@kalphq/cli 0.0.0-dev-20260513002146 → 0.0.0-dev-20260513005156

package/dist/{deploy-Z2R7ER7U.js → deploy-AD3F3BN7.js}

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
 import {
-  runInitialDeploy
-} from "./chunk-PY6VAS54.js";
-import "./chunk-TNKYKA7N.js";
-import "./chunk-63JREECU.js";
+  promptDeployTarget,
+  runInitialDeploy,
+  showKalpCloudWaitlist
+} from "./chunk-X56YSZGT.js";
+import "./chunk-NV2IZ4XM.js";
 import {
   requireAuth
-} from "./chunk-5RODADXW.js";
+} from "./chunk-GNQI376N.js";
 import "./chunk-FO24J6XL.js";
+import "./chunk-DHCCSWJN.js";
 
 // src/commands/deploy.ts
 import { defineCommand } from "citty";
@@ -23,14 +25,16 @@ var deploy_default = defineCommand({
       p.log.error("Not authenticated. Run `kalp login` first.");
       process.exit(1);
     });
-    const proceed = await p.confirm({
-      message: "Deploy your runtime now?",
-      initialValue: true
-    });
-    if (p.isCancel(proceed) || !proceed) {
+    const target = await promptDeployTarget("Choose where to deploy your runtime");
+    if (!target) {
       p.outro("Cancelled");
       return;
     }
+    if (target === "kalp-cloud") {
+      showKalpCloudWaitlist();
+      p.outro(pc.green("Got it \u2014 you'll hear from us soon."));
+      return;
+    }
     const s = p.spinner();
     s.start("Deploying your agents runtime");
     try {
@@ -45,17 +49,18 @@ var deploy_default = defineCommand({
       }
       const preferredStudioBase = result.customDomains.length > 0 ? `https://${result.customDomains[0]}` : result.workerUrl;
       if (result.credentialsChanged || result.serviceKeyChanged) {
-        p.note(
-          [
-            `${pc.bold("Studio credentials")}`,
-            `${pc.dim("Username:")} ${pc.cyan(result.studioAdminUser)}`,
-            `${pc.dim("Password:")} ${pc.cyan(result.studioPassword)}`,
-            "",
-            `${pc.bold("Service key")}`,
-            `${pc.dim("Authorization:")} ${pc.cyan(`Bearer ${result.serviceKey}`)}`,
-            `${pc.dim("Studio:")} ${pc.cyan(`${preferredStudioBase.replace(/\/$/, "")}/studio/login`)}`
-          ].join("\n"),
-          "Admin access"
+        p.log.info(pc.bold("Admin access"));
+        console.log(
+          `  ${pc.dim("Username:")} ${pc.cyan(result.studioAdminUser)}`
+        );
+        console.log(
+          `  ${pc.dim("Password:")} ${pc.cyan(result.studioPassword)}`
+        );
+        console.log(
+          `  ${pc.dim("Service key:")} ${pc.cyan(`Bearer ${result.serviceKey}`)}`
+        );
+        console.log(
+          `  ${pc.dim("Studio URL:")} ${pc.cyan(`${preferredStudioBase.replace(/\/$/, "")}/studio/login`)}`
         );
       } else {
         p.log.info(
@@ -77,4 +82,4 @@ var deploy_default = defineCommand({
 export {
   deploy_default as default
 };
-//# sourceMappingURL=deploy-Z2R7ER7U.js.map
+//# sourceMappingURL=deploy-AD3F3BN7.js.map

package/dist/deploy-AD3F3BN7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/deploy.ts"],"sourcesContent":["import { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport { requireAuth } from \"@/utils/auth\";\nimport { runInitialDeploy } from \"@/utils/deploy\";\nimport { promptDeployTarget, showKalpCloudWaitlist } from \"@/utils/deploy-target\";\n\nconst LOGO = \"🦋\";\n\nexport default defineCommand({\n  meta: { name: \"deploy\", description: \"Deploy your agents runtime\" },\n  async run() {\n    const cwd = process.cwd();\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp deploy\")}`);\n\n    await requireAuth().catch(() => {\n      p.log.error(\"Not authenticated. Run `kalp login` first.\");\n      process.exit(1);\n    });\n\n    const target = await promptDeployTarget(\"Choose where to deploy your runtime\");\n    if (!target) {\n      p.outro(\"Cancelled\");\n      return;\n    }\n    if (target === \"kalp-cloud\") {\n      showKalpCloudWaitlist();\n      p.outro(pc.green(\"Got it — you'll hear from us soon.\"));\n      return;\n    }\n\n    const s = p.spinner();\n    s.start(\"Deploying your agents runtime\");\n\n    try {\n      const result = await runInitialDeploy(cwd);\n      s.stop(\"Deployment completed\");\n      p.log.success(`Runtime URL: ${pc.cyan(result.workerUrl)}`);\n      if (result.customDomains.length > 0) {\n        p.note(\n          result.customDomains.map((domain) => pc.cyan(`https://${domain}`)).join(\"\\n\"),\n          \"Custom domains detected\",\n        );\n      }\n\n      const preferredStudioBase =\n        result.customDomains.length > 0\n          ? `https://${result.customDomains[0]}`\n          : result.workerUrl;\n\n      if (result.credentialsChanged || result.serviceKeyChanged) {\n        p.log.info(pc.bold(\"Admin access\"));\n        console.log(\n          `  ${pc.dim(\"Username:\")} ${pc.cyan(result.studioAdminUser)}`,\n        );\n        console.log(\n          `  ${pc.dim(\"Password:\")} ${pc.cyan(result.studioPassword)}`,\n        );\n        console.log(\n          `  ${pc.dim(\"Service key:\")} ${pc.cyan(`Bearer ${result.serviceKey}`)}`,\n        );\n        console.log(\n          `  ${pc.dim(\"Studio URL:\")} ${pc.cyan(`${preferredStudioBase.replace(/\\/$/, \"\")}/studio/login`)}`,\n        );\n      } else {\n        p.log.info(\n          pc.dim(\n            \"Credentials unchanged. Check your local .env if you need to recover them.\",\n          ),\n        );\n      }\n      p.outro(pc.green(\"Your runtime is ready\"));\n    } catch (error) {\n      s.stop(\"Deployment failed\");\n      p.log.error(\n        error instanceof Error ? error.message : \"Unknown deployment error\",\n      );\n      process.exit(1);\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AAKf,IAAM,OAAO;AAEb,IAAO,iBAAQ,cAAc;AAAA,EAC3B,MAAM,EAAE,MAAM,UAAU,aAAa,6BAA6B;AAAA,EAClE,MAAM,MAAM;AACV,UAAM,MAAM,QAAQ,IAAI;AAExB,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,aAAa,CAAC,EAAE;AAE3C,UAAM,YAAY,EAAE,MAAM,MAAM;AAC9B,MAAE,MAAI,MAAM,4CAA4C;AACxD,cAAQ,KAAK,CAAC;AAAA,IAChB,CAAC;AAED,UAAM,SAAS,MAAM,mBAAmB,qCAAqC;AAC7E,QAAI,CAAC,QAAQ;AACX,MAAE,QAAM,WAAW;AACnB;AAAA,IACF;AACA,QAAI,WAAW,cAAc;AAC3B,4BAAsB;AACtB,MAAE,QAAM,GAAG,MAAM,yCAAoC,CAAC;AACtD;AAAA,IACF;AAEA,UAAM,IAAM,UAAQ;AACpB,MAAE,MAAM,+BAA+B;AAEvC,QAAI;AACF,YAAM,SAAS,MAAM,iBAAiB,GAAG;AACzC,QAAE,KAAK,sBAAsB;AAC7B,MAAE,MAAI,QAAQ,gBAAgB,GAAG,KAAK,OAAO,SAAS,CAAC,EAAE;AACzD,UAAI,OAAO,cAAc,SAAS,GAAG;AACnC,QAAE;AAAA,UACA,OAAO,cAAc,IAAI,CAAC,WAAW,GAAG,KAAK,WAAW,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI;AAAA,UAC5E;AAAA,QACF;AAAA,MACF;AAEA,YAAM,sBACJ,OAAO,cAAc,SAAS,IAC1B,WAAW,OAAO,cAAc,CAAC,CAAC,KAClC,OAAO;AAEb,UAAI,OAAO,sBAAsB,OAAO,mBAAmB;AACzD,QAAE,MAAI,KAAK,GAAG,KAAK,cAAc,CAAC;AAClC,gBAAQ;AAAA,UACN,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,GAAG,KAAK,OAAO,eAAe,CAAC;AAAA,QAC7D;AACA,gBAAQ;AAAA,UACN,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,GAAG,KAAK,OAAO,cAAc,CAAC;AAAA,QAC5D;AACA,gBAAQ;AAAA,UACN,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,GAAG,KAAK,UAAU,OAAO,UAAU,EAAE,CAAC;AAAA,QACvE;AACA,gBAAQ;AAAA,UACN,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,GAAG,KAAK,GAAG,oBAAoB,QAAQ,OAAO,EAAE,CAAC,eAAe,CAAC;AAAA,QACjG;AAAA,MACF,OAAO;AACL,QAAE,MAAI;AAAA,UACJ,GAAG;AAAA,YACD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,MAAE,QAAM,GAAG,MAAM,uBAAuB,CAAC;AAAA,IAC3C,SAAS,OAAO;AACd,QAAE,KAAK,mBAAmB;AAC1B,MAAE,MAAI;AAAA,QACJ,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AACF,CAAC;","names":[]}

package/dist/{dev-PNRWXULV.js → dev-X43HHIYV.js}

@@ -5,11 +5,13 @@ import {
   validateCompiledIR
 } from "./chunk-VCFH3R34.js";
 import {
-  ensureSecretKey,
+  ensureSecretKey
+} from "./chunk-NV2IZ4XM.js";
+import {
   materializeRuntime,
   readLocalAgentNames,
   writeRuntimeAgentsSnapshot
-} from "./chunk-63JREECU.js";
+} from "./chunk-DHCCSWJN.js";
 
 // src/commands/dev.ts
 import { watch } from "fs";
@@ -233,4 +235,4 @@ KALP_RUNTIME_MODE=local
 export {
   dev_default as default
 };
-//# sourceMappingURL=dev-PNRWXULV.js.map
+//# sourceMappingURL=dev-X43HHIYV.js.map

package/dist/{dev-PNRWXULV.js.map → dev-X43HHIYV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/dev.ts"],"sourcesContent":["import { watch, type FSWatcher } from \"node:fs\";\nimport { copyFile, mkdir, readFile, rm, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport { execa } from \"execa\";\nimport open from \"open\";\nimport { ensureSecretKey } from \"@/utils/secret\";\nimport { readAgentManifest, computePushHash } from \"@/utils/manifest\";\nimport { validateCompiledIR } from \"@/utils/validate\";\nimport {\n  materializeRuntime,\n  readLocalAgentNames,\n  writeRuntimeAgentsSnapshot,\n} from \"@/utils/runtime\";\n\nconst LOGO = \"🦋\";\nconst LOCAL_MANIFESTS_DIR = \".kalp/runtime/local-manifests\";\nconst HOT_RELOAD_DEBOUNCE_MS = 450;\n\nasync function putLocalManifest(params: {\n  cwd: string;\n  configPath: string;\n  key: string;\n  manifestPath: string;\n}): Promise<void> {\n  await execa(\n    \"npx\",\n    [\n      \"wrangler\",\n      \"kv\",\n      \"key\",\n      \"put\",\n      params.key,\n      \"--path\",\n      params.manifestPath,\n      \"--binding\",\n      \"KALP_MANIFESTS\",\n      \"--local\",\n      \"--config\",\n      params.configPath,\n    ],\n    { cwd: params.cwd },\n  );\n}\n\nasync function putLocalValue(params: {\n  cwd: string;\n  configPath: string;\n  key: string;\n  value: string;\n}): Promise<void> {\n  await execa(\n    \"npx\",\n    [\n      \"wrangler\",\n      \"kv\",\n      \"key\",\n      \"put\",\n      params.key,\n      params.value,\n      \"--binding\",\n      \"KALP_MANIFESTS\",\n      \"--local\",\n      \"--config\",\n      params.configPath,\n    ],\n    { cwd: params.cwd },\n  );\n}\n\nasync function syncLocalRuntimeState(params: {\n  cwd: string;\n  runtimeDir: string;\n  configPath: string;\n}): Promise<{ synced: number; failed: string[] }> {\n  const { cwd, runtimeDir, configPath } = params;\n  await writeRuntimeAgentsSnapshot({ cwd, runtimeDir, mode: \"local\" });\n\n  const manifestDir = join(cwd, LOCAL_MANIFESTS_DIR);\n  await rm(manifestDir, { recursive: true, force: true });\n  await mkdir(manifestDir, { recursive: true });\n\n  const agentNames = await readLocalAgentNames(cwd);\n  const failed: string[] = [];\n  let synced = 0;\n\n  for (const agentName of agentNames) {\n    try {\n      const manifest = await readAgentManifest({ cwd, agentName });\n      const hash = computePushHash(manifest.ir);\n      const validation = validateCompiledIR({ agentName, ir: manifest.ir, hash });\n      if (!validation.ok) {\n        const details = (validation.errors ?? []).join(\" | \");\n        throw new Error(\n          `validation failed (${validation.phase})${details ? `: ${details}` : \"\"}`,\n        );\n      }\n\n      const manifestKey = `${agentName}:${hash}`;\n      const latestKey = `${agentName}:latest`;\n      const manifestPath = join(manifestDir, `${agentName}-${hash}.json`);\n      await writeFile(manifestPath, JSON.stringify(manifest.ir), \"utf-8\");\n\n      await putLocalManifest({\n        cwd,\n        configPath,\n        key: manifestKey,\n        manifestPath,\n      });\n      await putLocalValue({\n        cwd,\n        configPath,\n        key: latestKey,\n        value: hash,\n      });\n      synced += 1;\n    } catch (error) {\n      const reason = error instanceof Error ? error.message : String(error);\n      failed.push(`${agentName}: ${reason}`);\n    }\n  }\n\n  return { synced, failed };\n}\n\nexport default defineCommand({\n  meta: { name: \"dev\", description: \"Run Worker + Studio local environment\" },\n  async run() {\n    const cwd = process.cwd();\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp dev\")}`);\n\n    await ensureSecretKey(cwd);\n    await copyFile(join(cwd, \".env\"), join(cwd, \".dev.vars\"));\n    const devVarsPath = join(cwd, \".dev.vars\");\n    const devVarsContent = await readFile(devVarsPath, \"utf-8\");\n    const nextDevVars = devVarsContent\n      .replace(/^KALP_ENV=.*$/m, \"\")\n      .replace(/^KALP_RUNTIME_MODE=.*$/m, \"\")\n      .trimEnd();\n    await writeFile(\n      devVarsPath,\n      `${nextDevVars}\\nKALP_ENV=local\\nKALP_RUNTIME_MODE=local\\n`,\n      \"utf-8\",\n    );\n    const runtime = await materializeRuntime(cwd, { mode: \"local\" });\n    const initialSync = await syncLocalRuntimeState({\n      cwd,\n      runtimeDir: runtime.runtimeDir,\n      configPath: runtime.wranglerConfigPath,\n    });\n    if (initialSync.failed.length > 0) {\n      for (const failure of initialSync.failed) {\n        p.log.warn(`Local sync skipped ${failure}`);\n      }\n    }\n    p.log.info(\n      `${pc.dim(\"Local agent runtime synced:\")} ${pc.cyan(String(initialSync.synced))}`,\n    );\n\n    p.note(\"Starting local runtime (wrangler dev :8787)\");\n\n    const backend = execa(\n      \"npx\",\n      [\n        \"wrangler\",\n        \"dev\",\n        \"--port\",\n        \"8787\",\n        \"--local\",\n        \"--config\",\n        runtime.wranglerConfigPath,\n      ],\n      { cwd, stdio: \"inherit\" },\n    );\n\n    let hotReloadTimer: NodeJS.Timeout | null = null;\n    let hotReloadRunning = false;\n    let hotReloadPending = false;\n\n    const runHotReloadSync = async () => {\n      if (hotReloadRunning) {\n        hotReloadPending = true;\n        return;\n      }\n\n      hotReloadRunning = true;\n      try {\n        const sync = await syncLocalRuntimeState({\n          cwd,\n          runtimeDir: runtime.runtimeDir,\n          configPath: runtime.wranglerConfigPath,\n        });\n        if (sync.failed.length > 0) {\n          p.log.warn(\n            `Local hot reload synced ${sync.synced} agents with ${sync.failed.length} warnings.`,\n          );\n          for (const failure of sync.failed) {\n            p.log.warn(`Hot reload skipped ${failure}`);\n          }\n        } else {\n          p.log.info(pc.dim(`Local hot reload synced ${sync.synced} agents.`));\n        }\n      } finally {\n        hotReloadRunning = false;\n        if (hotReloadPending) {\n          hotReloadPending = false;\n          void runHotReloadSync();\n        }\n      }\n    };\n\n    const scheduleHotReloadSync = () => {\n      if (hotReloadTimer) clearTimeout(hotReloadTimer);\n      hotReloadTimer = setTimeout(() => {\n        void runHotReloadSync();\n      }, HOT_RELOAD_DEBOUNCE_MS);\n    };\n\n    const watchers: FSWatcher[] = [];\n    const watchTargets = [join(cwd, \"agents\"), join(cwd, \".kalp\", \"state.json\")];\n    for (const target of watchTargets) {\n      try {\n        const watcher = watch(\n          target,\n          target.endsWith(\".json\") ? undefined : { recursive: true },\n          () => scheduleHotReloadSync(),\n        );\n        watchers.push(watcher);\n      } catch {\n        // Ignore missing targets (e.g. no agents yet)\n      }\n    }\n\n    const shutdown = () => {\n      if (hotReloadTimer) {\n        clearTimeout(hotReloadTimer);\n        hotReloadTimer = null;\n      }\n      for (const watcher of watchers) {\n        watcher.close();\n      }\n      backend.kill(\"SIGINT\");\n    };\n\n    process.on(\"SIGINT\", shutdown);\n    process.on(\"SIGTERM\", shutdown);\n\n    await delay(2500);\n    const studioUrl = \"http://localhost:8787/studio/login\";\n    await open(studioUrl);\n    p.log.success(`Studio opened at ${pc.cyan(studioUrl)}`);\n\n    try {\n      await backend;\n    } finally {\n      shutdown();\n      process.off(\"SIGINT\", shutdown);\n      process.off(\"SIGTERM\", shutdown);\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,aAA6B;AACtC,SAAS,UAAU,OAAO,UAAU,IAAI,iBAAiB;AACzD,SAAS,YAAY;AACrB,SAAS,cAAc,aAAa;AACpC,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AACf,SAAS,aAAa;AACtB,OAAO,UAAU;AAUjB,IAAM,OAAO;AACb,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB;AAE/B,eAAe,iBAAiB,QAKd;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,KAAK,OAAO,IAAI;AAAA,EACpB;AACF;AAEA,eAAe,cAAc,QAKX;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,KAAK,OAAO,IAAI;AAAA,EACpB;AACF;AAEA,eAAe,sBAAsB,QAIa;AAChD,QAAM,EAAE,KAAK,YAAY,WAAW,IAAI;AACxC,QAAM,2BAA2B,EAAE,KAAK,YAAY,MAAM,QAAQ,CAAC;AAEnE,QAAM,cAAc,KAAK,KAAK,mBAAmB;AACjD,QAAM,GAAG,aAAa,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACtD,QAAM,MAAM,aAAa,EAAE,WAAW,KAAK,CAAC;AAE5C,QAAM,aAAa,MAAM,oBAAoB,GAAG;AAChD,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS;AAEb,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,WAAW,MAAM,kBAAkB,EAAE,KAAK,UAAU,CAAC;AAC3D,YAAM,OAAO,gBAAgB,SAAS,EAAE;AACxC,YAAM,aAAa,mBAAmB,EAAE,WAAW,IAAI,SAAS,IAAI,KAAK,CAAC;AAC1E,UAAI,CAAC,WAAW,IAAI;AAClB,cAAM,WAAW,WAAW,UAAU,CAAC,GAAG,KAAK,KAAK;AACpD,cAAM,IAAI;AAAA,UACR,sBAAsB,WAAW,KAAK,IAAI,UAAU,KAAK,OAAO,KAAK,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,cAAc,GAAG,SAAS,IAAI,IAAI;AACxC,YAAM,YAAY,GAAG,SAAS;AAC9B,YAAM,eAAe,KAAK,aAAa,GAAG,SAAS,IAAI,IAAI,OAAO;AAClE,YAAM,UAAU,cAAc,KAAK,UAAU,SAAS,EAAE,GAAG,OAAO;AAElE,YAAM,iBAAiB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,KAAK;AAAA,QACL;AAAA,MACF,CAAC;AACD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,KAAK;AAAA,QACL,OAAO;AAAA,MACT,CAAC;AACD,gBAAU;AAAA,IACZ,SAAS,OAAO;AACd,YAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,aAAO,KAAK,GAAG,SAAS,KAAK,MAAM,EAAE;AAAA,IACvC;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAEA,IAAO,cAAQ,cAAc;AAAA,EAC3B,MAAM,EAAE,MAAM,OAAO,aAAa,wCAAwC;AAAA,EAC1E,MAAM,MAAM;AACV,UAAM,MAAM,QAAQ,IAAI;AAExB,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,UAAU,CAAC,EAAE;AAExC,UAAM,gBAAgB,GAAG;AACzB,UAAM,SAAS,KAAK,KAAK,MAAM,GAAG,KAAK,KAAK,WAAW,CAAC;AACxD,UAAM,cAAc,KAAK,KAAK,WAAW;AACzC,UAAM,iBAAiB,MAAM,SAAS,aAAa,OAAO;AAC1D,UAAM,cAAc,eACjB,QAAQ,kBAAkB,EAAE,EAC5B,QAAQ,2BAA2B,EAAE,EACrC,QAAQ;AACX,UAAM;AAAA,MACJ;AAAA,MACA,GAAG,WAAW;AAAA;AAAA;AAAA;AAAA,MACd;AAAA,IACF;AACA,UAAM,UAAU,MAAM,mBAAmB,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/D,UAAM,cAAc,MAAM,sBAAsB;AAAA,MAC9C;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,IACtB,CAAC;AACD,QAAI,YAAY,OAAO,SAAS,GAAG;AACjC,iBAAW,WAAW,YAAY,QAAQ;AACxC,QAAE,MAAI,KAAK,sBAAsB,OAAO,EAAE;AAAA,MAC5C;AAAA,IACF;AACA,IAAE,MAAI;AAAA,MACJ,GAAG,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,KAAK,OAAO,YAAY,MAAM,CAAC,CAAC;AAAA,IACjF;AAEA,IAAE,OAAK,6CAA6C;AAEpD,UAAM,UAAU;AAAA,MACd;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MACA,EAAE,KAAK,OAAO,UAAU;AAAA,IAC1B;AAEA,QAAI,iBAAwC;AAC5C,QAAI,mBAAmB;AACvB,QAAI,mBAAmB;AAEvB,UAAM,mBAAmB,YAAY;AACnC,UAAI,kBAAkB;AACpB,2BAAmB;AACnB;AAAA,MACF;AAEA,yBAAmB;AACnB,UAAI;AACF,cAAM,OAAO,MAAM,sBAAsB;AAAA,UACvC;AAAA,UACA,YAAY,QAAQ;AAAA,UACpB,YAAY,QAAQ;AAAA,QACtB,CAAC;AACD,YAAI,KAAK,OAAO,SAAS,GAAG;AAC1B,UAAE,MAAI;AAAA,YACJ,2BAA2B,KAAK,MAAM,gBAAgB,KAAK,OAAO,MAAM;AAAA,UAC1E;AACA,qBAAW,WAAW,KAAK,QAAQ;AACjC,YAAE,MAAI,KAAK,sBAAsB,OAAO,EAAE;AAAA,UAC5C;AAAA,QACF,OAAO;AACL,UAAE,MAAI,KAAK,GAAG,IAAI,2BAA2B,KAAK,MAAM,UAAU,CAAC;AAAA,QACrE;AAAA,MACF,UAAE;AACA,2BAAmB;AACnB,YAAI,kBAAkB;AACpB,6BAAmB;AACnB,eAAK,iBAAiB;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,wBAAwB,MAAM;AAClC,UAAI,eAAgB,cAAa,cAAc;AAC/C,uBAAiB,WAAW,MAAM;AAChC,aAAK,iBAAiB;AAAA,MACxB,GAAG,sBAAsB;AAAA,IAC3B;AAEA,UAAM,WAAwB,CAAC;AAC/B,UAAM,eAAe,CAAC,KAAK,KAAK,QAAQ,GAAG,KAAK,KAAK,SAAS,YAAY,CAAC;AAC3E,eAAW,UAAU,cAAc;AACjC,UAAI;AACF,cAAM,UAAU;AAAA,UACd;AAAA,UACA,OAAO,SAAS,OAAO,IAAI,SAAY,EAAE,WAAW,KAAK;AAAA,UACzD,MAAM,sBAAsB;AAAA,QAC9B;AACA,iBAAS,KAAK,OAAO;AAAA,MACvB,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AACrB,UAAI,gBAAgB;AAClB,qBAAa,cAAc;AAC3B,yBAAiB;AAAA,MACnB;AACA,iBAAW,WAAW,UAAU;AAC9B,gBAAQ,MAAM;AAAA,MAChB;AACA,cAAQ,KAAK,QAAQ;AAAA,IACvB;AAEA,YAAQ,GAAG,UAAU,QAAQ;AAC7B,YAAQ,GAAG,WAAW,QAAQ;AAE9B,UAAM,MAAM,IAAI;AAChB,UAAM,YAAY;AAClB,UAAM,KAAK,SAAS;AACpB,IAAE,MAAI,QAAQ,oBAAoB,GAAG,KAAK,SAAS,CAAC,EAAE;AAEtD,QAAI;AACF,YAAM;AAAA,IACR,UAAE;AACA,eAAS;AACT,cAAQ,IAAI,UAAU,QAAQ;AAC9B,cAAQ,IAAI,WAAW,QAAQ;AAAA,IACjC;AAAA,EACF;AACF,CAAC;","names":[]}
+{"version":3,"sources":["../src/commands/dev.ts"],"sourcesContent":["import { watch, type FSWatcher } from \"node:fs\";\nimport { copyFile, mkdir, readFile, rm, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport { execa } from \"execa\";\nimport open from \"open\";\nimport { ensureSecretKey } from \"@/utils/secret\";\nimport { readAgentManifest, computePushHash } from \"@/utils/manifest\";\nimport { validateCompiledIR } from \"@/utils/validate\";\nimport {\n  materializeRuntime,\n  readLocalAgentNames,\n  writeRuntimeAgentsSnapshot,\n} from \"@/utils/runtime\";\n\nconst LOGO = \"🦋\";\nconst LOCAL_MANIFESTS_DIR = \".kalp/runtime/local-manifests\";\nconst HOT_RELOAD_DEBOUNCE_MS = 450;\n\nasync function putLocalManifest(params: {\n  cwd: string;\n  configPath: string;\n  key: string;\n  manifestPath: string;\n}): Promise<void> {\n  await execa(\n    \"npx\",\n    [\n      \"wrangler\",\n      \"kv\",\n      \"key\",\n      \"put\",\n      params.key,\n      \"--path\",\n      params.manifestPath,\n      \"--binding\",\n      \"KALP_MANIFESTS\",\n      \"--local\",\n      \"--config\",\n      params.configPath,\n    ],\n    { cwd: params.cwd },\n  );\n}\n\nasync function putLocalValue(params: {\n  cwd: string;\n  configPath: string;\n  key: string;\n  value: string;\n}): Promise<void> {\n  await execa(\n    \"npx\",\n    [\n      \"wrangler\",\n      \"kv\",\n      \"key\",\n      \"put\",\n      params.key,\n      params.value,\n      \"--binding\",\n      \"KALP_MANIFESTS\",\n      \"--local\",\n      \"--config\",\n      params.configPath,\n    ],\n    { cwd: params.cwd },\n  );\n}\n\nasync function syncLocalRuntimeState(params: {\n  cwd: string;\n  runtimeDir: string;\n  configPath: string;\n}): Promise<{ synced: number; failed: string[] }> {\n  const { cwd, runtimeDir, configPath } = params;\n  await writeRuntimeAgentsSnapshot({ cwd, runtimeDir, mode: \"local\" });\n\n  const manifestDir = join(cwd, LOCAL_MANIFESTS_DIR);\n  await rm(manifestDir, { recursive: true, force: true });\n  await mkdir(manifestDir, { recursive: true });\n\n  const agentNames = await readLocalAgentNames(cwd);\n  const failed: string[] = [];\n  let synced = 0;\n\n  for (const agentName of agentNames) {\n    try {\n      const manifest = await readAgentManifest({ cwd, agentName });\n      const hash = computePushHash(manifest.ir);\n      const validation = validateCompiledIR({ agentName, ir: manifest.ir, hash });\n      if (!validation.ok) {\n        const details = (validation.errors ?? []).join(\" | \");\n        throw new Error(\n          `validation failed (${validation.phase})${details ? `: ${details}` : \"\"}`,\n        );\n      }\n\n      const manifestKey = `${agentName}:${hash}`;\n      const latestKey = `${agentName}:latest`;\n      const manifestPath = join(manifestDir, `${agentName}-${hash}.json`);\n      await writeFile(manifestPath, JSON.stringify(manifest.ir), \"utf-8\");\n\n      await putLocalManifest({\n        cwd,\n        configPath,\n        key: manifestKey,\n        manifestPath,\n      });\n      await putLocalValue({\n        cwd,\n        configPath,\n        key: latestKey,\n        value: hash,\n      });\n      synced += 1;\n    } catch (error) {\n      const reason = error instanceof Error ? error.message : String(error);\n      failed.push(`${agentName}: ${reason}`);\n    }\n  }\n\n  return { synced, failed };\n}\n\nexport default defineCommand({\n  meta: { name: \"dev\", description: \"Run Worker + Studio local environment\" },\n  async run() {\n    const cwd = process.cwd();\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp dev\")}`);\n\n    await ensureSecretKey(cwd);\n    await copyFile(join(cwd, \".env\"), join(cwd, \".dev.vars\"));\n    const devVarsPath = join(cwd, \".dev.vars\");\n    const devVarsContent = await readFile(devVarsPath, \"utf-8\");\n    const nextDevVars = devVarsContent\n      .replace(/^KALP_ENV=.*$/m, \"\")\n      .replace(/^KALP_RUNTIME_MODE=.*$/m, \"\")\n      .trimEnd();\n    await writeFile(\n      devVarsPath,\n      `${nextDevVars}\\nKALP_ENV=local\\nKALP_RUNTIME_MODE=local\\n`,\n      \"utf-8\",\n    );\n    const runtime = await materializeRuntime(cwd, { mode: \"local\" });\n    const initialSync = await syncLocalRuntimeState({\n      cwd,\n      runtimeDir: runtime.runtimeDir,\n      configPath: runtime.wranglerConfigPath,\n    });\n    if (initialSync.failed.length > 0) {\n      for (const failure of initialSync.failed) {\n        p.log.warn(`Local sync skipped ${failure}`);\n      }\n    }\n    p.log.info(\n      `${pc.dim(\"Local agent runtime synced:\")} ${pc.cyan(String(initialSync.synced))}`,\n    );\n\n    p.note(\"Starting local runtime (wrangler dev :8787)\");\n\n    const backend = execa(\n      \"npx\",\n      [\n        \"wrangler\",\n        \"dev\",\n        \"--port\",\n        \"8787\",\n        \"--local\",\n        \"--config\",\n        runtime.wranglerConfigPath,\n      ],\n      { cwd, stdio: \"inherit\" },\n    );\n\n    let hotReloadTimer: NodeJS.Timeout | null = null;\n    let hotReloadRunning = false;\n    let hotReloadPending = false;\n\n    const runHotReloadSync = async () => {\n      if (hotReloadRunning) {\n        hotReloadPending = true;\n        return;\n      }\n\n      hotReloadRunning = true;\n      try {\n        const sync = await syncLocalRuntimeState({\n          cwd,\n          runtimeDir: runtime.runtimeDir,\n          configPath: runtime.wranglerConfigPath,\n        });\n        if (sync.failed.length > 0) {\n          p.log.warn(\n            `Local hot reload synced ${sync.synced} agents with ${sync.failed.length} warnings.`,\n          );\n          for (const failure of sync.failed) {\n            p.log.warn(`Hot reload skipped ${failure}`);\n          }\n        } else {\n          p.log.info(pc.dim(`Local hot reload synced ${sync.synced} agents.`));\n        }\n      } finally {\n        hotReloadRunning = false;\n        if (hotReloadPending) {\n          hotReloadPending = false;\n          void runHotReloadSync();\n        }\n      }\n    };\n\n    const scheduleHotReloadSync = () => {\n      if (hotReloadTimer) clearTimeout(hotReloadTimer);\n      hotReloadTimer = setTimeout(() => {\n        void runHotReloadSync();\n      }, HOT_RELOAD_DEBOUNCE_MS);\n    };\n\n    const watchers: FSWatcher[] = [];\n    const watchTargets = [join(cwd, \"agents\"), join(cwd, \".kalp\", \"state.json\")];\n    for (const target of watchTargets) {\n      try {\n        const watcher = watch(\n          target,\n          target.endsWith(\".json\") ? undefined : { recursive: true },\n          () => scheduleHotReloadSync(),\n        );\n        watchers.push(watcher);\n      } catch {\n        // Ignore missing targets (e.g. no agents yet)\n      }\n    }\n\n    const shutdown = () => {\n      if (hotReloadTimer) {\n        clearTimeout(hotReloadTimer);\n        hotReloadTimer = null;\n      }\n      for (const watcher of watchers) {\n        watcher.close();\n      }\n      backend.kill(\"SIGINT\");\n    };\n\n    process.on(\"SIGINT\", shutdown);\n    process.on(\"SIGTERM\", shutdown);\n\n    await delay(2500);\n    const studioUrl = \"http://localhost:8787/studio/login\";\n    await open(studioUrl);\n    p.log.success(`Studio opened at ${pc.cyan(studioUrl)}`);\n\n    try {\n      await backend;\n    } finally {\n      shutdown();\n      process.off(\"SIGINT\", shutdown);\n      process.off(\"SIGTERM\", shutdown);\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,aAA6B;AACtC,SAAS,UAAU,OAAO,UAAU,IAAI,iBAAiB;AACzD,SAAS,YAAY;AACrB,SAAS,cAAc,aAAa;AACpC,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AACf,SAAS,aAAa;AACtB,OAAO,UAAU;AAUjB,IAAM,OAAO;AACb,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB;AAE/B,eAAe,iBAAiB,QAKd;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,KAAK,OAAO,IAAI;AAAA,EACpB;AACF;AAEA,eAAe,cAAc,QAKX;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,KAAK,OAAO,IAAI;AAAA,EACpB;AACF;AAEA,eAAe,sBAAsB,QAIa;AAChD,QAAM,EAAE,KAAK,YAAY,WAAW,IAAI;AACxC,QAAM,2BAA2B,EAAE,KAAK,YAAY,MAAM,QAAQ,CAAC;AAEnE,QAAM,cAAc,KAAK,KAAK,mBAAmB;AACjD,QAAM,GAAG,aAAa,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACtD,QAAM,MAAM,aAAa,EAAE,WAAW,KAAK,CAAC;AAE5C,QAAM,aAAa,MAAM,oBAAoB,GAAG;AAChD,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS;AAEb,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,WAAW,MAAM,kBAAkB,EAAE,KAAK,UAAU,CAAC;AAC3D,YAAM,OAAO,gBAAgB,SAAS,EAAE;AACxC,YAAM,aAAa,mBAAmB,EAAE,WAAW,IAAI,SAAS,IAAI,KAAK,CAAC;AAC1E,UAAI,CAAC,WAAW,IAAI;AAClB,cAAM,WAAW,WAAW,UAAU,CAAC,GAAG,KAAK,KAAK;AACpD,cAAM,IAAI;AAAA,UACR,sBAAsB,WAAW,KAAK,IAAI,UAAU,KAAK,OAAO,KAAK,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,cAAc,GAAG,SAAS,IAAI,IAAI;AACxC,YAAM,YAAY,GAAG,SAAS;AAC9B,YAAM,eAAe,KAAK,aAAa,GAAG,SAAS,IAAI,IAAI,OAAO;AAClE,YAAM,UAAU,cAAc,KAAK,UAAU,SAAS,EAAE,GAAG,OAAO;AAElE,YAAM,iBAAiB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,KAAK;AAAA,QACL;AAAA,MACF,CAAC;AACD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,KAAK;AAAA,QACL,OAAO;AAAA,MACT,CAAC;AACD,gBAAU;AAAA,IACZ,SAAS,OAAO;AACd,YAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,aAAO,KAAK,GAAG,SAAS,KAAK,MAAM,EAAE;AAAA,IACvC;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAEA,IAAO,cAAQ,cAAc;AAAA,EAC3B,MAAM,EAAE,MAAM,OAAO,aAAa,wCAAwC;AAAA,EAC1E,MAAM,MAAM;AACV,UAAM,MAAM,QAAQ,IAAI;AAExB,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,UAAU,CAAC,EAAE;AAExC,UAAM,gBAAgB,GAAG;AACzB,UAAM,SAAS,KAAK,KAAK,MAAM,GAAG,KAAK,KAAK,WAAW,CAAC;AACxD,UAAM,cAAc,KAAK,KAAK,WAAW;AACzC,UAAM,iBAAiB,MAAM,SAAS,aAAa,OAAO;AAC1D,UAAM,cAAc,eACjB,QAAQ,kBAAkB,EAAE,EAC5B,QAAQ,2BAA2B,EAAE,EACrC,QAAQ;AACX,UAAM;AAAA,MACJ;AAAA,MACA,GAAG,WAAW;AAAA;AAAA;AAAA;AAAA,MACd;AAAA,IACF;AACA,UAAM,UAAU,MAAM,mBAAmB,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/D,UAAM,cAAc,MAAM,sBAAsB;AAAA,MAC9C;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,IACtB,CAAC;AACD,QAAI,YAAY,OAAO,SAAS,GAAG;AACjC,iBAAW,WAAW,YAAY,QAAQ;AACxC,QAAE,MAAI,KAAK,sBAAsB,OAAO,EAAE;AAAA,MAC5C;AAAA,IACF;AACA,IAAE,MAAI;AAAA,MACJ,GAAG,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,KAAK,OAAO,YAAY,MAAM,CAAC,CAAC;AAAA,IACjF;AAEA,IAAE,OAAK,6CAA6C;AAEpD,UAAM,UAAU;AAAA,MACd;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,MACA,EAAE,KAAK,OAAO,UAAU;AAAA,IAC1B;AAEA,QAAI,iBAAwC;AAC5C,QAAI,mBAAmB;AACvB,QAAI,mBAAmB;AAEvB,UAAM,mBAAmB,YAAY;AACnC,UAAI,kBAAkB;AACpB,2BAAmB;AACnB;AAAA,MACF;AAEA,yBAAmB;AACnB,UAAI;AACF,cAAM,OAAO,MAAM,sBAAsB;AAAA,UACvC;AAAA,UACA,YAAY,QAAQ;AAAA,UACpB,YAAY,QAAQ;AAAA,QACtB,CAAC;AACD,YAAI,KAAK,OAAO,SAAS,GAAG;AAC1B,UAAE,MAAI;AAAA,YACJ,2BAA2B,KAAK,MAAM,gBAAgB,KAAK,OAAO,MAAM;AAAA,UAC1E;AACA,qBAAW,WAAW,KAAK,QAAQ;AACjC,YAAE,MAAI,KAAK,sBAAsB,OAAO,EAAE;AAAA,UAC5C;AAAA,QACF,OAAO;AACL,UAAE,MAAI,KAAK,GAAG,IAAI,2BAA2B,KAAK,MAAM,UAAU,CAAC;AAAA,QACrE;AAAA,MACF,UAAE;AACA,2BAAmB;AACnB,YAAI,kBAAkB;AACpB,6BAAmB;AACnB,eAAK,iBAAiB;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,wBAAwB,MAAM;AAClC,UAAI,eAAgB,cAAa,cAAc;AAC/C,uBAAiB,WAAW,MAAM;AAChC,aAAK,iBAAiB;AAAA,MACxB,GAAG,sBAAsB;AAAA,IAC3B;AAEA,UAAM,WAAwB,CAAC;AAC/B,UAAM,eAAe,CAAC,KAAK,KAAK,QAAQ,GAAG,KAAK,KAAK,SAAS,YAAY,CAAC;AAC3E,eAAW,UAAU,cAAc;AACjC,UAAI;AACF,cAAM,UAAU;AAAA,UACd;AAAA,UACA,OAAO,SAAS,OAAO,IAAI,SAAY,EAAE,WAAW,KAAK;AAAA,UACzD,MAAM,sBAAsB;AAAA,QAC9B;AACA,iBAAS,KAAK,OAAO;AAAA,MACvB,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AACrB,UAAI,gBAAgB;AAClB,qBAAa,cAAc;AAC3B,yBAAiB;AAAA,MACnB;AACA,iBAAW,WAAW,UAAU;AAC9B,gBAAQ,MAAM;AAAA,MAChB;AACA,cAAQ,KAAK,QAAQ;AAAA,IACvB;AAEA,YAAQ,GAAG,UAAU,QAAQ;AAC7B,YAAQ,GAAG,WAAW,QAAQ;AAE9B,UAAM,MAAM,IAAI;AAChB,UAAM,YAAY;AAClB,UAAM,KAAK,SAAS;AACpB,IAAE,MAAI,QAAQ,oBAAoB,GAAG,KAAK,SAAS,CAAC,EAAE;AAEtD,QAAI;AACF,YAAM;AAAA,IACR,UAAE;AACA,eAAS;AACT,cAAQ,IAAI,UAAU,QAAQ;AAC9B,cAAQ,IAAI,WAAW,QAAQ;AAAA,IACjC;AAAA,EACF;AACF,CAAC;","names":[]}

package/dist/index.js

@@ -8,7 +8,7 @@ import pc from "picocolors";
 // package.json
 var package_default = {
   name: "@kalphq/cli",
-  version: "0.0.0-dev-20260513002146",
+  version: "0.0.0-dev-20260513005156",
   description: "Zero-config CLI for deploying Kalp agents",
   type: "module",
   license: "MIT",
@@ -61,7 +61,6 @@ var COMMANDS = [
   ["create", "Add a new agent"],
   ["deploy", "Deploy your agents runtime"],
   ["push", "Publish agent runtime version"],
-  ["link", "Link project to Kalp cloud"],
   ["secrets", "Manage secrets"],
   ["login", "Sign in to remote runtime"],
   ["logout", "Sign out from Kalp"],
@@ -93,13 +92,12 @@ var main = defineCommand({
   },
   subCommands: {
     create: () => import("./create-XC55BUCS.js").then((r) => r.default),
-    deploy: () => import("./deploy-Z2R7ER7U.js").then((r) => r.default),
-    push: () => import("./push-SVABM7WN.js").then((r) => r.default),
-    link: () => import("./link-WZQSR2TM.js").then((r) => r.default),
-    secrets: () => import("./secrets-P7ADVLOS.js").then((r) => r.default),
-    login: () => import("./login-DGX55YZ6.js").then((r) => r.default),
+    deploy: () => import("./deploy-AD3F3BN7.js").then((r) => r.default),
+    push: () => import("./push-RA6GEUV4.js").then((r) => r.default),
+    secrets: () => import("./secrets-5ZPPASCH.js").then((r) => r.default),
+    login: () => import("./login-RAN2I7YT.js").then((r) => r.default),
     logout: () => import("./logout-U5V5K775.js").then((r) => r.default),
-    dev: () => import("./dev-PNRWXULV.js").then((r) => r.default)
+    dev: () => import("./dev-X43HHIYV.js").then((r) => r.default)
   },
   run({ args }) {
     const firstArg = process.argv[2];

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../package.json"],"sourcesContent":["import { defineCommand, runMain } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport pkg from \"../package.json\";\n\nconst LOGO = \"🦋\";\n\nconst COMMANDS = [\n  [\"create\", \"Add a new agent\"],\n  [\"deploy\", \"Deploy your agents runtime\"],\n  [\"push\", \"Publish agent runtime version\"],\n  [\"link\", \"Link project to Kalp cloud\"],\n  [\"secrets\", \"Manage secrets\"],\n  [\"login\", \"Sign in to remote runtime\"],\n  [\"logout\", \"Sign out from Kalp\"],\n  [\"dev\", \"Run Worker + Studio locally\"],\n] as const;\n\nfunction printHelp(): void {\n  p.log.info(`${pc.bold(\"Usage\")}: kalp <command> [options]`);\n  console.log(\"\");\n  p.log.info(pc.bold(\"Commands\"));\n\n  for (const [name, desc] of COMMANDS) {\n    console.log(`  ${pc.cyan(name.padEnd(10))}${desc}`);\n  }\n\n  console.log(\"\");\n  p.log.info(`Run ${pc.cyan(\"kalp <command> --help\")} for more info.`);\n}\n\nconst main = defineCommand({\n  meta: {\n    name: \"kalp\",\n    version: pkg.version,\n    description: \"🦋 Zero-config agent infrastructure\",\n  },\n  args: {\n    help: {\n      type: \"boolean\",\n      alias: \"h\",\n      description: \"Show help\",\n      default: false,\n    },\n  },\n  subCommands: {\n    create: () => import(\"./commands/create\").then((r) => r.default),\n    deploy: () => import(\"./commands/deploy\").then((r) => r.default),\n    push: () => import(\"./commands/push\").then((r) => r.default),\n    link: () => import(\"./commands/link\").then((r) => r.default),\n    secrets: () => import(\"./commands/secrets\").then((r) => r.default),\n    login: () => import(\"./commands/login\").then((r) => r.default),\n    logout: () => import(\"./commands/logout\").then((r) => r.default),\n    dev: () => import(\"./commands/dev\").then((r) => r.default),\n  },\n  run({ args }) {\n    const firstArg = process.argv[2];\n\n    if (args.help) {\n      p.intro(`${LOGO} ${pc.bold(\"kalp\")}`);\n      printHelp();\n      p.outro(\"Happy coding 🦋\");\n      return;\n    }\n\n    if (firstArg) {\n      return;\n    }\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp\")}`);\n    printHelp();\n    p.outro(\"Happy coding 🦋\");\n  },\n});\n\nrunMain(main);\n","{\n  \"name\": \"@kalphq/cli\",\n  \"version\": \"0.0.0-dev-20260513002146\",\n  \"description\": \"Zero-config CLI for deploying Kalp agents\",\n  \"type\": \"module\",\n  \"license\": \"MIT\",\n  \"author\": \"Kalp HQ\",\n  \"bin\": {\n    \"kalp\": \"./dist/index.js\"\n  },\n  \"main\": \"./dist/index.js\",\n  \"files\": [\n    \"dist\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  },\n  \"scripts\": {\n    \"build\": \"tsup && pnpm run build:studio && pnpm run build:runtime-template\",\n    \"build:studio\": \"pnpm --filter=@kalphq/studio build\",\n    \"build:runtime-template\": \"node ./scripts/prepare-runtime-template.mjs\",\n    \"dev\": \"tsup --watch\",\n    \"lint\": \"tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm build\"\n  },\n  \"dependencies\": {\n    \"@antfu/ni\": \"24.4.0\",\n    \"@clack/prompts\": \"0.9.1\",\n    \"@kalphq/compiler\": \"workspace:*\",\n    \"@kalphq/project\": \"workspace:*\",\n    \"@kalphq/sdk\": \"workspace:*\",\n    \"citty\": \"0.1.6\",\n    \"esbuild\": \"0.25.0\",\n    \"execa\": \"^9.6.1\",\n    \"jiti\": \"^2.6.1\",\n    \"jose\": \"^5.10.0\",\n    \"json-stable-stringify\": \"1.3.0\",\n    \"open\": \"^11.0.0\",\n    \"picocolors\": \"1.1.1\",\n    \"zod\": \"3.25.76\"\n  },\n  \"devDependencies\": {\n    \"@types/json-stable-stringify\": \"1.2.0\",\n    \"@types/node\": \"^22.15.3\",\n    \"tsup\": \"^8.3.5\",\n    \"typescript\": \"^5.0.0\"\n  }\n}\n"],"mappings":";;;AAAA,SAAS,eAAe,eAAe;AACvC,YAAY,OAAO;AACnB,OAAO,QAAQ;;;ACFf;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,aAAe;AAAA,EACf,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,QAAU;AAAA,EACV,KAAO;AAAA,IACL,MAAQ;AAAA,EACV;AAAA,EACA,MAAQ;AAAA,EACR,OAAS;AAAA,IACP;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AAAA,EACA,SAAW;AAAA,IACT,OAAS;AAAA,IACT,gBAAgB;AAAA,IAChB,0BAA0B;AAAA,IAC1B,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,gBAAkB;AAAA,EACpB;AAAA,EACA,cAAgB;AAAA,IACd,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,OAAS;AAAA,IACT,SAAW;AAAA,IACX,OAAS;AAAA,IACT,MAAQ;AAAA,IACR,MAAQ;AAAA,IACR,yBAAyB;AAAA,IACzB,MAAQ;AAAA,IACR,YAAc;AAAA,IACd,KAAO;AAAA,EACT;AAAA,EACA,iBAAmB;AAAA,IACjB,gCAAgC;AAAA,IAChC,eAAe;AAAA,IACf,MAAQ;AAAA,IACR,YAAc;AAAA,EAChB;AACF;;;AD1CA,IAAM,OAAO;AAEb,IAAM,WAAW;AAAA,EACf,CAAC,UAAU,iBAAiB;AAAA,EAC5B,CAAC,UAAU,4BAA4B;AAAA,EACvC,CAAC,QAAQ,+BAA+B;AAAA,EACxC,CAAC,QAAQ,4BAA4B;AAAA,EACrC,CAAC,WAAW,gBAAgB;AAAA,EAC5B,CAAC,SAAS,2BAA2B;AAAA,EACrC,CAAC,UAAU,oBAAoB;AAAA,EAC/B,CAAC,OAAO,6BAA6B;AACvC;AAEA,SAAS,YAAkB;AACzB,EAAE,MAAI,KAAK,GAAG,GAAG,KAAK,OAAO,CAAC,4BAA4B;AAC1D,UAAQ,IAAI,EAAE;AACd,EAAE,MAAI,KAAK,GAAG,KAAK,UAAU,CAAC;AAE9B,aAAW,CAAC,MAAM,IAAI,KAAK,UAAU;AACnC,YAAQ,IAAI,KAAK,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;AAAA,EACpD;AAEA,UAAQ,IAAI,EAAE;AACd,EAAE,MAAI,KAAK,OAAO,GAAG,KAAK,uBAAuB,CAAC,iBAAiB;AACrE;AAEA,IAAM,OAAO,cAAc;AAAA,EACzB,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,gBAAI;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,QAAQ,MAAM,OAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC/D,QAAQ,MAAM,OAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC/D,MAAM,MAAM,OAAO,oBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC3D,MAAM,MAAM,OAAO,oBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC3D,SAAS,MAAM,OAAO,uBAAoB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IACjE,OAAO,MAAM,OAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC7D,QAAQ,MAAM,OAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC/D,KAAK,MAAM,OAAO,mBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAC3D;AAAA,EACA,IAAI,EAAE,KAAK,GAAG;AACZ,UAAM,WAAW,QAAQ,KAAK,CAAC;AAE/B,QAAI,KAAK,MAAM;AACb,MAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE;AACpC,gBAAU;AACV,MAAE,QAAM,wBAAiB;AACzB;AAAA,IACF;AAEA,QAAI,UAAU;AACZ;AAAA,IACF;AAEA,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE;AACpC,cAAU;AACV,IAAE,QAAM,wBAAiB;AAAA,EAC3B;AACF,CAAC;AAED,QAAQ,IAAI;","names":[]}
+{"version":3,"sources":["../src/index.ts","../package.json"],"sourcesContent":["import { defineCommand, runMain } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport pkg from \"../package.json\";\n\nconst LOGO = \"🦋\";\n\nconst COMMANDS = [\n  [\"create\", \"Add a new agent\"],\n  [\"deploy\", \"Deploy your agents runtime\"],\n  [\"push\", \"Publish agent runtime version\"],\n  [\"secrets\", \"Manage secrets\"],\n  [\"login\", \"Sign in to remote runtime\"],\n  [\"logout\", \"Sign out from Kalp\"],\n  [\"dev\", \"Run Worker + Studio locally\"],\n] as const;\n\nfunction printHelp(): void {\n  p.log.info(`${pc.bold(\"Usage\")}: kalp <command> [options]`);\n  console.log(\"\");\n  p.log.info(pc.bold(\"Commands\"));\n\n  for (const [name, desc] of COMMANDS) {\n    console.log(`  ${pc.cyan(name.padEnd(10))}${desc}`);\n  }\n\n  console.log(\"\");\n  p.log.info(`Run ${pc.cyan(\"kalp <command> --help\")} for more info.`);\n}\n\nconst main = defineCommand({\n  meta: {\n    name: \"kalp\",\n    version: pkg.version,\n    description: \"🦋 Zero-config agent infrastructure\",\n  },\n  args: {\n    help: {\n      type: \"boolean\",\n      alias: \"h\",\n      description: \"Show help\",\n      default: false,\n    },\n  },\n  subCommands: {\n    create: () => import(\"./commands/create\").then((r) => r.default),\n    deploy: () => import(\"./commands/deploy\").then((r) => r.default),\n    push: () => import(\"./commands/push\").then((r) => r.default),\n    secrets: () => import(\"./commands/secrets\").then((r) => r.default),\n    login: () => import(\"./commands/login\").then((r) => r.default),\n    logout: () => import(\"./commands/logout\").then((r) => r.default),\n    dev: () => import(\"./commands/dev\").then((r) => r.default),\n  },\n  run({ args }) {\n    const firstArg = process.argv[2];\n\n    if (args.help) {\n      p.intro(`${LOGO} ${pc.bold(\"kalp\")}`);\n      printHelp();\n      p.outro(\"Happy coding 🦋\");\n      return;\n    }\n\n    if (firstArg) {\n      return;\n    }\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp\")}`);\n    printHelp();\n    p.outro(\"Happy coding 🦋\");\n  },\n});\n\nrunMain(main);\n","{\n  \"name\": \"@kalphq/cli\",\n  \"version\": \"0.0.0-dev-20260513005156\",\n  \"description\": \"Zero-config CLI for deploying Kalp agents\",\n  \"type\": \"module\",\n  \"license\": \"MIT\",\n  \"author\": \"Kalp HQ\",\n  \"bin\": {\n    \"kalp\": \"./dist/index.js\"\n  },\n  \"main\": \"./dist/index.js\",\n  \"files\": [\n    \"dist\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  },\n  \"scripts\": {\n    \"build\": \"tsup && pnpm run build:studio && pnpm run build:runtime-template\",\n    \"build:studio\": \"pnpm --filter=@kalphq/studio build\",\n    \"build:runtime-template\": \"node ./scripts/prepare-runtime-template.mjs\",\n    \"dev\": \"tsup --watch\",\n    \"lint\": \"tsc --noEmit\",\n    \"prepublishOnly\": \"pnpm build\"\n  },\n  \"dependencies\": {\n    \"@antfu/ni\": \"24.4.0\",\n    \"@clack/prompts\": \"0.9.1\",\n    \"@kalphq/compiler\": \"workspace:*\",\n    \"@kalphq/project\": \"workspace:*\",\n    \"@kalphq/sdk\": \"workspace:*\",\n    \"citty\": \"0.1.6\",\n    \"esbuild\": \"0.25.0\",\n    \"execa\": \"^9.6.1\",\n    \"jiti\": \"^2.6.1\",\n    \"jose\": \"^5.10.0\",\n    \"json-stable-stringify\": \"1.3.0\",\n    \"open\": \"^11.0.0\",\n    \"picocolors\": \"1.1.1\",\n    \"zod\": \"3.25.76\"\n  },\n  \"devDependencies\": {\n    \"@types/json-stable-stringify\": \"1.2.0\",\n    \"@types/node\": \"^22.15.3\",\n    \"tsup\": \"^8.3.5\",\n    \"typescript\": \"^5.0.0\"\n  }\n}\n"],"mappings":";;;AAAA,SAAS,eAAe,eAAe;AACvC,YAAY,OAAO;AACnB,OAAO,QAAQ;;;ACFf;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,aAAe;AAAA,EACf,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,QAAU;AAAA,EACV,KAAO;AAAA,IACL,MAAQ;AAAA,EACV;AAAA,EACA,MAAQ;AAAA,EACR,OAAS;AAAA,IACP;AAAA,EACF;AAAA,EACA,eAAiB;AAAA,IACf,QAAU;AAAA,EACZ;AAAA,EACA,SAAW;AAAA,IACT,OAAS;AAAA,IACT,gBAAgB;AAAA,IAChB,0BAA0B;AAAA,IAC1B,KAAO;AAAA,IACP,MAAQ;AAAA,IACR,gBAAkB;AAAA,EACpB;AAAA,EACA,cAAgB;AAAA,IACd,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,OAAS;AAAA,IACT,SAAW;AAAA,IACX,OAAS;AAAA,IACT,MAAQ;AAAA,IACR,MAAQ;AAAA,IACR,yBAAyB;AAAA,IACzB,MAAQ;AAAA,IACR,YAAc;AAAA,IACd,KAAO;AAAA,EACT;AAAA,EACA,iBAAmB;AAAA,IACjB,gCAAgC;AAAA,IAChC,eAAe;AAAA,IACf,MAAQ;AAAA,IACR,YAAc;AAAA,EAChB;AACF;;;AD1CA,IAAM,OAAO;AAEb,IAAM,WAAW;AAAA,EACf,CAAC,UAAU,iBAAiB;AAAA,EAC5B,CAAC,UAAU,4BAA4B;AAAA,EACvC,CAAC,QAAQ,+BAA+B;AAAA,EACxC,CAAC,WAAW,gBAAgB;AAAA,EAC5B,CAAC,SAAS,2BAA2B;AAAA,EACrC,CAAC,UAAU,oBAAoB;AAAA,EAC/B,CAAC,OAAO,6BAA6B;AACvC;AAEA,SAAS,YAAkB;AACzB,EAAE,MAAI,KAAK,GAAG,GAAG,KAAK,OAAO,CAAC,4BAA4B;AAC1D,UAAQ,IAAI,EAAE;AACd,EAAE,MAAI,KAAK,GAAG,KAAK,UAAU,CAAC;AAE9B,aAAW,CAAC,MAAM,IAAI,KAAK,UAAU;AACnC,YAAQ,IAAI,KAAK,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;AAAA,EACpD;AAEA,UAAQ,IAAI,EAAE;AACd,EAAE,MAAI,KAAK,OAAO,GAAG,KAAK,uBAAuB,CAAC,iBAAiB;AACrE;AAEA,IAAM,OAAO,cAAc;AAAA,EACzB,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,gBAAI;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,QAAQ,MAAM,OAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC/D,QAAQ,MAAM,OAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC/D,MAAM,MAAM,OAAO,oBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC3D,SAAS,MAAM,OAAO,uBAAoB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IACjE,OAAO,MAAM,OAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC7D,QAAQ,MAAM,OAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAC/D,KAAK,MAAM,OAAO,mBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAC3D;AAAA,EACA,IAAI,EAAE,KAAK,GAAG;AACZ,UAAM,WAAW,QAAQ,KAAK,CAAC;AAE/B,QAAI,KAAK,MAAM;AACb,MAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE;AACpC,gBAAU;AACV,MAAE,QAAM,wBAAiB;AACzB;AAAA,IACF;AAEA,QAAI,UAAU;AACZ;AAAA,IACF;AAEA,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE;AACpC,cAAU;AACV,IAAE,QAAM,wBAAiB;AAAA,EAC3B;AACF,CAAC;AAED,QAAQ,IAAI;","names":[]}

package/dist/list-4X735L5X.js

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+import {
+  readLocalSecretsFromConfig,
+  resolveSecretsRuntimeConfigPath
+} from "./chunk-5ZRVO3TQ.js";
+import "./chunk-INB3LG6O.js";
+import {
+  requireAuth,
+  resolveProvider
+} from "./chunk-GNQI376N.js";
+import "./chunk-FO24J6XL.js";
+import "./chunk-DHCCSWJN.js";
+
+// src/commands/secrets/list.ts
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+import pc from "picocolors";
+var LOGO = "\u{1F98B}";
+var list_default = defineCommand({
+  meta: {
+    name: "list",
+    description: "List remote runtime secrets"
+  },
+  args: {
+    help: {
+      type: "boolean",
+      alias: "h",
+      description: "Show help",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const cwd = process.cwd();
+    if (args.help) {
+      p.log.info(`${pc.bold("Usage")}: kalp secrets list`);
+      return;
+    }
+    p.intro(`${LOGO} ${pc.bold("kalp secrets list")}`);
+    await requireAuth().catch(() => {
+      p.log.error("Not authenticated. Run `kalp login` first.");
+      process.exit(1);
+    });
+    const spinner2 = p.spinner();
+    spinner2.start("Loading remote secrets");
+    try {
+      const configPath = await resolveSecretsRuntimeConfigPath(cwd);
+      const provider = resolveProvider();
+      const [remoteSecrets, localSecrets] = await Promise.all([
+        provider.listSecrets({ cwd, configPath }),
+        readLocalSecretsFromConfig(cwd)
+      ]);
+      const remoteNames = remoteSecrets.map((item) => item.name).sort((a, b) => a.localeCompare(b));
+      const syncedCount = remoteNames.filter((name) => localSecrets.includes(name)).length;
+      spinner2.stop(`Found ${remoteNames.length} remote secrets`);
+      if (remoteNames.length === 0) {
+        p.log.info(pc.dim("No remote secrets found."));
+        p.log.info(pc.dim(`Add one with ${pc.cyan("kalp secrets add -k KEY -v VALUE")}`));
+        p.outro("Done");
+        return;
+      }
+      p.log.info(pc.bold("Remote runtime secrets"));
+      for (const name of remoteNames) {
+        const synced = localSecrets.includes(name);
+        const icon = synced ? pc.green("\u2713") : pc.yellow("\u25CB");
+        console.log(`  ${icon} ${pc.cyan(name)}`);
+      }
+      if (syncedCount !== remoteNames.length) {
+        const missingLocal = remoteNames.filter((name) => !localSecrets.includes(name));
+        p.log.warn(
+          `Missing in kalp.config.ts: ${missingLocal.map((name) => pc.cyan(name)).join(", ")}`
+        );
+      }
+      const localOnly = localSecrets.filter((name) => !remoteNames.includes(name));
+      if (localOnly.length > 0) {
+        p.log.warn(
+          `Local-only secrets (not remote): ${localOnly.map((name) => pc.cyan(name)).join(", ")}`
+        );
+      }
+      p.outro("Done");
+    } catch (error) {
+      spinner2.stop("Failed to load secrets");
+      p.log.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+  }
+});
+export {
+  list_default as default
+};
+//# sourceMappingURL=list-4X735L5X.js.map

package/dist/list-4X735L5X.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/secrets/list.ts"],"sourcesContent":["import { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport { requireAuth } from \"@/utils/auth\";\nimport { resolveProvider } from \"@/utils/providers\";\nimport { readLocalSecretsFromConfig } from \"@/utils/secrets-config\";\nimport { resolveSecretsRuntimeConfigPath } from \"@/utils/secrets-runtime\";\n\nconst LOGO = \"🦋\";\n\nexport default defineCommand({\n  meta: {\n    name: \"list\",\n    description: \"List remote runtime secrets\",\n  },\n  args: {\n    help: {\n      type: \"boolean\",\n      alias: \"h\",\n      description: \"Show help\",\n      default: false,\n    },\n  },\n  async run({ args }) {\n    const cwd = process.cwd();\n\n    if (args.help) {\n      p.log.info(`${pc.bold(\"Usage\")}: kalp secrets list`);\n      return;\n    }\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp secrets list\")}`);\n\n    await requireAuth().catch(() => {\n      p.log.error(\"Not authenticated. Run `kalp login` first.\");\n      process.exit(1);\n    });\n\n    const spinner = p.spinner();\n    spinner.start(\"Loading remote secrets\");\n\n    try {\n      const configPath = await resolveSecretsRuntimeConfigPath(cwd);\n      const provider = resolveProvider();\n      const [remoteSecrets, localSecrets] = await Promise.all([\n        provider.listSecrets({ cwd, configPath }),\n        readLocalSecretsFromConfig(cwd),\n      ]);\n\n      const remoteNames = remoteSecrets.map((item) => item.name).sort((a, b) => a.localeCompare(b));\n      const syncedCount = remoteNames.filter((name) => localSecrets.includes(name)).length;\n      spinner.stop(`Found ${remoteNames.length} remote secrets`);\n\n      if (remoteNames.length === 0) {\n        p.log.info(pc.dim(\"No remote secrets found.\"));\n        p.log.info(pc.dim(`Add one with ${pc.cyan(\"kalp secrets add -k KEY -v VALUE\")}`));\n        p.outro(\"Done\");\n        return;\n      }\n\n      p.log.info(pc.bold(\"Remote runtime secrets\"));\n      for (const name of remoteNames) {\n        const synced = localSecrets.includes(name);\n        const icon = synced ? pc.green(\"✓\") : pc.yellow(\"○\");\n        console.log(`  ${icon} ${pc.cyan(name)}`);\n      }\n\n      if (syncedCount !== remoteNames.length) {\n        const missingLocal = remoteNames.filter((name) => !localSecrets.includes(name));\n        p.log.warn(\n          `Missing in kalp.config.ts: ${missingLocal.map((name) => pc.cyan(name)).join(\", \")}`,\n        );\n      }\n\n      const localOnly = localSecrets.filter((name) => !remoteNames.includes(name));\n      if (localOnly.length > 0) {\n        p.log.warn(\n          `Local-only secrets (not remote): ${localOnly.map((name) => pc.cyan(name)).join(\", \")}`,\n        );\n      }\n\n      p.outro(\"Done\");\n    } catch (error) {\n      spinner.stop(\"Failed to load secrets\");\n      p.log.error(error instanceof Error ? error.message : String(error));\n      process.exit(1);\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AAMf,IAAM,OAAO;AAEb,IAAO,eAAQ,cAAc;AAAA,EAC3B,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,UAAM,MAAM,QAAQ,IAAI;AAExB,QAAI,KAAK,MAAM;AACb,MAAE,MAAI,KAAK,GAAG,GAAG,KAAK,OAAO,CAAC,qBAAqB;AACnD;AAAA,IACF;AAEA,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,mBAAmB,CAAC,EAAE;AAEjD,UAAM,YAAY,EAAE,MAAM,MAAM;AAC9B,MAAE,MAAI,MAAM,4CAA4C;AACxD,cAAQ,KAAK,CAAC;AAAA,IAChB,CAAC;AAED,UAAMA,WAAY,UAAQ;AAC1B,IAAAA,SAAQ,MAAM,wBAAwB;AAEtC,QAAI;AACF,YAAM,aAAa,MAAM,gCAAgC,GAAG;AAC5D,YAAM,WAAW,gBAAgB;AACjC,YAAM,CAAC,eAAe,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,QACtD,SAAS,YAAY,EAAE,KAAK,WAAW,CAAC;AAAA,QACxC,2BAA2B,GAAG;AAAA,MAChC,CAAC;AAED,YAAM,cAAc,cAAc,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAC5F,YAAM,cAAc,YAAY,OAAO,CAAC,SAAS,aAAa,SAAS,IAAI,CAAC,EAAE;AAC9E,MAAAA,SAAQ,KAAK,SAAS,YAAY,MAAM,iBAAiB;AAEzD,UAAI,YAAY,WAAW,GAAG;AAC5B,QAAE,MAAI,KAAK,GAAG,IAAI,0BAA0B,CAAC;AAC7C,QAAE,MAAI,KAAK,GAAG,IAAI,gBAAgB,GAAG,KAAK,kCAAkC,CAAC,EAAE,CAAC;AAChF,QAAE,QAAM,MAAM;AACd;AAAA,MACF;AAEA,MAAE,MAAI,KAAK,GAAG,KAAK,wBAAwB,CAAC;AAC5C,iBAAW,QAAQ,aAAa;AAC9B,cAAM,SAAS,aAAa,SAAS,IAAI;AACzC,cAAM,OAAO,SAAS,GAAG,MAAM,QAAG,IAAI,GAAG,OAAO,QAAG;AACnD,gBAAQ,IAAI,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,EAAE;AAAA,MAC1C;AAEA,UAAI,gBAAgB,YAAY,QAAQ;AACtC,cAAM,eAAe,YAAY,OAAO,CAAC,SAAS,CAAC,aAAa,SAAS,IAAI,CAAC;AAC9E,QAAE,MAAI;AAAA,UACJ,8BAA8B,aAAa,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,QACpF;AAAA,MACF;AAEA,YAAM,YAAY,aAAa,OAAO,CAAC,SAAS,CAAC,YAAY,SAAS,IAAI,CAAC;AAC3E,UAAI,UAAU,SAAS,GAAG;AACxB,QAAE,MAAI;AAAA,UACJ,oCAAoC,UAAU,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,QACvF;AAAA,MACF;AAEA,MAAE,QAAM,MAAM;AAAA,IAChB,SAAS,OAAO;AACd,MAAAA,SAAQ,KAAK,wBAAwB;AACrC,MAAE,MAAI,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AACF,CAAC;","names":["spinner"]}

package/dist/{login-DGX55YZ6.js → login-RAN2I7YT.js}

@@ -1,10 +1,8 @@
 #!/usr/bin/env node
 import {
-  resolveProvider
-} from "./chunk-TNKYKA7N.js";
-import {
+  resolveProvider,
   saveAuthConfig
-} from "./chunk-5RODADXW.js";
+} from "./chunk-GNQI376N.js";
 import "./chunk-FO24J6XL.js";
 
 // src/commands/login.ts
@@ -58,4 +56,4 @@ var login_default = defineCommand({
 export {
   login_default as default
 };
-//# sourceMappingURL=login-DGX55YZ6.js.map
+//# sourceMappingURL=login-RAN2I7YT.js.map

package/dist/{login-DGX55YZ6.js.map → login-RAN2I7YT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/login.ts"],"sourcesContent":["import { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport {\n  saveAuthConfig,\n  type AuthConfig,\n} from \"@/utils/auth\";\nimport { resolveProvider } from \"@/utils/providers\";\n\nconst LOGO = \"🦋\";\n\nexport default defineCommand({\n  meta: { name: \"login\", description: \"Sign in to remote runtime\" },\n  async run() {\n    p.intro(`${LOGO} ${pc.bold(\"kalp login\")}`);\n\n    const provider = resolveProvider();\n    const proceed = await p.confirm({\n      message: \"Sign in to remote runtime now?\",\n      initialValue: true,\n    });\n    if (p.isCancel(proceed) || !proceed) {\n      p.outro(\"Cancelled\");\n      return;\n    }\n\n    const s = p.spinner();\n    s.start(\"Opening sign-in flow\");\n\n    try {\n      await provider.login();\n    } catch {\n      s.stop(pc.red(\"Sign-in failed\"));\n      process.exit(1);\n    }\n\n    s.stop(\"Sign-in complete\");\n    s.start(\"Reading runtime identity\");\n    const identity = await provider.whoami();\n    const accountId = identity?.accountId;\n    const email = identity?.email;\n\n    if (!accountId || !email) {\n      s.stop(pc.red(\"Could not resolve account identity from wrangler whoami\"));\n      process.exit(1);\n    }\n\n    const authConfig: AuthConfig = {\n      provider: \"cloudflare\",\n      accountId,\n      email,\n      expiresAt: new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString(),\n    };\n\n    await saveAuthConfig(authConfig);\n\n    s.stop(\"Authentication saved\");\n    p.log.success(`Logged in as ${pc.cyan(authConfig.email)}`);\n    p.note(`Workspace ID: ${pc.cyan(authConfig.accountId)}`, \"Runtime\");\n    p.outro(pc.green(\"Ready to deploy your agents\"));\n  },\n});\n"],"mappings":";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AAOf,IAAM,OAAO;AAEb,IAAO,gBAAQ,cAAc;AAAA,EAC3B,MAAM,EAAE,MAAM,SAAS,aAAa,4BAA4B;AAAA,EAChE,MAAM,MAAM;AACV,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,YAAY,CAAC,EAAE;AAE1C,UAAM,WAAW,gBAAgB;AACjC,UAAM,UAAU,MAAQ,UAAQ;AAAA,MAC9B,SAAS;AAAA,MACT,cAAc;AAAA,IAChB,CAAC;AACD,QAAM,WAAS,OAAO,KAAK,CAAC,SAAS;AACnC,MAAE,QAAM,WAAW;AACnB;AAAA,IACF;AAEA,UAAM,IAAM,UAAQ;AACpB,MAAE,MAAM,sBAAsB;AAE9B,QAAI;AACF,YAAM,SAAS,MAAM;AAAA,IACvB,QAAQ;AACN,QAAE,KAAK,GAAG,IAAI,gBAAgB,CAAC;AAC/B,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,MAAE,KAAK,kBAAkB;AACzB,MAAE,MAAM,0BAA0B;AAClC,UAAM,WAAW,MAAM,SAAS,OAAO;AACvC,UAAM,YAAY,UAAU;AAC5B,UAAM,QAAQ,UAAU;AAExB,QAAI,CAAC,aAAa,CAAC,OAAO;AACxB,QAAE,KAAK,GAAG,IAAI,yDAAyD,CAAC;AACxE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,aAAyB;AAAA,MAC7B,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,KAAK,GAAI,EAAE,YAAY;AAAA,IACzE;AAEA,UAAM,eAAe,UAAU;AAE/B,MAAE,KAAK,sBAAsB;AAC7B,IAAE,MAAI,QAAQ,gBAAgB,GAAG,KAAK,WAAW,KAAK,CAAC,EAAE;AACzD,IAAE,OAAK,iBAAiB,GAAG,KAAK,WAAW,SAAS,CAAC,IAAI,SAAS;AAClE,IAAE,QAAM,GAAG,MAAM,6BAA6B,CAAC;AAAA,EACjD;AACF,CAAC;","names":[]}
+{"version":3,"sources":["../src/commands/login.ts"],"sourcesContent":["import { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport {\n  saveAuthConfig,\n  type AuthConfig,\n} from \"@/utils/auth\";\nimport { resolveProvider } from \"@/utils/providers\";\n\nconst LOGO = \"🦋\";\n\nexport default defineCommand({\n  meta: { name: \"login\", description: \"Sign in to remote runtime\" },\n  async run() {\n    p.intro(`${LOGO} ${pc.bold(\"kalp login\")}`);\n\n    const provider = resolveProvider();\n    const proceed = await p.confirm({\n      message: \"Sign in to remote runtime now?\",\n      initialValue: true,\n    });\n    if (p.isCancel(proceed) || !proceed) {\n      p.outro(\"Cancelled\");\n      return;\n    }\n\n    const s = p.spinner();\n    s.start(\"Opening sign-in flow\");\n\n    try {\n      await provider.login();\n    } catch {\n      s.stop(pc.red(\"Sign-in failed\"));\n      process.exit(1);\n    }\n\n    s.stop(\"Sign-in complete\");\n    s.start(\"Reading runtime identity\");\n    const identity = await provider.whoami();\n    const accountId = identity?.accountId;\n    const email = identity?.email;\n\n    if (!accountId || !email) {\n      s.stop(pc.red(\"Could not resolve account identity from wrangler whoami\"));\n      process.exit(1);\n    }\n\n    const authConfig: AuthConfig = {\n      provider: \"cloudflare\",\n      accountId,\n      email,\n      expiresAt: new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString(),\n    };\n\n    await saveAuthConfig(authConfig);\n\n    s.stop(\"Authentication saved\");\n    p.log.success(`Logged in as ${pc.cyan(authConfig.email)}`);\n    p.note(`Workspace ID: ${pc.cyan(authConfig.accountId)}`, \"Runtime\");\n    p.outro(pc.green(\"Ready to deploy your agents\"));\n  },\n});\n"],"mappings":";;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AAOf,IAAM,OAAO;AAEb,IAAO,gBAAQ,cAAc;AAAA,EAC3B,MAAM,EAAE,MAAM,SAAS,aAAa,4BAA4B;AAAA,EAChE,MAAM,MAAM;AACV,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,YAAY,CAAC,EAAE;AAE1C,UAAM,WAAW,gBAAgB;AACjC,UAAM,UAAU,MAAQ,UAAQ;AAAA,MAC9B,SAAS;AAAA,MACT,cAAc;AAAA,IAChB,CAAC;AACD,QAAM,WAAS,OAAO,KAAK,CAAC,SAAS;AACnC,MAAE,QAAM,WAAW;AACnB;AAAA,IACF;AAEA,UAAM,IAAM,UAAQ;AACpB,MAAE,MAAM,sBAAsB;AAE9B,QAAI;AACF,YAAM,SAAS,MAAM;AAAA,IACvB,QAAQ;AACN,QAAE,KAAK,GAAG,IAAI,gBAAgB,CAAC;AAC/B,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,MAAE,KAAK,kBAAkB;AACzB,MAAE,MAAM,0BAA0B;AAClC,UAAM,WAAW,MAAM,SAAS,OAAO;AACvC,UAAM,YAAY,UAAU;AAC5B,UAAM,QAAQ,UAAU;AAExB,QAAI,CAAC,aAAa,CAAC,OAAO;AACxB,QAAE,KAAK,GAAG,IAAI,yDAAyD,CAAC;AACxE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,aAAyB;AAAA,MAC7B,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,KAAK,GAAI,EAAE,YAAY;AAAA,IACzE;AAEA,UAAM,eAAe,UAAU;AAE/B,MAAE,KAAK,sBAAsB;AAC7B,IAAE,MAAI,QAAQ,gBAAgB,GAAG,KAAK,WAAW,KAAK,CAAC,EAAE;AACzD,IAAE,OAAK,iBAAiB,GAAG,KAAK,WAAW,SAAS,CAAC,IAAI,SAAS;AAClE,IAAE,QAAM,GAAG,MAAM,6BAA6B,CAAC;AAAA,EACjD;AACF,CAAC;","names":[]}

package/dist/{push-SVABM7WN.js → push-RA6GEUV4.js}

@@ -4,25 +4,26 @@ import {
   readAgentManifest,
   validateCompiledIR
 } from "./chunk-VCFH3R34.js";
+import {
+  promptDeployTarget,
+  runInitialDeploy,
+  showKalpCloudWaitlist
+} from "./chunk-X56YSZGT.js";
+import "./chunk-NV2IZ4XM.js";
 import {
   ensureConfig
 } from "./chunk-INB3LG6O.js";
 import {
-  runInitialDeploy
-} from "./chunk-PY6VAS54.js";
-import {
+  requireAuth,
   resolveProvider
-} from "./chunk-TNKYKA7N.js";
+} from "./chunk-GNQI376N.js";
+import "./chunk-FO24J6XL.js";
 import {
   materializeRuntime,
   readLocalAgentNames,
   readProjectState,
   writeProjectState
-} from "./chunk-63JREECU.js";
-import {
-  requireAuth
-} from "./chunk-5RODADXW.js";
-import "./chunk-FO24J6XL.js";
+} from "./chunk-DHCCSWJN.js";
 
 // src/commands/push.ts
 import { access, mkdir as mkdir2, rm, writeFile as writeFile2 } from "fs/promises";
@@ -241,6 +242,16 @@ var push_default = defineCommand({
         process.exit(1);
       });
       if (!state.workerUrl) {
+        const target2 = await promptDeployTarget("No remote runtime detected yet. Where do you want to deploy?");
+        if (!target2) {
+          p.outro("Cancelled");
+          return;
+        }
+        if (target2 === "kalp-cloud") {
+          showKalpCloudWaitlist();
+          p.outro(pc.green("Got it \u2014 you'll hear from us soon."));
+          return;
+        }
         p.log.warn("No .kalp/state.json found. Running initial deploy first...");
         const deploy = await runInitialDeploy(cwd);
         state = await readProjectState(cwd) ?? createInitialState();
@@ -373,4 +384,4 @@ var push_default = defineCommand({
 export {
   push_default as default
 };
-//# sourceMappingURL=push-SVABM7WN.js.map
+//# sourceMappingURL=push-RA6GEUV4.js.map

package/dist/push-RA6GEUV4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/push.ts","../src/utils/ir/export.ts"],"sourcesContent":["import { access, mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport { ensureConfig } from \"@/utils/fs\";\nimport { readAgentManifest, computePushHash } from \"@/utils/manifest\";\nimport { requireAuth } from \"@/utils/auth\";\nimport { runInitialDeploy } from \"@/utils/deploy\";\nimport {\n  type ProjectAgentState,\n  type ProjectState,\n  readProjectState,\n  writeProjectState,\n} from \"@/utils/project-state\";\nimport { validateCompiledIR } from \"@/utils/validate\";\nimport { materializeRuntime, readLocalAgentNames } from \"@/utils/runtime\";\nimport { resolveProvider } from \"@/utils/providers\";\nimport { exportCompiledIrForDebug } from \"@/utils/ir/export\";\nimport { promptDeployTarget, showKalpCloudWaitlist } from \"@/utils/deploy-target\";\n\nconst LOGO = \"🦋\";\n\nfunction formatBytes(bytes: number): string {\n  if (bytes < 1024) return `${bytes} B`;\n  return `${(bytes / 1024).toFixed(1)} KB`;\n}\n\nfunction createInitialState(): ProjectState {\n  return {\n    workerUrl: null,\n    deployedAt: null,\n    accountId: null,\n    studioCredentialsFingerprint: null,\n    serviceKeyFingerprint: null,\n    agents: {},\n  };\n}\n\nfunction ensureAgentState(\n  state: ProjectState,\n  agentName: string,\n  localPath: string,\n): ProjectAgentState {\n  const existing = state.agents[agentName];\n  if (existing) {\n    existing.localPath = localPath;\n    return existing;\n  }\n\n  const created: ProjectAgentState = {\n    currentHash: null,\n    currentVersion: 0,\n    lastLocalHash: null,\n    lastRemoteHash: null,\n    lastPushedAt: null,\n    localPath,\n    workerUrl:\n      state.workerUrl ? `${state.workerUrl.replace(/\\/$/, \"\")}/a/${agentName}` : null,\n  };\n  state.agents[agentName] = created;\n  return created;\n}\n\ntype PushTarget = \"local\" | \"remote\";\n\ninterface PushResult {\n  pushed: number;\n  skipped: number;\n  failed: number;\n}\n\ninterface RemoteAgentIndexEntry {\n  name: string;\n  hash: string;\n  version: string | null;\n  versionNumber: number | null;\n  updatedAt: string;\n  workerUrl: string | null;\n  label?: string;\n  tags?: string[];\n}\n\ninterface PruneResult {\n  removedAgents: string[];\n  deletedKeys: number;\n}\n\nasync function readRemoteAgentsIndex(\n  cwd: string,\n  wranglerConfigPath: string,\n): Promise<RemoteAgentIndexEntry[]> {\n  const provider = resolveProvider();\n  const output = await provider\n    .getValue({\n      cwd,\n      configPath: wranglerConfigPath,\n      key: \"agents:index\",\n    })\n    .catch(() => null);\n  if (!output) return [];\n  try {\n    const parsed = JSON.parse(output) as unknown;\n    if (!Array.isArray(parsed)) return [];\n    return parsed as RemoteAgentIndexEntry[];\n  } catch {\n    return [];\n  }\n}\n\nasync function writeRemoteAgentsIndex(\n  cwd: string,\n  wranglerConfigPath: string,\n  entries: RemoteAgentIndexEntry[],\n): Promise<void> {\n  const path = join(cwd, \".kalp\", \"agents-index.json\");\n  await writeFile(path, JSON.stringify(entries, null, 2), \"utf-8\");\n  const provider = resolveProvider();\n  try {\n    await provider.putManifest({\n      cwd,\n      configPath: wranglerConfigPath,\n      key: \"agents:index\",\n      jsonPath: path,\n    });\n  } finally {\n    await rm(path, { force: true });\n  }\n}\n\nasync function pruneStaleRemoteAgents(params: {\n  cwd: string;\n  wranglerConfigPath: string;\n  remoteEntries: RemoteAgentIndexEntry[];\n  localAgentNames: string[];\n}): Promise<PruneResult> {\n  const { cwd, wranglerConfigPath, remoteEntries, localAgentNames } = params;\n  const localSet = new Set(localAgentNames);\n  const staleEntries = remoteEntries.filter((entry) => !localSet.has(entry.name));\n\n  if (staleEntries.length === 0) {\n    return { removedAgents: [], deletedKeys: 0 };\n  }\n\n  const preview = staleEntries.slice(0, 3).map((entry) => entry.name).join(\", \");\n  const suffix =\n    staleEntries.length > 3 ? ` and ${staleEntries.length - 3} more` : \"\";\n  const confirmation = await p.confirm({\n    message: `Found ${staleEntries.length} stale remote agents that no longer exist locally (e.g., ${pc.cyan(preview)}${suffix}). Do you want to prune them from the remote runtime?`,\n    initialValue: true,\n  });\n\n  if (p.isCancel(confirmation)) {\n    p.outro(\"Cancelled\");\n    process.exit(0);\n  }\n\n  if (!confirmation) {\n    return { removedAgents: [], deletedKeys: 0 };\n  }\n\n  const provider = resolveProvider();\n  let deletedKeys = 0;\n\n  for (const entry of staleEntries) {\n    const latestKey = `${entry.name}:latest`;\n    const latestHash = await provider\n      .getValue({ cwd, configPath: wranglerConfigPath, key: latestKey })\n      .catch(() => null);\n\n    const hashes = new Set<string>();\n    if (entry.hash) hashes.add(entry.hash);\n    if (latestHash) hashes.add(latestHash);\n\n    const latestDeleted = await provider\n      .deleteValue({\n        cwd,\n        configPath: wranglerConfigPath,\n        key: latestKey,\n      })\n      .then(() => true)\n      .catch(() => false);\n    if (latestDeleted) deletedKeys += 1;\n\n    for (const hash of hashes) {\n      const deleted = await provider\n        .deleteValue({\n          cwd,\n          configPath: wranglerConfigPath,\n          key: `${entry.name}:${hash}`,\n        })\n        .then(() => true)\n        .catch(() => false);\n      if (deleted) deletedKeys += 1;\n    }\n  }\n\n  const filtered = remoteEntries.filter((entry) => localSet.has(entry.name));\n  await writeRemoteAgentsIndex(cwd, wranglerConfigPath, filtered);\n\n  return {\n    removedAgents: staleEntries.map((entry) => entry.name).sort((a, b) => a.localeCompare(b)),\n    deletedKeys,\n  };\n}\n\nasync function mergeRemoteAgentIndexEntry(params: {\n  cwd: string;\n  wranglerConfigPath: string;\n  entry: RemoteAgentIndexEntry;\n}): Promise<void> {\n  const { cwd, wranglerConfigPath, entry } = params;\n  const currentIndex = await readRemoteAgentsIndex(cwd, wranglerConfigPath);\n  const merged = [\n    ...currentIndex.filter((existing) => existing.name !== entry.name),\n    entry,\n  ].sort((a, b) => a.name.localeCompare(b.name));\n\n  await writeRemoteAgentsIndex(cwd, wranglerConfigPath, merged);\n}\n\nasync function pushRemoteManifest(params: {\n  cwd: string;\n  wranglerConfigPath: string;\n  agentName: string;\n  hash: string;\n  ir: unknown;\n}): Promise<void> {\n  const { cwd, wranglerConfigPath, agentName, hash, ir } = params;\n  const manifestKey = `${agentName}:${hash}`;\n  const latestKey = `${agentName}:latest`;\n  const manifestPath = join(cwd, \".kalp\", `${agentName}-${hash}.json`);\n  await mkdir(join(cwd, \".kalp\"), { recursive: true });\n  await writeFile(manifestPath, JSON.stringify(ir), \"utf-8\");\n\n  const provider = resolveProvider();\n  try {\n    await provider.putManifest({\n      cwd,\n      configPath: wranglerConfigPath,\n      key: manifestKey,\n      jsonPath: manifestPath,\n    });\n    await provider.putValue({\n      cwd,\n      configPath: wranglerConfigPath,\n      key: latestKey,\n      value: hash,\n    });\n  } finally {\n    await rm(manifestPath, { force: true });\n  }\n}\n\nexport default defineCommand({\n  meta: { name: \"push\", description: \"Publish agent runtime version\" },\n  args: {\n    agent: {\n      type: \"string\",\n      alias: \"a\",\n      description: \"Agent name to push\",\n      required: false,\n    },\n    local: {\n      type: \"boolean\",\n      description: \"Update only local runtime snapshot and state\",\n      required: false,\n      default: false,\n    },\n  },\n  async run({ args }) {\n    const cwd = process.cwd();\n    const target: PushTarget = args.local ? \"local\" : \"remote\";\n    const isBulkPush = !args.agent;\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp push\")}`);\n\n    await ensureConfig(cwd).catch(() => {\n      p.log.error(`${pc.cyan(\"kalp.config.ts\")} not found`);\n      process.exit(1);\n    });\n\n    const availableAgents = await readLocalAgentNames(cwd);\n    if (availableAgents.length === 0) {\n      p.log.error(\"No local agents found in ./agents\");\n      process.exit(1);\n    }\n\n    let selectedAgents: string[] = [];\n    if (args.agent) {\n      if (!availableAgents.includes(args.agent)) {\n        p.log.error(`Agent ${pc.cyan(args.agent)} not found`);\n        process.exit(1);\n      }\n      selectedAgents = [args.agent];\n    } else {\n      selectedAgents = availableAgents;\n    }\n\n    let state = (await readProjectState(cwd)) ?? createInitialState();\n    let runtime = await materializeRuntime(cwd, { mode: target });\n\n    if (target === \"remote\") {\n      await requireAuth().catch(() => {\n        p.log.error(\"Not authenticated. Run `kalp login` first.\");\n        process.exit(1);\n      });\n\n      if (!state.workerUrl) {\n        const target = await promptDeployTarget(\"No remote runtime detected yet. Where do you want to deploy?\");\n        if (!target) {\n          p.outro(\"Cancelled\");\n          return;\n        }\n        if (target === \"kalp-cloud\") {\n          showKalpCloudWaitlist();\n          p.outro(pc.green(\"Got it — you'll hear from us soon.\"));\n          return;\n        }\n        p.log.warn(\"No .kalp/state.json found. Running initial deploy first...\");\n        const deploy = await runInitialDeploy(cwd);\n        state = (await readProjectState(cwd)) ?? createInitialState();\n        state.workerUrl = deploy.workerUrl;\n        state.accountId = deploy.accountId;\n        state.deployedAt = new Date().toISOString();\n      }\n\n      runtime = await materializeRuntime(cwd, { mode: \"remote\" });\n\n      if (isBulkPush) {\n        const currentIndex = await readRemoteAgentsIndex(cwd, runtime.wranglerConfigPath);\n        const prune = await pruneStaleRemoteAgents({\n          cwd,\n          wranglerConfigPath: runtime.wranglerConfigPath,\n          remoteEntries: currentIndex,\n          localAgentNames: availableAgents,\n        });\n\n        if (prune.removedAgents.length > 0) {\n          p.log.info(\n            `Pruned stale remote agents: ${pc.cyan(prune.removedAgents.join(\", \"))} ${pc.dim(`(${prune.deletedKeys} keys cleaned)`)}`,\n          );\n        }\n      }\n    }\n\n    const spinner = p.spinner();\n    const result: PushResult = { pushed: 0, skipped: 0, failed: 0 };\n    const failures: string[] = [];\n\n    for (const agentName of selectedAgents) {\n      const agentPath = join(cwd, \"agents\", agentName, \"index.ts\");\n      await access(agentPath).catch(() => {\n        failures.push(`${agentName}: missing ${agentPath}`);\n      });\n\n      try {\n        spinner.start(`Compiling ${pc.cyan(agentName)}`);\n        const manifest = await readAgentManifest({ cwd, agentName });\n        const hash = computePushHash(manifest.ir);\n        const validation = validateCompiledIR({ agentName, ir: manifest.ir, hash });\n        if (!validation.ok) {\n          const details = (validation.errors ?? []).join(\" | \");\n          throw new Error(\n            `validation failed (${validation.phase})${details ? `: ${details}` : \"\"}`,\n          );\n        }\n\n        const agentState = ensureAgentState(state, agentName, agentPath);\n        const previousHash =\n          target === \"local\" ? agentState.lastLocalHash : agentState.lastRemoteHash;\n\n        if (previousHash === hash) {\n          result.skipped += 1;\n          spinner.stop(`Skipped ${pc.cyan(agentName)} (no changes)`);\n          continue;\n        }\n\n        if (target === \"remote\") {\n          spinner.message(\"Publishing runtime version\");\n          await pushRemoteManifest({\n            cwd,\n            wranglerConfigPath: runtime.wranglerConfigPath,\n            agentName,\n            hash,\n            ir: manifest.ir,\n          });\n        }\n\n        agentState.currentVersion = Math.max(0, agentState.currentVersion) + 1;\n        agentState.currentHash = hash;\n        agentState.lastPushedAt = new Date().toISOString();\n        agentState.workerUrl =\n          state.workerUrl && target === \"remote\"\n            ? `${state.workerUrl.replace(/\\/$/, \"\")}/a/${agentName}`\n            : agentState.workerUrl;\n\n        if (target === \"local\") {\n          agentState.lastLocalHash = hash;\n        } else {\n          agentState.lastRemoteHash = hash;\n          agentState.lastLocalHash = hash;\n\n          const nextEntry: RemoteAgentIndexEntry = {\n            name: agentName,\n            hash,\n            version: `v${agentState.currentVersion}`,\n            versionNumber: agentState.currentVersion,\n            updatedAt: agentState.lastPushedAt,\n            workerUrl: agentState.workerUrl,\n            label: manifest.ir.metadata?.label,\n            tags: manifest.ir.metadata?.tags,\n          };\n          await mergeRemoteAgentIndexEntry({\n            cwd,\n            wranglerConfigPath: runtime.wranglerConfigPath,\n            entry: nextEntry,\n          });\n        }\n\n        const bundles = manifest.ir.bundles || {};\n        await exportCompiledIrForDebug({\n          cwd,\n          agentName,\n          ir: manifest.ir,\n        });\n        const totalSize = Object.values(bundles).reduce(\n          (sum, bundle) => sum + Buffer.byteLength(bundle.code),\n          0,\n        );\n        const handlerCount = Object.keys(bundles).length;\n        spinner.stop(\n          `${pc.bold(agentName)} pushed ${pc.dim(`(v${agentState.currentVersion})`)} · ${handlerCount} handlers · ${formatBytes(totalSize)}`,\n        );\n        result.pushed += 1;\n      } catch (error) {\n        const message = error instanceof Error ? error.message : String(error);\n        failures.push(`${agentName}: ${message}`);\n        spinner.stop(`Failed ${pc.cyan(agentName)}`);\n        result.failed += 1;\n      }\n    }\n\n    await writeProjectState(cwd, state);\n    await materializeRuntime(cwd, { mode: target });\n\n    p.note(\n      `Successfully pushed ${result.pushed} agents. ${result.skipped} omitted (no changes). ${result.failed} failed.`,\n      target === \"local\" ? \"Local push\" : \"Remote push\",\n    );\n    if (target === \"remote\" && result.pushed > 0) {\n      p.log.info(\n        pc.dim(\n          \"Changes propagating to remote Studio (eventual consistency, up to ~60s).\",\n        ),\n      );\n    }\n\n    if (failures.length > 0) {\n      for (const failure of failures) {\n        p.log.error(failure);\n      }\n      p.outro(`${LOGO} ${pc.red(\"Push completed with failures\")}`);\n      process.exit(1);\n    }\n\n    p.outro(`${LOGO} ${pc.green(\"Push complete\")}`);\n  },\n});\n","import { mkdir, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\n/**\n * TODO remove after SaaS observability: debug IR export for local inspection.\n */\nexport async function exportCompiledIrForDebug(params: {\n  cwd: string;\n  agentName: string;\n  ir: unknown;\n}): Promise<string> {\n  const { cwd, agentName, ir } = params;\n  const outDir = join(cwd, \".kalp\", \"exports\", agentName);\n  await mkdir(outDir, { recursive: true });\n  const outputPath = join(outDir, \"ir.json\");\n  await writeFile(outputPath, `${JSON.stringify(ir, null, 2)}\\n`, \"utf-8\");\n  return outputPath;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,QAAQ,SAAAA,QAAO,IAAI,aAAAC,kBAAiB;AAC7C,SAAS,QAAAC,aAAY;AACrB,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;;;ACJf,SAAS,OAAO,iBAAiB;AACjC,SAAS,YAAY;AAKrB,eAAsB,yBAAyB,QAI3B;AAClB,QAAM,EAAE,KAAK,WAAW,GAAG,IAAI;AAC/B,QAAM,SAAS,KAAK,KAAK,SAAS,WAAW,SAAS;AACtD,QAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAa,KAAK,QAAQ,SAAS;AACzC,QAAM,UAAU,YAAY,GAAG,KAAK,UAAU,IAAI,MAAM,CAAC,CAAC;AAAA,GAAM,OAAO;AACvE,SAAO;AACT;;;ADIA,IAAM,OAAO;AAEb,SAAS,YAAY,OAAuB;AAC1C,MAAI,QAAQ,KAAM,QAAO,GAAG,KAAK;AACjC,SAAO,IAAI,QAAQ,MAAM,QAAQ,CAAC,CAAC;AACrC;AAEA,SAAS,qBAAmC;AAC1C,SAAO;AAAA,IACL,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,8BAA8B;AAAA,IAC9B,uBAAuB;AAAA,IACvB,QAAQ,CAAC;AAAA,EACX;AACF;AAEA,SAAS,iBACP,OACA,WACA,WACmB;AACnB,QAAM,WAAW,MAAM,OAAO,SAAS;AACvC,MAAI,UAAU;AACZ,aAAS,YAAY;AACrB,WAAO;AAAA,EACT;AAEA,QAAM,UAA6B;AAAA,IACjC,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd;AAAA,IACA,WACE,MAAM,YAAY,GAAG,MAAM,UAAU,QAAQ,OAAO,EAAE,CAAC,MAAM,SAAS,KAAK;AAAA,EAC/E;AACA,QAAM,OAAO,SAAS,IAAI;AAC1B,SAAO;AACT;AA0BA,eAAe,sBACb,KACA,oBACkC;AAClC,QAAM,WAAW,gBAAgB;AACjC,QAAM,SAAS,MAAM,SAClB,SAAS;AAAA,IACR;AAAA,IACA,YAAY;AAAA,IACZ,KAAK;AAAA,EACP,CAAC,EACA,MAAM,MAAM,IAAI;AACnB,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,MAAM;AAChC,QAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,uBACb,KACA,oBACA,SACe;AACf,QAAM,OAAOC,MAAK,KAAK,SAAS,mBAAmB;AACnD,QAAMC,WAAU,MAAM,KAAK,UAAU,SAAS,MAAM,CAAC,GAAG,OAAO;AAC/D,QAAM,WAAW,gBAAgB;AACjC,MAAI;AACF,UAAM,SAAS,YAAY;AAAA,MACzB;AAAA,MACA,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,UAAU;AAAA,IACZ,CAAC;AAAA,EACH,UAAE;AACA,UAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAEA,eAAe,uBAAuB,QAKb;AACvB,QAAM,EAAE,KAAK,oBAAoB,eAAe,gBAAgB,IAAI;AACpE,QAAM,WAAW,IAAI,IAAI,eAAe;AACxC,QAAM,eAAe,cAAc,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,MAAM,IAAI,CAAC;AAE9E,MAAI,aAAa,WAAW,GAAG;AAC7B,WAAO,EAAE,eAAe,CAAC,GAAG,aAAa,EAAE;AAAA,EAC7C;AAEA,QAAM,UAAU,aAAa,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,MAAM,IAAI,EAAE,KAAK,IAAI;AAC7E,QAAM,SACJ,aAAa,SAAS,IAAI,QAAQ,aAAa,SAAS,CAAC,UAAU;AACrE,QAAM,eAAe,MAAQ,UAAQ;AAAA,IACnC,SAAS,SAAS,aAAa,MAAM,4DAA4D,GAAG,KAAK,OAAO,CAAC,GAAG,MAAM;AAAA,IAC1H,cAAc;AAAA,EAChB,CAAC;AAED,MAAM,WAAS,YAAY,GAAG;AAC5B,IAAE,QAAM,WAAW;AACnB,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,CAAC,cAAc;AACjB,WAAO,EAAE,eAAe,CAAC,GAAG,aAAa,EAAE;AAAA,EAC7C;AAEA,QAAM,WAAW,gBAAgB;AACjC,MAAI,cAAc;AAElB,aAAW,SAAS,cAAc;AAChC,UAAM,YAAY,GAAG,MAAM,IAAI;AAC/B,UAAM,aAAa,MAAM,SACtB,SAAS,EAAE,KAAK,YAAY,oBAAoB,KAAK,UAAU,CAAC,EAChE,MAAM,MAAM,IAAI;AAEnB,UAAM,SAAS,oBAAI,IAAY;AAC/B,QAAI,MAAM,KAAM,QAAO,IAAI,MAAM,IAAI;AACrC,QAAI,WAAY,QAAO,IAAI,UAAU;AAErC,UAAM,gBAAgB,MAAM,SACzB,YAAY;AAAA,MACX;AAAA,MACA,YAAY;AAAA,MACZ,KAAK;AAAA,IACP,CAAC,EACA,KAAK,MAAM,IAAI,EACf,MAAM,MAAM,KAAK;AACpB,QAAI,cAAe,gBAAe;AAElC,eAAW,QAAQ,QAAQ;AACzB,YAAM,UAAU,MAAM,SACnB,YAAY;AAAA,QACX;AAAA,QACA,YAAY;AAAA,QACZ,KAAK,GAAG,MAAM,IAAI,IAAI,IAAI;AAAA,MAC5B,CAAC,EACA,KAAK,MAAM,IAAI,EACf,MAAM,MAAM,KAAK;AACpB,UAAI,QAAS,gBAAe;AAAA,IAC9B;AAAA,EACF;AAEA,QAAM,WAAW,cAAc,OAAO,CAAC,UAAU,SAAS,IAAI,MAAM,IAAI,CAAC;AACzE,QAAM,uBAAuB,KAAK,oBAAoB,QAAQ;AAE9D,SAAO;AAAA,IACL,eAAe,aAAa,IAAI,CAAC,UAAU,MAAM,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAAA,IACxF;AAAA,EACF;AACF;AAEA,eAAe,2BAA2B,QAIxB;AAChB,QAAM,EAAE,KAAK,oBAAoB,MAAM,IAAI;AAC3C,QAAM,eAAe,MAAM,sBAAsB,KAAK,kBAAkB;AACxE,QAAM,SAAS;AAAA,IACb,GAAG,aAAa,OAAO,CAAC,aAAa,SAAS,SAAS,MAAM,IAAI;AAAA,IACjE;AAAA,EACF,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAE7C,QAAM,uBAAuB,KAAK,oBAAoB,MAAM;AAC9D;AAEA,eAAe,mBAAmB,QAMhB;AAChB,QAAM,EAAE,KAAK,oBAAoB,WAAW,MAAM,GAAG,IAAI;AACzD,QAAM,cAAc,GAAG,SAAS,IAAI,IAAI;AACxC,QAAM,YAAY,GAAG,SAAS;AAC9B,QAAM,eAAeD,MAAK,KAAK,SAAS,GAAG,SAAS,IAAI,IAAI,OAAO;AACnE,QAAME,OAAMF,MAAK,KAAK,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACnD,QAAMC,WAAU,cAAc,KAAK,UAAU,EAAE,GAAG,OAAO;AAEzD,QAAM,WAAW,gBAAgB;AACjC,MAAI;AACF,UAAM,SAAS,YAAY;AAAA,MACzB;AAAA,MACA,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,UAAU;AAAA,IACZ,CAAC;AACD,UAAM,SAAS,SAAS;AAAA,MACtB;AAAA,MACA,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,OAAO;AAAA,IACT,CAAC;AAAA,EACH,UAAE;AACA,UAAM,GAAG,cAAc,EAAE,OAAO,KAAK,CAAC;AAAA,EACxC;AACF;AAEA,IAAO,eAAQ,cAAc;AAAA,EAC3B,MAAM,EAAE,MAAM,QAAQ,aAAa,gCAAgC;AAAA,EACnE,MAAM;AAAA,IACJ,OAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,UAAM,MAAM,QAAQ,IAAI;AACxB,UAAM,SAAqB,KAAK,QAAQ,UAAU;AAClD,UAAM,aAAa,CAAC,KAAK;AAEzB,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,WAAW,CAAC,EAAE;AAEzC,UAAM,aAAa,GAAG,EAAE,MAAM,MAAM;AAClC,MAAE,MAAI,MAAM,GAAG,GAAG,KAAK,gBAAgB,CAAC,YAAY;AACpD,cAAQ,KAAK,CAAC;AAAA,IAChB,CAAC;AAED,UAAM,kBAAkB,MAAM,oBAAoB,GAAG;AACrD,QAAI,gBAAgB,WAAW,GAAG;AAChC,MAAE,MAAI,MAAM,mCAAmC;AAC/C,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,iBAA2B,CAAC;AAChC,QAAI,KAAK,OAAO;AACd,UAAI,CAAC,gBAAgB,SAAS,KAAK,KAAK,GAAG;AACzC,QAAE,MAAI,MAAM,SAAS,GAAG,KAAK,KAAK,KAAK,CAAC,YAAY;AACpD,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,uBAAiB,CAAC,KAAK,KAAK;AAAA,IAC9B,OAAO;AACL,uBAAiB;AAAA,IACnB;AAEA,QAAI,QAAS,MAAM,iBAAiB,GAAG,KAAM,mBAAmB;AAChE,QAAI,UAAU,MAAM,mBAAmB,KAAK,EAAE,MAAM,OAAO,CAAC;AAE5D,QAAI,WAAW,UAAU;AACvB,YAAM,YAAY,EAAE,MAAM,MAAM;AAC9B,QAAE,MAAI,MAAM,4CAA4C;AACxD,gBAAQ,KAAK,CAAC;AAAA,MAChB,CAAC;AAED,UAAI,CAAC,MAAM,WAAW;AACpB,cAAME,UAAS,MAAM,mBAAmB,8DAA8D;AACtG,YAAI,CAACA,SAAQ;AACX,UAAE,QAAM,WAAW;AACnB;AAAA,QACF;AACA,YAAIA,YAAW,cAAc;AAC3B,gCAAsB;AACtB,UAAE,QAAM,GAAG,MAAM,yCAAoC,CAAC;AACtD;AAAA,QACF;AACA,QAAE,MAAI,KAAK,4DAA4D;AACvE,cAAM,SAAS,MAAM,iBAAiB,GAAG;AACzC,gBAAS,MAAM,iBAAiB,GAAG,KAAM,mBAAmB;AAC5D,cAAM,YAAY,OAAO;AACzB,cAAM,YAAY,OAAO;AACzB,cAAM,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC5C;AAEA,gBAAU,MAAM,mBAAmB,KAAK,EAAE,MAAM,SAAS,CAAC;AAE1D,UAAI,YAAY;AACd,cAAM,eAAe,MAAM,sBAAsB,KAAK,QAAQ,kBAAkB;AAChF,cAAM,QAAQ,MAAM,uBAAuB;AAAA,UACzC;AAAA,UACA,oBAAoB,QAAQ;AAAA,UAC5B,eAAe;AAAA,UACf,iBAAiB;AAAA,QACnB,CAAC;AAED,YAAI,MAAM,cAAc,SAAS,GAAG;AAClC,UAAE,MAAI;AAAA,YACJ,+BAA+B,GAAG,KAAK,MAAM,cAAc,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,IAAI,MAAM,WAAW,gBAAgB,CAAC;AAAA,UACzH;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAMC,WAAY,UAAQ;AAC1B,UAAM,SAAqB,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,EAAE;AAC9D,UAAM,WAAqB,CAAC;AAE5B,eAAW,aAAa,gBAAgB;AACtC,YAAM,YAAYJ,MAAK,KAAK,UAAU,WAAW,UAAU;AAC3D,YAAM,OAAO,SAAS,EAAE,MAAM,MAAM;AAClC,iBAAS,KAAK,GAAG,SAAS,aAAa,SAAS,EAAE;AAAA,MACpD,CAAC;AAED,UAAI;AACF,QAAAI,SAAQ,MAAM,aAAa,GAAG,KAAK,SAAS,CAAC,EAAE;AAC/C,cAAM,WAAW,MAAM,kBAAkB,EAAE,KAAK,UAAU,CAAC;AAC3D,cAAM,OAAO,gBAAgB,SAAS,EAAE;AACxC,cAAM,aAAa,mBAAmB,EAAE,WAAW,IAAI,SAAS,IAAI,KAAK,CAAC;AAC1E,YAAI,CAAC,WAAW,IAAI;AAClB,gBAAM,WAAW,WAAW,UAAU,CAAC,GAAG,KAAK,KAAK;AACpD,gBAAM,IAAI;AAAA,YACR,sBAAsB,WAAW,KAAK,IAAI,UAAU,KAAK,OAAO,KAAK,EAAE;AAAA,UACzE;AAAA,QACF;AAEA,cAAM,aAAa,iBAAiB,OAAO,WAAW,SAAS;AAC/D,cAAM,eACJ,WAAW,UAAU,WAAW,gBAAgB,WAAW;AAE7D,YAAI,iBAAiB,MAAM;AACzB,iBAAO,WAAW;AAClB,UAAAA,SAAQ,KAAK,WAAW,GAAG,KAAK,SAAS,CAAC,eAAe;AACzD;AAAA,QACF;AAEA,YAAI,WAAW,UAAU;AACvB,UAAAA,SAAQ,QAAQ,4BAA4B;AAC5C,gBAAM,mBAAmB;AAAA,YACvB;AAAA,YACA,oBAAoB,QAAQ;AAAA,YAC5B;AAAA,YACA;AAAA,YACA,IAAI,SAAS;AAAA,UACf,CAAC;AAAA,QACH;AAEA,mBAAW,iBAAiB,KAAK,IAAI,GAAG,WAAW,cAAc,IAAI;AACrE,mBAAW,cAAc;AACzB,mBAAW,gBAAe,oBAAI,KAAK,GAAE,YAAY;AACjD,mBAAW,YACT,MAAM,aAAa,WAAW,WAC1B,GAAG,MAAM,UAAU,QAAQ,OAAO,EAAE,CAAC,MAAM,SAAS,KACpD,WAAW;AAEjB,YAAI,WAAW,SAAS;AACtB,qBAAW,gBAAgB;AAAA,QAC7B,OAAO;AACL,qBAAW,iBAAiB;AAC5B,qBAAW,gBAAgB;AAE3B,gBAAM,YAAmC;AAAA,YACvC,MAAM;AAAA,YACN;AAAA,YACA,SAAS,IAAI,WAAW,cAAc;AAAA,YACtC,eAAe,WAAW;AAAA,YAC1B,WAAW,WAAW;AAAA,YACtB,WAAW,WAAW;AAAA,YACtB,OAAO,SAAS,GAAG,UAAU;AAAA,YAC7B,MAAM,SAAS,GAAG,UAAU;AAAA,UAC9B;AACA,gBAAM,2BAA2B;AAAA,YAC/B;AAAA,YACA,oBAAoB,QAAQ;AAAA,YAC5B,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AAEA,cAAM,UAAU,SAAS,GAAG,WAAW,CAAC;AACxC,cAAM,yBAAyB;AAAA,UAC7B;AAAA,UACA;AAAA,UACA,IAAI,SAAS;AAAA,QACf,CAAC;AACD,cAAM,YAAY,OAAO,OAAO,OAAO,EAAE;AAAA,UACvC,CAAC,KAAK,WAAW,MAAM,OAAO,WAAW,OAAO,IAAI;AAAA,UACpD;AAAA,QACF;AACA,cAAM,eAAe,OAAO,KAAK,OAAO,EAAE;AAC1C,QAAAA,SAAQ;AAAA,UACN,GAAG,GAAG,KAAK,SAAS,CAAC,WAAW,GAAG,IAAI,KAAK,WAAW,cAAc,GAAG,CAAC,SAAM,YAAY,kBAAe,YAAY,SAAS,CAAC;AAAA,QAClI;AACA,eAAO,UAAU;AAAA,MACnB,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,iBAAS,KAAK,GAAG,SAAS,KAAK,OAAO,EAAE;AACxC,QAAAA,SAAQ,KAAK,UAAU,GAAG,KAAK,SAAS,CAAC,EAAE;AAC3C,eAAO,UAAU;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,kBAAkB,KAAK,KAAK;AAClC,UAAM,mBAAmB,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9C,IAAE;AAAA,MACA,uBAAuB,OAAO,MAAM,YAAY,OAAO,OAAO,0BAA0B,OAAO,MAAM;AAAA,MACrG,WAAW,UAAU,eAAe;AAAA,IACtC;AACA,QAAI,WAAW,YAAY,OAAO,SAAS,GAAG;AAC5C,MAAE,MAAI;AAAA,QACJ,GAAG;AAAA,UACD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,SAAS,GAAG;AACvB,iBAAW,WAAW,UAAU;AAC9B,QAAE,MAAI,MAAM,OAAO;AAAA,MACrB;AACA,MAAE,QAAM,GAAG,IAAI,IAAI,GAAG,IAAI,8BAA8B,CAAC,EAAE;AAC3D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE;AAAA,EAChD;AACF,CAAC;","names":["mkdir","writeFile","join","join","writeFile","mkdir","target","spinner"]}

package/dist/{secrets-P7ADVLOS.js → secrets-5ZPPASCH.js}

@@ -8,7 +8,7 @@ var LOGO = "\u{1F98B}";
 var secrets_default = defineCommand({
   meta: {
     name: "secrets",
-    description: "Manage Kalp Cloud secrets"
+    description: "Manage remote runtime secrets"
   },
   args: {
     help: {
@@ -19,10 +19,10 @@ var secrets_default = defineCommand({
     }
   },
   subCommands: {
-    list: () => import("./list-VMJPWHIH.js").then((r) => r.default),
-    add: () => import("./add-XTXSSGC5.js").then((r) => r.default),
-    delete: () => import("./delete-N4OSUK3X.js").then((r) => r.default),
-    sync: () => import("./sync-OTO44GQS.js").then((r) => r.default)
+    list: () => import("./list-4X735L5X.js").then((r) => r.default),
+    add: () => import("./add-NDU352FV.js").then((r) => r.default),
+    delete: () => import("./delete-DY5FQAHW.js").then((r) => r.default),
+    sync: () => import("./sync-2NLWWGI2.js").then((r) => r.default)
   },
   run({ args }) {
     if (!args.help) {
@@ -30,11 +30,11 @@ var secrets_default = defineCommand({
     }
     p.intro(`${LOGO} ${pc.bold("kalp secrets")}`);
     p.log.message(pc.bold("Available subcommands:"));
-    p.log.message(`  ${pc.cyan("list")}   List secrets from Kalp Cloud`);
-    p.log.message(`  ${pc.cyan("add")}    Add a secret to Kalp Cloud`);
-    p.log.message(`  ${pc.cyan("delete")} Delete a secret from Kalp Cloud`);
+    p.log.message(`  ${pc.cyan("list")}   List secrets from remote runtime`);
+    p.log.message(`  ${pc.cyan("add")}    Add a secret to remote runtime`);
+    p.log.message(`  ${pc.cyan("delete")} Delete a secret from remote runtime`);
     p.log.message(
-      `  ${pc.cyan("sync")}   Sync secrets from Kalp Cloud to local config`
+      `  ${pc.cyan("sync")}   Merge remote secrets into local config`
     );
     p.log.message("");
     p.log.message(
@@ -46,4 +46,4 @@ var secrets_default = defineCommand({
 export {
   secrets_default as default
 };
-//# sourceMappingURL=secrets-P7ADVLOS.js.map
+//# sourceMappingURL=secrets-5ZPPASCH.js.map

package/dist/secrets-5ZPPASCH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/secrets/index.ts"],"sourcesContent":["import { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\n\nconst LOGO = \"🦋\";\n\nexport default defineCommand({\n  meta: {\n    name: \"secrets\",\n    description: \"Manage remote runtime secrets\",\n  },\n  args: {\n    help: {\n      type: \"boolean\",\n      alias: \"h\",\n      description: \"Show help\",\n      default: false,\n    },\n  },\n  subCommands: {\n    list: () => import(\"./list\").then((r) => r.default),\n    add: () => import(\"./add\").then((r) => r.default),\n    delete: () => import(\"./delete\").then((r) => r.default),\n    sync: () => import(\"./sync\").then((r) => r.default),\n  },\n  run({ args }) {\n    if (!args.help) {\n      return;\n    }\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp secrets\")}`);\n    p.log.message(pc.bold(\"Available subcommands:\"));\n    p.log.message(`  ${pc.cyan(\"list\")}   List secrets from remote runtime`);\n    p.log.message(`  ${pc.cyan(\"add\")}    Add a secret to remote runtime`);\n    p.log.message(`  ${pc.cyan(\"delete\")} Delete a secret from remote runtime`);\n    p.log.message(\n      `  ${pc.cyan(\"sync\")}   Merge remote secrets into local config`,\n    );\n    p.log.message(\"\");\n    p.log.message(\n      `Run ${pc.cyan(\"kalp secrets <subcommand> --help\")} for more info.`,\n    );\n    p.outro(pc.dim(\"Done\"));\n  },\n});\n"],"mappings":";;;AAAA,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AAEf,IAAM,OAAO;AAEb,IAAO,kBAAQ,cAAc;AAAA,EAC3B,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,MAAM,MAAM,OAAO,oBAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAClD,KAAK,MAAM,OAAO,mBAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IAChD,QAAQ,MAAM,OAAO,sBAAU,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,IACtD,MAAM,MAAM,OAAO,oBAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EACpD;AAAA,EACA,IAAI,EAAE,KAAK,GAAG;AACZ,QAAI,CAAC,KAAK,MAAM;AACd;AAAA,IACF;AAEA,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,cAAc,CAAC,EAAE;AAC5C,IAAE,MAAI,QAAQ,GAAG,KAAK,wBAAwB,CAAC;AAC/C,IAAE,MAAI,QAAQ,KAAK,GAAG,KAAK,MAAM,CAAC,qCAAqC;AACvE,IAAE,MAAI,QAAQ,KAAK,GAAG,KAAK,KAAK,CAAC,oCAAoC;AACrE,IAAE,MAAI,QAAQ,KAAK,GAAG,KAAK,QAAQ,CAAC,sCAAsC;AAC1E,IAAE,MAAI;AAAA,MACJ,KAAK,GAAG,KAAK,MAAM,CAAC;AAAA,IACtB;AACA,IAAE,MAAI,QAAQ,EAAE;AAChB,IAAE,MAAI;AAAA,MACJ,OAAO,GAAG,KAAK,kCAAkC,CAAC;AAAA,IACpD;AACA,IAAE,QAAM,GAAG,IAAI,MAAM,CAAC;AAAA,EACxB;AACF,CAAC;","names":[]}

package/dist/sync-2NLWWGI2.js

@@ -0,0 +1,69 @@
+#!/usr/bin/env node
+import {
+  generateTypes
+} from "./chunk-MMS3GWBG.js";
+import {
+  mergeSecrets,
+  readLocalSecretsFromConfig,
+  resolveSecretsRuntimeConfigPath,
+  writeLocalSecretsToConfig
+} from "./chunk-5ZRVO3TQ.js";
+import "./chunk-INB3LG6O.js";
+import {
+  requireAuth,
+  resolveProvider
+} from "./chunk-GNQI376N.js";
+import "./chunk-FO24J6XL.js";
+import "./chunk-DHCCSWJN.js";
+
+// src/commands/secrets/sync.ts
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+import pc from "picocolors";
+var LOGO = "\u{1F98B}";
+var sync_default = defineCommand({
+  meta: {
+    name: "sync",
+    description: "Merge remote secrets into local kalp.config.ts"
+  },
+  async run() {
+    const cwd = process.cwd();
+    p.intro(`${LOGO} ${pc.bold("kalp secrets sync")}`);
+    await requireAuth().catch(() => {
+      p.log.error("Not authenticated. Run `kalp login` first.");
+      process.exit(1);
+    });
+    const spinner2 = p.spinner();
+    spinner2.start("Reading remote secrets");
+    try {
+      const configPath = await resolveSecretsRuntimeConfigPath(cwd);
+      const provider = resolveProvider();
+      const [remoteSecrets, localSecrets] = await Promise.all([
+        provider.listSecrets({ cwd, configPath }),
+        readLocalSecretsFromConfig(cwd)
+      ]);
+      const remoteNames = remoteSecrets.map((secret) => secret.name);
+      const merged = mergeSecrets(localSecrets, remoteNames);
+      const added = merged.filter((name) => !localSecrets.includes(name));
+      await writeLocalSecretsToConfig(cwd, merged);
+      await generateTypes(cwd);
+      spinner2.stop(`Synced ${remoteNames.length} remote secrets`);
+      if (added.length > 0) {
+        p.log.success(
+          `Added to local config: ${added.map((name) => pc.cyan(name)).join(", ")}`
+        );
+      } else {
+        p.log.info(pc.dim("Local config already up to date."));
+      }
+      p.outro("Done");
+    } catch (error) {
+      spinner2.stop("Sync failed");
+      p.log.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+  }
+});
+export {
+  sync_default as default
+};
+//# sourceMappingURL=sync-2NLWWGI2.js.map