Scope preview list --format json output to the authenticated user

apps/cli/commands/preview/list.ts

@@ -53,8 +53,10 @@ export async function runCommand(
 
 	try {
 		if ( outputFormat === 'json' ) {
-			const config = await readCliConfig();
-			const json = JSON.stringify( config.snapshots );
+			// Snapshots are per-user; when logged out emit an empty list instead of
+			// erroring so consumers (e.g. the desktop app) degrade gracefully.
+			const token = await readAuthToken();
+			const json = JSON.stringify( token ? await getSnapshotsFromConfig( token.id ) : [] );
 			console.log( json );
 			logger.reportKeyValuePair( 'snapshots', json );
 			return;

apps/cli/commands/preview/tests/list.test.ts

@@ -376,6 +376,34 @@ describe( 'Preview List Command', () => {
 		} );
 	} );
 
+	describe( 'with --format json', () => {
+		let consoleLogSpy: ReturnType< typeof vi.spyOn >;
+
+		beforeEach( () => {
+			consoleLogSpy = vi.spyOn( console, 'log' ).mockImplementation( () => undefined );
+		} );
+
+		it( 'should output only the authenticated user’s snapshots', async () => {
+			await runCommand( mockFolder, 'json' );
+
+			expect( getSnapshotsFromConfig ).toHaveBeenCalledWith( mockAuthToken.id );
+			const json = JSON.stringify( mockSnapshots );
+			expect( consoleLogSpy ).toHaveBeenCalledWith( json );
+			expect( mockReportKeyValuePair ).toHaveBeenCalledWith( 'snapshots', json );
+		} );
+
+		it( 'should output an empty array without erroring when logged out', async () => {
+			vi.mocked( readAuthToken ).mockResolvedValue( null );
+
+			await runCommand( mockFolder, 'json' );
+
+			expect( getSnapshotsFromConfig ).not.toHaveBeenCalled();
+			expect( consoleLogSpy ).toHaveBeenCalledWith( '[]' );
+			expect( mockReportKeyValuePair ).toHaveBeenCalledWith( 'snapshots', '[]' );
+			expect( mockReportError ).not.toHaveBeenCalled();
+		} );
+	} );
+
 	it( 'should prune expired orphaned snapshots even when running without --all', async () => {
 		await runCommand( mockFolder, 'table' );