@cimplify/cli 0.3.0 → 0.4.0

package/dist/login-3OD4ND2H.mjs

@@ -0,0 +1,153 @@
+#!/usr/bin/env node
+import { generatePkcePair, generateState, startLoopbackServer, openBrowser } from './chunk-GLXONXS3.mjs';
+import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
+import { resolveBaseUrl, ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { writeAuth } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, success, result, isJsonMode, step, info, dim } from './chunk-E2T2SBP5.mjs';
+import os from 'os';
+
+var FLAG_API_KEY = "api-key";
+var FLAG_BASE_URL = "base-url";
+var FLAG_NO_BROWSER = "no-browser";
+var FLAG_SCOPE = "scope";
+var VALID_CLI_SCOPES = /* @__PURE__ */ new Set([
+  "cli:read",
+  "cli:write",
+  "cli:deploy",
+  "cli:admin"
+]);
+var ENDPOINT_AUTH_ME = "/v1/auth/me";
+var ENDPOINT_CLI_START = "/v1/auth/cli/start";
+var ENDPOINT_CLI_TOKEN = "/v1/auth/cli/token";
+var KEY_PREFIX_CAK = "cak_";
+var KEY_PREFIX_CSK = "csk_";
+var PRODUCT_NAME = "cimplify-cli";
+async function run(argv) {
+  const args = parseArgs(argv);
+  const baseUrl = resolveBaseUrl(flagString(args, FLAG_BASE_URL));
+  const explicitKey = flagString(args, FLAG_API_KEY);
+  if (explicitKey) {
+    await loginWithKey(baseUrl, explicitKey);
+    return;
+  }
+  const scopes = parseScopeFlag(flagString(args, FLAG_SCOPE));
+  await loginWithBrowser(baseUrl, flagBool(args, FLAG_NO_BROWSER), scopes);
+}
+function parseScopeFlag(raw) {
+  if (!raw) return [];
+  const items = raw.split(",").map((s) => s.trim()).filter(Boolean);
+  for (const s of items) {
+    if (!VALID_CLI_SCOPES.has(s)) {
+      throw new CliError(
+        CLI_ERROR_CODE.INVALID_INPUT,
+        `Unknown scope "${s}". Valid: ${Array.from(VALID_CLI_SCOPES).join(", ")}.`
+      );
+    }
+  }
+  return items;
+}
+async function loginWithKey(baseUrl, apiKey) {
+  if (!apiKey.startsWith(KEY_PREFIX_CAK) && !apiKey.startsWith(KEY_PREFIX_CSK)) {
+    throw new CliError(
+      CLI_ERROR_CODE.INVALID_INPUT,
+      `API key must start with "${KEY_PREFIX_CAK}" or "${KEY_PREFIX_CSK}".`
+    );
+  }
+  const client = ApiClient.withKey(apiKey, baseUrl);
+  const me = await client.get(ENDPOINT_AUTH_ME);
+  await writeAuth({
+    apiKey,
+    apiBaseUrl: baseUrl,
+    accountId: me.id,
+    businessId: me.business_id,
+    email: me.email,
+    name: me.name,
+    savedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  success(`Logged in as ${me.email ?? me.name ?? me.id} (business ${me.business_id})`);
+  result({
+    logged_in: true,
+    account: { id: me.id, email: me.email ?? null, name: me.name ?? null },
+    business: { id: me.business_id },
+    method: "api_key"
+  });
+}
+async function loginWithBrowser(baseUrl, noBrowser, requestedScopes) {
+  if (isJsonMode()) {
+    throw new CliError(
+      CLI_ERROR_CODE.INTERACTIVE_REQUIRED,
+      "browser login is not supported in --json mode",
+      { remediation: "pass --api-key dk_\u2026 (create one in the dashboard or via `cimplify auth keys create`)" }
+    );
+  }
+  const pkce = generatePkcePair();
+  const state = generateState();
+  const loopback = await startLoopbackServer(baseUrl);
+  const startBody = {
+    code_challenge: pkce.codeChallenge,
+    code_challenge_method: pkce.codeChallengeMethod,
+    redirect_uri: loopback.redirectUri,
+    state,
+    client_meta: {
+      hostname: os.hostname(),
+      platform: process.platform,
+      arch: process.arch,
+      node_version: process.version,
+      product: PRODUCT_NAME
+    },
+    requested_scopes: requestedScopes
+  };
+  const unauthClient = ApiClient.unauthenticated(baseUrl);
+  const startResponse = await unauthClient.post(
+    ENDPOINT_CLI_START,
+    startBody
+  );
+  step("Opening browser to authorize this CLI...");
+  info(dim(startResponse.approval_url));
+  if (!noBrowser) {
+    openBrowser(startResponse.approval_url);
+  } else {
+    info("");
+    info(dim("Open the URL above in any browser to continue."));
+  }
+  let callback;
+  try {
+    callback = await loopback.awaitCallback(startResponse.expires_in_secs * 1e3);
+  } catch (err) {
+    loopback.close();
+    throw err;
+  }
+  if (callback.state !== state) {
+    throw new CliError(
+      CLI_ERROR_CODE.UNAUTHORIZED,
+      "OAuth state mismatch. Possible CSRF attempt \u2014 try again."
+    );
+  }
+  if (!callback.code) {
+    throw new CliError(
+      CLI_ERROR_CODE.UNAUTHORIZED,
+      "Login callback missing auth_code."
+    );
+  }
+  const token = await unauthClient.post(ENDPOINT_CLI_TOKEN, {
+    auth_code: callback.code,
+    code_verifier: pkce.codeVerifier,
+    redirect_uri: loopback.redirectUri
+  });
+  await writeAuth({
+    apiKey: token.access_token,
+    apiBaseUrl: baseUrl,
+    accountId: token.account_id,
+    businessId: token.business_id,
+    savedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  success(`Logged in (business ${token.business_id})`);
+  result({
+    logged_in: true,
+    account: { id: token.account_id, email: null, name: null },
+    business: { id: token.business_id },
+    method: "oauth_pkce"
+  });
+}
+
+export { run as default };

package/dist/{logout-DJDINVDF.mjs → logout-3RLBZ33M.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { clearAuth } from './chunk-LS2VTSMQ.mjs';
-import { success, info, result } from './chunk-I3XQSSOT.mjs';
+import { clearAuth } from './chunk-UBAI443T.mjs';
+import { success, info, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/logout.ts
 async function run(_argv) {

package/dist/{logs-KUKGEXR2.mjs → logs-YNN2PQ24.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { TERMINAL_DEPLOYMENT_STATUSES } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink, readProjectState } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, isJsonMode, failure, result, red } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink, readProjectState } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, isJsonMode, failure, result, red } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/logs.ts
 var FLAG_DEPLOYMENT = "deployment";

package/dist/{projects-364HGWHO.mjs → projects-JSEC2YCX.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { REPO_PROVIDER } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/projects.ts
 var SUB_LS = "ls";

package/dist/repo-WOBWKEAO.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+export { run as default, fetchCloneToken } from './chunk-R3FDBXR6.mjs';
+import './chunk-ITAFAORS.mjs';
+import './chunk-MXYUAJEW.mjs';
+import './chunk-C4M3DXKC.mjs';
+import './chunk-MAOO6ZZ5.mjs';
+import './chunk-UBAI443T.mjs';
+import './chunk-E2T2SBP5.mjs';

package/dist/{rollback-5YALPQXL.mjs → rollback-DD4RNRFM.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { pollDeployment } from './chunk-MOZQODQS.mjs';
+import { pollDeployment } from './chunk-VTR5R5NQ.mjs';
 import { DEPLOYMENT_STATUS, DEPLOY_TRIGGER } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink, writeProjectState } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, step, success, info, dim, result, EXIT_CODE } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink, writeProjectState } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, step, success, info, dim, result, EXIT_CODE } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/rollback.ts
 var FLAG_NO_POLL = "no-poll";

package/dist/{status-W4HW3CX3.mjs → status-JSYXM5RT.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { DEPLOYMENT_STATUS } from './chunk-MXYUAJEW.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink, readProjectState } from './chunk-LS2VTSMQ.mjs';
-import { bold, dim, info, result } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink, readProjectState } from './chunk-UBAI443T.mjs';
+import { bold, dim, info, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/status.ts
 var QUERY_LIMIT = "limit";

package/dist/{unlink-HIIW57OO.mjs → unlink-RFK74SFP.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { clearProjectLink } from './chunk-LS2VTSMQ.mjs';
-import { success, info, result } from './chunk-I3XQSSOT.mjs';
+import { clearProjectLink } from './chunk-UBAI443T.mjs';
+import { success, info, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/unlink.ts
 async function run(_argv) {

package/dist/{update-5MRKRVZC.mjs → update-EDTG73FK.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-YQVMG62Z.mjs';
-import { promptYesNo } from './chunk-RZQTHTXX.mjs';
+import { package_default } from './chunk-ASZVWVMM.mjs';
+import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
-import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-I3XQSSOT.mjs';
+import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-E2T2SBP5.mjs';
 import { spawn } from 'child_process';
 import { basename, dirname } from 'path';
 

package/dist/{whoami-LACWBSNL.mjs → whoami-DNZ7RUTH.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth } from './chunk-LS2VTSMQ.mjs';
-import { info, bold, dim, result } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth } from './chunk-UBAI443T.mjs';
+import { info, bold, dim, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/whoami.ts
 var ENDPOINT_AUTH_ME = "/v1/auth/me";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cimplify/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Cimplify CLI — deploy, manage env vars, link projects, and scaffold storefronts",
   "keywords": [
     "cimplify",