@metabase/cli 0.3.0-alpha.extract-api-client.e9b2dd5 → 0.3.1-alpha.support-worktrees.b634907

package/dist/pin-BuZ_kg-u.mjs

@@ -0,0 +1,62 @@
+import { H as profileFlag, R as connectionFlags, V as outputFlags, a as parseWorktreeRef, p as renderSummary } from "./cli.mjs";
+import { B as ProfilePin, I as writeProfileWorktree, a as findWorktree, n as WORKTREE_REF_LABEL, t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { z } from "zod";
+//#region src/commands/worktree/pin.ts
+const WorktreePinResult = z.object({
+	profile: z.string(),
+	worktree: ProfilePin
+});
+const worktreePinView = {
+	compactPick: WorktreePinResult,
+	tableColumns: [{
+		key: "profile",
+		label: "Profile"
+	}, {
+		key: "worktree",
+		label: "Worktree",
+		format: (value) => renderPin(value)
+	}]
+};
+function renderPin(value) {
+	const parsed = ProfilePin.safeParse(value);
+	return parsed.success ? `${parsed.data.id} (${parsed.data.branch})` : "—";
+}
+var pin_default = defineMetabaseCommand({
+	meta: {
+		name: "pin",
+		description: "Confine every command run under this profile to one worktree"
+	},
+	capabilities: {
+		minVersion: 64,
+		tokenFeature: "remote_sync"
+	},
+	worktree: "any",
+	details: "The pin is a lock, not a default: while it stands, --worktree and MB_WORKTREE may only re-state it, and commands that change main-app content refuse to run.",
+	args: {
+		...outputFlags,
+		...profileFlag,
+		...connectionFlags,
+		ref: {
+			type: "positional",
+			description: "Worktree id or branch name",
+			required: true
+		}
+	},
+	outputSchema: WorktreePinResult,
+	examples: ["mb worktree pin 3", "mb worktree pin feat/transforms --profile agent"],
+	async run({ args, ctx, getClient, getResolvedConfig }) {
+		const worktree = await findWorktree(parseWorktreeRef(args.ref, WORKTREE_REF_LABEL), await getClient());
+		const profile = (await getResolvedConfig()).profile;
+		const pin = {
+			id: worktree.id,
+			branch: worktree.branch
+		};
+		await writeProfileWorktree(profile, pin);
+		renderSummary({
+			profile,
+			worktree: pin
+		}, worktreePinView, `Pinned profile "${profile}" to worktree ${pin.id} (${pin.branch}).`, ctx);
+	}
+});
+//#endregion
+export { pin_default as default };

package/dist/{preflight-YpPQo-sa.mjs → preflight-HLUVr2Yf.mjs}

@@ -1,6 +1,6 @@
 import { i as ConfigError, o as MetabaseError } from "./predicates-Bkm2IoeX.mjs";
-import { l as writeJson } from "./cli.mjs";
-import { i as chainRequestFailure } from "./network-error-CEb9ymDW.mjs";
+import { m as writeJson } from "./cli.mjs";
+import { i as chainRequestFailure } from "./network-error-D6CiOEBw.mjs";
 import "./validate-BWchyW0V.mjs";
 //#region src/commands/dashboard/preflight.ts
 async function preflightDashcardCardReferences(client, dashcards) {

package/dist/{publish-DijrxaCW.mjs → publish-CMkCSt8i.mjs}

@@ -1,8 +1,8 @@
 import { f as errorMessage } from "./predicates-Bkm2IoeX.mjs";
-import { F as outputFlags, I as profileFlag, M as connectionFlags, b as warn, c as renderSummary } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { i as CollectionCompact, r as Collection } from "./collection-CfulNRBG.mjs";
-import { n as tableSelectorFlags, t as parseTableSelectors } from "./selectors-DGDn0Hto.mjs";
+import { H as profileFlag, R as connectionFlags, T as warn, V as outputFlags, p as renderSummary } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { i as CollectionCompact, r as Collection } from "./collection-BxE7OzcQ.mjs";
+import { n as tableSelectorFlags, t as parseTableSelectors } from "./selectors-D4iOP5uB.mjs";
 import { z } from "zod";
 //#region src/commands/git-sync/sync-scope.ts
 function isOutsideSyncScope(collection) {
@@ -41,6 +41,7 @@ var publish_default = defineMetabaseCommand({
 		minVersion: 59,
 		tokenFeature: "library"
 	},
+	worktree: "main-only",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{pulse-DhG6I9mI.mjs → pulse-a-83M4DV.mjs}

@@ -1,4 +1,4 @@
-import { d as MALFORMED_CELL } from "./cli.mjs";
+import { g as MALFORMED_CELL } from "./cli.mjs";
 import { n as PulseChannel, r as PulseCompact } from "./pulse-BmsDenXm.mjs";
 import { z } from "zod";
 //#region src/output/views/pulse.ts

package/dist/{query-BbqECzmF.mjs → query-Bka77J62.mjs}

@@ -1,18 +1,13 @@
 import { i as ConfigError } from "./predicates-Bkm2IoeX.mjs";
-import { F as outputFlags, I as profileFlag, M as connectionFlags, c as renderSummary } from "./cli.mjs";
-import { t as defineMetabaseCommand, z as parseOptionalInteger } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
-import { h as parseJson } from "./network-error-CEb9ymDW.mjs";
-import { i as CardExportFormat, o as CardQueryResult } from "./card-DZxRmver.mjs";
-import { t as cardQueryView } from "./card-zyUkr2nS.mjs";
-import { t as formatQueryResult } from "./query-result-DBDwk8TS.mjs";
+import { H as profileFlag, R as connectionFlags, V as outputFlags, p as renderSummary } from "./cli.mjs";
+import { q as parseOptionalInteger, t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
+import { h as parseJson } from "./network-error-D6CiOEBw.mjs";
+import { i as CardExportFormat, o as CardQueryResult } from "./card-CrBGUkGQ.mjs";
+import { t as cardQueryView } from "./card-BEeafd4Y.mjs";
+import { t as formatQueryResult } from "./query-result-E4Q-Gra6.mjs";
+import { t as pipeToStdout } from "./stream-McixcoUl.mjs";
 import { z } from "zod";
-import { Writable } from "node:stream";
-//#region src/output/stream.ts
-async function pipeToStdout(stream) {
-	await stream.pipeTo(Writable.toWeb(process.stdout));
-}
-//#endregion
 //#region src/commands/card/query.ts
 const QueryParameters = z.array(z.unknown());
 var query_default = defineMetabaseCommand({
@@ -21,6 +16,7 @@ var query_default = defineMetabaseCommand({
 		description: "Run a saved card and return results (json envelope, or stream CSV/JSON/XLSX via --export-format)"
 	},
 	capabilities: { minVersion: 58 },
+	worktree: "any",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{query-result-DBDwk8TS.mjs → query-result-E4Q-Gra6.mjs}

@@ -1,4 +1,4 @@
-import { f as formatScalar, p as renderRows } from "./cli.mjs";
+import { _ as formatScalar, v as renderRows } from "./cli.mjs";
 //#region src/output/query-result.ts
 function formatQueryResult(result) {
 	if (result.status !== "completed" || result.data === void 0) {

package/dist/{query-Dc__-KJH.mjs → query-tWQAV9pb.mjs}

@@ -1,13 +1,13 @@
 import { i as ConfigError } from "./predicates-Bkm2IoeX.mjs";
-import { F as outputFlags, I as profileFlag, M as connectionFlags, c as renderSummary, l as writeJson } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as readBody } from "./body-Cur4NJt9.mjs";
+import { H as profileFlag, R as connectionFlags, V as outputFlags, m as writeJson, p as renderSummary } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as readBody } from "./body-DxRSAMNC.mjs";
 import { t as bodyInputFlags } from "./body-flags-AqKpN01Y.mjs";
-import { o as CardQueryResult } from "./card-DZxRmver.mjs";
-import { t as cardQueryView } from "./card-zyUkr2nS.mjs";
+import { o as CardQueryResult } from "./card-CrBGUkGQ.mjs";
+import { t as cardQueryView } from "./card-BEeafd4Y.mjs";
 import { i as validateQuery, n as getQuerySchemaBundle, r as isMbql5Query, t as assertNotLegacyEnvelopeWrappingMbql5 } from "./validate-BWchyW0V.mjs";
-import { o as skipValidateFlag } from "./validate-query-DaGYSmpQ.mjs";
-import { t as formatQueryResult } from "./query-result-DBDwk8TS.mjs";
+import { o as skipValidateFlag } from "./validate-query-Chc43ezW.mjs";
+import { t as formatQueryResult } from "./query-result-E4Q-Gra6.mjs";
 import { z } from "zod";
 //#region src/commands/query.ts
 const QueryBody = z.unknown().describe("MBQL 5, legacy MBQL, or native query body — full MBQL 5 schema: mb query --print-schema");
@@ -22,6 +22,7 @@ var query_default = defineMetabaseCommand({
 		purpose: "body shape, clause rules, and the dry-run loop"
 	}],
 	capabilities: { minVersion: 58 },
+	worktree: "any",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{remove-collection-BOnxYvhj.mjs → remove-collection-BV9wRQZD.mjs}

@@ -1,8 +1,8 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, c as renderSummary } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
-import { s as SyncSettingsUpdateResult } from "./git-sync-BDnxPrqU.mjs";
-import { o as syncSettingsUpdateView } from "./git-sync-DxD_ng48.mjs";
+import { H as profileFlag, R as connectionFlags, V as outputFlags, p as renderSummary } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
+import { c as SyncSettingsUpdateResult } from "./git-sync-DLzJrdMi.mjs";
+import { s as syncSettingsUpdateView } from "./git-sync-LQIVMNxO.mjs";
 //#region src/commands/git-sync/remove-collection.ts
 var remove_collection_default = defineMetabaseCommand({
 	meta: {
@@ -13,6 +13,7 @@ var remove_collection_default = defineMetabaseCommand({
 		minVersion: 60,
 		tokenFeature: "remote_sync"
 	},
+	worktree: "main-only",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{render-CI93iP0I.mjs → render-DHjCcUXn.mjs}

@@ -28,8 +28,14 @@ function renderAuthMethod(value) {
 function renderVersionTag(value) {
 	return pickString(value, "tag") ?? "—";
 }
+function renderWorktreePin(value) {
+	const id = pickProperty(value, "id");
+	const branch = pickString(value, "branch");
+	if (typeof id !== "number" || branch === null) return "—";
+	return `${id} (${branch})`;
+}
 function renderTimestamp(value) {
 	return typeof value === "string" ? value : "—";
 }
 //#endregion
-export { renderVersionTag as a, renderUserRole as i, renderTimestamp as n, renderUserName as r, renderAuthMethod as t };
+export { renderVersionTag as a, renderUserRole as i, renderTimestamp as n, renderWorktreePin as o, renderUserName as r, renderAuthMethod as t };

package/dist/{replace-Cq4CxVa-.mjs → replace-mt47dlRV.mjs}

@@ -1,8 +1,9 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, c as renderSummary } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
+import { H as profileFlag, R as connectionFlags, V as outputFlags, p as renderSummary } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
 import { n as UploadUpdateResult } from "./upload-DAtxBBms.mjs";
-import { i as uploadUpdateResultView, n as requireUploadFilePath, t as readCsvFile } from "./upload-CH632qW6.mjs";
+import { n as requireUploadFilePath, t as readCsvFile } from "./upload-CD555ui1.mjs";
+import { n as uploadUpdateResultView } from "./upload-C3z5ZaXA.mjs";
 //#region src/commands/upload/replace.ts
 var replace_default = defineMetabaseCommand({
 	meta: {
@@ -11,6 +12,7 @@ var replace_default = defineMetabaseCommand({
 	},
 	details: "Replaces the contents of the table with the given id with the rows of the CSV. The table must have been created by a CSV upload and the CSV columns must match.",
 	capabilities: { minVersion: 58 },
+	worktree: "main-only",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{rescan-values-Dr_j416g.mjs → rescan-values-6cRjcpTs.mjs}

@@ -1,6 +1,6 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, c as renderSummary } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
+import { H as profileFlag, R as connectionFlags, V as outputFlags, p as renderSummary } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
 import { a as DatabaseSyncResult } from "./database-C8G6ZKG0.mjs";
 import { t as databaseSyncResultView } from "./database-B19qlLKZ.mjs";
 //#region src/commands/db/rescan-values.ts
@@ -10,6 +10,7 @@ var rescan_values_default = defineMetabaseCommand({
 		description: "Trigger a rescan of cached field values for a database"
 	},
 	capabilities: { minVersion: 58 },
+	worktree: "main-only",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{run-DdGJ544X.mjs → run-BmGmC-GQ.mjs}

@@ -1,6 +1,6 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, c as renderSummary } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
+import { H as profileFlag, R as connectionFlags, V as outputFlags, p as renderSummary } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
 import { a as TransformJobRunResult } from "./transform-job-DRrK28IH.mjs";
 //#region src/commands/transform-job/run.ts
 const transformJobRunResultView = {
@@ -20,6 +20,7 @@ var run_default = defineMetabaseCommand({
 	},
 	details: "Starts the job and returns immediately. The job runs every transform carrying one of its tags, plus those transforms' dependencies. Dependencies that are already fresh are skipped by default; --force-refresh re-runs the whole plan including them.",
 	capabilities: { minVersion: 59 },
+	worktree: "main-only",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{run-C3DkS6NP.mjs → run-DI_pDxji.mjs}

@@ -1,8 +1,8 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, c as renderSummary } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
-import { l as isTransformRunFailed, o as TransformRunResult } from "./transform-D3QX0jxA.mjs";
-import { i as waitFlags, n as parseWaitFlags } from "./wait-flags-DWEF9tX4.mjs";
+import { H as profileFlag, R as connectionFlags, V as outputFlags, p as renderSummary } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
+import { l as isTransformRunFailed, o as TransformRunResult } from "./transform-BvOEn41C.mjs";
+import { i as waitFlags, n as parseWaitFlags } from "./wait-flags-DzytMEG8.mjs";
 //#region src/commands/transform/run.ts
 const transformRunResultView = {
 	compactPick: TransformRunResult,
@@ -28,6 +28,7 @@ var run_default = defineMetabaseCommand({
 	},
 	details: "Starts a run and returns immediately. --wait polls the run to a terminal status. --sync additionally waits until the run's output table is registered and returns its `target_table_id`, so you can build MBQL cards against it — the run registers the table itself, so no separate `db sync-schema` is needed; --sync implies waiting for the run.",
 	capabilities: { minVersion: 59 },
+	worktree: "main-only",
 	args: {
 		...outputFlags,
 		...profileFlag,

package/dist/{runs-CUNWiidL.mjs → runs-9Fu0mug5.mjs}

@@ -1,9 +1,9 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, N as listFlags, R as listEnvelopeSchema, s as renderList } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
-import { t as collectForOutput } from "./window-BkvrP0gB.mjs";
-import { a as TransformRunCompact } from "./transform-D3QX0jxA.mjs";
-import { t as transformRunView } from "./transform-DoTyyXAu.mjs";
+import { G as listEnvelopeSchema, H as profileFlag, R as connectionFlags, V as outputFlags, f as renderList, z as listFlags } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
+import { t as collectForOutput } from "./window-DSb1tqSe.mjs";
+import { a as TransformRunCompact } from "./transform-BvOEn41C.mjs";
+import { t as transformRunView } from "./transform-CiDOJGBW.mjs";
 //#region src/commands/transform/runs.ts
 const TransformRunListEnvelope = listEnvelopeSchema(TransformRunCompact);
 var runs_default = defineMetabaseCommand({
@@ -12,6 +12,7 @@ var runs_default = defineMetabaseCommand({
 		description: "List recent transform runs"
 	},
 	capabilities: { minVersion: 59 },
+	worktree: "any",
 	args: {
 		...outputFlags,
 		...listFlags,

package/dist/{runtime-DiKyBxOw.mjs → runtime-CNAZ_FuR.mjs}

@@ -1,6 +1,6 @@
 import { d as ValidationError, f as errorMessage, i as ConfigError, l as TimeoutError, o as MetabaseError, p as isFileNotFoundError } from "./predicates-Bkm2IoeX.mjs";
-import { B as normalizeFlag, D as consumeLegacyEnvWarnings, E as ENV_URL, O as readEnv, S as ENV_DISABLE_KEYRING, T as ENV_SKIP_PREFLIGHT, V as toAliasArray, a as reportError, b as warn, i as mergeCapabilities, j as version, k as setMetabaseAugment, n as BASELINE_CAPABILITIES, r as checkCapabilities, t as interruptSignal, x as ENV_API_KEY, z as flagConsumesValue } from "./cli.mjs";
-import { _ as parseJsonResult, a as isRetryableStatus, c as normalizeUrl, f as isOAuthExpired, m as JSON_CONTENT_TYPE, o as assertEndpointOrigin, p as oauthCredentialFromTokens, r as HttpError, t as buildNetworkError } from "./network-error-CEb9ymDW.mjs";
+import { A as ENV_SKIP_PREFLIGHT, D as ENV_DISABLE_KEYRING, E as ENV_API_KEY, F as setMetabaseAugment, J as toAliasArray, K as flagConsumesValue, L as version, M as ENV_WORKTREE, N as consumeLegacyEnvWarnings, P as readEnv, T as warn, c as checkCapabilities, i as mainOnlyRefusal, j as ENV_URL, l as mergeCapabilities, n as interruptSignal, o as resolveScopeSource, q as normalizeFlag, r as formatWorktreeRef, s as BASELINE_CAPABILITIES, t as readVerbChain, u as reportError } from "./cli.mjs";
+import { _ as parseJsonResult, a as isRetryableStatus, c as normalizeUrl, f as isOAuthExpired, m as JSON_CONTENT_TYPE, o as assertEndpointOrigin, p as oauthCredentialFromTokens, r as HttpError, t as buildNetworkError } from "./network-error-D6CiOEBw.mjs";
 import { defineCommand } from "citty";
 import { z } from "zod";
 import { parse } from "semver";
@@ -100,13 +100,18 @@ const ProfileOAuth = z.object({
 	clientId: z.string()
 }).loose();
 const ProfileAuthMethod = z.enum(["oauth", "apiKey"]);
+const ProfilePin = z.object({
+	id: z.number().int().positive(),
+	branch: z.string()
+});
 const ProfileRecord = z.object({
 	name: z.string(),
 	url: z.string(),
 	apiKey: z.string().nullable(),
 	oauth: ProfileOAuth.nullable().default(null),
 	lastProbe: ProfileLastProbe.nullable(),
-	lastFailure: ProfileLastFailure.nullable()
+	lastFailure: ProfileLastFailure.nullable(),
+	worktree: ProfilePin.nullable().default(null)
 }).loose();
 const ProfilesFile = z.object({ profiles: z.array(ProfileRecord) }).loose();
 function profileAuthMethod(record) {
@@ -326,7 +331,8 @@ async function writeProfile(profile, name = DEFAULT_PROFILE) {
 		apiKey: inlineApiKey,
 		oauth: null,
 		lastProbe: null,
-		lastFailure: null
+		lastFailure: null,
+		worktree: null
 	} : {
 		...existing,
 		url: profile.url,
@@ -357,7 +363,8 @@ async function writeOAuthProfile(url, credential, name = DEFAULT_PROFILE) {
 		apiKey: null,
 		oauth,
 		lastProbe: null,
-		lastFailure: null
+		lastFailure: null,
+		worktree: null
 	} : {
 		...existing,
 		url,
@@ -408,6 +415,18 @@ async function writeProbeFailure(name, input) {
 	});
 	return failure;
 }
+async function writeProfileWorktree(name, pin) {
+	const file = await readProfilesFile();
+	if (findRecord(file, name) === null) throw new ConfigError(`no such profile "${name}"; run \`mb auth login --profile ${name}\` first`);
+	const profiles = file.profiles.map((entry) => entry.name === name ? {
+		...entry,
+		worktree: pin
+	} : entry);
+	await writeProfilesFile({
+		...file,
+		profiles
+	});
+}
 async function clearProfile(name = DEFAULT_PROFILE) {
 	const file = await readProfilesFile();
 	const existing = findRecord(file, name);
@@ -800,6 +819,7 @@ function resolveCommonFlags(args, options = {}) {
 		url: args.url,
 		apiKey: args.apiKey,
 		profile: args.profile,
+		worktree: args.worktree,
 		skipPreflight: args.skipPreflight === true
 	};
 }
@@ -873,7 +893,43 @@ function flagCandidates(token) {
 	return candidates;
 }
 //#endregion
+//#region src/commands/worktree-scope.ts
+const WORKTREE_REF_LABEL = "worktree ref";
+const WORKTREE_SCOPE_DETAIL = "Pass --worktree <id|branch> (or set MB_WORKTREE, or pin the profile with `mb worktree pin`) to operate inside a git-sync worktree.";
+async function findWorktree(ref, mb) {
+	if (ref.kind === "id") return mb.gitSync.getWorktree(ref.id);
+	const { data } = await mb.gitSync.worktrees();
+	const match = data.find((worktree) => worktree.branch === ref.branch);
+	if (match === void 0) throw new ConfigError(`worktree ${formatWorktreeRef(ref)} not found; run \`mb worktree list\``);
+	return match;
+}
+async function resolveWorktreeScope(source, mb) {
+	if (source.scope !== null) return source.scope;
+	const worktree = await findWorktree(source.ref, mb);
+	return {
+		id: worktree.id,
+		branch: worktree.branch
+	};
+}
+function scopeQuery(scope) {
+	return { "worktree-id": scope === null ? void 0 : scope.id };
+}
+function assertInWorktree(kind, id, worktreeId, scope) {
+	if (scope === null || worktreeId === scope.id) return;
+	throw new ConfigError(`${kind} ${id} is not in worktree ${scope.id} (${scope.branch}); refusing to touch main-app content`);
+}
+function scopeBody(body, scope) {
+	if (scope === null) return body;
+	const stated = body.worktree_id;
+	if (stated !== void 0 && stated !== null && stated !== scope.id) throw new ConfigError(`body names worktree_id ${stated}, but the active scope is worktree ${scope.id} (${scope.branch})`);
+	return {
+		...body,
+		worktree_id: scope.id
+	};
+}
+//#endregion
 //#region src/commands/runtime.ts
+const UNNAMED_COMMAND = "this command";
 function defineMetabaseCommand(def) {
 	const required = def.capabilities === null ? null : mergeCapabilities(def.capabilities);
 	const cmd = defineCommand({
@@ -900,7 +956,7 @@ function defineMetabaseCommand(def) {
 				const rawGetClient = async () => {
 					if (cachedClient === null) {
 						const resolved = await getResolvedConfig();
-						const { createClient } = await import("./client-BqhzKdLM.mjs").then((n) => n.t);
+						const { createClient } = await import("./client-DYD8WZYy.mjs").then((n) => n.t);
 						cachedClient = createClient({
 							url: resolved.url,
 							credential: resolved.credential
@@ -914,18 +970,35 @@ function defineMetabaseCommand(def) {
 					return cachedClient;
 				};
 				const enforcePreflight = createPreflightEnforcer(required, getServerInfo, ctx.skipPreflight);
+				let cachedScopeSource = null;
+				const getScopeSource = () => {
+					if (cachedScopeSource === null) cachedScopeSource = loadScopeSource(ctx, getResolvedConfig);
+					return cachedScopeSource;
+				};
+				const enforceWorktreePolicy = async () => {
+					const source = await getScopeSource();
+					if (source === null || def.worktree !== "main-only") return;
+					throw new ConfigError(mainOnlyRefusal(commandName(def.meta), source));
+				};
 				const getClient = async () => {
 					const client = await rawGetClient();
+					await enforceWorktreePolicy();
 					await enforcePreflight();
 					return client;
 				};
+				let cachedScope = null;
+				const getWorktree = () => {
+					if (cachedScope === null) cachedScope = loadWorktreeScope(getScopeSource, getClient);
+					return cachedScope;
+				};
 				try {
 					await def.run({
 						args,
 						ctx,
 						getClient,
 						getResolvedConfig,
-						getServerInfo
+						getServerInfo,
+						getWorktree
 					});
 				} finally {
 					emitPendingWarnings();
@@ -941,10 +1014,31 @@ function defineMetabaseCommand(def) {
 		skills: def.skills ?? [],
 		inputSchema: def.inputSchema ?? null,
 		outputSchema: def.outputSchema ?? null,
-		capabilities: required
+		capabilities: required,
+		worktree: def.worktree
 	});
 	return cmd;
 }
+function commandName(meta) {
+	const chain = readVerbChain();
+	if (chain !== null) return chain;
+	return typeof meta.name === "string" && meta.name !== "" ? meta.name : UNNAMED_COMMAND;
+}
+async function loadScopeSource(ctx, getResolvedConfig) {
+	const resolved = await getResolvedConfig();
+	const record = await readProfileRecord(resolved.profile);
+	return resolveScopeSource({
+		profile: resolved.profile,
+		flag: ctx.worktree,
+		env: readEnv(ENV_WORKTREE),
+		pin: record?.worktree ?? null
+	});
+}
+async function loadWorktreeScope(getScopeSource, getClient) {
+	const source = await getScopeSource();
+	if (source === null) return null;
+	return resolveWorktreeScope(source, await getClient());
+}
 function emitPendingWarnings() {
 	for (const message of consumeLegacyEnvWarnings()) warn(message);
 	const legacy = consumeLegacyStorageWarning();
@@ -991,6 +1085,7 @@ function pickCommonArgs(args) {
 	if (typeof args["limit"] === "string") out.limit = args["limit"];
 	if (typeof args["offset"] === "string") out.offset = args["offset"];
 	if (typeof args["profile"] === "string") out.profile = args["profile"];
+	if (typeof args["worktree"] === "string") out.worktree = args["worktree"];
 	if (typeof args["url"] === "string") out.url = args["url"];
 	if (typeof args["apiKey"] === "string") out.apiKey = args["apiKey"];
 	if (typeof args["skipPreflight"] === "boolean") out.skipPreflight = args["skipPreflight"];
@@ -1004,4 +1099,4 @@ function buildConfigFlags(ctx) {
 	return flags;
 }
 //#endregion
-export { ProbedUser as A, readProfileCredential as C, writeProbeFailure as D, writeOAuthProfile as E, tryParseTag as F, SessionProperties as I, TokenFeatures as L, ProfileLastFailure as M, profileAuthMethod as N, writeProbeResult as O, ParsedVersion as P, parseInteger as R, listProfileRecords as S, resolveRecordCredential as T, DEFAULT_PROFILE as _, createCredentialRefresher as a, consumeKeyringDowngradeWarning as b, resolveProfileName as c, revokeOAuthCredential as d, OAUTH_SCOPE as f, tryDiscoverMetadata as g, registerClient as h, parseEnumCsv as i, ProfileAuthMethod as j, writeProfile as k, OAUTH_CLIENT_NAME as l, exchangeCode as m, parseCsv as n, explicitProfileName as o, discoverMetadata as p, parseEnum as r, readEnvCredentials as s, defineMetabaseCommand as t, USER_AGENT as u, clearProfile as v, readProfileRecord as w, keyringFallbackWarning as x, consumeKeychainResidualWarning as y, parseOptionalInteger as z };
+export { readProfileRecord as A, ProfilePin as B, DEFAULT_PROFILE as C, keyringFallbackWarning as D, consumeKeyringDowngradeWarning as E, writeProfile as F, TokenFeatures as G, ParsedVersion as H, writeProfileWorktree as I, parseInteger as K, ProbedUser as L, writeOAuthProfile as M, writeProbeFailure as N, listProfileRecords as O, writeProbeResult as P, ProfileAuthMethod as R, tryDiscoverMetadata as S, consumeKeychainResidualWarning as T, tryParseTag as U, profileAuthMethod as V, SessionProperties as W, revokeOAuthCredential as _, findWorktree as a, exchangeCode as b, parseCsv as c, createCredentialRefresher as d, explicitProfileName as f, USER_AGENT as g, OAUTH_CLIENT_NAME as h, assertInWorktree as i, resolveRecordCredential as j, readProfileCredential as k, parseEnum as l, resolveProfileName as m, WORKTREE_REF_LABEL as n, scopeBody as o, readEnvCredentials as p, parseOptionalInteger as q, WORKTREE_SCOPE_DETAIL as r, scopeQuery as s, defineMetabaseCommand as t, parseEnumCsv as u, OAUTH_SCOPE as v, clearProfile as w, registerClient as x, discoverMetadata as y, ProfileLastFailure as z };

package/dist/{schema-tables-CV386fnC.mjs → schema-tables-CLG0mtQb.mjs}

@@ -1,7 +1,7 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, N as listFlags, R as listEnvelopeSchema, s as renderList } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
-import { n as windowList } from "./window-BkvrP0gB.mjs";
+import { G as listEnvelopeSchema, H as profileFlag, R as connectionFlags, V as outputFlags, f as renderList, z as listFlags } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
+import { n as windowList } from "./window-DSb1tqSe.mjs";
 import { n as TableCompact } from "./table-CeeTJgQb.mjs";
 import { t as tableView } from "./table-CsIJNPFf.mjs";
 //#region src/commands/db/schema-tables.ts
@@ -12,6 +12,7 @@ var schema_tables_default = defineMetabaseCommand({
 		description: "List tables in a database schema"
 	},
 	capabilities: { minVersion: 58 },
+	worktree: "any",
 	args: {
 		...outputFlags,
 		...listFlags,

package/dist/{schemas-DM-UqZBQ.mjs → schemas-Cm5NWy59.mjs}

@@ -1,7 +1,7 @@
-import { F as outputFlags, I as profileFlag, M as connectionFlags, N as listFlags, R as listEnvelopeSchema, s as renderList } from "./cli.mjs";
-import { t as defineMetabaseCommand } from "./runtime-DiKyBxOw.mjs";
-import { t as parseId } from "./parse-id-C_jmKFaa.mjs";
-import { n as windowList } from "./window-BkvrP0gB.mjs";
+import { G as listEnvelopeSchema, H as profileFlag, R as connectionFlags, V as outputFlags, f as renderList, z as listFlags } from "./cli.mjs";
+import { t as defineMetabaseCommand } from "./runtime-CNAZ_FuR.mjs";
+import { t as parseId } from "./parse-id-DDCn3VXx.mjs";
+import { n as windowList } from "./window-DSb1tqSe.mjs";
 import { z } from "zod";
 //#region src/commands/db/schemas.ts
 const SchemaName = z.object({ name: z.string() });
@@ -19,6 +19,7 @@ var schemas_default = defineMetabaseCommand({
 		description: "List schemas in a database"
 	},
 	capabilities: { minVersion: 58 },
+	worktree: "any",
 	args: {
 		...outputFlags,
 		...listFlags,

package/dist/scope-DsGuWG5w.mjs

@@ -0,0 +1,11 @@
+import { i as assertInWorktree } from "./runtime-CNAZ_FuR.mjs";
+//#region src/commands/transform-tag/scope.ts
+const TRANSFORM_TAG_KIND = "transform tag";
+async function assertTagInWorktree(client, id, scope) {
+	if (scope === null) return;
+	const { data } = await client.transformTag.list({ "worktree-id": scope.id });
+	const match = data.find((tag) => tag.id === id);
+	assertInWorktree(TRANSFORM_TAG_KIND, id, match === void 0 ? null : match.worktree_id, scope);
+}
+//#endregion
+export { assertTagInWorktree as t };