@postplus/cli 0.1.22 → 0.1.24

package/README.md

@@ -31,7 +31,7 @@ PostPlus has three public surfaces that work together:
 Requires Node.js and npm.
 
 ```bash
-npm install -g @postplus/cli
+npm install -g @postplus/cli@latest
 postplus auth login
 npx -y skills add PostPlusAI/postplus-skills --global --full-depth --skill '*' --agent claude-code codex cursor github-copilot windsurf trae trae-cn --yes
 ```

package/build/auth-lifecycle.js

@@ -1,6 +1,6 @@
 import { refreshRemoteAuthSession } from './auth-session.js';
 import { clearAuthState, generateAuthStatusReport } from './auth.js';
-import { buildPostPlusClientCompatibilityHeaders, formatPostPlusClientUpgradeError, } from './client-compatibility.js';
+import { buildPostPlusClientCompatibilityHeaders, formatPostPlusCompatibilityError, } from './client-compatibility.js';
 import { requireHostedBaseUrl } from './hosted-release.js';
 import { resolveCliSessionTokenState } from './local-state.js';
 export async function refreshRemoteAuth() {
@@ -47,9 +47,9 @@ export async function revokeRemoteAuth() {
     });
     const payload = (await response.json());
     if (!response.ok) {
-        if ('code' in payload &&
-            payload.code === 'postplus_client_upgrade_required') {
-            throw new Error(formatPostPlusClientUpgradeError(payload));
+        const compatibilityError = formatPostPlusCompatibilityError(payload);
+        if (compatibilityError) {
+            throw new Error(compatibilityError);
         }
         throw new Error('error' in payload && typeof payload.error === 'string'
             ? payload.error

package/build/auth-login.js

@@ -1,4 +1,5 @@
-import { buildPostPlusClientCompatibilityHeaders, formatPostPlusClientUpgradeError, writeCurrentCliVersionToLocalConfig, } from './client-compatibility.js';
+import { execFileSync } from 'node:child_process';
+import { buildPostPlusClientCompatibilityHeaders, formatPostPlusCompatibilityError, writeCurrentCliVersionToLocalConfig, } from './client-compatibility.js';
 import { requireHostedBaseUrl } from './hosted-release.js';
 import { setLocalSession } from './local-state.js';
 export const CLI_AUTH_LOGIN_TIMEOUT_MS = 30 * 60 * 1000;
@@ -16,6 +17,10 @@ export async function loginWithCloudHandoff() {
         'Waiting for browser sign-in...',
         '',
     ].join('\n'));
+    const didOpen = openCloudAuthVerificationUrlIfConfigured(started.verificationUrl);
+    if (didOpen) {
+        process.stdout.write('Browser opened for sign-in.\n\n');
+    }
     const handoffPayload = await waitForCloudAuthLogin({
         apiBaseUrl: baseUrl,
         expiresAt: started.expiresAt,
@@ -63,6 +68,16 @@ export async function startCloudAuthLogin(apiBaseUrl) {
     }
     return payload;
 }
+export function openCloudAuthVerificationUrlIfConfigured(verificationUrl) {
+    const command = process.env.POSTPLUS_CLI_AUTH_OPEN_URL_COMMAND?.trim();
+    if (!command) {
+        return false;
+    }
+    execFileSync(command, [verificationUrl], {
+        stdio: 'ignore',
+    });
+    return true;
+}
 async function waitForCloudAuthLogin(input) {
     const expiresAtMs = Date.parse(input.expiresAt);
     const deadlineMs = Number.isFinite(expiresAtMs)
@@ -130,8 +145,9 @@ export function formatCliSessionAuthError(payload) {
             'Once the environment is ready, the CLI will automatically obtain and store its session.',
         ].join(' ');
     }
-    if (payload.code === 'postplus_client_upgrade_required') {
-        return formatPostPlusClientUpgradeError(payload);
+    const compatibilityError = formatPostPlusCompatibilityError(payload);
+    if (compatibilityError) {
+        return compatibilityError;
     }
     if (typeof payload.error === 'string' && payload.error.trim().length > 0) {
         return payload.error;
@@ -158,8 +174,9 @@ function isCliAuthLoginPendingPayload(payload) {
     return 'status' in payload && payload.status === 'pending';
 }
 function formatRemoteAuthLoginError(payload) {
-    if ('code' in payload && payload.code === 'postplus_client_upgrade_required') {
-        return formatPostPlusClientUpgradeError(payload);
+    const compatibilityError = formatPostPlusCompatibilityError(payload);
+    if (compatibilityError) {
+        return compatibilityError;
     }
     return 'error' in payload &&
         typeof payload.error === 'string' &&

package/build/auth-session.js

@@ -1,6 +1,6 @@
-import { buildPostPlusClientCompatibilityHeaders, formatPostPlusClientUpgradeError, writeCurrentCliVersionToLocalConfig, } from './client-compatibility.js';
+import { buildPostPlusClientCompatibilityHeaders, formatPostPlusCompatibilityError, writeCurrentCliVersionToLocalConfig, } from './client-compatibility.js';
 import { requireHostedBaseUrl } from './hosted-release.js';
-import { resolveCliSessionTokenState, setLocalSession, } from './local-state.js';
+import { resolveCliSessionTokenState, setLocalSession } from './local-state.js';
 export async function resolveFreshRemoteAuth(options = {}) {
     const [apiBaseUrl, cliSessionTokenState] = await Promise.all([
         requireHostedBaseUrl(),
@@ -53,9 +53,9 @@ export async function refreshRemoteAuthSession(input) {
     });
     const payload = (await response.json());
     if (!response.ok) {
-        if ('code' in payload &&
-            payload.code === 'postplus_client_upgrade_required') {
-            throw new Error(formatPostPlusClientUpgradeError(payload));
+        const compatibilityError = formatPostPlusCompatibilityError(payload);
+        if (compatibilityError) {
+            throw new Error(compatibilityError);
         }
         throw new Error('error' in payload && typeof payload.error === 'string'
             ? payload.error
@@ -83,7 +83,8 @@ function isRemoteAuthRefreshSuccessPayload(payload) {
         payload !== null &&
         typeof payload.cliSessionToken ===
             'string' &&
-        payload.cliSessionToken.trim().length > 0 &&
+        payload.cliSessionToken.trim().length >
+            0 &&
         typeof payload.accountId === 'string' &&
         typeof payload.userId === 'string');
 }

package/build/auth-validate.js

@@ -1,5 +1,5 @@
 import { resolveFreshRemoteAuth } from './auth-session.js';
-import { buildPostPlusClientCompatibilityHeaders, formatPostPlusClientUpgradeError, } from './client-compatibility.js';
+import { buildPostPlusClientCompatibilityHeaders, formatPostPlusCompatibilityError, } from './client-compatibility.js';
 export async function validateRemoteAuth() {
     let auth = await resolveFreshRemoteAuth();
     let response = await fetchWhoami(auth);
@@ -11,9 +11,9 @@ export async function validateRemoteAuth() {
     }
     const payload = (await response.json());
     if (!response.ok) {
-        if ('code' in payload &&
-            payload.code === 'postplus_client_upgrade_required') {
-            throw new Error(formatPostPlusClientUpgradeError(payload));
+        const compatibilityError = formatPostPlusCompatibilityError(payload);
+        if (compatibilityError) {
+            throw new Error(compatibilityError);
         }
         throw new Error('error' in payload && typeof payload.error === 'string'
             ? payload.error

package/build/client-compatibility.js

@@ -6,7 +6,7 @@ export const POSTPLUS_CLIENT_COMPATIBILITY_HEADERS = {
     cliVersion: 'x-postplus-cli-version',
     contractVersion: 'x-postplus-client-contract-version',
     runtime: 'x-postplus-client-runtime',
-    skillCatalogRevision: 'x-postplus-skill-catalog-revision',
+    skillsReleaseId: 'x-postplus-skills-release-id',
     skillName: 'x-postplus-skill-name',
 };
 export async function buildPostPlusClientCompatibilityHeaders(input = {}) {
@@ -19,11 +19,11 @@ export async function buildPostPlusClientCompatibilityHeaders(input = {}) {
         [POSTPLUS_CLIENT_COMPATIBILITY_HEADERS.contractVersion]: String(POSTPLUS_CLIENT_CONTRACT_VERSION),
         [POSTPLUS_CLIENT_COMPATIBILITY_HEADERS.runtime]: POSTPLUS_CLIENT_RUNTIME,
     };
-    const skillCatalogRevision = config?.managedSkills?.revision?.trim();
+    const skillsReleaseId = config?.managedSkills?.releaseId?.trim();
     const skillName = input.skillName?.trim();
-    if (skillCatalogRevision) {
-        headers[POSTPLUS_CLIENT_COMPATIBILITY_HEADERS.skillCatalogRevision] =
-            skillCatalogRevision;
+    if (skillsReleaseId) {
+        headers[POSTPLUS_CLIENT_COMPATIBILITY_HEADERS.skillsReleaseId] =
+            skillsReleaseId;
     }
     if (skillName) {
         headers[POSTPLUS_CLIENT_COMPATIBILITY_HEADERS.skillName] = skillName;
@@ -51,7 +51,7 @@ export function formatPostPlusClientUpgradeError(payload) {
         ? payload
         : {};
     const cliCommand = record.compatibility?.upgrade?.cli?.command ??
-        'npm install -g @postplus/cli';
+        'npm install -g @postplus/cli@latest';
     const skillsCommand = record.compatibility?.upgrade?.skills?.command ?? 'postplus update';
     const restart = record.compatibility?.upgrade?.restartAgentSession
         ? ' Then restart your agent session.'
@@ -67,3 +67,34 @@ export function formatPostPlusClientUpgradeError(payload) {
         .filter(Boolean)
         .join(' ');
 }
+export function formatPostPlusCloudReleaseInProgressError(payload) {
+    const record = payload && typeof payload === 'object' && !Array.isArray(payload)
+        ? payload
+        : {};
+    return typeof record.error === 'string' && record.error.trim().length > 0
+        ? record.error.trim()
+        : 'PostPlus Cloud is updating. Please retry in about one minute.';
+}
+export function formatPostPlusCompatibilityError(payload) {
+    if (isPostPlusClientUpgradePayload(payload)) {
+        return formatPostPlusClientUpgradeError(payload);
+    }
+    if (isPostPlusCloudReleaseInProgressPayload(payload)) {
+        return formatPostPlusCloudReleaseInProgressError(payload);
+    }
+    return null;
+}
+export function isPostPlusClientUpgradePayload(payload) {
+    return (payload &&
+        typeof payload === 'object' &&
+        !Array.isArray(payload) &&
+        'code' in payload &&
+        payload.code === 'postplus_client_upgrade_required');
+}
+export function isPostPlusCloudReleaseInProgressPayload(payload) {
+    return (payload &&
+        typeof payload === 'object' &&
+        !Array.isArray(payload) &&
+        'code' in payload &&
+        payload.code === 'postplus_cli_cloud_release_in_progress');
+}

package/build/doctor.js

@@ -1,5 +1,5 @@
 import { resolveFreshRemoteAuth, } from './auth-session.js';
-import { buildPostPlusClientCompatibilityHeaders, formatPostPlusClientUpgradeError, } from './client-compatibility.js';
+import { buildPostPlusClientCompatibilityHeaders, formatPostPlusCompatibilityError, } from './client-compatibility.js';
 import { resolveHostedBaseUrl } from './hosted-release.js';
 import { formatLocalDependencyReport, generateLocalDependencyReport, } from './local-dependencies.js';
 function createPass(id, label, detail, severity = 'required') {
@@ -185,8 +185,9 @@ function readReadinessCheckFailureLabel(value) {
             : 'unknown check';
 }
 function readErrorMessage(payload, fallback) {
-    if (payload.code === 'postplus_client_upgrade_required') {
-        return formatPostPlusClientUpgradeError(payload);
+    const compatibilityError = formatPostPlusCompatibilityError(payload);
+    if (compatibilityError) {
+        return compatibilityError;
     }
     return typeof payload.error === 'string' && payload.error.trim().length > 0
         ? payload.error

package/build/index.js

@@ -3,13 +3,13 @@ import { formatAuthRefreshReport, refreshRemoteAuth, revokeRemoteAuthAndReport,
 import { loginWithCloudHandoff } from './auth-login.js';
 import { formatAuthValidateReport, validateRemoteAuth, } from './auth-validate.js';
 import { clearAuthState, formatAuthStatusReport, generateAuthStatusReport, } from './auth.js';
+import { readCurrentCliVersion } from './client-compatibility.js';
 import { formatDoctorReport, generateDoctorReport } from './doctor.js';
 import { assertConfigFilePermissions } from './local-state.js';
 import { POSTPLUS_SKILLS_INSTALL_COMMAND, loadPublicSkillCatalog, } from './skill-catalog.js';
 import { runPostPlusSkillUninstall, runPostPlusSkillUpdate, } from './skill-management.js';
 import { formatStatusReport, generateStatusReport } from './status.js';
-import { readCurrentCliVersion, } from './client-compatibility.js';
-import { refreshUpdateCheckCache } from './update-check.js';
+import { refreshUpdateCheckCache, runCliSelfUpdateIfOutdated, } from './update-check.js';
 function printAuthHelp() {
     process.stdout.write(`PostPlus CLI — auth commands
 
@@ -103,6 +103,10 @@ async function runVersion() {
     return 0;
 }
 async function runSkillUpdateCommand() {
+    const cliSelfUpdate = await runCliSelfUpdateIfOutdated();
+    if (cliSelfUpdate.updateAvailable) {
+        return cliSelfUpdate.exitCode ?? 1;
+    }
     const exitCode = await runPostPlusSkillUpdate();
     if (exitCode === 0) {
         await refreshUpdateCheckCache().catch(() => { });

package/build/local-dependencies.js

@@ -9,7 +9,7 @@ export async function generateLocalDependencyReport(options = {}) {
     const checks = await Promise.all(requirements.map(({ dependency, skillIds }) => checkLocalDependency(dependency, skillIds, runDependencyCheck)));
     return {
         ok: checks.every((check) => check.ok),
-        revision: catalog.revision,
+        releaseId: catalog.releaseId,
         source: catalog.source,
         requiredCount: checks.length,
         checks,
@@ -17,11 +17,11 @@ export async function generateLocalDependencyReport(options = {}) {
 }
 export function formatLocalDependencyReport(report) {
     if (report.requiredCount === 0) {
-        return `No local runtime dependencies are required by released PostPlus skills (${report.revision}).`;
+        return `No local runtime dependencies are required by released PostPlus skills (${report.releaseId}).`;
     }
     const missing = report.checks.filter((check) => !check.ok);
     if (missing.length === 0) {
-        return `Ready (${report.requiredCount} local dependencies present; catalog ${report.revision})`;
+        return `Ready (${report.requiredCount} local dependencies present; catalog ${report.releaseId})`;
     }
     return `Missing ${missing.length}/${report.requiredCount}: ${missing
         .map((check) => `${check.dependency} for ${formatSkillList(check.skillIds)}`)

package/build/local-state.js

@@ -108,15 +108,15 @@ export async function readManagedSkillBaseline() {
     const config = await readLocalConfig();
     const managedSkills = config?.managedSkills;
     if (!managedSkills ||
-        typeof managedSkills.revision !== 'string' ||
+        typeof managedSkills.releaseId !== 'string' ||
         !Array.isArray(managedSkills.skillNames)) {
         return {
-            revision: null,
+            releaseId: null,
             skillNames: [],
         };
     }
     return {
-        revision: managedSkills.revision,
+        releaseId: managedSkills.releaseId,
         skillNames: normalizeSkillNames(managedSkills.skillNames),
     };
 }
@@ -124,7 +124,7 @@ export async function writeManagedSkillBaseline(input) {
     return updateLocalConfig((current) => ({
         ...(current ?? {}),
         managedSkills: {
-            revision: input.revision,
+            releaseId: input.releaseId,
             skillNames: normalizeSkillNames(input.skillNames),
             updatedAt: new Date().toISOString(),
         },

package/build/skill-catalog.js

@@ -1,4 +1,6 @@
 export const POSTPLUS_SKILLS_REPO = 'PostPlusAI/postplus-skills';
+export const POSTPLUS_SKILLS_SOURCE_ENV = 'POSTPLUS_SKILLS_SOURCE';
+export const POSTPLUS_SKILLS_CATALOG_URL_ENV = 'POSTPLUS_SKILLS_CATALOG_URL';
 export const POSTPLUS_SKILLS_AGENT_TARGETS = [
     'claude-code',
     'codex',
@@ -9,12 +11,14 @@ export const POSTPLUS_SKILLS_AGENT_TARGETS = [
     'trae-cn',
 ];
 const POSTPLUS_SKILLS_AGENT_ARGS = POSTPLUS_SKILLS_AGENT_TARGETS.join(' ');
-export const POSTPLUS_SKILLS_INSTALL_COMMAND = `npx -y skills add PostPlusAI/postplus-skills --global --full-depth --skill '*' --agent ${POSTPLUS_SKILLS_AGENT_ARGS} --yes`;
-export const POSTPLUS_SKILLS_LIST_COMMAND = 'npx -y skills add PostPlusAI/postplus-skills --list --full-depth';
+export const POSTPLUS_SKILLS_INSTALL_COMMAND = formatPostPlusSkillsInstallCommand();
+export const POSTPLUS_SKILLS_LIST_COMMAND = formatPostPlusSkillsListCommand();
 const POSTPLUS_SKILLS_INDEX_URL = 'https://raw.githubusercontent.com/PostPlusAI/postplus-skills/main/skills/INDEX.md';
 const POSTPLUS_SKILLS_CATALOG_URL = 'https://raw.githubusercontent.com/PostPlusAI/postplus-skills/main/skills/catalog.json';
-export async function loadPublicSkillCatalog(fetchFn = fetch) {
-    const response = await fetchFn(POSTPLUS_SKILLS_CATALOG_URL, {
+export async function loadPublicSkillCatalog(fetchFn = fetch, env = process.env) {
+    const catalogUrl = resolvePostPlusSkillsCatalogUrl(env);
+    const skillsSource = resolvePostPlusSkillsSource(env);
+    const response = await fetchFn(catalogUrl, {
         headers: {
             accept: 'application/json',
         },
@@ -24,16 +28,29 @@ export async function loadPublicSkillCatalog(fetchFn = fetch) {
         throw new Error(`Failed to load PostPlus skill catalog (${response.status}): ${response.statusText}`);
     }
     const raw = await response.text();
-    const payload = parseJsonResponse(raw, POSTPLUS_SKILLS_CATALOG_URL);
+    const payload = parseJsonResponse(raw, catalogUrl);
     const catalog = parsePublicSkillCatalog(payload);
     return {
         ...catalog,
-        catalogUrl: POSTPLUS_SKILLS_CATALOG_URL,
+        catalogUrl,
         indexUrl: POSTPLUS_SKILLS_INDEX_URL,
-        installCommand: POSTPLUS_SKILLS_INSTALL_COMMAND,
-        listCommand: POSTPLUS_SKILLS_LIST_COMMAND,
+        installCommand: formatPostPlusSkillsInstallCommand(skillsSource),
+        listCommand: formatPostPlusSkillsListCommand(skillsSource),
+        source: skillsSource,
     };
 }
+export function resolvePostPlusSkillsSource(env = process.env) {
+    return env[POSTPLUS_SKILLS_SOURCE_ENV]?.trim() || POSTPLUS_SKILLS_REPO;
+}
+export function resolvePostPlusSkillsCatalogUrl(env = process.env) {
+    return env[POSTPLUS_SKILLS_CATALOG_URL_ENV]?.trim() || POSTPLUS_SKILLS_CATALOG_URL;
+}
+export function formatPostPlusSkillsInstallCommand(source = POSTPLUS_SKILLS_REPO) {
+    return `npx -y skills add ${source} --global --full-depth --skill '*' --agent ${POSTPLUS_SKILLS_AGENT_ARGS} --yes`;
+}
+export function formatPostPlusSkillsListCommand(source = POSTPLUS_SKILLS_REPO) {
+    return `npx -y skills add ${source} --list --full-depth`;
+}
 function parseJsonResponse(raw, url) {
     try {
         return JSON.parse(raw);
@@ -53,15 +70,15 @@ function parsePublicSkillCatalog(payload) {
         throw new Error('PostPlus public skill catalog is invalid.');
     }
     const record = payload;
-    const revision = typeof record.revision === 'string' && record.revision.trim()
-        ? record.revision.trim()
+    const releaseId = typeof record.releaseId === 'string' && record.releaseId.trim()
+        ? record.releaseId.trim()
         : null;
     const source = typeof record.source === 'string' && record.source.trim()
         ? record.source.trim()
         : null;
     if (record.schemaVersion !== 1 ||
         source !== POSTPLUS_SKILLS_REPO ||
-        !revision) {
+        !releaseId) {
         throw new Error('PostPlus public skill catalog metadata is invalid.');
     }
     if (!Array.isArray(record.skills)) {
@@ -105,7 +122,7 @@ function parsePublicSkillCatalog(payload) {
         throw new Error('PostPlus public skill catalog is invalid: no released skills were found.');
     }
     return {
-        revision,
+        releaseId,
         skills,
         source,
     };

package/build/skill-management.js

@@ -1,7 +1,7 @@
-import { runCommand, runInteractiveCommand } from './command-runner.js';
 import { writeCurrentCliVersionToLocalConfig } from './client-compatibility.js';
+import { runCommand, runInteractiveCommand } from './command-runner.js';
 import { clearManagedSkillBaseline, readManagedSkillBaseline, writeManagedSkillBaseline, } from './local-state.js';
-import { POSTPLUS_SKILLS_AGENT_TARGETS, POSTPLUS_SKILLS_INSTALL_COMMAND, POSTPLUS_SKILLS_REPO, loadPublicSkillCatalog, } from './skill-catalog.js';
+import { POSTPLUS_SKILLS_AGENT_TARGETS, formatPostPlusSkillsInstallCommand, resolvePostPlusSkillsSource, loadPublicSkillCatalog, } from './skill-catalog.js';
 const NPX_SKILLS = ['-y', 'skills'];
 export async function runPostPlusSkillUpdate(dependencies = {
     runInteractiveCommand,
@@ -24,7 +24,7 @@ export async function runPostPlusSkillUpdate(dependencies = {
         }
     }
     await writeManagedSkillBaseline({
-        revision: catalog.revision,
+        releaseId: catalog.releaseId,
         skillNames,
     });
     await writeCurrentCliVersionToLocalConfig();
@@ -66,14 +66,14 @@ export async function generateSkillInstallStatusReport(dependencies = {
         return {
             ok: missingSkills.length === 0,
             error: null,
-            installCommand: POSTPLUS_SKILLS_INSTALL_COMMAND,
+            installCommand: formatPostPlusSkillsInstallCommand(catalog.source),
             installedCount: installedNames.size,
-            managedRevision: baseline.revision,
+            managedSkillsReleaseId: baseline.releaseId,
             missingSkills,
             requiredCount: requiredSkills.size,
             retiredManagedSkills,
             scopes,
-            source: POSTPLUS_SKILLS_REPO,
+            source: catalog.source,
             updateCommand: formatPostPlusSkillUpdateCommand(),
             uninstallCommand: formatPostPlusSkillUninstallCommand(),
         };
@@ -84,14 +84,14 @@ export async function generateSkillInstallStatusReport(dependencies = {
             error: error instanceof Error
                 ? error.message
                 : 'Failed to inspect installed PostPlus skills.',
-            installCommand: POSTPLUS_SKILLS_INSTALL_COMMAND,
+            installCommand: formatPostPlusSkillsInstallCommand(catalog.source),
             installedCount: 0,
-            managedRevision: baseline.revision,
+            managedSkillsReleaseId: baseline.releaseId,
             missingSkills: [...requiredSkills],
             requiredCount: requiredSkills.size,
             retiredManagedSkills,
             scopes: [],
-            source: POSTPLUS_SKILLS_REPO,
+            source: catalog.source,
             updateCommand: formatPostPlusSkillUpdateCommand(),
             uninstallCommand: formatPostPlusSkillUninstallCommand(),
         };
@@ -109,7 +109,7 @@ export function formatSkillInstallStatusReport(report) {
         lines.push(`[FAIL] Installed released skills: ${report.installedCount}/${report.requiredCount}`);
     }
     lines.push(`  Source: ${report.source}`);
-    lines.push(`  Managed baseline: ${report.managedRevision ?? 'none'}`);
+    lines.push(`  Managed baseline: ${report.managedSkillsReleaseId ?? 'none'}`);
     lines.push(`  Scope: ${report.scopes.length > 0 ? report.scopes.join(', ') : 'none detected'}`);
     if (report.retiredManagedSkills.length > 0) {
         lines.push(`  Retired managed skills: ${formatSkillList(report.retiredManagedSkills, 8)}`, `  Cleanup: ${report.updateCommand}`);
@@ -123,7 +123,22 @@ export function formatSkillInstallStatusReport(report) {
     return lines.join('\n');
 }
 export function buildPostPlusSkillUpdateArgs(skillNames) {
-    return [...NPX_SKILLS, 'update', ...skillNames, '--global', '--yes'];
+    if (skillNames.length === 0) {
+        throw new Error('PostPlus public skill catalog has no released skills.');
+    }
+    const skillsSource = resolvePostPlusSkillsSource();
+    return [
+        ...NPX_SKILLS,
+        'add',
+        skillsSource,
+        '--global',
+        '--full-depth',
+        '--skill',
+        '*',
+        '--agent',
+        ...POSTPLUS_SKILLS_AGENT_TARGETS,
+        '--yes',
+    ];
 }
 export function buildPostPlusSkillUninstallArgs(skillNames) {
     return [

package/build/update-check.js

@@ -1,12 +1,15 @@
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
 import { readCurrentCliVersion } from './client-compatibility.js';
+import { runInteractiveCommand as runDefaultInteractiveCommand, } from './command-runner.js';
 import { getPostPlusConfigDir, readManagedSkillBaseline, } from './local-state.js';
 import { POSTPLUS_SKILLS_REPO, loadPublicSkillCatalog, } from './skill-catalog.js';
 const UPDATE_CHECK_TTL_MS = 24 * 60 * 60 * 1000;
 const UPDATE_CHECK_CACHE_FILE = 'update-check.json';
 const NPM_PACKAGE_NAME = '@postplus/cli';
 const NPM_LATEST_URL = `https://registry.npmjs.org/${encodeURIComponent(NPM_PACKAGE_NAME)}/latest`;
+export const POSTPLUS_CLI_UPDATE_COMMAND = 'npm install -g @postplus/cli@latest';
+const POSTPLUS_CLI_UPDATE_ARGS = ['install', '-g', '@postplus/cli@latest'];
 export async function generateUpdateStatusReport(input = {}, dependencies = {
     fetchFn: fetch,
 }) {
@@ -20,14 +23,14 @@ export async function generateUpdateStatusReport(input = {}, dependencies = {
         return buildUpdateReport({
             cache,
             currentVersion,
-            currentSkillRevision: managedSkillBaseline.revision,
+            currentSkillsReleaseId: managedSkillBaseline.releaseId,
             source: 'cache',
         });
     }
     try {
-        const [latestCliVersion, latestSkillRevision] = await Promise.all([
+        const [latestCliVersion, latestSkillsReleaseId] = await Promise.all([
             fetchLatestCliVersion(dependencies.fetchFn),
-            fetchLatestSkillRevision(dependencies.fetchFn),
+            fetchLatestSkillReleaseId(dependencies.fetchFn),
         ]);
         const nextCache = {
             checkedAt: new Date().toISOString(),
@@ -36,14 +39,14 @@ export async function generateUpdateStatusReport(input = {}, dependencies = {
                 latestVersion: latestCliVersion,
             },
             skills: {
-                latestRevision: latestSkillRevision,
+                latestReleaseId: latestSkillsReleaseId,
             },
         };
         await writeUpdateCheckCache(nextCache);
         return buildUpdateReport({
             cache: nextCache,
             currentVersion,
-            currentSkillRevision: managedSkillBaseline.revision,
+            currentSkillsReleaseId: managedSkillBaseline.releaseId,
             source: 'remote',
         });
     }
@@ -54,7 +57,7 @@ export async function generateUpdateStatusReport(input = {}, dependencies = {
                 ...buildUpdateReport({
                     cache,
                     currentVersion,
-                    currentSkillRevision: managedSkillBaseline.revision,
+                    currentSkillsReleaseId: managedSkillBaseline.releaseId,
                     source: 'cache',
                 }),
                 warning,
@@ -68,11 +71,11 @@ export async function generateUpdateStatusReport(input = {}, dependencies = {
                 currentVersion,
                 latestVersion: null,
                 updateAvailable: false,
-                updateCommand: 'npm install -g @postplus/cli',
+                updateCommand: POSTPLUS_CLI_UPDATE_COMMAND,
             },
             skills: {
-                currentRevision: managedSkillBaseline.revision,
-                latestRevision: null,
+                currentReleaseId: managedSkillBaseline.releaseId,
+                latestReleaseId: null,
                 updateAvailable: false,
                 updateCommand: 'postplus update',
             },
@@ -85,6 +88,49 @@ export async function refreshUpdateCheckCache() {
         force: true,
     });
 }
+export async function runCliSelfUpdateIfOutdated(dependencies = {}) {
+    const fetchFn = dependencies.fetchFn ?? fetch;
+    const runInteractiveCommand = dependencies.runInteractiveCommand ?? runDefaultInteractiveCommand;
+    const writeOutput = dependencies.writeOutput ?? ((message) => process.stdout.write(message));
+    const currentVersion = await readCurrentCliVersion();
+    const latestVersion = await fetchLatestCliVersion(fetchFn);
+    if (compareVersions(latestVersion, currentVersion) <= 0) {
+        return {
+            command: POSTPLUS_CLI_UPDATE_COMMAND,
+            currentVersion,
+            exitCode: null,
+            latestVersion,
+            updateAvailable: false,
+        };
+    }
+    writeOutput([
+        `PostPlus CLI ${currentVersion} is older than latest ${latestVersion}.`,
+        `Updating CLI: ${POSTPLUS_CLI_UPDATE_COMMAND}`,
+        '',
+    ].join('\n'));
+    const exitCode = await runInteractiveCommand('npm', POSTPLUS_CLI_UPDATE_ARGS);
+    if (exitCode === 0) {
+        writeOutput([
+            `PostPlus CLI updated to ${latestVersion}.`,
+            'Re-run `postplus update` to update skills with the new CLI process.',
+            '',
+        ].join('\n'));
+    }
+    else {
+        writeOutput([
+            `PostPlus CLI update failed with exit code ${exitCode}.`,
+            `Fix the npm install error, then run: ${POSTPLUS_CLI_UPDATE_COMMAND}`,
+            '',
+        ].join('\n'));
+    }
+    return {
+        command: POSTPLUS_CLI_UPDATE_COMMAND,
+        currentVersion,
+        exitCode,
+        latestVersion,
+        updateAvailable: true,
+    };
+}
 export function formatUpdateStatusReport(report) {
     const lines = ['PostPlus update status', ''];
     const cliMarker = report.cli.updateAvailable ? '[WARN]' : '[PASS]';
@@ -93,8 +139,8 @@ export function formatUpdateStatusReport(report) {
         lines.push(`  Update: ${report.cli.updateCommand}`);
     }
     const skillMarker = report.skills.updateAvailable ? '[WARN]' : '[PASS]';
-    lines.push(`${skillMarker} Skills: ${report.skills.latestRevision
-        ? `release ${shortRevision(report.skills.latestRevision)}`
+    lines.push(`${skillMarker} Skills: ${report.skills.latestReleaseId
+        ? `release ${shortReleaseId(report.skills.latestReleaseId)}`
         : 'release unknown'}`);
     if (report.skills.updateAvailable) {
         lines.push(`  Update: ${report.skills.updateCommand}`);
@@ -115,12 +161,12 @@ function buildUpdateReport(input) {
             latestVersion: input.cache.cli.latestVersion,
             updateAvailable: compareVersions(input.cache.cli.latestVersion, input.currentVersion) >
                 0,
-            updateCommand: 'npm install -g @postplus/cli',
+            updateCommand: POSTPLUS_CLI_UPDATE_COMMAND,
         },
         skills: {
-            currentRevision: input.currentSkillRevision,
-            latestRevision: input.cache.skills.latestRevision,
-            updateAvailable: input.cache.skills.latestRevision !== input.currentSkillRevision,
+            currentReleaseId: input.currentSkillsReleaseId,
+            latestReleaseId: input.cache.skills.latestReleaseId,
+            updateAvailable: input.cache.skills.latestReleaseId !== input.currentSkillsReleaseId,
             updateCommand: 'postplus update',
         },
         warning: null,
@@ -143,12 +189,12 @@ async function fetchLatestCliVersion(fetchFn) {
     }
     return payload.version.trim();
 }
-async function fetchLatestSkillRevision(fetchFn) {
+async function fetchLatestSkillReleaseId(fetchFn) {
     try {
-        return (await loadPublicSkillCatalog(fetchFn)).revision;
+        return (await loadPublicSkillCatalog(fetchFn)).releaseId;
     }
     catch (error) {
-        throw new Error(`Failed to check latest ${POSTPLUS_SKILLS_REPO} revision: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Failed to check latest ${POSTPLUS_SKILLS_REPO} releaseId: ${error instanceof Error ? error.message : String(error)}`);
     }
 }
 async function readUpdateCheckCache() {
@@ -158,7 +204,7 @@ async function readUpdateCheckCache() {
         if (typeof parsed.checkedAt !== 'string' ||
             typeof parsed.cli?.currentVersion !== 'string' ||
             typeof parsed.cli?.latestVersion !== 'string' ||
-            typeof parsed.skills?.latestRevision !== 'string') {
+            typeof parsed.skills?.latestReleaseId !== 'string') {
             return null;
         }
         return parsed;
@@ -202,6 +248,6 @@ function parseVersion(value) {
         .map((part) => Number.parseInt(part, 10))
         .map((part) => (Number.isFinite(part) ? part : 0));
 }
-function shortRevision(revision) {
-    return revision.length > 12 ? revision.slice(0, 12) : revision;
+function shortReleaseId(releaseId) {
+    return releaseId.length > 12 ? releaseId.slice(0, 12) : releaseId;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postplus/cli",
-  "version": "0.1.22",
+  "version": "0.1.24",
   "packageManager": "pnpm@10.30.3+sha512.c961d1e0a2d8e354ecaa5166b822516668b7f44cb5bd95122d590dd81922f606f5473b6d23ec4a5be05e7fcd18e8488d47d978bbe981872f1145d06e9a740017",
   "type": "module",
   "description": "PostPlus CLI for PostPlus Cloud auth, status, and diagnostics.",