@puckeditor/cli 0.24.0-canary.55558da4 → 0.24.0-canary.6f40e09b

package/README.md

@@ -20,6 +20,7 @@ Other commands:
 npx @puckeditor/cli add editor   # add the Puck editor
 npx @puckeditor/cli add cloud    # connect Puck Cloud
 npx @puckeditor/cli add ai       # add the Puck AI plugin
+npx @puckeditor/cli connect      # log in to Puck Cloud again for a new API key
 npx @puckeditor/cli status       # show what's set up
 npx @puckeditor/cli doctor       # diagnose problems
 npx @puckeditor/cli frameworks   # show supported frameworks and versions

package/dist/bin.mjs

@@ -2,7 +2,7 @@
 
 // src/bin.ts
 import os from "os";
-import path30 from "path";
+import path32 from "path";
 import fs7 from "fs";
 import { fileURLToPath } from "url";
 
@@ -38,6 +38,7 @@ var exitCodeByError = {
   "PUCK-CLI-FRAMEWORK-MISMATCH": EXIT_CODES.unsupported,
   "PUCK-CLI-BACKEND-REQUIRED": EXIT_CODES.usage,
   "PUCK-CLI-BACKEND-URL-REQUIRED": EXIT_CODES.usage,
+  "PUCK-CLI-EXTERNAL-BACKEND": EXIT_CODES.unsupported,
   "PUCK-CLI-WORKSPACE-TARGET-NOT-FOUND": EXIT_CODES.unsupported,
   "PUCK-CLI-TYPESCRIPT-REQUIRED": EXIT_CODES.unsupported,
   "PUCK-CLI-TARGET-DIR-NOT-EMPTY": EXIT_CODES.filesystem,
@@ -67,9 +68,6 @@ var CliError = class extends Error {
 // src/args.ts
 import { parseArgs } from "util";
 
-// src/detect/framework.ts
-import path3 from "path";
-
 // src/constants.ts
 var ENV_KEY = "PUCK_API_KEY";
 var DEFAULT_CLOUD_URL = "https://cloud.puckeditor.com";
@@ -82,6 +80,9 @@ var CLOUD_CLIENT_PACKAGE = "@puckeditor/cloud-client";
 var PLUGIN_AI_PACKAGE = "@puckeditor/plugin-ai";
 var CANONICAL_INVOCATION = "npx @puckeditor/cli";
 
+// src/detect/framework.ts
+import path3 from "path";
+
 // src/ast/parse.ts
 import { parse } from "@babel/parser";
 var isTsx = (filename) => /\.(tsx|jsx|js|mjs|cjs)$/.test(filename);
@@ -799,6 +800,7 @@ var MUTATING = [
 var COMMAND_OPTIONS = {
   init: [...GLOBAL, ...MUTATING, "framework", "name", "ai", "no-ai"],
   add: [...GLOBAL, ...MUTATING],
+  connect: [...GLOBAL, "api-key", "config", "wait"],
   status: ["json", "help", "version", "cwd", "workspace", "config"],
   doctor: ["json", "help", "version", "cwd", "workspace", "config", "offline"],
   docs: ["json", "help", "version"],
@@ -808,6 +810,7 @@ var COMMAND_OPTIONS = {
 var COMMANDS = [
   "init",
   "add",
+  "connect",
   "status",
   "doctor",
   "docs",
@@ -836,7 +839,7 @@ var parseCliArgs = (argv) => {
     if (!COMMANDS.includes(first)) {
       throw new CliError(
         "PUCK-CLI-UNKNOWN-COMMAND",
-        `Unknown command "${first}". Run \`puck --help\` to see available commands.`
+        `Unknown command "${first}". Run \`${CANONICAL_INVOCATION} --help\` to see available commands.`
       );
     }
     command = first;
@@ -847,7 +850,7 @@ var parseCliArgs = (argv) => {
     if (!allowed.includes(key)) {
       throw new CliError(
         "PUCK-CLI-INVALID-ARGS",
-        `--${key} can't be used with \`${command ?? "puck"}\`.`
+        `--${key} can't be used with \`${command ?? CANONICAL_INVOCATION}\`.`
       );
     }
   }
@@ -1156,6 +1159,10 @@ var COMMANDS2 = [
     name: "add <editor|cloud|ai>",
     description: "Add one capability (ai includes cloud, cloud includes editor)"
   },
+  {
+    name: "connect",
+    description: "Log in to Puck Cloud again and replace PUCK_API_KEY"
+  },
   { name: "status", description: "Show what's installed and configured" },
   {
     name: "doctor",
@@ -1504,7 +1511,8 @@ var templates_default = {
     "*.tsbuildinfo",
     "eslint.config.mjs",
     ".env*"
-  ]
+  ],
+  allowBuilds: ["esbuild"]
 };
 
 // src/templates/source.ts
@@ -2550,10 +2558,10 @@ var analyzeRoutes = (code, filename) => {
   const topLevel = new Set(exported.elements.filter(Boolean));
   walk(exported, (node) => {
     if (!isRouteCall(node, routeLocal)) return;
-    const path31 = stringArg(node, 0);
+    const path33 = stringArg(node, 0);
     const isTop = topLevel.has(node);
-    calls.push({ path: path31, file: stringArg(node, 1), topLevel: isTop });
-    if (path31 === "*") {
+    calls.push({ path: path33, file: stringArg(node, 1), topLevel: isTop });
+    if (path33 === "*") {
       if (isTop) splat = node;
       else nestedSplat = true;
     }
@@ -4843,7 +4851,7 @@ var presentHuman = (out, result, secrets) => {
 };
 
 // src/commands/init.ts
-import path27 from "path";
+import path28 from "path";
 
 // src/io/vfs.ts
 import fs2 from "fs";
@@ -5313,7 +5321,7 @@ var resolveTarget = async (rc, opts = {}) => {
 };
 
 // src/commands/mutate.ts
-import path26 from "path";
+import path27 from "path";
 
 // src/plan/planner.ts
 import path22 from "path";
@@ -5571,6 +5579,66 @@ var planEnvWrite = (p, secret) => {
   planGitignore(p, target);
 };
 
+// src/plan/pnpm-builds.ts
+import path24 from "path";
+import { Document, isMap, isSeq, parseDocument } from "yaml";
+var LEGACY_LISTS = [
+  "onlyBuiltDependencies",
+  "neverBuiltDependencies",
+  "ignoredBuiltDependencies"
+];
+var allowAll = (names) => Object.fromEntries(names.map((name) => [name, true]));
+var withAllowedBuilds = (text, names) => {
+  const doc = parseDocument(text ?? "");
+  if (doc.errors.length > 0) return null;
+  if (doc.get("dangerouslyAllowAllBuilds") === true) return null;
+  const allowBuilds = doc.get("allowBuilds");
+  const covered = /* @__PURE__ */ new Set();
+  if (isMap(allowBuilds)) {
+    for (const item of allowBuilds.items) covered.add(String(item.key));
+  }
+  for (const list of LEGACY_LISTS) {
+    const seq = doc.get(list);
+    if (isSeq(seq)) for (const item of seq.toJSON()) covered.add(String(item));
+  }
+  const missing = names.filter((name) => !covered.has(name));
+  if (missing.length === 0) return null;
+  const legacy = doc.get("onlyBuiltDependencies");
+  if (isMap(allowBuilds)) {
+    for (const name of missing) allowBuilds.set(name, true);
+  } else if (isSeq(legacy)) {
+    for (const name of missing) legacy.add(name);
+  } else if (doc.contents === null) {
+    const created = new Document({ allowBuilds: allowAll(missing) });
+    created.commentBefore = " Dependencies allowed to run install scripts (required by pnpm 11+)";
+    return created.toString();
+  } else {
+    doc.set("allowBuilds", allowAll(missing));
+  }
+  return doc.toString();
+};
+var planAllowedBuilds = (planner) => {
+  const { ctx, vfs } = planner;
+  if (ctx.packageManager.name !== "pnpm") return;
+  const ws = ctx.workspace;
+  if (ws && ws.source !== "pnpm-workspace.yaml") return;
+  const file = path24.join(ws?.root ?? ctx.root, "pnpm-workspace.yaml");
+  const names = templates_default.allowBuilds;
+  const list = names.join(", ");
+  const next = withAllowedBuilds(vfs.readText(file), names);
+  if (next === null) return;
+  vfs.write(file, next);
+  if (!ws) return;
+  planner.steps.push({
+    id: "bootstrap:allow-builds",
+    kind: "modify_file",
+    capability: "bootstrap",
+    summary: `Allow ${list} build scripts in the workspace's pnpm-workspace.yaml`,
+    path: file,
+    edits: []
+  });
+};
+
 // src/plan/backend.ts
 var choicesFor = (options, wantsCloud) => [
   { value: "add", label: options.addLabel },
@@ -5640,14 +5708,14 @@ var resolveBackend = async (rc, options, capabilities, planned) => {
 
 // src/auth/session-store.ts
 import fs4 from "fs";
-import path24 from "path";
+import path25 from "path";
 import { createHash as createHash2 } from "crypto";
 var SessionStore = class {
   #file;
   constructor(cacheDir, projectRoot, baseUrl) {
     const key = createHash2("sha256").update(`${projectRoot}
 ${baseUrl}`).digest("hex").slice(0, 32);
-    this.#file = path24.join(cacheDir, "puck", "connect", `${key}.json`);
+    this.#file = path25.join(cacheDir, "puck", "connect", `${key}.json`);
   }
   get path() {
     return this.#file;
@@ -5661,14 +5729,14 @@ ${baseUrl}`).digest("hex").slice(0, 32);
     }
   }
   save(session) {
-    fs4.mkdirSync(path24.dirname(this.#file), { recursive: true, mode: 448 });
+    fs4.mkdirSync(path25.dirname(this.#file), { recursive: true, mode: 448 });
     fs4.writeFileSync(this.#file, JSON.stringify(session), { mode: 384 });
   }
   clear() {
     fs4.rmSync(this.#file, { force: true });
   }
 };
-var cacheDirFor = (env2, homedir) => env2.XDG_CACHE_HOME || path24.join(homedir, ".cache");
+var cacheDirFor = (env2, homedir) => env2.XDG_CACHE_HOME || path25.join(homedir, ".cache");
 
 // src/auth/credentials.ts
 var apiKeysUrl = (rc) => new URL(API_KEYS_PATH, rc.cloud.baseUrl).toString();
@@ -5891,7 +5959,7 @@ var promptForKey = async (rc) => {
     warnings: []
   };
 };
-var resolveCredential = async (rc, state, info) => {
+var resolveCredential = async (rc, state, info, { fresh = false } = {}) => {
   const warnings = [];
   const fromExplicit = async (value, source) => {
     const secret = secretFrom(
@@ -5917,10 +5985,15 @@ var resolveCredential = async (rc, state, info) => {
   };
   if (rc.flags.apiKey !== void 0)
     return fromExplicit(rc.flags.apiKey, "flag");
-  if (rc.deps.env[ENV_KEY])
+  if (fresh && rc.deps.env[ENV_KEY]) {
+    warnings.push({
+      code: "PUCK-CLI-W-KEY-IN-PROCESS-ENV",
+      message: `${ENV_KEY} is set in your environment and overrides the new key in the env file. Unset it to use the new key.`
+    });
+  } else if (rc.deps.env[ENV_KEY])
     return fromExplicit(rc.deps.env[ENV_KEY], "process.env");
   const existing = state.cloud.apiKey;
-  if (existing.present && existing.value) {
+  if (!fresh && existing.present && existing.value) {
     const secret = secretFrom(
       rc,
       existing.value,
@@ -5981,7 +6054,7 @@ var resolveCredential = async (rc, state, info) => {
 
 // src/apply/applier.ts
 import fs5 from "fs";
-import path25 from "path";
+import path26 from "path";
 var tail = (text, lines = 20) => text.trim().split("\n").slice(-lines).join("\n");
 var run = async (rc, spec) => {
   rc.log(`$ ${formatCommand(spec)}`);
@@ -6011,14 +6084,14 @@ ${result.stderr}`))
   }
 };
 var writeFile = (file, content, mode) => {
-  fs5.mkdirSync(path25.dirname(file), { recursive: true });
+  fs5.mkdirSync(path26.dirname(file), { recursive: true });
   if (mode === void 0) {
     fs5.writeFileSync(file, content);
     return;
   }
-  const temp = path25.join(
-    path25.dirname(file),
-    `.${path25.basename(file)}.${process.pid}.tmp`
+  const temp = path26.join(
+    path26.dirname(file),
+    `.${path26.basename(file)}.${process.pid}.tmp`
   );
   fs5.writeFileSync(temp, content, { mode });
   fs5.chmodSync(temp, mode);
@@ -6219,6 +6292,7 @@ var runMutation = async (rc, input) => {
   }
   planCapabilities(planner, capabilities);
   planner.finalize();
+  if (bootstrap) planAllowedBuilds(planner);
   if (scaffoldStep) planner.steps.unshift(scaffoldStep);
   const wantsCloud = capabilities.includes("cloud") && planner.backend?.mode !== "external" && !state.cloud.external;
   const needsConsent = planner.steps.length > 0 || wantsCloud && !state.cloud.apiKey.present;
@@ -6257,7 +6331,7 @@ var runMutation = async (rc, input) => {
   if (wantsCloud) {
     credential = await resolveCredential(rc, state, {
       projectRoot: root,
-      projectName: bootstrap?.appName ?? ctx.packageJson?.name ?? path26.basename(root),
+      projectName: bootstrap?.appName ?? ctx.packageJson?.name ?? path27.basename(root),
       framework: ctx.framework.id
     });
     for (const w of credential.warnings) planner.warn(w.code, w.message);
@@ -6448,14 +6522,14 @@ var runInit = async (rc) => {
         { globs: target.workspace.globs }
       );
     }
-    parentDir = path27.join(target.workspace.root, appsDir);
+    parentDir = path28.join(target.workspace.root, appsDir);
     workspaceRoot = target.workspace.root;
     for (const pkg of target.workspace.packages) {
       if (pkg.name) existingNames.add(pkg.name);
-      existingNames.add(path27.basename(pkg.dir));
+      existingNames.add(path28.basename(pkg.dir));
     }
   } else {
-    if (vfs.exists(path27.join(target.root, "package.json"))) {
+    if (vfs.exists(path28.join(target.root, "package.json"))) {
       const read = readPackageJson(vfs, target.root);
       const deps = depsOf(read.status === "ok" ? read.pkg : null);
       const detection = detectFramework(vfs, target.root, deps);
@@ -6545,7 +6619,7 @@ var runInit = async (rc) => {
       `A workspace package named "${name}" already exists.`
     );
   }
-  const dir = inPlace ? parentDir : path27.join(parentDir, name);
+  const dir = inPlace ? parentDir : path28.join(parentDir, name);
   if (!inPlace && vfs.exists(dir) && !isEmptyDir(vfs, dir)) {
     throw new CliError(
       "PUCK-CLI-TARGET-DIR-NOT-EMPTY",
@@ -6564,7 +6638,7 @@ var runInit = async (rc) => {
     bootstrap: {
       framework,
       dir,
-      appName: name ?? sanitizeAppName(path27.basename(dir)),
+      appName: name ?? sanitizeAppName(path28.basename(dir)),
       workspaceRoot
     },
     workspace: target.kind === "workspace-empty" ? target.summary : null
@@ -6578,7 +6652,7 @@ var runAdd = async (rc, positionals) => {
       "PUCK-CLI-INVALID-ARGS",
       `Specify what to add: ${CAPABILITY_IDS.join(
         ", "
-      )}. For example \`puck add cloud\`.`
+      )}. For example \`${CANONICAL_INVOCATION} add cloud\`.`
     );
   }
   const unknown = positionals.filter(
@@ -6616,6 +6690,144 @@ var runAdd = async (rc, positionals) => {
   });
 };
 
+// src/commands/connect.ts
+import path29 from "path";
+var runConnect = async (rc) => {
+  const { deps, flags } = rc;
+  const result = emptyResult("connect", flags.dryRun);
+  const target = await resolveTarget(rc);
+  if (target.kind === "action") {
+    result.status = "action_required";
+    result.message = target.action.message;
+    result.actions = [target.action];
+    return result;
+  }
+  if (target.kind === "workspace-empty") {
+    throw new CliError(
+      "PUCK-CLI-UNSUPPORTED-FRAMEWORK",
+      `No supported app was found in this workspace. Run \`${CANONICAL_INVOCATION} init\` to create one.`,
+      { fix: `${CANONICAL_INVOCATION} init --name <name>` }
+    );
+  }
+  const base = baseDir(rc);
+  const root = target.root;
+  const vfs = new Vfs();
+  const ctx = detectProject({
+    vfs,
+    root,
+    cwd: base,
+    packageManagerFlag: flags.packageManager,
+    env: deps.env
+  });
+  assertSupported(rc, ctx);
+  const state = detectState(vfs, ctx, deps.env, { configFlag: flags.config });
+  if (state.cloud.external) {
+    throw new CliError(
+      "PUCK-CLI-EXTERNAL-BACKEND",
+      "This app sends Puck Cloud requests to a server elsewhere, and the key lives there. Run connect against that server instead.",
+      { fix: `${CANONICAL_INVOCATION} connect --cwd <server dir>` }
+    );
+  }
+  const planner = new Planner(vfs, ctx, state, deps.templates, deps.cliVersion);
+  for (const warning of ctx.warnings)
+    planner.warn("PUCK-CLI-W-DETECTION", warning);
+  const cloudReady = state.cloud.clientInstalled && Boolean(state.cloud.routeFile) && state.cloud.routeRegistered !== false;
+  const where = root === base ? "" : ` --cwd ${displayPath(base, root)}`;
+  if (!cloudReady) {
+    planner.warn(
+      "PUCK-CLI-W-CLOUD-NOT-SET-UP",
+      `Puck Cloud isn't set up in this app yet, so nothing uses ${ENV_KEY}. Run \`${CANONICAL_INVOCATION} add cloud\` to set it up.`
+    );
+  }
+  const finish = (status, message) => {
+    result.status = status;
+    result.message = message;
+    result.project = projectSummary(ctx, target.workspace);
+    result.cloud = cloudSummary(state, "none");
+    result.warnings = planner.warnings;
+    return result;
+  };
+  if (!flags.dryRun && !rc.interactive && !flags.yes) {
+    result.actions = [
+      {
+        id: "confirm",
+        type: "confirm_plan",
+        required: true,
+        flag: "--yes",
+        message: `Re-run with --yes to log in to Puck Cloud and replace ${ENV_KEY}.`,
+        rerun: `${rerunCommand(rc)} --yes`
+      }
+    ];
+    return finish(
+      "action_required",
+      `Re-run with --yes to log in to Puck Cloud and replace ${ENV_KEY}.`
+    );
+  }
+  const credential = await resolveCredential(
+    rc,
+    state,
+    {
+      projectRoot: root,
+      projectName: ctx.packageJson?.name ?? path29.basename(root),
+      framework: ctx.framework.id
+    },
+    { fresh: true }
+  );
+  for (const w of credential.warnings) planner.warn(w.code, w.message);
+  if (credential.kind === "action") {
+    result.actions = [credential.action];
+    return finish(
+      "action_required",
+      credential.action.type === "browser_login" ? "Puck Cloud login required. No changes have been made yet." : "A Puck API key is required. No changes have been made yet."
+    );
+  }
+  if (credential.kind === "none") {
+    planner.warn(
+      "PUCK-CLI-W-KEY-NEEDED",
+      "You'll be asked to log in to Puck Cloud when you run this without --dry-run."
+    );
+    return finish("success", "Dry run: no changes were made.");
+  }
+  planEnvWrite(planner, credential.secret);
+  result.plan = { steps: serializeSteps(base, planner.steps) };
+  if (flags.dryRun) return finish("success", "Dry run: no changes were made.");
+  const outcome = await applyPlan(rc, vfs, planner.steps);
+  const after = new Vfs();
+  const verifiedCtx = detectProject({
+    vfs: after,
+    root,
+    cwd: base,
+    packageManagerFlag: flags.packageManager,
+    env: deps.env
+  });
+  const verifiedState = detectState(after, verifiedCtx, deps.env, {
+    configFlag: flags.config
+  });
+  const check = credential.verified;
+  finish(
+    "success",
+    `Connected to Puck Cloud. ${planner.steps.length ? `Saved ${ENV_KEY} to ${displayPath(
+      base,
+      verifiedState.cloud.apiKey.file ?? root
+    )}.` : `${ENV_KEY} was already set to this key.`}`
+  );
+  result.project = projectSummary(verifiedCtx, target.workspace);
+  result.cloud = cloudSummary(
+    verifiedState,
+    check === "valid" ? "remote" : check === "invalid" ? "failed" : "local"
+  );
+  result.changed = planner.steps.length > 0;
+  result.filesCreated = outcome.created.map((f) => displayPath(base, f)).sort();
+  result.filesModified = [...outcome.created, ...outcome.modified].map((f) => displayPath(base, f)).sort();
+  const pm = verifiedCtx.packageManager.name;
+  const cdPrefix = root === base ? "" : `cd ${displayPath(base, root)} && `;
+  result.nextSteps = cloudReady ? [
+    "# Restart the dev server so it picks up the new key",
+    `${cdPrefix}${pm} ${pm === "npm" ? "run " : ""}dev`
+  ] : [`${CANONICAL_INVOCATION} add cloud${where}`];
+  return result;
+};
+
 // src/commands/status.ts
 var runStatus = async (rc) => {
   const base = baseDir(rc);
@@ -6689,7 +6901,7 @@ var runStatus = async (rc) => {
 };
 
 // src/commands/doctor.ts
-import path28 from "path";
+import path30 from "path";
 var finding = (check, status, evidence, fix = null) => ({ check, status, evidence, fix });
 var runDoctor = async (rc) => {
   const base = baseDir(rc);
@@ -6774,7 +6986,7 @@ var runDoctor = async (rc) => {
     finding(
       "project.package_json",
       "ok",
-      displayPath(base, path28.join(ctx.root, "package.json"))
+      displayPath(base, path30.join(ctx.root, "package.json"))
     )
   );
   result.project = projectSummary(ctx, target.workspace);
@@ -7016,7 +7228,7 @@ var runDoctor = async (rc) => {
           "cloud.connection",
           "fail",
           "Puck Cloud rejected the API key",
-          `${CANONICAL_INVOCATION} add cloud${where}`
+          `${CANONICAL_INVOCATION} connect${where}`
         )
       );
     } else {
@@ -7243,6 +7455,7 @@ var runCli = async (argv, deps) => {
   try {
     if (command === "init") result = await runInit(rc);
     else if (command === "add") result = await runAdd(rc, positionals);
+    else if (command === "connect") result = await runConnect(rc);
     else if (command === "status") result = await runStatus(rc);
     else if (command === "docs") result = await runDocs(rc, positionals);
     else if (command === "frameworks")
@@ -7350,7 +7563,7 @@ var runDevServer = (spec, onReady) => new Promise((resolve) => {
 
 // src/docs/source.ts
 import fs6 from "fs";
-import path29 from "path";
+import path31 from "path";
 var DirDocsSource = class {
   #dir;
   constructor(dir) {
@@ -7358,21 +7571,21 @@ var DirDocsSource = class {
   }
   list() {
     return JSON.parse(
-      fs6.readFileSync(path29.join(this.#dir, "index.json"), "utf8")
+      fs6.readFileSync(path31.join(this.#dir, "index.json"), "utf8")
     );
   }
   read(page) {
-    return fs6.readFileSync(path29.join(this.#dir, `${page}.md`), "utf8");
+    return fs6.readFileSync(path31.join(this.#dir, `${page}.md`), "utf8");
   }
 };
 
 // src/bin.ts
-var distDir = path30.dirname(fileURLToPath(import.meta.url));
-var templatesDir = path30.join(distDir, "templates");
+var distDir = path32.dirname(fileURLToPath(import.meta.url));
+var templatesDir = path32.join(distDir, "templates");
 var templates = new DirTemplateSource(templatesDir, {
   gitignoreName: "_gitignore",
   manifest: () => JSON.parse(
-    fs7.readFileSync(path30.join(templatesDir, "manifest.json"), "utf8")
+    fs7.readFileSync(path32.join(templatesDir, "manifest.json"), "utf8")
   )
 });
 var env = { ...process.env };
@@ -7382,14 +7595,14 @@ runCli(process.argv.slice(2), {
   stdout: process.stdout,
   stderr: process.stderr,
   stdinIsTTY: Boolean(process.stdin.isTTY),
-  cliVersion: "0.24.0-canary.55558da4",
+  cliVersion: "0.24.0-canary.6f40e09b",
   runner: createRunner(env),
   fetch: globalThis.fetch,
   openUrl,
   runDevServer,
   createPrompter: () => createInquirerPrompter(process.stderr),
   templates,
-  docs: new DirDocsSource(path30.join(distDir, "docs")),
+  docs: new DirDocsSource(path32.join(distDir, "docs")),
   homedir: os.homedir(),
   hostname: os.hostname(),
   now: () => Date.now(),

package/dist/docs/cli.md

@@ -159,6 +159,7 @@ npx skills add puckeditor/skills --skill puck
 | `add editor` | Add the Puck editor                                                |
 | `add cloud`  | Connect Puck Cloud (adds the editor first if needed)               |
 | `add ai`     | Add the Puck AI plugin (adds Puck Cloud first if needed)           |
+| `connect`    | Log in to Puck Cloud again and replace `PUCK_API_KEY`              |
 | `status`     | Show what's installed and configured                               |
 | `doctor`     | Diagnose problems and suggest fixes. Never makes changes           |
 | `frameworks` | Show the supported frameworks and versions                         |
@@ -195,6 +196,12 @@ To use an existing key, prefer the environment over `--api-key`, which is visibl
 PUCK_API_KEY=your-key npx @puckeditor/cli add cloud --yes
 ```
 
+To log in again, for example to replace a revoked key, run `connect`. It always starts a new login and replaces the existing key, without changing any code:
+
+```sh
+npx @puckeditor/cli connect
+```
+
 Remember to set `PUCK_API_KEY` in your production environment too. `react-router-serve` and Cloudflare Workers don't load `.env` files; on Workers, use `wrangler secret put PUCK_API_KEY`.
 
 The `/api/puck` route and the editor are public by default. Add authentication before deploying.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@puckeditor/cli",
-  "version": "0.24.0-canary.55558da4",
+  "version": "0.24.0-canary.6f40e09b",
   "description": "Set up Puck and Puck Cloud from the command line. Built for coding agents, friendly for humans.",
   "author": "Chris Villa <chris@puckeditor.com>",
   "repository": {