Sync ako/mxcli: describe round-trips, multi-file check, Go 1.27.2, docs gated on check

[ako]

Syncs ako/mxcli:main into mendixlabs/mxcli:main: 18 commits since #1353, landed in the fork through PRs ako#1062–ako#1073.

Describe round-trips

• describe nanoflow emits its grant execute line (describe nanoflow omits grant execute on nanoflow, so a describe -> exec round trip loses its access rules #1345). A describe → exec round trip left a nanoflow with no allowed roles. All three flow renderers now share one helper.
• Menu captions with an apostrophe are quoted correctly by describe navigation / describe menu (describe navigation writes menu captions with an apostrophe unescaped, so its output does not re-parse #1343). Customer's orders produced MDL that did not re-parse.
• mxcli describe published rest service M.Api works as a subcommand, and auto-detect finds the service (mxcli describe rejects published rest service, although the MDL statement works #1347).
• describe auto-detect finds documents without a catalog. The live fallback hit an unimplemented ListRawUnits and discarded the error.

Check

• check over several files resolves each against what the earlier ones write (check -p on a script set: a combobox datasource naming an entity an earlier file creates is reported "entity not found" #1355). A scratch copy of the project has the earlier files applied, as mxcli diff already does. The project itself is not changed.
• create module role NoSuchModule.Reader is refused before exec writes anything (check -p passes create module role in a module that does not exist; exec then fails after earlier statements were written #1354).
• No more false MDL-WIDGET07 on widget properties the builder reads and describe emits, such as ShowFooter and navigationtree Menu/Profile (check: false MDL-WIDGET07 for showFooter on a data view #1346). The allow-list is now guarded by a test that derives the vocabulary from the builder and describer source.

Model fixes

• A restrict association's delete message is stored in the project's default language, not a hardcoded en_US (Restrict association delete error message is always stored as en_US, missing in a non-English app language #1344). Verified on an 11.12.4 project with nl_NL default.
• OData: create or modify published odata service no longer carries a member's stored CanBeEmpty across a change of key status (CE0309 when (KEY) was added).

Docs and skills (#1356, #1357)

• Skill and docs-site examples are gated on mxcli check. Three skill examples and 24 docs-site examples that failed check or mxbuild are fixed (duplicate variable, derived string length, reserved names, AutoNumber seed, attributes outside a data container, and more).
• Prose corrections: create or replace is the deprecated spelling of create or modify (it does not delete and re-mint), folder placement is a clause, and CE0463 advice is corrected.
• fmt --help and the test-microflows skill say test files take the mdl 1; header, which fmt --upgrade adds by default.
• The OData key note now says a key needs UNIQUE only, and the CE0309 attribution is corrected.

Build

• Go toolchain 1.27.2 and golang.org/x/net v0.60.0, which clear govulncheck advisories GO-2026-6603..6617. The go directive stays 1.26.0, and a gofmt layout is made stable across 1.26 and 1.27.
• Removed the dead security_patch reconciler. "Fixing" its keys would have introduced CE0066, as measured on mxbuild 11.14.0.
• Dependabot: handlebars 4.7.10

[github-actions]

AI Code Review

Critical Issues

None found.

Moderate Issues

None found.

Minor Issues

None found.

What Looks Good

The PR is a sync of 18 commits from a fork that addresses multiple discrete issues while maintaining excellent quality:

1. Describe round-trip fixes (describe navigation writes menu captions with an apostrophe unescaped, so its output does not re-parse #1343, describe nanoflow omits grant execute on nanoflow, so a describe -> exec round trip loses its access rules #1345, mxcli describe rejects published rest service, although the MDL statement works #1347):

   • Properly handles apostrophe escaping in menu captions
   • Fixes nanoflow grant execute emission in describe output
   • Adds support for describe published rest service as a subcommand
   • Improves auto-detect for documents without catalog
   • All fixes include corresponding bug test examples and unit tests

2. Multi-file check improvements (check -p on a script set: a combobox datasource naming an entity an earlier file creates is reported "entity not found" #1355):

   • Implements proper scratch copy approach where each file in a set sees what earlier files wrote
   • Includes comprehensive test coverage for the script set resolution logic
   • Fixes the issue where earlier files' creations weren't visible to later files during check

3. Pre-execution validation (check -p passes create module role in a module that does not exist; exec then fails after earlier statements were written #1354):

   • Now validates module existence for module roles during check phase
   • Prevents writing partial changes before detecting errors
   • Includes test coverage for the validation logic

4. Widget validation accuracy (check: false MDL-WIDGET07 for showFooter on a data view #1346):

   • Eliminates false MDL-WIDGET07 warnings by deriving allow-list from builder/describer source
   • Replaces manual maintenance with automated vocabulary extraction
   • Includes test that verifies builder-consumed and describer-emitted properties are recognized

5. Model correctness (Restrict association delete error message is always stored as en_US, missing in a non-English app language #1344, CE0309):

   • Stores association delete messages in project's default language instead of hardcoded en_US
   • Fixes OData CanBeEmpty carry-over when changing key status
   • Both fixes include language-specific tests and verify round-trip behavior

6. Documentation and skills (fmt --upgrade adds mdl 1; to a .test.mdl, but fmt --help and the test-microflows skill say test files take no header #1356, docs: the v0.25.0 skill pack contradicts the binary (OR REPLACE identity, folder clause, docker check normalisation, three examples that fail check) #1357):

   • Gates skill and docs-site examples on mxcli check validation
   • Fixes 27 examples that previously failed check or mxbuild
   • Corrects documentation inaccuracies (create/replace vs create/modify, test file headers, etc.)
   • Adds automated validation script for examples

7. Build and maintenance:

   • Updates Go toolchain to 1.27.2 with vulnerability fixes
   • Removes dead security_patch reconciler that would have caused CE0066
   • Updates dependencies via

---

Automated review via OpenRouter (Nemotron Super 120B) — workflow source

[github-actions]

AI Code Review

Critical Issues

None found.

Moderate Issues

None found.

Minor Issues

• Inconsistent quoting in documentation: In docs-site/src/language/grant-revoke.md, the change modifies TO ROLE to TO ROLE 'role_name' but the surrounding context shows inconsistent quoting styles (sometimes single quotes, sometimes none). This is minor as it's documentation and doesn't affect functionality.
• Test file naming: The new test file cmd/mxcli/check_script_set_refs_test.go is placed in the main package but could be better organized under cmd/mxcli/test/ for consistency with other test files. However, this is a minor organizational preference.

What Looks Good

• Thorough bug fixes: All reported issues (describe round-trips, multi-file check, apostrophe handling, OData CanBeEmpty carry-over, delete message language, false widget warnings, missing module role validation) are addressed with corresponding tests.
• Proper full-stack wiring: Changes touch all necessary layers (grammar via visitor updates, executor handlers, backend logic, CLI commands) even though no new MDL syntax was added—fixes properly integrate through existing pipelines.
• Excellent test coverage:
  • 12 new bug-test MDL files in mdl-examples/bug-tests/ covering specific issues
  • 14 new fix-issue findings documenting root causes and solutions
  • New integration test for multi-file check (check_script_set_refs_test.go)
  • Unit tests for descriptor language handling, widget property allow-lists, and OData behavior
• Dead code removal: Removed the dangerous security_patch reconciler that would have caused CE0066, verified by measurements on mxbuild 11.14.0.
• Documentation improvements:
  • Skills and docs-site examples now gated on mxcli check
  • Clear prose corrections (deprecated spellings, clause explanations)
  • Updated help text to match actual behavior (fmt --upgrade adding headers to test files)
• Robust multi-file check implementation:
  • Uses scratch copy pattern mirroring mxcli diff
  • Properly handles test files and failed statements
  • Maintains project immutability during checking
• Describe command refactoring:
  • Replaced unwieldy switch with describeMDLCommand helper
  • Added publishedrestservice subcommand with proper auto-detect wiring
  • Fixed nanoflow grant-execute round-trip via shared helper
  • Correctly handles apostrophe escaping in menu captions
• Language-aware delete messages:
  • Associations now store delete error messages in project's default language
  • Proper read-back preserves all translations for DESCRIBE round-trips
  • Cross-module alter path correctly edits only specified language

Recommendation

Approve the PR. All changes are well-tested, address real bugs, follow project patterns, and improve robustness without introducing regressions. The minor documentation nits don't block merging.

---

Automated review via OpenRouter (Nemotron Super 120B) — workflow source