@outputai/cli 0.14.0 → 0.14.1-next.51e8690.0

package/dist/assets/docker/docker-compose-dev.yml

@@ -80,7 +80,7 @@ services:
         condition: service_healthy
       worker:
         condition: service_healthy
-    image: outputai/api:${OUTPUT_API_VERSION:-0.14.0}
+    image: outputai/api:${OUTPUT_API_VERSION:-0.14.1-next.51e8690.0}
     init: true
     networks:
       - main

package/dist/commands/credentials/get.js

@@ -1,6 +1,6 @@
 import { Args, Command, Flags } from '@oclif/core';
 import { load as parseYaml } from 'js-yaml';
-import { getNestedValue } from '@outputai/credentials';
+import { getNestedValue } from '@outputai/core/credentials';
 import { decryptCredentials, credentialsExist, resolveCredentialsPath } from '#services/credentials_service.js';
 export default class CredentialsGet extends Command {
     static description = 'Get a specific credential value by dot-notation path';

package/dist/commands/credentials/get.spec.js

@@ -6,7 +6,7 @@ vi.mock('#services/credentials_service.js');
 vi.mock('js-yaml', () => ({
     load: vi.fn((yaml) => ({ anthropic: { api_key: yaml.includes('sk-test') ? 'sk-test' : undefined } }))
 }));
-vi.mock('@outputai/credentials', () => ({
+vi.mock('@outputai/core/credentials', () => ({
     getNestedValue: vi.fn((obj, path) => {
         const parts = path.split('.');
         return parts.reduce((acc, part) => acc?.[part], obj);

package/dist/commands/fix.js

@@ -9,7 +9,7 @@ const Ansi = {
     RESET: '\x1b[0m'
 };
 export default class Fix extends Command {
-    static description = 'Fix Output scripts in the package.json (reset overwrites, add missing and remove deprecated)';
+    static description = 'Fix Output scripts in the package.json (reset overwrites, add missing and remove deprecated) and remove stale hook files';
     static examples = [
         '<%= config.bin %> <%= command.id %>'
     ];
@@ -30,6 +30,10 @@ export default class Fix extends Command {
             this.log('\n  Scripts to remove:');
             plan.scriptsToRemove.forEach(({ key }) => this.log(`    ${Ansi.RED}-${Ansi.RESET} "${key}"`));
         }
+        if (plan.hookFilesToRemove.length > 0) {
+            this.log('\n  Hook files to remove:');
+            plan.hookFilesToRemove.forEach(file => this.log(`    ${Ansi.RED}-${Ansi.RESET} "${file}"`));
+        }
         this.log('');
     }
     async run() {

package/dist/commands/fix.spec.js

@@ -16,7 +16,8 @@ const basePlan = () => ({
     hasChanges: true,
     scriptsToRemove: [{ key: 'dev', value: 'old' }],
     scriptsToAdd: [{ key: 'output:new', value: 'echo new' }],
-    scriptsToReplace: [{ key: 'output:dev', before: 'old dev', after: 'output dev' }]
+    scriptsToReplace: [{ key: 'output:dev', before: 'old dev', after: 'output dev' }],
+    hookFilesToRemove: []
 });
 describe('fix command', () => {
     const createTestCommand = () => {
@@ -59,6 +60,17 @@ describe('fix command', () => {
         expect(fixService.applyFix).toHaveBeenCalledTimes(1);
         expect(cmd.log).toHaveBeenCalledWith('Done, package.json is properly configured.');
     });
+    it('should list hook files to remove', async () => {
+        vi.mocked(fixService.planFix).mockReturnValue({
+            ...basePlan(),
+            hookFilesToRemove: ['node_modules/@outputai/credentials/dist/hooks.js']
+        });
+        vi.mocked(confirm).mockResolvedValue(false);
+        const cmd = createTestCommand();
+        await cmd.run();
+        expect(cmd.log).toHaveBeenCalledWith('\n  Hook files to remove:');
+        expect(cmd.log).toHaveBeenCalledWith(expect.stringContaining('"node_modules/@outputai/credentials/dist/hooks.js"'));
+    });
     it('should not apply when user declines', async () => {
         vi.mocked(fixService.planFix).mockReturnValue(basePlan());
         vi.mocked(confirm).mockResolvedValue(false);

package/dist/generated/framework_version.json

@@ -1,3 +1,3 @@
 {
-    "framework": "0.14.0"
+    "framework": "0.14.1-next.51e8690.0"
 }

package/dist/services/credentials_service.integration.test.js

@@ -3,7 +3,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
 import { load as parseYaml } from 'js-yaml';
-import { encrypt, decrypt, generateKey } from '@outputai/credentials';
+import { encrypt, decrypt, generateKey } from '@outputai/core/credentials';
 import { initCredentials, decryptCredentials, writeEncrypted, checkKeyMatchesCredentials } from './credentials_service.js';
 describe('credentials service integration', () => {
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'output-creds-'));

package/dist/services/credentials_service.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { dump as stringifyYaml } from 'js-yaml';
-import { encrypt, decrypt, generateKey, resolveCredentialsPath as resolveCredPath, resolveKeyPath as resolveKPath, resolveKeyEnvVar, resolveWorkflowCredentialsPath, resolveWorkflowKeyPath, resolveWorkflowKeyEnvVar } from '@outputai/credentials';
+import { encrypt, decrypt, generateKey, resolveCredentialsPath as resolveCredPath, resolveKeyPath as resolveKPath, resolveKeyEnvVar, resolveWorkflowCredentialsPath, resolveWorkflowKeyPath, resolveWorkflowKeyEnvVar } from '@outputai/core/credentials';
 const WORKFLOWS_DIR = path.join('src', 'workflows');
 const resolveWorkflowDir = (workflow) => path.resolve(process.cwd(), WORKFLOWS_DIR, workflow);
 export const resolveCredentialsPath = (environment, workflow) => workflow ?

package/dist/services/credentials_service.spec.js

@@ -8,7 +8,7 @@ vi.mock('node:fs', () => ({
         mkdirSync: vi.fn()
     }
 }));
-vi.mock('@outputai/credentials', async (importOriginal) => ({
+vi.mock('@outputai/core/credentials', async (importOriginal) => ({
     ...(await importOriginal()),
     encrypt: vi.fn((plaintext) => `encrypted:${plaintext}`),
     decrypt: vi.fn((ciphertext) => ciphertext.replace('encrypted:', '')),

package/dist/services/fix_package.d.ts

@@ -14,7 +14,7 @@ export interface ScriptToReplace {
     after: string;
 }
 /**
- * Plan for aligning `scripts` with the scaffold template (reads only; no write until apply).
+ * Plan for aligning `scripts` with the scaffold template and dropping stale hook files (reads only; no write until apply).
  */
 export interface FixPlan {
     packageJsonPath: string;
@@ -23,6 +23,7 @@ export interface FixPlan {
     scriptsToRemove: ScriptToRemove[];
     scriptsToReplace: ScriptToReplace[];
     scriptsToAdd: ScriptToAdd[];
+    hookFilesToRemove: string[];
 }
 /**
  * Computes the package.json rewrite without writing. Use with {@link applyFix}.

package/dist/services/fix_package.js

@@ -6,6 +6,8 @@ const packageJson = 'package.json';
 const templateRelativePath = path.join('templates', 'project', 'package.json.template');
 /** Legacy script names from older versions of the project */
 export const legacyScripts = ['dev'];
+/** Hook files from the @outputai/credentials package, which was folded into @outputai/core */
+const credentialsHookFilePattern = /@outputai[\\/]credentials([\\/]|$)/;
 function getTemplatesPackageJsonPath() {
     const __filename = fileURLToPath(import.meta.url);
     const __dirname = path.dirname(__filename);
@@ -34,6 +36,16 @@ function parsePackageJsonObject(raw, packagePath) {
         throw new Error(`File ${packagePath} is not a valid JSON.`, { cause: error });
     }
 }
+function removeCredentialsHookFiles(pkg) {
+    const section = pkg.outputai;
+    if (typeof section !== 'object' || section === null || !Array.isArray(section.hookFiles)) {
+        return [];
+    }
+    const hookFiles = section.hookFiles;
+    const removed = hookFiles.filter((file) => typeof file === 'string' && credentialsHookFilePattern.test(file));
+    section.hookFiles = hookFiles.filter(file => !removed.includes(file));
+    return removed;
+}
 function parseTemplatePackageJson(processed) {
     try {
         return JSON.parse(processed);
@@ -83,6 +95,7 @@ export function planFix(projectRoot) {
         scripts[key] = after;
     }
     pkg.scripts = scripts;
+    const hookFilesToRemove = removeCredentialsHookFiles(pkg);
     const packageJsonUpdatedContent = `${JSON.stringify(pkg, null, 2)}\n`;
     const hasChanges = packageJsonUpdatedContent !== raw;
     return {
@@ -91,7 +104,8 @@ export function planFix(projectRoot) {
         hasChanges,
         scriptsToRemove,
         scriptsToReplace,
-        scriptsToAdd
+        scriptsToAdd,
+        hookFilesToRemove
     };
 }
 /**

package/dist/services/fix_package.spec.js

@@ -52,6 +52,38 @@ describe('fix package', () => {
             'output:worker:watch'
         ].sort());
     });
+    it('should remove hook files pointing to @outputai/credentials and keep the others', async () => {
+        const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'fix-test-'));
+        const pkg = {
+            name: 'my-proj',
+            outputai: {
+                hookFiles: [
+                    'dist/hooks/cost_hooks.js',
+                    'node_modules/@outputai/credentials/dist/hooks.js',
+                    'dist/hooks/register_credentials.js'
+                ]
+            }
+        };
+        await fs.writeFile(path.join(tmpDir, 'package.json'), JSON.stringify(pkg, null, 2), 'utf-8');
+        const plan = planFix(tmpDir);
+        expect(plan.hookFilesToRemove).toEqual(['node_modules/@outputai/credentials/dist/hooks.js']);
+        applyFix(plan);
+        const next = JSON.parse(await fs.readFile(path.join(tmpDir, 'package.json'), 'utf-8'));
+        expect(next.outputai.hookFiles).toEqual(['dist/hooks/cost_hooks.js', 'dist/hooks/register_credentials.js']);
+    });
+    it('should leave outputai untouched when hookFiles is missing or not an array', async () => {
+        const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'fix-test-'));
+        const missing = { name: 'my-proj', outputai: {} };
+        await fs.writeFile(path.join(tmpDir, 'package.json'), JSON.stringify(missing, null, 2), 'utf-8');
+        const missingPlan = planFix(tmpDir);
+        expect(missingPlan.hookFilesToRemove).toEqual([]);
+        expect(JSON.parse(missingPlan.packageJsonUpdatedContent).outputai).toEqual({});
+        const malformed = { name: 'my-proj', outputai: { hookFiles: 'node_modules/@outputai/credentials/dist/hooks.js' } };
+        await fs.writeFile(path.join(tmpDir, 'package.json'), JSON.stringify(malformed, null, 2), 'utf-8');
+        const malformedPlan = planFix(tmpDir);
+        expect(malformedPlan.hookFilesToRemove).toEqual([]);
+        expect(JSON.parse(malformedPlan.packageJsonUpdatedContent).outputai).toEqual(malformed.outputai);
+    });
     it('should throw when package.json is missing', async () => {
         const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'fix-test-'));
         expect(() => planFix(tmpDir)).toThrow(/No package\.json found/);

package/dist/services/messages.js

@@ -168,7 +168,7 @@ export const getProjectSuccessMessage = (folderName, installSuccess, credentials
         steps.push({
             step: 'Add your API credentials',
             command: 'npx output credentials edit',
-            note: 'Learn more: https://docs.output.ai/packages/credentials'
+            note: 'Learn more: https://docs.output.ai/packages/core/credentials'
         });
     }
     steps.push({

package/dist/templates/project/package.json.template

@@ -23,8 +23,5 @@
   },
   "engines": {
     "node": ">=24.3.0"
-  },
-  "outputai": {
-    "hookFiles": ["node_modules/@outputai/credentials/dist/hooks.js"]
   }
 }

package/dist/utils/credentials_loader.js

@@ -1,4 +1,4 @@
-import { InvalidCredentialsKeyError, MalformedCredentialsKeyError, MissingKeyError, resolveCredentialRefs } from '@outputai/credentials';
+import { InvalidCredentialsKeyError, MalformedCredentialsKeyError, MissingKeyError, resolveCredentialRefs } from '@outputai/core/credentials';
 const isCredentialsConfigError = (error) => error instanceof MissingKeyError ||
     error instanceof InvalidCredentialsKeyError ||
     error instanceof MalformedCredentialsKeyError;

package/dist/utils/credentials_loader.spec.js

@@ -1,8 +1,8 @@
 import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
-import * as credentials from '@outputai/credentials';
+import * as credentials from '@outputai/core/credentials';
 import { loadCredentialRefs } from './credentials_loader.js';
-vi.mock('@outputai/credentials', async () => {
-    const actual = await vi.importActual('@outputai/credentials');
+vi.mock('@outputai/core/credentials', async () => {
+    const actual = await vi.importActual('@outputai/core/credentials');
     return {
         ...actual,
         resolveCredentialRefs: vi.fn()

package/oclif.manifest.json

@@ -3,7 +3,7 @@
     "fix": {
       "aliases": [],
       "args": {},
-      "description": "Fix Output scripts in the package.json (reset overwrites, add missing and remove deprecated)",
+      "description": "Fix Output scripts in the package.json (reset overwrites, add missing and remove deprecated) and remove stale hook files",
       "examples": [
         "<%= config.bin %> <%= command.id %>"
       ],
@@ -156,6 +156,142 @@
         "update.js"
       ]
     },
+    "dev:down": {
+      "aliases": [],
+      "args": {},
+      "description": "Stop Output development services started by `output dev`\n\nUseful after `output dev -d`, or when an attached `output dev` session\nleft the services running on quit.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --compose-file ./custom-docker-compose.yml"
+      ],
+      "flags": {
+        "compose-file": {
+          "char": "f",
+          "description": "Path to a custom docker-compose file",
+          "name": "compose-file",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "dev:down",
+      "pluginAlias": "@outputai/cli",
+      "pluginName": "@outputai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "dev",
+        "down.js"
+      ]
+    },
+    "dev:eject": {
+      "aliases": [],
+      "args": {},
+      "description": "Eject the Docker Compose configuration to your project root for customization",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --output ./custom-compose.yml"
+      ],
+      "flags": {
+        "output": {
+          "char": "o",
+          "description": "Output path for the docker-compose file",
+          "name": "output",
+          "required": false,
+          "default": "docker-compose.yml",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "force": {
+          "char": "f",
+          "description": "Overwrite existing file without prompting",
+          "name": "force",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "dev:eject",
+      "pluginAlias": "@outputai/cli",
+      "pluginName": "@outputai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "dev",
+        "eject.js"
+      ]
+    },
+    "dev": {
+      "aliases": [],
+      "args": {},
+      "description": "Start Output development services (auto-restarts worker on file changes)\n\nIf services are already running (e.g. after `output dev -d`), this attaches\nto monitor them rather than treating our own containers as a port collision.\nQuitting an attached session leaves the services running — stop them with\n`output dev down`.\n\nTo run a second dev stack concurrently, give it its own compose project and\nhost ports in .env — without DOCKER_SERVICE_NAME both checkouts share one\nstack, and the second will attach to the first instead of starting:\n\n  DOCKER_SERVICE_NAME=output-sdk-two\n  OUTPUT_API_HOST_PORT=3002\n  OUTPUT_TEMPORAL_UI_HOST_PORT=8081\n  OUTPUT_TEMPORAL_HOST_PORT=7234",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --detached",
+        "<%= config.bin %> <%= command.id %> --compose-file ./custom-docker-compose.yml",
+        "<%= config.bin %> <%= command.id %> --image-pull-policy missing"
+      ],
+      "flags": {
+        "compose-file": {
+          "char": "f",
+          "description": "Path to a custom docker-compose file",
+          "name": "compose-file",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "image-pull-policy": {
+          "description": "Image pull policy for docker compose (always, missing, never)",
+          "name": "image-pull-policy",
+          "default": "always",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "always",
+            "missing",
+            "never"
+          ],
+          "type": "option"
+        },
+        "detached": {
+          "char": "d",
+          "description": "Start services in detached (background) mode and exit immediately",
+          "name": "detached",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "dev",
+      "pluginAlias": "@outputai/cli",
+      "pluginName": "@outputai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "dev",
+        "index.js"
+      ]
+    },
     "credentials:edit": {
       "aliases": [],
       "args": {},
@@ -416,142 +552,6 @@
         "show.js"
       ]
     },
-    "dev:down": {
-      "aliases": [],
-      "args": {},
-      "description": "Stop Output development services started by `output dev`\n\nUseful after `output dev -d`, or when an attached `output dev` session\nleft the services running on quit.",
-      "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --compose-file ./custom-docker-compose.yml"
-      ],
-      "flags": {
-        "compose-file": {
-          "char": "f",
-          "description": "Path to a custom docker-compose file",
-          "name": "compose-file",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "dev:down",
-      "pluginAlias": "@outputai/cli",
-      "pluginName": "@outputai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "dev",
-        "down.js"
-      ]
-    },
-    "dev:eject": {
-      "aliases": [],
-      "args": {},
-      "description": "Eject the Docker Compose configuration to your project root for customization",
-      "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --output ./custom-compose.yml"
-      ],
-      "flags": {
-        "output": {
-          "char": "o",
-          "description": "Output path for the docker-compose file",
-          "name": "output",
-          "required": false,
-          "default": "docker-compose.yml",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "force": {
-          "char": "f",
-          "description": "Overwrite existing file without prompting",
-          "name": "force",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "dev:eject",
-      "pluginAlias": "@outputai/cli",
-      "pluginName": "@outputai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "dev",
-        "eject.js"
-      ]
-    },
-    "dev": {
-      "aliases": [],
-      "args": {},
-      "description": "Start Output development services (auto-restarts worker on file changes)\n\nIf services are already running (e.g. after `output dev -d`), this attaches\nto monitor them rather than treating our own containers as a port collision.\nQuitting an attached session leaves the services running — stop them with\n`output dev down`.\n\nTo run a second dev stack concurrently, give it its own compose project and\nhost ports in .env — without DOCKER_SERVICE_NAME both checkouts share one\nstack, and the second will attach to the first instead of starting:\n\n  DOCKER_SERVICE_NAME=output-sdk-two\n  OUTPUT_API_HOST_PORT=3002\n  OUTPUT_TEMPORAL_UI_HOST_PORT=8081\n  OUTPUT_TEMPORAL_HOST_PORT=7234",
-      "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --detached",
-        "<%= config.bin %> <%= command.id %> --compose-file ./custom-docker-compose.yml",
-        "<%= config.bin %> <%= command.id %> --image-pull-policy missing"
-      ],
-      "flags": {
-        "compose-file": {
-          "char": "f",
-          "description": "Path to a custom docker-compose file",
-          "name": "compose-file",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "image-pull-policy": {
-          "description": "Image pull policy for docker compose (always, missing, never)",
-          "name": "image-pull-policy",
-          "default": "always",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "always",
-            "missing",
-            "never"
-          ],
-          "type": "option"
-        },
-        "detached": {
-          "char": "d",
-          "description": "Start services in detached (background) mode and exit immediately",
-          "name": "detached",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "dev",
-      "pluginAlias": "@outputai/cli",
-      "pluginName": "@outputai/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "dev",
-        "index.js"
-      ]
-    },
     "workflow:cost": {
       "aliases": [],
       "args": {
@@ -1752,5 +1752,5 @@
       ]
     }
   },
-  "version": "0.14.0"
+  "version": "0.14.1-next.51e8690.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outputai/cli",
-  "version": "0.14.0",
+  "version": "0.14.1-next.51e8690.0",
   "description": "CLI for Output.ai workflow generation",
   "type": "module",
   "main": "dist/index.js",
@@ -36,9 +36,9 @@
     "react": "19.2.5",
     "semver": "7.7.4",
     "undici": "8.9.0",
-    "@outputai/credentials": "0.14.0",
-    "@outputai/evals": "0.14.0",
-    "@outputai/llm": "0.14.0"
+    "@outputai/core": "0.14.1-next.51e8690.0",
+    "@outputai/llm": "0.14.1-next.51e8690.0",
+    "@outputai/evals": "0.14.1-next.51e8690.0"
   },
   "devDependencies": {
     "@types/cli-progress": "3.11.6",