@walkeros/cli 4.7.1 → 4.7.2-next-1791213015481

package/dist/index.d.ts

@@ -738,7 +738,7 @@ type ValidateOptions = z.infer<typeof ValidateOptionsSchema>;
  * Every code an error, warning or skip of `validate` can carry. Agents and
  * tests branch on these, never on message text.
  */
-declare const VALIDATE_CODES: readonly ["INPUT_ERROR", "SERIALIZATION_ERROR", "OPTION_NOT_APPLICABLE", "FLOW_NOT_FOUND", "ENTRY_NOT_FOUND", "AMBIGUOUS_ENTRY", "UNSUPPORTED_SECTION", "INVALID_PATH", "SCHEMA_VALIDATION", "CONFIG_WARNING", "EMPTY_FLOWS", "UNKNOWN_KEY", "CONFLICT", "MISSING_PACKAGE", "OBSOLETE_CODE_STRING", "INVALID_IMPORT", "INVALID_CODE_SHAPE", "PACKAGE_VERSION_MISSING", "DEPRECATED_PACKAGE", "UNKNOWN_ROUTE_TARGET", "ROUTE_DEAD_CODE", "ROUTE_EMPTY_MANY", "ROUTE_SINGLE_MANY", "ROUTE_FIRST_MATCH", "INCOMPATIBLE_EXAMPLES", "EXAMPLES_INCOMPLETE", "CONTRACT_VIOLATION", "MAPPING_DOT_KEY", "FLOW_REF_WARNING", "FLOW_CYCLE", "VAR_CYCLE", "INVALID_COMPONENT_NAME", "INVALID_REFERENCE", "STORE_REFERENCE_NOT_FOUND", "UNRESOLVED_REFERENCE", "MISSING_ENV", "WEB_SECRET_REF", "UNRESOLVED_CONTRACT", "ENTRY_SCHEMA", "NO_CONTRACT_SECTION", "INVALID_CONTRACT", "FLAT_CONTRACT_SHAPE", "INVALID_CONTRACT_ENTRY", "UNKNOWN_CONTRACT_KEY", "INVALID_TAGGING", "INVALID_SCHEMA", "INVALID_EXTENDS", "INVALID_SECTION", "INVALID_EVENTS", "CIRCULAR_EXTENDS", "INVALID_ENTITY_KEY", "INVALID_ENTITY", "INVALID_ACTION_KEY", "INVALID_SCHEMA_ENTRY", "NOT_AN_OBJECT", "MISSING_EVENT_NAME", "EMPTY_EVENT_NAME", "INVALID_EVENT_NAME", "INVALID_MAPPING_TYPE", "INVALID_EVENT_PATTERN", "INVALID_RULE_TYPE", "CATCH_ALL_NOT_LAST", "GATED_BY_ERRORS", "CONTRACT_NOT_STATIC", "NO_PACKAGE", "NO_SETTINGS_SCHEMA", "SCHEMA_UNAVAILABLE"];
+declare const VALIDATE_CODES: readonly ["INPUT_ERROR", "SERIALIZATION_ERROR", "OPTION_NOT_APPLICABLE", "FLOW_NOT_FOUND", "ENTRY_NOT_FOUND", "AMBIGUOUS_ENTRY", "UNSUPPORTED_SECTION", "INVALID_PATH", "SCHEMA_VALIDATION", "CONFIG_WARNING", "EMPTY_FLOWS", "UNKNOWN_KEY", "CONFLICT", "MISSING_PACKAGE", "OBSOLETE_CODE_STRING", "INVALID_IMPORT", "INVALID_CODE_SHAPE", "PACKAGE_VERSION_MISSING", "DEPRECATED_PACKAGE", "UNKNOWN_ROUTE_TARGET", "ROUTE_DEAD_CODE", "ROUTE_EMPTY_MANY", "ROUTE_SINGLE_MANY", "ROUTE_FIRST_MATCH", "INCOMPATIBLE_EXAMPLES", "EXAMPLES_INCOMPLETE", "CONTRACT_VIOLATION", "MAPPING_DOT_KEY", "FLOW_REF_WARNING", "FLOW_CYCLE", "VAR_CYCLE", "INVALID_COMPONENT_NAME", "INVALID_REFERENCE", "STORE_REFERENCE_NOT_FOUND", "STATE_STORE_UNKNOWN", "STATE_STORE_FILE", "TRANSFORMER_MAPPING_NO_OP", "UNRESOLVED_REFERENCE", "MISSING_ENV", "WEB_SECRET_REF", "UNRESOLVED_CONTRACT", "ENTRY_SCHEMA", "NO_CONTRACT_SECTION", "INVALID_CONTRACT", "FLAT_CONTRACT_SHAPE", "INVALID_CONTRACT_ENTRY", "UNKNOWN_CONTRACT_KEY", "INVALID_TAGGING", "INVALID_SCHEMA", "INVALID_EXTENDS", "INVALID_SECTION", "INVALID_EVENTS", "CIRCULAR_EXTENDS", "INVALID_ENTITY_KEY", "INVALID_ENTITY", "INVALID_ACTION_KEY", "INVALID_SCHEMA_ENTRY", "NOT_AN_OBJECT", "MISSING_EVENT_NAME", "EMPTY_EVENT_NAME", "INVALID_EVENT_NAME", "INVALID_MAPPING_TYPE", "INVALID_EVENT_PATTERN", "INVALID_RULE_TYPE", "CATCH_ALL_NOT_LAST", "GATED_BY_ERRORS", "CONTRACT_NOT_STATIC", "NO_PACKAGE", "NO_SETTINGS_SCHEMA", "SCHEMA_UNAVAILABLE"];
 type ValidateCode = (typeof VALIDATE_CODES)[number];
 /**
  * Named checks a run includes (`details.scope.checks`). `file:` checks run
@@ -7104,13 +7104,23 @@ declare function setFeedbackPreference(anonymous: boolean): void;
 declare function getFeedbackPreference(): boolean | undefined;
 /**
  * Set the default project ID in the config.
- * Throws if no config exists (user not authenticated).
+ *
+ * Needs a credential: `WALKEROS_TOKEN`, or a stored login. An env-only setup
+ * gets a config file that holds just the default. Refuses while
+ * `WALKEROS_PROJECT_ID` names another project, because the variable takes
+ * precedence (see `resolveProjectId`) and the write would change nothing.
  */
 declare function setDefaultProject(projectId: string): void;
 /**
  * Get the default project ID from the config, or null if not set.
  */
 declare function getDefaultProject(): string | null;
+/**
+ * The project a call without a `projectId` works on: `WALKEROS_PROJECT_ID`,
+ * then the config's default, or null when neither names one. The one
+ * resolution `requireProjectId()` and the local MCP door share.
+ */
+declare function resolveProjectId(): string | null;
 /**
  * Resolve the API token using priority order:
  * 1. WALKEROS_TOKEN env var
@@ -7415,4 +7425,4 @@ declare module '@walkeros/core' {
     }
 }
 
-export { type AddThreadMessageOptions, type ApiAuth, ApiError, type ApiErrorDetail, type ApiRequestInit, type ApiTransport, BUILD_ERROR_CODES, BUILD_MANIFEST_ENV, BUILD_MANIFEST_VERSION, type BuildArtifact, BuildArtifactSchema, BuildBundleArtifactSchema, type BuildErrorCode, type BuildManifest, BuildManifestSchema, type BuildOptions, type BuildResult, BuildResultSchema, BuildWrapArtifactSchema, type BuildWrapOptions, BuildWrapOptionsSchema, type BundleStats, type CLIBuildOptions, type ClientContext, type ClientOperation, type ClientType, type CompareContractInput, type CompleteDeviceLoginOptions, type ContractClient, type ContractComparison, type ContractVerdict, type CreatePreviewOptions, type CreateSecretOptions, type CreateThreadOptions, DEPLOYMENT_STATUSES, DEPLOYMENT_TYPES, type DeletePreviewOptions, type DeleteSecretOptions, type DeployOptions, DeploymentAmbiguityError, type DeploymentStatus, type DeploymentSummaryForFlow, type DeploymentType, type DeviceAuthorization, type DeviceLoginResult, type EndObserveSessionOptions, type FeedbackOptions, type GetFrameOptions, type GetObserveSessionOptions, type GetPreviewOptions, type GetReleaseOptions, type GlobalOptions, type HealthResult, type ListDeploymentsOptions, type ListFlowsOptions, type ListFramesOptions, type ListJourneysOptions, type ListKnowledgeOptions, type ListPageFramesOptions, type ListPreviewsOptions, type ListProjectsOptions, type ListReleasesOptions, type ListSecretsOptions, type ListStepHistoryOptions, type ListThreadsOptions, type LoginOptions, type LoginResult, type MinifyOptions, type MissingOperation, type OpenApiResult, type OperationKey, type PrepareInput, type PreparedFlow, type ProjectFlows, type PushResult, type RegrantPreviewOptions, type ReleaseDetailResponse, type ReleaseDiffResponse, type ReleaseIndexResponse, type ReleaseRationaleSummary, type ReleaseRef, type ResponseJson, type RunBuildManifestResult, type SSEEvent, type SSEParseResult, type SetReleaseRationaleOptions, type SimulateCollectorOptions, type SimulateDataOptions, type SimulateDestinationOptions, type SimulateSourceOptions, type SimulateTransformerOptions, type StartObserveSessionOptions, type ThreadAnchorType, type ThreadStatus, type UpdateSecretOptions, VALIDATE_CODES, VERSION, type ValidateCheck, type ValidateCode, type ValidateDeferred, type ValidateResult, type ValidateScope, type ValidateSkip, type ValidationError, type ValidationWarning, type WalkerOSConfig, type WrapSkeletonOptions, addThreadMessage, apiFetch, apiRequest, bakedClientOperations, bakedContractHash, bakedContractVersion, buildDataPayload, bundle, bundleCommand, canonicalContractHash, classifyStepProperties, clearAuthFields, clientContextHeaders, collectKnownSecrets, compareContract, completeDeviceLogin, containsCodeMarkers, createApiClient, createDeployCommand, createDeployment, createDeploymentCommand, createFlow, createFlowCommand, createPreview, createProject, createProjectCommand, createSecret, createThread, credentialSource, deleteConfig, deleteDeployment, deleteDeploymentByFlowId, deleteDeploymentCommand, deleteFlow, deleteFlowCommand, deletePreview, deleteProject, deleteProjectCommand, deleteSecret, deploy, deployCommand, deployFetch, duplicateFlow, duplicateFlowCommand, endObserveSession, feedback, feedbackCommand, fetchHealth, fetchOpenApi, formatContract, formatPushResult, getAuthHeaders, getClientContext, getDefaultProject, getDeployment, getDeploymentBySlug, getDeploymentBySlugCommand, getDeploymentCommand, getFeedbackPreference, getFlow, getFlowCommand, getFrame, getObserveSession, getPreview, getProject, getProjectCommand, getRelease, isDeploymentStatus, listAllFlows, listDeployments, listDeploymentsCommand, listFlows, listFlowsCommand, listFrames, listJourneys, listKnowledge, listPageFrames, listPreviews, listProjects, listProjectsCommand, listReleases, listSecrets, listStepHistory, listThreads, loadConfig, loadJsonConfig, login, loginCommand, logout, logoutCommand, mergeAuthHeaders, operationUrl, parseSSEEvents, publicFetch, push, pushCommand, readConfig, regrantPreview, requireProjectId, resetClientContext, resolveAccessToken, resolveAppUrl, resolveExportName, resolveManifestSource, resolveToken, runBuildManifest, selectDevExamples, setClientContext, setDefaultProject, setFeedbackPreference, setReleaseRationale, simulateCollector, simulateDestination, simulateSource, simulateTransformer, startDeviceAuthorization, startObserveSession, index as telemetry, telemetryDisableCommand, telemetryEnableCommand, telemetryStatusCommand, throwApiError, updateFlow, updateFlowCommand, updateProject, updateProjectCommand, updateSecret, validate, validateCommand, whoami, whoamiCommand, wrapSkeleton, writeConfig };
+export { type AddThreadMessageOptions, type ApiAuth, ApiError, type ApiErrorDetail, type ApiRequestInit, type ApiTransport, BUILD_ERROR_CODES, BUILD_MANIFEST_ENV, BUILD_MANIFEST_VERSION, type BuildArtifact, BuildArtifactSchema, BuildBundleArtifactSchema, type BuildErrorCode, type BuildManifest, BuildManifestSchema, type BuildOptions, type BuildResult, BuildResultSchema, BuildWrapArtifactSchema, type BuildWrapOptions, BuildWrapOptionsSchema, type BundleStats, type CLIBuildOptions, type ClientContext, type ClientOperation, type ClientType, type CompareContractInput, type CompleteDeviceLoginOptions, type ContractClient, type ContractComparison, type ContractVerdict, type CreatePreviewOptions, type CreateSecretOptions, type CreateThreadOptions, DEPLOYMENT_STATUSES, DEPLOYMENT_TYPES, type DeletePreviewOptions, type DeleteSecretOptions, type DeployOptions, DeploymentAmbiguityError, type DeploymentStatus, type DeploymentSummaryForFlow, type DeploymentType, type DeviceAuthorization, type DeviceLoginResult, type EndObserveSessionOptions, type FeedbackOptions, type GetFrameOptions, type GetObserveSessionOptions, type GetPreviewOptions, type GetReleaseOptions, type GlobalOptions, type HealthResult, type ListDeploymentsOptions, type ListFlowsOptions, type ListFramesOptions, type ListJourneysOptions, type ListKnowledgeOptions, type ListPageFramesOptions, type ListPreviewsOptions, type ListProjectsOptions, type ListReleasesOptions, type ListSecretsOptions, type ListStepHistoryOptions, type ListThreadsOptions, type LoginOptions, type LoginResult, type MinifyOptions, type MissingOperation, type OpenApiResult, type OperationKey, type PrepareInput, type PreparedFlow, type ProjectFlows, type PushResult, type RegrantPreviewOptions, type ReleaseDetailResponse, type ReleaseDiffResponse, type ReleaseIndexResponse, type ReleaseRationaleSummary, type ReleaseRef, type ResponseJson, type RunBuildManifestResult, type SSEEvent, type SSEParseResult, type SetReleaseRationaleOptions, type SimulateCollectorOptions, type SimulateDataOptions, type SimulateDestinationOptions, type SimulateSourceOptions, type SimulateTransformerOptions, type StartObserveSessionOptions, type ThreadAnchorType, type ThreadStatus, type UpdateSecretOptions, VALIDATE_CODES, VERSION, type ValidateCheck, type ValidateCode, type ValidateDeferred, type ValidateResult, type ValidateScope, type ValidateSkip, type ValidationError, type ValidationWarning, type WalkerOSConfig, type WrapSkeletonOptions, addThreadMessage, apiFetch, apiRequest, bakedClientOperations, bakedContractHash, bakedContractVersion, buildDataPayload, bundle, bundleCommand, canonicalContractHash, classifyStepProperties, clearAuthFields, clientContextHeaders, collectKnownSecrets, compareContract, completeDeviceLogin, containsCodeMarkers, createApiClient, createDeployCommand, createDeployment, createDeploymentCommand, createFlow, createFlowCommand, createPreview, createProject, createProjectCommand, createSecret, createThread, credentialSource, deleteConfig, deleteDeployment, deleteDeploymentByFlowId, deleteDeploymentCommand, deleteFlow, deleteFlowCommand, deletePreview, deleteProject, deleteProjectCommand, deleteSecret, deploy, deployCommand, deployFetch, duplicateFlow, duplicateFlowCommand, endObserveSession, feedback, feedbackCommand, fetchHealth, fetchOpenApi, formatContract, formatPushResult, getAuthHeaders, getClientContext, getDefaultProject, getDeployment, getDeploymentBySlug, getDeploymentBySlugCommand, getDeploymentCommand, getFeedbackPreference, getFlow, getFlowCommand, getFrame, getObserveSession, getPreview, getProject, getProjectCommand, getRelease, isDeploymentStatus, listAllFlows, listDeployments, listDeploymentsCommand, listFlows, listFlowsCommand, listFrames, listJourneys, listKnowledge, listPageFrames, listPreviews, listProjects, listProjectsCommand, listReleases, listSecrets, listStepHistory, listThreads, loadConfig, loadJsonConfig, login, loginCommand, logout, logoutCommand, mergeAuthHeaders, operationUrl, parseSSEEvents, publicFetch, push, pushCommand, readConfig, regrantPreview, requireProjectId, resetClientContext, resolveAccessToken, resolveAppUrl, resolveExportName, resolveManifestSource, resolveProjectId, resolveToken, runBuildManifest, selectDevExamples, setClientContext, setDefaultProject, setFeedbackPreference, setReleaseRationale, simulateCollector, simulateDestination, simulateSource, simulateTransformer, startDeviceAuthorization, startObserveSession, index as telemetry, telemetryDisableCommand, telemetryEnableCommand, telemetryStatusCommand, throwApiError, updateFlow, updateFlowCommand, updateProject, updateProjectCommand, updateSecret, validate, validateCommand, whoami, whoamiCommand, wrapSkeleton, writeConfig };

package/dist/index.js

@@ -86,6 +86,116 @@ import {
 import { randomBytes } from "crypto";
 import { join } from "path";
 import { homedir } from "os";
+
+// src/core/api-error.ts
+var EXIT_RETRYABLE = 75;
+var ApiError = class extends Error {
+  code;
+  details;
+  status;
+  retryable;
+  retryAfterSeconds;
+  // Populated only for CLIENT_OUTDATED responses (HTTP 426).
+  minVersion;
+  clientVersion;
+  client;
+  upgrade;
+  docs;
+  constructor(message, options) {
+    super(message);
+    this.name = "ApiError";
+    this.code = options?.code;
+    this.details = options?.details;
+    this.status = options?.status;
+    this.retryable = options?.retryable;
+    this.retryAfterSeconds = options?.retryAfterSeconds;
+    this.minVersion = options?.minVersion;
+    this.clientVersion = options?.clientVersion;
+    this.client = options?.client;
+    this.upgrade = options?.upgrade;
+    this.docs = options?.docs;
+  }
+};
+function notAuthenticatedError() {
+  return new ApiError("Not authenticated. Run `walkeros auth login` first.", {
+    code: "UNAUTHORIZED"
+  });
+}
+function extractApiErrorOptions(error, fallbackMessage) {
+  if (!error || typeof error !== "object" || !("error" in error) || typeof error.error !== "object") {
+    return null;
+  }
+  const inner = error.error;
+  const message = inner.message || fallbackMessage;
+  const code = inner.code;
+  const details = inner.details?.errors;
+  const options = { code, details };
+  if (code === "CLIENT_OUTDATED") {
+    options.minVersion = inner.minVersion;
+    options.clientVersion = inner.clientVersion;
+    options.client = inner.client;
+    options.upgrade = inner.upgrade;
+    options.docs = inner.docs;
+  }
+  return { message, options };
+}
+function throwApiError(error, fallbackMessage) {
+  const extracted = extractApiErrorOptions(error, fallbackMessage);
+  if (extracted) throw new ApiError(extracted.message, extracted.options);
+  throw new ApiError(fallbackMessage);
+}
+function parseRetryAfter(value) {
+  if (!value) return void 0;
+  const trimmed = value.trim();
+  if (/^\d+$/.test(trimmed)) return parseInt(trimmed, 10);
+  const when = Date.parse(trimmed);
+  if (Number.isNaN(when)) return void 0;
+  return Math.max(0, Math.round((when - Date.now()) / 1e3));
+}
+function throwApiResponseError(response, body, fallbackMessage) {
+  const status = response.status;
+  const retryAfterSeconds = parseRetryAfter(
+    response.headers.get("retry-after")
+  );
+  const retryable = status === 429 || status === 503 && retryAfterSeconds !== void 0;
+  const extracted = extractApiErrorOptions(body, fallbackMessage);
+  const message = extracted?.message ?? fallbackMessage;
+  const options = {
+    ...extracted?.options ?? {},
+    status,
+    retryable,
+    retryAfterSeconds
+  };
+  throw new ApiError(message, options);
+}
+function machineReadableErrorLine(err) {
+  const code = err instanceof ApiError ? err.code ?? "UNKNOWN" : "UNKNOWN";
+  const retryable = err instanceof ApiError ? err.retryable === true : false;
+  const retryAfter = err instanceof ApiError && err.retryAfterSeconds !== void 0 ? ` retryAfter=${err.retryAfterSeconds}` : "";
+  const message = err instanceof Error ? err.message : String(err);
+  return `error: code=${code} retryable=${retryable}${retryAfter} message=${message}`;
+}
+function handleCliError(err) {
+  console.error(machineReadableErrorLine(err));
+  if (err instanceof ApiError && err.code === "CLIENT_OUTDATED") {
+    console.error(`
+${err.message}
+`);
+    if (err.upgrade) console.error(`  Upgrade: ${err.upgrade}`);
+    if (err.docs) console.error(`  Docs:    ${err.docs}
+`);
+    process.exit(2);
+  }
+  if (err instanceof ApiError && err.retryable) {
+    const hint = err.retryAfterSeconds !== void 0 ? ` Retry after ${err.retryAfterSeconds}s.` : " This is temporary, retry shortly.";
+    console.error(`${err.message}${hint}`);
+    process.exit(EXIT_RETRYABLE);
+  }
+  console.error(err instanceof Error ? err.message : String(err));
+  process.exit(1);
+}
+
+// src/lib/config-file.ts
 function getConfigDir() {
   const xdgConfig = process.env.XDG_CONFIG_HOME;
   const base = xdgConfig || join(homedir(), ".config");
@@ -156,17 +266,26 @@ function getFeedbackPreference() {
   const config = readConfig();
   return config?.anonymousFeedback;
 }
+function hasStoredCredential(config) {
+  return Boolean(config?.token || config?.accessToken);
+}
 function setDefaultProject(projectId) {
-  const config = readConfig();
-  if (!config) {
-    throw new Error("Not authenticated. Run `walkeros auth login` first.");
-  }
-  writeConfig({ ...config, defaultProjectId: projectId });
+  if (!process.env.WALKEROS_TOKEN && !hasStoredCredential(readConfig()))
+    throw notAuthenticatedError();
+  const envProjectId = process.env.WALKEROS_PROJECT_ID;
+  if (envProjectId && envProjectId !== projectId)
+    throw new Error(
+      `WALKEROS_PROJECT_ID is set to ${envProjectId} and takes precedence over the default project, so ${projectId} would not be used. Pass projectId on each call, or unset WALKEROS_PROJECT_ID to change the default.`
+    );
+  writeConfig({ defaultProjectId: projectId });
 }
 function getDefaultProject() {
   const config = readConfig();
   return config?.defaultProjectId ?? null;
 }
+function resolveProjectId() {
+  return process.env.WALKEROS_PROJECT_ID || getDefaultProject();
+}
 function clearDefaultProject() {
   const config = readConfig();
   if (!config) return;
@@ -917,12 +1036,11 @@ async function getAuthHeaders() {
 }
 function credentialSource() {
   if (process.env.WALKEROS_TOKEN) return "env";
-  const config = readConfig();
-  if (config?.token || config?.accessToken) return "config";
+  if (hasStoredCredential(readConfig())) return "config";
   return null;
 }
 function requireProjectId() {
-  const projectId = process.env.WALKEROS_PROJECT_ID || getDefaultProject();
+  const projectId = resolveProjectId();
   if (!projectId)
     throw new Error(
       "No project selected. Set WALKEROS_PROJECT_ID or configure a default project."
@@ -7256,7 +7374,7 @@ import {
   REF_STORE,
   SECRET_MARKER_PREFIX as SECRET_MARKER_PREFIX3
 } from "@walkeros/core";
-var CLIENT_HEADER = "walkeros-cli/4.7.1";
+var CLIENT_HEADER = "walkeros-cli/4.7.2-next-1791213015481";
 function createSettingsContext(configDir) {
   return { configDir, cache: /* @__PURE__ */ new Map(), compiled: /* @__PURE__ */ new Map() };
 }
@@ -7813,6 +7931,7 @@ function runFlowChecks(input, options) {
       flows: { [name]: flow }
     });
     errors.push(...structure.errors);
+    warnings.push(...structure.warnings);
   });
   perFlow(["flow:routes"], (name, flow) => {
     lintFlowRoutes(name, flow, errors, warnings);
@@ -8434,6 +8553,9 @@ var VALIDATE_CODES = [
   "INVALID_COMPONENT_NAME",
   "INVALID_REFERENCE",
   "STORE_REFERENCE_NOT_FOUND",
+  "STATE_STORE_UNKNOWN",
+  "STATE_STORE_FILE",
+  "TRANSFORMER_MAPPING_NO_OP",
   // Resolution (getFlowSettings, as the bundler resolves the flow)
   "UNRESOLVED_REFERENCE",
   "MISSING_ENV",
@@ -8924,8 +9046,7 @@ function createApiClient() {
     // here would go stale and never pick up a refresh.
     async onRequest({ request }) {
       const token = await resolveAccessToken();
-      if (!token)
-        throw new Error("Not authenticated. Run `walkeros auth login` first.");
+      if (!token) throw notAuthenticatedError();
       requireSecureUrl(request.url);
       request.headers.set("Authorization", `Bearer ${token}`);
       return request;
@@ -8934,109 +9055,6 @@ function createApiClient() {
   return client;
 }
 
-// src/core/api-error.ts
-var EXIT_RETRYABLE = 75;
-var ApiError = class extends Error {
-  code;
-  details;
-  status;
-  retryable;
-  retryAfterSeconds;
-  // Populated only for CLIENT_OUTDATED responses (HTTP 426).
-  minVersion;
-  clientVersion;
-  client;
-  upgrade;
-  docs;
-  constructor(message, options) {
-    super(message);
-    this.name = "ApiError";
-    this.code = options?.code;
-    this.details = options?.details;
-    this.status = options?.status;
-    this.retryable = options?.retryable;
-    this.retryAfterSeconds = options?.retryAfterSeconds;
-    this.minVersion = options?.minVersion;
-    this.clientVersion = options?.clientVersion;
-    this.client = options?.client;
-    this.upgrade = options?.upgrade;
-    this.docs = options?.docs;
-  }
-};
-function extractApiErrorOptions(error, fallbackMessage) {
-  if (!error || typeof error !== "object" || !("error" in error) || typeof error.error !== "object") {
-    return null;
-  }
-  const inner = error.error;
-  const message = inner.message || fallbackMessage;
-  const code = inner.code;
-  const details = inner.details?.errors;
-  const options = { code, details };
-  if (code === "CLIENT_OUTDATED") {
-    options.minVersion = inner.minVersion;
-    options.clientVersion = inner.clientVersion;
-    options.client = inner.client;
-    options.upgrade = inner.upgrade;
-    options.docs = inner.docs;
-  }
-  return { message, options };
-}
-function throwApiError(error, fallbackMessage) {
-  const extracted = extractApiErrorOptions(error, fallbackMessage);
-  if (extracted) throw new ApiError(extracted.message, extracted.options);
-  throw new ApiError(fallbackMessage);
-}
-function parseRetryAfter(value) {
-  if (!value) return void 0;
-  const trimmed = value.trim();
-  if (/^\d+$/.test(trimmed)) return parseInt(trimmed, 10);
-  const when = Date.parse(trimmed);
-  if (Number.isNaN(when)) return void 0;
-  return Math.max(0, Math.round((when - Date.now()) / 1e3));
-}
-function throwApiResponseError(response, body, fallbackMessage) {
-  const status = response.status;
-  const retryAfterSeconds = parseRetryAfter(
-    response.headers.get("retry-after")
-  );
-  const retryable = status === 429 || status === 503 && retryAfterSeconds !== void 0;
-  const extracted = extractApiErrorOptions(body, fallbackMessage);
-  const message = extracted?.message ?? fallbackMessage;
-  const options = {
-    ...extracted?.options ?? {},
-    status,
-    retryable,
-    retryAfterSeconds
-  };
-  throw new ApiError(message, options);
-}
-function machineReadableErrorLine(err) {
-  const code = err instanceof ApiError ? err.code ?? "UNKNOWN" : "UNKNOWN";
-  const retryable = err instanceof ApiError ? err.retryable === true : false;
-  const retryAfter = err instanceof ApiError && err.retryAfterSeconds !== void 0 ? ` retryAfter=${err.retryAfterSeconds}` : "";
-  const message = err instanceof Error ? err.message : String(err);
-  return `error: code=${code} retryable=${retryable}${retryAfter} message=${message}`;
-}
-function handleCliError(err) {
-  console.error(machineReadableErrorLine(err));
-  if (err instanceof ApiError && err.code === "CLIENT_OUTDATED") {
-    console.error(`
-${err.message}
-`);
-    if (err.upgrade) console.error(`  Upgrade: ${err.upgrade}`);
-    if (err.docs) console.error(`  Docs:    ${err.docs}
-`);
-    process.exit(2);
-  }
-  if (err instanceof ApiError && err.retryable) {
-    const hint = err.retryAfterSeconds !== void 0 ? ` Retry after ${err.retryAfterSeconds}s.` : " This is temporary, retry shortly.";
-    console.error(`${err.message}${hint}`);
-    process.exit(EXIT_RETRYABLE);
-  }
-  console.error(err instanceof Error ? err.message : String(err));
-  process.exit(1);
-}
-
 // src/commands/auth/index.ts
 async function whoami() {
   const client = createApiClient();
@@ -9067,7 +9085,7 @@ async function listProjects(options = {}) {
   const { data, error } = await client.GET("/api/projects", {
     params: { query: { cursor: options.cursor, limit: options.limit } }
   });
-  if (error) throw new Error(error.error?.message || "Failed to list projects");
+  if (error) throwApiError(error, "Failed to list projects");
   return data;
 }
 async function getProject(options = {}) {
@@ -9076,7 +9094,7 @@ async function getProject(options = {}) {
   const { data, error } = await client.GET("/api/projects/{projectId}", {
     params: { path: { projectId: id } }
   });
-  if (error) throw new Error(error.error?.message || "Failed to get project");
+  if (error) throwApiError(error, "Failed to get project");
   return data;
 }
 async function createProject(options) {
@@ -9084,8 +9102,7 @@ async function createProject(options) {
   const { data, error } = await client.POST("/api/projects", {
     body: { name: options.name }
   });
-  if (error)
-    throw new Error(error.error?.message || "Failed to create project");
+  if (error) throwApiError(error, "Failed to create project");
   return data;
 }
 async function updateProject(options) {
@@ -9095,8 +9112,7 @@ async function updateProject(options) {
     params: { path: { projectId: id } },
     body: { name: options.name }
   });
-  if (error)
-    throw new Error(error.error?.message || "Failed to update project");
+  if (error) throwApiError(error, "Failed to update project");
   return data;
 }
 async function deleteProject(options = {}) {
@@ -9105,8 +9121,7 @@ async function deleteProject(options = {}) {
   const { data, error } = await client.DELETE("/api/projects/{projectId}", {
     params: { path: { projectId: id } }
   });
-  if (error)
-    throw new Error(error.error?.message || "Failed to delete project");
+  if (error) throwApiError(error, "Failed to delete project");
   if (getDefaultProject() === id) clearDefaultProject();
   return data ?? { success: true };
 }
@@ -11547,6 +11562,7 @@ export {
   resolveAppUrl,
   resolveExportName,
   resolveManifestSource,
+  resolveProjectId,
   resolveToken,
   runBuildManifest,
   selectDevExamples,