@alexkroman1/aai-cli 13.2.0 → 14.0.0

package/dist/cli.mjs

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { i as installStdoutGuard, n as fail, o as writeLine, r as getOutputMode, t as CliError } from "./_output-CKkmWs7i.mjs";
-import { n as log, o as silenceOutput } from "./_ui-u7T4YooX.mjs";
-import { d as resolveCwd, o as errorMessage$1, s as fileExists, t as AGENT_ENTRY, u as readPackageJson } from "./_utils-B8QmtFhK.mjs";
+import { i as installStdoutGuard, n as fail, o as writeLine, r as getOutputMode, t as CliError } from "./_output-DBP9Op_d.mjs";
+import { n as log, o as silenceOutput } from "./_ui-DCt4qZrk.mjs";
+import { c as fileExists, f as readPackageJson, p as resolveCwd, s as errorMessage$1, t as AGENT_ENTRY } from "./_utils-D5JGcjiW.mjs";
 import { existsSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { isRecord, plural } from "@alexkroman1/aai/utils";
 import { defineCommand, runMain, showUsage } from "citty";
-import { isRecord } from "@alexkroman1/aai/utils";
-//#region _cli-common.ts
+//#region src/_cli-common.ts
 /** Shared arg definitions for citty commands. */
 const sharedArgs = {
 	server: {
@@ -25,6 +25,19 @@ const sharedArgs = {
 		description: "Output JSON (auto-detected in non-TTY)"
 	}
 };
+/**
+* What every PLATFORM command accepts — the pair, as a group to spread.
+*
+* `sharedArgs` supplies the field VALUES, so each of the twelve credentialed
+* commands still restated the shape (`server: sharedArgs.server, json:
+* sharedArgs.json`). A flag all of them should take is then twelve edits, and
+* `assertKnownArgv` refuses the flag on whichever one was missed — after
+* release. `cli-workflow.ts`'s `workflowArgs` is the same pattern for its group.
+*/
+const platformArgs = {
+	server: sharedArgs.server,
+	json: sharedArgs.json
+};
 /** Flags citty handles itself, so no command declares them. */
 const BUILTIN_FLAGS = /* @__PURE__ */ new Set([
 	"help",
@@ -106,31 +119,42 @@ function commandPath(cmd, parent) {
 	return named.startsWith("aai") ? named : `aai ${named}`.trim();
 }
 /**
-* Unknown flags in `argv` for whichever (possibly nested) subcommand it
-* selects — `[]` when everything is declared.
+* Walk the real command tree for `argv` and report everything the pre-parse
+* guards in `cli.ts` need: which command it selects, what that command
+* declares, and whether a token mistyped a subcommand.
 *
-* Walks the real command tree rather than re-listing flags, so this cannot
-* drift from what the commands accept. An unknown SUBCOMMAND is not reported:
-* citty already answers that with usage text and a non-zero exit.
+* ONE walk, because there used to be two — this one and a copy in `cli.ts`,
+* each with its own `Resolvable` narrowing, whose only difference was the
+* terminal action. The copies also had an ORDERING dependency nothing
+* enforced: the flag guard reports nothing for a mistyped subcommand (the
+* flags would be matched against the wrong command's definition), which is
+* only safe because the command guard ran first. Answering both from one
+* result removes the ordering rather than documenting it.
 */
-async function unknownFlagsForArgv(root, argv) {
+async function resolveArgv(root, argv) {
 	let cmd = root;
+	const named = ["aai"];
 	let i = 0;
 	for (; i < argv.length; i++) {
 		const token = argv[i];
 		if (token === void 0 || token.startsWith("-")) break;
 		const subCommands = await resolve(cmd.subCommands);
-		const next = subCommands?.[token];
-		if (next === void 0) {
-			if (subCommands && Object.keys(subCommands).length > 0) return [];
-			break;
-		}
-		const resolved = await resolve(next);
-		if (resolved === void 0) break;
-		cmd = resolved;
+		if (!subCommands || Object.keys(subCommands).length === 0) break;
+		const next = await resolve(subCommands[token]);
+		if (next === void 0) return {
+			named,
+			unknownCommand: token,
+			argsDef: await resolve(cmd.args) ?? {},
+			rest: []
+		};
+		cmd = next;
+		named.push(token);
 	}
-	const argsDef = await resolve(cmd.args) ?? {};
-	return findUnknownFlags(argv.slice(i), argsDef);
+	return {
+		named,
+		argsDef: await resolve(cmd.args) ?? {},
+		rest: argv.slice(i)
+	};
 }
 /** Shared command setup: resolve cwd, optionally require agent.ts. */
 async function setup(opts) {
@@ -238,26 +262,42 @@ function defineExec(spec) {
 	});
 }
 //#endregion
-//#region _resource-commands.ts
+//#region src/_resource-commands.ts
+/**
+* Refuse `aai secret put NAME value` instead of dropping the value.
+*
+* `value` is not a declared positional, and citty drops an undeclared one
+* silently — so the natural guess set the secret to whatever stdin later
+* yielded (usually nothing) and reported no problem, which is the same class
+* of failure as the unknown flag `assertKnownFlags` exists for.
+*
+* REFUSED rather than accepted, deliberately: a value in argv is in the
+* user's shell history and in `ps` output for every process on the machine,
+* and this is the command whose whole subject is a credential. The extra
+* token is NOT echoed back for the same reason.
+*/
+function refuseValueInArgv(positionals) {
+	if (!positionals || positionals.length <= 1) return;
+	throw new CliError("usage", "`aai secret put` takes only the secret NAME — the value is read from stdin.", "Pipe it in: `printf %s \"$VALUE\" | aai secret put NAME`. A value passed as an argument would be left in your shell history and visible in `ps`.");
+}
 const secretPut = defineExec({
 	meta: {
 		name: "put",
-		description: "Create or update a secret"
+		description: "Create or update a secret (value read from stdin, or prompted on a terminal)"
 	},
 	args: {
 		name: {
 			type: "positional",
-			description: "Secret name",
+			description: "Secret name. The VALUE is not an argument — pipe it in (`printf %s \"$VALUE\" | aai secret put NAME`), or be prompted, masked, when stdin is a terminal",
 			required: true
 		},
-		server: sharedArgs.server,
-		json: sharedArgs.json
+		...platformArgs
 	},
 	cwd: "any",
 	async run({ args, mode, cwd }) {
-		const { executeSecretPut, NO_INPUT, readStdin } = await import("./secret-B-3T5tvr.mjs");
-		const value = mode === "json" ? await readStdin() : void 0;
-		if (mode === "json" && !value) throw new CliError(...NO_INPUT);
+		refuseValueInArgv(args._);
+		const { executeSecretPut, resolveSecretValue } = await import("./secret-Cjp912yF.mjs");
+		const value = await resolveSecretValue(args.name, mode);
 		return executeSecretPut(cwd, args.name, value, args.server);
 	}
 });
@@ -272,12 +312,11 @@ const secretDelete = defineExec({
 			description: "Secret name",
 			required: true
 		},
-		server: sharedArgs.server,
-		json: sharedArgs.json
+		...platformArgs
 	},
 	cwd: "any",
 	async run({ args, cwd }) {
-		const { executeSecretDelete } = await import("./secret-B-3T5tvr.mjs");
+		const { executeSecretDelete } = await import("./secret-Cjp912yF.mjs");
 		return executeSecretDelete(cwd, args.name, args.server);
 	}
 });
@@ -286,13 +325,10 @@ const secretList = defineExec({
 		name: "list",
 		description: "List all secrets"
 	},
-	args: {
-		server: sharedArgs.server,
-		json: sharedArgs.json
-	},
+	args: { ...platformArgs },
 	cwd: "any",
 	async run({ args, cwd }) {
-		const { executeSecretList } = await import("./secret-B-3T5tvr.mjs");
+		const { executeSecretList } = await import("./secret-Cjp912yF.mjs");
 		return executeSecretList(cwd, args.server);
 	}
 });
@@ -327,12 +363,11 @@ const logs = defineExec({
 			alias: "f",
 			description: "Keep printing new output"
 		},
-		server: sharedArgs.server,
-		json: sharedArgs.json
+		...platformArgs
 	},
 	cwd: "any",
 	async run({ args, cwd }) {
-		const { executeLogs } = await import("./logs-hWnJ66Bl.mjs");
+		const { executeLogs } = await import("./logs-7BRwq0cG.mjs");
 		return executeLogs(resolveDirArg(cwd, args.dir), {
 			server: args.server,
 			follow: args.follow
@@ -340,7 +375,7 @@ const logs = defineExec({
 	}
 });
 //#endregion
-//#region _studio-commands.ts
+//#region src/_studio-commands.ts
 /**
 * The fast-forward override `push` and `publish` share — `publish` pushes
 * first, so the two must always describe the same thing to the user.
@@ -357,13 +392,10 @@ const list = defineExec({
 		name: "list",
 		description: "List your studio projects"
 	},
-	args: {
-		server: sharedArgs.server,
-		json: sharedArgs.json
-	},
+	args: { ...platformArgs },
 	cwd: "any",
 	async run({ args, cwd }) {
-		const { executeList } = await import("./studio-BxAS_FQQ.mjs");
+		const { executeList } = await import("./studio-CpHlNHUZ.mjs");
 		return executeList({
 			cwd,
 			server: args.server
@@ -391,12 +423,11 @@ const pull = defineExec({
 			alias: "f",
 			description: "Overwrite files in a non-empty directory"
 		},
-		server: sharedArgs.server,
-		json: sharedArgs.json
+		...platformArgs
 	},
 	cwd: "any",
 	async run({ args, cwd }) {
-		const { executePull } = await import("./studio-BxAS_FQQ.mjs");
+		const { executePull } = await import("./studio-CpHlNHUZ.mjs");
 		return executePull({
 			cwd,
 			project: args.project,
@@ -413,12 +444,11 @@ const push = defineExec({
 	},
 	args: {
 		force: forceArg,
-		server: sharedArgs.server,
-		json: sharedArgs.json
+		...platformArgs
 	},
 	cwd: "agent",
 	async run({ args, cwd }) {
-		const { executePush } = await import("./studio-BxAS_FQQ.mjs");
+		const { executePush } = await import("./studio-CpHlNHUZ.mjs");
 		return executePush({
 			cwd,
 			server: args.server,
@@ -433,8 +463,7 @@ const publish = defineExec({
 	},
 	args: {
 		force: forceArg,
-		server: sharedArgs.server,
-		json: sharedArgs.json,
+		...platformArgs,
 		skipTypecheck: {
 			type: "boolean",
 			description: "Skip type checking before publishing"
@@ -442,7 +471,7 @@ const publish = defineExec({
 	},
 	cwd: "agent",
 	async run({ args, cwd }) {
-		const { executePublish } = await import("./studio-BxAS_FQQ.mjs");
+		const { executePublish } = await import("./studio-CpHlNHUZ.mjs");
 		return executePublish({
 			cwd,
 			server: args.server,
@@ -452,7 +481,7 @@ const publish = defineExec({
 	}
 });
 //#endregion
-//#region cli-workflow.ts
+//#region src/cli-workflow.ts
 /**
 * The `aai workflow` subcommand group.
 *
@@ -480,7 +509,7 @@ const workflowToken = {
 * and until this flag existed there was no way to say so: every verb resolved a
 * platform origin plus a PUBLISHED slug, so an undeployed project was told to
 * `aai publish` while the runs it asked about were answering on localhost. A
-* dev server also has no slug segment at all (`createServer` mounts the API on
+* dev server also has no slug segment at all (`createRuntimeServer` mounts the API on
 * the origin), so a different `--server` could not express it either.
 *
 * Separate from `--server` rather than a mode of it, because the two carry
@@ -504,8 +533,7 @@ const runIdArg = {
 * without `--token`.
 */
 const workflowArgs = {
-	server: sharedArgs.server,
-	json: sharedArgs.json,
+	...platformArgs,
 	token: workflowToken,
 	agent: workflowAgent
 };
@@ -515,6 +543,19 @@ const workflowArgs = {
 * never edited still names a deployed agent whose runs are worth asking about.
 */
 const WORKFLOW_CWD = "any";
+/**
+* The group flags, forwarded.
+*
+* The declaration side is DRY (`workflowArgs`) and the forwarding side was not:
+* four hand-copied `{ server, token, agent }` triples, in the module whose own
+* doc argues that "four hand-copied triples is how one of them ends up without
+* `--token`". A fifth group flag is one edit here rather than four below.
+*/
+const workflowOpts = (args) => ({
+	server: args.server,
+	token: args.token,
+	agent: args.agent
+});
 const workflowList = defineExec({
 	meta: {
 		name: "list",
@@ -523,12 +564,8 @@ const workflowList = defineExec({
 	args: workflowArgs,
 	cwd: WORKFLOW_CWD,
 	async run({ args, cwd }) {
-		const { executeWorkflowList } = await import("./workflow-BBu5oEDw.mjs");
-		return executeWorkflowList(cwd, {
-			server: args.server,
-			token: args.token,
-			agent: args.agent
-		});
+		const { executeWorkflowList } = await import("./workflow-CVioyO3V.mjs");
+		return executeWorkflowList(cwd, workflowOpts(args));
 	}
 });
 const workflowRuns = defineExec({
@@ -550,13 +587,11 @@ const workflowRuns = defineExec({
 	},
 	cwd: WORKFLOW_CWD,
 	async run({ args, cwd }) {
-		const { executeWorkflowRuns } = await import("./workflow-BBu5oEDw.mjs");
+		const { executeWorkflowRuns } = await import("./workflow-CVioyO3V.mjs");
 		const limit = args.limit === void 0 ? void 0 : Number(args.limit);
 		if (limit !== void 0 && !Number.isFinite(limit)) throw new CliError("bad_limit", "--limit must be a number");
 		return executeWorkflowRuns(cwd, args.workflow, {
-			server: args.server,
-			token: args.token,
-			agent: args.agent,
+			...workflowOpts(args),
 			limit
 		});
 	}
@@ -572,12 +607,8 @@ const workflowShow = defineExec({
 	},
 	cwd: WORKFLOW_CWD,
 	async run({ args, cwd }) {
-		const { executeWorkflowShow } = await import("./workflow-BBu5oEDw.mjs");
-		return executeWorkflowShow(cwd, args.runId, {
-			server: args.server,
-			token: args.token,
-			agent: args.agent
-		});
+		const { executeWorkflowShow } = await import("./workflow-CVioyO3V.mjs");
+		return executeWorkflowShow(cwd, args.runId, workflowOpts(args));
 	}
 });
 const workflowCancel = defineExec({
@@ -591,12 +622,8 @@ const workflowCancel = defineExec({
 	},
 	cwd: WORKFLOW_CWD,
 	async run({ args, cwd }) {
-		const { executeWorkflowCancel } = await import("./workflow-BBu5oEDw.mjs");
-		return executeWorkflowCancel(cwd, args.runId, {
-			server: args.server,
-			token: args.token,
-			agent: args.agent
-		});
+		const { executeWorkflowCancel } = await import("./workflow-CVioyO3V.mjs");
+		return executeWorkflowCancel(cwd, args.runId, workflowOpts(args));
 	}
 });
 const workflow = defineCommand({
@@ -612,11 +639,11 @@ const workflow = defineCommand({
 	}
 });
 //#endregion
-//#region cli.ts
+//#region src/cli.ts
 const cliDir = path.dirname(fileURLToPath(import.meta.url));
 /**
-* Read this CLI's own version from its package.json (source layout keeps it
-* next to cli.ts; dist layout one level up). A missing or corrupt file must
+* Read this CLI's own version from its package.json (one level up in both the
+* source `src/` layout and the dist layout). A missing or corrupt file must
 * not brick every command over a cosmetic string — warn and fall back.
 */
 function readCliVersion(dir) {
@@ -678,7 +705,7 @@ const init = defineExec({
 	},
 	cwd: "none",
 	async run({ args, mode }) {
-		const { executeInit } = await import("./init-BtJI306C.mjs");
+		const { executeInit } = await import("./init-DukDxECd.mjs");
 		return executeInit({
 			dir: args.dir,
 			force: args.force,
@@ -709,7 +736,7 @@ const dev = defineExec({
 	},
 	cwd: "agent",
 	async run({ args, cwd }) {
-		const { executeDev } = await import("./dev-BDykFvcc.mjs");
+		const { executeDev } = await import("./dev-DApPSaE_.mjs");
 		return executeDev({
 			cwd,
 			port: args.port,
@@ -722,11 +749,17 @@ const test = defineExec({
 		name: "test",
 		description: "Run agent tests"
 	},
-	args: { json: sharedArgs.json },
+	args: {
+		json: sharedArgs.json,
+		all: {
+			type: "boolean",
+			description: "Run every spec in the project, not just agent.test.ts"
+		}
+	},
 	cwd: "agent",
-	async run({ cwd }) {
-		const { executeTest } = await import("./test-CiLab-AA.mjs");
-		return executeTest(cwd);
+	async run({ args, cwd }) {
+		const { executeTest } = await import("./test-D032V2cA.mjs");
+		return executeTest(cwd, { all: args.all === true });
 	}
 });
 const evalCommand = defineExec({
@@ -737,7 +770,7 @@ const evalCommand = defineExec({
 	args: { json: sharedArgs.json },
 	cwd: "agent",
 	async run({ cwd }) {
-		const { executeEval } = await import("./eval-0qEOdm0l.mjs");
+		const { executeEval } = await import("./eval-BK47A_K5.mjs");
 		return executeEval(cwd);
 	}
 });
@@ -759,7 +792,7 @@ const build = defineExec({
 	},
 	cwd: "agent",
 	async run({ args, cwd }) {
-		const { executeBuild } = await import("./build-BLlLOrng.mjs");
+		const { executeBuild } = await import("./build-Mxk8gWvX.mjs");
 		return executeBuild({
 			cwd,
 			skipTests: args.skipTests,
@@ -774,8 +807,7 @@ const deploy = defineExec({
 		hidden: true
 	},
 	args: {
-		server: sharedArgs.server,
-		json: sharedArgs.json,
+		...platformArgs,
 		allowPreviewSlug: {
 			type: "boolean",
 			description: "Permit a `-preview`-suffixed slug (reserved for studio auto-previews; studio-internal — a slug you claim this way is subject to the preview reaper)"
@@ -787,7 +819,7 @@ const deploy = defineExec({
 	},
 	cwd: "agent",
 	async run({ args, cwd }) {
-		const { executeDeploy } = await import("./deploy-BzZ-r4iM.mjs");
+		const { executeDeploy } = await import("./deploy-uAJ4NukN.mjs");
 		return executeDeploy({
 			cwd,
 			server: args.server,
@@ -801,13 +833,10 @@ const del = defineExec({
 		name: "delete",
 		description: "Delete the studio project and its deployed agents"
 	},
-	args: {
-		server: sharedArgs.server,
-		json: sharedArgs.json
-	},
+	args: { ...platformArgs },
 	cwd: "any",
 	async run({ args, cwd }) {
-		const { executeDelete } = await import("./delete-X_CRgCf6.mjs");
+		const { executeDelete } = await import("./delete-BdFnbnVR.mjs");
 		return executeDelete({
 			cwd,
 			server: args.server
@@ -819,13 +848,10 @@ const login = defineExec({
 		name: "login",
 		description: "Link your signed-in browser account and save your API key"
 	},
-	args: {
-		server: sharedArgs.server,
-		json: sharedArgs.json
-	},
+	args: { ...platformArgs },
 	cwd: "none",
 	async run({ args }) {
-		const { executeLogin } = await import("./login-DeUETobb.mjs");
+		const { executeLogin } = await import("./login-DaLrPOFg.mjs");
 		return executeLogin({ server: args.server });
 	}
 });
@@ -837,7 +863,7 @@ const templates = defineExec({
 	args: { json: sharedArgs.json },
 	cwd: "none",
 	async run({ mode }) {
-		const { listTemplates } = await import("./_templates-0Zr2z6yA.mjs");
+		const { listTemplates } = await import("./_templates-CK4oKoeX.mjs");
 		const names = await listTemplates();
 		if (mode === "human") {
 			for (const name of names) log.message(name);
@@ -913,17 +939,17 @@ if (process.env.VITEST !== "true") {
 		await writeLine(`${JSON.stringify(fail("usage", `Invalid arguments for \`${named}\`.`, `Run \`${named} --help\` to see the arguments it accepts.`))}\n`);
 	};
 	/**
-	* Refuse an unrecognized flag instead of ignoring it.
+	* Report a pre-parse failure the way the active output mode allows, then
+	* exit 1.
 	*
-	* citty drops one silently, so `aai push --serverr=http://x` exited 0 having
-	* pushed to the DEFAULT server. `--server` decides where the API key and
-	* secret values go, so a typo that quietly retargets it is worth failing on.
+	* Mode-aware for the same reason `usageForMode` is: JSON mode promises
+	* exactly one result line on stdout, and it is auto-detected on a pipe —
+	* so a clack block here left `aai push --json --serverr=x` emitting a
+	* human error where a script's `jq` expected a result, and no JSON at all.
+	* The guards below run BEFORE citty parses, so neither can lean on
+	* `defineExec`'s mode plumbing.
 	*/
-	const assertKnownFlags = async () => {
-		const unknown = await unknownFlagsForArgv(mainCommand, process.argv.slice(2));
-		if (unknown.length === 0) return;
-		const label = `Unknown ${unknown.length === 1 ? "option" : "options"}: ${unknown.join(", ")}`;
-		const hint = "Run `aai <command> --help` to see the options it accepts.";
+	const reportAndExit = async (label, hint) => {
 		if (getOutputMode({}) === "json") await writeLine(`${JSON.stringify(fail("usage", label, hint))}\n`);
 		else {
 			log.error(label);
@@ -931,7 +957,37 @@ if (process.env.VITEST !== "true") {
 		}
 		process.exit(1);
 	};
-	runDefault().then(assertKnownFlags).then(() => runMain(mainCommand, { showUsage: usageForMode })).catch((err) => {
+	/**
+	* Refuse a mistyped command or an unrecognized flag instead of letting
+	* either through — both read off ONE walk of the command tree.
+	*
+	* An unknown SUBCOMMAND is answered here rather than by citty, which throws
+	* `Unknown command ${cyan(name)}` and writes it with `console.error` —
+	* colour escapes and all, whatever the output mode and whether or not stderr
+	* is a terminal — AFTER `showUsage` has already emitted the result line. So
+	* `aai deploy-now | jq` produced an envelope that named `aai` instead of the
+	* token the user typed, plus an ANSI-studded sentence on stderr that no JSON
+	* consumer asked for. Reported here instead: the envelope names the command,
+	* and nothing colours a pipe.
+	*
+	* An unknown FLAG is refused because citty drops one silently, so
+	* `aai push --serverr=http://x` exited 0 having pushed to the DEFAULT server.
+	* `--server` decides where the API key and secret values go, so a typo that
+	* quietly retargets it is worth failing on.
+	*
+	* The command check comes first because a flag can only be judged against
+	* the right command's `argsDef` — which is why `resolveArgv` reports the two
+	* together instead of leaving the order to this call site.
+	*/
+	const assertKnownArgv = async () => {
+		const { named, unknownCommand, argsDef, rest } = await resolveArgv(mainCommand, process.argv.slice(2));
+		if (unknownCommand !== void 0) await reportAndExit(`Unknown command: ${unknownCommand}`, `Run \`${named.join(" ")} --help\` to see the commands it accepts.`);
+		const unknown = findUnknownFlags(rest, argsDef);
+		if (unknown.length === 0) return;
+		const label = `Unknown ${plural(unknown.length, "option")}: ${unknown.join(", ")}`;
+		await reportAndExit(label, "Run `aai <command> --help` to see the options it accepts.");
+	};
+	runDefault().then(assertKnownArgv).then(() => runMain(mainCommand, { showUsage: usageForMode })).catch((err) => {
 		log.error(errorMessage$1(err));
 		process.exitCode = 1;
 	});

package/dist/{client-bundler-j5c46x0G.mjs → client-bundler-BJgREAh6.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { o as errorMessage$1, s as fileExists } from "./_utils-B8QmtFhK.mjs";
-import { n as withPreservedNodeEnv, t as DEDUPED_PEERS } from "./_vite-env-D9Qj6KPX.mjs";
+import { c as fileExists, s as errorMessage$1 } from "./_utils-D5JGcjiW.mjs";
+import { n as withPreservedNodeEnv, t as DEDUPED_PEERS } from "./_vite-env-kejF0p2L.mjs";
 import { existsSync, unlinkSync, writeFileSync } from "node:fs";
 import path from "node:path";
 import { omitUndefined } from "@alexkroman1/aai/utils";
 import fs from "node:fs/promises";
 import { isTextAssetPath } from "@alexkroman1/aai/internal";
 import { build } from "vite";
-//#region _default-html.ts
+//#region src/_default-html.ts
 /**
 * Default index.html for agents with a custom client.tsx but no index.html.
 * Used by both the dev server (Vite HMR) and the production bundler.
@@ -71,7 +71,7 @@ function writeTempHtml(root) {
 	return cleanup;
 }
 //#endregion
-//#region client-bundler.ts
+//#region src/client-bundler.ts
 const DEFAULT_OUT_DIR = ".aai/client";
 /**
 * Build the client SPA with Vite if `client.tsx` exists.

package/dist/client-bundler.mjs

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { t as buildClient } from "./client-bundler-j5c46x0G.mjs";
+import { t as buildClient } from "./client-bundler-BJgREAh6.mjs";
 export { buildClient };

package/dist/{delete-X_CRgCf6.mjs → delete-BdFnbnVR.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { a as ok } from "./_output-CKkmWs7i.mjs";
-import { n as log } from "./_ui-u7T4YooX.mjs";
-import { l as writeProjectConfig } from "./_config-CmJOFsAP.mjs";
-import { a as resolveDeployTarget, i as requireDeployedSlug } from "./_agent-BTwZJu4P.mjs";
-import { d as apiTestSeam, l as HINT_NOT_DEPLOYED, s as studioProjectApiUrl, u as apiRequest } from "./_studio-B1waXMuR.mjs";
+import { a as ok } from "./_output-DBP9Op_d.mjs";
+import { n as log } from "./_ui-DCt4qZrk.mjs";
+import { l as writeProjectConfig } from "./_config-DYzC6WMD.mjs";
+import { i as requireDeployedSlug, o as resolveDeployTarget } from "./_agent-BzUeqOdj.mjs";
+import { d as apiTestSeam, l as HINT_NOT_DEPLOYED, s as studioProjectApiUrl, u as apiRequest } from "./_studio-DnR_BqFp.mjs";
 import { omitUndefined } from "@alexkroman1/aai/utils";
-//#region delete.ts
+//#region src/delete.ts
 async function runDelete(opts) {
 	await apiRequest(`${opts.url}/${opts.slug}`, {
 		method: "DELETE",

package/dist/{deploy-BzZ-r4iM.mjs → deploy-uAJ4NukN.mjs}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import { a as ok } from "./_output-CKkmWs7i.mjs";
-import { n as log, r as notify, t as fmtUrl } from "./_ui-u7T4YooX.mjs";
-import { o as errorMessage$1 } from "./_utils-B8QmtFhK.mjs";
-import { s as updateProjectConfig } from "./_config-CmJOFsAP.mjs";
-import { i as evalWorkerConfig, t as buildAgentBundle } from "./_bundler-C31rlcYz.mjs";
-import { t as resolveServerEnv } from "./_server-common-6e0QI4mq.mjs";
-import { a as resolveDeployTarget } from "./_agent-BTwZJu4P.mjs";
-import { assertTypechecks } from "./_typecheck-gate-BXvUNnfs.mjs";
-import { n as scanWorkflowDeterminism, t as determinismWarnings } from "./_workflow-determinism-f9J-5Zlj.mjs";
-import { d as apiTestSeam, f as checkedResponse, i as projectNameFromDir, u as apiRequest } from "./_studio-B1waXMuR.mjs";
+import { a as ok } from "./_output-DBP9Op_d.mjs";
+import { n as log, r as notify, t as fmtUrl } from "./_ui-DCt4qZrk.mjs";
+import { s as errorMessage$1 } from "./_utils-D5JGcjiW.mjs";
+import { s as updateProjectConfig } from "./_config-DYzC6WMD.mjs";
+import { i as evalWorkerConfig, t as buildAgentBundle } from "./_bundler-DolUCMxu.mjs";
+import { t as resolveServerEnv } from "./_server-common-vILJp3it.mjs";
+import { o as resolveDeployTarget } from "./_agent-BzUeqOdj.mjs";
+import { assertTypechecks } from "./_typecheck-gate-U3jcil8L.mjs";
+import { n as scanWorkflowDeterminism, t as determinismWarnings } from "./_workflow-determinism-CvpqMpdh.mjs";
+import { d as apiTestSeam, f as checkedResponse, i as projectNameFromDir, u as apiRequest } from "./_studio-DnR_BqFp.mjs";
 import { isRecord, omitUndefined } from "@alexkroman1/aai/utils";
 import { gzipSync } from "node:zlib";
-//#region _deploy.ts
+//#region src/_deploy.ts
 async function runDeploy(opts) {
 	const body = gzipSync(JSON.stringify({
 		...omitUndefined({ slug: opts.slug }),
@@ -36,12 +36,12 @@ async function runDeploy(opts) {
 	return checkedResponse(data, (value) => isRecord(value) && typeof value.slug === "string", `the deploy route at ${opts.url}`);
 }
 //#endregion
-//#region deploy.ts
+//#region src/deploy.ts
 async function executeDeploy(opts) {
 	const { cwd } = opts;
 	const { config: projectConfig, serverUrl, apiKey } = await resolveDeployTarget(cwd, opts.server);
-	if (!opts.skipTypecheck) await assertTypechecks(cwd);
-	const preflightModule = import("./_preflight-Co1G9Jww.mjs");
+	await assertTypechecks(cwd, { skip: opts.skipTypecheck });
+	const preflightModule = import("./_preflight-CcAR577V.mjs");
 	const bundle = await buildAgentBundle(cwd, { minify: true });
 	const slug = projectConfig?.slug ?? projectNameFromDir(cwd) ?? void 0;
 	const uploadEnv = {