@drip-apex/apex-cli 0.15.0 → 0.15.1

package/README.md

@@ -227,6 +227,7 @@ command inventory:
 
 | Command | Purpose |
 | --- | --- |
+| `apex admin customers create` | Create internal, demo or dogfood accounts with a platform user key. Requires `--name`, `--category`, an 8 to 500 character `--reason`, and `--confirm`. |
 | `apex admin shops archive <shopId>` | Archive a shop and disable Apex delivery; use `--force` in non-interactive environments. |
 | `apex admin shops restore <shopId>` | Restore an archived shop while leaving its runtime kill switch unchanged. |
 
@@ -240,18 +241,19 @@ apex landing-pages create --name "Fall sale" --out ./fall-sale   # or: pull <id>
 # edit ./fall-sale/index.html and its assets; context/ holds brand, catalog, offers and reviews
 apex landing-pages plan ./fall-sale             # what would change
 apex landing-pages apply ./fall-sale --yes      # new version + signed preview link (24 hours)
-apex landing-pages deploy ./fall-sale           # live on the claimed host in apex-landing-page.json
+apex landing-pages deploy ./fall-sale           # live on <shop>.apex-page.com, or the host in apex-landing-page.json
 apex landing-pages rollback ./fall-sale --version 1
 apex landing-pages experiment ./fall-sale --control 1 --variant 2   # draft split; start it in the dashboard
 ```
 
 The folder holds the page files (index.html at the root, at most 300 files
-and 25 MB; html, css, js, json, svg, images, fonts, txt, xml, webmanifest),
+and 100 MB; html, css, js, json, svg, images, fonts, txt, xml, webmanifest, mp4 and webm),
 `apex-landing-page.json` and the `context/` folder (each pull replaces its JSON
 files with the server's current set). Build with relative asset
 URLs (Vite `base: "./"`). `apex-landing-page.json` sets the name, slug, an
-claimed `host` (deploy needs one, or `--host`: claim it with
-`apex domains claim <host>`; Apex has no shared pages host yet), the `path`, whether Apex injects the shop snippet
+optional `host`, a domain claimed with `apex domains claim <host>` (without
+one, or `--host`, a deploy goes to the shop's own instant host
+`<shop>.apex-page.com`), the `path` (default `/<slug>`), whether Apex injects the shop snippet
 (`snippet`, on by default), the `shop_hosts` that receive the visitor's identity
 on outbound links (default: the shop's install domains), the `goals`
 (key, name, type click, pageview or custom) and an optional `experiment`
@@ -522,3 +524,30 @@ are sent. Login/logout, tests, the mock transport, and runs with no resolvable c
 (`APEX_API_KEY` or `DRIP_API_KEY`) are recorded with credential kind `env` unless
 `APEX_TELEMETRY=0`. Set `APEX_TELEMETRY=0` to disable the beacon. The best-effort request has an
 800 ms timeout and never changes command output or exit status.
+
+MP4 (`video/mp4`) and WebM (`video/webm`) videos are hosted directly by Apex.
+Each version holds at most 300 files and 100 MB; each video is limited to 50 MB,
+and other files to 3 MB. `apply` automatically obtains a 15-minute upload grant
+for videos above 3 MB and sends resumable 8 MB parts straight to the Worker,
+retrying failed parts with progress output. The Worker verifies the declared
+size and SHA-256 before apply records the file. Pull and signed previews also
+fetch large videos directly from the Worker. Video supports byte ranges,
+including Safari's `bytes=0-1` probe; rollback preserves the older bytes.
+
+Engineering account creation uses `apex login --user` credentials with `admin:write`
+and a live platform role with onboarding write permission. Real customer accounts
+are created in **Admin, Links**.
+
+```sh
+apex admin customers create --name "Demo workspace" --category demo --reason "Workshop demo account" --confirm --json
+apex admin customers create --name "Dogfood store" --category dogfood --domain dogfood.example.com --platform woo --owner owner@example.com --reason "Engineering dogfood account" --confirm
+```
+
+`--type` defaults to `company` (`company|agency`); `--plan` defaults to
+`self_managed` (`self_managed|apex_managed|drip_managed`). Managed plans require
+`--consultant <platform_access UUID>` and `--consultant-title <text>`.
+An optional first store uses `--domain <host> --platform <shopify|shopware|woo|other>`
+or `--claim-shop <UUID>`, exclusively. `woo` maps to `woocommerce` and `other` to
+`custom`. `--owner <email>` sends an owner invitation and requires a store;
+accounts without a store have no invitations. Output includes the organization ID,
+store ID (or null), invitation results and partial delivery status.

package/dist/cli.js

@@ -7325,7 +7325,7 @@ async function checkForUpdate(current) {
 // package.json
 var package_default = {
   name: "@drip-apex/apex-cli",
-  version: "0.15.0",
+  version: "0.15.1",
   license: "MIT",
   description: "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   private: false,
@@ -8236,6 +8236,7 @@ function landingPagesApi(request2) {
     ),
     plan: (id, body5) => call("POST", pagePath(id, "filesystem/plan"), body5),
     upload: (id, files) => call("POST", pagePath(id, "filesystem/upload"), { files }),
+    uploadGrant: (id, file) => call("POST", pagePath(id, "filesystem/upload-grant"), file),
     apply: (id, body5) => call("POST", pagePath(id, "filesystem/apply"), body5),
     deploy: (id, body5) => call("POST", pagePath(id, "deploy"), body5),
     versions: (id) => call("GET", pagePath(id, "versions")),
@@ -8261,6 +8262,53 @@ function landingPageBatches(items, size) {
   if (current.length) batches.push(current);
   return batches;
 }
+async function uploadLandingVideo(grant, body5, options = {}) {
+  if (!Number.isSafeInteger(grant.part_bytes) || grant.part_bytes !== 8 * 1024 * 1024) throw new Error("Invalid video part size");
+  const fetcher = options.fetch ?? fetch;
+  const send3 = async (action78, method = "POST", part, bytes) => {
+    const url = new URL(grant.upload_url);
+    url.searchParams.set("action", action78);
+    if (part !== void 0) url.searchParams.set("part", String(part));
+    let error;
+    for (let attempt = 0; attempt < 3; attempt++) {
+      try {
+        const response = await fetcher(url, { method, ...bytes ? { body: bytes } : {}, signal: AbortSignal.timeout(6e4) });
+        if (!response.ok) {
+          const message = await response.text();
+          if (response.status < 500 && response.status !== 429) throw new Error(`Video upload refused (${response.status}): ${message}`);
+          error = new Error(`Video upload failed (${response.status}): ${message}`);
+        } else return await response.json();
+      } catch (caught) {
+        if (caught instanceof Error && caught.message.startsWith("Video upload refused")) throw caught;
+        error = caught;
+      }
+    }
+    throw error;
+  };
+  const started2 = await send3("start");
+  if (!started2.complete) {
+    for (let offset = 0, part = 1; offset < body5.byteLength; offset += grant.part_bytes, part++) {
+      const bytes = body5.subarray(offset, Math.min(body5.byteLength, offset + grant.part_bytes));
+      await send3("part", "PUT", part, bytes);
+      options.progress?.(offset + bytes.byteLength, body5.byteLength);
+    }
+    const result = await send3("complete");
+    if (!result.complete) throw new Error("Worker did not confirm the video upload");
+  }
+}
+function validateLandingPageLocalFiles(files) {
+  const allowed2 = new Set("html css js mjs json svg png jpg jpeg webp avif gif ico woff woff2 txt xml webmanifest mp4 webm".split(" "));
+  if (files.length > 300) throw new Error("A bundle is limited to 300 files");
+  let total = 0;
+  for (const file of files) {
+    const ext = file.path.split(".").at(-1)?.toLowerCase() ?? "";
+    if (!allowed2.has(ext)) throw new Error(`File type is not allowed: ${file.path}`);
+    const cap = ext === "mp4" || ext === "webm" ? 50 * 1024 * 1024 : LANDING_PAGE_BATCH_BYTES;
+    if (!Number.isSafeInteger(file.bytes) || file.bytes < 0 || file.bytes > cap) throw new Error(`File exceeds ${cap} bytes: ${file.path}`);
+    total += file.bytes;
+  }
+  if (total > 100 * 1024 * 1024) throw new Error("A bundle is limited to 100 MB");
+}
 
 // src/api.ts
 function simulateTriggers(creds, body5) {
@@ -8813,6 +8861,14 @@ function markInboxRead(creds, channel) {
 function userCredentials(creds) {
   return { ...creds, apiKey: creds.userApiKey ?? "", baseUrl: creds.userBaseUrl ?? creds.baseUrl };
 }
+function createAdminCustomer(creds, body5) {
+  return request(
+    userCredentials(creds),
+    "POST",
+    "/api/v1/admin/customers",
+    body5
+  );
+}
 function getAdminSettings(creds) {
   return request(userCredentials(creds), "GET", "/api/v1/admin/settings");
 }
@@ -20677,7 +20733,106 @@ var restore2 = new Command("restore").description("Restore an archived shop").ar
   );
 });
 var shops = new Command("shops").description("Archive and restore shops on the platform admin plane").addCommand(archive2).addCommand(restore2);
-var adminCommand = new Command("admin").description("Operate allowlisted platform controls").addCommand(settingsGet).addCommand(quarantine).addCommand(shops);
+var create6 = new Command("create").description("Create an internal, demo or dogfood account").requiredOption("--name <text>").requiredOption("--category <category>", "internal, demo or dogfood").option("--type <type>", "company or agency", "company").option("--plan <plan>", "self_managed, apex_managed or drip_managed", "self_managed").option("--domain <host>").option("--platform <platform>", "shopify, shopware, woo or other").option("--claim-shop <uuid>").option("--owner <email>").option("--consultant <uuid>", "Platform access ID").option("--consultant-title <text>").requiredOption("--reason <text>", "Audit reason, 8 to 500 characters").option("--confirm", "Confirm account creation").option("--json", "Output JSON").action(async function(opts) {
+  if (opts.category === "customer") fail(this, "Create customer accounts in Admin, Links", 3);
+  if (!["internal", "demo", "dogfood"].includes(opts.category))
+    fail(this, "--category must be internal, demo or dogfood", 3);
+  if (!["company", "agency"].includes(opts.type))
+    fail(this, "--type must be company or agency", 3);
+  if (!["self_managed", "apex_managed", "drip_managed"].includes(opts.plan))
+    fail(this, "Invalid --plan", 3);
+  if (!opts.name.trim() || opts.name.trim().length > 60)
+    fail(this, "--name must be 1 to 60 characters", 3);
+  if (opts.reason.trim().length < 8 || opts.reason.trim().length > 500)
+    fail(this, "--reason must be 8 to 500 characters", 3);
+  const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+  if (opts.claimShop && !uuid.test(opts.claimShop)) fail(this, "--claim-shop must be a UUID", 3);
+  if (opts.claimShop && (opts.domain || opts.platform))
+    fail(this, "Use --claim-shop or --domain with --platform", 3);
+  if (!!opts.domain !== !!opts.platform)
+    fail(this, "--domain and --platform must be provided together", 3);
+  if (opts.domain && !/^[a-z0-9-]+(\.[a-z0-9-]+)+$/i.test(opts.domain.trim()))
+    fail(this, "--domain must be a hostname without a protocol or path", 3);
+  const platforms = {
+    shopify: "shopify",
+    shopware: "shopware",
+    woo: "woocommerce",
+    other: "custom"
+  };
+  if (opts.platform && !Object.hasOwn(platforms, opts.platform))
+    fail(this, "--platform must be shopify, shopware, woo or other", 3);
+  if (opts.owner && !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(opts.owner.trim()))
+    fail(this, "--owner must be an email address", 3);
+  if (opts.owner && !opts.domain && !opts.claimShop)
+    fail(this, "--owner requires a store for the invitation", 3);
+  if (opts.plan !== "self_managed" && (!opts.consultant || !opts.consultantTitle?.trim()))
+    fail(this, "Managed plans require --consultant and --consultant-title", 3);
+  if (opts.consultant && !uuid.test(opts.consultant))
+    fail(this, "--consultant must be a platform access UUID", 3);
+  if (!!opts.consultant !== !!opts.consultantTitle?.trim())
+    fail(this, "Provide --consultant and --consultant-title together", 3);
+  if (opts.consultantTitle && opts.consultantTitle.trim().length > 240)
+    fail(this, "--consultant-title must be at most 240 characters", 3);
+  if (!opts.confirm) {
+    const flags = [
+      ["name", opts.name],
+      ["category", opts.category],
+      ["type", opts.type],
+      ["plan", opts.plan],
+      ["reason", opts.reason],
+      ["domain", opts.domain],
+      ["platform", opts.platform],
+      ["claim-shop", opts.claimShop],
+      ["owner", opts.owner],
+      ["consultant", opts.consultant],
+      ["consultant-title", opts.consultantTitle]
+    ];
+    const retry = flags.filter((entry) => entry[1] !== void 0).map(([flag, value]) => `--${flag} '${value.replaceAll("'", "'\\''")}'`).join(" ");
+    confirmationRequired(
+      this,
+      "--confirm is required to create an account",
+      `apex admin customers create ${retry} --confirm`
+    );
+  }
+  const body5 = {
+    name: opts.name.trim(),
+    category: opts.category,
+    type: opts.type,
+    plan: opts.plan,
+    reason: opts.reason.trim(),
+    teammates: [],
+    consultant: opts.consultant ? { platformAccessId: opts.consultant, title: opts.consultantTitle.trim() } : null,
+    ...opts.claimShop ? { store: { claimShopId: opts.claimShop } } : opts.domain ? {
+      store: {
+        domain: opts.domain.trim().toLowerCase(),
+        platform: platforms[opts.platform]
+      }
+    } : {},
+    ...opts.owner ? { ownerEmail: opts.owner.trim() } : {}
+  };
+  const res = await createAdminCustomer(requireUserCredentials(), body5);
+  if (!res.ok || !res.data)
+    fail(
+      this,
+      res.error ?? "Failed to create account",
+      classifyStatus(res.status),
+      res.errorDetails
+    );
+  output(this, res.data, () => {
+    const result = res.data.data;
+    printTable(
+      ["ORGANIZATION", "STORE", "INVITATIONS"],
+      [[result.orgId, result.shopId ?? "-", String(result.invitations.length)]]
+    );
+    if (result.invitations.length)
+      printTable(
+        ["EMAIL", "ROLE", "STATUS", "NOTE"],
+        result.invitations.map((i) => [i.email, i.role, i.status, i.note])
+      );
+  });
+});
+var customers = new Command("customers").description("Create engineering accounts; customer accounts use Admin, Links").addCommand(create6);
+var adminCommand = new Command("admin").description("Operate allowlisted platform controls").addCommand(settingsGet).addCommand(quarantine).addCommand(shops).addCommand(customers);
 
 // src/commands/membership.ts
 init_source();
@@ -20873,7 +21028,7 @@ var list13 = new Command("list").action(async function() {
     )
   );
 });
-var create6 = new Command("create").requiredOption("--name <name>").requiredOption("--type <type>").option("--permissions <csv>").action(async function(opts) {
+var create7 = new Command("create").requiredOption("--name <name>").requiredOption("--type <type>").option("--permissions <csv>").action(async function(opts) {
   if (!["live_secret", "test_secret", "publishable"].includes(opts.type))
     throw new CliError(
       "--type must be live_secret, test_secret, or publishable",
@@ -20913,7 +21068,7 @@ var revoke = new Command("revoke").argument("<keyId>").action(async function(key
     );
   output(this, res.data, () => console.log(`Revoked ${keyId}`));
 });
-var keysCommand = new Command("keys").description("Manage shop API keys in the current context").addCommand(list13).addCommand(create6).addCommand(revoke);
+var keysCommand = new Command("keys").description("Manage shop API keys in the current context").addCommand(list13).addCommand(create7).addCommand(revoke);
 
 // src/commands/prospect.ts
 init_source();
@@ -21172,7 +21327,7 @@ var list14 = new Command("list").alias("ls").description(
   const data = await loadWebhookIndex(this);
   output(this, data, () => printWebhooks(data.data));
 });
-var create7 = new Command("create").description(`Create a webhook. Prints the signing secret once. Signature docs: ${SIGNATURE_DOC}`).requiredOption("--url <url>", "HTTPS callback URL").option(
+var create8 = new Command("create").description(`Create a webhook. Prints the signing secret once. Signature docs: ${SIGNATURE_DOC}`).requiredOption("--url <url>", "HTTPS callback URL").option(
   "--event <event>",
   "Webhook event to subscribe to; repeat for multiple events",
   (value, previous = []) => [...previous, value],
@@ -21280,7 +21435,7 @@ var test3 = new Command("test").description("Send a signed test event to a webho
     )
   );
 });
-var webhooksCommand = new Command("webhooks").description("Manage shop webhooks").addCommand(list14).addCommand(create7).addCommand(update5).addCommand(remove3).addCommand(deliveries).addCommand(test3);
+var webhooksCommand = new Command("webhooks").description("Manage shop webhooks").addCommand(list14).addCommand(create8).addCommand(update5).addCommand(remove3).addCommand(deliveries).addCommand(test3);
 
 // src/commands/simulate.ts
 init_source();
@@ -21502,12 +21657,31 @@ function readCheckoutFiles(folder) {
       if (!isLandingPageCheckoutPath(relative)) continue;
       if (entry.isDirectory()) visit2(absolute);
       else if (entry.isFile()) {
+        try {
+          validateLandingPageLocalFiles([
+            ...files,
+            { path: relative, bytes: import_node_fs28.default.statSync(absolute).size, sha256: "" }
+          ]);
+        } catch (error) {
+          throw new CliError(
+            error instanceof Error ? error.message : "Invalid bundle",
+            EXIT_CODES.validation
+          );
+        }
         const body5 = import_node_fs28.default.readFileSync(absolute);
         files.push({ path: relative, sha256: sha256(body5), bytes: body5.byteLength, body: body5 });
       }
     }
   };
   visit2(folder);
+  try {
+    validateLandingPageLocalFiles(files);
+  } catch (error) {
+    throw new CliError(
+      error instanceof Error ? error.message : "Invalid bundle",
+      EXIT_CODES.validation
+    );
+  }
   return files;
 }
 function readManifest2(command, folder) {
@@ -21564,7 +21738,7 @@ function printPlan(plan2) {
     );
   }
   console.log(
-    `Deploy target: ${plan2.deploy_target ?? "none yet: set host in apex-landing-page.json to a domain this shop holds"}`
+    `Deploy target: ${plan2.deploy_target ?? "none: set host in apex-landing-page.json to a domain this shop holds"}`
   );
 }
 async function confirm2(message) {
@@ -21653,7 +21827,10 @@ async function pullCheckout(command, creds, id, folder, force = false) {
       const target = import_node_path25.default.resolve(folder, file.path);
       if (!target.startsWith(folder + import_node_path25.default.sep))
         fail(command, `Refusing to write outside the checkout: ${file.path}`);
-      const body5 = file.encoding === "base64" ? Buffer.from(file.content ?? "", "base64") : Buffer.from(file.content ?? "", "utf8");
+      const download = file.download_url ? await fetch(file.download_url, { signal: AbortSignal.timeout(6e4) }) : null;
+      if (download && !download.ok)
+        fail(command, `Failed to download ${file.path}: ${download.status}`);
+      const body5 = download ? Buffer.from(await download.arrayBuffer()) : file.encoding === "base64" ? Buffer.from(file.content ?? "", "base64") : Buffer.from(file.content ?? "", "utf8");
       if (sha256(body5) !== file.sha256)
         fail(command, `The server returned ${file.path} incomplete. Pull again.`);
       downloaded.push({ path: file.path, target, body: body5, sha256: file.sha256 });
@@ -21733,7 +21910,7 @@ async function pullCheckout(command, creds, id, folder, force = false) {
     notes: listing.data.notes ?? []
   };
 }
-var create8 = new Command("create").description("Create a landing page to build outside Apex").requiredOption("--name <name>", "Page name").option("--slug <slug>", "URL slug (default: from the name)").option("--idea <key>", "Idea key or id the page is built for").option("--out <folder>", "Also pull the new page into this folder").action(async function(opts) {
+var create9 = new Command("create").description("Create a landing page to build outside Apex").requiredOption("--name <name>", "Page name").option("--slug <slug>", "URL slug (default: from the name)").option("--idea <key>", "Idea key or id the page is built for").option("--out <folder>", "Also pull the new page into this folder").action(async function(opts) {
   const creds = requireCredentials();
   const created = await landingPages(creds).create({
     name: opts.name,
@@ -21811,7 +21988,24 @@ var apply = new Command("apply").description("Apply a checkout as a new version"
   }
   const required = new Set(planned.data.files.upload_required);
   const toUpload = files.filter((file) => required.has(file.path));
-  for (const batch of landingPageBatches(toUpload, (file) => file.bytes)) {
+  for (const file of toUpload.filter((file2) => file2.bytes > LANDING_PAGE_BATCH_BYTES)) {
+    const granted = await api.uploadGrant(marker.landingPageId, {
+      path: file.path,
+      bytes: file.bytes,
+      sha256: file.sha256,
+      base_version_id: planned.data.base_version_id
+    });
+    apiFailure(this, granted, "Failed to grant video upload");
+    await uploadLandingVideo(granted.data, file.body, {
+      progress: (uploaded, total) => {
+        console.error(`Uploading ${file.path}: ${uploaded}/${total} bytes`);
+      }
+    });
+  }
+  for (const batch of landingPageBatches(
+    toUpload.filter((file) => file.bytes <= LANDING_PAGE_BATCH_BYTES),
+    (file) => file.bytes
+  )) {
     const uploaded = await api.upload(
       marker.landingPageId,
       batch.map((file) => ({
@@ -21860,7 +22054,7 @@ var apply = new Command("apply").description("Apply a checkout as a new version"
     console.log(`Version ${applied.data.version_number}`);
     if (applied.data.preview_url) console.log(`Preview: ${applied.data.preview_url}`);
     console.log(
-      `Deploy target: ${applied.data.deploy_target ?? "none yet: set host in apex-landing-page.json to a domain this shop holds"}`
+      `Deploy target: ${applied.data.deploy_target ?? "none: set host in apex-landing-page.json to a domain this shop holds"}`
     );
   });
 });
@@ -21888,9 +22082,11 @@ async function versionIdFor(command, creds, id, raw) {
   return match2.id;
 }
 var SPLIT_KEEPS_SERVING_HELP = "\nWhile an experiment splits this page, visitors keep getting its two arms and its goals stay as they are (new manifest goals are added). The deployed version serves when the experiment ends; its goal changes apply at the next deploy after that.\n";
-var deploy = new Command("deploy").description("Deploy a version to a domain this shop holds").argument("[folder-or-id]", "Checkout folder or landing page id", ".").option(
+var deploy = new Command("deploy").description(
+  "Deploy a version to the shop's instant host (<shop>.apex-page.com) or a domain this shop holds"
+).argument("[folder-or-id]", "Checkout folder or landing page id", ".").option(
   "--host <host>",
-  "Domain claimed with apex domains claim (default: the manifest host; one of the two is required)"
+  "Domain claimed with apex domains claim (default: the manifest host, else the shop's apex-page.com subdomain)"
 ).option("--path <path>", "Path on the host").option("--version <number>", "Version number (default: current)").action(async function(target, opts) {
   const creds = requireCredentials();
   const id = resolvePageId(target);
@@ -21974,7 +22170,7 @@ var open2 = new Command("open").description("Print the page's dashboard URL").ar
   output(this, { url }, () => console.log(url));
 });
 var landingPageWorkspaceCommands = [
-  create8,
+  create9,
   pull,
   plan,
   apply,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drip-apex/apex-cli",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "license": "MIT",
   "description": "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   "private": false,