@xanots/sdk 0.0.3-beta.0 → 0.0.3

package/dist/{chunk-HKAX756N.js → chunk-W2G2WPTB.js}

@@ -1,9 +1,9 @@
 import {
   compileBundle
-} from "./chunk-VVXPK6SE.js";
+} from "./chunk-3NFUWXOC.js";
 import {
   missingArgument
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 
 // src/emit/bundle-input.ts
 import { existsSync, readFileSync } from "fs";
@@ -34,4 +34,4 @@ export {
   assertBundleInput,
   loadBundleText
 };
-//# sourceMappingURL=chunk-HKAX756N.js.map
+//# sourceMappingURL=chunk-W2G2WPTB.js.map

package/dist/chunk-WUSKBXXD.js

@@ -0,0 +1,25 @@
+// src/emit/npm.ts
+import { spawnSync } from "child_process";
+function npmBinary() {
+  return process.platform === "win32" ? "npm.cmd" : "npm";
+}
+function runNpm(args, cwd) {
+  const res = spawnSync(npmBinary(), [...args], { cwd, stdio: "inherit" });
+  return res.status ?? 1;
+}
+function runNpmCapturingStderr(args, cwd) {
+  const res = spawnSync(npmBinary(), [...args], {
+    cwd,
+    stdio: ["inherit", "inherit", "pipe"],
+    encoding: "utf8"
+  });
+  const stderr = res.stderr ?? "";
+  if (stderr !== "") process.stderr.write(stderr);
+  return { status: res.status ?? 1, stderr };
+}
+
+export {
+  runNpm,
+  runNpmCapturingStderr
+};
+//# sourceMappingURL=chunk-WUSKBXXD.js.map

package/dist/{chunk-EWFHDJY5.js → chunk-ZO3HJOCJ.js}

@@ -1,6 +1,6 @@
 import {
   UsageError
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import {
   style
 } from "./chunk-EZG76F7R.js";
@@ -26,4 +26,4 @@ async function confirm(message, opts) {
 export {
   confirm
 };
-//# sourceMappingURL=chunk-EWFHDJY5.js.map
+//# sourceMappingURL=chunk-ZO3HJOCJ.js.map

package/dist/cli.d.ts

@@ -159,6 +159,15 @@ interface ParsedArgs {
      * else write none. Validated in the init command, not at parse time.
      */
     ai: string[];
+    /**
+     * `init` `--marketplace <pkg>` (repeatable, comma-separated): marketplace
+     * add-ons to install into the new project and register in `xano/index.ts`.
+     *
+     * One flag rather than a follow-up command so that the whole project is one
+     * reproducible line — which is the promise onboarding makes when it prints
+     * the command it ran. Validated in `init-modules.ts`, not at parse time.
+     */
+    marketplace: string[];
     /**
      * `init`/`codegen` `--framework <id>`: which frontend to scaffold
      * (`react`/`svelte`). Undefined = prompt in a TTY, else the default.

package/dist/cli.js

@@ -8,13 +8,13 @@ import {
   resolveHelpRequest,
   resolveLockPath,
   run
-} from "./chunk-VVXPK6SE.js";
-import "./chunk-FY6LXRR6.js";
+} from "./chunk-3NFUWXOC.js";
+import "./chunk-6USV65XA.js";
 import "./chunk-HJPTWBLH.js";
 import "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";

package/dist/{codegen-command-EXLKZ2ZI.js → codegen-command-FIADGXRN.js}

@@ -4,13 +4,13 @@ import {
   isMissingDependencyError,
   runCodegenCommand,
   verifyCrashEntry
-} from "./chunk-CBL57QBQ.js";
+} from "./chunk-2V4YE6QC.js";
 import "./chunk-P3TTMWUP.js";
 import "./chunk-QTNO2WD6.js";
 import "./chunk-ZUTSMMAG.js";
-import "./chunk-4HKZH6YK.js";
-import "./chunk-WRYT2PAX.js";
-import "./chunk-47WDWMBJ.js";
+import "./chunk-HQ2CBRVI.js";
+import "./chunk-CMZLPTGW.js";
+import "./chunk-WUSKBXXD.js";
 import "./chunk-3IGNIP6R.js";
 import "./chunk-C56BC2FY.js";
 import "./chunk-7REDODS2.js";
@@ -21,13 +21,13 @@ import "./chunk-YZ4GU6F5.js";
 import "./chunk-6DHJVLYP.js";
 import "./chunk-4BXJGVZ3.js";
 import "./chunk-U3G2UW65.js";
-import "./chunk-VVXPK6SE.js";
-import "./chunk-FY6LXRR6.js";
+import "./chunk-3NFUWXOC.js";
+import "./chunk-6USV65XA.js";
 import "./chunk-HJPTWBLH.js";
 import "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
@@ -39,4 +39,4 @@ export {
   runCodegenCommand,
   verifyCrashEntry
 };
-//# sourceMappingURL=codegen-command-EXLKZ2ZI.js.map
+//# sourceMappingURL=codegen-command-FIADGXRN.js.map

package/dist/{completion-2PVZK6YX.js → completion-BKAFCZBE.js}

@@ -5,7 +5,7 @@ import {
   getCommand,
   liveCommandNames,
   liveSubcommandNames
-} from "./chunk-QO4I5OYF.js";
+} from "./chunk-DYCLVQXW.js";
 
 // src/emit/completion.ts
 var COMPLETION_SHELLS = ["bash", "zsh", "fish"];
@@ -295,4 +295,4 @@ export {
   renderCompletion,
   runCompletionCommand
 };
-//# sourceMappingURL=completion-2PVZK6YX.js.map
+//# sourceMappingURL=completion-BKAFCZBE.js.map

package/dist/{deploy-command-SXX6RJWM.js → deploy-command-4R6BYC6G.js}

@@ -1,7 +1,7 @@
 import {
   assertBundleInput,
   loadBundleText
-} from "./chunk-HKAX756N.js";
+} from "./chunk-W2G2WPTB.js";
 import {
   importWorkspaceArchive
 } from "./chunk-5WGEURVI.js";
@@ -42,10 +42,10 @@ import {
 } from "./chunk-C56BC2FY.js";
 import "./chunk-7REDODS2.js";
 import "./chunk-X4DVXBFY.js";
-import "./chunk-VVXPK6SE.js";
+import "./chunk-3NFUWXOC.js";
 import {
   assertWritableDest
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import "./chunk-HJPTWBLH.js";
 import {
   blank,
@@ -63,7 +63,7 @@ import {
 } from "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
@@ -158,7 +158,7 @@ async function runDeployedTests(auth, dest, summary, args) {
   }
 }
 async function runTestsOrThrow(auth, dest, summary, args) {
-  const { runSuite, EXIT_TESTS_FAILED } = await import("./test-command-LLPXKT35.js");
+  const { runSuite, EXIT_TESTS_FAILED } = await import("./test-command-72Y5S22H.js");
   let target;
   if (dest === "ephemeral") {
     if (summary.url === void 0) {
@@ -168,7 +168,7 @@ async function runTestsOrThrow(auth, dest, summary, args) {
     const name = summary.ephemeral?.name;
     target = { base: summary.url, workspaceId: 1, label: name ? `ephemeral ${name}` : "the ephemeral", env: name };
   } else {
-    const { resolveMetaTarget } = await import("./env-target-3EGIPR4D.js");
+    const { resolveMetaTarget } = await import("./env-target-XWS2ZZ2Y.js");
     target = await resolveMetaTarget(auth, { dest: "sandbox" });
   }
   const outcomes = await runSuite(auth, target, {
@@ -448,4 +448,4 @@ export {
   runDeployedTests,
   verifyMicroservices
 };
-//# sourceMappingURL=deploy-command-SXX6RJWM.js.map
+//# sourceMappingURL=deploy-command-4R6BYC6G.js.map

package/dist/{env-target-3EGIPR4D.js → env-target-XWS2ZZ2Y.js}

@@ -1,6 +1,6 @@
 import {
   resolveMetaTarget
-} from "./chunk-MWLNBSTY.js";
+} from "./chunk-BT2CSEC5.js";
 import "./chunk-DGSF2Q5H.js";
 import "./chunk-7DKX2SPN.js";
 import "./chunk-NDZFBZHC.js";
@@ -13,4 +13,4 @@ import "./chunk-GNPVYOPB.js";
 export {
   resolveMetaTarget
 };
-//# sourceMappingURL=env-target-3EGIPR4D.js.map
+//# sourceMappingURL=env-target-XWS2ZZ2Y.js.map

package/dist/{ephemeral-command-OGOYP7D6.js → ephemeral-command-JL4TPIRQ.js}

@@ -1,6 +1,6 @@
 import {
   confirm
-} from "./chunk-EWFHDJY5.js";
+} from "./chunk-ZO3HJOCJ.js";
 import {
   deleteEphemeral,
   getEphemeral,
@@ -41,7 +41,7 @@ import "./chunk-7REDODS2.js";
 import "./chunk-X4DVXBFY.js";
 import {
   unknownSubcommand
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import {
   detail,
   formatExpiration,
@@ -53,7 +53,7 @@ import {
   warn
 } from "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 
 // src/emit/ephemeral-command.ts
 import { writeFileSync } from "fs";
@@ -90,7 +90,7 @@ async function runEphemeralCommand(args) {
     case "impersonate":
       return runImpersonate(args);
     case "codegen": {
-      const { runCodegenCommand } = await import("./codegen-command-EXLKZ2ZI.js");
+      const { runCodegenCommand } = await import("./codegen-command-FIADGXRN.js");
       return runCodegenCommand(args, { kind: "ephemeral" });
     }
     default:
@@ -239,4 +239,4 @@ export {
   resolveLive,
   runEphemeralCommand
 };
-//# sourceMappingURL=ephemeral-command-OGOYP7D6.js.map
+//# sourceMappingURL=ephemeral-command-JL4TPIRQ.js.map

package/dist/{init-command-6DGXEVZD.js → init-command-LOK75W64.js}

@@ -2,20 +2,20 @@ import {
   projectShellFiles,
   runInitCommand,
   sanitizeAppName
-} from "./chunk-4HKZH6YK.js";
+} from "./chunk-HQ2CBRVI.js";
 import {
   resolveAiFlags
-} from "./chunk-WRYT2PAX.js";
-import "./chunk-47WDWMBJ.js";
+} from "./chunk-CMZLPTGW.js";
+import "./chunk-WUSKBXXD.js";
 import "./chunk-YZ4GU6F5.js";
 import "./chunk-6DHJVLYP.js";
-import "./chunk-VVXPK6SE.js";
-import "./chunk-FY6LXRR6.js";
+import "./chunk-3NFUWXOC.js";
+import "./chunk-6USV65XA.js";
 import "./chunk-HJPTWBLH.js";
 import "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
@@ -26,4 +26,4 @@ export {
   runInitCommand,
   sanitizeAppName
 };
-//# sourceMappingURL=init-command-6DGXEVZD.js.map
+//# sourceMappingURL=init-command-LOK75W64.js.map

package/dist/internal.js

@@ -62,7 +62,7 @@ import {
   GLOBAL_FLAGS,
   flagKey,
   flagSummary
-} from "./chunk-QO4I5OYF.js";
+} from "./chunk-DYCLVQXW.js";
 import {
   DECODE_ONLY_STATEMENTS,
   FILTER_NAMES,
@@ -1292,13 +1292,14 @@ function renderSections(m) {
     ""
   ];
   const kindsAgentMcp = [
-    "- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, llm?, output? })` \u2014 an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`, so a server that carries LLM settings can say so. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint \u2014 `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<\u2026>/stream` path (an earlier result) THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral; does NOT fire in the sandbox (see Gotchas).",
+    "- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, llm?, output? })` \u2014 an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint \u2014 `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<\u2026>/stream` path THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral; not in sandbox.",
     "  - `tools?`: a `ToolsetToolEntry[]`. Pass the `tool()` HANDLES directly (`tools: [saveNote]`), like every other collection in the SDK; use the `{ tool, enabled?, auth? }` wrapper only when a tool needs `enabled: false` or per-tool `auth`. `auth` names an auth **table** (a `table({ auth: true })` handle or its name) \u2014 Xano's ONLY MCP auth surface (per-tool; there is no server-level gate). An entry that names no tool (no handle, no `id`) THROWS at export rather than emitting the `id: 0` null reference it used to; a deliberate raw `id: 0` warns and is carried through, so a pulled workspace still round-trips.",
     "- `agent({ name, guid?, description?, docs?, enabled?, canonical?, tags?, history?, llm, tools?, output? })` \u2014 an LLM orchestrator. No top-level `instructions`/`prompt`/`spec` \u2014 the prompt lives under `llm`. Invoke from a stack with `s.ai.agent.run({ agent, args })`.",
     '  - `llm` (REQUIRED): typed provider settings, a discriminated union on `type` (`"xano-free" | "anthropic" | "openai" | "google-genai"`). Shared fields: `systemPrompt?`, `maxSteps?` (default `5`), and `prompt?` XOR `messages?` (genuinely exclusive: both is a type error and throws \u2014 the engine stores ONE `prompt_type`, so one would be dropped); plus provider fields (`apiKey?`, `model?`, `temperature?`, `reasoningEffort?`, \u2026). String fields accept Twig placeholders \u2014 `{{ $args.x }}` for run inputs (the `args` of `s.ai.agent.run`), `{{ $env.NAME }}` for env vars.',
     "  - `tools?`: same `ToolsetToolEntry[]` as `mcpServer` \u2014 bare `tool()` handles, or a `{ tool, enabled?, auth? }` wrapper when one needs `enabled`/`auth`.",
     '  - `output?`: `{ schema: Record<string, input.*>, enabled? }` \u2014 structured-output schema. `schema` is a named-field record authored with the `input.*` catalog, exactly like a `defineFunction`/`query` `input:` map (the stored `structuredOutputsSchema` is the same wire shape as function inputs). e.g. `output: { schema: { priority: input.enum(["low","high"]), summary: input.text() } }`. When you pass the agent *handle* to `s.ai.agent.run({ agent })`, `.result` is typed straight from this schema \u2014 no `resultShape` witness needed (the shape is declared once). `resultShape` remains only to override that, or to type an agent referenced by bare name.',
-    '  - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, as: "run" })`) \u2014 it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var({ name, value: ref("run.result.summary") })`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` \u2014 raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. Tool-call / per-step data (when tools ran) rides `.toolCalls` / `.steps` on the same envelope \u2014 both optional, absent or empty when no tools executed.'
+    '  - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, as: "run" })`) \u2014 it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var({ name, value: ref("run.result.summary") })`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` \u2014 raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. Tool-call / per-step data (when tools ran) rides `.toolCalls` / `.steps` on the same envelope \u2014 both optional, absent or empty when no tools executed.',
+    "  - **Marketplace:** for chat history, use `@xanots/chatbot`; for vector RAG, use `@xanots/vector` (`tools: [vector.searchTool]`). Find add-ons with `xanots marketplace search <q>`."
   ];
   const kindsRealtime = [
     "- **Realtime** \u2014 the only three-level chain: `realtimeServer` owns `realtimeChannel`s, which own `realtimeMessage` handlers. Pass the HANDLE, not a name (a channel path is unique only within its server).",

package/dist/{lock-commands-R22J54XV.js → lock-commands-XOYS75YQ.js}

@@ -1,11 +1,11 @@
 import {
   loadDefault
-} from "./chunk-VVXPK6SE.js";
+} from "./chunk-3NFUWXOC.js";
 import {
   UsageError,
   missingArgument,
   unknownSubcommand
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import {
   readLockFile,
   writeLockFile
@@ -15,7 +15,7 @@ import "./chunk-GNPVYOPB.js";
 import {
   Xano
 } from "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
@@ -229,4 +229,4 @@ ${lines}
 export {
   runLockCommand
 };
-//# sourceMappingURL=lock-commands-R22J54XV.js.map
+//# sourceMappingURL=lock-commands-XOYS75YQ.js.map

package/dist/{marketplace-command-XJIWL4YP.js → marketplace-command-UVV3XAOL.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-NUQCEOKA.js";
 import {
   runNpm
-} from "./chunk-47WDWMBJ.js";
+} from "./chunk-WUSKBXXD.js";
 import {
   serverMessage
 } from "./chunk-3IGNIP6R.js";
@@ -12,7 +12,7 @@ import {
   UsageError,
   indentBlock,
   missingArgument
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import {
   blank,
   detail,
@@ -23,7 +23,7 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 
 // src/emit/marketplace-command.ts
 import { existsSync, readFileSync } from "fs";
@@ -376,4 +376,4 @@ export {
   runMarketplaceListCommand,
   runMarketplaceSearchCommand
 };
-//# sourceMappingURL=marketplace-command-XJIWL4YP.js.map
+//# sourceMappingURL=marketplace-command-UVV3XAOL.js.map

package/dist/node.js

@@ -108,8 +108,8 @@ import {
   run,
   writeArtifact,
   writeBundle
-} from "./chunk-VVXPK6SE.js";
-import "./chunk-FY6LXRR6.js";
+} from "./chunk-3NFUWXOC.js";
+import "./chunk-6USV65XA.js";
 import {
   readLockFile,
   writeLockFile
@@ -120,7 +120,7 @@ import {
   Xano,
   workspace
 } from "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import {
   LAMBDA_BINDINGS,
   LAMBDA_CODE_FILTERS,

package/dist/{release-command-6PLMLGDK.js → release-command-HZUY2XZX.js}

@@ -1,14 +1,14 @@
 import {
   assertBundleInput,
   loadBundleText
-} from "./chunk-HKAX756N.js";
+} from "./chunk-W2G2WPTB.js";
 import {
   importWorkspaceArchive,
   planWorkspaceImport
 } from "./chunk-5WGEURVI.js";
 import {
   confirm
-} from "./chunk-EWFHDJY5.js";
+} from "./chunk-ZO3HJOCJ.js";
 import {
   encodeWorkspaceArchive
 } from "./chunk-ZUTSMMAG.js";
@@ -24,11 +24,11 @@ import "./chunk-7REDODS2.js";
 import "./chunk-X4DVXBFY.js";
 import {
   resolveLockPath
-} from "./chunk-VVXPK6SE.js";
+} from "./chunk-3NFUWXOC.js";
 import {
   UsageError,
   assertWritableDest
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import {
   readLockFile
 } from "./chunk-HJPTWBLH.js";
@@ -43,7 +43,7 @@ import {
 } from "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
@@ -338,7 +338,7 @@ async function runReleaseCommand(args) {
     { withSeed: req.records === true }
   );
   if (args.static !== void 0) {
-    const { assertNoSeedLeaks } = await import("./deploy-command-SXX6RJWM.js");
+    const { assertNoSeedLeaks } = await import("./deploy-command-4R6BYC6G.js");
     await assertNoSeedLeaks(args.static, nonPublicSeedValues, args.allowSeedInStatic);
   }
   const workspaceId = auth.workspaceId;
@@ -405,7 +405,7 @@ async function runReleaseCommand(args) {
     unchangedEnv: losses.unchangedEnv
   };
   if (args.static !== void 0) {
-    const { buildStaticEnv, deployStaticTo } = await import("./deploy-command-SXX6RJWM.js");
+    const { buildStaticEnv, deployStaticTo } = await import("./deploy-command-4R6BYC6G.js");
     const env = buildStaticEnv(auth.instance, args.staticEnv);
     const explicit = Object.keys(args.staticEnv).length > 0;
     summary.static = await deployStaticTo(
@@ -424,4 +424,4 @@ async function runReleaseCommand(args) {
 export {
   runReleaseCommand
 };
-//# sourceMappingURL=release-command-6PLMLGDK.js.map
+//# sourceMappingURL=release-command-HZUY2XZX.js.map

package/dist/{test-command-LLPXKT35.js → test-command-72Y5S22H.js}

@@ -1,6 +1,6 @@
 import {
   resolveMetaTarget
-} from "./chunk-MWLNBSTY.js";
+} from "./chunk-BT2CSEC5.js";
 import "./chunk-DGSF2Q5H.js";
 import "./chunk-7DKX2SPN.js";
 import "./chunk-NDZFBZHC.js";
@@ -19,7 +19,7 @@ import {
 import "./chunk-7REDODS2.js";
 import {
   unknownSubcommand
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import {
   blank,
   detail,
@@ -29,7 +29,7 @@ import {
   warn
 } from "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 
 // src/deploy/tests.ts
 var TIMEOUT_MS = 12e4;
@@ -380,4 +380,4 @@ export {
   runSuite,
   runTestCommand
 };
-//# sourceMappingURL=test-command-LLPXKT35.js.map
+//# sourceMappingURL=test-command-72Y5S22H.js.map

package/dist/{validate-command-WAT3ZJT3.js → validate-command-KDGH537H.js}

@@ -1,9 +1,9 @@
 import {
   assertBundleInput,
   loadBundleText
-} from "./chunk-HKAX756N.js";
-import "./chunk-VVXPK6SE.js";
-import "./chunk-FY6LXRR6.js";
+} from "./chunk-W2G2WPTB.js";
+import "./chunk-3NFUWXOC.js";
+import "./chunk-6USV65XA.js";
 import "./chunk-HJPTWBLH.js";
 import {
   blank,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
@@ -119,4 +119,4 @@ function fmt(v) {
 export {
   runValidateCommand
 };
-//# sourceMappingURL=validate-command-WAT3ZJT3.js.map
+//# sourceMappingURL=validate-command-KDGH537H.js.map

package/dist/{workspace-command-JKMI7RZ4.js → workspace-command-ICSI6PKO.js}

@@ -1,7 +1,7 @@
 import {
   fetchWorkspaceBundle,
   runCodegenCommand
-} from "./chunk-CBL57QBQ.js";
+} from "./chunk-2V4YE6QC.js";
 import "./chunk-P3TTMWUP.js";
 import {
   resolveOutputTarget
@@ -17,9 +17,9 @@ import {
   isMachineOutput,
   writeJson
 } from "./chunk-NUQCEOKA.js";
-import "./chunk-4HKZH6YK.js";
-import "./chunk-WRYT2PAX.js";
-import "./chunk-47WDWMBJ.js";
+import "./chunk-HQ2CBRVI.js";
+import "./chunk-CMZLPTGW.js";
+import "./chunk-WUSKBXXD.js";
 import {
   fetchOrExplain,
   httpFailure
@@ -36,11 +36,11 @@ import "./chunk-YZ4GU6F5.js";
 import "./chunk-6DHJVLYP.js";
 import "./chunk-4BXJGVZ3.js";
 import "./chunk-U3G2UW65.js";
-import "./chunk-VVXPK6SE.js";
+import "./chunk-3NFUWXOC.js";
 import {
   removedSubcommand,
   unknownSubcommand
-} from "./chunk-FY6LXRR6.js";
+} from "./chunk-6USV65XA.js";
 import "./chunk-HJPTWBLH.js";
 import {
   formatFields,
@@ -50,7 +50,7 @@ import {
 } from "./chunk-EZG76F7R.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-55VHDNW5.js";
-import "./chunk-QO4I5OYF.js";
+import "./chunk-DYCLVQXW.js";
 import "./chunk-5L4X5LS6.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
@@ -155,4 +155,4 @@ async function runExport(args) {
 export {
   runWorkspaceCommand
 };
-//# sourceMappingURL=workspace-command-JKMI7RZ4.js.map
+//# sourceMappingURL=workspace-command-ICSI6PKO.js.map

package/llms/kinds-agent-mcp.md

@@ -2,10 +2,11 @@
 
 > Read when the workspace defines an `agent()` or an `mcpServer()`.
 
-- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, llm?, output? })` — an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`, so a server that carries LLM settings can say so. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint — `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<…>/stream` path (an earlier result) THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral; does NOT fire in the sandbox (see Gotchas).
+- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, llm?, output? })` — an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint — `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<…>/stream` path THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral; not in sandbox.
   - `tools?`: a `ToolsetToolEntry[]`. Pass the `tool()` HANDLES directly (`tools: [saveNote]`), like every other collection in the SDK; use the `{ tool, enabled?, auth? }` wrapper only when a tool needs `enabled: false` or per-tool `auth`. `auth` names an auth **table** (a `table({ auth: true })` handle or its name) — Xano's ONLY MCP auth surface (per-tool; there is no server-level gate). An entry that names no tool (no handle, no `id`) THROWS at export rather than emitting the `id: 0` null reference it used to; a deliberate raw `id: 0` warns and is carried through, so a pulled workspace still round-trips.
 - `agent({ name, guid?, description?, docs?, enabled?, canonical?, tags?, history?, llm, tools?, output? })` — an LLM orchestrator. No top-level `instructions`/`prompt`/`spec` — the prompt lives under `llm`. Invoke from a stack with `s.ai.agent.run({ agent, args })`.
   - `llm` (REQUIRED): typed provider settings, a discriminated union on `type` (`"xano-free" | "anthropic" | "openai" | "google-genai"`). Shared fields: `systemPrompt?`, `maxSteps?` (default `5`), and `prompt?` XOR `messages?` (genuinely exclusive: both is a type error and throws — the engine stores ONE `prompt_type`, so one would be dropped); plus provider fields (`apiKey?`, `model?`, `temperature?`, `reasoningEffort?`, …). String fields accept Twig placeholders — `{{ $args.x }}` for run inputs (the `args` of `s.ai.agent.run`), `{{ $env.NAME }}` for env vars.
   - `tools?`: same `ToolsetToolEntry[]` as `mcpServer` — bare `tool()` handles, or a `{ tool, enabled?, auth? }` wrapper when one needs `enabled`/`auth`.
   - `output?`: `{ schema: Record<string, input.*>, enabled? }` — structured-output schema. `schema` is a named-field record authored with the `input.*` catalog, exactly like a `defineFunction`/`query` `input:` map (the stored `structuredOutputsSchema` is the same wire shape as function inputs). e.g. `output: { schema: { priority: input.enum(["low","high"]), summary: input.text() } }`. When you pass the agent *handle* to `s.ai.agent.run({ agent })`, `.result` is typed straight from this schema — no `resultShape` witness needed (the shape is declared once). `resultShape` remains only to override that, or to type an agent referenced by bare name.
   - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, as: "run" })`) — it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var({ name, value: ref("run.result.summary") })`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` — raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. Tool-call / per-step data (when tools ran) rides `.toolCalls` / `.steps` on the same envelope — both optional, absent or empty when no tools executed.
+  - **Marketplace:** for chat history, use `@xanots/chatbot`; for vector RAG, use `@xanots/vector` (`tools: [vector.searchTool]`). Find add-ons with `xanots marketplace search <q>`.

package/llms-full.txt

@@ -1,4 +1,4 @@
-# xanots v0.0.3-beta.0
+# xanots v0.0.3
 
 > TypeScript SDK that compiles a typed Xano workspace into the importable packageExport JSON bundle.
 
@@ -646,13 +646,14 @@ The run is isolated in ways that make a correct test fail for reasons the failur
 
 > Read when the workspace defines an `agent()` or an `mcpServer()`.
 
-- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, llm?, output? })` — an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`, so a server that carries LLM settings can say so. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint — `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<…>/stream` path (an earlier result) THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral; does NOT fire in the sandbox (see Gotchas).
+- `mcpServer({ name, guid?, description?, instructions?, docs?, enabled?, canonical?, spec?, tags?, history?, tools?, llm?, output? })` — an MCP toolset. `llm?`/`output?` are the same blocks `agent()` takes and are usually absent: an MCP server and an agent are ONE stored object distinguished by `type`. Returns a handle with `getPath()`/`getUrl(baseUrl)` for the Streamable-HTTP endpoint — `getUrl` is NOT idempotent, a `baseUrl` already carrying an `/x2/mcp/<…>/stream` path THROWS, so resolve ONCE from the instance base URL. Fires on an ephemeral; not in sandbox.
   - `tools?`: a `ToolsetToolEntry[]`. Pass the `tool()` HANDLES directly (`tools: [saveNote]`), like every other collection in the SDK; use the `{ tool, enabled?, auth? }` wrapper only when a tool needs `enabled: false` or per-tool `auth`. `auth` names an auth **table** (a `table({ auth: true })` handle or its name) — Xano's ONLY MCP auth surface (per-tool; there is no server-level gate). An entry that names no tool (no handle, no `id`) THROWS at export rather than emitting the `id: 0` null reference it used to; a deliberate raw `id: 0` warns and is carried through, so a pulled workspace still round-trips.
 - `agent({ name, guid?, description?, docs?, enabled?, canonical?, tags?, history?, llm, tools?, output? })` — an LLM orchestrator. No top-level `instructions`/`prompt`/`spec` — the prompt lives under `llm`. Invoke from a stack with `s.ai.agent.run({ agent, args })`.
   - `llm` (REQUIRED): typed provider settings, a discriminated union on `type` (`"xano-free" | "anthropic" | "openai" | "google-genai"`). Shared fields: `systemPrompt?`, `maxSteps?` (default `5`), and `prompt?` XOR `messages?` (genuinely exclusive: both is a type error and throws — the engine stores ONE `prompt_type`, so one would be dropped); plus provider fields (`apiKey?`, `model?`, `temperature?`, `reasoningEffort?`, …). String fields accept Twig placeholders — `{{ $args.x }}` for run inputs (the `args` of `s.ai.agent.run`), `{{ $env.NAME }}` for env vars.
   - `tools?`: same `ToolsetToolEntry[]` as `mcpServer` — bare `tool()` handles, or a `{ tool, enabled?, auth? }` wrapper when one needs `enabled`/`auth`.
   - `output?`: `{ schema: Record<string, input.*>, enabled? }` — structured-output schema. `schema` is a named-field record authored with the `input.*` catalog, exactly like a `defineFunction`/`query` `input:` map (the stored `structuredOutputsSchema` is the same wire shape as function inputs). e.g. `output: { schema: { priority: input.enum(["low","high"]), summary: input.text() } }`. When you pass the agent *handle* to `s.ai.agent.run({ agent })`, `.result` is typed straight from this schema — no `resultShape` witness needed (the shape is declared once). `resultShape` remains only to override that, or to type an agent referenced by bare name.
   - **Run + read recipe (`s.ai.agent.run`):** bind the run to a var (`s.ai.agent.run({ agent, args, as: "run" })`) — it produces a rich envelope, and the completion is at **`.result`**. Read one structured field with a dotted ref (`response: ref("run.result.priority")`) or the whole completion (`ref("run.result")`, typed from `output.schema`); persist it in a later step the same way (`s.set_var({ name, value: ref("run.result.summary") })`). `args` is a plain object of run inputs (`{ topic: inp("topic") }` — raw literals are fine, e.g. `{ max_steps: 3 }`) surfaced to the agent as `{{ $args.topic }}`. Tool-call / per-step data (when tools ran) rides `.toolCalls` / `.steps` on the same envelope — both optional, absent or empty when no tools executed.
+  - **Marketplace:** for chat history, use `@xanots/chatbot`; for vector RAG, use `@xanots/vector` (`tools: [vector.searchTool]`). Find add-ons with `xanots marketplace search <q>`.
 
 # Realtime def shapes
 

package/llms.txt

@@ -1,4 +1,4 @@
-# xanots v0.0.3-beta.0
+# xanots v0.0.3
 
 > TypeScript SDK that compiles a typed Xano workspace into the importable packageExport JSON bundle.