@alexkroman1/aai-cli 13.1.0 → 13.3.0

package/bin.mjs

@@ -25,7 +25,7 @@ enableCompileCache();
 // Source wins when present: a checkout that has also been built must keep
 // running `cli.ts`, or `pnpm link --global` would silently serve a stale
 // `dist/` instead of the working tree.
-const source = new URL("./cli.ts", import.meta.url);
+const source = new URL("./src/cli.ts", import.meta.url);
 const entry = existsSync(fileURLToPath(source))
   ? source
   : new URL("./dist/cli.mjs", import.meta.url);

package/dist/{_agent-BTwZJu4P.mjs → _agent-Clbq3a4h.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { a as serverOrigin, i as readProjectConfig, n as ensureApiKey, r as readGlobalConfig, t as approveServer } from "./_config-CmJOFsAP.mjs";
+import { a as serverOrigin, i as readProjectConfig, n as ensureApiKey, r as readGlobalConfig, t as approveServer } from "./_config-ZY2euhdh.mjs";
 import { existsSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { VALID_SLUG_RE } from "@alexkroman1/aai/internal";
-//#region _agent.ts
+//#region src/_agent.ts
 const DEFAULT_SERVER = "https://alexkroman--aai-server-web-server.modal.run";
 const DEFAULT_DEV_SERVER = "http://localhost:8080";
 let _cachedMonorepoRoot;

package/dist/{_bundler-C31rlcYz.mjs → _bundler-DEkjO1d8.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { f as validateAgentExport } from "./_utils-B8QmtFhK.mjs";
-import { t as buildClient } from "./client-bundler-j5c46x0G.mjs";
+import { f as validateAgentExport } from "./_utils-Dhd058D9.mjs";
+import { t as buildClient } from "./client-bundler-CT-_26c5.mjs";
 import { buildWorker } from "./worker-bundler.mjs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { hash } from "node:crypto";
-//#region _bundler.ts
+//#region src/_bundler.ts
 /**
 * Bundle an agent directory: build agent.ts into worker ESM + client files.
 *

package/dist/{_config-CmJOFsAP.mjs → _config-ZY2euhdh.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as CliError } from "./_output-CKkmWs7i.mjs";
-import { c as isEexist, l as readJson, o as errorMessage, p as writeJson } from "./_utils-B8QmtFhK.mjs";
+import { t as CliError } from "./_output-DbJt9gsl.mjs";
+import { c as isEexist, l as readJson, o as errorMessage, p as writeJson } from "./_utils-Dhd058D9.mjs";
 import { mkdtempSync } from "node:fs";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -8,7 +8,7 @@ import { sleep } from "@alexkroman1/aai/internal";
 import { tmpdir } from "node:os";
 import envPaths from "env-paths";
 import { z } from "zod";
-//#region _config.ts
+//#region src/_config.ts
 /**
 * `.aai/project.json` lives in the working tree, so everything in it is
 * untrusted input — a cloned repo can supply any value.
@@ -230,6 +230,8 @@ async function readGlobalConfig(configDir) {
 async function writeGlobalConfig(configDir, data) {
 	await writeJson(path.join(configDir, "config.json"), data, { mode: 384 });
 }
+/** Local-session remedies FIRST — the two that need no account at all. */
+const LOCAL_SESSION_HINT = "Any ONE of these is enough, and the first two need no aai account:\n  1. Put ASSEMBLYAI_API_KEY=<your key> in this project's .env — the same file `aai publish` uploads.\n  2. Or export it in your shell: export ASSEMBLYAI_API_KEY=<your key>\n  3. Or run `aai login`, and `aai dev` will use your account's key.\nGet a key at https://www.assemblyai.com/dashboard.";
 /**
 * The credential every platform command runs on.
 *
@@ -251,9 +253,10 @@ async function writeGlobalConfig(configDir, data) {
 * pointing `AAI_CONFIG_DIR` at a config dir holding a key from an interactive
 * `aai login`.
 */
-async function ensureApiKey(configDir) {
+async function ensureApiKey(configDir, use = "platform") {
 	const config = await readGlobalConfig(configDir ?? getConfigDir());
 	if (config.apiKey) return config.apiKey;
+	if (use === "local-session") throw new CliError("missing_assemblyai_key", "ASSEMBLYAI_API_KEY is not set, and this agent's pipeline needs it to start a session.", LOCAL_SESSION_HINT);
 	throw new CliError("not_logged_in", "You're not logged in.", "Run `aai login` to link your account. Non-interactive setups can point AAI_CONFIG_DIR at a config dir holding a logged-in key.");
 }
 //#endregion

package/dist/_config.d.ts

@@ -73,6 +73,30 @@ export declare function updateGlobalConfig(update: (current: GlobalConfig) => Gl
 export declare function approveServer(url: string, configDir?: string): Promise<void>;
 export declare function readGlobalConfig(configDir?: string): Promise<GlobalConfig>;
 export declare function writeGlobalConfig(configDir: string, data: GlobalConfig): Promise<void>;
+/**
+ * Why the caller wants the key, which is what the FAILURE has to answer.
+ *
+ * One source, two questions. `"platform"` asks "who is this CLI logged in
+ * as?" — for `publish`/`push`/`logs`/`secret` a platform account genuinely IS
+ * the requirement, so the refusal is account-shaped and points at
+ * `aai login`. `"local-session"` is `aai dev` asking for a PROVIDER
+ * credential that the logged-in account merely happens to be able to supply:
+ * `ASSEMBLYAI_API_KEY` in `.env`, or exported in the shell, starts the same
+ * server with no account anywhere (see `resolveAgentEnv` in `_dev-server.ts`,
+ * which reaches here only when neither carries one).
+ *
+ * Answering the second question with the first's sentence is the defect this
+ * parameter exists to fix: `not_logged_in` names only account remedies
+ * (`aai login`, `AAI_CONFIG_DIR`), so `aai dev` read as "local development is
+ * gated on a cloud account" — and most of a twenty-persona DX audit believed
+ * it and abandoned the documented primary feedback loop, which was never
+ * gated at all.
+ *
+ * A PARAMETER rather than a second exported function because the source is
+ * shared: both answers must keep reading the one slot `aai login` writes, and
+ * a sibling function is how the two come to disagree about where a key lives.
+ */
+export type ApiKeyUse = "platform" | "local-session";
 /**
  * The credential every platform command runs on.
  *
@@ -94,5 +118,5 @@ export declare function writeGlobalConfig(configDir: string, data: GlobalConfig)
  * pointing `AAI_CONFIG_DIR` at a config dir holding a key from an interactive
  * `aai login`.
  */
-export declare function ensureApiKey(configDir?: string): Promise<string>;
+export declare function ensureApiKey(configDir?: string, use?: ApiKeyUse): Promise<string>;
 export {};

package/dist/{_dev-server-DWvkNoIS.mjs → _dev-server-C13xuGB1.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { i as outputSilenced, r as notify } from "./_ui-u7T4YooX.mjs";
-import { i as errorCode, o as errorMessage$1 } from "./_utils-B8QmtFhK.mjs";
-import { n as fallbackHtmlPlugin } from "./client-bundler-j5c46x0G.mjs";
-import { t as DEDUPED_PEERS } from "./_vite-env-D9Qj6KPX.mjs";
+import { i as outputSilenced, r as notify } from "./_ui-DCt4qZrk.mjs";
+import { i as errorCode, o as errorMessage$1 } from "./_utils-Dhd058D9.mjs";
+import { n as fallbackHtmlPlugin } from "./client-bundler-CT-_26c5.mjs";
+import { t as DEDUPED_PEERS } from "./_vite-env-kejF0p2L.mjs";
 import { buildWorker } from "./worker-bundler.mjs";
 import { typecheckProject } from "./typecheck.mjs";
-import { n as ensureApiKey } from "./_config-CmJOFsAP.mjs";
-import { n as createWorkerEvaluator } from "./_bundler-C31rlcYz.mjs";
-import { t as resolveServerEnv } from "./_server-common-6e0QI4mq.mjs";
+import { n as ensureApiKey } from "./_config-ZY2euhdh.mjs";
+import { n as createWorkerEvaluator } from "./_bundler-DEkjO1d8.mjs";
+import { t as resolveServerEnv } from "./_server-common-BV4_CrP3.mjs";
 import { existsSync, statSync } from "node:fs";
 import path from "node:path";
 import { omitUndefined } from "@alexkroman1/aai/utils";
@@ -19,7 +19,7 @@ import { defaultClientDir } from "@alexkroman1/aai-ui/client-dir";
 import { watch } from "chokidar";
 import getPort, { portNumbers } from "get-port";
 import pDebounce from "p-debounce";
-//#region _dev-env.ts
+//#region src/_dev-env.ts
 /**
 * The env handed to `createServer` for host-mode connections: provider
 * credentials plus the `AAI_ALLOW_HOST` gate read straight from the shell
@@ -97,7 +97,7 @@ function createDevLogger(silenced) {
 	};
 }
 //#endregion
-//#region _dev-restart.ts
+//#region src/_dev-restart.ts
 /**
 * Restart supervision for `aai dev`.
 *
@@ -230,7 +230,7 @@ function createRestartSupervisor(ops) {
 	};
 }
 //#endregion
-//#region _dev-typecheck.ts
+//#region src/_dev-typecheck.ts
 /**
 * The background typecheck under `aai dev`.
 *
@@ -276,7 +276,7 @@ function createDevTypecheck(cwd, report = notify) {
 	} };
 }
 //#endregion
-//#region _dev-vite-config.ts
+//#region src/_dev-vite-config.ts
 /**
 * The Vite dev server's config for a project with a `client.tsx`.
 *
@@ -468,7 +468,7 @@ function viteDevConfig(cwd, vitePort, backendPort) {
 	};
 }
 //#endregion
-//#region _dev-server.ts
+//#region src/_dev-server.ts
 /**
 * Dev server for directory-based agents.
 *
@@ -507,7 +507,7 @@ async function resolveAgentEnv(root, agentDef) {
 	const env = await resolveServerEnv(root);
 	const required = requiredProviderEnvVars(agentDef);
 	const hasShellKey = Boolean(process.env.ASSEMBLYAI_API_KEY);
-	if (required.includes("ASSEMBLYAI_API_KEY") && !env.ASSEMBLYAI_API_KEY && !hasShellKey) env.ASSEMBLYAI_API_KEY = await ensureApiKey();
+	if (required.includes("ASSEMBLYAI_API_KEY") && !env.ASSEMBLYAI_API_KEY && !hasShellKey) env.ASSEMBLYAI_API_KEY = await ensureApiKey(void 0, "local-session");
 	for (const warning of agentEnvWarnings(agentDef, env)) notify("warn", warning);
 	for (const warning of agentConfigWarnings(agentDef)) notify("warn", warning);
 	return env;

package/dist/_e2e-test-utils.d.ts

@@ -5,22 +5,30 @@
  */
 import { type ChildProcess } from "node:child_process";
 import type { MockRegistry } from "./_mock-registry.ts";
-export declare const dir: string;
+export declare const packageDir: string;
 export declare const packagesDir: string;
 export declare const pm: "pnpm" | "npm" | "yarn";
 export declare function aaiEnv(): NodeJS.ProcessEnv;
 export declare function aai(aaiBin: string, args: string[], cwd: string, timeoutMs?: number): void;
 /**
- * {@link aai}, but CAPTURING — for the cases whose subject is what the CLI
- * SAID rather than that it exited 0.
+ * {@link aai}, but CAPTURING and expecting the CLI to FAIL — for the cases
+ * whose subject is what it SAID on its way to a non-zero exit.
  *
- * Separate rather than a flag, because `stdio: "inherit"` is load-bearing for
- * every other call: an e2e failure's only diagnosis trail is the child's output
- * in the run log, and capturing it by default would take that away.
+ * Capturing is separate from {@link aai} rather than a flag on it, because
+ * `stdio: "inherit"` is load-bearing for every other call: an e2e failure's
+ * only diagnosis trail is the child's output in the run log, and capturing it
+ * by default would take that away.
+ *
+ * The exit code is asserted HERE rather than left to the caller. `execaSync`
+ * throws on a non-zero exit, so the capturing helper this replaced could only
+ * be pointed at commands that succeed — and a `try`/`catch` around it would
+ * pass just as happily on a zero exit, which is the bug the one caller exists
+ * to catch (`aai test` named its unrun specs and exited 0 anyway).
  */
-export declare function aaiOutput(aaiBin: string, args: string[], cwd: string, timeoutMs?: number): {
+export declare function aaiOutputFailing(aaiBin: string, args: string[], cwd: string, timeoutMs?: number): {
     stdout: string;
     stderr: string;
+    exitCode: number;
 };
 /**
  * Build the CLI and return the path to the built binary.

package/dist/{_init-BURbdHNM.mjs → _init-Ci4QGjp8.mjs}

@@ -1,10 +1,25 @@
 #!/usr/bin/env node
-import { c as isEexist, l as readJson, p as writeJson } from "./_utils-B8QmtFhK.mjs";
-import { r as isDevMode, t as getMonorepoRoot } from "./_agent-BTwZJu4P.mjs";
-import { REPO_URL, downloadAndMergeTemplate } from "./_templates-0Zr2z6yA.mjs";
+import { c as isEexist, l as readJson, p as writeJson } from "./_utils-Dhd058D9.mjs";
+import { r as isDevMode, t as getMonorepoRoot } from "./_agent-Clbq3a4h.mjs";
+import { REPO_URL, downloadAndMergeTemplate } from "./_templates-V4l5sZJy.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
-//#region _init.ts
+//#region src/_init.ts
+/**
+* The README every scaffolded project gets, and the first thing a new author
+* reads. Three things in it are corrections rather than prose:
+*
+* - **`npm run dev`, never a bare `aai dev`.** The CLI is a devDependency, so
+*   after `npm install` the binary is in `node_modules/.bin` and NOT on
+*   `PATH`. The old quickstart said `aai dev`, which fails with
+*   `command not found` for everyone who has not installed the CLI globally.
+* - **The key `aai dev` needs is named, with the two LOCAL ways first.** No
+*   step of local development needs a platform account; a twenty-persona DX
+*   audit read the account-shaped failure it used to get and concluded the
+*   opposite, then stopped using the loop this file documents.
+* - **`aai login` appears where it is actually required.** It was in no
+*   user-facing doc at all, while the quickstart's own publish step needs it.
+*/
 function readmeContent(slug) {
 	return `# ${slug}
 
@@ -14,8 +29,41 @@ A voice agent built with [aai](${REPO_URL}).
 
 \`\`\`sh
 npm install        # Install dependencies
-aai dev            # Run locally (opens browser)
-aai publish        # Publish to production (and sync to the studio)
+npm run dev        # Run locally on http://localhost:3000 (opens browser)
+\`\`\`
+
+The \`aai\` CLI is a devDependency of this project, so it lives in
+\`node_modules/.bin\` rather than on your \`PATH\`. Run it through npm
+(\`npm run dev\`, \`npm test\`, \`npm run build\`) or with \`npx aai <command>\`.
+
+### The one key local development needs
+
+The default pipeline (speech-to-text → LLM → text-to-speech) runs on a single
+AssemblyAI key. **Any one of these is enough, and the first two need no aai
+account** — nothing about running this agent locally is gated on one:
+
+1. Put \`ASSEMBLYAI_API_KEY=<your key>\` in \`.env\` (this project's \`.env.example\`
+   documents it, and it is the same file \`aai publish\` uploads as secrets).
+2. Or export it in your shell: \`export ASSEMBLYAI_API_KEY=<your key>\`.
+3. Or run \`npx aai login\`, and \`aai dev\` will use your account's key.
+
+Get a key at <https://www.assemblyai.com/dashboard>.
+
+## Publishing
+
+Publishing (and the studio it syncs to) is the one part that does need an
+account:
+
+\`\`\`sh
+npx aai login          # Link your account — once per machine
+npm run publish:agent  # Publish to production (and sync to the studio)
+\`\`\`
+
+You can also run this agent as a plain Node server, with no aai account and
+nothing managed:
+
+\`\`\`sh
+npm start              # Builds, then serves on http://127.0.0.1:3000
 \`\`\`
 
 ## Secrets
@@ -32,9 +80,9 @@ MY_API_KEY=secret-value
 **Production** — set secrets on the server:
 
 \`\`\`sh
-aai secret put MY_KEY    # Set a secret (prompts for value)
-aai secret list          # List secret names
-aai secret delete MY_KEY # Remove a secret
+npx aai secret put MY_KEY    # Set a secret (prompts for value)
+npx aai secret list          # List secret names
+npx aai secret delete MY_KEY # Remove a secret
 \`\`\`
 
 `;
@@ -134,7 +182,7 @@ async function pinSharedDeps(targetDir, packagesDir, pkgJson) {
 		return;
 	}
 	const block = [...pins].sort(([a], [b]) => compareNames(a, b)).map(([name, version]) => `  "${name}": "${version}"`).join("\n");
-	await fs.writeFile(file, `${existing.trimEnd()}\n\n# Added by \`aai init\` in DEV MODE only — see pinSharedDeps in\n# packages/aai-cli/_init.ts. The @alexkroman1/* packages above are LINKED to
+	await fs.writeFile(file, `${existing.trimEnd()}\n\n# Added by \`aai init\` in DEV MODE only — see pinSharedDeps in\n# packages/aai-cli/src/_init.ts. The @alexkroman1/* packages above are LINKED to
 # this checkout, so anything they and this project both depend on has to be
 # ONE copy: two copies of xstate are two incompatible sets of types, and the
 # typecheck gate refuses the deploy.\noverrides:\n${block}\n`);

package/dist/{_output-CKkmWs7i.mjs → _output-DbJt9gsl.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-//#region _output.ts
+//#region src/_output.ts
 /**
 * Determine output mode from CLI flags and TTY state.
 *
@@ -11,7 +11,37 @@ function getOutputMode(args, isTTY = Boolean(process.stdout.isTTY)) {
 	return isTTY ? "human" : "json";
 }
 /**
-* Write a line to stdout, resolving only once it has been flushed.
+* A CSI sequence — `ESC [ params intermediates final` — which covers every SGR
+* colour pair a diagnostic can arrive wearing (`\u001B[31m` … `\u001B[0m`,
+* `\u001B[38;5;246m`) as well as cursor moves.
+*/
+const ANSI_RAW = new RegExp(`${String.fromCharCode(27)}\\[[0-?]*[ -/]*[@-~]`, "g");
+/**
+* The same sequence AFTER `JSON.stringify`, which escapes the ESC byte as the
+* six characters `\u001b`. Both forms are needed because a caller stringifies
+* a whole result and hands the line here — see {@link writeLine}.
+*/
+const ANSI_JSON = /\\u001[bB]\[[0-?]*[ -/]*[@-~]/g;
+/**
+* Remove ANSI escape sequences, in raw or JSON-escaped form.
+*
+* A bundler colours its own diagnostics unconditionally, so `aai build`'s
+* failure reached the JSON envelope as per-character SGR pairs
+* (`[38;5;246m1 │[0m [38;5;249mi[0m[38;5;249mm[0m…`) — illegible in a CI log
+* and meaningless to a `jq` consumer, which is the audience JSON mode has.
+*/
+function stripAnsi(text) {
+	return text.replace(ANSI_RAW, "").replace(ANSI_JSON, "");
+}
+/**
+* Write a machine-readable line to stdout, resolving only once it has been
+* flushed.
+*
+* ANSI escapes are stripped on the way out. This function carries JSON mode's
+* one result line and nothing else — human output goes through `log.*` in
+* `_ui.ts`, which is where colour belongs — so stripping here is what keeps
+* the envelope clean no matter which module built the string inside it, and
+* leaves a TTY's coloured diagnostic intact.
 *
 * Resolves (never rejects) even when the write fails: the common failure is
 * EPIPE — the consumer closed the pipe (`aai … --json | head -1`) — and there
@@ -19,8 +49,9 @@ function getOutputMode(args, isTTY = Boolean(process.stdout.isTTY)) {
 * Stream-level `'error'` events are handled by {@link installStdoutGuard}.
 */
 function writeLine(line) {
+	const clean = stripAnsi(line);
 	return new Promise((resolve) => {
-		process.stdout.write(line, () => resolve());
+		process.stdout.write(clean, () => resolve());
 	});
 }
 /**

package/dist/_output.d.ts

@@ -23,7 +23,23 @@ export declare function getOutputMode(args: {
     json?: boolean | undefined;
 }, isTTY?: boolean): OutputMode;
 /**
- * Write a line to stdout, resolving only once it has been flushed.
+ * Remove ANSI escape sequences, in raw or JSON-escaped form.
+ *
+ * A bundler colours its own diagnostics unconditionally, so `aai build`'s
+ * failure reached the JSON envelope as per-character SGR pairs
+ * (`[38;5;246m1 │[0m [38;5;249mi[0m[38;5;249mm[0m…`) — illegible in a CI log
+ * and meaningless to a `jq` consumer, which is the audience JSON mode has.
+ */
+export declare function stripAnsi(text: string): string;
+/**
+ * Write a machine-readable line to stdout, resolving only once it has been
+ * flushed.
+ *
+ * ANSI escapes are stripped on the way out. This function carries JSON mode's
+ * one result line and nothing else — human output goes through `log.*` in
+ * `_ui.ts`, which is where colour belongs — so stripping here is what keeps
+ * the envelope clean no matter which module built the string inside it, and
+ * leaves a TTY's coloured diagnostic intact.
  *
  * Resolves (never rejects) even when the write fails: the common failure is
  * EPIPE — the consumer closed the pipe (`aai … --json | head -1`) — and there

package/dist/{_preflight-Co1G9Jww.mjs → _preflight-B2laWPdU.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { requiredProviderEnvVars } from "@alexkroman1/aai-runtime";
-//#region _preflight.ts
+//#region src/_preflight.ts
 /**
 * The deploy-time credential preflight — the classic dev/prod failure, caught
 * before the upload instead of at the deployed agent's first session.

package/dist/{_server-common-6e0QI4mq.mjs → _server-common-BV4_CrP3.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { i as errorCode } from "./_utils-B8QmtFhK.mjs";
+import { i as errorCode } from "./_utils-Dhd058D9.mjs";
 import path from "node:path";
 import { parseEnv } from "node:util";
 import fs from "node:fs/promises";
-//#region _server-common.ts
+//#region src/_server-common.ts
 /**
 * Build the `ctx.env` record that agent tools will see at runtime.
 *
@@ -35,7 +35,7 @@ async function resolveServerEnv(cwd, baseEnv) {
 	const env = {};
 	for (const [key, fileVal] of Object.entries(fileEntries)) {
 		const val = source[key] ?? fileVal;
-		if (val !== void 0) env[key] = val;
+		if (val !== void 0 && val !== "") env[key] = val;
 	}
 	return env;
 }

package/dist/{_slug-api-CfGQq1Tt.mjs → _slug-api-DlKpj91X.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { n as getServerInfo } from "./_agent-BTwZJu4P.mjs";
-import { l as HINT_NOT_DEPLOYED, s as studioProjectApiUrl, u as apiRequest } from "./_studio-B1waXMuR.mjs";
-//#region _slug-api.ts
+import { n as getServerInfo } from "./_agent-Clbq3a4h.mjs";
+import { l as HINT_NOT_DEPLOYED, s as studioProjectApiUrl, u as apiRequest } from "./_studio-DTi3EdXQ.mjs";
+//#region src/_slug-api.ts
 /**
 * Authenticated request against a deployed agent's slug-scoped resource
 * (`${serverUrl}/${slug}${resourcePath}`) — the one shape every per-agent

package/dist/{_studio-B1waXMuR.mjs → _studio-DTi3EdXQ.mjs}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import { t as CliError } from "./_output-CKkmWs7i.mjs";
+import { t as CliError } from "./_output-DbJt9gsl.mjs";
 import path from "node:path";
 import { isRecord, omitUndefined } from "@alexkroman1/aai/utils";
 import { MAX_SLUG_LENGTH, PREVIEW_SLUG_SUFFIX, VALID_SLUG_RE } from "@alexkroman1/aai/internal";
 import { isLocalOnlyFile, snapshotWorkspaceFiles } from "@alexkroman1/aai/workspace-files";
 import { FetchError, ofetch } from "ofetch";
 import { slugifyName } from "@alexkroman1/aai/slugify";
-//#region _api-client.ts
+//#region src/_api-client.ts
 /**
 * Shared HTTP helper for platform API calls (deploy, delete, secrets).
 *
@@ -143,7 +143,7 @@ function toApiError(err, url, opts) {
 	return new Error(`${opts.action} failed: could not reach ${url}\n  ${hint}`, { cause });
 }
 //#endregion
-//#region _studio.ts
+//#region src/_studio.ts
 /**
 * Internals of the studio-workspace commands (`aai list/pull/push/publish`):
 * the local source-file walk and the thin clients for the platform's

package/dist/{_templates-0Zr2z6yA.mjs → _templates-V4l5sZJy.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { o as errorMessage$1 } from "./_utils-B8QmtFhK.mjs";
-import { t as getMonorepoRoot } from "./_agent-BTwZJu4P.mjs";
+import { o as errorMessage$1 } from "./_utils-Dhd058D9.mjs";
+import { t as getMonorepoRoot } from "./_agent-Clbq3a4h.mjs";
 import { existsSync } from "node:fs";
 import path from "node:path";
 import { isRecord } from "@alexkroman1/aai/utils";

package/dist/{_typecheck-gate-BXvUNnfs.mjs → _typecheck-gate-sV4N5F93.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { t as CliError } from "./_output-CKkmWs7i.mjs";
-import { n as log } from "./_ui-u7T4YooX.mjs";
+import { t as CliError } from "./_output-DbJt9gsl.mjs";
+import { n as log } from "./_ui-DCt4qZrk.mjs";
 import { typecheckProject } from "./typecheck.mjs";
-//#region _typecheck-gate.ts
+//#region src/_typecheck-gate.ts
 /**
 * The build/deploy typecheck gate: run the project's own `tsc --noEmit`
 * (see `typecheck.ts`) and turn a failure into a structured CliError. The

package/dist/{_ui-u7T4YooX.mjs → _ui-DCt4qZrk.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { styleText } from "node:util";
 import * as p from "@clack/prompts";
-//#region _ui.ts
+//#region src/_ui.ts
 const noop = () => {};
 let silenced = false;
 /** Log instance that delegates to clack (human mode) or no-ops (JSON mode). */

package/dist/{_utils-B8QmtFhK.mjs → _utils-Dhd058D9.mjs}

@@ -3,7 +3,7 @@ import { readFileSync } from "node:fs";
 import path from "node:path";
 import { errorDetail, errorMessage, errorMessage as errorMessage$1, omitUndefined } from "@alexkroman1/aai/utils";
 import fs from "node:fs/promises";
-//#region _utils.ts
+//#region src/_utils.ts
 /**
 * The file that marks a directory as an agent project — the single source
 * for the entry filename every command checks or scaffolds.

package/dist/{_vite-env-D9Qj6KPX.mjs → _vite-env-kejF0p2L.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-//#region _vite-env.ts
+//#region src/_vite-env.ts
 /**
 * Packages resolved from the project root rather than from whichever
 * `node_modules` happens to sit above the importing file.

package/dist/{_workflow-determinism-f9J-5Zlj.mjs → _workflow-determinism-C9l8uC2R.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import path from "node:path";
 import { readFile, readdir } from "node:fs/promises";
-//#region _workflow-determinism.ts
+//#region src/_workflow-determinism.ts
 /**
 * A COMPUTED step identity in the project's own `workflows/`.
 *

package/dist/{build-BLlLOrng.mjs → build-CWyFGe-W.mjs}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-import { a as ok, t as CliError } from "./_output-CKkmWs7i.mjs";
-import { n as log, r as notify } from "./_ui-u7T4YooX.mjs";
-import { r as evalWorkerBundle, t as buildAgentBundle } from "./_bundler-C31rlcYz.mjs";
-import { assertTypechecks } from "./_typecheck-gate-BXvUNnfs.mjs";
-import { n as scanWorkflowDeterminism, t as determinismWarnings } from "./_workflow-determinism-f9J-5Zlj.mjs";
-import { classifyVitestError, runVitest } from "./test-CiLab-AA.mjs";
+import { a as ok, t as CliError } from "./_output-DbJt9gsl.mjs";
+import { n as log, r as notify } from "./_ui-DCt4qZrk.mjs";
+import { r as evalWorkerBundle, t as buildAgentBundle } from "./_bundler-DEkjO1d8.mjs";
+import { assertTypechecks } from "./_typecheck-gate-sV4N5F93.mjs";
+import { n as scanWorkflowDeterminism, t as determinismWarnings } from "./_workflow-determinism-C9l8uC2R.mjs";
+import { TEST_FILES, classifyVitestError, runVitest } from "./test-guenJUxi.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { agentConfigWarnings } from "@alexkroman1/aai/manifest";
-//#region build.ts
+//#region src/build.ts
 /**
 * `aai build` — bundle the agent without deploying, behind the same gates
 * deploy runs (tests, then typecheck), so the command previews the deploy
@@ -43,7 +43,10 @@ function testGateError(err) {
 async function executeBuild(opts) {
 	const { cwd } = opts;
 	if (!opts.skipTests) try {
-		runVitest(cwd);
+		runVitest(cwd, {
+			candidates: TEST_FILES,
+			all: true
+		});
 	} catch (err) {
 		throw testGateError(err);
 	}

package/dist/cli.d.ts

@@ -1 +1,2 @@
-export declare const mainCommand: import("citty").CommandDef<import("citty").ArgsDef>;
+import { type ArgsDef, type CommandDef } from "citty";
+export declare const mainCommand: CommandDef<ArgsDef>;