@xano/sdk 1.0.7 → 1.0.9

package/dist/{init-command-6RDTCMAB.js → init-command-ENAZKPZA.js}

@@ -18,58 +18,58 @@ import {
   templateVarsFor,
   workflowMoveTarget,
   workflowPlacementNote
-} from "./chunk-SGK3PTTM.js";
-import "./chunk-LBJA7IEM.js";
-import "./chunk-7M6JP3FS.js";
-import "./chunk-BZ6WTG3E.js";
-import "./chunk-DG3APBUJ.js";
-import "./chunk-VIJ5D3RC.js";
-import "./chunk-PV25BDCH.js";
-import "./chunk-B2URJBC4.js";
-import "./chunk-S46ODQRA.js";
-import "./chunk-TWVUYS63.js";
-import "./chunk-26LHXLD3.js";
-import "./chunk-ZJOAWRED.js";
-import "./chunk-MBL7CXJ7.js";
-import "./chunk-YH2JVJAO.js";
-import "./chunk-VNDR2T35.js";
-import "./chunk-EPFDY5JU.js";
-import "./chunk-A4R5CAY4.js";
+} from "./chunk-HVSIS47X.js";
+import "./chunk-O376UAZS.js";
+import "./chunk-HQPL34O6.js";
+import "./chunk-HETQSTGG.js";
+import "./chunk-U7XSQXOA.js";
+import "./chunk-XQO4A4Q4.js";
+import "./chunk-Y2LKSXFK.js";
+import "./chunk-SGYDFEXD.js";
+import "./chunk-PBK257CI.js";
+import "./chunk-INAM6KR6.js";
+import "./chunk-7JKNWDYN.js";
+import "./chunk-5VOGPS5O.js";
+import "./chunk-VJTTTIIB.js";
+import "./chunk-IFCQCM2Q.js";
+import "./chunk-2VWSUG2B.js";
+import "./chunk-5Y5HWQ2P.js";
+import "./chunk-F3IA3YWI.js";
 import "./chunk-LCOCRJ4K.js";
-import "./chunk-WNCW2RNB.js";
-import "./chunk-QGIZLFAS.js";
+import "./chunk-NFSUGVDY.js";
+import "./chunk-YE7MHW45.js";
 import "./chunk-2MNLRIOX.js";
-import "./chunk-AKERAUNH.js";
+import "./chunk-PFW7WFAT.js";
 import "./chunk-CJDPSCMX.js";
-import "./chunk-ZXRDD3Q2.js";
-import "./chunk-PY722CHR.js";
-import "./chunk-ZGLNHA7T.js";
-import "./chunk-ORGNLQN6.js";
+import "./chunk-NI56XX5Z.js";
+import "./chunk-VD7YTLWL.js";
+import "./chunk-CXWCWYX3.js";
+import "./chunk-S42TFTM5.js";
 import "./chunk-ZYJP6BOO.js";
 import "./chunk-QO6BVGS5.js";
-import "./chunk-PEX4QZVI.js";
-import "./chunk-MYZRMSPM.js";
-import "./chunk-UYFUIHH3.js";
+import "./chunk-ULUUOUQX.js";
+import "./chunk-TG65NWUR.js";
+import "./chunk-C2GHFADU.js";
 import "./chunk-622HUCZT.js";
-import "./chunk-3FRGNBOC.js";
-import "./chunk-NDJAKSE7.js";
+import "./chunk-6S263KTM.js";
+import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-5SCPRXFB.js";
-import "./chunk-DIWF7L33.js";
-import "./chunk-D5OZRJ3T.js";
-import "./chunk-EF4MHLEW.js";
+import "./chunk-6IOQRBRX.js";
+import "./chunk-KDS4PDFD.js";
+import "./chunk-5BEK7YKY.js";
+import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-47XT6WQL.js";
+import "./chunk-6PTITS3M.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-L6HZ67P6.js";
+import "./chunk-TR7EOUQE.js";
 import "./chunk-4KHEMC32.js";
-import "./chunk-FDTET7FZ.js";
+import "./chunk-GN5SQMIQ.js";
 import "./chunk-MFWF2NZJ.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-CNZASQPL.js";
+import "./chunk-QL3ZJWGG.js";
 import "./chunk-WAVNUTMT.js";
-import "./chunk-ARWMVNDJ.js";
+import "./chunk-5QOV52V4.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
@@ -79,26 +79,26 @@ import "./chunk-BRANWM4U.js";
 import "./chunk-5GIOCDUM.js";
 import "./chunk-LJM5CIY4.js";
 import "./chunk-7REDHC4N.js";
-import "./chunk-CH23ONYG.js";
-import "./chunk-FQ53GTII.js";
-import "./chunk-VJFMUJWZ.js";
+import "./chunk-C6KBZH7M.js";
+import "./chunk-T3ZVNOJC.js";
+import "./chunk-OHTHG3LL.js";
 import "./chunk-6JAEMMZ7.js";
-import "./chunk-5QMJOE2K.js";
+import "./chunk-6ZFJEJXZ.js";
 import "./chunk-45ZUMF4E.js";
 import "./chunk-7KPKDHHI.js";
 import "./chunk-7FIMUFBP.js";
-import "./chunk-T4LJ5UR2.js";
+import "./chunk-6BOKCTCM.js";
 import "./chunk-ICK36EGF.js";
 import "./chunk-BEXZ4XRV.js";
 import "./chunk-ETAZIGNT.js";
 import "./chunk-GSGDWJB5.js";
-import "./chunk-SLGJIWCY.js";
+import "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
 import "./chunk-VTMTIBKP.js";
 import "./chunk-H2V3N23D.js";
 import "./chunk-3JDU4VRL.js";
 import "./chunk-WTPZRR4I.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5KJBWIDZ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -140,4 +140,4 @@ export {
   workflowMoveTarget,
   workflowPlacementNote
 };
-//# sourceMappingURL=init-command-6RDTCMAB.js.map
+//# sourceMappingURL=init-command-ENAZKPZA.js.map

package/dist/{init-modules-DHTBOCQT.js → init-modules-AIKWWTVQ.js}

@@ -12,22 +12,22 @@ import {
   renderImports,
   renderRegisterCall,
   renderXanoIndexWithModules
-} from "./chunk-D5OZRJ3T.js";
-import "./chunk-EF4MHLEW.js";
+} from "./chunk-5BEK7YKY.js";
+import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-47XT6WQL.js";
+import "./chunk-6PTITS3M.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-L6HZ67P6.js";
+import "./chunk-TR7EOUQE.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-CNZASQPL.js";
+import "./chunk-QL3ZJWGG.js";
 import "./chunk-WAVNUTMT.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
-import "./chunk-CH23ONYG.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-C6KBZH7M.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
 import "./chunk-TFFGOFVZ.js";
@@ -48,4 +48,4 @@ export {
   renderRegisterCall,
   renderXanoIndexWithModules
 };
-//# sourceMappingURL=init-modules-DHTBOCQT.js.map
+//# sourceMappingURL=init-modules-AIKWWTVQ.js.map

package/dist/{init-web-ELBXSXDL.js → init-web-MSXDARRF.js}

@@ -6,8 +6,8 @@ import {
 import {
   detail,
   step
-} from "./chunk-CH23ONYG.js";
-import "./chunk-YHB34BN6.js";
+} from "./chunk-C6KBZH7M.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5ZSO4T2G.js";
 import "./chunk-TFFGOFVZ.js";
@@ -39,4 +39,4 @@ export {
   CONFIGURATOR_PACKAGE,
   runInitWebCommand
 };
-//# sourceMappingURL=init-web-ELBXSXDL.js.map
+//# sourceMappingURL=init-web-MSXDARRF.js.map

package/dist/internal.d.ts

@@ -1,8 +1,8 @@
 export { a6 as FIELD_METHODS, a7 as REFERENCEABLE_KINDS, a8 as deriveGuid, a9 as encodeResponse, aa as encodeStatement, ab as getStatementFactory, ac as isRegisteredStatement, ad as resolveRef, ae as toNestedFields } from './raw-where-ZMLND6AG.js';
-import { r as StatementSpec } from './store-Boba9OOh.js';
-export { Q as FILTER_NAMES, T as GENERATED_STATEMENT_NAMES, U as LLMS_TXT, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, V as TOTAL_OBJECT_KINDS, W as buildManifest, X as encodeFromSpec, Y as generatedStatements, Z as getLockedCanonical, _ as getLockedGuid, $ as isLockSeeded, a0 as registerSpec, a1 as renderDocs, a2 as renderLlmsTxt } from './store-Boba9OOh.js';
-import { F as FunctionDef, aL as ObjectKind } from './emit-Dov_92kn.js';
-export { b as AdoptChange, c as AdoptResult, B as Bundle, p as BundlePayload, q as BundleType, cJ as KNOWLEDGE_DIR, cK as KNOWLEDGE_FILE, cL as LOCK_PAYLOAD_KEYS, cM as LOCK_VERSION, ae as LockEntry, af as LockExportContext, L as LockFile, av as MergeResult, cN as PAYLOAD_ARRAY_KEYS, aR as PayloadArrayKey, cO as QUERY_EXPRESSION_FILTERS, bg as RenameResult, cP as VECTOR_FILTERS, cQ as WORKSPACE_KEY, cR as addonKind, cS as adoptFromBundle, cT as agentKind, cU as apiGroupKind, cV as buildBundle, cW as buildMiddlewareBlock, cX as buildWorkspaceHistory, cY as calcSignatureJson, cZ as channelPathParams, c_ as createLockContext, c$ as declaredServicePorts, d0 as emptyLock, d1 as encodeAddon, d2 as encodeAgent, d3 as encodeApiGroup, d4 as encodeColumn, d5 as encodeContainerHistory, d6 as encodeHistory, d7 as encodeIndex, d8 as encodeKnowledge, d9 as encodeMcpServer, da as encodeMicroservice, db as encodeMiddleware, dc as encodeMiddlewareEntry, dd as encodeMiddlewareList, de as encodeObject, df as encodeQuery, dg as encodeRealtimeChannel, dh as encodeRealtimeMessage, di as encodeRealtimeServer, dj as encodeSchedule, dk as encodeTable, dl as encodeTask, dm as encodeTool, dn as encodeToolRefs, dp as encodeToolsetBase, dq as encodeTrigger, dr as encodeView, ds as encodeWorkflowTest, dt as encodeWorkspaceConfig, du as getKind, dv as isKnowledgeDirSource, dw as isKnowledgeFileSource, dx as isQueryExpressionFilter, dy as isRegisteredKind, dz as knowledgeKind, dA as lockKey, dB as mcpServerKind, dC as mergeObserved, dD as microserviceKind, dE as middlewareKind, dF as mintCanonical, dG as parseLock, dH as phpJsonEncode, dI as queryKind, dJ as realtimeChannelGuid, dK as realtimeChannelKind, dL as realtimeMessageGuid, dM as realtimeMessageKind, dN as realtimeServerKind, dO as recordObserved, dP as registerKind, dQ as registeredKinds, dR as renameLockEntry, dS as resolveAuthRef, dT as resolvePayloadKey, dU as resolveRealtimeServerCanonical, dV as resolveToolsetCanonical, dW as serializeBundle, dX as serializeLock, dY as tableKind, dZ as taskKind, d_ as toolKind, d$ as triggerKind, e0 as validateLockModel, e1 as workflowTestKind, e2 as workspaceKind } from './emit-Dov_92kn.js';
+import { r as StatementSpec } from './store-xUySg-KR.js';
+export { Q as FILTER_NAMES, T as GENERATED_STATEMENT_NAMES, U as LLMS_TXT, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, V as TOTAL_OBJECT_KINDS, W as buildManifest, X as encodeFromSpec, Y as generatedStatements, Z as getLockedCanonical, _ as getLockedGuid, $ as isLockSeeded, a0 as registerSpec, a1 as renderDocs, a2 as renderLlmsTxt } from './store-xUySg-KR.js';
+import { F as FunctionDef, aL as ObjectKind } from './emit-D-a6JznN.js';
+export { b as AdoptChange, c as AdoptResult, B as Bundle, p as BundlePayload, q as BundleType, cJ as KNOWLEDGE_DIR, cK as KNOWLEDGE_FILE, cL as LOCK_PAYLOAD_KEYS, cM as LOCK_VERSION, ae as LockEntry, af as LockExportContext, L as LockFile, av as MergeResult, cN as PAYLOAD_ARRAY_KEYS, aR as PayloadArrayKey, cO as QUERY_EXPRESSION_FILTERS, bg as RenameResult, cP as VECTOR_FILTERS, cQ as WORKSPACE_KEY, cR as addonKind, cS as adoptFromBundle, cT as agentKind, cU as apiGroupKind, cV as buildBundle, cW as buildMiddlewareBlock, cX as buildWorkspaceHistory, cY as calcSignatureJson, cZ as channelPathParams, c_ as createLockContext, c$ as declaredServicePorts, d0 as emptyLock, d1 as encodeAddon, d2 as encodeAgent, d3 as encodeApiGroup, d4 as encodeColumn, d5 as encodeContainerHistory, d6 as encodeHistory, d7 as encodeIndex, d8 as encodeKnowledge, d9 as encodeMcpServer, da as encodeMicroservice, db as encodeMiddleware, dc as encodeMiddlewareEntry, dd as encodeMiddlewareList, de as encodeObject, df as encodeQuery, dg as encodeRealtimeChannel, dh as encodeRealtimeMessage, di as encodeRealtimeServer, dj as encodeSchedule, dk as encodeTable, dl as encodeTask, dm as encodeTool, dn as encodeToolRefs, dp as encodeToolsetBase, dq as encodeTrigger, dr as encodeView, ds as encodeWorkflowTest, dt as encodeWorkspaceConfig, du as getKind, dv as isKnowledgeDirSource, dw as isKnowledgeFileSource, dx as isQueryExpressionFilter, dy as isRegisteredKind, dz as knowledgeKind, dA as lockKey, dB as mcpServerKind, dC as mergeObserved, dD as microserviceKind, dE as middlewareKind, dF as mintCanonical, dG as parseLock, dH as phpJsonEncode, dI as queryKind, dJ as realtimeChannelGuid, dK as realtimeChannelKind, dL as realtimeMessageGuid, dM as realtimeMessageKind, dN as realtimeServerKind, dO as recordObserved, dP as registerKind, dQ as registeredKinds, dR as renameLockEntry, dS as resolveAuthRef, dT as resolvePayloadKey, dU as resolveRealtimeServerCanonical, dV as resolveToolsetCanonical, dW as serializeBundle, dX as serializeLock, dY as tableKind, dZ as taskKind, d_ as toolKind, d$ as triggerKind, e0 as validateLockModel, e1 as workflowTestKind, e2 as workspaceKind } from './emit-D-a6JznN.js';
 import { k as FunctionXdo } from './xdo-CxDr2Q1C.js';
 
 /**

package/dist/internal.js

@@ -19,8 +19,8 @@ import {
   selectorValues,
   sourceSpellings,
   visibleFlags
-} from "./chunk-CH23ONYG.js";
-import "./chunk-AVS4WPPY.js";
+} from "./chunk-C6KBZH7M.js";
+import "./chunk-DSD2NNTX.js";
 import {
   GENERATED_STATEMENT_NAMES,
   HEADER_DUPLICATES,
@@ -64,17 +64,17 @@ import {
   toolKind,
   triggerKind,
   workflowTestKind
-} from "./chunk-FQ53GTII.js";
+} from "./chunk-T3ZVNOJC.js";
 import {
   encodeQuery,
   encodeResponse,
   queryKind
-} from "./chunk-VJFMUJWZ.js";
+} from "./chunk-OHTHG3LL.js";
 import {
   encodeWorkspaceConfig,
   workspaceKind
 } from "./chunk-6JAEMMZ7.js";
-import "./chunk-5QMJOE2K.js";
+import "./chunk-6ZFJEJXZ.js";
 import {
   resolveAuthRef
 } from "./chunk-45ZUMF4E.js";
@@ -101,7 +101,7 @@ import {
   isQueryExpressionFilter,
   microserviceKind,
   registerSpec
-} from "./chunk-T4LJ5UR2.js";
+} from "./chunk-6BOKCTCM.js";
 import "./chunk-ICK36EGF.js";
 import {
   FILTER_NAMES,
@@ -122,7 +122,7 @@ import {
   encodeTable,
   encodeView,
   tableKind
-} from "./chunk-SLGJIWCY.js";
+} from "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
 import {
   encodeObject,
@@ -134,7 +134,7 @@ import {
 import "./chunk-H2V3N23D.js";
 import "./chunk-3JDU4VRL.js";
 import "./chunk-WTPZRR4I.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import {
   LOCK_PAYLOAD_KEYS,
@@ -1334,6 +1334,22 @@ function renderSections(m) {
   const objectKinds = [];
   objectKinds.push("## Object kinds", "");
   objectKinds.push("Author with the factory, register on the Xano instance, lands under the payload key. Each line ends with a one-liner on what the primitive is.", "");
+  objectKinds.push(
+    "### Choosing a kind",
+    "",
+    "Choose by who or what starts the work. Each rule names the kind that fits and the one it gets mistaken for.",
+    "",
+    "- **Logic other code calls** \u2192 `defineFunction`, run with `s.function.run`. A `query` is the only kind an HTTP client reaches by verb + path; a `tool` is what an `agent()` or an MCP client calls. Logic serving two callers (an endpoint AND a tool) lives in one function both call.",
+    '- **Work on a timer** \u2192 `task` (cron or interval). **Work a request starts but does not wait for** \u2192 `s.function.run({ fn, runtime: { mode: "async-shared" } })`, which binds a job id, not the result (collect with `s.await`). **Work that follows a row change** \u2192 `tableTrigger`: it fires on every insert/update/delete of the table, whichever stack writes it, so the same side effect placed in one endpoint\'s stack misses every other write path.',
+    "- **The same steps before or after many objects** (an auth check, a rate limit, logging) \u2192 `middleware`, attached per host (`middleware: { pre, post }` on a query, function, task, tool or API group) or to every host of a kind with `workspaceConfig({ middleware: { query, function, task, tool } })` \u2014 not a function call repeated at the top of each stack.",
+    "- **Related rows on returned rows** \u2192 an `addon` attached to the read through its `addon: [{ addon, as, input }]` option (`db.query`/`get`/`add`/`edit`/`patch`), merged onto each row under `as` and typed in `InferResponse` \u2014 not a second read plus a loop that stitches rows together.",
+    "- **AI.** An LLM running inside the backend \u2192 `agent()`, started from a stack with `s.ai.agent.run`; it has no public endpoint. An external AI client (Claude, Cursor, any MCP client) calling the backend \u2192 `mcpServer()`. Standing instructions for Xano's own builder AI \u2192 `knowledge()`; an `agent()` run never reads it. The actions either one calls \u2192 `tool()`. What an MCP server serves besides tools (`prompt()`, `resource()`) and when each fits: `llms/kinds-agent-mcp.md`.",
+    "- **Pushing to connected clients** \u2192 `realtimeServer` \u2192 `realtimeChannel` \u2192 `realtimeMessage` (the handler for a frame a client sends \u2014 the realtime analogue of a query). A server-side push from any stack is `s.realtime.publish`; a client polling a `query` is the substitute this replaces.",
+    "- **Code the typed surface cannot express** \u2192 a lambda (`s.lambda`, `fl.lambda`) for a short JavaScript body, LAST, after native filters and expressions (`llms/lambda.md`); a `microservice` for a long-running container or another language; `s.api.request` for a service that already has an HTTP API.",
+    "- **Tests** \u2192 `tests` on a `query`/`defineFunction`/`middleware` for that one object's input \u2192 output; a `workflowTest` for a flow across objects (`s.function.call`, `s.api.call`, `s.task.call`) asserted with `s.expect.*`.",
+    "- **Reacting to the platform** \u2192 `errorTrigger` (an error signature first seen, regressing, or marked fixed) and `workspaceTrigger` (branch new/merge/live). What one connection to an MCP server, agent, realtime server or channel may see or do \u2192 that object's connection trigger.",
+    ""
+  );
   objectKinds.push(
     "\u26A0 Composing a workspace from independently-authored modules: `register*` takes its defs however they arrive, but `modules.flatMap((m) => m.tables)` does NOT typecheck. `Array.prototype.flatMap` binds its element type to the FIRST element, so every later module's tables are checked against that one table's schema \u2014 the error compares two unrelated column names and mentions neither `flatMap` nor the cause. `.concat()` collapses the same way. Two spellings work: pass an array LITERAL (`registerTables([...a.tables, ...b.tables])` \u2014 spreads are fine, TypeScript infers the union across every element at once), or annotate the module array with the wide aliases `AnyTableDef` / `AnyQueryDef` / `AnyFunctionDef` / `AnyAddonDef`, exported for exactly the four def types whose generics can collapse this way. Widening the array costs nothing: the typing you need lives on the `table()`/`query()` handle you hold and pass to `s.db.*`, and is never read back off the registered array.",
     ""
@@ -1599,7 +1615,7 @@ function renderSections(m) {
     "- A response types as `StackTupleWidened` \u2014 a `Statement[]` helper was spread into the stack; return `statements(...)`. `llms.txt`; `llms/statements-runtime.md`.",
     '- `ERR_PACKAGE_PATH_NOT_EXPORTED` \u2014 `tsx -e "import \u2026"`, or running from outside the project root; run a real file with `tsx <file.ts>` from the root. `llms/client.md`.',
     "- `Missing statement: mvp:placeholder` on import \u2014 an unconfigured slot in a pulled tree; replace it with the statement it stands in for. `llms/legacy.md`.",
-    '- A CLI command fails under `--json` or piped (unless stdout carries data): stdout is `{ ok: false, error: { code, message, exitCode, details?, suggestion? } }`, as does a failed release write. Codes: `SDK_SEED_IN_STATIC` (`details.leaks[]` \u2192 `publicSeed`), `SDK_EXPORT_INVALID` (`details.diagnostics[]`, `--strict` too), `SDK_DRIFT`, `SDK_BRANCH_TAKEN`, `SDK_BRANCH_LIVE`, `SDK_RELEASE_NAME_TAKEN`, `SDK_RELEASE_FILES_NOT_CARRIED`, `SDK_LIVE_BRANCH_MISMATCH` (`details.conflictsWith`), `SDK_IDENTITY_CONFLICT`, `SDK_KIND_CONFLICT`, `SDK_PRUNE_OUT_OF_SCOPE`, `SDK_IMPORT_REFUSED`, `SDK_SHARED_SCHEMA_CHANGE`, `SDK_CONSTRAINT_VIOLATION`, `SDK_CREDENTIAL_REJECTED` (`details`: `{ profile, credentialType, instance, workspaceId, signIn }`; ids null on a refused env refresh), `SDK_USAGE` (`details.reason: "needs-confirmation"`: run its `Re-run as`), `SDK_ERROR`. Landing refusal `details.refused`: identityConflict, renamePending, kindConflict, uniqueViolation, tableTrigger, importInProgress, importRefused, pruneOutOfScope. `warnings[]` / `details.warnings` / `accepted[]` entries: `{ code, message, subject? }` (`subject`: the def\'s `{ kind, name }`). Backend documents add `selector` and `workspaceId`.',
+    '- A CLI command fails under `--json` or piped (unless stdout carries data): stdout is `{ ok: false, error: { code, message, exitCode, details?, suggestion? } }`, as does a failed release write. Codes: `SDK_SEED_IN_STATIC` (`details.leaks[]` \u2192 `publicSeed`), `SDK_EXPORT_INVALID` (`details.diagnostics[]`, `--strict` too), `SDK_DRIFT`, `SDK_BRANCH_TAKEN`, `SDK_BRANCH_LIVE`, `SDK_RELEASE_NAME_TAKEN`, `SDK_RELEASE_FILES_NOT_CARRIED`, `SDK_LIVE_BRANCH_MISMATCH` (`details.conflictsWith`), `SDK_IDENTITY_CONFLICT`, `SDK_KIND_CONFLICT`, `SDK_PRUNE_OUT_OF_SCOPE`, `SDK_IMPORT_REFUSED`, `SDK_SHARED_SCHEMA_CHANGE`, `SDK_CONSTRAINT_VIOLATION`, `SDK_CREDENTIAL_REJECTED` (`details`: `{ profile, credentialType, instance, workspaceId, signIn }`; ids null on a refused env refresh), `SDK_WORKSPACE_CHANGED` (deploy over objects edited in Xano since the last sync; `details.objects`; pull first or `--overwrite`), `SDK_USAGE` (`details.reason: "needs-confirmation"`: run its `Re-run as`), `SDK_ERROR`. Landing refusal `details.refused`: identityConflict, renamePending, kindConflict, uniqueViolation, tableTrigger, importInProgress, importRefused, pruneOutOfScope. `warnings[]` / `details.warnings` / `accepted[]` entries: `{ code, message, subject? }` (`subject`: the def\'s `{ kind, name }`). Backend documents add `selector` and `workspaceId`.',
     "- A CLI command reports `could not reach <url>: fetch failed (<code>)` \u2014 blocked egress, not a bad credential; fix it before `xanosdk login`, which rotates a single-use refresh token.",
     "",
     "### CLI exit codes",
@@ -1621,13 +1637,14 @@ function renderSections(m) {
     "| 130 | Ctrl-C outside a write or install. | \u2014 |"
   ];
   const kindsAgentMcp = [
+    "- An MCP server serves THREE primitives, and each reaches the client differently: a `tool()` is an action the MODEL calls (it may write); a `resource()` is read-only context the client APPLICATION lists and attaches by `uri` (reference docs, a schema, one record through a `{variable}` template); a `prompt()` is a message template with arguments the USER picks by name. Context a session opens with is a `resource()`; a workflow a user starts by name is a `prompt()`; data the model must fetch on its own mid-task stays a `tool()`, since a client shows the model only the resources attached to the conversation. Register each kind (`registerTools`/`registerPrompts`/`registerResources`) and list it on the server.",
     "- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, prompts?, resources?, oauth?, llm?, output? })` \u2014 an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint \u2014 `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<\u2026>/stream` path THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral. A TENANT rides AFTER the prefix (`/x2/mcp/tenant/<tenant>/<canonical>/<token>/stream`), not as a base-URL segment: `getUrl` LIFTS a `/tenant/<name>` out of the base and re-places it there, so `getUrl(window.XANO_HOST)` is correct as-is; concatenating them by hand builds an unregistered route that 404s. Pass `{ tenant }` when the base URL cannot name it (a tenant on its own domain).",
     '  - `tools?`: a `ToolsetToolEntry[]`. Pass the `tool()` HANDLES directly (`tools: [saveNote]`); use the `{ tool, enabled?, auth?, type?, resourceUri?, toolMeta? }` wrapper when an entry needs more. `type: "resource"` (+ a required `resourceUri`) is the LEGACY way to publish a tool as an MCP resource \u2014 author a `resource()` and list it in `resources` instead; `toolMeta` is extra metadata on a tool entry. The two payload fields are per-type and supplying the other one is refused, because the engine stores it against neither. `auth` names an auth **table** (a `table({ auth: true })` handle or its name) \u2014 per-tool, and the only gate there is. \u26A0 It is also what gives the tool a CALLER, on an `agent()` exactly as on an MCP server. `auth()` inside a tool whose entry names no table does NOT return null: the call answers a normal result carrying `{"code":"ERROR_FATAL","message":""}`, so the model reads a successful tool result and reports success while nothing is written. A caller token does not rescue it \u2014 the ENTRY supplies identity. Spell it `{ tool: saveNote, auth: users }`; `export()` warns. An entry naming no tool THROWS at export; a deliberate raw `id: 0` warns and carries through.',
     '  - `prompts?` / `resources?`: `prompt()` / `resource()` HANDLES (or names), or a `{ prompt, enabled?, auth? }` / `{ resource, enabled?, auth? }` wrapper. `auth` names the auth table and is what gives the stack a caller: a prompt/resource reading `auth()` behind an entry with none answers every `prompts/get` / `resources/read` with `-32603 "Access Denied"` (`export()` warns `toolset.primitive-reads-auth-ungated`). Listing one target twice THROWS; two resources with one `uri` on one server fail `export()` (`mcp.resource-uri-duplicate`). MCP-server only \u2014 `agent()` takes tools only.',
     "  - `history?` is the server tier for its tools, prompts AND resources alike; an object's own `history` wins. The workspace tier (`workspaceConfig({ history })`) has `prompt` and `resource` keys, both default on.",
     '  - `oauth?`: per-server sign-in; omit and nothing changes. Union on `mode`; `authTable` (REQUIRED, auth `table()` handle or name) is whose row the signed-in user is \u2014 `auth()` on the whole server, `t.auth` in its trigger. Hosted (the platform is the authorization server): `{ mode: "hosted", authTable, loginUrl }` \u2014 clients are sent to `loginUrl` (YOUR page, which is also the consent screen) with `mcp_request`; show `s.mcp.oauth.request`, sign the user in, then your endpoint calls `s.mcp.oauth.complete` with their `decision` and the page redirects to the URL it binds. External (your IdP issues tokens): `{ mode: "external", authTable, issuer, column, audience?, audienceAck?, claim?, claimAck?, preset?, allowedClientIds? }` \u2014 token `claim` (default `sub`) matched against `column`; `preset` is `auth0|clerk|workos|entra|okta|cognito|generic`. `loginUrl`/`issuer`/`audience` take `env("NAME")` (resolved per environment).',
     '    - `export()` FAILS: hosted without `loginUrl` (`mcp.oauth-hosted-incomplete`); external without `issuer`/`column` (`mcp.oauth-external-incomplete`); `preset: "clerk"` without `allowedClientIds` (`mcp.oauth-preset-client-ids`); `claim` other than `sub`/`oid`/`email` without `claimAck` (`mcp.oauth-claim-unacked` \u2014 users can edit it at most providers). Unknown `mode`/`preset` THROWS; so do the dropped `consent`/`branding`/`trustedClients`.',
-    '- `prompt({ name, guid?, description?, docs?, title?, icons?, tags?, history?, input?, stack?, response?, responseShape?, middleware? })` \u2014 an MCP prompt; takes `registerPrompts`. `input` is the prompt\'s arguments (each field\'s `description`/`required`/enum `values` reach the client; enum values also answer completion requests). `response`: a text value is ONE user message; a list of `{ role: "user" | "assistant", content }` is sent in order: `s.set_var("m", obj({ list: [obj({ role: c.text("user"), content: ref("body") })] }))`, `response: ref("m.list")`. Without `response` or a top-level `s.return`, `prompts/get` fails.',
+    '- `prompt({ name, guid?, description?, docs?, title?, icons?, tags?, history?, input?, stack?, response?, responseShape?, middleware? })` \u2014 an MCP prompt; takes `registerPrompts`. `input` is the prompt\'s arguments (each field\'s `description`/`required`/enum `values` reach the client; enum values also answer completion requests). `response`: a text value is ONE user message; a list of `{ role: "user" | "assistant", content }` is sent in order, `content` a string or an MCP content block: `s.set_var("m", obj({ list: [obj({ role: c.text("user"), content: ref("body") })] }))`, `response: ref("m.list")`. Without `response` or a top-level `s.return`, `prompts/get` fails.',
     "- `resource({ name, uri, guid?, description?, docs?, mimeType?, title?, icons?, annotations?, tags?, history?, input?, stack?, response?, responseShape?, middleware? })` \u2014 an MCP resource; takes `registerResources`. Clients address it by `uri`, never `name`.",
     '  - `uri`: a literal (`"docs://readme"`, no `input`) or an RFC 6570 LEVEL-1 template (`"orders://{region}/{order_id}"`). It must start with a scheme; each `{variable}` is letters/digits/`_`, one per brace pair, never two adjacent. `input` must be EXACTLY the template\'s variables, each a single `text`/`int`/`decimal`/`bool`/`enum`/`email`/`uuid` \u2014 anything else THROWS. A value that does not convert is refused before the stack runs.',
     "  - `response`: a string is returned as text; non-UTF-8 content (a file, binary) as a base64 blob. `mimeType?` omitted \u2192 derived from what the stack returns.",
@@ -1644,7 +1661,7 @@ function renderSections(m) {
     '  - `llm` (REQUIRED): typed provider settings, a discriminated union on `type` (`"xano-free" | "anthropic" | "openai" | "google-genai"`). Shared fields: `systemPrompt?`, `maxSteps?` (default `5`), and `prompt?` XOR `messages?` (genuinely exclusive: both is a type error and throws \u2014 the engine stores ONE `prompt_type`, so one would be dropped); plus provider fields (`apiKey?`, `model?`, `temperature?`, `reasoningEffort?`, \u2026). String fields accept Twig placeholders \u2014 `{{ $args.x }}` for run inputs (the `args` of `s.ai.agent.run`), `{{ $env.NAME }}` for env vars.',
     "  - `tools?`: same `ToolsetToolEntry[]` as `mcpServer` \u2014 bare `tool()` handles, or a `{ tool, enabled?, auth? }` wrapper when one needs `enabled`/`auth`. A tool reading `auth()` MUST use the wrapper naming the auth table \u2014 a bare handle runs it with no caller (see `mcpServer`'s `tools?`).",
     '  - `output?`: `{ schema: Record<string, input.*>, enabled? }` \u2014 structured-output schema. `schema` is a named-field record authored with the `input.*` catalog, exactly like a `defineFunction`/`query` `input:` map (the stored `structuredOutputsSchema` is the same wire shape as function inputs). e.g. `output: { schema: { priority: input.enum(["low","high"]), summary: input.text() } }`. When you pass the agent *handle* to `s.ai.agent.run({ agent })`, `.result` is typed straight from this schema \u2014 no `resultShape` witness needed (the shape is declared once). `resultShape` remains only to override that, or to type an agent referenced by bare name.',
-    '  - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, as: "run" })`) \u2014 it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var("summary", ref("run.result.summary"))`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` \u2014 raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. `.toolCalls` is the FINAL step\'s calls only (often `[]`); every call is a `.steps[].content[]` entry of `type: "tool-call"`.',
+    '  - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, allowToolExecution: c.bool(true), as: "run" })`) \u2014 it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var("summary", ref("run.result.summary"))`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` \u2014 raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. `.toolCalls` is the FINAL step\'s calls only (often `[]`); every call is a `.steps[].content[]` entry of `type: "tool-call"`. \u26A0 An agent with tools needs `allowToolExecution: c.bool(true)` on the run: unset, its tools are OFF and it answers without them (warns `stack.agent-tools-off`).',
     "  - **Marketplace:** for chat history, use `@xano-sdk/chatbot`; for vector RAG, use `@xano-sdk/vector` (`tools: [vector.searchTool]`). Find add-ons with `xanosdk marketplace search <q>`.",
     "- Both kinds persist under the `toolset` payload key, so a same-name `agent` + `mcpServer` pair derives ONE guid and `export()` throws \u2014 give them distinct names."
   ];
@@ -2431,7 +2448,7 @@ function renderDocs(m) {
     {
       path: "llms/kinds-agent-mcp.md",
       title: "Agent and MCP def shapes",
-      readWhen: "Read when defining an `agent()`, `mcpServer()`, `prompt()` or `resource()`.",
+      readWhen: "Read when building an MCP server (tools, prompts, resources) or an `agent()`.",
       body: s.kindsAgentMcp
     },
     {

package/dist/{keep-data-merge-TDJOIAVT.js → keep-data-merge-3WPUPPTY.js}

@@ -4,20 +4,20 @@ import {
   droppedAndAdded,
   tableEffectFields,
   tableEffectsOf
-} from "./chunk-BSVQEKHO.js";
-import "./chunk-FNLTFOUD.js";
+} from "./chunk-HTP2CLRQ.js";
+import "./chunk-6NEV2PEC.js";
 import {
   tableRowCounter
-} from "./chunk-H2K4GFUS.js";
+} from "./chunk-YP76ZCQ5.js";
 import {
   XANOSDK_IMPORT_UNIQUENESS_CODE,
   XanoSdkImportRefusal,
   detectXanoSdkImportRoute,
   xanosdkImport
-} from "./chunk-567KK6XF.js";
+} from "./chunk-3XSTC3TM.js";
 import {
   exportWorkspaceBundle
-} from "./chunk-2SD4LA22.js";
+} from "./chunk-QC3MKMDK.js";
 import {
   encodeWorkspaceArchive
 } from "./chunk-3DRXWLJ5.js";
@@ -30,27 +30,27 @@ import {
   sectionKind,
   storedColumnsAfter,
   tableAdditions
-} from "./chunk-IYXL5NYU.js";
-import "./chunk-26LHXLD3.js";
-import "./chunk-MBL7CXJ7.js";
-import "./chunk-QGIZLFAS.js";
+} from "./chunk-I53OTC3O.js";
+import "./chunk-7JKNWDYN.js";
+import "./chunk-VJTTTIIB.js";
+import "./chunk-YE7MHW45.js";
 import "./chunk-2MNLRIOX.js";
-import "./chunk-AKERAUNH.js";
-import "./chunk-MYZRMSPM.js";
-import "./chunk-3FRGNBOC.js";
-import "./chunk-NDJAKSE7.js";
+import "./chunk-PFW7WFAT.js";
+import "./chunk-TG65NWUR.js";
+import "./chunk-6S263KTM.js";
+import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
 import {
   shellWord
 } from "./chunk-FWD7AL6N.js";
 import {
   UNTRUSTED_CERTIFICATE
-} from "./chunk-L6HZ67P6.js";
+} from "./chunk-TR7EOUQE.js";
 import "./chunk-4KHEMC32.js";
 import {
   seedRowsByTableGuid
-} from "./chunk-FDTET7FZ.js";
-import "./chunk-ARWMVNDJ.js";
+} from "./chunk-GN5SQMIQ.js";
+import "./chunk-5QOV52V4.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
@@ -63,19 +63,19 @@ import {
   displayPath,
   warn,
   withSpinner
-} from "./chunk-CH23ONYG.js";
+} from "./chunk-C6KBZH7M.js";
 import "./chunk-6JAEMMZ7.js";
 import "./chunk-7KPKDHHI.js";
 import "./chunk-7FIMUFBP.js";
 import "./chunk-BEXZ4XRV.js";
 import "./chunk-ETAZIGNT.js";
-import "./chunk-SLGJIWCY.js";
+import "./chunk-B5N6EWOM.js";
 import "./chunk-ERVIASGL.js";
 import "./chunk-VTMTIBKP.js";
 import "./chunk-H2V3N23D.js";
 import "./chunk-3JDU4VRL.js";
 import "./chunk-WTPZRR4I.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import {
   LOCK_PAYLOAD_KEYS
@@ -88,7 +88,7 @@ import "./chunk-ZY55DO5P.js";
 import "./chunk-A2AOUBJS.js";
 import "./chunk-TFFGOFVZ.js";
 import "./chunk-EHP3WPEG.js";
-import "./chunk-D3KEPRRN.js";
+import "./chunk-LTPF25L2.js";
 import "./chunk-4XHAT7C5.js";
 import "./chunk-S56YBYMN.js";
 import "./chunk-UVF45BVU.js";
@@ -200,7 +200,7 @@ async function unreachableProbeError(err, req) {
   }
   const serverError = typeof status === "number" && (status >= 500 || status === 429) && answered !== null;
   if (reach === null && !serverError || req.rerun === void 0) return err;
-  const { LookupFailedError, rateLimitedCause } = await import("./source-resolve-BBHYTOXI.js");
+  const { LookupFailedError, rateLimitedCause } = await import("./source-resolve-I55GN6ZC.js");
   const failed = new LookupFailedError(
     reach !== null ? `Could not reach ${req.label} to ask whether it can merge (${reach[1]}). ${reach[1].includes(UNTRUSTED_CERTIFICATE) ? "A certificate problem" : "A network failure"} \u2014 nothing was sent and its data is untouched` : `${req.label[0].toUpperCase()}${req.label.slice(1)} answered the check whether it can merge with ${status === 429 ? "its rate limit" : "a server error"} (${answered[1].replace(/\.$/, "")}). ${status === 429 ? `${rateLimitedCause()}: nothing` : "Nothing"} was sent and its data is untouched`,
     "unreachable",
@@ -213,7 +213,7 @@ async function unreachableProbeError(err, req) {
 }
 async function unansweredReadError(err, req) {
   if (req.rerun === void 0) return err;
-  const { LookupFailedError, isRateLimited, isServerError, isTransportFailure, unansweredCause } = await import("./source-resolve-BBHYTOXI.js");
+  const { LookupFailedError, isRateLimited, isServerError, isTransportFailure, unansweredCause } = await import("./source-resolve-I55GN6ZC.js");
   const transport = isTransportFailure(err);
   if (!transport && !isServerError(err)) return err;
   const first = ((err instanceof Error ? err.message : String(err)).trim().split("\n")[0] ?? "").replace(/[.:]$/, "");
@@ -1116,4 +1116,4 @@ export {
   unansweredReadError,
   unreachableProbeError
 };
-//# sourceMappingURL=keep-data-merge-TDJOIAVT.js.map
+//# sourceMappingURL=keep-data-merge-3WPUPPTY.js.map

package/dist/{landing-record-TPPYFQAS.js → landing-record-SJ5HG7T5.js}

@@ -6,30 +6,30 @@ import {
   recordForeignLanding,
   recordLanding,
   unvouchedIdentities
-} from "./chunk-2YER2J47.js";
+} from "./chunk-ZYPEH64F.js";
 import "./chunk-CJDPSCMX.js";
-import "./chunk-ORGNLQN6.js";
+import "./chunk-S42TFTM5.js";
 import "./chunk-ZYJP6BOO.js";
 import "./chunk-QO6BVGS5.js";
-import "./chunk-PEX4QZVI.js";
-import "./chunk-3FRGNBOC.js";
-import "./chunk-NDJAKSE7.js";
+import "./chunk-ULUUOUQX.js";
+import "./chunk-6S263KTM.js";
+import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-5SCPRXFB.js";
-import "./chunk-DIWF7L33.js";
-import "./chunk-D5OZRJ3T.js";
-import "./chunk-EF4MHLEW.js";
+import "./chunk-6IOQRBRX.js";
+import "./chunk-KDS4PDFD.js";
+import "./chunk-5BEK7YKY.js";
+import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
-import "./chunk-47XT6WQL.js";
+import "./chunk-6PTITS3M.js";
 import "./chunk-DXUICABI.js";
-import "./chunk-L6HZ67P6.js";
+import "./chunk-TR7EOUQE.js";
 import "./chunk-4KHEMC32.js";
 import "./chunk-MFWF2NZJ.js";
 import "./chunk-DNBP4GJN.js";
-import "./chunk-CNZASQPL.js";
+import "./chunk-QL3ZJWGG.js";
 import "./chunk-WAVNUTMT.js";
-import "./chunk-ARWMVNDJ.js";
+import "./chunk-5QOV52V4.js";
 import "./chunk-LLNZGEFK.js";
 import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
@@ -37,8 +37,8 @@ import "./chunk-X2NL4KUO.js";
 import "./chunk-4GPIOIAC.js";
 import "./chunk-5GIOCDUM.js";
 import "./chunk-LJM5CIY4.js";
-import "./chunk-CH23ONYG.js";
-import "./chunk-YHB34BN6.js";
+import "./chunk-C6KBZH7M.js";
+import "./chunk-YEH5OIPF.js";
 import "./chunk-UTI5G6OJ.js";
 import "./chunk-5KJBWIDZ.js";
 import "./chunk-5ZSO4T2G.js";
@@ -59,4 +59,4 @@ export {
   recordLanding,
   unvouchedIdentities
 };
-//# sourceMappingURL=landing-record-TPPYFQAS.js.map
+//# sourceMappingURL=landing-record-SJ5HG7T5.js.map

package/dist/{live-diff-5E2BQWQ7.js → live-diff-CGTGOH3S.js}

@@ -19,7 +19,7 @@ import {
   tableAdditions,
   uniqueIndexLabels,
   vectorSize
-} from "./chunk-IYXL5NYU.js";
+} from "./chunk-I53OTC3O.js";
 import "./chunk-6JAEMMZ7.js";
 import "./chunk-ETAZIGNT.js";
 import "./chunk-ERVIASGL.js";
@@ -29,7 +29,7 @@ import "./chunk-5KJBWIDZ.js";
 import "./chunk-5ZSO4T2G.js";
 import "./chunk-VQPDATQT.js";
 import "./chunk-A2AOUBJS.js";
-import "./chunk-D3KEPRRN.js";
+import "./chunk-LTPF25L2.js";
 import "./chunk-4XHAT7C5.js";
 import "./chunk-S56YBYMN.js";
 import "./chunk-UVF45BVU.js";
@@ -63,4 +63,4 @@ export {
   uniqueIndexLabels,
   vectorSize
 };
-//# sourceMappingURL=live-diff-5E2BQWQ7.js.map
+//# sourceMappingURL=live-diff-CGTGOH3S.js.map