@eventmodelers/cli 2.0.5 → 2.0.7

package/README.md

@@ -774,6 +774,7 @@ npx @eventmodelers/cli listen --port 4000            # same, on a different port
 npx @eventmodelers/cli re-init                      # refresh the installed build kit (.build-kit/) + its skills
 npx @eventmodelers/cli re-init --modeling            # refresh the modeling kit (.agent-modeling-kit/) + its skills
 npx @eventmodelers/cli re-init --stack supabase      # override which stack to refresh from (manifest missing/stale, or switching stacks)
+npx @eventmodelers/cli scaffold re-init [dir]        # a scaffolded app: refresh every kit in it (root + web/) — `re-init --stack` for each
 ```
 
 `re-init` re-runs `init` against whichever stack `install-manifest.json` says was installed (no need to pass `--stack` again), but skips step 2 of `init` entirely — the root project scaffold (`package.json`, `src/`, `server.ts`, `docker-compose.yml`, etc.) and the root `CLAUDE.md` router are never touched. Use it after upgrading the CLI to pick up fixes to `ralph.js`/skills without re-scaffolding a project you've since built on top of.

package/cli.js

@@ -20,7 +20,7 @@ import { createInterface, emitKeypressEvents, moveCursor, clearScreenDown } from
 import { homedir, tmpdir } from 'os';
 import { randomUUID } from 'crypto';
 import { runFetch, FetchAuthError } from './lib/fetch.js';
-import { SCAFFOLD_TYPES, scaffoldTypeNames, missingPrerequisites, runScaffold, builtInTemplates, initTemplates } from './lib/scaffold.js';
+import { SCAFFOLD_TYPES, scaffoldTypeNames, missingPrerequisites, runScaffold, reinitKits, builtInTemplates, initTemplates } from './lib/scaffold.js';
 import { supervise } from './lib/supervise.js';
 import { findBuildKitDirs } from './lib/build-kits.js';
 import { buildModel } from './lib/scaffold-model.js';
@@ -4228,7 +4228,7 @@ program
 
 program
   .command('scaffold <target> [args...]')
-  .description('`scaffold add-user <email> <password> [dir]` adds a sign-in user to a scaffolded app (run in its folder, or pass dir). Otherwise: generate a runnable app skeleton from the board — sign-in, navigation with one entry per timeline, a page shell per screen, 501 for every unbuilt endpoint, hot reload — and install the build kits of the chosen --type into it, ready for `run` to add slices. <target> is an empty or new directory, or a skeleton made earlier (which is refreshed from the current model).')
+  .description('`scaffold add-user <email> <password> [dir]` adds a sign-in user to a scaffolded app (run in its folder, or pass dir). `scaffold re-init [dir]` refreshes every kit the app has (root and web/) from this CLI version — `re-init --stack` for each, the skeleton itself untouched. Otherwise: generate a runnable app skeleton from the board — sign-in, navigation with one entry per timeline, a page shell per screen, 501 for every unbuilt endpoint, hot reload — and install the build kits of the chosen --type into it, ready for `run` to add slices. <target> is an empty or new directory, or a skeleton made earlier (which is refreshed from the current model).')
   .option('--type <name>', `Kind of app to scaffold (${scaffoldTypeNames().join(', ')})`, 'supabase')
   .option('--no-install', 'Stop after generating the skeleton: no npm install, checks or commit')
   .option('--no-check', 'Install dependencies but skip the type-check, tests and web build/lint')
@@ -4259,6 +4259,24 @@ program
       }
       return;
     }
+    if (target === 're-init') {
+      if (args.length > 1) {
+        console.error('❌ usage: eventmodelers scaffold re-init [dir]');
+        process.exit(1);
+      }
+      if (!SCAFFOLD_TYPES[opts.type]) {
+        console.error(`❌ Unknown --type "${opts.type}". Available: ${scaffoldTypeNames().join(', ')}`);
+        process.exit(1);
+      }
+      try {
+        const refreshed = reinitKits({ typeName: opts.type, target: resolve(process.cwd(), args[0] ?? '.'), cliPath: join(__dirname, 'cli.js') });
+        console.log(`\n✅ ${refreshed.length} kit(s) refreshed to ${CLI_VERSION}${refreshed.length ? `: ${refreshed.join(', ')}` : ''}`);
+      } catch (err) {
+        console.error(`❌ ${err.message}`);
+        process.exit(1);
+      }
+      return;
+    }
     if (args.length) {
       console.error(`❌ Unexpected argument(s): ${args.join(' ')}`);
       process.exit(1);

package/lib/scaffold.js

@@ -222,3 +222,26 @@ export async function runScaffold({ typeName, target, cfg, model, cliPath, insta
   }
   return { root, ports, modelFile };
 }
+
+// `scaffold re-init`: refreshes every kit the type installed in a skeleton from this CLI's version — each through
+// `re-init --stack <its stack>` in its own directory, so the skeleton and the root CLAUDE.md are left alone.
+// Returns the kits refreshed, as their dirs.
+export function reinitKits({ typeName, target, cliPath, log = console.log }) {
+  const type = SCAFFOLD_TYPES[typeName];
+  const root = resolve(target);
+  if (targetState(root) !== 'skeleton') {
+    throw new Error(`${root} is not a scaffolded skeleton (no skeleton.json) — run this in its folder or pass the folder`);
+  }
+  const refreshed = [];
+  for (const kit of type.kits) {
+    const cwd = join(root, kit.dir);
+    if (!existsSync(join(cwd, '.build-kit'))) {
+      log(`▶ ${kit.stack}: not installed in ${kit.dir}, skipping — \`scaffold ${relative(process.cwd(), root) || '.'}\` installs it`);
+      continue;
+    }
+    log(`▶ Refreshing the ${kit.stack} kit in ${kit.dir}`);
+    run(process.execPath, [cliPath, 're-init', '--stack', kit.stack, '--print'], { cwd });
+    refreshed.push(kit.dir);
+  }
+  return refreshed;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eventmodelers/cli",
-  "version": "2.0.5",
+  "version": "2.0.7",
   "description": "Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)",
   "type": "module",
   "bin": {

package/shared/build-kit/lib/tool-call-events.js

@@ -2,15 +2,14 @@
 // runner that sees its agent's individual tool calls records them through here, so every runner logs the same shape.
 
 import { appendEvent } from './slice-events.js';
-import { redactString } from './redact.js';
 
-// Best effort, like the rest of the sharing: a failed write must not cost the build. `detail` is the one-line
-// account of the call's input, with the token and anything JWT-shaped masked — a Bash command can hold
-// credentials, and this log is shared. Only a planned-slice build (`slice.sliceId`) records anything.
-export function recordToolCall({ kitDir, slice, tool, detail, cfg, meta }) {
+// Only the tool's name is recorded — never its input. A Bash command, a skill's arguments or a path can hold
+// credentials or local details, and this log is shared with everyone who can open the board. Best effort, like the
+// rest of the sharing: a failed write must not cost the build. Only a planned-slice build (`slice.sliceId`) records.
+export function recordToolCall({ kitDir, slice, tool, meta }) {
   if (!slice?.sliceId) return;
   try {
-    appendEvent(kitDir, { type: 'tool-call', slice: slice.sliceId, tool, detail: redactString(detail, [cfg?.token]) }, meta);
+    appendEvent(kitDir, { type: 'tool-call', slice: slice.sliceId, tool }, meta);
   } catch (err) {
     console.error(`[ralph] could not record a tool call (${err.message})`);
   }

package/shared/build-kit/ralph-claude.js

@@ -107,7 +107,7 @@ function runClaude(prompt, slice = null, extraEnv = {}) {
           for (const block of msg.message?.content ?? []) {
             if (block.type === 'text' && block.text && verbose) console.log(block.text);
             if (block.type === 'tool_use') {
-              recordToolCall({ kitDir, slice, tool: block.name, detail: describeToolUse(block), cfg, meta: eventMeta(cfg) });
+              recordToolCall({ kitDir, slice, tool: block.name, meta: eventMeta(cfg) });
               if (verbose) console.log(`→ ${describeToolUse(block)}`);
               else if (block.name === 'Skill') console.log(`→ Skill: ${block.input?.skill ?? ''}`);
               else console.log(`→ ${block.name}`);