@keystrokehq/cli 0.1.44 → 0.1.46

package/dist/index.mjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { $ as GetCredentialResponseSchema, $t as SkillSummaryListResponseSchema, A as CreateCustomAppRequestSchema, An as WorkflowCanvasCredentialBindingsSchema, At as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, B as CredentialConsumerListQuerySchema, Bn as WorkflowSummaryListResponseSchema, Bt as ProjectPullStateSchema, C as ConnectAuthorizeUrlResponseSchema, Cn as UploadProjectSourceManifestRequestSchema, Ct as ListProjectMetricsResponseSchema, D as CreateCredentialInstanceBodySchema, Dn as UserAvatarSchema, Dt as OrganizationSidebarBrandingPatchSchema, E as CreateApiKeyResponseSchema, En as UserAvatarPatchSchema, Et as OpenApiDiscoverResponseSchema, F as CreateProjectRequestSchema, Fn as WorkflowRunInputsPutBodySchema, Ft as PresignOrgLogoResponseSchema, G as DOCS_QUERY_TOOL, Gn as WorkspaceTriggerRunListResponseSchema, Gt as PromptInputSchema, H as CredentialInstanceListResponseSchema, Hn as WorkspaceTriggerFileSchema, Ht as ProjectResponseSchema, I as CreateProjectResponseSchema, In as WorkflowRunInputsSchema, It as PresignProjectSourceRequestSchema, J as DownloadActiveProjectArtifactResponseSchema, Jt as QueuedAgentPromptResponseSchema, K as DOCS_SEARCH_TOOL, Kn as WorkspaceWorkflowOverviewSchema, Kt as PromptResponseSchema, L as CredentialAssignmentListQuerySchema, Ln as WorkflowRunListResponseSchema, Lt as PresignProjectSourceResponseSchema, M as CreateOrganizationRequestSchema, Mn as WorkflowCanvasSchema, Mt as PresignChatAttachmentRequestSchema, N as CreateOrganizationResponseSchema, Nn as WorkflowRunDetailResponseSchema, Nt as PresignChatAttachmentResponseSchema, O as CreateCredentialsRequestSchema, On as UserPreferencesPatchSchema, Ot as OrganizationSidebarBrandingSchema, P as CreateProjectArtifactResponseSchema, Pn as WorkflowRunHooksResponseSchema, Pt as PresignOrgLogoRequestSchema, Q as GatewayAttachmentRecordSchema, Qn as listenPortFromPublicUrl, Qt as SkillSummaryDetailResponseSchema, R as CredentialAssignmentListResponseSchema, Rn as WorkflowRunResponseSchema, Rt as PresignUserAvatarRequestSchema, S as CompleteProjectArtifactResponseSchema, Sn as UpdateProjectSettingsRequestSchema, St as ListProjectMembersResponseSchema, T as CreateApiKeyRequestSchema, Tn as UpsertGatewayAttachmentBodySchema, Tt as McpDiscoverResponseSchema, U as CredentialInstanceRecordSchema, Un as WorkspaceTriggerListResponseSchema, Ut as ProjectSettingsResponseSchema, V as CredentialConsumerListResponseSchema, Vn as WorkspaceTriggerDetailSchema, Vt as ProjectReachabilityResponseSchema, Wn as WorkspaceTriggerOverviewSchema, Wt as ProjectSlugAvailabilityResponseSchema, X as ErrorResponseSchema, Xn as detectProjectPackageManagerFromSnapshot, Y as DownloadActiveProjectSourceResponseSchema, Yn as deriveCustomAppDisplay, Yt as QueuedRunResponseSchema, Z as ExecuteKeystrokeToolRequestSchema, Zn as isAcceptableInstallExit, Zt as RecentResourceListResponseSchema, _ as ChannelAccountListResponseSchema, _n as UpdateOrganizationMemberResponseSchema, _t as ListOrganizationInvitationsResponseSchema, a as AgentSessionDetailResponseSchema, an as StartOAuthConnectionInputSchema, ar as resolveConnectAppSlug, at as HistoryRunListQuerySchema, b as ChannelDirectoryListResponseSchema, bn as UpdateProjectMemberResponseSchema, bt as ListProjectDeploymentsResponseSchema, c as AgentSummaryListResponseSchema, cn as SubmitTeamRequestRequestSchema, cr as slugifyAppName, ct as InviteOrganizationMembersResponseSchema, d as AssignCredentialBodySchema, dn as TriggerRunDetailResponseSchema, en as SlugAvailabilityResponseSchema, et as GetCustomAppResponseSchema, f as BindChannelBodySchema, fn as TriggerRunListResponseSchema, ft as ListAgentMemoryFilesResponseSchema, g as CatalogAppsPageResponseSchema, gn as UpdateOrganizationMemberRequestSchema, gt as ListCredentialsResponseSchema, h as CatalogAppDetailResponseSchema, hn as UpdateCredentialRequestSchema, ht as ListAppsResponseSchema, i as AgentSessionChatStateResponseSchema, in as StartMcpOAuthConnectionResultSchema, it as HistoryRunDetailResponseSchema, j as CreateCustomAppResponseSchema, jn as WorkflowCanvasRunSchema, jt as PollRunResponseSchema, k as CreateCredentialsResponseSchema, kn as UserPreferencesSchema, kt as PROJECT_PULL_STATE_RELATIVE_PATH, l as AgentTriggerSummaryListResponseSchema, ln as TriggerDetailResponseSchema, lt as InviteProjectMembersRequestSchema, m as CatalogActionsPageResponseSchema, mn as UpdateCredentialInstanceBodySchema, mt as ListApiKeysResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nn as StartKeystrokeConnectionResultSchema, nr as parseErrorResponse, nt as HealthResponseSchema, o as AgentSessionListResponseSchema, on as StartOAuthConnectionResultSchema, or as resolveDocsMcpUrl, ot as HistoryRunListResponseSchema, p as CatalogActionDetailResponseSchema, pn as UpdateChannelBindingBodySchema, pt as ListAgentWorkspaceFilesResponseSchema, q as DeclineOrganizationInvitationResponseSchema, qn as buildConnectDeeplink, r as ActiveOrganizationResponseSchema, rn as StartMcpOAuthConnectionInputSchema, rt as HistoryRunCancelResponseSchema, s as AgentSummaryDetailResponseSchema, sn as SubmitMarketingContactRequestSchema, sr as resolvePublicPlatformOrigin, st as InviteOrganizationMembersRequestSchema, t as ACTIVE_ORG_HEADER, tn as StartKeystrokeConnectionInputSchema, tr as parseAppSlug, tt as GraphqlDiscoverResponseSchema, u as AppSlugAvailabilityResponseSchema, un as TriggerListResponseSchema, ut as InviteProjectMembersResponseSchema, v as ChannelConnectionListResponseSchema, vn as UpdateOrganizationRequestSchema, vt as ListOrganizationMembersResponseSchema, w as ConnectProvidersResponseSchema, wn as UploadProjectSourceResponseSchema, wt as ListProjectsResponseSchema, x as ChannelPlatformSchema, xn as UpdateProjectRequestSchema, xt as ListProjectFilesResponseSchema, y as ChannelConnectionSchema, yn as UpdateProjectMemberRequestSchema, yt as ListOrganizationsResponseSchema, z as CredentialAssignmentRecordSchema, zn as WorkflowSummaryDetailResponseSchema, zt as PresignUserAvatarResponseSchema } from "./dist-DtDJareY.mjs";
 import { i as packProjectArtifact, n as withMcpReadClient, r as mergeFilteredArtifact, t as mapInParallelBatches } from "./dist-83uw4_yr.mjs";
-import { a as installPlaygroundDependencies, c as createCliConfig, d as getEffectiveApiTarget, f as getPlatformUrl, g as resolvePlatformUrlForWebUrl, i as installDependencies$1, l as getCliConfigDir, m as DEFAULT_PLATFORM_URL, n as buildPlaygroundWorkspace, o as resolvePackageManager, p as getWebUrl, s as resolveCliRoot, t as readCliVersion, u as getConfigDir } from "./version-D2psJMX3.mjs";
+import { _ as getPlatformUrl, c as detectPackageManager, d as resolveGithubPackagesToken, f as resolvePackageManager, g as getEffectiveApiTarget, h as getConfigDir, i as isReleaseAgeBlock, l as installDependencies$1, m as getCliConfigDir, n as resolveCliRoot, o as detectManagerFromLockfile, p as createCliConfig, s as buildPlaygroundWorkspace, t as readCliVersion, u as installPlaygroundDependencies, v as getWebUrl, x as resolvePlatformUrlForWebUrl, y as DEFAULT_PLATFORM_URL } from "./version-key3f4tc.mjs";
 import { createRequire } from "node:module";
 import { Command } from "commander";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { Entry } from "@napi-rs/keyring";
 import { confirm, input, select } from "@inquirer/prompts";
 import { existsSync, lstatSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { access, lstat, mkdir, readFile, readdir, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
+import { access, lstat, mkdir, readFile, readdir, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { spawn, spawnSync } from "node:child_process";
 import { pathToFileURL } from "node:url";
 //#region ../../node_modules/.pnpm/ky@2.0.2/node_modules/ky/distribution/errors/KyError.js
@@ -6480,12 +6480,102 @@ function registerAuthCommand(program) {
 	registerAuthStatusCommand(auth);
 }
 //#endregion
+//#region src/update/ensure-sdk-current.ts
+const KEYSTROKE_SCOPE = "@keystrokehq/";
+function shouldSkip() {
+	return Boolean(process.env.KEYSTROKE_SKIP_UPDATE || process.env.CI === "true" || process.env.CI === "1");
+}
+function readPackageJson(root) {
+	const path = join(root, "package.json");
+	if (!existsSync(path)) return;
+	try {
+		return JSON.parse(readFileSync(path, "utf8"));
+	} catch {
+		return;
+	}
+}
+/** Exact semver pins and local/workspace specs are left alone; everything else floats to latest. */
+function isPinnedSdkSpec(spec) {
+	if (!spec) return true;
+	const trimmed = spec.trim();
+	if (trimmed.startsWith("workspace:") || trimmed.startsWith("link:") || trimmed.startsWith("file:")) return true;
+	return /^\d+\.\d+\.\d+(-[\w.]+)?(\+[\w.]+)?$/.test(trimmed);
+}
+function listFloatingKeystrokePackages(root) {
+	const pkg = readPackageJson(root);
+	if (!pkg) return [];
+	const packages = [];
+	for (const [name, spec] of Object.entries(pkg.dependencies ?? {})) if (name.startsWith(KEYSTROKE_SCOPE) && !isPinnedSdkSpec(spec)) packages.push({
+		name,
+		dev: false
+	});
+	for (const [name, spec] of Object.entries(pkg.devDependencies ?? {})) if (name.startsWith(KEYSTROKE_SCOPE) && !isPinnedSdkSpec(spec)) packages.push({
+		name,
+		dev: true
+	});
+	return packages;
+}
+function updateCommand(manager, packageName, dev) {
+	const spec = `${packageName}@latest`;
+	if (manager === "npm") return {
+		command: "npm",
+		args: dev ? [
+			"install",
+			"-D",
+			spec
+		] : ["install", spec]
+	};
+	return {
+		command: manager,
+		args: dev ? [
+			"add",
+			"-D",
+			spec
+		] : ["add", spec]
+	};
+}
+function warnReleaseAgeBlock(packageName) {
+	process.stderr.write(`Warning: ${packageName}@latest is held back by your minimum-release-age setting; continuing with the currently installed version.\n`);
+}
+/**
+* Keep floating @keystrokehq/* project dependencies on latest before build/deploy.
+* The package manager no-ops when already current; minimum-release-age failures warn only.
+*/
+function ensureSdkCurrent(root) {
+	if (shouldSkip()) return;
+	const packages = listFloatingKeystrokePackages(root);
+	if (packages.length === 0) return;
+	const manager = detectManagerFromLockfile(root) ?? detectPackageManager();
+	const token = resolveGithubPackagesToken();
+	const env = token ? {
+		...process.env,
+		NODE_AUTH_TOKEN: token
+	} : process.env;
+	for (const pkg of packages) {
+		const { command, args } = updateCommand(manager, pkg.name, pkg.dev);
+		process.stderr.write(`Ensuring ${pkg.name} is up to date...\n`);
+		const result = spawnSync(command, args, {
+			cwd: root,
+			env,
+			encoding: "utf8"
+		});
+		if (result.status === 0) continue;
+		const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+		if (isReleaseAgeBlock(output)) {
+			warnReleaseAgeBlock(pkg.name);
+			continue;
+		}
+		process.stderr.write(`Warning: failed to update ${pkg.name}; continuing.\n${output}`);
+	}
+}
+//#endregion
 //#region src/commands/build.ts
 function registerBuildCommand(program) {
 	program.command("build").description("Build the keystroke project for production").option("--dir <path>", "Project directory", process.cwd()).action(async (options) => {
 		try {
 			const root = resolveProjectRoot(options.dir);
-			const { buildApp } = await import("./dist-CU5W5V2Z.mjs");
+			ensureSdkCurrent(root);
+			const { buildApp } = await import("./dist-CTHhFGjP.mjs");
 			await buildApp({ root });
 			process.stdout.write(`Built ${root}\n`);
 		} catch (error) {
@@ -6495,6 +6585,76 @@ function registerBuildCommand(program) {
 	});
 }
 //#endregion
+//#region src/tooling/resolve-configs-dir.ts
+/** Directory holding bundled tool configs (oxlint/vitest). Ships under dist/ for end users. */
+function resolveConfigsDir(fromModuleUrl = import.meta.url) {
+	const cliRoot = resolveCliRoot(fromModuleUrl);
+	const candidates = [join(cliRoot, "configs"), join(cliRoot, "dist", "configs")];
+	for (const candidate of candidates) if (existsSync(candidate)) return candidate;
+	throw new Error("Bundled tool configs not found — run `pnpm --filter @keystrokehq/cli build`");
+}
+//#endregion
+//#region src/tooling/run-tool.ts
+const require = createRequire(import.meta.url);
+/**
+* Resolve a bundled dev tool's executable from the CLI's own node_modules. The tools
+* (oxlint, vitest, typescript) ship as CLI dependencies, so user projects don't declare
+* them. Their bins are Node launchers, so callers run them with `node <bin>`.
+*/
+function resolveToolBin(pkg, binName) {
+	const packageJsonPath = require.resolve(`${pkg}/package.json`);
+	const { bin } = JSON.parse(readFileSync(packageJsonPath, "utf8"));
+	const relative = typeof bin === "string" ? bin : bin?.[binName];
+	if (!relative) throw new Error(`Package "${pkg}" does not expose a "${binName}" bin`);
+	return join(dirname(packageJsonPath), relative);
+}
+/** Run a bundled tool bin as a child process, inheriting stdio. Resolves with its exit code. */
+function runToolBin(options) {
+	const binPath = resolveToolBin(options.pkg, options.binName);
+	return new Promise((resolve, reject) => {
+		const child = spawn(process.execPath, [binPath, ...options.args], {
+			cwd: options.cwd,
+			env: options.env ?? process.env,
+			stdio: "inherit"
+		});
+		child.on("error", reject);
+		child.on("exit", (code) => resolve(code ?? 1));
+	});
+}
+//#endregion
+//#region src/tooling/run-lint.ts
+/** Lint the project with the bundled oxlint + config. Resolves with the oxlint exit code. */
+function runLint(root, args = ["."]) {
+	return runToolBin({
+		pkg: "oxlint",
+		binName: "oxlint",
+		args: [
+			"--config",
+			join(resolveConfigsDir(), "oxlintrc.json"),
+			...args
+		],
+		cwd: root
+	});
+}
+//#endregion
+//#region src/tooling/run-typecheck.ts
+/**
+* Type-check the project with the bundled TypeScript. tsdown (build) strips types without
+* checking them, so build/deploy call this as a gate. Resolves with the tsc exit code.
+*/
+async function runTypecheck(root) {
+	return runToolBin({
+		pkg: "typescript",
+		binName: "tsc",
+		args: [
+			"--noEmit",
+			"-p",
+			join(root, "tsconfig.json")
+		],
+		cwd: root
+	});
+}
+//#endregion
 //#region src/commands/deploy.ts
 const POLL_INTERVAL_MS = 2e3;
 const DEPLOY_TIMEOUT_MS = 12e4;
@@ -6538,7 +6698,7 @@ async function sleep(ms) {
 }
 async function buildDeployArchive(client, root, projectId, filter) {
 	if (filter?.length) {
-		const { buildFilteredApp } = await import("./dist-CU5W5V2Z.mjs");
+		const { buildFilteredApp } = await import("./dist-CTHhFGjP.mjs");
 		const filtered = await buildFilteredApp({
 			root,
 			filter,
@@ -6560,7 +6720,7 @@ async function buildDeployArchive(client, root, projectId, filter) {
 			sourceFiles: filtered.sourceFiles
 		};
 	}
-	const { buildApp } = await import("./dist-CU5W5V2Z.mjs");
+	const { buildApp } = await import("./dist-CTHhFGjP.mjs");
 	const { sourceFiles } = await buildApp({
 		root,
 		collectSources: true,
@@ -6574,6 +6734,9 @@ async function buildDeployArchive(client, root, projectId, filter) {
 }
 async function runDeploy(options) {
 	const root = resolveProjectRoot(options.dir);
+	ensureSdkCurrent(root);
+	if (await runLint(root) !== 0) throw new Error("lint failed");
+	if (await runTypecheck(root) !== 0) throw new Error("typecheck failed");
 	const config = createCliConfig();
 	const client = createCliPlatformClient(config);
 	await ensureLinkedOrganization(config, root);
@@ -6682,7 +6845,7 @@ function runtimeChildEnv(parentEnv, overrides) {
 //#region src/project/bootstrap-run.ts
 /** Node args + env for `@keystrokehq/build` bootstrap (shared by start + dev). */
 async function resolveBootstrapRun(options) {
-	const { resolveRuntimeBuildArtifact } = await import("./dist-CU5W5V2Z.mjs");
+	const { resolveRuntimeBuildArtifact } = await import("./dist-CTHhFGjP.mjs");
 	const loader = pathToFileURL(resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/runtime-loader.mjs")).href;
 	const bootstrap = resolveRuntimeBuildArtifact(options.runtimeNodeModules, "dist/standalone-bootstrap.mjs");
 	const args = [`--import=${loader}`];
@@ -6831,7 +6994,7 @@ async function runDev(options) {
 	process.on("SIGINT", shutdown);
 	process.on("SIGTERM", shutdown);
 	try {
-		const { watchApp } = await import("./dist-CU5W5V2Z.mjs");
+		const { watchApp } = await import("./dist-CTHhFGjP.mjs");
 		await watchApp({
 			root,
 			clean: false,
@@ -7031,21 +7194,9 @@ async function confirmTargetDir(targetDir) {
 	});
 }
 //#endregion
-//#region src/init/catalog-versions.ts
-const INIT_CATALOG_VERSIONS = {
-	zod: "^4.4.3",
-	oxlint: "^1.66.0",
-	typescript: "^6.0.3",
-	vitest: "^4.1.7",
-	"@types/node": "^25.9.1"
-};
-const INIT_KEYSTROKE_VERSION = "^0.1.32";
-//#endregion
 //#region src/init/copy-template.ts
 function renderTemplate(content, variables) {
-	let rendered = content.replaceAll("{{projectName}}", variables.projectName).replaceAll("{{keystrokeVersion}}", INIT_KEYSTROKE_VERSION).replaceAll("{{version}}", variables.version);
-	for (const [dep, version] of Object.entries(INIT_CATALOG_VERSIONS)) rendered = rendered.replaceAll(`{{catalog:${dep}}}`, version);
-	return rendered;
+	return content.replaceAll("{{projectName}}", variables.projectName);
 }
 async function copyEntry(sourcePath, targetPath, variables) {
 	if ((await stat(sourcePath)).isDirectory()) {
@@ -7070,8 +7221,6 @@ function resolveTemplateDir(templateName, fromModuleUrl = import.meta.url) {
 }
 //#endregion
 //#region src/init/project-files.ts
-const PROJECT_NPMRC = `@keystrokehq:registry=https://registry.npmjs.org
-`;
 const PROJECT_GITIGNORE = `node_modules/
 dist/
 data/
@@ -7094,39 +7243,23 @@ function buildPlaygroundPackageJson(projectName, targetDir, monorepoRoot) {
 			dev: "keystroke dev",
 			build: "keystroke build",
 			start: "keystroke start",
-			lint: "oxlint .",
-			typecheck: "tsc --noEmit",
-			"test:unit": "vitest run --project unit",
-			"test:int": "vitest run --project integration"
+			lint: "keystroke lint",
+			typecheck: "keystroke typecheck",
+			test: "keystroke test"
 		},
 		dependencies: {
 			"@keystrokehq/action": linkSpec(targetDir, join(monorepoRoot, "packages/action")),
 			"@keystrokehq/agent": linkSpec(targetDir, join(monorepoRoot, "packages/agent")),
 			"@keystrokehq/config": linkSpec(targetDir, join(monorepoRoot, "packages/config")),
 			"@keystrokehq/workflow": linkSpec(targetDir, join(monorepoRoot, "packages/workflow")),
-			zod: INIT_CATALOG_VERSIONS.zod
+			zod: "latest"
 		},
-		devDependencies: {
-			"@keystrokehq/cli": linkSpec(targetDir, join(monorepoRoot, "apps/cli")),
-			"@keystrokehq/tsconfig": linkSpec(targetDir, join(monorepoRoot, "packages/tsconfig")),
-			"@types/node": INIT_CATALOG_VERSIONS["@types/node"],
-			oxlint: INIT_CATALOG_VERSIONS.oxlint,
-			typescript: INIT_CATALOG_VERSIONS.typescript,
-			vitest: INIT_CATALOG_VERSIONS.vitest
-		}
+		devDependencies: { "@keystrokehq/cli": linkSpec(targetDir, join(monorepoRoot, "apps/cli")) }
 	}, null, 2)}\n`;
 }
 /** Patch hello-world scaffold for monorepo playground/ (link deps, no GitHub Packages). */
 async function applyPlaygroundManifest(targetDir, projectName, monorepoRoot) {
 	await writeFile(join(targetDir, "package.json"), buildPlaygroundPackageJson(projectName, targetDir, monorepoRoot));
-	try {
-		await unlink(join(targetDir, ".npmrc"));
-	} catch {}
-	const tsconfigPath = join(targetDir, "tsconfig.json");
-	const tsconfig = JSON.parse(await readFile(tsconfigPath, "utf8"));
-	tsconfig.include = ["src", "keystroke.config.ts"];
-	if (tsconfig.compilerOptions) tsconfig.compilerOptions.rootDir = ".";
-	await writeFile(tsconfigPath, `${JSON.stringify(tsconfig, null, 2)}\n`);
 }
 //#endregion
 //#region src/skills/agents-guide-version.ts
@@ -7233,7 +7366,6 @@ async function scaffoldEmptySrcDirs(targetDir) {
 //#region src/init/scaffold-project-dotfiles.ts
 /** Write dotfiles npm/pnpm deploy omits from bundled templates. */
 async function scaffoldProjectDotfiles(targetDir) {
-	await writeFile(join(targetDir, ".npmrc"), PROJECT_NPMRC);
 	await writeFile(join(targetDir, ".gitignore"), PROJECT_GITIGNORE);
 }
 //#endregion
@@ -7306,10 +7438,7 @@ async function runInit(options) {
 			if (!await confirmTargetDir(targetDir)) throw new Error("Init cancelled");
 		} else if (!options.yes) throw new Error(`Directory "${targetDir}" is not empty. Pass --yes to merge or choose an empty directory.`);
 	}
-	await copyTemplate(resolveTemplateDir(options.template ?? "hello-world"), targetDir, {
-		projectName,
-		version: options.version
-	});
+	await copyTemplate(resolveTemplateDir(options.template ?? "hello-world"), targetDir, { projectName });
 	await scaffoldEmptySrcDirs(targetDir);
 	if (options.noExample) {
 		await removeExampleFiles(targetDir);
@@ -7346,15 +7475,14 @@ function registerInitCommand(program) {
 				packageManager: options.pm,
 				noExample: options.example === false,
 				project,
-				organization: options.organization,
-				version: readCliVersion()
+				organization: options.organization
 			});
 			process.stdout.write(`Created keystroke project "${result.projectName}" at ${result.targetDir}\n`);
 			process.stdout.write("\nNext steps:\n");
 			process.stdout.write(`  cd ${result.targetDir}\n`);
 			process.stdout.write("  keystroke auth login                  # once\n");
 			if (!project) process.stdout.write("  keystroke project link --project <slug>  # link this directory to a platform project\n");
-			process.stdout.write("  keystroke deploy                    # build + ship src/ to the platform\n");
+			process.stdout.write("  keystroke deploy                    # lint + typecheck + build + ship dist/\n");
 		} catch (error) {
 			const message = error instanceof Error ? error.message : "Init failed";
 			process.stderr.write(`${message}\n`);
@@ -7363,6 +7491,43 @@ function registerInitCommand(program) {
 	});
 }
 //#endregion
+//#region src/commands/lint.ts
+function registerLintCommand(program) {
+	program.command("lint").description("Lint the project with the bundled oxlint").option("--dir <path>", "Project directory", process.cwd()).allowUnknownOption(true).argument("[args...]", "Extra arguments forwarded to oxlint").action(async (args, options) => {
+		const root = resolveProjectRoot(options.dir);
+		process.exitCode = await runLint(root, args.length > 0 ? args : void 0);
+	});
+}
+//#endregion
+//#region src/commands/test.ts
+function registerTestCommand(program) {
+	program.command("test").description("Run tests with the bundled vitest (--project unit|integration)").option("--dir <path>", "Project directory", process.cwd()).allowUnknownOption(true).argument("[args...]", "Extra arguments forwarded to vitest").action(async (args, options) => {
+		const root = resolveProjectRoot(options.dir);
+		const code = await runToolBin({
+			pkg: "vitest",
+			binName: "vitest",
+			args: [
+				"run",
+				"--root",
+				root,
+				"--config",
+				join(resolveConfigsDir(), "vitest.config.mjs"),
+				...args
+			],
+			cwd: root
+		});
+		process.exitCode = code;
+	});
+}
+//#endregion
+//#region src/commands/typecheck.ts
+function registerTypecheckCommand(program) {
+	program.command("typecheck").description("Type-check the project with the bundled TypeScript").option("--dir <path>", "Project directory", process.cwd()).action(async (options) => {
+		const root = resolveProjectRoot(options.dir);
+		process.exitCode = await runTypecheck(root);
+	});
+}
+//#endregion
 //#region src/commands/organization/run-organization.ts
 async function runOrganizationUpdate(config, input) {
 	await withActivePlatformClient(config, async (platform) => {
@@ -7857,7 +8022,7 @@ async function runStart(options) {
 	const apiPort = Number(new URL(serverUrl).port || 80);
 	const runtimeNodeModules = resolveCliRuntimeNodeModules(resolveCliRoot(import.meta.url));
 	ensureNativeDeps(runtimeNodeModules);
-	const { buildApp } = await import("./dist-CU5W5V2Z.mjs");
+	const { buildApp } = await import("./dist-CTHhFGjP.mjs");
 	await buildApp({
 		root,
 		clean: false
@@ -8407,6 +8572,9 @@ function createProgram() {
 	registerSkillsCommand(program);
 	registerSkillCommand(program);
 	registerBuildCommand(program);
+	registerLintCommand(program);
+	registerTypecheckCommand(program);
+	registerTestCommand(program);
 	registerDeployCommand(program);
 	registerPullCommand(program);
 	registerDevCommand(program);
@@ -8419,7 +8587,7 @@ function createProgram() {
 	return program;
 }
 async function runCli(argv) {
-	const { maybeAutoUpdate } = await import("./maybe-auto-update-4tu8zRcS.mjs");
+	const { maybeAutoUpdate } = await import("./maybe-auto-update-DPhUOdEF.mjs");
 	await maybeAutoUpdate(argv);
 	createProgram().parse(argv);
 }