@letterstory/cli 0.176.30 → 0.176.32

package/lib/cli.mjs

@@ -83,7 +83,7 @@ import {
 import { fetchParkedSections, withoutParked } from "./parked.mjs";
 
 // Matches cli/package.json; publish-cli.yml rewrites both to the published version.
-export const VERSION = "0.176.30";
+export const VERSION = "0.176.32";
 
 /** The exit code for a gate refusal (CARD_REQUIRED, PAYMENT_FAILED, OUT_OF_TOKENS): 1 is a plain error. */
 export const EXIT_PAYMENT_REQUIRED = 3;

package/lib/commands/kernel.mjs

@@ -643,7 +643,7 @@ async function kernelEval(ctx) {
 
 /**
  * `kernel update <kernel-id>` — name/description/voice on an org-owned kernel. Raw
- * prompt/config editing stays staff-only (the app's own developer console), same as always.
+ * prompt/config editing stays staff-only (Super Admin), same as always.
  */
 async function kernelUpdate(ctx) {
 	const { client, positionals, flags, io } = ctx;

package/lib/commands/repo.mjs

@@ -79,6 +79,17 @@ const ARGS = {
 		repo_owner: { value: (flags) => splitRepo(flags).owner },
 		repo_name: { value: (flags) => splitRepo(flags).name },
 		base_branch: "branch",
+		tool_access: {
+			value: (flags) => {
+				const raw = readTextInput(flags, "tool-access", "tool-access-file");
+				if (raw === undefined) return undefined;
+				try {
+					return JSON.parse(raw);
+				} catch {
+					throw new CliError("--tool-access must be valid JSON (or use --tool-access-file <path|->).");
+				}
+			},
+		},
 		// --instructions, or a longer brief from --instructions-file <path> / - (stdin).
 		instructions: { value: (flags) => readTextInput(flags, "instructions", "instructions-file") },
 		// --attach <path> (uploaded first) and --attach-url <name>=<https url>, both repeatable;
@@ -461,6 +472,8 @@ async function repoStart(ctx) {
 		"branch",
 		"instructions",
 		"instructions-file",
+		"tool-access",
+		"tool-access-file",
 		"attach",
 		"attach-url",
 		"attach-ref",

package/lib/documents.mjs

@@ -79,6 +79,8 @@ export const DOCUMENT_FLAG_PAIRS = [
  * lists, so a new `--x-file` flag cannot be added without answering "prose or JSON?".
  */
 export const JSON_ARG_FLAG_PAIRS = [
+	// A build's explicit tool requirements and scopes (repo.mjs).
+	["tool-access", "tool-access-file"],
 	// A topic plan, or a whole saved proposal (onboard.mjs readTopicPlan).
 	["plan", "plan-file"],
 	// A reviewed plan handed back to be applied verbatim (onboard.mjs readAcceptedPlan).

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@letterstory/cli",
-	"version": "0.176.30",
+	"version": "0.176.32",
 	"description": "Spin up and manage Letter phantom blogs from your terminal.",
 	"type": "module",
 	"license": "UNLICENSED",