@xanots/sdk 0.0.11 → 0.0.13

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
   defineFunction,
   fileUrl
-} from "./chunk-XHEXOES3.js";
+} from "./chunk-5YDINUAP.js";
 import {
   TEST_EXPECT_TYPES,
   expect
-} from "./chunk-G4EJMQLD.js";
+} from "./chunk-YX22LKQE.js";
 import {
   addon,
   agent,
@@ -17,7 +17,7 @@ import {
   task,
   tool,
   workflowTest
-} from "./chunk-QYMAZRAU.js";
+} from "./chunk-PJNWOZMT.js";
 import {
   actionCall,
   actionPackageCall,
@@ -100,11 +100,11 @@ import {
   workflowTestCall,
   workspaceConfig,
   workspaceTrigger
-} from "./chunk-UOZMSF4C.js";
+} from "./chunk-BYQHCCYU.js";
 import {
   Xano,
   workspace
-} from "./chunk-OWGCOGKK.js";
+} from "./chunk-MEFMTICH.js";
 import {
   LAMBDA_BINDINGS,
   LAMBDA_CODE_FILTERS,
@@ -148,16 +148,16 @@ import {
   toSearchParams,
   toolset,
   withFilters
-} from "./chunk-QK7ZQJLP.js";
-import "./chunk-WHOJWOSV.js";
+} from "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
 import {
   resetLockOverrides,
   seedLockOverrides
-} from "./chunk-VAF6A3YD.js";
+} from "./chunk-XWFRNJMQ.js";
 import {
   annotate,
   statements
-} from "./chunk-5XZ744TS.js";
+} from "./chunk-2ZCUO2UG.js";
 import "./chunk-OHX6MIUZ.js";
 export {
   LAMBDA_BINDINGS,

package/dist/init-command-DNDONP3O.js

@@ -0,0 +1,32 @@
+import {
+  projectShellFiles,
+  resolveFromSource,
+  runInitCommand,
+  sanitizeAppName
+} from "./chunk-S3DOJOW4.js";
+import {
+  resolveAiFlags
+} from "./chunk-VK26K7AY.js";
+import "./chunk-ZSYZTGJH.js";
+import "./chunk-RQNMTDXD.js";
+import "./chunk-RLI6XD4O.js";
+import "./chunk-7WRJPKGK.js";
+import "./chunk-3LQGF2WS.js";
+import "./chunk-Z2ZIE5CO.js";
+import "./chunk-GNPVYOPB.js";
+import "./chunk-EZG76F7R.js";
+import "./chunk-MEFMTICH.js";
+import "./chunk-V5Y7D4LH.js";
+import "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
+import "./chunk-XWFRNJMQ.js";
+import "./chunk-2ZCUO2UG.js";
+import "./chunk-OHX6MIUZ.js";
+export {
+  projectShellFiles,
+  resolveAiFlags,
+  resolveFromSource,
+  runInitCommand,
+  sanitizeAppName
+};
+//# sourceMappingURL=init-command-DNDONP3O.js.map

package/dist/internal.d.ts

@@ -1,24 +1,19 @@
-export { F as FIELD_METHODS, R as REFERENCEABLE_KINDS, d as deriveGuid, e as encodeResponse, a as encodeStatement, g as getStatementFactory, i as isRegisteredStatement, r as resolveRef, t as toNestedFields } from './response-BQVQ24l1.js';
-import { S as StatementSpec, F as FunctionDef, O as ObjectKind } from './store-BLyNeQ8S.js';
-export { A as AdoptChange, a as AdoptResult, B as Bundle, b as BundlePayload, c as BundleType, d as FILTER_NAMES, G as GENERATED_STATEMENT_NAMES, K as KNOWLEDGE_DIR, e as KNOWLEDGE_FILE, L as LLMS_TXT, f as LOCK_VERSION, g as LockEntry, h as LockExportContext, i as LockFile, M as Manifest, j as ManifestField, k as ManifestKind, l as ManifestStatement, m as MergeResult, P as PAYLOAD_ARRAY_KEYS, n as PayloadArrayKey, Q as QUERY_EXPRESSION_FILTERS, R as RenameResult, T as TOTAL_OBJECT_KINDS, V as VECTOR_FILTERS, W as WORKSPACE_KEY, o as addonKind, p as adoptFromBundle, q as agentKind, r as apiGroupKind, s as buildBundle, t as buildManifest, u as buildMiddlewareBlock, v as buildWorkspaceHistory, w as calcSignatureJson, x as channelPathParams, y as createLockContext, z as declaredServicePorts, C as emptyLock, D as encodeAddon, E as encodeAgent, H as encodeApiGroup, I as encodeColumn, J as encodeContainerHistory, N as encodeFromSpec, U as encodeHistory, X as encodeIndex, Y as encodeKnowledge, Z as encodeMcpServer, _ as encodeMicroservice, $ as encodeMiddleware, a0 as encodeMiddlewareEntry, a1 as encodeMiddlewareList, a2 as encodeObject, a3 as encodeQuery, a4 as encodeRealtimeChannel, a5 as encodeRealtimeMessage, a6 as encodeRealtimeServer, a7 as encodeSchedule, a8 as encodeTable, a9 as encodeTask, aa as encodeTool, ab as encodeToolRefs, ac as encodeToolsetBase, ad as encodeTrigger, ae as encodeView, af as encodeWorkflowTest, ag as encodeWorkspaceConfig, ah as generatedStatements, ai as getKind, aj as getLockedCanonical, ak as getLockedGuid, al as isKnowledgeDirSource, am as isKnowledgeFileSource, an as isLockSeeded, ao as isQueryExpressionFilter, ap as isRegisteredKind, aq as knowledgeKind, ar as lockKey, as as mcpServerKind, at as mergeObserved, au as microserviceKind, av as middlewareKind, aw as mintCanonical, ax as parseLock, ay as phpJsonEncode, az as queryKind, aA as realtimeChannelGuid, aB as realtimeChannelKind, aC as realtimeMessageGuid, aD as realtimeMessageKind, aE as realtimeServerKind, aF as recordObserved, aG as registerKind, aH as registerSpec, aI as registeredKinds, aJ as renameLockEntry, aK as renderDocs, aL as renderLlmsTxt, aM as resolveAuthRef, aN as resolvePayloadKey, aO as resolveRealtimeServerCanonical, aP as resolveToolsetCanonical, aQ as serializeBundle, aR as serializeLock, aS as tableKind, aT as taskKind, aU as toolKind, aV as triggerKind, aW as validateLockModel, aX as workflowTestKind, aY as workspaceKind } from './store-BLyNeQ8S.js';
-import { F as FunctionXdo } from './xdo-BjJj5W_E.js';
+export { F as FIELD_METHODS, R as REFERENCEABLE_KINDS, d as deriveGuid, e as encodeResponse, a as encodeStatement, g as getStatementFactory, i as isRegisteredStatement, r as resolveRef, t as toNestedFields } from './response-D6xGLEIn.js';
+import { S as StatementSpec, F as FunctionDef, O as ObjectKind } from './store-9Psd0jiF.js';
+export { A as AdoptChange, a as AdoptResult, B as Bundle, b as BundlePayload, c as BundleType, d as FILTER_NAMES, G as GENERATED_STATEMENT_NAMES, K as KNOWLEDGE_DIR, e as KNOWLEDGE_FILE, L as LLMS_TXT, f as LOCK_VERSION, g as LockEntry, h as LockExportContext, i as LockFile, M as Manifest, j as ManifestField, k as ManifestKind, l as ManifestStatement, m as MergeResult, P as PAYLOAD_ARRAY_KEYS, n as PayloadArrayKey, Q as QUERY_EXPRESSION_FILTERS, R as RenameResult, T as TOTAL_OBJECT_KINDS, V as VECTOR_FILTERS, W as WORKSPACE_KEY, o as addonKind, p as adoptFromBundle, q as agentKind, r as apiGroupKind, s as buildBundle, t as buildManifest, u as buildMiddlewareBlock, v as buildWorkspaceHistory, w as calcSignatureJson, x as channelPathParams, y as createLockContext, z as declaredServicePorts, C as emptyLock, D as encodeAddon, E as encodeAgent, H as encodeApiGroup, I as encodeColumn, J as encodeContainerHistory, N as encodeFromSpec, U as encodeHistory, X as encodeIndex, Y as encodeKnowledge, Z as encodeMcpServer, _ as encodeMicroservice, $ as encodeMiddleware, a0 as encodeMiddlewareEntry, a1 as encodeMiddlewareList, a2 as encodeObject, a3 as encodeQuery, a4 as encodeRealtimeChannel, a5 as encodeRealtimeMessage, a6 as encodeRealtimeServer, a7 as encodeSchedule, a8 as encodeTable, a9 as encodeTask, aa as encodeTool, ab as encodeToolRefs, ac as encodeToolsetBase, ad as encodeTrigger, ae as encodeView, af as encodeWorkflowTest, ag as encodeWorkspaceConfig, ah as generatedStatements, ai as getKind, aj as getLockedCanonical, ak as getLockedGuid, al as isKnowledgeDirSource, am as isKnowledgeFileSource, an as isLockSeeded, ao as isQueryExpressionFilter, ap as isRegisteredKind, aq as knowledgeKind, ar as lockKey, as as mcpServerKind, at as mergeObserved, au as microserviceKind, av as middlewareKind, aw as mintCanonical, ax as parseLock, ay as phpJsonEncode, az as queryKind, aA as realtimeChannelGuid, aB as realtimeChannelKind, aC as realtimeMessageGuid, aD as realtimeMessageKind, aE as realtimeServerKind, aF as recordObserved, aG as registerKind, aH as registerSpec, aI as registeredKinds, aJ as renameLockEntry, aK as renderDocs, aL as renderLlmsTxt, aM as resolveAuthRef, aN as resolvePayloadKey, aO as resolveRealtimeServerCanonical, aP as resolveToolsetCanonical, aQ as serializeBundle, aR as serializeLock, aS as tableKind, aT as taskKind, aU as toolKind, aV as triggerKind, aW as validateLockModel, aX as workflowTestKind, aY as workspaceKind } from './store-9Psd0jiF.js';
+import { F as FunctionXdo } from './xdo-ODuJklk6.js';
 
 /**
- * AUTO-GENERATED by scripts/codegen.ts — DO NOT EDIT BY HAND.
- *
- * The declarative statement catalog (U9): one StatementSpec per cleanly
+ * The declarative statement catalog: one StatementSpec per cleanly
  * interpretable statement schema, generated from the Xano engine's statement
  * schema definitions. The engine-only `output` flag is pinned from the
- * persisted golden fixtures (KTD-4). Regenerate with `npm run codegen`.
- *
- * Coverage: 153 declarative statements generated.
- * Deferred (see PENDING.md): 63.
+ * persisted golden fixtures.
  */
 
 declare const GENERATED_SPECS: StatementSpec[];
 
 /**
- * The `function` object kind (KTD-2). This is the MVP's `compile()` envelope
+ * The `function` object kind. This is the MVP's `compile()` envelope
  * logic, re-homed as the first registered kind. Behavior is unchanged — the
  * MVP golden test is the regression guard.
  */
@@ -39,15 +34,14 @@ declare const functionKind: ObjectKind<FunctionDef, FunctionXdo>;
  * `mvp:microservice_request` and the engine files its schema under the `api`
  * namespace, but a microservice is a first-class workspace object here — with
  * its own def factory and deploy path — so its call statement is filed beside
- * it. The same decision is recorded as a `NAMESPACE_OVERRIDES` entry in
- * `scripts/codegen.ts`, which is what keeps the generated factory tree in
- * agreement with this key.
+ * it. The same decision is mirrored in codegen, which is what keeps the
+ * generated factory tree in agreement with this key.
  *
  * A second entry does the same: `lambda` is stored as `mvp:lambda` and the
  * engine files its schema under the `api` namespace, but a lambda runs wherever
  * a stack runs — in functions, tasks, middleware, and triggers, not only APIs —
  * so filing it under `s.api.*` said something false about where it is available
- * (issue #221). It is `s.lambda`, with the matching `NAMESPACE_OVERRIDES` entry.
+ *. It is `s.lambda`, with the matching `NAMESPACE_OVERRIDES` entry.
  *
  * One surface-pair shares a stored name (so the catalog has one fewer unique
  * stored name than surfaces): `util.get_raw_input`/`util.get_input` →

package/dist/internal.js

@@ -1,7 +1,7 @@
 import {
   FIELD_METHODS,
   SUPERSEDED_STATEMENTS
-} from "./chunk-BSK7ELHU.js";
+} from "./chunk-PR7OXHGZ.js";
 import {
   addonKind,
   agentKind,
@@ -29,7 +29,7 @@ import {
   taskKind,
   toolKind,
   workflowTestKind
-} from "./chunk-QYMAZRAU.js";
+} from "./chunk-PJNWOZMT.js";
 import {
   GENERATED_SPECS,
   GENERATED_STATEMENT_NAMES,
@@ -51,13 +51,13 @@ import {
   registerSpec,
   triggerKind,
   workspaceKind
-} from "./chunk-UOZMSF4C.js";
+} from "./chunk-BYQHCCYU.js";
 import {
   IMPLEMENTED_STATEMENTS,
   STATEMENT_SURFACES,
   TOTAL_STATEMENTS,
   sPathOf
-} from "./chunk-BC2C5GVI.js";
+} from "./chunk-DCMANKMX.js";
 import {
   COMMANDS,
   FLAGS,
@@ -65,7 +65,7 @@ import {
   flagKey,
   flagSummary,
   visibleFlags
-} from "./chunk-DIA7CT7J.js";
+} from "./chunk-V5Y7D4LH.js";
 import {
   DECODE_ONLY_STATEMENTS,
   FILTER_NAMES,
@@ -111,8 +111,8 @@ import {
   serializeBundle,
   tableKind,
   toNestedFields
-} from "./chunk-QK7ZQJLP.js";
-import "./chunk-WHOJWOSV.js";
+} from "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
 import {
   LOCK_VERSION,
   REFERENCEABLE_KINDS,
@@ -134,12 +134,12 @@ import {
   resolveRef,
   serializeLock,
   validateLockModel
-} from "./chunk-VAF6A3YD.js";
+} from "./chunk-XWFRNJMQ.js";
 import {
   encodeStatement,
   getStatementFactory,
   isRegisteredStatement
-} from "./chunk-5XZ744TS.js";
+} from "./chunk-2ZCUO2UG.js";
 import "./chunk-OHX6MIUZ.js";
 
 // src/statements/byte-evidence.ts
@@ -316,7 +316,7 @@ var VALUE_CONSTRUCTORS = [
   { name: "c.expression", signature: "(source: string) => Value", description: `Xano Expression Engine source, passed through VERBATIM \u2192 tag "const:expr2". The string IS the expression: c.expression('"Hi, " ~ $input.name'), c.expression("$var.price * $var.qty"). \u26A0\uFE0F NOT VALIDATED \u2014 never parsed or type-checked, invisible to InferResponse, and untouched by a rename that updates every typed ref(); a typo surfaces at runtime or as a wrong answer. Use it ONLY for syntax the typed surfaces cannot express (~ concatenation, inline arithmetic, conditionals) \u2014 prefer ref/inp/col, withFilters+fl.*, and obj() (which BUILDS a checked expression). Not the expr() condition builder.` },
   { name: "c.expressionLegacy", signature: "(source: string) => Value", legacy: true, description: "the older `const:expr` expression form, emitted by codegen for workspaces that still hold one \u2014 author `c.expression` instead." },
   { name: "c.now", signature: "() => Value", description: "Current time as epoch-ms \u2014 the engine-native const:epochms constant (no filter). Valid inline as a where/cmp operand. For cutoff math (cutoff = now - max_age) either compare inline or, for reuse/readability, hoist it into an s.set_var and compare against the var." },
-  { name: "obj", signature: "(fields: Record<string, Value | nested>) => ObjValue<typeof fields>", description: 'Dynamic object value \u2192 tag "const:expr2" (an object-literal expression string). The dynamic sibling of c.obj: members may be inp/ref/auth/col values, env()/setting()/sys.*, c.now(), c.* constants, nested records, or arrays \u2014 and each member may carry a FILTER CHAIN (withFilters + fl.*), which renders as the expression pipe `$var.row|get:"a.b"`. That matters most for the null-safe drill: db.get binds null on a miss, so ref(path, { safe: true }) inside an obj() is the normal shape, not a workaround \u2014 you do NOT need a preceding s.set_var to hoist it. The member record rides the return type, so InferResponse resolves each member the way it resolves a top-level response key \u2014 `response: { user: obj({ id: ref("row.id") }) }` derives `{ user: { id: Col | null } }`, and a raw nested object literal (`response: { user: { id: ref("row.id") } }`, auto-wrapped through this) derives the same. A constant record or list has two spellings that both work and render identically: bare (`{ a: 1 }`, `[]`) or `c.obj(...)`/`c.array([...])` \u2014 reach for the bare form, it is shorter. NEST WITH A RAW RECORD, not an inner obj() call: an inner call yields a const:expr2 value, which the expression serializer has no spelling for and THROWS. The legacy blank `c.obj(null)` is refused here (it evaluates to null, not {}) \u2014 write c.null() or c.obj(). Still rejected: a filter ARGUMENT carrying its own chain (a trailing | binds to the whole value, not one argument), a DISABLED filter (an expression string cannot record that), and the output/response/toolset/reg tags \u2014 build those in a prior step and ref() them. Use for e.g. s.ai.agent.run args.' },
+  { name: "obj", signature: "(fields: Record<string, Value | nested>) => ObjValue<typeof fields>", description: 'Dynamic object value \u2192 tag "const:expr2" (an object-literal expression string). The dynamic sibling of c.obj: members may be inp/ref/auth/col values, env()/setting()/sys.*, c.now(), c.* constants, nested records, or arrays \u2014 and each member may carry a FILTER CHAIN (withFilters + fl.*), which renders as the expression pipe `$var.row|get:"a.b"`. That matters most for the null-safe drill: db.get binds null on a miss, so ref(path, { safe: true }) inside an obj() is the normal shape, not a workaround \u2014 you do NOT need a preceding s.set_var to hoist it. The member record rides the return type, so InferResponse resolves each member the way it resolves a top-level response key \u2014 `response: { user: obj({ id: ref("row.id") }) }` derives `{ user: { id: Col | null } }`, and a raw nested object literal (`response: { user: { id: ref("row.id") } }`, auto-wrapped through this) derives the same. A constant record or list has two spellings that both work and render identically: bare (`{ a: 1 }`, `[]`) or `c.obj(...)`/`c.array([...])` \u2014 prefer the bare form. NEST WITH A RAW RECORD, not an inner obj() call: an inner call yields a const:expr2 value, which the expression serializer has no spelling for and THROWS. The legacy blank `c.obj(null)` is refused here (it evaluates to null, not {}) \u2014 write c.null() or c.obj(). Still rejected: a filter ARGUMENT that carries its own chain or is a c.now() (a trailing | binds to the whole value, not one argument, and c.now() needs one), a DISABLED filter (an expression string cannot record that), and the output/response/toolset/reg tags \u2014 build those in a prior step and ref() them. Use for e.g. s.ai.agent.run args.' },
   { name: "ref", signature: "(name: string, opts?: { safe?: boolean }) => Value", description: 'Reference a stack variable \u2192 tag "var". Pass { safe: true } for null-safe nested access \u2014 a dotted ref("owner.user_id", { safe: true }) compiles through the get filter so it resolves to null instead of raising "Unable to locate var" when the base is null.' },
   {
     name: "inp",
@@ -776,7 +776,7 @@ function renderTestsSection() {
     "",
     "- The run uses an EMPTY datasource, so **no `table({ seed })` rows exist while it runs** and every `db` read misses. A test that buys seeded row 1 fails with its own precondition message, which reads as a wrong id rather than an empty database. Create what the test needs INSIDE the test \u2014 typically a `defineFunction` fixture the stack calls first.",
     '- `s.api.call` does NOT raise when the endpoint answers with an error. It BINDS the error envelope (`{code, message}`) to its `as` and carries on, so a later `s.expect.to_be_defined({ expr: ref("r.field") })` reports the ASSERTION while the real failure was the call, four statements up. Assert on the envelope \u2014 `s.expect.to_contain({ expr: ref("r.code"), value: c.text("ERROR_CODE_INPUT_ERROR") })` \u2014 when a call may fail. `s.function.run` raises instead; the two disagree.',
-    '- `s.expect.to_throw({ body, exception? })` runs `body` in an ISOLATED var stack, so a variable bound EARLIER in the test is not visible inside it \u2014 bind what the body needs inside the body. `exception` is a `Value` whose text the raised message must CONTAIN (`c.text("already exists")`, not a bare string); omit it to accept any error.',
+    '- `s.expect.to_throw({ body, exception? })` runs `body` in an ISOLATED var stack, so a variable bound EARLIER in the test is not visible inside it \u2014 bind what the body needs inside the body. An outer one raises `Missing var entry: <name>` there, which the test reports as `to_throw` not matching (`export()` warns). `exception` is a `Value` whose text the raised message must CONTAIN (`c.text("already exists")`, not a bare string); omit it to accept any error.',
     "- `s.expect.to_throw` catches such a call only when the error carries a MESSAGE. `ERROR_CODE_ACCESS_DENIED` arrives with an empty one, so `to_throw` around an auth-refused call reports `to_throw failed - response is ok` \u2014 which reads as a broken auth gate on a gate that works.",
     "- An endpoint's `auth` gate is NOT enforced on `s.api.call`. A `query({ auth: users })` runs anyway and fails only where its stack dereferences `auth(...)`. A stack that never touches `auth(...)` runs unauthenticated and passes.",
     "- Neither `auth.token` nor an `Authorization` entry in `headers` authenticates the call \u2014 a token that answers 200 over real HTTP is refused here. To cover auth-gated logic, move the body into a `defineFunction` taking the user id and `s.function.call` that; the gate itself is not reachable from a workflow test.",
@@ -815,19 +815,19 @@ function renderSections(m) {
     `Coverage: object kinds ${m.coverage.objectKinds.implemented}/${m.coverage.objectKinds.total}, statement surfaces ${m.coverage.statements.implemented}/${m.coverage.statements.total}, filters ${m.coverage.filters.total} (${m.coverage.filters.typed} typed).`,
     // The shortfall by name: an agent that cannot see WHICH kinds are missing
     // will invent a factory for one. Reasons live in `manifest.json`.
-    `Not authorable here: ${m.coverage.objectKinds.unmodeled.map((k) => k.kind).join(", ")} \u2014 these cannot be authored and do not survive a pull; see \`coverage.objectKinds.unmodeled\` in \`manifest.json\`.`,
+    `Not authorable here: ${m.coverage.objectKinds.unmodeled.map((k) => k.kind).join(", ")} \u2014 these cannot be authored and do not survive a pull; reasons in \`coverage.objectKinds.unmodeled\`.`,
     "",
     "This file is the whole always-read surface: the mental model, the deploy contract,",
     "every gotcha, and control flow. Per-surface detail lives in the topic files listed",
-    "below \u2014 open the one whose condition matches the task, and skip the rest. For",
-    "exhaustive per-entry detail in NEITHER \u2014 a statement's full field schema with engine",
-    "defaults, a filter's complete argument list, the engine `storedName` mapping \u2014 do a",
-    "TARGETED lookup in the shipped `manifest.json` (a program imports it as",
-    '`@xanots/sdk/manifest.json`, which Node ESM needs `with { type: "json" }` on;',
-    "grep or `jq` the one entry you need;",
-    "it is ~65k tokens, so never read it whole). Its top-level keys are `" + Object.keys(m).join("`, `") + "`. `statements` and `filters` are ARRAYS, not maps \u2014 SELECT, do not index:",
+    "below \u2014 open the one whose condition matches the task, skip the rest. For",
+    "exhaustive per-entry detail in NEITHER \u2014 a statement's field schema with engine",
+    "defaults, a filter's full argument list, the `storedName` mapping \u2014 do a TARGETED",
+    "lookup in the shipped `manifest.json` (a program imports it as",
+    '`@xanots/sdk/manifest.json`, needing `with { type: "json" }` in Node ESM;',
+    "it is ~60k tokens, so never read it whole). Its top-level keys are `" + Object.keys(m).join("`, `") + "`. `statements` and `filters` are ARRAYS, not maps \u2014 SELECT, do not index:",
     `  jq '.statements[] | select(.sPath=="db.get")' manifest.json`,
     `  jq '.filters[]    | select(.name=="json_decode")' manifest.json`,
+    `\u26A0 \`fields\` is null on the ${m.statements.filter((st) => st.declarative !== true).length} \`declarative: false\` statements (\`db.get\`, \u2026): typed wrappers whose arguments are the factory's \`.d.ts\` signature. Null \u2260 missing.`,
     `Select a statement on \`sPath\` (the \`s.*\` path you write), NOT \`surface\` (the XanoScript term): ${m.statements.filter((s) => s.surface !== s.sPath).length} of ${m.statements.length} differ \u2014 \`var\`\u2192\`set_var\`, \`break\`\u2192\`foreach_break\`, \`foreach.remove\`\u2192\`foreach_remove\`, and every \`expect.*\`.`,
     "",
     NAVIGATION_SLOT
@@ -1115,11 +1115,11 @@ function renderSections(m) {
     "  no Node built-ins, so a bundler drops unused SDK exports. But importing a **def** for its",
     "  `getPath()`/`verb`/`getUrl()`/`getChannel()` also pulls whatever its `stack` references:",
     "  the `s.*`/`c.*` factory CALLS run at module load to BUILD it. Types are free.",
-    "  \u26A0 A FLOOR \u2014 **~289 kB minified (~57 kB gzipped)** for the FIRST def; splitting modules",
-    "  never removes it. The floor is the RUNTIME, not the def: a second def, or a much richer",
-    "  one, adds ~1 kB \u2014 so reducing what a def does will not reduce it.",
+    "  \u26A0 A FLOOR \u2014 **~267 kB minified (~65 kB gzipped)** for the FIRST def; splitting modules",
+    "  never removes it. The floor is the RUNTIME, not the def: a second or much richer def",
+    "  adds ~2 kB, so trimming a def does not shrink it.",
     "  Fix: `xanots routes <entry> --emit xano/routes.gen.ts` (`paths` is an accepted alias) \u2014 verbs, paths, and sockets as",
-    '  plain data importing NOTHING, still compile-checked: `routePath("blog/{slug}", { slug })`,',
+    '  plain data importing NOTHING, still compile-checked: `routePath("GET blog/{slug}", { slug })`',
     '  `channelPath("rooms/{room_id}", { room_id })`, `socketUrl("chat", baseUrl)` (tenant base',
     "  URLs lifted to `wss://h/ws/<tenant>:<canonical>`). A rename is a type error, not a 404.",
     "- **Intra-workspace imports use `.js` specifiers** (`../tables/links.js`), not",
@@ -1196,7 +1196,7 @@ function renderSections(m) {
     "  submission on bind, so `s.security.check_password` compares two different hashes",
     "  and a correct password always fails (`ok:false` on a found row). Take the submitted",
     "  password as `input.text()` on both signup and login and pass the plaintext straight",
-    "  to `check_password` (which does the comparison hash itself).",
+    "  to `check_password` (which does the comparison hash itself). `export()` warns.",
     "- **Agents authenticate with env vars \u2014 never `xanots login`.** `login` blocks on a",
     "  browser consent no agent can complete. Set `$XANO_INSTANCE_URL` + `$XANO_WORKSPACE_ID`",
     "  + `$XANO_META_TOKEN` and run `deploy`/`release` directly: no disk, no rotation, so it",
@@ -1365,11 +1365,11 @@ function renderSections(m) {
     '    - `deliverTo?`: `"channel"` (default) | `"sender"` | `"others"` | `"explicit"`. \u26A0 `"explicit"` still delivers to NOBODY \u2014 nothing selects recipients from inside a handler, and `s.realtime.publish` (which originates an event INTO a channel) is not a substitute.',
     '    - Only `"channel"`/`"others"` fan out AND are written to the `conversation` transcript \u2014 a `"sender"` response is invisible to every future joiner.',
     '  - **Both input surfaces read as ordinary inputs:** `inp("body")` for a payload field, `inp("room_id")` for the channel\'s `{room_id}`. No session lookup, no frame parsing.',
-    "    - A path param is bound ONCE at join and read from the connection thereafter, never from the frame \u2014 a sender cannot claim a room it did not join. The same values reach a channel `join`/`leave` trigger's stack.",
+    "    - A path param is bound ONCE at join and read from the connection thereafter, never from the frame \u2014 a sender cannot claim a room it did not join.",
     "  - `s.realtime.get_session({ as })` \u2014 the CALLER's realtime session for the current frame. FLAT shape:",
     '    - `authenticated` bool \xB7 `client_id` text (the AUTHED ROW ID as text, `""` anonymous) \xB7 `dbo_id` int (the auth TABLE\'s id \u2014 NOT the user\'s row id; `0` anonymous \u2014 to look the caller up use `client_id`. `dbo_id` is an int in the same position and typechecks, so a gate that keys on it finds no user and refuses EVERYONE) \xB7 `socket_id` int (transport id) \xB7 `channel` text (resolved path, `""` in a server trigger) \xB7 `params` object (bound path params, `{}` when none \u2014 `ref("session.params.room_id")`) \xB7 `extras` object \xB7 `opened_at` decimal.',
     "    - Works in a realtime MESSAGE stack and in CHANNEL and SERVER trigger stacks; off that path it degrades to an anonymous session.",
-    '    - For a path param prefer `inp("room_id")`. Reach for the session when you need the CONNECTION (identity/extras) \u2014 "who is this sender" on an anonymous-client channel.',
+    '    - For a path param prefer `inp("room_id")` in a MESSAGE; a lifecycle TRIGGER has only the session. Reach for the session when you need the CONNECTION (identity/extras) \u2014 "who is this sender" on an anonymous-client channel.',
     "    - \u26A0 THREE UNRELATED THINGS ARE CALLED A CLIENT ID: `session.client_id` (app-facing identity), `session.socket_id` (transport), and a frame's `options.client_id` (the at_least_once CURSOR handle). Conflating the first and last breaks at_least_once for anonymous clients.",
     "  - `s.realtime.publish({ server, channel, data, message?, authTable?, authId? })` \u2014 the PUSH direction: originate a server-authored event onto a channel from ANY stack, no client frame first.",
     "    - `server` is the handle or its NAME (resolved by name, not guid); `channel` is the FILLED-IN path (`channel.getChannel({ room_id: 42 })`), never the template \u2014 a constant still carrying `{param}` THROWS at author time, and a constant `server`/`channel` naming nothing this workspace registers WARNS at export.",
@@ -1437,8 +1437,8 @@ function renderSections(m) {
     "errorTrigger}({ name, guid?, description?, active?, tags?, ... })`.",
     "",
     '- `tableTrigger({ name, table?, datasources?, actions?: {insert?,update?,delete?,truncate?}, stack })` \u2014 database/table trigger. `t.new` / `t.old` are the row **after** / **before** the change; `t.action` (`insert|update|delete|truncate`), `t.datasource`. Bind `table` to a `table()` handle and `t.new("col")` / `t.old("col")` are typed to that row (misspelled column = compile error). Nullability follows the enabled actions: insert \u2192 `old` is null, delete \u2192 `new` is null, update \u2192 both, truncate \u2192 neither. Config-only (no response).',
-    "- `realtimeServerTrigger({ name, realtimeServer, actions?: {connect?,disconnect?}, stack?, response?, responseShape? })` \u2014 realtime SERVER lifecycle (a client connecting to / disconnecting from the server, not a message). Inputs: `t.action` (`connect|disconnect`), `t.realtime_server`, `t.client`. Bind `realtimeServer` to a `realtimeServer()` handle (or its name). `connect` GATES the connection \u2014 a denial sends an `error` and CLOSES the socket with code 4401 before it is ever ready, so it is a real front door, not an observer; same return shape as a channel `join` (`{ allowed: c.bool(true) }` or any truthy value admits, EMPTY/FALSY DENIES \u2014 INCLUDING a gating trigger with NO `response`, which returns nothing and so refuses every client). A CRASH DENIES too \u2014 the transport seeds a deny and keeps it on a throw. Both failure modes lock the door, so plan for a self-inflicted LOCKOUT (an unguarded drill into a null `db.get` raises \u2192 everyone refused), not a breach. Gating is OPT-IN: a server with no `connect` trigger accepts every connection. `disconnect` is OBSERVATIONAL (return ignored, throws swallowed \u2014 cleanup must always complete). Both are SERVER-scoped, so `s.realtime.get_session` works but carries no channel path and no bound params.",
-    '- `realtimeChannelTrigger({ name, channel, actions?: {join?,leave?,deliver?}, stack?, response?, responseShape? })` \u2014 realtime CHANNEL lifecycle. Inputs: `t.action` (`join|leave|deliver`), `t.channel`, `t.client`. Bind `channel` to a `realtimeChannel()` handle \u2014 a bare path is NOT accepted (it is unique only within its server). The three actions have DIFFERENT postures, and the posture decides what the stack should return: `join` GATES the join (it runs BEFORE the client becomes a member, so a denial means it never sees a fan-out) \u2014 return `{ allowed: c.bool(true) }` (optional `reason` reaches the client) or any truthy value to admit, and an EMPTY OR FALSY RETURN DENIES, so a stack that just falls through \u2014 or a gating trigger with NO `response` \u2014 refuses everyone, and a CRASH DENIES too. That is the inverse of a normal message (a crashing message still delivers) and of `deliver` below (a gate that fails OPEN). `join`/`leave` bind the channel\'s typed path params as INPUTS, so `inp("room_id")` resolves and the gate decides per room; a SERVER connect/disconnect has no channel, the one place a path param cannot be read; `leave` is OBSERVATIONAL (return ignored, throws swallowed); `deliver` GATES delivery PER RECIPIENT \u2014 the per-viewer redaction tool and the most expensive action here (a stack per recipient per message), and it needs `delivery.perRecipient` on the channel to run at all \u2014 BOTH HALVES are required, so a `deliver` trigger on a channel without the flag NEVER RUNS and every subscriber receives the UNREDACTED payload (no error, no log line); `export()` warns on each half alone. **`deliver`\'s RETURN VALUES DO NOT READ LIKE A FILTER:** ONLY an explicit NULL drops the message for that recipient; an OBJECT replaces that recipient\'s payload; ANYTHING ELSE \u2014 INCLUDING `false`, `0`, `""` \u2014 DELIVERS IT UNCHANGED, as does a crash. So `return false` from a yes/no redaction check SENDS the message it was written to suppress \u2014 return null instead. The delivered payload arrives NESTED, so read `inp("payload").<field>`, and `t.client` is the SENDER while `s.realtime.get_session` describes the RECIPIENT this run is for.',
+    "- `realtimeServerTrigger({ name, realtimeServer, actions?: {connect?,disconnect?}, stack?, response?, responseShape? })` \u2014 realtime SERVER lifecycle (a client connecting to / disconnecting from the server, not a message). Inputs: `t.action` (`connect|disconnect`), `t.realtime_server`, `t.client`. Bind `realtimeServer` to a `realtimeServer()` handle (or its name). `connect` GATES the connection \u2014 a denial sends an `error` and CLOSES the socket with code 4401 before it is ever ready, so it is a real front door, not an observer; same return shape as a channel `join` below (EMPTY/FALSY DENIES \u2014 INCLUDING a gating trigger with NO `response`, which returns nothing and so refuses every client). A CRASH DENIES too \u2014 a gate that cannot answer must not admit. Both failure modes lock the door, so plan for a self-inflicted LOCKOUT (an unguarded drill into a null `db.get` raises \u2192 everyone refused), not a breach. Gating is OPT-IN: a server with no `connect` trigger accepts every connection. `disconnect` is OBSERVATIONAL (return ignored, throws swallowed \u2014 cleanup must always complete). Both are SERVER-scoped, so `s.realtime.get_session` works but carries no channel path and no bound params.",
+    '- `realtimeChannelTrigger({ name, channel, actions?: {join?,leave?,deliver?}, stack?, response?, responseShape? })` \u2014 realtime CHANNEL lifecycle. Inputs: `t.action` (`join|leave|deliver`), `t.channel`, `t.payload`, `t.client`. Bind `channel` to a `realtimeChannel()` handle \u2014 a bare path is NOT accepted (it is unique only within its server). The three actions have DIFFERENT postures, and the posture decides what the stack should return: `join` GATES the join (it runs BEFORE the client becomes a member, so a denial means it never sees a fan-out) \u2014 return `{ allowed: c.bool(true) }` (optional `reason` reaches the client) or any truthy value to admit, and an EMPTY OR FALSY RETURN DENIES, so a stack that just falls through \u2014 or a gating trigger with NO `response` \u2014 refuses everyone, and a CRASH DENIES too. ONCE the object carries an `allowed` key admission needs STRICTLY `true` \u2014 a computed `1`/`"yes"` there DENIES. That is the inverse of a crashing message, which still delivers, and of `deliver` below. A lifecycle trigger\'s inputs are PINNED to those four, so a channel PATH PARAM is NOT among them \u2014 `inp("room_id")` RAISES, which crashes the gate and so REFUSES every client; take the param from `s.realtime.get_session` (`ref("session.params.room_id")`). A gate establishes NO auth, so `ref("auth.id")` reads 0 even when authenticated \u2014 identity is `t.client("permissions.dbo_id")` or the session. A SERVER connect/disconnect has no channel, so no params at all; `leave` is OBSERVATIONAL (return ignored, throws swallowed); `deliver` GATES delivery PER RECIPIENT \u2014 the per-viewer redaction tool and the most expensive action here (a stack per recipient per message), and it needs `delivery.perRecipient` on the channel to run at all \u2014 BOTH HALVES are required, so a `deliver` trigger on a channel without the flag NEVER RUNS and every subscriber receives the UNREDACTED payload (no error, no log line); `export()` warns on each half alone. **`deliver`\'s RETURN VALUES DO NOT READ LIKE A FILTER:** ONLY an explicit NULL drops the message for that recipient; an OBJECT replaces that recipient\'s payload; ANYTHING ELSE \u2014 INCLUDING `false`, `0`, `""` \u2014 DELIVERS IT UNCHANGED, as does a crash. So `return false` from a yes/no redaction check SENDS the message it was written to suppress \u2014 return null instead. The delivered payload arrives NESTED, so read `t.payload("<field>")`, and `t.client` is the SENDER while `s.realtime.get_session` describes the RECIPIENT this run is for.',
     '- `mcpServerTrigger({ name, mcpServer, stack?, response?, responseShape? })` / `agentTrigger({ name, agent, stack?, response?, responseShape? })` \u2014 toolset connection. Bind with the `mcpServer()`/`agent()` def handle (or its name) \u2014 it resolves to the toolset guid at export. Raw numeric `objId` is the escape hatch, rarely right: ids are assigned at import, so a handle passed to `objId` is a type error, and binding nothing deploys a trigger that never fires. Inputs: `t.toolset` (`t.toolset("name")`), `t.tools`. Response-bearing; the default stack copies `toolset`/`tools` into vars and returns them.',
     "- `workspaceTrigger({ name, actions?: {branch_live?,branch_merge?,branch_new?}, stack? })` \u2014 branch lifecycle. Inputs: `t.to_branch`, `t.from_branch`, `t.action`. Config-only.",
     '- `errorTrigger({ name, stack? })` \u2014 error-signature trigger. Inputs: `t.event` (`new|regression|fixed`), `t.id`, `t.signature`, `t.error` (`t.error("code")`/`t.error("message")`), `t.caller`, `t.statement`, `t.actor`, `t.count`, `t.first_seen`, `t.last_seen`, `t.fixed_at`. Config-only.',
@@ -1686,13 +1686,14 @@ function renderSections(m) {
     '    - \u26A0 `like`/`ilike` take the operand as the PATTERN, verbatim: a bare term matches only an exact whole-string equal, and the endpoint answers HTTP 200 with zero rows \u2014 nothing reports a problem, so a search box that matches nothing ships. For substring matching use `includes`/`not includes`, which wrap the operand in `%\u2026%` themselves and match case-INSENSITIVELY. Prefer them over a hand-built `"%" + term + "%"`, which is non-empty even for an empty term and so defeats `ignoreEmpty`; `includes` composes with it. `contains`/`@>`/`overlaps` are JSON/array containment, not text \u2014 on a text column they 400 `ParseError: Invalid value for param`.',
     "    - Compose nested boolean logic with `and(...)` / `or(...)` groups (also available on `addon()` `where`).",
     "    - An operand may be a bare value (`col`/`inp`/`ref`/`auth`/`c.*`) OR a **filtered** value (`withFilters(...)`) inline \u2014 the engine compiles the string and arithmetic filters (`trim`, `concat`, `upper`, `lower`, \u2026) into the SQL.",
-    "    - \u26A0 The REQUEST-TIME timestamp filters have no SQL form and kill the request with a bare fatal naming nothing: `epochms_transform`, `epochms_add_ms`, `epochms_add_secs`, `epochms_date`, `epochms_from_format`. For a relative cutoff use the SQL-side family instead (`epochms_add_day`, `epochms_sub_month`, `epochms_year`, \u2026) or compute it in an earlier `s.set_var` and `ref()` that. `export --strict` reports it; a bare `c.now()` operand is always fine.",
+    "    - \u26A0 The REQUEST-TIME timestamp filters have no SQL form and kill the request with a bare fatal naming nothing: `epochms_transform`, `epochms_add_ms`, `epochms_add_secs`, `epochms_date`, `epochms_from_format`. For a relative cutoff use the SQL-side family instead (`epochms_add_day`, `epochms_sub_month`, `epochms_year`, \u2026) \u2014 by raw name, since `fl.*` has no builder for them \u2014 or compute it in an earlier `s.set_var` and `ref()` that. `export --strict` reports it; a bare `c.now()` operand is always fine.",
     '  - `bind: [{ table, as?, join?, where? }]` \u2014 joins (`context.bind[]`). `join` defaults to `"inner"`. `as` defaults to the table name; two joins to the same table need distinct aliases.',
     '    - \u26A0 In `where`/`sort`/`eval` a JOINED column takes a dotted path (`col("team_row.id")`); THIS query\'s own columns stay **bare** (`col("team")`). Qualifying your own by table name needs `tableAlias` (same rule as `aggregate`) \u2014 without it the engine reads the operand as text and 400s `ParseError: Invalid value for param` naming the OTHER operand, so it throws at export instead.',
     '    - `bind: [{ table: team, as: "team_row", join: "left", where: expr(col("team"), "=", col("team_row.id")) }]`',
+    '    - \u26A0 A join does NOT put the joined table\'s columns on the returned row \u2014 with or without a `bind`, a row is the QUERIED table\'s columns, which is what `InferResponse` types. There is no `row.team_row`. To read a joined column, PROJECT it with an `eval` whose `name` is the dotted path: `eval: [{ name: "team_row.name", as: "team_name" }]` puts `team_name` on the row and on the inferred type. A bare `name` there is `Unsupported parameter reference` at runtime (it qualifies to the base table), and a dotted joined column in `output` is dropped with no error.',
     '  - `returnType` \u2014 `"list"` (default) | `"single"` | `"count"` | `"exists"` | `"stream"` | `"aggregate"`. Drives `context.return.type` AND the `InferResponse` shape: `count`\u2192`number`, `exists`\u2192`boolean`, `single`\u2192`Row|null`, `stream`\u2192`Row[]` (pageable, no envelope), `list`\u2192`Row[]`/envelope, `aggregate`\u2192rows keyed by the `aggregate.group`/`eval` aliases. \u26A0 A bare `count` of ZERO serializes as an EMPTY body, not `0` \u2014 a client parsing JSON gets a parse error on the one result it most needs to handle. Wrap it: `response: { count: ref("n") }`.',
     '  - `eval: [{ name, as, filters? }]` \u2014 computed columns (`context.eval[]`). Each `as` grafts onto the row as an `unknown` key in `InferResponse`; shadowing a real column throws. Write `name` **bare** (`"embedding"`) \u2014 it is alias-qualified on emit exactly like `aggregate` (a bare eval name is `Unsupported param format` at runtime), and the statement declares the alias it used. An `as` alias is `sort`able in the SAME query.',
-    "    - An `eval`/`sort`/`where` filter pipeline compiles to **SQL**, so it resolves a DIFFERENT registry than `fl.*` (which runs in the request): the vector family, geo `distance`/`within`/`covers`, `search_rank`, the aggregators. Exported as `QUERY_EXPRESSION_FILTERS`/`VECTOR_FILTERS`.",
+    '    - An `eval`/`sort`/`where` filter pipeline compiles to **SQL**, so it resolves a DIFFERENT registry than `fl.*` (which runs in the request): the vector family, geo `distance`/`within`/`covers`, `search_rank`, the aggregators. \u26A0 `fl.*` carries NO builder for these \u2014 reach them by raw name, `filter("epochms_add_day", \u2026)` or the `{ name, arg }` form. The name lists are `QUERY_EXPRESSION_FILTERS`/`VECTOR_FILTERS` on `@xanots/sdk/internal`.',
     '    - **Vector similarity search** \u2014 the ONLY way to query an `f.vector` column (no `SearchOp` does distance). `eval: [{ name: "embedding", as: "distance", filters: [{ name: "vector_cos_distance", arg: [inp("q")] }] }]` + `sort: [{ sortBy: "distance", dir: "asc" }]` ranks in the DATABASE over the column\'s index. Match the filter to the index `op` (`vector_cos_distance`\u2194`vector_cosine_ops`, `vector_l2_distance`\u2194`vector_l2_ops`, `vector_l1_distance`\u2194`vector_l1_ops`, `vector_inner_product`\u2194`vector_ip_ops`); `vector_cos_similarity` is the inverse, so sort it `desc`. The same filter on a `where` operand cuts off BY distance instead of by row count.',
     '  - `aggregate: { group?, eval?, sort?, paging? }` (with `returnType:"aggregate"`) builds `context.return.aggregate`. `group`/`eval` are `{ name, as, filters? }`, an aggregator like `sum`/`count` riding `filters`. Some aggregators resolve ONLY here, not in a runtime value pipeline: `count_distinct`, `median`, `to_list`/`to_distinct_list` (each with `_asc`/`_desc`), and `vector_distance`.',
     '    - \u26A0 Write each `name` as a **bare** column (`"status"`). It is alias-qualified to `"<alias>.status"` on emit \u2014 the engine rejects an unqualified column in an aggregate with `Unsupported param format`. An already-dotted `name` (a `bind`ed/joined column) passes through.',
@@ -2065,10 +2066,9 @@ function renderDocs(m) {
   const nav = [
     "## Topic files",
     "",
-    "Each line is a condition on the task. Open the files whose condition matches and",
-    "skip the rest \u2014 paths are relative to this file (`node_modules/@xanots/sdk/` once",
-    `installed), so a plain file read resolves them at the version you have.`,
-    `\`${LLMS_FULL_TXT}\` is everything concatenated \u2014 one fetch, for a reader that cannot open files.`,
+    "Paths are relative to this file (`node_modules/@xanots/sdk/` once installed), so a",
+    "plain file read resolves them at the version you have.",
+    `\`${LLMS_FULL_TXT}\` is everything concatenated \u2014 one fetch for a reader that cannot open files.`,
     "",
     ...topics.map((t) => `- [${t.title}](${t.path}): ${t.readWhen}`),
     ""

package/dist/{io-P2H75UV2.js → io-UBDMMDH6.js}

@@ -1,12 +1,12 @@
 import {
   readLockFile,
   writeLockFile
-} from "./chunk-XEOX6AM7.js";
+} from "./chunk-3LQGF2WS.js";
 import "./chunk-GNPVYOPB.js";
-import "./chunk-VAF6A3YD.js";
+import "./chunk-XWFRNJMQ.js";
 import "./chunk-OHX6MIUZ.js";
 export {
   readLockFile,
   writeLockFile
 };
-//# sourceMappingURL=io-P2H75UV2.js.map
+//# sourceMappingURL=io-UBDMMDH6.js.map

package/dist/{live-diff-IXKBVG4K.js → live-diff-HCOTN5WC.js}

@@ -2,11 +2,11 @@ import {
   compareToLive,
   diffAgainstLive,
   sharedSchemaChanges
-} from "./chunk-DBFU47BJ.js";
-import "./chunk-3INK4Y4E.js";
+} from "./chunk-AOFFKSJC.js";
+import "./chunk-AE3PDSDS.js";
 export {
   compareToLive,
   diffAgainstLive,
   sharedSchemaChanges
 };
-//# sourceMappingURL=live-diff-IXKBVG4K.js.map
+//# sourceMappingURL=live-diff-HCOTN5WC.js.map

package/dist/{lock-46FWYE4D.js → lock-HQ4KARU2.js}

@@ -17,7 +17,7 @@ import {
   resolvePayloadKey,
   serializeLock,
   validateLockModel
-} from "./chunk-VAF6A3YD.js";
+} from "./chunk-XWFRNJMQ.js";
 import "./chunk-OHX6MIUZ.js";
 export {
   CANONICAL_PAYLOAD_KEYS,
@@ -39,4 +39,4 @@ export {
   serializeLock,
   validateLockModel
 };
-//# sourceMappingURL=lock-46FWYE4D.js.map
+//# sourceMappingURL=lock-HQ4KARU2.js.map

package/dist/{lock-commands-ZZKZ4LZJ.js → lock-commands-6U7UIJGR.js}

@@ -1,24 +1,24 @@
 import {
   loadDefault
-} from "./chunk-RCT7UX7B.js";
-import "./chunk-CTD5ZCV6.js";
+} from "./chunk-RLI6XD4O.js";
+import "./chunk-7WRJPKGK.js";
 import {
   readLockFile,
   writeLockFile
-} from "./chunk-XEOX6AM7.js";
+} from "./chunk-3LQGF2WS.js";
 import {
   UsageError,
   missingArgument,
   unknownSubcommand
-} from "./chunk-F6CYJ7TN.js";
+} from "./chunk-Z2ZIE5CO.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-EZG76F7R.js";
 import {
   Xano
-} from "./chunk-OWGCOGKK.js";
-import "./chunk-DIA7CT7J.js";
-import "./chunk-QK7ZQJLP.js";
-import "./chunk-WHOJWOSV.js";
+} from "./chunk-MEFMTICH.js";
+import "./chunk-V5Y7D4LH.js";
+import "./chunk-N74KDCBD.js";
+import "./chunk-EETVJZAZ.js";
 import {
   adoptFromBundle,
   createLockContext,
@@ -27,8 +27,8 @@ import {
   resetLockOverrides,
   resolvePayloadKey,
   seedLockOverrides
-} from "./chunk-VAF6A3YD.js";
-import "./chunk-5XZ744TS.js";
+} from "./chunk-XWFRNJMQ.js";
+import "./chunk-2ZCUO2UG.js";
 import "./chunk-OHX6MIUZ.js";
 
 // src/emit/lock-commands.ts
@@ -231,4 +231,4 @@ ${lines}
 export {
   runLockCommand
 };
-//# sourceMappingURL=lock-commands-ZZKZ4LZJ.js.map
+//# sourceMappingURL=lock-commands-6U7UIJGR.js.map

package/dist/{login-command-Z6CHTA57.js → login-command-P7LXD5TE.js}

@@ -5,10 +5,10 @@ import {
 } from "./chunk-W5NOKYEG.js";
 import {
   promptLine
-} from "./chunk-AIZKXUNP.js";
+} from "./chunk-IMLYGQK6.js";
 import {
   envMetaCredentialVarsSet
-} from "./chunk-QKM4U5UK.js";
+} from "./chunk-TJS2AF5Y.js";
 import {
   CALLBACK_PATH,
   DEFAULT_PORT,
@@ -26,7 +26,7 @@ import {
 } from "./chunk-FE5I6S6N.js";
 import {
   UsageError
-} from "./chunk-F6CYJ7TN.js";
+} from "./chunk-Z2ZIE5CO.js";
 import "./chunk-GNPVYOPB.js";
 import {
   blank,
@@ -37,7 +37,7 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-DIA7CT7J.js";
+import "./chunk-V5Y7D4LH.js";
 
 // src/emit/login-command.ts
 import * as client from "openid-client";
@@ -177,7 +177,7 @@ async function attemptLogin(p) {
       `Could not determine the instance from the issued token (no readable \`aud\` claim). This is unexpected \u2014 please report it.`
     );
   }
-  const { resolveScopedWorkspaceId } = await import("./workspace-2COHDBM3.js");
+  const { resolveScopedWorkspaceId } = await import("./workspace-33KHFLX3.js");
   detail("Resolving the workspace this token is scoped to\u2026");
   const workspaceId = await resolveScopedWorkspaceId({
     access_token: tokens.access_token,
@@ -267,4 +267,4 @@ async function acquireByPaste(p) {
 export {
   runLoginCommand
 };
-//# sourceMappingURL=login-command-Z6CHTA57.js.map
+//# sourceMappingURL=login-command-P7LXD5TE.js.map

package/dist/{loop-D5NPL4VH.js → loop-IC5ISSYB.js}

@@ -3,10 +3,10 @@ import {
   indexByIdentity,
   kindIsRunnable,
   resolveMatch
-} from "./chunk-TCFIPDB3.js";
+} from "./chunk-AVGDL6RB.js";
 import {
   normalize
-} from "./chunk-3INK4Y4E.js";
+} from "./chunk-AE3PDSDS.js";
 
 // src/validate/loop.ts
 async function runValidateLoop(client, bundleText) {
@@ -90,4 +90,4 @@ export {
   runValidateLoop,
   runnableFunctionNames
 };
-//# sourceMappingURL=loop-D5NPL4VH.js.map
+//# sourceMappingURL=loop-IC5ISSYB.js.map

package/dist/{marketplace-command-P4IPLJ6J.js → marketplace-command-T6JCHW7J.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-NUQCEOKA.js";
 import {
   serverMessage
-} from "./chunk-3IGNIP6R.js";
+} from "./chunk-NDP7OUPS.js";
 import {
   runNpm
 } from "./chunk-ZSYZTGJH.js";
@@ -15,7 +15,7 @@ import {
   UsageError,
   indentBlock,
   missingArgument
-} from "./chunk-F6CYJ7TN.js";
+} from "./chunk-Z2ZIE5CO.js";
 import {
   blank,
   detail,
@@ -26,7 +26,7 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-DIA7CT7J.js";
+import "./chunk-V5Y7D4LH.js";
 
 // src/emit/marketplace-catalogue.ts
 var DEFAULT_BASE_URL = "https://xare-rvr8-mnnt.dev.xano.io";
@@ -362,4 +362,4 @@ export {
   runMarketplaceListCommand,
   runMarketplaceSearchCommand
 };
-//# sourceMappingURL=marketplace-command-P4IPLJ6J.js.map
+//# sourceMappingURL=marketplace-command-T6JCHW7J.js.map

package/dist/{meta-client-K2J4XH64.js → meta-client-LKRKR3L2.js}

@@ -1,18 +1,18 @@
 import {
   importWorkspaceArchive
-} from "./chunk-WP4OZZV4.js";
+} from "./chunk-3VFCKHOB.js";
 import {
   createEphemeral,
   deleteEphemeral,
   isEphemeralDisabled,
   waitUntilReady
-} from "./chunk-VNQM3V2C.js";
+} from "./chunk-EXENFOWE.js";
 import {
   decodeWorkspaceArchive,
   encodeWorkspaceArchive
 } from "./chunk-ZUTSMMAG.js";
 import "./chunk-X4DVXBFY.js";
-import "./chunk-3IGNIP6R.js";
+import "./chunk-NDP7OUPS.js";
 
 // src/validate/meta-client.ts
 var REQUEST_TIMEOUT_MS = 6e4;
@@ -167,4 +167,4 @@ ${text}`);
 export {
   MetaClient
 };
-//# sourceMappingURL=meta-client-K2J4XH64.js.map
+//# sourceMappingURL=meta-client-LKRKR3L2.js.map