@dashai/cli 0.9.0 → 0.10.0

package/dist/bin.js

@@ -543,8 +543,11 @@ function manifestJson(opts) {
     owns: {
       tables: [
         {
+          // NOTE: no `name` key here — the backend manifest validator
+          // (POST /api/installations/dev) is strict and rejects unrecognized
+          // table keys, and it derives the display name from the slug. A
+          // `name` here would fail provisioning's table materialization (#4).
           slug: "items",
-          name: "Items",
           fields: [
             { slug: "title", type: "text" },
             { slug: "done", type: "boolean" }
@@ -719,10 +722,12 @@ function envLocal(apiUrl = SCAFFOLD_DEFAULT_API_URL) {
     "# There is no DASHWISE_INSTALLATION_ID \u2014 the API key resolves the",
     "# install server-side.",
     `DASHWISE_API_URL=${apiUrl}`,
-    "# Scoped `dwk_` key. Left blank; `dashwise dev` injects the local-dev",
-    "# key. For a standalone `next dev`, paste one from `dashwise api-keys",
-    "# create <name>`.",
-    "DASHWISE_API_KEY=",
+    "# Scoped `dwk_` key. Commented out on purpose: `dashwise dev` injects",
+    "# the local-dev key from ~/.config/dashwise/auth.json, and an empty",
+    "# `DASHWISE_API_KEY=` here would SHADOW that (and make a bare `next dev`",
+    "# fail with a confusing empty-key error). For a standalone `next dev`,",
+    "# uncomment + paste a key from `dashwise api-keys create <name>`.",
+    "# DASHWISE_API_KEY=",
     ""
   ].join("\n");
 }
@@ -1919,6 +1924,29 @@ cached in \`~/.config/dashwise/auth.json#modules[${opts.slug}]\` after
 as \`DASHWISE_API_KEY\` into the Next.js child env automatically. The
 key binds the install server-side \u2014 there is no \`DASHWISE_INSTALLATION_ID\`.
 
+### Own tables vs. the shared Data Hub
+
+The dev key \`dashwise init\` mints gives you **full access to your
+module's OWN tables** (\`owns.tables\` in \`module.json\`) through \`db\` /
+\`qb\` \u2014 no grant setup needed. That covers the common case.
+
+The **shared workspace Data Hub** (other tables in the workspace, reached
+via \`datahub.table(<id>)\`) is separate: it is default-deny and returns
+**403** with the dev key until you mint a key that carries an explicit
+Data Hub grant. Do that with:
+
+\`\`\`
+# read a specific Data Hub table:
+dashwise api-keys create datahub-read --grant datahub:table=<tableId>:read
+# or a whole database (application):
+dashwise api-keys create datahub-rw --grant datahub:app=<appId>:read,create,update
+\`\`\`
+
+Paste the printed key as \`DASHWISE_API_KEY\` (or, for local dev, set it
+before \`dashwise dev\` so it wins over the auto-injected own-tables key).
+So: \`db\`/\`qb\` on your own tables works out of the box; \`datahub\` needs a
+granted key.
+
 ## Auth in dev mode
 
 \`dashwise dev\` registers a dev-mode SSO session with the backend so
@@ -2303,18 +2331,40 @@ async function moduleInitCommand(slugArg, options) {
   let devInstall = null;
   const wantsProvision = options.provision !== false;
   if (wantsProvision) {
+    const manifest = (() => {
+      try {
+        return readManifest(dir) ?? void 0;
+      } catch {
+        return void 0;
+      }
+    })();
     devInstall = await tryProvisionDevInstall({
       slug,
       name,
       description: options.description,
       workspaceFlag: options.workspace,
-      moduleKind: kind
+      moduleKind: kind,
+      ...manifest !== void 0 ? { manifest } : {}
     });
   } else {
     info(
       `Skipping provisioning (${code("--no-provision")}). ${dim("Run with provisioning later to enable `dashwise dev` data-plane.")}`
     );
   }
+  const keyCached = !wantsProvision || readModuleEntry(slug)?.apiKey ? true : false;
+  if (wantsProvision && !keyCached) {
+    fail(
+      `NO API KEY WAS CACHED for ${code(slug)} \u2014 the scaffold is written, but ${code("dashwise dev")} will run with NO token (data-plane + sign-in will fail).`
+    );
+    info(
+      `Fix it by re-running provisioning once the cause above is resolved:
+    ${code(`dashwise init ${slug} --force --workspace <your-workspace-slug>`)}
+  Confirm success: the line ${code("\u2713 Provisioned dev install id=\u2026 API key cached")} must appear,
+  and ${code("cat ~/.config/dashwise/auth.json")} must show a non-empty ${code(`modules.${slug}.apiKey`)} starting with ${code("dwk_")}.`
+    );
+    outro("Scaffold written, but provisioning failed \u2014 see above.");
+    return 2;
+  }
   info(`Next steps:`);
   process.stdout.write(`
   ${dim("1.")} ${code(`cd ${dir}`)}
@@ -2343,6 +2393,20 @@ async function tryProvisionDevInstall(args) {
     warn("CLI config disappeared mid-init. Skipping provisioning.");
     return null;
   }
+  const targetApiUrl = resolveApiUrl();
+  info(`Backend: ${code(targetApiUrl)}`);
+  const hostOf = (u) => {
+    try {
+      return new URL(u).host;
+    } catch {
+      return u;
+    }
+  };
+  if (hostOf(targetApiUrl) !== hostOf(cfg.apiUrl)) {
+    warn(
+      `Your saved login is for ${code(cfg.apiUrl)} but this run targets ${code(targetApiUrl)}. Provisioning uses the saved token, which the target backend will reject (401). Log in against the target first: ${code(`dashwise login --api-url ${targetApiUrl}`)}.`
+    );
+  }
   let workspace2;
   try {
     workspace2 = await selectWorkspace({
@@ -2358,25 +2422,42 @@ async function tryProvisionDevInstall(args) {
   info(
     `Provisioning dev install in workspace ${code(workspace2.slug)} (id=${workspace2.id})\u2026`
   );
+  const baseBody = {
+    slug: args.slug,
+    name: args.name,
+    ...args.description !== void 0 ? { description: args.description } : {},
+    workspaceId: workspace2.id,
+    ...args.moduleKind !== void 0 ? { moduleKind: args.moduleKind } : {}
+  };
+  const reqOpts = { baseUrl: resolveApiUrl(), auth: { token: cfg.token } };
   let response;
   try {
     response = await createDevInstallation(
-      {
-        slug: args.slug,
-        name: args.name,
-        ...args.description !== void 0 ? { description: args.description } : {},
-        workspaceId: workspace2.id,
-        ...args.moduleKind !== void 0 ? { moduleKind: args.moduleKind } : {}
-      },
-      { baseUrl: resolveApiUrl(), auth: { token: cfg.token } }
+      { ...baseBody, ...args.manifest !== void 0 ? { manifest: args.manifest } : {} },
+      reqOpts
     );
   } catch (err) {
-    if (err instanceof ApiError) {
+    if (err instanceof ApiError && err.code === "MANIFEST_INVALID" && args.manifest !== void 0) {
+      warn(
+        `Couldn't pre-materialize the seeded table(s) (${err.message}). Provisioning without them; add tables later with ${code("dashwise table create")}.`
+      );
+      try {
+        response = await createDevInstallation(baseBody, reqOpts);
+      } catch (err2) {
+        if (err2 instanceof ApiError) {
+          surfaceProvisionApiError(err2, args.slug);
+          return null;
+        }
+        warn(`Provisioning failed: ${err2.message}`);
+        return null;
+      }
+    } else if (err instanceof ApiError) {
       surfaceProvisionApiError(err, args.slug);
       return null;
+    } else {
+      warn(`Provisioning failed: ${err.message}`);
+      return null;
     }
-    warn(`Provisioning failed: ${err.message}`);
-    return null;
   }
   try {
     upsertModuleEntry(args.slug, {
@@ -2394,7 +2475,7 @@ async function tryProvisionDevInstall(args) {
     return response;
   }
   success(
-    `Provisioned dev install id=${response.installation.id}. API key cached in your CLI config.`
+    `Provisioned dev install id=${response.installation.id}. API key cached in your CLI config.` + (response.tables_applied > 0 ? ` ${response.tables_applied} seeded table(s) materialized.` : "")
   );
   return response;
 }
@@ -2439,6 +2520,7 @@ var init_init = __esm({
     init_output();
     init_api_client();
     init_config();
+    init_manifest_io();
     init_workspaces();
   }
 });
@@ -3353,8 +3435,13 @@ async function devCommand(options) {
       `  ${dim("api key")}     ${maskedToken(apiKeyEnv)} ${dim(`(from ${source}${installId ? `, install id=${installId}` : ""})`)}`
     );
   } else if (manifestSlug !== void 0 && installationIdEnv === void 0) {
-    warn(
-      `No API key cached for module ${code(manifestSlug)}. Data-plane calls (db, qb) will fail with UnauthenticatedError. Run ${code(`dashwise init ${manifestSlug} --force`)} to provision a dev install + cache a key.`
+    fail(
+      `No ${code("dwk_")} API key for module ${code(manifestSlug)} \u2014 the module will run with NO token.`
+    );
+    info(
+      `  Data-plane calls (db, qb) AND sign-in will fail until you provision a dev install:
+    ${code(`dashwise init ${manifestSlug} --force --workspace <your-workspace-slug>`)}
+  (Ensure you're logged into the right backend: ${code(`dashwise login --api-url ${apiUrl}`)}.)`
     );
   }
   info("");
@@ -3528,9 +3615,9 @@ async function resolveModuleApiKey(slug, entry, apiUrl, cliBearer) {
   if (process.env.DASHWISE_API_KEY) return null;
   if (!entry) return null;
   if (entry.apiKey) return null;
-  if (!entry.runtimeToken) return null;
+  if (!entry.installationId) return null;
   info(
-    `Upgrading cached credentials for ${code(slug)} to a ${code("dwk_")} API key (the local runtime token format was retired)\u2026`
+    `No usable ${code("dwk_")} API key cached for ${code(slug)} \u2014 minting a fresh one against dev install ${entry.installationId} (a stale CLI can cache an empty key)\u2026`
   );
   let minted;
   try {
@@ -8501,6 +8588,12 @@ program.name("dashwise").description("DashWise CLI \u2014 log in, author modules
   "--api-url <url>",
   "Override DashWise backend URL (default: $DASHWISE_API_URL or saved config or http://localhost:3000)"
 );
+program.hook("preAction", () => {
+  const apiUrl = program.opts().apiUrl?.trim();
+  if (apiUrl) {
+    process.env.DASHWISE_API_URL = apiUrl.replace(/\/+$/, "");
+  }
+});
 program.command("login").description("Sign in via the device-code flow.").option("--no-prompt", 'Skip the "open browser" prompt; just print the URL.').option("--name <name>", "Suggested name for the minted token (default: dashwise-cli).").action(async (cmdOpts) => {
   const apiUrl = program.opts().apiUrl;
   const exit = await loginCommand({
@@ -9138,7 +9231,7 @@ fieldCmd.command("set-type <table-slug> <field-slug> <new-type>").description(
   }
 })();
 function getVersion() {
-  return "0.9.0";
+  return "0.10.0";
 }
 function parseIntOption(value) {
   const n = Number.parseInt(value, 10);