@dashai/cli 0.26.0 → 0.27.0

package/dist/bin.js

@@ -4,7 +4,7 @@ import { existsSync, readFileSync, writeFileSync, rmSync, mkdirSync, watch, read
 import { hostname, tmpdir, platform, homedir } from 'os';
 import { resolve, join, relative, dirname, basename, win32, sep } from 'path';
 import { execFileSync, spawn, spawnSync } from 'child_process';
-import { intro, log, select, isCancel, cancel, spinner, outro, text, confirm, multiselect } from '@clack/prompts';
+import { intro, log, select, isCancel, cancel, spinner, outro, text, confirm as confirm$1, multiselect } from '@clack/prompts';
 import { Command, Option } from 'commander';
 import open from 'open';
 import AdmZip from 'adm-zip';
@@ -1187,16 +1187,16 @@ async function devCommand(options) {
     }
     const callbackOrigins = computeCallbackOrigins(port, options.callbackOrigin ?? []);
     try {
-      const session = await registerDevSession(apiUrl, apiToken, {
+      const session2 = await registerDevSession(apiUrl, apiToken, {
         target_workspace_id: workspaceContext.id,
         callback_origins: callbackOrigins
       });
-      revokeDevSession = () => revokeDevSessionBestEffort(apiUrl, apiToken, session.id);
-      devHandoffEnv = devSessionHandoffEnv(session);
-      info(`  ${dim("dev session")} ${session.id}`);
+      revokeDevSession = () => revokeDevSessionBestEffort(apiUrl, apiToken, session2.id);
+      devHandoffEnv = devSessionHandoffEnv(session2);
+      info(`  ${dim("dev session")} ${session2.id}`);
       info(`  ${dim("workspace")}   ${workspaceContext.name} (id=${workspaceContext.id}, slug=${workspaceContext.slug})`);
       info(`  ${dim("callbacks")}   ${callbackOrigins.join(", ")}`);
-      info(`  ${dim("expires")}     ${session.expires_at}`);
+      info(`  ${dim("expires")}     ${session2.expires_at}`);
       info(
         `  ${dim("sign-in")}     ${Object.keys(devHandoffEnv).length > 0 ? "zero-click (server-side dev handoff armed)" : "browser SSO (backend issued no handoff secret \u2014 pre-2026-07-15 backend)"}`
       );
@@ -1455,11 +1455,11 @@ async function resolveModuleApiKey(slug, entry, apiUrl, cliBearer) {
   success(`Upgraded ${code(slug)} to a dwk_ API key (id=${minted.api_key.id}).`);
   return upgraded;
 }
-function devSessionHandoffEnv(session) {
-  const secret = session.handoff_secret;
+function devSessionHandoffEnv(session2) {
+  const secret = session2.handoff_secret;
   if (typeof secret !== "string" || secret.length === 0) return {};
   return {
-    DASHWISE_DEV_SESSION_ID: session.id,
+    DASHWISE_DEV_SESSION_ID: session2.id,
     DASHWISE_DEV_HANDOFF_SECRET: secret
   };
 }
@@ -12853,9 +12853,7 @@ or in their own \`CLAUDE.md\` / \`AGENTS.md\`), follow them instead.
     person in plain words that the changes are saved and that Release in
     Dashwise includes them. Don't ask them to merge anything.
 - Never force-push and never rewrite the default branch's history.
-- The person only confirms Release and Take live in Dashwise. When the work is
-  pushed, tell them it is ready: in Dashwise open the module, click Release,
-  then Take live.
+- When the work is pushed, tell the person it is ready to release.
 
 ## Cloud workflow
 
@@ -12866,8 +12864,8 @@ or in their own \`CLAUDE.md\` / \`AGENTS.md\`), follow them instead.
 - \`npm run smoke:production\` starts the built app on a local loopback port. If a cloud sandbox refuses that port, rerun the command with the network permission; never skip the check.
 - Report what you changed, the pushed SHA and the checks you ran, including failures, in plain words.
 - Never print, persist or commit secrets. Repository code delivery needs no Dashwise token. Do not log in or access company data for setup or checks; see "Dashwise login" for full development.
-- Never automatically release, publish, deploy or take an installation live. Release and Live require an explicit human action.
-- Even when the person says you may release, you can't do it for them: tell them in one sentence where to click (in Dashwise open the module, click Release, then Take live). Never ask for a \`dashwise login\` or a token just to release.
+- Before releasing, installing/updating an installation or taking live, propose the exact action in the chat and wait for the person to accept or change it; never do it on your own.
+- When the person accepts, do exactly that action if your Dashwise connection allows it; if Dashwise refuses, tell them what it said (for example a permission to turn on in My Account). If you have no way to do it, tell them in one sentence where to click (in Dashwise open the module, click Release, then Take live). Never ask for a \`dashwise login\` or a token just to release.
 
 ## If you can't see the repository
 
@@ -14394,7 +14392,7 @@ async function destroyDevInstallCommand(options) {
     return 0;
   }
   if (!options.yes && process.stdout.isTTY) {
-    const choice = await confirm({
+    const choice = await confirm$1({
       message: `Destroy dev install ${code(`${slug} (id=${entry.installationId})`)}? Tables and rows will be soft-deleted (recoverable for 30 days via dashboard trash).`
     });
     if (isCancel(choice) || !choice) {
@@ -16335,7 +16333,7 @@ function startMcpProxy(opts) {
   const reconnectMs = opts.reconnectMs ?? 2e3;
   const verbose = opts.verbose === true;
   const readOnly = opts.readOnly === true;
-  let session = opts.session;
+  let session2 = opts.session;
   let sessionId = null;
   let protocolVersion = null;
   let readTools = null;
@@ -16364,7 +16362,7 @@ function startMcpProxy(opts) {
       parsed = JSON.parse(text4);
     } catch {
       log2(
-        `Discarded a non-JSON response from ${redactUrl(session.connectUrl)} (${source}); stdout carries MCP frames only.`
+        `Discarded a non-JSON response from ${redactUrl(session2.connectUrl)} (${source}); stdout carries MCP frames only.`
       );
       trace(`discarded ${Buffer.byteLength(text4, "utf8")} bytes of non-JSON`);
       return;
@@ -16374,7 +16372,7 @@ function startMcpProxy(opts) {
     ) : parsed !== null && typeof parsed === "object" && "jsonrpc" in parsed;
     if (!looksJsonRpc) {
       log2(
-        `Discarded a JSON response from ${redactUrl(session.connectUrl)} that is not JSON-RPC (${source}).`
+        `Discarded a JSON response from ${redactUrl(session2.connectUrl)} that is not JSON-RPC (${source}).`
       );
       return;
     }
@@ -16405,7 +16403,7 @@ function startMcpProxy(opts) {
     reauthAttempt = (async () => {
       log2("The session key expired or was rotated \u2014 re-authenticating once.");
       try {
-        session = await reauth();
+        session2 = await reauth();
         sessionId = null;
         return true;
       } catch (err) {
@@ -16446,7 +16444,7 @@ function startMcpProxy(opts) {
   };
   const post = async (text4, isInitialize) => {
     if (stopped) return null;
-    return doFetch(session.connectUrl, {
+    return doFetch(session2.connectUrl, {
       method: "POST",
       headers: requestHeaders(isInitialize),
       body: text4
@@ -16474,7 +16472,7 @@ function startMcpProxy(opts) {
       res = await post(text4, isInitialize);
     } catch (err) {
       const message = err.message;
-      log2(`Transport error talking to ${redactUrl(session.connectUrl)}: ${message}`);
+      log2(`Transport error talking to ${redactUrl(session2.connectUrl)}: ${message}`);
       emit(transportErrorFrame(frame?.id ?? null, `Transport error: ${message}`));
       return { kind: "failed" };
     }
@@ -16498,7 +16496,7 @@ function startMcpProxy(opts) {
     const bodyText = await res.text();
     if (!res.ok) {
       const detail = res.status === 401 ? "the endpoint key is no longer valid (expired, rotated by another `dashwise mcp`, or revoked)" : `HTTP ${res.status}`;
-      log2(`Refused by ${redactUrl(session.connectUrl)}: ${detail}`);
+      log2(`Refused by ${redactUrl(session2.connectUrl)}: ${detail}`);
       emit(transportErrorFrame(frame?.id ?? null, `Dashwise MCP server: ${detail}`));
       if (res.status === 401) {
         exitCode = 1;
@@ -16585,7 +16583,7 @@ function startMcpProxy(opts) {
     streamAbort = new AbortController();
     let res;
     try {
-      res = await doFetch(session.connectUrl, {
+      res = await doFetch(session2.connectUrl, {
         method: "GET",
         headers: {
           Accept: "text/event-stream",
@@ -16621,7 +16619,7 @@ function startMcpProxy(opts) {
       }
       streamUnavailable = true;
       log2(
-        `Server stream refused by ${redactUrl(session.connectUrl)}: the session could not be renewed (the endpoint key expired, was rotated, or was revoked).`
+        `Server stream refused by ${redactUrl(session2.connectUrl)}: the session could not be renewed (the endpoint key expired, was rotated, or was revoked).`
       );
       emit(
         transportErrorFrame(
@@ -16898,9 +16896,9 @@ async function mcpCommand(options = {}) {
     return 1;
   }
   const label = options.endpointName ?? defaultEndpointLabel();
-  let session;
+  let session2;
   try {
-    session = await openCliSession({
+    session2 = await openCliSession({
       workspaceId: workspace2.id,
       label,
       ...scopes !== void 0 ? { scopes } : {}
@@ -16909,24 +16907,24 @@ async function mcpCommand(options = {}) {
     fail(describeSessionError(err, apiUrl, scopes));
     return 1;
   }
-  if (scopes !== void 0 && !Array.isArray(session.scopes)) {
-    await revokeSession(session.endpointId);
+  if (scopes !== void 0 && !Array.isArray(session2.scopes)) {
+    await revokeSession(session2.endpointId);
     fail(SCOPES_NOT_APPLIED);
     return 1;
   }
   info(
-    `Dashwise MCP \u2014 workspace ${workspace2.slug}, endpoint #${session.endpointId} (${session.name}).`
+    `Dashwise MCP \u2014 workspace ${workspace2.slug}, endpoint #${session2.endpointId} (${session2.name}).`
   );
-  info(`Session key expires ${dim(session.expiresAt)}.`);
-  info(describeScopes(session.scopes));
+  info(`Session key expires ${dim(session2.expiresAt)}.`);
+  info(describeScopes(session2.scopes));
   if (options.readOnly) {
     warn(
       "Read-only: write tools are refused by this proxy (a client-side guard, not a server-enforced scope \u2014 for that, use --scope)."
     );
   }
-  let ownedEndpointId = session.endpointId;
+  let ownedEndpointId = session2.endpointId;
   const proxy = startMcpProxy({
-    session,
+    session: session2,
     reauth: async () => {
       const fresh = await openCliSession({
         workspaceId: workspace2.id,
@@ -20249,6 +20247,22 @@ function refusalHint(code2, context, subject = {}) {
         message: `Too many builds of ${named} in the last hour. Try again later.`,
         needsGrant: false
       };
+    // Install invitations (`dashwise module invites`, Südbau retro 6).
+    case "AUTHOR_ADMIN_REQUIRED":
+      return {
+        message: `Only an admin of the company that owns ${named} can manage its install invitations. Ask that company's admin.`,
+        needsGrant: true
+      };
+    case "COMPANY_ADMIN_REQUIRED":
+      return {
+        message: "Only an admin of this company can see or decline its install invitations. Ask your company's admin.",
+        needsGrant: true
+      };
+    case "MODULE_PRIVATE_SHARE_FIRST":
+      return {
+        message: `${named} is still private. Share it with your company in Dashwise first, then invite another company.`,
+        needsGrant: false
+      };
     default:
       if (MODULE_RIGHT_CODES.has(code2)) {
         return {
@@ -20658,6 +20672,133 @@ function usesJson(readiness) {
   };
 }
 
+// src/commands/module/installations.ts
+init_api_client();
+init_config();
+init_output();
+var AUDIENCE = {
+  company: "company",
+  teams: "Team Spaces",
+  people: "named people"
+};
+var givesRole = (roleKey) => typeof roleKey === "string" && roleKey !== "none";
+function governanceAudience(row) {
+  if (!row.rules) return null;
+  if (givesRole(row.rules.company)) return AUDIENCE.company;
+  if (row.rules.teams.some((t) => t.live === true && givesRole(t.role_key))) return AUDIENCE.teams;
+  return AUDIENCE.people;
+}
+function toListEntry(row) {
+  return {
+    id: row.id,
+    module_slug: row.module?.slug ?? null,
+    name: row.name ?? row.module?.name ?? null,
+    audience: row.reach?.kind ? AUDIENCE[row.reach.kind] ?? row.reach.kind : null,
+    version: row.module_version?.version ?? null,
+    held: row.held === true,
+    development: isDevInstallKind(row.kind),
+    public_url: row.public_url,
+    admin_view_only: false
+  };
+}
+async function moduleInstallationsCommand(slug, options) {
+  if (!isLoggedIn()) {
+    fail(`Not logged in. Run ${code("dashwise login")} first.`);
+    return 1;
+  }
+  const cfg = readConfig();
+  if (!cfg) {
+    fail(`CLI config missing. Run ${code("dashwise login")}.`);
+    return 1;
+  }
+  const auth = { baseUrl: resolveApiUrl(), auth: { token: cfg.token } };
+  let workspace2;
+  try {
+    workspace2 = await resolveWorkspaceWithFallback({
+      userFlag: options.workspace,
+      cachedWorkspaceId: slug ? readModuleEntry(slug)?.workspaceId : void 0,
+      configDefault: cfg.workspaceSlug,
+      apiUrl: resolveApiUrl(),
+      apiToken: cfg.token
+    });
+  } catch (err) {
+    fail(`Company selection failed: ${err.message}`);
+    return 1;
+  }
+  let rows;
+  try {
+    rows = await listWorkspaceInstallations(workspace2.id, auth);
+  } catch (err) {
+    fail(`Could not read the installations in ${code(workspace2.slug)}: ${err.message}`);
+    return 1;
+  }
+  const governance = [];
+  try {
+    const govRows = await apiRequest(
+      "GET",
+      `/api/modules/workspaces/${workspace2.id}/installations/governance`,
+      void 0,
+      auth
+    );
+    const seen = new Set(rows.map((row) => row.id));
+    const slugOf = new Map(rows.map((row) => [row.module_id, row.module?.slug ?? null]));
+    let slugModuleId;
+    if (slug) {
+      slugModuleId = rows.find((row) => row.module?.slug === slug)?.module_id;
+      if (slugModuleId === void 0) {
+        try {
+          slugModuleId = (await getModuleBySlug(slug, auth)).id;
+        } catch {
+        }
+      }
+    }
+    for (const g of govRows) {
+      if (g.trashed || seen.has(g.installation_id)) continue;
+      if (slug && g.module_id !== slugModuleId) continue;
+      governance.push({
+        id: g.installation_id,
+        module_slug: slugOf.get(g.module_id) ?? (slug && g.module_id === slugModuleId ? slug : null),
+        name: g.name || null,
+        audience: governanceAudience(g),
+        version: null,
+        held: g.held === true,
+        development: null,
+        public_url: null,
+        admin_view_only: true
+      });
+    }
+  } catch (err) {
+    if (!(err instanceof ApiError && (err.status === 403 || err.status === 404))) {
+      fail(`Could not read the company's full installation list: ${err.message}`);
+      return 1;
+    }
+  }
+  const entries = rows.filter((row) => !slug || row.module?.slug === slug).map(toListEntry).concat(governance).filter((entry) => options.dev || !entry.development).sort((a, b) => (a.module_slug ?? "").localeCompare(b.module_slug ?? "") || a.id - b.id);
+  if (options.json) {
+    out(JSON.stringify({ workspace: workspace2.slug, installations: entries }));
+    return 0;
+  }
+  if (entries.length === 0) {
+    info(
+      slug ? `No installations of ${code(slug)} you can see in ${code(workspace2.slug)}.` : `No installations you can see in ${code(workspace2.slug)}.`
+    );
+    return 0;
+  }
+  for (const e of entries) {
+    const tags = [
+      e.audience,
+      e.version ? `v${e.version}` : null,
+      e.held ? "held" : null,
+      e.development ? "development" : null,
+      e.admin_view_only ? "admin view, not open to you" : null
+    ].filter(Boolean);
+    out(
+      `#${e.id}  ${e.module_slug ?? "?"}  ${e.name ? `"${e.name}"` : ""}  ${dim(tags.join(", "))}${e.public_url ? `  ${e.public_url}` : ""}`.replace(/ {3,}/g, "  ")
+    );
+  }
+  return 0;
+}
+
 // src/commands/module/uninstall.ts
 init_api_client();
 init_config();
@@ -20828,6 +20969,269 @@ function surfaceUninstallError(err, slug, workspaceSlug) {
   return 1;
 }
 
+// src/commands/module/invites.ts
+init_api_client();
+init_config();
+init_output();
+var positiveId2 = (value) => typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+function session(json) {
+  const cfg = readConfig();
+  if (!isLoggedIn() || !cfg) return reportCliError(`Not logged in. Run ${code("dashwise login")} first.`, { json });
+  return {
+    auth: { baseUrl: resolveApiUrl(), auth: { token: cfg.token } },
+    token: cfg.token,
+    workspaceSlug: cfg.workspaceSlug
+  };
+}
+async function resolveModule(slug, s, json) {
+  try {
+    const mod = await getModuleBySlug(slug, s.auth);
+    return { id: mod.id, slug: mod.slug };
+  } catch (err) {
+    return reportRefusal(err, { module: slug }, { json, action: "Resolving the module" });
+  }
+}
+async function confirm(question, confirmLabel, opts) {
+  if (opts.yes) return null;
+  if (opts.json || !process.stdin.isTTY || !process.stdout.isTTY) {
+    return reportCliError("This changes an invitation. Pass --yes to confirm in non-interactive or --json mode.", {
+      json: opts.json,
+      code: "USAGE"
+    });
+  }
+  const answer = await select({
+    message: question,
+    options: [
+      { value: "cancel", label: "Cancel" },
+      { value: "go", label: confirmLabel }
+    ],
+    initialValue: "cancel"
+  });
+  if (isCancel(answer) || answer !== "go") {
+    reportCliError("Aborted.", {});
+    return 130;
+  }
+  return null;
+}
+function companyLabel(row) {
+  return row.company_name ? `${row.company_name} (company #${row.workspace_id})` : `company #${row.workspace_id}`;
+}
+async function moduleInvitesListCommand(slug, options) {
+  const { json } = options;
+  const s = session(json);
+  if (typeof s === "number") return s;
+  const mod = await resolveModule(slug, s, json);
+  if (typeof mod === "number") return mod;
+  let rows;
+  try {
+    rows = await apiRequest("GET", `/api/modules/${mod.id}/invites`, void 0, s.auth);
+  } catch (err) {
+    return reportRefusal(err, { module: mod.slug }, { json, action: "Reading the invitations" });
+  }
+  if (json) {
+    out(JSON.stringify({ module: mod.slug, invites: rows }));
+    return 0;
+  }
+  if (rows.length === 0) {
+    info(`No open invitations for ${code(mod.slug)}.`);
+    return 0;
+  }
+  for (const row of rows) {
+    const note = row.note ? `  ${dim(`"${row.note}"`)}` : "";
+    out(`#${row.id}  ${companyLabel(row)}  ${dim(row.invited_at.slice(0, 10))}${note}`);
+  }
+  return 0;
+}
+async function moduleInvitesSendCommand(slug, options) {
+  const { json } = options;
+  const usage2 = (message) => reportCliError(message, { json, code: "USAGE" });
+  if (!options.to) return usage2("Pass --to <company id> to name the company to invite.");
+  const s = session(json);
+  if (typeof s === "number") return s;
+  let target;
+  const numeric = /^[1-9][0-9]*$/.test(options.to) ? Number(options.to) : void 0;
+  let mine;
+  try {
+    mine = await apiRequest("GET", "/api/workspaces", void 0, s.auth);
+  } catch (err) {
+    return reportRefusal(err, {}, { json, action: "Reading your companies" });
+  }
+  const own = mine.find((w) => numeric !== void 0 ? w.id === numeric : w.slug === options.to);
+  if (own) {
+    target = { id: own.id, label: `${own.name} (company #${own.id})` };
+  } else if (positiveId2(numeric)) {
+    target = { id: numeric, label: `company #${numeric}` };
+  } else {
+    return usage2(
+      `${options.to} is not one of your companies. For another company, pass its company id (an admin of that company finds it in its settings).`
+    );
+  }
+  const mod = await resolveModule(slug, s, json);
+  if (typeof mod === "number") return mod;
+  const stop = await confirm(
+    [
+      `Invite ${target.label} to install ${mod.slug}?`,
+      `- Admins of that company can then see ${mod.slug} and install it.`,
+      "- Their data stays theirs; you do not see it.",
+      `- Your module's logic and its updates reach their installations.`,
+      "- You see their company name only after one of their admins installs it or asks to.",
+      `- You can withdraw the invitation at any time with ${code(`dashwise module invites revoke ${mod.slug} <invitation id>`)}.`
+    ].join("\n"),
+    "Send the invitation",
+    options
+  );
+  if (stop !== null) return stop;
+  let invite;
+  try {
+    const body = await apiRequest(
+      "POST",
+      `/api/modules/${mod.id}/invites`,
+      { workspaceId: target.id, ...options.note !== void 0 ? { note: options.note } : {} },
+      s.auth
+    );
+    invite = body.invite;
+  } catch (err) {
+    return reportRefusal(err, { module: mod.slug }, { json, action: "Sending the invitation" });
+  }
+  if (json) out(JSON.stringify({ module: mod.slug, invite }));
+  else success(`Invited ${target.label} to install ${mod.slug} (invitation #${invite.id}).`);
+  return 0;
+}
+async function moduleInvitesRevokeCommand(slug, inviteId, options) {
+  const { json } = options;
+  if (!positiveId2(inviteId)) {
+    return reportCliError(`Pass the invitation id. List them with ${code(`dashwise module invites list ${slug}`)}.`, {
+      json,
+      code: "USAGE"
+    });
+  }
+  const s = session(json);
+  if (typeof s === "number") return s;
+  const mod = await resolveModule(slug, s, json);
+  if (typeof mod === "number") return mod;
+  const stop = await confirm(
+    [
+      `Withdraw invitation #${inviteId} for ${mod.slug}?`,
+      `- Installations made with it stay, but they no longer receive updates of ${mod.slug}.`,
+      "- No new installation can start from it."
+    ].join("\n"),
+    "Withdraw the invitation",
+    options
+  );
+  if (stop !== null) return stop;
+  try {
+    await apiRequest("DELETE", `/api/modules/${mod.id}/invites/${inviteId}`, void 0, s.auth);
+  } catch (err) {
+    return reportRefusal(err, { module: mod.slug }, { json, action: "Withdrawing the invitation" });
+  }
+  if (json) out(JSON.stringify({ module: mod.slug, revoked: inviteId }));
+  else success(`Withdrew invitation #${inviteId} for ${mod.slug}.`);
+  return 0;
+}
+async function resolveOwnCompany(s, flag, opts) {
+  const { json } = opts;
+  let mine;
+  try {
+    mine = await apiRequest("GET", "/api/workspaces", void 0, s.auth);
+  } catch (err) {
+    return reportRefusal(err, {}, { json, action: "Reading your companies" });
+  }
+  const list = mine.map((w) => `${w.slug} (company #${w.id})`).join(", ");
+  const wanted = flag ?? s.workspaceSlug;
+  if (wanted !== void 0) {
+    const found = mine.find((w) => w.slug === wanted || String(w.id) === wanted);
+    if (found) return found;
+    return reportCliError(`${wanted} is not one of your companies. Your companies: ${list}.`, { json, code: "USAGE" });
+  }
+  if (mine.length === 1) return mine[0];
+  if (mine.length === 0) return reportCliError("Your account belongs to no company yet.", { json });
+  if (!opts.interactive || json || !process.stdin.isTTY || !process.stdout.isTTY) {
+    return reportCliError(`Choose the company with --workspace <slug or id>. Your companies: ${list}.`, {
+      json,
+      code: "USAGE"
+    });
+  }
+  const choice = await select({
+    message: "Which company?",
+    options: mine.map((w) => ({ value: String(w.id), label: w.name, hint: w.slug }))
+  });
+  const picked = isCancel(choice) ? void 0 : mine.find((w) => String(w.id) === choice);
+  if (!picked) {
+    reportCliError("Aborted.", {});
+    return 130;
+  }
+  return picked;
+}
+async function moduleInvitesReceivedCommand(options) {
+  const { json } = options;
+  const s = session(json);
+  if (typeof s === "number") return s;
+  const company = await resolveOwnCompany(s, options.workspace, { json, interactive: true });
+  if (typeof company === "number") return company;
+  let rows;
+  try {
+    rows = await apiRequest(
+      "GET",
+      `/api/modules/workspaces/${company.id}/invites`,
+      void 0,
+      s.auth
+    );
+  } catch (err) {
+    return reportRefusal(err, {}, { json, action: "Reading the invitations" });
+  }
+  if (json) {
+    out(JSON.stringify({ workspace: company.slug, invites: rows }));
+    return 0;
+  }
+  if (rows.length === 0) {
+    info(`No open invitations for ${code(company.slug)}.`);
+    return 0;
+  }
+  for (const row of rows) {
+    const note = row.note ? `  ${dim(`"${row.note}"`)}` : "";
+    out(
+      `#${row.id}  ${row.module.slug} ${dim(`v${row.module.current_version}`)}  from ${row.from_company.name}  ${dim(row.invited_at.slice(0, 10))}${note}`
+    );
+  }
+  const inCompany = `--workspace ${company.slug}`;
+  info(
+    `Install one with ${code(`dashwise module install <slug> ${inCompany}`)}, or decline it with ${code(`dashwise module invites decline <id> ${inCompany}`)}.`
+  );
+  return 0;
+}
+async function moduleInvitesDeclineCommand(inviteId, options) {
+  const { json } = options;
+  if (!positiveId2(inviteId)) {
+    return reportCliError(`Pass the invitation id. List them with ${code("dashwise module invites received")}.`, {
+      json,
+      code: "USAGE"
+    });
+  }
+  const s = session(json);
+  if (typeof s === "number") return s;
+  const company = await resolveOwnCompany(s, options.workspace, { json, interactive: !options.yes });
+  if (typeof company === "number") return company;
+  const stop = await confirm(
+    `Decline invitation #${inviteId} for ${company.slug}? The module's company may invite you again.`,
+    "Decline the invitation",
+    options
+  );
+  if (stop !== null) return stop;
+  try {
+    await apiRequest(
+      "POST",
+      `/api/modules/workspaces/${company.id}/invites/${inviteId}/decline`,
+      void 0,
+      s.auth
+    );
+  } catch (err) {
+    return reportRefusal(err, {}, { json, action: "Declining the invitation" });
+  }
+  if (json) out(JSON.stringify({ workspace: company.slug, declined: inviteId }));
+  else success(`Declined invitation #${inviteId}.`);
+  return 0;
+}
+
 // src/commands/module/pull-data.ts
 init_api_client();
 init_output();
@@ -24775,7 +25179,7 @@ async function moduleRuntimeSetCommand(slugArg, options) {
   const slug = before.module.slug;
   const subject = { module: slug, installationId: before.installation_id };
   if (streaming !== void 0 && !options.yes && !options.json && process.stdin.isTTY) {
-    const ok = await confirm({
+    const ok = await confirm$1({
       message: `Turn streaming ${streaming === "RESPONSE_STREAM" ? "on" : "off"} for ${slug} (install #${before.installation_id})? The switch takes about a minute, and pages may come back empty while it runs.`
     });
     if (isCancel(ok) || ok !== true) {
@@ -25695,6 +26099,63 @@ moduleCmd.command("uninstall [slug]").description(
     });
   }
 );
+var invitesCmd = moduleCmd.command("invites").description(
+  "Install invitations: send, list and withdraw them for your module, or see and decline the ones your company received."
+);
+var inviteIdArg = (value) => value !== void 0 && /^[1-9][0-9]*$/.test(value) ? Number(value) : void 0;
+invitesCmd.command("list <slug>").description("List the open install invitations for your module.").option("--json", "Emit machine-readable JSON.").action(async (slug, cmdOpts) => {
+  process.exitCode = await moduleInvitesListCommand(slug, {
+    ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
+  });
+});
+invitesCmd.command("send <slug>").description(
+  "Invite another company to install your module. Needs admin rights in the module's company. Asks before sending; pass --yes in scripts."
+).option("--to <company>", "The company id to invite, or the slug of a company you belong to.").option("--note <text>", "A short note shown to the invited company (max 1000 characters).").option("-y, --yes", "Send without asking (required in non-interactive or --json mode).").option("--json", "Emit machine-readable JSON.").action(
+  async (slug, cmdOpts) => {
+    process.exitCode = await moduleInvitesSendCommand(slug, {
+      ...cmdOpts.to !== void 0 ? { to: cmdOpts.to } : {},
+      ...cmdOpts.note !== void 0 ? { note: cmdOpts.note } : {},
+      ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {},
+      ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
+    });
+  }
+);
+invitesCmd.command("revoke <slug> <invite-id>").description(
+  "Withdraw an install invitation. Installations made before stay. Asks first; pass --yes in scripts."
+).option("-y, --yes", "Withdraw without asking (required in non-interactive or --json mode).").option("--json", "Emit machine-readable JSON.").action(async (slug, inviteId, cmdOpts) => {
+  process.exitCode = await moduleInvitesRevokeCommand(slug, inviteIdArg(inviteId), {
+    ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {},
+    ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
+  });
+});
+invitesCmd.command("received").description("List the open install invitations your company received (company admins).").option("--workspace <slug-or-id>", "Company (default: config default or interactive picker).").option("--json", "Emit machine-readable JSON.").action(async (cmdOpts) => {
+  process.exitCode = await moduleInvitesReceivedCommand({
+    ...cmdOpts.workspace !== void 0 ? { workspace: cmdOpts.workspace } : {},
+    ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
+  });
+});
+invitesCmd.command("decline <invite-id>").description(
+  "Decline an install invitation your company received (company admins). Asks first; pass --yes in scripts."
+).option("--workspace <slug-or-id>", "Company (default: config default or interactive picker).").option("-y, --yes", "Decline without asking (required in non-interactive or --json mode).").option("--json", "Emit machine-readable JSON.").action(
+  async (inviteId, cmdOpts) => {
+    process.exitCode = await moduleInvitesDeclineCommand(inviteIdArg(inviteId), {
+      ...cmdOpts.workspace !== void 0 ? { workspace: cmdOpts.workspace } : {},
+      ...cmdOpts.yes !== void 0 ? { yes: cmdOpts.yes } : {},
+      ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
+    });
+  }
+);
+moduleCmd.command("installations [slug]").description(
+  "List the installations in a company that you can see: id, module, name, audience, version, held state and public address. With a slug, only that module. Read-only."
+).option("--workspace <slug-or-id>", "Company (default: cached module company, config default, or interactive picker).").option("--dev", "Include development installations.").option("--json", "Emit machine-readable JSON.").action(
+  async (slug, cmdOpts) => {
+    process.exitCode = await moduleInstallationsCommand(slug, {
+      ...cmdOpts.workspace !== void 0 ? { workspace: cmdOpts.workspace } : {},
+      ...cmdOpts.dev !== void 0 ? { dev: cmdOpts.dev } : {},
+      ...cmdOpts.json !== void 0 ? { json: cmdOpts.json } : {}
+    });
+  }
+);
 moduleCmd.command("status [slug]").description(
   "Show a module's deploy state in a workspace: install kind, installed vs latest published version, runtime provisioning, and the public URL."
 ).option("--workspace <slug-or-id>", "Target workspace (default: cached module workspace, config default, or interactive picker).").option("--dir <path>", "Project root for the module.json slug lookup (default: current directory).").option("--json", "Emit machine-readable JSON.").action(
@@ -25972,7 +26433,7 @@ fieldCmd.command("set-type <table-slug> <field-slug> <new-type>").description(
   }
 );
 function getVersion() {
-  return "0.26.0";
+  return "0.27.0";
 }
 function parseIntOption(value) {
   const n = Number.parseInt(value, 10);