@socialseal/cli 0.1.5 → 0.1.6

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+## 0.1.6 - 2026-03-19
+- Fix runtime version reporting so `socialseal --version` reads from package metadata instead of a hardcoded source string.
+- Fix `tracking` create request translation so `--workspace-id` is sent on the REST query path the backend uses for workspace binding.
+- Improve tracked-video extraction failure messages by avoiding `[object Object]` item errors and returning explicit guidance when `videoId` is actually a search-result id or tracking item id.
+- Fail fast for `group-management` and `export_tracking_data` when no workspace is selected, instead of silently relying on backend personal-workspace fallback.
+- Warn when `tracking create` runs without a workspace and when short numeric `--video-id` values look like internal row ids.
+- Clarify in workspace discovery output and docs that `workspace_id` and `brand_id` are different identifiers.
+
 ## 0.1.5 - 2026-03-19
 - Add first-class tracked-video workflows with `video queue-analysis` and `video extract`.
 - Make `--video-id` the primary ergonomic selector for tracked-video analysis and asset extraction, while keeping `--search-result-id` as a fallback selector.

package/README.md

@@ -56,7 +56,7 @@ Optional config file:
   - `socialseal video extract --body @payload.json --out-dir ./video-assets`
 
 - Data exports (provisional):
-  - `socialseal data export-tracking --group-id 123 --time-period 30d --out out.csv`
+  - `socialseal data export-tracking --group-id 123 --time-period 30d --workspace-id <uuid> --out out.csv`
   - `socialseal data export-report --report-type keyword_universe --format csv --payload @payload.json --out out.csv`
 
 ## Notes
@@ -66,11 +66,14 @@ Optional config file:
 - `search-journey-run` supports CLI-managed async polling: `--async` starts backend async mode, polling is on by default, `--no-poll` returns the initial `runId`, and `--poll-interval <ms>` controls the status polling cadence.
 - `video queue-analysis` wraps the tracked-video extraction backend in queue-only mode so you can queue one or many tracked videos without downloading assets first.
 - `video extract` wraps the same backend in extraction mode and returns a normalized JSON payload with resolved tracking context, structured analysis, thumbnail/frame assets, and optional local downloads under `--out-dir`.
-- `--video-id` is the primary ergonomic selector for video workflows. The backend tries it as `video_uid` first, then as platform video id. `--search-result-id` remains available when you are starting from a specific tracked rank row.
+- `--video-id` is the primary ergonomic selector for video workflows. The backend tries it as `video_uid` first, then as platform video id. It does not accept tracking item ids. `--search-result-id` remains available when you are starting from a specific tracked rank row.
+- `group-management` and `export_tracking_data` now fail fast when no workspace is selected, instead of letting the backend silently fall back to the personal workspace.
+- `tracking create` without a workspace now prints a warning that the backend may create a personal/null-scope item.
+- Short numeric `--video-id` inputs now print a warning that they may be internal row ids and that `--search-result-id` is often the intended selector.
 - `socialseal agent run` now defaults to a fresh conversation. The CLI prints a continuation token to `stderr`; pass it back with `--continue <token>` to resume the same agent conversation explicitly.
-- Effective workspace precedence is: `--workspace-id` → `SOCIALSEAL_WORKSPACE_ID` → config `workspaceId` → backend personal-workspace fallback.
+- Effective workspace precedence is: `--workspace-id` → `SOCIALSEAL_WORKSPACE_ID` → config `workspaceId`. For commands that are easy to misuse (`group-management`, `export_tracking_data`, tracked-video workflows), the CLI now requires an explicit or preconfigured workspace instead of relying on backend fallback.
 - `socialseal workspace use ...` writes a local default workspace into `~/.config/socialseal/config.json`, which the CLI reuses for `agent`, `tools`, and `data` commands.
-- `socialseal workspace list` discovers the workspaces accessible to the current CLI key and marks the active/suggested default.
+- `socialseal workspace list` discovers the workspaces accessible to the current CLI key, marks the active/suggested default, and reminds you that `workspace_id` and `brand_id` are different identifiers.
 - If a scoped CLI key cannot safely infer a workspace, `agent run` now fails closed and tells you to set `--workspace-id` or configure a local default first.
 
 ## Errors and exit codes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socialseal/cli",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "private": false,
   "type": "module",
   "description": "SocialSeal CLI (non-interactive)",

package/src/index.js

@@ -16,6 +16,7 @@ const DEFAULT_POLL_INTERVAL_MS = 2000;
 const DEFAULT_FRAME_COUNT = 3;
 const MAX_TIMEOUT_MS = 900000;
 const LEGACY_ENABLED = process.env.SOCIALSEAL_ENABLE_LEGACY === '1';
+const CLI_VERSION = loadRuntimeVersion();
 const STATIC_TOOL_REGISTRY_NOTE = 'This registry is shipped with the CLI for stable discovery. It is not live backend enumeration, so environment-specific availability can drift.';
 const EXIT_CODES = {
   OK: 0,
@@ -61,7 +62,7 @@ const KNOWN_TOOLS = [
     transport: 'post_edge_function',
     workspaceScoped: true,
     knownLocalDevState: 'disabled_by_default',
-    notes: 'group_id expects a numeric tracking_group id, not a brand_group UUID.',
+    notes: 'group_id expects a numeric tracking_group id, not a brand_group UUID. Always pass a workspace id or configure a default workspace so the export does not silently target the personal workspace.',
   },
   {
     name: 'tracked-video-extract',
@@ -71,7 +72,7 @@ const KNOWN_TOOLS = [
     transport: 'post_edge_function',
     workspaceScoped: true,
     knownLocalDevState: 'enabled',
-    notes: 'Accepts videoId/videoUid/platformVideoId/searchResultId items; can queue analysis and return/download asset URLs.',
+    notes: 'Accepts videoId/videoUid/platformVideoId/searchResultId items; videoId means video_uid or platform-native video id, not a tracking item id.',
   },
   { name: 'douyin-geo-api', category: 'search', description: 'Query Douyin search and geo data.' },
   { name: 'google-ai-search', category: 'search', description: 'Run Google AI search queries and fetch result snapshots.' },
@@ -88,7 +89,7 @@ const KNOWN_TOOLS = [
     workspaceScoped: true,
     knownLocalDevState: 'disabled_by_default',
     actionAliases: ['list', 'get', 'create', 'update', 'delete', 'refresh', 'list_items', 'add_item', 'group_add_item', 'add_items', 'group_add_items', 'remove_item', 'group_remove_item'],
-    notes: 'REST-style surface under /groups. `add_item`/`group_add_item` accepts an existing `item_id`; `add_items`/`group_add_items` accepts `item_ids` or item payloads for bulk membership adds.',
+    notes: 'REST-style surface under /groups. `add_item`/`group_add_item` accepts an existing `item_id`; `add_items`/`group_add_items` accepts `item_ids` or item payloads for bulk membership adds. Always pass a workspace id or configure a default workspace so the backend does not fall back to the personal workspace.',
   },
   {
     name: 'tracking',
@@ -123,6 +124,26 @@ function getConfigPath() {
   return process.env.SOCIALSEAL_CONFIG || DEFAULT_CONFIG_PATH;
 }
 
+function loadRuntimeVersion() {
+  const envVersion = typeof process.env.npm_package_version === 'string'
+    ? process.env.npm_package_version.trim()
+    : '';
+  if (envVersion) return envVersion;
+
+  try {
+    const packageJsonPath = new URL('../package.json', import.meta.url);
+    const raw = fs.readFileSync(packageJsonPath, 'utf8');
+    const parsed = JSON.parse(raw);
+    if (typeof parsed?.version === 'string' && parsed.version.trim().length > 0) {
+      return parsed.version.trim();
+    }
+  } catch {
+    // fall through to the safe fallback below
+  }
+
+  return '0.0.0';
+}
+
 function loadConfig() {
   const configPath = getConfigPath();
   try {
@@ -424,6 +445,7 @@ function buildVideoExtractBody(opts, workspaceId) {
       throw new CliError('Provide --body or one of --video-id, --video-uid, --platform-video-id, or --search-result-id.', {
         code: 'MISSING_ARGUMENT',
         exitCode: EXIT_CODES.USAGE,
+        hint: '--video-id accepts a video_uid or platform video id. It does not accept tracking item ids.',
       });
     }
 
@@ -933,7 +955,7 @@ function translateTrackingAction(payload, workspaceId) {
   if (!action) {
     return {
       method: 'POST',
-      pathSuffix: '',
+      pathSuffix: buildPathWithQuery('', { workspace_id: workspaceId || undefined }),
       body: stripUndefinedEntries({
         name: payload.name,
         track_type: payload.track_type,
@@ -1013,7 +1035,7 @@ function translateTrackingAction(payload, workspaceId) {
   if (action === 'create' || action === 'item_create') {
     return {
       method: 'POST',
-      pathSuffix: '',
+      pathSuffix: buildPathWithQuery('', { workspace_id: workspaceId || undefined }),
       body: stripUndefinedEntries({
         name: payload.name,
         track_type: payload.track_type,
@@ -1480,6 +1502,61 @@ function emitWorkspaceContext(opts, { workspaceId, source, functionName, method
   );
 }
 
+function describeWorkspaceSource(source) {
+  switch (source) {
+    case 'flag':
+      return '--workspace-id';
+    case 'env':
+      return 'SOCIALSEAL_WORKSPACE_ID';
+    case 'config':
+      return 'the saved default workspace';
+    case 'body':
+      return 'the request body';
+    default:
+      return 'implicit selection';
+  }
+}
+
+function emitWorkspaceSelectionNotice(opts, { workspaceId, source, label }) {
+  if (!workspaceId || !source || source === 'flag' || source === 'body') return;
+  process.stderr.write(
+    `[socialseal] Using workspace ${workspaceId} from ${describeWorkspaceSource(source)} for ${label}. Pass --workspace-id to override.\n`,
+  );
+}
+
+function requireWorkspaceSelection(workspaceId, { label, hint }) {
+  if (workspaceId) return workspaceId;
+  throw new CliError(`${label} requires a workspace id.`, {
+    code: 'WORKSPACE_REQUIRED',
+    exitCode: EXIT_CODES.USAGE,
+    hint,
+  });
+}
+
+function emitTrackingCreateScopeWarning(action, workspaceId) {
+  if (action !== 'create' || workspaceId) return;
+  process.stderr.write(
+    '[socialseal] tracking create is running without a workspace id. The backend may create a personal/null-scope item that is not attached to a workspace or group.\n',
+  );
+}
+
+function looksLikeShortNumericVideoId(value) {
+  return typeof value === 'string' && /^\d{1,7}$/.test(value.trim());
+}
+
+function emitAmbiguousVideoIdWarnings(items) {
+  const references = Array.isArray(items) ? items : [];
+  for (const item of references) {
+    if (!item || typeof item !== 'object' || Array.isArray(item)) continue;
+    if (looksLikeShortNumericVideoId(item.videoId)) {
+      process.stderr.write(
+        `[socialseal] videoId "${item.videoId}" looks like a short internal row id. If you meant a ranked result row, use --search-result-id. If you meant a tracking item id, resolve it first and retry with --video-uid or --platform-video-id.\n`,
+      );
+      return;
+    }
+  }
+}
+
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -1629,7 +1706,7 @@ function buildStatusHint(status, context = {}) {
     case 404:
       if (context.functionName) {
         if (isLocallyDisabledByDefaultFunction(context.functionName)) {
-          return `Unknown function "${context.functionName}". This tool is listed in the static registry, but it is disabled by default in some local Supabase environments. Check the deployment or enable it in supabase/config.toml.`;
+          return `Unknown function "${context.functionName}". The CLI ships a static registry, but availability depends on the backend you are calling. Verify the tool is deployed on the current API base; for local direct Supabase calls, enable it in supabase/config.toml.`;
         }
         return `Unknown function "${context.functionName}". Double-check the name and API base.`;
       }
@@ -2197,14 +2274,64 @@ async function handleToolsCall(opts) {
     resolvedWorkspaceId,
   });
   const method = normalizeMethod(translated.method);
-  const effectiveWorkspaceId = translated.workspaceId ?? resolvedWorkspaceId ?? null;
+  const payloadWorkspaceId = isJsonObject(translated.normalizedPayload)
+    ? resolvePayloadWorkspaceId(translated.normalizedPayload, resolvedWorkspaceId)
+    : (isJsonObject(translated.body)
+        ? resolvePayloadWorkspaceId(translated.body, resolvedWorkspaceId)
+        : (resolvedWorkspaceId ?? null));
+  const effectiveWorkspaceId = translated.workspaceId ?? payloadWorkspaceId ?? null;
+  const effectiveWorkspaceSource =
+    translated.workspaceId && translated.workspaceId !== resolvedWorkspaceId
+      ? 'body'
+      : (payloadWorkspaceId && payloadWorkspaceId !== resolvedWorkspaceId ? 'body' : workspaceSource);
   const path = useGateway
     ? `/cli/tools/${opts.function}${translated.pathSuffix || ''}`
     : `/functions/v1/${opts.function}${translated.pathSuffix || ''}`;
 
+  if (opts.function === 'group-management') {
+    requireWorkspaceSelection(effectiveWorkspaceId, {
+      label: 'group-management',
+      hint: 'Pass --workspace-id, set SOCIALSEAL_WORKSPACE_ID, or configure a default workspace. Omitting workspace lets the backend fall back to the personal workspace.',
+    });
+    emitWorkspaceSelectionNotice(opts, {
+      workspaceId: effectiveWorkspaceId,
+      source: effectiveWorkspaceSource,
+      label: 'group-management',
+    });
+  }
+
+  if (opts.function === 'export_tracking_data') {
+    requireWorkspaceSelection(effectiveWorkspaceId, {
+      label: 'export_tracking_data',
+      hint: 'Pass --workspace-id, set SOCIALSEAL_WORKSPACE_ID, or configure a default workspace before exporting tracking data.',
+    });
+    emitWorkspaceSelectionNotice(opts, {
+      workspaceId: effectiveWorkspaceId,
+      source: effectiveWorkspaceSource,
+      label: 'export_tracking_data',
+    });
+  }
+
+  if (opts.function === 'tracked-video-extract') {
+    requireWorkspaceSelection(effectiveWorkspaceId, {
+      label: 'tracked-video-extract',
+      hint: 'Pass --workspace-id, set SOCIALSEAL_WORKSPACE_ID, or configure a default workspace.',
+    });
+    emitWorkspaceSelectionNotice(opts, {
+      workspaceId: effectiveWorkspaceId,
+      source: effectiveWorkspaceSource,
+      label: 'tracked-video-extract',
+    });
+  }
+
+  emitTrackingCreateScopeWarning(
+    isJsonObject(translated.normalizedPayload) ? trimString(translated.normalizedPayload.action).toLowerCase() : '',
+    effectiveWorkspaceId,
+  );
+
   emitWorkspaceContext(opts, {
     workspaceId: effectiveWorkspaceId,
-    source: effectiveWorkspaceId === resolvedWorkspaceId ? workspaceSource : 'body',
+    source: effectiveWorkspaceSource,
     functionName: opts.function,
     method,
   });
@@ -2319,7 +2446,7 @@ async function handleDataExportTracking(opts) {
   const supabaseUrl = resolveLegacyUrl(resolveSupabaseUrl(opts, config), 'SOCIALSEAL_SUPABASE_URL');
   const { resolvedApiBase, legacyUrl, useGateway } = resolveApiTarget({ apiBase, legacyUrl: supabaseUrl });
   const timeoutMs = resolveTimeoutMs(opts, config);
-  const { workspaceId: resolvedWorkspaceId } = resolveWorkspaceSelection(opts, config);
+  const { workspaceId: resolvedWorkspaceId, source: workspaceSource } = resolveWorkspaceSelection(opts, config);
 
   if (!opts.groupId && !opts.itemId) {
     throw new CliError('Provide --group-id or --item-id.', {
@@ -2341,6 +2468,16 @@ async function handleDataExportTracking(opts) {
     time_period: opts.timePeriod,
   };
 
+  requireWorkspaceSelection(resolvedWorkspaceId, {
+    label: 'Tracking export',
+    hint: 'Pass --workspace-id, set SOCIALSEAL_WORKSPACE_ID, or configure a default workspace before exporting tracking data.',
+  });
+  emitWorkspaceSelectionNotice(opts, {
+    workspaceId: resolvedWorkspaceId,
+    source: workspaceSource,
+    label: 'tracking export',
+  });
+
   const res = await callApi({
     apiBase: useGateway ? resolvedApiBase : legacyUrl,
     apiKey,
@@ -2445,10 +2582,19 @@ async function handleVideoExtract(opts) {
 
   const body = buildVideoExtractBody(opts, resolvedWorkspaceId);
   const path = useGateway ? '/cli/tools/tracked-video-extract' : '/functions/v1/tracked-video-extract';
+  const effectiveWorkspaceId = body.workspaceId || resolvedWorkspaceId;
+  const effectiveWorkspaceSource = body.workspaceId && body.workspaceId !== resolvedWorkspaceId ? 'body' : workspaceSource;
+
+  emitWorkspaceSelectionNotice(opts, {
+    workspaceId: effectiveWorkspaceId,
+    source: effectiveWorkspaceSource,
+    label: 'tracked-video extract',
+  });
+  emitAmbiguousVideoIdWarnings(body.items);
 
   emitWorkspaceContext(opts, {
-    workspaceId: body.workspaceId || resolvedWorkspaceId,
-    source: body.workspaceId === resolvedWorkspaceId ? workspaceSource : 'body',
+    workspaceId: effectiveWorkspaceId,
+    source: effectiveWorkspaceSource,
     functionName: 'tracked-video-extract',
     method: 'POST',
   });
@@ -2460,7 +2606,7 @@ async function handleVideoExtract(opts) {
       path,
       method: 'POST',
       body,
-      workspaceId: body.workspaceId || resolvedWorkspaceId,
+      workspaceId: effectiveWorkspaceId,
       timeoutMs: remainingTimeoutMs,
     });
 
@@ -2523,11 +2669,20 @@ async function handleVideoQueueAnalysis(opts) {
   const { workspaceId: resolvedWorkspaceId, source: workspaceSource } = resolveWorkspaceSelection(opts, config);
 
   const body = buildVideoQueueBody(opts, resolvedWorkspaceId);
+  const effectiveWorkspaceId = body.workspaceId || resolvedWorkspaceId;
+  const effectiveWorkspaceSource = body.workspaceId && body.workspaceId !== resolvedWorkspaceId ? 'body' : workspaceSource;
+
+  emitWorkspaceSelectionNotice(opts, {
+    workspaceId: effectiveWorkspaceId,
+    source: effectiveWorkspaceSource,
+    label: 'tracked-video queue-analysis',
+  });
+  emitAmbiguousVideoIdWarnings(body.items);
   const path = useGateway ? '/cli/tools/tracked-video-extract' : '/functions/v1/tracked-video-extract';
 
   emitWorkspaceContext(opts, {
-    workspaceId: body.workspaceId || resolvedWorkspaceId,
-    source: body.workspaceId === resolvedWorkspaceId ? workspaceSource : 'body',
+    workspaceId: effectiveWorkspaceId,
+    source: effectiveWorkspaceSource,
     functionName: 'tracked-video-extract',
     method: 'POST',
   });
@@ -2539,7 +2694,7 @@ async function handleVideoQueueAnalysis(opts) {
       path,
       method: 'POST',
       body,
-      workspaceId: body.workspaceId || resolvedWorkspaceId,
+      workspaceId: effectiveWorkspaceId,
       timeoutMs: remainingTimeoutMs,
     });
 
@@ -2624,6 +2779,8 @@ async function handleWorkspaceList(opts) {
     process.stdout.write(`${formatWorkspaceLine(workspace, { isEffective, source: selection.source, isSuggested })}\n`);
   }
 
+  process.stdout.write('\n[socialseal] Note: workspace ids are not brand ids. When a payload includes both workspace_id and brand_id, pass the workspace id to --workspace-id.\n');
+
   if (!selection.workspaceId && directory.defaultWorkspaceId) {
     process.stdout.write('\n[socialseal] No local default is configured. Set one with: socialseal workspace use <id>\n');
   }
@@ -2668,6 +2825,7 @@ async function handleWorkspaceCurrent(opts) {
 
   if (effectiveWorkspace) {
     process.stdout.write(`[socialseal] Effective workspace: ${effectiveWorkspace.name} (${effectiveWorkspace.id}) via ${selection.source}\n`);
+    process.stdout.write('[socialseal] Note: workspace ids are not brand ids. Use the workspace id, not brand_id, with --workspace-id.\n');
     return;
   }
 
@@ -2736,7 +2894,7 @@ const program = new Command();
 program
   .name('socialseal')
   .description('SocialSeal CLI (non-interactive)')
-  .version('0.1.1');
+  .version(CLI_VERSION);
 
 if (typeof program.showHelpAfterError === 'function') {
   program.showHelpAfterError(true);
@@ -2874,10 +3032,10 @@ const video = program.command('video').description('Tracked video extraction wor
 video
   .command('queue-analysis')
   .description('Queue video analysis for tracked videos or tracked search results')
-  .option('--video-id <id>', 'Tracked video id (tries video_uid first, then platform video id)')
-  .option('--search-result-id <id>', 'Tracked search result id')
-  .option('--video-uid <id>', 'Tracked video_uid')
-  .option('--platform-video-id <id>', 'Tracked platform video id')
+  .option('--video-id <id>', 'Tracked video identifier (video_uid first, then platform video id; not a tracking item id)')
+  .option('--search-result-id <id>', 'Tracked search result id for a ranked result row')
+  .option('--video-uid <id>', 'Canonical tracked video_uid')
+  .option('--platform-video-id <id>', 'Platform-native video id')
   .option('--body <jsonOrFile>', 'JSON body or @payload.json for batch queueing')
   .option('--wait', 'Poll until queued/completing analyses settle')
   .option('--poll-interval <ms>', 'Polling interval in milliseconds when --wait is enabled')
@@ -2893,10 +3051,10 @@ video
 video
   .command('extract')
   .description('Resolve tracked videos/results into structured analysis plus reference assets')
-  .option('--video-id <id>', 'Tracked video id (tries video_uid first, then platform video id)')
-  .option('--search-result-id <id>', 'Tracked search result id')
-  .option('--video-uid <id>', 'Tracked video_uid')
-  .option('--platform-video-id <id>', 'Tracked platform video id')
+  .option('--video-id <id>', 'Tracked video identifier (video_uid first, then platform video id; not a tracking item id)')
+  .option('--search-result-id <id>', 'Tracked search result id for a ranked result row')
+  .option('--video-uid <id>', 'Canonical tracked video_uid')
+  .option('--platform-video-id <id>', 'Platform-native video id')
   .option('--body <jsonOrFile>', 'JSON body or @payload.json for batch extraction')
   .option('--ensure-analysis', 'Queue analysis when it is missing')
   .option('--wait', 'Poll until queued/completing analyses settle')