@xano/sdk 1.0.7 → 1.0.8

package/dist/{chunk-I6XRUU6U.js → chunk-YG7S3N7P.js}

@@ -9,47 +9,47 @@ import {
   staticRetryHint,
   unknownStaticOutcome,
   warnStaticTeardown
-} from "./chunk-RRMH7WMY.js";
+} from "./chunk-VHV25AAO.js";
 import {
   objectDigests,
   syncDigests
-} from "./chunk-JI3BLXWQ.js";
+} from "./chunk-6YOH2L3G.js";
 import {
   archiveSeedContent
-} from "./chunk-NV37YGOV.js";
+} from "./chunk-XYTVP4WI.js";
 import {
   shownLabel
-} from "./chunk-N3YFCFCO.js";
+} from "./chunk-NFZUXS7D.js";
 import {
   confirm,
   needsConfirmation
-} from "./chunk-7M6JP3FS.js";
+} from "./chunk-HQPL34O6.js";
 import {
   assertStorageModesKept,
   discloseCanonicalMoves,
   movesClause,
   storageChangesPayload
-} from "./chunk-BSVQEKHO.js";
+} from "./chunk-HTP2CLRQ.js";
 import {
   listTables,
   tableRowCounter,
   tableRowIds
-} from "./chunk-H2K4GFUS.js";
+} from "./chunk-YP76ZCQ5.js";
 import {
   landedRecordFor,
   landingLockPath,
   recordForeignLanding,
   recordLanding
-} from "./chunk-2YER2J47.js";
+} from "./chunk-S2F7KVUL.js";
 import {
   recordSync
-} from "./chunk-VAGSKUWC.js";
+} from "./chunk-R3LANPQZ.js";
 import {
   XANOSDK_IMPORT_CONFLICT_CODE,
   XANOSDK_IMPORT_UNIQUENESS_CODE,
   XanoSdkImportRefusal,
   xanosdkImport
-} from "./chunk-567KK6XF.js";
+} from "./chunk-FN7E6XGD.js";
 import {
   encodeWorkspaceArchive
 } from "./chunk-3DRXWLJ5.js";
@@ -62,7 +62,7 @@ import {
   listBranchListing,
   liveBranchLabel,
   setLiveBranch
-} from "./chunk-M2C54ZBC.js";
+} from "./chunk-75MKIQON.js";
 import {
   compareToLive,
   envValuesOf,
@@ -73,54 +73,54 @@ import {
   sharedSchemaChanges,
   storedColumnsAfter,
   uniqueIndexLabels
-} from "./chunk-IYXL5NYU.js";
+} from "./chunk-I53OTC3O.js";
 import {
   assertBundleFile,
   assertBundleInput,
   loadBundleText,
   resolveLockPath
-} from "./chunk-DG3APBUJ.js";
+} from "./chunk-ZJCHS7FM.js";
 import {
   LookupFailedError,
   isUnansweredLookup,
   unansweredCause
-} from "./chunk-TWVUYS63.js";
+} from "./chunk-7UWUEUVJ.js";
 import {
   isSignatureRefusal
-} from "./chunk-MBL7CXJ7.js";
+} from "./chunk-VJTTTIIB.js";
 import {
   getAccessToken
-} from "./chunk-YH2JVJAO.js";
+} from "./chunk-QE2GNFMP.js";
 import {
   readLockFile
 } from "./chunk-CJDPSCMX.js";
 import {
   ephemeralLandedOn
-} from "./chunk-ORGNLQN6.js";
+} from "./chunk-S42TFTM5.js";
 import {
   pipedYes,
   retryCommand,
   withheldNote
-} from "./chunk-UYFUIHH3.js";
+} from "./chunk-C2GHFADU.js";
 import {
   contextFlags
-} from "./chunk-3FRGNBOC.js";
+} from "./chunk-6S263KTM.js";
 import {
   backendDirIn
-} from "./chunk-5SCPRXFB.js";
+} from "./chunk-W2BVP27L.js";
 import {
   shellWord
 } from "./chunk-FWD7AL6N.js";
 import {
   TransportError,
   isTimeoutError
-} from "./chunk-L6HZ67P6.js";
+} from "./chunk-TR7EOUQE.js";
 import {
   describeWrite
 } from "./chunk-4KHEMC32.js";
 import {
   seedRowsByTableGuid
-} from "./chunk-FDTET7FZ.js";
+} from "./chunk-GN5SQMIQ.js";
 import {
   destinationKey,
   groupNames,
@@ -149,7 +149,7 @@ import {
   warn,
   writeJson,
   writeTargetPayload
-} from "./chunk-CH23ONYG.js";
+} from "./chunk-C6KBZH7M.js";
 import {
   calcSignatureJson,
   signatureHolds
@@ -637,7 +637,7 @@ function isTransientReadFailure(err) {
   return isUnansweredLookup(err);
 }
 async function readLive(auth, dest, branch) {
-  const { exportWorkspaceBundle } = await import("./workspace-export-BIKAYHWJ.js");
+  const { exportWorkspaceBundle } = await import("./workspace-export-UHY22VBI.js");
   let failure;
   for (let attempt = 0; attempt <= LIVE_READ_RETRY_PAUSES_MS.length; attempt++) {
     try {
@@ -744,7 +744,7 @@ function targetIsEmpty(live) {
 async function convergedWithLive(live, req, outgoingBundle, pinned) {
   if (live === void 0 || req.mode !== "merge") return false;
   if (req.records === true || req.truncate === true) return false;
-  const { compareToLive: compareToLive2 } = await import("./live-diff-5E2BQWQ7.js");
+  const { compareToLive: compareToLive2 } = await import("./live-diff-CGTGOH3S.js");
   let result;
   try {
     result = compareToLive2(
@@ -765,7 +765,7 @@ async function convergedWithLive(live, req, outgoingBundle, pinned) {
 async function unchangedWithLive(live, req, outgoingBundle, pinned) {
   if (live === void 0 || req.mode !== "merge") return void 0;
   if (req.records === true || req.truncate === true) return void 0;
-  const { compareToLive: compareToLive2, declaredLabels, payloadOf: payloadOf2, SETTINGS_LABEL } = await import("./live-diff-5E2BQWQ7.js");
+  const { compareToLive: compareToLive2, declaredLabels, payloadOf: payloadOf2, SETTINGS_LABEL } = await import("./live-diff-CGTGOH3S.js");
   try {
     const outgoing = JSON.parse(outgoingBundle);
     const result = compareToLive2(outgoing, live, new Set(pinned.map((p) => `${p.payloadKey}:${p.name}`)), {
@@ -793,7 +793,7 @@ function markUnchanged(presented, unchanged, noun) {
 }
 var REPLACE_DROPS = "which deletes every table's rows there (only seed rows come back)";
 async function replaceCommandHint(args) {
-  const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./deploy-command-OEVEE6UG.js");
+  const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./deploy-command-FIDS56ZC.js");
   const valued = /* @__PURE__ */ new Set(["--branch", "--backup-branch", "--expect-live"]);
   const dropped = /* @__PURE__ */ new Set(["--prune", "--reset-data", "--seed", "--set-live", "--dry-run", "--replace", "--yes", "-y"]);
   const argv = [];
@@ -824,7 +824,7 @@ function landingTableFields(losses) {
   };
 }
 async function warnAboutLiveLosses(live, req, outgoingBundle, setWhere = "workspace", fromBundle = false, replaceHint = "`xanosdk deploy <source> --to <destination> --replace`.", noun = "workspace", failure, stored) {
-  const { NO_TABLE_EFFECTS, tableEffectsOf, discloseTableEffects, tableEffectFields, alteringChanges, droppedAndAdded } = await import("./plan-disclosure-JR52DWXN.js");
+  const { NO_TABLE_EFFECTS, tableEffectsOf, discloseTableEffects, tableEffectFields, alteringChanges, droppedAndAdded } = await import("./plan-disclosure-GNLDYV2A.js");
   const none = {
     ...tableEffectFields(NO_TABLE_EFFECTS),
     renamedTables: [],
@@ -843,7 +843,7 @@ async function warnAboutLiveLosses(live, req, outgoingBundle, setWhere = "worksp
     blank();
     return none;
   }
-  const { diffAgainstLive, tableAdditions } = await import("./live-diff-5E2BQWQ7.js");
+  const { diffAgainstLive, tableAdditions } = await import("./live-diff-CGTGOH3S.js");
   let diff;
   let additions;
   try {
@@ -1256,9 +1256,9 @@ function gatedSchemaChanges(changes) {
     return details.length === 0 ? [] : [{ ...c, details }];
   });
 }
-function refuseOrReport(args, message, result, details) {
+function refuseOrReport(args, message, result, details, code = "SDK_SHARED_SCHEMA_CHANGE") {
   if (!args.dryRun) {
-    throw new CliError("SDK_SHARED_SCHEMA_CHANGE", message, {
+    throw new CliError(code, message, {
       exitCode: 2,
       details: { landed: false, declined: false, ...details }
     });
@@ -1272,6 +1272,57 @@ function refuseOrReport(args, message, result, details) {
   blank();
   return result;
 }
+async function assertWorkspaceUnchanged(args, ctx) {
+  const { readSyncBaseline } = await import("./sync-record-U65BCPSP.js");
+  const baseline = readSyncBaseline(ctx.lockPath, ctx.target);
+  if (baseline === void 0) return [];
+  const { directedComparison } = await import("./sync-baseline-3CDL4PKT.js");
+  let compared;
+  try {
+    compared = directedComparison(
+      JSON.parse(ctx.bundle),
+      ctx.live,
+      new Set(ctx.pinned.map((p) => `${p.payloadKey}:${p.name}`)),
+      baseline
+    );
+  } catch {
+    return [];
+  }
+  const { result, direction } = compared;
+  if (direction.baseline === null) return [];
+  const written = /* @__PURE__ */ new Set([...result.differing, ...result.missing, ...ctx.deletes ? result.liveOnly : []]);
+  const both = new Set(direction.changedBoth);
+  const objects = [...direction.changedThere, ...direction.changedBoth].filter((l) => written.has(l)).sort();
+  if (objects.length === 0) return objects;
+  if (args.overwrite) {
+    warn(
+      `\`--overwrite\`: ${objects.length} object${objects.length === 1 ? "" : "s"} changed in Xano since the last sync ${args.dryRun ? "would be" : "will be"} overwritten:`,
+      "deploy.overwrite-changed",
+      objects
+    );
+    return objects;
+  }
+  const lines = objects.map((l) => `  ${l}${both.has(l) ? " (changed here too)" : ""}`);
+  const pull = `xanosdk pull workspace${ctx.pullBranch !== void 0 ? ` --branch ${ctx.pullBranch}` : ""}`;
+  const waive = retryCommand(args, { add: ["--overwrite"] });
+  refuseOrReport(
+    args,
+    `Refusing to deploy to branch "${ctx.target.branch}": ${objects.length} object${objects.length === 1 ? " was" : "s were"} changed in Xano since the last sync (${baseline.by}, ${baseline.at}), and this deploy would overwrite ${objects.length === 1 ? "it" : "them"}:
+${lines.join("\n")}
+
+Bring the change into this project first (\`${pull}\`, then commit and deploy), or deploy over it: \`${waive.command}\`${withheldNote(waive.withheld)}.`,
+    objects,
+    {
+      reason: "workspace-changed",
+      objects,
+      changedThere: direction.changedThere.filter((l) => written.has(l)),
+      changedBoth: direction.changedBoth.filter((l) => written.has(l)),
+      baseline: direction.baseline
+    },
+    "SDK_WORKSPACE_CHANGED"
+  );
+  return objects;
+}
 function releaseCanonicalLock(args, classified) {
   if (classified !== void 0) return classified;
   const lockPath = args.lockPath ?? (args.file !== void 0 ? resolveLockPath(args, args.file) : void 0);
@@ -1558,7 +1609,7 @@ async function unrecordedTableRenames(args, bundle, live, plan, classified) {
   const held = guidsOf(live);
   const codePinned = codePinnedTables(outgoingDoc, lock, classified);
   const { orphanFixUps } = await import("./cli.js");
-  const { setGuidRemedy, clearReplacedCommand } = await import("./keep-data-merge-TDJOIAVT.js");
+  const { setGuidRemedy, clearReplacedCommand } = await import("./keep-data-merge-BIBW4QR4.js");
   const run = (line) => (line ?? "").replace(/^(renamed|deleted)\? run: /, "");
   const out = [];
   const seen = /* @__PURE__ */ new Set();
@@ -1602,7 +1653,7 @@ async function unrecordedTableRenames(args, bundle, live, plan, classified) {
   return out;
 }
 async function pendingRenameRefusal(frame, pending, prune, branch) {
-  const { pendingRenameLines, pendingRenameFollowUp, pendingRenameDetail, sameNameRepin } = await import("./keep-data-merge-TDJOIAVT.js");
+  const { pendingRenameLines, pendingRenameFollowUp, pendingRenameDetail, sameNameRepin } = await import("./keep-data-merge-BIBW4QR4.js");
   const one = pending.length === 1;
   const lines = pending.flatMap(
     (p) => pendingRenameLines(
@@ -2058,7 +2109,7 @@ async function runReleaseCommand(args, dest, opts = {}) {
   assertBundleFile(args, { command: "deploy" });
   const auth = opts.auth ?? await getAccessToken(args);
   const withSeed = req.mode === "replace" || req.records === true;
-  const { discoverToolchainPlugins } = await import("./toolchain-modules-OTNSKK52.js");
+  const { discoverToolchainPlugins } = await import("./toolchain-modules-K46KYJ4G.js");
   const toolchain = await discoverToolchainPlugins(process.cwd(), { frozen: args.frozenLock === true });
   const loaded = await loadBundleText(
     args.dryRun ? { ...args, lockReadOnly: true } : args,
@@ -2084,15 +2135,15 @@ async function runReleaseCommand(args, dest, opts = {}) {
     });
   };
   if (!args.dryRun && args.file !== void 0) {
-    const { ignoreBackendSecretFilesRead } = await import("./deploy-command-OEVEE6UG.js");
+    const { ignoreBackendSecretFilesRead } = await import("./deploy-command-FIDS56ZC.js");
     await ignoreBackendSecretFilesRead(args);
   }
   if (args.static !== void 0) {
-    const { assertNoSeedLeaks } = await import("./deploy-command-OEVEE6UG.js");
+    const { assertNoSeedLeaks } = await import("./deploy-command-FIDS56ZC.js");
     await assertNoSeedLeaks(args.static, nonPublicSeedValues);
   }
   {
-    const { runBundleHooks } = await import("./toolchain-hooks-7PWCFLSU.js");
+    const { runBundleHooks } = await import("./toolchain-hooks-3ZAAAWPL.js");
     const { readVersion } = await import("./cli.js");
     await runBundleHooks(
       toolchain.loaded,
@@ -2198,8 +2249,8 @@ async function runReleaseCommand(args, dest, opts = {}) {
     pinned: pinned.map((p) => p.guid).filter((g) => g !== void 0)
   }).catch(async (err) => {
     if (err instanceof XanoSdkImportRefusal && err.retryable) {
-      const { importInProgressError } = await import("./keep-data-merge-TDJOIAVT.js");
-      const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-GL5HCMVB.js");
+      const { importInProgressError } = await import("./keep-data-merge-BIBW4QR4.js");
+      const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-VZYLYDVX.js");
       const retry = retryCommand2(args);
       throw importInProgressError(
         describeWriteTarget({ base: destBase, workspaceId, label: destShownLabel }),
@@ -2318,11 +2369,25 @@ async function runReleaseCommand(args, dest, opts = {}) {
     if (pending.length > 0) throw await pendingRenameRefusal(refusalFrame, pending, req.prune === true, preview.branch);
   }
   const dryRunUpToDate = req.branch === void 0 && (plan.operations.length === 0 || converged);
+  const changedInXano = landingDest?.kind === "workspace" && live !== void 0 && !dryRunUpToDate && (req.branch === void 0 || scopeBranch !== void 0) ? await (async () => {
+    const readLabel = scopeBranch ?? liveBranchLabel(branches) ?? preview.branch;
+    if (readLabel === void 0) return [];
+    const guardLock = args.file === void 0 && args.lockPath === void 0 ? landingLockPath(args) : landingLockPath(args, { entryFile: args.file, fromProject: false });
+    return assertWorkspaceUnchanged(args, {
+      live,
+      bundle,
+      pinned,
+      lockPath: guardLock,
+      target: { instance: auth.instance, workspaceId: landingDest.workspaceId, branch: readLabel },
+      deletes: req.mode === "replace" || req.prune === true,
+      pullBranch: scopeBranch
+    });
+  })() : [];
   if (req.mode === "merge" && destIsTenant && live !== void 0 && !dryRunUpToDate) {
-    const { liveTableTriggers, tableTriggerMergeError } = await import("./keep-data-merge-TDJOIAVT.js");
+    const { liveTableTriggers, tableTriggerMergeError } = await import("./keep-data-merge-BIBW4QR4.js");
     const triggers = liveTableTriggers(live);
     if (triggers.length > 0) {
-      const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-GL5HCMVB.js");
+      const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-VZYLYDVX.js");
       const replace = retryCommand2(args, { add: ["--replace"], drop: ["--prune", "--yes", "-y"] });
       throw tableTriggerMergeError(destNoun, triggers, {
         command: replace.command,
@@ -2331,7 +2396,7 @@ async function runReleaseCommand(args, dest, opts = {}) {
     }
   }
   if (req.mode === "merge" && live !== void 0 && !dryRunUpToDate && losses.storageChanges.length > 0) {
-    const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-GL5HCMVB.js");
+    const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-VZYLYDVX.js");
     const replace = retryCommand2(args, { add: ["--replace"], drop: ["--prune", "--yes", "-y"] });
     await assertStorageModesKept(losses.storageChanges, tableRowCounter(auth, { workspaceId, base: destBase }), {
       target: destNoun,
@@ -2398,6 +2463,9 @@ async function runReleaseCommand(args, dest, opts = {}) {
         // `--allow-shared-schema-changes`, the real run refuses.
         ...req.branch !== void 0 ? { sharedSchemaChanges: sharedChanges?.length ?? null } : {},
         ...unnamedPublicUrls.length > 0 ? { unnamedPublicUrls: [...unnamedPublicUrls] } : {},
+        // Objects changed in Xano since the last sync that the deploy writes
+        // over: without `--overwrite`, the real run refuses (`SDK_WORKSPACE_CHANGED`).
+        ...changedInXano.length > 0 ? { changedInXano: [...changedInXano] } : {},
         ...staticRemovedField(staticRead?.teardown, void 0)
       });
     }
@@ -2415,7 +2483,7 @@ async function runReleaseCommand(args, dest, opts = {}) {
     assertLiveWorkspaceWasRead(live, destNoun, scopeBranch, liveRead.failure, liveKind);
     reportPlannedCanonicalMoves(canonicalMoves, "will", movesWhen);
     if (req.branch !== void 0 && args.setLive && !args.yes && process.stdin.isTTY !== true) {
-      const { yesRerun } = await import("./retry-command-GL5HCMVB.js");
+      const { yesRerun } = await import("./retry-command-VZYLYDVX.js");
       const { rerun, note } = yesRerun(args, "deploy");
       throw needsConfirmation(
         `Make "${req.branch}" the live branch?${movesClause(canonicalMoves)} (or drop --set-live to stage it)`,
@@ -2455,7 +2523,7 @@ async function runReleaseCommand(args, dest, opts = {}) {
         syncBaseline: null,
         ...seeded.length > 0 ? { seedRows: seeded } : {}
       });
-      const { yesRerun } = await import("./retry-command-GL5HCMVB.js");
+      const { yesRerun } = await import("./retry-command-VZYLYDVX.js");
       const { rerun, note } = yesRerun(args, "deploy");
       const ok = await confirm(`Apply this plan to ${destNoun}?${seedOverwriteClause(seeded)}${movesClause(canonicalMoves, movesWhen === void 0 ? "It" : "Once live, it")}`, {
         flag: "--yes",
@@ -2502,7 +2570,7 @@ Retry, or drop \`--backup-branch\` to deploy without one.`,
       );
     } catch (err) {
       if (err instanceof XanoSdkImportRefusal) {
-        const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-GL5HCMVB.js");
+        const { retryCommand: retryCommand2, withheldNote: withheldNote2 } = await import("./retry-command-VZYLYDVX.js");
         const retry = retryCommand2(args);
         reportApplyRefusal(
           err,
@@ -2699,7 +2767,7 @@ Retry, or drop \`--backup-branch\` to deploy without one.`,
       if (isMachineOutput(args)) writeJson(summary);
       assertStaticMatchesServedUrls(servedDifferences, planContext);
     }
-    const { buildStaticEnv, deployStaticTo } = await import("./deploy-command-OEVEE6UG.js");
+    const { buildStaticEnv, deployStaticTo } = await import("./deploy-command-FIDS56ZC.js");
     const env = buildStaticEnv(destBase, args.staticEnv);
     const explicit = Object.keys(args.staticEnv).length > 0;
     const to = dest?.kind === "tenant" ? `${dest.type === "ephemeral" ? "ephemeral" : "tenant"}:${dest.name ?? ""}` : "workspace";
@@ -2751,14 +2819,14 @@ function setLiveRollback(previous, args) {
 async function assertReleaseIdentitiesFree(args, auth, opts) {
   const tenant = opts.tenant;
   const target = tenant === void 0 ? { baseUrl: auth.instance, workspaceId: auth.workspaceId } : { baseUrl: tenant.base, workspaceId: tenant.workspaceId };
-  const { detectXanoSdkImportRoute } = await import("./xanosdk-import-S7A3CVBN.js");
+  const { detectXanoSdkImportRoute } = await import("./xanosdk-import-HYHABD5U.js");
   let capable;
   try {
     capable = await detectXanoSdkImportRoute(auth, target);
   } catch (err) {
     if (err?.status === 501) capable = false;
     else {
-      const { unreachableProbeError } = await import("./keep-data-merge-TDJOIAVT.js");
+      const { unreachableProbeError } = await import("./keep-data-merge-BIBW4QR4.js");
       const retry = retryCommand(args, {
         add: pipedYes(args) === "" ? [] : ["--yes"],
         command: [opts.verb, ...args.positionals.map(shellWord)].join(" ")
@@ -2847,4 +2915,4 @@ export {
   setLiveRollback,
   assertReleaseIdentitiesFree
 };
-//# sourceMappingURL=chunk-I6XRUU6U.js.map
+//# sourceMappingURL=chunk-YG7S3N7P.js.map

package/dist/{chunk-H2K4GFUS.js → chunk-YP76ZCQ5.js}

@@ -3,17 +3,17 @@ import {
   listAnswer,
   notTheAnswer,
   writeTransportFailure
-} from "./chunk-MYZRMSPM.js";
+} from "./chunk-TG65NWUR.js";
 import {
   SENT_AFTERMATH,
   fetchOrExplain,
   readBodyText,
   safeHttpFailure,
   withWriteStatusAftermath
-} from "./chunk-L6HZ67P6.js";
+} from "./chunk-TR7EOUQE.js";
 import {
   isNonPublicColumn
-} from "./chunk-SLGJIWCY.js";
+} from "./chunk-B5N6EWOM.js";
 
 // src/deploy/table.ts
 var TIMEOUT_MS = 3e4;
@@ -184,4 +184,4 @@ export {
   truncateTable,
   insertTableRows
 };
-//# sourceMappingURL=chunk-H2K4GFUS.js.map
+//# sourceMappingURL=chunk-YP76ZCQ5.js.map