@cimplify/cli 0.7.25 → 0.8.0

package/dist/{deploy-YVCYHNSS.mjs → deploy-M63QHHOD.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { isFreestyleRemote, gitDetectRoot, gitStatusPorcelain, gitCurrentBranch, gitCurrentSha, gitGetRemoteUrl, gitPushToUrl, gitPush } from './chunk-K5464A3L.mjs';
 import { pollDeployment } from './chunk-VTR5R5NQ.mjs';
-import { fetchRepoRecord, fetchCloneToken } from './chunk-CLNS2NBR.mjs';
+import { fetchRepoRecord, fetchCloneToken } from './chunk-IV7SOUH3.mjs';
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { REPO_PROVIDER, ENV_SCOPE, DEPLOY_TRIGGER, DEPLOYMENT_STATUS, TOKEN_PURPOSE } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink, writeProjectState } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, info, dim, step, success, result, EXIT_CODE } from './chunk-E2T2SBP5.mjs';
 

package/dist/{dev-ONW2S77K.mjs → dev-VE6VVDEU.mjs}

@@ -2,7 +2,7 @@
 import { parseEnvFile, formatEnvFile } from './chunk-DBZ3UOQ2.mjs';
 import { ENV_SCOPE, PUBLIC_ENV_PREFIX } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
 import { info, CliError, CLI_ERROR_CODE, dim } from './chunk-E2T2SBP5.mjs';
 import { spawn } from 'child_process';

package/dist/dispatcher.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-NUXKAEX5.mjs';
-import { TEMPLATES } from './chunk-ML6JUUXS.mjs';
+import { package_default } from './chunk-BQ5CWVHQ.mjs';
+import { TEMPLATES } from './chunk-MBLJKDCR.mjs';
 
 // src/dispatcher.ts
 var VERSION = package_default.version ?? "unknown";
@@ -129,32 +129,32 @@ Local mock server (custom demo data, no fork needed):
   cimplify mock --seed-module ./seed.ts      Boot from a seed module (defineSeed from @cimplify/sdk/mock)
 `;
 var COMMANDS = {
-  login: () => import('./login-3OD4ND2H.mjs'),
+  login: () => import('./login-EMJ33OD4.mjs'),
   logout: () => import('./logout-3RLBZ33M.mjs'),
-  whoami: () => import('./whoami-DNZ7RUTH.mjs'),
-  projects: () => import('./projects-QSUWVTJZ.mjs'),
-  link: () => import('./link-DZSILT5N.mjs'),
+  whoami: () => import('./whoami-LPQMPYTE.mjs'),
+  projects: () => import('./projects-QKI6CTCD.mjs'),
+  link: () => import('./link-746RR2HY.mjs'),
   unlink: () => import('./unlink-RFK74SFP.mjs'),
-  deploy: () => import('./deploy-YVCYHNSS.mjs'),
-  cancel: () => import('./cancel-HANLRA6Q.mjs'),
-  rollback: () => import('./rollback-DD4RNRFM.mjs'),
-  env: () => import('./env-7ISJ73YI.mjs'),
-  domains: () => import('./domains-6GJASWJU.mjs'),
-  logs: () => import('./logs-YNN2PQ24.mjs'),
-  status: () => import('./status-JSYXM5RT.mjs'),
-  dev: () => import('./dev-ONW2S77K.mjs'),
+  deploy: () => import('./deploy-M63QHHOD.mjs'),
+  cancel: () => import('./cancel-DAO23NIX.mjs'),
+  rollback: () => import('./rollback-ZR6X6IQ5.mjs'),
+  env: () => import('./env-VKTOPGSZ.mjs'),
+  domains: () => import('./domains-7QM444PU.mjs'),
+  logs: () => import('./logs-DSYUOYQJ.mjs'),
+  status: () => import('./status-AIENVHAV.mjs'),
+  dev: () => import('./dev-VE6VVDEU.mjs'),
   mock: () => import('./mock-TSUKCLWU.mjs'),
-  introspect: () => import('./introspect-PJ6SLINK.mjs'),
+  introspect: () => import('./introspect-SHUBKCPY.mjs'),
   inspect: () => import('./inspect-CGYX4DDF.mjs'),
-  doctor: () => import('./doctor-IOEKC6LJ.mjs'),
-  explain: () => import('./explain-GBKONBB3.mjs'),
-  assets: () => import('./assets-74SK63TR.mjs'),
-  repo: () => import('./repo-KNQMSPVV.mjs'),
-  list: () => import('./list-ZTKE2YVE.mjs'),
-  add: () => import('./add-DMA7USQR.mjs'),
-  update: () => import('./update-BZ53TKVN.mjs'),
-  upgrade: () => import('./update-BZ53TKVN.mjs'),
-  "auth-step-up": () => import('./auth-step-up-BIUYQJP6.mjs')
+  doctor: () => import('./doctor-TBQN7ZSR.mjs'),
+  explain: () => import('./explain-LFL4IXXK.mjs'),
+  assets: () => import('./assets-EHRFAWZI.mjs'),
+  repo: () => import('./repo-3BEDOFZX.mjs'),
+  list: () => import('./list-BVSFEBG7.mjs'),
+  add: () => import('./add-TCU5T7Q2.mjs'),
+  update: () => import('./update-THXRRDNG.mjs'),
+  upgrade: () => import('./update-THXRRDNG.mjs'),
+  "auth-step-up": () => import('./auth-step-up-RWBXYJKR.mjs')
 };
 var COMMAND_PREFIXES = {
   auth: { "step-up": "auth-step-up" }

package/dist/{doctor-IOEKC6LJ.mjs → doctor-TBQN7ZSR.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { gatherIntrospection } from './chunk-5SVTTTD2.mjs';
+import { gatherIntrospection } from './chunk-7DOC7MLJ.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-NUXKAEX5.mjs';
+import './chunk-BQ5CWVHQ.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuthOrNull } from './chunk-UBAI443T.mjs';
 import { bold, dim, info, result, isCliError, CLI_ERROR_CODE, red, yellow, green } from './chunk-E2T2SBP5.mjs';
 import { promises } from 'fs';

package/dist/{domains-6GJASWJU.mjs → domains-7QM444PU.mjs}

@@ -2,7 +2,7 @@
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { ENV_SCOPE, DOMAIN_TYPE } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, result, info, dim, bold, success } from './chunk-E2T2SBP5.mjs';
 

package/dist/{env-7ISJ73YI.mjs → env-VKTOPGSZ.mjs}

@@ -3,7 +3,7 @@ import { formatEnvFile, parseEnvFile, parseKeyValueArg } from './chunk-DBZ3UOQ2.
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { ENV_SCOPE, PUBLIC_ENV_PREFIX, SECRET_MASK } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-E2T2SBP5.mjs';
 import { promises } from 'fs';

package/dist/{explain-GBKONBB3.mjs → explain-LFL4IXXK.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-NUXKAEX5.mjs';
+import { package_default } from './chunk-BQ5CWVHQ.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
 import { bold, dim, info, result, CliError, CLI_ERROR_CODE } from './chunk-E2T2SBP5.mjs';
 

package/dist/{introspect-PJ6SLINK.mjs → introspect-SHUBKCPY.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-5SVTTTD2.mjs';
+export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-7DOC7MLJ.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-NUXKAEX5.mjs';
+import './chunk-BQ5CWVHQ.mjs';
 import './chunk-C4M3DXKC.mjs';
 import './chunk-UBAI443T.mjs';
 import './chunk-E2T2SBP5.mjs';

package/dist/{link-DZSILT5N.mjs → link-746RR2HY.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, writeProjectLink } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, success, info, dim, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{list-ZTKE2YVE.mjs → list-BVSFEBG7.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { REGISTRY_INDEX } from './chunk-ML6JUUXS.mjs';
+import { REGISTRY_INDEX } from './chunk-MBLJKDCR.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
 import { CliError, CLI_ERROR_CODE, info, bold, dim, green, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{login-3OD4ND2H.mjs → login-EMJ33OD4.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { generatePkcePair, generateState, startLoopbackServer, openBrowser } from './chunk-GLXONXS3.mjs';
+import { generatePkcePair, openBrowser } from './chunk-GLXONXS3.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { resolveBaseUrl, ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { resolveBaseUrl, ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { writeAuth } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, success, result, isJsonMode, step, info, dim } from './chunk-E2T2SBP5.mjs';
 import os from 'os';
@@ -22,6 +22,7 @@ var ENDPOINT_CLI_TOKEN = "/v1/auth/cli/token";
 var KEY_PREFIX_CAK = "cak_";
 var KEY_PREFIX_CSK = "csk_";
 var PRODUCT_NAME = "cimplify-cli";
+var POLL_INTERVAL_MS = 2e3;
 async function run(argv) {
   const args = parseArgs(argv);
   const baseUrl = resolveBaseUrl(flagString(args, FLAG_BASE_URL));
@@ -81,13 +82,10 @@ async function loginWithBrowser(baseUrl, noBrowser, requestedScopes) {
     );
   }
   const pkce = generatePkcePair();
-  const state = generateState();
-  const loopback = await startLoopbackServer(baseUrl);
-  const startBody = {
+  const unauthClient = ApiClient.unauthenticated(baseUrl);
+  const startResponse = await unauthClient.post(ENDPOINT_CLI_START, {
     code_challenge: pkce.codeChallenge,
     code_challenge_method: pkce.codeChallengeMethod,
-    redirect_uri: loopback.redirectUri,
-    state,
     client_meta: {
       hostname: os.hostname(),
       platform: process.platform,
@@ -96,12 +94,7 @@ async function loginWithBrowser(baseUrl, noBrowser, requestedScopes) {
       product: PRODUCT_NAME
     },
     requested_scopes: requestedScopes
-  };
-  const unauthClient = ApiClient.unauthenticated(baseUrl);
-  const startResponse = await unauthClient.post(
-    ENDPOINT_CLI_START,
-    startBody
-  );
+  });
   step("Opening browser to authorize this CLI...");
   info(dim(startResponse.approval_url));
   if (!noBrowser) {
@@ -110,30 +103,13 @@ async function loginWithBrowser(baseUrl, noBrowser, requestedScopes) {
     info("");
     info(dim("Open the URL above in any browser to continue."));
   }
-  let callback;
-  try {
-    callback = await loopback.awaitCallback(startResponse.expires_in_secs * 1e3);
-  } catch (err) {
-    loopback.close();
-    throw err;
-  }
-  if (callback.state !== state) {
-    throw new CliError(
-      CLI_ERROR_CODE.UNAUTHORIZED,
-      "OAuth state mismatch. Possible CSRF attempt \u2014 try again."
-    );
-  }
-  if (!callback.code) {
-    throw new CliError(
-      CLI_ERROR_CODE.UNAUTHORIZED,
-      "Login callback missing auth_code."
-    );
-  }
-  const token = await unauthClient.post(ENDPOINT_CLI_TOKEN, {
-    auth_code: callback.code,
-    code_verifier: pkce.codeVerifier,
-    redirect_uri: loopback.redirectUri
-  });
+  step("Waiting for approval...");
+  const token = await pollForToken(
+    unauthClient,
+    startResponse.request_id,
+    pkce.codeVerifier,
+    startResponse.expires_in_secs
+  );
   await writeAuth({
     apiKey: token.access_token,
     apiBaseUrl: baseUrl,
@@ -149,5 +125,23 @@ async function loginWithBrowser(baseUrl, noBrowser, requestedScopes) {
     method: "oauth_pkce"
   });
 }
+async function pollForToken(client, requestId, codeVerifier, expiresInSecs) {
+  const deadline = Date.now() + expiresInSecs * 1e3;
+  while (Date.now() < deadline) {
+    const resp = await client.post(ENDPOINT_CLI_TOKEN, {
+      request_id: requestId,
+      code_verifier: codeVerifier
+    });
+    if (resp.status === "complete") return resp;
+    await delay(POLL_INTERVAL_MS);
+  }
+  throw new CliError(
+    CLI_ERROR_CODE.TIMEOUT,
+    "Login timed out waiting for approval. Re-run `cimplify login`."
+  );
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
 
 export { run as default };

package/dist/{logs-YNN2PQ24.mjs → logs-DSYUOYQJ.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { TERMINAL_DEPLOYMENT_STATUSES } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink, readProjectState } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, isJsonMode, failure, result, red } from './chunk-E2T2SBP5.mjs';
 

package/dist/{projects-QSUWVTJZ.mjs → projects-QKI6CTCD.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { REPO_PROVIDER } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagString, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, info, dim, result, bold, success } from './chunk-E2T2SBP5.mjs';
 

package/dist/{repo-KNQMSPVV.mjs → repo-3BEDOFZX.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-export { run as default, fetchCloneToken, fetchRepoRecord } from './chunk-CLNS2NBR.mjs';
+export { run as default, fetchCloneToken, fetchRepoRecord } from './chunk-IV7SOUH3.mjs';
 import './chunk-ITAFAORS.mjs';
 import './chunk-MXYUAJEW.mjs';
 import './chunk-C4M3DXKC.mjs';
-import './chunk-MAOO6ZZ5.mjs';
+import './chunk-CV3ZFCX6.mjs';
 import './chunk-UBAI443T.mjs';
 import './chunk-E2T2SBP5.mjs';

package/dist/{rollback-DD4RNRFM.mjs → rollback-ZR6X6IQ5.mjs}

@@ -2,7 +2,7 @@
 import { pollDeployment } from './chunk-VTR5R5NQ.mjs';
 import { DEPLOYMENT_STATUS, DEPLOY_TRIGGER } from './chunk-MXYUAJEW.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink, writeProjectState } from './chunk-UBAI443T.mjs';
 import { CliError, CLI_ERROR_CODE, step, success, info, dim, result, EXIT_CODE } from './chunk-E2T2SBP5.mjs';
 

package/dist/{status-JSYXM5RT.mjs → status-AIENVHAV.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { DEPLOYMENT_STATUS } from './chunk-MXYUAJEW.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth, readProjectLink, readProjectState } from './chunk-UBAI443T.mjs';
 import { bold, dim, info, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{update-BZ53TKVN.mjs → update-THXRRDNG.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-NUXKAEX5.mjs';
+import { package_default } from './chunk-BQ5CWVHQ.mjs';
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
 import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-E2T2SBP5.mjs';

package/dist/{whoami-DNZ7RUTH.mjs → whoami-LPQMPYTE.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
+import { ApiClient } from './chunk-CV3ZFCX6.mjs';
 import { readAuth } from './chunk-UBAI443T.mjs';
 import { info, bold, dim, result } from './chunk-E2T2SBP5.mjs';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cimplify/cli",
-  "version": "0.7.25",
+  "version": "0.8.0",
   "description": "Cimplify CLI — deploy, manage env vars, link projects, and scaffold storefronts",
   "keywords": [
     "cimplify",