@xano/sdk 1.0.10 → 1.0.12

package/dist/{import-TXYVFYJS.js → import-RUBCGLCA.js}

@@ -1,11 +1,11 @@
 import {
   ImportHttpError,
   isSignatureRefusal
-} from "./chunk-VJTTTIIB.js";
-import "./chunk-TR7EOUQE.js";
+} from "./chunk-6QJORUHC.js";
+import "./chunk-DILYWJVP.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
-import "./chunk-C6KBZH7M.js";
+import "./chunk-D4VKPOD4.js";
 import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -16,4 +16,4 @@ export {
   ImportHttpError,
   isSignatureRefusal
 };
-//# sourceMappingURL=import-TXYVFYJS.js.map
+//# sourceMappingURL=import-RUBCGLCA.js.map

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { y as Condition, bB as TableDef, aQ as PathParams, x as Comparison, bq as SearchGroup, A as AddonDef, aN as OutputPath, aU as QualifiedCol, M as DbEval, bA as SortDirective, O as DbWhere, a2 as InferRow, aO as OutputRoot, a5 as InternalColsOf, aP as PagingEnvelopeField, k as AggregateRow, Q as EvalFields, aA as MicroserviceDef, g as AgentResultOf, a3 as InputDescriptor, F as FunctionDef, aX as QueryHandle } from './emit-D-a6JznN.js';
-export { a as AddonXdo, b as AdoptChange, c as AdoptResult, d as AgentDef, e as AgentHandle, f as AgentOutput, h as AgentSettingsXdo, i as AgentTriggerInputs, j as AgentXdo, l as AnthropicLlm, m as ApiGroupDef, n as ApiGroupXdo, o as AuthRef, B as Bundle, p as BundlePayload, q as BundleType, C as ChannelConversationDef, r as ChannelDeliveryDef, s as ChannelDeliveryGuarantee, t as ChannelPublishDef, u as ChannelPublishWho, v as ChannelRateLimitDef, w as ColumnDef, z as ContainerEnv, D as ContainerPort, E as ContainerResources, G as ContainerVolume, H as CorsConfig, I as CorsMode, J as DatabaseActions, K as DatabaseInputs, N as DbEvalFilter, P as ErrorInputs, R as ExceptionPolicy, S as FieldAccessor, T as GoogleGenAiLlm, U as HistoryInput, V as HostedFile, W as HostedFileAccess, Y as HttpVerb, Z as IndexDef, _ as IndexLang, $ as IndexOp, a0 as IndexType, a1 as IndexXdo, a4 as InputOptions, a6 as KnowledgeDef, a7 as KnowledgeDirSource, a8 as KnowledgeFileSource, a9 as KnowledgeMode, aa as KnowledgeType, ab as LlmPrompt, ac as LlmProvider, ad as LlmSettings, ae as LockEntry, af as LockExportContext, L as LockFile, ag as McpIcon, ah as McpIconMimeType, ai as McpOauth, aj as McpOauthEnvString, ak as McpOauthExternal, al as McpOauthHosted, am as McpOauthPreset, an as McpOauthXdo, ao as McpPathOptions, ap as McpPrimitiveEntry, aq as McpPrimitiveRef, ar as McpServerDef, as as McpServerHandle, at as McpServerTriggerInputs, au as McpServerXdo, av as MergeResult, aw as MessageDeliverTo, ax as MicroserviceChart, ay as MicroserviceConfig, az as MicroserviceContainer, aB as MicroserviceDeployment, aC as MicroserviceIngress, aD as MicroserviceIngressPath, aE as MicroserviceRegistryAuth, aF as MicroserviceVolume, aG as MicroserviceXdo, aH as MiddlewareAttach, aI as MiddlewareAttachEntry, aJ as MiddlewareDef, aK as MiddlewareXdo, aL as ObjectKind, aM as OpenAiLlm, aR as PayloadArrayKey, aS as PromptDef, aT as PromptXdo, aV as QueryDef, aW as QueryFilterName, aY as QueryResponseType, aZ as QueryXdo, a_ as RealtimeActions, a$ as RealtimeChannelActions, b0 as RealtimeChannelDef, b1 as RealtimeChannelHandle, b2 as RealtimeChannelRef, b3 as RealtimeChannelTriggerInputs, b4 as RealtimeChannelXdo, b5 as RealtimeClient, b6 as RealtimeInputs, b7 as RealtimeMessageDef, b8 as RealtimeMessageXdo, b9 as RealtimeServerActions, ba as RealtimeServerDef, bb as RealtimeServerHandle, bc as RealtimeServerRef, bd as RealtimeServerTriggerInputs, be as RealtimeServerXdo, bf as RealtimeUrlOptions, bg as RenameResult, bh as ResourceAnnotations, bi as ResourceDef, bj as ResourceXdo, bk as ResultStrategy, bl as RowOf, bm as ScheduleDef, bn as SchemaCols, bo as SchemaDef, bp as SearchComparison, br as SearchNode, bs as SearchOp, bt as SearchParamValue, bu as SearchParams, bv as SearchParamsMembers, bw as SeedFileSource, bx as SeedRow, by as SeedSource, bz as SortDir, bC as TableXdo, bD as TaskDef, bE as TaskXdo, bF as ToolAnnotations, bG as ToolDef, bH as ToolXdo, bI as ToolsetBaseDef, bJ as ToolsetBaseXdo, bK as ToolsetToolEntry, bL as ToolsetToolRef, bM as ToolsetType, bN as TriggerDef, bO as TriggerObjType, bP as TriggerXdo, bQ as UrlLike, bR as ViewDef, bS as ViewXdo, bT as WorkflowTestDef, bU as WorkflowTestXdo, bV as WorkspaceActions, bW as WorkspaceConfigDef, bX as WorkspaceConfigXdo, bY as WorkspaceHistoryDef, bZ as WorkspaceHistoryXdo, b_ as WorkspaceInputs, b$ as WorkspaceMiddlewareDef, c0 as WorkspaceMiddlewareXdo, X as Xano, c1 as XanoFreeLlm, c2 as addon, c3 as agent, c4 as agentTrigger, c5 as and, c6 as apiGroup, c7 as cmp, c8 as defineFunction, c9 as emit, ca as emitBundle, cb as errorTrigger, cc as expr, cd as hostedFile, ce as input, cf as isHostedFile, cg as knowledge, ch as knowledgeDir, ci as knowledgeFile, cj as mcpServer, ck as mcpServerTrigger, cl as microservice, cm as middleware, cn as mixed, co as or, cp as prompt, cq as query, cr as realtimeChannel, cs as realtimeChannelTrigger, ct as realtimeMessage, cu as realtimeServer, cv as realtimeServerTrigger, cw as realtimeTrigger, cx as resource, cy as seedFile, cz as table, cA as tableTrigger, cB as task, cC as toSearchParams, cD as tool, cE as typedEnv, cF as workflowTest, cG as workspace, cH as workspaceConfig, cI as workspaceTrigger } from './emit-D-a6JznN.js';
-import { n as FromFieldMap, S as Statement, H as StatementAnnotations, M as MaybeBodyBrand, b as BranchesBrand, J as StatementOptions, v as ObjectRef, a as AsShapeBrand, o as MemberUpdateBrand, w as Prettify, C as CatchBrand, B as BodyBrand, m as FoundBrand, A as AppendBrand, W as XanoFileRef, x as ProtoKeySafe, N as NoExtraKeys, X as XanoDbLink } from './raw-where-ZMLND6AG.js';
-export { c as BrandOpts, d as BrandType, e as BrandValue, f as ConstMethodOpts, D as DecimalMethod, E as EmailMethod, g as EnumDefault, F as FieldAccess, h as FieldDescriptor, i as FieldMap, j as FieldOptions, k as FieldOpts, l as FieldStyleType, I as IntMethod, p as MethodArg, q as MethodOpts, r as MethodSpec, s as MockEntry, t as MockMap, u as MockXdo, O as ObjectOf, P as PasswordMethod, R as RawBrandValue, y as ReadonlyMethods, z as ResponseDef, G as RowFromFieldMap, T as TableRefMethod, K as TextFormat, L as TextMethod, Q as TypeBrand, V as ValueOf, U as VectorMethod, Y as XanoFileUpload, Z as XanoGeoData, _ as XanoGeoPosition, $ as XanoGeoType, a0 as XanoGeoValue, a1 as annotate, a2 as f, a3 as statements } from './raw-where-ZMLND6AG.js';
-import { V as Value, N as NotObjMember, i as FilterXdo, j as FilteredValue, A as AuthValue, b as CaughtValue, a4 as CaughtShape, e as ConstValue, R as RefValue, I as InpValue, k as FunctionXdo } from './xdo-CxDr2Q1C.js';
-export { C as CacheXdo, a as CaughtField, c as ConditionalContext, d as ConditionalElifContext, E as ExprGroup, f as ExprNode, g as ExprOperand, h as ExprStatement, F as FieldXdo, H as HistoryXdo, l as InputXdo, L as ListBoundsXdo, M as MethodXdo, P as PersistedFunctionRow, Q as QUERY_AGGREGATE_NAMES, m as QUERY_FILTER_NAMES, n as QUERY_FILTER_SPECS, o as QueryFilter, p as QueryFilterResults, q as RegexValue, r as ResultItemXdo, S as StackItemXdo, s as StatementInputXdo, T as TAGS, t as TEST_EXPECT_TYPES, u as Tag, v as TaggedValue, w as TestDef, x as TestExpect, y as TestExpectType, z as TestXdo, B as auth, D as c, G as caught, J as col, K as env, O as expect, U as filter, W as inp, X as out, Y as qf, Z as ref, _ as resp, $ as setting, a0 as sys, a1 as test, a2 as toolset, a3 as withFilters } from './xdo-CxDr2Q1C.js';
-import { f as FilterResults, E as ElementResult, S as SameArrayResult, G as GroupedArrayResult, a3 as fl$1, O as OutputAuthored, Y as generated } from './store-xUySg-KR.js';
-export { A as AmbientBindings, d as Authored, e as Capturable, b as CaptureRecord, C as CaptureValue, F as FieldRule, I as IteratingBindings, g as LAMBDA_BINDINGS, h as LAMBDA_CODE_FILTERS, i as LAMBDA_GLOBALS, j as LAMBDA_MODULE_GLOBALS, k as LAMBDA_STATEMENTS, c as LambdaBindings, l as LambdaBody, L as LambdaOptions, a as LambdaSurface, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, p as ManifestValue, R as RawLambdaOptions, q as Route, r as StatementSpec, s as assertLambdaBody, t as bitwiseAnd, u as bitwiseOr, v as bitwiseXor, a4 as lam, w as mathAdd, x as mathDiv, y as mathMul, z as mathSub, B as objectEntries, D as objectKeys, H as objectValues, J as resetLockOverrides, K as seedLockOverrides, N as textAppend, P as textPrepend } from './store-xUySg-KR.js';
+import { y as Condition, bB as TableDef, aQ as PathParams, x as Comparison, bq as SearchGroup, A as AddonDef, aN as OutputPath, aU as QualifiedCol, M as DbEval, bA as SortDirective, O as DbWhere, a2 as InferRow, aO as OutputRoot, a5 as InternalColsOf, aP as PagingEnvelopeField, k as AggregateRow, Q as EvalFields, aA as MicroserviceDef, g as AgentResultOf, a3 as InputDescriptor, F as FunctionDef, aX as QueryHandle } from './emit-YLt3GfsZ.js';
+export { a as AddonXdo, b as AdoptChange, c as AdoptResult, d as AgentDef, e as AgentHandle, f as AgentOutput, h as AgentSettingsXdo, i as AgentTriggerInputs, j as AgentXdo, l as AnthropicLlm, m as ApiGroupDef, n as ApiGroupXdo, o as AuthRef, B as Bundle, p as BundlePayload, q as BundleType, C as ChannelConversationDef, r as ChannelDeliveryDef, s as ChannelDeliveryGuarantee, t as ChannelPublishDef, u as ChannelPublishWho, v as ChannelRateLimitDef, w as ColumnDef, z as ContainerEnv, D as ContainerPort, E as ContainerResources, G as ContainerVolume, H as CorsConfig, I as CorsMode, J as DatabaseActions, K as DatabaseInputs, N as DbEvalFilter, P as ErrorInputs, R as ExceptionPolicy, S as FieldAccessor, T as GoogleGenAiLlm, U as HistoryInput, V as HostedFile, W as HostedFileAccess, Y as HttpVerb, Z as IndexDef, _ as IndexLang, $ as IndexOp, a0 as IndexType, a1 as IndexXdo, a4 as InputOptions, a6 as KnowledgeDef, a7 as KnowledgeDirSource, a8 as KnowledgeFileSource, a9 as KnowledgeMode, aa as KnowledgeType, ab as LlmPrompt, ac as LlmProvider, ad as LlmSettings, ae as LockEntry, af as LockExportContext, L as LockFile, ag as McpIcon, ah as McpIconMimeType, ai as McpOauth, aj as McpOauthEnvString, ak as McpOauthExternal, al as McpOauthHosted, am as McpOauthPreset, an as McpOauthXdo, ao as McpPathOptions, ap as McpPrimitiveEntry, aq as McpPrimitiveRef, ar as McpServerDef, as as McpServerHandle, at as McpServerTriggerInputs, au as McpServerXdo, av as MergeResult, aw as MessageDeliverTo, ax as MicroserviceChart, ay as MicroserviceConfig, az as MicroserviceContainer, aB as MicroserviceDeployment, aC as MicroserviceIngress, aD as MicroserviceIngressPath, aE as MicroserviceRegistryAuth, aF as MicroserviceVolume, aG as MicroserviceXdo, aH as MiddlewareAttach, aI as MiddlewareAttachEntry, aJ as MiddlewareDef, aK as MiddlewareXdo, aL as ObjectKind, aM as OpenAiLlm, aR as PayloadArrayKey, aS as PromptDef, aT as PromptXdo, aV as QueryDef, aW as QueryFilterName, aY as QueryResponseType, aZ as QueryXdo, a_ as RealtimeActions, a$ as RealtimeChannelActions, b0 as RealtimeChannelDef, b1 as RealtimeChannelHandle, b2 as RealtimeChannelRef, b3 as RealtimeChannelTriggerInputs, b4 as RealtimeChannelXdo, b5 as RealtimeClient, b6 as RealtimeInputs, b7 as RealtimeMessageDef, b8 as RealtimeMessageXdo, b9 as RealtimeServerActions, ba as RealtimeServerDef, bb as RealtimeServerHandle, bc as RealtimeServerRef, bd as RealtimeServerTriggerInputs, be as RealtimeServerXdo, bf as RealtimeUrlOptions, bg as RenameResult, bh as ResourceAnnotations, bi as ResourceDef, bj as ResourceXdo, bk as ResultStrategy, bl as RowOf, bm as ScheduleDef, bn as SchemaCols, bo as SchemaDef, bp as SearchComparison, br as SearchNode, bs as SearchOp, bt as SearchParamValue, bu as SearchParams, bv as SearchParamsMembers, bw as SeedFileSource, bx as SeedRow, by as SeedSource, bz as SortDir, bC as TableXdo, bD as TaskDef, bE as TaskXdo, bF as ToolAnnotations, bG as ToolDef, bH as ToolXdo, bI as ToolsetBaseDef, bJ as ToolsetBaseXdo, bK as ToolsetToolEntry, bL as ToolsetToolRef, bM as ToolsetType, bN as TriggerDef, bO as TriggerObjType, bP as TriggerXdo, bQ as UrlLike, bR as ViewDef, bS as ViewXdo, bT as WorkflowTestDef, bU as WorkflowTestXdo, bV as WorkspaceActions, bW as WorkspaceConfigDef, bX as WorkspaceConfigXdo, bY as WorkspaceHistoryDef, bZ as WorkspaceHistoryXdo, b_ as WorkspaceInputs, b$ as WorkspaceMiddlewareDef, c0 as WorkspaceMiddlewareXdo, X as Xano, c1 as XanoFreeLlm, c2 as addon, c3 as agent, c4 as agentTrigger, c5 as and, c6 as apiGroup, c7 as cmp, c8 as defineFunction, c9 as emit, ca as emitBundle, cb as errorTrigger, cc as expr, cd as hostedFile, ce as input, cf as isHostedFile, cg as knowledge, ch as knowledgeDir, ci as knowledgeFile, cj as mcpServer, ck as mcpServerTrigger, cl as microservice, cm as middleware, cn as mixed, co as or, cp as prompt, cq as query, cr as realtimeChannel, cs as realtimeChannelTrigger, ct as realtimeMessage, cu as realtimeServer, cv as realtimeServerTrigger, cw as realtimeTrigger, cx as resource, cy as seedFile, cz as table, cA as tableTrigger, cB as task, cC as toSearchParams, cD as tool, cE as typedEnv, cF as workflowTest, cG as workspace, cH as workspaceConfig, cI as workspaceTrigger } from './emit-YLt3GfsZ.js';
+import { n as FromFieldMap, S as Statement, H as StatementAnnotations, M as MaybeBodyBrand, b as BranchesBrand, J as StatementOptions, v as ObjectRef, a as AsShapeBrand, o as MemberUpdateBrand, w as Prettify, C as CatchBrand, B as BodyBrand, m as FoundBrand, A as AppendBrand, W as XanoFileRef, x as ProtoKeySafe, N as NoExtraKeys, X as XanoDbLink } from './raw-where-gWGr-E4t.js';
+export { c as BrandOpts, d as BrandType, e as BrandValue, f as ConstMethodOpts, D as DecimalMethod, E as EmailMethod, g as EnumDefault, F as FieldAccess, h as FieldDescriptor, i as FieldMap, j as FieldOptions, k as FieldOpts, l as FieldStyleType, I as IntMethod, p as MethodArg, q as MethodOpts, r as MethodSpec, s as MockEntry, t as MockMap, u as MockXdo, O as ObjectOf, P as PasswordMethod, R as RawBrandValue, y as ReadonlyMethods, z as ResponseDef, G as RowFromFieldMap, T as TableRefMethod, K as TextFormat, L as TextMethod, Q as TypeBrand, V as ValueOf, U as VectorMethod, Y as XanoFileUpload, Z as XanoGeoData, _ as XanoGeoPosition, $ as XanoGeoType, a0 as XanoGeoValue, a1 as annotate, a2 as f, a3 as statements } from './raw-where-gWGr-E4t.js';
+import { V as Value, N as NotObjMember, i as FilterXdo, j as FilteredValue, A as AuthValue, b as CaughtValue, a4 as CaughtShape, e as ConstValue, R as RefValue, I as InpValue, k as FunctionXdo } from './xdo-D4OwfF2J.js';
+export { C as CacheXdo, a as CaughtField, c as ConditionalContext, d as ConditionalElifContext, E as ExprGroup, f as ExprNode, g as ExprOperand, h as ExprStatement, F as FieldXdo, H as HistoryXdo, l as InputXdo, L as ListBoundsXdo, M as MethodXdo, P as PersistedFunctionRow, Q as QUERY_AGGREGATE_NAMES, m as QUERY_FILTER_NAMES, n as QUERY_FILTER_SPECS, o as QueryFilter, p as QueryFilterResults, q as RegexValue, r as ResultItemXdo, S as StackItemXdo, s as StatementInputXdo, T as TAGS, t as TEST_EXPECT_TYPES, u as Tag, v as TaggedValue, w as TestDef, x as TestExpect, y as TestExpectType, z as TestXdo, B as auth, D as c, G as caught, J as col, K as env, O as expect, U as filter, W as inp, X as out, Y as qf, Z as ref, _ as resp, $ as setting, a0 as sys, a1 as test, a2 as toolset, a3 as withFilters } from './xdo-D4OwfF2J.js';
+import { f as FilterResults, E as ElementResult, S as SameArrayResult, G as GroupedArrayResult, a3 as fl$1, O as OutputAuthored, Y as generated } from './store-BM7SQcUt.js';
+export { A as AmbientBindings, d as Authored, e as Capturable, b as CaptureRecord, C as CaptureValue, F as FieldRule, I as IteratingBindings, g as LAMBDA_BINDINGS, h as LAMBDA_CODE_FILTERS, i as LAMBDA_GLOBALS, j as LAMBDA_MODULE_GLOBALS, k as LAMBDA_STATEMENTS, c as LambdaBindings, l as LambdaBody, L as LambdaOptions, a as LambdaSurface, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, p as ManifestValue, R as RawLambdaOptions, q as Route, r as StatementSpec, s as assertLambdaBody, t as bitwiseAnd, u as bitwiseOr, v as bitwiseXor, a4 as lam, w as mathAdd, x as mathDiv, y as mathMul, z as mathSub, B as objectEntries, D as objectKeys, H as objectValues, J as resetLockOverrides, K as seedLockOverrides, N as textAppend, P as textPrepend } from './store-BM7SQcUt.js';
 
 /**
  * `InferInput<Q>` — the request-payload TS type for a query (or function) def's

package/dist/index.js

@@ -7,15 +7,15 @@ import {
   fileUrl,
   fl,
   qf
-} from "./chunk-EOIJ7MVW.js";
+} from "./chunk-T3HNISBN.js";
 import {
   TEST_EXPECT_TYPES,
   expect,
   respond
-} from "./chunk-EKTIGGFO.js";
+} from "./chunk-WZXEQUIM.js";
 import {
   compile
-} from "./chunk-DSD2NNTX.js";
+} from "./chunk-HUEFVPYW.js";
 import {
   actionCall,
   actionPackageCall,
@@ -94,24 +94,24 @@ import {
   workflowTest,
   workflowTestCall,
   workspaceTrigger
-} from "./chunk-T3ZVNOJC.js";
+} from "./chunk-ONNSFD73.js";
 import {
   query,
   test,
   toSearchParams
-} from "./chunk-OHTHG3LL.js";
+} from "./chunk-6LECAG3Y.js";
 import {
   typedEnv,
   workspaceConfig
-} from "./chunk-6JAEMMZ7.js";
+} from "./chunk-IFXPHVPY.js";
 import {
   Xano,
   workspace
-} from "./chunk-6ZFJEJXZ.js";
+} from "./chunk-KICERNAP.js";
 import "./chunk-45ZUMF4E.js";
 import {
   obj
-} from "./chunk-7KPKDHHI.js";
+} from "./chunk-76SBT7KS.js";
 import "./chunk-7FIMUFBP.js";
 import {
   apiGroup,
@@ -137,10 +137,10 @@ import {
   guard,
   ignored,
   microservice
-} from "./chunk-6BOKCTCM.js";
+} from "./chunk-NZ7ML6LG.js";
 import "./chunk-ICK36EGF.js";
-import "./chunk-BEXZ4XRV.js";
-import "./chunk-ETAZIGNT.js";
+import "./chunk-AXNX4NWN.js";
+import "./chunk-F2NFNYCB.js";
 import "./chunk-GSGDWJB5.js";
 import {
   and,
@@ -171,11 +171,11 @@ import {
   annotate,
   statements
 } from "./chunk-A2AOUBJS.js";
-import "./chunk-4XHAT7C5.js";
+import "./chunk-HJZUI2ZU.js";
 import {
   f,
   input
-} from "./chunk-S56YBYMN.js";
+} from "./chunk-VIRFG3WG.js";
 import {
   LAMBDA_BINDINGS,
   LAMBDA_CODE_FILTERS,
@@ -198,7 +198,7 @@ import {
   sys,
   toolset,
   withFilters
-} from "./chunk-UVF45BVU.js";
+} from "./chunk-Z6N5N4MN.js";
 import "./chunk-VAX3UZOY.js";
 import "./chunk-LL6ED5IB.js";
 import {

package/dist/{init-command-CTWDNYAZ.js → init-command-RWXBXJPG.js}

@@ -18,58 +18,58 @@ import {
   templateVarsFor,
   workflowMoveTarget,
   workflowPlacementNote
-} from "./chunk-DW47JVXI.js";
-import "./chunk-O376UAZS.js";
-import "./chunk-HQPL34O6.js";
-import "./chunk-IIAF7VKN.js";
-import "./chunk-45A3AF2B.js";
-import "./chunk-XQO4A4Q4.js";
-import "./chunk-XUSL2Z5C.js";
-import "./chunk-JE7BL5IF.js";
-import "./chunk-PBK257CI.js";
-import "./chunk-HU6D6PYT.js";
-import "./chunk-7JKNWDYN.js";
-import "./chunk-NIANORYB.js";
-import "./chunk-VJTTTIIB.js";
-import "./chunk-CTKBGPM6.js";
-import "./chunk-2ND7WS3E.js";
+} from "./chunk-DH32QXVI.js";
+import "./chunk-U4DSFCH5.js";
+import "./chunk-XFQAA2SU.js";
+import "./chunk-LDSZPRGV.js";
+import "./chunk-AMHAGMJM.js";
+import "./chunk-K6BQPFRS.js";
+import "./chunk-5RSPMSSQ.js";
+import "./chunk-RNVGXJJZ.js";
+import "./chunk-POZ6V4MU.js";
+import "./chunk-WXLZCBPG.js";
+import "./chunk-H7GMGZHI.js";
+import "./chunk-6IOBEJWA.js";
+import "./chunk-6QJORUHC.js";
+import "./chunk-ANBIMJPM.js";
+import "./chunk-7XOQXZ6W.js";
 import "./chunk-5Y5HWQ2P.js";
 import "./chunk-F3IA3YWI.js";
 import "./chunk-LCOCRJ4K.js";
-import "./chunk-NFSUGVDY.js";
-import "./chunk-YE7MHW45.js";
+import "./chunk-M7DIIJPW.js";
+import "./chunk-7NNLRNXE.js";
 import "./chunk-2MNLRIOX.js";
-import "./chunk-PFW7WFAT.js";
+import "./chunk-XVOODRNK.js";
 import "./chunk-CJDPSCMX.js";
-import "./chunk-GDAWYDHY.js";
-import "./chunk-VD7YTLWL.js";
-import "./chunk-FZGK4VM5.js";
-import "./chunk-S42TFTM5.js";
+import "./chunk-4GSXWOBS.js";
+import "./chunk-DZUNF7IH.js";
+import "./chunk-4COXXP55.js";
+import "./chunk-OBRMA2VK.js";
 import "./chunk-ZYJP6BOO.js";
 import "./chunk-QO6BVGS5.js";
-import "./chunk-ULUUOUQX.js";
-import "./chunk-TG65NWUR.js";
-import "./chunk-C2GHFADU.js";
+import "./chunk-AUYXBKGR.js";
+import "./chunk-3ZVSOZZC.js";
+import "./chunk-N3XSXGAL.js";
 import "./chunk-622HUCZT.js";
-import "./chunk-6S263KTM.js";
-import "./chunk-IB6SKACE.js";
+import "./chunk-A3CT26GX.js";
+import "./chunk-P5JF3U65.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-77IFWJ53.js";
-import "./chunk-JSPFDMTV.js";
-import "./chunk-U4JD5NMP.js";
-import "./chunk-B3NH5UBI.js";
+import "./chunk-MFEO3EHL.js";
+import "./chunk-3XZ44H2E.js";
+import "./chunk-SAKWZG5I.js";
+import "./chunk-JKGRQW6D.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-6PTITS3M.js";
+import "./chunk-C4TZP5PQ.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-TR7EOUQE.js";
+import "./chunk-DILYWJVP.js";
 import "./chunk-4KHEMC32.js";
-import "./chunk-GN5SQMIQ.js";
+import "./chunk-DFCYAEBE.js";
 import "./chunk-MFWF2NZJ.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-QL3ZJWGG.js";
+import "./chunk-H5FAYLCR.js";
 import "./chunk-WAVNUTMT.js";
-import "./chunk-5QOV52V4.js";
+import "./chunk-I2AVVARA.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
@@ -79,18 +79,18 @@ import "./chunk-C2SAVXAB.js";
 import "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
 import "./chunk-7REDHC4N.js";
-import "./chunk-C6KBZH7M.js";
-import "./chunk-T3ZVNOJC.js";
-import "./chunk-OHTHG3LL.js";
-import "./chunk-6JAEMMZ7.js";
-import "./chunk-6ZFJEJXZ.js";
+import "./chunk-D4VKPOD4.js";
+import "./chunk-ONNSFD73.js";
+import "./chunk-6LECAG3Y.js";
+import "./chunk-IFXPHVPY.js";
+import "./chunk-KICERNAP.js";
 import "./chunk-45ZUMF4E.js";
-import "./chunk-7KPKDHHI.js";
+import "./chunk-76SBT7KS.js";
 import "./chunk-7FIMUFBP.js";
-import "./chunk-6BOKCTCM.js";
+import "./chunk-NZ7ML6LG.js";
 import "./chunk-ICK36EGF.js";
-import "./chunk-BEXZ4XRV.js";
-import "./chunk-ETAZIGNT.js";
+import "./chunk-AXNX4NWN.js";
+import "./chunk-F2NFNYCB.js";
 import "./chunk-GSGDWJB5.js";
 import "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
@@ -108,9 +108,9 @@ import "./chunk-ZY55DO5P.js";
 import "./chunk-A2AOUBJS.js";
 import "./chunk-TFFGOFVZ.js";
 import "./chunk-EHP3WPEG.js";
-import "./chunk-4XHAT7C5.js";
-import "./chunk-S56YBYMN.js";
-import "./chunk-UVF45BVU.js";
+import "./chunk-HJZUI2ZU.js";
+import "./chunk-VIRFG3WG.js";
+import "./chunk-Z6N5N4MN.js";
 import "./chunk-VAX3UZOY.js";
 import "./chunk-LL6ED5IB.js";
 import "./chunk-4BW2SG2N.js";
@@ -140,4 +140,4 @@ export {
   workflowMoveTarget,
   workflowPlacementNote
 };
-//# sourceMappingURL=init-command-CTWDNYAZ.js.map
+//# sourceMappingURL=init-command-RWXBXJPG.js.map

package/dist/{init-modules-FJITJ6IB.js → init-modules-LFLW2PQC.js}

@@ -12,21 +12,21 @@ import {
   renderImports,
   renderRegisterCall,
   renderXanoIndexWithModules
-} from "./chunk-U4JD5NMP.js";
-import "./chunk-B3NH5UBI.js";
+} from "./chunk-SAKWZG5I.js";
+import "./chunk-JKGRQW6D.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-6PTITS3M.js";
+import "./chunk-C4TZP5PQ.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-TR7EOUQE.js";
+import "./chunk-DILYWJVP.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-QL3ZJWGG.js";
+import "./chunk-H5FAYLCR.js";
 import "./chunk-WAVNUTMT.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
-import "./chunk-C6KBZH7M.js";
+import "./chunk-D4VKPOD4.js";
 import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -48,4 +48,4 @@ export {
   renderRegisterCall,
   renderXanoIndexWithModules
 };
-//# sourceMappingURL=init-modules-FJITJ6IB.js.map
+//# sourceMappingURL=init-modules-LFLW2PQC.js.map

package/dist/{init-web-MSXDARRF.js → init-web-OGKACAOC.js}

@@ -6,7 +6,7 @@ import {
 import {
   detail,
   step
-} from "./chunk-C6KBZH7M.js";
+} from "./chunk-D4VKPOD4.js";
 import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -39,4 +39,4 @@ export {
   CONFIGURATOR_PACKAGE,
   runInitWebCommand
 };
-//# sourceMappingURL=init-web-MSXDARRF.js.map
+//# sourceMappingURL=init-web-OGKACAOC.js.map

package/dist/internal.d.ts

@@ -1,9 +1,9 @@
-export { a6 as FIELD_METHODS, a7 as REFERENCEABLE_KINDS, a8 as deriveGuid, a9 as encodeResponse, aa as encodeStatement, ab as getStatementFactory, ac as isRegisteredStatement, ad as resolveRef, ae as toNestedFields } from './raw-where-ZMLND6AG.js';
-import { r as StatementSpec } from './store-xUySg-KR.js';
-export { Q as FILTER_NAMES, T as GENERATED_STATEMENT_NAMES, U as LLMS_TXT, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, V as TOTAL_OBJECT_KINDS, W as buildManifest, X as encodeFromSpec, Y as generatedStatements, Z as getLockedCanonical, _ as getLockedGuid, $ as isLockSeeded, a0 as registerSpec, a1 as renderDocs, a2 as renderLlmsTxt } from './store-xUySg-KR.js';
-import { F as FunctionDef, aL as ObjectKind } from './emit-D-a6JznN.js';
-export { b as AdoptChange, c as AdoptResult, B as Bundle, p as BundlePayload, q as BundleType, cJ as KNOWLEDGE_DIR, cK as KNOWLEDGE_FILE, cL as LOCK_PAYLOAD_KEYS, cM as LOCK_VERSION, ae as LockEntry, af as LockExportContext, L as LockFile, av as MergeResult, cN as PAYLOAD_ARRAY_KEYS, aR as PayloadArrayKey, cO as QUERY_EXPRESSION_FILTERS, bg as RenameResult, cP as VECTOR_FILTERS, cQ as WORKSPACE_KEY, cR as addonKind, cS as adoptFromBundle, cT as agentKind, cU as apiGroupKind, cV as buildBundle, cW as buildMiddlewareBlock, cX as buildWorkspaceHistory, cY as calcSignatureJson, cZ as channelPathParams, c_ as createLockContext, c$ as declaredServicePorts, d0 as emptyLock, d1 as encodeAddon, d2 as encodeAgent, d3 as encodeApiGroup, d4 as encodeColumn, d5 as encodeContainerHistory, d6 as encodeHistory, d7 as encodeIndex, d8 as encodeKnowledge, d9 as encodeMcpServer, da as encodeMicroservice, db as encodeMiddleware, dc as encodeMiddlewareEntry, dd as encodeMiddlewareList, de as encodeObject, df as encodeQuery, dg as encodeRealtimeChannel, dh as encodeRealtimeMessage, di as encodeRealtimeServer, dj as encodeSchedule, dk as encodeTable, dl as encodeTask, dm as encodeTool, dn as encodeToolRefs, dp as encodeToolsetBase, dq as encodeTrigger, dr as encodeView, ds as encodeWorkflowTest, dt as encodeWorkspaceConfig, du as getKind, dv as isKnowledgeDirSource, dw as isKnowledgeFileSource, dx as isQueryExpressionFilter, dy as isRegisteredKind, dz as knowledgeKind, dA as lockKey, dB as mcpServerKind, dC as mergeObserved, dD as microserviceKind, dE as middlewareKind, dF as mintCanonical, dG as parseLock, dH as phpJsonEncode, dI as queryKind, dJ as realtimeChannelGuid, dK as realtimeChannelKind, dL as realtimeMessageGuid, dM as realtimeMessageKind, dN as realtimeServerKind, dO as recordObserved, dP as registerKind, dQ as registeredKinds, dR as renameLockEntry, dS as resolveAuthRef, dT as resolvePayloadKey, dU as resolveRealtimeServerCanonical, dV as resolveToolsetCanonical, dW as serializeBundle, dX as serializeLock, dY as tableKind, dZ as taskKind, d_ as toolKind, d$ as triggerKind, e0 as validateLockModel, e1 as workflowTestKind, e2 as workspaceKind } from './emit-D-a6JznN.js';
-import { k as FunctionXdo } from './xdo-CxDr2Q1C.js';
+export { a6 as FIELD_METHODS, a7 as REFERENCEABLE_KINDS, a8 as deriveGuid, a9 as encodeResponse, aa as encodeStatement, ab as getStatementFactory, ac as isRegisteredStatement, ad as resolveRef, ae as toNestedFields } from './raw-where-gWGr-E4t.js';
+import { r as StatementSpec } from './store-BM7SQcUt.js';
+export { Q as FILTER_NAMES, T as GENERATED_STATEMENT_NAMES, U as LLMS_TXT, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, V as TOTAL_OBJECT_KINDS, W as buildManifest, X as encodeFromSpec, Y as generatedStatements, Z as getLockedCanonical, _ as getLockedGuid, $ as isLockSeeded, a0 as registerSpec, a1 as renderDocs, a2 as renderLlmsTxt } from './store-BM7SQcUt.js';
+import { F as FunctionDef, aL as ObjectKind } from './emit-YLt3GfsZ.js';
+export { b as AdoptChange, c as AdoptResult, B as Bundle, p as BundlePayload, q as BundleType, cJ as KNOWLEDGE_DIR, cK as KNOWLEDGE_FILE, cL as LOCK_PAYLOAD_KEYS, cM as LOCK_VERSION, ae as LockEntry, af as LockExportContext, L as LockFile, av as MergeResult, cN as PAYLOAD_ARRAY_KEYS, aR as PayloadArrayKey, cO as QUERY_EXPRESSION_FILTERS, bg as RenameResult, cP as VECTOR_FILTERS, cQ as WORKSPACE_KEY, cR as addonKind, cS as adoptFromBundle, cT as agentKind, cU as apiGroupKind, cV as buildBundle, cW as buildMiddlewareBlock, cX as buildWorkspaceHistory, cY as calcSignatureJson, cZ as channelPathParams, c_ as createLockContext, c$ as declaredServicePorts, d0 as emptyLock, d1 as encodeAddon, d2 as encodeAgent, d3 as encodeApiGroup, d4 as encodeColumn, d5 as encodeContainerHistory, d6 as encodeHistory, d7 as encodeIndex, d8 as encodeKnowledge, d9 as encodeMcpServer, da as encodeMicroservice, db as encodeMiddleware, dc as encodeMiddlewareEntry, dd as encodeMiddlewareList, de as encodeObject, df as encodeQuery, dg as encodeRealtimeChannel, dh as encodeRealtimeMessage, di as encodeRealtimeServer, dj as encodeSchedule, dk as encodeTable, dl as encodeTask, dm as encodeTool, dn as encodeToolRefs, dp as encodeToolsetBase, dq as encodeTrigger, dr as encodeView, ds as encodeWorkflowTest, dt as encodeWorkspaceConfig, du as getKind, dv as isKnowledgeDirSource, dw as isKnowledgeFileSource, dx as isQueryExpressionFilter, dy as isRegisteredKind, dz as knowledgeKind, dA as lockKey, dB as mcpServerKind, dC as mergeObserved, dD as microserviceKind, dE as middlewareKind, dF as mintCanonical, dG as parseLock, dH as phpJsonEncode, dI as queryKind, dJ as realtimeChannelGuid, dK as realtimeChannelKind, dL as realtimeMessageGuid, dM as realtimeMessageKind, dN as realtimeServerKind, dO as recordObserved, dP as registerKind, dQ as registeredKinds, dR as renameLockEntry, dS as resolveAuthRef, dT as resolvePayloadKey, dU as resolveRealtimeServerCanonical, dV as resolveToolsetCanonical, dW as serializeBundle, dX as serializeLock, dY as tableKind, dZ as taskKind, d_ as toolKind, d$ as triggerKind, e0 as validateLockModel, e1 as workflowTestKind, e2 as workspaceKind } from './emit-YLt3GfsZ.js';
+import { k as FunctionXdo } from './xdo-D4OwfF2J.js';
 
 /**
  * The declarative statement catalog: one StatementSpec per cleanly

package/dist/internal.js

@@ -19,8 +19,8 @@ import {
   selectorValues,
   sourceSpellings,
   visibleFlags
-} from "./chunk-C6KBZH7M.js";
-import "./chunk-DSD2NNTX.js";
+} from "./chunk-D4VKPOD4.js";
+import "./chunk-HUEFVPYW.js";
 import {
   GENERATED_STATEMENT_NAMES,
   HEADER_DUPLICATES,
@@ -64,21 +64,21 @@ import {
   toolKind,
   triggerKind,
   workflowTestKind
-} from "./chunk-T3ZVNOJC.js";
+} from "./chunk-ONNSFD73.js";
 import {
   encodeQuery,
   encodeResponse,
   queryKind
-} from "./chunk-OHTHG3LL.js";
+} from "./chunk-6LECAG3Y.js";
 import {
   encodeWorkspaceConfig,
   workspaceKind
-} from "./chunk-6JAEMMZ7.js";
-import "./chunk-6ZFJEJXZ.js";
+} from "./chunk-IFXPHVPY.js";
+import "./chunk-KICERNAP.js";
 import {
   resolveAuthRef
 } from "./chunk-45ZUMF4E.js";
-import "./chunk-7KPKDHHI.js";
+import "./chunk-76SBT7KS.js";
 import {
   PAYLOAD_ARRAY_KEYS,
   buildBundle,
@@ -101,12 +101,12 @@ import {
   isQueryExpressionFilter,
   microserviceKind,
   registerSpec
-} from "./chunk-6BOKCTCM.js";
+} from "./chunk-NZ7ML6LG.js";
 import "./chunk-ICK36EGF.js";
 import {
   FILTER_NAMES,
   FILTER_SPECS
-} from "./chunk-BEXZ4XRV.js";
+} from "./chunk-AXNX4NWN.js";
 import {
   buildMiddlewareBlock,
   buildWorkspaceHistory,
@@ -114,7 +114,7 @@ import {
   encodeHistory,
   encodeMiddlewareEntry,
   encodeMiddlewareList
-} from "./chunk-ETAZIGNT.js";
+} from "./chunk-F2NFNYCB.js";
 import "./chunk-GSGDWJB5.js";
 import {
   encodeColumn,
@@ -169,16 +169,16 @@ import {
   TOTAL_STATEMENTS,
   sPathOf
 } from "./chunk-Q7DGTQ5G.js";
-import "./chunk-4XHAT7C5.js";
+import "./chunk-HJZUI2ZU.js";
 import {
   toNestedFields
-} from "./chunk-S56YBYMN.js";
+} from "./chunk-VIRFG3WG.js";
 import {
   LAMBDA_BINDINGS,
   LAMBDA_GLOBALS,
   LAMBDA_MODULE_GLOBALS,
   TAGS
-} from "./chunk-UVF45BVU.js";
+} from "./chunk-Z6N5N4MN.js";
 import "./chunk-VAX3UZOY.js";
 import {
   REFERENCEABLE_KINDS,
@@ -413,7 +413,7 @@ var VALUE_CONSTRUCTORS = [
   },
   { name: "col", signature: "(name: string) => Value", description: 'Reference a table column \u2192 tag "col".' },
   { name: "auth", signature: "(path?: string) => Value", description: 'Reference the authenticated identity (auth("id") \u2192 $auth.id) \u2192 tag "auth".' },
-  { name: "caught", signature: '(path?: "code" | "message" | "name" | "result") => Value', description: 'Read the caught error inside an s.try_catch CATCH arm \u2192 tag "trycatch". Valid ONLY there \u2014 it reads empty in the try/finally arms and outside the statement. Those four fields are all the engine binds (result is the attached payload); bare caught() is the whole error record. \u26A0 For an ENGINE-raised exception only `code` and `name` are populated; for an `s.throw`, `message` is the fixed string "Throw Error Statement" and your text is in `result`. So `caught("name")` is useful in both cases and `caught("message")` in NEITHER.' },
+  { name: "caught", signature: '(path?: "code" | "message" | "name" | "result") => Value', description: 'Read the caught error inside an s.try_catch CATCH arm \u2192 tag "trycatch". Valid ONLY there \u2014 it reads empty in the try/finally arms and outside the statement. Those four fields are all the engine binds; bare caught() is the whole error record. `code` is the error type: `ERROR_FATAL` for an engine error, a precondition\'s `error_type` (`ERROR_CODE_ACCESS_DENIED`, \u2026), `ERROR_CODE_THROWN_ERROR` for `s.throw`. `message` is the error text (a precondition\'s `error`, the engine\'s, an LLM provider\'s) EXCEPT for `s.throw`, where it is the fixed "Throw Error Statement" and your value is in `result`. `name` is `s.throw`\'s `name` (empty without one), else a label (`Exception`, `Access Denied`). \u26A0 An `s.ai.agent.run` provider failure binds `result: { name: "AI_APICallError", statusCode, isRetryable, data }`; branch a fallback on `withFilters(caught("result"), fl.get("statusCode"))` (401: the key was refused). The path takes only the four names; reach deeper with `fl.get`.' },
   { name: "toolset", signature: '(path: "token" | "params" | `params.${string}`) => Value', description: `Read a toolset-scoped binding inside a tool \u2192 tag "toolset". The engine binds two: token (the calling URL's token, null when absent) and params (its parameters, as an object); a dotted params.<key> reads one parameter out of that object. Bound only while a tool runs under its toolset \u2014 anywhere else it reads empty.` },
   { name: "env", signature: "(name: string) => Value", description: 'Read a WORKSPACE environment variable (set via workspaceConfig({ env }) or the dashboard) \u2192 `$env.NAME`. Compiles to tag "setting" with the plain name. env("remote_ip") reads a user var named remote_ip, not the caller IP \u2014 use sys.remoteIp() for that. A name that does not exist resolves to NULL rather than erroring, so a typo deploys clean and fails downstream of the value: prefer typedEnv(config), which turns the names that config declares into properties (E.STRIPE_KEY), and export() warns stack.env-undeclared on any env() or bare setting() outside the declared set once a config declares env at all.' },
   { name: "setting", signature: "(name: string) => Value", description: 'Reference a workspace setting \u2192 tag "setting". Built-in system vars are $-prefixed settings, e.g. setting("$remote_ip"); prefer the typed sys.* accessors.' },
@@ -1526,7 +1526,8 @@ function renderSections(m) {
     "  Fix: `xanosdk routes <entry> --emit xano/routes.gen.ts` (`paths` is an accepted alias) \u2014 verbs, paths, and sockets as",
     '  plain data importing NOTHING, still compile-checked: `routePath("GET blog/{slug}", { slug })`',
     '  `channelPath("rooms/{room_id}", { room_id })`, `socketUrl("chat", baseUrl)` (tenant base',
-    "  URLs lifted to `wss://h/ws/<tenant>:<canonical>`). A rename is a type error, not a 404.",
+    '  URLs lifted to `wss://h/ws/<tenant>:<canonical>`), `mcpUrl("notes_mcp", baseUrl)` (an MCP',
+    "  server's address to show a user or hand a client; browser JS cannot call it). A rename is a type error, not a 404.",
     "- **Request types without the def.** `routes.gen.ts` also exports types-only `RouteInputs`,",
     "  `ChannelInputs`, `MessageInputs` (and `MessageName`), keyed like `ROUTES`, `CHANNELS`, and",
     '  `"<channel key> <message name>"`: `type NewListing = RouteInputs["POST listings"]`. A',
@@ -1605,6 +1606,8 @@ function renderSections(m) {
     '- A lambda returns error TEXT with HTTP 200 (`Could not resolve "node:crypto"`, an undefined-binding message) \u2014 the body threw; use the preloaded globals, the surface\'s bindings, and `capture`. `llms/lambda.md`.',
     "- `Unable to locate request.` (404) on an endpoint that deployed \u2014 a lowercase verb, a `.` in the name, or a CORS `mode` typo that dropped the whole API group. `llms/kinds-core.md`.",
     '- A browser call fails on a missing `access-control-allow-origin` while deploy looks fine \u2014 CORS `mode: "custom"` with `"*"` or an unmatched origin. `llms/kinds-core.md`.',
+    "- 403 `Forbidden: Origin not allowed` from an MCP server URL \u2014 the request came from a browser; MCP endpoints refuse every `Origin`, so call them server-side. `llms/kinds-agent-mcp.md`.",
+    "- `ERROR_FATAL` `The free model is not available in this process.` \u2014 an `xano-free` agent run on the Xano Engine on this machine; it runs only on Xano's cloud. `llms/kinds-agent-mcp.md`.",
     "- A websocket is closed right after the handshake \u2014 a refused `connect` gate: an empty/falsy return, a crash, or a gating trigger with no `response`. `llms/triggers.md`.",
     "- `to_throw failed - response is ok` around an auth-refused call \u2014 `ERROR_CODE_ACCESS_DENIED` carries no message; the auth gate is not reachable from a workflow test. `llms/tests.md`.",
     "- Output reads `Hi [object Object]` \u2014 a tagged value inside a JS template literal; compose at runtime with `withFilters` + `fl.concat`. `llms.txt`.",
@@ -1640,6 +1643,7 @@ function renderSections(m) {
   const kindsAgentMcp = [
     "- An MCP server serves THREE primitives, and each reaches the client differently: a `tool()` is an action the MODEL calls (it may write); a `resource()` is read-only context the client APPLICATION lists and attaches by `uri` (reference docs, a schema, one record through a `{variable}` template); a `prompt()` is a message template with arguments the USER picks by name. Context a session opens with is a `resource()`; a workflow a user starts by name is a `prompt()`; data the model must fetch on its own mid-task stays a `tool()`, since a client shows the model only the resources attached to the conversation. Register each kind (`registerTools`/`registerPrompts`/`registerResources`) and list it on the server.",
     "- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, prompts?, resources?, oauth?, llm?, output? })` \u2014 an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint \u2014 `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<\u2026>/stream` path THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral. A TENANT rides AFTER the prefix (`/x2/mcp/tenant/<tenant>/<canonical>/<token>/stream`), not as a base-URL segment: `getUrl` LIFTS a `/tenant/<name>` out of the base and re-places it there, so `getUrl(window.XANO_HOST)` is correct as-is; concatenating them by hand builds an unregistered route that 404s. Pass `{ tenant }` when the base URL cannot name it (a tenant on its own domain).",
+    "  - \u26A0 Refuses any request carrying a browser `Origin`, preflight too: 403, JSON-RPC `-32000` `Forbidden: Origin not allowed`. One with no `Origin` (curl, a server, an MCP client) is served; the bundle cannot admit an origin, so call it server-side, never from browser JS.",
     '  - `tools?`: a `ToolsetToolEntry[]`. Pass the `tool()` HANDLES directly (`tools: [saveNote]`); use the `{ tool, enabled?, auth?, type?, resourceUri?, toolMeta? }` wrapper when an entry needs more. `type: "resource"` (+ a required `resourceUri`) is the LEGACY way to publish a tool as an MCP resource \u2014 author a `resource()` and list it in `resources` instead; `toolMeta` is extra metadata on a tool entry. The two payload fields are per-type and supplying the other one is refused, because the engine stores it against neither. `auth` names an auth **table** (a `table({ auth: true })` handle or its name) \u2014 per-tool, and the only gate there is. \u26A0 It is also what gives the tool a CALLER, on an `agent()` exactly as on an MCP server. `auth()` inside a tool whose entry names no table does NOT return null: the call answers a normal result carrying `{"code":"ERROR_FATAL","message":""}`, so the model reads a successful tool result and reports success while nothing is written. A caller token does not rescue it \u2014 the ENTRY supplies identity. Spell it `{ tool: saveNote, auth: users }`; `export()` warns. An entry naming no tool THROWS at export; a deliberate raw `id: 0` warns and carries through.',
     '  - `prompts?` / `resources?`: `prompt()` / `resource()` HANDLES (or names), or a `{ prompt, enabled?, auth? }` / `{ resource, enabled?, auth? }` wrapper. `auth` names the auth table and is what gives the stack a caller: a prompt/resource reading `auth()` behind an entry with none answers every `prompts/get` / `resources/read` with `-32603 "Access Denied"` (`export()` warns `toolset.primitive-reads-auth-ungated`). Listing one target twice THROWS; two resources with one `uri` on one server fail `export()` (`mcp.resource-uri-duplicate`). MCP-server only \u2014 `agent()` takes tools only.',
     "  - `history?` is the server tier for its tools, prompts AND resources alike; an object's own `history` wins. The workspace tier (`workspaceConfig({ history })`) has `prompt` and `resource` keys, both default on.",
@@ -1660,6 +1664,7 @@ function renderSections(m) {
     "- `s.mcp.oauth.revoke({ mcp_server, user_id? | grant_id? | all?, as? })` \u2014 end hosted sign-ins on a server: EXACTLY ONE of `user_id`, `grant_id`, `all: c.bool(true)`, else `export()` fails (`mcp.oauth-revoke-target`). Binds `{ revoked }`.",
     "- `agent({ name, guid?, description?, docs?, enabled?, canonical?, tags?, history?, llm, tools?, output? })` \u2014 an LLM orchestrator. No top-level `instructions`/`prompt`/`spec` \u2014 the prompt lives under `llm`. Invoke from a stack with `s.ai.agent.run({ agent, args })`.",
     '  - `llm` (REQUIRED): typed provider settings, a discriminated union on `type` (`"xano-free" | "anthropic" | "openai" | "google-genai"`). Shared fields: `systemPrompt?`, `maxSteps?` (default `5`), and `prompt?` XOR `messages?` (genuinely exclusive: both is a type error and throws \u2014 the engine stores ONE `prompt_type`, so one would be dropped); plus provider fields (`apiKey?`, `model?`, `temperature?`, `reasoningEffort?`, \u2026). String fields accept Twig placeholders \u2014 `{{ $args.x }}` for run inputs (the `args` of `s.ai.agent.run`), `{{ $env.NAME }}` for env vars.',
+    "  - `xano-free` runs only on Xano's cloud: on the Xano Engine on this machine a run fails `ERROR_FATAL` `The free model is not available in this process.` \u2014 use a keyed provider there.",
     "  - `tools?`: same `ToolsetToolEntry[]` as `mcpServer` \u2014 bare `tool()` handles, or a `{ tool, enabled?, auth? }` wrapper when one needs `enabled`/`auth`. A tool reading `auth()` MUST use the wrapper naming the auth table \u2014 a bare handle runs it with no caller (see `mcpServer`'s `tools?`).",
     '  - `output?`: `{ schema: Record<string, input.*>, enabled? }` \u2014 structured-output schema. `schema` is a named-field record authored with the `input.*` catalog, exactly like a `defineFunction`/`query` `input:` map (the stored `structuredOutputsSchema` is the same wire shape as function inputs). e.g. `output: { schema: { priority: input.enum(["low","high"]), summary: input.text() } }`. When you pass the agent *handle* to `s.ai.agent.run({ agent })`, `.result` is typed straight from this schema \u2014 no `resultShape` witness needed (the shape is declared once). `resultShape` remains only to override that, or to type an agent referenced by bare name.',
     '  - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, allowToolExecution: c.bool(true), as: "run" })`) \u2014 it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var("summary", ref("run.result.summary"))`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` \u2014 raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. `.toolCalls` is the FINAL step\'s calls only (often `[]`); every call is a `.steps[].content[]` entry of `type: "tool-call"`. \u26A0 An agent with tools needs `allowToolExecution: c.bool(true)` on the run: unset, its tools are OFF and it answers without them (warns `stack.agent-tools-off`).',
@@ -1992,11 +1997,17 @@ function renderSections(m) {
     const note = Object.hasOwn(FILTER_NOTES, fl.name) ? FILTER_NOTES[fl.name] : void 0;
     filters.push(`- \`${fl.fl}(${sig})${ret}\`${note ? ` \u2014 ${note}` : ""}`);
   }
-  const zeroArg = m.filters.filter((fl) => !fl.args?.length && !fl.variadic).map((fl) => fl.name);
+  const zeroArgByGroup = /* @__PURE__ */ new Map();
+  for (const fl of m.filters.filter((fl2) => !fl2.args?.length && !fl2.variadic)) {
+    const group = fl.group ?? "other";
+    zeroArgByGroup.set(group, [...zeroArgByGroup.get(group) ?? [], fl.name]);
+  }
+  const zeroArg = [...zeroArgByGroup.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([group, names]) => `${group}: ${names.join(", ")}`);
   const variadic = m.filters.filter((fl) => fl.variadic).map((fl) => fl.name);
   filters.push(
     "",
-    `Zero-argument filters \u2014 call as \`fl.<name>()\`; an argument is a compile error: ${zeroArg.join(", ")}.`,
+    `Zero-argument filters, by operand type \u2014 call as \`fl.<name>()\`; an argument is a compile error. ${zeroArg.join("; ")}.`,
+    "`fl.reverse()` reverses a list only: on a text value it answers the text UNCHANGED, with no error.",
     "",
     `Variadic filters \u2014 they take arguments, but no declared list, so the count is not checked: ${variadic.join(", ")}.`,
     ""