bkper 4.27.0 → 4.29.0

package/lib/agent/system-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAqHA,wBAAgB,yBAAyB,IAAI,MAAM,CAsDlD;AAED,eAAO,MAAM,yBAAyB,QAsBrC,CAAC"}
+{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AA6HA,wBAAgB,yBAAyB,CACrC,aAAa,GAAE,MAAM,EAAsC,GAC5D,MAAM,CAsDR;AA4BD,eAAO,MAAM,yBAAyB,QAKpC,CAAC"}

package/lib/agent/system-prompt.js

@@ -1,4 +1,4 @@
-import { createBashToolDefinition, createEditToolDefinition, createReadToolDefinition, createWriteToolDefinition, } from '@earendil-works/pi-coding-agent';
+import { createBashToolDefinition, createEditToolDefinition, createPowerShellToolDefinition, createReadToolDefinition, createWriteToolDefinition, } from '@earendil-works/pi-coding-agent';
 import { existsSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -58,16 +58,17 @@ function normalizePromptGuidelines(guidelines) {
     }
     return Array.from(unique);
 }
-function getCodingToolDefinitions() {
+function getCodingToolDefinitions(selectedTools) {
     return [
         createReadToolDefinition(process.cwd()),
         createBashToolDefinition(process.cwd()),
+        createPowerShellToolDefinition(process.cwd()),
         createEditToolDefinition(process.cwd()),
         createWriteToolDefinition(process.cwd()),
-    ];
+    ].filter(definition => selectedTools.includes(definition.name));
 }
-function buildToolPromptSection() {
-    const toolDefinitions = getCodingToolDefinitions();
+function buildToolPromptSection(selectedTools) {
+    const toolDefinitions = getCodingToolDefinitions(selectedTools);
     const toolLines = toolDefinitions
         .flatMap(definition => {
         const snippet = normalizePromptSnippet(definition.promptSnippet);
@@ -84,7 +85,12 @@ function buildToolPromptSection() {
         seenGuidelines.add(normalized);
         guidelineLines.push(`- ${normalized}`);
     };
-    addGuideline('Use bash for discovery and search like ls, rg, and find. Use it to run bkper CLI commands when relevant.');
+    if (selectedTools.includes('powershell')) {
+        addGuideline('Use PowerShell for file operations like listing, searching, and finding files. Use it to run bkper CLI commands when relevant.');
+    }
+    else if (selectedTools.includes('bash')) {
+        addGuideline('Use bash for discovery and search like ls, rg, and find. Use it to run bkper CLI commands when relevant.');
+    }
     for (const definition of toolDefinitions) {
         for (const guideline of normalizePromptGuidelines(definition.promptGuidelines)) {
             addGuideline(guideline);
@@ -94,14 +100,14 @@ function buildToolPromptSection() {
     const toolsList = toolLines.length > 0 ? toolLines : '(none)';
     return `Available tools:\n${toolsList}\n\nIn addition to the tools above, you may have access to other custom tools depending on the project.\n\nGuidelines:\n${guidelineLines.join('\n')}`;
 }
-export function getBkperAgentSystemPrompt() {
+export function getBkperAgentSystemPrompt(selectedTools = ['read', 'bash', 'edit', 'write']) {
     const coreConceptsPath = resolveReferenceDocPath('core/core-concepts.md');
     const indexPath = resolveDocsIndexPath('index.md');
     const referenceDocsDir = path.dirname(indexPath);
     const piRoot = resolvePiPackageRoot();
     const piDocsPath = path.resolve(piRoot, 'docs');
     const piExamplesPath = path.resolve(piRoot, 'examples');
-    return `${BKPER_AGENT_SYSTEM_PROMPT}
+    return `${buildBkperOperatingContext(selectedTools)}
 ## Required Reading
 
 Bkper's accounting model is intentionally non-standard. Generic accounting knowledge — debit/credit, account categories, sign conventions — will lead you to wrong answers here.
@@ -149,7 +155,8 @@ ${piExamplesPath}
   And follow the most relevant link to find the answer.
 `;
 }
-export const BKPER_AGENT_SYSTEM_PROMPT = `# Bkper Context
+function buildBkperOperatingContext(selectedTools) {
+    return `# Bkper Context
 
 You are a Bkper team member.
 
@@ -157,7 +164,7 @@ Protect the zero-sum invariant above all else.
 
 You help users by reading files, executing commands, editing code, and writing new files.
 
-${buildToolPromptSection()}
+${buildToolPromptSection(selectedTools)}
 
 ## IMPORTANT Operating Principles
 
@@ -172,4 +179,11 @@ ${buildToolPromptSection()}
 - Model domain and flows before coding; represent business reality, not technical shortcuts.
 - Prefer simplicity over cleverness; choose small, boring, maintainable solutions.
 `;
+}
+export const BKPER_AGENT_SYSTEM_PROMPT = buildBkperOperatingContext([
+    'read',
+    'bash',
+    'edit',
+    'write',
+]);
 //# sourceMappingURL=system-prompt.js.map

package/lib/agent/system-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"system-prompt.js","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,GAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,wBAAwB,CAAC,UAAoB;IAClD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,wBAAwB,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC;KACrE,CAAC,CAAC;AACP,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAoB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,wBAAwB,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC;KACzE,CAAC,CAAC;AACP,CAAC;AAED,SAAS,oBAAoB;IACzB,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC1F,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,GAAG,CAAC;QACf,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAwB;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI;SACf,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACZ,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAgC;IAC/D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,wBAAwB;IAC7B,OAAO;QACH,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;KAC3C,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB;IAC3B,MAAM,eAAe,GAAG,wBAAwB,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,eAAe;SAC5B,OAAO,CAAC,UAAU,CAAC,EAAE;QAClB,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACjE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhB,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,OAAO;QACX,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,cAAc,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,YAAY,CACR,0GAA0G,CAC7G,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;QACvC,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7E,YAAY,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,YAAY,CAAC,8EAA8E,CAAC,CAAC;IAE7F,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,OAAO,qBAAqB,SAAS,2HAA2H,cAAc,CAAC,IAAI,CAC/K,IAAI,CACP,EAAE,CAAC;AACR,CAAC;AAED,MAAM,UAAU,yBAAyB;IACrC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,OAAO,GAAG,yBAAyB;;;;;;;;EAQrC,gBAAgB;;;;;;;;;;;EAWhB,SAAS;;;;;EAKT,gBAAgB;;;;;;;;EAQhB,UAAU;;;;;;EAMV,cAAc;;;;;;;;CAQf,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;EAQvC,sBAAsB,EAAE;;;;;;;;;;;;;;CAczB,CAAC"}
+{"version":3,"file":"system-prompt.js","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,GAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,wBAAwB,CAAC,UAAoB;IAClD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,wBAAwB,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC;KACrE,CAAC,CAAC;AACP,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAoB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,wBAAwB,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC;KACzE,CAAC,CAAC;AACP,CAAC;AAED,SAAS,oBAAoB;IACzB,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC1F,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,GAAG,CAAC;QACf,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAwB;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI;SACf,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACZ,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAgC;IAC/D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,wBAAwB,CAAC,aAAuB;IACrD,OAAO;QACH,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,8BAA8B,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7C,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;KAC3C,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,sBAAsB,CAAC,aAAuB;IACnD,MAAM,eAAe,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,eAAe;SAC5B,OAAO,CAAC,UAAU,CAAC,EAAE;QAClB,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACjE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhB,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,OAAO;QACX,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,cAAc,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,IAAI,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,YAAY,CACR,gIAAgI,CACnI,CAAC;IACN,CAAC;SAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,YAAY,CACR,0GAA0G,CAC7G,CAAC;IACN,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;QACvC,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7E,YAAY,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,YAAY,CAAC,8EAA8E,CAAC,CAAC;IAE7F,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,OAAO,qBAAqB,SAAS,2HAA2H,cAAc,CAAC,IAAI,CAC/K,IAAI,CACP,EAAE,CAAC;AACR,CAAC;AAED,MAAM,UAAU,yBAAyB,CACrC,gBAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;IAE3D,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,OAAO,GAAG,0BAA0B,CAAC,aAAa,CAAC;;;;;;;;EAQrD,gBAAgB;;;;;;;;;;;EAWhB,SAAS;;;;;EAKT,gBAAgB;;;;;;;;EAQhB,UAAU;;;;;;EAMV,cAAc;;;;;;;;CAQf,CAAC;AACF,CAAC;AAED,SAAS,0BAA0B,CAAC,aAAuB;IACvD,OAAO;;;;;;;;EAQT,sBAAsB,CAAC,aAAa,CAAC;;;;;;;;;;;;;;CActC,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;IAChE,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;CACV,CAAC,CAAC"}

package/lib/docs/apps/app-listing.md

@@ -49,6 +49,7 @@ To make your app available to all Bkper users, contact us at [support@bkper.com]
 ### What the review involves
 
 - **Functionality check** — The app works correctly and handles errors gracefully
+- **Quality review** — The implementation follows the [App Quality Guidelines](https://bkper.com/docs/build/apps/quality.md)
 - **Security review** — Event handlers are idempotent and include loop prevention
 - **Listing quality** — The app has a clear name, description, logo, and user-facing documentation
 

package/lib/docs/apps/architecture.md

@@ -4,6 +4,8 @@ Bkper platform apps use one Worker bundle per app and environment. The same Work
 
 Treat `/api/*` as the reusable surface for app behavior. The bundled web client is one consumer; scripts, external clients, and agents can call the same routes with bearer authentication.
 
+Follow the [App Quality Guidelines](https://bkper.com/docs/build/apps/quality.md) when implementing, changing, or reviewing an app.
+
 ## Structure
 
 ```txt
@@ -14,7 +16,6 @@ my-app/
 │   ├── vite.config.ts
 │   └── src/
 │       ├── api/
-│       ├── app/
 │       ├── auth/
 │       ├── components/
 │       └── services/
@@ -44,10 +45,14 @@ The client uses:
 - [`@bkper/web-design`](https://www.npmjs.com/package/@bkper/web-design) for Bkper design tokens.
 - [Vite](https://vitejs.dev/) for development and production builds, configured in `client/vite.config.ts`.
 
-Client code has two data paths:
+Client code has two data paths. Choose based on who owns the behavior:
+
+- **Direct Bkper calls** use `bkper-js` for generic Bkper data needed only by the browser UI.
+- **App API calls** use the generated typed client in `client/src/api/` with `auth.authenticatedFetch()` for app-owned behavior, especially when it needs server-only capabilities or more than one caller.
+
+Keep app-owned behavior in one place. Do not implement the same behavior separately in the UI and the app API.
 
-- **Direct Bkper calls** use `bkper-js` for browser-specific behavior.
-- **App API calls** use the generated typed client in `client/src/api/` with `auth.authenticatedFetch()`.
+For stateful feature components, co-locate view, controller, and CSS files in one folder under `components/`. Simple presentational components can remain in one file.
 
 ### Client authentication
 
@@ -115,7 +120,7 @@ The default template publishes versioned routes under `/api/v1/*` and exposes th
 | Business behavior            | `server/src/services/`                |
 | Generated client types       | `client/src/api/generated/types.d.ts` |
 | Typed client wrapper         | `client/src/api/app-api.ts`           |
-| Contract snapshot            | `server/test/openapi.snapshot.json`   |
+| Contract snapshot            | `server/test/api/openapi.snapshot.json` |
 
 When changing the API:
 
@@ -126,6 +131,30 @@ When changing the API:
 
 Keep existing `/api/v1/*` contracts backward compatible. Additive fields and routes can remain in `v1`; breaking changes belong in a new namespace such as `/api/v2/*`.
 
+### Reuse Bkper API types
+
+When an app API returns payloads from the Bkper REST API, reference the canonical types from `@bkper/bkper-api-types` instead of recreating their fields in the app. The template's balances endpoint demonstrates this with `bkper.Book`:
+
+```ts
+export const BookSchema = z
+    .custom<bkper.Book>(value => value !== undefined)
+    .openapi('Book', {
+        type: 'object',
+        additionalProperties: true,
+        'x-typescript-type': 'bkper.Book',
+    });
+```
+
+The template's API generator recognizes `x-typescript-type`, imports `@bkper/bkper-api-types`, and emits the canonical reference in `client/src/api/generated/types.d.ts`:
+
+```ts
+Book: bkper.Book;
+```
+
+Both the server and client packages include `@bkper/bkper-api-types` for local typechecking. Run `npm run api` after adding or changing these schemas.
+
+This bridge provides compile-time types but does not validate payload fields at runtime. Use it directly for trusted Bkper-owned responses. Request bodies, especially those used to create or modify Book resources, still require concrete Zod validation.
+
 ### URLs
 
 ```txt
@@ -145,7 +174,7 @@ TOKEN="$(bkper auth token)"
 
 curl \
   -H "Authorization: Bearer ${TOKEN}" \
-  "https://my-app.bkper.app/api/v1/books"
+  "https://my-app.bkper.app/api/v1/ping"
 ```
 
 Replace `my-app` with the app id from `bkper.yaml`.
@@ -155,7 +184,7 @@ Replace `my-app` with the app id from `bkper.yaml`.
 Deployed `/api/*` routes require a Bkper OAuth bearer token. The template client uses `authenticatedFetch()` so token attachment and refresh stay inside `@bkper/web-auth`:
 
 ```ts
-const response = await auth.authenticatedFetch('/api/v1/books');
+const response = await auth.authenticatedFetch('/api/v1/ping');
 ```
 
 Dispatch validates the incoming bearer token and strips the `Authorization` header before the Worker runs. Server code should not read or forward the token.
@@ -171,6 +200,12 @@ const books = await bkper.getBooks();
 
 Platform outbound authentication injects the validated user's OAuth token on Bkper API requests.
 
+### Authorize app operations
+
+Authentication identifies the Bkper user, but each app must authorize sensitive data and actions server-side. Client-side checks are not an authorization boundary.
+
+See [App Security](https://bkper.com/docs/build/apps/security.md) for domain restrictions, Book permissions, and app installation checks.
+
 ## Event handlers
 
 Platform event deliveries reach `/events` on the same Worker. Event adapters live in `server/src/events/`, while reusable business behavior belongs in `server/src/services/`.

package/lib/docs/apps/context-menu.md

@@ -2,6 +2,8 @@
 
 Apps can add context menu items on the Transactions page **More** menu in your Books. This lets you open dynamically built URLs with reference to the current Book's context — the active query, selected account, date range, and more.
 
+Embedded interfaces should follow the [App Quality Guidelines](https://bkper.com/docs/build/apps/quality.md) for visual consistency, startup behavior, and Book-context verification.
+
 ## How it works
 
 Once you install an App with a menu configuration, a new menu item appears in your Book:

package/lib/docs/apps/development.md

@@ -25,10 +25,10 @@ You can also run them independently: `npm run dev:client` for just the UI, or `n
 | Client (Vite dev server)               | `http://localhost:5173`                     |
 | Server Worker (Miniflare)              | `http://localhost:8787`                     |
 | App API routes                         | `http://localhost:8787/api/*`               |
-| App OpenAPI spec                       | `http://localhost:8787/openapi.json`        |
+| App OpenAPI spec                       | `http://localhost:5173/openapi.json`        |
 | Events (via tunnel to the same Worker) | `https://<random>.trycloudflare.com/events` |
 
-The Vite dev server proxies `/api` requests to `http://localhost:8787` through `client/vite.config.ts`. The app OpenAPI spec is served by the Worker at `http://localhost:8787/openapi.json`. The tunnel URL is automatically registered as `webhookUrlDev`, so development-mode events are routed to your local machine.
+The Vite dev server proxies `/api` and `/openapi.json` requests to `http://localhost:8787` through `client/vite.config.ts`, so the client and OpenAPI spec share the same local origin just as they do in production. The spec also remains available directly from the Worker at `http://localhost:8787/openapi.json`. The tunnel URL is automatically registered as `webhookUrlDev`, so development-mode events are routed to your local machine.
 
 ## Configuration flags
 
@@ -40,13 +40,13 @@ bkper app dev --sp 8787
 
 ## Client configuration
 
-The client dev server is configured in `client/vite.config.ts`. This standard Vite configuration registers local auth middleware and proxies `/api` requests to the Worker.
+The client dev server is configured in `client/vite.config.ts`. This standard Vite configuration registers local auth middleware and proxies `/api` and `/openapi.json` requests to the Worker.
 
 ### Local development authentication
 
 During local development, the Vite dev server runs `createBkperAuthMiddleware()` from `bkper/dev`. It serves the local `/auth/refresh` endpoint used by `@bkper/web-auth`, obtaining OAuth tokens from your CLI credentials.
 
-The separate Vite proxy configuration forwards `/api` requests to the Miniflare Worker.
+The separate Vite proxy configuration forwards `/api` and `/openapi.json` requests to the Miniflare Worker.
 
 Before starting development, run:
 

package/lib/docs/apps/event-handlers.md

@@ -1,4 +1,4 @@
-# Event Handlers
+# Bkper Webhooks and Event Handlers
 
 Event handlers are the code that reacts to events in your Bkper Books. When a transaction is checked, an account is created, or any other event occurs, your handler receives it and can take action — calculate taxes, sync data between books, post to external services, and more.
 

package/lib/docs/apps/quality.md

@@ -0,0 +1,86 @@
+# App Quality Guidelines
+
+Use these guidelines when building, changing, or reviewing a Bkper app. They complement the detailed architecture, security, and feature documentation.
+
+After implementation, review the changed code against these guidelines before considering the work complete. Automated checks support this review but do not replace it.
+
+## Bkper behavior
+
+Always:
+
+- Model financial activity as balanced resource movements between Accounts.
+- Keep calculations deterministic and cover financial behavior with focused unit tests.
+- Use canonical Bkper SDK and API types instead of recreating Bkper data structures.
+- Add meaning with properties before introducing new structural complexity.
+
+## User interface
+
+Always:
+
+- Use Web Awesome as the primary component library.
+- Style with Bkper design tokens instead of ad-hoc design constants.
+- Support the active Bkper light or dark theme.
+- Keep interactions accessible and provide clear loading, empty, and error states.
+
+Apps opened from a Book context menu should feel like part of the Book. Keep their layout focused, make them work in the configured sidebar or expanded width, and preserve context when the Book URL changes.
+
+## Startup
+
+Always render the app shell or a meaningful loading state before waiting for authentication, API calls, or other initialization. Start asynchronous work after the first render and update the interface as results arrive.
+
+Prefer loading only the client code and Web Awesome components needed for the initial experience.
+
+## API contracts
+
+When an app exposes its own HTTP API:
+
+- Define and publish its OpenAPI contract at `/openapi.json`.
+- Generate client types from that contract.
+- Call the API through the generated typed boundary rather than duplicating request or response types.
+- Validate untrusted request data at the server boundary.
+- Keep published routes backward compatible or introduce a new API version for breaking changes.
+
+UI-only and event-only apps without an app-owned HTTP API do not need to add one. Direct calls to Bkper should use the canonical Bkper SDK and API types.
+
+## Focused modules
+
+Prefer modules with one clear responsibility, high cohesion, and few dependencies.
+
+- Components render state and communicate user intent. They should delegate API and Bkper operations to client API or service modules.
+- HTTP routes and event handlers adapt transport concerns and delegate app behavior.
+- Business modules contain domain decisions without depending on UI, HTTP, storage, or external-service details.
+- Connectors isolate external APIs and storage concerns from business behavior.
+- Add a repository or another layer when connection or storage complexity justifies it, not by default.
+- Avoid layers that only forward calls without creating a useful boundary.
+
+Split a module when unrelated behavior changes for different reasons or when mixed responsibilities make it difficult to understand or test.
+
+## Security
+
+Keep the security boundary simple and explicit:
+
+- Authorize sensitive app operations on the server.
+- Validate untrusted requests, events, and browser messages at their boundaries.
+- Keep application secrets and privileged credentials out of client bundles.
+- Access only the Book data needed for the operation.
+- Make event handling safe to retry and prevent event loops.
+
+See [App Security](https://bkper.com/docs/build/apps/security.md) and [Event Handlers](https://bkper.com/docs/build/apps/event-handlers.md) for implementation details.
+
+## Verification
+
+After implementation:
+
+1. Review the changed code against these guidelines.
+2. Run the app's deterministic checks, including unit tests, typechecking, and production builds.
+3. Confirm generated API types and contract snapshots are current when the API changed.
+4. Verify user interfaces in their intended Book context, including first rendering, loading, errors, theme, and configured width.
+
+App reviews should report concrete findings with file locations and suggested fixes. If no issues are found, a short confirmation is enough.
+
+## Next Steps
+
+- [App Architecture](https://bkper.com/docs/build/apps/architecture.md) — Client, server, API, and event structure.
+- [App Security](https://bkper.com/docs/build/apps/security.md) — Authentication and authorization boundaries.
+- [Context Menu](https://bkper.com/docs/build/apps/context-menu.md) — Embedded Book context and open modes.
+- [Development Experience](https://bkper.com/docs/build/apps/development.md) — Local development and deterministic checks.

package/lib/docs/apps/security.md

@@ -0,0 +1,74 @@
+# App Security
+
+Bkper and each platform app have separate security responsibilities. This guide explains the platform authentication boundary and common authorization checks an app must enforce.
+
+## Authentication and authorization
+
+Authentication identifies the Bkper user making a request. The platform handles this flow for deployed apps.
+
+Authorization determines whether that user may perform a specific operation.
+
+See [App Architecture](https://bkper.com/docs/build/apps/architecture.md) for the client and server authentication flow.
+
+## Authorize app operations
+
+Platform authentication identifies the Bkper user and provides outbound authentication for server-side Bkper requests. Your app must still decide which authenticated users may perform each operation. Protect sensitive data and actions in the server API; client-side checks may improve the UI, but they are not an authorization boundary.
+
+### Restrict an internal app by user domain
+
+For an app intended only for people in one organization, authorize the authenticated user's hosted domain:
+
+```ts
+const ALLOWED_DOMAIN = 'example.com';
+
+const user = await context.bkper.getUser();
+const domain = user.getHostedDomain()?.toLowerCase();
+
+if (domain !== ALLOWED_DOMAIN) {
+    return c.json(buildApiError('FORBIDDEN', 'This app is restricted to your organization'), 403);
+}
+```
+
+### Authorize a Book-backed operation
+
+When an operation acts on a Book, use an explicit permission allowlist appropriate to that operation. For an operation that requires edit access:
+
+```ts
+import { Permission } from 'bkper-js';
+
+const EDIT_PERMISSIONS: readonly Permission[] = [Permission.EDITOR, Permission.OWNER];
+
+const book = await context.bkper.getBook(bookId);
+
+if (!EDIT_PERMISSIONS.includes(book.getPermission())) {
+    return c.json(
+        buildApiError('FORBIDDEN', 'Editor or owner permission required for this operation'),
+        403
+    );
+}
+```
+
+Read, posting, and other operations may require different policies. Choose the minimum authorization appropriate to the behavior instead of treating every authenticated user as authorized.
+
+### Require app installation
+
+Having permission to access a Book does not mean the app is installed in that Book. If an app is only supposed to be used with Books where it is installed, verify installation:
+
+```ts
+const APP_ID = 'my-app';
+
+const book = await context.bkper.getBook(bookId);
+const installedApps = await book.getApps();
+const isInstalled = installedApps.some(app => app.getId() === APP_ID);
+
+if (!isInstalled) {
+    return c.json(buildApiError('FORBIDDEN', 'This app is not installed in this Book'), 403);
+}
+```
+
+## Next Steps
+
+- [App Quality Guidelines](https://bkper.com/docs/build/apps/quality.md) — Review cross-cutting app quality and security expectations.
+- [App Architecture](https://bkper.com/docs/build/apps/architecture.md) — Understand client and server authentication flows.
+- [Building & Deploying](https://bkper.com/docs/build/apps/deploying.md#setting-secrets) — Store production and preview secrets.
+- [Event Handlers](https://bkper.com/docs/build/apps/event-handlers.md#authentication) — Understand authentication for platform and self-hosted events.

package/lib/docs/apps/self-hosted.md

@@ -1,4 +1,4 @@
-# Self-Hosted Alternative
+# Bkper Self-Hosted Webhooks
 
 The [Bkper Platform](https://bkper.com/docs/build/apps/overview.md) handles hosting, authentication, and deployment for you. However, you can host event handlers on your own infrastructure if you have specific requirements — existing cloud setup, compliance constraints, or legacy apps.
 

package/lib/docs/cli/app-management.md

@@ -46,6 +46,8 @@ Sync preserves the existing App identity, activates managed source, configures i
 
 When scaffolding, developing, or deploying an app, verify each step before proceeding. This prevents broken deployments and silent failures.
 
+For app implementation, refactoring, or code review, first read the [App Quality Guidelines](https://bkper.com/docs/build/apps/quality.md). After implementation, review the changed code against the guidelines and run the project's deterministic checks. A successful build does not replace this quality review.
+
 ### 1. Init
 
 ```bash

package/lib/docs/cli/data-management.md

@@ -238,6 +238,10 @@ bkper transaction create -b abc123 --description "Office supplies"
 bkper transaction create -b abc123 --date 2025-01-15 --amount 100.50 \
   --from "Bank Account" --to "Office Supplies" --description "Printer paper"
 
+# Keep a complete AI-derived transaction as a draft
+printf '%s\n' '[{"date":"2025-01-15","amount":"100.50","creditAccount":{"name":"Bank Account"},"debitAccount":{"name":"Office Supplies"},"description":"Extracted printer paper","draft":true}]' | \
+  bkper transaction create -b abc123
+
 # Create a transaction with one local attachment
 bkper transaction create -b abc123 --date 2025-01-15 --amount 23.90 \
   --from "Cash" --to "Meals" --description "Team lunch" --file ./receipt.pdf
@@ -540,6 +544,10 @@ python export_bank.py | bkper transaction create -b abc123
 
 The input follows the exact `bkper.Transaction` or `bkper.Account` type from the [Bkper API Types](https://raw.githubusercontent.com/bkper/bkper-api-types/refs/heads/master/index.d.ts). Custom properties go inside the `properties` object.
 
+### AI-derived transaction safety
+
+Always set `"draft": true` for AI-derived transactions, even when complete. It bypasses Book auto-posting, so the transaction stays out of balances until explicitly posted. Do not rely on missing fields; parsing or Account discovery may complete them.
+
 Groups are created explicitly with `bkper group create --name` and optional `--parent` so hierarchy stays deterministic during setup.
 
 The `--property` CLI flag can override or delete properties from the stdin payload:
@@ -604,6 +612,7 @@ Only the fields below are meaningful when creating or updating resources via std
 | `creditAccount` | `{"name":"..."}` or `{"id":"..."}` | Reference to an existing account              |
 | `debitAccount`  | `{"name":"..."}` or `{"id":"..."}` | Reference to an existing account              |
 | `description`   | `string`                           | Free-text description                         |
+| `draft`         | `boolean`                          | `true` forces a draft and bypasses Book auto-posting |
 | `urls`          | `string[]`                         | Attached URLs (e.g. receipts)                 |
 | `remoteIds`     | `string[]`                         | External IDs to prevent duplicates            |
 | `properties`    | `{"key": "value", ...}`            | Custom key/value properties                   |

package/lib/docs/index.md

@@ -4,6 +4,8 @@ Reference docs for Bkper tasks. Load only the specific doc(s) relevant to the ta
 
 For Bkper data, accounting, reporting, tax, or financial-flow tasks, read `core/core-concepts.md` first.
 
+For Bkper app implementation, refactoring, or code review, always read `apps/quality.md` alongside the task-specific references. After implementation, review the changed code against the guidelines before considering the work complete.
+
 - `core/core-concepts.md` — canonical Bkper data model: resources, movements, balances, accounts, groups, books, transactions, properties, and the zero-sum invariant.
 - `cli/data-management.md` — CLI reference for managing financial data and files: books, accounts, groups, files, transactions, per-account balance queries, query operators (on:, after:, before:, account:, group:), output formats (table/json/csv), human-review Bkper UI links, batch operations via stdin/piping, collections.
 - `cli/app-management.md` — CLI reference for building and deploying Bkper apps: init/git clone/credential helpers, dev/build/deploy workflow, app install/uninstall, secrets management, app logs, bkper.yaml configuration reference (identity, branding, events, menu integration, deployment).
@@ -11,6 +13,8 @@ For Bkper data, accounting, reporting, tax, or financial-flow tasks, read `core/
 - `apps/ai.md` — Bkper AI integration for Platform apps: authenticated `/api/*` request flow, outbound authorization and app attribution, live model discovery, strict structured output, response validation, error preservation, data minimization, and unit-test boundaries.
 - `apps/first-app.md` — First-app walkthrough: scaffold, install, run locally, trigger an event, customize the listing, establish shared source, check, and deploy.
 - `apps/architecture.md` — App and template architecture: npm workspace structure, Lit/Vite client, Hono Worker, typed `/api/*` contracts, authentication, `/events`, static assets, and supported app shapes.
+- `apps/quality.md` — Cross-cutting quality guidance for Bkper apps: UI consistency, immediate first rendering, typed API contracts, cohesive low-coupling modules, separation of business behavior from connectors and storage, security, and final implementation review. Load for app implementation, refactoring, or review tasks.
+- `apps/security.md` — App security responsibilities and server-side authorization: platform authentication boundaries, user-domain restrictions, Book permission allowlists, and app installation checks.
 - `apps/configuration.md` — Complete `bkper.yaml` reference: identity, branding, ownership, access, context menus, event subscriptions, property schemas, and single-Worker deployment settings.
 - `apps/development.md` — Local development: Vite and Worker processes, ports, API proxy, local authentication, secrets, KV, generated environment types, development loop, and debugging.
 - `apps/event-handlers.md` — Event handler behavior: `/events` routing, responses, replay, loop prevention, platform and self-hosted authentication, event payloads, and event types.

package/lib/docs/sdk/bkper-js.md

@@ -636,7 +636,8 @@ It contains all `Accounts` where `Transactions` are recorded/posted;
 - `listEvents(options: ListEventsOptions)` → `Promise<EventList>` — Lists events in the Book based on the provided options.
 - `listFiles(limit?: number, cursor?: string)` → `Promise<FileList>` — Lists files in the Book, for pagination.
 - `listTransactions(query?: string, limit?: number, cursor?: string)` → `Promise<TransactionList>` — Lists transactions in the Book based on the provided query, limit, and cursor, for pagination.
-- `mergeTransactions(transaction1: string | bkper.Transaction | Transaction, transaction2: string | bkper.Transaction | Transaction)` → `Promise<Transaction>` — Merge two `Transactions` into a single new canonical transaction.
+- `mergeTransactions(primary: string | bkper.Transaction | Transaction, secondary: string | bkper.Transaction | Transaction)` → `Promise<Transaction>` — Merge a primary and secondary `Transaction`. Submitted primary fields
+have highest precedence; an id string sends no field overrides.
 - `parseDate(date: string)` → `Date` — Parse a date string according to date pattern and timezone of the Book. Also parse ISO yyyy-mm-dd format.
 - `parseValue(value: string)` → `Amount | undefined` — Parse a value string according to `DecimalSeparator` and fraction digits of the Book.
 - `remove()` → `Promise<Book>` — Warning!
@@ -736,11 +737,6 @@ const groups2 = await bookWithGroups.getGroups(); // Already cached
 
 Requests are sent sequentially in batches of up to 200 IDs.
 
-**mergeTransactions**
-
-The merged transaction is created synchronously. Cleanup of the two
-originals is scheduled asynchronously by the backend.
-
 **remove**
 
 Deletes this Book and all its data (transactions, accounts, groups). Book owner only.

package/package.json

@@ -1,14 +1,23 @@
 {
     "name": "bkper",
-    "version": "4.27.0",
-    "description": "Command line client for Bkper",
+    "version": "4.29.0",
+    "description": "Official Bkper CLI for accounting data, automation, apps, and AI agents",
     "bin": {
         "bkper": "./lib/cli.js"
     },
     "repository": "https://github.com/bkper/bkper-cli.git",
-    "homepage": "https://bkper.com/docs",
+    "homepage": "https://bkper.com/docs/build/tools/cli",
     "author": "mael <mael@bkper.com>",
     "license": "Apache-2.0",
+    "keywords": [
+        "bkper",
+        "cli",
+        "accounting",
+        "bookkeeping",
+        "finance",
+        "automation",
+        "ai-agent"
+    ],
     "private": false,
     "main": "./lib/index.js",
     "module": "./lib/index.js",
@@ -52,8 +61,8 @@
         "upgrade:api": "bun update @bkper/bkper-api-types --latest && bun update bkper-js --latest"
     },
     "dependencies": {
-        "@earendil-works/pi-coding-agent": "0.84.2",
-        "@earendil-works/pi-tui": "0.84.2",
+        "@earendil-works/pi-coding-agent": "0.84.3",
+        "@earendil-works/pi-tui": "0.84.3",
         "bkper-js": "^2.42.0",
         "commander": "^13.1.0",
         "dotenv": "^8.2.0",