@vectros-ai/cli 0.6.8 → 0.7.0

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 All notable changes to `@vectros-ai/cli` are documented here.
 This project adheres to [Semantic Versioning](https://semver.org).
 
+## 0.7.0 — 2026-07-08
+
+### Added
+
+- **`--tenant test|live` on `context create`, `context list`, and `context get`** —
+  pick the tenant a context is created in / read from (default `live`), mirroring the
+  flag `context destroy` and `blueprint-test` already carried. Previously these verbs
+  always targeted the live tenant, so a context on the test tenant could neither be
+  created, read, nor listed from the CLI.
+- **`vectros context destroy <contextId>`** — permanently destroy an app context and
+  everything in it (records, documents, folders, schemas, roles, access profiles; the
+  context's scoped keys are revoked up front). The teardown is irreversible and runs
+  asynchronously on the server (the context reports `purging` until the drain
+  completes). Two safety rails: interactively you must re-type the context id to
+  confirm; `--force` skips the prompt and is required when stdin is not a terminal.
+  `--tenant test|live` picks the tenant the context lives in (default `live`).
+  Authenticates as the account owner — no root API key required.
+
 ## 0.6.8 — 2026-07-05
 
 ### Changed

package/dist/cli.js

@@ -13446,6 +13446,7 @@ async function runRoleDelete(opts, deps = {}) {
 }
 
 // src/commands/context.ts
+var readline2 = __toESM(require("readline/promises"));
 function renderContext(c) {
   return formatKeyValues([
     ["context", c.contextId],
@@ -13507,6 +13508,80 @@ async function runContextList(opts, deps = {}) {
     }
   });
 }
+async function runContextDestroy(opts, deps = {}) {
+  const { contextId } = opts;
+  if (!opts.force) {
+    const isTty = deps.isTty ?? Boolean(process.stdin.isTTY);
+    if (!isTty) {
+      process.stderr.write(
+        `  \u2716 context destroy is irreversible and needs an interactive confirmation.
+    Re-run with --force to destroy '${contextId}' without a prompt.
+`
+      );
+      return 2;
+    }
+    const promptCtx = deps.createPrompt ? deps.createPrompt() : (() => {
+      const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
+      return { prompt: (q) => rl.question(q), close: () => rl.close() };
+    })();
+    try {
+      process.stdout.write(
+        `
+  \u26A0 Destroying app context '${contextId}' permanently erases it AND all of its
+    records, documents, folders, schemas, roles, and access profiles, and revokes
+    its scoped keys. This cannot be undone.
+
+`
+      );
+      const typed = await promptCtx.prompt(`  Type the context id ('${contextId}') to confirm: `);
+      if (typed.trim() !== contextId) {
+        process.stderr.write(`  \u2716 Confirmation did not match \u2014 nothing destroyed.
+`);
+        return 1;
+      }
+    } finally {
+      promptCtx.close();
+    }
+  }
+  return withAuth({ ...opts, provisioning: true }, deps, async (auth) => {
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const url = `${auth.baseUrl.replace(/\/$/, "")}/developer/app-contexts/${encodeURIComponent(contextId)}?tenant=${encodeURIComponent(auth.tenant)}&confirm=${encodeURIComponent(contextId)}`;
+    try {
+      const res = await fetchImpl(url, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${auth.cognitoToken}` }
+      });
+      if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        let message = body;
+        try {
+          const parsed = JSON.parse(body);
+          if (parsed.message) message = parsed.message;
+        } catch {
+        }
+        process.stderr.write(`  \u2716 context destroy failed: HTTP ${res.status}${message ? ` \u2014 ${message}` : ""}
+`);
+        return 1;
+      }
+      if (opts.json) {
+        process.stdout.write(`${formatJson({ contextId, status: "purging" })}
+`);
+        return 0;
+      }
+      process.stdout.write(
+        `
+  \u2714 teardown of '${contextId}' started \u2014 the context and its contents are being
+    deleted asynchronously (it reports status 'purging' until the drain completes)
+`
+      );
+      return 0;
+    } catch (err) {
+      process.stderr.write(`  \u2716 context destroy failed: ${formatError(err)}
+`);
+      return 1;
+    }
+  });
+}
 async function runContextGet(opts, deps = {}) {
   return withAuth({ ...opts, context: opts.contextId }, deps, async (auth) => {
     const client = auth.client;
@@ -14091,7 +14166,7 @@ async function runBlueprintTest(fileOrName, opts, deps = {}) {
 
 // src/build-info.ts
 var BUILD_INFO = {
-  cli: true ? "0.6.8" : "dev",
+  cli: true ? "0.7.0" : "dev",
   sdk: true ? "0.33.0" : "dev",
   blueprints: true ? "0.6.5" : "dev"
 };
@@ -14167,18 +14242,75 @@ function buildProgram(deps = {}) {
 }
 function registerContextCommands(program, deps) {
   const context = program.command("context").description("Manage app contexts (the namespace all data lives in).");
-  const create = context.command("create").description("Create (idempotent) an app context.").argument("<contextId>", "context id (3-31 chars; lowercase letter + lowercase/digit/dash)").option("--name <name>", "human-readable name");
-  addCommonAuthOptions(create).action(async (contextId, flags) => {
-    process.exit(await runContextCreate({ ...toCommonOptions(flags), contextId, name: flags.name }, deps));
-  });
-  const list = context.command("list").description("List the tenant\u2019s app contexts.");
+  const create = context.command("create").description("Create (idempotent) an app context.").argument("<contextId>", "context id (3-31 chars; lowercase letter + lowercase/digit/dash)").option("--name <name>", "human-readable name").option("--tenant <tenant>", "tenant to create the context in: 'test' or 'live' (default live)");
+  addCommonAuthOptions(create).action(
+    async (contextId, flags) => {
+      if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+        process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+        process.exit(2);
+      }
+      process.exit(
+        await runContextCreate(
+          {
+            ...toCommonOptions(flags),
+            contextId,
+            name: flags.name,
+            tenant: flags.tenant
+          },
+          deps
+        )
+      );
+    }
+  );
+  const list = context.command("list").description("List the tenant\u2019s app contexts.").option("--tenant <tenant>", "tenant to list: 'test' or 'live' (default live)");
   addCommonAuthOptions(list).action(async (flags) => {
-    process.exit(await runContextList(toCommonOptions(flags), deps));
+    if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+      process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+      process.exit(2);
+    }
+    process.exit(
+      await runContextList({ ...toCommonOptions(flags), tenant: flags.tenant }, deps)
+    );
   });
-  const get = context.command("get").description("Show one app context.").argument("<contextId>");
+  const get = context.command("get").description("Show one app context.").argument("<contextId>").option("--tenant <tenant>", "tenant the context lives in: 'test' or 'live' (default live)");
   addCommonAuthOptions(get).action(async (contextId, flags) => {
-    process.exit(await runContextGet({ ...toCommonOptions(flags), contextId }, deps));
+    if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+      process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+      process.exit(2);
+    }
+    process.exit(
+      await runContextGet(
+        { ...toCommonOptions(flags), contextId, tenant: flags.tenant },
+        deps
+      )
+    );
   });
+  const destroy = context.command("destroy").description(
+    "Permanently destroy an app context and ALL of its data (irreversible; asks for confirmation)."
+  ).argument("<contextId>", "the app context to destroy").option("--force", "skip the interactive confirmation (required when stdin is not a TTY)").option("--tenant <tenant>", "tenant the context lives in: 'test' or 'live' (default live)");
+  addCommonAuthOptions(destroy).action(
+    async (contextId, flags) => {
+      if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+        process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+        process.exit(2);
+      }
+      process.exit(
+        await runContextDestroy(
+          {
+            ...toCommonOptions(flags),
+            contextId,
+            force: Boolean(flags.force),
+            tenant: flags.tenant
+          },
+          deps
+        )
+      );
+    }
+  );
 }
 function registerRoleCommands(program, deps) {
   const role = program.command("role").description("Manage context-scoped roles (reusable scope rules; bind via `access grant --role`).");