@cimplify/cli 0.3.1 → 0.5.0

package/dist/{deploy-UKOOPJAE.mjs → deploy-3IFXUWPM.mjs}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { pollDeployment } from './chunk-MOZQODQS.mjs';
-import { gitDetectRoot, gitStatusPorcelain, gitCurrentBranch, gitCurrentSha, gitGetRemoteUrl, isFreestyleRemote, gitPushToUrl, gitPush } from './chunk-RRY3NEZZ.mjs';
-import { fetchCloneToken } from './chunk-QGBXGDA5.mjs';
-import { promptYesNo } from './chunk-RZQTHTXX.mjs';
+import { pollDeployment } from './chunk-VTR5R5NQ.mjs';
+import { gitDetectRoot, gitStatusPorcelain, gitCurrentBranch, gitCurrentSha, gitGetRemoteUrl, isFreestyleRemote, gitPushToUrl, gitPush } from './chunk-K5464A3L.mjs';
+import { fetchCloneToken } from './chunk-R3FDBXR6.mjs';
+import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { TOKEN_PURPOSE, ENV_SCOPE, DEPLOY_TRIGGER, DEPLOYMENT_STATUS } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink, writeProjectState } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, step, info, dim, success, result, EXIT_CODE } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink, writeProjectState } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, step, info, dim, success, result, EXIT_CODE } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/deploy.ts
 var FLAG_PROD = "prod";

package/dist/{dev-FD4PM3UD.mjs → dev-ONW2S77K.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { parseEnvFile, formatEnvFile } from './chunk-YI7UMMM7.mjs';
+import { parseEnvFile, formatEnvFile } from './chunk-DBZ3UOQ2.mjs';
 import { ENV_SCOPE, PUBLIC_ENV_PREFIX } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink } from './chunk-LS2VTSMQ.mjs';
-import { info, CliError, CLI_ERROR_CODE, dim } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
+import { info, CliError, CLI_ERROR_CODE, dim } from './chunk-E2T2SBP5.mjs';
 import { spawn } from 'child_process';
 import { promises } from 'fs';
 import path from 'path';

package/dist/dispatcher.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { TEMPLATES } from './chunk-42PFJBC6.mjs';
-import { package_default } from './chunk-IQJ45AK3.mjs';
+import { TEMPLATES } from './chunk-Z5DEA7YM.mjs';
+import { package_default } from './chunk-DCWHOH2S.mjs';
 
 // src/dispatcher.ts
 var VERSION = package_default.version ?? "unknown";
@@ -121,28 +121,32 @@ Need the mock storefront server? It ships with @cimplify/sdk:
   bunx @cimplify/sdk mock [flags]            Boot the local Cimplify API mock
 `;
 var COMMANDS = {
-  login: () => import('./login-7O7ZXKU3.mjs'),
-  logout: () => import('./logout-DJDINVDF.mjs'),
-  whoami: () => import('./whoami-LACWBSNL.mjs'),
-  projects: () => import('./projects-364HGWHO.mjs'),
-  link: () => import('./link-X3E4UZBF.mjs'),
-  unlink: () => import('./unlink-HIIW57OO.mjs'),
-  deploy: () => import('./deploy-UKOOPJAE.mjs'),
-  rollback: () => import('./rollback-5YALPQXL.mjs'),
-  env: () => import('./env-EVMYQUIK.mjs'),
-  domains: () => import('./domains-JQMV6GAP.mjs'),
-  logs: () => import('./logs-KUKGEXR2.mjs'),
-  status: () => import('./status-W4HW3CX3.mjs'),
-  dev: () => import('./dev-FD4PM3UD.mjs'),
-  introspect: () => import('./introspect-MNTC26UY.mjs'),
-  doctor: () => import('./doctor-AY7VDIJZ.mjs'),
-  explain: () => import('./explain-QZVAK5I3.mjs'),
-  assets: () => import('./assets-DMK2QOPD.mjs'),
-  repo: () => import('./repo-26N2CHF6.mjs'),
-  list: () => import('./list-TEQ73IR7.mjs'),
-  add: () => import('./add-OUMIT4YX.mjs'),
-  update: () => import('./update-2DCENLHM.mjs'),
-  upgrade: () => import('./update-2DCENLHM.mjs')
+  login: () => import('./login-3OD4ND2H.mjs'),
+  logout: () => import('./logout-3RLBZ33M.mjs'),
+  whoami: () => import('./whoami-DNZ7RUTH.mjs'),
+  projects: () => import('./projects-JSEC2YCX.mjs'),
+  link: () => import('./link-DZSILT5N.mjs'),
+  unlink: () => import('./unlink-RFK74SFP.mjs'),
+  deploy: () => import('./deploy-3IFXUWPM.mjs'),
+  rollback: () => import('./rollback-DD4RNRFM.mjs'),
+  env: () => import('./env-7ISJ73YI.mjs'),
+  domains: () => import('./domains-AHH56CL7.mjs'),
+  logs: () => import('./logs-YNN2PQ24.mjs'),
+  status: () => import('./status-JSYXM5RT.mjs'),
+  dev: () => import('./dev-ONW2S77K.mjs'),
+  introspect: () => import('./introspect-KID4YJYV.mjs'),
+  doctor: () => import('./doctor-DGO3UAJB.mjs'),
+  explain: () => import('./explain-IJLIQUYJ.mjs'),
+  assets: () => import('./assets-EBEMMENZ.mjs'),
+  repo: () => import('./repo-WOBWKEAO.mjs'),
+  list: () => import('./list-5PMRTZV3.mjs'),
+  add: () => import('./add-MX4655EX.mjs'),
+  update: () => import('./update-64K4Z3SF.mjs'),
+  upgrade: () => import('./update-64K4Z3SF.mjs'),
+  "auth-step-up": () => import('./auth-step-up-BIUYQJP6.mjs')
+};
+var COMMAND_PREFIXES = {
+  auth: { "step-up": "auth-step-up" }
 };
 var GLOBAL_FLAGS = /* @__PURE__ */ new Set(["--json", "--yes", "-y"]);
 function extractGlobalFlags(argv) {
@@ -180,12 +184,21 @@ async function main() {
   if (TOP_LEVEL_FLAGS.has(maybeSub)) {
     return await runDispatcherFlag(maybeSub, cleaned.json);
   }
-  const sub = maybeSub;
-  const args = rest;
+  let sub = maybeSub;
+  let args = rest;
   if (sub === "init") {
     await runInit(args);
     return;
   }
+  const prefixMap = COMMAND_PREFIXES[sub];
+  if (prefixMap && args.length > 0) {
+    const sub2 = args[0];
+    const mapped = prefixMap[sub2];
+    if (mapped) {
+      sub = mapped;
+      args = args.slice(1);
+    }
+  }
   const loader = COMMANDS[sub];
   if (!loader) {
     console.error(`cimplify: unknown command "${sub}"`);

package/dist/{doctor-AY7VDIJZ.mjs → doctor-DGO3UAJB.mjs}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import { gatherIntrospection } from './chunk-I6P3I2YJ.mjs';
-import './chunk-RRY3NEZZ.mjs';
-import './chunk-YI7UMMM7.mjs';
-import './chunk-IQJ45AK3.mjs';
+import { gatherIntrospection } from './chunk-AY23RQE6.mjs';
+import './chunk-K5464A3L.mjs';
+import './chunk-DBZ3UOQ2.mjs';
+import './chunk-DCWHOH2S.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuthOrNull } from './chunk-LS2VTSMQ.mjs';
-import { bold, dim, info, result, isCliError, CLI_ERROR_CODE, red, yellow, green } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuthOrNull } from './chunk-UBAI443T.mjs';
+import { bold, dim, info, result, isCliError, CLI_ERROR_CODE, red, yellow, green } from './chunk-E2T2SBP5.mjs';
 import { promises } from 'fs';
 import path from 'path';
 
@@ -200,7 +200,7 @@ async function runRemoteChecks(snapshot, auth) {
   let authValid;
   try {
     const me = await client.get(ENDPOINT_AUTH_ME);
-    const env = auth.apiKey.startsWith("dk_test_") || auth.apiKey.startsWith("sk_test_") ? "test" : "live";
+    const env = auth.apiKey.includes("_test_") ? "test" : "live";
     authValid = ok("auth_valid", `${env} token \xB7 business ${me.business_id}`);
   } catch (err) {
     if (isCliError(err) && err.code === CLI_ERROR_CODE.AUTH_FAILED) {

package/dist/{domains-JQMV6GAP.mjs → domains-AHH56CL7.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { promptYesNo } from './chunk-RZQTHTXX.mjs';
+import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { ENV_SCOPE, DOMAIN_TYPE } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/domains.ts
 var SUB_LS = "ls";

package/dist/{env-EVMYQUIK.mjs → env-7ISJ73YI.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { formatEnvFile, parseEnvFile, parseKeyValueArg } from './chunk-YI7UMMM7.mjs';
-import { promptYesNo } from './chunk-RZQTHTXX.mjs';
+import { formatEnvFile, parseEnvFile, parseKeyValueArg } from './chunk-DBZ3UOQ2.mjs';
+import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { ENV_SCOPE, PUBLIC_ENV_PREFIX, SECRET_MASK } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-E2T2SBP5.mjs';
 import { promises } from 'fs';
 import path from 'path';
 

package/dist/{explain-QZVAK5I3.mjs → explain-IJLIQUYJ.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-IQJ45AK3.mjs';
+import { package_default } from './chunk-DCWHOH2S.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
-import { bold, dim, info, result, CliError, CLI_ERROR_CODE } from './chunk-I3XQSSOT.mjs';
+import { bold, dim, info, result, CliError, CLI_ERROR_CODE } from './chunk-E2T2SBP5.mjs';
 
 // src/embedded-docs.ts
 var TOPICS = [

package/dist/introspect-KID4YJYV.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-AY23RQE6.mjs';
+import './chunk-K5464A3L.mjs';
+import './chunk-DBZ3UOQ2.mjs';
+import './chunk-DCWHOH2S.mjs';
+import './chunk-C4M3DXKC.mjs';
+import './chunk-UBAI443T.mjs';
+import './chunk-E2T2SBP5.mjs';

package/dist/{link-X3E4UZBF.mjs → link-DZSILT5N.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, writeProjectLink } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, success, info, dim, result } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, writeProjectLink } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, success, info, dim, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/link.ts
 function projectEndpoint(businessId, projectId) {

package/dist/{list-TEQ73IR7.mjs → list-5PMRTZV3.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { REGISTRY_INDEX } from './chunk-42PFJBC6.mjs';
+import { REGISTRY_INDEX } from './chunk-Z5DEA7YM.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { CliError, CLI_ERROR_CODE, info, bold, dim, green, result } from './chunk-I3XQSSOT.mjs';
+import { CliError, CLI_ERROR_CODE, info, bold, dim, green, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/list.ts
 async function run(argv) {

package/dist/login-3OD4ND2H.mjs

@@ -0,0 +1,153 @@
+#!/usr/bin/env node
+import { generatePkcePair, generateState, startLoopbackServer, openBrowser } from './chunk-GLXONXS3.mjs';
+import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
+import { resolveBaseUrl, ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { writeAuth } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, success, result, isJsonMode, step, info, dim } from './chunk-E2T2SBP5.mjs';
+import os from 'os';
+
+var FLAG_API_KEY = "api-key";
+var FLAG_BASE_URL = "base-url";
+var FLAG_NO_BROWSER = "no-browser";
+var FLAG_SCOPE = "scope";
+var VALID_CLI_SCOPES = /* @__PURE__ */ new Set([
+  "cli:read",
+  "cli:write",
+  "cli:deploy",
+  "cli:admin"
+]);
+var ENDPOINT_AUTH_ME = "/v1/auth/me";
+var ENDPOINT_CLI_START = "/v1/auth/cli/start";
+var ENDPOINT_CLI_TOKEN = "/v1/auth/cli/token";
+var KEY_PREFIX_CAK = "cak_";
+var KEY_PREFIX_CSK = "csk_";
+var PRODUCT_NAME = "cimplify-cli";
+async function run(argv) {
+  const args = parseArgs(argv);
+  const baseUrl = resolveBaseUrl(flagString(args, FLAG_BASE_URL));
+  const explicitKey = flagString(args, FLAG_API_KEY);
+  if (explicitKey) {
+    await loginWithKey(baseUrl, explicitKey);
+    return;
+  }
+  const scopes = parseScopeFlag(flagString(args, FLAG_SCOPE));
+  await loginWithBrowser(baseUrl, flagBool(args, FLAG_NO_BROWSER), scopes);
+}
+function parseScopeFlag(raw) {
+  if (!raw) return [];
+  const items = raw.split(",").map((s) => s.trim()).filter(Boolean);
+  for (const s of items) {
+    if (!VALID_CLI_SCOPES.has(s)) {
+      throw new CliError(
+        CLI_ERROR_CODE.INVALID_INPUT,
+        `Unknown scope "${s}". Valid: ${Array.from(VALID_CLI_SCOPES).join(", ")}.`
+      );
+    }
+  }
+  return items;
+}
+async function loginWithKey(baseUrl, apiKey) {
+  if (!apiKey.startsWith(KEY_PREFIX_CAK) && !apiKey.startsWith(KEY_PREFIX_CSK)) {
+    throw new CliError(
+      CLI_ERROR_CODE.INVALID_INPUT,
+      `API key must start with "${KEY_PREFIX_CAK}" or "${KEY_PREFIX_CSK}".`
+    );
+  }
+  const client = ApiClient.withKey(apiKey, baseUrl);
+  const me = await client.get(ENDPOINT_AUTH_ME);
+  await writeAuth({
+    apiKey,
+    apiBaseUrl: baseUrl,
+    accountId: me.id,
+    businessId: me.business_id,
+    email: me.email,
+    name: me.name,
+    savedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  success(`Logged in as ${me.email ?? me.name ?? me.id} (business ${me.business_id})`);
+  result({
+    logged_in: true,
+    account: { id: me.id, email: me.email ?? null, name: me.name ?? null },
+    business: { id: me.business_id },
+    method: "api_key"
+  });
+}
+async function loginWithBrowser(baseUrl, noBrowser, requestedScopes) {
+  if (isJsonMode()) {
+    throw new CliError(
+      CLI_ERROR_CODE.INTERACTIVE_REQUIRED,
+      "browser login is not supported in --json mode",
+      { remediation: "pass --api-key dk_\u2026 (create one in the dashboard or via `cimplify auth keys create`)" }
+    );
+  }
+  const pkce = generatePkcePair();
+  const state = generateState();
+  const loopback = await startLoopbackServer(baseUrl);
+  const startBody = {
+    code_challenge: pkce.codeChallenge,
+    code_challenge_method: pkce.codeChallengeMethod,
+    redirect_uri: loopback.redirectUri,
+    state,
+    client_meta: {
+      hostname: os.hostname(),
+      platform: process.platform,
+      arch: process.arch,
+      node_version: process.version,
+      product: PRODUCT_NAME
+    },
+    requested_scopes: requestedScopes
+  };
+  const unauthClient = ApiClient.unauthenticated(baseUrl);
+  const startResponse = await unauthClient.post(
+    ENDPOINT_CLI_START,
+    startBody
+  );
+  step("Opening browser to authorize this CLI...");
+  info(dim(startResponse.approval_url));
+  if (!noBrowser) {
+    openBrowser(startResponse.approval_url);
+  } else {
+    info("");
+    info(dim("Open the URL above in any browser to continue."));
+  }
+  let callback;
+  try {
+    callback = await loopback.awaitCallback(startResponse.expires_in_secs * 1e3);
+  } catch (err) {
+    loopback.close();
+    throw err;
+  }
+  if (callback.state !== state) {
+    throw new CliError(
+      CLI_ERROR_CODE.UNAUTHORIZED,
+      "OAuth state mismatch. Possible CSRF attempt \u2014 try again."
+    );
+  }
+  if (!callback.code) {
+    throw new CliError(
+      CLI_ERROR_CODE.UNAUTHORIZED,
+      "Login callback missing auth_code."
+    );
+  }
+  const token = await unauthClient.post(ENDPOINT_CLI_TOKEN, {
+    auth_code: callback.code,
+    code_verifier: pkce.codeVerifier,
+    redirect_uri: loopback.redirectUri
+  });
+  await writeAuth({
+    apiKey: token.access_token,
+    apiBaseUrl: baseUrl,
+    accountId: token.account_id,
+    businessId: token.business_id,
+    savedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  success(`Logged in (business ${token.business_id})`);
+  result({
+    logged_in: true,
+    account: { id: token.account_id, email: null, name: null },
+    business: { id: token.business_id },
+    method: "oauth_pkce"
+  });
+}
+
+export { run as default };

package/dist/{logout-DJDINVDF.mjs → logout-3RLBZ33M.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { clearAuth } from './chunk-LS2VTSMQ.mjs';
-import { success, info, result } from './chunk-I3XQSSOT.mjs';
+import { clearAuth } from './chunk-UBAI443T.mjs';
+import { success, info, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/logout.ts
 async function run(_argv) {

package/dist/{logs-KUKGEXR2.mjs → logs-YNN2PQ24.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { TERMINAL_DEPLOYMENT_STATUSES } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink, readProjectState } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, isJsonMode, failure, result, red } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink, readProjectState } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, isJsonMode, failure, result, red } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/logs.ts
 var FLAG_DEPLOYMENT = "deployment";

package/dist/{projects-364HGWHO.mjs → projects-JSEC2YCX.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { REPO_PROVIDER } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/projects.ts
 var SUB_LS = "ls";

package/dist/repo-WOBWKEAO.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+export { run as default, fetchCloneToken } from './chunk-R3FDBXR6.mjs';
+import './chunk-ITAFAORS.mjs';
+import './chunk-MXYUAJEW.mjs';
+import './chunk-C4M3DXKC.mjs';
+import './chunk-MAOO6ZZ5.mjs';
+import './chunk-UBAI443T.mjs';
+import './chunk-E2T2SBP5.mjs';

package/dist/{rollback-5YALPQXL.mjs → rollback-DD4RNRFM.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { pollDeployment } from './chunk-MOZQODQS.mjs';
+import { pollDeployment } from './chunk-VTR5R5NQ.mjs';
 import { DEPLOYMENT_STATUS, DEPLOY_TRIGGER } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink, writeProjectState } from './chunk-LS2VTSMQ.mjs';
-import { CliError, CLI_ERROR_CODE, step, success, info, dim, result, EXIT_CODE } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink, writeProjectState } from './chunk-UBAI443T.mjs';
+import { CliError, CLI_ERROR_CODE, step, success, info, dim, result, EXIT_CODE } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/rollback.ts
 var FLAG_NO_POLL = "no-poll";

package/dist/{status-W4HW3CX3.mjs → status-JSYXM5RT.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { DEPLOYMENT_STATUS } from './chunk-MXYUAJEW.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth, readProjectLink, readProjectState } from './chunk-LS2VTSMQ.mjs';
-import { bold, dim, info, result } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth, readProjectLink, readProjectState } from './chunk-UBAI443T.mjs';
+import { bold, dim, info, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/status.ts
 var QUERY_LIMIT = "limit";

package/dist/{unlink-HIIW57OO.mjs → unlink-RFK74SFP.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { clearProjectLink } from './chunk-LS2VTSMQ.mjs';
-import { success, info, result } from './chunk-I3XQSSOT.mjs';
+import { clearProjectLink } from './chunk-UBAI443T.mjs';
+import { success, info, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/unlink.ts
 async function run(_argv) {

package/dist/{update-2DCENLHM.mjs → update-64K4Z3SF.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-IQJ45AK3.mjs';
-import { promptYesNo } from './chunk-RZQTHTXX.mjs';
+import { package_default } from './chunk-DCWHOH2S.mjs';
+import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
-import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-I3XQSSOT.mjs';
+import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-E2T2SBP5.mjs';
 import { spawn } from 'child_process';
 import { basename, dirname } from 'path';
 

package/dist/{whoami-LACWBSNL.mjs → whoami-DNZ7RUTH.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { ApiClient } from './chunk-D7WMSGKK.mjs';
-import { readAuth } from './chunk-LS2VTSMQ.mjs';
-import { info, bold, dim, result } from './chunk-I3XQSSOT.mjs';
+import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { readAuth } from './chunk-UBAI443T.mjs';
+import { info, bold, dim, result } from './chunk-E2T2SBP5.mjs';
 
 // src/commands/whoami.ts
 var ENDPOINT_AUTH_ME = "/v1/auth/me";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cimplify/cli",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "description": "Cimplify CLI — deploy, manage env vars, link projects, and scaffold storefronts",
   "keywords": [
     "cimplify",
@@ -23,6 +23,8 @@
     "build:binary": "bun run bundle-assets && bun scripts/build-binaries.ts",
     "build:binary:local": "bun run bundle-assets && bun scripts/build-binaries.ts --local",
     "sync:template-pins": "bun scripts/sync-template-pins.ts",
+    "publish:templates": "bun scripts/publish-templates.ts",
+    "publish:templates:dry": "bun scripts/publish-templates.ts --dry-run",
     "version": "bun scripts/sync-template-pins.ts && git add templates/*/package.json",
     "prepublishOnly": "bun scripts/sync-template-pins.ts && bun run build",
     "dev": "bun run bundle-assets && tsup --watch",
@@ -35,6 +37,7 @@
     "test:run": "vitest run"
   },
   "devDependencies": {
+    "@aws-sdk/client-s3": "^3.700.0",
     "@types/node": "^25.6.0",
     "@typescript/native-preview": "^7.0.0-dev.20260503.1",
     "tsup": "^8.5.1",