@agent-nexus/cli 0.1.3 → 0.1.6

package/dist/index.js

@@ -38,6 +38,7 @@ var output_exports = {};
 __export(output_exports, {
   color: () => color,
   isJsonMode: () => isJsonMode,
+  printContextBanner: () => printContextBanner,
   printList: () => printList,
   printPaginationMeta: () => printPaginationMeta,
   printRecord: () => printRecord,
@@ -116,6 +117,13 @@ function printPaginationMeta(meta) {
 ${parts.join(" \xB7 ")}`));
   }
 }
+function printContextBanner(resolved) {
+  if (_jsonMode) return;
+  if (!process.stderr.isTTY) return;
+  const orgPart = resolved.profile.orgName ? ` (${resolved.profile.orgName})` : "";
+  const line = `\u25B8 ${resolved.name}${orgPart} \xB7 ${SOURCE_LABELS[resolved.source]}`;
+  process.stderr.write(color.dim(line) + "\n");
+}
 function printList(data, meta, columns) {
   if (_jsonMode) {
     console.log(JSON.stringify({ data, meta }, null, 2));
@@ -126,7 +134,7 @@ function printList(data, meta, columns) {
     printPaginationMeta(meta);
   }
 }
-var _jsonMode, NO_COLOR2, color;
+var _jsonMode, NO_COLOR2, color, SOURCE_LABELS;
 var init_output = __esm({
   "src/output.ts"() {
     "use strict";
@@ -142,6 +150,14 @@ var init_output = __esm({
       yellow: (t) => c2("33", t),
       cyan: (t) => c2("36", t)
     };
+    SOURCE_LABELS = {
+      flag: "flag override",
+      env: "env",
+      directory: ".nexusrc",
+      active: "active",
+      default: "default",
+      override: "api-key override"
+    };
   }
 });
 
@@ -150,7 +166,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@agent-nexus/cli",
-      version: "0.1.3",
+      version: "0.1.6",
       description: "Official CLI for the Nexus AI agent platform.",
       license: "MIT",
       keywords: [
@@ -240,12 +256,32 @@ var URL_MAP = {
 };
 var CONFIG_DIR = import_node_path.default.join(import_node_os.default.homedir(), ".nexus-mcp");
 var CONFIG_FILE = import_node_path.default.join(CONFIG_DIR, "config.json");
+var NEXUSRC_FILENAME = ".nexusrc";
+var PROFILE_NAME_RE = /^[a-z0-9][a-z0-9_-]{0,31}$/;
 function loadConfig() {
   try {
     const raw = import_node_fs.default.readFileSync(CONFIG_FILE, "utf-8");
-    return JSON.parse(raw);
+    const parsed = JSON.parse(raw);
+    if ("profiles" in parsed && typeof parsed.profiles === "object") {
+      return parsed;
+    }
+    const v1 = parsed;
+    if (v1.apiKey) {
+      const migrated = {
+        activeProfile: "default",
+        profiles: {
+          default: {
+            apiKey: v1.apiKey,
+            ...v1.baseUrl ? { baseUrl: v1.baseUrl } : {}
+          }
+        }
+      };
+      saveConfig(migrated);
+      return migrated;
+    }
+    return emptyConfig();
   } catch {
-    return {};
+    return emptyConfig();
   }
 }
 function saveConfig(config) {
@@ -260,27 +296,159 @@ function clearConfig() {
   } catch {
   }
 }
+function emptyConfig() {
+  return { activeProfile: "", profiles: {} };
+}
+function getProfile(name) {
+  return loadConfig().profiles[name];
+}
+function saveProfile(name, profile) {
+  const config = loadConfig();
+  config.profiles[name] = profile;
+  if (!config.activeProfile || Object.keys(config.profiles).length === 1) {
+    config.activeProfile = name;
+  }
+  saveConfig(config);
+}
+function removeProfile(name) {
+  const config = loadConfig();
+  if (!(name in config.profiles)) return false;
+  delete config.profiles[name];
+  if (config.activeProfile === name) {
+    const remaining = Object.keys(config.profiles);
+    config.activeProfile = remaining[0] ?? "";
+  }
+  saveConfig(config);
+  return true;
+}
+function setActiveProfile(name) {
+  const config = loadConfig();
+  if (!(name in config.profiles)) {
+    const available = Object.keys(config.profiles).join(", ");
+    throw new Error(
+      `Profile "${name}" not found.` + (available ? ` Available: ${available}. Run: nexus auth list` : " Run: nexus auth login")
+    );
+  }
+  config.activeProfile = name;
+  saveConfig(config);
+}
+function listProfiles() {
+  const config = loadConfig();
+  return { profiles: config.profiles, activeProfile: config.activeProfile };
+}
+function validateProfileName(name) {
+  if (!PROFILE_NAME_RE.test(name)) {
+    return `Invalid profile name "${name}". Use lowercase letters, numbers, hyphens, underscores (max 32 chars, must start with alphanumeric).`;
+  }
+  return null;
+}
+function slugifyProfileName(input) {
+  return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 32) || "default";
+}
+function findNexusRc(startDir = process.cwd()) {
+  let dir = import_node_path.default.resolve(startDir);
+  const root = import_node_path.default.parse(dir).root;
+  while (true) {
+    const rcPath = import_node_path.default.join(dir, NEXUSRC_FILENAME);
+    try {
+      const raw = import_node_fs.default.readFileSync(rcPath, "utf-8");
+      const parsed = JSON.parse(raw);
+      if (parsed.profile && typeof parsed.profile === "string") {
+        return { profile: parsed.profile, rcPath };
+      }
+    } catch {
+    }
+    if (dir === root) break;
+    dir = import_node_path.default.dirname(dir);
+  }
+  return null;
+}
+function writeNexusRc(dir, profile) {
+  const rcPath = import_node_path.default.join(dir, NEXUSRC_FILENAME);
+  import_node_fs.default.writeFileSync(rcPath, JSON.stringify({ profile }, null, 2) + "\n");
+}
+function removeNexusRc(dir) {
+  const rcPath = import_node_path.default.join(dir, NEXUSRC_FILENAME);
+  try {
+    import_node_fs.default.unlinkSync(rcPath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function resolveProfile(opts) {
+  const directKey = opts?.apiKey || process.env.NEXUS_API_KEY;
+  if (directKey) {
+    return {
+      name: "override",
+      profile: {
+        apiKey: directKey,
+        baseUrl: opts?.baseUrl || process.env.NEXUS_BASE_URL
+      },
+      source: "override"
+    };
+  }
+  const config = loadConfig();
+  const profileNames = Object.keys(config.profiles);
+  const lookup = (name, source, rcPath) => {
+    const profile = config.profiles[name];
+    if (!profile) {
+      const available = profileNames.join(", ");
+      const sourceHint = source === "flag" ? `(from --profile flag)` : source === "env" ? `(from NEXUS_PROFILE env)` : source === "directory" ? `(from .nexusrc at ${rcPath})` : source === "active" ? `(active profile)` : `(default profile)`;
+      throw new Error(
+        `Profile "${name}" ${sourceHint} not found.` + (available ? ` Available: ${available}. Run: nexus auth list` : " No profiles configured. Run: nexus auth login")
+      );
+    }
+    return { name, profile, source, rcPath };
+  };
+  if (opts?.profile) {
+    return lookup(opts.profile, "flag");
+  }
+  if (process.env.NEXUS_PROFILE) {
+    return lookup(process.env.NEXUS_PROFILE, "env");
+  }
+  const rc = findNexusRc();
+  if (rc) {
+    return lookup(rc.profile, "directory", rc.rcPath);
+  }
+  if (config.activeProfile && config.profiles[config.activeProfile]) {
+    return lookup(config.activeProfile, "active");
+  }
+  if (config.profiles["default"]) {
+    return lookup("default", "default");
+  }
+  if (profileNames.length > 0) {
+    throw new Error(
+      `No active profile set. Available: ${profileNames.join(", ")}.
+  Run: nexus auth switch <profile>`
+    );
+  }
+  throw new Error("No profiles configured. Run:\n  nexus auth login");
+}
+function resolveApiKey(override) {
+  if (override) return override;
+  return resolveProfile().profile.apiKey;
+}
 function resolveBaseUrl(override) {
   if (override) return override;
   if (process.env.NEXUS_BASE_URL) return process.env.NEXUS_BASE_URL;
-  const config = loadConfig();
-  if (config.baseUrl) return config.baseUrl;
+  try {
+    const resolved = resolveProfile();
+    if (resolved.profile.baseUrl) return resolved.profile.baseUrl;
+  } catch {
+  }
   const env = process.env.NEXUS_ENV ?? "production";
   return URL_MAP[env] ?? URL_MAP.production;
 }
-function resolveApiKey(override) {
-  if (override) return override;
-  if (process.env.NEXUS_API_KEY) return process.env.NEXUS_API_KEY;
-  const config = loadConfig();
-  if (config.apiKey) return config.apiKey;
-  throw new Error("No API key found. Set NEXUS_API_KEY or run:\n  nexus auth login");
-}
 
 // src/client.ts
+var _lastResolved = null;
 function createClient(opts) {
+  const resolved = resolveProfile(opts);
+  _lastResolved = resolved;
   return new import_sdk.NexusClient({
-    apiKey: resolveApiKey(opts?.apiKey),
-    baseUrl: resolveBaseUrl(opts?.baseUrl)
+    apiKey: resolved.profile.apiKey,
+    baseUrl: resolved.profile.baseUrl ?? resolveBaseUrl(opts?.baseUrl)
   });
 }
 
@@ -861,20 +1029,21 @@ var import_promises = __toESM(require("readline/promises"));
 init_output();
 var SETTINGS_URL = "https://app.nexusgpt.io/app/settings/api-keys";
 function registerAuthCommands(program2) {
-  const auth = program2.command("auth").description("Manage authentication");
-  auth.command("login").description("Authenticate with the Nexus API").option("--api-key <key>", "API key (skip interactive prompt)").option("--env <env>", "Environment: dev or production", "production").addHelpText(
+  const auth = program2.command("auth").description("Manage authentication and profiles");
+  auth.command("login").description("Authenticate with the Nexus API and create a profile").option("--api-key <key>", "API key (skip interactive prompt)").option("--profile <name>", "Profile name to save as").option("--env <env>", "Environment: dev or production", "production").addHelpText(
     "after",
     `
 Examples:
   $ nexus auth login
   $ nexus auth login --api-key nxs_abc123
+  $ nexus auth login --profile work --api-key nxs_abc123
   $ nexus auth login --env dev`
   ).action(async (opts) => {
-    const config = loadConfig();
+    let baseUrl;
     if (opts.env === "dev") {
-      config.baseUrl = "http://localhost:3001";
+      baseUrl = "http://localhost:3001";
     }
-    const baseUrl = config.baseUrl ?? resolveBaseUrl();
+    const resolvedBaseUrl = baseUrl ?? resolveBaseUrl();
     let apiKey = opts.apiKey;
     if (!apiKey) {
       console.log(`Opening ${color.cyan(SETTINGS_URL)} ...`);
@@ -900,31 +1069,228 @@ Examples:
       return;
     }
     console.log("Validating...");
-    const res = await fetch(`${baseUrl}/api/public/v1/agents?limit=1`, {
+    const validateRes = await fetch(`${resolvedBaseUrl}/api/public/v1/agents?limit=1`, {
       headers: { "api-key": apiKey, Accept: "application/json" }
     });
-    if (!res.ok) {
+    if (!validateRes.ok) {
       console.error(
-        color.red("Error:") + ` Validation failed (HTTP ${res.status}). Check your key and try again.`
+        color.red("Error:") + ` Validation failed (HTTP ${validateRes.status}). Check your key and try again.`
       );
       process.exitCode = 1;
       return;
     }
-    config.apiKey = apiKey;
-    if (opts.env === "dev") config.baseUrl = "http://localhost:3001";
-    saveConfig(config);
-    printSuccess("Logged in successfully.", {
+    let orgName;
+    let orgId;
+    try {
+      const meRes = await fetch(`${resolvedBaseUrl}/api/public/v1/me`, {
+        headers: { "api-key": apiKey, Accept: "application/json" }
+      });
+      if (meRes.ok) {
+        const meJson = await meRes.json();
+        if (meJson.data) {
+          orgName = meJson.data.orgName;
+          orgId = meJson.data.orgId;
+        }
+      }
+    } catch {
+    }
+    if (orgName) {
+      console.log(`Organization: ${color.cyan(orgName)}`);
+    }
+    let profileName = opts.profile;
+    if (!profileName) {
+      const suggested = orgName ? slugifyProfileName(orgName) : "default";
+      const rl = import_promises.default.createInterface({ input: import_node_process.stdin, output: import_node_process.stdout });
+      try {
+        const answer = (await rl.question(`Profile name [${suggested}]: `)).trim();
+        profileName = answer || suggested;
+      } finally {
+        rl.close();
+      }
+    }
+    const nameError = validateProfileName(profileName);
+    if (nameError) {
+      console.error(color.red("Error:") + " " + nameError);
+      process.exitCode = 1;
+      return;
+    }
+    const existing = getProfile(profileName);
+    if (existing) {
+      const existingLabel = existing.orgName ? ` (${existing.orgName})` : "";
+      const rl = import_promises.default.createInterface({ input: import_node_process.stdin, output: import_node_process.stdout });
+      try {
+        const answer = (await rl.question(
+          `Profile "${profileName}"${existingLabel} already exists. Overwrite? [y/N]: `
+        )).trim();
+        if (answer.toLowerCase() !== "y") {
+          console.log("Aborted.");
+          return;
+        }
+      } finally {
+        rl.close();
+      }
+    }
+    saveProfile(profileName, {
+      apiKey,
+      ...baseUrl ? { baseUrl } : {},
+      ...orgName ? { orgName } : {},
+      ...orgId ? { orgId } : {}
+    });
+    printSuccess(`Saved profile "${profileName}".`, {
+      ...orgName ? { organization: orgName } : {},
+      profile: profileName,
       config: "~/.nexus-mcp/config.json"
     });
+    const { profiles } = listProfiles();
+    if (Object.keys(profiles).length > 1) {
+      console.log(
+        "\n" + color.dim("Tip: You have multiple profiles. Consider pinning directories:") + "\n" + color.dim(`  nexus auth pin ${profileName}    (in your project directory)`)
+      );
+    }
+  });
+  auth.command("logout").description("Remove stored credentials").argument("[name]", "Specific profile to remove (default: active profile)").option("--all", "Remove all profiles").addHelpText(
+    "after",
+    `
+Examples:
+  $ nexus auth logout           # removes active profile
+  $ nexus auth logout work      # removes "work" profile
+  $ nexus auth logout --all     # removes all profiles`
+  ).action((name, opts) => {
+    if (opts.all) {
+      clearConfig();
+      printSuccess("All profiles removed.");
+      return;
+    }
+    const { activeProfile, profiles } = listProfiles();
+    const target = name ?? activeProfile;
+    if (!target) {
+      console.error(color.red("Error:") + " No active profile. Run: nexus auth login");
+      process.exitCode = 1;
+      return;
+    }
+    if (!removeProfile(target)) {
+      console.error(color.red("Error:") + ` Profile "${target}" not found. Run: nexus auth list`);
+      process.exitCode = 1;
+      return;
+    }
+    const remaining = Object.keys(profiles).filter((p) => p !== target);
+    if (remaining.length === 0) {
+      printSuccess(`Removed profile "${target}". No profiles remaining. Run: nexus auth login`);
+    } else {
+      const { activeProfile: newActive } = listProfiles();
+      printSuccess(`Removed profile "${target}".`, {
+        remaining: remaining.join(", "),
+        ...newActive ? { active: newActive } : {}
+      });
+    }
+  });
+  auth.command("switch").description("Switch the active profile").argument("<name>", "Profile name to activate").addHelpText(
+    "after",
+    `
+Examples:
+  $ nexus auth switch work
+  $ nexus auth switch personal`
+  ).action((name) => {
+    try {
+      setActiveProfile(name);
+    } catch (err) {
+      console.error(color.red("Error:") + " " + err.message);
+      process.exitCode = 1;
+      return;
+    }
+    const profile = getProfile(name);
+    const orgPart = profile?.orgName ? ` (${profile.orgName})` : "";
+    printSuccess(`Switched to "${name}"${orgPart}.`);
+  });
+  auth.command("list").description("List all saved profiles").addHelpText(
+    "after",
+    `
+Examples:
+  $ nexus auth list`
+  ).action(() => {
+    const { profiles, activeProfile } = listProfiles();
+    const names = Object.keys(profiles);
+    if (names.length === 0) {
+      console.log(color.dim("No profiles. Run: nexus auth login"));
+      return;
+    }
+    const rows = names.map((name) => ({
+      marker: name === activeProfile ? "\u25B8" : " ",
+      name,
+      orgName: profiles[name].orgName ?? color.dim("\u2014"),
+      baseUrl: profiles[name].baseUrl ?? "https://api.nexusgpt.io"
+    }));
+    printTable(rows, [
+      { key: "marker", label: " ", width: 2 },
+      { key: "name", label: "PROFILE" },
+      { key: "orgName", label: "ORGANIZATION" },
+      { key: "baseUrl", label: "BASE URL" }
+    ]);
+  });
+  auth.command("pin").description("Pin the current directory to a profile via .nexusrc").argument("<profile>", "Profile name to pin").addHelpText(
+    "after",
+    `
+Examples:
+  $ nexus auth pin work`
+  ).action((profileName) => {
+    const profile = getProfile(profileName);
+    if (!profile) {
+      const { profiles } = listProfiles();
+      const available = Object.keys(profiles).join(", ");
+      console.error(
+        color.red("Error:") + ` Profile "${profileName}" not found.` + (available ? ` Available: ${available}` : " Run: nexus auth login")
+      );
+      process.exitCode = 1;
+      return;
+    }
+    writeNexusRc(process.cwd(), profileName);
+    const orgPart = profile.orgName ? ` (${profile.orgName})` : "";
+    printSuccess(`Pinned this directory to "${profileName}"${orgPart}.`, {
+      file: ".nexusrc"
+    });
+    console.log(color.dim("\n  Tip: Consider adding .nexusrc to your .gitignore"));
   });
-  auth.command("logout").description("Remove stored credentials").addHelpText(
+  auth.command("unpin").description("Remove .nexusrc from the current directory").addHelpText(
     "after",
     `
 Examples:
-  $ nexus auth logout`
+  $ nexus auth unpin`
   ).action(() => {
-    clearConfig();
-    printSuccess("Logged out. Credentials removed from ~/.nexus-mcp/config.json");
+    if (!removeNexusRc(process.cwd())) {
+      console.error(color.red("Error:") + " No .nexusrc found in current directory.");
+      process.exitCode = 1;
+      return;
+    }
+    printSuccess("Removed .nexusrc from current directory.");
+  });
+  auth.command("status").description("Show resolved profile and how it was determined").addHelpText(
+    "after",
+    `
+Examples:
+  $ nexus auth status`
+  ).action(() => {
+    try {
+      const resolved = resolveProfile(program2.optsWithGlobals());
+      const sourceExplanation = {
+        flag: "--profile flag",
+        env: "NEXUS_PROFILE environment variable",
+        directory: `.nexusrc at ${resolved.rcPath}`,
+        active: "active profile in config",
+        default: 'fallback to "default" profile',
+        override: "--api-key flag or NEXUS_API_KEY env"
+      };
+      const orgPart = resolved.profile.orgName ? ` (${resolved.profile.orgName})` : "";
+      console.log(
+        `Using profile ${color.cyan(`"${resolved.name}"`)}${orgPart} \u2014 ${color.dim(sourceExplanation[resolved.source])}`
+      );
+      console.log(
+        `  ${color.dim("key:")} ${resolved.profile.apiKey.slice(0, 8)}...${resolved.profile.apiKey.slice(-4)}`
+      );
+      console.log(`  ${color.dim("api:")} ${resolved.profile.baseUrl ?? resolveBaseUrl()}`);
+    } catch (err) {
+      console.error(color.red("Error:") + " " + err.message);
+      process.exitCode = 1;
+    }
   });
   auth.command("whoami").description("Show current authentication status").addHelpText(
     "after",
@@ -933,10 +1299,10 @@ Examples:
   $ nexus auth whoami`
   ).action(async () => {
     try {
-      const apiKey = resolveApiKey();
-      const baseUrl = resolveBaseUrl();
+      const resolved = resolveProfile(program2.optsWithGlobals());
+      const baseUrl = resolved.profile.baseUrl ?? resolveBaseUrl();
       const res = await fetch(`${baseUrl}/api/public/v1/agents?limit=1`, {
-        headers: { "api-key": apiKey, Accept: "application/json" }
+        headers: { "api-key": resolved.profile.apiKey, Accept: "application/json" }
       });
       if (!res.ok) {
         console.error(
@@ -946,8 +1312,10 @@ Examples:
         return;
       }
       printSuccess("Authenticated.", {
+        profile: resolved.name,
+        ...resolved.profile.orgName ? { organization: resolved.profile.orgName } : {},
         api: baseUrl,
-        key: apiKey.slice(0, 8) + "..." + apiKey.slice(-4)
+        key: resolved.profile.apiKey.slice(0, 8) + "..." + resolved.profile.apiKey.slice(-4)
       });
     } catch (err) {
       console.error(color.red("Error:") + " Not logged in. Run: nexus auth login");
@@ -3275,6 +3643,155 @@ Examples:
   });
 }
 
+// src/commands/upgrade.ts
+var import_node_child_process2 = require("child_process");
+init_output();
+
+// src/util/version-check.ts
+var import_node_fs4 = __toESM(require("fs"));
+var import_node_os2 = __toESM(require("os"));
+var import_node_path4 = __toESM(require("path"));
+var PACKAGE_NAME = "@agent-nexus/cli";
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 3e3;
+var CACHE_FILE = import_node_path4.default.join(import_node_os2.default.homedir(), ".nexus-mcp", "version-check.json");
+function loadCache() {
+  try {
+    return JSON.parse(import_node_fs4.default.readFileSync(CACHE_FILE, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function saveCache(cache) {
+  try {
+    const dir = import_node_path4.default.dirname(CACHE_FILE);
+    import_node_fs4.default.mkdirSync(dir, { recursive: true, mode: 448 });
+    import_node_fs4.default.writeFileSync(CACHE_FILE, JSON.stringify(cache), { mode: 384 });
+  } catch {
+  }
+}
+async function fetchLatestVersion() {
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, {
+      signal: controller.signal
+    });
+    clearTimeout(timer);
+    if (!res.ok) return null;
+    const json = await res.json();
+    return json.version ?? null;
+  } catch {
+    return null;
+  }
+}
+function compareSemver(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i = 0; i < 3; i++) {
+    const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+    if (diff !== 0) return diff < 0 ? -1 : 1;
+  }
+  return 0;
+}
+async function checkForUpdate(currentVersion) {
+  try {
+    const cache = loadCache();
+    if (cache && Date.now() - cache.lastChecked < CHECK_INTERVAL_MS) {
+      if (compareSemver(currentVersion, cache.latestVersion) < 0) {
+        return formatUpdateMessage(currentVersion, cache.latestVersion);
+      }
+      return null;
+    }
+    const latest = await fetchLatestVersion();
+    if (!latest) return null;
+    saveCache({ lastChecked: Date.now(), latestVersion: latest });
+    if (compareSemver(currentVersion, latest) < 0) {
+      return formatUpdateMessage(currentVersion, latest);
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function formatUpdateMessage(current, latest) {
+  return `
+  Update available: ${current} \u2192 ${latest}
+  Run "npm update -g ${PACKAGE_NAME}" to update.
+  IMPORTANT: You MUST update before running any other nexus commands. Results from an outdated CLI may be incorrect.
+`;
+}
+async function autoUpdate(currentVersion) {
+  try {
+    const cache = loadCache();
+    let latest = null;
+    if (cache && Date.now() - cache.lastChecked < CHECK_INTERVAL_MS) {
+      latest = cache.latestVersion;
+    } else {
+      latest = await fetchLatestVersion();
+      if (latest) {
+        saveCache({ lastChecked: Date.now(), latestVersion: latest });
+      }
+    }
+    if (!latest || compareSemver(currentVersion, latest) >= 0) {
+      return null;
+    }
+    const { execSync: execSync2 } = await import("child_process");
+    process.stderr.write(`
+  Auto-updating: ${currentVersion} \u2192 ${latest}\u2026
+`);
+    execSync2(`npm install -g ${PACKAGE_NAME}@latest`, {
+      stdio: "inherit"
+    });
+    return `
+  Successfully auto-updated to ${latest}.
+`;
+  } catch {
+    return formatUpdateMessage(currentVersion, loadCache()?.latestVersion ?? "latest");
+  }
+}
+
+// src/commands/upgrade.ts
+var PACKAGE_NAME2 = "@agent-nexus/cli";
+function registerUpgradeCommand(program2) {
+  const currentVersion = require_package().version;
+  program2.command("upgrade").description("Upgrade the Nexus CLI to the latest version").addHelpText("after", `
+Examples:
+  $ nexus upgrade`).action(async () => {
+    process.stderr.write(`Current version: ${color.cyan(currentVersion)}
+`);
+    process.stderr.write("Checking for updates\u2026\n");
+    const latest = await fetchLatestVersion();
+    if (!latest) {
+      process.stderr.write(color.red("Failed to check for updates. Please try again later.\n"));
+      process.exitCode = 1;
+      return;
+    }
+    if (compareSemver(currentVersion, latest) >= 0) {
+      printSuccess(`Already up-to-date (${currentVersion}).`, { version: currentVersion });
+      return;
+    }
+    process.stderr.write(`Upgrading ${color.yellow(currentVersion)} \u2192 ${color.green(latest)}\u2026
+`);
+    try {
+      (0, import_node_child_process2.execSync)(`npm install -g ${PACKAGE_NAME2}@latest`, {
+        stdio: "inherit"
+      });
+      printSuccess(`Successfully upgraded to ${latest}.`, { from: currentVersion, to: latest });
+    } catch {
+      process.stderr.write(
+        color.red(
+          `
+Upgrade failed. Try running manually:
+  npm install -g ${PACKAGE_NAME2}@latest
+`
+        )
+      );
+      process.exitCode = 1;
+    }
+  });
+}
+
 // src/commands/version.ts
 init_output();
 function registerVersionCommands(program2) {
@@ -4048,87 +4565,31 @@ Examples:
 
 // src/index.ts
 init_output();
-
-// src/util/version-check.ts
-var import_node_fs4 = __toESM(require("fs"));
-var import_node_os2 = __toESM(require("os"));
-var import_node_path4 = __toESM(require("path"));
-var PACKAGE_NAME = "@agent-nexus/cli";
-var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
-var FETCH_TIMEOUT_MS = 3e3;
-var CACHE_FILE = import_node_path4.default.join(import_node_os2.default.homedir(), ".nexus-mcp", "version-check.json");
-function loadCache() {
-  try {
-    return JSON.parse(import_node_fs4.default.readFileSync(CACHE_FILE, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function saveCache(cache) {
-  try {
-    const dir = import_node_path4.default.dirname(CACHE_FILE);
-    import_node_fs4.default.mkdirSync(dir, { recursive: true, mode: 448 });
-    import_node_fs4.default.writeFileSync(CACHE_FILE, JSON.stringify(cache), { mode: 384 });
-  } catch {
-  }
-}
-async function fetchLatestVersion() {
-  try {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-    const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, {
-      signal: controller.signal
-    });
-    clearTimeout(timer);
-    if (!res.ok) return null;
-    const json = await res.json();
-    return json.version ?? null;
-  } catch {
-    return null;
-  }
-}
-function compareSemver(a, b) {
-  const pa = a.split(".").map(Number);
-  const pb = b.split(".").map(Number);
-  for (let i = 0; i < 3; i++) {
-    const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
-    if (diff !== 0) return diff < 0 ? -1 : 1;
-  }
-  return 0;
-}
-async function checkForUpdate(currentVersion) {
-  try {
-    const cache = loadCache();
-    if (cache && Date.now() - cache.lastChecked < CHECK_INTERVAL_MS) {
-      if (compareSemver(currentVersion, cache.latestVersion) < 0) {
-        return formatUpdateMessage(currentVersion, cache.latestVersion);
-      }
-      return null;
-    }
-    const latest = await fetchLatestVersion();
-    if (!latest) return null;
-    saveCache({ lastChecked: Date.now(), latestVersion: latest });
-    if (compareSemver(currentVersion, latest) < 0) {
-      return formatUpdateMessage(currentVersion, latest);
-    }
-    return null;
-  } catch {
-    return null;
-  }
-}
-function formatUpdateMessage(current, latest) {
-  return `
-  Update available: ${current} \u2192 ${latest}
-  Run "npm update -g ${PACKAGE_NAME}" to update.
-  IMPORTANT: You MUST update before running any other nexus commands. Results from an outdated CLI may be incorrect.
-`;
-}
-
-// src/index.ts
 var { version: VERSION } = require_package();
-var program = new import_commander.Command().name("nexus").description("Official CLI for the Nexus AI agent platform").version(VERSION, "-v, --version").option("--json", "Output as JSON").option("--api-key <key>", "Override API key for this invocation").option("--base-url <url>", "Override API base URL").hook("preAction", (thisCommand) => {
+var program = new import_commander.Command().name("nexus").description("Official CLI for the Nexus AI agent platform").version(VERSION, "-v, --version").option("--json", "Output as JSON").option("--api-key <key>", "Override API key for this invocation").option("--base-url <url>", "Override API base URL").option("--profile <name>", "Use a specific named profile").option("--no-auto-update", "Disable automatic updates when a new version is detected").hook("preAction", (thisCommand) => {
   const opts = thisCommand.optsWithGlobals();
   if (opts.json) setJsonMode(true);
+  const cmdName = thisCommand.name();
+  const skipBanner = [
+    "auth",
+    "upgrade",
+    "version",
+    "login",
+    "logout",
+    "whoami",
+    "switch",
+    "list",
+    "pin",
+    "unpin",
+    "status"
+  ].includes(cmdName);
+  if (!skipBanner && !isJsonMode()) {
+    try {
+      const resolved = resolveProfile(opts);
+      printContextBanner(resolved);
+    } catch {
+    }
+  }
 });
 program.addHelpText("before", getBanner(VERSION));
 program.configureHelp({
@@ -4156,14 +4617,27 @@ registerExternalToolCommands(program);
 registerPromptAssistantCommands(program);
 registerModelCommands(program);
 registerPhoneNumberCommands(program);
+registerUpgradeCommand(program);
 if (process.argv.length <= 2) {
   program.help();
 }
 program.parseAsync(process.argv).then(async () => {
-  const updateMsg = await checkForUpdate(VERSION);
-  if (updateMsg && !isJsonMode()) {
-    const { color: color2 } = await Promise.resolve().then(() => (init_output(), output_exports));
-    process.stderr.write(color2.yellow(updateMsg));
+  if (isJsonMode()) return;
+  const ranCommand = process.argv[2];
+  if (ranCommand === "upgrade") return;
+  const opts = program.opts();
+  if (opts.autoUpdate) {
+    const msg = await autoUpdate(VERSION);
+    if (msg) {
+      const { color: color2 } = await Promise.resolve().then(() => (init_output(), output_exports));
+      process.stderr.write(color2.green(msg));
+    }
+  } else {
+    const updateMsg = await checkForUpdate(VERSION);
+    if (updateMsg) {
+      const { color: color2 } = await Promise.resolve().then(() => (init_output(), output_exports));
+      process.stderr.write(color2.yellow(updateMsg));
+    }
   }
 }).catch((err) => {
   process.exitCode = handleError(err);