@xano/sdk 1.0.5 → 1.0.7

package/dist/{chunk-WRBKLYSJ.js → chunk-DNBP4GJN.js}

@@ -201,8 +201,9 @@ function removeArgs(manager, pkg) {
   return [manager === "npm" ? "uninstall" : "remove", pkg];
 }
 function addArgs(manager, spec, dev = false) {
-  if (manager === "npm") return ["install", spec, ...dev ? ["--save-dev"] : []];
-  return ["add", spec, ...dev ? [manager === "pnpm" ? "--save-dev" : "--dev"] : []];
+  const specs = typeof spec === "string" ? [spec] : [...spec];
+  if (manager === "npm") return ["install", ...specs, ...dev ? ["--save-dev"] : []];
+  return ["add", ...specs, ...dev ? [manager === "pnpm" ? "--save-dev" : "--dev"] : []];
 }
 
 export {
@@ -221,4 +222,4 @@ export {
   removeArgs,
   addArgs
 };
-//# sourceMappingURL=chunk-WRBKLYSJ.js.map
+//# sourceMappingURL=chunk-DNBP4GJN.js.map

package/dist/{chunk-LZDA6SVD.js → chunk-DXZTL7NA.js}

@@ -1,23 +1,41 @@
 import {
+  backendShellFiles,
+  deployNextCommand,
+  ephemeralNextStep,
   loginNextStep,
   planProfilePin,
   projectCli,
   projectShellFiles,
+  refuseFrontendOnlyFlags,
   reportWorkflowPlacement,
+  resolveFrameworkValue,
   resolveFrontendPreset,
+  resolveInitFrontend,
   resolveThemeChoice,
+  runFiles,
   sanitizeAppName,
+  settleClashes,
   templateVarsFor
-} from "./chunk-CV54PASI.js";
+} from "./chunk-SGK3PTTM.js";
+import {
+  renderManifestFile,
+  reportModuleFailures
+} from "./chunk-B3P25SDP.js";
 import {
   ROUTES_MANIFEST_BASENAME,
   RouteManifestError,
-  planRouteManifest,
-  renderPlannedManifest
-} from "./chunk-TM5LRSBB.js";
+  planRouteManifest
+} from "./chunk-LBJA7IEM.js";
+import {
+  syncDigests
+} from "./chunk-JI3BLXWQ.js";
+import {
+  archiveSeedContent,
+  fetchSourceArchive
+} from "./chunk-NV37YGOV.js";
 import {
   confirm
-} from "./chunk-AESE434J.js";
+} from "./chunk-7M6JP3FS.js";
 import {
   CODEGEN_MODULE,
   DecodeContext,
@@ -53,25 +71,25 @@ import {
   spread,
   untypedKey,
   withDeclineContext
-} from "./chunk-WOGJB2F6.js";
+} from "./chunk-FNLTFOUD.js";
 import {
-  archiveSeedContent,
-  fetchSourceArchive
-} from "./chunk-PIPIA7K7.js";
+  recordSync,
+  syncBranchLabel
+} from "./chunk-VAGSKUWC.js";
 import {
   assertBranchReadSupported,
   exportWorkspaceBundle
-} from "./chunk-XIABDKFQ.js";
+} from "./chunk-2SD4LA22.js";
 import {
   decodeWorkspaceArchive
 } from "./chunk-3DRXWLJ5.js";
 import {
   listBranches,
   requireBranch
-} from "./chunk-5RLAF6RL.js";
+} from "./chunk-M2C54ZBC.js";
 import {
   detectInstallMode
-} from "./chunk-DEVGLLNZ.js";
+} from "./chunk-GHMLRFRX.js";
 import {
   UNSUPPORTED_SECTIONS,
   decodedCounts,
@@ -82,48 +100,54 @@ import {
   sectionOmission,
   subtractDefaults,
   workspaceKeyOmission
-} from "./chunk-MEIJDRHU.js";
+} from "./chunk-IYXL5NYU.js";
 import {
   ensureWorkspaceEnvGitignored,
   requireSecretPathGitignored
-} from "./chunk-3WHWOKU4.js";
+} from "./chunk-BZ6WTG3E.js";
 import {
   loadDefault,
   readVersion,
   resolveKnowledge
-} from "./chunk-S5KQIFKJ.js";
+} from "./chunk-DG3APBUJ.js";
 import {
   WORKSPACE_ENV_BASENAME,
   WORKSPACE_ENV_EXAMPLE_BASENAME,
   renderWorkspaceEnvExample,
   renderWorkspaceEnvFile,
   valueProblem
-} from "./chunk-LLS2WO2K.js";
+} from "./chunk-PV25BDCH.js";
 import {
   memoCredential,
   refuseProfileForLocal
-} from "./chunk-KUU7T4ZE.js";
+} from "./chunk-B2URJBC4.js";
 import {
   getAccessToken
-} from "./chunk-CJ76PSJT.js";
+} from "./chunk-YH2JVJAO.js";
 import {
   getEngineRecord
-} from "./chunk-Q22BMRPF.js";
+} from "./chunk-EPFDY5JU.js";
+import {
+  readLockFile,
+  writeLockFile
+} from "./chunk-CJDPSCMX.js";
 import {
   requireBackendSlot
-} from "./chunk-F3557PVM.js";
+} from "./chunk-PY722CHR.js";
 import {
   SECRETS_FILE_VERSION,
   workspaceSecretsPathIn,
   writeSecretsFile
-} from "./chunk-AMBEITWL.js";
+} from "./chunk-ZGLNHA7T.js";
 import {
   yesRerun
-} from "./chunk-Z4VN347O.js";
+} from "./chunk-UYFUIHH3.js";
 import {
   contextFlags
-} from "./chunk-G57RYMKB.js";
+} from "./chunk-3FRGNBOC.js";
 import {
+  CODEGEN_MARKER,
+  MERGED_IN_EXISTING,
   PRESERVED_ON_REFRESH,
   SHELL_FILES_IN_BACKEND,
   XANO_DIR,
@@ -137,37 +161,38 @@ import {
   plannedAgentsMd,
   readDecodeRecord,
   scaffoldProject
-} from "./chunk-F6IKWAIU.js";
+} from "./chunk-DIWF7L33.js";
 import {
   shellWord
 } from "./chunk-FWD7AL6N.js";
 import {
   seedRowsByTableGuid
-} from "./chunk-Y76ERHLK.js";
+} from "./chunk-FDTET7FZ.js";
 import {
-  readLockFile,
-  writeLockFile
-} from "./chunk-SQPIECXD.js";
+  detectPackageManager,
+  installCommandFor
+} from "./chunk-DNBP4GJN.js";
 import {
   readInstalledManifest
-} from "./chunk-M7GJ6YUF.js";
+} from "./chunk-CNZASQPL.js";
 import {
   atomicWrite
 } from "./chunk-LLNZGEFK.js";
 import {
   TEST_EXPECT_TYPES,
   respond
-} from "./chunk-S5TEJIGP.js";
+} from "./chunk-SKEG3V2V.js";
 import {
   codegen_entry_exports,
   raw
-} from "./chunk-XMDDBEEM.js";
+} from "./chunk-E763QI3G.js";
 import {
+  BACKEND_TSCONFIG_PATH,
   codegenLanding,
   describeOrigin,
   renderCodegenMarker,
   renderCodegenReadme
-} from "./chunk-57HMNJGB.js";
+} from "./chunk-5GIOCDUM.js";
 import {
   SUPERSEDED_STATEMENTS,
   supersededBy
@@ -188,7 +213,7 @@ import {
   terminalText,
   warn,
   writeJson
-} from "./chunk-XNZURZ7T.js";
+} from "./chunk-CH23ONYG.js";
 import {
   TOOL_ANNOTATION_WIRE,
   agentTrigger,
@@ -202,11 +227,11 @@ import {
   s,
   tableTrigger,
   workspaceTrigger
-} from "./chunk-FV55SRQU.js";
+} from "./chunk-FQ53GTII.js";
 import {
   parsePathParams,
   unboundPathParams
-} from "./chunk-3IYVHVM6.js";
+} from "./chunk-VJFMUJWZ.js";
 import {
   DEFAULT_DOCUMENTATION,
   DEFAULT_PREFERENCES,
@@ -214,10 +239,10 @@ import {
 } from "./chunk-6JAEMMZ7.js";
 import {
   MCP_OAUTH_ENV_REF
-} from "./chunk-SRX6B544.js";
+} from "./chunk-5QMJOE2K.js";
 import {
   PAYLOAD_ARRAY_KEYS
-} from "./chunk-XJU6UAFV.js";
+} from "./chunk-7FIMUFBP.js";
 import {
   CORS_UNMATCHABLE,
   DECODE_ONLY_STATEMENTS,
@@ -241,7 +266,7 @@ import {
   searchConstrainsRows,
   specLabel,
   unmatchableOrigins
-} from "./chunk-JSEVKRVJ.js";
+} from "./chunk-T4LJ5UR2.js";
 import {
   WORKSPACE_HISTORY_TYPES
 } from "./chunk-ETAZIGNT.js";
@@ -256,7 +281,7 @@ import {
   isRuntimeConditionOp,
   isSearchOp,
   unusableColumns
-} from "./chunk-VZ22VUAS.js";
+} from "./chunk-SLGJIWCY.js";
 import {
   AUTHOR_KIND_NAME
 } from "./chunk-VTMTIBKP.js";
@@ -271,7 +296,7 @@ import {
   DiagnosticBag,
   allowableWarnings,
   setDiagnosticSink
-} from "./chunk-GPI3OWRE.js";
+} from "./chunk-YHB34BN6.js";
 import {
   CANONICAL_PAYLOAD_KEYS,
   adoptFromBundle,
@@ -281,7 +306,7 @@ import {
   mergeObserved,
   sdkKindName,
   withObjects
-} from "./chunk-OKNE3TWU.js";
+} from "./chunk-5KJBWIDZ.js";
 import {
   shellQuote
 } from "./chunk-5ZSO4T2G.js";
@@ -305,14 +330,14 @@ import {
   normalize,
   retiredInputSuccessor,
   retiredInputs
-} from "./chunk-3HOGFGKG.js";
+} from "./chunk-D3KEPRRN.js";
 import {
   STATEMENT_SURFACES,
   sPathOf
 } from "./chunk-Q7DGTQ5G.js";
 import {
   impliedInputs
-} from "./chunk-7GX445AE.js";
+} from "./chunk-4XHAT7C5.js";
 import {
   LAMBDA_STATEMENTS,
   collectLambdaBodyProblems,
@@ -325,7 +350,7 @@ import {
 } from "./chunk-4BW2SG2N.js";
 import {
   INPUT_CONTEXT
-} from "./chunk-4DJTQ6W4.js";
+} from "./chunk-JIKGT7DO.js";
 import {
   isVarName
 } from "./chunk-4MIV244X.js";
@@ -2360,14 +2385,7 @@ var dbIncrement = (a) => {
 };
 var dbTransaction = (a) => {
   const body = a.decodeStack(getPath2(a.stored.context, "run"));
-  const entries = [["body", arr(body.exprs)]];
-  const runtime = { body: body.statements };
-  const as = a.stored.as;
-  if (typeof as === "string" && as !== "") {
-    entries.push(["as", lit(as)]);
-    runtime.as = as;
-  }
-  return prove(a.ctx, a.stored, "db.transaction", [runtime], [obj(entries)]);
+  return prove(a.ctx, a.stored, "db.transaction", [{ body: body.statements }], [obj([["body", arr(body.exprs)]])]);
 };
 function decodeWhere(a, stored, site) {
   const condition = decodeCondition(a.ctx, stored, { sqlWhere: true });
@@ -3706,9 +3724,10 @@ function documentationEntry(a, scope, defaulted) {
   }
   if (token !== "") {
     const gated = block.require_token === true;
+    const sidecar = `\`${a.ctx.secretsFile}\``;
     a.ctx.problem(
       "expected-omission",
-      gated ? `${documentationScopeLabel(scope)} gates its documentation with a token, which is a SECRET and is not carried into the generated tree. ` + (a.ctx.writesSecrets ? `The source declares the gate and the value is written to \`${a.ctx.secretsFile}\` \u2014 gitignored, and read back by every command that builds a bundle, so a deploy restores the gate with no further step. Until it is supplied, \`deploy\` refuses rather than clearing the live token.` : `The source declares the gate; the value was NOT written anywhere (--no-secrets). Supply it at deploy time with \`--doc-token\` or \`--secrets-file\` \u2014 until then \`deploy\` refuses rather than clearing the live token.`) : `${documentationScopeLabel(scope)} stores a documentation token with \`require_token: false\` \u2014 the documentation is not gated. The token is a SECRET and is not carried into the generated tree; ` + (a.ctx.writesSecrets ? `it is written to \`${a.ctx.secretsFile}\` (gitignored) so a deploy carries it across.` : `it was NOT written anywhere (--no-secrets). A deploy does not need it.`)
+      gated ? `${documentationScopeLabel(scope)} gates its documentation with a token, which is a SECRET and is not carried into the generated tree. The source declares the gate. A decode writes the value to ${sidecar} (gitignored), and every command that builds a bundle reads it back, so a deploy restores the gate with no further step. A decode run with \`--no-secrets\` does not write it: supply it at deploy time with \`--doc-token\` or \`--secrets-file\`. Until the value is supplied, \`deploy\` refuses rather than clearing the live token.` : `${documentationScopeLabel(scope)} stores a documentation token with \`require_token: false\` \u2014 the documentation is not gated. The token is a SECRET and is not carried into the generated tree. A decode writes it to ${sidecar} (gitignored) so a deploy carries it across; a decode run with \`--no-secrets\` does not. A deploy does not need it.`
     );
   }
   return cells.length === 0 ? null : ["documentation", obj(cells)];
@@ -5945,7 +5964,6 @@ var KNOWN_PAYLOAD_KEYS = /* @__PURE__ */ new Set([
 function decodeBundle(bundle, opts = {}) {
   const ctx = new DecodeContext();
   if (opts.secretsFile !== void 0) ctx.secretsFile = opts.secretsFile;
-  if (opts.writesSecrets !== void 0) ctx.writesSecrets = opts.writesSecrets;
   let raw2 = bundle.payload ?? {};
   if (opts.workspaceName !== void 0) {
     ctx.fallbackWorkspaceName = opts.workspaceName;
@@ -6276,13 +6294,16 @@ async function fetchBundle(args, source) {
   const credential = memoCredential(() => (credentialRead = true, getAccessToken(args)));
   if (source.kind === "workspace") {
     const auth = await credential();
+    const bundle2 = await fetchWorkspaceBundle(auth, args.branch);
+    const branch = await syncBranchLabel(auth, args.branch);
     return {
-      bundle: await fetchWorkspaceBundle(auth, args.branch),
+      bundle: bundle2,
       origin: { source: "workspace", origin: String(auth.workspaceId), ...args.branch === void 0 ? {} : { branch: args.branch.trim() } },
-      credentialRead
+      credentialRead,
+      ...branch === void 0 ? {} : { syncTarget: { instance: auth.instance, workspaceId: auth.workspaceId, branch } }
     };
   }
-  const { projectDirFrom } = await import("./xanosdk-project-KH5TZ2KI.js");
+  const { projectDirFrom } = await import("./xanosdk-project-J4VCFRHP.js");
   const cwd = projectDirFrom(process.cwd()) ?? process.cwd();
   const raw2 = "name" in source && source.name !== void 0 ? `${source.kind}:${source.name}` : source.kind;
   step(`Reading ${raw2}`);
@@ -6361,7 +6382,7 @@ function refuseDuplicateSourceGuids(project) {
 Nothing was written. These records come from the archive, not from anything you authored, so renaming an object or pinning a new guid here would repoint references rather than fix it \u2014 the repeat has to be resolved in the workspace this was exported from.`
   );
 }
-function placeGeneratedFiles(project, backendDir = XANO_DIR, displayDir = backendDir || XANO_DIR, routes) {
+function placeGeneratedFiles(project, backendDir = XANO_DIR, displayDir = backendDir || XANO_DIR, routes, modules) {
   const out = [
     // Generated from the names the source declares, and therefore placed HERE
     // rather than at either call site: `init --from` and `pull` must not be able
@@ -6379,19 +6400,23 @@ function placeGeneratedFiles(project, backendDir = XANO_DIR, displayDir = backen
     const path = file.path === GENERATED_README ? `${backendDir}/${GENERATED_README}` : `${backendDir}/${file.path}`;
     out.push({ path, content: file.contents });
   }
-  const manifest = routeManifestFor(project.source, routes?.entry ?? `${displayDir}/index.ts`, routes?.deferred);
+  const manifest = routeManifestFor(project.source, routes?.entry ?? `${displayDir}/index.ts`, routes?.deferred, modules);
   if (manifest !== void 0) out.push({ path: `${backendDir}/${ROUTES_MANIFEST_BASENAME}`, content: manifest });
   return out;
 }
-function routeManifestFor(payload, entry, deferred) {
+function routeManifestFor(payload, entry, deferred, modules) {
   try {
-    return renderPlannedManifest(planRouteManifest(payload), entry);
+    const file = renderManifestFile(planRouteManifest(payload), modules, entry === void 0 ? {} : { entry });
+    if (file === void 0) return void 0;
+    reportModuleFailures(file.failed, ROUTES_MANIFEST_BASENAME);
+    return file.source;
   } catch (err) {
     if (!(err instanceof RouteManifestError)) throw err;
-    const line = `${ROUTES_MANIFEST_BASENAME} was not written: ${err.message}`;
+    const kept = modules?.previous;
+    const line = kept === void 0 ? `${ROUTES_MANIFEST_BASENAME} was not written: ${err.message}` : `${ROUTES_MANIFEST_BASENAME} was not refreshed and was kept as it was: ${err.message}`;
     if (deferred === void 0) warn(line, "routes.not-written");
     else deferred.push(line);
-    return void 0;
+    return kept;
   }
 }
 function envExampleNames(env) {
@@ -6646,29 +6671,47 @@ async function runInitFromCommand(args, source) {
   const pathArg = args.positionals[0] ?? ".";
   assertBranchMatchesSource(args, source);
   const target = resolve(pathArg);
-  if (decideOverwrite(target, { force: args.force, regenerable: true }) === "refuse") {
-    throw new UsageError(
-      `Target directory ${target} is not empty. Re-run with --force to scaffold into it anyway, or pick an empty directory.`,
-      { hintFor: { command: "init" } }
+  const isRefresh = isNonEmptyDir(target) && existsSync(join(target, CODEGEN_MARKER));
+  const existing = isNonEmptyDir(target) && !isRefresh;
+  const refreshedBackend = isRefresh && !existsSync(join(target, "frontend")) && existsSync(join(target, BACKEND_TSCONFIG_PATH)) ? existsSync(join(target, XANO_DIR, ".gitattributes")) ? "existing" : "new" : void 0;
+  if (refreshedBackend !== void 0) {
+    if (args.framework !== void 0 && resolveFrameworkValue(args.framework) !== null) {
+      throw new UsageError(
+        `\`--framework ${args.framework}\` writes a new frontend, and ${target} is a project with no frontend: re-running init refreshes its backend only. Drop --framework, or run init in an empty directory for a full app.`,
+        { helpFor: { command: "init" } }
+      );
+    }
+    refuseFrontendOnlyFlags(args, `${target} has no frontend, so re-running init refreshes its backend only`);
+  }
+  let overrideScripts = [];
+  if (existing) {
+    await resolveInitFrontend(args, target, "existing");
+    const settled = await settleClashes(
+      target,
+      backendShellFiles(templateVarsFor(sanitizeAppName(args.name ?? basename(target)), target), { kind: "existing", dir: target }),
+      args
     );
+    if (settled === "cancelled") return;
+    overrideScripts = settled;
   }
-  const { bundle, origin, credentialRead, seed } = source.kind === "file" ? {
+  const { bundle, origin, credentialRead, seed, syncTarget } = source.kind === "file" ? {
     bundle: readBundleFile(source.path),
     origin: { source: "file", origin: source.path },
     credentialRead: void 0,
-    seed: void 0
+    seed: void 0,
+    syncTarget: void 0
   } : await fetchBundle(args, source);
   const mode = reportMode(args.report);
   const out = resolve(pathArg);
   const appName = sanitizeAppName(args.name ?? basename(out));
   const vars = templateVarsFor(appName, out);
-  const preset = await resolveFrontendPreset(args.framework);
+  const preset = existing || refreshedBackend !== void 0 ? null : await resolveFrontendPreset(args.framework);
+  if (preset === null && !existing && refreshedBackend === void 0) refuseFrontendOnlyFlags(args, "`--framework none` writes none");
   const choice = await resolveThemeChoice(args);
   const installMode = detectInstallMode();
   const ws = bundle.payload?.workspace;
   const unnamed = typeof ws?.name !== "string" || ws.name.trim() === "";
   const project = decodeBundle(bundle, {
-    writesSecrets: args.noSecrets !== true,
     ...unnamed ? { workspaceName: appName } : {}
   });
   refuseDuplicateSourceGuids(project);
@@ -6678,16 +6721,9 @@ async function runInitFromCommand(args, source) {
     entry: shellWord(isAbsolute(cwdEntry) || cwdEntry.startsWith(".") ? cwdEntry : `./${cwdEntry}`),
     deferred: routesDeferred
   });
+  const readme2 = renderCodegenReadme(vars, origin, Object.keys(project.env), preset);
   const files = [
-    ...projectShellFiles(
-      vars,
-      preset,
-      {
-        readme: renderCodegenReadme(vars, origin, Object.keys(project.env), preset),
-        landing: codegenLanding(vars, origin)
-      },
-      choice
-    ),
+    ...existing || refreshedBackend === "existing" ? backendShellFiles(vars, { kind: "existing", dir: out }) : preset === null ? backendShellFiles(vars, { kind: "new", readme: readme2 }) : projectShellFiles(vars, preset, { readme: readme2, landing: codegenLanding(vars, origin) }, choice),
     ...generated,
     {
       path: `${XANO_DIR}/${CODEGEN_MARKER_BASENAME}`,
@@ -6713,11 +6749,12 @@ async function runInitFromCommand(args, source) {
   });
   const replace = await planXanoReplace(
     out,
-    files,
+    // An existing project's merged files are not overwrites: only the backend's own are listed.
+    existing ? files.filter((f) => !MERGED_IN_EXISTING.has(f.path)) : files,
     bundle.payload,
     args,
     describeOrigin(origin),
-    agentsMd
+    existing ? void 0 : agentsMd
   );
   if (replace === "cancelled") {
     info("Cancelled. Nothing was written.");
@@ -6737,13 +6774,16 @@ async function runInitFromCommand(args, source) {
     sdkVersion: readVersion(),
     frontend: preset,
     theme: choice,
-    ...replace.removals === void 0 ? {} : { xanoRemovals: replace.removals }
+    ...replace.removals === void 0 ? {} : { xanoRemovals: replace.removals },
+    // An existing project's clashes were settled before the read, and its
+    // manifest is merged into with the project winning.
+    ...existing ? { overwrite: "full", mergePackageJson: "project", overrideScripts } : {}
   });
   reportXanoReplace(replace);
   for (const line of routesDeferred) warn(line, "routes.not-written");
   if (seed !== void 0) reportSeedRows(seed.rows, seed.label, seed.provenance, XANO_DIR, contextFlags(args));
   if (replace.lock !== void 0) {
-    const { reconciledLock } = await import("./pull-command-EUEWBRXZ.js");
+    const { reconciledLock } = await import("./pull-command-S5E2ABZ4.js");
     writeLockFile(
       replace.lock.path,
       reconciledLock(replace.lock.model, replace.lock.reconciliation, bundle.payload)
@@ -6794,6 +6834,9 @@ async function runInitFromCommand(args, source) {
     }
   }
   if (lock !== null && !hadLock) success(`Wrote ${displayPath(lock)}`);
+  if (lock !== null && syncTarget !== void 0 && verified !== false) {
+    recordSync({ lockPath: lock, target: syncTarget, digests: syncDigests({ held: [bundle] }), by: "init", complete: true });
+  }
   if (verified === false) {
     rewriteReadmeWithReport(project, out);
     const cliVersion = readVersion();
@@ -6803,10 +6846,17 @@ async function runInitFromCommand(args, source) {
   summarize(args, project, verified, out, origin, scaffold.install, mode, {
     dir: out,
     name: appName,
-    framework: preset.id,
-    theme: choice.theme.id,
-    dark: choice.dark,
+    mode: existing || isRefresh ? "existing" : "new",
+    framework: preset?.id ?? "none",
+    theme: preset === null ? null : choice.theme.id,
+    dark: preset === null ? null : choice.dark,
     install: scaffold.install,
+    files: runFiles(scaffold.written, lock === null ? [] : [relative(out, lock).split(sep).join("/")]),
+    next: deployNextCommand(
+      out === process.cwd() ? null : pathArg,
+      scaffold.install === "installed" || existsSync(join(out, "node_modules", "@xano", "sdk")) ? null : installCommandFor(out),
+      detectPackageManager(out)
+    ),
     pinnedProfile,
     lock,
     // What `pull --json` reports for the same refresh: the files kept because
@@ -6844,7 +6894,7 @@ async function planXanoReplace(out, files, payload, args, label, agentsMd) {
     if (shell.length > 0 && !await confirmShellOverwrite(out, shell, args, label)) return "cancelled";
     return { removals: void 0, removedEdited: [], rewrittenEdited: [], kept: [] };
   }
-  const { backendDirCleanliness, noneOfTheIdentities, pulledIdentities, reconcileLock } = await import("./pull-command-EUEWBRXZ.js");
+  const { backendDirCleanliness, noneOfTheIdentities, pulledIdentities, reconcileLock } = await import("./pull-command-S5E2ABZ4.js");
   const prefix = `${XANO_DIR}/`;
   const incoming = new Map(
     files.filter((f) => f.path.startsWith(prefix)).map((f) => [f.path.slice(prefix.length), f.content])
@@ -6892,7 +6942,7 @@ async function planXanoReplace(out, files, payload, args, label, agentsMd) {
         list(lock.reconciliation.dropped.map((key) => displayLockKey(key)), "")
       );
     }
-    const { keptDuplicates, replacedRegistrations, reportSuperseded } = await import("./pull-superseded-TOT5S4QU.js");
+    const { keptDuplicates, replacedRegistrations, reportSuperseded } = await import("./pull-superseded-E34BZVLH.js");
     const shown = relative(process.cwd(), xanoDir).split(sep).join("/") || XANO_DIR;
     reportSuperseded(
       keptDuplicates(xanoDir, incoming, kept, shown),
@@ -7114,7 +7164,7 @@ function summarize(args, project, verified, out, origin, install, mode, scaffold
 `) + // An unverified tree: the check the warning above asks for is a step.
   (verified === null ? `  npm run xano:check     # confirm the tree compiles and the lock agrees
 ` : ``) + `  npm run xano:deploy    # run it on the Xano Engine, on this machine
-` + loginNextStep(pin, out) + `  npm run xano:deploy:ephemeral   # build the frontend, then deploy \u2192 live ephemeral URL`;
+` + loginNextStep(pin, out) + ephemeralNextStep(scaffolded.framework !== "none");
   detail(`Next steps:
 ` + steps.replace(/^ {2}/gm, "    "));
   for (const line of [
@@ -7197,4 +7247,4 @@ export {
   seedRowsListed,
   seedRowsLanding
 };
-//# sourceMappingURL=chunk-LZDA6SVD.js.map
+//# sourceMappingURL=chunk-DXZTL7NA.js.map

package/dist/{chunk-XMDDBEEM.js → chunk-E763QI3G.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-A2AOUBJS.js";
 import {
   RAW_FIELD
-} from "./chunk-4DJTQ6W4.js";
+} from "./chunk-JIKGT7DO.js";
 import {
   describeEntry
 } from "./chunk-4MIV244X.js";
@@ -139,4 +139,4 @@ export {
   rawField,
   codegen_entry_exports
 };
-//# sourceMappingURL=chunk-XMDDBEEM.js.map
+//# sourceMappingURL=chunk-E763QI3G.js.map

package/dist/{chunk-3VX7VAQT.js → chunk-EF4MHLEW.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-FWD7AL6N.js";
 import {
   isLocalSpecifier
-} from "./chunk-MYLPOVX6.js";
+} from "./chunk-47XT6WQL.js";
 import {
   trackLocalWrite
 } from "./chunk-4KHEMC32.js";
@@ -18,38 +18,39 @@ import {
   npmLockListsMember,
   removeArgs,
   yarnPlugAndPlayRoot
-} from "./chunk-WRBKLYSJ.js";
+} from "./chunk-DNBP4GJN.js";
 import {
   localPackageName,
   localPathOf,
   packageNameOf,
   readInstalledManifestState
-} from "./chunk-M7GJ6YUF.js";
+} from "./chunk-CNZASQPL.js";
 import {
   UsageError
-} from "./chunk-XNZURZ7T.js";
+} from "./chunk-CH23ONYG.js";
 
 // src/emit/project-dependency.ts
 import { existsSync, readFileSync } from "fs";
 import { isAbsolute, join, relative, resolve, sep } from "path";
 
 // src/emit/npm-install.ts
-async function installWithPeerRetry(specifier, cwd, opts = {}) {
+async function installWithPeerRetry(spec, cwd, opts = {}) {
+  const specs = typeof spec === "string" ? [spec] : spec;
   const scope = opts.scope ?? [];
   if (opts.manager !== void 0 && opts.manager !== "npm") {
-    const only = await runNpmQuiet([...addArgs(opts.manager, specifier), ...scope], cwd, { manager: opts.manager, ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {} });
+    const only = await runNpmQuiet([...addArgs(opts.manager, specs), ...scope], cwd, { manager: opts.manager, ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {} });
     return { ...only, peerConflict: null, retried: false };
   }
   const budget = opts.timeoutMs ?? NPM_RUN_TIMEOUT_MS;
   const deadline = Date.now() + budget;
-  const first = await runNpmQuiet(["install", specifier, ...scope], cwd, { timeoutMs: budget });
+  const first = await runNpmQuiet(["install", ...specs, ...scope], cwd, { timeoutMs: budget });
   if (first.status === 0 || !isPeerConflict(first.output)) {
     return { ...first, peerConflict: null, retried: false };
   }
   const remaining = deadline - Date.now();
   if (remaining <= 0) return { ...first, peerConflict: first.output, retried: false };
   opts.onRetry?.();
-  const second = await runNpmQuiet(["install", specifier, ...scope, "--legacy-peer-deps"], cwd, {
+  const second = await runNpmQuiet(["install", ...specs, ...scope, "--legacy-peer-deps"], cwd, {
     timeoutMs: remaining
   });
   return { ...second, peerConflict: first.output, retried: true };
@@ -114,6 +115,21 @@ async function addDependency(dir, specifier, opts = {}) {
     return { ...result, site, installSpec, ...recorded === void 0 ? {} : { recorded }, ...landed === void 0 ? {} : { landed } };
   });
 }
+async function addDependencies(dir, specifiers, opts = {}) {
+  const names = specifiers.map(packageNameOf);
+  const check = interruptedCheck(names.join(", "), installSite(dir), opts.rerun);
+  return trackLocalWrite({ what: `the install of ${names.join(", ")}`, check }, async () => {
+    const { site, link } = await prepareInstallSite(dir);
+    if (link !== null && link.status !== 0) return { ...link, peerConflict: null, retried: false, site, unrecorded: names };
+    const result = await installWithPeerRetry(specifiers, site.cwd, {
+      ...opts.onRetry === void 0 ? {} : { onRetry: opts.onRetry },
+      scope: site.scope,
+      ...site.manager !== "npm" ? { manager: site.manager } : {}
+    });
+    const after = dependenciesOf(dir);
+    return { ...result, site, unrecorded: result.status === 0 ? names.filter((n) => !after.has(n)) : names };
+  });
+}
 async function removeDependency(dir, pkg, rerun) {
   return trackLocalWrite({ what: `the removal of ${pkg}`, check: interruptedCheck(pkg, installSite(dir), rerun) }, async () => {
     const { site, link } = await prepareInstallSite(dir);
@@ -149,7 +165,8 @@ export {
   dependenciesOf,
   prepareInstallSite,
   addDependency,
+  addDependencies,
   removeDependency,
   recordedDependency
 };
-//# sourceMappingURL=chunk-3VX7VAQT.js.map
+//# sourceMappingURL=chunk-EF4MHLEW.js.map