@m-kopa/launchpad-cli 0.27.3 → 0.27.4

package/CHANGELOG.md

@@ -6,6 +6,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html);
 pre-1.0 minor bumps may carry breaking changes per ADR 0005.
 
+## 0.27.4 — 2026-06-16
+
+Self-serve developer-access grants (sp-grnted, Bundle 1).
+
+- New `launchpad grant-editor <slug> <id>` / `revoke-editor <slug> <id>` —
+  owner-only verbs to manage who can develop/deploy an app. The CLI hides the
+  optimistic-concurrency dance (reads the version, writes with `If-Match`,
+  re-reads + retries once on a 409, then exits `75` on a persistent conflict)
+  and shows a confirm-preview before mutating live authz (`--yes` to skip,
+  required in non-interactive mode).
+- New `launchpad whoami --share` (alias `--id`) prints **only** your verified
+  id, so you can hand it to an app owner granting you access. Fails closed if
+  the id is unreadable rather than printing a sentinel.
+- Grant by **email** is intentionally deferred to a later release (Bundle 2);
+  email-shaped values on the by-id path are rejected with a pointer.
+
 ## 0.27.3 — 2026-06-15
 
 DX: keep the Claude Code skill bundle current automatically (sp-uwugsm).

package/dist/cli.js

@@ -19,7 +19,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/version.ts
-var CLI_VERSION = "0.27.3";
+var CLI_VERSION = "0.27.4";
 
 // src/config.ts
 import * as os from "node:os";
@@ -10993,7 +10993,11 @@ var whoamiCommand = {
   summary: "show current session identity + role per app",
   run: runWhoami
 };
-async function runWhoami(_args, io) {
+async function runWhoami(args, io) {
+  const wantShare = args.includes("--share") || args.includes("--id");
+  if (wantShare) {
+    return runShare(args, io);
+  }
   try {
     const cfg = loadConfig();
     const session = await readSession(cfg.sessionPath);
@@ -11036,10 +11040,197 @@ async function runWhoami(_args, io) {
     return 1;
   }
 }
+async function runShare(args, io) {
+  const json = args.includes("--json");
+  try {
+    const cfg = loadConfig();
+    const session = await readSession(cfg.sessionPath);
+    if (session === null) {
+      io.err("No session — run `launchpad login`.");
+      return 1;
+    }
+    let payload = null;
+    try {
+      payload = decodeJwtPayload(session.accessToken);
+    } catch {}
+    const rawSub = typeof payload?.sub === "string" ? payload.sub : null;
+    const sub = rawSub === null ? null : rawSub.trim();
+    if (sub === null || sub.length === 0) {
+      io.err("Couldn't read your id from the session — run `launchpad login` again.");
+      return 1;
+    }
+    io.out(json ? JSON.stringify({ sub }) : sub);
+    return 0;
+  } catch (e) {
+    if (e instanceof UnauthenticatedError) {
+      io.err(e.message);
+      return 1;
+    }
+    io.err(`launchpad whoami --share failed: ${describe31(e)}`);
+    return 1;
+  }
+}
 function describe31(e) {
   return e instanceof Error ? e.message : String(e);
 }
 
+// src/commands/editors.ts
+import { createInterface as createInterface4 } from "node:readline/promises";
+var CONFLICT_EXIT = 75;
+function realDeps() {
+  return {
+    loadConfig,
+    apiJson,
+    isTty: () => process.stdout.isTTY === true,
+    prompt: async (question) => {
+      const rl = createInterface4({ input: process.stdin, output: process.stdout });
+      try {
+        return (await rl.question(question)).trim();
+      } finally {
+        rl.close();
+      }
+    }
+  };
+}
+function parseArgs13(args) {
+  let slug;
+  let target;
+  let yes = false;
+  let json = false;
+  for (const a of args) {
+    if (a === "--yes" || a === "-y")
+      yes = true;
+    else if (a === "--json")
+      json = true;
+    else if (slug === undefined)
+      slug = a;
+    else if (target === undefined)
+      target = a;
+  }
+  if (slug === undefined || target === undefined)
+    return null;
+  return { slug, target, yes, json };
+}
+function isVersionMismatch(b) {
+  return typeof b === "object" && b !== null && b.error === "version_mismatch" && typeof b.currentVersion === "number";
+}
+function makeEditorCommand(action, deps = realDeps()) {
+  const name = action === "grant" ? "grant-editor" : "revoke-editor";
+  return {
+    name,
+    summary: action === "grant" ? "grant a developer editor access to an app (by id; email in Phase 2)" : "revoke a developer's editor access to an app",
+    run: (args, io) => runEditor(action, args, io, deps)
+  };
+}
+async function runEditor(action, args, io, deps) {
+  const verb = action === "grant" ? "grant-editor" : "revoke-editor";
+  const parsed = parseArgs13(args);
+  if (parsed === null) {
+    io.err(`usage: launchpad ${verb} <slug> <id> [--yes] [--json]`);
+    io.err("  <id> is the recipient's value from `launchpad whoami --share`.");
+    return 64;
+  }
+  const { slug, target, yes, json } = parsed;
+  if (!yes && !deps.isTty()) {
+    io.err(`launchpad ${verb}: refusing to mutate "${slug}" without confirmation — pass --yes in non-interactive mode.`);
+    return 64;
+  }
+  try {
+    const cfg = deps.loadConfig();
+    const current = await deps.apiJson(cfg, {
+      path: `/apps/${slug}`
+    });
+    const alreadyEditor = current.record.editors.includes(target);
+    if (!yes) {
+      const noop = action === "grant" && alreadyEditor || action === "revoke" && !alreadyEditor;
+      io.out(action === "grant" ? `About to grant editor access on "${slug}" to:
+  ${target}` : `About to revoke editor access on "${slug}" from:
+  ${target}`);
+      if (noop) {
+        io.out(action === "grant" ? "  (already an editor — this will be a no-op)" : "  (not currently an editor — this will be a no-op)");
+      }
+      const answer = (await deps.prompt("Proceed? [y/N] ")).toLowerCase();
+      if (answer !== "y" && answer !== "yes") {
+        io.out("Aborted — no change made.");
+        return 0;
+      }
+    }
+    const result = await mutateWithRetry(action, slug, target, current.record.version, cfg, deps);
+    if (result.kind === "conflict") {
+      io.err(`launchpad ${verb}: the app record for "${slug}" changed during the ${action} — re-run \`launchpad ${verb} ${slug} ${target}\`.`);
+      return CONFLICT_EXIT;
+    }
+    const changed = result.record.version !== result.attemptedVersion;
+    if (json) {
+      io.out(JSON.stringify({
+        ok: true,
+        slug,
+        action,
+        editor: target,
+        changed,
+        editors: result.record.editors
+      }));
+      return 0;
+    }
+    if (!changed) {
+      io.out(action === "grant" ? `${target} was already an editor on "${slug}" — no change.` : `${target} was not an editor on "${slug}" — no change.`);
+    } else {
+      io.out(action === "grant" ? `✓ ${target} is now an editor on "${slug}".` : `✓ ${target} is no longer an editor on "${slug}".`);
+    }
+    return 0;
+  } catch (e) {
+    if (e instanceof UnauthenticatedError) {
+      io.err(e.message);
+      return 1;
+    }
+    if (e instanceof ForbiddenError) {
+      io.err(`launchpad ${verb}: not authorised — you must be the owner of "${slug}" to manage its editors.`);
+      return 1;
+    }
+    if (e instanceof NotFoundError) {
+      io.err(`launchpad ${verb}: no app "${slug}" — check the slug with \`launchpad apps\`.`);
+      return 1;
+    }
+    io.err(`launchpad ${verb} failed: ${describe32(e)}`);
+    return 1;
+  }
+}
+async function mutateWithRetry(action, slug, target, startVersion, cfg, deps) {
+  let version = startVersion;
+  for (let attempt = 0;attempt < 2; attempt++) {
+    const body = await sendMutation(action, slug, target, version, cfg, deps);
+    if (isVersionMismatch(body)) {
+      version = body.currentVersion;
+      continue;
+    }
+    return { kind: "ok", record: body.record, attemptedVersion: version };
+  }
+  return { kind: "conflict" };
+}
+async function sendMutation(action, slug, target, version, cfg, deps) {
+  const headers = { "if-match": String(version) };
+  if (action === "grant") {
+    return deps.apiJson(cfg, {
+      method: "POST",
+      path: `/apps/${slug}/editors`,
+      jsonBody: { editor: target },
+      headers,
+      nonThrowingStatuses: [409]
+    });
+  }
+  return deps.apiJson(cfg, {
+    method: "DELETE",
+    path: `/apps/${slug}/editors/${encodeURIComponent(target)}`,
+    headers,
+    nonThrowingStatuses: [409]
+  });
+}
+function describe32(e) {
+  return e instanceof Error ? e.message : String(e);
+}
+var grantEditorCommand = makeEditorCommand("grant");
+var revokeEditorCommand = makeEditorCommand("revoke");
+
 // src/update-notifier.ts
 import { spawn as spawn6 } from "node:child_process";
 import { homedir as homedir4 } from "node:os";
@@ -11238,6 +11429,8 @@ var COMMANDS = [
   rollbackCommand,
   groupsCommand,
   secretsCommand,
+  grantEditorCommand,
+  revokeEditorCommand,
   refreshUpdateCacheCommand
 ];
 async function dispatch(argv, io, commands = COMMANDS) {

package/dist/commands/editors.d.ts

@@ -0,0 +1,16 @@
+import type { CliConfig } from "../config.js";
+import type { ApiRequestOptions } from "../http/api-client.js";
+import type { Command } from "../dispatcher.js";
+/** EX_TEMPFAIL — a concurrent edit won the race; the action is safe to retry. */
+export declare const CONFLICT_EXIT = 75;
+export type EditorAction = "grant" | "revoke";
+export interface EditorDeps {
+    readonly loadConfig: () => CliConfig;
+    readonly apiJson: <T>(cfg: CliConfig, opts: ApiRequestOptions) => Promise<T>;
+    readonly isTty: () => boolean;
+    readonly prompt: (question: string) => Promise<string>;
+}
+export declare function makeEditorCommand(action: EditorAction, deps?: EditorDeps): Command;
+export declare const grantEditorCommand: Command;
+export declare const revokeEditorCommand: Command;
+//# sourceMappingURL=editors.d.ts.map

package/dist/commands/editors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editors.d.ts","sourceRoot":"","sources":["../../src/commands/editors.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAS,OAAO,EAAY,MAAM,kBAAkB,CAAC;AAEjE,iFAAiF;AACjF,eAAO,MAAM,aAAa,KAAK,CAAC;AAEhC,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7E,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACxD;AA8DD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,UAAuB,GAAG,OAAO,CAU9F;AAgLD,eAAO,MAAM,kBAAkB,EAAE,OAAoC,CAAC;AACtE,eAAO,MAAM,mBAAmB,EAAE,OAAqC,CAAC"}

package/dist/dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../src/dispatcher.ts"],"names":[],"mappings":"AAiDA,MAAM,WAAW,KAAK;IACpB,sDAAsD;IACtD,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EA8BtC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,KAAK,EACT,QAAQ,GAAE,SAAS,OAAO,EAAa,GACtC,OAAO,CAAC,QAAQ,CAAC,CAmBnB;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAyBvE"}
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../src/dispatcher.ts"],"names":[],"mappings":"AAkDA,MAAM,WAAW,KAAK;IACpB,sDAAsD;IACtD,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAgCtC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,KAAK,EACT,QAAQ,GAAE,SAAS,OAAO,EAAa,GACtC,OAAO,CAAC,QAAQ,CAAC,CAmBnB;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAyBvE"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.27.3";
+export declare const CLI_VERSION = "0.27.4";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m-kopa/launchpad-cli",
-  "version": "0.27.3",
+  "version": "0.27.4",
   "description": "Launchpad CLI — clone / deploy / review / merge against Launchpad-managed apps. Talks to the portal-bot endpoints (SCOPE-M-760 / T4).",
   "type": "module",
   "bin": {

package/skills/launchpad-content-pr/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-content-pr
 description: Push a content change to a Launchpad app via `launchpad deploy` and verify it shipped via `launchpad status`. Covers the post-first-deploy iteration loop (edit → deploy → verify) — subsequent deploys commit directly to the app repo's main and the Pages build runs asynchronously, so verification is its own step. Use when someone says "push a content change", "ship an update", "/launchpad-content-pr", "verify my deploy", or after `/launchpad-deploy` reports `done` and they want to follow up with an edit.
-version: 0.27.3
+version: 0.27.4
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-deploy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy
 description: Walk a Launchpad user through deploying an app from their local working directory (Model A — `launchpad init` + `launchpad deploy`). Wraps the CLI verbs end-to-end: detects the app shape, scaffolds `launchpad.yaml`, resolves the allowed Entra group via `launchpad groups`, bundles the CWD via `launchpad deploy`, and watches the rollout via `launchpad status`. Use when someone says "deploy a new app", "ship my app to Launchpad", "/launchpad-deploy", "I have an app locally — get it on Launchpad", or any variant. Resume/abandon for legacy in-flight provisioning is at the bottom.
-version: 0.27.3
+version: 0.27.4
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-deploy-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy-status
 description: Show the current provisioning stage + failure reason for a Launchpad app via `launchpad status` (Model A drift + deployment_verified) and `launchpad apps` (lifecycle bucket). Renders the M-892 stage trace for in-flight provisioning, and is the canonical home for `launchpad recover` (repair a terminal-failed app record that is actually live). Use when someone says "what's the status of demo-X", "/launchpad-deploy-status", "is my deploy stuck", "my app says failed but it's serving", or after `/launchpad-deploy` reports a non-`done` terminal stage.
-version: 0.27.3
+version: 0.27.4
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-destroy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-destroy
 description: Tear down a Launchpad app end-to-end via `launchpad destroy` — Cloudflare Pages project, edge-auth wiring (gateway KV/audience entries, or the Access app for `auth: access` apps), custom hostname, platform-repo TF, and the app repo (archive-renamed). Owner-only verb with a two-step destructive confirmation. Use when someone says "destroy this app", "/launchpad-destroy", "tear down `<slug>`", "delete the app", or asks to clean up a smoke-test / orphan / retired app.
-version: 0.27.3
+version: 0.27.4
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-onboard/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-onboard
 description: One-time setup for the Launchpad CLI + Claude Code skill bundle. Verifies the `launchpad` CLI is installed and current, runs `launchpad whoami` to confirm the session is fresh, and checks the bundled skills are installed and in lock-step with the CLI. Idempotent — safe to re-run any time. Use when someone says "set me up for Launchpad", "I just got a new machine and want to use Launchpad", "/launchpad-onboard", or any of the other launchpad-* skills fails on a prereq check.
-version: 0.27.3
+version: 0.27.4
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-status
 description: Show whether a Launchpad app's local launchpad.yaml matches what's deployed, and read the deployed manifest. Wraps `launchpad pull` (fetch deployed YAML) and `launchpad status` (drift report). Use when someone says "is my app in sync", "what's deployed", "show drift", "/launchpad-status", "/launchpad-pull", or after `launchpad deploy` to verify the change landed.
-version: 0.27.3
+version: 0.27.4
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->