@drip-apex/apex-cli 0.6.2 → 0.6.3

package/AGENTS.md

@@ -70,3 +70,31 @@ the first writes: `apex experiments create`, `apex goals create`,
 - Edit experiment files, variation code, metrics, and targeting only through supported paths.
 - Do not bypass the variation artifact persistence path with direct API writes.
 - Keep generated evidence outside `qa.json`; attach it through QA commands.
+
+
+## Project code
+
+```sh
+apex project-code get --shop example.com --json
+apex project-code diff --file project-code.json --shop example.com --json
+apex project-code set --file project-code.json --shop example.com --backup previous-code.json --json
+```
+
+The input is a partial projectCode object, for example `{ "css": "body { color: red; }" }`.
+Supported fields are `enabled` (boolean) and `css`, `helperJs`, and `js` (strings or null).
+Each code field permits at most 20,000 characters. Omitted fields remain unchanged.
+Null or blank code clears that field. Unknown fields and empty objects are rejected.
+
+GET returns complete code, shop identity, and an opaque version. DIFF returns effective
+before/after values and changed fields without writing. SET creates a new backup file
+with complete previous code, identity, capture time, and the exact version before PATCH.
+It never replaces an existing backup. Backup failures prevent the write. An effective
+no-op returns `unchanged`, without a PATCH or backup file.
+
+The backed-up version becomes expectedVersion unchanged. A conflict returns exit 5,
+keeps the backup, and does not retry. Read the latest state and preview it before a new
+attempt with a new backup path. Authentication uses exit 2; invalid input uses exit 3.
+A successful write returns `saved`, its diff, backup path, current version, writtenVersion,
+and precompile result. A failed precompile is a saved-write warning. All warnings remain
+in JSON and are also written to stderr. User keys resolve domains or pin UUID context;
+shop keys must match the requested identity before any backup or write.

package/README.md

@@ -109,6 +109,10 @@ including every subcommand, argument, option, and alias.
 ### Experiments and delivery
 
 - `apex consent` — manage consent gating.
+- `apex project-code` — inspect and safely change shop project code.
+- `apex project-code get` — read complete code and its opaque version.
+- `apex project-code diff` — preview a partial JSON change without writing.
+- `apex project-code set` — create a backup before a version-checked write.
 - `apex triggers` — manage data-layer triggers and temporary setup capture.
 - `apex triggers get --shop <domain-or-id>` — read the identified shop's runtime triggers.
 - `apex triggers set` — replace the shop's runtime triggers from a JSON file.
@@ -228,3 +232,31 @@ Read the CLI reference on the docs site:
 - https://docs.drip-apex.com/cli/commands-output
 
 Maintainers: see the [CLI release runbook](../../docs/cli-releases.md).
+
+
+## Project code
+
+```sh
+apex project-code get --shop example.com --json
+apex project-code diff --file project-code.json --shop example.com --json
+apex project-code set --file project-code.json --shop example.com --backup previous-code.json --json
+```
+
+The input is a partial projectCode object, for example `{ "css": "body { color: red; }" }`.
+Supported fields are `enabled` (boolean) and `css`, `helperJs`, and `js` (strings or null).
+Each code field permits at most 20,000 characters. Omitted fields remain unchanged.
+Null or blank code clears that field. Unknown fields and empty objects are rejected.
+
+GET returns complete code, shop identity, and an opaque version. DIFF returns effective
+before/after values and changed fields without writing. SET creates a new backup file
+with complete previous code, identity, capture time, and the exact version before PATCH.
+It never replaces an existing backup. Backup failures prevent the write. An effective
+no-op returns `unchanged`, without a PATCH or backup file.
+
+The backed-up version becomes expectedVersion unchanged. A conflict returns exit 5,
+keeps the backup, and does not retry. Read the latest state and preview it before a new
+attempt with a new backup path. Authentication uses exit 2; invalid input uses exit 3.
+A successful write returns `saved`, its diff, backup path, current version, writtenVersion,
+and precompile result. A failed precompile is a saved-write warning. All warnings remain
+in JSON and are also written to stderr. User keys resolve domains or pin UUID context;
+shop keys must match the requested identity before any backup or write.

package/dist/cli.js

@@ -6988,14 +6988,14 @@ var init_open = __esm({
       }
       const subprocess = import_node_child_process5.default.spawn(command, cliArguments, childProcessOptions);
       if (options.wait) {
-        return new Promise((resolve, reject) => {
+        return new Promise((resolve2, reject) => {
           subprocess.once("error", reject);
           subprocess.once("close", (exitCode) => {
             if (!options.allowNonzeroExitCode && exitCode > 0) {
               reject(new Error(`Exited with code ${exitCode}`));
               return;
             }
-            resolve(subprocess);
+            resolve2(subprocess);
           });
         });
       }
@@ -7112,7 +7112,7 @@ var import_node_os3 = __toESM(require("node:os"));
 // package.json
 var package_default = {
   name: "@drip-apex/apex-cli",
-  version: "0.6.2",
+  version: "0.6.3",
   license: "MIT",
   description: "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   private: false,
@@ -8369,9 +8369,9 @@ function resolveSelection(tree, input) {
 function ask(question) {
   const rl = import_node_readline.default.createInterface({ input: process.stdin, output: process.stderr });
   return new Promise(
-    (resolve) => rl.question(question, (answer) => {
+    (resolve2) => rl.question(question, (answer) => {
       rl.close();
-      resolve(answer.trim());
+      resolve2(answer.trim());
     })
   );
 }
@@ -8449,7 +8449,7 @@ function prompt(question, hide = false) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) {
     throw new Error("Interactive input is unavailable in non-TTY mode.");
   }
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const rl = import_node_readline2.default.createInterface({
       input: process.stdin,
       output: process.stderr
@@ -8469,13 +8469,13 @@ function prompt(question, hide = false) {
         stdout.write = originalWrite;
         console.error();
         rl.close();
-        resolve(answer.trim());
+        resolve2(answer.trim());
       });
       masking = true;
     } else {
       rl.question(question, (answer) => {
         rl.close();
-        resolve(answer.trim());
+        resolve2(answer.trim());
       });
     }
   });
@@ -8501,7 +8501,7 @@ function parseFormBody(body5) {
 async function waitForBrowserLogin(baseUrl, userMode = false) {
   const state = import_node_crypto2.default.randomBytes(24).toString("base64url");
   const clientName = import_node_os5.default.hostname() || "Local machine";
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     let settled = false;
     let timeout = null;
     const finish = (err, apiKey) => {
@@ -8513,7 +8513,7 @@ async function waitForBrowserLogin(baseUrl, userMode = false) {
       } catch {
       }
       if (err) reject(err);
-      else resolve(apiKey ?? "");
+      else resolve2(apiKey ?? "");
     };
     const server = import_node_http.default.createServer((req, res) => {
       if (req.method === "OPTIONS") {
@@ -9414,8 +9414,8 @@ async function confirmApply(message) {
   }
   const readline3 = await import("node:readline");
   const rl = readline3.createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question(source_default.yellow(`${message} [y/N] `), resolve);
+  const answer = await new Promise((resolve2) => {
+    rl.question(source_default.yellow(`${message} [y/N] `), resolve2);
   });
   rl.close();
   return answer.toLowerCase() === "y";
@@ -9828,8 +9828,8 @@ var del = new Command("delete").alias("rm").description("Delete an experiment").
       input: process.stdin,
       output: process.stderr
     });
-    const answer = await new Promise((resolve) => {
-      rl.question(source_default.yellow(`Delete experiment "${exp.name}" (${exp.id})? [y/N] `), resolve);
+    const answer = await new Promise((resolve2) => {
+      rl.question(source_default.yellow(`Delete experiment "${exp.name}" (${exp.id})? [y/N] `), resolve2);
     });
     rl.close();
     if (answer.toLowerCase() !== "y") {
@@ -10357,7 +10357,7 @@ var screenshots = new Command("screenshots").description(
     if (screenshotNow() >= deadline)
       fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
     await new Promise(
-      (resolve) => setTimeout(resolve, Math.min(delayMs, Math.max(0, deadline - screenshotNow())))
+      (resolve2) => setTimeout(resolve2, Math.min(delayMs, Math.max(0, deadline - screenshotNow())))
     );
     if (screenshotNow() >= deadline)
       fail(this, `Screenshot job ${job.job_id} timed out after ${timeoutSeconds}s.`);
@@ -10938,11 +10938,11 @@ function cleanupResetJs(experiment) {
 }
 function runAbHarness(args, cwd) {
   const bin = process.env.AB_HARNESS_BIN || "ab-harness";
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const child = (0, import_node_child_process6.spawn)(bin, args, { cwd, stdio: "inherit" });
     child.on("error", reject);
     child.on("exit", (code) => {
-      if (code === 0) resolve();
+      if (code === 0) resolve2();
       else reject(new Error(`${bin} ${args.join(" ")} exited with ${code}`));
     });
   });
@@ -12416,7 +12416,7 @@ var suggest = new Command("suggest").description("Suggest goals and funnels from
       const readline3 = await import("node:readline");
       const rl = readline3.createInterface({ input: process.stdin, output: process.stderr });
       const answer = await new Promise(
-        (resolve) => rl.question(source_default.yellow("Create this goal? [y/N] "), resolve)
+        (resolve2) => rl.question(source_default.yellow("Create this goal? [y/N] "), resolve2)
       );
       rl.close();
       if (answer.toLowerCase() !== "y") continue;
@@ -12778,9 +12778,219 @@ var off = new Command("off").description("Disable consent gating").action(async
 });
 var consentCommand = new Command("consent").description("Manage consent gating").addCommand(get2).addCommand(set).addCommand(off);
 
+// src/commands/project-code.ts
+var import_node_fs15 = require("node:fs");
+var import_node_path13 = require("node:path");
+
+// src/commands/runtime-settings-shop.ts
+var uuidPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+async function identifyRuntimeSettingsShop(command, requested) {
+  let credentials = requireCredentials();
+  if (credentials.credentialKind === "user") {
+    let shopId = requested;
+    if (!uuidPattern.test(requested)) {
+      const context = await getAccountContext({
+        ...credentials,
+        resolvedContext: { ...credentials.resolvedContext, shopId: void 0 }
+      });
+      if (!context.ok || !context.data)
+        fail(command, context.error ?? "Shop discovery failed", classifyStatus(context.status));
+      const match2 = context.data.data.orgs.flatMap((org) => org.shops).find((shop) => shop.domain.toLowerCase() === requested.toLowerCase());
+      if (!match2)
+        fail(command, "--shop domain is not available to this user", EXIT_CODES.validation);
+      shopId = match2.id;
+    }
+    credentials = { ...credentials, resolvedContext: { ...credentials.resolvedContext, shopId } };
+  }
+  const response = await getInstallDomains(credentials);
+  if (!response.ok || !response.data)
+    fail(command, response.error ?? "Shop identity unavailable", classifyStatus(response.status));
+  const { shop_id, domain } = response.data;
+  if (credentials.credentialKind === "user" && shop_id.toLowerCase() !== credentials.resolvedContext?.shopId?.toLowerCase()) {
+    fail(
+      command,
+      "Shop identity does not match the requested user-key context",
+      EXIT_CODES.validation
+    );
+  }
+  if (requested.toLowerCase() !== shop_id.toLowerCase() && requested.toLowerCase() !== domain.toLowerCase()) {
+    fail(command, "--shop does not match the authenticated shop", EXIT_CODES.validation);
+  }
+  setEnvelopeContext({ shop_id, credential: credentials.credentialKind ?? "shop" });
+  return { shop_id, domain, credentials };
+}
+
+// src/commands/project-code.ts
+var fields = ["enabled", "css", "helperJs", "js"];
+function readPatch(command, file) {
+  let input;
+  try {
+    input = JSON.parse((0, import_node_fs15.readFileSync)(file, "utf8"));
+  } catch (error) {
+    fail(command, `Cannot read project code JSON: ${String(error)}`, EXIT_CODES.validation);
+  }
+  if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).length === 0) {
+    fail(command, "Project code must be a nonempty partial object", EXIT_CODES.validation);
+  }
+  for (const [key, value] of Object.entries(input)) {
+    if (!fields.includes(key))
+      fail(command, `Unknown project code field: ${key}`, EXIT_CODES.validation);
+    if (key === "enabled" ? typeof value !== "boolean" : value !== null && (typeof value !== "string" || value.length > 2e4)) {
+      fail(
+        command,
+        `${key} must be ${key === "enabled" ? "a boolean" : "null or a string of at most 20,000 characters"}`,
+        EXIT_CODES.validation
+      );
+    }
+  }
+  return input;
+}
+async function readCurrent(command, shop) {
+  const response = await getRuntimeSettings(shop.credentials);
+  if (!response.ok || !response.data)
+    fail(
+      command,
+      response.error ?? "Runtime settings read failed",
+      classifyStatus(response.status)
+    );
+  const data = response.data;
+  if (data.shop_id !== shop.shop_id)
+    fail(command, "Runtime settings returned a different shop", EXIT_CODES.validation);
+  const projectCode = data.runtime_settings?.projectCode;
+  if (!projectCode || typeof projectCode.enabled !== "boolean" || [projectCode.css, projectCode.helperJs, projectCode.js].some(
+    (code) => typeof code !== "string"
+  ) || !(data.version === null || typeof data.version === "string" && data.version.length > 0)) {
+    fail(
+      command,
+      "Runtime settings must include complete project code and an opaque version",
+      EXIT_CODES.general
+    );
+  }
+  return { projectCode, version: data.version };
+}
+function effectiveDiff(before, patch) {
+  const after = { ...before };
+  if (patch.enabled !== void 0) after.enabled = patch.enabled;
+  for (const key of ["css", "helperJs", "js"]) {
+    if (patch[key] !== void 0) after[key] = patch[key]?.trim() || "";
+  }
+  const changedFields = fields.filter((field) => before[field] !== after[field]);
+  const changes = Object.fromEntries(
+    changedFields.map((field) => [field, { before: before[field], after: after[field] }])
+  );
+  return { changedFields, changes, before, after };
+}
+var projectCodeCommand = new Command("project-code").description(
+  "Inspect, preview, and back up shop project code"
+);
+projectCodeCommand.addCommand(
+  new Command("get").description("Read complete project code and its opaque version").requiredOption("--shop <domain-or-id>", "Shop domain or UUID").action(async (options, command) => {
+    const { credentials: _credentials, ...identity } = await identifyRuntimeSettingsShop(
+      command,
+      options.shop
+    );
+    const current = await readCurrent(command, { ...identity, credentials: _credentials });
+    output(
+      command,
+      { ...identity, ...current },
+      () => process.stdout.write(`${JSON.stringify({ ...identity, ...current }, null, 2)}
+`)
+    );
+  })
+);
+for (const mode of ["diff", "set"]) {
+  const command = new Command(mode).description(
+    mode === "diff" ? "Preview an effective partial project code change without writing" : "Back up prior code and apply a version-checked partial change"
+  ).requiredOption("--file <path>", "Partial projectCode JSON file").requiredOption("--shop <domain-or-id>", "Shop domain or UUID");
+  if (mode === "set")
+    command.requiredOption(
+      "--backup <path>",
+      "New backup file; an existing file is never replaced"
+    );
+  command.action(async (options, actionCommand) => {
+    const patch = readPatch(actionCommand, options.file);
+    const shop = await identifyRuntimeSettingsShop(actionCommand, options.shop);
+    const current = await readCurrent(actionCommand, shop);
+    const { credentials: _credentials, ...identity } = shop;
+    const diff = effectiveDiff(current.projectCode, patch);
+    if (mode === "diff" || diff.changedFields.length === 0) {
+      const result2 = {
+        ...identity,
+        status: diff.changedFields.length ? "changed" : "unchanged",
+        version: current.version,
+        diff
+      };
+      output(
+        actionCommand,
+        result2,
+        () => process.stdout.write(`${JSON.stringify(result2, null, 2)}
+`)
+      );
+      return;
+    }
+    const backupPath = (0, import_node_path13.resolve)(options.backup);
+    try {
+      (0, import_node_fs15.writeFileSync)(
+        backupPath,
+        `${JSON.stringify({ ...identity, ...current, capturedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)}
+`,
+        { flag: "wx", mode: 384 }
+      );
+    } catch (error) {
+      fail(
+        actionCommand,
+        `Backup failed; project code was not sent: ${String(error)}`,
+        EXIT_CODES.general
+      );
+    }
+    const response = await updateRuntimeSettings(shop.credentials, {
+      projectCode: patch,
+      expectedVersion: current.version
+    });
+    if (!response.ok || !response.data) {
+      fail(
+        actionCommand,
+        response.error ?? "Project code update failed",
+        classifyStatus(response.status),
+        { ...response.errorDetails, backupPath }
+      );
+    }
+    const data = response.data;
+    const warnings = [...data.warnings ?? []];
+    if (data.precompile?.status === "warning" || data.precompile?.status === "error") {
+      warnings.push(
+        `Project code saved; publication ${data.precompile.status}: ${data.precompile.summary}`
+      );
+    }
+    if (data.shop_id !== identity.shop_id)
+      warnings.push(
+        "The write response has a different shop identity; inspect the saved state before another write."
+      );
+    for (const warning of warnings) process.stderr.write(`WARNING: ${warning}
+`);
+    const result = {
+      ...identity,
+      status: "saved",
+      diff,
+      backupPath,
+      version: data.version,
+      writtenVersion: data.writtenVersion,
+      precompile: data.precompile,
+      warnings
+    };
+    output(
+      actionCommand,
+      result,
+      () => process.stdout.write(`${JSON.stringify(result, null, 2)}
+`)
+    );
+  });
+  projectCodeCommand.addCommand(command);
+}
+
 // src/commands/triggers.ts
-var import_node_fs15 = __toESM(require("node:fs"));
-var import_node_path13 = __toESM(require("node:path"));
+var import_node_fs16 = __toESM(require("node:fs"));
+var import_node_path14 = __toESM(require("node:path"));
 
 // src/trigger-proposal.ts
 function runtimePath(path24) {
@@ -12868,8 +13078,8 @@ function score2(path24, patterns) {
     0
   );
 }
-function best(fields, patterns, numeric2 = false) {
-  const ranked = fields.filter(
+function best(fields2, patterns, numeric2 = false) {
+  const ranked = fields2.filter(
     (field) => !numeric2 || field.numericType === true || field.values.some((value) => typeof value === "number") || field.magnitude !== void 0
   ).map((field) => ({ field, score: score2(field.path.toLowerCase(), patterns) })).filter((item) => item.score > 0).sort((a, b) => b.score - a.score || (b.field.magnitude ?? 0) - (a.field.magnitude ?? 0));
   if (!ranked.length) return [];
@@ -12894,15 +13104,15 @@ function proposeTriggers(report) {
       continue;
     const descriptors = candidate.fields ?? candidate.paths;
     const payload = candidate.properties ?? candidate.payload ?? candidate;
-    const fields = descriptors !== void 0 ? fieldsFrom(descriptors, "", true) : fieldsFrom(payload, "", isDescriptorArray(payload));
+    const fields2 = descriptors !== void 0 ? fieldsFrom(descriptors, "", true) : fieldsFrom(payload, "", isDescriptorArray(payload));
     const revenues = best(
-      fields,
+      fields2,
       [/revenue/, /total.*amount|amount.*total/, /grand.*total|total/, /value|amount/],
       true
     );
-    const orderIds = best(fields, [/order.*id|id.*order/, /transaction.*id/, /(^|\.)id$/]);
-    const currencies = best(fields, [/currency/, /(^|\.)cur(rency)?$/]);
-    const items = best(fields, [/(^|\.)((line_?)?items|products)$/]);
+    const orderIds = best(fields2, [/order.*id|id.*order/, /transaction.*id/, /(^|\.)id$/]);
+    const currencies = best(fields2, [/currency/, /(^|\.)cur(rency)?$/]);
+    const items = best(fields2, [/(^|\.)((line_?)?items|products)$/]);
     if (!revenues.length || !orderIds.length || !currencies.length) continue;
     for (const revenue of revenues)
       for (const orderId of orderIds)
@@ -13197,10 +13407,10 @@ function writeWarnings(result) {
 `);
   }
 }
-var uuidPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var uuidPattern2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 async function identify(command, requestedShop) {
   let credentials = requireCredentials();
-  if (credentials.credentialKind === "user" && !uuidPattern.test(requestedShop)) {
+  if (credentials.credentialKind === "user" && !uuidPattern2.test(requestedShop)) {
     const discoveryCredentials = {
       ...credentials,
       resolvedContext: { ...credentials.resolvedContext, shopId: void 0 }
@@ -13273,7 +13483,7 @@ var get3 = new Command("get").description("Get data layer triggers").requiredOpt
 var set2 = new Command("set").requiredOption("--file <json>", "JSON trigger array").requiredOption("--shop <domain-or-id>", "Shop domain or Apex shop ID").action(async function(opts) {
   let triggers;
   try {
-    triggers = strictTriggers(JSON.parse(import_node_fs15.default.readFileSync(import_node_path13.default.resolve(opts.file), "utf8")));
+    triggers = strictTriggers(JSON.parse(import_node_fs16.default.readFileSync(import_node_path14.default.resolve(opts.file), "utf8")));
   } catch (error) {
     fail(
       this,
@@ -13300,7 +13510,7 @@ var propose = new Command("propose").requiredOption("--from-file <u2-report.json
   let proposals;
   let report;
   try {
-    report = JSON.parse(import_node_fs15.default.readFileSync(import_node_path13.default.resolve(opts.fromFile), "utf8"));
+    report = JSON.parse(import_node_fs16.default.readFileSync(import_node_path14.default.resolve(opts.fromFile), "utf8"));
     proposals = proposeTriggers(report);
   } catch (error) {
     fail(this, error instanceof Error ? error.message : String(error), 2);
@@ -14932,7 +15142,7 @@ function decodeBody(raw, header, limits, hostname, inputTruncated = false) {
         `Response from ${hostname} uses unsupported content encoding "${encoding}"`
       )
     );
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const stream = decoderFor(encoding);
     const chunks = [];
     let bytes = 0;
@@ -14952,7 +15162,7 @@ function decodeBody(raw, header, limits, hostname, inputTruncated = false) {
         }
         chunks.push(chunk.subarray(0, limits.maxBytes - bytes));
         stream.destroy();
-        settle(() => resolve({ body: Buffer.concat(chunks), truncated: true }));
+        settle(() => resolve2({ body: Buffer.concat(chunks), truncated: true }));
         return;
       }
       chunks.push(chunk);
@@ -14962,7 +15172,7 @@ function decodeBody(raw, header, limits, hostname, inputTruncated = false) {
       "error",
       (error) => settle(() => {
         if (limits.onExceed === "truncate" && inputTruncated && chunks.length > 0)
-          resolve({ body: Buffer.concat(chunks), truncated: true });
+          resolve2({ body: Buffer.concat(chunks), truncated: true });
         else
           reject(
             new BodyDecodeError(
@@ -14973,7 +15183,7 @@ function decodeBody(raw, header, limits, hostname, inputTruncated = false) {
     );
     stream.on(
       "end",
-      () => settle(() => resolve({ body: Buffer.concat(chunks), truncated: false }))
+      () => settle(() => resolve2({ body: Buffer.concat(chunks), truncated: false }))
     );
     stream.end(raw);
   });
@@ -15000,7 +15210,7 @@ function responseFromIncoming(res, body5, decoded) {
   });
 }
 function pinnedFetch(url, addresses, limits) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const send3 = url.protocol === "https:" ? import_node_https.request : import_node_http2.request;
     const pinnedLookup = (_hostname, options, callback) => {
       if (options?.all)
@@ -15047,7 +15257,7 @@ function pinnedFetch(url, addresses, limits) {
             chunks.push(chunk.subarray(0, limits.maxBytes - bytes));
             req.destroy();
             settle(
-              () => finalizeIncoming(url, res, Buffer.concat(chunks), true, limits).then(resolve, reject)
+              () => finalizeIncoming(url, res, Buffer.concat(chunks), true, limits).then(resolve2, reject)
             );
             return;
           }
@@ -15062,7 +15272,7 @@ function pinnedFetch(url, addresses, limits) {
               reject(new Error(`No HTTP status from ${url.hostname}`));
               return;
             }
-            finalizeIncoming(url, res, Buffer.concat(chunks), false, limits).then(resolve, reject);
+            finalizeIncoming(url, res, Buffer.concat(chunks), false, limits).then(resolve2, reject);
           })
         );
       }
@@ -15494,8 +15704,8 @@ var installCommand = new Command("install").description("Check Apex storefront i
 
 // src/commands/flags.ts
 init_source();
-var import_node_fs16 = __toESM(require("node:fs"));
-var import_node_path14 = __toESM(require("node:path"));
+var import_node_fs17 = __toESM(require("node:fs"));
+var import_node_path15 = __toESM(require("node:path"));
 
 // src/edge-status.ts
 function getEdgeDeliveryStatus(deliveryType, expectedWorstCaseSeconds = 360) {
@@ -15537,7 +15747,7 @@ function body(command, value, opts) {
   let parsed = {};
   if (value) {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs16.default.existsSync(source) ? import_node_fs16.default.readFileSync(import_node_path14.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs17.default.existsSync(source) ? import_node_fs17.default.readFileSync(import_node_path15.default.resolve(process.cwd(), source), "utf8") : value;
     try {
       parsed = JSON.parse(text);
     } catch (e) {
@@ -15670,8 +15880,8 @@ Examples:
 );
 
 // src/commands/backlog.ts
-var import_node_fs17 = __toESM(require("node:fs"));
-var import_node_path15 = __toESM(require("node:path"));
+var import_node_fs18 = __toESM(require("node:fs"));
+var import_node_path16 = __toESM(require("node:path"));
 init_source();
 var kind2 = "backlog";
 var singular = "backlog item";
@@ -15679,7 +15889,7 @@ function parse(command, value) {
   if (!value) return {};
   try {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs17.default.existsSync(source) ? import_node_fs17.default.readFileSync(import_node_path15.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs18.default.existsSync(source) ? import_node_fs18.default.readFileSync(import_node_path16.default.resolve(process.cwd(), source), "utf8") : value;
     const body5 = JSON.parse(text);
     if (!body5 || typeof body5 !== "object" || Array.isArray(body5))
       throw new Error("body must be an object");
@@ -15779,7 +15989,7 @@ var remove2 = new Command("delete").description("Delete a backlog item").argumen
     const readline3 = await import("node:readline");
     const rl = readline3.createInterface({ input: process.stdin, output: process.stderr });
     const answer = await new Promise(
-      (resolve) => rl.question(source_default.yellow(`Delete backlog item ${id}? [y/N] `), resolve)
+      (resolve2) => rl.question(source_default.yellow(`Delete backlog item ${id}? [y/N] `), resolve2)
     );
     rl.close();
     if (answer.toLowerCase() !== "y") {
@@ -15795,8 +16005,8 @@ var remove2 = new Command("delete").description("Delete a backlog item").argumen
 var backlogCommand = new Command("backlog").description("Manage backlog").addCommand(list7).addCommand(get6).addCommand(write2("create")).addCommand(write2("update")).addCommand(archive).addCommand(restore).addCommand(remove2);
 
 // src/commands/signals.ts
-var import_node_fs18 = __toESM(require("node:fs"));
-var import_node_path16 = __toESM(require("node:path"));
+var import_node_fs19 = __toESM(require("node:fs"));
+var import_node_path17 = __toESM(require("node:path"));
 init_source();
 var kind3 = "signals";
 var singular2 = "signal";
@@ -15804,7 +16014,7 @@ function parse2(command, value) {
   if (!value) return {};
   try {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs18.default.existsSync(source) ? import_node_fs18.default.readFileSync(import_node_path16.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs19.default.existsSync(source) ? import_node_fs19.default.readFileSync(import_node_path17.default.resolve(process.cwd(), source), "utf8") : value;
     const body5 = JSON.parse(text);
     if (!body5 || typeof body5 !== "object" || Array.isArray(body5))
       throw new Error("body must be an object");
@@ -15886,14 +16096,14 @@ var signalsCommand = new Command("signals").description("Manage signals").addCom
 
 // src/commands/personalizations.ts
 init_source();
-var import_node_fs19 = __toESM(require("node:fs"));
-var import_node_path17 = __toESM(require("node:path"));
+var import_node_fs20 = __toESM(require("node:fs"));
+var import_node_path18 = __toESM(require("node:path"));
 var kind4 = "personalizations";
 function body2(command, value, opts) {
   let parsed = {};
   if (value) {
     const source = value.startsWith("@") ? value.slice(1) : value;
-    const text = value.startsWith("@") || import_node_fs19.default.existsSync(source) ? import_node_fs19.default.readFileSync(import_node_path17.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs20.default.existsSync(source) ? import_node_fs20.default.readFileSync(import_node_path18.default.resolve(process.cwd(), source), "utf8") : value;
     try {
       parsed = JSON.parse(text);
     } catch (e) {
@@ -15975,13 +16185,13 @@ var personalizationsCommand = new Command("personalizations").description("Manag
 
 // src/commands/targeting-resources.ts
 init_source();
-var import_node_fs20 = __toESM(require("node:fs"));
-var import_node_path18 = __toESM(require("node:path"));
+var import_node_fs21 = __toESM(require("node:fs"));
+var import_node_path19 = __toESM(require("node:path"));
 function body3(command, value) {
   if (!value) return {};
   const source = value.startsWith("@") ? value.slice(1) : value;
   try {
-    const text = value.startsWith("@") || import_node_fs20.default.existsSync(source) ? import_node_fs20.default.readFileSync(import_node_path18.default.resolve(process.cwd(), source), "utf8") : value;
+    const text = value.startsWith("@") || import_node_fs21.default.existsSync(source) ? import_node_fs21.default.readFileSync(import_node_path19.default.resolve(process.cwd(), source), "utf8") : value;
     return JSON.parse(text);
   } catch (error) {
     fail(
@@ -16101,8 +16311,8 @@ function targetingResourceCommand(kind5) {
           input: process.stdin,
           output: process.stderr
         });
-        const answer = await new Promise((resolve) => {
-          rl.question(source_default.yellow(`Delete exclusion group "${id}"? [y/N] `), resolve);
+        const answer = await new Promise((resolve2) => {
+          rl.question(source_default.yellow(`Delete exclusion group "${id}"? [y/N] `), resolve2);
         });
         rl.close();
         if (answer.toLowerCase() !== "y") {
@@ -16232,8 +16442,8 @@ var targetingCommand = new Command("targeting").description("Test experiment tar
 
 // src/commands/sos.ts
 init_source();
-var import_node_fs21 = __toESM(require("node:fs"));
-var import_node_path19 = __toESM(require("node:path"));
+var import_node_fs22 = __toESM(require("node:fs"));
+var import_node_path20 = __toESM(require("node:path"));
 var SOS_TYPES = /* @__PURE__ */ new Set([
   "full_handover",
   "design",
@@ -16246,7 +16456,7 @@ var SOS_TYPES = /* @__PURE__ */ new Set([
 function readText(value) {
   if (!value) return void 0;
   if (!value.startsWith("@")) return value;
-  return import_node_fs21.default.readFileSync(import_node_path19.default.resolve(process.cwd(), value.slice(1)), "utf8");
+  return import_node_fs22.default.readFileSync(import_node_path20.default.resolve(process.cwd(), value.slice(1)), "utf8");
 }
 function printTicket(ticket, reused) {
   console.log();
@@ -16380,13 +16590,13 @@ var markRead = new Command("mark-read").option("--channel <key>", "Mark one chan
 var inboxCommand = new Command("inbox").description("Read and send inbox messages").addCommand(list11).addCommand(send2).addCommand(markRead);
 
 // src/commands/shops.ts
-var import_node_fs22 = __toESM(require("node:fs"));
-var import_node_path20 = __toESM(require("node:path"));
+var import_node_fs23 = __toESM(require("node:fs"));
+var import_node_path21 = __toESM(require("node:path"));
 function body4(command, raw) {
   if (!raw) return {};
   try {
     const source = raw.startsWith("@") ? raw.slice(1) : raw;
-    const text = raw.startsWith("@") || import_node_fs22.default.existsSync(source) ? import_node_fs22.default.readFileSync(import_node_path20.default.resolve(source), "utf8") : raw;
+    const text = raw.startsWith("@") || import_node_fs23.default.existsSync(source) ? import_node_fs23.default.readFileSync(import_node_path21.default.resolve(source), "utf8") : raw;
     const value = JSON.parse(text);
     if (!value || typeof value !== "object" || Array.isArray(value))
       throw new Error("body must be an object");
@@ -17199,16 +17409,16 @@ var discoverCommand = new Command("discover").description("Read back the trackin
 });
 
 // src/commands/skills.ts
-var import_node_fs23 = __toESM(require("node:fs"));
-var import_node_path21 = __toESM(require("node:path"));
+var import_node_fs24 = __toESM(require("node:fs"));
+var import_node_path22 = __toESM(require("node:path"));
 function packageRoot() {
   const candidates = [
-    import_node_path21.default.resolve(__dirname, ".."),
-    import_node_path21.default.resolve(import_node_path21.default.dirname(process.argv[1] ?? process.cwd()), ".."),
-    import_node_path21.default.resolve(process.cwd(), "packages/cli")
+    import_node_path22.default.resolve(__dirname, ".."),
+    import_node_path22.default.resolve(import_node_path22.default.dirname(process.argv[1] ?? process.cwd()), ".."),
+    import_node_path22.default.resolve(process.cwd(), "packages/cli")
   ];
   for (const candidate of candidates) {
-    if (import_node_fs23.default.existsSync(import_node_path21.default.join(candidate, "AGENTS.md"))) return candidate;
+    if (import_node_fs24.default.existsSync(import_node_path22.default.join(candidate, "AGENTS.md"))) return candidate;
   }
   throw new Error(
     `Apex CLI package files not found. Looked for AGENTS.md in: ${candidates.join(", ")}`
@@ -17217,19 +17427,19 @@ function packageRoot() {
 function skillPaths() {
   const root = packageRoot();
   return {
-    agents: import_node_path21.default.join(root, "AGENTS.md"),
-    skill: import_node_path21.default.join(root, "skills", "apex-cli", "SKILL.md")
+    agents: import_node_path22.default.join(root, "AGENTS.md"),
+    skill: import_node_path22.default.join(root, "skills", "apex-cli", "SKILL.md")
   };
 }
 function installSkill(paths, targetRoot) {
-  const missing = [paths.skill, paths.agents].filter((filePath) => !import_node_fs23.default.existsSync(filePath));
+  const missing = [paths.skill, paths.agents].filter((filePath) => !import_node_fs24.default.existsSync(filePath));
   if (missing.length > 0) {
     throw new Error(`Apex CLI package files not found. Missing: ${missing.join(", ")}`);
   }
-  const target = import_node_path21.default.resolve(targetRoot, "apex-cli");
-  import_node_fs23.default.mkdirSync(target, { recursive: true });
-  import_node_fs23.default.copyFileSync(paths.skill, import_node_path21.default.join(target, "SKILL.md"));
-  import_node_fs23.default.copyFileSync(paths.agents, import_node_path21.default.join(target, "AGENTS.md"));
+  const target = import_node_path22.default.resolve(targetRoot, "apex-cli");
+  import_node_fs24.default.mkdirSync(target, { recursive: true });
+  import_node_fs24.default.copyFileSync(paths.skill, import_node_path22.default.join(target, "SKILL.md"));
+  import_node_fs24.default.copyFileSync(paths.agents, import_node_path22.default.join(target, "AGENTS.md"));
   return target;
 }
 var skillsCommand = new Command("skills").description("Print or install the Apex CLI agent skill files").option("--install", "Copy the Apex CLI skill into ./.claude/skills/apex-cli").option("--target <dir>", "Install target skills directory", ".claude/skills").option("--json", "Print JSON").action(function action64(opts) {
@@ -17329,8 +17539,8 @@ async function confirmArchive(command, shopId, force) {
   }
   const readline3 = await import("node:readline");
   const rl = readline3.createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question("Archive this shop? Apex delivery will be disabled. [y/N] ", resolve);
+  const answer = await new Promise((resolve2) => {
+    rl.question("Archive this shop? Apex delivery will be disabled. [y/N] ", resolve2);
   });
   rl.close();
   if (answer.toLowerCase() !== "y") {
@@ -17384,7 +17594,7 @@ async function confirm(c, force, label, retry) {
   const readline3 = await import("node:readline");
   const rl = readline3.createInterface({ input: process.stdin, output: process.stderr });
   const answer = await new Promise(
-    (resolve) => rl.question(source_default.yellow(`${label}? [y/N] `), resolve)
+    (resolve2) => rl.question(source_default.yellow(`${label}? [y/N] `), resolve2)
   );
   rl.close();
   if (answer.toLowerCase() !== "y") {
@@ -17975,10 +18185,10 @@ var webhooksCommand = new Command("webhooks").description("Manage shop webhooks"
 
 // src/commands/simulate.ts
 init_source();
-var import_node_fs24 = __toESM(require("node:fs"));
-var import_node_path22 = __toESM(require("node:path"));
+var import_node_fs25 = __toESM(require("node:fs"));
+var import_node_path23 = __toESM(require("node:path"));
 function readJson2(file) {
-  const text = file === "-" ? import_node_fs24.default.readFileSync(0, "utf8") : import_node_fs24.default.readFileSync(import_node_path22.default.resolve(file), "utf8");
+  const text = file === "-" ? import_node_fs25.default.readFileSync(0, "utf8") : import_node_fs25.default.readFileSync(import_node_path23.default.resolve(file), "utf8");
   try {
     return JSON.parse(text);
   } catch (error) {
@@ -18100,8 +18310,8 @@ var simulateCommand = new Command("simulate").description("Simulate data-layer t
 });
 
 // src/commands/config-resources.ts
-var import_node_fs25 = __toESM(require("node:fs"));
-var import_node_path23 = __toESM(require("node:path"));
+var import_node_fs26 = __toESM(require("node:fs"));
+var import_node_path24 = __toESM(require("node:path"));
 function show(resource) {
   process.stdout.write(`${JSON.stringify(resource, null, 2)}
 `);
@@ -18127,8 +18337,8 @@ async function confirmAssetDelete(id) {
     input: process.stdin,
     output: process.stderr
   });
-  const answer = await new Promise((resolve) => {
-    rl.question(`Delete asset "${id}"? This cannot be undone. [y/N] `, resolve);
+  const answer = await new Promise((resolve2) => {
+    rl.question(`Delete asset "${id}"? This cannot be undone. [y/N] `, resolve2);
   });
   rl.close();
   return answer.trim().toLowerCase() === "y";
@@ -18174,12 +18384,12 @@ function readFamily(family, label) {
 }
 var assetReads = readFamily("assets", "assets");
 var upload = new Command("upload").description("Upload an asset").argument("<file>").action(async function(file) {
-  const absolute = import_node_path23.default.resolve(process.cwd(), file);
-  if (!import_node_fs25.default.existsSync(absolute)) fail(this, `File not found: ${file}`, 3);
-  const fileStat = import_node_fs25.default.statSync(absolute);
+  const absolute = import_node_path24.default.resolve(process.cwd(), file);
+  if (!import_node_fs26.default.existsSync(absolute)) fail(this, `File not found: ${file}`, 3);
+  const fileStat = import_node_fs26.default.statSync(absolute);
   if (!fileStat.isFile()) fail(this, `File not found: ${file}`, 3);
   if (fileStat.size > MAX_ASSET_SIZE_BYTES) fail(this, `${file} is larger than 10 MB`, 3);
-  const mimeType = ASSET_MIME_TYPES[import_node_path23.default.extname(absolute).toLowerCase()];
+  const mimeType = ASSET_MIME_TYPES[import_node_path24.default.extname(absolute).toLowerCase()];
   if (!mimeType)
     fail(
       this,
@@ -18188,8 +18398,8 @@ var upload = new Command("upload").description("Upload an asset").argument("<fil
     );
   const r = await uploadAssets(requireCredentials(), [
     {
-      name: import_node_path23.default.basename(absolute),
-      bytes: import_node_fs25.default.readFileSync(absolute),
+      name: import_node_path24.default.basename(absolute),
+      bytes: import_node_fs26.default.readFileSync(absolute),
       type: mimeType
     }
   ]);
@@ -18279,6 +18489,7 @@ program2.addCommand(funnelsCommand);
 program2.addCommand(environmentsCommand);
 program2.addCommand(consentCommand);
 program2.addCommand(triggersCommand);
+program2.addCommand(projectCodeCommand);
 program2.addCommand(domainsCommand);
 program2.addCommand(handoverCommand);
 program2.addCommand(analyticsCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drip-apex/apex-cli",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "license": "MIT",
   "description": "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   "private": false,

package/skills/apex-cli/SKILL.md

@@ -63,3 +63,31 @@ Platform administrators can archive a mistakenly created shop with
 `apex admin shops restore <shopId>`. Archive refuses a shop with running tests;
 stop those tests rather than retrying or overriding the refusal. Restore leaves
 delivery controlled by the runtime kill switch.
+
+
+## Project code
+
+```sh
+apex project-code get --shop example.com --json
+apex project-code diff --file project-code.json --shop example.com --json
+apex project-code set --file project-code.json --shop example.com --backup previous-code.json --json
+```
+
+The input is a partial projectCode object, for example `{ "css": "body { color: red; }" }`.
+Supported fields are `enabled` (boolean) and `css`, `helperJs`, and `js` (strings or null).
+Each code field permits at most 20,000 characters. Omitted fields remain unchanged.
+Null or blank code clears that field. Unknown fields and empty objects are rejected.
+
+GET returns complete code, shop identity, and an opaque version. DIFF returns effective
+before/after values and changed fields without writing. SET creates a new backup file
+with complete previous code, identity, capture time, and the exact version before PATCH.
+It never replaces an existing backup. Backup failures prevent the write. An effective
+no-op returns `unchanged`, without a PATCH or backup file.
+
+The backed-up version becomes expectedVersion unchanged. A conflict returns exit 5,
+keeps the backup, and does not retry. Read the latest state and preview it before a new
+attempt with a new backup path. Authentication uses exit 2; invalid input uses exit 3.
+A successful write returns `saved`, its diff, backup path, current version, writtenVersion,
+and precompile result. A failed precompile is a saved-write warning. All warnings remain
+in JSON and are also written to stderr. User keys resolve domains or pin UUID context;
+shop keys must match the requested identity before any backup or write.