@construct-space/cli 1.6.4 → 1.6.6

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Construct
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.js

@@ -2845,17 +2845,17 @@ function spaceDir(spaceId) {
 var init_appdir = () => {};
 
 // src/lib/auth.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, unlinkSync, existsSync as existsSync10, readdirSync as readdirSync4, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, unlinkSync, existsSync as existsSync10, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
 import { join as join12, dirname as dirname4 } from "path";
 function listDesktopProfiles() {
   const dir = profilesDir();
   if (!existsSync10(dir))
     return [];
   const results = [];
-  for (const entry of readdirSync4(dir)) {
+  for (const entry of readdirSync5(dir)) {
     const full = join12(dir, entry);
     try {
-      if (!statSync4(full).isDirectory())
+      if (!statSync5(full).isDirectory())
         continue;
       const authPath = join12(full, "auth.json");
       if (!existsSync10(authPath))
@@ -8012,8 +8012,13 @@ function validate2(m) {
     errors2.push("author: must be an object with a name");
   if (!m.icon)
     errors2.push("icon: must be a string");
-  if (!["app", "project", "org"].includes(m.scope))
-    errors2.push('scope: must be "app", "project", or "org"');
+  const allowedScopes = ["app", "org"];
+  if (!Array.isArray(m.scopes) || m.scopes.length === 0 || !m.scopes.every((s) => allowedScopes.includes(s))) {
+    errors2.push('scopes: must be a non-empty array of "app" or "org"');
+  }
+  if (m.projectAware !== undefined && typeof m.projectAware !== "boolean") {
+    errors2.push("projectAware: must be a boolean");
+  }
   if (!m.pages?.length)
     errors2.push("pages: must be a non-empty array");
   if (!m.navigation?.label)
@@ -8252,7 +8257,7 @@ function bundleAgentDir(srcDir, distDir) {
 }
 
 // src/commands/build.ts
-var ASSET_DIRS = ["icons", "assets", "media", "public"];
+var ASSET_DIRS = ["icons", "assets", "media", "public", "bin"];
 function copyAssetDirs(root, distDir) {
   const copied = [];
   for (const name of ASSET_DIRS) {
@@ -8264,29 +8269,167 @@ function copyAssetDirs(root, distDir) {
   }
   return copied;
 }
+function stripTsComments(source) {
+  let out = "";
+  let i = 0;
+  let quote = null;
+  let escaped = false;
+  while (i < source.length) {
+    const ch = source[i];
+    const next = source[i + 1];
+    if (quote) {
+      out += ch;
+      if (escaped) {
+        escaped = false;
+      } else if (ch === "\\") {
+        escaped = true;
+      } else if (ch === quote) {
+        quote = null;
+      }
+      i += 1;
+      continue;
+    }
+    if (ch === '"' || ch === "'" || ch === "`") {
+      quote = ch;
+      out += ch;
+      i += 1;
+      continue;
+    }
+    if (ch === "/" && next === "/") {
+      while (i < source.length && source[i] !== `
+`)
+        i += 1;
+      out += `
+`;
+      continue;
+    }
+    if (ch === "/" && next === "*") {
+      i += 2;
+      while (i < source.length && !(source[i] === "*" && source[i + 1] === "/")) {
+        out += source[i] === `
+` ? `
+` : " ";
+        i += 1;
+      }
+      i += 2;
+      continue;
+    }
+    out += ch;
+    i += 1;
+  }
+  return out;
+}
+function findMatchingBrace(source, openIndex) {
+  let depth = 0;
+  let quote = null;
+  let escaped = false;
+  for (let i = openIndex;i < source.length; i += 1) {
+    const ch = source[i];
+    if (quote) {
+      if (escaped) {
+        escaped = false;
+      } else if (ch === "\\") {
+        escaped = true;
+      } else if (ch === quote) {
+        quote = null;
+      }
+      continue;
+    }
+    if (ch === '"' || ch === "'" || ch === "`") {
+      quote = ch;
+      continue;
+    }
+    if (ch === "{")
+      depth += 1;
+    if (ch === "}") {
+      depth -= 1;
+      if (depth === 0)
+        return i;
+    }
+  }
+  return -1;
+}
+function readObjectEntries(source) {
+  const entries = [];
+  let i = 0;
+  while (i < source.length) {
+    while (i < source.length && /[\s,]/.test(source[i]))
+      i += 1;
+    if (i >= source.length)
+      break;
+    let key = "";
+    const quote = source[i];
+    if (quote === '"' || quote === "'" || quote === "`") {
+      i += 1;
+      const start = i;
+      while (i < source.length && source[i] !== quote) {
+        if (source[i] === "\\")
+          i += 1;
+        i += 1;
+      }
+      key = source.slice(start, i);
+      i += 1;
+    } else {
+      const match = /^[A-Za-z_$][\w$-]*/.exec(source.slice(i));
+      if (!match) {
+        i += 1;
+        continue;
+      }
+      key = match[0];
+      i += key.length;
+    }
+    while (i < source.length && /\s/.test(source[i]))
+      i += 1;
+    if (source[i] !== ":")
+      continue;
+    i += 1;
+    while (i < source.length && /\s/.test(source[i]))
+      i += 1;
+    if (source[i] !== "{")
+      continue;
+    const close = findMatchingBrace(source, i);
+    if (close === -1)
+      break;
+    entries.push({ key, body: source.slice(i + 1, close) });
+    i = close + 1;
+  }
+  return entries;
+}
+function getNamedObjectBody(source, name) {
+  return readObjectEntries(source).find((entry) => entry.key === name)?.body ?? null;
+}
 function extractActionMetadata(actionsPath) {
   try {
-    const source = readFileSync4(actionsPath, "utf-8");
+    const source = stripTsComments(readFileSync4(actionsPath, "utf-8"));
+    const actionsMatch = /export\s+const\s+actions\s*=\s*\{/.exec(source);
+    if (!actionsMatch)
+      return null;
+    const actionsOpen = source.indexOf("{", actionsMatch.index);
+    const actionsClose = findMatchingBrace(source, actionsOpen);
+    if (actionsClose === -1)
+      return null;
+    const actionsBody = source.slice(actionsOpen + 1, actionsClose);
     const result = {};
-    const actionPattern = /(\w+)\s*:\s*\{[^}]*description\s*:\s*['"`]([^'"`]+)['"`]/g;
-    let match;
-    while ((match = actionPattern.exec(source)) !== null) {
-      const actionId = match[1];
-      const description = match[2];
+    for (const entry of readObjectEntries(actionsBody)) {
+      const descriptionMatch = /\bdescription\s*:\s*['"`]([^'"`]+)['"`]/.exec(entry.body);
+      if (!descriptionMatch)
+        continue;
+      const actionId = entry.key;
+      const description = descriptionMatch[1];
       result[actionId] = { description };
-    }
-    for (const actionId of Object.keys(result)) {
-      const paramBlockPattern = new RegExp(`${actionId}\\s*:\\s*\\{[\\s\\S]*?params\\s*:\\s*\\{([\\s\\S]*?)\\}\\s*,?\\s*(?:run|\\})`);
-      const paramMatch = source.match(paramBlockPattern);
-      if (paramMatch?.[1]) {
+      const paramsBody = getNamedObjectBody(entry.body, "params");
+      if (paramsBody) {
         const params = {};
-        const paramEntryPattern = /(\w+)\s*:\s*\{\s*type\s*:\s*['"`](\w+)['"`](?:\s*,\s*description\s*:\s*['"`]([^'"`]*)['"`])?(?:\s*,\s*required\s*:\s*(true|false))?\s*\}/g;
-        let pm;
-        while ((pm = paramEntryPattern.exec(paramMatch[1])) !== null) {
-          params[pm[1]] = {
-            type: pm[2],
-            ...pm[3] ? { description: pm[3] } : {},
-            ...pm[4] === "true" ? { required: true } : {}
+        for (const paramEntry of readObjectEntries(paramsBody)) {
+          const typeMatch = /\btype\s*:\s*['"`](\w+)['"`]/.exec(paramEntry.body);
+          if (!typeMatch)
+            continue;
+          const paramDescriptionMatch = /\bdescription\s*:\s*['"`]([^'"`]*)['"`]/.exec(paramEntry.body);
+          const requiredMatch = /\brequired\s*:\s*(true|false)/.exec(paramEntry.body);
+          params[paramEntry.key] = {
+            type: typeMatch[1],
+            ...paramDescriptionMatch?.[1] ? { description: paramDescriptionMatch[1] } : {},
+            ...requiredMatch?.[1] === "true" ? { required: true } : {}
           };
         }
         if (Object.keys(params).length > 0) {
@@ -10015,9 +10158,28 @@ async function dev() {
 
 // src/commands/run.ts
 init_source();
-import { existsSync as existsSync9, cpSync as cpSync2, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync9, cpSync as cpSync2, mkdirSync as mkdirSync3, readdirSync as readdirSync4, chmodSync, statSync as statSync4 } from "fs";
 import { join as join11 } from "path";
 init_appdir();
+function ensureBinExecutable(installDir) {
+  if (process.platform === "win32")
+    return;
+  const binRoot = join11(installDir, "bin");
+  if (!existsSync9(binRoot))
+    return;
+  const walk = (dir) => {
+    for (const name of readdirSync4(dir)) {
+      const path = join11(dir, name);
+      const st = statSync4(path);
+      if (st.isDirectory()) {
+        walk(path);
+      } else if (st.isFile()) {
+        chmodSync(path, st.mode | 73);
+      }
+    }
+  };
+  walk(binRoot);
+}
 function install() {
   const root = process.cwd();
   if (!exists(root)) {
@@ -10037,18 +10199,19 @@ function install() {
   const installDir = spaceDir(m.id);
   mkdirSync3(installDir, { recursive: true });
   cpSync2(distDir, installDir, { recursive: true });
+  ensureBinExecutable(installDir);
   console.log(source_default.green(`Installed ${m.name} \u2192 ${installDir}`));
   console.log(source_default.dim("  Restart Construct to load the updated space."));
 }
 
 // src/commands/publish.ts
 init_source();
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync6, statSync as statSync6, unlinkSync as unlinkSync2 } from "fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync6, statSync as statSync7, unlinkSync as unlinkSync2 } from "fs";
 import { join as join14, basename as basename6 } from "path";
 init_auth();
 
 // src/lib/pack.ts
-import { readdirSync as readdirSync5, statSync as statSync5, existsSync as existsSync11 } from "fs";
+import { readdirSync as readdirSync6, statSync as statSync6, existsSync as existsSync11 } from "fs";
 import { join as join13 } from "path";
 import { tmpdir } from "os";
 import { execSync as execSync3 } from "child_process";
@@ -10090,8 +10253,8 @@ async function packSource(root) {
     if (existsSync11(join13(root, name)))
       entries.push(name);
   }
-  for (const entry of readdirSync5(root)) {
-    if (statSync5(join13(root, entry)).isDirectory())
+  for (const entry of readdirSync6(root)) {
+    if (statSync6(join13(root, entry)).isDirectory())
       continue;
     if (allowedRootFiles.includes(entry))
       continue;
@@ -10111,7 +10274,7 @@ async function packSource(root) {
   const excludes = "--exclude=node_modules --exclude=dist --exclude=.git --exclude=*.env --exclude=*.log --exclude=*.lock --exclude=*.lockb";
   const cmd = `tar czf "${tarballPath}" ${excludes} ${validEntries.join(" ")}`;
   execSync3(cmd, { cwd: root });
-  const size = statSync5(tarballPath).size;
+  const size = statSync6(tarballPath).size;
   if (size > MAX_SIZE) {
     throw new Error(`Source exceeds maximum size of ${MAX_SIZE / 1024 / 1024}MB`);
   }
@@ -10119,15 +10282,21 @@ async function packSource(root) {
 }
 
 // src/commands/publish.ts
-async function uploadSource(portalURL, token, tarballPath, m) {
+async function uploadSource(portalURL, identityToken, publisherKey, tarballPath, m) {
   const formData = new FormData;
   formData.append("manifest", JSON.stringify(m));
   const fileData = readFileSync8(tarballPath);
   const blob = new Blob([fileData]);
   formData.append("source", blob, basename6(tarballPath));
+  const headers = {
+    Authorization: `Bearer ${identityToken}`
+  };
+  if (publisherKey) {
+    headers["X-API-Key"] = publisherKey;
+  }
   const resp = await fetch(`${portalURL}/publish`, {
     method: "POST",
-    headers: { Authorization: `Bearer ${token}` },
+    headers,
     body: formData
   });
   const result = await resp.json();
@@ -10241,7 +10410,11 @@ async function publish(options) {
     m = read(root);
     console.log(source_default.green(`Version bumped to ${m.version}`));
   }
-  const publishToken = creds.publisherKey ?? creds.token;
+  if (creds.token.startsWith("csk_live_")) {
+    console.error(source_default.red("Stored credential is a publisher key, not an identity token."));
+    console.error(source_default.dim("  Run 'construct login' or sign in via the desktop app to refresh."));
+    process.exit(1);
+  }
   if (!creds.publisherKey) {
     console.log(source_default.yellow("No publisher key in active profile."));
     console.log(source_default.dim("  Spaces will be attributed to your personal user identity."));
@@ -10274,7 +10447,7 @@ async function publish(options) {
   let tarballPath;
   try {
     tarballPath = await packSource(root);
-    const size = statSync6(tarballPath).size;
+    const size = statSync7(tarballPath).size;
     spinner.succeed(`Source packed (${formatBytes(size)})`);
   } catch (err) {
     spinner.fail("Pack failed");
@@ -10283,7 +10456,7 @@ async function publish(options) {
   }
   const uploadSpinner = ora("Uploading & building...").start();
   try {
-    const result = await uploadSource(creds.portal, publishToken, tarballPath, m);
+    const result = await uploadSource(creds.portal, creds.token, creds.publisherKey, tarballPath, m);
     unlinkSync2(tarballPath);
     gitSafe(root, "tag", `v${m.version}`);
     gitSafe(root, "push", "origin", `v${m.version}`);
@@ -10855,7 +11028,7 @@ function updateBarrel(modelsDir, modelName) {
 
 // src/commands/graph/push.ts
 init_source();
-import { existsSync as existsSync17, readdirSync as readdirSync6, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync17, readdirSync as readdirSync7, readFileSync as readFileSync13 } from "fs";
 import { join as join20, basename as basename7 } from "path";
 init_auth();
 async function graphPush() {
@@ -10870,7 +11043,7 @@ async function graphPush() {
     console.error(source_default.red("No src/models/ directory found. Run 'construct graph init' first."));
     process.exit(1);
   }
-  const modelFiles = readdirSync6(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
+  const modelFiles = readdirSync7(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
   if (modelFiles.length === 0) {
     console.error(source_default.red("No model files found in src/models/"));
     console.log(source_default.dim("  Generate one: construct graph g User name:string email:string"));
@@ -11055,7 +11228,7 @@ function parseModelFile(content, fileName) {
 
 // src/commands/graph/migrate.ts
 init_source();
-import { existsSync as existsSync18, readdirSync as readdirSync7, readFileSync as readFileSync14 } from "fs";
+import { existsSync as existsSync18, readdirSync as readdirSync8, readFileSync as readFileSync14 } from "fs";
 import { join as join21, basename as basename8 } from "path";
 init_auth();
 async function graphMigrate(options) {
@@ -11093,7 +11266,7 @@ async function graphMigrate(options) {
     spinner.fail("Could not fetch schema");
     process.exit(1);
   }
-  const modelFiles = readdirSync7(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
+  const modelFiles = readdirSync8(modelsDir).filter((f) => f.endsWith(".ts") && f !== "index.ts");
   const localModels = [];
   for (const file of modelFiles) {
     const content = readFileSync14(join21(modelsDir, file), "utf-8");
@@ -11232,7 +11405,7 @@ function graphFork(newSpaceID) {
 // package.json
 var package_default = {
   name: "@construct-space/cli",
-  version: "1.6.4",
+  version: "1.6.6",
   description: "Construct CLI \u2014 scaffold, build, develop, and publish spaces",
   type: "module",
   bin: {

package/dist/templates/space/vite.config.ts.tmpl

@@ -14,15 +14,6 @@ const hostExternals = [
   'pinia',
   '@vueuse/core',
   '@vueuse/integrations',
-  '@tauri-apps/api',
-  '@tauri-apps/api/core',
-  '@tauri-apps/api/path',
-  '@tauri-apps/api/event',
-  '@tauri-apps/api/webview',
-  '@tauri-apps/plugin-fs',
-  '@tauri-apps/plugin-shell',
-  '@tauri-apps/plugin-dialog',
-  '@tauri-apps/plugin-process',
   'lucide-vue-next',
   'date-fns',
   'dexie',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@construct-space/cli",
-  "version": "1.6.4",
+  "version": "1.6.6",
   "description": "Construct CLI — scaffold, build, develop, and publish spaces",
   "type": "module",
   "bin": {

package/templates/space/vite.config.ts.tmpl

@@ -14,15 +14,6 @@ const hostExternals = [
   'pinia',
   '@vueuse/core',
   '@vueuse/integrations',
-  '@tauri-apps/api',
-  '@tauri-apps/api/core',
-  '@tauri-apps/api/path',
-  '@tauri-apps/api/event',
-  '@tauri-apps/api/webview',
-  '@tauri-apps/plugin-fs',
-  '@tauri-apps/plugin-shell',
-  '@tauri-apps/plugin-dialog',
-  '@tauri-apps/plugin-process',
   'lucide-vue-next',
   'date-fns',
   'dexie',