@mcpcloud/cli 0.22.0 → 0.22.1

package/dist/index.js

@@ -7472,7 +7472,11 @@ function registerServerLifecycleCommands(servers) {
         "terminal at": formatDate(terminalEvent.timestamp)
       } : {}
     });
-    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({ deploymentId: dep.deploymentId, orgId, serverId })) {
+    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({
+      deploymentId: dep.deploymentId,
+      orgId,
+      serverId
+    })) {
       printWarn("This first deployment is public — anyone with the URL can call it. Redeploy with --access-mode privateOrg or unlisted to require sign-in (recommended when the upstream API needs credentials).");
     }
     if (!opts.wait && dep.status === "queued") {
@@ -7541,7 +7545,8 @@ function registerServerLifecycleCommands(servers) {
       preserveEnrichment: Boolean(opts.enrichOnChange)
     });
     if (!result.ok) {
-      throw new Error(`Spec regen failed: ${result.message} (code: ${result.code})`);
+      const hint = result.code === "insufficient_scope" ? " push-spec --apply regenerates the server’s code, which needs the servers:build scope; mint the key with --preset ci-build or add --scope servers:build." : "";
+      throw new Error(`Spec regen failed: ${result.message} (code: ${result.code})${hint}`);
     }
     const summary = summarizeDiff(result.diff);
     if (!isJsonMode()) {
@@ -7552,7 +7557,14 @@ function registerServerLifecycleCommands(servers) {
         printInfo(summary.text);
       }
       if (result.applied) {
-        const { dryRun, inserted, removedKeys, unchanged, updated, warnings } = result.applied;
+        const {
+          dryRun,
+          inserted,
+          removedKeys,
+          unchanged,
+          updated,
+          warnings
+        } = result.applied;
         printInfo(`  → ${dryRun ? "would apply" : "applied"}: ${updated.length} updated, ${inserted.length} added, ${unchanged} unchanged`);
         if (removedKeys.length > 0) {
           printWarn(`  ! ${removedKeys.length} tool(s) no longer in the spec, left in place: ${removedKeys.join(", ")}`);
@@ -7683,7 +7695,11 @@ function registerServerLifecycleCommands(servers) {
         "terminal at": formatDate(terminalEvent.timestamp)
       } : {}
     });
-    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({ deploymentId: dep.deploymentId, orgId, serverId })) {
+    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({
+      deploymentId: dep.deploymentId,
+      orgId,
+      serverId
+    })) {
       printWarn("This first deployment is public — anyone with the URL can call it. Redeploy with --access-mode privateOrg or unlisted to require sign-in (recommended when the upstream API needs credentials).");
     }
     if (!opts.wait && dep.status === "queued") {
@@ -29076,7 +29092,10 @@ function grantBodyFromOptions(opts) {
     ...opts.clearOrg ? { orgId: null } : opts.org ? { orgId: opts.org } : {}
   };
 }
-var API_KEY_KIND = { label: "api key", listHint: "mcp api-keys list" };
+var API_KEY_KIND = {
+  label: "api key",
+  listHint: "mcp api-keys list"
+};
 async function resolveApiKeyId(reference) {
   const ref = reference.trim();
   if (isIdShape(ref))
@@ -29084,7 +29103,10 @@ async function resolveApiKeyId(reference) {
   let candidates;
   try {
     const data = await api.get("/api/v1/api-keys");
-    candidates = data.apiKeys.filter((k) => typeof k.id === "string").map((k) => ({ id: k.id, name: typeof k.name === "string" ? k.name : "" }));
+    candidates = data.apiKeys.filter((k) => typeof k.id === "string").map((k) => ({
+      id: k.id,
+      name: typeof k.name === "string" ? k.name : ""
+    }));
   } catch {
     return ref;
   }
@@ -29116,7 +29138,7 @@ function registerApiKeyCommands(program) {
       { key: "expires", label: "Expires", width: 22 }
     ], data);
   }));
-  apiKeys.command("create").description("Create a new API key (the secret is shown once)").requiredOption("--name <name>", "Display name for the key").option("--expires-in <duration>", "Auto-expire the key after this long: 90d, 12w, 6m, or a day count (1–365). Default: never.").option("--preset <preset>", "Scope preset: full, agent, read-only, or ci-deploy. Default: full authority.").option("--scope <scope>", "Grant a single scope (repeatable, e.g. --scope servers:read --scope servers:deploy). Mutually exclusive with --preset.", collectScope, []).option("--org <orgId>", "Pin the key to one organization (must be one you belong to).").action(runAction(async (opts) => {
+  apiKeys.command("create").description("Create a new API key (the secret is shown once)").requiredOption("--name <name>", "Display name for the key").option("--expires-in <duration>", "Auto-expire the key after this long: 90d, 12w, 6m, or a day count (1–365). Default: never.").option("--preset <preset>", "Scope preset: full, agent, read-only, ci-deploy (redeploy the stored bundle), or ci-build (also regenerate code). Default: full authority.").option("--scope <scope>", "Grant a single scope (repeatable, e.g. --scope servers:read --scope servers:deploy). Mutually exclusive with --preset.", collectScope, []).option("--org <orgId>", "Pin the key to one organization (must be one you belong to).").action(runAction(async (opts) => {
     const name = opts.name.trim();
     if (!name)
       throw new Error("--name must not be empty.");
@@ -32114,7 +32136,7 @@ async function runWithRuntime(args) {
             preserveEnrichment: args.enrichOnChange
           });
           if (!result.ok) {
-            printError(`Spec regen failed: ${result.message}`);
+            printError(`Spec regen failed: ${result.message}${result.code === "insufficient_scope" ? " Regenerating code needs the servers:build scope (--preset ci-build, or --scope servers:build)." : ""}`);
             return;
           }
           const summary = summarizeDiff(result.diff);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcpcloud/cli",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "description": "The official CLI for MCPCloud — manage projects, servers, skills, and API keys from the terminal",
   "type": "module",
   "bin": {