Fix store auth scope parsing for space-separated input

parseStoreAuthScopes splits on commas only, but Windows PowerShell can
transform comma-separated CLI args into space-separated strings before
they reach Node.js. This causes "read_products read_inventory" to be
treated as one unrecognized scope, triggering a false "fewer scopes
than requested" error.

Split on /[\s,]+/ instead — matching Core's own ScopeSet.parse_scopes
which already handles both delimiters.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: RyanDJLee

packages/cli/src/cli/services/store/auth/scopes.test.ts

@@ -17,6 +17,30 @@ describe('store auth scope helpers', () => {
     expect(mergeRequestedAndStoredScopes(['read_products'], ['read_orders'])).toEqual(['read_orders', 'read_products'])
   })
 
+  test('parseStoreAuthScopes splits space-separated scopes', () => {
+    expect(parseStoreAuthScopes('read_products read_inventory')).toEqual(['read_products', 'read_inventory'])
+  })
+
+  test('parseStoreAuthScopes splits mixed comma-and-space delimiters', () => {
+    expect(parseStoreAuthScopes('read_products, read_inventory,write_orders')).toEqual([
+      'read_products',
+      'read_inventory',
+      'write_orders',
+    ])
+  })
+
+  test('resolveGrantedScopes succeeds when requested scopes were space-separated', () => {
+    expect(
+      resolveGrantedScopes(
+        {
+          access_token: 'token',
+          scope: 'read_products,read_inventory',
+        },
+        ['read_products', 'read_inventory'],
+      ),
+    ).toEqual(['read_products', 'read_inventory'])
+  })
+
   test('resolveGrantedScopes accepts compressed write scopes that imply requested reads', () => {
     expect(
       resolveGrantedScopes(

packages/cli/src/cli/services/store/auth/scopes.ts

@@ -4,7 +4,7 @@ import type {StoreTokenResponse} from './token-client.js'
 
 export function parseStoreAuthScopes(input: string): string[] {
   const scopes = input
-    .split(',')
+    .split(/[\s,]+/)
     .map((scope) => scope.trim())
     .filter(Boolean)