@mcpcloud/cli 0.20.0 → 0.21.0-next-20260906205034

package/README.md

@@ -551,6 +551,7 @@ _Generated from the live command tree by `bun run docs:readme` — do not edit b
 | `mcp servers test-suites get <suiteId>` | Show one server test suite including its scenario membership |
 | `mcp servers test-suites list <server>` | List test suites bound to a server |
 | `mcp servers test-suites run <server>` | Run the server’s test scenarios and report the suite result |
+| `mcp servers transfer <server>` | Move a server into another organization you administer, keeping its id, slug, deployment, custom domain, end-user keys and git link. Shows the plan; add --yes to execute. |
 | `mcp servers update <server>` | Update a server (name, description, tool surface, upstream key mode, runtime token TTL) |
 | `mcp servers variables` | Inspect and set the sandbox variables that scenario arguments reference |
 | `mcp servers variables list <server>` | List a server’s sandbox variables and which ones still need a value |

package/dist/index.js

@@ -5571,6 +5571,9 @@ function describeDeployed(deployed) {
   return `${deployed.behindHead} commit${deployed.behindHead === 1 ? "" : "s"} behind HEAD`;
 }
 function describeWorkingTree(tree) {
+  if (tree.hydrated === false) {
+    return "not loaded yet — hydrates from the stored bundle on the next commit or sync";
+  }
   const parts = [];
   if (tree.added > 0)
     parts.push(`${tree.added} added`);
@@ -7344,6 +7347,17 @@ function reportDeployFailure(terminalEvent) {
   printError(`Deploy failed: ${reason ?? terminalEvent.message}`);
   return true;
 }
+async function isOnlyDeployment(args) {
+  try {
+    const listing = await api.get(`/api/v1/server/deployments?organizationId=${encodeURIComponent(args.orgId)}&serverId=${encodeURIComponent(args.serverId)}&limit=2`);
+    const rows = listing.deployments;
+    if (!Array.isArray(rows) || rows.length === 0)
+      return false;
+    return rows.every((row) => row.id === args.deploymentId);
+  } catch {
+    return false;
+  }
+}
 async function refreshDeploymentRow(args) {
   try {
     const refreshed = await api.get(`/api/v1/server/deployments?organizationId=${encodeURIComponent(args.orgId)}&serverId=${encodeURIComponent(args.serverId)}&limit=5`);
@@ -7458,6 +7472,9 @@ function registerServerLifecycleCommands(servers) {
         "terminal at": formatDate(terminalEvent.timestamp)
       } : {}
     });
+    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({ deploymentId: dep.deploymentId, orgId, serverId })) {
+      printWarn("This first deployment is public — anyone with the URL can call it. Redeploy with --access-mode privateOrg or unlisted to require sign-in (recommended when the upstream API needs credentials).");
+    }
     if (!opts.wait && dep.status === "queued") {
       printInfo(`Deploy is running in the background — follow with \`mcp deployments get ${dep.deploymentId}\` or rerun with --wait.`);
     }
@@ -7666,6 +7683,9 @@ function registerServerLifecycleCommands(servers) {
         "terminal at": formatDate(terminalEvent.timestamp)
       } : {}
     });
+    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({ deploymentId: dep.deploymentId, orgId, serverId })) {
+      printWarn("This first deployment is public — anyone with the URL can call it. Redeploy with --access-mode privateOrg or unlisted to require sign-in (recommended when the upstream API needs credentials).");
+    }
     if (!opts.wait && dep.status === "queued") {
       printInfo(`Deploy is running in the background — follow with \`mcp deployments get ${dep.deploymentId}\` or rerun with --wait.`);
     }
@@ -7727,6 +7747,107 @@ function registerServerLifecycleCommands(servers) {
   }));
 }
 
+// src/commands/servers-transfer.ts
+var TRANSFER_PATH = "/api/v1/server/transfer";
+async function resolveTargetOrganizationId(reference) {
+  const ref = reference.trim();
+  const data = await api.get("/api/v1/organizations");
+  const rows = data.organizations;
+  const match = rows.find((row) => row.id === ref) ?? rows.find((row) => row.slug === ref) ?? rows.find((row) => row.name.toLowerCase() === ref.toLowerCase());
+  if (!match) {
+    printError(`No organization you belong to matches ${c.bold(ref)} (by id, slug, or name).`);
+    if (rows.length > 0) {
+      printInfo(`  ${c.dim("Yours:")} ${rows.map((row) => `${row.name} (${row.slug ?? row.id})`).join(", ")}`);
+    }
+    throw new CliExitError(1);
+  }
+  return match.id;
+}
+function printPlan(result) {
+  printKeyValue({
+    server: `${result.server.name} (${result.server.slug})`,
+    from: `${result.from.organizationName ?? result.from.organizationId} / ${result.from.projectName ?? result.from.projectId}`,
+    to: `${result.to.organizationName} / ${result.to.projectName ?? result.to.projectId ?? "(new project)"}`,
+    "git link": result.plan.gitLink,
+    domains: result.domains.length > 0 ? result.domains.join(", ") : "—"
+  });
+  const moving = result.manifest.filter((entry) => entry.count > 0);
+  if (moving.length > 0) {
+    printInfo(c.dim("  Rows that move:"));
+    for (const entry of moving) {
+      printInfo(`    ${entry.table.padEnd(34)} ${entry.count}${entry.more ? "+" : ""}`);
+    }
+  }
+  for (const note of result.plan.notes)
+    printWarn(`  ! ${note}`);
+}
+function reportApiError6(err) {
+  if (err instanceof McpCloudApiError) {
+    printError(`Transfer failed (HTTP ${err.status}): ${err.error.message}`);
+    const blockers = err.error.details?.blockers;
+    if (Array.isArray(blockers)) {
+      for (const blocker of blockers) {
+        printInfo(`  ${c.dim(blocker.code + ":")} ${blocker.message}`);
+      }
+    }
+  } else {
+    printError(`Transfer failed: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  throw new CliExitError(1);
+}
+function registerServerTransferCommand(servers) {
+  servers.command("transfer <server>").description("Move a server into another organization you administer, keeping its id, slug, deployment, custom domain, end-user keys and git link. Shows the plan; add --yes to execute.").requiredOption("--to-org <organization>", "Destination organization (id, slug, or name) — you must be owner or admin there").option("--to-project <project>", "Destination project (id or name, within the destination organization)").option("--create-project <name>", "Create this project in the destination organization and move the server into it").option("--org <organizationId>", "Source organization ID").option("--drop-git-link", "Move without the GitHub link when no installation in the destination reaches the repository").option("--yes", "Execute the transfer (without it, only the plan is shown)").addHelpText("after", [
+    "",
+    "What moves: the server row and project placement, tools, prompts, resources,",
+    "deployments and their edge policy, versions, code + commits, sandbox and test",
+    "artifacts, end-user access (branding, allowlist, federation), members’ pasted",
+    "keys and end-user records, the custom domain (no traffic interruption), the",
+    "API source, and registry listings (installers keep them).",
+    "What stays: usage and billing history (the source org was billed for it),",
+    "and member-scoped grants of source-org members, which become inert.",
+    "",
+    "Members of the source organization lose access to the server."
+  ].join(`
+`)).action(runAction(async (serverRef, opts) => {
+    const orgId = await resolveOrgId(opts.org);
+    const serverId = await resolveServerId(serverRef, orgId);
+    const targetOrganizationId = await resolveTargetOrganizationId(opts.toOrg);
+    const targetProjectId = await resolveOptionalProjectId(opts.toProject, targetOrganizationId);
+    if (opts.yes && !targetProjectId && !opts.createProject) {
+      printError("Pass --to-project <project> or --create-project <name> for the destination.");
+      throw new CliExitError(1);
+    }
+    const body = {
+      organizationId: orgId,
+      targetOrganizationId,
+      serverId,
+      ...targetProjectId ? { targetProjectId } : {},
+      ...opts.createProject ? { createProjectName: opts.createProject } : {},
+      dryRun: !opts.yes,
+      dropGitLink: Boolean(opts.dropGitLink)
+    };
+    let result;
+    try {
+      if (opts.yes && !isJsonMode()) {
+        printStep(`Transferring ${c.bold(serverRef)} to ${c.bold(opts.toOrg)}…`);
+      }
+      result = await api.post(TRANSFER_PATH, body);
+    } catch (err) {
+      reportApiError6(err);
+    }
+    if (isJsonMode()) {
+      printJson(result);
+      return;
+    }
+    printPlan(result);
+    if (result.dryRun) {
+      printInfo(c.dim(`  → nothing moved. Re-run with --yes${targetProjectId || opts.createProject ? "" : " and --to-project <project> (or --create-project <name>)"} to transfer.`));
+      return;
+    }
+    printSuccess(`${result.server.name} now lives in ${result.to.organizationName} / ${result.to.projectName ?? result.to.projectId}${result.to.projectCreated ? " (project created)" : ""}. ${result.patchedRows} row(s) rehomed; id and slug unchanged.`);
+  }));
+}
+
 // src/commands/servers-mutations.ts
 function registerServerMutationCommands(servers) {
   servers.command("create").description("Create an empty server skeleton in a project").requiredOption("--project <project>", "Project (id or name)").requiredOption("--name <name>", "Display name (1–100 chars)").option("--org <organizationId>", "Organization ID").option("--description <text>", "Optional description").option("--git-repo <owner/name>", "Host the generated code on this GitHub repo (links now, mirrors after first generation)").option("--git-path-prefix <prefix>", "Sync into this path inside the repo").option("--no-git-auto-sync", "Do not mirror commits automatically").addHelpText("after", [
@@ -8097,6 +8218,12 @@ function registerServerSpecCommands(servers) {
       "api source": data.apiSource.id ?? "—",
       project: projectId
     });
+    const warnings = Array.isArray(data.apiSource.warnings) ? data.apiSource.warnings.filter((warning) => typeof warning === "string") : [];
+    for (const warning of warnings.slice(0, 10))
+      printWarn(`  ! ${warning}`);
+    if (warnings.length > 10) {
+      printWarn(`  ! +${warnings.length - 10} more — \`mcp projects api-source ${data.apiSource.id ?? "<id>"}\` lists them all.`);
+    }
     printStep(`Next: \`mcp servers generate ${data.server.id} --out ./out\` or \`mcp servers deploy ${data.server.id} --wait\`.`);
   }));
   servers.command("generate <server>").description("Generate the server's TypeScript bundle (the exact code `deploy` ships) and optionally write it to disk — a dry-run for the codegen path. Wraps POST /api/v1/server/generate.").option("--org <organizationId>", "Organization ID").option("--project <project>", "Project (id or name; looked up from the server when omitted)").option("--out <dir>", "Write the generated files to this directory instead of just summarizing").option("--store", "Persist the bundle as the one `deploy` will ship. Required after editing prompts, resources or tool metadata: deploy reuses a server's existing bundle unchanged, so without this the change never reaches the deployed worker.").addHelpText("after", [
@@ -8564,6 +8691,7 @@ function registerServerCommands(program) {
   registerServerGetCommand(servers);
   registerServerExportCommands(servers);
   registerServerLifecycleCommands(servers);
+  registerServerTransferCommand(servers);
   registerServerMutationCommands(servers);
   registerServerSpecCommands(servers);
   registerServerTestCommands(servers);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcpcloud/cli",
-  "version": "0.20.0",
+  "version": "0.21.0-next-20260906205034",
   "description": "The official CLI for MCPCloud — manage projects, servers, skills, and API keys from the terminal",
   "type": "module",
   "bin": {