@minnovate/shadow-publisher 0.17.3 → 0.18.1

package/dist/claude/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "git-publisher",
   "displayName": "Git Publisher",
-  "version": "0.17.3",
+  "version": "0.18.1",
   "description": "Publish an app folder's Git history to the serverless Git publishing backend and keep it updated (\"publish my app\", \"update my app\", \"fetch the engineered version\").",
   "author": { "name": "git-publisher project" },
   "keywords": ["git", "publish", "deploy", "serverless"]

package/dist/claude/plugin/skills/publish-app/SKILL.md

@@ -205,6 +205,8 @@ following, for when the person asks not to wait.
   - `REF_FORBIDDEN`: the user may not publish this branch; tell them which branch and stop.
     When it comes as `error.code` with a `hint`, a limit of the organization refused it: tell them
     the reason and whom to ask that the `hint` gives, and stop.
+    When `error.details.feature` names a feature, that feature is off for the organization: pass on
+    the `hint` as it is, and stop. Nobody in the organization can turn it on, so name nobody to ask.
   - `MISSING_OBJECTS`: the local copy is incomplete (for example a shallow clone). Tell the user to
     publish from a complete copy: `publisher checkout <new folder> --repo <id>`.
   - `LIMIT_EXCEEDED`, `PACK_INVALID`: quote the message; suggest removing very large files from the

package/dist/claude/plugin/skills/sync-app/SKILL.md

@@ -75,7 +75,7 @@ publisher history --json                  # the versions that went live, newest
 publisher go-back <version> --json        # ask the person first; puts that version's code back
 publisher suggestions --json              # what colleagues asked for, still open
 publisher suggestion decline <id> --json  # when the person does not want one
-publisher share invited --add ann@example.com --json   # who can open it
+publisher share emails --add ann@example.com --json   # who can open it
 publisher columns <id> --json             # the column names of connected data, before code reads it
 publisher data add <sheet link> --app <app> --name "<name>" --json   # a Google sheet the app reads
 publisher data remove <id> --app <app> --json                        # the app stops reading that data
@@ -91,7 +91,7 @@ terminal, do what it says with the command that does the same thing:
 | `app_history` / `go_back`         | `publisher history --json` / `publisher go-back <version> --json` |
 | `list_starters` / `use_starter`   | `publisher starters` / `publisher start <starter>`              |
 | `resolve_suggestion`              | `publisher suggestion done\|decline <id> --json`               |
-| `share_app`                       | `publisher share <access> --json`                               |
+| `share_app`                       | `publisher share <app-rule> --json`                             |
 | `list_apps`                       | `publisher list --json`                                         |
 | `data_columns`                    | `publisher columns <id> --json`                                 |
 | `connect_data_source`             | `publisher data add <sheet link> --app <app> --name "<name>" --json` |

package/dist/publisher.cjs

@@ -5221,7 +5221,7 @@ var PortalSession = class {
           continue;
         }
       }
-      return { ...answer2, merged: answer2.status === 403 ? mergedSay(answer2.body) : null };
+      return { ...answer2, say: answer2.status === 403 ? mergedSay(answer2.body) ?? featureOffSay(answer2.body) : null };
     }
   }
 };
@@ -5255,6 +5255,21 @@ function mergedSay(body) {
   const say = isRecord(details) ? details["say"] : void 0;
   return typeof say === "string" && say !== "" ? say : null;
 }
+var TERMINAL_FEATURE = "terminal";
+function featureOffSay(body) {
+  const error2 = isRecord(body) ? body["error"] : void 0;
+  if (!isRecord(error2) || error2["code"] !== "feature-unavailable") {
+    return null;
+  }
+  return featureOffWords(isRecord(error2["details"]) ? error2["details"]["feature"] : void 0);
+}
+function featureOffWords(feature) {
+  if (feature === TERMINAL_FEATURE) {
+    return "The publisher command is not available for this organization, and nobody in it can turn it on.";
+  }
+  const named = typeof feature === "string" && feature !== "" ? ` (the feature "${feature}")` : "";
+  return `This is not available for this organization${named}, and nobody in it can turn it on.`;
+}
 
 // ../client/src/portal-refusal.ts
 function portalRefusalCode(body) {
@@ -5307,7 +5322,7 @@ async function createApplication(input, opts) {
       const limit = portalRefusalLimit(answer2.body);
       throw new PublisherError(
         "FORBIDDEN",
-        answer2.merged ?? `the portal refused to make an application here (${limit?.permission ?? (code || "forbidden")})`,
+        answer2.say ?? `the portal refused to make an application here (${limit?.permission ?? (code || "forbidden")})`,
         limit === null ? {} : { details: limit }
       );
     }
@@ -5542,7 +5557,7 @@ async function followRun(input, opts) {
       return { kind: "unavailable", reason: "no-route" };
     }
     if (answer2.status === 403) {
-      return { kind: "forbidden", say: answer2.merged, limit: portalRefusalLimit(answer2.body) };
+      return { kind: "forbidden", say: answer2.say, limit: portalRefusalLimit(answer2.body) };
     }
     if (answer2.status === 200) {
       const run2 = soleRun(answer2.body);
@@ -5652,7 +5667,7 @@ async function call(input, opts, body) {
     return { kind: "unauthorized" };
   }
   if (answer2.status === 403) {
-    return { kind: "forbidden", say: answer2.merged, limit: portalRefusalLimit(answer2.body) };
+    return { kind: "forbidden", say: answer2.say, limit: portalRefusalLimit(answer2.body) };
   }
   if (answer2.status === 409) {
     return { kind: "moved-on" };
@@ -5757,7 +5772,7 @@ async function runCreatorTool(input, opts) {
     return { kind: "unauthorized" };
   }
   if (answer2.status === 403) {
-    return { kind: "forbidden", say: answer2.merged, limit: portalRefusalLimit(answer2.body) };
+    return { kind: "forbidden", say: answer2.say, limit: portalRefusalLimit(answer2.body) };
   }
   if (answer2.status === 404) {
     return { kind: "unavailable", detail: "the portal does not serve this tool" };
@@ -5770,7 +5785,8 @@ async function runCreatorTool(input, opts) {
     return { kind: "malformed", detail: "an answer with no say and next" };
   }
   const { say, next, isError, ...fields } = body;
-  return { kind: "answer", answer: { say, next, isError: isError === true, fields } };
+  const told = isError === true && fields["code"] === "feature-unavailable" ? featureOffWords(fields["feature"]) : say;
+  return { kind: "answer", answer: { say: told, next, isError: isError === true, fields } };
 }
 
 // ../client/src/onboard.ts
@@ -7053,6 +7069,10 @@ var REFUSED = /* @__PURE__ */ new Set(["REF_FORBIDDEN", "FORBIDDEN"]);
 var Limited = class _Limited {
   /** The lines for a refusal with `code` and `details`, or null when it is not a permission's or names no reason and no contact. */
   static hint(code, details) {
+    const feature = details?.["feature"];
+    if (REFUSED.has(code) && typeof feature === "string" && feature !== "") {
+      return featureOffWords(feature);
+    }
     const lines = REFUSED.has(code) ? _Limited.lines(details) : [];
     return lines.length === 0 ? null : lines.join("\n  ");
   }
@@ -8257,15 +8277,23 @@ var columns = {
   git: false,
   run: (inv) => run(inv, void 0, "data_columns", inv.cmd[1] === void 0 ? {} : { id: inv.cmd[1] })
 };
+var APP_RULES = ["members", "emails", "link"];
+function shareArgs(cmd, app, add, remove) {
+  return { app, appRule: appRuleOf(cmd), add, remove };
+}
+function appRuleOf(cmd) {
+  const named = APP_RULES.find((rule) => rule === cmd[1]);
+  if (named === void 0) {
+    throw new PublisherError("INVALID_REQUEST", "share takes members, emails or link");
+  }
+  return named;
+}
 var share = {
   git: false,
   async run(inv) {
-    const access2 = inv.cmd[1];
-    if (access2 === void 0) {
-      throw new PublisherError("INVALID_REQUEST", "share takes organization, invited or anyone-with-link");
-    }
+    appRuleOf(inv.cmd);
     const { dir, app } = await folderApp(inv);
-    return run(inv, dir, "share_app", { app, access: access2, add: listFlag(inv, "add"), remove: listFlag(inv, "remove") });
+    return run(inv, dir, "share_app", shareArgs(inv.cmd, app, listFlag(inv, "add"), listFlag(inv, "remove")));
   }
 };
 function dataCall(cmd, app, name) {
@@ -8646,7 +8674,7 @@ Usage:
                                                         (the data and who can open the app stay as they are)
   publisher suggestions                                 what colleagues suggested for this folder's app, still open
   publisher suggestion done|decline <id> [--run <id>]   close one; sync --answers <id> closes it with that publication
-  publisher share organization|invited|anyone-with-link [--add <emails>] [--remove <emails>]
+  publisher share members|emails|link [--add <emails>] [--remove <emails>]
                                                         who can open this folder's app; new invitees get the link by mail
   publisher columns [<id>]                              the column names of connected data, for the code that reads it;
                                                         its first rows only to an owner or admin who allowed that

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minnovate/shadow-publisher",
-  "version": "0.17.3",
+  "version": "0.18.1",
   "description": "publisher: publish an app's Git history to the serverless Git backend",
   "license": "Apache-2.0",
   "type": "module",