@assethub/cli 0.1.8 → 0.1.9

package/README.md

@@ -372,3 +372,37 @@ Internal agent IDs are intentionally not part of the CLI interface.
 
 The CLI only uses AssetHub's public API surface and is designed so this package
 can be published independently from the private application monorepo.
+
+## Workspaces and existing parts
+
+Workspace management uses a user access token, separately from workspace API keys.
+Pass the token through standard input; never include it in command arguments.
+
+```sh
+assethub auth login --access-token-stdin
+assethub workspace list
+assethub workspace create --name "Character concepts"
+assethub workspace use <workspace-id>
+assethub canvas list
+assethub canvas use <canvas-id>
+assethub composer models
+assethub composer run --part <mesh-id> --part <mesh-id> --reference <image-id> --wait
+assethub composer run --from-run <run-id> --transforms-json @transforms.json --wait
+```
+
+Selection reuses a valid API key for that workspace or creates one when permitted.
+Membership, API key creation permissions, and workspace MFA still apply. Complete
+required MFA in AssetHub and provide its signed proof through
+`ASSETHUB_WORKSPACE_MFA`. Generation uses normal workspace credits.
+
+Existing Production outputs can be inspected and downloaded without regenerating:
+
+```sh
+assethub production status <order-id> --download --out-dir ./existing-assets
+assethub graph export --canvas <canvas-id> --out ./graph.json
+assethub graph lineage --canvas <canvas-id> --artifact <asset-id> --direction ancestors
+```
+
+The graph commands currently cover recorded CLI/API executions and evaluations.
+They do not enumerate every historical UI artifact graph or provide a workspace-wide
+mesh library search. A canvas with only older UI activity can return an empty graph.

package/dist/execution.d.ts

@@ -1,5 +1,5 @@
-import { type AssetHubClient, type CanvasExecution, type ExecutionContext, type ImageGenerationRequest, type MeshGenerationRequest, type ProductionAnalyzeRequest, type ProductionExecuteRequest, type ProductionAutomationRequest } from '@assethub/api-client';
-declare const operations: readonly ["image.generate", "mesh.generate", "production.analyze", "production.execute", "production.automation"];
+import { type AssetHubClient, type CanvasExecution, type ExecutionContext, type ImageGenerationRequest, type MeshGenerationRequest, type MeshComposeRequest, type ProductionAnalyzeRequest, type ProductionExecuteRequest, type ProductionAutomationRequest } from '@assethub/api-client';
+declare const operations: readonly ["image.generate", "mesh.generate", "mesh.compose", "production.analyze", "production.execute", "production.automation"];
 type Operation = (typeof operations)[number];
 type SessionOptions = {
     client: AssetHubClient;
@@ -22,7 +22,7 @@ export declare const openExecutionSession: (options: SessionOptions) => Promise<
     create?: boolean;
 }>;
 type Session = Awaited<ReturnType<typeof openExecutionSession>>;
-type RequestBody = ImageGenerationRequest | MeshGenerationRequest | ProductionAnalyzeRequest | ProductionExecuteRequest | ProductionAutomationRequest;
+type RequestBody = ImageGenerationRequest | MeshGenerationRequest | Omit<MeshComposeRequest, 'executionContext'> | ProductionAnalyzeRequest | ProductionExecuteRequest | ProductionAutomationRequest;
 export declare const hasRecordedOperation: (stateDir: string, operationId: string) => Promise<boolean>;
 type SubmitOptions = {
     operationId?: string;
@@ -47,8 +47,6 @@ export declare const activeExecution: {
 };
 export declare const executeRecorded: (session: Session, operation: Operation, body: RequestBody, options?: SubmitOptions) => Promise<{
     execution: CanvasExecution;
-} | {
-    execution: CanvasExecution;
     jobId: string;
     imageGenId: string;
     status: "queued";
@@ -66,6 +64,9 @@ export declare const executeRecorded: (session: Session, operation: Operation, b
     modelId: string;
     inputMode: "image" | "multiview";
     imageCount: number;
+} | {
+    execution: CanvasExecution;
+    triggerRunId?: string;
 } | {
     execution: CanvasExecution;
     engine?: "artifact-graph";
@@ -110,8 +111,6 @@ export declare const resumeRecorded: (options: Omit<SessionOptions, "canvasId" |
     expectedBody?: Record<string, unknown>;
 }) => Promise<{
     execution: CanvasExecution;
-} | {
-    execution: CanvasExecution;
     jobId: string;
     imageGenId: string;
     status: "queued";
@@ -129,6 +128,9 @@ export declare const resumeRecorded: (options: Omit<SessionOptions, "canvasId" |
     modelId: string;
     inputMode: "image" | "multiview";
     imageCount: number;
+} | {
+    execution: CanvasExecution;
+    triggerRunId?: string;
 } | {
     execution: CanvasExecution;
     engine?: "artifact-graph";

package/dist/execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EACjC,MAAM,sBAAsB,CAAA;AAG7B,QAAA,MAAM,UAAU,mHAMN,CAAA;AACV,KAAK,SAAS,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAC5C,KAAK,cAAc,GAAG;IACpB,MAAM,EAAE,cAAc,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,CAAA;AACD,eAAO,MAAM,oBAAoB,GAAU,SAAS,cAAc;;;;;YAPxD,cAAc;cACZ,MAAM;SACX,MAAM;eACA,MAAM;gBACL,SAAS;aACZ,OAAO;EAoBjB,CAAA;AACD,KAAK,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAA;AAC/D,KAAK,WAAW,GACZ,sBAAsB,GACtB,qBAAqB,GACrB,wBAAwB,GACxB,wBAAwB,GACxB,2BAA2B,CAAA;AAU/B,eAAO,MAAM,oBAAoB,GAC/B,UAAU,MAAM,EAChB,aAAa,MAAM,qBACyD,CAAA;AAC9E,KAAK,aAAa,GAAG;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACnC,WAAW,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAA;CAC9C,CAAA;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAGxC,QAAQ,CAAC,QAAQ;IACjB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS;gBAJlC,OAAO,EAAE,MAAM,EACN,QAAQ,SAAI,EACZ,WAAW,CAAC,EAAE,MAAM,YAAA,EACpB,SAAS,CAAC,EAAE,eAAe,YAAA,EAC3B,KAAK,GAAE,MAAM,GAAG,SAA4B;CAIxD;AAED,yFAAyF;AACzF,eAAO,MAAM,eAAe,EAAE;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,eAAe,CAAA;CACvB,CAAA;AAoJN,eAAO,MAAM,eAAe,GAC1B,SAAS,OAAO,EAChB,WAAW,SAAS,EACpB,MAAM,WAAW,EACjB,UAAS,aAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsD5B,CAAA;AAED,eAAO,MAAM,cAAc,GACzB,SAAS,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC,GAAG;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCF,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,cAAc,EACtB,OAAO,MAAM,EACb,UAAS;IACP,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,KAAK,IAAI,CAAA;CAC7C,KACL,OAAO,CAAC,eAAe,CA2CzB,CAAA"}
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EACjC,MAAM,sBAAsB,CAAA;AAG7B,QAAA,MAAM,UAAU,mIAON,CAAA;AACV,KAAK,SAAS,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAC5C,KAAK,cAAc,GAAG;IACpB,MAAM,EAAE,cAAc,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,CAAA;AACD,eAAO,MAAM,oBAAoB,GAAU,SAAS,cAAc;;;;;YAPxD,cAAc;cACZ,MAAM;SACX,MAAM;eACA,MAAM;gBACL,SAAS;aACZ,OAAO;EAoBjB,CAAA;AACD,KAAK,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAA;AAC/D,KAAK,WAAW,GACZ,sBAAsB,GACtB,qBAAqB,GACrB,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,GAC5C,wBAAwB,GACxB,wBAAwB,GACxB,2BAA2B,CAAA;AAU/B,eAAO,MAAM,oBAAoB,GAC/B,UAAU,MAAM,EAChB,aAAa,MAAM,qBACyD,CAAA;AAC9E,KAAK,aAAa,GAAG;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACnC,WAAW,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAA;CAC9C,CAAA;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAGxC,QAAQ,CAAC,QAAQ;IACjB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS;gBAJlC,OAAO,EAAE,MAAM,EACN,QAAQ,SAAI,EACZ,WAAW,CAAC,EAAE,MAAM,YAAA,EACpB,SAAS,CAAC,EAAE,eAAe,YAAA,EAC3B,KAAK,GAAE,MAAM,GAAG,SAA4B;CAIxD;AAED,yFAAyF;AACzF,eAAO,MAAM,eAAe,EAAE;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,eAAe,CAAA;CACvB,CAAA;AAkKN,eAAO,MAAM,eAAe,GAC1B,SAAS,OAAO,EAChB,WAAW,SAAS,EACpB,MAAM,WAAW,EACjB,UAAS,aAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsD5B,CAAA;AAED,eAAO,MAAM,cAAc,GACzB,SAAS,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC,GAAG;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCF,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,cAAc,EACtB,OAAO,MAAM,EACb,UAAS;IACP,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,KAAK,IAAI,CAAA;CAC7C,KACL,OAAO,CAAC,eAAe,CA2CzB,CAAA"}

package/dist/execution.js

@@ -7,6 +7,7 @@ import { readState, resolveCanvasSelection, writeState } from './canvas.js';
 const operations = [
     'image.generate',
     'mesh.generate',
+    'mesh.compose',
     'production.analyze',
     'production.execute',
     'production.automation',
@@ -80,7 +81,12 @@ const submitSaved = async (session, saved, retryDelayMs = 250) => {
         if (saved.runId) {
             const execution = await session.client.v2.getRun(saved.runId);
             activeExecution.execution = execution;
-            return { execution };
+            // An unacknowledged Composer receipt can precede a failed Trigger POST.
+            // Resume repeats its saved body/key; the server uses the same native key.
+            if (!(saved.operation === 'mesh.compose' &&
+                execution.status === 'queued' &&
+                execution.history.status === 'pending'))
+                return { execution };
         }
         for (let attempt = 0;; attempt++) {
             try {
@@ -91,6 +97,8 @@ const submitSaved = async (session, saved, retryDelayMs = 250) => {
                             return session.client.v2.generateImage(saved.body, options);
                         case 'mesh.generate':
                             return session.client.v2.generateMesh(saved.body, options);
+                        case 'mesh.compose':
+                            return session.client.v2.composeMesh(saved.body, options);
                         case 'production.analyze':
                             return session.client.v1.analyzeProduction(saved.body, options);
                         case 'production.execute':

package/dist/index.d.ts

@@ -2,7 +2,7 @@
 import { type AnimationRetargetRequest, type Intervention, type RigRequest } from '@assethub/api-client';
 import { buildRunUploadPlan } from './runsUpload/buildRunUpload.js';
 type Flags = Record<string, string | boolean | string[]>;
-export declare const usage = "AssetHub CLI\n\nInternal preview: canvas/context/layout and moodboards require workspace feature access.\n\nUsage:\n  assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]\n  assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]\n  assethub auth status [--profile <name>]\n  assethub auth logout [--profile <name>]\n  assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>\n  assethub workspace self-check --internal\n  assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]\n  assethub workspace context get --internal --org <uuid> --actor <uuid> --canvas <id> [--out <json>] [--order <uuid>]\n  assethub project ingest <source-dir> --out-dir <directory> [--exclude-dir <relative-path>...]\n  assethub language text|vision --input-json @<json> --operation-id <uuid> [--out <json>]\n  assethub canvas import --canvas <id> --file <image> [--name <name>]\n  assethub canvas context get --canvas <id> [--out <json>]\n  assethub canvas context put --canvas <id> --file <json> [--if-version <n>]\n  assethub canvas layout --canvas <id> --input-json @<json>\n  assethub canvas compare --canvas <id> --source-id <asset-id> --asset-id <asset-id> --out <html>\n  assethub moodboard create --input-json @<json> [--operation-id <uuid>]\n  assethub moodboard list|get|update|archive [<board-id>] [--input-json @<json>]\n  assethub moodboard analyze <board-id> [--revision <uuid>] [--wait]\n  assethub image generate --canvas <id> --context <id> [--context-version <n>] [--context-source <key>] [--moodboard-revision <uuid>] --prompt <text> --wait\n  assethub models list [--domain <domain>] [--ids-only] [--limit <n>]\n  assethub models get <model-id>\n  assethub files import <url> --media-type image|mesh\n  assethub files upload <file> --media-type image|mesh\n  assethub source create (--file <path> | --source-url <url> | --source-id <id> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) --media-type image|mesh [--file-name <name>] [--content-type <type>]\n  assethub capabilities\n  assethub canvas create [--name <name>] [--operation-id <uuid>]\n  assethub canvas list [--cursor <cursor>] [--limit <n>]\n  assethub canvas get|use|open [<id>]\n  assethub runs list [--canvas <id>] [--cursor <cursor>] [--limit <n>]\n  assethub runs get|watch <run-id> [--timeout-ms <n>]\n  assethub runs resume <operation-id> [--wait]\n  assethub graph show|export [--canvas <id>] [--artifact <node-id>] [--out <path>] [--allow-truncated]\n  assethub graph lineage --artifact <node-id> [--canvas <id>] [--direction ancestors|descendants|both] [--depth <n>]\n  assethub evaluate list\n  assethub evaluations submit --artifact <asset-id> --report <json|file|@file|@-> [--agent <name>] [--canvas <id>] [--reference <asset-id>...] [--run <run-id>] [--operation-id <uuid>] [--require-pass]\n  assethub evaluations list [--canvas <id>] [--artifact <asset-id>]\n  assethub evaluations get <evaluation-id>\n  assethub image generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub mesh generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub image generate --prompt <text> [--file <path> | --source-url <url> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard] [--file-name <name>] [--content-type <type>] [--model-id <id>] [--batch-size <n>] [--wait] [--download --out-dir <dir>] [--canvas <id>] [--operation-id <uuid>] [--api-version v2]\n  assethub image generate --prompt <text> --source-resource-id <id> --api-version v2 [--model-id <id>] [--batch-size <n>] [--wait]\n  assethub mesh generate (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--file-name <name>] [--content-type <type>] [--model-id <id>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub mesh retopo (--source-resource-id <id> | --source-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) --model-id <id> [--file-name <name>] [--content-type <type>] [--wait] [--download --out-dir <dir>]\n  assethub rig check (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub rig create (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--model v1.0-20240301|v2.5-20260210] [--rig-type biped|quadruped|hexapod|octopod|avian|serpentine|aquatic] [--spec tripo|mixamo] [--out-format glb|fbx] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub animate presets [--model v1.0-20240301|v2.5-20260210] [--rig-type <type>]\n  assethub animate retarget --resource-id <id> --animation <preset-id> [--animation <preset-id>... up to 5 total] [--out-format glb|fbx] [--bake-animation true|false] [--export-with-geometry true|false] [--animate-in-place true|false] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub jobs get <job-id> [--download --out-dir <dir>]\n  assethub jobs watch <job-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production analyze (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub production agents\n  assethub production automation --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--wait]\n  assethub production status <order-id> [--wait] [--download --out-dir <dir>]\n  assethub production execute --order-id <id> --mission-id <id> --task-id <id> [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--wait] [--download --out-dir <dir>]\n  assethub production run --order-id <id> --mission-id <id> [--run-mode full_auto|approval] [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--allowed-model-id <id>...] [--max-iterations <n>] [--max-cost-credits <n>] [--wait] [--download --out-dir <dir>]\n  assethub production watch <order-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production intervene <order-id> (--exclude <target-id> | --include <target-id> | --add-part <name> | --rename <target-id>=<name> | --reject <target-id>[=<reason>] | --regenerate <target-id>=<mode> | --set-param <key>=<value> | --ops-json <json|@file|@->)... [--idempotency-key <key>]\n  assethub production interventions <order-id>\n  assethub runs upload <path> [--graph-id <id>] [--stream-id <id>] [--rev <n>] [--description <text>] [--tag <tag>...] [--skip-register] [--dry-run]\n  assethub parts split (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard | --order-id <id>) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub parts compare (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--preprocess-prompt <text>] [--preprocess-model-id <id>] [--fail-on-preprocess-error] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub autopilot [<image>] --demo [--yolo] [--json] [--max-regen <n>] [--stall-rounds <n>] [--tie-epsilon <x>] [--multiview 2-view|4-view|6-view] [--ab-mode serial|cross] [--credit-budget <n>]\n\nGlobal options:\n  --api-key <key>       Overrides saved auth and ASSETHUB_API_KEY.\n  --base-url <url>      Defaults to ASSETHUB_API_BASE_URL, saved auth, or https://app.assethub.io.\n  --profile <name>      Saved auth profile name. Defaults to default.\n  --config <path>       Auth config path. Defaults to ~/.assethub/config.json.\n  --help                Show help.\n\nExamples:\n  ASSETHUB_API_KEY=ah_live_xxx assethub models list\n  assethub auth login --api-key-stdin\n  assethub models list --ids-only\n  assethub files upload ./input.png --media-type image\n  assethub source create --file ./input.png --media-type image\n  pbpaste | assethub source create --stdin-data-uri --media-type image\n  assethub source create --clipboard --media-type image --file-name clipboard.png\n  printf '{\"image_url\":{\"url\":\"data:image/png;base64,...\"}}' | assethub parts split --stdin-json --part-extractor \"V1.5\" --wait\n  base64 -i ./input.png | assethub parts split --stdin-base64 --file-name input.png --content-type image/png --part-extractor \"V1.5\" --wait\n  cat ./input.png | assethub parts split --stdin --file-name input.png --part-extractor \"V1.5\" --wait\n  assethub image generate --prompt \"stylized prop concept\" --wait\n  assethub mesh generate --file ./input.png --wait\n  assethub animate presets --rig-type biped\n  assethub rig create --source-resource-id mesh_x --rig-type biped --wait\n  assethub animate retarget --resource-id rig_x --animation preset:idle --wait\n  assethub production analyze --file ./input.png --part-extractor \"V1.5\" --wait\n  assethub production run --order-id ord_x --mission-id ms_x --run-mode full_auto --max-cost-credits 200 --wait\n  assethub production watch ord_x\n  assethub production intervene ord_x --exclude 7 --rename 3=\"left wing\" --idempotency-key review-2026-07-29\n  assethub production interventions ord_x\n  assethub runs upload ./out/pluffy-run-2026-07-30 --dry-run\n  assethub runs upload ./out/pluffy-run-2026-07-30 --tag pluffy --description \"V3 humanoid, 18 parts\"\n  assethub parts split --file ./input.png --part-extractor \"V1.5\" --wait --all-ready\n  assethub parts compare --file ./input.png --preprocess-prompt \"clean white background, centered product photo\" --part-extractor \"V1.5\" --wait --all-ready\n";
+export declare const usage = "AssetHub CLI\n\nInternal preview: canvas/context/layout and moodboards require workspace feature access.\n\nUsage:\n  assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]\n  assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]\n  assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]\n  assethub auth status [--profile <name>]\n  assethub auth logout [--profile <name>]\n  assethub workspace list|get\n  assethub workspace create --name <name> [--operation-id <uuid>]\n  assethub workspace use <workspace-id>\n  assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>\n  assethub workspace self-check --internal\n  assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]\n  assethub workspace context get --internal --org <uuid> --actor <uuid> --canvas <id> [--out <json>] [--order <uuid>]\n  assethub project ingest <source-dir> --out-dir <directory> [--exclude-dir <relative-path>...]\n  assethub language text|vision --input-json @<json> --operation-id <uuid> [--out <json>]\n  assethub canvas import --canvas <id> --file <image> [--name <name>]\n  assethub canvas context get --canvas <id> [--out <json>]\n  assethub canvas context put --canvas <id> --file <json> [--if-version <n>]\n  assethub canvas layout --canvas <id> --input-json @<json>\n  assethub canvas compare --canvas <id> --source-id <asset-id> --asset-id <asset-id> --out <html>\n  assethub moodboard create --input-json @<json> [--operation-id <uuid>]\n  assethub moodboard list|get|update|archive [<board-id>] [--input-json @<json>]\n  assethub moodboard analyze <board-id> [--revision <uuid>] [--wait]\n  assethub image generate --canvas <id> --context <id> [--context-version <n>] [--context-source <key>] [--moodboard-revision <uuid>] --prompt <text> --wait\n  assethub models list [--domain <domain>] [--ids-only] [--limit <n>]\n  assethub models get <model-id>\n  assethub files import <url> --media-type image|mesh\n  assethub files upload <file> --media-type image|mesh\n  assethub source create (--file <path> | --source-url <url> | --source-id <id> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) --media-type image|mesh [--file-name <name>] [--content-type <type>]\n  assethub capabilities\n  assethub composer models\n  assethub composer run --part <mesh-asset-id> [--part <mesh-asset-id>...] --reference <image-asset-id> [--model <id>] [--mode quick|quality] [--transforms-json <json|@file>] [--canvas <id>] [--wait]\n  assethub composer run --input-json <json|@file> [--canvas <id>] [--operation-id <uuid>] [--wait] [--download --out-dir <dir>]\n  assethub composer run --from-run <run-id> [--transforms-json <json|@file>] [--mode quick|quality] [--wait]\n  assethub canvas create [--name <name>] [--operation-id <uuid>]\n  assethub canvas list [--cursor <cursor>] [--limit <n>]\n  assethub canvas get|use|open [<id>]\n  assethub runs list [--canvas <id>] [--cursor <cursor>] [--limit <n>]\n  assethub runs get|watch <run-id> [--timeout-ms <n>]\n  assethub runs resume <operation-id> [--wait]\n  assethub graph show|export [--canvas <id>] [--artifact <node-id>] [--out <path>] [--allow-truncated]\n  assethub graph lineage --artifact <node-id> [--canvas <id>] [--direction ancestors|descendants|both] [--depth <n>]\n  assethub evaluate list\n  assethub evaluations submit --artifact <asset-id> --report <json|file|@file|@-> [--agent <name>] [--canvas <id>] [--reference <asset-id>...] [--run <run-id>] [--operation-id <uuid>] [--require-pass]\n  assethub evaluations list [--canvas <id>] [--artifact <asset-id>]\n  assethub evaluations get <evaluation-id>\n  assethub image generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub mesh generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub image generate --prompt <text> [--file <path> | --source-url <url> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard] [--file-name <name>] [--content-type <type>] [--model-id <id>] [--batch-size <n>] [--wait] [--download --out-dir <dir>] [--canvas <id>] [--operation-id <uuid>] [--api-version v2]\n  assethub image generate --prompt <text> --source-resource-id <id> --api-version v2 [--model-id <id>] [--batch-size <n>] [--wait]\n  assethub mesh generate (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--file-name <name>] [--content-type <type>] [--model-id <id>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub mesh retopo (--source-resource-id <id> | --source-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) --model-id <id> [--file-name <name>] [--content-type <type>] [--wait] [--download --out-dir <dir>]\n  assethub rig check (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub rig create (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--model v1.0-20240301|v2.5-20260210] [--rig-type biped|quadruped|hexapod|octopod|avian|serpentine|aquatic] [--spec tripo|mixamo] [--out-format glb|fbx] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub animate presets [--model v1.0-20240301|v2.5-20260210] [--rig-type <type>]\n  assethub animate retarget --resource-id <id> --animation <preset-id> [--animation <preset-id>... up to 5 total] [--out-format glb|fbx] [--bake-animation true|false] [--export-with-geometry true|false] [--animate-in-place true|false] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub jobs get <job-id> [--download --out-dir <dir>]\n  assethub jobs watch <job-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production analyze (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub production agents\n  assethub production automation --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--wait]\n  assethub production status <order-id> [--wait] [--download --out-dir <dir>]\n  assethub production execute --order-id <id> --mission-id <id> --task-id <id> [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--wait] [--download --out-dir <dir>]\n  assethub production run --order-id <id> --mission-id <id> [--run-mode full_auto|approval] [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--allowed-model-id <id>...] [--max-iterations <n>] [--max-cost-credits <n>] [--wait] [--download --out-dir <dir>]\n  assethub production watch <order-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production intervene <order-id> (--exclude <target-id> | --include <target-id> | --add-part <name> | --rename <target-id>=<name> | --reject <target-id>[=<reason>] | --regenerate <target-id>=<mode> | --set-param <key>=<value> | --ops-json <json|@file|@->)... [--idempotency-key <key>]\n  assethub production interventions <order-id>\n  assethub runs upload <path> [--graph-id <id>] [--stream-id <id>] [--rev <n>] [--description <text>] [--tag <tag>...] [--skip-register] [--dry-run]\n  assethub parts split (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard | --order-id <id>) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub parts compare (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--preprocess-prompt <text>] [--preprocess-model-id <id>] [--fail-on-preprocess-error] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub autopilot [<image>] --demo [--yolo] [--json] [--max-regen <n>] [--stall-rounds <n>] [--tie-epsilon <x>] [--multiview 2-view|4-view|6-view] [--ab-mode serial|cross] [--credit-budget <n>]\n\nGlobal options:\n  --api-key <key>       Overrides saved auth and ASSETHUB_API_KEY.\n  --base-url <url>      Defaults to ASSETHUB_API_BASE_URL, saved auth, or https://app.assethub.io.\n  --profile <name>      Saved auth profile name. Defaults to default.\n  --config <path>       Auth config path. Defaults to ~/.assethub/config.json.\n  --help                Show help.\n\nExamples:\n  ASSETHUB_API_KEY=ah_live_xxx assethub models list\n  assethub auth login --api-key-stdin\n  assethub models list --ids-only\n  assethub files upload ./input.png --media-type image\n  assethub source create --file ./input.png --media-type image\n  pbpaste | assethub source create --stdin-data-uri --media-type image\n  assethub source create --clipboard --media-type image --file-name clipboard.png\n  printf '{\"image_url\":{\"url\":\"data:image/png;base64,...\"}}' | assethub parts split --stdin-json --part-extractor \"V1.5\" --wait\n  base64 -i ./input.png | assethub parts split --stdin-base64 --file-name input.png --content-type image/png --part-extractor \"V1.5\" --wait\n  cat ./input.png | assethub parts split --stdin --file-name input.png --part-extractor \"V1.5\" --wait\n  assethub image generate --prompt \"stylized prop concept\" --wait\n  assethub mesh generate --file ./input.png --wait\n  assethub animate presets --rig-type biped\n  assethub rig create --source-resource-id mesh_x --rig-type biped --wait\n  assethub animate retarget --resource-id rig_x --animation preset:idle --wait\n  assethub production analyze --file ./input.png --part-extractor \"V1.5\" --wait\n  assethub production run --order-id ord_x --mission-id ms_x --run-mode full_auto --max-cost-credits 200 --wait\n  assethub production watch ord_x\n  assethub production intervene ord_x --exclude 7 --rename 3=\"left wing\" --idempotency-key review-2026-07-29\n  assethub production interventions ord_x\n  assethub runs upload ./out/pluffy-run-2026-07-30 --dry-run\n  assethub runs upload ./out/pluffy-run-2026-07-30 --tag pluffy --description \"V3 humanoid, 18 parts\"\n  assethub parts split --file ./input.png --part-extractor \"V1.5\" --wait --all-ready\n  assethub parts compare --file ./input.png --preprocess-prompt \"clean white background, centered product photo\" --part-extractor \"V1.5\" --wait --all-ready\n";
 /**
  * The `animate retarget` request, built from flags alone.
  *

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAqBA,OAAO,EAEL,KAAK,wBAAwB,EAO7B,KAAK,YAAY,EAEjB,KAAK,UAAU,EAWhB,MAAM,sBAAsB,CAAA;AAa7B,OAAO,EAAC,kBAAkB,EAAc,MAAM,gCAAgC,CAAA;AAI9E,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;AA0HxD,eAAO,MAAM,KAAK,80VAoGjB,CAAA;AAy0DD;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GACxC,OAAO,KAAK,KACX,wBA0BF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,OAAO,KAAK,KACX,IAAI,CAAC,UAAU,EAAE,QAAQ,CAM1B,CAAA;AA6fF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,GAClC,MAAM,SAAS,MAAM,EAAE,KACtB,YAAY,EAuGd,CAAA;AA8oCD,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,GAAG,SAAS,EAC9B,aAAa,MAAM,EAAE,EACrB,OAAO,KAAK,KACX,cAoBF,CAAA;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,EAC5C,SAAS,GACT,UAAU,GACV,KAAK,GACL,WAAW,GACX,QAAQ,GACR,OAAO,GACP,OAAO,GACP,UAAU,CACb,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,WAAW,MAAM,EACjB,MAAM,iBAAiB;;;;;;;;;;;;;;CAUvB,CAAA;AAEF,eAAO,MAAM,sBAAsB,GACjC,SAAS,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAC7C,MAAM,iBAAiB,EACvB,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAYf,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAqBA,OAAO,EAIL,KAAK,wBAAwB,EAO7B,KAAK,YAAY,EAEjB,KAAK,UAAU,EAYhB,MAAM,sBAAsB,CAAA;AAa7B,OAAO,EAAC,kBAAkB,EAAc,MAAM,gCAAgC,CAAA;AAI9E,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;AA8HxD,eAAO,MAAM,KAAK,+/WA4GjB,CAAA;AAsnED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GACxC,OAAO,KAAK,KACX,wBA0BF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,OAAO,KAAK,KACX,IAAI,CAAC,UAAU,EAAE,QAAQ,CAM1B,CAAA;AA6fF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,GAClC,MAAM,SAAS,MAAM,EAAE,KACtB,YAAY,EAuGd,CAAA;AA8oCD,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,GAAG,SAAS,EAC9B,aAAa,MAAM,EAAE,EACrB,OAAO,KAAK,KACX,cAoBF,CAAA;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,EAC5C,SAAS,GACT,UAAU,GACV,KAAK,GACL,WAAW,GACX,QAAQ,GACR,OAAO,GACP,OAAO,GACP,UAAU,CACb,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,WAAW,MAAM,EACjB,MAAM,iBAAiB;;;;;;;;;;;;;;CAUvB,CAAA;AAEF,eAAO,MAAM,sBAAsB,GACjC,SAAS,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAC7C,MAAM,iBAAiB,EACvB,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAYf,CAAA"}

package/dist/index.js

@@ -12,7 +12,7 @@ import { basename, dirname, extname, join, resolve } from 'node:path';
 import { argv, env, exit, stdin, stderr, stdout } from 'node:process';
 import { fileURLToPath } from 'node:url';
 import { promisify } from 'node:util';
-import { AssetHubApiError, createAssetHubClient, } from '@assethub/api-client';
+import { AssetHubApiError, WorkspaceClientError, createWorkspaceClient, createAssetHubClient, } from '@assethub/api-client';
 import { resolveCanvasSelection, saveCanvasSelection } from './canvas.js';
 import { activeExecution, CliExecutionError, executeRecorded, hasRecordedOperation, openExecutionSession, resumeRecorded, waitForExecution, } from './execution.js';
 import { buildRunUploadPlan, formatBytes } from './runsUpload/buildRunUpload.js';
@@ -68,8 +68,12 @@ Internal preview: canvas/context/layout and moodboards require workspace feature
 Usage:
   assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]
   assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]
+  assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]
   assethub auth status [--profile <name>]
   assethub auth logout [--profile <name>]
+  assethub workspace list|get
+  assethub workspace create --name <name> [--operation-id <uuid>]
+  assethub workspace use <workspace-id>
   assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>
   assethub workspace self-check --internal
   assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]
@@ -91,6 +95,10 @@ Usage:
   assethub files upload <file> --media-type image|mesh
   assethub source create (--file <path> | --source-url <url> | --source-id <id> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) --media-type image|mesh [--file-name <name>] [--content-type <type>]
   assethub capabilities
+  assethub composer models
+  assethub composer run --part <mesh-asset-id> [--part <mesh-asset-id>...] --reference <image-asset-id> [--model <id>] [--mode quick|quality] [--transforms-json <json|@file>] [--canvas <id>] [--wait]
+  assethub composer run --input-json <json|@file> [--canvas <id>] [--operation-id <uuid>] [--wait] [--download --out-dir <dir>]
+  assethub composer run --from-run <run-id> [--transforms-json <json|@file>] [--mode quick|quality] [--wait]
   assethub canvas create [--name <name>] [--operation-id <uuid>]
   assethub canvas list [--cursor <cursor>] [--limit <n>]
   assethub canvas get|use|open [<id>]
@@ -356,11 +364,12 @@ const readAuthConfig = async (configPath) => {
 };
 const writeAuthConfig = async (configPath, config) => {
     await mkdir(dirname(configPath), { recursive: true, mode: 0o700 });
-    await writeFile(`${configPath}.tmp`, `${JSON.stringify(config, null, 2)}\n`, {
+    const temporary = `${configPath}.${randomUUID()}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(config, null, 2)}\n`, {
         mode: 0o600,
+        flag: 'wx',
     });
-    await chmod(`${configPath}.tmp`, 0o600);
-    await rename(`${configPath}.tmp`, configPath);
+    await rename(temporary, configPath);
     await chmod(configPath, 0o600);
 };
 const readStdin = async () => await new Promise((resolve, reject) => {
@@ -396,6 +405,28 @@ const resolveAuth = async (flags) => {
             source: 'flag',
         };
     }
+    const config = await readAuthConfig(getConfigPath(flags));
+    const storedName = getFlag(flags, 'profile') ?? config.defaultProfile ?? profile;
+    const storedProfile = config.profiles?.[storedName];
+    const storedAuth = storedProfile?.apiKey
+        ? {
+            apiKey: storedProfile.apiKey,
+            baseUrl: baseUrlFromFlags ??
+                env.ASSETHUB_API_BASE_URL ??
+                storedProfile.baseUrl,
+            profile: storedName,
+            source: 'profile',
+        }
+        : undefined;
+    // An explicit profile or workspace selection must control the next command,
+    // even if the shell still contains the previous organization's key.
+    if (storedAuth && (getFlag(flags, 'profile') || storedProfile?.workspaceId)) {
+        if (storedProfile?.workspaceId &&
+            new URL(storedAuth.baseUrl).origin !==
+                new URL(storedProfile.baseUrl).origin)
+            throw new Error('Selected workspace belongs to another API origin; select a workspace for this origin or supply an explicit API key');
+        return storedAuth;
+    }
     if (env.ASSETHUB_API_KEY != null && env.ASSETHUB_API_KEY.trim() !== '') {
         return {
             apiKey: env.ASSETHUB_API_KEY,
@@ -404,23 +435,9 @@ const resolveAuth = async (flags) => {
             source: 'env',
         };
     }
-    const config = await readAuthConfig(getConfigPath(flags));
-    const fallbackProfileName = profile === defaultProfileName ? config.defaultProfile : undefined;
-    const storedProfile = config.profiles?.[profile] ??
-        (fallbackProfileName != null
-            ? config.profiles?.[fallbackProfileName]
-            : undefined);
-    if (storedProfile != null) {
-        return {
-            apiKey: storedProfile.apiKey,
-            baseUrl: baseUrlFromFlags ?? env.ASSETHUB_API_BASE_URL ?? storedProfile.baseUrl,
-            profile: config.profiles?.[profile] != null
-                ? profile
-                : (fallbackProfileName ?? profile),
-            source: 'profile',
-        };
-    }
-    throw new Error('Missing API key. Run "assethub auth login --api-key-stdin", set ASSETHUB_API_KEY, or pass --api-key.');
+    if (storedAuth)
+        return storedAuth;
+    throw new Error('Missing workspace API key. Use "workspace use <id>" after user login, "auth login --api-key-stdin", or ASSETHUB_API_KEY.');
 };
 const createContext = async (flags, args) => {
     const auth = await resolveAuth(flags);
@@ -1210,10 +1227,175 @@ const commandModels = async (subcommand, positionals, ctx) => {
     }
     throw new Error('Unknown models command. Use "models list" or "models get".');
 };
+const workspaceAuth = async (flags) => {
+    const configPath = getConfigPath(flags);
+    const config = await readAuthConfig(configPath);
+    const profile = getFlag(flags, 'profile') ?? config.defaultProfile ?? defaultProfileName;
+    const stored = config.profiles?.[profile];
+    const accessToken = env.ASSETHUB_ACCESS_TOKEN?.trim() || stored?.accessToken;
+    if (!accessToken)
+        throw new Error('Workspace management requires user authentication: auth login --access-token-stdin or ASSETHUB_ACCESS_TOKEN');
+    const baseUrl = getFlag(flags, 'base-url') ??
+        env.ASSETHUB_API_BASE_URL ??
+        stored?.baseUrl ??
+        defaultBaseUrl;
+    if (!env.ASSETHUB_ACCESS_TOKEN?.trim() &&
+        stored &&
+        new URL(baseUrl).origin !== new URL(stored.baseUrl).origin)
+        throw new Error('Saved user authentication belongs to another API origin; log in for this origin');
+    const workspaceMfaToken = env.ASSETHUB_WORKSPACE_MFA?.trim() ||
+        (stored && new URL(baseUrl).origin === new URL(stored.baseUrl).origin
+            ? stored.workspaceMfaToken
+            : undefined);
+    return {
+        configPath,
+        config,
+        profile,
+        accessToken,
+        workspaceMfaToken,
+        baseUrl,
+        client: createWorkspaceClient({ accessToken, workspaceMfaToken, baseUrl }),
+    };
+};
+const commandWorkspace = async (subcommand, positionals, flags) => {
+    const auth = await workspaceAuth(flags);
+    if (subcommand === 'list') {
+        print(await auth.client.list());
+        return;
+    }
+    if (subcommand === 'get') {
+        const account = await auth.client.list();
+        const selected = auth.config.profiles?.[auth.profile]?.workspaceId;
+        const workspace = account.workspaces.find(item => selected ? item.id === selected : item.active);
+        if (!workspace)
+            throw new Error('No workspace selected; use workspace use <id>');
+        print(workspace);
+        return;
+    }
+    if (subcommand === 'create') {
+        const name = requireFlag(flags, 'name');
+        const operationId = getFlag(flags, 'operation-id') ?? randomUUID();
+        activeExecution.operationId = operationId;
+        // The caller can replay the printed identity after an uncertain HTTP response.
+        stderr.write(`[workspace] operation ${operationId}\n`);
+        print({
+            ...(await auth.client.create({ name }, { idempotencyKey: operationId })),
+            operationId,
+        });
+        return;
+    }
+    if (subcommand !== 'use')
+        throw new Error('Use workspace list|get|create|use');
+    const workspaceId = requirePositional(positionals, 2, 'workspace-id');
+    const selected = await auth.client.select(workspaceId);
+    if (selected.mfa.status === 'setup_required' ||
+        selected.mfa.status === 'verify_required')
+        throw new Error('Workspace requires MFA. Complete verification in AssetHub, then provide the signed ah_workspace_mfa cookie through ASSETHUB_WORKSPACE_MFA together with your user access token');
+    const account = await auth.client.list();
+    const workspace = account.workspaces.find(item => item.id === workspaceId);
+    if (!workspace)
+        throw new Error('Workspace is not available to this authenticated user');
+    const profiles = auth.config.profiles ?? {};
+    const cached = Object.entries(profiles).find(([, entry]) => entry.userId === account.userId &&
+        entry.workspaceId === workspaceId &&
+        new URL(entry.baseUrl).origin === new URL(auth.baseUrl).origin &&
+        entry.apiKey);
+    let apiKey;
+    const suppliedKey = getFlag(flags, 'api-key') ?? env.ASSETHUB_API_KEY?.trim();
+    for (const candidate of new Set([cached?.[1].apiKey, suppliedKey])) {
+        if (!candidate)
+            continue;
+        try {
+            const capabilities = await createAssetHubClient({
+                apiKey: candidate,
+                baseUrl: auth.baseUrl,
+            }).v2.getCapabilities();
+            if (capabilities.ownerId === workspaceId) {
+                apiKey = candidate;
+                break;
+            }
+            if (candidate === cached?.[1].apiKey)
+                throw new Error('Saved API key does not belong to the selected workspace');
+        }
+        catch (error) {
+            if (!(error instanceof AssetHubApiError) || error.status !== 401)
+                throw error;
+        }
+    }
+    if (!apiKey) {
+        const issued = await auth.client.createApiKey(workspaceId, {
+            name: 'AssetHub CLI',
+        });
+        if (issued.workspaceId !== workspaceId || !issued.key)
+            throw new Error('Workspace API returned an invalid key scope');
+        apiKey = issued.key;
+    }
+    const profile = cached?.[0] ?? `workspace-${account.userId}-${workspaceId}`;
+    profiles[profile] = {
+        apiKey,
+        accessToken: auth.accessToken,
+        workspaceMfaToken: auth.workspaceMfaToken,
+        userId: account.userId,
+        workspaceId,
+        baseUrl: auth.baseUrl,
+        updatedAt: new Date().toISOString(),
+    };
+    await writeAuthConfig(auth.configPath, {
+        ...auth.config,
+        defaultProfile: profile,
+        profiles,
+    });
+    print({
+        workspaceId,
+        workspace,
+        profile,
+        selected: true,
+        baseUrl: auth.baseUrl,
+    });
+};
 const commandAuth = async (subcommand, flags) => {
     const profile = getProfileName(flags);
     const configPath = getConfigPath(flags);
     if (subcommand === 'login') {
+        if (hasFlag(flags, 'access-token-stdin')) {
+            if (hasFlag(flags, 'api-key-stdin') || getFlag(flags, 'api-key'))
+                throw new Error('Choose user access-token login or API-key login');
+            const accessToken = (await readStdin()).trim();
+            const baseUrl = getFlag(flags, 'base-url') ??
+                env.ASSETHUB_API_BASE_URL ??
+                defaultBaseUrl;
+            const workspaceMfaToken = env.ASSETHUB_WORKSPACE_MFA?.trim() || undefined;
+            const account = await createWorkspaceClient({
+                accessToken,
+                workspaceMfaToken,
+                baseUrl,
+            }).list();
+            const config = await readAuthConfig(configPath);
+            await writeAuthConfig(configPath, {
+                ...config,
+                defaultProfile: profile,
+                profiles: {
+                    ...config.profiles,
+                    [profile]: {
+                        accessToken,
+                        workspaceMfaToken,
+                        baseUrl,
+                        userId: account.userId,
+                        updatedAt: new Date().toISOString(),
+                    },
+                },
+            });
+            print({
+                success: true,
+                authentication: 'user',
+                userId: account.userId,
+                profile,
+                baseUrl,
+                configPath,
+                verified: true,
+            });
+            return;
+        }
         const apiKey = hasFlag(flags, 'api-key-stdin')
             ? (await readStdin()).trim()
             : (getFlag(flags, 'api-key') ?? env.ASSETHUB_API_KEY ?? '').trim();
@@ -1247,6 +1429,22 @@ const commandAuth = async (subcommand, flags) => {
         return;
     }
     if (subcommand === 'status') {
+        const config = await readAuthConfig(configPath);
+        const current = config.profiles?.[getFlag(flags, 'profile') ?? config.defaultProfile ?? profile];
+        if (env.ASSETHUB_ACCESS_TOKEN?.trim() ||
+            (current?.accessToken && !current.apiKey)) {
+            const auth = await workspaceAuth(flags);
+            const account = await auth.client.list();
+            print({
+                authenticated: true,
+                authentication: 'user',
+                userId: account.userId,
+                workspaceCount: account.workspaces.length,
+                profile: auth.profile,
+                baseUrl: auth.baseUrl,
+            });
+            return;
+        }
         const auth = await resolveAuth(flags);
         const client = createAssetHubClient({
             apiKey: auth.apiKey,
@@ -1265,13 +1463,21 @@ const commandAuth = async (subcommand, flags) => {
     if (subcommand === 'logout') {
         const config = await readAuthConfig(configPath);
         const profiles = config.profiles ?? {};
-        const existed = profiles[profile] != null;
-        delete profiles[profile];
+        const selectedProfile = getFlag(flags, 'profile') ?? config.defaultProfile ?? profile;
+        const existed = profiles[selectedProfile] != null;
+        delete profiles[selectedProfile];
         await writeAuthConfig(configPath, {
-            defaultProfile: config.defaultProfile === profile ? undefined : config.defaultProfile,
+            defaultProfile: config.defaultProfile === selectedProfile
+                ? undefined
+                : config.defaultProfile,
             profiles,
         });
-        print({ success: true, profile, removed: existed, configPath });
+        print({
+            success: true,
+            profile: selectedProfile,
+            removed: existed,
+            configPath,
+        });
         return;
     }
     throw new Error('Unknown auth command. Use "auth login", "auth status", or "auth logout".');
@@ -1466,6 +1672,65 @@ const commandImage = async (subcommand, ctx) => {
         input.sources = await Promise.all(input.sources.map(source => recordedSource(ctx, source)));
     await printRecorded(ctx, await executeRecorded(session, 'image.generate', input, { ...executionOptions(ctx.flags), graphSource: graphInput?.graphSource }));
 };
+const commandComposer = async (subcommand, ctx) => {
+    if (subcommand === 'models') {
+        print(await ctx.client.v2.getMeshComposers());
+        return;
+    }
+    if (subcommand !== 'run')
+        throw new Error('Use composer models|run');
+    const fromRun = getFlag(ctx.flags, 'from-run');
+    const json = getFlag(ctx.flags, 'input-json');
+    const parts = getFlagValues(ctx.flags, 'part');
+    if ((fromRun && (json || parts.length || getFlag(ctx.flags, 'reference'))) ||
+        (json && (parts.length || getFlag(ctx.flags, 'reference'))))
+        throw new Error('Choose --from-run, --input-json, or --part with --reference');
+    const previous = fromRun ? await ctx.client.v2.getRun(fromRun) : undefined;
+    if (previous && previous.operation !== 'mesh.compose')
+        throw new Error('--from-run must identify a mesh.compose execution');
+    const input = previous
+        ? { ...(previous.requestedInput ?? previous.input) }
+        : json
+            ? await readJsonArgument(json, '--input-json')
+            : {
+                parts: parts.map(assetId => ({
+                    assetId: assertFlagHasValue(assetId, '--part <asset-id>'),
+                })),
+                fullBodyImageAssetId: requireFlag(ctx.flags, 'reference'),
+            };
+    delete input.executionContext;
+    if (!Array.isArray(input.parts) ||
+        !input.parts.length ||
+        !input.fullBodyImageAssetId)
+        throw new Error('Composer requires parts[] and fullBodyImageAssetId');
+    const mode = getFlag(ctx.flags, 'mode');
+    if (mode != null && mode !== 'quick' && mode !== 'quality')
+        throw new Error('--mode must be quick or quality');
+    if (mode)
+        input.mode = mode;
+    const model = getFlag(ctx.flags, 'model');
+    if (model)
+        input.agentVersion = model;
+    const name = getFlag(ctx.flags, 'name');
+    if (name)
+        input.projectName = name;
+    const transforms = getFlag(ctx.flags, 'transforms-json');
+    if (transforms)
+        input.transforms = await readJsonArgument(transforms, '--transforms-json');
+    const canvasId = selectedCanvasId(ctx.flags) ?? previous?.canvas.id;
+    if (previous && canvasId !== previous.canvas.id)
+        throw new Error('Recomposition must use the original canvas to retain lineage');
+    const session = await openExecutionSession({
+        ...stateOptions(ctx),
+        canvasId,
+        operation: 'mesh.compose',
+    });
+    const queued = await executeRecorded(session, 'mesh.compose', input, {
+        ...executionOptions(ctx.flags),
+        ...(previous ? { parentRunId: previous.runId } : {}),
+    });
+    await printRecorded(ctx, queued);
+};
 const commandMesh = async (subcommand, ctx) => {
     if (subcommand === 'generate') {
         const inputJson = getFlag(ctx.flags, 'input-json');
@@ -2977,6 +3242,10 @@ const run = async () => {
         return;
     }
     if (command === 'workspace') {
+        if (['list', 'get', 'create', 'use'].includes(subcommand ?? '')) {
+            await commandWorkspace(subcommand, parsed.positionals, parsed.flags);
+            return;
+        }
         if (!hasFlag(parsed.flags, 'internal')) {
             throw new Error('Workspace operations currently require --internal and the AssetHub monorepo with its existing Infisical environment.');
         }
@@ -3015,6 +3284,9 @@ const run = async () => {
     }
     const ctx = await createContext(parsed.flags, argv.slice(2));
     switch (command) {
+        case 'composer':
+            await commandComposer(subcommand, ctx);
+            return;
         case 'language':
             await commandLanguage(subcommand, ctx);
             return;
@@ -3109,7 +3381,8 @@ if (isMainModule) {
         }
         print({
             error: {
-                code: error instanceof AssetHubApiError
+                code: error instanceof AssetHubApiError ||
+                    error instanceof WorkspaceClientError
                     ? error.code
                     : error instanceof CliExecutionError && error.exitCode === 3
                         ? 'WAIT_TIMEOUT'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assethub/cli",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Command line interface for AssetHub.",
   "type": "module",
   "bin": {
@@ -30,7 +30,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@assethub/api-client": "^0.1.3"
+    "@assethub/api-client": "^0.1.4"
   },
   "repository": {
     "type": "git",