@xanots/sdk 0.0.1 → 0.0.3-beta.0

package/dist/scaffold.js

@@ -0,0 +1,101 @@
+import {
+  DEFAULT_FRAMEWORK,
+  FRAMEWORKS,
+  allFrontendPresets,
+  findFrontendPreset,
+  renderIndexCss,
+  resolveFrameworkFlag
+} from "./chunk-YZ4GU6F5.js";
+import {
+  ACCENTS,
+  ACCENT_TOKENS,
+  BASE_COLORS,
+  BASE_TOKENS,
+  CURATED_THEMES,
+  DARK_MODES,
+  DEFAULT_BASE_COLOR,
+  DEFAULT_DARK_MODE,
+  DEFAULT_ICON_LIBRARY,
+  DEFAULT_RADIUS,
+  FONTS,
+  FONT_IDS,
+  ICON_LIBRARIES,
+  TOKEN_ORDER,
+  allIconLibraries,
+  buildTheme,
+  colorTokens,
+  curatedThemes,
+  defaultIconLibrary,
+  defaultTheme,
+  defaultThemeChoice,
+  describeFonts,
+  findFont,
+  findIconLibrary,
+  fontDependencies,
+  fontImports,
+  fontThemeVars,
+  iconLibraryOf,
+  isAccent,
+  isBaseColor,
+  normalizeRadius,
+  orderedTokens,
+  parseColor,
+  resolveDarkModeFlag,
+  resolveFontFlag,
+  resolveIconsFlag,
+  resolveThemeFlag,
+  themeFromRegistryItem,
+  themeGuidanceSection,
+  themeSwatch,
+  withRadius
+} from "./chunk-6DHJVLYP.js";
+export {
+  ACCENTS,
+  ACCENT_TOKENS,
+  BASE_COLORS,
+  BASE_TOKENS,
+  CURATED_THEMES,
+  DARK_MODES,
+  DEFAULT_BASE_COLOR,
+  DEFAULT_DARK_MODE,
+  DEFAULT_FRAMEWORK,
+  DEFAULT_ICON_LIBRARY,
+  DEFAULT_RADIUS,
+  FONTS,
+  FONT_IDS,
+  FRAMEWORKS,
+  ICON_LIBRARIES,
+  TOKEN_ORDER,
+  allFrontendPresets,
+  allIconLibraries,
+  buildTheme,
+  colorTokens,
+  curatedThemes,
+  defaultIconLibrary,
+  defaultTheme,
+  defaultThemeChoice,
+  describeFonts,
+  findFont,
+  findFrontendPreset,
+  findIconLibrary,
+  fontDependencies,
+  fontImports,
+  fontThemeVars,
+  iconLibraryOf,
+  isAccent,
+  isBaseColor,
+  normalizeRadius,
+  orderedTokens,
+  parseColor,
+  renderIndexCss,
+  resolveDarkModeFlag,
+  resolveFontFlag,
+  resolveFrameworkFlag,
+  resolveIconsFlag,
+  resolveThemeFlag,
+  themeFromRegistryItem,
+  themeGuidanceSection,
+  themeSwatch,
+  withRadius
+};
+//# sourceMappingURL=scaffold.js.map

package/dist/{store-BQ97nKIF.d.ts → store-g45zwB33.d.ts}

@@ -3290,9 +3290,9 @@ declare const generated: {
     ai: {
         external: {
             mcp: {
-                server_details: (a?: {
+                server_details: (a: {
                     as?: string;
-                    url?: Value;
+                    url: Value;
                     bearer_token?: Value;
                     connection_type?: "sse" | "stream" | Value;
                     disabled?: boolean;
@@ -3300,21 +3300,21 @@ declare const generated: {
                     asFilters?: FilterXdo[];
                 }) => Statement;
                 tool: {
-                    list: (a?: {
+                    list: (a: {
                         as?: string;
-                        url?: Value;
+                        url: Value;
                         bearer_token?: Value;
                         connection_type?: "sse" | "stream" | Value;
                         disabled?: boolean;
                         description?: string;
                         asFilters?: FilterXdo[];
                     }) => Statement;
-                    run: (a?: {
+                    run: (a: {
                         as?: string;
-                        url?: Value;
+                        url: Value;
                         bearer_token?: Value;
                         connection_type?: "sse" | "stream" | Value;
-                        tool?: Value;
+                        tool: Value;
                         args?: Value;
                         disabled?: boolean;
                         description?: string;
@@ -3325,9 +3325,9 @@ declare const generated: {
         };
     };
     api: {
-        request: (a?: {
+        request: (a: {
             as?: string;
-            url?: Value;
+            url: Value;
             method?: "GET" | "POST" | "PUT" | "DELETE" | "HEAD" | "OPTIONS" | "PATCH" | Value;
             params?: Value;
             headers?: Value;
@@ -3500,27 +3500,27 @@ declare const generated: {
                 document: (a: {
                     as?: string;
                     auth_type?: "IAM" | "master" | Value;
-                    key_id?: Value;
-                    access_key?: Value;
-                    region?: Value;
+                    key_id: Value;
+                    access_key: Value;
+                    region: Value;
                     base_url: Value;
                     method?: "GET" | "POST" | "PUT" | "DELETE" | Value;
-                    index?: Value;
-                    doc_id?: Value;
-                    doc?: Value;
+                    index: Value;
+                    doc_id: Value;
+                    doc: Value;
                     disabled?: boolean;
                     description?: string;
                     asFilters?: FilterXdo[];
                 }) => Statement;
-                query: (a?: {
+                query: (a: {
                     as?: string;
                     auth_type?: "IAM" | "master" | Value;
-                    key_id?: Value;
-                    access_key?: Value;
-                    region?: Value;
-                    base_url?: Value;
-                    index?: Value;
-                    payload?: Value;
+                    key_id: Value;
+                    access_key: Value;
+                    region: Value;
+                    base_url: Value;
+                    index: Value;
+                    payload: Value;
                     size?: Value;
                     from?: Value;
                     included_fields?: Value;
@@ -3531,15 +3531,15 @@ declare const generated: {
                     description?: string;
                     asFilters?: FilterXdo[];
                 }) => Statement;
-                request: (a?: {
+                request: (a: {
                     as?: string;
                     auth_type?: "IAM" | "master" | Value;
-                    key_id?: Value;
-                    access_key?: Value;
-                    region?: Value;
+                    key_id: Value;
+                    access_key: Value;
+                    region: Value;
                     method?: "GET" | "POST" | "PUT" | "DELETE" | "HEAD" | "OPTIONS" | "PATCH" | Value;
-                    url?: Value;
-                    query?: Value;
+                    url: Value;
+                    query: Value;
                     disabled?: boolean;
                     description?: string;
                     asFilters?: FilterXdo[];
@@ -3702,14 +3702,14 @@ declare const generated: {
                 description?: string;
                 asFilters?: FilterXdo[];
             }) => Statement;
-            query: (a?: {
+            query: (a: {
                 as?: string;
                 auth_type?: "Basic" | "Bearer" | "API Key" | Value;
-                key_id?: Value;
-                access_key?: Value;
-                base_url?: Value;
-                index?: Value;
-                payload?: Value;
+                key_id: Value;
+                access_key: Value;
+                base_url: Value;
+                index: Value;
+                payload: Value;
                 size?: Value;
                 from?: Value;
                 included_fields?: Value;
@@ -3720,14 +3720,14 @@ declare const generated: {
                 description?: string;
                 asFilters?: FilterXdo[];
             }) => Statement;
-            request: (a?: {
+            request: (a: {
                 as?: string;
                 auth_type?: "Basic" | "Bearer" | "API Key" | Value;
-                key_id?: Value;
-                access_key?: Value;
+                key_id: Value;
+                access_key: Value;
                 method?: "POST" | "GET" | "PUT" | "DELETE" | "PATCH" | Value;
-                url?: Value;
-                payload?: Value;
+                url: Value;
+                payload: Value;
                 disabled?: boolean;
                 description?: string;
                 asFilters?: FilterXdo[];
@@ -3797,8 +3797,8 @@ declare const generated: {
         };
     };
     datadog: {
-        log: (a?: {
-            message?: Value;
+        log: (a: {
+            message: Value;
             status?: "debug" | "info" | "notice" | "warn" | "error" | "critical" | "alert" | "emergency" | Value;
             attributes?: Value;
             service?: Value;
@@ -3818,7 +3818,7 @@ declare const generated: {
             description?: string;
         }) => Statement;
         metric: (a: {
-            metric?: Value;
+            metric: Value;
             value: Value;
             type?: "count" | "gauge" | "rate" | "histogram" | "distribution" | Value;
             tags?: Value;
@@ -3960,9 +3960,9 @@ declare const generated: {
             description?: string;
         }) => Statement;
     };
-    lambda: (a?: {
+    lambda: (a: {
         as?: string;
-        code?: Value | LambdaBody<"s.lambda">;
+        code: Value | LambdaBody<"s.lambda">;
         timeout?: Value;
         disabled?: boolean;
         description?: string;
@@ -4203,10 +4203,10 @@ declare const generated: {
         }) => Statement;
     };
     security: {
-        check_password: (a?: {
+        check_password: (a: {
             as?: string;
-            text_password?: Value;
-            hash_password?: Value;
+            text_password: Value;
+            hash_password: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
@@ -4254,30 +4254,30 @@ declare const generated: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        decrypt: (a?: {
+        decrypt: (a: {
             as?: string;
-            data?: Value;
+            data: Value;
             algorithm?: "aes-128-cbc" | "aes-192-cbc" | "aes-256-cbc" | "aes-128-gcm" | "aes-192-gcm" | "aes-256-gcm" | Value;
-            key?: Value;
-            iv?: Value;
+            key: Value;
+            iv: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        encrypt: (a?: {
+        encrypt: (a: {
             as?: string;
-            data?: Value;
+            data: Value;
             algorithm?: "aes-128-cbc" | "aes-192-cbc" | "aes-256-cbc" | "aes-128-gcm" | "aes-192-gcm" | "aes-256-gcm" | Value;
-            key?: Value;
-            iv?: Value;
+            key: Value;
+            iv: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        jwe_decode: (a?: {
+        jwe_decode: (a: {
             as?: string;
-            token?: Value;
-            key?: Value;
+            token: Value;
+            key: Value;
             check_claims?: Value;
             key_algorithm?: "A128KW" | "A192KW" | "A256KW" | "A128GCMKW" | "A192GCMKW" | "A256GCMKW" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW" | Value;
             content_algorithm?: "A128GCM" | "A192GCM" | "A256GCM" | "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512" | Value;
@@ -4286,11 +4286,11 @@ declare const generated: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        jwe_encode: (a?: {
+        jwe_encode: (a: {
             as?: string;
             headers?: Value;
             claims?: Value;
-            key?: Value;
+            key: Value;
             key_algorithm?: "A128KW" | "A192KW" | "A256KW" | "A128GCMKW" | "A192GCMKW" | "A256GCMKW" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW" | Value;
             content_algorithm?: "A128GCM" | "A192GCM" | "A256GCM" | "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512" | Value;
             ttl?: Value;
@@ -4298,10 +4298,10 @@ declare const generated: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        jws_decode: (a?: {
+        jws_decode: (a: {
             as?: string;
-            token?: Value;
-            key?: Value;
+            token: Value;
+            key: Value;
             check_claims?: Value;
             signature_algorithm?: "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512" | "HS256" | "HS384" | "HS512" | "ES256" | "ES384" | "ES512" | Value;
             timeDrift?: Value;
@@ -4309,11 +4309,11 @@ declare const generated: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        jws_encode: (a?: {
+        jws_encode: (a: {
             as?: string;
             headers?: Value;
             claims?: Value;
-            key?: Value;
+            key: Value;
             signature_algorithm?: "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512" | "HS256" | "HS384" | "HS512" | "ES256" | "ES384" | "ES512" | Value;
             ttl?: Value;
             disabled?: boolean;
@@ -4428,9 +4428,9 @@ declare const generated: {
             description?: string;
             asFilters?: FilterXdo[];
         }) => Statement;
-        from_request: (a?: {
+        from_request: (a: {
             as?: string;
-            url?: Value;
+            url: Value;
             method?: Value;
             params?: Value;
             headers?: Value;
@@ -4535,12 +4535,12 @@ declare const generated: {
         description?: string;
     }) => Statement;
     util: {
-        geo_distance: (a?: {
+        geo_distance: (a: {
             as?: string;
-            latitude_1?: Value;
-            longitude_1?: Value;
-            latitude_2?: Value;
-            longitude_2?: Value;
+            latitude_1: Value;
+            longitude_1: Value;
+            latitude_2: Value;
+            longitude_2: Value;
             disabled?: boolean;
             description?: string;
             asFilters?: FilterXdo[];
@@ -4572,8 +4572,8 @@ declare const generated: {
         }) => Statement;
         send_email: (a?: {
             as?: string;
-            service_provider?: "resend" | "xano" | Value;
             api_key?: Value;
+            service_provider?: "resend" | "xano" | Value;
             subject?: Value;
             message?: Value;
             to?: Value;
@@ -4606,9 +4606,9 @@ declare const generated: {
         }) => Statement;
     };
     webflow: {
-        request: (a?: {
+        request: (a: {
             as?: string;
-            path?: Value;
+            path: Value;
             method?: Value;
             params?: Value;
             headers?: Value;
@@ -7234,9 +7234,25 @@ interface Manifest {
                 absence: string;
             }[];
         };
+        /**
+         * `unconfirmed` names the statements built from the engine's schema alone,
+         * with no stored instance behind them — the same "make the denominator
+         * inspectable" move as `unmodeled` above, for a different kind of
+         * shortfall. Published as `s.` paths, because that is what an agent looks a
+         * statement up by. See `src/statements/byte-evidence.ts`.
+         */
         statements: {
             implemented: number;
             total: number;
+            /**
+             * Omitted entirely when nothing is unconfirmed — an empty warning channel
+             * that ships on every build teaches a reader to skip the one time it has
+             * something in it.
+             */
+            unconfirmed?: {
+                note: string;
+                sPaths: string[];
+            };
         };
         filters: {
             typed: number;

package/dist/{test-command-TSPBQHBM.js → test-command-LLPXKT35.js}

@@ -1,6 +1,6 @@
 import {
   resolveMetaTarget
-} from "./chunk-33ND6LKO.js";
+} from "./chunk-MWLNBSTY.js";
 import "./chunk-DGSF2Q5H.js";
 import "./chunk-7DKX2SPN.js";
 import "./chunk-NDZFBZHC.js";
@@ -19,7 +19,7 @@ import {
 import "./chunk-7REDODS2.js";
 import {
   unknownSubcommand
-} from "./chunk-IZW6MK3U.js";
+} from "./chunk-FY6LXRR6.js";
 import {
   blank,
   detail,
@@ -28,8 +28,8 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-YYRDLFSJ.js";
 import "./chunk-GNPVYOPB.js";
+import "./chunk-QO4I5OYF.js";
 
 // src/deploy/tests.ts
 var TIMEOUT_MS = 12e4;
@@ -380,4 +380,4 @@ export {
   runSuite,
   runTestCommand
 };
-//# sourceMappingURL=test-command-TSPBQHBM.js.map
+//# sourceMappingURL=test-command-LLPXKT35.js.map

package/dist/{validate-command-4ERHJSCO.js → validate-command-WAT3ZJT3.js}

@@ -1,9 +1,10 @@
 import {
   assertBundleInput,
   loadBundleText
-} from "./chunk-NOO35BQ2.js";
-import "./chunk-YGPIY3WT.js";
-import "./chunk-IZW6MK3U.js";
+} from "./chunk-HKAX756N.js";
+import "./chunk-VVXPK6SE.js";
+import "./chunk-FY6LXRR6.js";
+import "./chunk-HJPTWBLH.js";
 import {
   blank,
   detail,
@@ -12,13 +13,12 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-3DUAGYGP.js";
-import "./chunk-YYRDLFSJ.js";
-import "./chunk-EMCAWMHC.js";
-import "./chunk-WHOJWOSV.js";
-import "./chunk-LH6Z6KFV.js";
-import "./chunk-HJPTWBLH.js";
 import "./chunk-GNPVYOPB.js";
+import "./chunk-55VHDNW5.js";
+import "./chunk-QO4I5OYF.js";
+import "./chunk-5L4X5LS6.js";
+import "./chunk-WHOJWOSV.js";
+import "./chunk-5XZ744TS.js";
 import "./chunk-4HT3BNZ7.js";
 
 // src/emit/validate-command.ts
@@ -44,7 +44,7 @@ async function runValidateCommand(args) {
   }
 }
 async function validateWithClient(args, client, bundle) {
-  const { runValidateLoop, runnableFunctionNames } = await import("./loop-OM3P2Z6O.js");
+  const { runValidateLoop, runnableFunctionNames } = await import("./loop-SAWAOUFO.js");
   const result = await runValidateLoop(client, bundle);
   if (!result.accepted) {
     warn("Import rejected by the engine:");
@@ -119,4 +119,4 @@ function fmt(v) {
 export {
   runValidateCommand
 };
-//# sourceMappingURL=validate-command-4ERHJSCO.js.map
+//# sourceMappingURL=validate-command-WAT3ZJT3.js.map

package/dist/{workspace-command-OF23DPNI.js → workspace-command-JKMI7RZ4.js}

@@ -1,17 +1,13 @@
 import {
   fetchWorkspaceBundle,
   runCodegenCommand
-} from "./chunk-TRU5OHQ5.js";
-import "./chunk-26CNBZE2.js";
+} from "./chunk-CBL57QBQ.js";
+import "./chunk-P3TTMWUP.js";
 import {
   resolveOutputTarget
 } from "./chunk-XQ22GLYS.js";
 import "./chunk-QTNO2WD6.js";
 import "./chunk-ZUTSMMAG.js";
-import "./chunk-WKP4D5MO.js";
-import "./chunk-VKFQJEMW.js";
-import "./chunk-47WDWMBJ.js";
-import "./chunk-X4DVXBFY.js";
 import "./chunk-7DKX2SPN.js";
 import {
   printMicroserviceSection,
@@ -21,6 +17,9 @@ import {
   isMachineOutput,
   writeJson
 } from "./chunk-NUQCEOKA.js";
+import "./chunk-4HKZH6YK.js";
+import "./chunk-WRYT2PAX.js";
+import "./chunk-47WDWMBJ.js";
 import {
   fetchOrExplain,
   httpFailure
@@ -30,28 +29,31 @@ import {
   getAccessToken
 } from "./chunk-C56BC2FY.js";
 import "./chunk-7REDODS2.js";
-import "./chunk-MZUI3JNX.js";
-import "./chunk-RVB7ITKN.js";
+import "./chunk-X4DVXBFY.js";
+import "./chunk-F6JCFRKO.js";
+import "./chunk-LU7TRWMC.js";
+import "./chunk-YZ4GU6F5.js";
+import "./chunk-6DHJVLYP.js";
 import "./chunk-4BXJGVZ3.js";
-import "./chunk-FJ6ZS5KB.js";
-import "./chunk-YGPIY3WT.js";
+import "./chunk-U3G2UW65.js";
+import "./chunk-VVXPK6SE.js";
 import {
   removedSubcommand,
   unknownSubcommand
-} from "./chunk-IZW6MK3U.js";
+} from "./chunk-FY6LXRR6.js";
+import "./chunk-HJPTWBLH.js";
 import {
   formatFields,
   stdoutStyle,
   step,
   success
 } from "./chunk-EZG76F7R.js";
-import "./chunk-3DUAGYGP.js";
-import "./chunk-YYRDLFSJ.js";
-import "./chunk-EMCAWMHC.js";
-import "./chunk-WHOJWOSV.js";
-import "./chunk-LH6Z6KFV.js";
-import "./chunk-HJPTWBLH.js";
 import "./chunk-GNPVYOPB.js";
+import "./chunk-55VHDNW5.js";
+import "./chunk-QO4I5OYF.js";
+import "./chunk-5L4X5LS6.js";
+import "./chunk-WHOJWOSV.js";
+import "./chunk-5XZ744TS.js";
 import "./chunk-4HT3BNZ7.js";
 
 // src/emit/workspace-command.ts
@@ -153,4 +155,4 @@ async function runExport(args) {
 export {
   runWorkspaceCommand
 };
-//# sourceMappingURL=workspace-command-OF23DPNI.js.map
+//# sourceMappingURL=workspace-command-JKMI7RZ4.js.map

package/dist/workspace-export-AJMGN3CQ.js

@@ -2,8 +2,8 @@ import {
   exportWorkspaceBundle
 } from "./chunk-QTNO2WD6.js";
 import "./chunk-ZUTSMMAG.js";
-import "./chunk-X4DVXBFY.js";
 import "./chunk-3IGNIP6R.js";
+import "./chunk-X4DVXBFY.js";
 export {
   exportWorkspaceBundle
 };

package/llms/statements-calls.md

@@ -9,12 +9,12 @@ Auth & calls:
 - `s.function.run({ fn, input?, as?, runtime? })` / `s.function.call({ fn, input?, as? })` — run another function; `input` is keyed by the target's input names.
   - `runtime?` runs it in the BACKGROUND: `{ mode: "async-shared" }` or `{ mode: "async-dedicated", cpu?, memory?, timeout?, maxRetry? }` (resources read at dedicated only). An async call DOES NOT return the result — it dispatches and continues, so `as` binds nothing; collect with `s.await({ ids })`. Omit for a normal call. Same block on `s.ai.agent.run`.
 - `s.api.call({ api, input?, headers?, auth?, as? })` — invoke an endpoint. `headers` REPLACES the request headers the callee sees and takes the same shapes as `s.api.request`'s — a `{ "Name": value }` record (values may be tagged), a `string[]` of `"Name: value"` lines, or one `Value`. `auth` is `{ token, ignoreExpiration? }`: `token` must be a BARE STRING — a tagged `Value` deploys clean and then fails the run with `Param: token - Text filter requires an integer, float, string or boolean value`, since the engine stores that slot as plain text and never evaluates it. Neither slot authenticates the call today; see `llms/tests.md` for what a workflow-test run actually sees. WORKFLOW-TEST ONLY (see Gotchas in `llms.txt`) — elsewhere it deploys clean and 500s the first real request.
-- `s.api.request({ url?, method?, params?, headers?, timeout?, follow_location?, verify_host?, verify_peer?, ca_certificate?, certificate?, certificate_pass?, private_key?, private_key_pass?, description?, output?, as? })` — external HTTP request (`mvp:api_request`). Ergonomic types, each also accepting a dynamic `Value`: `method` suggests the 7 verbs (GET/POST/PUT/DELETE/HEAD/OPTIONS/PATCH), `params` a plain JSON object **or** a FLAT record whose values are tagged `Value`s (`{ count: ref("count") }`, each lifted via a `set` filter — the same record-of-values shape `response: { key: value }` takes); a tagged value NESTED inside an object or array THROWS at encode, so wrap a structured body in `obj({...})`, which encodes any depth as one `const:expr2` (→ query string for GET/HEAD/OPTIONS, body otherwise), `headers` a `{ "Name": value }` record whose values may be tagged (`{ "x-api-key": env("KEY") }`, each pair joined to a `"Name: value"` line) **or** a `string[]` of full header lines — prefer a header over a `?key=` query param for a credential — a URL travels into access logs, proxies and `Referer`. ⚠ Neither spelling is envelope-safe: the `as` envelope's `request` half mirrors `url`, `params` AND `headers`, so never return it raw from a credentialed request — read `response.result`. A NAME outside the header-token charset is refused, and a LITERAL value carrying a newline is refused; a value may hold `:` and spaces (`Bearer a: b` is a valid value). A TAGGED value cannot be checked at build time, so strip CRLF from caller-controlled input before this slot. Literal pairs lead the emitted array and computed ones follow, so the wire order is not the record's key order, `timeout` a `number` in seconds (1–86400), and `follow_location`/`verify_host`/`verify_peer` booleans. `description` (Settings tab) and `output` filters (Output tab) ride the envelope. SSL cert interdependencies (certificate↔private_key, ca_certificate→verify_peer) are checked at build time when statically provable, else by the engine at runtime. The `as` result is typed as the `{request, response}` envelope (`response.status: number`, `response.result: unknown`), so `InferResponse` resolves a `ref` to it. Same typed result on `webflow.request` and `microservice.request`.
-- `s.stream.from_request({ url?, method?, …tls, as? })` — streaming external HTTP request (`mvp:streaming_api_request`); same typed field surface as `s.api.request` (no description/output envelope).
-- `s.webflow.request({ path?, method?, …tls, as? })` — Webflow API request (`mvp:connect_webflow_api_request`); like `s.api.request` but addressed by `path` (host is engine-supplied).
+- `s.api.request({ url, method?, params?, headers?, timeout?, follow_location?, verify_host?, verify_peer?, ca_certificate?, certificate?, certificate_pass?, private_key?, private_key_pass?, description?, output?, as? })` — external HTTP request (`mvp:api_request`). Ergonomic types, each also accepting a dynamic `Value`: `method` suggests the 7 verbs (GET/POST/PUT/DELETE/HEAD/OPTIONS/PATCH), `params` a plain JSON object **or** a FLAT record whose values are tagged `Value`s (`{ count: ref("count") }`, each lifted via a `set` filter — the same record-of-values shape `response: { key: value }` takes); a tagged value NESTED inside an object or array THROWS at encode, so wrap a structured body in `obj({...})`, which encodes any depth as one `const:expr2` (→ query string for GET/HEAD/OPTIONS, body otherwise), `headers` a `{ "Name": value }` record whose values may be tagged (`{ "x-api-key": env("KEY") }`, each pair joined to a `"Name: value"` line) **or** a `string[]` of full header lines — prefer a header over a `?key=` query param for a credential — a URL travels into access logs, proxies and `Referer`. ⚠ Neither spelling is envelope-safe: the `as` envelope's `request` half mirrors `url`, `params` AND `headers`, so never return it raw from a credentialed request — read `response.result`. A NAME outside the header-token charset is refused, and a LITERAL value carrying a newline is refused; a value may hold `:` and spaces (`Bearer a: b` is a valid value). A TAGGED value cannot be checked at build time, so strip CRLF from caller-controlled input before this slot. Literal pairs lead the emitted array and computed ones follow, so the wire order is not the record's key order, `timeout` a `number` in seconds (1–86400), and `follow_location`/`verify_host`/`verify_peer` booleans. `description` (Settings tab) and `output` filters (Output tab) ride the envelope. SSL cert interdependencies (certificate↔private_key, ca_certificate→verify_peer) are checked at build time when statically provable, else by the engine at runtime. The `as` result is typed as the `{request, response}` envelope (`response.status: number`, `response.result: unknown`), so `InferResponse` resolves a `ref` to it. Same typed result on `webflow.request` and `microservice.request`.
+- `s.stream.from_request({ url, method?, …tls, as? })` — streaming external HTTP request (`mvp:streaming_api_request`); same typed field surface as `s.api.request` (no description/output envelope). `url` is REQUIRED — it shares `api.request`'s engine declaration, which has no default.
+- `s.webflow.request({ path, method?, …tls, as? })` — Webflow API request (`mvp:connect_webflow_api_request`); like `s.api.request` but addressed by `path` (host is engine-supplied), and `path` is REQUIRED — the engine rejects an empty one. No `headers`: the engine builds its own from the workspace's Webflow connection and ignores an authored value.
 - `s.task.call` / `s.tool.call` / `s.trigger.call` / `s.middleware.call` / `s.addon.call` — same `{ <target>, input?, as? }` shape against the named kind. `s.task.call` and `s.trigger.call` are WORKFLOW-TEST ONLY (see Gotchas in `llms.txt`); `s.tool.call`, `s.middleware.call` and `s.addon.call` run from any stack.
 - `s.action.call({ action, package?, input?, as? })` / `s.action.package.call(…)` — invoke a marketplace action; `package` is its slug.
-- `s.cloud.job({ image?, command?, args?, secret?, template?, await?, as? })` — launch a containerized job. ⚠ `await` is SECONDS (default 60), not a boolean.
+- `s.cloud.job({ image, command, args?, secret?, template?, await?, as? })` — launch a containerized job. `image`/`command` are REQUIRED; omitted → `Missing param`. ⚠ `await` is SECONDS (default 60), not a boolean.
 - `s.cloud.job.status({ id, as? })` · `s.cloud.job.await({ ids, timeout, as? })` — poll one job, or block on several (`ids` a list `Value`, `timeout` in seconds; both required).
 
 Microservices (the `microservice()` def and the statement that calls it):