@keystrokehq/cli 0.0.32 → 0.0.38

package/dist/{switch.handler-BwYndsP-.mjs → switch.handler-D135WwfB.mjs}

@@ -1,13 +1,21 @@
 #!/usr/bin/env node
 
-import { a as ui, j as throwReportedCliExit } from "./keystroke.mjs";
-import { n as credentials } from "./dist-Dw7gCE7y.mjs";
-import { i as requireClient } from "./context-sgKhRc5v.mjs";
+import { P as throwReportedCliExit, p as ui } from "./keystroke.mjs";
+import { n as credentials } from "./dist-B5jy238v.mjs";
+import { i as requireClient } from "./context-Brc9VGV9.mjs";
+import { c as resolveEffectiveOrganization, n as ORG_STORED_KEYS_HINT, t as ORG_CONTEXT_HINT } from "./org-context-CNh2p2DP.mjs";
 import { select } from "@clack/prompts";
 //#region src/commands/org/switch.handler.ts
 async function handleOrgSwitch(_options, ctx) {
+	if (!process.stdin.isTTY || !process.stdout.isTTY) {
+		const message = "Organization switch requires an interactive terminal.";
+		ui.error(message);
+		ui.hint(ORG_CONTEXT_HINT);
+		throwReportedCliExit(message);
+	}
 	const { user } = await requireClient(ctx).users.getMe();
 	const orgs = user.organizations ?? [];
+	const currentOrgId = (await resolveEffectiveOrganization(ctx, orgs))?.organizationId;
 	const storedOrgIds = new Set(ctx.storedOrgs.map((o) => o.organizationId));
 	if (orgs.length === 0) {
 		ui.warn("You do not belong to any organization.");
@@ -18,10 +26,15 @@ async function handleOrgSwitch(_options, ctx) {
 		ui.hint(`You only belong to one organization: ${name}`);
 		return;
 	}
+	if (storedOrgIds.size === 0) {
+		ui.warn("No stored API keys for any organization.");
+		ui.hint(ORG_STORED_KEYS_HINT);
+		return;
+	}
 	const selected = await select({
 		message: "Switch to organization:",
 		options: orgs.map((org) => {
-			const isCurrent = org.id === ctx.organizationId;
+			const isCurrent = org.id === currentOrgId;
 			const hasKey = storedOrgIds.has(org.id);
 			const hint = isCurrent ? "(current)" : hasKey ? void 0 : "No stored key, run `keystroke auth`";
 			return {

package/dist/{sync-6fZkIUtn.mjs → sync-CFScllh3.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-BlrSdFcu.mjs";
+import { t as createTypedCommand } from "./commander-B_8QwPpe.mjs";
 import { z } from "zod";
 //#region src/commands/sync/sync.command.ts
 /**
@@ -32,7 +32,7 @@ function createSyncCommand() {
 		description: "Sync local workflows with Keystroke",
 		schema: SyncOptionsSchema,
 		optionsConfig: SYNC_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./sync.handler-Ctr-cN9X.mjs")).handleSync
+		loadHandler: async () => (await import("./sync.handler-x8v53-TT.mjs")).handleSync
 	});
 }
 //#endregion

package/dist/{sync.handler-Ctr-cN9X.mjs → sync.handler-x8v53-TT.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
-import { P as logger, a as ui, j as throwReportedCliExit, l as isLocalMode, y as toErrorMessage } from "./keystroke.mjs";
-import { i as projects } from "./dist-Dw7gCE7y.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-sgKhRc5v.mjs";
-import { n as deployFromDir } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-Begvjfq8.mjs";
-import { t as createBuildProgress } from "./build-progress-DLM1Bt4T.mjs";
-import { t as createDeployProgress } from "./deploy-progress-BsUH7fGE.mjs";
+import { L as logger, P as throwReportedCliExit, S as toErrorMessage, l as isLocalMode, p as ui } from "./keystroke.mjs";
+import { i as projects } from "./dist-B5jy238v.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-Brc9VGV9.mjs";
+import { n as deployFromDir } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-Db6at6IA.mjs";
+import { t as createBuildProgress } from "./build-progress-D_SQqdHA.mjs";
+import { t as createDeployProgress } from "./deploy-progress-BDOCSm_U.mjs";
 //#region src/commands/sync/sync.handler.ts
 async function handleSync(options, ctx) {
 	try {

package/dist/{task-BWuIKWh4.mjs → task-DTvLzUkA.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
-import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, f as parseCronExpression, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-D2zfmyC-.mjs";
+import { a as descriptionString, c as optionalDescriptionString, d as trimmedNonEmptyStringUnbounded, i as createStructuralSchema, n as credentialSetProxyConfigSchema, o as idNoSpacesString, s as jsonSchemaObject, t as CredentialSetManifestSchema, u as trimmedNonEmptyString } from "./schemas-ClAIoIrX.mjs";
 import { z } from "zod";
 import "node:crypto";
 const SHA256HashSchema = z.string().length(64, "Must be 64 characters").regex(/^[a-f0-9]{64}$/i, "Must be hexadecimal").transform((value) => value);
@@ -20,94 +20,8 @@ z.object({
 	return data.constant !== void 0 !== (data.exponential !== void 0);
 }, { error: "Retry config must specify exactly one of constant or exponential strategy" });
 //#endregion
-//#region ../../packages/core/src/shared/schedule.ts
-/**
-* shared/schedule.ts
-*
-* Unified schedule type that supports both simple intervals and cron expressions.
-* Can be used in both cron and polling triggers for maximum flexibility.
-*
-* Template literal types provide compile-time type safety.
-* Zod schemas with refinements provide runtime validation.
-*/
+//#region ../../packages/core/src/shared/duration.ts
 const DurationSchema = z.union([z.number().int().positive().finite(), z.string().regex(/^[1-9]\d*[smhdwy]$/)]);
-const DurationStringSchema = z.string().refine((val) => /^\d+[smhdwy]$/.test(val), { message: "Invalid duration format. Must be a positive integer followed by s, m, h, d, w, or y (e.g., \"5m\", \"1h\")" }).refine((val) => {
-	const match = val.match(/^(\d+)[smhdwy]$/);
-	if (!match?.[1]) return false;
-	const num = Number.parseInt(match[1], 10);
-	return num > 0 && Number.isFinite(num);
-}, { message: "Duration value must be a positive integer greater than 0" });
-const CronExpressionSchema = z.string().superRefine((val, ctx) => {
-	try {
-		parseCronExpression(val);
-	} catch (error) {
-		const errorMessage = error instanceof Error ? error.message : "Invalid cron expression format";
-		ctx.addIssue({
-			code: "custom",
-			message: `Invalid cron expression: ${errorMessage}. Must be a valid 5-field cron: minute hour day month weekday (e.g., "0 9 * * *", "*/15 * * * *")`
-		});
-	}
-});
-z.union([
-	z.number().refine((val) => val > 0, { message: "Duration in milliseconds must be positive" }).refine(Number.isFinite, { message: "Duration in milliseconds must be finite" }).refine(Number.isInteger, { message: "Duration in milliseconds must be an integer" }),
-	DurationStringSchema,
-	CronExpressionSchema
-]);
-z.enum([
-	"UTC",
-	"GMT",
-	"Etc/UTC",
-	"Etc/GMT",
-	"America/New_York",
-	"America/Chicago",
-	"America/Denver",
-	"America/Los_Angeles",
-	"America/Phoenix",
-	"America/Anchorage",
-	"America/Toronto",
-	"America/Vancouver",
-	"America/Mexico_City",
-	"America/Sao_Paulo",
-	"America/Buenos_Aires",
-	"Europe/London",
-	"Europe/Paris",
-	"Europe/Berlin",
-	"Europe/Rome",
-	"Europe/Madrid",
-	"Europe/Amsterdam",
-	"Europe/Stockholm",
-	"Europe/Vienna",
-	"Europe/Zurich",
-	"Europe/Moscow",
-	"Europe/Athens",
-	"Europe/Dublin",
-	"Asia/Tokyo",
-	"Asia/Shanghai",
-	"Asia/Hong_Kong",
-	"Asia/Singapore",
-	"Asia/Seoul",
-	"Asia/Dubai",
-	"Asia/Kolkata",
-	"Asia/Bangkok",
-	"Asia/Jakarta",
-	"Asia/Manila",
-	"Asia/Taipei",
-	"Australia/Sydney",
-	"Australia/Melbourne",
-	"Australia/Brisbane",
-	"Australia/Perth",
-	"Australia/Adelaide",
-	"Pacific/Auckland",
-	"Pacific/Honolulu",
-	"Africa/Cairo",
-	"Africa/Johannesburg",
-	"Africa/Lagos",
-	"Africa/Nairobi",
-	"Asia/Riyadh",
-	"Asia/Tehran",
-	"Asia/Jerusalem",
-	"Asia/Doha"
-]);
 //#endregion
 //#region ../../packages/core/src/artifacts/source-analysis.ts
 const SourceLocationSchema = z.object({

package/dist/{task-target-build-QllcCfoN.mjs → task-target-build-CtvRyVjH.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { r as getKeystrokeProjectPath } from "./paths-DpHfoaXN-CdPimpky.mjs";
-import "./dist-Dw7gCE7y.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DGK5XTQp.mjs";
+import "./dist-B5jy238v.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-I07NYwfH.mjs";
 import path from "node:path";
 import { mkdir, writeFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
@@ -111,7 +111,7 @@ async function buildTaskTargetFile(options) {
 	return builtTasks;
 }
 async function bundleTaskTargetModule(options) {
-	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-COq4U-4Y.mjs").then((n) => n.n).then((n) => n.n)]);
+	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-r4aynBU0.mjs").then((n) => n.n).then((n) => n.n)]);
 	const entryId = "\0virtual:task-target-entry";
 	const trackedDependencies = /* @__PURE__ */ new Set();
 	const envViolations = [];
@@ -218,7 +218,7 @@ async function attachTaskTargetTriggers(options) {
 		options.artifact.triggers.push(...buildTaskTriggerArtifactsWithoutBundles(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName));
 		return [];
 	}
-	const { buildTriggerArtifacts } = await import("./trigger-artifacts-BcRScRSp-BiD2h6do.mjs").then((n) => n.n);
+	const { buildTriggerArtifacts } = await import("./trigger-artifacts-BcRScRSp-BRpU-He5.mjs").then((n) => n.n);
 	const triggerResult = await buildTriggerArtifacts(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName, options.projectRoot, {
 		workflowExportName: options.entry.source.localExportName,
 		workflowFilePath: options.entry.runtimeBundlePath
@@ -319,7 +319,7 @@ function createPreparedTaskTarget(artifact, triggers) {
 	};
 }
 async function tryParseTaskBuildManifest(manifest) {
-	const { TaskBuildManifestSchema } = await import("./task-BWuIKWh4.mjs").then((n) => n.t);
+	const { TaskBuildManifestSchema } = await import("./task-DTvLzUkA.mjs").then((n) => n.t);
 	const result = TaskBuildManifestSchema.safeParse(manifest);
 	return result.success ? result.data : null;
 }

package/dist/task-target-deploy-runner.mjs

@@ -2,9 +2,9 @@
 
 import { r as getKeystrokeProjectPath } from "./paths-DpHfoaXN-CdPimpky.mjs";
 import "./default-urls-BoSm4s9C.mjs";
-import "./dist-Dw7gCE7y.mjs";
+import "./dist-B5jy238v.mjs";
 import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { t as resolveCliCredentials } from "./resolve-cli-credentials-CAOSVMJP.mjs";
+import { t as resolveCliCredentials } from "./resolve-cli-credentials-GVOOedoQ.mjs";
 import path from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
@@ -119,7 +119,7 @@ function restartStage(options, projectRoot, stage) {
 }
 async function runBuildPhase(options, projectRoot) {
 	const projectConfig = await assertWorkflowProjectRoot(projectRoot);
-	const { buildTaskTargetEntries } = await import("./task-target-build-QllcCfoN.mjs");
+	const { buildTaskTargetEntries } = await import("./task-target-build-CtvRyVjH.mjs");
 	await writeBuildDescriptor(projectRoot, {
 		projectRoot,
 		projectConfig,
@@ -132,7 +132,7 @@ async function runBuildPhase(options, projectRoot) {
 }
 async function runPreparePhase(projectRoot) {
 	const buildDescriptor = await readBuildDescriptor(projectRoot);
-	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-QllcCfoN.mjs");
+	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-CtvRyVjH.mjs");
 	const prepareResult = await prepareTaskTargetBuiltTasks({
 		builtTasks: buildDescriptor.builtTasks,
 		projectRoot
@@ -163,11 +163,11 @@ async function resolveDeployAuthOptions(options) {
 }
 async function runDeployPhase(options, projectRoot) {
 	const descriptor = await readDescriptor(projectRoot);
-	const { createDeployClient } = await import("./deploy-DhCbYFc7.mjs");
+	const { createDeployClient } = await import("./deploy-BiKBH25R.mjs");
 	const client = createDeployClient(await resolveDeployAuthOptions(options));
 	const auth = await client.public.auth.validate();
 	if (auth.organizationId !== descriptor.projectConfig.organizationId) throw new Error(`Project organization mismatch: config=${descriptor.projectConfig.organizationId} auth=${auth.organizationId}`);
-	const { deployTaskTargets } = await import("./task-target-deploy-B_3HPSo2.mjs");
+	const { deployTaskTargets } = await import("./task-target-deploy-m9LfE488.mjs");
 	const result = await deployTaskTargets({
 		preparedTasks: descriptor.preparedTasks,
 		client,

package/dist/{test-C8VIZe9V.mjs → test-Dx4RXoLZ.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { a as ui } from "./keystroke.mjs";
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BWcVRt-T.mjs";
-import { t as createTypedCommand } from "./commander-BlrSdFcu.mjs";
+import { p as ui } from "./keystroke.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-BPydP5tG.mjs";
+import { t as createTypedCommand } from "./commander-B_8QwPpe.mjs";
 import { z } from "zod";
 //#region src/commands/test/test.command.ts
 const TestOptionsSchema = JsonOptionSchema;
@@ -44,7 +44,7 @@ const TEST_TOOL_OPTIONS_CONFIG = {
 	}
 };
 function handleTestHelp() {
-	ui.hint("Use `keystroke test tool <toolName> --input='{...}'`. To test workflows, use `keystroke workflows test <workflow>`.");
+	ui.hint("Use `keystroke test tool <toolName> --input='{...}'`. To test workflows, use `keystroke workflows test <authored-workflow-id>`.");
 }
 function createTestCommand() {
 	const cmd = createTypedCommand({
@@ -63,7 +63,7 @@ function createTestCommand() {
 				description: "Agent tool name from the built manifest",
 				key: "toolName"
 			},
-			loadHandler: async () => (await import("./tool.handler-8qNmgdRe.mjs")).handleTestTool
+			loadHandler: async () => (await import("./tool.handler-DsbpocYI.mjs")).handleTestTool
 		})]
 	});
 	cmd.enablePositionalOptions();

package/dist/{test.handler-DLaxrJ9V.mjs → test.handler-BmvL5vF8.mjs}

@@ -1,16 +1,17 @@
 #!/usr/bin/env node
 
-import { D as CliExitError, a as ui, l as isLocalMode, y as toErrorMessage } from "./keystroke.mjs";
-import { i as projects } from "./dist-Dw7gCE7y.mjs";
+import { A as CliExitError, S as toErrorMessage, l as isLocalMode, p as ui } from "./keystroke.mjs";
+import { i as projects } from "./dist-B5jy238v.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-sgKhRc5v.mjs";
-import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-Begvjfq8.mjs";
-import { r as isUnknownSchema } from "./schema-display-FvI8QjOQ.mjs";
-import { t as createBuildProgress } from "./build-progress-DLM1Bt4T.mjs";
-import { t as withErrorBoundary } from "./error-boundary-0veZ_RDS.mjs";
-import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-DawiBus-.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Brc9VGV9.mjs";
+import { o as readWorkflowsFromDisk, s as uploadTestBundle } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
+import { a as runWorkflowBuild, t as WorkflowNotFoundError } from "./workflow-build-Db6at6IA.mjs";
+import { a as isUnknownSchema } from "./schema-display-sZ6ConJd.mjs";
+import { t as createBuildProgress } from "./build-progress-D_SQqdHA.mjs";
+import { t as withErrorBoundary } from "./error-boundary-D2DiCLAp.mjs";
+import { a as tryReadExistingInputSchema, n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-htHWhG0T.mjs";
+import { n as assertAuthoredWorkflowId, t as WORKFLOW_ID_COMMANDS } from "./authored-workflow-ref-BRCQgyWl.mjs";
 //#region src/lib/format.ts
 function formatBytes(bytes) {
 	if (bytes < 1024) return `${bytes} B`;
@@ -27,6 +28,7 @@ async function resolveAndValidateInputForRun(options) {
 	const input = await resolveInput(options);
 	const workflowsDir = await requireWorkflowsDir(options.path);
 	projects.track(workflowsDir);
+	await assertAuthoredWorkflowId(options.workflow, workflowsDir, WORKFLOW_ID_COMMANDS.test);
 	const existingSchema = await tryReadExistingInputSchema(workflowsDir, options.workflow);
 	if (existingSchema && !isUnknownSchema(existingSchema)) validateInputOrExit(options.workflow, input, existingSchema);
 	return {
@@ -36,7 +38,7 @@ async function resolveAndValidateInputForRun(options) {
 }
 /**
 * Build workflow(s) for run using the standard build pipeline, then read
-* prepared artifacts from disk filtered by workflow ref.
+* prepared artifacts from disk filtered by authored workflow id.
 */
 async function buildWorkflowsForRun(options) {
 	const progress = createBuildProgress(options.workflow);
@@ -47,10 +49,10 @@ async function buildWorkflowsForRun(options) {
 			verbose: options.verbose,
 			onProgressEvent: progress.handleEvent
 		});
-		const filtered = (await readWorkflowsFromDisk(outDir)).filter((wf) => wf.manifestData.id === options.workflow || wf.name === options.workflow);
+		const filtered = (await readWorkflowsFromDisk(outDir)).filter((wf) => wf.manifestData.id === options.workflow);
 		if (filtered.length === 0) {
-			const availableNames = result.artifacts.map((a) => a.manifest.name);
-			throw new WorkflowNotFoundError(options.workflow, availableNames);
+			const availableIds = result.artifacts.map((artifact) => artifact.manifest.id).filter((id) => typeof id === "string" && id.length > 0);
+			throw new WorkflowNotFoundError(options.workflow, availableIds);
 		}
 		return filtered;
 	} finally {
@@ -70,8 +72,9 @@ function validateInputWithFirstBuild(options, input, builds) {
 function renderBuildSuccessMessage(builds) {
 	const first = builds[0];
 	if (!first) return;
-	if (builds.length > 1) ui.success(`Built ${builds.length} workflow(s) with name "${first.name}"`);
-	else ui.success(`Built ${first.name} (${formatBytes(first.bundleSize)})`);
+	const label = first.manifestData.id ?? first.name;
+	if (builds.length > 1) ui.success(`Built ${builds.length} workflow(s) with id "${label}"`);
+	else ui.success(`Built ${label} (${formatBytes(first.bundleSize)})`);
 }
 /**
 * Render completion success message (single or multi).

package/dist/{test.handler-BCW0YBPd.mjs → test.handler-Mz_XOnJl.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { a as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-sgKhRc5v.mjs";
+import { p as ui } from "./keystroke.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-Brc9VGV9.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));

package/dist/{tool.handler-8qNmgdRe.mjs → tool.handler-DsbpocYI.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
-import { D as CliExitError, a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
-import { t as Credentials } from "./dist-Dw7gCE7y.mjs";
+import { A as CliExitError, P as throwReportedCliExit, S as toErrorMessage, c as getProcessEnv, p as ui } from "./keystroke.mjs";
+import { t as Credentials } from "./dist-B5jy238v.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-sgKhRc5v.mjs";
-import { a as readManifestsFromOutDir } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-Begvjfq8.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-B1VQCYC-.mjs";
-import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-DawiBus-.mjs";
+import { i as writeJson } from "./output-BPydP5tG.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Brc9VGV9.mjs";
+import { a as readManifestsFromOutDir } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-Db6at6IA.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-CknsHF5T.mjs";
+import { n as resolveInput, o as validateInputOrExit, t as pollForCompletion } from "./run-polling-htHWhG0T.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";
 import * as os from "node:os";
@@ -41,7 +41,7 @@ function createTestWorkflowContext(options = {}) {
 	};
 }
 //#endregion
-//#region ../../packages/core/dist/chunks/execution-scope-BCDb3CU7.mjs
+//#region ../../packages/core/dist/chunks/execution-scope-C0XN_QSm.mjs
 const SCOPE_STACK_KEY = "__ks_execution_scope_stack__";
 function getScopeStack() {
 	const g = globalThis;
@@ -75,7 +75,7 @@ function setExecutionScopeStepCredentialResolver(resolver) {
 	scope.stepCredentialResolver = resolver;
 }
 //#endregion
-//#region ../../packages/core/dist/chunks/credential-resolver-registry-BRH30wCz.mjs
+//#region ../../packages/core/dist/chunks/credential-resolver-registry-DDCfrXbA.mjs
 function registerOperationContext(registry) {
 	pushExecutionScopeStepContext(registry.getOperationContext);
 }
@@ -89,7 +89,7 @@ function clearOperationCredentialResolver() {
 	setExecutionScopeStepCredentialResolver(void 0);
 }
 //#endregion
-//#region ../../packages/core/dist/chunks/context-registry-DqNWcTgK.mjs
+//#region ../../packages/core/dist/chunks/context-registry-XkpuCrWY.mjs
 function registerRuntime(registry) {
 	setExecutionScopeWorkflowRuntime(registry.getRuntime);
 }

package/dist/{trigger-artifacts-BcRScRSp-BiD2h6do.mjs → trigger-artifacts-BcRScRSp-BRpU-He5.mjs}

@@ -2,8 +2,8 @@
 
 import { n as readOptionalJsonSchemaKeys } from "./declared-credential-requirements-B6h4WRv4.mjs";
 import { t as __exportAll } from "./rolldown-runtime-twds-ZHy-RuJszab7.mjs";
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-DGK5XTQp.mjs";
-import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-COq4U-4Y.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-I07NYwfH.mjs";
+import { r as formatEnvAccessError, t as createEnvAccessPlugin } from "./detect-env-access-CwkOYeYM-r4aynBU0.mjs";
 import { createHash } from "node:crypto";
 import { rolldown } from "rolldown";
 //#region ../../packages/workflow-builder/dist/trigger-artifacts-BcRScRSp.mjs

package/dist/{trigger-manifest-C07EM-b2.mjs → trigger-manifest-BVqjDhxU.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { t as JsonSchemaSchema } from "./common-AK0q0Oz0.mjs";
-import { c as TriggerSourceSchema, i as IdempotencyKeyConfigSchema, l as TriggerTypeSchema, s as TriggerCredentialRequirementsSchema } from "./credential-requirements-D0mavK8j-CFMf0Xwu.mjs";
+import { c as TriggerSourceSchema, i as IdempotencyKeyConfigSchema, l as TriggerTypeSchema, s as TriggerCredentialRequirementsSchema } from "./credential-requirements-B5Alhu1v-DanlSKnT.mjs";
 import { z } from "zod";
 //#region ../../packages/shared-types/src/workflows/build-output/trigger-manifest.ts
 const TriggerBuildFunctionSchema = z.object({

package/dist/{upgrade-DgOcc8IT.mjs → upgrade-C9G6HksL.mjs}

@@ -1,14 +1,10 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-BlrSdFcu.mjs";
+import { t as createTypedCommand } from "./commander-B_8QwPpe.mjs";
+import { t as PackageManagerValues } from "./package-manager-BwJ6muas.mjs";
 import { z } from "zod";
 //#region src/commands/upgrade/upgrade.command.ts
-const PackageManagerSchema = z.enum([
-	"npm",
-	"pnpm",
-	"yarn",
-	"bun"
-]);
+const PackageManagerSchema = z.enum(PackageManagerValues);
 const UpgradeOptionsSchema = z.object({
 	packageManager: PackageManagerSchema.default("npm").describe("Package manager to use"),
 	to: z.string().min(1).default("latest").describe("Package version or dist tag to install"),
@@ -34,7 +30,7 @@ function createUpgradeCommand() {
 		description: "Upgrade the Keystroke CLI to the latest published version",
 		schema: UpgradeOptionsSchema,
 		optionsConfig: UPGRADE_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./upgrade.handler-DSZuw7-9.mjs")).handleUpgrade
+		loadHandler: async () => (await import("./upgrade.handler-DsFeAFF4.mjs")).handleUpgrade
 	});
 }
 //#endregion

package/dist/upgrade.handler-DsFeAFF4.mjs

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+
+import { A as CliExitError, P as throwReportedCliExit, S as toErrorMessage, a as CLI_PACKAGE_NAME, p as ui } from "./keystroke.mjs";
+import { a as readYarnMajorVersion } from "./package-manager-BwJ6muas.mjs";
+import { spawn } from "node:child_process";
+//#region src/commands/upgrade/upgrade.handler.ts
+function buildUpgradeCommand(options) {
+	const { packageManager, to } = options;
+	const packageSpec = `${CLI_PACKAGE_NAME}@${to}`;
+	if (packageManager === "npm") return {
+		command: "npm",
+		args: [
+			"install",
+			"--global",
+			packageSpec
+		]
+	};
+	else if (packageManager === "pnpm") return {
+		command: "pnpm",
+		args: [
+			"add",
+			"--global",
+			packageSpec
+		]
+	};
+	else if (packageManager === "yarn") return {
+		command: "yarn",
+		args: [
+			"global",
+			"add",
+			packageSpec
+		]
+	};
+	else if (packageManager === "bun") return {
+		command: "bun",
+		args: [
+			"add",
+			"--global",
+			packageSpec
+		]
+	};
+	else return assertNever(packageManager);
+}
+function renderUpgradeCommand(upgradeCommand) {
+	return [upgradeCommand.command, ...upgradeCommand.args].map(shellToken).join(" ");
+}
+async function handleUpgrade(options, _ctx) {
+	const { packageManager, dryRun, to } = options;
+	await assertYarnClassicSupported(packageManager);
+	const upgradeCommand = buildUpgradeCommand({
+		packageManager,
+		to,
+		dryRun
+	});
+	const renderedCommand = renderUpgradeCommand(upgradeCommand);
+	if (dryRun) {
+		ui.text(renderedCommand);
+		return;
+	}
+	ui.header(`Upgrading Keystroke CLI with ${packageManager}...`);
+	ui.hint(renderedCommand);
+	const exitCode = await runCommand(upgradeCommand);
+	if (exitCode !== 0) throwReportedCliExit(`CLI upgrade failed with exit code ${exitCode}.`);
+	ui.success("Keystroke CLI upgrade complete.");
+}
+async function assertYarnClassicSupported(packageManager) {
+	if (packageManager === "npm") return;
+	if (packageManager === "pnpm") return;
+	if (packageManager === "bun") return;
+	if (packageManager === "yarn") {
+		const yarnMajor = await readYarnMajorVersion();
+		if (yarnMajor !== null && yarnMajor !== 1) throwReportedCliExit("Yarn 2+ does not support `yarn global add`. Use `--package-manager npm` or `--package-manager pnpm` instead.");
+		return;
+	}
+	return assertNever(packageManager);
+}
+function runCommand({ command, args }) {
+	return new Promise((resolve, reject) => {
+		const child = spawn(command, args, {
+			stdio: "inherit",
+			shell: process.platform === "win32"
+		});
+		child.on("error", (error) => {
+			reject(new CliExitError(`Failed to start upgrade command: ${toErrorMessage(error)}`, {
+				cause: error,
+				reported: true
+			}));
+		});
+		child.on("close", (code) => resolve(code ?? 1));
+	});
+}
+function shellToken(value) {
+	return /^[A-Za-z0-9_./:@=-]+$/.test(value) ? value : `'${value.replaceAll("'", "'\\''")}'`;
+}
+function assertNever(value) {
+	throw new Error(`Unsupported package manager: ${String(value)}`);
+}
+//#endregion
+export { handleUpgrade };

package/dist/{upload.handler-B7xle1oX.mjs → upload.handler-DscKDQ63.mjs}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
-import { a as ui, c as getProcessEnv, j as throwReportedCliExit, y as toErrorMessage } from "./keystroke.mjs";
+import { P as throwReportedCliExit, S as toErrorMessage, c as getProcessEnv, p as ui } from "./keystroke.mjs";
 import { t as assertWorkflowProjectRoot } from "./project-config-DudGRFPO.mjs";
-import { a as writeJsonError, i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-sgKhRc5v.mjs";
-import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-CTEtWDW4.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-E9mrh_el.mjs";
-import { t as getIntegrationCatalog } from "./integration-catalog-CiZ62hb_.mjs";
-import { t as readCredentialEnvMap } from "./credential-env-map-CRs0llf0.mjs";
-import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-DKrSaaLw.mjs";
-import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-ClQgEVtO.mjs";
+import { a as writeJsonError, i as writeJson } from "./output-BPydP5tG.mjs";
+import { i as requireClient } from "./context-Brc9VGV9.mjs";
+import { a as readManifestsFromOutDir, t as collectCredentialFingerprintMapFromProjectDist } from "./dist-BmbFJq8U.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-CoCN9xfi.mjs";
+import { t as getIntegrationCatalog } from "./integration-catalog-mZs6EAlN.mjs";
+import { t as readCredentialEnvMap } from "./credential-env-map-5a41jLwM.mjs";
+import { a as verifyCredentialResolvable, i as validateManualCredentialWithHook, n as resolveCredentialValuesFromEnv, r as uploadCredential, t as groupCredentialRequirements } from "./credentials-DtwLbee6.mjs";
+import { n as renderCredentialSchemaMismatchText, r as writeCredentialSchemaMismatchJson, t as isCredentialSchemaMismatchErrorLike } from "./credential-schema-mismatch-CStYUB2h.mjs";
 import * as path$1 from "node:path";
 import { confirm, isCancel } from "@clack/prompts";
 //#region src/commands/credentials/upload/upload.handler.ts

package/dist/{users.get.handler-C4t1vXwi.mjs → users.get.handler-CaUv_maM.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { a as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-sgKhRc5v.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
+import { p as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-BPydP5tG.mjs";
+import { i as requireClient } from "./context-Brc9VGV9.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-D01Gw8-M.mjs";
 //#region src/commands/admin/users.get.handler.ts
 async function handleAdminUsersGet(options, ctx) {
 	const client = requireClient(ctx);

package/dist/{users.list.handler-Dvl90grq.mjs → users.list.handler-DzsOvAtd.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { a as ui } from "./keystroke.mjs";
-import { i as writeJson } from "./output-BWcVRt-T.mjs";
-import { i as requireClient } from "./context-sgKhRc5v.mjs";
-import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-CSZj4XlH.mjs";
+import { p as ui } from "./keystroke.mjs";
+import { i as writeJson } from "./output-BPydP5tG.mjs";
+import { i as requireClient } from "./context-Brc9VGV9.mjs";
+import { n as isIamJsonMode, t as handleIamError } from "./iam-command-utils-D01Gw8-M.mjs";
 import Table from "cli-table3";
 //#region src/commands/admin/users.list.handler.ts
 async function handleAdminUsersList(options, ctx) {