claudekit-cli 3.34.4 → 3.34.5

package/dist/index.js

@@ -44436,6 +44436,27 @@ var init_skill_routes = __esm(() => {
 });
 
 // src/domains/github/npm-registry.ts
+function redactRegistryUrlForLog(url) {
+  if (!url)
+    return url;
+  try {
+    const parsed = new URL(url);
+    if (parsed.username) {
+      parsed.username = REDACTED_VALUE;
+    }
+    if (parsed.password) {
+      parsed.password = REDACTED_VALUE;
+    }
+    for (const key of parsed.searchParams.keys()) {
+      if (/(token|auth|password|secret|key)/i.test(key)) {
+        parsed.searchParams.set(key, REDACTED_VALUE);
+      }
+    }
+    return parsed.toString();
+  } catch {
+    return url.replace(/\/\/([^/@\s]+)@/, `//${REDACTED_VALUE}@`);
+  }
+}
 async function fetchWithTimeout(url, options2 = {}, timeout2 = REQUEST_TIMEOUT) {
   const controller = new AbortController;
   const timeoutId = setTimeout(() => controller.abort(), timeout2);
@@ -44457,7 +44478,7 @@ class NpmRegistryClient {
     }
     const registry = registryUrl || DEFAULT_REGISTRY_URL;
     const url = `${registry}/${encodeURIComponent(packageName)}`;
-    logger.debug(`Fetching package info from: ${url}`);
+    logger.debug(`Fetching package info from: ${redactRegistryUrlForLog(url)}`);
     try {
       const response = await fetchWithTimeout(url, {
         headers: {
@@ -44520,18 +44541,12 @@ class NpmRegistryClient {
     }
   }
   static async versionExists(packageName, version, registryUrl) {
-    try {
-      const info = await NpmRegistryClient.getPackageInfo(packageName, registryUrl);
-      if (!info)
-        return false;
-      const exists = version in (info.versions || {});
-      logger.debug(`Version ${version} exists for ${packageName}: ${exists}`);
-      return exists;
-    } catch (error) {
-      const message = error instanceof Error ? error.message : "Unknown error";
-      logger.debug(`Failed to check version ${version} for ${packageName}: ${message}`);
+    const info = await NpmRegistryClient.getPackageInfo(packageName, registryUrl);
+    if (!info)
       return false;
-    }
+    const exists = version in (info.versions || {});
+    logger.debug(`Version ${version} exists for ${packageName}: ${exists}`);
+    return exists;
   }
   static async getVersionInfo(packageName, version, registryUrl) {
     try {
@@ -44569,7 +44584,7 @@ class NpmRegistryClient {
     }
   }
 }
-var DEFAULT_REGISTRY_URL = "https://registry.npmjs.org", REQUEST_TIMEOUT = 5000;
+var DEFAULT_REGISTRY_URL = "https://registry.npmjs.org", REQUEST_TIMEOUT = 5000, REDACTED_VALUE = "***";
 var init_npm_registry = __esm(() => {
   init_logger();
 });
@@ -44596,9 +44611,9 @@ function getNpmQuery() {
     checkFn: (stdout) => {
       try {
         const data = JSON.parse(stdout);
-        return !!(data.dependencies?.["claudekit-cli"] || stdout.includes("claudekit-cli"));
+        return !!data.dependencies?.["claudekit-cli"];
       } catch {
-        return stdout.includes("claudekit-cli");
+        return /"claudekit-cli"\s*:/.test(stdout) || /(?:^|[^a-z0-9-])claudekit-cli@/m.test(stdout);
       }
     }
   };
@@ -44614,7 +44629,36 @@ async function getNpmVersion() {
     return null;
   }
 }
-function getNpmUpdateCommand(packageName, version) {
+function normalizeNpmRegistryUrl(rawValue) {
+  const value = rawValue.trim();
+  if (!value) {
+    return null;
+  }
+  if (!/^https?:\/\//i.test(value)) {
+    return null;
+  }
+  try {
+    const parsed = new URL(value);
+    const protocol = parsed.protocol.toLowerCase();
+    if (protocol !== "http:" && protocol !== "https:") {
+      return null;
+    }
+    const normalizedPath = parsed.pathname.replace(/\/+$/, "");
+    return `${parsed.protocol}//${parsed.host}${normalizedPath}${parsed.search}${parsed.hash}`;
+  } catch {
+    return null;
+  }
+}
+async function getNpmRegistryUrl() {
+  try {
+    const cmd = isWindows() ? "npm.cmd config get registry" : "npm config get registry";
+    const { stdout } = await execAsync(cmd, { timeout: 3000 });
+    return normalizeNpmRegistryUrl(stdout);
+  } catch {
+    return null;
+  }
+}
+function getNpmUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -44622,7 +44666,8 @@ function getNpmUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return isWindows() ? `npm.cmd install -g ${packageName}${versionSuffix}` : `npm install -g ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return isWindows() ? `npm.cmd install -g ${packageName}${versionSuffix}${registryFlag}` : `npm install -g ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_npm_detector = __esm(() => {
   init_environment();
@@ -44634,7 +44679,7 @@ function getBunQuery() {
   return {
     pm: "bun",
     cmd: "bun pm ls -g",
-    checkFn: (stdout) => stdout.includes("claudekit-cli")
+    checkFn: (stdout) => /(?:^|[^a-z0-9-])claudekit-cli@/m.test(stdout)
   };
 }
 function getBunVersionCommand() {
@@ -44648,7 +44693,7 @@ async function getBunVersion() {
     return null;
   }
 }
-function getBunUpdateCommand(packageName, version) {
+function getBunUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -44656,7 +44701,8 @@ function getBunUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return `bun add -g ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return `bun add -g ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_bun_detector = __esm(() => {
   init_detector_base();
@@ -44667,7 +44713,7 @@ function getYarnQuery() {
   return {
     pm: "yarn",
     cmd: isWindows() ? "yarn.cmd global list --pattern claudekit-cli" : "yarn global list --pattern claudekit-cli",
-    checkFn: (stdout) => stdout.includes("claudekit-cli")
+    checkFn: (stdout) => /(?:^|[^a-z0-9-])claudekit-cli@/m.test(stdout)
   };
 }
 function getYarnVersionCommand() {
@@ -44681,7 +44727,7 @@ async function getYarnVersion() {
     return null;
   }
 }
-function getYarnUpdateCommand(packageName, version) {
+function getYarnUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -44689,7 +44735,8 @@ function getYarnUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return isWindows() ? `yarn.cmd global add ${packageName}${versionSuffix}` : `yarn global add ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return isWindows() ? `yarn.cmd global add ${packageName}${versionSuffix}${registryFlag}` : `yarn global add ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_yarn_detector = __esm(() => {
   init_environment();
@@ -44701,7 +44748,7 @@ function getPnpmQuery() {
   return {
     pm: "pnpm",
     cmd: isWindows() ? "pnpm.cmd ls -g claudekit-cli" : "pnpm ls -g claudekit-cli",
-    checkFn: (stdout) => stdout.includes("claudekit-cli")
+    checkFn: (stdout) => /(?:^|[^a-z0-9-])claudekit-cli(?:@|\s+\d)/m.test(stdout)
   };
 }
 function getPnpmVersionCommand() {
@@ -44715,7 +44762,7 @@ async function getPnpmVersion() {
     return null;
   }
 }
-function getPnpmUpdateCommand(packageName, version) {
+function getPnpmUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -44723,7 +44770,8 @@ function getPnpmUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return isWindows() ? `pnpm.cmd add -g ${packageName}${versionSuffix}` : `pnpm add -g ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return isWindows() ? `pnpm.cmd add -g ${packageName}${versionSuffix}${registryFlag}` : `pnpm add -g ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_pnpm_detector = __esm(() => {
   init_environment();
@@ -44936,24 +44984,25 @@ var init_package_manager_detector = __esm(() => {
           return "echo unknown";
       }
     }
-    static getUpdateCommand(pm, packageName, version) {
+    static getNpmRegistryUrl = getNpmRegistryUrl;
+    static getUpdateCommand(pm, packageName, version, registryUrl) {
       if (!isValidPackageName(packageName))
         throw new Error(`Invalid package name: ${packageName}`);
       if (version && !isValidVersion(version))
         throw new Error(`Invalid version: ${version}`);
       switch (pm) {
         case "bun":
-          return getBunUpdateCommand(packageName, version);
+          return getBunUpdateCommand(packageName, version, registryUrl);
         case "yarn":
-          return getYarnUpdateCommand(packageName, version);
+          return getYarnUpdateCommand(packageName, version, registryUrl);
         case "pnpm":
-          return getPnpmUpdateCommand(packageName, version);
+          return getPnpmUpdateCommand(packageName, version, registryUrl);
         default:
-          return getNpmUpdateCommand(packageName, version);
+          return getNpmUpdateCommand(packageName, version, registryUrl);
       }
     }
-    static getInstallCommand(pm, packageName, version) {
-      return PackageManagerDetector.getUpdateCommand(pm, packageName, version);
+    static getInstallCommand(pm, packageName, version, registryUrl) {
+      return PackageManagerDetector.getUpdateCommand(pm, packageName, version, registryUrl);
     }
     static getDisplayName(pm) {
       switch (pm) {
@@ -45382,7 +45431,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "claudekit-cli",
-    version: "3.34.4",
+    version: "3.34.5",
     description: "CLI tool for bootstrapping and updating ClaudeKit projects",
     type: "module",
     repository: {
@@ -45492,6 +45541,12 @@ var init_package = __esm(() => {
 import { exec as exec2 } from "node:child_process";
 import { join as join26 } from "node:path";
 import { promisify as promisify8 } from "node:util";
+function redactCommandForLog(command) {
+  if (!command)
+    return command;
+  const redactedRegistryFlags = command.replace(/(--registry(?:=|\s+))(['"]?)(\S+?)(\2)(?=\s|$)/g, (_match, prefix, quote, url) => `${prefix}${quote}${redactRegistryUrlForLog(url)}${quote}`);
+  return redactedRegistryFlags.replace(/https?:\/\/[^\s"']+/g, (url) => redactRegistryUrlForLog(url));
+}
 function buildInitCommand(isGlobal, kit, beta) {
   const parts = ["ck init"];
   if (isGlobal)
@@ -45621,31 +45676,50 @@ async function updateCliCommand(options2) {
     const pmVersion = await PackageManagerDetector.getVersion(pm);
     s.stop(`Using ${PackageManagerDetector.getDisplayName(pm)}${pmVersion ? ` v${pmVersion}` : ""}`);
     logger.verbose(`Detected package manager: ${pm}`);
+    let registryUrl = opts.registry;
+    if (!registryUrl && pm === "npm") {
+      const userRegistry = await PackageManagerDetector.getNpmRegistryUrl();
+      if (userRegistry) {
+        registryUrl = userRegistry;
+        logger.verbose(`Using npm configured registry: ${redactRegistryUrlForLog(registryUrl)}`);
+      }
+    }
     s.start("Checking for updates...");
     let targetVersion = null;
     if (opts.release && opts.release !== "latest") {
-      const exists = await NpmRegistryClient.versionExists(PACKAGE_NAME, opts.release, opts.registry);
-      if (!exists) {
-        s.stop("Version not found");
-        throw new CliUpdateError(`Version ${opts.release} does not exist on npm registry. Run 'ck versions' to see available versions.`);
+      try {
+        const exists = await NpmRegistryClient.versionExists(PACKAGE_NAME, opts.release, registryUrl);
+        if (!exists) {
+          s.stop("Version not found");
+          throw new CliUpdateError(`Version ${opts.release} does not exist on npm registry. Run 'ck versions' to see available versions.`);
+        }
+      } catch (error) {
+        if (error instanceof CliUpdateError) {
+          throw error;
+        }
+        s.stop("Version check failed");
+        const message = error instanceof Error ? error.message : "Unknown error";
+        logger.verbose(`Release check failed for ${opts.release}: ${message}`);
+        const registryHint = registryUrl ? ` (${redactRegistryUrlForLog(registryUrl)})` : " (default registry)";
+        throw new CliUpdateError(`Failed to verify version ${opts.release} on npm registry${registryHint}. Check registry settings/network connectivity and try again.`);
       }
       targetVersion = opts.release;
       s.stop(`Target version: ${targetVersion}`);
     } else if (opts.dev || opts.beta) {
-      targetVersion = await NpmRegistryClient.getDevVersion(PACKAGE_NAME, opts.registry);
+      targetVersion = await NpmRegistryClient.getDevVersion(PACKAGE_NAME, registryUrl);
       if (!targetVersion) {
         s.stop("No dev version available");
         logger.warning("No dev version found. Using latest stable version instead.");
-        targetVersion = await NpmRegistryClient.getLatestVersion(PACKAGE_NAME, opts.registry);
+        targetVersion = await NpmRegistryClient.getLatestVersion(PACKAGE_NAME, registryUrl);
       } else {
         s.stop(`Latest dev version: ${targetVersion}`);
       }
     } else {
-      targetVersion = await NpmRegistryClient.getLatestVersion(PACKAGE_NAME, opts.registry);
+      targetVersion = await NpmRegistryClient.getLatestVersion(PACKAGE_NAME, registryUrl);
       s.stop(`Latest version: ${targetVersion || "unknown"}`);
     }
     if (!targetVersion) {
-      throw new CliUpdateError(`Failed to fetch version information from npm registry. Check your internet connection and try again. Manual update: ${PackageManagerDetector.getUpdateCommand(pm, PACKAGE_NAME)}`);
+      throw new CliUpdateError(`Failed to fetch version information from npm registry. Check your internet connection and try again. Manual update: ${PackageManagerDetector.getUpdateCommand(pm, PACKAGE_NAME, undefined, registryUrl)}`);
     }
     const comparison = import_compare_versions.compareVersions(currentVersion, targetVersion);
     if (comparison === 0) {
@@ -45678,8 +45752,8 @@ Run 'ck update' to install`, "Update Check");
         return;
       }
     }
-    const updateCmd = PackageManagerDetector.getUpdateCommand(pm, PACKAGE_NAME, targetVersion);
-    logger.info(`Running: ${updateCmd}`);
+    const updateCmd = PackageManagerDetector.getUpdateCommand(pm, PACKAGE_NAME, targetVersion, registryUrl);
+    logger.info(`Running: ${redactCommandForLog(updateCmd)}`);
     s.start("Updating CLI...");
     try {
       await execAsync2(updateCmd, {
@@ -45703,7 +45777,7 @@ Run 'ck update' to install`, "Update Check");
 Or fix npm permissions: https://docs.npmjs.com/resolving-eacces-permissions-errors-when-installing-packages-globally`);
       }
       logger.error(`Update failed: ${errorMessage}`);
-      logger.info("Try running: npm install -g claudekit-cli@latest");
+      logger.info(`Try running: ${redactCommandForLog(updateCmd)}`);
       throw new CliUpdateError(`Update failed: ${errorMessage}
 
 Manual update: ${updateCmd}`);
@@ -45723,7 +45797,6 @@ Manual update: ${updateCmd}`);
     }
   } catch (error) {
     if (error instanceof CliUpdateError) {
-      logger.error(error.message);
       throw error;
     }
     const errorMessage = error instanceof Error ? error.message : "Unknown error";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "claudekit-cli",
-	"version": "3.34.4",
+	"version": "3.34.5",
 	"description": "CLI tool for bootstrapping and updating ClaudeKit projects",
 	"type": "module",
 	"repository": {