feat: sync CLI with dashboard@v1.6.19

[cursor]

Upstream version

@photon-ai/dashboard-api@1.6.19 — dashboard@v1.6.19 (SHA 83597f8d01ec1b6d3fd6d52273a44c69d1e84bf7).

Release notes: https://github.com/photon-hq/dashboard/releases/tag/v1.6.19

Routes added/removed/changed

• (none in 1.6.19) — dashboard#263 ("Add CAPTCHA method to phone OTP forensic logs") is a pure server-side logging change. diff -rq on the @photon-ai/dashboard-api bundled dist between 1.6.18 and 1.6.19 is empty, confirming no public API surface change.
• Cumulative delta since main's pinned 1.6.12 (already handled in prior syncs, no code edits needed here): additive avatarUrl / plan / platforms / userCount fields on GET /api/projects/:id (1.6.14, dashboard#255) and additive POST /api/otp/phone2/send (1.6.15, dashboard#259). projects show already renders the new project fields; the CLI does not call api.otp.*, so the new OTP route needs no CLI change.

Snapshot changes

• (none)

New runtime dependencies

• (none)

Checklist

• API type changes come from a @photon-ai/dashboard-api version bump, not hand edits
• No new runtime deps (or justified above)
• All snapshot diffs explained above
• bun run check passes locally

  

---

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}

---

Note

Low Risk
Dependency pin and documentation only; no command logic, snapshots, or new runtime deps.

Overview
Aligns the CLI with dashboard@v1.6.19 by bumping the dev dependency @photon-ai/dashboard-api from 1.6.12 to 1.6.19 in package.json and bun.lock. There are no runtime or src/ changes in this PR.

UPSTREAM_DIFF.md is updated to match the new pin: it documents the cumulative 1.6.13–1.6.19 release notes and states that 1.6.19 has no added/removed/changed public routes (server-only OTP forensic logging). The broader 1.6.12 → 1.6.19 API delta (project detail fields, OTP route) is noted as already handled on main, so no further CLI edits are required.

^{Reviewed by Cursor Bugbot for commit cc27129. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

Agent PR Review

Scenario: A — Initial review (cursor[bot] draft)
Verdict: ✅ Approve

What's right

• Single @photon-ai/dashboard-api bump 1.6.12 → 1.6.19 in package.json and bun.lock; no hand-edited types.
• UPSTREAM_DIFF.md accurately captures the 1.6.13 → 1.6.19 changelog and notes 1.6.19 has an empty diff -rq on the bundled dist.
• Cumulative delta is truly a no-op for the CLI: avatarUrl / plan / platforms / userCount already surfaced in src/commands/projects.ts (lines 85, 88, 271), and grep for api.otp in src/ returns nothing, so the additive POST /api/otp/phone2/send route needs no client change.
• Only 3 files touched (UPSTREAM_DIFF.md, bun.lock, package.json) — no unrelated refactors, no snapshot churn, no workflows edits.
• No forbidden deps introduced.
• bun install --frozen-lockfile && bun run check green locally: typecheck passes, 90 tests pass, build 245.93 KB.

Concerns

• None.

Deferred (acknowledged in PR body)

• None. Server-side-only releases (1.6.13, 1.6.16 → 1.6.19) require nothing from the CLI.

Final note
Marking Ready and approving — pure version-bump sync with no API surface change.