@vibiz/cli 0.2.0 → 0.2.1

package/dist/vibiz.js

@@ -6,11 +6,12 @@ import {
   formatUnits,
   formatUsd,
   mergeEnvFile
-} from "./chunk-GSHNECVT.js";
+} from "./chunk-J4RTAA72.js";
 
 // packages/cli/src/main.ts
 import { spawn } from "node:child_process";
-import { chmod, mkdir, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
+import { chmod, mkdir as mkdir2, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname5, join as join8 } from "node:path";
 import { format } from "node:util";
 
 // packages/cli/src/commands.ts
@@ -1639,7 +1640,7 @@ async function browserLogin(io, api, deps) {
       await forget(io, pendingPath);
       io.log(
         `
-\u2713 Logged in to ${body.account?.name ?? "your account"} as "${body.key?.name ?? "cli"}" (${body.key?.access ?? "agent"} key). Saved to ${configFile(dir)}`
+\u2713 Logged in to ${body.account?.name ?? "your account"} as "${body.key?.name ?? "cli"}" (${body.key?.access === "agent" ? "Limited access" : "full access"}). Saved to ${configFile(dir)}`
       );
       return;
     }
@@ -2424,7 +2425,8 @@ var PROJECT_FILE = "vibiz.json";
 var HELP = `vibiz \u2014 website, database and sign-in for a new business, in one command
 
   vibiz login                                log in from the browser: prints a link, you click
-                                             Authorize, a new agent key is saved here
+                                             Authorize (Full access by default, or Limited),
+                                             and the new key is saved here
        [--key <vz_sk_\u2026>] [--api <url>] [--no-browser]   or save a key you already have
   vibiz signup                               the same as login: no account yet? one is opened
                                              for you on the way
@@ -2448,43 +2450,44 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
                                              schema and no production rows, own sign-in, own AI
                                              key) into .env.development.local
   vibiz dev -- <command\u2026>                    run a command with the development env, no file
-  vibiz env [--write <file>]                 the PRODUCTION env (owner keys only), to paste into
+  vibiz env [--write <file>]                 the PRODUCTION env (full-access keys only), to paste into
                                              a host outside Vibiz; agents use \`vibiz dev\`
   vibiz export [--code] [--db] [--csv] [--env production|development] [-o file.zip]
                                              take the app elsewhere, or keep a backup: its source
                                              with a guide (VIBIZ-EXPORT.md, .env.example), the
                                              database as SQL that psql restores (--csv: tables as
-                                             CSV). Default: all there is. Production data needs an
-                                             owner key; agents default to development
+                                             CSV). Default: all there is. Production data needs a
+                                             full-access key; Limited keys default to development
        [--deployment <id>] [--secrets] [--no-wait]   another deployment's code; --secrets also
                                              writes the env's values to their own file (owner, asks)
   vibiz domains [--json]                     your own domains: status, and the DNS records to add
-  vibiz domains add <domain> [--elsewhere]   connect one you own (agent keys: analytics counts it now;
+  vibiz domains add <domain> [--elsewhere]   connect one you own (Limited keys: analytics counts it now;
                                              sign-in trusts it once its TXT record is in, or an owner
                                              confirms); HTTPS turns on by
                                              itself. --elsewhere: the app runs on another host
   vibiz domains verify <domain>              check its DNS (and its TXT proof) again now
-  vibiz domains remove <domain>              disconnect it (owner keys)
+  vibiz domains remove <domain>              disconnect it (full-access keys)
   vibiz domains search <name>                find a domain to buy, with prices (sellshelf, sellshelf.app)
   vibiz domains buy <domain> [--years 1] [--yes]
-                                             buy it from your credits for this project (owner keys;
+                                             buy it from your credits for this project (full-access keys,
+                                             or Limited keys up to the owner's per-domain limit;
                                              registered to the saved domain owner details)
   vibiz domains owned [--json]               domains this account bought: expiry, auto-renew
-  vibiz domains renew <domain> [--years 1]   renew now from credits (owner keys)
+  vibiz domains renew <domain> [--years 1]   renew now from credits (full-access keys)
   vibiz domains auto-renew <domain> on|off   renew from credits 30 days before expiry (default on)
-  vibiz domains transfer-code <domain>       the code to move it to another registrar (owner keys)
+  vibiz domains transfer-code <domain>       the code to move it to another registrar (full-access keys)
   vibiz domains owner [--input <json>] [--open]
                                              the domain owner details (the legal registrant), saved
                                              once; --input sets them, --open edits in the console
   vibiz auth [--dev] [--json]                how people sign in: providers, callback URLs, email
-                                             (production for owner keys; --dev the development copy)
+                                             (production for full-access keys; --dev the development copy)
   vibiz auth providers add <google|github|vercel> [--own --client-id <id>] [--dev]
                                              turn on a social sign-in; --own uses your OAuth app,
                                              its secret from <PROVIDER>_CLIENT_SECRET or a prompt
   vibiz auth providers rm <provider> [--dev] turn one off
   vibiz auth domains <a.com,b.com|none> [--dev]   only these email domains may sign up
   vibiz company [--dev] [--json]             the business behind this project: status, what blocks
-                                             filing, the next step (production for owner keys)
+                                             filing, the next step (production for full-access keys)
   vibiz company draft --file company.json [--dev]   create or replace the draft (docs/COMPANY.md)
   vibiz company submit [--dev]               file it; production shows the price and asks you to
                                              type the company's name (real filing, real fees)
@@ -2492,7 +2495,7 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
   vibiz company docs [download <id>] [--dev] formation documents, or a short-lived download link
   vibiz company simulate <formation|ein>     development only: complete that step at the sandbox
   vibiz payments [--dev] [--json]            take payments: balance, getting paid, the next step
-                                             (production for owner keys; --dev test mode)
+                                             (production for full-access keys; --dev test mode)
   vibiz payments products [--dev]            the catalog; add one with
        products add <name> --amount <cents> [--interval month|year] [--lookup-key k]
   vibiz payments checkout <price_id|lookup_key> --success-url <u> --cancel-url <u> [--user id]
@@ -2524,7 +2527,7 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
   vibiz social accounts [--dev] [--json]     connected accounts and their ids
   vibiz social post "<text>" --to <account,\u2026> [--media <file|url>]\u2026 [--at <iso>] [--draft]
        [--opt key=value]\u2026 [--dev]            publish now, schedule or draft; a live post asks you to
-                                             confirm (an agent key's post waits for the owner)
+                                             confirm (a Limited key's post waits for the owner)
   vibiz social posts [--status s] [--dev]    posts, newest first
   vibiz social approve|reject|cancel <post> [--dev]   decide a waiting post, or cancel one
   vibiz social campaigns [--dev]             ad campaigns with budget and spend
@@ -2540,13 +2543,13 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
   vibiz connectors ops <name> [--json]       its operations: risk, on/off, parameters
   vibiz connectors enable|disable <name> <op\u2026>   allow (or stop) operations
   vibiz connectors secret <name> <VAR> [--dev]   set a key from $VAR or a hidden prompt; never printed.
-                                             Production needs an owner key
+                                             Production needs a full-access key
   vibiz connectors call <name> <op> [key=value\u2026] [--body '<json>'] [--dev] [--approval <id>]
                                              call it; dangerous operations (and production writes)
-                                             by an agent key wait for the owner's approval
+                                             by a Limited key wait for the owner's approval
   vibiz connectors check <name> [--dev]      does the key work
   vibiz connectors logs <name> [--dev]       recent calls (no content)
-  vibiz connectors approvals | approve <id> | deny <id>   calls waiting for the owner (owner key)
+  vibiz connectors approvals | approve <id> | deny <id>   calls waiting for the owner (full-access key)
   vibiz connect                              where does this app deploy? how that host gets its env
   vibiz run -- <command\u2026>                    with VIBIZ_APP_KEY set (a server, a container, CI): run
                                              the command with the app's env; any language
@@ -2555,7 +2558,7 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
   vibiz hosts                                hosts outside Vibiz that get the env server to server
   vibiz hosts add <host> <app> [field=value\u2026] [--dev]
                                              connect your own host so Vibiz keeps its env in sync
-                                             (owner key): vercel, netlify, render, railway, fly,
+                                             (full-access key): vercel, netlify, render, railway, fly,
                                              heroku, cloudflare-workers, cloudflare-pages,
                                              github-actions. The token comes from the host's usual
                                              variable (VERCEL_TOKEN, FLY_API_TOKEN\u2026) or a hidden
@@ -2569,7 +2572,7 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
                                              what went wrong for visitors, then sessions to watch
   vibiz replay <id> [--json]                 one session's signals and a link to watch it
   vibiz projects                             list your projects
-  Web data (billed per call at cost; every run is kept: vibiz runs, console \u25B8 Web data)
+  Web data (billed per call; every run is kept: vibiz runs, console \u25B8 Web data)
   vibiz scrape <url> [--json]                one page as markdown
   vibiz design <url> [--out design.md] [--tailwind] [--shadcn] [--css] [--own] [--pages /a,/b]
                                              a site's design: type scale, colors, radii, spacing,
@@ -2634,7 +2637,7 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
                                              recent messages (sender and subject only)
   vibiz email unforward <address@domain|domain> [inbox]
                                              stop forwarding to one inbox, one address, or (domain
-                                             alone) the whole domain (owner keys)
+                                             alone) the whole domain (full-access keys)
   vibiz email setup                          set up newsletters: the sending address news.<project>\u2026
                                              (verifies in minutes). Then the owner adds the postal
                                              address: vibiz email settings set --postal-address "\u2026"
@@ -2654,7 +2657,7 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
   vibiz email broadcast list|stats <id>|review <id>|test <id> [--to a,b]|cancel <id>|resume <id>
   vibiz email broadcast create --subject s --file body.md [--list l] [--segment s] [--html]
        [--preview-text t] [--from-name n] [--name n]   (edit <id> takes the same flags)
-  vibiz email broadcast send <id> [--at <ISO time>]   $0.001 an email; agent keys get the owner's
+  vibiz email broadcast send <id> [--at <ISO time>]   $0.001 an email; Limited keys get the owner's
                                              review link unless the owner set an allowance
   vibiz email automation list|runs <id>|activate <id>|pause <id>
   vibiz email automation create --file automation.json   {name, trigger, steps, exit_event}
@@ -2687,11 +2690,12 @@ var HELP = `vibiz \u2014 website, database and sign-in for a new business, in on
   vibiz billing [--json]                     the account's credits: balance, card, auto-recharge
   vibiz billing top-up <dollars> [--open]    a payment link to add credits (a person pays there)
   vibiz billing history [--kind usage,topup] what came in and what used it
-  vibiz billing auto-recharge on|off [--threshold 5] [--amount 25]   (owner key)
+  vibiz billing auto-recharge on|off [--threshold 5] [--amount 25]   (full-access key)
   vibiz metrics [--period 7d] [--json]       request counts, error rate and latency by capability
-  vibiz keys [create <name> [--owner] | revoke <id>]
-                                             named API keys, one per person or agent; agent keys
-                                             (the default) never read production secrets
+  vibiz keys [create <name> [--limited] | access <id> full|limited | revoke <id>]
+                                             named API keys, one per person or agent: full
+                                             access by default; Limited ones never move live
+                                             money or read production secrets
   vibiz admin metrics [--period 7d] [--json] [--open]   the platform view (admin key)
   vibiz mcp                                  serve the Vibiz tools to AI agents (MCP, stdio)
   vibiz mcp add --clients "<client>[,\u2026]"     connect a coding agent to the remote MCP server once:
@@ -2757,6 +2761,7 @@ function printDomains(io, list2, only) {
     io.log(`  ${x.next_step}`);
   }
 }
+var accessLabel = (access) => access === "agent" ? "Limited access" : "full access";
 var BUY_DOMAIN_COMMANDS = /* @__PURE__ */ new Set([
   "search",
   "buy",
@@ -3339,6 +3344,7 @@ async function runCli(argv2, io) {
       "keep-values": { type: "boolean", default: false },
       grace: { type: "string" },
       owner: { type: "boolean", default: false },
+      limited: { type: "boolean", default: false },
       own: { type: "boolean", default: false },
       "client-id": { type: "string" },
       file: { type: "string" },
@@ -3472,7 +3478,7 @@ async function runCli(argv2, io) {
         return;
       }
       io.log(`${me.account.name}  (${me.account.id})`);
-      io.log(`  key     ${me.key.name}  ${me.key.prefix}\u2026  ${me.key.access}`);
+      io.log(`  key     ${me.key.name}  ${me.key.prefix}\u2026  ${accessLabel(me.key.access)}`);
       const saved = await readLogin(io, io.configDir ?? CONFIG_DIR);
       io.log(`  api     ${io.env.VIBIZ_API_URL || saved.apiUrl || DEFAULT_API_URL}`);
       return;
@@ -4269,7 +4275,7 @@ ${link.url}`
   ${JSON.stringify(a.request)}`
             );
           }
-          if (list2.length) io.log("Approve with an owner key: vibiz connectors approve <id>");
+          if (list2.length) io.log("Approve with a full-access key: vibiz connectors approve <id>");
         });
         return;
       }
@@ -5072,16 +5078,25 @@ The credits show in \`vibiz billing\` a few seconds after paying.`
       const vibiz2 = await io.client();
       const [sub, arg] = positionals;
       if (sub === "create") {
-        if (!arg) throw new Error("usage: vibiz keys create <name> [--owner]");
-        const key = await vibiz2.apiKeys.create(arg, { access: values.owner ? "owner" : "agent" });
+        if (!arg) throw new Error("usage: vibiz keys create <name> [--limited]");
+        const key = await vibiz2.apiKeys.create(arg, { access: values.limited ? "agent" : "owner" });
         io.log(
-          `${key.name}  ${key.id}  ${key.access}
+          `${key.name}  ${key.id}  ${accessLabel(key.access)}
 ${key.secret}
 
 Store the key now: it is not shown again.`
         );
         return;
       }
+      if (sub === "access") {
+        const level = positionals[2];
+        if (!arg || level !== "full" && level !== "limited") {
+          throw new Error("usage: vibiz keys access <key id> full|limited");
+        }
+        const k = await vibiz2.apiKeys.setAccess(arg, level === "full" ? "owner" : "agent");
+        io.log(`${k.name} (${k.id}) now has ${accessLabel(k.access)}.`);
+        return;
+      }
       if (sub === "revoke") {
         if (!arg) throw new Error("usage: vibiz keys revoke <key id>");
         await vibiz2.apiKeys.revoke(arg);
@@ -5090,7 +5105,7 @@ Store the key now: it is not shown again.`
       }
       for (const k of await vibiz2.apiKeys.list()) {
         io.log(
-          `${k.id}  ${k.name.padEnd(20)} ${k.prefix}\u2026  ${(k.access ?? "owner").padEnd(5)}  ${k.revoked_at ? "revoked" : "active"}`
+          `${k.id}  ${k.name.padEnd(20)} ${k.prefix}\u2026  ${accessLabel(k.access).padEnd(14)}  ${k.revoked_at ? "revoked" : "active"}`
         );
       }
       return;
@@ -5110,7 +5125,7 @@ Store the key now: it is not shown again.`
       return;
     }
     case "docs": {
-      const { DOC_TOPICS, DOCS } = await import("./src-2CVAECWM.js");
+      const { DOC_TOPICS, DOCS } = await import("./src-IAT2AUWC.js");
       const topic = positionals[0];
       if (!topic || !DOC_TOPICS.includes(topic)) {
         for (const t of DOC_TOPICS) io.log(`  vibiz docs ${t.padEnd(13)} ${DOCS[t].title}`);
@@ -5135,7 +5150,7 @@ ${DOCS[topic].body}`);
       if (positionals[0])
         throw new Error('usage: vibiz mcp (serve over stdio) | vibiz mcp add --clients "<client>"');
       io.local();
-      const { serveStdio } = await import("./src-2CVAECWM.js");
+      const { serveStdio } = await import("./src-IAT2AUWC.js");
       await serveStdio({ version: cliVersion() });
       return;
     }
@@ -5158,6 +5173,13 @@ function cliErrorLines(err) {
   if (err instanceof VibizApiError) {
     const out = [`\u2715 ${err.message} (${err.code})`];
     const d = err.details;
+    const problems = (Array.isArray(d?.problems) ? d.problems : []).filter(
+      (p) => typeof p?.message === "string" && !err.message.includes(p.message.replace(/[.\s]+$/, ""))
+    );
+    for (const p of problems.slice(0, 10)) out.push(`  \u2022 ${p.message}`);
+    if (typeof d?.field === "string" && d.field && !err.message.includes(d.field) && !problems.length) {
+      out.push(`  field: ${d.field}`);
+    }
     if (d?.approval_id) out.push(`  approval_id: ${d.approval_id}`);
     if (d?.next_step) out.push(`  ${d.next_step}`);
     if (d?.console_url && !d.next_step?.includes(d.console_url)) out.push(`  ${d.console_url}`);
@@ -5254,10 +5276,54 @@ async function aiKeysCommand(io, args, values) {
   }
 }
 
+// packages/cli/src/update-check.ts
+import { mkdir, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
+import { join as join7 } from "node:path";
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var LATEST_URL = "https://registry.npmjs.org/@vibiz/cli/latest";
+function isNewer(latest, current) {
+  const parse = (v) => /^\d+\.\d+\.\d+$/.test(v) ? v.split(".").map(Number) : null;
+  const a = parse(latest);
+  const b = parse(current);
+  if (!a || !b) return false;
+  for (let i = 0; i < 3; i++) {
+    if (a[i] !== b[i]) return (a[i] ?? 0) > (b[i] ?? 0);
+  }
+  return false;
+}
+function updateNotice(latest, current) {
+  if (!isNewer(latest, current)) return null;
+  return [
+    `A newer Vibiz CLI is out: ${current} \u2192 ${latest}. Some commands may be missing from this one.`,
+    "Update: npm install -g @vibiz/cli@latest  (then refresh the agent skills: vibiz skills add --global)"
+  ].join("\n");
+}
+async function latestVersion(configDir, env, fetchImpl = fetch, now = Date.now()) {
+  if (env.VIBIZ_NO_UPDATE_CHECK || env.CI) return null;
+  const file = join7(configDir, "update-check.json");
+  let cache = null;
+  try {
+    cache = JSON.parse(await readFile2(file, "utf8"));
+  } catch {
+  }
+  if (cache && now - cache.checkedAt < DAY_MS) return cache.latest;
+  try {
+    const res = await fetchImpl(LATEST_URL, { signal: AbortSignal.timeout(1500) });
+    if (!res.ok) return cache?.latest ?? null;
+    const { version } = await res.json();
+    if (typeof version !== "string") return cache?.latest ?? null;
+    await mkdir(configDir, { recursive: true });
+    await writeFile2(file, JSON.stringify({ checkedAt: now, latest: version }));
+    return version;
+  } catch {
+    return cache?.latest ?? null;
+  }
+}
+
 // packages/cli/src/main.ts
 async function readJson2(path) {
   try {
-    return JSON.parse(await readFile2(path, "utf8"));
+    return JSON.parse(await readFile3(path, "utf8"));
   } catch {
     return null;
   }
@@ -5316,7 +5382,7 @@ var terminal = {
   out: (text) => void process.stdout.write(text),
   err: (text) => void process.stderr.write(text),
   env: process.env,
-  client: async () => new Vibiz(await login()),
+  client: async () => new Vibiz({ ...await login(), client: `vibiz-cli/${cliVersion()}` }),
   aiClient: async (project) => {
     const { apiKey, baseUrl } = await login();
     const headers = project ? { "x-vibiz-project": project } : void 0;
@@ -5332,19 +5398,46 @@ var terminal = {
     });
   },
   project: async () => {
-    const linked = await readJson2(PROJECT_FILE);
-    if (!linked?.project_id) throw new Error(`No ${PROJECT_FILE} here. Run: vibiz init <name>`);
-    return linked.project_id;
+    for (let dir = process.cwd(); ; dir = dirname5(dir)) {
+      const linked = await readJson2(join8(dir, PROJECT_FILE));
+      if (linked?.project_id) return linked.project_id;
+      if (dirname5(dir) === dir) break;
+    }
+    const list2 = await new Vibiz(await login()).projects.list();
+    const wanted = process.env.VIBIZ_PROJECT?.trim().toLowerCase();
+    if (wanted) {
+      const p = list2.find((x) => [x.id, x.slug, x.name.toLowerCase()].includes(wanted));
+      if (p) return p.id;
+      throw new Error(`No project "${process.env.VIBIZ_PROJECT}" on this account.`);
+    }
+    const lines = list2.map((p, i) => `  ${i + 1}. ${p.name}  (${p.slug}, ${p.id})`);
+    if (list2.length && process.stdin.isTTY) {
+      console.error(`No ${PROJECT_FILE} here. Which project?
+${lines.join("\n")}`);
+      const n = Number(await promptLine("Number (Enter to cancel): "));
+      const p = list2[n - 1];
+      if (!p) throw new Error("Cancelled.");
+      const link = (await promptLine(`Link this folder to ${p.name} (writes ${PROJECT_FILE})? [y/N] `)).trim().toLowerCase();
+      if (link === "y" || link === "yes") {
+        await writeFile3(PROJECT_FILE, `${JSON.stringify({ project_id: p.id }, null, 2)}
+`);
+      }
+      return p.id;
+    }
+    throw new Error(
+      list2.length ? `No ${PROJECT_FILE} here. Run it in the app's folder, or name the project: VIBIZ_PROJECT=<slug> vibiz \u2026
+${lines.join("\n")}` : `No ${PROJECT_FILE} here and no projects yet. Run: vibiz init <name>`
+    );
   },
   promptHidden,
   promptLine,
   openUrl,
   local: () => ({
     cwd: () => process.cwd(),
-    readFile: readFile2,
-    writeFile: writeFile2,
+    readFile: readFile3,
+    writeFile: writeFile3,
     chmod,
-    mkdir,
+    mkdir: mkdir2,
     exec: (cmd, args, env, opts) => {
       const child = spawn(cmd, args, { stdio: "inherit", env });
       if (opts?.forwardSignals) {
@@ -5364,8 +5457,16 @@ var argv = process.argv.slice(2);
 if (argv[0] === "--version" || argv[0] === "-v") {
   console.log(cliVersion());
 } else {
-  runCli(argv, terminal).catch((err) => {
+  const latest = latestVersion(CONFIG_DIR, process.env);
+  const notice = async () => {
+    const v = await latest;
+    const text = v && updateNotice(v, cliVersion());
+    if (text) console.error(`
+${text}`);
+  };
+  runCli(argv, terminal).then(notice).catch(async (err) => {
     for (const line of cliErrorLines(err)) console.error(line);
+    await notice();
     process.exit(1);
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibiz/cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "The Vibiz Stack CLI and MCP server: website, database, sign-in, email and AI for a new business, from your terminal or your AI agent.",
   "keywords": [
     "vibiz",