@contentful/experience-design-system-cli 2.20.1-dev-build-11e15ac.0 → 2.20.1-dev-build-52daaec.0

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentful/experience-design-system-cli",
-  "version": "2.20.1-dev-build-11e15ac.0",
+  "version": "2.20.1-dev-build-52daaec.0",
   "description": "Contentful Experiences design system import CLI",
   "license": "MIT",
   "type": "module",

package/dist/src/apply/api-client.d.ts

@@ -50,6 +50,7 @@ export declare class ImportApiClient {
     private headers;
     private requestWithRetry;
     validateToken(): Promise<void>;
+    checkPreflight(): Promise<void>;
     previewImport(manifest: ManifestPayload): Promise<ServerPreviewResponse>;
     applyImport(manifest: ManifestPayload, acknowledgeBreakingChanges: boolean): Promise<ApplyOperationResponse>;
     pollOperation(operationId: string, opts?: {

package/dist/src/apply/api-client.js

@@ -148,6 +148,18 @@ function sanitizePreviewResponse(res) {
     }
     return res;
 }
+function isApsDenialBody(body) {
+    if (!body)
+        return false;
+    try {
+        const parsed = JSON.parse(body);
+        const id = parsed?.sys?.id;
+        return id === 'NotFound' || id === 'AccessDenied';
+    }
+    catch {
+        return false;
+    }
+}
 async function request(url, options) {
     const headers = {
         Authorization: `Bearer ${options.token}`,
@@ -267,6 +279,33 @@ export class ImportApiClient {
         if (!res.ok) {
             throw new ApiError(`unexpected error validating token: ${res.status}`, res.status, await res.text());
         }
+        await this.checkPreflight();
+    }
+    // Probe the sources-api preflight endpoint to catch APS-denied users up-front,
+    // rather than letting them run a full apply flow that only fails at the write.
+    // The endpoint gates Component + DesignToken permissions and returns:
+    //   200 → user has apply permissions, proceed
+    //   403 { sys.id: AccessDenied } → user lacks write; surface via error-parser
+    //   404 { sys.id: NotFound }     → user lacks read (APS hides existence)
+    //   404 without a NotFound envelope → older backend deployment; treat as pass
+    //   5xx / network                → backend flake; treat as pass, do not block
+    async checkPreflight() {
+        const url = `${this.host}/spaces/${this.spaceId}/environments/${this.environmentId}/design_systems/preflight`;
+        let res;
+        try {
+            res = await request(url, { token: this.token });
+        }
+        catch {
+            return; // network error — don't block; the real call will surface it
+        }
+        if (res.ok)
+            return;
+        if (res.status >= 500)
+            return; // backend flake — don't block
+        const body = await res.text();
+        if (res.status === 404 && !isApsDenialBody(body))
+            return; // legacy backend without the endpoint
+        throw new ApiError(`preflight failed: ${res.status}`, res.status, body);
     }
     async previewImport(manifest) {
         const debug = getDebugLogger();

package/dist/src/import/tui/WizardApp.js

@@ -747,9 +747,13 @@ export function WizardApp({ initialSpaceId = '', initialEnvironmentId = 'master'
             await advanceAfterCredentialsValidated();
         }
         catch (e) {
-            if (e instanceof ApiError && (e.status === 401 || e.status === 403)) {
+            if (e instanceof ApiError && (e.status === 401 || e.status === 403 || e.status === 404)) {
                 cancelGeneratePrefetch();
-                update({ step: 'credentials', credentialsValidating: false, credentialsError: e.message });
+                update({
+                    step: 'credentials',
+                    credentialsValidating: false,
+                    credentialsError: formatApiError(e, process.env['EDSI_VERBOSE_ERRORS'] === '1'),
+                });
                 return;
             }
             const msg = e instanceof Error ? e.message : 'Credential check failed';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentful/experience-design-system-cli",
-  "version": "2.20.1-dev-build-11e15ac.0",
+  "version": "2.20.1-dev-build-52daaec.0",
   "description": "Contentful Experiences design system import CLI",
   "license": "MIT",
   "type": "module",
@@ -33,10 +33,10 @@
     "react": "^18.3.1",
     "react-devtools-core": "^4.19.1",
     "react-dom": "^18.3.1",
-    "@contentful/experience-design-system-client": "2.20.1-dev-build-11e15ac.0",
-    "@contentful/experience-design-system-generation": "2.20.1-dev-build-11e15ac.0",
-    "@contentful/experience-design-system-types": "2.20.1-dev-build-11e15ac.0",
-    "@contentful/experience-design-system-extraction": "2.20.1-dev-build-11e15ac.0"
+    "@contentful/experience-design-system-client": "2.20.1-dev-build-52daaec.0",
+    "@contentful/experience-design-system-extraction": "2.20.1-dev-build-52daaec.0",
+    "@contentful/experience-design-system-generation": "2.20.1-dev-build-52daaec.0",
+    "@contentful/experience-design-system-types": "2.20.1-dev-build-52daaec.0"
   },
   "devDependencies": {
     "@tsconfig/node24": "^24.0.4",