@nomac/cli 0.1.3 → 0.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nomac/cli",
-  "version": "0.1.3",
+  "version": "0.2.1",
   "description": "Ship iOS apps to TestFlight and the App Store without a Mac — built for agents.",
   "license": "UNLICENSED",
   "type": "module",

package/src/cli.mjs

@@ -50,7 +50,12 @@ export async function main(argv) {
     }
     case "whoami": {
       const me = await api("GET", "/api/v1/me");
-      console.log(JSON.stringify(me, null, 2));
+      const o = me.org ?? {};
+      console.log(`org:         ${o.name ?? "?"} (${o.id ?? "?"})`);
+      console.log(`plan:        ${o.tier ?? "?"}`);
+      console.log(`projects:    ${me.projects ?? 0}`);
+      console.log(`connections: ${me.connections ?? 0}`);
+      console.log(`auth:        ${me.auth?.via ?? "?"}${me.auth?.key_id ? ` (${me.auth.key_id})` : ""}`);
       return;
     }
     case undefined:
@@ -79,14 +84,55 @@ async function push() {
   console.log("packing working tree (respecting .gitignore, secrets excluded)…");
   const { tarball, files } = await packTarball(process.cwd());
   console.log(`${files.length} files, ${(tarball.length / 1024).toFixed(0)} KB compressed`);
-  const res = await api("POST", `/api/v1/projects/${state.project_id}/snapshots`, {
-    raw: tarball,
-  });
+
+  // preferred: direct-to-storage upload (no ~4MB API body limit), then confirm.
+  // Servers without the uploads route get the legacy inline body instead.
+  let grant = null;
+  try {
+    grant = await api("POST", `/api/v1/projects/${state.project_id}/snapshots/uploads`);
+  } catch {
+    grant = null;
+  }
+  let res;
+  if (grant) {
+    if (tarball.length > grant.max_bytes) {
+      throw new CliError(
+        "tarball too large",
+        `Packed source is ${(tarball.length / 1048576).toFixed(1)} MB; the limit is ${(grant.max_bytes / 1048576).toFixed(0)} MB. Check .gitignore: build artifacts are recreated on the build VM.`,
+      );
+    }
+    const up = await fetch(grant.upload_url, {
+      method: "PUT",
+      headers: { "content-type": "application/gzip" },
+      body: tarball,
+    });
+    if (!up.ok) throw new CliError(`upload failed (HTTP ${up.status})`);
+    res = await api("POST", `/api/v1/projects/${state.project_id}/snapshots`, {
+      body: { upload_key: grant.upload_key },
+    });
+  } else {
+    res = await api("POST", `/api/v1/projects/${state.project_id}/snapshots`, {
+      raw: tarball,
+    });
+  }
   console.log(`✅ snapshot ${res.snapshot_id} (commit ${res.commit.slice(0, 8)})`);
   const d = res.detected ?? {};
+  const framework = d.project_kind
+    ? ` · ${d.project_kind}${d.flutter_sdk_version ? ` ${d.flutter_sdk_version}` : ""}`
+    : "";
   console.log(
-    `   detected: ${d.xcodeproj ?? "?"} · scheme ${d.scheme ?? "?"} · ${d.bundle_id ?? "no bundle id"}${d.marketing_version ? ` · v${d.marketing_version}` : ""}`,
+    `   detected: ${d.xcodeproj ?? "?"} · scheme ${d.scheme ?? "?"} · ${d.bundle_id ?? "no bundle id"}${d.marketing_version ? ` · v${d.marketing_version}` : ""}${framework}`,
   );
+  if (res.lint) {
+    const icon = res.lint.grade === "green" ? "🟢" : res.lint.grade === "yellow" ? "🟡" : "🔴";
+    const n = res.lint.findings ?? 0;
+    console.log(
+      `   review lint: ${icon} ${res.lint.grade}${n ? ` — ${n} finding${n === 1 ? "" : "s"}` : ""}`,
+    );
+    if (res.lint.grade === "red") {
+      console.log("   ⚠  red findings will block publish — fix them before `nomac build`/publish.");
+    }
+  }
   if (res.warning) console.log(`⚠  ${res.warning}`);
   saveProjectState({ ...state, last_snapshot: res.snapshot_id });
 }

package/src/mcp.mjs

@@ -2,6 +2,7 @@
 // Thin wrappers over the nomac REST API; API-key auth (nomac login / env).
 // Works in every MCP client day one; the hosted transport is mcp.nomac.app.
 
+import { randomUUID } from "node:crypto";
 import { createInterface } from "node:readline";
 import { api } from "./api.mjs";
 import { loadProjectState, saveProjectState } from "./config.mjs";
@@ -210,10 +211,16 @@ export const TOOLS = [
     },
     handler: async (args) => {
       const project_id = await resolveProjectId(args);
+      const mode = args?.confirm ? "confirm" : "stage";
+      // Idempotency keys identify one tool invocation, not every publish for
+      // this project forever. A later invocation must re-run mutable lint and
+      // App Store preflight checks; retries inside this invocation reuse this
+      // single key.
+      const idempotencyKey = `mcp-pub-${project_id}-${mode}-${randomUUID()}`;
       return text(
         await api("POST", "/api/v1/publish", {
           body: { project_id, confirm: args?.confirm ?? false, force: args?.force ?? false },
-          idempotencyKey: `mcp-pub-${project_id}-${args?.confirm ? "confirm" : "stage"}`,
+          idempotencyKey,
         }),
       );
     },