@keystrokehq/cli 0.0.1 → 0.0.3

package/dist/{credentials-CvmjU0lK.mjs → credentials-UpgEcaub.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-DM4b7KgY.mjs";
-import { t as createTypedCommand } from "./commander-DfTVqQ-3.mjs";
-import { n as CredentialScopeSchema, r as CredentialScopeValues } from "./schema-17qMfNyI.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-q4KljAhu.mjs";
+import { t as createTypedCommand } from "./commander-DZ3F3CVq.mjs";
+import { n as CredentialScopeSchema, r as CredentialScopeValues } from "./schema-Di90TXoX.mjs";
 import { z } from "zod";
 //#region src/commands/credentials/list/list.command.ts
 const ListOptionsSchema = JsonOptionSchema.extend({
@@ -46,7 +46,7 @@ function createCredentialsListCommand() {
 		description: "List credential sets on the server",
 		schema: ListOptionsSchema,
 		optionsConfig: LIST_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./list.handler-DqbFcBW7.mjs")).handleCredentialsList
+		loadHandler: async () => (await import("./list.handler-DSPr0OxS.mjs")).handleCredentialsList
 	});
 }
 //#endregion
@@ -65,7 +65,7 @@ function createCredentialsRequirementsCommand() {
 		description: "Show what credentials built workflows need (keys, KEYSTROKE_* env names, workflows) — from dist manifests, no API call",
 		schema: RequirementsOptionsSchema,
 		optionsConfig: REQUIREMENTS_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./requirements.handler-DPXdSks3.mjs")).handleCredentialsRequirements
+		loadHandler: async () => (await import("./requirements.handler-coArDE8x.mjs")).handleCredentialsRequirements
 	});
 }
 //#endregion
@@ -121,7 +121,7 @@ function createCredentialsUploadCommand() {
 		description: "Upload credentials from env vars to the server. Default: reads requirements from built workflow manifests. Use --integration for an official integration or --credential-set + --keys for a custom explicit upload.",
 		schema: UploadOptionsSchema,
 		optionsConfig: UPLOAD_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upload.handler-DCtiznQp.mjs")).handleCredentialsUpload
+		loadHandler: async () => (await import("./upload.handler-CqProKVJ.mjs")).handleCredentialsUpload
 	});
 }
 //#endregion
@@ -152,7 +152,7 @@ function createCredentialsCommand() {
 			}
 		},
 		handler: async (opts, ctx) => {
-			const { handleCredentialsList } = await import("./list.handler-DqbFcBW7.mjs");
+			const { handleCredentialsList } = await import("./list.handler-DSPr0OxS.mjs");
 			await handleCredentialsList({
 				...opts,
 				scope: void 0,

package/dist/{current-deployment-workflow-poHt27i3.mjs → current-deployment-workflow-M8GEIHxv.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 import { E as WorkflowResolutionError, d as getApiErrorCode, f as getHttpStatus, t as ui } from "./keystroke.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
-import { a as readManifestsFromOutDir } from "./dist-BkJUoBiG.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { t as createSpinnerProgress } from "./spinner-progress-DMVwgqO9.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-DBQaBfnn.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { a as readManifestsFromOutDir } from "./dist-C2Dq_nx3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { t as createSpinnerProgress } from "./spinner-progress-bvKd1jXc.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-BcaIdRR6.mjs";
 //#region src/commands/workflows/_shared/current-deployment-workflow.ts
 /**
 * Lightweight resolution: gets projectId from keystroke.config.ts and authoredWorkflowId

package/dist/{current.handler-B8zKzfPp.mjs → current.handler-BqPUKCvn.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { t as ui } from "./keystroke.mjs";
-import { i as requireClient } from "./context-T7HZuB97.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
 //#region src/commands/org/current.handler.ts
 async function handleOrgCurrent(_options, ctx) {
 	if (!ctx.organizationId) {

package/dist/declared-credential-requirements-Bwlb-KZE.mjs

@@ -0,0 +1,132 @@
+#!/usr/bin/env node
+
+import { d as schemaToJsonSchema } from "./schema-kbMHVnhm.mjs";
+import "zod";
+import { createHash } from "node:crypto";
+//#region ../../packages/core/src/artifacts/schema-fingerprint.ts
+/**
+* schema-fingerprint.ts
+*
+* Computes a deterministic fingerprint (hash) of a credential set's schema.
+* Used as a persistence-layer identity stamp: the workflow-builder stamps each
+* credential requirement with its fingerprint at build time, the server stamps
+* each vault row with the fingerprint at upload time, and the executor's
+* credential resolver compares the two at read time so schema drift surfaces
+* as a `CredentialSchemaMismatchError` rather than a silent decode into a
+* stale shape.
+*
+* The fingerprint is deterministic: identical JSON schemas always produce the
+* same hash regardless of property ordering, timestamps, or other
+* non-structural differences.
+*
+* @remarks
+* This is the *persistence* fingerprint. The construction-time registry in
+* `credential-set/registry.ts` uses a different (Zod-structural) fingerprint
+* purely for in-process identity collision detection; the two fingerprints
+* serve different purposes and do not need to match.
+*/
+/**
+* Compute a deterministic fingerprint for a JSON schema object.
+*
+* The schema is the output of `schemaToJsonSchema(zodSchema)` — a plain JSON
+* object describing the shape of the Zod schema.
+*
+* Properties are sorted recursively before hashing to ensure deterministic
+* output regardless of insertion order.
+*
+* @example
+* ```ts
+* const auth = schemaToJsonSchema(credentialSet.auth);
+* const stored = credentialSet.stored ? schemaToJsonSchema(credentialSet.stored) : undefined;
+* const fingerprint = computeSchemaFingerprint(auth, stored);
+* ```
+*
+* @see CredentialSchemaMismatchError
+*/
+function computeSchemaFingerprint(authSchema, storedSchema) {
+	const normalized = sortDeep({
+		auth: authSchema,
+		...storedSchema ? { stored: storedSchema } : {}
+	});
+	const json = JSON.stringify(normalized);
+	return createHash("sha256").update(json).digest("hex").substring(0, 16);
+}
+function sortDeep(value) {
+	if (value === null || value === void 0) return value;
+	if (Array.isArray(value)) return value.map(sortDeep);
+	if (typeof value === "object") {
+		const sorted = {};
+		for (const key of Object.keys(value).sort()) sorted[key] = sortDeep(value[key]);
+		return sorted;
+	}
+	return value;
+}
+//#endregion
+//#region ../../packages/core/src/shared/declared-credential-requirements.ts
+function readSchemaKeys(schema, propertyKey) {
+	if (schema === null || typeof schema !== "object") return [];
+	const candidate = schema[propertyKey];
+	if (candidate === null || typeof candidate !== "object" || Array.isArray(candidate)) return [];
+	return Object.keys(candidate).sort();
+}
+/**
+* Returns sorted keys that are NOT listed in the JSON Schema `required` array.
+*/
+function readOptionalJsonSchemaKeys(schema) {
+	if (schema === null || typeof schema !== "object") return [];
+	const record = schema;
+	const properties = record.properties;
+	if (properties === null || typeof properties !== "object" || Array.isArray(properties)) return [];
+	const requiredSet = new Set(Array.isArray(record.required) ? record.required : []);
+	return Object.keys(properties).filter((key) => !requiredSet.has(key)).sort();
+}
+function toDeclaredCredentialRequirement(credentialSet) {
+	const optionalAuthKeys = credentialSet.optionalCredentialKeys;
+	const optionalStoredKeys = credentialSet.optionalStoredCredentialKeys;
+	const schemaFingerprint = computeSchemaFingerprint(schemaToJsonSchema(credentialSet.auth), credentialSet.stored ? schemaToJsonSchema(credentialSet.stored) : void 0);
+	const onCredentialRevoked = credentialSet.onCredentialRevoked;
+	return {
+		credentialSetId: credentialSet.id,
+		...credentialSet.namespace ? { namespace: credentialSet.namespace } : {},
+		resolvedCredentialSetId: credentialSet.resolvedCredentialSetId,
+		credentialKeys: [...credentialSet.credentialKeys],
+		...optionalAuthKeys.length > 0 ? { optionalCredentialKeys: [...optionalAuthKeys] } : {},
+		storedCredentialKeys: [...credentialSet.storedCredentialKeys],
+		...optionalStoredKeys.length > 0 ? { optionalStoredCredentialKeys: [...optionalStoredKeys] } : {},
+		schemaFingerprint,
+		...credentialSet.needsResolve ? { needsResolve: true } : {},
+		...credentialSet.resolveCacheMs > 0 ? { resolveCacheMs: credentialSet.resolveCacheMs } : {},
+		...onCredentialRevoked ? { onCredentialRevoked } : {},
+		...credentialSet.proxy ? { proxy: credentialSet.proxy } : {},
+		...credentialSet.needsRawSecret === true ? { needsRawSecret: true } : {}
+	};
+}
+function toDeclaredCredentialRequirements(credentialSets) {
+	return credentialSets.map(toDeclaredCredentialRequirement);
+}
+function manifestToDeclaredCredentialRequirement(credentialSet) {
+	const authKeys = readSchemaKeys(credentialSet.auth, "properties");
+	const optionalAuthKeys = readOptionalJsonSchemaKeys(credentialSet.auth);
+	const storedSchema = credentialSet.stored ?? credentialSet.auth;
+	const storedKeys = readSchemaKeys(storedSchema, "properties");
+	const optionalStoredKeys = readOptionalJsonSchemaKeys(storedSchema);
+	const schemaFingerprint = credentialSet.auth ? computeSchemaFingerprint(credentialSet.auth, credentialSet.stored) : void 0;
+	const onCredentialRevoked = credentialSet.onCredentialRevoked;
+	return {
+		credentialSetId: credentialSet.id,
+		...credentialSet.namespace ? { namespace: credentialSet.namespace } : {},
+		resolvedCredentialSetId: credentialSet.resolvedCredentialSetId,
+		credentialKeys: authKeys,
+		...optionalAuthKeys.length > 0 ? { optionalCredentialKeys: optionalAuthKeys } : {},
+		storedCredentialKeys: storedKeys,
+		...optionalStoredKeys.length > 0 ? { optionalStoredCredentialKeys: optionalStoredKeys } : {},
+		...schemaFingerprint ? { schemaFingerprint } : {},
+		...credentialSet.needsResolve ? { needsResolve: true } : {},
+		...typeof credentialSet.resolveCacheMs === "number" && credentialSet.resolveCacheMs > 0 ? { resolveCacheMs: credentialSet.resolveCacheMs } : {},
+		...onCredentialRevoked ? { onCredentialRevoked } : {},
+		...credentialSet.proxy ? { proxy: credentialSet.proxy } : {},
+		...credentialSet.needsRawSecret === true ? { needsRawSecret: true } : {}
+	};
+}
+//#endregion
+export { readOptionalJsonSchemaKeys as n, toDeclaredCredentialRequirements as r, manifestToDeclaredCredentialRequirement as t };

package/dist/default-urls-BS4twrsS.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+
+//#region src/lib/default-urls.ts
+const DEFAULT_CLI_WEB_URL = "https://keystroke.ai";
+const DEFAULT_CLI_SERVER_URL = "https://api.kestroke.ai";
+//#endregion
+export { DEFAULT_CLI_WEB_URL as n, DEFAULT_CLI_SERVER_URL as t };

package/dist/{delete.handler-bAu1iXVQ.mjs → delete.handler-CJTHVZaz.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
-import { i as requireClient } from "./context-T7HZuB97.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
 //#region src/commands/api-keys/delete.handler.ts
 async function handleApiKeysDelete(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{deploy-7Jjls436.mjs → deploy-CdnaZY3s.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { a as createKyInstance, n as auth, r as bundles, s as getClientEnv, t as projects } from "./projects-CHkRE9rS.mjs";
+import { a as createKyInstance, n as auth, r as bundles, s as getClientEnv, t as projects } from "./projects-Bdl6-Z8l.mjs";
 //#region ../../packages/workflow-sdk/src/deploy.ts
 function createDeployClient(config = {}) {
 	const env = getClientEnv();

package/dist/{deploy-BOPIpRWm.mjs → deploy-Gw0KPrkf.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-DfTVqQ-3.mjs";
+import { t as createTypedCommand } from "./commander-DZ3F3CVq.mjs";
 import { z } from "zod";
 //#region src/commands/deploy/deploy.command.ts
 /**
@@ -64,7 +64,7 @@ function createDeployCommand() {
 		schema: DeployOptionsSchema,
 		optionsConfig: DEPLOY_OPTIONS_CONFIG,
 		contextMode: "auth",
-		loadHandler: async () => (await import("./deploy.handler-BAzgiNhd.mjs")).handleDeploy
+		loadHandler: async () => (await import("./deploy.handler-zzFAt7pp.mjs")).handleDeploy
 	});
 	cmd.enablePositionalOptions();
 	cmd.passThroughOptions();

package/dist/{deploy-progress-BmGUNFKg.mjs → deploy-progress-CZ2rPlOj.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { t as ui } from "./keystroke.mjs";
-import { t as createSpinnerProgress } from "./spinner-progress-DMVwgqO9.mjs";
+import { t as createSpinnerProgress } from "./spinner-progress-bvKd1jXc.mjs";
 //#region src/lib/deploy-progress.ts
 function renderItemFailure(event, kind, spinner) {
 	if (event.result === "failure") spinner.fail(`${kind} failed (${event.name})`, void 0, event.error);

package/dist/{deploy.handler-BAzgiNhd.mjs → deploy.handler-zzFAt7pp.mjs}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 
 import { C as CliExitError, i as logger, o as ANSI, s as style, t as ui } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-CUK7yBM0.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
-import { i as readAgentManifestsFromOutDir, o as readWorkflowsFromDisk } from "./dist-BkJUoBiG.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-DBQaBfnn.mjs";
-import { r as isLocalMode } from "./env-91KwMKov.mjs";
-import { r as requireAuthOptions, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-T7HZuB97.mjs";
-import { t as createBuildProgress } from "./build-progress-DgYKb4hB.mjs";
-import { t as createDeployProgress } from "./deploy-progress-BmGUNFKg.mjs";
-import { t as withErrorBoundary } from "./error-boundary-VL-JLfIa.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-poHt27i3.mjs";
-import { t as computeWorkflowDiff } from "./diff-utils-NEfcjqxt.mjs";
+import { d as trackProject } from "./dist-BF6r1hfv.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { r as isLocalMode } from "./env-YTZGKGIu.mjs";
+import { r as requireAuthOptions, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Y1f1hGYy.mjs";
+import { i as readAgentManifestsFromOutDir, o as readWorkflowsFromDisk } from "./dist-C2Dq_nx3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-BcaIdRR6.mjs";
+import { t as createBuildProgress } from "./build-progress-Cn2j1LqF.mjs";
+import { t as createDeployProgress } from "./deploy-progress-CZ2rPlOj.mjs";
+import { t as withErrorBoundary } from "./error-boundary-B9PgBkv8.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-M8GEIHxv.mjs";
+import { t as computeWorkflowDiff } from "./diff-utils-DWNcRA8g.mjs";
 import { access } from "node:fs/promises";
 import path from "node:path";
 //#region src/commands/deploy/deploy-diff.ts
@@ -199,7 +199,7 @@ async function handleDeploy(options, ctx) {
 		let outDir;
 		let artifactFilter;
 		try {
-			const { runWorkflowBuild } = await import("./workflow-build-DBQaBfnn.mjs").then((n) => n.o);
+			const { runWorkflowBuild } = await import("./workflow-build-BcaIdRR6.mjs").then((n) => n.o);
 			const buildOutcome = await runWorkflowBuild({
 				workflowsDir,
 				verbose: options.verbose,
@@ -234,7 +234,7 @@ async function handleDeploy(options, ctx) {
 		const progress = createDeployProgress();
 		let result;
 		try {
-			result = await (deployHandlerDependencies.deployFromDir ?? (await import("./dist-BkJUoBiG.mjs").then((n) => n.r)).deployFromDir)({
+			result = await (deployHandlerDependencies.deployFromDir ?? (await import("./dist-C2Dq_nx3.mjs").then((n) => n.r)).deployFromDir)({
 				outDir,
 				workflowsDir,
 				client,
@@ -261,7 +261,7 @@ async function handleDeploy(options, ctx) {
 }
 async function handleTaskTargetDeploy(options) {
 	renderBuildHeader(void 0);
-	const buildResult = await (deployHandlerDependencies.buildTaskTargets ?? (await import("./task-target-build-CBeCKbu2.mjs")).buildTaskTargets)({
+	const buildResult = await (deployHandlerDependencies.buildTaskTargets ?? (await import("./task-target-build-DTzz4fpG.mjs")).buildTaskTargets)({
 		projectRoot: options.workflowsDir,
 		targetFiles: options.targetFiles,
 		disableSourcemaps: options.options.disableSourcemaps
@@ -279,7 +279,7 @@ async function handleTaskTargetDeploy(options) {
 	const progress = createDeployProgress();
 	let result;
 	try {
-		result = await (deployHandlerDependencies.deployTaskTargets ?? (await import("./task-target-deploy-C5X-USeR.mjs")).deployTaskTargets)({
+		result = await (deployHandlerDependencies.deployTaskTargets ?? (await import("./task-target-deploy-BPLlP__P.mjs")).deployTaskTargets)({
 			preparedTasks: buildResult.preparedTasks,
 			client,
 			organizationId: options.projectConfig.organizationId,
@@ -301,7 +301,7 @@ async function handleTaskTargetDeploy(options) {
 }
 async function createFullDeployClient(ctx) {
 	const authOptions = requireAuthOptions(ctx);
-	const { createClient } = await import("./src-eHwu-Gfw.mjs");
+	const { createClient } = await import("./src-J09NGJ6Z.mjs");
 	return createClient({
 		...authOptions,
 		onRequest: (info) => logger.debug(`-> ${info.method} ${info.url}`, {
@@ -316,7 +316,7 @@ async function createFullDeployClient(ctx) {
 }
 async function createTaskDeployClient(ctx) {
 	const authOptions = requireAuthOptions(ctx);
-	return (deployHandlerDependencies.createDeployClient ?? (await import("./deploy-7Jjls436.mjs")).createDeployClient)(authOptions);
+	return (deployHandlerDependencies.createDeployClient ?? (await import("./deploy-CdnaZY3s.mjs")).createDeployClient)(authOptions);
 }
 function renderSuccessSummary(result) {
 	const tasks = result.tasks || [];

package/dist/{detect-env-access-CwkOYeYM-D_BCZqV6.mjs → detect-env-access-CwkOYeYM-h2W05D_Q.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { t as __exportAll$1 } from "./rolldown-runtime-twds-ZHy-BWWzu8VG.mjs";
+import { t as __exportAll$1 } from "./rolldown-runtime-twds-ZHy-8uqgIurC.mjs";
 import path from "node:path";
 //#region ../../packages/workflow-builder/dist/detect-env-access-CwkOYeYM.mjs
 var detect_env_access_CwkOYeYM_exports = /* @__PURE__ */ __exportAll({

package/dist/{diff.handler-Du7SY8K4.mjs → diff.handler--zdSkUnK.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 import { C as CliExitError, D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-CUK7yBM0.mjs";
-import { i as writeJson } from "./output-DM4b7KgY.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-T7HZuB97.mjs";
-import { n as resolveLocalWorkflowManifest, t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-poHt27i3.mjs";
-import { n as renderDiff, t as computeWorkflowDiff } from "./diff-utils-NEfcjqxt.mjs";
+import { d as trackProject } from "./dist-BF6r1hfv.mjs";
+import { i as writeJson } from "./output-q4KljAhu.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Y1f1hGYy.mjs";
+import { n as resolveLocalWorkflowManifest, t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-M8GEIHxv.mjs";
+import { n as renderDiff, t as computeWorkflowDiff } from "./diff-utils-DWNcRA8g.mjs";
 //#region src/commands/workflows/diff/diff.handler.ts
 async function handleWorkflowsDiff(options, ctx) {
 	const resolved = await resolveLocalWorkflowManifest(options.workflow, options.path, { jsonMode: ctx.jsonMode });

package/dist/{dist-CUK7yBM0.mjs → dist-BF6r1hfv.mjs}

@@ -176,12 +176,12 @@ async function resolveAuthOptions(input) {
 	}
 	const activeOrg = storedCredentials ? findActiveOrg(storedCredentials) : void 0;
 	const apiKey = input.apiKey ?? activeOrg?.apiKey;
-	const baseUrl = input.baseUrl ?? storedCredentials?.serverUrl;
+	const serverUrl = input.serverUrl ?? storedCredentials?.serverUrl;
 	if (!input.apiKey && activeOrg?.apiKey) input.logger?.info(`Using saved API key from ${credentialsPath}`);
-	if (!input.baseUrl && storedCredentials?.serverUrl) input.logger?.info(`Using saved API URL from ${credentialsPath}`);
+	if (!input.serverUrl && storedCredentials?.serverUrl) input.logger?.info(`Using saved API URL from ${credentialsPath}`);
 	return {
 		apiKey,
-		baseUrl,
+		serverUrl,
 		credentialsPath,
 		storedCredentials,
 		activeOrg

package/dist/{dist-BkJUoBiG.mjs → dist-C2Dq_nx3.mjs}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
-import { V as SHA256HashSchema, g as collectCredentialRequirementEntries, p as TriggerUploadDataSchema } from "./schedule-BXx3uXwr.mjs";
-import { c as FlowGraphSchema, s as WorkflowManifestSchema } from "./_manifest-JSRE3H8k.mjs";
-import { t as AgentVersionManifestSchema } from "./agent-manifest-CDnbkR2f.mjs";
-import { t as TaskBuildManifestSchema } from "./schemas-CDib1RhE.mjs";
-import "./task-B2sZMaZu.mjs";
-import { n as FileMetadataSchema } from "./file-metadata-D1vm-XY2.mjs";
-import { t as computeProjectSnapshotHash } from "./task-target-deploy-CA6elFpF-BEr4gkol.mjs";
-import { a as MANIFEST_FILE_NAME, d as getMetadataRoot, f as getTriggersDir, m as getWorkflowManifestPath, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-CbMtQ2tm.mjs";
-import { n as resolveProjectBuildOutputDir } from "./utils-CywxCDM7.mjs";
-import { t as TriggerBuildManifestSchema } from "./trigger-manifest-CY7brZeg.mjs";
-import { t as batchUpload } from "./upload-CkU--iDC.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { r as SHA256HashSchema } from "./common-BrVAdUyD.mjs";
+import { f as collectCredentialRequirementEntries, l as TriggerUploadDataSchema } from "./credential-requirements-DjDFthio.mjs";
+import { a as FlowGraphSchema, i as WorkflowManifestSchema } from "./workflow-manifest-CAW5FlX0.mjs";
+import { t as AgentVersionManifestSchema } from "./agent-manifest-Bfa3DBgc.mjs";
+import { n as TaskBuildManifestSchema } from "./task-DsrXI6XH.mjs";
+import { n as FileMetadataSchema } from "./file-metadata-CdFXMMIw.mjs";
+import { t as computeProjectSnapshotHash } from "./task-target-deploy-Bf5i3ox1-BU16VPsE.mjs";
+import { a as MANIFEST_FILE_NAME, d as getMetadataRoot, f as getTriggersDir, m as getWorkflowManifestPath, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-B95Tku8F.mjs";
+import { n as resolveProjectBuildOutputDir } from "./utils-DlYHjGg9.mjs";
+import { t as TriggerBuildManifestSchema } from "./trigger-manifest-CXD9I7Rb.mjs";
+import { t as batchUpload } from "./upload-B8fiWveA.mjs";
 import { createReadStream } from "node:fs";
 import * as fs from "node:fs/promises";
 import { stat } from "node:fs/promises";

package/dist/{env-91KwMKov.mjs → env-YTZGKGIu.mjs}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 
+import { n as DEFAULT_CLI_WEB_URL, t as DEFAULT_CLI_SERVER_URL } from "./default-urls-BS4twrsS.mjs";
 import { existsSync, writeFileSync } from "node:fs";
 import path from "node:path";
 import { z } from "zod";
@@ -102,8 +103,8 @@ z.enum([
 //#region src/lib/env.ts
 loadRootEnv();
 const cliEnvSchema = z.object({
-	WEB_URL: z.url().optional(),
-	SERVER_URL: z.url().optional(),
+	WEB_URL: z.url().optional().default(DEFAULT_CLI_WEB_URL),
+	SERVER_URL: z.url().optional().default(DEFAULT_CLI_SERVER_URL),
 	KEYSTROKE_API_KEY: z.string().min(1).optional(),
 	KEYSTROKE_ORG_ID: z.string().min(1).optional(),
 	ENVIRONMENT: EnvironmentSchema.optional().default("production")
@@ -121,20 +122,18 @@ function getEnv() {
 	cachedEnv = cliEnvSchema.parse(process.env);
 	return cachedEnv;
 }
-function resolveCliWebUrl(override) {
+function resolveCliWebUrl(override, saved) {
 	if (override) return override;
-	const env = getEnv();
-	if (!env.WEB_URL) throw new Error("WEB_URL is required (set WEB_URL env or pass --web-url)");
-	return env.WEB_URL;
+	if (saved) return saved;
+	return getEnv().WEB_URL;
 }
 function isLocalMode() {
 	return getEnv().ENVIRONMENT === "development";
 }
-function resolveCliServerUrl(override) {
+function resolveCliServerUrl(override, saved) {
 	if (override) return override;
-	const env = getEnv();
-	if (!env.SERVER_URL) throw new Error("SERVER_URL is required (set SERVER_URL env or pass --server-url)");
-	return env.SERVER_URL;
+	if (saved) return saved;
+	return getEnv().SERVER_URL;
 }
 //#endregion
 export { resolveCliWebUrl as a, resolveCliServerUrl as i, getProcessEnv as n, isLocalMode as r, getEnv as t };

package/dist/{env.handler-BAzBuMzQ.mjs → env.handler-d4sJ706C.mjs}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 
 import { C as CliExitError, D as throwReportedCliExit, h as toErrorMessage, m as isNetworkError, o as ANSI, p as isAuthError, s as style, t as ui, u as REAUTH_HINT } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-CUK7yBM0.mjs";
-import { i as writeJson } from "./output-DM4b7KgY.mjs";
-import { n as CredentialScopeSchema, t as ConnectionStatusSchema } from "./schema-17qMfNyI.mjs";
-import { a as readManifestsFromOutDir } from "./dist-BkJUoBiG.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { i as requireClient } from "./context-T7HZuB97.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-Bt-L3GjF.mjs";
-import { t as groupCredentialRequirements } from "./credentials-OfVHOtG3.mjs";
+import { d as trackProject } from "./dist-BF6r1hfv.mjs";
+import { i as writeJson } from "./output-q4KljAhu.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
+import { n as CredentialScopeSchema, t as ConnectionStatusSchema } from "./schema-Di90TXoX.mjs";
+import { a as readManifestsFromOutDir } from "./dist-C2Dq_nx3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { t as groupCredentialRequirements } from "./credentials-DHlK_O4L.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-DFlytKJS.mjs";
 import { z } from "zod";
 import Table from "cli-table3";
 //#region ../../packages/shared-types/src/credentials/api/responses.ts

package/dist/{error-boundary-VL-JLfIa.mjs → error-boundary-B9PgBkv8.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { C as CliExitError, h as toErrorMessage, i as logger, m as isNetworkError, t as ui } from "./keystroke.mjs";
-import { r as isJsonMode } from "./output-DM4b7KgY.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-BKo5PjcQ.mjs";
+import { r as isJsonMode } from "./output-q4KljAhu.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-B-wwbCvw.mjs";
 //#region src/lib/error-boundary.ts
 async function withErrorBoundary(commandName, fn, options = {}) {
 	const jsonMode = options.json ?? isJsonMode({});

package/dist/{file-metadata-D1vm-XY2.mjs → file-metadata-CdFXMMIw.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { S as SourceLocationSchema, b as CapturedVariableSchema } from "./schedule-BXx3uXwr.mjs";
+import { a as SourceLocationSchema, r as CapturedVariableSchema } from "./source-analysis-BspLa3E5.mjs";
 import { z } from "zod";
 z.enum([
 	"pending",