@glasshome/widget-cli 0.4.7 → 0.4.9

package/bin/cli.ts

@@ -51,16 +51,25 @@ Examples:
   glasshome-widget publish --dir packages/widgets
 `.trim();
 
-const rawArgs = process.argv.slice(2);
-const dirFlagIdx = rawArgs.indexOf("--dir");
-let explicitDir: string | undefined;
-if (dirFlagIdx !== -1) {
-  explicitDir = rawArgs[dirFlagIdx + 1];
-  rawArgs.splice(dirFlagIdx, 2);
-}
-const [command, ...args] = rawArgs;
-
-if (command === "help" || command === "--help" || command === "-h") {
+import { parseArgs } from "node:util";
+
+const { values: flags, positionals } = parseArgs({
+  args: process.argv.slice(2),
+  options: {
+    dir: { type: "string" },
+    name: { type: "string" },
+    bump: { type: "string" },
+    scope: { type: "string" },
+    help: { type: "boolean", short: "h" },
+  },
+  allowPositionals: true,
+  strict: false,
+});
+
+const explicitDir = flags.dir;
+const [command, ...args] = positionals;
+
+if (command === "help" || flags.help) {
   console.log(HELP);
   process.exit(0);
 }
@@ -132,18 +141,12 @@ switch (effectiveCommand) {
   }
 
   case "publish": {
-    const hubUrlArg = args.find((a) => !a.startsWith("--"));
-    const nameIdx = rawArgs.indexOf("--name");
-    const bumpIdx = rawArgs.indexOf("--bump");
-    const scopeIdx = rawArgs.indexOf("--scope");
-    const pubName = nameIdx !== -1 ? rawArgs[nameIdx + 1] : undefined;
-    const pubBump = bumpIdx !== -1 ? rawArgs[bumpIdx + 1] : undefined;
-    const pubScope = scopeIdx !== -1 ? rawArgs[scopeIdx + 1] : undefined;
+    const hubUrlArg = args[0];
     const { runPublish } = await import("../src/commands/publish");
     await runPublish(resolveWidgetDir(), hubUrlArg, {
-      name: pubName,
-      bump: pubBump as "keep" | "patch" | "minor" | "major" | undefined,
-      scope: pubScope,
+      name: flags.name,
+      bump: flags.bump as "keep" | "patch" | "minor" | "major" | undefined,
+      scope: flags.scope,
     });
     outro("Done");
     break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glasshome/widget-cli",
-  "version": "0.4.7",
+  "version": "0.4.9",
   "description": "CLI for creating and managing GlassHome widgets",
   "type": "module",
   "bin": {
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@clack/prompts": "^0.10.0",
-    "@glasshome/widget-sdk": "0.2.5",
+    "@glasshome/widget-sdk": "^0.4.0",
     "open": "^11.0.0",
     "semver": "^7.6.0",
     "vite-plugin-solid": "^2.11.0"

package/src/commands/connect.ts

@@ -3,7 +3,7 @@ import { resolve } from "node:path";
 import { log, spinner } from "@clack/prompts";
 import { buildWidgets } from "@glasshome/widget-sdk/vite";
 import { trpcMutate, trpcQuery } from "../utils/api";
-import { extractHost, getHostToken, storeHostToken } from "../utils/auth";
+import { clearHostToken, extractHost, getHostToken, storeHostToken } from "../utils/auth";
 
 interface RegistryWidget {
   name: string;
@@ -127,9 +127,16 @@ export async function runConnect(apiUrl: string, cwd: string): Promise<void> {
         headers: { Authorization: `Bearer ${existingToken}` },
       });
       if (check.ok) {
-        token = existingToken;
-        log.info("Using stored credentials for dashboard.");
+        const body = (await check.json()) as { session?: unknown } | null;
+        if (body?.session) {
+          token = existingToken;
+          log.info("Using stored credentials for dashboard.");
+        } else {
+          clearHostToken(host);
+          log.warn("Stored credentials expired — re-authenticating.");
+        }
       } else {
+        clearHostToken(host);
         log.warn("Stored credentials expired — re-authenticating.");
       }
     } catch {

package/src/commands/validate.ts

@@ -32,6 +32,16 @@ function validateManifest(manifest: WidgetManifest): ValidationResult {
   if (!manifest.name) errors.push("Missing required field: name");
   if (!manifest.sdkVersion) errors.push("Missing required field: sdkVersion");
 
+  // INS-05: "*" sdkVersion is rejected at publish time — authors must declare
+  // a real range (e.g. "^0.3.0"). Installed widgets that already ship "*" are
+  // still tolerated by the loader with a warn-and-mount, but new publishes
+  // are blocked here.
+  if (manifest.sdkVersion === "*") {
+    errors.push(
+      `sdkVersion "*" is not allowed — declare a semver range (e.g. "^0.3.0") to opt into host compatibility checks`,
+    );
+  }
+
   // Size validation
   if (!hasValidMinSize) {
     errors.push("minSize must be an object with numeric w and h properties");