Merge remote-tracking branch 'origin/main' into submit/audit-all-fixes-staging

# Conflicts:
#	.claude/skills/mendix/write-microflows.md
#	cmd/mxcli/lsp_completions_gen.go
#	docs/01-project/MDL_QUICK_REFERENCE.md
#	docs/11-proposals/PROPOSAL_microflow_call_web_service_statement.md
#	docs/11-proposals/PROPOSAL_microflow_download_file_statement.md
#	docs/11-proposals/README.md
#	mdl/ast/ast_expression.go
#	mdl/ast/ast_microflow.go
#	mdl/executor/bugfix_regression_test.go
#	mdl/executor/cmd_microflows_anchor_if_test.go
#	mdl/executor/cmd_microflows_builder.go
#	mdl/executor/cmd_microflows_builder_actions.go
#	mdl/executor/cmd_microflows_builder_annotations.go
#	mdl/executor/cmd_microflows_builder_annotations_test.go
#	mdl/executor/cmd_microflows_builder_calls.go
#	mdl/executor/cmd_microflows_builder_control.go
#	mdl/executor/cmd_microflows_builder_flows.go
#	mdl/executor/cmd_microflows_builder_graph.go
#	mdl/executor/cmd_microflows_builder_terminal_test.go
#	mdl/executor/cmd_microflows_builder_validate.go
#	mdl/executor/cmd_microflows_create.go
#	mdl/executor/cmd_microflows_format_action.go
#	mdl/executor/cmd_microflows_format_action_test.go
#	mdl/executor/cmd_microflows_show.go
#	mdl/executor/cmd_microflows_show_helpers.go
#	mdl/executor/cmd_microflows_split_incoming_anchor_test.go
#	mdl/executor/cmd_microflows_traverse_test.go
#	mdl/executor/cmd_microflows_unpaired_merge_test.go
#	mdl/executor/validate.go
#	mdl/executor/validate_microflow.go
#	mdl/grammar/MDLLexer.g4
#	mdl/grammar/MDLParser.g4
#	mdl/grammar/parser/MDLLexer.interp
#	mdl/grammar/parser/MDLLexer.tokens
#	mdl/grammar/parser/MDLParser.interp
#	mdl/grammar/parser/MDLParser.tokens
#	mdl/grammar/parser/mdl_lexer.go
#	mdl/grammar/parser/mdl_parser.go
#	mdl/grammar/parser/mdlparser_base_listener.go
#	mdl/grammar/parser/mdlparser_listener.go
#	mdl/visitor/visitor_microflow_actions.go
#	mdl/visitor/visitor_microflow_statements.go
#	mdl/visitor/visitor_test.go
#	mdl/visitor/visitor_webservice_test.go
#	sdk/microflows/microflows_actions.go
#	sdk/mpr/microflow_call_writer_test.go
#	sdk/mpr/parser_microflow.go
#	sdk/mpr/parser_microflow_actions.go
#	sdk/mpr/parser_microflow_test.go
#	sdk/mpr/showpage_roundtrip_test.go
#	sdk/mpr/writer_microflow_actions.go

Author: hjothamendix

.claude/skills/debug-bson.md

@@ -9,6 +9,7 @@ Use when encountering:
 - **Studio Pro crash on open** with `RevStatusCache.CreateDeleteStatusItem` in stack trace
 - **`mx diff` crash** with "Sequence contains no matching element"
 - **CE1613** "The selected attribute/enumeration no longer exists"
+- **CE0115** "The arguments that are passed to page X do not match the expected parameters"
 - **CE0463** "The definition of this widget has changed"
 - **CE0642** "Property X is required"
 - **CE0091** validation errors on widget properties
@@ -306,6 +307,51 @@ for t, props in crash_props.items():
 
 **Fix**: Extract a fresh template from a project with `mx update-widgets` applied. The Type section must match the installed widget version exactly.
 
+### CE0115: Arguments Passed to Page Do Not Match Expected Parameters
+
+**Symptom**: `mx check` reports `[CE0115] "The arguments that are passed to page 'X' do not match the expected parameters."` on an action button that uses `show_page TargetPage (Param: $currentObject)`.
+
+**Root cause**: The BSON array type indicator rule. Every Mendix BSON array must begin with an `int32` **type indicator** of `2` or `3`. This indicator is skipped by `extractBsonArray` and by Studio Pro's reader. Writing `int32(len(items))` as the first element instead produces an invalid indicator when `len ≠ 2` and `len ≠ 3` — Studio Pro cannot recognise the array and reads 0 parameter mappings.
+
+**Type indicator values**:
+| First element | Meaning |
+|---------------|---------|
+| `int32(3)` | Initialized array — used for `Items`, `DesignProperties`, and most non-empty lists |
+| `int32(2)` | Initialized empty array — used for `ParameterMappings`, `PagesForSpecializations`, `Parameters` |
+| Any other value | **Invalid** — Studio Pro ignores the entire array |
+
+**How Studio Pro stores page parameter mappings**: Studio Pro does **not** store explicit `Forms$PageParameterMapping` objects in BSON. It always writes `ParameterMappings: [2]` (type indicator only, no inline objects) and infers `$currentObject` at runtime from the enclosing widget context — DataGrid row, DataView datasource, etc. No matter what the MDL source specifies for `(Param: $currentObject)`, the correct serialization is always the empty `[2]` array.
+
+**Correct writer pattern for `Forms$FormAction`**:
+```go
+formSettings := bson.D{
+    {Key: "$ID",               Value: idToBsonBinary(generateUUID())},
+    {Key: "$Type",             Value: "Forms$FormSettings"},
+    {Key: "Form",              Value: pageName},          // BY_NAME_REFERENCE
+    {Key: "ParameterMappings", Value: bson.A{int32(2)}}, // always empty; runtime infers mapping
+    {Key: "TitleOverride",     Value: nil},
+}
+return bson.D{
+    {Key: "$ID",                    Value: idToBsonBinary(id)},
+    {Key: "$Type",                  Value: "Forms$FormAction"},
+    {Key: "DisabledDuringExecution", Value: true},
+    {Key: "FormSettings",           Value: formSettings},
+    {Key: "NumberOfPagesToClose2",  Value: ""},
+    {Key: "PagesForSpecializations", Value: bson.A{int32(2)}},
+}
+```
+
+**What NOT to do**:
+```go
+// WRONG: produces [1, {mapping}] — invalid type indicator 1
+paramMappings := bson.A{int32(len(a.ParameterMappings))}
+for _, pm := range a.ParameterMappings {
+    paramMappings = append(paramMappings, bson.D{...Forms$PageParameterMapping...})
+}
+```
+
+**Diagnostic check**: Inspect the raw `ParameterMappings` array in a Python BSON dump. If it shows `[1, {...}]` instead of `[2]`, the type indicator is wrong. Studio Pro-generated pages always show `[2]`.
+
 ## Key Principles
 
 1. **Template cloning > building from scratch**: Clone properties from a known-good template Object, then modify only specific values. Building from scratch produces subtly different structures.

.claude/skills/mendix/README.md

@@ -19,6 +19,7 @@ Detailed syntax for each MDL document type:
 |-------|---------|----------|
 | [mdl-entities.md](mdl-entities.md) | Entity, attribute, association syntax | Creating domain models |
 | [write-microflows.md](write-microflows.md) | Microflow syntax reference | Writing microflow logic |
+| [write-nanoflows.md](write-nanoflows.md) | Nanoflow syntax reference | Writing client-side nanoflow logic |
 | [write-oql-queries.md](write-oql-queries.md) | OQL query syntax | Creating VIEW entities |
 | [create-page.md](create-page.md) | Page and widget syntax | Creating pages |
 | [fragments.md](fragments.md) | Fragment (reusable widget group) syntax | Reusing widget patterns across pages |

.claude/skills/mendix/create-page.md

@@ -194,6 +194,8 @@ actionbutton widgetName (caption: 'Caption', action: ACTION_TYPE [, buttonstyle:
 - `action: delete` - Delete object
 - `action: microflow Module.MicroflowName` - Call microflow
 - `action: microflow Module.MicroflowName(Param: $value)` - Call microflow with parameters
+- `action: nanoflow Module.NanoflowName` - Call nanoflow (client-side)
+- `action: nanoflow Module.NanoflowName(Param: $value)` - Call nanoflow with parameters
 - `action: show_page Module.PageName` - Navigate to page
 - `action: show_page Module.PageName(Param: $value)` - Navigate with parameters
 - `action: show_page Module.PageName($Param = $value)` - Also accepted (microflow-style)
@@ -341,6 +343,7 @@ column colActions (caption: 'Actions') {
 | `datasource: database from Module.Entity` | Direct database query |
 | `datasource: $Variable` | Variable bound (requires DATAVIEW parent with entity) |
 | `datasource: microflow Module.GetData()` | Microflow datasource |
+| `datasource: nanoflow Module.GetData()` | Nanoflow datasource (client-side, no server roundtrip) |
 | `datasource: selection widgetName` | Listen to selection from another widget |
 | `datasource: association path` | Retrieve by association from context (ByAssociation) |
 | `datasource: $currentObject/Module.Assoc` | Sugar for `association` — same semantics, reads more naturally |

.claude/skills/mendix/java-actions.md

@@ -123,7 +123,7 @@ public IMendixObject executeAction() throws Exception
 | `Core.delete(context, object)` | Delete object |
 | `Core.rollback(context, object)` | Discard uncommitted changes |
 | `Core.retrieveId(context, id)` | Retrieve by GUID |
-| `Core.retrieveXPathQuery(context, xpath)` | Query with XPath |
+| `Core.createXPathQuery(xpath).execute(context)` | Query with XPath |
 | `Core.microflowCall(name).execute(context)` | Call microflow |
 
 ### Reading and Writing Attributes
@@ -146,8 +146,8 @@ order.setValue(context, "ProcessedDate", new java.util.Date());
 
 ```java
 // set association (reference)
-IMendixObject customer = Core.retrieveXPathQuery(context,
-    "//Sales.Customer[CustomerCode = 'CUST001']").get(0);
+IMendixObject customer = Core.createXPathQuery("//Sales.Customer[CustomerCode = 'CUST001']")
+    .execute(context).get(0);
 order.setValue(context, "Sales.Order_Customer", customer.getId());
 
 // get associated object
@@ -162,8 +162,8 @@ if (customerId != null) {
 
 ```java
 // retrieve list
-list<IMendixObject> orders = Core.retrieveXPathQuery(context,
-    "//Sales.Order[status = 'Pending']");
+list<IMendixObject> orders = Core.createXPathQuery("//Sales.Order[status = 'Pending']")
+    .execute(context);
 
 // Process list
 java.math.BigDecimal total = java.math.BigDecimal.ZERO;
@@ -1068,7 +1068,7 @@ int offset = 0;
 int batchSize = 1000;
 list<IMendixObject> batch;
 do {
-    batch = Core.retrieveXPathQuery(context, xpath, batchSize, offset, null);
+    batch = Core.createXPathQuery(xpath).setAmount(batchSize).setOffset(offset).execute(context);
     // Process batch
     offset += batchSize;
 } while (batch.size() == batchSize);
@@ -1187,7 +1187,7 @@ Core.commit(context, obj);
 Core.delete(context, obj);
 
 // query
-list<IMendixObject> results = Core.retrieveXPathQuery(context, "//Module.Entity[attr = 'value']");
+list<IMendixObject> results = Core.createXPathQuery("//Module.Entity[attr = 'value']").execute(context);
 
 // log
 Core.getLogger("ModuleName").info("message");

.claude/skills/mendix/manage-security.md

@@ -109,6 +109,21 @@ grant execute on microflow MyModule.ACT_Customer_Create to MyModule.User, MyModu
 revoke execute on microflow MyModule.ACT_Customer_Create from MyModule.User;
 ```
 
+### Nanoflow Access
+
+```sql
+-- Grant execute access (same syntax as microflows)
+grant execute on nanoflow MyModule.NF_ValidateCart to MyModule.User, MyModule.Admin;
+
+-- Revoke from specific roles
+revoke execute on nanoflow MyModule.NF_ValidateCart from MyModule.User;
+
+-- Show current access
+show access on nanoflow MyModule.NF_ValidateCart;
+```
+
+> **Note:** Security roles persist through DROP+CREATE of the same nanoflow name within a session (by design, for refactor-in-place workflows).
+
 ### Page Access
 
 ```sql

.claude/skills/mendix/validation-microflows.md

@@ -10,6 +10,8 @@ Use this skill when:
 - Building conditional validation chains
 - Creating action microflows that call validation microflows
 
+> **Nanoflow validation:** The same patterns apply to nanoflows (`create nanoflow` instead of `create microflow`). Use nanoflows for client-side validation when server roundtrips are unnecessary — validation feedback renders instantly without a network call.
+
 ## The Validation Pattern
 
 Mendix validation follows a two-microflow pattern: