@cimplify/cli 0.7.1 → 0.7.3

package/dist/{chunk-BFT3GO4Q.mjs → chunk-YYG5WE4A.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { gitDetectRoot, gitCurrentBranch, gitCurrentSha, gitStatusPorcelain } from './chunk-K5464A3L.mjs';
 import { parseEnvFile } from './chunk-DBZ3UOQ2.mjs';
-import { package_default } from './chunk-HXJZIFHC.mjs';
+import { package_default } from './chunk-ZKMI5E23.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
 import { readAuthOrNull, readProjectLinkOrNull, readProjectState } from './chunk-UBAI443T.mjs';
 import { bold, dim, yellow, green, info, result, red } from './chunk-E2T2SBP5.mjs';

package/dist/{chunk-HXJZIFHC.mjs → chunk-ZKMI5E23.mjs}

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@cimplify/cli",
-  version: "0.7.1",
+  version: "0.7.3",
   description: "Cimplify CLI \u2014 deploy, manage env vars, link projects, and scaffold storefronts",
   keywords: [
     "cimplify",
@@ -47,7 +47,7 @@ var package_default = {
     vitest: "^4.1.5"
   },
   dependencies: {
-    "@cimplify/sdk": "^0.54.0"
+    "@cimplify/sdk": "^0.55.0"
   }
 };
 

package/dist/dispatcher.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { TEMPLATES } from './chunk-AS3W7SUI.mjs';
-import { package_default } from './chunk-HXJZIFHC.mjs';
+import { TEMPLATES } from './chunk-HDIDSQS4.mjs';
+import { package_default } from './chunk-ZKMI5E23.mjs';
 
 // src/dispatcher.ts
 var VERSION = package_default.version ?? "unknown";
@@ -138,16 +138,16 @@ var COMMANDS = {
   logs: () => import('./logs-YNN2PQ24.mjs'),
   status: () => import('./status-JSYXM5RT.mjs'),
   dev: () => import('./dev-ONW2S77K.mjs'),
-  introspect: () => import('./introspect-CFVKMSVE.mjs'),
+  introspect: () => import('./introspect-45RASBRH.mjs'),
   inspect: () => import('./inspect-CGYX4DDF.mjs'),
-  doctor: () => import('./doctor-7QL3TCOV.mjs'),
-  explain: () => import('./explain-IVURNUO3.mjs'),
+  doctor: () => import('./doctor-DN6RLS6E.mjs'),
+  explain: () => import('./explain-J4JB5QGW.mjs'),
   assets: () => import('./assets-74SK63TR.mjs'),
   repo: () => import('./repo-KNQMSPVV.mjs'),
-  list: () => import('./list-56VJKIMT.mjs'),
-  add: () => import('./add-H6VQXQOI.mjs'),
-  update: () => import('./update-IYLHJDL2.mjs'),
-  upgrade: () => import('./update-IYLHJDL2.mjs'),
+  list: () => import('./list-O47PO4UQ.mjs'),
+  add: () => import('./add-ZD5FOTC7.mjs'),
+  update: () => import('./update-CSUNW4RV.mjs'),
+  upgrade: () => import('./update-CSUNW4RV.mjs'),
   "auth-step-up": () => import('./auth-step-up-BIUYQJP6.mjs')
 };
 var COMMAND_PREFIXES = {

package/dist/{doctor-7QL3TCOV.mjs → doctor-DN6RLS6E.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { gatherIntrospection } from './chunk-BFT3GO4Q.mjs';
+import { gatherIntrospection } from './chunk-YYG5WE4A.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-HXJZIFHC.mjs';
+import './chunk-ZKMI5E23.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
 import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
 import { readAuthOrNull } from './chunk-UBAI443T.mjs';

package/dist/{explain-IVURNUO3.mjs → explain-J4JB5QGW.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-HXJZIFHC.mjs';
+import { package_default } from './chunk-ZKMI5E23.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
 import { bold, dim, info, result, CliError, CLI_ERROR_CODE } from './chunk-E2T2SBP5.mjs';
 

package/dist/{introspect-CFVKMSVE.mjs → introspect-45RASBRH.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-BFT3GO4Q.mjs';
+export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-YYG5WE4A.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-HXJZIFHC.mjs';
+import './chunk-ZKMI5E23.mjs';
 import './chunk-C4M3DXKC.mjs';
 import './chunk-UBAI443T.mjs';
 import './chunk-E2T2SBP5.mjs';

package/dist/{list-56VJKIMT.mjs → list-O47PO4UQ.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { REGISTRY_INDEX } from './chunk-AS3W7SUI.mjs';
+import { REGISTRY_INDEX } from './chunk-HDIDSQS4.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
 import { CliError, CLI_ERROR_CODE, info, bold, dim, green, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{update-IYLHJDL2.mjs → update-CSUNW4RV.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-HXJZIFHC.mjs';
+import { package_default } from './chunk-ZKMI5E23.mjs';
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
 import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-E2T2SBP5.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cimplify/cli",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "Cimplify CLI — deploy, manage env vars, link projects, and scaffold storefronts",
   "keywords": [
     "cimplify",
@@ -45,6 +45,6 @@
     "vitest": "^4.1.5"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.54.0"
+    "@cimplify/sdk": "^0.55.0"
   }
 }

package/templates/storefront-auto/app/auth/callback/route.ts

@@ -0,0 +1,16 @@
+import { handleOidcCallback } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
+
+export async function POST(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleOidcCallback(req, {
+    clientId: CLIENT_ID,
+    authUrl: AUTH_URL,
+    redirectUri: REDIRECT_URI,
+  });
+}

package/templates/storefront-auto/app/auth/session/route.ts

@@ -0,0 +1,11 @@
+import { handleSessionRequest } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID) {
+    return Response.json({ sub: null }, { status: 200 });
+  }
+  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+}

package/templates/storefront-auto/app/auth/signout/route.ts

@@ -0,0 +1,11 @@
+import { buildSignoutCookie } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+
+export async function POST(): Promise<Response> {
+  const cookie = buildSignoutCookie({ clientId: CLIENT_ID });
+  return new Response(JSON.stringify({ ok: true }), {
+    status: 200,
+    headers: { "Content-Type": "application/json", "Set-Cookie": cookie },
+  });
+}

package/templates/storefront-auto/components/account-iframe.tsx

@@ -1,13 +1,19 @@
 "use client";
 
 import { CimplifyAccount } from "@cimplify/sdk/react";
+import { brand } from "@/lib/brand";
 
 /**
  * Cimplify Account portal — iframe-mounted UI hosted by Cimplify Link.
  * Handles sign-in, sign-up, OTP, addresses, payment methods, sessions,
  * and order history. The iframe owns auth state; we just choose which
  * `section` to land on.
+ *
+ * `merchantName` is passed so the embedded widget can render scoping
+ * affordances ("Showing your account with {merchant} only.") and
+ * enforce the per-merchant data contract — orders/subs filter to this
+ * business, cross-merchant surfaces are hidden.
  */
 export function AccountIframe({ section }: { section?: string }) {
-  return <CimplifyAccount section={section} />;
+  return <CimplifyAccount section={section} merchantName={brand.name} />;
 }

package/templates/storefront-auto/components/account-pill.tsx

@@ -0,0 +1,56 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+import Link from "next/link";
+import { CimplifySignInButton, useCimplifySession } from "@cimplify/sdk/react";
+import { signInSilent } from "@cimplify/sdk";
+
+const CLIENT_ID = process.env.NEXT_PUBLIC_CIMPLIFY_CLIENT_ID ?? "";
+
+/**
+ * Header sign-in / signed-in pill.
+ *
+ * - Tries cross-storefront SSO once on mount. If the shopper signed
+ *   into any other Cimplify storefront recently, this resolves
+ *   silently and the session lands without any UI flicker.
+ * - When signed in, renders "Hi, {name}" linking to /account.
+ * - When not signed in, renders the Cimplify Sign-In button.
+ */
+export function AccountPill() {
+  const { session, loading, refresh } = useCimplifySession();
+  const triedSilent = useRef(false);
+
+  useEffect(() => {
+    if (triedSilent.current || session || !CLIENT_ID) return;
+    triedSilent.current = true;
+    void signInSilent({
+      clientId: CLIENT_ID,
+      redirectUri: `${window.location.origin}/auth/callback`,
+    }).then((r) => {
+      if (r.ok) refresh();
+    });
+  }, [session, refresh]);
+
+  if (loading || !CLIENT_ID) return <span className="h-9 w-24" aria-hidden />;
+
+  if (session) {
+    const first = session.name?.split(/\s+/)[0] ?? "Account";
+    return (
+      <Link
+        href="/account"
+        className="text-[13px] font-medium tracking-wide text-foreground hover:text-primary transition-colors"
+      >
+        Hi, {first}
+      </Link>
+    );
+  }
+
+  return (
+    <CimplifySignInButton
+      clientId={CLIENT_ID}
+      redirectUri={`${typeof window !== "undefined" ? window.location.origin : ""}/auth/callback`}
+      variant="text"
+      onSuccess={() => refresh()}
+    />
+  );
+}

package/templates/storefront-auto/components/header.tsx

@@ -3,6 +3,7 @@ import { Suspense } from "react";
 import { NavLink } from "./nav-link";
 import { CartPill, CartPillSkeleton } from "./cart-pill";
 import { MobileNav } from "./mobile-nav";
+import { AccountPill } from "./account-pill";
 import { brand } from "@/lib/brand";
 
 /**
@@ -31,6 +32,7 @@ export function Header() {
             </Suspense>
           ))}
         </nav>
+        <AccountPill />
         <Suspense fallback={<CartPillSkeleton />}>
           <CartPill />
         </Suspense>

package/templates/storefront-auto/lib/auth.ts

@@ -0,0 +1,16 @@
+import { headers } from "next/headers";
+import { getSessionFromCookieHeader, type CimplifySession } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+
+export async function getSession(): Promise<CimplifySession | null> {
+  if (!CLIENT_ID) return null;
+  const cookieHeader = (await headers()).get("cookie");
+  return getSessionFromCookieHeader(
+    { clientId: CLIENT_ID, authUrl: AUTH_URL },
+    cookieHeader,
+  );
+}
+
+export type { CimplifySession } from "@cimplify/sdk/server";

package/templates/storefront-auto/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.54.0",
+    "@cimplify/sdk": "^0.55.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-bakery/app/auth/callback/route.ts

@@ -0,0 +1,16 @@
+import { handleOidcCallback } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
+
+export async function POST(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleOidcCallback(req, {
+    clientId: CLIENT_ID,
+    authUrl: AUTH_URL,
+    redirectUri: REDIRECT_URI,
+  });
+}

package/templates/storefront-bakery/app/auth/session/route.ts

@@ -0,0 +1,11 @@
+import { handleSessionRequest } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID) {
+    return Response.json({ sub: null }, { status: 200 });
+  }
+  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+}

package/templates/storefront-bakery/app/auth/signout/route.ts

@@ -0,0 +1,11 @@
+import { buildSignoutCookie } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+
+export async function POST(): Promise<Response> {
+  const cookie = buildSignoutCookie({ clientId: CLIENT_ID });
+  return new Response(JSON.stringify({ ok: true }), {
+    status: 200,
+    headers: { "Content-Type": "application/json", "Set-Cookie": cookie },
+  });
+}

package/templates/storefront-bakery/components/account-iframe.tsx

@@ -1,13 +1,19 @@
 "use client";
 
 import { CimplifyAccount } from "@cimplify/sdk/react";
+import { brand } from "@/lib/brand";
 
 /**
  * Cimplify Account portal — iframe-mounted UI hosted by Cimplify Link.
  * Handles sign-in, sign-up, OTP, addresses, payment methods, sessions,
  * and order history. The iframe owns auth state; we just choose which
  * `section` to land on.
+ *
+ * `merchantName` is passed so the embedded widget can render scoping
+ * affordances ("Showing your account with Akua's Bakery only.") and
+ * enforce the per-merchant data contract — orders/subs filter to this
+ * business, cross-merchant surfaces are hidden.
  */
 export function AccountIframe({ section }: { section?: string }) {
-  return <CimplifyAccount section={section} />;
+  return <CimplifyAccount section={section} merchantName={brand.name} />;
 }

package/templates/storefront-bakery/components/account-pill.tsx

@@ -0,0 +1,56 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+import Link from "next/link";
+import { CimplifySignInButton, useCimplifySession } from "@cimplify/sdk/react";
+import { signInSilent } from "@cimplify/sdk";
+
+const CLIENT_ID = process.env.NEXT_PUBLIC_CIMPLIFY_CLIENT_ID ?? "";
+
+/**
+ * Header sign-in / signed-in pill.
+ *
+ * - Tries cross-storefront SSO once on mount. If the shopper signed
+ *   into any other Cimplify storefront recently, this resolves
+ *   silently and the session lands without any UI flicker.
+ * - When signed in, renders "Hi, {name}" linking to /account.
+ * - When not signed in, renders the Cimplify Sign-In button.
+ */
+export function AccountPill() {
+  const { session, loading, refresh } = useCimplifySession();
+  const triedSilent = useRef(false);
+
+  useEffect(() => {
+    if (triedSilent.current || session || !CLIENT_ID) return;
+    triedSilent.current = true;
+    void signInSilent({
+      clientId: CLIENT_ID,
+      redirectUri: `${window.location.origin}/auth/callback`,
+    }).then((r) => {
+      if (r.ok) refresh();
+    });
+  }, [session, refresh]);
+
+  if (loading || !CLIENT_ID) return <span className="h-9 w-24" aria-hidden />;
+
+  if (session) {
+    const first = session.name?.split(/\s+/)[0] ?? "Account";
+    return (
+      <Link
+        href="/account"
+        className="text-[13px] font-medium tracking-wide text-foreground hover:text-primary transition-colors"
+      >
+        Hi, {first}
+      </Link>
+    );
+  }
+
+  return (
+    <CimplifySignInButton
+      clientId={CLIENT_ID}
+      redirectUri={`${typeof window !== "undefined" ? window.location.origin : ""}/auth/callback`}
+      variant="text"
+      onSuccess={() => refresh()}
+    />
+  );
+}

package/templates/storefront-bakery/components/header.tsx

@@ -3,6 +3,7 @@ import { Suspense } from "react";
 import { NavLink } from "./nav-link";
 import { CartPill, CartPillSkeleton } from "./cart-pill";
 import { MobileNav } from "./mobile-nav";
+import { AccountPill } from "./account-pill";
 import { brand } from "@/lib/brand";
 
 /**
@@ -29,6 +30,7 @@ export function Header() {
             </Suspense>
           ))}
         </nav>
+        <AccountPill />
         <Suspense fallback={<CartPillSkeleton />}>
           <CartPill />
         </Suspense>

package/templates/storefront-bakery/lib/auth.ts

@@ -0,0 +1,16 @@
+import { headers } from "next/headers";
+import { getSessionFromCookieHeader, type CimplifySession } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+
+export async function getSession(): Promise<CimplifySession | null> {
+  if (!CLIENT_ID) return null;
+  const cookieHeader = (await headers()).get("cookie");
+  return getSessionFromCookieHeader(
+    { clientId: CLIENT_ID, authUrl: AUTH_URL },
+    cookieHeader,
+  );
+}
+
+export type { CimplifySession } from "@cimplify/sdk/server";

package/templates/storefront-bakery/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.54.0",
+    "@cimplify/sdk": "^0.55.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-fashion/app/auth/callback/route.ts

@@ -0,0 +1,16 @@
+import { handleOidcCallback } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
+
+export async function POST(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleOidcCallback(req, {
+    clientId: CLIENT_ID,
+    authUrl: AUTH_URL,
+    redirectUri: REDIRECT_URI,
+  });
+}

package/templates/storefront-fashion/app/auth/session/route.ts

@@ -0,0 +1,11 @@
+import { handleSessionRequest } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID) {
+    return Response.json({ sub: null }, { status: 200 });
+  }
+  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+}

package/templates/storefront-fashion/app/auth/signout/route.ts

@@ -0,0 +1,11 @@
+import { buildSignoutCookie } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+
+export async function POST(): Promise<Response> {
+  const cookie = buildSignoutCookie({ clientId: CLIENT_ID });
+  return new Response(JSON.stringify({ ok: true }), {
+    status: 200,
+    headers: { "Content-Type": "application/json", "Set-Cookie": cookie },
+  });
+}

package/templates/storefront-fashion/components/account-iframe.tsx

@@ -1,13 +1,19 @@
 "use client";
 
 import { CimplifyAccount } from "@cimplify/sdk/react";
+import { brand } from "@/lib/brand";
 
 /**
  * Cimplify Account portal — iframe-mounted UI hosted by Cimplify Link.
  * Handles sign-in, sign-up, OTP, addresses, payment methods, sessions,
  * and order history. The iframe owns auth state; we just choose which
  * `section` to land on.
+ *
+ * `merchantName` is passed so the embedded widget can render scoping
+ * affordances ("Showing your account with {merchant} only.") and
+ * enforce the per-merchant data contract — orders/subs filter to this
+ * business, cross-merchant surfaces are hidden.
  */
 export function AccountIframe({ section }: { section?: string }) {
-  return <CimplifyAccount section={section} />;
+  return <CimplifyAccount section={section} merchantName={brand.name} />;
 }

package/templates/storefront-fashion/components/account-pill.tsx

@@ -0,0 +1,56 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+import Link from "next/link";
+import { CimplifySignInButton, useCimplifySession } from "@cimplify/sdk/react";
+import { signInSilent } from "@cimplify/sdk";
+
+const CLIENT_ID = process.env.NEXT_PUBLIC_CIMPLIFY_CLIENT_ID ?? "";
+
+/**
+ * Header sign-in / signed-in pill.
+ *
+ * - Tries cross-storefront SSO once on mount. If the shopper signed
+ *   into any other Cimplify storefront recently, this resolves
+ *   silently and the session lands without any UI flicker.
+ * - When signed in, renders "Hi, {name}" linking to /account.
+ * - When not signed in, renders the Cimplify Sign-In button.
+ */
+export function AccountPill() {
+  const { session, loading, refresh } = useCimplifySession();
+  const triedSilent = useRef(false);
+
+  useEffect(() => {
+    if (triedSilent.current || session || !CLIENT_ID) return;
+    triedSilent.current = true;
+    void signInSilent({
+      clientId: CLIENT_ID,
+      redirectUri: `${window.location.origin}/auth/callback`,
+    }).then((r) => {
+      if (r.ok) refresh();
+    });
+  }, [session, refresh]);
+
+  if (loading || !CLIENT_ID) return <span className="h-9 w-24" aria-hidden />;
+
+  if (session) {
+    const first = session.name?.split(/\s+/)[0] ?? "Account";
+    return (
+      <Link
+        href="/account"
+        className="text-[13px] font-medium tracking-wide text-foreground hover:text-primary transition-colors"
+      >
+        Hi, {first}
+      </Link>
+    );
+  }
+
+  return (
+    <CimplifySignInButton
+      clientId={CLIENT_ID}
+      redirectUri={`${typeof window !== "undefined" ? window.location.origin : ""}/auth/callback`}
+      variant="text"
+      onSuccess={() => refresh()}
+    />
+  );
+}

package/templates/storefront-fashion/components/header.tsx

@@ -3,6 +3,7 @@ import { Suspense } from "react";
 import { NavLink } from "./nav-link";
 import { CartPill, CartPillSkeleton } from "./cart-pill";
 import { MobileNav } from "./mobile-nav";
+import { AccountPill } from "./account-pill";
 import { brand } from "@/lib/brand";
 
 /**
@@ -29,6 +30,7 @@ export function Header() {
             </Suspense>
           ))}
         </nav>
+        <AccountPill />
         <Suspense fallback={<CartPillSkeleton />}>
           <CartPill />
         </Suspense>

package/templates/storefront-fashion/lib/auth.ts

@@ -0,0 +1,16 @@
+import { headers } from "next/headers";
+import { getSessionFromCookieHeader, type CimplifySession } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+
+export async function getSession(): Promise<CimplifySession | null> {
+  if (!CLIENT_ID) return null;
+  const cookieHeader = (await headers()).get("cookie");
+  return getSessionFromCookieHeader(
+    { clientId: CLIENT_ID, authUrl: AUTH_URL },
+    cookieHeader,
+  );
+}
+
+export type { CimplifySession } from "@cimplify/sdk/server";

package/templates/storefront-fashion/package.json

@@ -19,7 +19,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.54.0",
+    "@cimplify/sdk": "^0.55.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-grocery/app/auth/callback/route.ts

@@ -0,0 +1,16 @@
+import { handleOidcCallback } from "@cimplify/sdk/server";
+
+const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
+const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
+
+export async function POST(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleOidcCallback(req, {
+    clientId: CLIENT_ID,
+    authUrl: AUTH_URL,
+    redirectUri: REDIRECT_URI,
+  });
+}