@cimplify/cli 0.7.6 → 0.7.8

package/dist/{chunk-CIRUNSIM.mjs → chunk-LH7Y27BQ.mjs}

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@cimplify/cli",
-  version: "0.7.6",
+  version: "0.7.8",
   description: "Cimplify CLI \u2014 deploy, manage env vars, link projects, and scaffold storefronts",
   keywords: [
     "cimplify",
@@ -47,7 +47,7 @@ var package_default = {
     vitest: "^4.1.5"
   },
   dependencies: {
-    "@cimplify/sdk": "^0.58.0"
+    "@cimplify/sdk": "^0.60.0"
   }
 };
 

package/dist/{chunk-Q4H7IMO5.mjs → chunk-WO2KN3QD.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { gitDetectRoot, gitCurrentBranch, gitCurrentSha, gitStatusPorcelain } from './chunk-K5464A3L.mjs';
 import { parseEnvFile } from './chunk-DBZ3UOQ2.mjs';
-import { package_default } from './chunk-CIRUNSIM.mjs';
+import { package_default } from './chunk-LH7Y27BQ.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
 import { readAuthOrNull, readProjectLinkOrNull, readProjectState } from './chunk-UBAI443T.mjs';
 import { bold, dim, yellow, green, info, result, red } from './chunk-E2T2SBP5.mjs';

package/dist/dispatcher.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { TEMPLATES } from './chunk-Z4OBZRGQ.mjs';
-import { package_default } from './chunk-CIRUNSIM.mjs';
+import { TEMPLATES } from './chunk-7ULQCWYD.mjs';
+import { package_default } from './chunk-LH7Y27BQ.mjs';
 
 // src/dispatcher.ts
 var VERSION = package_default.version ?? "unknown";
@@ -138,16 +138,16 @@ var COMMANDS = {
   logs: () => import('./logs-YNN2PQ24.mjs'),
   status: () => import('./status-JSYXM5RT.mjs'),
   dev: () => import('./dev-ONW2S77K.mjs'),
-  introspect: () => import('./introspect-FK4XSDDL.mjs'),
+  introspect: () => import('./introspect-JFJOCF5M.mjs'),
   inspect: () => import('./inspect-CGYX4DDF.mjs'),
-  doctor: () => import('./doctor-FXZMYCL5.mjs'),
-  explain: () => import('./explain-AJEHO5D5.mjs'),
+  doctor: () => import('./doctor-U7QRYEFG.mjs'),
+  explain: () => import('./explain-ZPBYGQWC.mjs'),
   assets: () => import('./assets-74SK63TR.mjs'),
   repo: () => import('./repo-KNQMSPVV.mjs'),
-  list: () => import('./list-T2QQBM2X.mjs'),
-  add: () => import('./add-L36PRZQO.mjs'),
-  update: () => import('./update-3SQQSO5C.mjs'),
-  upgrade: () => import('./update-3SQQSO5C.mjs'),
+  list: () => import('./list-LOKEBW5S.mjs'),
+  add: () => import('./add-BMHJY65N.mjs'),
+  update: () => import('./update-EJGLLHRW.mjs'),
+  upgrade: () => import('./update-EJGLLHRW.mjs'),
   "auth-step-up": () => import('./auth-step-up-BIUYQJP6.mjs')
 };
 var COMMAND_PREFIXES = {

package/dist/{doctor-FXZMYCL5.mjs → doctor-U7QRYEFG.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { gatherIntrospection } from './chunk-Q4H7IMO5.mjs';
+import { gatherIntrospection } from './chunk-WO2KN3QD.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-CIRUNSIM.mjs';
+import './chunk-LH7Y27BQ.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
 import { ApiClient } from './chunk-MAOO6ZZ5.mjs';
 import { readAuthOrNull } from './chunk-UBAI443T.mjs';

package/dist/{explain-AJEHO5D5.mjs → explain-ZPBYGQWC.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-CIRUNSIM.mjs';
+import { package_default } from './chunk-LH7Y27BQ.mjs';
 import { parseArgs } from './chunk-C4M3DXKC.mjs';
 import { bold, dim, info, result, CliError, CLI_ERROR_CODE } from './chunk-E2T2SBP5.mjs';
 

package/dist/{introspect-FK4XSDDL.mjs → introspect-JFJOCF5M.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-Q4H7IMO5.mjs';
+export { run as default, extractMockSeed, gatherIntrospection, renderIntrospection } from './chunk-WO2KN3QD.mjs';
 import './chunk-K5464A3L.mjs';
 import './chunk-DBZ3UOQ2.mjs';
-import './chunk-CIRUNSIM.mjs';
+import './chunk-LH7Y27BQ.mjs';
 import './chunk-C4M3DXKC.mjs';
 import './chunk-UBAI443T.mjs';
 import './chunk-E2T2SBP5.mjs';

package/dist/{list-T2QQBM2X.mjs → list-LOKEBW5S.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { REGISTRY_INDEX } from './chunk-Z4OBZRGQ.mjs';
+import { REGISTRY_INDEX } from './chunk-7ULQCWYD.mjs';
 import { parseArgs, flagBool } from './chunk-C4M3DXKC.mjs';
 import { CliError, CLI_ERROR_CODE, info, bold, dim, green, result } from './chunk-E2T2SBP5.mjs';
 

package/dist/{update-3SQQSO5C.mjs → update-EJGLLHRW.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { package_default } from './chunk-CIRUNSIM.mjs';
+import { package_default } from './chunk-LH7Y27BQ.mjs';
 import { promptYesNo } from './chunk-ITAFAORS.mjs';
 import { parseArgs, flagBool, flagString } from './chunk-C4M3DXKC.mjs';
 import { success, bold, info, dim, result, failure, CliError, CLI_ERROR_CODE, step, isJsonMode } from './chunk-E2T2SBP5.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cimplify/cli",
-  "version": "0.7.6",
+  "version": "0.7.8",
   "description": "Cimplify CLI — deploy, manage env vars, link projects, and scaffold storefronts",
   "keywords": [
     "cimplify",
@@ -45,6 +45,6 @@
     "vitest": "^4.1.5"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.58.0"
+    "@cimplify/sdk": "^0.60.0"
   }
 }

package/templates/manifest.json

@@ -1,6 +1,6 @@
 {
-  "cliVersion": "0.5.4",
-  "generatedAt": "2026-05-16T20:50:00.000Z",
+  "cliVersion": "0.7.8",
+  "generatedAt": "2026-05-29T18:52:46.276Z",
   "templates": [
     {
       "id": "bakery",
@@ -18,9 +18,9 @@
         "seedName": "default",
         "seedBusinessId": "bus_default_akua_bakery"
       },
-      "objectKey": "templates/bakery-v0.5.0.tar.gz",
-      "sha256": "24f4881bf140f6bf03089adfe1d1097518f0a8eb37d145a2adea0cfb8126d40b",
-      "sizeBytes": 48191
+      "objectKey": "templates/bakery-v0.7.8.tar.gz",
+      "sha256": "703cfa58d00bdfcb7efabea4bf38970425a924815a96670b3e034cc89cea4e01",
+      "sizeBytes": 77159
     },
     {
       "id": "restaurant",
@@ -38,9 +38,9 @@
         "seedName": "restaurant",
         "seedBusinessId": "bus_mamas_kitchen"
       },
-      "objectKey": "templates/restaurant-v0.5.0.tar.gz",
-      "sha256": "bb3d122d46e171d9ff04db8a8172baaa1720a325622da2ab8b4d18dc0b2377df",
-      "sizeBytes": 49181
+      "objectKey": "templates/restaurant-v0.7.8.tar.gz",
+      "sha256": "dfb73ea0823b51599fd992a64e91610b8c267ebb4ddc41c582b8005066713de6",
+      "sizeBytes": 144037
     },
     {
       "id": "retail",
@@ -58,9 +58,9 @@
         "seedName": "retail",
         "seedBusinessId": "bus_currents_electronics"
       },
-      "objectKey": "templates/retail-v0.5.0.tar.gz",
-      "sha256": "3e8cfcf56f2265c87735a26a9a0b624bb882f45971a818dbec516546b4b2a4c9",
-      "sizeBytes": 56993
+      "objectKey": "templates/retail-v0.7.8.tar.gz",
+      "sha256": "187e2153cf0dd04b47620ce2a3a62f1075296fc03013ae6db65bcae98fd1b4c0",
+      "sizeBytes": 154591
     },
     {
       "id": "services",
@@ -78,9 +78,9 @@
         "seedName": "services",
         "seedBusinessId": "bus_serene_spa"
       },
-      "objectKey": "templates/services-v0.5.0.tar.gz",
-      "sha256": "c8d69dddef8c5de632a16f91a26a5fc52595008341d1e4e09e1763d7ac951841",
-      "sizeBytes": 48892
+      "objectKey": "templates/services-v0.7.8.tar.gz",
+      "sha256": "a7b7e88e72610cc1b3bc3f5132dd3fbe4bfe0ef97150876e8a34b4d45205b3cb",
+      "sizeBytes": 76843
     },
     {
       "id": "grocery",
@@ -98,9 +98,9 @@
         "seedName": "grocery",
         "seedBusinessId": "bus_freshmart"
       },
-      "objectKey": "templates/grocery-v0.5.0.tar.gz",
-      "sha256": "b1a4db39ccf95b31a521fba4ee0cae1c9fcc6e3ab1f5a35002fcddb0052a6d2d",
-      "sizeBytes": 45912
+      "objectKey": "templates/grocery-v0.7.8.tar.gz",
+      "sha256": "c8dca986c5d2291266886115247e2172c92ea3d0256bb3475cdd66141a5f0fa3",
+      "sizeBytes": 74319
     },
     {
       "id": "fashion",
@@ -118,9 +118,9 @@
         "seedName": "fashion",
         "seedBusinessId": "bus_studio_frx"
       },
-      "objectKey": "templates/fashion-v0.5.0.tar.gz",
-      "sha256": "543a17fb9a351bfb4db2f8d5e67e008e9f57b98065e8a437e890ce5a6221d883",
-      "sizeBytes": 61611
+      "objectKey": "templates/fashion-v0.7.8.tar.gz",
+      "sha256": "b4b1d5178bee794b6deeda388b9d28a6fadf10950e312dae8f10b4f6f735c1ba",
+      "sizeBytes": 162319
     },
     {
       "id": "pharmacy",
@@ -138,9 +138,9 @@
         "seedName": "pharmacy",
         "seedBusinessId": "bus_wellspring_pharmacy"
       },
-      "objectKey": "templates/pharmacy-v0.5.0.tar.gz",
-      "sha256": "5f9cd8bc6c75a44b267fb8bee8b609633f8c4156493f32244574c9a6e800c4b3",
-      "sizeBytes": 61742
+      "objectKey": "templates/pharmacy-v0.7.8.tar.gz",
+      "sha256": "e9e248e3d90c9f7da61a08243f9152b0ea25bb22beb591e9eccf8f6e902dcfbd",
+      "sizeBytes": 158835
     },
     {
       "id": "auto",
@@ -158,9 +158,9 @@
         "seedName": "auto",
         "seedBusinessId": "bus_driveline_auto"
       },
-      "objectKey": "templates/auto-v0.5.0.tar.gz",
-      "sha256": "8e4e57d01dd73cf70e80b04e7516b4968ee89d30fd87e5a4fda15dce78348994",
-      "sizeBytes": 59701
+      "objectKey": "templates/auto-v0.7.8.tar.gz",
+      "sha256": "4215739fa1e548f0648122bb73e859e76527512184f1a47e024d67462a78b1be",
+      "sizeBytes": 209176617
     }
   ]
 }

package/templates/storefront-auto/app/auth/callback/route.ts

@@ -1,16 +1,30 @@
-import { handleOidcCallback } from "@cimplify/sdk/server";
+import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
+// Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleRedirectCallback(req, {
+    clientId: CLIENT_ID,
+    issuer: ISSUER,
+    redirectUri: REDIRECT_URI,
+    defaultReturnTo: "/account",
+  });
+}
+
+// Modal/silent sign-in: posts {code, codeVerifier, state} here for exchange.
 export async function POST(req: Request): Promise<Response> {
   if (!CLIENT_ID || !REDIRECT_URI) {
     return Response.json({ error: "oidc_not_configured" }, { status: 500 });
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-auto/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-auto/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-auto/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.58.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-bakery/app/auth/callback/route.ts

@@ -1,16 +1,30 @@
-import { handleOidcCallback } from "@cimplify/sdk/server";
+import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
+// Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleRedirectCallback(req, {
+    clientId: CLIENT_ID,
+    issuer: ISSUER,
+    redirectUri: REDIRECT_URI,
+    defaultReturnTo: "/account",
+  });
+}
+
+// Modal/silent sign-in: posts {code, codeVerifier, state} here for exchange.
 export async function POST(req: Request): Promise<Response> {
   if (!CLIENT_ID || !REDIRECT_URI) {
     return Response.json({ error: "oidc_not_configured" }, { status: 500 });
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-bakery/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-bakery/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-bakery/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.58.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-fashion/app/auth/callback/route.ts

@@ -1,16 +1,30 @@
-import { handleOidcCallback } from "@cimplify/sdk/server";
+import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
+// Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleRedirectCallback(req, {
+    clientId: CLIENT_ID,
+    issuer: ISSUER,
+    redirectUri: REDIRECT_URI,
+    defaultReturnTo: "/account",
+  });
+}
+
+// Modal/silent sign-in: posts {code, codeVerifier, state} here for exchange.
 export async function POST(req: Request): Promise<Response> {
   if (!CLIENT_ID || !REDIRECT_URI) {
     return Response.json({ error: "oidc_not_configured" }, { status: 500 });
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-fashion/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-fashion/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-fashion/package.json

@@ -19,7 +19,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.58.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-grocery/app/auth/callback/route.ts

@@ -1,16 +1,30 @@
-import { handleOidcCallback } from "@cimplify/sdk/server";
+import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
+// Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleRedirectCallback(req, {
+    clientId: CLIENT_ID,
+    issuer: ISSUER,
+    redirectUri: REDIRECT_URI,
+    defaultReturnTo: "/account",
+  });
+}
+
+// Modal/silent sign-in: posts {code, codeVerifier, state} here for exchange.
 export async function POST(req: Request): Promise<Response> {
   if (!CLIENT_ID || !REDIRECT_URI) {
     return Response.json({ error: "oidc_not_configured" }, { status: 500 });
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-grocery/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-grocery/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-grocery/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.58.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-pharmacy/app/auth/callback/route.ts

@@ -1,16 +1,30 @@
-import { handleOidcCallback } from "@cimplify/sdk/server";
+import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
+// Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleRedirectCallback(req, {
+    clientId: CLIENT_ID,
+    issuer: ISSUER,
+    redirectUri: REDIRECT_URI,
+    defaultReturnTo: "/account",
+  });
+}
+
+// Modal/silent sign-in: posts {code, codeVerifier, state} here for exchange.
 export async function POST(req: Request): Promise<Response> {
   if (!CLIENT_ID || !REDIRECT_URI) {
     return Response.json({ error: "oidc_not_configured" }, { status: 500 });
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }

package/templates/storefront-pharmacy/app/auth/session/route.ts

@@ -1,11 +1,11 @@
 import { handleSessionRequest } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
 export async function GET(req: Request): Promise<Response> {
   if (!CLIENT_ID) {
     return Response.json({ sub: null }, { status: 200 });
   }
-  return handleSessionRequest(req, { clientId: CLIENT_ID, authUrl: AUTH_URL });
+  return handleSessionRequest(req, { clientId: CLIENT_ID, issuer: ISSUER });
 }

package/templates/storefront-pharmacy/lib/auth.ts

@@ -8,9 +8,9 @@ import {
 } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 
-const oidcConfig = { clientId: CLIENT_ID, authUrl: AUTH_URL };
+const oidcConfig = { clientId: CLIENT_ID, issuer: ISSUER };
 
 export async function getSession(): Promise<CimplifySession | null> {
   if (!CLIENT_ID) return null;

package/templates/storefront-pharmacy/package.json

@@ -17,7 +17,7 @@
     "check": "bun run typecheck && bun run test:run"
   },
   "dependencies": {
-    "@cimplify/sdk": "^0.58.0",
+    "@cimplify/sdk": "^0.60.0",
     "next": "^16.2.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/storefront-restaurant/app/auth/callback/route.ts

@@ -1,16 +1,30 @@
-import { handleOidcCallback } from "@cimplify/sdk/server";
+import { handleOidcCallback, handleRedirectCallback } from "@cimplify/sdk/server";
 
 const CLIENT_ID = process.env.CIMPLIFY_CLIENT_ID ?? "";
-const AUTH_URL = process.env.CIMPLIFY_AUTH_URL;
+const ISSUER = process.env.CIMPLIFY_ISSUER;
 const REDIRECT_URI = process.env.CIMPLIFY_REDIRECT_URI ?? "";
 
+// Redirect sign-in: the browser lands here via a top-level GET carrying ?code.
+export async function GET(req: Request): Promise<Response> {
+  if (!CLIENT_ID || !REDIRECT_URI) {
+    return Response.json({ error: "oidc_not_configured" }, { status: 500 });
+  }
+  return handleRedirectCallback(req, {
+    clientId: CLIENT_ID,
+    issuer: ISSUER,
+    redirectUri: REDIRECT_URI,
+    defaultReturnTo: "/account",
+  });
+}
+
+// Modal/silent sign-in: posts {code, codeVerifier, state} here for exchange.
 export async function POST(req: Request): Promise<Response> {
   if (!CLIENT_ID || !REDIRECT_URI) {
     return Response.json({ error: "oidc_not_configured" }, { status: 500 });
   }
   return handleOidcCallback(req, {
     clientId: CLIENT_ID,
-    authUrl: AUTH_URL,
+    issuer: ISSUER,
     redirectUri: REDIRECT_URI,
   });
 }