@xano/xanoscript-language-server 12.20.1 → 12.22.0

package/parser/clauses/mcpMetadataClauses.js

@@ -7,10 +7,8 @@ import { AnnotationsToken, IconsToken, TitleToken } from "../../lexer/mcp.js";
 import { MultiLineStringToken } from "../../lexer/multiline.js";
 
 // Shared MCP metadata blocks for `tool`, `prompt` and `resource` (MCP spec
-// 2026-07-28). The rules mirror cloud-client's decode checks so the editor
-// reports what a push would refuse:
-//   - `helper/mvp/mcpserver/ToolMetadata.php` (icons, tool annotations)
-//   - `helper/script/transform/Resource.php` (resource annotations)
+// 2026-07-28). The rules mirror the Xano backend's decode checks (icons, tool annotations,
+// resource annotations) so the editor reports what a push would refuse.
 
 export const ICON_MIME_TYPES = ["image/png", "image/jpeg", "image/webp"];
 export const ICON_URL_MAX_LENGTH = 2048;
@@ -19,7 +17,7 @@ export const RESOURCE_AUDIENCES = ["user", "assistant"];
 
 const ICON_SCHEMA = {
   src: "[string]",
-  // validated below: cloud-client compares it lowercased and allows ""
+  // validated below: the backend compares it lowercased and allows ""
   "mime_type?": "[string]",
   "sizes?": ["[string]"],
   "theme?": ["light", "dark"],
@@ -47,7 +45,7 @@ function stringValue(token) {
 }
 
 /**
- * Why an icon `src` is refused, or null. Same rules as ToolMetadata::srcProblem:
+ * Why an icon `src` is refused, or null. Same rules as the platform:
  * `https:` or a base64 `data:` URI of png/jpeg/webp. SVG and every other scheme
  * (`http:`, `javascript:`, `file:`, ...) are refused.
  * @param {string} src
@@ -105,8 +103,14 @@ export function mcpTitleClause($) {
     $.sectionStack.push("mcpTitleClause");
     $.CONSUME(TitleToken); // "title"
     $.CONSUME(EqualToken); // "="
-    const value = $.CONSUME(StringLiteral); // "..."
-    if (value.image === `""`) {
+    // The platform writes a title holding a double quote as '...' and one
+    // holding a newline as a """ block.
+    const value = $.OR([
+      { ALT: () => $.CONSUME(StringLiteral) }, // "..."
+      { ALT: () => $.CONSUME(SingleQuotedStringLiteral) }, // '...'
+      { ALT: () => $.CONSUME(MultiLineStringToken) }, // """..."""
+    ]);
+    if (stringValue(value) === "") {
       $.addMissingError(value, "title cannot be empty");
     }
     $.sectionStack.pop();

package/parser/clauses/nakedStackFn.js

@@ -71,6 +71,10 @@ export function nakedStackFn($) {
                 GATE: () => options.allowCallStatements,
                 ALT: () => $.SUBRULE($.triggerCallFn),
               },
+              {
+                GATE: () => options.allowCallStatements,
+                ALT: () => $.SUBRULE($.workflowTestCallFn),
+              },
               { ALT: () => $.SUBRULE($.workflowExpectFn) },
             ]);
             // write-before-elicit lint (see functions/mcp/elicitLint.js)

package/parser/clauses/viewClause.js

@@ -22,10 +22,13 @@ export function viewClause($) {
       ARGS: [
         parent,
         {
+          // The platform writes each of alias/term/search/sort/hide only
+          // when the view has it.
           "[string]": {
+            "term?": "[string]",
             "search?": "[query]",
             "hide?": ["[string]"],
-            sort: { "[string]": ["asc", "desc", "rand"] },
+            "sort?": { "[string]": ["asc", "desc", "rand"] },
             id: "[string]",
             "alias?": "[string]",
           },
@@ -34,14 +37,15 @@ export function viewClause($) {
       ],
     });
 
-    // each key is the view name, ensure either search or hide is present
+    // each key is the view name, ensure it has some criteria
     for (const viewName in captured) {
+      const hasTerm = !!captured[viewName].term;
       const hasSearch = !!captured[viewName].search;
       const hasSort = !!captured[viewName].sort;
-      if (!hasSearch && !hasSort && !captured[viewName].hide) {
+      if (!hasTerm && !hasSearch && !hasSort && !captured[viewName].hide) {
         $.addMissingError(
           parent,
-          `view ${viewName} must have either a search, sort or hide criteria`,
+          `view ${viewName} must have either a term, search, sort or hide criteria`,
         );
       }
     }

package/parser/definitions/columnDefinition.js

@@ -24,6 +24,7 @@ import {
 } from "../../lexer/columns.js";
 import { Question } from "../../lexer/control.js";
 import { Identifier } from "../../lexer/identifier.js";
+import { StringLiteral } from "../../lexer/literal.js";
 import { getVarName } from "../generic/utils.js";
 
 const DEFAULT_CONFIG = {
@@ -87,7 +88,11 @@ export function columnDefinition($) {
     });
 
     // Column name (e.g., "user_id", "optional_column", "required_column")
-    const nameToken = $.CONSUME(Identifier);
+    // A name that is not an identifier (e.g. `created-at`) is written quoted.
+    const nameToken = $.OR9([
+      { ALT: () => $.CONSUME(Identifier) },
+      { ALT: () => $.CONSUME(StringLiteral) },
+    ]);
 
     // ? (is it an optional field)
     $.OPTION6(() => {
@@ -147,7 +152,7 @@ export function columnDefinition($) {
 
     // add the variable to the registry
     $.addInput(
-      nameToken.image,
+      getVarName(nameToken),
       inputTypeToken.image,
       iterable,
       nullable,

package/parser/definitions/enumColumnDefinition.js

@@ -1,6 +1,7 @@
 import { EnumToken } from "../../lexer/columns.js";
 import { Question } from "../../lexer/control.js";
 import { Identifier } from "../../lexer/identifier.js";
+import { StringLiteral } from "../../lexer/literal.js";
 import { getVarName } from "../generic/utils.js";
 
 /**
@@ -30,7 +31,11 @@ export function enumColumnDefinition($) {
     }); // ? (optional field)
 
     // Column name (e.g., "user_id", "optional_column", "required_column")
-    const name = $.CONSUME(Identifier);
+    // A name that is not an identifier (e.g. `created-at`) is written quoted.
+    const name = $.OR9([
+      { ALT: () => $.CONSUME(Identifier) },
+      { ALT: () => $.CONSUME(StringLiteral) },
+    ]);
 
     // add variable to schema
     schema[getVarName(name)] = {
@@ -49,7 +54,7 @@ export function enumColumnDefinition($) {
     $.SUBRULE($.enumColumnMetadataDefinition, { ARGS: [parent] }); // Enum metadata
 
     // add the variable to the registry
-    $.addInput(name.image, "enum", iterable, nullable, optional);
+    $.addInput(getVarName(name), "enum", iterable, nullable, optional);
 
     $.sectionStack.pop();
   };

package/parser/definitions/objectColumnDefinition.js

@@ -1,5 +1,6 @@
 import { ObjectToken } from "../../lexer/columns.js";
 import { Question } from "../../lexer/control.js";
+import { StringLiteral } from "../../lexer/literal.js";
 import { Identifier } from "../../lexer/tokens.js";
 import { getVarName } from "../generic/utils.js";
 
@@ -35,7 +36,11 @@ export function objectColumnDefinition($) {
     });
 
     // Column name (e.g., "user_id", "optional_column", "required_column")
-    const name = $.CONSUME(Identifier);
+    // A name that is not an identifier (e.g. `created-at`) is written quoted.
+    const name = $.OR9([
+      { ALT: () => $.CONSUME(Identifier) },
+      { ALT: () => $.CONSUME(StringLiteral) },
+    ]);
 
     // add variable to schema
     schema[getVarName(name)] = {
@@ -52,7 +57,7 @@ export function objectColumnDefinition($) {
 
     $.SUBRULE($.objectColumnMetadataDefinition); // Object metadata
 
-    $.addInput(name.image, "enum", iterable, nullable, optional);
+    $.addInput(getVarName(name), "enum", iterable, nullable, optional);
 
     $.sectionStack.pop();
   };

package/parser/error_trigger_parser.js

@@ -1,10 +1,12 @@
-import { LCurly, RCurly } from "../lexer/control.js";
+import { EqualToken, LCurly, RCurly } from "../lexer/control.js";
 import { ErrorTriggerToken } from "../lexer/error_trigger.js";
 import { StringLiteral } from "../lexer/literal.js";
+import { ActiveToken } from "../lexer/mcp_server_trigger.js";
 import { Identifier, NewlineToken } from "../lexer/tokens.js";
 
 export function errorTriggerDeclaration($) {
   return () => {
+    let hasActive = false;
     let hasDescription = false;
     let hasGuid = false;
     let hasHistory = false;
@@ -27,6 +29,16 @@ export function errorTriggerDeclaration($) {
       $.AT_LEAST_ONE(() => $.CONSUME(NewlineToken)); // at least one new line
       $.OR2([
         { ALT: () => $.SUBRULE($.commentBlockFn) },
+        {
+          // the platform writes `active = false` for a paused trigger
+          GATE: () => !hasActive,
+          ALT: () => {
+            hasActive = true;
+            $.CONSUME(ActiveToken);
+            $.CONSUME(EqualToken);
+            $.SUBRULE($.booleanValue);
+          },
+        },
         {
           GATE: () => !hasDescription,
           ALT: () => {

package/parser/functions/controls/switchCaseFn.js

@@ -1,3 +1,4 @@
+import { ExclamationToken } from "../../../lexer/cast.js";
 import {
   BreakToken,
   CaseToken,
@@ -12,6 +13,8 @@ export function switchCaseFn($) {
   return () => {
     $.sectionStack.push("switchCaseFn");
     $.SUBRULE($.optionalCommentBlockFn);
+    // a disabled case is written `!case`, like a disabled statement
+    $.OPTION2(() => $.CONSUME(ExclamationToken));
     $.CONSUME(CaseToken); // "case"
     $.CONSUME(LParent); // "("
     $.SUBRULE($.expressionFn);

package/parser/functions/controls/throwFn.js

@@ -1,4 +1,25 @@
 import { ThrowToken } from "../../../lexer/control.js";
+import { IntegerLiteral } from "../../../lexer/literal.js";
+
+/**
+ * `status` is the HTTP status an UNCAUGHT throw answers with
+ * (mvp:throw_error, `status?: static:int`).
+ * It is a static integer from 100 to 599, never an expression, so a variable
+ * or an out-of-range number is caught in the editor rather than at run time.
+ * @param {import('../../base_parser.js').XanoBaseParser} $
+ */
+function statusValue($) {
+  const token = $.CONSUME(IntegerLiteral, {
+    ERR_MSG: "status must be a whole number from 100 to 599",
+  });
+  const value = Number(token.image);
+  if (!Number.isInteger(value) || value < 100 || value > 599) {
+    $.addInvalidValueError(
+      token,
+      `Invalid status ${token.image}. Must be a whole number from 100 to 599`,
+    );
+  }
+}
 
 /**
  * represent $var.x or $x, the only format accepting an assigment
@@ -6,14 +27,19 @@ import { ThrowToken } from "../../../lexer/control.js";
  */
 export function throwFn($) {
   const requiredAttrs = ["value", "name"];
-  const optionalAttrs = ["description", "disabled"];
+  const optionalAttrs = ["description", "disabled", "status"];
 
   return () => {
     $.sectionStack.push("throw");
     const tokenFn = $.CONSUME(ThrowToken); // "throw"
     // value is a required field
     $.SUBRULE($.functionAttrReq, {
-      ARGS: [tokenFn, requiredAttrs, optionalAttrs],
+      ARGS: [
+        tokenFn,
+        requiredAttrs,
+        optionalAttrs,
+        { types: { status: statusValue } },
+      ],
     });
 
     $.sectionStack.pop();

package/parser/functions/db/dbAddFn.js

@@ -24,7 +24,8 @@ export function dbAddFn($) {
       ARGS: [
         fnToken,
         {
-          data: { "[string]": "[expression]" },
+          // The platform writes `data = {}` when no field is set.
+          data: { "[string]?": "[expression]" },
           "description?": "[string]",
           "disabled?": "[boolean]",
           "enforce_hidden_fields?": "[boolean]",

package/parser/functions/db/dbAddOrEditFn.js

@@ -28,7 +28,8 @@ export function dbAddOrEditFn($) {
         {
           field_name: "[expression]",
           field_value: "[expression]",
-          data: { "[string]": "[expression]" },
+          // The platform writes `data = {}` when no field is set.
+          data: { "[string]?": "[expression]" },
           "description?": "[string]",
           "disabled?": "[boolean]",
           "enforce_hidden_fields?": "[boolean]",

package/parser/functions/db/dbEditFn.js

@@ -28,7 +28,8 @@ export function dbEditFn($) {
         {
           field_name: "[expression]",
           field_value: "[expression]",
-          data: { "[string]": "[expression]" },
+          // The platform writes `data = {}` when no field is set.
+          data: { "[string]?": "[expression]" },
           "description?": "[string]",
           "disabled?": "[boolean]",
           "enforce_hidden_fields?": "[boolean]",

package/parser/functions/db/dbExternalFn.js

@@ -4,6 +4,7 @@ import {
   MysqlToken,
   OracleToken,
   PostgresToken,
+  SnowflakeToken,
 } from "../../../lexer/db.js";
 import { DotToken } from "../../../lexer/tokens.js";
 
@@ -20,6 +21,7 @@ export function dbExternalFn($) {
       { ALT: () => $.CONSUME(MysqlToken) }, // "external.mysql"
       { ALT: () => $.CONSUME(OracleToken) }, // "external.oracle"
       { ALT: () => $.CONSUME(PostgresToken) }, // "external.postgres"
+      { ALT: () => $.CONSUME(SnowflakeToken) }, // "external.snowflake"
     ]);
     $.CONSUME1(DotToken); // "."
     $.SUBRULE($.dbExternalDirectQueryFn); // "external.direct_query"

package/parser/functions/mcp/mcpElicitFn.js

@@ -13,7 +13,7 @@ import { checkElicit } from "./elicitLint.js";
 //   }
 // } as $answer
 //
-// Asks the MCP client for input (cloud-client mvp:mcp_elicit). Input is only
+// Asks the MCP client for input. Input is only
 // collected from 2026-07-28 clients with form elicitation; every other client
 // (and a non-MCP run) resolves to {action: "cancel"}. The `input` block is the
 // same grammar as a tool's `input` block.

package/parser/functions/mcp/mcpOauthFn.js

@@ -5,7 +5,7 @@ import { CompleteToken, OauthToken, RevokeToken } from "../../../lexer/mcp.js";
 import { DotToken, NewlineToken } from "../../../lexer/tokens.js";
 import { getVarName } from "../../generic/utils.js";
 
-// The values cloud-client's mvp:mcp_oauth_complete accepts for `decision`.
+// The values `mcp.oauth.complete` accepts for `decision`.
 const DECISIONS = ["approve", "deny"];
 
 /**
@@ -35,9 +35,7 @@ function decisionValue($, identifier) {
   $.SUBRULE5($.expressionFn, { ARGS: [identifier, {}] });
 }
 
-// The `mcp.oauth.*` login hand-off statements (cloud-client
-// mvp:mcp_oauth_{complete,request,revoke}, kind schemas
-// statement/mcp.oauth.{complete,request,revoke}.yaml). Each takes an optional
+// The `mcp.oauth.*` login hand-off statements. Each takes an optional
 // `as $var` binding.
 
 /**

package/parser/functions/mcp/mcpProgressFn.js

@@ -6,8 +6,8 @@ import { ProgressToken } from "../../../lexer/mcp.js";
 //   message = "Working"  // optional
 // }
 //
-// Emits `notifications/progress` on the current MCP response stream
-// (cloud-client mvp:mcp_progress). A value that does not strictly increase is
+// Emits `notifications/progress` on the current MCP response stream.
+// A value that does not strictly increase is
 // dropped at run time. NO `as $var` binding.
 
 /**

package/parser/functions/realtime/realtimeKickFn.js

@@ -0,0 +1,35 @@
+import { KickToken } from "../../../lexer/realtime.js";
+
+// realtime.kick {
+//   realtime_server = "main"
+//   channel = "rooms/42"
+//   auth_table = "user"       // the identity to remove
+//   auth_id = $input.user_id
+//   reason = "removed"        // optional — sent to the removed connections
+// }
+//
+// Takes one identity's sockets out of one realtime v2 channel
+// (mvp:realtime_kick). A channel's join
+// gate runs once, so this is the step that removes a member whose access was
+// revoked. Each of their sockets leaves the channel and is told it was kicked;
+// it stays connected to its other channels.
+// The identity is required (a kick names who to remove), so auth_table and
+// auth_id are required here, though the kind schema lists them optional the way
+// realtime.publish does. Like realtime.publish it has NO `as $var` binding.
+
+/**
+ * @param {import('../../base_parser.js').XanoBaseParser} $
+ */
+export function realtimeKickFn($) {
+  const requiredAttrs = ["realtime_server", "channel", "auth_table", "auth_id"];
+  const optionalAttrs = ["reason", "description", "disabled"];
+
+  return () => {
+    $.sectionStack.push("realtimeKickFn");
+    const fnToken = $.CONSUME(KickToken); // "kick"
+    $.SUBRULE($.functionAttrReq, {
+      ARGS: [fnToken, requiredAttrs, optionalAttrs],
+    });
+    $.sectionStack.pop();
+  };
+}

package/parser/functions/realtime/realtimePublishFn.js

@@ -9,8 +9,8 @@ import { PublishToken } from "../../../lexer/realtime.js";
 //   auth_id = $auth.id        // optional
 // }
 //
-// Injects a server-authored event onto a realtime v2 channel (cloud-client
-// mvp:realtime_publish). `realtime_server` + `channel` + `data` are required;
+// Injects a server-authored event onto a realtime v2 channel.
+// `realtime_server` + `channel` + `data` are required;
 // `message`/`auth_table`/`auth_id` are optional. Flat attrs (the PHP transform
 // maps auth_table/auth_id into the nested context.auth.{dbo_id,row_id} shape).
 // Unlike realtime.get_session it has NO `as $var` binding.

package/parser/functions/realtime/register.js

@@ -1,4 +1,5 @@
 import { realtimeGetSessionFn } from "./realtimeGetSessionFn.js";
+import { realtimeKickFn } from "./realtimeKickFn.js";
 import { realtimePublishFn } from "./realtimePublishFn.js";
 
 /**
@@ -11,4 +12,5 @@ export const register = ($) => {
     realtimeGetSessionFn($),
   );
   $.realtimePublishFn = $.RULE("realtimePublishFn", realtimePublishFn($));
+  $.realtimeKickFn = $.RULE("realtimeKickFn", realtimeKickFn($));
 };

package/parser/functions/realtimeFn.js

@@ -13,6 +13,7 @@ export function realtimeFn($) {
     $.OR([
       { ALT: () => $.SUBRULE($.realtimeGetSessionFn) }, // "realtime.get_session"
       { ALT: () => $.SUBRULE($.realtimePublishFn) }, // "realtime.publish"
+      { ALT: () => $.SUBRULE($.realtimeKickFn) }, // "realtime.kick"
     ]);
     $.sectionStack.pop();
   };

package/parser/functions/register.js

@@ -45,6 +45,7 @@ import { utilFn } from "./utilFn.js";
 import { varFn } from "./varFn.js";
 import { webflowFn } from "./webflowFn.js";
 import { workflowExpectFn } from "./workflowExpectFn.js";
+import { workflowTestCallFn } from "./workflowTestCallFn.js";
 import { register as register_zip } from "./zip/register.js";
 import { zipFn } from "./zipFn.js";
 
@@ -81,6 +82,7 @@ export const register = ($) => {
   $.workflowExpectFn = $.RULE("workflowExpectFn", workflowExpectFn($));
   $.toolCallFn = $.RULE("toolCallFn", toolCallFn($));
   $.triggerCallFn = $.RULE("triggerCallFn", triggerCallFn($));
+  $.workflowTestCallFn = $.RULE("workflowTestCallFn", workflowTestCallFn($));
   register_ai($);
   register_schema($);
   register_api($);

package/parser/functions/storage/storageCreateImageFn.js

@@ -13,7 +13,9 @@ export function storageCreateImageFn($) {
         {
           value: "[expression]",
           access: ["public", "private"],
-          filename: "[expression]",
+          // Optional, as on create_audio/create_video: the platform omits it
+          // when unset.
+          "filename?": "[expression]",
           "description?": "[string]",
           "disabled?": "[boolean]",
         },

package/parser/functions/workflowTestCallFn.js

@@ -0,0 +1,47 @@
+import { CallToken } from "../../lexer/function.js";
+import { StringLiteral } from "../../lexer/literal.js";
+import { DotToken, Identifier } from "../../lexer/tokens.js";
+import { WorkflowTestToken } from "../../lexer/workflow_test.js";
+
+/**
+ * workflow_test.call "other test" { datasource = "test" } as $result
+ *
+ * Runs another workflow test as a step. The platform resolves the target
+ * only inside a workflow test.
+ * @param {import('../base_parser.js').XanoBaseParser} $
+ */
+export function workflowTestCallFn($) {
+  return () => {
+    $.sectionStack.push("workflowTestCallFn");
+
+    $.CONSUME(WorkflowTestToken); // "workflow_test"
+    $.CONSUME(DotToken); // "."
+    const fnToken = $.CONSUME(CallToken); // "call"
+
+    if (!$.sectionStack.includes("workflowTestDeclaration")) {
+      $.addInvalidValueError(
+        fnToken,
+        "workflow_test.call can only be used within workflow_test contexts",
+      );
+    }
+
+    $.OR([
+      { ALT: () => $.CONSUME(StringLiteral) }, // "other test"
+      { ALT: () => $.CONSUME(Identifier) }, // other_test
+    ]);
+
+    $.SUBRULE($.schemaParseAttributeFn, {
+      ARGS: [
+        fnToken,
+        {
+          "datasource?": "[string]",
+          "description?": "[string]",
+          "disabled?": "[boolean]",
+          "mock?": { "![string]": "[expression]" },
+        },
+      ],
+    });
+    $.SUBRULE($.asVariable, { ARGS: [fnToken] });
+    $.sectionStack.pop();
+  };
+}

package/parser/generic/stringArray.js

@@ -1,5 +1,8 @@
 import { CommaToken, LSquare, RSquare } from "../../lexer/control.js";
-import { StringLiteral } from "../../lexer/literal.js";
+import {
+  SingleQuotedStringLiteral,
+  StringLiteral,
+} from "../../lexer/literal.js";
 import { NewlineToken } from "../../lexer/tokens.js";
 
 /**
@@ -18,7 +21,11 @@ export const stringArray = ($) => () => {
         "Missing comma or newline between string values in the array"
       );
     }
-    token = $.CONSUME(StringLiteral);
+    // '...' is how the platform writes a value holding a double quote
+    token = $.OR([
+      { ALT: () => $.CONSUME(StringLiteral) },
+      { ALT: () => $.CONSUME(SingleQuotedStringLiteral) },
+    ]);
     hasSeparator = false;
     $.OPTION(() => {
       $.CONSUME(CommaToken);

package/parser/mcp_primitive_parser.js

@@ -11,7 +11,7 @@ import { getVarName } from "./generic/utils.js";
 
 // First-class MCP `prompt` and `resource` workspace objects (MCP 2026-07-28),
 // attached to an `mcp_server` through its `prompts` / `resources` blocks.
-// Grounded against cloud-client's `script/kind/schema/core/{prompt,resource}.yaml`.
+// Grounded against the Xano backend's XanoScript schema.
 //
 //   prompt code_review {                 resource regional_order {
 //     title = "Code review"                uri = "orders://{region}/{order_id}"
@@ -22,7 +22,7 @@ import { getVarName } from "./generic/utils.js";
 //   }                                      response = $order
 //                                        }
 
-/** The input field types a resource uri variable can be bound to (ResourceUri::VARIABLE_TYPES). */
+/** The input field types a resource uri variable can be bound to. */
 export const RESOURCE_URI_VARIABLE_TYPES = [
   "text",
   "int",
@@ -39,7 +39,7 @@ const MIME_TYPE =
 
 /**
  * Parse a resource uri: a literal URI, or an RFC 6570 LEVEL-1 template.
- * Mirrors cloud-client's `ResourceUri::parse`.
+ * Mirrors the backend's resource URI parser.
  * @param {string} uri
  * @returns {{ problem: string|null, variables: string[] }}
  */
@@ -103,7 +103,7 @@ export function parseResourceUri(uri) {
 
 /**
  * Why a resource's uri variables and its input block disagree, or null.
- * Mirrors cloud-client's `ResourceUri::inputProblem`.
+ * Mirrors the backend's check that URI variables match `input`.
  * @param {string[]} variables
  * @param {Object<string, {type: string, iterable: boolean}>} inputs
  * @returns {string|null}

package/parser/mcp_server_parser.js

@@ -98,8 +98,7 @@ export function mcpServerDeclaration($) {
           },
         },
         {
-          // Per-server OAuth (cloud-client mcp_server.yaml `oauth`; values are
-          // validated server-side by helper/mvp/mcpoauth/OauthConfig.php).
+          // Per-server OAuth (values are validated server-side).
           // An assignment block like a channel's `publish`. mcp_server ONLY:
           // deliberately absent from agent_parser.js. Mode-specific rules
           // (hosted needs login_url, external needs issuer, ...) stay

package/parser/mcp_server_trigger_parser.js

@@ -49,7 +49,9 @@ export function mcpServerTriggerDeclaration($) {
               ARGS: [
                 subParent,
                 {
-                  connection: "[boolean]",
+                  // Only the actions that are on are written, so a trigger
+                  // with connection off is written as `actions = {}`.
+                  "connection?": "[boolean]",
                 },
               ],
             });

package/parser/message_parser.js

@@ -82,8 +82,8 @@ export function messageDeclaration($) {
           },
         },
         {
-          // backend Message.php `encode()` emits `docs = "..."` for a
-          // documented message; round-tripped by `decode()`. See DEV-7620.
+          // the backend emits `docs = "..."` for a
+          // documented message; round-tripped on push.
           GATE: () => !hasDocs,
           ALT: () => {
             hasDocs = true;
@@ -91,7 +91,7 @@ export function messageDeclaration($) {
           },
         },
         {
-          // backend Message.php `encode()` emits `active = false` for a
+          // the backend emits `active = false` for a
           // disabled message; mirrors the sibling `channel` declaration.
           GATE: () => !hasActive,
           ALT: () => {

package/parser/microservice_parser.js

@@ -25,8 +25,7 @@ import { Identifier, NewlineToken, TypeToken } from "../lexer/tokens.js";
 
 // Grammar for the top-level `microservice <name> { ... }` entity.
 //
-// Grounded against cloud-client's authoritative XanoScript schema DSL
-// (extensions/MVP/includes/xano/script/kind/schema/{core,component}/*.yaml):
+// Grounded against the Xano backend's XanoScript schema:
 //
 //   microservice <name> {
 //     description|guid|kind|tenant_deploy = "..."   # static:text (optional)

package/parser/parser.js

@@ -80,7 +80,7 @@ export function xanoscriptParser(text, scheme, preTokenized = null) {
       }
       for (const error of lexResult.errors) {
         // The platform names the first character it cannot read; the lexer skips a run of them.
-        // Quoted as PHP's escapeshellarg quotes it (Unexpected.php): a `'` is written `'\''`.
+        // Quoted as PHP's escapeshellarg quotes it: a `'` is written `'\''`.
         const first = String.fromCodePoint(text.codePointAt(error.offset)).replaceAll("'", "'\\''");
         parser.addInvalidValueError({
           image: text.slice(error.offset, error.offset + error.length),