@capgo/cli 8.9.1 → 8.10.0

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.9.1",
+  "version": "8.10.0",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
@@ -111,6 +111,7 @@
     "test:init-guardrails": "bun test/test-init-guardrails.mjs",
     "test:prompt-preferences": "bun test/test-prompt-preferences.mjs",
     "test:esm-sdk": "node test/test-sdk-esm.mjs",
+    "test:auth-session": "bun test/test-auth-session.mjs",
     "test:mcp": "node test/test-mcp.mjs",
     "test:version-detection": "node test/test-get-installed-version.mjs",
     "test:version-detection:setup": "./test/fixtures/setup-test-projects.sh",
@@ -151,7 +152,7 @@
     "test:ios-verify-app": "bun test/test-ios-verify-app.mjs",
     "test:platform-flow-contract": "bun test/test-platform-flow-contract.mjs",
     "test:tail-engine-shared": "bun test/test-tail-engine-shared.mjs",
-    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:platform-flow-contract && bun run test:tail-engine-shared",
+    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:platform-flow-contract && bun run test:tail-engine-shared",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",
     "test:ai-analyze-flow": "bun test/test-ai-analyze-flow.mjs",

package/dist/src/api/channels.d.ts

@@ -1245,6 +1245,7 @@ export declare function delChannelDevices(supabase: SupabaseClient<Database>, ap
                 deleted_at: string | null;
                 id: number;
                 owner_org: string;
+                transfer_history: import("../types/supabase.types").Json[] | null;
             };
             Insert: {
                 app_id: string;
@@ -1252,6 +1253,7 @@ export declare function delChannelDevices(supabase: SupabaseClient<Database>, ap
                 deleted_at?: string | null;
                 id?: number;
                 owner_org: string;
+                transfer_history?: import("../types/supabase.types").Json[] | null;
             };
             Update: {
                 app_id?: string;
@@ -1259,6 +1261,7 @@ export declare function delChannelDevices(supabase: SupabaseClient<Database>, ap
                 deleted_at?: string | null;
                 id?: number;
                 owner_org?: string;
+                transfer_history?: import("../types/supabase.types").Json[] | null;
             };
             Relationships: [];
         };

package/dist/src/auth/session.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Shared, UI-free authentication core.
+ *
+ * `cli/src/login.ts` (the interactive `capgo login` command) and the MCP login
+ * tools (`capgo_login` / `capgo_whoami` / `capgo_logout`) all funnel through these
+ * helpers so there is a single validate / persist / introspect path — no forked
+ * security logic. The user-facing message builders live here too (pure functions)
+ * so the tool wording is covered by unit tests rather than only the integration
+ * smoke test.
+ */
+export type KeySource = 'env' | 'global' | 'local';
+export interface LoginState {
+    loggedIn: boolean;
+    /** Resolved user id — only populated when `validate` succeeded. */
+    userId?: string;
+    /** Where the resolved key came from, if any (also set when a present key fails validation). */
+    source?: KeySource;
+    /**
+     * Only meaningful when `validate` was requested. `true` = confirmed valid this
+     * call; `false` = a key is present but could NOT be verified (network/server
+     * error), so it is reported as still-logged-in-but-unverified rather than as a
+     * definitive sign-out. Undefined when no validation was attempted.
+     */
+    verified?: boolean;
+}
+export interface SaveKeyOptions {
+    /** Persist to `./.capgo` (project-local) instead of `~/.capgo` (global). */
+    local?: boolean;
+    supaHost?: string;
+    supaAnon?: string;
+}
+/**
+ * Validate an API key against Capgo and, if valid, persist it (0o600).
+ * Returns the resolved user id. Throws on a missing/invalid key or a disallowed
+ * local write (local requires a git repository, mirroring `capgo login --local`).
+ *
+ * Nothing is written when validation fails.
+ */
+export declare function validateAndSaveKey(apikey: string, options?: SaveKeyOptions): Promise<{
+    userId: string;
+}>;
+/**
+ * Report whether a saved key exists.
+ *
+ * Presence-only by default (no network) so it is cheap enough to gate every tool
+ * call. Pass `{ validate: true }` (used by `capgo_whoami`) to additionally confirm
+ * the key still authenticates and resolve the user id.
+ */
+export declare function getLoginState(options?: {
+    validate?: boolean;
+}): Promise<LoginState>;
+/**
+ * Remove the saved key. Clears the global key (`~/.capgo`) by default, or the
+ * project-local key (`./.capgo`) when `local` is set. Never touches `CAPGO_TOKEN`
+ * (an env var is not ours to unset). Returns whether a file was actually removed.
+ */
+export declare function clearSavedKey(options?: {
+    local?: boolean;
+}): Promise<{
+    cleared: boolean;
+}>;
+/** Success text for capgo_login. */
+export declare function loginSuccessMessage(userId: string, local: boolean): string;
+/** Status text for capgo_whoami, covering verified / unverified / invalid / signed-out. */
+export declare function whoamiMessage(state: LoginState): string;
+/**
+ * Honest text for capgo_logout. `remaining` is the post-clear login state: if a
+ * credential is still reachable (CAPGO_TOKEN, or the other on-disk scope) we say
+ * so explicitly instead of falsely claiming the session is signed out.
+ */
+export declare function logoutMessage(cleared: boolean, removedLocal: boolean, remaining: LoginState): string;

package/dist/src/build/onboarding/mcp/onboarding-tools.d.ts

@@ -24,10 +24,10 @@ interface McpLike {
  * Production EngineDeps wiring. Exported for tests that pin production-only
  * behavior (clearBuildRecord wiring, keystore file modes).
  */
-export declare function buildDeps(sdk: CapgoSDK): EngineDeps;
+export declare function buildDeps(getSdk: () => CapgoSDK): EngineDeps;
 /**
  * Register the 2-tool onboarding spine onto an MCP server.
  * `depsOverride` is for tests; production passes only `server` + `sdk`.
  */
-export declare function registerOnboardingTools(server: McpLike, sdk: CapgoSDK, depsOverride?: EngineDeps, buildJobDepsOverride?: BuildJobDeps, credentialsManageDepsOverride?: CredentialsManageDeps): void;
+export declare function registerOnboardingTools(server: McpLike, getSdk: () => CapgoSDK, depsOverride?: EngineDeps, buildJobDepsOverride?: BuildJobDeps, credentialsManageDepsOverride?: CredentialsManageDeps): void;
 export {};

package/dist/src/schemas/auth.d.ts

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+export declare const mcpLoginInputSchema: z.ZodObject<{
+    apikey: z.ZodString;
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        global: "global";
+    }>>;
+}, z.core.$strip>;
+export declare const mcpLogoutInputSchema: z.ZodObject<{
+    scope: z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        global: "global";
+    }>>;
+}, z.core.$strip>;

package/dist/src/schemas/index.d.ts

@@ -1,5 +1,6 @@
 export { appDebugOptionsSchema, appOptionsSchema, appSettingOptionsSchema } from './app';
 export type { AppDebugOptions, AppOptions, AppSettingOptions } from './app';
+export { mcpLoginInputSchema, mcpLogoutInputSchema } from './auth';
 export { optionsBaseSchema } from './base';
 export type { OptionsBase } from './base';
 export { allCredentialsSchema, buildCredentialsSchema, buildRequestOptionsSchema, buildRequestResultSchema, credentialFileSchema, savedCredentialsSchema, } from './build';