@xevy/cli 0.1.7 → 0.1.8

package/README.md

@@ -45,7 +45,8 @@ This walks you through everything:
 
 1. Installs the **pi agent** if it isn't already on your PATH.
 2. Installs the Xevy extensions (see [`xevy setup`](#xevy-setup) for details).
-3. Asks for your **API key**. When prompted, open the link it prints — it takes you
+3. Installs the Xevy **SDLC skills** for Claude Code / Cursor / Codex (via `@xevy/skills`).
+4. Asks for your **API key**. When prompted, open the link it prints — it takes you
    straight to **Settings → Profile → API keys** at
    <https://xevy.ai/settings?section=profile&tab=api> — click **Create key**, copy the
    key, and paste it back into the terminal. Your key is saved to
@@ -62,6 +63,15 @@ That's it — you're set up. The sections below are reference for when you need
 
 ## Upgrading
 
+Keep the Xevy extensions and SDLC skills current (run after Xevy releases):
+
+```bash
+xevy check     # is a newer skills version available?
+xevy update    # refresh the pi extensions + the SDLC skills
+```
+
+To upgrade the CLI binary itself:
+
 ```bash
 npm update -g @xevy/cli    # or re-run: npm install -g @xevy/cli
 ```
@@ -77,10 +87,24 @@ npm update -g @xevy/cli    # or re-run: npm install -g @xevy/cli
 3. Asks for your **API key** (reuses an already-saved one if present) and prints a
    **direct link to the API-keys tab** to generate one, then stores it in
    `~/.config/xevy/credentials` (mode `600`, never printed).
+4. Installs the Xevy **SDLC skills** into `.claude/skills`, `.cursor/skills`, etc.
+   (delegates to `@xevy/skills` — skills only; the MCP tools for pi are already
+   wired through the extensions above). A skills hiccup only warns; it never aborts
+   the setup that already succeeded.
 
 The API-keys link opens **Settings → Profile → API keys** directly:
 `https://xevy.ai/settings?section=profile&tab=api`.
 
+## `xevy update` / `xevy check`
+
+```bash
+xevy update    # re-download the pi extensions + update the SDLC skills
+xevy check     # report whether newer SDLC skills are available (exit 2 = update available)
+```
+
+`update` refreshes the extensions from the server and the skills via `@xevy/skills`;
+your saved API key is left untouched. Both accept `--base <url>` for self-hosted hosts.
+
 ## `xevy`
 
 Opens pi, loading `~/.xevy/extensions` via `pi -e …` (pi also auto-loads the
@@ -101,18 +125,18 @@ xevy "summarise this repo" # forwards the prompt to pi
 
 ## Skills & MCP for other agents
 
-`@xevy/cli` sets up the [pi](https://github.com/badlogic/pi-mono) agent. If you'd
-rather use **Cursor, Claude Code, or one of [50+ other agents](https://github.com/vercel-labs/skills#supported-agents)**,
-install the Xevy **SDLC skills** and the **Xevy MCP server** with the sibling
-package instead:
+`xevy setup` already installs the Xevy **SDLC skills** for **Cursor, Claude Code, and
+[50+ other agents](https://github.com/vercel-labs/skills#supported-agents)**. To also
+register the **Xevy MCP server** in those clients (pi gets it via the extensions), add
+it over OAuth (Cursor: Settings → MCP → `xevy`; Claude Code: browser sign-in on first
+use) or run the sibling package's MCP step:
 
 ```bash
-npx @xevy/skills          # skills + MCP, global by default
-npx @xevy/skills --project # into the current repo instead
+npx @xevy/skills mcp       # register the Xevy MCP server, global by default
+npx @xevy/skills           # or: skills + MCP together
 ```
 
-Then connect MCP over OAuth (Cursor: Settings → MCP → `xevy`; Claude Code: browser
-sign-in on first use). See the [`@xevy/skills` README](../xevy-skills/README.md) for
-the full command list, per-agent flags, and manual install steps.
+See the [`@xevy/skills` README](../xevy-skills/README.md) for the full command list,
+per-agent flags, and manual install steps.
 
 Docs: <https://xevy.ai/docs/mcp>

package/bin/xevy.mjs

@@ -4,7 +4,10 @@
  *
  *   xevy setup   Install the pi agent (if missing); install the Xevy extensions
  *                (core + model + MCP globally, xevy.ts into ~/.xevy/extensions);
- *                and store your API key.
+ *                install the Xevy SDLC skills (via @xevy/skills); and store your
+ *                API key.
+ *   xevy update  Refresh the pi extensions + the Xevy SDLC skills.
+ *   xevy check   Report whether newer Xevy SDLC skills are available.
  *   xevy         Open pi with the Xevy extensions.
  *
  * `xevy setup` fetches the extensions from the server and asks for an API key
@@ -67,7 +70,9 @@ function usage() {
   console.log(`Xevy CLI
 
   xevy                   Open pi with the Xevy extensions in ~/.xevy/extensions
-  xevy setup [--base u]  Install pi (if missing) + the Xevy extensions, store your API key
+  xevy setup [--base u]  Install pi (if missing) + the Xevy extensions + SDLC skills, store your API key
+  xevy update [--base u] Refresh the pi extensions + the Xevy SDLC skills
+  xevy check [--base u]  Report whether newer Xevy SDLC skills are available
 
 Options:
       --base <url>       Xevy host (default: XEVY_BASE or ${DEFAULT_BASE})
@@ -76,6 +81,7 @@ Options:
 
 Examples:
   npx @xevy/cli setup
+  npx @xevy/cli update
   npx @xevy/cli
 
 Install globally to drop the npx prefix:
@@ -94,9 +100,9 @@ function parseArgv(argv) {
   if (first === "-h" || first === "--help" || first === "help") return { command: "help", base };
   if (first === "-v" || first === "--version") return { command: "version", base };
 
-  if (first === "setup") {
-    args.shift();
-    const opts = { command: "setup", base, piArgs: [] };
+  if (first === "setup" || first === "update" || first === "check") {
+    const command = args.shift();
+    const opts = { command, base, piArgs: [] };
     while (args.length > 0) {
       const a = args.shift();
       if (a === "--base") {
@@ -105,7 +111,7 @@ function parseArgv(argv) {
         opts.base = v.replace(/\/$/, "");
         continue;
       }
-      die(`Unknown option for \`xevy setup\`: ${a}. Try \`xevy --help\`.`);
+      die(`Unknown option for \`xevy ${command}\`: ${a}. Try \`xevy --help\`.`);
     }
     return opts;
   }
@@ -141,6 +147,26 @@ function ensurePi() {
   }
 }
 
+// Install the Xevy SDLC skills (into .claude/skills, .cursor/skills, etc.) via
+// the published @xevy/skills package. Skills only — the pi tools + MCP are
+// already wired through the extensions above and the stored credentials, so we
+// skip add-mcp here. Non-fatal: the core pi setup has already succeeded, so a
+// skills hiccup warns with the manual command instead of aborting.
+function installSkills(base) {
+  const args = ["--yes", "@xevy/skills", "skills", "-y"];
+  if (base !== DEFAULT_BASE) args.push("--base", base);
+  const label = "npx @xevy/skills skills (Xevy SDLC skills)";
+  console.log(`→ ${label}`);
+  const command = isWindows ? "npx.cmd" : "npx";
+  const r = spawnSync(command, args, { stdio: "inherit", shell: isWindows, env: process.env });
+  if (r.error || r.status !== 0) {
+    console.warn(`⚠ Could not install Xevy skills (${r.error ? r.error.message : `exit ${r.status}`}).`);
+    console.warn("  Install them later with: npx @xevy/skills skills -y");
+    return false;
+  }
+  return true;
+}
+
 async function downloadExtension(base, file, destDir, markers) {
   const url = `${base}/${file}`;
   console.log(`→ Downloading ${url}`);
@@ -232,39 +258,33 @@ async function promptNewApiKey(base) {
   return token;
 }
 
+// Download all four Xevy pi extensions to their install dirs. Shared by `setup`
+// and `update` so the two never drift.
+//    • xevy-core.ts  → pi's GLOBAL extensions dir (shared base: ask_question
+//      tool + setup/context). Global so it loads in EVERY pi session and is
+//      always present for xevy.ts (which requires it). Global-only avoids a
+//      double-load: if it were also in ~/.xevy it'd register ask_question twice.
+//    • xevy-model.ts → GLOBAL too, so the xevy/* models are available in every
+//      pi session (plain `pi` included), not just via `xevy`.
+//    • xevy-mcp.ts   → GLOBAL too — the MCP→pi tool bridge (auth reused from
+//      the model login), available in every pi session.
+//    • xevy.ts       → ~/.xevy/extensions (tools/workflow; loaded by `xevy`,
+//      which also auto-loads the global dir → core + model + MCP come along).
+async function downloadAllExtensions(base) {
+  await downloadExtension(base, "xevy-core.ts", PI_EXTENSION_DIR, ["xevyCoreExtension", "registerCommand"]);
+  await downloadExtension(base, "xevy-model.ts", PI_EXTENSION_DIR, ["xevyModelExtension", "registerCommand"]);
+  await downloadExtension(base, "xevy-mcp.ts", PI_EXTENSION_DIR, ["xevyMcpExtension", "registerCommand"]);
+  await downloadExtension(base, XEVY_EXTENSION_FILE, XEVY_EXTENSIONS_DIR, ["EXTENSION_VERSION", "registerCommand"]);
+}
+
 async function setup(opts) {
   console.log("Setting up Xevy for pi\n");
 
   // 1. Ensure pi is installed (installs it if missing).
   ensurePi();
 
-  // 2. Extensions:
-  //    • xevy-core.ts  → pi's GLOBAL extensions dir (shared base: ask_question
-  //      tool + setup/context). Global so it loads in EVERY pi session and is
-  //      always present for xevy.ts (which requires it). Global-only avoids a
-  //      double-load: if it were also in ~/.xevy it'd register ask_question twice.
-  //    • xevy-model.ts → GLOBAL too, so the xevy/* models are available in every
-  //      pi session (plain `pi` included), not just via `xevy`.
-  //    • xevy-mcp.ts   → GLOBAL too — the MCP→pi tool bridge (auth reused from
-  //      the model login), available in every pi session.
-  //    • xevy.ts       → ~/.xevy/extensions (tools/workflow; loaded by `xevy`,
-  //      which also auto-loads the global dir → core + model + MCP come along).
-  await downloadExtension(opts.base, "xevy-core.ts", PI_EXTENSION_DIR, [
-    "xevyCoreExtension",
-    "registerCommand",
-  ]);
-  await downloadExtension(opts.base, "xevy-model.ts", PI_EXTENSION_DIR, [
-    "xevyModelExtension",
-    "registerCommand",
-  ]);
-  await downloadExtension(opts.base, "xevy-mcp.ts", PI_EXTENSION_DIR, [
-    "xevyMcpExtension",
-    "registerCommand",
-  ]);
-  await downloadExtension(opts.base, XEVY_EXTENSION_FILE, XEVY_EXTENSIONS_DIR, [
-    "EXTENSION_VERSION",
-    "registerCommand",
-  ]);
+  // 2. Extensions (core + model + MCP globally, xevy.ts into ~/.xevy).
+  await downloadAllExtensions(opts.base);
 
   // 3. API key — reuse the saved one if present, otherwise ask for a new one.
   const existing = readStoredToken();
@@ -279,12 +299,55 @@ async function setup(opts) {
   writeCredentials(opts.base, token);
   console.log(`✓ API key stored at ${CREDENTIALS_FILE} (key not shown).`);
 
+  // 4. SDLC skills — install the Xevy agent skills so Claude Code / Cursor /
+  //    Codex pick them up alongside pi.
+  const skillsOk = installSkills(opts.base);
+
   console.log("\n✓ Setup complete.");
   console.log("  • Xevy models (xevy/auto, xevy/fast, …) + MCP tools are available in any pi session — no /login needed.");
+  console.log(
+    skillsOk
+      ? "  • Xevy SDLC skills installed for Claude Code / Cursor / Codex — refresh later with `xevy update`."
+      : "  • Xevy SDLC skills NOT installed — run `xevy update` to add them.",
+  );
   console.log("  • Run `xevy` to open pi with the Xevy tools + models loaded.");
+  console.log("  • Keep current with `xevy check` / `xevy update`.");
+  if (opts.base !== DEFAULT_BASE) console.log(`  • Host: ${opts.base}`);
+}
+
+// `xevy update` — refresh the pi extensions from the server AND update the SDLC
+// skills. This is the "update everything the CLI installed" command. Skills are
+// delegated to @xevy/skills (the source of truth); the API key is left as-is.
+async function update(opts) {
+  console.log("Updating Xevy\n");
+
+  // 1. Re-download the pi extensions (they carry the date-stamped versions).
+  await downloadAllExtensions(opts.base);
+
+  // 2. Skills via @xevy/skills (single source of truth for SDLC skills).
+  const skillsOk = installSkills(opts.base);
+
+  console.log("\n✓ Update complete.");
+  console.log("  • Xevy pi extensions refreshed.");
+  console.log(
+    skillsOk
+      ? "  • Xevy SDLC skills updated."
+      : "  • Xevy SDLC skills NOT updated — run `npx @xevy/skills update -y` manually.",
+  );
   if (opts.base !== DEFAULT_BASE) console.log(`  • Host: ${opts.base}`);
 }
 
+// `xevy check` — is a newer SDLC-skills version available? Delegates to the
+// @xevy/skills version check (which reads the install stamp + npm/manifest).
+function check(opts) {
+  const args = ["--yes", "@xevy/skills", "check"];
+  if (opts.base !== DEFAULT_BASE) args.push("--base", opts.base);
+  const command = isWindows ? "npx.cmd" : "npx";
+  const r = spawnSync(command, args, { stdio: "inherit", shell: isWindows, env: process.env });
+  // Preserve @xevy/skills' exit code (0 = current, 2 = update available, …).
+  process.exit(r.status ?? (r.error ? 1 : 0));
+}
+
 function open(opts) {
   if (!hasPi()) {
     die("pi is not installed. Run `xevy setup` first.");
@@ -315,6 +378,8 @@ async function main() {
   if (opts.command === "help") return usage();
   if (opts.command === "version") return console.log(readCliVersion());
   if (opts.command === "setup") return setup(opts);
+  if (opts.command === "update") return update(opts);
+  if (opts.command === "check") return check(opts);
   if (opts.command === "open") return open(opts);
 }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@xevy/cli",
-  "version": "0.1.7",
-  "description": "Xevy CLI — `xevy setup` installs the pi agent + the Xevy pi extension and stores your API key; `xevy` opens pi with it.",
+  "version": "0.1.8",
+  "description": "Xevy CLI — `xevy setup` installs the pi agent, the Xevy pi extensions, and the SDLC skills, and stores your API key; `xevy update`/`xevy check` keep them current; `xevy` opens pi with it.",
   "type": "module",
   "keywords": [
     "xevy",