@xanots/sdk 0.0.6 → 0.0.8

package/dist/node.d.ts

@@ -1,5 +1,5 @@
-import { aZ as LambdaOptions, a_ as CaptureValue, a$ as LambdaSurface, b0 as CaptureRecord, b1 as LambdaBindings, F as FunctionDef, b2 as Xano, i as LockFile } from './store-BJONDJoZ.js';
-export { b3 as AddonDef, b4 as AddonXdo, A as AdoptChange, a as AdoptResult, b5 as AgentDef, b6 as AgentHandle, b7 as AgentOutput, b8 as AgentSettingsXdo, b9 as AgentXdo, ba as AmbientBindings, bb as AnthropicLlm, bc as ApiGroupDef, bd as ApiGroupXdo, be as AuthRef, bf as Authored, B as Bundle, b as BundlePayload, c as BundleType, bg as Capturable, bh as ChannelConversationDef, bi as ChannelDeliveryDef, bj as ChannelDeliveryGuarantee, bk as ChannelPublishDef, bl as ChannelPublishWho, bm as ChannelRateLimitDef, bn as ColumnDef, bo as Comparison, bp as ContainerEnv, bq as ContainerPort, br as ContainerResources, bs as ContainerVolume, bt as CorsConfig, bu as CorsMode, bv as DatabaseActions, bw as DatabaseInputs, bx as DbEval, by as DbEvalFilter, bz as DbWhere, bA as ErrorInputs, bB as ExceptionPolicy, bC as FieldAccessor, bD as FieldRule, bE as GoogleGenAiLlm, bF as HistoryInput, bG as HttpVerb, bH as IndexDef, bI as IndexLang, bJ as IndexOp, bK as IndexType, bL as IndexXdo, bM as InferRow, bN as InputDescriptor, bO as InputOptions, bP as IteratingBindings, bQ as KnowledgeDef, bR as KnowledgeDirSource, bS as KnowledgeFileSource, bT as KnowledgeMode, bU as KnowledgeType, bV as LAMBDA_BINDINGS, bW as LAMBDA_CODE_FILTERS, bX as LAMBDA_GLOBALS, bY as LAMBDA_MODULE_GLOBALS, bZ as LAMBDA_STATEMENTS, b_ as LambdaBody, b$ as LlmPrompt, c0 as LlmProvider, c1 as LlmSettings, g as LockEntry, h as LockExportContext, M as Manifest, j as ManifestField, k as ManifestKind, l as ManifestStatement, c2 as ManifestValue, c3 as McpPathOptions, c4 as McpServerDef, c5 as McpServerHandle, c6 as McpServerXdo, m as MergeResult, c7 as MessageDeliverTo, c8 as MicroserviceChart, c9 as MicroserviceConfig, ca as MicroserviceContainer, cb as MicroserviceDef, cc as MicroserviceDeployment, cd as MicroserviceIngress, ce as MicroserviceRegistryAuth, cf as MicroserviceVolume, cg as MicroserviceXdo, ch as MiddlewareAttach, ci as MiddlewareAttachEntry, cj as MiddlewareDef, ck as MiddlewareXdo, O as ObjectKind, cl as OpenAiLlm, n as PayloadArrayKey, cm as QueryDef, cn as QueryFilterName, co as QueryHandle, cp as QueryResponseType, cq as QueryXdo, cr as RealtimeActions, cs as RealtimeChannelActions, ct as RealtimeChannelDef, cu as RealtimeChannelHandle, cv as RealtimeChannelRef, cw as RealtimeChannelTriggerInputs, cx as RealtimeChannelXdo, cy as RealtimeClient, cz as RealtimeInputs, cA as RealtimeMessageDef, cB as RealtimeMessageXdo, cC as RealtimeServerActions, cD as RealtimeServerDef, cE as RealtimeServerHandle, cF as RealtimeServerRef, cG as RealtimeServerTriggerInputs, cH as RealtimeServerXdo, cI as RealtimeUrlOptions, R as RenameResult, cJ as ResultStrategy, cK as Route, cL as RowOf, cM as ScheduleDef, cN as SchemaCols, cO as SchemaDef, cP as SearchComparison, cQ as SearchGroup, cR as SearchNode, cS as SearchOp, cT as SearchParamValue, cU as SeedFileSource, cV as SeedRow, cW as SeedSource, cX as SortDir, cY as SortDirective, S as StatementSpec, cZ as TableDef, c_ as TableXdo, c$ as TaskDef, d0 as TaskXdo, d1 as ToolDef, d2 as ToolXdo, d3 as ToolsetBaseDef, d4 as ToolsetBaseXdo, d5 as ToolsetInputs, d6 as ToolsetToolEntry, d7 as ToolsetToolRef, d8 as TriggerDef, d9 as TriggerObjType, da as TriggerXdo, db as ViewDef, dc as ViewXdo, dd as WorkflowTestDef, de as WorkflowTestXdo, df as WorkspaceActions, dg as WorkspaceConfigDef, dh as WorkspaceConfigXdo, di as WorkspaceHistoryDef, dj as WorkspaceHistoryXdo, dk as WorkspaceInputs, dl as WorkspaceMiddlewareDef, dm as WorkspaceMiddlewareXdo, dn as XanoFreeLlm, dp as addon, dq as agent, dr as agentTrigger, ds as and, dt as apiGroup, du as assertLambdaBody, dv as bitwiseAnd, dw as bitwiseOr, dx as bitwiseXor, dy as cmp, dz as defineFunction, dA as emit, dB as emitBundle, dC as errorTrigger, dD as expr, dE as fl, dF as input, dG as knowledge, dH as knowledgeDir, dI as knowledgeFile, dJ as mathAdd, dK as mathDiv, dL as mathMul, dM as mathSub, dN as mcpServer, dO as mcpServerTrigger, dP as microservice, dQ as middleware, dR as mixed, dS as objectEntries, dT as objectKeys, dU as objectValues, dV as or, dW as query, dX as realtimeChannel, dY as realtimeChannelTrigger, dZ as realtimeMessage, d_ as realtimeServer, d$ as realtimeServerTrigger, e0 as realtimeTrigger, e1 as resetLockOverrides, e2 as seedFile, e3 as seedLockOverrides, e4 as table, e5 as tableTrigger, e6 as task, e7 as textAppend, e8 as textPrepend, e9 as toSearchParams, ea as tool, eb as workflowTest, ec as workspace, ed as workspaceConfig, ee as workspaceTrigger } from './store-BJONDJoZ.js';
+import { aZ as LambdaOptions, a_ as CaptureValue, a$ as LambdaSurface, b0 as CaptureRecord, b1 as LambdaBindings, F as FunctionDef, b2 as Xano, i as LockFile } from './store-CUCBSYLj.js';
+export { b3 as AddonDef, b4 as AddonXdo, A as AdoptChange, a as AdoptResult, b5 as AgentDef, b6 as AgentHandle, b7 as AgentOutput, b8 as AgentSettingsXdo, b9 as AgentXdo, ba as AmbientBindings, bb as AnthropicLlm, bc as ApiGroupDef, bd as ApiGroupXdo, be as AuthRef, bf as Authored, B as Bundle, b as BundlePayload, c as BundleType, bg as Capturable, bh as ChannelConversationDef, bi as ChannelDeliveryDef, bj as ChannelDeliveryGuarantee, bk as ChannelPublishDef, bl as ChannelPublishWho, bm as ChannelRateLimitDef, bn as ColumnDef, bo as Comparison, bp as ContainerEnv, bq as ContainerPort, br as ContainerResources, bs as ContainerVolume, bt as CorsConfig, bu as CorsMode, bv as DatabaseActions, bw as DatabaseInputs, bx as DbEval, by as DbEvalFilter, bz as DbWhere, bA as ErrorInputs, bB as ExceptionPolicy, bC as FieldAccessor, bD as FieldRule, bE as GoogleGenAiLlm, bF as HistoryInput, bG as HttpVerb, bH as IndexDef, bI as IndexLang, bJ as IndexOp, bK as IndexType, bL as IndexXdo, bM as InferRow, bN as InputDescriptor, bO as InputOptions, bP as IteratingBindings, bQ as KnowledgeDef, bR as KnowledgeDirSource, bS as KnowledgeFileSource, bT as KnowledgeMode, bU as KnowledgeType, bV as LAMBDA_BINDINGS, bW as LAMBDA_CODE_FILTERS, bX as LAMBDA_GLOBALS, bY as LAMBDA_MODULE_GLOBALS, bZ as LAMBDA_STATEMENTS, b_ as LambdaBody, b$ as LlmPrompt, c0 as LlmProvider, c1 as LlmSettings, g as LockEntry, h as LockExportContext, M as Manifest, j as ManifestField, k as ManifestKind, l as ManifestStatement, c2 as ManifestValue, c3 as McpPathOptions, c4 as McpServerDef, c5 as McpServerHandle, c6 as McpServerXdo, m as MergeResult, c7 as MessageDeliverTo, c8 as MicroserviceChart, c9 as MicroserviceConfig, ca as MicroserviceContainer, cb as MicroserviceDef, cc as MicroserviceDeployment, cd as MicroserviceIngress, ce as MicroserviceRegistryAuth, cf as MicroserviceVolume, cg as MicroserviceXdo, ch as MiddlewareAttach, ci as MiddlewareAttachEntry, cj as MiddlewareDef, ck as MiddlewareXdo, O as ObjectKind, cl as OpenAiLlm, n as PayloadArrayKey, cm as QueryDef, cn as QueryFilterName, co as QueryHandle, cp as QueryResponseType, cq as QueryXdo, cr as RealtimeActions, cs as RealtimeChannelActions, ct as RealtimeChannelDef, cu as RealtimeChannelHandle, cv as RealtimeChannelRef, cw as RealtimeChannelTriggerInputs, cx as RealtimeChannelXdo, cy as RealtimeClient, cz as RealtimeInputs, cA as RealtimeMessageDef, cB as RealtimeMessageXdo, cC as RealtimeServerActions, cD as RealtimeServerDef, cE as RealtimeServerHandle, cF as RealtimeServerRef, cG as RealtimeServerTriggerInputs, cH as RealtimeServerXdo, cI as RealtimeUrlOptions, R as RenameResult, cJ as ResultStrategy, cK as Route, cL as RowOf, cM as ScheduleDef, cN as SchemaCols, cO as SchemaDef, cP as SearchComparison, cQ as SearchGroup, cR as SearchNode, cS as SearchOp, cT as SearchParamValue, cU as SeedFileSource, cV as SeedRow, cW as SeedSource, cX as SortDir, cY as SortDirective, S as StatementSpec, cZ as TableDef, c_ as TableXdo, c$ as TaskDef, d0 as TaskXdo, d1 as ToolDef, d2 as ToolXdo, d3 as ToolsetBaseDef, d4 as ToolsetBaseXdo, d5 as ToolsetInputs, d6 as ToolsetToolEntry, d7 as ToolsetToolRef, d8 as TriggerDef, d9 as TriggerObjType, da as TriggerXdo, db as ViewDef, dc as ViewXdo, dd as WorkflowTestDef, de as WorkflowTestXdo, df as WorkspaceActions, dg as WorkspaceConfigDef, dh as WorkspaceConfigXdo, di as WorkspaceHistoryDef, dj as WorkspaceHistoryXdo, dk as WorkspaceInputs, dl as WorkspaceMiddlewareDef, dm as WorkspaceMiddlewareXdo, dn as XanoFreeLlm, dp as addon, dq as agent, dr as agentTrigger, ds as and, dt as apiGroup, du as assertLambdaBody, dv as bitwiseAnd, dw as bitwiseOr, dx as bitwiseXor, dy as cmp, dz as defineFunction, dA as emit, dB as emitBundle, dC as errorTrigger, dD as expr, dE as fl, dF as input, dG as knowledge, dH as knowledgeDir, dI as knowledgeFile, dJ as mathAdd, dK as mathDiv, dL as mathMul, dM as mathSub, dN as mcpServer, dO as mcpServerTrigger, dP as microservice, dQ as middleware, dR as mixed, dS as objectEntries, dT as objectKeys, dU as objectValues, dV as or, dW as query, dX as realtimeChannel, dY as realtimeChannelTrigger, dZ as realtimeMessage, d_ as realtimeServer, d$ as realtimeServerTrigger, e0 as realtimeTrigger, e1 as resetLockOverrides, e2 as seedFile, e3 as seedLockOverrides, e4 as table, e5 as tableTrigger, e6 as task, e7 as textAppend, e8 as textPrepend, e9 as toSearchParams, ea as tool, eb as workflowTest, ec as workspace, ed as workspaceConfig, ee as workspaceTrigger } from './store-CUCBSYLj.js';
 export { ActionCallArgs, AddonCallArgs, AddonSpec, AgentRunResult, AiAgentRunArgs, AnyAddonDef, AnyFunctionDef, AnyQueryDef, AnyTableDef, ApiCallArgs, ApplyFilter, ApplyFilters, ArrayMapArgs, CloudJobArgs, CloudJobAwaitArgs, CloudJobStatusArgs, CreateAuthTokenArgs, DbAddArgs, DbAddOrEditArgs, DbAggregate, DbAggregatePaging, DbBind, DbBulkAddArgs, DbBulkDeleteArgs, DbBulkWriteArgs, DbDelArgs, DbDirectQueryArgs, DbDistinct, DbEditArgs, DbExternal, DbExternalPermissions, DbExternalQueryArgs, DbField, DbGetArgs, DbHasArgs, DbJoin, DbPaging, DbPatchArgs, DbQueryArgs, DbResponseType, DbReturnType, DbSchemaArgs, DbTransactionArgs, DbTruncateArgs, ExpectToThrowArgs, ExternalSqlEngine, ForArgs, ForeachArgs, FunctionCallArgs, FunctionRunArgs, GetRawInputArgs, HeaderMap, HttpMethod, InferInput, InferResponse, IpLookupArgs, IpLookupResult, MiddlewareCallArgs, RealtimeEventArgs, StackTupleWidened, SwitchArgs, SwitchCaseArgs, TaskCallArgs, ToolCallArgs, TriggerCallArgs, TryCatchArgs, WhileArgs, WorkflowTestCallArgs, actionCall, actionPackageCall, addonCall, aiAgentRun, apiCall, arrayMap, arrayUnion, cloudJob, cloudJobAwait, cloudJobStatus, comment, compile, conditional, createAuthToken, dbAdd, dbAddOrEdit, dbBulkAdd, dbBulkDelete, dbBulkPatch, dbBulkUpdate, dbDel, dbDirectQuery, dbEdit, dbExternalQuery, dbGet, dbHas, dbPatch, dbQuery, dbSchema, dbTransaction, dbTruncate, debugLog, die, expectToThrow, fileUrl, forLoop, foreachBreak, foreachContinue, foreachLoop, foreachRemove, functionCall, functionRun, getRawInput, group, ignored, ipLookup, middlewareCall, postProcess, realtimeEvent, returnValue, s, setVar, switchCase, switchStatement, taskCall, toolCall, triggerCall, tryCatch, updateVar, whileLoop, workflowTestCall } from './index.js';
 import { V as Value } from './response-CVAE2kMj.js';
 export { B as BrandOpts, c as BrandValue, C as CacheXdo, f as CaughtField, h as ConditionalContext, j as ConditionalElifContext, D as DecimalMethod, E as EmailMethod, k as ExprGroup, l as ExprNode, m as ExprOperand, n as ExprStatement, o as FieldAccess, p as FieldDescriptor, q as FieldMap, s as FieldOpts, u as FieldStyleType, v as FieldXdo, w as FilterXdo, x as FilteredValue, y as FromFieldMap, F as FunctionXdo, H as HistoryXdo, I as InputXdo, z as IntMethod, L as ListBoundsXdo, M as MethodArg, A as MethodOpts, G as MethodSpec, J as MethodXdo, K as MockEntry, N as MockMap, O as MockXdo, P as ObjInput, Q as ObjMember, S as ObjValue, T as ObjectRef, U as PasswordMethod, W as PersistedFunctionRow, X as RefValue, Y as RegexValue, Z as ResponseDef, _ as ResultItemXdo, $ as RowFromFieldMap, a0 as StackItemXdo, a1 as Statement, a2 as StatementAnnotations, a3 as StatementInputXdo, a4 as StatementOptions, a5 as TAGS, a6 as TEST_EXPECT_TYPES, a7 as TableRefMethod, a8 as Tag, a9 as TaggedValue, aa as TestDef, ab as TestExpect, ac as TestExpectType, ad as TestXdo, ae as TextFormat, af as TextMethod, ag as TypeBrand, ah as ValueOf, ai as VectorMethod, aj as XanoFileRef, ak as XanoGeoPosition, al as XanoGeoValue, am as annotate, an as auth, ao as c, ap as caught, aq as col, ar as env, as as expect, at as f, au as filter, av as inp, aw as obj, ax as out, ay as ref, az as resp, aA as setting, aB as statements, aC as sys, aD as test, aE as toolset, aF as withFilters } from './response-CVAE2kMj.js';

package/dist/node.js

@@ -5,7 +5,7 @@ import {
 import {
   TEST_EXPECT_TYPES,
   expect
-} from "./chunk-JRGDLAEA.js";
+} from "./chunk-2ROR3AZC.js";
 import {
   addon,
   agent,
@@ -17,7 +17,7 @@ import {
   task,
   tool,
   workflowTest
-} from "./chunk-CU5VOSTW.js";
+} from "./chunk-7AXQKABT.js";
 import {
   actionCall,
   actionPackageCall,
@@ -100,7 +100,7 @@ import {
   workflowTestCall,
   workspaceConfig,
   workspaceTrigger
-} from "./chunk-GC7ZQHW7.js";
+} from "./chunk-3MDKV2VA.js";
 import {
   exportBundleJson,
   loadDefault,
@@ -108,18 +108,18 @@ import {
   run,
   writeArtifact,
   writeBundle
-} from "./chunk-SOCYCBYG.js";
+} from "./chunk-SNO3KHCY.js";
 import "./chunk-JQLR64UC.js";
 import {
   readLockFile,
   writeLockFile
-} from "./chunk-OLQLJY5T.js";
+} from "./chunk-OYMR5AMJ.js";
 import "./chunk-GNPVYOPB.js";
 import "./chunk-EZG76F7R.js";
 import {
   Xano,
   workspace
-} from "./chunk-3FQD3QME.js";
+} from "./chunk-FEQTQ6PM.js";
 import "./chunk-OKNSR7MT.js";
 import {
   LAMBDA_BINDINGS,
@@ -167,7 +167,7 @@ import {
   toSearchParams,
   toolset,
   withFilters
-} from "./chunk-CQBJNFDK.js";
+} from "./chunk-64QK6JEK.js";
 import "./chunk-WHOJWOSV.js";
 import {
   annotate,
@@ -176,7 +176,7 @@ import {
 import {
   resetLockOverrides,
   seedLockOverrides
-} from "./chunk-EFH4NFPY.js";
+} from "./chunk-7JDT4PBU.js";
 
 // src/values/lambda-file.ts
 import { readFileSync } from "fs";

package/dist/{profile-command-ZPC2DPFV.js → profile-command-QJAAUZIV.js}

@@ -1,7 +1,7 @@
 import {
   getAccessToken
-} from "./chunk-SG4UBJ47.js";
-import "./chunk-LLWK6H77.js";
+} from "./chunk-3QW5NFZJ.js";
+import "./chunk-BKDJN76G.js";
 import {
   isMachineOutput,
   writeJson
@@ -74,4 +74,4 @@ export {
   fetchProfile,
   runProfileCommand
 };
-//# sourceMappingURL=profile-command-ZPC2DPFV.js.map
+//# sourceMappingURL=profile-command-QJAAUZIV.js.map

package/dist/{release-command-V4K4IORX.js → release-command-DN75G5GJ.js}

@@ -6,7 +6,7 @@ import {
 import {
   assertBundleInput,
   loadBundleText
-} from "./chunk-QVSUMHNN.js";
+} from "./chunk-PYS7UNNW.js";
 import {
   sharedSchemaChanges
 } from "./chunk-5HCDZ2XN.js";
@@ -24,8 +24,8 @@ import {
 } from "./chunk-4PTSTDIG.js";
 import {
   getAccessToken
-} from "./chunk-SG4UBJ47.js";
-import "./chunk-LLWK6H77.js";
+} from "./chunk-3QW5NFZJ.js";
+import "./chunk-BKDJN76G.js";
 import {
   encodeWorkspaceArchive
 } from "./chunk-ZUTSMMAG.js";
@@ -37,14 +37,14 @@ import {
 import "./chunk-3IGNIP6R.js";
 import {
   resolveLockPath
-} from "./chunk-SOCYCBYG.js";
+} from "./chunk-SNO3KHCY.js";
 import {
   UsageError,
   assertWritableDest
 } from "./chunk-JQLR64UC.js";
 import {
   readLockFile
-} from "./chunk-OLQLJY5T.js";
+} from "./chunk-OYMR5AMJ.js";
 import "./chunk-GNPVYOPB.js";
 import {
   blank,
@@ -55,15 +55,15 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-3FQD3QME.js";
+import "./chunk-FEQTQ6PM.js";
 import "./chunk-OKNSR7MT.js";
-import "./chunk-CQBJNFDK.js";
+import "./chunk-64QK6JEK.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
 import {
   REFERENCEABLE_KIND_PAYLOAD_KEYS,
   lockKey
-} from "./chunk-EFH4NFPY.js";
+} from "./chunk-7JDT4PBU.js";
 
 // src/emit/release-command.ts
 import { existsSync } from "fs";
@@ -179,12 +179,24 @@ function payloadKeyFor(type) {
   return REFERENCEABLE_KIND_PAYLOAD_KEYS[type] ?? type;
 }
 function splitPruneDeletes(plan, tracked) {
+  const ownedQueryNames = /* @__PURE__ */ new Set();
+  for (const key of tracked) {
+    if (!key.startsWith("query:")) continue;
+    const lockName = key.slice("query:".length);
+    const lastSep = lockName.lastIndexOf("|");
+    ownedQueryNames.add(lastSep === -1 ? lockName : lockName.slice(lastSep + 1));
+  }
+  const isOwned = (op) => {
+    const payloadKey = payloadKeyFor(op.type);
+    if (payloadKey === "query") return ownedQueryNames.has(op.name);
+    return tracked.has(lockKey(payloadKey, op.name));
+  };
   const collateral = [];
   const owned = [];
   for (const op of plan.operations) {
     if (op.action !== "delete") continue;
     if (IDENTITY_EXEMPT_TYPES.has(op.type)) continue;
-    (tracked.has(lockKey(payloadKeyFor(op.type), op.name)) ? owned : collateral).push(op);
+    (isOwned(op) ? owned : collateral).push(op);
   }
   return { collateral, owned };
 }
@@ -206,8 +218,8 @@ async function reconcileLockAfterReplace(args, auth, workspaceId) {
     return;
   }
   try {
-    const { adoptFromBundle } = await import("./lock-PDFCNYUW.js");
-    const { readLockFile: readLockFile2, writeLockFile } = await import("./io-65CJNLYI.js");
+    const { adoptFromBundle } = await import("./lock-GFXD6G2E.js");
+    const { readLockFile: readLockFile2, writeLockFile } = await import("./io-M7XZEMK7.js");
     const { lock, added, changed } = adoptFromBundle(readLockFile2(lockPath), live, lockPath);
     writeLockFile(lockPath, lock);
     const touched = added.length + changed.length;
@@ -431,7 +443,7 @@ async function runReleaseCommand(args) {
     { withSeed: req.records === true }
   );
   if (args.static !== void 0) {
-    const { assertNoSeedLeaks } = await import("./deploy-command-MTQQXPOO.js");
+    const { assertNoSeedLeaks } = await import("./deploy-command-QZ3GNLAD.js");
     await assertNoSeedLeaks(args.static, nonPublicSeedValues, args.allowSeedInStatic);
   }
   const workspaceId = auth.workspaceId;
@@ -573,7 +585,7 @@ Retry, or drop \`--backup-branch\` to release without one.`,
     ...backupLabel !== void 0 ? { backupBranch: backupLabel } : {}
   };
   if (args.static !== void 0) {
-    const { buildStaticEnv, deployStaticTo } = await import("./deploy-command-MTQQXPOO.js");
+    const { buildStaticEnv, deployStaticTo } = await import("./deploy-command-QZ3GNLAD.js");
     const env = buildStaticEnv(auth.instance, args.staticEnv);
     const explicit = Object.keys(args.staticEnv).length > 0;
     summary.static = await deployStaticTo(
@@ -592,4 +604,4 @@ Retry, or drop \`--backup-branch\` to release without one.`,
 export {
   runReleaseCommand
 };
-//# sourceMappingURL=release-command-V4K4IORX.js.map
+//# sourceMappingURL=release-command-DN75G5GJ.js.map

package/dist/{sandbox-details-command-DMY2KGA2.js → sandbox-details-command-EDO56IY3.js}

@@ -2,10 +2,10 @@ import {
   fetchSandboxDetails,
   runSandboxDetailsCommand,
   sandboxBaseUrl
-} from "./chunk-OR43PDCW.js";
+} from "./chunk-3EYUR3TX.js";
 import "./chunk-NDZFBZHC.js";
-import "./chunk-SG4UBJ47.js";
-import "./chunk-LLWK6H77.js";
+import "./chunk-3QW5NFZJ.js";
+import "./chunk-BKDJN76G.js";
 import "./chunk-NUQCEOKA.js";
 import "./chunk-3IGNIP6R.js";
 import "./chunk-GNPVYOPB.js";
@@ -15,4 +15,4 @@ export {
   runSandboxDetailsCommand,
   sandboxBaseUrl
 };
-//# sourceMappingURL=sandbox-details-command-DMY2KGA2.js.map
+//# sourceMappingURL=sandbox-details-command-EDO56IY3.js.map

package/dist/{sandbox-export-command-R6QMEK3D.js → sandbox-export-command-MO6DEZ7Z.js}

@@ -3,11 +3,11 @@ import {
   fetchSandboxMultidoc,
   resolveOutputTarget,
   runSandboxExportCommand
-} from "./chunk-AAFBSOSD.js";
-import "./chunk-OR43PDCW.js";
+} from "./chunk-JQJPFUZI.js";
+import "./chunk-3EYUR3TX.js";
 import "./chunk-NDZFBZHC.js";
-import "./chunk-SG4UBJ47.js";
-import "./chunk-LLWK6H77.js";
+import "./chunk-3QW5NFZJ.js";
+import "./chunk-BKDJN76G.js";
 import "./chunk-QTNO2WD6.js";
 import "./chunk-ZUTSMMAG.js";
 import "./chunk-X4DVXBFY.js";
@@ -21,4 +21,4 @@ export {
   resolveOutputTarget,
   runSandboxExportCommand
 };
-//# sourceMappingURL=sandbox-export-command-R6QMEK3D.js.map
+//# sourceMappingURL=sandbox-export-command-MO6DEZ7Z.js.map

package/dist/{store-BJONDJoZ.d.ts → store-CUCBSYLj.d.ts}

@@ -628,9 +628,13 @@ declare const input: {
      *
      * It is NOT a stored file resource and cannot be written to a file column
      * directly. Store it first and write what you get back:
-     * `s.storage.create_image({ as: "img", value: ref("input.avatar") })`, then
-     * write `ref("img")` to an `f.image()` column. Use {@link input.image} and
-     * friends only when the caller already sends a stored file resource.
+     * `s.storage.create_image({ as: "img", value: inp("avatar") })`, then write
+     * `ref("img")` to an `f.image()` column. Use {@link input.image} and friends
+     * only when the caller already sends a stored file resource.
+     *
+     * Read the upload with `inp`, NOT `ref("input.avatar")`: `ref` is the `var`
+     * tag, so that spelling makes the engine look for a stack variable named
+     * `input` and fail the request with `Missing var entry: input`.
      */
     file: <const O extends ConstInputOpts<never> = Record<string, never>>(options?: O) => InputDescriptor & TypeBrand<XanoFileUpload, O>;
     /**
@@ -5979,7 +5983,7 @@ interface QueryDef<I extends Record<string, InputDescriptor> = Record<string, In
      * Captured as a literal so `getPath({ params })` types its keys from it.
      */
     name: N;
-    /** Explicit Xano `guid` (this object's identity). Defaults to a guid derived from `name`; set it to keep identity across a rename or to match an existing object. */
+    /** Explicit Xano `guid` (this object's identity). Defaults to a guid derived from `(apiGroup, verb, name)` — a query's engine uniqueness — so a `GET`/`POST` pair on one path, and one path across two groups, are distinct objects. Set it to keep identity across a rename or to match an existing object. */
     guid?: string;
     /**
      * The HTTP method, UPPERCASE — one of `GET`, `POST`, `PUT`, `PATCH`,

package/dist/{test-command-OEBIGOPP.js → test-command-RRNNJ45I.js}

@@ -1,13 +1,13 @@
 import {
   resolveMetaTarget
-} from "./chunk-CEFYM6N5.js";
-import "./chunk-WJYB7DSI.js";
-import "./chunk-OR43PDCW.js";
+} from "./chunk-XP7S3VWY.js";
+import "./chunk-MDXR5E5Q.js";
+import "./chunk-3EYUR3TX.js";
 import "./chunk-NDZFBZHC.js";
 import {
   getAccessToken
-} from "./chunk-SG4UBJ47.js";
-import "./chunk-LLWK6H77.js";
+} from "./chunk-3QW5NFZJ.js";
+import "./chunk-BKDJN76G.js";
 import {
   isMachineOutput,
   writeJson
@@ -380,4 +380,4 @@ export {
   runSuite,
   runTestCommand
 };
-//# sourceMappingURL=test-command-OEBIGOPP.js.map
+//# sourceMappingURL=test-command-RRNNJ45I.js.map

package/dist/{upgrade-command-52AAZ3NV.js → upgrade-command-XFOAWDI3.js}

@@ -7,8 +7,8 @@ import {
 } from "./chunk-NUQCEOKA.js";
 import {
   refreshAgentFiles
-} from "./chunk-P5OAM3G2.js";
-import "./chunk-2SUCC4DV.js";
+} from "./chunk-QIWBCS7N.js";
+import "./chunk-4PE4ZAB7.js";
 import {
   runNpm
 } from "./chunk-ZSYZTGJH.js";
@@ -22,10 +22,10 @@ import {
   registryUrl,
   suppressUpdateNotice,
   upgradeCommand
-} from "./chunk-Y7BARS25.js";
-import "./chunk-SOCYCBYG.js";
+} from "./chunk-CDAQUY5W.js";
+import "./chunk-SNO3KHCY.js";
 import "./chunk-JQLR64UC.js";
-import "./chunk-OLQLJY5T.js";
+import "./chunk-OYMR5AMJ.js";
 import "./chunk-GNPVYOPB.js";
 import {
   blank,
@@ -35,12 +35,12 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-3FQD3QME.js";
+import "./chunk-FEQTQ6PM.js";
 import "./chunk-OKNSR7MT.js";
-import "./chunk-CQBJNFDK.js";
+import "./chunk-64QK6JEK.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
-import "./chunk-EFH4NFPY.js";
+import "./chunk-7JDT4PBU.js";
 
 // src/emit/upgrade-command.ts
 import { readFileSync, writeFileSync } from "fs";
@@ -174,4 +174,4 @@ function messageOf(err) {
 export {
   runUpgradeCommand
 };
-//# sourceMappingURL=upgrade-command-52AAZ3NV.js.map
+//# sourceMappingURL=upgrade-command-XFOAWDI3.js.map

package/dist/{validate-command-KTLPSSH7.js → validate-command-GLF5ZOOW.js}

@@ -1,10 +1,10 @@
 import {
   assertBundleInput,
   loadBundleText
-} from "./chunk-QVSUMHNN.js";
-import "./chunk-SOCYCBYG.js";
+} from "./chunk-PYS7UNNW.js";
+import "./chunk-SNO3KHCY.js";
 import "./chunk-JQLR64UC.js";
-import "./chunk-OLQLJY5T.js";
+import "./chunk-OYMR5AMJ.js";
 import "./chunk-GNPVYOPB.js";
 import {
   blank,
@@ -14,12 +14,12 @@ import {
   success,
   warn
 } from "./chunk-EZG76F7R.js";
-import "./chunk-3FQD3QME.js";
+import "./chunk-FEQTQ6PM.js";
 import "./chunk-OKNSR7MT.js";
-import "./chunk-CQBJNFDK.js";
+import "./chunk-64QK6JEK.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
-import "./chunk-EFH4NFPY.js";
+import "./chunk-7JDT4PBU.js";
 
 // src/emit/validate-command.ts
 var EXIT_VALIDATION_FAILED = 2;
@@ -119,4 +119,4 @@ function fmt(v) {
 export {
   runValidateCommand
 };
-//# sourceMappingURL=validate-command-KTLPSSH7.js.map
+//# sourceMappingURL=validate-command-GLF5ZOOW.js.map

package/dist/{workspace-command-LX5S5N2H.js → workspace-command-QCFELEGR.js}

@@ -1,12 +1,12 @@
 import {
   fetchWorkspaceBundle,
   runCodegenCommand
-} from "./chunk-TYBB7ON3.js";
+} from "./chunk-EM5QPTXP.js";
 import "./chunk-ZOYMZZ3S.js";
 import {
   resolveOutputTarget
-} from "./chunk-AAFBSOSD.js";
-import "./chunk-OR43PDCW.js";
+} from "./chunk-JQJPFUZI.js";
+import "./chunk-3EYUR3TX.js";
 import {
   printMicroserviceSection,
   readMicroservices
@@ -14,35 +14,35 @@ import {
 import {
   ENV_WORKSPACE,
   getAccessToken
-} from "./chunk-SG4UBJ47.js";
-import "./chunk-LLWK6H77.js";
+} from "./chunk-3QW5NFZJ.js";
+import "./chunk-BKDJN76G.js";
 import "./chunk-QTNO2WD6.js";
 import "./chunk-ZUTSMMAG.js";
 import "./chunk-X4DVXBFY.js";
-import "./chunk-4HDOP7LH.js";
+import "./chunk-C3M5K4ZH.js";
 import {
   isMachineOutput,
   writeJson
 } from "./chunk-NUQCEOKA.js";
-import "./chunk-2SUCC4DV.js";
+import "./chunk-4PE4ZAB7.js";
 import "./chunk-ZSYZTGJH.js";
 import {
   fetchOrExplain,
   httpFailure
 } from "./chunk-3IGNIP6R.js";
-import "./chunk-JRGDLAEA.js";
+import "./chunk-2ROR3AZC.js";
 import "./chunk-LU7TRWMC.js";
 import "./chunk-MU3O43L2.js";
 import "./chunk-P5C2YKAM.js";
 import "./chunk-Q77KNEUL.js";
 import "./chunk-4BXJGVZ3.js";
-import "./chunk-GC7ZQHW7.js";
-import "./chunk-SOCYCBYG.js";
+import "./chunk-3MDKV2VA.js";
+import "./chunk-SNO3KHCY.js";
 import {
   removedSubcommand,
   unknownSubcommand
 } from "./chunk-JQLR64UC.js";
-import "./chunk-OLQLJY5T.js";
+import "./chunk-OYMR5AMJ.js";
 import "./chunk-GNPVYOPB.js";
 import {
   formatFields,
@@ -50,12 +50,12 @@ import {
   step,
   success
 } from "./chunk-EZG76F7R.js";
-import "./chunk-3FQD3QME.js";
+import "./chunk-FEQTQ6PM.js";
 import "./chunk-OKNSR7MT.js";
-import "./chunk-CQBJNFDK.js";
+import "./chunk-64QK6JEK.js";
 import "./chunk-WHOJWOSV.js";
 import "./chunk-5XZ744TS.js";
-import "./chunk-EFH4NFPY.js";
+import "./chunk-7JDT4PBU.js";
 
 // src/emit/workspace-command.ts
 import { writeFileSync } from "fs";
@@ -70,7 +70,7 @@ async function runWorkspaceCommand(args) {
     case "codegen":
       return runCodegenCommand(args, { kind: "workspace" });
     case "branch": {
-      const { runBranchCommand } = await import("./branch-commands-R4FR75UW.js");
+      const { runBranchCommand } = await import("./branch-commands-PBQ36L4A.js");
       return runBranchCommand(args);
     }
     case "deploy":
@@ -160,4 +160,4 @@ async function runExport(args) {
 export {
   runWorkspaceCommand
 };
-//# sourceMappingURL=workspace-command-LX5S5N2H.js.map
+//# sourceMappingURL=workspace-command-QCFELEGR.js.map

package/guides/environment.md

@@ -65,8 +65,10 @@ Every top-level object carries a stable `guid` — Xano's identity anchor. On a
 the engine matches an incoming object to an existing one **by guid** and updates it in
 place; no match means a new object. So re-running `export`/`deploy` on the same code maps
 cleanly onto the same workspace — **no duplicates**. By default the guid derives from the
-object's `name`; set an explicit `guid` to pin identity across a rename, or to adopt an
-existing workspace object into code.
+object's `name` — for a **query**, from its api group, verb, and name together, which is
+the engine's own uniqueness for an endpoint, so `GET items` and `POST items` are distinct
+objects and a path may repeat across groups. Set an explicit `guid` to pin identity across
+a rename, or to adopt an existing workspace object into code.
 
 The opt-in **`xano.lock`** freezes the whole workspace's identities at once — every
 auto-derived guid, plus the `canonical` URL tokens of API groups and toolsets (which the
@@ -81,7 +83,8 @@ guard. Adopt it early either way: once identities have drifted, the only way bac
 Precedence at emit is always **explicit in-code value → lock entry → name derivation**.
 
 **When the lock is actually load-bearing.** Because the default derivation is deterministic
-— `md5("<type>:<name>")` — a project that created all of its own objects can regenerate a
+— `md5("<type>:<name>")`, and `md5("query:<group>|<verb>|<name>")` for a query — a project
+that created all of its own objects can regenerate a
 byte-identical lock from its own source. Delete that lock, release again, and the same guids
 come back: the objects match and update in place. For that project the lock is a *cache*, and
 losing it costs nothing.

package/llms/fields.md

@@ -57,6 +57,15 @@ the entry's own name. `hidden: ["created_at"]` drops columns from that expansion
 `input.list(element)` for arrays — wrap any element constructor, e.g.
 `input.list(input.text())` or `input.list(input.object({ id: f.int() }))`. Prefer the
 typed forms over `input.json()` when the shape is known.
+**A file reaches a column in two steps.** `input.file` is the RAW upload (the request's
+multipart/base64 bytes) and cannot be written to a file column directly: store it first —
+`s.storage.create_image({ as: "img", value: inp("avatar"), access: "public" })`
+(read the upload with `inp`; `ref("input.avatar")` spells a stack VARIABLE named
+`input` and fails the request with `Missing var entry: input`) — then write
+`ref("img")` into the `f.image()` cell with `s.db.add`/`edit`. `access` defaults to
+`"public"` (a guessable URL): pass `"private"` and hand out `s.storage.sign_private_url`
+results for anything user-scoped. `create_video`/`create_audio`/`create_attachment` are
+the same shape for the other file columns.
 **Typed inputs validate/coerce on bind, before your stack runs** — so reach for the
 specific type instead of hand-rolling checks. `input.email({ required: true })` rejects a
 malformed address with a 400 (and trims; add `methods: ["lower"]` to downcase) — no

package/llms/kinds-core.md

@@ -5,7 +5,8 @@
 The def-object passed to each factory. `?` = optional. `input` is keyed by
 input name (`input.<type>(opts?)`); `stack` is `Statement[]` (`s.*`); `response`
 is a `ResponseDef` (see **Responses** below). Object identity is `guid?` —
-omit it and it derives from `name` (set it to survive a rename).
+omit it and it derives from `name` (for a query, from group + verb + name; set it
+to survive a rename).
 
 - `defineFunction({ name, guid?, description?, docs?, workspace?, input?, stack?, response?, tests? })`
 - `query({ name, verb, apiGroup?, guid?, auth?, input?, stack?, response?, responseType?, apiEnabled?, disabled?, cache?, description?, docs?, tests?, example? })`

package/llms/lambda.md

@@ -1,6 +1,6 @@
 # Lambda bodies (JavaScript)
 
-> Read when writing a JavaScript body, or weighing whether to reach for one at all — `lam.fn`, `fl.lambda`, `fl.reduce`, `s.lambda`. Lambda workers are a bounded shared resource, each surface binds a different set of identifiers, and the hazards are not guessable.
+> Read when writing a JavaScript body, or weighing whether to reach for one at all — `lam.fn`, `fl.lambda`, `fl.reduce`, `s.lambda`. Lambda workers are a bounded shared resource, and each surface binds a different set of identifiers.
 
 **A lambda is an escape hatch, not a default.** The body runs outside the request's own
 runtime, and a workspace has a BOUNDED pool of lambda workers every lambda in it shares

package/llms/legacy.md

@@ -1,6 +1,6 @@
 # Legacy paradigms and retired statements
 
-> Read when the code was PULLED from an existing Xano instance rather than authored here — how a codegen'd tree reads and the three shapes in it that must not be "fixed", plus a `raw({ name: "mvp:…" })` statement, a `realtimeTrigger()`, or any name the catalogs do not list. None of the retired names are authorable for new code.
+> Read when the code was PULLED from an existing Xano instance rather than authored here — how a codegen'd tree reads and the three shapes in it that must not be "fixed", plus a `raw({ name: "mvp:…" })` statement, a `realtimeTrigger()`, or any name the catalogs do not list.
 
 Older paradigms this SDK still supports and still emits when it decodes an existing
 workspace. **Do not author these.** They are listed by name only so you recognize them

package/llms/lock.md

@@ -0,0 +1,32 @@
+# Lock file
+
+> Read when a `xano.lock` exists or should — renaming/pruning/adopting identities, seeding the lock programmatically, or asking which commands write it.
+
+`xano.lock` pins each object's guid and each api-group/toolset canonical, so renames
+stay renames (guids otherwise derive from `(type, name)`; a query's from `(api group,
+verb, name)`). Created by `xanots export <entry> --lock`, auto-read once present,
+committed. A query's entry is keyed by that composed identity —
+`query:<group>|<verb>|<name>` — the same seed its guid derives from; a legacy
+`query:<name>` entry keeps pinning and is migrated by the next locked export (the
+old key drops automatically once its guid re-lands under the composed one).
+
+- `xanots lock rename <kind> <old> <new>` — `kind` is the payload key (or `table`/`api_group`).
+  Run it after renaming in code; the next export emits the original guid under the new name.
+- `xanots lock prune <entry-file> [keys…] --yes` — drops orphaned entries. Finding orphans
+  RUNS the entry's module scope (env assertions included); `--no-verify --yes <kind:name>…`
+  prunes named keys with no evaluation and no orphan check.
+- `xanots lock adopt <live-bundle.json> [--yes]` — seed the lock from an engine
+  packageExport when taking over an existing workspace.
+- Every lock subcommand accepts `--lock=<path>`. `rename`/`adopt` take no entry file, so
+  from outside the lock's directory pass `--lock` (or `--entry=<entry-file>` to derive it).
+- Programmatic use: call `seedLockOverrides(readLockFile(path))` BEFORE importing any def
+  module — references bake guids at import time, so late seeding is a silent no-op
+  (`resetLockOverrides` exists for tests).
+
+What writes the lock: `export`/`deploy` of an ENTRY FILE update it via the shared compile
+step — only when a lock exists or `--lock` is passed. Nothing from a DEPLOY is written
+back beyond that (an ephemeral/sandbox is a separate workspace, so its identities must
+not pollute yours). The one write-back is `release --replace`, which mints fresh
+identities in the workspace the lock describes: it re-pins the lock from the rebuilt
+workspace, because otherwise the next release matches nothing and duplicates every
+object. CI: `--frozen-lock` fails instead of changing the lock.

package/llms/object-kinds.md

@@ -1,6 +1,6 @@
 # Object kinds
 
-> Read when you need the full catalog of authorable primitives — which factory builds each, which register method takes it, and which payload key it lands under. Read it too when a `register*` call will not typecheck because the array was built by `.flatMap()`/`.concat()` across modules.
+> Read when deciding WHAT to build — every authorable primitive (tables, endpoints, functions, tasks, agents, MCP, realtime, microservices, …), what each is, and which factory + register method build it. Read it too when a `register*` call will not typecheck because the array was built by `.flatMap()`/`.concat()` across modules.
 
 Author with the factory, register on the Xano instance, lands under the payload key. Each line ends with a one-liner on what the primitive is.
 
@@ -27,6 +27,6 @@ Author with the factory, register on the Xano instance, lands under the payload
 - realtime_server: `realtimeServer` → `Xano.registerRealtimeServers` → payload `realtime_server` — A realtime (websocket) server: the canonical-addressed container that owns realtime channels. Off until `enabled: true`. Returns a handle with `getUrl(baseUrl)`/`getPath()` for the client's socket URL (`wss://<host>/ws/<canonical>`).
 - channel: `realtimeChannel` → `Xano.registerRealtimeChannels` → payload `channel` — A realtime channel: a joinable path on a realtime server (`rooms/{room_id}`) with typed path params, join/publish policy, a client-visible conversation transcript, and delivery semantics. Owns message handlers. Returns a handle with `getChannel(params)` for the path a client joins.
 - message: `realtimeMessage` → `Xano.registerRealtimeMessages` → payload `message` — A realtime message handler: a named message type on a channel with its own typed payload and stack — the realtime analogue of a query. Pass the `realtimeChannel()` handle as `channel` and the owning server comes with it.
-- microservice: `microservice` → `Xano.registerMicroservices` → payload `microservice` — A container workload deployed alongside the workspace, called from a stack with `s.microservice.request`. Two mutually exclusive shapes via `kind`: `builtin` declares containers (image/ports/resources/env/command/args) plus optional `ingresses`, and `helm` points at a chart and its `values` — passing both throws. EARLY SURFACE, expected to change — every export of a workspace declaring one prints a notice saying so. `configs`/`volumes` are typed and `@deprecated` but NOT deployable: the engine rejects an import carrying either, so `export()` fails the build rather than letting the deploy fatal. Put a value the workload reads in a container's `env`, and storage in a container's own `volumes` (`emptyDir`/`persistent`/`config`). Container names are free-form — they need not match the microservice name, which is what a stack addresses. SECRETS RIDE ALONG — `chart.values` and `registryAuth.dockerconfigjson` are carried into the bundle, and into a pulled tree, verbatim (they must be, or a pulled microservice could not be redeployed). Both are stored strings with NO deploy-time indirection: `process.env.X` in the def resolves at EXPORT and writes the literal into the bundle, so it is not a way to keep the credential out. Either leave `registryAuth` unset (public image, or a credential attached outside this workspace) or treat the bundle and any pulled tree as secret material — keep them out of git, or rotate after. Export prints a notice per microservice carrying either field; `--strict` does not promote it. For a secret a STACK reads, the mapped surface is `workspaceConfig({ env })` + `env("NAME")`.
+- microservice: `microservice` → `Xano.registerMicroservices` → payload `microservice` — A container workload deployed alongside the workspace, called from a stack with `s.microservice.request`. Def shapes (`builtin` containers vs a `helm` chart) and the SECRET-handling rules its config carries: `llms/statements-calls.md`.
 - knowledge: `knowledge` → `Xano.registerKnowledge` → payload `knowledge` — Markdown the workspace's AI agents read before they act — an `agents.md` of standing instructions, a `skill`, or a `doc`. The body is a real markdown FILE via `knowledgeFile("./x.md", import.meta.url)`, and `mode` decides how much of it reaches the agent.
 - workspace: `workspaceConfig` → `Xano.registerWorkspace` → payload `workspace` — Workspace-level configuration such as default middleware chains and request-history defaults per host kind.