latticesql 3.4.4 → 3.4.5

package/dist/cli.js

@@ -632,14 +632,6 @@ function resolveDbPath(raw, configDir2) {
   }
   return resolve(configDir2, raw);
 }
-function warnDeprecatedRef(entity, field, target) {
-  const key = `${entity}.${field}`;
-  if (warnedDeprecatedRefs.has(key)) return;
-  warnedDeprecatedRefs.add(key);
-  console.warn(
-    `Lattice: one-to-many \`ref:\` on "${entity}.${field}" \u2192 "${target}" is deprecated in favor of many-to-many junction tables and will be removed in 2.0.`
-  );
-}
 function entityToTableDef(entityName, entity) {
   const rawFields = entity.fields;
   if (!rawFields || typeof rawFields !== "object" || Array.isArray(rawFields)) {
@@ -666,7 +658,6 @@ function entityToTableDef(entityName, entity) {
         table: field.ref,
         foreignKey: fieldName
       };
-      warnDeprecatedRef(entityName, fieldName, field.ref);
     }
   }
   const primaryKey = entity.primaryKey ?? pkFromField;
@@ -823,12 +814,10 @@ function parseEntityContexts(entityContexts) {
   }
   return result;
 }
-var warnedDeprecatedRefs;
 var init_parser = __esm({
   "src/config/parser.ts"() {
     "use strict";
     init_user_config();
-    warnedDeprecatedRefs = /* @__PURE__ */ new Set();
   }
 });
 
@@ -54094,6 +54083,8 @@ var css = `
     .app-version:empty { display: none; }
     .app-update { flex: 0 0 auto; color: var(--accent, #4a9); font-size: 12px; white-space: nowrap; }
     .app-update[hidden] { display: none; }
+    #app-update-link { flex: 0 0 auto; margin-left: 8px; color: var(--accent, #4a9); font-size: 12px; cursor: pointer; white-space: nowrap; }
+    #app-update-link[hidden] { display: none; }
     /* Unseen-change count next to a sidebar entity. */
     .nav-badge {
       display: inline-block; min-width: 16px; text-align: center;
@@ -55572,6 +55563,12 @@ var appJs = `
       // drag handle once the app has booted.
       var savedRail = parseInt(window.localStorage.getItem(RAIL_KEY) || '', 10);
       if (!isNaN(savedRail)) applyRailWidth(savedRail);
+      // The version chip + manual-upgrade link live in the static shell (present
+      // from first paint, in both the normal and virgin-state boots), so wire the
+      // click handler and run the first availability check here \u2014 independent of
+      // the async workspace bootstrap. checkServerVersion() refreshes it later.
+      wireUpdateLink();
+      checkUpdateAvailable();
       // Failsafe: never leave the overlay up forever if a fetch hangs without
       // rejecting, or a future early-return (e.g. the virgin-state screen)
       // bypasses the .then() tail. Idempotent, so a later real hide is a no-op.
@@ -56056,6 +56053,26 @@ var appJs = `
       showUpdatePill(label || 'Updated \u2014 reloading\u2026');
       setTimeout(function () { location.reload(); }, 600);
     }
+    // Manual upgrade fallback: show an "Update available \u2014 Upgrade" link next to
+    // the version chip only when the server reports a newer, installable version.
+    // The auto-updater installs in the background on its own cadence; this lets
+    // the user force it now. Best-effort; the link stays hidden on any failure.
+    function checkUpdateAvailable() {
+      var el = document.getElementById('app-update-link');
+      if (!el) return;
+      fetch('/api/update/status')
+        .then(function (r) { return r.ok ? r.json() : null; })
+        .then(function (s) {
+          if (s && s.latest && s.current && s.latest !== s.current && s.installable) {
+            el.textContent = 'Update available \u2014 Upgrade';
+            el.title = 'Install v' + s.latest + ' and restart';
+            el.hidden = false;
+          } else {
+            el.hidden = true;
+          }
+        })
+        .catch(function () { /* best-effort \u2014 keep the link hidden */ });
+    }
     // On every (re)connect, ask the server its version. A change vs BOOT_VERSION
     // means a relaunch onto new code \u2192 reload. Best-effort; never throws.
     function checkServerVersion() {
@@ -56069,6 +56086,31 @@ var appJs = `
           else hideUpdatePill();
         })
         .catch(function () { /* offline / mid-restart \u2014 the next reconnect retries */ });
+      // Refresh the manual-upgrade link alongside the reconnect version check.
+      checkUpdateAvailable();
+    }
+    // Wire the manual-upgrade link's click: kick off the install (the server
+    // installs the latest and restarts onto it) and surface the progress. On
+    // success we do nothing else \u2014 the update-applied event + the reconnect
+    // version check land the page on the new version (no manual reload). A
+    // false ok means the install can't run (unsupervised) \u2014 toast why.
+    function wireUpdateLink() {
+      var el = document.getElementById('app-update-link');
+      if (!el) return;
+      el.addEventListener('click', function (e) {
+        e.preventDefault();
+        el.hidden = true;
+        showUpdatePill('Updating\u2026');
+        fetch('/api/update/apply', { method: 'POST' })
+          .then(function (r) { return r.json(); })
+          .then(function (d) {
+            if (d && d.ok === false) {
+              hideUpdatePill();
+              showToast(d.error || 'Update unavailable', {});
+            }
+          })
+          .catch(function () { /* server may already be restarting */ });
+      });
     }
     function dispatchStreamMessage(type, data) {
       if (type === 'realtime-state') {
@@ -62886,6 +62928,7 @@ var guiAppHtml = `<!doctype html>
     <span class="offline-pill" id="offline-pill" title="Edits queued offline \u2014 will sync when the cloud reconnects" hidden></span>
     <span class="app-update" id="app-update" title="A new version is being applied" hidden></span>
     <span class="app-version" id="app-version" title="Lattice version"><!--LATTICE_VERSION--></span>
+    <a id="app-update-link" href="#" hidden>Update available \u2014 Upgrade</a>
     <button id="settings-gear" title="Settings" aria-label="Open settings">
       <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
         <circle cx="12" cy="12" r="3"/>
@@ -68096,6 +68139,28 @@ async function startGuiServer(options) {
     setActive(next, created.id);
     return created.id;
   };
+  const cleanupWorkspaceFiles = (root6, ws) => {
+    if (!ws.configPath && ws.kind === "local") {
+      rmSync(workspaceDir(root6, ws.dir), { recursive: true, force: true });
+    } else if (ws.kind === "cloud") {
+      if (ws.configPath && existsSync25(ws.configPath)) {
+        rmSync(ws.configPath, { force: true });
+      }
+      const labelMatch = /^\$\{LATTICE_DB:([A-Za-z0-9._-]+)\}$/.exec(ws.db.trim());
+      const label = labelMatch?.[1];
+      if (label) {
+        const stillUsed = listWorkspaces(root6).some(
+          (w2) => w2.db.includes("${LATTICE_DB:" + label + "}")
+        );
+        if (!stillUsed) {
+          try {
+            deleteDbCredential(label);
+          } catch {
+          }
+        }
+      }
+    }
+  };
   const handleVirginRoute = async (req, res, pathname, method) => {
     if (method === "GET" && pathname === "/") {
       sendText(
@@ -68147,6 +68212,35 @@ async function startGuiServer(options) {
       }
       return true;
     }
+    if (method === "POST" && pathname === "/api/workspaces/delete") {
+      if (!latticeRoot) {
+        sendJson(res, { error: "No .lattice root \u2014 workspaces unavailable" }, 400);
+        return true;
+      }
+      const body = await readJson(req);
+      if (typeof body.id !== "string") {
+        sendJson(res, { error: "id must be a string" }, 400);
+        return true;
+      }
+      const ws = getWorkspace(latticeRoot, body.id);
+      if (!ws) {
+        sendJson(res, { error: `No workspace with id ${body.id}` }, 400);
+        return true;
+      }
+      removeWorkspace(latticeRoot, ws.id);
+      try {
+        cleanupWorkspaceFiles(latticeRoot, ws);
+      } catch (e6) {
+        sendJson(
+          res,
+          { error: `Workspace unregistered but file cleanup failed: ${e6.message}` },
+          500
+        );
+        return true;
+      }
+      sendJson(res, { ok: true, switchedTo: null });
+      return true;
+    }
     if (method === "POST" && pathname === "/api/cloud/redeem-invite") {
       await redeemInvite(createCloudWorkspace, req, res);
       return true;
@@ -68181,6 +68275,18 @@ async function startGuiServer(options) {
           );
           return;
         }
+        if (method === "POST" && pathname === "/api/update/apply") {
+          if (updateService) {
+            void updateService.checkNow(true);
+            sendJson(res, { ok: true, status: updateService.status() });
+          } else {
+            sendJson(res, {
+              ok: false,
+              error: "Automatic update is not available for this install. Reinstall from https://latticesql.com to get the latest version."
+            });
+          }
+          return;
+        }
         if (!activeRef) {
           if (await handleVirginRoute(req, res, pathname, method)) return;
           sendJson(res, { error: "No active workspace" }, 409);
@@ -69274,26 +69380,7 @@ async function startGuiServer(options) {
           }
           removeWorkspace(latticeRoot, ws.id);
           try {
-            if (!ws.configPath && ws.kind === "local") {
-              rmSync(workspaceDir(latticeRoot, ws.dir), { recursive: true, force: true });
-            } else if (ws.kind === "cloud") {
-              if (ws.configPath && existsSync25(ws.configPath)) {
-                rmSync(ws.configPath, { force: true });
-              }
-              const labelMatch = /^\$\{LATTICE_DB:([A-Za-z0-9._-]+)\}$/.exec(ws.db.trim());
-              const label = labelMatch?.[1];
-              if (label) {
-                const stillUsed = listWorkspaces(latticeRoot).some(
-                  (w2) => w2.db.includes("${LATTICE_DB:" + label + "}")
-                );
-                if (!stillUsed) {
-                  try {
-                    deleteDbCredential(label);
-                  } catch {
-                  }
-                }
-              }
-            }
+            cleanupWorkspaceFiles(latticeRoot, ws);
           } catch (e6) {
             sendJson(
               res,
@@ -69759,7 +69846,9 @@ ${e6.stack ?? ""}`
       }
     }
   };
-  if (options.selfUpdate && guiVersion) {
+  if (options.updateServiceFactory) {
+    updateService = options.updateServiceFactory(broadcast);
+  } else if (options.selfUpdate && guiVersion) {
     updateService = createUpdateService({ currentVersion: guiVersion, emit: broadcast });
   }
   const handleEventStream = (ws) => {
@@ -70132,7 +70221,7 @@ function printHelp() {
   );
 }
 function getVersion() {
-  if (true) return "3.4.4";
+  if (true) return "3.4.5";
   try {
     const pkgPath = new URL("../package.json", import.meta.url).pathname;
     const pkg = JSON.parse(readFileSync20(pkgPath, "utf-8"));

package/dist/index.cjs

@@ -4527,14 +4527,6 @@ function resolveDbPath(raw, configDir2) {
   }
   return (0, import_node_path11.resolve)(configDir2, raw);
 }
-function warnDeprecatedRef(entity, field, target) {
-  const key = `${entity}.${field}`;
-  if (warnedDeprecatedRefs.has(key)) return;
-  warnedDeprecatedRefs.add(key);
-  console.warn(
-    `Lattice: one-to-many \`ref:\` on "${entity}.${field}" \u2192 "${target}" is deprecated in favor of many-to-many junction tables and will be removed in 2.0.`
-  );
-}
 function entityToTableDef(entityName, entity) {
   const rawFields = entity.fields;
   if (!rawFields || typeof rawFields !== "object" || Array.isArray(rawFields)) {
@@ -4561,7 +4553,6 @@ function entityToTableDef(entityName, entity) {
         table: field.ref,
         foreignKey: fieldName
       };
-      warnDeprecatedRef(entityName, fieldName, field.ref);
     }
   }
   const primaryKey = entity.primaryKey ?? pkFromField;
@@ -4718,7 +4709,7 @@ function parseEntityContexts(entityContexts) {
   }
   return result;
 }
-var import_node_fs10, import_node_path11, import_yaml3, warnedDeprecatedRefs;
+var import_node_fs10, import_node_path11, import_yaml3;
 var init_parser = __esm({
   "src/config/parser.ts"() {
     "use strict";
@@ -4726,7 +4717,6 @@ var init_parser = __esm({
     import_node_path11 = require("path");
     import_yaml3 = require("yaml");
     init_user_config();
-    warnedDeprecatedRefs = /* @__PURE__ */ new Set();
   }
 });
 
@@ -55971,6 +55961,8 @@ var css = `
     .app-version:empty { display: none; }
     .app-update { flex: 0 0 auto; color: var(--accent, #4a9); font-size: 12px; white-space: nowrap; }
     .app-update[hidden] { display: none; }
+    #app-update-link { flex: 0 0 auto; margin-left: 8px; color: var(--accent, #4a9); font-size: 12px; cursor: pointer; white-space: nowrap; }
+    #app-update-link[hidden] { display: none; }
     /* Unseen-change count next to a sidebar entity. */
     .nav-badge {
       display: inline-block; min-width: 16px; text-align: center;
@@ -57449,6 +57441,12 @@ var appJs = `
       // drag handle once the app has booted.
       var savedRail = parseInt(window.localStorage.getItem(RAIL_KEY) || '', 10);
       if (!isNaN(savedRail)) applyRailWidth(savedRail);
+      // The version chip + manual-upgrade link live in the static shell (present
+      // from first paint, in both the normal and virgin-state boots), so wire the
+      // click handler and run the first availability check here \u2014 independent of
+      // the async workspace bootstrap. checkServerVersion() refreshes it later.
+      wireUpdateLink();
+      checkUpdateAvailable();
       // Failsafe: never leave the overlay up forever if a fetch hangs without
       // rejecting, or a future early-return (e.g. the virgin-state screen)
       // bypasses the .then() tail. Idempotent, so a later real hide is a no-op.
@@ -57933,6 +57931,26 @@ var appJs = `
       showUpdatePill(label || 'Updated \u2014 reloading\u2026');
       setTimeout(function () { location.reload(); }, 600);
     }
+    // Manual upgrade fallback: show an "Update available \u2014 Upgrade" link next to
+    // the version chip only when the server reports a newer, installable version.
+    // The auto-updater installs in the background on its own cadence; this lets
+    // the user force it now. Best-effort; the link stays hidden on any failure.
+    function checkUpdateAvailable() {
+      var el = document.getElementById('app-update-link');
+      if (!el) return;
+      fetch('/api/update/status')
+        .then(function (r) { return r.ok ? r.json() : null; })
+        .then(function (s) {
+          if (s && s.latest && s.current && s.latest !== s.current && s.installable) {
+            el.textContent = 'Update available \u2014 Upgrade';
+            el.title = 'Install v' + s.latest + ' and restart';
+            el.hidden = false;
+          } else {
+            el.hidden = true;
+          }
+        })
+        .catch(function () { /* best-effort \u2014 keep the link hidden */ });
+    }
     // On every (re)connect, ask the server its version. A change vs BOOT_VERSION
     // means a relaunch onto new code \u2192 reload. Best-effort; never throws.
     function checkServerVersion() {
@@ -57946,6 +57964,31 @@ var appJs = `
           else hideUpdatePill();
         })
         .catch(function () { /* offline / mid-restart \u2014 the next reconnect retries */ });
+      // Refresh the manual-upgrade link alongside the reconnect version check.
+      checkUpdateAvailable();
+    }
+    // Wire the manual-upgrade link's click: kick off the install (the server
+    // installs the latest and restarts onto it) and surface the progress. On
+    // success we do nothing else \u2014 the update-applied event + the reconnect
+    // version check land the page on the new version (no manual reload). A
+    // false ok means the install can't run (unsupervised) \u2014 toast why.
+    function wireUpdateLink() {
+      var el = document.getElementById('app-update-link');
+      if (!el) return;
+      el.addEventListener('click', function (e) {
+        e.preventDefault();
+        el.hidden = true;
+        showUpdatePill('Updating\u2026');
+        fetch('/api/update/apply', { method: 'POST' })
+          .then(function (r) { return r.json(); })
+          .then(function (d) {
+            if (d && d.ok === false) {
+              hideUpdatePill();
+              showToast(d.error || 'Update unavailable', {});
+            }
+          })
+          .catch(function () { /* server may already be restarting */ });
+      });
     }
     function dispatchStreamMessage(type, data) {
       if (type === 'realtime-state') {
@@ -64763,6 +64806,7 @@ var guiAppHtml = `<!doctype html>
     <span class="offline-pill" id="offline-pill" title="Edits queued offline \u2014 will sync when the cloud reconnects" hidden></span>
     <span class="app-update" id="app-update" title="A new version is being applied" hidden></span>
     <span class="app-version" id="app-version" title="Lattice version"><!--LATTICE_VERSION--></span>
+    <a id="app-update-link" href="#" hidden>Update available \u2014 Upgrade</a>
     <button id="settings-gear" title="Settings" aria-label="Open settings">
       <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
         <circle cx="12" cy="12" r="3"/>
@@ -69305,6 +69349,28 @@ async function startGuiServer(options) {
     setActive(next, created.id);
     return created.id;
   };
+  const cleanupWorkspaceFiles = (root6, ws) => {
+    if (!ws.configPath && ws.kind === "local") {
+      (0, import_node_fs35.rmSync)(workspaceDir(root6, ws.dir), { recursive: true, force: true });
+    } else if (ws.kind === "cloud") {
+      if (ws.configPath && (0, import_node_fs35.existsSync)(ws.configPath)) {
+        (0, import_node_fs35.rmSync)(ws.configPath, { force: true });
+      }
+      const labelMatch = /^\$\{LATTICE_DB:([A-Za-z0-9._-]+)\}$/.exec(ws.db.trim());
+      const label = labelMatch?.[1];
+      if (label) {
+        const stillUsed = listWorkspaces(root6).some(
+          (w2) => w2.db.includes("${LATTICE_DB:" + label + "}")
+        );
+        if (!stillUsed) {
+          try {
+            deleteDbCredential(label);
+          } catch {
+          }
+        }
+      }
+    }
+  };
   const handleVirginRoute = async (req, res, pathname, method) => {
     if (method === "GET" && pathname === "/") {
       sendText(
@@ -69356,6 +69422,35 @@ async function startGuiServer(options) {
       }
       return true;
     }
+    if (method === "POST" && pathname === "/api/workspaces/delete") {
+      if (!latticeRoot) {
+        sendJson(res, { error: "No .lattice root \u2014 workspaces unavailable" }, 400);
+        return true;
+      }
+      const body = await readJson(req);
+      if (typeof body.id !== "string") {
+        sendJson(res, { error: "id must be a string" }, 400);
+        return true;
+      }
+      const ws = getWorkspace(latticeRoot, body.id);
+      if (!ws) {
+        sendJson(res, { error: `No workspace with id ${body.id}` }, 400);
+        return true;
+      }
+      removeWorkspace(latticeRoot, ws.id);
+      try {
+        cleanupWorkspaceFiles(latticeRoot, ws);
+      } catch (e6) {
+        sendJson(
+          res,
+          { error: `Workspace unregistered but file cleanup failed: ${e6.message}` },
+          500
+        );
+        return true;
+      }
+      sendJson(res, { ok: true, switchedTo: null });
+      return true;
+    }
     if (method === "POST" && pathname === "/api/cloud/redeem-invite") {
       await redeemInvite(createCloudWorkspace, req, res);
       return true;
@@ -69390,6 +69485,18 @@ async function startGuiServer(options) {
           );
           return;
         }
+        if (method === "POST" && pathname === "/api/update/apply") {
+          if (updateService) {
+            void updateService.checkNow(true);
+            sendJson(res, { ok: true, status: updateService.status() });
+          } else {
+            sendJson(res, {
+              ok: false,
+              error: "Automatic update is not available for this install. Reinstall from https://latticesql.com to get the latest version."
+            });
+          }
+          return;
+        }
         if (!activeRef) {
           if (await handleVirginRoute(req, res, pathname, method)) return;
           sendJson(res, { error: "No active workspace" }, 409);
@@ -70483,26 +70590,7 @@ async function startGuiServer(options) {
           }
           removeWorkspace(latticeRoot, ws.id);
           try {
-            if (!ws.configPath && ws.kind === "local") {
-              (0, import_node_fs35.rmSync)(workspaceDir(latticeRoot, ws.dir), { recursive: true, force: true });
-            } else if (ws.kind === "cloud") {
-              if (ws.configPath && (0, import_node_fs35.existsSync)(ws.configPath)) {
-                (0, import_node_fs35.rmSync)(ws.configPath, { force: true });
-              }
-              const labelMatch = /^\$\{LATTICE_DB:([A-Za-z0-9._-]+)\}$/.exec(ws.db.trim());
-              const label = labelMatch?.[1];
-              if (label) {
-                const stillUsed = listWorkspaces(latticeRoot).some(
-                  (w2) => w2.db.includes("${LATTICE_DB:" + label + "}")
-                );
-                if (!stillUsed) {
-                  try {
-                    deleteDbCredential(label);
-                  } catch {
-                  }
-                }
-              }
-            }
+            cleanupWorkspaceFiles(latticeRoot, ws);
           } catch (e6) {
             sendJson(
               res,
@@ -70968,7 +71056,9 @@ ${e6.stack ?? ""}`
       }
     }
   };
-  if (options.selfUpdate && guiVersion) {
+  if (options.updateServiceFactory) {
+    updateService = options.updateServiceFactory(broadcast);
+  } else if (options.selfUpdate && guiVersion) {
     updateService = createUpdateService({ currentVersion: guiVersion, emit: broadcast });
   }
   const handleEventStream = (ws) => {

package/dist/index.d.cts

@@ -4923,6 +4923,37 @@ interface PdfOptions {
  */
 declare function describePdf(auth: ClaudeAuth, path: string, opts?: PdfOptions): Promise<string>;
 
+/** How the running copy of the package was installed. */
+type InstallKind = 'global' | 'local' | 'npx' | 'linked-dev' | 'unknown';
+interface InstallContext {
+    kind: InstallKind;
+    /** True only when an `npm install` may safely upgrade this copy in place. */
+    installable: boolean;
+    /** Directory to run the install from (the consumer project root for `local`). */
+    cwd: string;
+    /** Resolved package root of the running copy, if found. */
+    packageRoot: string | null;
+    /** Human-readable explanation (logged / surfaced in `/api/update/status`). */
+    reason: string;
+}
+
+interface UpdateStatus {
+    current: string;
+    latest: string | null;
+    kind: InstallContext['kind'];
+    installable: boolean;
+    checking: boolean;
+    installing: boolean;
+    lastError: string | null;
+}
+interface UpdateService {
+    start(): void;
+    stop(): void;
+    status(): UpdateStatus;
+    /** Run a check now (and install if applicable). Returns the resulting status. */
+    checkNow(force?: boolean): Promise<UpdateStatus>;
+}
+
 interface StartGuiServerOptions {
     /**
      * Active workspace config to open. NULL/empty ⇒ boot into the zero-workspace
@@ -4979,6 +5010,13 @@ interface StartGuiServerOptions {
      * `GET /api/version` + `GET /api/update/status` are served regardless.
      */
     selfUpdate?: boolean;
+    /**
+     * Test seam: supply the update service instead of building one from the real
+     * npm-backed install context. Lets tests exercise the update routes against a
+     * deterministic fake (no real registry check, no real npm install). When set,
+     * it overrides `selfUpdate`'s default factory.
+     */
+    updateServiceFactory?: (emit: (type: string, data: unknown) => void) => UpdateService;
 }
 interface GuiServerHandle {
     server: Server;

package/dist/index.d.ts

@@ -4923,6 +4923,37 @@ interface PdfOptions {
  */
 declare function describePdf(auth: ClaudeAuth, path: string, opts?: PdfOptions): Promise<string>;
 
+/** How the running copy of the package was installed. */
+type InstallKind = 'global' | 'local' | 'npx' | 'linked-dev' | 'unknown';
+interface InstallContext {
+    kind: InstallKind;
+    /** True only when an `npm install` may safely upgrade this copy in place. */
+    installable: boolean;
+    /** Directory to run the install from (the consumer project root for `local`). */
+    cwd: string;
+    /** Resolved package root of the running copy, if found. */
+    packageRoot: string | null;
+    /** Human-readable explanation (logged / surfaced in `/api/update/status`). */
+    reason: string;
+}
+
+interface UpdateStatus {
+    current: string;
+    latest: string | null;
+    kind: InstallContext['kind'];
+    installable: boolean;
+    checking: boolean;
+    installing: boolean;
+    lastError: string | null;
+}
+interface UpdateService {
+    start(): void;
+    stop(): void;
+    status(): UpdateStatus;
+    /** Run a check now (and install if applicable). Returns the resulting status. */
+    checkNow(force?: boolean): Promise<UpdateStatus>;
+}
+
 interface StartGuiServerOptions {
     /**
      * Active workspace config to open. NULL/empty ⇒ boot into the zero-workspace
@@ -4979,6 +5010,13 @@ interface StartGuiServerOptions {
      * `GET /api/version` + `GET /api/update/status` are served regardless.
      */
     selfUpdate?: boolean;
+    /**
+     * Test seam: supply the update service instead of building one from the real
+     * npm-backed install context. Lets tests exercise the update routes against a
+     * deterministic fake (no real registry check, no real npm install). When set,
+     * it overrides `selfUpdate`'s default factory.
+     */
+    updateServiceFactory?: (emit: (type: string, data: unknown) => void) => UpdateService;
 }
 interface GuiServerHandle {
     server: Server;

package/dist/index.js

@@ -4531,14 +4531,6 @@ function resolveDbPath(raw, configDir2) {
   }
   return resolve2(configDir2, raw);
 }
-function warnDeprecatedRef(entity, field, target) {
-  const key = `${entity}.${field}`;
-  if (warnedDeprecatedRefs.has(key)) return;
-  warnedDeprecatedRefs.add(key);
-  console.warn(
-    `Lattice: one-to-many \`ref:\` on "${entity}.${field}" \u2192 "${target}" is deprecated in favor of many-to-many junction tables and will be removed in 2.0.`
-  );
-}
 function entityToTableDef(entityName, entity) {
   const rawFields = entity.fields;
   if (!rawFields || typeof rawFields !== "object" || Array.isArray(rawFields)) {
@@ -4565,7 +4557,6 @@ function entityToTableDef(entityName, entity) {
         table: field.ref,
         foreignKey: fieldName
       };
-      warnDeprecatedRef(entityName, fieldName, field.ref);
     }
   }
   const primaryKey = entity.primaryKey ?? pkFromField;
@@ -4722,12 +4713,10 @@ function parseEntityContexts(entityContexts) {
   }
   return result;
 }
-var warnedDeprecatedRefs;
 var init_parser = __esm({
   "src/config/parser.ts"() {
     "use strict";
     init_user_config();
-    warnedDeprecatedRefs = /* @__PURE__ */ new Set();
   }
 });
 
@@ -55797,6 +55786,8 @@ var css = `
     .app-version:empty { display: none; }
     .app-update { flex: 0 0 auto; color: var(--accent, #4a9); font-size: 12px; white-space: nowrap; }
     .app-update[hidden] { display: none; }
+    #app-update-link { flex: 0 0 auto; margin-left: 8px; color: var(--accent, #4a9); font-size: 12px; cursor: pointer; white-space: nowrap; }
+    #app-update-link[hidden] { display: none; }
     /* Unseen-change count next to a sidebar entity. */
     .nav-badge {
       display: inline-block; min-width: 16px; text-align: center;
@@ -57275,6 +57266,12 @@ var appJs = `
       // drag handle once the app has booted.
       var savedRail = parseInt(window.localStorage.getItem(RAIL_KEY) || '', 10);
       if (!isNaN(savedRail)) applyRailWidth(savedRail);
+      // The version chip + manual-upgrade link live in the static shell (present
+      // from first paint, in both the normal and virgin-state boots), so wire the
+      // click handler and run the first availability check here \u2014 independent of
+      // the async workspace bootstrap. checkServerVersion() refreshes it later.
+      wireUpdateLink();
+      checkUpdateAvailable();
       // Failsafe: never leave the overlay up forever if a fetch hangs without
       // rejecting, or a future early-return (e.g. the virgin-state screen)
       // bypasses the .then() tail. Idempotent, so a later real hide is a no-op.
@@ -57759,6 +57756,26 @@ var appJs = `
       showUpdatePill(label || 'Updated \u2014 reloading\u2026');
       setTimeout(function () { location.reload(); }, 600);
     }
+    // Manual upgrade fallback: show an "Update available \u2014 Upgrade" link next to
+    // the version chip only when the server reports a newer, installable version.
+    // The auto-updater installs in the background on its own cadence; this lets
+    // the user force it now. Best-effort; the link stays hidden on any failure.
+    function checkUpdateAvailable() {
+      var el = document.getElementById('app-update-link');
+      if (!el) return;
+      fetch('/api/update/status')
+        .then(function (r) { return r.ok ? r.json() : null; })
+        .then(function (s) {
+          if (s && s.latest && s.current && s.latest !== s.current && s.installable) {
+            el.textContent = 'Update available \u2014 Upgrade';
+            el.title = 'Install v' + s.latest + ' and restart';
+            el.hidden = false;
+          } else {
+            el.hidden = true;
+          }
+        })
+        .catch(function () { /* best-effort \u2014 keep the link hidden */ });
+    }
     // On every (re)connect, ask the server its version. A change vs BOOT_VERSION
     // means a relaunch onto new code \u2192 reload. Best-effort; never throws.
     function checkServerVersion() {
@@ -57772,6 +57789,31 @@ var appJs = `
           else hideUpdatePill();
         })
         .catch(function () { /* offline / mid-restart \u2014 the next reconnect retries */ });
+      // Refresh the manual-upgrade link alongside the reconnect version check.
+      checkUpdateAvailable();
+    }
+    // Wire the manual-upgrade link's click: kick off the install (the server
+    // installs the latest and restarts onto it) and surface the progress. On
+    // success we do nothing else \u2014 the update-applied event + the reconnect
+    // version check land the page on the new version (no manual reload). A
+    // false ok means the install can't run (unsupervised) \u2014 toast why.
+    function wireUpdateLink() {
+      var el = document.getElementById('app-update-link');
+      if (!el) return;
+      el.addEventListener('click', function (e) {
+        e.preventDefault();
+        el.hidden = true;
+        showUpdatePill('Updating\u2026');
+        fetch('/api/update/apply', { method: 'POST' })
+          .then(function (r) { return r.json(); })
+          .then(function (d) {
+            if (d && d.ok === false) {
+              hideUpdatePill();
+              showToast(d.error || 'Update unavailable', {});
+            }
+          })
+          .catch(function () { /* server may already be restarting */ });
+      });
     }
     function dispatchStreamMessage(type, data) {
       if (type === 'realtime-state') {
@@ -64589,6 +64631,7 @@ var guiAppHtml = `<!doctype html>
     <span class="offline-pill" id="offline-pill" title="Edits queued offline \u2014 will sync when the cloud reconnects" hidden></span>
     <span class="app-update" id="app-update" title="A new version is being applied" hidden></span>
     <span class="app-version" id="app-version" title="Lattice version"><!--LATTICE_VERSION--></span>
+    <a id="app-update-link" href="#" hidden>Update available \u2014 Upgrade</a>
     <button id="settings-gear" title="Settings" aria-label="Open settings">
       <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
         <circle cx="12" cy="12" r="3"/>
@@ -69130,6 +69173,28 @@ async function startGuiServer(options) {
     setActive(next, created.id);
     return created.id;
   };
+  const cleanupWorkspaceFiles = (root6, ws) => {
+    if (!ws.configPath && ws.kind === "local") {
+      rmSync(workspaceDir(root6, ws.dir), { recursive: true, force: true });
+    } else if (ws.kind === "cloud") {
+      if (ws.configPath && existsSync24(ws.configPath)) {
+        rmSync(ws.configPath, { force: true });
+      }
+      const labelMatch = /^\$\{LATTICE_DB:([A-Za-z0-9._-]+)\}$/.exec(ws.db.trim());
+      const label = labelMatch?.[1];
+      if (label) {
+        const stillUsed = listWorkspaces(root6).some(
+          (w2) => w2.db.includes("${LATTICE_DB:" + label + "}")
+        );
+        if (!stillUsed) {
+          try {
+            deleteDbCredential(label);
+          } catch {
+          }
+        }
+      }
+    }
+  };
   const handleVirginRoute = async (req, res, pathname, method) => {
     if (method === "GET" && pathname === "/") {
       sendText(
@@ -69181,6 +69246,35 @@ async function startGuiServer(options) {
       }
       return true;
     }
+    if (method === "POST" && pathname === "/api/workspaces/delete") {
+      if (!latticeRoot) {
+        sendJson(res, { error: "No .lattice root \u2014 workspaces unavailable" }, 400);
+        return true;
+      }
+      const body = await readJson(req);
+      if (typeof body.id !== "string") {
+        sendJson(res, { error: "id must be a string" }, 400);
+        return true;
+      }
+      const ws = getWorkspace(latticeRoot, body.id);
+      if (!ws) {
+        sendJson(res, { error: `No workspace with id ${body.id}` }, 400);
+        return true;
+      }
+      removeWorkspace(latticeRoot, ws.id);
+      try {
+        cleanupWorkspaceFiles(latticeRoot, ws);
+      } catch (e6) {
+        sendJson(
+          res,
+          { error: `Workspace unregistered but file cleanup failed: ${e6.message}` },
+          500
+        );
+        return true;
+      }
+      sendJson(res, { ok: true, switchedTo: null });
+      return true;
+    }
     if (method === "POST" && pathname === "/api/cloud/redeem-invite") {
       await redeemInvite(createCloudWorkspace, req, res);
       return true;
@@ -69215,6 +69309,18 @@ async function startGuiServer(options) {
           );
           return;
         }
+        if (method === "POST" && pathname === "/api/update/apply") {
+          if (updateService) {
+            void updateService.checkNow(true);
+            sendJson(res, { ok: true, status: updateService.status() });
+          } else {
+            sendJson(res, {
+              ok: false,
+              error: "Automatic update is not available for this install. Reinstall from https://latticesql.com to get the latest version."
+            });
+          }
+          return;
+        }
         if (!activeRef) {
           if (await handleVirginRoute(req, res, pathname, method)) return;
           sendJson(res, { error: "No active workspace" }, 409);
@@ -70308,26 +70414,7 @@ async function startGuiServer(options) {
           }
           removeWorkspace(latticeRoot, ws.id);
           try {
-            if (!ws.configPath && ws.kind === "local") {
-              rmSync(workspaceDir(latticeRoot, ws.dir), { recursive: true, force: true });
-            } else if (ws.kind === "cloud") {
-              if (ws.configPath && existsSync24(ws.configPath)) {
-                rmSync(ws.configPath, { force: true });
-              }
-              const labelMatch = /^\$\{LATTICE_DB:([A-Za-z0-9._-]+)\}$/.exec(ws.db.trim());
-              const label = labelMatch?.[1];
-              if (label) {
-                const stillUsed = listWorkspaces(latticeRoot).some(
-                  (w2) => w2.db.includes("${LATTICE_DB:" + label + "}")
-                );
-                if (!stillUsed) {
-                  try {
-                    deleteDbCredential(label);
-                  } catch {
-                  }
-                }
-              }
-            }
+            cleanupWorkspaceFiles(latticeRoot, ws);
           } catch (e6) {
             sendJson(
               res,
@@ -70793,7 +70880,9 @@ ${e6.stack ?? ""}`
       }
     }
   };
-  if (options.selfUpdate && guiVersion) {
+  if (options.updateServiceFactory) {
+    updateService = options.updateServiceFactory(broadcast);
+  } else if (options.selfUpdate && guiVersion) {
     updateService = createUpdateService({ currentVersion: guiVersion, emit: broadcast });
   }
   const handleEventStream = (ws) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "latticesql",
-  "version": "3.4.4",
+  "version": "3.4.5",
   "description": "Persistent structured memory for AI agent systems — pluggable SQLite or Postgres backend, LLM context bridge",
   "type": "module",
   "main": "./dist/index.js",