coreslopper 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.2.0](https://github.com/hemi1986/coreslopper/compare/v0.1.0...v0.2.0) (2026-11-08)
+
+
+### Features
+
+* add `coreslopper update` to merge a newer workflow into a workspace ([3eddb5c](https://github.com/hemi1986/coreslopper/commit/3eddb5caa64a534a9bf21ca13d45d24c747976e3))
+* add `coreslopper update` to merge a newer workflow into a workspace ([1d10ffd](https://github.com/hemi1986/coreslopper/commit/1d10ffda2a6639d1a5b2a489564a54c9b2422cda))
+
 ## 0.1.0 (2026-11-08)
 
 

package/README.md

@@ -72,7 +72,7 @@ cd my-video
 claude
 ```
 
-Run `/mcp` once to authenticate Suno, then `/video-next my-video`. The generated workspace contains the full workflow runtime, so every `npm run cli -- ...` command in this README works inside it. Running `npx coreslopper` without arguments inside a workspace prints the available commands. See [docs/onboarding.md](docs/onboarding.md) for all flags and troubleshooting.
+Run `/mcp` once to authenticate Suno, then `/video-next my-video`. The generated workspace contains the full workflow runtime, so every `npm run cli -- ...` command in this README works inside it. Running `npx coreslopper` without arguments inside a workspace prints the available commands. To move a workspace to a newer release, run `npx coreslopper@latest update` inside it; local edits are kept. See [docs/onboarding.md](docs/onboarding.md) for all flags, updating, and troubleshooting.
 
 ## Quickstarts
 

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // packages/cli/src/npx.ts
 import { Command } from "commander";
-import { relative as relative3, resolve as resolve7 } from "path";
+import { relative as relative4, resolve as resolve8 } from "path";
 
 // packages/cli/src/doctor.ts
 import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
@@ -1464,14 +1464,14 @@ async function runDoctor(root, options = {}) {
 }
 
 // packages/cli/src/init-command.ts
-import { resolve as resolve5 } from "path";
+import { resolve as resolve6 } from "path";
 
 // packages/cli/src/init.ts
-import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync } from "fs";
-import { chmod, cp as cp2, mkdir as mkdir6, readFile as readFile7, readdir, stat as stat2, writeFile as writeFile6 } from "fs/promises";
+import { spawnSync as spawnSync3 } from "child_process";
+import { existsSync as existsSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync2 } from "fs";
+import { chmod as chmod2, cp as cp2, mkdir as mkdir7, readFile as readFile8, readdir as readdir2, stat as stat3, writeFile as writeFile6 } from "fs/promises";
 import { homedir as homedir2 } from "os";
-import { basename, isAbsolute, join as join9, parse, relative as relative2, resolve as resolve3, sep } from "path";
+import { basename, isAbsolute, join as join10, parse, relative as relative3, resolve as resolve4, sep as sep2 } from "path";
 
 // packages/cli/src/new-project.ts
 import { cp, mkdir as mkdir5, readFile as readFile6, writeFile as writeFile5 } from "fs/promises";
@@ -1585,7 +1585,12 @@ function relativeToRoot(path, root) {
   return path.startsWith(root) ? path.slice(root.length + 1) : path;
 }
 
-// packages/cli/src/init.ts
+// packages/cli/src/update.ts
+import { spawnSync as spawnSync2 } from "child_process";
+import { createHash as createHash4 } from "crypto";
+import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync } from "fs";
+import { chmod, copyFile as copyFile2, mkdir as mkdir6, readFile as readFile7, readdir, rm, rmdir, stat as stat2 } from "fs/promises";
+import { dirname as dirname4, join as join9, posix, relative as relative2, resolve as resolve3, sep } from "path";
 var SKIPPED_DIRECTORIES = /* @__PURE__ */ new Set([
   ".git",
   ".cache",
@@ -1599,13 +1604,270 @@ var SKIPPED_DIRECTORIES = /* @__PURE__ */ new Set([
   "runtime",
   "tmp"
 ]);
+var CONFLICT_SUFFIX = ".coreslopper-new";
+var USER_OWNED_FILES = /* @__PURE__ */ new Set([".mcp.json", WORKSPACE_MARKER, "GETTING_STARTED.md"]);
+var ALWAYS_UPSTREAM_FILES = /* @__PURE__ */ new Set(["package-lock.json"]);
+var USER_OWNED_PREFIXES = ["projects/"];
+function isRuntimePath(path) {
+  if (!path) return true;
+  const segments = path.split("/");
+  if (segments.some((segment) => SKIPPED_DIRECTORIES.has(segment))) return false;
+  if (segments.at(-1)?.endsWith(CONFLICT_SUFFIX)) return false;
+  if (path === ".env" || path.startsWith(".env.") && path !== ".env.example") return false;
+  return true;
+}
+function toPosix(path) {
+  return sep === "/" ? path : path.split(sep).join(posix.sep);
+}
+async function listRuntimeFiles(runtime) {
+  const files = [];
+  async function walk(directory) {
+    for (const entry of await readdir(directory, { withFileTypes: true })) {
+      const absolute = join9(directory, entry.name);
+      const path = toPosix(relative2(runtime, absolute));
+      if (!isRuntimePath(path)) continue;
+      if (entry.isDirectory()) await walk(absolute);
+      else if (entry.isFile()) files.push(path);
+    }
+  }
+  await walk(runtime);
+  return files.sort();
+}
+async function hashFile2(path) {
+  return createHash4("sha256").update(await readFile7(path)).digest("hex");
+}
+async function hashRuntime(runtime) {
+  const hashes = {};
+  for (const file of await listRuntimeFiles(runtime)) hashes[file] = await hashFile2(join9(runtime, file));
+  return hashes;
+}
+function readMarker(target) {
+  const path = join9(target, WORKSPACE_MARKER);
+  if (!existsSync6(path)) return void 0;
+  try {
+    return JSON.parse(readFileSync5(path, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function writeMarkerFile(target, marker) {
+  writeFileSync(join9(target, WORKSPACE_MARKER), `${JSON.stringify(marker, null, 2)}
+`, "utf8");
+}
+function compareVersions(a, b) {
+  const parse2 = (value) => value.split("-")[0].split(".").map((part) => Number(part) || 0);
+  const left = parse2(a);
+  const right = parse2(b);
+  for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
+    const difference = (left[index] ?? 0) - (right[index] ?? 0);
+    if (difference !== 0) return Math.sign(difference);
+  }
+  return 0;
+}
+function resolveRuntime(runtimeDir2) {
+  const runtime = runtimeDir2 ? resolve3(runtimeDir2) : runtimeDir();
+  if (!runtime || !existsSync6(join9(runtime, "templates", "project"))) {
+    throw new ValidationError('Runtime assets not found. Run "npx coreslopper@latest update" from the workspace.');
+  }
+  return runtime;
+}
+function runtimeVersion(runtime) {
+  try {
+    const packageJson = JSON.parse(readFileSync5(join9(runtime, "package.json"), "utf8"));
+    return packageJson.version ?? ownVersion();
+  } catch {
+    return ownVersion();
+  }
+}
+function gitIsDirty(target) {
+  if (!existsSync6(join9(target, ".git"))) return false;
+  const result = spawnSync2("git", ["status", "--porcelain"], { cwd: target, encoding: "utf8" });
+  return result.status === 0 && result.stdout.trim().length > 0;
+}
+async function install(source, destination) {
+  await mkdir6(dirname4(destination), { recursive: true });
+  await copyFile2(source, destination);
+  await chmod(destination, (await stat2(source)).mode).catch(() => void 0);
+}
+async function pruneEmptyDirectories(target, file) {
+  let directory = dirname4(join9(target, file));
+  while (directory !== target && directory.startsWith(target)) {
+    if ((await readdir(directory)).length > 0) return;
+    await rmdir(directory);
+    directory = dirname4(directory);
+  }
+}
+async function updateWorkspace(options) {
+  const target = resolve3(options.targetDir);
+  const runtime = resolveRuntime(options.runtimeDir);
+  if (!isWorkspace(target)) {
+    throw new ValidationError(`No coreslopper workspace found at ${target}. Create one with "npx coreslopper init".`);
+  }
+  if (existsSync6(join9(target, "scripts", "build-runtime.mjs")) || existsSync6(join9(target, "tsup.config.ts"))) {
+    throw new ValidationError('This is the coreslopper source repository. Update it with git, not "coreslopper update".');
+  }
+  const dirtyGit = gitIsDirty(target);
+  const marker = readMarker(target);
+  const fromVersion = marker?.runtimeVersion;
+  const toVersion = runtimeVersion(runtime);
+  if (fromVersion && compareVersions(toVersion, fromVersion) < 0 && !options.force) {
+    throw new ValidationError(
+      `The workspace runs coreslopper ${fromVersion}, newer than ${toVersion}. Use "npx coreslopper@latest update", or pass --force to downgrade.`
+    );
+  }
+  const baseline = marker?.files;
+  const hadBaseline = baseline !== void 0;
+  const base = baseline ?? {};
+  const dryRun = Boolean(options.dryRun);
+  const changes = [];
+  const nextFiles = {};
+  let keptLocal = 0;
+  options.onProgress?.(`Comparing the workspace with coreslopper ${toVersion}...`);
+  const upstream = await hashRuntime(runtime);
+  const record = (path, action) => changes.push({ path, action });
+  const apply = async (path) => {
+    if (!dryRun) await install(join9(runtime, path), join9(target, path));
+  };
+  for (const [path, upstreamHash] of Object.entries(upstream)) {
+    nextFiles[path] = upstreamHash;
+    if (USER_OWNED_FILES.has(path)) continue;
+    const local = join9(target, path);
+    const localExists = existsSync6(local);
+    const baseHash = base[path];
+    if (!localExists) {
+      if (baseHash !== void 0 && !ALWAYS_UPSTREAM_FILES.has(path)) {
+        if (upstreamHash !== baseHash) record(path, "skipped-deleted-locally");
+        continue;
+      }
+      await apply(path);
+      record(path, "added");
+      continue;
+    }
+    const localHash = await hashFile2(local);
+    if (localHash === upstreamHash) continue;
+    if (USER_OWNED_PREFIXES.some((prefix) => path.startsWith(prefix))) continue;
+    if (ALWAYS_UPSTREAM_FILES.has(path) || localHash === baseHash) {
+      await apply(path);
+      record(path, "updated");
+      continue;
+    }
+    if (baseHash !== void 0 && upstreamHash === baseHash) {
+      keptLocal += 1;
+      continue;
+    }
+    if (options.force) {
+      await apply(path);
+      record(path, "overwritten");
+    } else {
+      if (!dryRun) await install(join9(runtime, path), `${local}${CONFLICT_SUFFIX}`);
+      record(path, "conflict");
+    }
+  }
+  for (const [path, baseHash] of Object.entries(base)) {
+    if (path in upstream || USER_OWNED_FILES.has(path)) continue;
+    if (USER_OWNED_PREFIXES.some((prefix) => path.startsWith(prefix))) continue;
+    const local = join9(target, path);
+    if (!existsSync6(local)) continue;
+    if (await hashFile2(local) === baseHash) {
+      if (!dryRun) {
+        await rm(local);
+        await pruneEmptyDirectories(target, path);
+      }
+      record(path, "removed");
+    } else {
+      record(path, "kept-removed-upstream");
+    }
+  }
+  const warnings = [];
+  if (dirtyGit && !dryRun) {
+    warnings.push('The workspace had uncommitted changes before the update; "git diff" now mixes them with the update.');
+  }
+  if (!hadBaseline) {
+    warnings.push(
+      "This workspace has no recorded baseline, so every file that differs from upstream counts as a local change. Review the conflicts, or commit and rerun with --force."
+    );
+  }
+  let installed = false;
+  let uvSynced = false;
+  if (!dryRun) {
+    writeMarkerFile(target, {
+      version: 1,
+      runtimeVersion: toVersion,
+      created: marker?.created ?? (/* @__PURE__ */ new Date()).toISOString(),
+      ...marker?.project ? { project: marker.project } : {},
+      updated: (/* @__PURE__ */ new Date()).toISOString(),
+      files: nextFiles
+    });
+    if (options.install !== false && changes.length > 0) {
+      options.onProgress?.("Installing Node and Python dependencies...");
+      try {
+        const setup = runSetup(target);
+        installed = setup.npm;
+        uvSynced = setup.uv;
+        if (setup.warning) warnings.push(setup.warning);
+      } catch (error) {
+        warnings.push(`Dependency installation failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    }
+  }
+  return {
+    targetDir: target,
+    fromVersion,
+    toVersion,
+    hadBaseline,
+    changes,
+    keptLocal,
+    dryRun,
+    installed,
+    uvSynced,
+    dirtyGit,
+    warnings
+  };
+}
+var LABELS = {
+  added: "+ added",
+  updated: "~ updated",
+  removed: "- removed",
+  overwritten: "! overwritten",
+  conflict: "! conflict",
+  "kept-removed-upstream": "= kept (removed upstream, changed locally)",
+  "skipped-deleted-locally": "= skipped (deleted locally)"
+};
+function printUpdateSummary(result) {
+  const from = result.fromVersion ?? "unknown";
+  const verb = result.dryRun ? "Would update" : "Updated";
+  console.log(`\u2714 ${verb} ${result.targetDir}: coreslopper ${from} \u2192 ${result.toVersion}`);
+  if (result.changes.length === 0) console.log("  Workflow files are already up to date.");
+  for (const change of result.changes) {
+    const suffix = change.action === "conflict" ? `  \u2192 ${change.path}${CONFLICT_SUFFIX}` : "";
+    console.log(`  ${LABELS[change.action]}: ${change.path}${suffix}`);
+  }
+  if (result.keptLocal > 0) console.log(`  ${result.keptLocal} locally changed file(s) kept; upstream did not change them.`);
+  for (const warning of result.warnings) console.warn(`  ! ${warning}`);
+  const conflicts = result.changes.filter((change) => change.action === "conflict").length;
+  if (conflicts > 0) {
+    console.log("");
+    console.log(
+      `${conflicts} file(s) changed both locally and upstream. Merge each "${CONFLICT_SUFFIX}" file into the original, then delete it.`
+    );
+  }
+  if (result.dryRun) {
+    console.log("");
+    console.log("Dry run: nothing was written.");
+  } else if (result.changes.length > 0 && !result.installed) {
+    console.log("");
+    console.log("Next: npm install && npm run python:sync");
+  }
+}
+
+// packages/cli/src/init.ts
 function sanitizeSlug(value) {
   const slug = value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   return slug || "my-video";
 }
 function defaultProjectSlug(targetDir) {
-  const name = basename(resolve3(targetDir));
-  return name && name !== "." && name !== sep ? sanitizeSlug(name) : "my-video";
+  const name = basename(resolve4(targetDir));
+  return name && name !== "." && name !== sep2 ? sanitizeSlug(name) : "my-video";
 }
 function upsertEnv(content, key, value) {
   if (!/^[A-Z_][A-Z0-9_]*$/.test(key)) throw new ValidationError(`Invalid environment variable name: ${key}`);
@@ -1618,19 +1880,19 @@ ${line}
 `;
 }
 async function isDirectoryEmpty(path) {
-  if (!existsSync6(path)) return true;
-  if (!(await stat2(path)).isDirectory()) return false;
-  const entries = await readdir(path);
+  if (!existsSync7(path)) return true;
+  if (!(await stat3(path)).isDirectory()) return false;
+  const entries = await readdir2(path);
   return entries.filter((entry) => entry !== ".DS_Store").length === 0;
 }
 function isInside(parent, child) {
   if (parent === child) return true;
-  const path = relative2(parent, child);
+  const path = relative3(parent, child);
   return path !== "" && !path.startsWith("..") && !isAbsolute(path);
 }
-function resolveRuntime(options) {
-  const runtime = options.runtimeDir ? resolve3(options.runtimeDir) : runtimeDir();
-  if (!runtime || !existsSync6(join9(runtime, "templates", "project"))) {
+function resolveRuntime2(options) {
+  const runtime = options.runtimeDir ? resolve4(options.runtimeDir) : runtimeDir();
+  if (!runtime || !existsSync7(join10(runtime, "templates", "project"))) {
     throw new ValidationError(
       'Runtime assets not found. Use "npx coreslopper init" to create a workspace, or run "npm run build:runtime" in the upstream repository.'
     );
@@ -1638,15 +1900,15 @@ function resolveRuntime(options) {
   return runtime;
 }
 function shouldCopy(source, runtime) {
-  const path = relative2(runtime, source);
+  const path = relative3(runtime, source);
   if (!path) return true;
-  const segments = path.split(sep);
+  const segments = path.split(sep2);
   if (segments.some((segment) => SKIPPED_DIRECTORIES.has(segment))) return false;
   if (path === ".env" || segments[0] === ".env" && path !== ".env.example") return false;
   return true;
 }
 async function copyRuntime(runtime, target) {
-  await mkdir6(target, { recursive: true });
+  await mkdir7(target, { recursive: true });
   await cp2(runtime, target, {
     recursive: true,
     force: true,
@@ -1655,13 +1917,13 @@ async function copyRuntime(runtime, target) {
   });
 }
 async function ensureEnvFile(target, falKey, higgsfieldKey) {
-  const envPath = join9(target, ".env");
+  const envPath = join10(target, ".env");
   let content;
-  if (existsSync6(envPath)) {
-    content = await readFile7(envPath, "utf8");
+  if (existsSync7(envPath)) {
+    content = await readFile8(envPath, "utf8");
   } else {
-    const examplePath = join9(target, ".env.example");
-    content = existsSync6(examplePath) ? await readFile7(examplePath, "utf8") : "# Local secrets. This file is gitignored.\n";
+    const examplePath = join10(target, ".env.example");
+    content = existsSync7(examplePath) ? await readFile8(examplePath, "utf8") : "# Local secrets. This file is gitignored.\n";
   }
   if (falKey) content = upsertEnv(content, "FAL_KEY", falKey.trim());
   if (!/^FAL_KEY=/m.test(content)) content = `${content.trimEnd()}
@@ -1674,14 +1936,14 @@ HIGGSFIELD_API_KEY=
 `;
   }
   await writeFile6(envPath, content, { encoding: "utf8", mode: 384 });
-  await chmod(envPath, 384).catch(() => void 0);
+  await chmod2(envPath, 384).catch(() => void 0);
 }
 function writeMcpConfig(target, suno) {
-  const path = join9(target, ".mcp.json");
+  const path = join10(target, ".mcp.json");
   let config = {};
-  if (existsSync6(path)) {
+  if (existsSync7(path)) {
     try {
-      config = JSON.parse(readFileSync5(path, "utf8"));
+      config = JSON.parse(readFileSync6(path, "utf8"));
     } catch {
       config = {};
     }
@@ -1695,28 +1957,29 @@ function writeMcpConfig(target, suno) {
   writeFileSyncJson(path, config);
 }
 function writeFileSyncJson(path, value) {
-  writeFileSync(path, `${JSON.stringify(value, null, 2)}
+  writeFileSync2(path, `${JSON.stringify(value, null, 2)}
 `, "utf8");
 }
-function writeMarker(target, projectSlug) {
+function writeMarker(target, files, projectSlug) {
   const marker = {
     version: 1,
     runtimeVersion: ownVersion(),
     created: (/* @__PURE__ */ new Date()).toISOString(),
-    ...projectSlug ? { project: projectSlug } : {}
+    ...projectSlug ? { project: projectSlug } : {},
+    files
   };
-  writeFileSyncJson(join9(target, WORKSPACE_MARKER), marker);
+  writeFileSyncJson(join10(target, WORKSPACE_MARKER), marker);
 }
 function initGit(target) {
-  if (existsSync6(join9(target, ".git")) || !commandExists("git")) return false;
-  const result = spawnSync2("git", ["init", "-b", "main"], { cwd: target, stdio: "inherit" });
+  if (existsSync7(join10(target, ".git")) || !commandExists("git")) return false;
+  const result = spawnSync3("git", ["init", "-b", "main"], { cwd: target, stdio: "inherit" });
   if (result.status === 0) return true;
-  const fallback = spawnSync2("git", ["init"], { cwd: target, stdio: "inherit" });
+  const fallback = spawnSync3("git", ["init"], { cwd: target, stdio: "inherit" });
   return fallback.status === 0;
 }
 async function createFirstProject(target, project, warnings) {
-  const projectDir = join9(target, "projects", project.slug);
-  if (existsSync6(projectDir)) {
+  const projectDir = join10(target, "projects", project.slug);
+  if (existsSync7(projectDir)) {
     warnings.push(`Project "${project.slug}" already exists; the bundled project was kept.`);
     return void 0;
   }
@@ -1793,9 +2056,9 @@ function ensureTools(target, warnings) {
   }
 }
 async function initWorkspace(options) {
-  const target = resolve3(options.targetDir);
-  const runtime = resolveRuntime(options);
-  if (existsSync6(target) && !(await stat2(target)).isDirectory()) {
+  const target = resolve4(options.targetDir);
+  const runtime = resolveRuntime2(options);
+  if (existsSync7(target) && !(await stat3(target)).isDirectory()) {
     throw new ValidationError(`Target exists and is not a directory: ${target}`);
   }
   if (target === parse(target).root || target === homedir2()) {
@@ -1807,7 +2070,7 @@ async function initWorkspace(options) {
   if (isInside(runtime, target)) {
     throw new ValidationError("The workspace cannot be created inside the coreslopper runtime directory.");
   }
-  if (existsSync6(join9(target, "scripts", "build-runtime.mjs")) || existsSync6(join9(target, "tsup.config.ts"))) {
+  if (existsSync7(join10(target, "scripts", "build-runtime.mjs")) || existsSync7(join10(target, "tsup.config.ts"))) {
     throw new ValidationError(
       "This directory is the coreslopper source repository. Create the workspace in a different directory."
     );
@@ -1829,7 +2092,7 @@ async function initWorkspace(options) {
   }
   const gitInitialized = options.git === false ? false : initGit(target);
   const projectSlug = options.project ? await createFirstProject(target, options.project, warnings) : void 0;
-  writeMarker(target, projectSlug);
+  writeMarker(target, await hashRuntime(runtime), projectSlug);
   let installed = false;
   let uvSynced = false;
   if (options.install !== false) {
@@ -1852,7 +2115,7 @@ async function initWorkspace(options) {
     gitInitialized,
     warnings
   };
-  await writeFile6(join9(target, "GETTING_STARTED.md"), gettingStarted(target, result, options), "utf8");
+  await writeFile6(join10(target, "GETTING_STARTED.md"), gettingStarted(target, result, options), "utf8");
   return result;
 }
 
@@ -1870,7 +2133,7 @@ import {
   spinner,
   text
 } from "@clack/prompts";
-import { resolve as resolve4 } from "path";
+import { resolve as resolve5 } from "path";
 function unwrap(value) {
   if (isCancel(value)) {
     cancel("Onboarding cancelled.");
@@ -1885,7 +2148,7 @@ function validSlug(value) {
   return void 0;
 }
 async function chooseTarget(options) {
-  if (options.dir) return resolve4(options.dir);
+  if (options.dir) return resolve5(options.dir);
   if (await isDirectoryEmpty(process.cwd())) return process.cwd();
   const answer = unwrap(
     await text({
@@ -1894,7 +2157,7 @@ async function chooseTarget(options) {
       defaultValue: "coreslopper-studio"
     })
   );
-  return resolve4(answer);
+  return resolve5(answer);
 }
 async function ensureTargetIsUsable(target, force = false) {
   if (await isDirectoryEmpty(target)) return;
@@ -1921,24 +2184,24 @@ async function offerTools(target, enabled) {
   }
   let uvReady = Boolean(checks.find((tool) => tool.id === "uv")?.ok);
   if (!uvReady && missing.some((tool) => tool.id === "uv")) {
-    const install = unwrap(
+    const install2 = unwrap(
       await confirm({
         message: "Install uv? It manages the Python audio-analysis environment.",
         initialValue: true
       })
     );
-    if (install) uvReady = installUv();
+    if (install2) uvReady = installUv();
     if (!uvReady) log.warn("uv was not installed. Audio analysis will need it later.");
   }
   const pythonReady = Boolean(checks.find((tool) => tool.id === "python")?.ok);
   if (!pythonReady && uvReady) {
-    const install = unwrap(
+    const install2 = unwrap(
       await confirm({
         message: "Install Python 3.12 with uv?",
         initialValue: true
       })
     );
-    if (install && !installPython()) {
+    if (install2 && !installPython()) {
       log.warn("Python 3.12 was not installed. Audio analysis will need it later.");
     }
   }
@@ -1952,13 +2215,13 @@ async function offerTools(target, enabled) {
     );
   }
   if (missing.some((tool) => tool.id === "claude")) {
-    const install = unwrap(
+    const install2 = unwrap(
       await confirm({
         message: "Install Claude Code globally? The /video-next pipeline runs there.",
         initialValue: true
       })
     );
-    if (install && !installClaudeCode()) {
+    if (install2 && !installClaudeCode()) {
       log.warn('Claude Code was not installed. Install it with "npm install -g @anthropic-ai/claude-code".');
     }
   }
@@ -2130,7 +2393,7 @@ async function onboard(options = {}) {
     if (slugError) throw new ValidationError(slugError);
     project = { slug: projectSlug, title: options.title, budget, song, image, video };
   }
-  const install = options.install ?? unwrap(
+  const install2 = options.install ?? unwrap(
     await confirm({
       message: "Install Node and Python dependencies now? (takes a few minutes)",
       initialValue: true
@@ -2148,7 +2411,7 @@ async function onboard(options = {}) {
     `Song:     ${project ? project.song : "-"}`,
     `Visuals:  ${project ? project.image === project.video ? project.image : `image=${project.image}, video=${project.video}` : "-"}`,
     `Budget:   ${project ? `$${project.budget.toFixed(2)}` : "-"}`,
-    `Install:  ${install ? "yes" : "no"}`,
+    `Install:  ${install2 ? "yes" : "no"}`,
     `Git:      ${git ? "yes" : "no"}`
   ].join("\n");
   note(summary, "Ready to create");
@@ -2165,7 +2428,7 @@ async function onboard(options = {}) {
   const result = await initWorkspace({
     targetDir: target,
     force: true,
-    install,
+    install: install2,
     git,
     project,
     falKey,
@@ -2178,7 +2441,7 @@ async function onboard(options = {}) {
     if (!installFfmpeg(target)) log.warn("ffmpeg was not installed. Install it later for footage and loudness.");
   }
   for (const warning of result.warnings) log.warn(warning);
-  if (!result.installed && install) {
+  if (!result.installed && install2) {
     log.error("Dependency installation did not finish. Run npm install in the workspace.");
     process.exitCode = 1;
   }
@@ -2234,7 +2497,7 @@ async function runInitCommand(targetArg, options) {
     });
     return;
   }
-  const target = resolve5(targetArg ?? ".");
+  const target = resolve6(targetArg ?? ".");
   const visual = options.visual ?? "mock";
   const image = options.imageProvider ?? visual;
   const video = options.videoProvider ?? visual;
@@ -2288,7 +2551,7 @@ async function runInitCommand(targetArg, options) {
 }
 
 // packages/cli/src/status.ts
-import { existsSync as existsSync7 } from "fs";
+import { existsSync as existsSync8 } from "fs";
 async function printStatus(projectDir) {
   const loaded = await loadProject(projectDir);
   const state = loaded.state;
@@ -2300,11 +2563,11 @@ async function printStatus(projectDir) {
   );
   const next = nextStage(state);
   console.log(`Next: ${next ? `${next.id} (${next.skills.join(", ")})` : "done"}`);
-  if (!existsSync7(loaded.paths.state)) console.log("Note: state.json does not exist yet; showing the initial state.");
+  if (!existsSync8(loaded.paths.state)) console.log("Note: state.json does not exist yet; showing the initial state.");
 }
 
 // packages/cli/src/utils.ts
-import { resolve as resolve6 } from "path";
+import { resolve as resolve7 } from "path";
 import { ZodError } from "zod";
 function printError(error) {
   if (error instanceof ValidationError) {
@@ -2400,13 +2663,13 @@ function workspaceSummary(root) {
     console.log(`Projects: ${projects.join(", ")}`);
     try {
       const project = resolveProjectArg(root);
-      console.log(`Tip: npx coreslopper status ${relative3(root, project)}`);
+      console.log(`Tip: npx coreslopper status ${relative4(root, project)}`);
     } catch {
     }
   } else {
     console.log("No projects yet. Create one with: npx coreslopper new <slug> --budget 50");
   }
-  console.log("Commands: init, doctor, new, status, validate");
+  console.log("Commands: init, update, doctor, new, status, validate");
 }
 var program = new Command();
 program.name("coreslopper").description("Create and manage a coreslopper music-video workspace.").version(ownVersion()).showHelpAfterError();
@@ -2424,9 +2687,23 @@ program.command("init [dir]").description("Create a workspace, install tools, an
     await runInitCommand(dir, options);
   })
 );
+program.command("update [dir]").description("Update the workflow files of a workspace to this coreslopper version; keeps local changes.").option("--dry-run", "Show what would change without writing anything").option("--force", "Overwrite locally changed files and allow a downgrade").option("--no-install", "Skip npm install and uv sync").option("--runtime <dir>", "Runtime directory (development only)").action(
+  (dir, options) => run(async () => {
+    const target = dir ? resolve8(dir) : requireWorkspaceRoot();
+    const result = await updateWorkspace({
+      targetDir: target,
+      runtimeDir: options.runtime,
+      dryRun: options.dryRun,
+      force: options.force,
+      install: options.install,
+      onProgress: (message) => console.log(message)
+    });
+    printUpdateSummary(result);
+  })
+);
 program.command("doctor [dir]").description("Check the workspace, tools, and credentials.").option("--json", "Print machine-readable JSON").action(
   (dir, options) => run(async () => {
-    const root = dir ? resolve7(dir) : findWorkspaceRoot() ?? process.cwd();
+    const root = dir ? resolve8(dir) : findWorkspaceRoot() ?? process.cwd();
     const result = await runDoctor(root, { json: options.json });
     if (!result.ok) process.exitCode = 1;
   })