@norbix.ai/cli 1.1.0 → 1.2.0

package/README.md

@@ -149,6 +149,15 @@ came back negative (`norbix files integrations test`).
 not before — `norbix files publish` / `unpublish` were the two commands that
 used to treat it as a success.
 
+## Versioning
+
+The major version is frozen at **v1** until the public launch.
+
+- A breaking change is released as a **minor** (for example v1.2.0 → v1.3.0), never as a new major.
+- Write it as `feat(<scope>): <what>` and add a line `Breaking: <what changed and what callers must do>` in plain words, in the pull-request body and in the commit message.
+- Never mark it the conventional-commits way: no `!` in the title (`feat!:`), no BREAKING CHANGE footer. The `PR title` check fails a pull request that does.
+- As a safety net, the release config (`.releaserc.json` → `releaseRules`) maps breaking commits to a minor, so one that slips through still does not bump the major.
+
 ## Development
 
 ```sh

package/dist/base.js

@@ -2,6 +2,16 @@ import { Norbix, NorbixError } from '@norbix.ai/ts';
 import { Command, Flags } from '@oclif/core';
 import { DEFAULT_API_URL, DEFAULT_HUB_URL, isSessionValid, readProfiles, readSession, } from './lib/profiles.js';
 import { readStore } from './lib/store.js';
+/** Stands in for a projectId the SDK constructor insists on; never sent. */
+const NO_PROJECT_PLACEHOLDER = 'no-project';
+/** Removes the project headers the SDK adds for the placeholder projectId. */
+export const dropProjectHeaders = async (ctx) => {
+    const headers = new Headers(ctx.init.headers);
+    headers.delete('norbix-project-id');
+    headers.delete('X-CM-ProjectId');
+    ctx.init.headers = headers;
+    return ctx.next();
+};
 /**
  * Base class for every Norbix CLI command.
  *
@@ -127,18 +137,28 @@ export class BaseCommand extends Command {
                 'or set custom api_url / hub_url in the profile for self-hosted installations.');
         }
     }
-    /** Build an SDK client from the resolved context. Errors politely when auth is missing. */
+    /**
+     * Build an SDK client from the resolved context. Errors politely when auth is missing.
+     *
+     * `requireAuth: false` — the call may go out without a login (a signed link is the key);
+     * a login, when there is one, is still used.
+     * `requireProject: false` — the call does not need a project (a signed link carries it).
+     * The SDK constructor still demands a projectId, so a placeholder is passed and the
+     * project headers are taken off the wire again: the gateway never sees a fake project.
+     */
     client(flags, opts = {}) {
         const ctx = this.resolveContext(flags);
         this.assertEndpoints(ctx);
-        if (!ctx.projectId) {
+        const noProject = !ctx.projectId && opts.requireProject === false;
+        if (!ctx.projectId && !noProject) {
             this.error('No project ID configured.\nRun `norbix configure` (or `norbix login`), or pass --project.');
         }
         if (opts.requireAuth !== false && !ctx.apiKey && !ctx.bearerToken) {
             this.error('Not authenticated.\nRun `norbix login` (browser/user session) or `norbix configure` (API key profile), or pass --api-key.');
         }
         return new Norbix({
-            projectId: ctx.projectId,
+            projectId: noProject ? NO_PROJECT_PLACEHOLDER : ctx.projectId,
+            middleware: noProject ? [dropProjectHeaders] : [],
             accountId: ctx.accountId,
             apiKey: ctx.apiKey,
             bearerToken: ctx.bearerToken,

package/dist/commands/push/preview.js

@@ -1,19 +1,43 @@
-import { Args } from '@oclif/core';
+import { NorbixError } from '@norbix.ai/ts';
+import { Args, Flags } from '@oclif/core';
 import { BaseCommand } from '../../base.js';
 export default class PushPreview extends BaseCommand {
     static description = `Render the title, body and subtitle behind a push preview link
 
 The hash is the opaque value the backend puts in a preview link — you cannot
-build it yourself, so copy it out of the link.`;
-    static examples = ['<%= config.bin %> push preview 8f2a91c4...'];
+build it yourself, so copy it out of the link.
+
+The signed link is the key: no login and no project are needed. When you are
+logged in, your session is still sent.`;
+    static examples = [
+        '<%= config.bin %> push preview 8f2a91c4...',
+        '<%= config.bin %> push preview --hash 8f2a91c4... --region nb-eu-germany',
+    ];
     static args = {
-        hash: Args.string({ required: true, description: 'Preview hash from the preview link' }),
+        hash: Args.string({ required: false, description: 'Preview hash from the preview link' }),
+    };
+    static flags = {
+        hash: Flags.string({ description: 'Preview hash from the preview link (same as the argument)' }),
     };
     async run() {
         const { args, flags } = await this.parse(PushPreview);
-        const client = this.client(flags);
-        const res = await client.hub.notifications.previewPushNotification({ hash: args.hash });
+        const hash = flags.hash ?? args.hash;
+        if (!hash) {
+            this.error('Pass the preview hash: `norbix push preview <hash>` or `--hash <hash>`.');
+        }
+        // The signed link opens without sign-in, so neither a login nor a project
+        // is forced here. A login, when there is one, is still used.
+        const client = this.client(flags, { requireAuth: false, requireProject: false });
+        const res = await client.hub.notifications.previewPushNotification({ hash });
         this.print(res);
         return res;
     }
+    async catch(error) {
+        // A 401 here means the link is bad or expired, not that a session ran out.
+        if (error instanceof NorbixError && error.status === 401) {
+            const { code } = error;
+            return this.error(`${code ? `${code}: ` : ''}${error.message}\nThe preview link is invalid or has expired. Ask for a new link.`);
+        }
+        return super.catch(error);
+    }
 }