@cimplify/cli 0.5.0 → 0.5.2

package/templates/storefront-grocery/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };

package/templates/storefront-pharmacy/.env.example

@@ -1,13 +1,8 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
-# Business id used by the mock seed (pharmacy: Wellspring Pharmacy).
+# Business id used by the mock seed (default: Wellspring Pharmacy).
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_wellspring_pharmacy
 
 # Canonical public site URL — used by sitemap.xml, robots.txt, llms.txt,
@@ -20,3 +15,12 @@ NEXT_PUBLIC_SITE_URL=https://example.com
 # Gemini) can discover this storefront's commerce capabilities. Set this
 # on production deploys; leave empty in dev unless you're testing UCP.
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_HANDLE=
+
+# ── Escape hatches (rarely needed) ────────────────────────────────────
+# Override the storefront API host (where /api/v1/catalogue, /api/v1/orders
+# live). Defaults to https://storefronts.cimplify.io in production,
+# 127.0.0.1:8787 in dev. Set only for self-hosted Cimplify or staging.
+# NEXT_PUBLIC_CIMPLIFY_STOREFRONT_URL=
+
+# Override the management/UCP host. Defaults to https://api.cimplify.io.
+# NEXT_PUBLIC_CIMPLIFY_API_URL=

package/templates/storefront-pharmacy/README.md

@@ -76,12 +76,10 @@ cimplify init my-store --template retail
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
 - NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_wellspring_pharmacy
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-pharmacy/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-pharmacy/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,

package/templates/storefront-pharmacy/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };

package/templates/storefront-restaurant/.env.example

@@ -1,13 +1,8 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
-# Business id used by the mock seed (restaurant: Mama's Kitchen).
+# Business id used by the mock seed (default: Mama's Kitchen).
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_mamas_kitchen
 
 # Canonical public site URL — used by sitemap.xml, robots.txt, llms.txt,
@@ -20,3 +15,12 @@ NEXT_PUBLIC_SITE_URL=https://example.com
 # Gemini) can discover this storefront's commerce capabilities. Set this
 # on production deploys; leave empty in dev unless you're testing UCP.
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_HANDLE=
+
+# ── Escape hatches (rarely needed) ────────────────────────────────────
+# Override the storefront API host (where /api/v1/catalogue, /api/v1/orders
+# live). Defaults to https://storefronts.cimplify.io in production,
+# 127.0.0.1:8787 in dev. Set only for self-hosted Cimplify or staging.
+# NEXT_PUBLIC_CIMPLIFY_STOREFRONT_URL=
+
+# Override the management/UCP host. Defaults to https://api.cimplify.io.
+# NEXT_PUBLIC_CIMPLIFY_API_URL=

package/templates/storefront-restaurant/README.md

@@ -62,12 +62,10 @@ Update `NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID` in `.env.local` to match the seeded bu
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
-- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_default_akua_bakery
+- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_mamas_kitchen
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-restaurant/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-restaurant/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,

package/templates/storefront-restaurant/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };

package/templates/storefront-retail/.env.example

@@ -1,13 +1,8 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
-# Business id used by the mock seed (retail: Currents Electronics).
+# Business id used by the mock seed (default: Currents Electronics).
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_currents_electronics
 
 # Canonical public site URL — used by sitemap.xml, robots.txt, llms.txt,
@@ -20,3 +15,12 @@ NEXT_PUBLIC_SITE_URL=https://example.com
 # Gemini) can discover this storefront's commerce capabilities. Set this
 # on production deploys; leave empty in dev unless you're testing UCP.
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_HANDLE=
+
+# ── Escape hatches (rarely needed) ────────────────────────────────────
+# Override the storefront API host (where /api/v1/catalogue, /api/v1/orders
+# live). Defaults to https://storefronts.cimplify.io in production,
+# 127.0.0.1:8787 in dev. Set only for self-hosted Cimplify or staging.
+# NEXT_PUBLIC_CIMPLIFY_STOREFRONT_URL=
+
+# Override the management/UCP host. Defaults to https://api.cimplify.io.
+# NEXT_PUBLIC_CIMPLIFY_API_URL=

package/templates/storefront-retail/README.md

@@ -66,12 +66,10 @@ cimplify init my-store --template grocery    # coming soon
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
 - NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_currents_electronics
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-retail/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-retail/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,

package/templates/storefront-retail/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };

package/templates/storefront-services/.env.example

@@ -1,13 +1,8 @@
-# Cimplify API base URL.
-# Dev: leave empty so the SDK uses the current origin (localhost:3000),
-# which Next.js rewrites to the mock at 127.0.0.1:8787 (see next.config.ts).
-# Production: set to your Cimplify host (e.g. https://api.cimplify.io).
-NEXT_PUBLIC_CIMPLIFY_API_URL=
-
-# Tenant public key. The mock accepts any value.
+# Tenant public key. Get yours from the desk Developers tab. The mock
+# accepts any value, so leave the placeholder during local dev.
 NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 
-# Business id used by the mock seed (services: Serene Spa).
+# Business id used by the mock seed (default: Serene Spa).
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_serene_spa
 
 # Canonical public site URL — used by sitemap.xml, robots.txt, llms.txt,
@@ -20,3 +15,12 @@ NEXT_PUBLIC_SITE_URL=https://example.com
 # Gemini) can discover this storefront's commerce capabilities. Set this
 # on production deploys; leave empty in dev unless you're testing UCP.
 NEXT_PUBLIC_CIMPLIFY_BUSINESS_HANDLE=
+
+# ── Escape hatches (rarely needed) ────────────────────────────────────
+# Override the storefront API host (where /api/v1/catalogue, /api/v1/orders
+# live). Defaults to https://storefronts.cimplify.io in production,
+# 127.0.0.1:8787 in dev. Set only for self-hosted Cimplify or staging.
+# NEXT_PUBLIC_CIMPLIFY_STOREFRONT_URL=
+
+# Override the management/UCP host. Defaults to https://api.cimplify.io.
+# NEXT_PUBLIC_CIMPLIFY_API_URL=

package/templates/storefront-services/README.md

@@ -62,12 +62,10 @@ Update `NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID` in `.env.local` to match the seeded bu
 
 ```diff
 # .env.local
-- NEXT_PUBLIC_CIMPLIFY_API_URL=http://127.0.0.1:8787
-+ NEXT_PUBLIC_CIMPLIFY_API_URL=https://api.cimplify.io
 - NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=mock-dev
 + NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY=<your tenant key>
-- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_default_akua_bakery
+- NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=bus_serene_spa
 + NEXT_PUBLIC_CIMPLIFY_BUSINESS_ID=<your business id>
 ```
 
-Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://docs.cimplify.io/cli/deploy). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.
+Deploy with `cimplify deploy --prod` after linking the project. See [`cimplify` CLI docs](https://www.cimplify.dev/docs/cli). `next.config.ts` already whitelists the SDK image hosts under `images.remotePatterns`.

package/templates/storefront-services/app/.well-known/ucp/route.ts

@@ -5,15 +5,11 @@ import { NextResponse } from "next/server";
  *
  * Agents — Claude, ChatGPT, Gemini, MCP clients — probe
  * `https://<your-domain>/.well-known/ucp` to learn what commerce
- * capabilities your storefront supports. We forward the request to
- * Cimplify, which returns the canonical manifest; the response body
- * tells agents to make subsequent UCP calls directly to
- * `api.cimplify.io/ucp/v1/<handle>/*` (no per-request proxy here).
- *
- * Edge-cached for an hour because capabilities change rarely.
+ * capabilities your storefront supports. We forward to Cimplify, which
+ * returns the canonical manifest. Edge-cached for an hour because
+ * capabilities change rarely.
  */
-const UCP_API_BASE =
-  process.env.NEXT_PUBLIC_CIMPLIFY_API_URL || "https://api.cimplify.io";
+const UCP_API_BASE = "https://api.cimplify.io";
 
 
 export async function GET() {

package/templates/storefront-services/components/providers.tsx

@@ -4,21 +4,12 @@ import { useMemo, type ReactNode } from "react";
 import { createCimplifyClient } from "@cimplify/sdk";
 import { CimplifyProvider, CartDrawerProvider } from "@cimplify/sdk/react";
 
-/**
- * Boots the Cimplify SDK client once on the client-side and exposes it via
- * <CimplifyProvider/>.
- *
- * Base-URL resolution:
- *   1) If NEXT_PUBLIC_CIMPLIFY_API_URL is set, use it verbatim.
- *   2) Otherwise use the current origin so requests flow through the
- *      Next.js rewrite in `next.config.ts` to the mock at :8787 (no CORS).
- *   3) Fall back to 127.0.0.1:8787 only during SSR, when there's no window.
- */
+// Same-origin client — every request goes through the Next.js rewrite in
+// next.config.ts, so no CORS preflight ever hits the browser.
 export function Providers({ children }: { children: ReactNode }) {
   const client = useMemo(() => {
     const baseUrl =
-      process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() ||
-      (typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787");
+      typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:8787";
     const publicKey = process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY ?? "mock-dev";
     return createCimplifyClient({
       baseUrl,

package/templates/storefront-services/next.config.ts

@@ -1,18 +1,12 @@
 import type { NextConfig } from "next";
 
-const MOCK_URL = process.env.NEXT_PUBLIC_CIMPLIFY_API_URL?.trim() || "http://127.0.0.1:8787";
+// Same-origin proxy target for the storefront API. Local mock in dev,
+// hosted Cimplify in prod.
+const STOREFRONT_URL =
+  process.env.NODE_ENV === "production"
+    ? "https://storefronts.cimplify.io"
+    : "http://127.0.0.1:8787";
 
-/**
- * Same-origin proxy to the Cimplify mock so the browser never makes a
- * cross-origin request in dev (no CORS preflights, no flaky `Origin`
- * mismatches). The SDK's base URL stays empty/relative — requests go to
- * `/api/v1/...` on the Next origin, then this rewrite forwards them to
- * the mock at `127.0.0.1:8787`.
- *
- * In production, point `NEXT_PUBLIC_CIMPLIFY_API_URL` at your Cimplify
- * host and the rewrite continues to work the same way (or remove it and
- * pass the absolute URL through `<CimplifyProvider/>`).
- */
 const nextConfig: NextConfig = {
   // Enable Next 16's `cacheComponents` mode so we can use `'use cache'` +
   // `cacheTag` / `cacheLife` for SSR caching. Cached chrome streams first,
@@ -20,10 +14,10 @@ const nextConfig: NextConfig = {
   cacheComponents: true,
   async rewrites() {
     return [
-      { source: "/api/v1/:path*", destination: `${MOCK_URL}/api/v1/:path*` },
-      { source: "/img/:path*", destination: `${MOCK_URL}/img/:path*` },
-      { source: "/elements/:path*", destination: `${MOCK_URL}/elements/:path*` },
-      { source: "/_mock/:path*", destination: `${MOCK_URL}/_mock/:path*` },
+      { source: "/api/v1/:path*", destination: `${STOREFRONT_URL}/api/v1/:path*` },
+      { source: "/img/:path*", destination: `${STOREFRONT_URL}/img/:path*` },
+      { source: "/elements/:path*", destination: `${STOREFRONT_URL}/elements/:path*` },
+      { source: "/_mock/:path*", destination: `${STOREFRONT_URL}/_mock/:path*` },
     ];
   },
   images: {
@@ -38,6 +32,7 @@ const nextConfig: NextConfig = {
       { protocol: "https", hostname: "static-tmp.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "storefrontassetscdn.cimplify.io", pathname: "/**" },
       { protocol: "https", hostname: "cdn.cimplify.io", pathname: "/**" },
+      { protocol: "https", hostname: "res.cloudinary.com", pathname: "/cimplify/**" },
     ],
   },
 };