@xano/sdk 1.0.7 → 1.0.8

package/dist/{workspace-command-MHIIY352.js → workspace-command-KEKL27Y4.js}

@@ -1,114 +1,114 @@
 import {
   printMicroserviceSection,
   readMicroservices
-} from "./chunk-M3NEK3LT.js";
+} from "./chunk-R4NOZBOY.js";
 import {
   fetchWorkspaceBundle
-} from "./chunk-DXZTL7NA.js";
-import "./chunk-SGK3PTTM.js";
-import "./chunk-B3P25SDP.js";
-import "./chunk-IPNN2KRW.js";
-import "./chunk-LBJA7IEM.js";
-import "./chunk-JI3BLXWQ.js";
-import "./chunk-NV37YGOV.js";
+} from "./chunk-ZQ5WZWHF.js";
+import "./chunk-V7KMIEMF.js";
+import "./chunk-PAS5HOG3.js";
+import "./chunk-QTMXJQZN.js";
+import "./chunk-O376UAZS.js";
+import "./chunk-6YOH2L3G.js";
+import "./chunk-XYTVP4WI.js";
 import {
   confirm
-} from "./chunk-7M6JP3FS.js";
-import "./chunk-FNLTFOUD.js";
+} from "./chunk-HQPL34O6.js";
+import "./chunk-6NEV2PEC.js";
 import {
   listTables
-} from "./chunk-H2K4GFUS.js";
-import "./chunk-VAGSKUWC.js";
-import "./chunk-2SD4LA22.js";
+} from "./chunk-YP76ZCQ5.js";
+import "./chunk-R3LANPQZ.js";
+import "./chunk-QC3MKMDK.js";
 import "./chunk-3DRXWLJ5.js";
 import "./chunk-X4DVXBFY.js";
 import {
   listBranches
-} from "./chunk-M2C54ZBC.js";
+} from "./chunk-75MKIQON.js";
 import {
   reachableWorkspaces,
   refuseUnreachableWorkspace,
   unreachableWorkspaceMessage
-} from "./chunk-U5M7T6CI.js";
-import "./chunk-GHMLRFRX.js";
-import "./chunk-JOOKM7AH.js";
+} from "./chunk-FHQYXGAY.js";
+import "./chunk-K75BFHQQ.js";
+import "./chunk-OBJ7FQDX.js";
 import "./chunk-2TFRR6JV.js";
 import {
   resolveOutputTarget,
   secretsPhrase,
   writeExportFile
-} from "./chunk-2ACWDSAQ.js";
+} from "./chunk-AS4G2MIE.js";
 import {
   secretsCarriedBy
-} from "./chunk-IYXL5NYU.js";
-import "./chunk-BZ6WTG3E.js";
+} from "./chunk-I53OTC3O.js";
+import "./chunk-JG642U5D.js";
 import {
   assertBundleFile,
   assertBundleInput,
   assertEntryFile,
   assertValueFiles,
   loadBundleText
-} from "./chunk-DG3APBUJ.js";
-import "./chunk-VIJ5D3RC.js";
-import "./chunk-PV25BDCH.js";
-import "./chunk-B2URJBC4.js";
-import "./chunk-S46ODQRA.js";
-import "./chunk-TWVUYS63.js";
-import "./chunk-26LHXLD3.js";
-import "./chunk-ZJOAWRED.js";
-import "./chunk-MBL7CXJ7.js";
+} from "./chunk-ZJCHS7FM.js";
+import "./chunk-XQO4A4Q4.js";
+import "./chunk-M3RLLT4O.js";
+import "./chunk-S3STXOAO.js";
+import "./chunk-PBK257CI.js";
+import "./chunk-7UWUEUVJ.js";
+import "./chunk-7JKNWDYN.js";
+import "./chunk-C2I4GC36.js";
+import "./chunk-VJTTTIIB.js";
 import {
   getAccessToken
-} from "./chunk-YH2JVJAO.js";
-import "./chunk-VNDR2T35.js";
-import "./chunk-EPFDY5JU.js";
-import "./chunk-A4R5CAY4.js";
+} from "./chunk-QE2GNFMP.js";
+import "./chunk-QRKBFXIB.js";
+import "./chunk-5Y5HWQ2P.js";
+import "./chunk-F3IA3YWI.js";
 import "./chunk-LCOCRJ4K.js";
-import "./chunk-WNCW2RNB.js";
-import "./chunk-QGIZLFAS.js";
+import "./chunk-NFSUGVDY.js";
+import "./chunk-YE7MHW45.js";
 import "./chunk-2MNLRIOX.js";
-import "./chunk-AKERAUNH.js";
+import "./chunk-PFW7WFAT.js";
 import "./chunk-CJDPSCMX.js";
-import "./chunk-ZXRDD3Q2.js";
-import "./chunk-PY722CHR.js";
-import "./chunk-ZGLNHA7T.js";
-import "./chunk-ORGNLQN6.js";
+import "./chunk-UKJFCEMI.js";
+import "./chunk-VD7YTLWL.js";
+import "./chunk-UU7EEREQ.js";
+import "./chunk-S42TFTM5.js";
 import "./chunk-ZYJP6BOO.js";
 import "./chunk-QO6BVGS5.js";
-import "./chunk-PEX4QZVI.js";
-import "./chunk-MYZRMSPM.js";
+import "./chunk-ULUUOUQX.js";
+import "./chunk-TG65NWUR.js";
 import {
   yesRerun
-} from "./chunk-UYFUIHH3.js";
+} from "./chunk-C2GHFADU.js";
 import "./chunk-622HUCZT.js";
 import {
   contextFlags
-} from "./chunk-3FRGNBOC.js";
-import "./chunk-NDJAKSE7.js";
+} from "./chunk-6S263KTM.js";
+import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-5SCPRXFB.js";
-import "./chunk-DIWF7L33.js";
-import "./chunk-D5OZRJ3T.js";
-import "./chunk-EF4MHLEW.js";
+import "./chunk-W2BVP27L.js";
+import "./chunk-HKLBDSML.js";
+import "./chunk-RYMGK2K5.js";
+import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-47XT6WQL.js";
+import "./chunk-6PTITS3M.js";
 import "./chunk-DXUICABI.js";
 import {
   bindingFor,
   fetchOrExplain,
   httpFailure,
   parseJsonAnswer
-} from "./chunk-L6HZ67P6.js";
+} from "./chunk-TR7EOUQE.js";
 import {
   describeWrite
 } from "./chunk-4KHEMC32.js";
-import "./chunk-FDTET7FZ.js";
+import "./chunk-GN5SQMIQ.js";
 import "./chunk-MFWF2NZJ.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-CNZASQPL.js";
+import "./chunk-QL3ZJWGG.js";
 import "./chunk-WAVNUTMT.js";
-import "./chunk-ARWMVNDJ.js";
+import "./chunk-5QOV52V4.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
@@ -116,7 +116,7 @@ import "./chunk-X2NL4KUO.js";
 import {
   writeData
 } from "./chunk-4GPIOIAC.js";
-import "./chunk-SKEG3V2V.js";
+import "./chunk-EKTIGGFO.js";
 import "./chunk-E763QI3G.js";
 import "./chunk-BRANWM4U.js";
 import "./chunk-5GIOCDUM.js";
@@ -143,26 +143,26 @@ import {
   warn,
   writeJson,
   writeTargetPayload
-} from "./chunk-CH23ONYG.js";
-import "./chunk-FQ53GTII.js";
-import "./chunk-VJFMUJWZ.js";
+} from "./chunk-C6KBZH7M.js";
+import "./chunk-F5RPNTN7.js";
+import "./chunk-OHTHG3LL.js";
 import "./chunk-6JAEMMZ7.js";
-import "./chunk-5QMJOE2K.js";
+import "./chunk-6ZFJEJXZ.js";
 import "./chunk-45ZUMF4E.js";
 import "./chunk-7KPKDHHI.js";
 import "./chunk-7FIMUFBP.js";
-import "./chunk-T4LJ5UR2.js";
+import "./chunk-6BOKCTCM.js";
 import "./chunk-ICK36EGF.js";
 import "./chunk-BEXZ4XRV.js";
 import "./chunk-ETAZIGNT.js";
 import "./chunk-GSGDWJB5.js";
-import "./chunk-SLGJIWCY.js";
+import "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
 import "./chunk-VTMTIBKP.js";
 import "./chunk-H2V3N23D.js";
 import "./chunk-3JDU4VRL.js";
 import "./chunk-WTPZRR4I.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5KJBWIDZ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -173,9 +173,9 @@ import "./chunk-UDZX2ZL4.js";
 import "./chunk-ZY55DO5P.js";
 import "./chunk-A2AOUBJS.js";
 import "./chunk-TFFGOFVZ.js";
-import "./chunk-7VR4IO5B.js";
+import "./chunk-3P35HT64.js";
 import "./chunk-EHP3WPEG.js";
-import "./chunk-D3KEPRRN.js";
+import "./chunk-LTPF25L2.js";
 import "./chunk-Q7DGTQ5G.js";
 import "./chunk-4XHAT7C5.js";
 import "./chunk-S56YBYMN.js";
@@ -203,7 +203,7 @@ async function runWorkspaceCommand(args) {
     case "reset-tables":
       return runResetTables(args);
     case "branch": {
-      const { runBranchCommand } = await import("./branch-commands-EGY7ZEZE.js");
+      const { runBranchCommand } = await import("./branch-commands-CR3SAHMV.js");
       return runBranchCommand(args);
     }
     default:
@@ -232,7 +232,7 @@ async function runDetails(args) {
   const auth = await getAccessToken(args);
   const workspaceId = auth.workspaceId;
   const all = await fetchWorkspaces(auth).catch(async (err) => {
-    const { unansweredRead } = await import("./source-resolve-BBHYTOXI.js");
+    const { unansweredRead } = await import("./source-resolve-LNRUITLS.js");
     throw unansweredRead(err, "read the workspace list", "workspace");
   });
   const match = all.find((w) => w.id === workspaceId);
@@ -292,7 +292,7 @@ async function runExport(args) {
 var EXIT_DIFF_MISMATCH = 2;
 async function runDiff(args) {
   if (args.file === void 0 && args.bundle === void 0) {
-    const { resolveProjectEntry } = await import("./deploy-source-HYVZEYXV.js");
+    const { resolveProjectEntry } = await import("./deploy-source-FPNNNNOW.js");
     const entry = resolveProjectEntry(process.cwd());
     if (entry !== void 0) args = { ...args, file: entry };
   }
@@ -305,39 +305,34 @@ async function runDiff(args) {
   try {
     live = await fetchWorkspaceBundle(auth, args.branch);
   } catch (err) {
-    const { unansweredRead } = await import("./source-resolve-BBHYTOXI.js");
+    const { unansweredRead } = await import("./source-resolve-LNRUITLS.js");
     throw unansweredRead(err, "read the workspace to compare", "workspace");
   }
-  const { compareToLive, SETTINGS_LABEL } = await import("./live-diff-5E2BQWQ7.js");
-  const { codePinnedCanonicals, releaseCanonicalLock } = await import("./release-command-7F5TBKO2.js");
+  const { SETTINGS_LABEL } = await import("./live-diff-CGTGOH3S.js");
+  const { codePinnedCanonicals, releaseCanonicalLock } = await import("./release-command-MKNESNGB.js");
   const pinned = codePinnedCanonicals(local.bundle, releaseCanonicalLock(args), args.file !== void 0);
-  const result = compareToLive(
-    JSON.parse(local.bundle),
-    live,
-    new Set(pinned.map((p) => `${p.payloadKey}:${p.name}`)),
-    // Everything, not the report's sample: a caller who ran a diff asked for the
-    // list, and a truncated one would hide the object they are looking for.
-    // The documentation token is compared as a value: this asks what the target
-    // SAYS, and the live token is the outcome of the one this project sends.
-    { sample: "all", documentation: "compare" }
-  );
-  if (!result.converged) process.exitCode = EXIT_DIFF_MISMATCH;
   const listed = await listBranches(auth, { baseUrl: auth.instance, workspaceId: auth.workspaceId }).catch(
     () => void 0
   );
   const liveLabel = listed?.find((b) => b.live)?.label;
   const comparedLabel = args.branch ?? liveLabel;
   const comparedIsLive = args.branch === void 0 ? true : liveLabel === void 0 ? null : args.branch === liveLabel;
-  const { landingLockPath } = await import("./landing-record-TPPYFQAS.js");
-  const { readSyncBaseline, storedBranchLabel } = await import("./sync-record-RGHK7EAL.js");
-  const { syncDirection } = await import("./sync-baseline-DOV5AGIO.js");
+  const { landingLockPath } = await import("./landing-record-DO3PM7QP.js");
+  const { readSyncBaseline, storedBranchLabel } = await import("./sync-record-U65BCPSP.js");
+  const { directedComparison } = await import("./sync-baseline-3CDL4PKT.js");
   const syncLabel = storedBranchLabel(listed, args.branch);
   const baseline = syncLabel === void 0 ? void 0 : readSyncBaseline(landingLockPath(args, args.file !== void 0 ? { entryFile: args.file } : {}), {
     instance: auth.instance,
     workspaceId: auth.workspaceId,
     branch: syncLabel
   });
-  const direction = syncDirection(JSON.parse(local.bundle), live, result, baseline);
+  const { result, direction } = directedComparison(
+    JSON.parse(local.bundle),
+    live,
+    new Set(pinned.map((p) => `${p.payloadKey}:${p.name}`)),
+    baseline
+  );
+  if (!result.converged) process.exitCode = EXIT_DIFF_MISMATCH;
   if (isMachineOutput(args)) {
     writeJson({
       branch: comparedLabel ?? null,
@@ -439,7 +434,7 @@ Pass the entry file: \`xanosdk workspace reset-tables ./index.ts --table <guid>
   const local = await loadBundleText(args.write === true && !willRefuse ? args : { ...args, lockReadOnly: true }, target, {
     withSeed: true
   });
-  const { seedRowsByTableGuid } = await import("./seed-FRKMDN2Z.js");
+  const { seedRowsByTableGuid } = await import("./seed-KEPIS7UZ.js");
   const seeds = seedRowsByTableGuid(local.content);
   const declared = projectTables(local.bundle);
   const unknown = guids.filter((guid) => !declared.some((t) => t.guid === guid));
@@ -476,7 +471,7 @@ ${declared.map((t) => `  ${t.guid}  ${t.name}${seeds.has(t.guid) ? "  (seeded)"
     );
   }
   const destination = credentialWriteTarget(auth);
-  const { countTableRows } = await import("./table-OAYGFGEN.js");
+  const { countTableRows } = await import("./table-E5YTK7QX.js");
   const planned = await Promise.all(
     guids.map(async (guid) => {
       const table = byGuid.get(guid);
@@ -515,7 +510,7 @@ ${declared.map((t) => `  ${t.guid}  ${t.name}${seeds.has(t.guid) ? "  (seeded)"
       return;
     }
   }
-  const { truncateTable, insertTableRows } = await import("./table-OAYGFGEN.js");
+  const { truncateTable, insertTableRows } = await import("./table-E5YTK7QX.js");
   const done = [];
   for (const t of planned) {
     step(`Resetting ${t.name}`);
@@ -565,4 +560,4 @@ export {
   EXIT_DIFF_MISMATCH,
   runWorkspaceCommand
 };
-//# sourceMappingURL=workspace-command-MHIIY352.js.map
+//# sourceMappingURL=workspace-command-KEKL27Y4.js.map

package/dist/{workspace-env-LLRWCHSA.js → workspace-env-GGEZVZDY.js}

@@ -14,19 +14,19 @@ import {
   renderWorkspaceEnvFile,
   valueProblem,
   workspaceEnvPathIn
-} from "./chunk-PV25BDCH.js";
-import "./chunk-5SCPRXFB.js";
-import "./chunk-DIWF7L33.js";
-import "./chunk-D5OZRJ3T.js";
-import "./chunk-EF4MHLEW.js";
+} from "./chunk-M3RLLT4O.js";
+import "./chunk-W2BVP27L.js";
+import "./chunk-HKLBDSML.js";
+import "./chunk-RYMGK2K5.js";
+import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-47XT6WQL.js";
+import "./chunk-6PTITS3M.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-L6HZ67P6.js";
+import "./chunk-TR7EOUQE.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-CNZASQPL.js";
+import "./chunk-QL3ZJWGG.js";
 import "./chunk-WAVNUTMT.js";
 import "./chunk-LLNZGEFK.js";
 import {
@@ -36,12 +36,12 @@ import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-5GIOCDUM.js";
 import "./chunk-LJM5CIY4.js";
-import "./chunk-CH23ONYG.js";
+import "./chunk-C6KBZH7M.js";
 import {
   isRepresentableName,
   safeNames
 } from "./chunk-GSGDWJB5.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
 import "./chunk-TFFGOFVZ.js";
@@ -68,4 +68,4 @@ export {
   valueProblem,
   workspaceEnvPathIn
 };
-//# sourceMappingURL=workspace-env-LLRWCHSA.js.map
+//# sourceMappingURL=workspace-env-GGEZVZDY.js.map

package/dist/{workspace-export-BIKAYHWJ.js → workspace-export-UHY22VBI.js}

@@ -1,14 +1,14 @@
 import {
   assertBranchReadSupported,
   exportWorkspaceBundle
-} from "./chunk-2SD4LA22.js";
+} from "./chunk-QC3MKMDK.js";
 import "./chunk-3DRXWLJ5.js";
 import "./chunk-X4DVXBFY.js";
-import "./chunk-L6HZ67P6.js";
+import "./chunk-TR7EOUQE.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
-import "./chunk-CH23ONYG.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-C6KBZH7M.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
 import "./chunk-TFFGOFVZ.js";
@@ -18,4 +18,4 @@ export {
   assertBranchReadSupported,
   exportWorkspaceBundle
 };
-//# sourceMappingURL=workspace-export-BIKAYHWJ.js.map
+//# sourceMappingURL=workspace-export-UHY22VBI.js.map

package/dist/{writable-UOTO4WWC.js → writable-2A6MBSFD.js}

@@ -5,10 +5,10 @@ import {
   unreadableError,
   unwritableBlocker,
   unwritableError
-} from "./chunk-PEX4QZVI.js";
+} from "./chunk-ULUUOUQX.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-CH23ONYG.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-C6KBZH7M.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
 import "./chunk-TFFGOFVZ.js";
@@ -22,4 +22,4 @@ export {
   unwritableBlocker,
   unwritableError
 };
-//# sourceMappingURL=writable-UOTO4WWC.js.map
+//# sourceMappingURL=writable-2A6MBSFD.js.map

package/dist/{xano-LCI7VWPS.js → xano-6T6L7TTI.js}

@@ -3,22 +3,22 @@ import {
   Xano,
   standaloneDefKind,
   workspace
-} from "./chunk-5QMJOE2K.js";
+} from "./chunk-6ZFJEJXZ.js";
 import "./chunk-45ZUMF4E.js";
 import "./chunk-7KPKDHHI.js";
 import "./chunk-7FIMUFBP.js";
-import "./chunk-T4LJ5UR2.js";
+import "./chunk-6BOKCTCM.js";
 import "./chunk-ICK36EGF.js";
 import "./chunk-BEXZ4XRV.js";
 import "./chunk-ETAZIGNT.js";
 import "./chunk-GSGDWJB5.js";
-import "./chunk-SLGJIWCY.js";
+import "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
 import "./chunk-VTMTIBKP.js";
 import "./chunk-H2V3N23D.js";
 import "./chunk-3JDU4VRL.js";
 import "./chunk-WTPZRR4I.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5KJBWIDZ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -40,4 +40,4 @@ export {
   standaloneDefKind,
   workspace
 };
-//# sourceMappingURL=xano-LCI7VWPS.js.map
+//# sourceMappingURL=xano-6T6L7TTI.js.map

package/dist/{xanosdk-import-S7A3CVBN.js → xanosdk-import-HYHABD5U.js}

@@ -13,19 +13,19 @@ import {
   resetXanoSdkImportDetection,
   withDefaultBranchPointer,
   xanosdkImport
-} from "./chunk-567KK6XF.js";
+} from "./chunk-FN7E6XGD.js";
 import "./chunk-3DRXWLJ5.js";
 import "./chunk-X4DVXBFY.js";
-import "./chunk-MBL7CXJ7.js";
-import "./chunk-L6HZ67P6.js";
+import "./chunk-VJTTTIIB.js";
+import "./chunk-TR7EOUQE.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
-import "./chunk-CH23ONYG.js";
+import "./chunk-C6KBZH7M.js";
 import "./chunk-7FIMUFBP.js";
 import "./chunk-H2V3N23D.js";
 import "./chunk-3JDU4VRL.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5KJBWIDZ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -53,4 +53,4 @@ export {
   withDefaultBranchPointer,
   xanosdkImport
 };
-//# sourceMappingURL=xanosdk-import-S7A3CVBN.js.map
+//# sourceMappingURL=xanosdk-import-HYHABD5U.js.map

package/dist/{xanosdk-project-J4VCFRHP.js → xanosdk-project-2T56DRYS.js}

@@ -3,30 +3,30 @@ import {
   enterProjectRoot,
   isProjectDir,
   projectDirFrom
-} from "./chunk-ZJOAWRED.js";
+} from "./chunk-C2I4GC36.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-5SCPRXFB.js";
-import "./chunk-DIWF7L33.js";
-import "./chunk-D5OZRJ3T.js";
-import "./chunk-EF4MHLEW.js";
+import "./chunk-W2BVP27L.js";
+import "./chunk-HKLBDSML.js";
+import "./chunk-RYMGK2K5.js";
+import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-47XT6WQL.js";
+import "./chunk-6PTITS3M.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-L6HZ67P6.js";
+import "./chunk-TR7EOUQE.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-CNZASQPL.js";
+import "./chunk-QL3ZJWGG.js";
 import "./chunk-WAVNUTMT.js";
-import "./chunk-ARWMVNDJ.js";
+import "./chunk-5QOV52V4.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-5GIOCDUM.js";
 import "./chunk-LJM5CIY4.js";
-import "./chunk-CH23ONYG.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-C6KBZH7M.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
 import "./chunk-TFFGOFVZ.js";
@@ -39,4 +39,4 @@ export {
   isProjectDir,
   projectDirFrom
 };
-//# sourceMappingURL=xanosdk-project-J4VCFRHP.js.map
+//# sourceMappingURL=xanosdk-project-2T56DRYS.js.map

package/guides/codes.md

@@ -28,6 +28,7 @@ Match on the code, never on the message text: messages are reworded, codes are n
 | `SDK_SEED_IN_STATIC` | A static build carries seed values from non-public columns (`details.leaks[]`); nothing was published. |
 | `SDK_SHARED_SCHEMA_CHANGE` | A promote would alter tables live serves from (`details.reason: "shared-schema-changes"`, `details.changes[]`), or could not read them (`"tables-unreadable"`); `--allow-shared-schema-changes` lands it. Exit 2. |
 | `SDK_USAGE` | The input is wrong — a command line, a def or a value the build or the command refuses as written — a confirmation was needed off a terminal (`details.reason: "needs-confirmation"`), or the named backend is in another workspace (`details.reason: "wrong-workspace"`, `details.heldIn`). Exit 1. |
+| `SDK_WORKSPACE_CHANGED` | A `deploy --to workspace` would overwrite objects changed in Xano since the last sync (`details.reason: "workspace-changed"`, `details.objects[]`, `details.changedThere[]`, `details.changedBoth[]`, `details.baseline`); pull first, or `--overwrite` deploys over them. Exit 2. |
 
 ## CLI warnings
 
@@ -62,6 +63,7 @@ Printed as `! …` on stderr, and as `{ code, message }` in a `--json` document'
 | `deploy.ephemeral-write` | Says which ephemeral this deploy writes to. |
 | `deploy.import-failed-backup` | The import failed. Your pre-deploy snapshot is on branch "…". |
 | `deploy.open-no-url` | --open had no URL to open — the deploy reported none. |
+| `deploy.overwrite-changed` | `--overwrite`: … object… changed in Xano since the last sync … overwritten: |
 | `deploy.replace-wipe` | `--replace` wipes … before importing — including table data and history. |
 | `deploy.rows-written` | Table rows from the bundle … written. |
 | `deploy.tenant-write` | This deploy writes to a target that is not an ephemeral, named in the message. |
@@ -279,7 +281,7 @@ Raised while a workspace compiles (`export`, `deploy`, `release`, …). A warnin
 
 | Code | Meaning |
 |---|---|
-| `agent.args-placeholder-unpassed` | … "…": `s.ai.agent.run` of agent "…" passes args …, but the agent's prompt reads `{{ $args… }}`, which this run never passes, so it resolves to nothing. |
+| `agent.args-placeholder-unpassed` | …: `s.ai.agent.run` of agent "…" passes args …, but the agent's prompt reads `{{ $args… }}`, which this run never passes, so it resolves to nothing. |
 | `agent.literal-api-key` | agent "…" spells its `llm.apiKey` literally. |
 | `api-group.cors-no-methods` | apiGroup "…": `cors.mode: "custom"` enables no `allowMethods`, so no `access-control-allow-methods` is sent and a preflight has nothing to approve. |
 | `api-group.cors-no-origins` | apiGroup "…": `cors.mode: "custom"` with an empty `allowOrigins` matches no request, so responses carry NO `access-control-*` headers and every browser call… |
@@ -367,6 +369,7 @@ Raised while a workspace compiles (`export`, `deploy`, `release`, …). A warnin
 | `search.request-only-filter` | … pipes a search operand through `…`, which evaluates only in the request. |
 | `seed.invalid` | A seed row does not match its table's columns. |
 | `seed.public-seed` | Table "…" declares publicSeed but has no `seed`: there are no seed values to declare public. |
+| `stack.agent-tools-off` | …: `s.ai.agent.run` of agent "…" leaves `allowToolExecution` unset, so the agent runs with its tools off: it sees them but never calls one, and answers as if… |
 | `stack.auth-no-caller` | … "…" reads `auth()`, but …: it deploys clean and never holds the caller's identity. |
 | `stack.auth-null-host` | … "…": an `s.redis.ratelimit` in its stack keys off auth(), where …. |
 | `stack.blank-table` | … has … (…) bound to no table (`table: null`) — … nothing when run. |

package/guides/deploying.md

@@ -1295,7 +1295,7 @@ xanosdk workspace diff ./xano/index.ts --json
 }
 ```
 
-- `changedThere`: pull before you deploy, or the deploy overwrites that edit.
+- `changedThere`: pull before you deploy. `deploy --to workspace` refuses to overwrite it (see below).
 - `changedHere`: deploy it.
 - `changedBoth`: reconcile by hand.
 - `unclassified`: the baseline cannot tell. The object has no baseline entry, both sides
@@ -1323,6 +1323,22 @@ A few things to know about the baseline:
   next sync records a new baseline.
 - On a merge conflict in `xano.lock`, keep either side's baseline for a branch, or delete it.
 
+#### The deploy guard
+
+`deploy --to workspace` reads the same baseline before it writes. When an object it would
+overwrite is in `changedThere` or `changedBoth`, it refuses with exit 2 and
+`SDK_WORKSPACE_CHANGED`. The refusal's `details.objects` lists those objects, and
+`details.changedThere`, `details.changedBoth` and `details.baseline` say how each was classified.
+Pull the change into the project and commit it, then deploy again. To deploy over it anyway, pass
+`--overwrite`; the run warns (`deploy.overwrite-changed`) and names what it overwrote. A
+`--dry-run` refuses nothing: it warns and lists the objects under `changedInXano`.
+
+The guard counts only what the deploy writes. A merge leaves an object that only the branch holds
+alone, so an object added in Xano is refused over only under `--prune` or `--replace`, which
+delete it. Nothing is refused when the branch has no baseline, over an `unclassified`
+difference, or on a `--branch` deploy to a branch that does not exist yet. It reads the branch
+once, before the confirmation, so an edit made in Xano after that read is not caught.
+
 ### Deploying to a branch
 
 `--branch <label>` stages on a Xano branch instead of the live one, which is the safer shape

package/llms/errors.md

@@ -34,7 +34,7 @@
 - A response types as `StackTupleWidened` — a `Statement[]` helper was spread into the stack; return `statements(...)`. `llms.txt`; `llms/statements-runtime.md`.
 - `ERR_PACKAGE_PATH_NOT_EXPORTED` — `tsx -e "import …"`, or running from outside the project root; run a real file with `tsx <file.ts>` from the root. `llms/client.md`.
 - `Missing statement: mvp:placeholder` on import — an unconfigured slot in a pulled tree; replace it with the statement it stands in for. `llms/legacy.md`.
-- A CLI command fails under `--json` or piped (unless stdout carries data): stdout is `{ ok: false, error: { code, message, exitCode, details?, suggestion? } }`, as does a failed release write. Codes: `SDK_SEED_IN_STATIC` (`details.leaks[]` → `publicSeed`), `SDK_EXPORT_INVALID` (`details.diagnostics[]`, `--strict` too), `SDK_DRIFT`, `SDK_BRANCH_TAKEN`, `SDK_BRANCH_LIVE`, `SDK_RELEASE_NAME_TAKEN`, `SDK_RELEASE_FILES_NOT_CARRIED`, `SDK_LIVE_BRANCH_MISMATCH` (`details.conflictsWith`), `SDK_IDENTITY_CONFLICT`, `SDK_KIND_CONFLICT`, `SDK_PRUNE_OUT_OF_SCOPE`, `SDK_IMPORT_REFUSED`, `SDK_SHARED_SCHEMA_CHANGE`, `SDK_CONSTRAINT_VIOLATION`, `SDK_CREDENTIAL_REJECTED` (`details`: `{ profile, credentialType, instance, workspaceId, signIn }`; ids null on a refused env refresh), `SDK_USAGE` (`details.reason: "needs-confirmation"`: run its `Re-run as`), `SDK_ERROR`. Landing refusal `details.refused`: identityConflict, renamePending, kindConflict, uniqueViolation, tableTrigger, importInProgress, importRefused, pruneOutOfScope. `warnings[]` / `details.warnings` / `accepted[]` entries: `{ code, message, subject? }` (`subject`: the def's `{ kind, name }`). Backend documents add `selector` and `workspaceId`.
+- A CLI command fails under `--json` or piped (unless stdout carries data): stdout is `{ ok: false, error: { code, message, exitCode, details?, suggestion? } }`, as does a failed release write. Codes: `SDK_SEED_IN_STATIC` (`details.leaks[]` → `publicSeed`), `SDK_EXPORT_INVALID` (`details.diagnostics[]`, `--strict` too), `SDK_DRIFT`, `SDK_BRANCH_TAKEN`, `SDK_BRANCH_LIVE`, `SDK_RELEASE_NAME_TAKEN`, `SDK_RELEASE_FILES_NOT_CARRIED`, `SDK_LIVE_BRANCH_MISMATCH` (`details.conflictsWith`), `SDK_IDENTITY_CONFLICT`, `SDK_KIND_CONFLICT`, `SDK_PRUNE_OUT_OF_SCOPE`, `SDK_IMPORT_REFUSED`, `SDK_SHARED_SCHEMA_CHANGE`, `SDK_CONSTRAINT_VIOLATION`, `SDK_CREDENTIAL_REJECTED` (`details`: `{ profile, credentialType, instance, workspaceId, signIn }`; ids null on a refused env refresh), `SDK_WORKSPACE_CHANGED` (deploy over objects edited in Xano since the last sync; `details.objects`; pull first or `--overwrite`), `SDK_USAGE` (`details.reason: "needs-confirmation"`: run its `Re-run as`), `SDK_ERROR`. Landing refusal `details.refused`: identityConflict, renamePending, kindConflict, uniqueViolation, tableTrigger, importInProgress, importRefused, pruneOutOfScope. `warnings[]` / `details.warnings` / `accepted[]` entries: `{ code, message, subject? }` (`subject`: the def's `{ kind, name }`). Backend documents add `selector` and `workspaceId`.
 - A CLI command reports `could not reach <url>: fetch failed (<code>)` — blocked egress, not a bad credential; fix it before `xanosdk login`, which rotates a single-use refresh token.
 
 ### CLI exit codes

package/llms/kinds-agent-mcp.md

@@ -25,6 +25,6 @@
   - `llm` (REQUIRED): typed provider settings, a discriminated union on `type` (`"xano-free" | "anthropic" | "openai" | "google-genai"`). Shared fields: `systemPrompt?`, `maxSteps?` (default `5`), and `prompt?` XOR `messages?` (genuinely exclusive: both is a type error and throws — the engine stores ONE `prompt_type`, so one would be dropped); plus provider fields (`apiKey?`, `model?`, `temperature?`, `reasoningEffort?`, …). String fields accept Twig placeholders — `{{ $args.x }}` for run inputs (the `args` of `s.ai.agent.run`), `{{ $env.NAME }}` for env vars.
   - `tools?`: same `ToolsetToolEntry[]` as `mcpServer` — bare `tool()` handles, or a `{ tool, enabled?, auth? }` wrapper when one needs `enabled`/`auth`. A tool reading `auth()` MUST use the wrapper naming the auth table — a bare handle runs it with no caller (see `mcpServer`'s `tools?`).
   - `output?`: `{ schema: Record<string, input.*>, enabled? }` — structured-output schema. `schema` is a named-field record authored with the `input.*` catalog, exactly like a `defineFunction`/`query` `input:` map (the stored `structuredOutputsSchema` is the same wire shape as function inputs). e.g. `output: { schema: { priority: input.enum(["low","high"]), summary: input.text() } }`. When you pass the agent *handle* to `s.ai.agent.run({ agent })`, `.result` is typed straight from this schema — no `resultShape` witness needed (the shape is declared once). `resultShape` remains only to override that, or to type an agent referenced by bare name.
-  - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, as: "run" })`) — it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var("summary", ref("run.result.summary"))`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` — raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. `.toolCalls` is the FINAL step's calls only (often `[]`); every call is a `.steps[].content[]` entry of `type: "tool-call"`.
+  - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, allowToolExecution: c.bool(true), as: "run" })`) — it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var("summary", ref("run.result.summary"))`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` — raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. `.toolCalls` is the FINAL step's calls only (often `[]`); every call is a `.steps[].content[]` entry of `type: "tool-call"`. ⚠ An agent with tools needs `allowToolExecution: c.bool(true)` on the run: unset, its tools are OFF and it answers without them (warns `stack.agent-tools-off`).
   - **Marketplace:** for chat history, use `@xano-sdk/chatbot`; for vector RAG, use `@xano-sdk/vector` (`tools: [vector.searchTool]`). Find add-ons with `xanosdk marketplace search <q>`.
 - Both kinds persist under the `toolset` payload key, so a same-name `agent` + `mcpServer` pair derives ONE guid and `export()` throws — give them distinct names.