@brainbase-labs/cli 0.10.0 → 0.11.0

package/dist/index.js

@@ -29449,7 +29449,7 @@ function padStart(s, n) {
 // package.json
 var package_default = {
   name: "@brainbase-labs/cli",
-  version: "0.10.0",
+  version: "0.11.0",
   description: "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   type: "module",
   bin: {
@@ -50413,6 +50413,7 @@ async function runSkillPublish(cwd2, args) {
     writeSkillMarker(skillDir, newSource);
     $e(`${import_picocolors16.default.bold(creator + "/" + pkgSlug)}@${version} published.`);
     f2.info(import_picocolors16.default.dim(`id: ${result2.id}`));
+    f2.info(import_picocolors16.default.dim(`To use it on an agent: add ${import_picocolors16.default.cyan(`source: registry:${creator}/${pkgSlug}`)} under ${import_picocolors16.default.cyan("skills:")} in brainbase.agent.yaml, then ${import_picocolors16.default.cyan("brainbase agent push")}. Agents already linking it pick up ${version} on their next push.`));
   } finally {
     try {
       fs37.rmSync(tmp, { recursive: true, force: true });
@@ -50544,6 +50545,9 @@ async function runSkillUpdate(cwd2, args) {
   }
   writeSkillMarker(target.dir, marker.source);
   $e(`${import_picocolors17.default.bold(args.slug)} updated.`);
+  if (marker.source.type === "brainbase") {
+    f2.info(import_picocolors17.default.dim(`This refreshed your local copy only. Agents using this skill update on their next ${import_picocolors17.default.cyan("brainbase agent push")} (run it in the agent's folder).`));
+  }
 }
 
 // src/cli/skill-search.ts
@@ -52649,7 +52653,8 @@ function threeWayDiff(input) {
     } else if (present.local && !present.cloud && present.lock) {
       status = "removed-cloud";
     } else {
-      const localChanged = localHash !== null && lockHash !== undefined && localHash !== lockHash;
+      const sourceChanged = !!local && local.hash === null && !!local.declaredSource && lock?.source !== undefined && lock.source !== local.declaredSource;
+      const localChanged = sourceChanged || localHash !== null && lockHash !== undefined && localHash !== lockHash;
       const cloudChanged = cloudHash !== undefined && lockHash !== undefined && cloudHash !== lockHash;
       if (localChanged && cloudChanged)
         status = "modified-both";
@@ -52787,6 +52792,14 @@ function diffSecrets(local, cloud) {
   };
 }
 
+// src/core/entrypoint-gate.ts
+function entrypointExecutionAllowed(opts) {
+  if (opts.flag)
+    return true;
+  const v3 = (opts.env.BRAINBASE_RUN_ENTRYPOINT ?? "").trim().toLowerCase();
+  return v3 === "1" || v3 === "true";
+}
+
 // src/cli/agent-pull.ts
 async function runAgentPull(cwd2, args) {
   banner("agent pull — bring cloud changes into this folder");
@@ -53002,7 +53015,7 @@ async function runAgentPull(cwd2, args) {
     };
     writeSyncState(cwd2, newState);
     await pullSecrets(cwd2, agentId);
-    await runEntrypointIfPresent(cwd2, yaml);
+    await runEntrypointIfPresent(cwd2, yaml, entrypointExecutionAllowed({ flag: args.runEntrypoint, env: process.env }));
     $e(`Pulled ${cloudAgent.name} at revision ${cloud.revision}.`);
   } finally {
     try {
@@ -53321,7 +53334,7 @@ function buildLinkFromAgent(agent, harness, prev) {
     tracking: prev?.tracking
   };
 }
-async function runEntrypointIfPresent(cwd2, manifest) {
+async function runEntrypointIfPresent(cwd2, manifest, execute) {
   if (!manifest.entrypoint)
     return;
   const body = resolveEntrypoint(cwd2, manifest);
@@ -53335,6 +53348,10 @@ async function runEntrypointIfPresent(cwd2, manifest) {
   try {
     fs45.chmodSync(scriptPath, 493);
   } catch {}
+  if (!execute) {
+    f2.info(`Agent has an entrypoint — written to ${import_picocolors25.default.dim(path48.relative(cwd2, scriptPath))}, not executed. ` + `Run it with ${import_picocolors25.default.cyan("brainbase run bash .brainbase/entrypoint.sh")} or re-pull with ${import_picocolors25.default.cyan("--run-entrypoint")}. Sandboxes run it automatically.`);
+    return;
+  }
   f2.info(`Running entrypoint ${import_picocolors25.default.dim(`(${path48.relative(cwd2, scriptPath)})`)}`);
   const secrets = readLocalSecrets(cwd2);
   const env3 = { ...process.env, ...secrets };
@@ -53413,7 +53430,7 @@ var import_picocolors27 = __toESM(require_picocolors(), 1);
 
 // src/core/agent-outgoing.ts
 var import_picocolors26 = __toESM(require_picocolors(), 1);
-async function buildOutgoingComponents(cwd2, manifest, cloud) {
+async function buildOutgoingComponents(cwd2, manifest, cloud, resolvedVersions) {
   const out = [];
   if (manifest.instructions) {
     if (manifest.instructions.text !== undefined && manifest.instructions.file !== undefined) {
@@ -53460,6 +53477,7 @@ async function buildOutgoingComponents(cwd2, manifest, cloud) {
     }
     const slug = registrySkillComponentSlug(parsed);
     const cloudMatch = cloud?.components.find((c2) => c2.type === "skill" && c2.slug === slug);
+    const version = parsed.version ?? resolvedVersions?.get(slug);
     out.push({
       type: "skill",
       slug,
@@ -53467,7 +53485,7 @@ async function buildOutgoingComponents(cwd2, manifest, cloud) {
       files: [],
       meta: {
         name: parsed.creator ? `${parsed.creator}/${parsed.slug}` : parsed.slug,
-        ...parsed.version ? { version: parsed.version } : {}
+        ...version ? { version } : {}
       }
     });
   }
@@ -53552,6 +53570,62 @@ function yamlScalar(s3) {
   return JSON.stringify(s3);
 }
 
+// src/core/registry-skill-updates.ts
+function parseSemver2(v3) {
+  const m3 = /^(\d+)\.(\d+)\.(\d+)$/.exec(v3);
+  if (!m3)
+    return null;
+  return [Number(m3[1]), Number(m3[2]), Number(m3[3])];
+}
+function compareDirection(current, latest) {
+  if (!current)
+    return "unknown";
+  const a3 = parseSemver2(current);
+  const b4 = parseSemver2(latest);
+  if (!a3 || !b4)
+    return "unknown";
+  for (let i = 0;i < 3; i++) {
+    if (b4[i] > a3[i])
+      return "upgrade";
+    if (b4[i] < a3[i])
+      return "downgrade";
+  }
+  return "unknown";
+}
+function planRegistrySkillUpdates(skills, cloudComponents, latestByName) {
+  const out = [];
+  for (const entry of skills) {
+    let parsed;
+    try {
+      parsed = parseSkillSource2(entry.source);
+    } catch {
+      continue;
+    }
+    if (parsed.kind !== "registry" || parsed.version || !parsed.creator) {
+      continue;
+    }
+    const name = `${parsed.creator}/${parsed.slug}`;
+    const latest = latestByName.get(name);
+    if (!latest)
+      continue;
+    const componentSlug = registrySkillComponentSlug(parsed);
+    const cloud = cloudComponents.find((c2) => c2.type === "skill" && c2.slug === componentSlug);
+    if (!cloud)
+      continue;
+    const current = cloud.meta?.["version"];
+    if (current === latest)
+      continue;
+    out.push({
+      componentSlug,
+      name,
+      current,
+      latest,
+      direction: compareDirection(current, latest)
+    });
+  }
+  return out;
+}
+
 // src/cli/agent-push.ts
 async function runAgentPush(cwd2, args) {
   banner("agent push — send your local changes to the cloud");
@@ -53590,6 +53664,37 @@ async function runAgentPush(cwd2, args) {
     lock: lock?.components ?? [],
     cloud: cloud.components
   });
+  const unpinned = new Map;
+  for (const entry of manifest.skills) {
+    try {
+      const parsed = parseSkillSource2(entry.source);
+      if (parsed.kind === "registry" && !parsed.version && parsed.creator) {
+        unpinned.set(`${parsed.creator}/${parsed.slug}`, {
+          creator: parsed.creator,
+          slug: parsed.slug
+        });
+      }
+    } catch {}
+  }
+  const latestByName = new Map;
+  if (unpinned.size > 0) {
+    await Promise.all([...unpinned.entries()].map(async ([name, ref]) => {
+      try {
+        const pkg = await skillsApi.getPackage(ref.creator, ref.slug);
+        if (pkg.latest_version?.version) {
+          latestByName.set(name, pkg.latest_version.version);
+        }
+      } catch {}
+    }));
+  }
+  const skillUpdates = planRegistrySkillUpdates(manifest.skills, cloud.components, latestByName);
+  const resolvedVersions = new Map(skillUpdates.map((u2) => [u2.componentSlug, u2.latest]));
+  for (const u2 of skillUpdates) {
+    const row = rows.find((r2) => r2.key === compKey("skill", u2.componentSlug));
+    if (row && (row.status === "in-sync" || row.status === "modified-cloud" || row.status === "added-local")) {
+      row.status = "modified-local";
+    }
+  }
   let cloudMeta = lock?.agentMeta;
   if (!cloudMeta) {
     try {
@@ -53673,6 +53778,16 @@ async function runAgentPush(cwd2, args) {
     }
     f2.info(`If you push now, your push targets revision ${cloud.revision} and may race. Consider \`brainbase agent pull\` first.`);
   }
+  const sendKeys = new Set(toSend.map((r2) => r2.key));
+  for (const u2 of skillUpdates) {
+    if (!sendKeys.has(compKey("skill", u2.componentSlug)))
+      continue;
+    if (u2.direction === "downgrade") {
+      f2.warn(`Skill ${import_picocolors27.default.bold(u2.name)}: registry latest is ${import_picocolors27.default.bold(u2.latest)}, below the agent's ${import_picocolors27.default.dim(u2.current)} — the agent's version was likely yanked. Converging on latest.`);
+    } else {
+      f2.info(`Skill ${import_picocolors27.default.bold(u2.name)} → ${import_picocolors27.default.bold(u2.latest)} (registry latest${u2.current ? `, agent has ${u2.current}` : ""}).`);
+    }
+  }
   const resultRows = [];
   if (meta.localChanged) {
     resultRows.push({
@@ -53727,7 +53842,7 @@ async function runAgentPush(cwd2, args) {
       return handleApiError3(err);
     }
   }
-  const outgoing = await buildOutgoingComponents(cwd2, manifest, cloud);
+  const outgoing = await buildOutgoingComponents(cwd2, manifest, cloud, resolvedVersions);
   if (outgoing === null)
     return;
   const pushSpinner = de();
@@ -54708,7 +54823,8 @@ async function runAgent(cwd2, sub, args, opts) {
         yes: opts.yes,
         scope: opts.scope,
         agentIdArg: args[0],
-        force: opts.force
+        force: opts.force,
+        runEntrypoint: opts.runEntrypoint
       });
       return;
     case "push":
@@ -54746,7 +54862,7 @@ function printHelp() {
   out.push(`  ${import_picocolors32.default.bold("brainbase agent")} ${import_picocolors32.default.dim("<sub> [options]")}`);
   out.push("");
   out.push(`  ${import_picocolors32.default.cyan("create")}             ${import_picocolors32.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
-  out.push(`  ${import_picocolors32.default.cyan("pull")} ${import_picocolors32.default.dim("[<id>]")}      ${import_picocolors32.default.dim("apply cloud changes into this folder — pass <id> to switch (--force to override)")}`);
+  out.push(`  ${import_picocolors32.default.cyan("pull")} ${import_picocolors32.default.dim("[<id>]")}      ${import_picocolors32.default.dim("apply cloud changes into this folder — pass <id> to switch (--force to override); --run-entrypoint to also execute the agent entrypoint")}`);
   out.push(`  ${import_picocolors32.default.cyan("push")}               ${import_picocolors32.default.dim("send local changes to the cloud")}`);
   out.push(`  ${import_picocolors32.default.cyan("unpack")}             ${import_picocolors32.default.dim("install the claimed agent into a harness layout (--harness to override)")}`);
   out.push(`  ${import_picocolors32.default.cyan("status")}             ${import_picocolors32.default.dim("show what would push and what would pull")}`);
@@ -56679,7 +56795,7 @@ function help() {
   out.push(divider("LINKED AGENT"));
   out.push("");
   out.push(`  ${import_picocolors41.default.cyan("agent create")}               ${import_picocolors41.default.dim("claim an unclaimed brainbase.agent.yaml and create the cloud agent")}`);
-  out.push(`  ${import_picocolors41.default.cyan("agent pull")} ${import_picocolors41.default.dim("[<id>]")}          ${import_picocolors41.default.dim("bring cloud changes into this folder (--force to override)")}`);
+  out.push(`  ${import_picocolors41.default.cyan("agent pull")} ${import_picocolors41.default.dim("[<id>]")}          ${import_picocolors41.default.dim("bring cloud changes into this folder (--force to override; --run-entrypoint to also execute the agent entrypoint)")}`);
   out.push(`  ${import_picocolors41.default.cyan("agent push")}                 ${import_picocolors41.default.dim("send local changes to the cloud")}`);
   out.push(`  ${import_picocolors41.default.cyan("agent unpack")}               ${import_picocolors41.default.dim("install the claimed agent into a harness layout")}`);
   out.push(`  ${import_picocolors41.default.cyan("link")}                       ${import_picocolors41.default.dim("attach this folder to an existing agent")}`);
@@ -56743,6 +56859,7 @@ function help() {
   out.push(`  ${import_picocolors41.default.dim("BRAINBASE_TOKEN")}        long-lived CLI PAT (overrides token.json)`);
   out.push(`  ${import_picocolors41.default.dim("BRAINBASE_SKIP_AUTH")}    bypass the auth gate for development`);
   out.push(`  ${import_picocolors41.default.dim("BRAINBASE_NON_INTERACTIVE")} force non-interactive mode — skip/auto-default prompts (CI & agents)`);
+  out.push(`  ${import_picocolors41.default.dim("BRAINBASE_RUN_ENTRYPOINT")} =1 → agent pull executes the agent entrypoint (sandbox boots; or pass --run-entrypoint)`);
   out.push("");
   out.push(divider("HARNESSES"));
   out.push("");
@@ -56847,6 +56964,7 @@ async function main() {
   const noTracking = hasFlag2(argv, "--no-tracking");
   const track = hasFlag2(argv, "--track");
   const forceFlag = hasFlag2(argv, "--force");
+  const runEntrypointFlag = hasFlag2(argv, "--run-entrypoint");
   const graphOnlyFlag = hasFlag2(argv, "--graph-only");
   const nameFlag = getFlag(argv, "--name");
   const skillVersionFlag = getFlag(argv, "--skill-version");
@@ -56938,7 +57056,8 @@ async function main() {
           teamId: teamIdFlag,
           noTracking,
           track,
-          force: forceFlag
+          force: forceFlag,
+          runEntrypoint: runEntrypointFlag
         });
         break;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainbase-labs/cli",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Pack, share, and install agent templates across harnesses (Claude Code, Codex, ...).",
   "type": "module",
   "bin": {