@mesh-tech/mesh-cli 0.40.9 → 0.40.11

package/dist/bin/{mesh.chunk-6SSOVZOI.js → mesh.chunk-4XX62O6Z.js}

@@ -107,7 +107,7 @@ async function registryPreflight(opts) {
   const probe = await probeRegistryToken(opts);
   let session = null;
   try {
-    const { readRegistrySession } = await import("./mesh.registry-identity-3AR27UGO.js");
+    const { readRegistrySession } = await import("./mesh.registry-identity-6UPUHKO2.js");
     session = readRegistrySession();
   } catch {
   }

package/dist/bin/{mesh.chunk-HJGMOEUG.js → mesh.chunk-DYWR76EO.js}

@@ -15,7 +15,7 @@ import {
   runLoginFlow,
   tokenStillValid,
   writeContextConfig
-} from "./mesh.chunk-7HTKSUWR.js";
+} from "./mesh.chunk-3WJGDNHA.js";
 import {
   logInfo
 } from "./mesh.chunk-WFFDF346.js";

package/dist/bin/{mesh.chunk-YE2WIY3Y.js → mesh.chunk-EHLBX24J.js}

@@ -5,7 +5,7 @@ import {
   readStackConfig,
   resolveAwsCredentials,
   resolveStackOption
-} from "./mesh.chunk-7HTKSUWR.js";
+} from "./mesh.chunk-3WJGDNHA.js";
 import {
   isAwsErrorCode
 } from "./mesh.chunk-MCBMHWXP.js";

package/dist/bin/{mesh.chunk-HYXH4YMU.js → mesh.chunk-GLG5JBI7.js}

@@ -7,22 +7,22 @@ import {
   parseInstanceIndex,
   resolveSecretsContext,
   setCommand
-} from "./mesh.chunk-YE2WIY3Y.js";
+} from "./mesh.chunk-EHLBX24J.js";
 import {
   cliReferenceStaleness,
   resolveCliRuntime,
   runPortalCommand
-} from "./mesh.chunk-QPGAPLPU.js";
+} from "./mesh.chunk-O677AU5E.js";
 import {
   registerAppCommands,
   registerCreateAppCommand
-} from "./mesh.chunk-F44A3ACW.js";
+} from "./mesh.chunk-O5CP4NPZ.js";
 import {
   PLATFORM_SETUP_DEFAULTS
-} from "./mesh.chunk-NSQJEX36.js";
+} from "./mesh.chunk-WT27GBE4.js";
 import {
   registerRegistryCommands
-} from "./mesh.chunk-6AIG5OJM.js";
+} from "./mesh.chunk-YKW256CK.js";
 import {
   registerSkillsCommands,
   resolveTargetRoot,
@@ -49,6 +49,7 @@ import {
   getDatabaseUrl,
   getPlatformBastionInfo,
   getValidToken,
+  hubAuthComposeEnv,
   idpEndpoints,
   mockIdpComposeEnv,
   pickLaunchHostEnv,
@@ -77,7 +78,7 @@ import {
   waitForPort,
   worktreeStackName,
   writeEnvFile
-} from "./mesh.chunk-7HTKSUWR.js";
+} from "./mesh.chunk-3WJGDNHA.js";
 import {
   COMPOSE_PROJECT,
   DEFAULT_HUB_PORT,
@@ -126,7 +127,7 @@ import {
   homeNpmrcPath,
   isNpmAuthError,
   probeRegistryToken
-} from "./mesh.chunk-6SSOVZOI.js";
+} from "./mesh.chunk-4XX62O6Z.js";
 import {
   createVcsFolderReader,
   deriveVcsBaseUrl,
@@ -1541,7 +1542,7 @@ var DOCS_PREVIEW_PORT = "4410";
 var CLI_REFERENCE_PATH = "docs/portal/generated/cli-reference.md";
 async function renderCliReference() {
   const [{ createProgram: createProgram2 }, { extractCliReference, renderCliReferenceMarkdown }] = await Promise.all([
-    import("./mesh.program-UKPDHRVX.js"),
+    import("./mesh.program-WSFVQU7P.js"),
     import("./mesh.cli-reference-H3TOPIET.js")
   ]);
   return renderCliReferenceMarkdown(extractCliReference(createProgram2()));
@@ -1613,7 +1614,7 @@ function registerDocsCommand(program) {
     "Serve the Mesh docs locally \u2014 detached in a tmux session by default; the working tree in a mesh-platform checkout, or the published @mesh-tech/docs artifact (role-gated registry) anywhere else"
   ).option("-v, --version <version>", "docs version to serve (== the @mesh-tech/* baseline it describes); default: latest", void 0).option("-p, --port <port>", "port to serve on (0 picks a free one)", "4400").option("--dev", "in a checkout: run the Zudoku dev server (HMR) in the foreground, for authoring", false).option("--foreground", "serve in the foreground (the agent/CI path; automatic when not a TTY)", false).action(
     (opts) => guarded(async () => {
-      const { runDocsStart } = await import("./mesh.start-OU2V6C7B.js");
+      const { runDocsStart } = await import("./mesh.start-24YIFB4O.js");
       await runDocsStart({
         repoRoot: findRepoRoot(process.cwd()),
         version: opts.version,
@@ -1625,13 +1626,13 @@ function registerDocsCommand(program) {
   );
   docs.command("stop").description(`Stop the detached docs server (the tmux session "${"mesh-docs"}")`).action(
     () => guarded(async () => {
-      const { runDocsStop } = await import("./mesh.start-OU2V6C7B.js");
+      const { runDocsStop } = await import("./mesh.start-24YIFB4O.js");
       runDocsStop();
     })()
   );
   docs.command("serve-static", { hidden: true }).option("--root <dir>", "built site root", "").option("--port <port>", "port", "4400").action(
     (opts) => guarded(async () => {
-      const { runDocsServeStatic } = await import("./mesh.start-OU2V6C7B.js");
+      const { runDocsServeStatic } = await import("./mesh.start-24YIFB4O.js");
       await runDocsServeStatic(opts);
     })()
   );
@@ -1674,7 +1675,7 @@ function registerDocsCommand(program) {
   );
   docs.command("list").description("List the published docs versions (each is an @mesh-tech/* baseline)").action(
     () => guarded(async () => {
-      const { runDocsList } = await import("./mesh.start-OU2V6C7B.js");
+      const { runDocsList } = await import("./mesh.start-24YIFB4O.js");
       await runDocsList();
     })()
   );
@@ -2197,7 +2198,7 @@ async function registryChecks(args) {
   const { fix, profile } = args;
   const probe = args.probe ?? probeRegistryToken;
   const login = args.login ?? (async () => {
-    const { runRegistryLogin } = await import("./mesh.registry-JLQYFUNN.js");
+    const { runRegistryLogin } = await import("./mesh.registry-5U4L6256.js");
     await runRegistryLogin(void 0, profile ? { profile } : {});
   });
   const REGISTRY_FIX = registryFixCommand(profile);
@@ -2353,7 +2354,7 @@ function registerInitCommands(program) {
     `nothing deployed yet \u2014 scaffold a tenant platform repo for \`<tenant>.<env>\` (default env: ${PLATFORM_SETUP_DEFAULTS.env}) and print its deploy sequence`
   ).option("--region <region>", `--new-platform: AWS region (default: ${PLATFORM_SETUP_DEFAULTS.region})`).option("--domain <domain>", "--new-platform: base public domain you control; the core stack creates the zone {env}.{domain} and stops at the mesh-gateway Ingress until you delegate its NS records. No default \u2014 a placeholder scaffolds a zone that can never validate").option("--state-bucket <bucket>", "--new-platform: Pulumi state S3 bucket (default: {tenant}-mesh-platform-pulumi-state)").option("--create-state-bucket", "--new-platform: create the state bucket (versioned) if it does not exist").option("--no-create-state-bucket", "--new-platform: never create the state bucket; print the aws command instead").option("--dir <path>", "--new-platform: where to scaffold the platform repo (default: ./{tenant}-mesh-platform)").option("--device", "device-code sign-in for the registry and platform steps (headless / SSH)").option("--profile <aws-profile>", "AWS profile this machine uses: read the registry without the broker (deployers only), and the profile a --new-platform stack config references").option("--skip-repo", "do not bootstrap, check or record anything in the current repo", false).option("--yes", "accept every default and never prompt", false).option("--json", "one JSON document on stdout ({tenant, mode, steps, next}); human output on stderr", false).action(
     async (opts) => {
-      const { runInitWizard } = await import("./mesh.wizard-FCTT55KI.js");
+      const { runInitWizard } = await import("./mesh.wizard-6HMOBC5L.js");
       const code = await runInitWizard(opts);
       if (code !== 0) process.exitCode = code;
     }
@@ -2369,7 +2370,7 @@ function registerInitCommands(program) {
         throw new MeshCliError(`Invalid tenant name '${tenant}' (lowercase alphanumeric + dashes).`);
       }
       const interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY);
-      const { resolvePlatformSetup, scaffoldPlatformRepo, ensureStateBucket, renderPlatformNextSteps } = await import("./mesh.platform-setup-2ZDMHRCI.js");
+      const { resolvePlatformSetup, scaffoldPlatformRepo, ensureStateBucket, renderPlatformNextSteps } = await import("./mesh.platform-setup-PCDLE2EI.js");
       const setup = await resolvePlatformSetup(tenant, opts, {
         prompts: interactive && !opts.yes ? await setupPrompts() : void 0,
         interactive
@@ -3209,12 +3210,10 @@ Re-running start from here may recreate shared containers with this checkout's c
         );
       }
       ensureHubAuthImage();
-      const hubEnv = { MESH_HUB_VERSION: hubVersion };
-      if (hubAuth) {
-        hubEnv.MESH_HUB_OAUTH2_CLIENT_ID = hubAuth.clientId;
-        hubEnv.MESH_HUB_OAUTH2_CLIENT_SECRET = hubAuth.clientSecret;
-        hubEnv.MESH_HUB_OAUTH2_COOKIE_SECRET = hubAuth.cookieSecret;
-      }
+      const hubEnv = {
+        MESH_HUB_VERSION: hubVersion,
+        ...hubAuth ? hubAuthComposeEnv(hubAuth) : {}
+      };
       await composeStreamed(["up", "-d"], {
         hub: true,
         idps: opts.withIdps,
@@ -3373,7 +3372,7 @@ function registerMcpCommands(program) {
     "--secret <id>",
     "Secrets Manager secret holding the Integration credential (default: the deployed ExternalService's own secret)"
   ).action(async (manifest, opts) => {
-    const { runMcpReviewCommand } = await import("./mesh.review-command-LUVZQN2T.js");
+    const { runMcpReviewCommand } = await import("./mesh.review-command-MLBWVHF7.js");
     try {
       await runMcpReviewCommand(manifest, opts);
     } catch (error) {
@@ -3408,7 +3407,7 @@ function registerMcpCommands(program) {
           `No pnpm-workspace.yaml above ${serveDir}: the worker image installs this package from a pnpm workspace, so it must be in one.`
         );
       } else if (!membership.member && membership.suggestedGlob) {
-        const { ensureWorkspaceGlobs } = await import("./mesh.create-app-Z3RKSTBO.js");
+        const { ensureWorkspaceGlobs } = await import("./mesh.create-app-GQIGCZNI.js");
         const added = ensureWorkspaceGlobs(path9.dirname(membership.workspaceFile), [
           membership.suggestedGlob
         ]);
@@ -6401,7 +6400,7 @@ async function resolveToken(opts) {
   if (opts.token) return opts.token;
   if (process.env.VCS_TOKEN) return process.env.VCS_TOKEN;
   if (opts.context) {
-    const { getValidToken: getValidToken2 } = await import("./mesh.login-3AWVGPCM.js");
+    const { getValidToken: getValidToken2 } = await import("./mesh.login-N5LPLRRX.js");
     const token = await getValidToken2(opts.context);
     if (token) return token;
   }