@displaydev/cli 0.18.0 → 0.20.0

package/dist/main.js

@@ -198,9 +198,26 @@ import { Command } from 'commander';
 import { ApiClient, ApiError } from './api-client.js';
 import { loadConfig, saveConfig } from './config.js';
 import { startMcpServer } from './mcp-server.js';
+import { emitOnExit, setCurrentVersion, setMcpMode } from './update-notice.js';
 import { DEFAULT_API_URL, DeviceCodeDeniedError, DeviceCodeExpiredError, DeviceCodeFailedError, InvalidFlagError, PublishArgsError, classifyBrandingError, parseShortIdAndVersion, parseShowBrandingFlag, pollDeviceToken, readApiKeyFromTty, readStreamToString, resolveAuth as resolveAuthFromEnvAndConfig, validatePublishArgs } from './main-helpers.js';
 var require = createRequire(import.meta.url);
 var version = require('../package.json').version;
+// Update-notice scaffolding (spec/feat-cli-update-notification.md). The
+// `'exit'` hook fires on every termination path — natural completion,
+// `process.exit(N)`, uncaught throws — so the notice lands regardless of
+// which exit path the command took. `'beforeExit'` would not work; it
+// does not fire when `process.exit()` is called explicitly.
+//
+// Process-level idempotency: keyed on a Symbol.for so `vi.resetModules()`
+// + dynamic re-import in tests does not stack a second listener (each
+// re-import would otherwise re-run this top-level statement).
+setCurrentVersion(version);
+var EXIT_HOOK_FLAG = Symbol.for('@displaydev/cli.exit-hook-registered');
+var flagged = process;
+if (!flagged[EXIT_HOOK_FLAG]) {
+    flagged[EXIT_HOOK_FLAG] = true;
+    process.on('exit', emitOnExit);
+}
 function resolveAuthOrConfig() {
     return _async_to_generator(function() {
         var auth;
@@ -260,7 +277,8 @@ function createClient(auth) {
     return new ApiClient({
         baseUrl: auth.apiUrl,
         apiKey: auth.apiKey,
-        clientType: 'cli'
+        clientType: 'cli',
+        version: version
     });
 }
 var program = new Command().name('dsp').description('display.dev CLI — publish artifacts behind company auth').version(version);
@@ -407,7 +425,8 @@ program.command('publish <path>').description('Publish an HTML or Markdown file.
                     publicClient = new ApiClient({
                         baseUrl: resolvePublicApiUrl(),
                         apiKey: '',
-                        clientType: 'cli'
+                        clientType: 'cli',
+                        version: version
                     });
                     _state.label = 10;
                 case 10:
@@ -1074,7 +1093,8 @@ program.command('login').description('Authenticate with display.dev').option('--
                     client = new ApiClient({
                         baseUrl: apiUrl,
                         apiKey: '',
-                        clientType: 'cli'
+                        clientType: 'cli',
+                        version: version
                     });
                     if (!(opts.apiKey !== undefined)) return [
                         3,
@@ -1703,6 +1723,537 @@ program.command('clear-logo').description('Remove the org logo (idempotent — s
         });
     })();
 });
+// --- comment add ---
+// `dsp comment add --artifact <shortId> --body "..." --anchor-json '<json>' [--parent <id>]`
+// Spec §3 maps to POST /v1/artifacts/:shortId/comments. Root posts
+// require a full anchor descriptor (textQuote prefix + exact + suffix
+// plus cssPath); replies inherit the root's anchor and must omit it.
+//
+// `--anchor-json` is intentionally the only anchor input. A bare-text
+// shortcut would have to fabricate prefix/suffix/cssPath, and the
+// underlying `dom-anchor-text-quote` resolver binds to the FIRST exact
+// match in the scope. Without prefix/suffix the resolver cannot
+// disambiguate duplicates and the comment can silently attach to the
+// wrong occurrence — see widget's anchor algorithm at
+// webapp/src/components/comments/anchor.ts:54. Forcing the caller to
+// supply the full descriptor (the agent has the source content; humans
+// can copy from the widget's selection JSON) keeps the bind reliable.
+program.command('comment').description('Comment-related subcommands. Run `dsp comment <cmd> --help` for each.').command('add').description('Post a root comment or reply on an artifact.').option('--artifact <shortId>', 'Artifact shortId (subject_type=artifact)').option('--kb-page <kbName...>', 'KB-page subject — pass two values: kb name then file path (subject_type=kb_page; not yet supported). Variadic (commander) — anything after `--kb-page` up to the next flag is consumed as the (kbName, filePath) tuple.').requiredOption('--body <text>', 'Comment body (≤10k chars)').option('--anchor-json <json>', 'Full anchor object as JSON: {"textQuote":{"prefix":"","exact":"...","suffix":""},"cssPath":"..."}. Required for root posts; omit for replies.').option('--parent <commentId>', 'Reply to this root comment id; omit for a root post').action(function(opts) {
+    return _async_to_generator(function() {
+        var subject, anchor, auth, client, result, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    subject = resolveSubjectFlags(opts);
+                    if (subject.kind === 'invalid') {
+                        console.error(subject.error);
+                        process.exit(1);
+                    }
+                    if (subject.kind === 'kb_page') {
+                        console.error('subject_type_not_implemented: KB-page subjects are not yet supported.');
+                        process.exit(1);
+                    }
+                    if (!opts.parent && !opts.anchorJson) {
+                        console.error('Root comments require --anchor-json. Use --parent <commentId> for a reply.');
+                        process.exit(1);
+                    }
+                    if (opts.parent && opts.anchorJson) {
+                        console.error('Replies inherit the root anchor — omit --anchor-json when --parent is set.');
+                        process.exit(1);
+                    }
+                    if (opts.anchorJson) {
+                        try {
+                            anchor = JSON.parse(opts.anchorJson);
+                        } catch (unused) {
+                            console.error('--anchor-json is not valid JSON.');
+                            process.exit(1);
+                        }
+                    }
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.addComment(subject.shortId, {
+                            body: opts.body,
+                            anchor: anchor,
+                            parentId: opts.parent
+                        })
+                    ];
+                case 3:
+                    result = _state.sent();
+                    console.log(JSON.stringify(result, null, 2));
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// --- comment list ---
+program.commands.find(function(c) {
+    return c.name() === 'comment';
+}).command('list').description('List comment threads on a subject.').option('--artifact <shortId>', 'Artifact shortId (subject_type=artifact)').option('--kb-page <kbName...>', 'KB-page subject — pass two values: kb name then file path (subject_type=kb_page; not yet supported). Variadic (commander) — anything after `--kb-page` up to the next flag is consumed as the (kbName, filePath) tuple.').option('--status <state>', 'open | resolved | all (default: open)').option('--since <iso>', 'ISO-8601 timestamp — filter to threads with activity at or after this point').action(function(opts) {
+    return _async_to_generator(function() {
+        var subject, auth, client, result, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    subject = resolveSubjectFlags(opts);
+                    if (subject.kind === 'invalid') {
+                        console.error(subject.error);
+                        process.exit(1);
+                    }
+                    if (subject.kind === 'kb_page') {
+                        console.error('subject_type_not_implemented: KB-page subjects are not yet supported.');
+                        process.exit(1);
+                    }
+                    if (opts.status && ![
+                        'open',
+                        'resolved',
+                        'all'
+                    ].includes(opts.status)) {
+                        console.error("Invalid --status: ".concat(opts.status, ". Use open, resolved, or all."));
+                        process.exit(1);
+                    }
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.listComments(subject.shortId, {
+                            status: opts.status,
+                            since: opts.since
+                        })
+                    ];
+                case 3:
+                    result = _state.sent();
+                    console.log(JSON.stringify(result, null, 2));
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// --- comment edit ---
+program.commands.find(function(c) {
+    return c.name() === 'comment';
+}).command('edit <commentId>').description('Edit your own comment within the 5-minute author window.').requiredOption('--body <text>', 'New comment body').action(function(commentId, opts) {
+    return _async_to_generator(function() {
+        var auth, client, result, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.editComment(commentId, opts.body)
+                    ];
+                case 3:
+                    result = _state.sent();
+                    console.log(JSON.stringify(result, null, 2));
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// --- comment delete ---
+program.commands.find(function(c) {
+    return c.name() === 'comment';
+}).command('delete <commentId>').description('Soft-delete a comment. Author / artifact creator / org admin.').action(function(commentId) {
+    return _async_to_generator(function() {
+        var auth, client, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.deleteComment(commentId)
+                    ];
+                case 3:
+                    _state.sent();
+                    console.log('Comment deleted.');
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// --- thread resolve / reopen ---
+var threadCmd = program.command('thread').description('Thread-level operations (resolve, reopen).');
+threadCmd.command('resolve <rootCommentId>').description('Mark a thread resolved. Thread participant / artifact creator / org admin.').action(function(commentId) {
+    return _async_to_generator(function() {
+        var auth, client, result, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.resolveThread(commentId)
+                    ];
+                case 3:
+                    result = _state.sent();
+                    console.log(JSON.stringify(result, null, 2));
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+threadCmd.command('reopen <rootCommentId>').description('Reopen a resolved thread. Any authenticated user with view access.').action(function(commentId) {
+    return _async_to_generator(function() {
+        var auth, client, result, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.reopenThread(commentId)
+                    ];
+                case 3:
+                    result = _state.sent();
+                    console.log(JSON.stringify(result, null, 2));
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// --- watch / unwatch ---
+program.command('watch').description('Watch a subject for comment notifications.').option('--artifact <shortId>', 'Artifact shortId (subject_type=artifact)').option('--kb-page <kbName...>', 'KB-page subject — pass two values: kb name then file path (subject_type=kb_page; not yet supported). Variadic (commander) — anything after `--kb-page` up to the next flag is consumed as the (kbName, filePath) tuple.').action(function(opts) {
+    return _async_to_generator(function() {
+        var subject, auth, client, result, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    subject = resolveSubjectFlags(opts);
+                    if (subject.kind === 'invalid') {
+                        console.error(subject.error);
+                        process.exit(1);
+                    }
+                    if (subject.kind === 'kb_page') {
+                        console.error('subject_type_not_implemented: KB-page subjects are not yet supported.');
+                        process.exit(1);
+                    }
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.watchArtifact(subject.shortId)
+                    ];
+                case 3:
+                    result = _state.sent();
+                    console.log(JSON.stringify(result, null, 2));
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+program.command('unwatch').description('Unwatch a subject.').option('--artifact <shortId>', 'Artifact shortId (subject_type=artifact)').option('--kb-page <kbName...>', 'KB-page subject — pass two values: kb name then file path (subject_type=kb_page; not yet supported). Variadic (commander) — anything after `--kb-page` up to the next flag is consumed as the (kbName, filePath) tuple.').action(function(opts) {
+    return _async_to_generator(function() {
+        var subject, auth, client, err;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    subject = resolveSubjectFlags(opts);
+                    if (subject.kind === 'invalid') {
+                        console.error(subject.error);
+                        process.exit(1);
+                    }
+                    if (subject.kind === 'kb_page') {
+                        console.error('subject_type_not_implemented: KB-page subjects are not yet supported.');
+                        process.exit(1);
+                    }
+                    return [
+                        4,
+                        resolveAuthOrConfig()
+                    ];
+                case 1:
+                    auth = _state.sent();
+                    client = createClient(auth);
+                    _state.label = 2;
+                case 2:
+                    _state.trys.push([
+                        2,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        client.unwatchArtifact(subject.shortId)
+                    ];
+                case 3:
+                    _state.sent();
+                    console.log('Unwatched.');
+                    return [
+                        3,
+                        5
+                    ];
+                case 4:
+                    err = _state.sent();
+                    handleCommentApiError(err);
+                    return [
+                        3,
+                        5
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+function resolveSubjectFlags(opts) {
+    var hasArtifact = Boolean(opts.artifact);
+    var kbPage = opts.kbPage;
+    var hasKbPage = Array.isArray(kbPage) && kbPage.length > 0;
+    if (hasArtifact && hasKbPage) {
+        return {
+            kind: 'invalid',
+            error: 'Pass either --artifact or --kb-page, not both.'
+        };
+    }
+    if (!hasArtifact && !hasKbPage) {
+        return {
+            kind: 'invalid',
+            error: 'Pass --artifact <shortId> or --kb-page <kbName> <filePath>.'
+        };
+    }
+    if (hasArtifact) {
+        return {
+            kind: 'artifact',
+            shortId: opts.artifact
+        };
+    }
+    if (kbPage.length !== 2) {
+        return {
+            kind: 'invalid',
+            error: '--kb-page requires exactly two values: <kbName> <filePath>.'
+        };
+    }
+    return {
+        kind: 'kb_page',
+        kbName: kbPage[0],
+        filePath: kbPage[1],
+        shortId: ''
+    };
+}
+/**
+ * Common error mapper for the comment / watch / thread subcommands.
+ * Mirrors the ApiError handling on share/rename so 401 prompts a
+ * re-login, 403 surfaces the API's reason verbatim, 404 shows a
+ * concrete "not found", and 410 (signed-token failures from the
+ * email-link routes) prints the API's message. Other errors fall
+ * through to a generic stringify.
+ */ function handleCommentApiError(err) {
+    if (_instanceof(err, ApiError)) {
+        if (err.status === 401) {
+            console.error('Your credential is no longer valid. Run: dsp login (or rotate DISPLAYDEV_API_KEY).');
+            process.exit(1);
+        }
+        if (err.status === 404) {
+            console.error(err.message);
+            process.exit(4);
+        }
+        if (err.status === 403 || err.status === 400 || err.status === 410 || err.status === 429) {
+            console.error(err.message);
+            process.exit(1);
+        }
+    }
+    var msg = _instanceof(err, Error) ? err.message : String(err);
+    console.error(msg);
+    process.exit(1);
+}
 // --- mcp ---
 program.command('mcp').description('Start MCP server over stdin/stdout').action(function() {
     return _async_to_generator(function() {
@@ -1716,6 +2267,7 @@ program.command('mcp').description('Start MCP server over stdin/stdout').action(
                     ];
                 case 1:
                     auth = _state.sent();
+                    setMcpMode();
                     if (!auth) return [
                         3,
                         3
@@ -1723,7 +2275,8 @@ program.command('mcp').description('Start MCP server over stdin/stdout').action(
                     client = new ApiClient({
                         baseUrl: auth.apiUrl,
                         apiKey: auth.apiKey,
-                        clientType: 'mcp-stdio'
+                        clientType: 'mcp-stdio',
+                        version: version
                     });
                     return [
                         4,
@@ -1743,7 +2296,8 @@ program.command('mcp').description('Start MCP server over stdin/stdout').action(
                     publicClient = new ApiClient({
                         baseUrl: resolvePublicApiUrl(),
                         apiKey: '',
-                        clientType: 'mcp-stdio'
+                        clientType: 'mcp-stdio',
+                        version: version
                     });
                     return [
                         4,