@epilot/cli 0.1.82 → 0.1.83

package/README.md

@@ -29,7 +29,7 @@ npm install -g @epilot/cli
 
 <!-- usage-help -->
 ```
-epilot v0.1.82 — CLI for epilot APIs
+epilot v0.1.83 — CLI for epilot APIs
 
 USAGE
   epilot <api> <operationId> [params...] [flags]

package/dist/{add-component-IVVCAUGY.js → add-component-CJIQYDO5.js}

@@ -3,7 +3,7 @@ import {
   log,
   readManifest,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/app-TIWZ2LQC.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+// src/commands/app/index.ts
+import { defineCommand } from "citty";
+var app_default = defineCommand({
+  meta: {
+    name: "app",
+    description: "Manage epilot Apps \u2014 create, deploy, and manage app manifests"
+  },
+  subCommands: {
+    init: () => import("./init-345HGB5B.js").then((m) => m.default),
+    "add-component": () => import("./add-component-CJIQYDO5.js").then((m) => m.default),
+    "remove-component": () => import("./remove-component-LPTHVN4P.js").then((m) => m.default),
+    validate: () => import("./validate-TLSOTJAY.js").then((m) => m.default),
+    deploy: () => import("./deploy-NRQHZ635.js").then((m) => m.default),
+    export: () => import("./export-ZRDJCALM.js").then((m) => m.default),
+    versions: () => import("./versions-VA4H3EPK.js").then((m) => m.default),
+    review: () => import("./review-OZTM3XBD.js").then((m) => m.default),
+    api: () => import("./api-5W2UMWCW.js").then((m) => m.default)
+  }
+});
+export {
+  app_default as default
+};

package/dist/bin/epilot.js

@@ -11,7 +11,7 @@ import { defineCommand } from "citty";
 var main = defineCommand({
   meta: {
     name: "epilot",
-    version: "0.1.82",
+    version: "0.1.83",
     description: "CLI for epilot APIs"
   },
   args: {
@@ -31,12 +31,12 @@ var main = defineCommand({
     profile: () => import("../profile-OZJL5ZPT.js").then((m) => m.default),
     config: () => import("../config-DGZIMLZK.js").then((m) => m.default),
     completion: () => import("../completion-N6A4VCAE.js").then((m) => m.default),
-    upgrade: () => import("../upgrade-YBOBA2V7.js").then((m) => m.default),
+    upgrade: () => import("../upgrade-5RN2XG2M.js").then((m) => m.default),
     "access-token": () => import("../access-token-WWE6BDJH.js").then((m) => m.default),
     address: () => import("../address-EH3C4CVB.js").then((m) => m.default),
     "address-suggestions": () => import("../address-suggestions-RRSLOBFW.js").then((m) => m.default),
     "ai-agents": () => import("../ai-agents-53M2KHPI.js").then((m) => m.default),
-    app: () => import("../app-EULJIEDB.js").then((m) => m.default),
+    app: () => import("../app-TIWZ2LQC.js").then((m) => m.default),
     "audit-logs": () => import("../audit-logs-YFRK3EFU.js").then((m) => m.default),
     automation: () => import("../automation-4DEE3TUI.js").then((m) => m.default),
     billing: () => import("../billing-XX4VVOPI.js").then((m) => m.default),
@@ -134,7 +134,7 @@ process.stderr.on("error", (err) => {
   if (err.code === "EPIPE") process.exit(0);
   throw err;
 });
-var VERSION = true ? "0.1.82" : (await null).default.version;
+var VERSION = true ? "0.1.83" : (await null).default.version;
 var reorderedArgv = hoistFlagsAfterSubcommand(process.argv.slice(2));
 process.argv = [process.argv[0], process.argv[1], ...reorderedArgv];
 var args = process.argv.slice(2);

package/dist/{chunk-4TDAAJ6H.js → chunk-QOD77YLW.js}

@@ -1,7 +1,11 @@
 #!/usr/bin/env node
 import {
+  loadCredentials,
   resolveToken
 } from "./chunk-M3M3C5WH.js";
+import {
+  getResolvedProfile
+} from "./chunk-YHQA2AVG.js";
 import {
   BOLD,
   DIM,
@@ -121,6 +125,33 @@ async function request(baseUrl, token, method, path, body) {
   }
   return text;
 }
+var parseJwtPayload = (token) => {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 3) return null;
+    const payload = Buffer.from(parts[1], "base64url").toString("utf-8");
+    return JSON.parse(payload);
+  } catch {
+    return null;
+  }
+};
+function resolveOrgId(tokenFlag, profile) {
+  const token = resolveToken(tokenFlag, profile);
+  const claims = token ? parseJwtPayload(token) : null;
+  const fromToken = claims?.org_id ?? claims?.["custom:ivy_org_id"];
+  if (fromToken) return fromToken;
+  return getResolvedProfile(profile)?.org_id ?? loadCredentials()?.org_id;
+}
+function derivePermissionsBaseUrl(appBaseUrl) {
+  try {
+    const url = new URL(appBaseUrl);
+    if (!url.hostname.startsWith("app.")) return null;
+    url.hostname = url.hostname.replace(/^app\./, "permissions.");
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
 function createAppApiClient(opts) {
   const baseUrl = opts.server ?? DEFAULT_BASE_URL;
   const getToken = () => {
@@ -150,6 +181,28 @@ function createAppApiClient(opts) {
     async patchVersion(appId, version, payload) {
       await request(baseUrl, getToken(), "PATCH", `/v1/app-configurations/${appId}/versions/${version}`, payload);
     },
+    /**
+     * Upsert the app's role in the developer's own organization with the
+     * manifest grants. The role id is attached to the app version via
+     * `role_id`; on installation the App API creates a copy of it (from the
+     * version's grants) in the installer's organization.
+     */
+    async upsertAppRole(params) {
+      const permissionsBaseUrl = derivePermissionsBaseUrl(baseUrl);
+      if (!permissionsBaseUrl) {
+        throw new Error(`Cannot derive permissions API URL from ${baseUrl}`);
+      }
+      const roleId = `${params.orgId}:${params.appId}`;
+      await request(permissionsBaseUrl, getToken(), "PUT", `/v1/permissions/roles/${roleId}`, {
+        id: roleId,
+        organization_id: params.orgId,
+        type: "user_role",
+        slug: params.appId,
+        name: `Automatically created by App ${params.appName}`,
+        grants: params.grants
+      });
+      return roleId;
+    },
     async cloneVersion(appId, version) {
       return request(
         baseUrl,
@@ -358,6 +411,7 @@ export {
   validateManifest,
   readManifest,
   writeManifest,
+  resolveOrgId,
   createAppApiClient,
   uploadFileToPresignedUrl,
   uploadDirectoryAsZip,

package/dist/{deploy-JMJFXUKQ.js → deploy-NRQHZ635.js}

@@ -4,10 +4,11 @@ import {
   formatFileSize,
   log,
   readManifest,
+  resolveOrgId,
   uploadDirectoryAsZip,
   uploadFileToPresignedUrl,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";
@@ -106,10 +107,32 @@ var deploy_default = defineCommand({
     }
     if (manifest.permissions?.length || manifest.blueprint?.manifest_id) {
       if (dryRun) {
+        if (manifest.permissions?.length) {
+          log.info("[dry-run] Would upsert app role in developer org");
+        }
         log.info("[dry-run] Would update version permissions/blueprint");
       } else {
+        let roleId;
+        if (manifest.permissions?.length) {
+          const orgId = resolveOrgId(args.token, args.profile);
+          if (orgId) {
+            try {
+              roleId = await client.upsertAppRole({
+                orgId,
+                appId,
+                appName: manifest.name,
+                grants: manifest.permissions
+              });
+              log.success(`Upserted app role ${roleId}`);
+            } catch (err) {
+              log.warn(`Could not upsert app role: ${err.message}`);
+            }
+          } else {
+            log.warn("Could not resolve org id \u2014 attaching grants without a developer-org role");
+          }
+        }
         await client.patchVersion(appId, targetVersion, {
-          ...manifest.permissions?.length ? { grants: manifest.permissions } : {},
+          ...manifest.permissions?.length ? { grants: manifest.permissions, ...roleId ? { role_id: roleId } : {} } : {},
           ...manifest.blueprint?.manifest_id ? { manifest_id: manifest.blueprint.manifest_id } : {}
         });
         log.success(`Updated version ${targetVersion} (permissions/blueprint)`);

package/dist/{export-JDDMBBNS.js → export-ZRDJCALM.js}

@@ -4,7 +4,7 @@ import {
   log,
   toManifest,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{init-QZTZF2JC.js → init-345HGB5B.js}

@@ -2,7 +2,7 @@
 import {
   log,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{remove-component-HJA5OA3H.js → remove-component-LPTHVN4P.js}

@@ -3,7 +3,7 @@ import {
   log,
   readManifest,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{review-7M27IRW6.js → review-OZTM3XBD.js}

@@ -3,7 +3,7 @@ import {
   createAppApiClient,
   log,
   readManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{upgrade-YBOBA2V7.js → upgrade-5RN2XG2M.js}

@@ -72,7 +72,7 @@ ${GREEN}${BOLD}Upgraded to @epilot/cli@${latest}${RESET}
   }
 });
 var getCurrentVersion = () => {
-  if (true) return "0.1.82";
+  if (true) return "0.1.83";
   try {
     const output = execSync("npm ls -g @epilot/cli --depth=0 --json 2>/dev/null", {
       encoding: "utf-8",

package/dist/{validate-QUSO4DR4.js → validate-TLSOTJAY.js}

@@ -2,7 +2,7 @@
 import {
   log,
   validateManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{versions-EUTT4SNW.js → versions-VA4H3EPK.js}

@@ -3,7 +3,7 @@ import {
   createAppApiClient,
   log,
   readManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/cli",
-  "version": "0.1.82",
+  "version": "0.1.83",
   "description": "CLI for epilot APIs",
   "type": "module",
   "bin": {

package/dist/app-EULJIEDB.js

@@ -1,24 +0,0 @@
-#!/usr/bin/env node
-
-// src/commands/app/index.ts
-import { defineCommand } from "citty";
-var app_default = defineCommand({
-  meta: {
-    name: "app",
-    description: "Manage epilot Apps \u2014 create, deploy, and manage app manifests"
-  },
-  subCommands: {
-    init: () => import("./init-QZTZF2JC.js").then((m) => m.default),
-    "add-component": () => import("./add-component-IVVCAUGY.js").then((m) => m.default),
-    "remove-component": () => import("./remove-component-HJA5OA3H.js").then((m) => m.default),
-    validate: () => import("./validate-QUSO4DR4.js").then((m) => m.default),
-    deploy: () => import("./deploy-JMJFXUKQ.js").then((m) => m.default),
-    export: () => import("./export-JDDMBBNS.js").then((m) => m.default),
-    versions: () => import("./versions-EUTT4SNW.js").then((m) => m.default),
-    review: () => import("./review-7M27IRW6.js").then((m) => m.default),
-    api: () => import("./api-5W2UMWCW.js").then((m) => m.default)
-  }
-});
-export {
-  app_default as default
-};