@xano/sdk 1.0.10 → 1.0.12

package/dist/{workspace-command-Z7BUA6A5.js → workspace-command-QSJHX5RS.js}

@@ -1,114 +1,114 @@
 import {
   printMicroserviceSection,
   readMicroservices
-} from "./chunk-R4NOZBOY.js";
+} from "./chunk-UFFIU57H.js";
 import {
   fetchWorkspaceBundle
-} from "./chunk-BYYVOX2P.js";
-import "./chunk-DW47JVXI.js";
-import "./chunk-KSGITXNE.js";
-import "./chunk-QTMXJQZN.js";
-import "./chunk-O376UAZS.js";
-import "./chunk-6YOH2L3G.js";
-import "./chunk-5DLDRUCQ.js";
+} from "./chunk-EC5P4W2D.js";
+import "./chunk-DH32QXVI.js";
+import "./chunk-OK7CBTFW.js";
+import "./chunk-BXVNRUDB.js";
+import "./chunk-U4DSFCH5.js";
+import "./chunk-JFPLHK6Y.js";
+import "./chunk-ETMP7SJ3.js";
 import {
   confirm
-} from "./chunk-HQPL34O6.js";
-import "./chunk-6NEV2PEC.js";
+} from "./chunk-XFQAA2SU.js";
+import "./chunk-IEDQT4Z3.js";
 import {
   listTables
-} from "./chunk-YP76ZCQ5.js";
-import "./chunk-R3LANPQZ.js";
-import "./chunk-QC3MKMDK.js";
+} from "./chunk-3RZ4UJWV.js";
+import "./chunk-VA4JK4TW.js";
+import "./chunk-R7XZW4SB.js";
 import "./chunk-3DRXWLJ5.js";
 import "./chunk-X4DVXBFY.js";
 import {
   listBranches
-} from "./chunk-75MKIQON.js";
+} from "./chunk-PCHIHVX6.js";
 import {
   reachableWorkspaces,
   refuseUnreachableWorkspace,
   unreachableWorkspaceMessage
-} from "./chunk-ECGRCTVI.js";
-import "./chunk-3TWQDGQY.js";
-import "./chunk-OBJ7FQDX.js";
+} from "./chunk-2PAVJ3QD.js";
+import "./chunk-74NRFGL7.js";
+import "./chunk-RZABQ4YH.js";
 import "./chunk-2TFRR6JV.js";
 import {
   resolveOutputTarget,
   secretsPhrase,
   writeExportFile
-} from "./chunk-IW6E3LES.js";
+} from "./chunk-JPAUQ7MK.js";
 import {
   secretsCarriedBy
-} from "./chunk-I53OTC3O.js";
-import "./chunk-IIAF7VKN.js";
+} from "./chunk-JHQAVWHW.js";
+import "./chunk-LDSZPRGV.js";
 import {
   assertBundleFile,
   assertBundleInput,
   assertEntryFile,
   assertValueFiles,
   loadBundleText
-} from "./chunk-45A3AF2B.js";
-import "./chunk-XQO4A4Q4.js";
-import "./chunk-XUSL2Z5C.js";
-import "./chunk-JE7BL5IF.js";
-import "./chunk-PBK257CI.js";
-import "./chunk-HU6D6PYT.js";
-import "./chunk-7JKNWDYN.js";
-import "./chunk-NIANORYB.js";
-import "./chunk-VJTTTIIB.js";
+} from "./chunk-AMHAGMJM.js";
+import "./chunk-K6BQPFRS.js";
+import "./chunk-5RSPMSSQ.js";
+import "./chunk-RNVGXJJZ.js";
+import "./chunk-POZ6V4MU.js";
+import "./chunk-WXLZCBPG.js";
+import "./chunk-H7GMGZHI.js";
+import "./chunk-6IOBEJWA.js";
+import "./chunk-6QJORUHC.js";
 import {
   getAccessToken
-} from "./chunk-CTKBGPM6.js";
-import "./chunk-2ND7WS3E.js";
+} from "./chunk-ANBIMJPM.js";
+import "./chunk-7XOQXZ6W.js";
 import "./chunk-5Y5HWQ2P.js";
 import "./chunk-F3IA3YWI.js";
 import "./chunk-LCOCRJ4K.js";
-import "./chunk-NFSUGVDY.js";
-import "./chunk-YE7MHW45.js";
+import "./chunk-M7DIIJPW.js";
+import "./chunk-7NNLRNXE.js";
 import "./chunk-2MNLRIOX.js";
-import "./chunk-PFW7WFAT.js";
+import "./chunk-XVOODRNK.js";
 import "./chunk-CJDPSCMX.js";
-import "./chunk-GDAWYDHY.js";
-import "./chunk-VD7YTLWL.js";
-import "./chunk-FZGK4VM5.js";
-import "./chunk-S42TFTM5.js";
+import "./chunk-4GSXWOBS.js";
+import "./chunk-DZUNF7IH.js";
+import "./chunk-4COXXP55.js";
+import "./chunk-OBRMA2VK.js";
 import "./chunk-ZYJP6BOO.js";
 import "./chunk-QO6BVGS5.js";
-import "./chunk-ULUUOUQX.js";
-import "./chunk-TG65NWUR.js";
+import "./chunk-AUYXBKGR.js";
+import "./chunk-3ZVSOZZC.js";
 import {
   yesRerun
-} from "./chunk-C2GHFADU.js";
+} from "./chunk-N3XSXGAL.js";
 import "./chunk-622HUCZT.js";
 import {
   contextFlags
-} from "./chunk-6S263KTM.js";
-import "./chunk-IB6SKACE.js";
+} from "./chunk-A3CT26GX.js";
+import "./chunk-P5JF3U65.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-77IFWJ53.js";
-import "./chunk-JSPFDMTV.js";
-import "./chunk-U4JD5NMP.js";
-import "./chunk-B3NH5UBI.js";
+import "./chunk-MFEO3EHL.js";
+import "./chunk-3XZ44H2E.js";
+import "./chunk-SAKWZG5I.js";
+import "./chunk-JKGRQW6D.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-6PTITS3M.js";
+import "./chunk-C4TZP5PQ.js";
 import "./chunk-DXUICABI.js";
 import {
   bindingFor,
   fetchOrExplain,
   httpFailure,
   parseJsonAnswer
-} from "./chunk-TR7EOUQE.js";
+} from "./chunk-DILYWJVP.js";
 import {
   describeWrite
 } from "./chunk-4KHEMC32.js";
-import "./chunk-GN5SQMIQ.js";
+import "./chunk-DFCYAEBE.js";
 import "./chunk-MFWF2NZJ.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-QL3ZJWGG.js";
+import "./chunk-H5FAYLCR.js";
 import "./chunk-WAVNUTMT.js";
-import "./chunk-5QOV52V4.js";
+import "./chunk-I2AVVARA.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
@@ -116,7 +116,7 @@ import "./chunk-X2NL4KUO.js";
 import {
   writeData
 } from "./chunk-4GPIOIAC.js";
-import "./chunk-EKTIGGFO.js";
+import "./chunk-WZXEQUIM.js";
 import "./chunk-E763QI3G.js";
 import "./chunk-C2SAVXAB.js";
 import "./chunk-IZI3SYXH.js";
@@ -143,18 +143,18 @@ import {
   warn,
   writeJson,
   writeTargetPayload
-} from "./chunk-C6KBZH7M.js";
-import "./chunk-T3ZVNOJC.js";
-import "./chunk-OHTHG3LL.js";
-import "./chunk-6JAEMMZ7.js";
-import "./chunk-6ZFJEJXZ.js";
+} from "./chunk-D4VKPOD4.js";
+import "./chunk-ONNSFD73.js";
+import "./chunk-6LECAG3Y.js";
+import "./chunk-IFXPHVPY.js";
+import "./chunk-KICERNAP.js";
 import "./chunk-45ZUMF4E.js";
-import "./chunk-7KPKDHHI.js";
+import "./chunk-76SBT7KS.js";
 import "./chunk-7FIMUFBP.js";
-import "./chunk-6BOKCTCM.js";
+import "./chunk-NZ7ML6LG.js";
 import "./chunk-ICK36EGF.js";
-import "./chunk-BEXZ4XRV.js";
-import "./chunk-ETAZIGNT.js";
+import "./chunk-AXNX4NWN.js";
+import "./chunk-F2NFNYCB.js";
 import "./chunk-GSGDWJB5.js";
 import "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
@@ -173,13 +173,13 @@ import "./chunk-UDZX2ZL4.js";
 import "./chunk-ZY55DO5P.js";
 import "./chunk-A2AOUBJS.js";
 import "./chunk-TFFGOFVZ.js";
-import "./chunk-3P35HT64.js";
+import "./chunk-IDOVZLPK.js";
 import "./chunk-EHP3WPEG.js";
-import "./chunk-LTPF25L2.js";
+import "./chunk-W2QFR3ZJ.js";
 import "./chunk-Q7DGTQ5G.js";
-import "./chunk-4XHAT7C5.js";
-import "./chunk-S56YBYMN.js";
-import "./chunk-UVF45BVU.js";
+import "./chunk-HJZUI2ZU.js";
+import "./chunk-VIRFG3WG.js";
+import "./chunk-Z6N5N4MN.js";
 import "./chunk-VAX3UZOY.js";
 import "./chunk-LL6ED5IB.js";
 import "./chunk-4BW2SG2N.js";
@@ -203,7 +203,7 @@ async function runWorkspaceCommand(args) {
     case "reset-tables":
       return runResetTables(args);
     case "branch": {
-      const { runBranchCommand } = await import("./branch-commands-IJ7SK5AM.js");
+      const { runBranchCommand } = await import("./branch-commands-Q46PCVHU.js");
       return runBranchCommand(args);
     }
     default:
@@ -232,7 +232,7 @@ async function runDetails(args) {
   const auth = await getAccessToken(args);
   const workspaceId = auth.workspaceId;
   const all = await fetchWorkspaces(auth).catch(async (err) => {
-    const { unansweredRead } = await import("./source-resolve-WHXNMVJT.js");
+    const { unansweredRead } = await import("./source-resolve-HSJSVKUC.js");
     throw unansweredRead(err, "read the workspace list", "workspace");
   });
   const match = all.find((w) => w.id === workspaceId);
@@ -292,7 +292,7 @@ async function runExport(args) {
 var EXIT_DIFF_MISMATCH = 2;
 async function runDiff(args) {
   if (args.file === void 0 && args.bundle === void 0) {
-    const { resolveProjectEntry } = await import("./deploy-source-ITSAHJW7.js");
+    const { resolveProjectEntry } = await import("./deploy-source-CJHEVGOS.js");
     const entry = resolveProjectEntry(process.cwd());
     if (entry !== void 0) args = { ...args, file: entry };
   }
@@ -305,11 +305,11 @@ async function runDiff(args) {
   try {
     live = await fetchWorkspaceBundle(auth, args.branch);
   } catch (err) {
-    const { unansweredRead } = await import("./source-resolve-WHXNMVJT.js");
+    const { unansweredRead } = await import("./source-resolve-HSJSVKUC.js");
     throw unansweredRead(err, "read the workspace to compare", "workspace");
   }
-  const { SETTINGS_LABEL } = await import("./live-diff-CGTGOH3S.js");
-  const { codePinnedCanonicals, releaseCanonicalLock } = await import("./release-command-QUKHOKIY.js");
+  const { SETTINGS_LABEL } = await import("./live-diff-HARRGFV4.js");
+  const { codePinnedCanonicals, releaseCanonicalLock } = await import("./release-command-E54WUJKB.js");
   const pinned = codePinnedCanonicals(local.bundle, releaseCanonicalLock(args), args.file !== void 0);
   const listed = await listBranches(auth, { baseUrl: auth.instance, workspaceId: auth.workspaceId }).catch(
     () => void 0
@@ -317,9 +317,9 @@ async function runDiff(args) {
   const liveLabel = listed?.find((b) => b.live)?.label;
   const comparedLabel = args.branch ?? liveLabel;
   const comparedIsLive = args.branch === void 0 ? true : liveLabel === void 0 ? null : args.branch === liveLabel;
-  const { landingLockPath } = await import("./landing-record-ZB4OJQF2.js");
-  const { readSyncBaseline, storedBranchLabel } = await import("./sync-record-U65BCPSP.js");
-  const { directedComparison } = await import("./sync-baseline-3CDL4PKT.js");
+  const { landingLockPath } = await import("./landing-record-QJV7KNS4.js");
+  const { readSyncBaseline, storedBranchLabel } = await import("./sync-record-ILWS44DG.js");
+  const { directedComparison } = await import("./sync-baseline-JGAAOS25.js");
   const syncLabel = storedBranchLabel(listed, args.branch);
   const baseline = syncLabel === void 0 ? void 0 : readSyncBaseline(landingLockPath(args, args.file !== void 0 ? { entryFile: args.file } : {}), {
     instance: auth.instance,
@@ -434,7 +434,7 @@ Pass the entry file: \`xanosdk workspace reset-tables ./index.ts --table <guid>
   const local = await loadBundleText(args.write === true && !willRefuse ? args : { ...args, lockReadOnly: true }, target, {
     withSeed: true
   });
-  const { seedRowsByTableGuid } = await import("./seed-KEPIS7UZ.js");
+  const { seedRowsByTableGuid } = await import("./seed-5YLQRT2D.js");
   const seeds = seedRowsByTableGuid(local.content);
   const declared = projectTables(local.bundle);
   const unknown = guids.filter((guid) => !declared.some((t) => t.guid === guid));
@@ -471,7 +471,7 @@ ${declared.map((t) => `  ${t.guid}  ${t.name}${seeds.has(t.guid) ? "  (seeded)"
     );
   }
   const destination = credentialWriteTarget(auth);
-  const { countTableRows } = await import("./table-E5YTK7QX.js");
+  const { countTableRows } = await import("./table-V3LTQUY6.js");
   const planned = await Promise.all(
     guids.map(async (guid) => {
       const table = byGuid.get(guid);
@@ -510,7 +510,7 @@ ${declared.map((t) => `  ${t.guid}  ${t.name}${seeds.has(t.guid) ? "  (seeded)"
       return;
     }
   }
-  const { truncateTable, insertTableRows } = await import("./table-E5YTK7QX.js");
+  const { truncateTable, insertTableRows } = await import("./table-V3LTQUY6.js");
   const done = [];
   for (const t of planned) {
     step(`Resetting ${t.name}`);
@@ -560,4 +560,4 @@ export {
   EXIT_DIFF_MISMATCH,
   runWorkspaceCommand
 };
-//# sourceMappingURL=workspace-command-Z7BUA6A5.js.map
+//# sourceMappingURL=workspace-command-QSJHX5RS.js.map

package/dist/{workspace-env-KFWW2G7G.js → workspace-env-M7RYVJB3.js}

@@ -14,19 +14,19 @@ import {
   renderWorkspaceEnvFile,
   valueProblem,
   workspaceEnvPathIn
-} from "./chunk-XUSL2Z5C.js";
-import "./chunk-77IFWJ53.js";
-import "./chunk-JSPFDMTV.js";
-import "./chunk-U4JD5NMP.js";
-import "./chunk-B3NH5UBI.js";
+} from "./chunk-5RSPMSSQ.js";
+import "./chunk-MFEO3EHL.js";
+import "./chunk-3XZ44H2E.js";
+import "./chunk-SAKWZG5I.js";
+import "./chunk-JKGRQW6D.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-6PTITS3M.js";
+import "./chunk-C4TZP5PQ.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-TR7EOUQE.js";
+import "./chunk-DILYWJVP.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-QL3ZJWGG.js";
+import "./chunk-H5FAYLCR.js";
 import "./chunk-WAVNUTMT.js";
 import "./chunk-LLNZGEFK.js";
 import {
@@ -36,7 +36,7 @@ import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
-import "./chunk-C6KBZH7M.js";
+import "./chunk-D4VKPOD4.js";
 import {
   isRepresentableName,
   safeNames
@@ -68,4 +68,4 @@ export {
   valueProblem,
   workspaceEnvPathIn
 };
-//# sourceMappingURL=workspace-env-KFWW2G7G.js.map
+//# sourceMappingURL=workspace-env-M7RYVJB3.js.map

package/dist/{workspace-export-UHY22VBI.js → workspace-export-GHMUSX2P.js}

@@ -1,13 +1,13 @@
 import {
   assertBranchReadSupported,
   exportWorkspaceBundle
-} from "./chunk-QC3MKMDK.js";
+} from "./chunk-R7XZW4SB.js";
 import "./chunk-3DRXWLJ5.js";
 import "./chunk-X4DVXBFY.js";
-import "./chunk-TR7EOUQE.js";
+import "./chunk-DILYWJVP.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
-import "./chunk-C6KBZH7M.js";
+import "./chunk-D4VKPOD4.js";
 import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -18,4 +18,4 @@ export {
   assertBranchReadSupported,
   exportWorkspaceBundle
 };
-//# sourceMappingURL=workspace-export-UHY22VBI.js.map
+//# sourceMappingURL=workspace-export-GHMUSX2P.js.map

package/dist/{writable-2A6MBSFD.js → writable-Y6CE2CGK.js}

@@ -5,9 +5,9 @@ import {
   unreadableError,
   unwritableBlocker,
   unwritableError
-} from "./chunk-ULUUOUQX.js";
+} from "./chunk-AUYXBKGR.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-C6KBZH7M.js";
+import "./chunk-D4VKPOD4.js";
 import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -22,4 +22,4 @@ export {
   unwritableBlocker,
   unwritableError
 };
-//# sourceMappingURL=writable-2A6MBSFD.js.map
+//# sourceMappingURL=writable-Y6CE2CGK.js.map

package/dist/{xano-6T6L7TTI.js → xano-2A2GT7EH.js}

@@ -3,14 +3,14 @@ import {
   Xano,
   standaloneDefKind,
   workspace
-} from "./chunk-6ZFJEJXZ.js";
+} from "./chunk-KICERNAP.js";
 import "./chunk-45ZUMF4E.js";
-import "./chunk-7KPKDHHI.js";
+import "./chunk-76SBT7KS.js";
 import "./chunk-7FIMUFBP.js";
-import "./chunk-6BOKCTCM.js";
+import "./chunk-NZ7ML6LG.js";
 import "./chunk-ICK36EGF.js";
-import "./chunk-BEXZ4XRV.js";
-import "./chunk-ETAZIGNT.js";
+import "./chunk-AXNX4NWN.js";
+import "./chunk-F2NFNYCB.js";
 import "./chunk-GSGDWJB5.js";
 import "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
@@ -25,7 +25,7 @@ import "./chunk-5ZSO4T2G.js";
 import "./chunk-VQPDATQT.js";
 import "./chunk-ZY55DO5P.js";
 import "./chunk-A2AOUBJS.js";
-import "./chunk-UVF45BVU.js";
+import "./chunk-Z6N5N4MN.js";
 import "./chunk-VAX3UZOY.js";
 import "./chunk-LL6ED5IB.js";
 import "./chunk-4BW2SG2N.js";
@@ -40,4 +40,4 @@ export {
   standaloneDefKind,
   workspace
 };
-//# sourceMappingURL=xano-6T6L7TTI.js.map
+//# sourceMappingURL=xano-2A2GT7EH.js.map

package/dist/{xanosdk-import-FUS3ZGGQ.js → xanosdk-import-4TLNYFKC.js}

@@ -13,15 +13,15 @@ import {
   resetXanoSdkImportDetection,
   withDefaultBranchPointer,
   xanosdkImport
-} from "./chunk-FDZ2ANSS.js";
+} from "./chunk-UZ55F3UK.js";
 import "./chunk-3DRXWLJ5.js";
 import "./chunk-X4DVXBFY.js";
-import "./chunk-VJTTTIIB.js";
-import "./chunk-TR7EOUQE.js";
+import "./chunk-6QJORUHC.js";
+import "./chunk-DILYWJVP.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
-import "./chunk-C6KBZH7M.js";
+import "./chunk-D4VKPOD4.js";
 import "./chunk-7FIMUFBP.js";
 import "./chunk-H2V3N23D.js";
 import "./chunk-3JDU4VRL.js";
@@ -53,4 +53,4 @@ export {
   withDefaultBranchPointer,
   xanosdkImport
 };
-//# sourceMappingURL=xanosdk-import-FUS3ZGGQ.js.map
+//# sourceMappingURL=xanosdk-import-4TLNYFKC.js.map

package/dist/{xanosdk-project-NM2J5YFK.js → xanosdk-project-4NH6332J.js}

@@ -3,29 +3,29 @@ import {
   enterProjectRoot,
   isProjectDir,
   projectDirFrom
-} from "./chunk-NIANORYB.js";
+} from "./chunk-6IOBEJWA.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-77IFWJ53.js";
-import "./chunk-JSPFDMTV.js";
-import "./chunk-U4JD5NMP.js";
-import "./chunk-B3NH5UBI.js";
+import "./chunk-MFEO3EHL.js";
+import "./chunk-3XZ44H2E.js";
+import "./chunk-SAKWZG5I.js";
+import "./chunk-JKGRQW6D.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-6PTITS3M.js";
+import "./chunk-C4TZP5PQ.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-TR7EOUQE.js";
+import "./chunk-DILYWJVP.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-QL3ZJWGG.js";
+import "./chunk-H5FAYLCR.js";
 import "./chunk-WAVNUTMT.js";
-import "./chunk-5QOV52V4.js";
+import "./chunk-I2AVVARA.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
-import "./chunk-C6KBZH7M.js";
+import "./chunk-D4VKPOD4.js";
 import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -39,4 +39,4 @@ export {
   isProjectDir,
   projectDirFrom
 };
-//# sourceMappingURL=xanosdk-project-NM2J5YFK.js.map
+//# sourceMappingURL=xanosdk-project-4NH6332J.js.map

package/dist/{xdo-CxDr2Q1C.d.ts → xdo-D4OwfF2J.d.ts}

@@ -685,10 +685,16 @@ type CaughtField = "code" | "message" | "name" | "result";
  *
  * Only valid inside the catch arm; the engine binds these for that scope alone
  * and they read empty anywhere else. The four fields are all the engine sets:
- * - `name` — the error name/type (for a thrown error statement, its message)
- * - `message` — the human-readable message (`"Throw Error Statement"` for a throw)
- * - `code` — the mapped HTTP-ish error code
- * - `result` — the error payload, when one was attached
+ * - `name` — `s.throw`'s `name` (empty without one), else a label
+ *   (`"Exception"`, `"Access Denied"`)
+ * - `message` — the error text: a precondition's `error`, the engine's, or an
+ *   LLM provider's (`"Throw Error Statement"` for a throw)
+ * - `code` — the error type (`ERROR_FATAL`, a precondition's `error_type`,
+ *   `ERROR_CODE_THROWN_ERROR`)
+ * - `result` — the attached payload: `s.throw`'s value, or for an
+ *   `s.ai.agent.run` provider failure `{ name: "AI_APICallError", statusCode,
+ *   isRetryable, data }`. The path takes only these four names; read deeper
+ *   with `withFilters(caught("result"), fl.get("statusCode"))`.
  *
  * e.g. `s.try_catch({ try: [...], catch: [s.debug_log(caught("message"))] })`.
  * Bare `caught()` is the whole error record.

package/guides/cli.md

@@ -26,7 +26,7 @@ xanosdk marketplace remove <toolchain-package>     # uninstall it and drop what
 xanosdk export ./xano/index.ts              # bundle to stdout
 xanosdk export ./xano/index.ts --out ws.json
 xanosdk compile ./xano/functions/get-user.ts  # a single function's JSON
-xanosdk routes ./xano/index.ts              # each query's verb + resolved api:<canonical>/<name> (`paths` is an alias)
+xanosdk routes ./xano/index.ts              # every route, realtime socket/channel and MCP server address (`paths` is an alias)
 
 xanosdk export ./xano/index.ts --strict     # CI: fail the build on any warning, don't just print it
 xanosdk export ./xano/index.ts --no-lock    # build with no xano.lock (one is written by default; refused once one exists)

package/guides/codes.md

@@ -229,9 +229,10 @@ Printed as `! …` on stderr, and as `{ code, message }` in a `--json` document'
 | `release.seed-rows-not-decoded` | … carries seed rows for …, and a decoded tree carries no rows — they are not in …/. |
 | `release.transfer-cancelled` | Transfer cancelled — nothing was imported. |
 | `routes.cli-skew` | This CLI is another version than the project's installed SDK, so it left the route table for the installed CLI to render. |
+| `routes.mcp-unresolved` | An MCP server whose canonical URL token resolves nowhere is left out of the route table (or listing). |
 | `routes.module-failed` | A toolchain module could not generate its section of `routes.gen.ts`; the rest was refreshed and its previous block, if any, was kept. |
 | `routes.not-written` | The route table (`routes.gen.ts`) was not written this run; the line says why and what writes it. |
-| `routes.realtime-unresolved` | …: leaving out … — … — whose canonical URL token resolves nowhere, along with their channels. |
+| `routes.realtime-unresolved` | A realtime server whose canonical URL token resolves nowhere is left out of the route table (or listing), along with its channels. |
 | `secrets.cleartext-export` | … carries … in cleartext — written owner-only (0600); do not commit it. |
 | `secrets.cleartext-stdout` | The export carries … in cleartext — written to stdout, where no file permission protects it; do not commit or log it. |
 | `secrets.doc-token-written` | Documentation tokens: wrote … to `…` — …. |

package/guides/typed-frontend.md

@@ -238,6 +238,20 @@ const ws = new WebSocket(socketUrl("chat", XANO_HOST), token);
 ws.send(JSON.stringify({ action: "join", channel: channelPath("rooms/{room_id}", { room_id }) }));
 ```
 
+MCP servers are there too: `mcpUrl(server, baseUrl)` is the equivalent of
+`mcpServer().getUrl()`, with the same `/tenant/<name>` lift and the same refusal of an
+already-resolved URL. It's an address to show a user or hand an MCP client. The endpoint
+refuses any request carrying a browser `Origin`, so page JS can't call it directly:
+
+```ts
+import { mcpUrl } from "../xano/routes.gen";
+
+const connectUrl = mcpUrl("notes_mcp", XANO_HOST); // https://host/x2/mcp/<canonical>/mcp/stream
+```
+
+Run `xanosdk routes ./xano/index.ts` without `--emit` to see every address the file carries:
+each route, socket, channel and MCP server, with the call that builds it.
+
 **Request types come from the same file.** It exports four types-only maps, keyed exactly
 like the runtime tables they sit beside, so a frontend types what it sends without importing a
 def at all:

package/llms/client.md

@@ -14,7 +14,8 @@ Importing a def into a browser bundle or a Node script — for `getPath()`, `get
   Fix: `xanosdk routes <entry> --emit xano/routes.gen.ts` (`paths` is an accepted alias) — verbs, paths, and sockets as
   plain data importing NOTHING, still compile-checked: `routePath("GET blog/{slug}", { slug })`
   `channelPath("rooms/{room_id}", { room_id })`, `socketUrl("chat", baseUrl)` (tenant base
-  URLs lifted to `wss://h/ws/<tenant>:<canonical>`). A rename is a type error, not a 404.
+  URLs lifted to `wss://h/ws/<tenant>:<canonical>`), `mcpUrl("notes_mcp", baseUrl)` (an MCP
+  server's address to show a user or hand a client; browser JS cannot call it). A rename is a type error, not a 404.
 - **Request types without the def.** `routes.gen.ts` also exports types-only `RouteInputs`,
   `ChannelInputs`, `MessageInputs` (and `MessageName`), keyed like `ROUTES`, `CHANNELS`, and
   `"<channel key> <message name>"`: `type NewListing = RouteInputs["POST listings"]`. A

package/llms/errors.md

@@ -23,6 +23,8 @@
 - A lambda returns error TEXT with HTTP 200 (`Could not resolve "node:crypto"`, an undefined-binding message) — the body threw; use the preloaded globals, the surface's bindings, and `capture`. `llms/lambda.md`.
 - `Unable to locate request.` (404) on an endpoint that deployed — a lowercase verb, a `.` in the name, or a CORS `mode` typo that dropped the whole API group. `llms/kinds-core.md`.
 - A browser call fails on a missing `access-control-allow-origin` while deploy looks fine — CORS `mode: "custom"` with `"*"` or an unmatched origin. `llms/kinds-core.md`.
+- 403 `Forbidden: Origin not allowed` from an MCP server URL — the request came from a browser; MCP endpoints refuse every `Origin`, so call them server-side. `llms/kinds-agent-mcp.md`.
+- `ERROR_FATAL` `The free model is not available in this process.` — an `xano-free` agent run on the Xano Engine on this machine; it runs only on Xano's cloud. `llms/kinds-agent-mcp.md`.
 - A websocket is closed right after the handshake — a refused `connect` gate: an empty/falsy return, a crash, or a gating trigger with no `response`. `llms/triggers.md`.
 - `to_throw failed - response is ok` around an auth-refused call — `ERROR_CODE_ACCESS_DENIED` carries no message; the auth gate is not reachable from a workflow test. `llms/tests.md`.
 - Output reads `Hi [object Object]` — a tagged value inside a JS template literal; compose at runtime with `withFilters` + `fl.concat`. `llms.txt`.

package/llms/filters.md

@@ -182,6 +182,7 @@ stored value inside a `db.edit` `row` (it is `null`; `null + 1` aborts): `db.get
 - `fl.url_hasarg(key: text): text`
 - `fl.yaml_encode(options?: bool, inline?: int, indent?: int): text`
 
-Zero-argument filters — call as `fl.<name>()`; an argument is a compile error: abs, acos, acosh, addslashes, array_entries, array_keys, array_lower, array_pop, array_shift, array_shuffle, array_values, asin, asinh, atan, atanh, avg, base64_decode, base64_decode_urlsafe, base64_encode, base64_encode_urlsafe, bin2hex, bindec, bitwise_not, capitalize, ceil, cos, count, create_object_from_entries, decbin, dechex, decoct, deg2rad, empty, escape, even, exp, first, flatten, floor, from_utf8, hex2bin, hexdec, is_array, is_bool, is_decimal, is_int, is_object, is_text, is_uuid, json_decode, json_encode, last, list_encodings, ln, log10, lower, ms_to_secs, not, null, octdec, odd, product, querystring_parse, rad2deg, reverse, rsort, safe_array, secs_to_ms, sin, sort, sql_alias, sql_esc, sqrt, strip_accents, strlen, sum, tan, text_escape, text_unescape, to_bool, to_decimal, to_expr, to_geo_linestring, to_geo_multilinestring, to_geo_multipoint, to_geo_multipolygon, to_geo_point, to_geo_polygon, to_int, to_text, to_utf8, uid, upper, url_decode, url_decode_rfc3986, url_encode, url_encode_rfc3986, url_parse, uuid4, xml_decode, yaml_decode.
+Zero-argument filters, by operand type — call as `fl.<name>()`; an argument is a compile error. array: array_entries, array_keys, array_lower, array_pop, array_shift, array_shuffle, array_values, count, first, flatten, last, reverse, rsort, safe_array; comparison: bitwise_not, empty, even, is_array, is_bool, is_decimal, is_int, is_object, is_text, is_uuid, not, odd; geo: to_geo_linestring, to_geo_multilinestring, to_geo_multipoint, to_geo_multipolygon, to_geo_point, to_geo_polygon; math: abs, acos, acosh, asin, asinh, atan, atanh, avg, ceil, cos, deg2rad, exp, floor, ln, log10, product, rad2deg, sin, sqrt, sum, tan; misc: null; other: sort; security: uid, uuid4; text: addslashes, capitalize, escape, from_utf8, list_encodings, lower, querystring_parse, sql_alias, sql_esc, strip_accents, strlen, text_escape, text_unescape, to_utf8, upper, url_parse; timestamp: ms_to_secs, secs_to_ms; transform: base64_decode, base64_decode_urlsafe, base64_encode, base64_encode_urlsafe, bin2hex, bindec, create_object_from_entries, decbin, dechex, decoct, hex2bin, hexdec, json_decode, json_encode, octdec, to_bool, to_decimal, to_expr, to_int, to_text, url_decode, url_decode_rfc3986, url_encode, url_encode_rfc3986, xml_decode, yaml_decode.
+`fl.reverse()` reverses a list only: on a text value it answers the text UNCHANGED, with no error.
 
 Variadic filters — they take arguments, but no declared list, so the count is not checked: sprintf.

package/llms/kinds-agent-mcp.md

@@ -4,6 +4,7 @@
 
 - An MCP server serves THREE primitives, and each reaches the client differently: a `tool()` is an action the MODEL calls (it may write); a `resource()` is read-only context the client APPLICATION lists and attaches by `uri` (reference docs, a schema, one record through a `{variable}` template); a `prompt()` is a message template with arguments the USER picks by name. Context a session opens with is a `resource()`; a workflow a user starts by name is a `prompt()`; data the model must fetch on its own mid-task stays a `tool()`, since a client shows the model only the resources attached to the conversation. Register each kind (`registerTools`/`registerPrompts`/`registerResources`) and list it on the server.
 - `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, prompts?, resources?, oauth?, llm?, output? })` — an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint — `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<…>/stream` path THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral. A TENANT rides AFTER the prefix (`/x2/mcp/tenant/<tenant>/<canonical>/<token>/stream`), not as a base-URL segment: `getUrl` LIFTS a `/tenant/<name>` out of the base and re-places it there, so `getUrl(window.XANO_HOST)` is correct as-is; concatenating them by hand builds an unregistered route that 404s. Pass `{ tenant }` when the base URL cannot name it (a tenant on its own domain).
+  - ⚠ Refuses any request carrying a browser `Origin`, preflight too: 403, JSON-RPC `-32000` `Forbidden: Origin not allowed`. One with no `Origin` (curl, a server, an MCP client) is served; the bundle cannot admit an origin, so call it server-side, never from browser JS.
   - `tools?`: a `ToolsetToolEntry[]`. Pass the `tool()` HANDLES directly (`tools: [saveNote]`); use the `{ tool, enabled?, auth?, type?, resourceUri?, toolMeta? }` wrapper when an entry needs more. `type: "resource"` (+ a required `resourceUri`) is the LEGACY way to publish a tool as an MCP resource — author a `resource()` and list it in `resources` instead; `toolMeta` is extra metadata on a tool entry. The two payload fields are per-type and supplying the other one is refused, because the engine stores it against neither. `auth` names an auth **table** (a `table({ auth: true })` handle or its name) — per-tool, and the only gate there is. ⚠ It is also what gives the tool a CALLER, on an `agent()` exactly as on an MCP server. `auth()` inside a tool whose entry names no table does NOT return null: the call answers a normal result carrying `{"code":"ERROR_FATAL","message":""}`, so the model reads a successful tool result and reports success while nothing is written. A caller token does not rescue it — the ENTRY supplies identity. Spell it `{ tool: saveNote, auth: users }`; `export()` warns. An entry naming no tool THROWS at export; a deliberate raw `id: 0` warns and carries through.
   - `prompts?` / `resources?`: `prompt()` / `resource()` HANDLES (or names), or a `{ prompt, enabled?, auth? }` / `{ resource, enabled?, auth? }` wrapper. `auth` names the auth table and is what gives the stack a caller: a prompt/resource reading `auth()` behind an entry with none answers every `prompts/get` / `resources/read` with `-32603 "Access Denied"` (`export()` warns `toolset.primitive-reads-auth-ungated`). Listing one target twice THROWS; two resources with one `uri` on one server fail `export()` (`mcp.resource-uri-duplicate`). MCP-server only — `agent()` takes tools only.
   - `history?` is the server tier for its tools, prompts AND resources alike; an object's own `history` wins. The workspace tier (`workspaceConfig({ history })`) has `prompt` and `resource` keys, both default on.
@@ -24,6 +25,7 @@
 - `s.mcp.oauth.revoke({ mcp_server, user_id? | grant_id? | all?, as? })` — end hosted sign-ins on a server: EXACTLY ONE of `user_id`, `grant_id`, `all: c.bool(true)`, else `export()` fails (`mcp.oauth-revoke-target`). Binds `{ revoked }`.
 - `agent({ name, guid?, description?, docs?, enabled?, canonical?, tags?, history?, llm, tools?, output? })` — an LLM orchestrator. No top-level `instructions`/`prompt`/`spec` — the prompt lives under `llm`. Invoke from a stack with `s.ai.agent.run({ agent, args })`.
   - `llm` (REQUIRED): typed provider settings, a discriminated union on `type` (`"xano-free" | "anthropic" | "openai" | "google-genai"`). Shared fields: `systemPrompt?`, `maxSteps?` (default `5`), and `prompt?` XOR `messages?` (genuinely exclusive: both is a type error and throws — the engine stores ONE `prompt_type`, so one would be dropped); plus provider fields (`apiKey?`, `model?`, `temperature?`, `reasoningEffort?`, …). String fields accept Twig placeholders — `{{ $args.x }}` for run inputs (the `args` of `s.ai.agent.run`), `{{ $env.NAME }}` for env vars.
+  - `xano-free` runs only on Xano's cloud: on the Xano Engine on this machine a run fails `ERROR_FATAL` `The free model is not available in this process.` — use a keyed provider there.
   - `tools?`: same `ToolsetToolEntry[]` as `mcpServer` — bare `tool()` handles, or a `{ tool, enabled?, auth? }` wrapper when one needs `enabled`/`auth`. A tool reading `auth()` MUST use the wrapper naming the auth table — a bare handle runs it with no caller (see `mcpServer`'s `tools?`).
   - `output?`: `{ schema: Record<string, input.*>, enabled? }` — structured-output schema. `schema` is a named-field record authored with the `input.*` catalog, exactly like a `defineFunction`/`query` `input:` map (the stored `structuredOutputsSchema` is the same wire shape as function inputs). e.g. `output: { schema: { priority: input.enum(["low","high"]), summary: input.text() } }`. When you pass the agent *handle* to `s.ai.agent.run({ agent })`, `.result` is typed straight from this schema — no `resultShape` witness needed (the shape is declared once). `resultShape` remains only to override that, or to type an agent referenced by bare name.
   - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, allowToolExecution: c.bool(true), as: "run" })`) — it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var("summary", ref("run.result.summary"))`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` — raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. `.toolCalls` is the FINAL step's calls only (often `[]`); every call is a `.steps[].content[]` entry of `type: "tool-call"`. ⚠ An agent with tools needs `allowToolExecution: c.bool(true)` on the run: unset, its tools are OFF and it answers without them (warns `stack.agent-tools-off`).