@cimplify/cli 0.15.2 → 0.16.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cimplify Technologies LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -17,7 +17,7 @@ Override the destination with `--prefix`, pin a version with `--version cli-v0.1
 ```bash
 cimplify init my-store --template restaurant   # scaffold a working storefront
 cimplify login                                  # browser PKCE flow (or --api-key for CI)
-cimplify projects create my-store               # create a Cimplify project + Freestyle repo
+cimplify projects create my-store               # create a Cimplify project + managed repo
 cimplify link <project-id>                      # bind the current directory to a project
 cimplify deploy [--prod]                        # push HEAD + build + deploy
 cimplify logs --follow                          # stream build logs
@@ -43,7 +43,7 @@ cimplify lint --fix --format json               # safe fixes + stable machine-re
 
 Every cloud command is a thin HTTP client over `https://api.cimplify.io` (override with `CIMPLIFY_CLI_API_URL` — not `CIMPLIFY_API_URL`, which is the SDK's storefront-API variable). The deploy flow specifically:
 
-1. `git push` to the project's git remote (uses a short-TTL token minted by Cimplify when the remote is Freestyle-hosted; falls back to your existing git auth otherwise).
+1. `git push` to the project's git remote (uses a short-TTL token minted by Cimplify when the remote is the managed code.storage host; falls back to your existing git auth otherwise).
 2. `POST /v1/businesses/<bid>/projects/<pid>/deploy` with the local SHA.
 3. Poll `/deployments/<id>/progress` every 1 second, printing log chunks as they arrive.
 4. Exit 0 on `active`, 2 on `superseded`, 1 on `failed` / `cancelled`.

package/dist/add-SXC6RUPQ.mjs

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+import { contentRemoteFromEnv } from './chunk-RP66A52P.mjs';
+import { contentDirectory, parseLibraryVersion, variantFor, richerVariants, requireInteractiveProject } from './chunk-CPBESPWK.mjs';
+import './chunk-VHK7WBO3.mjs';
+import './chunk-5HP2INMY.mjs';
+import './chunk-JKECUAAV.mjs';
+import { isItemReference, MANIFEST_FILE, parseManifest, LOCKFILE, parseLockfile, currentLockfile, serializeLockfile, withContent } from './chunk-T4MW3PD4.mjs';
+import './chunk-KQNZKV6E.mjs';
+import './chunk-ZUCDXRFI.mjs';
+import './chunk-EYEMPIMP.mjs';
+import './chunk-AKACUJ3W.mjs';
+import { sha256 } from './chunk-25ZPFHLF.mjs';
+import './chunk-SGT5IJVW.mjs';
+import { parseArgs, flagString } from './chunk-XQAHREKO.mjs';
+import './chunk-CLQYPTJ2.mjs';
+import './chunk-TT4YI33G.mjs';
+import { CliError, CLI_ERROR_CODE, info, dim, success, result } from './chunk-KOD4GBQ5.mjs';
+import { promises, existsSync } from 'fs';
+import path from 'path';
+
+var USAGE = "usage: cimplify add <owner>/<item>[@<range>] [more items] [--licence free|free_attribution] [--group <asset group>]";
+var RANGE_SEPARATOR = "@";
+var ANY_RANGE = "*";
+var FREE_LICENCES = ["free", "free_attribution"];
+function parseAddRequests(positional) {
+  if (positional.length === 0) throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, USAGE);
+  return positional.map((raw) => {
+    const at = raw.indexOf(RANGE_SEPARATOR);
+    const item = at < 0 ? raw : raw.slice(0, at);
+    const range = at < 0 ? ANY_RANGE : raw.slice(at + 1);
+    if (!isItemReference(item) || range.length === 0) {
+      throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `'${raw}' is not a Workshop reference; ${USAGE}`);
+    }
+    return { item, range };
+  });
+}
+function chooseOffer(version, wanted) {
+  if (wanted !== null) {
+    const offer = version.offers.find((o) => o.kind === wanted);
+    if (offer === void 0) {
+      throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `${version.item} is not offered under the ${wanted} licence; it offers ${version.offers.map((o) => o.kind).join(", ")}`);
+    }
+    if (!FREE_LICENCES.includes(offer.kind)) {
+      throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `${version.item} under ${offer.kind} is bought on Workshop; buying from the CLI is not open yet`);
+    }
+    return offer;
+  }
+  for (const kind of FREE_LICENCES) {
+    const offer = version.offers.find((o) => o.kind === kind);
+    if (offer !== void 0) return offer;
+  }
+  throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `${version.item} has no free licence; get it on Workshop first`);
+}
+function contentBlock(request, version, group) {
+  const pinned = request.range === ANY_RANGE ? `^${version}` : request.range;
+  const groupLine = group === null ? "" : `group = ${JSON.stringify(group)}
+`;
+  return `
+[[content]]
+item = ${JSON.stringify(request.item)}
+version = ${JSON.stringify(pinned)}
+${groupLine}`;
+}
+async function download(remote, dir, digest) {
+  const target = path.join(dir, digest);
+  if (existsSync(target)) {
+    const cached = await promises.readFile(target);
+    if (sha256(cached) === digest) return cached;
+  }
+  const bytes = await remote.blob(digest);
+  await promises.writeFile(target, bytes);
+  return bytes;
+}
+async function addContent(root, remote, requests, options) {
+  const manifestPath = path.join(root, MANIFEST_FILE);
+  const manifestText = await promises.readFile(manifestPath, "utf8");
+  const parsed = parseManifest(manifestText, MANIFEST_FILE);
+  if (parsed.manifest === null) {
+    throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `${MANIFEST_FILE} has errors; run cimplify build to see them`);
+  }
+  const manifest = parsed.manifest;
+  if (options.group !== null && !manifest.delivery.groups.some((g) => g.name === options.group)) {
+    throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `--group ${options.group} is not one of the [[delivery.groups]]`);
+  }
+  const lockPath = path.join(root, LOCKFILE);
+  const lock = existsSync(lockPath) ? parseLockfile(await promises.readFile(lockPath, "utf8")).lockfile : currentLockfile();
+  if (lock === null) throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `${LOCKFILE} has errors; fix it before adding content`);
+  const resolved = await remote.resolve(requests.map((r) => ({ item: r.item, range: r.range })));
+  const dir = contentDirectory(root);
+  await promises.mkdir(dir, { recursive: true });
+  const added = [];
+  let downloaded = 0;
+  for (const version of resolved) {
+    const offer = chooseOffer(version, version.requested ? options.licence : null);
+    const manifestBytes = await download(remote, dir, version.version_digest);
+    const library = parseLibraryVersion(manifestBytes);
+    if (library === null || library.item !== version.item) {
+      throw new CliError(CLI_ERROR_CODE.NETWORK_ERROR, `Workshop returned a damaged version manifest for ${version.item}`);
+    }
+    const variant = variantFor(library, manifest.delivery.minDeviceTier);
+    const wanted = [...variant?.files ?? []];
+    if (manifest.delivery.tierGroups === true) {
+      for (const [, richer] of richerVariants(library, manifest.delivery.minDeviceTier)) wanted.push(...richer.files);
+    }
+    const fetched = /* @__PURE__ */ new Set();
+    for (const file of wanted) {
+      if (fetched.has(file.chunk)) continue;
+      fetched.add(file.chunk);
+      await download(remote, dir, file.chunk);
+      downloaded += 1;
+    }
+    added.push({ item: version.item, version: version.version, versionDigest: version.version_digest, licence: offer.kind, terms: offer.terms });
+  }
+  await promises.writeFile(lockPath, serializeLockfile(withContent(lock, added)));
+  const listed = new Set((manifest.content ?? []).map((c) => c.item));
+  let appended = manifestText.endsWith("\n") ? manifestText : `${manifestText}
+`;
+  for (const request of requests) {
+    if (listed.has(request.item)) continue;
+    const version = resolved.find((v) => v.item === request.item);
+    appended += contentBlock(request, version?.version ?? "0.0.0", options.group);
+  }
+  if (appended !== manifestText) await promises.writeFile(manifestPath, appended);
+  return { added, downloaded };
+}
+async function run(argv) {
+  const args = parseArgs(argv);
+  const requests = parseAddRequests(args.positional);
+  const root = process.cwd();
+  requireInteractiveProject(root, "add");
+  const outcome = await addContent(root, await contentRemoteFromEnv(), requests, {
+    licence: flagString(args, "licence") ?? null,
+    group: flagString(args, "group") ?? null
+  });
+  for (const entry of outcome.added) info(`${entry.item} ${entry.version} ${dim(`(${entry.licence})`)}`);
+  success(`Added ${outcome.added.length} Workshop item${outcome.added.length === 1 ? "" : "s"}; ${outcome.downloaded} chunk${outcome.downloaded === 1 ? "" : "s"} cached in .cimplify/content`);
+  result(outcome);
+}
+
+export { addContent, run as default, parseAddRequests };

package/dist/{add-KRIIKAS4.mjs → add-XQVQLD3F.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { promptYesNo } from './chunk-TH4XENKH.mjs';
-import { REGISTRY_INDEX, REGISTRY } from './chunk-ARIDYKLO.mjs';
-import { parseArgs, flagString, flagBool } from './chunk-5KYR6WJB.mjs';
-import { CliError, CLI_ERROR_CODE, info, bold, dim, success, result, yellow } from './chunk-3QUK5BPY.mjs';
+import { promptYesNo } from './chunk-I4HNHPEM.mjs';
+import { REGISTRY_INDEX, REGISTRY } from './chunk-MEM3MDV4.mjs';
+import { parseArgs, flagString, flagBool } from './chunk-XQAHREKO.mjs';
+import { CliError, CLI_ERROR_CODE, info, bold, dim, success, result, yellow } from './chunk-KOD4GBQ5.mjs';
 import { mkdirSync, existsSync, writeFileSync } from 'fs';
 import { resolve, join, dirname } from 'path';
 

package/dist/ai-NQH5L4I6.mjs

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+export { run as default, describeEvent, describeTurnLines, reportOutcome } from './chunk-7PQL7E7K.mjs';
+import './chunk-NY4YT7O6.mjs';
+import './chunk-CPBESPWK.mjs';
+import './chunk-VHK7WBO3.mjs';
+import './chunk-5HP2INMY.mjs';
+import './chunk-JKECUAAV.mjs';
+import './chunk-T4MW3PD4.mjs';
+import './chunk-KQNZKV6E.mjs';
+import './chunk-ZUCDXRFI.mjs';
+import './chunk-EYEMPIMP.mjs';
+import './chunk-AKACUJ3W.mjs';
+import './chunk-25ZPFHLF.mjs';
+import './chunk-SGT5IJVW.mjs';
+import './chunk-XQAHREKO.mjs';
+import './chunk-TT4YI33G.mjs';
+import './chunk-KOD4GBQ5.mjs';

package/dist/{assets-CWB72PZG.mjs → assets-FZGVOQXH.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { parseArgs, flagString, flagBool } from './chunk-5KYR6WJB.mjs';
-import { ApiClient } from './chunk-NYXA6X56.mjs';
-import { readAuth } from './chunk-MLE4MVYC.mjs';
-import { CliError, CLI_ERROR_CODE, step, yellow, dim, success, info, result, bold, green } from './chunk-3QUK5BPY.mjs';
+import { parseArgs, flagString, flagBool } from './chunk-XQAHREKO.mjs';
+import { ApiClient } from './chunk-CLQYPTJ2.mjs';
+import { readAuth } from './chunk-TT4YI33G.mjs';
+import { CliError, CLI_ERROR_CODE, step, yellow, dim, success, info, result, bold, green } from './chunk-KOD4GBQ5.mjs';
 import { createHash } from 'crypto';
 import { promises } from 'fs';
 import path from 'path';
@@ -60,6 +60,7 @@ function mimeOf(filename) {
   const ext = path.extname(filename).toLowerCase();
   return MIME_BY_EXT[ext] ?? CONTENT_TYPE_FALLBACK;
 }
+var CONTENT_SHA256_HEADER = "x-amz-checksum-sha256";
 function sha256Hex(buf) {
   return createHash("sha256").update(buf).digest("hex");
 }
@@ -138,12 +139,16 @@ async function runUpload(args) {
       folder: subfolder,
       filename,
       content_type: contentType,
-      size_bytes: buf.byteLength
+      size_bytes: buf.byteLength,
+      content_sha256: hash
     });
     step(`${dim("\u2192")}    ${keyForManifest} ${dim(`(${buf.byteLength} bytes)`)}`);
     const putRes = await fetch(init.upload_url, {
       method: "PUT",
-      headers: { "content-type": contentType },
+      headers: {
+        "content-type": contentType,
+        [CONTENT_SHA256_HEADER]: Buffer.from(hash, "hex").toString("base64")
+      },
       body: buf
     });
     if (!putRes.ok) {
@@ -254,4 +259,4 @@ async function runRm(args) {
   result({ removed_upload_id: uploadId, removed_key: resolvedKey });
 }
 
-export { run as default, endpointAsset, endpointConfirm, endpointInit, endpointList, mimeOf, readManifest, sha256Hex, walkFiles, writeManifest };
+export { CONTENT_SHA256_HEADER, run as default, endpointAsset, endpointConfirm, endpointInit, endpointList, mimeOf, readManifest, sha256Hex, walkFiles, writeManifest };

package/dist/{auth-step-up-Z6KOTTV7.mjs → auth-step-up-67LCPDNL.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { startLoopbackServer, generateState, generatePkcePair, openBrowser } from './chunk-DMLQBAGC.mjs';
-import { parseArgs, flagString, flagBool } from './chunk-5KYR6WJB.mjs';
-import { resolveBaseUrl, ApiClient } from './chunk-NYXA6X56.mjs';
-import { readAuth, writeStepUp } from './chunk-MLE4MVYC.mjs';
-import { isJsonMode, CliError, CLI_ERROR_CODE, step, info, dim, success, result } from './chunk-3QUK5BPY.mjs';
+import { startLoopbackServer, generateState, generatePkcePair, openBrowser } from './chunk-EOO4UOQD.mjs';
+import { parseArgs, flagString, flagBool } from './chunk-XQAHREKO.mjs';
+import { resolveBaseUrl, ApiClient } from './chunk-CLQYPTJ2.mjs';
+import { readAuth, writeStepUp } from './chunk-TT4YI33G.mjs';
+import { isJsonMode, CliError, CLI_ERROR_CODE, step, info, dim, success, result } from './chunk-KOD4GBQ5.mjs';
 
 // src/commands/auth-step-up.ts
 var FLAG_NO_BROWSER = "no-browser";