@ascendkit/cli 0.3.12 → 0.3.13

package/dist/cli.js

@@ -294,6 +294,11 @@ function printAuthSettingsSummary(data) {
     if (data.sessionDuration) {
         console.log(`Session: ${data.sessionDuration}`);
     }
+    const allowedDomains = Array.isArray(data.allowedDomains) ? data.allowedDomains : [];
+    if (allowedDomains.length > 0)
+        console.log(`Allowed domains: ${allowedDomains.join(", ")}`);
+    if (data.blockPersonalDomains)
+        console.log("Block personal domains: on");
 }
 function printTemplateSummary(data, opts) {
     console.log(`Template: ${data.name} (${data.id})`);
@@ -1094,6 +1099,12 @@ async function runAuth(client, action, rest) {
             }
             if (flags["session-duration"])
                 params.sessionDuration = flags["session-duration"];
+            if (flags["allowed-domains"] !== undefined) {
+                const raw = flags["allowed-domains"].trim();
+                params.allowedDomains = raw === "" ? [] : raw.split(",").map((d) => d.trim()).filter(Boolean);
+            }
+            if (flags["block-personal-domains"] !== undefined)
+                params.blockPersonalDomains = flags["block-personal-domains"] === "true";
             printAuthSettingsSummary(await auth.updateSettings(client, params));
             break;
         }

package/dist/commands/auth.d.ts

@@ -8,6 +8,8 @@ export interface UpdateSettingsParams {
         requireUsername?: boolean;
     };
     sessionDuration?: string;
+    allowedDomains?: string[];
+    blockPersonalDomains?: boolean;
 }
 export declare function getSettings(client: AscendKitClient): Promise<unknown>;
 export declare function updateSettings(client: AscendKitClient, params: UpdateSettingsParams): Promise<unknown>;

package/dist/commands/auth.js

@@ -9,6 +9,10 @@ export async function updateSettings(client, params) {
         body.features = params.features;
     if (params.sessionDuration !== undefined)
         body.sessionDuration = params.sessionDuration;
+    if (params.allowedDomains !== undefined)
+        body.allowedDomains = params.allowedDomains;
+    if (params.blockPersonalDomains !== undefined)
+        body.blockPersonalDomains = params.blockPersonalDomains;
     return client.managedPut("/api/auth/settings", body);
 }
 export async function updateProviders(client, providers) {

package/dist/tools/auth.js

@@ -13,6 +13,11 @@ function formatAuthSettings(data) {
     ];
     if (data.sessionDuration)
         lines.push(`Session: ${data.sessionDuration}`);
+    const allowedDomains = Array.isArray(data.allowedDomains) ? data.allowedDomains : [];
+    if (allowedDomains.length > 0)
+        lines.push(`Allowed domains: ${allowedDomains.join(", ")}`);
+    if (data.blockPersonalDomains)
+        lines.push("Block personal domains: on");
     return lines.join("\n");
 }
 export function registerAuthTools(server, client) {
@@ -42,6 +47,24 @@ export function registerAuthTools(server, client) {
         const data = await auth.updateSettings(client, params);
         return { content: [{ type: "text", text: formatAuthSettings(data) }] };
     });
+    server.tool("auth_domain_restrictions", "Configure email domain restrictions for signups. Set an allowlist of specific domains, or block personal email providers (gmail, yahoo, etc.), or both. Allowlist takes precedence when both are set.", {
+        allowedDomains: z
+            .array(z.string())
+            .optional()
+            .describe('Allowed email domains for signup, e.g. ["company.com", "partner.org"]. Pass empty array to clear.'),
+        blockPersonalDomains: z
+            .boolean()
+            .optional()
+            .describe("Block signups from common personal email providers (gmail, yahoo, hotmail, etc.)"),
+    }, async (params) => {
+        const body = {};
+        if (params.allowedDomains !== undefined)
+            body.allowedDomains = params.allowedDomains;
+        if (params.blockPersonalDomains !== undefined)
+            body.blockPersonalDomains = params.blockPersonalDomains;
+        const data = await client.managedPut("/api/auth/settings", body);
+        return { content: [{ type: "text", text: formatAuthSettings(data) }] };
+    });
     server.tool("auth_provider_set", "Set which auth providers are enabled for the project. Credentials and magic-link are mutually exclusive. Social-only login (e.g. [\"google\"]) is valid. At least one provider required.", {
         providers: z
             .array(z.string())

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ascendkit/cli",
-  "version": "0.3.12",
+  "version": "0.3.13",
   "description": "AscendKit CLI and MCP server",
   "author": "ascendkit.dev",
   "license": "MIT",