@keystrokehq/cli 0.1.85 → 0.1.87

package/README.md

@@ -15,7 +15,7 @@ Keep the CLI small and boring.
 - **Agent-first** — commands should be predictable, scriptable, and easy for AI agents to invoke
 - **Split concerns** — non-secret config in one place, secrets in the OS keychain
 
-Right now the CLI exposes `init`, `build`, `dev`, `start`, `lint`, `typecheck`, `test`, `deploy`, `health`, `auth`, `--help`, and `--version`.
+Right now the CLI exposes `init`, `build`, `dev`, `start`, `lint`, `typecheck`, `test`, `deploy`, `pull`, `update`, `health`, `auth`, `--help`, and `--version`.
 
 ## Command grammar
 
@@ -24,7 +24,7 @@ Stripe-style: plural REST collection, then a verb, then the primary slug. New co
 ```text
 keystroke <collection> <verb> [<slug>] [<sub-id>] [--flags]
 keystroke <collection> <sub-collection> <verb> [<slug>] [<sub-id>] [--flags]
-keystroke <verb>                                    # lifecycle only (init, build, dev, deploy, …)
+keystroke <verb>                                    # lifecycle only (init, build, dev, deploy, update, …)
 ```
 
 Rules:
@@ -134,7 +134,7 @@ keystroke init --name my-app --dir ./my-app --yes --skip-install
 | `--skip-install` | Don't run package manager install     |
 | `--pm`           | Force npm, pnpm, yarn, or bun         |
 
-Scaffolded projects include a committed `tsconfig.json` and `package.json` scripts for `lint`, `typecheck`, and `test`. Lint config (oxlint) ships in the CLI bundle; projects declare `@types/node`, TypeScript, and vitest in devDependencies.
+Scaffolded projects include a committed `tsconfig.json` and `package.json` scripts for `lint`, `typecheck`, and `test` (invoking the globally installed `keystroke` binary). Lint config (oxlint) ships in the CLI bundle; projects declare `@types/node`, TypeScript, and vitest in devDependencies — not `@keystrokehq/cli`.
 
 ### `lint`
 

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { $ as CredentialInstanceRecordSchema, $n as WorkflowRunDetailResponseSchema, $t as PresignProjectSourceResponseSchema, A as ConnectManagedServiceCredentialRequestSchema, An as TriggerRunListResponseSchema, At as ListManagedServiceCredentialsResponseSchema, B as CreateCustomAppResponseSchema, Bn as UpdateProjectMemberResponseSchema, Bt as ManagedServiceCredentialSchema, C as ChannelConnectionListResponseSchema, Cn as SubmitMarketingContactRequestSchema, Ct as ListAgentMemoryFilesResponseSchema, D as ConfirmCheckoutRequestSchema, Dn as TriggerInvokeResponseSchema, Dr as resolvePublicPlatformOrigin, Dt as ListChannelPlatformsResponseSchema, E as CompleteProjectArtifactResponseSchema, En as TriggerInvokeInputsSchema, Er as resolveDocsMcpUrl, Et as ListAppsResponseSchema, F as CreateCredentialInstanceBodySchema, Fn as UpdateManagedServiceCredentialRequestSchema, Ft as ListProjectDeploymentsResponseSchema, G as CreateProjectResponseSchema, Gn as UpsertGatewayAttachmentBodySchema, Gt as OrganizationSidebarBrandingSchema, H as CreateOrganizationResponseSchema, Hn as UpdateProjectSettingsRequestSchema, Ht as McpDiscoverResponseSchema, I as CreateCredentialsRequestSchema, In as UpdateOrganizationMemberRequestSchema, It as ListProjectFilesResponseSchema, J as CredentialAssignmentListResponseSchema, Jn as UserPreferencesPatchSchema, Jt as PresignChatAttachmentRequestSchema, K as CreateSubscriptionCheckoutRequestSchema, Kn as UserAvatarPatchSchema, Kt as PROJECT_PULL_STATE_RELATIVE_PATH, L as CreateCredentialsResponseSchema, Ln as UpdateOrganizationMemberResponseSchema, Lt as ListProjectMembersResponseSchema, M as CreateApiKeyRequestSchema, Mn as UpdateChannelBindingBodySchema, Mt as ListOrganizationMembersPageQuerySchema, N as CreateApiKeyResponseSchema, Nn as UpdateCredentialInstanceBodySchema, Nt as ListOrganizationMembersPageResponseSchema, O as ConfirmCheckoutResponseSchema, On as TriggerListResponseSchema, Or as slugifyAppName, Ot as ListCredentialsPageQuerySchema, P as CreateBillingPortalRequestSchema, Pn as UpdateCredentialRequestSchema, Pt as ListOrganizationsResponseSchema, Q as CredentialInstanceListResponseSchema, Qn as WorkflowCanvasSchema, Qt as PresignProjectSourceRequestSchema, R as CreateCreditsCheckoutRequestSchema, Rn as UpdateOrganizationRequestSchema, Rt as ListProjectMetricsResponseSchema, S as ChannelAccountListResponseSchema, Sn as StartOAuthConnectionResultSchema, Sr as parseErrorResponse, T as ChannelDirectoryListResponseSchema, Tn as TriggerDetailResponseSchema, Tr as resolveConnectAppSlug, Tt as ListApiKeysResponseSchema, U as CreateProjectArtifactResponseSchema, Un as UploadProjectSourceManifestRequestSchema, Ut as OpenApiDiscoverResponseSchema, V as CreateOrganizationRequestSchema, Vn as UpdateProjectRequestSchema, Vt as ManagedServiceKindSchema, W as CreateProjectRequestSchema, Wn as UploadProjectSourceResponseSchema, Wt as OrganizationSidebarBrandingPatchSchema, X as CredentialConsumerListQuerySchema, Xn as WorkflowCanvasCredentialBindingsSchema, Xt as PresignOrgLogoRequestSchema, Y as CredentialAssignmentRecordSchema, Yn as UserPreferencesSchema, Yt as PresignChatAttachmentResponseSchema, Z as CredentialConsumerListResponseSchema, Zn as WorkflowCanvasRunSchema, Zt as PresignOrgLogoResponseSchema, _ as BindChannelBodySchema, _n as StartKeystrokeConnectionInputSchema, _r as isAcceptableInstallExit, _t as HistoryRunListResponseSchema, a as AgentSessionListResponseSchema, an as ProjectSettingsResponseSchema, ar as WorkflowSummaryDetailResponseSchema, at as DownloadActiveProjectSourceResponseSchema, b as CatalogAppDetailResponseSchema, bn as StartMcpOAuthConnectionResultSchema, bt as InviteProjectMembersRequestSchema, c as AgentTriggerSummaryListResponseSchema, cn as PromptResponseSchema, cr as WorkspaceTriggerFileSchema, ct as GatewayAttachmentRecordSchema, d as AutoTopupSummarySchema, dn as QueuedRunResponseSchema, dr as WorkspaceTriggerRunListResponseSchema, dt as GetCustomAppResponseSchema, en as PresignUserAvatarRequestSchema, er as WorkflowRunHooksResponseSchema, f as BillingActivityResponseSchema, fr as WorkspaceWorkflowOverviewSchema, ft as GraphqlDiscoverResponseSchema, g as BillingUsageResponseSchema, gn as SlugAvailabilityResponseSchema, gr as detectProjectPackageManagerFromSnapshot, gt as HistoryRunListQuerySchema, h as BillingSummaryResponseSchema, hn as SkillSummaryListResponseSchema, hr as deriveCustomAppDisplay, ht as HistoryRunDetailResponseSchema, i as AgentSessionDetailResponseSchema, in as ProjectResponseSchema, ir as WorkflowRunResponseSchema, it as DownloadActiveProjectArtifactResponseSchema, j as ConnectProvidersResponseSchema, jn as UpdateAutoTopupRequestSchema, jt as ListOrganizationInvitationsResponseSchema, k as ConnectAuthorizeUrlResponseSchema, kn as TriggerRunDetailResponseSchema, kt as ListCredentialsPageResponseSchema, l as AppSlugAvailabilityResponseSchema, lr as WorkspaceTriggerListResponseSchema, lt as GetAppCatalogEntryResponseSchema, m as BillingRedirectResponseSchema, mn as SkillSummaryDetailResponseSchema, mt as HistoryRunCancelResponseSchema, n as AcceptOrganizationInvitationResponseSchema, nn as ProjectPullStateSchema, nr as WorkflowRunInputsSchema, nt as DOCS_SEARCH_TOOL, o as AgentSummaryDetailResponseSchema, on as ProjectSlugAvailabilityResponseSchema, or as WorkflowSummaryListResponseSchema, ot as ErrorResponseSchema, p as BillingInvoiceUrlResponseSchema, pn as RecentResourceListResponseSchema, pr as buildConnectDeeplink, pt as HealthResponseSchema, q as CredentialAssignmentListQuerySchema, qn as UserAvatarSchema, qt as PROJECT_REACHABILITY_REQUEST_TIMEOUT_MS, r as ActiveOrganizationResponseSchema, rn as ProjectReachabilityResponseSchema, rr as WorkflowRunListResponseSchema, rt as DeclineOrganizationInvitationResponseSchema, s as AgentSummaryListResponseSchema, sn as PromptInputSchema, sr as WorkspaceTriggerDetailSchema, st as ExecuteKeystrokeToolRequestSchema, t as ACTIVE_ORG_HEADER, tn as PresignUserAvatarResponseSchema, tr as WorkflowRunInputsPutBodySchema, tt as DOCS_QUERY_TOOL, u as AssignCredentialBodySchema, un as QueuedAgentPromptResponseSchema, ur as WorkspaceTriggerOverviewSchema, ut as GetCredentialResponseSchema, v as CatalogActionDetailResponseSchema, vn as StartKeystrokeConnectionResultSchema, vr as listenPortFromPublicUrl, vt as InviteOrganizationMembersRequestSchema, w as ChannelConnectionSchema, wn as SubmitTeamRequestRequestSchema, wt as ListAgentWorkspaceFilesResponseSchema, x as CatalogAppsPageResponseSchema, xn as StartOAuthConnectionInputSchema, xr as parseAppSlug, xt as InviteProjectMembersResponseSchema, y as CatalogActionsPageResponseSchema, yn as StartMcpOAuthConnectionInputSchema, yt as InviteOrganizationMembersResponseSchema, z as CreateCustomAppRequestSchema, zn as UpdateProjectMemberRequestSchema, zt as ListProjectsResponseSchema } from "./dist-CEmkrm9b.mjs";
 import { i as packProjectArtifact, n as withMcpReadClient, r as mergeFilteredArtifact, t as mapInParallelBatches } from "./dist-uPQD-3bl.mjs";
-import { _ as resolvePlatformUrlForWebUrl, a as installPlaygroundDependencies, c as isNewerVersion, d as getConfigDir, f as getEffectiveApiTarget, h as DEFAULT_PLATFORM_URL, i as installDependencies$1, l as createCliConfig, m as getWebUrl, n as buildPlaygroundWorkspace, o as resolvePackageManager, p as getPlatformUrl, s as resolveCliRoot, t as readCliVersion, u as getCliConfigDir } from "./version-ikvpTH-2.mjs";
+import { C as getWebUrl, E as resolvePlatformUrlForWebUrl, S as getPlatformUrl, _ as isNewerVersion, a as formatReleaseAgeBlockMessage, b as getConfigDir, c as detectManagerFromLockfile, d as detectPackageManager, f as installDependencies$1, g as resolveCliRoot, h as resolvePackageManager, i as fetchLatestCliRelease, l as readCliVersion, m as resolveGithubPackagesToken, n as computeReleaseAgeRetryAfter, o as isReleaseAgeBlock, p as installPlaygroundDependencies, r as readPnpmMinimumReleaseAgeMinutes, s as detectCliInstall, t as runPackageManagerUpdate, u as buildPlaygroundWorkspace, v as createCliConfig, w as DEFAULT_PLATFORM_URL, x as getEffectiveApiTarget, y as getCliConfigDir } from "./run-package-manager-update-BycMpenj.mjs";
 import { createRequire } from "node:module";
 import { Command } from "commander";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -6662,14 +6662,12 @@ function registerAuthCommand(program) {
 	registerAuthLogoutCommand(auth);
 	registerAuthStatusCommand(auth);
 }
-//#endregion
-//#region src/update/ensure-sdk-current.ts
-const KEYSTROKE_SCOPE = "@keystrokehq/";
+const KEYSTROKE_SCOPE$1 = "@keystrokehq/";
 const REGISTRY_TIMEOUT_MS = 3e3;
 function shouldSkip() {
 	return Boolean(process.env.KEYSTROKE_SKIP_UPDATE || process.env.CI === "true" || process.env.CI === "1");
 }
-function readPackageJson(root) {
+function readPackageJson$1(root) {
 	const path = join(root, "package.json");
 	if (!existsSync(path)) return;
 	try {
@@ -6685,16 +6683,19 @@ function isLocalSdkSpec(spec) {
 	return trimmed.startsWith("workspace:") || trimmed.startsWith("link:") || trimmed.startsWith("file:");
 }
 function listManagedKeystrokePackages(root) {
-	const pkg = readPackageJson(root);
+	const pkg = readPackageJson$1(root);
 	if (!pkg) return [];
 	const packages = [];
 	for (const [name, spec] of Object.entries({
 		...pkg.dependencies,
 		...pkg.devDependencies
-	})) if (name.startsWith(KEYSTROKE_SCOPE) && !isLocalSdkSpec(spec)) packages.push({ name });
+	})) {
+		if (name === "@keystrokehq/cli") continue;
+		if (name.startsWith(KEYSTROKE_SCOPE$1) && !isLocalSdkSpec(spec)) packages.push({ name });
+	}
 	return packages;
 }
-function readInstalledVersion(root, packageName) {
+function readInstalledVersion$1(root, packageName) {
 	const path = join(root, "node_modules", ...packageName.split("/"), "package.json");
 	if (!existsSync(path)) return;
 	try {
@@ -6726,7 +6727,7 @@ function formatOutdatedLine(pkg) {
 }
 async function packagesNeedingUpdate(root, packages) {
 	return (await Promise.all(packages.map(async (pkg) => {
-		const installed = readInstalledVersion(root, pkg.name);
+		const installed = readInstalledVersion$1(root, pkg.name);
 		const latest = await fetchLatestPackageVersion(pkg.name);
 		if (!latest) return installed ? void 0 : {
 			name: pkg.name,
@@ -6741,7 +6742,7 @@ async function packagesNeedingUpdate(root, packages) {
 }
 /**
 * Require @keystrokehq/* project dependencies to be on latest before build/deploy.
-* Checks the registry concurrently; throws instead of auto-installing (safe for CI).
+* Skips `@keystrokehq/cli` (global + self-updating). Throws instead of auto-installing.
 */
 async function ensureSdkCurrent(root) {
 	if (shouldSkip()) return;
@@ -6750,7 +6751,7 @@ async function ensureSdkCurrent(root) {
 	const outdated = await packagesNeedingUpdate(root, packages);
 	if (outdated.length === 0) return;
 	const lines = outdated.map(formatOutdatedLine).join("\n");
-	throw new Error(`Outdated @keystrokehq packages:\n${lines}\n\nPlease update your versions before continuing.`);
+	throw new Error(`Outdated @keystrokehq packages:\n${lines}\n\nPlease run \`keystroke update\` before continuing.`);
 }
 //#endregion
 //#region src/commands/build.ts
@@ -7438,7 +7439,6 @@ function buildPlaygroundPackageJson(projectName, targetDir, monorepoRoot) {
 			zod: "latest"
 		},
 		devDependencies: {
-			"@keystrokehq/cli": linkSpec(targetDir, join(monorepoRoot, "apps/cli")),
 			"@types/node": "latest",
 			typescript: "latest",
 			vitest: "latest"
@@ -8485,6 +8485,177 @@ function registerTriggersCommand(program) {
 	registerTriggerToggleCommands(triggers);
 }
 //#endregion
+//#region src/update/update-project-packages.ts
+const KEYSTROKE_SCOPE = "@keystrokehq/";
+function readPackageJson(root) {
+	const path = join(root, "package.json");
+	if (!existsSync(path)) return;
+	try {
+		return JSON.parse(readFileSync(path, "utf8"));
+	} catch (error) {
+		const detail = error instanceof Error ? error.message : String(error);
+		throw new Error(`Failed to read package.json at ${path}: ${detail}`);
+	}
+}
+/** Registry-managed @keystrokehq/* deps (excludes workspace/link/file). */
+function listUpdatableKeystrokePackages(root) {
+	const pkg = readPackageJson(root);
+	if (!pkg) return [];
+	const packages = [];
+	for (const [name, spec] of Object.entries(pkg.dependencies ?? {})) {
+		if (name === "@keystrokehq/cli") continue;
+		if (name.startsWith(KEYSTROKE_SCOPE) && !isLocalSdkSpec(spec)) packages.push({
+			name,
+			dev: false
+		});
+	}
+	for (const [name, spec] of Object.entries(pkg.devDependencies ?? {})) {
+		if (name === "@keystrokehq/cli") continue;
+		if (name.startsWith(KEYSTROKE_SCOPE) && !isLocalSdkSpec(spec)) packages.push({
+			name,
+			dev: true
+		});
+	}
+	return packages;
+}
+function readInstalledVersion(root, packageName) {
+	const path = join(root, "node_modules", ...packageName.split("/"), "package.json");
+	if (!existsSync(path)) return;
+	try {
+		return JSON.parse(readFileSync(path, "utf8")).version?.trim() || void 0;
+	} catch {
+		return;
+	}
+}
+function updateCommand(manager, packageName, dev) {
+	const spec = `${packageName}@latest`;
+	if (manager === "npm") return {
+		command: "npm",
+		args: dev ? [
+			"install",
+			"-D",
+			spec
+		] : ["install", spec]
+	};
+	return {
+		command: manager,
+		args: dev ? [
+			"add",
+			"-D",
+			spec
+		] : ["add", spec]
+	};
+}
+function warnReleaseAgeBlock(packageName) {
+	process.stderr.write(`Warning: ${packageName}@latest is held back by your minimum-release-age setting; continuing with the currently installed version.\n`);
+}
+/**
+* Install @latest for every managed project @keystrokehq/* dependency.
+* Skips `@keystrokehq/cli` (global; refreshed separately by `keystroke update`).
+* Release-age blocks warn and continue; other install failures throw.
+*/
+function updateProjectPackages(root) {
+	const packages = listUpdatableKeystrokePackages(root);
+	if (packages.length === 0) return {
+		updated: [],
+		skippedReleaseAge: []
+	};
+	const manager = detectManagerFromLockfile(root) ?? detectPackageManager();
+	const token = resolveGithubPackagesToken();
+	const env = token ? {
+		...process.env,
+		NODE_AUTH_TOKEN: token
+	} : process.env;
+	const updated = [];
+	const skippedReleaseAge = [];
+	for (const pkg of packages) {
+		const from = readInstalledVersion(root, pkg.name);
+		const { command, args } = updateCommand(manager, pkg.name, pkg.dev);
+		process.stderr.write(`Updating ${pkg.name}...\n`);
+		const result = spawnSync(command, args, {
+			cwd: root,
+			env,
+			encoding: "utf8"
+		});
+		if (result.status === 0) {
+			const to = readInstalledVersion(root, pkg.name);
+			if (to && to !== from) updated.push({
+				name: pkg.name,
+				from,
+				to
+			});
+			continue;
+		}
+		const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+		if (isReleaseAgeBlock(output)) {
+			warnReleaseAgeBlock(pkg.name);
+			skippedReleaseAge.push(pkg.name);
+			continue;
+		}
+		throw new Error(`Failed to update ${pkg.name}:\n${output.trim() || `${command} exited ${result.status}`}`);
+	}
+	return {
+		updated,
+		skippedReleaseAge
+	};
+}
+//#endregion
+//#region src/commands/update.ts
+async function updateCliInstall() {
+	if (process.env.KEYSTROKE_DEV) return;
+	const install = detectCliInstall(resolveCliRoot(import.meta.url));
+	if (!install || install.kind === "local" && !install.projectRoot) return;
+	const currentVersion = readCliVersion();
+	const release = await fetchLatestCliRelease();
+	if (!release || !isNewerVersion(release.version, currentVersion)) {
+		process.stdout.write(`@keystrokehq/cli is up to date (${currentVersion}).\n`);
+		return;
+	}
+	process.stderr.write(`Updating @keystrokehq/cli ${currentVersion} -> ${release.version} via ${install.packageManager}...\n`);
+	const result = runPackageManagerUpdate(install);
+	const installedVersion = readCliVersion();
+	if (isNewerVersion(installedVersion, currentVersion)) {
+		process.stdout.write(`Updated @keystrokehq/cli ${currentVersion} -> ${installedVersion}.\n`);
+		return;
+	}
+	if (result.ok) {
+		process.stdout.write(`@keystrokehq/cli is up to date (${installedVersion}).\n`);
+		return;
+	}
+	if (isReleaseAgeBlock(result.output)) {
+		const retryAfter = install.packageManager === "pnpm" ? computeReleaseAgeRetryAfter(release.publishedAt, readPnpmMinimumReleaseAgeMinutes()) : void 0;
+		process.stderr.write(`${formatReleaseAgeBlockMessage({
+			currentVersion,
+			availableVersion: release.version,
+			retryAfter
+		})}\n`);
+		return;
+	}
+	throw new Error(`Failed to update @keystrokehq/cli:\n${result.output.trim() || "package manager update failed"}`);
+}
+async function runUpdate(options) {
+	const result = updateProjectPackages(resolveProjectRoot(options.dir));
+	if (result.updated.length === 0 && result.skippedReleaseAge.length === 0) process.stdout.write("Project @keystrokehq packages are up to date.\n");
+	else {
+		for (const pkg of result.updated) {
+			const range = pkg.from && pkg.to ? `${pkg.from} -> ${pkg.to}` : pkg.to ? `-> ${pkg.to}` : "updated";
+			process.stdout.write(`Updated ${pkg.name} (${range}).\n`);
+		}
+		if (result.updated.length === 0 && result.skippedReleaseAge.length > 0) process.stdout.write("No project @keystrokehq packages were updated.\n");
+	}
+	await updateCliInstall();
+}
+function registerUpdateCommand(program) {
+	program.command("update").description("Update @keystrokehq packages and the CLI to latest").option("--dir <path>", "Project directory", process.cwd()).action(async (options) => {
+		try {
+			await runUpdate(options);
+		} catch (error) {
+			process.stderr.write(`${formatCliError(error, "update failed")}\n`);
+			process.exitCode = 1;
+		}
+	});
+}
+//#endregion
 //#region src/commands/workflows/list.ts
 function registerWorkflowListCommand(workflow) {
 	workflow.command("list").description("List workflows in the active organization").option("--admin", "List all org resources (org owner or admin only)").action((options) => runCliCommand("List workflows failed", async () => {
@@ -8840,6 +9011,7 @@ function createProgram() {
 	registerTestCommand(program);
 	registerDeployCommand(program);
 	registerPullCommand(program);
+	registerUpdateCommand(program);
 	registerDevCommand(program);
 	registerStartCommand(program);
 	registerAgentsCommand(program);
@@ -8850,7 +9022,7 @@ function createProgram() {
 	return program;
 }
 async function runCli(argv) {
-	const { maybeAutoUpdate } = await import("./maybe-auto-update-B3xm1MYv.mjs");
+	const { maybeAutoUpdate } = await import("./maybe-auto-update-x2nClrff.mjs");
 	await maybeAutoUpdate(argv);
 	createProgram().parse(argv);
 }