@wayai/cli 0.3.72 → 0.3.73

package/dist/index.js

@@ -7859,6 +7859,7 @@ var workspace_exports = {};
 __export(workspace_exports, {
   autoRenameHubFolder: () => autoRenameHubFolder,
   detectWorkspace: () => detectWorkspace,
+  filterPreviewHubs: () => filterPreviewHubs,
   findEnclosingHubFolder: () => findEnclosingHubFolder,
   findGitRoot: () => findGitRoot,
   findHubByFolderName: () => findHubByFolderName,
@@ -7866,10 +7867,12 @@ __export(workspace_exports, {
   findRepoRootSync: () => findRepoRootSync,
   getChangedHubs: () => getChangedHubs,
   getHubFolderSlug: () => getHubFolderSlug,
+  isPreviewHub: () => isPreviewHub,
   resolveActiveHubId: () => resolveActiveHubId,
   resolveExplicitHubPath: () => resolveExplicitHubPath,
   resolveHubFolder: () => resolveHubFolder,
   resolveHubFolderBySelector: () => resolveHubFolderBySelector,
+  resolveWorkspaceDir: () => resolveWorkspaceDir,
   scanNewHubs: () => scanNewHubs,
   scanWorkspaceHubs: () => scanWorkspaceHubs
 });
@@ -7905,6 +7908,16 @@ function detectWorkspace() {
   }
   return { gitRoot, workspaceDir: hubsDir };
 }
+function resolveWorkspaceDir() {
+  const workspace = detectWorkspace();
+  if (workspace) return workspace.workspaceDir;
+  const gitRoot = findGitRoot();
+  if (!gitRoot) {
+    console.error("Not inside a git repository.");
+    process.exit(1);
+  }
+  return resolveLayout(gitRoot).hubsDir;
+}
 function readHubYaml(yamlPath) {
   if (!fs2.existsSync(yamlPath)) return null;
   try {
@@ -7928,6 +7941,12 @@ function scanWorkspaceHubs(workspaceDir) {
   }
   return hubs;
 }
+function isPreviewHub(hub) {
+  return hub.hubEnvironment === "preview";
+}
+function filterPreviewHubs(hubs) {
+  return hubs.filter(isPreviewHub);
+}
 function readNewHubYaml(yamlPath) {
   if (!fs2.existsSync(yamlPath)) return null;
   try {
@@ -8020,7 +8039,7 @@ function getChangedHubs(workspaceDir) {
       hubs.push({ hubFolder, hubId: meta.hubId, hubEnvironment: meta.hubEnvironment });
     }
   }
-  return hubs;
+  return filterPreviewHubs(hubs);
 }
 function resolveExplicitHubPath(hubPath) {
   const parts = hubPath.split("/");
@@ -8128,13 +8147,14 @@ function resolveActiveHubId(args2) {
   }
   const enclosing = findEnclosingHubFolder(workspaceDir);
   if (enclosing) return enclosing.hubId;
-  if (allHubs.length === 1) return allHubs[0].hubId;
-  if (allHubs.length === 0) {
+  const previewHubs = filterPreviewHubs(allHubs);
+  if (previewHubs.length === 1) return previewHubs[0].hubId;
+  if (previewHubs.length === 0) {
     console.error(`No hub folders found in ${wsLabel}/. Run \`wayai pull --hub <uuid>\` to fetch a hub for the first time, or pass --hub <uuid>.`);
     process.exit(1);
   }
   console.error(`Multiple hubs in ${wsLabel}/. Pass --hub <uuid|folder-name> or run from inside a hub folder:`);
-  for (const h of allHubs) {
+  for (const h of previewHubs) {
     console.error(`  ${path2.basename(h.hubFolder)} (${h.hubId})`);
   }
   process.exit(1);
@@ -10709,7 +10729,9 @@ var pull_exports = {};
 __export(pull_exports, {
   connectionsEqual: () => connectionsEqual,
   downloadBinaryResourceFiles: () => downloadBinaryResourceFiles,
-  pullCommand: () => pullCommand
+  pullCommand: () => pullCommand,
+  resolveHubTarget: () => resolveHubTarget,
+  writeProductionMirror: () => writeProductionMirror
 });
 import * as fs11 from "fs";
 import * as path13 from "path";
@@ -10740,13 +10762,14 @@ function resolveHubTarget(workspaceDir, selector) {
   }
   const enclosing = findEnclosingHubFolder(workspaceDir);
   if (enclosing) return { hubId: enclosing.hubId, hubFolder: enclosing.hubFolder };
-  if (allHubs.length === 1) return { hubId: allHubs[0].hubId, hubFolder: allHubs[0].hubFolder };
-  if (allHubs.length === 0) {
+  const previewHubs = filterPreviewHubs(allHubs);
+  if (previewHubs.length === 1) return { hubId: previewHubs[0].hubId, hubFolder: previewHubs[0].hubFolder };
+  if (previewHubs.length === 0) {
     console.error(`No hub folders found in ${wsLabel}/. Pass --hub <uuid> to fetch a hub for the first time.`);
     process.exit(1);
   }
   console.error(`Multiple hubs found in ${wsLabel}/. Pass --hub <uuid|folder-name> to choose, or run from inside a hub folder:`);
-  for (const h of allHubs) {
+  for (const h of previewHubs) {
     console.error(`  ${path13.basename(h.hubFolder)} (${h.hubId})`);
   }
   process.exit(1);
@@ -10757,27 +10780,18 @@ async function pullCommand(args2) {
   const { organization_id: organizationId } = repoConfig;
   const { config, accessToken } = await requireAuth();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
-  let workspaceDir;
-  const workspace = detectWorkspace();
+  const workspaceDir = resolveWorkspaceDir();
   const gitRoot = findGitRoot();
-  if (workspace) {
-    workspaceDir = workspace.workspaceDir;
-  } else {
-    if (!gitRoot) {
-      console.error("Not inside a git repository.");
-      process.exit(1);
-    }
-    workspaceDir = resolveLayout(gitRoot).hubsDir;
-  }
   if (gitRoot) warnLayoutOnce(gitRoot);
   const { hubId, hubFolder: existingFolder } = resolveHubTarget(workspaceDir, hubSelector);
-  assertHubMatchesBinding(hubId);
   console.log("Fetching hub configuration...");
   const payload = await client.pull(hubId, organizationId);
   if (payload.hub_environment === "production") {
-    console.log("Skipping production hub \u2014 production hubs are not tracked in the repository. Edit the linked preview hub instead.");
+    const folder = await writeProductionMirror(workspaceDir, payload);
+    console.log(`Production hub mirrored (read-only) \u2192 ${folder}`);
     return;
   }
+  assertHubMatchesBinding(hubId);
   let hubFolder = existingFolder;
   let wroteFiles = false;
   if (!hubFolder) {
@@ -10844,6 +10858,38 @@ async function pullCommand(args2) {
     if (cancelled) return;
   }
   if (wroteFiles) autoBindIfUnbound(hubId);
+  if (payload.production_hub_id) {
+    await mirrorLinkedProduction(client, workspaceDir, payload.production_hub_id, organizationId);
+  }
+}
+async function writeProductionMirror(workspaceDir, prodPayload) {
+  const folder = resolveHubFolder(workspaceDir, prodPayload.hub_id, prodPayload.hub.name, "production", null, null);
+  fs11.mkdirSync(path13.dirname(folder), { recursive: true });
+  writeHubFolder(folder, prodPayload);
+  await downloadBinaryResourceFiles(folder, prodPayload);
+  const finalFolder = autoRenameHubFolder(folder, prodPayload.hub.name, "production", prodPayload.hub_id, null, null);
+  prependMirrorMarker(finalFolder, prodPayload.hub_id);
+  return finalFolder;
+}
+async function mirrorLinkedProduction(client, workspaceDir, productionHubId, organizationId) {
+  try {
+    const prodPayload = await client.pull(productionHubId, organizationId);
+    const folder = await writeProductionMirror(workspaceDir, prodPayload);
+    console.log(`Mirrored production hub \u2192 ${folder} (read-only)`);
+  } catch (err) {
+    console.warn(`Warning: could not mirror production hub (${err instanceof Error ? err.message : String(err)}). Preview pull is unaffected.`);
+  }
+}
+function prependMirrorMarker(hubFolder, productionHubId) {
+  const hubYaml = path13.join(hubFolder, "hub.yaml");
+  try {
+    const content = fs11.readFileSync(hubYaml, "utf-8");
+    if (content.startsWith(MIRROR_MARKER_PREFIX)) return;
+    const marker = `${MIRROR_MARKER_PREFIX} ${productionHubId}. Edits are ignored; push is blocked. Edit the linked preview hub instead.
+`;
+    fs11.writeFileSync(hubYaml, marker + content, "utf-8");
+  } catch {
+  }
 }
 async function downloadBinaryResourceFiles(hubFolder, payload) {
   const resources = payload.resources || [];
@@ -10870,6 +10916,7 @@ function connectionsEqual(a, b) {
   }
   return true;
 }
+var MIRROR_MARKER_PREFIX;
 var init_pull = __esm({
   "src/commands/pull.ts"() {
     "use strict";
@@ -10884,6 +10931,7 @@ var init_pull = __esm({
     init_layout();
     init_repo_config();
     init_hub_binding();
+    MIRROR_MARKER_PREFIX = "# Read-only mirror of production hub";
   }
 });
 
@@ -11149,16 +11197,6 @@ async function pushSingleHub(client, hubId, hubFolder, autoConfirm, organization
   autoBindIfUnbound(hubId);
   return true;
 }
-function resolveWorkspaceDir() {
-  const workspace = detectWorkspace();
-  if (workspace) return workspace.workspaceDir;
-  const gitRoot = findGitRoot();
-  if (!gitRoot) {
-    console.error("Not inside a git repository.");
-    process.exit(1);
-  }
-  return resolveLayout(gitRoot).hubsDir;
-}
 function selectExistingHub(workspaceDir, allHubs, selector, wsLabel) {
   if (selector) {
     const match = allHubs.find(
@@ -11172,7 +11210,8 @@ function selectExistingHub(workspaceDir, allHubs, selector, wsLabel) {
   }
   const enclosing = findEnclosingHubFolder(workspaceDir);
   if (enclosing) return enclosing;
-  if (allHubs.length === 1) return allHubs[0];
+  const previewHubs = filterPreviewHubs(allHubs);
+  if (previewHubs.length === 1) return previewHubs[0];
   return null;
 }
 function selectNewHub(newHubs, selector) {
@@ -11205,6 +11244,10 @@ async function pushCommand(args2) {
   const newHubs = scanNewHubs(workspaceDir);
   const existing = selectExistingHub(workspaceDir, existingHubs, hubSelector, wsLabel);
   if (existing) {
+    if (existing.hubEnvironment === "production") {
+      console.log("This is a read-only production mirror \u2014 production hubs cannot be pushed. Edit the linked preview hub instead.");
+      return;
+    }
     assertHubMatchesBinding(existing.hubId, path14.basename(existing.hubFolder));
     await pushSingleHub(client, existing.hubId, existing.hubFolder, autoConfirm, organizationId);
     return;
@@ -11286,6 +11329,85 @@ var init_push = __esm({
   }
 });
 
+// src/commands/diff.ts
+var diff_exports = {};
+__export(diff_exports, {
+  diffCommand: () => diffCommand,
+  parseArgs: () => parseArgs6
+});
+function parseArgs6(args2) {
+  let production = false;
+  let hubSelector;
+  for (let i = 0; i < args2.length; i++) {
+    const arg = args2[i];
+    if (arg === "--production") {
+      production = true;
+    } else if (arg === "--hub" && args2[i + 1]) {
+      hubSelector = args2[++i];
+    }
+  }
+  return { production, hubSelector };
+}
+async function diffCommand(args2) {
+  const { production, hubSelector } = parseArgs6(args2);
+  const repoConfig = requireRepoConfig();
+  const { organization_id: organizationId } = repoConfig;
+  const { config, accessToken } = await requireAuth();
+  const client = new ApiClient({ apiUrl: config.api_url, accessToken });
+  const workspaceDir = resolveWorkspaceDir();
+  const gitRoot = findGitRoot();
+  if (gitRoot) warnLayoutOnce(gitRoot);
+  const { hubId: previewHubId, hubFolder } = resolveHubTarget(workspaceDir, hubSelector);
+  if (!hubFolder) {
+    console.error("Hub is not materialized locally \u2014 nothing to diff. Run `wayai pull` first.");
+    process.exit(1);
+  }
+  console.log("Parsing local configuration...");
+  const localConfig = parseHubFolder(hubFolder);
+  let targetHubId = previewHubId;
+  let label = "preview";
+  if (production) {
+    if (localConfig.hub_environment === "production") {
+      console.log("This is a read-only production mirror \u2014 run `wayai diff --production` from the preview workspace instead.");
+      return;
+    }
+    const { hubs } = await client.listHubs(organizationId);
+    const entry = hubs.find((h) => h.hub_id === previewHubId);
+    const productionHubId = entry?.production_hub_id ?? null;
+    if (!productionHubId) {
+      console.log("This preview has no linked production hub yet (never published) \u2014 nothing to diff against production.");
+      return;
+    }
+    targetHubId = productionHubId;
+    label = "production";
+  }
+  console.log(`Computing diff against ${label}...`);
+  const result = await client.diff(targetHubId, localConfig, "push", organizationId);
+  printWarnings(result.warnings);
+  if (!result.has_changes) {
+    console.log(`
+No differences \u2014 local files match ${label}.`);
+    return;
+  }
+  console.log(`
+Local files vs ${label.toUpperCase()}:`);
+  printDiff(result.summary);
+}
+var init_diff = __esm({
+  "src/commands/diff.ts"() {
+    "use strict";
+    init_auth();
+    init_api_client();
+    init_parser();
+    init_diff_display();
+    init_push();
+    init_pull();
+    init_repo_config();
+    init_layout();
+    init_workspace();
+  }
+});
+
 // src/commands/use.ts
 var use_exports = {};
 __export(use_exports, {
@@ -12026,10 +12148,10 @@ var init_delete_history = __esm({
 // src/commands/sync-skills.ts
 var sync_skills_exports = {};
 __export(sync_skills_exports, {
-  parseArgs: () => parseArgs6,
+  parseArgs: () => parseArgs7,
   syncSkillsCommand: () => syncSkillsCommand
 });
-function parseArgs6(args2) {
+function parseArgs7(args2) {
   let connectionId;
   const idx = args2.indexOf("--connection-id");
   if (idx !== -1 && args2[idx + 1]) {
@@ -12052,7 +12174,7 @@ function printSyncResults(response) {
 }
 async function syncSkillsCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const { connectionId } = parseArgs6(args2);
+  const { connectionId } = parseArgs7(args2);
   requireRepoConfig();
   const { config, accessToken } = await requireAuth();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
@@ -12077,10 +12199,10 @@ var init_sync_skills = __esm({
 // src/commands/sync-mcp.ts
 var sync_mcp_exports = {};
 __export(sync_mcp_exports, {
-  parseArgs: () => parseArgs7,
+  parseArgs: () => parseArgs8,
   syncMcpCommand: () => syncMcpCommand
 });
-function parseArgs7(args2) {
+function parseArgs8(args2) {
   let connection;
   for (let i = 0; i < args2.length; i++) {
     const arg = args2[i];
@@ -12092,7 +12214,7 @@ function parseArgs7(args2) {
 }
 async function syncMcpCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const { connection } = parseArgs7(args2);
+  const { connection } = parseArgs8(args2);
   if (!connection) {
     console.error("Usage: wayai sync-mcp --connection <name> [--hub <uuid|folder-name>]");
     console.error("");
@@ -12708,7 +12830,7 @@ function isValidSetName(name) {
   if (name.startsWith(".")) return false;
   return !/[\/\\\0]/.test(name);
 }
-function parseArgs8(args2) {
+function parseArgs9(args2) {
   if (args2.length === 0 || args2[0].startsWith("-")) {
     console.error("Usage: wayai eval capture <conversation_id> [--set <name>] [--name <eval_name>] [--instructions <text>]");
     process.exit(1);
@@ -12754,7 +12876,7 @@ function parseArgs8(args2) {
 }
 async function evalCaptureCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const parsed = parseArgs8(args2);
+  const parsed = parseArgs9(args2);
   const { config, accessToken } = await requireAuth();
   requireRepoConfig();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
@@ -12831,7 +12953,7 @@ var journey_capture_exports = {};
 __export(journey_capture_exports, {
   journeyCaptureCommand: () => journeyCaptureCommand
 });
-function parseArgs9(args2) {
+function parseArgs10(args2) {
   if (args2.length === 0 || args2[0].startsWith("-")) {
     console.error("Usage: wayai eval journey capture <conversation_id> [--name <journey_name>] [--instructions <text>]");
     process.exit(1);
@@ -12866,7 +12988,7 @@ function parseArgs9(args2) {
 }
 async function journeyCaptureCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const parsed = parseArgs9(args2);
+  const parsed = parseArgs10(args2);
   const { config, accessToken } = await requireAuth();
   requireRepoConfig();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
@@ -16520,9 +16642,9 @@ var init_credential_utils = __esm({
 var create_credential_exports = {};
 __export(create_credential_exports, {
   createCredentialCommand: () => createCredentialCommand,
-  parseArgs: () => parseArgs10
+  parseArgs: () => parseArgs11
 });
-function parseArgs10(args2) {
+function parseArgs11(args2) {
   let name;
   let type;
   let orgId;
@@ -16550,7 +16672,7 @@ function parseArgs10(args2) {
   return { name, type, orgId, description, tags: splitTagRefs(tags), environment, stdin };
 }
 async function createCredentialCommand(args2) {
-  const parsed = parseArgs10(args2);
+  const parsed = parseArgs11(args2);
   if (!parsed.name) {
     console.error("Missing required flag: --name <credential-name>");
     console.error('Usage: wayai create-credential --name "openai-key" --type "Bearer Token"');
@@ -16657,10 +16779,10 @@ var init_create_credential = __esm({
 // src/commands/update-credential.ts
 var update_credential_exports = {};
 __export(update_credential_exports, {
-  parseArgs: () => parseArgs11,
+  parseArgs: () => parseArgs12,
   updateCredentialCommand: () => updateCredentialCommand
 });
-function parseArgs11(args2) {
+function parseArgs12(args2) {
   let name;
   let rename;
   let orgId;
@@ -16693,7 +16815,7 @@ function parseArgs11(args2) {
   return { name, rename, orgId, description, tags: splitTagRefs(tags), hasTagFlag, environment, stdin, secretPrompt };
 }
 async function updateCredentialCommand(args2) {
-  const parsed = parseArgs11(args2);
+  const parsed = parseArgs12(args2);
   if (!parsed.name) {
     console.error("Missing required flag: --name <credential-name>");
     console.error('Usage: wayai update-credential --name "my-key" --stdin');
@@ -17052,9 +17174,9 @@ var init_org = __esm({
 var list_exports = {};
 __export(list_exports, {
   listCommand: () => listCommand,
-  parseArgs: () => parseArgs12
+  parseArgs: () => parseArgs13
 });
-function parseArgs12(args2) {
+function parseArgs13(args2) {
   let orgId;
   let json = false;
   for (let i = 0; i < args2.length; i++) {
@@ -17067,7 +17189,7 @@ function parseArgs12(args2) {
   return { orgId, json };
 }
 async function listCommand(args2) {
-  const { orgId, json } = parseArgs12(args2);
+  const { orgId, json } = parseArgs13(args2);
   const { config, accessToken } = await requireAuth();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
   const { organizations } = await client.organizations();
@@ -18629,12 +18751,12 @@ var init_admin = __esm({
 });
 
 // src/commands/report-create.ts
-import { readFileSync as readFileSync16 } from "fs";
+import { readFileSync as readFileSync17 } from "fs";
 import { dirname as dirname8, join as join24 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function getCliVersion() {
   try {
-    const pkg2 = JSON.parse(readFileSync16(join24(__dirname, "..", "..", "package.json"), "utf-8"));
+    const pkg2 = JSON.parse(readFileSync17(join24(__dirname, "..", "..", "package.json"), "utf-8"));
     return `cli@${pkg2.version}`;
   } catch {
     return "cli@unknown";
@@ -19016,7 +19138,7 @@ var init_update = __esm({
 
 // src/index.ts
 init_sentry();
-import { readFileSync as readFileSync17 } from "fs";
+import { readFileSync as readFileSync18 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { dirname as dirname9, join as join25 } from "path";
 
@@ -19195,7 +19317,7 @@ Run \`wayai admin skill install\` to update.`);
 
 // src/index.ts
 var __dirname2 = dirname9(fileURLToPath3(import.meta.url));
-var pkg = JSON.parse(readFileSync17(join25(__dirname2, "..", "package.json"), "utf-8"));
+var pkg = JSON.parse(readFileSync18(join25(__dirname2, "..", "package.json"), "utf-8"));
 var [, , command, ...args] = process.argv;
 var isBackgroundRefresh = command === REFRESH_COMMAND;
 if (!isBackgroundRefresh) initSentry(command);
@@ -19249,6 +19371,11 @@ async function main() {
       await pushCommand2(args);
       break;
     }
+    case "diff": {
+      const { diffCommand: diffCommand2 } = await Promise.resolve().then(() => (init_diff(), diff_exports));
+      await diffCommand2(args);
+      break;
+    }
     case "use": {
       const { useCommand: useCommand2 } = await Promise.resolve().then(() => (init_use(), use_exports));
       await useCommand2(args);
@@ -19388,8 +19515,9 @@ Commands:
   init               Set up .wayai.yaml (pick organization)
   create-credential  Create an organization credential (API key, token, etc.)
   update-credential  Update / rotate an organization credential (by name)
-  pull               Fetch hub config and write local files
+  pull               Fetch hub config and write local files (also mirrors the linked production hub read-only)
   push               Parse local files, show diff, sync to preview (creates hub if new)
+  diff               Dry-run diff of local files vs the platform (--production diffs vs the linked production hub)
   org create         Create a new organization (you become its owner)
   org <pull|push|diff>  Sync org-scoped resources as code (wayai-ws/org/)
   use <hub>          Bind this worktree to a specific hub (UUID or folder name)
@@ -19415,7 +19543,8 @@ Commands:
 
 Flags:
   --yes, -y              Skip confirmation prompts (useful for CI and scripting)
-  --hub <uuid|name>      Target hub when the workspace has more than one (push, pull)
+  --hub <uuid|name>      Target hub when the workspace has more than one (push, pull, diff)
+  --production           Diff local preview files against the linked production hub (diff)
   --name <name>          Credential name (create-credential; target for update-credential)
   --type <auth-type>     Auth type: "api_key", "bearer", "basic_auth" (create-credential)
   --rename <name>        New name for the credential (update-credential)