@senticor/hive 1.42.0 → 1.43.0

package/hive.cjs

@@ -8558,9 +8558,41 @@ var CliCommandError = class extends Error {
 function commandError(symbolicCode, exitCode, message, options) {
   return new CliCommandError(symbolicCode, exitCode, message, options);
 }
-function remoteFailureRemediation(data) {
+function remoteErrorFields(data) {
   const body = data ?? {};
-  const code = String(body.error || body.code || "").trim().toUpperCase();
+  const raw = body.error;
+  if (raw && typeof raw === "object") {
+    const nested = raw;
+    return {
+      code: String(nested.code ?? "").trim(),
+      message: String(nested.message ?? "").trim()
+    };
+  }
+  return {
+    code: String(raw || body.code || "").trim(),
+    message: String(body.message || "").trim()
+  };
+}
+function fieldText(value) {
+  if (value === null || value === void 0) return "";
+  if (typeof value === "object") {
+    try {
+      const json2 = JSON.stringify(value);
+      return json2 && json2 !== "{}" && json2 !== "[]" ? json2 : "";
+    } catch {
+      return "";
+    }
+  }
+  return String(value).trim();
+}
+function schemaErrorFields(data) {
+  const errors = data?.schemaErrors;
+  if (!Array.isArray(errors)) return [];
+  const paths = errors.map((entry) => String(entry?.instancePath ?? "").trim()).filter(Boolean).map((path9) => path9.replace(/^\//, ""));
+  return [...new Set(paths)];
+}
+function remoteFailureRemediation(data) {
+  const code = remoteErrorFields(data).code.toUpperCase();
   if (code === "TENANT_NOT_ALLOWED") {
     return "The requested tenant is not in your active memberships. For platform-admin operations (org/mission create) omit --tenant / HIVE_TENANT. If the tenant is saved in CLI config, run 'hive config clear --tenant'; then run 'hive diag authz' to list memberships and optionally pin one with 'hive config use --tenant=<displayKey>'.";
   }
@@ -8571,7 +8603,10 @@ function remoteFailureRemediation(data) {
 }
 function remoteFailureText(data) {
   const body = data;
-  const parts = [body?.error, body?.message, body?.detail].map((value) => String(value || "").trim()).filter(Boolean);
+  const { code, message } = remoteErrorFields(data);
+  const parts = [code, message, fieldText(body?.detail)].filter(Boolean);
+  const fields = schemaErrorFields(data);
+  if (fields.length) parts.push(`(offending field${fields.length > 1 ? "s" : ""}: ${fields.join(", ")})`);
   return [...new Set(parts)].join(": ") || "unexpected response";
 }
 function toStructuredError(err) {
@@ -8630,9 +8665,7 @@ function installRemoteFailureExit() {
     if (code !== EXIT_OK) return;
     const failure = pendingRemoteFailure();
     if (!failure) return;
-    const body = failure.body ?? {};
-    const bodyCode = String(body.error || body.code || "").trim();
-    const symbolic = bodyCode || remoteFailureCode(failure.status);
+    const symbolic = remoteErrorFields(failure.body).code || remoteFailureCode(failure.status);
     const remediation = remoteFailureRemediation(failure.body) ?? (failure.status === 401 ? "Run 'hive login' to authenticate, or set HIVE_TOKEN." : void 0);
     const message = `${failure.method} ${failure.path} failed${failure.status ? ` (HTTP ${failure.status})` : ""}: ${remoteFailureText(failure.body)}`;
     if (isJsonMode()) {
@@ -9121,22 +9154,22 @@ var artifactName = injectedString(
   true ? "hive-cli" : void 0
 ) || String(process.env.HIVE_CLI_ARTIFACT_NAME || "hive-cli").trim() || "hive-cli";
 var packageVersion = injectedString(
-  true ? "1.42.0" : void 0
+  true ? "1.43.0" : void 0
 ) || String(process.env.HIVE_CLI_PACKAGE_VERSION || "").trim() || readPackageVersion();
 var releaseVersion = injectedString(
-  true ? "1.42.0" : void 0
+  true ? "1.43.0" : void 0
 ) || String(process.env.HIVE_CLI_RELEASE_VERSION || "").trim() || packageVersion || "dev";
 var releaseChannel = injectedString(
   true ? "final" : void 0
 ) || String(process.env.HIVE_CLI_RELEASE_CHANNEL || "").trim() || (releaseVersion.includes("-rc.") ? "rc" : releaseVersion === "dev" ? "dev" : "final");
 var buildCommit = injectedString(
-  true ? "c7c91396e85e2716d596dc9ae6b208cdf1553210" : void 0
+  true ? "1f246cc6c9dc4918fdffd57155d00593d639c6f2" : void 0
 ) || String(process.env.HIVE_CLI_BUILD_COMMIT || "").trim() || "unknown";
 var buildTimestamp = injectedString(
-  true ? "2026-09-22T07:23:06Z" : void 0
+  true ? "2026-09-22T13:29:55Z" : void 0
 ) || String(process.env.HIVE_CLI_BUILD_TIMESTAMP || "").trim() || "unknown";
 var ociRef = injectedString(
-  true ? "registry.onstackit.cloud/senticor/hive-cli:1.42.0" : void 0
+  true ? "registry.onstackit.cloud/senticor/hive-cli:1.43.0" : void 0
 ) || String(process.env.HIVE_CLI_OCI_REF || "").trim() || `registry.onstackit.cloud/senticor/${artifactName}:${releaseVersion}`;
 var RELEASE_INFO = Object.freeze({
   packageVersion,
@@ -25926,6 +25959,8 @@ var orgArgs = withArgs({
   kind: { type: "string", description: "Tenant kind: organization | customer (default organization)" },
   corsOrigin: { type: "string", description: "Allowed CORS origin, e.g. https://workbench.example" },
   frontendUrl: { type: "string", description: "Frontend URL for this tenant" },
+  clearCorsOrigin: { type: "boolean", description: "Clear this tenant's stored corsOrigin (sends an explicit null)" },
+  clearFrontendUrl: { type: "boolean", description: "Clear this tenant's stored frontendUrl (sends an explicit null)" },
   ownerPrincipalId: { type: "string", description: "UUID of the owning principal" },
   email: { type: "string", description: "Principal/user email" },
   displayName: { type: "string", description: "Principal display name" },
@@ -25947,6 +25982,43 @@ function ensureOk(status2, data, action) {
     remediation ? { remediation } : void 0
   );
 }
+function applyRuntimeConfig(args, body) {
+  for (const [flag, clearFlag, key] of [
+    ["corsOrigin", "clearCorsOrigin", "corsOrigin"],
+    ["frontendUrl", "clearFrontendUrl", "frontendUrl"]
+  ]) {
+    const value = args[flag];
+    const clear = args[clearFlag] === true;
+    const kebab = key === "corsOrigin" ? "cors-origin" : "frontend-url";
+    if (clear && value) {
+      throw commandError(
+        "CONFLICTING_ARGS",
+        EXIT_GUARDRAIL,
+        `--${kebab} and --clear-${kebab} are mutually exclusive \u2014 pass one or the other.`
+      );
+    }
+    if (clear) {
+      body[key] = null;
+      continue;
+    }
+    if (typeof value === "string" && value.trim() === "") {
+      throw commandError(
+        "AMBIGUOUS_EMPTY_VALUE",
+        EXIT_GUARDRAIL,
+        `--${kebab} was given an empty value, which the API reads as 'not supplied' \u2014 it would report success and change nothing. Use --clear-${kebab} to clear the stored value, or pass a real value.`
+      );
+    }
+    if (value) body[key] = value;
+  }
+}
+function warnIgnoredRuntimeConfig(data) {
+  const report = data?.runtimeConfig;
+  const ignored = Array.isArray(report?.ignoredEmpty) ? report.ignoredEmpty : [];
+  if (!ignored.length) return;
+  console.error(
+    `Warning: the server ignored ${ignored.join(", ")} (sent as an empty string) and left the stored value unchanged. Use --clear-cors-origin / --clear-frontend-url to clear a field.`
+  );
+}
 function tenantDisplayKey(args) {
   const key = String(args.displayKey || args.tenantKey || args.tenant || "").trim() || void 0;
   if (key) assertCanonicalTenantSelector(key, "tenant display key");
@@ -26052,8 +26124,7 @@ var org = defineCommand({
           kind: args.kind || "organization",
           displayKey: args.displayKey
         };
-        if (args.corsOrigin) body.corsOrigin = args.corsOrigin;
-        if (args.frontendUrl) body.frontendUrl = args.frontendUrl;
+        applyRuntimeConfig(args, body);
         if (args.ownerPrincipalId) body.ownerPrincipalId = args.ownerPrincipalId;
         const requestedKind = String(body.kind || "organization").trim();
         let res;
@@ -26088,6 +26159,7 @@ var org = defineCommand({
           }
         }
         ensureOk(res.status, res.data, "create tenant");
+        warnIgnoredRuntimeConfig(res.data);
         const tenant = recordOf2(recordOf2(res.data).tenant);
         const pinKey = canonicalPinKey(tenant);
         const pinnable = Boolean(args.pin && pinKey);
@@ -26194,8 +26266,7 @@ var org = defineCommand({
         const kind = String(args.kind || "organization").trim();
         const { client, fmt } = ctx(args);
         const createBody = { kind, displayKey: args.displayKey };
-        if (args.corsOrigin) createBody.corsOrigin = args.corsOrigin;
-        if (args.frontendUrl) createBody.frontendUrl = args.frontendUrl;
+        applyRuntimeConfig(args, createBody);
         if (args.ownerPrincipalId) createBody.ownerPrincipalId = args.ownerPrincipalId;
         let reusedTenant = false;
         let tenant;
@@ -28511,12 +28582,11 @@ var Ajv2 = ajvModule2.default ?? ajvModule2;
 var addFormats2 = ajvFormatsModule2.default ?? ajvFormatsModule2;
 function assertRemoteOk2(status2, data, action) {
   if (status2 && status2 >= 200 && status2 < 300) return;
-  const body = data;
   const remediation = remoteFailureRemediation(data);
   throw commandError(
     "REMOTE_FAILED",
     3,
-    `${action} failed${status2 ? ` (HTTP ${status2})` : ""}: ${body?.error || body?.message || body?.detail || "unexpected response"}${remediation ? ` \u2014 ${remediation}` : ""}`,
+    `${action} failed${status2 ? ` (HTTP ${status2})` : ""}: ${remoteFailureText(data)}${remediation ? ` \u2014 ${remediation}` : ""}`,
     remediation ? { remediation } : void 0
   );
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@senticor/hive",
-  "version": "1.42.0",
+  "version": "1.43.0",
   "description": "Cognitive Hive OS — unified CLI",
   "type": "commonjs",
   "bin": {