@lotics/cli 0.40.0 → 0.42.0

package/dist/app_commands.js

@@ -92,10 +92,6 @@ function readAppMeta(projectDir) {
         version_number: pkg.lotics.version_number ?? null,
         workflows: pkg.lotics.workflows ?? {},
         queries: pkg.lotics.queries ?? {},
-        // Left as `undefined` when absent so the deploy omits them and the
-        // App row's icon/theme is preserved.
-        icon: pkg.lotics.icon,
-        theme: pkg.lotics.theme,
         capabilities: pkg.lotics.capabilities,
     };
 }
@@ -346,15 +342,10 @@ export async function appDeploy(client, args) {
                 // Sync apps.queries from the manifest. Server validates each query
                 // template (parseQueryNode, table access, param coverage).
                 queries: meta.queries ?? {},
-                // Optional icon/theme overrides — only sent when the manifest
-                // declares them (undefined ⇒ omitted ⇒ App row left untouched).
-                icon: meta.icon,
-                theme: meta.theme,
-                // Capabilities are manifest-authoritative (like workflows/queries, not
-                // like icon/theme): always send, defaulting to `{}` when the manifest
-                // declares none — so deleting the `capabilities` block turns every
-                // capability OFF on the next deploy (fail-safe; the declaration is the
-                // grant). The manifest is the only writer of capabilities.
+                // Capabilities are manifest-authoritative (like workflows/queries):
+                // always send, defaulting to `{}` when the manifest declares none — so
+                // deleting the `capabilities` block turns every capability OFF on the
+                // next deploy (fail-safe; the declaration is the grant).
                 capabilities: meta.capabilities ?? {},
                 // Opt into destructive workflow removal. Default false — the server
                 // rejects deploys whose manifest is missing aliases the App row has.
@@ -367,6 +358,7 @@ export async function appDeploy(client, args) {
             });
             console.error(`Deployed v${result.version_number} (${result.version_id})`);
             console.error(`Bundle size: ${(result.bundle_size_bytes / 1024).toFixed(1)} KB`);
+            await warnIfUnbranded(client, meta.app_id);
         }
         catch (err) {
             const e = err;
@@ -385,6 +377,30 @@ export async function appDeploy(client, args) {
             fs.unlinkSync(tmpDist);
     }
 }
+/**
+ * Non-blocking nudge after a successful deploy: an app with no icon/color shows a
+ * generic tile in the launcher. Branding is set via `update_app` (the single
+ * setter) — this only reminds; it never fails the deploy.
+ */
+async function warnIfUnbranded(client, appId) {
+    try {
+        const app = await client.getApp(appId);
+        const missing = [];
+        if (!app.icon)
+            missing.push("icon");
+        if (!app.theme?.color)
+            missing.push("color");
+        if (missing.length === 0)
+            return;
+        console.error(`\n⚠ This app has no ${missing.join(" or ")} set — it shows a generic tile in the launcher.\n` +
+            `  Set it:  lotics run update_app '{"app_id":"${appId}","icon":"<lucide-name>","theme":{"color":"blue"}}'\n` +
+            `  Find an icon:  lotics run search_app_icons '{"query":"<word>"}'`);
+    }
+    catch (err) {
+        // Deploy already succeeded; a failed branding check must not mask that.
+        console.error(`(skipped branding check: ${err.message})`);
+    }
+}
 /**
  * `lotics app dev [path] [--port=5174] [--vite-port=5173]`
  *
@@ -418,12 +434,16 @@ export async function appDev(client, args) {
         port: args.port,
         vitePort: args.vitePort,
         client,
+        commentsEnabled: meta.capabilities?.comments,
     });
     await handle.ready;
     const url = `http://localhost:${handle.port}`;
     console.error(`\n  lotics app dev`);
     console.error(`  app:       ${app.name} (${meta.app_id})`);
     console.error(`  workspace: ${meta.workspace_id}`);
+    if (client.viewAsMemberId) {
+        console.error(`  view as:   ${client.viewAsMemberId} (is_current_member resolves to this member)`);
+    }
     console.error(`  vite:      http://localhost:${handle.vitePort}/`);
     console.error(`  open:      ${url}`);
     console.error(`  rpc:       ${client.baseUrl} (via Bearer API key)\n`);

package/dist/args.d.ts

@@ -22,6 +22,7 @@ export declare function parseArgs(argv: string[]): {
         as?: string;
         apiKey?: string;
         workspace?: string;
+        viewAs?: string;
         name?: string;
         timezone?: string;
         message?: string;

package/dist/args.js

@@ -18,6 +18,7 @@ export function parseArgs(argv) {
         as: undefined,
         apiKey: undefined,
         workspace: undefined,
+        viewAs: undefined,
         name: undefined,
         timezone: undefined,
         message: undefined,
@@ -55,6 +56,9 @@ export function parseArgs(argv) {
             case "-w":
                 flags.workspace = argv[++i];
                 break;
+            case "--view-as":
+                flags.viewAs = argv[++i];
+                break;
             case "--name":
                 flags.name = argv[++i];
                 break;

package/dist/args.test.js

@@ -45,6 +45,12 @@ describe("parseArgs", () => {
         const r = parseArgs(["run", "query_tables", "-w", "wsp_123"]);
         expect(r.flags.workspace).toBe("wsp_123");
     });
+    it("parses --view-as as a value flag", () => {
+        const r = parseArgs(["app", "dev", "--view-as", "mbr_abc"]);
+        expect(r.flags.viewAs).toBe("mbr_abc");
+        expect(r.command).toBe("app");
+        expect(r.subcommand).toBe("dev");
+    });
     it("parses --all as a boolean flag", () => {
         const r = parseArgs(["auth", "logout", "--all"]);
         expect(r.flags.all).toBe(true);

package/dist/cli.js

@@ -81,6 +81,9 @@ FLAGS
   --as <name>        Override upload filename
   --api-key <key>    One-off API key (overrides saved config + env)
   --workspace <id>   One-off workspace override (alias: -w)
+  --view-as <id>     Admin "View as": run every request as this member, so
+                     is_current_member / row-scoping resolve to them (also
+                     LOTICS_VIEW_AS env; admin key only; writes stay yours)
   --local            Pin the current directory (lotics org use / auth api-key)
   --all              (lotics auth logout) Remove every saved credential
   --version          Show version
@@ -279,7 +282,13 @@ function requireClient(flags) {
         console.error('Not authenticated. Run "lotics auth signup", "lotics auth api-key <key>", or set LOTICS_API_KEY.');
         process.exit(1);
     }
-    return { client: new LoticsClient({ apiKey: ctx.apiKey, workspaceId: ctx.workspaceId }), ctx };
+    // Admin "View as": flag wins over env. The server enforces admin-only; a
+    // non-admin key gets a clear 403 on the first request.
+    const viewAsMemberId = flags.viewAs ?? process.env.LOTICS_VIEW_AS;
+    return {
+        client: new LoticsClient({ apiKey: ctx.apiKey, workspaceId: ctx.workspaceId, viewAsMemberId }),
+        ctx,
+    };
 }
 const SOURCE_LABELS = {
     flag: "--api-key flag",
@@ -378,8 +387,9 @@ async function main() {
             const info = await client.whoami();
             const existing = loadGlobalConfig() ?? {};
             saveGlobalConfig({ ...existing, email: info.email });
+            const viewAs = flags.viewAs ?? process.env.LOTICS_VIEW_AS;
             if (flags.json) {
-                console.log(JSON.stringify({ ...info, workspace_id: ctx.workspaceId ?? null, source: ctx.source }, null, 2));
+                console.log(JSON.stringify({ ...info, workspace_id: ctx.workspaceId ?? null, source: ctx.source, view_as: viewAs ?? null }, null, 2));
             }
             else {
                 console.log(`Name:       ${info.name}`);
@@ -387,6 +397,8 @@ async function main() {
                 console.log(`Org:        ${info.organization_name} (${info.organization_id})`);
                 console.log(`Workspace:  ${ctx.workspaceId ?? "(none selected)"}`);
                 console.log(`Source:     ${SOURCE_LABELS[ctx.source]}`);
+                if (viewAs)
+                    console.log(`View as:    ${viewAs} (admin preview; requires an admin key)`);
             }
             return;
         }

package/dist/client.d.ts

@@ -22,6 +22,11 @@ export type AppQueryFilter = AppQueryFilterCondition | AppQueryFilterGroup;
 export interface LoticsClientOptions {
     apiKey: string;
     workspaceId?: string;
+    /** Admin "View as": when set, every request carries `x-view-as-member-id`, so
+     *  the backend evaluates IAM scoping (and `is_current_member`) as this member.
+     *  Admin-only — the server rejects a non-admin key. Writes stay attributed to
+     *  the key's owner. */
+    viewAsMemberId?: string;
 }
 export interface WorkspaceInfo {
     id: string;
@@ -56,6 +61,9 @@ export declare const API_BASE_URL: string;
 export declare class LoticsClient {
     private apiKey;
     private workspaceId;
+    /** The active "View as" target member id, if any. Read-only after
+     *  construction — surfaced so `lotics app dev` can show it in the banner. */
+    readonly viewAsMemberId: string | undefined;
     /** API URL the client is configured against. Read-only after construction.
      *  Surfaced for callers that need to display or log it (e.g., `lotics app dev`
      *  shows it in the banner). */
@@ -65,6 +73,7 @@ export declare class LoticsClient {
     private buildHeaders;
     private request;
     whoami(): Promise<{
+        member_id: string;
         email: string;
         name: string;
         organization_id: string;
@@ -96,6 +105,12 @@ export declare class LoticsClient {
         name: string;
         workspace_id: string;
         current_version_id: string | null;
+        /** Launcher icon — a Lucide name, or an image ref. Null when unset. */
+        icon?: string | null;
+        /** Launcher theme — `{ color }` is a palette token. Null when unset. */
+        theme?: {
+            color?: string | null;
+        } | null;
         /**
          * Live alias → workflow declaration map from `apps.workflows`. Source of
          * truth for `lotics app pull` — supersedes the manifest embedded in the
@@ -232,14 +247,6 @@ export declare class LoticsClient {
             ast: unknown;
             params?: Record<string, unknown>;
         }>;
-        /**
-         * App icon (Lucide name) + theme `{ color }` from `package.json#lotics`.
-         * `undefined` ⇒ not sent ⇒ the deploy leaves the App row's icon/theme
-         * as-is. A present value is applied authoritatively. `icon` rides as a
-         * raw form field; `theme` is an object, so it's JSON-encoded.
-         */
-        icon?: string;
-        theme?: Record<string, unknown>;
         /**
          * Opt-in app capabilities from `package.json#lotics.capabilities`. The CLI
          * sends this on every deploy (defaulting to `{}`): the manifest is

package/dist/client.js

@@ -49,6 +49,9 @@ export const API_BASE_URL = process.env.LOTICS_API_URL ?? "https://api.lotics.ai
 export class LoticsClient {
     apiKey;
     workspaceId;
+    /** The active "View as" target member id, if any. Read-only after
+     *  construction — surfaced so `lotics app dev` can show it in the banner. */
+    viewAsMemberId;
     /** API URL the client is configured against. Read-only after construction.
      *  Surfaced for callers that need to display or log it (e.g., `lotics app dev`
      *  shows it in the banner). */
@@ -56,6 +59,7 @@ export class LoticsClient {
     constructor(options) {
         this.apiKey = options.apiKey;
         this.workspaceId = options.workspaceId;
+        this.viewAsMemberId = options.viewAsMemberId;
         this.baseUrl = API_BASE_URL;
     }
     async throwResponseError(response) {
@@ -77,6 +81,9 @@ export class LoticsClient {
         if (this.workspaceId) {
             headers["x-workspace-id"] = this.workspaceId;
         }
+        if (this.viewAsMemberId) {
+            headers["x-view-as-member-id"] = this.viewAsMemberId;
+        }
         return headers;
     }
     async request(method, path, body) {
@@ -220,16 +227,6 @@ export class LoticsClient {
         // Always send queries — empty object clears any previously-declared
         // named queries. Server validates each template.
         formData.append("queries", JSON.stringify(args.queries ?? {}));
-        // icon/theme are optional overrides — only sent when the manifest
-        // declares them, so a deploy never clobbers a value set in the UI.
-        // `icon` is a plain string → raw field, like `message`. `theme` is an
-        // object → JSON-encoded, like `workflows`/`queries`.
-        if (args.icon !== undefined) {
-            formData.append("icon", args.icon);
-        }
-        if (args.theme !== undefined) {
-            formData.append("theme", JSON.stringify(args.theme));
-        }
         // capabilities is manifest-authoritative — the caller always passes it
         // (`{}` when none declared), so a deploy turns off any capability the
         // manifest no longer declares. JSON-encoded.

package/dist/dev/rpc_handler.d.ts

@@ -6,10 +6,16 @@
  * { message }. Same shape as the production iframe-host's error path.
  */
 import { LoticsClient } from "../client.js";
-export type RpcOp = "query" | "workflow" | "members" | "upload_url" | "upload_complete";
+export type RpcOp = "query" | "workflow" | "members" | "context" | "upload_url" | "upload_complete";
 export interface RpcRequest {
     app_id: string;
     op: RpcOp;
     payload: unknown;
 }
-export declare function dispatchRpc(client: LoticsClient, body: RpcRequest): Promise<unknown>;
+/** Per-app facts the dev server knows from the local manifest that the
+ *  production iframe-host supplies from the embedding context. */
+export interface DispatchOptions {
+    /** From `package.json#lotics.capabilities.comments`. */
+    commentsEnabled?: boolean;
+}
+export declare function dispatchRpc(client: LoticsClient, body: RpcRequest, opts?: DispatchOptions): Promise<unknown>;

package/dist/dev/rpc_handler.js

@@ -9,10 +9,11 @@ const SUPPORTED_OPS = new Set([
     "query",
     "workflow",
     "members",
+    "context",
     "upload_url",
     "upload_complete",
 ]);
-export async function dispatchRpc(client, body) {
+export async function dispatchRpc(client, body, opts) {
     if (!body || typeof body.app_id !== "string" || typeof body.op !== "string") {
         throw new Error("RPC envelope must include app_id and op");
     }
@@ -20,6 +21,17 @@ export async function dispatchRpc(client, body) {
         throw new Error(`Unknown RPC op: ${body.op}`);
     }
     switch (body.op) {
+        case "context": {
+            // In production the iframe host supplies the context; here we resolve the
+            // effective viewer from the CLI key (the view-as target when the client
+            // carries `x-view-as-member-id`, else the key's owner), so `useViewer`
+            // and `is_current_member` agree in the dev loop.
+            const who = await client.whoami();
+            return {
+                member_id: who.member_id,
+                comments_enabled: opts?.commentsEnabled ?? false,
+            };
+        }
         case "query": {
             const p = body.payload;
             if (!p || typeof p.alias !== "string") {

package/dist/dev/rpc_handler.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/dev/rpc_handler.test.js

@@ -0,0 +1,28 @@
+import { describe, it, expect } from "vitest";
+import { dispatchRpc } from "./rpc_handler.js";
+function mockClient(over) {
+    return over;
+}
+const WHOAMI = {
+    member_id: "mbr_viewer",
+    email: "v@test.local",
+    name: "Viewer",
+    organization_id: "org_1",
+    organization_name: "Org",
+};
+describe("dispatchRpc — context op", () => {
+    it("resolves the viewer member_id from whoami + manifest comments_enabled", async () => {
+        const client = mockClient({ whoami: async () => WHOAMI });
+        const result = await dispatchRpc(client, { app_id: "app_x", op: "context", payload: {} }, { commentsEnabled: true });
+        expect(result).toEqual({ member_id: "mbr_viewer", comments_enabled: true });
+    });
+    it("defaults comments_enabled to false when the manifest declares none", async () => {
+        const client = mockClient({ whoami: async () => WHOAMI });
+        const result = await dispatchRpc(client, { app_id: "app_x", op: "context", payload: {} });
+        expect(result).toEqual({ member_id: "mbr_viewer", comments_enabled: false });
+    });
+    it("rejects an op that isn't supported", async () => {
+        const client = mockClient({});
+        await expect(dispatchRpc(client, { app_id: "app_x", op: "bogus", payload: {} })).rejects.toThrow(/Unknown RPC op/);
+    });
+});

package/dist/dev/server.d.ts

@@ -25,6 +25,9 @@ export interface DevServerArgs {
     /** Preferred Vite port. If taken, auto-picks a free one. */
     vitePort?: number;
     client: LoticsClient;
+    /** From `package.json#lotics.capabilities.comments` — fed to the `context` op
+     *  so `useComments` reflects the manifest in the dev loop. */
+    commentsEnabled?: boolean;
 }
 export interface DevServerHandle {
     port: number;

package/dist/dev/server.js

@@ -91,7 +91,7 @@ export async function startDevServer(args) {
                     app_id: body.app_id,
                     op: body.op,
                     payload: body.payload,
-                });
+                }, { commentsEnabled: args.commentsEnabled });
                 const ms = Date.now() - startedAt;
                 process.stderr.write(`[rpc] ${body.op} ${ms}ms\n`);
                 res.writeHead(200, { "Content-Type": "application/json" });

package/dist/src/cli.js

@@ -29625,6 +29625,9 @@ var API_BASE_URL = process.env.LOTICS_API_URL ?? "https://api.lotics.ai";
 var LoticsClient = class {
   apiKey;
   workspaceId;
+  /** The active "View as" target member id, if any. Read-only after
+   *  construction — surfaced so `lotics app dev` can show it in the banner. */
+  viewAsMemberId;
   /** API URL the client is configured against. Read-only after construction.
    *  Surfaced for callers that need to display or log it (e.g., `lotics app dev`
    *  shows it in the banner). */
@@ -29632,6 +29635,7 @@ var LoticsClient = class {
   constructor(options) {
     this.apiKey = options.apiKey;
     this.workspaceId = options.workspaceId;
+    this.viewAsMemberId = options.viewAsMemberId;
     this.baseUrl = API_BASE_URL;
   }
   async throwResponseError(response) {
@@ -29652,6 +29656,9 @@ var LoticsClient = class {
     if (this.workspaceId) {
       headers["x-workspace-id"] = this.workspaceId;
     }
+    if (this.viewAsMemberId) {
+      headers["x-view-as-member-id"] = this.viewAsMemberId;
+    }
     return headers;
   }
   async request(method, path7, body) {
@@ -29814,12 +29821,6 @@ var LoticsClient = class {
     }
     formData.append("workflows", JSON.stringify(args.workflows ?? {}));
     formData.append("queries", JSON.stringify(args.queries ?? {}));
-    if (args.icon !== void 0) {
-      formData.append("icon", args.icon);
-    }
-    if (args.theme !== void 0) {
-      formData.append("theme", JSON.stringify(args.theme));
-    }
     if (args.capabilities !== void 0) {
       formData.append("capabilities", JSON.stringify(args.capabilities));
     }
@@ -30648,10 +30649,11 @@ var SUPPORTED_OPS = /* @__PURE__ */ new Set([
   "query",
   "workflow",
   "members",
+  "context",
   "upload_url",
   "upload_complete"
 ]);
-async function dispatchRpc(client, body) {
+async function dispatchRpc(client, body, opts) {
   if (!body || typeof body.app_id !== "string" || typeof body.op !== "string") {
     throw new Error("RPC envelope must include app_id and op");
   }
@@ -30659,6 +30661,13 @@ async function dispatchRpc(client, body) {
     throw new Error(`Unknown RPC op: ${body.op}`);
   }
   switch (body.op) {
+    case "context": {
+      const who = await client.whoami();
+      return {
+        member_id: who.member_id,
+        comments_enabled: opts?.commentsEnabled ?? false
+      };
+    }
     case "query": {
       const p = body.payload;
       if (!p || typeof p.alias !== "string") {
@@ -30949,11 +30958,15 @@ async function startDevServer(args) {
       try {
         const body = await readJson(req);
         const startedAt = Date.now();
-        const result = await dispatchRpc(args.client, {
-          app_id: body.app_id,
-          op: body.op,
-          payload: body.payload
-        });
+        const result = await dispatchRpc(
+          args.client,
+          {
+            app_id: body.app_id,
+            op: body.op,
+            payload: body.payload
+          },
+          { commentsEnabled: args.commentsEnabled }
+        );
         const ms = Date.now() - startedAt;
         process.stderr.write(`[rpc] ${body.op} ${ms}ms
 `);
@@ -31239,10 +31252,6 @@ function readAppMeta(projectDir) {
     version_number: pkg2.lotics.version_number ?? null,
     workflows: pkg2.lotics.workflows ?? {},
     queries: pkg2.lotics.queries ?? {},
-    // Left as `undefined` when absent so the deploy omits them and the
-    // App row's icon/theme is preserved.
-    icon: pkg2.lotics.icon,
-    theme: pkg2.lotics.theme,
     capabilities: pkg2.lotics.capabilities
   };
 }
@@ -31417,15 +31426,10 @@ async function appDeploy(client, args) {
         // Sync apps.queries from the manifest. Server validates each query
         // template (parseQueryNode, table access, param coverage).
         queries: meta.queries ?? {},
-        // Optional icon/theme overrides — only sent when the manifest
-        // declares them (undefined ⇒ omitted ⇒ App row left untouched).
-        icon: meta.icon,
-        theme: meta.theme,
-        // Capabilities are manifest-authoritative (like workflows/queries, not
-        // like icon/theme): always send, defaulting to `{}` when the manifest
-        // declares none — so deleting the `capabilities` block turns every
-        // capability OFF on the next deploy (fail-safe; the declaration is the
-        // grant). The manifest is the only writer of capabilities.
+        // Capabilities are manifest-authoritative (like workflows/queries):
+        // always send, defaulting to `{}` when the manifest declares none — so
+        // deleting the `capabilities` block turns every capability OFF on the
+        // next deploy (fail-safe; the declaration is the grant).
         capabilities: meta.capabilities ?? {},
         // Opt into destructive workflow removal. Default false — the server
         // rejects deploys whose manifest is missing aliases the App row has.
@@ -31438,6 +31442,7 @@ async function appDeploy(client, args) {
       });
       console.error(`Deployed v${result.version_number} (${result.version_id})`);
       console.error(`Bundle size: ${(result.bundle_size_bytes / 1024).toFixed(1)} KB`);
+      await warnIfUnbranded(client, meta.app_id);
     } catch (err2) {
       const e = err2;
       if (e.code === "VERSION_CONFLICT") {
@@ -31453,6 +31458,23 @@ async function appDeploy(client, args) {
     if (fs3.existsSync(tmpDist)) fs3.unlinkSync(tmpDist);
   }
 }
+async function warnIfUnbranded(client, appId) {
+  try {
+    const app = await client.getApp(appId);
+    const missing = [];
+    if (!app.icon) missing.push("icon");
+    if (!app.theme?.color) missing.push("color");
+    if (missing.length === 0) return;
+    console.error(
+      `
+\u26A0 This app has no ${missing.join(" or ")} set \u2014 it shows a generic tile in the launcher.
+  Set it:  lotics run update_app '{"app_id":"${appId}","icon":"<lucide-name>","theme":{"color":"blue"}}'
+  Find an icon:  lotics run search_app_icons '{"query":"<word>"}'`
+    );
+  } catch (err2) {
+    console.error(`(skipped branding check: ${err2.message})`);
+  }
+}
 async function appDev(client, args) {
   const projectDir = path4.resolve(args.projectDir ?? process.cwd());
   const meta = readAppMeta(projectDir);
@@ -31466,7 +31488,8 @@ async function appDev(client, args) {
     api_url: client.baseUrl,
     port: args.port,
     vitePort: args.vitePort,
-    client
+    client,
+    commentsEnabled: meta.capabilities?.comments
   });
   await handle.ready;
   const url = `http://localhost:${handle.port}`;
@@ -31474,6 +31497,9 @@ async function appDev(client, args) {
   lotics app dev`);
   console.error(`  app:       ${app.name} (${meta.app_id})`);
   console.error(`  workspace: ${meta.workspace_id}`);
+  if (client.viewAsMemberId) {
+    console.error(`  view as:   ${client.viewAsMemberId} (is_current_member resolves to this member)`);
+  }
   console.error(`  vite:      http://localhost:${handle.vitePort}/`);
   console.error(`  open:      ${url}`);
   console.error(`  rpc:       ${client.baseUrl} (via Bearer API key)
@@ -31503,6 +31529,7 @@ function parseArgs(argv) {
     as: void 0,
     apiKey: void 0,
     workspace: void 0,
+    viewAs: void 0,
     name: void 0,
     timezone: void 0,
     message: void 0,
@@ -31540,6 +31567,9 @@ function parseArgs(argv) {
       case "-w":
         flags.workspace = argv[++i];
         break;
+      case "--view-as":
+        flags.viewAs = argv[++i];
+        break;
       case "--name":
         flags.name = argv[++i];
         break;
@@ -47360,6 +47390,9 @@ FLAGS
   --as <name>        Override upload filename
   --api-key <key>    One-off API key (overrides saved config + env)
   --workspace <id>   One-off workspace override (alias: -w)
+  --view-as <id>     Admin "View as": run every request as this member, so
+                     is_current_member / row-scoping resolve to them (also
+                     LOTICS_VIEW_AS env; admin key only; writes stay yours)
   --local            Pin the current directory (lotics org use / auth api-key)
   --all              (lotics auth logout) Remove every saved credential
   --version          Show version
@@ -47542,7 +47575,11 @@ function requireClient(flags) {
     console.error('Not authenticated. Run "lotics auth signup", "lotics auth api-key <key>", or set LOTICS_API_KEY.');
     process.exit(1);
   }
-  return { client: new LoticsClient({ apiKey: ctx.apiKey, workspaceId: ctx.workspaceId }), ctx };
+  const viewAsMemberId = flags.viewAs ?? process.env.LOTICS_VIEW_AS;
+  return {
+    client: new LoticsClient({ apiKey: ctx.apiKey, workspaceId: ctx.workspaceId, viewAsMemberId }),
+    ctx
+  };
 }
 var SOURCE_LABELS = {
   flag: "--api-key flag",
@@ -47632,14 +47669,16 @@ async function main() {
       const info = await client2.whoami();
       const existing = loadGlobalConfig() ?? {};
       saveGlobalConfig({ ...existing, email: info.email });
+      const viewAs = flags.viewAs ?? process.env.LOTICS_VIEW_AS;
       if (flags.json) {
-        console.log(JSON.stringify({ ...info, workspace_id: ctx2.workspaceId ?? null, source: ctx2.source }, null, 2));
+        console.log(JSON.stringify({ ...info, workspace_id: ctx2.workspaceId ?? null, source: ctx2.source, view_as: viewAs ?? null }, null, 2));
       } else {
         console.log(`Name:       ${info.name}`);
         console.log(`Email:      ${info.email}`);
         console.log(`Org:        ${info.organization_name} (${info.organization_id})`);
         console.log(`Workspace:  ${ctx2.workspaceId ?? "(none selected)"}`);
         console.log(`Source:     ${SOURCE_LABELS[ctx2.source]}`);
+        if (viewAs) console.log(`View as:    ${viewAs} (admin preview; requires an admin key)`);
       }
       return;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.40.0",
+  "version": "0.42.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {