[ako]

Syncs ako/mxcli:main into upstream: 6 commits from fork PRs ako#1843, ako#1844, ako#1845, ako#1849 and ako#1852.

Fixes #1455, #1539 and #1556.

Lint

• New --baseline mode for mature apps (lint: baseline / new-findings-only mode for mature apps #1455). On a mature app, lint's totals are the backlog, not the change just made.
  • mxcli lint --baseline <file> --update-baseline records the current findings.
  • mxcli lint --baseline <file> then reports only the new ones. Its exit code follows them alone, and stderr gets an "N new, M already known, K fixed" summary.
  • A finding is keyed on its rule and document.
• Permission rows name the access rule they come from (lint: permission rows carry no access-rule id #1539). permissions() and permissions_for() returned one row per module role and right, with no id of the access rule behind it. So a rule couldn't count an entity's access rules or list one rule's roles exactly. Entity and member rows now carry access_rule_id and access_rule_index.
• The Starlark API exposes catalog and settings data that guideline rules need (lint: Starlark API lacks data that catalog tables have (view entity OQL, enumeration values, excluded flag, constant values) #1556):
  • microflow excluded and apply_entity_access;
  • enumeration values, each with qualified name, caption and ordinal;
  • constant_values(), the run-configuration constant values;
  • project_settings(), covering default language, OQL and Java version, hash algorithm, time zone, rounding, decimal scale, optimistic locking, foreign keys and web client.
• Catalog schema bump: the catalog schema goes to 30, so a catalog cached by an older build is rebuilt instead of answering with nothing.

Faster describe and catalog refresh

• describe decodes only the documents it prints. It found its document, and the snippets, pages, layouts and flows it names, by listing every document of the type, and each listing decoded every one.
  • Lookups now go through headers and decode one unit by ID.
  • On a 4,753-unit app, a first refresh catalog full source took 19 s and 38 s CPU, down from 33 s and 145 s, with identical text for all 3,718 documents.
• editorConfig visibility rules are read in linear time. The extractor's end-anchored regexps grew with the square of the file: 0.5 s for the 400 KB editorConfig in Maps, on every refresh. Suffix scans give byte-identical rules on 256 widgets across five projects.
• Colliding widget names are kept apart. KeyboardShortcut.mpk and itvisors.KeyboardShortcut.mpk both derived KEYBOARDSHORTCUT and overwrote one definition in turn, so one widget had none. Every refresh then reported "2 refreshed".
  • Names are now assigned over the whole project.
  • The catalog pairs definitions by widget ID.
  • An unchanged widgets/ folder is skipped instead of re-reading every .mpk