@whop/cli 1.0.0-beta.1 → 1.0.0-beta.2

package/README.md

@@ -42,7 +42,7 @@ brew install whopio/tap/whop
 npm install -g @whop/cli
 ```
 
-Prebuilt binaries cover macOS, Linux (glibc and musl) and Windows, on arm64 and x64 ([releases](https://github.com/whopio/whop-public-cli/releases)). The installers put `whop` in `~/.local/bin` (`%USERPROFILE%\.local\bin` on Windows; set `WHOP_INSTALL_DIR` to choose another directory) and do not edit your shell profile. If `whop` is not found after installing, add that directory to your `PATH`:
+Prebuilt binaries cover macOS, Linux (glibc and musl) and Windows, on arm64 and x64. On Alpine and other musl distributions, install `libstdc++` and `libgcc` first (`apk add libstdc++ libgcc`) ([releases](https://github.com/whopio/whop-public-cli/releases)). The installers put `whop` in `~/.local/bin` (`%USERPROFILE%\.local\bin` on Windows; set `WHOP_INSTALL_DIR` to choose another directory) and do not edit your shell profile. If `whop` is not found after installing, add that directory to your `PATH`:
 
 ```bash
 export PATH="$HOME/.local/bin:$PATH"
@@ -277,7 +277,7 @@ WHOP_CLI_AUDIT_LOG=0 whop …               # disable logging
 
 ## Updating
 
-Standalone installs on macOS and Linux check GitHub hourly and replace themselves with the verified release in the background; set `WHOP_CLI_AUTO_UPDATE=0` to get only a notice. Elsewhere, an interactive terminal tells you when a newer release is out. `whop --update` installs it now: standalone installs replace themselves with the verified GitHub release, and npm installs run your package manager's global install. Homebrew installs update with `brew upgrade whop`. Set `NO_UPDATE_NOTIFIER=1` to turn off update checks.
+Standalone installs on macOS and Linux check GitHub hourly and replace themselves with the verified release in the background; set `WHOP_CLI_AUTO_UPDATE=0` to get only a notice. Elsewhere, an interactive terminal tells you when a newer release is out. `whop --update` (or `whop upgrade`) installs it now, and exits 0 when you are already up to date: standalone installs replace themselves with the verified GitHub release, and npm installs run your package manager's global install. Homebrew installs update with `brew upgrade whop`. Set `NO_UPDATE_NOTIFIER=1` to turn off update checks.
 
 `whop --version` prints the installed version; `whop --help` also shows the API version the CLI speaks. A standalone 0.x install updates itself to 1.x.
 

package/dist/{chunk-5BVHPPST.js → chunk-63Z4GX2Q.js}

@@ -51,7 +51,7 @@ import {
   upsertProfile,
   validateApiKey,
   whopApiFetch
-} from "./chunk-FE7JREX4.js";
+} from "./chunk-CD4COZVJ.js";
 import {
   external_exports
 } from "./chunk-EDYYHINV.js";
@@ -5312,4 +5312,4 @@ export {
   performLogin,
   cli_default
 };
-//# sourceMappingURL=chunk-5BVHPPST.js.map
+//# sourceMappingURL=chunk-63Z4GX2Q.js.map

package/dist/{chunk-FE7JREX4.js → chunk-CD4COZVJ.js}

@@ -7,7 +7,7 @@ import {
   __export
 } from "./chunk-M2N2M5EJ.js";
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Errors.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Errors.ts
 var Errors_exports = {};
 __export(Errors_exports, {
   BaseError: () => BaseError,
@@ -89,7 +89,7 @@ function walk(error, fn) {
   return current;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Openapi.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Openapi.ts
 var Openapi_exports = {};
 __export(Openapi_exports, {
   coerceIfNeeded: () => coerceIfNeeded,
@@ -99,7 +99,7 @@ __export(Openapi_exports, {
   toZod: () => toZod
 });
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Cli.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Cli.ts
 var Cli_exports = {};
 __export(Cli_exports, {
   collectSkillCommands: () => collectSkillCommands,
@@ -204,7 +204,7 @@ function extractSegmentPart(segment, segmentTokenStart, segmentTokenCount, targe
   return segment.slice(charStart, charEnd);
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Binary.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Binary.ts
 var Binary_exports = {};
 __export(Binary_exports, {
   applyFlag: () => applyFlag,
@@ -221,13 +221,13 @@ import * as path2 from "path";
 import * as util from "util";
 import * as zlib from "zlib";
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/update.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/update.ts
 import * as childProcess from "child_process";
 import * as fs2 from "fs";
 import * as os from "os";
 import * as path from "path";
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/pm.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/pm.ts
 import * as fs from "fs";
 function detectPackageManager() {
   const userAgent = process.env.npm_config_user_agent ?? "";
@@ -265,7 +265,7 @@ function globalInstall(name2) {
   return { args: ["install", "--global", `${name2}@latest`], command: "npm" };
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/update.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/update.ts
 var defaultInterval = 24 * 60 * 60 * 1e3;
 var checkFlag = "--incur-update-check";
 function check(name2, options = {}) {
@@ -299,6 +299,21 @@ async function refresh(name2, options = {}) {
 async function install(name2, options = {}) {
   const provider = resolveProvider(name2, options);
   if (!provider?.install) throw new Error(`No update installer is configured for '${name2}'.`);
+  if (provider.check && provider.current) {
+    let latest;
+    let checked = true;
+    try {
+      latest = await provider.check({
+        current: provider.current,
+        name: name2,
+        ...provider.package ? { package: provider.package } : void 0
+      });
+    } catch {
+      checked = false;
+    }
+    if (checked && (!latest || !isNewerVersion(latest, provider.current)))
+      return { current: provider.current, name: provider.name, upToDate: true };
+  }
   const cached2 = readCache(cachePath(provider.key));
   await provider.install({
     ...provider.current ? { current: provider.current } : void 0,
@@ -490,10 +505,11 @@ function notificationsDisabled() {
   return Boolean(process.env.CI && process.env.CI !== "false");
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Binary.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Binary.ts
 var githubApi = "https://api.github.com";
 var requestTimeout = 1e4;
 var downloadTimeout = 12e4;
+var staleArtifactAge = 10 * 60 * 1e3;
 var handoffTimeout = 6e4;
 var gunzip2 = util.promisify(zlib.gunzip);
 var applyFlag = "--incur-binary-apply";
@@ -525,8 +541,7 @@ function github(options) {
 }
 async function handleArgv(argv = process.argv.slice(2)) {
   if (argv[0] !== applyFlag) {
-    if (process.platform === "win32" && name && target && version)
-      await cleanupArtifacts(process.execPath);
+    if (name && target && version) await cleanupArtifacts(process.execPath);
     return false;
   }
   if (process.platform !== "win32") throw new Error(`${applyFlag} is only supported on Windows.`);
@@ -787,19 +802,27 @@ function delay(duration) {
 }
 async function cleanupArtifacts(executable) {
   const directory = path2.dirname(executable);
-  const prefix = `${path2.basename(executable)}.incur-handoff-`;
+  const base = path2.basename(executable);
+  const id = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
+  const handoff = new RegExp(`^${escapeRegExp(base)}\\.incur-handoff-${id}\\.exe$`, "i");
+  const staged = new RegExp(`^${escapeRegExp(base)}\\.incur-new-${id}(?:\\.exe)?$`, "i");
+  const staleBefore = Date.now() - staleArtifactAge;
   try {
     const entries = await fs3.promises.readdir(directory);
     await Promise.all(
-      entries.filter(
-        (entry) => entry.startsWith(prefix) && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.exe$/i.test(
-          entry.slice(prefix.length)
-        )
-      ).map((entry) => remove(path2.join(directory, entry)))
+      entries.map(async (entry) => {
+        const file = path2.join(directory, entry);
+        if (process.platform === "win32" && handoff.test(entry)) return remove(file);
+        if (staged.test(entry) && (await fs3.promises.stat(file)).mtimeMs < staleBefore)
+          return remove(file);
+      })
     );
   } catch {
   }
 }
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
 async function writeError(state, error, recovery) {
   const body = [
     `Binary update failed: ${message(error)}`,
@@ -826,7 +849,7 @@ function message(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/helpers.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/helpers.ts
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -878,7 +901,7 @@ function suggest(input, candidates) {
   return best;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Completions.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Completions.ts
 function register(shell, name2) {
   switch (shell) {
     case "bash":
@@ -1118,7 +1141,7 @@ let _incur_complete_${id} = {|spans|
 }`;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Fetch.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Fetch.ts
 var Fetch_exports = {};
 __export(Fetch_exports, {
   buildRequest: () => buildRequest,
@@ -1286,7 +1309,7 @@ function parseError(output) {
   return { code, message: message2 };
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Filter.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Filter.ts
 function parse(expression) {
   const paths = [];
   const tokens = [];
@@ -1779,7 +1802,7 @@ function resolveOptions(options) {
   };
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/json.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/json.ts
 function stringify(value, space) {
   return JSON.stringify(
     value,
@@ -1794,7 +1817,7 @@ function normalize(value) {
   return JSON.parse(stringify(value));
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/yaml.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/yaml.ts
 import { createRequire } from "module";
 var cached;
 async function load() {
@@ -1806,7 +1829,7 @@ function loadSync() {
   return cached;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Formatter.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Formatter.ts
 function format2(value, fmt = "toon") {
   if (value == null) return "";
   if (fmt === "json") {
@@ -1910,14 +1933,14 @@ ${String(val)}`;
   return kvTable(obj);
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Help.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Help.ts
 var Help_exports = {};
 __export(Help_exports, {
   formatCommand: () => formatCommand,
   formatRoot: () => formatRoot
 });
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Parser.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Parser.ts
 function parse2(argv, options = {}) {
   const { args: argsSchema, options: optionsSchema, alias, defaults } = options;
   const optionNames = createOptionNames(optionsSchema, alias);
@@ -2339,7 +2362,7 @@ function defaultEnvSource() {
   return {};
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/command.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/command.ts
 var sentinel = Symbol.for("incur.sentinel");
 async function execute(command3, options) {
   const {
@@ -2598,7 +2621,7 @@ function findBuiltinSubcommand(builtin, token) {
   return builtin.subcommands?.find((sub) => sub.name === token || sub.aliases?.includes(token));
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Help.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Help.ts
 function formatRoot(name2, options = {}) {
   const {
     aliases,
@@ -2897,7 +2920,7 @@ function redact(value) {
   return `****${value.slice(-4)}`;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/cta.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/cta.ts
 function formatCtaBlock(name2, block) {
   if (!block || block.commands.length === 0) return void 0;
   return {
@@ -2925,7 +2948,7 @@ function formatCta(name2, cta) {
   return { command: cmd, ...cta.description ? { description: cta.description } : void 0 };
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/fsCommands.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/fsCommands.ts
 import * as fs4 from "fs/promises";
 import * as path3 from "path";
 var extensions = [".cts", ".cjs", ".mts", ".mjs", ".ts", ".js"];
@@ -2993,7 +3016,7 @@ function assertSegment(segment, source) {
   );
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Schema.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Schema.ts
 function toJsonSchema(schema) {
   const result = external_exports.toJSONSchema(schema, {
     unrepresentable: "any",
@@ -3006,7 +3029,7 @@ function toJsonSchema(schema) {
   return result;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Mcp.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Mcp.ts
 async function serve(name2, version2, commands, options = {}) {
   const stdio = importStdioModule();
   const mcp = await import("./dist-VUZCDJVO.js");
@@ -3409,7 +3432,7 @@ function buildToolSchema(args, options, globals) {
   return { type: "object", properties };
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/McpSource.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/McpSource.ts
 var protocolVersion = "2025-06-18";
 async function resolve3(source, options = {}) {
   const session = sourceSession(source);
@@ -3563,7 +3586,7 @@ function resultValue(result) {
   return textItems;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Skill.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Skill.ts
 import { createHash as createHash2 } from "crypto";
 function index(name2, commands, description) {
   const lines = [`# ${name2}`];
@@ -3812,7 +3835,7 @@ function resolveTypeName2(prop) {
   return "unknown";
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/SyncMcp.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/SyncMcp.ts
 import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname3, join as join4 } from "path";
@@ -3949,13 +3972,13 @@ function splitCommand(input) {
   return tokens;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/SyncSkills.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/SyncSkills.ts
 import fsSync from "fs";
 import fs6 from "fs/promises";
 import os3 from "os";
 import path5 from "path";
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/agents.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/agents.ts
 import * as fs5 from "fs";
 import * as os2 from "os";
 import * as path4 from "path";
@@ -4226,7 +4249,7 @@ function resolveParent(dir) {
   }
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/SyncSkills.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/SyncSkills.ts
 async function sync(name2, commands, options = {}) {
   const { depth = 1, description, global = true } = options;
   const cwd = options.cwd ?? (global ? resolvePackageRoot() : process.cwd());
@@ -4393,7 +4416,7 @@ function readHash(name2) {
   return readMeta(name2)?.hash;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Cli.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Cli.ts
 var destructiveCommandHint = "Confirm with the user before executing this destructive command.";
 var fileCommandSymbol = Symbol.for("incur.fileCommand");
 function command(definition) {
@@ -4788,7 +4811,8 @@ async function serveImpl(name2, commands, argv, options = {}) {
   if (update2 && !help) {
     try {
       const result2 = await install(name2, updateOptions);
-      if (human) {
+      if (human && result2.upToDate) writeln(`\u2713 ${result2.name} is up to date (${result2.current})`);
+      else if (human) {
         const lines = [
           result2.deferred ? `\u2713 Update staged for ${result2.name}` : `\u2713 Updated ${result2.name}`
         ];
@@ -7012,7 +7036,7 @@ function resolveDisplayName(name2, aliases) {
   return name2;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/internal/dereference.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/internal/dereference.ts
 function dereference(root) {
   const cache = /* @__PURE__ */ new Map();
   return walk2(root, root, cache);
@@ -7059,7 +7083,7 @@ function resolvePointer(root, pointer) {
   return current;
 }
 
-// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+8f27e32b4978d02d49324fddbc06de1d44352351/node_modules/incur/src/Openapi.ts
+// ../../node_modules/.pnpm/incur@https+++codeload.github.com+whopio+incur+tar.gz+e5a1a4b395f89de026f374594652c2e9d9865fbf/node_modules/incur/src/Openapi.ts
 function fromCli(cli, options = {}) {
   const commands = toCommands.get(cli);
   if (!commands) throw new Error("No commands registered on this CLI instance");
@@ -7642,7 +7666,7 @@ function coerceIfNeeded(schema) {
 // package.json
 var package_default = {
   name: "@whop/cli",
-  version: "1.0.0-beta.1",
+  version: "1.0.0-beta.2",
   description: "The Whop CLI \u2014 build and manage Whop apps from your terminal. Human and agent friendly.",
   keywords: [
     "agent",
@@ -7697,7 +7721,7 @@ var package_default = {
   devDependencies: {
     "@types/node": "25.3.5",
     fflate: "0.8.3",
-    incur: "github:whopio/incur#8f27e32b4978d02d49324fddbc06de1d44352351",
+    incur: "github:whopio/incur#e5a1a4b395f89de026f374594652c2e9d9865fbf",
     oxfmt: "0.42.0",
     tsup: "8.5.0",
     tsx: "4.19.4",
@@ -8768,7 +8792,7 @@ function switchProfile(name2) {
 import fs10 from "fs";
 import path9 from "path";
 var DEFAULT_RETENTION_DAYS = 7;
-var SENSITIVE_FLAG = /(api[-_]?key|tokens?|secrets?|passwords?|credentials?|founders?|business[-_]?(address|phone)|ssn|date[-_]?of[-_]?birth)$/i;
+var SENSITIVE_NAME = /(api[-_]?key|tokens?|secrets?|passwords?|credentials?|founders?|business[-_]?(address|phone)|ssn|date[-_]?of[-_]?birth|(?:^|[-_])pin|tax[-_]?ids?)$/i;
 var SECRET_VALUE = /whop_[A-Za-z0-9_-]{8,}/g;
 var LOG_FILE = /^audit-(\d{4}-\d{2}-\d{2})\.jsonl$/;
 function auditLogDir(env = process.env) {
@@ -8798,7 +8822,7 @@ function redactArgv(argv) {
     if (arg.startsWith("--")) {
       const eq = arg.indexOf("=");
       const flag = eq === -1 ? arg : arg.slice(0, eq);
-      if (SENSITIVE_FLAG.test(flag)) {
+      if (SENSITIVE_NAME.test(flag)) {
         if (eq === -1) {
           redactNext = true;
           redacted.push(arg);
@@ -8808,10 +8832,32 @@ function redactArgv(argv) {
         continue;
       }
     }
-    redacted.push(arg.replace(SECRET_VALUE, "[redacted]"));
+    redacted.push(redactValue(arg));
   }
   return redacted;
 }
+function redactValue(arg) {
+  const trimmed = arg.trim();
+  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+    try {
+      return JSON.stringify(redactJson(JSON.parse(trimmed)));
+    } catch {
+    }
+  }
+  return arg.replace(SECRET_VALUE, "[redacted]");
+}
+function redactJson(value) {
+  if (typeof value === "string")
+    return value.replace(SECRET_VALUE, "[redacted]");
+  if (Array.isArray(value)) return value.map(redactJson);
+  if (value === null || typeof value !== "object") return value;
+  return Object.fromEntries(
+    Object.entries(value).map(([key, item]) => [
+      key,
+      SENSITIVE_NAME.test(key) ? "[redacted]" : redactJson(item)
+    ])
+  );
+}
 function pruneAuditLogs(env = process.env, now = /* @__PURE__ */ new Date()) {
   const dir = auditLogDir(env);
   let entries;
@@ -9760,6 +9806,7 @@ function isNpx(moduleUrl = import.meta.url) {
   return moduleUrl.includes("/_npx/");
 }
 var homebrew = Binary_exports.target !== void 0 && /[/\\](Cellar|homebrew|linuxbrew)[/\\]/.test(process.execPath);
+var BACKGROUND_CHECK_FLAG = "--incur-update-check";
 function autoUpdating(provider) {
   const { check: check2, install: install3 } = provider;
   if (!check2 || !install3 || process.platform === "win32" || process.env.WHOP_CLI_AUTO_UPDATE === "0") {
@@ -9770,7 +9817,7 @@ function autoUpdating(provider) {
     interval: 60 * 60 * 1e3,
     async check(context) {
       const latest = await check2(context);
-      if (latest) {
+      if (latest && process.argv.includes(BACKGROUND_CHECK_FLAG)) {
         try {
           await install3({ ...context, latest });
         } catch {
@@ -9923,4 +9970,4 @@ export {
   CLI_DESCRIPTION,
   groupedHelp
 };
-//# sourceMappingURL=chunk-FE7JREX4.js.map
+//# sourceMappingURL=chunk-CD4COZVJ.js.map