@sente-labs/cli 0.2.0 → 0.3.0

package/dist/client.js

@@ -45,7 +45,7 @@ class GatewayClient {
             headers: {
                 Authorization: `Bearer ${this.creds.token}`,
                 'Content-Type': 'application/json',
-                'User-Agent': 'sente-cli/0.2.0',
+                'User-Agent': 'sente-cli/0.3.0',
             },
         };
         if (opts.body !== undefined) {

package/dist/index.js

@@ -8,11 +8,20 @@ const project_1 = require("./commands/project");
 const task_1 = require("./commands/task");
 const init_1 = require("./commands/init");
 const secret_1 = require("./commands/secret");
+const autoupdate_1 = require("./skill/autoupdate");
+// Silently refresh the installed Claude Code skill to match the running CLI.
+// Synchronous + cheap (a file stat + at most one small write). No-op if the
+// user customized the skill (no version marker) or --json mode is active.
+(0, autoupdate_1.autoUpdateSkillIfStale)();
+// Fire-and-forget npm registry check. Cached for 24h. Prints a one-line
+// nudge to stderr if a newer CLI is available. Never blocks the user's
+// command; settles at most by the time their action returns.
+void (0, autoupdate_1.checkForCliUpdate)();
 const program = new commander_1.Command();
 program
     .name('sente')
     .description('Sente CLI -- manage QA tests from the command line and Claude Code')
-    .version('0.2.0')
+    .version('0.3.0')
     .option('--json', 'Emit machine-readable JSON instead of human output');
 /**
  * Global options aren't auto-propagated to subcommands by Commander, so we

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,yCAAoC;AACpC,4CAAwD;AACxD,8CAA0D;AAC1D,gDAAkF;AAClF,0CAAuD;AACvD,0CAAmF;AACnF,8CAA2D;AAG3D,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,oEAAoE,CAAC;KACjF,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,GAAG,GAAe,EAAE,CAAC,OAAO,CAAC,IAAI,EAAc,CAAC;AAEhE,IAAA,4BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,8BAAqB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,IAAA,0BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,kCAA2B,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACjD,IAAA,iCAAuB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC7C,IAAA,6BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,2BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,+BAAsB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAE5C,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,wEAAwE;IACxE,+CAA+C;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,yCAAoC;AACpC,4CAAwD;AACxD,8CAA0D;AAC1D,gDAAkF;AAClF,0CAAuD;AACvD,0CAAmF;AACnF,8CAA2D;AAC3D,mDAA+E;AAG/E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,IAAA,mCAAsB,GAAE,CAAC;AAEzB,wEAAwE;AACxE,uEAAuE;AACvE,6DAA6D;AAC7D,KAAK,IAAA,8BAAiB,GAAE,CAAC;AAEzB,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,oEAAoE,CAAC;KACjF,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,GAAG,GAAe,EAAE,CAAC,OAAO,CAAC,IAAI,EAAc,CAAC;AAEhE,IAAA,4BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,8BAAqB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,IAAA,0BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,kCAA2B,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACjD,IAAA,iCAAuB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC7C,IAAA,6BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,2BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,+BAAsB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAE5C,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,wEAAwE;IACxE,+CAA+C;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/skill/SKILL.md

@@ -3,6 +3,8 @@ name: sente
 description: Author and update Sente QA tests for the user's app from within Claude Code. Use when the user finishes a feature, prepares a commit or PR, debugs a failing Sente test, references a Sente task, or mentions "Sente". Drafts well-structured action/assertion steps from the repo context and creates them via the `sente` CLI; reads run results to distinguish app regressions from test issues.
 ---
 
+<!-- sente-cli-version: __CLI_VERSION__ -- auto-managed by the sente CLI. If you remove this line, the CLI will stop auto-updating this file. -->
+
 # Sente
 
 Sente runs QA tests against the user's deployed staging environment via a cloud-hosted Chrome browser. This skill lets you author and maintain those tests from inside Claude Code using the `sente` CLI.
@@ -80,7 +82,7 @@ The agent that runs your tests enforces this style. Steps that follow it pass mo
 
 ### Hard rules
 
-- **Secrets** use literal placeholder syntax: `{{secret.name_here}}`. Never embed values. List existing secrets with `sente secret list --json` (when available).
+- **Secrets** use literal placeholder syntax: `{{secret.name_here}}`. Never embed values. List existing secrets with `sente secret list --json`. If the secret doesn't exist, create it with `sente secret create --name <key>` (prompts for value with no echo) or pipe via `echo "$VAL" | sente secret create --name <key> --value-stdin`. Link to the current project with `--project $(jq -r .projectId .sente/config.json)`.
 - **Never invent dropdown values**, product names, or emails. If you don't know, ask the user.
 - **Combine related micro-actions into one step** (form fill + submit = one step).
 - **At most 20 steps per task.** If a flow needs more, split into multiple tasks with a precondition note in the second one's instruction.
@@ -105,12 +107,16 @@ The top-level `--instruction` is consulted by the agent when step text is ambigu
 | `sente task results <id> --failed-step --json` | Focused failure payload for diagnosis |
 | `sente task results <id> --json` | Full step-by-step results |
 | `sente sync --json` | Re-pull tasks into `.sente/tasks.json` |
+| `sente secret list --json` | List secrets (metadata only; values are never returned) |
+| `sente secret create --name <key> --project <projectId> [--target-url <url>]` | Create a secret. Hidden prompt for value, or `--value-stdin` for piping |
+| `sente secret link <secretId> <projectId>` / `unlink ...` | Link/unlink an existing secret to a project |
+| `sente secret delete <secretId>` | Delete a secret (removes from all linked projects) |
 
 Use `--json` for every CLI call — outputs are stable JSON shaped for programmatic consumption.
 
 ## Error handling
 
 - `STEP_VALIDATION_FAILED` (HTTP 400): the `errors[]` array tells you exactly what to fix. Apply the fix to the steps file and retry.
-- `UNKNOWN_SECRET`: the referenced secret doesn't exist in this organization. Ask the user to create it via the web UI, or use a different secret.
+- `UNKNOWN_SECRET`: the referenced secret doesn't exist in this organization. Either ask the user to create it (so they paste the value into a hidden prompt: `sente secret create --name <key> --project $(jq -r .projectId .sente/config.json)`), or rewrite the step to use a different existing secret. Never invent secret values yourself.
 - `INVALID_PAT`: the stored PAT is bad. Ask the user to re-run `sente login` after issuing a new token.
 - `NETWORK_ERROR`: the gateway is unreachable. Surface the host to the user.

package/dist/skill/autoupdate.js

@@ -0,0 +1,171 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.autoUpdateSkillIfStale = autoUpdateSkillIfStale;
+exports.checkForCliUpdate = checkForCliUpdate;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const template_1 = require("./template");
+const config_1 = require("../config");
+/**
+ * Silent skill refresh. If the installed skill has a version marker that
+ * differs from the current CLI's bundled version, overwrite it.
+ *
+ *   - No marker → user-customized skill; leave it alone.
+ *   - Marker matches CLI version → up to date; no-op.
+ *   - Marker differs → auto-upgrade. Print a one-line stderr notice.
+ *
+ * All errors are swallowed: this is a UX nicety, not a correctness gate.
+ * Skipped when `--json` is in argv so machine consumers see clean output.
+ */
+function autoUpdateSkillIfStale() {
+    if (process.argv.includes('--json'))
+        return;
+    try {
+        const dest = (0, template_1.skillInstallPath)(os.homedir());
+        if (!fs.existsSync(dest))
+            return; // never installed; not our place
+        const installed = fs.readFileSync(dest, 'utf8');
+        const installedVersion = (0, template_1.readSkillVersion)(installed);
+        if (!installedVersion)
+            return; // user-customized; respect it
+        if (installedVersion === template_1.CLI_VERSION)
+            return; // already current
+        fs.writeFileSync(dest, template_1.SKILL_MD);
+        process.stderr.write(`sente: refreshed Claude Code skill (${installedVersion} -> ${template_1.CLI_VERSION}). Restart Claude Code to pick up changes.\n`);
+    }
+    catch {
+        // Best-effort. Never crash the user's command on update failures.
+    }
+}
+const CACHE_PATH = path.join(config_1.CREDENTIALS_DIR, 'update-check.json');
+const CACHE_TTL_MS = 24 * 60 * 60 * 1000; // 24h
+const REGISTRY_URL = 'https://registry.npmjs.org/@sente-labs%2fcli/latest';
+/**
+ * Background-ish: hit the npm registry at most once per 24h to learn the
+ * latest published CLI version. If the local version is older, print a
+ * one-line nudge to stderr.
+ *
+ *   - Network failures, registry errors → silent skip.
+ *   - --json mode → silent skip.
+ *   - No SENTE_DISABLE_UPDATE_CHECK env var path so users can opt out.
+ *
+ * Returns a promise the caller MAY await; the entry point fires-and-forgets
+ * by returning before the request settles, so the user's command doesn't
+ * pay the network latency.
+ */
+async function checkForCliUpdate() {
+    if (process.argv.includes('--json'))
+        return;
+    if (process.env.SENTE_DISABLE_UPDATE_CHECK)
+        return;
+    try {
+        const cached = readCache();
+        const now = Date.now();
+        let latest = null;
+        if (cached && now - new Date(cached.checkedAt).getTime() < CACHE_TTL_MS) {
+            latest = cached.latestVersion;
+        }
+        else {
+            latest = await fetchLatestVersion();
+            if (latest)
+                writeCache({ checkedAt: new Date().toISOString(), latestVersion: latest });
+        }
+        if (!latest)
+            return;
+        if (isNewer(latest, template_1.CLI_VERSION)) {
+            process.stderr.write(`sente: ${template_1.CLI_VERSION} -> ${latest} available. Run: npm i -g @sente-labs/cli@latest\n`);
+        }
+    }
+    catch {
+        // ignore
+    }
+}
+async function fetchLatestVersion() {
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 3000);
+        const res = await fetch(REGISTRY_URL, { signal: controller.signal });
+        clearTimeout(timeout);
+        if (!res.ok)
+            return null;
+        const body = (await res.json());
+        return typeof body.version === 'string' ? body.version : null;
+    }
+    catch {
+        return null;
+    }
+}
+function readCache() {
+    try {
+        if (!fs.existsSync(CACHE_PATH))
+            return null;
+        return JSON.parse(fs.readFileSync(CACHE_PATH, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function writeCache(c) {
+    try {
+        if (!fs.existsSync(config_1.CREDENTIALS_DIR)) {
+            fs.mkdirSync(config_1.CREDENTIALS_DIR, { recursive: true, mode: 0o700 });
+        }
+        fs.writeFileSync(CACHE_PATH, JSON.stringify(c, null, 2));
+    }
+    catch {
+        // ignore
+    }
+}
+/**
+ * Compare two semver-ish version strings ("0.2.1", "0.3.0"). Returns true
+ * if `candidate` is strictly newer than `current`. Doesn't handle prerelease
+ * tags (we'll never ship those for now).
+ */
+function isNewer(candidate, current) {
+    const a = candidate.split('.').map((n) => parseInt(n, 10));
+    const b = current.split('.').map((n) => parseInt(n, 10));
+    for (let i = 0; i < Math.max(a.length, b.length); i++) {
+        const ai = a[i] ?? 0;
+        const bi = b[i] ?? 0;
+        if (ai > bi)
+            return true;
+        if (ai < bi)
+            return false;
+    }
+    return false;
+}
+//# sourceMappingURL=autoupdate.js.map

package/dist/skill/autoupdate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoupdate.js","sourceRoot":"","sources":["../../src/skill/autoupdate.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,wDAgBC;AAwBD,8CAsBC;AA/ED,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,yCAAuF;AACvF,sCAA4C;AAE5C;;;;;;;;;;GAUG;AACH,SAAgB,sBAAsB;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,2BAAgB,EAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,iCAAiC;QACnE,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,gBAAgB,GAAG,IAAA,2BAAgB,EAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,8BAA8B;QAC7D,IAAI,gBAAgB,KAAK,sBAAW;YAAE,OAAO,CAAC,kBAAkB;QAChE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,mBAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,gBAAgB,OAAO,sBAAW,8CAA8C,CACxH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,wBAAe,EAAE,mBAAmB,CAAC,CAAC;AACnE,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AAChD,MAAM,YAAY,GAAG,qDAAqD,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,iBAAiB;IACrC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B;QAAE,OAAO;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;YACxE,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACpC,IAAI,MAAM;gBAAE,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,OAAO,CAAC,MAAM,EAAE,sBAAW,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,sBAAW,OAAO,MAAM,oDAAoD,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;QACxD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAgB,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAc;IAChC,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,wBAAe,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,wBAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,SAAiB,EAAE,OAAe;IACjD,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/skill/template.js

@@ -33,22 +33,36 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SKILL_MD = void 0;
+exports.SKILL_MD = exports.CLI_VERSION = void 0;
 exports.skillInstallPath = skillInstallPath;
+exports.readSkillVersion = readSkillVersion;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
+// Read package.json once at module load so the bundled skill carries the
+// running CLI version. The file is two levels up from dist/skill/template.js
+// at runtime and from src/skill/template.ts at dev time -- same depth.
+const PKG = JSON.parse(fs.readFileSync(path.join(__dirname, '..', '..', 'package.json'), 'utf8'));
+exports.CLI_VERSION = PKG.version;
+const RAW_SKILL = fs.readFileSync(path.join(__dirname, 'SKILL.md'), 'utf8');
 /**
- * Bundled SKILL.md content. The .md file lives next to this module both at
- * dev time (src/skill/) and at runtime (dist/skill/, copied by the build script).
- *
- * Read once at module load so callers can pass the content around freely.
- */
-exports.SKILL_MD = fs.readFileSync(path.join(__dirname, 'SKILL.md'), 'utf8');
-/**
- * Where the skill gets installed for Claude Code to discover it.
- * Path is the standard convention documented at https://code.claude.com/docs/en/skills.
+ * Bundled SKILL.md content with `__CLI_VERSION__` replaced by the actual
+ * CLI version. The marker is embedded in an HTML comment so we can detect
+ * drift at runtime without parsing the YAML frontmatter.
  */
+exports.SKILL_MD = RAW_SKILL.replace('__CLI_VERSION__', exports.CLI_VERSION);
+/** Standard Claude Code skill path. */
 function skillInstallPath(homeDir) {
     return path.join(homeDir, '.claude', 'skills', 'sente', 'SKILL.md');
 }
+const VERSION_MARKER_RE = /<!--\s*sente-cli-version:\s*([0-9A-Za-z.\-_]+)/;
+/**
+ * Read the embedded version marker from a skill file's contents.
+ * Returns null when:
+ *   - The file has no marker (user-customized; we leave it alone).
+ *   - The marker is malformed.
+ */
+function readSkillVersion(content) {
+    const m = content.match(VERSION_MARKER_RE);
+    return m?.[1] ?? null;
+}
 //# sourceMappingURL=template.js.map

package/dist/skill/template.js.map

@@ -1 +1 @@
-{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/skill/template.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,4CAEC;AApBD,uCAAyB;AACzB,2CAA6B;AAE7B;;;;;GAKG;AACU,QAAA,QAAQ,GAAW,EAAE,CAAC,YAAY,CAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAChC,MAAM,CACP,CAAC;AAEF;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/skill/template.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,4CAEC;AAUD,4CAGC;AArCD,uCAAyB;AACzB,2CAA6B;AAE7B,yEAAyE;AACzE,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAC1E,CAAC;AAEW,QAAA,WAAW,GAAW,GAAG,CAAC,OAAO,CAAC;AAE/C,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;AAE5E;;;;GAIG;AACU,QAAA,QAAQ,GAAW,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,mBAAW,CAAC,CAAC;AAElF,uCAAuC;AACvC,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,iBAAiB,GAAG,gDAAgD,CAAC;AAE3E;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3C,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sente-labs/cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Sente CLI -- author and manage QA tests from your terminal and Claude Code. Tests run against your staging URL after each deploy.",
   "bin": {
     "sente": "dist/index.js"