@keystrokehq/cli 0.1.22 → 0.1.24

package/dist/{maybe-auto-update-BK4A8nTA.mjs → maybe-auto-update-q5MthdI8.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { l as getCliConfigDir, r as detectPackageManager, s as resolveCliRoot, t as readCliVersion } from "./version-CUTRAMa8.mjs";
+import { l as getCliConfigDir, r as detectPackageManager, s as resolveCliRoot, t as readCliVersion } from "./version-DcR3O1UD.mjs";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
 import { spawnSync } from "node:child_process";
@@ -405,4 +405,4 @@ async function maybeAutoUpdate(argv) {
 //#endregion
 export { maybeAutoUpdate };
 
-//# sourceMappingURL=maybe-auto-update-BK4A8nTA.mjs.map
+//# sourceMappingURL=maybe-auto-update-q5MthdI8.mjs.map

package/dist/{maybe-auto-update-BK4A8nTA.mjs.map → maybe-auto-update-q5MthdI8.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"maybe-auto-update-BK4A8nTA.mjs","names":[],"sources":["../src/update/compare-version.ts","../src/update/detect-cli-install.ts","../src/update/detect-release-age-block.ts","../src/update/fetch-latest-version.ts","../src/update/read-pnpm-release-age-minutes.ts","../src/update/resolve-global-pnpm-root.ts","../src/update/build-update-command.ts","../src/update/run-package-manager-update.ts","../src/update/update-block-cache.ts","../src/update/maybe-auto-update.ts"],"sourcesContent":["function parseVersion(version: string): [number, number, number] {\n  const normalized = version.trim().replace(/^v/, \"\").split(\"-\")[0] ?? \"\";\n  const [major = 0, minor = 0, patch = 0] = normalized.split(\".\").map((part) => {\n    const value = Number.parseInt(part, 10);\n    return Number.isFinite(value) ? value : 0;\n  });\n\n  return [major, minor, patch];\n}\n\nexport function isNewerVersion(latest: string, current: string): boolean {\n  const [latestMajor, latestMinor, latestPatch] = parseVersion(latest);\n  const [currentMajor, currentMinor, currentPatch] = parseVersion(current);\n\n  if (latestMajor !== currentMajor) {\n    return latestMajor > currentMajor;\n  }\n\n  if (latestMinor !== currentMinor) {\n    return latestMinor > currentMinor;\n  }\n\n  return latestPatch > currentPatch;\n}\n","import { existsSync, realpathSync } from \"node:fs\";\nimport { spawnSync } from \"node:child_process\";\nimport { dirname, join } from \"node:path\";\n\nimport { detectPackageManager, type PackageManager } from \"../init/package-manager\";\n\nexport type CliInstallKind = \"global\" | \"local\";\n\nexport type CliInstallInfo = {\n  kind: CliInstallKind;\n  packageManager: PackageManager;\n  packageRoot: string;\n  projectRoot?: string;\n};\n\nfunction realpathSafe(path: string): string {\n  try {\n    return realpathSync(path);\n  } catch {\n    return path;\n  }\n}\n\nfunction detectManagerFromLockfile(dir: string): PackageManager | undefined {\n  if (existsSync(join(dir, \"pnpm-lock.yaml\"))) {\n    return \"pnpm\";\n  }\n\n  if (existsSync(join(dir, \"bun.lockb\")) || existsSync(join(dir, \"bun.lock\"))) {\n    return \"bun\";\n  }\n\n  if (existsSync(join(dir, \"yarn.lock\"))) {\n    return \"yarn\";\n  }\n\n  if (existsSync(join(dir, \"package-lock.json\"))) {\n    return \"npm\";\n  }\n\n  return undefined;\n}\n\nfunction findLocalProjectRoot(packageRoot: string): string | undefined {\n  const normalizedRoot = realpathSafe(packageRoot);\n  let dir = dirname(packageRoot);\n\n  while (dir !== dirname(dir)) {\n    const installedCliPath = join(dir, \"node_modules\", \"@keystrokehq\", \"cli\");\n    if (\n      existsSync(join(dir, \"package.json\")) &&\n      realpathSafe(installedCliPath) === normalizedRoot\n    ) {\n      return dir;\n    }\n\n    dir = dirname(dir);\n  }\n\n  return undefined;\n}\n\nfunction globalRootForManager(manager: PackageManager): string | undefined {\n  const commands: Record<PackageManager, { command: string; args: string[] }> = {\n    pnpm: { command: \"pnpm\", args: [\"root\", \"-g\"] },\n    npm: { command: \"npm\", args: [\"root\", \"-g\"] },\n    yarn: { command: \"yarn\", args: [\"global\", \"dir\"] },\n    bun: { command: \"bun\", args: [\"pm\", \"bin\"] },\n  };\n\n  const { command, args } = commands[manager];\n  const result = spawnSync(command, args, { encoding: \"utf8\" });\n\n  if (result.status !== 0) {\n    return undefined;\n  }\n\n  const root = result.stdout.trim();\n  return root ? realpathSafe(root) : undefined;\n}\n\nfunction detectGlobalManager(packageRoot: string): PackageManager {\n  const normalizedRoot = realpathSafe(packageRoot);\n\n  if (normalizedRoot.includes(`${join(\"\", \".pnpm\")}`)) {\n    return \"pnpm\";\n  }\n\n  for (const manager of [\"pnpm\", \"npm\", \"yarn\", \"bun\"] as const) {\n    const globalRoot = globalRootForManager(manager);\n    if (globalRoot && normalizedRoot.startsWith(globalRoot)) {\n      return manager;\n    }\n  }\n\n  if (process.env.PNPM_HOME) {\n    return \"pnpm\";\n  }\n\n  return detectPackageManager();\n}\n\nexport function detectCliInstall(packageRoot: string): CliInstallInfo | undefined {\n  const normalizedRoot = realpathSafe(packageRoot);\n  const projectRoot = findLocalProjectRoot(normalizedRoot);\n\n  if (projectRoot) {\n    const packageManager = detectManagerFromLockfile(projectRoot) ?? detectPackageManager();\n\n    return {\n      kind: \"local\",\n      packageManager,\n      packageRoot: normalizedRoot,\n      projectRoot,\n    };\n  }\n\n  return {\n    kind: \"global\",\n    packageManager: detectGlobalManager(normalizedRoot),\n    packageRoot: normalizedRoot,\n  };\n}\n","const RELEASE_AGE_PATTERNS = [\n  /minimumReleaseAge/i,\n  /minimum-release-age/i,\n  /ERR_PNPM_NO_MATURE_MATCHING_VERSION/,\n  /ERR_PNPM_MINIMUM_RELEASE_AGE/,\n  /does not meet the minimumReleaseAge constraint/,\n];\n\nexport function isReleaseAgeBlock(output: string): boolean {\n  return RELEASE_AGE_PATTERNS.some((pattern) => pattern.test(output));\n}\n\nexport function formatReleaseAgeBlockMessage(options: {\n  currentVersion: string;\n  availableVersion: string;\n  retryAfter?: Date;\n}): string {\n  const retry =\n    options.retryAfter !== undefined ? ` Retry after ${options.retryAfter.toLocaleString()}.` : \"\";\n\n  return (\n    `@keystrokehq/cli ${options.availableVersion} is available but blocked by your ` +\n    `minimum-release-age setting. You're on ${options.currentVersion}.${retry} ` +\n    `Add @keystrokehq/cli to minimumReleaseAgeExclude to install immediately.`\n  );\n}\n","const REGISTRY_URL = \"https://registry.npmjs.org/@keystrokehq%2Fcli\";\nconst REQUEST_TIMEOUT_MS = 3_000;\n\ntype RegistryPackage = {\n  \"dist-tags\"?: {\n    latest?: string;\n  };\n  time?: Record<string, string>;\n};\n\nexport type CliRegistryRelease = {\n  version: string;\n  publishedAt?: string;\n};\n\nexport async function fetchLatestCliRelease(): Promise<CliRegistryRelease | undefined> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);\n\n  try {\n    const response = await fetch(REGISTRY_URL, {\n      signal: controller.signal,\n      headers: {\n        Accept: \"application/json\",\n      },\n    });\n\n    if (!response.ok) {\n      return undefined;\n    }\n\n    const payload = (await response.json()) as RegistryPackage;\n    const version = payload[\"dist-tags\"]?.latest?.trim();\n    if (!version) {\n      return undefined;\n    }\n\n    return {\n      version,\n      publishedAt: payload.time?.[version],\n    };\n  } catch {\n    return undefined;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\nexport async function fetchLatestCliVersion(): Promise<string | undefined> {\n  const release = await fetchLatestCliRelease();\n  return release?.version;\n}\n","import { spawnSync } from \"node:child_process\";\n\nexport function readPnpmMinimumReleaseAgeMinutes(): number | undefined {\n  const result = spawnSync(\"pnpm\", [\"config\", \"get\", \"minimum-release-age\"], {\n    encoding: \"utf8\",\n  });\n\n  if (result.status !== 0) {\n    return undefined;\n  }\n\n  const value = result.stdout.trim();\n  if (!value || value === \"undefined\" || value === \"0\") {\n    return undefined;\n  }\n\n  const minutes = Number.parseInt(value, 10);\n  return Number.isFinite(minutes) && minutes > 0 ? minutes : undefined;\n}\n\nexport function computeReleaseAgeRetryAfter(\n  publishedAt: string | undefined,\n  minimumReleaseAgeMinutes: number | undefined,\n): Date | undefined {\n  if (!publishedAt || !minimumReleaseAgeMinutes) {\n    return undefined;\n  }\n\n  const publishedMs = Date.parse(publishedAt);\n  if (!Number.isFinite(publishedMs)) {\n    return undefined;\n  }\n\n  return new Date(publishedMs + minimumReleaseAgeMinutes * 60_000);\n}\n","/** pnpm global installs live in `<pnpm-home>/global/<major>/`. */\nexport function resolveGlobalPnpmRoot(packageRoot: string): string | undefined {\n  const normalized = packageRoot.replace(/\\\\/g, \"/\");\n  const match = normalized.match(/^(.*\\/global\\/\\d+)\\//);\n  return match?.[1];\n}\n","import type { CliInstallInfo } from \"./detect-cli-install\";\nimport { resolveGlobalPnpmRoot } from \"./resolve-global-pnpm-root\";\n\nconst PACKAGE_NAME = \"@keystrokehq/cli@latest\";\n\nexport function buildUpdateCommand(install: CliInstallInfo): {\n  command: string;\n  args: string[];\n  cwd?: string;\n} {\n  const { kind, packageManager } = install;\n\n  if (kind === \"global\") {\n    switch (packageManager) {\n      case \"pnpm\":\n        return {\n          command: \"pnpm\",\n          args: [\"add\", \"-g\", PACKAGE_NAME],\n          cwd: resolveGlobalPnpmRoot(install.packageRoot),\n        };\n      case \"yarn\":\n        return { command: \"yarn\", args: [\"global\", \"add\", PACKAGE_NAME] };\n      case \"bun\":\n        return { command: \"bun\", args: [\"add\", \"-g\", PACKAGE_NAME] };\n      case \"npm\":\n      default:\n        return { command: \"npm\", args: [\"install\", \"-g\", PACKAGE_NAME] };\n    }\n  }\n\n  const cwd = install.projectRoot;\n  switch (packageManager) {\n    case \"pnpm\":\n      return { command: \"pnpm\", args: [\"add\", \"-D\", PACKAGE_NAME], cwd };\n    case \"yarn\":\n      return { command: \"yarn\", args: [\"add\", \"-D\", PACKAGE_NAME], cwd };\n    case \"bun\":\n      return { command: \"bun\", args: [\"add\", \"-D\", PACKAGE_NAME], cwd };\n    case \"npm\":\n    default:\n      return { command: \"npm\", args: [\"install\", \"-D\", PACKAGE_NAME], cwd };\n  }\n}\n","import { spawnSync } from \"node:child_process\";\n\nimport { buildUpdateCommand } from \"./build-update-command\";\nimport type { CliInstallInfo } from \"./detect-cli-install\";\n\nexport function updateSpawnEnv(): NodeJS.ProcessEnv {\n  const env = { ...process.env };\n  const pnpmHome = env.PNPM_HOME;\n\n  if (!pnpmHome) {\n    return env;\n  }\n\n  const pathKey = process.platform === \"win32\" ? \"Path\" : \"PATH\";\n  const path = env[pathKey] ?? \"\";\n  const segments = path.split(process.platform === \"win32\" ? \";\" : \":\");\n  const binDir = `${pnpmHome}/bin`;\n  const prefix = [binDir, pnpmHome].filter((dir) => !segments.includes(dir));\n\n  if (prefix.length > 0) {\n    env[pathKey] = [...prefix, path].filter(Boolean).join(process.platform === \"win32\" ? \";\" : \":\");\n  }\n\n  return env;\n}\n\nexport type PackageManagerRunResult = {\n  ok: boolean;\n  output: string;\n};\n\nfunction runPackageManager(command: string, args: string[], cwd?: string): PackageManagerRunResult {\n  const result = spawnSync(command, args, {\n    cwd,\n    encoding: \"utf8\",\n    env: updateSpawnEnv(),\n  });\n\n  const output = `${result.stdout ?? \"\"}${result.stderr ?? \"\"}`;\n\n  return {\n    ok: result.status === 0,\n    output,\n  };\n}\n\nfunction migratePnpmGlobal(cwd: string): boolean {\n  const result = spawnSync(\"pnpm\", [\"install\"], {\n    cwd,\n    encoding: \"utf8\",\n    env: {\n      ...updateSpawnEnv(),\n      CI: \"true\",\n    },\n  });\n\n  return result.status === 0;\n}\n\nexport function runPackageManagerUpdate(install: CliInstallInfo): PackageManagerRunResult {\n  const { command, args, cwd } = buildUpdateCommand(install);\n  const firstAttempt = runPackageManager(command, args, cwd);\n\n  if (firstAttempt.ok) {\n    return firstAttempt;\n  }\n\n  if (install.kind === \"global\" && install.packageManager === \"pnpm\" && cwd) {\n    if (migratePnpmGlobal(cwd)) {\n      return runPackageManager(command, args, cwd);\n    }\n  }\n\n  return firstAttempt;\n}\n","import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nimport { getCliConfigDir } from \"../config\";\n\nexport type UpdateBlockCache = {\n  registryLatest?: string;\n  blockedUntil?: string;\n  lastFailedAt?: string;\n};\n\nconst CACHE_FILE = \"update-check.json\";\nconst GENERIC_RETRY_MS = 24 * 60 * 60 * 1000;\n\nfunction cachePath(configDir = getCliConfigDir()): string {\n  return join(configDir, CACHE_FILE);\n}\n\nexport function readUpdateBlockCache(configDir?: string): UpdateBlockCache {\n  const path = cachePath(configDir);\n  if (!existsSync(path)) {\n    return {};\n  }\n\n  try {\n    return JSON.parse(readFileSync(path, \"utf8\")) as UpdateBlockCache;\n  } catch {\n    return {};\n  }\n}\n\nexport function writeUpdateBlockCache(cache: UpdateBlockCache, configDir?: string): void {\n  const dir = configDir ?? getCliConfigDir();\n  mkdirSync(dir, { recursive: true });\n  writeFileSync(cachePath(dir), `${JSON.stringify(cache, null, 2)}\\n`, \"utf8\");\n}\n\nexport function shouldSkipCachedUpdate(\n  cache: UpdateBlockCache,\n  registryLatest: string,\n  now = Date.now(),\n): boolean {\n  if (cache.registryLatest !== registryLatest) {\n    return false;\n  }\n\n  if (cache.blockedUntil) {\n    const blockedUntilMs = Date.parse(cache.blockedUntil);\n    if (Number.isFinite(blockedUntilMs) && blockedUntilMs > now) {\n      return true;\n    }\n  }\n\n  if (cache.lastFailedAt) {\n    const lastFailedMs = Date.parse(cache.lastFailedAt);\n    if (Number.isFinite(lastFailedMs) && now - lastFailedMs < GENERIC_RETRY_MS) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport function clearUpdateBlockCache(configDir?: string): void {\n  writeUpdateBlockCache({}, configDir);\n}\n\nexport function recordReleaseAgeBlock(options: {\n  registryLatest: string;\n  retryAfter?: Date;\n  configDir?: string;\n}): void {\n  writeUpdateBlockCache(\n    {\n      registryLatest: options.registryLatest,\n      blockedUntil: options.retryAfter?.toISOString(),\n    },\n    options.configDir,\n  );\n}\n\nexport function recordGenericUpdateFailure(registryLatest: string, configDir?: string): void {\n  writeUpdateBlockCache(\n    {\n      registryLatest,\n      lastFailedAt: new Date().toISOString(),\n    },\n    configDir,\n  );\n}\n","import { spawnSync } from \"node:child_process\";\n\nimport { resolveCliRoot } from \"../project/resolve-cli-root\";\nimport { readCliVersion } from \"../version\";\nimport { isNewerVersion } from \"./compare-version\";\nimport { detectCliInstall } from \"./detect-cli-install\";\nimport { formatReleaseAgeBlockMessage, isReleaseAgeBlock } from \"./detect-release-age-block\";\nimport { fetchLatestCliRelease } from \"./fetch-latest-version\";\nimport {\n  computeReleaseAgeRetryAfter,\n  readPnpmMinimumReleaseAgeMinutes,\n} from \"./read-pnpm-release-age-minutes\";\nimport { runPackageManagerUpdate } from \"./run-package-manager-update\";\nimport {\n  clearUpdateBlockCache,\n  readUpdateBlockCache,\n  recordGenericUpdateFailure,\n  recordReleaseAgeBlock,\n  shouldSkipCachedUpdate,\n} from \"./update-block-cache\";\n\nfunction shouldSkipAutoUpdate(argv: string[]): boolean {\n  if (\n    process.env.KEYSTROKE_DEV ||\n    process.env.KEYSTROKE_SKIP_UPDATE ||\n    process.env.KEYSTROKE_UPDATING\n  ) {\n    return true;\n  }\n\n  if (process.env.CI === \"true\" || process.env.CI === \"1\") {\n    return true;\n  }\n\n  const args = argv.slice(2);\n  if (args.length === 0) {\n    return false;\n  }\n\n  return args.every(\n    (arg) =>\n      arg === \"-V\" ||\n      arg === \"--version\" ||\n      arg === \"-h\" ||\n      arg === \"--help\" ||\n      arg.startsWith(\"-V\"),\n  );\n}\n\nfunction reexecCli(argv: string[]): never {\n  const result = spawnSync(process.execPath, argv.slice(1), {\n    stdio: \"inherit\",\n    env: {\n      ...process.env,\n      KEYSTROKE_UPDATING: \"1\",\n    },\n  });\n\n  process.exit(result.status ?? 1);\n}\n\nfunction releaseAgeRetryAfter(\n  install: NonNullable<ReturnType<typeof detectCliInstall>>,\n  publishedAt: string | undefined,\n): Date | undefined {\n  if (install.packageManager !== \"pnpm\") {\n    return undefined;\n  }\n\n  return computeReleaseAgeRetryAfter(publishedAt, readPnpmMinimumReleaseAgeMinutes());\n}\n\nexport async function maybeAutoUpdate(argv: string[]): Promise<void> {\n  if (shouldSkipAutoUpdate(argv)) {\n    return;\n  }\n\n  const install = detectCliInstall(resolveCliRoot(import.meta.url));\n  if (!install || (install.kind === \"local\" && !install.projectRoot)) {\n    return;\n  }\n\n  const currentVersion = readCliVersion();\n  const release = await fetchLatestCliRelease();\n\n  if (!release || !isNewerVersion(release.version, currentVersion)) {\n    clearUpdateBlockCache();\n    return;\n  }\n\n  const cache = readUpdateBlockCache();\n  if (shouldSkipCachedUpdate(cache, release.version)) {\n    return;\n  }\n\n  process.stderr.write(\n    `Updating @keystrokehq/cli ${currentVersion} -> ${release.version} via ${install.packageManager}...\\n`,\n  );\n\n  const result = runPackageManagerUpdate(install);\n  const installedVersion = readCliVersion();\n\n  if (isNewerVersion(installedVersion, currentVersion)) {\n    clearUpdateBlockCache();\n    process.stderr.write(`Updated @keystrokehq/cli ${currentVersion} -> ${installedVersion}.\\n`);\n    reexecCli(argv);\n  }\n\n  if (result.ok) {\n    clearUpdateBlockCache();\n    return;\n  }\n\n  if (isReleaseAgeBlock(result.output)) {\n    const retryAfter = releaseAgeRetryAfter(install, release.publishedAt);\n    recordReleaseAgeBlock({\n      registryLatest: release.version,\n      retryAfter,\n    });\n    process.stderr.write(\n      `${formatReleaseAgeBlockMessage({\n        currentVersion,\n        availableVersion: release.version,\n        retryAfter,\n      })}\\n`,\n    );\n    return;\n  }\n\n  recordGenericUpdateFailure(release.version);\n  process.stderr.write(\"Auto-update failed; continuing with the current version.\\n\");\n}\n"],"mappings":";;;;;;AAAA,SAAS,aAAa,SAA2C;CAE/D,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,QAAQ,MADlB,QAAQ,KAAK,EAAE,QAAQ,MAAM,EAAE,EAAE,MAAM,GAAG,EAAE,MAAM,IAChB,MAAM,GAAG,EAAE,KAAK,SAAS;EAC5E,MAAM,QAAQ,OAAO,SAAS,MAAM,EAAE;EACtC,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;CAC1C,CAAC;CAED,OAAO;EAAC;EAAO;EAAO;CAAK;AAC7B;AAEA,SAAgB,eAAe,QAAgB,SAA0B;CACvE,MAAM,CAAC,aAAa,aAAa,eAAe,aAAa,MAAM;CACnE,MAAM,CAAC,cAAc,cAAc,gBAAgB,aAAa,OAAO;CAEvE,IAAI,gBAAgB,cAClB,OAAO,cAAc;CAGvB,IAAI,gBAAgB,cAClB,OAAO,cAAc;CAGvB,OAAO,cAAc;AACvB;;;ACRA,SAAS,aAAa,MAAsB;CAC1C,IAAI;EACF,OAAO,aAAa,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,KAAyC;CAC1E,IAAI,WAAW,KAAK,KAAK,gBAAgB,CAAC,GACxC,OAAO;CAGT,IAAI,WAAW,KAAK,KAAK,WAAW,CAAC,KAAK,WAAW,KAAK,KAAK,UAAU,CAAC,GACxE,OAAO;CAGT,IAAI,WAAW,KAAK,KAAK,WAAW,CAAC,GACnC,OAAO;CAGT,IAAI,WAAW,KAAK,KAAK,mBAAmB,CAAC,GAC3C,OAAO;AAIX;AAEA,SAAS,qBAAqB,aAAyC;CACrE,MAAM,iBAAiB,aAAa,WAAW;CAC/C,IAAI,MAAM,QAAQ,WAAW;CAE7B,OAAO,QAAQ,QAAQ,GAAG,GAAG;EAC3B,MAAM,mBAAmB,KAAK,KAAK,gBAAgB,gBAAgB,KAAK;EACxE,IACE,WAAW,KAAK,KAAK,cAAc,CAAC,KACpC,aAAa,gBAAgB,MAAM,gBAEnC,OAAO;EAGT,MAAM,QAAQ,GAAG;CACnB;AAGF;AAEA,SAAS,qBAAqB,SAA6C;CAQzE,MAAM,EAAE,SAAS,SAAS;EANxB,MAAM;GAAE,SAAS;GAAQ,MAAM,CAAC,QAAQ,IAAI;EAAE;EAC9C,KAAK;GAAE,SAAS;GAAO,MAAM,CAAC,QAAQ,IAAI;EAAE;EAC5C,MAAM;GAAE,SAAS;GAAQ,MAAM,CAAC,UAAU,KAAK;EAAE;EACjD,KAAK;GAAE,SAAS;GAAO,MAAM,CAAC,MAAM,KAAK;EAAE;CAGZ,EAAE;CACnC,MAAM,SAAS,UAAU,SAAS,MAAM,EAAE,UAAU,OAAO,CAAC;CAE5D,IAAI,OAAO,WAAW,GACpB;CAGF,MAAM,OAAO,OAAO,OAAO,KAAK;CAChC,OAAO,OAAO,aAAa,IAAI,IAAI,KAAA;AACrC;AAEA,SAAS,oBAAoB,aAAqC;CAChE,MAAM,iBAAiB,aAAa,WAAW;CAE/C,IAAI,eAAe,SAAS,GAAG,KAAK,IAAI,OAAO,GAAG,GAChD,OAAO;CAGT,KAAK,MAAM,WAAW;EAAC;EAAQ;EAAO;EAAQ;CAAK,GAAY;EAC7D,MAAM,aAAa,qBAAqB,OAAO;EAC/C,IAAI,cAAc,eAAe,WAAW,UAAU,GACpD,OAAO;CAEX;CAEA,IAAI,QAAQ,IAAI,WACd,OAAO;CAGT,OAAO,qBAAqB;AAC9B;AAEA,SAAgB,iBAAiB,aAAiD;CAChF,MAAM,iBAAiB,aAAa,WAAW;CAC/C,MAAM,cAAc,qBAAqB,cAAc;CAEvD,IAAI,aAGF,OAAO;EACL,MAAM;EACN,gBAJqB,0BAA0B,WAAW,KAAK,qBAAqB;EAKpF,aAAa;EACb;CACF;CAGF,OAAO;EACL,MAAM;EACN,gBAAgB,oBAAoB,cAAc;EAClD,aAAa;CACf;AACF;;;AC1HA,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,kBAAkB,QAAyB;CACzD,OAAO,qBAAqB,MAAM,YAAY,QAAQ,KAAK,MAAM,CAAC;AACpE;AAEA,SAAgB,6BAA6B,SAIlC;CACT,MAAM,QACJ,QAAQ,eAAe,KAAA,IAAY,gBAAgB,QAAQ,WAAW,eAAe,EAAE,KAAK;CAE9F,OACE,oBAAoB,QAAQ,iBAAiB,2EACH,QAAQ,eAAe,GAAG,MAAM;AAG9E;;;ACzBA,MAAM,eAAe;AACrB,MAAM,qBAAqB;AAc3B,eAAsB,wBAAiE;CACrF,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,kBAAkB;CAEvE,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,cAAc;GACzC,QAAQ,WAAW;GACnB,SAAS,EACP,QAAQ,mBACV;EACF,CAAC;EAED,IAAI,CAAC,SAAS,IACZ;EAGF,MAAM,UAAW,MAAM,SAAS,KAAK;EACrC,MAAM,UAAU,QAAQ,cAAc,QAAQ,KAAK;EACnD,IAAI,CAAC,SACH;EAGF,OAAO;GACL;GACA,aAAa,QAAQ,OAAO;EAC9B;CACF,QAAQ;EACN;CACF,UAAU;EACR,aAAa,OAAO;CACtB;AACF;;;AC5CA,SAAgB,mCAAuD;CACrE,MAAM,SAAS,UAAU,QAAQ;EAAC;EAAU;EAAO;CAAqB,GAAG,EACzE,UAAU,OACZ,CAAC;CAED,IAAI,OAAO,WAAW,GACpB;CAGF,MAAM,QAAQ,OAAO,OAAO,KAAK;CACjC,IAAI,CAAC,SAAS,UAAU,eAAe,UAAU,KAC/C;CAGF,MAAM,UAAU,OAAO,SAAS,OAAO,EAAE;CACzC,OAAO,OAAO,SAAS,OAAO,KAAK,UAAU,IAAI,UAAU,KAAA;AAC7D;AAEA,SAAgB,4BACd,aACA,0BACkB;CAClB,IAAI,CAAC,eAAe,CAAC,0BACnB;CAGF,MAAM,cAAc,KAAK,MAAM,WAAW;CAC1C,IAAI,CAAC,OAAO,SAAS,WAAW,GAC9B;CAGF,OAAO,IAAI,KAAK,cAAc,2BAA2B,GAAM;AACjE;;;;ACjCA,SAAgB,sBAAsB,aAAyC;CAG7E,OAFmB,YAAY,QAAQ,OAAO,GACvB,EAAE,MAAM,sBACpB,IAAI;AACjB;;;ACFA,MAAM,eAAe;AAErB,SAAgB,mBAAmB,SAIjC;CACA,MAAM,EAAE,MAAM,mBAAmB;CAEjC,IAAI,SAAS,UACX,QAAQ,gBAAR;EACE,KAAK,QACH,OAAO;GACL,SAAS;GACT,MAAM;IAAC;IAAO;IAAM;GAAY;GAChC,KAAK,sBAAsB,QAAQ,WAAW;EAChD;EACF,KAAK,QACH,OAAO;GAAE,SAAS;GAAQ,MAAM;IAAC;IAAU;IAAO;GAAY;EAAE;EAClE,KAAK,OACH,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAO;IAAM;GAAY;EAAE;EAE7D,SACE,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAW;IAAM;GAAY;EAAE;CACnE;CAGF,MAAM,MAAM,QAAQ;CACpB,QAAQ,gBAAR;EACE,KAAK,QACH,OAAO;GAAE,SAAS;GAAQ,MAAM;IAAC;IAAO;IAAM;GAAY;GAAG;EAAI;EACnE,KAAK,QACH,OAAO;GAAE,SAAS;GAAQ,MAAM;IAAC;IAAO;IAAM;GAAY;GAAG;EAAI;EACnE,KAAK,OACH,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAO;IAAM;GAAY;GAAG;EAAI;EAElE,SACE,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAW;IAAM;GAAY;GAAG;EAAI;CACxE;AACF;;;ACrCA,SAAgB,iBAAoC;CAClD,MAAM,MAAM,EAAE,GAAG,QAAQ,IAAI;CAC7B,MAAM,WAAW,IAAI;CAErB,IAAI,CAAC,UACH,OAAO;CAGT,MAAM,UAAU,QAAQ,aAAa,UAAU,SAAS;CACxD,MAAM,OAAO,IAAI,YAAY;CAC7B,MAAM,WAAW,KAAK,MAAM,QAAQ,aAAa,UAAU,MAAM,GAAG;CAEpE,MAAM,SAAS,CAAC,GADE,SAAS,OACH,QAAQ,EAAE,QAAQ,QAAQ,CAAC,SAAS,SAAS,GAAG,CAAC;CAEzE,IAAI,OAAO,SAAS,GAClB,IAAI,WAAW,CAAC,GAAG,QAAQ,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,QAAQ,aAAa,UAAU,MAAM,GAAG;CAGhG,OAAO;AACT;AAOA,SAAS,kBAAkB,SAAiB,MAAgB,KAAuC;CACjG,MAAM,SAAS,UAAU,SAAS,MAAM;EACtC;EACA,UAAU;EACV,KAAK,eAAe;CACtB,CAAC;CAED,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,OAAO,UAAU;CAEzD,OAAO;EACL,IAAI,OAAO,WAAW;EACtB;CACF;AACF;AAEA,SAAS,kBAAkB,KAAsB;CAU/C,OATe,UAAU,QAAQ,CAAC,SAAS,GAAG;EAC5C;EACA,UAAU;EACV,KAAK;GACH,GAAG,eAAe;GAClB,IAAI;EACN;CACF,CAEY,EAAE,WAAW;AAC3B;AAEA,SAAgB,wBAAwB,SAAkD;CACxF,MAAM,EAAE,SAAS,MAAM,QAAQ,mBAAmB,OAAO;CACzD,MAAM,eAAe,kBAAkB,SAAS,MAAM,GAAG;CAEzD,IAAI,aAAa,IACf,OAAO;CAGT,IAAI,QAAQ,SAAS,YAAY,QAAQ,mBAAmB,UAAU;MAChE,kBAAkB,GAAG,GACvB,OAAO,kBAAkB,SAAS,MAAM,GAAG;CAAA;CAI/C,OAAO;AACT;;;AC/DA,MAAM,aAAa;AACnB,MAAM,mBAAmB,OAAU,KAAK;AAExC,SAAS,UAAU,YAAY,gBAAgB,GAAW;CACxD,OAAO,KAAK,WAAW,UAAU;AACnC;AAEA,SAAgB,qBAAqB,WAAsC;CACzE,MAAM,OAAO,UAAU,SAAS;CAChC,IAAI,CAAC,WAAW,IAAI,GAClB,OAAO,CAAC;CAGV,IAAI;EACF,OAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CAC9C,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAEA,SAAgB,sBAAsB,OAAyB,WAA0B;CACvF,MAAM,MAAM,aAAa,gBAAgB;CACzC,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,cAAc,UAAU,GAAG,GAAG,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM;AAC7E;AAEA,SAAgB,uBACd,OACA,gBACA,MAAM,KAAK,IAAI,GACN;CACT,IAAI,MAAM,mBAAmB,gBAC3B,OAAO;CAGT,IAAI,MAAM,cAAc;EACtB,MAAM,iBAAiB,KAAK,MAAM,MAAM,YAAY;EACpD,IAAI,OAAO,SAAS,cAAc,KAAK,iBAAiB,KACtD,OAAO;CAEX;CAEA,IAAI,MAAM,cAAc;EACtB,MAAM,eAAe,KAAK,MAAM,MAAM,YAAY;EAClD,IAAI,OAAO,SAAS,YAAY,KAAK,MAAM,eAAe,kBACxD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,SAAgB,sBAAsB,WAA0B;CAC9D,sBAAsB,CAAC,GAAG,SAAS;AACrC;AAEA,SAAgB,sBAAsB,SAI7B;CACP,sBACE;EACE,gBAAgB,QAAQ;EACxB,cAAc,QAAQ,YAAY,YAAY;CAChD,GACA,QAAQ,SACV;AACF;AAEA,SAAgB,2BAA2B,gBAAwB,WAA0B;CAC3F,sBACE;EACE;EACA,+BAAc,IAAI,KAAK,GAAE,YAAY;CACvC,GACA,SACF;AACF;;;ACpEA,SAAS,qBAAqB,MAAyB;CACrD,IACE,QAAQ,IAAI,iBACZ,QAAQ,IAAI,yBACZ,QAAQ,IAAI,oBAEZ,OAAO;CAGT,IAAI,QAAQ,IAAI,OAAO,UAAU,QAAQ,IAAI,OAAO,KAClD,OAAO;CAGT,MAAM,OAAO,KAAK,MAAM,CAAC;CACzB,IAAI,KAAK,WAAW,GAClB,OAAO;CAGT,OAAO,KAAK,OACT,QACC,QAAQ,QACR,QAAQ,eACR,QAAQ,QACR,QAAQ,YACR,IAAI,WAAW,IAAI,CACvB;AACF;AAEA,SAAS,UAAU,MAAuB;CACxC,MAAM,SAAS,UAAU,QAAQ,UAAU,KAAK,MAAM,CAAC,GAAG;EACxD,OAAO;EACP,KAAK;GACH,GAAG,QAAQ;GACX,oBAAoB;EACtB;CACF,CAAC;CAED,QAAQ,KAAK,OAAO,UAAU,CAAC;AACjC;AAEA,SAAS,qBACP,SACA,aACkB;CAClB,IAAI,QAAQ,mBAAmB,QAC7B;CAGF,OAAO,4BAA4B,aAAa,iCAAiC,CAAC;AACpF;AAEA,eAAsB,gBAAgB,MAA+B;CACnE,IAAI,qBAAqB,IAAI,GAC3B;CAGF,MAAM,UAAU,iBAAiB,eAAe,OAAO,KAAK,GAAG,CAAC;CAChE,IAAI,CAAC,WAAY,QAAQ,SAAS,WAAW,CAAC,QAAQ,aACpD;CAGF,MAAM,iBAAiB,eAAe;CACtC,MAAM,UAAU,MAAM,sBAAsB;CAE5C,IAAI,CAAC,WAAW,CAAC,eAAe,QAAQ,SAAS,cAAc,GAAG;EAChE,sBAAsB;EACtB;CACF;CAGA,IAAI,uBADU,qBACiB,GAAG,QAAQ,OAAO,GAC/C;CAGF,QAAQ,OAAO,MACb,6BAA6B,eAAe,MAAM,QAAQ,QAAQ,OAAO,QAAQ,eAAe,MAClG;CAEA,MAAM,SAAS,wBAAwB,OAAO;CAC9C,MAAM,mBAAmB,eAAe;CAExC,IAAI,eAAe,kBAAkB,cAAc,GAAG;EACpD,sBAAsB;EACtB,QAAQ,OAAO,MAAM,4BAA4B,eAAe,MAAM,iBAAiB,IAAI;EAC3F,UAAU,IAAI;CAChB;CAEA,IAAI,OAAO,IAAI;EACb,sBAAsB;EACtB;CACF;CAEA,IAAI,kBAAkB,OAAO,MAAM,GAAG;EACpC,MAAM,aAAa,qBAAqB,SAAS,QAAQ,WAAW;EACpE,sBAAsB;GACpB,gBAAgB,QAAQ;GACxB;EACF,CAAC;EACD,QAAQ,OAAO,MACb,GAAG,6BAA6B;GAC9B;GACA,kBAAkB,QAAQ;GAC1B;EACF,CAAC,EAAE,GACL;EACA;CACF;CAEA,2BAA2B,QAAQ,OAAO;CAC1C,QAAQ,OAAO,MAAM,4DAA4D;AACnF"}
+{"version":3,"file":"maybe-auto-update-q5MthdI8.mjs","names":[],"sources":["../src/update/compare-version.ts","../src/update/detect-cli-install.ts","../src/update/detect-release-age-block.ts","../src/update/fetch-latest-version.ts","../src/update/read-pnpm-release-age-minutes.ts","../src/update/resolve-global-pnpm-root.ts","../src/update/build-update-command.ts","../src/update/run-package-manager-update.ts","../src/update/update-block-cache.ts","../src/update/maybe-auto-update.ts"],"sourcesContent":["function parseVersion(version: string): [number, number, number] {\n  const normalized = version.trim().replace(/^v/, \"\").split(\"-\")[0] ?? \"\";\n  const [major = 0, minor = 0, patch = 0] = normalized.split(\".\").map((part) => {\n    const value = Number.parseInt(part, 10);\n    return Number.isFinite(value) ? value : 0;\n  });\n\n  return [major, minor, patch];\n}\n\nexport function isNewerVersion(latest: string, current: string): boolean {\n  const [latestMajor, latestMinor, latestPatch] = parseVersion(latest);\n  const [currentMajor, currentMinor, currentPatch] = parseVersion(current);\n\n  if (latestMajor !== currentMajor) {\n    return latestMajor > currentMajor;\n  }\n\n  if (latestMinor !== currentMinor) {\n    return latestMinor > currentMinor;\n  }\n\n  return latestPatch > currentPatch;\n}\n","import { existsSync, realpathSync } from \"node:fs\";\nimport { spawnSync } from \"node:child_process\";\nimport { dirname, join } from \"node:path\";\n\nimport { detectPackageManager, type PackageManager } from \"../init/package-manager\";\n\nexport type CliInstallKind = \"global\" | \"local\";\n\nexport type CliInstallInfo = {\n  kind: CliInstallKind;\n  packageManager: PackageManager;\n  packageRoot: string;\n  projectRoot?: string;\n};\n\nfunction realpathSafe(path: string): string {\n  try {\n    return realpathSync(path);\n  } catch {\n    return path;\n  }\n}\n\nfunction detectManagerFromLockfile(dir: string): PackageManager | undefined {\n  if (existsSync(join(dir, \"pnpm-lock.yaml\"))) {\n    return \"pnpm\";\n  }\n\n  if (existsSync(join(dir, \"bun.lockb\")) || existsSync(join(dir, \"bun.lock\"))) {\n    return \"bun\";\n  }\n\n  if (existsSync(join(dir, \"yarn.lock\"))) {\n    return \"yarn\";\n  }\n\n  if (existsSync(join(dir, \"package-lock.json\"))) {\n    return \"npm\";\n  }\n\n  return undefined;\n}\n\nfunction findLocalProjectRoot(packageRoot: string): string | undefined {\n  const normalizedRoot = realpathSafe(packageRoot);\n  let dir = dirname(packageRoot);\n\n  while (dir !== dirname(dir)) {\n    const installedCliPath = join(dir, \"node_modules\", \"@keystrokehq\", \"cli\");\n    if (\n      existsSync(join(dir, \"package.json\")) &&\n      realpathSafe(installedCliPath) === normalizedRoot\n    ) {\n      return dir;\n    }\n\n    dir = dirname(dir);\n  }\n\n  return undefined;\n}\n\nfunction globalRootForManager(manager: PackageManager): string | undefined {\n  const commands: Record<PackageManager, { command: string; args: string[] }> = {\n    pnpm: { command: \"pnpm\", args: [\"root\", \"-g\"] },\n    npm: { command: \"npm\", args: [\"root\", \"-g\"] },\n    yarn: { command: \"yarn\", args: [\"global\", \"dir\"] },\n    bun: { command: \"bun\", args: [\"pm\", \"bin\"] },\n  };\n\n  const { command, args } = commands[manager];\n  const result = spawnSync(command, args, { encoding: \"utf8\" });\n\n  if (result.status !== 0) {\n    return undefined;\n  }\n\n  const root = result.stdout.trim();\n  return root ? realpathSafe(root) : undefined;\n}\n\nfunction detectGlobalManager(packageRoot: string): PackageManager {\n  const normalizedRoot = realpathSafe(packageRoot);\n\n  if (normalizedRoot.includes(`${join(\"\", \".pnpm\")}`)) {\n    return \"pnpm\";\n  }\n\n  for (const manager of [\"pnpm\", \"npm\", \"yarn\", \"bun\"] as const) {\n    const globalRoot = globalRootForManager(manager);\n    if (globalRoot && normalizedRoot.startsWith(globalRoot)) {\n      return manager;\n    }\n  }\n\n  if (process.env.PNPM_HOME) {\n    return \"pnpm\";\n  }\n\n  return detectPackageManager();\n}\n\nexport function detectCliInstall(packageRoot: string): CliInstallInfo | undefined {\n  const normalizedRoot = realpathSafe(packageRoot);\n  const projectRoot = findLocalProjectRoot(normalizedRoot);\n\n  if (projectRoot) {\n    const packageManager = detectManagerFromLockfile(projectRoot) ?? detectPackageManager();\n\n    return {\n      kind: \"local\",\n      packageManager,\n      packageRoot: normalizedRoot,\n      projectRoot,\n    };\n  }\n\n  return {\n    kind: \"global\",\n    packageManager: detectGlobalManager(normalizedRoot),\n    packageRoot: normalizedRoot,\n  };\n}\n","const RELEASE_AGE_PATTERNS = [\n  /minimumReleaseAge/i,\n  /minimum-release-age/i,\n  /ERR_PNPM_NO_MATURE_MATCHING_VERSION/,\n  /ERR_PNPM_MINIMUM_RELEASE_AGE/,\n  /does not meet the minimumReleaseAge constraint/,\n];\n\nexport function isReleaseAgeBlock(output: string): boolean {\n  return RELEASE_AGE_PATTERNS.some((pattern) => pattern.test(output));\n}\n\nexport function formatReleaseAgeBlockMessage(options: {\n  currentVersion: string;\n  availableVersion: string;\n  retryAfter?: Date;\n}): string {\n  const retry =\n    options.retryAfter !== undefined ? ` Retry after ${options.retryAfter.toLocaleString()}.` : \"\";\n\n  return (\n    `@keystrokehq/cli ${options.availableVersion} is available but blocked by your ` +\n    `minimum-release-age setting. You're on ${options.currentVersion}.${retry} ` +\n    `Add @keystrokehq/cli to minimumReleaseAgeExclude to install immediately.`\n  );\n}\n","const REGISTRY_URL = \"https://registry.npmjs.org/@keystrokehq%2Fcli\";\nconst REQUEST_TIMEOUT_MS = 3_000;\n\ntype RegistryPackage = {\n  \"dist-tags\"?: {\n    latest?: string;\n  };\n  time?: Record<string, string>;\n};\n\nexport type CliRegistryRelease = {\n  version: string;\n  publishedAt?: string;\n};\n\nexport async function fetchLatestCliRelease(): Promise<CliRegistryRelease | undefined> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);\n\n  try {\n    const response = await fetch(REGISTRY_URL, {\n      signal: controller.signal,\n      headers: {\n        Accept: \"application/json\",\n      },\n    });\n\n    if (!response.ok) {\n      return undefined;\n    }\n\n    const payload = (await response.json()) as RegistryPackage;\n    const version = payload[\"dist-tags\"]?.latest?.trim();\n    if (!version) {\n      return undefined;\n    }\n\n    return {\n      version,\n      publishedAt: payload.time?.[version],\n    };\n  } catch {\n    return undefined;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\nexport async function fetchLatestCliVersion(): Promise<string | undefined> {\n  const release = await fetchLatestCliRelease();\n  return release?.version;\n}\n","import { spawnSync } from \"node:child_process\";\n\nexport function readPnpmMinimumReleaseAgeMinutes(): number | undefined {\n  const result = spawnSync(\"pnpm\", [\"config\", \"get\", \"minimum-release-age\"], {\n    encoding: \"utf8\",\n  });\n\n  if (result.status !== 0) {\n    return undefined;\n  }\n\n  const value = result.stdout.trim();\n  if (!value || value === \"undefined\" || value === \"0\") {\n    return undefined;\n  }\n\n  const minutes = Number.parseInt(value, 10);\n  return Number.isFinite(minutes) && minutes > 0 ? minutes : undefined;\n}\n\nexport function computeReleaseAgeRetryAfter(\n  publishedAt: string | undefined,\n  minimumReleaseAgeMinutes: number | undefined,\n): Date | undefined {\n  if (!publishedAt || !minimumReleaseAgeMinutes) {\n    return undefined;\n  }\n\n  const publishedMs = Date.parse(publishedAt);\n  if (!Number.isFinite(publishedMs)) {\n    return undefined;\n  }\n\n  return new Date(publishedMs + minimumReleaseAgeMinutes * 60_000);\n}\n","/** pnpm global installs live in `<pnpm-home>/global/<major>/`. */\nexport function resolveGlobalPnpmRoot(packageRoot: string): string | undefined {\n  const normalized = packageRoot.replace(/\\\\/g, \"/\");\n  const match = normalized.match(/^(.*\\/global\\/\\d+)\\//);\n  return match?.[1];\n}\n","import type { CliInstallInfo } from \"./detect-cli-install\";\nimport { resolveGlobalPnpmRoot } from \"./resolve-global-pnpm-root\";\n\nconst PACKAGE_NAME = \"@keystrokehq/cli@latest\";\n\nexport function buildUpdateCommand(install: CliInstallInfo): {\n  command: string;\n  args: string[];\n  cwd?: string;\n} {\n  const { kind, packageManager } = install;\n\n  if (kind === \"global\") {\n    switch (packageManager) {\n      case \"pnpm\":\n        return {\n          command: \"pnpm\",\n          args: [\"add\", \"-g\", PACKAGE_NAME],\n          cwd: resolveGlobalPnpmRoot(install.packageRoot),\n        };\n      case \"yarn\":\n        return { command: \"yarn\", args: [\"global\", \"add\", PACKAGE_NAME] };\n      case \"bun\":\n        return { command: \"bun\", args: [\"add\", \"-g\", PACKAGE_NAME] };\n      case \"npm\":\n      default:\n        return { command: \"npm\", args: [\"install\", \"-g\", PACKAGE_NAME] };\n    }\n  }\n\n  const cwd = install.projectRoot;\n  switch (packageManager) {\n    case \"pnpm\":\n      return { command: \"pnpm\", args: [\"add\", \"-D\", PACKAGE_NAME], cwd };\n    case \"yarn\":\n      return { command: \"yarn\", args: [\"add\", \"-D\", PACKAGE_NAME], cwd };\n    case \"bun\":\n      return { command: \"bun\", args: [\"add\", \"-D\", PACKAGE_NAME], cwd };\n    case \"npm\":\n    default:\n      return { command: \"npm\", args: [\"install\", \"-D\", PACKAGE_NAME], cwd };\n  }\n}\n","import { spawnSync } from \"node:child_process\";\n\nimport { buildUpdateCommand } from \"./build-update-command\";\nimport type { CliInstallInfo } from \"./detect-cli-install\";\n\nexport function updateSpawnEnv(): NodeJS.ProcessEnv {\n  const env = { ...process.env };\n  const pnpmHome = env.PNPM_HOME;\n\n  if (!pnpmHome) {\n    return env;\n  }\n\n  const pathKey = process.platform === \"win32\" ? \"Path\" : \"PATH\";\n  const path = env[pathKey] ?? \"\";\n  const segments = path.split(process.platform === \"win32\" ? \";\" : \":\");\n  const binDir = `${pnpmHome}/bin`;\n  const prefix = [binDir, pnpmHome].filter((dir) => !segments.includes(dir));\n\n  if (prefix.length > 0) {\n    env[pathKey] = [...prefix, path].filter(Boolean).join(process.platform === \"win32\" ? \";\" : \":\");\n  }\n\n  return env;\n}\n\nexport type PackageManagerRunResult = {\n  ok: boolean;\n  output: string;\n};\n\nfunction runPackageManager(command: string, args: string[], cwd?: string): PackageManagerRunResult {\n  const result = spawnSync(command, args, {\n    cwd,\n    encoding: \"utf8\",\n    env: updateSpawnEnv(),\n  });\n\n  const output = `${result.stdout ?? \"\"}${result.stderr ?? \"\"}`;\n\n  return {\n    ok: result.status === 0,\n    output,\n  };\n}\n\nfunction migratePnpmGlobal(cwd: string): boolean {\n  const result = spawnSync(\"pnpm\", [\"install\"], {\n    cwd,\n    encoding: \"utf8\",\n    env: {\n      ...updateSpawnEnv(),\n      CI: \"true\",\n    },\n  });\n\n  return result.status === 0;\n}\n\nexport function runPackageManagerUpdate(install: CliInstallInfo): PackageManagerRunResult {\n  const { command, args, cwd } = buildUpdateCommand(install);\n  const firstAttempt = runPackageManager(command, args, cwd);\n\n  if (firstAttempt.ok) {\n    return firstAttempt;\n  }\n\n  if (install.kind === \"global\" && install.packageManager === \"pnpm\" && cwd) {\n    if (migratePnpmGlobal(cwd)) {\n      return runPackageManager(command, args, cwd);\n    }\n  }\n\n  return firstAttempt;\n}\n","import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nimport { getCliConfigDir } from \"../config\";\n\nexport type UpdateBlockCache = {\n  registryLatest?: string;\n  blockedUntil?: string;\n  lastFailedAt?: string;\n};\n\nconst CACHE_FILE = \"update-check.json\";\nconst GENERIC_RETRY_MS = 24 * 60 * 60 * 1000;\n\nfunction cachePath(configDir = getCliConfigDir()): string {\n  return join(configDir, CACHE_FILE);\n}\n\nexport function readUpdateBlockCache(configDir?: string): UpdateBlockCache {\n  const path = cachePath(configDir);\n  if (!existsSync(path)) {\n    return {};\n  }\n\n  try {\n    return JSON.parse(readFileSync(path, \"utf8\")) as UpdateBlockCache;\n  } catch {\n    return {};\n  }\n}\n\nexport function writeUpdateBlockCache(cache: UpdateBlockCache, configDir?: string): void {\n  const dir = configDir ?? getCliConfigDir();\n  mkdirSync(dir, { recursive: true });\n  writeFileSync(cachePath(dir), `${JSON.stringify(cache, null, 2)}\\n`, \"utf8\");\n}\n\nexport function shouldSkipCachedUpdate(\n  cache: UpdateBlockCache,\n  registryLatest: string,\n  now = Date.now(),\n): boolean {\n  if (cache.registryLatest !== registryLatest) {\n    return false;\n  }\n\n  if (cache.blockedUntil) {\n    const blockedUntilMs = Date.parse(cache.blockedUntil);\n    if (Number.isFinite(blockedUntilMs) && blockedUntilMs > now) {\n      return true;\n    }\n  }\n\n  if (cache.lastFailedAt) {\n    const lastFailedMs = Date.parse(cache.lastFailedAt);\n    if (Number.isFinite(lastFailedMs) && now - lastFailedMs < GENERIC_RETRY_MS) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport function clearUpdateBlockCache(configDir?: string): void {\n  writeUpdateBlockCache({}, configDir);\n}\n\nexport function recordReleaseAgeBlock(options: {\n  registryLatest: string;\n  retryAfter?: Date;\n  configDir?: string;\n}): void {\n  writeUpdateBlockCache(\n    {\n      registryLatest: options.registryLatest,\n      blockedUntil: options.retryAfter?.toISOString(),\n    },\n    options.configDir,\n  );\n}\n\nexport function recordGenericUpdateFailure(registryLatest: string, configDir?: string): void {\n  writeUpdateBlockCache(\n    {\n      registryLatest,\n      lastFailedAt: new Date().toISOString(),\n    },\n    configDir,\n  );\n}\n","import { spawnSync } from \"node:child_process\";\n\nimport { resolveCliRoot } from \"../project/resolve-cli-root\";\nimport { readCliVersion } from \"../version\";\nimport { isNewerVersion } from \"./compare-version\";\nimport { detectCliInstall } from \"./detect-cli-install\";\nimport { formatReleaseAgeBlockMessage, isReleaseAgeBlock } from \"./detect-release-age-block\";\nimport { fetchLatestCliRelease } from \"./fetch-latest-version\";\nimport {\n  computeReleaseAgeRetryAfter,\n  readPnpmMinimumReleaseAgeMinutes,\n} from \"./read-pnpm-release-age-minutes\";\nimport { runPackageManagerUpdate } from \"./run-package-manager-update\";\nimport {\n  clearUpdateBlockCache,\n  readUpdateBlockCache,\n  recordGenericUpdateFailure,\n  recordReleaseAgeBlock,\n  shouldSkipCachedUpdate,\n} from \"./update-block-cache\";\n\nfunction shouldSkipAutoUpdate(argv: string[]): boolean {\n  if (\n    process.env.KEYSTROKE_DEV ||\n    process.env.KEYSTROKE_SKIP_UPDATE ||\n    process.env.KEYSTROKE_UPDATING\n  ) {\n    return true;\n  }\n\n  if (process.env.CI === \"true\" || process.env.CI === \"1\") {\n    return true;\n  }\n\n  const args = argv.slice(2);\n  if (args.length === 0) {\n    return false;\n  }\n\n  return args.every(\n    (arg) =>\n      arg === \"-V\" ||\n      arg === \"--version\" ||\n      arg === \"-h\" ||\n      arg === \"--help\" ||\n      arg.startsWith(\"-V\"),\n  );\n}\n\nfunction reexecCli(argv: string[]): never {\n  const result = spawnSync(process.execPath, argv.slice(1), {\n    stdio: \"inherit\",\n    env: {\n      ...process.env,\n      KEYSTROKE_UPDATING: \"1\",\n    },\n  });\n\n  process.exit(result.status ?? 1);\n}\n\nfunction releaseAgeRetryAfter(\n  install: NonNullable<ReturnType<typeof detectCliInstall>>,\n  publishedAt: string | undefined,\n): Date | undefined {\n  if (install.packageManager !== \"pnpm\") {\n    return undefined;\n  }\n\n  return computeReleaseAgeRetryAfter(publishedAt, readPnpmMinimumReleaseAgeMinutes());\n}\n\nexport async function maybeAutoUpdate(argv: string[]): Promise<void> {\n  if (shouldSkipAutoUpdate(argv)) {\n    return;\n  }\n\n  const install = detectCliInstall(resolveCliRoot(import.meta.url));\n  if (!install || (install.kind === \"local\" && !install.projectRoot)) {\n    return;\n  }\n\n  const currentVersion = readCliVersion();\n  const release = await fetchLatestCliRelease();\n\n  if (!release || !isNewerVersion(release.version, currentVersion)) {\n    clearUpdateBlockCache();\n    return;\n  }\n\n  const cache = readUpdateBlockCache();\n  if (shouldSkipCachedUpdate(cache, release.version)) {\n    return;\n  }\n\n  process.stderr.write(\n    `Updating @keystrokehq/cli ${currentVersion} -> ${release.version} via ${install.packageManager}...\\n`,\n  );\n\n  const result = runPackageManagerUpdate(install);\n  const installedVersion = readCliVersion();\n\n  if (isNewerVersion(installedVersion, currentVersion)) {\n    clearUpdateBlockCache();\n    process.stderr.write(`Updated @keystrokehq/cli ${currentVersion} -> ${installedVersion}.\\n`);\n    reexecCli(argv);\n  }\n\n  if (result.ok) {\n    clearUpdateBlockCache();\n    return;\n  }\n\n  if (isReleaseAgeBlock(result.output)) {\n    const retryAfter = releaseAgeRetryAfter(install, release.publishedAt);\n    recordReleaseAgeBlock({\n      registryLatest: release.version,\n      retryAfter,\n    });\n    process.stderr.write(\n      `${formatReleaseAgeBlockMessage({\n        currentVersion,\n        availableVersion: release.version,\n        retryAfter,\n      })}\\n`,\n    );\n    return;\n  }\n\n  recordGenericUpdateFailure(release.version);\n  process.stderr.write(\"Auto-update failed; continuing with the current version.\\n\");\n}\n"],"mappings":";;;;;;AAAA,SAAS,aAAa,SAA2C;CAE/D,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,QAAQ,MADlB,QAAQ,KAAK,EAAE,QAAQ,MAAM,EAAE,EAAE,MAAM,GAAG,EAAE,MAAM,IAChB,MAAM,GAAG,EAAE,KAAK,SAAS;EAC5E,MAAM,QAAQ,OAAO,SAAS,MAAM,EAAE;EACtC,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;CAC1C,CAAC;CAED,OAAO;EAAC;EAAO;EAAO;CAAK;AAC7B;AAEA,SAAgB,eAAe,QAAgB,SAA0B;CACvE,MAAM,CAAC,aAAa,aAAa,eAAe,aAAa,MAAM;CACnE,MAAM,CAAC,cAAc,cAAc,gBAAgB,aAAa,OAAO;CAEvE,IAAI,gBAAgB,cAClB,OAAO,cAAc;CAGvB,IAAI,gBAAgB,cAClB,OAAO,cAAc;CAGvB,OAAO,cAAc;AACvB;;;ACRA,SAAS,aAAa,MAAsB;CAC1C,IAAI;EACF,OAAO,aAAa,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,KAAyC;CAC1E,IAAI,WAAW,KAAK,KAAK,gBAAgB,CAAC,GACxC,OAAO;CAGT,IAAI,WAAW,KAAK,KAAK,WAAW,CAAC,KAAK,WAAW,KAAK,KAAK,UAAU,CAAC,GACxE,OAAO;CAGT,IAAI,WAAW,KAAK,KAAK,WAAW,CAAC,GACnC,OAAO;CAGT,IAAI,WAAW,KAAK,KAAK,mBAAmB,CAAC,GAC3C,OAAO;AAIX;AAEA,SAAS,qBAAqB,aAAyC;CACrE,MAAM,iBAAiB,aAAa,WAAW;CAC/C,IAAI,MAAM,QAAQ,WAAW;CAE7B,OAAO,QAAQ,QAAQ,GAAG,GAAG;EAC3B,MAAM,mBAAmB,KAAK,KAAK,gBAAgB,gBAAgB,KAAK;EACxE,IACE,WAAW,KAAK,KAAK,cAAc,CAAC,KACpC,aAAa,gBAAgB,MAAM,gBAEnC,OAAO;EAGT,MAAM,QAAQ,GAAG;CACnB;AAGF;AAEA,SAAS,qBAAqB,SAA6C;CAQzE,MAAM,EAAE,SAAS,SAAS;EANxB,MAAM;GAAE,SAAS;GAAQ,MAAM,CAAC,QAAQ,IAAI;EAAE;EAC9C,KAAK;GAAE,SAAS;GAAO,MAAM,CAAC,QAAQ,IAAI;EAAE;EAC5C,MAAM;GAAE,SAAS;GAAQ,MAAM,CAAC,UAAU,KAAK;EAAE;EACjD,KAAK;GAAE,SAAS;GAAO,MAAM,CAAC,MAAM,KAAK;EAAE;CAGZ,EAAE;CACnC,MAAM,SAAS,UAAU,SAAS,MAAM,EAAE,UAAU,OAAO,CAAC;CAE5D,IAAI,OAAO,WAAW,GACpB;CAGF,MAAM,OAAO,OAAO,OAAO,KAAK;CAChC,OAAO,OAAO,aAAa,IAAI,IAAI,KAAA;AACrC;AAEA,SAAS,oBAAoB,aAAqC;CAChE,MAAM,iBAAiB,aAAa,WAAW;CAE/C,IAAI,eAAe,SAAS,GAAG,KAAK,IAAI,OAAO,GAAG,GAChD,OAAO;CAGT,KAAK,MAAM,WAAW;EAAC;EAAQ;EAAO;EAAQ;CAAK,GAAY;EAC7D,MAAM,aAAa,qBAAqB,OAAO;EAC/C,IAAI,cAAc,eAAe,WAAW,UAAU,GACpD,OAAO;CAEX;CAEA,IAAI,QAAQ,IAAI,WACd,OAAO;CAGT,OAAO,qBAAqB;AAC9B;AAEA,SAAgB,iBAAiB,aAAiD;CAChF,MAAM,iBAAiB,aAAa,WAAW;CAC/C,MAAM,cAAc,qBAAqB,cAAc;CAEvD,IAAI,aAGF,OAAO;EACL,MAAM;EACN,gBAJqB,0BAA0B,WAAW,KAAK,qBAAqB;EAKpF,aAAa;EACb;CACF;CAGF,OAAO;EACL,MAAM;EACN,gBAAgB,oBAAoB,cAAc;EAClD,aAAa;CACf;AACF;;;AC1HA,MAAM,uBAAuB;CAC3B;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,kBAAkB,QAAyB;CACzD,OAAO,qBAAqB,MAAM,YAAY,QAAQ,KAAK,MAAM,CAAC;AACpE;AAEA,SAAgB,6BAA6B,SAIlC;CACT,MAAM,QACJ,QAAQ,eAAe,KAAA,IAAY,gBAAgB,QAAQ,WAAW,eAAe,EAAE,KAAK;CAE9F,OACE,oBAAoB,QAAQ,iBAAiB,2EACH,QAAQ,eAAe,GAAG,MAAM;AAG9E;;;ACzBA,MAAM,eAAe;AACrB,MAAM,qBAAqB;AAc3B,eAAsB,wBAAiE;CACrF,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,UAAU,iBAAiB,WAAW,MAAM,GAAG,kBAAkB;CAEvE,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,cAAc;GACzC,QAAQ,WAAW;GACnB,SAAS,EACP,QAAQ,mBACV;EACF,CAAC;EAED,IAAI,CAAC,SAAS,IACZ;EAGF,MAAM,UAAW,MAAM,SAAS,KAAK;EACrC,MAAM,UAAU,QAAQ,cAAc,QAAQ,KAAK;EACnD,IAAI,CAAC,SACH;EAGF,OAAO;GACL;GACA,aAAa,QAAQ,OAAO;EAC9B;CACF,QAAQ;EACN;CACF,UAAU;EACR,aAAa,OAAO;CACtB;AACF;;;AC5CA,SAAgB,mCAAuD;CACrE,MAAM,SAAS,UAAU,QAAQ;EAAC;EAAU;EAAO;CAAqB,GAAG,EACzE,UAAU,OACZ,CAAC;CAED,IAAI,OAAO,WAAW,GACpB;CAGF,MAAM,QAAQ,OAAO,OAAO,KAAK;CACjC,IAAI,CAAC,SAAS,UAAU,eAAe,UAAU,KAC/C;CAGF,MAAM,UAAU,OAAO,SAAS,OAAO,EAAE;CACzC,OAAO,OAAO,SAAS,OAAO,KAAK,UAAU,IAAI,UAAU,KAAA;AAC7D;AAEA,SAAgB,4BACd,aACA,0BACkB;CAClB,IAAI,CAAC,eAAe,CAAC,0BACnB;CAGF,MAAM,cAAc,KAAK,MAAM,WAAW;CAC1C,IAAI,CAAC,OAAO,SAAS,WAAW,GAC9B;CAGF,OAAO,IAAI,KAAK,cAAc,2BAA2B,GAAM;AACjE;;;;ACjCA,SAAgB,sBAAsB,aAAyC;CAG7E,OAFmB,YAAY,QAAQ,OAAO,GACvB,EAAE,MAAM,sBACpB,IAAI;AACjB;;;ACFA,MAAM,eAAe;AAErB,SAAgB,mBAAmB,SAIjC;CACA,MAAM,EAAE,MAAM,mBAAmB;CAEjC,IAAI,SAAS,UACX,QAAQ,gBAAR;EACE,KAAK,QACH,OAAO;GACL,SAAS;GACT,MAAM;IAAC;IAAO;IAAM;GAAY;GAChC,KAAK,sBAAsB,QAAQ,WAAW;EAChD;EACF,KAAK,QACH,OAAO;GAAE,SAAS;GAAQ,MAAM;IAAC;IAAU;IAAO;GAAY;EAAE;EAClE,KAAK,OACH,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAO;IAAM;GAAY;EAAE;EAE7D,SACE,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAW;IAAM;GAAY;EAAE;CACnE;CAGF,MAAM,MAAM,QAAQ;CACpB,QAAQ,gBAAR;EACE,KAAK,QACH,OAAO;GAAE,SAAS;GAAQ,MAAM;IAAC;IAAO;IAAM;GAAY;GAAG;EAAI;EACnE,KAAK,QACH,OAAO;GAAE,SAAS;GAAQ,MAAM;IAAC;IAAO;IAAM;GAAY;GAAG;EAAI;EACnE,KAAK,OACH,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAO;IAAM;GAAY;GAAG;EAAI;EAElE,SACE,OAAO;GAAE,SAAS;GAAO,MAAM;IAAC;IAAW;IAAM;GAAY;GAAG;EAAI;CACxE;AACF;;;ACrCA,SAAgB,iBAAoC;CAClD,MAAM,MAAM,EAAE,GAAG,QAAQ,IAAI;CAC7B,MAAM,WAAW,IAAI;CAErB,IAAI,CAAC,UACH,OAAO;CAGT,MAAM,UAAU,QAAQ,aAAa,UAAU,SAAS;CACxD,MAAM,OAAO,IAAI,YAAY;CAC7B,MAAM,WAAW,KAAK,MAAM,QAAQ,aAAa,UAAU,MAAM,GAAG;CAEpE,MAAM,SAAS,CAAC,GADE,SAAS,OACH,QAAQ,EAAE,QAAQ,QAAQ,CAAC,SAAS,SAAS,GAAG,CAAC;CAEzE,IAAI,OAAO,SAAS,GAClB,IAAI,WAAW,CAAC,GAAG,QAAQ,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,QAAQ,aAAa,UAAU,MAAM,GAAG;CAGhG,OAAO;AACT;AAOA,SAAS,kBAAkB,SAAiB,MAAgB,KAAuC;CACjG,MAAM,SAAS,UAAU,SAAS,MAAM;EACtC;EACA,UAAU;EACV,KAAK,eAAe;CACtB,CAAC;CAED,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,OAAO,UAAU;CAEzD,OAAO;EACL,IAAI,OAAO,WAAW;EACtB;CACF;AACF;AAEA,SAAS,kBAAkB,KAAsB;CAU/C,OATe,UAAU,QAAQ,CAAC,SAAS,GAAG;EAC5C;EACA,UAAU;EACV,KAAK;GACH,GAAG,eAAe;GAClB,IAAI;EACN;CACF,CAEY,EAAE,WAAW;AAC3B;AAEA,SAAgB,wBAAwB,SAAkD;CACxF,MAAM,EAAE,SAAS,MAAM,QAAQ,mBAAmB,OAAO;CACzD,MAAM,eAAe,kBAAkB,SAAS,MAAM,GAAG;CAEzD,IAAI,aAAa,IACf,OAAO;CAGT,IAAI,QAAQ,SAAS,YAAY,QAAQ,mBAAmB,UAAU;MAChE,kBAAkB,GAAG,GACvB,OAAO,kBAAkB,SAAS,MAAM,GAAG;CAAA;CAI/C,OAAO;AACT;;;AC/DA,MAAM,aAAa;AACnB,MAAM,mBAAmB,OAAU,KAAK;AAExC,SAAS,UAAU,YAAY,gBAAgB,GAAW;CACxD,OAAO,KAAK,WAAW,UAAU;AACnC;AAEA,SAAgB,qBAAqB,WAAsC;CACzE,MAAM,OAAO,UAAU,SAAS;CAChC,IAAI,CAAC,WAAW,IAAI,GAClB,OAAO,CAAC;CAGV,IAAI;EACF,OAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CAC9C,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAEA,SAAgB,sBAAsB,OAAyB,WAA0B;CACvF,MAAM,MAAM,aAAa,gBAAgB;CACzC,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,cAAc,UAAU,GAAG,GAAG,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM;AAC7E;AAEA,SAAgB,uBACd,OACA,gBACA,MAAM,KAAK,IAAI,GACN;CACT,IAAI,MAAM,mBAAmB,gBAC3B,OAAO;CAGT,IAAI,MAAM,cAAc;EACtB,MAAM,iBAAiB,KAAK,MAAM,MAAM,YAAY;EACpD,IAAI,OAAO,SAAS,cAAc,KAAK,iBAAiB,KACtD,OAAO;CAEX;CAEA,IAAI,MAAM,cAAc;EACtB,MAAM,eAAe,KAAK,MAAM,MAAM,YAAY;EAClD,IAAI,OAAO,SAAS,YAAY,KAAK,MAAM,eAAe,kBACxD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,SAAgB,sBAAsB,WAA0B;CAC9D,sBAAsB,CAAC,GAAG,SAAS;AACrC;AAEA,SAAgB,sBAAsB,SAI7B;CACP,sBACE;EACE,gBAAgB,QAAQ;EACxB,cAAc,QAAQ,YAAY,YAAY;CAChD,GACA,QAAQ,SACV;AACF;AAEA,SAAgB,2BAA2B,gBAAwB,WAA0B;CAC3F,sBACE;EACE;EACA,+BAAc,IAAI,KAAK,GAAE,YAAY;CACvC,GACA,SACF;AACF;;;ACpEA,SAAS,qBAAqB,MAAyB;CACrD,IACE,QAAQ,IAAI,iBACZ,QAAQ,IAAI,yBACZ,QAAQ,IAAI,oBAEZ,OAAO;CAGT,IAAI,QAAQ,IAAI,OAAO,UAAU,QAAQ,IAAI,OAAO,KAClD,OAAO;CAGT,MAAM,OAAO,KAAK,MAAM,CAAC;CACzB,IAAI,KAAK,WAAW,GAClB,OAAO;CAGT,OAAO,KAAK,OACT,QACC,QAAQ,QACR,QAAQ,eACR,QAAQ,QACR,QAAQ,YACR,IAAI,WAAW,IAAI,CACvB;AACF;AAEA,SAAS,UAAU,MAAuB;CACxC,MAAM,SAAS,UAAU,QAAQ,UAAU,KAAK,MAAM,CAAC,GAAG;EACxD,OAAO;EACP,KAAK;GACH,GAAG,QAAQ;GACX,oBAAoB;EACtB;CACF,CAAC;CAED,QAAQ,KAAK,OAAO,UAAU,CAAC;AACjC;AAEA,SAAS,qBACP,SACA,aACkB;CAClB,IAAI,QAAQ,mBAAmB,QAC7B;CAGF,OAAO,4BAA4B,aAAa,iCAAiC,CAAC;AACpF;AAEA,eAAsB,gBAAgB,MAA+B;CACnE,IAAI,qBAAqB,IAAI,GAC3B;CAGF,MAAM,UAAU,iBAAiB,eAAe,OAAO,KAAK,GAAG,CAAC;CAChE,IAAI,CAAC,WAAY,QAAQ,SAAS,WAAW,CAAC,QAAQ,aACpD;CAGF,MAAM,iBAAiB,eAAe;CACtC,MAAM,UAAU,MAAM,sBAAsB;CAE5C,IAAI,CAAC,WAAW,CAAC,eAAe,QAAQ,SAAS,cAAc,GAAG;EAChE,sBAAsB;EACtB;CACF;CAGA,IAAI,uBADU,qBACiB,GAAG,QAAQ,OAAO,GAC/C;CAGF,QAAQ,OAAO,MACb,6BAA6B,eAAe,MAAM,QAAQ,QAAQ,OAAO,QAAQ,eAAe,MAClG;CAEA,MAAM,SAAS,wBAAwB,OAAO;CAC9C,MAAM,mBAAmB,eAAe;CAExC,IAAI,eAAe,kBAAkB,cAAc,GAAG;EACpD,sBAAsB;EACtB,QAAQ,OAAO,MAAM,4BAA4B,eAAe,MAAM,iBAAiB,IAAI;EAC3F,UAAU,IAAI;CAChB;CAEA,IAAI,OAAO,IAAI;EACb,sBAAsB;EACtB;CACF;CAEA,IAAI,kBAAkB,OAAO,MAAM,GAAG;EACpC,MAAM,aAAa,qBAAqB,SAAS,QAAQ,WAAW;EACpE,sBAAsB;GACpB,gBAAgB,QAAQ;GACxB;EACF,CAAC;EACD,QAAQ,OAAO,MACb,GAAG,6BAA6B;GAC9B;GACA,kBAAkB,QAAQ;GAC1B;EACF,CAAC,EAAE,GACL;EACA;CACF;CAEA,2BAA2B,QAAQ,OAAO;CAC1C,QAAQ,OAAO,MAAM,4DAA4D;AACnF"}

package/dist/skills-bundle/_AGENTS.mcp.md

@@ -4,7 +4,7 @@ Keystroke is a code-first AI automation platform — build specialized AI agents
 
 You are editing a **keystroke project** in a remote workspace via MCP. Author under `src/`, import from `@keystrokehq/*` npm packages. You do not have framework source — only this project and published deps.
 
-Use MCP tools to work on the project: `read_file`, `write_file`, `edit_file`, `list_files`, `delete_file`, `exec_command`, and `deploy_project`. Load authoring guidance with `search_skills` and `get_skill` (see skills map below). The workspace root also has `AGENTS.md` and `.agents/skills/` with the same skill content, readable via `read_file`.
+Use MCP tools to work on the project: `read_file`, `write_file`, `edit_file`, `list_files`, `delete_file`, `exec_command`, and `deploy_project`. Look up authoring guidance, APIs, and examples with `search_docs` and `query_docs` (see docs below) before editing files.
 
 The **keystroke platform** is the hosted control plane. After you change code, run `deploy_project` to build and upload; that activates the cloud runtime. A project is a single live runtime — a deploy replaces what's running on that project (there's no separate dev and prod within one project), so use filtered deploys and `@keystroke ignore` to iterate quickly.
 
@@ -22,56 +22,119 @@ The **keystroke platform** is the hosted control plane. After you change code, r
 
 Default-export each module — the server discovers files under `src/`.
 
-Draft or in-progress modules, full vs filtered deploy, and `@keystroke ignore`: load skill `keystroke-deploy`.
+Draft or in-progress modules, full vs filtered deploy, and `@keystroke ignore`: search the docs (`search_docs "filtered deploy"`).
 
-**Actions are leaf units.** An action never calls another action (including integration actions like `postMessage`). Compose actions in a workflow, or attach an integration action directly as a workflow step / agent tool. An action may call an agent.
+**Workflow steps.** Workflows orchestrate actions, agent prompts, LLM calls (`promptLlm`), and other workflows as steps. Reuse a workflow by importing it and calling `await otherWorkflow.run(input)` — a first-class durable step (validated IO, checkpointed, runs inline in the same run; never thread `ctx`). Import a workflow into an agent's `tools` / call over HTTP when you want it as its own tracked run.
 
-**Workflow steps.** Workflows orchestrate actions, agent prompts, LLM calls (`promptLlm`), and other workflows as steps. Reuse a workflow by importing it and calling `await otherWorkflow.run(input)` — a first-class durable step (validated IO, checkpointed, runs inline in the same run; never thread `ctx`). Expose a workflow as an agent tool (`defineWorkflowTool`) / over HTTP when you want it as its own tracked run.
-
-**Agent tools.** Agents can use actions, subagents (`defineSubagentTool`), workflows (`defineWorkflowTool`), and MCP tools as tools.
+**Agent tools.** Agents can use actions, subagents, workflows, and MCP tools as tools — import them directly into `tools`.
 
 ## Working habits
 
-A few things that are easy to skip and cause common failures:
-
-- **Research real APIs before mirroring them** — web search and fetch the actual reference & explore relevant docs; don't guess endpoints or payload shapes.
-- **Run before you depend or deploy** — run the workflow/agent with `exec_command` and read the real output before wiring dependent steps.
-- **Cover obvious edge cases** and write simple tests as needed (null field, empty array, a step that throws) — see skill `keystroke-workflows`.
-- **Connected apps aren't in `.env`** — deploy never uploads `.env`; use the `connect_app` tool to get a link for the user to connect integrations in the web app (a browser cannot open in this workspace). See skill `keystroke-apps`.
-- **Shipping to prod** — full vs filtered deploy, WIP ignore directives: skill `keystroke-deploy`.
+### Building agents
+
+Agents are useful when a task needs judgment, language understanding, tool use, or multi-turn context.
+
+| Capability           | How it works                                        |
+| -------------------- | --------------------------------------------------- |
+| **Instructions**     | `systemPrompt` tells the model how to behave        |
+| **Models**           | `model` uses `vendor/model-id`, with optional `thinkingLevel` |
+| **File system**      | Each session gets a `/workspace` with a built-in file system and bash (code execution) tools |
+| **Web search**       | Built-in `web_search` and `web_fetch` tools when a web provider is configured |
+| **Tools**            | Attach custom tools, MCP tools, subagents, and workflows as tools |
+| **Skills and files** | Attach skills from `src/skills/` and context files from `src/files/` |
+| **Memory**           | Sessions and persistent memory are enabled by default unless disabled |
+| **Sandbox**          | A built-in sandbox environment for using CLIs and more advanced code execution |
+| **Self-scheduling**  | Built-in tools let an agent schedule its own future or recurring runs (ephemeral triggers) |
+
+### Building workflows
+
+Workflows are useful when you know the order of work: call an action, prompt an agent, branch on the result, wait for approval, then continue.
+
+| Capability                 | How it works                                                                               |
+| -------------------------- | ------------------------------------------------------------------------------------------ |
+| **Typed input and output** | Zod schemas validate the payload going in and the result coming out                        |
+| **Action steps**           | Call any action with `.run()`, your own or one from an integration                         |
+| **Agent steps**            | Prompt an agent with `.prompt()` when a step needs judgment                                |
+| **LLM steps**              | Use `promptLlm()` for a one-shot model call without defining a full agent                  |
+| **Durability**             | Completed steps are recorded and replayed, so retries resume instead of restarting         |
+| **Durable waits**          | `ctx.sleep()` and `ctx.hook()` suspend a run for a delay or until it is resumed externally |
+
+### Common failures
+
+- **Research real APIs before mirroring them** — building actions for custom integrations is very common; web search and fetch the actual reference & explore relevant docs, don't guess endpoints or payload shapes.
+- **Run before you claim you are finished** — deploy with `deploy_project`, run it in the cloud via `exec_command`, and read the real output before activating live triggers or claiming you are finished. Chat with agents and run workflows to confirm they behave correctly.
+- **Cover obvious edge cases** and write simple tests as needed (null field, empty array, a step that throws).
+- **Connected apps aren't in `.env`** — deploy never uploads `.env`; use the `connect_app` tool to get a link for the user to connect integrations in the web app (a browser cannot open in this workspace).
+- **Filtered deploys** — determine if you should do a full vs filtered deploy, or use WIP ignore directives (`search_docs "filtered deploy"`).
 - **Dependencies** — use the project's existing package manager (`package.json` `packageManager` field or lockfile); default to npm only on a freshly created project with no lockfile.
+- **Actions are leaf units** — an action never calls another action (including integration actions like `postMessage`). Compose actions in a workflow, or attach an integration action directly as a workflow step or agent tool. An action *can* call an agent, letting you create "subagent tools" or "agent steps".
 
 ## Audit & debug
 
 Use `exec_command` with the keystroke CLI — credentials are injected automatically. Do not call HTTP directly.
 
 ```bash
-keystroke workflow run <workflow-key> --input '{}'
-keystroke workflow runs list <workflow-key>
-keystroke workflow runs get <workflow-key> <run-id> --include steps,trace
-keystroke agent sessions list <agent-key>
-keystroke agent sessions get <agent-key> <session-id> --include messages,trace
-keystroke trigger list
-keystroke trigger url <trigger-key>
-keystroke trigger runs list <trigger-key>:<workflow-key>
-keystroke app list
+# Workflows
+keystroke workflow list                                                        # list deployed workflows
+keystroke workflow run <workflow-key> --input '{}'                             # invoke a workflow
+keystroke workflow runs list <workflow-key>                                    # recent runs for a workflow
+keystroke workflow runs get <workflow-key> <run-id> --include steps,trace      # one run in full: input, each step, execution trace
+
+# Agents
+keystroke agent list                                                           # list deployed agents
+keystroke agent prompt <agent-key> --message "Hi"                              # send a message (add --session-id to continue a session)
+keystroke agent sessions list <agent-key>                                      # recent sessions for an agent
+keystroke agent sessions get <agent-key> <session-id> --include messages,trace # one session in full: messages, execution trace
+
+# Triggers (attachment id is <trigger-key>:<workflow-key>)
+keystroke trigger list                                                         # list deployed triggers
+keystroke trigger url <trigger-key>                                            # print a trigger's webhook URL
+keystroke trigger runs list <trigger-key>:<workflow-key>                       # recent runs for a trigger→workflow attachment
+keystroke trigger runs get <trigger-key>:<workflow-key> <run-id> --include workflows,trace  # one run in full: workflows fired, execution trace
 ```
 
 Read `src/` first — existing agents, workflows, actions, and triggers are your best map of how this project works.
 
-## Skills map
-
-Call `search_skills` then `get_skill` with the key below.
-
-| Skill key             | Load when                          |
-| --------------------- | ---------------------------------- |
-| `keystroke-cli`       | CLI commands, config, projects     |
-| `keystroke-deploy`    | Build, full/filtered deploy, WIP ignore |
-| `keystroke-agents`    | Building or debugging agents       |
-| `keystroke-workflows` | Orchestration, action steps        |
-| `keystroke-actions`   | Shared steps, integration tools    |
-| `keystroke-triggers`  | Cron, webhook, poll automation     |
-| `keystroke-channels`  | Slack / external channel bindings  |
-| `keystroke-skills`    | `src/skills/` playbooks            |
-| `keystroke-files`     | Agent workspace files              |
-| `keystroke-apps`      | Connectable apps, catalog, connect |
+## Integrations and secrets
+
+To discover apps/integrations and their actions, query the live catalog with the CLI via `exec_command` (the docs integration index is unreliable):
+
+```bash
+keystroke app list                                  # apps registered/connectable in your org
+keystroke app search <query>                        # find an app and its slug in the full catalog
+keystroke app actions <slug> --search <q>           # actions an app exposes
+keystroke app action <action-slug>                  # input/output schema for one action
+keystroke credentials list                          # stored credential instances
+```
+
+To connect an app's credentials, use the `connect_app` tool to get a link for the user — a browser cannot open in this workspace, so do not use `keystroke connect`. See `search_docs "use credentials"` for binding credentials to workflow steps and agent tools.
+
+If an integration or a required action isn't supported, it is *extremely* easy to build a custom one — connections to any HTTP API or MCP server, including internal or private ones. `search_docs "custom integration"`.
+
+## Docs
+
+Look things up in the Keystroke documentation as you work — it's the source of truth for APIs, patterns, and examples. Prefer what the docs return over your prior knowledge.
+
+- `search_docs` — broad/conceptual lookup (e.g. `search_docs "build an agent"`, `"webhook trigger"`, `"filtered deploy"`). Returns matching pages with their doc paths; read one by passing its path to `query_docs`.
+- `query_docs` — exact keyword/regex search, structure exploration, and reading pages by path against the docs filesystem: `head -n 200 /quickstart.mdx`, `rg -il "defineWorkflow" /`, `tree / -L 2`.
+
+Each `query_docs` call is stateless — the working dir resets to `/`, so use absolute paths or chain with `&&` — and output is capped (~30KB). Prefer a targeted `rg -C 3 "term" /path.mdx` or `head -n 120 /path.mdx` over `cat` on large pages, and batch several files into one read (`head -n 80 /a.mdx /b.mdx`).
+
+Search before editing for any topic — agents, workflows, triggers, actions, channels, apps, skills, files, deploy, CLI, config.
+
+For a command's flags and usage, run `keystroke <command> --help` via `exec_command` (authoritative, always current); use `search_docs`/`query_docs` for concepts, patterns, and examples.
+
+Common pages to read with `query_docs` (e.g. `cat /learn/agents/build-agents.mdx`):
+
+| Doc path | Read when |
+| -------- | --------- |
+| `/cli` | Full command reference, flags, JSON output |
+| `/explore-features` | Guide to find relevant feature documentation |
+| `/learn/agents/build-agents` | Models, tools, subagents, sandboxes, MCP tools on agents |
+| `/learn/workflows/build-workflows` | Steps, orchestration, sandboxes, durable waits |
+| `/learn/actions/overview` | Action rules (leaf units, no action-in-action) |
+| `/learn/triggers/overview` | Choosing a trigger type |
+| `/learn/credentials/connect-credentials` | Connecting apps, OAuth, project credentials |
+| `/learn/credentials/custom-integrations` | Building a custom HTTP / MCP / GraphQL integration |
+| `/learn/projects/deploy-individual-files` | `--filter` deploys, `@keystroke ignore` |
+| `/learn/logs/overview` | Reading run history, debugging deployed runs |

package/dist/skills-bundle/_AGENTS.md

@@ -2,28 +2,26 @@
 
 This codebase is a Keystroke project.
 
-> Keystroke is a code-first AI automation platform, an n8n alternative built for agents. With it, anyone can build specialized AI agents and workflow automations as real TypeScript, then deploy them to a managed cloud platform where they run. Unlike tools like Zapier and n8n that hide logic behind brittle JSON, everything in Keystroke is actual code that coding agents (Cursor, Claude Code, Codex, etc.) can build, test, and maintain.
+> Keystroke is a code-first AI automation platform. With it, anyone can build specialized AI agents and workflow automations in TypeScript, then deploy them to a managed cloud platform where they run.
 
 - **Build agents and workflows:** Build agents and workflows with an open TypeScript framework. Run tests, connect integrations, and maintain what you build over time.
-- **Connect to thousands of integrations:** Keystroke has over 1,000 built-in integrations (Slack, Google, Linear, and hundreds more). You can also quickly build a connection for any HTTP API (including private internal APIs) or MCP server.
-- **Deploy what you build:** The Keystroke platform gives teams a managed workspace to run what they build. Deploy agents and workflows from your project, then inspect runs, manage credentials, and collaborate from a shared web platform.
+- **Connect to thousands of integrations:** Keystroke has over 1,000 built-in integrations (Slack, Google, Linear, and hundreds more). It is also extremely easy to quickly build a connection for any HTTP API (including private internal APIs) or MCP server.
+- **Deploy what you build:** The Keystroke platform gives teams a managed workspace to run what they build. Deploy agents and workflows from your project. Then, view workflows on an interactive canvas, chat with agents in a chat interface, inspect runs, manage credentials, and collaborate from a shared web platform.
 
 ## Keystroke projects
 
-In Keystroke, everything you build belongs to a project. A project is a shared space for building and running your agents, workflows, triggers, and actions. Think of a project as the unit you build, deploy, give credentials to, invite teammates into, and inspect run history for.
+In Keystroke, everything you build belongs to a project. A project is a shared space for building and running your agents, workflows, triggers, and actions. Think of a project as the unit you build, deploy, give credentials to, invite teammates to, and inspect run history for.
 
 Keystroke projects use two related ideas:
 
 - **Local codebase**: a local directory (this codebase) with `keystroke.config.ts` and `src/` (`keystroke init` scaffolds this). Run it locally with `keystroke start` / `keystroke dev`; no platform project required.
 - **Platform project**: an org-owned cloud record: a deploy target plus a hosted runtime (its own keystroke server, URL, managed credentials). Projects are inactive until their first deploy.
 
-`keystroke deploy --project <id>` links your local codebase to your platform project: it uploads the built local codebase and activates that platform project's server. After the first deploy the project is saved as your active target (in `~/.keystroke`), so later commands — including subsequent deploys — can drop `--project`. Deployed agents and workflows instantly run there with no additional configuration; the web workspace is where users can manage their projects, deployments, logs, credentials, etc.
-
-To go the other direction — start from a platform project that already exists — `keystroke pull --project <id>` downloads its active deploy source into a local directory, installs dependencies, and syncs skills. See the [cli skill](.agents/skills/keystroke-cli/SKILL.md).
+`keystroke deploy --project <id>` links your local codebase to your platform project: it uploads the built local codebase and activates that platform project's server. After the first deploy the project is saved as your active target (in `~/.keystroke`), so later commands — including subsequent deploys — can drop `--project`. Deployed agents and workflows instantly run there with no additional configuration; the web workspace is where organization members can manage their projects, deployments, logs, credentials, etc.
 
 ## How this codebase fits in
 
-This is the local codebase that defines your agents, workflows, triggers, actions, skills, and files.
+This is the local codebase that defines your agents, workflows, triggers, actions, skills, context files, etc.
 
 Projects are scaffolded with an opinionated folder structure (like Next.js for building AI systems):
 
@@ -38,7 +36,6 @@ my-app/
     skills/                # project skills for agents
     files/                 # context for attaching to agents
   AGENTS.md                # this guide
-  .agents/skills/          # Keystroke skills and best practices
 ```
 
 Keystroke discovers everything under `src/` by convention. Add a file that exports an agent, workflow, trigger, etc, and it becomes part of the project. Because the project is code, agents (Cursor, Claude Code, Codex, etc) can read it, change it, run tests, and maintain it over time.
@@ -47,68 +44,150 @@ Each primitive imports from `@keystrokehq/keystroke/<piece>` (`/action`, `/agent
 
 ## How you work
 
+### Build, deploy, test
+
 You build in `src/`, deploy to your project on the platform, then run and inspect what's deployed with the CLI. The loop is: edit → `keystroke deploy` → run/inspect/test → repeat. You should deploy often.
 
 ```bash
+keystroke auth status                      # show the current user and active organization
 keystroke auth login                       # once; token is automatically stored and reused
 keystroke project list                     # your projects on the platform
 keystroke deploy --project <id>            # build + ship src/ to the platform
-keystroke workflow run greeting --input '{"name":"Ada"}'   # run on your project
-keystroke agent prompt hello --message "Hi"
+keystroke workflow run greeting --input '{"name":"Ada"}'   # test and run a workflow
+keystroke agent prompt hello --message "Hi" # test and chat with an agent
 ```
 
 After a deploy, runtime commands (`workflow`, `agent`, `trigger`, `app`, `connect`) operate on that project automatically — no target to manage.
 
-A project is a single live runtime. A deploy replaces what's running on that project — there's no separate dev and prod within one project. You can use `--filter` deploys and `@keystroke ignore` to keep iterate quickly.
+A project is a single live runtime. A deploy replaces what's running on that project — there's no separate dev and prod within one project. You can use `--filter` deploys and `@keystroke ignore` to iterate quickly.
 
 To create a new project: `keystroke init my-app --yes`, then deploy.
 
-Full deploy mechanics: [cli skill](.agents/skills/keystroke-cli/SKILL.md), [deploy skill](.agents/skills/keystroke-deploy/SKILL.md).
+Look things up cheapest-first: `keystroke <command> --help` for the authoritative flags and usage of any command (local, always current); `keystroke docs search`/`query` for documentation and examples; and `/cli` for the full reference when you need broad discovery.
+
+### Building agents
+
+Agents are useful when a task needs judgment, language understanding, tool use, or multi-turn context.
+
+| Capability           | How it works                                        |
+| -------------------- | --------------------------------------------------- |
+| **Instructions**     | `systemPrompt` tells the model how to behave        |
+| **Models**           | `model` uses `vendor/model-id`, with optional `thinkingLevel` |
+| **File system**      | Each session gets a `/workspace` with a built-in file system and bash (code execution) tools |
+| **Web search**       | Built-in `web_search` and `web_fetch` tools when a web provider is configured |
+| **Tools**            | Attach custom tools, MCP tools, subagents, and workflows as tools |
+| **Skills and files** | Attach skills from `src/skills/` and context files from `src/files/` |
+| **Memory**           | Sessions and persistent memory are enabled by default unless disabled |
+| **Sandbox**          | A built-in sandbox environment for using CLIs and more advanced code execution |
+| **Self-scheduling**  | Built-in tools let an agent schedule its own future or recurring runs (ephemeral triggers) |
+
+**Workflow steps.** Workflows orchestrate actions, agent prompts, LLM calls (`promptLlm`), and other workflows as steps. Reuse a workflow by importing it and calling `await otherWorkflow.run(input)` — a first-class durable step (validated IO, checkpointed, runs inline in the same run; never thread `ctx`). Import a workflow into an agent's `tools` / call over HTTP when you want it as its own tracked run.
+
+**Agent tools.** Agents can use actions, subagents, workflows, and MCP tools as tools — import them directly into `tools`.
 
-## Working habits
+### Building workflows
 
-A few things that are easy to skip and cause common failures:
+Workflows are useful when you know the order of work: call an action, prompt an agent, branch on the result, wait for approval, then continue.
 
-- **Research real APIs before mirroring them** — web search and fetch the actual reference & explore relevant docs; don't guess endpoints or payload shapes.
-- **Run before you depend on it** — run the workflow/agent and read the real output (`keystroke workflow runs get <workflow-slug> <run-id> --include steps,trace`) before wiring dependent steps or claiming you are finished building something.
-- **Cover obvious edge cases** and write simple tests as needed (null field, empty array, a step that throws) — see [workflows skill](.agents/skills/keystroke-workflows/SKILL.md).
-- **Connected apps aren't in `.env`** — `keystroke deploy` never uploads `.env`; connect apps (aka, integrations) for your project with `keystroke connect <slug>`. See [apps skill](.agents/skills/keystroke-apps/SKILL.md).
-- **Shipping to prod** — determine if you should do a full vs filtered deploy, or use WIP ignore directives: [deploy skill](.agents/skills/keystroke-deploy/SKILL.md).
-- **Actions are leaf units** - An action never calls another action (including integration actions like `slackSendMessage`). Compose actions in a workflow, or attach an integration action directly as a workflow step / agent tool. An action may call an agent.
-- **Workflow steps** - Workflows orchestrate actions, agent prompts, LLM calls (`promptLlm`), and other workflows as steps. Reuse a workflow by importing it and calling `await otherWorkflow.run(input)` — a first-class durable step (validated IO, checkpointed, runs inline in the same run; never thread `ctx`). Expose a workflow as an agent tool (`defineWorkflowTool`) / over HTTP when you want it as its own tracked run.
-- **Agent tools** - Agents can use actions, subagents (`defineSubagentTool`), workflows (`defineWorkflowTool`), and MCP tools as tools.
+| Capability                 | How it works                                                                                  |
+| -------------------------- | --------------------------------------------------------------------------------------------- |
+| **Typed input and output** | Zod schemas validate the payload going in and the result coming out                           |
+| **Action steps**           | Call any [action](/learn/actions/overview) with `.run()`, your own or one from an integration |
+| **Agent steps**            | Prompt an [agent](/learn/agents/overview) with `.prompt()` when a step needs judgment         |
+| **LLM steps**              | Use `promptLlm()` for a one-shot model call without defining a full agent                     |
+| **Durability**             | Completed steps are recorded and replayed, so retries resume instead of restarting            |
+| **Durable waits**          | `ctx.sleep()` and `ctx.hook()` suspend a run for a delay or until it is resumed externally    |
 
-## Audit & debug (CLI)
+### Common failures
+
+- **Research real APIs before mirroring them** — building actions for custom integrations is very common; web search and fetch the actual reference & explore relevant docs, don't guess endpoints or payload shapes.
+- **Run before you claim you are finished** — deploy what you build, run it in the cloud, and read the real output before activating live triggers or claiming you are finished building something. Chat with agents to ensure they behave correctly. Run workflows to ensure they behave correctly.
+- **Cover obvious edge cases** and write simple tests as needed (null field, empty array, a step that throws).
+- **Connected apps aren't in `.env`** — `keystroke deploy` never uploads `.env`; connect apps (aka, integrations) for your project with `keystroke connect <slug>`.
+- **Filtered deploys** — determine if you should do a full vs filtered deploy, or use WIP ignore directives.
+- **Actions are leaf units** - An action never calls another action (including integration actions like `slackSendMessage`). You can compose actions in a workflow, or attach an integration action directly as a workflow step or agent tool. Action can call agents, allowing you to create "subagent tools" or "agent steps".
+
+### Audit & debug (CLI)
 
 Use the CLI to inspect your deployed project.
 
 ```bash
-keystroke workflow run <workflow-slug> --input '{}'
-keystroke workflow runs list <workflow-slug>
-keystroke workflow runs get <workflow-slug> <run-id> --include steps,trace
-keystroke agent sessions list <agent-slug>
-keystroke agent sessions get <agent-slug> <session-id> --include messages,trace
-keystroke app list
-keystroke trigger list
-keystroke trigger url <trigger-slug>
-keystroke trigger runs list <trigger-slug>:<workflow-slug>
+# Workflows
+keystroke workflow list                                                          # list deployed workflows
+keystroke workflow runs list <workflow-slug>                                     # recent runs for a workflow
+keystroke workflow runs get <workflow-slug> <run-id> --include steps,trace       # one run in full: input, each step, execution trace
+
+# Agents
+keystroke agent list                                                             # list deployed agents
+keystroke agent sessions list <agent-slug>                                       # recent sessions for an agent
+keystroke agent sessions get <agent-slug> <session-id> --include messages,trace  # one session in full: messages, execution trace
+
+# Triggers (attachment id is <trigger-slug>:<workflow-slug>)
+keystroke trigger list                                                           # list deployed triggers
+keystroke trigger url <trigger-slug>                                             # print a trigger's webhook URL
+keystroke trigger runs list <trigger-slug>:<workflow-slug>                       # recent runs for a trigger→workflow attachment
+keystroke trigger runs get <trigger-slug>:<workflow-slug> <run-id> --include workflows,trace  # one run in full: workflows fired, execution trace
 ```
 
 Read `src/` first; existing agents, workflows, actions, and triggers are your best map of how this project works.
 
-## Skills
-
-Whenever you work with your Keystroke project, you should review relevant skills. Skills can be found in `.agents/skills/` and are folders named with the following format: `keystroke-[name]`.
-
-| Skill                                                        | Load when                          |
-| ------------------------------------------------------------ | ---------------------------------- |
-| [cli](.agents/skills/keystroke-cli/SKILL.md)                 | Deploy, run, inspect; projects & auth |
-| [deploy](.agents/skills/keystroke-deploy/SKILL.md)           | Build, full/filtered deploy, WIP ignore |
-| [agents](.agents/skills/keystroke-agents/SKILL.md)           | Building or debugging agents       |
-| [workflows](.agents/skills/keystroke-workflows/SKILL.md)     | Orchestration, action steps        |
-| [actions](.agents/skills/keystroke-actions/SKILL.md)         | Shared steps, integration tools    |
-| [triggers](.agents/skills/keystroke-triggers/SKILL.md)       | Cron, webhook, poll automation     |
-| [channels](.agents/skills/keystroke-channels/SKILL.md)       | Slack / external channel bindings  |
-| [skills](.agents/skills/keystroke-skills/SKILL.md)           | `src/skills/` playbooks            |
-| [files](.agents/skills/keystroke-files/SKILL.md)             | Agent workspace files              |
-| [apps](.agents/skills/keystroke-apps/SKILL.md)               | Connectable apps, catalog, connect |
+## Documentation
+
+**You should regularly and thoroughly read the documentation** when working with the CLI, building agents/workflows/triggers/actions/etc, and debugging. Bias heavily toward quickly reading documentation before making decisions or changes, and prefer what the docs say over your prior knowledge.
+
+Documentation is directly available via the CLI (no auth required). Use these CLI commands to search, query, and read the Keystroke documentation:
+
+- **`keystroke docs search "<query>"`** — best for broad or conceptual lookups when you don't know the path (e.g. `keystroke docs search "webhook trigger"`). Returns matching pages with titles and paths; read one by passing its path to `query`.
+- **`keystroke docs query "<command>"`** — exact keyword/regex search, structure exploration, and reading pages by path with a shell-style command (`cat`, `rg`, `ls`, `tree`, `head`). Append `.mdx` to a doc path to read it: `keystroke docs query "cat /quickstart.mdx"`, `keystroke docs query "rg -il trigger /"`, `keystroke docs query "tree / -L 2"`.
+
+Each `query` is stateless — the working dir resets to `/`, so use absolute paths or chain with `&&` — and output is capped (~30KB). Prefer a targeted `rg -C 3 "term" /path.mdx` or `head -n 120 /path.mdx` over `cat` on large pages, and batch several files into one read (`head -n 80 /a.mdx /b.mdx`).
+
+Below is a sample of common documentation pages. You can read a page with `keystroke docs query "cat <path>.mdx"`.
+
+| Doc path | Read when |
+| -------- | --------- |
+| `/cli` | Full command reference, flags, JSON output |
+| `/explore-features` | Guide to find relevant feature documentation |
+| `/learn/projects/overview` | How local codebase vs platform project relate |
+| `/learn/projects/deploy-a-project` | Deploy, link local codebase to platform project |
+| `/learn/projects/deploy-individual-files` | `--filter` deploys, `@keystroke ignore` |
+| `/learn/agents/build-agents` | Models, tools, subagents, sandboxes, MCP tools on agents |
+| `/learn/agents/run-agents` | Sessions, prompting, channels |
+| `/learn/agents/test-agents` | Testing agents locally |
+| `/learn/agents/external-channels` | Slack / external channel bindings |
+| `/learn/workflows/build-workflows` | Steps, orchestration, sandboxes |
+| `/learn/workflows/test-workflows` | Workflow tests |
+| `/learn/workflows/run-workflows` | Running workflows, inspecting output |
+| `/learn/actions/overview` | Action rules (leaf units, no action-in-action) |
+| `/learn/actions/workflow-steps` | Wiring actions into workflows |
+| `/learn/actions/agent-tools` | Exposing actions as agent tools |
+| `/learn/triggers/overview` | Choosing a trigger type |
+| `/learn/triggers/app-events` | App-event triggers |
+| `/learn/triggers/webhooks` | Webhook triggers |
+| `/learn/triggers/schedules` | Cron / scheduled triggers |
+| `/learn/triggers/polling` | Polling triggers |
+| `/learn/triggers/advanced-triggers` | Filters, transforms, attachment ids |
+| `/learn/credentials/connect-credentials` | `keystroke connect`, OAuth, project credentials |
+| `/learn/credentials/use-credentials` | Using connected apps in code |
+| `/learn/credentials/custom-integrations` | Building a custom HTTP / MCP / GraphQL integration |
+| `/learn/skills/overview` | `src/skills/` playbooks for agents (runtime, not this guide) |
+| `/learn/skills/create-skills` | Authoring an agent skill |
+| `/learn/files/overview` | `src/files/` workspace context |
+| `/learn/logs/overview` | Reading run history, debugging deployed runs |
+
+## Integrations and secrets
+
+For searching native integrations use the CLI, not docs. The docs contain an index of integrations, but the documentation integration index is not reliable. To discover apps/integrations and their actions, query the live catalog with the CLI:
+
+```bash
+keystroke app list                                  # list all registered/supported apps
+keystroke app search <query>                        # find an app and its slug in the full catalog
+keystroke app actions <slug> --search <q>           # actions an app exposes
+keystroke app action <action-slug>                  # input/output schema for one action
+keystroke connect <slug>                            # connect an app credential (web flow)
+keystroke credentials list                          # List stored/available credential instances
+```
+
+You can read `/learn/credentials/use-credentials` for using credentials in code and binding credentials to workflow steps and agent tools.
+
+If you ever run into issues with an integration (or a required action isn't supported), it is *extremely* easy to build custom integrations and actions. You can build connections to any HTTP API or MCP server, including internal or private ones. See `/learn/credentials/custom-integrations`.

package/dist/skills-bundle/skills/keystroke-agents/SKILL.md

@@ -58,7 +58,7 @@ defineAgent({
 });
 ```
 
-Delegate to other agents with subagents (`defineSubagentTool`) — see [tools-mcp-codemode.md](references/tools-mcp-codemode.md).
+Delegate to other agents with subagents, or trigger multi-step work with workflows — import them directly into `tools` — see [tools-mcp-codemode.md](references/tools-mcp-codemode.md).
 
 ## Structured output (`outputSchema`)