@vxil/cli 0.29.0 → 0.31.0

package/README.md

@@ -52,7 +52,7 @@ Verbs: `init templates quickstart try login link keys account logout invites mem
 - `vxil doctor` — preflight: secrets referenced-vs-stored (advisory, names only) plus a served / published / local hash verdict per function. Under `--json` stdout is one JSON document; notices go to stderr.
 - `vxil link <slug>` — reuses the key already stored for the slug on this machine; `--mint` for a fresh one, `--key` to hand one in.
 - `vxil keys mint --name <name> --scopes <a,b,c> [--env live|test] [--store]` — mint a **narrow** key for a server (scopes validated locally; `admin` refused); the key prints **once** to stdout (`--json` → `{ api_key, key_id, scopes }`) and is never stored unless `--store`. `vxil keys list` shows names, ids, scopes, created and last-used (never secrets); `vxil keys revoke <key_id> [--yes]` asks you to type the id, and refuses the key the CLI itself is using unless `--yes`. Needs a dashboard session (`vxil login`, or it prompts at a terminal; a piped / `--json` run fails with that remedy instead — pass `--email`/`--password` to script it, which never stores the session).
-- `vxil cms drop <collection> [--yes]` — remove one collection definition through the same guarded ack `push --allow-destructive` uses (rows are retained).
+- `vxil cms drop <collection> [--purge-rows] [--yes]` — remove one collection definition through the same guarded ack `push --allow-destructive` uses (rows are retained, and a re-create brings them back; `--purge-rows` hard-deletes them too, and on a collection dropped earlier deletes its retained rows).
 - `vxil members list|invite|add|rm|uninvite` and `vxil invites accept <token|url>` — the bound project's team from the terminal (your `vxil login` session): invite by e-mail with a role, add an existing account (also how you change a role), remove (typed e-mail, refuses the last owner), revoke a pending invitation, accept one.
 - `vxil projects list|create|rm` and `vxil billing status|upgrade --tier <t>` — your projects and the bound project's plan. `projects rm` deletes any project you own after you type its slug; `billing upgrade` prints the hosted checkout URL (never opens a browser) and also downgrades (`--tier free`).
 - `vxil files put <path> --user <id>`, `vxil webhooks sources add|list|rm|test`, `vxil webhooks events replay|runs`, `vxil cms bulk-rm <collection> --filter '<json>' [--dry-run]`, `vxil search sync run|reset <key> [--purge]`, `vxil users import <file>` — the operator actions where the CLI adds something a raw call cannot (bytes from disk, a print-once receiver URL, a dry run before a typed confirm, a chunked bulk). Everything else the dashboard does per feature is one `vxil api` line: `vxil api --help`.

package/dist/_vxil-feature-configs.d.ts

@@ -105,6 +105,7 @@ export declare const NotificationsConfigSchema: import("@sinclair/typebox").TObj
             html: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
             text: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         }>>>>;
+        retainSentRender: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
     }>>;
     /** in-app inbox channel (send with channel: 'inbox' | 'both') */
     inboxEnabled: import("@sinclair/typebox").TBoolean;
@@ -616,6 +617,13 @@ export declare const DeclaredSearchCollectionSchema: import("@sinclair/typebox")
     orgScoped: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>;
 export type DeclaredSearchCollection = Static<typeof DeclaredSearchCollectionSchema>;
+/** VECTOR-HYBRID-LANE-WEIGHTS: the two RRF lane weights (weighted RRF —
+ *  each lane's 1/(k+rank) is scaled by its weight). 0..100 each; a request
+ *  with both 0 is refused at query time. */
+export declare const HybridLaneWeights: import("@sinclair/typebox").TObject<{
+    vector: import("@sinclair/typebox").TNumber;
+    keyword: import("@sinclair/typebox").TNumber;
+}>;
 export declare const VectorSearchConfigSchema: import("@sinclair/typebox").TObject<{
     enabled: import("@sinclair/typebox").TBoolean;
     backend: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"lakebase">, import("@sinclair/typebox").TLiteral<"pgvector">]>;
@@ -629,10 +637,14 @@ export declare const VectorSearchConfigSchema: import("@sinclair/typebox").TObje
         maxTokens: import("@sinclair/typebox").TInteger;
         overlap: import("@sinclair/typebox").TInteger;
     }>;
-    hybrid: import("@sinclair/typebox").TObject<{
+    hybrid: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
         defaultMode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"hybrid">, import("@sinclair/typebox").TLiteral<"vector">, import("@sinclair/typebox").TLiteral<"keyword">]>;
         rrfK: import("@sinclair/typebox").TInteger;
-    }>;
+        weights: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            vector: import("@sinclair/typebox").TNumber;
+            keyword: import("@sinclair/typebox").TNumber;
+        }>>;
+    }>>;
     limits: import("@sinclair/typebox").TObject<{
         maxDocsPerCollection: import("@sinclair/typebox").TInteger;
         maxChunksPerDoc: import("@sinclair/typebox").TInteger;
@@ -673,6 +685,11 @@ export declare const DeclaredAiTemplateSchema: import("@sinclair/typebox").TObje
     user: import("@sinclair/typebox").TString;
     system: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     schema: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    /** MX-1023-MEDIA-RESOLUTION: this template's Gemini media resolution (sent
+     *  to ai-v1 as `media_resolution`). A request's media_resolution wins; absent
+     *  falls back to defaults.mediaResolution. Part of the content hash only
+     *  when set, so an existing declared template is not re-versioned. */
+    mediaResolution: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">]>>;
 }>;
 export type DeclaredAiTemplate = Static<typeof DeclaredAiTemplateSchema>;
 export declare const AiConfigSchema: import("@sinclair/typebox").TObject<{
@@ -692,6 +709,7 @@ export declare const AiConfigSchema: import("@sinclair/typebox").TObject<{
         maxTokens: import("@sinclair/typebox").TInteger;
         temperature: import("@sinclair/typebox").TNumber;
         thinkingLevel: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"minimal" | "low" | "medium" | "high">[]>>;
+        mediaResolution: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">]>>;
     }>>;
     cache: import("@sinclair/typebox").TObject<{
         ttlSeconds: import("@sinclair/typebox").TInteger;
@@ -710,6 +728,11 @@ export declare const AiConfigSchema: import("@sinclair/typebox").TObject<{
         user: import("@sinclair/typebox").TString;
         system: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         schema: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+        /** MX-1023-MEDIA-RESOLUTION: this template's Gemini media resolution (sent
+         *  to ai-v1 as `media_resolution`). A request's media_resolution wins; absent
+         *  falls back to defaults.mediaResolution. Part of the content hash only
+         *  when set, so an existing declared template is not re-versioned. */
+        mediaResolution: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">]>>;
     }>>>;
     testMarkers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>;
@@ -1025,7 +1048,14 @@ export declare function isDeclaredRetainDays(v: unknown): v is number | null | u
 export declare function retainDaysShortens(declared: number | null, remote: number | null): boolean;
 /** = cms-v1 core.ts DELETED_RETAIN_DAYS_MAX (a parity test pins the two). */
 export declare const CMS_DELETED_RETAIN_DAYS_MAX = 29;
+/** = cms-v1 core.ts DELETED_RETAIN_DAYS_DEFAULT: the platform window. Writing
+ *  it explicitly is accepted and stored as null (MX-1023-SMALL — the
+ *  documented default must never be a 422). */
+export declare const CMS_DELETED_RETAIN_DAYS_DEFAULT = 30;
 export declare function isDeclaredDeletedRetainDays(v: unknown): v is number | null | undefined;
+/** The stored form of a declared window: the explicit default (30) is null,
+ *  so a push declaring 30 against a null remote plans nothing. */
+export declare function normalizeDeletedRetainDays<T extends number | null | undefined>(v: T): T | null;
 export declare function isDeclaredOnOwnerErase(v: unknown): v is 'delete' | 'keep' | undefined;
 /** Does moving from `remote` to `declared` make an erase delete MORE (turning
  *  'delete' on)? On an existing collection that applies only under

package/dist/config.d.ts

@@ -143,7 +143,7 @@ export interface CollectionDef {
     /** Recovery window for DELETED items, in days (guide ch. 4): a soft-deleted
      *  item stays restorable this long before the nightly cleanup purges it for
      *  good. An integer 0..29 (0 = purged at the next nightly run, ≤ 24 h), or
-     *  `null` for the platform default of 30 days. ABSENT = not managed by
+     *  `null` (or `30`, stored as null) for the platform default of 30 days. ABSENT = not managed by
      *  config. Shortening it on an existing collection needs
      *  `vxil push --allow-destructive`. Carried by BOTH push paths. */
     deletedRetainDays?: number | null;

package/dist/vxil-main.js

@@ -3699,7 +3699,14 @@ var NotificationsConfigSchema = Type.Object({
           html: Type.Optional(Type.String({ maxLength: NOTIF_OVERRIDE_BODY_MAX })),
           text: Type.Optional(Type.String({ maxLength: NOTIF_OVERRIDE_BODY_MAX }))
         }))
-      ))
+      )),
+      // CVS-1022-1 (2026-10-23): keep the render of a REAL send on its delivery
+      // row for 7 days (GET /v1/notifications/deliveries/{id}, rendered_from
+      // send | send_redacted). Opt-in, no default (absent = off, manifests stay
+      // byte-identical); auth-class mail is kept WITHOUT its data; a render
+      // over 64 KiB is dropped (row kept). Inside the ONE optional templates
+      // leaf — the schema is at the 15-leaf cap.
+      retainSentRender: Type.Optional(Type.Boolean())
     },
     { default: {} }
   )),
@@ -4598,6 +4605,10 @@ var DeclaredSearchCollectionSchema = Type.Object({
   // filtered to the active org; immutable after create (inside the array leaf).
   orgScoped: Type.Optional(Type.Boolean())
 });
+var HybridLaneWeights = Type.Object({
+  vector: Type.Number({ minimum: 0, maximum: 100 }),
+  keyword: Type.Number({ minimum: 0, maximum: 100 })
+}, { additionalProperties: false });
 var VectorSearchConfigSchema = Type.Object({
   enabled: Type.Boolean({ default: true }),
   // 'auto' resolves to the default managed vector backend for the tier.
@@ -4633,16 +4644,22 @@ var VectorSearchConfigSchema = Type.Object({
     },
     { default: {} }
   ),
-  hybrid: Type.Object(
+  // The hybrid-fusion knobs — ONE optional bag (VECTOR-HYBRID-LANE-WEIGHTS
+  // folded it from 2 leaves to 1, so `weights` rides it at no leaf cost);
+  // `{ default: {} }` keeps defaultMode / rrfK filled exactly as before.
+  hybrid: Type.Optional(Type.Object(
     {
       defaultMode: Type.Union(
         [Type.Literal("hybrid"), Type.Literal("vector"), Type.Literal("keyword")],
         { default: "hybrid" }
       ),
-      rrfK: Type.Integer({ default: 60, minimum: 1, maximum: 1e3 })
+      rrfK: Type.Integer({ default: 60, minimum: 1, maximum: 1e3 }),
+      // Per-lane RRF weights for hybrid queries (absent = 1 / 1, today's
+      // fusion); a request's `weights` overrides. At least one must be > 0.
+      weights: Type.Optional(HybridLaneWeights)
     },
     { default: {} }
-  ),
+  )),
   limits: Type.Object(
     {
       maxDocsPerCollection: Type.Integer({ default: 1e5, minimum: 1 }),
@@ -4700,7 +4717,12 @@ var DeclaredAiTemplateSchema = Type.Object({
   template: Type.String({ minLength: 1, maxLength: 128, pattern: AI_TEMPLATE_NAME_PATTERN }),
   user: Type.String({ minLength: 1, maxLength: 64e3 }),
   system: Type.Optional(Type.String({ maxLength: 32e3 })),
-  schema: Type.Optional(Type.Record(Type.String(), Type.Unknown()))
+  schema: Type.Optional(Type.Record(Type.String(), Type.Unknown())),
+  /** MX-1023-MEDIA-RESOLUTION: this template's Gemini media resolution (sent
+   *  to ai-v1 as `media_resolution`). A request's media_resolution wins; absent
+   *  falls back to defaults.mediaResolution. Part of the content hash only
+   *  when set, so an existing declared template is not re-versioned. */
+  mediaResolution: Type.Optional(Type.Union([Type.Literal("low"), Type.Literal("medium"), Type.Literal("high")]))
 });
 var AiConfigSchema = Type.Object({
   enabled: Type.Boolean({ default: true }),
@@ -4750,7 +4772,11 @@ var AiConfigSchema = Type.Object({
     model: Type.String({ default: "mock-1" }),
     maxTokens: Type.Integer({ default: 1024, minimum: 1, maximum: 2e5 }),
     temperature: Type.Number({ default: 0.7, minimum: 0, maximum: 2 }),
-    thinkingLevel: Type.Optional(Type.Union(AI_THINKING_LEVELS.map((l) => Type.Literal(l))))
+    thinkingLevel: Type.Optional(Type.Union(AI_THINKING_LEVELS.map((l) => Type.Literal(l)))),
+    // MX-1023-MEDIA-RESOLUTION (2026-10-23): Gemini's per-image / per-page
+    // token budget, sent to Gemini only (ignored elsewhere). No default, so an
+    // existing manifest stays byte-identical; inside the bag, so no new leaf.
+    mediaResolution: Type.Optional(Type.Union([Type.Literal("low"), Type.Literal("medium"), Type.Literal("high")]))
   }, { default: {} })),
   cache: Type.Object({ ttlSeconds: Type.Integer({ default: 0, minimum: 0 }) }, { default: {} }),
   // 0 = off
@@ -4781,8 +4807,9 @@ var AiConfigSchema = Type.Object({
   // aiTemplateContentSha256) against the `content_sha256` GET /v1/ai/templates
   // stamps on the latest version, and POSTs a new version ONLY when the content
   // differs — so a push is idempotent and versions stay monotonic per name.
-  // Item shape mirrors ai-v1 core.ts TemplateBody exactly (`template` is the
-  // name). Stored templates the config does not declare are reported and left
+  // Item shape mirrors ai-v1 core.ts TemplateBody (`template` is the name;
+  // `mediaResolution` is sent as the body's `media_resolution`).
+  // Stored templates the config does not declare are reported and left
   // in place — RETIRED (soft: hidden from list + render, history kept) only
   // under --allow-destructive (2026-10-01). Bounded to 50 entries: the
   // manifest rides the 1 MiB config body cap. An Optional ARRAY is ONE leaf.
@@ -5412,8 +5439,12 @@ function retainDaysShortens(declared, remote) {
   return remote === null || declared < remote;
 }
 var CMS_DELETED_RETAIN_DAYS_MAX = 29;
+var CMS_DELETED_RETAIN_DAYS_DEFAULT = 30;
 function isDeclaredDeletedRetainDays(v) {
-  return v === void 0 || v === null || typeof v === "number" && Number.isInteger(v) && v >= 0 && v <= CMS_DELETED_RETAIN_DAYS_MAX;
+  return v === void 0 || v === null || typeof v === "number" && Number.isInteger(v) && v >= 0 && (v <= CMS_DELETED_RETAIN_DAYS_MAX || v === CMS_DELETED_RETAIN_DAYS_DEFAULT);
+}
+function normalizeDeletedRetainDays(v) {
+  return v === CMS_DELETED_RETAIN_DAYS_DEFAULT ? null : v;
 }
 function isDeclaredOnOwnerErase(v) {
   return v === void 0 || v === "delete" || v === "keep";
@@ -5641,9 +5672,9 @@ function lowerAllTriggerBindings(def, name) {
   return bindings;
 }
 var CONFIG_FILENAMES = ["vxil.config.ts", "vxil.config.mjs", "vxil.config.js"];
-var VXIL_CONFIG_PKG_VERSION = "0.21.0";
-var VXIL_SDK_PKG_VERSION = "0.28.0";
-var VXIL_CLI_PKG_VERSION = "0.29.0";
+var VXIL_CONFIG_PKG_VERSION = "0.23.0";
+var VXIL_SDK_PKG_VERSION = "0.30.0";
+var VXIL_CLI_PKG_VERSION = "0.31.0";
 function ensureScaffoldPackageJson(cwd, opts = {}) {
   const file = resolve(cwd, "package.json");
   const wanted = {
@@ -8544,6 +8575,7 @@ async function aiTemplateContentSha256(t) {
     return Object.fromEntries(Object.keys(o).sort().map((k) => [k, canon(o[k], depth + 1)]));
   };
   return sha256Hex(JSON.stringify({
+    ...t.mediaResolution ? { media_resolution: t.mediaResolution } : {},
     schema: canon(t.schema ?? null, 1),
     system: t.system ?? null,
     user: t.user
@@ -8989,7 +9021,7 @@ async function readOnlyPlan(api, block, allowDestructive) {
   } else {
     const hashed = await Promise.all(manifest.templates.map(async (t) => ({
       template: t.template,
-      content_sha256: await aiTemplateContentSha256({ system: t.system ?? null, user: t.user, schema: t.schema ?? null })
+      content_sha256: await aiTemplateContentSha256({ system: t.system ?? null, user: t.user, schema: t.schema ?? null, mediaResolution: t.mediaResolution ?? null })
     })));
     const plan = planAiTemplates(hashed, listOf(data2.templates));
     s.created.push(...plan.create);
@@ -9846,7 +9878,7 @@ async function planCmsSchema({ api, collections, apply, allowDestructive = false
     }
     const drd = def.deletedRetainDays;
     if (!isDeclaredDeletedRetainDays(drd)) {
-      throw new Error(`cms.collections.${name}.deletedRetainDays must be an integer 0..29 (days) or null (got ${JSON.stringify(drd)})`);
+      throw new Error(`cms.collections.${name}.deletedRetainDays must be an integer 0..29 (days), or 30 / null for the default (got ${JSON.stringify(drd)})`);
     }
     const ooe = def.onOwnerErase;
     if (!isDeclaredOnOwnerErase(ooe)) {
@@ -10089,7 +10121,7 @@ async function planCmsSchema({ api, collections, apply, allowDestructive = false
         });
       }
     }
-    const declaredWindow = def.deletedRetainDays;
+    const declaredWindow = normalizeDeletedRetainDays(def.deletedRetainDays);
     if (declaredWindow !== void 0 && declaredWindow !== rc.deletedRetainDays) {
       const fmtWin = (d) => d === null ? "30 days (default)" : `${d} days`;
       const shortens = retainDaysShortens(declaredWindow, rc.deletedRetainDays);
@@ -10195,7 +10227,8 @@ async function planCmsSchema({ api, collections, apply, allowDestructive = false
         const orgRoles = writeRolesOf(def.orgReadRoles);
         if (orgRoles.length > 0) body.org_read_roles = orgRoles;
         if (typeof def.retainDays === "number") body.retain_days = def.retainDays;
-        if (typeof def.deletedRetainDays === "number") body.deleted_retain_days = def.deletedRetainDays;
+        const createWindow = normalizeDeletedRetainDays(def.deletedRetainDays);
+        if (typeof createWindow === "number") body.deleted_retain_days = createWindow;
         if (def.onOwnerErase === "delete") body.on_owner_erase = "delete";
         if (def.actions && def.actions.length > 0) body.actions = normalizeActions(def.actions);
         const res = await api("POST", "/v1/cms/collections", body);
@@ -10280,7 +10313,7 @@ async function planCmsSchema({ api, collections, apply, allowDestructive = false
         applied++;
       } else if (c.kind === "set-deleted-retain-days" || c.kind === "set-on-owner-erase") {
         const def = collections[c.collection];
-        const body = c.kind === "set-deleted-retain-days" ? { deleted_retain_days: def.deletedRetainDays ?? null } : { on_owner_erase: def.onOwnerErase ?? "keep" };
+        const body = c.kind === "set-deleted-retain-days" ? { deleted_retain_days: normalizeDeletedRetainDays(def.deletedRetainDays) ?? null } : { on_owner_erase: def.onOwnerErase ?? "keep" };
         const res = await api("POST", `/v1/cms/collections/${encodeURIComponent(c.collection)}/fields`, body);
         if (res.status !== 200 && res.status !== 201) {
           const e = res.body.error ?? {};
@@ -10370,14 +10403,43 @@ async function dropCollection(api, collection) {
     throw new Error(`cms: drop collection ${collection} failed: ${e.code ?? res.status} ${e.message ?? ""}`);
   }
 }
-function formatCollectionDrop(collection, plan, declaredLocally) {
+async function dropCollectionPurgingRows(api, collection) {
+  let purgedRows = 0;
+  for (let round = 0; ; round++) {
+    if (round > 0) {
+      const read = await readRemote2(api);
+      if (read.unavailable) {
+        throw new Error(`cms: purge of ${collection} stopped after ${purgedRows} purged row(s): cannot read ${read.unavailable.route}`);
+      }
+      if (read.map.has(collection)) {
+        throw new Error(`cms: purge of ${collection} stopped after ${purgedRows} purged row(s): the collection was re-created meanwhile \u2014 its rows are kept`);
+      }
+    }
+    const res = await api("POST", "/v1/cms/collections", { drop_collection: collection, allow_destructive: true, purge_rows: true });
+    if (res.body.error?.code === "not_found") return { purgedRows };
+    if (res.status < 200 || res.status >= 300) {
+      const e = res.body.error ?? {};
+      throw new Error(`cms: drop collection ${collection} failed after ${purgedRows} purged row(s): ${e.code ?? res.status} ${e.message ?? ""}`);
+    }
+    const d = res.body.data ?? {};
+    const n = typeof d.purged_rows === "number" ? d.purged_rows : 0;
+    purgedRows += n;
+    if (d.purge_complete === true) return { purgedRows };
+    if (n === 0) throw new Error(`cms: purge of ${collection} made no progress after ${purgedRows} purged row(s) \u2014 re-run \`vxil cms drop ${collection} --purge-rows\``);
+  }
+}
+function formatCollectionDrop(collection, plan, declaredLocally, purgeRows = false) {
   const rows = plan.rows === null ? "an unknown number of live rows" : `${plan.rows} live row(s)`;
-  const lines = [
-    `  ! drop collection ${collection} (${plan.fields} field(s), ${rows}) \u2014 the definition is removed; stored item rows are NOT deleted (they become unreachable through the API until a collection of that name exists again)`
+  const lines = !plan.exists && purgeRows ? [`  ! collection ${collection} has no definition \u2014 its retained rows from an earlier drop (live and deleted) are HARD-DELETED; they cannot be restored`] : [
+    `  ! drop collection ${collection} (${plan.fields} field(s), ${rows}) \u2014 the definition is removed; ` + (purgeRows ? "its stored item rows (live and deleted) are HARD-DELETED with it; they cannot be restored" : "stored item rows are NOT deleted (they become unreachable through the API until a collection of that name exists again)")
   ];
   if (declaredLocally) {
-    const back = plan.rows === null ? "the retained rows" : `the ${plan.rows} retained row(s)`;
-    lines.push(`  \u26A0 '${collection}' is still declared in vxil.config.ts \u2014 the next \`vxil push\` re-creates it and ${back} come back with it; remove it from the config too`);
+    if (purgeRows) {
+      lines.push(`  \u26A0 '${collection}' is still declared in vxil.config.ts \u2014 the next \`vxil push\` re-creates it empty; remove it from the config too`);
+    } else {
+      const back = plan.rows === null ? "the retained rows" : `the ${plan.rows} retained row(s)`;
+      lines.push(`  \u26A0 '${collection}' is still declared in vxil.config.ts \u2014 the next \`vxil push\` re-creates it and ${back} come back with it; remove it from the config too`);
+    }
   }
   return lines.join("\n");
 }
@@ -14852,6 +14914,13 @@ var TOOLS = [
         mode: { type: "string", enum: ["hybrid", "vector", "keyword"], default: "hybrid" },
         filter: { type: "object", additionalProperties: true, description: 'Metadata filter, keys ANDed: equality {"user_id":"u_42"} or any-of {"folder":{"$in":["a","b"]}} (1\u201350 values, \u22644 $in keys). null / arrays / other operators are refused 422.' },
         rerank: { type: "boolean", description: "Apply the configured BYO reranker (config rerank block) to the fused results before top-k. Fail-open: a provider fault returns the RRF order with reranked:false." },
+        weights: {
+          type: "object",
+          additionalProperties: false,
+          required: ["vector", "keyword"],
+          properties: { vector: { type: "number", minimum: 0, maximum: 100 }, keyword: { type: "number", minimum: 0, maximum: 100 } },
+          description: `Hybrid mode only: per-lane RRF weights, e.g. {"vector":0.8,"keyword":0.2} to favour meaning over exact words. Not both 0. Default: the config's hybrid.weights, else equal.`
+        },
         org_id: { type: "string", description: "Workspace-scoped (org_scoped) collections only: the org to search. Required with a server key (422 org_id_required without); an end-user session always searches its active workspace. Refused 422 on a collection that is not org-scoped." }
       },
       required: ["collection", "query"]
@@ -14862,7 +14931,7 @@ var TOOLS = [
   {
     name: "ai_generate",
     feature: "ai",
-    description: "Generate a completion from a prompt or a named tenant template. Pass either prompt (raw text) or template + input (vars for a stored template). Defaults to the tenant-configured provider/model; override with provider/model. response_schema makes the output schema-guaranteed JSON (parsed into data.output). Returns the synchronous completion (set stream only via the REST API).",
+    description: "Generate a completion from a prompt or a named tenant template. Pass either prompt (raw text) or template + input (vars for a stored template). Defaults to the tenant-configured provider/model; override with provider/model. response_schema makes the output schema-guaranteed JSON (parsed into data.output). Returns the synchronous completion by default (set stream only via the REST API); mode:'job' instead returns a 202 handle (generation_id, run_id) \u2014 read the answer with ai_generation_get and wait:25.",
     inputSchema: {
       type: "object",
       properties: {
@@ -14878,6 +14947,22 @@ var TOOLS = [
           enum: ["minimal", "low", "medium", "high"],
           description: "Gemini thinking depth (ignored by other providers). Omitted: the tenant's defaults.thinkingLevel, then the model default. 'minimal' on a model that rejects it is a 422 thinking_level_unsupported. Thinking tokens bill as output."
         },
+        media_resolution: {
+          type: "string",
+          enum: ["low", "medium", "high"],
+          description: "Gemini token budget per image or PDF page (ignored by other providers): lower is faster and bills fewer input tokens. Omitted: the stored template's own level (when template is set), then the tenant's defaults.mediaResolution, then the model default."
+        },
+        mode: {
+          type: "string",
+          enum: ["sync", "job"],
+          description: "'sync' (default) answers with the completion. 'job' routes the generation through a jobs run and answers 202 with generation_id + run_id; read it with ai_generation_get (wait:25)."
+        },
+        deadline_ms: {
+          type: "integer",
+          minimum: 1e3,
+          maximum: 17e3,
+          description: "mode:'job' only (422 otherwise): bound the run's first provider call at this many ms so it can start without the queue hop. A first call that passes it is retried on the queue with the normal job-lane bound."
+        },
         json_mode: { type: "boolean", description: "Constrain the output to JSON (no schema \u2014 use response_schema for a guaranteed shape)." },
         response_schema: {
           type: "object",
@@ -15168,14 +15253,15 @@ var TOOLS = [
       properties: {
         since: { type: "string", description: "ISO-8601 lower bound on created_at (inclusive; no zone = UTC). Tail with an overlap (last stored created_at minus a minute) and dedupe on ledger_entry_id." },
         cursor: { type: "string", description: "Opaque keyset cursor from a prior page (next_cursor)." },
-        user_id: { type: "string", maxLength: 512, description: "Only this end user's rows." },
+        user_id: { type: "string", maxLength: 512, description: "Only this end user's rows. Give this OR org_id." },
+        org_id: { type: "string", maxLength: 64, description: "WORKSPACE BILLING: only this workspace's rows (an orgs id; the same as user_id 'org:<id>'). Give this OR user_id." },
         credit_type: { type: "string", maxLength: 200, description: "Only rows of this credit type, e.g. 'scans'." },
         limit: { type: "number", default: 100, description: "Page size, clamped 1..500." }
       }
     },
     method: "GET",
     path: "/v1/payments/credits/ledger",
-    queryArgs: ["since", "cursor", "user_id", "credit_type", "limit"]
+    queryArgs: ["since", "cursor", "user_id", "org_id", "credit_type", "limit"]
   },
   {
     name: "payments_list_refunds",
@@ -16882,7 +16968,7 @@ var VERB_USAGE = {
   import: "usage: vxil import <feature> --file <bundle.json|export.ndjson> [--mode merge|replace] [--allow-split-links]",
   migrate: "usage: vxil migrate plan|schema|data|verify|payments \u2026  (run `vxil migrate --help`)",
   functions: "usage: vxil functions new <name> [--force]|deploy [<name>] [--force]|list|delete|enable|disable [--yes]|invoke ['<json>' | --data '<json>'] [--async]|logs [--tail]|dev <name> [--port <n>] [--trigger <lane>] [--event <file.json>]",
-  cms: "usage: vxil cms status|pull|reindex <collection> [--field <field>]|drop <collection> [--yes]|bulk-rm <collection> --filter '<json>' [--limit <1..100>] [--dry-run] [--yes]",
+  cms: "usage: vxil cms status|pull|reindex <collection> [--field <field>]|drop <collection> [--purge-rows] [--yes]|bulk-rm <collection> --filter '<json>' [--limit <1..100>] [--dry-run] [--yes]",
   payments: "usage: vxil payments simulate --scenario <refund-pair|cross-platform-unlock|renewal|expiry|past-due-grace|transfer> --user <id> [--tier <t>] [--dev]  \u2014 mock/dev projects only",
   dev: "usage: vxil dev up [--ttl <h>] [--new] [--name <n>] [--reuse-slug <slug>] [--email <e> --password <p>] [--invite <code>] | down [--yes] | seed | reset | branch [<name>] [--ttl <h=24>] [--no-env] [--print] | --list | --rm <name> [--yes] | --watch [--target <name>]  \u2014 dev up signs in with --email/--password (or VXIL_DEV_EMAIL/VXIL_DEV_PASSWORD, + VXIL_DEV_INVITE), else your `vxil login` session, else a prompt",
   config: "usage: vxil config get <feature> \xB7 vxil config draft show|save [--file <f>]|publish|discard <feature> \xB7 vxil config draft duplicate <feature> --from <version>",
@@ -17002,6 +17088,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "check",
   "all-projects",
   "allow-destructive",
+  "purge-rows",
   "exit-code",
   "show-runs",
   "skip-functions",
@@ -26084,25 +26171,35 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
       const [sub] = positional(0);
       if (sub === "drop") {
         const [collection] = positional(1);
-        if (!collection) fail("usage: vxil cms drop <collection> [--yes]");
+        if (!collection) fail("usage: vxil cms drop <collection> [--purge-rows] [--yes]");
+        const purgeRows = hasFlag("purge-rows");
         const { api: api2, target } = requireApi(selector(), { write: `cms drop ${collection}` });
         const plan = await planCollectionDrop(api2, collection);
         if (plan.remoteUnavailable) {
           fail(`cannot read ${plan.remoteUnavailable.route} (${plan.remoteUnavailable.code ?? plan.remoteUnavailable.status}) \u2014 refusing to drop against an unread target`);
         }
-        if (!plan.exists) fail(`collection '${collection}' does not exist on tenant '${target.tenantSlug ?? "(env key)"}' \u2014 nothing to drop`);
+        if (!plan.exists && !purgeRows) fail(`collection '${collection}' does not exist on tenant '${target.tenantSlug ?? "(env key)"}' \u2014 nothing to drop (\`--purge-rows\` deletes the rows an earlier drop retained)`);
         let declaredLocally = false;
         try {
           const cfg = await loadVxilConfig();
           declaredLocally = Object.prototype.hasOwnProperty.call(cfg.cms?.collections ?? {}, collection);
         } catch {
         }
-        console.error(formatCollectionDrop(collection, plan, declaredLocally));
+        console.error(formatCollectionDrop(collection, plan, declaredLocally, purgeRows));
         if (!hasFlag("yes")) {
           if (!process.stdin.isTTY) fail("cms drop is destructive \u2014 pass --yes to confirm in a non-interactive run");
-          const ans = await prompt(`drop collection '${collection}'? type the collection name to confirm: `);
+          const ans = await prompt(`${purgeRows ? "drop collection and hard-delete the rows of" : "drop collection"} '${collection}'? type the collection name to confirm: `);
           if (ans !== collection) fail("confirmation did not match \u2014 aborted.");
         }
+        if (purgeRows) {
+          const { purgedRows } = await dropCollectionPurgingRows(api2, collection);
+          if (jsonOut) {
+            console.log(JSON.stringify({ ok: true, collection, dropped: plan.exists, fields: plan.fields, purged_rows: purgedRows, declared_locally: declaredLocally }));
+          } else {
+            console.log(`\u2713 ${plan.exists ? `dropped collection ${collection} (${plan.fields} field(s)) and ` : `${collection}: `}hard-deleted ${purgedRows} stored row(s)`);
+          }
+          break;
+        }
         await dropCollection(api2, collection);
         if (jsonOut) {
           console.log(JSON.stringify({ ok: true, collection, fields: plan.fields, rows: plan.rows, declared_locally: declaredLocally }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vxil/cli",
-  "version": "0.29.0",
+  "version": "0.31.0",
   "private": false,
   "description": "The vxil CLI — init, quickstart, push, gen, secrets, keys, migrate, doctor, diff, functions, payments; installs the `vxil` command (npm i -g @vxil/cli).",
   "license": "MIT",
@@ -45,8 +45,8 @@
     }
   },
   "devDependencies": {
-    "@vxil/config": "0.21.0",
-    "@vxil/feature-configs": "0.19.0",
+    "@vxil/config": "0.23.0",
+    "@vxil/feature-configs": "0.21.0",
     "@vxil/runtime": "0.0.1",
     "@vxil/types": "0.0.1",
     "miniflare": "^4.20260730.0"