@assethub/cli 0.1.9 → 0.1.10

package/README.md

@@ -2,6 +2,37 @@
 
 Command line interface for AssetHub.
 
+## Connection diagnostics and MCP
+
+```sh
+assethub --version
+assethub doctor --mcp --profile my-workspace
+assethub mcp config --client cursor
+assethub mcp config --client codex
+```
+
+`doctor` checks API access and the authenticated workspace. `--mcp` also checks
+MCP initialization and tool discovery, without invoking any tool or generating
+assets. It returns JSON and exit 0 when checks pass, or exit 2 with a diagnostic
+and next step when a check fails. The default total timeout is 15 seconds; change
+it with `--timeout-ms`. Hosted MCP currently requires Internal access for the key
+creator, independently of regular API access.
+
+`mcp config` outputs a Cursor JSON object or Codex TOML section to merge into
+existing user settings. It does not write files or read your saved API key.
+The generated settings read `ASSETHUB_API_KEY` from the AI client's environment.
+Use the same workspace key as your CLI profile. For a different API origin, pass
+`--base-url https://your-host/prefix` (HTTP is accepted only for localhost).
+
+Explicit `--profile` uses that profile's key and origin, ahead of environment
+variables, including user tokens and workspace MFA proofs. A missing profile fails.
+Without an explicit profile, a workspace selected with `workspace use` takes
+precedence over environment API credentials; otherwise the environment key
+precedes the saved default. `--api-key` and `--base-url` remain
+explicit overrides. `auth logout` removes the selected saved profile (or the
+saved default); environment credentials remain under your shell’s control.
+Diagnostics omit API keys and raw server error bodies.
+
 ## Agent generation with canvas history
 
 This release uses the Internal `api_canvas_execution` gate. Run `assethub capabilities`
@@ -38,7 +69,7 @@ state directory private. `--operation-id <uuid>` supplies an operation identity;
 retries and `runs resume <operation-id>` reuse its identical body and key. A new
 candidate needs a new operation ID. `runs watch <run-id>` only reads status.
 
-stdout contains final JSON; stderr contains progress. Exit codes are 0 for accepted/
+stdout contains final JSON; stderr contains progress. Exceptions: `--version` prints the version, and `mcp config` prints the requested configuration. Exit codes are 0 for accepted/
 completed, 1 for terminal failure/partial, 2 for input/auth/capability/budget errors,
 3 for timeout/history pending/needs review, and 130 for Ctrl-C. Timeout and Ctrl-C
 leave server execution running and return known identities.
@@ -393,7 +424,10 @@ assethub composer run --from-run <run-id> --transforms-json @transforms.json --w
 Selection reuses a valid API key for that workspace or creates one when permitted.
 Membership, API key creation permissions, and workspace MFA still apply. Complete
 required MFA in AssetHub and provide its signed proof through
-`ASSETHUB_WORKSPACE_MFA`. Generation uses normal workspace credits.
+`ASSETHUB_WORKSPACE_MFA` during user login to save it with the profile. Renew an
+expired proof by logging in again. Explicit `--profile` uses its saved proof and
+ignores environment credentials; an explicit `--api-key` can supply the workspace
+key. Generation uses normal workspace credits.
 
 Existing Production outputs can be inspected and downloaded without regenerating:
 

package/dist/index.d.ts

@@ -2,7 +2,7 @@
 import { type AnimationRetargetRequest, type Intervention, type RigRequest } from '@assethub/api-client';
 import { buildRunUploadPlan } from './runsUpload/buildRunUpload.js';
 type Flags = Record<string, string | boolean | string[]>;
-export declare const usage = "AssetHub CLI\n\nInternal preview: canvas/context/layout and moodboards require workspace feature access.\n\nUsage:\n  assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]\n  assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]\n  assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]\n  assethub auth status [--profile <name>]\n  assethub auth logout [--profile <name>]\n  assethub workspace list|get\n  assethub workspace create --name <name> [--operation-id <uuid>]\n  assethub workspace use <workspace-id>\n  assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>\n  assethub workspace self-check --internal\n  assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]\n  assethub workspace context get --internal --org <uuid> --actor <uuid> --canvas <id> [--out <json>] [--order <uuid>]\n  assethub project ingest <source-dir> --out-dir <directory> [--exclude-dir <relative-path>...]\n  assethub language text|vision --input-json @<json> --operation-id <uuid> [--out <json>]\n  assethub canvas import --canvas <id> --file <image> [--name <name>]\n  assethub canvas context get --canvas <id> [--out <json>]\n  assethub canvas context put --canvas <id> --file <json> [--if-version <n>]\n  assethub canvas layout --canvas <id> --input-json @<json>\n  assethub canvas compare --canvas <id> --source-id <asset-id> --asset-id <asset-id> --out <html>\n  assethub moodboard create --input-json @<json> [--operation-id <uuid>]\n  assethub moodboard list|get|update|archive [<board-id>] [--input-json @<json>]\n  assethub moodboard analyze <board-id> [--revision <uuid>] [--wait]\n  assethub image generate --canvas <id> --context <id> [--context-version <n>] [--context-source <key>] [--moodboard-revision <uuid>] --prompt <text> --wait\n  assethub models list [--domain <domain>] [--ids-only] [--limit <n>]\n  assethub models get <model-id>\n  assethub files import <url> --media-type image|mesh\n  assethub files upload <file> --media-type image|mesh\n  assethub source create (--file <path> | --source-url <url> | --source-id <id> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) --media-type image|mesh [--file-name <name>] [--content-type <type>]\n  assethub capabilities\n  assethub composer models\n  assethub composer run --part <mesh-asset-id> [--part <mesh-asset-id>...] --reference <image-asset-id> [--model <id>] [--mode quick|quality] [--transforms-json <json|@file>] [--canvas <id>] [--wait]\n  assethub composer run --input-json <json|@file> [--canvas <id>] [--operation-id <uuid>] [--wait] [--download --out-dir <dir>]\n  assethub composer run --from-run <run-id> [--transforms-json <json|@file>] [--mode quick|quality] [--wait]\n  assethub canvas create [--name <name>] [--operation-id <uuid>]\n  assethub canvas list [--cursor <cursor>] [--limit <n>]\n  assethub canvas get|use|open [<id>]\n  assethub runs list [--canvas <id>] [--cursor <cursor>] [--limit <n>]\n  assethub runs get|watch <run-id> [--timeout-ms <n>]\n  assethub runs resume <operation-id> [--wait]\n  assethub graph show|export [--canvas <id>] [--artifact <node-id>] [--out <path>] [--allow-truncated]\n  assethub graph lineage --artifact <node-id> [--canvas <id>] [--direction ancestors|descendants|both] [--depth <n>]\n  assethub evaluate list\n  assethub evaluations submit --artifact <asset-id> --report <json|file|@file|@-> [--agent <name>] [--canvas <id>] [--reference <asset-id>...] [--run <run-id>] [--operation-id <uuid>] [--require-pass]\n  assethub evaluations list [--canvas <id>] [--artifact <asset-id>]\n  assethub evaluations get <evaluation-id>\n  assethub image generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub mesh generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub image generate --prompt <text> [--file <path> | --source-url <url> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard] [--file-name <name>] [--content-type <type>] [--model-id <id>] [--batch-size <n>] [--wait] [--download --out-dir <dir>] [--canvas <id>] [--operation-id <uuid>] [--api-version v2]\n  assethub image generate --prompt <text> --source-resource-id <id> --api-version v2 [--model-id <id>] [--batch-size <n>] [--wait]\n  assethub mesh generate (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--file-name <name>] [--content-type <type>] [--model-id <id>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub mesh retopo (--source-resource-id <id> | --source-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) --model-id <id> [--file-name <name>] [--content-type <type>] [--wait] [--download --out-dir <dir>]\n  assethub rig check (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub rig create (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--model v1.0-20240301|v2.5-20260210] [--rig-type biped|quadruped|hexapod|octopod|avian|serpentine|aquatic] [--spec tripo|mixamo] [--out-format glb|fbx] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub animate presets [--model v1.0-20240301|v2.5-20260210] [--rig-type <type>]\n  assethub animate retarget --resource-id <id> --animation <preset-id> [--animation <preset-id>... up to 5 total] [--out-format glb|fbx] [--bake-animation true|false] [--export-with-geometry true|false] [--animate-in-place true|false] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub jobs get <job-id> [--download --out-dir <dir>]\n  assethub jobs watch <job-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production analyze (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub production agents\n  assethub production automation --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--wait]\n  assethub production status <order-id> [--wait] [--download --out-dir <dir>]\n  assethub production execute --order-id <id> --mission-id <id> --task-id <id> [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--wait] [--download --out-dir <dir>]\n  assethub production run --order-id <id> --mission-id <id> [--run-mode full_auto|approval] [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--allowed-model-id <id>...] [--max-iterations <n>] [--max-cost-credits <n>] [--wait] [--download --out-dir <dir>]\n  assethub production watch <order-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production intervene <order-id> (--exclude <target-id> | --include <target-id> | --add-part <name> | --rename <target-id>=<name> | --reject <target-id>[=<reason>] | --regenerate <target-id>=<mode> | --set-param <key>=<value> | --ops-json <json|@file|@->)... [--idempotency-key <key>]\n  assethub production interventions <order-id>\n  assethub runs upload <path> [--graph-id <id>] [--stream-id <id>] [--rev <n>] [--description <text>] [--tag <tag>...] [--skip-register] [--dry-run]\n  assethub parts split (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard | --order-id <id>) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub parts compare (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--preprocess-prompt <text>] [--preprocess-model-id <id>] [--fail-on-preprocess-error] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub autopilot [<image>] --demo [--yolo] [--json] [--max-regen <n>] [--stall-rounds <n>] [--tie-epsilon <x>] [--multiview 2-view|4-view|6-view] [--ab-mode serial|cross] [--credit-budget <n>]\n\nGlobal options:\n  --api-key <key>       Overrides saved auth and ASSETHUB_API_KEY.\n  --base-url <url>      Defaults to ASSETHUB_API_BASE_URL, saved auth, or https://app.assethub.io.\n  --profile <name>      Saved auth profile name. Defaults to default.\n  --config <path>       Auth config path. Defaults to ~/.assethub/config.json.\n  --help                Show help.\n\nExamples:\n  ASSETHUB_API_KEY=ah_live_xxx assethub models list\n  assethub auth login --api-key-stdin\n  assethub models list --ids-only\n  assethub files upload ./input.png --media-type image\n  assethub source create --file ./input.png --media-type image\n  pbpaste | assethub source create --stdin-data-uri --media-type image\n  assethub source create --clipboard --media-type image --file-name clipboard.png\n  printf '{\"image_url\":{\"url\":\"data:image/png;base64,...\"}}' | assethub parts split --stdin-json --part-extractor \"V1.5\" --wait\n  base64 -i ./input.png | assethub parts split --stdin-base64 --file-name input.png --content-type image/png --part-extractor \"V1.5\" --wait\n  cat ./input.png | assethub parts split --stdin --file-name input.png --part-extractor \"V1.5\" --wait\n  assethub image generate --prompt \"stylized prop concept\" --wait\n  assethub mesh generate --file ./input.png --wait\n  assethub animate presets --rig-type biped\n  assethub rig create --source-resource-id mesh_x --rig-type biped --wait\n  assethub animate retarget --resource-id rig_x --animation preset:idle --wait\n  assethub production analyze --file ./input.png --part-extractor \"V1.5\" --wait\n  assethub production run --order-id ord_x --mission-id ms_x --run-mode full_auto --max-cost-credits 200 --wait\n  assethub production watch ord_x\n  assethub production intervene ord_x --exclude 7 --rename 3=\"left wing\" --idempotency-key review-2026-07-29\n  assethub production interventions ord_x\n  assethub runs upload ./out/pluffy-run-2026-07-30 --dry-run\n  assethub runs upload ./out/pluffy-run-2026-07-30 --tag pluffy --description \"V3 humanoid, 18 parts\"\n  assethub parts split --file ./input.png --part-extractor \"V1.5\" --wait --all-ready\n  assethub parts compare --file ./input.png --preprocess-prompt \"clean white background, centered product photo\" --part-extractor \"V1.5\" --wait --all-ready\n";
+export declare const usage = "AssetHub CLI\n\nInternal preview: canvas/context/layout and moodboards require workspace feature access.\n\nUsage:\n  assethub --version\n  assethub doctor [--mcp] [--profile <name>] [--timeout-ms <n>]\n  assethub mcp config --client cursor|codex [--base-url <url>]\n  assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]\n  assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]\n  assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]\n  assethub auth status [--profile <name>]\n  assethub auth logout [--profile <name>]\n  assethub workspace list|get\n  assethub workspace create --name <name> [--operation-id <uuid>]\n  assethub workspace use <workspace-id>\n  assethub workspace prepare|sync|analyze|verify --internal --manifest <json> --state <json>\n  assethub workspace self-check --internal\n  assethub workspace context put --internal --org <uuid> --actor <uuid> --canvas <id> --file <json> [--if-version <n>] [--order <uuid>]\n  assethub workspace context get --internal --org <uuid> --actor <uuid> --canvas <id> [--out <json>] [--order <uuid>]\n  assethub project ingest <source-dir> --out-dir <directory> [--exclude-dir <relative-path>...]\n  assethub language text|vision --input-json @<json> --operation-id <uuid> [--out <json>]\n  assethub canvas import --canvas <id> --file <image> [--name <name>]\n  assethub canvas context get --canvas <id> [--out <json>]\n  assethub canvas context put --canvas <id> --file <json> [--if-version <n>]\n  assethub canvas layout --canvas <id> --input-json @<json>\n  assethub canvas compare --canvas <id> --source-id <asset-id> --asset-id <asset-id> --out <html>\n  assethub moodboard create --input-json @<json> [--operation-id <uuid>]\n  assethub moodboard list|get|update|archive [<board-id>] [--input-json @<json>]\n  assethub moodboard analyze <board-id> [--revision <uuid>] [--wait]\n  assethub image generate --canvas <id> --context <id> [--context-version <n>] [--context-source <key>] [--moodboard-revision <uuid>] --prompt <text> --wait\n  assethub models list [--domain <domain>] [--ids-only] [--limit <n>]\n  assethub models get <model-id>\n  assethub files import <url> --media-type image|mesh\n  assethub files upload <file> --media-type image|mesh\n  assethub source create (--file <path> | --source-url <url> | --source-id <id> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) --media-type image|mesh [--file-name <name>] [--content-type <type>]\n  assethub capabilities\n  assethub composer models\n  assethub composer run --part <mesh-asset-id> [--part <mesh-asset-id>...] --reference <image-asset-id> [--model <id>] [--mode quick|quality] [--transforms-json <json|@file>] [--canvas <id>] [--wait]\n  assethub composer run --input-json <json|@file> [--canvas <id>] [--operation-id <uuid>] [--wait] [--download --out-dir <dir>]\n  assethub composer run --from-run <run-id> [--transforms-json <json|@file>] [--mode quick|quality] [--wait]\n  assethub canvas create [--name <name>] [--operation-id <uuid>]\n  assethub canvas list [--cursor <cursor>] [--limit <n>]\n  assethub canvas get|use|open [<id>]\n  assethub runs list [--canvas <id>] [--cursor <cursor>] [--limit <n>]\n  assethub runs get|watch <run-id> [--timeout-ms <n>]\n  assethub runs resume <operation-id> [--wait]\n  assethub graph show|export [--canvas <id>] [--artifact <node-id>] [--out <path>] [--allow-truncated]\n  assethub graph lineage --artifact <node-id> [--canvas <id>] [--direction ancestors|descendants|both] [--depth <n>]\n  assethub evaluate list\n  assethub evaluations submit --artifact <asset-id> --report <json|file|@file|@-> [--agent <name>] [--canvas <id>] [--reference <asset-id>...] [--run <run-id>] [--operation-id <uuid>] [--require-pass]\n  assethub evaluations list [--canvas <id>] [--artifact <asset-id>]\n  assethub evaluations get <evaluation-id>\n  assethub image generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub mesh generate --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--agent <name>] [--derived-from-run <run-id>] [--from-node <graphId/nodeId> --graph-revision <rev>] [--wait]\n  assethub image generate --prompt <text> [--file <path> | --source-url <url> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard] [--file-name <name>] [--content-type <type>] [--model-id <id>] [--batch-size <n>] [--wait] [--download --out-dir <dir>] [--canvas <id>] [--operation-id <uuid>] [--api-version v2]\n  assethub image generate --prompt <text> --source-resource-id <id> --api-version v2 [--model-id <id>] [--batch-size <n>] [--wait]\n  assethub mesh generate (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--file-name <name>] [--content-type <type>] [--model-id <id>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub mesh retopo (--source-resource-id <id> | --source-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) --model-id <id> [--file-name <name>] [--content-type <type>] [--wait] [--download --out-dir <dir>]\n  assethub rig check (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub rig create (--file <path> | --source-url <url> | --source-resource-id <id> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri>) [--model v1.0-20240301|v2.5-20260210] [--rig-type biped|quadruped|hexapod|octopod|avian|serpentine|aquatic] [--spec tripo|mixamo] [--out-format glb|fbx] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub animate presets [--model v1.0-20240301|v2.5-20260210] [--rig-type <type>]\n  assethub animate retarget --resource-id <id> --animation <preset-id> [--animation <preset-id>... up to 5 total] [--out-format glb|fbx] [--bake-animation true|false] [--export-with-geometry true|false] [--animate-in-place true|false] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub jobs get <job-id> [--download --out-dir <dir>]\n  assethub jobs watch <job-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production analyze (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--name <name>] [--wait] [--download --out-dir <dir>]\n  assethub production agents\n  assethub production automation --input-json <json|@file|@-> [--canvas <id>] [--operation-id <uuid>] [--wait]\n  assethub production status <order-id> [--wait] [--download --out-dir <dir>]\n  assethub production execute --order-id <id> --mission-id <id> --task-id <id> [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--wait] [--download --out-dir <dir>]\n  assethub production run --order-id <id> --mission-id <id> [--run-mode full_auto|approval] [--task-id <id>...] [--part-extractor <name>] [--part-extraction-mode fast|high_quality] [--allowed-model-id <id>...] [--max-iterations <n>] [--max-cost-credits <n>] [--wait] [--download --out-dir <dir>]\n  assethub production watch <order-id> [--interval-ms <ms>] [--timeout-ms <ms>] [--download --out-dir <dir>]\n  assethub production intervene <order-id> (--exclude <target-id> | --include <target-id> | --add-part <name> | --rename <target-id>=<name> | --reject <target-id>[=<reason>] | --regenerate <target-id>=<mode> | --set-param <key>=<value> | --ops-json <json|@file|@->)... [--idempotency-key <key>]\n  assethub production interventions <order-id>\n  assethub runs upload <path> [--graph-id <id>] [--stream-id <id>] [--rev <n>] [--description <text>] [--tag <tag>...] [--skip-register] [--dry-run]\n  assethub parts split (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard | --order-id <id>) [--file-name <name>] [--content-type <type>] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub parts compare (--file <path> | --source-url <url> | --source-id <id> | --image-url <url> | --file-ref-json <json> | --stdin | --stdin-base64 | --stdin-data-uri | --stdin-json | --source-json <json|@file|@-> | --data-uri <uri> | --clipboard) [--file-name <name>] [--content-type <type>] [--preprocess-prompt <text>] [--preprocess-model-id <id>] [--fail-on-preprocess-error] [--part-extractor <name>] [--wait] [--task-id <id>...] [--mission-id <id>] [--all-ready] [--download --out-dir <dir>]\n  assethub autopilot [<image>] --demo [--yolo] [--json] [--max-regen <n>] [--stall-rounds <n>] [--tie-epsilon <x>] [--multiview 2-view|4-view|6-view] [--ab-mode serial|cross] [--credit-budget <n>]\n\nGlobal options:\n  --api-key <key>       Overrides saved auth and ASSETHUB_API_KEY.\n  --base-url <url>      Override the selected API origin. Default: https://app.assethub.io.\n  --profile <name>      Select this saved profile ahead of environment credentials and origin.\n  --config <path>       Auth config path. Defaults to ~/.assethub/config.json.\n  --version             Show installed package version.\n  --help                Show help.\n\nExamples:\n  ASSETHUB_API_KEY=ah_live_xxx assethub models list\n  assethub auth login --api-key-stdin\n  assethub models list --ids-only\n  assethub files upload ./input.png --media-type image\n  assethub source create --file ./input.png --media-type image\n  pbpaste | assethub source create --stdin-data-uri --media-type image\n  assethub source create --clipboard --media-type image --file-name clipboard.png\n  printf '{\"image_url\":{\"url\":\"data:image/png;base64,...\"}}' | assethub parts split --stdin-json --part-extractor \"V1.5\" --wait\n  base64 -i ./input.png | assethub parts split --stdin-base64 --file-name input.png --content-type image/png --part-extractor \"V1.5\" --wait\n  cat ./input.png | assethub parts split --stdin --file-name input.png --part-extractor \"V1.5\" --wait\n  assethub image generate --prompt \"stylized prop concept\" --wait\n  assethub mesh generate --file ./input.png --wait\n  assethub animate presets --rig-type biped\n  assethub rig create --source-resource-id mesh_x --rig-type biped --wait\n  assethub animate retarget --resource-id rig_x --animation preset:idle --wait\n  assethub production analyze --file ./input.png --part-extractor \"V1.5\" --wait\n  assethub production run --order-id ord_x --mission-id ms_x --run-mode full_auto --max-cost-credits 200 --wait\n  assethub production watch ord_x\n  assethub production intervene ord_x --exclude 7 --rename 3=\"left wing\" --idempotency-key review-2026-07-29\n  assethub production interventions ord_x\n  assethub runs upload ./out/pluffy-run-2026-07-30 --dry-run\n  assethub runs upload ./out/pluffy-run-2026-07-30 --tag pluffy --description \"V3 humanoid, 18 parts\"\n  assethub parts split --file ./input.png --part-extractor \"V1.5\" --wait --all-ready\n  assethub parts compare --file ./input.png --preprocess-prompt \"clean white background, centered product photo\" --part-extractor \"V1.5\" --wait --all-ready\n";
 /**
  * The `animate retarget` request, built from flags alone.
  *

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAqBA,OAAO,EAIL,KAAK,wBAAwB,EAO7B,KAAK,YAAY,EAEjB,KAAK,UAAU,EAYhB,MAAM,sBAAsB,CAAA;AAa7B,OAAO,EAAC,kBAAkB,EAAc,MAAM,gCAAgC,CAAA;AAI9E,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;AA8HxD,eAAO,MAAM,KAAK,+/WA4GjB,CAAA;AAsnED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GACxC,OAAO,KAAK,KACX,wBA0BF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,OAAO,KAAK,KACX,IAAI,CAAC,UAAU,EAAE,QAAQ,CAM1B,CAAA;AA6fF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,GAClC,MAAM,SAAS,MAAM,EAAE,KACtB,YAAY,EAuGd,CAAA;AA8oCD,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,GAAG,SAAS,EAC9B,aAAa,MAAM,EAAE,EACrB,OAAO,KAAK,KACX,cAoBF,CAAA;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,EAC5C,SAAS,GACT,UAAU,GACV,KAAK,GACL,WAAW,GACX,QAAQ,GACR,OAAO,GACP,OAAO,GACP,UAAU,CACb,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,WAAW,MAAM,EACjB,MAAM,iBAAiB;;;;;;;;;;;;;;CAUvB,CAAA;AAEF,eAAO,MAAM,sBAAsB,GACjC,SAAS,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAC7C,MAAM,iBAAiB,EACvB,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAYf,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsBA,OAAO,EAIL,KAAK,wBAAwB,EAO7B,KAAK,YAAY,EAEjB,KAAK,UAAU,EAYhB,MAAM,sBAAsB,CAAA;AAa7B,OAAO,EAAC,kBAAkB,EAAc,MAAM,gCAAgC,CAAA;AAI9E,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;AA8HxD,eAAO,MAAM,KAAK,iuXAgHjB,CAAA;AAimED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GACxC,OAAO,KAAK,KACX,wBA0BF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,OAAO,KAAK,KACX,IAAI,CAAC,UAAU,EAAE,QAAQ,CAM1B,CAAA;AA6fF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,GAClC,MAAM,SAAS,MAAM,EAAE,KACtB,YAAY,EAuGd,CAAA;AA8oCD,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,YAAY,MAAM,GAAG,SAAS,EAC9B,aAAa,MAAM,EAAE,EACrB,OAAO,KAAK,KACX,cAoBF,CAAA;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,EAC5C,SAAS,GACT,UAAU,GACV,KAAK,GACL,WAAW,GACX,QAAQ,GACR,OAAO,GACP,OAAO,GACP,UAAU,CACb,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,WAAW,MAAM,EACjB,MAAM,iBAAiB;;;;;;;;;;;;;;CAUvB,CAAA;AAEF,eAAO,MAAM,sBAAsB,GACjC,SAAS,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAC7C,MAAM,iBAAiB,EACvB,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAYf,CAAA"}

package/dist/index.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { setTimeout as delay } from 'node:timers/promises';
+import { cliVersion, diagnose, mcpConfig } from './setup.js';
 import { ingestProjectSources } from './projectSources.js';
 import { writeCanvasComparison } from './canvasComparison.js';
 import { importCanvasAssetWithState } from './canvasAssetImport.js';
@@ -66,6 +67,9 @@ export const usage = `AssetHub CLI
 Internal preview: canvas/context/layout and moodboards require workspace feature access.
 
 Usage:
+  assethub --version
+  assethub doctor [--mcp] [--profile <name>] [--timeout-ms <n>]
+  assethub mcp config --client cursor|codex [--base-url <url>]
   assethub auth login --api-key <key> [--base-url <url>] [--profile <name>]
   assethub auth login --api-key-stdin [--base-url <url>] [--profile <name>]
   assethub auth login --access-token-stdin [--base-url <url>] [--profile <name>]
@@ -139,9 +143,10 @@ Usage:
 
 Global options:
   --api-key <key>       Overrides saved auth and ASSETHUB_API_KEY.
-  --base-url <url>      Defaults to ASSETHUB_API_BASE_URL, saved auth, or ${defaultBaseUrl}.
-  --profile <name>      Saved auth profile name. Defaults to ${defaultProfileName}.
+  --base-url <url>      Override the selected API origin. Default: ${defaultBaseUrl}.
+  --profile <name>      Select this saved profile ahead of environment credentials and origin.
   --config <path>       Auth config path. Defaults to ~/.assethub/config.json.
+  --version             Show installed package version.
   --help                Show help.
 
 Examples:
@@ -339,7 +344,7 @@ const defaultFileNameForMediaType = (mediaType) => mediaType === 'image' ? 'stdi
 const getSourceResourceIdFlag = (flags) => getFlag(flags, 'source-resource-id') ??
     getFlag(flags, 'source-id') ??
     getFlag(flags, 'resource-id');
-const getProfileName = (flags) => getFlag(flags, 'profile') ?? defaultProfileName;
+const getProfileName = (flags) => hasFlag(flags, 'profile') ? requireFlag(flags, 'profile') : defaultProfileName;
 const getConfigPath = (flags) => getFlag(flags, 'config') ??
     env.ASSETHUB_CLI_CONFIG ??
     join(homedir(), '.assethub', 'config.json');
@@ -394,49 +399,32 @@ const readStdinBlob = async (type) => await new Promise((resolve, reject) => {
     stdin.on('error', reject);
 });
 const resolveAuth = async (flags) => {
-    const profile = getProfileName(flags);
-    const baseUrlFromFlags = getFlag(flags, 'base-url');
-    const apiKeyFromFlags = getFlag(flags, 'api-key');
-    if (apiKeyFromFlags != null && apiKeyFromFlags !== 'true') {
-        return {
-            apiKey: apiKeyFromFlags,
-            baseUrl: baseUrlFromFlags ?? env.ASSETHUB_API_BASE_URL ?? defaultBaseUrl,
-            profile,
-            source: 'flag',
-        };
-    }
-    const config = await readAuthConfig(getConfigPath(flags));
-    const storedName = getFlag(flags, 'profile') ?? config.defaultProfile ?? profile;
-    const storedProfile = config.profiles?.[storedName];
-    const storedAuth = storedProfile?.apiKey
-        ? {
-            apiKey: storedProfile.apiKey,
-            baseUrl: baseUrlFromFlags ??
-                env.ASSETHUB_API_BASE_URL ??
-                storedProfile.baseUrl,
-            profile: storedName,
-            source: 'profile',
-        }
+    const explicitProfile = hasFlag(flags, 'profile') ? requireFlag(flags, 'profile') : undefined;
+    const overrideKey = hasFlag(flags, 'api-key') ? requireFlag(flags, 'api-key') : undefined;
+    const config = !overrideKey || explicitProfile
+        ? await readAuthConfig(getConfigPath(flags))
         : undefined;
-    // An explicit profile or workspace selection must control the next command,
-    // even if the shell still contains the previous organization's key.
-    if (storedAuth && (getFlag(flags, 'profile') || storedProfile?.workspaceId)) {
-        if (storedProfile?.workspaceId &&
-            new URL(storedAuth.baseUrl).origin !==
-                new URL(storedProfile.baseUrl).origin)
+    const profile = explicitProfile ?? config?.defaultProfile ?? defaultProfileName;
+    const storedProfile = config?.profiles?.[profile];
+    const selected = Boolean(explicitProfile || storedProfile?.workspaceId);
+    if (selected && (!storedProfile || (!storedProfile.apiKey && !overrideKey)))
+        throw new Error('Selected profile has no workspace API key. Use workspace use <id> or auth login --api-key-stdin --profile <name>.');
+    const baseUrl = getFlag(flags, 'base-url') ??
+        (selected
+            ? storedProfile.baseUrl
+            : env.ASSETHUB_API_BASE_URL ?? storedProfile?.baseUrl ?? defaultBaseUrl);
+    if (overrideKey)
+        return { apiKey: overrideKey, baseUrl, profile, source: 'flag' };
+    if (selected && storedProfile?.apiKey) {
+        if (storedProfile.workspaceId &&
+            new URL(baseUrl).origin !== new URL(storedProfile.baseUrl).origin)
             throw new Error('Selected workspace belongs to another API origin; select a workspace for this origin or supply an explicit API key');
-        return storedAuth;
+        return { apiKey: storedProfile.apiKey, baseUrl, profile, source: 'profile' };
     }
-    if (env.ASSETHUB_API_KEY != null && env.ASSETHUB_API_KEY.trim() !== '') {
-        return {
-            apiKey: env.ASSETHUB_API_KEY,
-            baseUrl: baseUrlFromFlags ?? env.ASSETHUB_API_BASE_URL ?? defaultBaseUrl,
-            profile,
-            source: 'env',
-        };
-    }
-    if (storedAuth)
-        return storedAuth;
+    if (env.ASSETHUB_API_KEY?.trim())
+        return { apiKey: env.ASSETHUB_API_KEY, baseUrl, profile, source: 'env' };
+    if (storedProfile?.apiKey)
+        return { apiKey: storedProfile.apiKey, baseUrl, profile, source: 'profile' };
     throw new Error('Missing workspace API key. Use "workspace use <id>" after user login, "auth login --api-key-stdin", or ASSETHUB_API_KEY.');
 };
 const createContext = async (flags, args) => {
@@ -1230,20 +1218,21 @@ const commandModels = async (subcommand, positionals, ctx) => {
 const workspaceAuth = async (flags) => {
     const configPath = getConfigPath(flags);
     const config = await readAuthConfig(configPath);
-    const profile = getFlag(flags, 'profile') ?? config.defaultProfile ?? defaultProfileName;
+    const explicitProfile = hasFlag(flags, 'profile') ? requireFlag(flags, 'profile') : undefined;
+    const profile = explicitProfile ?? config.defaultProfile ?? defaultProfileName;
     const stored = config.profiles?.[profile];
-    const accessToken = env.ASSETHUB_ACCESS_TOKEN?.trim() || stored?.accessToken;
+    const environmentToken = explicitProfile ? undefined : env.ASSETHUB_ACCESS_TOKEN?.trim();
+    const accessToken = environmentToken || stored?.accessToken;
     if (!accessToken)
         throw new Error('Workspace management requires user authentication: auth login --access-token-stdin or ASSETHUB_ACCESS_TOKEN');
     const baseUrl = getFlag(flags, 'base-url') ??
-        env.ASSETHUB_API_BASE_URL ??
-        stored?.baseUrl ??
+        (explicitProfile ? stored?.baseUrl : env.ASSETHUB_API_BASE_URL ?? stored?.baseUrl) ??
         defaultBaseUrl;
-    if (!env.ASSETHUB_ACCESS_TOKEN?.trim() &&
+    if (!environmentToken &&
         stored &&
         new URL(baseUrl).origin !== new URL(stored.baseUrl).origin)
         throw new Error('Saved user authentication belongs to another API origin; log in for this origin');
-    const workspaceMfaToken = env.ASSETHUB_WORKSPACE_MFA?.trim() ||
+    const workspaceMfaToken = (!explicitProfile && env.ASSETHUB_WORKSPACE_MFA?.trim()) ||
         (stored && new URL(baseUrl).origin === new URL(stored.baseUrl).origin
             ? stored.workspaceMfaToken
             : undefined);
@@ -1258,6 +1247,11 @@ const workspaceAuth = async (flags) => {
     };
 };
 const commandWorkspace = async (subcommand, positionals, flags) => {
+    const suppliedKey = hasFlag(flags, 'api-key')
+        ? requireFlag(flags, 'api-key')
+        : hasFlag(flags, 'profile')
+            ? undefined
+            : env.ASSETHUB_API_KEY?.trim();
     const auth = await workspaceAuth(flags);
     if (subcommand === 'list') {
         print(await auth.client.list());
@@ -1301,7 +1295,6 @@ const commandWorkspace = async (subcommand, positionals, flags) => {
         new URL(entry.baseUrl).origin === new URL(auth.baseUrl).origin &&
         entry.apiKey);
     let apiKey;
-    const suppliedKey = getFlag(flags, 'api-key') ?? env.ASSETHUB_API_KEY?.trim();
     for (const candidate of new Set([cached?.[1].apiKey, suppliedKey])) {
         if (!candidate)
             continue;
@@ -1431,7 +1424,7 @@ const commandAuth = async (subcommand, flags) => {
     if (subcommand === 'status') {
         const config = await readAuthConfig(configPath);
         const current = config.profiles?.[getFlag(flags, 'profile') ?? config.defaultProfile ?? profile];
-        if (env.ASSETHUB_ACCESS_TOKEN?.trim() ||
+        if ((!hasFlag(flags, 'profile') && env.ASSETHUB_ACCESS_TOKEN?.trim()) ||
             (current?.accessToken && !current.apiKey)) {
             const auth = await workspaceAuth(flags);
             const account = await auth.client.list();
@@ -1462,22 +1455,15 @@ const commandAuth = async (subcommand, flags) => {
     }
     if (subcommand === 'logout') {
         const config = await readAuthConfig(configPath);
-        const profiles = config.profiles ?? {};
         const selectedProfile = getFlag(flags, 'profile') ?? config.defaultProfile ?? profile;
+        const profiles = config.profiles ?? {};
         const existed = profiles[selectedProfile] != null;
         delete profiles[selectedProfile];
         await writeAuthConfig(configPath, {
-            defaultProfile: config.defaultProfile === selectedProfile
-                ? undefined
-                : config.defaultProfile,
+            defaultProfile: config.defaultProfile === selectedProfile ? undefined : config.defaultProfile,
             profiles,
         });
-        print({
-            success: true,
-            profile: selectedProfile,
-            removed: existed,
-            configPath,
-        });
+        print({ success: true, profile: selectedProfile, removed: existed, configPath });
         return;
     }
     throw new Error('Unknown auth command. Use "auth login", "auth status", or "auth logout".');
@@ -3220,11 +3206,33 @@ const parseNonNegativeIntegerFlag = (flags, name) => {
 };
 const run = async () => {
     const parsed = parseArgs(argv.slice(2));
+    if (hasFlag(parsed.flags, 'version')) {
+        stdout.write(`${await cliVersion()}\n`);
+        return;
+    }
     if (hasFlag(parsed.flags, 'help') || parsed.positionals.length === 0) {
         stdout.write(usage);
         return;
     }
     const [command, subcommand] = parsed.positionals;
+    if (command === 'mcp') {
+        if (subcommand !== 'config')
+            throw new Error('Use mcp config --client cursor|codex');
+        stdout.write(mcpConfig(requireFlag(parsed.flags, 'client'), getFlag(parsed.flags, 'base-url') ?? env.ASSETHUB_API_BASE_URL ?? defaultBaseUrl));
+        return;
+    }
+    if (command === 'doctor') {
+        stderr.write('Checking AssetHub connection…\n');
+        const report = await diagnose({
+            resolveAuth: () => resolveAuth(parsed.flags),
+            includeMcp: hasFlag(parsed.flags, 'mcp'),
+            timeoutMs: parsePositiveIntegerFlag(parsed.flags, 'timeout-ms', 15000),
+        });
+        print(report);
+        if (!report.ok)
+            process.exitCode = 2;
+        return;
+    }
     if (command === 'project') {
         if (subcommand !== 'ingest')
             throw new Error('Use project ingest <source-dir> --out-dir <directory>');

package/dist/setup.d.ts

@@ -0,0 +1,47 @@
+export declare const cliVersion: () => Promise<string>;
+export declare const mcpConfig: (client: string, baseUrl: string) => string;
+type Check = {
+    name: 'api' | 'mcp' | 'configuration';
+    status: 'pass' | 'fail';
+    code?: string;
+    message?: string;
+    hint?: string;
+    workspaceId?: string;
+    executionStatus?: string;
+    toolCount?: number;
+};
+type Auth = {
+    apiKey: string;
+    baseUrl: string;
+    profile: string;
+    source: string;
+};
+export declare const diagnose: ({ resolveAuth, includeMcp, timeoutMs, }: {
+    resolveAuth: () => Promise<Auth>;
+    includeMcp: boolean;
+    timeoutMs: number;
+}) => Promise<{
+    ok: boolean;
+    version: string;
+    nodeVersion: string;
+    checks: {
+        name: "configuration";
+        status: "fail";
+        code: string;
+        message: string;
+        hint: string;
+    }[];
+    auth?: undefined;
+} | {
+    ok: boolean;
+    version: string;
+    nodeVersion: string;
+    auth: {
+        profile: string;
+        source: string;
+        baseUrl: string;
+    };
+    checks: [Check, ...Check[]];
+}>;
+export {};
+//# sourceMappingURL=setup.d.ts.map

package/dist/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,UAAU,QAAa,OAAO,CAAC,MAAM,CAKvC,CAAA;AAmBX,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,EAAE,SAAS,MAAM,KAAG,MAoB3D,CAAA;AAED,KAAK,KAAK,GAAG;IACX,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,eAAe,CAAA;IACrC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,KAAK,IAAI,GAAG;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAA;AA0D9E,eAAO,MAAM,QAAQ,GAAU,yCAI5B;IACD,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;CAClB;;;;;;;;;;;;;;;;;;;;;;EAyGA,CAAA"}

package/dist/setup.js

@@ -0,0 +1,177 @@
+import { readFile } from 'node:fs/promises';
+import { AssetHubApiError, createAssetHubClient } from '@assethub/api-client';
+export const cliVersion = async () => JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8')).version;
+const validatedBaseUrl = (baseUrl) => {
+    const url = new URL(baseUrl);
+    if (url.username || url.password || url.search || url.hash)
+        throw new Error('Use an API URL without credentials, query, or fragment.');
+    if (url.protocol !== 'https:' &&
+        !(url.protocol === 'http:' &&
+            ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname)))
+        throw new Error('Use HTTPS for remote servers; HTTP is supported only on localhost.');
+    return url.href.replace(/\/+$/, '');
+};
+export const mcpConfig = (client, baseUrl) => {
+    const url = `${validatedBaseUrl(baseUrl)}/api/mcp`;
+    if (client === 'cursor')
+        return (JSON.stringify({
+            mcpServers: {
+                assethub: {
+                    url,
+                    headers: { Authorization: 'Bearer ${env:ASSETHUB_API_KEY}' },
+                },
+            },
+        }, null, 2) + '\n');
+    if (client === 'codex')
+        return `[mcp_servers.assethub]\nurl = ${JSON.stringify(url)}\nbearer_token_env_var = "ASSETHUB_API_KEY"\n`;
+    throw new Error('Use mcp config --client cursor|codex');
+};
+const failedCheck = (name, status, timedOut) => {
+    if (timedOut)
+        return {
+            name,
+            status: 'fail',
+            code: 'TIMEOUT',
+            message: 'Connection timed out.',
+            hint: 'Check your network or retry with --timeout-ms 30000.',
+        };
+    if (status === 401)
+        return {
+            name,
+            status: 'fail',
+            code: 'UNAUTHORIZED',
+            message: 'The API key was rejected.',
+            hint: 'Run assethub auth login --api-key-stdin with a current workspace key.',
+        };
+    if (status === 403)
+        return {
+            name,
+            status: 'fail',
+            code: 'FORBIDDEN',
+            message: 'This account or workspace does not have access.',
+            hint: 'Check the API key workspace and account access.',
+        };
+    if (name === 'mcp' && status === 404)
+        return {
+            name,
+            status: 'fail',
+            code: 'MCP_UNAVAILABLE',
+            message: 'Hosted MCP is unavailable for this account or API origin.',
+            hint: 'Hosted MCP is in Internal preview. Check access for the account that created the API key.',
+        };
+    if (status === 429)
+        return {
+            name,
+            status: 'fail',
+            code: 'RATE_LIMITED',
+            message: 'Too many requests.',
+            hint: 'Wait before retrying the check.',
+        };
+    // Server response text may contain credentials or private data. Report only
+    // fixed diagnostics; do not include arbitrary error messages in shareable output.
+    return {
+        name,
+        status: 'fail',
+        code: status && status >= 500 ? 'SERVER_ERROR' : 'CONNECTION_FAILED',
+        message: 'The connection check failed.',
+        hint: 'Check the API origin, network, and service status; then retry.',
+    };
+};
+export const diagnose = async ({ resolveAuth, includeMcp, timeoutMs, }) => {
+    const version = await cliVersion();
+    let auth;
+    try {
+        auth = await resolveAuth();
+        auth.baseUrl = validatedBaseUrl(auth.baseUrl);
+    }
+    catch {
+        return {
+            ok: false,
+            version,
+            nodeVersion: process.version,
+            checks: [
+                {
+                    name: 'configuration',
+                    status: 'fail',
+                    code: 'AUTH_CONFIGURATION',
+                    message: 'No usable credentials or API origin for the selected profile.',
+                    hint: 'Check --profile and --base-url. Select a workspace with assethub workspace use <id> after user login, or run assethub auth login --api-key-stdin.',
+                },
+            ],
+        };
+    }
+    const signal = AbortSignal.timeout(timeoutMs);
+    // Bound the entire transport, including initialize and SSE, and do not follow
+    // redirects while carrying the workspace key.
+    const boundedFetch = (input, init) => fetch(input, {
+        ...init,
+        redirect: 'error',
+        signal: init?.signal ? AbortSignal.any([init.signal, signal]) : signal,
+    });
+    const apiCheck = async () => {
+        try {
+            const capabilities = await createAssetHubClient({
+                apiKey: auth.apiKey,
+                baseUrl: auth.baseUrl,
+                fetch: boundedFetch,
+            }).v2.getCapabilities();
+            if (typeof capabilities.ownerId !== 'string' || !capabilities.ownerId)
+                throw new Error('Invalid capabilities');
+            return {
+                name: 'api',
+                status: 'pass',
+                workspaceId: capabilities.ownerId,
+                executionStatus: capabilities.executionContext?.status,
+            };
+        }
+        catch (error) {
+            return failedCheck('api', error instanceof AssetHubApiError ? error.status : undefined, signal.aborted);
+        }
+    };
+    const mcpCheck = async () => {
+        const { Client } = await import('@modelcontextprotocol/sdk/client/index.js');
+        const { StreamableHTTPClientTransport, StreamableHTTPError } = await import('@modelcontextprotocol/sdk/client/streamableHttp.js');
+        const client = new Client({ name: 'assethub-cli-doctor', version });
+        try {
+            await client.connect(new StreamableHTTPClientTransport(new URL(`${auth.baseUrl}/api/mcp`), {
+                fetch: boundedFetch,
+                requestInit: { headers: { Authorization: `Bearer ${auth.apiKey}` } },
+            }), { signal, timeout: timeoutMs });
+            let toolCount = 0;
+            let cursor;
+            const cursors = new Set();
+            do {
+                const page = await client.listTools(cursor ? { cursor } : {}, {
+                    signal,
+                    timeout: timeoutMs,
+                });
+                toolCount += page.tools.length;
+                cursor = page.nextCursor;
+                if (cursor && cursors.has(cursor))
+                    throw new Error('Repeated tool cursor');
+                if (cursor)
+                    cursors.add(cursor);
+            } while (cursor);
+            if (!toolCount)
+                throw new Error('No MCP tools');
+            return { name: 'mcp', status: 'pass', toolCount };
+        }
+        catch (error) {
+            return failedCheck('mcp', error instanceof StreamableHTTPError ? error.code : undefined, signal.aborted);
+        }
+        finally {
+            await client.close();
+        }
+    };
+    const checks = await Promise.all([
+        apiCheck(),
+        ...(includeMcp ? [mcpCheck()] : []),
+    ]);
+    return {
+        ok: checks.every(check => check.status === 'pass'),
+        version,
+        nodeVersion: process.version,
+        auth: { profile: auth.profile, source: auth.source, baseUrl: auth.baseUrl },
+        checks,
+    };
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assethub/cli",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Command line interface for AssetHub.",
   "type": "module",
   "bin": {
@@ -30,7 +30,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@assethub/api-client": "^0.1.4"
+    "@assethub/api-client": "^0.1.4",
+    "@modelcontextprotocol/sdk": "^1.30.0"
   },
   "repository": {
     "type": "git",