@dashai/cli 0.18.1 → 0.18.3

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 DashWise
+Copyright (c) 2026 Dashwise
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,6 +1,6 @@
 # @dashai/cli
 
-`dashwise` — the DashWise command-line tool. Log in, author modules, publish to the marketplace.
+`dashwise` — the Dashwise command-line tool. Log in, author modules, publish to the marketplace.
 
 > **New here?** Start with the [building modules walk-through](../../docs/building-modules.md) — covers the full first-module flow (login → scaffold → dev → publish) with diagrams of the auth flow and an annotated manifest. This file is the per-command reference; the walk-through is the tutorial.
 
@@ -107,7 +107,7 @@ Requires `dashwise login` first — the command refuses to start if no token is
 
 ### `dashwise init [slug]` / `dashwise module init [slug]`
 
-Scaffold a new DashWise module in a fresh directory. `dashwise init` is a top-level alias for `dashwise module init` — both accept the same flags. Two flavors:
+Scaffold a new Dashwise module in a fresh directory. `dashwise init` is a top-level alias for `dashwise module init` — both accept the same flags. Two flavors:
 
 **Custom** (default since 2026-05-18) — full Next.js App Router app with SDK auth wired in (machine runtime, lands on Fly Machines once P7 ships). Files: `module.json`, `package.json`, `tsconfig.json`, `next.config.mjs`, `next-env.d.ts`, `middleware.ts` (uses `@dashai/sdk/auth/middleware`), `app/layout.tsx`, `app/page.tsx`, `app/dashboard/page.tsx` (auth-gated Server Component example), three `app/api/auth/*` route handlers, shadcn primitives + a `globals.css`, plus `CLAUDE.md` / `spec.md` / `agent-log.md` agent-facing docs. `module.json` carries `module_kind: 'custom'` + `runtime.kind: 'machine'`.
 

package/dist/bin.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
+import pc from 'picocolors';
 import { existsSync, readFileSync, writeFileSync, rmSync, mkdirSync, watch, readdirSync, chmodSync, renameSync, mkdtempSync, statSync } from 'fs';
 import { tmpdir, platform, homedir } from 'os';
 import { resolve, join, relative, dirname, basename, sep } from 'path';
-import pc from 'picocolors';
 import { spawn, spawnSync } from 'child_process';
 import { intro, log, select, isCancel, cancel, spinner, outro, text, multiselect, confirm } from '@clack/prompts';
 import { Command, Option } from 'commander';
@@ -20,6 +20,41 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+function success(msg) {
+  process.stderr.write(`${pc.green("\u2713")} ${msg}
+`);
+}
+function info(msg) {
+  process.stderr.write(`${pc.cyan("\u2139")} ${msg}
+`);
+}
+function warn(msg) {
+  process.stderr.write(`${pc.yellow("\u26A0")} ${msg}
+`);
+}
+function fail(msg) {
+  process.stderr.write(`${pc.red("\u2717")} ${msg}
+`);
+}
+function out(msg) {
+  process.stdout.write(`${msg}
+`);
+}
+function kv(key, value, padTo = 14) {
+  const padded = key.padEnd(padTo);
+  process.stdout.write(`${pc.bold(padded)} ${value}
+`);
+}
+function code(s) {
+  return pc.cyan(s);
+}
+function dim(s) {
+  return pc.dim(s);
+}
+var init_output = __esm({
+  "src/lib/output.ts"() {
+  }
+});
 function configDir() {
   if (process.env.XDG_CONFIG_HOME) {
     return join(process.env.XDG_CONFIG_HOME, DIR_NAME);
@@ -499,41 +534,6 @@ var init_api_client = __esm({
     };
   }
 });
-function success(msg) {
-  process.stderr.write(`${pc.green("\u2713")} ${msg}
-`);
-}
-function info(msg) {
-  process.stderr.write(`${pc.cyan("\u2139")} ${msg}
-`);
-}
-function warn(msg) {
-  process.stderr.write(`${pc.yellow("\u26A0")} ${msg}
-`);
-}
-function fail(msg) {
-  process.stderr.write(`${pc.red("\u2717")} ${msg}
-`);
-}
-function out(msg) {
-  process.stdout.write(`${msg}
-`);
-}
-function kv(key, value, padTo = 14) {
-  const padded = key.padEnd(padTo);
-  process.stdout.write(`${pc.bold(padded)} ${value}
-`);
-}
-function code(s) {
-  return pc.cyan(s);
-}
-function dim(s) {
-  return pc.dim(s);
-}
-var init_output = __esm({
-  "src/lib/output.ts"() {
-  }
-});
 
 // src/lib/connect-status.ts
 async function reportConnectStatus(opts) {
@@ -1194,7 +1194,7 @@ async function resolveTargetWorkspace(apiUrl, apiToken, flag) {
   );
   if (workspaces.length === 0) {
     throw new Error(
-      "No workspaces found for your account. Create a workspace at the DashWise dashboard first."
+      "No workspaces found for your account. Create a workspace at the Dashwise dashboard first."
     );
   }
   if (flag === void 0) {
@@ -3761,7 +3761,7 @@ async function selectWorkspace(opts) {
   );
   if (workspaces.length === 0) {
     throw new Error(
-      "No workspaces found for your account. Create a workspace at the DashWise dashboard first."
+      "No workspaces found for your account. Create a workspace at the Dashwise dashboard first."
     );
   }
   if (opts.flag !== void 0) {
@@ -3811,7 +3811,7 @@ var init_workspaces = __esm({
   }
 });
 async function moduleInitCommand(slugArg, options) {
-  intro("Scaffolding a new DashWise module");
+  intro("Scaffolding a new Dashwise module");
   let slug = slugArg;
   if (!slug && process.stdout.isTTY) {
     const answer = await text({
@@ -4148,7 +4148,7 @@ function surfaceProvisionApiError(err, slug) {
       return;
     case "FORBIDDEN":
       warn(
-        `Not authorized to create a module in that workspace. Confirm you're a member at the DashWise dashboard.`
+        `Not authorized to create a module in that workspace. Confirm you're a member at the Dashwise dashboard.`
       );
       return;
     case "DEV_INSTALL_ALREADY_EXISTS": {
@@ -5278,7 +5278,81 @@ var init_set_type = __esm({
   }
 });
 
+// src/lib/excess-args.ts
+init_output();
+var SMART_DASH_RE = /^[‒–—―−]/;
+var ExcessArgumentsError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ExcessArgumentsError";
+  }
+};
+function commandPath(cmd) {
+  const parts = [];
+  let cursor = cmd;
+  while (cursor) {
+    parts.unshift(cursor.name());
+    cursor = cursor.parent;
+  }
+  return parts.join(" ");
+}
+function excessOperandsError(actionCommand) {
+  const registered = actionCommand.registeredArguments;
+  if (registered.length > 0 && registered[registered.length - 1].variadic) {
+    return null;
+  }
+  const operands = actionCommand.args;
+  const stray = operands.slice(registered.length);
+  const accepted = operands.slice(0, registered.length);
+  const smartDashAccepted = accepted.filter((s) => SMART_DASH_RE.test(s));
+  if (stray.length === 0 && smartDashAccepted.length === 0) return null;
+  const path = commandPath(actionCommand);
+  const expects = registered.length === 0 ? "takes no positional arguments" : `takes at most ${registered.length} positional argument${registered.length > 1 ? "s" : ""} (${registered.map((a) => `${a.required ? "<" : "["}${a.name()}${a.required ? ">" : "]"}`).join(" ")})`;
+  const lines = [];
+  if (stray.length > 0) {
+    lines.push(
+      `Unexpected argument${stray.length > 1 ? "s" : ""} ${stray.map((s) => `"${s}"`).join(", ")} \u2014 ${code(path)} ${expects}.`
+    );
+  }
+  for (const tok of smartDashAccepted) {
+    const slot = registered[accepted.indexOf(tok)];
+    lines.push(
+      `"${tok}" was read as the ${slot ? `<${slot.name()}>` : "positional"} argument but looks like a flag typed with a typographic dash (\u2013 / \u2014) instead of ASCII "--".`
+    );
+  }
+  if ([...stray, ...smartDashAccepted].some((s) => SMART_DASH_RE.test(s))) {
+    lines.push(
+      `A token starts with a typographic dash (\u2013 / \u2014) instead of ASCII "--". If this command was copy-pasted, the editor/chat likely rewrote the double hyphen \u2014 retype the flag by hand (e.g. ${code("--force")}, ${code("--grant")}).`
+    );
+  }
+  if (stray.some((s) => /^(module|datahub):/.test(s)) && actionCommand.options.some((o) => o.long === "--grant")) {
+    lines.push(
+      `Grant specs must be passed via the (repeatable) ${code("--grant")} flag, e.g. ${code("--grant module:employees:create,read")}.`
+    );
+  }
+  if (stray.some((s) => s.startsWith("--"))) {
+    lines.push(
+      `Tokens after a bare ${code("--")} separator are treated as plain arguments, not flags \u2014 remove the ${code("--")}.`
+    );
+  }
+  lines.push(
+    "Refusing to continue: silently ignoring these arguments is how grantless (deny-all) API keys \u2014 or half-applied commands \u2014 happen by accident."
+  );
+  return lines.join("\n  ");
+}
+function installExcessArgumentsGuard(program2) {
+  program2.hook("preAction", (_thisCommand, actionCommand) => {
+    const message = excessOperandsError(actionCommand);
+    if (message === null) return;
+    fail(message);
+    throw new ExcessArgumentsError(message);
+  });
+}
+
 // src/bin.ts
+init_output();
+
+// src/program.ts
 init_dev();
 
 // src/commands/login.ts
@@ -6064,7 +6138,7 @@ async function moduleConvertCommand(opts) {
       ...opts.name !== void 0 ? { name: opts.name } : {},
       ...opts.git !== void 0 ? { repositoryUrl: opts.git } : {}
     });
-    console.log(`Converted "${result.name}" (slug: ${result.slug}) to a DashWise module.
+    console.log(`Converted "${result.name}" (slug: ${result.slug}) to a Dashwise module.
 `);
     if (result.created.length) {
       console.log("  Created:");
@@ -6087,7 +6161,7 @@ async function moduleConvertCommand(opts) {
       for (const w of result.warnings) console.log(`    ! ${w}`);
     }
     console.log(
-      "\nNext: `npm install`, then `dashwise dev` to run it against DashWise, or `dashwise module publish` to deploy."
+      "\nNext: `npm install`, then `dashwise dev` to run it against Dashwise, or `dashwise module publish` to deploy."
     );
     return 0;
   } catch (err) {
@@ -6349,7 +6423,7 @@ ${issues}
     );
   }
   info(
-    `Next: ${code("dashwise dev")} to run it against DashWise, or ${code("dashwise module publish")} to deploy.${tablesApplied === 0 ? ` Add tables with ${code("dashwise table create")}.` : ""}`
+    `Next: ${code("dashwise dev")} to run it against Dashwise, or ${code("dashwise module publish")} to deploy.${tablesApplied === 0 ? ` Add tables with ${code("dashwise table create")}.` : ""}`
   );
   return 0;
 }
@@ -6676,7 +6750,7 @@ async function moduleDiffCommand(options) {
   return 0;
 }
 
-// src/bin.ts
+// src/program.ts
 init_init();
 
 // src/commands/module/install.ts
@@ -9714,7 +9788,7 @@ function surfacePullFailure(err) {
   return 1;
 }
 
-// src/bin.ts
+// src/program.ts
 init_scaffold();
 
 // src/commands/api-keys.ts
@@ -9722,32 +9796,6 @@ init_api_client();
 init_config();
 init_manifest_io();
 init_output();
-var SMART_DASH_RE = /^[‒–—―−]/;
-function strayArgsError(stray, usage) {
-  if (!stray || stray.length === 0) return null;
-  const lines = [
-    `Unexpected argument${stray.length > 1 ? "s" : ""} ${stray.map((s) => `"${s}"`).join(", ")} \u2014 ${usage}`
-  ];
-  if (stray.some((s) => SMART_DASH_RE.test(s))) {
-    lines.push(
-      `A token starts with a typographic dash (\u2013 / \u2014) instead of ASCII "--". If this command was copy-pasted, the editor/chat likely rewrote the double hyphen \u2014 retype the flag by hand (e.g. ${code("--grant")}, ${code("--full-access")}).`
-    );
-  }
-  if (stray.some((s) => /^(module|datahub):/.test(s))) {
-    lines.push(
-      `Grant specs must be passed via the (repeatable) ${code("--grant")} flag, e.g. ${code("--grant module:employees:create,read")}.`
-    );
-  }
-  if (stray.some((s) => s.startsWith("--"))) {
-    lines.push(
-      `Tokens after a bare ${code("--")} separator are treated as plain arguments, not flags \u2014 remove the ${code("--")}.`
-    );
-  }
-  lines.push(
-    "Refusing to continue: silently ignoring these arguments is how grantless (deny-all) keys get minted by accident."
-  );
-  return lines.join("\n  ");
-}
 function loadContext4(opts) {
   const cfg = readConfig();
   if (!cfg) {
@@ -9813,14 +9861,6 @@ async function resolveInstallKind(ctx) {
   return void 0;
 }
 async function apiKeysListCommand(options) {
-  const strayErr = strayArgsError(
-    options.stray,
-    "`dashwise api-keys list` takes no positional arguments."
-  );
-  if (strayErr) {
-    fail(strayErr);
-    return 1;
-  }
   let ctx;
   try {
     ctx = loadContext4(options);
@@ -9871,20 +9911,6 @@ async function apiKeysListCommand(options) {
   return 0;
 }
 async function apiKeysCreateCommand(nameArg, options) {
-  if (nameArg !== void 0 && SMART_DASH_RE.test(nameArg)) {
-    fail(
-      `"${nameArg}" was read as the key NAME but looks like a flag typed with a typographic dash (\u2013 / \u2014) instead of ASCII "--". If this command was copy-pasted, the editor/chat likely rewrote the double hyphen \u2014 retype the flag by hand (e.g. ${code("--grant")}, ${code("--full-access")}).`
-    );
-    return 1;
-  }
-  const strayErr = strayArgsError(
-    options.stray,
-    "`dashwise api-keys create` takes a single <name>."
-  );
-  if (strayErr) {
-    fail(strayErr);
-    return 1;
-  }
   const name = nameArg ?? options.name;
   if (!name) {
     fail("Usage: `dashwise api-keys create <name>` (e.g. `dashwise api-keys create production`)");
@@ -9973,14 +9999,6 @@ async function apiKeysCreateCommand(nameArg, options) {
   return 0;
 }
 async function apiKeysRevokeCommand(keyIdArg, options) {
-  const strayErr = strayArgsError(
-    options.stray,
-    "`dashwise api-keys revoke` takes a single <key-id> \u2014 extra ids would be silently skipped."
-  );
-  if (strayErr) {
-    fail(strayErr);
-    return 1;
-  }
   if (!keyIdArg) {
     fail("Usage: `dashwise api-keys revoke <key-id>` \u2014 id from `dashwise api-keys list`");
     return 1;
@@ -10479,7 +10497,7 @@ async function envExportCommand(options) {
     {
       key: "DASHWISE_API_URL",
       value: apiUrl,
-      comment: "# DashWise backend URL \u2014 same value the CLI is logged into."
+      comment: "# Dashwise backend URL \u2014 same value the CLI is logged into."
     },
     {
       key: "DASHWISE_API_KEY",
@@ -11430,12 +11448,12 @@ async function sleep4(ms, aborted) {
   }
 }
 
-// src/bin.ts
+// src/program.ts
 init_output();
 var program = new Command();
-program.name("dashwise").description("DashWise CLI \u2014 log in, author modules, publish to the marketplace.").version(getVersion(), "-v, --version", "Show the CLI version + exit").option(
+program.name("dashwise").description("Dashwise CLI \u2014 log in, author modules, publish to the marketplace.").version(getVersion(), "-v, --version", "Show the CLI version + exit").option(
   "--api-url <url>",
-  "Override DashWise backend URL (default: $DASHWISE_API_URL or saved config or http://localhost:3000)"
+  "Override Dashwise backend URL (default: $DASHWISE_API_URL or saved config or http://localhost:3000)"
 );
 program.hook("preAction", () => {
   const apiUrl = program.opts().apiUrl?.trim();
@@ -11443,6 +11461,7 @@ program.hook("preAction", () => {
     process.env.DASHWISE_API_URL = apiUrl.replace(/\/+$/, "");
   }
 });
+installExcessArgumentsGuard(program);
 program.command("login").description("Sign in via the device-code flow.").option("--no-prompt", 'Skip the "open browser" prompt; just print the URL.').option("--name <name>", "Suggested name for the minted token (default: dashwise-cli).").action(async (cmdOpts) => {
   const apiUrl = program.opts().apiUrl;
   const exit = await loginCommand({
@@ -11470,7 +11489,7 @@ workspace.command("use <slug>").description("Set the default workspace for subse
   process.exitCode = await workspaceUseCommand(slug);
 });
 program.command("dev").description(
-  "One-command local dev loop: runs the manifest watcher + Next.js dev server together. Registers a dev-mode SSO session with the backend so workspace members can sign into your locally-running module via DashWise SSO (no installation_id required). Auth + dev-session env auto-injected into both child processes from your saved CLI config. Run `dashwise login` first."
+  "One-command local dev loop: runs the manifest watcher + Next.js dev server together. Registers a dev-mode SSO session with the backend so workspace members can sign into your locally-running module via Dashwise SSO (no installation_id required). Auth + dev-session env auto-injected into both child processes from your saved CLI config. Run `dashwise login` first."
 ).option("--dir <path>", "Project root containing `module.json` (default: current directory).").option(
   "--installation-id <id>",
   "Use prod-mode SSO with this installation id instead of registering a dev session. The installation must already exist in the target workspace."
@@ -11547,13 +11566,13 @@ var initAction = async (slugArg, cmdOpts) => {
 };
 initOptions(
   program.command("init [slug]").description(
-    "Scaffold a new DashWise module \u2014 full Next.js app with auth wiring + SSO callback + protected dashboard. Pass --simple for the legacy minimal scaffold (no auth). Top-level alias for `dashwise module init`."
+    "Scaffold a new Dashwise module \u2014 full Next.js app with auth wiring + SSO callback + protected dashboard. Pass --simple for the legacy minimal scaffold (no auth). Top-level alias for `dashwise module init`."
   )
 ).action(initAction);
 var moduleCmd = program.command("module").description("Module authoring commands.");
 initOptions(
   moduleCmd.command("init [slug]").description(
-    "Scaffold a new DashWise module \u2014 full Next.js app with auth wiring + SSO callback + protected dashboard. Pass --simple for the legacy minimal scaffold (no auth)."
+    "Scaffold a new Dashwise module \u2014 full Next.js app with auth wiring + SSO callback + protected dashboard. Pass --simple for the legacy minimal scaffold (no auth)."
   )
 ).action(initAction);
 moduleCmd.command("connect-git <repo-url>").description("Link the local module to a Git repository (writes module.json#repository).").option("--dir <path>", "Project root (default: current directory).").option("--branch <name>", "Default branch to publish from (e.g. `main`).").action(
@@ -11565,7 +11584,7 @@ moduleCmd.command("connect-git <repo-url>").description("Link the local module t
   }
 );
 moduleCmd.command("convert [dir]").description(
-  "Convert an EXISTING Next.js app into a DashWise module \u2014 idempotently inject module.json, auth wiring, the SDK dep, and output:standalone. Creates missing files; warns (never overwrites) for an existing layout/next.config/module.json."
+  "Convert an EXISTING Next.js app into a Dashwise module \u2014 idempotently inject module.json, auth wiring, the SDK dep, and output:standalone. Creates missing files; warns (never overwrites) for an existing layout/next.config/module.json."
 ).option("--slug <slug>", "Module slug (default: derived from package.json name / dir).").option("--name <name>", "Human-readable module name (default: package.json name).").option("--git <url>", "Git repository URL \u2014 written to module.json#repository.url.").action(
   async (dir, cmdOpts) => {
     process.exitCode = await moduleConvertCommand({
@@ -11577,7 +11596,7 @@ moduleCmd.command("convert [dir]").description(
   }
 );
 moduleCmd.command("register [dir]").description(
-  "Link an existing local module (a directory with module.json \u2014 e.g. after `module convert`) to DashWise: creates the backend module record + a dev install and caches the runtime token, so `dashwise dev` / `publish` work. Requires login."
+  "Link an existing local module (a directory with module.json \u2014 e.g. after `module convert`) to Dashwise: creates the backend module record + a dev install and caches the runtime token, so `dashwise dev` / `publish` work. Requires login."
 ).option("--workspace <slug-or-id>", "Target workspace (default: interactive picker).").option("--name <name>", "Override the module name (default: module.json name).").action(
   async (dir, cmdOpts) => {
     process.exitCode = await moduleRegisterCommand({
@@ -11792,7 +11811,7 @@ program.command("query").description(
   }
 );
 program.command("run [cmd...]").description(
-  "Run a command with the module's DashWise env injected \u2014 resolves DASHWISE_API_URL + DASHWISE_API_KEY through the same chain as `dashwise query` (explicit env \u2192 .env.local \u2192 the cached dwk_ key) and spawns the command with them overlaid, inheriting stdio and propagating the exit code. Example: `dashwise run -- node seed.mjs`."
+  "Run a command with the module's Dashwise env injected \u2014 resolves DASHWISE_API_URL + DASHWISE_API_KEY through the same chain as `dashwise query` (explicit env \u2192 .env.local \u2192 the cached dwk_ key) and spawns the command with them overlaid, inheriting stdio and propagating the exit code. Example: `dashwise run -- node seed.mjs`."
 ).option("--dir <path>", "Project root containing `module.json` (default: current directory).").action(async (cmdArgs, cmdOpts) => {
   const { runCommand: runCommand2 } = await Promise.resolve().then(() => (init_run(), run_exports));
   process.exitCode = await runCommand2(cmdArgs ?? [], {
@@ -11817,15 +11836,12 @@ apiKeysCmd.command("list").description(
   "Target a specific installation id instead of the cached dev install (production installs included). Find ids via `dashwise module status <slug>`.",
   parseIntOption
 ).option("--all", "Include revoked + expired keys in the output.").option("--json", "Emit JSON instead of the human-friendly table.").action(
-  async (cmdOpts, cmd) => {
+  async (cmdOpts) => {
     process.exitCode = await apiKeysListCommand({
       ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
       ...cmdOpts.install !== void 0 ? { install: cmdOpts.install } : {},
       ...cmdOpts.all !== void 0 ? { all: cmdOpts.all } : {},
-      ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {},
-      // Operands commander would otherwise SILENTLY drop (default
-      // allowExcessArguments) — the command hard-errors on them.
-      ...cmd.args.length > 0 ? { stray: cmd.args } : {}
+      ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
     });
   }
 );
@@ -11851,8 +11867,7 @@ apiKeysCmd.command("create [name]").description(
   "--raw-only",
   "Print only the plaintext key on stdout; chatter goes to stderr. Useful for shell capture: `KEY=$(dashwise api-keys create prod --raw-only)`"
 ).action(
-  async (nameArg, cmdOpts, cmd) => {
-    const stray = cmd.args.slice(1);
+  async (nameArg, cmdOpts) => {
     process.exitCode = await apiKeysCreateCommand(nameArg, {
       ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
       ...cmdOpts.install !== void 0 ? { install: cmdOpts.install } : {},
@@ -11860,8 +11875,7 @@ apiKeysCmd.command("create [name]").description(
       ...cmdOpts.grant !== void 0 && cmdOpts.grant.length > 0 ? { grant: cmdOpts.grant } : {},
       ...cmdOpts.fullAccess !== void 0 ? { fullAccess: cmdOpts.fullAccess } : {},
       ...cmdOpts.expires !== void 0 ? { expires: cmdOpts.expires } : {},
-      ...cmdOpts.rawOnly !== void 0 ? { rawOnly: cmdOpts.rawOnly } : {},
-      ...stray.length > 0 ? { stray } : {}
+      ...cmdOpts.rawOnly !== void 0 ? { rawOnly: cmdOpts.rawOnly } : {}
     });
   }
 );
@@ -11872,13 +11886,11 @@ apiKeysCmd.command("revoke [key-id]").description(
   "Target a specific installation id instead of the cached dev install (production installs included). Find ids via `dashwise module status <slug>`.",
   parseIntOption
 ).option("-y, --yes", "Skip the per-key confirmation message (for CI / scripts).").action(
-  async (keyIdArg, cmdOpts, cmd) => {
-    const stray = cmd.args.slice(1);
+  async (keyIdArg, cmdOpts) => {
     process.exitCode = await apiKeysRevokeCommand(keyIdArg, {
       ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
       ...cmdOpts.install !== void 0 ? { install: cmdOpts.install } : {},
-      ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {},
-      ...stray.length > 0 ? { stray } : {}
+      ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {}
     });
   }
 );
@@ -11920,7 +11932,7 @@ originsCmd.command("remove <url>").description("Remove an SSO callback origin fr
 });
 var envCmd = program.command("env").description("Environment-variable helpers for deploying a module.");
 envCmd.command("export").description(
-  "Emit the env vars a deployed module needs to authenticate against DashWise. By default emits .env-style KEY=value lines; --format = env | json | railway | vercel | fly to wrap in platform-native syntax. Use --new-key <name> to mint + inline an API key in one step."
+  "Emit the env vars a deployed module needs to authenticate against Dashwise. By default emits .env-style KEY=value lines; --format = env | json | railway | vercel | fly to wrap in platform-native syntax. Use --new-key <name> to mint + inline an API key in one step."
 ).option("--dir <path>", "Project root (default: current directory).").option(
   "--format <fmt>",
   "Output format: env | json | railway | vercel | fly (default: env)."
@@ -12213,19 +12225,8 @@ fieldCmd.command("set-type <table-slug> <field-slug> <new-type>").description(
     );
   }
 );
-(async () => {
-  try {
-    await program.parseAsync(process.argv);
-  } catch (err) {
-    fail(`Unhandled error: ${err.message ?? String(err)}`);
-    if (process.env.DASHWISE_DEBUG) {
-      console.error(err);
-    }
-    process.exitCode = 1;
-  }
-})();
 function getVersion() {
-  return "0.18.1";
+  return "0.18.3";
 }
 function parseIntOption(value) {
   const n = Number.parseInt(value, 10);
@@ -12237,5 +12238,22 @@ function parseIntOption(value) {
 function collectRepeated(value, previous) {
   return [...previous, value];
 }
+
+// src/bin.ts
+(async () => {
+  try {
+    await program.parseAsync(process.argv);
+  } catch (err) {
+    if (err instanceof ExcessArgumentsError) {
+      process.exitCode = 1;
+      return;
+    }
+    fail(`Unhandled error: ${err.message ?? String(err)}`);
+    if (process.env.DASHWISE_DEBUG) {
+      console.error(err);
+    }
+    process.exitCode = 1;
+  }
+})();
 //# sourceMappingURL=bin.js.map
 //# sourceMappingURL=bin.js.map