@construct-space/cli 1.8.1 → 1.9.0

package/dist/index.js

@@ -3090,6 +3090,83 @@ var init_whoami = __esm(() => {
   init_auth();
 });
 
+// src/commands/org.ts
+var exports_org = {};
+__export(exports_org, {
+  orgStatus: () => orgStatus
+});
+async function orgStatus() {
+  let creds;
+  try {
+    creds = load2();
+  } catch {
+    console.error(source_default.red("Not signed in."));
+    console.error(source_default.dim("Run 'construct login' first."));
+    process.exit(1);
+  }
+  let s;
+  try {
+    const res = await fetch(ACCOUNTS_SCOPE_URL3, {
+      headers: { Authorization: `Bearer ${creds.token}`, Accept: "application/json" }
+    });
+    if (!res.ok) {
+      console.error(source_default.red(`Scope lookup failed (${res.status}).`));
+      console.error(source_default.dim("Token may be expired. Try: construct login"));
+      process.exit(1);
+    }
+    s = await res.json();
+  } catch (err) {
+    console.error(source_default.red(`Could not reach accounts service: ${err?.message || err}`));
+    process.exit(1);
+  }
+  if (!s.authenticated || !s.user) {
+    console.error(source_default.red("Token rejected."));
+    process.exit(1);
+  }
+  if (s.scope === "org" && s.org) {
+    console.log(source_default.cyan("Scope: ") + source_default.bold(`org \u2014 ${s.org.name || s.org.slug || s.org.id}`));
+    if (s.org.slug)
+      console.log(source_default.dim(`  slug: ${s.org.slug}`));
+    if (s.org.id)
+      console.log(source_default.dim(`  id:   ${s.org.id}`));
+    if (s.roles && s.roles.length) {
+      console.log(source_default.dim(`  roles: ${s.roles.join(", ")}`));
+    }
+  } else {
+    console.log(source_default.cyan("Scope: ") + source_default.bold("personal"));
+    console.log(source_default.dim("  (switch to an org at https://my.construct.space)"));
+  }
+  console.log();
+  console.log(source_default.cyan("Signed in as"));
+  console.log(`  ${s.user.email || s.user.username || s.user.uuid || "(unknown)"}`);
+  if (s.user.uuid)
+    console.log(source_default.dim(`  ${s.user.uuid}`));
+  console.log();
+  console.log(source_default.cyan("Publisher (from auth.json)"));
+  if (creds.publisherKey) {
+    const kind = creds.publisherKind || "user";
+    const expected = s.scope === "org" ? "org" : "user";
+    const matches = kind === expected;
+    console.log(`  ${source_default.bold(creds.publisherName || "(unnamed)")}  ${source_default.dim(`[${kind}]`)}`);
+    console.log(source_default.dim(`  key: ${creds.publisherKey.slice(0, 14)}\u2026`));
+    if (!matches) {
+      console.log(source_default.yellow(`  \u26A0 publisher kind (${kind}) doesn't match active scope (${expected}).`));
+      console.log(source_default.dim("    Restart the desktop app or run 'construct login' to re-sync."));
+    }
+  } else {
+    console.log(source_default.dim("  (none \u2014 enroll as a developer to get a publisher key)"));
+  }
+  if (s.developer) {
+    console.log();
+    console.log(source_default.dim("developer capability: ") + source_default.green("enabled"));
+  }
+}
+var ACCOUNTS_SCOPE_URL3 = "https://my.construct.space/api/accounts/me/scope";
+var init_org = __esm(() => {
+  init_source();
+  init_auth();
+});
+
 // src/lib/graphClient.ts
 function graphBaseURL() {
   return process.env.GRAPH_URL || "https://graph.construct.space";
@@ -10468,6 +10545,13 @@ async function publish(options) {
   const yes = options?.yes ?? false;
   const wantPrivate = options?.private ?? false;
   const wantPublic = options?.public ?? false;
+  const scopeOpt = options?.scope ? options.scope.toLowerCase() : undefined;
+  if (scopeOpt && scopeOpt !== "user" && scopeOpt !== "org") {
+    console.error(source_default.red(`--scope must be 'user' or 'org', got '${options?.scope}'.`));
+    process.exit(1);
+  }
+  const wantOrgScope = scopeOpt === "org";
+  const wantUserScope = scopeOpt === "user";
   if (wantPrivate && wantPublic) {
     console.error(source_default.red("Cannot combine --private and --public. Pick one."));
     process.exit(1);
@@ -10561,10 +10645,19 @@ async function publish(options) {
     console.log(source_default.dim("  (Org Settings \u2192 Developer), then re-run this command."));
     console.log();
   }
-  if (wantPrivate && creds.publisherKind !== "org") {
+  if (wantUserScope && creds.publisherKind === "org" && !options?.apiKey) {
+    console.error(source_default.red("--scope=user, but the active publisher in auth.json is an org publisher."));
+    console.error(source_default.dim("  Switch context to personal in the desktop app, or pass --api-key with a personal key."));
+    process.exit(1);
+  }
+  if (wantOrgScope && creds.publisherKind === "user" && !options?.apiKey) {
+    creds = { ...creds, publisherKey: undefined, publisherKind: undefined, publisherName: undefined };
+  }
+  if (wantPrivate && creds.publisherKind !== "org" && !wantOrgScope) {
     console.error(source_default.red("--private requires an org publisher key."));
     console.error(source_default.dim("  Personal publishes are always public."));
-    console.error(source_default.dim("  Enrol an org from the desktop app (Org Settings \u2192 Developer) and re-run."));
+    console.error(source_default.dim("  Pass --scope=org to publish as your active org, or enrol an org"));
+    console.error(source_default.dim("  from the desktop app (Org Settings \u2192 Developer) first."));
     process.exit(1);
   }
   console.log();
@@ -10609,12 +10702,24 @@ async function publish(options) {
   const uploadSpinner = ora("Uploading & building...").start();
   try {
     const explicitKey = options?.apiKey || process.env.CONSTRUCT_PUBLISHER_KEY;
-    const initialKey = explicitKey || creds.publisherKey;
+    let initialKey = explicitKey || creds.publisherKey;
+    if (wantOrgScope && !explicitKey && !initialKey) {
+      uploadSpinner.text = "Fetching org publisher key\u2026";
+      const orgKey = await fetchOrgPublisherKey(creds.portal, creds.token);
+      if (!orgKey) {
+        uploadSpinner.fail("No org publisher available for --scope=org");
+        console.error(source_default.dim("  Switch into an org context in the desktop app, or pass --api-key"));
+        console.error(source_default.dim("  with a csk_live_* key the org owns."));
+        unlinkSync2(tarballPath);
+        process.exit(1);
+      }
+      initialKey = orgKey;
+    }
     let result;
     try {
       result = await uploadSource(creds.portal, creds.token, initialKey, tarballPath, m, { private: wantPrivate, public: wantPublic });
     } catch (e) {
-      if (e?.ownerKind === "org" && !creds.publisherKey) {
+      if (e?.ownerKind === "org" && !creds.publisherKey && !wantUserScope) {
         uploadSpinner.text = "Fetching org publisher key\u2026";
         const orgKey = await fetchOrgPublisherKey(creds.portal, creds.token);
         if (!orgKey)
@@ -11593,7 +11698,7 @@ function graphFork(newSpaceID) {
 // package.json
 var package_default = {
   name: "@construct-space/cli",
-  version: "1.8.1",
+  version: "1.9.0",
   description: "Construct CLI \u2014 scaffold, build, develop, and publish spaces",
   type: "module",
   bin: {
@@ -11645,7 +11750,7 @@ program2.command("scaffold [name]").alias("new").alias("create").description("Cr
 program2.command("build").description("Build the space (generate entry + run Vite)").option("--entry-only", "Only generate src/entry.ts").action(async (opts) => build(opts));
 program2.command("dev").description("Start dev mode with file watching and live reload").action(async () => dev());
 program2.command("install").alias("run").description("Install built space to Construct spaces directory").action(() => install());
-program2.command("publish").description("Publish a space to the Construct registry").option("-y, --yes", "Skip all confirmation prompts").option("--bump <type>", "Auto-bump version (patch, minor, major)").option("--private", "Publish as org-private (catalog-listed only inside the owning org). Requires an org publisher key.").option("--public", "Flip a previously-private space back to the public catalog on this publish. Without --private or --public, visibility is preserved on update (and defaults to public on first publish).").option("--api-key <key>", "Publisher API key (csk_live_\u2026). Overrides any key stored in the active profile. Also reads CONSTRUCT_PUBLISHER_KEY.").action(async (opts) => publish(opts));
+program2.command("publish").description("Publish a space to the Construct registry").option("-y, --yes", "Skip all confirmation prompts").option("--bump <type>", "Auto-bump version (patch, minor, major)").option("--private", "Publish as org-private (catalog-listed only inside the owning org). Requires an org publisher key.").option("--public", "Flip a previously-private space back to the public catalog on this publish. Without --private or --public, visibility is preserved on update (and defaults to public on first publish).").option("--scope <scope>", "Publish as 'user' (personal) or 'org'. Without this flag, the active publisher in auth.json decides.").option("--api-key <key>", "Publisher API key (csk_live_\u2026). Overrides any key stored in the active profile. Also reads CONSTRUCT_PUBLISHER_KEY.").action(async (opts) => publish(opts));
 program2.command("validate").description("Validate space.manifest.json").action(() => validate3());
 program2.command("check").description("Run type-check (vue-tsc) and linter (eslint)").action(() => check());
 program2.command("clean").description("Remove build artifacts").option("--all", "Also remove node_modules and lockfiles").action((opts) => clean(opts));
@@ -11653,6 +11758,8 @@ program2.command("login").description("Authenticate with Construct").option("--p
 program2.command("logout").description("Sign out").action(() => logout());
 program2.command("update").description("Update the CLI to the latest version").action(() => update());
 program2.command("whoami").alias("status").description("Show the signed-in user + current org scope").action(async () => (await Promise.resolve().then(() => (init_whoami(), exports_whoami))).whoami());
+var org = program2.command("org").description("Inspect the active organization context");
+org.command("status").description("Show active scope, publisher, and roles").action(async () => (await Promise.resolve().then(() => (init_org(), exports_org))).orgStatus());
 var graph = program2.command("graph").description("Construct Graph \u2014 data models and GraphQL");
 graph.command("init").description("Initialize Graph in a space project").action(() => graphInit());
 graph.command("generate <model> [fields...]").alias("g").description("Generate a data model").option("--access <rules>", "Access rules (e.g. read:member,create:member,update:owner,delete:admin)").action((model, fields, opts) => generate2(model, fields, opts));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@construct-space/cli",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "Construct CLI — scaffold, build, develop, and publish spaces",
   "type": "module",
   "bin": {