@capgo/cli 7.93.4 → 7.94.1

package/dist/src/utils.d.ts

@@ -3594,7 +3594,6 @@ export declare function createSupabaseClient(apikey: string, supaHost?: string,
 }, {
     PostgrestVersion: "14.1";
 }>>;
-export declare function checkKey(supabase: SupabaseClient<Database>, apikey: string, keymode: Database['public']['Enums']['key_mode'][]): Promise<void>;
 export declare function isPayingOrg(supabase: SupabaseClient<Database>, orgId: string): Promise<boolean>;
 export declare function isTrialOrg(supabase: SupabaseClient<Database>, orgId: string): Promise<number>;
 export declare function isAllowedActionOrg(supabase: SupabaseClient<Database>, orgId: string): Promise<boolean>;
@@ -3641,7 +3640,7 @@ export declare function generateManifest(path: string): Promise<{
 export type manifestType = Awaited<ReturnType<typeof generateManifest>>;
 export type { uploadUrlsType } from './schemas/common';
 export declare function zipFile(filePath: string): Promise<Buffer>;
-export declare function zipFileUnix(filePath: string): Buffer<ArrayBufferLike>;
+export declare function zipFileUnix(filePath: string): Buffer<ArrayBuffer>;
 export declare function zipFileWindows(filePath: string): Promise<Buffer>;
 export declare function uploadTUS(apikey: string, data: Buffer, orgId: string, appId: string, name: string, spinner: ReturnType<typeof spinnerC>, localConfig: CapgoConfig, chunkSize: number): Promise<boolean>;
 export declare function deletedFailedVersion(supabase: SupabaseClient<Database>, appId: string, name: string): Promise<void>;
@@ -3670,7 +3669,25 @@ export declare function sendEvent(capgkey: string, payload: TrackOptions & {
 }, verbose?: boolean): Promise<void>;
 export declare function show2FADeniedError(organizationName?: string): never;
 export declare function getOrganization(supabase: SupabaseClient<Database>, roles: string[]): Promise<Organization>;
-export declare function verifyUser(supabase: SupabaseClient<Database>, apikey: string, keymod?: Database['public']['Enums']['key_mode'][]): Promise<string>;
+export declare function filterOrgsByPermission(supabase: SupabaseClient<Database>, apikey: string, orgs: Organization[], permissionKey: string): Promise<Organization[]>;
+export declare function getOrganizationListWithPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string): Promise<{
+    allOrganizations: Organization[];
+    allowedOrganizations: Organization[];
+}>;
+export declare function getOrganizationWithPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string): Promise<Organization>;
+export declare function resolveUserIdFromApiKey(supabase: SupabaseClient<Database>, apikey: string, silent?: boolean): Promise<string>;
+interface CliPermissionScope {
+    orgId?: string | null;
+    appId?: string | null;
+    channelId?: number | null;
+}
+export declare function hasCliPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string, scope?: CliPermissionScope): Promise<boolean>;
+export declare function assertCliPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string, scope?: CliPermissionScope, options?: {
+    message?: string;
+    silent?: boolean;
+}): Promise<void>;
+export declare function assertOrgPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string, orgId: string, message: string, silent: boolean): Promise<void>;
+export declare function getAccessibleAppsForApiKey(supabase: SupabaseClient<Database>, apikey: string): Promise<Database['public']['Tables']['apps']['Row'][]>;
 export declare function getOrganizationId(supabase: SupabaseClient<Database>, appId: string): Promise<string>;
 export declare function requireUpdateMetadata(supabase: SupabaseClient<Database>, channel: string, appId: string): Promise<boolean>;
 export declare function getHumanDate(createdA: string | null): string;

package/package.json

@@ -1,17 +1,18 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "7.93.4",
+  "version": "7.94.1",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
-  "homepage": "https://github.com/Cap-go/CLI#readme",
+  "homepage": "https://github.com/Cap-go/capgo/tree/main/cli#readme",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Cap-go/CLI.git"
+    "url": "git+https://github.com/Cap-go/capgo.git",
+    "directory": "cli"
   },
   "bugs": {
-    "url": "https://github.com/Cap-go/CLI/issues"
+    "url": "https://github.com/Cap-go/capgo/issues"
   },
   "keywords": [
     "appflow alternative",
@@ -56,9 +57,10 @@
     "no-debug": "node dist/index.js",
     "dev-build": "SUPA_DB=development ncc build",
     "pack": "pkg",
-    "types": "npx --yes supabase gen types typescript --project-id=xvwzpoazmxkqosrdewyv > src/types/supabase.types.ts",
+    "types": "bunx --bun supabase gen types typescript --project-id=xvwzpoazmxkqosrdewyv > src/types/supabase.types.ts",
     "typecheck": "tsc --noEmit",
-    "lint": "eslint \"src/**/*.ts\" --fix",
+    "lint": "eslint \"src/**/*.ts\"",
+    "lint:fix": "eslint \"src/**/*.ts\" --fix",
     "check-posix-paths": "node test/check-posix-paths.js",
     "generate-docs": "node dist/index.js generate-docs README.md",
     "test:bundle": "bun test/test-bundle.mjs",
@@ -76,6 +78,7 @@
     "test:onboarding-run-targets": "bun test/test-onboarding-run-targets.mjs",
     "test:run-device-command": "bun test/test-run-device-command.mjs",
     "test:init-app-conflict": "bun test/test-init-app-conflict.mjs",
+    "test:init-guardrails": "bun test/test-init-guardrails.mjs",
     "test:prompt-preferences": "bun test/test-prompt-preferences.mjs",
     "test:esm-sdk": "node test/test-sdk-esm.mjs",
     "test:mcp": "node test/test-mcp.mjs",
@@ -83,7 +86,7 @@
     "test:version-detection:setup": "./test/fixtures/setup-test-projects.sh",
     "test:platform-paths": "bun test/test-platform-paths.mjs",
     "test:payload-split": "bun test/test-payload-split.mjs",
-    "test": "bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:credentials && bun run test:credentials-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:ci-prompts && bun run test:onboarding-recovery && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-app-conflict && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:version-detection && bun run test:platform-paths && bun run test:payload-split"
+    "test": "bun run build && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:credentials && bun run test:credentials-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:ci-prompts && bun run test:onboarding-recovery && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:version-detection && bun run test:platform-paths && bun run test:payload-split"
   },
   "devDependencies": {
     "@antfu/eslint-config": "^7.0.0",

package/skills/_artifacts/domain_map.yaml

@@ -1,32 +0,0 @@
-domains:
-  - name: cli-usage
-    summary: High-level command routing, setup, diagnostics, app management, docs generation, MCP, and GitHub support commands.
-    primary_sources:
-      - webdocs/init.mdx
-      - webdocs/doctor.mdx
-      - webdocs/login.mdx
-      - webdocs/app.mdx
-      - webdocs/account.mdx
-      - webdocs/probe.mdx
-      - webdocs/star.mdx
-      - webdocs/star-all.mdx
-      - src/index.ts
-  - name: ota-release-management
-    summary: OTA bundle uploads, channel operations, compatibility checks, cleanup, and encryption-key workflows.
-    primary_sources:
-      - webdocs/bundle.mdx
-      - webdocs/channel.mdx
-      - webdocs/key.mdx
-      - src/index.ts
-  - name: native-builds
-    summary: Native cloud build requests and local build credential management for iOS and Android.
-    primary_sources:
-      - webdocs/build.mdx
-      - src/index.ts
-  - name: organization-management
-    summary: Account lookup, organization administration, and deprecated organisation aliases.
-    primary_sources:
-      - webdocs/account.mdx
-      - webdocs/organization.mdx
-      - webdocs/organisation.mdx
-      - src/index.ts

package/skills/_artifacts/skill_spec.md

@@ -1,30 +0,0 @@
-# Capgo CLI skill spec
-
-## Goal
-
-Provide a small Capgo CLI skill set that helps an agent choose and invoke the correct CLI commands for app setup, OTA release operations, organization administration, MCP setup, GitHub support commands, and native cloud builds without exceeding TanStack Intent size limits.
-
-## Sources
-
-- `webdocs/*.mdx` for published command descriptions, examples, and option tables.
-- `src/index.ts` for the currently registered commands, aliases, and flags that may not yet be fully reflected in the web docs.
-- `AGENTS.md` for repository-specific maintenance requirements.
-
-## Skill set
-
-- `usage`: routing, setup, diagnostics, app commands, docs generation, MCP, and GitHub support commands.
-- `release-management`: bundle, channel, compatibility, cleanup, and encryption-key workflows.
-- `native-builds`: native cloud build requests and build credential storage/update flows.
-- `organization-management`: account ID lookup, organization admin flows, and deprecated `organisation` aliases.
-
-## Scope
-
-- Include the documented command purpose, invocation patterns, key options, and important caveats.
-- Prefer the public user-facing examples already used by the project.
-- Keep the skills aligned with the published docs and current CLI registration.
-
-## Maintenance rules
-
-- Any CLI command or option change should update the relevant `skills/*/SKILL.md` file in the same pull request.
-- Use `webdocs/` as the primary wording source and `src/index.ts` as the completeness check.
-- Validate the skills with `bunx @tanstack/intent@latest validate` before release.

package/skills/_artifacts/skill_tree.yaml

@@ -1,17 +0,0 @@
-skills:
-  - name: usage
-    path: skills/usage/SKILL.md
-    domain: cli-usage
-    focus: High-level routing and shared invocation rules.
-  - name: release-management
-    path: skills/release-management/SKILL.md
-    domain: ota-release-management
-    focus: OTA bundle, channel, compatibility, cleanup, and encryption workflows.
-  - name: native-builds
-    path: skills/native-builds/SKILL.md
-    domain: native-builds
-    focus: Native build request flows and local build credential management.
-  - name: organization-management
-    path: skills/organization-management/SKILL.md
-    domain: organization-management
-    focus: Account and organization administration commands, including deprecated aliases.