@canva/cli 1.19.0 → 1.20.0

package/templates/base/tsconfig.json

@@ -1,56 +0,0 @@
-{
-  "compilerOptions": {
-    "jsx": "react-jsx",
-    "lib": [
-      "dom",
-      "dom.iterable",
-      "es2018",
-      "es2019.array",
-      "es2019.object",
-      "es2019.string",
-      "es2020.promise",
-      "es2020.string"
-    ],
-    "types": ["node", "webpack-env", "jest"],
-    "composite": false,
-    "declaration": false,
-    "declarationMap": false,
-    "experimentalDecorators": true,
-    "importHelpers": true,
-    "noImplicitOverride": true,
-    "moduleResolution": "bundler",
-    "esModuleInterop": true,
-    "rootDir": ".",
-    "outDir": "dist",
-    "strict": true,
-    "skipLibCheck": true,
-    "target": "ES2019",
-    "sourceMap": true,
-    "inlineSources": true,
-    "module": "ESNext",
-    "noImplicitAny": true,
-    "noImplicitReturns": true,
-    "noFallthroughCasesInSwitch": true,
-    "noUncheckedIndexedAccess": true,
-    "removeComments": true,
-    "preserveConstEnums": true,
-    "allowSyntheticDefaultImports": true,
-    "baseUrl": "./",
-    "paths": {
-      "styles": ["./styles"]
-    }
-  },
-  "include": [
-    "./src/**/*",
-    "./backend/**/*",
-    "./utils/**/*",
-    "./scripts/**/*",
-    "./declarations/declarations.d.ts",
-    "./styles/**/*"
-  ],
-  "ts-node": {
-    "compilerOptions": {
-      "module": "commonjs"
-    }
-  }
-}

package/templates/base/webpack.config.ts

@@ -1,247 +0,0 @@
-import type { Configuration } from "webpack";
-import { DefinePlugin, optimize } from "webpack";
-import path from "path";
-import TerserPlugin from "terser-webpack-plugin";
-import { transform } from "@formatjs/ts-transformer";
-import chalk from "chalk";
-import { config } from "dotenv";
-import { Configuration as DevServerConfiguration } from "webpack-dev-server";
-
-config();
-
-type DevConfig = {
-  port: number;
-  enableHmr: boolean;
-  enableHttps: boolean;
-  appOrigin?: string;
-  appId?: string; // Deprecated in favour of appOrigin
-  certFile?: string;
-  keyFile?: string;
-};
-
-export function buildConfig({
-  devConfig,
-  appEntry = path.join(process.cwd(), "src", "index.tsx"),
-  backendHost = process.env.CANVA_BACKEND_HOST,
-  // For IN_HARNESS, refer to the following docs for more information: https://www.canva.dev/docs/apps/test-harness/
-  inHarness = process.env.IN_HARNESS?.toLowerCase() === "true",
-}: {
-  devConfig?: DevConfig;
-  appEntry?: string;
-  backendHost?: string;
-  inHarness?: boolean;
-} = {}): Configuration & DevServerConfiguration {
-  const mode = devConfig ? "development" : "production";
-
-  if (!backendHost) {
-    console.warn(
-      chalk.yellow.bold("BACKEND_HOST is undefined."),
-      `If your app requires a backend, refer to "Customizing the backend host" in the README.md for more information.`,
-    );
-  } else if (backendHost.includes("localhost") && mode === "production") {
-    console.error(
-      chalk.redBright.bold(
-        "BACKEND_HOST should not be set to localhost for production builds!",
-      ),
-      `Refer to "Customizing the backend host" in the README.md for more information.`,
-    );
-  }
-
-  return {
-    mode,
-    context: path.resolve(process.cwd(), "./"),
-    entry: inHarness
-      ? {
-          harness: path.join(process.cwd(), "harness", "harness.tsx"),
-          init: path.join(process.cwd(), "harness", "init.ts"),
-        }
-      : {
-          app: appEntry,
-        },
-    target: "web",
-    resolve: {
-      alias: {
-        styles: path.resolve(process.cwd(), "styles"),
-        src: path.resolve(process.cwd(), "src"),
-      },
-      extensions: [".ts", ".tsx", ".js", ".css", ".svg", ".woff", ".woff2"],
-    },
-    infrastructureLogging: {
-      level: inHarness ? "info" : "none",
-    },
-    module: {
-      rules: [
-        {
-          test: /\.tsx?$/,
-          exclude: /node_modules/,
-          use: [
-            {
-              loader: "ts-loader",
-              options: {
-                transpileOnly: true,
-                getCustomTransformers() {
-                  return {
-                    before: [
-                      transform({
-                        overrideIdFn: "[sha512:contenthash:base64:6]",
-                      }),
-                    ],
-                  };
-                },
-              },
-            },
-          ],
-        },
-        {
-          test: /\.css$/,
-          exclude: /node_modules/,
-          use: [
-            "style-loader",
-            {
-              loader: "css-loader",
-              options: {
-                modules: true,
-              },
-            },
-            {
-              loader: "postcss-loader",
-              options: {
-                postcssOptions: {
-                  plugins: [require("cssnano")({ preset: "default" })],
-                },
-              },
-            },
-          ],
-        },
-        {
-          test: /\.(png|jpg|jpeg)$/i,
-          type: "asset/inline",
-        },
-        {
-          test: /\.(woff|woff2)$/,
-          type: "asset/inline",
-        },
-        {
-          test: /\.svg$/,
-          oneOf: [
-            {
-              issuer: /\.[jt]sx?$/,
-              resourceQuery: /react/, // *.svg?react
-              use: ["@svgr/webpack", "url-loader"],
-            },
-            {
-              type: "asset/resource",
-              parser: {
-                dataUrlCondition: {
-                  maxSize: 200,
-                },
-              },
-            },
-          ],
-        },
-        {
-          test: /\.css$/,
-          include: /node_modules/,
-          use: [
-            "style-loader",
-            "css-loader",
-            {
-              loader: "postcss-loader",
-              options: {
-                postcssOptions: {
-                  plugins: [require("cssnano")({ preset: "default" })],
-                },
-              },
-            },
-          ],
-        },
-      ],
-    },
-    optimization: {
-      minimizer: [
-        new TerserPlugin({
-          terserOptions: {
-            format: {
-              // Turned on because emoji and regex is not minified properly using default
-              // https://github.com/facebook/create-react-app/issues/2488
-              ascii_only: true,
-            },
-          },
-        }),
-      ],
-    },
-    output: {
-      filename: `[name].js`,
-      path: path.resolve(process.cwd(), "dist"),
-      clean: true,
-    },
-    plugins: [
-      new DefinePlugin({
-        BACKEND_HOST: JSON.stringify(backendHost),
-      }),
-      // Apps can only submit a single JS file via the Developer Portal
-      new optimize.LimitChunkCountPlugin({ maxChunks: 1 }),
-    ].filter(Boolean),
-    ...buildDevConfig(devConfig),
-  };
-}
-
-function buildDevConfig(options?: DevConfig): {
-  devtool?: string;
-  devServer?: DevServerConfiguration;
-} {
-  if (!options) {
-    return {};
-  }
-
-  const { port, enableHmr, appOrigin, enableHttps, certFile, keyFile } =
-    options;
-  const host = "localhost";
-
-  let devServer: DevServerConfiguration = {
-    server: enableHttps
-      ? {
-          type: "https",
-          options: {
-            cert: certFile,
-            key: keyFile,
-          },
-        }
-      : "http",
-    host,
-    allowedHosts: [host],
-    historyApiFallback: {
-      rewrites: [{ from: /^\/$/, to: "/app.js" }],
-    },
-    port,
-    client: {
-      logging: "verbose",
-    },
-  };
-
-  if (enableHmr && appOrigin) {
-    devServer = {
-      ...devServer,
-      allowedHosts: [host, new URL(appOrigin).hostname],
-      headers: {
-        "Access-Control-Allow-Origin": appOrigin,
-        "Access-Control-Allow-Credentials": "true",
-        "Access-Control-Allow-Private-Network": "true",
-      },
-    };
-  } else {
-    if (enableHmr && !appOrigin) {
-      console.warn(
-        "Attempted to enable Hot Module Replacement (HMR) without configuring App Origin... Disabling HMR.",
-      );
-    }
-    devServer.webSocketServer = false;
-  }
-
-  return {
-    devtool: "source-map",
-    devServer,
-  };
-}
-
-export default buildConfig;

package/templates/common/.env.template

@@ -1,6 +0,0 @@
-CANVA_FRONTEND_PORT=8080
-CANVA_BACKEND_PORT=3001
-CANVA_BACKEND_HOST=http://localhost:3001 # TODO: replace this with your production URL before submitting your app
-CANVA_APP_ID=# TODO: Add your app's ID here to configure your backend for JWT verification
-CANVA_APP_ORIGIN=# TODO: Add your app's origin here from the "Developer Portal -> Settings -> Security" to enable HMR
-CANVA_HMR_ENABLED=FALSE # TODO: set to TRUE to enable HMR

package/templates/common/.gitignore.template

@@ -1,8 +0,0 @@
-.DS_Store
-.env
-.idea
-.ssl
-*.log*
-**/*/db.json
-dist
-node_modules

package/templates/common/.nvmrc

@@ -1 +0,0 @@
-20.10.0

package/templates/common/.prettierrc

@@ -1,21 +0,0 @@
-{
-  "arrowParens": "always",
-  "bracketSpacing": true,
-  "endOfLine": "lf",
-  "htmlWhitespaceSensitivity": "css",
-  "insertPragma": false,
-  "singleAttributePerLine": false,
-  "bracketSameLine": false,
-  "jsxSingleQuote": false,
-  "printWidth": 80,
-  "proseWrap": "preserve",
-  "quoteProps": "as-needed",
-  "requirePragma": false,
-  "semi": true,
-  "singleQuote": false,
-  "tabWidth": 2,
-  "trailingComma": "all",
-  "useTabs": false,
-  "embeddedLanguageFormatting": "auto",
-  "experimentalTernaries": false
-}

package/templates/common/LICENSE.md

@@ -1,48 +0,0 @@
-# A message from Canva
-
-By making these software components available to you, our goal is to give you
-the right to use the components to build your apps for Canva's ecosystem. See
-below for the specific licence terms that apply to your use.
-
-# Licence
-
-Canva Pty Ltd (ACN 158 929 938) ("Canva") owns the copyright in the software and
-associated documentation files to which this Licence relates (each a "Software
-Component"). Canva reserves all of its rights.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of
-the Software Components ("You"), to use the Software Components, but strictly
-subject to the following restrictions and conditions:
-
-1. You must only use the Software Components and any Derivative on the Canva
-   Platform.
-
-2. You must only use the Software Components and any Derivative for the purpose
-   of building or updating Permitted Apps, and for no other purpose.
-
-3. You must include a copy of this Licence in all copies of any Software
-   Component and Derivative.
-
-4. To the fullest extent permitted by law, the Software Components are provided
-   "as is", without warranty of any kind, express or implied, including but not
-   limited to the warranties of merchantability, fitness for a particular
-   purpose and non-infringement. To the fullest extent permitted by law, in no
-   event shall the authors or copyright holders be liable for any claim,
-   damages or other liability, whether in an action of contract, tort or
-   otherwise, arising from, out of or in connection with the Software Components
-   or any Derivative, or the use of or other dealings in the Software Components
-   or any Derivative.
-
-5. In this Licence:
-
-   (a) "Canva Platform" means the visual communications platform owned and
-   operated by Canva that is made available on Canva.com (as well as any
-   sub-domains and international versions) and via mobile applications, desktop
-   applications, and in other forms provided or made available by Canva;
-
-   (b) "Derivative" means any software, document or other material that: (i)
-   contains any Software Component; and/or (ii) comprises or contains a
-   derivative, adaptation or substantial part of any Software Component; and
-
-   (c) "Permitted App" means a software application that is solely offered to
-   end-users on the Canva Platform.

package/templates/common/README.md

@@ -1,179 +0,0 @@
-# Canva App
-
-Welcome to your Canva App! 🎉
-
-This is a starting point for your app using your chosen template. The complete documentation for the platform is at [canva.dev/docs/apps](https://www.canva.dev/docs/apps/).
-
-**Note:** This code and documentation assumes some experience with TypeScript and React.
-
-## Requirements
-
-- Node.js `v18` or `v20.10.0`
-- npm `v9` or `v10`
-
-**Note:** To make sure you're running the correct version of Node.js, we recommend using a version manager, such as [nvm](https://github.com/nvm-sh/nvm#intro). The [.nvmrc](/.nvmrc) file in the root directory of this repo will ensure the correct version is used once you run `nvm install`.
-
-## Quick start
-
-```bash
-npm install
-```
-
-## Running your Canva App
-
-### Step 1: Start the local development server
-
-To start the boilerplate's development server, run the following command:
-
-```bash
-npm start
-```
-
-The server becomes available at <http://localhost:8080>.
-
-The app's source code is in the `src/app.tsx` file.
-
-### Step 2: Preview the app
-
-The local development server only exposes a JavaScript bundle, so you can't preview an app by visiting <http://localhost:8080>. You can only preview an app via the Canva editor.
-
-To preview an app:
-
-1. Create an app via the [Developer Portal](https://www.canva.com/developers/apps).
-2. Select **App source > Development URL**.
-3. In the **Development URL** field, enter the URL of the development server.
-4. Click **Preview**. This opens the Canva editor (and the app) in a new tab.
-5. Click **Open**. (This screen only appears when using an app for the first time.)
-
-The app will appear in the side panel.
-
-<details>
-  <summary>Previewing apps in Safari</summary>
-
-By default, the development server is not HTTPS-enabled. This is convenient, as there's no need for a security certificate, but it prevents apps from being previewed in Safari.
-
-**Why Safari requires the development server to be HTTPS-enabled?**
-
-Canva itself is served via HTTPS and most browsers prevent HTTPS pages from loading scripts via non-HTTPS connections. Chrome and Firefox make exceptions for local servers, such as `localhost`, but Safari does not, so if you're using Safari, the development server must be HTTPS-enabled.
-
-To learn more, see [Loading mixed-content resources](https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content#loading_mixed-content_resources).
-
-To preview apps in Safari:
-
-1. Start the development server with HTTPS enabled:
-
-```bash
-npm start --use-https
-```
-
-2. Navigate to <https://localhost:8080>.
-3. Bypass the invalid security certificate warning:
-   1. Click **Show details**.
-   2. Click **Visit website**.
-4. In the Developer Portal, set the app's **Development URL** to <https://localhost:8080>.
-5. Click preview (or refresh your app if it's already open).
-
-You need to bypass the invalid security certificate warning every time you start the local server. A similar warning will appear in other browsers (and will need to be bypassed) whenever HTTPS is enabled.
-
-</details>
-
-### Step 3 (Optional): Enable Hot Module Replacement
-
-By default, every time you make a change to an app, you have to reload the entire app to see the results of those changes. If you enable [Hot Module Replacement](https://webpack.js.org/concepts/hot-module-replacement/) (HMR), changes will be reflected without a full reload, which significantly speeds up the development loop.
-
-**Note:** HMR does **not** work while running the development server in a Docker container.
-
-To enable HMR:
-
-1. Navigate to an app via the [Your apps](https://www.canva.com/developers/apps).
-1. Select **Security** -> **Credentials** -> **.env file**.
-1. Copy the `.env` file contents.
-1. Paste the contents into the starter kit's `.env` file. For example:
-
-   ```bash
-   CANVA_APP_ORIGIN=https://app-aabbccddeeff.canva-apps.com
-   CANVA_HMR_ENABLED=true
-   ```
-
-1. Restart the local development server.
-1. Reload the app manually to ensure that HMR takes effect.
-
-### Step 4 (Optional): Setup the Canva Dev MCP Server
-
-If you're using AI coding tools, such as Cursor or Claude Code, you can connect to the Canva Dev MCP Server to supercharge your development workflow. See this [setup guide](https://www.canva.dev/docs/apps/mcp-server/) to get started.
-
-## Running an app's backend
-
-Some templates provide an example backend. This backend is defined in the template's `backend/server.ts` file, automatically starts when the `npm start` command is run, and becomes available at <http://localhost:3001>.
-
-To run templates that have a backend:
-
-1. Navigate to the [Your apps](https://www.canva.com/developers/apps) page.
-1. Select the app you want to run the example with.
-1. Copy your environment variables from **Security** -> **Credentials** -> **.env file**.
-1. Paste the contents into the starter kit's `.env` file.
-
-   For example:
-
-   ```bash
-   CANVA_APP_ID=AABBccddeeff
-   CANVA_APP_ORIGIN=https://app-aabbccddeeff.canva-apps.com
-   CANVA_BACKEND_PORT=3001
-   CANVA_FRONTEND_PORT=8080
-   CANVA_BACKEND_HOST=http://localhost:3001
-   CANVA_HMR_ENABLED=TRUE
-   ```
-
-1. Start the app:
-
-   ```bash
-   npm start
-   ```
-
-The ID of the app must be explicitly defined because it's required to [send and verify HTTP requests](https://www.canva.dev/docs/apps/verifying-http-requests/). If you don't set up the ID in the `.env` file, an error will be thrown when attempting to run the example.
-
-## Customizing the backend host
-
-If your app has a backend, the URL of the server likely depends on whether it's a development or production build. For example, during development, the backend is probably running on a localhost URL, but once the app's in production, the backend needs to be exposed to the internet.
-
-To more easily customize the URL of the server:
-
-1. Open the `.env` file in the text editor of your choice.
-2. Set the `CANVA_BACKEND_HOST` environment variable to the URL of the server.
-3. When sending a request, use `BACKEND_HOST` as the base URL:
-
-   ```ts
-   const response = await fetch(`${BACKEND_HOST}/custom-route`);
-   ```
-
-   **Note:** `BACKEND_HOST` is a global constant that contains the value of the `CANVA_BACKEND_HOST` environment variable. The variable is made available to the app via webpack and does not need to be imported.
-
-4. Before bundling the app for production, update `CANVA_BACKEND_HOST` to point to the production backend.
-
-## Configure ngrok (optional)
-
-If your app requires authentication with a third party service, your server needs to be exposed via a publicly available URL, so that Canva can send requests to it.
-This step explains how to do this with [ngrok](https://ngrok.com/).
-
-**Note:** ngrok is a useful tool, but it has inherent security risks, such as someone figuring out the URL of your server and accessing proprietary information. Be mindful of the risks, and if you're working as part of an organization, talk to your IT department.
-You must replace ngrok urls with hosted API endpoints for production apps.
-
-To use ngrok, you'll need to do the following:
-
-1. Sign up for a ngrok account at <https://ngrok.com/>.
-2. Locate your ngrok [authtoken](https://dashboard.ngrok.com/get-started/your-authtoken).
-3. Set an environment variable for your authtoken, using the command line. Replace `<YOUR_AUTH_TOKEN>` with your actual ngrok authtoken:
-
-   For macOS and Linux:
-
-   ```bash
-   export NGROK_AUTHTOKEN=<YOUR_AUTH_TOKEN>
-   ```
-
-   For Windows PowerShell:
-
-   ```shell
-   $Env:NGROK_AUTHTOKEN = "<YOUR_AUTH_TOKEN>"
-   ```
-
-This environment variable is available for the current terminal session, so the command must be re-run for each new session. Alternatively, you can add the variable to your terminal's default parameters.

package/templates/common/jest.config.mjs

@@ -1,35 +0,0 @@
-import { pathsToModuleNameMapper } from "ts-jest";
-import tsconfig from "./tsconfig.json" with { type: "json" };
-
-const { compilerOptions } = tsconfig;
-
-/** @type {import('ts-jest').JestConfigWithTsJest} */
-
-export default {
-  preset: "ts-jest",
-  testEnvironment: "jsdom",
-  testRegex: "(/(tests|__tests__)/.*|(\\.|/)(tests))\\.tsx?$",
-  modulePathIgnorePatterns: ["./internal/", "./node_modules/"],
-  modulePaths: [compilerOptions.baseUrl],
-  moduleNameMapper: pathsToModuleNameMapper(compilerOptions.paths || {}),
-  transform: {
-    ".+\\.(css)$": "jest-css-modules-transform",
-    "^.+\\.tsx?$": [
-      "ts-jest",
-      {
-        astTransformers: {
-          before: [
-            {
-              path: "@formatjs/ts-transformer/ts-jest-integration",
-              options: {
-                overrideIdFn: "[sha512:contenthash:base64:6]",
-                ast: true,
-              },
-            },
-          ],
-        },
-      },
-    ],
-  },
-  setupFiles: ["<rootDir>/jest.setup.ts"],
-};

package/templates/common/jest.setup.ts

@@ -1,35 +0,0 @@
-// For usage information, see the README.md file.
-
-// Import Canva SDK testing utilities
-import * as asset from "@canva/asset/test";
-import * as design from "@canva/design/test";
-import * as error from "@canva/error/test";
-import * as intents from "@canva/intents/test";
-import * as platform from "@canva/platform/test";
-import * as user from "@canva/user/test";
-
-/*
-  Initialize test environments for each Canva SDK package
-  This sets up the necessary test infrastructure before mocking the actual SDK methods
-*/
-asset.initTestEnvironment();
-design.initTestEnvironment();
-error.initTestEnvironment();
-intents.initTestEnvironment();
-platform.initTestEnvironment();
-user.initTestEnvironment();
-
-/*
-  Mock all Canva SDK packages except @canva/error
-  This allows tests to run without making real API calls to Canva's services
-*/
-jest.mock("@canva/asset");
-jest.mock("@canva/design");
-jest.mock("@canva/intents");
-jest.mock("@canva/platform");
-jest.mock("@canva/user");
-/*
-  Important: @canva/error should not be mocked
-  Use it to simulate API error responses from other mocks by throwing CanvaError instances
-  This allows testing of error handling scenarios
-*/