@superglue/cli 1.1.11 → 1.1.12

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "superglue",
   "description": "Build, test, and manage superglue tools via the sg CLI. Use when working with superglue tools, systems, APIs, SDKs, or the sg command.",
-  "version": "0.1.0",
+  "version": "1.1.12",
   "author": {
     "name": "superglue",
     "email": "hello@superglue.cloud"
@@ -9,5 +9,12 @@
   "homepage": "https://superglue.cloud",
   "repository": "https://github.com/superglue-ai/cli",
   "license": "MIT",
-  "keywords": ["systems", "integration", "cli", "tools", "automation", "api"]
+  "keywords": [
+    "systems",
+    "integration",
+    "cli",
+    "tools",
+    "automation",
+    "api"
+  ]
 }

package/dist/cli.js

@@ -1742,21 +1742,67 @@ var require_json_schema = __commonJS({
   }
 });
 
+// ../shared/dist/rbac-utils.js
+var require_rbac_utils = __commonJS({
+  "../shared/dist/rbac-utils.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.RESERVED_ROLE_NAMES = exports2.RESERVED_ROLE_IDS = exports2.PREDEFINED_ROLE_IDS = void 0;
+    exports2.isCustomRulePermission = isCustomRulePermission;
+    exports2.getSystemRules = getSystemRules;
+    exports2.isPredefinedRole = isPredefinedRole;
+    exports2.isReservedRoleId = isReservedRoleId;
+    exports2.isReservedRoleName = isReservedRoleName;
+    exports2.hasRole = hasRole;
+    exports2.getRoleIds = getRoleIds;
+    exports2.getBaseRole = getBaseRole;
+    exports2.getBaseRoleId = getBaseRoleId;
+    function isCustomRulePermission(p) {
+      return typeof p === "object" && p !== null && "rules" in p;
+    }
+    function getSystemRules(systems2, systemId) {
+      if (systems2 === "ALL" || !systems2[systemId])
+        return [];
+      const p = systems2[systemId];
+      return isCustomRulePermission(p) ? p.rules : [];
+    }
+    exports2.PREDEFINED_ROLE_IDS = ["admin", "member", "enduser"];
+    exports2.RESERVED_ROLE_IDS = ["admin", "member", "enduser", "__admin__"];
+    exports2.RESERVED_ROLE_NAMES = ["member", "end user", "enduser", "admin"];
+    function isPredefinedRole(roleId) {
+      return exports2.PREDEFINED_ROLE_IDS.includes(roleId);
+    }
+    function isReservedRoleId(roleId) {
+      return exports2.RESERVED_ROLE_IDS.includes(roleId);
+    }
+    function isReservedRoleName(name) {
+      return exports2.RESERVED_ROLE_NAMES.includes(name.toLowerCase().trim());
+    }
+    function hasRole(roles, roleId) {
+      return roles.some((r) => r.id === roleId);
+    }
+    function getRoleIds(roles) {
+      return roles.map((r) => r.id);
+    }
+    function getBaseRole(roles) {
+      const baseRoles = roles.filter((r) => r.isBaseRole);
+      return baseRoles.length === 1 ? baseRoles[0] : null;
+    }
+    function getBaseRoleId(roles) {
+      const base = getBaseRole(roles);
+      return base ? base.id : null;
+    }
+  }
+});
+
 // ../shared/dist/types.js
 var require_types = __commonJS({
   "../shared/dist/types.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.ConfirmationAction = exports2.FileStatus = exports2.DiscoveryRunStatus = exports2.RemoveScope = exports2.FilterAction = exports2.FilterTarget = exports2.RequestSource = exports2.RunStatus = exports2.CredentialMode = exports2.UpsertMode = exports2.LogLevel = exports2.PaginationType = exports2.DecompressionMethod = exports2.AuthType = exports2.FileType = exports2.CacheMode = exports2.HttpMethod = exports2.SupportedFileType = exports2.UserRole = void 0;
+    exports2.SystemAccessLevel = exports2.ConfirmationAction = exports2.FileStatus = exports2.DiscoveryRunStatus = exports2.RemoveScope = exports2.FilterAction = exports2.FilterTarget = exports2.RequestSource = exports2.RunStatus = exports2.CredentialMode = exports2.UpsertMode = exports2.LogLevel = exports2.PaginationType = exports2.DecompressionMethod = exports2.AuthType = exports2.FileType = exports2.CacheMode = exports2.HttpMethod = exports2.SupportedFileType = void 0;
     exports2.isRequestConfig = isRequestConfig;
     exports2.isTransformConfig = isTransformConfig;
-    exports2.getToolSystemIds = getToolSystemIds;
-    exports2.isProductionSystem = isProductionSystem;
-    var UserRole;
-    (function(UserRole2) {
-      UserRole2["ADMIN"] = "admin";
-      UserRole2["MEMBER"] = "member";
-    })(UserRole || (exports2.UserRole = UserRole = {}));
     var SupportedFileType;
     (function(SupportedFileType2) {
       SupportedFileType2["JSON"] = "JSON";
@@ -1884,20 +1930,6 @@ var require_types = __commonJS({
     function isTransformConfig(config) {
       return config?.type === "transform";
     }
-    function getToolSystemIds(tool) {
-      if (!tool.steps)
-        return [];
-      const ids = /* @__PURE__ */ new Set();
-      for (const step of tool.steps) {
-        if (step.config && isRequestConfig(step.config) && step.config.systemId) {
-          ids.add(step.config.systemId);
-        }
-      }
-      return Array.from(ids);
-    }
-    function isProductionSystem(system) {
-      return system.environment !== "dev";
-    }
     var DiscoveryRunStatus;
     (function(DiscoveryRunStatus2) {
       DiscoveryRunStatus2["PENDING"] = "PENDING";
@@ -1922,6 +1954,12 @@ var require_types = __commonJS({
       ConfirmationAction2["OAUTH_SUCCESS"] = "oauth_success";
       ConfirmationAction2["OAUTH_FAILURE"] = "oauth_failure";
     })(ConfirmationAction || (exports2.ConfirmationAction = ConfirmationAction = {}));
+    var SystemAccessLevel;
+    (function(SystemAccessLevel2) {
+      SystemAccessLevel2["NONE"] = "none";
+      SystemAccessLevel2["READ_ONLY"] = "read-only";
+      SystemAccessLevel2["READ_WRITE"] = "read-write";
+    })(SystemAccessLevel || (exports2.SystemAccessLevel = SystemAccessLevel = {}));
   }
 });
 
@@ -20098,7 +20136,6 @@ var require_utils = __commonJS({
     exports2.generateUniqueId = generateUniqueId;
     exports2.waitForSystemProcessing = waitForSystemProcessing;
     exports2.inferJsonSchema = inferJsonSchema;
-    exports2.mapUserRole = mapUserRole;
     exports2.resolveOAuthCertAndKey = resolveOAuthCertAndKey;
     exports2.isArrowFunction = isArrowFunction;
     exports2.assertValidArrowFunction = assertValidArrowFunction;
@@ -20115,6 +20152,8 @@ var require_utils = __commonJS({
     exports2.normalizeToolDiffs = normalizeToolDiffs;
     exports2.composeUrl = composeUrl;
     exports2.truncateRunResult = truncateRunResult;
+    exports2.getToolSystemIds = getToolSystemIds;
+    exports2.isProductionSystem = isProductionSystem;
     var json_schema_js_1 = require_json_schema();
     var types_js_1 = require_types();
     var truncate_json_1 = __importDefault((init_main5(), __toCommonJS(main_exports)));
@@ -20364,16 +20403,6 @@ var require_utils = __commonJS({
       }
       return buildArraySchemaFromData(data);
     }
-    function mapUserRole(role) {
-      switch (role) {
-        case "admin":
-          return types_js_1.UserRole.ADMIN;
-        case "member":
-          return types_js_1.UserRole.MEMBER;
-        default:
-          return types_js_1.UserRole.MEMBER;
-      }
-    }
     function resolveOAuthCertAndKey(oauthCert, oauthKey) {
       let parsedCert = null;
       let parsedKey = null;
@@ -20767,6 +20796,20 @@ var require_utils = __commonJS({
         };
       }
     }
+    function getToolSystemIds(tool) {
+      if (!tool.steps)
+        return [];
+      const ids = /* @__PURE__ */ new Set();
+      for (const step of tool.steps) {
+        if (step.config && (0, types_js_1.isRequestConfig)(step.config) && step.config.systemId) {
+          ids.add(step.config.systemId);
+        }
+      }
+      return Array.from(ids);
+    }
+    function isProductionSystem(system) {
+      return system.environment !== "dev";
+    }
   }
 });
 
@@ -21611,15 +21654,19 @@ var require_superglue_client = __commonJS({
           if (err.message?.includes("404") || err.message?.includes("not found")) {
             return null;
           }
+          if (err.message?.includes("403") || err.message?.includes("not allowed")) {
+            return null;
+          }
           throw err;
         }
       }
       async archiveWorkflow(id, archived = true) {
         return this.upsertWorkflow(id, { archived });
       }
-      async listWorkflows(limit = 10, offset = 0) {
+      async listWorkflows(limit = 10, offset = 0, includeArchived = false) {
         const page = Math.floor(offset / limit) + 1;
-        const response = await this.restRequest("GET", `/v1/tools?limit=${limit}&page=${page}`);
+        const archiveParam = includeArchived ? "&includeArchived=true" : "";
+        const response = await this.restRequest("GET", `/v1/tools?limit=${limit}&page=${page}${archiveParam}`);
         return { items: response.data, total: response.total };
       }
       async upsertWorkflow(id, input) {
@@ -21657,11 +21704,6 @@ var require_superglue_client = __commonJS({
         const response = await this.restRequest("GET", `/v1/systems?${params.toString()}`);
         return { items: response.data, total: response.total };
       }
-      async findRelevantTools(searchTerms) {
-        const params = searchTerms ? `?q=${encodeURIComponent(searchTerms)}` : "";
-        const response = await this.restRequest("GET", `/v1/tools/search${params}`);
-        return response.data;
-      }
       async getSystem(id, options) {
         const queryParams = options?.environment ? `?env=${options.environment}` : "";
         const response = await this.restRequest("GET", `/v1/systems/${encodeURIComponent(id)}${queryParams}`);
@@ -21817,6 +21859,7 @@ var require_dist2 = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.SSELogSubscriptionManager = exports2.SuperglueClient = void 0;
     __exportStar(require_json_schema(), exports2);
+    __exportStar(require_rbac_utils(), exports2);
     __exportStar(require_seed_config(), exports2);
     __exportStar(require_templates(), exports2);
     __exportStar(require_type_utils(), exports2);
@@ -21836,7 +21879,7 @@ var require_dist2 = __commonJS({
 });
 
 // src/cli.ts
-var import_commander5 = require("commander");
+var import_commander6 = require("commander");
 
 // src/config.ts
 var fs = __toESM(require("fs"));
@@ -21922,6 +21965,7 @@ function createClient(config) {
 var fs2 = __toESM(require("fs"));
 var path2 = __toESM(require("path"));
 var os2 = __toESM(require("os"));
+var import_commander = require("commander");
 var import_shared2 = __toESM(require_dist2());
 
 // src/output.ts
@@ -21934,7 +21978,7 @@ var import_node_util = require("util");
 // package.json
 var package_default = {
   name: "@superglue/cli",
-  version: "1.1.11",
+  version: "1.1.12",
   bin: {
     sg: "./dist/cli.js"
   },
@@ -22459,8 +22503,13 @@ async function choose(message, options, defaultIndex = 0) {
 
 // src/commands/init.ts
 function registerInitCommand(program2) {
-  program2.command("init").description("Set up superglue CLI configuration").option("--api-key <key>", "API key (skips interactive prompt)").option("--endpoint <url>", "API endpoint", "https://api.superglue.cloud").option("--web-endpoint <url>", "Web endpoint for OAuth callbacks").option("--output-mode <mode>", "Output mode: stdout or stdout+file", "stdout").option("--output-dir <dir>", "Output directory for stdout+file mode", ".superglue/output").option("--global", "Save config globally (~/.superglue/) instead of locally").action(async (opts) => {
-    const isNonInteractive = opts.apiKey || !process.stdin.isTTY;
+  program2.command("init").description("Set up superglue CLI configuration").option("--web-endpoint <url>", "Web endpoint for OAuth callbacks").addOption(
+    new import_commander.Option("--output-mode <mode>", "Output mode: stdout or stdout+file").choices(["stdout", "stdout+file"]).default("stdout")
+  ).option("--output-dir <dir>", "Output directory for stdout+file mode", ".superglue/output").option("--global", "Save config globally (~/.superglue/) instead of locally").action(async function(opts) {
+    const parentOpts = this.parent?.opts() ?? {};
+    const resolvedApiKey = parentOpts.apiKey || process.env.SUPERGLUE_API_KEY;
+    const resolvedEndpoint = parentOpts.endpoint || process.env.SUPERGLUE_API_ENDPOINT;
+    const isNonInteractive = resolvedApiKey || !process.stdin.isTTY;
     let apiKey;
     let endpoint;
     let webEndpoint;
@@ -22468,12 +22517,12 @@ function registerInitCommand(program2) {
     let outputDir;
     let preferLocal;
     if (isNonInteractive) {
-      apiKey = opts.apiKey || process.env.SUPERGLUE_API_KEY;
+      apiKey = resolvedApiKey;
       if (!apiKey) {
         error("API key is required (--api-key or SUPERGLUE_API_KEY)");
         process.exit(1);
       }
-      endpoint = opts.endpoint;
+      endpoint = resolvedEndpoint || "https://api.superglue.cloud";
       const defaultWeb = endpoint.replace(/:3002\b/, ":3001").replace(/api\.superglue/, "app.superglue");
       webEndpoint = opts.webEndpoint || defaultWeb;
       outputMode = opts.outputMode === "stdout+file" ? "stdout+file" : "stdout";
@@ -22504,7 +22553,10 @@ function registerInitCommand(program2) {
         error("API key is required");
         process.exit(1);
       }
-      endpoint = await prompt("  API Endpoint", opts.endpoint);
+      endpoint = await prompt(
+        "  API Endpoint",
+        resolvedEndpoint || "https://api.superglue.cloud"
+      );
       const defaultWeb = endpoint.replace(/:3002\b/, ":3001").replace(/api\.superglue/, "app.superglue");
       webEndpoint = await prompt("  Web Endpoint (for OAuth callbacks)", defaultWeb);
       const spin = spinner("Verifying connection...");
@@ -23030,10 +23082,9 @@ function registerFindCommand(parent, getContext2) {
   parent.command("list").description("List all tools").action(async () => {
     const { client } = getContext2();
     try {
-      const { items } = await client.listWorkflows(100);
-      const tools = items.filter((t) => !t.archived);
+      const { items } = await client.listWorkflows(1e3);
       table(
-        tools.map((t) => ({
+        items.map((t) => ({
           id: t.id,
           instruction: (t.instruction || "").slice(0, 60),
           steps: t.steps?.length || 0
@@ -23058,25 +23109,29 @@ function registerFindCommand(parent, getContext2) {
         return;
       }
       const searchQuery = (query || "").trim() || "*";
-      if (searchQuery === "*") {
-        const { items } = await client.listWorkflows(100);
-        const tools = items.filter((t) => !t.archived).map((t) => ({
+      const { items } = await client.listWorkflows(1e3);
+      const filtered = searchQuery === "*" ? items : (() => {
+        const keywords = searchQuery.toLowerCase().split(/\s+/).filter((k) => k.length > 0);
+        const scored = items.map((t) => {
+          const text = [t.id, t.name, t.instruction].filter(Boolean).join(" ").toLowerCase();
+          return {
+            tool: t,
+            score: keywords.filter((kw) => text.includes(kw)).length
+          };
+        });
+        const matches = scored.filter((s) => s.score > 0);
+        if (matches.length === 0) return items;
+        matches.sort((a, b) => b.score - a.score);
+        return matches.map((m) => m.tool);
+      })();
+      output({
+        success: true,
+        tools: filtered.map((t) => ({
           id: t.id,
           instruction: (t.instruction || "").slice(0, 80),
           steps: t.steps?.length || 0
-        }));
-        output({ success: true, tools });
-      } else {
-        const tools = await client.findRelevantTools(searchQuery);
-        output({
-          success: true,
-          tools: tools.map((t) => ({
-            id: t.id,
-            instruction: (t.instruction || "").slice(0, 80),
-            steps: t.steps?.length || 0
-          }))
-        });
-      }
+        }))
+      });
     } catch (err) {
       error(err.message);
       process.exit(1);
@@ -23096,7 +23151,7 @@ function registerToolCommands(program2, getContext2) {
 
 // src/commands/system/create.ts
 var fs8 = __toESM(require("fs"));
-var import_commander = require("commander");
+var import_commander2 = require("commander");
 var import_shared6 = __toESM(require_dist2());
 async function collectSensitiveCredentials(fields) {
   const creds = {};
@@ -23119,7 +23174,7 @@ function registerCreateCommand(parent, getContext2) {
     "--template <id>",
     "Template ID \u2014 auto-fills URL, OAuth config, and credentials. Auto-detected from URL if omitted."
   ).option("--instructions <text>", "Specific instructions").option("--credentials <json>", "Non-sensitive credentials JSON").option("--sensitive-credentials <fields>", "Comma-separated sensitive credential field names").option("--docs-url <url>", "Documentation URL to scrape").option("--openapi-url <url>", "OpenAPI spec URL").addOption(
-    new import_commander.Option("--env <environment>", "Environment: dev or prod (default: prod)").choices([
+    new import_commander2.Option("--env <environment>", "Environment: dev or prod (default: prod)").choices([
       "dev",
       "prod"
     ])
@@ -23258,10 +23313,10 @@ ${oauthTemplates}
 }
 
 // src/commands/system/edit.ts
-var import_commander2 = require("commander");
+var import_commander3 = require("commander");
 function registerEditCommand2(parent, getContext2) {
   parent.command("edit").description("Edit an existing system").requiredOption("--id <id>", "System ID").option("--name <name>", "New name").option("--url <url>", "New URL").option("--instructions <text>", "New specific instructions").option("--credentials <json>", "Non-sensitive credentials JSON to merge").option("--sensitive-credentials <fields>", "Comma-separated sensitive credential field names").option("--scrape-url <url>", "Documentation URL to scrape").option("--scrape-keywords <keywords>", "Space-separated scrape keywords").addOption(
-    new import_commander2.Option("--env <environment>", "Environment: dev or prod").choices(["dev", "prod"])
+    new import_commander3.Option("--env <environment>", "Environment: dev or prod").choices(["dev", "prod"])
   ).action(async (opts) => {
     const { client } = getContext2();
     const patchPayload = { id: opts.id };
@@ -23332,7 +23387,7 @@ function registerEditCommand2(parent, getContext2) {
 }
 
 // src/commands/system/find.ts
-var import_commander3 = require("commander");
+var import_commander4 = require("commander");
 var import_shared7 = __toESM(require_dist2());
 function filterSystemFields(system) {
   const credentialKeys = Object.keys(system.credentials || {});
@@ -23366,7 +23421,7 @@ function registerFindCommand2(parent, getContext2) {
     }
   });
   parent.command("find [query]").description("Find systems by query or exact ID").option("--id <exactId>", "Exact system ID lookup").addOption(
-    new import_commander3.Option("--env <environment>", "Environment: dev or prod").choices(["dev", "prod"])
+    new import_commander4.Option("--env <environment>", "Environment: dev or prod").choices(["dev", "prod"])
   ).action(async (query, opts) => {
     const { client } = getContext2();
     try {
@@ -23412,7 +23467,7 @@ function registerFindCommand2(parent, getContext2) {
 }
 
 // src/commands/system/call.ts
-var import_commander4 = require("commander");
+var import_commander5 = require("commander");
 var import_shared8 = __toESM(require_dist2());
 function registerCallCommand(parent, getContext2) {
   parent.command("call").description("Call a system (API, database, file server)").requiredOption("--url <url>", "Full URL including protocol").option("--system-id <id>", "System ID for credential injection").option("--method <method>", "HTTP method", "GET").option("--headers <json>", "HTTP headers JSON").option("--body <string>", "Request body").option(
@@ -23424,7 +23479,7 @@ function registerCallCommand(parent, getContext2) {
     },
     []
   ).addOption(
-    new import_commander4.Option("--env <environment>", "Environment: dev or prod").choices(["dev", "prod"])
+    new import_commander5.Option("--env <environment>", "Environment: dev or prod").choices(["dev", "prod"])
   ).action(async (opts) => {
     const { client } = getContext2();
     const method = opts.method || "GET";
@@ -23861,9 +23916,7 @@ function registerSkillCommand(program2) {
       if (topic) {
         const refsDir = path6.join(SKILLS_DIR, "references");
         const available = fs9.existsSync(refsDir) ? fs9.readdirSync(refsDir).filter((f) => f.endsWith(".md")).map((f) => f.replace(".md", "")) : [];
-        error(
-          `Topic not found: ${topic}. Available: ${available.join(", ") || "none"}`
-        );
+        error(`Topic not found: ${topic}. Available: ${available.join(", ") || "none"}`);
       } else {
         error(`Skill file not found: ${file}`);
       }
@@ -23874,7 +23927,7 @@ function registerSkillCommand(program2) {
 }
 
 // src/cli.ts
-var program = new import_commander5.Command();
+var program = new import_commander6.Command();
 program.name("sg").description("superglue CLI \u2014 build, run, and manage integration tools").version(CLI_VERSION).option("--api-key <key>", "superglue API key").option("--endpoint <url>", "superglue API endpoint").option("--json", "force JSON output").addHelpText(
   "after",
   `