@trendify/cli 0.1.5 → 0.1.6

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAaA,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B,CAAC;AAkGF,wBAAgB,GAAG,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,QAAQ,2CAyVzD"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAiBA,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B,CAAC;AAkHF,wBAAgB,GAAG,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,QAAQ,2CA+czD"}

package/dist/app.js

@@ -1,9 +1,9 @@
-import { jsx as _jsx } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Text, useApp, useInput } from 'ink';
 import { useEffect, useMemo, useState } from 'react';
 import { DiscoveryPage } from './modules/discovery/page/discovery-page.js';
 import { getUserDisplayName } from './modules/auth/auth-user.js';
-import { getAuthBootstrapResult } from './modules/auth/auth-service.js';
+import { getAuthBootstrapResult, } from './modules/auth/auth-service.js';
 import { LoginPage } from './modules/auth/page/login-page.js';
 import { ProfilePage } from './modules/profile/page/profile-page.js';
 import { ActionMenuPage } from './shared/components/action-menu-page.js';
@@ -80,18 +80,30 @@ const LOGOUT_OPTIONS = [
 function formatScopeLabel(scope) {
     return scope === 'amplo' ? 'mais ampla' : 'mais restrita';
 }
+function formatWorkspaceRole(role) {
+    if (role === 'owner') {
+        return 'Proprietario';
+    }
+    if (role === 'admin') {
+        return 'Administrador';
+    }
+    return 'Membro';
+}
 function getAuthenticatedUserLabel(user) {
     if (!user) {
         return 'usuario autenticado';
     }
     return getUserDisplayName(user) ?? user.email ?? 'usuario autenticado';
 }
+function getActiveWorkspaceLabel(workspace) {
+    return workspace?.name ?? 'espaco de trabalho';
+}
 function getWelcomeTitle(user) {
     const displayName = user ? getUserDisplayName(user) : null;
     if (displayName) {
-        return `Bem-vindo de volta, ${displayName}.`;
+        return `Bem-vindo de volta, ${displayName} 👋`;
     }
-    return 'Bem-vindo de volta.';
+    return 'Bem-vindo de volta. 👋';
 }
 export function App({ appVersion, initialInput }) {
     const { exit } = useApp();
@@ -104,10 +116,32 @@ export function App({ appVersion, initialInput }) {
     const [menuKey, setMenuKey] = useState(0);
     const [authStatus, setAuthStatus] = useState(authBootstrap.ok ? 'booting' : 'config-error');
     const [authUser, setAuthUser] = useState(null);
+    const [availableWorkspaces, setAvailableWorkspaces] = useState([]);
+    const [activeWorkspace, setActiveWorkspace] = useState(null);
     const [email, setEmail] = useState('');
     const [password, setPassword] = useState('');
     const [authBusy, setAuthBusy] = useState(false);
     const [logoutSelectionIndex, setLogoutSelectionIndex] = useState(0);
+    const [workspaceSelectionIndex, setWorkspaceSelectionIndex] = useState(0);
+    function resetAuthenticatedContext() {
+        setAuthUser(null);
+        setAvailableWorkspaces([]);
+        setActiveWorkspace(null);
+        setWorkspaceSelectionIndex(0);
+    }
+    function applyAuthenticatedSnapshot(snapshot) {
+        setAuthStatus('authenticated');
+        setAuthUser(snapshot.user);
+        setAvailableWorkspaces(snapshot.workspaces);
+        setActiveWorkspace(snapshot.activeWorkspace);
+        setWorkspaceSelectionIndex(0);
+        if (snapshot.requiresWorkspaceSelection) {
+            setScreen('select-workspace');
+            return;
+        }
+        setScreen('menu');
+        setMenuKey((current) => current + 1);
+    }
     useInput((input, key) => {
         if (key.ctrl && input === 'c') {
             exit();
@@ -142,6 +176,29 @@ export function App({ appVersion, initialInput }) {
             setNotificationTone('info');
         }
     });
+    useInput((_input, key) => {
+        if (screen !== 'select-workspace' || authBusy) {
+            return;
+        }
+        if (!availableWorkspaces.length) {
+            return;
+        }
+        if (key.escape) {
+            void handleLogout();
+            return;
+        }
+        if (key.upArrow) {
+            setWorkspaceSelectionIndex((current) => (current === 0 ? availableWorkspaces.length - 1 : current - 1));
+            return;
+        }
+        if (key.downArrow) {
+            setWorkspaceSelectionIndex((current) => (current === availableWorkspaces.length - 1 ? 0 : current + 1));
+            return;
+        }
+        if (key.return) {
+            void handleWorkspaceSelection();
+        }
+    });
     useEffect(() => {
         if (!authService) {
             return;
@@ -158,12 +215,15 @@ export function App({ appVersion, initialInput }) {
                 setNotificationTone('error');
             }
             if (result.data?.user) {
-                setAuthStatus('authenticated');
-                setAuthUser(result.data.user);
+                applyAuthenticatedSnapshot(result.data);
+                if (result.data.requiresWorkspaceSelection) {
+                    setNotification('Escolha o espaco de trabalho que deseja usar nesta sessao.');
+                    setNotificationTone('info');
+                }
             }
             else {
                 setAuthStatus('unauthenticated');
-                setAuthUser(null);
+                resetAuthenticatedContext();
             }
             setAuthBusy(false);
         };
@@ -173,13 +233,11 @@ export function App({ appVersion, initialInput }) {
                 return;
             }
             if (snapshot.user) {
-                setAuthStatus('authenticated');
                 setAuthUser(snapshot.user);
-                setScreen((current) => (current === 'menu' || current === 'discovery' || current === 'profile' ? current : 'menu'));
                 return;
             }
             setAuthStatus('unauthenticated');
-            setAuthUser(null);
+            resetAuthenticatedContext();
             setScreen('menu');
             setMenuKey((current) => current + 1);
         });
@@ -207,15 +265,39 @@ export function App({ appVersion, initialInput }) {
             setNotification(result.error ?? 'Nao foi possivel autenticar este usuario.');
             setNotificationTone('error');
             setAuthStatus('unauthenticated');
+            resetAuthenticatedContext();
             return;
         }
-        setAuthStatus('authenticated');
-        setAuthUser(result.data.user);
+        applyAuthenticatedSnapshot(result.data);
         setPassword('');
-        setNotification(`Sessao iniciada para ${result.data.user.email ?? trimmedEmail}.`);
-        setNotificationTone('success');
+        if (result.data.requiresWorkspaceSelection) {
+            setNotification('Login concluido. Escolha o espaco de trabalho para continuar.');
+            setNotificationTone('info');
+            return;
+        }
+        setNotification(null);
+    }
+    async function handleWorkspaceSelection() {
+        if (!authService || authBusy || !availableWorkspaces.length) {
+            return;
+        }
+        const workspace = availableWorkspaces[workspaceSelectionIndex];
+        if (!workspace) {
+            return;
+        }
+        setAuthBusy(true);
+        const result = await authService.selectWorkspace(workspace.id);
+        setAuthBusy(false);
+        if (result.error || !result.data) {
+            setNotification(result.error ?? 'Nao foi possivel ativar este espaco de trabalho.');
+            setNotificationTone('error');
+            return;
+        }
+        setActiveWorkspace(result.data);
         setScreen('menu');
         setMenuKey((current) => current + 1);
+        setNotification(`Espaco de trabalho ativo: ${result.data.name}.`);
+        setNotificationTone('success');
     }
     async function handleLogout() {
         if (!authService || authBusy) {
@@ -232,6 +314,7 @@ export function App({ appVersion, initialInput }) {
         setScreen('menu');
         setEmail('');
         setPassword('');
+        resetAuthenticatedContext();
         setMenuKey((current) => current + 1);
         setLogoutSelectionIndex(0);
         setNotification('Sessao local removida. Faca login novamente para continuar.');
@@ -241,15 +324,23 @@ export function App({ appVersion, initialInput }) {
         return (_jsx(AppShell, { appVersion: appVersion, title: "Configuracao do Supabase pendente.", subtitle: "Defina as variaveis de ambiente antes de usar a CLI.", notification: authBootstrap.error, notificationTone: "error", children: _jsx(Text, { children: "Crie um arquivo .env com base em .env.example e preencha as chaves do projeto Supabase." }) }));
     }
     if (authStatus === 'booting') {
-        return (_jsx(AppShell, { appVersion: appVersion, title: "Validando sua sessao.", subtitle: "A CLI esta consultando o Supabase para restaurar uma sessao existente.", notification: notification, notificationTone: notificationTone, children: _jsx(Text, { dimColor: true, children: authBusy ? 'Aguarde alguns instantes...' : 'Pronto para autenticar.' }) }));
+        return (_jsx(AppShell, { appVersion: appVersion, title: "Validando sua sessao.", subtitle: "A CLI esta consultando o Supabase para restaurar a sessao e o espaco de trabalho atual.", notification: notification, notificationTone: notificationTone, children: _jsx(Text, { dimColor: true, children: authBusy ? 'Aguarde alguns instantes...' : 'Pronto para autenticar.' }) }));
     }
     if (authStatus === 'unauthenticated') {
-        return (_jsx(AppShell, { appVersion: appVersion, title: "Login obrigatorio.", subtitle: "Somente usuarios ja cadastrados no Supabase podem usar a CLI.", notification: notification, notificationTone: notificationTone, children: _jsx(LoginPage, { busy: authBusy, email: email, password: password, sessionStorageFilePath: sessionStorageFilePath, onEmailChange: setEmail, onPasswordChange: setPassword, onSubmit: () => {
+        return (_jsx(AppShell, { appVersion: appVersion, title: "Login obrigatorio.", subtitle: "Somente usuarios vinculados a um espaco de trabalho no Supabase podem usar a CLI.", notification: notification, notificationTone: notificationTone, children: _jsx(LoginPage, { busy: authBusy, email: email, password: password, sessionStorageFilePath: sessionStorageFilePath, onEmailChange: setEmail, onPasswordChange: setPassword, onSubmit: () => {
                     void handleLogin();
                 } }) }));
     }
+    if (screen === 'select-workspace') {
+        const workspaceOptions = availableWorkspaces.map((workspace) => ({
+            value: workspace.id,
+            label: workspace.name,
+            description: `${workspace.slug} • ${formatWorkspaceRole(workspace.role)}`,
+        }));
+        return (_jsx(AppShell, { appVersion: appVersion, title: "Escolha o espaco de trabalho", subtitle: `Conta autenticada para ${getAuthenticatedUserLabel(authUser)}. Selecione onde deseja operar.`, notification: notification, notificationTone: notificationTone, children: _jsx(ActionMenuPage, { title: "Espaco de trabalho ativo", subtitle: "Esse contexto sera usado nas consultas protegidas e nas regras de seguranca por linha.", options: workspaceOptions, selectedIndex: workspaceSelectionIndex, hintText: "Use as setas para navegar. Enter ativa o espaco. Esc encerra a sessao.", children: _jsxs(Text, { children: ["Conta: ", authUser?.email ?? 'nao informado'] }) }) }));
+    }
     if (screen === 'discovery') {
-        return (_jsx(AppShell, { appVersion: appVersion, title: "Discovery", subtitle: `Sessao ativa para ${getAuthenticatedUserLabel(authUser)}.`, notification: notification, notificationTone: notificationTone, children: _jsx(DiscoveryPage, { onCancel: () => {
+        return (_jsx(AppShell, { appVersion: appVersion, title: "Discovery", subtitle: `Sessao ativa para ${getAuthenticatedUserLabel(authUser)} em ${getActiveWorkspaceLabel(activeWorkspace)}.`, notification: notification, notificationTone: notificationTone, children: _jsx(DiscoveryPage, { onCancel: () => {
                     setScreen('menu');
                     setMenuKey((current) => current + 1);
                 }, onComplete: ({ theme, scope }) => {
@@ -260,7 +351,7 @@ export function App({ appVersion, initialInput }) {
                 } }) }));
     }
     if (screen === 'profile' && authService && authUser) {
-        return (_jsx(AppShell, { appVersion: appVersion, title: "Profile", subtitle: `Sessao ativa para ${getAuthenticatedUserLabel(authUser)}.`, notification: notification, notificationTone: notificationTone, children: _jsx(ProfilePage, { authService: authService, user: authUser, onBack: () => {
+        return (_jsx(AppShell, { appVersion: appVersion, title: "Profile", subtitle: `Sessao ativa para ${getAuthenticatedUserLabel(authUser)} em ${getActiveWorkspaceLabel(activeWorkspace)}.`, notification: notification, notificationTone: notificationTone, children: _jsx(ProfilePage, { authService: authService, user: authUser, onBack: () => {
                     setScreen('menu');
                     setMenuKey((current) => current + 1);
                 }, onNotificationChange: (nextNotification, nextTone = 'success') => {
@@ -269,9 +360,9 @@ export function App({ appVersion, initialInput }) {
                 } }) }));
     }
     if (screen === 'confirm-logout') {
-        return (_jsx(AppShell, { appVersion: appVersion, title: "Confirmar encerramento de sessao", subtitle: `Voce esta autenticado como ${getAuthenticatedUserLabel(authUser)}.`, notification: notification, notificationTone: notificationTone, children: _jsx(ActionMenuPage, { title: "Tem certeza que deseja encerrar a sessao atual?", subtitle: "Se confirmar, a CLI vai remover a sessao salva localmente e pedir login novamente.", options: LOGOUT_OPTIONS, selectedIndex: logoutSelectionIndex, hintText: "Use as setas para navegar. Enter confirma. Esc volta ao menu." }) }));
+        return (_jsx(AppShell, { appVersion: appVersion, title: "Confirmar encerramento de sessao", subtitle: `Voce esta autenticado como ${getAuthenticatedUserLabel(authUser)} em ${getActiveWorkspaceLabel(activeWorkspace)}.`, notification: notification, notificationTone: notificationTone, children: _jsx(ActionMenuPage, { title: "Tem certeza que deseja encerrar a sessao atual?", subtitle: "Se confirmar, a CLI vai remover a sessao salva localmente e pedir login novamente.", options: LOGOUT_OPTIONS, selectedIndex: logoutSelectionIndex, hintText: "Use as setas para navegar. Enter confirma. Esc volta ao menu." }) }));
     }
-    return (_jsx(AppShell, { appVersion: appVersion, title: getWelcomeTitle(authUser), subtitle: `Use a barra para abrir os comandos. Sessao ativa para ${getAuthenticatedUserLabel(authUser)}.`, notification: notification, notificationTone: notificationTone, children: _jsx(AppMenu, { initialInput: menuKey === 0 ? initialInput : '', items: MENU_ITEMS, onInputChange: () => {
+    return (_jsx(AppShell, { appVersion: appVersion, title: getWelcomeTitle(authUser), subtitle: `Workspace: ${getActiveWorkspaceLabel(activeWorkspace)}\n\nUse a barra para abrir os comandos.`, notification: notification, notificationTone: notificationTone, children: _jsx(AppMenu, { initialInput: menuKey === 0 ? initialInput : '', items: MENU_ITEMS, onInputChange: () => {
                 if (notification) {
                     setNotification(null);
                 }

package/dist/modules/auth/auth-service.d.ts

@@ -1,8 +1,18 @@
-import { type AuthSession, type AuthUser } from '@supabase/supabase-js';
+import { type AuthSession, type AuthUser, type SupabaseClient } from '@supabase/supabase-js';
 import { type CliEnv } from '../../config/env.js';
+export type WorkspaceRole = 'admin' | 'member' | 'owner';
+export type WorkspaceMembership = {
+    readonly id: string;
+    readonly name: string;
+    readonly role: WorkspaceRole;
+    readonly slug: string;
+};
 export type AuthSnapshot = {
+    readonly activeWorkspace: WorkspaceMembership | null;
+    readonly requiresWorkspaceSelection: boolean;
     readonly session: AuthSession | null;
     readonly user: AuthUser | null;
+    readonly workspaces: readonly WorkspaceMembership[];
 };
 export type AuthActionResult<TData> = {
     readonly data: TData | null;
@@ -19,21 +29,32 @@ export type AuthBootstrapResult = {
 };
 export declare class AuthService {
     private readonly client;
+    private readonly storage;
+    private readonly env;
     private readonly storageFilePath;
     static create(env: CliEnv): AuthService;
     private constructor();
+    private activeWorkspaceId;
     getSessionStorageFilePath(): string;
     onAuthStateChange(listener: (snapshot: AuthSnapshot) => void): {
         data: {
             subscription: import("@supabase/supabase-js").Subscription;
         };
     };
+    getActiveWorkspaceId(): string | null;
+    getWorkspaceScopedClient(): Promise<AuthActionResult<SupabaseClient>>;
     restoreSession(): Promise<AuthActionResult<AuthSnapshot>>;
     signInWithPassword(email: string, password: string): Promise<AuthActionResult<AuthSnapshot>>;
     signOut(): Promise<AuthActionResult<null>>;
+    selectWorkspace(workspaceId: string): Promise<AuthActionResult<WorkspaceMembership>>;
     updateDisplayName(displayName: string): Promise<AuthActionResult<AuthUser>>;
     sendPasswordReauthenticationCode(): Promise<AuthActionResult<null>>;
     updatePassword(password: string, nonce?: string): Promise<AuthActionResult<AuthUser>>;
+    private buildAuthenticatedSnapshot;
+    private listMyWorkspaces;
+    private readStoredActiveWorkspaceId;
+    private storeActiveWorkspaceId;
+    private clearStoredActiveWorkspaceId;
 }
 export declare function getAuthBootstrapResult(): AuthBootstrapResult;
 //# sourceMappingURL=auth-service.d.ts.map

package/dist/modules/auth/auth-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-service.d.ts","sourceRoot":"","sources":["../../../src/modules/auth/auth-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,QAAQ,EAEd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAA6B,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAK7E,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,KAAK,IAChC;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC;AAEJ,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CACnB,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;CACpB,CAAC;AAUN,qBAAa,WAAW;IAiBpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe;WAjBpB,MAAM,CAAC,GAAG,EAAE,MAAM;IAehC,OAAO;IAKA,yBAAyB,IAAI,MAAM;IAInC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI;;;;;IAStD,cAAc,IAAI,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IA6DzD,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAwC5F,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IA0B1C,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAmE3E,gCAAgC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IA0BnE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;CA0CnG;AAID,wBAAgB,sBAAsB,IAAI,mBAAmB,CAoB5D"}
+{"version":3,"file":"auth-service.d.ts","sourceRoot":"","sources":["../../../src/modules/auth/auth-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAA6B,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAM7E,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,eAAe,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACrD,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,KAAK,IAChC;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC;AAEJ,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CACnB,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;CACpB,CAAC;AAqCN,qBAAa,WAAW;IAiBpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,eAAe;WAnBpB,MAAM,CAAC,GAAG,EAAE,MAAM;IAehC,OAAO;IASP,OAAO,CAAC,iBAAiB,CAAgB;IAElC,yBAAyB,IAAI,MAAM;IAInC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI;;;;;IAY5D,oBAAoB,IAAI,MAAM,GAAG,IAAI;IAI/B,wBAAwB,IAAI,OAAO,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;IA6DrE,cAAc,IAAI,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IA6DzD,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAiC5F,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IA4B1C,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAgDpF,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAmE3E,gCAAgC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IA0BnE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YA2CpF,0BAA0B;YAmD1B,gBAAgB;YAgChB,2BAA2B;YAO3B,sBAAsB;YAKtB,4BAA4B;CAI3C;AAID,wBAAgB,sBAAsB,IAAI,mBAAmB,CAoB5D"}

package/dist/modules/auth/auth-service.js

@@ -3,14 +3,39 @@ import { TRENDIFY_AUTH_STORAGE_FILE } from '../../config/app-paths.js';
 import { getCliEnvValidationResult } from '../../config/env.js';
 import { FileStorage } from './auth-storage.js';
 const AUTH_STORAGE_KEY = 'trendify.auth.token';
+const ACTIVE_WORKSPACE_STORAGE_KEY = 'trendify.auth.active-workspace-id';
 function toAuthErrorMessage(error, fallbackMessage) {
     if (error && typeof error === 'object' && 'message' in error && typeof error.message === 'string') {
         return error.message;
     }
     return fallbackMessage;
 }
+function isWorkspaceRole(value) {
+    return value === 'owner' || value === 'admin' || value === 'member';
+}
+function normalizeWorkspaceMembership(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return null;
+    }
+    const candidate = value;
+    const id = typeof candidate.workspace_id === 'string' ? candidate.workspace_id.trim() : '';
+    const name = typeof candidate.workspace_name === 'string' ? candidate.workspace_name.trim() : '';
+    const slug = typeof candidate.workspace_slug === 'string' ? candidate.workspace_slug.trim() : '';
+    const role = candidate.role;
+    if (!id || !name || !slug || !isWorkspaceRole(role)) {
+        return null;
+    }
+    return {
+        id,
+        name,
+        role,
+        slug,
+    };
+}
 export class AuthService {
     client;
+    storage;
+    env;
     storageFilePath;
     static create(env) {
         const storage = new FileStorage(TRENDIFY_AUTH_STORAGE_FILE);
@@ -23,23 +48,85 @@ export class AuthService {
                 storageKey: AUTH_STORAGE_KEY,
             },
         });
-        return new AuthService(client, TRENDIFY_AUTH_STORAGE_FILE);
+        return new AuthService(client, storage, env, TRENDIFY_AUTH_STORAGE_FILE);
     }
-    constructor(client, storageFilePath) {
+    constructor(client, storage, env, storageFilePath) {
         this.client = client;
+        this.storage = storage;
+        this.env = env;
         this.storageFilePath = storageFilePath;
+        this.activeWorkspaceId = null;
     }
+    activeWorkspaceId;
     getSessionStorageFilePath() {
         return this.storageFilePath;
     }
     onAuthStateChange(listener) {
         return this.client.auth.onAuthStateChange((_event, session) => {
             listener({
+                activeWorkspace: null,
+                requiresWorkspaceSelection: false,
                 session,
                 user: session?.user ?? null,
+                workspaces: [],
             });
         });
     }
+    getActiveWorkspaceId() {
+        return this.activeWorkspaceId;
+    }
+    async getWorkspaceScopedClient() {
+        try {
+            const { data: { session }, error, } = await this.client.auth.getSession();
+            if (error) {
+                return {
+                    data: null,
+                    error: error.message,
+                    errorCode: error.code ?? null,
+                };
+            }
+            if (!session?.access_token) {
+                return {
+                    data: null,
+                    error: 'Nao existe uma sessao ativa para criar um cliente com espaco de trabalho.',
+                    errorCode: null,
+                };
+            }
+            const activeWorkspaceId = this.activeWorkspaceId ?? (await this.readStoredActiveWorkspaceId());
+            if (!activeWorkspaceId) {
+                return {
+                    data: null,
+                    error: 'Selecione um espaco de trabalho antes de consultar dados protegidos.',
+                    errorCode: null,
+                };
+            }
+            const workspaceClient = createClient(this.env.supabaseUrl, this.env.supabasePublishableDefaultKey, {
+                auth: {
+                    autoRefreshToken: false,
+                    detectSessionInUrl: false,
+                    persistSession: false,
+                },
+                global: {
+                    headers: {
+                        Authorization: `Bearer ${session.access_token}`,
+                        'x-tenant-id': activeWorkspaceId,
+                    },
+                },
+            });
+            return {
+                data: workspaceClient,
+                error: null,
+                errorCode: null,
+            };
+        }
+        catch (error) {
+            return {
+                data: null,
+                error: toAuthErrorMessage(error, 'Nao foi possivel preparar o cliente do espaco de trabalho atual.'),
+                errorCode: null,
+            };
+        }
+    }
     async restoreSession() {
         try {
             const { data: { session }, error: sessionError, } = await this.client.auth.getSession();
@@ -53,8 +140,11 @@ export class AuthService {
             if (!session) {
                 return {
                     data: {
+                        activeWorkspace: null,
+                        requiresWorkspaceSelection: false,
                         session: null,
                         user: null,
+                        workspaces: [],
                     },
                     error: null,
                     errorCode: null,
@@ -63,23 +153,20 @@ export class AuthService {
             const { data: { user }, error: userError, } = await this.client.auth.getUser();
             if (userError || !user) {
                 await this.client.auth.signOut({ scope: 'local' });
+                await this.clearStoredActiveWorkspaceId();
                 return {
                     data: {
+                        activeWorkspace: null,
+                        requiresWorkspaceSelection: false,
                         session: null,
                         user: null,
+                        workspaces: [],
                     },
                     error: userError?.message ?? 'Sua sessao expirou. Faca login novamente.',
                     errorCode: userError?.code ?? null,
                 };
             }
-            return {
-                data: {
-                    session,
-                    user,
-                },
-                error: null,
-                errorCode: null,
-            };
+            return await this.buildAuthenticatedSnapshot(session, user);
         }
         catch (error) {
             return {
@@ -109,14 +196,7 @@ export class AuthService {
                     errorCode: null,
                 };
             }
-            return {
-                data: {
-                    session: data.session,
-                    user: data.user,
-                },
-                error: null,
-                errorCode: null,
-            };
+            return await this.buildAuthenticatedSnapshot(data.session, data.user);
         }
         catch (error) {
             return {
@@ -136,6 +216,7 @@ export class AuthService {
                     errorCode: error.code ?? null,
                 };
             }
+            await this.clearStoredActiveWorkspaceId();
             return {
                 data: null,
                 error: null,
@@ -150,6 +231,47 @@ export class AuthService {
             };
         }
     }
+    async selectWorkspace(workspaceId) {
+        const trimmedWorkspaceId = workspaceId.trim();
+        if (!trimmedWorkspaceId) {
+            return {
+                data: null,
+                error: 'Informe um espaco de trabalho valido para continuar.',
+                errorCode: null,
+            };
+        }
+        try {
+            const workspaceResult = await this.listMyWorkspaces();
+            if (workspaceResult.error || !workspaceResult.data) {
+                return {
+                    data: null,
+                    error: workspaceResult.error ?? 'Nao foi possivel carregar os espacos de trabalho disponiveis.',
+                    errorCode: workspaceResult.errorCode,
+                };
+            }
+            const selectedWorkspace = workspaceResult.data.find((workspace) => workspace.id === trimmedWorkspaceId);
+            if (!selectedWorkspace) {
+                return {
+                    data: null,
+                    error: 'Esse espaco de trabalho nao esta disponivel para a sua conta.',
+                    errorCode: null,
+                };
+            }
+            await this.storeActiveWorkspaceId(selectedWorkspace.id);
+            return {
+                data: selectedWorkspace,
+                error: null,
+                errorCode: null,
+            };
+        }
+        catch (error) {
+            return {
+                data: null,
+                error: toAuthErrorMessage(error, 'Nao foi possivel selecionar o espaco de trabalho agora.'),
+                errorCode: null,
+            };
+        }
+    }
     async updateDisplayName(displayName) {
         try {
             const { data: { user: currentUser }, error: currentUserError, } = await this.client.auth.getUser();
@@ -268,6 +390,90 @@ export class AuthService {
             };
         }
     }
+    async buildAuthenticatedSnapshot(session, user) {
+        const workspaceResult = await this.listMyWorkspaces();
+        if (workspaceResult.error || !workspaceResult.data) {
+            return {
+                data: null,
+                error: workspaceResult.error ?? 'Nao foi possivel carregar os espacos de trabalho desta conta.',
+                errorCode: workspaceResult.errorCode,
+            };
+        }
+        if (workspaceResult.data.length === 0) {
+            await this.clearStoredActiveWorkspaceId();
+            return {
+                data: null,
+                error: 'Sua conta nao esta vinculada a nenhum espaco de trabalho. Fale com um administrador.',
+                errorCode: 'workspace_membership_missing',
+            };
+        }
+        const storedActiveWorkspaceId = await this.readStoredActiveWorkspaceId();
+        const storedWorkspace = storedActiveWorkspaceId
+            ? workspaceResult.data.find((workspace) => workspace.id === storedActiveWorkspaceId)
+            : null;
+        const singleWorkspace = workspaceResult.data.length === 1 ? workspaceResult.data[0] ?? null : null;
+        const activeWorkspace = storedWorkspace ?? singleWorkspace;
+        const requiresWorkspaceSelection = activeWorkspace === null;
+        if (activeWorkspace) {
+            await this.storeActiveWorkspaceId(activeWorkspace.id);
+        }
+        else {
+            await this.clearStoredActiveWorkspaceId();
+        }
+        return {
+            data: {
+                activeWorkspace,
+                requiresWorkspaceSelection,
+                session,
+                user,
+                workspaces: workspaceResult.data,
+            },
+            error: null,
+            errorCode: null,
+        };
+    }
+    async listMyWorkspaces() {
+        try {
+            const { data, error } = await this.client.rpc('list_my_workspaces');
+            if (error) {
+                return {
+                    data: null,
+                    error: error.message,
+                    errorCode: error.code ?? null,
+                };
+            }
+            const workspaces = Array.isArray(data)
+                ? data
+                    .map(normalizeWorkspaceMembership)
+                    .filter((workspace) => workspace !== null)
+                : [];
+            return {
+                data: workspaces,
+                error: null,
+                errorCode: null,
+            };
+        }
+        catch (error) {
+            return {
+                data: null,
+                error: toAuthErrorMessage(error, 'Nao foi possivel consultar os espacos de trabalho desta conta.'),
+                errorCode: null,
+            };
+        }
+    }
+    async readStoredActiveWorkspaceId() {
+        const storedValue = await this.storage.getItem(ACTIVE_WORKSPACE_STORAGE_KEY);
+        const trimmedValue = storedValue?.trim() ?? '';
+        return trimmedValue ? trimmedValue : null;
+    }
+    async storeActiveWorkspaceId(workspaceId) {
+        this.activeWorkspaceId = workspaceId;
+        await this.storage.setItem(ACTIVE_WORKSPACE_STORAGE_KEY, workspaceId);
+    }
+    async clearStoredActiveWorkspaceId() {
+        this.activeWorkspaceId = null;
+        await this.storage.removeItem(ACTIVE_WORKSPACE_STORAGE_KEY);
+    }
 }
 let cachedAuthBootstrap = null;
 export function getAuthBootstrapResult() {

package/dist/modules/auth/page/login-page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-page.d.ts","sourceRoot":"","sources":["../../../../src/modules/auth/page/login-page.tsx"],"names":[],"mappings":"AAIA,KAAK,cAAc,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC,CAAC;AAIF,wBAAgB,SAAS,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,sBAAsB,GACvB,EAAE,cAAc,2CAqDhB"}
+{"version":3,"file":"login-page.d.ts","sourceRoot":"","sources":["../../../../src/modules/auth/page/login-page.tsx"],"names":[],"mappings":"AAIA,KAAK,cAAc,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC,CAAC;AAIF,wBAAgB,SAAS,CAAC,EACxB,IAAI,EACJ,KAAK,EACL,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,sBAAsB,GACvB,EAAE,cAAc,2CAsDhB"}

package/dist/modules/auth/page/login-page.js

@@ -12,7 +12,7 @@ export function LoginPage({ busy, email, onEmailChange, onPasswordChange, onSubm
             setFocusField((current) => (current === 'email' ? 'password' : 'email'));
         }
     });
-    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { children: "Entre com um usuario ja cadastrado no Supabase para liberar os comandos internos." }), _jsx(Text, { dimColor: true, children: "Cadastro nao esta habilitado nesta CLI." }), _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Text, { color: focusField === 'email' ? 'greenBright' : 'white', children: "Email" }), _jsx(TextField, { focus: focusField === 'email', placeholder: "voce@empresa.com", value: email, onChange: onEmailChange, onSubmit: (value) => {
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { children: "Entre com um usuario ja cadastrado no Supabase para liberar os comandos internos." }), _jsx(Text, { dimColor: true, children: "Apos o login, a CLI tambem valida o espaco de trabalho vinculado a sua conta." }), _jsx(Text, { dimColor: true, children: "Cadastro nao esta habilitado nesta CLI." }), _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Text, { color: focusField === 'email' ? 'greenBright' : 'white', children: "Email" }), _jsx(TextField, { focus: focusField === 'email', placeholder: "voce@empresa.com", value: email, onChange: onEmailChange, onSubmit: (value) => {
                             if (value.trim()) {
                                 setFocusField('password');
                             }

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const APP_VERSION = "0.1.5";
+export declare const APP_VERSION = "0.1.6";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1 +1 @@
-export const APP_VERSION = '0.1.5';
+export const APP_VERSION = '0.1.6';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trendify/cli",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "CLI do Trendify para descoberta de temas e fluxos de conta.",
   "type": "module",
   "main": "dist/cli.js",