claudekit-cli 3.35.0-dev.24 → 3.35.0-dev.25

package/dist/index.js

@@ -52839,6 +52839,27 @@ var init_skill_routes = __esm(() => {
 });
 
 // src/domains/github/npm-registry.ts
+function redactRegistryUrlForLog(url) {
+  if (!url)
+    return url;
+  try {
+    const parsed = new URL(url);
+    if (parsed.username) {
+      parsed.username = REDACTED_VALUE;
+    }
+    if (parsed.password) {
+      parsed.password = REDACTED_VALUE;
+    }
+    for (const key of parsed.searchParams.keys()) {
+      if (/(token|auth|password|secret|key)/i.test(key)) {
+        parsed.searchParams.set(key, REDACTED_VALUE);
+      }
+    }
+    return parsed.toString();
+  } catch {
+    return url.replace(/\/\/([^/@\s]+)@/, `//${REDACTED_VALUE}@`);
+  }
+}
 async function fetchWithTimeout(url, options2 = {}, timeout2 = REQUEST_TIMEOUT) {
   const controller = new AbortController;
   const timeoutId = setTimeout(() => controller.abort(), timeout2);
@@ -52860,7 +52881,7 @@ class NpmRegistryClient {
     }
     const registry = registryUrl || DEFAULT_REGISTRY_URL;
     const url = `${registry}/${encodeURIComponent(packageName)}`;
-    logger.debug(`Fetching package info from: ${url}`);
+    logger.debug(`Fetching package info from: ${redactRegistryUrlForLog(url)}`);
     try {
       const response = await fetchWithTimeout(url, {
         headers: {
@@ -52923,18 +52944,12 @@ class NpmRegistryClient {
     }
   }
   static async versionExists(packageName, version, registryUrl) {
-    try {
-      const info = await NpmRegistryClient.getPackageInfo(packageName, registryUrl);
-      if (!info)
-        return false;
-      const exists = version in (info.versions || {});
-      logger.debug(`Version ${version} exists for ${packageName}: ${exists}`);
-      return exists;
-    } catch (error) {
-      const message = error instanceof Error ? error.message : "Unknown error";
-      logger.debug(`Failed to check version ${version} for ${packageName}: ${message}`);
+    const info = await NpmRegistryClient.getPackageInfo(packageName, registryUrl);
+    if (!info)
       return false;
-    }
+    const exists = version in (info.versions || {});
+    logger.debug(`Version ${version} exists for ${packageName}: ${exists}`);
+    return exists;
   }
   static async getVersionInfo(packageName, version, registryUrl) {
     try {
@@ -52972,7 +52987,7 @@ class NpmRegistryClient {
     }
   }
 }
-var DEFAULT_REGISTRY_URL = "https://registry.npmjs.org", REQUEST_TIMEOUT = 5000;
+var DEFAULT_REGISTRY_URL = "https://registry.npmjs.org", REQUEST_TIMEOUT = 5000, REDACTED_VALUE = "***";
 var init_npm_registry = __esm(() => {
   init_logger();
 });
@@ -53009,9 +53024,9 @@ function getNpmQuery() {
     checkFn: (stdout) => {
       try {
         const data = JSON.parse(stdout);
-        return !!(data.dependencies?.[CLAUDEKIT_CLI_NPM_PACKAGE_NAME] || stdout.includes(CLAUDEKIT_CLI_NPM_PACKAGE_NAME));
+        return !!data.dependencies?.["claudekit-cli"];
       } catch {
-        return stdout.includes(CLAUDEKIT_CLI_NPM_PACKAGE_NAME);
+        return /"claudekit-cli"\s*:/.test(stdout) || /(?:^|[^a-z0-9-])claudekit-cli@/m.test(stdout);
       }
     }
   };
@@ -53029,7 +53044,36 @@ async function getNpmVersion() {
     return null;
   }
 }
-function getNpmUpdateCommand(packageName, version) {
+function normalizeNpmRegistryUrl(rawValue) {
+  const value = rawValue.trim();
+  if (!value) {
+    return null;
+  }
+  if (!/^https?:\/\//i.test(value)) {
+    return null;
+  }
+  try {
+    const parsed = new URL(value);
+    const protocol = parsed.protocol.toLowerCase();
+    if (protocol !== "http:" && protocol !== "https:") {
+      return null;
+    }
+    const normalizedPath = parsed.pathname.replace(/\/+$/, "");
+    return `${parsed.protocol}//${parsed.host}${normalizedPath}${parsed.search}${parsed.hash}`;
+  } catch {
+    return null;
+  }
+}
+async function getNpmRegistryUrl() {
+  try {
+    const cmd = isWindows() ? "npm.cmd config get registry" : "npm config get registry";
+    const { stdout } = await execAsync(cmd, { timeout: 3000 });
+    return normalizeNpmRegistryUrl(stdout);
+  } catch {
+    return null;
+  }
+}
+function getNpmUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -53037,7 +53081,8 @@ function getNpmUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return isWindows() ? `npm.cmd install -g ${packageName}${versionSuffix}` : `npm install -g ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return isWindows() ? `npm.cmd install -g ${packageName}${versionSuffix}${registryFlag}` : `npm install -g ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_npm_detector = __esm(() => {
   init_claudekit_constants();
@@ -53051,7 +53096,7 @@ function getBunQuery() {
   return {
     pm: "bun",
     cmd: "bun pm ls -g",
-    checkFn: (stdout) => stdout.includes(CLAUDEKIT_CLI_NPM_PACKAGE_NAME)
+    checkFn: (stdout) => /(?:^|[^a-z0-9-])claudekit-cli@/m.test(stdout)
   };
 }
 function getBunVersionCommand() {
@@ -53067,7 +53112,7 @@ async function getBunVersion() {
     return null;
   }
 }
-function getBunUpdateCommand(packageName, version) {
+function getBunUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -53075,10 +53120,10 @@ function getBunUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return `bun add -g ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return `bun add -g ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_bun_detector = __esm(() => {
-  init_claudekit_constants();
   init_constants();
   init_detector_base();
 });
@@ -53087,8 +53132,8 @@ var init_bun_detector = __esm(() => {
 function getYarnQuery() {
   return {
     pm: "yarn",
-    cmd: isWindows() ? `yarn.cmd global list --pattern ${CLAUDEKIT_CLI_NPM_PACKAGE_NAME}` : `yarn global list --pattern ${CLAUDEKIT_CLI_NPM_PACKAGE_NAME}`,
-    checkFn: (stdout) => stdout.includes(CLAUDEKIT_CLI_NPM_PACKAGE_NAME)
+    cmd: isWindows() ? "yarn.cmd global list --pattern claudekit-cli" : "yarn global list --pattern claudekit-cli",
+    checkFn: (stdout) => /(?:^|[^a-z0-9-])claudekit-cli@/m.test(stdout)
   };
 }
 function getYarnVersionCommand() {
@@ -53104,7 +53149,7 @@ async function getYarnVersion() {
     return null;
   }
 }
-function getYarnUpdateCommand(packageName, version) {
+function getYarnUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -53112,10 +53157,10 @@ function getYarnUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return isWindows() ? `yarn.cmd global add ${packageName}${versionSuffix}` : `yarn global add ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return isWindows() ? `yarn.cmd global add ${packageName}${versionSuffix}${registryFlag}` : `yarn global add ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_yarn_detector = __esm(() => {
-  init_claudekit_constants();
   init_environment();
   init_constants();
   init_detector_base();
@@ -53125,8 +53170,8 @@ var init_yarn_detector = __esm(() => {
 function getPnpmQuery() {
   return {
     pm: "pnpm",
-    cmd: isWindows() ? `pnpm.cmd ls -g ${CLAUDEKIT_CLI_NPM_PACKAGE_NAME}` : `pnpm ls -g ${CLAUDEKIT_CLI_NPM_PACKAGE_NAME}`,
-    checkFn: (stdout) => stdout.includes(CLAUDEKIT_CLI_NPM_PACKAGE_NAME)
+    cmd: isWindows() ? "pnpm.cmd ls -g claudekit-cli" : "pnpm ls -g claudekit-cli",
+    checkFn: (stdout) => /(?:^|[^a-z0-9-])claudekit-cli(?:@|\s+\d)/m.test(stdout)
   };
 }
 function getPnpmVersionCommand() {
@@ -53142,7 +53187,7 @@ async function getPnpmVersion() {
     return null;
   }
 }
-function getPnpmUpdateCommand(packageName, version) {
+function getPnpmUpdateCommand(packageName, version, registryUrl) {
   if (!isValidPackageName(packageName)) {
     throw new Error(`Invalid package name: ${packageName}`);
   }
@@ -53150,10 +53195,10 @@ function getPnpmUpdateCommand(packageName, version) {
     throw new Error(`Invalid version: ${version}`);
   }
   const versionSuffix = version ? `@${version}` : "@latest";
-  return isWindows() ? `pnpm.cmd add -g ${packageName}${versionSuffix}` : `pnpm add -g ${packageName}${versionSuffix}`;
+  const registryFlag = registryUrl ? ` --registry ${registryUrl}` : "";
+  return isWindows() ? `pnpm.cmd add -g ${packageName}${versionSuffix}${registryFlag}` : `pnpm add -g ${packageName}${versionSuffix}${registryFlag}`;
 }
 var init_pnpm_detector = __esm(() => {
-  init_claudekit_constants();
   init_environment();
   init_constants();
   init_detector_base();
@@ -53426,24 +53471,25 @@ var init_package_manager_detector = __esm(() => {
           return "echo unknown";
       }
     }
-    static getUpdateCommand(pm, packageName, version) {
+    static getNpmRegistryUrl = getNpmRegistryUrl;
+    static getUpdateCommand(pm, packageName, version, registryUrl) {
       if (!isValidPackageName(packageName))
         throw new Error(`Invalid package name: ${packageName}`);
       if (version && !isValidVersion(version))
         throw new Error(`Invalid version: ${version}`);
       switch (pm) {
         case "bun":
-          return getBunUpdateCommand(packageName, version);
+          return getBunUpdateCommand(packageName, version, registryUrl);
         case "yarn":
-          return getYarnUpdateCommand(packageName, version);
+          return getYarnUpdateCommand(packageName, version, registryUrl);
         case "pnpm":
-          return getPnpmUpdateCommand(packageName, version);
+          return getPnpmUpdateCommand(packageName, version, registryUrl);
         default:
-          return getNpmUpdateCommand(packageName, version);
+          return getNpmUpdateCommand(packageName, version, registryUrl);
       }
     }
-    static getInstallCommand(pm, packageName, version) {
-      return PackageManagerDetector.getUpdateCommand(pm, packageName, version);
+    static getInstallCommand(pm, packageName, version, registryUrl) {
+      return PackageManagerDetector.getUpdateCommand(pm, packageName, version, registryUrl);
     }
     static getDisplayName(pm) {
       switch (pm) {
@@ -53872,7 +53918,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "claudekit-cli",
-    version: "3.35.0-dev.24",
+    version: "3.35.0-dev.25",
     description: "CLI tool for bootstrapping and updating ClaudeKit projects",
     type: "module",
     repository: {
@@ -53983,6 +54029,12 @@ var init_package = __esm(() => {
 import { exec as exec2 } from "node:child_process";
 import { join as join37 } from "node:path";
 import { promisify as promisify8 } from "node:util";
+function redactCommandForLog(command) {
+  if (!command)
+    return command;
+  const redactedRegistryFlags = command.replace(/(--registry(?:=|\s+))(['"]?)(\S+?)(\2)(?=\s|$)/g, (_match, prefix, quote, url) => `${prefix}${quote}${redactRegistryUrlForLog(url)}${quote}`);
+  return redactedRegistryFlags.replace(/https?:\/\/[^\s"']+/g, (url) => redactRegistryUrlForLog(url));
+}
 function buildInitCommand(isGlobal, kit, beta) {
   const parts = ["ck init"];
   if (isGlobal)
@@ -54112,31 +54164,50 @@ async function updateCliCommand(options2) {
     const pmVersion = await PackageManagerDetector.getVersion(pm);
     s.stop(`Using ${PackageManagerDetector.getDisplayName(pm)}${pmVersion ? ` v${pmVersion}` : ""}`);
     logger.verbose(`Detected package manager: ${pm}`);
+    let registryUrl = opts.registry;
+    if (!registryUrl && pm === "npm") {
+      const userRegistry = await PackageManagerDetector.getNpmRegistryUrl();
+      if (userRegistry) {
+        registryUrl = userRegistry;
+        logger.verbose(`Using npm configured registry: ${redactRegistryUrlForLog(registryUrl)}`);
+      }
+    }
     s.start("Checking for updates...");
     let targetVersion = null;
     if (opts.release && opts.release !== "latest") {
-      const exists = await NpmRegistryClient.versionExists(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, opts.release, opts.registry);
-      if (!exists) {
-        s.stop("Version not found");
-        throw new CliUpdateError(`Version ${opts.release} does not exist on npm registry. Run 'ck versions' to see available versions.`);
+      try {
+        const exists = await NpmRegistryClient.versionExists(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, opts.release, registryUrl);
+        if (!exists) {
+          s.stop("Version not found");
+          throw new CliUpdateError(`Version ${opts.release} does not exist on npm registry. Run 'ck versions' to see available versions.`);
+        }
+      } catch (error) {
+        if (error instanceof CliUpdateError) {
+          throw error;
+        }
+        s.stop("Version check failed");
+        const message = error instanceof Error ? error.message : "Unknown error";
+        logger.verbose(`Release check failed for ${opts.release}: ${message}`);
+        const registryHint = registryUrl ? ` (${redactRegistryUrlForLog(registryUrl)})` : " (default registry)";
+        throw new CliUpdateError(`Failed to verify version ${opts.release} on npm registry${registryHint}. Check registry settings/network connectivity and try again.`);
       }
       targetVersion = opts.release;
       s.stop(`Target version: ${targetVersion}`);
     } else if (opts.dev || opts.beta) {
-      targetVersion = await NpmRegistryClient.getDevVersion(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, opts.registry);
+      targetVersion = await NpmRegistryClient.getDevVersion(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, registryUrl);
       if (!targetVersion) {
         s.stop("No dev version available");
         logger.warning("No dev version found. Using latest stable version instead.");
-        targetVersion = await NpmRegistryClient.getLatestVersion(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, opts.registry);
+        targetVersion = await NpmRegistryClient.getLatestVersion(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, registryUrl);
       } else {
         s.stop(`Latest dev version: ${targetVersion}`);
       }
     } else {
-      targetVersion = await NpmRegistryClient.getLatestVersion(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, opts.registry);
+      targetVersion = await NpmRegistryClient.getLatestVersion(CLAUDEKIT_CLI_NPM_PACKAGE_NAME, registryUrl);
       s.stop(`Latest version: ${targetVersion || "unknown"}`);
     }
     if (!targetVersion) {
-      throw new CliUpdateError(`Failed to fetch version information from npm registry. Check your internet connection and try again. Manual update: ${PackageManagerDetector.getUpdateCommand(pm, CLAUDEKIT_CLI_NPM_PACKAGE_NAME)}`);
+      throw new CliUpdateError(`Failed to fetch version information from npm registry. Check your internet connection and try again. Manual update: ${PackageManagerDetector.getUpdateCommand(pm, CLAUDEKIT_CLI_NPM_PACKAGE_NAME, undefined, registryUrl)}`);
     }
     const comparison = import_compare_versions.compareVersions(currentVersion, targetVersion);
     if (comparison === 0) {
@@ -54169,8 +54240,8 @@ Run 'ck update' to install`, "Update Check");
         return;
       }
     }
-    const updateCmd = PackageManagerDetector.getUpdateCommand(pm, CLAUDEKIT_CLI_NPM_PACKAGE_NAME, targetVersion);
-    logger.info(`Running: ${updateCmd}`);
+    const updateCmd = PackageManagerDetector.getUpdateCommand(pm, CLAUDEKIT_CLI_NPM_PACKAGE_NAME, targetVersion, registryUrl);
+    logger.info(`Running: ${redactCommandForLog(updateCmd)}`);
     s.start("Updating CLI...");
     try {
       await execAsync2(updateCmd, {
@@ -54197,7 +54268,7 @@ Or fix npm permissions: https://docs.npmjs.com/resolving-eacces-permissions-erro
         throw new CliUpdateError(`Permission denied. Try: ${elevationHint}${permHint}`);
       }
       logger.error(`Update failed: ${errorMessage}`);
-      logger.info(`Try running: ${updateCmd}`);
+      logger.info(`Try running: ${redactCommandForLog(updateCmd)}`);
       throw new CliUpdateError(`Update failed: ${errorMessage}
 
 Manual update: ${updateCmd}`);
@@ -54217,7 +54288,6 @@ Manual update: ${updateCmd}`);
     }
   } catch (error) {
     if (error instanceof CliUpdateError) {
-      logger.error(error.message);
       throw error;
     }
     const errorMessage = error instanceof Error ? error.message : "Unknown error";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "claudekit-cli",
-	"version": "3.35.0-dev.24",
+	"version": "3.35.0-dev.25",
 	"description": "CLI tool for bootstrapping and updating ClaudeKit projects",
 	"type": "module",
 	"repository": {