@assethub/cli 0.1.11 → 0.1.13

package/README.md

@@ -33,6 +33,29 @@ explicit overrides. `auth logout` removes the selected saved profile (or the
 saved default); environment credentials remain under your shell’s control.
 Diagnostics omit API keys and raw server error bodies.
 
+## Historical meshes and artifact graphs
+
+Internal preview: these reads require workspace feature access. Lists are scoped
+to the selected workspace, including assets created in the UI. Mesh search
+includes parts, revisions, and archived meshes, and excludes samples.
+
+```sh
+assethub mesh list --query "helmet" --limit 25
+assethub mesh get mesh_123
+assethub mesh download mesh_123 --out-dir ./meshes
+assethub graph list --limit 25
+assethub graph show --graph "$GRAPH_ID"
+assethub graph export --graph "$GRAPH_ID" --out ./graph.json
+assethub graph lineage --graph "$GRAPH_ID" --artifact "$NODE_ID" --direction ancestors
+```
+
+Pass each `nextCursor` as `--cursor` until it is null; a graph page can be empty
+while its cursor advances past duplicates. Graph catalogs include generated and
+uploaded graphs. Use `--source upload` to read uploaded snapshots. Graph exports
+contain the full saved graph and blob references; they do not download blob bytes.
+`--canvas` keeps the existing CLI/API execution history view and cannot be combined
+with `--graph`. Mesh IDs returned by search can be passed to `composer run`.
+
 ## Agent generation with canvas history
 
 This release uses the Internal `api_canvas_execution` gate. Run `assethub capabilities`
@@ -453,3 +476,43 @@ The second returns the live description and input schema for one tool, including
 required fields. Both use the selected profile and the same bounded checks as
 `doctor --mcp`; they do not invoke tools or spend credits. Hosted MCP requires
 Internal access. Discover names first because server capabilities can change.
+
+
+### Team members (Internal preview)
+
+Use a **user access token** with `auth login --access-token-stdin`. A workspace
+API key cannot invite people or change membership. Commands use the selected
+workspace; `--workspace <id>` explicitly selects a target without changing your
+saved selection. Membership reads require team membership; changes require admin
+permission. The target workspace's MFA and IP restrictions apply.
+
+```sh
+assethub workspace members --workspace <workspace-id>
+assethub workspace invite --workspace <workspace-id> --email colleague@example.com
+assethub workspace set-role <user-id> --role admin --workspace <workspace-id>
+assethub workspace remove-member <user-id> --workspace <workspace-id>
+```
+
+Invite defaults to `user`; use `--role admin` deliberately. Invitations grant
+membership and send email. An existing member returns `already_member`, preserving
+their role and avoiding another email. Use `workspace invite --email ... --resend`
+only to explicitly resend or recover failed delivery. If a request is interrupted,
+check `workspace members` first. Removal revokes workspace membership, not the
+user's account. The final admin cannot be demoted or removed.
+
+For MCP account operations, add a separate server using:
+
+```sh
+assethub mcp config --client codex --account
+assethub mcp config --client cursor --account
+assethub mcp tools --account --profile <user-profile>
+```
+
+The generated configuration references `ASSETHUB_ACCESS_TOKEN` and
+`ASSETHUB_WORKSPACE_MFA_COOKIE` without printing credentials. Set the latter to
+`ah_workspace_mfa=<signed-cookie-value>` from the same verified browser session
+(or an empty string if workspace MFA is not required). Pass these environment
+variables to your MCP client and reconnect. This server uses
+`https://app.assethub.io/api/workspaces/mcp` and exposes `workspace_list`,
+`workspace_members_list`, `workspace_member_invite`, `workspace_member_set_role`,
+and `workspace_member_remove`. Keep the existing API-key MCP server for generation.

package/dist/index.d.ts

@@ -2,7 +2,7 @@
 import { type AnimationRetargetRequest, type Intervention, type RigRequest } from '@assethub/api-client';
 import { buildRunUploadPlan } from './runsUpload/buildRunUpload.js';
 type Flags = Record<string, string | boolean | string[]>;
-export declare const usage = "AssetHub CLI\n\nInternal preview: canvas/context/layout and moodboards require workspace feature access.\n\nUsage:\n  assethub --version\n  assethub doctor [--mcp] [--profile <name>] [--timeout-ms <n>]\n  assethub mcp tools [tool-name] [--profile <name>] [--timeout-ms <n>]\n  assethub mcp config --client cursor|codex [--base-url <url>]\n  assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]\n  assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]\n  assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]\n  assethub auth status [--profile <name>]\n  assethub auth logout [--profile <name>]\n  assethub workspace list|get\n  assethub workspace create --name <name> [--operation-id <uuid>]\n  assethub workspace use <workspace-id>\n  assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>\n  assethub workspace self-check --internal\n  assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]\n  assethub workspace context get --internal --org <uuid> --actor <uuid> --canvas <id> [--out <json>] [--order <uuid>]\n  assethub project ingest <source-dir> --out-dir <directory> [--exclude-dir <relative-path>...]\n  assethub language text|vision --input-json @<json> --operation-id <uuid> [--out <json>]\n  assethub canvas import --canvas <id> --file <image> [--name <name>]\n  assethub canvas context get --canvas <id> [--out <json>]\n  assethub canvas context put --canvas <id> --file <json> [--if-version <n>]\n  assethub canvas layout --canvas <id> --input-json @<json>\n  assethub canvas compare --canvas <id> --source-id <asset-id> --asset-id <asset-id> --out <html>\n  assethub moodboard create --input-json @<json> [--operation-id <uuid>]\n  assethub moodboard list|get|update|archive [<board-id>] [--input-json @<json>]\n  assethub moodboard analyze <board-id> [--revision <uuid>] [--wait]\n  assethub image generate --canvas <id> --context <id> [--context-version <n>] [--context-source <key>] [--moodboard-revision <uuid>] --prompt <text> --wait\n  assethub models list [--domain <domain>] [--ids-only] [--limit <n>]\n  assethub models get <model-id>\n  assethub files import <url> --media-type image|mesh\n  assethub files upload <file> --media-type image|mesh\n  assethub source create (--file <path> | --source-url <url> | --source-id <id> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) --media-type image|mesh [--file-name <name>] [--content-type <type>]\n  assethub capabilities\n  assethub composer models\n  assethub composer run --part <mesh-asset-id> [--part <mesh-asset-id>...] --reference <image-asset-id> [--model <id>] [--mode quick|quality] [--transforms-json <json|@file>] [--canvas <id>] [--wait]\n  assethub composer run --input-json <json|@file> [--canvas <id>] [--operation-id <uuid>] [--wait] [--download --out-dir <dir>]\n  assethub composer run --from-run <run-id> [--transforms-json <json|@file>] [--mode quick|quality] [--wait]\n  assethub canvas create [--name <name>] [--operation-id <uuid>]\n  assethub canvas list [--cursor <cursor>] [--limit <n>]\n  assethub canvas get|use|open [<id>]\n  assethub runs list [--canvas <id>] [--cursor <cursor>] [--limit <n>]\n  assethub runs get|watch <run-id> [--timeout-ms <n>]\n  assethub runs resume <operation-id> [--wait]\n  assethub graph show|export [--canvas <id>] [--artifact <node-id>] [--out <path>] [--allow-truncated]\n  assethub graph lineage --artifact <node-id> [--canvas <id>] [--direction ancestors|descendants|both] [--depth <n>]\n  assethub evaluate list\n  assethub evaluations submit --artifact <asset-id> --report <json|file|@file|@-> [--agent <name>] [--canvas <id>] [--reference <asset-id>...] [--run <run-id>] [--operation-id <uuid>] [--require-pass]\n  assethub evaluations list [--canvas <id>] [--artifact <asset-id>]\n  assethub evaluations get <evaluation-id>\n  assethub image generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub mesh generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub image generate --prompt <text> [--file <path> | --source-url <url> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard] [--file-name <name>] [--content-type <type>] [--model-id <id>] [--batch-size <n>] [--wait] [--download --out-dir <dir>] [--canvas <id>] [--operation-id <uuid>] [--api-version v2]\n  assethub image generate --prompt <text> --source-resource-id <id> --api-version v2 [--model-id <id>] [--batch-size <n>] [--wait]\n  assethub mesh generate (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--file-name <name>] [--content-type <type>] [--model-id <id>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub mesh retopo (--source-resource-id <id> | --source-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) --model-id <id> [--file-name <name>] [--content-type <type>] [--wait] [--download --out-dir <dir>]\n  assethub rig check (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub rig create (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--model v1.0-20240301|v2.5-20260210] [--rig-type biped|quadruped|hexapod|octopod|avian|serpentine|aquatic] [--spec tripo|mixamo] [--out-format glb|fbx] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub animate presets [--model v1.0-20240301|v2.5-20260210] [--rig-type <type>]\n  assethub animate retarget --resource-id <id> --animation <preset-id> [--animation <preset-id>... up to 5 total] [--out-format glb|fbx] [--bake-animation true|false] [--export-with-geometry true|false] [--animate-in-place true|false] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub jobs get <job-id> [--download --out-dir <dir>]\n  assethub jobs watch <job-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production analyze (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub production agents\n  assethub production automation --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--wait]\n  assethub production status <order-id> [--wait] [--download --out-dir <dir>]\n  assethub production execute --order-id <id> --mission-id <id> --task-id <id> [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--wait] [--download --out-dir <dir>]\n  assethub production run --order-id <id> --mission-id <id> [--run-mode full_auto|approval] [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--allowed-model-id <id>...] [--max-iterations <n>] [--max-cost-credits <n>] [--wait] [--download --out-dir <dir>]\n  assethub production watch <order-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production intervene <order-id> (--exclude <target-id> | --include <target-id> | --add-part <name> | --rename <target-id>=<name> | --reject <target-id>[=<reason>] | --regenerate <target-id>=<mode> | --set-param <key>=<value> | --ops-json <json|@file|@->)... [--idempotency-key <key>]\n  assethub production interventions <order-id>\n  assethub runs upload <path> [--graph-id <id>] [--stream-id <id>] [--rev <n>] [--description <text>] [--tag <tag>...] [--skip-register] [--dry-run]\n  assethub parts split (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard | --order-id <id>) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub parts compare (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--preprocess-prompt <text>] [--preprocess-model-id <id>] [--fail-on-preprocess-error] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub autopilot [<image>] --demo [--yolo] [--json] [--max-regen <n>] [--stall-rounds <n>] [--tie-epsilon <x>] [--multiview 2-view|4-view|6-view] [--ab-mode serial|cross] [--credit-budget <n>]\n\nGlobal options:\n  --api-key <key>       Overrides saved auth and ASSETHUB_API_KEY.\n  --base-url <url>      Override the selected API origin. Default: https://app.assethub.io.\n  --profile <name>      Select this saved profile ahead of environment credentials and origin.\n  --config <path>       Auth config path. Defaults to ~/.assethub/config.json.\n  --version             Show installed package version.\n  --help                Show help.\n\nExamples:\n  ASSETHUB_API_KEY=ah_live_xxx assethub models list\n  assethub auth login --api-key-stdin\n  assethub models list --ids-only\n  assethub files upload ./input.png --media-type image\n  assethub source create --file ./input.png --media-type image\n  pbpaste | assethub source create --stdin-data-uri --media-type image\n  assethub source create --clipboard --media-type image --file-name clipboard.png\n  printf '{\"image_url\":{\"url\":\"data:image/png;base64,...\"}}' | assethub parts split --stdin-json --part-extractor \"V1.5\" --wait\n  base64 -i ./input.png | assethub parts split --stdin-base64 --file-name input.png --content-type image/png --part-extractor \"V1.5\" --wait\n  cat ./input.png | assethub parts split --stdin --file-name input.png --part-extractor \"V1.5\" --wait\n  assethub image generate --prompt \"stylized prop concept\" --wait\n  assethub mesh generate --file ./input.png --wait\n  assethub animate presets --rig-type biped\n  assethub rig create --source-resource-id mesh_x --rig-type biped --wait\n  assethub animate retarget --resource-id rig_x --animation preset:idle --wait\n  assethub production analyze --file ./input.png --part-extractor \"V1.5\" --wait\n  assethub production run --order-id ord_x --mission-id ms_x --run-mode full_auto --max-cost-credits 200 --wait\n  assethub production watch ord_x\n  assethub production intervene ord_x --exclude 7 --rename 3=\"left wing\" --idempotency-key review-2026-07-29\n  assethub production interventions ord_x\n  assethub runs upload ./out/pluffy-run-2026-07-30 --dry-run\n  assethub runs upload ./out/pluffy-run-2026-07-30 --tag pluffy --description \"V3 humanoid, 18 parts\"\n  assethub parts split --file ./input.png --part-extractor \"V1.5\" --wait --all-ready\n  assethub parts compare --file ./input.png --preprocess-prompt \"clean white background, centered product photo\" --part-extractor \"V1.5\" --wait --all-ready\n";
+export declare const usage = "AssetHub CLI\n\nInternal preview: canvas/context/layout, moodboards and member management require workspace feature access.\n\nUsage:\n  assethub --version\n  assethub doctor [--mcp] [--profile <name>] [--timeout-ms <n>]\n  assethub mcp tools [tool-name] [--account] [--profile <name>] [--timeout-ms <n>]\n  assethub mcp config --client cursor|codex [--account] [--base-url <url>]\n  assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]\n  assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]\n  assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]\n  assethub auth status [--profile <name>]\n  assethub auth logout [--profile <name>]\n  assethub workspace list|get\n  assethub workspace create --name <name> [--operation-id <uuid>]\n  assethub workspace use <workspace-id>\n  assethub workspace members [--workspace <id>]\n  assethub workspace invite --email <email> [--role user|admin] [--resend] [--workspace <id>]\n  assethub workspace set-role <user-id> --role user|admin [--workspace <id>]\n  assethub workspace remove-member <user-id> [--workspace <id>]\n  assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>\n  assethub workspace self-check --internal\n  assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]\n  assethub workspace context get --internal --org <uuid> --actor <uuid> --canvas <id> [--out <json>] [--order <uuid>]\n  assethub project ingest <source-dir> --out-dir <directory> [--exclude-dir <relative-path>...]\n  assethub language text|vision --input-json @<json> --operation-id <uuid> [--out <json>]\n  assethub canvas import --canvas <id> --file <image> [--name <name>]\n  assethub canvas context get --canvas <id> [--out <json>]\n  assethub canvas context put --canvas <id> --file <json> [--if-version <n>]\n  assethub canvas layout --canvas <id> --input-json @<json>\n  assethub canvas compare --canvas <id> --source-id <asset-id> --asset-id <asset-id> --out <html>\n  assethub moodboard create --input-json @<json> [--operation-id <uuid>]\n  assethub moodboard list|get|update|archive [<board-id>] [--input-json @<json>]\n  assethub moodboard analyze <board-id> [--revision <uuid>] [--wait]\n  assethub image generate --canvas <id> --context <id> [--context-version <n>] [--context-source <key>] [--moodboard-revision <uuid>] --prompt <text> --wait\n  assethub models list [--domain <domain>] [--ids-only] [--limit <n>]\n  assethub models get <model-id>\n  assethub files import <url> --media-type image|mesh\n  assethub files upload <file> --media-type image|mesh\n  assethub source create (--file <path> | --source-url <url> | --source-id <id> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) --media-type image|mesh [--file-name <name>] [--content-type <type>]\n  assethub capabilities\n  assethub composer models\n  assethub composer run --part <mesh-asset-id> [--part <mesh-asset-id>...] --reference <image-asset-id> [--model <id>] [--mode quick|quality] [--transforms-json <json|@file>] [--canvas <id>] [--wait]\n  assethub composer run --input-json <json|@file> [--canvas <id>] [--operation-id <uuid>] [--wait] [--download --out-dir <dir>]\n  assethub composer run --from-run <run-id> [--transforms-json <json|@file>] [--mode quick|quality] [--wait]\n  assethub canvas create [--name <name>] [--operation-id <uuid>]\n  assethub canvas list [--cursor <cursor>] [--limit <n>]\n  assethub canvas get|use|open [<id>]\n  assethub runs list [--canvas <id>] [--cursor <cursor>] [--limit <n>]\n  assethub runs get|watch <run-id> [--timeout-ms <n>]\n  assethub runs resume <operation-id> [--wait]\n  assethub graph list [--cursor <cursor>] [--limit <n>]\n  assethub graph show|export [--canvas <id> | --graph <id>] [--source generated|upload] [--artifact <node-id>] [--out <path>] [--allow-truncated]\n  assethub graph lineage --artifact <node-id> [--canvas <id> | --graph <id>] [--source generated|upload] [--direction ancestors|descendants|both] [--depth <n>] [--out <path>]\n  assethub evaluate list\n  assethub evaluations submit --artifact <asset-id> --report <json|file|@file|@-> [--agent <name>] [--canvas <id>] [--reference <asset-id>...] [--run <run-id>] [--operation-id <uuid>] [--require-pass]\n  assethub evaluations list [--canvas <id>] [--artifact <asset-id>]\n  assethub evaluations get <evaluation-id>\n  assethub image generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub mesh generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub mesh list [--query <text>] [--cursor <cursor>] [--limit <n>]\n  assethub mesh get <mesh-asset-id>\n  assethub mesh download <mesh-asset-id> --out-dir <directory>\n  assethub image generate --prompt <text> [--file <path> | --source-url <url> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard] [--file-name <name>] [--content-type <type>] [--model-id <id>] [--batch-size <n>] [--wait] [--download --out-dir <dir>] [--canvas <id>] [--operation-id <uuid>] [--api-version v2]\n  assethub image generate --prompt <text> --source-resource-id <id> --api-version v2 [--model-id <id>] [--batch-size <n>] [--wait]\n  assethub mesh generate (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--file-name <name>] [--content-type <type>] [--model-id <id>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub mesh retopo (--source-resource-id <id> | --source-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) --model-id <id> [--file-name <name>] [--content-type <type>] [--wait] [--download --out-dir <dir>]\n  assethub rig check (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub rig create (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--model v1.0-20240301|v2.5-20260210] [--rig-type biped|quadruped|hexapod|octopod|avian|serpentine|aquatic] [--spec tripo|mixamo] [--out-format glb|fbx] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub animate presets [--model v1.0-20240301|v2.5-20260210] [--rig-type <type>]\n  assethub animate retarget --resource-id <id> --animation <preset-id> [--animation <preset-id>... up to 5 total] [--out-format glb|fbx] [--bake-animation true|false] [--export-with-geometry true|false] [--animate-in-place true|false] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub jobs get <job-id> [--download --out-dir <dir>]\n  assethub jobs watch <job-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production analyze (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub production agents\n  assethub production automation --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--wait]\n  assethub production status <order-id> [--wait] [--download --out-dir <dir>]\n  assethub production execute --order-id <id> --mission-id <id> --task-id <id> [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--wait] [--download --out-dir <dir>]\n  assethub production run --order-id <id> --mission-id <id> [--run-mode full_auto|approval] [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--allowed-model-id <id>...] [--max-iterations <n>] [--max-cost-credits <n>] [--wait] [--download --out-dir <dir>]\n  assethub production watch <order-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production intervene <order-id> (--exclude <target-id> | --include <target-id> | --add-part <name> | --rename <target-id>=<name> | --reject <target-id>[=<reason>] | --regenerate <target-id>=<mode> | --set-param <key>=<value> | --ops-json <json|@file|@->)... [--idempotency-key <key>]\n  assethub production interventions <order-id>\n  assethub runs upload <path> [--graph-id <id>] [--stream-id <id>] [--rev <n>] [--description <text>] [--tag <tag>...] [--skip-register] [--dry-run]\n  assethub parts split (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard | --order-id <id>) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub parts compare (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--preprocess-prompt <text>] [--preprocess-model-id <id>] [--fail-on-preprocess-error] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub autopilot [<image>] --demo [--yolo] [--json] [--max-regen <n>] [--stall-rounds <n>] [--tie-epsilon <x>] [--multiview 2-view|4-view|6-view] [--ab-mode serial|cross] [--credit-budget <n>]\n\nGlobal options:\n  --api-key <key>       Overrides saved auth and ASSETHUB_API_KEY.\n  --base-url <url>      Override the selected API origin. Default: https://app.assethub.io.\n  --profile <name>      Select this saved profile ahead of environment credentials and origin.\n  --config <path>       Auth config path. Defaults to ~/.assethub/config.json.\n  --version             Show installed package version.\n  --help                Show help.\n\nExamples:\n  ASSETHUB_API_KEY=ah_live_xxx assethub models list\n  assethub auth login --api-key-stdin\n  assethub models list --ids-only\n  assethub files upload ./input.png --media-type image\n  assethub source create --file ./input.png --media-type image\n  pbpaste | assethub source create --stdin-data-uri --media-type image\n  assethub source create --clipboard --media-type image --file-name clipboard.png\n  printf '{\"image_url\":{\"url\":\"data:image/png;base64,...\"}}' | assethub parts split --stdin-json --part-extractor \"V1.5\" --wait\n  base64 -i ./input.png | assethub parts split --stdin-base64 --file-name input.png --content-type image/png --part-extractor \"V1.5\" --wait\n  cat ./input.png | assethub parts split --stdin --file-name input.png --part-extractor \"V1.5\" --wait\n  assethub image generate --prompt \"stylized prop concept\" --wait\n  assethub mesh generate --file ./input.png --wait\n  assethub animate presets --rig-type biped\n  assethub rig create --source-resource-id mesh_x --rig-type biped --wait\n  assethub animate retarget --resource-id rig_x --animation preset:idle --wait\n  assethub production analyze --file ./input.png --part-extractor \"V1.5\" --wait\n  assethub production run --order-id ord_x --mission-id ms_x --run-mode full_auto --max-cost-credits 200 --wait\n  assethub production watch ord_x\n  assethub production intervene ord_x --exclude 7 --rename 3=\"left wing\" --idempotency-key review-2026-07-29\n  assethub production interventions ord_x\n  assethub runs upload ./out/pluffy-run-2026-07-30 --dry-run\n  assethub runs upload ./out/pluffy-run-2026-07-30 --tag pluffy --description \"V3 humanoid, 18 parts\"\n  assethub parts split --file ./input.png --part-extractor \"V1.5\" --wait --all-ready\n  assethub parts compare --file ./input.png --preprocess-prompt \"clean white background, centered product photo\" --part-extractor \"V1.5\" --wait --all-ready\n";
 /**
  * The `animate retarget` request, built from flags alone.
  *

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsBA,OAAO,EAIL,KAAK,wBAAwB,EAO7B,KAAK,YAAY,EAEjB,KAAK,UAAU,EAYhB,MAAM,sBAAsB,CAAA;AAa7B,OAAO,EAAC,kBAAkB,EAAc,MAAM,gCAAgC,CAAA;AAI9E,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;AA8HxD,eAAO,MAAM,KAAK,yyXAiHjB,CAAA;AAimED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GACxC,OAAO,KAAK,KACX,wBA0BF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,OAAO,KAAK,KACX,IAAI,CAAC,UAAU,EAAE,QAAQ,CAM1B,CAAA;AA6fF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,GAClC,MAAM,SAAS,MAAM,EAAE,KACtB,YAAY,EAuGd,CAAA;AA8oCD,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,GAAG,SAAS,EAC9B,aAAa,MAAM,EAAE,EACrB,OAAO,KAAK,KACX,cAoBF,CAAA;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,EAC5C,SAAS,GACT,UAAU,GACV,KAAK,GACL,WAAW,GACX,QAAQ,GACR,OAAO,GACP,OAAO,GACP,UAAU,CACb,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,WAAW,MAAM,EACjB,MAAM,iBAAiB;;;;;;;;;;;;;;CAUvB,CAAA;AAEF,eAAO,MAAM,sBAAsB,GACjC,SAAS,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAC7C,MAAM,iBAAiB,EACvB,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAYf,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsBA,OAAO,EAIL,KAAK,wBAAwB,EAO7B,KAAK,YAAY,EAEjB,KAAK,UAAU,EAYhB,MAAM,sBAAsB,CAAA;AAa7B,OAAO,EAAC,kBAAkB,EAAc,MAAM,gCAAgC,CAAA;AAI9E,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;AA8HxD,eAAO,MAAM,KAAK,+7YAyHjB,CAAA;AAmpED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GACxC,OAAO,KAAK,KACX,wBA0BF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,OAAO,KAAK,KACX,IAAI,CAAC,UAAU,EAAE,QAAQ,CAM1B,CAAA;AA6fF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,GAClC,MAAM,SAAS,MAAM,EAAE,KACtB,YAAY,EAuGd,CAAA;AAkqCD,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,GAAG,SAAS,EAC9B,aAAa,MAAM,EAAE,EACrB,OAAO,KAAK,KACX,cAoBF,CAAA;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,EAC5C,SAAS,GACT,UAAU,GACV,KAAK,GACL,WAAW,GACX,QAAQ,GACR,OAAO,GACP,OAAO,GACP,UAAU,CACb,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,WAAW,MAAM,EACjB,MAAM,iBAAiB;;;;;;;;;;;;;;CAUvB,CAAA;AAEF,eAAO,MAAM,sBAAsB,GACjC,SAAS,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAC7C,MAAM,iBAAiB,EACvB,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAYf,CAAA"}

package/dist/index.js

@@ -64,13 +64,13 @@ const isInternalPartExtractorId = (value) => value.trim().includes('_');
 const execFileAsync = promisify(execFile);
 export const usage = `AssetHub CLI
 
-Internal preview: canvas/context/layout and moodboards require workspace feature access.
+Internal preview: canvas/context/layout, moodboards and member management require workspace feature access.
 
 Usage:
   assethub --version
   assethub doctor [--mcp] [--profile <name>] [--timeout-ms <n>]
-  assethub mcp tools [tool-name] [--profile <name>] [--timeout-ms <n>]
-  assethub mcp config --client cursor|codex [--base-url <url>]
+  assethub mcp tools [tool-name] [--account] [--profile <name>] [--timeout-ms <n>]
+  assethub mcp config --client cursor|codex [--account] [--base-url <url>]
   assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]
   assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]
   assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]
@@ -79,6 +79,10 @@ Usage:
   assethub workspace list|get
   assethub workspace create --name <name> [--operation-id <uuid>]
   assethub workspace use <workspace-id>
+  assethub workspace members [--workspace <id>]
+  assethub workspace invite --email <email> [--role user|admin] [--resend] [--workspace <id>]
+  assethub workspace set-role <user-id> --role user|admin [--workspace <id>]
+  assethub workspace remove-member <user-id> [--workspace <id>]
   assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>
   assethub workspace self-check --internal
   assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]
@@ -110,14 +114,18 @@ Usage:
   assethub runs list [--canvas <id>] [--cursor <cursor>] [--limit <n>]
   assethub runs get|watch <run-id> [--timeout-ms <n>]
   assethub runs resume <operation-id> [--wait]
-  assethub graph show|export [--canvas <id>] [--artifact <node-id>] [--out <path>] [--allow-truncated]
-  assethub graph lineage --artifact <node-id> [--canvas <id>] [--direction ancestors|descendants|both] [--depth <n>]
+  assethub graph list [--cursor <cursor>] [--limit <n>]
+  assethub graph show|export [--canvas <id> | --graph <id>] [--source generated|upload] [--artifact <node-id>] [--out <path>] [--allow-truncated]
+  assethub graph lineage --artifact <node-id> [--canvas <id> | --graph <id>] [--source generated|upload] [--direction ancestors|descendants|both] [--depth <n>] [--out <path>]
   assethub evaluate list
   assethub evaluations submit --artifact <asset-id> --report <json|file|@file|@-> [--agent <name>] [--canvas <id>] [--reference <asset-id>...] [--run <run-id>] [--operation-id <uuid>] [--require-pass]
   assethub evaluations list [--canvas <id>] [--artifact <asset-id>]
   assethub evaluations get <evaluation-id>
   assethub image generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]
   assethub mesh generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]
+  assethub mesh list [--query <text>] [--cursor <cursor>] [--limit <n>]
+  assethub mesh get <mesh-asset-id>
+  assethub mesh download <mesh-asset-id> --out-dir <directory>
   assethub image generate --prompt <text> [--file <path> | --source-url <url> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard] [--file-name <name>] [--content-type <type>] [--model-id <id>] [--batch-size <n>] [--wait] [--download --out-dir <dir>] [--canvas <id>] [--operation-id <uuid>] [--api-version v2]
   assethub image generate --prompt <text> --source-resource-id <id> --api-version v2 [--model-id <id>] [--batch-size <n>] [--wait]
   assethub mesh generate (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--file-name <name>] [--content-type <type>] [--model-id <id>] [--name <name>] [--wait] [--download --out-dir <dir>]
@@ -1244,6 +1252,7 @@ const workspaceAuth = async (flags) => {
         accessToken,
         workspaceMfaToken,
         baseUrl,
+        selectedWorkspaceId: environmentToken ? undefined : stored?.workspaceId,
         client: createWorkspaceClient({ accessToken, workspaceMfaToken, baseUrl }),
     };
 };
@@ -1254,13 +1263,35 @@ const commandWorkspace = async (subcommand, positionals, flags) => {
             ? undefined
             : env.ASSETHUB_API_KEY?.trim();
     const auth = await workspaceAuth(flags);
+    if (['members', 'invite', 'set-role', 'remove-member'].includes(subcommand ?? '')) {
+        let workspaceId = getFlag(flags, 'workspace') ?? auth.selectedWorkspaceId;
+        if (!workspaceId)
+            workspaceId = (await auth.client.list()).workspaces.find(item => item.active)?.id;
+        if (!workspaceId)
+            throw new Error('Specify --workspace <id> or select one with workspace use <id>');
+        if (subcommand === 'members') {
+            print(await auth.client.listMembers(workspaceId));
+            return;
+        }
+        const role = subcommand === 'invite' ? getFlag(flags, 'role') ?? 'user' : subcommand === 'set-role' ? requireFlag(flags, 'role') : undefined;
+        if (role !== undefined && role !== 'user' && role !== 'admin')
+            throw new Error('--role must be user or admin');
+        stderr.write(`[workspace] ${subcommand} in ${workspaceId}…\n`);
+        if (subcommand === 'invite')
+            print(await auth.client.inviteMember(workspaceId, { email: requireFlag(flags, 'email'), role: role, ...(hasFlag(flags, 'resend') ? { resend: true } : {}) }));
+        else if (subcommand === 'set-role')
+            print(await auth.client.setMemberRole(workspaceId, { userId: requirePositional(positionals, 2, 'user-id'), role: role }));
+        else
+            print(await auth.client.removeMember(workspaceId, requirePositional(positionals, 2, 'user-id')));
+        return;
+    }
     if (subcommand === 'list') {
         print(await auth.client.list());
         return;
     }
     if (subcommand === 'get') {
         const account = await auth.client.list();
-        const selected = auth.config.profiles?.[auth.profile]?.workspaceId;
+        const selected = auth.selectedWorkspaceId;
         const workspace = account.workspaces.find(item => selected ? item.id === selected : item.active);
         if (!workspace)
             throw new Error('No workspace selected; use workspace use <id>');
@@ -1718,7 +1749,25 @@ const commandComposer = async (subcommand, ctx) => {
     });
     await printRecorded(ctx, queued);
 };
-const commandMesh = async (subcommand, ctx) => {
+const commandMesh = async (subcommand, positionals, ctx) => {
+    if (subcommand === 'list') {
+        print(await ctx.client.v2.listMeshes({
+            query: getFlag(ctx.flags, 'query'),
+            ...pageOptions(ctx.flags),
+        }));
+        return;
+    }
+    if (subcommand === 'get') {
+        print(await ctx.client.v2.getAsset(requirePositional(positionals, 2, 'mesh-asset-id')));
+        return;
+    }
+    if (subcommand === 'download') {
+        const assetId = requirePositional(positionals, 2, 'mesh-asset-id');
+        const asset = await ctx.client.v2.getAsset(assetId);
+        const downloads = await maybeDownloadUrls({ ...ctx.flags, download: true }, asset);
+        print({ asset, downloads });
+        return;
+    }
     if (subcommand === 'generate') {
         const inputJson = getFlag(ctx.flags, 'input-json');
         const input = inputJson
@@ -1771,7 +1820,7 @@ const commandMesh = async (subcommand, ctx) => {
         print(await withOptionalDownloads(ctx.flags, { queued, job }));
         return;
     }
-    throw new Error('Unknown mesh command. Use "mesh generate" or "mesh retopo".');
+    throw new Error('Unknown mesh command. Use "mesh list|get|download|generate|retopo".');
 };
 /**
  * Accepted values for the rig/animate enum flags, kept next to the commands
@@ -2994,25 +3043,44 @@ const commandMoodboard = async (subcommand, positionals, ctx) => {
         process.exitCode = 1;
 };
 const commandGraph = async (subcommand, ctx) => {
+    const graphId = getFlag(ctx.flags, 'graph');
+    if (getFlag(ctx.flags, 'source') && !graphId)
+        throw new Error('--source requires --graph');
+    if (graphId && getFlag(ctx.flags, 'canvas'))
+        throw new Error('cannot combine --graph and --canvas');
+    if (subcommand === 'list') {
+        print(await ctx.client.v2.listGraphs(pageOptions(ctx.flags)));
+        return;
+    }
     if (!['show', 'lineage', 'export'].includes(subcommand ?? ''))
-        throw new Error('Use graph show|lineage|export');
-    const { canvas } = await canvasForRead(ctx);
+        throw new Error('Use graph list|show|lineage|export');
     const direction = getFlag(ctx.flags, 'direction') ?? 'both';
     if (!['ancestors', 'descendants', 'both'].includes(direction))
         throw new Error('--direction must be ancestors, descendants, or both');
-    const graph = await ctx.client.v2.getCanvasGraph(canvas.id, {
-        artifactId: subcommand === 'lineage'
-            ? requireFlag(ctx.flags, 'artifact')
-            : getFlag(ctx.flags, 'artifact'),
-        direction: direction,
-        depth: parsePositiveIntegerFlag(ctx.flags, 'depth', 5),
-    });
-    if (subcommand === 'export' &&
+    const artifactId = subcommand === 'lineage'
+        ? requireFlag(ctx.flags, 'artifact')
+        : getFlag(ctx.flags, 'artifact');
+    const graph = graphId
+        ? await ctx.client.v2.getGraph(graphId, {
+            source: parseEnumFlag(ctx.flags, 'source', ['generated', 'upload']),
+            artifactId,
+            direction: direction,
+            depth: parsePositiveIntegerFlag(ctx.flags, 'depth', 5),
+        })
+        : await (async () => {
+            const { canvas } = await canvasForRead(ctx);
+            return ctx.client.v2.getCanvasGraph(canvas.id, {
+                artifactId,
+                direction: direction,
+                depth: parsePositiveIntegerFlag(ctx.flags, 'depth', 5),
+            });
+        })();
+    if ((subcommand === 'export' || getFlag(ctx.flags, 'out')) &&
         graph.truncated &&
         !hasFlag(ctx.flags, 'allow-truncated'))
         throw new Error('Graph exceeds export bounds; narrow with --artifact or explicitly use --allow-truncated');
     const out = getFlag(ctx.flags, 'out');
-    if (subcommand === 'export' && out) {
+    if (out) {
         await writeFile(resolve(out), JSON.stringify(graph, null, 2) + '\n', {
             mode: 0o600,
         });
@@ -3219,7 +3287,13 @@ const run = async () => {
     if (command === 'mcp' && subcommand === 'tools') {
         stderr.write('Discovering AssetHub MCP tools…\n');
         const report = await diagnose({
-            resolveAuth: () => resolveAuth(parsed.flags),
+            resolveAuth: async () => {
+                if (!hasFlag(parsed.flags, 'account'))
+                    return resolveAuth(parsed.flags);
+                const auth = await workspaceAuth(parsed.flags);
+                return { apiKey: auth.accessToken, workspaceMfaToken: auth.workspaceMfaToken, baseUrl: auth.baseUrl, profile: auth.profile, source: 'user' };
+            },
+            account: hasFlag(parsed.flags, 'account'),
             includeMcp: true,
             includeTools: true,
             timeoutMs: parsePositiveIntegerFlag(parsed.flags, 'timeout-ms', 15000),
@@ -3246,7 +3320,7 @@ const run = async () => {
     if (command === 'mcp') {
         if (subcommand !== 'config')
             throw new Error('Use mcp tools [tool-name] or mcp config --client cursor|codex');
-        stdout.write(mcpConfig(requireFlag(parsed.flags, 'client'), getFlag(parsed.flags, 'base-url') ?? env.ASSETHUB_API_BASE_URL ?? defaultBaseUrl));
+        stdout.write(mcpConfig(requireFlag(parsed.flags, 'client'), getFlag(parsed.flags, 'base-url') ?? env.ASSETHUB_API_BASE_URL ?? defaultBaseUrl, hasFlag(parsed.flags, 'account')));
         return;
     }
     if (command === 'doctor') {
@@ -3278,7 +3352,7 @@ const run = async () => {
         return;
     }
     if (command === 'workspace') {
-        if (['list', 'get', 'create', 'use'].includes(subcommand ?? '')) {
+        if (['list', 'get', 'create', 'use', 'members', 'invite', 'set-role', 'remove-member'].includes(subcommand ?? '')) {
             await commandWorkspace(subcommand, parsed.positionals, parsed.flags);
             return;
         }
@@ -3359,7 +3433,7 @@ const run = async () => {
             await commandImage(subcommand, ctx);
             return;
         case 'mesh':
-            await commandMesh(subcommand, ctx);
+            await commandMesh(subcommand, parsed.positionals, ctx);
             return;
         case 'rig':
             await commandRig(subcommand, ctx);

package/dist/setup.d.ts

@@ -1,6 +1,6 @@
 import type { Tool } from '@modelcontextprotocol/sdk/types.js';
 export declare const cliVersion: () => Promise<string>;
-export declare const mcpConfig: (client: string, baseUrl: string) => string;
+export declare const mcpConfig: (client: string, baseUrl: string, account?: boolean) => string;
 type Check = {
     name: 'api' | 'mcp' | 'configuration';
     status: 'pass' | 'fail';
@@ -17,12 +17,14 @@ type Auth = {
     baseUrl: string;
     profile: string;
     source: string;
+    workspaceMfaToken?: string;
 };
-export declare const diagnose: ({ resolveAuth, includeMcp, timeoutMs, includeTools, }: {
+export declare const diagnose: ({ resolveAuth, includeMcp, timeoutMs, includeTools, account, }: {
     resolveAuth: () => Promise<Auth>;
     includeMcp: boolean;
     timeoutMs: number;
     includeTools?: boolean;
+    account?: boolean;
 }) => Promise<{
     ok: boolean;
     version: string;

package/dist/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,oCAAoC,CAAA;AAE5D,eAAO,MAAM,UAAU,QAAa,OAAO,CAAC,MAAM,CAKvC,CAAA;AAmBX,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,EAAE,SAAS,MAAM,KAAG,MAoB3D,CAAA;AAED,KAAK,KAAK,GAAG;IACX,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,eAAe,CAAA;IACrC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,IAAI,EAAE,CAAA;CACf,CAAA;AAED,KAAK,IAAI,GAAG;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAA;AA0D9E,eAAO,MAAM,QAAQ,GAAU,uDAK5B;IACD,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;;;;;;;;;;;;;;;;;;;;;;EA2GA,CAAA"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,oCAAoC,CAAA;AAE5D,eAAO,MAAM,UAAU,QAAa,OAAO,CAAC,MAAM,CAKvC,CAAA;AAmBX,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,EAAE,SAAS,MAAM,EAAE,iBAAe,KAAG,MAsB5E,CAAA;AAED,KAAK,KAAK,GAAG;IACX,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,eAAe,CAAA;IACrC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,IAAI,EAAE,CAAA;CACf,CAAA;AAED,KAAK,IAAI,GAAG;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAC,CAAA;AA2D1G,eAAO,MAAM,QAAQ,GAAU,gEAM5B;IACD,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;;;;;;;;;;;;;;;;;;;;;;EAiHA,CAAA"}

package/dist/setup.js

@@ -1,5 +1,5 @@
 import { readFile } from 'node:fs/promises';
-import { AssetHubApiError, createAssetHubClient } from '@assethub/api-client';
+import { AssetHubApiError, createAssetHubClient, createWorkspaceClient, WorkspaceClientError } from '@assethub/api-client';
 export const cliVersion = async () => JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8')).version;
 const validatedBaseUrl = (baseUrl) => {
     const url = new URL(baseUrl);
@@ -11,22 +11,24 @@ const validatedBaseUrl = (baseUrl) => {
         throw new Error('Use HTTPS for remote servers; HTTP is supported only on localhost.');
     return url.href.replace(/\/+$/, '');
 };
-export const mcpConfig = (client, baseUrl) => {
-    const url = `${validatedBaseUrl(baseUrl)}/api/mcp`;
+export const mcpConfig = (client, baseUrl, account = false) => {
+    const url = `${validatedBaseUrl(baseUrl)}${account ? '/api/workspaces/mcp' : '/api/mcp'}`;
+    const name = account ? 'assethub-workspaces' : 'assethub';
+    const token = account ? 'ASSETHUB_ACCESS_TOKEN' : 'ASSETHUB_API_KEY';
     if (client === 'cursor')
         return (JSON.stringify({
             mcpServers: {
-                assethub: {
+                [name]: {
                     url,
-                    headers: { Authorization: 'Bearer ${env:ASSETHUB_API_KEY}' },
+                    headers: { Authorization: `Bearer \${env:${token}}`, ...(account ? { Cookie: '${env:ASSETHUB_WORKSPACE_MFA_COOKIE}' } : {}) },
                 },
             },
         }, null, 2) + '\n');
     if (client === 'codex')
-        return `[mcp_servers.assethub]\nurl = ${JSON.stringify(url)}\nbearer_token_env_var = "ASSETHUB_API_KEY"\n`;
+        return `[mcp_servers.${name}]\nurl = ${JSON.stringify(url)}\nbearer_token_env_var = "${token}"\n${account ? 'env_http_headers = { Cookie = "ASSETHUB_WORKSPACE_MFA_COOKIE" }\n' : ''}`;
     throw new Error('Use mcp config --client cursor|codex');
 };
-const failedCheck = (name, status, timedOut) => {
+const failedCheck = (name, status, timedOut, account = false) => {
     if (timedOut)
         return {
             name,
@@ -40,8 +42,8 @@ const failedCheck = (name, status, timedOut) => {
             name,
             status: 'fail',
             code: 'UNAUTHORIZED',
-            message: 'The API key was rejected.',
-            hint: 'Run assethub auth login --api-key-stdin with a current workspace key.',
+            message: account ? 'The user access token was rejected.' : 'The API key was rejected.',
+            hint: account ? 'Run assethub auth login --access-token-stdin with a current user token.' : 'Run assethub auth login --api-key-stdin with a current workspace key.',
         };
     if (status === 403)
         return {
@@ -57,7 +59,7 @@ const failedCheck = (name, status, timedOut) => {
             status: 'fail',
             code: 'MCP_UNAVAILABLE',
             message: 'Hosted MCP is unavailable for this account or API origin.',
-            hint: 'Hosted MCP is in Internal preview. Check access for the account that created the API key.',
+            hint: account ? 'Workspace MCP is in Internal preview. Check access for the signed-in user.' : 'Hosted MCP is in Internal preview. Check access for the account that created the API key.',
         };
     if (status === 429)
         return {
@@ -77,7 +79,7 @@ const failedCheck = (name, status, timedOut) => {
         hint: 'Check the API origin, network, and service status; then retry.',
     };
 };
-export const diagnose = async ({ resolveAuth, includeMcp, timeoutMs, includeTools = false, }) => {
+export const diagnose = async ({ resolveAuth, includeMcp, timeoutMs, includeTools = false, account = false, }) => {
     const version = await cliVersion();
     let auth;
     try {
@@ -110,6 +112,10 @@ export const diagnose = async ({ resolveAuth, includeMcp, timeoutMs, includeTool
     });
     const apiCheck = async () => {
         try {
+            if (account) {
+                await createWorkspaceClient({ accessToken: auth.apiKey, workspaceMfaToken: auth.workspaceMfaToken, baseUrl: auth.baseUrl, fetch: boundedFetch }).list();
+                return { name: 'api', status: 'pass' };
+            }
             const capabilities = await createAssetHubClient({
                 apiKey: auth.apiKey,
                 baseUrl: auth.baseUrl,
@@ -125,7 +131,7 @@ export const diagnose = async ({ resolveAuth, includeMcp, timeoutMs, includeTool
             };
         }
         catch (error) {
-            return failedCheck('api', error instanceof AssetHubApiError ? error.status : undefined, signal.aborted);
+            return failedCheck('api', error instanceof AssetHubApiError || error instanceof WorkspaceClientError ? error.status : undefined, signal.aborted, account);
         }
     };
     const mcpCheck = async () => {
@@ -133,9 +139,9 @@ export const diagnose = async ({ resolveAuth, includeMcp, timeoutMs, includeTool
         const { StreamableHTTPClientTransport, StreamableHTTPError } = await import('@modelcontextprotocol/sdk/client/streamableHttp.js');
         const client = new Client({ name: 'assethub-cli-doctor', version });
         try {
-            await client.connect(new StreamableHTTPClientTransport(new URL(`${auth.baseUrl}/api/mcp`), {
+            await client.connect(new StreamableHTTPClientTransport(new URL(`${auth.baseUrl}${account ? '/api/workspaces/mcp' : '/api/mcp'}`), {
                 fetch: boundedFetch,
-                requestInit: { headers: { Authorization: `Bearer ${auth.apiKey}` } },
+                requestInit: { headers: { Authorization: `Bearer ${auth.apiKey}`, ...(account && auth.workspaceMfaToken ? { Cookie: `ah_workspace_mfa=${encodeURIComponent(auth.workspaceMfaToken)}` } : {}) } },
             }), { signal, timeout: timeoutMs });
             let toolCount = 0;
             const tools = [];
@@ -160,7 +166,7 @@ export const diagnose = async ({ resolveAuth, includeMcp, timeoutMs, includeTool
             return { name: 'mcp', status: 'pass', toolCount, ...(includeTools ? { tools } : {}) };
         }
         catch (error) {
-            return failedCheck('mcp', error instanceof StreamableHTTPError ? error.code : undefined, signal.aborted);
+            return failedCheck('mcp', error instanceof StreamableHTTPError ? error.code : undefined, signal.aborted, account);
         }
         finally {
             await client.close();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assethub/cli",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "Command line interface for AssetHub.",
   "type": "module",
   "bin": {
@@ -30,7 +30,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@assethub/api-client": "^0.1.4",
+    "@assethub/api-client": "^0.1.6",
     "@modelcontextprotocol/sdk": "^1.30.0"
   },
   "repository": {