@xano/cli 1.0.2-beta.5 → 1.0.2-beta.7

package/dist/commands/workspace/delete/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceDelete extends BaseCommand {
     static description = 'Delete a workspace via the Xano Metadata API. Cannot delete workspaces with active tenants.';
@@ -42,23 +40,7 @@ Deleted workspace 123
     };
     async run() {
         const { flags } = await this.parse(WorkspaceDelete);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Get workspace ID from flag or profile
         const workspaceId = flags.workspace || profile.workspace;
         if (!workspaceId) {
@@ -119,24 +101,4 @@ Deleted workspace 123
             });
         });
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/edit/index.d.ts

@@ -15,5 +15,4 @@ export default class WorkspaceEdit extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
 }

package/dist/commands/workspace/edit/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceEdit extends BaseCommand {
     static description = 'Edit an existing workspace via the Xano Metadata API';
@@ -67,23 +65,7 @@ Updated workspace: my-workspace (ID: 123)
     };
     async run() {
         const { flags } = await this.parse(WorkspaceEdit);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Get workspace ID from flag or profile
         const workspaceId = flags.workspace || profile.workspace;
         if (!workspaceId) {
@@ -160,23 +142,4 @@ Updated workspace: my-workspace (ID: 123)
             }
         }
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/get/index.d.ts

@@ -10,5 +10,4 @@ export default class WorkspaceGet extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
 }

package/dist/commands/workspace/get/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceGet extends BaseCommand {
     static description = 'Get details of a specific workspace from the Xano Metadata API';
@@ -41,23 +39,7 @@ Workspace: my-workspace (ID: 123)
     };
     async run() {
         const { flags } = await this.parse(WorkspaceGet);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Get workspace ID from flag or profile
         const workspaceId = flags.workspace || profile.workspace;
         if (!workspaceId) {
@@ -112,23 +94,4 @@ Workspace: my-workspace (ID: 123)
             }
         }
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/list/index.d.ts

@@ -10,5 +10,4 @@ export default class WorkspaceList extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
 }

package/dist/commands/workspace/list/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceList extends BaseCommand {
     static description = 'List all workspaces from the Xano Metadata API';
@@ -57,23 +55,7 @@ Available workspaces:
     };
     async run() {
         const { flags } = await this.parse(WorkspaceList);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile:create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Construct the API URL
         const apiUrl = `${profile.instance_origin}/api:meta/workspace`;
         // Fetch workspaces from the API
@@ -136,23 +118,4 @@ Available workspaces:
             }
         }
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile:create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/pull/index.d.ts

@@ -14,7 +14,6 @@ export default class Pull extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
     /**
      * Sanitize a document name for use as a filename.
      * Strips quotes, replaces spaces with underscores, and removes

package/dist/commands/workspace/pull/index.js

@@ -1,5 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import snakeCase from 'lodash.snakecase';
@@ -59,23 +58,7 @@ Pulled 58 documents
     };
     async run() {
         const { flags } = await this.parse(Pull);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile:create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile, profileName } = this.resolveProfile(flags);
         // Determine workspace_id from flag or profile
         let workspaceId;
         if (flags.workspace) {
@@ -258,25 +241,6 @@ Pulled 58 documents
         }
         this.log(`Pulled ${writtenCount} documents to ${flags.directory}`);
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile:create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
     /**
      * Sanitize a document name for use as a filename.
      * Strips quotes, replaces spaces with underscores, and removes

package/dist/utils/local-config.d.ts

@@ -0,0 +1,43 @@
+import type { ProfileConfig } from '../base-command.js';
+export declare const LOCAL_PROFILE_FILENAME = "profile.yaml";
+/** Fields a project-local profile.yaml may set. No secrets allowed. */
+export interface LocalProfileConfig {
+    account_origin?: string;
+    branch?: string;
+    instance_origin?: string;
+    profile?: string;
+    workspace?: string;
+}
+/**
+ * Parse the raw contents of a profile.yaml.
+ * - Throws if `access_token` is present (secrets belong in credentials.yaml).
+ * - Returns null if the content is not an object or has no recognized keys
+ *   (so an unrelated profile.yaml from another tool is ignored, not hijacked).
+ */
+export declare function parseLocalProfile(raw: string): LocalProfileConfig | null;
+/**
+ * Return a new profile with the local override fields applied.
+ * The `profile` pointer is never copied; secrets are preserved from the base.
+ */
+export declare function applyLocalOverrides(base: ProfileConfig, local: LocalProfileConfig): ProfileConfig;
+/**
+ * Decide which profile name to use and whether local overrides apply.
+ * Precedence: explicit -p/XANO_PROFILE > local profile.yaml > credentials default.
+ * An explicit profile disables the local file entirely (name and overrides).
+ */
+export declare function resolveProfileSelection(params: {
+    defaultProfile: string;
+    explicitProfile?: string;
+    hasLocal: boolean;
+    localProfileName?: string;
+}): {
+    applyLocal: boolean;
+    profileName: string;
+};
+/** Format the one-line banner shown when a local profile.yaml is in effect. */
+export declare function formatLocalProfileBanner(profileName: string, workspace: string | undefined, relativePath: string): string;
+/**
+ * Walk up from `startDir` to the filesystem root, returning the path of the
+ * first profile.yaml found, or null if none exists.
+ */
+export declare function findLocalProfilePath(startDir: string): null | string;

package/dist/utils/local-config.js

@@ -0,0 +1,88 @@
+import * as yaml from 'js-yaml';
+import * as fs from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+export const LOCAL_PROFILE_FILENAME = 'profile.yaml';
+const RECOGNIZED_KEYS = ['profile', 'workspace', 'instance_origin', 'account_origin', 'branch'];
+/**
+ * Fields that may be layered onto a resolved profile (everything except the profile pointer).
+ * NOTE: `insecure` is intentionally NOT listed here — a project file must never silently
+ * disable TLS verification (security boundary).
+ */
+const OVERRIDE_KEYS = ['workspace', 'instance_origin', 'account_origin', 'branch'];
+/**
+ * Parse the raw contents of a profile.yaml.
+ * - Throws if `access_token` is present (secrets belong in credentials.yaml).
+ * - Returns null if the content is not an object or has no recognized keys
+ *   (so an unrelated profile.yaml from another tool is ignored, not hijacked).
+ */
+export function parseLocalProfile(raw) {
+    const parsed = yaml.load(raw);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return null;
+    }
+    const obj = parsed;
+    if ('access_token' in obj) {
+        throw new Error(`profile.yaml must not contain access_token. ` +
+            `Tokens belong in credentials.yaml — reference a profile by name instead.`);
+    }
+    const config = {};
+    for (const key of RECOGNIZED_KEYS) {
+        if (obj[key] !== undefined && obj[key] !== null) {
+            config[key] = String(obj[key]);
+        }
+    }
+    if (Object.keys(config).length === 0) {
+        return null;
+    }
+    return config;
+}
+/**
+ * Return a new profile with the local override fields applied.
+ * The `profile` pointer is never copied; secrets are preserved from the base.
+ */
+export function applyLocalOverrides(base, local) {
+    const result = { ...base };
+    for (const key of OVERRIDE_KEYS) {
+        if (local[key] !== undefined) {
+            result[key] = local[key];
+        }
+    }
+    return result;
+}
+/**
+ * Decide which profile name to use and whether local overrides apply.
+ * Precedence: explicit -p/XANO_PROFILE > local profile.yaml > credentials default.
+ * An explicit profile disables the local file entirely (name and overrides).
+ */
+export function resolveProfileSelection(params) {
+    if (params.explicitProfile) {
+        return { applyLocal: false, profileName: params.explicitProfile };
+    }
+    if (params.hasLocal) {
+        return { applyLocal: true, profileName: params.localProfileName ?? params.defaultProfile };
+    }
+    return { applyLocal: false, profileName: params.defaultProfile };
+}
+/** Format the one-line banner shown when a local profile.yaml is in effect. */
+export function formatLocalProfileBanner(profileName, workspace, relativePath) {
+    const workspaceClause = workspace ? ` (workspace ${workspace})` : '';
+    return `Using profile '${profileName}'${workspaceClause} · ${relativePath}`;
+}
+/**
+ * Walk up from `startDir` to the filesystem root, returning the path of the
+ * first profile.yaml found, or null if none exists.
+ */
+export function findLocalProfilePath(startDir) {
+    let dir = resolve(startDir);
+    while (true) {
+        const candidate = join(dir, LOCAL_PROFILE_FILENAME);
+        if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {
+            return candidate;
+        }
+        const parent = dirname(dir);
+        if (parent === dir) {
+            return null;
+        }
+        dir = parent;
+    }
+}

package/dist/utils/multidoc-push.d.ts

@@ -54,6 +54,31 @@ export declare function countSummaryChanges(summary: Record<string, {
     truncated: number;
     updated: number;
 }>, shouldDelete: boolean): number;
+/**
+ * Filter document entries down to the ones the dry-run preview reports as changed,
+ * used to send only the changed documents during a partial (non-`--sync`) push.
+ *
+ * The preview keys each operation as `${type}:${name}` (with the verb appended for
+ * API endpoints). Local documents are matched against that set.
+ *
+ * Triggers need special handling: they are authored with specific subtypes
+ * (workspace_trigger, error_trigger, table_trigger, agent_trigger,
+ * mcp_server_trigger, realtime_trigger) but the server buckets every one under the
+ * generic `trigger` type in the preview. We therefore match a local trigger against
+ * both its specific type and the generic `trigger` type — otherwise partial pushes
+ * silently drop triggers, requiring `--sync --force` to include them (DEV-7084).
+ */
+export declare function filterChangedEntries(entries: Array<{
+    content: string;
+    filePath: string;
+}>, operations: Array<{
+    action: string;
+    name: string;
+    type: string;
+}>, includeRecords: boolean): Array<{
+    content: string;
+    filePath: string;
+}>;
 /**
  * Recursively collect all .xs files from a directory, sorted for deterministic ordering.
  */

package/dist/utils/multidoc-push.js

@@ -14,6 +14,44 @@ export const WORKSPACE_MISMATCH_THRESHOLD = 10;
 export function countSummaryChanges(summary, shouldDelete) {
     return Object.values(summary).reduce((sum, c) => sum + c.created + c.updated + (shouldDelete ? c.deleted : 0) + c.truncated, 0);
 }
+/**
+ * Filter document entries down to the ones the dry-run preview reports as changed,
+ * used to send only the changed documents during a partial (non-`--sync`) push.
+ *
+ * The preview keys each operation as `${type}:${name}` (with the verb appended for
+ * API endpoints). Local documents are matched against that set.
+ *
+ * Triggers need special handling: they are authored with specific subtypes
+ * (workspace_trigger, error_trigger, table_trigger, agent_trigger,
+ * mcp_server_trigger, realtime_trigger) but the server buckets every one under the
+ * generic `trigger` type in the preview. We therefore match a local trigger against
+ * both its specific type and the generic `trigger` type — otherwise partial pushes
+ * silently drop triggers, requiring `--sync --force` to include them (DEV-7084).
+ */
+export function filterChangedEntries(entries, operations, includeRecords) {
+    const changedKeys = new Set(operations
+        .filter((op) => op.action !== 'unchanged' && op.action !== 'delete' && op.action !== 'cascade_delete')
+        .map((op) => `${op.type}:${op.name}`));
+    return entries.filter((entry) => {
+        const parsed = parseDocument(entry.content);
+        if (!parsed)
+            return true;
+        // Workspace settings always use a fixed key in dry-run regardless of the actual name
+        if (parsed.type === 'workspace' && changedKeys.has('workspace:workspace'))
+            return true;
+        const opName = parsed.verb ? `${parsed.name} ${parsed.verb}` : parsed.name;
+        if (changedKeys.has(`${parsed.type}:${opName}`))
+            return true;
+        // The dry-run preview reports all trigger subtypes under the generic `trigger`
+        // type, so match triggers against that bucket too (DEV-7084).
+        if (parsed.type.endsWith('_trigger') && changedKeys.has(`trigger:${opName}`))
+            return true;
+        // Keep table documents that contain records when --records is active
+        if (includeRecords && parsed.type === 'table' && /\bitems\s*=\s*\[/m.test(entry.content))
+            return true;
+        return false;
+    });
+}
 // ── File Collection ─────────────────────────────────────────────────────────
 /**
  * Recursively collect all .xs files from a directory, sorted for deterministic ordering.
@@ -520,24 +558,7 @@ export async function executePush(ctx, target, flags) {
     }
     // ── Partial push: filter to changed documents only ────────────────────
     if (isPartial && dryRunPreview) {
-        const changedKeys = new Set(dryRunPreview.operations
-            .filter((op) => op.action !== 'unchanged' && op.action !== 'delete' && op.action !== 'cascade_delete')
-            .map((op) => `${op.type}:${op.name}`));
-        const filteredEntries = documentEntries.filter((entry) => {
-            const parsed = parseDocument(entry.content);
-            if (!parsed)
-                return true;
-            // Workspace settings always use a fixed key in dry-run regardless of the actual name
-            if (parsed.type === 'workspace' && changedKeys.has('workspace:workspace'))
-                return true;
-            const opName = parsed.verb ? `${parsed.name} ${parsed.verb}` : parsed.name;
-            if (changedKeys.has(`${parsed.type}:${opName}`))
-                return true;
-            // Keep table documents that contain records when --records is active
-            if (flags.records && parsed.type === 'table' && /\bitems\s*=\s*\[/m.test(entry.content))
-                return true;
-            return false;
-        });
+        const filteredEntries = filterChangedEntries(documentEntries, dryRunPreview.operations, flags.records);
         if (filteredEntries.length === 0) {
             log('No changes to push.');
             return;