@bagdock/cli 0.3.0 → 0.4.0

package/README.md

@@ -16,6 +16,12 @@ curl -fsSL https://bdok.dev/install.sh | bash
 irm https://bdok.dev/install.ps1 | iex
 ```
 
+### Homebrew (macOS / Linux)
+
+```bash
+brew install bagdock/cli/bagdock
+```
+
 ### Node.js
 
 ```bash
@@ -42,12 +48,16 @@ pnpm dlx @bagdock/cli --help
 
 ### Agent skills
 
-This CLI ships with an agent skill that teaches AI coding agents (Cursor, Claude Code, Windsurf, etc.) how to use the Bagdock CLI effectively — including non-interactive flags, output formats, and common pitfalls.
+This CLI ships with an agent skill that teaches AI coding agents (Cursor, Claude Code, Codex, Conductor, etc.) how to use the Bagdock CLI effectively — including non-interactive flags, output formats, and common pitfalls.
+
+To install skills for Bagdock's full platform (API, CLI, adapters) from the central skills repository:
 
 ```bash
 npx skills add bagdock/bagdock-skills
 ```
 
+See [bagdock/bagdock-skills](https://github.com/bagdock/bagdock-skills) for all available skills and plugin manifests.
+
 ## Local development
 
 Use this when you want to change the CLI and run your build locally.
@@ -383,6 +393,129 @@ bagdock submit
 
 ---
 
+### `bagdock validate`
+
+Run local pre-submission checks on `bagdock.json` and your bundle before submitting.
+
+```bash
+bagdock validate
+```
+
+Checks performed:
+
+| Check | Pass | Warn | Fail |
+|-------|------|------|------|
+| bagdock.json | Found and parsed | — | Missing or invalid JSON |
+| Required fields | All present | — | Missing name, slug, version, type, category, or main |
+| Type | Valid type | — | Invalid type value |
+| Kind | — | Unknown kind | — |
+| Entry point | File exists (shows size) | — | File not found |
+| Bundle size | Under 10 MB | Approaching limit (>80%) | Over 10 MB |
+| Project link | — | Slug mismatch with linked project | — |
+
+```bash
+# JSON output
+bagdock validate --json
+# => {"ok":true,"checks":[...]}
+```
+
+Exit code `0` if all checks pass or warn. Exit code `1` if any check fails.
+
+---
+
+### `bagdock submission list`
+
+List submission history for the current app.
+
+```bash
+bagdock submission list
+bagdock submission list --app my-adapter --json
+```
+
+| Flag | Description |
+|------|-------------|
+| `--app <slug>` | App slug (defaults to `bagdock.json` or linked project) |
+
+### `bagdock submission status <id>`
+
+Fetch detailed review state for a specific submission.
+
+```bash
+bagdock submission status iadpv_abc123
+bagdock submission status iadpv_abc123 --json
+```
+
+| Flag | Description |
+|------|-------------|
+| `--app <slug>` | App slug |
+
+### `bagdock submission withdraw <id>`
+
+Cancel a pending submission before approval. Only works when `review_status` is `submitted`.
+
+```bash
+bagdock submission withdraw iadpv_abc123
+```
+
+| Flag | Description |
+|------|-------------|
+| `--app <slug>` | App slug |
+
+#### Error codes
+
+| Code | Cause |
+|------|-------|
+| `not_found` | Submission or app not found |
+| `invalid_status` | App is not in `submitted` state |
+
+---
+
+### `bagdock open [slug]`
+
+Open the current project in the Bagdock dashboard.
+
+```bash
+bagdock open
+bagdock open my-adapter
+```
+
+Reads the slug from `bagdock.json`, linked project, or the argument.
+
+---
+
+### `bagdock inspect [slug]`
+
+Show deployment details and status for an app.
+
+```bash
+bagdock inspect
+bagdock inspect my-adapter --json
+```
+
+Displays: name, slug, type, version, review status, worker URL, namespace, timestamps.
+
+---
+
+### `bagdock link`
+
+Link the current directory to a Bagdock app or edge. Other commands use the linked slug as a fallback.
+
+```bash
+# Interactive: select from your apps
+bagdock link
+
+# Non-interactive
+bagdock link --slug my-adapter
+```
+
+| Flag | Description |
+|------|-------------|
+| `--slug <slug>` | Project slug (required in non-interactive mode) |
+
+Stores the link in `.bagdock/link.json` in the current directory.
+
+---
+
 ### `bagdock env list`
 
 List environment variables for the current app.
@@ -408,6 +541,17 @@ Remove an environment variable.
 bagdock env remove VENDOR_API_KEY
 ```
 
+### `bagdock env pull [file]`
+
+Pull remote env var keys to a local `.env` file for development.
+
+```bash
+bagdock env pull
+bagdock env pull .env.development
+```
+
+The API does not expose secret values. The file is created with keys and empty values — fill them in for local dev.
+
 ---
 
 ### `bagdock keys create`

package/dist/bagdock.js

@@ -3894,14 +3894,430 @@ var init_submit = __esm(() => {
   init_auth();
 });
 
+// src/link.ts
+var exports_link = {};
+__export(exports_link, {
+  resolveSlug: () => resolveSlug,
+  requireSlug: () => requireSlug,
+  link: () => link
+});
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { join as join6 } from "path";
+function resolveSlug() {
+  const config = loadBagdockJson(process.cwd());
+  if (config?.slug)
+    return config.slug;
+  const linkPath = join6(process.cwd(), LINK_DIR, LINK_FILE);
+  if (existsSync6(linkPath)) {
+    try {
+      const data = JSON.parse(readFileSync4(linkPath, "utf-8"));
+      return data.slug ?? null;
+    } catch {
+      return null;
+    }
+  }
+  return null;
+}
+function requireSlug(slugArg) {
+  const slug = slugArg ?? resolveSlug();
+  if (!slug) {
+    if (isJsonMode()) {
+      outputError("no_project", "No project found. Pass --slug, add bagdock.json, or run bagdock link.");
+    }
+    console.error(source_default.red("No project found."), "Pass a slug, create bagdock.json, or run", source_default.cyan("bagdock link"));
+    process.exit(1);
+  }
+  return slug;
+}
+async function link(opts) {
+  let slug = opts.slug;
+  if (!slug) {
+    const config = loadBagdockJson(process.cwd());
+    if (config?.slug) {
+      slug = config.slug;
+      status(`Found bagdock.json — linking to ${slug}`);
+    }
+  }
+  if (!slug && process.stdout.isTTY && !isJsonMode()) {
+    const token = getAuthToken();
+    if (!token) {
+      console.error(source_default.red("Not authenticated."), "Run", source_default.cyan("bagdock login"), "first.");
+      process.exit(1);
+    }
+    status("Fetching your apps...");
+    try {
+      const res = await fetch(`${API_BASE}/v1/developer/apps`, {
+        headers: { Authorization: `Bearer ${token}` }
+      });
+      if (!res.ok)
+        throw new Error(`API returned ${res.status}`);
+      const { data } = await res.json();
+      if (!data?.length) {
+        console.error(source_default.yellow("No apps found."), "Create one with", source_default.cyan("bagdock init"));
+        process.exit(1);
+      }
+      console.log(source_default.bold(`
+Your apps:
+`));
+      data.forEach((app, i) => console.log(`  ${source_default.cyan(i + 1)} ${app.name} ${source_default.dim(`(${app.slug})`)}`));
+      console.log();
+      const readline = await import("readline");
+      const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+      const answer = await new Promise((resolve) => rl.question("Select app number: ", resolve));
+      rl.close();
+      const idx = parseInt(answer, 10) - 1;
+      if (isNaN(idx) || idx < 0 || idx >= data.length) {
+        console.error(source_default.red("Invalid selection"));
+        process.exit(1);
+      }
+      slug = data[idx].slug;
+    } catch (err) {
+      console.error(source_default.red("Failed to fetch apps:"), err.message);
+      process.exit(1);
+    }
+  }
+  if (!slug) {
+    outputError("missing_slug", "Slug required. Pass --slug in non-interactive mode.");
+    process.exit(1);
+  }
+  const dir = join6(process.cwd(), LINK_DIR);
+  if (!existsSync6(dir))
+    mkdirSync3(dir, { recursive: true });
+  const linkData = { slug, linkedAt: new Date().toISOString() };
+  writeFileSync4(join6(dir, LINK_FILE), JSON.stringify(linkData, null, 2));
+  if (isJsonMode()) {
+    outputSuccess({ slug, path: join6(dir, LINK_FILE) });
+  } else {
+    console.log(source_default.green(`Linked to ${source_default.bold(slug)}`));
+    console.log(source_default.dim(`  Stored in ${LINK_DIR}/${LINK_FILE}`));
+  }
+}
+var LINK_DIR = ".bagdock", LINK_FILE = "link.json";
+var init_link = __esm(() => {
+  init_source();
+  init_config();
+  init_auth();
+  init_output();
+});
+
+// src/validate.ts
+var exports_validate = {};
+__export(exports_validate, {
+  validate: () => validate
+});
+import { existsSync as existsSync7, statSync } from "fs";
+import { join as join7 } from "path";
+async function validate() {
+  const checks = [];
+  const dir = process.cwd();
+  const config = loadBagdockJson(dir);
+  if (!config) {
+    checks.push({ name: "bagdock.json", status: "fail", message: "Not found or invalid JSON" });
+    return finish(checks);
+  }
+  checks.push({ name: "bagdock.json", status: "pass", message: "Found and parsed" });
+  const required = ["name", "slug", "version", "type", "category", "main"];
+  const missing = required.filter((f) => !config[f]);
+  if (missing.length) {
+    checks.push({ name: "Required fields", status: "fail", message: `Missing: ${missing.join(", ")}` });
+  } else {
+    checks.push({ name: "Required fields", status: "pass", message: "All present" });
+  }
+  if (!VALID_TYPES.includes(config.type)) {
+    checks.push({ name: "Type", status: "fail", message: `Invalid type "${config.type}". Must be: ${VALID_TYPES.join(", ")}` });
+  } else {
+    checks.push({ name: "Type", status: "pass", message: config.type });
+  }
+  if (config.kind && !VALID_KINDS.includes(config.kind)) {
+    checks.push({ name: "Kind", status: "warn", message: `Unknown kind "${config.kind}". Expected: ${VALID_KINDS.join(", ")}` });
+  }
+  const entryPath = join7(dir, config.main);
+  if (!existsSync7(entryPath)) {
+    checks.push({ name: "Entry point", status: "fail", message: `File not found: ${config.main}` });
+  } else {
+    const size = statSync(entryPath).size;
+    checks.push({ name: "Entry point", status: "pass", message: `${config.main} (${(size / 1024).toFixed(1)} KB)` });
+    if (size > MAX_BUNDLE_BYTES) {
+      checks.push({ name: "Bundle size", status: "fail", message: `${(size / 1024 / 1024).toFixed(1)} MB exceeds ${MAX_BUNDLE_BYTES / 1024 / 1024} MB limit` });
+    } else if (size > MAX_BUNDLE_BYTES * 0.8) {
+      checks.push({ name: "Bundle size", status: "warn", message: `${(size / 1024 / 1024).toFixed(1)} MB — approaching limit` });
+    } else {
+      checks.push({ name: "Bundle size", status: "pass", message: `${(size / 1024).toFixed(1)} KB` });
+    }
+  }
+  const linked = resolveSlug();
+  if (linked && linked !== config.slug) {
+    checks.push({ name: "Project link", status: "warn", message: `bagdock.json slug "${config.slug}" differs from linked project "${linked}"` });
+  }
+  return finish(checks);
+}
+function finish(checks) {
+  const hasFail = checks.some((c) => c.status === "fail");
+  const hasWarn = checks.some((c) => c.status === "warn");
+  if (isJsonMode()) {
+    outputSuccess({ ok: !hasFail, checks });
+    if (hasFail)
+      process.exit(1);
+    return;
+  }
+  console.log(source_default.bold(`
+  Bagdock Validate
+`));
+  for (const c of checks) {
+    const icon = c.status === "pass" ? source_default.green("✔") : c.status === "warn" ? source_default.yellow("⚠") : source_default.red("✖");
+    console.log(`  ${icon} ${c.name}: ${c.message}`);
+  }
+  console.log();
+  if (hasFail) {
+    console.log(source_default.red(`  Validation failed. Fix errors before submitting.
+`));
+    process.exit(1);
+  } else if (hasWarn) {
+    console.log(source_default.yellow(`  Passed with warnings.
+`));
+  } else {
+    console.log(source_default.green(`  All checks passed. Ready to submit.
+`));
+  }
+}
+var VALID_TYPES, VALID_KINDS, MAX_BUNDLE_BYTES;
+var init_validate = __esm(() => {
+  init_source();
+  init_config();
+  init_output();
+  init_link();
+  VALID_TYPES = ["edge", "app"];
+  VALID_KINDS = ["adapter", "comms", "webhook", "ui-extension", "microfrontend"];
+  MAX_BUNDLE_BYTES = 10 * 1024 * 1024;
+});
+
+// src/submission.ts
+var exports_submission = {};
+__export(exports_submission, {
+  submissionWithdraw: () => submissionWithdraw,
+  submissionStatus: () => submissionStatus,
+  submissionList: () => submissionList
+});
+function requireAuth() {
+  const token = getAuthToken();
+  if (!token) {
+    outputError("auth_error", "Not authenticated. Run bagdock login or set BAGDOCK_API_KEY.");
+    process.exit(1);
+  }
+  return token;
+}
+async function submissionList(opts) {
+  const token = requireAuth();
+  const slug = requireSlug(opts.app);
+  status(`Fetching submissions for ${slug}...`);
+  try {
+    const res = await fetch(`${API_BASE}/v1/developer/apps/${slug}/submissions`, {
+      headers: { Authorization: `Bearer ${token}` }
+    });
+    if (res.status === 404) {
+      outputError("not_found", `App "${slug}" not found or no submissions exist.`);
+    }
+    if (!res.ok) {
+      outputError("api_error", `API returned ${res.status}`);
+    }
+    const { data } = await res.json();
+    if (isJsonMode()) {
+      outputList("submission", data, false);
+      return;
+    }
+    if (!data?.length) {
+      console.log(source_default.yellow("No submissions found for this app."));
+      console.log("Submit with", source_default.cyan("bagdock submit"));
+      return;
+    }
+    console.log(source_default.bold(`
+Submissions for ${slug}:
+`));
+    console.log(`  ${"ID".padEnd(22)} ${"Version".padEnd(10)} ${"Reason".padEnd(30)} ${"Date"}`);
+    console.log(source_default.dim("  " + "─".repeat(80)));
+    for (const s of data) {
+      console.log(`  ${source_default.cyan(s.id.padEnd(22))} ${(s.version ?? "").padEnd(10)} ${(s.change_reason ?? "").slice(0, 30).padEnd(30)} ${source_default.dim(new Date(s.created_at).toLocaleDateString())}`);
+    }
+    console.log();
+  } catch (err) {
+    outputError("network_error", err.message);
+  }
+}
+async function submissionStatus(id, opts) {
+  const token = requireAuth();
+  const slug = requireSlug(opts.app);
+  status(`Fetching submission ${id}...`);
+  try {
+    const res = await fetch(`${API_BASE}/v1/developer/apps/${slug}/submissions/${id}`, {
+      headers: { Authorization: `Bearer ${token}` }
+    });
+    if (res.status === 404) {
+      outputError("not_found", `Submission "${id}" not found.`);
+    }
+    if (!res.ok) {
+      outputError("api_error", `API returned ${res.status}`);
+    }
+    const { data } = await res.json();
+    if (isJsonMode()) {
+      outputSuccess(data);
+      return;
+    }
+    console.log(source_default.bold(`
+  Submission ${source_default.cyan(data.id)}
+`));
+    const fields = [
+      ["App", `${data.name} (${data.slug})`],
+      ["Version", data.version],
+      ["Review Status", data.review_status],
+      ["Type", data.type],
+      ["Visibility", data.visibility],
+      ["Reason", data.change_reason],
+      ["Submitted by", data.changed_by],
+      ["Date", new Date(data.created_at).toLocaleString()]
+    ];
+    for (const [label, value] of fields) {
+      console.log(`  ${source_default.dim(label.padEnd(16))} ${value ?? source_default.dim("—")}`);
+    }
+    console.log();
+  } catch (err) {
+    outputError("network_error", err.message);
+  }
+}
+async function submissionWithdraw(id, opts) {
+  const token = requireAuth();
+  const slug = requireSlug(opts.app);
+  status(`Withdrawing submission ${id}...`);
+  try {
+    const res = await fetch(`${API_BASE}/v1/developer/apps/${slug}/submissions/${id}/withdraw`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${token}` }
+    });
+    if (res.status === 404) {
+      outputError("not_found", `App "${slug}" not found.`);
+    }
+    if (res.status === 409) {
+      const body = await res.json();
+      outputError(body.code ?? "invalid_status", body.message);
+    }
+    if (!res.ok) {
+      outputError("api_error", `API returned ${res.status}`);
+    }
+    const { data } = await res.json();
+    if (isJsonMode()) {
+      outputSuccess(data);
+      return;
+    }
+    console.log(source_default.green(`Submission withdrawn.`), source_default.dim(`Status is now: ${data.review_status}`));
+    console.log("You can re-submit with", source_default.cyan("bagdock submit"));
+  } catch (err) {
+    outputError("network_error", err.message);
+  }
+}
+var init_submission = __esm(() => {
+  init_source();
+  init_config();
+  init_auth();
+  init_output();
+  init_link();
+});
+
+// src/open.ts
+var exports_open2 = {};
+__export(exports_open2, {
+  open: () => open2
+});
+async function open2(slugArg) {
+  const slug = requireSlug(slugArg);
+  const url = `${DASHBOARD_BASE}/developer/apps/${slug}`;
+  if (isJsonMode()) {
+    outputSuccess({ url, slug });
+    return;
+  }
+  status(`Opening ${url}`);
+  await open_default(url);
+  console.log(source_default.green("Opened"), source_default.cyan(url));
+}
+var init_open2 = __esm(() => {
+  init_source();
+  init_open();
+  init_config();
+  init_output();
+  init_link();
+});
+
+// src/inspect.ts
+var exports_inspect = {};
+__export(exports_inspect, {
+  inspect: () => inspect
+});
+async function inspect(slugArg) {
+  const token = getAuthToken();
+  if (!token) {
+    outputError("auth_error", "Not authenticated. Run bagdock login or set BAGDOCK_API_KEY.");
+    process.exit(1);
+  }
+  const slug = requireSlug(slugArg);
+  status(`Inspecting ${slug}...`);
+  try {
+    const res = await fetch(`${API_BASE}/v1/developer/apps/${slug}`, {
+      headers: { Authorization: `Bearer ${token}` }
+    });
+    if (res.status === 404)
+      outputError("not_found", `App "${slug}" not found.`);
+    if (!res.ok)
+      outputError("api_error", `API returned ${res.status}`);
+    const { data } = await res.json();
+    if (isJsonMode()) {
+      outputSuccess(data);
+      return;
+    }
+    console.log(source_default.bold(`
+  ${data.name} ${source_default.dim(`(${data.slug})`)}
+`));
+    const fields = [
+      ["ID", data.id],
+      ["Type", data.type],
+      ["Category", data.category],
+      ["Version", data.version],
+      ["Maintainer", data.maintainer],
+      ["Visibility", data.visibility],
+      ["Review Status", data.review_status],
+      ["Active", data.is_active ? "yes" : "no"],
+      ["Worker URL", data.worker_url],
+      ["Namespace", data.worker_namespace],
+      ["Created", data.created_at ? new Date(data.created_at).toLocaleString() : undefined],
+      ["Updated", data.updated_at ? new Date(data.updated_at).toLocaleString() : undefined],
+      ["Published", data.published_at ? new Date(data.published_at).toLocaleString() : undefined]
+    ];
+    for (const [label, value] of fields) {
+      if (value !== undefined && value !== null) {
+        console.log(`  ${source_default.dim(label.padEnd(16))} ${value}`);
+      }
+    }
+    console.log();
+  } catch (err) {
+    outputError("network_error", err.message);
+  }
+}
+var init_inspect = __esm(() => {
+  init_source();
+  init_config();
+  init_auth();
+  init_output();
+  init_link();
+});
+
 // src/env-cmd.ts
 var exports_env_cmd = {};
 __export(exports_env_cmd, {
   envSet: () => envSet,
   envRemove: () => envRemove,
+  envPull: () => envPull,
   envList: () => envList
 });
-function requireAuth() {
+import { writeFileSync as writeFileSync5 } from "fs";
+import { resolve } from "path";
+function requireAuth2() {
   const token = getAuthToken();
   if (!token) {
     console.error(source_default.red("Not authenticated. Run"), source_default.cyan("bagdock login"), source_default.red("or set BAGDOCK_API_KEY."));
@@ -3918,7 +4334,7 @@ function requireConfig() {
   return config;
 }
 async function envList() {
-  const token = requireAuth();
+  const token = requireAuth2();
   const config = requireConfig();
   try {
     const res = await fetch(`${API_BASE}/v1/developer/apps/${config.slug}/env`, {
@@ -3947,7 +4363,7 @@ Environment variables for ${config.slug}:
   }
 }
 async function envSet(key, value) {
-  const token = requireAuth();
+  const token = requireAuth2();
   const config = requireConfig();
   try {
     const res = await fetch(`${API_BASE}/v1/developer/apps/${config.slug}/env`, {
@@ -3970,7 +4386,7 @@ async function envSet(key, value) {
   }
 }
 async function envRemove(key) {
-  const token = requireAuth();
+  const token = requireAuth2();
   const config = requireConfig();
   try {
     const res = await fetch(`${API_BASE}/v1/developer/apps/${config.slug}/env/${key}`, {
@@ -3987,10 +4403,52 @@ async function envRemove(key) {
     process.exit(1);
   }
 }
+async function envPull(file) {
+  const token = requireAuth2();
+  const slug = requireSlug();
+  const target = resolve(file ?? ".env.local");
+  status(`Pulling env vars for ${slug}...`);
+  try {
+    const res = await fetch(`${API_BASE}/v1/developer/apps/${slug}/env`, {
+      headers: { Authorization: `Bearer ${token}` }
+    });
+    if (!res.ok) {
+      outputError("api_error", `Failed to pull env vars (${res.status})`);
+      process.exit(1);
+    }
+    const { data } = await res.json();
+    if (isJsonMode()) {
+      outputSuccess({ file: target, keys: data.map((v) => v.key) });
+      return;
+    }
+    if (!data?.length) {
+      console.log(source_default.yellow("No environment variables set."));
+      return;
+    }
+    const lines = [
+      `# Pulled from Bagdock — ${slug}`,
+      `# ${new Date().toISOString()}`,
+      `# Values are placeholders — the API does not expose secrets.`,
+      `# Fill in real values for local development.`,
+      "",
+      ...data.map((v) => `${v.key}=`),
+      ""
+    ];
+    writeFileSync5(target, lines.join(`
+`));
+    console.log(source_default.green(`Wrote ${data.length} keys to ${target}`));
+    console.log(source_default.yellow("Note:"), "Values are empty — fill them in for local dev.");
+  } catch (err) {
+    console.error(source_default.red("Failed:"), err.message);
+    process.exit(1);
+  }
+}
 var init_env_cmd = __esm(() => {
   init_source();
   init_config();
   init_auth();
+  init_output();
+  init_link();
 });
 
 // src/keys.ts
@@ -4209,7 +4667,7 @@ async function apiRequest3(method, path2) {
     headers: { Authorization: `Bearer ${token}` }
   });
 }
-function resolveSlug(slug) {
+function resolveSlug2(slug) {
   if (slug)
     return slug;
   const config = loadBagdockJson(process.cwd());
@@ -4219,7 +4677,7 @@ function resolveSlug(slug) {
   return "";
 }
 async function logsList(opts) {
-  const slug = resolveSlug(opts.app);
+  const slug = resolveSlug2(opts.app);
   const limit = opts.limit || "50";
   status(`Fetching logs for ${slug}...`);
   const res = await apiRequest3("GET", `/api/v1/developer/apps/${slug}/logs?limit=${limit}`);
@@ -4250,7 +4708,7 @@ async function logsList(opts) {
   }
 }
 async function logsGet(id, opts) {
-  const slug = resolveSlug(opts.app);
+  const slug = resolveSlug2(opts.app);
   status(`Fetching log entry ${id}...`);
   const res = await apiRequest3("GET", `/api/v1/developer/apps/${slug}/logs/${id}`);
   if (!res.ok) {
@@ -4265,7 +4723,7 @@ async function logsGet(id, opts) {
   }
 }
 async function logsTail(opts) {
-  const slug = resolveSlug(opts.app);
+  const slug = resolveSlug2(opts.app);
   if (isJsonMode()) {
     outputError("UNSUPPORTED", "Log tailing is not supported in JSON mode. Use `logs list` instead.");
   }
@@ -4575,7 +5033,7 @@ function toPascalCase(s) {
 init_output();
 init_config();
 var program2 = new Command;
-program2.name("bagdock").description("Bagdock developer CLI — built for humans, AI agents, and CI/CD pipelines").version("0.3.0").option("--json", "Force JSON output (auto-enabled in non-TTY)").option("-q, --quiet", "Suppress status messages (implies --json)").option("--api-key <key>", "API key to use for this invocation").option("-p, --profile <name>", "Profile to use (overrides BAGDOCK_PROFILE)").hook("preAction", (_thisCommand, actionCommand) => {
+program2.name("bagdock").description("Bagdock developer CLI — built for humans, AI agents, and CI/CD pipelines").version("0.4.0").option("--json", "Force JSON output (auto-enabled in non-TTY)").option("-q, --quiet", "Suppress status messages (implies --json)").option("--api-key <key>", "API key to use for this invocation").option("-p, --profile <name>", "Profile to use (overrides BAGDOCK_PROFILE)").hook("preAction", (_thisCommand, actionCommand) => {
   const opts = program2.opts();
   setOutputMode({ json: opts.json, quiet: opts.quiet });
   if (opts.apiKey)
@@ -4606,6 +5064,35 @@ program2.command("submit").description("Submit app for Bagdock marketplace revie
   const { submit: submit2 } = await Promise.resolve().then(() => (init_submit(), exports_submit));
   await submit2();
 });
+program2.command("validate").description("Run local pre-submission checks on bagdock.json and bundle").action(async () => {
+  const { validate: validate2 } = await Promise.resolve().then(() => (init_validate(), exports_validate));
+  await validate2();
+});
+var subCmd = program2.command("submission").description("Track marketplace submission status");
+subCmd.command("list").description("List submission history for the current app").option("--app <slug>", "App slug (defaults to bagdock.json or linked project)").action(async (opts) => {
+  const { submissionList: submissionList2 } = await Promise.resolve().then(() => (init_submission(), exports_submission));
+  await submissionList2(opts);
+});
+subCmd.command("status <id>").description("Fetch detailed review state for a submission").option("--app <slug>", "App slug").action(async (id, opts) => {
+  const { submissionStatus: submissionStatus2 } = await Promise.resolve().then(() => (init_submission(), exports_submission));
+  await submissionStatus2(id, opts);
+});
+subCmd.command("withdraw <id>").description("Cancel a pending submission before approval").option("--app <slug>", "App slug").action(async (id, opts) => {
+  const { submissionWithdraw: submissionWithdraw2 } = await Promise.resolve().then(() => (init_submission(), exports_submission));
+  await submissionWithdraw2(id, opts);
+});
+program2.command("open [slug]").description("Open project in the Bagdock dashboard").action(async (slug) => {
+  const { open: open3 } = await Promise.resolve().then(() => (init_open2(), exports_open2));
+  await open3(slug);
+});
+program2.command("inspect [slug]").description("Show deployment details and status for an app").action(async (slug) => {
+  const { inspect: inspect2 } = await Promise.resolve().then(() => (init_inspect(), exports_inspect));
+  await inspect2(slug);
+});
+program2.command("link").description("Link current directory to a Bagdock app or edge").option("--slug <slug>", "Project slug (required in non-interactive mode)").action(async (opts) => {
+  const { link: link2 } = await Promise.resolve().then(() => (init_link(), exports_link));
+  await link2(opts);
+});
 var envCmd = program2.command("env").description("Manage app environment variables");
 envCmd.command("list").description("List environment variables for this app").action(async () => {
   const { envList: envList2 } = await Promise.resolve().then(() => (init_env_cmd(), exports_env_cmd));
@@ -4619,6 +5106,10 @@ envCmd.command("remove <key>").description("Remove an environment variable").act
   const { envRemove: envRemove2 } = await Promise.resolve().then(() => (init_env_cmd(), exports_env_cmd));
   await envRemove2(key);
 });
+envCmd.command("pull [file]").description("Pull remote env var keys to a local .env file").action(async (file) => {
+  const { envPull: envPull2 } = await Promise.resolve().then(() => (init_env_cmd(), exports_env_cmd));
+  await envPull2(file);
+});
 var keysCmd = program2.command("keys").description("Manage operator API keys");
 keysCmd.command("create").description("Create a new API key (raw key shown once)").requiredOption("--name <name>", "Key name").option("--type <type>", "Key type (secret, publishable)", "secret").option("--category <category>", "Key category (standard, restricted, personal)", "standard").option("--environment <env>", "Environment (live, test)", "live").option("--scopes <scopes...>", "Permission scopes").action(async (opts) => {
   const { keysCreate: keysCreate2 } = await Promise.resolve().then(() => (init_keys(), exports_keys));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bagdock/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Bagdock developer CLI — build, test, and deploy apps and edges on the Bagdock platform",
   "keywords": [
     "bagdock",

package/skill-evals/bagdock-cli/evals.json

@@ -1,6 +1,6 @@
 {
   "skill": "bagdock-cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "evals": [
     {
       "id": "login-flow",
@@ -147,6 +147,62 @@
       "input": "What apps do I have deployed?",
       "expected_commands": ["bagdock apps list --json"],
       "expected_behavior": "Lists all deployed apps with slugs, types, and status"
+    },
+    {
+      "id": "validate-before-submit",
+      "description": "Agent should validate before submitting",
+      "input": "Check if my adapter is ready to submit to the marketplace",
+      "expected_commands": ["bagdock validate --json"],
+      "expected_behavior": "Runs local checks on bagdock.json and bundle, returns pass/warn/fail"
+    },
+    {
+      "id": "submission-list",
+      "description": "Agent should list submissions",
+      "input": "Show me all my marketplace submissions for this app",
+      "expected_commands": ["bagdock submission list --json"],
+      "expected_behavior": "Lists submission history with IDs, versions, and dates"
+    },
+    {
+      "id": "submission-status",
+      "description": "Agent should check submission status",
+      "input": "What's the review status of submission iadpv_abc123?",
+      "expected_commands": ["bagdock submission status iadpv_abc123 --json"],
+      "expected_behavior": "Returns detailed review state including status, reason, and timestamps"
+    },
+    {
+      "id": "submission-withdraw",
+      "description": "Agent should withdraw a pending submission",
+      "input": "Withdraw my pending submission iadpv_abc123, I found a bug",
+      "expected_commands": ["bagdock submission withdraw iadpv_abc123"],
+      "expected_behavior": "Cancels submission, sets review_status back to draft"
+    },
+    {
+      "id": "open-dashboard",
+      "description": "Agent should open project in dashboard",
+      "input": "Open my adapter in the Bagdock dashboard",
+      "expected_commands": ["bagdock open"],
+      "expected_behavior": "Opens browser to dashboard URL for the current project"
+    },
+    {
+      "id": "inspect-app",
+      "description": "Agent should inspect app deployment details",
+      "input": "Show me the deployment details for smart-entry",
+      "expected_commands": ["bagdock inspect smart-entry --json"],
+      "expected_behavior": "Returns app details including worker URL, version, review status"
+    },
+    {
+      "id": "env-pull",
+      "description": "Agent should pull env vars for local development",
+      "input": "Pull the env var keys from my deployed adapter to a local .env file",
+      "expected_commands": ["bagdock env pull .env.local"],
+      "expected_behavior": "Creates .env.local with keys and empty values, warns that values need filling"
+    },
+    {
+      "id": "link-project",
+      "description": "Agent should link directory to a project",
+      "input": "Link this directory to my smart-entry adapter",
+      "expected_commands": ["bagdock link --slug smart-entry"],
+      "expected_behavior": "Creates .bagdock/link.json with slug, other commands use it as fallback"
     }
   ]
 }

package/skills/bagdock-cli/SKILL.md

@@ -62,9 +62,17 @@ For CI/CD, set `BAGDOCK_API_KEY` in your environment. For interactive use, run `
 | `env list` | List app environment variables |
 | `env set <key> <value>` | Set an environment variable |
 | `env remove <key>` | Remove an environment variable |
+| `env pull [file]` | Pull remote env var keys to local .env file |
 | `keys create` | Create a new API key (raw key shown once) |
 | `keys list` | List API keys |
 | `keys delete <id>` | Revoke an API key |
+| `validate` | Run local pre-submission checks on bagdock.json and bundle |
+| `submission list` | List marketplace submission history |
+| `submission status <id>` | Fetch detailed review state for a submission |
+| `submission withdraw <id>` | Cancel a pending submission |
+| `open [slug]` | Open project in Bagdock dashboard |
+| `inspect [slug]` | Show deployment details and status |
+| `link` | Link directory to a Bagdock app or edge |
 | `doctor` | Run environment diagnostics (version, auth, config, agents) |
 | `auth list` | List stored profiles |
 | `auth switch [name]` | Switch active profile |
@@ -112,6 +120,34 @@ bagdock keys list --json
 3. **Missing `bagdock.json`** — `deploy`, `submit`, and `env` commands require a `bagdock.json` in the current directory. Run `bagdock init` first.
 4. **Expired session** — If `whoami` fails, run `bagdock login` again. Sessions expire after 8 hours.
 
+### Validate before submitting
+
+```bash
+bagdock validate
+bagdock submit
+```
+
+### Check submission status
+
+```bash
+bagdock submission list --json
+bagdock submission status iadpv_xxx
+```
+
+### Link a directory and inspect
+
+```bash
+bagdock link --slug my-adapter
+bagdock inspect
+bagdock open
+```
+
+### Pull env vars for local dev
+
+```bash
+bagdock env pull .env.local
+```
+
 ## When to Load References
 
 Load specific reference files when the task involves:
@@ -121,3 +157,5 @@ Load specific reference files when the task involves:
 - **Environment variables** → `references/env.md`
 - **Local development** → `references/dev.md`
 - **Error codes or troubleshooting** → `references/error-codes.md`
+- **Marketplace submission lifecycle** → `references/marketplace.md`
+- **App management (open, inspect, link)** → `references/app-management.md`

package/skills/bagdock-cli/references/app-management.md

@@ -0,0 +1,63 @@
+# App Management Commands
+
+Commands for managing the relationship between your local directory and a Bagdock app or edge.
+
+## `bagdock link`
+
+Links the current directory to a Bagdock app or edge. Once linked, other commands (deploy, env, open, inspect, submission) use the linked slug as a fallback — no `bagdock.json` required.
+
+```bash
+# Interactive: select from your apps
+bagdock link
+
+# Non-interactive (CI/agents)
+bagdock link --slug my-adapter
+```
+
+Stores the link in `.bagdock/link.json`:
+
+```json
+{
+  "slug": "my-adapter",
+  "linkedAt": "2026-04-05T00:00:00.000Z"
+}
+```
+
+### Slug Resolution Order
+
+1. Explicit `--slug` or `--app` argument
+2. `bagdock.json` in current directory
+3. `.bagdock/link.json` (linked app)
+
+## `bagdock open [slug]`
+
+Opens the project in the Bagdock dashboard. Uses the slug resolution order above.
+
+```bash
+bagdock open
+bagdock open my-adapter
+```
+
+In JSON mode, returns the URL instead of opening the browser:
+
+```bash
+bagdock open --json
+# => {"url":"https://dashboard.bagdock.com/developer/apps/my-adapter","slug":"my-adapter"}
+```
+
+## `bagdock inspect [slug]`
+
+Shows deployment details for an app.
+
+```bash
+bagdock inspect
+bagdock inspect my-adapter --json
+```
+
+Displays:
+- Name, slug, ID
+- Type, category
+- Version, maintainer, visibility
+- Review status
+- Worker URL, namespace
+- Created, updated, published timestamps

package/skills/bagdock-cli/references/marketplace.md

@@ -0,0 +1,69 @@
+# Marketplace Submission Lifecycle
+
+The Bagdock marketplace uses a reviewed submission model. Developers submit, Bagdock reviews, then approves or rejects. `bagdock publish` is intentionally not a CLI command — final publication is handled by Bagdock staff.
+
+## Workflow
+
+1. `bagdock validate` — Run local checks before uploading
+2. `bagdock submit` — Upload bundle and request review (draft -> submitted)
+3. `bagdock submission list` — View all submissions
+4. `bagdock submission status <id>` — Check review progress
+5. `bagdock submission withdraw <id>` — Cancel before approval (submitted -> draft)
+
+## Commands
+
+### `bagdock validate`
+
+Local-only checks — no API call needed. Validates:
+
+- `bagdock.json` exists and parses
+- Required fields present (name, slug, version, type, category, main)
+- Type is `edge` or `app`
+- Entry point file exists
+- Bundle size under 10 MB
+
+```bash
+bagdock validate
+bagdock validate --json
+```
+
+Exit code 0 = pass/warn, 1 = fail.
+
+### `bagdock submission list`
+
+```bash
+bagdock submission list --app my-adapter
+bagdock submission list --json
+```
+
+### `bagdock submission status <id>`
+
+```bash
+bagdock submission status iadpv_abc123 --json
+```
+
+Returns: app name, version, review_status, type, visibility, change_reason, submitted_by, date.
+
+### `bagdock submission withdraw <id>`
+
+```bash
+bagdock submission withdraw iadpv_abc123
+```
+
+Only works when `review_status` is `submitted`. Returns the app to `draft` status so you can make changes and re-submit.
+
+## Status Values
+
+| Status | Meaning |
+|--------|---------|
+| `draft` | Not yet submitted |
+| `submitted` | Under review |
+| `approved` | Cleared for production |
+| `rejected` | Changes requested |
+
+## API Endpoints
+
+- `POST /v1/developer/apps/:slug/submit` — Submit
+- `GET /v1/developer/apps/:slug/submissions` — List
+- `GET /v1/developer/apps/:slug/submissions/:id` — Detail
+- `POST /v1/developer/apps/:slug/submissions/:id/withdraw` — Withdraw