@xano/cli 1.2.0 → 1.3.1-beta.0

package/dist/commands/ephemeral/static_host/get/index.d.ts

@@ -0,0 +1,19 @@
+import BaseCommand from '../../../../base-command.js';
+export default class EphemeralStaticHostGet extends BaseCommand {
+    static args: {
+        tenant_name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'static-host': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    /** Print a one-line summary for a dev/prod env if it has been deployed. */
+    private logEnv;
+}

package/dist/commands/ephemeral/static_host/get/index.js

@@ -0,0 +1,101 @@
+import { Args, Flags } from '@oclif/core';
+import BaseCommand from '../../../../base-command.js';
+export default class EphemeralStaticHostGet extends BaseCommand {
+    static args = {
+        tenant_name: Args.string({
+            description: 'Ephemeral tenant name',
+            required: true,
+        }),
+    };
+    static description = 'Get a single static host\'s details (name, git config, dev/prod environments) for an ephemeral tenant';
+    static examples = [
+        `$ xano ephemeral static_host get e4f2-9ab1-xyz1 --static-host newsite
+Static Host: newsite
+ID: 5
+Dev: https://newsite-dev-....dev.xano.io (v2)
+`,
+        `$ xano ephemeral static_host get e4f2-9ab1-xyz1 -H newsite -w 40 -o json`,
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        output: Flags.string({
+            char: 'o',
+            default: 'summary',
+            description: 'Output format',
+            options: ['summary', 'json'],
+            required: false,
+        }),
+        'static-host': Flags.string({
+            char: 'H',
+            description: 'Static host name',
+            required: true,
+        }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'Workspace ID (optional if set in profile)',
+            required: false,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(EphemeralStaticHostGet);
+        const { profile, profileName } = this.resolveProfile(flags);
+        const tenantName = args.tenant_name;
+        let workspaceId;
+        if (flags.workspace) {
+            workspaceId = flags.workspace;
+        }
+        else if (profile.workspace) {
+            workspaceId = profile.workspace;
+        }
+        else {
+            this.error(`Workspace ID is required. Either:\n` +
+                `  1. Provide it as a flag: xano ephemeral static_host get <tenant_name> --static-host <static_host> -w <workspace_id>\n` +
+                `  2. Set it in your profile using: xano profile edit ${profileName} -w <workspace_id>`);
+        }
+        const staticHost = flags['static-host'];
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant/${tenantName}/static_host/${staticHost}`;
+        try {
+            const response = await this.verboseFetch(apiUrl, {
+                headers: {
+                    accept: 'application/json',
+                    Authorization: `Bearer ${profile.access_token}`,
+                },
+                method: 'GET',
+            }, flags.verbose, profile.access_token);
+            if (!response.ok) {
+                const message = await this.parseApiError(response, `Failed to get static host '${staticHost}'`);
+                this.error(message);
+            }
+            const host = (await response.json());
+            if (flags.output === 'json') {
+                this.log(JSON.stringify(host, null, 2));
+            }
+            else {
+                this.log(`Static Host: ${host.name}`);
+                this.log(`ID: ${host.id}`);
+                if (host.description)
+                    this.log(`Description: ${host.description}`);
+                if (host.git?.repo)
+                    this.log(`Git: ${host.git.repo}`);
+                this.logEnv('Dev', host.dev);
+                this.logEnv('Prod', host.prod);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.error(`Failed to get static host: ${error.message}`);
+            }
+            else {
+                this.error(`Failed to get static host: ${String(error)}`);
+            }
+        }
+    }
+    /** Print a one-line summary for a dev/prod env if it has been deployed. */
+    logEnv(label, env) {
+        if (!env?.default_url)
+            return;
+        const modeInfo = env.mode ? ` (${env.mode})` : '';
+        const custom = env.custom_url ? ` [custom: ${env.custom_url}]` : '';
+        this.log(`${label}: ${env.default_url}${modeInfo}${custom}`);
+    }
+}

package/dist/commands/ephemeral/static_host/list/index.d.ts

@@ -0,0 +1,17 @@
+import BaseCommand from '../../../../base-command.js';
+export default class EphemeralStaticHostList extends BaseCommand {
+    static args: {
+        tenant_name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        page: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/ephemeral/static_host/list/index.js

@@ -0,0 +1,132 @@
+import { Args, Flags } from '@oclif/core';
+import BaseCommand from '../../../../base-command.js';
+import { buildPagingJson, buildPagingParams, formatPagingFooter, normalizeListResponse, pagingFlags } from '../../../../utils/paging.js';
+export default class EphemeralStaticHostList extends BaseCommand {
+    static args = {
+        tenant_name: Args.string({
+            description: 'Ephemeral tenant name',
+            required: true,
+        }),
+    };
+    static description = 'List all static hosts for an ephemeral tenant from the Xano Metadata API';
+    static examples = [
+        `$ xano ephemeral static_host list e4f2-9ab1-xyz1 -w 40
+Available static hosts:
+  - my-static-host (ID: 1)
+  - another-host (ID: 2)
+`,
+        `$ xano ephemeral static_host list e4f2-9ab1-xyz1 --profile production
+Available static hosts:
+  - my-static-host (ID: 1)
+  - another-host (ID: 2)
+`,
+        `$ xano ephemeral static_host list e4f2-9ab1-xyz1 -w 40 --output json
+{
+  "count": 1,
+  "page": 1,
+  "total": 3,
+  "items": [
+    {
+      "id": 1,
+      "name": "my-static-host"
+    }
+  ]
+}
+`,
+        `$ xano ephemeral static_host list e4f2-9ab1-xyz1 -p staging -o json --page 2
+[
+  {
+    "id": 3,
+    "name": "static-host-3"
+  }
+]
+`,
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        output: Flags.string({
+            char: 'o',
+            default: 'summary',
+            description: 'Output format',
+            options: ['summary', 'json'],
+            required: false,
+        }),
+        ...pagingFlags('page-only-envelope', { fixedPerPage: 100 }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'Workspace ID (optional if set in profile)',
+            required: false,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(EphemeralStaticHostList);
+        const { profile, profileName } = this.resolveProfile(flags);
+        const tenantName = args.tenant_name;
+        // Determine workspace_id from flag or profile
+        let workspaceId;
+        if (flags.workspace) {
+            workspaceId = flags.workspace;
+        }
+        else if (profile.workspace) {
+            workspaceId = profile.workspace;
+        }
+        else {
+            this.error(`Workspace ID is required. Either:\n` +
+                `  1. Provide it as a flag: xano ephemeral static_host list <tenant_name> -w <workspace_id>\n` +
+                `  2. Set it in your profile using: xano profile:edit ${profileName} -w <workspace_id>`);
+        }
+        // Build query parameters
+        const queryParams = new URLSearchParams(buildPagingParams(flags, 'page-only-envelope'));
+        // Construct the API URL
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/tenant/${tenantName}/static_host?${queryParams.toString()}`;
+        // Fetch static hosts from the API
+        try {
+            const response = await this.verboseFetch(apiUrl, {
+                headers: {
+                    'accept': 'application/json',
+                    'Authorization': `Bearer ${profile.access_token}`,
+                },
+                method: 'GET',
+            }, flags.verbose, profile.access_token);
+            if (!response.ok) {
+                const errorText = await response.text();
+                this.error(`API request failed with status ${response.status}: ${response.statusText}\n${errorText}`);
+            }
+            const list = normalizeListResponse(await response.json(), ['static_hosts']);
+            const staticHosts = list.items;
+            // Output results
+            if (flags.output === 'json') {
+                this.log(JSON.stringify(buildPagingJson(list, { page: flags.page, tier: 'page-only-envelope' }), null, 2));
+            }
+            else {
+                // summary format
+                if (staticHosts.length === 0) {
+                    this.log('No static hosts found');
+                }
+                else {
+                    this.log('Available static hosts:');
+                    for (const host of staticHosts) {
+                        if (host.id === undefined) {
+                            this.log(`  - ${host.name}`);
+                        }
+                        else {
+                            const domainInfo = host.domain ? ` - ${host.domain}` : '';
+                            this.log(`  - ${host.name} (ID: ${host.id})${domainInfo}`);
+                        }
+                    }
+                }
+                const footer = formatPagingFooter(list, { noun: 'static host', page: flags.page, tier: 'page-only-envelope' });
+                if (footer)
+                    this.log(footer);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.error(`Failed to fetch static hosts: ${error.message}`);
+            }
+            else {
+                this.error(`Failed to fetch static hosts: ${String(error)}`);
+            }
+        }
+    }
+}

package/dist/commands/flatten/index.d.ts

@@ -0,0 +1,34 @@
+import { Command } from '@oclif/core';
+/**
+ * Split a multi-document `.xs` bundle into the standard one-document-per-file
+ * layout that the push pipeline requires.
+ *
+ * A hand-authored bundle keeps every object (workspace, tables, queries,
+ * microservices, …) in a single file joined by `---`. That is convenient to
+ * edit but unsupported by `push`: the partial-diff filter and GUID writeback
+ * both parse only the first document in a file, so such a bundle silently
+ * pushes nothing (partial mode) or corrupts GUIDs (full mode). `flatten` turns
+ * it back into the exact tree `pull` would have produced, using the shared
+ * placement logic so the two never drift.
+ *
+ * Not a BaseCommand: this is a purely local, offline transform — no profile,
+ * token, or network — so it extends oclif's Command directly.
+ */
+export default class Flatten extends Command {
+    static args: {
+        input: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'keep-source': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        output: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+    /** Recursively collect `.xs` files under a dir that actually hold >1 document. */
+    private collectMultiDocFiles;
+    /** Flatten a single bundle file. Returns the number of documents written. */
+    private flattenOne;
+}

package/dist/commands/flatten/index.js

@@ -0,0 +1,140 @@
+import { Args, Command, Flags, ux } from '@oclif/core';
+import * as fs from 'node:fs';
+import { join, relative, resolve } from 'node:path';
+import { flattenBundleFile } from '../../utils/flatten.js';
+/**
+ * Split a multi-document `.xs` bundle into the standard one-document-per-file
+ * layout that the push pipeline requires.
+ *
+ * A hand-authored bundle keeps every object (workspace, tables, queries,
+ * microservices, …) in a single file joined by `---`. That is convenient to
+ * edit but unsupported by `push`: the partial-diff filter and GUID writeback
+ * both parse only the first document in a file, so such a bundle silently
+ * pushes nothing (partial mode) or corrupts GUIDs (full mode). `flatten` turns
+ * it back into the exact tree `pull` would have produced, using the shared
+ * placement logic so the two never drift.
+ *
+ * Not a BaseCommand: this is a purely local, offline transform — no profile,
+ * token, or network — so it extends oclif's Command directly.
+ */
+export default class Flatten extends Command {
+    static args = {
+        input: Args.string({
+            description: 'A multi-document .xs file, or a directory containing them, to split',
+            required: true,
+        }),
+    };
+    static description = 'Split a multi-document .xs bundle (documents joined by `---`) into the standard ' +
+        'one-document-per-file layout that push requires. Deletes the original bundle by ' +
+        'default (use --keep-source to keep it). Purely local — no network.';
+    static examples = [
+        `$ xano flatten secret/pdf-micro/multidoc.xs
+Split the bundle in place into per-document files (removes multidoc.xs)`,
+        `$ xano flatten ./bundle.xs -o ./workspace
+Write the split files under ./workspace instead of alongside the bundle`,
+        `$ xano flatten secret/pdf-micro/multidoc.xs --dry-run
+Preview the file layout without writing anything`,
+        `$ xano flatten ./dir-of-bundles --keep-source
+Flatten every multi-doc .xs under a directory, keeping the originals`,
+    ];
+    static flags = {
+        'dry-run': Flags.boolean({
+            default: false,
+            description: 'Show the resulting file layout without writing anything',
+        }),
+        force: Flags.boolean({
+            char: 'f',
+            default: false,
+            description: 'Overwrite existing destination files instead of erroring',
+        }),
+        'keep-source': Flags.boolean({
+            default: false,
+            description: 'Keep the original multi-document file(s) (default: delete after a successful split)',
+        }),
+        output: Flags.string({
+            char: 'o',
+            description: 'Output directory (default: the directory each bundle file lives in)',
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(Flatten);
+        const inputPath = resolve(args.input);
+        if (!fs.existsSync(inputPath)) {
+            this.error(`Not found: ${inputPath}`);
+        }
+        // Resolve the set of bundle files to flatten.
+        const bundleFiles = fs.statSync(inputPath).isDirectory()
+            ? this.collectMultiDocFiles(inputPath)
+            : [inputPath];
+        if (bundleFiles.length === 0) {
+            this.error(fs.statSync(inputPath).isDirectory()
+                ? `No multi-document .xs files found under ${inputPath}`
+                : `${inputPath} is not a .xs file`);
+        }
+        let totalWritten = 0;
+        for (const bundleFile of bundleFiles) {
+            totalWritten += this.flattenOne(bundleFile, flags);
+        }
+        if (flags['dry-run']) {
+            this.log('');
+            this.log(ux.colorize('dim', `Dry run — ${totalWritten} file(s) would be written. Nothing changed.`));
+        }
+        else {
+            this.log('');
+            this.log(`Flattened ${bundleFiles.length} bundle(s) into ${totalWritten} file(s).`);
+        }
+    }
+    /** Recursively collect `.xs` files under a dir that actually hold >1 document. */
+    collectMultiDocFiles(dir) {
+        const out = [];
+        const walk = (d) => {
+            for (const entry of fs.readdirSync(d, { withFileTypes: true })) {
+                const full = join(d, entry.name);
+                if (entry.isDirectory()) {
+                    walk(full);
+                }
+                else if (entry.isFile() && entry.name.endsWith('.xs')) {
+                    const content = fs.readFileSync(full, 'utf8');
+                    if (/^---$/m.test(content))
+                        out.push(full);
+                }
+            }
+        };
+        walk(dir);
+        return out.sort();
+    }
+    /** Flatten a single bundle file. Returns the number of documents written. */
+    flattenOne(bundleFile, flags) {
+        const rel = relative(process.cwd(), bundleFile) || bundleFile;
+        let result;
+        try {
+            // Buffer the plan so we can print a header before it only when there's work.
+            const planLines = [];
+            result = flattenBundleFile(bundleFile, {
+                dryRun: flags['dry-run'],
+                force: flags.force,
+                keepSource: flags['keep-source'],
+                log: (msg) => planLines.push(msg),
+                outputDir: flags.output,
+            });
+            if (result.skipped === 'empty') {
+                this.warn(`No parseable documents in ${rel}; skipping.`);
+                return 0;
+            }
+            if (result.skipped === 'single') {
+                this.warn(`${rel} holds a single document; nothing to split. Skipping.`);
+                return 0;
+            }
+            this.log('');
+            this.log(ux.colorize('bold', `${rel} → ${result.written.length} documents`));
+            for (const l of planLines) {
+                // Colorize the WRITE marker; dim the incidental notes.
+                this.log(l.startsWith('  WRITE') ? l.replace('WRITE', ux.colorize('green', 'WRITE')) : ux.colorize('dim', l));
+            }
+        }
+        catch (error) {
+            this.error(error.message);
+        }
+        return result.written.length;
+    }
+}

package/dist/commands/function/create/index.d.ts

@@ -7,13 +7,28 @@ export default class FunctionCreate extends BaseCommand {
         edit: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'policy-override': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         stdin: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
+    /** Set once the publish policy gate refuses, the one failure that exits 2. */
+    private refusedByPolicyGate;
+    /** Exit 2 is the publish gate's refusal; every other failure, flag errors included, exits 1. */
+    protected catch(error: Error & {
+        oclif?: {
+            exit?: number;
+        };
+    }): Promise<void>;
     run(): Promise<void>;
     private editFile;
     private readStdin;
+    /**
+     * The live-branch publish gate refused the new function: the verdict on stdout (under `-o json`,
+     * `{created: false, message, policy_gate}`), then the platform's message and how to proceed,
+     * exiting 2.
+     */
+    private refusePublish;
 }

package/dist/commands/function/create/index.js

@@ -2,8 +2,9 @@ import { Flags } from '@oclif/core';
 import { execSync } from 'node:child_process';
 import * as fs from 'node:fs';
 import * as os from 'node:os';
-import * as path from 'node:path';
+import path from 'node:path';
 import BaseCommand from '../../../base-command.js';
+import { BLANK_POLICY_OVERRIDE, blankPolicyOverride, gateRefusal, publishRefusal, quoted } from '../../../utils/policy/gate.js';
 export default class FunctionCreate extends BaseCommand {
     static args = {};
     static description = 'Create a new function in a workspace';
@@ -36,6 +37,7 @@ Name: my_function
   ...
 }
 `,
+        `$ xano function:create -f function.xs --policy-override "Exception approved; finding tracked in JIRA-12"`,
     ];
     static flags = {
         ...BaseCommand.baseFlags,
@@ -59,6 +61,7 @@ Name: my_function
             options: ['summary', 'json'],
             required: false,
         }),
+        'policy-override': Flags.string({ description: 'Create the function past a blocking live-branch publish policy gate with an audited reason (requires workspace:policy update)' }),
         stdin: Flags.boolean({
             char: 's',
             default: false,
@@ -72,8 +75,18 @@ Name: my_function
             required: false,
         }),
     };
+    /** Set once the publish policy gate refuses, the one failure that exits 2. */
+    refusedByPolicyGate = false;
+    /** Exit 2 is the publish gate's refusal; every other failure, flag errors included, exits 1. */
+    async catch(error) {
+        if (this.refusedByPolicyGate)
+            return super.catch(error);
+        return this.catchAsOperational(error);
+    }
     async run() {
         const { flags } = await this.parse(FunctionCreate);
+        if (blankPolicyOverride(flags['policy-override']))
+            this.error(BLANK_POLICY_OVERRIDE);
         const { profile, profileName } = this.resolveProfile(flags);
         // Determine workspace_id from flag or profile
         let workspaceId;
@@ -133,6 +146,10 @@ Name: my_function
         const queryParams = new URLSearchParams({
             include_xanoscript: 'false',
         });
+        // A reason from someone with workspace:policy update saves past a blocking publish gate.
+        const overrideReason = flags['policy-override']?.trim();
+        if (overrideReason)
+            queryParams.set('override_reason', overrideReason);
         const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/function?${queryParams.toString()}`;
         // Create function via API
         try {
@@ -146,6 +163,9 @@ Name: my_function
                 method: 'POST',
             }, flags.verbose, profile.access_token);
             if (!response.ok) {
+                const refused = await gateRefusal(response);
+                if (refused)
+                    this.refusePublish(refused, flags);
                 const errorText = await response.text();
                 this.error(`API request failed with status ${response.status}: ${response.statusText}\n${errorText}`);
             }
@@ -166,6 +186,8 @@ Name: my_function
             }
         }
         catch (error) {
+            if (this.refusedByPolicyGate)
+                throw error;
             if (error instanceof Error) {
                 this.error(`Failed to create function: ${error.message}`);
             }
@@ -239,4 +261,22 @@ Name: my_function
             process.stdin.resume();
         });
     }
+    /**
+     * The live-branch publish gate refused the new function: the verdict on stdout (under `-o json`,
+     * `{created: false, message, policy_gate}`), then the platform's message and how to proceed,
+     * exiting 2.
+     */
+    refusePublish(refused, flags) {
+        const workspace = flags.workspace ? ` -w ${quoted(flags.workspace)}` : '';
+        const source = flags.file ? ` -f ${quoted(flags.file)}` : ' --stdin';
+        const { lines, message } = publishRefusal(refused, {
+            json: flags.output === 'json',
+            outcome: 'created',
+            rerun: `xano function create${workspace}${source} --policy-override "<why>"`,
+        });
+        for (const line of lines)
+            this.log(line);
+        this.refusedByPolicyGate = true;
+        this.error(message, { exit: 2 });
+    }
 }

package/dist/commands/function/edit/index.d.ts

@@ -9,6 +9,7 @@ export default class FunctionEdit extends BaseCommand {
         edit: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'policy-override': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         publish: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         stdin: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -16,10 +17,24 @@ export default class FunctionEdit extends BaseCommand {
         profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
+    /** Set once the publish policy gate refuses, the one failure that exits 2. */
+    private refusedByPolicyGate;
+    /** Exit 2 is the publish gate's refusal; every other failure, flag errors included, exits 1. */
+    protected catch(error: Error & {
+        oclif?: {
+            exit?: number;
+        };
+    }): Promise<void>;
     run(): Promise<void>;
     private editFile;
     private editFunctionContent;
     private fetchFunctionCode;
     private promptForFunctionId;
     private readStdin;
+    /**
+     * The live-branch publish gate refused the update: the verdict on stdout (under `-o json`,
+     * `{updated: false, message, policy_gate}`), then the platform's message and how to proceed,
+     * exiting 2.
+     */
+    private refusePublish;
 }