@xano/cli 1.3.1-beta.1 → 1.3.1

package/dist/commands/workspace/pull/index.d.ts

@@ -14,14 +14,4 @@ export default class Pull extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    /**
-     * Policy keys are unique on the server without regard to case, but an older export or a local file
-     * can still differ only in case, and file names are not case-sensitive on every checkout. The
-     * policies whose file name differs only in case from another exported policy, or from a local file
-     * it would overwrite, are left out with a warning; everything else is written. Local policy files
-     * absent from the export are kept. They are reported as stale only when this credential reads the
-     * branch's policies, because an export leaves out the policies its credential cannot read, and
-     * every policy while the Policies feature is off.
-     */
-    private policyClashes;
 }

package/dist/commands/workspace/pull/index.js

@@ -3,9 +3,8 @@ import snakeCase from 'lodash.snakecase';
 import * as fs from 'node:fs';
 import path from 'node:path';
 import BaseCommand from '../../../base-command.js';
-import { buildApiGroupFolderResolver, buildChannelServerResolver, parseDocument, policyBaseName, resolveDocumentPath, } from '../../../utils/document-parser.js';
+import { buildApiGroupFolderResolver, buildChannelServerResolver, parseDocument, resolveDocumentPath, } from '../../../utils/document-parser.js';
 import { fetchKnowledge, writeKnowledge } from '../../../utils/knowledge-sync.js';
-import { policyListing } from '../../../utils/policy/request.js';
 export default class Pull extends BaseCommand {
     static description = 'Pull a workspace multidoc from the Xano Metadata API and split into individual files';
     static examples = [
@@ -28,7 +27,7 @@ Pulled 58 documents
         ...BaseCommand.baseFlags,
         branch: Flags.string({
             char: 'b',
-            description: "Branch name (defaults to profile branch or live; -b '' selects live)",
+            description: 'Branch name (optional if set in profile, defaults to live)',
             required: false,
         }),
         directory: Flags.string({
@@ -74,8 +73,8 @@ Pulled 58 documents
                 `  1. Provide it as a flag: xano workspace pull -w <workspace_id>\n` +
                 `  2. Set it in your profile using: xano profile:edit ${profileName} -w <workspace_id>`);
         }
-        // Determine branch from flag or profile; `-b ''` selects live whatever the profile's branch, as in push.
-        const branch = flags.branch ?? profile.branch ?? '';
+        // Determine branch from flag or profile
+        const branch = flags.branch || profile.branch || '';
         // Build query parameters
         const queryParams = new URLSearchParams({
             branch,
@@ -124,13 +123,12 @@ Pulled 58 documents
                 documents.push(parsed);
             }
         }
-        // Resolve the output directory
-        const outputDir = path.resolve(flags.directory);
-        const clashing = await this.policyClashes(documents, outputDir, () => policyListing({ logToStderr: (message) => this.logToStderr(message), verboseFetch: (...args) => this.verboseFetch(...args) }, { branch, profile, verbose: flags.verbose, workspace: workspaceId }));
         if (documents.length === 0) {
             this.log('No documents found in response');
             return;
         }
+        // Resolve the output directory
+        const outputDir = path.resolve(flags.directory);
         // Create the output directory if it doesn't exist
         fs.mkdirSync(outputDir, { recursive: true });
         // Resolve api_group names to unique folder names, disambiguating collisions
@@ -142,7 +140,7 @@ Pulled 58 documents
         // Track filenames per type to handle duplicates
         const filenameCounters = new Map();
         let writtenCount = 0;
-        for (const doc of documents.filter((document) => !clashing.has(document))) {
+        for (const doc of documents) {
             const { baseName, typeDir } = resolveDocumentPath(doc, outputDir, {
                 getApiGroupFolder,
                 getChannelServer,
@@ -175,66 +173,5 @@ Pulled 58 documents
         if (knowledgeCount > 0)
             parts.push(`${knowledgeCount} knowledge file${knowledgeCount === 1 ? '' : 's'}`);
         this.log(`Pulled ${parts.join(' + ')} to ${flags.directory}`);
-        // Policy files state the rules; the skill the instance generates tells an agent how to follow them.
-        // Only a pull that carried policy files says so: an instance with the Policies feature off exports
-        // none, and its skill route answers 403.
-        if (documents.some((doc) => doc.type === 'policy')) {
-            this.log('Run `xano skills pull` to install the policies skill for your coding agent.');
-        }
-    }
-    /**
-     * Policy keys are unique on the server without regard to case, but an older export or a local file
-     * can still differ only in case, and file names are not case-sensitive on every checkout. The
-     * policies whose file name differs only in case from another exported policy, or from a local file
-     * it would overwrite, are left out with a warning; everything else is written. Local policy files
-     * absent from the export are kept. They are reported as stale only when this credential reads the
-     * branch's policies, because an export leaves out the policies its credential cannot read, and
-     * every policy while the Policies feature is off.
-     */
-    async policyClashes(documents, outputDir, readsPolicies) {
-        const exported = new Map();
-        for (const doc of documents.filter(doc => doc.type === 'policy')) {
-            const filename = `${policyBaseName(doc.name)}.xs`;
-            exported.set(filename.toLowerCase(), [...(exported.get(filename.toLowerCase()) ?? []), filename]);
-        }
-        const clashes = new Map();
-        for (const [normalized, names] of exported) {
-            if (names.length > 1)
-                clashes.set(normalized, names.map(name => `policies/${name}`).join(' and '));
-        }
-        const policyDir = path.join(outputDir, 'policies');
-        const localFiles = fs.existsSync(policyDir)
-            ? fs.readdirSync(policyDir, { withFileTypes: true })
-                .filter(entry => entry.isFile() && entry.name.toLowerCase().endsWith('.xs'))
-                .map(entry => entry.name)
-                .sort()
-            : [];
-        const stale = [];
-        for (const filename of localFiles) {
-            const names = exported.get(filename.toLowerCase());
-            if (!names)
-                stale.push(`policies/${filename}`);
-            else if (!names.includes(filename) && !clashes.has(filename.toLowerCase())) {
-                clashes.set(filename.toLowerCase(), `policies/${names[0]} (local policies/${filename})`);
-            }
-        }
-        if (clashes.size > 0) {
-            this.warn(`Policy files that differ only in case are left out of this pull; everything else is written:\n  ${[...clashes.values()].join('\n  ')}\n` +
-                'Rename one of the policies, or move the local file aside, then pull again.');
-        }
-        if (stale.length > 0) {
-            // An export that carries a policy was made by a credential that reads them.
-            const listing = exported.size > 0 ? 'listed' : await readsPolicies();
-            if (listing === 'listed') {
-                this.warn(`Stale local policy files are absent from this export and were kept:\n  ${stale.join('\n  ')}\nReview them before pushing; a push can publish these policies again.`);
-            }
-            else if (listing === 'feature_off') {
-                this.log('Local policy files were kept: Policies are not enabled on this instance, so the export carries none.');
-            }
-            else {
-                this.log(`Local policy files were kept: this credential cannot list this workspace's policies, and the export carries none.`);
-            }
-        }
-        return new Set(documents.filter(doc => doc.type === 'policy' && clashes.has(`${doc.name}.xs`.toLowerCase())));
     }
 }

package/dist/commands/workspace/push/index.d.ts

@@ -12,9 +12,6 @@ export default class Push extends BaseCommand {
         force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         guids: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         include: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        message: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'policy-override': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         records: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         sync: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         transaction: import("@oclif/core/interfaces").BooleanFlag<boolean>;
@@ -24,21 +21,5 @@ export default class Push extends BaseCommand {
         profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
-    protected catch(error: Error & {
-        oclif?: {
-            exit?: number;
-        };
-    }): Promise<void>;
     run(): Promise<void>;
-    /**
-     * A failure after the import landed. The import stands, so its policy feedback is reported as for
-     * any push and a blocking finding still exits 2; otherwise the failure exits 1. Under `-o json`
-     * stdout holds the import's document with the failure as `error`.
-     */
-    private catchAfterImport;
-    /**
-     * What happened to the policy documents, then the policy check the import answered with. When the
-     * platform left the policy files out, its notice says so instead of a count of what was sent.
-     */
-    private reportPolicyFeedback;
 }

package/dist/commands/workspace/push/index.js

@@ -2,28 +2,7 @@ import { Flags } from '@oclif/core';
 import * as fs from 'node:fs';
 import { resolve } from 'node:path';
 import BaseCommand from '../../../base-command.js';
-import { parseDocument } from '../../../utils/document-parser.js';
-import { executePush, FailedAfterImportError, } from '../../../utils/multidoc-push.js';
-import { policyCodeGuidance } from '../../../utils/policy/errors.js';
-import { policiesSkippedNotice, policyCheckWarning, policyDocumentSummary, policyExitCode, policySummary, pushEvidence, } from '../../../utils/policy/feedback.js';
-import { BLANK_POLICY_OVERRIDE, blankPolicyOverride } from '../../../utils/policy/gate.js';
-import { policyFilePushGuidance } from '../../../utils/policy/permission.js';
-import { PushPolicyGateError } from '../../../utils/policy/push-gate.js';
-/** The `-o json` document for a push whose import ran: the import response and what was sent. */
-function importDocument(result) {
-    return { ...result.response, documents: result.sent.length, imported: true, knowledge: result.knowledge };
-}
-/** The policy check the import answered with, if any. */
-function policyCheck(result) {
-    return result.response?.policy_check;
-}
-/**
- * The platform's one notice that it left the push's policy files out (the Policies feature is off):
- * the import's, else its preview's, since a partial push may not send the files the preview named.
- */
-function policiesSkipped(result) {
-    return policiesSkippedNotice(result.response) ?? policiesSkippedNotice(result.preview);
-}
+import { executePush } from '../../../utils/multidoc-push.js';
 export default class Push extends BaseCommand {
     static description = '[IMPORTANT] ALWAYS run --dry-run first and show the user the output before pushing. Push local documents to a workspace. By default, only changed files are pushed (partial mode). Use --sync to push all files. Shows a preview of changes before pushing unless --force is specified. Use --dry-run to preview only.';
     static examples = [
@@ -77,9 +56,6 @@ Push functions but exclude test files
 `,
         `$ xano workspace push -i "knowledge/**"
 Push only knowledge files (agents.md / skills / docs)
-`,
-        `$ xano workspace push -m "Tightened the auth policies"
-Label the Version History entry of each policy this push changes; other objects get no message
 `,
         `$ xano workspace push --sync --delete
 Full sync including knowledge files; removes server objects not present locally
@@ -89,7 +65,7 @@ Full sync including knowledge files; removes server objects not present locally
         ...BaseCommand.baseFlags,
         branch: Flags.string({
             char: 'b',
-            description: "Branch name (defaults to profile branch or live; -b '' selects live)",
+            description: 'Branch name (optional if set in profile, defaults to live)',
             required: false,
         }),
         delete: Flags.boolean({
@@ -136,19 +112,6 @@ Full sync including knowledge files; removes server objects not present locally
             multiple: true,
             required: false,
         }),
-        message: Flags.string({
-            char: 'm',
-            description: 'Labels the Version History entry of each policy this push changes; other objects get no message',
-            required: false,
-        }),
-        output: Flags.string({
-            char: 'o',
-            default: 'summary',
-            description: 'Output format; JSON retains the complete import and policy feedback',
-            options: ['summary', 'json'],
-            required: false,
-        }),
-        'policy-override': Flags.string({ description: 'Override a blocking live-branch policy gate with an audited reason (requires workspace:policy update)' }),
         records: Flags.boolean({
             default: false,
             description: '[CRITICAL] STOP and ALWAYS run --dry-run first to show the user a preview before pushing live table records. Includes table records in import.',
@@ -176,20 +139,8 @@ Full sync including knowledge files; removes server objects not present locally
             required: false,
         }),
     };
-    async catch(error) {
-        if (error instanceof PushPolicyGateError) {
-            if (this.isJsonOutput())
-                this.log(JSON.stringify({ imported: false, refused: error.payload }, null, 2));
-            this.error(error.message, { exit: 2 });
-        }
-        if (error instanceof FailedAfterImportError)
-            return this.catchAfterImport(error);
-        return this.catchAsOperational(error);
-    }
     async run() {
         const { flags } = await this.parse(Push);
-        if (blankPolicyOverride(flags['policy-override']))
-            this.error(BLANK_POLICY_OVERRIDE);
         const { profile, profileName } = this.resolveProfile(flags);
         // Determine workspace_id from flag or profile
         let workspaceId;
@@ -211,23 +162,12 @@ Full sync including knowledge files; removes server objects not present locally
         if (!fs.statSync(inputDir).isDirectory()) {
             this.error(`Not a directory: ${inputDir}`);
         }
-        const branch = flags.branch ?? profile.branch ?? '';
+        const branch = flags.branch || profile.branch || '';
         const baseUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}`;
-        const json = flags.output === 'json';
-        // Only the import writes Version History entries, so only the import carries the message.
-        const message = flags.message?.trim();
         const target = {
             buildDryRunUrl: (params) => `${baseUrl}/multidoc/dry-run?${params.toString()}`,
-            buildPushUrl(params) {
-                const query = new URLSearchParams(params);
-                if (message)
-                    query.set('message', message);
-                if (flags['policy-override']?.trim())
-                    query.set('override_reason', flags['policy-override'].trim());
-                return `${baseUrl}/multidoc?${query.toString()}`;
-            },
+            buildPushUrl: (params) => `${baseUrl}/multidoc?${params.toString()}`,
             cliVersion: this.config.version,
-            explainRefusal: (status, payload) => (status === 403 ? policyFilePushGuidance(payload) : policyCodeGuidance(payload) || undefined),
             instanceOrigin: profile.instance_origin,
             label: `workspace ${workspaceId}`,
             supportsBranches: true,
@@ -247,7 +187,7 @@ Full sync including knowledge files; removes server objects not present locally
             truncate: flags.truncate,
             verbose: flags.verbose,
         };
-        const result = await executePush({
+        await executePush({
             accessToken: profile.access_token,
             branch,
             command: this,
@@ -256,66 +196,7 @@ Full sync including knowledge files; removes server objects not present locally
                 listUrl: () => `${baseUrl}/knowledge/sync`,
                 rootDir: inputDir,
             },
-            // Under `-o json` stdout carries one JSON document, so progress goes to stderr.
-            log: json ? this.logToStderr.bind(this) : undefined,
             verboseFetch: this.verboseFetch.bind(this),
         }, target, pushFlags);
-        if (json) {
-            this.log(JSON.stringify(result.stopped
-                ? { imported: false, preview: result.preview, reason: result.stopped }
-                : importDocument(result), null, 2));
-        }
-        // Policy feedback describes the multidoc import, so a push that imported none has none. Its
-        // preview may still say that the policy files are left out.
-        if (result.response) {
-            this.reportPolicyFeedback(result, json);
-        }
-        else {
-            const skipped = policiesSkipped(result);
-            if (skipped)
-                this.warn(skipped);
-        }
-    }
-    /**
-     * A failure after the import landed. The import stands, so its policy feedback is reported as for
-     * any push and a blocking finding still exits 2; otherwise the failure exits 1. Under `-o json`
-     * stdout holds the import's document with the failure as `error`.
-     */
-    catchAfterImport(error) {
-        const json = this.isJsonOutput();
-        const exit = policyExitCode(policyCheck(error.imported)) || 1;
-        if (json)
-            this.log(JSON.stringify({ ...importDocument(error.imported), error: { exit, message: error.message } }, null, 2));
-        this.reportPolicyFeedback(error.imported, json);
-        this.error(error, { exit });
-    }
-    /**
-     * What happened to the policy documents, then the policy check the import answered with. When the
-     * platform left the policy files out, its notice says so instead of a count of what was sent.
-     */
-    reportPolicyFeedback(result, json) {
-        const check = policyCheck(result);
-        const skipped = policiesSkipped(result);
-        if (skipped)
-            this.warn(skipped);
-        if (!json) {
-            if (!skipped) {
-                const sentPolicies = result.sent.filter((entry) => parseDocument(entry.content)?.type === 'policy').length;
-                for (const line of policyDocumentSummary(result.preview, sentPolicies))
-                    this.log(line);
-            }
-            for (const line of policySummary(check, pushEvidence(check)))
-                this.log(line);
-        }
-        const warning = policyCheckWarning(check);
-        if (warning)
-            this.warn(warning);
-        const code = policyExitCode(check);
-        if (code) {
-            process.exitCode = code;
-            if (!json)
-                this.log('Next: `xano policy status --run-detail` for the current standing, or `xano policy runs` for this run.');
-            this.warn('Workspace import completed with blocking policy findings; the imported changes were not rolled back.');
-        }
     }
 }

package/dist/utils/document-parser.d.ts

@@ -11,16 +11,6 @@ export interface ParsedDocument {
     type: string;
     verb?: string;
 }
-/**
- * The platform's policy key pattern, kept offline for file names. A command that already holds the
- * catalogue validates a key against the catalogue's `document.key.pattern` instead.
- */
-export declare const POLICY_KEY_PATTERN: RegExp;
-/**
- * The file name, without `.xs`, for a policy key. The pattern is the platform's own key pattern, so a
- * key from the server can never name a path outside `policies/`.
- */
-export declare function policyBaseName(key: string): string;
 /**
  * Parse a single XanoScript document to extract its type, name, and optional verb/api_group.
  * Skips leading comment lines (starting with //) to find the first meaningful line.

package/dist/utils/document-parser.js

@@ -1,17 +1,3 @@
-/**
- * The platform's policy key pattern, kept offline for file names. A command that already holds the
- * catalogue validates a key against the catalogue's `document.key.pattern` instead.
- */
-export const POLICY_KEY_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-/**
- * The file name, without `.xs`, for a policy key. The pattern is the platform's own key pattern, so a
- * key from the server can never name a path outside `policies/`.
- */
-export function policyBaseName(key) {
-    if (!POLICY_KEY_PATTERN.test(key))
-        throw new Error(`Invalid policy key: ${key}`);
-    return key;
-}
 /**
  * Parse a single XanoScript document to extract its type, name, and optional verb/api_group.
  * Skips leading comment lines (starting with //) to find the first meaningful line.
@@ -47,9 +33,6 @@ export function parseDocument(content) {
     if (name.startsWith('"') && name.endsWith('"')) {
         name = name.slice(1, -1);
     }
-    // Policy bodies are opaque. Prose/parameters may mention guid or api_group; these are not document identity.
-    if (type === 'policy')
-        return { content, name, type };
     // Extract verb if present (e.g., verb=GET)
     let verb;
     const verbMatch = rest.match(/verb=(\S+)/);
@@ -179,10 +162,6 @@ export function sanitizeDocumentName(name, snakeCaseFn) {
 export function resolveDocumentPath(doc, outputDir, deps) {
     const { getApiGroupFolder, getChannelServer, join, snakeCase } = deps;
     const sanitize = (name) => sanitizeDocumentName(name, snakeCase);
-    if (doc.type === 'policy') {
-        // policy → policies/{key}.xs (the key is validated, never snake_cased)
-        return { baseName: policyBaseName(doc.name), typeDir: join(outputDir, 'policies') };
-    }
     if (doc.type === 'workspace') {
         // workspace → workspace/{name}.xs
         return { baseName: sanitize(doc.name), typeDir: join(outputDir, 'workspace') };

package/dist/utils/multidoc-push.d.ts

@@ -1,4 +1,4 @@
-import { Command, Errors } from '@oclif/core';
+import { Command } from '@oclif/core';
 import { type BadIndex, type BadReference } from './reference-checker.js';
 export interface PushFlags {
     delete: boolean;
@@ -21,11 +21,6 @@ export interface PushTarget {
     buildPushUrl: (queryParams: URLSearchParams) => string;
     /** CLI version string */
     cliVersion: string;
-    /**
-     * Guidance for a refusal this target recognises, given the HTTP status and the server's payload.
-     * A preview or import refused that way stops with the message and this guidance appended.
-     */
-    explainRefusal?: (status: number, payload: unknown) => string | undefined;
     /** Instance origin URL (e.g., "https://x123-abcd-1234.xano.io") */
     instanceOrigin: string;
     /** Human-readable label for log messages (e.g., "sandbox environment", "workspace 40") */
@@ -59,56 +54,8 @@ export interface PushContext {
     inputDir: string;
     /** Optional knowledge sync config. Only workspace push sets this. */
     knowledge?: KnowledgeConfig;
-    /** Where progress and diagnostics go; defaults to the command's stdout. */
-    log?: (message: string) => void;
     verboseFetch: (url: string, options: RequestInit, verbose: boolean, authToken?: string) => Promise<Response>;
 }
-export interface DryRunSummary {
-    created: number;
-    deleted: number;
-    truncated: number;
-    unchanged: number;
-    updated: number;
-}
-export interface DryRunOperation {
-    action: string;
-    details: string;
-    name: string;
-    reason?: string;
-    type: string;
-}
-export interface DryRunResult {
-    operations: DryRunOperation[];
-    /** True when the sandbox currently holds a different source workspace than the one being pushed. */
-    source_workspace_mismatch?: boolean;
-    summary: Record<string, DryRunSummary>;
-    workspace_name?: string;
-}
-/** What a push did, for the calling command to report. */
-export interface PushResult {
-    knowledge: {
-        deleted: number;
-        imported: number;
-    };
-    preview: DryRunResult | null;
-    /** The multidoc import's response body; absent when no multidoc was imported. */
-    response?: Record<string, unknown>;
-    /** The documents the multidoc import carried. */
-    sent: Array<{
-        content: string;
-        filePath: string;
-    }>;
-    /** Why the push stopped before writing anything, when it did. */
-    stopped?: 'blocked' | 'cancelled' | 'dry-run' | 'no-changes';
-}
-/**
- * A push that failed after its multidoc import landed. The import is not rolled back, so the error
- * carries what it did for the calling command to report beside the failure.
- */
-export declare class FailedAfterImportError extends Errors.CLIError {
-    readonly imported: PushResult;
-    constructor(message: string, imported: PushResult);
-}
 /**
  * Filter document entries down to the ones the dry-run preview reports as changed,
  * used to send only the changed documents during a partial (non-`--sync`) push.
@@ -245,7 +192,7 @@ export declare function confirm(message: string): Promise<boolean>;
  * Execute a multidoc push with preview, validation, partial mode, and GUID sync.
  * Shared by both sandbox:push and workspace:push commands.
  */
-export declare function executePush(ctx: PushContext, target: PushTarget, flags: PushFlags): Promise<PushResult>;
+export declare function executePush(ctx: PushContext, target: PushTarget, flags: PushFlags): Promise<void>;
 /**
  * Turn a thrown fetch/network error into an actionable message.
  *