@girardmedia/bootspring 2.3.4 → 2.3.6

package/README.md

@@ -12,7 +12,8 @@ Bootspring is an AI-powered development platform that provides intelligent conte
 - **Preseed → Seed → Scaffold Pipeline** - Go from idea to working code with AI-assisted document generation
 - **Universal Drop Zone** - Drop any files and let AI analyze and categorize them for you
 - **Intelligent Context Management** - Automatically generates and maintains AI context for your project
-- **Specialized Agents** - 12+ expert agents for database, security, frontend, backend, and more
+- **Parallel Workflow Orchestration** - Multi-phase parallel execution plans with 36 specialized agents
+- **Specialized Agents** - 36 expert agents for database, security, frontend, backend, and more
 - **MCP Integration** - Native Model Context Protocol server for seamless AI assistant integration
 - **Entitlement-Ready Skill Catalog** - Built-in patterns public, curated external catalog policy-gated
 - **Plugin System** - Extensible architecture for auth, payments, database, testing, security

package/dist/cli/index.cjs

@@ -3347,6 +3347,7 @@ __export(dist_exports, {
   saveProjectScopedSession: () => saveProjectScopedSession,
   saveSession: () => saveSession,
   session: () => session_exports,
+  setAuthFailureHandler: () => setAuthFailureHandler,
   setCurrentProject: () => setCurrentProject,
   slugify: () => slugify,
   startDeviceFlow: () => startDeviceFlow,
@@ -3389,6 +3390,7 @@ function decrypt(encrypted) {
   return JSON.parse(decrypted);
 }
 function getCredentials() {
+  if (_credentialCache) return _credentialCache.value;
   try {
     if (import_fs2.default.existsSync(CREDENTIALS_FILE)) {
       const raw = JSON.parse(import_fs2.default.readFileSync(CREDENTIALS_FILE, "utf-8"));
@@ -3396,11 +3398,17 @@ function getCredentials() {
       if (raw && typeof raw === "object" && !raw.iv && !raw.data) {
         saveCredentials(decrypted);
       }
+      _credentialCache = { resolved: true, value: decrypted };
       return decrypted;
     }
-  } catch (err) {
-    console.error("[bootspring] Failed to read credentials:", err.message);
+  } catch {
+    _credentialDecryptFailed = true;
+    try {
+      import_fs2.default.unlinkSync(CREDENTIALS_FILE);
+    } catch {
+    }
   }
+  _credentialCache = { resolved: true, value: null };
   return null;
 }
 function saveCredentials(credentials) {
@@ -3411,6 +3419,7 @@ function saveCredentials(credentials) {
     JSON.stringify(encrypted, null, 2),
     { mode: 384 }
   );
+  _credentialCache = null;
 }
 function clearCredentials() {
   try {
@@ -3419,6 +3428,8 @@ function clearCredentials() {
     }
   } catch {
   }
+  _credentialCache = null;
+  _credentialDecryptFailed = false;
 }
 function getToken() {
   const creds = getCredentials();
@@ -3518,9 +3529,13 @@ function getApiKey() {
   if (storedApiKey) return storedApiKey;
   const legacyApiKey = getLegacyProjectApiKey();
   if (legacyApiKey) {
-    if (!legacyProjectApiKeyWarned) {
-      legacyProjectApiKeyWarned = true;
-      console.warn("[bootspring] Using legacy .bootspring.json apiKey fallback.");
+    if (_credentialDecryptFailed) {
+      try {
+        saveCredentials({ apiKey: legacyApiKey });
+        _credentialCache = null;
+        _credentialDecryptFailed = false;
+      } catch {
+      }
     }
     return legacyApiKey;
   }
@@ -3731,6 +3746,9 @@ function clearDeviceInfo() {
   } catch {
   }
 }
+function setAuthFailureHandler(handler) {
+  _onAuthFailure = handler;
+}
 function formatHttpErrorBody(body, statusCode) {
   const raw = String(body || "").trim();
   if (!raw) return `API Error (${statusCode || "unknown"})`;
@@ -3762,7 +3780,7 @@ function appendQueryParams(url, data) {
   }
   return url;
 }
-async function request(method, path310, data = null, options = {}) {
+async function rawRequest(method, path310, data, options) {
   const authHeaders = await resolveAuthHeaders();
   const url = appendQueryParams(new URL(`/api/${API_VERSION}${path310}`, API_BASE), method === "GET" ? data : null);
   const isHttps = url.protocol === "https:";
@@ -3824,6 +3842,19 @@ async function request(method, path310, data = null, options = {}) {
     req.end();
   });
 }
+async function request(method, path310, data = null, options = {}) {
+  try {
+    return await rawRequest(method, path310, data, options);
+  } catch (err) {
+    if (err.status === 401 && _onAuthFailure && !options._authRetried) {
+      const reauthOk = await _onAuthFailure();
+      if (reauthOk) {
+        return rawRequest(method, path310, data, { ...options, _authRetried: true, noCache: true });
+      }
+    }
+    throw err;
+  }
+}
 async function healthCheck() {
   try {
     const url = new URL("/health", API_BASE);
@@ -4100,7 +4131,7 @@ function validateSlug(slug) {
   }
   return { valid: true, sanitized: slug };
 }
-var import_fs2, import_path2, import_os, import_crypto, import_https, import_http, import_fs3, import_path3, __defProp2, __export2, auth_exports, BOOTSPRING_DIR, CREDENTIALS_FILE, CONFIG_FILE, DEVICE_FILE, getEncryptionKey, legacyProjectApiKeyWarned, api_client_exports, API_BASE, API_VERSION, cache, CACHE_TTL, session_exports, SESSION_FILE, LOCAL_CONFIG_NAME, PROJECT_SCOPE_MARKERS, LIMITS, PATTERNS, SHELL_DANGEROUS_CHARS;
+var import_fs2, import_path2, import_os, import_crypto, import_https, import_http, import_fs3, import_path3, __defProp2, __export2, auth_exports, BOOTSPRING_DIR, CREDENTIALS_FILE, CONFIG_FILE, DEVICE_FILE, _credentialCache, _credentialDecryptFailed, getEncryptionKey, api_client_exports, API_BASE, API_VERSION, _onAuthFailure, cache, CACHE_TTL, session_exports, SESSION_FILE, LOCAL_CONFIG_NAME, PROJECT_SCOPE_MARKERS, LIMITS, PATTERNS, SHELL_DANGEROUS_CHARS;
 var init_dist2 = __esm({
   "../../packages/core/dist/index.mjs"() {
     "use strict";
@@ -4168,11 +4199,12 @@ var init_dist2 = __esm({
     CREDENTIALS_FILE = import_path2.default.join(BOOTSPRING_DIR, "credentials.json");
     CONFIG_FILE = import_path2.default.join(BOOTSPRING_DIR, "config.json");
     DEVICE_FILE = import_path2.default.join(BOOTSPRING_DIR, "device.json");
+    _credentialCache = null;
+    _credentialDecryptFailed = false;
     getEncryptionKey = () => {
       const machineId = import_os.default.hostname() + import_os.default.userInfo().username;
       return import_crypto.default.createHash("sha256").update(machineId).digest();
     };
-    legacyProjectApiKeyWarned = false;
     api_client_exports = {};
     __export2(api_client_exports, {
       API_BASE: () => API_BASE,
@@ -4181,10 +4213,12 @@ var init_dist2 = __esm({
       healthCheck: () => healthCheck,
       pollDeviceToken: () => pollDeviceToken,
       request: () => request,
+      setAuthFailureHandler: () => setAuthFailureHandler,
       startDeviceFlow: () => startDeviceFlow
     });
     API_BASE = process.env["BOOTSPRING_API_URL"] || "https://api.bootspring.com";
     API_VERSION = "v1";
+    _onAuthFailure = null;
     cache = /* @__PURE__ */ new Map();
     CACHE_TTL = 6e4;
     session_exports = {};
@@ -4254,6 +4288,9 @@ var {
   Help
 } = import_index.default;
 
+// src/index.ts
+init_dist2();
+
 // src/commands/auth.ts
 init_cjs_shims();
 var import_child_process = require("child_process");
@@ -19449,4 +19486,22 @@ registerWatchCommand(program2);
 registerContextCommand(program2);
 registerManagerCommand(program2);
 registerSetupCommand(program2);
+api_client_exports.setAuthFailureHandler(async () => {
+  const legacyKey = auth_exports.getLegacyProjectApiKey();
+  if (legacyKey) {
+    try {
+      const response = await api_client_exports.request("POST", "/keys/validate", { apiKey: legacyKey }, { _authRetried: true });
+      if (response.valid) {
+        auth_exports.loginWithApiKey(legacyKey, response);
+        return true;
+      }
+    } catch {
+    }
+  }
+  console.error(`
+${COLORS.yellow}\u26A0${COLORS.reset}  Session expired or invalid.`);
+  console.error(`   Run ${COLORS.bold}bootspring auth login${COLORS.reset} to re-authenticate.
+`);
+  return false;
+});
 program2.parse();

package/dist/core.js

@@ -1600,7 +1600,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@girardmedia/bootspring",
-      version: "2.3.4",
+      version: "2.3.6",
       description: "Thin client for Bootspring cloud MCP, hosted agents, and paywalled workflow intelligence",
       keywords: [
         "ai",

package/dist/mcp-server.js

@@ -45,7 +45,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@girardmedia/bootspring",
-      version: "2.3.4",
+      version: "2.3.6",
       description: "Thin client for Bootspring cloud MCP, hosted agents, and paywalled workflow intelligence",
       keywords: [
         "ai",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@girardmedia/bootspring",
-  "version": "2.3.4",
+  "version": "2.3.6",
   "description": "Thin client for Bootspring cloud MCP, hosted agents, and paywalled workflow intelligence",
   "keywords": [
     "ai",