@freecodecamp/universe-cli 0.8.0 → 0.9.0

package/LICENSE

@@ -1,13 +1,29 @@
-Copyright (c) freeCodeCamp
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
-REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
-AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
-INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
-LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
-OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-PERFORMANCE OF THIS SOFTWARE.
+BSD 3-Clause License
+
+Copyright (c) 2014, freeCodeCamp.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+	list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+	this list of conditions and the following disclaimer in the documentation
+	and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+	contributors may be used to endorse or promote products derived from
+	this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/README.md

@@ -1,6 +1,6 @@
 # Universe CLI
 
-Static site deployment for the freeCodeCamp Universe platform.
+A CLI for freeCodeCamp staff and operators to deploy, manage and maintain constellation apps on the freeCodeCamp Universe Platform.
 
 ## Install
 
@@ -52,82 +52,23 @@ Verify:
 universe --version
 ```
 
-## CLI surface
-
-Top-level (cross-cutting):
-
-```sh
-universe login            # GitHub OAuth device flow → ~/.config/universe-cli/token
-universe logout           # delete stored token
-universe whoami           # echo current login + authorized-sites count
-universe --version        # CLI version
-```
-
-Static-site verbs (namespaced under `static`):
-
-```sh
-universe static deploy [--promote] [--dir <path>]
-universe static promote [--from <deployId>]
-universe static rollback --to <deployId>
-universe static ls [--site <site>]
-```
-
-Static-app registry (namespaced under `sites`, staff-gated writes):
-
-```sh
-universe sites ls [--mine]                          # list registered sites; `--mine` filters to your authorized set
-universe sites register <slug> [--team=<name>...]   # create new entry (staff; defaults --team to staff)
-universe sites update <slug> --team=<name>...       # replace teams list (staff)
-universe sites rm <slug>                            # delete entry (staff; R2 deploy bytes untouched)
-```
-
-Repository creation + approval queue (namespaced under `repo`):
+## Quickstart
 
 ```sh
-universe repo create [name] [--visibility public|private] [--template <repo>] [--description <text>] [--yes]
-                                                    # request a repo in freeCodeCamp-Universe (staff; prompts when run bare)
-universe repo ls [--status <state>] [--mine]        # list requests (default: pending; state ∈ pending|approved|active|rejected|failed|all)
-universe repo status <id>                           # show one request's lifecycle state
-universe repo approve <id> [--yes]                  # approve → creates the repo via the Apollo-11 App (admin)
-universe repo reject <id> [--reason <text>] [--yes] # reject a pending request (admin)
-```
-
-Repo requests enter an artemis-owned approval queue (independent of the legacy Windmill flow). The Apollo-11 GitHub App key lives in the cluster, never the CLI — the CLI only carries your GitHub bearer.
-
-All commands support `--json` for CI integration.
-
-## Identity (priority chain)
-
-The CLI resolves a GitHub identity in this order — first match wins:
-
-1. `$GITHUB_TOKEN` / `$GH_TOKEN` env (CI explicit)
-1. Device-flow stored token at `~/.config/universe-cli/token` (`universe login`)
-1. `gh auth token` shell-out (laptop fallback when no `universe login` token)
-
-CI runners must export `$GITHUB_TOKEN` explicitly. artemis validates the bearer via GitHub `GET /user`, then authorizes server-side against the Valkey-backed registry. Run `universe whoami` to see which slot resolved; inspect the sites you can deploy to with `universe sites ls --mine`.
-
-## Configuration (`platform.yaml`)
-
-Every site has a `platform.yaml` at its repo root. Minimal valid file:
-
-```yaml
-site: my-site
+universe login          # GitHub OAuth device flow
+# add a platform.yaml at your repo root with: site: my-site
+universe static deploy  # upload the build to a new preview deploy
+universe static promote # point production at that deploy
 ```
 
-Full schema reference (every field, defaults, validation rules): [`docs/platform-yaml.md`](docs/platform-yaml.md).
-
-No credential fields. The proxy holds the R2 admin key; the CLI never reads or writes one.
+## Docs
 
-## Common flows
+Start with the [Staff Guide](docs/STAFF-GUIDE.md). See the [command reference](docs/reference.md), the [`platform.yaml` schema](docs/platform-yaml.md), or [architecture & internals](docs/README.md).
 
-Full operator walkthrough (login → deploy → promote → rollback, CI shape, registry admin, troubleshooting) lives in [`docs/STAFF-GUIDE.md`](docs/STAFF-GUIDE.md).
+## License
 
-## Environment overrides
+Copyright © 2014 freeCodeCamp.org
 
-| Env                         | Default                                        | Purpose                                                    |
-| --------------------------- | ---------------------------------------------- | ---------------------------------------------------------- |
-| `UNIVERSE_PROXY_URL`        | `https://uploads.freecode.camp`                | Override proxy host (staging etc.)                         |
-| `UNIVERSE_GH_CLIENT_ID`     | _baked-in freeCodeCamp-Universe GitHub App id_ | Override GitHub App client id (fork tenants, `login` only) |
-| `GITHUB_TOKEN` / `GH_TOKEN` | —                                              | Slot 1 of identity chain                                   |
+The content of this repository is bound by the following license:
 
-The shipped binary embeds the `freeCodeCamp-Universe` GitHub App client id (public; device flow uses no `client_secret`), so `universe login` works out of the box for staff once the App is installed on their org. Fork operators and self-hosted mirror tenants set `UNIVERSE_GH_CLIENT_ID` to their own GitHub App's id — env value wins when set.
+- The computer software is licensed under the [BSD-3-Clause](LICENSE) license.

package/dist/index.cjs

@@ -23566,6 +23566,16 @@ function createProxyClient(cfg) {
         (raw) => repoRowSchema.parse(raw)
       );
     },
+    async deleteRepoRequest(req) {
+      const url2 = `${base}/api/repo/${encodeURIComponent(req.id)}`;
+      return call(url2, {
+        method: "DELETE",
+        headers: {
+          Authorization: await userBearer(),
+          Accept: "application/json"
+        }
+      });
+    },
     async listRepoTemplates() {
       const res = await call(
         `${base}/api/repo/templates`,
@@ -25295,7 +25305,9 @@ async function create(options, deps = {}) {
     }
   } catch (err) {
     const { code, message, kind, requestId } = wrapProxyError(command, err);
-    outputError({ json: options.json, command }, code, message, {
+    const display = kind === "already_exists" && !options.json ? `${message}
+  \u2192 run \`universe repo ls --status all\` to find the existing request (it may be active or failed)` : message;
+    outputError({ json: options.json, command }, code, display, {
       logError: error48,
       kind,
       requestId,
@@ -25314,19 +25326,20 @@ async function ls3(options, deps = {}) {
   const exit = deps.exit ?? exitWithCode;
   let identitySource;
   try {
-    if (options.status !== void 0 && !LS_STATUSES.includes(options.status)) {
+    const requestedStatus = options.all ? "all" : options.status;
+    if (requestedStatus !== void 0 && !LS_STATUSES.includes(requestedStatus)) {
       throw new UsageError(
-        `invalid --status "${options.status}": must be one of ${LS_STATUSES.join(", ")}`
+        `invalid --status "${requestedStatus}": must be one of ${LS_STATUSES.join(", ")}`
       );
     }
     const setup = await setupClient2(deps);
     const client = setup.client;
     identitySource = setup.identitySource;
     const rows = await client.listRepoRequests({
-      status: options.status,
+      status: requestedStatus,
       mine: options.mine ?? false
     });
-    const status2 = options.status ?? "pending";
+    const status2 = requestedStatus ?? "pending";
     if (options.json) {
       emitJson9(
         buildEnvelope(command, true, {
@@ -25425,6 +25438,62 @@ async function reject(options, deps = {}) {
   }
 }
 
+// src/commands/repo/rm.ts
+async function rm3(options, deps = {}) {
+  const command = "repo rm";
+  const success2 = deps.logSuccess ?? ((s) => O2.success(s));
+  const error48 = deps.logError ?? ((s) => O2.error(s));
+  const exit = deps.exit ?? exitWithCode;
+  const prompts = deps.prompts ?? defaultRepoPrompts;
+  const isTTY = deps.isTTY ?? Boolean(process.stdout.isTTY);
+  let identitySource;
+  try {
+    if (!options.id || options.id.trim().length === 0) {
+      throw new UsageError("request id is required (positional argument)");
+    }
+    const setup = await setupClient2(deps);
+    const client = setup.client;
+    identitySource = setup.identitySource;
+    if (!options.json && !options.yes) {
+      if (!isTTY) {
+        throw new UsageError(
+          "non-interactive session: pass --yes to delete without confirmation"
+        );
+      }
+      const cur = await client.getRepoRequest(options.id);
+      const ok = await prompts.confirm({
+        message: `Delete the ${cur.status} request for "${cur.name}" (${cur.id})? This frees the repo name.`
+      });
+      if (prompts.isCancel(ok) || ok === false) {
+        throw new ConfirmError("repo rm cancelled");
+      }
+    }
+    await client.deleteRepoRequest({ id: options.id });
+    if (options.json) {
+      emitJson9(
+        buildEnvelope(command, true, {
+          id: options.id,
+          deleted: true,
+          identitySource
+        })
+      );
+    } else {
+      success2(
+        `Deleted request ${options.id} \u2014 the repo name is free to request again`
+      );
+    }
+  } catch (err) {
+    const { code, message, kind, requestId } = wrapProxyError(command, err);
+    outputError({ json: options.json, command }, code, message, {
+      logError: error48,
+      kind,
+      requestId,
+      extras: identitySource ? { identitySource } : void 0
+    });
+    exit(code);
+  }
+}
+
 // src/commands/repo/status.ts
 function humanRow(row) {
   const lines = [
@@ -25481,6 +25550,7 @@ async function status(options, deps = {}) {
 }
 
 // src/lib/update-notifier.ts
+var import_node_child_process4 = require("child_process");
 var import_node_fs3 = require("fs");
 var import_promises8 = require("fs/promises");
 var import_node_os2 = require("os");
@@ -25489,8 +25559,21 @@ var APP_DIR2 = "universe-cli";
 var CACHE_FILE = "update-check.json";
 var PKG_NAME = "@freecodecamp/universe-cli";
 var NPM_LATEST_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
-var TTL_MS = 24 * 60 * 60 * 1e3;
+var DEFAULT_TTL_MS = 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 3e3;
+var REFRESH_ENV = "UNIVERSE_REFRESH_WORKER";
+function ttlMs() {
+  const raw = process.env["UNIVERSE_UPDATE_TTL_MS"];
+  if (raw !== void 0) {
+    const n = Number.parseInt(raw, 10);
+    if (Number.isFinite(n) && n >= 0) return n;
+  }
+  return DEFAULT_TTL_MS;
+}
+function latestUrl() {
+  const override = process.env["UNIVERSE_UPDATE_URL"];
+  return override && override.length > 0 ? override : NPM_LATEST_URL;
+}
 function configBase2() {
   const xdg = process.env["XDG_CONFIG_HOME"];
   if (xdg && xdg.length > 0) return xdg;
@@ -25544,7 +25627,7 @@ async function fetchLatest() {
   const ctl = new AbortController();
   const timer = setTimeout(() => ctl.abort(), FETCH_TIMEOUT_MS);
   try {
-    const res = await fetch(NPM_LATEST_URL, {
+    const res = await fetch(latestUrl(), {
       signal: ctl.signal,
       headers: { accept: "application/json" }
     });
@@ -25577,10 +25660,12 @@ function parseVersion(s) {
   if (nums.some((n) => Number.isNaN(n))) return null;
   return [nums[0], nums[1], nums[2]];
 }
-async function refreshIfStale(now = Date.now()) {
+async function refreshIfStale(now = Date.now(), options = {}) {
   if (isDisabled()) return;
-  const cache = await readCache();
-  if (cache !== null && now - cache.lastCheck < TTL_MS) return;
+  if (!options.force) {
+    const cache = await readCache();
+    if (cache !== null && now - cache.lastCheck < ttlMs()) return;
+  }
   const latest = await fetchLatest();
   if (latest === null) return;
   try {
@@ -25588,6 +25673,25 @@ async function refreshIfStale(now = Date.now()) {
   } catch {
   }
 }
+function spawnRefresh(now = Date.now()) {
+  if (isDisabled()) return;
+  const cache = readCacheSync();
+  if (cache !== null && now - cache.lastCheck < ttlMs()) return;
+  try {
+    const entry = process.argv[1];
+    const args = entry ? [entry] : [];
+    const child = (0, import_node_child_process4.spawn)(process.execPath, args, {
+      detached: true,
+      stdio: "ignore",
+      env: { ...process.env, [REFRESH_ENV]: "1" }
+    });
+    child.unref();
+  } catch {
+  }
+}
+async function runRefreshWorker() {
+  await refreshIfStale(Date.now(), { force: true });
+}
 function getNoticeSync(current) {
   if (isDisabled()) return null;
   const cache = readCacheSync();
@@ -25628,14 +25732,17 @@ function installExitNotice(current) {
     printed = true;
     const n = getNoticeSync(current);
     if (n === null) return;
-    process.stderr.write(formatNotice(n));
+    try {
+      (0, import_node_fs3.writeSync)(2, formatNotice(n));
+    } catch {
+    }
   };
   process.on("beforeExit", emit);
   process.on("exit", emit);
 }
 
 // src/cli.ts
-var version2 = true ? "0.8.0" : "0.0.0";
+var version2 = true ? "0.9.0" : "0.0.0";
 function handleActionError(command, json2, err) {
   const ctx = { json: json2, command };
   const message = err instanceof Error ? err.message : "unknown error";
@@ -25650,11 +25757,16 @@ function findFirstPositional(args) {
   }
   return -1;
 }
-function run(argv = process.argv) {
+function isVersionRequest(args) {
+  return args.includes("--version") || args.includes("-v");
+}
+async function run(argv = process.argv) {
   installExitNotice(version2);
-  void refreshIfStale().catch(() => {
-  });
   const args = argv.slice(2);
+  const versionRequested = isVersionRequest(args);
+  if (!versionRequested) {
+    spawnRefresh();
+  }
   const firstPosIdx = findFirstPositional(args);
   const namespace = firstPosIdx >= 0 ? args[firstPosIdx] : void 0;
   const isStatic = namespace === "static";
@@ -25757,13 +25869,14 @@ function run(argv = process.argv) {
     repoCli.command("ls", "List repo requests (default: pending)").option("--json", "Output as JSON").option(
       "--status <status>",
       "pending | approved | active | rejected | failed | all"
-    ).option("--mine", "Only requests you submitted").action(
+    ).option("--mine", "Only requests you submitted").option("--all", "Show every state (shorthand for --status all)").action(
       async (flags) => {
         try {
           await ls3({
             json: flags.json ?? false,
             status: flags.status,
-            mine: flags.mine ?? false
+            mine: flags.mine ?? false,
+            all: flags.all ?? false
           });
         } catch (err) {
           handleActionError("repo ls", flags.json ?? false, err);
@@ -25805,6 +25918,20 @@ function run(argv = process.argv) {
         handleActionError("repo status", flags.json ?? false, err);
       }
     });
+    repoCli.command(
+      "rm <id>",
+      "Delete a request, freeing its repo name (admin only)"
+    ).option("--json", "Output as JSON").option("--yes", "Skip confirmation prompts (required for non-TTY/CI)").action(async (id, flags) => {
+      try {
+        await rm3({
+          json: flags.json ?? false,
+          id,
+          yes: flags.yes ?? false
+        });
+      } catch (err) {
+        handleActionError("repo rm", flags.json ?? false, err);
+      }
+    });
     repoCli.help();
     repoCli.version(version2);
     const knownRepoSubs = /* @__PURE__ */ new Set([
@@ -25812,7 +25939,8 @@ function run(argv = process.argv) {
       "ls",
       "approve",
       "reject",
-      "status"
+      "status",
+      "rm"
     ]);
     const repoValueFlags = /* @__PURE__ */ new Set([
       "--visibility",
@@ -25947,6 +26075,9 @@ function run(argv = process.argv) {
     cli.version(version2);
     cli.parse(argv);
   }
+  if (versionRequested) {
+    await refreshIfStale(Date.now(), { force: true });
+  }
 }
 
 // src/lib/fatal.ts
@@ -25964,5 +26095,9 @@ function installFatalHandlers(onFatal = defaultOnFatal) {
 }
 
 // src/index.ts
-installFatalHandlers();
-run();
+if (process.env[REFRESH_ENV] === "1") {
+  void runRefreshWorker();
+} else {
+  installFatalHandlers();
+  void run();
+}

package/dist/index.js

@@ -889,6 +889,16 @@ function createProxyClient(cfg) {
         (raw) => repoRowSchema.parse(raw)
       );
     },
+    async deleteRepoRequest(req) {
+      const url = `${base}/api/repo/${encodeURIComponent(req.id)}`;
+      return call(url, {
+        method: "DELETE",
+        headers: {
+          Authorization: await userBearer(),
+          Accept: "application/json"
+        }
+      });
+    },
     async listRepoTemplates() {
       const res = await call(
         `${base}/api/repo/templates`,
@@ -2645,7 +2655,9 @@ async function create(options, deps = {}) {
     }
   } catch (err) {
     const { code, message, kind, requestId } = wrapProxyError(command, err);
-    outputError({ json: options.json, command }, code, message, {
+    const display = kind === "already_exists" && !options.json ? `${message}
+  \u2192 run \`universe repo ls --status all\` to find the existing request (it may be active or failed)` : message;
+    outputError({ json: options.json, command }, code, display, {
       logError: error,
       kind,
       requestId,
@@ -2665,19 +2677,20 @@ async function ls3(options, deps = {}) {
   const exit = deps.exit ?? exitWithCode;
   let identitySource;
   try {
-    if (options.status !== void 0 && !LS_STATUSES.includes(options.status)) {
+    const requestedStatus = options.all ? "all" : options.status;
+    if (requestedStatus !== void 0 && !LS_STATUSES.includes(requestedStatus)) {
       throw new UsageError(
-        `invalid --status "${options.status}": must be one of ${LS_STATUSES.join(", ")}`
+        `invalid --status "${requestedStatus}": must be one of ${LS_STATUSES.join(", ")}`
       );
     }
     const setup = await setupClient2(deps);
     const client = setup.client;
     identitySource = setup.identitySource;
     const rows = await client.listRepoRequests({
-      status: options.status,
+      status: requestedStatus,
       mine: options.mine ?? false
     });
-    const status2 = options.status ?? "pending";
+    const status2 = requestedStatus ?? "pending";
     if (options.json) {
       emitJson9(
         buildEnvelope(command, true, {
@@ -2777,8 +2790,65 @@ async function reject(options, deps = {}) {
   }
 }
 
-// src/commands/repo/status.ts
+// src/commands/repo/rm.ts
 import { log as log17 } from "@clack/prompts";
+async function rm3(options, deps = {}) {
+  const command = "repo rm";
+  const success = deps.logSuccess ?? ((s) => log17.success(s));
+  const error = deps.logError ?? ((s) => log17.error(s));
+  const exit = deps.exit ?? exitWithCode;
+  const prompts = deps.prompts ?? defaultRepoPrompts;
+  const isTTY = deps.isTTY ?? Boolean(process.stdout.isTTY);
+  let identitySource;
+  try {
+    if (!options.id || options.id.trim().length === 0) {
+      throw new UsageError("request id is required (positional argument)");
+    }
+    const setup = await setupClient2(deps);
+    const client = setup.client;
+    identitySource = setup.identitySource;
+    if (!options.json && !options.yes) {
+      if (!isTTY) {
+        throw new UsageError(
+          "non-interactive session: pass --yes to delete without confirmation"
+        );
+      }
+      const cur = await client.getRepoRequest(options.id);
+      const ok = await prompts.confirm({
+        message: `Delete the ${cur.status} request for "${cur.name}" (${cur.id})? This frees the repo name.`
+      });
+      if (prompts.isCancel(ok) || ok === false) {
+        throw new ConfirmError("repo rm cancelled");
+      }
+    }
+    await client.deleteRepoRequest({ id: options.id });
+    if (options.json) {
+      emitJson9(
+        buildEnvelope(command, true, {
+          id: options.id,
+          deleted: true,
+          identitySource
+        })
+      );
+    } else {
+      success(
+        `Deleted request ${options.id} \u2014 the repo name is free to request again`
+      );
+    }
+  } catch (err) {
+    const { code, message, kind, requestId } = wrapProxyError(command, err);
+    outputError({ json: options.json, command }, code, message, {
+      logError: error,
+      kind,
+      requestId,
+      extras: identitySource ? { identitySource } : void 0
+    });
+    exit(code);
+  }
+}
+
+// src/commands/repo/status.ts
+import { log as log18 } from "@clack/prompts";
 function humanRow(row) {
   const lines = [
     `Request ${row.id}`,
@@ -2799,8 +2869,8 @@ function humanRow(row) {
 }
 async function status(options, deps = {}) {
   const command = "repo status";
-  const message = deps.logMessage ?? ((s) => log17.message(s));
-  const error = deps.logError ?? ((s) => log17.error(s));
+  const message = deps.logMessage ?? ((s) => log18.message(s));
+  const error = deps.logError ?? ((s) => log18.error(s));
   const exit = deps.exit ?? exitWithCode;
   let identitySource;
   try {
@@ -2834,7 +2904,8 @@ async function status(options, deps = {}) {
 }
 
 // src/lib/update-notifier.ts
-import { readFileSync } from "fs";
+import { spawn as spawn2 } from "child_process";
+import { readFileSync, writeSync } from "fs";
 import { mkdir as mkdir2, readFile as readFile6, writeFile as writeFile2 } from "fs/promises";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname2, join as join3 } from "path";
@@ -2842,8 +2913,21 @@ var APP_DIR2 = "universe-cli";
 var CACHE_FILE = "update-check.json";
 var PKG_NAME = "@freecodecamp/universe-cli";
 var NPM_LATEST_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
-var TTL_MS = 24 * 60 * 60 * 1e3;
+var DEFAULT_TTL_MS = 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 3e3;
+var REFRESH_ENV = "UNIVERSE_REFRESH_WORKER";
+function ttlMs() {
+  const raw = process.env["UNIVERSE_UPDATE_TTL_MS"];
+  if (raw !== void 0) {
+    const n = Number.parseInt(raw, 10);
+    if (Number.isFinite(n) && n >= 0) return n;
+  }
+  return DEFAULT_TTL_MS;
+}
+function latestUrl() {
+  const override = process.env["UNIVERSE_UPDATE_URL"];
+  return override && override.length > 0 ? override : NPM_LATEST_URL;
+}
 function configBase2() {
   const xdg = process.env["XDG_CONFIG_HOME"];
   if (xdg && xdg.length > 0) return xdg;
@@ -2897,7 +2981,7 @@ async function fetchLatest() {
   const ctl = new AbortController();
   const timer = setTimeout(() => ctl.abort(), FETCH_TIMEOUT_MS);
   try {
-    const res = await fetch(NPM_LATEST_URL, {
+    const res = await fetch(latestUrl(), {
       signal: ctl.signal,
       headers: { accept: "application/json" }
     });
@@ -2930,10 +3014,12 @@ function parseVersion(s) {
   if (nums.some((n) => Number.isNaN(n))) return null;
   return [nums[0], nums[1], nums[2]];
 }
-async function refreshIfStale(now = Date.now()) {
+async function refreshIfStale(now = Date.now(), options = {}) {
   if (isDisabled()) return;
-  const cache = await readCache();
-  if (cache !== null && now - cache.lastCheck < TTL_MS) return;
+  if (!options.force) {
+    const cache = await readCache();
+    if (cache !== null && now - cache.lastCheck < ttlMs()) return;
+  }
   const latest = await fetchLatest();
   if (latest === null) return;
   try {
@@ -2941,6 +3027,25 @@ async function refreshIfStale(now = Date.now()) {
   } catch {
   }
 }
+function spawnRefresh(now = Date.now()) {
+  if (isDisabled()) return;
+  const cache = readCacheSync();
+  if (cache !== null && now - cache.lastCheck < ttlMs()) return;
+  try {
+    const entry = process.argv[1];
+    const args = entry ? [entry] : [];
+    const child = spawn2(process.execPath, args, {
+      detached: true,
+      stdio: "ignore",
+      env: { ...process.env, [REFRESH_ENV]: "1" }
+    });
+    child.unref();
+  } catch {
+  }
+}
+async function runRefreshWorker() {
+  await refreshIfStale(Date.now(), { force: true });
+}
 function getNoticeSync(current) {
   if (isDisabled()) return null;
   const cache = readCacheSync();
@@ -2981,14 +3086,17 @@ function installExitNotice(current) {
     printed = true;
     const n = getNoticeSync(current);
     if (n === null) return;
-    process.stderr.write(formatNotice(n));
+    try {
+      writeSync(2, formatNotice(n));
+    } catch {
+    }
   };
   process.on("beforeExit", emit);
   process.on("exit", emit);
 }
 
 // src/cli.ts
-var version = true ? "0.8.0" : "0.0.0";
+var version = true ? "0.9.0" : "0.0.0";
 function handleActionError(command, json, err) {
   const ctx = { json, command };
   const message = err instanceof Error ? err.message : "unknown error";
@@ -3003,11 +3111,16 @@ function findFirstPositional(args) {
   }
   return -1;
 }
-function run(argv = process.argv) {
+function isVersionRequest(args) {
+  return args.includes("--version") || args.includes("-v");
+}
+async function run(argv = process.argv) {
   installExitNotice(version);
-  void refreshIfStale().catch(() => {
-  });
   const args = argv.slice(2);
+  const versionRequested = isVersionRequest(args);
+  if (!versionRequested) {
+    spawnRefresh();
+  }
   const firstPosIdx = findFirstPositional(args);
   const namespace = firstPosIdx >= 0 ? args[firstPosIdx] : void 0;
   const isStatic = namespace === "static";
@@ -3110,13 +3223,14 @@ function run(argv = process.argv) {
     repoCli.command("ls", "List repo requests (default: pending)").option("--json", "Output as JSON").option(
       "--status <status>",
       "pending | approved | active | rejected | failed | all"
-    ).option("--mine", "Only requests you submitted").action(
+    ).option("--mine", "Only requests you submitted").option("--all", "Show every state (shorthand for --status all)").action(
       async (flags) => {
         try {
           await ls3({
             json: flags.json ?? false,
             status: flags.status,
-            mine: flags.mine ?? false
+            mine: flags.mine ?? false,
+            all: flags.all ?? false
           });
         } catch (err) {
           handleActionError("repo ls", flags.json ?? false, err);
@@ -3158,6 +3272,20 @@ function run(argv = process.argv) {
         handleActionError("repo status", flags.json ?? false, err);
       }
     });
+    repoCli.command(
+      "rm <id>",
+      "Delete a request, freeing its repo name (admin only)"
+    ).option("--json", "Output as JSON").option("--yes", "Skip confirmation prompts (required for non-TTY/CI)").action(async (id, flags) => {
+      try {
+        await rm3({
+          json: flags.json ?? false,
+          id,
+          yes: flags.yes ?? false
+        });
+      } catch (err) {
+        handleActionError("repo rm", flags.json ?? false, err);
+      }
+    });
     repoCli.help();
     repoCli.version(version);
     const knownRepoSubs = /* @__PURE__ */ new Set([
@@ -3165,7 +3293,8 @@ function run(argv = process.argv) {
       "ls",
       "approve",
       "reject",
-      "status"
+      "status",
+      "rm"
     ]);
     const repoValueFlags = /* @__PURE__ */ new Set([
       "--visibility",
@@ -3300,6 +3429,9 @@ function run(argv = process.argv) {
     cli.version(version);
     cli.parse(argv);
   }
+  if (versionRequested) {
+    await refreshIfStale(Date.now(), { force: true });
+  }
 }
 
 // src/lib/fatal.ts
@@ -3317,5 +3449,9 @@ function installFatalHandlers(onFatal = defaultOnFatal) {
 }
 
 // src/index.ts
-installFatalHandlers();
-run();
+if (process.env[REFRESH_ENV] === "1") {
+  void runRefreshWorker();
+} else {
+  installFatalHandlers();
+  void run();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@freecodecamp/universe-cli",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "main": "dist/index.js",
   "scripts": {
     "test": "vitest run",
@@ -11,7 +11,7 @@
     "prepare": "husky"
   },
   "author": "Mrugesh Mohapatra <noreply@mrugesh.dev> (https://mrugesh.dev/)",
-  "license": "ISC",
+  "license": "BSD-3-Clause",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/freeCodeCamp-Universe/universe-cli.git"
@@ -58,4 +58,4 @@
     "deployment",
     "freecodecamp"
   ]
-}
+}