@xanots/sdk 0.0.6 → 0.0.8

package/CHANGELOG.md

@@ -11,6 +11,38 @@ listed here.
 
 ---
 
+## 0.0.7 — Verb pairs on one path
+
+_2026-08-29_ · [release notes](https://github.com/xanots/sdk/releases/tag/v0.0.7)
+
+Queries are now identified the way the engine identifies them — by api group, verb, and name together — so `GET /items` and `POST /items` are two endpoints instead of one export error. The grounding docs an AI agent reads got a full pass for people arriving at Xano for the first time, and two silent-failure classes now surface at `export()` instead of on a live endpoint.
+
+- A `GET` and `POST` on the same path no longer collide
+- ⚠️ A query's verb and api group are now part of its identity
+- ⚠️ `s.api.call` takes the query handle, not a bare name
+- A tagged value in a template literal now fails the build instead of shipping garbage
+- The grounding docs assume no prior Xano knowledge
+- `xanots deploy` no longer loops on "re-run the deploy" when your session has expired
+
+---
+
+## 0.0.6 — The action identity fix
+
+_2026-08-28_ · [release notes](https://github.com/xanots/sdk/releases/tag/v0.0.6)
+
+`action.call` and `action.package.call` now take the identity the instance assigned at install
+instead of deriving one from a name. A derived id is well-formed and addresses nothing, so those
+calls exported clean and never resolved — if you have either in a workspace, this is a call-site
+change you need to make. Alongside it: a lock-file false positive that refused a legal workspace,
+and a grounding correction about what an omitted column on `db.add` actually stores.
+
+- ⚠️ `action.call` takes the id the instance assigned, not one derived from a name
+- One canonical on two different kinds is no longer a lock error
+- An omitted column on `db.add` lands on its own default, not `null`
+- `xanots init` asks two questions instead of three
+
+---
+
 ## 0.0.5 — Sign in without a loopback
 
 _2026-08-26_ · [release notes](https://github.com/xanots/sdk/releases/tag/v0.0.5)

package/dist/.build-fingerprint

@@ -1 +1 @@
-2ea4560ab5068ad3f41aaaccf9f6084502c807310086df6cd6a011bb8ab31aec
+049c8539dd912ef18bb98e2cff4c903b31ac405b1efe787dc50be5d15411935c

package/dist/{agent-file-refresh-6XT23SLU.js → agent-file-refresh-4W37DGXS.js}

@@ -3,8 +3,8 @@ import {
   codingAgentDetected,
   isCI,
   refreshAgentFiles
-} from "./chunk-P5OAM3G2.js";
-import "./chunk-2SUCC4DV.js";
+} from "./chunk-QIWBCS7N.js";
+import "./chunk-4PE4ZAB7.js";
 import "./chunk-ZSYZTGJH.js";
 import "./chunk-Q77KNEUL.js";
 import "./chunk-EZG76F7R.js";
@@ -14,4 +14,4 @@ export {
   isCI,
   refreshAgentFiles
 };
-//# sourceMappingURL=agent-file-refresh-6XT23SLU.js.map
+//# sourceMappingURL=agent-file-refresh-4W37DGXS.js.map

package/dist/bin.js

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
 import {
   maybeNotifyUpdate
-} from "./chunk-Y7BARS25.js";
+} from "./chunk-CDAQUY5W.js";
 import {
   readVersion,
   run
-} from "./chunk-SOCYCBYG.js";
+} from "./chunk-SNO3KHCY.js";
 import {
   exitCodeOf,
   reportFailure
 } from "./chunk-JQLR64UC.js";
-import "./chunk-OLQLJY5T.js";
+import "./chunk-OYMR5AMJ.js";
 import "./chunk-GNPVYOPB.js";
 import {
   clearProgress,
   error
 } from "./chunk-EZG76F7R.js";
-import "./chunk-3FQD3QME.js";
+import "./chunk-FEQTQ6PM.js";
 import "./chunk-OKNSR7MT.js";
-import "./chunk-CQBJNFDK.js";
+import "./chunk-64QK6JEK.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
-import "./chunk-EFH4NFPY.js";
+import "./chunk-7JDT4PBU.js";
 
 // src/emit/interrupt.ts
 var EXIT_SIGINT = 130;

package/dist/{branch-commands-R4FR75UW.js → branch-commands-PBQ36L4A.js}

@@ -9,8 +9,8 @@ import {
 } from "./chunk-4PTSTDIG.js";
 import {
   getAccessToken
-} from "./chunk-SG4UBJ47.js";
-import "./chunk-LLWK6H77.js";
+} from "./chunk-3QW5NFZJ.js";
+import "./chunk-BKDJN76G.js";
 import {
   isMachineOutput,
   writeJson
@@ -131,4 +131,4 @@ Promote another branch first (\`xanots workspace branch set-live <other>\`), the
 export {
   runBranchCommand
 };
-//# sourceMappingURL=branch-commands-R4FR75UW.js.map
+//# sourceMappingURL=branch-commands-PBQ36L4A.js.map

package/dist/{chunk-JRGDLAEA.js → chunk-2ROR3AZC.js}

@@ -1,7 +1,7 @@
 import {
   c,
   resp
-} from "./chunk-CQBJNFDK.js";
+} from "./chunk-64QK6JEK.js";
 
 // src/values/expect.ts
 var TEST_EXPECT_TYPES = [
@@ -90,4 +90,4 @@ export {
   TEST_EXPECT_TYPES,
   expect
 };
-//# sourceMappingURL=chunk-JRGDLAEA.js.map
+//# sourceMappingURL=chunk-2ROR3AZC.js.map

package/dist/{chunk-OR43PDCW.js → chunk-3EYUR3TX.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-NDZFBZHC.js";
 import {
   getAccessToken
-} from "./chunk-SG4UBJ47.js";
+} from "./chunk-3QW5NFZJ.js";
 import {
   isMachineOutput,
   writeJson
@@ -97,4 +97,4 @@ export {
   fetchSandboxDetails,
   runSandboxDetailsCommand
 };
-//# sourceMappingURL=chunk-OR43PDCW.js.map
+//# sourceMappingURL=chunk-3EYUR3TX.js.map

package/dist/{chunk-GC7ZQHW7.js → chunk-3MDKV2VA.js}

@@ -35,7 +35,7 @@ import {
   registerKind,
   tableColumns,
   withFilters
-} from "./chunk-CQBJNFDK.js";
+} from "./chunk-64QK6JEK.js";
 import {
   assertPathParamInputs,
   fillPathParams,
@@ -50,8 +50,9 @@ import {
 import {
   deriveGuid,
   realtimeChannelSeedName,
+  resolveQueryRef,
   resolveRef
-} from "./chunk-EFH4NFPY.js";
+} from "./chunk-7JDT4PBU.js";
 
 // src/statements/set-var.ts
 var SET_VAR = "mvp:set_var";
@@ -482,7 +483,7 @@ function functionCall(args) {
 function apiCall(args) {
   args = argsOrEmpty(args);
   assertArg("mvp:workspace_run_endpoint", "api", args.api);
-  const context = { id: resolveRef("query", args.api) };
+  const context = { id: resolveQueryRef(args.api) };
   const headers = coerceHeaders(args.headers);
   if (headers) context.headers = vf(headers);
   if (args.auth) {
@@ -3733,4 +3734,4 @@ export {
   workspaceKind,
   workspaceConfig
 };
-//# sourceMappingURL=chunk-GC7ZQHW7.js.map
+//# sourceMappingURL=chunk-3MDKV2VA.js.map

package/dist/{chunk-SG4UBJ47.js → chunk-3QW5NFZJ.js}

@@ -7,12 +7,14 @@ import {
   globalAuthFilePath,
   localAuthFilePath,
   oauthErrorCode,
+  oauthErrorResponse,
   readCredential,
   resolveAuthFilePath,
   resolveAuthHost,
+  resolveOAuthErrorCode,
   resolveScope,
   writeCredential
-} from "./chunk-LLWK6H77.js";
+} from "./chunk-BKDJN76G.js";
 import {
   detail,
   hostLabel,
@@ -40,7 +42,26 @@ function refreshAccessToken(authHost, clientId, refreshToken, scope) {
   return provider.refresh(refreshToken, { scope });
 }
 function isTransientRefreshError(err) {
-  return oauthErrorCode(err) === void 0;
+  if (oauthErrorCode(err) !== void 0) return false;
+  const res = oauthErrorResponse(err);
+  if (res === void 0) return true;
+  return res.status >= 500;
+}
+async function describeRefreshFailure(err) {
+  const base = err instanceof Error ? err.message : String(err);
+  const res = oauthErrorResponse(err);
+  if (res === void 0) return base;
+  const parts = [`HTTP ${res.status}`];
+  const code = await resolveOAuthErrorCode(err);
+  if (code !== void 0) parts.push(code);
+  else if (!res.bodyUsed) {
+    try {
+      const text = (await res.clone().text()).trim();
+      if (text !== "") parts.push(text.length > 200 ? `${text.slice(0, 197)}\u2026` : text);
+    } catch {
+    }
+  }
+  return `${base} (${parts.join(" \u2014 ")})`;
 }
 async function refreshWithRetry(authHost, clientId, refreshToken, scope) {
   try {
@@ -215,8 +236,8 @@ async function refreshUnderLock(authFilePath, saved) {
     try {
       set = await refreshWithRetry(current.auth_host, current.client_id, current.refresh_token, current.scope);
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      if (oauthErrorCode(err) === "invalid_grant") {
+      const message = await describeRefreshFailure(err);
+      if (await resolveOAuthErrorCode(err) === "invalid_grant") {
         clearCredential(authFilePath);
         throw new Error(
           `Session for ${instance} has expired or was revoked (the refresh token was rejected). Run \`xanots login\` to sign in again.`
@@ -251,4 +272,4 @@ export {
   envMetaCredentialVarsSet,
   getAccessToken
 };
-//# sourceMappingURL=chunk-SG4UBJ47.js.map
+//# sourceMappingURL=chunk-3QW5NFZJ.js.map

package/dist/{chunk-2SUCC4DV.js → chunk-4PE4ZAB7.js}

@@ -31,7 +31,7 @@ that reads well, type-checks, and is wrong. Read before writing:
    conditions are for.
 3. \`node_modules/@xanots/sdk/manifest.json\` \u2014 only for per-entry detail neither
    carries: a statement's full field schema with engine defaults, a filter's
-   complete argument list. Grep or \`jq\` the one entry you need; it is ~55k
+   complete argument list. Grep or \`jq\` the one entry you need; it is ~65k
    tokens, so never read it whole.
 
 The published types and JSDoc (\`node_modules/@xanots/sdk/**/*.d.ts\`) are that
@@ -442,4 +442,4 @@ export {
   resolveAiPresets,
   scaffoldProject
 };
-//# sourceMappingURL=chunk-2SUCC4DV.js.map
+//# sourceMappingURL=chunk-4PE4ZAB7.js.map

package/dist/{chunk-CQBJNFDK.js → chunk-64QK6JEK.js}

@@ -14,12 +14,16 @@ import {
   registerStatement
 } from "./chunk-5XZ744TS.js";
 import {
+  appNamesByGuid,
   deriveGuid,
+  deriveQueryGuid,
   getLockedCanonical,
   lockKey,
+  lockNameForObject,
+  queryGroupComponent,
   resolveRef,
   sha1Bytes
-} from "./chunk-EFH4NFPY.js";
+} from "./chunk-7JDT4PBU.js";
 
 // src/types/xdo.ts
 var TAGS = [
@@ -1452,9 +1456,13 @@ var input = {
    *
    * It is NOT a stored file resource and cannot be written to a file column
    * directly. Store it first and write what you get back:
-   * `s.storage.create_image({ as: "img", value: ref("input.avatar") })`, then
-   * write `ref("img")` to an `f.image()` column. Use {@link input.image} and
-   * friends only when the caller already sends a stored file resource.
+   * `s.storage.create_image({ as: "img", value: inp("avatar") })`, then write
+   * `ref("img")` to an `f.image()` column. Use {@link input.image} and friends
+   * only when the caller already sends a stored file resource.
+   *
+   * Read the upload with `inp`, NOT `ref("input.avatar")`: `ref` is the `var`
+   * tag, so that spelling makes the engine look for a stack variable named
+   * `input` and fail the request with `Missing var entry: input`.
    */
   file: makeInput("file"),
   /**
@@ -3535,10 +3543,15 @@ function encodeQuery(def) {
   resolveMockKeys(xdo.run, xdo.test, "query", def.name);
   return xdo;
 }
+function queryGuid(def) {
+  if (def.guid) return def.guid;
+  return deriveQueryGuid(queryGroupComponent(def), def.verb, def.name);
+}
 var queryKind = {
   name: "query",
   payloadKey: "query",
-  encode: encodeQuery
+  encode: encodeQuery,
+  guidOf: (def) => queryGuid(def)
 };
 registerKind(queryKind);
 function resolveCanonical(def, override) {
@@ -3749,6 +3762,7 @@ function calcSignatureJson(exportObj) {
 }
 function assertUniqueGuids(payload, lock) {
   const seen = /* @__PURE__ */ new Map();
+  const appNames = appNamesByGuid(payload.app);
   for (const key of PAYLOAD_ARRAY_KEYS) {
     const arr = payload[key];
     if (!Array.isArray(arr)) continue;
@@ -3761,7 +3775,8 @@ function assertUniqueGuids(payload, lock) {
       const prev = seen.get(guid);
       if (prev !== void 0) {
         const pinnedBy = lock ? Object.entries(lock.objects).find(([, e]) => e.guid === guid)?.[0] : void 0;
-        const lockNote = pinnedBy ? ` This guid is pinned by lock entry "${pinnedBy}" \u2014 if that entry was moved by \`xanots lock rename\`, a new object now re-derives the old name's guid. Pin a distinct explicit \`guid\` on the new object, or update the lock entry.` : ` Object identity is derived from (type, name) \u2014 two objects of the same kind share a name. Rename one, or pin a distinct explicit \`guid\`.`;
+        const legacyQueryKey = key === "query" && pinnedBy !== void 0 && !pinnedBy.includes("|") ? pinnedBy : void 0;
+        const lockNote = legacyQueryKey ? ` Lock entry "${legacyQueryKey}" pins it by NAME ALONE \u2014 a lock written before a query's identity included its api group and verb. Both of these queries claim it. Move it onto the one that already existed, e.g. \`xanots lock rename query ${legacyQueryKey.slice("query:".length)} "${lockNameForObject("query", obj2, appNames)}"\` (--lock=<path> if it is not in the current directory), then re-export: that endpoint keeps its identity and the newcomer derives its own.` : pinnedBy ? ` This guid is pinned by lock entry "${pinnedBy}" \u2014 if that entry was moved by \`xanots lock rename\`, a new object now re-derives the old name's guid. Pin a distinct explicit \`guid\` on the new object, or update the lock entry.` : ` Object identity is derived from (type, name) \u2014 for a query, (api group, verb, name) \u2014 so two objects of the same kind compose the same identity. Rename one, or pin a distinct explicit \`guid\`.`;
         throw new Error(`Duplicate object guid (${guid}) shared by "${prev}" and "${label}".` + lockNote);
       }
       seen.set(guid, label);
@@ -4068,4 +4083,4 @@ export {
   serializeBundle,
   emitBundle
 };
-//# sourceMappingURL=chunk-CQBJNFDK.js.map
+//# sourceMappingURL=chunk-64QK6JEK.js.map

package/dist/{chunk-CU5VOSTW.js → chunk-7AXQKABT.js}

@@ -6,7 +6,7 @@ import {
   realtimeChannelGuid,
   realtimeServerRefName,
   resolveRealtimeServerRef
-} from "./chunk-GC7ZQHW7.js";
+} from "./chunk-3MDKV2VA.js";
 import {
   assertCanonical,
   assertOneOf,
@@ -25,7 +25,7 @@ import {
   resolveAuthRef,
   resolveMockKeys,
   warnLiveDatasource
-} from "./chunk-CQBJNFDK.js";
+} from "./chunk-64QK6JEK.js";
 import {
   encodeStatement
 } from "./chunk-5XZ744TS.js";
@@ -35,7 +35,7 @@ import {
   lockKey,
   realtimeMessageSeedName,
   resolveRef
-} from "./chunk-EFH4NFPY.js";
+} from "./chunk-7JDT4PBU.js";
 
 // src/kinds/canonical.ts
 function resolveCanonicalToken(label, payloadKey, accessor, def, override) {
@@ -667,4 +667,4 @@ export {
   addonKind,
   addon
 };
-//# sourceMappingURL=chunk-CU5VOSTW.js.map
+//# sourceMappingURL=chunk-7AXQKABT.js.map

package/dist/{chunk-EFH4NFPY.js → chunk-7JDT4PBU.js}

@@ -269,6 +269,39 @@ function realtimeMessageSeedName(server, channelPath, name) {
     seedPart("message", "name", name)
   ].join(SEED_SEP);
 }
+function querySeedName(group, verb, name) {
+  return [
+    group === "" ? "" : seedPart("query", "apiGroup", group),
+    seedPart("query", "verb", verb),
+    seedPart("query", "name", name)
+  ].join(SEED_SEP);
+}
+function deriveQueryGuid(group, verb, name) {
+  const seed = `query:${querySeedName(group, verb, name)}`;
+  const guid = getLockedGuid(seed) ?? getLockedGuid(`query:${name}`) ?? rawDeriveGuid(seed);
+  SEEN_SEEDS.set(guid, seed);
+  return guid;
+}
+function queryGroupComponent(ref) {
+  if (ref.apiGroupId !== void 0) return `#${ref.apiGroupId}`;
+  const group = ref.apiGroup;
+  if (group === void 0) return "";
+  return typeof group === "string" ? group : group.name;
+}
+function resolveQueryRef(target) {
+  if (typeof target !== "string" && target.guid) {
+    if (target.name) SEEN_SEEDS.set(target.guid, `query:${target.name}`);
+    return target.guid;
+  }
+  const handle = typeof target === "string" ? void 0 : target;
+  if (handle?.verb !== void 0 && handle.name) {
+    return deriveQueryGuid(queryGroupComponent(handle), handle.verb, handle.name);
+  }
+  const label = typeof target === "string" ? `"${target}"` : `"${handle?.name ?? "?"}"`;
+  throw new Error(
+    `Cannot resolve query reference ${label}: a query's identity is composed from its api group, verb, and name, so a bare name cannot identify one. Pass the query() def handle (it carries all three), or a { name, guid } pair to address an object by explicit identity.`
+  );
+}
 function rawDeriveGuid(seed) {
   return md5Hex(seed);
 }
@@ -321,6 +354,30 @@ function resolvePayloadKey(kindOrPayloadKey) {
 function lockKey(payloadKey, name) {
   return `${payloadKey}:${name}`;
 }
+function lockNameForObject(payloadKey, obj, appNameByGuid) {
+  if (payloadKey !== "query") return obj.name;
+  const verb = typeof obj.verb === "string" ? obj.verb : "";
+  const appId = obj.app?.id;
+  let group = "";
+  if (typeof appId === "string" && appId !== "") {
+    group = appNameByGuid.get(appId) ?? appId;
+  } else if (typeof appId === "number" && appId !== 0) {
+    group = `#${appId}`;
+  }
+  return [group, verb, obj.name].join("|");
+}
+function appNamesByGuid(appSection) {
+  const map = /* @__PURE__ */ new Map();
+  if (!Array.isArray(appSection)) return map;
+  for (const row of appSection) {
+    if (!row || typeof row !== "object") continue;
+    const { name, guid } = row;
+    if (typeof name === "string" && typeof guid === "string" && guid !== "") {
+      map.set(guid, name);
+    }
+  }
+  return map;
+}
 function emptyLock() {
   return { version: LOCK_VERSION, objects: {} };
 }
@@ -508,7 +565,7 @@ function recordObserved(ctx, key, identity) {
   const prior = ctx.observed[key];
   if (prior?.guid !== void 0 && identity.guid !== void 0 && prior.guid !== identity.guid) {
     throw new Error(
-      `Two exported objects collapse onto lock key "${key}" with different guids (${prior.guid} vs ${identity.guid}) \u2014 two same-kind objects sharing a name: a query verb pair pinning explicit guids, or a kind whose identity is composed from more than the name (a realtime channel is unique per server, a message per channel). The lock keys identity by (type, name) and cannot track both; rename one of the objects.`
+      `Two exported objects collapse onto lock key "${key}" with different guids (${prior.guid} vs ${identity.guid}) \u2014 two same-kind objects sharing a name behind explicit guids, or a realtime kind whose identity is composed from more than the name (a channel is unique per server, a message per channel). The lock cannot track both under one key; rename one of the objects.`
     );
   }
   const entry = ctx.lock.objects[key];
@@ -573,6 +630,7 @@ function adoptFromBundle(lock, bundle, bundlePath) {
       objects[key] = after;
     }
   };
+  const appNames = appNamesByGuid(sections["app"]);
   for (const payloadKey of LOCK_PAYLOAD_KEYS) {
     const arr = sections[payloadKey];
     if (!Array.isArray(arr)) continue;
@@ -581,18 +639,19 @@ function adoptFromBundle(lock, bundle, bundlePath) {
       if (!obj || typeof obj !== "object") continue;
       const o = obj;
       if (typeof o.name !== "string" || typeof o.guid !== "string" || o.guid === "") continue;
-      if (namesSeen.has(o.name)) {
+      const lockName = lockNameForObject(payloadKey, o, appNames);
+      if (namesSeen.has(lockName)) {
         throw new Error(
-          `${bundlePath} contains two "${payloadKey}" objects named "${o.name}" (a query verb pair, most likely). The lock keys by (type, name) and cannot represent both \u2014 adoption aborted. Rename one of them engine-side so names are unique, then re-export and re-adopt.`
+          `${bundlePath} contains two "${payloadKey}" objects with the identity "${lockName}" \u2014 the lock keys identity per kind and cannot represent both. Adoption aborted; rename one of them engine-side, then re-export and re-adopt.`
         );
       }
-      namesSeen.add(o.name);
+      namesSeen.add(lockName);
       const incoming = { guid: o.guid };
       if (typeof o.canonical === "string" && o.canonical !== "") {
         incoming.canonical = o.canonical;
         canonicalsSeen = true;
       }
-      applyEntry(lockKey(payloadKey, o.name), incoming);
+      applyEntry(lockKey(payloadKey, lockName), incoming);
     }
   }
   const ws = sections["workspace"];
@@ -663,6 +722,9 @@ export {
   REFERENCEABLE_KINDS,
   realtimeChannelSeedName,
   realtimeMessageSeedName,
+  deriveQueryGuid,
+  queryGroupComponent,
+  resolveQueryRef,
   deriveGuid,
   guidSeedHint,
   resolveRef,
@@ -672,6 +734,8 @@ export {
   CANONICAL_PAYLOAD_KEYS,
   resolvePayloadKey,
   lockKey,
+  lockNameForObject,
+  appNamesByGuid,
   emptyLock,
   parseLock,
   validateLockModel,
@@ -683,4 +747,4 @@ export {
   adoptFromBundle,
   mergeObserved
 };
-//# sourceMappingURL=chunk-EFH4NFPY.js.map
+//# sourceMappingURL=chunk-7JDT4PBU.js.map

package/dist/{chunk-LLWK6H77.js → chunk-BKDJN76G.js}

@@ -122,6 +122,34 @@ function oauthErrorCode(err) {
   }
   return void 0;
 }
+function oauthErrorResponse(err) {
+  const cause = err?.cause;
+  return typeof Response !== "undefined" && cause instanceof Response ? cause : void 0;
+}
+var OAUTH_ERROR_CODES = /* @__PURE__ */ new Set([
+  "invalid_request",
+  "invalid_client",
+  "invalid_grant",
+  "unauthorized_client",
+  "unsupported_grant_type",
+  "invalid_scope"
+]);
+async function resolveOAuthErrorCode(err) {
+  const rfc = oauthErrorCode(err);
+  if (rfc !== void 0) return rfc;
+  const res = oauthErrorResponse(err);
+  if (res === void 0 || res.bodyUsed) return void 0;
+  try {
+    const body = await res.clone().json();
+    if (!body || typeof body !== "object") return void 0;
+    const fields = body;
+    for (const candidate of [fields.error, fields.message, fields.code]) {
+      if (typeof candidate === "string" && OAUTH_ERROR_CODES.has(candidate)) return candidate;
+    }
+  } catch {
+  }
+  return void 0;
+}
 var OpenIdProvider = class {
   constructor(opts) {
     this.opts = opts;
@@ -470,6 +498,8 @@ export {
   DEFAULT_PORT,
   decodeAudience,
   oauthErrorCode,
+  oauthErrorResponse,
+  resolveOAuthErrorCode,
   OpenIdProvider,
   globalAuthFilePath,
   localAuthFilePath,
@@ -483,4 +513,4 @@ export {
   resolveScope,
   assertHttpsOrigin
 };
-//# sourceMappingURL=chunk-LLWK6H77.js.map
+//# sourceMappingURL=chunk-BKDJN76G.js.map

package/dist/{chunk-4HDOP7LH.js → chunk-C3M5K4ZH.js}

@@ -2,7 +2,7 @@ import {
   presetFilePath,
   resolveAiPresets,
   scaffoldProject
-} from "./chunk-2SUCC4DV.js";
+} from "./chunk-4PE4ZAB7.js";
 import {
   runNpmCapturingStderr
 } from "./chunk-ZSYZTGJH.js";
@@ -41,7 +41,7 @@ import {
 } from "./chunk-Q77KNEUL.js";
 import {
   readVersion
-} from "./chunk-SOCYCBYG.js";
+} from "./chunk-SNO3KHCY.js";
 import {
   UsageError
 } from "./chunk-JQLR64UC.js";
@@ -470,4 +470,4 @@ export {
   projectShellFiles,
   runInitCommand
 };
-//# sourceMappingURL=chunk-4HDOP7LH.js.map
+//# sourceMappingURL=chunk-C3M5K4ZH.js.map

package/dist/{chunk-Y7BARS25.js → chunk-CDAQUY5W.js}

@@ -1,6 +1,6 @@
 import {
   readVersion
-} from "./chunk-SOCYCBYG.js";
+} from "./chunk-SNO3KHCY.js";
 import {
   atomicWrite
 } from "./chunk-GNPVYOPB.js";
@@ -170,4 +170,4 @@ export {
   upgradeCommand,
   maybeNotifyUpdate
 };
-//# sourceMappingURL=chunk-Y7BARS25.js.map
+//# sourceMappingURL=chunk-CDAQUY5W.js.map

package/dist/{chunk-TYBB7ON3.js → chunk-EM5QPTXP.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-ZOYMZZ3S.js";
 import {
   getAccessToken
-} from "./chunk-SG4UBJ47.js";
+} from "./chunk-3QW5NFZJ.js";
 import {
   exportWorkspaceBundle
 } from "./chunk-QTNO2WD6.js";
@@ -27,15 +27,15 @@ import {
   resolveFrontendPreset,
   resolveThemeChoice,
   sanitizeAppName
-} from "./chunk-4HDOP7LH.js";
+} from "./chunk-C3M5K4ZH.js";
 import {
   XANO_DIR,
   resolveAiPresets,
   scaffoldProject
-} from "./chunk-2SUCC4DV.js";
+} from "./chunk-4PE4ZAB7.js";
 import {
   TEST_EXPECT_TYPES
-} from "./chunk-JRGDLAEA.js";
+} from "./chunk-2ROR3AZC.js";
 import {
   raw
 } from "./chunk-LU7TRWMC.js";
@@ -67,11 +67,11 @@ import {
   searchConstrainsRows,
   tableTrigger,
   workspaceTrigger
-} from "./chunk-GC7ZQHW7.js";
+} from "./chunk-3MDKV2VA.js";
 import {
   loadDefault,
   readVersion
-} from "./chunk-SOCYCBYG.js";
+} from "./chunk-SNO3KHCY.js";
 import {
   UsageError
 } from "./chunk-JQLR64UC.js";
@@ -115,7 +115,7 @@ import {
   sys,
   toolset,
   withFilters
-} from "./chunk-CQBJNFDK.js";
+} from "./chunk-64QK6JEK.js";
 import {
   parsePathParams,
   unboundPathParams
@@ -130,7 +130,7 @@ import {
 } from "./chunk-5XZ744TS.js";
 import {
   REFERENCEABLE_KIND_PAYLOAD_KEYS
-} from "./chunk-EFH4NFPY.js";
+} from "./chunk-7JDT4PBU.js";
 
 // src/emit/codegen-command.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";
@@ -6751,7 +6751,7 @@ async function fetchBundle(args, source) {
   if (source.kind === "sandbox") {
     const auth3 = await getAccessToken(args);
     step("Reading the sandbox workspace");
-    const { fetchSandboxBundle } = await import("./sandbox-export-command-R6QMEK3D.js");
+    const { fetchSandboxBundle } = await import("./sandbox-export-command-MO6DEZ7Z.js");
     return {
       bundle: await fetchSandboxBundle(auth3),
       origin: { source: "sandbox", origin: auth3.instance }
@@ -6765,7 +6765,7 @@ async function fetchBundle(args, source) {
       );
     }
     const auth3 = await getAccessToken(args);
-    const { resolveLive, fetchEphemeralBundle } = await import("./ephemeral-command-K3UJSDS4.js");
+    const { resolveLive, fetchEphemeralBundle } = await import("./ephemeral-command-DL7EY4LL.js");
     const summary = await resolveLive(auth3, auth3.workspaceId, name);
     step(`Reading ephemeral "${name}"`);
     return {
@@ -7034,4 +7034,4 @@ export {
   verifyCrashEntry,
   blameGeneratedFile
 };
-//# sourceMappingURL=chunk-TYBB7ON3.js.map
+//# sourceMappingURL=chunk-EM5QPTXP.js.map