@keystrokehq/cli 0.0.16 → 0.0.18

package/dist/{switch.handler-CTwhIcaQ.mjs → switch.handler-Cu81T2HY.mjs}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, n as ui } from "./keystroke.mjs";
-import { u as setActiveOrg } from "./dist-BF6r1hfv.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
+import { a as ui, j as throwReportedCliExit } from "./keystroke.mjs";
+import { n as credentials } from "./dist-CIInPRGh.mjs";
+import { i as requireClient } from "./context-Bid-Rqj7.mjs";
 import { select } from "@clack/prompts";
 //#region src/commands/org/switch.handler.ts
 async function handleOrgSwitch(_options, ctx) {
 	const { user } = await requireClient(ctx).users.getMe();
 	const orgs = user.organizations ?? [];
-	const storedOrgIds = new Set(ctx.storedCredentials?.orgs.map((o) => o.organizationId) ?? []);
+	const storedOrgIds = new Set(ctx.storedOrgs.map((o) => o.organizationId));
 	if (orgs.length === 0) {
 		ui.warn("You do not belong to any organization.");
 		return;
@@ -44,7 +44,7 @@ async function handleOrgSwitch(_options, ctx) {
 		ui.warn(`No stored API key for ${selectedOrg.name}. Run \`keystroke auth\` and select this org to add credentials.`);
 		return;
 	}
-	await setActiveOrg(selected);
+	await credentials.setActiveOrg(selected);
 	ui.success(`Switched to ${selectedOrg.name}`);
 }
 //#endregion

package/dist/{sync-Pssitj6K.mjs → sync-CXNveL61.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
+import { t as createTypedCommand } from "./commander-BE37hxR3.mjs";
 import { z } from "zod";
 //#region src/commands/sync/sync.command.ts
 /**
@@ -32,7 +32,7 @@ function createSyncCommand() {
 		description: "Sync local workflows with Keystroke",
 		schema: SyncOptionsSchema,
 		optionsConfig: SYNC_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./sync.handler-Be0U3x-n.mjs")).handleSync
+		loadHandler: async () => (await import("./sync.handler-7g1yDt0H.mjs")).handleSync
 	});
 }
 //#endregion

package/dist/{sync.handler-Be0U3x-n.mjs → sync.handler-7g1yDt0H.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, n as ui, o as isLocalMode, u as logger, x as toErrorMessage } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-BF6r1hfv.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-B1L8pZsH.mjs";
-import { n as deployFromDir } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-C9rQQ4qU.mjs";
-import { t as createBuildProgress } from "./build-progress-BZivcVz4.mjs";
-import { t as createDeployProgress } from "./deploy-progress-DJHph1Fz.mjs";
+import { P as logger, a as ui, j as throwReportedCliExit, l as isLocalMode, y as toErrorMessage } from "./keystroke.mjs";
+import { i as projects } from "./dist-CIInPRGh.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-Bid-Rqj7.mjs";
+import { n as deployFromDir } from "./dist-WFPTDQB3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-_WNsLKwW.mjs";
+import { t as createBuildProgress } from "./build-progress-AR8xow4_.mjs";
+import { t as createDeployProgress } from "./deploy-progress-DK87VKJ-.mjs";
 //#region src/commands/sync/sync.handler.ts
 async function handleSync(options, ctx) {
 	try {
@@ -25,7 +25,7 @@ async function handleSync(options, ctx) {
 }
 async function runSingleSync(options, ctx) {
 	const workflowsDir = await requireWorkflowsDir();
-	trackProject(workflowsDir);
+	projects.track(workflowsDir);
 	const client = requireClient(ctx);
 	await validateApiKey(client);
 	logger.info("Starting sync", {

package/dist/{task-BNXDZU71.mjs → task-BguWXIiH.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-DodkHgnS.mjs";
-import { t as parseCronExpression } from "./cron-parser-C2eJD0yD.mjs";
+import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-B8c7Z5Iy.mjs";
+import { t as parseCronExpression } from "./cron-parser-Dw_cWzFu.mjs";
 import { z } from "zod";
 const SHA256HashSchema = z.string().length(64, "Must be 64 characters").regex(/^[a-f0-9]{64}$/i, "Must be hexadecimal").transform((value) => value);
 const JsonSchemaSchema = z.record(z.string(), z.unknown());

package/dist/{task-target-build-BG6cC3bz.mjs → task-target-build-BaMtXnN7.mjs}

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
 
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DMmY6oDW.mjs";
-import { mkdir, writeFile } from "node:fs/promises";
+import { r as getKeystrokeProjectPath } from "./paths-JzzFkXQA-CEipIeVl.mjs";
+import "./dist-CIInPRGh.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-B0eiobOd.mjs";
 import path from "node:path";
+import { mkdir, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
 import { createHash, randomUUID } from "node:crypto";
 //#region ../../packages/workflow-builder/dist/builder-options-BT2McCyF.mjs
@@ -109,7 +111,7 @@ async function buildTaskTargetFile(options) {
 	return builtTasks;
 }
 async function bundleTaskTargetModule(options) {
-	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-CZIixHeR.mjs").then((n) => n.n).then((n) => n.n)]);
+	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-CNTyUzme.mjs").then((n) => n.n).then((n) => n.n)]);
 	const entryId = "\0virtual:task-target-entry";
 	const trackedDependencies = /* @__PURE__ */ new Set();
 	const envViolations = [];
@@ -216,7 +218,7 @@ async function attachTaskTargetTriggers(options) {
 		options.artifact.triggers.push(...buildTaskTriggerArtifactsWithoutBundles(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName));
 		return [];
 	}
-	const { buildTriggerArtifacts } = await import("./trigger-artifacts-RizI57RC-CxHwCkQ_.mjs").then((n) => n.n);
+	const { buildTriggerArtifacts } = await import("./trigger-artifacts-RizI57RC-DjhOsdOm.mjs").then((n) => n.n);
 	const triggerResult = await buildTriggerArtifacts(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName, options.projectRoot, {
 		workflowExportName: options.entry.source.localExportName,
 		workflowFilePath: options.entry.runtimeBundlePath
@@ -319,7 +321,7 @@ function createPreparedTaskTarget(artifact, triggers) {
 	};
 }
 async function tryParseTaskBuildManifest(manifest) {
-	const { TaskBuildManifestSchema } = await import("./task-BNXDZU71.mjs").then((n) => n.t);
+	const { TaskBuildManifestSchema } = await import("./task-BguWXIiH.mjs").then((n) => n.t);
 	const result = TaskBuildManifestSchema.safeParse(manifest);
 	return result.success ? result.data : null;
 }
@@ -330,8 +332,7 @@ function readOptionalJsonSchemaKeysFromSchemaObject(schema) {
 	return properties.filter((key) => !required.has(key));
 }
 function getTaskRuntimeBundlePath(projectRoot, target) {
-	const hash = createHash("sha256").update(target.bindingKey).digest("hex").slice(0, 16);
-	return path.join(projectRoot, ".keystroke", "task-target-build", `${hash}.mjs`);
+	return getKeystrokeProjectPath(projectRoot, "task-target-build", `${createHash("sha256").update(target.bindingKey).digest("hex").slice(0, 16)}.mjs`);
 }
 async function writeRuntimeBundle(bundlePath, code) {
 	await mkdir(path.dirname(bundlePath), { recursive: true });

package/dist/{task-target-deploy-CZBGNC0H-Ck724yF4.mjs → task-target-deploy-CZBGNC0H-I-tvkGCC.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { n as SHA256HashSchema } from "./common-BaGFkj3n.mjs";
+import { n as SHA256HashSchema } from "./common-AK0q0Oz0.mjs";
 import { createHash } from "node:crypto";
 //#region ../../packages/shared-types/src/deployments/api/snapshot-payload.ts
 function sortObjectKeysDeep(value) {

package/dist/{task-target-deploy-gMQC8kXU.mjs → task-target-deploy-DmpCWE3u.mjs}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 
-import { n as deployTaskTargets } from "./task-target-deploy-CZBGNC0H-Ck724yF4.mjs";
+import { n as deployTaskTargets } from "./task-target-deploy-CZBGNC0H-I-tvkGCC.mjs";
 export { deployTaskTargets };

package/dist/task-target-deploy-runner.mjs

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
 
-import "./default-urls-BS4twrsS.mjs";
-import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
-import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { r as getKeystrokeProjectPath } from "./paths-JzzFkXQA-CEipIeVl.mjs";
+import "./default-urls-CTQqM1_A.mjs";
+import "./dist-CIInPRGh.mjs";
+import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { t as resolveCliCredentials } from "./resolve-cli-credentials-DytxgMwn.mjs";
 import path from "node:path";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
 //#region src/lib/process-handoff.ts
 function replaceProcessOrSpawn(options) {
@@ -22,8 +24,9 @@ function replaceProcessOrSpawn(options) {
 }
 //#endregion
 //#region src/task-target-deploy-runner.ts
-const TASK_TARGET_DESCRIPTOR_PATH = path.join(".keystroke", "task-target-deploy", "descriptor.json");
-const TASK_TARGET_BUILD_DESCRIPTOR_PATH = path.join(".keystroke", "task-target-deploy", "build-descriptor.json");
+const TASK_TARGET_DEPLOY_DIR = "task-target-deploy";
+const TASK_TARGET_DESCRIPTOR_FILE = "descriptor.json";
+const TASK_TARGET_BUILD_DESCRIPTOR_FILE = "build-descriptor.json";
 function parseArgs(argv) {
 	const options = {
 		targetFiles: [],
@@ -68,10 +71,10 @@ async function resolveProjectRoot(explicitPath) {
 	return discovered;
 }
 function descriptorPath(projectRoot) {
-	return path.join(projectRoot, TASK_TARGET_DESCRIPTOR_PATH);
+	return getKeystrokeProjectPath(projectRoot, TASK_TARGET_DEPLOY_DIR, TASK_TARGET_DESCRIPTOR_FILE);
 }
 function buildDescriptorPath(projectRoot) {
-	return path.join(projectRoot, TASK_TARGET_BUILD_DESCRIPTOR_PATH);
+	return getKeystrokeProjectPath(projectRoot, TASK_TARGET_DEPLOY_DIR, TASK_TARGET_BUILD_DESCRIPTOR_FILE);
 }
 async function writeDescriptor(projectRoot, descriptor) {
 	const filePath = descriptorPath(projectRoot);
@@ -116,7 +119,7 @@ function restartStage(options, projectRoot, stage) {
 }
 async function runBuildPhase(options, projectRoot) {
 	const projectConfig = await assertWorkflowProjectRoot(projectRoot);
-	const { buildTaskTargetEntries } = await import("./task-target-build-BG6cC3bz.mjs");
+	const { buildTaskTargetEntries } = await import("./task-target-build-BaMtXnN7.mjs");
 	await writeBuildDescriptor(projectRoot, {
 		projectRoot,
 		projectConfig,
@@ -129,7 +132,7 @@ async function runBuildPhase(options, projectRoot) {
 }
 async function runPreparePhase(projectRoot) {
 	const buildDescriptor = await readBuildDescriptor(projectRoot);
-	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-BG6cC3bz.mjs");
+	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-BaMtXnN7.mjs");
 	const prepareResult = await prepareTaskTargetBuiltTasks({
 		builtTasks: buildDescriptor.builtTasks,
 		projectRoot
@@ -142,12 +145,14 @@ async function runPreparePhase(projectRoot) {
 	});
 }
 async function resolveDeployAuthOptions(options) {
-	const resolved = await resolveAuthOptions({
-		apiKey: options.apiKey,
-		serverUrl: options.serverUrl
+	const envApiKey = process.env.KEYSTROKE_API_KEY;
+	const envServerUrl = process.env.SERVER_URL;
+	const resolved = await resolveCliCredentials({
+		apiKey: options.apiKey ?? envApiKey,
+		serverUrl: options.serverUrl ?? envServerUrl
 	});
-	const apiKey = resolved.apiKey ?? process.env.KEYSTROKE_API_KEY;
-	const serverUrl = resolved.serverUrl ?? process.env.SERVER_URL ?? "https://api.kestroke.ai";
+	const apiKey = resolved.apiKey;
+	const serverUrl = resolved.serverUrl ?? "https://api.kestroke.ai";
 	const organizationId = options.org ?? process.env.KEYSTROKE_ORG_ID ?? resolved.activeOrg?.organizationId;
 	if (!apiKey || !serverUrl) throw new Error("Not authenticated. Run `keystroke auth` or pass --api-key and --server-url.");
 	return {
@@ -158,11 +163,11 @@ async function resolveDeployAuthOptions(options) {
 }
 async function runDeployPhase(options, projectRoot) {
 	const descriptor = await readDescriptor(projectRoot);
-	const { createDeployClient } = await import("./deploy-CJbVB7e2.mjs");
+	const { createDeployClient } = await import("./deploy-DyZh--f7.mjs");
 	const client = createDeployClient(await resolveDeployAuthOptions(options));
 	const auth = await client.public.auth.validate();
 	if (auth.organizationId !== descriptor.projectConfig.organizationId) throw new Error(`Project organization mismatch: config=${descriptor.projectConfig.organizationId} auth=${auth.organizationId}`);
-	const { deployTaskTargets } = await import("./task-target-deploy-gMQC8kXU.mjs");
+	const { deployTaskTargets } = await import("./task-target-deploy-DmpCWE3u.mjs");
 	const result = await deployTaskTargets({
 		preparedTasks: descriptor.preparedTasks,
 		client,

package/dist/{test-BISghlKg.mjs → test-A5hz3c7j.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-CGdYhH0p.mjs";
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
+import { t as createTypedCommand } from "./commander-BE37hxR3.mjs";
 import { z } from "zod";
 //#region src/commands/test/test.command.ts
 const TestOptionsSchema = JsonOptionSchema;
@@ -63,7 +63,7 @@ function createTestCommand() {
 				description: "Agent tool name from the built manifest",
 				key: "toolName"
 			},
-			loadHandler: async () => (await import("./tool.handler-Bu130Vcz.mjs")).handleTestTool
+			loadHandler: async () => (await import("./tool.handler-B-mOL128.mjs")).handleTestTool
 		})]
 	});
 	cmd.enablePositionalOptions();

package/dist/{test.handler-DkizZhVu.mjs → test.handler-CJtaMZVy.mjs}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 
-import { k as CliExitError, n as ui, o as isLocalMode, x as toErrorMessage } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-B1L8pZsH.mjs";
-import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-C9rQQ4qU.mjs";
-import { r as isUnknownSchema } from "./schema-display-CNqiYBIb.mjs";
-import { t as createBuildProgress } from "./build-progress-BZivcVz4.mjs";
-import { t as withErrorBoundary } from "./error-boundary-CyLcinp1.mjs";
-import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BWcLQvm0.mjs";
+import { D as CliExitError, a as ui, l as isLocalMode, y as toErrorMessage } from "./keystroke.mjs";
+import { i as projects } from "./dist-CIInPRGh.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Bid-Rqj7.mjs";
+import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-WFPTDQB3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-_WNsLKwW.mjs";
+import { r as isUnknownSchema } from "./schema-display-NVEl_DFY.mjs";
+import { t as createBuildProgress } from "./build-progress-AR8xow4_.mjs";
+import { t as withErrorBoundary } from "./error-boundary-B8cmSwJH.mjs";
+import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-CC6y2XXI.mjs";
 //#region src/lib/format.ts
 function formatBytes(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
@@ -26,7 +26,7 @@ function formatBytes(bytes) {
 async function resolveAndValidateInputForRun(options) {
 	const input = await resolveInput(options);
 	const workflowsDir = await requireWorkflowsDir(options.path);
-	trackProject(workflowsDir);
+	projects.track(workflowsDir);
 	const existingSchema = await tryReadExistingInputSchema(workflowsDir, options.workflow);
 	if (existingSchema && !isUnknownSchema(existingSchema)) validateInputOrExit(options.workflow, input, existingSchema);
 	return {

package/dist/{test.handler-Dk3CmTa7.mjs → test.handler-Cq2l7SAr.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-B1L8pZsH.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-Bid-Rqj7.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));

package/dist/{tool.handler-Bu130Vcz.mjs → tool.handler-B-mOL128.mjs}

@@ -1,19 +1,102 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, a as getProcessEnv, k as CliExitError, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-B1L8pZsH.mjs";
-import { a as readManifestsFromOutDir } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-C9rQQ4qU.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BRUEdPrN.mjs";
-import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-BWcLQvm0.mjs";
-import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { D as CliExitError, a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { t as Credentials } from "./dist-CIInPRGh.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Bid-Rqj7.mjs";
+import { a as readManifestsFromOutDir } from "./dist-WFPTDQB3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-_WNsLKwW.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-DiwUcKoB.mjs";
+import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-CC6y2XXI.mjs";
+import * as os from "node:os";
 import { tmpdir } from "node:os";
+import * as path$1 from "node:path";
 import path from "node:path";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
+//#region ../../packages/testing/src/shared/create-mock-hook.ts
+/** Creates a Hook that resolves immediately when awaited. */
+function createMockHook() {
+	const resolved = Promise.resolve(void 0);
+	return {
+		then: (onfulfilled, onrejected) => resolved.then(onfulfilled, onrejected),
+		token: Promise.resolve("mock-token"),
+		resumeUrl: Promise.resolve("http://mock/resume"),
+		cancelUrl: Promise.resolve("http://mock/cancel"),
+		approvalPageUrl: Promise.resolve("http://mock/approve")
+	};
+}
+//#endregion
+//#region ../../packages/testing/src/test-runtime/helpers/create-test-workflow-context.ts
+function createTestWorkflowContext(options = {}) {
+	return {
+		createHook: options.createHook ?? ((_name) => createMockHook()),
+		stepContext: options.stepContext,
+		wait: options.wait ?? (async () => {}),
+		hasCredentialSet: options.hasCredentialSet ?? (() => false),
+		workflowGlobals: options.workflowGlobals,
+		workflowId: options.workflowId ?? "test-workflow-run"
+	};
+}
+//#endregion
+//#region ../../packages/core/dist/chunks/execution-scope-BCDb3CU7.mjs
+const SCOPE_STACK_KEY = "__ks_execution_scope_stack__";
+function getScopeStack() {
+	const g = globalThis;
+	if (!g[SCOPE_STACK_KEY]) g[SCOPE_STACK_KEY] = [];
+	return g[SCOPE_STACK_KEY];
+}
+function getCurrentScope() {
+	const stack = getScopeStack();
+	return stack[stack.length - 1] ?? getDefaultScope();
+}
+const DEFAULT_SCOPE_KEY = "__ks_execution_scope_default__";
+function getDefaultScope() {
+	const g = globalThis;
+	if (!g[DEFAULT_SCOPE_KEY]) g[DEFAULT_SCOPE_KEY] = { stepContextProviders: [] };
+	return g[DEFAULT_SCOPE_KEY];
+}
+function setExecutionScopeWorkflowRuntime(provider) {
+	const scope = getCurrentScope();
+	scope.workflowRuntimeProvider = provider;
+}
+function pushExecutionScopeStepContext(provider) {
+	const scope = getCurrentScope();
+	scope.stepContextProviders = [...scope.stepContextProviders, provider];
+}
+function clearExecutionScopeStepContexts() {
+	const scope = getCurrentScope();
+	scope.stepContextProviders = [];
+}
+function setExecutionScopeStepCredentialResolver(resolver) {
+	const scope = getCurrentScope();
+	scope.stepCredentialResolver = resolver;
+}
+//#endregion
+//#region ../../packages/core/dist/chunks/credential-resolver-registry-BRH30wCz.mjs
+function registerOperationContext(registry) {
+	pushExecutionScopeStepContext(registry.getOperationContext);
+}
+function clearOperationContext() {
+	clearExecutionScopeStepContexts();
+}
+function registerOperationCredentialResolver(resolver) {
+	setExecutionScopeStepCredentialResolver(resolver.resolveOperationCredentials);
+}
+function clearOperationCredentialResolver() {
+	setExecutionScopeStepCredentialResolver(void 0);
+}
+//#endregion
+//#region ../../packages/core/dist/chunks/context-registry-DqNWcTgK.mjs
+function registerRuntime(registry) {
+	setExecutionScopeWorkflowRuntime(registry.getRuntime);
+}
+function clearRuntime() {
+	setExecutionScopeWorkflowRuntime(void 0);
+}
+//#endregion
 //#region ../../packages/testing/src/test-runtime/credentials/env-resolver.ts
 /**
 * Computes the env var name for a credential key.
@@ -61,12 +144,30 @@ function createCredentialCache() {
 }
 //#endregion
 //#region ../../packages/testing/src/test-runtime/credentials/server-resolver.ts
+/**
+* Default `CredentialAuthResolver` that derives a `homeDir` from the supplied
+* `credentialsPath` (when present) and reads from the local-memory
+* `Credentials` controller. Falls back to the singleton on the user's home.
+*/
+const defaultResolveAuth = async (input) => {
+	const credentials = new Credentials({ homeDir: input.credentialsPath ? path$1.dirname(path$1.dirname(input.credentialsPath)) : os.homedir() });
+	let active = null;
+	let urls = null;
+	try {
+		active = await credentials.getActiveOrg();
+		urls = await credentials.getServerUrls();
+	} catch {}
+	return {
+		apiKey: input.apiKey ?? active?.apiKey,
+		serverUrl: input.serverUrl ?? urls?.serverUrl
+	};
+};
 async function createServerCredentialResolver(options, dependencies = {
 	fetch: globalThis.fetch,
-	resolveAuthOptions
+	resolveAuth: defaultResolveAuth
 }) {
 	try {
-		const resolvedAuth = await dependencies.resolveAuthOptions({
+		const resolvedAuth = await dependencies.resolveAuth({
 			apiKey: options.apiKey,
 			serverUrl: options.baseUrl,
 			credentialsPath: options.credentialsPath
@@ -169,87 +270,6 @@ async function createTestCredentialResolver(options, _runtimeOptions = {}) {
 //#region ../../packages/testing/src/test-runtime/credentials/options.ts
 const DEFAULT_TEST_CREDENTIAL_MODE = "auto";
 //#endregion
-//#region ../../packages/testing/src/shared/create-mock-hook.ts
-/** Creates a Hook that resolves immediately when awaited. */
-function createMockHook() {
-	const resolved = Promise.resolve(void 0);
-	return {
-		then: (onfulfilled, onrejected) => resolved.then(onfulfilled, onrejected),
-		token: Promise.resolve("mock-token"),
-		resumeUrl: Promise.resolve("http://mock/resume"),
-		cancelUrl: Promise.resolve("http://mock/cancel"),
-		approvalPageUrl: Promise.resolve("http://mock/approve")
-	};
-}
-//#endregion
-//#region ../../packages/testing/src/test-runtime/helpers/create-test-workflow-context.ts
-function createTestWorkflowContext(options = {}) {
-	return {
-		createHook: options.createHook ?? ((_name) => createMockHook()),
-		stepContext: options.stepContext,
-		wait: options.wait ?? (async () => {}),
-		hasCredentialSet: options.hasCredentialSet ?? (() => false),
-		workflowGlobals: options.workflowGlobals,
-		workflowId: options.workflowId ?? "test-workflow-run"
-	};
-}
-//#endregion
-//#region ../../packages/core/dist/chunks/execution-scope-BCDb3CU7.mjs
-const SCOPE_STACK_KEY = "__ks_execution_scope_stack__";
-function getScopeStack() {
-	const g = globalThis;
-	if (!g[SCOPE_STACK_KEY]) g[SCOPE_STACK_KEY] = [];
-	return g[SCOPE_STACK_KEY];
-}
-function getCurrentScope() {
-	const stack = getScopeStack();
-	return stack[stack.length - 1] ?? getDefaultScope();
-}
-const DEFAULT_SCOPE_KEY = "__ks_execution_scope_default__";
-function getDefaultScope() {
-	const g = globalThis;
-	if (!g[DEFAULT_SCOPE_KEY]) g[DEFAULT_SCOPE_KEY] = { stepContextProviders: [] };
-	return g[DEFAULT_SCOPE_KEY];
-}
-function setExecutionScopeWorkflowRuntime(provider) {
-	const scope = getCurrentScope();
-	scope.workflowRuntimeProvider = provider;
-}
-function pushExecutionScopeStepContext(provider) {
-	const scope = getCurrentScope();
-	scope.stepContextProviders = [...scope.stepContextProviders, provider];
-}
-function clearExecutionScopeStepContexts() {
-	const scope = getCurrentScope();
-	scope.stepContextProviders = [];
-}
-function setExecutionScopeStepCredentialResolver(resolver) {
-	const scope = getCurrentScope();
-	scope.stepCredentialResolver = resolver;
-}
-//#endregion
-//#region ../../packages/core/dist/chunks/credential-resolver-registry-BRH30wCz.mjs
-function registerOperationContext(registry) {
-	pushExecutionScopeStepContext(registry.getOperationContext);
-}
-function clearOperationContext() {
-	clearExecutionScopeStepContexts();
-}
-function registerOperationCredentialResolver(resolver) {
-	setExecutionScopeStepCredentialResolver(resolver.resolveOperationCredentials);
-}
-function clearOperationCredentialResolver() {
-	setExecutionScopeStepCredentialResolver(void 0);
-}
-//#endregion
-//#region ../../packages/core/dist/chunks/context-registry-DqNWcTgK.mjs
-function registerRuntime(registry) {
-	setExecutionScopeWorkflowRuntime(registry.getRuntime);
-}
-function clearRuntime() {
-	setExecutionScopeWorkflowRuntime(void 0);
-}
-//#endregion
 //#region ../../packages/testing/src/test-runtime/runtime/create-keystroke-test-runtime.ts
 async function createKeystrokeTestRuntime(options = {}) {
 	clearOperationCredentialResolver();
@@ -394,7 +414,7 @@ async function executeOperationTool(params) {
 			mode: "auto",
 			apiKey: ctx.apiKey,
 			baseUrl: ctx.baseUrl,
-			credentialsPath: ctx.credentialsPath
+			credentialsPath: ctx.metadataFilePath
 		},
 		source: "cli",
 		sourceLabel: "CLI"

package/dist/{trigger-artifacts-RizI57RC-CxHwCkQ_.mjs → trigger-artifacts-RizI57RC-DjhOsdOm.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-B6h4WRv4.mjs";
-import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-CO5ir_za.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DMmY6oDW.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CZIixHeR.mjs";
+import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-D6KT-r-e.mjs";
+import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-8uqgIurC.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-B0eiobOd.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-CNTyUzme.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/trigger-artifacts-RizI57RC.mjs

package/dist/{trigger-manifest-PTjVYL1r.mjs → trigger-manifest-Bq2zRbkV.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { a as TriggerCredentialRequirementsSchema, l as WebhookMethodSchema, o as TriggerSourceSchema, s as TriggerTypeSchema } from "./credential-requirements-FtBk5JVB.mjs";
+import { a as TriggerCredentialRequirementsSchema, l as WebhookMethodSchema, o as TriggerSourceSchema, s as TriggerTypeSchema } from "./credential-requirements-DrrQ9x9P.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({

package/dist/{upgrade-cH9I_pZq.mjs → upgrade-DhfpoyRV.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
+import { t as createTypedCommand } from "./commander-BE37hxR3.mjs";
 import { z } from "zod";
 //#region src/commands/upgrade/upgrade.command.ts
 const PackageManagerSchema = z.enum([
@@ -34,7 +34,7 @@ function createUpgradeCommand() {
 		description: "Upgrade the Keystroke CLI to the latest published version",
 		schema: UpgradeOptionsSchema,
 		optionsConfig: UPGRADE_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upgrade.handler-CXEF4ue0.mjs")).handleUpgrade
+		loadHandler: async () => (await import("./upgrade.handler-5qSzPC7D.mjs")).handleUpgrade
 	});
 }
 //#endregion

package/dist/{upgrade.handler-CXEF4ue0.mjs → upgrade.handler-5qSzPC7D.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, n as ui, x as toErrorMessage } from "./keystroke.mjs";
+import { a as ui, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
 import { spawn } from "node:child_process";
 //#region src/commands/upgrade/upgrade.handler.ts
 const CLI_PACKAGE_NAME = "@keystrokehq/cli";