@capgo/cli 7.93.3 → 7.94.0

package/dist/src/utils.d.ts

@@ -3594,7 +3594,6 @@ export declare function createSupabaseClient(apikey: string, supaHost?: string,
 }, {
     PostgrestVersion: "14.1";
 }>>;
-export declare function checkKey(supabase: SupabaseClient<Database>, apikey: string, keymode: Database['public']['Enums']['key_mode'][]): Promise<void>;
 export declare function isPayingOrg(supabase: SupabaseClient<Database>, orgId: string): Promise<boolean>;
 export declare function isTrialOrg(supabase: SupabaseClient<Database>, orgId: string): Promise<number>;
 export declare function isAllowedActionOrg(supabase: SupabaseClient<Database>, orgId: string): Promise<boolean>;
@@ -3641,7 +3640,7 @@ export declare function generateManifest(path: string): Promise<{
 export type manifestType = Awaited<ReturnType<typeof generateManifest>>;
 export type { uploadUrlsType } from './schemas/common';
 export declare function zipFile(filePath: string): Promise<Buffer>;
-export declare function zipFileUnix(filePath: string): Buffer<ArrayBufferLike>;
+export declare function zipFileUnix(filePath: string): Buffer<ArrayBuffer>;
 export declare function zipFileWindows(filePath: string): Promise<Buffer>;
 export declare function uploadTUS(apikey: string, data: Buffer, orgId: string, appId: string, name: string, spinner: ReturnType<typeof spinnerC>, localConfig: CapgoConfig, chunkSize: number): Promise<boolean>;
 export declare function deletedFailedVersion(supabase: SupabaseClient<Database>, appId: string, name: string): Promise<void>;
@@ -3670,7 +3669,25 @@ export declare function sendEvent(capgkey: string, payload: TrackOptions & {
 }, verbose?: boolean): Promise<void>;
 export declare function show2FADeniedError(organizationName?: string): never;
 export declare function getOrganization(supabase: SupabaseClient<Database>, roles: string[]): Promise<Organization>;
-export declare function verifyUser(supabase: SupabaseClient<Database>, apikey: string, keymod?: Database['public']['Enums']['key_mode'][]): Promise<string>;
+export declare function filterOrgsByPermission(supabase: SupabaseClient<Database>, apikey: string, orgs: Organization[], permissionKey: string): Promise<Organization[]>;
+export declare function getOrganizationListWithPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string): Promise<{
+    allOrganizations: Organization[];
+    allowedOrganizations: Organization[];
+}>;
+export declare function getOrganizationWithPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string): Promise<Organization>;
+export declare function resolveUserIdFromApiKey(supabase: SupabaseClient<Database>, apikey: string, silent?: boolean): Promise<string>;
+interface CliPermissionScope {
+    orgId?: string | null;
+    appId?: string | null;
+    channelId?: number | null;
+}
+export declare function hasCliPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string, scope?: CliPermissionScope): Promise<boolean>;
+export declare function assertCliPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string, scope?: CliPermissionScope, options?: {
+    message?: string;
+    silent?: boolean;
+}): Promise<void>;
+export declare function assertOrgPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string, orgId: string, message: string, silent: boolean): Promise<void>;
+export declare function getAccessibleAppsForApiKey(supabase: SupabaseClient<Database>, apikey: string): Promise<Database['public']['Tables']['apps']['Row'][]>;
 export declare function getOrganizationId(supabase: SupabaseClient<Database>, appId: string): Promise<string>;
 export declare function requireUpdateMetadata(supabase: SupabaseClient<Database>, channel: string, appId: string): Promise<boolean>;
 export declare function getHumanDate(createdA: string | null): string;

package/package.json

@@ -1,17 +1,18 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "7.93.3",
+  "version": "7.94.0",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
-  "homepage": "https://github.com/Cap-go/CLI#readme",
+  "homepage": "https://github.com/Cap-go/capgo/tree/main/cli#readme",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Cap-go/CLI.git"
+    "url": "git+https://github.com/Cap-go/capgo.git",
+    "directory": "cli"
   },
   "bugs": {
-    "url": "https://github.com/Cap-go/CLI/issues"
+    "url": "https://github.com/Cap-go/capgo/issues"
   },
   "keywords": [
     "appflow alternative",
@@ -56,9 +57,10 @@
     "no-debug": "node dist/index.js",
     "dev-build": "SUPA_DB=development ncc build",
     "pack": "pkg",
-    "types": "npx --yes supabase gen types typescript --project-id=xvwzpoazmxkqosrdewyv > src/types/supabase.types.ts",
+    "types": "bunx --bun supabase gen types typescript --project-id=xvwzpoazmxkqosrdewyv > src/types/supabase.types.ts",
     "typecheck": "tsc --noEmit",
-    "lint": "eslint \"src/**/*.ts\" --fix",
+    "lint": "eslint \"src/**/*.ts\"",
+    "lint:fix": "eslint \"src/**/*.ts\" --fix",
     "check-posix-paths": "node test/check-posix-paths.js",
     "generate-docs": "node dist/index.js generate-docs README.md",
     "test:bundle": "bun test/test-bundle.mjs",
@@ -73,6 +75,8 @@
     "test:checksum": "bun test/test-checksum-algorithm.mjs",
     "test:ci-prompts": "bun test/test-ci-prompts.mjs",
     "test:onboarding-recovery": "bun test/test-onboarding-recovery.mjs",
+    "test:onboarding-run-targets": "bun test/test-onboarding-run-targets.mjs",
+    "test:run-device-command": "bun test/test-run-device-command.mjs",
     "test:init-app-conflict": "bun test/test-init-app-conflict.mjs",
     "test:prompt-preferences": "bun test/test-prompt-preferences.mjs",
     "test:esm-sdk": "node test/test-sdk-esm.mjs",
@@ -81,7 +85,7 @@
     "test:version-detection:setup": "./test/fixtures/setup-test-projects.sh",
     "test:platform-paths": "bun test/test-platform-paths.mjs",
     "test:payload-split": "bun test/test-payload-split.mjs",
-    "test": "bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:credentials && bun run test:credentials-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:ci-prompts && bun run test:onboarding-recovery && bun run test:init-app-conflict && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:version-detection && bun run test:platform-paths && bun run test:payload-split"
+    "test": "bun run build && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:credentials && bun run test:credentials-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:ci-prompts && bun run test:onboarding-recovery && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-app-conflict && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:version-detection && bun run test:platform-paths && bun run test:payload-split"
   },
   "devDependencies": {
     "@antfu/eslint-config": "^7.0.0",

package/skills/usage/SKILL.md

@@ -24,7 +24,8 @@ TanStack Intent skills should stay focused and under the validator line limit, s
 
 ### Project setup and diagnostics
 
-- `init [apikey] [appId]`: guided first-time setup for Capgo in a Capacitor app. The interactive flow now runs as a real Ink-based fullscreen onboarding so it uses the same UI stack as `build init` (alias: `build onboarding`), with a persistent dashboard, phase roadmap, progress cards, shared log area, and resume support. When dependency auto-detection fails on macOS, the flow opens a native file picker for `package.json` before falling back to manual path entry. If the local bundle ID already exists in the selected Capgo account, onboarding offers to reuse that app, then offers to delete and recreate it, then falls back to alternate bundle ID suggestions. If the user reuses a pending app that was already created in the web onboarding flow, the CLI syncs that selected dashboard app ID back into `capacitor.config.*` before the remaining steps continue. Outside that reused pending-app path, the CLI keeps using the local Capacitor app ID. It can also offer a final `npx skills add https://github.com/Cap-go/capgo-skills -g -y` install step before the GitHub support prompt; if accepted, the support menu includes `Cap-go/capgo-skills` alongside the updater-only and all-Capgo choices. If native platforms are missing, the onboarding can offer to run `cap add` for you. The updater step now verifies that `@capgo/capacitor-updater` is both declared in the selected `package.json` and resolvable from `node_modules`; if automatic install or later build/sync fails, onboarding prints the manual command, waits for the user to type `ready`, re-checks, and only then continues. If iOS sync validation fails during onboarding, the CLI can offer to run a one-line native reset command, wait for you to type `ready` after a manual fix, surface `doctor`, and save a support bundle before you leave the flow.
+- `init [apikey] [appId]`: guided first-time setup for Capgo in a Capacitor app. The interactive flow now runs as a real Ink-based fullscreen onboarding so it uses the same UI stack as `build init` (alias: `build onboarding`), with a persistent dashboard, phase roadmap, progress cards, shared log area, and resume support. When dependency auto-detection fails on macOS, the flow opens a native file picker for `package.json` before falling back to manual path entry. If the local bundle ID already exists in the selected Capgo account, onboarding offers to reuse that app, then offers to delete and recreate it, then falls back to alternate bundle ID suggestions. If the user reuses a pending app that was already created in the web onboarding flow, the CLI syncs that selected dashboard app ID back into `capacitor.config.*` before the remaining steps continue. Outside that reused pending-app path, the CLI keeps using the local Capacitor app ID. It can also offer a final `npx skills add https://github.com/Cap-go/capgo-skills -g -y` install step before the GitHub support prompt; if accepted, the support menu includes `Cap-go/capgo-skills` alongside the updater-only and all-Capgo choices. If native platforms are missing, the onboarding can offer to run `cap add` for you. The updater step now verifies that `@capgo/capacitor-updater` is both declared in the selected `package.json` and resolvable from `node_modules`; if automatic install or later build/sync fails, onboarding prints the manual command, waits for the user to type `ready`, re-checks, and only then continues. During the iOS run-on-device step, onboarding asks whether to use a physical iPhone/iPad or a simulator; for physical devices, it asks the user to connect and unlock the device, then offers a check-again loop before launching with the detected target. If iOS sync validation fails during onboarding, the CLI can offer to run a one-line native reset command, wait for you to type `ready` after a manual fix, surface `doctor`, and save a support bundle before you leave the flow.
+- `run device [platform]`: run a Capacitor app on a connected device or simulator. In an interactive terminal, omitting `[platform]` asks whether to start on iOS or Android. The command lists available devices and simulators, includes a reload option, and resolves the `cap run` command. Use `npx @capgo/cli@latest run device ios --no-launch` to exercise iOS physical/simulator target selection and print the resolved command without launching the app.
 - `login [apikey]`: store an API key locally.
 - `doctor`: inspect installation health and gather troubleshooting details.
 - `probe`: test whether the update endpoint would deliver an update.
@@ -81,6 +82,7 @@ Load `skills/organization-management/SKILL.md` when working with:
 
 ```bash
 npx @capgo/cli@latest init YOUR_API_KEY com.example.app
+npx @capgo/cli@latest run device ios --no-launch
 npx @capgo/cli@latest login YOUR_API_KEY
 npx @capgo/cli@latest doctor
 npx @capgo/cli@latest probe --platform ios

package/skills/_artifacts/domain_map.yaml

@@ -1,32 +0,0 @@
-domains:
-  - name: cli-usage
-    summary: High-level command routing, setup, diagnostics, app management, docs generation, MCP, and GitHub support commands.
-    primary_sources:
-      - webdocs/init.mdx
-      - webdocs/doctor.mdx
-      - webdocs/login.mdx
-      - webdocs/app.mdx
-      - webdocs/account.mdx
-      - webdocs/probe.mdx
-      - webdocs/star.mdx
-      - webdocs/star-all.mdx
-      - src/index.ts
-  - name: ota-release-management
-    summary: OTA bundle uploads, channel operations, compatibility checks, cleanup, and encryption-key workflows.
-    primary_sources:
-      - webdocs/bundle.mdx
-      - webdocs/channel.mdx
-      - webdocs/key.mdx
-      - src/index.ts
-  - name: native-builds
-    summary: Native cloud build requests and local build credential management for iOS and Android.
-    primary_sources:
-      - webdocs/build.mdx
-      - src/index.ts
-  - name: organization-management
-    summary: Account lookup, organization administration, and deprecated organisation aliases.
-    primary_sources:
-      - webdocs/account.mdx
-      - webdocs/organization.mdx
-      - webdocs/organisation.mdx
-      - src/index.ts

package/skills/_artifacts/skill_spec.md

@@ -1,30 +0,0 @@
-# Capgo CLI skill spec
-
-## Goal
-
-Provide a small Capgo CLI skill set that helps an agent choose and invoke the correct CLI commands for app setup, OTA release operations, organization administration, MCP setup, GitHub support commands, and native cloud builds without exceeding TanStack Intent size limits.
-
-## Sources
-
-- `webdocs/*.mdx` for published command descriptions, examples, and option tables.
-- `src/index.ts` for the currently registered commands, aliases, and flags that may not yet be fully reflected in the web docs.
-- `AGENTS.md` for repository-specific maintenance requirements.
-
-## Skill set
-
-- `usage`: routing, setup, diagnostics, app commands, docs generation, MCP, and GitHub support commands.
-- `release-management`: bundle, channel, compatibility, cleanup, and encryption-key workflows.
-- `native-builds`: native cloud build requests and build credential storage/update flows.
-- `organization-management`: account ID lookup, organization admin flows, and deprecated `organisation` aliases.
-
-## Scope
-
-- Include the documented command purpose, invocation patterns, key options, and important caveats.
-- Prefer the public user-facing examples already used by the project.
-- Keep the skills aligned with the published docs and current CLI registration.
-
-## Maintenance rules
-
-- Any CLI command or option change should update the relevant `skills/*/SKILL.md` file in the same pull request.
-- Use `webdocs/` as the primary wording source and `src/index.ts` as the completeness check.
-- Validate the skills with `bunx @tanstack/intent@latest validate` before release.

package/skills/_artifacts/skill_tree.yaml

@@ -1,17 +0,0 @@
-skills:
-  - name: usage
-    path: skills/usage/SKILL.md
-    domain: cli-usage
-    focus: High-level routing and shared invocation rules.
-  - name: release-management
-    path: skills/release-management/SKILL.md
-    domain: ota-release-management
-    focus: OTA bundle, channel, compatibility, cleanup, and encryption workflows.
-  - name: native-builds
-    path: skills/native-builds/SKILL.md
-    domain: native-builds
-    focus: Native build request flows and local build credential management.
-  - name: organization-management
-    path: skills/organization-management/SKILL.md
-    domain: organization-management
-    focus: Account and organization administration commands, including deprecated aliases.