@keystrokehq/cli 0.0.32 → 0.0.37

package/dist/{dist-CTEtWDW4.mjs → dist-BmbFJq8U.mjs}

@@ -3,15 +3,15 @@
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
 import { n as SHA256HashSchema } from "./common-AK0q0Oz0.mjs";
-import { f as collectCredentialRequirementEntries, u as TriggerUploadDataSchema } from "./credential-requirements-D0mavK8j-CFMf0Xwu.mjs";
-import { a as FlowGraphSchema, r as WorkflowBuildManifestSchema } from "./workflow-build-manifest-1sC52TIG.mjs";
-import { t as AgentVersionManifestSchema } from "./agent-manifest-De5TCxZq.mjs";
-import { n as TaskBuildManifestSchema } from "./task-BWuIKWh4.mjs";
+import { f as collectCredentialRequirementEntries, u as TriggerUploadDataSchema } from "./credential-requirements-B5Alhu1v-DanlSKnT.mjs";
+import { a as FlowGraphSchema, r as WorkflowBuildManifestSchema } from "./workflow-build-manifest-CV6bBmDO.mjs";
+import { t as AgentVersionManifestSchema } from "./agent-manifest-DfWD5tvv.mjs";
+import { n as TaskBuildManifestSchema } from "./task-DTvLzUkA.mjs";
 import { n as FileMetadataSchema } from "./file-metadata-DQVDjr7M.mjs";
 import { t as computeProjectSnapshotHash } from "./task-target-deploy-dQYnMO8n-d2vdeqXH.mjs";
 import { a as MANIFEST_FILE_NAME, d as getMetadataRoot, f as getTriggersDir, m as getWorkflowManifestPath, p as getWorkflowArtifactPaths, t as BUILD_DIR_NAME } from "./layout-B95Tku8F.mjs";
 import { n as resolveProjectBuildOutputDir } from "./utils-BaxDlCsW.mjs";
-import { t as TriggerBuildManifestSchema } from "./trigger-manifest-C07EM-b2.mjs";
+import { t as TriggerBuildManifestSchema } from "./trigger-manifest-BVqjDhxU.mjs";
 import { t as batchUpload } from "./upload-CE4H5R1h.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";
@@ -33,11 +33,7 @@ var dist_exports = /* @__PURE__ */ __exportAll({
 const AGENT_ARTIFACT_DIR_PREFIX$1 = "agent_";
 /**
 * Reads all workflow manifests from the dist output directory.
-* Optionally filters by workflow ref: tries authored id first, then name.
-*
-* When ref is provided:
-* - First match: manifest.id === ref
-* - Fallback: manifest.name === ref
+* When `ref` is provided, returns manifests whose authored workflow id matches exactly.
 *
 * Returns [] when the dist directory does not exist or is unreadable.
 */
@@ -45,8 +41,6 @@ async function readManifestsFromOutDir(workflowsDir, ref) {
 	const distDir = await resolveProjectBuildOutputDir(workflowsDir);
 	const entries = await fs.readdir(distDir, { withFileTypes: true }).catch(() => null);
 	if (!entries) return [];
-	const byId = [];
-	const byName = [];
 	const all = [];
 	for (const entry of entries) {
 		if (!entry.isDirectory()) continue;
@@ -55,26 +49,13 @@ async function readManifestsFromOutDir(workflowsDir, ref) {
 			const raw = await fs.readFile(manifestPath, "utf-8");
 			const parsed = WorkflowBuildManifestSchema.safeParse(JSON.parse(raw));
 			if (!parsed.success) continue;
-			if (ref === void 0) {
-				all.push({
-					manifest: parsed.data,
-					manifestPath
-				});
-				continue;
-			}
-			if (parsed.data.id === ref) byId.push({
-				manifest: parsed.data,
-				manifestPath
-			});
-			else if (parsed.data.name === ref) byName.push({
+			if (ref === void 0 || parsed.data.id === ref) all.push({
 				manifest: parsed.data,
 				manifestPath
 			});
 		} catch {}
 	}
-	if (ref === void 0) return all;
-	if (byId.length > 0) return byId;
-	return byName;
+	return all;
 }
 /**
 * Reads all built agent version manifests from the dist output directory.

package/dist/{env.handler-Dks6ZQh-.mjs → env.handler-V_isbSi2.mjs}

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
 
-import { D as CliExitError, _ as isAuthError, a as ui, j as throwReportedCliExit, m as REAUTH_HINT, n as style, t as ANSI, v as isNetworkError, y as toErrorMessage } from "./keystroke.mjs";
-import { i as projects } from "./dist-Dw7gCE7y.mjs";
-import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-sgKhRc5v.mjs";
+import { N as throwReportedCliExit, b as isNetworkError, g as REAUTH_HINT, k as CliExitError, n as style, p as ui, t as ANSI, x as toErrorMessage, y as isAuthError } from "./keystroke.mjs";
+import { i as projects } from "./dist-B5jy238v.mjs";
+import { i as writeJson } from "./output-DnIFEmi5.mjs";
+import { i as requireClient } from "./context-ebZssGCY.mjs";
 import { n as CredentialConnectionIdSchema, r as CredentialScopeSchema, t as ConnectionStatusSchema } from "./schema-DFJiNWyd.mjs";
-import { a as readManifestsFromOutDir } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-CiZ62hb_.mjs";
-import { t as groupCredentialRequirements } from "./credentials-DKrSaaLw.mjs";
+import { a as readManifestsFromOutDir } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DLKlAy0z.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-pSmWHFLQ.mjs";
+import { t as groupCredentialRequirements } from "./credentials-DtwLbee6.mjs";
+import { n as assertAuthoredWorkflowId, t as WORKFLOW_ID_COMMANDS } from "./authored-workflow-ref-fkHEEVnd.mjs";
 import { z } from "zod";
 import Table from "cli-table3";
 //#region ../../packages/shared-types/src/credentials/api/responses.ts
@@ -120,14 +121,24 @@ async function handleWorkflowsEnv(options, ctx) {
 	const client = requireClient(ctx);
 	const workflowsDir = await requireWorkflowsDir(options.path);
 	projects.track(workflowsDir);
+	if (options.workflow) await assertAuthoredWorkflowId(options.workflow, workflowsDir, WORKFLOW_ID_COMMANDS.env);
 	const manifests = await readManifestsFromOutDir(workflowsDir, options.workflow);
-	if (manifests.length === 0) if (options.workflow) {
-		ui.error(`Workflow "${options.workflow}" not found.`);
-		ui.hint("Run `keystroke workflows build` first, then re-run this command.");
-		throwReportedCliExit(`Workflow "${options.workflow}" not found.`);
-	} else {
+	if (manifests.length === 0) {
+		if (ctx.jsonMode && !options.workflow) {
+			writeJson([]);
+			return;
+		}
+		if (options.workflow) {
+			const allManifests = await readManifestsFromOutDir(workflowsDir);
+			renderWorkflowNotFound(options.workflow, allManifests.map(({ manifest }) => manifest.id));
+			throwReportedCliExit(`Workflow "${options.workflow}" not found.`);
+		}
 		ui.hint("No built manifests found.");
 		ui.hint("Run `keystroke workflows build` first, then re-run this command.");
+		if (options.check) throw new CliExitError("No built workflow manifests found.", {
+			exitCode: 1,
+			reported: true
+		});
 		return;
 	}
 	const catalog = await getIntegrationCatalog(ctx);
@@ -150,24 +161,36 @@ async function handleWorkflowsEnv(options, ctx) {
 		}
 		throw error;
 	}
-	if (ctx.jsonMode) writeJson(results.map((r) => ({
-		workflowName: r.workflowName,
-		requirements: r.requirements.map((req) => ({
-			varName: req.varName,
-			credentialSetId: req.credentialSetId,
-			sourceLabel: req.sourceLabel,
-			scope: req.scope,
-			isPresent: req.status === "set"
-		}))
-	})));
+	if (ctx.jsonMode) writeJson(results.map(toWorkflowEnvJsonResult));
 	else renderTable(results);
 	if (options.check) {
-		if (results.some((r) => r.requirements.some((req) => req.status === "missing"))) throw new CliExitError("Missing workflow environment requirements.", {
+		if (results.some((r) => r.requirements.some((req) => req.status === "missing"))) throw new CliExitError("Missing workflow credential configuration.", {
 			exitCode: 1,
 			reported: true
 		});
 	}
 }
+function renderWorkflowNotFound(workflowId, availableWorkflowIds) {
+	ui.error(`Workflow "${workflowId}" not found.`);
+	if (availableWorkflowIds.length > 0) {
+		ui.hint(`Available workflow ids: ${availableWorkflowIds.join(", ")}`);
+		return;
+	}
+	ui.hint("Run `keystroke workflows build` first, then re-run this command.");
+}
+function toWorkflowEnvJsonResult(result) {
+	return {
+		workflowName: result.workflowName,
+		requirements: result.requirements.map((req) => ({
+			varName: req.varName,
+			credentialSetId: req.credentialSetId,
+			sourceLabel: req.sourceLabel,
+			scope: req.scope,
+			status: req.status
+		})),
+		fixes: result.fixes
+	};
+}
 async function buildWorkflowEnvResult(manifest, client, catalog) {
 	const seen = /* @__PURE__ */ new Set();
 	const requirements = [];
@@ -224,14 +247,14 @@ function renderTable(results) {
 	for (const result of results) {
 		ui.text(style(`◆  Workflow: ${result.workflowName}`, ANSI.bold));
 		if (result.requirements.length === 0) {
-			ui.hint("  No environment variables required.");
+			ui.hint("  No server-side credentials required.");
 			ui.br();
 			continue;
 		}
 		const table = new Table({
 			head: [
-				"Variable",
-				"Source",
+				"Credential Key",
+				"Credential Set",
 				"Scope",
 				"Status"
 			],
@@ -250,12 +273,12 @@ function renderTable(results) {
 		const missingCount = result.requirements.filter((r) => r.status === "missing").length;
 		const total = result.requirements.length;
 		if (missingCount > 0) {
-			ui.warn(`${missingCount} of ${total} required credential(s) are missing on the server.`);
+			ui.warn(`${missingCount} of ${total} required server-side credential(s) are not configured.`);
 			if (result.fixes.length > 0) {
 				ui.text("Suggested fixes:");
 				for (const fix of result.fixes) ui.hint(`  ${fix.summary}`);
 			}
-		} else if (total > 0) ui.success(`All ${total} required credential(s) are set on the server.`);
+		} else if (total > 0) ui.success(`All ${total} required server-side credential(s) are configured.`);
 		ui.br();
 	}
 }

package/dist/{error-boundary-0veZ_RDS.mjs → error-boundary-BRxUsPi7.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { D as CliExitError, P as logger, a as ui, v as isNetworkError, y as toErrorMessage } from "./keystroke.mjs";
-import { r as isJsonMode } from "./output-BWcVRt-T.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-ClQgEVtO.mjs";
+import { I as logger, b as isNetworkError, k as CliExitError, p as ui, x as toErrorMessage } from "./keystroke.mjs";
+import { r as isJsonMode } from "./output-DnIFEmi5.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-c17ktoNU.mjs";
 //#region src/lib/error-boundary.ts
 async function withErrorBoundary(commandName, fn, options = {}) {
 	const jsonMode = options.json ?? isJsonMode({});

package/dist/{iam-command-utils-CSZj4XlH.mjs → iam-command-utils-DNDN0wT6.mjs}

@@ -1,18 +1,8 @@
 #!/usr/bin/env node
 
-import { a as ui, g as getHttpStatus, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
-import { a as writeJsonError } from "./output-BWcVRt-T.mjs";
+import { N as throwReportedCliExit, p as ui, v as getHttpStatus, x as toErrorMessage } from "./keystroke.mjs";
+import { a as writeJsonError } from "./output-DnIFEmi5.mjs";
 //#region src/lib/iam-command-utils.ts
-function requireOrganizationId(ctx) {
-	if (ctx.organizationId) return ctx.organizationId;
-	const message = "Organization context is required. Pass --org or run `keystroke org switch`.";
-	if (ctx.jsonMode) writeJsonError(message, {
-		code: "ORG_REQUIRED",
-		hint: "Pass --org <organization-id> or run `keystroke org switch`."
-	});
-	ui.error(message);
-	throwReportedCliExit(message);
-}
 function isIamJsonMode(options, ctx) {
 	return options.json === true || ctx.jsonMode;
 }
@@ -69,4 +59,4 @@ async function readApiErrorBody(error) {
 	}
 }
 //#endregion
-export { requireOrganizationId as i, isIamJsonMode as n, requireConfirmation as r, handleIamError as t };
+export { isIamJsonMode as n, requireConfirmation as r, handleIamError as t };