@dashai/cli 0.18.0 → 0.18.1

package/dist/bin.js

@@ -9722,6 +9722,32 @@ init_api_client();
 init_config();
 init_manifest_io();
 init_output();
+var SMART_DASH_RE = /^[‒–—―−]/;
+function strayArgsError(stray, usage) {
+  if (!stray || stray.length === 0) return null;
+  const lines = [
+    `Unexpected argument${stray.length > 1 ? "s" : ""} ${stray.map((s) => `"${s}"`).join(", ")} \u2014 ${usage}`
+  ];
+  if (stray.some((s) => SMART_DASH_RE.test(s))) {
+    lines.push(
+      `A token starts with a typographic dash (\u2013 / \u2014) instead of ASCII "--". If this command was copy-pasted, the editor/chat likely rewrote the double hyphen \u2014 retype the flag by hand (e.g. ${code("--grant")}, ${code("--full-access")}).`
+    );
+  }
+  if (stray.some((s) => /^(module|datahub):/.test(s))) {
+    lines.push(
+      `Grant specs must be passed via the (repeatable) ${code("--grant")} flag, e.g. ${code("--grant module:employees:create,read")}.`
+    );
+  }
+  if (stray.some((s) => s.startsWith("--"))) {
+    lines.push(
+      `Tokens after a bare ${code("--")} separator are treated as plain arguments, not flags \u2014 remove the ${code("--")}.`
+    );
+  }
+  lines.push(
+    "Refusing to continue: silently ignoring these arguments is how grantless (deny-all) keys get minted by accident."
+  );
+  return lines.join("\n  ");
+}
 function loadContext4(opts) {
   const cfg = readConfig();
   if (!cfg) {
@@ -9787,6 +9813,14 @@ async function resolveInstallKind(ctx) {
   return void 0;
 }
 async function apiKeysListCommand(options) {
+  const strayErr = strayArgsError(
+    options.stray,
+    "`dashwise api-keys list` takes no positional arguments."
+  );
+  if (strayErr) {
+    fail(strayErr);
+    return 1;
+  }
   let ctx;
   try {
     ctx = loadContext4(options);
@@ -9837,6 +9871,20 @@ async function apiKeysListCommand(options) {
   return 0;
 }
 async function apiKeysCreateCommand(nameArg, options) {
+  if (nameArg !== void 0 && SMART_DASH_RE.test(nameArg)) {
+    fail(
+      `"${nameArg}" was read as the key NAME but looks like a flag typed with a typographic dash (\u2013 / \u2014) instead of ASCII "--". If this command was copy-pasted, the editor/chat likely rewrote the double hyphen \u2014 retype the flag by hand (e.g. ${code("--grant")}, ${code("--full-access")}).`
+    );
+    return 1;
+  }
+  const strayErr = strayArgsError(
+    options.stray,
+    "`dashwise api-keys create` takes a single <name>."
+  );
+  if (strayErr) {
+    fail(strayErr);
+    return 1;
+  }
   const name = nameArg ?? options.name;
   if (!name) {
     fail("Usage: `dashwise api-keys create <name>` (e.g. `dashwise api-keys create production`)");
@@ -9925,6 +9973,14 @@ async function apiKeysCreateCommand(nameArg, options) {
   return 0;
 }
 async function apiKeysRevokeCommand(keyIdArg, options) {
+  const strayErr = strayArgsError(
+    options.stray,
+    "`dashwise api-keys revoke` takes a single <key-id> \u2014 extra ids would be silently skipped."
+  );
+  if (strayErr) {
+    fail(strayErr);
+    return 1;
+  }
   if (!keyIdArg) {
     fail("Usage: `dashwise api-keys revoke <key-id>` \u2014 id from `dashwise api-keys list`");
     return 1;
@@ -11760,14 +11816,19 @@ apiKeysCmd.command("list").description(
   "--install <id>",
   "Target a specific installation id instead of the cached dev install (production installs included). Find ids via `dashwise module status <slug>`.",
   parseIntOption
-).option("--all", "Include revoked + expired keys in the output.").option("--json", "Emit JSON instead of the human-friendly table.").action(async (cmdOpts) => {
-  process.exitCode = await apiKeysListCommand({
-    ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
-    ...cmdOpts.install !== void 0 ? { install: cmdOpts.install } : {},
-    ...cmdOpts.all !== void 0 ? { all: cmdOpts.all } : {},
-    ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
-  });
-});
+).option("--all", "Include revoked + expired keys in the output.").option("--json", "Emit JSON instead of the human-friendly table.").action(
+  async (cmdOpts, cmd) => {
+    process.exitCode = await apiKeysListCommand({
+      ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
+      ...cmdOpts.install !== void 0 ? { install: cmdOpts.install } : {},
+      ...cmdOpts.all !== void 0 ? { all: cmdOpts.all } : {},
+      ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {},
+      // Operands commander would otherwise SILENTLY drop (default
+      // allowExcessArguments) — the command hard-errors on them.
+      ...cmd.args.length > 0 ? { stray: cmd.args } : {}
+    });
+  }
+);
 apiKeysCmd.command("create [name]").description(
   "Mint a new API key. The plaintext key is displayed ONCE \u2014 save it then."
 ).option("--dir <path>", "Project root (default: current directory).").option(
@@ -11790,7 +11851,8 @@ apiKeysCmd.command("create [name]").description(
   "--raw-only",
   "Print only the plaintext key on stdout; chatter goes to stderr. Useful for shell capture: `KEY=$(dashwise api-keys create prod --raw-only)`"
 ).action(
-  async (nameArg, cmdOpts) => {
+  async (nameArg, cmdOpts, cmd) => {
+    const stray = cmd.args.slice(1);
     process.exitCode = await apiKeysCreateCommand(nameArg, {
       ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
       ...cmdOpts.install !== void 0 ? { install: cmdOpts.install } : {},
@@ -11798,7 +11860,8 @@ apiKeysCmd.command("create [name]").description(
       ...cmdOpts.grant !== void 0 && cmdOpts.grant.length > 0 ? { grant: cmdOpts.grant } : {},
       ...cmdOpts.fullAccess !== void 0 ? { fullAccess: cmdOpts.fullAccess } : {},
       ...cmdOpts.expires !== void 0 ? { expires: cmdOpts.expires } : {},
-      ...cmdOpts.rawOnly !== void 0 ? { rawOnly: cmdOpts.rawOnly } : {}
+      ...cmdOpts.rawOnly !== void 0 ? { rawOnly: cmdOpts.rawOnly } : {},
+      ...stray.length > 0 ? { stray } : {}
     });
   }
 );
@@ -11809,11 +11872,13 @@ apiKeysCmd.command("revoke [key-id]").description(
   "Target a specific installation id instead of the cached dev install (production installs included). Find ids via `dashwise module status <slug>`.",
   parseIntOption
 ).option("-y, --yes", "Skip the per-key confirmation message (for CI / scripts).").action(
-  async (keyIdArg, cmdOpts) => {
+  async (keyIdArg, cmdOpts, cmd) => {
+    const stray = cmd.args.slice(1);
     process.exitCode = await apiKeysRevokeCommand(keyIdArg, {
       ...cmdOpts.dir !== void 0 ? { dir: cmdOpts.dir } : {},
       ...cmdOpts.install !== void 0 ? { install: cmdOpts.install } : {},
-      ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {}
+      ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {},
+      ...stray.length > 0 ? { stray } : {}
     });
   }
 );
@@ -12160,7 +12225,7 @@ fieldCmd.command("set-type <table-slug> <field-slug> <new-type>").description(
   }
 })();
 function getVersion() {
-  return "0.18.0";
+  return "0.18.1";
 }
 function parseIntOption(value) {
   const n = Number.parseInt(value, 10);