@construct-space/cli 1.8.1 → 1.9.1

package/dist/index.js

@@ -3090,6 +3090,83 @@ var init_whoami = __esm(() => {
   init_auth();
 });
 
+// src/commands/org.ts
+var exports_org = {};
+__export(exports_org, {
+  orgStatus: () => orgStatus
+});
+async function orgStatus() {
+  let creds;
+  try {
+    creds = load2();
+  } catch {
+    console.error(source_default.red("Not signed in."));
+    console.error(source_default.dim("Run 'construct login' first."));
+    process.exit(1);
+  }
+  let s;
+  try {
+    const res = await fetch(ACCOUNTS_SCOPE_URL3, {
+      headers: { Authorization: `Bearer ${creds.token}`, Accept: "application/json" }
+    });
+    if (!res.ok) {
+      console.error(source_default.red(`Scope lookup failed (${res.status}).`));
+      console.error(source_default.dim("Token may be expired. Try: construct login"));
+      process.exit(1);
+    }
+    s = await res.json();
+  } catch (err) {
+    console.error(source_default.red(`Could not reach accounts service: ${err?.message || err}`));
+    process.exit(1);
+  }
+  if (!s.authenticated || !s.user) {
+    console.error(source_default.red("Token rejected."));
+    process.exit(1);
+  }
+  if (s.scope === "org" && s.org) {
+    console.log(source_default.cyan("Scope: ") + source_default.bold(`org \u2014 ${s.org.name || s.org.slug || s.org.id}`));
+    if (s.org.slug)
+      console.log(source_default.dim(`  slug: ${s.org.slug}`));
+    if (s.org.id)
+      console.log(source_default.dim(`  id:   ${s.org.id}`));
+    if (s.roles && s.roles.length) {
+      console.log(source_default.dim(`  roles: ${s.roles.join(", ")}`));
+    }
+  } else {
+    console.log(source_default.cyan("Scope: ") + source_default.bold("personal"));
+    console.log(source_default.dim("  (switch to an org at https://my.construct.space)"));
+  }
+  console.log();
+  console.log(source_default.cyan("Signed in as"));
+  console.log(`  ${s.user.email || s.user.username || s.user.uuid || "(unknown)"}`);
+  if (s.user.uuid)
+    console.log(source_default.dim(`  ${s.user.uuid}`));
+  console.log();
+  console.log(source_default.cyan("Publisher (from auth.json)"));
+  if (creds.publisherKey) {
+    const kind = creds.publisherKind || "user";
+    const expected = s.scope === "org" ? "org" : "user";
+    const matches = kind === expected;
+    console.log(`  ${source_default.bold(creds.publisherName || "(unnamed)")}  ${source_default.dim(`[${kind}]`)}`);
+    console.log(source_default.dim(`  key: ${creds.publisherKey.slice(0, 14)}\u2026`));
+    if (!matches) {
+      console.log(source_default.yellow(`  \u26A0 publisher kind (${kind}) doesn't match active scope (${expected}).`));
+      console.log(source_default.dim("    Restart the desktop app or run 'construct login' to re-sync."));
+    }
+  } else {
+    console.log(source_default.dim("  (none \u2014 enroll as a developer to get a publisher key)"));
+  }
+  if (s.developer) {
+    console.log();
+    console.log(source_default.dim("developer capability: ") + source_default.green("enabled"));
+  }
+}
+var ACCOUNTS_SCOPE_URL3 = "https://my.construct.space/api/accounts/me/scope";
+var init_org = __esm(() => {
+  init_source();
+  init_auth();
+});
+
 // src/lib/graphClient.ts
 function graphBaseURL() {
   return process.env.GRAPH_URL || "https://graph.construct.space";
@@ -5373,7 +5450,9 @@ async function scaffold(nameArg, options) {
     join2(name, "src", "pages"),
     join2(name, "src", "components"),
     join2(name, "src", "composables"),
-    join2(name, "agent", "skills"),
+    join2(name, "scripts"),
+    join2(name, "references"),
+    join2(name, "assets"),
     join2(name, "agent", "hooks"),
     join2(name, "agent", "tools"),
     join2(name, "widgets", "summary")
@@ -5394,7 +5473,7 @@ async function scaffold(nameArg, options) {
     "style.css.tmpl": join2(name, "src", "style.css"),
     "index.vue.tmpl": join2(name, "src", "pages", "index.vue"),
     "config.md.tmpl": join2(name, "agent", "config.md"),
-    "skill.md.tmpl": join2(name, "agent", "skills", "default.md"),
+    "skill.md.tmpl": join2(name, "SKILL.md"),
     "safety.json.tmpl": join2(name, "agent", "hooks", "safety.json"),
     "tsconfig.json.tmpl": join2(name, "tsconfig.json"),
     "eslint.config.js.tmpl": join2(name, "eslint.config.js"),
@@ -5417,9 +5496,9 @@ async function scaffold(nameArg, options) {
   }
   if (isFull) {
     writeTemplate(templateDir, "full/settings.vue.tmpl", join2(name, "src", "pages", "settings.vue"), data);
-    writeTemplate(templateDir, "full/skill-data.md.tmpl", join2(name, "agent", "skills", "data.md"), data);
-    writeTemplate(templateDir, "full/skill-ui.md.tmpl", join2(name, "agent", "skills", "ui.md"), data);
-    console.log(source_default.blue("Full preset: settings page + extra skills added"));
+    writeTemplate(templateDir, "full/skill-data.md.tmpl", join2(name, "references", "data.md"), data);
+    writeTemplate(templateDir, "full/skill-ui.md.tmpl", join2(name, "references", "ui.md"), data);
+    console.log(source_default.blue("Full preset: settings page + references/data.md + references/ui.md"));
   }
   if (options?.withTests) {
     mkdirSync(join2(name, "e2e"), { recursive: true });
@@ -10468,6 +10547,13 @@ async function publish(options) {
   const yes = options?.yes ?? false;
   const wantPrivate = options?.private ?? false;
   const wantPublic = options?.public ?? false;
+  const scopeOpt = options?.scope ? options.scope.toLowerCase() : undefined;
+  if (scopeOpt && scopeOpt !== "user" && scopeOpt !== "org") {
+    console.error(source_default.red(`--scope must be 'user' or 'org', got '${options?.scope}'.`));
+    process.exit(1);
+  }
+  const wantOrgScope = scopeOpt === "org";
+  const wantUserScope = scopeOpt === "user";
   if (wantPrivate && wantPublic) {
     console.error(source_default.red("Cannot combine --private and --public. Pick one."));
     process.exit(1);
@@ -10561,10 +10647,19 @@ async function publish(options) {
     console.log(source_default.dim("  (Org Settings \u2192 Developer), then re-run this command."));
     console.log();
   }
-  if (wantPrivate && creds.publisherKind !== "org") {
+  if (wantUserScope && creds.publisherKind === "org" && !options?.apiKey) {
+    console.error(source_default.red("--scope=user, but the active publisher in auth.json is an org publisher."));
+    console.error(source_default.dim("  Switch context to personal in the desktop app, or pass --api-key with a personal key."));
+    process.exit(1);
+  }
+  if (wantOrgScope && creds.publisherKind === "user" && !options?.apiKey) {
+    creds = { ...creds, publisherKey: undefined, publisherKind: undefined, publisherName: undefined };
+  }
+  if (wantPrivate && creds.publisherKind !== "org" && !wantOrgScope) {
     console.error(source_default.red("--private requires an org publisher key."));
     console.error(source_default.dim("  Personal publishes are always public."));
-    console.error(source_default.dim("  Enrol an org from the desktop app (Org Settings \u2192 Developer) and re-run."));
+    console.error(source_default.dim("  Pass --scope=org to publish as your active org, or enrol an org"));
+    console.error(source_default.dim("  from the desktop app (Org Settings \u2192 Developer) first."));
     process.exit(1);
   }
   console.log();
@@ -10609,12 +10704,24 @@ async function publish(options) {
   const uploadSpinner = ora("Uploading & building...").start();
   try {
     const explicitKey = options?.apiKey || process.env.CONSTRUCT_PUBLISHER_KEY;
-    const initialKey = explicitKey || creds.publisherKey;
+    let initialKey = explicitKey || creds.publisherKey;
+    if (wantOrgScope && !explicitKey && !initialKey) {
+      uploadSpinner.text = "Fetching org publisher key\u2026";
+      const orgKey = await fetchOrgPublisherKey(creds.portal, creds.token);
+      if (!orgKey) {
+        uploadSpinner.fail("No org publisher available for --scope=org");
+        console.error(source_default.dim("  Switch into an org context in the desktop app, or pass --api-key"));
+        console.error(source_default.dim("  with a csk_live_* key the org owns."));
+        unlinkSync2(tarballPath);
+        process.exit(1);
+      }
+      initialKey = orgKey;
+    }
     let result;
     try {
       result = await uploadSource(creds.portal, creds.token, initialKey, tarballPath, m, { private: wantPrivate, public: wantPublic });
     } catch (e) {
-      if (e?.ownerKind === "org" && !creds.publisherKey) {
+      if (e?.ownerKind === "org" && !creds.publisherKey && !wantUserScope) {
         uploadSpinner.text = "Fetching org publisher key\u2026";
         const orgKey = await fetchOrgPublisherKey(creds.portal, creds.token);
         if (!orgKey)
@@ -11593,7 +11700,7 @@ function graphFork(newSpaceID) {
 // package.json
 var package_default = {
   name: "@construct-space/cli",
-  version: "1.8.1",
+  version: "1.9.1",
   description: "Construct CLI \u2014 scaffold, build, develop, and publish spaces",
   type: "module",
   bin: {
@@ -11645,7 +11752,7 @@ program2.command("scaffold [name]").alias("new").alias("create").description("Cr
 program2.command("build").description("Build the space (generate entry + run Vite)").option("--entry-only", "Only generate src/entry.ts").action(async (opts) => build(opts));
 program2.command("dev").description("Start dev mode with file watching and live reload").action(async () => dev());
 program2.command("install").alias("run").description("Install built space to Construct spaces directory").action(() => install());
-program2.command("publish").description("Publish a space to the Construct registry").option("-y, --yes", "Skip all confirmation prompts").option("--bump <type>", "Auto-bump version (patch, minor, major)").option("--private", "Publish as org-private (catalog-listed only inside the owning org). Requires an org publisher key.").option("--public", "Flip a previously-private space back to the public catalog on this publish. Without --private or --public, visibility is preserved on update (and defaults to public on first publish).").option("--api-key <key>", "Publisher API key (csk_live_\u2026). Overrides any key stored in the active profile. Also reads CONSTRUCT_PUBLISHER_KEY.").action(async (opts) => publish(opts));
+program2.command("publish").description("Publish a space to the Construct registry").option("-y, --yes", "Skip all confirmation prompts").option("--bump <type>", "Auto-bump version (patch, minor, major)").option("--private", "Publish as org-private (catalog-listed only inside the owning org). Requires an org publisher key.").option("--public", "Flip a previously-private space back to the public catalog on this publish. Without --private or --public, visibility is preserved on update (and defaults to public on first publish).").option("--scope <scope>", "Publish as 'user' (personal) or 'org'. Without this flag, the active publisher in auth.json decides.").option("--api-key <key>", "Publisher API key (csk_live_\u2026). Overrides any key stored in the active profile. Also reads CONSTRUCT_PUBLISHER_KEY.").action(async (opts) => publish(opts));
 program2.command("validate").description("Validate space.manifest.json").action(() => validate3());
 program2.command("check").description("Run type-check (vue-tsc) and linter (eslint)").action(() => check());
 program2.command("clean").description("Remove build artifacts").option("--all", "Also remove node_modules and lockfiles").action((opts) => clean(opts));
@@ -11653,6 +11760,8 @@ program2.command("login").description("Authenticate with Construct").option("--p
 program2.command("logout").description("Sign out").action(() => logout());
 program2.command("update").description("Update the CLI to the latest version").action(() => update());
 program2.command("whoami").alias("status").description("Show the signed-in user + current org scope").action(async () => (await Promise.resolve().then(() => (init_whoami(), exports_whoami))).whoami());
+var org = program2.command("org").description("Inspect the active organization context");
+org.command("status").description("Show active scope, publisher, and roles").action(async () => (await Promise.resolve().then(() => (init_org(), exports_org))).orgStatus());
 var graph = program2.command("graph").description("Construct Graph \u2014 data models and GraphQL");
 graph.command("init").description("Initialize Graph in a space project").action(() => graphInit());
 graph.command("generate <model> [fields...]").alias("g").description("Generate a data model").option("--access <rules>", "Access rules (e.g. read:member,create:member,update:owner,delete:admin)").action((model, fields, opts) => generate2(model, fields, opts));

package/dist/templates/space/full/skill-data.md.tmpl

@@ -1,18 +1,14 @@
----
-id: {{.ID}}-data
-name: {{.DisplayName}} Data Management
-description: Skill for managing {{.DisplayName}} data and content
-trigger: {{.ID}} data|content|manage
-category: space
-tools: [read_file, list_dir, glob, grep, write_file]
----
+# {{.DisplayName}} — data
 
-# {{.DisplayName}} Data Management Skill
+Reference doc for the agent when working with {{.DisplayName}} data.
 
-This skill handles data operations for the {{.DisplayName}} space.
+## Storage model
 
-## Instructions
-- Help users create, read, update, and delete content
-- Validate data before writing
-- Use the space actions API when available
-- Prefer batch operations for bulk changes
+Describe where {{.DisplayName}} data lives (Graph models, local storage, server API…). Edit this section to match the actual model.
+
+## CRUD conventions
+
+- Validate inputs before writing
+- Prefer the space's actions API over raw file or DB writes
+- Batch bulk changes when possible
+- Read existing rows before modifying — changes should be additive when in doubt

package/dist/templates/space/full/skill-ui.md.tmpl

@@ -1,18 +1,23 @@
----
-id: {{.ID}}-ui
-name: {{.DisplayName}} UI Customization
-description: Skill for customizing the {{.DisplayName}} user interface
-trigger: {{.ID}} ui|layout|design|style
-category: space
-tools: [read_file, write_file, glob]
----
-
-# {{.DisplayName}} UI Customization Skill
-
-This skill helps customize the {{.DisplayName}} space interface.
-
-## Instructions
-- Help users adjust layout and styling
-- Use Construct CSS variables (--app-foreground, --app-background, --app-accent, etc.)
-- Follow the host design system conventions
-- Suggest accessible color combinations
+# {{.DisplayName}} — UI
+
+Reference doc for the agent when adjusting {{.DisplayName}}'s UI.
+
+## Design tokens
+
+Use Construct CSS variables instead of hardcoded values:
+
+- `--app-foreground`, `--app-background`
+- `--app-accent`, `--app-accent-fg`
+- `--app-border`, `--app-muted`
+
+## Layout
+
+- Live inside the host shell — avoid full-bleed layouts that conflict with the sidebar/header
+- Use the `@construct-space/ui` primitives (`Card`, `Button`, `Badge`, …) for consistency
+- Prefer flex/grid over absolute positioning
+
+## Accessibility
+
+- Maintain 4.5:1 contrast for body text
+- Visible focus rings on every interactive element
+- Don't rely on color alone for state

package/dist/templates/space/full/space.manifest.json.tmpl

@@ -39,11 +39,7 @@
   ],
   "keywords": ["{{.ID}}"],
   "agent": "agent/config.md",
-  "skills": [
-    "agent/skills/default.md",
-    "agent/skills/data.md",
-    "agent/skills/ui.md"
-  ],
+  "skills": ["SKILL.md"],
   "actions": "src/actions.ts",
   "widgets": [
     {

package/dist/templates/space/skill.md.tmpl

@@ -1,17 +1,31 @@
 ---
-id: {{.ID}}-default
-name: {{.DisplayName}} Basics
-description: Default skill for {{.DisplayName}} space
-trigger: {{.ID}}|help
+name: {{.ID}}
+description: Help the user with tasks inside the {{.DisplayName}} space. Use when the user is working in {{.DisplayName}}, mentions {{.ID}}-related concepts, or asks what this space can do.
+allowed-tools: Read Glob Grep
 category: space
-tools: [read_file, list_dir, glob, grep]
+scope: any
 ---
 
-# {{.DisplayName}} Space Skill
+# {{.DisplayName}}
 
-This skill provides default behavior for the {{.DisplayName}} space.
+Help the user with tasks inside the {{.DisplayName}} space.
+
+## When to use
+
+- The user is inside the {{.DisplayName}} space
+- The user types `{{.ID}}` or asks about {{.DisplayName}}-related work
+- The user invokes a {{.DisplayName}} action
 
 ## Instructions
-- Assist with {{.DisplayName}}-related tasks
-- Follow project conventions
-- Read relevant files before making suggestions
+
+- Read existing files in the space before suggesting changes
+- Prefer space actions (see `src/actions.ts`) over generic file edits
+- Surface the space's conventions when proposing new code
+
+## Resources
+
+The agent loads these on demand:
+
+- `references/` — domain-specific docs (data model, UI conventions, …)
+- `scripts/` — supporting executables
+- `assets/` — templates and static resources

package/dist/templates/space/space.manifest.json.tmpl

@@ -34,7 +34,7 @@
   ],
   "keywords": ["{{.ID}}"],
   "agent": "agent/config.md",
-  "skills": ["agent/skills/default.md"],
+  "skills": ["SKILL.md"],
   "actions": "src/actions.ts",
   "widgets": [
     {

package/dist/templates/space/vite.config.ts.tmpl

@@ -7,7 +7,16 @@ import { resolve } from 'path'
  * Host-provided externals — these are supplied by Construct at runtime
  * via window.__CONSTRUCT__. Do NOT bundle them; they must stay external.
  *
- * Full list lives in: construct-app/frontend/lib/spaceHost.ts
+ * Source of truth: construct-app/frontend/lib/spaceHost.ts
+ *
+ * IMPORTANT — only add a package here AFTER confirming spaceHost.ts
+ * actually puts it on window.__CONSTRUCT__. Externalising a package the
+ * host doesn't expose silently substitutes `undefined`; you'll see
+ * "X is not a function" at runtime. When in doubt, bundle it (omit from
+ * this list) — bundle bloat is cheaper than a broken space.
+ *
+ * Notably NOT externalised:
+ *   @construct-space/graph — host does not expose this. Bundle it.
  */
 const hostExternals = [
   'vue',
@@ -21,7 +30,6 @@ const hostExternals = [
   'zod',
   '@construct-space/ui',
   '@construct-space/sdk',
-  '@construct-space/graph',
   '@construct/sdk',           // legacy alias — keep during cutover
 ]
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@construct-space/cli",
-  "version": "1.8.1",
+  "version": "1.9.1",
   "description": "Construct CLI — scaffold, build, develop, and publish spaces",
   "type": "module",
   "bin": {

package/templates/space/full/skill-data.md.tmpl

@@ -1,18 +1,14 @@
----
-id: {{.ID}}-data
-name: {{.DisplayName}} Data Management
-description: Skill for managing {{.DisplayName}} data and content
-trigger: {{.ID}} data|content|manage
-category: space
-tools: [read_file, list_dir, glob, grep, write_file]
----
+# {{.DisplayName}} — data
 
-# {{.DisplayName}} Data Management Skill
+Reference doc for the agent when working with {{.DisplayName}} data.
 
-This skill handles data operations for the {{.DisplayName}} space.
+## Storage model
 
-## Instructions
-- Help users create, read, update, and delete content
-- Validate data before writing
-- Use the space actions API when available
-- Prefer batch operations for bulk changes
+Describe where {{.DisplayName}} data lives (Graph models, local storage, server API…). Edit this section to match the actual model.
+
+## CRUD conventions
+
+- Validate inputs before writing
+- Prefer the space's actions API over raw file or DB writes
+- Batch bulk changes when possible
+- Read existing rows before modifying — changes should be additive when in doubt

package/templates/space/full/skill-ui.md.tmpl

@@ -1,18 +1,23 @@
----
-id: {{.ID}}-ui
-name: {{.DisplayName}} UI Customization
-description: Skill for customizing the {{.DisplayName}} user interface
-trigger: {{.ID}} ui|layout|design|style
-category: space
-tools: [read_file, write_file, glob]
----
-
-# {{.DisplayName}} UI Customization Skill
-
-This skill helps customize the {{.DisplayName}} space interface.
-
-## Instructions
-- Help users adjust layout and styling
-- Use Construct CSS variables (--app-foreground, --app-background, --app-accent, etc.)
-- Follow the host design system conventions
-- Suggest accessible color combinations
+# {{.DisplayName}} — UI
+
+Reference doc for the agent when adjusting {{.DisplayName}}'s UI.
+
+## Design tokens
+
+Use Construct CSS variables instead of hardcoded values:
+
+- `--app-foreground`, `--app-background`
+- `--app-accent`, `--app-accent-fg`
+- `--app-border`, `--app-muted`
+
+## Layout
+
+- Live inside the host shell — avoid full-bleed layouts that conflict with the sidebar/header
+- Use the `@construct-space/ui` primitives (`Card`, `Button`, `Badge`, …) for consistency
+- Prefer flex/grid over absolute positioning
+
+## Accessibility
+
+- Maintain 4.5:1 contrast for body text
+- Visible focus rings on every interactive element
+- Don't rely on color alone for state

package/templates/space/full/space.manifest.json.tmpl

@@ -39,11 +39,7 @@
   ],
   "keywords": ["{{.ID}}"],
   "agent": "agent/config.md",
-  "skills": [
-    "agent/skills/default.md",
-    "agent/skills/data.md",
-    "agent/skills/ui.md"
-  ],
+  "skills": ["SKILL.md"],
   "actions": "src/actions.ts",
   "widgets": [
     {

package/templates/space/skill.md.tmpl

@@ -1,17 +1,31 @@
 ---
-id: {{.ID}}-default
-name: {{.DisplayName}} Basics
-description: Default skill for {{.DisplayName}} space
-trigger: {{.ID}}|help
+name: {{.ID}}
+description: Help the user with tasks inside the {{.DisplayName}} space. Use when the user is working in {{.DisplayName}}, mentions {{.ID}}-related concepts, or asks what this space can do.
+allowed-tools: Read Glob Grep
 category: space
-tools: [read_file, list_dir, glob, grep]
+scope: any
 ---
 
-# {{.DisplayName}} Space Skill
+# {{.DisplayName}}
 
-This skill provides default behavior for the {{.DisplayName}} space.
+Help the user with tasks inside the {{.DisplayName}} space.
+
+## When to use
+
+- The user is inside the {{.DisplayName}} space
+- The user types `{{.ID}}` or asks about {{.DisplayName}}-related work
+- The user invokes a {{.DisplayName}} action
 
 ## Instructions
-- Assist with {{.DisplayName}}-related tasks
-- Follow project conventions
-- Read relevant files before making suggestions
+
+- Read existing files in the space before suggesting changes
+- Prefer space actions (see `src/actions.ts`) over generic file edits
+- Surface the space's conventions when proposing new code
+
+## Resources
+
+The agent loads these on demand:
+
+- `references/` — domain-specific docs (data model, UI conventions, …)
+- `scripts/` — supporting executables
+- `assets/` — templates and static resources

package/templates/space/space.manifest.json.tmpl

@@ -34,7 +34,7 @@
   ],
   "keywords": ["{{.ID}}"],
   "agent": "agent/config.md",
-  "skills": ["agent/skills/default.md"],
+  "skills": ["SKILL.md"],
   "actions": "src/actions.ts",
   "widgets": [
     {

package/templates/space/vite.config.ts.tmpl

@@ -7,7 +7,16 @@ import { resolve } from 'path'
  * Host-provided externals — these are supplied by Construct at runtime
  * via window.__CONSTRUCT__. Do NOT bundle them; they must stay external.
  *
- * Full list lives in: construct-app/frontend/lib/spaceHost.ts
+ * Source of truth: construct-app/frontend/lib/spaceHost.ts
+ *
+ * IMPORTANT — only add a package here AFTER confirming spaceHost.ts
+ * actually puts it on window.__CONSTRUCT__. Externalising a package the
+ * host doesn't expose silently substitutes `undefined`; you'll see
+ * "X is not a function" at runtime. When in doubt, bundle it (omit from
+ * this list) — bundle bloat is cheaper than a broken space.
+ *
+ * Notably NOT externalised:
+ *   @construct-space/graph — host does not expose this. Bundle it.
  */
 const hostExternals = [
   'vue',
@@ -21,7 +30,6 @@ const hostExternals = [
   'zod',
   '@construct-space/ui',
   '@construct-space/sdk',
-  '@construct-space/graph',
   '@construct/sdk',           // legacy alias — keep during cutover
 ]