@keystrokehq/cli 0.0.153 → 0.0.155

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as OrganizationSidebarBrandingPatchSchema, A as ErrorResponseSchema, At as UpdateCredentialRequestSchema, B as InviteProjectMembersRequestSchema, Bt as UpsertGatewayAttachmentBodySchema, C as CreateOrganizationResponseSchema, Ct as StartOAuthConnectionResultSchema, D as CredentialInstanceListResponseSchema, Dt as TriggerRunListResponseSchema, E as CreateProjectResponseSchema, Et as TriggerRunDetailResponseSchema, F as HistoryRunDetailResponseSchema, Ft as UpdateProjectMemberResponseSchema, G as ListOrganizationInvitationsResponseSchema, Gt as WorkflowRunDetailResponseSchema, H as ListApiKeysResponseSchema, Ht as UserAvatarSchema, I as HistoryRunListQuerySchema, It as UpdateProjectRequestSchema, J as ListProjectDeploymentsResponseSchema, Jt as WorkflowSummaryListResponseSchema, K as ListOrganizationMembersResponseSchema, Kt as WorkflowRunListResponseSchema, L as HistoryRunListResponseSchema, Lt as UpdateProjectSettingsRequestSchema, M as GetCredentialResponseSchema, Mt as UpdateOrganizationMemberResponseSchema, N as HealthResponseSchema, Nt as UpdateOrganizationRequestSchema, O as CredentialInstanceRecordSchema, Ot as UpdateChannelBindingBodySchema, P as HistoryRunCancelResponseSchema, Pt as UpdateProjectMemberRequestSchema, Q as ListProjectsResponseSchema, Qt as parseErrorResponse, R as InviteOrganizationMembersRequestSchema, Rt as UploadProjectSourceManifestRequestSchema, S as CreateOrganizationRequestSchema, St as StartOAuthConnectionInputSchema, T as CreateProjectRequestSchema, Tt as TriggerListResponseSchema, U as ListAppsResponseSchema, Ut as UserPreferencesPatchSchema, V as InviteProjectMembersResponseSchema, Vt as UserAvatarPatchSchema, W as ListCredentialsResponseSchema, Wt as UserPreferencesSchema, X as ListProjectMembersResponseSchema, Y as ListProjectFilesResponseSchema, Yt as listenPortFromPublicUrl, Z as ListProjectMetricsResponseSchema, Zt as originFromPublicUrl, _ as CreateApiKeyRequestSchema, _t as ROUTE_MANIFEST_REL_PATH, a as AgentSessionListResponseSchema, at as PresignProjectSourceRequestSchema, b as CreateCredentialsRequestSchema, bt as SkillSummaryListResponseSchema, c as BindChannelBodySchema, ct as PresignUserAvatarResponseSchema, d as ChannelConnectionSchema, dt as ProjectSettingsResponseSchema, et as OrganizationSidebarBrandingSchema, f as ChannelDirectoryListResponseSchema, ft as ProjectSlugAvailabilityResponseSchema, g as ConnectProvidersResponseSchema, gt as QueuedRunResponseSchema, h as ConnectAuthorizeUrlResponseSchema, ht as QueuedAgentPromptResponseSchema, i as AgentSessionDetailResponseSchema, it as PresignOrgLogoResponseSchema, j as GatewayAttachmentRecordSchema, jt as UpdateOrganizationMemberRequestSchema, k as DeclineOrganizationInvitationResponseSchema, kt as UpdateCredentialInstanceBodySchema, l as ChannelAccountListResponseSchema, lt as ProjectReachabilityResponseSchema, m as CompleteProjectArtifactResponseSchema, mt as PromptResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nt as PollRunResponseSchema, o as AgentSummaryDetailResponseSchema, ot as PresignProjectSourceResponseSchema, p as ChannelPlatformSchema, pt as PromptInputSchema, q as ListOrganizationsResponseSchema, qt as WorkflowSummaryDetailResponseSchema, r as ActiveOrganizationResponseSchema, rt as PresignOrgLogoRequestSchema, s as AgentSummaryListResponseSchema, st as PresignUserAvatarRequestSchema, t as ACTIVE_ORG_HEADER, tt as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, u as ChannelConnectionListResponseSchema, ut as ProjectResponseSchema, v as CreateApiKeyResponseSchema, vt as RecentResourceListResponseSchema, w as CreateProjectArtifactResponseSchema, wt as TriggerDetailResponseSchema, x as CreateCredentialsResponseSchema, xt as SlugAvailabilityResponseSchema, y as CreateCredentialInstanceBodySchema, yt as SkillSummaryDetailResponseSchema, z as InviteOrganizationMembersResponseSchema, zt as UploadProjectSourceResponseSchema } from "./dist-DqwV88tz.mjs";
+import { $ as OrganizationSidebarBrandingPatchSchema, $t as parseErrorResponse, A as ErrorResponseSchema, At as UpdateCredentialInstanceBodySchema, B as InviteProjectMembersRequestSchema, Bt as UploadProjectSourceResponseSchema, C as CreateOrganizationResponseSchema, Ct as StartOAuthConnectionResultSchema, D as CredentialInstanceListResponseSchema, Dt as TriggerRunDetailResponseSchema, E as CreateProjectResponseSchema, Et as TriggerListResponseSchema, F as HistoryRunDetailResponseSchema, Ft as UpdateProjectMemberRequestSchema, G as ListOrganizationInvitationsResponseSchema, Gt as UserPreferencesSchema, H as ListApiKeysResponseSchema, Ht as UserAvatarPatchSchema, I as HistoryRunListQuerySchema, It as UpdateProjectMemberResponseSchema, J as ListProjectDeploymentsResponseSchema, Jt as WorkflowSummaryDetailResponseSchema, K as ListOrganizationMembersResponseSchema, Kt as WorkflowRunDetailResponseSchema, L as HistoryRunListResponseSchema, Lt as UpdateProjectRequestSchema, M as GetCredentialResponseSchema, Mt as UpdateOrganizationMemberRequestSchema, N as HealthResponseSchema, Nt as UpdateOrganizationMemberResponseSchema, O as CredentialInstanceRecordSchema, Ot as TriggerRunListResponseSchema, P as HistoryRunCancelResponseSchema, Pt as UpdateOrganizationRequestSchema, Q as ListProjectsResponseSchema, Qt as originFromPublicUrl, R as InviteOrganizationMembersRequestSchema, Rt as UpdateProjectSettingsRequestSchema, S as CreateOrganizationRequestSchema, St as StartOAuthConnectionInputSchema, T as CreateProjectRequestSchema, Tt as TriggerDetailResponseSchema, U as ListAppsResponseSchema, Ut as UserAvatarSchema, V as InviteProjectMembersResponseSchema, Vt as UpsertGatewayAttachmentBodySchema, W as ListCredentialsResponseSchema, Wt as UserPreferencesPatchSchema, X as ListProjectMembersResponseSchema, Xt as listenPortFromPublicUrl, Y as ListProjectFilesResponseSchema, Yt as WorkflowSummaryListResponseSchema, Z as ListProjectMetricsResponseSchema, _ as CreateApiKeyRequestSchema, _t as ROUTE_MANIFEST_REL_PATH, a as AgentSessionListResponseSchema, at as PresignProjectSourceRequestSchema, b as CreateCredentialsRequestSchema, bt as SkillSummaryListResponseSchema, c as BindChannelBodySchema, ct as PresignUserAvatarResponseSchema, d as ChannelConnectionSchema, dt as ProjectSettingsResponseSchema, et as OrganizationSidebarBrandingSchema, f as ChannelDirectoryListResponseSchema, ft as ProjectSlugAvailabilityResponseSchema, g as ConnectProvidersResponseSchema, gt as QueuedRunResponseSchema, h as ConnectAuthorizeUrlResponseSchema, ht as QueuedAgentPromptResponseSchema, i as AgentSessionDetailResponseSchema, it as PresignOrgLogoResponseSchema, j as GatewayAttachmentRecordSchema, jt as UpdateCredentialRequestSchema, k as DeclineOrganizationInvitationResponseSchema, kt as UpdateChannelBindingBodySchema, l as ChannelAccountListResponseSchema, lt as ProjectReachabilityResponseSchema, m as CompleteProjectArtifactResponseSchema, mt as PromptResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nt as PollRunResponseSchema, o as AgentSummaryDetailResponseSchema, ot as PresignProjectSourceResponseSchema, p as ChannelPlatformSchema, pt as PromptInputSchema, q as ListOrganizationsResponseSchema, qt as WorkflowRunListResponseSchema, r as ActiveOrganizationResponseSchema, rt as PresignOrgLogoRequestSchema, s as AgentSummaryListResponseSchema, st as PresignUserAvatarRequestSchema, t as ACTIVE_ORG_HEADER, tt as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, u as ChannelConnectionListResponseSchema, ut as ProjectResponseSchema, v as CreateApiKeyResponseSchema, vt as RecentResourceListResponseSchema, w as CreateProjectArtifactResponseSchema, wt as SubmitTeamRequestRequestSchema, x as CreateCredentialsResponseSchema, xt as SlugAvailabilityResponseSchema, y as CreateCredentialInstanceBodySchema, yt as SkillSummaryDetailResponseSchema, z as InviteOrganizationMembersResponseSchema, zt as UploadProjectSourceManifestRequestSchema } from "./dist-BQXd3jdL.mjs";
 import { t as walkProject } from "./walk-project-171B4cvO-DJy3qZKd.mjs";
 import { a as installPlaygroundDependencies, i as installDependencies, n as buildPlaygroundWorkspace, o as resolvePackageManager, s as resolveCliRoot, t as readCliVersion } from "./version-DESgLEkE.mjs";
 import { createRequire } from "node:module";
@@ -3750,6 +3750,16 @@ function createSkillsResource(http) {
 		}
 	};
 }
+function createTeamRequestsResource(http) {
+	return { async submit(input) {
+		const body = SubmitTeamRequestRequestSchema.parse(input);
+		try {
+			await http.post("/api/team-requests", { json: body }).json();
+		} catch (error) {
+			throw await toPlatformError(error);
+		}
+	} };
+}
 function createRecentsResource(http) {
 	return { async list() {
 		try {
@@ -4310,6 +4320,7 @@ function createPlatformClient(options) {
 		userPreferences: createUserPreferencesResource(http),
 		userAvatar: createUserAvatarResource(http),
 		organizationSidebarBranding: createOrganizationSidebarBrandingResource(http, { getActiveOrganizationId: () => activeOrganizationId }),
+		teamRequests: createTeamRequestsResource(http),
 		getActiveOrganizationId: () => activeOrganizationId,
 		setActiveOrganizationId
 	};
@@ -4727,6 +4738,129 @@ function registerAgentCommand(program) {
 	registerAgentSessionsCommand(agent);
 }
 //#endregion
+//#region src/commands/project/run-project.ts
+async function withActivePlatformClient(config, fn) {
+	const platform = createCliPlatformClient(config);
+	let active = await platform.organizations.getActive();
+	if (!active) active = await selectActiveOrganization(config);
+	platform.setActiveOrganizationId(active.organization.id);
+	await fn(platform);
+}
+function writeInactiveDeployHints(projects) {
+	const bin = cliBinaryName();
+	for (const project of projects) {
+		if (project.status !== "inactive") continue;
+		process.stderr.write(`Project ${formatProjectLabel(project)} is inactive. Deploy with: ${bin} deploy --project ${formatProjectLabel(project)}\n`);
+	}
+}
+async function runProjectList(config) {
+	await withActivePlatformClient(config, async (platform) => {
+		const projects = await platform.projects.list();
+		process.stdout.write(`${JSON.stringify({ projects }, null, 2)}\n`);
+		if (projects.length === 0) {
+			const bin = cliBinaryName();
+			process.stderr.write(`No projects yet. Create one with: ${bin} project create --name "My project"\n`);
+			return;
+		}
+		writeInactiveDeployHints(projects);
+	});
+}
+async function runProjectMetrics(config, options) {
+	await withActivePlatformClient(config, async (platform) => {
+		const metrics = await platform.projectMetrics.list();
+		if (options.projectRef === void 0) {
+			process.stdout.write(`${JSON.stringify(metrics, null, 2)}\n`);
+			return;
+		}
+		const project = await resolveProjectRef(platform, options.projectRef);
+		const output = Object.fromEntries(Object.entries(metrics).filter(([projectId]) => projectId === project.id));
+		process.stdout.write(`${JSON.stringify(output, null, 2)}\n`);
+	});
+}
+async function runProjectDeploymentsList(config, options) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveProjectRef(platform, options.projectRef);
+		const deployments = await platform.deployments.listForProject(project.id);
+		process.stdout.write(`${JSON.stringify({ deployments }, null, 2)}\n`);
+	});
+}
+async function runProjectCreate(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await platform.projects.create(input);
+		process.stdout.write(`${JSON.stringify({ project }, null, 2)}\n`);
+		writeInactiveDeployHints([project]);
+	});
+}
+async function runProjectUpdate(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const { projectId, ...patch } = input;
+		const project = await platform.projects.update(projectId, patch);
+		process.stdout.write(`${JSON.stringify({ project }, null, 2)}\n`);
+	});
+}
+async function runProjectDelete(config, projectId) {
+	await withActivePlatformClient(config, async (platform) => {
+		await platform.projects.delete(projectId);
+		process.stdout.write(`${JSON.stringify({ deleted: projectId }, null, 2)}\n`);
+	});
+}
+//#endregion
+//#region src/commands/api-key/run-api-key.ts
+async function runApiKeyList(config) {
+	await withActivePlatformClient(config, async (platform) => {
+		const apiKeys = await platform.apiKeys.list();
+		process.stdout.write(`${JSON.stringify({ apiKeys }, null, 2)}\n`);
+	});
+}
+async function runApiKeyCreate(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const apiKey = await platform.apiKeys.create(input);
+		process.stdout.write(`${JSON.stringify({ apiKey }, null, 2)}\n`);
+	});
+}
+async function runApiKeyRevoke(config, apiKeyId) {
+	await withActivePlatformClient(config, async (platform) => {
+		await platform.apiKeys.revoke(apiKeyId);
+		process.stdout.write(`${JSON.stringify({ revoked: apiKeyId }, null, 2)}\n`);
+	});
+}
+//#endregion
+//#region src/commands/api-key/index.ts
+async function handleApiKeyError(fallback, action) {
+	const config = createCliConfig();
+	try {
+		await action();
+	} catch (error) {
+		process.stderr.write(`${formatCliError(error, fallback, {
+			serverUrl: getPlatformUrl(config),
+			webUrl: getWebUrl(config)
+		})}\n`);
+		process.exitCode = 1;
+	}
+}
+function registerApiKeyCommand(program) {
+	const apiKey = program.command("api-key").description("Manage org-scoped platform API keys");
+	apiKey.command("list").description("List API keys in the active organization").action(async () => {
+		const config = createCliConfig();
+		await handleApiKeyError("List API keys failed", async () => {
+			await runApiKeyList(config);
+		});
+	});
+	apiKey.command("create").description("Create an API key in the active organization").requiredOption("--name <name>", "API key name").action(async (options) => {
+		const config = createCliConfig();
+		await handleApiKeyError("Create API key failed", async () => {
+			await runApiKeyCreate(config, { name: options.name });
+		});
+	});
+	apiKey.command("revoke").description("Revoke an API key").argument("<apiKeyId>", "API key id").option("-y, --yes", "Skip confirmation prompt").action(async (apiKeyId, options) => {
+		const config = createCliConfig();
+		await handleApiKeyError("Revoke API key failed", async () => {
+			if (!options.yes) throw new Error("Pass --yes to confirm API key revocation");
+			await runApiKeyRevoke(config, apiKeyId);
+		});
+	});
+}
+//#endregion
 //#region src/commands/app/run-app-list.ts
 async function runAppList(client) {
 	return client.apps.listCatalog();
@@ -4872,73 +5006,6 @@ function registerConnectCommand(program) {
 	}, void 0, resolveConnectTargetOptions()));
 }
 //#endregion
-//#region src/commands/project/run-project.ts
-async function withActivePlatformClient(config, fn) {
-	const platform = createCliPlatformClient(config);
-	let active = await platform.organizations.getActive();
-	if (!active) active = await selectActiveOrganization(config);
-	platform.setActiveOrganizationId(active.organization.id);
-	await fn(platform);
-}
-function writeInactiveDeployHints(projects) {
-	const bin = cliBinaryName();
-	for (const project of projects) {
-		if (project.status !== "inactive") continue;
-		process.stderr.write(`Project ${formatProjectLabel(project)} is inactive. Deploy with: ${bin} deploy --project ${formatProjectLabel(project)}\n`);
-	}
-}
-async function runProjectList(config) {
-	await withActivePlatformClient(config, async (platform) => {
-		const projects = await platform.projects.list();
-		process.stdout.write(`${JSON.stringify({ projects }, null, 2)}\n`);
-		if (projects.length === 0) {
-			const bin = cliBinaryName();
-			process.stderr.write(`No projects yet. Create one with: ${bin} project create --name "My project"\n`);
-			return;
-		}
-		writeInactiveDeployHints(projects);
-	});
-}
-async function runProjectMetrics(config, options) {
-	await withActivePlatformClient(config, async (platform) => {
-		const metrics = await platform.projectMetrics.list();
-		if (options.projectRef === void 0) {
-			process.stdout.write(`${JSON.stringify(metrics, null, 2)}\n`);
-			return;
-		}
-		const project = await resolveProjectRef(platform, options.projectRef);
-		const output = Object.fromEntries(Object.entries(metrics).filter(([projectId]) => projectId === project.id));
-		process.stdout.write(`${JSON.stringify(output, null, 2)}\n`);
-	});
-}
-async function runProjectDeploymentsList(config, options) {
-	await withActivePlatformClient(config, async (platform) => {
-		const project = await resolveProjectRef(platform, options.projectRef);
-		const deployments = await platform.deployments.listForProject(project.id);
-		process.stdout.write(`${JSON.stringify({ deployments }, null, 2)}\n`);
-	});
-}
-async function runProjectCreate(config, input) {
-	await withActivePlatformClient(config, async (platform) => {
-		const project = await platform.projects.create(input);
-		process.stdout.write(`${JSON.stringify({ project }, null, 2)}\n`);
-		writeInactiveDeployHints([project]);
-	});
-}
-async function runProjectUpdate(config, input) {
-	await withActivePlatformClient(config, async (platform) => {
-		const { projectId, ...patch } = input;
-		const project = await platform.projects.update(projectId, patch);
-		process.stdout.write(`${JSON.stringify({ project }, null, 2)}\n`);
-	});
-}
-async function runProjectDelete(config, projectId) {
-	await withActivePlatformClient(config, async (platform) => {
-		await platform.projects.delete(projectId);
-		process.stdout.write(`${JSON.stringify({ deleted: projectId }, null, 2)}\n`);
-	});
-}
-//#endregion
 //#region src/commands/credentials/target-options.ts
 function resolveCredentialsTargetOptions(options = {}) {
 	if (options.scopeType === "project") return {
@@ -5451,7 +5518,7 @@ function registerBuildCommand(program) {
 	program.command("build").description("Build the keystroke project for production").option("--dir <path>", "Project directory", process.cwd()).action(async (options) => {
 		try {
 			const root = resolveProjectRoot(options.dir);
-			const { buildApp } = await import("./dist-SAPlw0EN.mjs");
+			const { buildApp } = await import("./dist-BQ0CIkZY.mjs");
 			await buildApp({ root });
 			process.stdout.write(`Built ${root}\n`);
 		} catch (error) {
@@ -5548,7 +5615,7 @@ async function runDeploy(options) {
 	const client = createCliPlatformClient(config);
 	let source;
 	if (!options.skipBuild) {
-		const { buildApp } = await import("./dist-SAPlw0EN.mjs");
+		const { buildApp } = await import("./dist-BQ0CIkZY.mjs");
 		source = { files: (await buildApp({
 			root,
 			collectSources: true,
@@ -5648,7 +5715,7 @@ function runtimeChildEnv(parentEnv, overrides) {
 //#region src/project/bootstrap-run.ts
 /** Node args + env for `@keystrokehq/build` bootstrap (shared by start + dev). */
 async function resolveBootstrapRun(options) {
-	const { resolveRuntimeBuildArtifact } = await import("./dist-SAPlw0EN.mjs");
+	const { resolveRuntimeBuildArtifact } = await import("./dist-BQ0CIkZY.mjs");
 	const loader = pathToFileURL(resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/runtime-loader.mjs")).href;
 	const bootstrap = resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/bootstrap.mjs");
 	const args = [`--import=${loader}`];
@@ -5798,7 +5865,7 @@ async function runDev(options) {
 	process.on("SIGINT", shutdown);
 	process.on("SIGTERM", shutdown);
 	try {
-		const { watchApp } = await import("./dist-SAPlw0EN.mjs");
+		const { watchApp } = await import("./dist-BQ0CIkZY.mjs");
 		await watchApp({
 			root,
 			clean: false,
@@ -6218,6 +6285,15 @@ function registerInitCommand(program) {
 	});
 }
 //#endregion
+//#region src/active-project.ts
+function clearActiveProjectIfMatches(config, project) {
+	const activeProjectId = config.get("activeProjectId");
+	if (activeProjectId === project.id || activeProjectId === project.slug) config.delete("activeProjectId");
+}
+function clearActiveProject(config) {
+	if (config.get("activeProjectId") !== void 0) config.delete("activeProjectId");
+}
+//#endregion
 //#region src/commands/organization/run-organization.ts
 async function runOrganizationUpdate(config, input) {
 	await withActivePlatformClient(config, async (platform) => {
@@ -6225,20 +6301,302 @@ async function runOrganizationUpdate(config, input) {
 		process.stdout.write(`${JSON.stringify({ organization }, null, 2)}\n`);
 	});
 }
+async function runOrganizationMembersList(config) {
+	await withActivePlatformClient(config, async (platform) => {
+		const members = await platform.members.listOrganizationMembers();
+		process.stdout.write(`${JSON.stringify({ members }, null, 2)}\n`);
+	});
+}
+async function runOrganizationMembersInvite(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const result = await platform.members.inviteOrganizationMembers(input);
+		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+	});
+}
+async function runOrganizationMembersRole(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const member = await platform.members.updateOrganizationMember(input.userId, { role: input.role });
+		process.stdout.write(`${JSON.stringify({ member }, null, 2)}\n`);
+	});
+}
+async function runOrganizationMembersRemove(config, userId) {
+	await withActivePlatformClient(config, async (platform) => {
+		await platform.members.removeOrganizationMember(userId);
+		process.stdout.write(`${JSON.stringify({ removed: userId }, null, 2)}\n`);
+	});
+}
+async function runOrganizationLeave(config) {
+	const platformUrl = getPlatformUrl(config);
+	const token = getAccessToken(platformUrl);
+	if (!token) throw new Error("Not authenticated. Run `keystroke auth login` first.");
+	const user = await getSessionWithBearer(platformUrl, token);
+	if (!user) throw new Error("Session expired. Run `keystroke auth login` again.");
+	await withActivePlatformClient(config, async (platform) => {
+		await platform.members.removeOrganizationMember(user.id);
+		platform.setActiveOrganizationId(null);
+		config.delete("activeOrganizationId");
+		clearActiveProject(config);
+		process.stdout.write(`${JSON.stringify({ left: user.id }, null, 2)}\n`);
+	});
+}
 //#endregion
 //#region src/commands/organization/index.ts
+function collectEmails$1(value, previous) {
+	return [...previous, value];
+}
+function parseInvitableRole(role) {
+	if (role === "admin" || role === "builder") return role;
+	throw new Error("Role must be admin or builder");
+}
+async function handleOrganizationError(fallback, action) {
+	const config = createCliConfig();
+	try {
+		await action();
+	} catch (error) {
+		process.stderr.write(`${formatCliError(error, fallback, {
+			serverUrl: getPlatformUrl(config),
+			webUrl: getWebUrl(config)
+		})}\n`);
+		process.exitCode = 1;
+	}
+}
 function registerOrganizationCommand(program) {
-	program.command("organization").description("Manage the active organization").command("update").description("Update the active organization's display name").requiredOption("--name <name>", "Organization display name").action(async (options) => {
+	const organization = program.command("organization").alias("org").description("Manage the active organization");
+	organization.command("update").description("Update the active organization's display name").requiredOption("--name <name>", "Organization display name").action(async (options) => {
 		const config = createCliConfig();
-		try {
+		await handleOrganizationError("Update organization failed", async () => {
 			await runOrganizationUpdate(config, { name: options.name });
-		} catch (error) {
-			process.stderr.write(`${formatCliError(error, "Update organization failed", {
-				serverUrl: getPlatformUrl(config),
-				webUrl: getWebUrl(config)
-			})}\n`);
-			process.exitCode = 1;
-		}
+		});
+	});
+	organization.command("leave").description("Leave the active organization").option("-y, --yes", "Skip confirmation prompt").action(async (options) => {
+		const config = createCliConfig();
+		await handleOrganizationError("Leave organization failed", async () => {
+			if (!options.yes) throw new Error("Pass --yes to confirm leaving the active organization");
+			await runOrganizationLeave(config);
+		});
+	});
+	const members = organization.command("members").description("Manage organization members in the active organization");
+	members.command("list").description("List members in the active organization").action(async () => {
+		const config = createCliConfig();
+		await handleOrganizationError("List organization members failed", async () => {
+			await runOrganizationMembersList(config);
+		});
+	});
+	members.command("invite").description("Invite people to the active organization").requiredOption("--email <email>", "Email address (repeat for multiple)", collectEmails$1, []).requiredOption("--role <role>", "Member role (admin or builder)").action(async (options) => {
+		const config = createCliConfig();
+		await handleOrganizationError("Invite organization members failed", async () => {
+			await runOrganizationMembersInvite(config, {
+				emails: options.email,
+				role: parseInvitableRole(options.role)
+			});
+		});
+	});
+	members.command("role").description("Update a member's role in the active organization").argument("<userId>", "Member user id").requiredOption("--role <role>", "Member role (admin or builder)").action(async (userId, options) => {
+		const config = createCliConfig();
+		await handleOrganizationError("Update organization member role failed", async () => {
+			await runOrganizationMembersRole(config, {
+				userId,
+				role: parseInvitableRole(options.role)
+			});
+		});
+	});
+	members.command("remove").description("Remove a member from the active organization").argument("<userId>", "Member user id").action(async (userId) => {
+		const config = createCliConfig();
+		await handleOrganizationError("Remove organization member failed", async () => {
+			await runOrganizationMembersRemove(config, userId);
+		});
+	});
+}
+//#endregion
+//#region src/commands/project/run-project-members.ts
+async function resolveMembersProject(platform, config, projectRef) {
+	const ref = projectRef ?? getCliTargetOptions().projectId ?? config.get("activeProjectId");
+	if (!ref) throw new Error("Usage: keystroke --project <slug> project members <command>");
+	return resolveProjectRef(platform, ref);
+}
+async function runProjectMembersList(config, options) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveMembersProject(platform, config, options.projectRef);
+		const members = await platform.members.listForProject(project.id);
+		process.stdout.write(`${JSON.stringify({ members }, null, 2)}\n`);
+	});
+}
+async function runProjectMembersInvite(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveMembersProject(platform, config, input.projectRef);
+		const result = await platform.members.inviteToProject({
+			projectId: project.id,
+			emails: input.emails,
+			role: input.role
+		});
+		process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+	});
+}
+async function runProjectMembersRole(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveMembersProject(platform, config, input.projectRef);
+		const member = await platform.members.updateProjectMember(project.id, input.userId, { role: input.role });
+		process.stdout.write(`${JSON.stringify({ member }, null, 2)}\n`);
+	});
+}
+async function runProjectMembersRemove(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveMembersProject(platform, config, input.projectRef);
+		await platform.members.removeProjectMember(project.id, input.userId);
+		process.stdout.write(`${JSON.stringify({ removed: input.userId }, null, 2)}\n`);
+	});
+}
+async function runProjectMembersLeave(config, options) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveMembersProject(platform, config, options.projectRef);
+		await platform.members.leaveProject(project.id);
+		clearActiveProjectIfMatches(config, project);
+		process.stdout.write(`${JSON.stringify({ left: project.id }, null, 2)}\n`);
+	});
+}
+//#endregion
+//#region src/commands/project/members.ts
+function collectEmails(value, previous) {
+	return [...previous, value];
+}
+function parseProjectRole$1(role) {
+	if (role === "admin" || role === "builder") return role;
+	throw new Error("Role must be admin or builder");
+}
+function resolveProjectRefOption$1(config, optionsProject) {
+	return optionsProject ?? getCliTargetOptions().projectId ?? config.get("activeProjectId");
+}
+function projectRefInput$1(config, optionsProject) {
+	const projectRef = resolveProjectRefOption$1(config, optionsProject);
+	return projectRef ? { projectRef } : {};
+}
+async function handleProjectMembersError(fallback, action) {
+	const config = createCliConfig();
+	try {
+		await action();
+	} catch (error) {
+		process.stderr.write(`${formatCliError(error, fallback, {
+			serverUrl: getPlatformUrl(config),
+			webUrl: getWebUrl(config)
+		})}\n`);
+		process.exitCode = 1;
+	}
+}
+function registerProjectMembersCommand(project) {
+	const members = project.command("members").description("Manage members for a platform project");
+	members.command("list").description("List members for a project").option("--project <slug>", "Project slug").action(async (options) => {
+		const config = createCliConfig();
+		await handleProjectMembersError("List project members failed", async () => {
+			await runProjectMembersList(config, projectRefInput$1(config, options.project));
+		});
+	});
+	members.command("invite").description("Invite people to a project").option("--project <slug>", "Project slug").requiredOption("--email <email>", "Email address (repeat for multiple)", collectEmails, []).requiredOption("--role <role>", "Project role (admin or builder)").action(async (options) => {
+		const config = createCliConfig();
+		await handleProjectMembersError("Invite project members failed", async () => {
+			await runProjectMembersInvite(config, {
+				...projectRefInput$1(config, options.project),
+				emails: options.email,
+				role: parseProjectRole$1(options.role)
+			});
+		});
+	});
+	members.command("role").description("Update a project member role").argument("<userId>", "Member user id").option("--project <slug>", "Project slug").requiredOption("--role <role>", "Project role (admin or builder)").action(async (userId, options) => {
+		const config = createCliConfig();
+		await handleProjectMembersError("Update project member role failed", async () => {
+			await runProjectMembersRole(config, {
+				...projectRefInput$1(config, options.project),
+				userId,
+				role: parseProjectRole$1(options.role)
+			});
+		});
+	});
+	members.command("remove").description("Remove a member from a project").argument("<userId>", "Member user id").option("--project <slug>", "Project slug").action(async (userId, options) => {
+		const config = createCliConfig();
+		await handleProjectMembersError("Remove project member failed", async () => {
+			await runProjectMembersRemove(config, {
+				...projectRefInput$1(config, options.project),
+				userId
+			});
+		});
+	});
+	members.command("leave").description("Leave a project as the current user").option("--project <slug>", "Project slug").option("-y, --yes", "Skip confirmation prompt").action(async (options) => {
+		const config = createCliConfig();
+		await handleProjectMembersError("Leave project failed", async () => {
+			if (!options.yes) throw new Error("Pass --yes to confirm leaving the project");
+			await runProjectMembersLeave(config, projectRefInput$1(config, options.project));
+		});
+	});
+}
+//#endregion
+//#region src/commands/project/run-project-settings.ts
+async function resolveSettingsProject(platform, config, projectRef) {
+	const ref = projectRef ?? getCliTargetOptions().projectId ?? config.get("activeProjectId");
+	if (!ref) throw new Error("Usage: keystroke --project <slug> project settings <command>");
+	return resolveProjectRef(platform, ref);
+}
+async function runProjectSettingsGet(config, options) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveSettingsProject(platform, config, options.projectRef);
+		const settings = await platform.projectSettings.get(project.id);
+		process.stdout.write(`${JSON.stringify({ settings }, null, 2)}\n`);
+	});
+}
+async function runProjectSettingsUpdate(config, input) {
+	await withActivePlatformClient(config, async (platform) => {
+		const project = await resolveSettingsProject(platform, config, input.projectRef);
+		const { projectRef: _projectRef, ...patch } = input;
+		const settings = await platform.projectSettings.update(project.id, patch);
+		process.stdout.write(`${JSON.stringify({ settings }, null, 2)}\n`);
+	});
+}
+//#endregion
+//#region src/commands/project/settings.ts
+function resolveProjectRefOption(config, optionsProject) {
+	return optionsProject ?? getCliTargetOptions().projectId ?? config.get("activeProjectId");
+}
+function projectRefInput(config, optionsProject) {
+	const projectRef = resolveProjectRefOption(config, optionsProject);
+	return projectRef ? { projectRef } : {};
+}
+function parseProjectRole(role) {
+	if (role === "admin" || role === "builder") return role;
+	throw new Error("Default role must be admin or builder");
+}
+function parseInvitePermission(permission) {
+	if (permission === "admin" || permission === "all") return permission;
+	throw new Error("Invite permission must be admin or all");
+}
+async function handleProjectSettingsError(fallback, action) {
+	const config = createCliConfig();
+	try {
+		await action();
+	} catch (error) {
+		process.stderr.write(`${formatCliError(error, fallback, {
+			serverUrl: getPlatformUrl(config),
+			webUrl: getWebUrl(config)
+		})}\n`);
+		process.exitCode = 1;
+	}
+}
+function registerProjectSettingsCommand(project) {
+	const settings = project.command("settings").description("View and update project governance settings");
+	settings.command("get").description("Get settings for a project").option("--project <slug>", "Project slug").action(async (options) => {
+		const config = createCliConfig();
+		await handleProjectSettingsError("Get project settings failed", async () => {
+			await runProjectSettingsGet(config, projectRefInput(config, options.project));
+		});
+	});
+	settings.command("update").description("Update settings for a project").option("--project <slug>", "Project slug").option("--description <description>", "Project description").option("--default-role <role>", "Default role for new members (admin or builder)").option("--invite-permission <permission>", "Who can invite members (admin or all)").action(async (options) => {
+		const config = createCliConfig();
+		await handleProjectSettingsError("Update project settings failed", async () => {
+			if (options.description === void 0 && options.defaultRole === void 0 && options.invitePermission === void 0) throw new Error("At least one of --description, --default-role, or --invite-permission is required");
+			await runProjectSettingsUpdate(config, {
+				...projectRefInput(config, options.project),
+				...options.description !== void 0 ? { description: options.description } : {},
+				...options.defaultRole !== void 0 ? { defaultRole: parseProjectRole(options.defaultRole) } : {},
+				...options.invitePermission !== void 0 ? { invitePermission: parseInvitePermission(options.invitePermission) } : {}
+			});
+		});
 	});
 }
 //#endregion
@@ -6260,7 +6618,7 @@ function registerProjectCommand(program) {
 	project.command("metrics").description("List rollup metrics for projects in the active organization").option("--project <slug>", "Return metrics for a single project").action(async (options) => {
 		const config = createCliConfig();
 		try {
-			await runProjectMetrics(config, { ...options.project ? { projectRef: options.project } : {} });
+			await runProjectMetrics(config, options.project ? { projectRef: options.project } : {});
 		} catch (error) {
 			process.stderr.write(`${formatCliError(error, "List project metrics failed", {
 				serverUrl: getPlatformUrl(config),
@@ -6332,6 +6690,8 @@ function registerProjectCommand(program) {
 			process.exitCode = 1;
 		}
 	});
+	registerProjectMembersCommand(project);
+	registerProjectSettingsCommand(project);
 }
 //#endregion
 //#region src/commands/start.ts
@@ -6346,7 +6706,7 @@ async function runStart(options) {
 	const apiPort = Number(new URL(serverUrl).port || 80);
 	const runtimeNodeModules = resolveCliRuntimeNodeModules(resolveCliRoot(import.meta.url));
 	ensureNativeDeps(runtimeNodeModules);
-	const { buildApp } = await import("./dist-SAPlw0EN.mjs");
+	const { buildApp } = await import("./dist-BQ0CIkZY.mjs");
 	await buildApp({
 		root,
 		clean: false
@@ -6834,6 +7194,7 @@ function createProgram() {
 	registerConnectCommand(program);
 	registerConfigCommand(program);
 	registerOrganizationCommand(program);
+	registerApiKeyCommand(program);
 	registerProjectCommand(program);
 	registerHistoryCommand(program);
 	registerCredentialsCommand(program);