@xano/sdk 1.0.8 → 1.0.10

package/dist/{generate-command-IANKN6WV.js → generate-command-G7EJ7GW4.js}

@@ -2,10 +2,10 @@ import {
   pulledIdentities,
   pulledLock,
   reconcileLock
-} from "./chunk-U7XNJ33Q.js";
+} from "./chunk-TWBENPZR.js";
 import "./chunk-76UAME77.js";
 import "./chunk-5HVXPTU4.js";
-import "./chunk-P5W6DBV6.js";
+import "./chunk-KCCZGDQG.js";
 import {
   carriedSeedRows,
   decodeBundle,
@@ -16,9 +16,9 @@ import {
   reportSeedRows,
   writeBundleEnvValues,
   writeDocumentationTokens
-} from "./chunk-ZQ5WZWHF.js";
-import "./chunk-V7KMIEMF.js";
-import "./chunk-PAS5HOG3.js";
+} from "./chunk-BYYVOX2P.js";
+import "./chunk-DW47JVXI.js";
+import "./chunk-KSGITXNE.js";
 import "./chunk-QTMXJQZN.js";
 import {
   ROUTES_MANIFEST_BASENAME
@@ -26,7 +26,7 @@ import {
 import "./chunk-6YOH2L3G.js";
 import {
   fetchSourceArchive
-} from "./chunk-XYTVP4WI.js";
+} from "./chunk-5DLDRUCQ.js";
 import {
   confirm
 } from "./chunk-HQPL34O6.js";
@@ -38,33 +38,33 @@ import {
 } from "./chunk-3DRXWLJ5.js";
 import "./chunk-X4DVXBFY.js";
 import "./chunk-75MKIQON.js";
-import "./chunk-K75BFHQQ.js";
+import "./chunk-3TWQDGQY.js";
 import "./chunk-OBJ7FQDX.js";
 import "./chunk-2TFRR6JV.js";
 import "./chunk-I53OTC3O.js";
 import {
   ensureSecretPathGitignored
-} from "./chunk-JG642U5D.js";
+} from "./chunk-IIAF7VKN.js";
 import {
   readVersion
-} from "./chunk-ZJCHS7FM.js";
+} from "./chunk-45A3AF2B.js";
 import "./chunk-XQO4A4Q4.js";
 import {
   WORKSPACE_ENV_BASENAME
-} from "./chunk-M3RLLT4O.js";
+} from "./chunk-XUSL2Z5C.js";
 import {
   memoCredential,
   refuseProfileForLocal
-} from "./chunk-S3STXOAO.js";
+} from "./chunk-JE7BL5IF.js";
 import "./chunk-PBK257CI.js";
-import "./chunk-7UWUEUVJ.js";
+import "./chunk-HU6D6PYT.js";
 import "./chunk-7JKNWDYN.js";
-import "./chunk-C2I4GC36.js";
+import "./chunk-NIANORYB.js";
 import "./chunk-VJTTTIIB.js";
 import {
   getAccessToken
-} from "./chunk-QE2GNFMP.js";
-import "./chunk-QRKBFXIB.js";
+} from "./chunk-CTKBGPM6.js";
+import "./chunk-2ND7WS3E.js";
 import "./chunk-5Y5HWQ2P.js";
 import "./chunk-F3IA3YWI.js";
 import "./chunk-LCOCRJ4K.js";
@@ -76,13 +76,13 @@ import {
   readLockFile,
   writeLockFile
 } from "./chunk-CJDPSCMX.js";
-import "./chunk-UKJFCEMI.js";
+import "./chunk-GDAWYDHY.js";
 import {
   parseSlot,
   requireBackendSlot,
   slotValueMissing
 } from "./chunk-VD7YTLWL.js";
-import "./chunk-UU7EEREQ.js";
+import "./chunk-FZGK4VM5.js";
 import "./chunk-S42TFTM5.js";
 import "./chunk-ZYJP6BOO.js";
 import "./chunk-QO6BVGS5.js";
@@ -97,7 +97,7 @@ import {
 } from "./chunk-6S263KTM.js";
 import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-W2BVP27L.js";
+import "./chunk-77IFWJ53.js";
 import {
   PRESERVED_ON_REFRESH,
   containedWrites,
@@ -107,8 +107,8 @@ import {
   readDecodeRecord,
   removeEmptiedDirs,
   removeFiles
-} from "./chunk-HKLBDSML.js";
-import "./chunk-RYMGK2K5.js";
+} from "./chunk-JSPFDMTV.js";
+import "./chunk-U4JD5NMP.js";
 import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import {
@@ -134,11 +134,11 @@ import "./chunk-X2NL4KUO.js";
 import "./chunk-4GPIOIAC.js";
 import "./chunk-EKTIGGFO.js";
 import "./chunk-E763QI3G.js";
-import "./chunk-BRANWM4U.js";
+import "./chunk-C2SAVXAB.js";
 import {
   decodeMarkerHead,
   decodeMarkerWith
-} from "./chunk-5GIOCDUM.js";
+} from "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
 import "./chunk-7THDHQ4R.js";
 import "./chunk-3YW23UFH.js";
@@ -156,7 +156,7 @@ import {
   warn,
   writeJson
 } from "./chunk-C6KBZH7M.js";
-import "./chunk-F5RPNTN7.js";
+import "./chunk-T3ZVNOJC.js";
 import "./chunk-OHTHG3LL.js";
 import "./chunk-6JAEMMZ7.js";
 import "./chunk-6ZFJEJXZ.js";
@@ -248,7 +248,7 @@ async function loadSource(args, raw, cwd) {
     );
   }
   step(`Reading ${raw}`);
-  const { projectDirFrom } = await import("./xanosdk-project-2T56DRYS.js");
+  const { projectDirFrom } = await import("./xanosdk-project-NM2J5YFK.js");
   const fetched = await fetchSourceArchive(credential, raw, projectDirFrom(cwd) ?? cwd);
   const bundle = decodeWorkspaceArchive(fetched.archive);
   return {
@@ -316,7 +316,7 @@ async function runGenerateCommand(args) {
   refuseDuplicateSourceGuids(project);
   const projectRelative = !isAbsolute(outArg) && !isAbsolute(shown) && shown !== ".." && !shown.startsWith("../");
   const routesDeferred = [];
-  const { discoverManifestModules } = await import("./routes-manifest-file-UHVVL2YB.js");
+  const { discoverManifestModules } = await import("./routes-manifest-file-QFPNFJMZ.js");
   const modules = await discoverManifestModules(projectRootFrom(dirname(root)), join(root, ROUTES_MANIFEST_BASENAME), readVersion());
   const decoded = placeGeneratedFiles(project, "", projectRelative ? shown : basename(root) || shown, {
     entry: shellWord(`${shown}/index.ts`),
@@ -518,4 +518,4 @@ export {
   CODEGEN_MARKER,
   runGenerateCommand
 };
-//# sourceMappingURL=generate-command-IANKN6WV.js.map
+//# sourceMappingURL=generate-command-G7EJ7GW4.js.map

package/dist/{gitignore-FT2LVOMI.js → gitignore-WFZ2BTMS.js}

@@ -6,13 +6,13 @@ import {
   refuseIfTracked,
   requireSecretPathGitignored,
   secretPathLabel
-} from "./chunk-JG642U5D.js";
-import "./chunk-M3RLLT4O.js";
+} from "./chunk-IIAF7VKN.js";
+import "./chunk-XUSL2Z5C.js";
 import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-W2BVP27L.js";
-import "./chunk-HKLBDSML.js";
-import "./chunk-RYMGK2K5.js";
+import "./chunk-77IFWJ53.js";
+import "./chunk-JSPFDMTV.js";
+import "./chunk-U4JD5NMP.js";
 import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
@@ -29,7 +29,7 @@ import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-4GPIOIAC.js";
-import "./chunk-5GIOCDUM.js";
+import "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
 import "./chunk-C6KBZH7M.js";
 import "./chunk-GSGDWJB5.js";
@@ -49,4 +49,4 @@ export {
   requireSecretPathGitignored,
   secretPathLabel
 };
-//# sourceMappingURL=gitignore-FT2LVOMI.js.map
+//# sourceMappingURL=gitignore-WFZ2BTMS.js.map

package/dist/{impersonate-command-7B67ICPL.js → impersonate-command-ZJDK7ZYO.js}

@@ -11,20 +11,20 @@ import {
   memoCredential,
   refuseProfileForLocal,
   selectBackend
-} from "./chunk-S3STXOAO.js";
+} from "./chunk-JE7BL5IF.js";
 import "./chunk-PBK257CI.js";
 import {
   actualKind,
   describeBackend,
   resolveSource
-} from "./chunk-7UWUEUVJ.js";
+} from "./chunk-HU6D6PYT.js";
 import "./chunk-7JKNWDYN.js";
-import "./chunk-C2I4GC36.js";
+import "./chunk-NIANORYB.js";
 import "./chunk-VJTTTIIB.js";
 import {
   getAccessToken
-} from "./chunk-QE2GNFMP.js";
-import "./chunk-QRKBFXIB.js";
+} from "./chunk-CTKBGPM6.js";
+import "./chunk-2ND7WS3E.js";
 import "./chunk-5Y5HWQ2P.js";
 import "./chunk-F3IA3YWI.js";
 import "./chunk-LCOCRJ4K.js";
@@ -49,9 +49,9 @@ import "./chunk-622HUCZT.js";
 import "./chunk-6S263KTM.js";
 import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-W2BVP27L.js";
-import "./chunk-HKLBDSML.js";
-import "./chunk-RYMGK2K5.js";
+import "./chunk-77IFWJ53.js";
+import "./chunk-JSPFDMTV.js";
+import "./chunk-U4JD5NMP.js";
 import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
@@ -69,7 +69,7 @@ import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-4GPIOIAC.js";
-import "./chunk-5GIOCDUM.js";
+import "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
 import {
   detail,
@@ -151,4 +151,4 @@ async function dashboardUrl(resolved, guest, opts) {
 export {
   runImpersonateCommand
 };
-//# sourceMappingURL=impersonate-command-7B67ICPL.js.map
+//# sourceMappingURL=impersonate-command-ZJDK7ZYO.js.map

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { y as Condition, bB as TableDef, aQ as PathParams, x as Comparison, bq as SearchGroup, A as AddonDef, aN as OutputPath, aU as QualifiedCol, M as DbEval, bA as SortDirective, O as DbWhere, a2 as InferRow, aO as OutputRoot, a5 as InternalColsOf, aP as PagingEnvelopeField, k as AggregateRow, Q as EvalFields, aA as MicroserviceDef, g as AgentResultOf, a3 as InputDescriptor, F as FunctionDef, aX as QueryHandle } from './emit-8lcNcRrd.js';
-export { a as AddonXdo, b as AdoptChange, c as AdoptResult, d as AgentDef, e as AgentHandle, f as AgentOutput, h as AgentSettingsXdo, i as AgentTriggerInputs, j as AgentXdo, l as AnthropicLlm, m as ApiGroupDef, n as ApiGroupXdo, o as AuthRef, B as Bundle, p as BundlePayload, q as BundleType, C as ChannelConversationDef, r as ChannelDeliveryDef, s as ChannelDeliveryGuarantee, t as ChannelPublishDef, u as ChannelPublishWho, v as ChannelRateLimitDef, w as ColumnDef, z as ContainerEnv, D as ContainerPort, E as ContainerResources, G as ContainerVolume, H as CorsConfig, I as CorsMode, J as DatabaseActions, K as DatabaseInputs, N as DbEvalFilter, P as ErrorInputs, R as ExceptionPolicy, S as FieldAccessor, T as GoogleGenAiLlm, U as HistoryInput, V as HostedFile, W as HostedFileAccess, Y as HttpVerb, Z as IndexDef, _ as IndexLang, $ as IndexOp, a0 as IndexType, a1 as IndexXdo, a4 as InputOptions, a6 as KnowledgeDef, a7 as KnowledgeDirSource, a8 as KnowledgeFileSource, a9 as KnowledgeMode, aa as KnowledgeType, ab as LlmPrompt, ac as LlmProvider, ad as LlmSettings, ae as LockEntry, af as LockExportContext, L as LockFile, ag as McpIcon, ah as McpIconMimeType, ai as McpOauth, aj as McpOauthEnvString, ak as McpOauthExternal, al as McpOauthHosted, am as McpOauthPreset, an as McpOauthXdo, ao as McpPathOptions, ap as McpPrimitiveEntry, aq as McpPrimitiveRef, ar as McpServerDef, as as McpServerHandle, at as McpServerTriggerInputs, au as McpServerXdo, av as MergeResult, aw as MessageDeliverTo, ax as MicroserviceChart, ay as MicroserviceConfig, az as MicroserviceContainer, aB as MicroserviceDeployment, aC as MicroserviceIngress, aD as MicroserviceIngressPath, aE as MicroserviceRegistryAuth, aF as MicroserviceVolume, aG as MicroserviceXdo, aH as MiddlewareAttach, aI as MiddlewareAttachEntry, aJ as MiddlewareDef, aK as MiddlewareXdo, aL as ObjectKind, aM as OpenAiLlm, aR as PayloadArrayKey, aS as PromptDef, aT as PromptXdo, aV as QueryDef, aW as QueryFilterName, aY as QueryResponseType, aZ as QueryXdo, a_ as RealtimeActions, a$ as RealtimeChannelActions, b0 as RealtimeChannelDef, b1 as RealtimeChannelHandle, b2 as RealtimeChannelRef, b3 as RealtimeChannelTriggerInputs, b4 as RealtimeChannelXdo, b5 as RealtimeClient, b6 as RealtimeInputs, b7 as RealtimeMessageDef, b8 as RealtimeMessageXdo, b9 as RealtimeServerActions, ba as RealtimeServerDef, bb as RealtimeServerHandle, bc as RealtimeServerRef, bd as RealtimeServerTriggerInputs, be as RealtimeServerXdo, bf as RealtimeUrlOptions, bg as RenameResult, bh as ResourceAnnotations, bi as ResourceDef, bj as ResourceXdo, bk as ResultStrategy, bl as RowOf, bm as ScheduleDef, bn as SchemaCols, bo as SchemaDef, bp as SearchComparison, br as SearchNode, bs as SearchOp, bt as SearchParamValue, bu as SearchParams, bv as SearchParamsMembers, bw as SeedFileSource, bx as SeedRow, by as SeedSource, bz as SortDir, bC as TableXdo, bD as TaskDef, bE as TaskXdo, bF as ToolAnnotations, bG as ToolDef, bH as ToolXdo, bI as ToolsetBaseDef, bJ as ToolsetBaseXdo, bK as ToolsetToolEntry, bL as ToolsetToolRef, bM as ToolsetType, bN as TriggerDef, bO as TriggerObjType, bP as TriggerXdo, bQ as UrlLike, bR as ViewDef, bS as ViewXdo, bT as WorkflowTestDef, bU as WorkflowTestXdo, bV as WorkspaceActions, bW as WorkspaceConfigDef, bX as WorkspaceConfigXdo, bY as WorkspaceHistoryDef, bZ as WorkspaceHistoryXdo, b_ as WorkspaceInputs, b$ as WorkspaceMiddlewareDef, c0 as WorkspaceMiddlewareXdo, X as Xano, c1 as XanoFreeLlm, c2 as addon, c3 as agent, c4 as agentTrigger, c5 as and, c6 as apiGroup, c7 as cmp, c8 as defineFunction, c9 as emit, ca as emitBundle, cb as errorTrigger, cc as expr, cd as hostedFile, ce as input, cf as isHostedFile, cg as knowledge, ch as knowledgeDir, ci as knowledgeFile, cj as mcpServer, ck as mcpServerTrigger, cl as microservice, cm as middleware, cn as mixed, co as or, cp as prompt, cq as query, cr as realtimeChannel, cs as realtimeChannelTrigger, ct as realtimeMessage, cu as realtimeServer, cv as realtimeServerTrigger, cw as realtimeTrigger, cx as resource, cy as seedFile, cz as table, cA as tableTrigger, cB as task, cC as toSearchParams, cD as tool, cE as typedEnv, cF as workflowTest, cG as workspace, cH as workspaceConfig, cI as workspaceTrigger } from './emit-8lcNcRrd.js';
+import { y as Condition, bB as TableDef, aQ as PathParams, x as Comparison, bq as SearchGroup, A as AddonDef, aN as OutputPath, aU as QualifiedCol, M as DbEval, bA as SortDirective, O as DbWhere, a2 as InferRow, aO as OutputRoot, a5 as InternalColsOf, aP as PagingEnvelopeField, k as AggregateRow, Q as EvalFields, aA as MicroserviceDef, g as AgentResultOf, a3 as InputDescriptor, F as FunctionDef, aX as QueryHandle } from './emit-D-a6JznN.js';
+export { a as AddonXdo, b as AdoptChange, c as AdoptResult, d as AgentDef, e as AgentHandle, f as AgentOutput, h as AgentSettingsXdo, i as AgentTriggerInputs, j as AgentXdo, l as AnthropicLlm, m as ApiGroupDef, n as ApiGroupXdo, o as AuthRef, B as Bundle, p as BundlePayload, q as BundleType, C as ChannelConversationDef, r as ChannelDeliveryDef, s as ChannelDeliveryGuarantee, t as ChannelPublishDef, u as ChannelPublishWho, v as ChannelRateLimitDef, w as ColumnDef, z as ContainerEnv, D as ContainerPort, E as ContainerResources, G as ContainerVolume, H as CorsConfig, I as CorsMode, J as DatabaseActions, K as DatabaseInputs, N as DbEvalFilter, P as ErrorInputs, R as ExceptionPolicy, S as FieldAccessor, T as GoogleGenAiLlm, U as HistoryInput, V as HostedFile, W as HostedFileAccess, Y as HttpVerb, Z as IndexDef, _ as IndexLang, $ as IndexOp, a0 as IndexType, a1 as IndexXdo, a4 as InputOptions, a6 as KnowledgeDef, a7 as KnowledgeDirSource, a8 as KnowledgeFileSource, a9 as KnowledgeMode, aa as KnowledgeType, ab as LlmPrompt, ac as LlmProvider, ad as LlmSettings, ae as LockEntry, af as LockExportContext, L as LockFile, ag as McpIcon, ah as McpIconMimeType, ai as McpOauth, aj as McpOauthEnvString, ak as McpOauthExternal, al as McpOauthHosted, am as McpOauthPreset, an as McpOauthXdo, ao as McpPathOptions, ap as McpPrimitiveEntry, aq as McpPrimitiveRef, ar as McpServerDef, as as McpServerHandle, at as McpServerTriggerInputs, au as McpServerXdo, av as MergeResult, aw as MessageDeliverTo, ax as MicroserviceChart, ay as MicroserviceConfig, az as MicroserviceContainer, aB as MicroserviceDeployment, aC as MicroserviceIngress, aD as MicroserviceIngressPath, aE as MicroserviceRegistryAuth, aF as MicroserviceVolume, aG as MicroserviceXdo, aH as MiddlewareAttach, aI as MiddlewareAttachEntry, aJ as MiddlewareDef, aK as MiddlewareXdo, aL as ObjectKind, aM as OpenAiLlm, aR as PayloadArrayKey, aS as PromptDef, aT as PromptXdo, aV as QueryDef, aW as QueryFilterName, aY as QueryResponseType, aZ as QueryXdo, a_ as RealtimeActions, a$ as RealtimeChannelActions, b0 as RealtimeChannelDef, b1 as RealtimeChannelHandle, b2 as RealtimeChannelRef, b3 as RealtimeChannelTriggerInputs, b4 as RealtimeChannelXdo, b5 as RealtimeClient, b6 as RealtimeInputs, b7 as RealtimeMessageDef, b8 as RealtimeMessageXdo, b9 as RealtimeServerActions, ba as RealtimeServerDef, bb as RealtimeServerHandle, bc as RealtimeServerRef, bd as RealtimeServerTriggerInputs, be as RealtimeServerXdo, bf as RealtimeUrlOptions, bg as RenameResult, bh as ResourceAnnotations, bi as ResourceDef, bj as ResourceXdo, bk as ResultStrategy, bl as RowOf, bm as ScheduleDef, bn as SchemaCols, bo as SchemaDef, bp as SearchComparison, br as SearchNode, bs as SearchOp, bt as SearchParamValue, bu as SearchParams, bv as SearchParamsMembers, bw as SeedFileSource, bx as SeedRow, by as SeedSource, bz as SortDir, bC as TableXdo, bD as TaskDef, bE as TaskXdo, bF as ToolAnnotations, bG as ToolDef, bH as ToolXdo, bI as ToolsetBaseDef, bJ as ToolsetBaseXdo, bK as ToolsetToolEntry, bL as ToolsetToolRef, bM as ToolsetType, bN as TriggerDef, bO as TriggerObjType, bP as TriggerXdo, bQ as UrlLike, bR as ViewDef, bS as ViewXdo, bT as WorkflowTestDef, bU as WorkflowTestXdo, bV as WorkspaceActions, bW as WorkspaceConfigDef, bX as WorkspaceConfigXdo, bY as WorkspaceHistoryDef, bZ as WorkspaceHistoryXdo, b_ as WorkspaceInputs, b$ as WorkspaceMiddlewareDef, c0 as WorkspaceMiddlewareXdo, X as Xano, c1 as XanoFreeLlm, c2 as addon, c3 as agent, c4 as agentTrigger, c5 as and, c6 as apiGroup, c7 as cmp, c8 as defineFunction, c9 as emit, ca as emitBundle, cb as errorTrigger, cc as expr, cd as hostedFile, ce as input, cf as isHostedFile, cg as knowledge, ch as knowledgeDir, ci as knowledgeFile, cj as mcpServer, ck as mcpServerTrigger, cl as microservice, cm as middleware, cn as mixed, co as or, cp as prompt, cq as query, cr as realtimeChannel, cs as realtimeChannelTrigger, ct as realtimeMessage, cu as realtimeServer, cv as realtimeServerTrigger, cw as realtimeTrigger, cx as resource, cy as seedFile, cz as table, cA as tableTrigger, cB as task, cC as toSearchParams, cD as tool, cE as typedEnv, cF as workflowTest, cG as workspace, cH as workspaceConfig, cI as workspaceTrigger } from './emit-D-a6JznN.js';
 import { n as FromFieldMap, S as Statement, H as StatementAnnotations, M as MaybeBodyBrand, b as BranchesBrand, J as StatementOptions, v as ObjectRef, a as AsShapeBrand, o as MemberUpdateBrand, w as Prettify, C as CatchBrand, B as BodyBrand, m as FoundBrand, A as AppendBrand, W as XanoFileRef, x as ProtoKeySafe, N as NoExtraKeys, X as XanoDbLink } from './raw-where-ZMLND6AG.js';
 export { c as BrandOpts, d as BrandType, e as BrandValue, f as ConstMethodOpts, D as DecimalMethod, E as EmailMethod, g as EnumDefault, F as FieldAccess, h as FieldDescriptor, i as FieldMap, j as FieldOptions, k as FieldOpts, l as FieldStyleType, I as IntMethod, p as MethodArg, q as MethodOpts, r as MethodSpec, s as MockEntry, t as MockMap, u as MockXdo, O as ObjectOf, P as PasswordMethod, R as RawBrandValue, y as ReadonlyMethods, z as ResponseDef, G as RowFromFieldMap, T as TableRefMethod, K as TextFormat, L as TextMethod, Q as TypeBrand, V as ValueOf, U as VectorMethod, Y as XanoFileUpload, Z as XanoGeoData, _ as XanoGeoPosition, $ as XanoGeoType, a0 as XanoGeoValue, a1 as annotate, a2 as f, a3 as statements } from './raw-where-ZMLND6AG.js';
 import { V as Value, N as NotObjMember, i as FilterXdo, j as FilteredValue, A as AuthValue, b as CaughtValue, a4 as CaughtShape, e as ConstValue, R as RefValue, I as InpValue, k as FunctionXdo } from './xdo-CxDr2Q1C.js';
 export { C as CacheXdo, a as CaughtField, c as ConditionalContext, d as ConditionalElifContext, E as ExprGroup, f as ExprNode, g as ExprOperand, h as ExprStatement, F as FieldXdo, H as HistoryXdo, l as InputXdo, L as ListBoundsXdo, M as MethodXdo, P as PersistedFunctionRow, Q as QUERY_AGGREGATE_NAMES, m as QUERY_FILTER_NAMES, n as QUERY_FILTER_SPECS, o as QueryFilter, p as QueryFilterResults, q as RegexValue, r as ResultItemXdo, S as StackItemXdo, s as StatementInputXdo, T as TAGS, t as TEST_EXPECT_TYPES, u as Tag, v as TaggedValue, w as TestDef, x as TestExpect, y as TestExpectType, z as TestXdo, B as auth, D as c, G as caught, J as col, K as env, O as expect, U as filter, W as inp, X as out, Y as qf, Z as ref, _ as resp, $ as setting, a0 as sys, a1 as test, a2 as toolset, a3 as withFilters } from './xdo-CxDr2Q1C.js';
-import { f as FilterResults, E as ElementResult, S as SameArrayResult, G as GroupedArrayResult, a3 as fl$1, O as OutputAuthored, Y as generated } from './store-CuD1k4kV.js';
-export { A as AmbientBindings, d as Authored, e as Capturable, b as CaptureRecord, C as CaptureValue, F as FieldRule, I as IteratingBindings, g as LAMBDA_BINDINGS, h as LAMBDA_CODE_FILTERS, i as LAMBDA_GLOBALS, j as LAMBDA_MODULE_GLOBALS, k as LAMBDA_STATEMENTS, c as LambdaBindings, l as LambdaBody, L as LambdaOptions, a as LambdaSurface, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, p as ManifestValue, R as RawLambdaOptions, q as Route, r as StatementSpec, s as assertLambdaBody, t as bitwiseAnd, u as bitwiseOr, v as bitwiseXor, a4 as lam, w as mathAdd, x as mathDiv, y as mathMul, z as mathSub, B as objectEntries, D as objectKeys, H as objectValues, J as resetLockOverrides, K as seedLockOverrides, N as textAppend, P as textPrepend } from './store-CuD1k4kV.js';
+import { f as FilterResults, E as ElementResult, S as SameArrayResult, G as GroupedArrayResult, a3 as fl$1, O as OutputAuthored, Y as generated } from './store-xUySg-KR.js';
+export { A as AmbientBindings, d as Authored, e as Capturable, b as CaptureRecord, C as CaptureValue, F as FieldRule, I as IteratingBindings, g as LAMBDA_BINDINGS, h as LAMBDA_CODE_FILTERS, i as LAMBDA_GLOBALS, j as LAMBDA_MODULE_GLOBALS, k as LAMBDA_STATEMENTS, c as LambdaBindings, l as LambdaBody, L as LambdaOptions, a as LambdaSurface, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, p as ManifestValue, R as RawLambdaOptions, q as Route, r as StatementSpec, s as assertLambdaBody, t as bitwiseAnd, u as bitwiseOr, v as bitwiseXor, a4 as lam, w as mathAdd, x as mathDiv, y as mathMul, z as mathSub, B as objectEntries, D as objectKeys, H as objectValues, J as resetLockOverrides, K as seedLockOverrides, N as textAppend, P as textPrepend } from './store-xUySg-KR.js';
 
 /**
  * `InferInput<Q>` — the request-payload TS type for a query (or function) def's

package/dist/index.js

@@ -15,7 +15,7 @@ import {
 } from "./chunk-EKTIGGFO.js";
 import {
   compile
-} from "./chunk-DER2CVNC.js";
+} from "./chunk-DSD2NNTX.js";
 import {
   actionCall,
   actionPackageCall,
@@ -94,7 +94,7 @@ import {
   workflowTest,
   workflowTestCall,
   workspaceTrigger
-} from "./chunk-F5RPNTN7.js";
+} from "./chunk-T3ZVNOJC.js";
 import {
   query,
   test,

package/dist/{init-command-QOA4TJI2.js → init-command-CTWDNYAZ.js}

@@ -18,21 +18,21 @@ import {
   templateVarsFor,
   workflowMoveTarget,
   workflowPlacementNote
-} from "./chunk-V7KMIEMF.js";
+} from "./chunk-DW47JVXI.js";
 import "./chunk-O376UAZS.js";
 import "./chunk-HQPL34O6.js";
-import "./chunk-JG642U5D.js";
-import "./chunk-ZJCHS7FM.js";
+import "./chunk-IIAF7VKN.js";
+import "./chunk-45A3AF2B.js";
 import "./chunk-XQO4A4Q4.js";
-import "./chunk-M3RLLT4O.js";
-import "./chunk-S3STXOAO.js";
+import "./chunk-XUSL2Z5C.js";
+import "./chunk-JE7BL5IF.js";
 import "./chunk-PBK257CI.js";
-import "./chunk-7UWUEUVJ.js";
+import "./chunk-HU6D6PYT.js";
 import "./chunk-7JKNWDYN.js";
-import "./chunk-C2I4GC36.js";
+import "./chunk-NIANORYB.js";
 import "./chunk-VJTTTIIB.js";
-import "./chunk-QE2GNFMP.js";
-import "./chunk-QRKBFXIB.js";
+import "./chunk-CTKBGPM6.js";
+import "./chunk-2ND7WS3E.js";
 import "./chunk-5Y5HWQ2P.js";
 import "./chunk-F3IA3YWI.js";
 import "./chunk-LCOCRJ4K.js";
@@ -41,9 +41,9 @@ import "./chunk-YE7MHW45.js";
 import "./chunk-2MNLRIOX.js";
 import "./chunk-PFW7WFAT.js";
 import "./chunk-CJDPSCMX.js";
-import "./chunk-UKJFCEMI.js";
+import "./chunk-GDAWYDHY.js";
 import "./chunk-VD7YTLWL.js";
-import "./chunk-UU7EEREQ.js";
+import "./chunk-FZGK4VM5.js";
 import "./chunk-S42TFTM5.js";
 import "./chunk-ZYJP6BOO.js";
 import "./chunk-QO6BVGS5.js";
@@ -54,9 +54,9 @@ import "./chunk-622HUCZT.js";
 import "./chunk-6S263KTM.js";
 import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-W2BVP27L.js";
-import "./chunk-HKLBDSML.js";
-import "./chunk-RYMGK2K5.js";
+import "./chunk-77IFWJ53.js";
+import "./chunk-JSPFDMTV.js";
+import "./chunk-U4JD5NMP.js";
 import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
@@ -75,12 +75,12 @@ import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-4GPIOIAC.js";
-import "./chunk-BRANWM4U.js";
-import "./chunk-5GIOCDUM.js";
+import "./chunk-C2SAVXAB.js";
+import "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
 import "./chunk-7REDHC4N.js";
 import "./chunk-C6KBZH7M.js";
-import "./chunk-F5RPNTN7.js";
+import "./chunk-T3ZVNOJC.js";
 import "./chunk-OHTHG3LL.js";
 import "./chunk-6JAEMMZ7.js";
 import "./chunk-6ZFJEJXZ.js";
@@ -140,4 +140,4 @@ export {
   workflowMoveTarget,
   workflowPlacementNote
 };
-//# sourceMappingURL=init-command-QOA4TJI2.js.map
+//# sourceMappingURL=init-command-CTWDNYAZ.js.map

package/dist/{init-modules-KEEJ4HAF.js → init-modules-FJITJ6IB.js}

@@ -12,7 +12,7 @@ import {
   renderImports,
   renderRegisterCall,
   renderXanoIndexWithModules
-} from "./chunk-RYMGK2K5.js";
+} from "./chunk-U4JD5NMP.js";
 import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
@@ -48,4 +48,4 @@ export {
   renderRegisterCall,
   renderXanoIndexWithModules
 };
-//# sourceMappingURL=init-modules-KEEJ4HAF.js.map
+//# sourceMappingURL=init-modules-FJITJ6IB.js.map

package/dist/internal.d.ts

@@ -1,8 +1,8 @@
 export { a6 as FIELD_METHODS, a7 as REFERENCEABLE_KINDS, a8 as deriveGuid, a9 as encodeResponse, aa as encodeStatement, ab as getStatementFactory, ac as isRegisteredStatement, ad as resolveRef, ae as toNestedFields } from './raw-where-ZMLND6AG.js';
-import { r as StatementSpec } from './store-CuD1k4kV.js';
-export { Q as FILTER_NAMES, T as GENERATED_STATEMENT_NAMES, U as LLMS_TXT, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, V as TOTAL_OBJECT_KINDS, W as buildManifest, X as encodeFromSpec, Y as generatedStatements, Z as getLockedCanonical, _ as getLockedGuid, $ as isLockSeeded, a0 as registerSpec, a1 as renderDocs, a2 as renderLlmsTxt } from './store-CuD1k4kV.js';
-import { F as FunctionDef, aL as ObjectKind } from './emit-8lcNcRrd.js';
-export { b as AdoptChange, c as AdoptResult, B as Bundle, p as BundlePayload, q as BundleType, cJ as KNOWLEDGE_DIR, cK as KNOWLEDGE_FILE, cL as LOCK_PAYLOAD_KEYS, cM as LOCK_VERSION, ae as LockEntry, af as LockExportContext, L as LockFile, av as MergeResult, cN as PAYLOAD_ARRAY_KEYS, aR as PayloadArrayKey, cO as QUERY_EXPRESSION_FILTERS, bg as RenameResult, cP as VECTOR_FILTERS, cQ as WORKSPACE_KEY, cR as addonKind, cS as adoptFromBundle, cT as agentKind, cU as apiGroupKind, cV as buildBundle, cW as buildMiddlewareBlock, cX as buildWorkspaceHistory, cY as calcSignatureJson, cZ as channelPathParams, c_ as createLockContext, c$ as declaredServicePorts, d0 as emptyLock, d1 as encodeAddon, d2 as encodeAgent, d3 as encodeApiGroup, d4 as encodeColumn, d5 as encodeContainerHistory, d6 as encodeHistory, d7 as encodeIndex, d8 as encodeKnowledge, d9 as encodeMcpServer, da as encodeMicroservice, db as encodeMiddleware, dc as encodeMiddlewareEntry, dd as encodeMiddlewareList, de as encodeObject, df as encodeQuery, dg as encodeRealtimeChannel, dh as encodeRealtimeMessage, di as encodeRealtimeServer, dj as encodeSchedule, dk as encodeTable, dl as encodeTask, dm as encodeTool, dn as encodeToolRefs, dp as encodeToolsetBase, dq as encodeTrigger, dr as encodeView, ds as encodeWorkflowTest, dt as encodeWorkspaceConfig, du as getKind, dv as isKnowledgeDirSource, dw as isKnowledgeFileSource, dx as isQueryExpressionFilter, dy as isRegisteredKind, dz as knowledgeKind, dA as lockKey, dB as mcpServerKind, dC as mergeObserved, dD as microserviceKind, dE as middlewareKind, dF as mintCanonical, dG as parseLock, dH as phpJsonEncode, dI as queryKind, dJ as realtimeChannelGuid, dK as realtimeChannelKind, dL as realtimeMessageGuid, dM as realtimeMessageKind, dN as realtimeServerKind, dO as recordObserved, dP as registerKind, dQ as registeredKinds, dR as renameLockEntry, dS as resolveAuthRef, dT as resolvePayloadKey, dU as resolveRealtimeServerCanonical, dV as resolveToolsetCanonical, dW as serializeBundle, dX as serializeLock, dY as tableKind, dZ as taskKind, d_ as toolKind, d$ as triggerKind, e0 as validateLockModel, e1 as workflowTestKind, e2 as workspaceKind } from './emit-8lcNcRrd.js';
+import { r as StatementSpec } from './store-xUySg-KR.js';
+export { Q as FILTER_NAMES, T as GENERATED_STATEMENT_NAMES, U as LLMS_TXT, M as Manifest, m as ManifestField, n as ManifestKind, o as ManifestStatement, V as TOTAL_OBJECT_KINDS, W as buildManifest, X as encodeFromSpec, Y as generatedStatements, Z as getLockedCanonical, _ as getLockedGuid, $ as isLockSeeded, a0 as registerSpec, a1 as renderDocs, a2 as renderLlmsTxt } from './store-xUySg-KR.js';
+import { F as FunctionDef, aL as ObjectKind } from './emit-D-a6JznN.js';
+export { b as AdoptChange, c as AdoptResult, B as Bundle, p as BundlePayload, q as BundleType, cJ as KNOWLEDGE_DIR, cK as KNOWLEDGE_FILE, cL as LOCK_PAYLOAD_KEYS, cM as LOCK_VERSION, ae as LockEntry, af as LockExportContext, L as LockFile, av as MergeResult, cN as PAYLOAD_ARRAY_KEYS, aR as PayloadArrayKey, cO as QUERY_EXPRESSION_FILTERS, bg as RenameResult, cP as VECTOR_FILTERS, cQ as WORKSPACE_KEY, cR as addonKind, cS as adoptFromBundle, cT as agentKind, cU as apiGroupKind, cV as buildBundle, cW as buildMiddlewareBlock, cX as buildWorkspaceHistory, cY as calcSignatureJson, cZ as channelPathParams, c_ as createLockContext, c$ as declaredServicePorts, d0 as emptyLock, d1 as encodeAddon, d2 as encodeAgent, d3 as encodeApiGroup, d4 as encodeColumn, d5 as encodeContainerHistory, d6 as encodeHistory, d7 as encodeIndex, d8 as encodeKnowledge, d9 as encodeMcpServer, da as encodeMicroservice, db as encodeMiddleware, dc as encodeMiddlewareEntry, dd as encodeMiddlewareList, de as encodeObject, df as encodeQuery, dg as encodeRealtimeChannel, dh as encodeRealtimeMessage, di as encodeRealtimeServer, dj as encodeSchedule, dk as encodeTable, dl as encodeTask, dm as encodeTool, dn as encodeToolRefs, dp as encodeToolsetBase, dq as encodeTrigger, dr as encodeView, ds as encodeWorkflowTest, dt as encodeWorkspaceConfig, du as getKind, dv as isKnowledgeDirSource, dw as isKnowledgeFileSource, dx as isQueryExpressionFilter, dy as isRegisteredKind, dz as knowledgeKind, dA as lockKey, dB as mcpServerKind, dC as mergeObserved, dD as microserviceKind, dE as middlewareKind, dF as mintCanonical, dG as parseLock, dH as phpJsonEncode, dI as queryKind, dJ as realtimeChannelGuid, dK as realtimeChannelKind, dL as realtimeMessageGuid, dM as realtimeMessageKind, dN as realtimeServerKind, dO as recordObserved, dP as registerKind, dQ as registeredKinds, dR as renameLockEntry, dS as resolveAuthRef, dT as resolvePayloadKey, dU as resolveRealtimeServerCanonical, dV as resolveToolsetCanonical, dW as serializeBundle, dX as serializeLock, dY as tableKind, dZ as taskKind, d_ as toolKind, d$ as triggerKind, e0 as validateLockModel, e1 as workflowTestKind, e2 as workspaceKind } from './emit-D-a6JznN.js';
 import { k as FunctionXdo } from './xdo-CxDr2Q1C.js';
 
 /**

package/dist/internal.js

@@ -20,7 +20,7 @@ import {
   sourceSpellings,
   visibleFlags
 } from "./chunk-C6KBZH7M.js";
-import "./chunk-DER2CVNC.js";
+import "./chunk-DSD2NNTX.js";
 import {
   GENERATED_STATEMENT_NAMES,
   HEADER_DUPLICATES,
@@ -64,7 +64,7 @@ import {
   toolKind,
   triggerKind,
   workflowTestKind
-} from "./chunk-F5RPNTN7.js";
+} from "./chunk-T3ZVNOJC.js";
 import {
   encodeQuery,
   encodeResponse,
@@ -894,11 +894,12 @@ function renderSections(m) {
   lines.push(`# ${m.name} v${m.version}`, "");
   lines.push(`> ${m.description}`, "");
   lines.push(
-    "Xano is a hosted backend platform: one WORKSPACE serves a managed PostgreSQL",
-    "database, HTTP API endpoints, background tasks, realtime websocket channels, AI",
-    "agents and MCP servers, file storage, and redis. This SDK authors that workspace in",
-    "TypeScript \u2014 typed def objects registered on a `workspace(name)` \u2014 compiled to one",
-    "importable bundle by `xanosdk export ./xano/index.ts`, shipped live by `xanosdk deploy`.",
+    "Xano is one platform to build, run and govern AI-built software: one WORKSPACE",
+    "serves a managed PostgreSQL database, HTTP APIs, background tasks, realtime",
+    "websocket channels, AI agents, MCP servers, file storage and redis. This SDK",
+    "authors it in TypeScript \u2014 typed def objects registered on a",
+    "`workspace(name)` \u2014 compiled to one importable bundle by `xanosdk export",
+    "./xano/index.ts`, shipped live by `xanosdk deploy`.",
     "",
     "Def modules execute at BUILD time only: `s.*` factories return data, and the engine",
     "runs the compiled stack per request \u2014 statements in order, a statement's `as:`",
@@ -1334,6 +1335,22 @@ function renderSections(m) {
   const objectKinds = [];
   objectKinds.push("## Object kinds", "");
   objectKinds.push("Author with the factory, register on the Xano instance, lands under the payload key. Each line ends with a one-liner on what the primitive is.", "");
+  objectKinds.push(
+    "### Choosing a kind",
+    "",
+    "Choose by who or what starts the work. Each rule names the kind that fits and the one it gets mistaken for.",
+    "",
+    "- **Logic other code calls** \u2192 `defineFunction`, run with `s.function.run`. A `query` is the only kind an HTTP client reaches by verb + path; a `tool` is what an `agent()` or an MCP client calls. Logic serving two callers (an endpoint AND a tool) lives in one function both call.",
+    '- **Work on a timer** \u2192 `task` (cron or interval). **Work a request starts but does not wait for** \u2192 `s.function.run({ fn, runtime: { mode: "async-shared" } })`, which binds a job id, not the result (collect with `s.await`). **Work that follows a row change** \u2192 `tableTrigger`: it fires on every insert/update/delete of the table, whichever stack writes it, so the same side effect placed in one endpoint\'s stack misses every other write path.',
+    "- **The same steps before or after many objects** (an auth check, a rate limit, logging) \u2192 `middleware`, attached per host (`middleware: { pre, post }` on a query, function, task, tool or API group) or to every host of a kind with `workspaceConfig({ middleware: { query, function, task, tool } })` \u2014 not a function call repeated at the top of each stack.",
+    "- **Related rows on returned rows** \u2192 an `addon` attached to the read through its `addon: [{ addon, as, input }]` option (`db.query`/`get`/`add`/`edit`/`patch`), merged onto each row under `as` and typed in `InferResponse` \u2014 not a second read plus a loop that stitches rows together.",
+    "- **AI.** An LLM running inside the backend \u2192 `agent()`, started from a stack with `s.ai.agent.run`; it has no public endpoint. An external AI client (Claude, Cursor, any MCP client) calling the backend \u2192 `mcpServer()`. Standing instructions for Xano's own builder AI \u2192 `knowledge()`; an `agent()` run never reads it. The actions either one calls \u2192 `tool()`. What an MCP server serves besides tools (`prompt()`, `resource()`) and when each fits: `llms/kinds-agent-mcp.md`.",
+    "- **Pushing to connected clients** \u2192 `realtimeServer` \u2192 `realtimeChannel` \u2192 `realtimeMessage` (the handler for a frame a client sends \u2014 the realtime analogue of a query). A server-side push from any stack is `s.realtime.publish`; a client polling a `query` is the substitute this replaces.",
+    "- **Code the typed surface cannot express** \u2192 a lambda (`s.lambda`, `fl.lambda`) for a short JavaScript body, LAST, after native filters and expressions (`llms/lambda.md`); a `microservice` for a long-running container or another language; `s.api.request` for a service that already has an HTTP API.",
+    "- **Tests** \u2192 `tests` on a `query`/`defineFunction`/`middleware` for that one object's input \u2192 output; a `workflowTest` for a flow across objects (`s.function.call`, `s.api.call`, `s.task.call`) asserted with `s.expect.*`.",
+    "- **Reacting to the platform** \u2192 `errorTrigger` (an error signature first seen, regressing, or marked fixed) and `workspaceTrigger` (branch new/merge/live). What one connection to an MCP server, agent, realtime server or channel may see or do \u2192 that object's connection trigger.",
+    ""
+  );
   objectKinds.push(
     "\u26A0 Composing a workspace from independently-authored modules: `register*` takes its defs however they arrive, but `modules.flatMap((m) => m.tables)` does NOT typecheck. `Array.prototype.flatMap` binds its element type to the FIRST element, so every later module's tables are checked against that one table's schema \u2014 the error compares two unrelated column names and mentions neither `flatMap` nor the cause. `.concat()` collapses the same way. Two spellings work: pass an array LITERAL (`registerTables([...a.tables, ...b.tables])` \u2014 spreads are fine, TypeScript infers the union across every element at once), or annotate the module array with the wide aliases `AnyTableDef` / `AnyQueryDef` / `AnyFunctionDef` / `AnyAddonDef`, exported for exactly the four def types whose generics can collapse this way. Widening the array costs nothing: the typing you need lives on the `table()`/`query()` handle you hold and pass to `s.db.*`, and is never read back off the registered array.",
     ""
@@ -1621,13 +1638,14 @@ function renderSections(m) {
     "| 130 | Ctrl-C outside a write or install. | \u2014 |"
   ];
   const kindsAgentMcp = [
+    "- An MCP server serves THREE primitives, and each reaches the client differently: a `tool()` is an action the MODEL calls (it may write); a `resource()` is read-only context the client APPLICATION lists and attaches by `uri` (reference docs, a schema, one record through a `{variable}` template); a `prompt()` is a message template with arguments the USER picks by name. Context a session opens with is a `resource()`; a workflow a user starts by name is a `prompt()`; data the model must fetch on its own mid-task stays a `tool()`, since a client shows the model only the resources attached to the conversation. Register each kind (`registerTools`/`registerPrompts`/`registerResources`) and list it on the server.",
     "- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, prompts?, resources?, oauth?, llm?, output? })` \u2014 an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint \u2014 `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<\u2026>/stream` path THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral. A TENANT rides AFTER the prefix (`/x2/mcp/tenant/<tenant>/<canonical>/<token>/stream`), not as a base-URL segment: `getUrl` LIFTS a `/tenant/<name>` out of the base and re-places it there, so `getUrl(window.XANO_HOST)` is correct as-is; concatenating them by hand builds an unregistered route that 404s. Pass `{ tenant }` when the base URL cannot name it (a tenant on its own domain).",
     '  - `tools?`: a `ToolsetToolEntry[]`. Pass the `tool()` HANDLES directly (`tools: [saveNote]`); use the `{ tool, enabled?, auth?, type?, resourceUri?, toolMeta? }` wrapper when an entry needs more. `type: "resource"` (+ a required `resourceUri`) is the LEGACY way to publish a tool as an MCP resource \u2014 author a `resource()` and list it in `resources` instead; `toolMeta` is extra metadata on a tool entry. The two payload fields are per-type and supplying the other one is refused, because the engine stores it against neither. `auth` names an auth **table** (a `table({ auth: true })` handle or its name) \u2014 per-tool, and the only gate there is. \u26A0 It is also what gives the tool a CALLER, on an `agent()` exactly as on an MCP server. `auth()` inside a tool whose entry names no table does NOT return null: the call answers a normal result carrying `{"code":"ERROR_FATAL","message":""}`, so the model reads a successful tool result and reports success while nothing is written. A caller token does not rescue it \u2014 the ENTRY supplies identity. Spell it `{ tool: saveNote, auth: users }`; `export()` warns. An entry naming no tool THROWS at export; a deliberate raw `id: 0` warns and carries through.',
     '  - `prompts?` / `resources?`: `prompt()` / `resource()` HANDLES (or names), or a `{ prompt, enabled?, auth? }` / `{ resource, enabled?, auth? }` wrapper. `auth` names the auth table and is what gives the stack a caller: a prompt/resource reading `auth()` behind an entry with none answers every `prompts/get` / `resources/read` with `-32603 "Access Denied"` (`export()` warns `toolset.primitive-reads-auth-ungated`). Listing one target twice THROWS; two resources with one `uri` on one server fail `export()` (`mcp.resource-uri-duplicate`). MCP-server only \u2014 `agent()` takes tools only.',
     "  - `history?` is the server tier for its tools, prompts AND resources alike; an object's own `history` wins. The workspace tier (`workspaceConfig({ history })`) has `prompt` and `resource` keys, both default on.",
     '  - `oauth?`: per-server sign-in; omit and nothing changes. Union on `mode`; `authTable` (REQUIRED, auth `table()` handle or name) is whose row the signed-in user is \u2014 `auth()` on the whole server, `t.auth` in its trigger. Hosted (the platform is the authorization server): `{ mode: "hosted", authTable, loginUrl }` \u2014 clients are sent to `loginUrl` (YOUR page, which is also the consent screen) with `mcp_request`; show `s.mcp.oauth.request`, sign the user in, then your endpoint calls `s.mcp.oauth.complete` with their `decision` and the page redirects to the URL it binds. External (your IdP issues tokens): `{ mode: "external", authTable, issuer, column, audience?, audienceAck?, claim?, claimAck?, preset?, allowedClientIds? }` \u2014 token `claim` (default `sub`) matched against `column`; `preset` is `auth0|clerk|workos|entra|okta|cognito|generic`. `loginUrl`/`issuer`/`audience` take `env("NAME")` (resolved per environment).',
     '    - `export()` FAILS: hosted without `loginUrl` (`mcp.oauth-hosted-incomplete`); external without `issuer`/`column` (`mcp.oauth-external-incomplete`); `preset: "clerk"` without `allowedClientIds` (`mcp.oauth-preset-client-ids`); `claim` other than `sub`/`oid`/`email` without `claimAck` (`mcp.oauth-claim-unacked` \u2014 users can edit it at most providers). Unknown `mode`/`preset` THROWS; so do the dropped `consent`/`branding`/`trustedClients`.',
-    '- `prompt({ name, guid?, description?, docs?, title?, icons?, tags?, history?, input?, stack?, response?, responseShape?, middleware? })` \u2014 an MCP prompt; takes `registerPrompts`. `input` is the prompt\'s arguments (each field\'s `description`/`required`/enum `values` reach the client; enum values also answer completion requests). `response`: a text value is ONE user message; a list of `{ role: "user" | "assistant", content }` is sent in order: `s.set_var("m", obj({ list: [obj({ role: c.text("user"), content: ref("body") })] }))`, `response: ref("m.list")`. Without `response` or a top-level `s.return`, `prompts/get` fails.',
+    '- `prompt({ name, guid?, description?, docs?, title?, icons?, tags?, history?, input?, stack?, response?, responseShape?, middleware? })` \u2014 an MCP prompt; takes `registerPrompts`. `input` is the prompt\'s arguments (each field\'s `description`/`required`/enum `values` reach the client; enum values also answer completion requests). `response`: a text value is ONE user message; a list of `{ role: "user" | "assistant", content }` is sent in order, `content` a string or an MCP content block: `s.set_var("m", obj({ list: [obj({ role: c.text("user"), content: ref("body") })] }))`, `response: ref("m.list")`. Without `response` or a top-level `s.return`, `prompts/get` fails.',
     "- `resource({ name, uri, guid?, description?, docs?, mimeType?, title?, icons?, annotations?, tags?, history?, input?, stack?, response?, responseShape?, middleware? })` \u2014 an MCP resource; takes `registerResources`. Clients address it by `uri`, never `name`.",
     '  - `uri`: a literal (`"docs://readme"`, no `input`) or an RFC 6570 LEVEL-1 template (`"orders://{region}/{order_id}"`). It must start with a scheme; each `{variable}` is letters/digits/`_`, one per brace pair, never two adjacent. `input` must be EXACTLY the template\'s variables, each a single `text`/`int`/`decimal`/`bool`/`enum`/`email`/`uuid` \u2014 anything else THROWS. A value that does not convert is refused before the stack runs.',
     "  - `response`: a string is returned as text; non-UTF-8 content (a file, binary) as a base64 blob. `mimeType?` omitted \u2192 derived from what the stack returns.",
@@ -2431,7 +2449,7 @@ function renderDocs(m) {
     {
       path: "llms/kinds-agent-mcp.md",
       title: "Agent and MCP def shapes",
-      readWhen: "Read when defining an `agent()`, `mcpServer()`, `prompt()` or `resource()`.",
+      readWhen: "Read when building an MCP server (tools, prompts, resources) or an `agent()`.",
       body: s.kindsAgentMcp
     },
     {

package/dist/{keep-data-merge-BIBW4QR4.js → keep-data-merge-KLNLVBYK.js}

@@ -14,7 +14,7 @@ import {
   XanoSdkImportRefusal,
   detectXanoSdkImportRoute,
   xanosdkImport
-} from "./chunk-FN7E6XGD.js";
+} from "./chunk-FDZ2ANSS.js";
 import {
   exportWorkspaceBundle
 } from "./chunk-QC3MKMDK.js";
@@ -200,7 +200,7 @@ async function unreachableProbeError(err, req) {
   }
   const serverError = typeof status === "number" && (status >= 500 || status === 429) && answered !== null;
   if (reach === null && !serverError || req.rerun === void 0) return err;
-  const { LookupFailedError, rateLimitedCause } = await import("./source-resolve-LNRUITLS.js");
+  const { LookupFailedError, rateLimitedCause } = await import("./source-resolve-WHXNMVJT.js");
   const failed = new LookupFailedError(
     reach !== null ? `Could not reach ${req.label} to ask whether it can merge (${reach[1]}). ${reach[1].includes(UNTRUSTED_CERTIFICATE) ? "A certificate problem" : "A network failure"} \u2014 nothing was sent and its data is untouched` : `${req.label[0].toUpperCase()}${req.label.slice(1)} answered the check whether it can merge with ${status === 429 ? "its rate limit" : "a server error"} (${answered[1].replace(/\.$/, "")}). ${status === 429 ? `${rateLimitedCause()}: nothing` : "Nothing"} was sent and its data is untouched`,
     "unreachable",
@@ -213,7 +213,7 @@ async function unreachableProbeError(err, req) {
 }
 async function unansweredReadError(err, req) {
   if (req.rerun === void 0) return err;
-  const { LookupFailedError, isRateLimited, isServerError, isTransportFailure, unansweredCause } = await import("./source-resolve-LNRUITLS.js");
+  const { LookupFailedError, isRateLimited, isServerError, isTransportFailure, unansweredCause } = await import("./source-resolve-WHXNMVJT.js");
   const transport = isTransportFailure(err);
   if (!transport && !isServerError(err)) return err;
   const first = ((err instanceof Error ? err.message : String(err)).trim().split("\n")[0] ?? "").replace(/[.:]$/, "");
@@ -1116,4 +1116,4 @@ export {
   unansweredReadError,
   unreachableProbeError
 };
-//# sourceMappingURL=keep-data-merge-BIBW4QR4.js.map
+//# sourceMappingURL=keep-data-merge-KLNLVBYK.js.map

package/dist/{lambda-config-reconcile-47X5C2E4.js → lambda-config-reconcile-FXPDH2U5.js}

@@ -1,10 +1,10 @@
 import {
   allFrontendPresets
-} from "./chunk-BRANWM4U.js";
+} from "./chunk-C2SAVXAB.js";
 import {
   renderLambdaTsconfig,
   renderPackageJson
-} from "./chunk-5GIOCDUM.js";
+} from "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
 import "./chunk-TFFGOFVZ.js";
 import "./chunk-OHX6MIUZ.js";
@@ -114,4 +114,4 @@ function reconcileLambdaConfig(dir) {
 export {
   reconcileLambdaConfig
 };
-//# sourceMappingURL=lambda-config-reconcile-47X5C2E4.js.map
+//# sourceMappingURL=lambda-config-reconcile-FXPDH2U5.js.map

package/dist/{landing-record-DO3PM7QP.js → landing-record-ZB4OJQF2.js}

@@ -6,7 +6,7 @@ import {
   recordForeignLanding,
   recordLanding,
   unvouchedIdentities
-} from "./chunk-S2F7KVUL.js";
+} from "./chunk-KA3JN4SH.js";
 import "./chunk-CJDPSCMX.js";
 import "./chunk-S42TFTM5.js";
 import "./chunk-ZYJP6BOO.js";
@@ -15,9 +15,9 @@ import "./chunk-ULUUOUQX.js";
 import "./chunk-6S263KTM.js";
 import "./chunk-IB6SKACE.js";
 import "./chunk-EUUUMY7J.js";
-import "./chunk-W2BVP27L.js";
-import "./chunk-HKLBDSML.js";
-import "./chunk-RYMGK2K5.js";
+import "./chunk-77IFWJ53.js";
+import "./chunk-JSPFDMTV.js";
+import "./chunk-U4JD5NMP.js";
 import "./chunk-B3NH5UBI.js";
 import "./chunk-ZFDZKNGG.js";
 import "./chunk-FWD7AL6N.js";
@@ -35,7 +35,7 @@ import "./chunk-HU7F56VF.js";
 import "./chunk-MF4W6FHU.js";
 import "./chunk-X2NL4KUO.js";
 import "./chunk-4GPIOIAC.js";
-import "./chunk-5GIOCDUM.js";
+import "./chunk-IZI3SYXH.js";
 import "./chunk-LJM5CIY4.js";
 import "./chunk-C6KBZH7M.js";
 import "./chunk-YEH5OIPF.js";
@@ -59,4 +59,4 @@ export {
   recordLanding,
   unvouchedIdentities
 };
-//# sourceMappingURL=landing-record-DO3PM7QP.js.map
+//# sourceMappingURL=landing-record-ZB4OJQF2.js.map