@capgo/cli 8.39.0 → 8.41.4

package/dist/src/types/supabase.types.d.ts

@@ -4704,10 +4704,6 @@ export type Database = {
                 };
                 Returns: boolean;
             };
-            is_rbac_enabled_globally: {
-                Args: never;
-                Returns: boolean;
-            };
             is_recent_email_otp_verified: {
                 Args: {
                     user_id: string;

package/dist/src/utils.d.ts

@@ -47,9 +47,8 @@ export declare function check2FAAccessForOrg(supabase: SupabaseClient<Database>,
 type TagKey = Lowercase<string>;
 /** Tag Type */
 type Tags = Record<TagKey, string | number | boolean>;
-type Parser = 'markdown' | 'text';
 /**
- * Options for publishing LogSnag events
+ * Options for publishing analytics events
  */
 interface TrackOptions {
     /**
@@ -80,25 +79,11 @@ interface TrackOptions {
      * Tracking payload contract version.
      */
     tracking_version?: number;
-    /**
-     * Event icon (emoji)
-     * must be a single emoji
-     * example: "🎉"
-     */
-    icon?: string;
     /**
      * Event tags
      * example: { username: "mattie" }
      */
     tags?: Tags;
-    /**
-     * Send push notification
-     */
-    notify?: boolean;
-    /**
-     * Parser for description
-     */
-    parser?: Parser;
     /**
      * Event timestamp
      */
@@ -112,6 +97,17 @@ interface PromptInteractivityOptions {
     ci?: boolean;
 }
 export declare function canPromptInteractively({ silent, stdinIsTTY, stdoutIsTTY, ci, }?: PromptInteractivityOptions): boolean;
+interface CanOpenExternalUrlOptions {
+    ci?: boolean;
+    stdinIsTTY?: boolean;
+    stdoutIsTTY?: boolean;
+    display?: string | undefined;
+    platform?: NodeJS.Platform;
+}
+/** Whether the CLI may spawn a desktop browser for upgrade/docs links. */
+export declare function canOpenExternalUrl(options?: CanOpenExternalUrlOptions): boolean;
+/** Best-effort browser open; skipped in CI/headless and when xdg-open is missing. */
+export declare function openExternalUrl(url: string): Promise<void>;
 export declare function projectIsMonorepo(dir: string): boolean;
 export declare function findRoot(dir: string): string;
 export declare function getPackageScripts(f?: string, file?: string | undefined): Record<string, string>;
@@ -505,9 +501,14 @@ export declare function createSupabaseClient(apikey: string, supaHost?: string,
                 channel_device_count?: number;
                 created_at?: string | null;
                 created_from_onboarding?: boolean;
-                default_upload_channel?: string;
+                default_upload_channel? /**
+                 * User ID
+                 * example: "user-123"
+                 */: string;
                 existing_app?: boolean;
-                expose_metadata?: boolean;
+                expose_metadata? /**
+                 * Organization ID for actor-scoped tracking.
+                 */: boolean;
                 icon_url: string;
                 id?: string | null;
                 ios_store_url?: string | null;
@@ -4757,10 +4758,6 @@ export declare function createSupabaseClient(apikey: string, supaHost?: string,
             };
             Returns: boolean;
         };
-        is_rbac_enabled_globally: {
-            Args: never;
-            Returns: boolean;
-        };
         is_recent_email_otp_verified: {
             Args: {
                 user_id: string;
@@ -5719,11 +5716,14 @@ export declare function shouldWarnTrialExpiry(options: {
 export declare function isAllowedActionOrg(supabase: SupabaseClient<Database>, orgId: string): Promise<boolean>;
 /** Validate metered plan actions while preserving app-scoped RBAC context when available. */
 export declare function isAllowedPlanActions(supabase: SupabaseClient<Database>, orgId: string, actions: Database['public']['Enums']['action_type'][], appId?: string): Promise<boolean>;
+export type MeteredPlanCheckResult = 'allowed' | 'billing_denied' | 'permission_denied';
+/** Distinguish RBAC denials on app-scoped plan RPCs from real billing limits. */
+export declare function resolveMeteredPlanAllowed(supabase: SupabaseClient<Database>, orgId: string, actions: Database['public']['Enums']['action_type'][], appId?: string): Promise<MeteredPlanCheckResult>;
 export declare function checkRemoteCliMessages(supabase: SupabaseClient<Database>, orgId: string, cliVersion: string): Promise<void>;
 export declare function checkPlanValid(supabase: SupabaseClient<Database>, orgId: string, appId?: string, warning?: boolean): Promise<void>;
 export declare function checkPlanValidUpload(supabase: SupabaseClient<Database>, orgId: string, appId?: string, warning?: boolean): Promise<void>;
 export declare function findSavedKeySilent(): string | undefined;
-export declare function findSavedKey(quiet?: boolean): string;
+export declare function findSavedKey(quiet?: boolean, report?: (message: string) => void): string;
 export declare function getContentType(filename: string): string;
 export declare function findProjectType(options?: {
     quiet?: boolean;
@@ -5809,10 +5809,16 @@ export declare function updateOrCreateChannel(supabase: SupabaseClient<Database>
     updated_at: string;
     version: number | null;
 }>>;
-export declare function sendEvent(capgkey: string, payload: TrackOptions & {
-    notifyConsole?: boolean;
+type SendEventPayload = TrackOptions & {
     nonPersonTags?: Record<string, string | number | boolean>;
-}, verbose?: boolean, signal?: AbortSignal): Promise<void>;
+} & ({
+    notifyConsole: true;
+    icon?: string;
+} | {
+    notifyConsole?: false;
+    icon?: never;
+});
+export declare function sendEvent(capgkey: string, payload: SendEventPayload, verbose?: boolean, signal?: AbortSignal): Promise<void>;
 export declare function show2FADeniedError(organizationName?: string): never;
 export declare function filterOrgsByPermission(supabase: SupabaseClient<Database>, apikey: string, orgs: Organization[], permissionKey: string): Promise<Organization[]>;
 export declare function getOrganizationListWithPermission(supabase: SupabaseClient<Database>, apikey: string, permissionKey: string): Promise<{

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.39.0",
+  "version": "8.41.4",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
   "homepage": "https://github.com/Cap-go/capgo/tree/main/cli#readme",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Cap-go/capgo.git",
+    "url": "https://github.com/Cap-go/capgo.app",
     "directory": "cli"
   },
   "bugs": {
@@ -105,6 +105,7 @@
     "test:mcp-build-job": "bun test/test-mcp-build-job.mjs",
     "test:mcp-build-tools": "bun test/test-mcp-build-tools.mjs",
     "test:app-created-source": "bun test/test-app-created-source.mjs",
+    "test:app-list-output-text": "bun test/test-app-list-output-text.mjs",
     "test:doctor-analytics": "bun test/test-doctor-analytics.mjs",
     "test:posthog-exception": "bun test/test-posthog-exception.mjs",
     "test:onboarding-recovery": "bun test/test-onboarding-recovery.mjs",
@@ -165,8 +166,9 @@
     "test:android-version": "bun test/test-android-version.mjs",
     "test:platform-flow-contract": "bun test/test-platform-flow-contract.mjs",
     "test:tail-engine-shared": "bun test/test-tail-engine-shared.mjs",
-    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
+    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:app-list-output-text && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:builder-project-discovery && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
+    "test:builder-project-discovery": "bun test/test-builder-project-discovery.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",
     "test:ai-analyze-flow": "bun test/test-ai-analyze-flow.mjs",
     "test:cicd-failure-help": "bun test/test-cicd-failure-help.mjs",
@@ -193,7 +195,7 @@
     "test:support-upload-prompt": "bun test/test-support-upload-prompt.mjs",
     "test:support-bundle-files": "bun test/test-support-bundle-files.mjs",
     "test:mcp-live-update-onboarding": "bun test/test-mcp-live-update-onboarding.mjs",
-    "test:app-set-options": "bun test/test-app-set-options.mjs",
+    "test:app-set-options": "bun test/test-app-set-options.mjs && bun test/test-app-list-options.mjs",
     "test:android-reporting-api": "bun test/test-android-reporting-api.mjs",
     "test:android-app-verification": "bun test/test-android-app-verification.mjs",
     "test:android-rename": "bun test/test-android-rename.mjs",
@@ -215,7 +217,9 @@
   },
   "dependencies": {
     "@inkjs/ui": "^2.0.0",
+    "@manypkg/tools": "^2.1.2",
     "@rrweb/types": "^2.1.1",
+    "@standard-schema/spec": "^1.1.0",
     "@xmldom/xmldom": "^0.9.10",
     "@xterm/addon-serialize": "^0.14.0",
     "@xterm/headless": "^6.0.0",
@@ -228,8 +232,8 @@
     "react": "^19.2.8",
     "rrweb-snapshot": "^2.1.1",
     "string-width": "^8.2.2",
-    "zod": "^4.4.3",
-    "@standard-schema/spec": "^1.1.0"
+    "typescript": "6.0.3",
+    "zod": "^4.4.3"
   },
   "optionalDependencies": {
     "@capgo/cli-helper-darwin-arm64": "^1.1.1",
@@ -274,7 +278,6 @@
     "prettyjson": "^1.2.5",
     "tmp": "^0.2.7",
     "tus-js-client": "^4.3.1",
-    "typescript": "6.0.3",
     "ws": "^8.21.1"
   }
 }

package/skills/_artifacts/domain_map.yaml

@@ -0,0 +1,32 @@
+domains:
+  - name: cli-usage
+    summary: High-level command routing, setup, diagnostics, app management, docs generation, MCP, and GitHub support commands.
+    primary_sources:
+      - webdocs/init.mdx
+      - webdocs/doctor.mdx
+      - webdocs/login.mdx
+      - webdocs/app.mdx
+      - webdocs/account.mdx
+      - webdocs/probe.mdx
+      - webdocs/star.mdx
+      - webdocs/star-all.mdx
+      - src/index.ts
+  - name: ota-release-management
+    summary: OTA bundle uploads, channel operations, preview QR codes, compatibility checks, cleanup, and encryption-key workflows.
+    primary_sources:
+      - webdocs/bundle.mdx
+      - webdocs/channel.mdx
+      - webdocs/key.mdx
+      - src/index.ts
+  - name: native-builds
+    summary: Native cloud build requests and local build credential management for iOS and Android.
+    primary_sources:
+      - webdocs/build.mdx
+      - src/index.ts
+  - name: organization-management
+    summary: Account lookup, organization administration, and deprecated organisation aliases.
+    primary_sources:
+      - webdocs/account.mdx
+      - webdocs/organization.mdx
+      - webdocs/organisation.mdx
+      - src/index.ts

package/skills/_artifacts/skill_spec.md

@@ -0,0 +1,30 @@
+# Capgo CLI skill spec
+
+## Goal
+
+Provide a small Capgo CLI skill set that helps an agent choose and invoke the correct CLI commands for app setup, OTA release operations, organization administration, MCP setup, GitHub support commands, and native cloud builds without exceeding TanStack Intent size limits.
+
+## Sources
+
+- `webdocs/*.mdx` for published command descriptions, examples, and option tables.
+- `src/index.ts` for the currently registered commands, aliases, and flags that may not yet be fully reflected in the web docs.
+- `AGENTS.md` for repository-specific maintenance requirements.
+
+## Skill set
+
+- `usage`: routing, setup, diagnostics, app commands, docs generation, MCP, and GitHub support commands.
+- `release-management`: bundle, channel, compatibility, cleanup, and encryption-key workflows.
+- `native-builds`: native cloud build requests and build credential storage/update flows.
+- `organization-management`: account ID lookup, organization admin flows, and deprecated `organisation` aliases.
+
+## Scope
+
+- Include the documented command purpose, invocation patterns, key options, and important caveats.
+- Prefer the public user-facing examples already used by the project.
+- Keep the skills aligned with the published docs and current CLI registration.
+
+## Maintenance rules
+
+- Any CLI command or option change should update the relevant `skills/*/SKILL.md` file in the same pull request.
+- Use `webdocs/` as the primary wording source and `src/index.ts` as the completeness check.
+- Validate the skills with `bunx @tanstack/intent@latest validate` before release.

package/skills/_artifacts/skill_tree.yaml

@@ -0,0 +1,17 @@
+skills:
+  - name: usage
+    path: skills/usage/SKILL.md
+    domain: cli-usage
+    focus: High-level routing and shared invocation rules.
+  - name: release-management
+    path: skills/release-management/SKILL.md
+    domain: ota-release-management
+    focus: OTA bundle, channel, compatibility, cleanup, and encryption workflows.
+  - name: native-builds
+    path: skills/native-builds/SKILL.md
+    domain: native-builds
+    focus: Native build request flows and local build credential management.
+  - name: organization-management
+    path: skills/organization-management/SKILL.md
+    domain: organization-management
+    focus: Account and organization administration commands, including deprecated aliases.

package/skills/release-management/SKILL.md

@@ -39,6 +39,7 @@ Use this skill for OTA update workflows in Capgo Cloud.
 - Alias: `u`
 - Example: `npx @capgo/cli@latest bundle upload com.example.app --path ./dist --channel production,beta`
 - Progressive rollout example: `npx @capgo/cli@latest bundle upload com.example.app --path ./dist --channel production --rollout 10`
+- Advance an existing rollout: `npx @capgo/cli@latest bundle upload com.example.app --path ./dist --channel production --rollout-advance`
 - Key behavior:
   - Bundle version must be greater than `0.0.0` and unique.
   - Deleted versions cannot be reused.
@@ -55,6 +56,7 @@ Use this skill for OTA update workflows in Capgo Cloud.
   - `-c, --channel <channel[,channel...]>`
   - `--rollout <percentage>`
   - `--rollout-percentage-bps <basisPoints>`
+  - `--rollout-advance` (promote the current rollout target to stable, then set the uploaded bundle as the new rollout; reuses the previous percentage unless `--rollout` or `--rollout-percentage-bps` is also set)
   - `--rollout-cache-ttl-seconds <seconds>`
   - `-e, --external <url>`
   - `--iv-session-key <key>`

package/skills/usage/SKILL.md

@@ -35,7 +35,7 @@ TanStack Intent skills should stay focused and under the validator line limit, s
 ### App-level operations
 
 - `app add [appId]`: create an app in Capgo Cloud.
-- `app list`: list apps under the current account.
+- `app list`: list apps under the current account. Pass `--filter-by-org-id <orgId>` to list only apps from one organization, `--show-org` to include organization names, and `--show-org-id` to include organization IDs. The CLI warns that the filter can hide other accessible apps. Use `npx @capgo/cli@latest app list --output-text` for plain status text with an embedded CSV app table and no interactive terminal formatting.
 - `app delete [appId]`: remove an app.
 - `app set [appId]`: update app settings such as name, icon, retention, metadata exposure, and preview access with `--preview` or `--no-preview`.
 - `app setting [path]`: update Capacitor config values programmatically.
@@ -91,6 +91,7 @@ npx @capgo/cli@latest login YOUR_API_KEY
 npx @capgo/cli@latest doctor
 npx @capgo/cli@latest probe --platform ios
 npx @capgo/cli@latest app add com.example.app --name "My App"
+npx @capgo/cli@latest app list --filter-by-org-id YOUR_ORG_ID --show-org --show-org-id
 npx @capgo/cli@latest get-qr com.example.app --channel production
 npx @capgo/cli@latest star-all
 ```