@cimplify/cli 0.7.25 → 0.8.0

package/dist/{add-DMA7USQR.mjs → add-TCU5T7Q2.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { REGISTRY_INDEX, REGISTRY } from './chunk-ML6JUUXS.mjs';
+import { REGISTRY_INDEX, REGISTRY } from './chunk-MBLJKDCR.mjs';
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
 import { CliError, CLI_ERROR_CODE, info, bold, dim, success, result, yellow } from './chunk-E2T2SBP5.mjs';

package/dist/{assets-74SK63TR.mjs → assets-EHRFAWZI.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, step, yellow, dim, success, info, result, bold, green } from './chunk-E2T2SBP5.mjs';
 import { createHash } from 'crypto';

package/dist/{auth-step-up-BIUYQJP6.mjs → auth-step-up-RWBXYJKR.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { startLoopbackServer, generateState, openBrowser } from './chunk-GLXONXS3.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { resolveBaseUrl } from './chunk-MAOO6ZZ5.mjs';
+import { resolveBaseUrl } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, writeStepUp } from './chunk-UBAI443T.mjs';
 import { isJsonMode, CliError, CLI_ERROR_CODE, step, info, dim, success, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{cancel-HANLRA6Q.mjs → cancel-DAO23NIX.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, success, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{chunk-5SVTTTD2.mjs → chunk-7DOC7MLJ.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { gitDetectRoot, gitCurrentBranch, gitCurrentSha, gitStatusPorcelain } from './chunk-K5464A3L.mjs';
 import { parseEnvFile } from './chunk-DBZ3UOQ2.mjs';
-import { package_default } from './chunk-NUXKAEX5.mjs';
+import { package_default } from './chunk-BQ5CWVHQ.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
 import { readAuthOrNull, readProjectLinkOrNull, readProjectState } from './chunk-UBAI443T.mjs';
 import { bold, dim, yellow, green, info, result, red } from './chunk-E2T2SBP5.mjs';

package/dist/{chunk-NUXKAEX5.mjs → chunk-BQ5CWVHQ.mjs}

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@cimplify/cli",
-  version: "0.7.25",
+  version: "0.8.0",
   description: "Cimplify CLI \u2014 deploy, manage env vars, link projects, and scaffold storefronts",
   keywords: [
     "cimplify",

package/dist/{chunk-MAOO6ZZ5.mjs → chunk-CV3ZFCX6.mjs}

@@ -28,7 +28,7 @@ var ApiClient = class _ApiClient {
   apiKey;
   stepUpToken = null;
   constructor(baseUrl, apiKey) {
-    this.baseUrl = baseUrl.replace(/\/+$/, "");
+    this.baseUrl = upgradeInsecureUrl(baseUrl).replace(/\/+$/, "");
     this.apiKey = apiKey;
   }
   /** Attach a step-up JWT to subsequent requests via X-Step-Up-Authorization. */
@@ -85,14 +85,24 @@ var ApiClient = class _ApiClient {
         method,
         headers,
         body: payload,
-        signal: controller.signal
+        signal: controller.signal,
+        // Don't follow redirects: fetch downgrades a redirected POST to GET and
+        // drops the body, which lands on a routeless GET and surfaces as a
+        // baffling "HTTP 404". Surface the redirect instead.
+        redirect: "manual"
       });
     } catch (err) {
       clearTimeout(timer);
       throw toNetworkError(err);
     }
     clearTimeout(timer);
-    return parseResponse(response);
+    if (response.type === "opaqueredirect" || response.status >= 300 && response.status < 400) {
+      throw new CliError(
+        CLI_ERROR_CODE.NETWORK_ERROR,
+        `${method} ${url} was redirected. Point ${ENV_API_BASE_URL} (or --base-url) at ${DEFAULT_API_BASE_URL}.`
+      );
+    }
+    return parseResponse(response, method, url);
   }
   buildUrl(pathname, query) {
     const base = pathname.startsWith("/") ? pathname : `/${pathname}`;
@@ -107,11 +117,25 @@ var ApiClient = class _ApiClient {
   }
 };
 function resolveBaseUrl(override) {
-  if (override && override.length > 0) return override;
+  if (override && override.length > 0) return upgradeInsecureUrl(override);
   const fromEnv = process.env[ENV_API_BASE_URL];
-  return fromEnv && fromEnv.length > 0 ? fromEnv : DEFAULT_API_BASE_URL;
+  return upgradeInsecureUrl(fromEnv && fromEnv.length > 0 ? fromEnv : DEFAULT_API_BASE_URL);
+}
+var LOCAL_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "0.0.0.0", "::1"]);
+function upgradeInsecureUrl(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return raw;
+  }
+  if (url.protocol === "http:" && !LOCAL_HOSTS.has(url.hostname) && !url.hostname.endsWith(".local")) {
+    url.protocol = "https:";
+    return url.toString();
+  }
+  return raw;
 }
-async function parseResponse(response) {
+async function parseResponse(response, method, url) {
   const text = await response.text();
   let body = void 0;
   if (text.length > 0) {
@@ -131,7 +155,7 @@ async function parseResponse(response) {
     return body;
   }
   const code = mapStatusToCode(response.status);
-  const message = extractErrorMessage(body, response.status);
+  const message = extractErrorMessage(body, response.status, method, url);
   if (response.status === STATUS_UNAUTHORIZED && /step_up_required/i.test(message)) {
     throw new CliError(
       CLI_ERROR_CODE.STEP_UP_REQUIRED,
@@ -150,7 +174,7 @@ function mapStatusToCode(status) {
   if (status >= STATUS_BAD_REQUEST_MIN) return CLI_ERROR_CODE.INVALID_INPUT;
   return CLI_ERROR_CODE.SERVER_ERROR;
 }
-function extractErrorMessage(body, status) {
+function extractErrorMessage(body, status, method, url) {
   if (body && typeof body === "object") {
     const envelope = body;
     if (envelope.error && typeof envelope.error.error_message === "string") {
@@ -158,7 +182,7 @@ function extractErrorMessage(body, status) {
     }
     if (typeof envelope.message === "string") return envelope.message;
   }
-  return `HTTP ${status}`;
+  return `HTTP ${status} from ${method} ${url}`;
 }
 function toNetworkError(err) {
   if (err instanceof DOMException && err.name === "AbortError") {

package/dist/{chunk-CLNS2NBR.mjs → chunk-IV7SOUH3.mjs}

@@ -2,7 +2,7 @@
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { TOKEN_PURPOSE, REPO_PROVIDER, REPO_PROVIDER_VALUES } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, isJsonMode, result, dim, success, info, bold } from './chunk-E2T2SBP5.mjs';