@wayai/cli 0.3.76 → 0.3.77

package/dist/index.js

@@ -165,11 +165,11 @@ function captureException2(error, context) {
     Sentry.captureException(error);
   });
 }
-function addApiBreadcrumb(method, path24) {
+function addApiBreadcrumb(method, path25) {
   if (!initialized) return;
   Sentry.addBreadcrumb({
     category: "http",
-    message: `${method} ${path24}`,
+    message: `${method} ${path25}`,
     level: "info"
   });
 }
@@ -231,9 +231,9 @@ var init_api_client = __esm({
     ApiError = class extends Error {
       status;
       body;
-      constructor(method, path24, status, body) {
+      constructor(method, path25, status, body) {
         const safeBody = redactSecrets(body);
-        super(`API request failed: ${method} ${path24} (${status}): ${safeBody}`);
+        super(`API request failed: ${method} ${path25} (${status}): ${safeBody}`);
         this.name = "ApiError";
         this.status = status;
         this.body = safeBody;
@@ -325,8 +325,8 @@ var init_api_client = __esm({
           ...organizationId && { organization_id: organizationId }
         });
       }
-      async lookup(path24, opts) {
-        const params = new URLSearchParams({ path: path24 });
+      async lookup(path25, opts) {
+        const params = new URLSearchParams({ path: path25 });
         if (opts?.organizationId) params.set("organization_id", opts.organizationId);
         return this.request("GET", `/api/ci/lookup?${params.toString()}`);
       }
@@ -543,6 +543,30 @@ var init_api_client = __esm({
           preview_label: previewLabel ?? null
         });
       }
+      /**
+       * Preview → production diff — the source of truth for what `wayai publish`
+       * will do. `data.is_first_publish` distinguishes a first publish (no linked
+       * production hub yet, all entities listed as added) from a subsequent sync.
+       * Requires only `hub:read`, so it also drives the pre-confirm preview.
+       */
+      async getHubDiff(hubId) {
+        return this.request("GET", `/api/setup/hubs/${hubId}/diff`);
+      }
+      /**
+       * First publish: clone the preview hub into a NEW production hub. Errors if the
+       * preview is already linked to production (use `syncHub` instead). Returns the
+       * new production hub id (POST /api/setup/hubs/:id/publish — HTTP 201).
+       */
+      async publishHub(hubId) {
+        return this.request("POST", `/api/setup/hubs/${hubId}/publish`);
+      }
+      /**
+       * Sync a preview hub's changes into its linked production hub
+       * (POST /api/setup/hubs/:id/sync). No-op-safe when already in sync.
+       */
+      async syncHub(hubId) {
+        return this.request("POST", `/api/setup/hubs/${hubId}/sync`);
+      }
       /**
        * Set or clear a preview hub's label (PATCH /api/setup/hubs/:id). Pass null to
        * clear. The backend trims and normalizes empty → null (max 60 chars).
@@ -715,9 +739,9 @@ var init_api_client = __esm({
           `/api/admin/data-explorer/debug/observability/${encodeURIComponent(hubId)}/conversations/${encodeURIComponent(conversationId)}${qs}`
         );
       }
-      async request(method, path24, body) {
-        addApiBreadcrumb(method, path24);
-        const url = `${this.apiUrl}${path24}`;
+      async request(method, path25, body) {
+        addApiBreadcrumb(method, path25);
+        const url = `${this.apiUrl}${path25}`;
         let refreshedOn401 = false;
         for (let retry = 0; ; retry++) {
           let response = await this.send(url, method, body);
@@ -741,7 +765,7 @@ var init_api_client = __esm({
             await delay(RETRYABLE_BACKOFF_MS[retry]);
             continue;
           }
-          throw new ApiError(method, path24, response.status, errorBody);
+          throw new ApiError(method, path25, response.status, errorBody);
         }
       }
       /** Issue a single authenticated request with the client's current token. */
@@ -1176,8 +1200,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path24, errorMaps, issueData } = params;
-      const fullPath = [...path24, ...issueData.path || []];
+      const { data, path: path25, errorMaps, issueData } = params;
+      const fullPath = [...path25, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -1488,11 +1512,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path24, key) {
+      constructor(parent, value, path25, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path24;
+        this._path = path25;
         this._key = key;
       }
       get path() {
@@ -4946,12 +4970,12 @@ function typeMatches(typeField, allowed) {
   if (Array.isArray(typeField)) return typeField.every((t) => typeof t === "string" && allowed.has(t));
   return false;
 }
-function validateSchema(schema, path24, errors, opts = {}) {
+function validateSchema(schema, path25, errors, opts = {}) {
   if (typeof schema === "boolean") return;
   const depth = opts.depth ?? 0;
   if (depth > MAX_SCHEMA_DEPTH) {
     errors.push({
-      path: path24 || "<root>",
+      path: path25 || "<root>",
       message: `schema nesting exceeds ${MAX_SCHEMA_DEPTH} levels`,
       suggestion: "Flatten the schema; LLM providers reject deeply nested tool input_schemas."
     });
@@ -4959,7 +4983,7 @@ function validateSchema(schema, path24, errors, opts = {}) {
   }
   if (!isRecord(schema)) {
     errors.push({
-      path: path24,
+      path: path25,
       message: `expected object, got ${schema === null ? "null" : typeof schema}`
     });
     return;
@@ -4967,14 +4991,14 @@ function validateSchema(schema, path24, errors, opts = {}) {
   if (opts.isRoot) {
     if ("type" in schema && schema.type !== "object") {
       errors.push({
-        path: path24 ? `${path24}.type` : "type",
+        path: path25 ? `${path25}.type` : "type",
         message: `root type must be 'object', got ${JSON.stringify(schema.type)}`,
         suggestion: "Tool parameters at the root must be an object: `{ type: 'object', properties: { ... } }`."
       });
     }
   } else if ("type" in schema && !typeMatches(schema.type, ALLOWED_TYPES)) {
     errors.push({
-      path: `${path24}.type`,
+      path: `${path25}.type`,
       message: `type must be one of ${[...ALLOWED_TYPES].join("/")} or an array of those, got ${JSON.stringify(schema.type)}`
     });
   }
@@ -4983,25 +5007,25 @@ function validateSchema(schema, path24, errors, opts = {}) {
     if (typeof e === "string") {
       const isPlaceholder = PLACEHOLDER_TOKENS.includes(e);
       errors.push({
-        path: `${path24}.enum`,
+        path: `${path25}.enum`,
         message: `enum must be a non-empty array of primitives, got string ${JSON.stringify(e)}`,
         suggestion: isPlaceholder ? "Set `operation: 'update_kanban_status'` on the tool and ensure at least one hub.kanban_status has `allowsAgentUpdate: true` so the platform can render the placeholder into a valid array." : 'Wrap the value in an array: `enum: ["value"]`.'
       });
     } else if (!Array.isArray(e)) {
       errors.push({
-        path: `${path24}.enum`,
+        path: `${path25}.enum`,
         message: `enum must be a non-empty array of primitives, got ${typeof e}`
       });
     } else if (e.length === 0) {
       errors.push({
-        path: `${path24}.enum`,
+        path: `${path25}.enum`,
         message: "enum must not be empty"
       });
     } else {
       for (let i = 0; i < e.length; i++) {
         if (!isPrimitive(e[i])) {
           errors.push({
-            path: `${path24}.enum[${i}]`,
+            path: `${path25}.enum[${i}]`,
             message: `enum entry must be a primitive (string/number/boolean/null), got ${typeof e[i]}`
           });
         }
@@ -5011,7 +5035,7 @@ function validateSchema(schema, path24, errors, opts = {}) {
   for (const key of ["exclusiveMinimum", "exclusiveMaximum"]) {
     if (key in schema && typeof schema[key] === "boolean") {
       errors.push({
-        path: `${path24}.${key}`,
+        path: `${path25}.${key}`,
         message: `${key} as boolean is draft-04 syntax; draft 2020-12 requires a numeric value`,
         suggestion: `Replace with the numeric bound, e.g. \`${key}: 0\`.`
       });
@@ -5020,45 +5044,45 @@ function validateSchema(schema, path24, errors, opts = {}) {
   if ("properties" in schema) {
     if (!isRecord(schema.properties)) {
       errors.push({
-        path: `${path24}.properties`,
+        path: `${path25}.properties`,
         message: `properties must be an object, got ${Array.isArray(schema.properties) ? "array" : typeof schema.properties}`
       });
     } else {
       for (const [propName, propSchema] of Object.entries(schema.properties)) {
-        validateSchema(propSchema, `${path24}.properties.${propName}`, errors, { depth: depth + 1 });
+        validateSchema(propSchema, `${path25}.properties.${propName}`, errors, { depth: depth + 1 });
       }
     }
   }
   if (schemaTypeIncludes(schema, "array") && "items" in schema) {
     if (Array.isArray(schema.items)) {
-      schema.items.forEach((sub, i) => validateSchema(sub, `${path24}.items[${i}]`, errors, { depth: depth + 1 }));
+      schema.items.forEach((sub, i) => validateSchema(sub, `${path25}.items[${i}]`, errors, { depth: depth + 1 }));
     } else {
-      validateSchema(schema.items, `${path24}.items`, errors, { depth: depth + 1 });
+      validateSchema(schema.items, `${path25}.items`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_OBJECT_KEYWORDS) {
     if (key in schema && isRecord(schema[key])) {
-      validateSchema(schema[key], `${path24}.${key}`, errors, { depth: depth + 1 });
+      validateSchema(schema[key], `${path25}.${key}`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_LIST_KEYWORDS) {
     const list = schema[key];
     if (Array.isArray(list)) {
-      list.forEach((sub, i) => validateSchema(sub, `${path24}.${key}[${i}]`, errors, { depth: depth + 1 }));
+      list.forEach((sub, i) => validateSchema(sub, `${path25}.${key}[${i}]`, errors, { depth: depth + 1 }));
     }
   }
   for (const key of SUBSCHEMA_MAP_KEYWORDS) {
     const map = schema[key];
     if (isRecord(map)) {
       for (const [name, sub] of Object.entries(map)) {
-        validateSchema(sub, `${path24}.${key}.${name}`, errors, { depth: depth + 1 });
+        validateSchema(sub, `${path25}.${key}.${name}`, errors, { depth: depth + 1 });
       }
     }
   }
   const reportedPaths = new Set(errors.map((e) => e.path));
   for (const [k, v] of Object.entries(schema)) {
     if (typeof v !== "string") continue;
-    const fieldPath = `${path24}.${k}`;
+    const fieldPath = `${path25}.${k}`;
     if (reportedPaths.has(fieldPath)) continue;
     for (const token of PLACEHOLDER_TOKENS) {
       if (v === token) {
@@ -5214,10 +5238,10 @@ function refineHubAsCodeLanes(config, ctx) {
     }
   }
 }
-function isSafeTemplatePath(path24) {
-  if (path24.length === 0 || path24.length > 300) return false;
-  if (path24.startsWith("/") || path24.includes("\\")) return false;
-  const segments = path24.split("/");
+function isSafeTemplatePath(path25) {
+  if (path25.length === 0 || path25.length > 300) return false;
+  if (path25.startsWith("/") || path25.includes("\\")) return false;
+  const segments = path25.split("/");
   return segments.every(
     (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
   );
@@ -8536,9 +8560,9 @@ function getVersionCachePath(filename = CLI_CACHE_FILE) {
 }
 function readVersionCache(filename = CLI_CACHE_FILE) {
   try {
-    const path24 = getVersionCachePath(filename);
-    if (!existsSync4(path24)) return null;
-    const parsed = JSON.parse(readFileSync5(path24, "utf-8"));
+    const path25 = getVersionCachePath(filename);
+    if (!existsSync4(path25)) return null;
+    const parsed = JSON.parse(readFileSync5(path25, "utf-8"));
     if (typeof parsed.lastCheck !== "number") return null;
     if (parsed.latest !== null && typeof parsed.latest !== "string") return null;
     return parsed;
@@ -8558,10 +8582,10 @@ function isVersionCacheStale(filename = CLI_CACHE_FILE, maxAgeMs = MAX_AGE_24H_M
   return Date.now() - cache.lastCheck > maxAgeMs;
 }
 function writeVersionCache(filename, cache) {
-  const path24 = getVersionCachePath(filename);
-  const dir = dirname3(path24);
+  const path25 = getVersionCachePath(filename);
+  const dir = dirname3(path25);
   if (!existsSync4(dir)) mkdirSync(dir, { recursive: true });
-  writeFileSync2(path24, JSON.stringify(cache));
+  writeFileSync2(path25, JSON.stringify(cache));
 }
 function touchVersionCache(filename) {
   writeVersionCache(filename, { lastCheck: Date.now(), latest: readVersionCache(filename)?.latest ?? null });
@@ -8600,14 +8624,14 @@ function parseFrontmatterVersion(content) {
 function findInstalledSkills(projectRoot, paths = SKILL_INSTALL_PATHS) {
   const found = [];
   for (const rel of paths) {
-    const path24 = join7(projectRoot, rel);
-    if (!existsSync5(path24)) continue;
+    const path25 = join7(projectRoot, rel);
+    if (!existsSync5(path25)) continue;
     let version = null;
     try {
-      version = parseFrontmatterVersion(readFileSync6(path24, "utf-8"));
+      version = parseFrontmatterVersion(readFileSync6(path25, "utf-8"));
     } catch {
     }
-    found.push({ path: path24, version });
+    found.push({ path: path25, version });
   }
   return found;
 }
@@ -11577,12 +11601,12 @@ function typeMatches2(typeField, allowed) {
   if (Array.isArray(typeField)) return typeField.every((t) => typeof t === "string" && allowed.has(t));
   return false;
 }
-function validateSchema2(schema, path24, errors, opts = {}) {
+function validateSchema2(schema, path25, errors, opts = {}) {
   if (typeof schema === "boolean") return;
   const depth = opts.depth ?? 0;
   if (depth > MAX_SCHEMA_DEPTH2) {
     errors.push({
-      path: path24 || "<root>",
+      path: path25 || "<root>",
       message: `schema nesting exceeds ${MAX_SCHEMA_DEPTH2} levels`,
       suggestion: "Flatten the schema; LLM providers reject deeply nested tool input_schemas."
     });
@@ -11590,7 +11614,7 @@ function validateSchema2(schema, path24, errors, opts = {}) {
   }
   if (!isRecord2(schema)) {
     errors.push({
-      path: path24,
+      path: path25,
       message: `expected object, got ${schema === null ? "null" : typeof schema}`
     });
     return;
@@ -11598,14 +11622,14 @@ function validateSchema2(schema, path24, errors, opts = {}) {
   if (opts.isRoot) {
     if ("type" in schema && schema.type !== "object") {
       errors.push({
-        path: path24 ? `${path24}.type` : "type",
+        path: path25 ? `${path25}.type` : "type",
         message: `root type must be 'object', got ${JSON.stringify(schema.type)}`,
         suggestion: "Tool parameters at the root must be an object: `{ type: 'object', properties: { ... } }`."
       });
     }
   } else if ("type" in schema && !typeMatches2(schema.type, ALLOWED_TYPES2)) {
     errors.push({
-      path: `${path24}.type`,
+      path: `${path25}.type`,
       message: `type must be one of ${[...ALLOWED_TYPES2].join("/")} or an array of those, got ${JSON.stringify(schema.type)}`
     });
   }
@@ -11614,25 +11638,25 @@ function validateSchema2(schema, path24, errors, opts = {}) {
     if (typeof e === "string") {
       const isPlaceholder = PLACEHOLDER_TOKENS2.includes(e);
       errors.push({
-        path: `${path24}.enum`,
+        path: `${path25}.enum`,
         message: `enum must be a non-empty array of primitives, got string ${JSON.stringify(e)}`,
         suggestion: isPlaceholder ? "Set `operation: 'update_kanban_status'` on the tool and ensure at least one hub.kanban_status has `allowsAgentUpdate: true` so the platform can render the placeholder into a valid array." : 'Wrap the value in an array: `enum: ["value"]`.'
       });
     } else if (!Array.isArray(e)) {
       errors.push({
-        path: `${path24}.enum`,
+        path: `${path25}.enum`,
         message: `enum must be a non-empty array of primitives, got ${typeof e}`
       });
     } else if (e.length === 0) {
       errors.push({
-        path: `${path24}.enum`,
+        path: `${path25}.enum`,
         message: "enum must not be empty"
       });
     } else {
       for (let i = 0; i < e.length; i++) {
         if (!isPrimitive2(e[i])) {
           errors.push({
-            path: `${path24}.enum[${i}]`,
+            path: `${path25}.enum[${i}]`,
             message: `enum entry must be a primitive (string/number/boolean/null), got ${typeof e[i]}`
           });
         }
@@ -11642,7 +11666,7 @@ function validateSchema2(schema, path24, errors, opts = {}) {
   for (const key of ["exclusiveMinimum", "exclusiveMaximum"]) {
     if (key in schema && typeof schema[key] === "boolean") {
       errors.push({
-        path: `${path24}.${key}`,
+        path: `${path25}.${key}`,
         message: `${key} as boolean is draft-04 syntax; draft 2020-12 requires a numeric value`,
         suggestion: `Replace with the numeric bound, e.g. \`${key}: 0\`.`
       });
@@ -11651,45 +11675,45 @@ function validateSchema2(schema, path24, errors, opts = {}) {
   if ("properties" in schema) {
     if (!isRecord2(schema.properties)) {
       errors.push({
-        path: `${path24}.properties`,
+        path: `${path25}.properties`,
         message: `properties must be an object, got ${Array.isArray(schema.properties) ? "array" : typeof schema.properties}`
       });
     } else {
       for (const [propName, propSchema] of Object.entries(schema.properties)) {
-        validateSchema2(propSchema, `${path24}.properties.${propName}`, errors, { depth: depth + 1 });
+        validateSchema2(propSchema, `${path25}.properties.${propName}`, errors, { depth: depth + 1 });
       }
     }
   }
   if (schemaTypeIncludes2(schema, "array") && "items" in schema) {
     if (Array.isArray(schema.items)) {
-      schema.items.forEach((sub, i) => validateSchema2(sub, `${path24}.items[${i}]`, errors, { depth: depth + 1 }));
+      schema.items.forEach((sub, i) => validateSchema2(sub, `${path25}.items[${i}]`, errors, { depth: depth + 1 }));
     } else {
-      validateSchema2(schema.items, `${path24}.items`, errors, { depth: depth + 1 });
+      validateSchema2(schema.items, `${path25}.items`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_OBJECT_KEYWORDS2) {
     if (key in schema && isRecord2(schema[key])) {
-      validateSchema2(schema[key], `${path24}.${key}`, errors, { depth: depth + 1 });
+      validateSchema2(schema[key], `${path25}.${key}`, errors, { depth: depth + 1 });
     }
   }
   for (const key of SUBSCHEMA_LIST_KEYWORDS2) {
     const list = schema[key];
     if (Array.isArray(list)) {
-      list.forEach((sub, i) => validateSchema2(sub, `${path24}.${key}[${i}]`, errors, { depth: depth + 1 }));
+      list.forEach((sub, i) => validateSchema2(sub, `${path25}.${key}[${i}]`, errors, { depth: depth + 1 }));
     }
   }
   for (const key of SUBSCHEMA_MAP_KEYWORDS2) {
     const map = schema[key];
     if (isRecord2(map)) {
       for (const [name, sub] of Object.entries(map)) {
-        validateSchema2(sub, `${path24}.${key}.${name}`, errors, { depth: depth + 1 });
+        validateSchema2(sub, `${path25}.${key}.${name}`, errors, { depth: depth + 1 });
       }
     }
   }
   const reportedPaths = new Set(errors.map((e) => e.path));
   for (const [k, v] of Object.entries(schema)) {
     if (typeof v !== "string") continue;
-    const fieldPath = `${path24}.${k}`;
+    const fieldPath = `${path25}.${k}`;
     if (reportedPaths.has(fieldPath)) continue;
     for (const token of PLACEHOLDER_TOKENS2) {
       if (v === token) {
@@ -11845,10 +11869,10 @@ function refineHubAsCodeLanes2(config, ctx) {
     }
   }
 }
-function isSafeTemplatePath2(path24) {
-  if (path24.length === 0 || path24.length > 300) return false;
-  if (path24.startsWith("/") || path24.includes("\\")) return false;
-  const segments = path24.split("/");
+function isSafeTemplatePath2(path25) {
+  if (path25.length === 0 || path25.length > 300) return false;
+  if (path25.startsWith("/") || path25.includes("\\")) return false;
+  const segments = path25.split("/");
   return segments.every(
     (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
   );
@@ -11876,9 +11900,9 @@ function isPlainObject(value) {
   const proto = Object.getPrototypeOf(value);
   return proto === Object.prototype || proto === null;
 }
-function isSanitizableSliceFile(path24) {
-  if (!/\.ya?ml$/i.test(path24)) return false;
-  return path24 !== "resources" && !path24.startsWith("resources/");
+function isSanitizableSliceFile(path25) {
+  if (!/\.ya?ml$/i.test(path25)) return false;
+  return path25 !== "resources" && !path25.startsWith("resources/");
 }
 function distinctUsesBackends(uses) {
   return [...new Set((uses ?? []).map((u) => u.backend))];
@@ -14567,12 +14591,153 @@ var init_relabel = __esm({
   }
 });
 
+// src/commands/publish.ts
+var publish_exports = {};
+__export(publish_exports, {
+  parseArgs: () => parseArgs9,
+  publishCommand: () => publishCommand,
+  renderHubDiff: () => renderHubDiff,
+  runPublish: () => runPublish
+});
+import * as path17 from "path";
+function parseArgs9(args2) {
+  let autoConfirm = false;
+  let hubSelector;
+  for (let i = 0; i < args2.length; i++) {
+    const arg = args2[i];
+    if (arg === "--yes" || arg === "-y") {
+      autoConfirm = true;
+    } else if (arg === "--hub" && args2[i + 1]) {
+      hubSelector = args2[++i];
+    }
+  }
+  return { autoConfirm, hubSelector };
+}
+function renderSection(title, entries) {
+  if (entries.length === 0) return;
+  console.log(`
+\x1B[1m${title}\x1B[0m`);
+  for (const e of entries) {
+    const { sym, color } = STATUS_STYLE[e.status];
+    const type = e.type ? ` (${e.type})` : "";
+    console.log(`\x1B[${color}m${sym} ${e.name}${type}\x1B[0m`);
+  }
+}
+function renderHubDiff(result) {
+  if (result.hub_changed) {
+    const { sym, color } = STATUS_STYLE[result.is_first_publish ? "added" : "updated"];
+    console.log("\n\x1B[1mHub\x1B[0m");
+    console.log(`\x1B[${color}m${sym} hub settings\x1B[0m`);
+  }
+  renderSection("Agents", result.agents);
+  renderSection("Connections", result.connections);
+  renderSection("Tools", result.tools);
+  renderSection("Channels", result.channels);
+  renderSection("States", result.states);
+  renderSection("Resources", result.resources);
+  console.log();
+}
+async function runPublish(client, opts) {
+  const { hubId, localConfig, organizationId, autoConfirm } = opts;
+  const confirmFn = opts.confirmFn ?? confirm;
+  if (localConfig) {
+    const pushDiff = await client.diff(hubId, localConfig, "push", organizationId);
+    if (pushDiff.has_changes) {
+      console.log("\n\x1B[33mYou have local changes not yet pushed to this preview.\x1B[0m");
+      console.log("Publishing promotes the PREVIEW (server) state \u2014 these local edits are NOT included.");
+      console.log("Run `wayai push` first if you want them in production.");
+      if (!autoConfirm) {
+        const ok = await confirmFn("Continue with the current preview state anyway?");
+        if (!ok) {
+          console.log("Cancelled.");
+          return "cancelled";
+        }
+      }
+    }
+  }
+  const { data: diff } = await client.getHubDiff(hubId);
+  if (!diff.has_changes && !diff.is_first_publish) {
+    console.log("Production is already up to date. Nothing to sync.");
+    return "up-to-date";
+  }
+  console.log(
+    diff.is_first_publish ? "\nPublish preview \u2192 new production hub:" : "\nSync preview \u2192 production:"
+  );
+  renderHubDiff(diff);
+  if (!autoConfirm) {
+    const ok = await confirmFn(
+      diff.is_first_publish ? "Publish to production?" : "Sync these changes to production?"
+    );
+    if (!ok) {
+      console.log("Cancelled.");
+      return "cancelled";
+    }
+  }
+  if (diff.is_first_publish) {
+    console.log("Publishing...");
+    const { data } = await client.publishHub(hubId);
+    console.log(`
+Published. Production hub: ${data.production_hub_id}`);
+    return "published";
+  }
+  console.log("Syncing...");
+  await client.syncHub(hubId);
+  console.log("\nSynced preview changes to production.");
+  return "synced";
+}
+async function publishCommand(args2) {
+  const { autoConfirm, hubSelector } = parseArgs9(args2);
+  const repoConfig = requireRepoConfig();
+  const { organization_id: organizationId } = repoConfig;
+  const { config, accessToken } = await requireAuth();
+  const client = new ApiClient({ apiUrl: config.api_url, accessToken });
+  const workspaceDir = resolveWorkspaceDir();
+  const gitRoot = findGitRoot();
+  if (gitRoot) warnLayoutOnce(gitRoot);
+  const { hubId, hubFolder } = resolveHubTarget(workspaceDir, hubSelector);
+  let localConfig = null;
+  if (hubFolder) {
+    localConfig = parseHubFolder(hubFolder);
+    if (localConfig.hub_environment === "production") {
+      console.log(
+        "This is a read-only production mirror \u2014 production hubs cannot be published. Publish the linked preview hub instead."
+      );
+      return;
+    }
+  }
+  assertHubMatchesBinding(hubId, hubFolder ? path17.basename(hubFolder) : void 0);
+  await runPublish(client, { hubId, localConfig, organizationId, autoConfirm });
+}
+var STATUS_STYLE;
+var init_publish = __esm({
+  "src/commands/publish.ts"() {
+    "use strict";
+    init_auth();
+    init_api_client();
+    init_parser();
+    init_pull();
+    init_utils();
+    init_workspace();
+    init_layout();
+    init_repo_config();
+    init_hub_binding();
+    STATUS_STYLE = {
+      added: { sym: "+", color: 32 },
+      // green
+      removed: { sym: "-", color: 31 },
+      // red
+      updated: { sym: "~", color: 33 }
+      // yellow
+    };
+  }
+});
+
 // src/commands/use.ts
 var use_exports = {};
 __export(use_exports, {
   useCommand: () => useCommand
 });
-import * as path17 from "path";
+import * as path18 from "path";
 async function useCommand(args2) {
   const target = args2[0];
   if (!target || target.startsWith("-")) {
@@ -14595,7 +14760,7 @@ async function useCommand(args2) {
     if (!match) {
       console.error(`No hub matching "${target}" found in ${wsLabel}/. Pass a UUID or a folder name from:`);
       for (const h of scanWorkspaceHubs(workspaceDir)) {
-        console.error(`  ${path17.basename(h.hubFolder)} (${h.hubId})`);
+        console.error(`  ${path18.basename(h.hubFolder)} (${h.hubId})`);
       }
       process.exit(1);
     }
@@ -14635,10 +14800,10 @@ __export(migrate_exports, {
 });
 import { execFileSync as execFileSync3 } from "child_process";
 import * as fs14 from "fs";
-import * as path18 from "path";
+import * as path19 from "path";
 function isTracked(gitRoot, p) {
   try {
-    execFileSync3("git", ["ls-files", "--error-unmatch", "--", path18.relative(gitRoot, p)], {
+    execFileSync3("git", ["ls-files", "--error-unmatch", "--", path19.relative(gitRoot, p)], {
       cwd: gitRoot,
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -14648,10 +14813,10 @@ function isTracked(gitRoot, p) {
   }
 }
 function moveDir(gitRoot, from, to) {
-  fs14.mkdirSync(path18.dirname(to), { recursive: true });
+  fs14.mkdirSync(path19.dirname(to), { recursive: true });
   if (isTracked(gitRoot, from)) {
     try {
-      execFileSync3("git", ["mv", path18.relative(gitRoot, from), path18.relative(gitRoot, to)], {
+      execFileSync3("git", ["mv", path19.relative(gitRoot, from), path19.relative(gitRoot, to)], {
         cwd: gitRoot,
         stdio: ["pipe", "pipe", "pipe"]
       });
@@ -14668,12 +14833,12 @@ async function migrateCommand(_args) {
     console.error("Not inside a git repository.");
     process.exit(1);
   }
-  const rel = (p) => path18.relative(gitRoot, p);
-  const newWs = path18.join(gitRoot, WAYAI_LAYOUT.wsDir);
-  const legacyWs = path18.join(gitRoot, WAYAI_LAYOUT.legacy.wsDir);
-  const legacyOrg = path18.join(gitRoot, WAYAI_LAYOUT.legacy.orgAtRoot);
-  const newHubs = path18.join(newWs, WAYAI_LAYOUT.hubsSubdir);
-  const newOrg = path18.join(newWs, WAYAI_LAYOUT.orgSubdir);
+  const rel = (p) => path19.relative(gitRoot, p);
+  const newWs = path19.join(gitRoot, WAYAI_LAYOUT.wsDir);
+  const legacyWs = path19.join(gitRoot, WAYAI_LAYOUT.legacy.wsDir);
+  const legacyOrg = path19.join(gitRoot, WAYAI_LAYOUT.legacy.orgAtRoot);
+  const newHubs = path19.join(newWs, WAYAI_LAYOUT.hubsSubdir);
+  const newOrg = path19.join(newWs, WAYAI_LAYOUT.orgSubdir);
   const hasLegacyWs = isDirectory(legacyWs);
   const hasLegacyOrg = isDirectory(legacyOrg);
   if (!hasLegacyWs && !hasLegacyOrg) {
@@ -15307,10 +15472,10 @@ var init_delete_history = __esm({
 // src/commands/sync-skills.ts
 var sync_skills_exports = {};
 __export(sync_skills_exports, {
-  parseArgs: () => parseArgs9,
+  parseArgs: () => parseArgs10,
   syncSkillsCommand: () => syncSkillsCommand
 });
-function parseArgs9(args2) {
+function parseArgs10(args2) {
   let connectionId;
   const idx = args2.indexOf("--connection-id");
   if (idx !== -1 && args2[idx + 1]) {
@@ -15333,7 +15498,7 @@ function printSyncResults(response) {
 }
 async function syncSkillsCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const { connectionId } = parseArgs9(args2);
+  const { connectionId } = parseArgs10(args2);
   requireRepoConfig();
   const { config, accessToken } = await requireAuth();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
@@ -15358,10 +15523,10 @@ var init_sync_skills = __esm({
 // src/commands/sync-mcp.ts
 var sync_mcp_exports = {};
 __export(sync_mcp_exports, {
-  parseArgs: () => parseArgs10,
+  parseArgs: () => parseArgs11,
   syncMcpCommand: () => syncMcpCommand
 });
-function parseArgs10(args2) {
+function parseArgs11(args2) {
   let connection;
   for (let i = 0; i < args2.length; i++) {
     const arg = args2[i];
@@ -15373,7 +15538,7 @@ function parseArgs10(args2) {
 }
 async function syncMcpCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const { connection } = parseArgs10(args2);
+  const { connection } = parseArgs11(args2);
   if (!connection) {
     console.error("Usage: wayai sync-mcp --connection <name> [--hub <uuid|folder-name>]");
     console.error("");
@@ -15982,14 +16147,14 @@ __export(eval_capture_exports, {
   evalCaptureCommand: () => evalCaptureCommand
 });
 import * as fs15 from "fs";
-import * as path19 from "path";
+import * as path20 from "path";
 import * as yaml7 from "js-yaml";
 function isValidSetName(name) {
   if (name.length === 0 || name === "." || name === "..") return false;
   if (name.startsWith(".")) return false;
   return !/[\/\\\0]/.test(name);
 }
-function parseArgs11(args2) {
+function parseArgs12(args2) {
   if (args2.length === 0 || args2[0].startsWith("-")) {
     console.error("Usage: wayai eval capture <conversation_id> [--set <name>] [--name <eval_name>] [--instructions <text>]");
     process.exit(1);
@@ -16035,7 +16200,7 @@ function parseArgs11(args2) {
 }
 async function evalCaptureCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const parsed = parseArgs11(args2);
+  const parsed = parseArgs12(args2);
   const { config, accessToken } = await requireAuth();
   requireRepoConfig();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
@@ -16048,15 +16213,15 @@ async function evalCaptureCommand(args2) {
   const setFolderName = targetSetName;
   const scenarioName = parsed.evalName ?? `Capture ${parsed.conversationId.slice(0, 8)}`;
   const slug = slugify(scenarioName);
-  const evalsDir = path19.join(hubFolder, "evals");
-  const targetDir = path19.join(evalsDir, setFolderName);
-  const targetPath = path19.join(targetDir, `${slug}.yaml`);
-  if (!targetPath.startsWith(evalsDir + path19.sep)) {
-    console.error(`Resolved path "${path19.relative(hubFolder, targetPath)}" escapes evals/. Aborting.`);
+  const evalsDir = path20.join(hubFolder, "evals");
+  const targetDir = path20.join(evalsDir, setFolderName);
+  const targetPath = path20.join(targetDir, `${slug}.yaml`);
+  if (!targetPath.startsWith(evalsDir + path20.sep)) {
+    console.error(`Resolved path "${path20.relative(hubFolder, targetPath)}" escapes evals/. Aborting.`);
     process.exit(1);
   }
   if (fs15.existsSync(targetPath)) {
-    console.error(`File already exists: ${path19.relative(hubFolder, targetPath)}. Use --name to choose a different name.`);
+    console.error(`File already exists: ${path20.relative(hubFolder, targetPath)}. Use --name to choose a different name.`);
     process.exit(1);
   }
   console.log("Resolving scenario set...");
@@ -16090,7 +16255,7 @@ async function evalCaptureCommand(args2) {
   const yamlObj = buildEvalYamlObject(evalEntry, slug);
   fs15.mkdirSync(targetDir, { recursive: true });
   fs15.writeFileSync(targetPath, yaml7.dump(yamlObj, YAML_DUMP_OPTIONS), "utf-8");
-  const relPath = path19.relative(process.cwd(), targetPath);
+  const relPath = path20.relative(process.cwd(), targetPath);
   console.log(`
 Wrote ${relPath}`);
   console.log("Run `wayai pull` to refresh the agent display name, then commit. The scenario is already on the platform.");
@@ -16112,7 +16277,7 @@ var journey_capture_exports = {};
 __export(journey_capture_exports, {
   journeyCaptureCommand: () => journeyCaptureCommand
 });
-function parseArgs12(args2) {
+function parseArgs13(args2) {
   if (args2.length === 0 || args2[0].startsWith("-")) {
     console.error("Usage: wayai eval journey capture <conversation_id> [--name <journey_name>] [--instructions <text>]");
     process.exit(1);
@@ -16147,7 +16312,7 @@ function parseArgs12(args2) {
 }
 async function journeyCaptureCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const parsed = parseArgs12(args2);
+  const parsed = parseArgs13(args2);
   const { config, accessToken } = await requireAuth();
   requireRepoConfig();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
@@ -16944,9 +17109,9 @@ var init_credential_utils = __esm({
 var create_credential_exports = {};
 __export(create_credential_exports, {
   createCredentialCommand: () => createCredentialCommand,
-  parseArgs: () => parseArgs13
+  parseArgs: () => parseArgs14
 });
-function parseArgs13(args2) {
+function parseArgs14(args2) {
   let name;
   let type;
   let orgId;
@@ -16974,7 +17139,7 @@ function parseArgs13(args2) {
   return { name, type, orgId, description, tags: splitTagRefs(tags), environment, stdin };
 }
 async function createCredentialCommand(args2) {
-  const parsed = parseArgs13(args2);
+  const parsed = parseArgs14(args2);
   if (!parsed.name) {
     console.error("Missing required flag: --name <credential-name>");
     console.error('Usage: wayai create-credential --name "openai-key" --type "Bearer Token"');
@@ -17081,10 +17246,10 @@ var init_create_credential = __esm({
 // src/commands/update-credential.ts
 var update_credential_exports = {};
 __export(update_credential_exports, {
-  parseArgs: () => parseArgs14,
+  parseArgs: () => parseArgs15,
   updateCredentialCommand: () => updateCredentialCommand
 });
-function parseArgs14(args2) {
+function parseArgs15(args2) {
   let name;
   let rename;
   let orgId;
@@ -17117,7 +17282,7 @@ function parseArgs14(args2) {
   return { name, rename, orgId, description, tags: splitTagRefs(tags), hasTagFlag, environment, stdin, secretPrompt };
 }
 async function updateCredentialCommand(args2) {
-  const parsed = parseArgs14(args2);
+  const parsed = parseArgs15(args2);
   if (!parsed.name) {
     console.error("Missing required flag: --name <credential-name>");
     console.error('Usage: wayai update-credential --name "my-key" --stdin');
@@ -17222,10 +17387,10 @@ var init_update_credential = __esm({
 // src/commands/set-connection-credential.ts
 var set_connection_credential_exports = {};
 __export(set_connection_credential_exports, {
-  parseArgs: () => parseArgs15,
+  parseArgs: () => parseArgs16,
   setConnectionCredentialCommand: () => setConnectionCredentialCommand
 });
-function parseArgs15(args2) {
+function parseArgs16(args2) {
   let connection;
   let orgCredential;
   let field;
@@ -17248,7 +17413,7 @@ function usage(msg) {
 }
 async function setConnectionCredentialCommand(args2) {
   const hubId = resolveActiveHubId(args2);
-  const parsed = parseArgs15(args2);
+  const parsed = parseArgs16(args2);
   if (!parsed.connection) usage("Missing required flag: --connection <name|id>");
   const orgMode = !!parsed.orgCredential;
   const directMode = !!parsed.field;
@@ -17318,22 +17483,22 @@ var init_set_connection_credential = __esm({
 
 // src/lib/org-workspace.ts
 import * as fs16 from "fs";
-import * as path20 from "path";
+import * as path21 from "path";
 import * as yaml8 from "js-yaml";
 function getOrgDir(gitRoot) {
   return resolveLayout(gitRoot).orgDir;
 }
 function orgManifestExists(orgDir) {
-  return fs16.existsSync(path20.join(orgDir, ORG_MANIFEST_NAME));
+  return fs16.existsSync(path21.join(orgDir, ORG_MANIFEST_NAME));
 }
 function parseOrgResources(orgDir) {
-  const manifestPath = path20.join(orgDir, ORG_MANIFEST_NAME);
+  const manifestPath = path21.join(orgDir, ORG_MANIFEST_NAME);
   let manifest = {};
   if (fs16.existsSync(manifestPath)) {
     manifest = yaml8.load(fs16.readFileSync(manifestPath, "utf-8")) ?? {};
   }
   const rawResources = Array.isArray(manifest.resources) ? manifest.resources : [];
-  const resourcesDir = path20.join(orgDir, "resources");
+  const resourcesDir = path21.join(orgDir, "resources");
   const resources = rawResources.map((res) => {
     const resource = { name: res.name };
     if (res.id) resource.id = res.id;
@@ -17345,7 +17510,7 @@ function parseOrgResources(orgDir) {
     if (res.environment) resource.environment = res.environment;
     if (Array.isArray(res.tags)) resource.tags = res.tags;
     if (Array.isArray(res.folders)) resource.folders = res.folders;
-    const resDir = path20.join(resourcesDir, slugify(resource.name));
+    const resDir = path21.join(resourcesDir, slugify(resource.name));
     if (fs16.existsSync(resDir)) {
       const files = scanResourceFiles(resDir, "");
       if (files.length > 0) resource.files = files;
@@ -17362,21 +17527,21 @@ function writeOrgResources(orgDir, payload) {
     return rest;
   });
   fs16.writeFileSync(
-    path20.join(orgDir, ORG_MANIFEST_NAME),
+    path21.join(orgDir, ORG_MANIFEST_NAME),
     yaml8.dump({ version: 1, resources: manifestResources }, YAML_DUMP_OPTIONS),
     "utf-8"
   );
-  const resourcesDir = path20.join(orgDir, "resources");
+  const resourcesDir = path21.join(orgDir, "resources");
   const currentSlugs = /* @__PURE__ */ new Set();
   for (const resource of resources) {
     const resSlug = slugify(resource.name);
     currentSlugs.add(resSlug);
-    writeResourceFileTree(path20.join(resourcesDir, resSlug), resource.files || []);
+    writeResourceFileTree(path21.join(resourcesDir, resSlug), resource.files || []);
   }
   if (fs16.existsSync(resourcesDir)) {
     for (const entry of fs16.readdirSync(resourcesDir, { withFileTypes: true })) {
       if (entry.isDirectory() && !currentSlugs.has(entry.name)) {
-        fs16.rmSync(path20.join(resourcesDir, entry.name), { recursive: true, force: true });
+        fs16.rmSync(path21.join(resourcesDir, entry.name), { recursive: true, force: true });
       }
     }
   }
@@ -17385,7 +17550,7 @@ async function downloadOrgBinaryFiles(orgDir, payload) {
   let count = 0;
   for (const resource of payload.resources ?? []) {
     if (!resource.files) continue;
-    const resDir = path20.join(orgDir, "resources", slugify(resource.name));
+    const resDir = path21.join(orgDir, "resources", slugify(resource.name));
     count += await downloadBinaryFiles(resDir, resource.files);
   }
   if (count > 0) console.log(`Downloaded ${count} binary resource file(s).`);
@@ -17573,9 +17738,9 @@ var init_org = __esm({
 var list_exports = {};
 __export(list_exports, {
   listCommand: () => listCommand,
-  parseArgs: () => parseArgs16
+  parseArgs: () => parseArgs17
 });
-function parseArgs16(args2) {
+function parseArgs17(args2) {
   let orgId;
   let json = false;
   for (let i = 0; i < args2.length; i++) {
@@ -17588,7 +17753,7 @@ function parseArgs16(args2) {
   return { orgId, json };
 }
 async function listCommand(args2) {
-  const { orgId, json } = parseArgs16(args2);
+  const { orgId, json } = parseArgs17(args2);
   const { config, accessToken } = await requireAuth();
   const client = new ApiClient({ apiUrl: config.api_url, accessToken });
   const { organizations } = await client.organizations();
@@ -17642,13 +17807,13 @@ var init_list = __esm({
 
 // src/lib/template-files.ts
 import * as fs17 from "fs";
-import * as path21 from "path";
+import * as path22 from "path";
 function readDirToFileMap(rootDir) {
   const out = {};
   function walk(dir, prefix) {
     const entries = fs17.readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
-      const abs = path21.join(dir, entry.name);
+      const abs = path22.join(dir, entry.name);
       const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
       if (entry.isDirectory()) walk(abs, rel);
       else if (entry.isFile()) out[rel] = fs17.readFileSync(abs, "utf-8");
@@ -17663,7 +17828,7 @@ function detectCollisions(targetDir, files) {
     if (!isSafeTemplatePath2(rel)) {
       throw new Error(`Refusing to inspect unsafe template path: ${rel}`);
     }
-    if (fs17.existsSync(path21.join(targetDir, rel))) collisions.push(rel);
+    if (fs17.existsSync(path22.join(targetDir, rel))) collisions.push(rel);
   }
   return collisions.sort((a, b) => a.localeCompare(b));
 }
@@ -17673,8 +17838,8 @@ function writeFileMap(targetDir, files) {
     if (!isSafeTemplatePath2(rel)) {
       throw new Error(`Refusing to write unsafe template path: ${rel}`);
     }
-    const abs = path21.join(targetDir, rel);
-    fs17.mkdirSync(path21.dirname(abs), { recursive: true });
+    const abs = path22.join(targetDir, rel);
+    fs17.mkdirSync(path22.dirname(abs), { recursive: true });
     fs17.writeFileSync(abs, body, "utf-8");
     written.push(rel);
   }
@@ -17685,7 +17850,7 @@ function listDirRelFiles(dir) {
   function walk(d, prefix) {
     for (const entry of fs17.readdirSync(d, { withFileTypes: true })) {
       const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-      if (entry.isDirectory()) walk(path21.join(d, entry.name), rel);
+      if (entry.isDirectory()) walk(path22.join(d, entry.name), rel);
       else if (entry.isFile()) out.push(rel);
     }
   }
@@ -17712,7 +17877,7 @@ var templates_exports = {};
 __export(templates_exports, {
   templateCommand: () => templateCommand
 });
-import * as path22 from "path";
+import * as path23 from "path";
 async function templateCommand(args2) {
   const [sub, ...rest] = args2;
   switch (sub) {
@@ -17828,8 +17993,8 @@ async function runTemplatePull(rest) {
     console.log(`Template "${slug}" has no WayAI slice${hint}`);
     return;
   }
-  const targetDir = path22.join(resolveLayout(gitRoot).hubsDir, slug);
-  const relTarget = path22.relative(gitRoot, targetDir);
+  const targetDir = path23.join(resolveLayout(gitRoot).hubsDir, slug);
+  const relTarget = path23.relative(gitRoot, targetDir);
   const collisions = detectCollisions(targetDir, detail.files);
   if (dryRun) {
     const planned = Object.keys(detail.files).sort((a, b) => a.localeCompare(b));
@@ -18004,7 +18169,7 @@ __export(admin_exports, {
   adminCommand: () => adminCommand
 });
 import * as fs18 from "fs";
-import * as path23 from "path";
+import * as path24 from "path";
 import * as yaml10 from "js-yaml";
 async function adminCommand(args2) {
   const [group, ...afterGroup] = args2;
@@ -18383,10 +18548,10 @@ function loadTemplateManifest(slug) {
     console.error("Not in a git repository. Run from the tutorials/ authoring repo.");
     process.exit(1);
   }
-  const templateDir = path23.join(resolveTemplatesDir(gitRoot), slug);
-  const manifestPath = path23.join(templateDir, "template.yaml");
+  const templateDir = path24.join(resolveTemplatesDir(gitRoot), slug);
+  const manifestPath = path24.join(templateDir, "template.yaml");
   if (!fs18.existsSync(manifestPath)) {
-    console.error(`template.yaml not found at ${path23.relative(gitRoot, manifestPath)}`);
+    console.error(`template.yaml not found at ${path24.relative(gitRoot, manifestPath)}`);
     process.exit(1);
   }
   let manifest;
@@ -18421,19 +18586,19 @@ async function runTemplatePush(positional) {
     const wayaiEntry = manifest.wayai.locales[locale];
     let wayaiFiles;
     if (wayaiEntry) {
-      const sliceDir = path23.resolve(templateDir, wayaiEntry.source);
+      const sliceDir = path24.resolve(templateDir, wayaiEntry.source);
       if (!fs18.existsSync(sliceDir)) {
         console.error(`wayai source not found for ${locale}: ${wayaiEntry.source} (resolved ${sliceDir})`);
         process.exit(1);
       }
       if (!isInsideTemplateDir(sliceDir, templateDir)) {
         console.warn(
-          `Note: ${locale} source points at a live hub (${wayaiEntry.source}); it can go stale on a hub recreate. Run \`wayai admin template freeze ${slug} --locale ${locale} --from ${path23.basename(sliceDir)}\` to commit a stable frozen slice.`
+          `Note: ${locale} source points at a live hub (${wayaiEntry.source}); it can go stale on a hub recreate. Run \`wayai admin template freeze ${slug} --locale ${locale} --from ${path24.basename(sliceDir)}\` to commit a stable frozen slice.`
         );
       }
       wayaiFiles = readDirToFileMap(sliceDir);
     }
-    const readmePath = path23.join(templateDir, `README.${locale}.md`);
+    const readmePath = path24.join(templateDir, `README.${locale}.md`);
     const readmeMarkdown = fs18.existsSync(readmePath) ? fs18.readFileSync(readmePath, "utf-8") : "";
     locales[locale] = {
       readmeMarkdown,
@@ -18445,9 +18610,9 @@ async function runTemplatePush(positional) {
   }
   let hero;
   if (manifest.hero) {
-    const heroPath = path23.resolve(templateDir, manifest.hero);
+    const heroPath = path24.resolve(templateDir, manifest.hero);
     if (fs18.existsSync(heroPath)) {
-      hero = { filename: path23.basename(heroPath), dataBase64: fs18.readFileSync(heroPath).toString("base64") };
+      hero = { filename: path24.basename(heroPath), dataBase64: fs18.readFileSync(heroPath).toString("base64") };
     } else {
       console.error(`Warning: hero not found at ${manifest.hero}; skipping.`);
     }
@@ -18473,7 +18638,7 @@ async function runTemplatePush(positional) {
   }
 }
 function isInsideTemplateDir(dest, templateDir) {
-  return dest === templateDir || dest.startsWith(templateDir + path23.sep);
+  return dest === templateDir || dest.startsWith(templateDir + path24.sep);
 }
 async function runTemplateFreeze(positional, flagArgs) {
   const slug = positional[0];
@@ -18534,7 +18699,7 @@ async function runTemplateFreeze(positional, flagArgs) {
     process.exit(1);
   }
   const entry = manifest.wayai.locales[targetLocale];
-  const dest = path23.resolve(templateDir, entry.source);
+  const dest = path24.resolve(templateDir, entry.source);
   if (!isInsideTemplateDir(dest, templateDir) || dest === templateDir) {
     console.error(
       `source for "${targetLocale}" must be a committed path inside ${slug}/ (e.g. "./${targetLocale}/slice"), but resolved to:
@@ -18553,7 +18718,7 @@ Set it to a subdir of the template folder and re-run freeze.`
     const hubs = scanWorkspaceHubs(hubsDir);
     if (hubs.length) {
       console.error("Available hubs:");
-      for (const h of hubs) console.error(`  ${path23.basename(h.hubFolder)} (${h.hubId})`);
+      for (const h of hubs) console.error(`  ${path24.basename(h.hubFolder)} (${h.hubId})`);
     }
     console.error(`
 Pass --from <folder|uuid>${selector ? "." : " or run `wayai use <hub>` first."}`);
@@ -18561,12 +18726,12 @@ Pass --from <folder|uuid>${selector ? "." : " or run `wayai use <hub>` first."}`
   }
   const liveFiles = readDirToFileMap(hubFolder);
   if (Object.keys(liveFiles).length === 0) {
-    console.error(`Source hub folder has no files to freeze: ${path23.relative(gitRoot, hubFolder)}`);
+    console.error(`Source hub folder has no files to freeze: ${path24.relative(gitRoot, hubFolder)}`);
     process.exit(1);
   }
   const sanitized = sanitizeWayaiSliceFiles(liveFiles);
-  const relDest = path23.relative(gitRoot, dest);
-  const relSrc = path23.relative(gitRoot, hubFolder);
+  const relDest = path24.relative(gitRoot, dest);
+  const relSrc = path24.relative(gitRoot, hubFolder);
   if (dryRun) {
     const existing = new Set(listDirRelFiles(dest));
     const nextKeys = new Set(Object.keys(sanitized));
@@ -18626,7 +18791,7 @@ async function runTemplatePull2(positional, flagArgs) {
     console.log(JSON.stringify(detail, null, 2));
     return;
   }
-  const target = outDir ? path23.resolve(outDir) : path23.join(process.cwd(), "template-store-pull", slug);
+  const target = outDir ? path24.resolve(outDir) : path24.join(process.cwd(), "template-store-pull", slug);
   const written = writeFileMap(target, detail.files);
   console.log(`Pulled "${slug}" from the store \u2192 ${target} (${written.length} file${written.length === 1 ? "" : "s"}).`);
   const uses = detail.uses ?? [];
@@ -18649,13 +18814,13 @@ async function runSkillInstall(positional) {
     throw err;
   }
   const root = findGitRoot() ?? process.cwd();
-  const present = HARNESS_SKILL_DIRS.filter((dir) => fs18.existsSync(path23.join(root, dir)));
+  const present = HARNESS_SKILL_DIRS.filter((dir) => fs18.existsSync(path24.join(root, dir)));
   const targets = present.length > 0 ? present : HARNESS_SKILL_DIRS;
   const fileCount = Object.keys(res.files).length;
   const relDirs = targets.map((harness) => {
-    const targetDir = path23.join(root, harness, "skills", name);
+    const targetDir = path24.join(root, harness, "skills", name);
     writeFileMap(targetDir, res.files);
-    return `${path23.relative(root, targetDir)}/`;
+    return `${path24.relative(root, targetDir)}/`;
   });
   console.log(`Installed skill "${name}" (${fileCount} file${fileCount === 1 ? "" : "s"}) \u2192 ${relDirs.join(", ")}`);
   console.log("Reload your agent (e.g. restart Claude Code) to pick up the skill.");
@@ -19549,6 +19714,9 @@ function friendlyHint(err) {
     return "Couldn't reach WayAI \u2014 check your network connection and try again.";
   }
   if (!(err instanceof ApiError)) return null;
+  if (err.body.includes("FREE_PLAN_RESTRICTION")) {
+    return "Publishing to production requires a paid plan. Upgrade your organization to publish or sync.";
+  }
   const { status } = err;
   if (status === 401) return "Your session may have expired. Run `wayai login` to re-authenticate.";
   if (status === 402) return "Quota exceeded for your plan. Review usage or upgrade your plan.";
@@ -19785,6 +19953,14 @@ async function main() {
       await relabelCommand2(args);
       break;
     }
+    // `sync` is a bare alias of `publish` (distinct from `sync-skills` / `sync-mcp`,
+    // which are exact-string cases). Both promote preview → production.
+    case "publish":
+    case "sync": {
+      const { publishCommand: publishCommand2 } = await Promise.resolve().then(() => (init_publish(), publish_exports));
+      await publishCommand2(args);
+      break;
+    }
     case "use": {
       const { useCommand: useCommand2 } = await Promise.resolve().then(() => (init_use(), use_exports));
       await useCommand2(args);
@@ -19935,6 +20111,8 @@ Commands:
   diff               Dry-run diff of local files vs the platform (--production diffs vs the linked production hub)
   replicate          Clone a hub into a new sibling preview (--label to name it)
   relabel            Set a preview hub's label (--clear to remove it)
+  publish            Promote the preview to production (first publish clones it; subsequent runs sync changes)
+  sync               Alias of \`publish\` (not to be confused with sync-skills / sync-mcp)
   org create         Create a new organization (you become its owner)
   org <pull|push|diff>  Sync org-scoped resources as code (wayai-ws/org/)
   use <hub>          Bind this worktree to a specific hub (UUID or folder name)
@@ -19960,7 +20138,7 @@ Commands:
 
 Flags:
   --yes, -y              Skip confirmation prompts (useful for CI and scripting)
-  --hub <uuid|name>      Target hub when the workspace has more than one (push, pull, diff, replicate, relabel)
+  --hub <uuid|name>      Target hub when the workspace has more than one (push, pull, diff, replicate, relabel, publish)
   --production           Diff local preview files against the linked production hub (diff)
   --label <name>         Preview label \u2014 for the new sibling (replicate) or a brand-new hub (push on create)
   --clear                Remove the preview label (relabel)