@firenet-designs/fnd-cli 2.6.0 → 2.7.0

package/dist/lib/workspace.d.ts

@@ -1,4 +1,3 @@
-import type { RpcConfig } from './rpc.js';
 /**
  * Mutagen-backed workspace helpers.
  *
@@ -23,9 +22,10 @@ import type { RpcConfig } from './rpc.js';
  * Mutagen auto-deploys its agent to the remote over that same SSH connection;
  * nothing to install on the remote by hand.
  *
- * The one reverse tunnel that remains is optional and unrelated to files: with
+ * The reverse tunnels that remain are optional and unrelated to files: with
  * --devtools we open `ssh -R` so the remote's chrome-devtools MCP can reach the
- * caller's LOCAL browser.
+ * caller's LOCAL browser, and with --with-tool we open one so the remote's
+ * fnd-tools MCP can reach the tools server running on the caller.
  */
 export interface SshTarget {
     host: string;
@@ -40,6 +40,17 @@ export interface PortPair {
 }
 /** For --devtools: `local` is the browser's remote-debugging port on the caller's machine. */
 export type DevtoolsPorts = PortPair;
+/**
+ * The workspace tools MCP (--with-tool): the reverse-tunnel port pair for the
+ * loopback MCP server started on the caller, plus the raw `--with-tool` values
+ * for the plan display. Undefined when no tool was requested.
+ */
+export interface ToolsMcp {
+    /** The `--with-tool` values selected, verbatim, for the plan summary. */
+    names: string[];
+    /** `local` = the caller's MCP server port; `remote` = the port opened on the workspace host. */
+    port: PortPair;
+}
 /**
  * Which side wins when the same path changed on both ends since the last sync.
  * `remote` = this server (the box where the workspace shell runs); `local` = the
@@ -61,12 +72,12 @@ export interface WorkspaceContext {
     localUser: string;
     /** Where the mirror lives on the REMOTE, e.g. /home/fnd/<localUser>/<localDirName>. */
     remoteDir: string;
-    /** Local-command RPC server + tunnel, when --rpc was passed; undefined otherwise. */
-    rpc?: RpcConfig;
     /** Which endpoint wins conflicts (the Mutagen alpha in two-way-resolved); undefined flags conflicts instead. */
     source?: SyncSource;
     /** Unique Mutagen session name for this workspace. */
     syncName: string;
+    /** Tools MCP server + tunnel, when --with-tool was passed; undefined otherwise. */
+    tools?: ToolsMcp;
 }
 export declare const DEFAULT_MOUNT_BASE = "/home/fnd";
 /** Parse a `user@host` string, throwing a friendly error otherwise. */
@@ -91,8 +102,8 @@ export declare const buildContext: (opts: {
     devtools?: DevtoolsPorts;
     ignoreVcs?: boolean;
     remoteBase: string;
-    rpc?: RpcConfig;
     source?: SyncSource;
+    tools?: ToolsMcp;
 }) => WorkspaceContext;
 /**
  * Translate one .gitignore line into Mutagen ignore patterns. `base` is the
@@ -136,8 +147,8 @@ export interface RemoteCleanupOptions {
     deleteRemoteDir?: boolean;
     /** Strip this project's chrome-devtools MCP entry — only when the workspace registered one (--devtools). */
     removeDevtoolsMcp?: boolean;
-    /** Strip this project's local-shell MCP entry — only when the workspace registered one (--rpc). */
-    removeRpcMcp?: boolean;
+    /** Strip this project's fnd-tools MCP entry — only when the workspace registered one (--with-tool). */
+    removeToolsMcp?: boolean;
 }
 /**
  * Run the remote-side teardown over a fresh ssh connection. Forces a remote PTY

package/dist/lib/workspace.js

@@ -60,9 +60,9 @@ export const buildContext = (opts) => {
         localDirName,
         localUser,
         remoteDir,
-        rpc: opts.rpc,
         source: opts.source,
         syncName: buildSyncName(localDirName),
+        tools: opts.tools,
     };
 };
 /**
@@ -155,8 +155,8 @@ export const collectVcsIgnores = (rootDir) => {
 export const shQuote = (value) => `'${value.replaceAll("'", `'\\''`)}'`;
 /** MCP server name registered for the workspace's chrome-devtools tunnel. */
 const DEVTOOLS_MCP_NAME = 'chrome-devtools';
-/** MCP server name registered for the --rpc local-command tunnel. */
-const RPC_MCP_NAME = 'local-shell';
+/** MCP server name registered for the --with-tool tools tunnel. */
+const TOOLS_MCP_NAME = 'fnd-tools';
 /**
  * The `claude` CLIs an MCP entry is registered with / removed from. `claude2` is
  * an overflow instance some remotes run alongside `claude`; both need the same
@@ -209,20 +209,20 @@ const claudeDevtoolsAddScript = (remotePort, okMessage) => {
 };
 /**
  * Bash lines (run on the REMOTE, from inside the workspace dir) that register the
- * --rpc local-shell MCP with the `claude` CLI as a Streamable HTTP server. The
+ * --with-tool fnd-tools MCP with the `claude` CLI as a Streamable HTTP server. The
  * URL points at the reverse-tunnelled port, which the workspace's `ssh -R`
- * forwards back to the RPC server on the calling machine. Same login-shell and
+ * forwards back to the tools server on the calling machine. Same login-shell and
  * idempotency reasoning as `claudeDevtoolsAddScript`.
  */
-const claudeRpcAddScript = (remotePort, okMessage) => {
+const claudeToolsAddScript = (remotePort, okMessage) => {
     const body = [
         'configured=""',
         ...forEachClaudeCli((cli) => [
-            `${cli} mcp remove ${RPC_MCP_NAME} >/dev/null 2>&1 || true`,
-            `${cli} mcp add --transport http ${RPC_MCP_NAME} http://127.0.0.1:${remotePort}/mcp`,
+            `${cli} mcp remove ${TOOLS_MCP_NAME} >/dev/null 2>&1 || true`,
+            `${cli} mcp add --transport http ${TOOLS_MCP_NAME} http://127.0.0.1:${remotePort}/mcp`,
             'configured=1',
         ]),
-        `if [ -n "$configured" ]; then echo ${shQuote(okMessage)}; else echo "WARNING: claude CLI not found on the remote; skipped local-shell MCP config." >&2; fi`,
+        `if [ -n "$configured" ]; then echo ${shQuote(okMessage)}; else echo "WARNING: claude CLI not found on the remote; skipped fnd-tools MCP config." >&2; fi`,
     ].join('\n');
     return [`"\${SHELL:-bash}" -lic ${shQuote(body)}`];
 };
@@ -252,8 +252,8 @@ export const buildRemoteScript = (ctx) => {
     const devtoolsSetup = ctx.devtools
         ? claudeDevtoolsAddScript(ctx.devtools.remote, `Configured chrome-devtools MCP for this workspace (browser via 127.0.0.1:${ctx.devtools.remote}).`)
         : [];
-    const rpcSetup = ctx.rpc
-        ? claudeRpcAddScript(ctx.rpc.ports.remote, `Configured local-shell MCP for this workspace (runs ${ctx.rpc.shell} commands on the calling machine via 127.0.0.1:${ctx.rpc.ports.remote}).`)
+    const toolsSetup = ctx.tools
+        ? claudeToolsAddScript(ctx.tools.port.remote, `Configured fnd-tools MCP for this workspace (${ctx.tools.names.join(', ')} on the calling machine via 127.0.0.1:${ctx.tools.port.remote}).`)
         : [];
     return [
         'set -u',
@@ -263,7 +263,7 @@ export const buildRemoteScript = (ctx) => {
         'cd "$DIR" || { echo "ERROR: could not enter $DIR" >&2; exit 1; }',
         // Register the MCPs from inside $DIR: `claude mcp add` local scope keys off cwd.
         ...devtoolsSetup,
-        ...rpcSetup,
+        ...toolsSetup,
         'echo "Workspace ready at $DIR — files sync in the background (exit to stop syncing)."',
         // eslint-disable-next-line no-template-curly-in-string -- shell parameter expansion, not a JS template
         '"${SHELL:-bash}" -l',
@@ -296,7 +296,7 @@ export const buildCleanupScript = (remoteDir, opts = {}) => [
     `DIR=${shQuote(remoteDir)}`,
     'cd "$DIR" 2>/dev/null || { echo "Nothing to clean up: $DIR is gone." >&2; exit 0; }',
     ...(opts.removeDevtoolsMcp ? claudeMcpRemoveScript(DEVTOOLS_MCP_NAME) : []),
-    ...(opts.removeRpcMcp ? claudeMcpRemoveScript(RPC_MCP_NAME) : []),
+    ...(opts.removeToolsMcp ? claudeMcpRemoveScript(TOOLS_MCP_NAME) : []),
     // Remove the workspace dir last: cd out first so we don't rm the cwd out from
     // under the shell, then delete it. Only when explicitly requested.
     ...(opts.deleteRemoteDir

package/oclif.manifest.json

@@ -5,36 +5,38 @@
         "caption"
       ],
       "args": {},
-      "description": "Generate alt text for a site's images with a local Ollama vision model and write it back.\n\nWalks the Webflow site asset library and (with --cms) the image fields of CMS collection items, describes every image that needs alt text, and PATCHes the description back. Images are fetched and described one at a time — a single local model gains nothing from concurrency, and Webflow rate-limits. Nothing leaves your network except the Webflow API calls.\n\nCMS writes go to STAGING, so publish the site in Webflow to make them live. Any required flag you omit is prompted for.",
+      "description": "Generate alt text for a site's images with a local Ollama vision model and write it back.\n\nPick a platform with --platform (webflow or shopify). For Webflow, walks the site asset library and (with --cms) the image fields of CMS collection items and PATCHes each description back through the Data API. For Shopify, walks the store's file library and writes alt text back through the Shopify CLI (which owns the auth — no --api-key). Images are fetched and described one at a time; nothing but the platform API calls leaves your network.\n\nWebflow CMS writes go to STAGING, so publish the site in Webflow to make them live. Any required flag you omit is prompted for.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> --webflow --api-key <key> --site-id <id> --ollama-host http://localhost:11434 --ollama-model qwen3-vl:8b",
-        "<%= config.bin %> <%= command.id %> --webflow --skip --limit 20",
-        "<%= config.bin %> <%= command.id %> --webflow --cms --select",
-        "<%= config.bin %> <%= command.id %> --webflow --cms --only products --only sku",
-        "<%= config.bin %> <%= command.id %> --webflow --output-stats ./alt-text-run.md",
-        "<%= config.bin %> <%= command.id %> --webflow --filter \"fileSize>=sizes.KB(100) && width>=100 && height>=100\"",
-        "<%= config.bin %> <%= command.id %> --webflow --filter \"type !== 'svg' && !url.includes('/icons/')\""
+        "<%= config.bin %> <%= command.id %> --platform webflow --api-key <key> --site-id <id> --ollama-host http://localhost:11434 --ollama-model qwen3-vl:8b",
+        "<%= config.bin %> <%= command.id %> --platform shopify --site-id mystore",
+        "<%= config.bin %> <%= command.id %> --platform shopify --site-id mystore --dry",
+        "<%= config.bin %> <%= command.id %> --platform webflow --skip --limit 20",
+        "<%= config.bin %> <%= command.id %> --platform webflow --cms --select",
+        "<%= config.bin %> <%= command.id %> --platform webflow --cms --only products --only sku",
+        "<%= config.bin %> <%= command.id %> --platform webflow --output-stats ./alt-text-run.md",
+        "<%= config.bin %> <%= command.id %> --platform webflow --filter \"fileSize>=sizes.KB(100) && width>=100 && height>=100\"",
+        "<%= config.bin %> <%= command.id %> --platform webflow --filter \"type !== 'svg' && !url.includes('/icons/')\""
       ],
       "flags": {
         "api-key": {
-          "dependsOn": [
-            "webflow"
-          ],
-          "description": "Webflow API token (site-scoped). Prompted for if omitted.",
+          "description": "Webflow API token (site-scoped). Webflow only — Shopify auth comes from the Shopify CLI. Prompted for if omitted.",
           "name": "api-key",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
         "cms": {
-          "dependsOn": [
-            "webflow"
-          ],
-          "description": "also add alt text to the images in CMS collection items. Off by default — only the site asset library is walked.",
+          "description": "also add alt text to the images in CMS collection items. Webflow only. Off by default — only the site asset library is walked.",
           "name": "cms",
           "allowNo": false,
           "type": "boolean"
         },
+        "dry": {
+          "description": "report how many images the run would caption without describing or writing anything. Every image is still downloaded and run through --filter so the count is accurate, but nothing reaches the model. The --ollama-host/--ollama-model and --output-stats flags are ignored in this mode, so --dry can be added to (and removed from) a full command without changing the rest.",
+          "name": "dry",
+          "allowNo": false,
+          "type": "boolean"
+        },
         "filter": {
           "description": "a JavaScript expression deciding which images are worth describing, e.g. \"fileSize>=sizes.KB(100) && width>=100 && height>=100\". Available: fileSize (bytes), width, height (pixels), url, type (\"webp\", \"png\", \"jpeg\", \"svg\", …), and sizes.KB/MB/GB helpers. Images that fail it are skipped and reported separately. Evaluated after the download, since dimensions can't be known before it.",
           "name": "filter",
@@ -83,6 +85,17 @@
           "multiple": false,
           "type": "option"
         },
+        "platform": {
+          "description": "which platform to run against. Prompted for if omitted.",
+          "name": "platform",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "webflow",
+            "shopify"
+          ],
+          "type": "option"
+        },
         "select": {
           "dependsOn": [
             "cms"
@@ -95,20 +108,8 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "shopify": {
-          "description": "run against a Shopify store (not implemented yet)",
-          "exclusive": [
-            "webflow"
-          ],
-          "name": "shopify",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "site-id": {
-          "dependsOn": [
-            "webflow"
-          ],
-          "description": "Webflow site ID. Prompted for if omitted.",
+          "description": "Webflow site ID, or the Shopify store (mystore or mystore.myshopify.com). Prompted for if omitted.",
           "name": "site-id",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -119,15 +120,6 @@
           "name": "skip",
           "allowNo": false,
           "type": "boolean"
-        },
-        "webflow": {
-          "description": "run against a Webflow site",
-          "exclusive": [
-            "shopify"
-          ],
-          "name": "webflow",
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
@@ -339,14 +331,17 @@
         "<%= config.bin %> <%= command.id %> --ssh user@host --ignore-vcs",
         "<%= config.bin %> <%= command.id %> --ssh user@host --devtools 9222",
         "<%= config.bin %> <%= command.id %> --ssh user@host --devtools 9333:9222",
-        "<%= config.bin %> <%= command.id %> --ssh user@host --rpc port=7777:7700",
-        "<%= config.bin %> <%= command.id %> --ssh user@host --rpc port=7777:7700,profile=false,shell=zsh",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --with-tool shopify-file-upload --site-id mystore",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --with-tool shopify-file-upload --with-tool shopify-file-search --with-tool \"shopify-file-delete[ask]\" --site-id mystore",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --with-tool shopify-file-upload --with-tool shopify-file-replace --with-tool shopify-file-delete --site-id mystore.myshopify.com",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --with-tool \"shopify-execute[scopes=read_products+read_orders]\" --site-id mystore",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --with-tool \"shopify-execute[ask,scopes=all]\" --site-id mystore",
         "<%= config.bin %> <%= command.id %> --ssh user@host --delete-remote-dir",
-        "<%= config.bin %> <%= command.id %> --ssh user@host --rpc 7700 --cleanup"
+        "<%= config.bin %> <%= command.id %> --ssh user@host --with-tool shopify-file-upload --site-id mystore --cleanup"
       ],
       "flags": {
         "cleanup": {
-          "description": "tear down a leftover session instead of opening one — don't connect, just terminate this directory's Mutagen sync and (using whatever other flags are set) strip the remote --devtools/--rpc MCP entries and, with --delete-remote-dir, remove the remote dir. Re-run your original command with --cleanup appended after a session that dropped without cleaning up.",
+          "description": "tear down a leftover session instead of opening one — don't connect, just terminate this directory's Mutagen sync and (using whatever other flags are set) strip the remote --devtools/--with-tool MCP entries and, with --delete-remote-dir, remove the remote dir. Re-run your original command with --cleanup appended after a session that dropped without cleaning up.",
           "name": "cleanup",
           "allowNo": false,
           "type": "boolean"
@@ -378,9 +373,9 @@
           "multiple": false,
           "type": "option"
         },
-        "rpc": {
-          "description": "expose a run_local_command MCP tool to Claude on the remote that executes commands back on THIS machine (the one running fnd workspace). Value is port=<port|remote:local>[,profile=<true|1|false|0>][,shell=<bash|batch|powershell|sh|zsh>] — port opens a reverse tunnel (ssh -R <remote>:localhost:<local>) to a command server started here; shell defaults to the shell fnd workspace was called from; profile (default true) controls whether the shell loads its startup files — with it on, POSIX shells run interactively (-i) so rc files like ~/.bashrc or ~/.zshrc are sourced and tools such as nvm work.",
-          "name": "rpc",
+        "site-id": {
+          "description": "the Shopify store (mystore or mystore.myshopify.com) the Shopify --with-tool tools operate on. Required when any Shopify tool (shopify-file-* or shopify-execute) is selected; fixing the store here is a safety boundary — the remote AI cannot target another store.",
+          "name": "site-id",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -403,6 +398,13 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "with-tool": {
+          "description": "expose an fnd tool to Claude on the remote via a loopback MCP server on THIS machine (the one running fnd workspace), reached through a reverse tunnel. Repeatable. Value is <name> or <name>[options]; available: shopify-execute[<scopes=all|<list>[,ask]>], shopify-file-delete[[<ask>]], shopify-file-replace[[<ask>]], shopify-file-search[[<ask>]], shopify-file-upload[[<ask>]]. e.g. shopify-file-upload (with --site-id mystore) lets the remote AI upload files from the workspace into that Shopify store using your local Shopify CLI; shopify-file-replace and shopify-file-delete add in-place replace and delete; shopify-file-search looks up files by name/size/type/url (metadata only, no image bytes) to dedupe before upload or find oversized images; shopify-execute runs arbitrary Admin GraphQL and REQUIRES a scopes option — shopify-execute[scopes=all] for broad access or shopify-execute[scopes=read_products+write_orders] for an explicit set (which the store is then trimmed to, revoking anything extra, so the AI is held to least privilege). Append ,ask (e.g. shopify-file-delete[ask], shopify-execute[ask,scopes=all]) to make that tool prompt for confirmation before EVERY call, even under the remote's auto-accept/bypass permissions — use it to gate the powerful/destructive tools. Prerequisites (auth, scopes) are checked and set up before connecting.",
+          "name": "with-tool",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -422,5 +424,5 @@
       ]
     }
   },
-  "version": "2.6.0"
+  "version": "2.7.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@firenet-designs/fnd-cli",
   "description": "A new CLI generated with oclif",
-  "version": "2.6.0",
+  "version": "2.7.0",
   "author": "Cole Denslow",
   "contributors": [
     "Justin Schellenberg"
@@ -15,6 +15,7 @@
     "@oclif/core": "^4",
     "@oclif/plugin-help": "^6",
     "@oclif/plugin-plugins": "^5",
+    "@oclif/plugin-warn-if-update-available": "^3.1.71",
     "@resvg/resvg-js": "^2.6.2",
     "chalk": "^5.6.2",
     "ollama": "^0.6.3",
@@ -53,6 +54,12 @@
     "./oclif.manifest.json"
   ],
   "homepage": "https://github.com/FireNet-Designs/fnd-cli",
+  "imports": {
+    "#*": {
+      "development": "./src/*",
+      "default": "./dist/*"
+    }
+  },
   "keywords": [
     "oclif"
   ],
@@ -67,14 +74,14 @@
     "bin": "fnd",
     "dirname": "fnd-cli",
     "commands": "./dist/commands",
-    "hooks": {
-      "init": [
-        "./dist/hooks/init/check-for-updates"
-      ]
-    },
     "plugins": [
-      "@oclif/plugin-help"
+      "@oclif/plugin-help",
+      "@oclif/plugin-warn-if-update-available"
     ],
+    "warn-if-update-available": {
+      "timeoutInDays": 1,
+      "message": "💡 Version <%= chalk.greenBright(latest) %> available! Run <%= chalk.greenBright('npm i -g ' + config.name) %> to update to the latest version."
+    },
     "topicSeparator": " ",
     "topics": {
       "hello": {
@@ -90,13 +97,13 @@
     "url": "git+https://github.com/FireNet-Designs/fnd-cli.git"
   },
   "scripts": {
-    "build": "shx rm -rf dist && tsc -b",
+    "build": "shx rm -rf dist && tsc -b && shx cp -r src/lib/shopify/graphql dist/lib/shopify/graphql",
     "lint": "eslint",
     "pack": "npm run prepack && npm run postpack",
     "postpack": "shx rm -f oclif.manifest.json",
     "posttest": "npm run lint",
-    "prepack": "oclif manifest && oclif readme",
-    "version": "oclif readme",
+    "prepack": "oclif manifest && oclif readme && node scripts/strip-os-from-readme.mjs",
+    "version": "oclif readme && node scripts/strip-os-from-readme.mjs",
     "prerelease": "npm run build && npm run prepack",
     "release": "npm run build && npm run prepack && npm publish"
   },

package/dist/hooks/init/check-for-updates.d.ts

@@ -1,3 +0,0 @@
-import { Hook } from '@oclif/core';
-declare const hook: Hook<'init'>;
-export default hook;

package/dist/hooks/init/check-for-updates.js

@@ -1,15 +0,0 @@
-import chalk from 'chalk';
-import { exec } from 'node:child_process';
-const hook = async function (opts) {
-    const newestVersion = await new Promise((resolve, reject) => {
-        exec(`npm view @firenet-designs/fnd-cli version`, (error, stdout) => {
-            if (error)
-                return reject(error);
-            resolve(stdout.trim());
-        });
-    });
-    if (newestVersion !== opts.config.pjson.version) {
-        console.log(chalk.yellow('💡 Version', chalk.green(newestVersion), 'available! Run', chalk.green('`npm i -g @firenet-designs/fnd-cli`'), 'to update to the latest version!\n'));
-    }
-};
-export default hook;

package/dist/lib/kv-flag.d.ts

@@ -1,15 +0,0 @@
-import { z } from 'zod';
-type KvShape = Record<string, z.ZodType>;
-/** Usage string for the schema, required keys first: `a=<...>,b=<...>[,c=<...>]`. */
-export declare const kvUsage: (schema: z.ZodObject<KvShape>) => string;
-/** Example flag value built from each field's example meta (falls back to its hint), required keys first. */
-export declare const kvExample: (schema: z.ZodObject<KvShape>, opts?: {
-    requiredOnly?: boolean;
-}) => string;
-/**
- * Parse a key=value flag string against the schema. Keys are case-insensitive
- * and order-independent; unknown keys, duplicate keys, and missing required
- * keys are hard errors naming the flag and its usage.
- */
-export declare const parseKvFlag: <T extends KvShape>(flag: string, raw: string, schema: z.ZodObject<T>) => z.output<z.ZodObject<T>>;
-export {};

package/dist/lib/kv-flag.js

@@ -1,75 +0,0 @@
-const fieldMeta = (field) => (field.meta() ?? {});
-const isOptional = (field) => field.def.type === 'default' || field.def.type === 'optional';
-/** Unwrap default/optional/preprocess wrappers down to the schema describing the value. */
-const unwrap = (field) => {
-    const { def } = field;
-    if (def.type === 'default' || def.type === 'optional') {
-        return unwrap(def.innerType);
-    }
-    if (def.type === 'pipe') {
-        return unwrap(def.out);
-    }
-    return field;
-};
-/** The <placeholder> for a field's value: explicit hint meta, enum options, or "value". */
-const fieldHint = (field) => {
-    const { hint } = fieldMeta(field);
-    if (hint)
-        return hint;
-    const inner = unwrap(field);
-    if (inner.def.type === 'enum') {
-        return Object.values(inner.def.entries).join('|');
-    }
-    return 'value';
-};
-/** Usage string for the schema, required keys first: `a=<...>,b=<...>[,c=<...>]`. */
-export const kvUsage = (schema) => {
-    const fields = Object.entries(schema.shape);
-    const required = fields.filter(([, f]) => !isOptional(f));
-    const optional = fields.filter(([, f]) => isOptional(f));
-    const pair = ([key, field]) => `${key}=<${fieldHint(field)}>`;
-    return required.map((f) => pair(f)).join(',') + optional.map((f) => `[,${pair(f)}]`).join('');
-};
-/** Example flag value built from each field's example meta (falls back to its hint), required keys first. */
-export const kvExample = (schema, opts) => {
-    const fields = Object.entries(schema.shape).filter(([, field]) => !(opts?.requiredOnly && isOptional(field)));
-    return [...fields.filter(([, f]) => !isOptional(f)), ...fields.filter(([, f]) => isOptional(f))]
-        .map(([key, field]) => `${key}=${fieldMeta(field).example ?? fieldHint(field)}`)
-        .join(',');
-};
-/**
- * Parse a key=value flag string against the schema. Keys are case-insensitive
- * and order-independent; unknown keys, duplicate keys, and missing required
- * keys are hard errors naming the flag and its usage.
- */
-export const parseKvFlag = (flag, raw, schema) => {
-    const usage = `${flag} takes comma-separated key=value pairs: ${kvUsage(schema)}`;
-    const known = Object.keys(schema.shape);
-    const pairs = new Map();
-    for (const part of raw.trim().split(',')) {
-        const eq = part.indexOf('=');
-        if (eq === -1) {
-            throw new Error(`${usage} (got "${raw}")`);
-        }
-        const key = part.slice(0, eq).trim().toLowerCase();
-        if (!known.includes(key)) {
-            throw new Error(`${flag} has no "${key}" option. ${usage}`);
-        }
-        if (pairs.has(key)) {
-            throw new Error(`${flag} "${key}" was given more than once (got "${raw}")`);
-        }
-        pairs.set(key, part.slice(eq + 1).trim());
-    }
-    for (const key of known) {
-        if (!isOptional(schema.shape[key]) && !pairs.has(key)) {
-            throw new Error(`${flag} needs "${key}". ${usage}`);
-        }
-    }
-    const result = schema.safeParse(Object.fromEntries(pairs));
-    if (!result.success) {
-        const issue = result.error.issues[0];
-        const at = issue.path.join('.');
-        throw new Error(`${flag}${at ? ` ${at}` : ''}: ${issue.message}. ${usage}`);
-    }
-    return result.data;
-};

package/dist/lib/rpc.d.ts

@@ -1,69 +0,0 @@
-import { z } from 'zod';
-import { PortPair } from './workspace.js';
-/**
- * The --rpc local-command server.
- *
- * Topology: this machine (the one that ran `fnd workspace`) runs a tiny MCP
- * server — Streamable HTTP transport, implemented on node:http with no
- * dependencies — bound to 127.0.0.1:<local>. The workspace's `ssh -R` reverse
- * tunnel exposes it on the REMOTE at 127.0.0.1:<remote>, where the `claude` CLI
- * registers it as an HTTP MCP server. When the AI on the remote calls the
- * `run_local_command` tool, the command executes HERE, on the calling machine,
- * under the shell chosen in the flag.
- *
- * The server binds loopback only; the sole way in from outside is the reverse
- * tunnel, which lives exactly as long as the ssh session.
- */
-declare const ShellSchema: z.ZodEnum<{
-    zsh: "zsh";
-    bash: "bash";
-    batch: "batch";
-    powershell: "powershell";
-    sh: "sh";
-}>;
-export declare const RPC_SHELLS: ("zsh" | "bash" | "batch" | "powershell" | "sh")[];
-export type RpcShell = z.infer<typeof ShellSchema>;
-/** Usage and example strings for the --rpc flag, derived from the schema. */
-export declare const RPC_FLAG_USAGE: string;
-export declare const RPC_FLAG_EXAMPLES: {
-    full: string;
-    required: string;
-};
-export interface RpcConfig {
-    /** local = port the server binds on this machine; remote = port opened on the workspace host via `ssh -R`. */
-    ports: PortPair;
-    /** Whether the shell loads its startup files (rc/profile). POSIX shells run with -i, powershell without -NoProfile. */
-    profile: boolean;
-    /** Shell used to execute commands on this machine. */
-    shell: RpcShell;
-}
-/** Handle for a running RPC server. */
-export interface RpcServer {
-    close: () => Promise<void>;
-}
-export declare const RPC_TOOL_NAME = "run_local_command";
-/**
- * The shell `fnd workspace` was called from: the parent process when it is a
- * supported shell, else $SHELL, else undefined (e.g. invoked from a script).
- */
-export declare const detectCallingShell: () => RpcShell | undefined;
-/**
- * Parse the --rpc value: comma-separated key=value pairs per RpcFlagSchema.
- *   port=<port> | port=<remote>:<local> — required; `local` is this machine
- *     (where commands run), `remote` the port opened on the workspace host.
- *     The single-port form uses the same port on both ends.
- *   shell=<bash|batch|powershell|sh|zsh> — optional, defaults to the shell
- *     `fnd workspace` was called from.
- *   profile=<true|1|false|0> — optional, default true: the shell loads its
- *     startup files (rc/profile), so tools like nvm are available.
- */
-export declare const parseRpcFlag: (raw: string) => RpcConfig;
-/** True if the chosen shell is runnable on this machine. */
-export declare const hasLocalShell: (shell: RpcShell, profile: boolean) => boolean;
-/**
- * Start the local RPC (MCP) server on 127.0.0.1:<ports.local>. Commands execute
- * with `cwd` as their working directory — the local side of the workspace sync.
- * Resolves once the port is bound; rejects if binding fails (e.g. port in use).
- */
-export declare const startRpcServer: (config: RpcConfig, cwd: string) => Promise<RpcServer>;
-export {};