@feastalytics/cli 0.1.1 → 0.1.2

package/README.md

@@ -16,6 +16,21 @@ Or run without installing:
 npx @feastalytics/cli <command>
 ```
 
+### Staying current
+
+Neither install path updates itself. Once a day the CLI checks npm for a newer
+published version and, if there is one, prints a one-line notice to stderr after
+the command finishes:
+
+```
+Update available: feast 0.1.1 → 0.2.0
+  npx @feastalytics/cli@latest <command>   (or: npm install -g @feastalytics/cli@latest)
+```
+
+The check is skipped when stderr isn't a TTY, when `CI` is set, or when
+`FEAST_NO_UPDATE_CHECK` or `NO_UPDATE_NOTIFIER` is set. It never blocks longer
+than 1.5s and fails silently offline.
+
 ## Usage
 
 ```bash

package/dist/cli.js

@@ -3221,8 +3221,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path2) {
-      let input = path2;
+    function removeDotSegments(path3) {
+      let input = path3;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -3474,8 +3474,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path2, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path2 && path2 !== "/" ? path2 : void 0;
+        const [path3, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path3 && path3 !== "/" ? path3 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -6597,6 +6597,9 @@ function getCredentialsPath() {
   return CREDENTIALS_PATH;
 }
 
+// src/http.ts
+import { createRequire } from "module";
+
 // node_modules/@trpc/server/dist/observable-ade1bad8.mjs
 function identity(x) {
   return x;
@@ -6833,22 +6836,22 @@ var TRPC_ERROR_CODES_BY_NUMBER = invert(TRPC_ERROR_CODES_BY_KEY);
 var TRPC_ERROR_CODES_BY_NUMBER2 = invert(TRPC_ERROR_CODES_BY_KEY);
 var noop = () => {
 };
-function createInnerProxy(callback, path2) {
+function createInnerProxy(callback, path3) {
   const proxy = new Proxy(noop, {
     get(_obj, key) {
       if (typeof key !== "string" || key === "then") {
         return void 0;
       }
       return createInnerProxy(callback, [
-        ...path2,
+        ...path3,
         key
       ]);
     },
     apply(_1, _2, args) {
-      const isApply = path2[path2.length - 1] === "apply";
+      const isApply = path3[path3.length - 1] === "apply";
       return callback({
         args: isApply ? args.length >= 2 ? args[1] : [] : args,
-        path: isApply ? path2.slice(0, -1) : path2
+        path: isApply ? path3.slice(0, -1) : path3
       });
     }
   });
@@ -7260,18 +7263,18 @@ function createHTTPBatchLink(requester) {
           if (maxURLLength === Infinity) {
             return true;
           }
-          const path2 = batchOps.map((op) => op.path).join(",");
+          const path3 = batchOps.map((op) => op.path).join(",");
           const inputs = batchOps.map((op) => op.input);
           const url = getUrl({
             ...resolvedOpts,
             runtime,
             type,
-            path: path2,
+            path: path3,
             inputs
           });
           return url.length <= maxURLLength;
         };
-        const fetch = requester({
+        const fetch2 = requester({
           ...resolvedOpts,
           runtime,
           type,
@@ -7279,7 +7282,7 @@ function createHTTPBatchLink(requester) {
         });
         return {
           validate,
-          fetch
+          fetch: fetch2
         };
       };
       const query = dataLoader(batchLoader("query"));
@@ -7324,11 +7327,11 @@ function createHTTPBatchLink(requester) {
 }
 var batchRequester = (requesterOpts) => {
   return (batchOps) => {
-    const path2 = batchOps.map((op) => op.path).join(",");
+    const path3 = batchOps.map((op) => op.path).join(",");
     const inputs = batchOps.map((op) => op.input);
     const { promise, cancel } = jsonHttpRequester({
       ...requesterOpts,
-      path: path2,
+      path: path3,
       inputs,
       headers() {
         if (!requesterOpts.opts.headers) {
@@ -7362,12 +7365,12 @@ function httpLinkFactory(factoryOpts) {
   return (opts) => {
     const resolvedOpts = resolveHTTPLinkOptions(opts);
     return (runtime) => ({ op }) => observable((observer) => {
-      const { path: path2, input, type } = op;
+      const { path: path3, input, type } = op;
       const { promise, cancel } = factoryOpts.requester({
         ...resolvedOpts,
         runtime,
         type,
-        path: path2,
+        path: path3,
         input,
         headers() {
           if (!opts.headers) {
@@ -7413,13 +7416,13 @@ var httpLink = httpLinkFactory({
 
 // node_modules/@trpc/client/dist/index.mjs
 var TRPCUntypedClient = class {
-  $request({ type, input, path: path2, context = {} }) {
+  $request({ type, input, path: path3, context = {} }) {
     const chain$ = createChain({
       links: this.links,
       op: {
         id: ++this.requestId,
         type,
-        path: path2,
+        path: path3,
         input,
         context
       }
@@ -7439,28 +7442,28 @@ var TRPCUntypedClient = class {
     });
     return abortablePromise;
   }
-  query(path2, input, opts) {
+  query(path3, input, opts) {
     return this.requestAsPromise({
       type: "query",
-      path: path2,
+      path: path3,
       input,
       context: opts?.context,
       signal: opts?.signal
     });
   }
-  mutation(path2, input, opts) {
+  mutation(path3, input, opts) {
     return this.requestAsPromise({
       type: "mutation",
-      path: path2,
+      path: path3,
       input,
       context: opts?.context,
       signal: opts?.signal
     });
   }
-  subscription(path2, input, opts) {
+  subscription(path3, input, opts) {
     const observable$ = this.$request({
       type: "subscription",
-      path: path2,
+      path: path3,
       input,
       context: opts?.context
     });
@@ -7532,10 +7535,10 @@ function createTRPCClientProxy(client) {
     if (key === "__untypedClient") {
       return client;
     }
-    return createRecursiveProxy(({ path: path2, args }) => {
+    return createRecursiveProxy(({ path: path3, args }) => {
       const pathCopy = [
         key,
-        ...path2
+        ...path3
       ];
       const procedureType = clientCallTypeToProcedureType(pathCopy.pop());
       const fullPath = pathCopy.join(".");
@@ -7644,12 +7647,12 @@ var streamingJsonHttpRequester = (opts, onSingle) => {
 var streamRequester = (requesterOpts) => {
   const textDecoder = getTextDecoder(requesterOpts.opts.textDecoder);
   return (batchOps, unitResolver) => {
-    const path2 = batchOps.map((op) => op.path).join(",");
+    const path3 = batchOps.map((op) => op.path).join(",");
     const inputs = batchOps.map((op) => op.input);
     const { cancel, promise } = streamingJsonHttpRequester({
       ...requesterOpts,
       textDecoder,
-      path: path2,
+      path: path3,
       inputs,
       headers() {
         if (!requesterOpts.opts.headers) {
@@ -7863,7 +7866,7 @@ var isURL = (payload) => payload instanceof URL;
 
 // node_modules/superjson/dist/pathstringifier.js
 var escapeKey = (key) => key.replace(/\\/g, "\\\\").replace(/\./g, "\\.");
-var stringifyPath = (path2) => path2.map(String).map(escapeKey).join(".");
+var stringifyPath = (path3) => path3.map(String).map(escapeKey).join(".");
 var parsePath = (string, legacyPaths) => {
   const result = [];
   let segment = "";
@@ -8110,26 +8113,26 @@ var getNthKey = (value, n) => {
   }
   return keys.next().value;
 };
-function validatePath(path2) {
-  if (includes(path2, "__proto__")) {
+function validatePath(path3) {
+  if (includes(path3, "__proto__")) {
     throw new Error("__proto__ is not allowed as a property");
   }
-  if (includes(path2, "prototype")) {
+  if (includes(path3, "prototype")) {
     throw new Error("prototype is not allowed as a property");
   }
-  if (includes(path2, "constructor")) {
+  if (includes(path3, "constructor")) {
     throw new Error("constructor is not allowed as a property");
   }
 }
-var getDeep = (object, path2) => {
-  validatePath(path2);
-  for (let i = 0; i < path2.length; i++) {
-    const key = path2[i];
+var getDeep = (object, path3) => {
+  validatePath(path3);
+  for (let i = 0; i < path3.length; i++) {
+    const key = path3[i];
     if (isSet(object)) {
       object = getNthKey(object, +key);
     } else if (isMap(object)) {
       const row = +key;
-      const type = +path2[++i] === 0 ? "key" : "value";
+      const type = +path3[++i] === 0 ? "key" : "value";
       const keyOfRow = getNthKey(object, row);
       switch (type) {
         case "key":
@@ -8145,14 +8148,14 @@ var getDeep = (object, path2) => {
   }
   return object;
 };
-var setDeep = (object, path2, mapper) => {
-  validatePath(path2);
-  if (path2.length === 0) {
+var setDeep = (object, path3, mapper) => {
+  validatePath(path3);
+  if (path3.length === 0) {
     return mapper(object);
   }
   let parent = object;
-  for (let i = 0; i < path2.length - 1; i++) {
-    const key = path2[i];
+  for (let i = 0; i < path3.length - 1; i++) {
+    const key = path3[i];
     if (isArray(parent)) {
       const index = +key;
       parent = parent[index];
@@ -8162,12 +8165,12 @@ var setDeep = (object, path2, mapper) => {
       const row = +key;
       parent = getNthKey(parent, row);
     } else if (isMap(parent)) {
-      const isEnd = i === path2.length - 2;
+      const isEnd = i === path3.length - 2;
       if (isEnd) {
         break;
       }
       const row = +key;
-      const type = +path2[++i] === 0 ? "key" : "value";
+      const type = +path3[++i] === 0 ? "key" : "value";
       const keyOfRow = getNthKey(parent, row);
       switch (type) {
         case "key":
@@ -8179,7 +8182,7 @@ var setDeep = (object, path2, mapper) => {
       }
     }
   }
-  const lastKey = path2[path2.length - 1];
+  const lastKey = path3[path3.length - 1];
   if (isArray(parent)) {
     parent[+lastKey] = mapper(parent[+lastKey]);
   } else if (isPlainObject(parent)) {
@@ -8194,7 +8197,7 @@ var setDeep = (object, path2, mapper) => {
     }
   }
   if (isMap(parent)) {
-    const row = +path2[path2.length - 2];
+    const row = +path3[path3.length - 2];
     const keyToRow = getNthKey(parent, row);
     const type = +lastKey === 0 ? "key" : "value";
     switch (type) {
@@ -8241,16 +8244,16 @@ function traverse(tree, walker2, version, origin = []) {
   walker2(nodeValue, origin);
 }
 function applyValueAnnotations(plain, annotations, version, superJson) {
-  traverse(annotations, (type, path2) => {
-    plain = setDeep(plain, path2, (v) => untransformValue(v, type, superJson));
+  traverse(annotations, (type, path3) => {
+    plain = setDeep(plain, path3, (v) => untransformValue(v, type, superJson));
   }, version);
   return plain;
 }
 function applyReferentialEqualityAnnotations(plain, annotations, version) {
   const legacyPaths = enableLegacyPaths(version);
-  function apply(identicalPaths, path2) {
-    const object = getDeep(plain, parsePath(path2, legacyPaths));
-    identicalPaths.map((path3) => parsePath(path3, legacyPaths)).forEach((identicalObjectPath) => {
+  function apply(identicalPaths, path3) {
+    const object = getDeep(plain, parsePath(path3, legacyPaths));
+    identicalPaths.map((path4) => parsePath(path4, legacyPaths)).forEach((identicalObjectPath) => {
       plain = setDeep(plain, identicalObjectPath, () => object);
     });
   }
@@ -8268,12 +8271,12 @@ function applyReferentialEqualityAnnotations(plain, annotations, version) {
   return plain;
 }
 var isDeep = (object, superJson) => isPlainObject(object) || isArray(object) || isMap(object) || isSet(object) || isError(object) || isInstanceOfRegisteredClass(object, superJson);
-function addIdentity(object, path2, identities) {
+function addIdentity(object, path3, identities) {
   const existingSet = identities.get(object);
   if (existingSet) {
-    existingSet.push(path2);
+    existingSet.push(path3);
   } else {
-    identities.set(object, [path2]);
+    identities.set(object, [path3]);
   }
 }
 function generateReferentialEqualityAnnotations(identitites, dedupe) {
@@ -8284,7 +8287,7 @@ function generateReferentialEqualityAnnotations(identitites, dedupe) {
       return;
     }
     if (!dedupe) {
-      paths = paths.map((path2) => path2.map(String)).sort((a, b) => a.length - b.length);
+      paths = paths.map((path3) => path3.map(String)).sort((a, b) => a.length - b.length);
     }
     const [representativePath, ...identicalPaths] = paths;
     if (representativePath.length === 0) {
@@ -8303,10 +8306,10 @@ function generateReferentialEqualityAnnotations(identitites, dedupe) {
     return isEmptyObject(result) ? void 0 : result;
   }
 }
-var walker = (object, identities, superJson, dedupe, path2 = [], objectsInThisPath = [], seenObjects = /* @__PURE__ */ new Map()) => {
+var walker = (object, identities, superJson, dedupe, path3 = [], objectsInThisPath = [], seenObjects = /* @__PURE__ */ new Map()) => {
   const primitive = isPrimitive(object);
   if (!primitive) {
-    addIdentity(object, path2, identities);
+    addIdentity(object, path3, identities);
     const seen = seenObjects.get(object);
     if (seen) {
       return dedupe ? {
@@ -8340,7 +8343,7 @@ var walker = (object, identities, superJson, dedupe, path2 = [], objectsInThisPa
     if (index === "__proto__" || index === "constructor" || index === "prototype") {
       throw new Error(`Detected property ${index}. This is a prototype pollution risk, please remove it from your object.`);
     }
-    const recursiveResult = walker(value, identities, superJson, dedupe, [...path2, index], [...objectsInThisPath, object], seenObjects);
+    const recursiveResult = walker(value, identities, superJson, dedupe, [...path3, index], [...objectsInThisPath, object], seenObjects);
     transformedValue[index] = recursiveResult.transformedValue;
     if (isArray(recursiveResult.annotations)) {
       innerAnnotations[escapeKey(index)] = recursiveResult.annotations;
@@ -8518,7 +8521,35 @@ function getApiKey() {
   return process.env.FEAST_API_KEY ?? PROD_API_KEY;
 }
 
+// src/jwt.ts
+function decodeJwtPayload(jwt) {
+  const payload = jwt.split(".")[1];
+  if (payload == null) {
+    throw new Error("Malformed JWT");
+  }
+  return JSON.parse(Buffer.from(payload, "base64url").toString("utf-8"));
+}
+
 // src/http.ts
+function readPackageVersion() {
+  try {
+    const require2 = createRequire(import.meta.url);
+    return require2("../package.json").version ?? "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+var CLI_VERSION = readPackageVersion();
+var CLI_CLIENT_ID = `feast-cli/${CLI_VERSION}`;
+var CLI_USER_AGENT = `${CLI_CLIENT_ID} node/${process.versions.node}`;
+function usernameFromToken(accessToken) {
+  try {
+    const payload = decodeJwtPayload(accessToken);
+    return payload.username ?? payload.sub;
+  } catch {
+    return void 0;
+  }
+}
 function createHttpCaller(auth) {
   return createTRPCProxyClient({
     transformer: dist_default,
@@ -8527,11 +8558,17 @@ function createHttpCaller(auth) {
         url: getApiUrl(),
         headers: () => {
           const headers = {
-            "x-api-key": getApiKey()
+            "x-api-key": getApiKey(),
+            "x-client": CLI_CLIENT_ID,
+            "user-agent": CLI_USER_AGENT
           };
           if (auth.accessToken != null) {
             headers["x-access-token"] = `Bearer ${auth.accessToken}`;
             headers["x-timezone"] = Intl.DateTimeFormat().resolvedOptions().timeZone;
+            const username = usernameFromToken(auth.accessToken);
+            if (username != null) {
+              headers["x-client-user"] = username;
+            }
           }
           if (auth.preferredRole != null) {
             headers["x-preferred-role"] = auth.preferredRole;
@@ -8552,13 +8589,6 @@ function callProcedure(client, pathSegments, type, input) {
 
 // src/auth.ts
 var REFRESH_MARGIN_MS = 5 * 60 * 1e3;
-function decodeJwtPayload(jwt) {
-  const payload = jwt.split(".")[1];
-  if (payload == null) {
-    throw new Error("Malformed JWT");
-  }
-  return JSON.parse(Buffer.from(payload, "base64url").toString("utf-8"));
-}
 async function login(username, password) {
   const client = createHttpCaller({});
   const response = await client.api.auth.login.query({ username, password });
@@ -10828,6 +10858,81 @@ var CLI_MANIFEST = {
         "$schema": "http://json-schema.org/draft-07/schema#"
       }
     },
+    {
+      "id": "deleteMedia",
+      "domain": "core",
+      "description": "Delete an uploaded media file for the organization by its S3 key. The key must belong to the given scope (passBuilder, funnel, organizationFilePublic, organizationFilePrivate, or creativeLibrary).",
+      "needsApproval": true,
+      "type": "mutation",
+      "path": [
+        "api",
+        "media",
+        "delete"
+      ],
+      "inputJsonSchema": {
+        "type": "object",
+        "properties": {
+          "scope": {
+            "type": "string",
+            "enum": [
+              "passBuilder",
+              "funnel",
+              "organizationFilePublic",
+              "organizationFilePrivate",
+              "creativeLibrary"
+            ]
+          },
+          "key": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "scope",
+          "key"
+        ],
+        "additionalProperties": false,
+        "$schema": "http://json-schema.org/draft-07/schema#"
+      }
+    },
+    {
+      "id": "describeData",
+      "domain": "data",
+      "description": "Describe the queryable data model, then use queryData to read it. Call with no arguments for an index of every queryable object type plus the full query grammar - start here. Call with schemaName for every object type in that schema with full column detail, schemaName plus objectTypeName for a single object type, or detail='full' for the entire model at once. Columns come back with their type, enum values, nullability and a description; links come back with the name you pass to a pivot or join command. Prefer the 'interface' schema, whose object types (order, orderItem, customer, location, ...) are POS-agnostic and return the same shape regardless of which POS the organization runs. Pass includeGrammar=false to omit the grammar once you already have it.",
+      "needsApproval": false,
+      "type": "query",
+      "path": [
+        "api",
+        "data",
+        "describe"
+      ],
+      "inputJsonSchema": {
+        "type": "object",
+        "properties": {
+          "schemaName": {
+            "type": "string",
+            "description": 'Narrow to one schema, e.g. "interface", "core", "events", "texting". Omit for the index of everything.'
+          },
+          "objectTypeName": {
+            "type": "string",
+            "description": 'Narrow to one object type within schemaName, e.g. "order", "guest". Requires schemaName.'
+          },
+          "detail": {
+            "type": "string",
+            "enum": [
+              "index",
+              "full"
+            ],
+            "description": 'Only applies when schemaName is omitted. "index" (default) lists object types with a one-line description; "full" returns every column of every object type.'
+          },
+          "includeGrammar": {
+            "type": "boolean",
+            "description": "Whether to include the query grammar for queryData. Defaults to true; pass false once you already have it."
+          }
+        },
+        "additionalProperties": false,
+        "$schema": "http://json-schema.org/draft-07/schema#"
+      }
+    },
     {
       "id": "dfyCreateOffer",
       "domain": "offer",
@@ -11252,6 +11357,49 @@ var CLI_MANIFEST = {
         "$schema": "http://json-schema.org/draft-07/schema#"
       }
     },
+    {
+      "id": "getMediaUploadUrl",
+      "domain": "core",
+      "description": "Get a presigned S3 upload URL for a media file in a given scope (passBuilder, funnel, organizationFilePublic, organizationFilePrivate, creativeLibrary). Set cropped to store a cropped variant under the scope's cropped/ subfolder. PUT the file bytes to the returned presignedUrl, then reference the returned url/key.",
+      "needsApproval": false,
+      "type": "mutation",
+      "path": [
+        "api",
+        "media",
+        "getUploadUrl"
+      ],
+      "inputJsonSchema": {
+        "type": "object",
+        "properties": {
+          "scope": {
+            "type": "string",
+            "enum": [
+              "passBuilder",
+              "funnel",
+              "organizationFilePublic",
+              "organizationFilePrivate",
+              "creativeLibrary"
+            ]
+          },
+          "fileName": {
+            "type": "string"
+          },
+          "fileType": {
+            "type": "string"
+          },
+          "cropped": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "scope",
+          "fileName",
+          "fileType"
+        ],
+        "additionalProperties": false,
+        "$schema": "http://json-schema.org/draft-07/schema#"
+      }
+    },
     {
       "id": "listAutomationFlows",
       "domain": "automations",
@@ -11430,6 +11578,48 @@ var CLI_MANIFEST = {
         "$schema": "http://json-schema.org/draft-07/schema#"
       }
     },
+    {
+      "id": "listMedia",
+      "domain": "core",
+      "description": "List uploaded media files for the organization across one or more scopes (passBuilder, funnel, organizationFilePublic, organizationFilePrivate, creativeLibrary). Each file is tagged with its scope and a canDelete flag. Set mediaOnly to return only image/video files. Set cropped to list the cropped variants (each scope's cropped/ subfolder) instead of the base files.",
+      "needsApproval": false,
+      "type": "query",
+      "path": [
+        "api",
+        "media",
+        "list"
+      ],
+      "inputJsonSchema": {
+        "type": "object",
+        "properties": {
+          "scopes": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "passBuilder",
+                "funnel",
+                "organizationFilePublic",
+                "organizationFilePrivate",
+                "creativeLibrary"
+              ]
+            },
+            "minItems": 1
+          },
+          "mediaOnly": {
+            "type": "boolean"
+          },
+          "cropped": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "scopes"
+        ],
+        "additionalProperties": false,
+        "$schema": "http://json-schema.org/draft-07/schema#"
+      }
+    },
     {
       "id": "loadCurrentOrganization",
       "domain": "core",
@@ -11544,6 +11734,184 @@ var CLI_MANIFEST = {
         "$schema": "http://json-schema.org/draft-07/schema#"
       }
     },
+    {
+      "id": "queryData",
+      "domain": "data",
+      "description": `Run a read-only query against the organization's data. Call describeData first for the object types and their exact column names - do not guess columns.
+Results are always scoped to the calling organization, so never filter on organizationId yourself.
+
+Example - export opted-in members with more than 5 visits, newest first:
+{"schemaName":"core","objectTypeName":"guest","commands":[{"type":"filter","filter":{"type":"and","filters":[{"$optIn":{"boolean":true}},{"$testUser":{"boolean":false}},{"$progress":{"number":5,"match":"GT"}}]}}],"args":{"limit":500,"order":{"field":"timeAdded","direction":"DESC"},"fields":["serialNumber","firstName","lastName","phoneNumber","email","progress"]}}
+
+Example - order revenue by location for orders closed this year:
+{"schemaName":"interface","objectTypeName":"order","commands":[{"type":"filter","filter":{"$closedAt":{"datetime":"2026-01-01T00:00:00.000Z","match":"GTE"}}},{"type":"aggregate","aggregate":{"aggregate":{"$amount":"SUM"},"groupBy":{"$locationId":"EXACT"}}}]}
+
+Example - a member's recent texts, newest first:
+{"schemaName":"texting","objectTypeName":"textMessage","commands":[{"type":"filter","filter":{"$serialNumber":{"string":"<serial>","match":"EQ"}}}],"args":{"limit":50,"order":{"field":"dateCreated","direction":"DESC"}}}
+
+Filter leaves are one column each, written as the column name prefixed with $, combined with {"type":"and"|"or","filters":[...]}. Use {"strings":[...]} for any-of rather than a large or. Page by passing the returned nextCursor back as args.cursor.`,
+      "needsApproval": false,
+      "type": "query",
+      "path": [
+        "api",
+        "data",
+        "query"
+      ],
+      "inputJsonSchema": {
+        "type": "object",
+        "properties": {
+          "schemaName": {
+            "type": "string",
+            "description": 'Schema as reported by describeData, e.g. "interface", "core", "events", "texting".'
+          },
+          "objectTypeName": {
+            "type": "string",
+            "description": 'Object type as reported by describeData, e.g. "order", "guest", "userEvent", "textMessage".'
+          },
+          "commands": {
+            "type": "array",
+            "items": {
+              "anyOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "filter"
+                    },
+                    "filter": {
+                      "description": 'Required. A filter tree. One column per leaf, as the column name prefixed with $. Leaf: {"$<column>": <predicate>}. Combine with {"type":"and","filters":[...]} or {"type":"or","filters":[...]}. Predicates by column type - string: {"string":"Jane","match":"EQ"|"NEQ"|"IN"|"ENDS_WITH"} where IN means contains, or {"strings":["a","b"]} for any-of. number: {"number":5,"match":"GT"|"GTE"|"LT"|"LTE"|"EQ"|"NEQ"}. boolean: {"boolean":true} with no match key. datetime/date: {"datetime":"2026-01-01T00:00:00.000Z","match":"GTE"}. Nullable columns also accept {"match":"NULL"} or {"match":"NOT_NULL"}. Example: {"type":"and","filters":[{"$optIn":{"boolean":true}},{"$progress":{"number":5,"match":"GT"}}]}'
+                    }
+                  },
+                  "required": [
+                    "type",
+                    "filter"
+                  ],
+                  "additionalProperties": false,
+                  "description": 'Restrict the set to matching rows. Example: {"type":"filter","filter":{"$eventType":{"strings":["order","rewardAwarded"]}}}'
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "pivot"
+                    },
+                    "name": {
+                      "type": "string",
+                      "description": "A link name from describeData's links for the current object type. Replaces the set with that linked object type, so later commands apply to the new type."
+                    }
+                  },
+                  "required": [
+                    "type",
+                    "name"
+                  ],
+                  "additionalProperties": false,
+                  "description": 'Traverse a link. Example: {"type":"pivot","name":"orderItem"} on interface.order gives its line items.'
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "aggregate"
+                    },
+                    "aggregate": {
+                      "description": 'Required. Group and aggregate, replacing the row shape with the grouped and aggregated columns only. Shape: {"aggregate":{"$<column>":"SUM"|"MAX"|"MIN"|"AVG"|"COUNT"},"groupBy":{"$<column>":"EXACT"}}. Example - revenue by location: {"aggregate":{"$amount":"SUM"},"groupBy":{"$locationId":"EXACT"}}'
+                    }
+                  },
+                  "required": [
+                    "type",
+                    "aggregate"
+                  ],
+                  "additionalProperties": false,
+                  "description": 'Group and aggregate. Example: {"type":"aggregate","aggregate":{"aggregate":{"$amount":"SUM"},"groupBy":{"$locationId":"EXACT"}}}'
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "type": {
+                      "type": "string",
+                      "const": "join"
+                    },
+                    "name": {
+                      "type": "string",
+                      "description": "A link name from describeData for the current object type."
+                    },
+                    "fields": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      },
+                      "description": "Columns to pull from the linked object type."
+                    }
+                  },
+                  "required": [
+                    "type",
+                    "name",
+                    "fields"
+                  ],
+                  "additionalProperties": false,
+                  "description": 'Widen each row with columns from a linked object, keeping the current object type. Example: {"type":"join","name":"order","fields":["closedAt","amount"]}'
+                }
+              ]
+            },
+            "description": "Ordered list of commands, each narrowing or reshaping the set before the fetch. Omit to fetch the object type unfiltered. pivot and join must come before any aggregate."
+          },
+          "args": {
+            "type": "object",
+            "properties": {
+              "limit": {
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 1e3,
+                "description": "Rows to return. Defaults to 100, maximum 1000."
+              },
+              "cursor": {
+                "type": "integer",
+                "minimum": 0,
+                "description": "Row offset. Pass the nextCursor from the previous response to page; a missing nextCursor means there are no more rows."
+              },
+              "order": {
+                "type": "object",
+                "properties": {
+                  "field": {
+                    "type": "string"
+                  },
+                  "direction": {
+                    "type": "string",
+                    "enum": [
+                      "ASC",
+                      "DESC"
+                    ]
+                  }
+                },
+                "required": [
+                  "field",
+                  "direction"
+                ],
+                "additionalProperties": false,
+                "description": 'Sort order. Example: {"field":"eventTime","direction":"DESC"}'
+              },
+              "fields": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Columns to return. Omit for all of them. The main lever for keeping responses under the payload cap on wide object types."
+              }
+            },
+            "additionalProperties": false
+          }
+        },
+        "required": [
+          "schemaName",
+          "objectTypeName"
+        ],
+        "additionalProperties": false,
+        "$schema": "http://json-schema.org/draft-07/schema#"
+      }
+    },
     {
       "id": "saveFunnelEdits",
       "domain": "funnel",
@@ -17563,6 +17931,9 @@ var CLI_MANIFEST = {
                                       "type": "string",
                                       "enum": [
                                         "first",
+                                        "second",
+                                        "third",
+                                        "fourth",
                                         "last"
                                       ]
                                     }
@@ -17984,7 +18355,8 @@ Call options:
 
 Environment:
   FEAST_API_URL             Override the API base URL (default: production)
-  FEAST_WEB_URL             Override the web app base URL for browser login (default: production)`;
+  FEAST_WEB_URL             Override the web app base URL for browser login (default: production)
+  FEAST_NO_UPDATE_CHECK     Disable the daily check for a newer published version`;
 function parseArgs(argv) {
   const positional = [];
   const flags = {};
@@ -18237,11 +18609,121 @@ async function runCli(argv) {
   }
 }
 
+// src/updateNotifier.ts
+import fs3 from "fs";
+import { createRequire as createRequire2 } from "module";
+import os2 from "os";
+import path2 from "path";
+var PACKAGE_NAME = "@feastalytics/cli";
+var REGISTRY_URL = "https://registry.npmjs.org";
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 1500;
+var CACHE_DIR = path2.join(os2.homedir(), ".config", "feast-cli");
+var CACHE_PATH = path2.join(CACHE_DIR, "update-check.json");
+function readPackageVersion2() {
+  try {
+    const require2 = createRequire2(import.meta.url);
+    const version = require2("../package.json").version;
+    return typeof version === "string" ? version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function parseVersion(version) {
+  const parts = version.split(".");
+  if (parts.length !== 3) {
+    return void 0;
+  }
+  const numbers = parts.map((part) => Number(part));
+  return numbers.some((number) => !Number.isInteger(number) || number < 0) ? void 0 : numbers;
+}
+function isNewer(latest, current) {
+  const a = parseVersion(latest);
+  const b = parseVersion(current);
+  if (a == null || b == null) {
+    return false;
+  }
+  for (let i = 0; i < 3; i++) {
+    if (a[i] !== b[i]) {
+      return a[i] > b[i];
+    }
+  }
+  return false;
+}
+function isDisabled() {
+  return process.env.FEAST_NO_UPDATE_CHECK != null || process.env.NO_UPDATE_NOTIFIER != null || process.env.CI != null || !process.stderr.isTTY;
+}
+function readCache() {
+  try {
+    const parsed = JSON.parse(
+      fs3.readFileSync(CACHE_PATH, "utf-8")
+    );
+    return typeof parsed.latest === "string" && typeof parsed.checkedAt === "number" ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function writeCache(cache) {
+  try {
+    fs3.mkdirSync(CACHE_DIR, { recursive: true, mode: 448 });
+    fs3.writeFileSync(CACHE_PATH, JSON.stringify(cache));
+  } catch {
+    return;
+  }
+}
+async function fetchLatestVersion() {
+  try {
+    const response = await fetch(
+      `${REGISTRY_URL}/${encodeURIComponent(PACKAGE_NAME)}/latest`,
+      {
+        headers: { accept: "application/json" },
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+      }
+    );
+    if (!response.ok) {
+      return void 0;
+    }
+    const body = await response.json();
+    return typeof body.version === "string" ? body.version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function notifyIfOutdated() {
+  if (isDisabled()) {
+    return;
+  }
+  const current = readPackageVersion2();
+  if (current == null) {
+    return;
+  }
+  const cached = readCache();
+  let latest = cached?.latest;
+  if (cached == null || Date.now() - cached.checkedAt > CHECK_INTERVAL_MS) {
+    const fetched = await fetchLatestVersion();
+    if (fetched != null) {
+      latest = fetched;
+      writeCache({ checkedAt: Date.now(), latest: fetched });
+    } else {
+      writeCache({ checkedAt: Date.now(), latest: latest ?? current });
+    }
+  }
+  if (latest == null || !isNewer(latest, current)) {
+    return;
+  }
+  console.error(
+    `
+Update available: feast ${current} \u2192 ${latest}
+  npx ${PACKAGE_NAME}@latest <command>   (or: npm install -g ${PACKAGE_NAME}@latest)
+`
+  );
+}
+
 // src/cli.ts
 runCli(process.argv.slice(2)).catch((error) => {
   console.error(errorMessage(error));
   process.exitCode = 1;
-});
+}).then(() => notifyIfOutdated()).catch(() => void 0);
 /*! Bundled license information:
 
 @trpc/client/dist/httpUtils-b9d0cb48.mjs:

package/feast/SKILL.md

@@ -14,17 +14,37 @@ The CLI is the source of truth for *which* tools exist and *what* they accept
 The `feast` CLI must be installed and on PATH:
 
 ```bash
-npm install -g @feast/cli    # or run ad-hoc with: npx @feast/cli <command>
+npm install -g @feastalytics/cli    # or run ad-hoc with: npx @feastalytics/cli <command>
 ```
 
 Authenticate once — tokens are cached in `~/.config/feast-cli/credentials.json` and refreshed automatically:
 
 ```bash
-feast login <username>
+feast login                        # opens a browser to authorize (default)
+feast login --password [username]  # headless / CI: username + password prompt, no browser
 ```
 
 If a command reports you're not logged in or the session expired, re-run `feast login`.
 
+## Staying current
+
+Neither the CLI nor this skill updates itself. When a command prints an update notice on stderr:
+
+```
+Update available: feast 0.1.1 → 0.2.0
+```
+
+update both, then tell the user in one line that you did:
+
+```bash
+npm install -g @feastalytics/cli@latest      # only if `feast` is already on PATH from a global install
+npx skills add feastalytics/cli -g -a '*' -y # refresh this skill from the repo
+```
+
+If you've been invoking the CLI through `npx` rather than a global install, skip the `npm install -g` and use `npx @feastalytics/cli@latest <command>` for the rest of the session instead — `npx` reuses a cached copy otherwise.
+
+Update the skill whenever you update the CLI: the two ship from the same repo but on different triggers, so a new CLI version usually means this skill's guidance has moved too. If the global install fails on permissions, don't retry with `sudo` — tell the user and fall back to `npx @feastalytics/cli@latest`.
+
 ## The core loop: discover → describe → call
 
 Don't guess tool names or input shapes. Introspect the live CLI:
@@ -88,7 +108,7 @@ The pattern generalizes: identify the org, learn the tool, resolve any reference
 
 ## When something fails
 
-- "Not logged in / session expired" → `feast login <username>`.
+- "Not logged in / session expired" → `feast login` (or `feast login --password [username]` in a headless/CI context).
 - "You belong to multiple organizations" → pick one with `--org`, using `feast whoami` to get the id.
 - "Input does not match the tool schema" → re-read `feast describe <tool>` and fix the named fields.
 - A tool you expected isn't listed by `feast tools` → it may not be exposed yet; don't fabricate a call, tell the user.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feastalytics/cli",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Command-line client for the Feastalytics platform — list, create, and update campaigns, automations, offers, and members-program rewards from the terminal.",
   "type": "module",
   "bin": {