@mesh-tech/mesh-cli 0.27.0 → 0.28.0

package/dist/bin/mesh.js

@@ -11830,7 +11830,11 @@ var init_app_check = __esm({
         gate: "0.2",
         title: "App registers with the Hub",
         severity: "block",
-        remediation: "end index.ts with `export const app = env.register({ description })`",
+        // The registration's prose is read by the CLIENT's operators, so the
+        // remediation names the split rather than one field: `description` is one
+        // sentence for them, `operatorNote` is where the engineering material goes
+        // (a tenant-audience Hub drops that key from the response entirely).
+        remediation: "end index.ts with `export const app = env.register({ displayName, description })` \u2014 one sentence a non-technical operator can act on; put the caveats in `operatorNote`",
         scope: "app"
       },
       CUSTOM_SESSION_AUTH: {
@@ -16700,6 +16704,10 @@ function forwardedSessionVars(sessionEnv) {
   }
   return out;
 }
+function resolveHubAudience(raw) {
+  if (raw === void 0 || raw === "") return "operator";
+  return raw.trim().toLowerCase() === "operator" ? "operator" : "tenant";
+}
 function assembleHubEnv(session, sessionEnv, opts) {
   const warnings = [];
   const notes = [];
@@ -16752,6 +16760,7 @@ function assembleHubEnv(session, sessionEnv, opts) {
       { remediation: { command: "mesh dev  # relaunch; the session records tunnels.temporal in its state" } }
     );
   }
+  const audienceEnv = { HUB_AUDIENCE: resolveHubAudience(opts.audience) };
   const apiEnv = {
     ...forwarded,
     PORT: String(opts.apiPort),
@@ -16759,6 +16768,7 @@ function assembleHubEnv(session, sessionEnv, opts) {
     HUB_TENANT: hubTenant,
     HUB_SCOPE_ENV: scopeEnv,
     HUB_SCOPE_TENANTS: scopeTenants.join(","),
+    ...audienceEnv,
     ...isLocalPlatform ? localPlatformEnv2(sessionEnv) : {}
   };
   const uiEnv = {
@@ -16768,7 +16778,8 @@ function assembleHubEnv(session, sessionEnv, opts) {
     HUB_TENANT: hubTenant,
     // UI namespace parsing + session defaults land on the scoped tenant.
     DEFAULT_ORG: scopeTenants[0],
-    DEFAULT_ENV: scopeEnv
+    DEFAULT_ENV: scopeEnv,
+    ...audienceEnv
   };
   return { apiEnv, uiEnv, scope: { hubTenant, scopeEnv, scopeTenants }, temporalAddress, warnings, notes };
 }
@@ -16876,7 +16887,15 @@ async function hubDevAction(opts) {
     );
   }
   const sessionEnv = readTmuxSessionEnv(session.name);
-  const assembled = assembleHubEnv(session, sessionEnv, { tenants: opts.tenants, uiPort, apiPort });
+  const assembled = assembleHubEnv(session, sessionEnv, {
+    tenants: opts.tenants,
+    uiPort,
+    apiPort,
+    // The flag wins; the ambient variable is the fallback, so an exported
+    // HUB_AUDIENCE reaches a Hub this command spawns rather than being
+    // dropped on the way.
+    audience: opts.audience ?? process.env.HUB_AUDIENCE
+  });
   if (opts.printEnv) {
     console.log(chalk3.bold("\nhub-api env:"));
     for (const [k, v] of Object.entries(redactEnv(assembled.apiEnv))) console.log(`  ${k}=${v}`);
@@ -16905,6 +16924,7 @@ async function hubDevAction(opts) {
   logInfo(
     `Scope       : HUB_TENANT=${assembled.scope.hubTenant} HUB_SCOPE_ENV=${assembled.scope.scopeEnv} HUB_SCOPE_TENANTS=${assembled.scope.scopeTenants.join(",")}`
   );
+  logInfo(`Audience    : ${assembled.apiEnv.HUB_AUDIENCE} (--audience tenant for a client's view)`);
   logInfo(`Temporal    : ${assembled.temporalAddress}`);
   for (const note of assembled.notes) logInfo(note);
   for (const warning of assembled.warnings) logWarn(warning);
@@ -16967,7 +16987,10 @@ function registerHubCommands(program2) {
   const hub = program2.command("hub").description("Local Hub over dev-local stacks");
   hub.command("dev").description(
     "Launch the current-code Hub (api + ui) against a running `mesh dev` session \u2014 env auto-assembled, zero hand-set vars"
-  ).option("--session <name>", "dev session to observe (default: auto-detect from cwd)").option("--tenants <list>", "comma-separated HUB_SCOPE_TENANTS override (default: the session's tenant)").option("--port <port>", `Hub UI host port (default: $MESH_HUB_DEV_PORT or ${DEFAULT_HUB_UI_PORT})`).option("--api-port <port>", `Hub API port (default: ${DEFAULT_HUB_API_PORT})`).option("--platform-dir <dir>", "mesh-platform checkout to run the Hub from (default: $MESH_PLATFORM_DIR or walk up from cwd)").option("--print-env", "print the assembled env (secrets redacted) and exit without launching").option("--kill", "tear down the running Hub session").action(hubDevAction);
+  ).option("--session <name>", "dev session to observe (default: auto-detect from cwd)").option("--tenants <list>", "comma-separated HUB_SCOPE_TENANTS override (default: the session's tenant)").option(
+    "--audience <who>",
+    "who the Hub renders for: `operator` (platform staff \u2014 the default here) or `tenant` (a client's operators). Anything else reads as `tenant`"
+  ).option("--port <port>", `Hub UI host port (default: $MESH_HUB_DEV_PORT or ${DEFAULT_HUB_UI_PORT})`).option("--api-port <port>", `Hub API port (default: ${DEFAULT_HUB_API_PORT})`).option("--platform-dir <dir>", "mesh-platform checkout to run the Hub from (default: $MESH_PLATFORM_DIR or walk up from cwd)").option("--print-env", "print the assembled env (secrets redacted) and exit without launching").option("--kill", "tear down the running Hub session").action(hubDevAction);
 }
 var HUB_SESSION, DEFAULT_HUB_UI_PORT, DEFAULT_HUB_API_PORT, FORWARD_PREFIXES, localPlatformEnv2, SENSITIVE_RE;
 var init_hub = __esm({