@apso/cli 0.15.1 → 0.15.3

package/dist/commands/mcp/serve.js

@@ -732,13 +732,11 @@ class McpServe extends base_command_1.default {
                         ],
                     };
                 }
-                // File the issue
-                const { execSync } = await Promise.resolve().then(() => tslib_1.__importStar(require("child_process")));
-                const url = execSync(`gh issue create --repo apsoai/cli --title "${title.replace(/"/g, '\\"')}" --body-file -`, {
-                    input: body,
-                    encoding: "utf-8",
-                    timeout: 30000,
-                }).trim();
+                // File the issue. fileIssue passes the title as a discrete argv
+                // element and the body via a temp file (execFile, shell: false), so
+                // backticks / $() / quotes in user-supplied content are never
+                // shell-evaluated (no command injection).
+                const url = (0, runner_1.fileIssue)(title, body);
                 return {
                     content: [
                         {

package/dist/lib/doctor/runner.d.ts

@@ -14,6 +14,14 @@ export declare function formatFindings(findings: DiagnosticFinding[]): string;
  * Check if the GitHub CLI is installed and authenticated.
  */
 export declare function isGhAvailable(): boolean;
+/**
+ * Build the argv array for `gh issue list --search`.
+ *
+ * Pure function (no side effects) so it can be unit-tested. The search query
+ * is returned as its own array element and is NEVER concatenated into a shell
+ * string, so backticks / quotes / `$()` in the title are treated literally.
+ */
+export declare function buildIssueSearchArgs(title: string): string[];
 /**
  * Search for existing issues that might duplicate what we're about to file.
  */
@@ -22,6 +30,27 @@ export declare function searchExistingIssues(title: string): {
     title: string;
     url: string;
 }[];
+/**
+ * Build the argv array for `gh issue create`.
+ *
+ * Pure function (no side effects) so it can be unit-tested. The title is
+ * returned as its own array element directly after `--title` and the body is
+ * passed via `--body-file <path>`. Nothing is concatenated into a shell string,
+ * so backticks / `$()` / quotes / newlines in the title are passed literally
+ * (no command substitution, no injection).
+ */
+export declare function buildIssueCreateArgs(title: string, bodyFilePath: string): string[];
+/**
+ * File a GitHub issue with an arbitrary title and body.
+ *
+ * The body is written to a temp file and passed via `--body-file`, and the
+ * title is passed as a discrete argv element via execFile (shell: false). The
+ * child's stdin is explicitly not inherited from the parent so it cannot
+ * consume / blank the body.
+ *
+ * Returns the URL of the created issue.
+ */
+export declare function fileIssue(title: string, body: string): string;
 /**
  * Build and file a GitHub issue from diagnostic findings.
  * Returns the URL of the created issue.

package/dist/lib/doctor/runner.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.fileGitHubIssue = exports.searchExistingIssues = exports.isGhAvailable = exports.formatFindings = exports.runDiagnostics = void 0;
+exports.fileGitHubIssue = exports.fileIssue = exports.buildIssueCreateArgs = exports.searchExistingIssues = exports.buildIssueSearchArgs = exports.isGhAvailable = exports.formatFindings = exports.runDiagnostics = void 0;
 const tslib_1 = require("tslib");
 const child_process_1 = require("child_process");
+const fs = tslib_1.__importStar(require("fs"));
 const os = tslib_1.__importStar(require("os"));
+const path = tslib_1.__importStar(require("path"));
 const checks_1 = require("./checks");
 /**
  * Run all diagnostic checks and return aggregated findings.
@@ -74,7 +76,8 @@ function formatFinding(f) {
  */
 function isGhAvailable() {
     try {
-        (0, child_process_1.execSync)("gh auth status", { stdio: "ignore" });
+        // execFile (shell: false) — no shell interpretation of arguments.
+        (0, child_process_1.execFileSync)("gh", ["auth", "status"], { stdio: "ignore" });
         return true;
     }
     catch {
@@ -82,14 +85,47 @@ function isGhAvailable() {
     }
 }
 exports.isGhAvailable = isGhAvailable;
+/**
+ * The GitHub repository issues are filed against.
+ */
+const ISSUE_REPO = "apsoai/cli";
+/**
+ * Build the argv array for `gh issue list --search`.
+ *
+ * Pure function (no side effects) so it can be unit-tested. The search query
+ * is returned as its own array element and is NEVER concatenated into a shell
+ * string, so backticks / quotes / `$()` in the title are treated literally.
+ */
+function buildIssueSearchArgs(title) {
+    // Extract key terms from the title for search (passed as a single argv arg).
+    const searchQuery = title.slice(0, 100);
+    return [
+        "issue",
+        "list",
+        "--repo",
+        ISSUE_REPO,
+        "--search",
+        searchQuery,
+        "--state",
+        "open",
+        "--json",
+        "number,title,url",
+        "--limit",
+        "5",
+    ];
+}
+exports.buildIssueSearchArgs = buildIssueSearchArgs;
 /**
  * Search for existing issues that might duplicate what we're about to file.
  */
 function searchExistingIssues(title) {
     try {
-        // Extract key terms from the title for search
-        const searchQuery = title.slice(0, 100);
-        const result = (0, child_process_1.execSync)(`gh issue list --repo apsoai/cli --search "${searchQuery.replace(/"/g, '\\"')}" --state open --json number,title,url --limit 5`, { encoding: "utf-8", timeout: 15000 });
+        // execFile with an args array (shell: false). The title is passed as a
+        // distinct argv element, so it is never shell-evaluated.
+        const result = (0, child_process_1.execFileSync)("gh", buildIssueSearchArgs(title), {
+            encoding: "utf-8",
+            timeout: 15000,
+        });
         return JSON.parse(result);
     }
     catch {
@@ -97,6 +133,56 @@ function searchExistingIssues(title) {
     }
 }
 exports.searchExistingIssues = searchExistingIssues;
+/**
+ * Build the argv array for `gh issue create`.
+ *
+ * Pure function (no side effects) so it can be unit-tested. The title is
+ * returned as its own array element directly after `--title` and the body is
+ * passed via `--body-file <path>`. Nothing is concatenated into a shell string,
+ * so backticks / `$()` / quotes / newlines in the title are passed literally
+ * (no command substitution, no injection).
+ */
+function buildIssueCreateArgs(title, bodyFilePath) {
+    return [
+        "issue",
+        "create",
+        "--repo",
+        ISSUE_REPO,
+        "--title",
+        title,
+        "--body-file",
+        bodyFilePath,
+    ];
+}
+exports.buildIssueCreateArgs = buildIssueCreateArgs;
+/**
+ * File a GitHub issue with an arbitrary title and body.
+ *
+ * The body is written to a temp file and passed via `--body-file`, and the
+ * title is passed as a discrete argv element via execFile (shell: false). The
+ * child's stdin is explicitly not inherited from the parent so it cannot
+ * consume / blank the body.
+ *
+ * Returns the URL of the created issue.
+ */
+function fileIssue(title, body) {
+    const bodyFilePath = path.join(fs.mkdtempSync(path.join(os.tmpdir(), "apso-issue-")), "body.md");
+    try {
+        fs.writeFileSync(bodyFilePath, body, "utf-8");
+        const result = (0, child_process_1.execFileSync)("gh", buildIssueCreateArgs(title, bodyFilePath), {
+            encoding: "utf-8",
+            timeout: 30000,
+            // Do not pipe the parent's stdin into the child (the body is supplied via
+            // file). stdout/stderr are captured by execFileSync.
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        return result.trim();
+    }
+    finally {
+        fs.rmSync(path.dirname(bodyFilePath), { recursive: true, force: true });
+    }
+}
+exports.fileIssue = fileIssue;
 /**
  * Build and file a GitHub issue from diagnostic findings.
  * Returns the URL of the created issue.
@@ -105,12 +191,7 @@ function fileGitHubIssue(findings, ctx) {
     const pkg = loadCliVersion();
     const title = buildIssueTitle(findings);
     const body = buildIssueBody(findings, ctx, pkg);
-    const result = (0, child_process_1.execSync)(`gh issue create --repo apsoai/cli --title "${title.replace(/"/g, '\\"')}" --body-file -`, {
-        input: body,
-        encoding: "utf-8",
-        timeout: 30000,
-    });
-    return result.trim();
+    return fileIssue(title, body);
 }
 exports.fileGitHubIssue = fileGitHubIssue;
 function loadCliVersion() {

package/dist/lib/templates/entities/entity-col-boolean.eta

@@ -3,7 +3,7 @@
 @IsOptional({ groups: [CREATE, UPDATE] })
 @IsBoolean({ always: true })
 
-@Column({ type: 'boolean', default: <%= Boolean(field.default) || false %> })
+@Column({ type: 'boolean', nullable: <%= Boolean(field.nullable) %>, default: <%= Boolean(field.default) || false %> })
 <% if (field.index ) {%>
 @Index()
 <% } %>

package/dist/lib/templates/entities/entity-col-bytea.eta

@@ -1,6 +1,6 @@
 <% const {field} = it; %>
 
-@Column({ "type": "bytea"<% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
+@Column({ "type": "bytea", nullable: <%= Boolean(field.nullable) %><% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
 <% if (field.index ) {%>
 @Index()
 <% } %>

package/dist/lib/templates/entities/entity-col-enum.eta

@@ -2,8 +2,9 @@
 
 @Column({
     type: 'enum',
-    enum: enums.<%= field.dataType%>,
-    default: enums.<%= field.dataType%>.<%= field.default.toLowerCase().replace(/[^a-z0-9]/g, '_').replace(/^(\d)/, '_$1').replace(/_+/g, '_').replace(/_$/, '') %>
+    nullable: <%= Boolean(field.nullable) %>,
+    enum: enums.<%= field.dataType%><% if (field.default !== null) { %>,
+    default: enums.<%= field.dataType%>.<%= field.default.toLowerCase().replace(/[^a-z0-9]/g, '_').replace(/^(\d)/, '_$1').replace(/_+/g, '_').replace(/_$/, '') %><% } %>
 })
 <% if (field.index ) {%>
 @Index()

package/dist/lib/templates/entities/entity-col-interval.eta

@@ -1,6 +1,6 @@
 <% const {field} = it; %>
 
-@Column({ "type": "interval"<% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
+@Column({ "type": "interval", nullable: <%= Boolean(field.nullable) %><% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
 <% if (field.index ) {%>
 @Index()
 <% } %>

package/dist/lib/templates/entities/entity-col-time.eta

@@ -1,6 +1,6 @@
 <% const {field} = it; %>
 
-@Column({ "type": "time"<% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
+@Column({ "type": "time", nullable: <%= Boolean(field.nullable) %><% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
 <% if (field.index ) {%>
 @Index()
 <% } %>

package/dist/lib/templates/entities/entity-col-timetz.eta

@@ -1,6 +1,6 @@
 <% const {field} = it; %>
 
-@Column({ "type": "timetz"<% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
+@Column({ "type": "timetz", nullable: <%= Boolean(field.nullable) %><% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
 <% if (field.index ) {%>
 @Index()
 <% } %>

package/dist/lib/templates/entities/entity-col-uuid.eta

@@ -3,7 +3,7 @@
 <% if (field.primary ) {%>
 @PrimaryGeneratedColumn('uuid')
 <% } else { %>
-@Column({ "type": "uuid"<% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
+@Column({ "type": "uuid", nullable: <%= Boolean(field.nullable) %><% if (field.default !== null) {%>, default:  <%= field.default %><% } %> })
 <% if (field.index ) {%>
 @Index()
 <% } %>

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@apso/cli",
-  "version": "0.15.1",
+  "version": "0.15.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@apso/cli",
-      "version": "0.15.1",
+      "version": "0.15.3",
       "license": "Apache-2.0",
       "dependencies": {
         "@electric-sql/pglite": "^0.2.17",
@@ -14,6 +14,7 @@
         "@oclif/core": "^2",
         "@oclif/plugin-help": "^5",
         "@oclif/plugin-plugins": "^3",
+        "@oclif/plugin-warn-if-update-available": "^2.1.1",
         "debug": "^4.3.4",
         "eta": "^2.0.0",
         "inquirer": "^8.2.7",
@@ -1752,9 +1753,10 @@
       }
     },
     "node_modules/@oclif/core": {
-      "version": "2.11.10",
-      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-2.11.10.tgz",
-      "integrity": "sha512-/7Umij3OU++6o+z4U+waJ5nP6IvK9KKEVzz+xsla68YoECLQwz43boUKqYizlNMtTfiwNkiYb5QE+OU/q5qEtA==",
+      "version": "2.16.0",
+      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-2.16.0.tgz",
+      "integrity": "sha512-dL6atBH0zCZl1A1IXCKJgLPrM/wR7K+Wi401E/IvqsK8m2iCHW+0TEOGrans/cuN3oTW+uxIyJFHJ8Im0k4qBw==",
+      "license": "MIT",
       "dependencies": {
         "@types/cli-progress": "^3.11.0",
         "ansi-escapes": "^4.3.2",
@@ -1765,7 +1767,6 @@
         "cli-progress": "^3.12.0",
         "debug": "^4.3.4",
         "ejs": "^3.1.8",
-        "fs-extra": "^9.1.0",
         "get-package-type": "^0.1.0",
         "globby": "^11.1.0",
         "hyperlinker": "^1.0.0",
@@ -1775,7 +1776,6 @@
         "natural-orderby": "^2.0.3",
         "object-treeify": "^1.1.33",
         "password-prompt": "^1.1.2",
-        "semver": "^7.5.3",
         "slice-ansi": "^4.0.0",
         "string-width": "^4.2.3",
         "strip-ansi": "^6.0.1",
@@ -1841,18 +1841,17 @@
       }
     },
     "node_modules/@oclif/plugin-warn-if-update-available": {
-      "version": "2.0.37",
-      "resolved": "https://registry.npmjs.org/@oclif/plugin-warn-if-update-available/-/plugin-warn-if-update-available-2.0.37.tgz",
-      "integrity": "sha512-rfDNvplwgiwV+QSV4JU96ypmWgNJ6Hk5FEAEAKzqF0v0J8AHwZGpwwYO/MCZSkbc7bfYpkqLx/sxjpMO6j6PmQ==",
-      "dev": true,
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@oclif/plugin-warn-if-update-available/-/plugin-warn-if-update-available-2.1.1.tgz",
+      "integrity": "sha512-y7eSzT6R5bmTIJbiMMXgOlbBpcWXGlVhNeQJBLBCCy1+90Wbjyqf6uvY0i2WcO4sh/THTJ20qCW80j3XUlgDTA==",
+      "license": "MIT",
       "dependencies": {
-        "@oclif/core": "^2.8.2",
+        "@oclif/core": "^2.15.0",
         "chalk": "^4.1.0",
         "debug": "^4.1.0",
-        "fs-extra": "^9.0.1",
         "http-call": "^5.2.2",
-        "lodash": "^4.17.21",
-        "semver": "^7.5.1"
+        "lodash.template": "^4.5.0",
+        "semver": "^7.5.4"
       },
       "engines": {
         "node": ">=12.0.0"
@@ -8334,6 +8333,12 @@
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
+    "node_modules/lodash._reinterpolate": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz",
+      "integrity": "sha512-xYHt68QRoYGjeeM/XOE1uJtvXQAgvszfBhjV4yvsQH0u2i9I6cI6c6/eG4Hh3UAOVn0y/xAXwmTzEay49Q//HA==",
+      "license": "MIT"
+    },
     "node_modules/lodash.memoize": {
       "version": "4.1.2",
       "resolved": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-4.1.2.tgz",
@@ -8346,6 +8351,26 @@
       "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==",
       "dev": true
     },
+    "node_modules/lodash.template": {
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash.template/-/lodash.template-4.18.1.tgz",
+      "integrity": "sha512-5urZrLnV/VD6zHK5KsVtZgt7H19v51mIzoS0aBNH8yp3I8tbswrEjOABOPY8m8uB7NuibubLrMX+Y0PXsU9X+w==",
+      "deprecated": "This package is deprecated. Use https://socket.dev/npm/package/eta instead.",
+      "license": "MIT",
+      "dependencies": {
+        "lodash._reinterpolate": "^3.0.0",
+        "lodash.templatesettings": "^4.0.0"
+      }
+    },
+    "node_modules/lodash.templatesettings": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-4.2.0.tgz",
+      "integrity": "sha512-stgLz+i3Aa9mZgnjr/O+v9ruKZsPsndy7qPZOchbqk2cnTU1ZaldKK+v7m54WoKIyxiuMZTKT2H81F8BeAc3ZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "lodash._reinterpolate": "^3.0.0"
+      }
+    },
     "node_modules/lodash.truncate": {
       "version": "4.4.2",
       "resolved": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz",

package/oclif.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.15.1",
+  "version": "0.15.3",
   "commands": {
     "config": {
       "id": "config",
@@ -9,6 +9,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso config",
         "$ apso config get apiUrl",
@@ -42,6 +43,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso deploy",
         "$ apso deploy --yes",
@@ -79,6 +81,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso dev",
         "$ apso dev --docker",
@@ -115,6 +118,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso doctor",
         "$ apso doctor --json",
@@ -144,6 +148,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso generate",
         "$ apso generate --skip-format",
@@ -188,6 +193,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso init",
         "$ apso init --name my-app --language typescript",
@@ -230,6 +236,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso link",
         "$ apso link --workspace my-team --service my-api",
@@ -268,6 +275,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso login",
         "$ apso login --token <api-token>"
@@ -298,6 +306,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso logout"
       ],
@@ -320,6 +329,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso logs",
         "$ apso logs <build-id>"
@@ -341,6 +351,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso migrate",
         "$ apso migrate --apply",
@@ -377,6 +388,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso open",
         "$ apso open --endpoint",
@@ -408,6 +420,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso projects",
         "$ apso projects --workspace my-team",
@@ -438,6 +451,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso status"
       ],
@@ -452,6 +466,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso unlink",
         "$ apso unlink --yes"
@@ -475,6 +490,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso whoami",
         "$ apso whoami --json"
@@ -504,6 +520,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso mcp serve",
         "# In Claude Code settings:",
@@ -528,6 +545,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso schema diff"
       ],
@@ -542,6 +560,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso schema pull",
         "$ apso schema pull --yes"
@@ -565,6 +584,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso schema push",
         "$ apso schema push --yes"
@@ -588,6 +608,7 @@
       "pluginAlias": "@apso/cli",
       "pluginType": "core",
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso schema validate",
         "$ apso schema validate --local"
@@ -611,6 +632,7 @@
       "pluginType": "core",
       "hidden": true,
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso init"
       ],
@@ -626,6 +648,7 @@
       "pluginType": "core",
       "hidden": true,
       "aliases": [],
+      "hiddenAliases": [],
       "examples": [
         "$ apso generate"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apso/cli",
-  "version": "0.15.1",
+  "version": "0.15.3",
   "mcpName": "io.github.apsoai/apso",
   "description": "Apso CLI",
   "author": "Apso by Mavric - @mavric",
@@ -29,6 +29,7 @@
     "@oclif/core": "^2",
     "@oclif/plugin-help": "^5",
     "@oclif/plugin-plugins": "^3",
+    "@oclif/plugin-warn-if-update-available": "^2.1.1",
     "debug": "^4.3.4",
     "eta": "^2.0.0",
     "inquirer": "^8.2.7",
@@ -74,8 +75,14 @@
     "commands": "./dist/commands",
     "plugins": [
       "@oclif/plugin-help",
-      "@oclif/plugin-plugins"
+      "@oclif/plugin-plugins",
+      "@oclif/plugin-warn-if-update-available"
     ],
+    "warn-if-update-available": {
+      "timeoutInDays": 1,
+      "registry": "https://registry.npmjs.org",
+      "message": "<%= config.name %> update available: <%= chalk.dim(config.version) %> → <%= chalk.greenBright(latest) %>. Run <%= chalk.cyan('npm i -g @apso/cli') %> to update."
+    },
     "topicSeparator": " ",
     "topics": {
       "server": {