@xano/xanoscript-language-server 11.10.1 → 11.12.0

package/.claude/settings.local.json

@@ -2,20 +2,35 @@
   "permissions": {
     "allow": [
       "Bash(npm test:*)",
-      "Bash(git checkout:*)",
-      "Bash(ls:*)",
-      "Bash(npm run lint:*)",
+      "Bash(npm run lint)",
+      "Bash(npm run test:*)",
+      "Bash(npx eslint:*)",
+      "Bash(node:*)",
+      "Bash(npm install)",
       "Bash(grep:*)",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server log --all --pretty=format:\"%h %s\")",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server log --all -S \"password\\\\|secret\\\\|api_key\\\\|token\" --oneline)",
+      "Bash(xargs file:*)",
       "Bash(find:*)",
-      "Read(//tmp/**)",
-      "Bash(git stash:*)",
-      "Bash(do)",
-      "Bash(if ! grep -q \"guidFieldAttribute\" \"$f\")",
-      "Bash(then)",
-      "Bash(echo:*)",
-      "Bash(fi)",
-      "Bash(done)",
-      "Bash(npx eslint:*)"
-    ]
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server log -p --all -S \"webhook\\\\|Bearer\\\\|discord\\\\|slack\\\\|xano_insiders\" -- \"*.xs\" \"*.js\")",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server ls-files:*)",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server status)",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server diff --stat)",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server log --oneline -5)",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server add README.md LICENSE package.json lexer/tests/query/valid_sources/basic_query.xs parser/functions/stream/streamFromRequestFn.js parser/functions/stream/streamFromRequestFn.spec.js parser/tests/function/valid_sources/discord_poll_send_to_slack.xs parser/tests/query/valid_sources/all_basics.xs)",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server commit -m \"$\\(cat <<''EOF''\nPrepare package for public npm release as @xano/xanoscript-language-server\n\n- Rename package to @xano/xanoscript-language-server\n- Add MIT LICENSE file\n- Add npm metadata \\(description, repository, author, license, bugs, homepage\\)\n- Remove private flag to allow publishing\n- Sanitize test files: replace internal URLs, IDs, and env var names with placeholders\n- Simplify README maintainer section\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\nEOF\n\\)\")",
+      "Bash(git -C /Users/justinalbrecht/git/xs-language-server log -1 --oneline)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(git push)",
+      "Bash(npm whoami:*)",
+      "Bash(npm view:*)",
+      "Bash(npm version:*)",
+      "Bash(npm publish:*)",
+      "Bash(wc:*)",
+      "Bash(git push:*)"
+    ],
+    "deny": [],
+    "ask": []
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xano/xanoscript-language-server",
-  "version": "11.10.1",
+  "version": "11.12.0",
   "description": "Language Server Protocol implementation for XanoScript",
   "type": "module",
   "main": "server.js",

package/parser/addon_parser.js

@@ -26,10 +26,11 @@ export function addonDeclaration($) {
     // Allow leading comments and newlines before the addon declaration
     $.SUBRULE($.optionalCommentBlockFn);
     const parent = $.CONSUME(AddonToken);
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "addon");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/agent_parser.js

@@ -21,10 +21,11 @@ export function agentDeclaration($) {
     // Allow leading comments and newlines before the agent declaration
     $.SUBRULE($.optionalCommentBlockFn);
     const parent = $.CONSUME(AgentToken); // agent
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "agent");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/agent_trigger_parser.js

@@ -26,10 +26,11 @@ export function agentTriggerDeclaration($) {
     // Allow leading comments and newlines before the agent_trigger declaration
     $.SUBRULE($.optionalCommentBlockFn);
     const parent = $.CONSUME(AgentTriggerToken); // agent_trigger
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "agent_trigger");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/api_group_parser.js

@@ -27,10 +27,11 @@ export function apiGroupDeclaration($) {
     // Allow leading comments and newlines before the api_group declaration
     $.SUBRULE($.optionalCommentBlockFn);
     $.CONSUME(ApiGroupToken); // api_group
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "api_group");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken));

package/parser/base_parser.js

@@ -270,6 +270,17 @@ export class XanoBaseParser extends CstParser {
     this.SAVE_ERROR(new MismatchedTokenException(message, token));
   }
 
+  /**
+   * Validate that a declaration name token is not an empty string
+   * @param {import('chevrotain').IToken} nameToken
+   * @param {string} typeName the declaration type (e.g. "query", "function")
+   */
+  validateDeclarationName(nameToken, typeName) {
+    if (nameToken?.image === '""') {
+      this.addInvalidValueError(nameToken, `${typeName} name must not be empty`);
+    }
+  }
+
   /**
    * Setup all the required rules for the parser but without creating duplicates
    *

package/parser/branch_parser.js

@@ -9,10 +9,11 @@ export function branchDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(BranchToken); // branch
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "branch");
 
     const middlewareSchema = {
       pre: [{ name: "[string]" }],

package/parser/function_parser.js

@@ -29,6 +29,7 @@ export function functionDeclaration($) {
       { ALT: () => $.CONSUME(StringLiteral) },
     ]);
 
+    $.validateDeclarationName(nameToken, "function");
     if (nameToken?.image && getVarName(nameToken).startsWith("/")) {
       $.addInvalidValueError(
         nameToken,

package/parser/function_parser.spec.js

@@ -16,6 +16,20 @@ describe("function_parser", () => {
     expect(parser.errors).to.be.empty;
   });
 
+  it("should raise an error when a function name is empty", () => {
+    const parser = xanoscriptParser(`function "" {
+      input {
+      }
+
+      stack {
+      }
+
+      response = null
+    }`);
+    expect(parser.errors).to.not.be.empty;
+    expect(parser.errors[0].message).to.include("must not be empty");
+  });
+
   it("should raise an error when a function name starts with /", () => {
     const parser = xanoscriptParser(`function "/foo" {
       input {

package/parser/functions/db/dbDelFn.spec.js

@@ -46,6 +46,11 @@ describe("dbDelFn", () => {
     expect(parser.errors).to.be.empty;
   });
 
+  it("dbDelFn rejects comma separated attributes", () => {
+    const parser = parse(`del account {field_name = "id", field_value = "a"}`);
+    expect(parser.errors).to.not.be.empty;
+  });
+
   it("dbDelFn requires a field_name", () => {
     const parser = parse(`del user {
       field_value = $input.email

package/parser/functions/schema/schemaParseAttributeFn.js

@@ -1,11 +1,6 @@
 import { get, isPlainObject, keys, some } from "lodash-es";
 import { ExclamationToken } from "../../../lexer/cast.js";
-import {
-  CommaToken,
-  EqualToken,
-  LCurly,
-  RCurly,
-} from "../../../lexer/control.js";
+import { EqualToken, LCurly, RCurly } from "../../../lexer/control.js";
 import { StringLiteral } from "../../../lexer/literal.js";
 import { Identifier, NewlineToken } from "../../../lexer/tokens.js";
 import {
@@ -156,10 +151,7 @@ function _schemaParseAttributeFn($) {
         $.CONSUME1(NewlineToken);
       });
 
-      $.OPTION(() => {
-        needSeparator = false;
-        $.CONSUME1(CommaToken);
-      });
+      lastToken = objectKeyToken;
     });
     $.CONSUME(RCurly); // "}"
 

package/parser/functions/schema/schemaParseAttributeFn.spec.js

@@ -127,15 +127,17 @@ describe("schemaParseAttributeFn", () => {
     expect(parser.errors).to.be.empty;
 
     parse(`value = {
-      something = 123.2,
+      something = 123.2
       other_thing = 44
     }`).schemaParseAttributeFn_flat();
     expect(parser.errors).to.be.empty;
+  });
 
+  it("schemaParseAttributeFn rejects comma separated attributes", () => {
     parse(
       `value = { something = 123.2, other_thing = 44 }`,
     ).schemaParseAttributeFn_flat();
-    expect(parser.errors).to.be.empty;
+    expect(parser.errors).to.not.be.empty;
   });
 
   it("schemaParseAttributeFn immutable restricts to valid token", () => {

package/parser/mcp_server_parser.js

@@ -24,10 +24,11 @@ export function mcpServerDeclaration($) {
     // Allow leading comments and newlines before the mcp_server declaration
     $.SUBRULE($.optionalCommentBlockFn);
     const parent = $.CONSUME(McpServerToken); // mcp_server
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "mcp_server");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/mcp_server_trigger_parser.js

@@ -25,10 +25,11 @@ export function mcpServerTriggerDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(McpServerTriggerToken); // mcp_server_trigger
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "mcp_server_trigger");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/middleware_parser.js

@@ -28,10 +28,11 @@ export function middlewareDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(MiddlewareToken);
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(Identifier) },
       { ALT: () => $.CONSUME(StringLiteral) },
     ]);
+    $.validateDeclarationName(nameToken, "middleware");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/query_parser.js

@@ -43,6 +43,7 @@ export function queryDeclaration($) {
       { ALT: () => $.CONSUME(Identifier) }, // foo
     ]);
 
+    $.validateDeclarationName(nameToken, "query");
     if (nameToken?.image && getVarName(nameToken).startsWith("/")) {
       $.addInvalidValueError(nameToken, "query name must not start with '/'");
     }

package/parser/query_parser.spec.js

@@ -16,6 +16,20 @@ describe("query_parser", () => {
     expect(parser.errors).to.be.empty;
   });
 
+  it("should raise an error when a query name is empty", () => {
+    const parser = xanoscriptParser(`query "" verb=GET {
+      input {
+      }
+
+      stack {
+      }
+
+      response = null
+    }`);
+    expect(parser.errors).to.not.be.empty;
+    expect(parser.errors[0].message).to.include("must not be empty");
+  });
+
   it("should raise an error when a query starts with /", () => {
     const parser = xanoscriptParser(`query "/foo" verb=GET {
       input {

package/parser/realtime_channel_parser.js

@@ -9,10 +9,11 @@ export function realtimeChannelDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(RealtimeChannelToken); // realtime_channel
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "realtime_channel");
 
     $.SUBRULE($.schemaParseAttributeFn, {
       ARGS: [

package/parser/realtime_trigger_parser.js

@@ -25,10 +25,11 @@ export function realtimeTriggerDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(RealtimeTriggerToken); // realtime_trigger
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "realtime_trigger");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/run_parser.js

@@ -25,10 +25,11 @@ export function runJobClause($) {
   return () => {
     const parent = $.CONSUME(JobToken); // "job"
 
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "job");
 
     $.SUBRULE($.schemaParseAttributeFn, {
       ARGS: [
@@ -49,10 +50,11 @@ export function runServiceClause($) {
   return () => {
     const parent = $.CONSUME(ServiceToken); // "service"
 
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "service");
 
     $.SUBRULE($.schemaParseAttributeFn, {
       ARGS: [

package/parser/table_parser.js

@@ -25,7 +25,7 @@ export function tableDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     $.CONSUME(TableToken); // "table"
-    $.OR1([
+    const nameToken = $.OR1([
       {
         ALT: () =>
           $.CONSUME(StringLiteral, {
@@ -39,6 +39,7 @@ export function tableDeclaration($) {
           }),
       },
     ]);
+    $.validateDeclarationName(nameToken, "table");
 
     let hasSchema = false;
     let hasView = false;

package/parser/table_trigger_parser.js

@@ -30,10 +30,11 @@ export function tableTriggerDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(TableTriggerToken); // table_trigger
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "table_trigger");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/task_parser.js

@@ -25,10 +25,11 @@ export function taskDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     $.CONSUME(TaskToken);
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "task");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/task_parser.spec.js

@@ -13,6 +13,17 @@ describe("task_parser", () => {
     expect(parser.errors).to.be.empty;
   });
 
+  it("should raise an error when a task name is empty", () => {
+    const parser = xanoscriptParser(`task "" {
+  stack {
+  }
+
+  schedule = []
+}`);
+    expect(parser.errors).to.not.be.empty;
+    expect(parser.errors[0].message).to.include("must not be empty");
+  });
+
   it("should parse an active task", () => {
     const parser = xanoscriptParser(`task task_for_listing {
   active = true

package/parser/tool_parser.js

@@ -21,10 +21,11 @@ export function toolDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(ToolToken);
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "tool");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/workflow_test_parser.js

@@ -16,10 +16,11 @@ export function workflowTestDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(WorkflowTestToken);
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "workflow_test");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/parser/workspace_parser.js

@@ -9,10 +9,11 @@ export function workspaceDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(WorkspaceToken); // workspace
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "workspace");
 
     $.SUBRULE($.schemaParseAttributeFn, {
       ARGS: [

package/parser/workspace_trigger_parser.js

@@ -23,10 +23,11 @@ export function workspaceTriggerDeclaration($) {
     $.SUBRULE($.optionalCommentBlockFn);
 
     const parent = $.CONSUME(WorkspaceTriggerToken); // workspace_trigger
-    $.OR([
+    const nameToken = $.OR([
       { ALT: () => $.CONSUME(StringLiteral) },
       { ALT: () => $.CONSUME(Identifier) },
     ]);
+    $.validateDeclarationName(nameToken, "workspace_trigger");
     $.CONSUME(LCurly); // "{"
     $.MANY(() => {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line

package/.claude/memory/feedback_no_git.md

@@ -1,11 +0,0 @@
----
-name: no-git-interactions
-description: User does not want Claude to interact with git (no commits, no staging, no git commands)
-type: feedback
----
-
-Do not interact with git — no commits, no staging, no git commands. Focus purely on implementation and testing.
-
-**Why:** User manages their own git workflow.
-
-**How to apply:** Skip all git-related steps in plans. When dispatching subagents, explicitly tell them not to run any git commands. Remove commit steps from task instructions.