@keystrokehq/cli 0.1.171 → 0.1.172

package/dist/index.mjs

@@ -40,7 +40,7 @@ process.emitWarning = ((warning, ...args) => {
 	if ((type === "ExperimentalWarning" || /ExperimentalWarning/i.test(type)) && /SQLite/i.test(message)) return;
 	return Reflect.apply(originalEmitWarning, process, [warning, ...args]);
 });
-const { runCli } = await import("./program-Ckl_ELbL.mjs");
+const { runCli } = await import("./program-BfapxNQ4.mjs");
 await runCli(process.argv);
 //#endregion
 export {};

package/dist/{program-Ckl_ELbL.mjs → program-BfapxNQ4.mjs}

@@ -9061,15 +9061,18 @@ function registerBuildCommand(program) {
 //#endregion
 //#region src/deploy/assert-portable-dependencies.ts
 const LINK_SPEC = /^link:/i;
+const WORKSPACE_SPEC = /^workspace:/i;
+const FILE_SPEC = /^file:(?:\.\.?(?:\/|$)|\/|[A-Za-z]:\\|~)/i;
 const NONPORTABLE_SPEC = /^(?:link:|workspace:|file:(?:\.\.?(?:\/|$)|\/|[A-Za-z]:\\|~))/i;
 /**
 * Reject tracked dependency specs that cannot resolve in disposable/server
 * checkouts (absolute/local link:, external file:, unresolved workspace:).
 *
 * `KEYSTROKE_ALLOW_NONPORTABLE_DEPS=1` (local packs / soak deploys) permits
-* `link:` only — `file:` and unresolved `workspace:` still fail the gate.
+* `link:` only. Explicit options allow `workspace:`, `link:`, and local `file:`
+* specs when deploy deliberately builds from the current checkout.
 */
-async function assertPortableProjectDependencies(projectRoot) {
+async function assertPortableProjectDependencies(projectRoot, options = {}) {
 	const allowLinkDeps = process.env.KEYSTROKE_ALLOW_NONPORTABLE_DEPS === "1";
 	const packageJsonPath = join(projectRoot, "package.json");
 	let raw;
@@ -9099,7 +9102,7 @@ async function assertPortableProjectDependencies(projectRoot) {
 		for (const [name, spec] of Object.entries(deps)) {
 			if (typeof spec !== "string") continue;
 			const trimmed = spec.trim();
-			if (allowLinkDeps && LINK_SPEC.test(trimmed)) continue;
+			if ((allowLinkDeps || options.allowLink) && LINK_SPEC.test(trimmed) || options.allowWorkspace && WORKSPACE_SPEC.test(trimmed) || options.allowFile && FILE_SPEC.test(trimmed)) continue;
 			if (NONPORTABLE_SPEC.test(trimmed)) offenders.push(`${name}@${spec}`);
 		}
 	}
@@ -11019,6 +11022,25 @@ async function buildExactCandidate(input) {
 	const depsRoot = input.depsRoot ?? input.cwd;
 	const cleanEnv = worktreeGitEnv();
 	const skipVerify = input.skipVerify === true;
+	if (input.buildFromWorkspace) {
+		await rm(join(input.cwd, "dist"), {
+			recursive: true,
+			force: true
+		});
+		await buildInRoot({
+			buildRoot: input.cwd,
+			env: cleanEnv,
+			skipVerify,
+			manager: await detectPackageManager(input.cwd),
+			needInstall: false
+		});
+		const modules = collectArtifactModules(input.cwd);
+		return {
+			modules,
+			index: artifactIndexFromModules(modules),
+			blobs: moduleBlobRefsFromModules(modules)
+		};
+	}
 	if (input.allowInPlace) {
 		const head = await runGit(["rev-parse", "HEAD"], {
 			cwd: input.cwd,
@@ -11515,7 +11537,13 @@ async function pollProjectActive(client, projectId, options = {}) {
 async function runManagedDeploy(client, config, options) {
 	const deployStarted = Date.now();
 	const root = resolveProjectRoot(options.dir);
-	await assertPortableProjectDependencies(root);
+	if (options.buildFromWorkspace && process.env["KEYSTROKE_DEPLOY_GIT_MODE"] === "checkout") throw new ExpectedCliError("--build-from-workspace is only available from a local monorepo checkout");
+	await assertPortableProjectDependencies(root, {
+		allowWorkspace: options.buildFromWorkspace === true,
+		allowFile: options.buildFromWorkspace === true,
+		allowLink: options.buildFromWorkspace === true
+	});
+	if (options.buildFromWorkspace) process.stderr.write("Warning: --build-from-workspace builds with local workspace dependencies that are not captured in Keystroke's managed source. Use published dependencies for reproducible deploys.\n");
 	const verbose = options.verbose === true;
 	const phase = (label, started) => {
 		if (!verbose) return;
@@ -11563,6 +11591,10 @@ async function runManagedDeploy(client, config, options) {
 		env: gitContext.env,
 		...filter ? { filter } : {}
 	});
+	if (options.buildFromWorkspace && plan.mode === "no_op") plan = {
+		...plan,
+		mode: "full"
+	};
 	phase("plan", planStarted);
 	writePlan(plan);
 	if (plan.mode === "no_op") {
@@ -11707,7 +11739,8 @@ async function runManagedDeploy(client, config, options) {
 							candidateSha: composed.candidateSha,
 							depsRoot: root,
 							skipVerify: verifyOutside,
-							allowInPlace: hostedCheckout && prepared.mode === "full"
+							allowInPlace: hostedCheckout && prepared.mode === "full",
+							buildFromWorkspace: options.buildFromWorkspace === true
 						});
 						buildMs = Date.now() - buildStarted;
 						return result;
@@ -11744,7 +11777,8 @@ async function runManagedDeploy(client, config, options) {
 								candidateSha: publishedCandidateSha,
 								depsRoot: root,
 								skipVerify: verifyOutside,
-								allowInPlace: false
+								allowInPlace: false,
+								buildFromWorkspace: options.buildFromWorkspace === true
 							});
 							buildMs += Date.now() - rebuildStarted;
 						}
@@ -11817,6 +11851,10 @@ async function runManagedDeploy(client, config, options) {
 			env: gitContext.env,
 			...filter ? { filter } : {}
 		});
+		if (options.buildFromWorkspace && plan.mode === "no_op") plan = {
+			...plan,
+			mode: "full"
+		};
 		writePlan(plan);
 		if (plan.mode === "no_op") {
 			process.stdout.write("Nothing to deploy — draft matches main.\n");
@@ -11870,6 +11908,7 @@ async function resolveTrustedDeployGitEnv(input) {
 }
 async function runDeploy(options) {
 	if (options.acceptImpact && !options.filter?.length) throw new ExpectedCliError("--accept-impact requires at least one --filter");
+	if (options.buildFromWorkspace && options.filter?.length) throw new ExpectedCliError("--build-from-workspace cannot be combined with --filter");
 	const root = resolveProjectRoot(options.dir);
 	await ensureSdkCurrent(root);
 	const config = createCliConfig();
@@ -11879,7 +11918,7 @@ async function runDeploy(options) {
 	await runManagedDeploy(client, config, options);
 }
 function registerDeployCommand(program) {
-	program.command("deploy").description("Deploy the project via managed Git (draft sync, local analyze/build, cutover)").option("--dir <path>", "Project directory", process.cwd()).option("--filter <entry>", "Deploy only matching workflow/agent keys (repeatable; e.g. workflows/ping)", (value, previous) => [...previous, value], []).option("--accept-impact", "Accept the current filtered deploy impact (required for non-TTY expansion)").option("--verbose", "Show phase timings, pin SHAs, and deploy detail").action(async (options) => {
+	program.command("deploy").description("Deploy the project via managed Git (draft sync, local analyze/build, cutover)").option("--dir <path>", "Project directory", process.cwd()).option("--filter <entry>", "Deploy only matching workflow/agent keys (repeatable; e.g. workflows/ping)", (value, previous) => [...previous, value], []).option("--accept-impact", "Accept the current filtered deploy impact (required for non-TTY expansion)").option("--build-from-workspace", "Build from the current monorepo checkout (full deploys only; non-reproducible)").option("--verbose", "Show phase timings, pin SHAs, and deploy detail").action(async (options) => {
 		let config;
 		try {
 			config = createCliConfig();
@@ -11891,6 +11930,7 @@ function registerDeployCommand(program) {
 				projectId,
 				filter: options.filter.length > 0 ? options.filter : void 0,
 				acceptImpact: options.acceptImpact === true,
+				buildFromWorkspace: options.buildFromWorkspace === true,
 				verbose: options.verbose === true
 			});
 			await trackCliEvent("cli:deploy", { projectId });
@@ -14341,4 +14381,4 @@ async function runCli(argv) {
 //#endregion
 export { runCli };
 
-//# sourceMappingURL=program-Ckl_ELbL.mjs.map
+//# sourceMappingURL=program-BfapxNQ4.mjs.map