@xanots/sdk 0.0.1 → 0.0.2

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { e1 as Condition, e2 as FilterResults, e3 as ElementResult, e4 as SameArrayResult, e5 as GroupedArrayResult, e6 as AgentResultOf, aZ as AddonDef, e7 as OutputPath, cO as TableDef, e8 as QualifiedCol, br as DbEval, cN as SortDirective, bt as DbWhere, e9 as OutputRoot, bG as InferRow, ea as AggregateRow, eb as EvalFields, ec as OutputAuthored, c0 as MicroserviceDef, ae as generated, F as FunctionDef, cd as QueryHandle } from './store-BQ97nKIF.js';
-export { a_ as AddonXdo, A as AdoptChange, a as AdoptResult, a$ as AgentDef, b0 as AgentHandle, b1 as AgentOutput, b2 as AgentSettingsXdo, b3 as AgentXdo, b4 as AmbientBindings, b5 as AnthropicLlm, b6 as ApiGroupDef, b7 as ApiGroupXdo, b8 as AuthRef, b9 as Authored, B as Bundle, b as BundlePayload, c as BundleType, ba as Capturable, aW as CaptureRecord, aU as CaptureValue, bb as ChannelConversationDef, bc as ChannelDeliveryDef, bd as ChannelDeliveryGuarantee, be as ChannelPublishDef, bf as ChannelPublishWho, bg as ChannelRateLimitDef, bh as ColumnDef, bi as Comparison, bj as ContainerEnv, bk as ContainerPort, bl as ContainerResources, bm as ContainerVolume, bn as CorsConfig, bo as CorsMode, bp as DatabaseActions, bq as DatabaseInputs, bs as DbEvalFilter, bu as ErrorInputs, bv as ExceptionPolicy, bw as FieldAccessor, bx as FieldRule, by as GoogleGenAiLlm, bz as HistoryInput, bA as HttpVerb, bB as IndexDef, bC as IndexLang, bD as IndexOp, bE as IndexType, bF as IndexXdo, bH as InputDescriptor, bI as InputOptions, bJ as IteratingBindings, bK as LAMBDA_BINDINGS, bL as LAMBDA_CODE_FILTERS, bM as LAMBDA_GLOBALS, bN as LAMBDA_MODULE_GLOBALS, bO as LAMBDA_STATEMENTS, aX as LambdaBindings, bP as LambdaBody, aT as LambdaOptions, aV as LambdaSurface, bQ as LlmPrompt, bR as LlmProvider, bS as LlmSettings, f as LockEntry, g as LockExportContext, h as LockFile, M as Manifest, i as ManifestField, j as ManifestKind, k as ManifestStatement, bT as ManifestValue, bU as McpPathOptions, bV as McpServerDef, bW as McpServerHandle, bX as McpServerXdo, l as MergeResult, bY as MessageDeliverTo, bZ as MicroserviceChart, b_ as MicroserviceConfig, b$ as MicroserviceContainer, c1 as MicroserviceDeployment, c2 as MicroserviceIngress, c3 as MicroserviceRegistryAuth, c4 as MicroserviceVolume, c5 as MicroserviceXdo, c6 as MiddlewareAttach, c7 as MiddlewareAttachEntry, c8 as MiddlewareDef, c9 as MiddlewareXdo, O as ObjectKind, ca as OpenAiLlm, m as PayloadArrayKey, cb as QueryDef, cc as QueryFilterName, ce as QueryResponseType, cf as QueryXdo, cg as RealtimeActions, ch as RealtimeChannelActions, ci as RealtimeChannelDef, cj as RealtimeChannelHandle, ck as RealtimeChannelRef, cl as RealtimeChannelTriggerInputs, cm as RealtimeChannelXdo, cn as RealtimeClient, co as RealtimeInputs, cp as RealtimeMessageDef, cq as RealtimeMessageXdo, cr as RealtimeServerActions, cs as RealtimeServerDef, ct as RealtimeServerHandle, cu as RealtimeServerRef, cv as RealtimeServerTriggerInputs, cw as RealtimeServerXdo, cx as RealtimeUrlOptions, R as RenameResult, cy as ResultStrategy, cz as Route, cA as RowOf, cB as ScheduleDef, cC as SchemaCols, cD as SchemaDef, cE as SearchComparison, cF as SearchGroup, cG as SearchNode, cH as SearchOp, cI as SearchParamValue, cJ as SeedFileSource, cK as SeedRow, cL as SeedSource, cM as SortDir, S as StatementSpec, cP as TableXdo, cQ as TaskDef, cR as TaskXdo, cS as ToolDef, cT as ToolXdo, cU as ToolsetBaseDef, cV as ToolsetBaseXdo, cW as ToolsetInputs, cX as ToolsetToolEntry, cY as ToolsetToolRef, cZ as TriggerDef, c_ as TriggerObjType, c$ as TriggerXdo, d0 as ViewDef, d1 as ViewXdo, d2 as WorkflowTestDef, d3 as WorkflowTestXdo, d4 as WorkspaceActions, d5 as WorkspaceConfigDef, d6 as WorkspaceConfigXdo, d7 as WorkspaceHistoryDef, d8 as WorkspaceHistoryXdo, d9 as WorkspaceInputs, da as WorkspaceMiddlewareDef, db as WorkspaceMiddlewareXdo, aY as Xano, dc as XanoFreeLlm, dd as addon, de as agent, df as agentTrigger, dg as and, dh as apiGroup, di as assertLambdaBody, dj as bitwiseAnd, dk as bitwiseOr, dl as bitwiseXor, dm as cmp, dn as defineFunction, dp as emit, dq as emitBundle, dr as errorTrigger, ds as expr, dt as fl, du as input, ed as lam, dv as mathAdd, dw as mathDiv, dx as mathMul, dy as mathSub, dz as mcpServer, dA as mcpServerTrigger, dB as microservice, dC as middleware, dD as mixed, dE as objectEntries, dF as objectKeys, dG as objectValues, dH as or, dI as query, dJ as realtimeChannel, dK as realtimeChannelTrigger, dL as realtimeMessage, dM as realtimeServer, dN as realtimeServerTrigger, dO as realtimeTrigger, dP as resetLockOverrides, dQ as seedFile, dR as seedLockOverrides, dS as table, dT as tableTrigger, dU as task, dV as textAppend, dW as textPrepend, dX as toSearchParams, dY as tool, dZ as workflowTest, d_ as workspace, d$ as workspaceConfig, e0 as workspaceTrigger } from './store-BQ97nKIF.js';
+import { e1 as Condition, e2 as FilterResults, e3 as ElementResult, e4 as SameArrayResult, e5 as GroupedArrayResult, e6 as AgentResultOf, aZ as AddonDef, e7 as OutputPath, cO as TableDef, e8 as QualifiedCol, br as DbEval, cN as SortDirective, bt as DbWhere, e9 as OutputRoot, bG as InferRow, ea as AggregateRow, eb as EvalFields, ec as OutputAuthored, c0 as MicroserviceDef, ae as generated, F as FunctionDef, cd as QueryHandle } from './store-g45zwB33.js';
+export { a_ as AddonXdo, A as AdoptChange, a as AdoptResult, a$ as AgentDef, b0 as AgentHandle, b1 as AgentOutput, b2 as AgentSettingsXdo, b3 as AgentXdo, b4 as AmbientBindings, b5 as AnthropicLlm, b6 as ApiGroupDef, b7 as ApiGroupXdo, b8 as AuthRef, b9 as Authored, B as Bundle, b as BundlePayload, c as BundleType, ba as Capturable, aW as CaptureRecord, aU as CaptureValue, bb as ChannelConversationDef, bc as ChannelDeliveryDef, bd as ChannelDeliveryGuarantee, be as ChannelPublishDef, bf as ChannelPublishWho, bg as ChannelRateLimitDef, bh as ColumnDef, bi as Comparison, bj as ContainerEnv, bk as ContainerPort, bl as ContainerResources, bm as ContainerVolume, bn as CorsConfig, bo as CorsMode, bp as DatabaseActions, bq as DatabaseInputs, bs as DbEvalFilter, bu as ErrorInputs, bv as ExceptionPolicy, bw as FieldAccessor, bx as FieldRule, by as GoogleGenAiLlm, bz as HistoryInput, bA as HttpVerb, bB as IndexDef, bC as IndexLang, bD as IndexOp, bE as IndexType, bF as IndexXdo, bH as InputDescriptor, bI as InputOptions, bJ as IteratingBindings, bK as LAMBDA_BINDINGS, bL as LAMBDA_CODE_FILTERS, bM as LAMBDA_GLOBALS, bN as LAMBDA_MODULE_GLOBALS, bO as LAMBDA_STATEMENTS, aX as LambdaBindings, bP as LambdaBody, aT as LambdaOptions, aV as LambdaSurface, bQ as LlmPrompt, bR as LlmProvider, bS as LlmSettings, f as LockEntry, g as LockExportContext, h as LockFile, M as Manifest, i as ManifestField, j as ManifestKind, k as ManifestStatement, bT as ManifestValue, bU as McpPathOptions, bV as McpServerDef, bW as McpServerHandle, bX as McpServerXdo, l as MergeResult, bY as MessageDeliverTo, bZ as MicroserviceChart, b_ as MicroserviceConfig, b$ as MicroserviceContainer, c1 as MicroserviceDeployment, c2 as MicroserviceIngress, c3 as MicroserviceRegistryAuth, c4 as MicroserviceVolume, c5 as MicroserviceXdo, c6 as MiddlewareAttach, c7 as MiddlewareAttachEntry, c8 as MiddlewareDef, c9 as MiddlewareXdo, O as ObjectKind, ca as OpenAiLlm, m as PayloadArrayKey, cb as QueryDef, cc as QueryFilterName, ce as QueryResponseType, cf as QueryXdo, cg as RealtimeActions, ch as RealtimeChannelActions, ci as RealtimeChannelDef, cj as RealtimeChannelHandle, ck as RealtimeChannelRef, cl as RealtimeChannelTriggerInputs, cm as RealtimeChannelXdo, cn as RealtimeClient, co as RealtimeInputs, cp as RealtimeMessageDef, cq as RealtimeMessageXdo, cr as RealtimeServerActions, cs as RealtimeServerDef, ct as RealtimeServerHandle, cu as RealtimeServerRef, cv as RealtimeServerTriggerInputs, cw as RealtimeServerXdo, cx as RealtimeUrlOptions, R as RenameResult, cy as ResultStrategy, cz as Route, cA as RowOf, cB as ScheduleDef, cC as SchemaCols, cD as SchemaDef, cE as SearchComparison, cF as SearchGroup, cG as SearchNode, cH as SearchOp, cI as SearchParamValue, cJ as SeedFileSource, cK as SeedRow, cL as SeedSource, cM as SortDir, S as StatementSpec, cP as TableXdo, cQ as TaskDef, cR as TaskXdo, cS as ToolDef, cT as ToolXdo, cU as ToolsetBaseDef, cV as ToolsetBaseXdo, cW as ToolsetInputs, cX as ToolsetToolEntry, cY as ToolsetToolRef, cZ as TriggerDef, c_ as TriggerObjType, c$ as TriggerXdo, d0 as ViewDef, d1 as ViewXdo, d2 as WorkflowTestDef, d3 as WorkflowTestXdo, d4 as WorkspaceActions, d5 as WorkspaceConfigDef, d6 as WorkspaceConfigXdo, d7 as WorkspaceHistoryDef, d8 as WorkspaceHistoryXdo, d9 as WorkspaceInputs, da as WorkspaceMiddlewareDef, db as WorkspaceMiddlewareXdo, aY as Xano, dc as XanoFreeLlm, dd as addon, de as agent, df as agentTrigger, dg as and, dh as apiGroup, di as assertLambdaBody, dj as bitwiseAnd, dk as bitwiseOr, dl as bitwiseXor, dm as cmp, dn as defineFunction, dp as emit, dq as emitBundle, dr as errorTrigger, ds as expr, dt as fl, du as input, ed as lam, dv as mathAdd, dw as mathDiv, dx as mathMul, dy as mathSub, dz as mcpServer, dA as mcpServerTrigger, dB as microservice, dC as middleware, dD as mixed, dE as objectEntries, dF as objectKeys, dG as objectValues, dH as or, dI as query, dJ as realtimeChannel, dK as realtimeChannelTrigger, dL as realtimeMessage, dM as realtimeServer, dN as realtimeServerTrigger, dO as realtimeTrigger, dP as resetLockOverrides, dQ as seedFile, dR as seedLockOverrides, dS as table, dT as tableTrigger, dU as task, dV as textAppend, dW as textPrepend, dX as toSearchParams, dY as tool, dZ as workflowTest, d_ as workspace, d$ as workspaceConfig, e0 as workspaceTrigger } from './store-g45zwB33.js';
 import { a2 as StatementAnnotations, a1 as Statement, y as FromFieldMap, w as FilterXdo, V as Value, S as ObjValue, aH as Prettify, x as FilteredValue, X as RefValue, aM as AsShapeBrand, aj as XanoFileRef, a4 as StatementOptions, T as ObjectRef, P as ObjInput, F as FunctionXdo } from './response-CVAE2kMj.js';
 export { B as BrandOpts, c as BrandValue, C as CacheXdo, f as CaughtField, h as ConditionalContext, j as ConditionalElifContext, D as DecimalMethod, E as EmailMethod, k as ExprGroup, l as ExprNode, m as ExprOperand, n as ExprStatement, o as FieldAccess, p as FieldDescriptor, q as FieldMap, s as FieldOpts, u as FieldStyleType, v as FieldXdo, H as HistoryXdo, I as InputXdo, z as IntMethod, L as ListBoundsXdo, M as MethodArg, A as MethodOpts, G as MethodSpec, J as MethodXdo, K as MockEntry, N as MockMap, O as MockXdo, Q as ObjMember, U as PasswordMethod, W as PersistedFunctionRow, Y as RegexValue, Z as ResponseDef, _ as ResultItemXdo, $ as RowFromFieldMap, a0 as StackItemXdo, a3 as StatementInputXdo, a5 as TAGS, a6 as TEST_EXPECT_TYPES, a7 as TableRefMethod, a8 as Tag, a9 as TaggedValue, aa as TestDef, ab as TestExpect, ac as TestExpectType, ad as TestXdo, ae as TextFormat, af as TextMethod, ag as TypeBrand, ah as ValueOf, ai as VectorMethod, ak as XanoGeoPosition, al as XanoGeoValue, am as annotate, an as auth, ao as c, ap as caught, aq as col, ar as env, as as expect, at as f, au as filter, av as inp, aw as obj, ax as out, ay as ref, az as resp, aA as setting, aB as statements, aC as sys, aD as test, aE as toolset, aF as withFilters } from './response-CVAE2kMj.js';
 
@@ -977,8 +977,15 @@ declare function aiAgentRun<const As extends string = "", const A extends Object
 }): Statement & AsShapeBrand<As, ApplyFilters<AgentRunResult<R>, Fs>>;
 interface CloudJobArgs extends StatementOptions {
     as?: string;
-    image?: Value;
-    command?: Value;
+    /**
+     * Container image to run. REQUIRED — the engine validates the parameter before
+     * the job launches and answers `400 ERROR_CODE_INPUT_ERROR "Missing param:
+     * image"` without it. Measured on a live ephemeral by
+     * `scripts/probe-special-required.ts`.
+     */
+    image: Value;
+    /** Command to run in the container. REQUIRED, the same way `image` is. */
+    command: Value;
     args?: Value;
     secret?: Value;
     template?: Value;
@@ -1109,8 +1116,17 @@ declare function arrayMap(a: ArrayMapArgs): Statement;
 interface ArrayUnionArgs extends StatementOptions {
     /** The base array → stored `left`. */
     source: Value;
-    /** The array to union in → stored `right`. */
-    with?: Value;
+    /**
+     * The array to union in → stored `right`.
+     *
+     * REQUIRED. It reads as optional — a union with nothing looks like a dedupe of
+     * `source` — but the engine has no absent state for it: `right` declares
+     * `tag?=input` with an undefaulted `value`, so an omitted block resolves as an
+     * input named `""` and the request dies with
+     * `500 ERROR_FATAL "Unable to locate input: "`. Measured on a live ephemeral
+     * by `scripts/probe-special-required.ts`.
+     */
+    with: Value;
     as?: string;
     /** Optional per-item transform → stored `transform_value`. */
     transform?: Value;
@@ -2652,8 +2668,8 @@ interface ApiRequestResult {
 interface ApiRequestArgs extends HttpRequestFields, StatementAnnotations {
     /** Capture the response (`{request, response}`) into this stack variable. */
     as?: string;
-    /** Request URL. */
-    url?: string | Value;
+    /** Request URL. Required: the engine declares it with no default, and no stored request omits it. */
+    url: string | Value;
     /** Per-statement description (frontend "Settings" tab). */
     description?: string;
     /** Output-envelope shaping — result-variable filter chain / field mapping (frontend "Output" tab). */
@@ -2675,32 +2691,38 @@ interface ApiRequestArgs extends HttpRequestFields, StatementAnnotations {
  * plain JSON constant. For a body with any structure, wrap the whole thing in
  * `obj({...})`, which encodes any depth as a single `const:expr2`.
  */
-declare function apiRequest<const As extends string = "", const Fs extends readonly FilterXdo[] = readonly []>(a?: ApiRequestArgs & {
+declare function apiRequest<const As extends string = "", const Fs extends readonly FilterXdo[] = readonly []>(a: ApiRequestArgs & {
     as?: As;
     asFilters?: Fs;
 }): Statement & AsShapeBrand<As, ApplyFilters<ApiRequestResult, Fs>>;
 interface StreamFromRequestArgs extends HttpRequestFields, StatementAnnotations {
     /** Capture the streaming response into this stack variable. */
     as?: string;
-    /** Request URL. */
-    url?: string | Value;
+    /** Request URL. Required: shares `api.request`'s declaration, which has no default. */
+    url: string | Value;
 }
 /**
  * `stream.from_request` — stream an external HTTP request (`mvp:streaming_api_request`).
  * Same typed field surface as {@link apiRequest}; delegates to the generated factory.
  */
-declare function streamFromRequest(a?: StreamFromRequestArgs): Statement;
-interface WebflowRequestArgs extends HttpRequestFields, StatementAnnotations {
+declare function streamFromRequest(a: StreamFromRequestArgs): Statement;
+/**
+ * `headers` is deliberately absent. The engine builds its own header list for
+ * this statement — the API version and the connection's bearer token — and
+ * never reads an authored one, so offering the field would let an author send
+ * an auth header into a void that round-trips perfectly. See `UNREAD_INPUT`.
+ */
+interface WebflowRequestArgs extends Omit<HttpRequestFields, "headers">, StatementAnnotations {
     /** Capture the response into this stack variable. */
     as?: string;
-    /** Request path (relative to the Webflow API host). */
-    path?: string | Value;
+    /** Request path (relative to the Webflow API host). Required: the engine rejects an empty one. */
+    path: string | Value;
 }
 /**
  * `webflow.request` — call the Webflow API (`mvp:connect_webflow_api_request`).
  * Like {@link apiRequest} but addressed by `path` (the host is engine-supplied).
  */
-declare function webflowRequest<const As extends string = "", const Fs extends readonly FilterXdo[] = readonly []>(a?: WebflowRequestArgs & {
+declare function webflowRequest<const As extends string = "", const Fs extends readonly FilterXdo[] = readonly []>(a: WebflowRequestArgs & {
     as?: As;
     asFilters?: Fs;
 }): Statement & AsShapeBrand<As, ApplyFilters<ApiRequestResult, Fs>>;
@@ -3037,7 +3059,7 @@ type LambdaArgs = Parameters<typeof generated.lambda>[0] & {
  * field — when the right one is to move the body into `lam.fn`. Naming it here
  * costs nothing at runtime and puts the answer in the error.
  */
-declare function lambda(a?: LambdaArgs): Statement;
+declare function lambda(a: LambdaArgs): Statement;
 
 declare const s: {
     readonly precondition: typeof precondition;
@@ -3181,9 +3203,9 @@ declare const s: {
         };
         readonly external: {
             mcp: {
-                server_details: (a?: {
+                server_details: (a: {
                     as?: string;
-                    url?: Value;
+                    url: Value;
                     bearer_token?: Value;
                     connection_type?: "sse" | "stream" | Value;
                     disabled?: boolean;
@@ -3191,21 +3213,21 @@ declare const s: {
                     asFilters?: FilterXdo[];
                 }) => Statement;
                 tool: {
-                    list: (a?: {
+                    list: (a: {
                         as?: string;
-                        url?: Value;
+                        url: Value;
                         bearer_token?: Value;
                         connection_type?: "sse" | "stream" | Value;
                         disabled?: boolean;
                         description?: string;
                         asFilters?: FilterXdo[];
                     }) => Statement;
-                    run: (a?: {
+                    run: (a: {
                         as?: string;
-                        url?: Value;
+                        url: Value;
                         bearer_token?: Value;
                         connection_type?: "sse" | "stream" | Value;
-                        tool?: Value;
+                        tool: Value;
                         args?: Value;
                         disabled?: boolean;
                         description?: string;
@@ -3239,27 +3261,27 @@ declare const s: {
                 document: (a: {
                     as?: string;
                     auth_type?: "IAM" | "master" | Value;
-                    key_id?: Value;
-                    access_key?: Value;
-                    region?: Value;
+                    key_id: Value;
+                    access_key: Value;
+                    region: Value;
                     base_url: Value;
                     method?: "GET" | "POST" | "PUT" | "DELETE" | Value;
-                    index?: Value;
-                    doc_id?: Value;
-                    doc?: Value;
+                    index: Value;
+                    doc_id: Value;
+                    doc: Value;
                     disabled?: boolean;
                     description?: string;
                     asFilters?: FilterXdo[];
                 }) => Statement;
-                query: (a?: {
+                query: (a: {
                     as?: string;
                     auth_type?: "IAM" | "master" | Value;
-                    key_id?: Value;
-                    access_key?: Value;
-                    region?: Value;
-                    base_url?: Value;
-                    index?: Value;
-                    payload?: Value;
+                    key_id: Value;
+                    access_key: Value;
+                    region: Value;
+                    base_url: Value;
+                    index: Value;
+                    payload: Value;
                     size?: Value;
                     from?: Value;
                     included_fields?: Value;
@@ -3270,15 +3292,15 @@ declare const s: {
                     description?: string;
                     asFilters?: FilterXdo[];
                 }) => Statement;
-                request: (a?: {
+                request: (a: {
                     as?: string;
                     auth_type?: "IAM" | "master" | Value;
-                    key_id?: Value;
-                    access_key?: Value;
-                    region?: Value;
+                    key_id: Value;
+                    access_key: Value;
+                    region: Value;
                     method?: "GET" | "POST" | "PUT" | "DELETE" | "HEAD" | "OPTIONS" | "PATCH" | Value;
-                    url?: Value;
-                    query?: Value;
+                    url: Value;
+                    query: Value;
                     disabled?: boolean;
                     description?: string;
                     asFilters?: FilterXdo[];
@@ -3441,14 +3463,14 @@ declare const s: {
                 description?: string;
                 asFilters?: FilterXdo[];
             }) => Statement;
-            query: (a?: {
+            query: (a: {
                 as?: string;
                 auth_type?: "Basic" | "Bearer" | "API Key" | Value;
-                key_id?: Value;
-                access_key?: Value;
-                base_url?: Value;
-                index?: Value;
-                payload?: Value;
+                key_id: Value;
+                access_key: Value;
+                base_url: Value;
+                index: Value;
+                payload: Value;
                 size?: Value;
                 from?: Value;
                 included_fields?: Value;
@@ -3459,14 +3481,14 @@ declare const s: {
                 description?: string;
                 asFilters?: FilterXdo[];
             }) => Statement;
-            request: (a?: {
+            request: (a: {
                 as?: string;
                 auth_type?: "Basic" | "Bearer" | "API Key" | Value;
-                key_id?: Value;
-                access_key?: Value;
+                key_id: Value;
+                access_key: Value;
                 method?: "POST" | "GET" | "PUT" | "DELETE" | "PATCH" | Value;
-                url?: Value;
-                payload?: Value;
+                url: Value;
+                payload: Value;
                 disabled?: boolean;
                 description?: string;
                 asFilters?: FilterXdo[];
@@ -3759,10 +3781,10 @@ declare const s: {
     readonly security: {
         readonly create_auth_token: typeof createAuthToken;
         readonly create_guid: typeof createGuid;
-        readonly check_password: (a?: {
+        readonly check_password: (a: {
             as?: string;
-            text_password?: Value;
-            hash_password?: Value;
+            text_password: Value;
+            hash_password: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
@@ -3810,30 +3832,30 @@ declare const s: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        readonly decrypt: (a?: {
+        readonly decrypt: (a: {
             as?: string;
-            data?: Value;
+            data: Value;
             algorithm?: "aes-128-cbc" | "aes-192-cbc" | "aes-256-cbc" | "aes-128-gcm" | "aes-192-gcm" | "aes-256-gcm" | Value;
-            key?: Value;
-            iv?: Value;
+            key: Value;
+            iv: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        readonly encrypt: (a?: {
+        readonly encrypt: (a: {
             as?: string;
-            data?: Value;
+            data: Value;
             algorithm?: "aes-128-cbc" | "aes-192-cbc" | "aes-256-cbc" | "aes-128-gcm" | "aes-192-gcm" | "aes-256-gcm" | Value;
-            key?: Value;
-            iv?: Value;
+            key: Value;
+            iv: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        readonly jwe_decode: (a?: {
+        readonly jwe_decode: (a: {
             as?: string;
-            token?: Value;
-            key?: Value;
+            token: Value;
+            key: Value;
             check_claims?: Value;
             key_algorithm?: "A128KW" | "A192KW" | "A256KW" | "A128GCMKW" | "A192GCMKW" | "A256GCMKW" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW" | Value;
             content_algorithm?: "A128GCM" | "A192GCM" | "A256GCM" | "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512" | Value;
@@ -3842,11 +3864,11 @@ declare const s: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        readonly jwe_encode: (a?: {
+        readonly jwe_encode: (a: {
             as?: string;
             headers?: Value;
             claims?: Value;
-            key?: Value;
+            key: Value;
             key_algorithm?: "A128KW" | "A192KW" | "A256KW" | "A128GCMKW" | "A192GCMKW" | "A256GCMKW" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW" | Value;
             content_algorithm?: "A128GCM" | "A192GCM" | "A256GCM" | "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512" | Value;
             ttl?: Value;
@@ -3854,10 +3876,10 @@ declare const s: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        readonly jws_decode: (a?: {
+        readonly jws_decode: (a: {
             as?: string;
-            token?: Value;
-            key?: Value;
+            token: Value;
+            key: Value;
             check_claims?: Value;
             signature_algorithm?: "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512" | "HS256" | "HS384" | "HS512" | "ES256" | "ES384" | "ES512" | Value;
             timeDrift?: Value;
@@ -3865,11 +3887,11 @@ declare const s: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        readonly jws_encode: (a?: {
+        readonly jws_encode: (a: {
             as?: string;
             headers?: Value;
             claims?: Value;
-            key?: Value;
+            key: Value;
             signature_algorithm?: "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512" | "HS256" | "HS384" | "HS512" | "ES256" | "ES384" | "ES512" | Value;
             ttl?: Value;
             disabled?: boolean;
@@ -3898,12 +3920,12 @@ declare const s: {
         readonly post_process: typeof postProcess;
         readonly ip_lookup: typeof ipLookup;
         readonly set_header: typeof setHeader;
-        readonly geo_distance: (a?: {
+        readonly geo_distance: (a: {
             as?: string;
-            latitude_1?: Value;
-            longitude_1?: Value;
-            latitude_2?: Value;
-            longitude_2?: Value;
+            latitude_1: Value;
+            longitude_1: Value;
+            latitude_2: Value;
+            longitude_2: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
@@ -3928,8 +3950,8 @@ declare const s: {
         }) => Statement;
         readonly send_email: (a?: {
             as?: string;
-            service_provider?: "resend" | "xano" | Value;
             api_key?: Value;
+            service_provider?: "resend" | "xano" | Value;
             subject?: Value;
             message?: Value;
             to?: Value;
@@ -4000,8 +4022,8 @@ declare const s: {
         asFilters?: FilterXdo[];
     }) => Statement;
     readonly datadog: {
-        log: (a?: {
-            message?: Value;
+        log: (a: {
+            message: Value;
             status?: "debug" | "info" | "notice" | "warn" | "error" | "critical" | "alert" | "emergency" | Value;
             attributes?: Value;
             service?: Value;
@@ -4021,7 +4043,7 @@ declare const s: {
             description?: string;
         }) => Statement;
         metric: (a: {
-            metric?: Value;
+            metric: Value;
             value: Value;
             type?: "count" | "gauge" | "rate" | "histogram" | "distribution" | Value;
             tags?: Value;

package/dist/index.js

@@ -5,7 +5,7 @@ import {
 import {
   TEST_EXPECT_TYPES,
   expect
-} from "./chunk-MZUI3JNX.js";
+} from "./chunk-F6JCFRKO.js";
 import {
   addon,
   agent,
@@ -17,7 +17,7 @@ import {
   task,
   tool,
   workflowTest
-} from "./chunk-YDZYMZBE.js";
+} from "./chunk-TQUO2OXY.js";
 import {
   actionCall,
   actionPackageCall,
@@ -100,11 +100,11 @@ import {
   workflowTestCall,
   workspaceConfig,
   workspaceTrigger
-} from "./chunk-FJ6ZS5KB.js";
+} from "./chunk-U3G2UW65.js";
 import {
   Xano,
   workspace
-} from "./chunk-3DUAGYGP.js";
+} from "./chunk-55VHDNW5.js";
 import {
   LAMBDA_BINDINGS,
   LAMBDA_CODE_FILTERS,
@@ -145,12 +145,12 @@ import {
   toSearchParams,
   toolset,
   withFilters
-} from "./chunk-EMCAWMHC.js";
+} from "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import {
   annotate,
   statements
-} from "./chunk-LH6Z6KFV.js";
+} from "./chunk-5XZ744TS.js";
 import {
   resetLockOverrides,
   seedLockOverrides

package/dist/{init-command-R6H7ZXW5.js → init-command-4AWL6CLW.js}

@@ -2,19 +2,19 @@ import {
   projectShellFiles,
   runInitCommand,
   sanitizeAppName
-} from "./chunk-WKP4D5MO.js";
+} from "./chunk-ODNMVJ6H.js";
 import {
   resolveAiFlags
 } from "./chunk-VKFQJEMW.js";
 import "./chunk-47WDWMBJ.js";
-import "./chunk-YGPIY3WT.js";
+import "./chunk-UVLVQWWF.js";
 import "./chunk-IZW6MK3U.js";
 import "./chunk-EZG76F7R.js";
-import "./chunk-3DUAGYGP.js";
+import "./chunk-55VHDNW5.js";
 import "./chunk-YYRDLFSJ.js";
-import "./chunk-EMCAWMHC.js";
+import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
-import "./chunk-LH6Z6KFV.js";
+import "./chunk-5XZ744TS.js";
 import "./chunk-HJPTWBLH.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-4HT3BNZ7.js";
@@ -24,4 +24,4 @@ export {
   runInitCommand,
   sanitizeAppName
 };
-//# sourceMappingURL=init-command-R6H7ZXW5.js.map
+//# sourceMappingURL=init-command-4AWL6CLW.js.map

package/dist/internal.d.ts

@@ -1,7 +1,7 @@
 import { F as FunctionXdo } from './response-CVAE2kMj.js';
 export { a as FIELD_METHODS, R as REFERENCEABLE_KINDS, d as deriveGuid, e as encodeResponse, b as encodeStatement, g as getStatementFactory, i as isRegisteredStatement, r as resolveRef, t as toNestedFields } from './response-CVAE2kMj.js';
-import { S as StatementSpec, F as FunctionDef, O as ObjectKind } from './store-BQ97nKIF.js';
-export { A as AdoptChange, a as AdoptResult, B as Bundle, b as BundlePayload, c as BundleType, d as FILTER_NAMES, G as GENERATED_STATEMENT_NAMES, L as LLMS_TXT, e as LOCK_VERSION, f as LockEntry, g as LockExportContext, h as LockFile, M as Manifest, i as ManifestField, j as ManifestKind, k as ManifestStatement, l as MergeResult, P as PAYLOAD_ARRAY_KEYS, m as PayloadArrayKey, Q as QUERY_EXPRESSION_FILTERS, R as RenameResult, T as TOTAL_OBJECT_KINDS, V as VECTOR_FILTERS, W as WORKSPACE_KEY, n as addonKind, o as adoptFromBundle, p as agentKind, q as apiGroupKind, r as buildBundle, s as buildManifest, t as buildMiddlewareBlock, u as buildWorkspaceHistory, v as calcSignatureJson, w as channelPathParams, x as createLockContext, y as declaredServicePorts, z as emptyLock, C as encodeAddon, D as encodeAgent, E as encodeApiGroup, H as encodeColumn, I as encodeContainerHistory, J as encodeFromSpec, K as encodeHistory, N as encodeIndex, U as encodeMcpServer, X as encodeMicroservice, Y as encodeMiddleware, Z as encodeMiddlewareEntry, _ as encodeMiddlewareList, $ as encodeObject, a0 as encodeQuery, a1 as encodeRealtimeChannel, a2 as encodeRealtimeMessage, a3 as encodeRealtimeServer, a4 as encodeSchedule, a5 as encodeTable, a6 as encodeTask, a7 as encodeTool, a8 as encodeToolRefs, a9 as encodeToolsetBase, aa as encodeTrigger, ab as encodeView, ac as encodeWorkflowTest, ad as encodeWorkspaceConfig, ae as generatedStatements, af as getKind, ag as getLockedCanonical, ah as getLockedGuid, ai as isLockSeeded, aj as isQueryExpressionFilter, ak as isRegisteredKind, al as lockKey, am as mcpServerKind, an as mergeObserved, ao as microserviceKind, ap as middlewareKind, aq as mintCanonical, ar as parseLock, as as phpJsonEncode, at as queryKind, au as realtimeChannelGuid, av as realtimeChannelKind, aw as realtimeMessageGuid, ax as realtimeMessageKind, ay as realtimeServerKind, az as recordObserved, aA as registerKind, aB as registerSpec, aC as registeredKinds, aD as renameLockEntry, aE as renderDocs, aF as renderLlmsTxt, aG as resolveAuthRef, aH as resolvePayloadKey, aI as resolveRealtimeServerCanonical, aJ as resolveToolsetCanonical, aK as serializeBundle, aL as serializeLock, aM as tableKind, aN as taskKind, aO as toolKind, aP as triggerKind, aQ as validateLockModel, aR as workflowTestKind, aS as workspaceKind } from './store-BQ97nKIF.js';
+import { S as StatementSpec, F as FunctionDef, O as ObjectKind } from './store-g45zwB33.js';
+export { A as AdoptChange, a as AdoptResult, B as Bundle, b as BundlePayload, c as BundleType, d as FILTER_NAMES, G as GENERATED_STATEMENT_NAMES, L as LLMS_TXT, e as LOCK_VERSION, f as LockEntry, g as LockExportContext, h as LockFile, M as Manifest, i as ManifestField, j as ManifestKind, k as ManifestStatement, l as MergeResult, P as PAYLOAD_ARRAY_KEYS, m as PayloadArrayKey, Q as QUERY_EXPRESSION_FILTERS, R as RenameResult, T as TOTAL_OBJECT_KINDS, V as VECTOR_FILTERS, W as WORKSPACE_KEY, n as addonKind, o as adoptFromBundle, p as agentKind, q as apiGroupKind, r as buildBundle, s as buildManifest, t as buildMiddlewareBlock, u as buildWorkspaceHistory, v as calcSignatureJson, w as channelPathParams, x as createLockContext, y as declaredServicePorts, z as emptyLock, C as encodeAddon, D as encodeAgent, E as encodeApiGroup, H as encodeColumn, I as encodeContainerHistory, J as encodeFromSpec, K as encodeHistory, N as encodeIndex, U as encodeMcpServer, X as encodeMicroservice, Y as encodeMiddleware, Z as encodeMiddlewareEntry, _ as encodeMiddlewareList, $ as encodeObject, a0 as encodeQuery, a1 as encodeRealtimeChannel, a2 as encodeRealtimeMessage, a3 as encodeRealtimeServer, a4 as encodeSchedule, a5 as encodeTable, a6 as encodeTask, a7 as encodeTool, a8 as encodeToolRefs, a9 as encodeToolsetBase, aa as encodeTrigger, ab as encodeView, ac as encodeWorkflowTest, ad as encodeWorkspaceConfig, ae as generatedStatements, af as getKind, ag as getLockedCanonical, ah as getLockedGuid, ai as isLockSeeded, aj as isQueryExpressionFilter, ak as isRegisteredKind, al as lockKey, am as mcpServerKind, an as mergeObserved, ao as microserviceKind, ap as middlewareKind, aq as mintCanonical, ar as parseLock, as as phpJsonEncode, at as queryKind, au as realtimeChannelGuid, av as realtimeChannelKind, aw as realtimeMessageGuid, ax as realtimeMessageKind, ay as realtimeServerKind, az as recordObserved, aA as registerKind, aB as registerSpec, aC as registeredKinds, aD as renameLockEntry, aE as renderDocs, aF as renderLlmsTxt, aG as resolveAuthRef, aH as resolvePayloadKey, aI as resolveRealtimeServerCanonical, aJ as resolveToolsetCanonical, aK as serializeBundle, aL as serializeLock, aM as tableKind, aN as taskKind, aO as toolKind, aP as triggerKind, aQ as validateLockModel, aR as workflowTestKind, aS as workspaceKind } from './store-g45zwB33.js';
 
 /**
  * AUTO-GENERATED by scripts/codegen.ts — DO NOT EDIT BY HAND.

package/dist/internal.js

@@ -33,7 +33,7 @@ import {
   taskKind,
   toolKind,
   workflowTestKind
-} from "./chunk-YDZYMZBE.js";
+} from "./chunk-TQUO2OXY.js";
 import {
   GENERATED_SPECS,
   GENERATED_STATEMENT_NAMES,
@@ -55,7 +55,7 @@ import {
   registerSpec,
   triggerKind,
   workspaceKind
-} from "./chunk-FJ6ZS5KB.js";
+} from "./chunk-U3G2UW65.js";
 import {
   COMMANDS,
   FLAGS,
@@ -102,13 +102,13 @@ import {
   serializeBundle,
   tableKind,
   toNestedFields
-} from "./chunk-EMCAWMHC.js";
+} from "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import {
   encodeStatement,
   getStatementFactory,
   isRegisteredStatement
-} from "./chunk-LH6Z6KFV.js";
+} from "./chunk-5XZ744TS.js";
 import {
   LOCK_VERSION,
   REFERENCEABLE_KINDS,
@@ -132,6 +132,10 @@ import {
   validateLockModel
 } from "./chunk-4HT3BNZ7.js";
 
+// src/statements/byte-evidence.ts
+var UNCONFIRMED_STATEMENTS = /* @__PURE__ */ new Set([]);
+var UNCONFIRMED_NOTE = "Built from the engine's schema declaration, with no stored instance behind them to compare the emitted bytes against \u2014 every other statement has one. Fully authorable and not deprecated; the field schema may simply be less exact than the rest. If a deploy rejects one of these, read it as a shape question and pull the workspace back to see what the engine stored, rather than rewriting working code around it.";
+
 // src/manifest/manifest.ts
 function argGrammar(args) {
   if (args === void 0 || args.length === 0) return void 0;
@@ -253,6 +257,12 @@ var ENGINE_OBJECT_KINDS = [
 ];
 var TOTAL_OBJECT_KINDS = ENGINE_OBJECT_KINDS.length;
 var NAMESPACE_NOTES = {
+  // The Elasticsearch/OpenSearch note that stood here warned that those
+  // credential and target fields were "typed optional but have NO engine
+  // default - supply all". They are typed REQUIRED now, so the signature a few
+  // lines down says it and a call omitting one does not compile. A warning that
+  // restates the type costs every reader of this section and changes nothing an
+  // agent writes.
   debug: "Despite the namespace, `s.debug.stop` is a REAL control-flow terminator, not a development aid: it ends the request with an error value (`mvp:die`). It is also exported flat as `die()` \u2014 the one flat alias whose name does not mirror its `s.*` path, so there is no `s.die`. Compare `s.throw`, which raises a named error the surrounding `s.try_catch` can catch.",
   expect: "Assertions. **Put them in a `workflowTest({...})` stack** \u2014 assert on what a `.call` bound with `as`. That is where they belong and effectively the only place to author them. They are NOT inert elsewhere, which is the part worth knowing: a failure raises and aborts whatever stack it is in, so an `s.expect.*` left in a `query`/`function`/`task` takes the request down with an HTTP 500 carrying the assertion's own message (`to_equal failed - expected value 2 does not equal 1`). Treat one outside a `workflowTest` as a mistake to remove, not as a check that quietly does nothing. Two behaviours to know when writing them: `to_throw` sees only an error carrying a MESSAGE, so a failure whose message is empty \u2014 an endpoint answering `ERROR_CODE_ACCESS_DENIED` is the common one \u2014 reports \"response is ok\" as though nothing failed, and `to_be_within` EXCLUDES both bounds \u2014 `min < expr < max` \u2014 while `s.security.random_number`'s bounds are inclusive.",
   workflow_test: "Run another workflow test from inside one. Pass the `workflowTest()` def handle, not a name."
@@ -265,6 +275,10 @@ var PUBLISHED_AUTHOR_FACTORIES = new Set(
 var IMPLEMENTED_OBJECT_KINDS = ENGINE_OBJECT_KINDS.filter(
   (k) => k.authorFactory !== null && PUBLISHED_AUTHOR_FACTORIES.has(k.authorFactory)
 );
+function unconfirmedCoverage(statements) {
+  const sPaths = statements.filter((s) => UNCONFIRMED_STATEMENTS.has(s.storedName)).map((s) => s.sPath).sort();
+  return sPaths.length === 0 ? {} : { unconfirmed: { note: UNCONFIRMED_NOTE, sPaths } };
+}
 function unmodeledObjectKinds() {
   const implemented = new Set(IMPLEMENTED_OBJECT_KINDS.map((k) => k.kind));
   return ENGINE_OBJECT_KINDS.filter((k) => !implemented.has(k.kind)).map((k) => ({
@@ -470,7 +484,11 @@ function buildManifest(opts = {}) {
       },
       statements: {
         implemented: statements.filter((s) => s.registered).length,
-        total: TOTAL_STATEMENTS
+        total: TOTAL_STATEMENTS,
+        // Mapped through the built entries rather than derived from the stored
+        // names directly, so a name that no longer has an authoring surface
+        // cannot be published as an `s.` path that does not resolve.
+        ...unconfirmedCoverage(statements)
       },
       filters: { typed: filters.filter((f) => f.typed).length, total: filters.length }
     },
@@ -1582,7 +1600,7 @@ function renderSections(m) {
     "Array blocks (an `if`/`transform` is applied per item):",
     "",
     '- `s.array.map({ source, as?, transform? })` \u2014 `transform` is either a per-item `Value` expression (each item maps to that value) or a **record of values** (each item maps to an object with those keys), or a list of `{ key, value }` pairs, for a key computed per item or two rows sharing one. Use `ref("$this")` for the item and `ref("$index")` for its position. These are THIS statement\'s own bindings, in a value expression \u2014 not the JavaScript lambda contract (see **Lambda bodies**), which binds a different set per surface and is written with `lam.fn`.',
-    "- `s.array.union({ source, with?, as?, transform? })` \u2014 set-union two arrays.",
+    "- `s.array.union({ source, with, as?, transform? })` \u2014 set-union two arrays. `with` is REQUIRED; omitted \u2192 `Unable to locate input: `.",
     "",
     "DB reads/writes (`table` is a def handle or name; `fieldName` defaults to the",
     "primary key `id`):",
@@ -1690,12 +1708,12 @@ function renderSections(m) {
     "- `s.function.run({ fn, input?, as?, runtime? })` / `s.function.call({ fn, input?, as? })` \u2014 run another function; `input` is keyed by the target's input names.",
     '  - `runtime?` runs it in the BACKGROUND: `{ mode: "async-shared" }` or `{ mode: "async-dedicated", cpu?, memory?, timeout?, maxRetry? }` (resources read at dedicated only). An async call DOES NOT return the result \u2014 it dispatches and continues, so `as` binds nothing; collect with `s.await({ ids })`. Omit for a normal call. Same block on `s.ai.agent.run`.',
     '- `s.api.call({ api, input?, headers?, auth?, as? })` \u2014 invoke an endpoint. `headers` REPLACES the request headers the callee sees and takes the same shapes as `s.api.request`\'s \u2014 a `{ "Name": value }` record (values may be tagged), a `string[]` of `"Name: value"` lines, or one `Value`. `auth` is `{ token, ignoreExpiration? }`: `token` must be a BARE STRING \u2014 a tagged `Value` deploys clean and then fails the run with `Param: token - Text filter requires an integer, float, string or boolean value`, since the engine stores that slot as plain text and never evaluates it. Neither slot authenticates the call today; see `llms/tests.md` for what a workflow-test run actually sees. WORKFLOW-TEST ONLY (see Gotchas in `llms.txt`) \u2014 elsewhere it deploys clean and 500s the first real request.',
-    '- `s.api.request({ url?, method?, params?, headers?, timeout?, follow_location?, verify_host?, verify_peer?, ca_certificate?, certificate?, certificate_pass?, private_key?, private_key_pass?, description?, output?, as? })` \u2014 external HTTP request (`mvp:api_request`). Ergonomic types, each also accepting a dynamic `Value`: `method` suggests the 7 verbs (GET/POST/PUT/DELETE/HEAD/OPTIONS/PATCH), `params` a plain JSON object **or** a FLAT record whose values are tagged `Value`s (`{ count: ref("count") }`, each lifted via a `set` filter \u2014 the same record-of-values shape `response: { key: value }` takes); a tagged value NESTED inside an object or array THROWS at encode, so wrap a structured body in `obj({...})`, which encodes any depth as one `const:expr2` (\u2192 query string for GET/HEAD/OPTIONS, body otherwise), `headers` a `{ "Name": value }` record whose values may be tagged (`{ "x-api-key": env("KEY") }`, each pair joined to a `"Name: value"` line) **or** a `string[]` of full header lines \u2014 prefer a header over a `?key=` query param for a credential \u2014 a URL travels into access logs, proxies and `Referer`. \u26A0 Neither spelling is envelope-safe: the `as` envelope\'s `request` half mirrors `url`, `params` AND `headers`, so never return it raw from a credentialed request \u2014 read `response.result`. A NAME outside the header-token charset is refused, and a LITERAL value carrying a newline is refused; a value may hold `:` and spaces (`Bearer a: b` is a valid value). A TAGGED value cannot be checked at build time, so strip CRLF from caller-controlled input before this slot. Literal pairs lead the emitted array and computed ones follow, so the wire order is not the record\'s key order, `timeout` a `number` in seconds (1\u201386400), and `follow_location`/`verify_host`/`verify_peer` booleans. `description` (Settings tab) and `output` filters (Output tab) ride the envelope. SSL cert interdependencies (certificate\u2194private_key, ca_certificate\u2192verify_peer) are checked at build time when statically provable, else by the engine at runtime. The `as` result is typed as the `{request, response}` envelope (`response.status: number`, `response.result: unknown`), so `InferResponse` resolves a `ref` to it. Same typed result on `webflow.request` and `microservice.request`.',
-    "- `s.stream.from_request({ url?, method?, \u2026tls, as? })` \u2014 streaming external HTTP request (`mvp:streaming_api_request`); same typed field surface as `s.api.request` (no description/output envelope).",
-    "- `s.webflow.request({ path?, method?, \u2026tls, as? })` \u2014 Webflow API request (`mvp:connect_webflow_api_request`); like `s.api.request` but addressed by `path` (host is engine-supplied).",
+    '- `s.api.request({ url, method?, params?, headers?, timeout?, follow_location?, verify_host?, verify_peer?, ca_certificate?, certificate?, certificate_pass?, private_key?, private_key_pass?, description?, output?, as? })` \u2014 external HTTP request (`mvp:api_request`). Ergonomic types, each also accepting a dynamic `Value`: `method` suggests the 7 verbs (GET/POST/PUT/DELETE/HEAD/OPTIONS/PATCH), `params` a plain JSON object **or** a FLAT record whose values are tagged `Value`s (`{ count: ref("count") }`, each lifted via a `set` filter \u2014 the same record-of-values shape `response: { key: value }` takes); a tagged value NESTED inside an object or array THROWS at encode, so wrap a structured body in `obj({...})`, which encodes any depth as one `const:expr2` (\u2192 query string for GET/HEAD/OPTIONS, body otherwise), `headers` a `{ "Name": value }` record whose values may be tagged (`{ "x-api-key": env("KEY") }`, each pair joined to a `"Name: value"` line) **or** a `string[]` of full header lines \u2014 prefer a header over a `?key=` query param for a credential \u2014 a URL travels into access logs, proxies and `Referer`. \u26A0 Neither spelling is envelope-safe: the `as` envelope\'s `request` half mirrors `url`, `params` AND `headers`, so never return it raw from a credentialed request \u2014 read `response.result`. A NAME outside the header-token charset is refused, and a LITERAL value carrying a newline is refused; a value may hold `:` and spaces (`Bearer a: b` is a valid value). A TAGGED value cannot be checked at build time, so strip CRLF from caller-controlled input before this slot. Literal pairs lead the emitted array and computed ones follow, so the wire order is not the record\'s key order, `timeout` a `number` in seconds (1\u201386400), and `follow_location`/`verify_host`/`verify_peer` booleans. `description` (Settings tab) and `output` filters (Output tab) ride the envelope. SSL cert interdependencies (certificate\u2194private_key, ca_certificate\u2192verify_peer) are checked at build time when statically provable, else by the engine at runtime. The `as` result is typed as the `{request, response}` envelope (`response.status: number`, `response.result: unknown`), so `InferResponse` resolves a `ref` to it. Same typed result on `webflow.request` and `microservice.request`.',
+    "- `s.stream.from_request({ url, method?, \u2026tls, as? })` \u2014 streaming external HTTP request (`mvp:streaming_api_request`); same typed field surface as `s.api.request` (no description/output envelope). `url` is REQUIRED \u2014 it shares `api.request`'s engine declaration, which has no default.",
+    "- `s.webflow.request({ path, method?, \u2026tls, as? })` \u2014 Webflow API request (`mvp:connect_webflow_api_request`); like `s.api.request` but addressed by `path` (host is engine-supplied), and `path` is REQUIRED \u2014 the engine rejects an empty one. No `headers`: the engine builds its own from the workspace's Webflow connection and ignores an authored value.",
     "- `s.task.call` / `s.tool.call` / `s.trigger.call` / `s.middleware.call` / `s.addon.call` \u2014 same `{ <target>, input?, as? }` shape against the named kind. `s.task.call` and `s.trigger.call` are WORKFLOW-TEST ONLY (see Gotchas in `llms.txt`); `s.tool.call`, `s.middleware.call` and `s.addon.call` run from any stack.",
     "- `s.action.call({ action, package?, input?, as? })` / `s.action.package.call(\u2026)` \u2014 invoke a marketplace action; `package` is its slug.",
-    "- `s.cloud.job({ image?, command?, args?, secret?, template?, await?, as? })` \u2014 launch a containerized job. \u26A0 `await` is SECONDS (default 60), not a boolean.",
+    "- `s.cloud.job({ image, command, args?, secret?, template?, await?, as? })` \u2014 launch a containerized job. `image`/`command` are REQUIRED; omitted \u2192 `Missing param`. \u26A0 `await` is SECONDS (default 60), not a boolean.",
     "- `s.cloud.job.status({ id, as? })` \xB7 `s.cloud.job.await({ ids, timeout, as? })` \u2014 poll one job, or block on several (`ids` a list `Value`, `timeout` in seconds; both required).",
     "",
     "Microservices (the `microservice()` def and the statement that calls it):",