@qaecy/cue-cli 0.0.39 → 0.0.41

package/main.js

@@ -29,6 +29,68 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// libs/js/sync-tools/src/lib/helpers/worker-pool.js
+var worker_pool_exports = {};
+__export(worker_pool_exports, {
+  WorkerPool: () => WorkerPool
+});
+var Worker, os, WorkerPool;
+var init_worker_pool = __esm({
+  "libs/js/sync-tools/src/lib/helpers/worker-pool.js"() {
+    ({ Worker } = require("worker_threads"));
+    os = require("os");
+    WorkerPool = class {
+      constructor(workerPath, poolSize = os.cpus().length) {
+        this.workerPath = workerPath;
+        this.poolSize = poolSize;
+        this.workers = [];
+        this.idleWorkers = [];
+        this.queue = [];
+        for (let i = 0; i < poolSize; i++) {
+          const worker = new Worker(workerPath);
+          worker.on("message", (result) => {
+            const callback = worker._currentCallback;
+            worker._currentCallback = null;
+            this.idleWorkers.push(worker);
+            callback(result);
+            this._next();
+          });
+          worker.on("error", (err) => {
+            if (worker._currentCallback)
+              worker._currentCallback({ error: err.message });
+            this.idleWorkers.push(worker);
+            this._next();
+          });
+          this.workers.push(worker);
+          this.idleWorkers.push(worker);
+        }
+      }
+      _next() {
+        if (this.queue.length > 0 && this.idleWorkers.length > 0) {
+          const { filePath, resolve: resolve2, reject } = this.queue.shift();
+          const worker = this.idleWorkers.pop();
+          worker._currentCallback = (result) => {
+            if (result.error)
+              reject(new Error(result.error));
+            else
+              resolve2(result.hash);
+          };
+          worker.postMessage(filePath);
+        }
+      }
+      hashFile(filePath) {
+        return new Promise((resolve2, reject) => {
+          this.queue.push({ filePath, resolve: resolve2, reject });
+          this._next();
+        });
+      }
+      async close() {
+        await Promise.all(this.workers.map((worker) => worker.terminate()));
+      }
+    };
+  }
+});
+
 // libs/js/id-builders/src/lib/id-builders.ts
 function contextBasedGuid(contextString, verbose = false) {
   const namespace = "daca0510-72b5-48ba-9091-b918ca18136b";
@@ -246,68 +308,6 @@ var init_src = __esm({
   }
 });
 
-// libs/js/sync-tools/src/lib/helpers/worker-pool.js
-var worker_pool_exports = {};
-__export(worker_pool_exports, {
-  WorkerPool: () => WorkerPool
-});
-var Worker, os, WorkerPool;
-var init_worker_pool = __esm({
-  "libs/js/sync-tools/src/lib/helpers/worker-pool.js"() {
-    ({ Worker } = require("worker_threads"));
-    os = require("os");
-    WorkerPool = class {
-      constructor(workerPath, poolSize = os.cpus().length) {
-        this.workerPath = workerPath;
-        this.poolSize = poolSize;
-        this.workers = [];
-        this.idleWorkers = [];
-        this.queue = [];
-        for (let i = 0; i < poolSize; i++) {
-          const worker = new Worker(workerPath);
-          worker.on("message", (result) => {
-            const callback = worker._currentCallback;
-            worker._currentCallback = null;
-            this.idleWorkers.push(worker);
-            callback(result);
-            this._next();
-          });
-          worker.on("error", (err) => {
-            if (worker._currentCallback)
-              worker._currentCallback({ error: err.message });
-            this.idleWorkers.push(worker);
-            this._next();
-          });
-          this.workers.push(worker);
-          this.idleWorkers.push(worker);
-        }
-      }
-      _next() {
-        if (this.queue.length > 0 && this.idleWorkers.length > 0) {
-          const { filePath, resolve: resolve2, reject } = this.queue.shift();
-          const worker = this.idleWorkers.pop();
-          worker._currentCallback = (result) => {
-            if (result.error)
-              reject(new Error(result.error));
-            else
-              resolve2(result.hash);
-          };
-          worker.postMessage(filePath);
-        }
-      }
-      hashFile(filePath) {
-        return new Promise((resolve2, reject) => {
-          this.queue.push({ filePath, resolve: resolve2, reject });
-          this._next();
-        });
-      }
-      async close() {
-        await Promise.all(this.workers.map((worker) => worker.terminate()));
-      }
-    };
-  }
-});
-
 // libs/js/sync-tools/src/lib/helpers/md5-builder-node.ts
 var md5_builder_node_exports = {};
 __export(md5_builder_node_exports, {
@@ -545,11 +545,11 @@ var Fuseki = class _Fuseki {
     }
   }
   async ping() {
-    const query4 = "ASK { }";
-    const res = await this.query(query4);
+    const query3 = "ASK { }";
+    const res = await this.query(query3);
     return res.boolean;
   }
-  async query(query4, accept = "application/sparql-results+json") {
+  async query(query3, accept = "application/sparql-results+json") {
     let res;
     try {
       res = await fetch(this.queryEndpoint, {
@@ -559,7 +559,7 @@ var Fuseki = class _Fuseki {
           Accept: accept
         },
         method: "POST",
-        body: new URLSearchParams({ query: query4 })
+        body: new URLSearchParams({ query: query3 })
       });
     } catch (err) {
       throw new Error(
@@ -572,7 +572,7 @@ var Fuseki = class _Fuseki {
     }
     return await res.json();
   }
-  async subset(query4, accept = "text/turtle") {
+  async subset(query3, accept = "text/turtle") {
     const res = await fetch(this.queryEndpoint, {
       headers: {
         ...this.baseHeaders,
@@ -581,7 +581,7 @@ var Fuseki = class _Fuseki {
         Accept: accept
       },
       method: "POST",
-      body: new URLSearchParams({ query: query4 })
+      body: new URLSearchParams({ query: query3 })
     });
     if (accept === "application/ld+json") {
       return await res.json();
@@ -679,11 +679,11 @@ var QLever = class _QLever {
     this.baseHeaders["x-user-roles"] = "admin";
   }
   async ping() {
-    const query4 = "ASK { }";
-    const res = await this.query(query4);
+    const query3 = "ASK { }";
+    const res = await this.query(query3);
     return res.boolean;
   }
-  async query(query4, accept = "application/sparql-results+json") {
+  async query(query3, accept = "application/sparql-results+json") {
     let res;
     try {
       res = await fetch(this.queryEndpoint, {
@@ -693,7 +693,7 @@ var QLever = class _QLever {
           Accept: accept
         },
         method: "POST",
-        body: new URLSearchParams({ query: query4 })
+        body: new URLSearchParams({ query: query3 })
       });
     } catch (err) {
       throw new Error(
@@ -706,7 +706,7 @@ var QLever = class _QLever {
     }
     return await res.json();
   }
-  async subset(query4, accept = "text/turtle") {
+  async subset(query3, accept = "text/turtle") {
     const res = await fetch(this.queryEndpoint, {
       headers: {
         ...this.baseHeaders,
@@ -714,7 +714,7 @@ var QLever = class _QLever {
         Accept: accept
       },
       method: "POST",
-      body: new URLSearchParams({ query: query4 })
+      body: new URLSearchParams({ query: query3 })
     });
     return await res.text();
   }
@@ -4780,7 +4780,6 @@ async function getGraphFiles(providerId, queryHandler2) {
 }
 
 // libs/js/sync-tools/src/lib/list-local-files.ts
-init_src();
 async function _path() {
   return import("path");
 }
@@ -4796,7 +4795,10 @@ async function listLocalFiles(dir, providerId = "", verbose = false, logInterval
   if (verbose)
     console.info(`Listing files in local dir: ${dir}`);
   if (unzipZipped) {
-    const zipFiles = await filesInLocalDirRecursive(dir, (entry) => entry.name.toLowerCase().endsWith(".zip"));
+    const zipFiles = await filesInLocalDirRecursive(
+      dir,
+      (entry) => entry.name.toLowerCase().endsWith(".zip")
+    );
     if (zipFiles.length && verbose)
       console.info(`Found ${zipFiles.length} zip files to unzip...`);
     for (const zipFile of zipFiles) {
@@ -4825,13 +4827,22 @@ async function listLocalFiles(dir, providerId = "", verbose = false, logInterval
   const { stat } = await _fs();
   const { relative } = await _path();
   const stats = await Promise.all(fullPaths.map((f) => stat(f)));
+  const { contextBasedGuid: contextBasedGuid2, generateFileUUID: generateFileUUID2 } = await Promise.resolve().then(() => (init_src(), src_exports));
   return fullPaths.map((f, i) => {
     const relativePath = relative(dir, f);
     const md5 = hashes[i];
-    const contentUUID = contextBasedGuid(md5);
-    const locationUUID = generateFileUUID(relativePath, providerId);
+    const contentUUID = contextBasedGuid2(md5);
+    const locationUUID = generateFileUUID2(relativePath, providerId);
     const { mtimeMs, size } = stats[i];
-    return { relativePath, fullPath: f, size, md5, contentUUID, locationUUID, mtimeMs };
+    return {
+      relativePath,
+      fullPath: f,
+      size,
+      md5,
+      contentUUID,
+      locationUUID,
+      mtimeMs
+    };
   });
 }
 async function filesInLocalDirRecursive(dir, filterFunc = () => true, excludeDirs = true) {
@@ -4864,7 +4875,9 @@ async function filesInLocalDirRecursive(dir, filterFunc = () => true, excludeDir
       if (error instanceof Error && "code" in error) {
         const nodeError = error;
         if (nodeError.code === "EPERM" || nodeError.code === "EACCES") {
-          console.warn(`Skipping directory due to permission error: ${currentDir}`);
+          console.warn(
+            `Skipping directory due to permission error: ${currentDir}`
+          );
           return;
         }
       }
@@ -4882,7 +4895,9 @@ async function unzipFile(zipPath, recursive = true, options) {
   const currentDepth = options?.currentDepth ?? 0;
   const totalUncompressedSize = options?.totalUncompressedSize ?? { value: 0 };
   if (currentDepth > maxRecursionDepth) {
-    throw new Error(`Zip extraction aborted: exceeded max recursion depth (${maxRecursionDepth})`);
+    throw new Error(
+      `Zip extraction aborted: exceeded max recursion depth (${maxRecursionDepth})`
+    );
   }
   const { mkdir: mkdir2, readFile, writeFile: writeFile2 } = await _fs();
   const { join: join4 } = await _path();
@@ -4901,7 +4916,9 @@ async function unzipFile(zipPath, recursive = true, options) {
       const promise = file.async("nodebuffer").then(async (content) => {
         totalUncompressedSize.value += content.length;
         if (totalUncompressedSize.value > maxUncompressedSize) {
-          throw new Error(`Zip extraction aborted: exceeded max uncompressed size (${maxUncompressedSize} bytes)`);
+          throw new Error(
+            `Zip extraction aborted: exceeded max uncompressed size (${maxUncompressedSize} bytes)`
+          );
         }
         await writeFile2(targetPath, content);
         if (recursive && targetPath.toLowerCase().endsWith(".zip")) {
@@ -4924,7 +4941,11 @@ async function ensureDir(path) {
 }
 async function deleteUnzipped(dir) {
   const { rm } = await _fs();
-  const paths = await filesInLocalDirRecursive(dir, (entry) => entry.name.toLowerCase().endsWith(UNZIPPED_SUFFIX), false);
+  const paths = await filesInLocalDirRecursive(
+    dir,
+    (entry) => entry.name.toLowerCase().endsWith(UNZIPPED_SUFFIX),
+    false
+  );
   for (const p of paths) {
     await rm(p, { recursive: true, force: true });
   }
@@ -4932,7 +4953,7 @@ async function deleteUnzipped(dir) {
 
 // apps/desktop/cue-cli/src/helpers/query-handler.ts
 var import_auth2 = require("firebase/auth");
-async function queryHandler(query4, spaceId, useEmulator) {
+async function queryHandler(query3, spaceId, useEmulator) {
   const endpoint = useEmulator ? SPARQL_ENDPOINT_EMULATOR : SPARQL_ENDPOINT;
   const token = await (0, import_auth2.getAuth)().currentUser?.getIdToken();
   const res = await fetch(endpoint, {
@@ -4943,7 +4964,7 @@ async function queryHandler(query4, spaceId, useEmulator) {
       "Content-Type": "application/sparql-query",
       Accept: "application/sparql-results+json"
     },
-    body: query4
+    body: query3
   });
   if (!res.ok) {
     console.error(
@@ -5027,8 +5048,8 @@ function cueComputed(deps, compute) {
     }
   };
 }
-async function staleWhileRevalidate(query4, fetchFresh, onData, cache) {
-  const cacheKey = contextBasedGuid(query4);
+async function staleWhileRevalidate(query3, fetchFresh, onData, cache) {
+  const cacheKey = contextBasedGuid(query3);
   let staleId;
   if (cache) {
     const stale = await cache.get(cacheKey);
@@ -5059,8 +5080,6 @@ var DEFAULT_SDK_CONFIG = {
 var FIREBASE_PROJECT_ID = "qaecy-mvp-406413";
 var FIREBASE_SENDER_ID = "734737865998";
 var GCP_REGION2 = "europe-west6";
-var COLLECTION_API_KEYS2 = "apiKeys";
-var COLLECTION_ORGANIZATIONS2 = "organizations";
 var COLLECTION_PROJECTS2 = "projects";
 var BUCKET_CHAT_SESSIONS2 = "spaces_chats_eu_west6";
 var BUCKET_RAW2 = "spaces_raw_eu_west6";
@@ -5069,6 +5088,9 @@ var BUCKET_LOGS2 = "spaces_logs_eu_west6";
 var BUCKET_PUBLIC2 = "cue_public_eu_west6";
 var BUCKET_PERSISTENCE2 = "db_persistence_eu_west6";
 var ENDPOINT_CONSUMPTION = "/data-views/admin/consumption";
+var ENDPOINT_PROFILE_ORGANIZATIONS = "/data-views/admin/profile/organizations";
+var ENDPOINT_PROFILE_API_KEYS = "/data-views/admin/profile/api-keys";
+var ENDPOINT_ORG_MEMBERS = (orgId) => `/data-views/admin/organizations/${orgId}/members`;
 var ENDPOINT_CREATE_PROJECT = "/commands/admin/project";
 var ENDPOINT_SEARCH = "/assistant/search";
 var ENDPOINT_FUSEKI_QUERY = "/triplestore/query";
@@ -5180,14 +5202,14 @@ var CueAuth = class {
     const tokenResult = await (0, import_auth3.getIdTokenResult)(user);
     return tokenResult.claims["role"] === SUPERADMIN_ROLE;
   }
-  /** Sign in with a Cue API key */
+  /** Sign in with a Cue API key. `projectId` is optional — omit it when no project context is available (e.g. admin flows). */
   async signInWithApiKey(cueApiKey, projectId) {
+    const headers = { "cue-api-key": cueApiKey };
+    if (projectId)
+      headers["x-project-id"] = projectId;
     const response = await fetch(this._endpoints.tokenUrl, {
       method: "GET",
-      headers: {
-        "x-project-id": projectId,
-        "cue-api-key": cueApiKey
-      }
+      headers
     });
     if (!response.ok)
       throw new Error(`Failed to fetch custom token: ${response.statusText}`);
@@ -5293,12 +5315,12 @@ var CueApi = class {
    * Execute a SPARQL query against the project's triplestore.
    * The user must be authenticated before calling this.
    */
-  async sparql(query4, projectId, graphType) {
+  async sparql(query3, projectId, graphType) {
     console.log(graphType);
     const endpoint = graphType === "qlever" ? ENDPOINT_QLEVER_QUERY : ENDPOINT_FUSEKI_QUERY;
     console.log(`Executing SPARQL query against ${endpoint} for project ${projectId} with graph type ${graphType ?? "fuseki"}`);
     const urlencoded = new URLSearchParams();
-    urlencoded.append("query", query4);
+    urlencoded.append("query", query3);
     const response = await this._auth.authenticatedFetch(
       `${this._gatewayUrl}${endpoint}`,
       {
@@ -5434,27 +5456,32 @@ var CueProjects = class {
 
 // libs/js/cue-sdk/src/lib/profile.ts
 var import_auth4 = require("firebase/auth");
-var import_firestore4 = require("firebase/firestore");
 var import_functions3 = require("firebase/functions");
 var CueProfile = class {
-  constructor(_auth, app, useEmulator, emulatorHost, emulatorPort) {
+  constructor(_auth, app, useEmulator, _gatewayUrl) {
     this._auth = _auth;
-    this._db = (0, import_firestore4.getFirestore)(app);
+    this._gatewayUrl = _gatewayUrl;
     this._functions = (0, import_functions3.getFunctions)(app, GCP_REGION2);
     if (useEmulator) {
-      (0, import_firestore4.connectFirestoreEmulator)(this._db, emulatorHost, emulatorPort);
       (0, import_functions3.connectFunctionsEmulator)(this._functions, "localhost", 5001);
     }
   }
-  _db;
   _functions;
-  _apiKeyDocRef;
+  _url(endpoint) {
+    return `${this._gatewayUrl}${endpoint}`;
+  }
+  async _fetch(path, init) {
+    const response = await this._auth.authenticatedFetch(this._url(path), init);
+    if (!response.ok) {
+      throw new Error(`Profile API error ${response.status}: ${response.statusText}`);
+    }
+    const text = await response.text();
+    return text ? JSON.parse(text) : null;
+  }
   /** Whether the current user has an active API key. */
   async hasAPIKey() {
-    const uid = this._auth.currentUser?.uid;
-    if (!uid)
-      return false;
-    return this._checkIfUserHasAPIKey(uid);
+    const info = await this._fetch(ENDPOINT_PROFILE_API_KEYS);
+    return info !== null;
   }
   /** Returns the sign-in methods registered for the current user's email. */
   async getSignInMethods() {
@@ -5522,47 +5549,36 @@ var CueProfile = class {
   }
   /** Creates a new API key for the current user. */
   async createAPIKey(expiration) {
-    const uid = this._auth.currentUser?.uid;
-    if (!uid)
-      throw new Error("User not authenticated");
-    const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
-    const randomKey = Array.from(globalThis.crypto.getRandomValues(new Uint8Array(150)), (b) => alphabet[b & 63]).join("");
-    const data = { key: `cue-${randomKey}`, uid, expiration };
-    const col = (0, import_firestore4.collection)(this._db, COLLECTION_API_KEYS2);
-    this._apiKeyDocRef = await (0, import_firestore4.addDoc)(col, data);
-    return data;
+    return this._fetch(ENDPOINT_PROFILE_API_KEYS, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ expiration })
+    });
   }
   /** Revokes the current user's API key. */
   async revokeAPIKey() {
-    if (!this._apiKeyDocRef)
-      throw new Error("No API key document reference");
-    await (0, import_firestore4.deleteDoc)(this._apiKeyDocRef);
-    this._apiKeyDocRef = void 0;
+    const response = await this._auth.authenticatedFetch(
+      this._url(ENDPOINT_PROFILE_API_KEYS),
+      { method: "DELETE" }
+    );
+    if (!response.ok) {
+      throw new Error(`Revoke API key error ${response.status}: ${response.statusText}`);
+    }
   }
   /** Fetches the current user's existing API key. */
   async requestAPIKey() {
-    if (!this._apiKeyDocRef)
-      throw new Error("No API key document reference");
-    const doc3 = (await (0, import_firestore4.getDoc)(this._apiKeyDocRef)).data();
-    return { key: doc3.key, expiration: doc3.expiration };
-  }
-  async _checkIfUserHasAPIKey(uid) {
-    const col = (0, import_firestore4.collection)(this._db, COLLECTION_API_KEYS2);
-    const q = (0, import_firestore4.query)(col, (0, import_firestore4.where)("uid", "==", uid), (0, import_firestore4.limit)(1));
-    const snapshot = await (0, import_firestore4.getDocs)(q);
-    if (!snapshot.empty)
-      this._apiKeyDocRef = snapshot.docs[0].ref;
-    return !snapshot.empty;
-  }
-  /** Returns all organizations the current user is a member of. */
+    const result = await this._fetch(ENDPOINT_PROFILE_API_KEYS);
+    if (!result)
+      throw new Error("No API key found");
+    return result;
+  }
+  /** Returns organizations the current user is a member of. */
   async listOrganizations() {
-    const uid = this._auth.currentUser?.uid;
-    if (!uid)
-      throw new Error("Not authenticated. Call cue.auth.signIn() first.");
-    const col = (0, import_firestore4.collection)(this._db, COLLECTION_ORGANIZATIONS2);
-    const q = (0, import_firestore4.query)(col, (0, import_firestore4.where)("members", "array-contains", uid));
-    const snap = await (0, import_firestore4.getDocs)(q);
-    return snap.docs.map((d) => d.data());
+    return this._fetch(ENDPOINT_PROFILE_ORGANIZATIONS);
+  }
+  /** Returns all members of the given organisation. Caller must be an org admin or superadmin. */
+  async getOrgMembers(orgId) {
+    return this._fetch(ENDPOINT_ORG_MEMBERS(orgId));
   }
   _requireUser() {
     const user = this._auth.currentUser;
@@ -5866,8 +5882,8 @@ WHERE {
 }
 GROUP BY ?iri ?parent`;
   }
-  async _runCategoriesQuery(query4) {
-    const data = await this._api.sparql(query4, this._projectId, this._graphType);
+  async _runCategoriesQuery(query3) {
+    const data = await this._api.sparql(query3, this._projectId, this._graphType);
     return data.results.bindings.filter((b) => b["iri"] !== void 0).map((b) => {
       const iri = b["iri"].value;
       return {
@@ -5894,8 +5910,8 @@ WHERE {
 }
 GROUP BY ?iri ?parent`;
   }
-  async _runRelationshipsQuery(query4) {
-    const data = await this._api.sparql(query4, this._projectId, this._graphType);
+  async _runRelationshipsQuery(query3) {
+    const data = await this._api.sparql(query3, this._projectId, this._graphType);
     return data.results.bindings.filter((b) => b["iri"] !== void 0).map((b) => {
       const iri = b["iri"].value;
       return {
@@ -7707,13 +7723,16 @@ function uploadedFileMetadata(originalName, projectId, userId, md5, providerId,
 }
 
 // libs/js/cue-sdk/src/lib/sync.ts
+async function _fs2() {
+  return import("fs/promises");
+}
 async function _readNodeFile(fullPath) {
   if (typeof window !== "undefined") {
     throw new Error(
       `Cannot read file from path "${fullPath}" in a browser environment. Provide file.data (Uint8Array) instead.`
     );
   }
-  const { readFile } = await import("fs/promises");
+  const { readFile } = await _fs2();
   return readFile(fullPath);
 }
 var _scanFn = null;
@@ -7739,7 +7758,7 @@ async function _initWasm() {
     await mod.default({ module_or_path: wasmBinary });
     _scanFn = mod.scan;
   } else {
-    const { readFile } = await import("fs/promises");
+    const { readFile } = await _fs2();
     const { join: join4 } = await import("path");
     const { pathToFileURL } = await import("url");
     const wasmDir = join4(__dirname, "assets", "wasm");
@@ -7767,7 +7786,7 @@ async function _loadPending(spaceId) {
     return raw ? JSON.parse(raw) : null;
   }
   try {
-    const raw = await (await import("fs/promises")).readFile(await _pendingFilePath(spaceId), "utf-8");
+    const raw = await (await _fs2()).readFile(await _pendingFilePath(spaceId), "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -7779,7 +7798,7 @@ async function _savePending(batch) {
     window.localStorage.setItem(`${PENDING_LS_PREFIX}${batch.spaceId}`, data);
     return;
   }
-  await (await import("fs/promises")).writeFile(await _pendingFilePath(batch.spaceId), data, "utf-8");
+  await (await _fs2()).writeFile(await _pendingFilePath(batch.spaceId), data, "utf-8");
 }
 async function _clearPending(spaceId) {
   if (typeof window !== "undefined") {
@@ -7787,7 +7806,7 @@ async function _clearPending(spaceId) {
     return;
   }
   try {
-    await (await import("fs/promises")).unlink(await _pendingFilePath(spaceId));
+    await (await _fs2()).unlink(await _pendingFilePath(spaceId));
   } catch {
   }
 }
@@ -8080,7 +8099,16 @@ WHERE {
        qcy:dateCreated ?created ;
        qcy:filePath ?fp .
 }`;
-    const res = await graph.query(q, "application/sparql-results+json");
+    let res;
+    try {
+      res = await graph.query(q, "application/sparql-results+json");
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (msg.includes("HTTP 500")) {
+        throw new Error("GRAPH_UNAVAILABLE: The knowledge graph for this project has no database configured. Contact your administrator or check the project setup.");
+      }
+      throw err;
+    }
     const map = {};
     if (typeof res === "string")
       return map;
@@ -8409,8 +8437,7 @@ var Cue = class _Cue {
       this.auth,
       this._app,
       this._isEmulator,
-      this._endpoints.firestoreEmulatorHost,
-      this._endpoints.firestoreEmulatorPort
+      this._endpoints.gatewayUrl
     );
     this.privileges = new CuePrivileges(this.auth.isSuperAdmin);
     const storagePersistence = (0, import_storage5.getStorage)(this._app, BUCKET_PERSISTENCE2);
@@ -8457,7 +8484,7 @@ var Cue = class _Cue {
     const syncApi = new CueSyncApi(auth, projects, blob, endpoints.gatewayUrl);
     const api = new CueApi(auth, endpoints.gatewayUrl, projects, syncApi);
     syncApi._bindApi(api);
-    const profile = new CueProfile(auth, app, false, endpoints.firestoreEmulatorHost, endpoints.firestoreEmulatorPort);
+    const profile = new CueProfile(auth, app, false, endpoints.gatewayUrl);
     const instance = Object.create(_Cue.prototype);
     const privileges = new CuePrivileges(auth.isSuperAdmin);
     const cache = new CueCache(storagePersistence);
@@ -8586,7 +8613,7 @@ async function compareHandler(options) {
     await authenticate(emulators, space, options.key, verbose);
     if (verbose)
       console.info("Building compare base \u23F3");
-    const qh = async (query4) => queryHandler(query4, space, emulators);
+    const qh = async (query3) => queryHandler(query3, space, emulators);
     const [localFiles, remoteFiles] = await Promise.all([
       listLocalFiles(
         path,
@@ -8917,7 +8944,7 @@ async function _doGzip(filePath) {
   });
   await (0, import_promises3.unlink)(filePath);
 }
-async function _doQuery(query4, spaceId, url) {
+async function _doQuery(query3, spaceId, url) {
   const token = await (0, import_auth9.getAuth)().currentUser?.getIdToken();
   try {
     const res = await fetch(url, {
@@ -8928,7 +8955,7 @@ async function _doQuery(query4, spaceId, url) {
         "Content-Type": "application/sparql-query",
         Accept: "application/n-quads"
       },
-      body: query4
+      body: query3
     });
     if (!res.ok) {
       console.error(`Error: ${res.status} ${res.statusText}`);
@@ -9036,7 +9063,7 @@ async function uploadToLocalGraph(id, filePath, mimeType = "application/n-quads"
 
 // apps/desktop/cue-cli/src/cue-cli-dump.ts
 async function dumpHandler(options) {
-  const { space, verbose, emulators, jelly, query: query4, load } = options;
+  const { space, verbose, emulators, jelly, query: query3, load } = options;
   try {
     const { isSuperAdmin } = await authenticate(emulators, space, options.key, verbose);
     if (!isSuperAdmin) {
@@ -9057,7 +9084,7 @@ async function dumpHandler(options) {
     } else {
       if (verbose)
         console.time("Downloaded and zipped graph \u2705");
-      if (query4) {
+      if (query3) {
         if (verbose)
           console.info("Setting: Construct query");
         filePath = await dumpRdfGraphToFileConstruct(space, emulators, verbose);
@@ -9280,7 +9307,7 @@ async function syncHandler(options) {
     }
     if (preview.creditsToConsume > preview.creditsAvailable) {
       console.error(
-        `Insufficient credits: ${Math.round(preview.creditsToConsume)} required, ${Math.round(preview.creditsAvailable)} available.`
+        `Insufficient credits: ${Math.round(preview.creditsToConsume)} required, ${Math.round(preview.creditsAvailable)} available. Contact the QAECY sales team at mail@qaecy.com to top up credits.`
       );
       process.exit(1);
     }
@@ -9320,7 +9347,9 @@ async function syncHandler(options) {
     process.exit(0);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    if (msg.includes("GRAPH_TIMEOUT")) {
+    if (msg.includes("GRAPH_UNAVAILABLE")) {
+      console.error("The knowledge graph for this project has no database configured. Contact your administrator or check the project setup.");
+    } else if (msg.includes("GRAPH_TIMEOUT")) {
       console.error("Could not reach the knowledge graph. Make sure all required services are running.");
     } else if (msg.includes("METADATA_SYNC_FAILED")) {
       console.error("Metadata sync failed. Try again.");
@@ -9515,6 +9544,226 @@ Triples only in file 2 (${result.triplesOnlyInFile2.size}):`);
   process.exitCode = 1;
 }
 
+// apps/desktop/cue-cli/src/cue-cli-create-project.ts
+var readline2 = __toESM(require("readline"));
+function ask(rl, question) {
+  return new Promise((resolve2) => rl.question(question, (answer) => resolve2(answer.trim())));
+}
+async function pickOne(rl, label, items, display) {
+  console.log(`
+${label}`);
+  items.forEach((item, i) => console.log(`  ${i + 1}. ${display(item)}`));
+  while (true) {
+    const answer = await ask(rl, `Enter number (1-${items.length}): `);
+    const idx = parseInt(answer, 10) - 1;
+    if (idx >= 0 && idx < items.length)
+      return items[idx];
+    console.log("  Invalid selection, try again.");
+  }
+}
+async function pickMultipleOrAll(rl, label, items, display) {
+  if (items.length === 0)
+    return [];
+  console.log(`
+${label}`);
+  items.forEach((item, i) => console.log(`  ${i + 1}. ${display(item)}`));
+  console.log(`  0. All`);
+  const answer = await ask(rl, `Enter comma-separated numbers or 0 for all: `);
+  if (answer === "0")
+    return items;
+  const indices = answer.split(",").map((s) => parseInt(s.trim(), 10) - 1).filter((i) => i >= 0 && i < items.length);
+  return [...new Set(indices)].map((i) => items[i]);
+}
+async function createProjectHandler(options) {
+  const { emulators, verbose } = options;
+  const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const key = options.key ?? process.env.CUE_API_KEY;
+    if (!key) {
+      console.error("API key is required. Provide it via --key or CUE_API_KEY env variable.");
+      process.exit(1);
+    }
+    const cue = new CueNode({
+      apiKey: FIREBASE_CONFIG().apiKey,
+      appId: FIREBASE_CONFIG().appId,
+      measurementId: FIREBASE_CONFIG().measurementId,
+      environment: emulators ? "emulator" : "production",
+      ...emulators ? { endpoints: getEmulatorEndpoints() } : {}
+    });
+    if (verbose)
+      console.info("Authenticating \u23F3");
+    const user = await cue.auth.signInWithApiKey(key);
+    const idTokenResult = await user.getIdTokenResult();
+    const isSuperAdmin = idTokenResult.claims["role"] === "superadmin";
+    if (verbose)
+      console.info(`Authenticated as ${user.uid} (superadmin: ${isSuperAdmin}) \u2705`);
+    const gatewayUrl = emulators ? getEmulatorEndpoints().gatewayUrl : "https://accessors-api-gateway-ueyeemwf2a-oa.a.run.app";
+    let orgId;
+    let orgName;
+    let orgMembers = [];
+    let callerIsOrgAdmin = false;
+    if (isSuperAdmin) {
+      const orgsRes = await cue.auth.authenticatedFetch(`${gatewayUrl}/data-views/admin/organizations`);
+      if (!orgsRes.ok) {
+        console.error(`Failed to list organisations: ${orgsRes.status} ${orgsRes.statusText}`);
+        process.exit(1);
+      }
+      const allOrgs = await orgsRes.json();
+      if (allOrgs.length === 0) {
+        console.error("No organisations found on the platform.");
+        process.exit(1);
+      }
+      const picked = await pickOne(rl, "Select organisation:", allOrgs, (o) => `${o.name} (${o.id})`);
+      orgId = picked.id;
+      orgName = picked.name;
+      callerIsOrgAdmin = picked.admins?.includes(user.uid) ?? false;
+      const membersRes = await cue.auth.authenticatedFetch(`${gatewayUrl}/data-views/admin/organizations/${orgId}/members`);
+      if (membersRes.ok)
+        orgMembers = await membersRes.json();
+    } else {
+      const myOrgs = await cue.profile.listOrganizations();
+      const adminOrgs = myOrgs.filter((o) => o.isAdmin);
+      if (adminOrgs.length === 0) {
+        console.error("You are not an admin of any organisation. Cannot create a project.");
+        process.exit(1);
+      }
+      const picked = await pickOne(rl, "Select organisation:", adminOrgs, (o) => `${o.name} (${o.id})`);
+      orgId = picked.id;
+      orgName = picked.name;
+      callerIsOrgAdmin = true;
+      orgMembers = await cue.profile.getOrgMembers(orgId);
+    }
+    console.log(`
+Organisation: ${orgName} (${orgId})`);
+    const projectName = await ask(rl, "\nProject name: ");
+    if (!projectName) {
+      console.error("Project name is required.");
+      process.exit(1);
+    }
+    const graphType = await pickOne(
+      rl,
+      "Select graph backend (default: QLever):",
+      [
+        { value: "qlever", label: "QLever (recommended)" },
+        { value: "fuseki", label: "Fuseki" }
+      ],
+      (item) => item.label
+    ).then((item) => item.value);
+    const tier = await pickOne(
+      rl,
+      "Select processing tier (default: L \u2014 Large):",
+      [
+        { value: "l", label: "L \u2014 Large (default)" },
+        { value: "m", label: "M \u2014 Medium" },
+        { value: "s", label: "S \u2014 Small" }
+      ],
+      (item) => item.label
+    ).then((item) => item.value);
+    let selectedAdmins = [];
+    let selectedSyncers = [];
+    let selectedMembers = [];
+    if (isSuperAdmin) {
+      const orgAdmins = orgMembers.filter((m) => m.isAdmin);
+      if (orgAdmins.length === 0) {
+        console.error("This organisation has no admins. Cannot create a project without at least one admin.");
+        process.exit(1);
+      }
+      while (selectedAdmins.length === 0) {
+        selectedAdmins = await pickMultipleOrAll(
+          rl,
+          "Select project admin(s) \u2014 at least one required:",
+          orgAdmins,
+          (m) => `${m.name} <${m.email}>`
+        );
+        if (selectedAdmins.length === 0)
+          console.log("  At least one admin must be selected.");
+      }
+    }
+    const nonAdminMembers = orgMembers.filter((m) => !selectedAdmins.some((a5) => a5.uid === m.uid));
+    if (nonAdminMembers.length > 0) {
+      selectedMembers = await pickMultipleOrAll(
+        rl,
+        "Select project members:",
+        nonAdminMembers,
+        (m) => `${m.name} <${m.email}>${m.isAdmin ? " (org admin)" : ""}`
+      );
+    }
+    if (selectedMembers.length > 0) {
+      const answer = await ask(rl, `
+Set all selected members as syncers as well? (Y/n): `);
+      if (answer.toLowerCase() !== "n") {
+        selectedSyncers = selectedMembers;
+      } else {
+        selectedSyncers = await pickMultipleOrAll(
+          rl,
+          "Select project syncers:",
+          selectedMembers,
+          (m) => `${m.name} <${m.email}>`
+        );
+      }
+    }
+    console.log("\n\u2500\u2500 Summary \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+    console.log(`  Organisation : ${orgName}`);
+    console.log(`  Name         : ${projectName}`);
+    console.log(`  Graph        : ${graphType}`);
+    console.log(`  Tier         : ${tier.toUpperCase()}`);
+    if (isSuperAdmin) {
+      console.log(`  Admins       : ${selectedAdmins.map((m) => m.email).join(", ")}`);
+    } else {
+      console.log(`  Admins       : (you)`);
+    }
+    console.log(`  Members      : ${selectedMembers.length === 0 ? "(none)" : selectedMembers.map((m) => m.email).join(", ")}`);
+    console.log(`  Syncers      : ${selectedSyncers.length === 0 ? "(none)" : selectedSyncers.map((m) => m.email).join(", ")}`);
+    console.log("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+    const confirm = await ask(rl, "\nCreate project? (Y/n): ");
+    if (confirm.toLowerCase() === "n") {
+      console.log("Aborted.");
+      process.exit(0);
+    }
+    if (verbose)
+      console.info("Creating project \u23F3");
+    const body = {
+      organizationID: orgId,
+      name: projectName,
+      graphType,
+      tier,
+      ...selectedAdmins.length > 0 ? { admins: selectedAdmins.map((m) => m.uid) } : {},
+      ...selectedMembers.length > 0 ? { members: selectedMembers.map((m) => m.uid) } : {},
+      ...selectedSyncers.length > 0 ? { syncers: selectedSyncers.map((m) => m.uid) } : {}
+    };
+    let created;
+    if (isSuperAdmin) {
+      const res = await cue.auth.authenticatedFetch(`${gatewayUrl}/commands/admin/project`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body)
+      });
+      if (!res.ok) {
+        const detail = await res.text().catch(() => "");
+        console.error(`Failed to create project: ${res.status} ${res.statusText}${detail ? ` \u2014 ${detail}` : ""}`);
+        process.exit(1);
+      }
+      created = await res.json();
+    } else {
+      created = await cue.projects.createProject({
+        organizationID: orgId,
+        name: projectName,
+        graphType,
+        tier,
+        ...selectedAdmins.length > 0 ? { admins: selectedAdmins.map((m) => m.uid) } : {},
+        ...selectedMembers.length > 0 ? { members: selectedMembers.map((m) => m.uid) } : {},
+        ...selectedSyncers.length > 0 ? { syncers: selectedSyncers.map((m) => m.uid) } : {}
+      });
+    }
+    console.log(`
+Project created \u2705`);
+    console.log(`  ID   : ${created["id"]}`);
+    console.log(`  Name : ${created["name"]}`);
+  } finally {
+    rl.close();
+  }
+}
+
 // apps/desktop/cue-cli/src/main.ts
 var packageJson;
 try {
@@ -9536,4 +9785,5 @@ program.command("dump-processed").description("Dump processed files to local fol
 program.command("repair-ttl").description("Repair TTL files in the specified space").requiredOption("-s, --space <id>", "Specify the space ID (required)").requiredOption("-p, --processor <id>", "Id of the processor to repair TTL files (required) [eg. writers-blob, processors-cad-files]").requiredOption("-f, --from <subString>", "Substring (Regex) to replace in the TTL file (required)").requiredOption("-t, --to <substituteString>", "Substring to replace in the TTL file (required)").option("-k, --key <api-key>", "Specify the API key (or set CUE_API_KEY env variable)").option("-v, --verbose", "Enable verbose output", false).option("-e, --emulators", "Uses emulators for sync", false).action(repairTtlHandler);
 program.command("util-rdf-compare").description("Compare two Turtle (.ttl) files and report semantic differences").requiredOption("--file1 <path>", "Path to the first TTL file").requiredOption("--file2 <path>", "Path to the second TTL file").option("-v, --verbose", "Enable verbose output", false).action(utilRdfCompareHandler);
 program.command("util-remove-rdf-star").description("Remove RDF-star (quoted) triples from an NQuads file. Supports .nq and .nq.gz input/output.").requiredOption("-i, --input <path>", "Input file path (.nq or .nq.gz)").requiredOption("-o, --output <path>", "Output file path (.nq or .nq.gz)").option("-v, --verbose", "Enable verbose output", false).action(utilRemoveRdfStarHandler);
+program.command("create-project").description("Interactively create a new project under an organisation").option("-k, --key <api-key>", "Specify the API key (or set CUE_API_KEY env variable)").option("-e, --emulators", "Uses emulators", false).option("-v, --verbose", "Enable verbose output", false).action(createProjectHandler);
 program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qaecy/cue-cli",
-  "version": "0.0.39",
+  "version": "0.0.41",
   "description": "Cue CLI for QAECY platform",
   "main": "main.js",
   "bin": {
@@ -16,7 +16,7 @@
   "dependencies": {
     "@google-cloud/pubsub": "4.4.1",
     "axios": "1.14.0",
-    "commander": "13.1.0",
+    "commander": "14.0.2",
     "firebase": "12.4.0",
     "firebase-admin": "13.0.2",
     "jsonld": "8.3.3",