@xanots/sdk 0.0.5 → 0.0.6

package/CHANGELOG.md

@@ -11,6 +11,18 @@ listed here.
 
 ---
 
+## 0.0.5 — Sign in without a loopback
+
+_2026-08-26_ · [release notes](https://github.com/xanots/sdk/releases/tag/v0.0.5)
+
+`xanots login` only ever worked when the browser finishing consent could reach your machine's `127.0.0.1`. On a remote shell, a container, or a Codespace it can't — the redirect lands nowhere and login sits there for five minutes before timing out. `xanots login --paste` fixes that: it binds nothing, prints the URL for you to open anywhere, and you paste the redirect back. This release also corrects two documented promises that were wrong, one of which was actively misleading for exactly this case.
+
+- `xanots login --paste` signs you in where the loopback can't be reached
+- `XANO_NO_BROWSER` never covered remote shells, despite saying it did
+- `--port` documented a default it did not have
+
+---
+
 ## 0.0.4 — The markdown your agents read
 
 _2026-08-26_ · [release notes](https://github.com/xanots/sdk/releases/tag/v0.0.4)

package/README.md

@@ -106,9 +106,9 @@ npx @xanots/sdk init my-app && cd my-app
 npm run dev                       # the frontend runs immediately
 ```
 
-In a terminal it asks three questions — framework, theme, AI instruction files — each with a
-default. The theme is shadcn's own: a base color plus an optional accent, rendered into the
-token stylesheet, with a complete dark palette either way.
+In a terminal it asks two questions — framework and AI instruction files — each with a
+default. The theme is a flag, not a question: it is shadcn's own, a base color plus an
+optional accent, rendered into the token stylesheet with a complete dark palette either way.
 
 ```bash
 npx @xanots/sdk init my-app --theme zinc-blue --dark toggle

package/dist/.build-fingerprint

@@ -1 +1 @@
-c0021219c47ba8aba005451538637f3d324faefad89c71468080cbe5bd443fa1
+2ea4560ab5068ad3f41aaaccf9f6084502c807310086df6cd6a011bb8ab31aec

package/dist/{agent-file-refresh-IJ7GN2FJ.js → agent-file-refresh-6XT23SLU.js}

@@ -3,10 +3,10 @@ import {
   codingAgentDetected,
   isCI,
   refreshAgentFiles
-} from "./chunk-D6OGU2AI.js";
-import "./chunk-7SISR3CS.js";
+} from "./chunk-P5OAM3G2.js";
+import "./chunk-2SUCC4DV.js";
 import "./chunk-ZSYZTGJH.js";
-import "./chunk-6DHJVLYP.js";
+import "./chunk-Q77KNEUL.js";
 import "./chunk-EZG76F7R.js";
 export {
   CI_ENV_VARS,
@@ -14,4 +14,4 @@ export {
   isCI,
   refreshAgentFiles
 };
-//# sourceMappingURL=agent-file-refresh-IJ7GN2FJ.js.map
+//# sourceMappingURL=agent-file-refresh-6XT23SLU.js.map

package/dist/bin.js

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
 import {
   maybeNotifyUpdate
-} from "./chunk-ZGA5MUNC.js";
+} from "./chunk-Y7BARS25.js";
 import {
   readVersion,
   run
-} from "./chunk-MS3BRZAZ.js";
+} from "./chunk-SOCYCBYG.js";
 import {
   exitCodeOf,
   reportFailure
-} from "./chunk-IVP6TS26.js";
-import "./chunk-MFIHIS6B.js";
+} from "./chunk-JQLR64UC.js";
+import "./chunk-OLQLJY5T.js";
 import "./chunk-GNPVYOPB.js";
 import {
   clearProgress,
   error
 } from "./chunk-EZG76F7R.js";
-import "./chunk-BPEEGJJA.js";
-import "./chunk-F5T45NAM.js";
-import "./chunk-YUPQOLFX.js";
+import "./chunk-3FQD3QME.js";
+import "./chunk-OKNSR7MT.js";
+import "./chunk-CQBJNFDK.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
-import "./chunk-YUBJLB6G.js";
+import "./chunk-EFH4NFPY.js";
 
 // src/emit/interrupt.ts
 var EXIT_SIGINT = 130;

package/dist/branch-commands-R4FR75UW.js

@@ -0,0 +1,134 @@
+import {
+  deleteBranch,
+  listBranches,
+  requireBranch,
+  setLiveBranch
+} from "./chunk-EQW3YT5U.js";
+import {
+  confirm
+} from "./chunk-4PTSTDIG.js";
+import {
+  getAccessToken
+} from "./chunk-SG4UBJ47.js";
+import "./chunk-LLWK6H77.js";
+import {
+  isMachineOutput,
+  writeJson
+} from "./chunk-NUQCEOKA.js";
+import "./chunk-3IGNIP6R.js";
+import {
+  UsageError
+} from "./chunk-JQLR64UC.js";
+import "./chunk-GNPVYOPB.js";
+import {
+  blank,
+  detail,
+  info,
+  step,
+  success,
+  warn
+} from "./chunk-EZG76F7R.js";
+import "./chunk-OKNSR7MT.js";
+
+// src/emit/branch-commands.ts
+var VERBS = ["list", "set-live", "delete"];
+function assertVerb(verb) {
+  if (verb !== void 0 && VERBS.includes(verb)) return verb;
+  throw new UsageError(
+    verb === void 0 ? `\`xanots workspace branch\` needs a verb: ${VERBS.join(", ")}.` : `\`xanots workspace branch ${verb}\` is not a verb. Expected one of: ${VERBS.join(", ")}.`,
+    { helpFor: { command: "workspace", subcommand: "branch" } }
+  );
+}
+function requireLabel(label, verb) {
+  if (label !== void 0 && label.trim() !== "") return label;
+  throw new UsageError(`\`xanots workspace branch ${verb}\` needs a branch label.`, {
+    helpFor: { command: "workspace", subcommand: "branch" }
+  });
+}
+function renderList(branches, workspaceId) {
+  blank();
+  step(`Branches in workspace #${workspaceId}`);
+  if (branches.length === 0) {
+    detail("none reported");
+    return;
+  }
+  for (const b of branches) {
+    const tags = [b.live ? "live" : "", b.backup ? "backup" : ""].filter(Boolean).join(", ");
+    detail(`${b.label}${tags === "" ? "" : `  (${tags})`}`);
+  }
+  blank();
+  detail("Branches scope logic. Tables and microservices are shared by every branch.");
+}
+async function runBranchCommand(args) {
+  const verb = assertVerb(args.positionals[0]);
+  const auth = await getAccessToken(args);
+  const workspaceId = auth.workspaceId;
+  const target = { baseUrl: auth.instance, workspaceId };
+  const branches = await listBranches(auth, target);
+  if (verb === "list") {
+    if (isMachineOutput(args)) {
+      writeJson({ workspaceId, instance: auth.instance, branches });
+      return;
+    }
+    renderList(branches, workspaceId);
+    return;
+  }
+  const label = requireLabel(args.positionals[1], verb);
+  const branch = requireBranch(branches, label);
+  if (verb === "set-live") {
+    if (branch.live) {
+      success(`Branch "${label}" is already live in workspace #${workspaceId} \u2014 nothing to do.`);
+      if (isMachineOutput(args)) writeJson({ workspaceId, branch: label, setLive: false, alreadyLive: true });
+      return;
+    }
+    const outgoing = branches.find((b) => b.live)?.label;
+    blank();
+    warn(`This is a production cutover for workspace #${workspaceId}.`);
+    if (outgoing !== void 0) detail(`The runtime stops serving "${outgoing}" and starts serving "${label}".`);
+    detail("Table data is unaffected \u2014 it is shared by every branch either way.");
+    blank();
+    if (!args.yes && !args.force) {
+      const ok = await confirm(`Make "${label}" the live branch?`, {
+        flag: "--yes",
+        helpFor: { command: "workspace", subcommand: "branch" }
+      });
+      if (!ok) {
+        info("Cancelled \u2014 the live branch is unchanged.");
+        return;
+      }
+    }
+    await setLiveBranch(auth, { ...target, label });
+    success(`Branch "${label}" is now live in workspace #${workspaceId}.`);
+    if (outgoing !== void 0) {
+      detail(`Roll back with \`xanots workspace branch set-live ${outgoing}\`.`);
+    }
+    if (isMachineOutput(args)) {
+      writeJson({ workspaceId, branch: label, setLive: true, previousBranch: outgoing });
+    }
+    return;
+  }
+  if (branch.live) {
+    throw new UsageError(
+      `Branch "${label}" is the LIVE branch of workspace #${workspaceId} and cannot be deleted.
+Promote another branch first (\`xanots workspace branch set-live <other>\`), then delete this one.`,
+      { helpFor: { command: "workspace", subcommand: "branch" } }
+    );
+  }
+  if (!args.yes && !args.force) {
+    const ok = await confirm(`Delete branch "${label}" from workspace #${workspaceId}?`, {
+      flag: "--yes",
+      helpFor: { command: "workspace", subcommand: "branch" }
+    });
+    if (!ok) {
+      info("Cancelled \u2014 nothing was deleted.");
+      return;
+    }
+  }
+  await deleteBranch(auth, { ...target, label });
+  success(`Deleted branch "${label}" from workspace #${workspaceId}.`);
+  if (isMachineOutput(args)) writeJson({ workspaceId, branch: label, deleted: true });
+}
+export {
+  runBranchCommand
+};
+//# sourceMappingURL=branch-commands-R4FR75UW.js.map

package/dist/{chunk-7SISR3CS.js → chunk-2SUCC4DV.js}

@@ -5,7 +5,7 @@ import {
   defaultThemeChoice,
   reactPreset,
   themeGuidanceSection
-} from "./chunk-6DHJVLYP.js";
+} from "./chunk-Q77KNEUL.js";
 import {
   detail,
   step,
@@ -442,4 +442,4 @@ export {
   resolveAiPresets,
   scaffoldProject
 };
-//# sourceMappingURL=chunk-7SISR3CS.js.map
+//# sourceMappingURL=chunk-2SUCC4DV.js.map

package/dist/{chunk-BPEEGJJA.js → chunk-3FQD3QME.js}

@@ -12,7 +12,7 @@ import {
   middlewareEntryGuid,
   stackReferencesAuth,
   tableColumns
-} from "./chunk-YUPQOLFX.js";
+} from "./chunk-CQBJNFDK.js";
 import {
   CANONICAL_PAYLOAD_KEYS,
   REFERENCEABLE_KINDS,
@@ -23,7 +23,7 @@ import {
   mintCanonical,
   recordObserved,
   resolveRef
-} from "./chunk-YUBJLB6G.js";
+} from "./chunk-EFH4NFPY.js";
 
 // src/workspace/seed-coerce.ts
 function coerceScalarValue(label, column, type, value, values) {
@@ -1652,4 +1652,4 @@ export {
   Xano,
   workspace
 };
-//# sourceMappingURL=chunk-BPEEGJJA.js.map
+//# sourceMappingURL=chunk-3FQD3QME.js.map

package/dist/{chunk-KXCPZUUM.js → chunk-4HDOP7LH.js}

@@ -2,7 +2,7 @@ import {
   presetFilePath,
   resolveAiPresets,
   scaffoldProject
-} from "./chunk-7SISR3CS.js";
+} from "./chunk-2SUCC4DV.js";
 import {
   runNpmCapturingStderr
 } from "./chunk-ZSYZTGJH.js";
@@ -11,7 +11,7 @@ import {
   allFrontendPresets,
   findFrontendPreset,
   resolveFrameworkFlag
-} from "./chunk-WGDAOOXG.js";
+} from "./chunk-MU3O43L2.js";
 import {
   initLanding,
   renderApiTs,
@@ -27,11 +27,9 @@ import {
   renderViteConfig,
   renderXanoExampleMd,
   renderXanoIndex
-} from "./chunk-QUUB7HYK.js";
+} from "./chunk-P5C2YKAM.js";
 import {
   DEFAULT_DARK_MODE,
-  curatedThemes,
-  defaultTheme,
   defaultThemeChoice,
   normalizeRadius,
   resolveDarkModeFlag,
@@ -39,15 +37,14 @@ import {
   resolveIconsFlag,
   resolveThemeFlag,
   themeFromRegistryItem,
-  themeSwatch,
   withRadius
-} from "./chunk-6DHJVLYP.js";
+} from "./chunk-Q77KNEUL.js";
 import {
   readVersion
-} from "./chunk-MS3BRZAZ.js";
+} from "./chunk-SOCYCBYG.js";
 import {
   UsageError
-} from "./chunk-IVP6TS26.js";
+} from "./chunk-JQLR64UC.js";
 import {
   blank,
   detail,
@@ -291,7 +288,6 @@ async function resolveFrontendPreset(flag) {
 }
 
 // src/emit/theme-resolve.ts
-import { createInterface as createInterface2 } from "readline/promises";
 import { readFileSync as readFileSync2 } from "fs";
 import { resolve as resolvePath } from "path";
 function isRegistryRef(value) {
@@ -332,54 +328,6 @@ function parseJson(text, source) {
 async function themeFromFlag(raw) {
   return isRegistryRef(raw.trim()) ? loadRegistryTheme(raw.trim()) : resolveThemeFlag(raw);
 }
-function swatch(theme, color) {
-  if (!color) return "";
-  const blocks = themeSwatch(theme).map(({ r, g, b }) => `\x1B[38;2;${r};${g};${b}m\u2588\x1B[0m`).join("");
-  return blocks === "" ? "" : `${blocks} `;
-}
-function colorEnabled() {
-  if (process.env.FORCE_COLOR) return process.env.FORCE_COLOR !== "0";
-  return !process.env.NO_COLOR && process.stderr.isTTY === true;
-}
-async function promptTheme() {
-  const themes = curatedThemes();
-  const color = colorEnabled();
-  const rl = createInterface2({ input: process.stdin, output: process.stderr });
-  try {
-    process.stderr.write(
-      `
-Which theme? (shadcn/ui color tokens \u2014 everything else is identical)
-` + themes.map((t, i) => `  ${i + 1}) ${swatch(t, color)}${t.label}${i === 0 ? " (default)" : ""}`).join("\n") + `
-${style.dim(
-        `  \u2026or any <base>-<accent> pair, or a registry theme URL. See \`xanots init --help\`.`
-      )}
-`
-    );
-    for (; ; ) {
-      const answer = (await rl.question(`Enter a number, a theme, or leave blank for the default: `)).trim();
-      if (answer === "") return defaultTheme();
-      const byIndex = Number.parseInt(answer, 10);
-      if (Number.isInteger(byIndex) && byIndex >= 1 && byIndex <= themes.length) {
-        return themes[byIndex - 1];
-      }
-      if (!isRegistryRef(answer)) {
-        try {
-          return resolveThemeFlag(answer);
-        } catch {
-          return defaultTheme();
-        }
-      }
-      try {
-        return await loadRegistryTheme(answer);
-      } catch (err) {
-        process.stderr.write(`${style.yellow("!")} ${err instanceof Error ? err.message : String(err)}
-`);
-      }
-    }
-  } finally {
-    rl.close();
-  }
-}
 async function resolveThemeChoice(args) {
   const dark = args.dark === void 0 || args.dark === "" ? DEFAULT_DARK_MODE : resolveDarkModeFlag(args.dark);
   const fonts = {
@@ -388,14 +336,7 @@ async function resolveThemeChoice(args) {
     ...args.fontHeading !== void 0 && args.fontHeading !== "" ? { heading: resolveFontFlag(args.fontHeading, "heading") } : {}
   };
   const icons = args.icons === void 0 || args.icons === "" ? void 0 : resolveIconsFlag(args.icons).id;
-  let theme;
-  if (args.theme !== void 0 && args.theme !== "") {
-    theme = await themeFromFlag(args.theme);
-  } else if (process.stdin.isTTY && process.stderr.isTTY) {
-    theme = await promptTheme();
-  } else {
-    theme = defaultThemeChoice().theme;
-  }
+  let theme = args.theme !== void 0 && args.theme !== "" ? await themeFromFlag(args.theme) : defaultThemeChoice().theme;
   if (args.radius !== void 0 && args.radius !== "") {
     theme = withRadius(theme, normalizeRadius(args.radius));
   }
@@ -529,4 +470,4 @@ export {
   projectShellFiles,
   runInitCommand
 };
-//# sourceMappingURL=chunk-KXCPZUUM.js.map
+//# sourceMappingURL=chunk-4HDOP7LH.js.map

package/dist/{chunk-PGBK64U5.js → chunk-4PTSTDIG.js}

@@ -1,6 +1,6 @@
 import {
   UsageError
-} from "./chunk-IVP6TS26.js";
+} from "./chunk-JQLR64UC.js";
 import {
   style
 } from "./chunk-EZG76F7R.js";
@@ -56,4 +56,4 @@ export {
   confirm,
   promptLine
 };
-//# sourceMappingURL=chunk-PGBK64U5.js.map
+//# sourceMappingURL=chunk-4PTSTDIG.js.map

package/dist/{live-diff-FP4SFNT4.js → chunk-5HCDZ2XN.js}

@@ -11,10 +11,19 @@ function rows(bundle, key) {
   return Array.isArray(value) ? value.filter((r) => r !== null && typeof r === "object") : [];
 }
 function columnsOf(table) {
+  return new Set(typedColumnsOf(table).keys());
+}
+function typedColumnsOf(table) {
+  const out = /* @__PURE__ */ new Map();
   const schema = table.schema;
-  if (!Array.isArray(schema)) return /* @__PURE__ */ new Set();
-  const names = schema.map((c) => c !== null && typeof c === "object" ? c.name : void 0).filter((n) => typeof n === "string" && n !== "");
-  return new Set(names);
+  if (!Array.isArray(schema)) return out;
+  for (const entry of schema) {
+    if (entry === null || typeof entry !== "object") continue;
+    const { name, type } = entry;
+    if (typeof name !== "string" || name === "") continue;
+    out.set(name, typeof type === "string" ? type : "");
+  }
+  return out;
 }
 function identify(table) {
   const guid = table.guid;
@@ -69,6 +78,56 @@ function diffAgainstLive(outgoing, live, opts) {
   }
   return { droppedColumns, unchangedEnv };
 }
+function sharedSchemaChanges(outgoing, live, opts = {}) {
+  if (live === void 0) return void 0;
+  const changes = [];
+  for (const kind of ["dbo", "microservice"]) {
+    const liveRows = new Map(rows(live, kind).map((r) => [identify(r), r]));
+    const outgoingRows = new Map(rows(outgoing, kind).map((r) => [identify(r), r]));
+    for (const [key, out] of outgoingRows) {
+      const current = liveRows.get(key);
+      const name = nameOf(out);
+      if (current === void 0) {
+        changes.push({ kind, name, action: "create" });
+        continue;
+      }
+      const details = kind === "dbo" ? tableDelta(current, out) : objectDelta(current, out);
+      if (details.length > 0) changes.push({ kind, name, action: "alter", details });
+    }
+    if (opts.prune === true) {
+      for (const [key, current] of liveRows) {
+        if (!outgoingRows.has(key)) changes.push({ kind, name: nameOf(current), action: "remove" });
+      }
+    }
+  }
+  return changes;
+}
+function tableDelta(live, outgoing) {
+  const details = [];
+  const before = typedColumnsOf(live);
+  const after = typedColumnsOf(outgoing);
+  const liveName = nameOf(live);
+  const outgoingName = nameOf(outgoing);
+  if (liveName !== outgoingName) details.push(`renamed from "${liveName}" to "${outgoingName}"`);
+  for (const [column, type] of after) {
+    const current = before.get(column);
+    if (current === void 0) {
+      details.push(`add column "${column}"`);
+    } else if (current !== type) {
+      details.push(`retype column "${column}" (${current} \u2192 ${type})`);
+    }
+  }
+  for (const column of before.keys()) {
+    if (!after.has(column)) details.push(`drop column "${column}"`);
+  }
+  return details;
+}
+function objectDelta(live, outgoing) {
+  const liveName = nameOf(live);
+  const outgoingName = nameOf(outgoing);
+  if (liveName !== outgoingName) return [`renamed from "${liveName}" to "${outgoingName}"`];
+  return deepEqual(normalize(live), normalize(outgoing)) ? [] : ["configuration differs"];
+}
 var WORKSPACE_KEY = "workspace";
 var ENV_KEY = "env";
 var SETTINGS_KEYS_COMPARED_ELSEWHERE = /* @__PURE__ */ new Set([WORKSPACE_KEY, ENV_KEY, "canonical"]);
@@ -189,8 +248,10 @@ function compareToLive(outgoing, live) {
   }
   return { converged: compared > 0 && differingCount === 0, compared, differing, differingCount, liveOnly };
 }
+
 export {
-  compareToLive,
-  diffAgainstLive
+  diffAgainstLive,
+  sharedSchemaChanges,
+  compareToLive
 };
-//# sourceMappingURL=live-diff-FP4SFNT4.js.map
+//# sourceMappingURL=chunk-5HCDZ2XN.js.map

package/dist/{chunk-5WGEURVI.js → chunk-6AAT2AYQ.js}

@@ -7,12 +7,20 @@ import {
 // src/deploy/import.ts
 var IMPORT_TIMEOUT_MS = 12e4;
 var PROBE_TIMEOUT_MS = 15e3;
+function plannedBranch(parsed) {
+  const summary = parsed.summary !== null && typeof parsed.summary === "object" && !Array.isArray(parsed.summary) ? parsed.summary : {};
+  for (const candidate of [parsed.branch, parsed.branch_label, summary.branch, summary.branch_label]) {
+    if (typeof candidate === "string" && candidate !== "") return candidate;
+  }
+  return void 0;
+}
 function query(opts) {
   const params = new URLSearchParams();
   if (opts.mode !== void 0) params.set("mode", opts.mode);
   if (opts.prune !== void 0) params.set("delete", String(opts.prune));
   if (opts.records !== void 0) params.set("records", String(opts.records));
   if (opts.truncate !== void 0) params.set("truncate", String(opts.truncate));
+  if (opts.branch !== void 0) params.set("branch", opts.branch);
   const qs = params.toString();
   return qs === "" ? "" : `?${qs}`;
 }
@@ -66,6 +74,16 @@ async function assertMergeSupported(auth, opts) {
 ${text}`
   );
 }
+function assertBranchTargetHonored(plan, requested, baseUrl) {
+  if (plan.branch === requested) return;
+  const observed = plan.branch === void 0 ? `it did not say which branch the plan targets` : `it planned against "${plan.branch}"`;
+  throw new Error(
+    `Refusing to release to branch "${requested}": ${observed}.
+  instance: ${baseUrl}
+An instance that predates branch support IGNORES the branch parameter, imports into whichever branch is LIVE, and still answers 200 \u2014 so a release that looked staged would have overwritten production. That is not recoverable, so it is not attempted on an instance that has not confirmed the target.
+Update the instance, or drop \`--branch\` to release to the live branch deliberately.`
+  );
+}
 function body(archive) {
   const form = new FormData();
   form.append("file", new Blob([archive], { type: "application/gzip" }), "workspace.gz");
@@ -145,12 +163,14 @@ ${text}`);
     hasRecords: parsed.has_records === true,
     hasEnv: parsed.has_env === true,
     operations,
+    branch: plannedBranch(parsed),
     raw: text
   };
 }
 
 export {
+  assertBranchTargetHonored,
   importWorkspaceArchive,
   planWorkspaceImport
 };
-//# sourceMappingURL=chunk-5WGEURVI.js.map
+//# sourceMappingURL=chunk-6AAT2AYQ.js.map

package/dist/{chunk-APOR6TCV.js → chunk-CEFYM6N5.js}

@@ -66,7 +66,7 @@ async function resolveMetaTarget(auth, opts, deps = {}) {
     case "sandbox":
       return resolveSandbox(auth);
     case "ephemeral": {
-      const resolveLive = deps.resolveLive ?? (await import("./ephemeral-command-46SL27GJ.js")).resolveLive;
+      const resolveLive = deps.resolveLive ?? (await import("./ephemeral-command-K3UJSDS4.js")).resolveLive;
       return resolveEphemeral(auth, opts.name, { ...deps, resolveLive });
     }
   }
@@ -75,4 +75,4 @@ async function resolveMetaTarget(auth, opts, deps = {}) {
 export {
   resolveMetaTarget
 };
-//# sourceMappingURL=chunk-APOR6TCV.js.map
+//# sourceMappingURL=chunk-CEFYM6N5.js.map

package/dist/{chunk-YUPQOLFX.js → chunk-CQBJNFDK.js}

@@ -19,7 +19,7 @@ import {
   lockKey,
   resolveRef,
   sha1Bytes
-} from "./chunk-YUBJLB6G.js";
+} from "./chunk-EFH4NFPY.js";
 
 // src/types/xdo.ts
 var TAGS = [
@@ -4068,4 +4068,4 @@ export {
   serializeBundle,
   emitBundle
 };
-//# sourceMappingURL=chunk-YUPQOLFX.js.map
+//# sourceMappingURL=chunk-CQBJNFDK.js.map

package/dist/{chunk-FN4OQT2J.js → chunk-CU5VOSTW.js}

@@ -6,7 +6,7 @@ import {
   realtimeChannelGuid,
   realtimeServerRefName,
   resolveRealtimeServerRef
-} from "./chunk-CYJ7R3AD.js";
+} from "./chunk-GC7ZQHW7.js";
 import {
   assertCanonical,
   assertOneOf,
@@ -25,7 +25,7 @@ import {
   resolveAuthRef,
   resolveMockKeys,
   warnLiveDatasource
-} from "./chunk-YUPQOLFX.js";
+} from "./chunk-CQBJNFDK.js";
 import {
   encodeStatement
 } from "./chunk-5XZ744TS.js";
@@ -35,7 +35,7 @@ import {
   lockKey,
   realtimeMessageSeedName,
   resolveRef
-} from "./chunk-YUBJLB6G.js";
+} from "./chunk-EFH4NFPY.js";
 
 // src/kinds/canonical.ts
 function resolveCanonicalToken(label, payloadKey, accessor, def, override) {
@@ -667,4 +667,4 @@ export {
   addonKind,
   addon
 };
-//# sourceMappingURL=chunk-FN4OQT2J.js.map
+//# sourceMappingURL=chunk-CU5VOSTW.js.map

package/dist/{chunk-YUBJLB6G.js → chunk-EFH4NFPY.js}

@@ -447,11 +447,14 @@ function validateLockObjects(raw, path) {
       guidOwners.set(guid, key);
     }
     if (typeof canonical === "string") {
-      const owner = canonicalOwners.get(canonical);
+      const scope = isWorkspaceKey ? WORKSPACE_KEY : key.slice(0, key.indexOf(":"));
+      let owners = canonicalOwners.get(scope);
+      if (owners === void 0) canonicalOwners.set(scope, owners = /* @__PURE__ */ new Map());
+      const owner = owners.get(canonical);
       if (owner !== void 0) {
         fail(path, `entries "${owner}" and "${key}" share the same canonical (${canonical}).`);
       }
-      canonicalOwners.set(canonical, key);
+      owners.set(canonical, key);
     }
     const entry = {};
     if (typeof guid === "string") entry.guid = guid;
@@ -680,4 +683,4 @@ export {
   adoptFromBundle,
   mergeObserved
 };
-//# sourceMappingURL=chunk-YUBJLB6G.js.map
+//# sourceMappingURL=chunk-EFH4NFPY.js.map