Function runUpdate

src/commands/project.ts:239–317

(
  opts: UpdateOptions,
  deps: ProjectDeps = {},
)

}

export async function runUpdate(
  opts: UpdateOptions,
  deps: ProjectDeps = {},
): Promise<CliUpdateProjectResponse> {
  const out = makeOutput(opts.output, deps);
  const stderr = deps.stderr ?? ((line: string) => process.stderr.write(`${line}\n`));

  // P1-2: validate idempotency key before sending as an HTTP header.
  assertIdempotencyKey(opts.idempotencyKey);

  // P1-3: client-side length checks matching server limits.
  if (opts.name !== undefined && opts.name.length > 200) {
    throw localValidationError('--name must be at most 200 characters');
  }
  if (opts.description !== undefined && opts.description.length > 2000) {
    throw localValidationError('--description must be at most 2000 characters');
  }

  // Resolve password
  let password = opts.password;
  if (password === undefined && opts.passwordFile !== undefined) {
    password = readFileSync(opts.passwordFile, 'utf8').trim();
  }

  // P2-7: guard --url against localhost/RFC1918/non-http(s).
  if (opts.targetUrl !== undefined) {
    assertNotLocal(opts.targetUrl);
  }

  const mutableFields: Record<string, string | undefined> = {
    name: opts.name,
    targetUrl: opts.targetUrl,
    username: opts.username,
    password,
    description: opts.description,
    instruction: opts.instruction,
  };
  const presentFields = Object.entries(mutableFields).filter(([, v]) => v !== undefined);
  if (presentFields.length === 0) {
    throw localValidationError(
      'At least one mutable flag is required: --name, --url, --username, --password/--password-file, --description, or --instruction.',
    );
  }

  if (opts.dryRun) {
    const idempotencyKey = opts.idempotencyKey ?? `cli-proj-update-${randomUUID()}`;
    if (
      opts.idempotencyKey === undefined &&
      (opts.output === 'json' || opts.verbose || opts.debug)
    ) {
      stderr(`idempotency-key: ${idempotencyKey}`);
    }
    const sample: CliUpdateProjectResponse = {
      id: opts.projectId,
      updatedFields: presentFields.map(([k]) => k),
      updatedAt: '2026-05-16T00:00:00.000Z',
    };
    out.print(sample, data => renderUpdateText(data as CliUpdateProjectResponse));