@dashclaw/cli 0.6.2 → 0.7.1

package/README.md

@@ -66,6 +66,15 @@ Stop the local server (and the Docker DB if `up` started it).
 npx dashclaw down
 ```
 
+### `dashclaw import <bundle.json>`
+
+Load a workspace carry-out bundle — the file **Export workspace** downloads on a trial's `/connect` card (or `GET /api/workspace/export` on any instance) — into the configured instance. Policies, guard decisions, action records, open loops, assumptions, and agent identities carry over; API keys, OAuth tokens, and secret values never ride a bundle. Idempotent: re-running skips rows that already exist.
+
+```bash
+DASHCLAW_BASE_URL=http://localhost:3000 DASHCLAW_API_KEY=oc_live_... \
+  dashclaw import dashclaw-workspace-*.json
+```
+
 ### `dashclaw approvals`
 
 Interactive inbox for all pending approval requests. Use arrow keys to navigate, `A` to approve, `D` to deny, `O` to open the replay link, `Q` to quit.

package/bin/dashclaw.js

@@ -86,6 +86,8 @@ ${bold('Usage:')}
     --port <n>                           Server port (default: 3000)
     --no-browser                         Do not open the browser when ready
   dashclaw down                          Stop the local DashClaw server (and Docker DB if we started it)
+  dashclaw import <bundle.json>          Import a workspace carry-out bundle (from /api/workspace/export)
+                                         into this instance — idempotent; keys/secrets never ride a bundle
   dashclaw approvals                     Interactive approval inbox
   dashclaw approve <actionId> [--reason]  Approve an action
   dashclaw deny <actionId> [--reason]     Deny an action
@@ -565,6 +567,38 @@ async function cmdInstall() {
   }
 }
 
+// -- import (v7.2 graduation path) --------------------------------------------
+
+/*
+ * Ingest a workspace carry-out bundle (the file /api/workspace/export
+ * downloads) into the configured instance. HTTP like every other post-up
+ * command; the route is idempotent so re-running is safe.
+ */
+async function cmdImport() {
+  const file = args[1];
+  if (!file || file.startsWith('--')) {
+    console.error('Usage: dashclaw import <bundle.json>   (the file downloaded from your trial\'s "Export workspace")');
+    process.exitCode = 1;
+    return;
+  }
+  try {
+    let bundle;
+    try {
+      bundle = JSON.parse(readFileSync(file, 'utf8'));
+    } catch (err) {
+      throw new Error(err.code === 'ENOENT' ? `File not found: ${file}` : `${file} is not valid JSON`);
+    }
+    const data = await apiRequest({ baseUrl, apiKey }, 'POST', '/api/workspace/import', { body: bundle });
+    console.log(green(`Imported ${data.imported} rows (${data.skipped} skipped — already present or missing their id).`));
+    for (const [table, c] of Object.entries(data.counts || {})) {
+      console.log(`  ${table}: +${c.imported}${c.skipped ? ` (${c.skipped} skipped)` : ''}`);
+    }
+  } catch (err) {
+    console.error(red(`Error: ${err.message}`));
+    process.exitCode = 1;
+  }
+}
+
 // -- up / down (one-command local install) -----------------------------------
 
 async function cmdUp() {
@@ -1298,7 +1332,7 @@ async function cmdEnv() {
 
 // -- Router -------------------------------------------------------------------
 
-const COMMANDS_NEEDING_CONFIG = new Set(['approvals', 'approve', 'deny', 'doctor', 'code', 'prompts', 'inbox', 'behavior', 'posture', 'next', 'env', 'halt']);
+const COMMANDS_NEEDING_CONFIG = new Set(['approvals', 'approve', 'deny', 'doctor', 'code', 'prompts', 'inbox', 'behavior', 'posture', 'next', 'env', 'halt', 'import']);
 // `install` deliberately omitted: provisioning hooks and AGENTS.md shouldn't
 // require the user to have already configured API keys. If config happens to
 // be present, install will pick up baseUrl for the AGENTS.md instance link.
@@ -1344,6 +1378,7 @@ const COMMAND_HANDLERS = {
   code: cmdCode,
   up: cmdUp,
   down: cmdDown,
+  import: cmdImport,
   install: cmdInstall,
   codex: cmdCodex,
   prompts: cmdPrompts,

package/lib/up/fetch-app.js

@@ -13,40 +13,55 @@ import * as tar from 'tar';
 const REPO = 'ucsandman/DashClaw';
 
 /**
- * Fetch the latest published platform version from the npm registry.
- * The `dashclaw` npm package version mirrors the platform version (unified versioning).
+ * Resolve the latest installable platform version.
  *
- * npm's version number is only trusted after verifying its git tag exists —
- * a publish that shipped without cutting its tag would otherwise 404 every
- * install. When the tag is missing, fall back to the latest GitHub release.
+ * GitHub releases are the platform-version pointer: a GitHub Release rides
+ * every ship, while npm's `dashclaw` version lags behind on platform-only
+ * releases — the SDK packages republish only when SDK source changes, which
+ * once froze fresh installs at platform 4.63.2 while main was at 4.66.0
+ * (dropping, among others, the workspace-import route that trial graduation
+ * depends on). npm latest stays as the fallback for GitHub API failures or
+ * rate limits; either path is only trusted after a HEAD check confirms the
+ * tag's tarball actually exists.
  *
  * @param {typeof fetch} fetchImpl - injectable for tests
  * @param {{ error: (...args: any[]) => void }} logger
- * @returns {Promise<string>} semver string e.g. '4.21.0'
+ * @returns {Promise<string>} semver string e.g. '4.66.0'
  */
 export async function resolveAppVersion(fetchImpl = fetch, logger = console) {
+  try {
+    const rel = await fetchImpl(`https://api.github.com/repos/${REPO}/releases/latest`, {
+      headers: { accept: 'application/vnd.github+json' },
+    });
+    if (rel.ok) {
+      const tagName = (await rel.json()).tag_name;
+      const version = typeof tagName === 'string' ? tagName.replace(/^v/, '') : null;
+      if (version) {
+        const head = await fetchImpl(tarballUrl(version), { method: 'HEAD' });
+        if (head.ok) return version;
+      }
+    }
+  } catch {
+    // Network/API failure — fall through to the npm path below.
+  }
+
   const res = await fetchImpl('https://registry.npmjs.org/dashclaw/latest');
   if (!res.ok) {
-    throw new Error(`npm registry lookup failed (${res.status}) — check your network and retry.`);
+    throw new Error(
+      `Version lookup failed: GitHub releases unavailable and npm registry answered ${res.status} — check your network and retry.`,
+    );
   }
   const { version } = await res.json();
   if (!version) throw new Error('npm registry returned no version for dashclaw.');
 
   const head = await fetchImpl(tarballUrl(version), { method: 'HEAD' });
-  if (head.ok) return version;
-
-  const rel = await fetchImpl(`https://api.github.com/repos/${REPO}/releases/latest`, {
-    headers: { accept: 'application/vnd.github+json' },
-  });
-  const tagName = rel.ok ? (await rel.json()).tag_name : null;
-  const fallback = typeof tagName === 'string' ? tagName.replace(/^v/, '') : null;
-  if (!fallback) {
+  if (!head.ok) {
     throw new Error(
-      `Tag v${version} (npm latest) is missing on GitHub and no release fallback was found — report this at https://github.com/${REPO}/issues.`,
+      `No installable version found: GitHub releases lookup failed and tag v${version} (npm latest) is missing on GitHub — report this at https://github.com/${REPO}/issues.`,
     );
   }
-  logger.error(`[warn] npm reports ${version} but tag v${version} is missing; using latest GitHub release ${fallback} instead.`);
-  return fallback;
+  logger.error(`[warn] GitHub releases lookup failed; using npm latest ${version} (may lag behind the newest platform release).`);
+  return version;
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dashclaw/cli",
-  "version": "0.6.2",
+  "version": "0.7.1",
   "description": "DashClaw terminal client — approve agent actions and diagnose your instance",
   "type": "module",
   "keywords": [