@fourier-labs/harbour 0.1.40 → 0.1.41

package/README.md

@@ -35,7 +35,7 @@ harbour check --app-root <path> [--integrations] [--json]  declaration, types, b
 harbour integrations catalog --app-root <path> [--json]   the company's connections as .harbour/integrations.json names them, with approved channels/views per environment
 harbour integrations request <connection> --reason <text> --app-root <path> [--environment <env>]
 harbour integrations status --app-root <path> [--json]
-harbour connect <company-start-url>                        once per company; then harbour login | logout
+harbour connect <work-email-or-start-url>                        once per company; then harbour login | logout
 harbour productionise --app-root <path> [--wait] [--json]  save + preview deployment, prints the protected link
 harbour status | retry | promote | setup | profile | audience | secrets … --operation <reference>
 ```
@@ -47,3 +47,5 @@ harbour status | retry | promote | setup | profile | audience | secrets … --op
 ## Development
 
 Built from the [governance control plane](https://github.com/Fourier-Labs-AI/harbour-governance-control-plane) repository: `npm ci`, `npm run build --prefix packages/harbour-cli`, tests in `tests/cli-kit.test.ts` and `tests/cli-packaging-contract.test.ts`. Releases are tagged `cli-v<version>` (a `-rc.N` candidate first, then the stable tag).
+
+Connect with `harbour connect name@getlokal.com`: the CLI tries `https://platform.isomorph.ai/start/getlokal.json` and validates the profile before saving it. This uses the first domain label as a guess, not a domain registry; subdomains or companies whose tenant name differs should use their company setup link. Only the guessed tenant name is sent, not the email. Company sign-in and access checks still apply.

package/dist/packages/harbour-cli/src/agent-setup.js

@@ -188,7 +188,7 @@ The person you are working with may not be a developer. They say what they want
 
 1. CLI, before \`harbour init\` or anything else: compare the installed CLI with the current release and upgrade it whenever it is behind — a CLI that merely runs is not good enough, only a current one is. \`harbour agent-setup\` prints both versions and says plainly when the installed one is missing or older (its \`--json\` result carries \`cli.upgradeRequired\` and \`cli.remediation\`); without that output, compare \`harbour --version\` with \`npx -y @fourier-labs/harbour --version\` yourself. If either says the installed one is missing or older, run \`npm i -g @fourier-labs/harbour\` and confirm \`harbour --version\` now matches, then continue. Every later command runs the *installed* CLI, so a stale one builds an app that passes every local check and is then refused by the deployment pipeline (\`kit_bundle_incompatible\`) minutes later, with nothing in the app to fix. The kit needs Node 22+ on macOS Apple silicon, Linux x64 or Windows x64; it installs and runs its local database, files and gateway without Docker.
 2. Folder: if the current folder has no \`.harbour/\` directory, run \`harbour init --app-root .\` — an empty folder gets a small starter app, an existing Vite + React app gets the kit files added and nothing overwritten. Then read the "Harbour development kit" block in CLAUDE.md / AGENTS.md; it holds the per-app rules.
-3. Sign-in, needed only for company systems and shipping: run \`harbour login\`. It opens the browser and the person finishes the sign-in there — the one step they do themselves; tell them so in one line. If login says the company is not connected yet, ask them for the Harbour link their IT/admin gave them and run \`harbour connect <link>\` first.
+3. Sign-in, needed only for company systems and shipping: run \`harbour login\`. It opens the browser and the person finishes the sign-in there — the one step they do themselves; tell them so in one line. If login says the company is not connected yet, ask for their work email and run \`harbour connect <work-email>\` first. This guesses the tenant from the first email-domain label and validates its company profile; it does not grant access. If the lookup fails, ask for the company setup link their IT/admin gave them and run \`harbour connect <link>\`.
 
 ## What they say → what you do
 

package/dist/packages/harbour-cli/src/cli.js

@@ -59,7 +59,7 @@ for (let index = 0; index < args.length; index += 1) {
 const explicitToken = process.env.HARBOUR_TOKEN?.trim() ?? "";
 const usage = [
     "Usage:",
-    "  harbour connect <company-start-url>",
+    "  harbour connect <work-email-or-start-url>",
     "  harbour login | logout",
     "  harbour productionise --app-root <path> [--include <relative-path>]... [--no-wait] [--max-wait <seconds>] [--json]",
     "  harbour status --operation <reference> [--wait] [--max-wait <seconds>] [--json]",
@@ -80,7 +80,7 @@ const usage = [
     "  harbour integrations request <connection> --reason <text> --app-root <path> [--environment <env>] [--operations a,b] [--expires-at <UTC>] [--json]",
     "  harbour integrations status --app-root <path> [--json]",
     "  harbour integrations catalog --app-root <path> [--json]   the company's connections as .harbour/integrations.json names them: identifiers, allowed operations, approved channels/views/mailboxes per environment (no app needed)",
-    "Run `harbour connect <company-start-url>` once, then sign in when Harbour asks.",
+    "Run `harbour connect <work-email-or-start-url>` once, then sign in when Harbour asks.",
     "productionise saves the app, follows its deployment, and prints the protected preview link; promote sends a tested preview to production.",
     `--max-wait bounds how long productionise, status --wait, retry and promote follow the deployment (default 30 minutes). When it passes the command exits 0 with status RUNNING, the last known deployment state, and the \`${continueCommand("<reference>")}\` that continues the same deployment: a bounded wait is not a failure and never means start another one.`,
     "For kit apps, productionise first checks that every connection in .harbour/integrations.json has a preview grant and exits 2 (INTEGRATIONS_NOT_READY) with the requests to make, asks governance whether the company's AI setup is ready when the app calls governed AI (exit 2, AI_NOT_READY, with the IT step), then runs the pipeline's kit gate in the local session and refuses (KIT_GATE_FAILED) what CodeBuild would refuse. promote asks the same AI question for production when --app-root names the app.",
@@ -179,7 +179,7 @@ else {
                 let governance;
                 if (testIntegrations) {
                     if (!config)
-                        throw new CliError("CONFIG_REQUIRED", "`--integrations` needs a company connection: run `harbour connect <company-start-url>`.");
+                        throw new CliError("CONFIG_REQUIRED", "`--integrations` needs a company connection: run `harbour connect <work-email-or-start-url>`.");
                     const token = await companyToken();
                     if (!token)
                         throw new CliError("AUTH_REQUIRED", "`--integrations` needs a Harbour sign-in: run `harbour login`.");
@@ -211,7 +211,7 @@ else {
         else {
             const config = resolveConfig(process.env, await loadConfig());
             if (!config)
-                throw new CliError("CONFIG_REQUIRED", "Connect Harbour first with `harbour connect <company-start-url>`.");
+                throw new CliError("CONFIG_REQUIRED", "Connect Harbour first with `harbour connect <work-email-or-start-url>`.");
             const url = config.mcpUrl;
             const tenant = config.tenantId;
             if (command === "login") {

package/dist/packages/harbour-cli/src/config.js

@@ -24,25 +24,44 @@ export async function saveConfig(config, path = configPath()) {
     await chmod(path, 0o600);
 }
 export async function connect(startUrl, path = configPath()) {
-    const url = new URL(startUrl);
+    const input = startUrl.trim();
+    const email = /^[^\s@]+@([a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+)$/i.exec(input);
+    const guessedTenant = email?.[1]?.split(".")[0]?.toLowerCase();
+    let url;
+    try {
+        url = new URL(guessedTenant ? `https://platform.isomorph.ai/start/${guessedTenant}.json` : input);
+    }
+    catch {
+        throw new Error("Enter your work email or the company setup link from your Isomorph start page: `harbour connect <work-email-or-start-url>`.");
+    }
     if (!/^https?:$/.test(url.protocol))
         throw new Error("Harbour connection URL must be an HTTPS URL.");
     if (!url.pathname.endsWith(".json")) {
         url.pathname = `${url.pathname.replace(/\/$/, "")}.json`;
     }
-    const response = await fetch(url, { headers: { accept: "application/json" }, redirect: "error" });
-    if (!response.ok)
-        throw new Error("Harbour could not read this company connection profile.");
-    const body = await response.json();
-    if (!isRecord(body) || body.schema !== "harbour.tenant-start/1.0")
-        throw new Error("This is not a Harbour connection profile.");
-    const config = {
-        schema: "harbour.cli-config/1.0",
-        tenantId: String(body.tenantId ?? ""),
-        mcpUrl: String(body.mcpUrl ?? ""),
-        ...(typeof body.uploadUrl === "string" ? { uploadUrl: body.uploadUrl } : {}),
-        ...(typeof body.apiUrl === "string" ? { apiUrl: body.apiUrl } : {})
-    };
+    let config;
+    try {
+        const response = await fetch(url, { headers: { accept: "application/json" }, redirect: "error" });
+        if (!response.ok)
+            throw new Error("Harbour could not read this company connection profile.");
+        const body = await response.json();
+        if (!isRecord(body) || body.schema !== "harbour.tenant-start/1.0")
+            throw new Error("This is not a Harbour connection profile.");
+        config = {
+            schema: "harbour.cli-config/1.0",
+            tenantId: String(body.tenantId ?? ""),
+            mcpUrl: String(body.mcpUrl ?? ""),
+            ...(typeof body.uploadUrl === "string" ? { uploadUrl: body.uploadUrl } : {}),
+            ...(typeof body.apiUrl === "string" ? { apiUrl: body.apiUrl } : {})
+        };
+        if (!validConfig(config) || (guessedTenant && config.tenantId !== guessedTenant))
+            throw new Error("This is not the expected Harbour connection profile.");
+    }
+    catch (error) {
+        if (guessedTenant)
+            throw new Error("Harbour could not find your company from that email. Ask for the company setup link from your Isomorph start page, then run `harbour connect <company-start-url>`.");
+        throw error;
+    }
     await saveConfig(config, path);
     return config;
 }

package/dist/packages/harbour-cli/src/integrations.js

@@ -232,7 +232,7 @@ export async function integrationsCatalog(client) {
             connection: entry.connection, kind: entry.kind, ...(entry.provider ? { provider: entry.provider } : {}), ...(entry.connector ? { connector: entry.connector } : {}), ...(entry.installation ? { installation: entry.installation } : {}),
             displayName: entry.displayName, status: entry.status,
             operations: entry.operations.map(item => ({ operation: item.operation, identities: [...item.identities] })),
-            resources: Object.fromEntries(ENVIRONMENTS.map(environment => [environment, (entry.resources[environment] ?? []).map(resource => ({ name: resource.name, ...(resource.columns ? { columns: [...resource.columns] } : {}) }))]))
+            resources: Object.fromEntries(ENVIRONMENTS.map(environment => [environment, (entry.resources[environment] ?? []).map(resource => ({ name: resource.name, ...(resource.columns ? { columns: [...resource.columns] } : {}), ...(resource.description ? { description: resource.description } : {}) }))]))
         })) };
 }
 const PROVIDER_WORDS = { slack: "Slack", gmail: "Gmail" };
@@ -248,7 +248,7 @@ export function renderIntegrationsCatalog(result) {
         lines.push(`\`${entry.connection}\` — ${what} "${entry.displayName}" (${state})`);
         lines.push(`  operations: ${entry.operations.map(item => `${item.operation} (${item.identities.join(" or ")})`).join(", ") || "none allowed"}`);
         for (const environment of ENVIRONMENTS) {
-            const names = entry.resources[environment].map(resource => `${resource.name}${resource.columns?.length ? ` (${resource.columns.join(", ")})` : ""}`);
+            const names = entry.resources[environment].map(resource => `${resource.name}${resource.description ? ` — ${resource.description}` : ""}${resource.columns?.length ? ` (${resource.columns.join(", ")})` : ""}`);
             lines.push(`  ${environment}: ${names.join(", ") || "nothing approved yet"}`);
         }
     }

package/dist/packages/harbour-cli/src/version.js

@@ -1 +1 @@
-export const CLI_VERSION = "0.1.40";
+export const CLI_VERSION = "0.1.41";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "description": "Harbour productionisation helper",
   "type": "module",
   "bin": {