@xanots/sdk 0.0.10 → 0.0.11

package/dist/chunk-EHP3WPEG.js

@@ -0,0 +1,21 @@
+// src/bundle/schema.ts
+function tableRefOf(column) {
+  if (column.type !== "int" && column.type !== "uuid") return null;
+  const last = column.methods?.[column.methods.length - 1];
+  const arg = last?.name === "@" ? last.arg?.[0] : void 0;
+  if (typeof arg !== "string" || !arg.startsWith("dbo=")) return null;
+  const guid = arg.slice("dbo=".length);
+  return guid === "" ? null : guid;
+}
+function linkedTableOf(column) {
+  const suffix = "_mvpschema";
+  if (typeof column.type !== "string" || !column.type.endsWith(suffix)) return null;
+  const guid = column.type.slice(0, -suffix.length);
+  return guid === "" ? null : guid;
+}
+
+export {
+  tableRefOf,
+  linkedTableOf
+};
+//# sourceMappingURL=chunk-EHP3WPEG.js.map

package/dist/{chunk-75Z74TA7.js → chunk-G4EJMQLD.js}

@@ -1,7 +1,7 @@
 import {
   c,
   resp
-} from "./chunk-LBYWGMOA.js";
+} from "./chunk-QK7ZQJLP.js";
 
 // src/values/expect.ts
 var TEST_EXPECT_TYPES = [
@@ -90,4 +90,4 @@ export {
   TEST_EXPECT_TYPES,
   expect
 };
-//# sourceMappingURL=chunk-75Z74TA7.js.map
+//# sourceMappingURL=chunk-G4EJMQLD.js.map

package/dist/{chunk-I7DQDJAM.js → chunk-HYBN4H3F.js}

@@ -1,21 +1,3 @@
-import {
-  ENGINE_HISTORY_LIMIT,
-  clearLocalDboRefs,
-  configuredDeadReturnBlocks,
-  filledContext,
-  hasNoListBounds,
-  hasUnreadableInput,
-  isBlankAgentSettings,
-  isBlankGroupStatement,
-  isDeadResultItem,
-  isDefaultEnvelopeMember,
-  isEmptyCustomize,
-  isEmptyOutput,
-  liveArrayMapContext,
-  normalize,
-  retiredInputSuccessor,
-  retiredInputs
-} from "./chunk-3INK4Y4E.js";
 import {
   resolveEphemeralName
 } from "./chunk-ZQ2PKR6R.js";
@@ -30,7 +12,7 @@ import {
   resolveFrontendPreset,
   resolveThemeChoice,
   sanitizeAppName
-} from "./chunk-YYFXVYPX.js";
+} from "./chunk-4IF54NU5.js";
 import {
   XANO_DIR,
   resolveAiPresets,
@@ -38,7 +20,7 @@ import {
 } from "./chunk-KA6G2L7U.js";
 import {
   TEST_EXPECT_TYPES
-} from "./chunk-75Z74TA7.js";
+} from "./chunk-G4EJMQLD.js";
 import {
   raw
 } from "./chunk-LU7TRWMC.js";
@@ -50,11 +32,9 @@ import {
 } from "./chunk-ANUDXFEX.js";
 import {
   FIELD_METHODS,
-  STATEMENT_SURFACES,
   SUPERSEDED_STATEMENTS,
-  sPathOf,
   supersededBy
-} from "./chunk-4BXJGVZ3.js";
+} from "./chunk-BSK7ELHU.js";
 import {
   DEFAULT_PREFERENCES,
   DEFAULT_SETTINGS,
@@ -70,11 +50,37 @@ import {
   searchConstrainsRows,
   tableTrigger,
   workspaceTrigger
-} from "./chunk-P6TAVLOX.js";
+} from "./chunk-UOZMSF4C.js";
+import {
+  linkedTableOf,
+  tableRefOf
+} from "./chunk-EHP3WPEG.js";
+import {
+  ENGINE_HISTORY_LIMIT,
+  clearLocalDboRefs,
+  configuredDeadReturnBlocks,
+  filledContext,
+  hasNoListBounds,
+  hasUnreadableInput,
+  isBlankAgentSettings,
+  isBlankGroupStatement,
+  isDeadResultItem,
+  isDefaultEnvelopeMember,
+  isEmptyCustomize,
+  isEmptyOutput,
+  liveArrayMapContext,
+  normalize,
+  retiredInputSuccessor,
+  retiredInputs
+} from "./chunk-3INK4Y4E.js";
+import {
+  STATEMENT_SURFACES,
+  sPathOf
+} from "./chunk-BC2C5GVI.js";
 import {
   loadDefault,
   readVersion
-} from "./chunk-ACCBOMCB.js";
+} from "./chunk-RCT7UX7B.js";
 import {
   UsageError
 } from "./chunk-F6CYJ7TN.js";
@@ -118,11 +124,14 @@ import {
   sys,
   toolset,
   withFilters
-} from "./chunk-LBYWGMOA.js";
+} from "./chunk-QK7ZQJLP.js";
 import {
   parsePathParams,
   unboundPathParams
 } from "./chunk-WHOJWOSV.js";
+import {
+  REFERENCEABLE_KIND_PAYLOAD_KEYS
+} from "./chunk-VAF6A3YD.js";
 import {
   COLUMN_CONTEXT,
   INPUT_CONTEXT,
@@ -131,9 +140,6 @@ import {
   encodeMockMap,
   encodeStatement
 } from "./chunk-5XZ744TS.js";
-import {
-  REFERENCEABLE_KIND_PAYLOAD_KEYS
-} from "./chunk-7JDT4PBU.js";
 
 // src/emit/codegen-command.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";
@@ -1681,20 +1687,6 @@ function recoverOptions(stored, includeDescription, elide = true) {
 function storedChildren(stored) {
   return stored.children ?? [];
 }
-function dbLinkTableGuid(stored) {
-  const suffix = "_mvpschema";
-  if (typeof stored.type !== "string" || !stored.type.endsWith(suffix)) return null;
-  const guid = stored.type.slice(0, -suffix.length);
-  return guid === "" ? null : guid;
-}
-function tableRefGuid(stored) {
-  if (stored.type !== "int" && stored.type !== "uuid") return null;
-  const last = stored.methods?.[stored.methods.length - 1];
-  const arg = last?.name === "@" ? last.arg?.[0] : void 0;
-  if (typeof arg !== "string" || !arg.startsWith("dbo=")) return null;
-  const guid = arg.slice("dbo=".length);
-  return guid === "" ? null : guid;
-}
 function unbindLocalCustomizeRefs(stored) {
   const customize = stored.customize;
   if (customize === null || typeof customize !== "object") return { field: stored, unbound: [] };
@@ -1782,7 +1774,7 @@ function decodeField(ctx, refs, stored, surface, resolve2 = {}) {
     return null;
   };
   const catalog = surface === "input" ? input : f;
-  const dbLinkGuid = dbLinkTableGuid(stored);
+  const dbLinkGuid = linkedTableOf(stored);
   if (dbLinkGuid !== null && surface === "input") {
     const rest = { ...opts };
     delete rest.merge;
@@ -1797,7 +1789,7 @@ function decodeField(ctx, refs, stored, surface, resolve2 = {}) {
     );
     if (decoded) return decoded;
   }
-  const refGuid = tableRefGuid(stored);
+  const refGuid = tableRefOf(stored);
   if (refGuid !== null) {
     const withoutRef = { ...opts, methods: opts.methods.slice(0, -1) };
     if (withoutRef.methods.length === 0) delete withoutRef.methods;
@@ -7016,4 +7008,4 @@ export {
   verifyCrashEntry,
   blameGeneratedFile
 };
-//# sourceMappingURL=chunk-I7DQDJAM.js.map
+//# sourceMappingURL=chunk-HYBN4H3F.js.map

package/dist/chunk-OHX6MIUZ.js

@@ -0,0 +1,184 @@
+// src/util/hash.ts
+var utf8 = new TextEncoder();
+function toBytes(input) {
+  return typeof input === "string" ? utf8.encode(input) : input;
+}
+function md5Bytes(input) {
+  const msg = toBytes(input);
+  const len = msg.length;
+  const withPad = (len + 8 >>> 6) + 1;
+  const words = new Int32Array(withPad * 16);
+  for (let i = 0; i < len; i++) {
+    const idx = i >> 2;
+    words[idx] = words[idx] | msg[i] << i % 4 * 8;
+  }
+  const padIdx = len >> 2;
+  words[padIdx] = words[padIdx] | 128 << len % 4 * 8;
+  words[words.length - 2] = len * 8;
+  let a = 1732584193, b = -271733879, c = -1732584194, d = 271733878;
+  const add = (x, y) => x + y | 0;
+  const rol = (n, s) => n << s | n >>> 32 - s;
+  const cmn = (q, a0, b0, x, s, t) => add(rol(add(add(a0, q), add(x, t)), s), b0);
+  const ff = (a0, b0, c0, d0, x, s, t) => cmn(b0 & c0 | ~b0 & d0, a0, b0, x, s, t);
+  const gg = (a0, b0, c0, d0, x, s, t) => cmn(b0 & d0 | c0 & ~d0, a0, b0, x, s, t);
+  const hh = (a0, b0, c0, d0, x, s, t) => cmn(b0 ^ c0 ^ d0, a0, b0, x, s, t);
+  const ii = (a0, b0, c0, d0, x, s, t) => cmn(c0 ^ (b0 | ~d0), a0, b0, x, s, t);
+  for (let i = 0; i < words.length; i += 16) {
+    const oa = a, ob = b, oc = c, od = d;
+    const w = (j) => words[i + j];
+    a = ff(a, b, c, d, w(0), 7, -680876936);
+    d = ff(d, a, b, c, w(1), 12, -389564586);
+    c = ff(c, d, a, b, w(2), 17, 606105819);
+    b = ff(b, c, d, a, w(3), 22, -1044525330);
+    a = ff(a, b, c, d, w(4), 7, -176418897);
+    d = ff(d, a, b, c, w(5), 12, 1200080426);
+    c = ff(c, d, a, b, w(6), 17, -1473231341);
+    b = ff(b, c, d, a, w(7), 22, -45705983);
+    a = ff(a, b, c, d, w(8), 7, 1770035416);
+    d = ff(d, a, b, c, w(9), 12, -1958414417);
+    c = ff(c, d, a, b, w(10), 17, -42063);
+    b = ff(b, c, d, a, w(11), 22, -1990404162);
+    a = ff(a, b, c, d, w(12), 7, 1804603682);
+    d = ff(d, a, b, c, w(13), 12, -40341101);
+    c = ff(c, d, a, b, w(14), 17, -1502002290);
+    b = ff(b, c, d, a, w(15), 22, 1236535329);
+    a = gg(a, b, c, d, w(1), 5, -165796510);
+    d = gg(d, a, b, c, w(6), 9, -1069501632);
+    c = gg(c, d, a, b, w(11), 14, 643717713);
+    b = gg(b, c, d, a, w(0), 20, -373897302);
+    a = gg(a, b, c, d, w(5), 5, -701558691);
+    d = gg(d, a, b, c, w(10), 9, 38016083);
+    c = gg(c, d, a, b, w(15), 14, -660478335);
+    b = gg(b, c, d, a, w(4), 20, -405537848);
+    a = gg(a, b, c, d, w(9), 5, 568446438);
+    d = gg(d, a, b, c, w(14), 9, -1019803690);
+    c = gg(c, d, a, b, w(3), 14, -187363961);
+    b = gg(b, c, d, a, w(8), 20, 1163531501);
+    a = gg(a, b, c, d, w(13), 5, -1444681467);
+    d = gg(d, a, b, c, w(2), 9, -51403784);
+    c = gg(c, d, a, b, w(7), 14, 1735328473);
+    b = gg(b, c, d, a, w(12), 20, -1926607734);
+    a = hh(a, b, c, d, w(5), 4, -378558);
+    d = hh(d, a, b, c, w(8), 11, -2022574463);
+    c = hh(c, d, a, b, w(11), 16, 1839030562);
+    b = hh(b, c, d, a, w(14), 23, -35309556);
+    a = hh(a, b, c, d, w(1), 4, -1530992060);
+    d = hh(d, a, b, c, w(4), 11, 1272893353);
+    c = hh(c, d, a, b, w(7), 16, -155497632);
+    b = hh(b, c, d, a, w(10), 23, -1094730640);
+    a = hh(a, b, c, d, w(13), 4, 681279174);
+    d = hh(d, a, b, c, w(0), 11, -358537222);
+    c = hh(c, d, a, b, w(3), 16, -722521979);
+    b = hh(b, c, d, a, w(6), 23, 76029189);
+    a = hh(a, b, c, d, w(9), 4, -640364487);
+    d = hh(d, a, b, c, w(12), 11, -421815835);
+    c = hh(c, d, a, b, w(15), 16, 530742520);
+    b = hh(b, c, d, a, w(2), 23, -995338651);
+    a = ii(a, b, c, d, w(0), 6, -198630844);
+    d = ii(d, a, b, c, w(7), 10, 1126891415);
+    c = ii(c, d, a, b, w(14), 15, -1416354905);
+    b = ii(b, c, d, a, w(5), 21, -57434055);
+    a = ii(a, b, c, d, w(12), 6, 1700485571);
+    d = ii(d, a, b, c, w(3), 10, -1894986606);
+    c = ii(c, d, a, b, w(10), 15, -1051523);
+    b = ii(b, c, d, a, w(1), 21, -2054922799);
+    a = ii(a, b, c, d, w(8), 6, 1873313359);
+    d = ii(d, a, b, c, w(15), 10, -30611744);
+    c = ii(c, d, a, b, w(6), 15, -1560198380);
+    b = ii(b, c, d, a, w(13), 21, 1309151649);
+    a = ii(a, b, c, d, w(4), 6, -145523070);
+    d = ii(d, a, b, c, w(11), 10, -1120210379);
+    c = ii(c, d, a, b, w(2), 15, 718787259);
+    b = ii(b, c, d, a, w(9), 21, -343485551);
+    a = add(a, oa);
+    b = add(b, ob);
+    c = add(c, oc);
+    d = add(d, od);
+  }
+  const out = new Uint8Array(16);
+  [a, b, c, d].forEach((word, wi) => {
+    for (let j = 0; j < 4; j++) out[wi * 4 + j] = word >>> j * 8 & 255;
+  });
+  return out;
+}
+function md5Hex(input) {
+  return toHex(md5Bytes(input));
+}
+function sha1Bytes(input) {
+  const msg = toBytes(input);
+  const len = msg.length;
+  const withLen = len + 9;
+  const blocks = Math.ceil(withLen / 64);
+  const total = blocks * 64;
+  const buf = new Uint8Array(total);
+  buf.set(msg);
+  buf[len] = 128;
+  const bitLen = len * 8;
+  buf[total - 4] = bitLen >>> 24 & 255;
+  buf[total - 3] = bitLen >>> 16 & 255;
+  buf[total - 2] = bitLen >>> 8 & 255;
+  buf[total - 1] = bitLen & 255;
+  let h0 = 1732584193, h1 = -271733879, h2 = -1732584194, h3 = 271733878, h4 = -1009589776;
+  const w = new Int32Array(80);
+  const rol = (n, s) => n << s | n >>> 32 - s;
+  for (let i = 0; i < total; i += 64) {
+    for (let j = 0; j < 16; j++) {
+      const k = i + j * 4;
+      w[j] = buf[k] << 24 | buf[k + 1] << 16 | buf[k + 2] << 8 | buf[k + 3];
+    }
+    for (let j = 16; j < 80; j++) w[j] = rol(w[j - 3] ^ w[j - 8] ^ w[j - 14] ^ w[j - 16], 1);
+    let a = h0, b = h1, c = h2, d = h3, e = h4;
+    for (let j = 0; j < 80; j++) {
+      let f, k;
+      if (j < 20) {
+        f = b & c | ~b & d;
+        k = 1518500249;
+      } else if (j < 40) {
+        f = b ^ c ^ d;
+        k = 1859775393;
+      } else if (j < 60) {
+        f = b & c | b & d | c & d;
+        k = -1894007588;
+      } else {
+        f = b ^ c ^ d;
+        k = -899497514;
+      }
+      const t = rol(a, 5) + f + e + k + w[j] | 0;
+      e = d;
+      d = c;
+      c = rol(b, 30);
+      b = a;
+      a = t;
+    }
+    h0 = h0 + a | 0;
+    h1 = h1 + b | 0;
+    h2 = h2 + c | 0;
+    h3 = h3 + d | 0;
+    h4 = h4 + e | 0;
+  }
+  const out = new Uint8Array(20);
+  [h0, h1, h2, h3, h4].forEach((h, hi) => {
+    out[hi * 4] = h >>> 24 & 255;
+    out[hi * 4 + 1] = h >>> 16 & 255;
+    out[hi * 4 + 2] = h >>> 8 & 255;
+    out[hi * 4 + 3] = h & 255;
+  });
+  return out;
+}
+function toHex(bytes) {
+  let s = "";
+  for (const b of bytes) s += b.toString(16).padStart(2, "0");
+  return s;
+}
+function randomBytes(n) {
+  const out = new Uint8Array(n);
+  globalThis.crypto.getRandomValues(out);
+  return out;
+}
+
+export {
+  md5Hex,
+  sha1Bytes,
+  randomBytes
+};
+//# sourceMappingURL=chunk-OHX6MIUZ.js.map

package/dist/{chunk-VKSOTZK3.js → chunk-OWGCOGKK.js}

@@ -10,9 +10,10 @@ import {
   isQueryExpressionFilter,
   isSeedFileSource,
   middlewareEntryGuid,
+  reversedRegexOperands,
   stackReferencesAuth,
   tableColumns
-} from "./chunk-LBYWGMOA.js";
+} from "./chunk-QK7ZQJLP.js";
 import {
   CANONICAL_PAYLOAD_KEYS,
   REFERENCEABLE_KINDS,
@@ -25,7 +26,7 @@ import {
   mintCanonical,
   recordObserved,
   resolveRef
-} from "./chunk-7JDT4PBU.js";
+} from "./chunk-VAF6A3YD.js";
 
 // src/workspace/seed-coerce.ts
 function coerceScalarValue(label, column, type, value, values) {
@@ -295,6 +296,91 @@ function checkInternalColumnReads(statements, owner, tablesByGuid, bag) {
     );
   }
 }
+var DB_GET_BY_ID = "mvp:dbo_get";
+var ROW_BINDING_STATEMENTS = /* @__PURE__ */ new Set([DB_GET, DB_GET_BY_ID]);
+var INT_COLUMN_TYPES = /* @__PURE__ */ new Set(["int"]);
+function isZeroDefault(value) {
+  return value === 0 || value === "0";
+}
+function checkGetByIdZero(record, statements, owner, tablesByGuid, bag) {
+  const zeroDefaultInputs = /* @__PURE__ */ new Set();
+  if (Array.isArray(record.input)) {
+    for (const entry of record.input) {
+      const declared = entry;
+      if (typeof declared?.name === "string" && isZeroDefault(declared.default)) {
+        zeroDefaultInputs.add(declared.name);
+      }
+    }
+  }
+  const bindings = /* @__PURE__ */ new Map();
+  for (const statement of statements) {
+    if (!ROW_BINDING_STATEMENTS.has(statement.name)) continue;
+    const as = statement.as;
+    if (typeof as !== "string" || as === "") continue;
+    const guid = statementTableGuid(statement);
+    const def = guid === void 0 ? void 0 : tablesByGuid.get(guid);
+    if (def) bindings.set(as, def);
+  }
+  const tested = /* @__PURE__ */ new Set();
+  for (const statement of statements) {
+    walkNodes(statement, (node) => {
+      if (typeof node.operand === "string") tested.add(node.operand);
+    });
+  }
+  const reported = /* @__PURE__ */ new Set();
+  for (const statement of statements) {
+    if (statement.name !== DB_GET_BY_ID || !Array.isArray(statement.input)) continue;
+    for (const entry of statement.input) {
+      const cell = entry;
+      if (cell?.name !== "id") continue;
+      if (Array.isArray(cell.filters) && cell.filters.length > 0) continue;
+      const source = zeroIdSource(cell, zeroDefaultInputs, bindings);
+      if (!source) continue;
+      if (source.reference !== void 0 && tested.has(source.reference)) continue;
+      if (reported.has(source.key)) continue;
+      reported.add(source.key);
+      bag.warn(
+        "db.get-by-id-zero",
+        `${owner}: the \`id\` of \`s.db.get_by_id\` ${source.because}, and the engine validates that key as \`>= 1\` \u2014 a \`0\` does not miss, it fails the whole request with HTTP 400 \`Value is less than the minimum value of 1\` naming a \`param\` the caller never sent. Inside a \`foreach\` that 400 ends the request, so one unset key loses every other row's work. Read a nullable foreign key with the field-match form, which binds \`null\` on \`0\` instead: \`s.db.get({ table, fieldName: "id", fieldValue: ${source.operand}, as })\`.`
+      );
+    }
+  }
+}
+function zeroIdSource(cell, zeroDefaultInputs, bindings) {
+  const value = typeof cell.value === "string" ? cell.value : "";
+  if ((cell.tag === "const:int" || cell.tag === "const:decimal") && Number(value) === 0) {
+    return {
+      key: "literal:0",
+      because: "is the literal `c.int(0)`",
+      operand: "c.int(0)"
+    };
+  }
+  if (cell.tag === "input" && zeroDefaultInputs.has(inputBase(value))) {
+    return {
+      key: `input:${value}`,
+      reference: value,
+      because: `is \`inp("${value}")\`, whose declared input default is \`0\` \u2014 an omitted input stands the sentinel up with nobody having written it`,
+      operand: `inp("${value}")`
+    };
+  }
+  if (cell.tag === "var") {
+    const dot = value.indexOf(".");
+    if (dot > 0) {
+      const def = bindings.get(value.slice(0, dot));
+      const column = value.slice(dot + 1);
+      const col = def && tableColumns(def).find((candidate) => candidate.name === column);
+      if (col && INT_COLUMN_TYPES.has(col.type) && isZeroDefault(col.default)) {
+        return {
+          key: `var:${value}`,
+          reference: value,
+          because: `is \`ref("${value}")\`, and "${column}" on table "${def.name}" is declared \`default: 0\` \u2014 every row that never set the link carries the sentinel`,
+          operand: `ref("${value}")`
+        };
+      }
+    }
+  }
+  return null;
+}
 function collectInputRefs(node, out) {
   walkNodes(node, (record) => {
     if (record.tag !== "input") return;
@@ -435,6 +521,7 @@ function checkStacks(tables, sections, bag) {
         }
       }
       checkInternalColumnReads(statements, owner, tablesByGuid, bag);
+      checkGetByIdZero(obj, statements, owner, tablesByGuid, bag);
     }
   }
 }
@@ -493,6 +580,28 @@ function checkInterpolatedValues(sections, bag) {
     }
   }
 }
+function checkRegexOperandOrder(sections, bag) {
+  for (const [payloadKey, arr] of Object.entries(sections)) {
+    for (const obj of arr ?? []) {
+      if (!obj || typeof obj !== "object") continue;
+      const name = obj.name;
+      const seen = /* @__PURE__ */ new Set();
+      walkNodes(obj, (record) => {
+        if (typeof record.tag !== "string" || typeof record.value !== "string") return;
+        if (!Array.isArray(record.filters)) return;
+        const reversed = reversedRegexOperands(record);
+        if (!reversed) return;
+        seen.add(`\`${reversed.filter}\` (pattern ${JSON.stringify(reversed.subject)})`);
+      });
+      if (seen.size === 0) continue;
+      const owner = `${payloadKey} "${typeof name === "string" ? name : "?"}"`;
+      bag.warn(
+        "value.regex-operands-reversed",
+        `${owner} pipes a regex filter's SUBJECT and passes its PATTERN as the argument: ${[...seen].join("; ")}. The regex family is pattern-piped \u2014 the piped value is the PATTERN and the argument is the text tested against it, the reverse of every other filter \u2014 so this answers false for every input with HTTP 200 and no error, and a precondition built on it lets through the values it exists to refuse. Swap the operands: \`withFilters(c.regex(\u2026), fl.regex_test(subject))\`.`
+      );
+    }
+  }
+}
 function checkSeed(tables, bag) {
   for (const def of tables) {
     const source = def.seed;
@@ -506,6 +615,18 @@ function checkSeed(tables, bag) {
     }
   }
 }
+var RESERVED_COLUMN_NAMES = /* @__PURE__ */ new Set(["run"]);
+function checkReservedColumnNames(tables, bag) {
+  for (const def of tables) {
+    for (const col of tableColumns(def)) {
+      if (!RESERVED_COLUMN_NAMES.has(col.name)) continue;
+      bag.warn(
+        "table.reserved-column-name",
+        `table "${def.name}": the column name \`${col.name}\` is reserved by the engine \u2014 it is the key a block statement stores its sub-stack under, and an insert's parameter map collides with it. The table deploys and reads back correctly, and then EVERY \`s.db.add\` into it fails with HTTP 400 naming \`${col.name}\` and complaining about the value \u2014 at every column type, and whether the statement supplies a value or leaves the default to stand in. Rename the column (\`${col.name}_id\`, \`${col.name}s\`); the match is exact and case sensitive, so nothing else is affected.`
+      );
+    }
+  }
+}
 var GATING_ACTIONS = {
   realtime_server: ["connect"],
   channel: ["join"]
@@ -728,6 +849,34 @@ function checkNullMatchArgs(sections, bag) {
     }
   }
 }
+var URL_ONLY_VERBS = /* @__PURE__ */ new Set(["GET", "DELETE", "HEAD"]);
+function checkPathSegmentCandidates(sections, bag) {
+  for (const obj of sections["query"] ?? []) {
+    if (!obj || typeof obj !== "object") continue;
+    const query = obj;
+    const name = typeof query.name === "string" ? query.name : "";
+    const verb = typeof query.verb === "string" ? query.verb : "";
+    if (!URL_ONLY_VERBS.has(verb)) continue;
+    const statements = [];
+    collectStatements(obj, statements);
+    const addressing = /* @__PURE__ */ new Set();
+    for (const statement of statements) {
+      const matchArg = DB_MATCH_ARG[statement.name];
+      if (matchArg === void 0) continue;
+      const cell = statementInput(statement, matchArg);
+      if (cell?.tag !== "input") continue;
+      if (typeof cell?.value !== "string" || cell.value === "") continue;
+      if (name.includes(`{${cell.value}}`)) continue;
+      addressing.add(cell.value);
+    }
+    for (const param of addressing) {
+      bag.warn(
+        "query.path-segment-candidate",
+        `query "${name}" (${verb}) looks up one row by the \`${param}\` input, but the path declares no \`{${param}}\` segment \u2014 so the value arrives as \`?${param}=\u2026\` instead of addressing the resource. The endpoint works, but the route is not addressable the way a REST client expects, and \`getPath()\` types as static, so a caller cannot pass the value positionally. Put it in the path: \`name: "${name}/{${param}}"\` (the segment may sit anywhere \u2014 \`"${name}/{${param}}/edit"\` routes too), keeping the \`${param}\` input as it is; the segment binds to the input of the same name. Leave it as-is if \`${param}\` really is a query-string param rather than part of the address.`
+      );
+    }
+  }
+}
 function checkSameNameSiblings(sections, bag) {
   const appNames = appNamesByGuid(sections["app"]);
   for (const [payloadKey, arr] of Object.entries(sections)) {
@@ -1457,6 +1606,7 @@ var Xano = class {
     checkStacks(this.tableDefs, sections, bag);
     checkExpressionOperands(sections, bag);
     checkInterpolatedValues(sections, bag);
+    checkRegexOperandOrder(sections, bag);
     checkReferences(this.bundleType, sections, this.workspaceConfig.guid, bag);
     checkDecodeOnlyStatements(sections, bag);
     checkRunFamilyHosts(sections, bag);
@@ -1469,8 +1619,10 @@ var Xano = class {
     checkUnboundVarRefs(sections, bag);
     checkSafeRefMatchArgs(sections, bag);
     checkNullMatchArgs(sections, bag);
+    checkPathSegmentCandidates(sections, bag);
     checkSameNameSiblings(sections, bag);
     checkSeed(this.tableDefs, bag);
+    checkReservedColumnNames(this.tableDefs, bag);
     checkKnowledge(sections, bag, { resolved: options.knowledge !== void 0 });
     checkRealtimePublish(this.bundleType, sections, bag);
     bag.flush();
@@ -1706,4 +1858,4 @@ export {
   Xano,
   workspace
 };
-//# sourceMappingURL=chunk-VKSOTZK3.js.map
+//# sourceMappingURL=chunk-OWGCOGKK.js.map