@keystrokehq/cli 0.0.31 → 0.0.37

package/dist/{skills-sync.handler-BAATdT6N.mjs → skills-sync.handler-BGs-_YD9.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { D as CliExitError, a as ui } from "./keystroke.mjs";
-import { i as writeJson, r as isJsonMode } from "./output-BWcVRt-T.mjs";
-import { i as UnknownSkillAgentError, n as resolveSkillInstallChoices, r as installKeystrokeAgentSkills, t as summarizeSkillInstall } from "./skill-installer-D6j9IA3Z.mjs";
+import { k as CliExitError } from "./keystroke.mjs";
+import { a as writeJsonError, i as writeJson, r as isJsonMode } from "./output-DnIFEmi5.mjs";
+import { i as UnknownSkillAgentError, n as resolveSkillInstallChoices, r as installKeystrokeAgentSkills, t as summarizeSkillInstall } from "./skill-installer-DuMhavmM.mjs";
 import path from "node:path";
 //#region src/commands/skills/skills-sync.handler.ts
 async function handleSkillsSync(options, _ctx) {
@@ -12,7 +12,7 @@ async function handleSkillsSync(options, _ctx) {
 		const choices = await resolveSkillInstallChoices({
 			agentSlugs: options.agent,
 			method: options.method,
-			interactive: process.stdin.isTTY && !isJsonMode(options)
+			interactive: Boolean(process.stdin.isTTY) && !isJsonMode(options)
 		});
 		result = await installKeystrokeAgentSkills({
 			projectDir,
@@ -20,7 +20,13 @@ async function handleSkillsSync(options, _ctx) {
 			method: choices.method
 		});
 	} catch (error) {
-		if (error instanceof UnknownSkillAgentError) throw new CliExitError(error.message, { cause: error });
+		if (error instanceof UnknownSkillAgentError) {
+			if (isJsonMode(options)) writeJsonError(error.message, {
+				code: "UNKNOWN_AGENT",
+				cause: error
+			});
+			throw new CliExitError(error.message, { cause: error });
+		}
 		throw error;
 	}
 	if (isJsonMode(options)) {
@@ -40,8 +46,8 @@ async function handleSkillsSync(options, _ctx) {
 		summarizeSkillInstall(result, "Synced");
 		return;
 	}
-	if (result.reason === "not_installed") throw new CliExitError("Could not resolve @keystrokehq/skills from this project or the installed CLI. Reinstall the CLI or add @keystrokehq/skills to devDependencies, run install, then run `keystroke skills sync`.", { exitCode: 1 });
-	ui.warn(`@keystrokehq/skills is installed at ${result.packageRoot} but no skill directories with SKILL.md were found.`);
+	if (result.reason === "not_installed") throw new CliExitError("Could not resolve @keystrokehq/skills from the installed CLI. Reinstall the CLI, then run `keystroke skills sync`.", { exitCode: 1 });
+	throw new CliExitError(`@keystrokehq/skills is installed at ${result.packageRoot} but no skill directories with SKILL.md were found.`, { exitCode: 1 });
 }
 //#endregion
 export { handleSkillsSync };

package/dist/{skills.command-0-E8mcYE.mjs → skills.command-DUWn6FbL.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
-import { t as createTypedCommand } from "./commander-BlrSdFcu.mjs";
-import { t as SKILL_INSTALL_METHODS } from "./types-AlA-ifK9.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-DnIFEmi5.mjs";
+import { t as createTypedCommand } from "./commander-C6SSTQJ2.mjs";
+import { t as SKILL_INSTALL_METHODS } from "./types-Cb0eWmUU.mjs";
 import { z } from "zod";
 //#region src/commands/skills/skills.command.ts
 const SkillsCommandOptionsSchema = JsonOptionSchema.extend({
@@ -32,13 +32,13 @@ function createSkillsCommand() {
 		description: "Sync Keystroke agent skills (SKILL.md) from @keystrokehq/skills",
 		schema: SkillsCommandOptionsSchema,
 		optionsConfig: SKILLS_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./skills.handler-DYIQK0Vu.mjs")).handleSkillsParent,
+		loadHandler: async () => (await import("./skills.handler-DqLXJepA.mjs")).handleSkillsParent,
 		subcommands: [createTypedCommand({
 			name: "sync",
 			description: "Install bundled Keystroke skills into selected agent skill directories",
 			schema: SkillsCommandOptionsSchema,
 			optionsConfig: SKILLS_OPTIONS_CONFIG,
-			loadHandler: async () => (await import("./skills-sync.handler-BAATdT6N.mjs")).handleSkillsSync
+			loadHandler: async () => (await import("./skills-sync.handler-BGs-_YD9.mjs")).handleSkillsSync
 		})]
 	});
 	cmd.enablePositionalOptions();

package/dist/skills.handler-DqLXJepA.mjs

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+
+import { p as ui } from "./keystroke.mjs";
+//#region src/commands/skills/skills.handler.ts
+async function handleSkillsParent(_options, _ctx) {
+	ui.hint("Run `keystroke skills sync` to refresh bundled skills in `.agents/skills`, or `keystroke skills sync --agent claude-code --method symlink` for agent-specific folders.");
+}
+//#endregion
+export { handleSkillsParent };

package/dist/{spinner-progress-lrKDs4YF.mjs → spinner-progress-BYxlr3lY.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { F as originalConsole, P as logger, n as style, r as isTTY, t as ANSI } from "./keystroke.mjs";
+import { I as logger, L as originalConsole, n as style, r as isTTY, t as ANSI } from "./keystroke.mjs";
 import { writeSync } from "node:fs";
 import { Worker } from "node:worker_threads";
 //#region src/lib/spinner-progress.ts

package/dist/status.handler-DAId4bVU.mjs

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+
+import { g as REAUTH_HINT, h as AUTH_HINT, p as ui } from "./keystroke.mjs";
+import { a as getApiKeyValidationStatus, c as resolveEffectiveOrganization, i as formatOrgSourceLabel, t as ORG_CONTEXT_HINT } from "./org-context-BI9OSpbb.mjs";
+//#region src/commands/auth/status.handler.ts
+async function getLiveUser(ctx, validation) {
+	if (!ctx.client || validation.kind !== "valid") return;
+	try {
+		const { user } = await ctx.client.users.getMe();
+		return user;
+	} catch {
+		return;
+	}
+}
+function printOrganization(effective) {
+	if (!effective) {
+		ui.warn(`No organization set. ${ORG_CONTEXT_HINT}`);
+		return;
+	}
+	if (effective.name) {
+		ui.text(`Current organization: ${effective.name}`);
+		return;
+	}
+	ui.text(`Current organization: ${effective.organizationId}`);
+}
+function printValidationStatus(validation) {
+	switch (validation.kind) {
+		case "valid":
+			ui.success("API key is valid.");
+			ui.hint(`Key ID: ${validation.apiKeyId}`);
+			return;
+		case "invalid":
+			ui.warn("Saved API key is invalid or expired.");
+			ui.hint(REAUTH_HINT);
+			ui.hint(`Validation error: ${validation.message}`);
+			return;
+		case "unavailable":
+			ui.warn(validation.reason === "network" ? "Could not reach the API to verify the saved API key." : "Could not verify the saved API key right now.");
+			ui.hint(`Validation error: ${validation.message}`);
+			return;
+		case "not_authenticated":
+			ui.warn(`Not authenticated. ${AUTH_HINT}`);
+			return;
+	}
+}
+function printCredentialStorage(ctx) {
+	if (ctx.credentialReadError) {
+		ui.warn("Saved credentials could not be read.");
+		ui.hint(`Credential read error: ${ctx.credentialReadError}`);
+		return;
+	}
+	if (ctx.storedOrgs.length === 0) return;
+	ui.hint(`Credentials: ${ctx.credentialStorageInfo.credentialsFilePath}`);
+}
+async function handleAuthStatus(_options, ctx) {
+	const validation = await getApiKeyValidationStatus(ctx);
+	const liveUser = await getLiveUser(ctx, validation);
+	const effective = await resolveEffectiveOrganization(ctx, liveUser?.organizations ?? []);
+	const userEmail = liveUser?.email ?? ctx.storedUser?.email;
+	ui.header("Keystroke CLI auth status");
+	if (userEmail) ui.text(`Signed in as: ${userEmail}`);
+	else if (validation.kind === "not_authenticated") ui.hint("No saved user identity found.");
+	else ui.warn("Signed-in user could not be determined from saved credentials.");
+	printOrganization(effective);
+	if (effective?.source) ui.hint(`Source: ${formatOrgSourceLabel(effective.source)}`);
+	else if (ctx.orgSource) ui.hint(`Source: ${formatOrgSourceLabel(ctx.orgSource)}`);
+	printValidationStatus(validation);
+	if (ctx.baseUrl) ui.hint(`API URL: ${ctx.baseUrl}`);
+	printCredentialStorage(ctx);
+}
+//#endregion
+export { handleAuthStatus };

package/dist/{switch.handler-BwYndsP-.mjs → switch.handler-Cd4Yg2n8.mjs}

@@ -1,13 +1,21 @@
 #!/usr/bin/env node
 
-import { a as ui, j as throwReportedCliExit } from "./keystroke.mjs";
-import { n as credentials } from "./dist-Dw7gCE7y.mjs";
-import { i as requireClient } from "./context-sgKhRc5v.mjs";
+import { N as throwReportedCliExit, p as ui } from "./keystroke.mjs";
+import { n as credentials } from "./dist-B5jy238v.mjs";
+import { i as requireClient } from "./context-ebZssGCY.mjs";
+import { c as resolveEffectiveOrganization, n as ORG_STORED_KEYS_HINT, t as ORG_CONTEXT_HINT } from "./org-context-BI9OSpbb.mjs";
 import { select } from "@clack/prompts";
 //#region src/commands/org/switch.handler.ts
 async function handleOrgSwitch(_options, ctx) {
+	if (!process.stdin.isTTY || !process.stdout.isTTY) {
+		const message = "Organization switch requires an interactive terminal.";
+		ui.error(message);
+		ui.hint(ORG_CONTEXT_HINT);
+		throwReportedCliExit(message);
+	}
 	const { user } = await requireClient(ctx).users.getMe();
 	const orgs = user.organizations ?? [];
+	const currentOrgId = (await resolveEffectiveOrganization(ctx, orgs))?.organizationId;
 	const storedOrgIds = new Set(ctx.storedOrgs.map((o) => o.organizationId));
 	if (orgs.length === 0) {
 		ui.warn("You do not belong to any organization.");
@@ -18,10 +26,15 @@ async function handleOrgSwitch(_options, ctx) {
 		ui.hint(`You only belong to one organization: ${name}`);
 		return;
 	}
+	if (storedOrgIds.size === 0) {
+		ui.warn("No stored API keys for any organization.");
+		ui.hint(ORG_STORED_KEYS_HINT);
+		return;
+	}
 	const selected = await select({
 		message: "Switch to organization:",
 		options: orgs.map((org) => {
-			const isCurrent = org.id === ctx.organizationId;
+			const isCurrent = org.id === currentOrgId;
 			const hasKey = storedOrgIds.has(org.id);
 			const hint = isCurrent ? "(current)" : hasKey ? void 0 : "No stored key, run `keystroke auth`";
 			return {

package/dist/{sync-6fZkIUtn.mjs → sync-DgC4lcxh.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-BlrSdFcu.mjs";
+import { t as createTypedCommand } from "./commander-C6SSTQJ2.mjs";
 import { z } from "zod";
 //#region src/commands/sync/sync.command.ts
 /**
@@ -32,7 +32,7 @@ function createSyncCommand() {
 		description: "Sync local workflows with Keystroke",
 		schema: SyncOptionsSchema,
 		optionsConfig: SYNC_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./sync.handler-Ctr-cN9X.mjs")).handleSync
+		loadHandler: async () => (await import("./sync.handler-Cm_WtGmH.mjs")).handleSync
 	});
 }
 //#endregion

package/dist/{sync.handler-Ctr-cN9X.mjs → sync.handler-Cm_WtGmH.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
-import { P as logger, a as ui, j as throwReportedCliExit, l as isLocalMode, y as toErrorMessage } from "./keystroke.mjs";
-import { i as projects } from "./dist-Dw7gCE7y.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-sgKhRc5v.mjs";
-import { n as deployFromDir } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-Begvjfq8.mjs";
-import { t as createBuildProgress } from "./build-progress-DLM1Bt4T.mjs";
-import { t as createDeployProgress } from "./deploy-progress-BsUH7fGE.mjs";
+import { I as logger, N as throwReportedCliExit, l as isLocalMode, p as ui, x as toErrorMessage } from "./keystroke.mjs";
+import { i as projects } from "./dist-B5jy238v.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-ebZssGCY.mjs";
+import { n as deployFromDir } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DLKlAy0z.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-Bm8JoVv4.mjs";
+import { t as createBuildProgress } from "./build-progress-CM-b6Bby.mjs";
+import { t as createDeployProgress } from "./deploy-progress-Bt86Yc1r.mjs";
 //#region src/commands/sync/sync.handler.ts
 async function handleSync(options, ctx) {
 	try {

package/dist/{task-BWuIKWh4.mjs → task-DTvLzUkA.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, f as parseCronExpression, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-D2zfmyC-.mjs";
+import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-ClAIoIrX.mjs";
 import { z } from "zod";
 import "node:crypto";
 const SHA256HashSchema = z.string().length(64, "Must be 64 characters").regex(/^[a-f0-9]{64}$/i, "Must be hexadecimal").transform((value) => value);
@@ -20,94 +20,8 @@ z.object({
 	return data.constant !== void 0 !== (data.exponential !== void 0);
 }, { error: "Retry config must specify exactly one of constant or exponential strategy" });
 //#endregion
-//#region ../../packages/core/src/shared/schedule.ts
-/**
-* shared/schedule.ts
-*
-* Unified schedule type that supports both simple intervals and cron expressions.
-* Can be used in both cron and polling triggers for maximum flexibility.
-*
-* Template literal types provide compile-time type safety.
-* Zod schemas with refinements provide runtime validation.
-*/
+//#region ../../packages/core/src/shared/duration.ts
 const DurationSchema = z.union([z.number().int().positive().finite(), z.string().regex(/^[1-9]\d*[smhdwy]$/)]);
-const DurationStringSchema = z.string().refine((val) => /^\d+[smhdwy]$/.test(val), { message: "Invalid duration format. Must be a positive integer followed by s, m, h, d, w, or y (e.g., \"5m\", \"1h\")" }).refine((val) => {
-	const match = val.match(/^(\d+)[smhdwy]$/);
-	if (!match?.[1]) return false;
-	const num = Number.parseInt(match[1], 10);
-	return num > 0 && Number.isFinite(num);
-}, { message: "Duration value must be a positive integer greater than 0" });
-const CronExpressionSchema = z.string().superRefine((val, ctx) => {
-	try {
-		parseCronExpression(val);
-	} catch (error) {
-		const errorMessage = error instanceof Error ? error.message : "Invalid cron expression format";
-		ctx.addIssue({
-			code: "custom",
-			message: `Invalid cron expression: ${errorMessage}. Must be a valid 5-field cron: minute hour day month weekday (e.g., "0 9 * * *", "*/15 * * * *")`
-		});
-	}
-});
-z.union([
-	z.number().refine((val) => val > 0, { message: "Duration in milliseconds must be positive" }).refine(Number.isFinite, { message: "Duration in milliseconds must be finite" }).refine(Number.isInteger, { message: "Duration in milliseconds must be an integer" }),
-	DurationStringSchema,
-	CronExpressionSchema
-]);
-z.enum([
-	"UTC",
-	"GMT",
-	"Etc/UTC",
-	"Etc/GMT",
-	"America/New_York",
-	"America/Chicago",
-	"America/Denver",
-	"America/Los_Angeles",
-	"America/Phoenix",
-	"America/Anchorage",
-	"America/Toronto",
-	"America/Vancouver",
-	"America/Mexico_City",
-	"America/Sao_Paulo",
-	"America/Buenos_Aires",
-	"Europe/London",
-	"Europe/Paris",
-	"Europe/Berlin",
-	"Europe/Rome",
-	"Europe/Madrid",
-	"Europe/Amsterdam",
-	"Europe/Stockholm",
-	"Europe/Vienna",
-	"Europe/Zurich",
-	"Europe/Moscow",
-	"Europe/Athens",
-	"Europe/Dublin",
-	"Asia/Tokyo",
-	"Asia/Shanghai",
-	"Asia/Hong_Kong",
-	"Asia/Singapore",
-	"Asia/Seoul",
-	"Asia/Dubai",
-	"Asia/Kolkata",
-	"Asia/Bangkok",
-	"Asia/Jakarta",
-	"Asia/Manila",
-	"Asia/Taipei",
-	"Australia/Sydney",
-	"Australia/Melbourne",
-	"Australia/Brisbane",
-	"Australia/Perth",
-	"Australia/Adelaide",
-	"Pacific/Auckland",
-	"Pacific/Honolulu",
-	"Africa/Cairo",
-	"Africa/Johannesburg",
-	"Africa/Lagos",
-	"Africa/Nairobi",
-	"Asia/Riyadh",
-	"Asia/Tehran",
-	"Asia/Jerusalem",
-	"Asia/Doha"
-]);
 //#endregion
 //#region ../../packages/core/src/artifacts/source-analysis.ts
 const SourceLocationSchema = z.object({

package/dist/{task-target-build-QllcCfoN.mjs → task-target-build-CtvRyVjH.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { r as getKeystrokeProjectPath } from "./paths-DpHfoaXN-CdPimpky.mjs";
-import "./dist-Dw7gCE7y.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DGK5XTQp.mjs";
+import "./dist-B5jy238v.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-I07NYwfH.mjs";
 import path from "node:path";
 import { mkdir, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
@@ -111,7 +111,7 @@ async function buildTaskTargetFile(options) {
 	return builtTasks;
 }
 async function bundleTaskTargetModule(options) {
-	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-COq4U-4Y.mjs").then((n) => n.n).then((n) => n.n)]);
+	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-r4aynBU0.mjs").then((n) => n.n).then((n) => n.n)]);
 	const entryId = "\0virtual:task-target-entry";
 	const trackedDependencies = /* @__PURE__ */ new Set();
 	const envViolations = [];
@@ -218,7 +218,7 @@ async function attachTaskTargetTriggers(options) {
 		options.artifact.triggers.push(...buildTaskTriggerArtifactsWithoutBundles(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName));
 		return [];
 	}
-	const { buildTriggerArtifacts } = await import("./trigger-artifacts-BcRScRSp-BiD2h6do.mjs").then((n) => n.n);
+	const { buildTriggerArtifacts } = await import("./trigger-artifacts-BcRScRSp-BRpU-He5.mjs").then((n) => n.n);
 	const triggerResult = await buildTriggerArtifacts(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName, options.projectRoot, {
 		workflowExportName: options.entry.source.localExportName,
 		workflowFilePath: options.entry.runtimeBundlePath
@@ -319,7 +319,7 @@ function createPreparedTaskTarget(artifact, triggers) {
 	};
 }
 async function tryParseTaskBuildManifest(manifest) {
-	const { TaskBuildManifestSchema } = await import("./task-BWuIKWh4.mjs").then((n) => n.t);
+	const { TaskBuildManifestSchema } = await import("./task-DTvLzUkA.mjs").then((n) => n.t);
 	const result = TaskBuildManifestSchema.safeParse(manifest);
 	return result.success ? result.data : null;
 }

package/dist/task-target-deploy-runner.mjs

@@ -2,9 +2,9 @@
 
 import { r as getKeystrokeProjectPath } from "./paths-DpHfoaXN-CdPimpky.mjs";
 import "./default-urls-BoSm4s9C.mjs";
-import "./dist-Dw7gCE7y.mjs";
+import "./dist-B5jy238v.mjs";
 import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { t as resolveCliCredentials } from "./resolve-cli-credentials-CAOSVMJP.mjs";
+import { t as resolveCliCredentials } from "./resolve-cli-credentials-GVOOedoQ.mjs";
 import path from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
@@ -119,7 +119,7 @@ function restartStage(options, projectRoot, stage) {
 }
 async function runBuildPhase(options, projectRoot) {
 	const projectConfig = await assertWorkflowProjectRoot(projectRoot);
-	const { buildTaskTargetEntries } = await import("./task-target-build-QllcCfoN.mjs");
+	const { buildTaskTargetEntries } = await import("./task-target-build-CtvRyVjH.mjs");
 	await writeBuildDescriptor(projectRoot, {
 		projectRoot,
 		projectConfig,
@@ -132,7 +132,7 @@ async function runBuildPhase(options, projectRoot) {
 }
 async function runPreparePhase(projectRoot) {
 	const buildDescriptor = await readBuildDescriptor(projectRoot);
-	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-QllcCfoN.mjs");
+	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-CtvRyVjH.mjs");
 	const prepareResult = await prepareTaskTargetBuiltTasks({
 		builtTasks: buildDescriptor.builtTasks,
 		projectRoot
@@ -163,11 +163,11 @@ async function resolveDeployAuthOptions(options) {
 }
 async function runDeployPhase(options, projectRoot) {
 	const descriptor = await readDescriptor(projectRoot);
-	const { createDeployClient } = await import("./deploy-DhCbYFc7.mjs");
+	const { createDeployClient } = await import("./deploy-BiKBH25R.mjs");
 	const client = createDeployClient(await resolveDeployAuthOptions(options));
 	const auth = await client.public.auth.validate();
 	if (auth.organizationId !== descriptor.projectConfig.organizationId) throw new Error(`Project organization mismatch: config=${descriptor.projectConfig.organizationId} auth=${auth.organizationId}`);
-	const { deployTaskTargets } = await import("./task-target-deploy-B_3HPSo2.mjs");
+	const { deployTaskTargets } = await import("./task-target-deploy-m9LfE488.mjs");
 	const result = await deployTaskTargets({
 		preparedTasks: descriptor.preparedTasks,
 		client,

package/dist/{test-C8VIZe9V.mjs → test-4V7nh67i.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { a as ui } from "./keystroke.mjs";
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
-import { t as createTypedCommand } from "./commander-BlrSdFcu.mjs";
+import { p as ui } from "./keystroke.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-DnIFEmi5.mjs";
+import { t as createTypedCommand } from "./commander-C6SSTQJ2.mjs";
 import { z } from "zod";
 //#region src/commands/test/test.command.ts
 const TestOptionsSchema = JsonOptionSchema;
@@ -44,7 +44,7 @@ const TEST_TOOL_OPTIONS_CONFIG = {
 	}
 };
 function handleTestHelp() {
-	ui.hint("Use `keystroke test tool <toolName> --input='{...}'`. To test workflows, use `keystroke workflows test <workflow>`.");
+	ui.hint("Use `keystroke test tool <toolName> --input='{...}'`. To test workflows, use `keystroke workflows test <authored-workflow-id>`.");
 }
 function createTestCommand() {
 	const cmd = createTypedCommand({
@@ -63,7 +63,7 @@ function createTestCommand() {
 				description: "Agent tool name from the built manifest",
 				key: "toolName"
 			},
-			loadHandler: async () => (await import("./tool.handler-8qNmgdRe.mjs")).handleTestTool
+			loadHandler: async () => (await import("./tool.handler-CPCrSDq2.mjs")).handleTestTool
 		})]
 	});
 	cmd.enablePositionalOptions();

package/dist/{test.handler-BCW0YBPd.mjs → test.handler-BdCYcwR4.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { a as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-sgKhRc5v.mjs";
+import { p as ui } from "./keystroke.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-ebZssGCY.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));

package/dist/{test.handler-DLaxrJ9V.mjs → test.handler-Bo4YTs2Z.mjs}

@@ -1,16 +1,17 @@
 #!/usr/bin/env node
 
-import { D as CliExitError, a as ui, l as isLocalMode, y as toErrorMessage } from "./keystroke.mjs";
-import { i as projects } from "./dist-Dw7gCE7y.mjs";
+import { k as CliExitError, l as isLocalMode, p as ui, x as toErrorMessage } from "./keystroke.mjs";
+import { i as projects } from "./dist-B5jy238v.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-sgKhRc5v.mjs";
-import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-Begvjfq8.mjs";
-import { r as isUnknownSchema } from "./schema-display-FvI8QjOQ.mjs";
-import { t as createBuildProgress } from "./build-progress-DLM1Bt4T.mjs";
-import { t as withErrorBoundary } from "./error-boundary-0veZ_RDS.mjs";
-import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-DawiBus-.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-ebZssGCY.mjs";
+import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DLKlAy0z.mjs";
+import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-Bm8JoVv4.mjs";
+import { a as isUnknownSchema } from "./schema-display-sZ6ConJd.mjs";
+import { t as createBuildProgress } from "./build-progress-CM-b6Bby.mjs";
+import { t as withErrorBoundary } from "./error-boundary-BRxUsPi7.mjs";
+import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-C5fI7xTp.mjs";
+import { n as assertAuthoredWorkflowId, t as WORKFLOW_ID_COMMANDS } from "./authored-workflow-ref-fkHEEVnd.mjs";
 //#region src/lib/format.ts
 function formatBytes(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
@@ -27,6 +28,7 @@ async function resolveAndValidateInputForRun(options) {
 	const input = await resolveInput(options);
 	const workflowsDir = await requireWorkflowsDir(options.path);
 	projects.track(workflowsDir);
+	await assertAuthoredWorkflowId(options.workflow, workflowsDir, WORKFLOW_ID_COMMANDS.test);
 	const existingSchema = await tryReadExistingInputSchema(workflowsDir, options.workflow);
 	if (existingSchema && !isUnknownSchema(existingSchema)) validateInputOrExit(options.workflow, input, existingSchema);
 	return {
@@ -36,7 +38,7 @@ async function resolveAndValidateInputForRun(options) {
 }
 /**
 * Build workflow(s) for run using the standard build pipeline, then read
-* prepared artifacts from disk filtered by workflow ref.
+* prepared artifacts from disk filtered by authored workflow id.
 */
 async function buildWorkflowsForRun(options) {
 	const progress = createBuildProgress(options.workflow);
@@ -47,10 +49,10 @@ async function buildWorkflowsForRun(options) {
 			verbose: options.verbose,
 			onProgressEvent: progress.handleEvent
 		});
-		const filtered = (await readWorkflowsFromDisk(outDir)).filter((wf) => wf.manifestData.id === options.workflow || wf.name === options.workflow);
+		const filtered = (await readWorkflowsFromDisk(outDir)).filter((wf) => wf.manifestData.id === options.workflow);
 		if (filtered.length === 0) {
-			const availableNames = result.artifacts.map((a) => a.manifest.name);
-			throw new WorkflowNotFoundError(options.workflow, availableNames);
+			const availableIds = result.artifacts.map((artifact) => artifact.manifest.id).filter((id) => typeof id === "string" && id.length > 0);
+			throw new WorkflowNotFoundError(options.workflow, availableIds);
 		}
 		return filtered;
 	} finally {
@@ -70,8 +72,9 @@ function validateInputWithFirstBuild(options, input, builds) {
 function renderBuildSuccessMessage(builds) {
 	const first = builds[0];
 	if (!first) return;
-	if (builds.length > 1) ui.success(`Built ${builds.length} workflow(s) with name "${first.name}"`);
-	else ui.success(`Built ${first.name} (${formatBytes(first.bundleSize)})`);
+	const label = first.manifestData.id ?? first.name;
+	if (builds.length > 1) ui.success(`Built ${builds.length} workflow(s) with id "${label}"`);
+	else ui.success(`Built ${label} (${formatBytes(first.bundleSize)})`);
 }
 /**
 * Render completion success message (single or multi).

package/dist/{tool.handler-8qNmgdRe.mjs → tool.handler-CPCrSDq2.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
-import { D as CliExitError, a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
-import { t as Credentials } from "./dist-Dw7gCE7y.mjs";
+import { N as throwReportedCliExit, c as getProcessEnv, k as CliExitError, p as ui, x as toErrorMessage } from "./keystroke.mjs";
+import { t as Credentials } from "./dist-B5jy238v.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-sgKhRc5v.mjs";
-import { a as readManifestsFromOutDir } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-Begvjfq8.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-B1VQCYC-.mjs";
-import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-DawiBus-.mjs";
+import { i as writeJson } from "./output-DnIFEmi5.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-ebZssGCY.mjs";
+import { a as readManifestsFromOutDir } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DLKlAy0z.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-Bm8JoVv4.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-C6x65imE.mjs";
+import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-C5fI7xTp.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";
 import * as os from "node:os";
@@ -41,7 +41,7 @@ function createTestWorkflowContext(options = {}) {
 	};
 }
 //#endregion
-//#region ../../packages/core/dist/chunks/execution-scope-BCDb3CU7.mjs
+//#region ../../packages/core/dist/chunks/execution-scope-C0XN_QSm.mjs
 const SCOPE_STACK_KEY = "__ks_execution_scope_stack__";
 function getScopeStack() {
 	const g = globalThis;
@@ -75,7 +75,7 @@ function setExecutionScopeStepCredentialResolver(resolver) {
 	scope.stepCredentialResolver = resolver;
 }
 //#endregion
-//#region ../../packages/core/dist/chunks/credential-resolver-registry-BRH30wCz.mjs
+//#region ../../packages/core/dist/chunks/credential-resolver-registry-DDCfrXbA.mjs
 function registerOperationContext(registry) {
 	pushExecutionScopeStepContext(registry.getOperationContext);
 }
@@ -89,7 +89,7 @@ function clearOperationCredentialResolver() {
 	setExecutionScopeStepCredentialResolver(void 0);
 }
 //#endregion
-//#region ../../packages/core/dist/chunks/context-registry-DqNWcTgK.mjs
+//#region ../../packages/core/dist/chunks/context-registry-XkpuCrWY.mjs
 function registerRuntime(registry) {
 	setExecutionScopeWorkflowRuntime(registry.getRuntime);
 }

package/dist/{trigger-artifacts-BcRScRSp-BiD2h6do.mjs → trigger-artifacts-BcRScRSp-BRpU-He5.mjs}

@@ -2,8 +2,8 @@
 
 import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-B6h4WRv4.mjs";
 import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-RuJszab7.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DGK5XTQp.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-COq4U-4Y.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-I07NYwfH.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-r4aynBU0.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/trigger-artifacts-BcRScRSp.mjs

package/dist/{trigger-manifest-C07EM-b2.mjs → trigger-manifest-BVqjDhxU.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { t as JsonSchemaSchema } from "./common-AK0q0Oz0.mjs";
-import { c as TriggerSourceSchema, i as IdempotencyKeyConfigSchema, l as TriggerTypeSchema, s as TriggerCredentialRequirementsSchema } from "./credential-requirements-D0mavK8j-CFMf0Xwu.mjs";
+import { c as TriggerSourceSchema, i as IdempotencyKeyConfigSchema, l as TriggerTypeSchema, s as TriggerCredentialRequirementsSchema } from "./credential-requirements-B5Alhu1v-DanlSKnT.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({