@keystrokehq/cli 0.0.17 → 0.0.19

package/dist/{commander-D15UZVjp.mjs → commander-C5qcOo8m.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { A as InputValidationError, h as AUTH_HINT, k as CliExitError, l as captureCliTelemetryResolvedContext, n as ui, r as createHiddenGlobalOptions, u as logger, x as toErrorMessage, y as isAuthError } from "./keystroke.mjs";
-import { a as writeJsonError, r as isJsonMode } from "./output-CGdYhH0p.mjs";
+import { D as CliExitError, L as setDebug, O as InputValidationError, _ as isAuthError, a as ui, f as captureCliTelemetryResolvedContext, o as createHiddenGlobalOptions, p as AUTH_HINT, y as toErrorMessage } from "./keystroke.mjs";
+import { a as writeJsonError, r as isJsonMode } from "./output-BWcVRt-T.mjs";
 import { Command } from "commander";
 //#region src/lib/commander.ts
 /**
@@ -76,9 +76,9 @@ function createTypedCommand(params) {
 			if ("json" in parsed) jsonMode = isJsonMode(parsed);
 			else if (process.argv.includes("--json")) jsonMode = true;
 			const globalOpts = cmd.optsWithGlobals();
-			if (globalOpts.debug) logger.setDebug(true);
+			if (globalOpts.debug) setDebug(true);
 			const contextMode = params.contextMode ?? "full";
-			const contextModule = await import("./context-B1L8pZsH.mjs").then((n) => n.n);
+			const contextModule = await import("./context-BydAGTiB.mjs").then((n) => n.n);
 			const base = contextMode === "auth" ? await contextModule.resolveAuthContext({
 				apiKey: globalOpts.apiKey,
 				serverUrl: globalOpts.serverUrl,

package/dist/{connect-DzSNDSmI.mjs → connect-BtBKoXpi.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-CGdYhH0p.mjs";
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
+import { t as createTypedCommand } from "./commander-C5qcOo8m.mjs";
 import { z } from "zod";
 //#region src/commands/connect/connect.command.ts
 const ConnectOptionsSchema = JsonOptionSchema.extend({
@@ -37,7 +37,7 @@ function createConnectCommand() {
 		description: "Connect an official integration via OAuth (e.g., keystroke connect slack)",
 		schema: ConnectOptionsSchema,
 		optionsConfig: CONNECT_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./connect.handler-DRO05ak3.mjs")).handleConnect,
+		loadHandler: async () => (await import("./connect.handler-E8CmLRSF.mjs")).handleConnect,
 		argument: {
 			name: "integrationId",
 			description: "Integration to connect (e.g., slack, linear)",

package/dist/{connect.handler-DRO05ak3.mjs → connect.handler-E8CmLRSF.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, b as isNetworkError, h as AUTH_HINT, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { t as openBrowser } from "./browser-3cUiPlk2.mjs";
-import { i as InitiateConnectionResponseSchema, n as ConnectionStatusResponseSchema, r as InitiateConnectionRequestSchema } from "./api-jkf0TTgD.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-BgT4mLzW.mjs";
+import { a as ui, j as throwReportedCliExit, p as AUTH_HINT, v as isNetworkError, y as toErrorMessage } from "./keystroke.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { t as openBrowser } from "./browser-BpJ8ut9z.mjs";
+import { i as InitiateConnectionResponseSchema, n as ConnectionStatusResponseSchema, r as InitiateConnectionRequestSchema } from "./api-nR61stdq.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-CmvYPvI6.mjs";
 //#region src/commands/connect/connect.handler.ts
 function formatIntegrationLabel(catalog, integrationId) {
 	return catalog.lookupByPublicId(integrationId)?.name ?? integrationId;

package/dist/{context-B1L8pZsH.mjs → context-BydAGTiB.mjs}

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { O as AuthenticationError, g as REAUTH_HINT, h as AUTH_HINT, i as getEnv, k as CliExitError, n as ui, u as logger, x as toErrorMessage, y as isAuthError } from "./keystroke.mjs";
-import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
-import { a as writeJsonError } from "./output-CGdYhH0p.mjs";
+import { D as CliExitError, E as AuthenticationError, P as logger, _ as isAuthError, a as ui, c as getProcessEnv, m as REAUTH_HINT, p as AUTH_HINT, s as getEnv, y as toErrorMessage } from "./keystroke.mjs";
+import { n as credentials } from "./dist-CIInPRGh.mjs";
+import { t as resolveCliCredentials } from "./resolve-cli-credentials-DytxgMwn.mjs";
+import { a as writeJsonError } from "./output-BWcVRt-T.mjs";
 //#region src/lib/context.ts
 var context_exports = /* @__PURE__ */ __exportAll({
 	assertProjectConfigMatchesAuthenticatedOrg: () => assertProjectConfigMatchesAuthenticatedOrg,
@@ -29,14 +30,14 @@ function exitNotAuthenticated(jsonMode) {
 *   2. KEYSTROKE_ORG_ID env
 *   3. Active org from stored credentials
 *
-* API key: resolved from the matching org entry in stored credentials (or explicit --apiKey flag).
-* Server URL: flags > stored credentials > env/default.
+* API key: flags > KEYSTROKE_API_KEY env > stored credentials.
+* Server URL: flags > SERVER_URL env > stored credentials > default.
 */
 async function resolveBaseContext(overrides = {}) {
 	const authContext = await resolveAuthContext(overrides);
 	let client = null;
 	if (authContext.apiKey && authContext.baseUrl) try {
-		const { createClient } = await import("./src-BQdOWkyv.mjs");
+		const { createClient } = await import("./src-0XVwHXNp.mjs");
 		client = createClient({
 			apiKey: authContext.apiKey,
 			baseUrl: authContext.baseUrl,
@@ -57,27 +58,41 @@ async function resolveBaseContext(overrides = {}) {
 	};
 }
 async function resolveAuthContext(overrides = {}) {
-	const auth = await resolveAuthOptions({
-		apiKey: overrides.apiKey,
-		serverUrl: overrides.serverUrl
-	});
 	const env = getEnv();
-	let apiKey = auth.apiKey ?? env.KEYSTROKE_API_KEY;
+	const processEnv = getProcessEnv();
+	const auth = await resolveCliCredentials({
+		apiKey: overrides.apiKey ?? env.KEYSTROKE_API_KEY,
+		serverUrl: overrides.serverUrl ?? processEnv.SERVER_URL
+	});
+	const storedOrgs = await credentials.listOrgs();
+	const storedUser = await credentials.getUser();
+	const storedActiveOrgId = await credentials.getActiveOrgId();
+	const storedServerUrls = await credentials.getServerUrls();
+	const credentialStorageInfo = await resolveCredentialStorageInfo();
+	let apiKey = auth.apiKey;
 	const baseUrl = auth.serverUrl ?? env.SERVER_URL;
 	const orgRaw = overrides.org ?? env.KEYSTROKE_ORG_ID ?? auth.activeOrg?.organizationId;
 	const orgSource = overrides.org ? "flag" : env.KEYSTROKE_ORG_ID ? "env" : auth.activeOrg?.organizationId ? "credentials" : void 0;
 	let organizationId = orgRaw;
 	let matchedStoredOrg = false;
-	if (orgRaw && auth.storedCredentials) {
-		const matchedOrg = auth.storedCredentials.orgs.find((o) => o.organizationId === orgRaw);
+	if (orgRaw && storedOrgs.length > 0) {
+		const matchedOrg = storedOrgs.find((o) => o.organizationId === orgRaw);
 		matchedStoredOrg = matchedOrg !== void 0;
 		if (matchedOrg) {
-			if (!overrides.apiKey) apiKey = matchedOrg.apiKey;
+			if (!overrides.apiKey && !env.KEYSTROKE_API_KEY) try {
+				const storedKey = await credentials.getApiKey(matchedOrg.organizationId);
+				if (storedKey) apiKey = storedKey;
+			} catch (error) {
+				logger.warn("Could not read saved API key for selected organization", {
+					error: toErrorMessage(error),
+					organizationId: matchedOrg.organizationId
+				});
+			}
 			organizationId = matchedOrg.organizationId;
 		}
 	}
 	const usingSavedApiKey = !overrides.apiKey && !env.KEYSTROKE_API_KEY && typeof auth.apiKey === "string" && auth.apiKey.length > 0;
-	if (typeof orgRaw === "string" && orgRaw.length > 0 && orgSource !== "credentials" && usingSavedApiKey && auth.storedCredentials && !matchedStoredOrg) {
+	if (typeof orgRaw === "string" && orgRaw.length > 0 && orgSource !== "credentials" && usingSavedApiKey && storedOrgs.length > 0 && !matchedStoredOrg) {
 		ui.error(`Organization ID "${orgRaw}" is not available in your saved credentials.`);
 		ui.hint("Run `keystroke org switch`, re-authenticate for that organization, or pass --api-key.");
 		throw new CliExitError(`Unknown saved organization ID: ${orgRaw}`, { reported: true });
@@ -88,10 +103,27 @@ async function resolveAuthContext(overrides = {}) {
 		jsonMode: false,
 		organizationId,
 		orgSource,
-		storedCredentials: auth.storedCredentials,
-		credentialsPath: auth.credentialsPath
+		storedOrgs,
+		storedUser,
+		storedActiveOrgId,
+		storedServerUrls,
+		credentialStorageInfo,
+		credentialReadError: auth.readErrorMessage,
+		metadataFilePath: auth.metadataFilePath
 	};
 }
+async function resolveCredentialStorageInfo() {
+	try {
+		return await credentials.getStorageInfo();
+	} catch {
+		return {
+			metadataFilePath: credentials.metadataFilePath,
+			legacySecretsFilePath: credentials.secretsFilePath,
+			secretStorageKind: "file",
+			insecureFileStorage: true
+		};
+	}
+}
 /**
 * Requires that the CLI context has a valid authenticated client.
 * Exits the process with a helpful message if credentials are missing.

package/dist/{create.handler-DF1Ye4nr.mjs → create.handler-CBxIPC3r.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
+import { a as ui, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient } from "./context-BydAGTiB.mjs";
 //#region src/commands/api-keys/create.handler.ts
 async function handleApiKeysCreate(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{credential-env-map-B2nVJXPn.mjs → credential-env-map-BA4LNI7x.mjs}

@@ -1,21 +1,22 @@
 #!/usr/bin/env node
 
+import { r as getKeystrokeProjectPath } from "./paths-JzzFkXQA-CEipIeVl.mjs";
+import "./dist-CIInPRGh.mjs";
 import * as fs from "node:fs/promises";
-import * as path$1 from "node:path";
 import { z } from "zod";
 //#region src/lib/credential-env-map.ts
 /**
-* Read optional .keystroke/credential-env-map.json from project root.
+* Read optional credential env var overrides from project-local memory.
 * Maps credentialSetId → { credentialKey: envVarName } to override KEYSTROKE_<KEY> convention.
 */
 const CredentialEnvMapSchema = z.record(z.string(), z.record(z.string(), z.string()));
-const CREDENTIAL_ENV_MAP_FILE = ".keystroke/credential-env-map.json";
+const CREDENTIAL_ENV_MAP_FILE = "credential-env-map.json";
 /**
-* Reads .keystroke/credential-env-map.json from project root (workflowsDir).
+* Reads credential-env-map.json from the project-local memory directory.
 * Returns null if file does not exist or is invalid.
 */
 async function readCredentialEnvMap(projectRoot) {
-	const filePath = path$1.join(projectRoot, CREDENTIAL_ENV_MAP_FILE);
+	const filePath = getKeystrokeProjectPath(projectRoot, CREDENTIAL_ENV_MAP_FILE);
 	try {
 		const raw = await fs.readFile(filePath, "utf-8");
 		const parsed = CredentialEnvMapSchema.safeParse(JSON.parse(raw));

package/dist/{credential-requirements-FtBk5JVB.mjs → credential-requirements-Ob-7H-0F.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { t as JsonSchemaSchema } from "./common-BaGFkj3n.mjs";
-import { n as credentialSetProxyConfigSchema } from "./schemas-DodkHgnS.mjs";
-import { a as SourceLocationSchema, i as ImportSourceSchema, t as CallKindSchema } from "./source-analysis-CJPymdaA.mjs";
+import { t as JsonSchemaSchema } from "./common-AK0q0Oz0.mjs";
+import { n as credentialSetProxyConfigSchema } from "./schemas-BxFPUGWT.mjs";
+import { a as SourceLocationSchema, i as ImportSourceSchema, t as CallKindSchema } from "./source-analysis-Cs0CTBQk.mjs";
 import { z } from "zod";
 const IntegrationScopeSchema = z.enum([
 	"organization",

package/dist/{credential-schema-mismatch-CfyBUMPS.mjs → credential-schema-mismatch-z74ud-YZ.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
 //#region src/lib/credential-schema-mismatch.ts
 /**
 * Structured detection and rendering for `CredentialSchemaMismatchError`

package/dist/{credentials-VidBoOd7.mjs → credentials-BGaRMclS.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-CGdYhH0p.mjs";
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
-import { i as CredentialScopeValues, r as CredentialScopeSchema } from "./schema-O9xTWad_.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
+import { t as createTypedCommand } from "./commander-C5qcOo8m.mjs";
+import { i as CredentialScopeValues, r as CredentialScopeSchema } from "./schema-BjH_e4Fo.mjs";
 import { z } from "zod";
 //#region src/commands/credentials/list/list.command.ts
 const ListOptionsSchema = JsonOptionSchema.extend({
@@ -46,7 +46,7 @@ function createCredentialsListCommand() {
 		description: "List credential sets on the server",
 		schema: ListOptionsSchema,
 		optionsConfig: LIST_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./list.handler-D-YFoKLU.mjs")).handleCredentialsList
+		loadHandler: async () => (await import("./list.handler-DdFGHkqt.mjs")).handleCredentialsList
 	});
 }
 //#endregion
@@ -65,7 +65,7 @@ function createCredentialsRequirementsCommand() {
 		description: "Show what credentials built workflows need (keys, KEYSTROKE_* env names, workflows) — from dist manifests, no API call",
 		schema: RequirementsOptionsSchema,
 		optionsConfig: REQUIREMENTS_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./requirements.handler-D5dFi7XZ.mjs")).handleCredentialsRequirements
+		loadHandler: async () => (await import("./requirements.handler-C5vobjdJ.mjs")).handleCredentialsRequirements
 	});
 }
 //#endregion
@@ -126,7 +126,7 @@ function createCredentialsUploadCommand() {
 		description: "Upload credentials from env vars to the server. Default: reads requirements from built workflow manifests. Use --integration for an official integration or --credential-set + --keys for a custom explicit upload.",
 		schema: UploadOptionsSchema,
 		optionsConfig: UPLOAD_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upload.handler-CpKuAaQ_.mjs")).handleCredentialsUpload
+		loadHandler: async () => (await import("./upload.handler-_d2WZwxd.mjs")).handleCredentialsUpload
 	});
 }
 //#endregion
@@ -157,7 +157,7 @@ function createCredentialsCommand() {
 			}
 		},
 		handler: async (opts, ctx) => {
-			const { handleCredentialsList } = await import("./list.handler-D-YFoKLU.mjs");
+			const { handleCredentialsList } = await import("./list.handler-DdFGHkqt.mjs");
 			await handleCredentialsList({
 				...opts,
 				scope: void 0,

package/dist/{credentials-CiOwDS5y.mjs → credentials-jRiXEr6P.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { d as collectCredentialRequirementEntries } from "./credential-requirements-FtBk5JVB.mjs";
+import { d as collectCredentialRequirementEntries } from "./credential-requirements-Ob-7H-0F.mjs";
 //#region ../../packages/workflow-deploy/dist/credentials/index.mjs
 /**
 * Resolves credential values from environment using KEYSTROKE_<KEY> convention.

package/dist/{current-deployment-workflow-BRUEdPrN.mjs → current-deployment-workflow-BVliROAz.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
-import { M as WorkflowResolutionError, _ as getApiErrorCode, n as ui, v as getHttpStatus } from "./keystroke.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { a as readManifestsFromOutDir } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { t as createSpinnerProgress } from "./spinner-progress-DfkMzwGx.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-C9rQQ4qU.mjs";
+import { A as WorkflowResolutionError, a as ui, g as getHttpStatus, h as getApiErrorCode } from "./keystroke.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { a as readManifestsFromOutDir } from "./dist-Cx0RV8s7.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { t as createSpinnerProgress } from "./spinner-progress-Bx-fYItP.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-C8AiYxqp.mjs";
 //#region src/commands/workflows/_shared/current-deployment-workflow.ts
 /**
 * Lightweight resolution: gets projectId from keystroke.config.ts and authoredWorkflowId

package/dist/{current.handler-QZQ-l84v.mjs → current.handler-DBl9S67d.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { i as requireClient } from "./context-BydAGTiB.mjs";
 //#region src/commands/org/current.handler.ts
 async function handleOrgCurrent(_options, ctx) {
 	if (!ctx.organizationId) {
@@ -14,7 +14,7 @@ async function handleOrgCurrent(_options, ctx) {
 		ui.text(`Current organization: ${currentOrg.name}`);
 		if (ctx.orgSource) ui.hint(`Source: ${ctx.orgSource}`);
 	} else ui.text(`Current organization ID: ${ctx.organizationId}`);
-	const storedOrgCount = ctx.storedCredentials?.orgs.length ?? 0;
+	const storedOrgCount = ctx.storedOrgs.length;
 	if (storedOrgCount > 1) ui.hint(`${storedOrgCount} organizations with stored credentials. Use \`keystroke org switch\` to change.`);
 }
 //#endregion

package/dist/{default-urls-BS4twrsS.mjs → default-urls-BoSm4s9C.mjs}

@@ -2,6 +2,6 @@
 
 //#region src/lib/default-urls.ts
 const DEFAULT_CLI_WEB_URL = "https://keystroke.ai";
-const DEFAULT_CLI_SERVER_URL = "https://api.kestroke.ai";
+const DEFAULT_CLI_SERVER_URL = "https://api.keystroke.ai";
 //#endregion
 export { DEFAULT_CLI_WEB_URL as n, DEFAULT_CLI_SERVER_URL as t };

package/dist/{delete.handler-Bude0SVP.mjs → delete.handler-Buu7Ip0D.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { i as requireClient } from "./context-B1L8pZsH.mjs";
+import { a as ui, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { i as requireClient } from "./context-BydAGTiB.mjs";
 //#region src/commands/api-keys/delete.handler.ts
 async function handleApiKeysDelete(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{deploy-CJbVB7e2.mjs → deploy-BPDUTKZD.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { a as createKyInstance, n as auth, r as bundles, s as getClientEnv, t as projects } from "./projects-DfaG_3WP.mjs";
+import { a as createKyInstance, n as auth, r as bundles, s as getClientEnv, t as projects } from "./projects-BndElPAx.mjs";
 //#region ../../packages/workflow-sdk/src/deploy.ts
 function createDeployClient(config = {}) {
 	const env = getClientEnv();

package/dist/{deploy-eshEEiP-.mjs → deploy-CzTlgAFj.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-D15UZVjp.mjs";
+import { t as createTypedCommand } from "./commander-C5qcOo8m.mjs";
 import { z } from "zod";
 //#region src/commands/deploy/deploy.command.ts
 /**
@@ -64,7 +64,7 @@ function createDeployCommand() {
 		schema: DeployOptionsSchema,
 		optionsConfig: DEPLOY_OPTIONS_CONFIG,
 		contextMode: "auth",
-		loadHandler: async () => (await import("./deploy.handler-BxxWI7nV.mjs")).handleDeploy
+		loadHandler: async () => (await import("./deploy.handler-CCcJ7y3A.mjs")).handleDeploy
 	});
 	cmd.enablePositionalOptions();
 	cmd.passThroughOptions();

package/dist/{deploy-progress-DJHph1Fz.mjs → deploy-progress-DK87VKJ-.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as ui } from "./keystroke.mjs";
-import { t as createSpinnerProgress } from "./spinner-progress-DfkMzwGx.mjs";
+import { a as ui } from "./keystroke.mjs";
+import { t as createSpinnerProgress } from "./spinner-progress-Bx-fYItP.mjs";
 //#region src/lib/deploy-progress.ts
 function renderItemFailure(event, kind, spinner) {
 	if (event.result === "failure") spinner.fail(`${kind} failed (${event.name})`, void 0, event.error);

package/dist/{deploy.handler-BxxWI7nV.mjs → deploy.handler-CCcJ7y3A.mjs}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 
-import { f as ANSI, k as CliExitError, n as ui, o as isLocalMode, p as style, u as logger } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-BF6r1hfv.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-CsBMT4TL.mjs";
-import { r as requireAuthOptions, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-B1L8pZsH.mjs";
-import { i as readAgentManifestsFromOutDir, o as readWorkflowsFromDisk } from "./dist-FQYQ2FLm.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-CURYMjex.mjs";
-import { n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-C9rQQ4qU.mjs";
-import { t as createBuildProgress } from "./build-progress-BZivcVz4.mjs";
-import { t as createDeployProgress } from "./deploy-progress-DJHph1Fz.mjs";
-import { t as withErrorBoundary } from "./error-boundary-CyLcinp1.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BRUEdPrN.mjs";
-import { t as computeWorkflowDiff } from "./diff-utils-4OQTpP5s.mjs";
-import { access } from "node:fs/promises";
+import { D as CliExitError, P as logger, a as ui, l as isLocalMode, n as style, t as ANSI } from "./keystroke.mjs";
+import { i as projects } from "./dist-CIInPRGh.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
+import { r as requireAuthOptions, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-BydAGTiB.mjs";
+import { i as readAgentManifestsFromOutDir, o as readWorkflowsFromDisk } from "./dist-Cx0RV8s7.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CNQtOWE4.mjs";
+import { n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-C8AiYxqp.mjs";
+import { t as createBuildProgress } from "./build-progress-AR8xow4_.mjs";
+import { t as createDeployProgress } from "./deploy-progress-DK87VKJ-.mjs";
+import { t as withErrorBoundary } from "./error-boundary-B8cmSwJH.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BVliROAz.mjs";
+import { t as computeWorkflowDiff } from "./diff-utils-B0ED-Igv.mjs";
 import path from "node:path";
+import { access } from "node:fs/promises";
 //#region src/commands/deploy/deploy-diff.ts
 const deployDiffDependencies = {
 	readWorkflowsFromDisk,
@@ -170,7 +170,7 @@ async function handleDeploy(options, ctx) {
 			"agent",
 			"task"
 		];
-		trackProject(workflowsDir);
+		projects.track(workflowsDir);
 		const forceBuild = options.force && !options.incrementalBuild;
 		logger.info("Starting deployment", {
 			workflowsDir,
@@ -198,7 +198,7 @@ async function handleDeploy(options, ctx) {
 		let outDir;
 		let artifactFilter;
 		try {
-			const { runWorkflowBuild } = await import("./workflow-build-C9rQQ4qU.mjs").then((n) => n.o);
+			const { runWorkflowBuild } = await import("./workflow-build-C8AiYxqp.mjs").then((n) => n.o);
 			const buildOutcome = await runWorkflowBuild({
 				workflowsDir,
 				verbose: options.verbose,
@@ -233,7 +233,7 @@ async function handleDeploy(options, ctx) {
 		const progress = createDeployProgress();
 		let result;
 		try {
-			result = await (deployHandlerDependencies.deployFromDir ?? (await import("./dist-FQYQ2FLm.mjs").then((n) => n.r)).deployFromDir)({
+			result = await (deployHandlerDependencies.deployFromDir ?? (await import("./dist-Cx0RV8s7.mjs").then((n) => n.r)).deployFromDir)({
 				outDir,
 				workflowsDir,
 				client,
@@ -260,7 +260,7 @@ async function handleDeploy(options, ctx) {
 }
 async function handleTaskTargetDeploy(options) {
 	renderBuildHeader(void 0);
-	const buildResult = await (deployHandlerDependencies.buildTaskTargets ?? (await import("./task-target-build-BG6cC3bz.mjs")).buildTaskTargets)({
+	const buildResult = await (deployHandlerDependencies.buildTaskTargets ?? (await import("./task-target-build-DCV0UDaz.mjs")).buildTaskTargets)({
 		projectRoot: options.workflowsDir,
 		targetFiles: options.targetFiles,
 		disableSourcemaps: options.options.disableSourcemaps
@@ -278,7 +278,7 @@ async function handleTaskTargetDeploy(options) {
 	const progress = createDeployProgress();
 	let result;
 	try {
-		result = await (deployHandlerDependencies.deployTaskTargets ?? (await import("./task-target-deploy-gMQC8kXU.mjs")).deployTaskTargets)({
+		result = await (deployHandlerDependencies.deployTaskTargets ?? (await import("./task-target-deploy-DmpCWE3u.mjs")).deployTaskTargets)({
 			preparedTasks: buildResult.preparedTasks,
 			client,
 			organizationId: options.projectConfig.organizationId,
@@ -300,7 +300,7 @@ async function handleTaskTargetDeploy(options) {
 }
 async function createFullDeployClient(ctx) {
 	const authOptions = requireAuthOptions(ctx);
-	const { createClient } = await import("./src-BQdOWkyv.mjs");
+	const { createClient } = await import("./src-0XVwHXNp.mjs");
 	return createClient({
 		...authOptions,
 		onRequest: (info) => logger.debug(`-> ${info.method} ${info.url}`, {
@@ -315,7 +315,7 @@ async function createFullDeployClient(ctx) {
 }
 async function createTaskDeployClient(ctx) {
 	const authOptions = requireAuthOptions(ctx);
-	return (deployHandlerDependencies.createDeployClient ?? (await import("./deploy-CJbVB7e2.mjs")).createDeployClient)(authOptions);
+	return (deployHandlerDependencies.createDeployClient ?? (await import("./deploy-BPDUTKZD.mjs")).createDeployClient)(authOptions);
 }
 function renderSuccessSummary(result) {
 	const tasks = result.tasks || [];

package/dist/{detect-env-access-CwkOYeYM-CZIixHeR.mjs → detect-env-access-CwkOYeYM-CNTyUzme.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { t as __exportAll$1 } from "./rolldown-runtime-twds-ZHy-CO5ir_za.mjs";
+import { t as __exportAll$1 } from "./rolldown-runtime-twds-ZHy-8uqgIurC.mjs";
 import path from "node:path";
 //#region ../../packages/workflow-builder/dist/detect-env-access-CwkOYeYM.mjs
 var detect_env_access_CwkOYeYM_exports = /* @__PURE__ */ __exportAll({

package/dist/{diff-utils-4OQTpP5s.mjs → diff-utils-B0ED-Igv.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { f as ANSI, n as ui, p as style } from "./keystroke.mjs";
+import { a as ui, n as style, t as ANSI } from "./keystroke.mjs";
 //#region src/commands/workflows/diff/diff-utils.ts
 function computeWorkflowDiff(local, deployed, meta) {
 	if (!deployed) return {

package/dist/{diff.handler-CzrKCj7N.mjs → diff.handler-DUVFixeG.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
-import { N as throwReportedCliExit, k as CliExitError, n as ui, x as toErrorMessage } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-BF6r1hfv.mjs";
-import { i as writeJson } from "./output-CGdYhH0p.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-B1L8pZsH.mjs";
-import { n as resolveLocalWorkflowManifest, t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BRUEdPrN.mjs";
-import { n as renderDiff, t as computeWorkflowDiff } from "./diff-utils-4OQTpP5s.mjs";
+import { D as CliExitError, a as ui, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { i as projects } from "./dist-CIInPRGh.mjs";
+import { i as writeJson } from "./output-BWcVRt-T.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-BydAGTiB.mjs";
+import { n as resolveLocalWorkflowManifest, t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-BVliROAz.mjs";
+import { n as renderDiff, t as computeWorkflowDiff } from "./diff-utils-B0ED-Igv.mjs";
 //#region src/commands/workflows/diff/diff.handler.ts
 async function handleWorkflowsDiff(options, ctx) {
 	const resolved = await resolveLocalWorkflowManifest(options.workflow, options.path, { jsonMode: ctx.jsonMode });
-	trackProject(resolved.workflowsDir);
+	projects.track(resolved.workflowsDir);
 	const client = requireClient(ctx);
 	await assertProjectConfigMatchesAuthenticatedOrg(client, { organizationId: resolved.organizationId });
 	let deploymentLookup;