@xanots/sdk 0.0.10 → 0.0.12

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   defineFunction,
   fileUrl
-} from "./chunk-XHEXOES3.js";
+} from "./chunk-5YDINUAP.js";
 import {
   TEST_EXPECT_TYPES,
   expect
-} from "./chunk-75Z74TA7.js";
+} from "./chunk-YX22LKQE.js";
 import {
   addon,
   agent,
@@ -17,7 +17,7 @@ import {
   task,
   tool,
   workflowTest
-} from "./chunk-5R73LFWK.js";
+} from "./chunk-VRNZ2NVV.js";
 import {
   actionCall,
   actionPackageCall,
@@ -100,11 +100,11 @@ import {
   workflowTestCall,
   workspaceConfig,
   workspaceTrigger
-} from "./chunk-P6TAVLOX.js";
+} from "./chunk-GSP2BY4F.js";
 import {
   Xano,
   workspace
-} from "./chunk-VKSOTZK3.js";
+} from "./chunk-QYSQ3UDO.js";
 import {
   LAMBDA_BINDINGS,
   LAMBDA_CODE_FILTERS,
@@ -148,16 +148,17 @@ import {
   toSearchParams,
   toolset,
   withFilters
-} from "./chunk-LBYWGMOA.js";
-import "./chunk-WHOJWOSV.js";
-import {
-  annotate,
-  statements
-} from "./chunk-5XZ744TS.js";
+} from "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
 import {
   resetLockOverrides,
   seedLockOverrides
-} from "./chunk-7JDT4PBU.js";
+} from "./chunk-XWFRNJMQ.js";
+import {
+  annotate,
+  statements
+} from "./chunk-2ZCUO2UG.js";
+import "./chunk-OHX6MIUZ.js";
 export {
   LAMBDA_BINDINGS,
   LAMBDA_CODE_FILTERS,

package/dist/init-command-23FFNUFT.js

@@ -0,0 +1,32 @@
+import {
+  projectShellFiles,
+  resolveFromSource,
+  runInitCommand,
+  sanitizeAppName
+} from "./chunk-VPAWRBK5.js";
+import {
+  resolveAiFlags
+} from "./chunk-VK26K7AY.js";
+import "./chunk-ZSYZTGJH.js";
+import "./chunk-RQNMTDXD.js";
+import "./chunk-XT3XQ4PF.js";
+import "./chunk-7WRJPKGK.js";
+import "./chunk-3LQGF2WS.js";
+import "./chunk-Z2ZIE5CO.js";
+import "./chunk-GNPVYOPB.js";
+import "./chunk-EZG76F7R.js";
+import "./chunk-QYSQ3UDO.js";
+import "./chunk-V5Y7D4LH.js";
+import "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
+import "./chunk-XWFRNJMQ.js";
+import "./chunk-2ZCUO2UG.js";
+import "./chunk-OHX6MIUZ.js";
+export {
+  projectShellFiles,
+  resolveAiFlags,
+  resolveFromSource,
+  runInitCommand,
+  sanitizeAppName
+};
+//# sourceMappingURL=init-command-23FFNUFT.js.map

package/dist/internal.d.ts

@@ -1,24 +1,19 @@
-import { F as FunctionXdo } from './response-CVAE2kMj.js';
-export { a as FIELD_METHODS, R as REFERENCEABLE_KINDS, d as deriveGuid, e as encodeResponse, b as encodeStatement, g as getStatementFactory, i as isRegisteredStatement, r as resolveRef, t as toNestedFields } from './response-CVAE2kMj.js';
-import { S as StatementSpec, F as FunctionDef, O as ObjectKind } from './store-BG1UPZ3Z.js';
-export { A as AdoptChange, a as AdoptResult, B as Bundle, b as BundlePayload, c as BundleType, d as FILTER_NAMES, G as GENERATED_STATEMENT_NAMES, K as KNOWLEDGE_DIR, e as KNOWLEDGE_FILE, L as LLMS_TXT, f as LOCK_VERSION, g as LockEntry, h as LockExportContext, i as LockFile, M as Manifest, j as ManifestField, k as ManifestKind, l as ManifestStatement, m as MergeResult, P as PAYLOAD_ARRAY_KEYS, n as PayloadArrayKey, Q as QUERY_EXPRESSION_FILTERS, R as RenameResult, T as TOTAL_OBJECT_KINDS, V as VECTOR_FILTERS, W as WORKSPACE_KEY, o as addonKind, p as adoptFromBundle, q as agentKind, r as apiGroupKind, s as buildBundle, t as buildManifest, u as buildMiddlewareBlock, v as buildWorkspaceHistory, w as calcSignatureJson, x as channelPathParams, y as createLockContext, z as declaredServicePorts, C as emptyLock, D as encodeAddon, E as encodeAgent, H as encodeApiGroup, I as encodeColumn, J as encodeContainerHistory, N as encodeFromSpec, U as encodeHistory, X as encodeIndex, Y as encodeKnowledge, Z as encodeMcpServer, _ as encodeMicroservice, $ as encodeMiddleware, a0 as encodeMiddlewareEntry, a1 as encodeMiddlewareList, a2 as encodeObject, a3 as encodeQuery, a4 as encodeRealtimeChannel, a5 as encodeRealtimeMessage, a6 as encodeRealtimeServer, a7 as encodeSchedule, a8 as encodeTable, a9 as encodeTask, aa as encodeTool, ab as encodeToolRefs, ac as encodeToolsetBase, ad as encodeTrigger, ae as encodeView, af as encodeWorkflowTest, ag as encodeWorkspaceConfig, ah as generatedStatements, ai as getKind, aj as getLockedCanonical, ak as getLockedGuid, al as isKnowledgeDirSource, am as isKnowledgeFileSource, an as isLockSeeded, ao as isQueryExpressionFilter, ap as isRegisteredKind, aq as knowledgeKind, ar as lockKey, as as mcpServerKind, at as mergeObserved, au as microserviceKind, av as middlewareKind, aw as mintCanonical, ax as parseLock, ay as phpJsonEncode, az as queryKind, aA as realtimeChannelGuid, aB as realtimeChannelKind, aC as realtimeMessageGuid, aD as realtimeMessageKind, aE as realtimeServerKind, aF as recordObserved, aG as registerKind, aH as registerSpec, aI as registeredKinds, aJ as renameLockEntry, aK as renderDocs, aL as renderLlmsTxt, aM as resolveAuthRef, aN as resolvePayloadKey, aO as resolveRealtimeServerCanonical, aP as resolveToolsetCanonical, aQ as serializeBundle, aR as serializeLock, aS as tableKind, aT as taskKind, aU as toolKind, aV as triggerKind, aW as validateLockModel, aX as workflowTestKind, aY as workspaceKind } from './store-BG1UPZ3Z.js';
+export { F as FIELD_METHODS, R as REFERENCEABLE_KINDS, d as deriveGuid, e as encodeResponse, a as encodeStatement, g as getStatementFactory, i as isRegisteredStatement, r as resolveRef, t as toNestedFields } from './response-D6xGLEIn.js';
+import { S as StatementSpec, F as FunctionDef, O as ObjectKind } from './store-DAnUIi1T.js';
+export { A as AdoptChange, a as AdoptResult, B as Bundle, b as BundlePayload, c as BundleType, d as FILTER_NAMES, G as GENERATED_STATEMENT_NAMES, K as KNOWLEDGE_DIR, e as KNOWLEDGE_FILE, L as LLMS_TXT, f as LOCK_VERSION, g as LockEntry, h as LockExportContext, i as LockFile, M as Manifest, j as ManifestField, k as ManifestKind, l as ManifestStatement, m as MergeResult, P as PAYLOAD_ARRAY_KEYS, n as PayloadArrayKey, Q as QUERY_EXPRESSION_FILTERS, R as RenameResult, T as TOTAL_OBJECT_KINDS, V as VECTOR_FILTERS, W as WORKSPACE_KEY, o as addonKind, p as adoptFromBundle, q as agentKind, r as apiGroupKind, s as buildBundle, t as buildManifest, u as buildMiddlewareBlock, v as buildWorkspaceHistory, w as calcSignatureJson, x as channelPathParams, y as createLockContext, z as declaredServicePorts, C as emptyLock, D as encodeAddon, E as encodeAgent, H as encodeApiGroup, I as encodeColumn, J as encodeContainerHistory, N as encodeFromSpec, U as encodeHistory, X as encodeIndex, Y as encodeKnowledge, Z as encodeMcpServer, _ as encodeMicroservice, $ as encodeMiddleware, a0 as encodeMiddlewareEntry, a1 as encodeMiddlewareList, a2 as encodeObject, a3 as encodeQuery, a4 as encodeRealtimeChannel, a5 as encodeRealtimeMessage, a6 as encodeRealtimeServer, a7 as encodeSchedule, a8 as encodeTable, a9 as encodeTask, aa as encodeTool, ab as encodeToolRefs, ac as encodeToolsetBase, ad as encodeTrigger, ae as encodeView, af as encodeWorkflowTest, ag as encodeWorkspaceConfig, ah as generatedStatements, ai as getKind, aj as getLockedCanonical, ak as getLockedGuid, al as isKnowledgeDirSource, am as isKnowledgeFileSource, an as isLockSeeded, ao as isQueryExpressionFilter, ap as isRegisteredKind, aq as knowledgeKind, ar as lockKey, as as mcpServerKind, at as mergeObserved, au as microserviceKind, av as middlewareKind, aw as mintCanonical, ax as parseLock, ay as phpJsonEncode, az as queryKind, aA as realtimeChannelGuid, aB as realtimeChannelKind, aC as realtimeMessageGuid, aD as realtimeMessageKind, aE as realtimeServerKind, aF as recordObserved, aG as registerKind, aH as registerSpec, aI as registeredKinds, aJ as renameLockEntry, aK as renderDocs, aL as renderLlmsTxt, aM as resolveAuthRef, aN as resolvePayloadKey, aO as resolveRealtimeServerCanonical, aP as resolveToolsetCanonical, aQ as serializeBundle, aR as serializeLock, aS as tableKind, aT as taskKind, aU as toolKind, aV as triggerKind, aW as validateLockModel, aX as workflowTestKind, aY as workspaceKind } from './store-DAnUIi1T.js';
+import { F as FunctionXdo } from './xdo-ODuJklk6.js';
 
 /**
- * AUTO-GENERATED by scripts/codegen.ts — DO NOT EDIT BY HAND.
- *
- * The declarative statement catalog (U9): one StatementSpec per cleanly
+ * The declarative statement catalog: one StatementSpec per cleanly
  * interpretable statement schema, generated from the Xano engine's statement
  * schema definitions. The engine-only `output` flag is pinned from the
- * persisted golden fixtures (KTD-4). Regenerate with `npm run codegen`.
- *
- * Coverage: 153 declarative statements generated.
- * Deferred (see PENDING.md): 63.
+ * persisted golden fixtures.
  */
 
 declare const GENERATED_SPECS: StatementSpec[];
 
 /**
- * The `function` object kind (KTD-2). This is the MVP's `compile()` envelope
+ * The `function` object kind. This is the MVP's `compile()` envelope
  * logic, re-homed as the first registered kind. Behavior is unchanged — the
  * MVP golden test is the regression guard.
  */
@@ -39,15 +34,14 @@ declare const functionKind: ObjectKind<FunctionDef, FunctionXdo>;
  * `mvp:microservice_request` and the engine files its schema under the `api`
  * namespace, but a microservice is a first-class workspace object here — with
  * its own def factory and deploy path — so its call statement is filed beside
- * it. The same decision is recorded as a `NAMESPACE_OVERRIDES` entry in
- * `scripts/codegen.ts`, which is what keeps the generated factory tree in
- * agreement with this key.
+ * it. The same decision is mirrored in codegen, which is what keeps the
+ * generated factory tree in agreement with this key.
  *
  * A second entry does the same: `lambda` is stored as `mvp:lambda` and the
  * engine files its schema under the `api` namespace, but a lambda runs wherever
  * a stack runs — in functions, tasks, middleware, and triggers, not only APIs —
  * so filing it under `s.api.*` said something false about where it is available
- * (issue #221). It is `s.lambda`, with the matching `NAMESPACE_OVERRIDES` entry.
+ *. It is `s.lambda`, with the matching `NAMESPACE_OVERRIDES` entry.
  *
  * One surface-pair shares a stored name (so the catalog has one fewer unique
  * stored name than surfaces): `util.get_raw_input`/`util.get_input` →

package/dist/internal.js

@@ -1,11 +1,7 @@
 import {
   FIELD_METHODS,
-  IMPLEMENTED_STATEMENTS,
-  STATEMENT_SURFACES,
-  SUPERSEDED_STATEMENTS,
-  TOTAL_STATEMENTS,
-  sPathOf
-} from "./chunk-4BXJGVZ3.js";
+  SUPERSEDED_STATEMENTS
+} from "./chunk-PR7OXHGZ.js";
 import {
   addonKind,
   agentKind,
@@ -33,7 +29,7 @@ import {
   taskKind,
   toolKind,
   workflowTestKind
-} from "./chunk-5R73LFWK.js";
+} from "./chunk-VRNZ2NVV.js";
 import {
   GENERATED_SPECS,
   GENERATED_STATEMENT_NAMES,
@@ -55,7 +51,13 @@ import {
   registerSpec,
   triggerKind,
   workspaceKind
-} from "./chunk-P6TAVLOX.js";
+} from "./chunk-GSP2BY4F.js";
+import {
+  IMPLEMENTED_STATEMENTS,
+  STATEMENT_SURFACES,
+  TOTAL_STATEMENTS,
+  sPathOf
+} from "./chunk-DCMANKMX.js";
 import {
   COMMANDS,
   FLAGS,
@@ -63,7 +65,7 @@ import {
   flagKey,
   flagSummary,
   visibleFlags
-} from "./chunk-DIA7CT7J.js";
+} from "./chunk-V5Y7D4LH.js";
 import {
   DECODE_ONLY_STATEMENTS,
   FILTER_NAMES,
@@ -109,13 +111,8 @@ import {
   serializeBundle,
   tableKind,
   toNestedFields
-} from "./chunk-LBYWGMOA.js";
-import "./chunk-WHOJWOSV.js";
-import {
-  encodeStatement,
-  getStatementFactory,
-  isRegisteredStatement
-} from "./chunk-5XZ744TS.js";
+} from "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
 import {
   LOCK_VERSION,
   REFERENCEABLE_KINDS,
@@ -137,7 +134,13 @@ import {
   resolveRef,
   serializeLock,
   validateLockModel
-} from "./chunk-7JDT4PBU.js";
+} from "./chunk-XWFRNJMQ.js";
+import {
+  encodeStatement,
+  getStatementFactory,
+  isRegisteredStatement
+} from "./chunk-2ZCUO2UG.js";
+import "./chunk-OHX6MIUZ.js";
 
 // src/statements/byte-evidence.ts
 var UNCONFIRMED_STATEMENTS = /* @__PURE__ */ new Set([]);
@@ -313,7 +316,7 @@ var VALUE_CONSTRUCTORS = [
   { name: "c.expression", signature: "(source: string) => Value", description: `Xano Expression Engine source, passed through VERBATIM \u2192 tag "const:expr2". The string IS the expression: c.expression('"Hi, " ~ $input.name'), c.expression("$var.price * $var.qty"). \u26A0\uFE0F NOT VALIDATED \u2014 never parsed or type-checked, invisible to InferResponse, and untouched by a rename that updates every typed ref(); a typo surfaces at runtime or as a wrong answer. Use it ONLY for syntax the typed surfaces cannot express (~ concatenation, inline arithmetic, conditionals) \u2014 prefer ref/inp/col, withFilters+fl.*, and obj() (which BUILDS a checked expression). Not the expr() condition builder.` },
   { name: "c.expressionLegacy", signature: "(source: string) => Value", legacy: true, description: "the older `const:expr` expression form, emitted by codegen for workspaces that still hold one \u2014 author `c.expression` instead." },
   { name: "c.now", signature: "() => Value", description: "Current time as epoch-ms \u2014 the engine-native const:epochms constant (no filter). Valid inline as a where/cmp operand. For cutoff math (cutoff = now - max_age) either compare inline or, for reuse/readability, hoist it into an s.set_var and compare against the var." },
-  { name: "obj", signature: "(fields: Record<string, Value | nested>) => ObjValue<typeof fields>", description: 'Dynamic object value \u2192 tag "const:expr2" (an object-literal expression string). The dynamic sibling of c.obj: members may be inp/ref/auth/col values, env()/setting()/sys.*, c.now(), c.* constants, nested records, or arrays \u2014 and each member may carry a FILTER CHAIN (withFilters + fl.*), which renders as the expression pipe `$var.row|get:"a.b"`. That matters most for the null-safe drill: db.get binds null on a miss, so ref(path, { safe: true }) inside an obj() is the normal shape, not a workaround \u2014 you do NOT need a preceding s.set_var to hoist it. The member record rides the return type, so InferResponse resolves each member the way it resolves a top-level response key \u2014 `response: { user: obj({ id: ref("row.id") }) }` derives `{ user: { id: Col | null } }`, and a raw nested object literal (`response: { user: { id: ref("row.id") } }`, auto-wrapped through this) derives the same. NEST WITH A RAW RECORD, not an inner obj() call: an inner call yields a const:expr2 value, which the expression serializer has no spelling for and THROWS. Still rejected: a filter ARGUMENT carrying its own chain (a trailing | binds to the whole value, not one argument), a DISABLED filter (an expression string cannot record that), and the output/response/toolset/reg tags \u2014 build those in a prior step and ref() them. Use for e.g. s.ai.agent.run args.' },
+  { name: "obj", signature: "(fields: Record<string, Value | nested>) => ObjValue<typeof fields>", description: 'Dynamic object value \u2192 tag "const:expr2" (an object-literal expression string). The dynamic sibling of c.obj: members may be inp/ref/auth/col values, env()/setting()/sys.*, c.now(), c.* constants, nested records, or arrays \u2014 and each member may carry a FILTER CHAIN (withFilters + fl.*), which renders as the expression pipe `$var.row|get:"a.b"`. That matters most for the null-safe drill: db.get binds null on a miss, so ref(path, { safe: true }) inside an obj() is the normal shape, not a workaround \u2014 you do NOT need a preceding s.set_var to hoist it. The member record rides the return type, so InferResponse resolves each member the way it resolves a top-level response key \u2014 `response: { user: obj({ id: ref("row.id") }) }` derives `{ user: { id: Col | null } }`, and a raw nested object literal (`response: { user: { id: ref("row.id") } }`, auto-wrapped through this) derives the same. A constant record or list has two spellings that both work and render identically: bare (`{ a: 1 }`, `[]`) or `c.obj(...)`/`c.array([...])` \u2014 prefer the bare form. NEST WITH A RAW RECORD, not an inner obj() call: an inner call yields a const:expr2 value, which the expression serializer has no spelling for and THROWS. The legacy blank `c.obj(null)` is refused here (it evaluates to null, not {}) \u2014 write c.null() or c.obj(). Still rejected: a filter ARGUMENT that carries its own chain or is a c.now() (a trailing | binds to the whole value, not one argument, and c.now() needs one), a DISABLED filter (an expression string cannot record that), and the output/response/toolset/reg tags \u2014 build those in a prior step and ref() them. Use for e.g. s.ai.agent.run args.' },
   { name: "ref", signature: "(name: string, opts?: { safe?: boolean }) => Value", description: 'Reference a stack variable \u2192 tag "var". Pass { safe: true } for null-safe nested access \u2014 a dotted ref("owner.user_id", { safe: true }) compiles through the get filter so it resolves to null instead of raising "Unable to locate var" when the base is null.' },
   {
     name: "inp",
@@ -541,6 +544,14 @@ var FILTER_NOTES = {
   ends_with: "piped value is the subject text; the arg is the substring searched for",
   starts_with: "piped value is the subject text; the arg is the substring searched for",
   icontains: "case-insensitive; piped value is the subject, the arg is the substring",
+  // The regex family REVERSES that direction, which is the whole reason it needs
+  // its own note: the pattern is piped and the subject is the argument. Written
+  // the other way round it reads correctly, type-checks, and answers false for
+  // every input, so the note has to state the order and the symptom.
+  regex_test: 'piped value is the PATTERN (build it with `c.regex(...)`); the arg is the subject \u2014 the REVERSE of `contains`/`starts_with`. Swapped, it answers false for every input with no error, so write `withFilters(c.regex("^a+$"), fl.regex_test(inp("s")))` (or name the arg: `fl.regex_test({ subject: inp("s") })`). A pattern found in the subject slot is refused at build time',
+  regex_match: "piped value is the PATTERN, the arg is the subject \u2014 see `regex_test`",
+  regex_match_all: "piped value is the PATTERN, the arg is the subject \u2014 see `regex_test`",
+  regex_replace: "piped value is the PATTERN, `subject` is the text searched \u2014 see `regex_test`. The replacement comes FIRST",
   iends_with: "case-insensitive; piped value is the subject, the arg is the substring",
   istarts_with: "case-insensitive; piped value is the subject, the arg is the substring",
   // "empty" is a specific set of values, not just null.
@@ -804,17 +815,19 @@ function renderSections(m) {
     `Coverage: object kinds ${m.coverage.objectKinds.implemented}/${m.coverage.objectKinds.total}, statement surfaces ${m.coverage.statements.implemented}/${m.coverage.statements.total}, filters ${m.coverage.filters.total} (${m.coverage.filters.typed} typed).`,
     // The shortfall by name: an agent that cannot see WHICH kinds are missing
     // will invent a factory for one. Reasons live in `manifest.json`.
-    `Not authorable here: ${m.coverage.objectKinds.unmodeled.map((k) => k.kind).join(", ")} \u2014 these cannot be authored and do not survive a pull; see \`coverage.objectKinds.unmodeled\` in \`manifest.json\`.`,
+    `Not authorable here: ${m.coverage.objectKinds.unmodeled.map((k) => k.kind).join(", ")} \u2014 these cannot be authored and do not survive a pull; reasons in \`coverage.objectKinds.unmodeled\`.`,
     "",
     "This file is the whole always-read surface: the mental model, the deploy contract,",
     "every gotcha, and control flow. Per-surface detail lives in the topic files listed",
-    "below \u2014 open the one whose condition matches the task, and skip the rest. For",
-    "exhaustive per-entry detail in NEITHER \u2014 a statement's full field schema with engine",
-    "defaults, a filter's complete argument list, the engine `storedName` mapping \u2014 do a",
-    "TARGETED lookup in the shipped `manifest.json` (grep or `jq` the one entry you need;",
-    "it is ~65k tokens, so never read it whole). Its top-level keys are `" + Object.keys(m).join("`, `") + "`. `statements` and `filters` are ARRAYS, not maps \u2014 SELECT, do not index:",
+    "below \u2014 open the one whose condition matches the task, skip the rest. For",
+    "exhaustive per-entry detail in NEITHER \u2014 a statement's field schema with engine",
+    "defaults, a filter's full argument list, the `storedName` mapping \u2014 do a TARGETED",
+    "lookup in the shipped `manifest.json` (a program imports it as",
+    '`@xanots/sdk/manifest.json`, needing `with { type: "json" }` in Node ESM;',
+    "it is ~60k tokens, so never read it whole). Its top-level keys are `" + Object.keys(m).join("`, `") + "`. `statements` and `filters` are ARRAYS, not maps \u2014 SELECT, do not index:",
     `  jq '.statements[] | select(.sPath=="db.get")' manifest.json`,
     `  jq '.filters[]    | select(.name=="json_decode")' manifest.json`,
+    `\u26A0 \`fields\` is null on the ${m.statements.filter((st) => st.declarative !== true).length} \`declarative: false\` statements (\`db.get\`, \u2026): typed wrappers whose arguments are the factory's \`.d.ts\` signature. Null \u2260 missing.`,
     `Select a statement on \`sPath\` (the \`s.*\` path you write), NOT \`surface\` (the XanoScript term): ${m.statements.filter((s) => s.surface !== s.sPath).length} of ${m.statements.length} differ \u2014 \`var\`\u2192\`set_var\`, \`break\`\u2192\`foreach_break\`, \`foreach.remove\`\u2192\`foreach_remove\`, and every \`expect.*\`.`,
     "",
     NAVIGATION_SLOT
@@ -1034,6 +1047,10 @@ function renderSections(m) {
     '  check-in \u2014 use `db.query({ where: [expr(col("habit"), "=", ...), expr(col("date"), "=", ...)], as })`',
     "  (a `where` array is ANDed) and branch on the result, rather than pushing the",
     "  check to the client.",
+    "- **A column named `run` is reserved.** The table deploys and reads back fine, then",
+    "  EVERY `s.db.add` into it 400s \u2014 at any column type, with or without a value \u2014 and",
+    "  the error names the column while complaining about the VALUE. Use `run_id`. Exact,",
+    "  case-sensitive, one name: `Run`/`runs`/`run_id` are fine. `--strict` fails on it.",
     "- **System columns are auto-injected.** `id` + `created_at` are prepended to",
     "  every table (`system: true` by default); declaring them by hand is redundant.",
     '  `id` is an `int` PK by default; pass `idType: "uuid"` on the table for a uuid key.',
@@ -1088,18 +1105,19 @@ function renderSections(m) {
     "  `xanots export`/`deploy` CLI path. Seed rows are never emitted into the bundle",
     "  either way; only `deploy` ships them. The `node:fs` writers",
     "  (`writeBundle`/`writeArtifact`) and lock-file I/O import from `@xanots/sdk/node`,",
-    "  NOT the browser-safe `@xanots/sdk` entry (which a frontend can import query",
-    "  defs from to use `getPath()`/`InferInput` with no Node built-ins in the bundle).",
+    "  NOT the browser-safe `@xanots/sdk` entry (a frontend imports defs from it for",
+    "  `getPath()`/`InferInput`).",
     "  The compiler machinery (per-kind `encode*`, the registries, the bundle serializer,",
     "  the lock model) is on `@xanots/sdk/internal` and is never needed to author.",
+    "  READING a bundle back is `@xanots/sdk/bundle` \u2014 a statement walker (`2.if.0` paths),",
+    "  a structural hash, `mvp:*` catalog, `tableRefOf`.",
     "- **Client bundle size / tree-shaking.** `@xanots/sdk` is `sideEffects: false` and pulls",
     "  no Node built-ins, so a bundler drops unused SDK exports. But importing a **def** for its",
     "  `getPath()`/`verb`/`getUrl()`/`getChannel()` also pulls whatever its `stack` references:",
     "  the `s.*`/`c.*` factory CALLS run at module load to BUILD it. Types are free.",
-    "  \u26A0 A FLOOR \u2014 **~289 kB minified (~57 kB gzipped)** for the FIRST def; splitting modules",
+    "  \u26A0 A FLOOR \u2014 **~267 kB minified (~65 kB gzipped)** for the FIRST def; splitting modules",
     "  never removes it. The floor is the RUNTIME, not the def: a second def, or a much richer",
-    "  one, adds ~1 kB. So the cost is paid by importing ANY def at all, and reducing what a",
-    "  def does will not reduce it.",
+    "  one, adds ~2 kB \u2014 so reducing what a def does will not reduce it.",
     "  Fix: `xanots routes <entry> --emit xano/routes.gen.ts` (`paths` is an accepted alias) \u2014 verbs, paths, and sockets as",
     '  plain data importing NOTHING, still compile-checked: `routePath("blog/{slug}", { slug })`,',
     '  `channelPath("rooms/{room_id}", { room_id })`, `socketUrl("chat", baseUrl)` (tenant base',
@@ -1153,17 +1171,18 @@ function renderSections(m) {
     "  return.",
     "- **Build regex-filter patterns with `c.regex(body, flags?)`, never `c.text`.**",
     "  The regex filters (`regex_test`/`regex_match`/`regex_replace`/\u2026) are pattern-piped",
-    "  PHP `preg_*`: the piped value is the PATTERN and must be delimiter-wrapped. A bare",
-    '  `c.text("^[^@\\s]+@...$")` is an invalid pattern that matches *nothing* for every',
-    "  input, so a precondition on it silently rejects all values (valid ones included).",
-    '  `c.regex("^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$", "i")` wraps + escapes it for you (accepts a',
-    "  JS `RegExp` too: `c.regex(/^\u2026$/i)`), and `withFilters` throws on a bare `c.text`",
-    "  pattern pointing here \u2014 from ANY position in the chain, so a normalizer in front",
-    '  (`withFilters(c.text("^hi"), fl.trim(), fl.regex_test(...))`) is refused too; nothing',
-    "  upstream adds the delimiters. `s.expect.to_match`'s `value` is the same PATTERN slot,",
-    "  refused the same way; a `ref`/`inp` pattern is passed through untouched, either place.",
-    "  Better still, prefer a native typed input",
-    "  (`input.email({...})`) over hand-rolled validation.",
+    "  PHP `preg_*`: the piped value is the PATTERN and must be delimiter-wrapped, and the",
+    '  ARGUMENT is the subject. A bare `c.text("^\u2026$")` is an invalid pattern that matches',
+    "  *nothing* for every input, so a precondition on it silently rejects all values.",
+    '  `c.regex(body, "i")` wraps + escapes it for you (a JS `RegExp` too: `c.regex(/^\u2026$/i)`).',
+    "  Reversed \u2014 subject piped, pattern in the argument \u2014 reads correctly, type-checks, and",
+    "  answers false for EVERY input, so an `if (matches) reject` guard admits what it",
+    "  refuses. `withFilters` throws on a bare `c.text` pattern from ANY position in",
+    "  the chain (a normalizer in front of the regex filter is refused too; nothing upstream",
+    "  adds the delimiters) and on a pattern found in the subject slot; `s.expect.to_match`",
+    "  is the same PATTERN slot, refused both ways; a `ref`/`inp` pattern is passed through untouched.",
+    "  `export()` warns on a reversed pair in stored bytes. Better still:",
+    "  a native typed input (`input.email`) over hand-rolled validation.",
     "- **Compose a rule set as SIBLINGS, not a folded chain.** `and(...rules)` takes any",
     "  number of terms and encodes flat; `rules.reduce((acc, r) => and(acc, r))` nests one",
     "  container per rule, which costs quadratic bytes (512 terms: 394 KiB flat, 21 MiB",
@@ -1243,7 +1262,7 @@ function renderSections(m) {
     '  - `verb`: `"GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD"` (required), UPPERCASE. Anything else \u2014 most often a lowercase `"post"` \u2014 makes `query()` THROW, because Xano does NOT reject it: it stores the verb as NULL, a null verb serves as GET, and the endpoint then answers on the wrong method while the one you meant 404s `Unable to locate request.`',
     "  - `apiGroup`: an `apiGroup()` def handle (or its name) \u2014 binds by guid, stable across syncs. Raw numeric `apiGroupId?` is the escape hatch and wins if both given.",
     '  - `auth`: `false` (no auth) or an auth-table id; `responseType`: `"standard" | "stream"` (default `standard`) \u2014 any other spelling THROWS, since Xano stores an unrecognized one as NULL and a null buffers as `standard`, so a misspelled stream quietly does not stream.',
-    '  - `name` is the endpoint PATH within the group. A `{param}` segment is a URL PATH PARAM bound to the input of the same name, and segments chain: `name: "blog/{slug}/review/{review_id}"` + `input: { slug: input.text(), review_id: input.int() }`. Read it with `inp("slug")` like any other input. Every `{param}` MUST have a matching input or `query()` THROWS \u2014 Xano treats an unbound marker as inert route text, so the endpoint would answer on the path and see nothing. A `{param}` need NOT be a whole segment (`"blog/post-{slug}"` routes fine), but its type must fit one segment (no object/list/json/file/geo/vector); there are no wildcards or patterns. `required: true` is NOT demanded (the engine\'s editor leaves path inputs unmarked). Inputs absent from the path are ordinary query-string/body params. Name charset is ONLY `A-Za-z0-9_-/{}`, max 200: a `.` (`"export.zip"`) is NOT rejected by Xano \u2014 it stores an EMPTY name that deploys clean then 404s forever, so `query()` THROWS. Use `"export_zip"` and set the extension in the response headers.',
+    '  - `name` is the endpoint PATH within the group. A `{param}` segment is a URL PATH PARAM bound to the input of the same name, and segments chain: `name: "blog/{slug}/review/{review_id}"` + `input: { slug: input.text(), review_id: input.int() }`. Read it with `inp("slug")` like any other input. Every `{param}` MUST have a matching input or `query()` THROWS \u2014 Xano treats an unbound marker as inert route text, so the endpoint would answer on the path and see nothing. A `{param}` need NOT be a whole segment (`"blog/post-{slug}"` routes fine), but its type must fit one segment (no object/list/json/file/geo/vector); there are no wildcards or patterns. `required: true` is NOT demanded (the engine\'s editor leaves path inputs unmarked). The CONVERSE is warned, not enforced: an input a `GET`/`DELETE`/`HEAD` looks ONE ROW up by (`s.db.get`/`get_by_id`/`has`/by-field edit/patch/delete) belongs in the path \u2014 `export()` warns `query.path-segment-candidate`. It still serves `?blog_id=1`, but the route is not addressable and `getPath()` types STATIC, so a caller cannot pass the value positionally. A segment is any value naming WHICH resource is wanted, not just an id (`"shop/{country}"`). An input that NARROWS A LIST (`s.db.query`) stays a query-string param. Inputs absent from the path are ordinary query-string/body params. Name charset is ONLY `A-Za-z0-9_-/{}`, max 200: a `.` (`"export.zip"`) is NOT rejected by Xano \u2014 it stores an EMPTY name that deploys clean then 404s forever, so `query()` THROWS. Use `"export_zip"` and set the extension in the response headers.',
     '  - **Client recipe:** `q.getPath({ params: { slug: "hello" } })` \u2192 `/api:<canonical>/blog/hello` \u2014 never interpolate by hand. `getPath` percent-encodes each value (so `?`/`#`/spaces stay in their segment) and throws on what encoding cannot contain: a `/`, and a value that IS `.`/`..` (a URL parser drops those before routing \u2014 `%2e` counts \u2014 addressing a different endpoint). The keys are typed from the literal `name`, so a typo is a compile error. The HANDLE\'s `q.toSearchParams(input)` drops path params for a GET; the free `query.toSearchParams(input)` has no view of the route and keeps every key.',
     "- `apiGroup({ name, guid?, canonical?, description?, docs?, swagger?, apiGroupEnabled?, documentation?, cors? })` \u2014 a query container; register it and bind queries to it via their `apiGroup`.",
     "  - `cors?`: `{ mode?, allowOrigins?: string[], allowHeaders?: string[], allowCredentials?, maxAge?, allowMethods?: { get?, post?, put?, patch?, delete?, head? } }`.",
@@ -1568,12 +1587,13 @@ function renderSections(m) {
     "which the DB applies atomically. Reserve the pipeline form for low-contention counters",
     "where a rare lost update is acceptable.",
     "\u26A0 `direct_query` needs the table's PHYSICAL Postgres name, which the typed surface",
-    "does NOT expose: the engine derives a physical name from workspace + table ids (of the",
-    "form `x<workspace_id>_<table_id>`, e.g. `x6_203970`), ids assigned at import \u2014 not knowable",
-    "from a `table()` def (identity is a name + guid, not the numeric id), and `sql_name`",
-    "persists empty. So the safe counter drops out of the typed surface: hardcode",
-    "the physical name after inspecting the deployed table. A typed atomic path needs an",
-    "engine change.",
+    "does NOT expose: the engine derives it from ids assigned at import \u2014 not knowable from a",
+    "`table()` def (identity is a name + guid, not the numeric id) \u2014 and `sql_name` persists",
+    "empty. The derived name is also NOT STABLE: a deploy is a full replace, so every table is",
+    "created afresh and the id in its name moves each time, on the same unchanged project. So",
+    "the safe counter drops out of the typed surface: resolve the physical name from",
+    "`information_schema` inside the request that uses it, and never store, cache or hardcode",
+    "one. A typed atomic path needs an engine change.",
     ""
   );
   const argFilters = m.filters.filter((fl) => fl.args?.length);
@@ -1644,7 +1664,7 @@ function renderSections(m) {
     "",
     "- `s.db.get({ table, fieldName?, fieldValue, lock?, output?, as? })` \u2014 one row by field match; `output` restricts returned columns (and overrides column visibility \u2014 it can pull `internal` columns like a password hash).",
     "- `s.db.get_by_id({ table, id, output?, addon?, tableAlias?, as? })` \u2014 get by primary key. Takes `id`, NOT `fieldName`/`fieldValue`; binds the row or `null` for an id that names no row. Both spellings are live in pulled workspaces.",
-    '  - \u26A0 `id` is validated `>= 1`, so the `0` sentinel an optional `f.tableRef` stores fails the request with HTTP 400 `Value is less than the minimum value of 1` \u2014 it does NOT bind `null`. The throw is not scoped to the lookup: inside a `foreach` it kills the whole request, so one unset FK loses every other row\'s work. Read a nullable FK with the field-match form, which binds `null` on `0` and lets the loop finish: `s.db.get({ table, fieldName: "id", fieldValue: ref("row.fk"), as })`.',
+    '  - \u26A0 `id` is validated `>= 1`, so the `0` sentinel an optional `f.tableRef` stores fails the request with HTTP 400 `Value is less than the minimum value of 1` \u2014 it does NOT bind `null`. The throw is not scoped to the lookup: inside a `foreach` it kills the whole request, so one unset FK loses every other row\'s work. Read a nullable FK with the field-match form, which binds `null` on `0` and lets the loop finish: `s.db.get({ table, fieldName: "id", fieldValue: ref("row.fk"), as })`. `export()` warns when the `id` is statically a `0` \u2014 the literal `c.int(0)`, an `inp()` whose declared input default is `0`, or a `ref()` to a column declared `default: 0` \u2014 and `--strict` fails the build.',
     "- `s.db.has({ table, fieldName?, fieldValue, as? })` \u2014 existence test.",
     "- `s.db.del({ table, fieldName?, fieldValue, as? })` \u2014 delete by field match.",
     "- `s.db.add({ table, row?, data?, output?, as? })` \u2014 insert; `row` is a partial keyed by column.",
@@ -1666,13 +1686,14 @@ function renderSections(m) {
     '    - \u26A0 `like`/`ilike` take the operand as the PATTERN, verbatim: a bare term matches only an exact whole-string equal, and the endpoint answers HTTP 200 with zero rows \u2014 nothing reports a problem, so a search box that matches nothing ships. For substring matching use `includes`/`not includes`, which wrap the operand in `%\u2026%` themselves and match case-INSENSITIVELY. Prefer them over a hand-built `"%" + term + "%"`, which is non-empty even for an empty term and so defeats `ignoreEmpty`; `includes` composes with it. `contains`/`@>`/`overlaps` are JSON/array containment, not text \u2014 on a text column they 400 `ParseError: Invalid value for param`.',
     "    - Compose nested boolean logic with `and(...)` / `or(...)` groups (also available on `addon()` `where`).",
     "    - An operand may be a bare value (`col`/`inp`/`ref`/`auth`/`c.*`) OR a **filtered** value (`withFilters(...)`) inline \u2014 the engine compiles the string and arithmetic filters (`trim`, `concat`, `upper`, `lower`, \u2026) into the SQL.",
-    "    - \u26A0 The REQUEST-TIME timestamp filters have no SQL form and kill the request with a bare fatal naming nothing: `epochms_transform`, `epochms_add_ms`, `epochms_add_secs`, `epochms_date`, `epochms_from_format`. For a relative cutoff use the SQL-side family instead (`epochms_add_day`, `epochms_sub_month`, `epochms_year`, \u2026) or compute it in an earlier `s.set_var` and `ref()` that. `export --strict` reports it; a bare `c.now()` operand is always fine.",
+    "    - \u26A0 The REQUEST-TIME timestamp filters have no SQL form and kill the request with a bare fatal naming nothing: `epochms_transform`, `epochms_add_ms`, `epochms_add_secs`, `epochms_date`, `epochms_from_format`. For a relative cutoff use the SQL-side family instead (`epochms_add_day`, `epochms_sub_month`, `epochms_year`, \u2026) \u2014 by raw name, since `fl.*` has no builder for them \u2014 or compute it in an earlier `s.set_var` and `ref()` that. `export --strict` reports it; a bare `c.now()` operand is always fine.",
     '  - `bind: [{ table, as?, join?, where? }]` \u2014 joins (`context.bind[]`). `join` defaults to `"inner"`. `as` defaults to the table name; two joins to the same table need distinct aliases.',
     '    - \u26A0 In `where`/`sort`/`eval` a JOINED column takes a dotted path (`col("team_row.id")`); THIS query\'s own columns stay **bare** (`col("team")`). Qualifying your own by table name needs `tableAlias` (same rule as `aggregate`) \u2014 without it the engine reads the operand as text and 400s `ParseError: Invalid value for param` naming the OTHER operand, so it throws at export instead.',
     '    - `bind: [{ table: team, as: "team_row", join: "left", where: expr(col("team"), "=", col("team_row.id")) }]`',
+    '    - \u26A0 A join does NOT put the joined table\'s columns on the returned row \u2014 with or without a `bind`, a row is the QUERIED table\'s columns, which is what `InferResponse` types. There is no `row.team_row`. To read a joined column, PROJECT it with an `eval` whose `name` is the dotted path: `eval: [{ name: "team_row.name", as: "team_name" }]` puts `team_name` on the row and on the inferred type. A bare `name` there is `Unsupported parameter reference` at runtime (it qualifies to the base table), and a dotted joined column in `output` is dropped with no error.',
     '  - `returnType` \u2014 `"list"` (default) | `"single"` | `"count"` | `"exists"` | `"stream"` | `"aggregate"`. Drives `context.return.type` AND the `InferResponse` shape: `count`\u2192`number`, `exists`\u2192`boolean`, `single`\u2192`Row|null`, `stream`\u2192`Row[]` (pageable, no envelope), `list`\u2192`Row[]`/envelope, `aggregate`\u2192rows keyed by the `aggregate.group`/`eval` aliases. \u26A0 A bare `count` of ZERO serializes as an EMPTY body, not `0` \u2014 a client parsing JSON gets a parse error on the one result it most needs to handle. Wrap it: `response: { count: ref("n") }`.',
     '  - `eval: [{ name, as, filters? }]` \u2014 computed columns (`context.eval[]`). Each `as` grafts onto the row as an `unknown` key in `InferResponse`; shadowing a real column throws. Write `name` **bare** (`"embedding"`) \u2014 it is alias-qualified on emit exactly like `aggregate` (a bare eval name is `Unsupported param format` at runtime), and the statement declares the alias it used. An `as` alias is `sort`able in the SAME query.',
-    "    - An `eval`/`sort`/`where` filter pipeline compiles to **SQL**, so it resolves a DIFFERENT registry than `fl.*` (which runs in the request): the vector family, geo `distance`/`within`/`covers`, `search_rank`, the aggregators. Exported as `QUERY_EXPRESSION_FILTERS`/`VECTOR_FILTERS`.",
+    '    - An `eval`/`sort`/`where` filter pipeline compiles to **SQL**, so it resolves a DIFFERENT registry than `fl.*` (which runs in the request): the vector family, geo `distance`/`within`/`covers`, `search_rank`, the aggregators. \u26A0 `fl.*` carries NO builder for these \u2014 reach them by raw name, `filter("epochms_add_day", \u2026)` or the `{ name, arg }` form. The name lists are `QUERY_EXPRESSION_FILTERS`/`VECTOR_FILTERS` on `@xanots/sdk/internal`.',
     '    - **Vector similarity search** \u2014 the ONLY way to query an `f.vector` column (no `SearchOp` does distance). `eval: [{ name: "embedding", as: "distance", filters: [{ name: "vector_cos_distance", arg: [inp("q")] }] }]` + `sort: [{ sortBy: "distance", dir: "asc" }]` ranks in the DATABASE over the column\'s index. Match the filter to the index `op` (`vector_cos_distance`\u2194`vector_cosine_ops`, `vector_l2_distance`\u2194`vector_l2_ops`, `vector_l1_distance`\u2194`vector_l1_ops`, `vector_inner_product`\u2194`vector_ip_ops`); `vector_cos_similarity` is the inverse, so sort it `desc`. The same filter on a `where` operand cuts off BY distance instead of by row count.',
     '  - `aggregate: { group?, eval?, sort?, paging? }` (with `returnType:"aggregate"`) builds `context.return.aggregate`. `group`/`eval` are `{ name, as, filters? }`, an aggregator like `sum`/`count` riding `filters`. Some aggregators resolve ONLY here, not in a runtime value pipeline: `count_distinct`, `median`, `to_list`/`to_distinct_list` (each with `_asc`/`_desc`), and `vector_distance`.',
     '    - \u26A0 Write each `name` as a **bare** column (`"status"`). It is alias-qualified to `"<alias>.status"` on emit \u2014 the engine rejects an unqualified column in an aggregate with `Unsupported param format`. An already-dotted `name` (a `bind`ed/joined column) passes through.',
@@ -1686,6 +1707,8 @@ function renderSections(m) {
     '  - `distinct` \u2014 `"auto"` (default) | `"yes"` | `"no"`, riding `context.return.<list|stream>.distinct`.',
     "- `s.db.truncate({ table, reset?, as? })` \xB7 `s.db.schema({ table, path, as? })`.",
     '- `s.db.direct_query({ sql, responseType?, args?, parser?, as? })` \u2014 `sql` is a **raw string** (not a `Value`); binds go in `args: Value[]`. `parser: "template_engine"` renders the body as a template first \u2014 how a query interpolates a column or table name a bound arg cannot carry; omit it for the default.',
+    "  - Template placeholders are Twig over the request scope: `{{ $input.name }}` for an input, `{{ $var.name }}` for a stack variable. \u26A0 A BARE `{{ name }}` renders as the empty string \u2014 HTTP 200, no error, a query that silently ran with a blank where the value belonged. A bound `?` arg carries a VALUE without the template at all.",
+    "  - \u26A0 A table's PHYSICAL name is **not stable across deploys**. A deploy is a full replace, so every table is created afresh and the id in its name moves every time \u2014 the same unchanged project redeployed three times gave one table three different names. Never store, cache, hardcode or fixture one: resolve it from `information_schema` inside the same request that uses it.",
     "- `s.db.external.<engine>.direct_query({ sql, connectionString, responseType?, args?, parser?, as? })` \u2014 same shape against an EXTERNAL database; `<engine>` is `postgres`/`mysql`/`mssql`/`oracle`/`snowflake`. `connectionString` is a `Value` \u2014 reach for `env(...)`, not a literal \u2014 stored as `context.connection_string_flex`. A bare string stores the older `context.connection_string` instead (an env-var name unless it looks like a URL); each form round-trips as itself.",
     "- `s.db.transaction({ body, as? })` \u2014 run a `Statement[]` atomically. `as` binds whatever the block returned.",
     "- `s.db.bulk.add({ table, items, allowIdField?, as? })` / `s.db.bulk.update` / `s.db.bulk.patch` \u2014 `items` is an array `Value`.",
@@ -2043,10 +2066,9 @@ function renderDocs(m) {
   const nav = [
     "## Topic files",
     "",
-    "Each line is a condition on the task. Open the files whose condition matches and",
-    "skip the rest \u2014 paths are relative to this file (`node_modules/@xanots/sdk/` once",
-    `installed), so a plain file read resolves them at the version you have.`,
-    `\`${LLMS_FULL_TXT}\` is everything concatenated \u2014 one fetch, for a reader that cannot open files.`,
+    "Paths are relative to this file (`node_modules/@xanots/sdk/` once installed), so a",
+    "plain file read resolves them at the version you have.",
+    `\`${LLMS_FULL_TXT}\` is everything concatenated \u2014 one fetch for a reader that cannot open files.`,
     "",
     ...topics.map((t) => `- [${t.title}](${t.path}): ${t.readWhen}`),
     ""

package/dist/io-UBDMMDH6.js

@@ -0,0 +1,12 @@
+import {
+  readLockFile,
+  writeLockFile
+} from "./chunk-3LQGF2WS.js";
+import "./chunk-GNPVYOPB.js";
+import "./chunk-XWFRNJMQ.js";
+import "./chunk-OHX6MIUZ.js";
+export {
+  readLockFile,
+  writeLockFile
+};
+//# sourceMappingURL=io-UBDMMDH6.js.map

package/dist/{live-diff-IXKBVG4K.js → live-diff-HCOTN5WC.js}

@@ -2,11 +2,11 @@ import {
   compareToLive,
   diffAgainstLive,
   sharedSchemaChanges
-} from "./chunk-DBFU47BJ.js";
-import "./chunk-3INK4Y4E.js";
+} from "./chunk-AOFFKSJC.js";
+import "./chunk-AE3PDSDS.js";
 export {
   compareToLive,
   diffAgainstLive,
   sharedSchemaChanges
 };
-//# sourceMappingURL=live-diff-IXKBVG4K.js.map
+//# sourceMappingURL=live-diff-HCOTN5WC.js.map

package/dist/{lock-GFXD6G2E.js → lock-HQ4KARU2.js}

@@ -17,7 +17,8 @@ import {
   resolvePayloadKey,
   serializeLock,
   validateLockModel
-} from "./chunk-7JDT4PBU.js";
+} from "./chunk-XWFRNJMQ.js";
+import "./chunk-OHX6MIUZ.js";
 export {
   CANONICAL_PAYLOAD_KEYS,
   LOCK_PAYLOAD_KEYS,
@@ -38,4 +39,4 @@ export {
   serializeLock,
   validateLockModel
 };
-//# sourceMappingURL=lock-GFXD6G2E.js.map
+//# sourceMappingURL=lock-HQ4KARU2.js.map

package/dist/{lock-commands-DQ7CUMIV.js → lock-commands-WCRC56ME.js}

@@ -1,25 +1,24 @@
 import {
   loadDefault
-} from "./chunk-ACCBOMCB.js";
-import "./chunk-CTD5ZCV6.js";
+} from "./chunk-XT3XQ4PF.js";
+import "./chunk-7WRJPKGK.js";
 import {
   readLockFile,
   writeLockFile
-} from "./chunk-OYMR5AMJ.js";
+} from "./chunk-3LQGF2WS.js";
 import {
   UsageError,
   missingArgument,
   unknownSubcommand
-} from "./chunk-F6CYJ7TN.js";
+} from "./chunk-Z2ZIE5CO.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-EZG76F7R.js";
 import {
   Xano
-} from "./chunk-VKSOTZK3.js";
-import "./chunk-DIA7CT7J.js";
-import "./chunk-LBYWGMOA.js";
-import "./chunk-WHOJWOSV.js";
-import "./chunk-5XZ744TS.js";
+} from "./chunk-QYSQ3UDO.js";
+import "./chunk-V5Y7D4LH.js";
+import "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
 import {
   adoptFromBundle,
   createLockContext,
@@ -28,7 +27,9 @@ import {
   resetLockOverrides,
   resolvePayloadKey,
   seedLockOverrides
-} from "./chunk-7JDT4PBU.js";
+} from "./chunk-XWFRNJMQ.js";
+import "./chunk-2ZCUO2UG.js";
+import "./chunk-OHX6MIUZ.js";
 
 // src/emit/lock-commands.ts
 import { existsSync, readFileSync } from "fs";
@@ -230,4 +231,4 @@ ${lines}
 export {
   runLockCommand
 };
-//# sourceMappingURL=lock-commands-DQ7CUMIV.js.map
+//# sourceMappingURL=lock-commands-WCRC56ME.js.map

package/dist/{login-command-Z6CHTA57.js → login-command-P7LXD5TE.js}

@@ -5,10 +5,10 @@ import {
 } from "./chunk-W5NOKYEG.js";
 import {
   promptLine
-} from "./chunk-AIZKXUNP.js";
+} from "./chunk-IMLYGQK6.js";
 import {
   envMetaCredentialVarsSet
-} from "./chunk-QKM4U5UK.js";
+} from "./chunk-TJS2AF5Y.js";
 import {
   CALLBACK_PATH,
   DEFAULT_PORT,
@@ -26,7 +26,7 @@ import {
 } from "./chunk-FE5I6S6N.js";
 import {
   UsageError
-} from "./chunk-F6CYJ7TN.js";
+} from "./chunk-Z2ZIE5CO.js";
 import "./chunk-GNPVYOPB.js";
 import {
   blank,
@@ -37,7 +37,7 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-DIA7CT7J.js";
+import "./chunk-V5Y7D4LH.js";
 
 // src/emit/login-command.ts
 import * as client from "openid-client";
@@ -177,7 +177,7 @@ async function attemptLogin(p) {
       `Could not determine the instance from the issued token (no readable \`aud\` claim). This is unexpected \u2014 please report it.`
     );
   }
-  const { resolveScopedWorkspaceId } = await import("./workspace-2COHDBM3.js");
+  const { resolveScopedWorkspaceId } = await import("./workspace-33KHFLX3.js");
   detail("Resolving the workspace this token is scoped to\u2026");
   const workspaceId = await resolveScopedWorkspaceId({
     access_token: tokens.access_token,
@@ -267,4 +267,4 @@ async function acquireByPaste(p) {
 export {
   runLoginCommand
 };
-//# sourceMappingURL=login-command-Z6CHTA57.js.map
+//# sourceMappingURL=login-command-P7LXD5TE.js.map

package/dist/{loop-D5NPL4VH.js → loop-IC5ISSYB.js}

@@ -3,10 +3,10 @@ import {
   indexByIdentity,
   kindIsRunnable,
   resolveMatch
-} from "./chunk-TCFIPDB3.js";
+} from "./chunk-AVGDL6RB.js";
 import {
   normalize
-} from "./chunk-3INK4Y4E.js";
+} from "./chunk-AE3PDSDS.js";
 
 // src/validate/loop.ts
 async function runValidateLoop(client, bundleText) {
@@ -90,4 +90,4 @@ export {
   runValidateLoop,
   runnableFunctionNames
 };
-//# sourceMappingURL=loop-D5NPL4VH.js.map
+//# sourceMappingURL=loop-IC5ISSYB.js.map