@getxflow/cli 0.10.5 → 0.10.6

package/dist/commands/projects.js

@@ -100,6 +100,18 @@ async function init(args) {
     (0, ui_1.out)('    npm run dev        # develop');
     (0, ui_1.out)('    xflow deploy       # send the code, build and release');
 }
+/**
+ * Linking is a step, not a task. Without this the agent reports the command as done and
+ * goes quiet, leaving the person in front of a folder: it has to read the skill and come
+ * back with a question instead.
+ */
+function nextAfterLink(skillReady) {
+    (0, ui_1.out)('');
+    (0, ui_1.out)(`  ${(0, ui_1.bold)('Next:')}`);
+    if (skillReady)
+        (0, ui_1.out)(`    read ${skills_1.SKILL_IN_PROJECT}: how this platform is built and shipped`);
+    (0, ui_1.out)('    then ask the user what to build or change, and start there');
+}
 async function link(args) {
     const root = (0, config_1.findProjectRoot)() ?? process.cwd();
     const existing = (0, node_fs_1.existsSync)((0, node_path_1.join)(root, config_1.CONFIG_FILE)) ? (0, config_1.readConfig)(root) : undefined;
@@ -148,11 +160,13 @@ async function link(args) {
         write(dir, '.env', (0, template_1.envFile)(card.project_token, client.apiUrl, card.functions));
         (0, ui_1.note)((0, ui_1.dim)('  Created .env with the project token and the function addresses'));
     }
-    (0, skills_1.installSkillQuietly)(dir);
+    const skillReady = (0, skills_1.installSkillQuietly)(dir);
     (0, ui_1.ok)(`The folder is linked to the project "${card.name}"`);
     (0, ui_1.note)((0, ui_1.dim)(`  ${(0, node_path_1.join)(dir, config_1.CONFIG_FILE)}`));
-    if (!fresh)
+    if (!fresh) {
+        nextAfterLink(skillReady);
         return;
+    }
     // A clone without the code is half a clone, and the folder has to remember
     // which revision it works from: without that the first push has nothing to
     // compare against and stops.
@@ -164,11 +178,15 @@ async function link(args) {
     catch (e) {
         if (e instanceof api_1.ApiError && e.status === 404) {
             (0, ui_1.note)((0, ui_1.dim)('  The project has no sources yet: write the code and run xflow deploy'));
+            nextAfterLink(skillReady);
             return;
         }
+        // No next step while the code is missing: the pull has to succeed first.
         (0, ui_1.warn)(`The sources did not arrive: ${e instanceof Error ? e.message : e}`);
         (0, ui_1.note)((0, ui_1.dim)('  The folder is linked, fetch them separately: xflow pull'));
+        return;
     }
+    nextAfterLink(skillReady);
 }
 async function list() {
     const root = (0, config_1.findProjectRoot)();

package/dist/commands/skills.js

@@ -1,5 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SKILL_IN_PROJECT = void 0;
+exports.skillCopyPaths = skillCopyPaths;
 exports.replacePointer = replacePointer;
 exports.copyIsStale = copyIsStale;
 exports.staleSkillCopy = staleSkillCopy;
@@ -28,13 +30,25 @@ const AGENTS = [
 const DEFAULT_PROJECT = ['claude', 'cursor', 'codex'];
 const DEFAULT_GLOBAL = ['claude', 'codex', 'universal'];
 const CURSOR_RULE = ['.cursor', 'rules', 'xflow.mdc'];
+/** Written by every default install, so the pointer and the link nudge can both name it. */
+exports.SKILL_IN_PROJECT = '.agents/skills/xflow/SKILL.md';
+/**
+ * Every place inside a project a copy of the skill can live. The archive of sources is
+ * built around this list, so a new agent in the table above is kept out of it by adding
+ * the agent and nothing else.
+ */
+function skillCopyPaths() {
+    const paths = new Set(AGENTS.map((agent) => `${[...agent.project, 'xflow'].join('/')}/`));
+    paths.add(CURSOR_RULE.join('/'));
+    return [...paths];
+}
 /** AGENTS.md is always read, unlike the lazily loaded skill: a short pointer lives there. */
 const POINTER_MARKER = '<!-- xflow-skill -->';
 const POINTER = `${POINTER_MARKER}
 ## XFlow
 
 This project is hosted on the XFlow platform and ships through the \`xflow\` CLI, not
-through a git push. Read \`.agents/skills/xflow/SKILL.md\` before deploying, publishing,
+through a git push. Read \`${exports.SKILL_IN_PROJECT}\` before deploying, publishing,
 rolling back, touching the database or migrations, cloud functions, schedules,
 environment variables, file storage and uploads, connected accounts or production logs.
 Command list: \`xflow help\`.
@@ -242,15 +256,21 @@ function defaultIds(base, global) {
     }
     return [...ids];
 }
-/** Best-effort install from init and link: a failure must not break the linking. */
+/**
+ * Best-effort install from init and link: a failure must not break the linking.
+ * Reports whether the skill is in place, so the caller does not send an agent to a
+ * file that was never written.
+ */
 function installSkillQuietly(base) {
     try {
         if (install(base, defaultIds(base, false), false).length > 0) {
             (0, ui_1.note)((0, ui_1.dim)('  The platform instructions are laid out for the AI agent'));
         }
+        return true;
     }
     catch {
         (0, ui_1.note)((0, ui_1.dim)('  Could not lay out the AI agent instructions: xflow skills'));
+        return false;
     }
 }
 function pathLabel(agent, global) {

package/dist/commands/sources.js

@@ -142,7 +142,9 @@ async function downloadRevision(client, projectId, target, revision) {
         (0, ui_1.warn)('The hash of the downloaded tree did not match the server one: the contents may have changed in transit');
     }
     (0, node_fs_1.mkdirSync)(target, { recursive: true });
-    const files = (0, zip_1.dropDirectoryEntries)(entries);
+    // The hash above covers the archive as the server holds it; what lands on disk is the
+    // code, without the skill copies older revisions still carry.
+    const files = (0, zip_1.dropDirectoryEntries)(entries).filter((entry) => !(0, tree_1.isSkillCopy)(entry.path));
     for (const entry of files) {
         const path = (0, node_path_1.join)(target, entry.path);
         (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });

package/dist/tree.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSkillCopy = isSkillCopy;
 exports.loadIgnoreRules = loadIgnoreRules;
 exports.collectFiles = collectFiles;
 exports.treeHash = treeHash;
@@ -7,6 +8,7 @@ exports.heaviest = heaviest;
 const node_crypto_1 = require("node:crypto");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
+const skills_1 = require("./commands/skills");
 /** Never sent. */
 const DEFAULT_IGNORE = [
     'node_modules/',
@@ -22,6 +24,10 @@ const DEFAULT_IGNORE = [
     // Compiler cache: rewritten by every local build, so it would make a new
     // revision out of nothing.
     'tsconfig.tsbuildinfo',
+    // The skill ships inside the CLI and is laid out by init and link, so a copy of it
+    // is not project code. Sent once, it comes back with every clone and overwrites the
+    // fresh copy the CLI has just written with the one deployed back then.
+    ...(0, skills_1.skillCopyPaths)(),
 ];
 const IGNORE_FILE = '.xflowignore';
 function globToRegExpSource(pattern) {
@@ -58,6 +64,16 @@ function compileRule(raw) {
     const suffix = dirOnly ? '/' : '($|/)';
     return { re: new RegExp(`${prefix}${source}${suffix}`) };
 }
+const skillRules = (0, skills_1.skillCopyPaths)()
+    .map(compileRule)
+    .filter((rule) => rule !== null);
+/**
+ * The same paths on the way back: revisions deployed before the rule above still carry a
+ * copy, and unpacking it would put a stale skill in front of the agent.
+ */
+function isSkillCopy(path) {
+    return skillRules.some((rule) => rule.re.test(path));
+}
 /** Defaults, the .xflowignore file and the ignore field of xflow.json. */
 function loadIgnoreRules(root, extra = []) {
     const lines = [...DEFAULT_IGNORE, ...extra];

package/dist/version.js

@@ -2,6 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_API_URL = exports.CLI_VERSION = void 0;
 /** Keep in sync with cli/package.json. */
-exports.CLI_VERSION = '0.10.5';
+exports.CLI_VERSION = '0.10.6';
 /** Overridden by XFLOW_API_URL or the `api` field in xflow.json. */
 exports.DEFAULT_API_URL = 'https://app.getxflow.com';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getxflow/cli",
-  "version": "0.10.5",
+  "version": "0.10.6",
   "description": "CLI for the XFlow platform: source sync, deployment and publishing of applications",
   "license": "UNLICENSED",
   "engines": {

package/skills/xflow/SKILL.md

@@ -24,7 +24,7 @@ contains the fix.
 
 ## Keeping these instructions current
 
-These instructions ship with xflow CLI 0.10.5. They travel inside the package, so the copy
+These instructions ship with xflow CLI 0.10.6. They travel inside the package, so the copy
 you are reading can be older than the CLI answering your commands, and nothing about that
 is visible in the text itself.