@dboio/cli 0.6.9 → 0.6.10

package/README.md

@@ -156,6 +156,7 @@ All configuration is **directory-scoped**. Each project folder maintains its own
 | `AppUID` | string | App UID |
 | `AppName` | string | App display name |
 | `AppShortName` | string | App short name (used for `dbo clone --app`) |
+| `AppModifyKey` | string | ModifyKey for locked/production apps (set by `dbo clone`, used for submission guards) |
 | `ContentPlacement` | `bin` \| `path` \| `ask` | Where to place content files during clone |
 | `MediaPlacement` | `bin` \| `fullpath` \| `ask` | Where to place media files during clone |
 | `<Entity>FilenameCol` | column name | Filename column for entity-dir records (e.g., `ExtensionFilenameCol`) |
@@ -239,7 +240,7 @@ dbo init --domain my-domain.com --app myapp --clone
 #### What clone does
 
 1. **Loads app JSON** — from a local file, server API, or interactive prompt
-2. **Updates `.dbo/config.json`** — saves `AppID`, `AppUID`, `AppName`, `AppShortName`
+2. **Updates `.dbo/config.json`** — saves `AppID`, `AppUID`, `AppName`, `AppShortName`, and `AppModifyKey` (if the app is locked)
 3. **Updates `package.json`** — populates `name`, `productName`, `description`, `homepage`, and `deploy` script
 4. **Creates directories** — processes `children.bin` to build the directory hierarchy based on `ParentBinID` relationships
 5. **Saves `.dbo/structure.json`** — maps BinIDs to directory paths for file placement
@@ -487,6 +488,7 @@ dbo input -d 'RowUID:abc;column:content.Content@file.css' -v
 | `-f, --file <field=@path>` | File attachment for multipart upload (repeatable) |
 | `-C, --confirm <true\|false>` | Commit changes (default: `true`). Use `false` for validation only |
 | `--ticket <id>` | Override ticket ID (`_OverrideTicketID`) |
+| `--modify-key <key>` | Provide ModifyKey directly (skips interactive prompt) |
 | `--login` | Auto-login user created by this submission |
 | `--transactional` | Use transactional processing |
 | `--json` | Output raw JSON response |
@@ -629,6 +631,7 @@ dbo input -d 'RowUID:albain3dwkofbhnd1qtd1q;column:content.Content@assets/css/co
 | `<filepath>` | Local file path |
 | `-C, --confirm <true\|false>` | Commit (default: `true`) |
 | `--ticket <id>` | Override ticket ID |
+| `--modify-key <key>` | Provide ModifyKey directly (skips interactive prompt) |
 
 #### `dbo content pull`
 
@@ -939,6 +942,7 @@ The `@colors.css` reference tells push to read the content from that file. All o
 | `<path>` | File or directory to push |
 | `-C, --confirm <true\|false>` | Commit (default: `true`) |
 | `--ticket <id>` | Override ticket ID |
+| `--modify-key <key>` | Provide ModifyKey directly (skips interactive prompt) |
 | `--meta-only` | Only push metadata, skip file content |
 | `--content-only` | Only push file content, skip metadata |
 | `-y, --yes` | Auto-accept all prompts |
@@ -1101,6 +1105,7 @@ The `@colors.css` reference tells the CLI to read the file content from `colors.
 | `<path>` | File or `.` to scan current directory |
 | `-C, --confirm <true\|false>` | Commit (default: `true`) |
 | `--ticket <id>` | Override ticket ID |
+| `--modify-key <key>` | Provide ModifyKey directly (skips interactive prompt) |
 | `-y, --yes` | Auto-accept all prompts |
 | `--json` | Output raw JSON |
 | `--jq <expr>` | Filter JSON response |
@@ -1192,6 +1197,36 @@ Stores ticket IDs for automatic application during submissions:
 - `records` — Per-record tickets (auto-cleared after successful submission)
 - `--ticket` flag always takes precedence over stored tickets
 
+#### ModifyKey protection (locked/production apps)
+
+When an app has a `ModifyKey` set (production/locked mode), the CLI guards all submission commands (`push`, `input`, `add`, `content deploy`, `deploy`) with an interactive prompt:
+
+```
+⚠  This app is locked (production mode). A ModifyKey is required to submit changes.
+? This app has a ModifyKey set. How would you like to proceed?
+❯ Enter the ModifyKey to proceed
+  Cancel submission
+```
+
+The ModifyKey is detected and stored during `dbo clone`. If the key wasn't stored locally but the server requires one, the CLI reactively prompts after the first failed submission:
+
+```
+⚠  This app requires a ModifyKey. The key has not been set locally (try re-running `dbo clone`).
+? A ModifyKey is required. How would you like to proceed?
+❯ Enter the ModifyKey to retry
+  Cancel submission
+```
+
+On successful reactive entry, the key is saved to `.dbo/config.json` for future use.
+
+To bypass the interactive prompt entirely, pass `--modify-key <key>` on any submission command:
+
+```bash
+dbo push . --modify-key mySecretKey
+dbo input -d '...' --modify-key mySecretKey
+dbo add myfile.css --modify-key mySecretKey
+```
+
 #### User identity required
 
 When the server returns an error mentioning `LoggedInUser_UID`, `LoggedInUserID`, `CurrentUserID`, or `UserID`, the CLI checks for a stored user identity from `dbo login`:
@@ -1291,6 +1326,7 @@ dbo deploy css:colors --confirm false
 | `--all` | Deploy all entries in the manifest |
 | `-C, --confirm <true\|false>` | Commit (default: `true`) |
 | `--ticket <id>` | Override ticket ID |
+| `--modify-key <key>` | Provide ModifyKey directly (skips interactive prompt) |
 
 #### `dbo.deploy.json` manifest
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dboio/cli",
-  "version": "0.6.9",
+  "version": "0.6.10",
   "description": "CLI for the DBO.io framework",
   "type": "module",
   "bin": {

package/src/commands/add.js

@@ -18,7 +18,7 @@ export const addCommand = new Command('add')
   .argument('<path>', 'File or "." to scan current directory')
   .option('-C, --confirm <value>', 'Commit: true (default) or false', 'true')
   .option('--ticket <id>', 'Override ticket ID')
-  .option('--modifyKey <key>', 'Provide ModifyKey directly (skips interactive prompt)')
+  .option('--modify-key <key>', 'Provide ModifyKey directly (skips interactive prompt)')
   .option('-y, --yes', 'Auto-accept all prompts')
   .option('--json', 'Output raw JSON')
   .option('--jq <expr>', 'Filter JSON response')

package/src/commands/content.js

@@ -29,7 +29,7 @@ const deployCmd = new Command('deploy')
   .argument('<filepath>', 'Local file path')
   .option('-C, --confirm <value>', 'Commit: true (default) or false', 'true')
   .option('--ticket <id>', 'Override ticket ID')
-  .option('--modifyKey <key>', 'Provide ModifyKey directly (skips interactive prompt)')
+  .option('--modify-key <key>', 'Provide ModifyKey directly (skips interactive prompt)')
   .option('--json', 'Output raw JSON')
   .option('-v, --verbose', 'Show HTTP request details')
   .option('--domain <host>', 'Override domain')

package/src/commands/deploy.js

@@ -14,7 +14,7 @@ export const deployCommand = new Command('deploy')
   .option('--all', 'Deploy all entries in the manifest')
   .option('-C, --confirm <value>', 'Commit: true (default) or false', 'true')
   .option('--ticket <id>', 'Override ticket ID')
-  .option('--modifyKey <key>', 'Provide ModifyKey directly (skips interactive prompt)')
+  .option('--modify-key <key>', 'Provide ModifyKey directly (skips interactive prompt)')
   .option('--json', 'Output raw JSON')
   .option('-v, --verbose', 'Show HTTP request details')
   .option('--domain <host>', 'Override domain')

package/src/commands/input.js

@@ -17,7 +17,7 @@ export const inputCommand = new Command('input')
   .option('-f, --file <field=@path>', 'File attachment for multipart upload (repeatable)', collect, [])
   .option('-C, --confirm <value>', 'Commit changes: true (default) or false for validation only', 'true')
   .option('--ticket <id>', 'Override ticket ID (_OverrideTicketID)')
-  .option('--modifyKey <key>', 'Provide ModifyKey directly (skips interactive prompt)')
+  .option('--modify-key <key>', 'Provide ModifyKey directly (skips interactive prompt)')
   .option('--login', 'Auto-login user created by this submission')
   .option('--transactional', 'Use transactional processing')
   .option('--json', 'Output raw JSON response')

package/src/commands/push.js

@@ -19,7 +19,7 @@ export const pushCommand = new Command('push')
   .argument('<path>', 'File or directory to push')
   .option('-C, --confirm <value>', 'Commit: true (default) or false', 'true')
   .option('--ticket <id>', 'Override ticket ID')
-  .option('--modifyKey <key>', 'Provide ModifyKey directly (skips interactive prompt)')
+  .option('--modify-key <key>', 'Provide ModifyKey directly (skips interactive prompt)')
   .option('--meta-only', 'Only push metadata changes, skip file content')
   .option('--content-only', 'Only push file content, skip metadata columns')
   .option('-y, --yes', 'Auto-accept all prompts (path refactoring, etc.)')

package/src/lib/modify-key.js

@@ -9,7 +9,7 @@ import { log } from './logger.js';
  * - Returns { modifyKey: null, cancel: true } on mismatch or cancel.
  */
 export async function checkModifyKey(options = {}) {
-  // --modifyKey flag takes precedence (mirrors --ticket / --confirm behavior)
+  // --modify-key flag takes precedence (mirrors --ticket / --confirm behavior)
   if (options.modifyKey) return { modifyKey: options.modifyKey, cancel: false };
 
   const storedKey = await loadAppModifyKey();