back any time by editing ' +
+          '<code>lattice.config.yml</code>\\'s <code>db:</code> line or via the ' +
+          'Databases catalog under User Config. If you want to <em>push</em> ' +
+          'your local rows into the target instead, use Migrate to cloud. If ' +
+          'the target is a teams DB you\\'ll be asked for an invite token ' +
+          'after the probe.' +
         '</p>' +
         postgresFormHtml({}) +
         '<div id="w-team-zone" style="margin-top:10px"></div>' +
@@ -8703,7 +8747,7 @@ function sendJson(res, body, status = 200) {
   res.end(JSON.stringify(body));
 }
 function readJson(req) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     let raw = "";
     req.setEncoding("utf8");
     req.on("data", (chunk) => {
@@ -8712,7 +8756,7 @@ function readJson(req) {
     });
     req.on("end", () => {
       try {
-        resolve9(raw ? JSON.parse(raw) : {});
+        resolve10(raw ? JSON.parse(raw) : {});
       } catch (e) {
         reject(new Error(`Invalid JSON body: ${e.message}`));
       }
@@ -9720,11 +9764,18 @@ async function probeCloud(targetUrl) {
     }
     return teamName !== void 0 ? { reachable: true, dialect, teamEnabled, teamName } : { reachable: true, dialect, teamEnabled };
   } catch (e) {
+    const err = e;
+    const parts = [];
+    if (err.code) parts.push(`[${err.code}]`);
+    if (err.message) parts.push(err.message);
+    if (err.routine && !err.message.includes(err.routine)) {
+      parts.push(`(routine: ${err.routine})`);
+    }
     return {
       reachable: false,
       dialect,
       teamEnabled: false,
-      error: e.message
+      error: parts.join(" ") || "unknown"
     };
   } finally {
     if (probe) {
@@ -10403,7 +10454,7 @@ function sendJson2(res, body, status = 200) {
   res.end(JSON.stringify(body));
 }
 function readJson2(req) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     let raw = "";
     req.setEncoding("utf8");
     req.on("data", (chunk) => {
@@ -10412,7 +10463,7 @@ function readJson2(req) {
     });
     req.on("end", () => {
       try {
-        resolve9(raw ? JSON.parse(raw) : {});
+        resolve10(raw ? JSON.parse(raw) : {});
       } catch (e) {
         reject(new Error(`Invalid JSON body: ${e.message}`));
       }
@@ -10676,7 +10727,7 @@ function sendJson3(res, body, status = 200) {
   res.end(JSON.stringify(body));
 }
 function readJson3(req) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     let raw = "";
     req.setEncoding("utf8");
     req.on("data", (chunk) => {
@@ -10685,7 +10736,7 @@ function readJson3(req) {
     });
     req.on("end", () => {
       try {
-        resolve9(raw ? JSON.parse(raw) : {});
+        resolve10(raw ? JSON.parse(raw) : {});
       } catch (e) {
         reject(new Error(`Invalid JSON body: ${e.message}`));
       }
@@ -11520,15 +11571,43 @@ async function applyForward(db, entry) {
   }
   void before;
 }
-function readRowContext(outputDir, def, row, secretCols) {
-  const slug = def.slug(row);
-  const directoryRoot = def.directoryRoot ?? "";
+function deriveSlugFromManifest(row, knownSlugs) {
+  const candidateFields = ["slug", "id", "name"];
+  for (const field of candidateFields) {
+    const value = row[field];
+    if (typeof value === "string" && knownSlugs.has(value)) return value;
+  }
+  return null;
+}
+function buildRowContextLocator(table, row, schemaDef, manifest) {
+  if (schemaDef) {
+    return {
+      directoryRoot: schemaDef.directoryRoot ?? "",
+      slug: schemaDef.slug(row),
+      fileNames: Object.keys(schemaDef.files)
+    };
+  }
+  const manifestEntry = manifest?.entityContexts[table];
+  if (!manifestEntry) return null;
+  const knownSlugs = new Set(Object.keys(manifestEntry.entities));
+  const derivedSlug = deriveSlugFromManifest(row, knownSlugs);
+  if (!derivedSlug) return null;
+  const entityFiles = manifestEntry.entities[derivedSlug];
+  const fileNames = entityFiles ? entityFileNames(entityFiles) : manifestEntry.declaredFiles;
+  return {
+    directoryRoot: manifestEntry.directoryRoot,
+    slug: derivedSlug,
+    fileNames
+  };
+}
+function readRowContext(outputDir, locator, secretCols) {
+  const { slug, directoryRoot, fileNames } = locator;
   const entityDir = resolve6(outputDir, directoryRoot, slug);
   const resolvedBase = resolve6(outputDir);
   if (entityDir !== resolvedBase && !entityDir.startsWith(resolvedBase + sep3)) {
     throw new Error(`Path traversal detected: slug "${slug}" escapes output directory`);
   }
-  return Object.keys(def.files).map((filename) => {
+  return fileNames.map((filename) => {
     const absPath = join13(entityDir, filename);
     const relPath = join13(directoryRoot, slug, filename);
     if (!existsSync14(absPath)) return { name: filename, path: relPath, content: "" };
@@ -11598,10 +11677,8 @@ async function openConfig(configPath, outputDir) {
   const junctionTables = new Set(
     getGuiEntities(configPath, outputDir).tables.filter(isJunctionTable).map((t) => t.name)
   );
-  const entityContextByTable = /* @__PURE__ */ new Map();
-  for (const { table, definition } of parsed.entityContexts) {
-    entityContextByTable.set(table, definition);
-  }
+  const entityContextByTable = db.entityContexts();
+  const manifest = readManifest(outputDir);
   const softDeletable = new Set(
     parsed.tables.filter(({ definition }) => "deleted_at" in definition.columns).map(({ name }) => name)
   );
@@ -11615,6 +11692,7 @@ async function openConfig(configPath, outputDir) {
     validTables,
     junctionTables,
     entityContextByTable,
+    manifest,
     softDeletable
   };
 }
@@ -12116,16 +12194,17 @@ async function startGuiServer(options) {
             sendJson5(res, { error: `Unknown table: ${ctxTable}` }, 400);
             return;
           }
-          const def = active.entityContextByTable.get(ctxTable);
-          if (!def) {
-            sendJson5(res, { files: [] });
-            return;
-          }
           const row = await active.db.get(ctxTable, ctxId);
           if (row === null) {
             sendJson5(res, { error: "Row not found" }, 404);
             return;
           }
+          const def = active.entityContextByTable.get(ctxTable);
+          const locator = buildRowContextLocator(ctxTable, row, def, active.manifest);
+          if (!locator) {
+            sendJson5(res, { files: [] });
+            return;
+          }
           const colMetaRows = await active.db.query("_lattice_gui_column_meta", {
             filters: [
               { col: "table_name", op: "eq", val: ctxTable },
@@ -12133,7 +12212,7 @@ async function startGuiServer(options) {
             ]
           });
           const secretCols = new Set(colMetaRows.map((r) => r.column_name));
-          sendJson5(res, { files: readRowContext(active.outputDir, def, row, secretCols) });
+          sendJson5(res, { files: readRowContext(active.outputDir, locator, secretCols) });
           return;
         }
         const rowsMatch = ROWS_PATH.exec(pathname);
@@ -12288,8 +12367,20 @@ async function startGuiServer(options) {
   };
 }
 
+// src/gui/discover-output-dir.ts
+import { existsSync as existsSync15 } from "fs";
+import { join as join14, resolve as resolve7 } from "path";
+function discoverOutputDir(explicitOutput, explicit) {
+  if (explicit) return explicitOutput;
+  const candidates = ["./context", ".", "./generated"];
+  for (const dir of candidates) {
+    if (existsSync15(join14(resolve7(dir), ".lattice", "manifest.json"))) return dir;
+  }
+  return explicitOutput;
+}
+
 // src/teams/cli-commands.ts
-import { resolve as resolve7 } from "path";
+import { resolve as resolve8 } from "path";
 var TEAMS_USAGE = [
   "lattice teams <subcommand> [options]",
   "",
@@ -12405,7 +12496,7 @@ function requireArg(args, key, label) {
   return v.trim();
 }
 async function openLocal(configPath) {
-  const db = new Lattice({ config: resolve7(configPath) });
+  const db = new Lattice({ config: resolve8(configPath) });
   await db.init();
   return db;
 }
@@ -12729,6 +12820,7 @@ function parseArgs(argv) {
   let config = "./lattice.config.yml";
   let out = "./generated";
   let output = "./context";
+  let outputExplicit = false;
   let scaffold = false;
   let help = false;
   let version = false;
@@ -12779,6 +12871,7 @@ function parseArgs(argv) {
     } else if ((arg === "--output" || arg === "--output-dir") && i + 1 < argv.length) {
       i++;
       output = argv[i] ?? output;
+      outputExplicit = true;
     } else if (arg === "--scaffold") {
       scaffold = true;
     } else if (arg === "--dry-run") {
@@ -12854,6 +12947,7 @@ function parseArgs(argv) {
     config,
     out,
     output,
+    outputExplicit,
     scaffold,
     help,
     version,
@@ -12979,7 +13073,7 @@ async function runUpdate() {
   }
 }
 function runGenerate(args) {
-  const configPath = resolve8(args.config);
+  const configPath = resolve9(args.config);
   let raw;
   try {
     raw = readFileSync12(configPath, "utf-8");
@@ -12999,7 +13093,7 @@ function runGenerate(args) {
     process.exit(1);
   }
   const configDir2 = dirname7(configPath);
-  const outDir = resolve8(args.out);
+  const outDir = resolve9(args.out);
   try {
     const result = generateAll({ config, configDir: configDir2, outDir, scaffold: args.scaffold });
     console.log(`Generated ${String(result.filesWritten.length)} file(s):`);
@@ -13012,15 +13106,15 @@ function runGenerate(args) {
   }
 }
 async function runRender(args) {
-  const outputDir = resolve8(args.output);
+  const outputDir = resolve9(args.output);
   let parsed;
   try {
-    parsed = parseConfigFile(resolve8(args.config));
+    parsed = parseConfigFile(resolve9(args.config));
   } catch (e) {
     console.error(`Error: ${e.message}`);
     process.exit(1);
   }
-  const db = new Lattice({ config: resolve8(args.config) });
+  const db = new Lattice({ config: resolve9(args.config) });
   try {
     await db.init();
     const start = Date.now();
@@ -13039,8 +13133,8 @@ async function runRender(args) {
   void parsed;
 }
 async function runReconcile(args, isDryRun) {
-  const outputDir = resolve8(args.output);
-  const db = new Lattice({ config: resolve8(args.config) });
+  const outputDir = resolve9(args.output);
+  const db = new Lattice({ config: resolve9(args.config) });
   try {
     await db.init();
     const start = Date.now();
@@ -13099,8 +13193,8 @@ function formatTimestamp() {
   return `${hh}:${mm}:${ss}`;
 }
 async function runWatch(args) {
-  const outputDir = resolve8(args.output);
-  const db = new Lattice({ config: resolve8(args.config) });
+  const outputDir = resolve9(args.output);
+  const db = new Lattice({ config: resolve9(args.config) });
   try {
     await db.init();
   } catch (e) {
@@ -13141,9 +13235,15 @@ async function runWatch(args) {
 }
 async function runGui(args) {
   try {
+    const resolvedOutput = discoverOutputDir(args.output, args.outputExplicit);
+    if (!args.outputExplicit && resolvedOutput !== args.output) {
+      console.log(
+        `Lattice GUI: auto-detected rendered context at "${resolvedOutput}" (use --output to override).`
+      );
+    }
     const handle = await startGuiServer({
-      configPath: resolve8(args.config),
-      outputDir: resolve8(args.output),
+      configPath: resolve9(args.config),
+      outputDir: resolve9(resolvedOutput),
       port: args.port,
       openBrowser: !args.noOpen
     });
@@ -13162,8 +13262,8 @@ async function runGui(args) {
 async function runServe(args) {
   try {
     const handle = await startGuiServer({
-      configPath: resolve8(args.config),
-      outputDir: resolve8(args.output),
+      configPath: resolve9(args.config),
+      outputDir: resolve9(args.output),
       host: args.host,
       port: args.port,
       openBrowser: false,

package/dist/index.cjs

@@ -3434,6 +3434,16 @@ var Lattice = class {
     this._schema.defineEntityContext(table, def);
     return this;
   }
+  /**
+   * All entity contexts currently registered on this Lattice — both those
+   * declared in `lattice.config.yml` and those added programmatically via
+   * `defineEntityContext()`.
+   *
+   * Returns a defensive copy so callers can't mutate the schema.
+   */
+  entityContexts() {
+    return new Map(this._schema.getEntityContexts());
+  }
   /**
    * Register a write hook that fires after insert/update/delete operations.
    * Hooks run synchronously after the DB write and audit emit.
@@ -5720,11 +5730,18 @@ async function probeCloud(targetUrl) {
     }
     return teamName !== void 0 ? { reachable: true, dialect, teamEnabled, teamName } : { reachable: true, dialect, teamEnabled };
   } catch (e) {
+    const err = e;
+    const parts = [];
+    if (err.code) parts.push(`[${err.code}]`);
+    if (err.message) parts.push(err.message);
+    if (err.routine && !err.message.includes(err.routine)) {
+      parts.push(`(routine: ${err.routine})`);
+    }
     return {
       reachable: false,
       dialect,
       teamEnabled: false,
-      error: e.message
+      error: parts.join(" ") || "unknown"
     };
   } finally {
     if (probe) {

package/dist/index.d.cts

@@ -1608,6 +1608,14 @@ declare class Lattice {
     private _registerTable;
     defineMulti(name: string, def: MultiTableDefinition): this;
     defineEntityContext(table: string, def: EntityContextDefinition): this;
+    /**
+     * All entity contexts currently registered on this Lattice — both those
+     * declared in `lattice.config.yml` and those added programmatically via
+     * `defineEntityContext()`.
+     *
+     * Returns a defensive copy so callers can't mutate the schema.
+     */
+    entityContexts(): Map<string, EntityContextDefinition>;
     /**
      * Register a write hook that fires after insert/update/delete operations.
      * Hooks run synchronously after the DB write and audit emit.
@@ -2731,8 +2739,8 @@ declare function attachBlob(srcPath: string, latticeRoot: string): Promise<BlobM
  *   keys/<label>.token    per-joined-team bearer tokens (added later).
  *   db-credentials.enc    encrypted Postgres URLs (added later).
  *
- * Per Rule 7 (public-repo isolation), do NOT log filesystem paths or
- * user identity values from this module.
+ * Security: do NOT log filesystem paths or user identity values from
+ * this module. Errors must be thrown without echoing sensitive arguments.
  */
 /** Root directory for machine-local lattice config. Override via env. */
 declare function configDir(): string;

package/dist/index.d.ts

@@ -1608,6 +1608,14 @@ declare class Lattice {
     private _registerTable;
     defineMulti(name: string, def: MultiTableDefinition): this;
     defineEntityContext(table: string, def: EntityContextDefinition): this;
+    /**
+     * All entity contexts currently registered on this Lattice — both those
+     * declared in `lattice.config.yml` and those added programmatically via
+     * `defineEntityContext()`.
+     *
+     * Returns a defensive copy so callers can't mutate the schema.
+     */
+    entityContexts(): Map<string, EntityContextDefinition>;
     /**
      * Register a write hook that fires after insert/update/delete operations.
      * Hooks run synchronously after the DB write and audit emit.
@@ -2731,8 +2739,8 @@ declare function attachBlob(srcPath: string, latticeRoot: string): Promise<BlobM
  *   keys/<label>.token    per-joined-team bearer tokens (added later).
  *   db-credentials.enc    encrypted Postgres URLs (added later).
  *
- * Per Rule 7 (public-repo isolation), do NOT log filesystem paths or
- * user identity values from this module.
+ * Security: do NOT log filesystem paths or user identity values from
+ * this module. Errors must be thrown without echoing sensitive arguments.
  */
 /** Root directory for machine-local lattice config. Override via env. */
 declare function configDir(): string;

package/dist/index.js

@@ -3362,6 +3362,16 @@ var Lattice = class {
     this._schema.defineEntityContext(table, def);
     return this;
   }
+  /**
+   * All entity contexts currently registered on this Lattice — both those
+   * declared in `lattice.config.yml` and those added programmatically via
+   * `defineEntityContext()`.
+   *
+   * Returns a defensive copy so callers can't mutate the schema.
+   */
+  entityContexts() {
+    return new Map(this._schema.getEntityContexts());
+  }
   /**
    * Register a write hook that fires after insert/update/delete operations.
    * Hooks run synchronously after the DB write and audit emit.
@@ -5648,11 +5658,18 @@ async function probeCloud(targetUrl) {
     }
     return teamName !== void 0 ? { reachable: true, dialect, teamEnabled, teamName } : { reachable: true, dialect, teamEnabled };
   } catch (e) {
+    const err = e;
+    const parts = [];
+    if (err.code) parts.push(`[${err.code}]`);
+    if (err.message) parts.push(err.message);
+    if (err.routine && !err.message.includes(err.routine)) {
+      parts.push(`(routine: ${err.routine})`);
+    }
     return {
       reachable: false,
       dialect,
       teamEnabled: false,
-      error: e.message
+      error: parts.join(" ") || "unknown"
     };
   } finally {
     if (probe) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "latticesql",
-  "version": "1.13.0",
+  "version": "1.13.2",
   "description": "Persistent structured memory for AI agent systems — pluggable SQLite or Postgres backend, LLM context bridge",
   "type": "module",
   "main": "./dist/index.js",