@vxil/cli 0.30.0 → 0.31.0

package/README.md

@@ -52,7 +52,7 @@ Verbs: `init templates quickstart try login link keys account logout invites mem
 - `vxil doctor` — preflight: secrets referenced-vs-stored (advisory, names only) plus a served / published / local hash verdict per function. Under `--json` stdout is one JSON document; notices go to stderr.
 - `vxil link <slug>` — reuses the key already stored for the slug on this machine; `--mint` for a fresh one, `--key` to hand one in.
 - `vxil keys mint --name <name> --scopes <a,b,c> [--env live|test] [--store]` — mint a **narrow** key for a server (scopes validated locally; `admin` refused); the key prints **once** to stdout (`--json` → `{ api_key, key_id, scopes }`) and is never stored unless `--store`. `vxil keys list` shows names, ids, scopes, created and last-used (never secrets); `vxil keys revoke <key_id> [--yes]` asks you to type the id, and refuses the key the CLI itself is using unless `--yes`. Needs a dashboard session (`vxil login`, or it prompts at a terminal; a piped / `--json` run fails with that remedy instead — pass `--email`/`--password` to script it, which never stores the session).
-- `vxil cms drop <collection> [--yes]` — remove one collection definition through the same guarded ack `push --allow-destructive` uses (rows are retained).
+- `vxil cms drop <collection> [--purge-rows] [--yes]` — remove one collection definition through the same guarded ack `push --allow-destructive` uses (rows are retained, and a re-create brings them back; `--purge-rows` hard-deletes them too, and on a collection dropped earlier deletes its retained rows).
 - `vxil members list|invite|add|rm|uninvite` and `vxil invites accept <token|url>` — the bound project's team from the terminal (your `vxil login` session): invite by e-mail with a role, add an existing account (also how you change a role), remove (typed e-mail, refuses the last owner), revoke a pending invitation, accept one.
 - `vxil projects list|create|rm` and `vxil billing status|upgrade --tier <t>` — your projects and the bound project's plan. `projects rm` deletes any project you own after you type its slug; `billing upgrade` prints the hosted checkout URL (never opens a browser) and also downgrades (`--tier free`).
 - `vxil files put <path> --user <id>`, `vxil webhooks sources add|list|rm|test`, `vxil webhooks events replay|runs`, `vxil cms bulk-rm <collection> --filter '<json>' [--dry-run]`, `vxil search sync run|reset <key> [--purge]`, `vxil users import <file>` — the operator actions where the CLI adds something a raw call cannot (bytes from disk, a print-once receiver URL, a dry run before a typed confirm, a chunked bulk). Everything else the dashboard does per feature is one `vxil api` line: `vxil api --help`.

package/dist/_vxil-feature-configs.d.ts

@@ -685,6 +685,11 @@ export declare const DeclaredAiTemplateSchema: import("@sinclair/typebox").TObje
     user: import("@sinclair/typebox").TString;
     system: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     schema: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+    /** MX-1023-MEDIA-RESOLUTION: this template's Gemini media resolution (sent
+     *  to ai-v1 as `media_resolution`). A request's media_resolution wins; absent
+     *  falls back to defaults.mediaResolution. Part of the content hash only
+     *  when set, so an existing declared template is not re-versioned. */
+    mediaResolution: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">]>>;
 }>;
 export type DeclaredAiTemplate = Static<typeof DeclaredAiTemplateSchema>;
 export declare const AiConfigSchema: import("@sinclair/typebox").TObject<{
@@ -723,6 +728,11 @@ export declare const AiConfigSchema: import("@sinclair/typebox").TObject<{
         user: import("@sinclair/typebox").TString;
         system: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         schema: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
+        /** MX-1023-MEDIA-RESOLUTION: this template's Gemini media resolution (sent
+         *  to ai-v1 as `media_resolution`). A request's media_resolution wins; absent
+         *  falls back to defaults.mediaResolution. Part of the content hash only
+         *  when set, so an existing declared template is not re-versioned. */
+        mediaResolution: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">]>>;
     }>>>;
     testMarkers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>;

package/dist/vxil-main.js

@@ -4717,7 +4717,12 @@ var DeclaredAiTemplateSchema = Type.Object({
   template: Type.String({ minLength: 1, maxLength: 128, pattern: AI_TEMPLATE_NAME_PATTERN }),
   user: Type.String({ minLength: 1, maxLength: 64e3 }),
   system: Type.Optional(Type.String({ maxLength: 32e3 })),
-  schema: Type.Optional(Type.Record(Type.String(), Type.Unknown()))
+  schema: Type.Optional(Type.Record(Type.String(), Type.Unknown())),
+  /** MX-1023-MEDIA-RESOLUTION: this template's Gemini media resolution (sent
+   *  to ai-v1 as `media_resolution`). A request's media_resolution wins; absent
+   *  falls back to defaults.mediaResolution. Part of the content hash only
+   *  when set, so an existing declared template is not re-versioned. */
+  mediaResolution: Type.Optional(Type.Union([Type.Literal("low"), Type.Literal("medium"), Type.Literal("high")]))
 });
 var AiConfigSchema = Type.Object({
   enabled: Type.Boolean({ default: true }),
@@ -4802,8 +4807,9 @@ var AiConfigSchema = Type.Object({
   // aiTemplateContentSha256) against the `content_sha256` GET /v1/ai/templates
   // stamps on the latest version, and POSTs a new version ONLY when the content
   // differs — so a push is idempotent and versions stay monotonic per name.
-  // Item shape mirrors ai-v1 core.ts TemplateBody exactly (`template` is the
-  // name). Stored templates the config does not declare are reported and left
+  // Item shape mirrors ai-v1 core.ts TemplateBody (`template` is the name;
+  // `mediaResolution` is sent as the body's `media_resolution`).
+  // Stored templates the config does not declare are reported and left
   // in place — RETIRED (soft: hidden from list + render, history kept) only
   // under --allow-destructive (2026-10-01). Bounded to 50 entries: the
   // manifest rides the 1 MiB config body cap. An Optional ARRAY is ONE leaf.
@@ -5666,9 +5672,9 @@ function lowerAllTriggerBindings(def, name) {
   return bindings;
 }
 var CONFIG_FILENAMES = ["vxil.config.ts", "vxil.config.mjs", "vxil.config.js"];
-var VXIL_CONFIG_PKG_VERSION = "0.22.0";
-var VXIL_SDK_PKG_VERSION = "0.29.0";
-var VXIL_CLI_PKG_VERSION = "0.30.0";
+var VXIL_CONFIG_PKG_VERSION = "0.23.0";
+var VXIL_SDK_PKG_VERSION = "0.30.0";
+var VXIL_CLI_PKG_VERSION = "0.31.0";
 function ensureScaffoldPackageJson(cwd, opts = {}) {
   const file = resolve(cwd, "package.json");
   const wanted = {
@@ -8569,6 +8575,7 @@ async function aiTemplateContentSha256(t) {
     return Object.fromEntries(Object.keys(o).sort().map((k) => [k, canon(o[k], depth + 1)]));
   };
   return sha256Hex(JSON.stringify({
+    ...t.mediaResolution ? { media_resolution: t.mediaResolution } : {},
     schema: canon(t.schema ?? null, 1),
     system: t.system ?? null,
     user: t.user
@@ -9014,7 +9021,7 @@ async function readOnlyPlan(api, block, allowDestructive) {
   } else {
     const hashed = await Promise.all(manifest.templates.map(async (t) => ({
       template: t.template,
-      content_sha256: await aiTemplateContentSha256({ system: t.system ?? null, user: t.user, schema: t.schema ?? null })
+      content_sha256: await aiTemplateContentSha256({ system: t.system ?? null, user: t.user, schema: t.schema ?? null, mediaResolution: t.mediaResolution ?? null })
     })));
     const plan = planAiTemplates(hashed, listOf(data2.templates));
     s.created.push(...plan.create);
@@ -10396,14 +10403,43 @@ async function dropCollection(api, collection) {
     throw new Error(`cms: drop collection ${collection} failed: ${e.code ?? res.status} ${e.message ?? ""}`);
   }
 }
-function formatCollectionDrop(collection, plan, declaredLocally) {
+async function dropCollectionPurgingRows(api, collection) {
+  let purgedRows = 0;
+  for (let round = 0; ; round++) {
+    if (round > 0) {
+      const read = await readRemote2(api);
+      if (read.unavailable) {
+        throw new Error(`cms: purge of ${collection} stopped after ${purgedRows} purged row(s): cannot read ${read.unavailable.route}`);
+      }
+      if (read.map.has(collection)) {
+        throw new Error(`cms: purge of ${collection} stopped after ${purgedRows} purged row(s): the collection was re-created meanwhile \u2014 its rows are kept`);
+      }
+    }
+    const res = await api("POST", "/v1/cms/collections", { drop_collection: collection, allow_destructive: true, purge_rows: true });
+    if (res.body.error?.code === "not_found") return { purgedRows };
+    if (res.status < 200 || res.status >= 300) {
+      const e = res.body.error ?? {};
+      throw new Error(`cms: drop collection ${collection} failed after ${purgedRows} purged row(s): ${e.code ?? res.status} ${e.message ?? ""}`);
+    }
+    const d = res.body.data ?? {};
+    const n = typeof d.purged_rows === "number" ? d.purged_rows : 0;
+    purgedRows += n;
+    if (d.purge_complete === true) return { purgedRows };
+    if (n === 0) throw new Error(`cms: purge of ${collection} made no progress after ${purgedRows} purged row(s) \u2014 re-run \`vxil cms drop ${collection} --purge-rows\``);
+  }
+}
+function formatCollectionDrop(collection, plan, declaredLocally, purgeRows = false) {
   const rows = plan.rows === null ? "an unknown number of live rows" : `${plan.rows} live row(s)`;
-  const lines = [
-    `  ! drop collection ${collection} (${plan.fields} field(s), ${rows}) \u2014 the definition is removed; stored item rows are NOT deleted (they become unreachable through the API until a collection of that name exists again)`
+  const lines = !plan.exists && purgeRows ? [`  ! collection ${collection} has no definition \u2014 its retained rows from an earlier drop (live and deleted) are HARD-DELETED; they cannot be restored`] : [
+    `  ! drop collection ${collection} (${plan.fields} field(s), ${rows}) \u2014 the definition is removed; ` + (purgeRows ? "its stored item rows (live and deleted) are HARD-DELETED with it; they cannot be restored" : "stored item rows are NOT deleted (they become unreachable through the API until a collection of that name exists again)")
   ];
   if (declaredLocally) {
-    const back = plan.rows === null ? "the retained rows" : `the ${plan.rows} retained row(s)`;
-    lines.push(`  \u26A0 '${collection}' is still declared in vxil.config.ts \u2014 the next \`vxil push\` re-creates it and ${back} come back with it; remove it from the config too`);
+    if (purgeRows) {
+      lines.push(`  \u26A0 '${collection}' is still declared in vxil.config.ts \u2014 the next \`vxil push\` re-creates it empty; remove it from the config too`);
+    } else {
+      const back = plan.rows === null ? "the retained rows" : `the ${plan.rows} retained row(s)`;
+      lines.push(`  \u26A0 '${collection}' is still declared in vxil.config.ts \u2014 the next \`vxil push\` re-creates it and ${back} come back with it; remove it from the config too`);
+    }
   }
   return lines.join("\n");
 }
@@ -14914,7 +14950,7 @@ var TOOLS = [
         media_resolution: {
           type: "string",
           enum: ["low", "medium", "high"],
-          description: "Gemini token budget per image or PDF page (ignored by other providers): lower is faster and bills fewer input tokens. Omitted: the tenant's defaults.mediaResolution, then the model default."
+          description: "Gemini token budget per image or PDF page (ignored by other providers): lower is faster and bills fewer input tokens. Omitted: the stored template's own level (when template is set), then the tenant's defaults.mediaResolution, then the model default."
         },
         mode: {
           type: "string",
@@ -16932,7 +16968,7 @@ var VERB_USAGE = {
   import: "usage: vxil import <feature> --file <bundle.json|export.ndjson> [--mode merge|replace] [--allow-split-links]",
   migrate: "usage: vxil migrate plan|schema|data|verify|payments \u2026  (run `vxil migrate --help`)",
   functions: "usage: vxil functions new <name> [--force]|deploy [<name>] [--force]|list|delete|enable|disable [--yes]|invoke ['<json>' | --data '<json>'] [--async]|logs [--tail]|dev <name> [--port <n>] [--trigger <lane>] [--event <file.json>]",
-  cms: "usage: vxil cms status|pull|reindex <collection> [--field <field>]|drop <collection> [--yes]|bulk-rm <collection> --filter '<json>' [--limit <1..100>] [--dry-run] [--yes]",
+  cms: "usage: vxil cms status|pull|reindex <collection> [--field <field>]|drop <collection> [--purge-rows] [--yes]|bulk-rm <collection> --filter '<json>' [--limit <1..100>] [--dry-run] [--yes]",
   payments: "usage: vxil payments simulate --scenario <refund-pair|cross-platform-unlock|renewal|expiry|past-due-grace|transfer> --user <id> [--tier <t>] [--dev]  \u2014 mock/dev projects only",
   dev: "usage: vxil dev up [--ttl <h>] [--new] [--name <n>] [--reuse-slug <slug>] [--email <e> --password <p>] [--invite <code>] | down [--yes] | seed | reset | branch [<name>] [--ttl <h=24>] [--no-env] [--print] | --list | --rm <name> [--yes] | --watch [--target <name>]  \u2014 dev up signs in with --email/--password (or VXIL_DEV_EMAIL/VXIL_DEV_PASSWORD, + VXIL_DEV_INVITE), else your `vxil login` session, else a prompt",
   config: "usage: vxil config get <feature> \xB7 vxil config draft show|save [--file <f>]|publish|discard <feature> \xB7 vxil config draft duplicate <feature> --from <version>",
@@ -17052,6 +17088,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "check",
   "all-projects",
   "allow-destructive",
+  "purge-rows",
   "exit-code",
   "show-runs",
   "skip-functions",
@@ -26134,25 +26171,35 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
       const [sub] = positional(0);
       if (sub === "drop") {
         const [collection] = positional(1);
-        if (!collection) fail("usage: vxil cms drop <collection> [--yes]");
+        if (!collection) fail("usage: vxil cms drop <collection> [--purge-rows] [--yes]");
+        const purgeRows = hasFlag("purge-rows");
         const { api: api2, target } = requireApi(selector(), { write: `cms drop ${collection}` });
         const plan = await planCollectionDrop(api2, collection);
         if (plan.remoteUnavailable) {
           fail(`cannot read ${plan.remoteUnavailable.route} (${plan.remoteUnavailable.code ?? plan.remoteUnavailable.status}) \u2014 refusing to drop against an unread target`);
         }
-        if (!plan.exists) fail(`collection '${collection}' does not exist on tenant '${target.tenantSlug ?? "(env key)"}' \u2014 nothing to drop`);
+        if (!plan.exists && !purgeRows) fail(`collection '${collection}' does not exist on tenant '${target.tenantSlug ?? "(env key)"}' \u2014 nothing to drop (\`--purge-rows\` deletes the rows an earlier drop retained)`);
         let declaredLocally = false;
         try {
           const cfg = await loadVxilConfig();
           declaredLocally = Object.prototype.hasOwnProperty.call(cfg.cms?.collections ?? {}, collection);
         } catch {
         }
-        console.error(formatCollectionDrop(collection, plan, declaredLocally));
+        console.error(formatCollectionDrop(collection, plan, declaredLocally, purgeRows));
         if (!hasFlag("yes")) {
           if (!process.stdin.isTTY) fail("cms drop is destructive \u2014 pass --yes to confirm in a non-interactive run");
-          const ans = await prompt(`drop collection '${collection}'? type the collection name to confirm: `);
+          const ans = await prompt(`${purgeRows ? "drop collection and hard-delete the rows of" : "drop collection"} '${collection}'? type the collection name to confirm: `);
           if (ans !== collection) fail("confirmation did not match \u2014 aborted.");
         }
+        if (purgeRows) {
+          const { purgedRows } = await dropCollectionPurgingRows(api2, collection);
+          if (jsonOut) {
+            console.log(JSON.stringify({ ok: true, collection, dropped: plan.exists, fields: plan.fields, purged_rows: purgedRows, declared_locally: declaredLocally }));
+          } else {
+            console.log(`\u2713 ${plan.exists ? `dropped collection ${collection} (${plan.fields} field(s)) and ` : `${collection}: `}hard-deleted ${purgedRows} stored row(s)`);
+          }
+          break;
+        }
         await dropCollection(api2, collection);
         if (jsonOut) {
           console.log(JSON.stringify({ ok: true, collection, fields: plan.fields, rows: plan.rows, declared_locally: declaredLocally }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vxil/cli",
-  "version": "0.30.0",
+  "version": "0.31.0",
   "private": false,
   "description": "The vxil CLI — init, quickstart, push, gen, secrets, keys, migrate, doctor, diff, functions, payments; installs the `vxil` command (npm i -g @vxil/cli).",
   "license": "MIT",
@@ -45,8 +45,8 @@
     }
   },
   "devDependencies": {
-    "@vxil/config": "0.22.0",
-    "@vxil/feature-configs": "0.20.0",
+    "@vxil/config": "0.23.0",
+    "@vxil/feature-configs": "0.21.0",
     "@vxil/runtime": "0.0.1",
     "@vxil/types": "0.0.1",
     "miniflare": "^4.20260730.0"