@capuchoo/cli 0.8.0 → 0.9.0

package/README.md

@@ -29,7 +29,7 @@ $ npm install -g @capuchoo/cli
 $ capuchoo COMMAND
 running command...
 $ capuchoo (--version)
-@capuchoo/cli/0.7.0 win32-x64 node-v24.19.0
+@capuchoo/cli/0.9.0 win32-x64 node-v24.20.0
 $ capuchoo --help [COMMAND]
 USAGE
   $ capuchoo COMMAND
@@ -43,9 +43,15 @@ USAGE
 <!-- commands -->
 
 - [`capuchoo app delete [APPID]`](#capuchoo-app-delete-appid)
+- [`capuchoo app grant EMAIL ROLE`](#capuchoo-app-grant-email-role)
 - [`capuchoo app list`](#capuchoo-app-list)
+- [`capuchoo app revoke EMAIL`](#capuchoo-app-revoke-email)
+- [`capuchoo app roles`](#capuchoo-app-roles)
+- [`capuchoo auth issue`](#capuchoo-auth-issue)
+- [`capuchoo auth keys`](#capuchoo-auth-keys)
 - [`capuchoo auth login`](#capuchoo-auth-login)
 - [`capuchoo auth logout`](#capuchoo-auth-logout)
+- [`capuchoo auth revoke ID`](#capuchoo-auth-revoke-id)
 - [`capuchoo auth whoami`](#capuchoo-auth-whoami)
 - [`capuchoo channel create [NAME]`](#capuchoo-channel-create-name)
 - [`capuchoo channel delete [NAME]`](#capuchoo-channel-delete-name)
@@ -59,7 +65,9 @@ USAGE
 - [`capuchoo init`](#capuchoo-init)
 - [`capuchoo menu`](#capuchoo-menu)
 - [`capuchoo org create [NAME]`](#capuchoo-org-create-name)
+- [`capuchoo org invite EMAIL ROLE`](#capuchoo-org-invite-email-role)
 - [`capuchoo org list`](#capuchoo-org-list)
+- [`capuchoo org members`](#capuchoo-org-members)
 - [`capuchoo setup`](#capuchoo-setup)
 - [`capuchoo version bump TYPE`](#capuchoo-version-bump-type)
 - [`capuchoo version sync`](#capuchoo-version-sync)
@@ -86,7 +94,31 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/app/delete.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/app/delete.ts)_
+[src/commands/app/delete.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/app/delete.ts)_
+
+## `capuchoo app grant EMAIL ROLE`
+
+Give someone a role on this app
+
+```
+USAGE
+  $ capuchoo app grant EMAIL ROLE
+
+ARGUMENTS
+  EMAIL  Account to grant
+  ROLE   (admin|developer|tester|viewer) One of admin, developer, tester, viewer
+
+DESCRIPTION
+  Give someone a role on this app
+
+EXAMPLES
+  $ capuchoo app grant dev@company.com developer
+
+  $ capuchoo app grant qa@company.com tester
+```
+
+_See code:
+[src/commands/app/grant.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/app/grant.ts)_
 
 ## `capuchoo app list`
 
@@ -104,11 +136,97 @@ DESCRIPTION
 ```
 
 _See code:
-[src/commands/app/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/app/list.ts)_
+[src/commands/app/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/app/list.ts)_
+
+## `capuchoo app revoke EMAIL`
+
+Remove someone's role on this app
+
+```
+USAGE
+  $ capuchoo app revoke EMAIL [-y]
+
+ARGUMENTS
+  EMAIL  Account to revoke
+
+FLAGS
+  -y, --yes  Skip the confirmation
+
+DESCRIPTION
+  Remove someone's role on this app
+
+EXAMPLES
+  $ capuchoo app revoke dev@company.com
+```
+
+_See code:
+[src/commands/app/revoke.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/app/revoke.ts)_
+
+## `capuchoo app roles`
+
+Show who can do what on this app
+
+```
+USAGE
+  $ capuchoo app roles
+
+DESCRIPTION
+  Show who can do what on this app
+
+EXAMPLES
+  $ capuchoo app roles
+```
+
+_See code:
+[src/commands/app/roles.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/app/roles.ts)_
+
+## `capuchoo auth issue`
+
+Create an API key, optionally limited to one app and one role
+
+```
+USAGE
+  $ capuchoo auth issue [--name <value>] [--role viewer|tester|developer|admin] [--this-app]
+
+FLAGS
+  --name=<value>   Label shown in capuchoo auth keys
+  --role=<option>  Ceiling on what the key may do: viewer, tester, developer, admin
+                   <options: viewer|tester|developer|admin>
+  --this-app       Restrict the key to the app this directory is linked to
+
+DESCRIPTION
+  Create an API key, optionally limited to one app and one role
+
+EXAMPLES
+  $ capuchoo auth issue --name ci --role developer --this-app
+
+  $ capuchoo auth issue --name readonly --role viewer
+```
+
+_See code:
+[src/commands/auth/issue.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/auth/issue.ts)_
+
+## `capuchoo auth keys`
+
+List the API keys on this account
+
+```
+USAGE
+  $ capuchoo auth keys
+
+DESCRIPTION
+  List the API keys on this account
+
+EXAMPLES
+  $ capuchoo auth keys
+```
+
+_See code:
+[src/commands/auth/keys.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/auth/keys.ts)_
 
 ## `capuchoo auth login`
 
-Store an API key for the Capuchoo backend
+Sign in to a Capuchoo backend
 
 ```
 USAGE
@@ -119,7 +237,7 @@ FLAGS
   -k, --api-key=<value>   API key from Settings > API Keys in the dashboard
 
 DESCRIPTION
-  Store an API key for the Capuchoo backend
+  Sign in to a Capuchoo backend
 
 EXAMPLES
   $ capuchoo auth login
@@ -128,7 +246,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/auth/login.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/auth/login.ts)_
+[src/commands/auth/login.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/auth/login.ts)_
 
 ## `capuchoo auth logout`
 
@@ -143,7 +261,31 @@ DESCRIPTION
 ```
 
 _See code:
-[src/commands/auth/logout.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/auth/logout.ts)_
+[src/commands/auth/logout.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/auth/logout.ts)_
+
+## `capuchoo auth revoke ID`
+
+Revoke an API key
+
+```
+USAGE
+  $ capuchoo auth revoke ID [-y]
+
+ARGUMENTS
+  ID  Key id, from capuchoo auth keys
+
+FLAGS
+  -y, --yes  Skip the confirmation
+
+DESCRIPTION
+  Revoke an API key
+
+EXAMPLES
+  $ capuchoo auth revoke <id>
+```
+
+_See code:
+[src/commands/auth/revoke.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/auth/revoke.ts)_
 
 ## `capuchoo auth whoami`
 
@@ -161,7 +303,7 @@ DESCRIPTION
 ```
 
 _See code:
-[src/commands/auth/whoami.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/auth/whoami.ts)_
+[src/commands/auth/whoami.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/auth/whoami.ts)_
 
 ## `capuchoo channel create [NAME]`
 
@@ -192,7 +334,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/channel/create.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/channel/create.ts)_
+[src/commands/channel/create.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/channel/create.ts)_
 
 ## `capuchoo channel delete [NAME]`
 
@@ -218,7 +360,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/channel/delete.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/channel/delete.ts)_
+[src/commands/channel/delete.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/channel/delete.ts)_
 
 ## `capuchoo channel list`
 
@@ -236,7 +378,7 @@ DESCRIPTION
 ```
 
 _See code:
-[src/commands/channel/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/channel/list.ts)_
+[src/commands/channel/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/channel/list.ts)_
 
 ## `capuchoo config list`
 
@@ -254,7 +396,7 @@ DESCRIPTION
 ```
 
 _See code:
-[src/commands/config/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/config/list.ts)_
+[src/commands/config/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/config/list.ts)_
 
 ## `capuchoo config set KEY VALUE`
 
@@ -278,7 +420,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/config/set.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/config/set.ts)_
+[src/commands/config/set.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/config/set.ts)_
 
 ## `capuchoo deploy native`
 
@@ -322,7 +464,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/deploy/native.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/deploy/native.ts)_
+[src/commands/deploy/native.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/deploy/native.ts)_
 
 ## `capuchoo deploy ota`
 
@@ -359,7 +501,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/deploy/ota.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/deploy/ota.ts)_
+[src/commands/deploy/ota.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/deploy/ota.ts)_
 
 ## `capuchoo doctor`
 
@@ -377,7 +519,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/doctor.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/doctor.ts)_
+[src/commands/doctor.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/doctor.ts)_
 
 ## `capuchoo help [COMMAND]`
 
@@ -431,7 +573,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/init.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/init.ts)_
+[src/commands/init.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/init.ts)_
 
 ## `capuchoo menu`
 
@@ -451,7 +593,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/menu.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/menu.ts)_
+[src/commands/menu.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/menu.ts)_
 
 ## `capuchoo org create [NAME]`
 
@@ -477,7 +619,32 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/org/create.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/org/create.ts)_
+[src/commands/org/create.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/org/create.ts)_
+
+## `capuchoo org invite EMAIL ROLE`
+
+Add an existing account to an organization
+
+```
+USAGE
+  $ capuchoo org invite EMAIL ROLE [--org <value>]
+
+ARGUMENTS
+  EMAIL  Account to add
+  ROLE   (owner|admin|member) One of owner, admin, member
+
+FLAGS
+  --org=<value>  Organization by name or id
+
+DESCRIPTION
+  Add an existing account to an organization
+
+EXAMPLES
+  $ capuchoo org invite dev@company.com member
+```
+
+_See code:
+[src/commands/org/invite.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/org/invite.ts)_
 
 ## `capuchoo org list`
 
@@ -495,7 +662,28 @@ DESCRIPTION
 ```
 
 _See code:
-[src/commands/org/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/org/list.ts)_
+[src/commands/org/list.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/org/list.ts)_
+
+## `capuchoo org members`
+
+List the people in an organization
+
+```
+USAGE
+  $ capuchoo org members [--org <value>]
+
+FLAGS
+  --org=<value>  Organization by name or id
+
+DESCRIPTION
+  List the people in an organization
+
+EXAMPLES
+  $ capuchoo org members
+```
+
+_See code:
+[src/commands/org/members.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/org/members.ts)_
 
 ## `capuchoo setup`
 
@@ -524,7 +712,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/setup.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/setup.ts)_
+[src/commands/setup.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/setup.ts)_
 
 ## `capuchoo version bump TYPE`
 
@@ -551,7 +739,7 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/version/bump.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/version/bump.ts)_
+[src/commands/version/bump.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/version/bump.ts)_
 
 ## `capuchoo version sync`
 
@@ -577,5 +765,5 @@ EXAMPLES
 ```
 
 _See code:
-[src/commands/version/sync.ts](https://github.com/aybinv7/capuchoo/blob/v0.7.0/src/commands/version/sync.ts)_
+[src/commands/version/sync.ts](https://github.com/aybinv7/capuchoo/blob/v0.9.0/src/commands/version/sync.ts)_
 <!-- commandsstop -->

package/dist/cli/members.d.ts

@@ -0,0 +1,23 @@
+import type { Membership } from "../services/cloud.js";
+/** The email on a membership row, or the raw user id when the join came back empty. */
+export declare function emailOf(member: Membership): string;
+export interface Resolution {
+    ok: boolean;
+    userId?: string;
+    /** What to tell the caller when it failed. */
+    problem?: string;
+}
+/**
+ * Finds a member by email, case-insensitively.
+ *
+ * Resolved from a list the caller already has rather than by asking the server
+ * to look an address up: there is no such endpoint, and adding one would be an
+ * email enumeration surface.
+ */
+export declare function resolveByEmail(members: Membership[], email: string): Resolution;
+/** Rows for a table, widest-email-first so the roles line up. */
+export declare function membershipRows(members: Membership[]): Array<{
+    email: string;
+    role: string;
+}>;
+//# sourceMappingURL=members.d.ts.map

package/dist/cli/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../src/cli/members.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,uFAAuF;AACvF,wBAAgB,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAElD;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,CAwB/E;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAI5F"}

package/dist/cli/members.js

@@ -0,0 +1,38 @@
+/** The email on a membership row, or the raw user id when the join came back empty. */
+export function emailOf(member) {
+    return member.users?.email ?? member.user_id;
+}
+/**
+ * Finds a member by email, case-insensitively.
+ *
+ * Resolved from a list the caller already has rather than by asking the server
+ * to look an address up: there is no such endpoint, and adding one would be an
+ * email enumeration surface.
+ */
+export function resolveByEmail(members, email) {
+    const wanted = email.trim().toLowerCase();
+    if (!wanted)
+        return { ok: false, problem: "An email is required." };
+    const matches = members.filter((member) => emailOf(member).toLowerCase() === wanted);
+    if (matches.length === 0) {
+        const known = members.map(emailOf).sort();
+        return {
+            ok: false,
+            problem: `No member with the email "${email}". ` +
+                (known.length > 0 ? `Present: ${known.join(", ")}.` : "There are none yet."),
+        };
+    }
+    // A duplicate would make the choice arbitrary, and removing the wrong person
+    // is not recoverable from here.
+    if (matches.length > 1) {
+        return { ok: false, problem: `"${email}" matches ${matches.length} members. Resolve by hand.` };
+    }
+    return { ok: true, userId: matches[0].user_id };
+}
+/** Rows for a table, widest-email-first so the roles line up. */
+export function membershipRows(members) {
+    return members
+        .map((member) => ({ email: emailOf(member), role: member.role }))
+        .sort((a, b) => a.email.localeCompare(b.email));
+}
+//# sourceMappingURL=members.js.map

package/dist/cli/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../src/cli/members.ts"],"names":[],"mappings":"AAEA,uFAAuF;AACvF,MAAM,UAAU,OAAO,CAAC,MAAkB;IACxC,OAAO,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC;AAC/C,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAqB,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAEpE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAErF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,6BAA6B,KAAK,KAAK;gBACvC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC;SAC/E,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,gCAAgC;IAChC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,KAAK,aAAa,OAAO,CAAC,MAAM,4BAA4B,EAAE,CAAC;IAClG,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,CAAC;AACnD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,OAAqB;IAClD,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;SAChE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/cli/onboarding.d.ts

@@ -0,0 +1,41 @@
+/** What the CLI can see about this machine and this directory. */
+export interface OnboardingFacts {
+    signedIn: boolean;
+    /** Whether this looks like an application at all - a package.json. */
+    inAppDirectory: boolean;
+    /** Whether .capuchoo/project.json exists. */
+    linked: boolean;
+    updaterInstalled: boolean;
+    /** null when not fetched, or when the backend could not be reached. */
+    channels?: Array<{
+        name: string;
+        servingBundle: boolean;
+    }> | null | undefined;
+}
+export interface NextStep {
+    /** oclif command id. */
+    command: string;
+    label: string;
+    why: string;
+}
+export type Stage = "signed-out" | "not-an-app" | "unlinked" | "incomplete" | "no-channels" | "nothing-served" | "ready";
+export interface OnboardingState {
+    stage: Stage;
+    /** The one thing to do now, or null when there is nothing to recommend. */
+    next: NextStep | null;
+}
+/**
+ * The single next action, so the first thing someone sees is a step rather than
+ * a list to guess from.
+ *
+ * Order is by dependency: nothing can be done unsigned, nothing app-specific
+ * without an app, nothing published without a channel.
+ */
+export declare function resolveOnboarding(facts: OnboardingFacts): OnboardingState;
+/** Commands worth hiding in this state, by oclif id. */
+export declare function hiddenCommands(facts: OnboardingFacts): Set<string>;
+/** A label that reads correctly for the current state, or null to keep the default. */
+export declare function labelFor(command: string, facts: OnboardingFacts): string | null;
+/** Whether only the next step should be offered, rather than the whole menu. */
+export declare function isBlocked(state: OnboardingState): boolean;
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/cli/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/cli/onboarding.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,sEAAsE;IACtE,cAAc,EAAE,OAAO,CAAC;IACxB,6CAA6C;IAC7C,MAAM,EAAE,OAAO,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;CAC/E;AAED,MAAM,WAAW,QAAQ;IACvB,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,KAAK,GACb,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,OAAO,CAAC;AAEZ,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,KAAK,CAAC;IACb,2EAA2E;IAC3E,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,CAsEzE;AAED,wDAAwD;AACxD,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,CAQlE;AAED,uFAAuF;AACvF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAI/E;AAED,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAEzD"}

package/dist/cli/onboarding.js

@@ -0,0 +1,94 @@
+/**
+ * The single next action, so the first thing someone sees is a step rather than
+ * a list to guess from.
+ *
+ * Order is by dependency: nothing can be done unsigned, nothing app-specific
+ * without an app, nothing published without a channel.
+ */
+export function resolveOnboarding(facts) {
+    if (!facts.signedIn) {
+        return {
+            stage: "signed-out",
+            next: {
+                command: "auth:login",
+                label: "Sign in",
+                why: "Nothing can reach the backend until this machine has a credential.",
+            },
+        };
+    }
+    if (!facts.inAppDirectory) {
+        return { stage: "not-an-app", next: null };
+    }
+    if (!facts.linked) {
+        return {
+            stage: "unlinked",
+            next: {
+                command: "setup",
+                label: "Set this app up",
+                why: "Installs what the app needs and links it to Capuchoo.",
+            },
+        };
+    }
+    if (!facts.updaterInstalled) {
+        return {
+            stage: "incomplete",
+            next: {
+                command: "setup",
+                label: "Finish setting up",
+                why: "Linked, but the app cannot check for updates without @capuchoo/updater.",
+            },
+        };
+    }
+    // Channels are the only fact that needs the network, so an unknown value must
+    // not be reported as a problem.
+    if (facts.channels && facts.channels.length === 0) {
+        return {
+            stage: "no-channels",
+            next: {
+                command: "channel:create",
+                label: "Create a channel",
+                why: "There is nowhere to publish to yet.",
+            },
+        };
+    }
+    if (facts.channels && !facts.channels.some((channel) => channel.servingBundle)) {
+        return {
+            stage: "nothing-served",
+            next: {
+                command: "deploy:ota",
+                label: "Publish the first bundle",
+                why: "Every channel exists but none is serving anything, so devices get no update.",
+            },
+        };
+    }
+    return {
+        stage: "ready",
+        next: {
+            command: "deploy:ota",
+            label: "Publish an update",
+            why: "Everything is wired up.",
+        },
+    };
+}
+/** Commands worth hiding in this state, by oclif id. */
+export function hiddenCommands(facts) {
+    if (!facts.signedIn) {
+        // Signing in is the only useful action, and `config` is how someone points
+        // at a different backend before trying.
+        return new Set(["auth:logout", "auth:whoami"]);
+    }
+    return new Set(["auth:login"]);
+}
+/** A label that reads correctly for the current state, or null to keep the default. */
+export function labelFor(command, facts) {
+    if (command === "setup" && facts.linked && facts.updaterInstalled)
+        return "setup (re-run)";
+    if (command === "init" && facts.linked)
+        return "init (re-link)";
+    return null;
+}
+/** Whether only the next step should be offered, rather than the whole menu. */
+export function isBlocked(state) {
+    return state.stage === "signed-out";
+}
+//# sourceMappingURL=onboarding.js.map

package/dist/cli/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/cli/onboarding.ts"],"names":[],"mappings":"AAkCA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE;gBACJ,OAAO,EAAE,YAAY;gBACrB,KAAK,EAAE,SAAS;gBAChB,GAAG,EAAE,oEAAoE;aAC1E;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO;gBAChB,KAAK,EAAE,iBAAiB;gBACxB,GAAG,EAAE,uDAAuD;aAC7D;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO;gBAChB,KAAK,EAAE,mBAAmB;gBAC1B,GAAG,EAAE,yEAAyE;aAC/E;SACF,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,gCAAgC;IAChC,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE;gBACJ,OAAO,EAAE,gBAAgB;gBACzB,KAAK,EAAE,kBAAkB;gBACzB,GAAG,EAAE,qCAAqC;aAC3C;SACF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/E,OAAO;YACL,KAAK,EAAE,gBAAgB;YACvB,IAAI,EAAE;gBACJ,OAAO,EAAE,YAAY;gBACrB,KAAK,EAAE,0BAA0B;gBACjC,GAAG,EAAE,8EAA8E;aACpF;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO;QACd,IAAI,EAAE;YACJ,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,mBAAmB;YAC1B,GAAG,EAAE,yBAAyB;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,2EAA2E;QAC3E,wCAAwC;QACxC,OAAO,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,KAAsB;IAC9D,IAAI,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,gBAAgB;QAAE,OAAO,gBAAgB,CAAC;IAC3F,IAAI,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,gBAAgB,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC;AACtC,CAAC"}

package/dist/cli/team.d.ts

@@ -0,0 +1,16 @@
+import type { Command } from "@oclif/core";
+import type { ResolvedProjectConfig } from "@capuchoo/core";
+import { CloudClient } from "../services/cloud.js";
+export declare const APP_ROLES: readonly ["admin", "developer", "tester", "viewer"];
+export declare const ORG_ROLES: readonly ["owner", "admin", "member"];
+/** Roles that may ship code, mirroring PUBLISH_ROLES on the server. */
+export declare const PUBLISH_ROLES: readonly string[];
+export interface LinkedApp {
+    cloud: CloudClient;
+    project: ResolvedProjectConfig;
+}
+/** Credentials plus a linked app, or a clear error naming the missing half. */
+export declare function requireLinkedApp(command: Command): LinkedApp;
+/** Credentials only, for commands that are not about one app. */
+export declare function requireCloud(command: Command): CloudClient;
+//# sourceMappingURL=team.d.ts.map

package/dist/cli/team.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.d.ts","sourceRoot":"","sources":["../../src/cli/team.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,eAAO,MAAM,SAAS,qDAAsD,CAAC;AAC7E,eAAO,MAAM,SAAS,uCAAwC,CAAC;AAE/D,uEAAuE;AACvE,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAA2B,CAAC;AAEvE,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,qBAAqB,CAAC;CAChC;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,CAe5D;AAED,iEAAiE;AACjE,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAO1D"}

package/dist/cli/team.js

@@ -0,0 +1,32 @@
+import chalk from "chalk";
+import { normaliseProjectConfig } from "@capuchoo/core";
+import { CloudClient } from "../services/cloud.js";
+import { readProjectConfig, resolveCredentials } from "../utils/config.js";
+export const APP_ROLES = ["admin", "developer", "tester", "viewer"];
+export const ORG_ROLES = ["owner", "admin", "member"];
+/** Roles that may ship code, mirroring PUBLISH_ROLES on the server. */
+export const PUBLISH_ROLES = ["admin", "developer"];
+/** Credentials plus a linked app, or a clear error naming the missing half. */
+export function requireLinkedApp(command) {
+    const credentials = resolveCredentials();
+    if (!credentials) {
+        command.error(`Not signed in. Run ${chalk.cyan("capuchoo auth login")}.`);
+    }
+    const raw = readProjectConfig(process.cwd());
+    if (!raw) {
+        command.error(`This directory is not linked to an app. Run ${chalk.cyan("capuchoo init")}.`);
+    }
+    return {
+        cloud: new CloudClient(credentials.endpoint, credentials.apiKey),
+        project: normaliseProjectConfig(raw),
+    };
+}
+/** Credentials only, for commands that are not about one app. */
+export function requireCloud(command) {
+    const credentials = resolveCredentials();
+    if (!credentials) {
+        command.error(`Not signed in. Run ${chalk.cyan("capuchoo auth login")}.`);
+    }
+    return new CloudClient(credentials.endpoint, credentials.apiKey);
+}
+//# sourceMappingURL=team.js.map

package/dist/cli/team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../../src/cli/team.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE3E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAE/D,uEAAuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAOvE,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,+CAA+C,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC;QAChE,OAAO,EAAE,sBAAsB,CAAC,GAAG,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC"}