@kigo-dev/sindri 0.1.0 → 0.1.3

package/README.md

@@ -22,10 +22,16 @@ names, parameters and this document are English. The contract lives in
 | `list_apps` | – | The PM's apps, with local folder state. |
 | `versions` | `app` | Published versions, most recent first. |
 | `rollback` | `app`, `version` | `POST rollback`, then downloads that version's archive and replaces the local tree (keeps `node_modules`, `.sindri`, `.env.local`). Stops the preview first: PGlite allows one process per data dir. |
+| `update_template` | `app` | `POST /v1/apps/<app>/template`: Sindri replaces the files the app never customised with the current template (customised ones come back in `skipped`) and publishes «Plantilla actualizada». When `published`, downloads the new archive and replaces the local tree like `rollback` (stops the preview, re-migrates, rewrites `last-published.json`). Refuses with "Publica o descarta tus cambios antes de actualizar la plantilla" while the folder has unpublished edits. |
+| `rename_app` | `app`, `new_name?`, `display_name?` | At least one. `display_name`: writes `display_name:` in the app's `kigo-app.yaml` (line edit, no YAML library) and runs the `publish` flow with the message «Ahora se llama «<display_name>»». `new_name`: refuses with "Publica tus cambios antes de cambiar la dirección" while the folder has unpublished edits (same check as `status`), `POST /v1/apps/<app>/rename`, then stops the preview, moves `~/Sindri/<app>` to `~/Sindri/<new_name>` and `apps/<owner>/<app>` to `apps/<owner>/<new_name>`, rewrites `name:` in `kigo-app.yaml` exactly like the builder and rewrites `.sindri/last-published.json` so `status` is clean. Both together: visible name first (a publish under the old address), then the address. |
+| `delete_app` | `app`, `confirm` | `confirm` must equal `app` (the PM typed it; the instructions forbid Claude from filling it in). Stops the preview, `DELETE /v1/apps/<app>`, then moves `~/Sindri/<app>` to `~/Sindri/.papelera/<app>-<YYYYMMDD-HHmm>` (Mexico City time) instead of deleting. A 404 from the API with the folder present still moves the folder and says so. |
 | `share` | `app` | The Slack line. |
+| `help` | – | No network. `{ summary, space_url, logged_in, apps_dir }`: the Spanish introduction Claude gives on first contact (what Sindri is, what to ask for, limits, the Mi espacio link https://sindri.kigo.dev), whether credentials are stored on this computer (keychain or file, no API call) and where the apps live. |
 
 Every result is `{ ok, summary, ...data }`. `needs_login: true` / `needs_setup: true` tell Claude
-which tool to run first. The server also ships `instructions` describing how to talk to the PM.
+which tool to run first. `list_apps` also returns `space_url`. The server also ships
+`instructions` describing how to talk to the PM (first contact via `help`, address vs visible
+name, typed confirmation before `delete_app`).
 
 ## Install
 
@@ -36,7 +42,7 @@ which tool to run first. The server also ships `instructions` describing how to
 **Claude Code:**
 
 ```
-claude mcp add sindri -- npx -y @kigo-dev/sindri
+claude mcp add sindri -- npx -y @kigo-dev/sindri@0.1.3
 ```
 
 **Manual check without an MCP client:**
@@ -82,12 +88,22 @@ archive ships it (`package.json`, `pnpm-workspace.yaml`, `pnpm-lock.yaml`, `tsco
 and cannot install standalone. `pnpm install` runs at that root; `preview`, `db:migrate`,
 `db:seed`, `tsc`, the tree hash, `.env.local`, `.sindri/last-published.json` and the `publish`
 tarball (paths relative to the app) all live at `apps/<owner>/<name>`. `replaceTree` swaps the
-whole root on `create_app`/`rollback` but keeps every `node_modules` and the app's `.sindri/`
+whole root on `create_app`/`rollback`/`update_template` but keeps every `node_modules` and the app's `.sindri/`
 and `.env*`. The owner is the single folder under `apps/`, else the `owner` from `GET /v1/me`
 (cached in `~/.sindri/me.json`).
 
+`rename_app` with `new_name` moves the root and the app dir in place (nothing is downloaded) and
+then applies the one edit the builder made in its copy, `name:` in `kigo-app.yaml`, written as
+`name: "<new_name>"` (JSON-quoted, the shape `mcp` `renderManifest` uses). The tree hash the
+connector stores in `last-published.json` is over the same file set `publish` uploads (everything
+except `node_modules`, `.next`, `.sindri`, `dist`, `.turbo`, `.git`, `.env*`, `.DS_Store`), so a
+file the builder ignores but the connector hashes would make `status` report unpublished edits
+after a rename; `test/tools.test.ts` builds the builder's post-rename tree (old archive, moved,
+`name:` edited) and asserts both hashes are equal. Deleted apps are never removed from disk: they
+go to `~/Sindri/.papelera/`, which no tool scans (`.papelera` is not a valid app name).
+
 ## Local database
 
 The template runs on PGlite when `KIGO_ENV=local` and no `DATABASE_URL` is set; data lives in
 `<app>/.sindri/pglite/`. PGlite is single-process: the connector never runs migrations while a
-preview is up, and stops the preview before a rollback replaces the tree.
+preview is up, and stops the preview before a rollback or a template update replaces the tree.

package/dist/index.js

@@ -3262,8 +3262,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path9) {
-      let input2 = path9;
+    function removeDotSegments(path10) {
+      let input2 = path10;
       const output2 = [];
       let nextSlash = -1;
       let len = 0;
@@ -3672,8 +3672,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path9 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path9 && path9 !== "/" ? path9 : void 0;
+        const path10 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path10 && path10 !== "/" ? path10 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -7185,12 +7185,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs9, exportName) {
+    function addFormats(ajv, list, fs10, exportName) {
       var _a3;
       var _b;
       (_a3 = (_b = ajv.opts.code).formats) !== null && _a3 !== void 0 ? _a3 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs9[f]);
+        ajv.addFormat(f, fs10[f]);
     }
     module.exports = exports = formatsPlugin;
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -7572,8 +7572,8 @@ function getErrorMap() {
 
 // node_modules/.pnpm/zod@4.5.4/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path9, errorMaps, issueData } = params;
-  const fullPath = [...path9, ...issueData.path || []];
+  const { data, path: path10, errorMaps, issueData } = params;
+  const fullPath = [...path10, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -7688,11 +7688,11 @@ var errorUtil;
 
 // node_modules/.pnpm/zod@4.5.4/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path9, key) {
+  constructor(parent, value, path10, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path9;
+    this._path = path10;
     this._key = key;
   }
   get path() {
@@ -11580,10 +11580,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path9) {
-  if (!path9)
+function getElementAtPath(obj, path10) {
+  if (!path10)
     return obj;
-  return path9.reduce((acc, key) => acc?.[key], obj);
+  return path10.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -11995,11 +11995,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path9, issues) {
+function prefixIssues(path10, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path9);
+    iss.path.unshift(path10);
     return iss;
   });
 }
@@ -12432,16 +12432,16 @@ function flattenError(error61, mapper = (issue2) => issue2.message) {
 }
 function formatError(error61, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error62, path9 = []) => {
+  const processError = (error62, path10 = []) => {
     for (const issue2 of error62.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path9, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path10, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path9, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path9, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else {
-        const fullpath = [...path9, ...issue2.path];
+        const fullpath = [...path10, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -12480,17 +12480,17 @@ function formatError(error61, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error61, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error62, path9 = []) => {
+  const processError = (error62, path10 = []) => {
     var _a3;
     for (const issue2 of error62.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path9, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path10, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path9, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path9, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else {
-        const fullpath = [...path9, ...issue2.path];
+        const fullpath = [...path10, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -12529,8 +12529,8 @@ function treeifyError(error61, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path9 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path9) {
+  const path10 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path10) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -27511,11 +27511,11 @@ function normalizeObjectSchema(schema) {
   }
   return void 0;
 }
-function getDotPath(path9) {
-  if (path9.length === 0) {
+function getDotPath(path10) {
+  if (path10.length === 0) {
     return "object root";
   }
-  return path9.reduce((acc, seg, index) => {
+  return path10.reduce((acc, seg, index) => {
     if (index === 0) {
       return String(seg);
     }
@@ -29678,13 +29678,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path9 = ref.slice(1).split("/").filter(Boolean);
-  if (path9.length === 0) {
+  const path10 = ref.slice(1).split("/").filter(Boolean);
+  if (path10.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path9[0] === defsKey) {
-    const key = path9[1] === void 0 ? void 0 : decodeJSONPointerSegment(path9[1]);
+  if (path10[0] === defsKey) {
+    const key = path10[1] === void 0 ? void 0 : decodeJSONPointerSegment(path10[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -35677,6 +35677,7 @@ var StdioServerTransport = class {
 // src/config.ts
 import os from "node:os";
 import path from "node:path";
+var SPACE_URL = "https://sindri.kigo.dev";
 var DEFAULTS = {
   apiUrl: "https://api.sindri.kigo.dev",
   issuer: "https://id.kigo.dev",
@@ -35719,18 +35720,23 @@ var INSTRUCTIONS = `You are helping a Kigo product manager (PM) build small inte
 
 Language and tone: always Spanish, "t\xFA", short sentences. Say "app" (feminine: "la app", "tu app"), never "herramienta", "proyecto", "repo", "deploy" or "build". Never paste file paths, commands, logs or stack traces; summarize in one line what happened and what you will do. The \`summary\` field of every tool result is written for the PM: repeat it as is or paraphrase it.
 
+First contact: the first time the PM speaks in a conversation, or whenever they ask what Sindri is or can do, call \`help\` and relay its \`summary\` (that is the introduction: what Sindri is, what they can ask for, the limits, the link to Mi espacio), then ask what they want to build. Do not repeat it later in the same conversation. When the PM asks where to see their apps or their versions, give them the Mi espacio link (\`space_url\`, https://sindri.kigo.dev).
+
 Flow:
 1. First time on a machine: run \`setup\` (installs Node and pnpm without admin rights) and \`login\` (opens the browser on Kigo's sign-in page; the PM enters with their @cargomovil.com Google account and the browser comes back on its own with "Listo, ya entraste a Sindri"; tell them to return to Claude). \`login\` waits up to five minutes. If any tool answers \`needs_setup\` or \`needs_login\`, run that tool and retry once.
 2. New app: ask at most one question if the request is vague (for whom, what it must show), then \`create_app\` with a short lowercase name (it becomes the address https://<name>.sindri.kigo.dev) and a one-sentence description in Spanish. Then edit the files in the folder the tool returns to build what the PM asked. The template is Next.js + Drizzle; read its CLAUDE.md first; keep the UI in Spanish, "t\xFA", with the Kigo components it ships.
 3. Show before shipping: run \`preview\` and tell the PM to look at the local address; ask what to change. Edits reload live.
-4. Ship: \`publish\` with a message in the PM's words ("Filtro por fecha"). Give the URL and say the team enters with their Google de Kigo. If publish fails, the published version did not change: say what broke in one line, fix it, publish again.
+4. Ship: \`publish\` with a message in the PM's words ("Filtro por fecha"). Give the URL and say the team enters with their Google de Kigo. If publish fails, the published version did not change: say what broke in one line, fix it, publish again. The published app has its own database: publish runs the migrations and, when this version changed drizzle/ or src/db/seed.ts, loads the test data again; rows the PM typed into the local preview never travel. Keep test data in the seed, not in the UI.
 5. Later: \`status\` before working on an existing app (tells you whether the local folder is behind or has unpublished edits); \`versions\` and \`rollback\` when the PM wants "como estaba ayer"; \`share\` for the Slack line.
+6. Template updates: when the PM says "actualiza la plantilla" or Sindri announces a template fix, run \`update_template\`. It replaces only the files the app never customised, publishes \xABPlantilla actualizada\xBB and brings the local folder to it; the files you had changed are listed in \`skipped\` so you can apply the same change there by hand if it matters. It refuses while there are unpublished local edits: publish them first (or tell the PM what would be lost) and retry.
+7. Renaming: an app has an address (https://<name>.sindri.kigo.dev) and a visible name (the title people see). When the PM says "c\xE1mbiale el nombre" and it is not obvious which one they mean, ask: "\xBFla direcci\xF3n o el nombre que se ve?". \`rename_app\` with \`new_name\` changes the address (Sindri renames it, the local folder follows, the old link stops working: tell the PM to share the new one); it refuses while there are unpublished edits, so publish first. \`rename_app\` with \`display_name\` changes only the visible name and publishes it as \xABAhora se llama \xAB<nombre>\xBB\xBB. Both in one call is fine.
+8. Deleting: \`delete_app\` is final in Sindri (address, versions, database). Before calling it, ask the PM to type the app's name to confirm and pass exactly what they wrote as \`confirm\`; never fill it in yourself, never guess it, never call it because you inferred they want it. The local files are moved to the Sindri papelera on their computer, not deleted; say so.
 
 Rules: synthetic data only (never paste real emails, plates or phone numbers into seeds); one author per app (the PM); never touch files outside the app folder; do not edit middleware.ts, next.config.ts or package.json scripts (publish will refuse them); apps work Monday to Friday 9:05 am to midnight Mexico City time and the link says so outside those hours. When something fails, explain in one line what to do next; never blame the PM.`;
 
 // src/tools.ts
-import fs8 from "node:fs/promises";
-import path8 from "node:path";
+import fs9 from "node:fs/promises";
+import path9 from "node:path";
 
 // src/api.ts
 import fs3 from "node:fs/promises";
@@ -35814,8 +35820,7 @@ var KEYCHAIN_SERVICE = "sindri";
 async function loadCredentials(cfg) {
   if (cfg.credentialStore === "keychain") {
     const r = await run("security", ["find-generic-password", "-s", KEYCHAIN_SERVICE, "-a", cfg.issuer, "-w"], { timeoutMs: 1e4 });
-    if (r.code !== 0) return null;
-    return parse3(r.stdout.trim());
+    if (r.code === 0) return parse3(r.stdout.trim());
   }
   try {
     return parse3(await fs2.readFile(credentialsFile(cfg), "utf8"));
@@ -35861,7 +35866,7 @@ async function deviceStart(cfg, fetchImpl = fetch) {
   if (!discovery.device_authorization_endpoint) throw new Error("Identity does not offer the device flow");
   const body = new URLSearchParams({
     client_id: cfg.clientId,
-    scope: "openid profile email offline_access",
+    scope: SCOPES,
     audience: cfg.audience
   });
   const res = await fetchImpl(discovery.device_authorization_endpoint, {
@@ -35903,12 +35908,16 @@ async function devicePoll(cfg, discovery, start, opts = {}) {
   }
   throw new Error("expired");
 }
+var SCOPES = "openid profile email offline_access";
 async function refresh(cfg, creds, fetchImpl = fetch) {
   if (!creds.refresh_token) throw new NeedsLogin();
   const discovery = await discover(cfg, fetchImpl);
   const res = await fetchImpl(discovery.token_endpoint, {
     method: "POST",
     headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    // No `scope` here: Identity rejects it on refresh (invalid_scope). It also issues the refreshed
+    // token without scopes (bug reported); the API copes by remembering the email per subject and
+    // `no_email` is treated as needs_login (api.ts).
     body: new URLSearchParams({ grant_type: "refresh_token", refresh_token: creds.refresh_token, client_id: cfg.clientId })
   });
   if (!res.ok) throw new NeedsLogin();
@@ -35977,7 +35986,7 @@ async function authCodeLogin(cfg, opts) {
   authorize.search = new URLSearchParams({
     client_id: cfg.clientId,
     response_type: "code",
-    scope: "openid profile email offline_access",
+    scope: SCOPES,
     redirect_uri: redirectUri,
     state,
     code_challenge: challenge,
@@ -36095,6 +36104,18 @@ var ApiClient = class {
   rollback(name, version2) {
     return this.json("POST", `/v1/apps/${enc(name)}/rollback`, { version: version2 }, 12e4);
   }
+  /** Brings the app's never-customised files up to the current template; `skipped` are the ones Claude changed. */
+  updateTemplate(name) {
+    return this.json("POST", `/v1/apps/${enc(name)}/template`, {}, 32e4);
+  }
+  /** Changes the app's address; the builder renames branch and folder, the old address stops resolving. */
+  rename(name, newName) {
+    return this.json("POST", `/v1/apps/${enc(name)}/rename`, { new_name: newName }, 15e4);
+  }
+  /** Removes the app from Sindri. `confirm` must equal the name; the API refuses otherwise. */
+  deleteApp(name, confirm) {
+    return this.json("DELETE", `/v1/apps/${enc(name)}`, { confirm }, 12e4);
+  }
   share(name) {
     return this.json("GET", `/v1/apps/${enc(name)}/share`);
   }
@@ -36143,6 +36164,7 @@ var ApiClient = class {
     const raw = await res.text();
     try {
       const j = JSON.parse(raw);
+      if (res.status === 403 && j.code === "no_email") return new NeedsLogin();
       if (j.error) return new ApiError(res.status, j.error, j.code);
     } catch {
     }
@@ -36204,98 +36226,41 @@ async function appPresent(p) {
   }
 }
 
-// src/preview.ts
+// src/manifest.ts
 import fs5 from "node:fs/promises";
-import net from "node:net";
 import path5 from "node:path";
-function registryFile(cfg) {
-  return path5.join(cfg.stateDir, "previews.json");
-}
-async function readRegistry(cfg) {
-  try {
-    return JSON.parse(await fs5.readFile(registryFile(cfg), "utf8"));
-  } catch {
-    return {};
-  }
-}
-async function writeRegistry(cfg, reg) {
-  await fs5.mkdir(cfg.stateDir, { recursive: true, mode: 448 });
-  await fs5.writeFile(registryFile(cfg), JSON.stringify(reg, null, 2) + "\n");
-}
-async function freePort(from = 3e3, to = 3099) {
-  for (let p = from; p <= to; p++) {
-    if (await portFree(p)) return p;
-  }
-  throw new Error("no free port between 3000 and 3099");
-}
-function portFree(port) {
-  return new Promise((resolve) => {
-    const srv = net.createServer();
-    srv.once("error", () => resolve(false));
-    srv.listen(port, "127.0.0.1", () => srv.close(() => resolve(true)));
-  });
-}
-async function healthy(port, fetchImpl = fetch) {
-  try {
-    const res = await fetchImpl(`http://127.0.0.1:${port}/healthz`, { signal: AbortSignal.timeout(3e3) });
-    return res.ok;
-  } catch {
-    return false;
-  }
-}
-async function runningPreview(cfg, app, fetchImpl = fetch) {
-  const reg = await readRegistry(cfg);
-  const e = reg[app];
-  if (!e) return null;
-  if (alive(e.pid) && await healthy(e.port, fetchImpl)) return e;
-  delete reg[app];
-  await writeRegistry(cfg, reg);
-  return null;
-}
-async function startPreview(cfg, tc, app, dir, opts = {}) {
-  const fetchImpl = opts.fetchImpl ?? fetch;
-  const existing = await runningPreview(cfg, app, fetchImpl);
-  if (existing) return { port: existing.port, url: `http://127.0.0.1:${existing.port}`, reused: true };
-  const port = await freePort();
-  await fs5.mkdir(path5.join(dir, ".sindri"), { recursive: true });
-  const logFile = path5.join(dir, ".sindri", "preview.log");
-  await fs5.writeFile(logFile, "");
-  const env = { ...tc.env, KIGO_ENV: "local", DATABASE_URL: "", PORT: String(port), CI: "1", FORCE_COLOR: "0", BROWSER: "none" };
-  const pid = spawnDetached(tc.pnpm, ["dev", "--port", String(port)], { cwd: dir, env, logFile });
-  const reg = await readRegistry(cfg);
-  reg[app] = { pid, port, dir, started_at: (/* @__PURE__ */ new Date()).toISOString() };
-  await writeRegistry(cfg, reg);
-  const deadline = Date.now() + (opts.waitMs ?? 6e4);
-  const sleepImpl = opts.sleepImpl ?? sleep;
-  while (Date.now() < deadline) {
-    if (await healthy(port, fetchImpl)) return { port, url: `http://127.0.0.1:${port}`, reused: false };
-    if (!alive(pid)) break;
-    await sleepImpl(1e3);
+var MANIFEST_FILE = "kigo-app.yaml";
+var KEY_RE = /^([a-z_]+):\s*(.*)$/;
+function setManifestValue(text, key, value) {
+  const line = `${key}: ${JSON.stringify(value)}`;
+  const lines = text.split("\n");
+  const idx = lines.findIndex((l) => KEY_RE.exec(l)?.[1] === key);
+  if (idx >= 0) {
+    lines[idx] = line;
+  } else {
+    if (lines.at(-1) === "") lines.splice(lines.length - 1, 0, line);
+    else lines.push(line, "");
   }
-  killTree(pid);
-  delete reg[app];
-  await writeRegistry(cfg, reg);
-  const log = await fs5.readFile(logFile, "utf8").catch(() => "");
-  return { port, url: `http://127.0.0.1:${port}`, reused: false, log: log.split("\n").slice(-15).join("\n") };
+  return lines.join("\n");
 }
-async function stopPreview(cfg, app) {
-  const reg = await readRegistry(cfg);
-  const e = reg[app];
-  if (!e) return false;
-  killTree(e.pid);
-  delete reg[app];
-  await writeRegistry(cfg, reg);
-  return true;
+async function readManifest(appDir) {
+  return fs5.readFile(path5.join(appDir, MANIFEST_FILE), "utf8").catch(() => "");
 }
-async function openInBrowser(cfg, url2) {
-  if (!cfg.opener) return;
-  await run(cfg.opener, [url2], { timeoutMs: 1e4 });
+async function writeManifestValue(appDir, key, value) {
+  const text = await readManifest(appDir);
+  await fs5.writeFile(path5.join(appDir, MANIFEST_FILE), setManifestValue(text, key, value));
 }
 
+// src/preview.ts
+import fs7 from "node:fs/promises";
+import net from "node:net";
+import path7 from "node:path";
+
 // src/toolchain.ts
 import fs6 from "node:fs/promises";
 import path6 from "node:path";
 var MIN_NODE = 20;
+var PNPM_ARGS = ["--config.verify-deps-before-run=false"];
 async function resolveToolchain(cfg, env = process.env) {
   const fnmBin = await fnmDefaultBin(cfg);
   if (fnmBin) {
@@ -36387,11 +36352,96 @@ async function installFnmLts(cfg, env) {
   if (prep.code !== 0) throw new Error(`corepack prepare pnpm failed: ${prep.stderr.trim().slice(-300)}`);
 }
 
+// src/preview.ts
+function registryFile(cfg) {
+  return path7.join(cfg.stateDir, "previews.json");
+}
+async function readRegistry(cfg) {
+  try {
+    return JSON.parse(await fs7.readFile(registryFile(cfg), "utf8"));
+  } catch {
+    return {};
+  }
+}
+async function writeRegistry(cfg, reg) {
+  await fs7.mkdir(cfg.stateDir, { recursive: true, mode: 448 });
+  await fs7.writeFile(registryFile(cfg), JSON.stringify(reg, null, 2) + "\n");
+}
+async function freePort(from = 3e3, to = 3099) {
+  for (let p = from; p <= to; p++) {
+    if (await portFree(p)) return p;
+  }
+  throw new Error("no free port between 3000 and 3099");
+}
+function portFree(port) {
+  return new Promise((resolve) => {
+    const srv = net.createServer();
+    srv.once("error", () => resolve(false));
+    srv.listen(port, "127.0.0.1", () => srv.close(() => resolve(true)));
+  });
+}
+async function healthy(port, fetchImpl = fetch) {
+  try {
+    const res = await fetchImpl(`http://127.0.0.1:${port}/healthz`, { signal: AbortSignal.timeout(3e3) });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+async function runningPreview(cfg, app, fetchImpl = fetch) {
+  const reg = await readRegistry(cfg);
+  const e = reg[app];
+  if (!e) return null;
+  if (alive(e.pid) && await healthy(e.port, fetchImpl)) return e;
+  delete reg[app];
+  await writeRegistry(cfg, reg);
+  return null;
+}
+async function startPreview(cfg, tc, app, dir, opts = {}) {
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const existing = await runningPreview(cfg, app, fetchImpl);
+  if (existing) return { port: existing.port, url: `http://127.0.0.1:${existing.port}`, reused: true };
+  const port = await freePort();
+  await fs7.mkdir(path7.join(dir, ".sindri"), { recursive: true });
+  const logFile = path7.join(dir, ".sindri", "preview.log");
+  await fs7.writeFile(logFile, "");
+  const env = { ...tc.env, KIGO_ENV: "local", DATABASE_URL: "", PORT: String(port), CI: "1", FORCE_COLOR: "0", BROWSER: "none" };
+  const pid = spawnDetached(tc.pnpm, [...PNPM_ARGS, "dev", "--port", String(port)], { cwd: dir, env, logFile });
+  const reg = await readRegistry(cfg);
+  reg[app] = { pid, port, dir, started_at: (/* @__PURE__ */ new Date()).toISOString() };
+  await writeRegistry(cfg, reg);
+  const deadline = Date.now() + (opts.waitMs ?? 6e4);
+  const sleepImpl = opts.sleepImpl ?? sleep;
+  while (Date.now() < deadline) {
+    if (await healthy(port, fetchImpl)) return { port, url: `http://127.0.0.1:${port}`, reused: false };
+    if (!alive(pid)) break;
+    await sleepImpl(1e3);
+  }
+  killTree(pid);
+  delete reg[app];
+  await writeRegistry(cfg, reg);
+  const log = await fs7.readFile(logFile, "utf8").catch(() => "");
+  return { port, url: `http://127.0.0.1:${port}`, reused: false, log: log.split("\n").slice(-15).join("\n") };
+}
+async function stopPreview(cfg, app) {
+  const reg = await readRegistry(cfg);
+  const e = reg[app];
+  if (!e) return false;
+  killTree(e.pid);
+  delete reg[app];
+  await writeRegistry(cfg, reg);
+  return true;
+}
+async function openInBrowser(cfg, url2) {
+  if (!cfg.opener) return;
+  await run(cfg.opener, [url2], { timeoutMs: 1e4 });
+}
+
 // src/tree.ts
 import { createHash as createHash2 } from "node:crypto";
-import fs7 from "node:fs/promises";
+import fs8 from "node:fs/promises";
 import os3 from "node:os";
-import path7 from "node:path";
+import path8 from "node:path";
 var EXCLUDED_DIRS = /* @__PURE__ */ new Set(["node_modules", ".next", ".sindri", "dist", ".turbo", ".git"]);
 function excluded(name) {
   if (EXCLUDED_DIRS.has(name)) return true;
@@ -36402,11 +36452,11 @@ function excluded(name) {
 async function listFiles(root) {
   const out = [];
   async function walk(dir, rel) {
-    const entries = await fs7.readdir(dir, { withFileTypes: true });
+    const entries = await fs8.readdir(dir, { withFileTypes: true });
     for (const e of entries) {
       if (excluded(e.name)) continue;
       const r = rel ? `${rel}/${e.name}` : e.name;
-      if (e.isDirectory()) await walk(path7.join(dir, e.name), r);
+      if (e.isDirectory()) await walk(path8.join(dir, e.name), r);
       else if (e.isFile()) out.push(r);
     }
   }
@@ -36417,7 +36467,7 @@ async function treeHash(root) {
   const files = await listFiles(root);
   const h = createHash2("sha256");
   for (const rel of files) {
-    const fh = createHash2("sha256").update(await fs7.readFile(path7.join(root, rel))).digest("hex");
+    const fh = createHash2("sha256").update(await fs8.readFile(path8.join(root, rel))).digest("hex");
     h.update(`${rel}\0${fh}
 `);
   }
@@ -36426,49 +36476,49 @@ async function treeHash(root) {
 async function packTree(root) {
   const files = await listFiles(root);
   if (files.length === 0) throw new Error("empty tree");
-  const listFile = path7.join(await fs7.mkdtemp(path7.join(os3.tmpdir(), "sindri-pack-")), "files.txt");
-  await fs7.writeFile(listFile, files.join("\n") + "\n");
-  const out = path7.join(path7.dirname(listFile), "app.tar.gz");
+  const listFile = path8.join(await fs8.mkdtemp(path8.join(os3.tmpdir(), "sindri-pack-")), "files.txt");
+  await fs8.writeFile(listFile, files.join("\n") + "\n");
+  const out = path8.join(path8.dirname(listFile), "app.tar.gz");
   const r = await run("tar", ["-czf", out, "-C", root, "-T", listFile], { timeoutMs: 12e4 });
   if (r.code !== 0) throw new Error(`tar failed: ${r.stderr.trim()}`);
-  const st = await fs7.stat(out);
+  const st = await fs8.stat(out);
   return { file: out, files: files.length, bytes: st.size };
 }
 async function replaceTree(root, archive) {
-  const tmp = await fs7.mkdtemp(path7.join(os3.tmpdir(), "sindri-unpack-"));
+  const tmp = await fs8.mkdtemp(path8.join(os3.tmpdir(), "sindri-unpack-"));
   const r = await run("tar", ["-xzf", archive, "-C", tmp], { timeoutMs: 12e4 });
   if (r.code !== 0) throw new Error(`tar failed: ${r.stderr.trim()}`);
   const src = await singleRoot(tmp);
-  await fs7.mkdir(root, { recursive: true });
+  await fs8.mkdir(root, { recursive: true });
   await prune(root, 0);
-  await fs7.cp(src, root, { recursive: true, force: true, filter: (s) => path7.basename(s) !== "node_modules" && path7.basename(s) !== ".DS_Store" });
-  await fs7.rm(tmp, { recursive: true, force: true });
+  await fs8.cp(src, root, { recursive: true, force: true, filter: (s) => path8.basename(s) !== "node_modules" && path8.basename(s) !== ".DS_Store" });
+  await fs8.rm(tmp, { recursive: true, force: true });
 }
 async function prune(dir, depth) {
-  const entries = await fs7.readdir(dir, { withFileTypes: true });
+  const entries = await fs8.readdir(dir, { withFileTypes: true });
   for (const e of entries) {
-    const p = path7.join(dir, e.name);
+    const p = path8.join(dir, e.name);
     if (e.name === "node_modules") continue;
     if (depth === 3 && (e.name === ".sindri" || /^\.env(\..*)?$/.test(e.name))) continue;
     if (e.isDirectory()) {
       await prune(p, depth + 1);
-      const left = await fs7.readdir(p);
-      if (left.length === 0) await fs7.rmdir(p);
+      const left = await fs8.readdir(p);
+      if (left.length === 0) await fs8.rmdir(p);
     } else {
-      await fs7.rm(p, { force: true });
+      await fs8.rm(p, { force: true });
     }
   }
 }
 async function singleRoot(dir) {
-  const entries = (await fs7.readdir(dir, { withFileTypes: true })).filter((e) => e.name !== ".DS_Store");
-  if (entries.length === 1 && entries[0]?.isDirectory() && !await exists2(path7.join(dir, "package.json"))) {
-    return path7.join(dir, entries[0].name);
+  const entries = (await fs8.readdir(dir, { withFileTypes: true })).filter((e) => e.name !== ".DS_Store");
+  if (entries.length === 1 && entries[0]?.isDirectory() && !await exists2(path8.join(dir, "package.json"))) {
+    return path8.join(dir, entries[0].name);
   }
   return dir;
 }
 async function exists2(p) {
   try {
-    await fs7.access(p);
+    await fs8.access(p);
     return true;
   } catch {
     return false;
@@ -36476,14 +36526,14 @@ async function exists2(p) {
 }
 async function readPublished(root) {
   try {
-    return JSON.parse(await fs7.readFile(path7.join(root, ".sindri", "last-published.json"), "utf8"));
+    return JSON.parse(await fs8.readFile(path8.join(root, ".sindri", "last-published.json"), "utf8"));
   } catch {
     return null;
   }
 }
 async function writePublished(root, p) {
-  await fs7.mkdir(path7.join(root, ".sindri"), { recursive: true });
-  await fs7.writeFile(path7.join(root, ".sindri", "last-published.json"), JSON.stringify(p, null, 2) + "\n");
+  await fs8.mkdir(path8.join(root, ".sindri"), { recursive: true });
+  await fs8.writeFile(path8.join(root, ".sindri", "last-published.json"), JSON.stringify(p, null, 2) + "\n");
 }
 
 // src/tools.ts
@@ -36522,7 +36572,18 @@ var SCHEMAS = {
   list_apps: {},
   versions: { app: appName },
   rollback: { app: appName, version: external_exports.string().min(1).describe("Version id from `versions`.") },
-  share: { app: appName }
+  update_template: { app: appName },
+  rename_app: {
+    app: appName,
+    new_name: appName.optional().describe("New address: lowercase letters, digits and hyphens (2 to 31 chars). Becomes https://<new_name>.sindri.kigo.dev; the old address stops working."),
+    display_name: external_exports.string().min(2).max(60).optional().describe("New visible name (the title people see), in Spanish, as the PM wrote it. The address does not change.")
+  },
+  delete_app: {
+    app: appName,
+    confirm: external_exports.string().describe("The app name exactly as the PM typed it to confirm. Must equal `app`; never fill it in for them.")
+  },
+  share: { app: appName },
+  help: {}
 };
 var DESCRIPTIONS = {
   setup: {
@@ -36555,7 +36616,23 @@ var DESCRIPTIONS = {
     title: "Go back to a version",
     description: "Publishes a previous version and brings the local folder to it. Nothing is deleted: the newer versions stay in the history."
   },
-  share: { title: "Share", description: "The line to paste in Slack: address, test-data notice and how the team enters." }
+  update_template: {
+    title: "Update the template",
+    description: "Brings the app up to the current Kigo template: files the app never customised are replaced, files you changed are left alone and listed. Publishes a version \xABPlantilla actualizada\xBB and brings the local folder to it. Use it when the PM asks to update the template or Sindri announces a template fix. Refuses while there are unpublished local edits: publish (or discard) them first."
+  },
+  rename_app: {
+    title: "Rename an app",
+    description: 'Two different things, pass at least one. `new_name` changes the address (https://<new_name>.sindri.kigo.dev): Sindri renames it, the local folder is moved to match and the old address stops working; refuses while the folder has unpublished edits (publish first). `display_name` changes only the visible name: it is written to kigo-app.yaml and published as \xABAhora se llama \xAB<display_name>\xBB\xBB. When the PM says "c\xE1mbiale el nombre" and it is unclear which one they mean, ask: \xBFla direcci\xF3n o el nombre que se ve? Both together are allowed (visible name first, then the address).'
+  },
+  delete_app: {
+    title: "Delete an app",
+    description: "Removes the app from Sindri (address, published versions and its database) after the PM typed its name: `confirm` must equal `app`, ask them to write it, never guess it. Stops the preview and moves the local folder to ~/Sindri/.papelera/<app>-<date> instead of deleting it, so the PM can still recover the files by hand."
+  },
+  share: { title: "Share", description: "The line to paste in Slack: address, test-data notice and how the team enters." },
+  help: {
+    title: "What Sindri is",
+    description: "No network. The Spanish introduction to give the PM the first time they speak in a conversation or whenever they ask what Sindri can do: what it is, what they can ask for, the limits and the link to Mi espacio. Also says whether they are already signed in on this computer (`logged_in`) and where their apps live (`apps_dir`)."
+  }
 };
 function createTools(deps) {
   const { cfg } = deps;
@@ -36594,9 +36671,11 @@ function createTools(deps) {
   const login = guard(async () => {
     try {
       const creds2 = await accessToken(cfg, fetchImpl);
+      await api.me();
       return { ok: true, summary: `Ya est\xE1s dentro como ${creds2.email ?? "tu cuenta de Kigo"}.`, email: creds2.email ?? null, already: true };
     } catch (err) {
       if (!(err instanceof NeedsLogin)) throw err;
+      await clearCredentials(cfg).catch(() => void 0);
     }
     const openUrl = deps.openUrl ?? defaultOpenUrl(cfg);
     let creds;
@@ -36647,15 +36726,15 @@ function createTools(deps) {
     }
     const created = await api.createApp(a.name, a.description.trim());
     const archive = await api.download(created.archive_url);
-    await fs8.mkdir(p.root, { recursive: true });
+    await fs9.mkdir(p.root, { recursive: true });
     await replaceTree(p.root, archive);
-    await fs8.rm(path8.dirname(archive), { recursive: true, force: true });
+    await fs9.rm(path9.dirname(archive), { recursive: true, force: true });
     p = await appPaths(cfg, a.name, me.owner);
     if (!await appPresent(p)) {
       return { ok: false, summary: `Cre\xE9 "${a.name}" en Sindri pero lo que baj\xF3 no trae la app donde la espero (apps/${p.owner || me.owner}/${a.name}). Escribe en Slack, canal #sindri.`, path: p.root, url: created.url };
     }
-    await fs8.writeFile(path8.join(p.appDir, ".env.local"), "KIGO_ENV=local\n", { mode: 384 });
-    const install = await run(tc.pnpm, ["install", "--no-frozen-lockfile"], { cwd: p.root, env: { ...tc.env, CI: "1", FORCE_COLOR: "0" }, timeoutMs: 6e5 });
+    await fs9.writeFile(path9.join(p.appDir, ".env.local"), "KIGO_ENV=local\n", { mode: 384 });
+    const install = await run(tc.pnpm, [...PNPM_ARGS, "install", "--no-frozen-lockfile"], { cwd: p.root, env: { ...tc.env, CI: "1", FORCE_COLOR: "0" }, timeoutMs: 6e5 });
     if (install.code !== 0) {
       const why = lastLine(install.stderr || install.stdout);
       return { ok: false, summary: `Cre\xE9 "${a.name}" en Sindri pero no pude preparar la carpeta en tu computadora (${why}). Vuelve a intentarlo con create_app o p\xEDdeme que lo revise.`, path: p.appDir, url: created.url, detail: why };
@@ -36683,8 +36762,8 @@ function createTools(deps) {
     }
     const tc = await toolchain();
     if (!tc) return NEEDS_SETUP;
-    if (!await exists2(path8.join(p.root, "node_modules"))) {
-      const install = await run(tc.pnpm, ["install", "--no-frozen-lockfile"], { cwd: p.root, env: { ...tc.env, CI: "1", FORCE_COLOR: "0" }, timeoutMs: 6e5 });
+    if (!await exists2(path9.join(p.root, "node_modules"))) {
+      const install = await run(tc.pnpm, [...PNPM_ARGS, "install", "--no-frozen-lockfile"], { cwd: p.root, env: { ...tc.env, CI: "1", FORCE_COLOR: "0" }, timeoutMs: 6e5 });
       if (install.code !== 0) return { ok: false, summary: `No pude preparar la app para correrla en tu computadora (${lastLine(install.stderr || install.stdout)}). Vuelve a intentarlo.`, detail: lastLine(install.stderr || install.stdout) };
     }
     if (!await runningPreview(cfg, a.app, fetchImpl)) {
@@ -36712,7 +36791,7 @@ function createTools(deps) {
     const tc = await toolchain();
     if (!tc) return NEEDS_SETUP;
     const message = a.message.trim().slice(0, MESSAGE_MAX);
-    const tsc = await run(tc.pnpm, ["exec", "tsc", "--noEmit", "--pretty", "false"], { cwd: dir, env: { ...tc.env, CI: "1", FORCE_COLOR: "0" }, timeoutMs: 18e4 });
+    const tsc = await run(tc.pnpm, [...PNPM_ARGS, "exec", "tsc", "--noEmit", "--pretty", "false"], { cwd: dir, env: { ...tc.env, CI: "1", FORCE_COLOR: "0" }, timeoutMs: 18e4 });
     if (tsc.code !== 0) {
       const first = (tsc.stdout + tsc.stderr).split("\n").find((l) => /error TS\d+/.test(l))?.trim().slice(0, 200);
       return { ok: false, summary: "No la publiqu\xE9: hay un error en el c\xF3digo que impedir\xEDa que abra. Corr\xEDgelo y vuelve a publicar.", detail: first ?? lastLine(tsc.stderr || tsc.stdout) };
@@ -36724,14 +36803,14 @@ function createTools(deps) {
     }
     const packed = await packTree(dir);
     if (packed.bytes > 20 * 1024 * 1024) {
-      await fs8.rm(path8.dirname(packed.file), { recursive: true, force: true });
+      await fs9.rm(path9.dirname(packed.file), { recursive: true, force: true });
       return { ok: false, summary: "La app pesa m\xE1s de 20 MB sin contar sus piezas instaladas. Quita archivos grandes (im\xE1genes, videos) antes de publicar.", bytes: packed.bytes };
     }
     let result;
     try {
       result = await api.publish(a.app, packed.file, message);
     } finally {
-      await fs8.rm(path8.dirname(packed.file), { recursive: true, force: true });
+      await fs9.rm(path9.dirname(packed.file), { recursive: true, force: true });
     }
     await writePublished(dir, { version: result.version, tree_hash: await treeHash(dir), url: result.url });
     return {
@@ -36754,11 +36833,11 @@ function createTools(deps) {
   });
   const list_apps = guard(async () => {
     const apps = await api.listApps();
-    if (apps.length === 0) return { ok: true, summary: "Todav\xEDa no tienes apps. Cuando quieras, crea la primera.", apps: [] };
+    if (apps.length === 0) return { ok: true, summary: "Todav\xEDa no tienes apps. Cuando quieras, crea la primera.", apps: [], space_url: SPACE_URL };
     const rows = [];
     for (const app of apps) rows.push({ ...app, local: await localState(cfg, app.name) });
     const names = rows.map((r) => `${r.name} (${r.url})`).join(", ");
-    return { ok: true, summary: `Tienes ${rows.length === 1 ? "una app" : `${rows.length} apps`}: ${names}.`, apps: rows };
+    return { ok: true, summary: `Tienes ${rows.length === 1 ? "una app" : `${rows.length} apps`}: ${names}.`, apps: rows, space_url: SPACE_URL };
   });
   const versions = guard(async (a) => {
     if (!validAppName(a.app)) return { ok: false, summary: "Ese nombre de app no es v\xE1lido." };
@@ -36773,15 +36852,15 @@ function createTools(deps) {
     let p = await appPaths(cfg, a.app);
     await stopPreview(cfg, a.app);
     const archive = await api.download(`/v1/apps/${encodeURIComponent(a.app)}/archive`, result.version.id);
-    await fs8.mkdir(p.root, { recursive: true });
+    await fs9.mkdir(p.root, { recursive: true });
     await replaceTree(p.root, archive);
-    await fs8.rm(path8.dirname(archive), { recursive: true, force: true });
+    await fs9.rm(path9.dirname(archive), { recursive: true, force: true });
     p = await appPaths(cfg, a.app, p.owner || void 0);
     const dir = p.appDir;
     if (!await appPresent(p)) return { ok: false, summary: `Sindri volvi\xF3 a la versi\xF3n pero lo que baj\xF3 no trae la app donde la espero. Escribe en Slack, canal #sindri.`, version: result.version, url: result.url };
-    if (!await exists2(path8.join(dir, ".env.local"))) await fs8.writeFile(path8.join(dir, ".env.local"), "KIGO_ENV=local\n", { mode: 384 });
+    if (!await exists2(path9.join(dir, ".env.local"))) await fs9.writeFile(path9.join(dir, ".env.local"), "KIGO_ENV=local\n", { mode: 384 });
     const tc = await toolchain();
-    if (tc && await exists2(path8.join(p.root, "node_modules"))) {
+    if (tc && await exists2(path9.join(p.root, "node_modules"))) {
       const db = await prepareLocalDb(tc, dir);
       if (!db.ok) process.stderr.write(`sindri: local db after rollback: ${db.detail}
 `);
@@ -36794,24 +36873,163 @@ function createTools(deps) {
       url: result.url
     };
   });
+  const update_template = guard(async (a) => {
+    if (!validAppName(a.app)) return { ok: false, summary: "Ese nombre de app no es v\xE1lido." };
+    const before = await localState(cfg, a.app);
+    if (before.exists && before.unpublished) {
+      return { ok: false, summary: "Publica o descarta tus cambios antes de actualizar la plantilla.", code: "unpublished_changes", local: before };
+    }
+    const result = await api.updateTemplate(a.app);
+    const files = describeTemplateFiles(result);
+    const data = { updated: result.updated, skipped: result.skipped, version: result.version, url: result.url, published: result.published };
+    if (!result.published) {
+      return { ok: true, summary: `"${a.app}" ya est\xE1 al d\xEDa con la plantilla; no cambi\xE9 nada.${files}`, ...data };
+    }
+    let p = await appPaths(cfg, a.app);
+    if (before.exists) {
+      await stopPreview(cfg, a.app);
+      const archive = await api.download(`/v1/apps/${encodeURIComponent(a.app)}/archive`, result.version?.id);
+      await replaceTree(p.root, archive);
+      await fs9.rm(path9.dirname(archive), { recursive: true, force: true });
+      p = await appPaths(cfg, a.app, p.owner || void 0);
+      const dir = p.appDir;
+      if (!await appPresent(p)) return { ok: false, summary: `Sindri actualiz\xF3 la plantilla pero lo que baj\xF3 no trae la app donde la espero. Escribe en Slack, canal #sindri.`, ...data };
+      if (!await exists2(path9.join(dir, ".env.local"))) await fs9.writeFile(path9.join(dir, ".env.local"), "KIGO_ENV=local\n", { mode: 384 });
+      const tc = await toolchain();
+      if (tc && await exists2(path9.join(p.root, "node_modules"))) {
+        const db = await prepareLocalDb(tc, dir);
+        if (!db.ok) process.stderr.write(`sindri: local db after update_template: ${db.detail}
+`);
+      }
+      await writePublished(dir, { version: result.version, tree_hash: await treeHash(dir), url: result.url });
+    }
+    const where = before.exists ? `en ${result.url} y en tu computadora` : `en ${result.url}`;
+    return { ok: true, summary: `Listo, actualic\xE9 la plantilla de "${a.app}" ${where}.${files}`, ...data };
+  });
   const share = guard(async (a) => {
     if (!validAppName(a.app)) return { ok: false, summary: "Ese nombre de app no es v\xE1lido." };
     const r = await api.share(a.app);
     return { ok: true, summary: `Para Slack: ${r.text}`, text: r.text };
   });
+  const rename_app = guard(async (a) => {
+    if (!validAppName(a.app)) return { ok: false, summary: "Ese nombre de app no es v\xE1lido." };
+    const newName = a.new_name?.trim().toLowerCase();
+    const displayName = a.display_name?.trim();
+    if (!newName && !displayName) return { ok: false, summary: "Dime qu\xE9 quieres cambiar: la direcci\xF3n o el nombre que se ve.", code: "nothing_to_change" };
+    if (newName !== void 0 && !validAppName(newName)) {
+      return { ok: false, summary: "La direcci\xF3n nueva debe ir en min\xFAsculas, con n\xFAmeros o guiones, de 2 a 31 letras (por ejemplo: visitas-plaza)." };
+    }
+    if (newName === a.app) return { ok: false, summary: `"${a.app}" ya est\xE1 en esa direcci\xF3n.`, code: "same_name" };
+    const parts = [];
+    const data = {};
+    if (displayName) {
+      const p = await appPaths(cfg, a.app);
+      if (!await appPresent(p)) {
+        return { ok: false, summary: `No encuentro la carpeta de "${a.app}" en tu computadora y el nombre que se ve se publica desde aqu\xED. Usa rollback a su \xFAltima versi\xF3n para bajarla y vuelve a intentarlo.`, path: p.appDir };
+      }
+      await writeManifestValue(p.appDir, "display_name", displayName);
+      const pub = await publish({ app: a.app, message: `Ahora se llama \xAB${displayName}\xBB` });
+      if (!pub.ok) return { ...pub, summary: `El nombre \xAB${displayName}\xBB qued\xF3 en tu computadora pero a\xFAn no est\xE1 publicado. ${pub.summary}` };
+      parts.push(`Listo, ahora se llama \xAB${displayName}\xBB y ya se ve as\xED en ${pub.url}.`);
+      Object.assign(data, { display_name: displayName, version: pub.version, url: pub.url });
+    }
+    if (newName) {
+      const before = await localState(cfg, a.app);
+      if (before.exists && before.unpublished) {
+        return { ok: false, summary: `Publica tus cambios antes de cambiar la direcci\xF3n de "${a.app}".`, code: "unpublished_changes", local: before };
+      }
+      if (await exists2(appRoot(cfg, newName))) {
+        return { ok: false, summary: `Ya tienes una carpeta llamada "${newName}" en Sindri; elige otra direcci\xF3n.`, code: "folder_exists" };
+      }
+      const result = await api.rename(a.app, newName);
+      const oldUrl = `https://${a.app}.${cfg.appsDomain}/`;
+      if (before.exists) {
+        const p = await appPaths(cfg, a.app);
+        await stopPreview(cfg, a.app);
+        const newRoot = appRoot(cfg, newName);
+        await moveDir(p.root, newRoot);
+        const newDir = path9.join(newRoot, "apps", p.owner, newName);
+        await moveDir(path9.join(newRoot, "apps", p.owner, a.app), newDir);
+        await writeManifestValue(newDir, "name", newName);
+        await writePublished(newDir, { version: result.version ?? before.published_version, tree_hash: await treeHash(newDir), url: result.url });
+        data.path = newDir;
+      }
+      parts.push(`Listo, "${a.app}" ahora vive en ${result.url}. La direcci\xF3n anterior (${oldUrl}) ya no funciona: comparte la nueva con tu equipo.`);
+      Object.assign(data, { name: result.name, old_name: a.app, url: result.url, version: result.version });
+    }
+    return { ok: true, summary: parts.join(" "), ...data };
+  });
+  const delete_app = guard(async (a) => {
+    if (!validAppName(a.app)) return { ok: false, summary: "Ese nombre de app no es v\xE1lido." };
+    if (a.confirm.trim() !== a.app) {
+      return { ok: false, summary: `Para borrar "${a.app}" necesito que escribas su nombre tal cual. No la toqu\xE9.`, code: "confirm_mismatch" };
+    }
+    const root = appRoot(cfg, a.app);
+    const present = await exists2(root);
+    await stopPreview(cfg, a.app);
+    let inSindri = true;
+    try {
+      await api.deleteApp(a.app, a.app);
+    } catch (err) {
+      if (err instanceof ApiError && err.status === 404 && present) inSindri = false;
+      else throw err;
+    }
+    let trash = null;
+    if (present) {
+      trash = path9.join(cfg.home, ".papelera", `${a.app}-${stamp()}`);
+      await moveDir(root, trash);
+    }
+    const kept = "Una copia de sus archivos queda en tu computadora, en la papelera de Sindri; puedes borrarla a mano cuando quieras.";
+    let summary;
+    if (!inSindri) summary = `"${a.app}" ya no exist\xEDa en Sindri. ${kept}`;
+    else if (trash) summary = `Borr\xE9 "${a.app}" de Sindri: su direcci\xF3n y sus versiones ya no existen. ${kept}`;
+    else summary = `Borr\xE9 "${a.app}" de Sindri: su direcci\xF3n y sus versiones ya no existen. En esta computadora no ten\xEDa carpeta.`;
+    return { ok: true, summary, name: a.app, removed_from_sindri: inSindri, trash_path: trash };
+  });
+  const help = guard(async () => {
+    const logged_in = await loadCredentials(cfg) !== null;
+    const summary = logged_in ? HELP_SUMMARY : `${HELP_SUMMARY} Todav\xEDa no has entrado con tu cuenta de Kigo en esta computadora; cuando quieras empezar, te abro la p\xE1gina.`;
+    return { ok: true, summary, space_url: SPACE_URL, logged_in, apps_dir: cfg.home };
+  });
   const logout = guard(async () => {
     await clearCredentials(cfg);
     return { ok: true, summary: "Saliste de tu cuenta de Kigo en esta computadora." };
   });
-  return { setup, login, create_app, preview, publish, status, list_apps, versions, rollback, share, logout };
+  return { setup, login, create_app, preview, publish, status, list_apps, versions, rollback, update_template, rename_app, delete_app, share, help, logout };
+}
+var HELP_SUMMARY = "Sindri te ayuda a crear apps internas peque\xF1as para tu equipo en minutos, con datos de prueba y sin escribir c\xF3digo: t\xFA me cuentas qu\xE9 necesitas y yo la construyo. Puedes pedirme crear una app, verla en tu computadora antes de publicarla, publicarla, cambiarle el nombre o la direcci\xF3n, volver a una versi\xF3n anterior, compartirla en Slack, actualizar su plantilla o borrarla. Ten en cuenta: las apps trabajan con datos sint\xE9ticos, nunca reales; funcionan de lunes a viernes de 9:05 a 24:00, hora de la Ciudad de M\xE9xico; cada app la edita solo quien la cre\xF3; y lo que deba llegar a toda la empresa se pide a desarrollo. Tus apps y sus versiones est\xE1n en https://sindri.kigo.dev.";
+async function moveDir(from, to) {
+  await fs9.mkdir(path9.dirname(to), { recursive: true });
+  try {
+    await fs9.rename(from, to);
+  } catch (err) {
+    if (err.code !== "EXDEV") throw err;
+    await fs9.cp(from, to, { recursive: true });
+    await fs9.rm(from, { recursive: true, force: true });
+  }
+}
+function stamp(d = /* @__PURE__ */ new Date()) {
+  const parts = new Intl.DateTimeFormat("en-CA", { timeZone: "America/Mexico_City", year: "numeric", month: "2-digit", day: "2-digit", hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).formatToParts(d);
+  const g = (t) => parts.find((p) => p.type === t)?.value ?? "";
+  return `${g("year")}${g("month")}${g("day")}-${g("hour")}${g("minute")}`;
+}
+function describeTemplateFiles(r) {
+  const parts = [];
+  const n = r.updated.length;
+  if (n > 0) parts.push(n === 1 ? "Cambi\xF3 un archivo de la plantilla." : `Cambiaron ${n} archivos de la plantilla.`);
+  if (r.skipped.length > 0) {
+    const list = r.skipped.length <= 5 ? r.skipped.join(", ") : `${r.skipped.slice(0, 5).join(", ")} y ${r.skipped.length - 5} m\xE1s`;
+    parts.push(`Dej\xE9 como estaban ${r.skipped.length === 1 ? "uno que" : `${r.skipped.length} que`} Claude ya hab\xEDa cambiado (${list}); rev\xEDsalos si quieres el cambio ah\xED tambi\xE9n.`);
+  }
+  return parts.length ? ` ${parts.join(" ")}` : "";
 }
 async function prepareLocalDb(tc, dir, opts = {}) {
   const env = { ...tc.env, KIGO_ENV: "local", DATABASE_URL: "", CI: "1", FORCE_COLOR: "0" };
-  const fresh = !await exists2(path8.join(dir, ".sindri", "pglite"));
-  const migrate = await run(tc.pnpm, ["db:migrate"], { cwd: dir, env, timeoutMs: 18e4 });
+  const fresh = !await exists2(path9.join(dir, ".sindri", "pglite"));
+  const migrate = await run(tc.pnpm, [...PNPM_ARGS, "db:migrate"], { cwd: dir, env, timeoutMs: 18e4 });
   if (migrate.code !== 0) return { ok: false, detail: lastLine(migrate.stderr || migrate.stdout) };
   if (opts.seed ?? fresh) {
-    const seed = await run(tc.pnpm, ["db:seed"], { cwd: dir, env, timeoutMs: 18e4 });
+    const seed = await run(tc.pnpm, [...PNPM_ARGS, "db:seed"], { cwd: dir, env, timeoutMs: 18e4 });
     if (seed.code !== 0) return { ok: false, detail: lastLine(seed.stderr || seed.stdout) };
   }
   return { ok: true };
@@ -36839,7 +37057,7 @@ function when(iso, now = /* @__PURE__ */ new Date()) {
 }
 
 // src/index.ts
-var VERSION = "0.1.0";
+var VERSION = "0.1.3";
 function registerTools(server, tools) {
   for (const name of Object.keys(SCHEMAS)) {
     const meta3 = DESCRIPTIONS[name];

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.2",
   "name": "sindri",
   "display_name": "Kigo Sindri",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Create, preview and publish Kigo internal apps from your Claude.",
   "long_description": "Sindri lets a Kigo product manager build small internal apps by talking to Claude. Claude edits the app on your computer; this connector installs what is needed, runs the app locally with test data, publishes it at <name>.sindri.kigo.dev and keeps versions. Sign in with your @cargomovil.com account.",
   "author": {
@@ -13,7 +13,9 @@
     "entry_point": "dist/index.js",
     "mcp_config": {
       "command": "node",
-      "args": ["${__dirname}/dist/index.js"],
+      "args": [
+        "${__dirname}/dist/index.js"
+      ],
       "env": {
         "SINDRI_HOME": "${user_config.sindri_home}"
       }
@@ -29,20 +31,75 @@
     }
   },
   "tools": [
-    { "name": "setup", "description": "Prepare this computer (Node.js and pnpm, no admin rights)" },
-    { "name": "login", "description": "Sign in with your Kigo account" },
-    { "name": "create_app", "description": "Create a new app from Kigo's template" },
-    { "name": "preview", "description": "Run an app locally with test data" },
-    { "name": "publish", "description": "Publish an app at its Sindri address" },
-    { "name": "status", "description": "Address, last version and local changes of an app" },
-    { "name": "list_apps", "description": "Your apps in Sindri" },
-    { "name": "versions", "description": "Published versions of an app" },
-    { "name": "rollback", "description": "Go back to a previous version" },
-    { "name": "share", "description": "The line to paste in Slack" }
+    {
+      "name": "setup",
+      "description": "Prepare this computer (Node.js and pnpm, no admin rights)"
+    },
+    {
+      "name": "login",
+      "description": "Sign in with your Kigo account"
+    },
+    {
+      "name": "create_app",
+      "description": "Create a new app from Kigo's template"
+    },
+    {
+      "name": "preview",
+      "description": "Run an app locally with test data"
+    },
+    {
+      "name": "publish",
+      "description": "Publish an app at its Sindri address"
+    },
+    {
+      "name": "status",
+      "description": "Address, last version and local changes of an app"
+    },
+    {
+      "name": "list_apps",
+      "description": "Your apps in Sindri"
+    },
+    {
+      "name": "versions",
+      "description": "Published versions of an app"
+    },
+    {
+      "name": "rollback",
+      "description": "Go back to a previous version"
+    },
+    {
+      "name": "update_template",
+      "description": "Bring an app up to the current Kigo template"
+    },
+    {
+      "name": "rename_app",
+      "description": "Change an app's address or its visible name"
+    },
+    {
+      "name": "delete_app",
+      "description": "Delete an app after the PM types its name"
+    },
+    {
+      "name": "share",
+      "description": "The line to paste in Slack"
+    },
+    {
+      "name": "help",
+      "description": "What Sindri is and what you can ask for"
+    }
+  ],
+  "keywords": [
+    "kigo",
+    "sindri",
+    "internal apps"
   ],
-  "keywords": ["kigo", "sindri", "internal apps"],
   "compatibility": {
-    "platforms": ["darwin", "linux"],
-    "runtimes": { "node": ">=20" }
+    "platforms": [
+      "darwin",
+      "linux"
+    ],
+    "runtimes": {
+      "node": ">=20"
+    }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kigo-dev/sindri",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Sindri connector: an MCP server that lets a Kigo PM's Claude create, preview and publish internal apps on Kigo Sindri",
   "license": "UNLICENSED",
   "type": "module",
@@ -35,7 +35,7 @@
   "packageManager": "pnpm@11.5.0",
   "repository": {
     "type": "git",
-    "url": "https://github.com/Parkimovil/kigo-sindri.git",
+    "url": "git+https://github.com/Parkimovil/kigo-sindri.git",
     "directory": "connector"
   },
   "publishConfig": {