deepspace 0.5.0 → 0.5.1

package/dist/cli.js

@@ -4,9 +4,50 @@
 import { defineCommand as defineCommand20, runMain } from "citty";
 import { execSync as execSync4 } from "child_process";
 import { readFileSync as readFileSync14, existsSync as existsSync15 } from "fs";
-import { dirname as dirname4, join as join16 } from "path";
+import { dirname as dirname4, join as join17 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
+// src/cli/lib/cli-errors.ts
+var API_ERROR_HINTS = {
+  not_app_owner: "Only the app owner can do this.",
+  app_not_found: "App not found. Check the app name (wrangler.toml `name`) and that it has been deployed.",
+  not_app_owner_or_collaborator: "You must be the app owner or a collaborator to do this.",
+  test_account_cannot_be_collaborator: "Test accounts cannot be added as collaborators. Use a real DeepSpace account.",
+  user_not_found: "No DeepSpace user with that email. New users must sign in and use DeepSpace once (e.g. run `deepspace whoami`) before they can be referenced by email."
+};
+function formatCliError(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  const slug = /^API \S+ \(\d+\): ([a-z0-9_]+)$/.exec(message)?.[1];
+  const hint = slug ? API_ERROR_HINTS[slug] : void 0;
+  return hint ? `${message}
+${hint}` : message;
+}
+function renderCliError(err) {
+  console.error(formatCliError(err));
+  if (process.env.DEBUG && err instanceof Error && err.stack) {
+    console.error("\n" + err.stack);
+  }
+  process.exit(1);
+}
+function wrapCommandErrors(cmd) {
+  const run2 = cmd.run;
+  if (run2) {
+    cmd.run = (async (ctx) => {
+      try {
+        await run2(ctx);
+      } catch (err) {
+        renderCliError(err);
+      }
+    });
+  }
+  if (cmd.subCommands && typeof cmd.subCommands === "object") {
+    for (const sub of Object.values(cmd.subCommands)) {
+      if (sub && typeof sub === "object") wrapCommandErrors(sub);
+    }
+  }
+  return cmd;
+}
+
 // src/cli/commands/login.ts
 import { defineCommand } from "citty";
 import { writeFileSync as writeFileSync4, mkdirSync } from "fs";
@@ -727,7 +768,7 @@ var logout_default = defineCommand2({
 
 // src/cli/commands/dev.ts
 import { defineCommand as defineCommand3 } from "citty";
-import { resolve as resolve4, basename, join as join8 } from "path";
+import { resolve as resolve4, basename, join as join9 } from "path";
 import spawn from "cross-spawn";
 
 // src/cli/auth.ts
@@ -966,7 +1007,16 @@ Full log: ${logPath}`);
 // src/cli/lib/preflight.ts
 import { execFileSync } from "child_process";
 import { existsSync as existsSync7 } from "fs";
+import * as nodeModule from "module";
 import { resolve as resolve2 } from "path";
+function preflightNodeVersion(command, hasRegisterHooks = typeof nodeModule.registerHooks === "function") {
+  if (hasRegisterHooks) return;
+  console.error(
+    `deepspace ${command} requires Node 22.15 or newer (found v${process.versions.node}).`
+  );
+  console.error("Install the current LTS from https://nodejs.org and re-run.");
+  process.exit(1);
+}
 var DLL_NOT_FOUND = -1073741515;
 function preflightWindowsWorkerd(appDir2) {
   if (process.platform !== "win32") return;
@@ -1000,9 +1050,38 @@ function preflightWindowsWorkerd(appDir2) {
   }
 }
 
+// src/cli/lib/macos-junk.ts
+import { readdirSync as readdirSync2, rmSync as rmSync3 } from "fs";
+import { join as join7 } from "path";
+var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".wrangler", ".vite"]);
+function removeMacosJunk(dir) {
+  let removed = 0;
+  let entries;
+  try {
+    entries = readdirSync2(dir, { withFileTypes: true });
+  } catch {
+    return removed;
+  }
+  for (const entry of entries) {
+    const path = join7(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (!SKIP_DIRS.has(entry.name)) removed += removeMacosJunk(path);
+      continue;
+    }
+    if (entry.name === ".DS_Store" || entry.name.startsWith("._")) {
+      try {
+        rmSync3(path, { force: true });
+        removed++;
+      } catch {
+      }
+    }
+  }
+  return removed;
+}
+
 // src/cli/lib/secrets.ts
 import { existsSync as existsSync8, readFileSync as readFileSync7, writeFileSync as writeFileSync7 } from "fs";
-import { join as join7, resolve as resolve3 } from "path";
+import { join as join8, resolve as resolve3 } from "path";
 
 // src/server/rooms/binding-manifest.ts
 var AUTO_PROVISION_SENTINEL = "auto";
@@ -1367,7 +1446,7 @@ function appScopedSecretsApiOptions(appDir2, target) {
   return { appName: resolveSecretsAppName(appDir2, target.wranglerEnv) };
 }
 function secretsCacheFilePath(appDir2) {
-  return join7(appDir2, ".dev.vars");
+  return join8(appDir2, ".dev.vars");
 }
 async function pullLinkedSecretsCache(deployUrl, token, appDir2, wranglerEnv2) {
   const link = resolveSecretsLink(appDir2, wranglerEnv2);
@@ -1507,7 +1586,7 @@ function parseSecretsUpload(content) {
   return out;
 }
 function writeWranglerSecretsLink(appDir2, target, opts = {}) {
-  const path = join7(resolve3(appDir2), "wrangler.toml");
+  const path = join8(resolve3(appDir2), "wrangler.toml");
   const raw = readFileSync7(path, "utf-8");
   const table = target.wranglerEnv ? `env.${target.wranglerEnv}.vars` : "vars";
   const vars = {
@@ -1527,7 +1606,7 @@ function removeWranglerSecretsLink(appDir2, wranglerEnv2) {
   removeWranglerSecretsLinkKeys(appDir2, wranglerEnv2, ["project", "config"]);
 }
 function removeWranglerSecretsLinkKeys(appDir2, wranglerEnv2, keys) {
-  const path = join7(resolve3(appDir2), "wrangler.toml");
+  const path = join8(resolve3(appDir2), "wrangler.toml");
   const raw = readFileSync7(path, "utf-8");
   const table = wranglerEnv2 ? `env.${wranglerEnv2}.vars` : "vars";
   const vars = {};
@@ -1537,7 +1616,7 @@ function removeWranglerSecretsLinkKeys(appDir2, wranglerEnv2, keys) {
   writeFileSync7(path, setTomlVars(raw, table, vars));
 }
 function updateWranglerRequiredSecrets(appDir2, secretNames, opts = {}) {
-  const path = join7(resolve3(appDir2), "wrangler.toml");
+  const path = join8(resolve3(appDir2), "wrangler.toml");
   const raw = readFileSync7(path, "utf-8");
   const existing = readRequiredSecretNamesFromToml(raw);
   const incoming = normalizeRequiredSecretNames(secretNames);
@@ -1549,7 +1628,7 @@ function updateWranglerRequiredSecrets(appDir2, secretNames, opts = {}) {
   return next;
 }
 function removeWranglerRequiredSecrets(appDir2, secretNames) {
-  const path = join7(resolve3(appDir2), "wrangler.toml");
+  const path = join8(resolve3(appDir2), "wrangler.toml");
   const raw = readFileSync7(path, "utf-8");
   const remove2 = new Set(normalizeRequiredSecretNames(secretNames));
   const next = readRequiredSecretNamesFromToml(raw).filter((key) => !remove2.has(key));
@@ -1762,6 +1841,7 @@ var dev_default = defineCommand3({
     }
   },
   async run({ args }) {
+    preflightNodeVersion("dev");
     const wranglerEnv2 = typeof args.env === "string" && args.env.trim() ? args.env.trim() : void 0;
     const start = resolve4(args.dir ?? ".");
     const appDir2 = findAppDir(start);
@@ -1776,6 +1856,8 @@ var dev_default = defineCommand3({
       }
       process.exit(1);
     }
+    const junk = removeMacosJunk(appDir2);
+    if (junk > 0) console.log(`Removed ${junk} macOS metadata file(s) (._*, .DS_Store)`);
     const worktree = detectClaudeWorktree(appDir2);
     const explicitPort = Boolean(args.port);
     let port = worktree && !explicitPort ? deriveWorktreePort(worktree.worktreeName) : resolvePort(args.port);
@@ -1797,7 +1879,7 @@ var dev_default = defineCommand3({
         );
       } else {
         console.warn(
-          `Warning: could not update ${join8(worktree.mainRepoRoot, ".claude", "launch.json")} (malformed or unwritable) \u2014 the Claude preview tool may serve the main repo's code instead of this worktree.`
+          `Warning: could not update ${join9(worktree.mainRepoRoot, ".claude", "launch.json")} (malformed or unwritable) \u2014 the Claude preview tool may serve the main repo's code instead of this worktree.`
         );
       }
       if (!explicitPort && process.env.DEEPSPACE_PORT) {
@@ -2074,6 +2156,7 @@ var test_default = defineCommand5({
     }
   },
   async run({ args }) {
+    preflightNodeVersion("test");
     const suite = args.suite ?? "default";
     const wranglerEnv2 = typeof args.env === "string" && args.env.trim() ? args.env.trim() : void 0;
     const start = resolve5(".");
@@ -2265,12 +2348,12 @@ var screenshot_default = defineCommand6({
 import { defineCommand as defineCommand7 } from "citty";
 import * as p3 from "@clack/prompts";
 import { readFileSync as readFileSync8, writeFileSync as writeFileSync8, existsSync as existsSync9, mkdirSync as mkdirSync4 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 import { homedir as homedir4 } from "os";
 var SESSION_COOKIE2 = "__Secure-better-auth.session_token";
 var AUTH_URL4 = process.env.DEEPSPACE_AUTH_URL ?? PLATFORM_URLS.auth;
-var DIR3 = join9(homedir4(), ".deepspace");
-var ACCOUNTS_PATH = join9(DIR3, "test-accounts.json");
+var DIR3 = join10(homedir4(), ".deepspace");
+var ACCOUNTS_PATH = join10(DIR3, "test-accounts.json");
 function loadAccounts() {
   if (!existsSync9(ACCOUNTS_PATH)) return [];
   try {
@@ -2554,8 +2637,8 @@ var test_accounts_default = defineCommand7({
 import { defineCommand as defineCommand8 } from "citty";
 import { execSync as execSync2 } from "child_process";
 import { randomUUID } from "crypto";
-import { readFileSync as readFileSync9, readdirSync as readdirSync2, existsSync as existsSync10 } from "fs";
-import { join as join10, resolve as resolve7, dirname as dirname2 } from "path";
+import { readFileSync as readFileSync9, readdirSync as readdirSync3, existsSync as existsSync10 } from "fs";
+import { join as join11, resolve as resolve7, dirname as dirname2 } from "path";
 import { pathToFileURL } from "url";
 import * as p4 from "@clack/prompts";
 var DEPLOY_URL3 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
@@ -2679,6 +2762,7 @@ var deploy_default = defineCommand8({
     }
   },
   async run({ args }) {
+    preflightNodeVersion("deploy");
     const appDir2 = resolve7(args.dir ?? ".");
     const envName = typeof args.env === "string" && args.env.trim() ? args.env.trim() : void 0;
     if (!hasWranglerConfig(appDir2)) {
@@ -2736,6 +2820,8 @@ var deploy_default = defineCommand8({
       p4.cancel(`Failed to refresh linked secrets before deploy: ${errMessage(err)}`);
       process.exit(1);
     }
+    const junk = removeMacosJunk(appDir2);
+    if (junk > 0) p4.log.info(`Removed ${junk} macOS metadata file(s) (._*, .DS_Store)`);
     const s = createSpinner();
     s.start("Building...");
     let preparedWranglerConfig;
@@ -2758,7 +2844,7 @@ var deploy_default = defineCommand8({
       preparedWranglerConfig?.cleanup();
     }
     s.stop("Built");
-    const deployConfigPath = join10(appDir2, ".wrangler", "deploy", "config.json");
+    const deployConfigPath = join11(appDir2, ".wrangler", "deploy", "config.json");
     if (!existsSync10(deployConfigPath)) {
       p4.cancel("Build output config not found at .wrangler/deploy/config.json");
       process.exit(1);
@@ -2778,7 +2864,7 @@ var deploy_default = defineCommand8({
       process.exit(1);
     }
     const workerDir = dirname2(outputWranglerPath);
-    const workerBundlePath = join10(workerDir, outputConfig.main);
+    const workerBundlePath = join11(workerDir, outputConfig.main);
     const clientDir = outputConfig.assets?.directory ? resolve7(workerDir, outputConfig.assets.directory) : null;
     if (!existsSync10(workerBundlePath)) {
       p4.cancel(`Worker bundle not found at ${workerBundlePath}`);
@@ -2992,13 +3078,13 @@ var deploy_default = defineCommand8({
   }
 });
 async function syncSubscriptionPlans(appDir2, appName, token) {
-  const subsPath = join10(appDir2, "src", "subscriptions.ts");
+  const subsPath = join11(appDir2, "src", "subscriptions.ts");
   if (!existsSync10(subsPath)) return;
   let plans;
   try {
     const esbuild = await import("esbuild");
-    const outDir = join10(appDir2, ".wrangler", "deploy");
-    const outFile = join10(outDir, "subscriptions.bundle.mjs");
+    const outDir = join11(appDir2, ".wrangler", "deploy");
+    const outFile = join11(outDir, "subscriptions.bundle.mjs");
     await esbuild.build({
       entryPoints: [subsPath],
       bundle: true,
@@ -3140,13 +3226,13 @@ current billing period? (Skip to leave them grandfathered.)`
   }
 }
 async function syncOneTimeProducts(appDir2, appName, token) {
-  const productsPath = join10(appDir2, "src", "products.ts");
+  const productsPath = join11(appDir2, "src", "products.ts");
   if (!existsSync10(productsPath)) return;
   let products;
   try {
     const esbuild = await import("esbuild");
-    const outDir = join10(appDir2, ".wrangler", "deploy");
-    const outFile = join10(outDir, "products.bundle.mjs");
+    const outDir = join11(appDir2, ".wrangler", "deploy");
+    const outFile = join11(outDir, "products.bundle.mjs");
     await esbuild.build({
       entryPoints: [productsPath],
       bundle: true,
@@ -3219,9 +3305,9 @@ async function waitForAssetsReady(url, timeoutMs) {
 function collectAssets(dir) {
   const assets = [];
   function walk(d, prefix) {
-    for (const entry of readdirSync2(d, { withFileTypes: true })) {
+    for (const entry of readdirSync3(d, { withFileTypes: true })) {
       if (entry.name === ".assetsignore") continue;
-      const full = join10(d, entry.name);
+      const full = join11(d, entry.name);
       const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
       if (entry.isDirectory()) {
         walk(full, rel);
@@ -3360,12 +3446,12 @@ var whoami_default = defineCommand10({
 // src/cli/commands/add.ts
 import { defineCommand as defineCommand11 } from "citty";
 import { existsSync as existsSync11 } from "fs";
-import { resolve as resolve8, join as join11 } from "path";
+import { resolve as resolve8, join as join12 } from "path";
 import { execSync as execSync3 } from "child_process";
 function findScript(from) {
-  const inNodeModules = join11(from, "node_modules", "deepspace", "scripts", "add-feature.cjs");
+  const inNodeModules = join12(from, "node_modules", "deepspace", "scripts", "add-feature.cjs");
   if (existsSync11(inNodeModules)) return inNodeModules;
-  const inDotDeepspace = join11(from, ".deepspace", "scripts", "add-feature.cjs");
+  const inDotDeepspace = join12(from, ".deepspace", "scripts", "add-feature.cjs");
   if (existsSync11(inDotDeepspace)) return inDotDeepspace;
   return null;
 }
@@ -3404,8 +3490,8 @@ var add_default = defineCommand11({
     if (!script) {
       console.error("Could not find the deepspace feature installer.");
       console.error("Looked in:");
-      console.error(`  ${join11(appDir2, "node_modules", "deepspace", "scripts", "add-feature.cjs")}`);
-      console.error(`  ${join11(appDir2, ".deepspace", "scripts", "add-feature.cjs")}`);
+      console.error(`  ${join12(appDir2, "node_modules", "deepspace", "scripts", "add-feature.cjs")}`);
+      console.error(`  ${join12(appDir2, ".deepspace", "scripts", "add-feature.cjs")}`);
       console.error("Are you in a DeepSpace app directory? Try `npm install` first.");
       process.exit(1);
     }
@@ -3430,7 +3516,7 @@ var add_default = defineCommand11({
 import { defineCommand as defineCommand12 } from "citty";
 import spawn2 from "cross-spawn";
 import { mkdirSync as mkdirSync5 } from "fs";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { homedir as homedir5 } from "os";
 var SKILL_REPO = "deepdotspace/deepspace-skill";
 function runSkillsAdd(extraArgs) {
@@ -3449,7 +3535,7 @@ function runSkillsAdd(extraArgs) {
   });
 }
 function precreateClaudeDir(baseDir) {
-  mkdirSync5(join12(baseDir, ".claude"), { recursive: true });
+  mkdirSync5(join13(baseDir, ".claude"), { recursive: true });
 }
 var add = defineCommand12({
   meta: {
@@ -3856,6 +3942,14 @@ var domain_default = defineCommand13({
 
 // src/cli/commands/collaborators.ts
 import { defineCommand as defineCommand14 } from "citty";
+
+// src/server/auth/testAccounts.ts
+var TEST_ACCOUNT_EMAIL_SUFFIX = "@deepspace.test";
+function isTestAccountEmail(email) {
+  return !!email && email.trim().toLowerCase().endsWith(TEST_ACCOUNT_EMAIL_SUFFIX);
+}
+
+// src/cli/commands/collaborators.ts
 var API_URL3 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
 async function api2(token, path, init) {
   const res = await fetch(`${API_URL3}${path}`, {
@@ -3917,6 +4011,12 @@ var add2 = defineCommand14({
   async run({ args }) {
     const token = await ensureToken();
     const app = requireAppName(args.app);
+    if (isTestAccountEmail(args.email)) {
+      console.error(
+        "Test accounts (@deepspace.test) cannot be added as collaborators. Use a real DeepSpace account."
+      );
+      process.exit(1);
+    }
     const { collaborator } = await api2(
       token,
       `/api/app-collaborators/${encodeURIComponent(app)}`,
@@ -4341,7 +4441,7 @@ var invoke_default = defineCommand16({
 // src/cli/commands/library.ts
 import { defineCommand as defineCommand17 } from "citty";
 import { existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
-import { join as join13, resolve as resolve9 } from "path";
+import { join as join14, resolve as resolve9 } from "path";
 import { parse as parseToml3 } from "smol-toml";
 import * as p6 from "@clack/prompts";
 var DEFAULT_LIBRARY_APP = "deepdotspace-site";
@@ -4419,7 +4519,7 @@ var publish = defineCommand17({
     let appName = typeof args.app === "string" && args.app.trim() ? args.app.trim() : void 0;
     if (!appName) {
       const appDir2 = resolve9(typeof args.dir === "string" && args.dir ? args.dir : ".");
-      const wranglerPath = join13(appDir2, "wrangler.toml");
+      const wranglerPath = join14(appDir2, "wrangler.toml");
       if (!existsSync12(wranglerPath)) {
         return die("No --app provided and no wrangler.toml found. Either pass --app <name> or run from your app's directory.");
       }
@@ -4558,7 +4658,7 @@ var library_default = defineCommand17({
 import { defineCommand as defineCommand18 } from "citty";
 import * as p7 from "@clack/prompts";
 import { existsSync as existsSync13, readFileSync as readFileSync12 } from "fs";
-import { dirname as dirname3, join as join14 } from "path";
+import { dirname as dirname3, join as join15 } from "path";
 import { fileURLToPath } from "url";
 import { release } from "os";
 var API_URL5 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
@@ -4581,8 +4681,8 @@ function readCliVersion() {
   try {
     const here = dirname3(fileURLToPath(import.meta.url));
     const candidates = [
-      join14(here, "..", "package.json"),
-      join14(here, "..", "..", "..", "package.json")
+      join15(here, "..", "package.json"),
+      join15(here, "..", "..", "..", "package.json")
     ];
     for (const path of candidates) {
       if (!existsSync13(path)) continue;
@@ -4796,8 +4896,8 @@ Context: deepspace ${payload.cliVersion} \xB7 ${payload.nodeVersion} \xB7 ${payl
 
 // src/cli/commands/secrets.ts
 import { defineCommand as defineCommand19 } from "citty";
-import { existsSync as existsSync14, readFileSync as readFileSync13, rmSync as rmSync3 } from "fs";
-import { join as join15, resolve as resolve10 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync13, rmSync as rmSync4 } from "fs";
+import { join as join16, resolve as resolve10 } from "path";
 var DEPLOY_URL5 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
 function appDir(args) {
   const dir = typeof args.dir === "string" && args.dir ? args.dir : typeof args.scope === "string" && args.scope ? args.scope : ".";
@@ -4951,7 +5051,7 @@ async function bestEffortClearServerSecretsLink(dir, targetEnv) {
 }
 async function importLegacyDevVarsSecrets(dir, target, remoteCheck) {
   if (remoteCheck.status === "unchecked") return null;
-  const legacyPath = target.wranglerEnv ? join15(dir, `.dev.vars.${target.wranglerEnv}`) : join15(dir, ".dev.vars");
+  const legacyPath = target.wranglerEnv ? join16(dir, `.dev.vars.${target.wranglerEnv}`) : join16(dir, ".dev.vars");
   if (!existsSync14(legacyPath)) return null;
   try {
     const custom = extractCustomDevVars(
@@ -5001,7 +5101,7 @@ async function importLegacyDevVarsSecrets(dir, target, remoteCheck) {
         new Set(keys)
       );
       if (target.wranglerEnv && !extractCustomDevVars(cleaned).trim()) {
-        rmSync3(legacyPath, { force: true });
+        rmSync4(legacyPath, { force: true });
       } else {
         writeSecretFileSync(legacyPath, cleaned ? `${cleaned}
 ` : "");
@@ -5761,7 +5861,7 @@ function readExistingFile(path) {
 
 // src/cli/cli.ts
 var __dirname = dirname4(fileURLToPath2(import.meta.url));
-var pkg = JSON.parse(readFileSync14(join16(__dirname, "..", "package.json"), "utf-8"));
+var pkg = JSON.parse(readFileSync14(join17(__dirname, "..", "package.json"), "utf-8"));
 if (process.platform === "linux" && !process.env.SSL_CERT_FILE && existsSync15("/etc/ssl/certs/ca-certificates.crt")) {
   process.env.SSL_CERT_FILE = "/etc/ssl/certs/ca-certificates.crt";
 }
@@ -5817,5 +5917,5 @@ var main = defineCommand20({
   // command. Citty's default behavior when no subcommand matches is to print
   // help, which is what we want for `deepspace` with no args.
 });
-runMain(main);
+runMain(wrapCommandErrors(main));
 //# sourceMappingURL=cli.js.map