@cimplify/cli 0.5.0 → 0.5.2

package/dist/dispatcher.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { TEMPLATES } from './chunk-Z5DEA7YM.mjs';
-import { package_default } from './chunk-DCWHOH2S.mjs';
+import { TEMPLATES } from './chunk-TR65XHUE.mjs';
+import { package_default } from './chunk-DZPR5L6H.mjs';
 
 // src/dispatcher.ts
 var VERSION = package_default.version ?? "unknown";
@@ -134,15 +134,15 @@ var COMMANDS = {
   logs: () => import('./logs-YNN2PQ24.mjs'),
   status: () => import('./status-JSYXM5RT.mjs'),
   dev: () => import('./dev-ONW2S77K.mjs'),
-  introspect: () => import('./introspect-KID4YJYV.mjs'),
-  doctor: () => import('./doctor-DGO3UAJB.mjs'),
-  explain: () => import('./explain-IJLIQUYJ.mjs'),
+  introspect: () => import('./introspect-WDGC7BKQ.mjs'),
+  doctor: () => import('./doctor-QO2SRNH6.mjs'),
+  explain: () => import('./explain-CGWT7HMV.mjs'),
   assets: () => import('./assets-EBEMMENZ.mjs'),
   repo: () => import('./repo-WOBWKEAO.mjs'),
-  list: () => import('./list-5PMRTZV3.mjs'),
-  add: () => import('./add-MX4655EX.mjs'),
-  update: () => import('./update-64K4Z3SF.mjs'),
-  upgrade: () => import('./update-64K4Z3SF.mjs'),
+  list: () => import('./list-NO5SPHSU.mjs'),
+  add: () => import('./add-BEJH4T3P.mjs'),
+  update: () => import('./update-EEQ7JJTP.mjs'),
+  upgrade: () => import('./update-EEQ7JJTP.mjs'),
   "auth-step-up": () => import('./auth-step-up-BIUYQJP6.mjs')
 };
 var COMMAND_PREFIXES = {

package/dist/{doctor-DGO3UAJB.mjs → doctor-QO2SRNH6.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { gatherIntrospection } from './chunk-AY23RQE6.mjs';
+import { gatherIntrospection } from './chunk-MUG454RK.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-DCWHOH2S.mjs';
+import './chunk-DZPR5L6H.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
 import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
 import { readAuthOrNull } from './chunk-UBAI443T.mjs';

package/dist/{explain-IJLIQUYJ.mjs → explain-CGWT7HMV.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-DCWHOH2S.mjs';
+import { package_default } from './chunk-DZPR5L6H.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
 import { bold, dim, info, result, CliError, CLI_ERROR_CODE } from './chunk-E2T2SBP5.mjs';
 

package/dist/{introspect-KID4YJYV.mjs → introspect-WDGC7BKQ.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-AY23RQE6.mjs';
+export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-MUG454RK.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-DCWHOH2S.mjs';
+import './chunk-DZPR5L6H.mjs';
 import './chunk-C4M3DXKC.mjs';
 import './chunk-UBAI443T.mjs';
 import './chunk-E2T2SBP5.mjs';

package/dist/{list-5PMRTZV3.mjs → list-NO5SPHSU.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { REGISTRY_INDEX } from './chunk-Z5DEA7YM.mjs';
+import { REGISTRY_INDEX } from './chunk-TR65XHUE.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
 import { CliError, CLI_ERROR_CODE, info, bold, dim, green, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{update-64K4Z3SF.mjs → update-EEQ7JJTP.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-DCWHOH2S.mjs';
+import { package_default } from './chunk-DZPR5L6H.mjs';
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
 import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-E2T2SBP5.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cimplify/cli",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Cimplify CLI — deploy, manage env vars, link projects, and scaffold storefronts",
   "keywords": [
     "cimplify",

package/templates/manifest.json

@@ -1,6 +1,6 @@
 {
-  "cliVersion": "0.5.0",
-  "generatedAt": "2026-05-16T09:43:17.125Z",
+  "cliVersion": "0.5.2",
+  "generatedAt": "2026-05-16T20:10:00.000Z",
   "templates": [
     {
       "id": "bakery",

package/templates/storefront-auto/.env.example

@@ -1,13 +1,8 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
-# Business id used by the mock seed (auto: Driveline Auto Parts).
+# Business id used by the mock seed (default: Driveline Auto).
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_driveline_auto
 
 # Canonical public site URL — used by sitemap.xml, robots.txt, llms.txt,
@@ -20,3 +15,12 @@ NEXT_PUBLIC_SITE_URL=https://example.com
 # Gemini) can discover this storefront's commerce capabilities. Set this
 # on production deploys; leave empty in dev unless you're testing UCP.
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_HANDLE=
+
+# ── Escape hatches (rarely needed) ────────────────────────────────────
+# Override the storefront API host (where /api/v1/catalogue, /api/v1/orders
+# live). Defaults to https://storefronts.cimplify.io in production,
+# 127.0.0.1:8787 in dev. Set only for self-hosted Cimplify or staging.
+# NEXT_PUBLIC_CIMPLIFY_STOREFRONT_URL=
+
+# Override the management/UCP host. Defaults to https://api.cimplify.io.
+# NEXT_PUBLIC_CIMPLIFY_API_URL=

package/templates/storefront-auto/README.md

@@ -37,12 +37,10 @@ Update `NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID` in `.env.local` to match the seeded bu
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
 - NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_driveline_auto
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-auto/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-auto/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,

package/templates/storefront-auto/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };

package/templates/storefront-bakery/.env.example

@@ -1,10 +1,5 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
 # Business id used by the mock seed (default: Akua's Bakery).

package/templates/storefront-bakery/README.md

@@ -62,12 +62,10 @@ Update `NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID` in `.env.local` to match the seeded bu
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
 - NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_default_akua_bakery
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-bakery/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-bakery/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,

package/templates/storefront-bakery/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };

package/templates/storefront-fashion/.env.example

@@ -1,13 +1,8 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
-# Business id used by the mock seed (fashion: Studio FRX).
+# Business id used by the mock seed (default: Studio FRX).
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_studio_frx
 
 # Canonical public site URL — used by sitemap.xml, robots.txt, llms.txt,
@@ -20,3 +15,12 @@ NEXT_PUBLIC_SITE_URL=https://example.com
 # Gemini) can discover this storefront's commerce capabilities. Set this
 # on production deploys; leave empty in dev unless you're testing UCP.
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_HANDLE=
+
+# ── Escape hatches (rarely needed) ────────────────────────────────────
+# Override the storefront API host (where /api/v1/catalogue, /api/v1/orders
+# live). Defaults to https://storefronts.cimplify.io in production,
+# 127.0.0.1:8787 in dev. Set only for self-hosted Cimplify or staging.
+# NEXT_PUBLIC_CIMPLIFY_STOREFRONT_URL=
+
+# Override the management/UCP host. Defaults to https://api.cimplify.io.
+# NEXT_PUBLIC_CIMPLIFY_API_URL=

package/templates/storefront-fashion/README.md

@@ -66,12 +66,10 @@ cimplify init my-store --template grocery    # coming soon
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
-- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_currents_electronics
+- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_studio_frx
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-fashion/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-fashion/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,

package/templates/storefront-fashion/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };

package/templates/storefront-grocery/.env.example

@@ -1,13 +1,8 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
-# Business id used by the mock seed (grocery: FreshMart).
+# Business id used by the mock seed (default: FreshMart).
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_freshmart
 
 # Canonical public site URL — used by sitemap.xml, robots.txt, llms.txt,
@@ -20,3 +15,12 @@ NEXT_PUBLIC_SITE_URL=https://example.com
 # Gemini) can discover this storefront's commerce capabilities. Set this
 # on production deploys; leave empty in dev unless you're testing UCP.
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_HANDLE=
+
+# ── Escape hatches (rarely needed) ────────────────────────────────────
+# Override the storefront API host (where /api/v1/catalogue, /api/v1/orders
+# live). Defaults to https://storefronts.cimplify.io in production,
+# 127.0.0.1:8787 in dev. Set only for self-hosted Cimplify or staging.
+# NEXT_PUBLIC_CIMPLIFY_STOREFRONT_URL=
+
+# Override the management/UCP host. Defaults to https://api.cimplify.io.
+# NEXT_PUBLIC_CIMPLIFY_API_URL=

package/templates/storefront-grocery/README.md

@@ -62,12 +62,10 @@ Update `NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID` in `.env.local` to match the seeded bu
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
-- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_default_akua_bakery
+- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_freshmart
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-grocery/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-grocery/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,