@lightward/mechanic-cli 0.1.8 → 0.1.10

package/README.md

@@ -56,7 +56,17 @@ prompted:
 mechanic init --shop example.myshopify.com
 ```
 
-Pull existing Mechanic tasks into local JSON files:
+Choose how to start.
+
+To bring one existing task into local files, find its remote task ID, then pull
+that task:
+
+```bash
+mechanic tasks list --verbose
+mechanic tasks pull <remote-task-id>
+```
+
+To intentionally bootstrap a repo with every task in the shop:
 
 ```bash
 mechanic tasks pull
@@ -70,15 +80,14 @@ initialized CLI project; it does not require a fresh repository:
 mechanic tasks new order-tagger
 ```
 
-For most Liquid or documentation edits, unbundle one task into helper files,
-edit those files, then bundle the helper directory back into its canonical JSON
-file. The JSON file remains the deployable source of truth; the helper directory
-is the comfortable editing view beside it. Tasks created with `tasks new`
-already have both files, so you can start editing the helper directory
-immediately.
+For most Liquid or documentation edits, use the helper directory beside the JSON
+file. Existing pulled tasks can be unbundled first; tasks created with
+`tasks new` already have the helper directory.
 
 ```bash
+# for an existing pulled task only
 mechanic tasks unbundle order-tagger
+
 # edit tasks/order-tagger/script.liquid, docs.md, or task.json
 mechanic tasks bundle order-tagger
 mechanic tasks status
@@ -88,6 +97,10 @@ mechanic tasks publish order-tagger --dry-run
 mechanic tasks publish order-tagger
 ```
 
+For example, edit `tasks/order-tagger/docs.md` or
+`tasks/order-tagger/script.liquid`, bundle it, preview it, then publish only
+when the diff and dry-run plan look right.
+
 For normal setup, paste the token into the masked prompt or run
 `mechanic auth login` after `mechanic init`. In CI, store the token as
 `MECHANIC_API_TOKEN`. The `--token` flag exists for controlled automation, but
@@ -113,6 +126,7 @@ mechanic auth login [--token <token>]
 mechanic auth logout
 mechanic github init [--force]
 mechanic shop status [--json]
+mechanic shop deprecations [task] [--json]
 mechanic tasks list [--verbose] [--json]
 mechanic tasks new <name> [--force] [--json]
 mechanic tasks open <task>
@@ -178,6 +192,19 @@ unless you pass `--force`. It does not create anything in Mechanic until you run
 running runs, waiting runs, queue lag, and the largest backlog groups by task,
 action, and event topic.
 
+`shop deprecations` shows unresolved Shopify API deprecations reported by tasks
+in the configured shop. Pass a task slug, task file, helper directory, or linked
+remote task ID to focus on one task:
+
+```bash
+mechanic shop deprecations
+mechanic shop deprecations order-tagger
+```
+
+The output includes the task's configured Shopify API version and the Shopify API
+version seen in the deprecated request. Use `--json` for monitoring scripts,
+agents, or dashboards.
+
 `tasks status` shows whether local task JSON files are linked, ready to publish,
 and in sync with their remote Mechanic tasks. Use `--local` when you only want
 the fast offline check for JSON validity, link state, and helper-folder drift.

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import type { JsonObject, ShopStatusResponse, TaskEnvelope, TaskListResponse, TaskPreviewResponse } from "./types.js";
+import type { JsonObject, ShopDeprecationsResponse, ShopStatusResponse, TaskEnvelope, TaskListResponse, TaskPreviewResponse } from "./types.js";
 export declare const USER_AGENT: string;
 type RequestOptions = {
     method?: string;
@@ -27,6 +27,7 @@ export declare class MechanicClient {
     request<T>(pathname: string, options?: RequestOptions): Promise<T>;
     verifyAuth(): Promise<AuthVerification>;
     getShopStatus(): Promise<ShopStatusResponse>;
+    getShopDeprecations(taskId?: string): Promise<ShopDeprecationsResponse>;
     listTasks(): Promise<TaskListResponse>;
     getTask(id: string): Promise<TaskEnvelope>;
     previewTask(task: JsonObject, id?: string): Promise<TaskPreviewResponse>;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAKtH,eAAO,MAAM,UAAU,QAAkD,CAAC;AAE1E,KAAK,cAAc,GAAG;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;CACH,CAAC;AAwGF,qBAAa,cAAc;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAM7G,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC;IAgD5E,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIvC,aAAa,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAI5C,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAItC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAI1C,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IASxE,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAM3D,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ5E,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;CAM3H"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAKpB,eAAO,MAAM,UAAU,QAAkD,CAAC;AAE1E,KAAK,cAAc,GAAG;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;CACH,CAAC;AAwGF,qBAAa,cAAc;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAM7G,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC;IAgD5E,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIvC,aAAa,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAI5C,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAMvE,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAItC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAI1C,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IASxE,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAM3D,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ5E,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;CAM3H"}

package/dist/client.js

@@ -141,6 +141,10 @@ export class MechanicClient {
     getShopStatus() {
         return this.request("/v1/shop/status");
     }
+    getShopDeprecations(taskId) {
+        const search = taskId ? `?${new URLSearchParams({ task_id: taskId }).toString()}` : "";
+        return this.request(`/v1/shop/deprecations${search}`);
+    }
     listTasks() {
         return this.request("/v1/tasks");
     }

package/dist/commands/github/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/commands/github/init.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAKpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,OAAO,SAA4E;IACnG,OAAgB,WAAW,SAAiH;IAE5I,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA2C3B"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/commands/github/init.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAKpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,OAAO,SAAqF;IAC5G,OAAgB,WAAW,SAA0H;IAErJ,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA2C3B"}

package/dist/commands/github/init.js

@@ -5,8 +5,8 @@ import { CliError } from "../../errors.js";
 import { ensureDir, pathExists, writeText } from "../../fs.js";
 import { githubWorkflowFiles } from "../../github-workflows.js";
 export default class GithubInit extends BaseCommand {
-    static summary = "Create GitHub Actions workflows for single-shop Mechanic task updates.";
-    static description = "Create validation, manual deploy, and pull-from-app GitHub Actions workflows for this Mechanic CLI project.";
+    static summary = "Create optional GitHub Actions workflows for single-shop Mechanic task updates.";
+    static description = "Create optional validation, manual deploy, and pull-from-app GitHub Actions workflows for this Mechanic CLI project.";
     static flags = {
         force: Flags.boolean({ description: "Overwrite existing Mechanic GitHub workflow files." }),
     };

package/dist/commands/globals/delete.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from "../../base-command.js";
+export default class GlobalsDelete extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static args: {
+        key: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/globals/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/commands/globals/delete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,OAAgB,OAAO,SAA6B;IACpD,OAAgB,WAAW,SAA2C;IAEtE,OAAgB,IAAI;;MAElB;IAEF,OAAgB,KAAK;;MAKnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAc3B"}

package/dist/commands/globals/delete.js

@@ -0,0 +1,28 @@
+import { Args, Flags } from "@oclif/core";
+import { BaseCommand } from "../../base-command.js";
+import { validateConfigKey } from "../../config-keys.js";
+import { CliError } from "../../errors.js";
+export default class GlobalsDelete extends BaseCommand {
+    static summary = "Delete one shop global.";
+    static description = "Delete one visible shop-level global.";
+    static args = {
+        key: Args.string({ required: true, description: "Global key, using lower snake-case." }),
+    };
+    static flags = {
+        force: Flags.boolean({
+            char: "f",
+            description: "Delete without an interactive confirmation.",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(GlobalsDelete);
+        const key = validateConfigKey(args.key);
+        if (!flags.force) {
+            throw new CliError(`Deleting global ${key} cannot be undone. Re-run with --force to confirm.`, 2);
+        }
+        const project = await this.loadProject();
+        const client = await this.verifiedClientForProject(project);
+        await client.deleteGlobal(key);
+        this.log(`${this.success("Deleted")} global ${this.taskName(key)}`);
+    }
+}

package/dist/commands/globals/list.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from "../../base-command.js";
+export default class GlobalsList extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/globals/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/globals/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAUpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,OAAgB,OAAO,SAAwB;IAC/C,OAAgB,WAAW,SAAqE;IAEhG,OAAgB,KAAK;;MAInB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAwB3B"}

package/dist/commands/globals/list.js

@@ -0,0 +1,39 @@
+import { Flags } from "@oclif/core";
+import { BaseCommand } from "../../base-command.js";
+function formatValue(value) {
+    if (value === undefined) {
+        return "";
+    }
+    return JSON.stringify(value);
+}
+export default class GlobalsList extends BaseCommand {
+    static summary = "List shop globals.";
+    static description = "List visible shop-level JSON globals for this Mechanic project.";
+    static flags = {
+        json: Flags.boolean({
+            description: "Print globals as JSON for agents, scripts, or editor integrations.",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(GlobalsList);
+        const project = await this.loadProject();
+        const client = await this.verifiedClientForProject(project);
+        const response = await client.listGlobals();
+        const globals = response.globals || [];
+        if (flags.json) {
+            this.outputJson({
+                shop_domain: project.shopDomain,
+                globals,
+            });
+            return;
+        }
+        this.table([
+            ["Key", "Value", "Updated"],
+            ...globals.map((global) => [
+                this.taskName(global.key),
+                formatValue(global.value),
+                this.muted(global.updated_at || ""),
+            ]),
+        ]);
+    }
+}

package/dist/commands/globals/pull.d.ts

@@ -0,0 +1,11 @@
+import { BaseCommand } from "../../base-command.js";
+export default class GlobalsPull extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static flags: {
+        out: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=pull.d.ts.map

package/dist/commands/globals/pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../../src/commands/globals/pull.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAOpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,OAAgB,OAAO,SAAmD;IAC1E,OAAgB,WAAW,SAAiE;IAE5F,OAAgB,KAAK;;;MAQnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA0B3B"}

package/dist/commands/globals/pull.js

@@ -0,0 +1,42 @@
+import { Flags } from "@oclif/core";
+import path from "node:path";
+import { BaseCommand } from "../../base-command.js";
+import { CliError } from "../../errors.js";
+import { pathExists, readText, writeText } from "../../fs.js";
+import { stableStringify } from "../../json.js";
+const DEFAULT_GLOBALS_FILE = "mechanic.globals.json";
+export default class GlobalsPull extends BaseCommand {
+    static summary = "Pull shop globals into mechanic.globals.json.";
+    static description = "Pull visible shop-level globals into a repo-safe JSON file.";
+    static flags = {
+        out: Flags.string({
+            description: "File path to write.",
+            default: DEFAULT_GLOBALS_FILE,
+        }),
+        force: Flags.boolean({
+            description: "Overwrite an existing globals file when its contents differ.",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(GlobalsPull);
+        const project = await this.loadProject();
+        const client = await this.verifiedClientForProject(project);
+        const response = await client.listGlobals();
+        const globals = Object.fromEntries((response.globals || []).map((global) => [global.key, global.value]));
+        const file = path.resolve(project.cwd, flags.out);
+        const relativeFile = path.relative(project.cwd, file) || file;
+        const contents = `${stableStringify(globals)}\n`;
+        if (await pathExists(file)) {
+            const existingContents = await readText(file);
+            if (existingContents === contents) {
+                this.log(`${this.success("Unchanged")} ${this.taskName(relativeFile)}`);
+                return;
+            }
+            if (!flags.force) {
+                throw new CliError(`${relativeFile} already exists and differs. Re-run with --force to overwrite.`, 2);
+            }
+        }
+        await writeText(file, contents);
+        this.log(`${this.success("Wrote")} ${this.taskName(relativeFile)}`);
+    }
+}

package/dist/commands/globals/push.d.ts

@@ -0,0 +1,11 @@
+import { BaseCommand } from "../../base-command.js";
+export default class GlobalsPush extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static flags: {
+        file: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "dry-run": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=push.d.ts.map

package/dist/commands/globals/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../../src/commands/globals/push.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAgBpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,OAAgB,OAAO,SAA8C;IACrE,OAAgB,WAAW,SAAmI;IAE9J,OAAgB,KAAK;;;MAQnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAuC3B"}

package/dist/commands/globals/push.js

@@ -0,0 +1,57 @@
+import { Flags } from "@oclif/core";
+import path from "node:path";
+import { BaseCommand } from "../../base-command.js";
+import { validateConfigKey } from "../../config-keys.js";
+import { CliError } from "../../errors.js";
+import { readJson } from "../../fs.js";
+import { stableStringify } from "../../json.js";
+const DEFAULT_GLOBALS_FILE = "mechanic.globals.json";
+function ensurePlainObject(value, source) {
+    if (!value || typeof value !== "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype) {
+        throw new CliError(`${source} must contain a JSON object mapping global keys to values.`, 2);
+    }
+    return value;
+}
+export default class GlobalsPush extends BaseCommand {
+    static summary = "Push mechanic.globals.json to this shop.";
+    static description = "Push visible shop-level globals from a repo-safe JSON file. This updates listed keys and does not delete missing remote keys.";
+    static flags = {
+        file: Flags.string({
+            description: "Globals JSON file to read.",
+            default: DEFAULT_GLOBALS_FILE,
+        }),
+        "dry-run": Flags.boolean({
+            description: "Show what would be pushed without writing to Mechanic.",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(GlobalsPush);
+        const project = await this.loadProject();
+        const client = await this.verifiedClientForProject(project);
+        const file = path.resolve(project.cwd, flags.file);
+        const entries = Object.entries(ensurePlainObject(await readJson(file), path.relative(project.cwd, file) || file));
+        const rows = [["Key", "Action"]];
+        for (const [key] of entries) {
+            validateConfigKey(key);
+        }
+        if (flags["dry-run"]) {
+            const remoteGlobals = Object.fromEntries((await client.listGlobals()).globals?.map((global) => [global.key, global.value]) || []);
+            for (const [key, value] of entries) {
+                const remoteValue = remoteGlobals[key];
+                const action = remoteValue === undefined
+                    ? "would create"
+                    : stableStringify(remoteValue) === stableStringify(value)
+                        ? "unchanged"
+                        : "would update";
+                rows.push([this.taskName(key), this.actionLabel(action)]);
+            }
+            this.table(rows);
+            return;
+        }
+        for (const [key, value] of entries) {
+            await client.setGlobal(key, value);
+            rows.push([this.taskName(key), this.actionLabel("updated")]);
+        }
+        this.table(rows);
+    }
+}

package/dist/commands/globals/set.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from "../../base-command.js";
+export default class GlobalsSet extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static args: {
+        key: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=set.d.ts.map

package/dist/commands/globals/set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set.d.ts","sourceRoot":"","sources":["../../../src/commands/globals/set.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,OAAO,SAA0B;IACjD,OAAgB,WAAW,SAA6C;IAExE,OAAgB,IAAI;;MAElB;IAEF,OAAgB,KAAK;;MAKnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAU3B"}

package/dist/commands/globals/set.js

@@ -0,0 +1,26 @@
+import { Args, Flags } from "@oclif/core";
+import { BaseCommand } from "../../base-command.js";
+import { validateConfigKey } from "../../config-keys.js";
+import { parseJson } from "../../json.js";
+export default class GlobalsSet extends BaseCommand {
+    static summary = "Set one shop global.";
+    static description = "Set one visible shop-level JSON global.";
+    static args = {
+        key: Args.string({ required: true, description: "Global key, using lower snake-case." }),
+    };
+    static flags = {
+        json: Flags.string({
+            required: true,
+            description: "JSON value to store.",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(GlobalsSet);
+        const key = validateConfigKey(args.key);
+        const value = parseJson(flags.json, "--json");
+        const project = await this.loadProject();
+        const client = await this.verifiedClientForProject(project);
+        await client.setGlobal(key, value);
+        this.log(`${this.success("Set")} global ${this.taskName(key)}`);
+    }
+}

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AASjD,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,WAAW;IAC3C,OAAgB,WAAW,SAAkD;IAE7E,OAAgB,KAAK;;;;;;MAQnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgE3B"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AASjD,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,WAAW;IAC3C,OAAgB,WAAW,SAAkD;IAE7E,OAAgB,KAAK;;;;;;MAQnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAiE3B"}

package/dist/commands/init.js

@@ -59,6 +59,7 @@ export default class Init extends BaseCommand {
         this.log("");
         this.log("Next steps:");
         if (!storedToken) {
+            this.log("  create an API token in Mechanic: Settings -> API tokens");
             this.log(`  ${this.taskName("mechanic auth login")}`);
         }
         this.log(`  ${this.taskName("mechanic tasks pull")}`);

package/dist/commands/secrets/delete.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from "../../base-command.js";
+export default class SecretsDelete extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static args: {
+        key: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/secrets/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/commands/secrets/delete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,OAAgB,OAAO,SAA6B;IACpD,OAAgB,WAAW,SAAqF;IAEhH,OAAgB,IAAI;;MAElB;IAEF,OAAgB,KAAK;;MAKnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAc3B"}

package/dist/commands/secrets/delete.js

@@ -0,0 +1,28 @@
+import { Args, Flags } from "@oclif/core";
+import { BaseCommand } from "../../base-command.js";
+import { validateConfigKey } from "../../config-keys.js";
+import { CliError } from "../../errors.js";
+export default class SecretsDelete extends BaseCommand {
+    static summary = "Delete one shop secret.";
+    static description = "Delete one write-only shop-level secret. Affected tasks may fail until updated.";
+    static args = {
+        key: Args.string({ required: true, description: "Secret key, using lower snake-case." }),
+    };
+    static flags = {
+        force: Flags.boolean({
+            char: "f",
+            description: "Delete without an interactive confirmation.",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretsDelete);
+        const key = validateConfigKey(args.key);
+        if (!flags.force) {
+            throw new CliError(`Deleting secret ${key} can break tasks until updated. Re-run with --force to confirm.`, 2);
+        }
+        const project = await this.loadProject();
+        const client = await this.verifiedClientForProject(project);
+        await client.deleteSecret(key);
+        this.log(`${this.success("Deleted")} secret ${this.taskName(key)}`);
+    }
+}

package/dist/commands/secrets/list.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from "../../base-command.js";
+export default class SecretsList extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/secrets/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/secrets/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAMpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,OAAgB,OAAO,SAAwB;IAC/C,OAAgB,WAAW,SAAmF;IAE9G,OAAgB,KAAK;;MAInB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAyB3B"}

package/dist/commands/secrets/list.js

@@ -0,0 +1,37 @@
+import { Flags } from "@oclif/core";
+import { BaseCommand } from "../../base-command.js";
+function formatCount(value) {
+    return typeof value === "number" ? value.toLocaleString() : "0";
+}
+export default class SecretsList extends BaseCommand {
+    static summary = "List shop secrets.";
+    static description = "List write-only shop-level secret metadata. Secret values are never returned.";
+    static flags = {
+        json: Flags.boolean({
+            description: "Print secret metadata as JSON for agents, scripts, or editor integrations.",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(SecretsList);
+        const project = await this.loadProject();
+        const client = await this.verifiedClientForProject(project);
+        const response = await client.listSecrets();
+        const secrets = response.secrets || [];
+        if (flags.json) {
+            this.outputJson({
+                shop_domain: project.shopDomain,
+                secrets,
+            });
+            return;
+        }
+        this.table([
+            ["Key", "Value", "Task refs", "Updated"],
+            ...secrets.map((secret) => [
+                this.taskName(secret.key),
+                secret.value_present ? this.success("set") : this.muted("missing"),
+                formatCount(secret.task_reference_count),
+                this.muted(secret.updated_at || ""),
+            ]),
+        ]);
+    }
+}

package/dist/commands/secrets/set.d.ts

@@ -0,0 +1,25 @@
+import { stdin } from "node:process";
+import { BaseCommand } from "../../base-command.js";
+type SecretStdin = typeof stdin;
+export declare function readStdin(input?: SecretStdin): Promise<string>;
+export declare function readSecretValueFromStdin(input?: SecretStdin): Promise<string>;
+export declare function readSecretValueFromEnv(envName: string, env?: NodeJS.ProcessEnv): string;
+export default class SecretsSet extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static args: {
+        key: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        "from-stdin": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        "value-env": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+    secretValue(flags: {
+        "from-stdin"?: boolean;
+        "value-env"?: string;
+    }): Promise<string>;
+}
+export {};
+//# sourceMappingURL=set.d.ts.map

package/dist/commands/secrets/set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set.d.ts","sourceRoot":"","sources":["../../../src/commands/secrets/set.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,KAAK,WAAW,GAAG,OAAO,KAAK,CAAC;AAEhC,wBAAgB,SAAS,CAAC,KAAK,GAAE,WAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBrE;AAED,wBAAsB,wBAAwB,CAC5C,KAAK,GAAE,WAAmB,GACzB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAYR;AAED,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,OAAO,SAA0B;IACjD,OAAgB,WAAW,SAAwE;IAEnG,OAAgB,IAAI;;MAElB;IAEF,OAAgB,KAAK;;;;MAanB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBpB,WAAW,CAAC,KAAK,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAsB5F"}