@epilot/cli 0.1.108 → 0.1.110

package/dist/{deploy-NRQHZ635.js → deploy-2U5FVEE7.js}

@@ -8,7 +8,7 @@ import {
   uploadDirectoryAsZip,
   uploadFileToPresignedUrl,
   writeManifest
-} from "./chunk-QOD77YLW.js";
+} from "./chunk-UDGF4AVJ.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";
@@ -105,15 +105,67 @@ var deploy_default = defineCommand({
         log.warn(`Logo not found: ${logoPath}`);
       }
     }
-    if (manifest.permissions?.length || manifest.blueprint?.manifest_id) {
+    let functionsPayload;
+    if (manifest.functions) {
+      functionsPayload = [];
+      for (const fn of manifest.functions) {
+        const handlerPath = resolve(manifestDir, fn.handler);
+        if (!existsSync(handlerPath)) {
+          log.error(`Handler not found for function "${fn.name}": ${handlerPath} \u2014 run "npm run build" first`);
+          process.exit(1);
+        }
+        const { handler, assets: fnAssets, ...rest } = fn;
+        const payload = { ...rest, code: readFileSync(handlerPath, "utf-8") };
+        if (fnAssets?.zip) {
+          const zipPath = resolve(manifestDir, fnAssets.zip);
+          if (!existsSync(zipPath)) {
+            log.warn(`Config UI directory not found for function "${fn.name}": ${zipPath} \u2014 skipping surface`);
+          } else if (dryRun) {
+            log.info(`[dry-run] Would zip and upload config UI for function ${fn.name}`);
+          } else {
+            const { upload_url, artifact_url } = await client.createZipUploadUrl(
+              appId,
+              targetVersion,
+              `fn-${fn.name}`
+            );
+            const zipSize = await uploadDirectoryAsZip(upload_url, zipPath);
+            log.success(`Uploaded config UI for function ${fn.name} (${formatFileSize(zipSize)})`);
+            payload.surfaces = {
+              flow_action_config: {
+                app_url: artifact_url.replace(/\/[^/]+$/, "/index.html"),
+                zip_url: artifact_url
+              }
+            };
+          }
+        }
+        functionsPayload.push(payload);
+        if (dryRun) {
+          log.info(
+            `[dry-run] Would deploy ${fn.type} function ${fn.name}${fn.schedule ? ` (schedule: ${fn.schedule})` : ""}`
+          );
+        }
+      }
+    }
+    if (manifest.permissions?.length || manifest.blueprint?.manifest_id || functionsPayload) {
       if (dryRun) {
         if (manifest.permissions?.length) {
-          log.info("[dry-run] Would upsert app role in developer org");
+          log.info("[dry-run] Would upsert app role in developer org (if grants changed)");
         }
         log.info("[dry-run] Would update version permissions/blueprint");
       } else {
+        let grantsChanged = true;
+        if (!isNew && manifest.permissions?.length) {
+          try {
+            const remoteVersion = await client.getVersion(appId, targetVersion);
+            const remoteGrants = remoteVersion.role?.grants;
+            grantsChanged = normalizeGrants(remoteGrants) !== normalizeGrants(manifest.permissions);
+          } catch {
+          }
+        }
         let roleId;
-        if (manifest.permissions?.length) {
+        if (manifest.permissions?.length && !grantsChanged) {
+          log.dim("Permissions unchanged \u2014 skipping grant re-provisioning");
+        } else if (manifest.permissions?.length) {
           const orgId = resolveOrgId(args.token, args.profile);
           if (orgId) {
             try {
@@ -131,11 +183,17 @@ var deploy_default = defineCommand({
             log.warn("Could not resolve org id \u2014 attaching grants without a developer-org role");
           }
         }
-        await client.patchVersion(appId, targetVersion, {
-          ...manifest.permissions?.length ? { grants: manifest.permissions, ...roleId ? { role_id: roleId } : {} } : {},
-          ...manifest.blueprint?.manifest_id ? { manifest_id: manifest.blueprint.manifest_id } : {}
-        });
-        log.success(`Updated version ${targetVersion} (permissions/blueprint)`);
+        const sendGrants = Boolean(manifest.permissions?.length && grantsChanged);
+        if (sendGrants || manifest.blueprint?.manifest_id || functionsPayload) {
+          await client.patchVersion(appId, targetVersion, {
+            ...sendGrants ? { grants: manifest.permissions, ...roleId ? { role_id: roleId } : {} } : {},
+            ...manifest.blueprint?.manifest_id ? { manifest_id: manifest.blueprint.manifest_id } : {},
+            ...functionsPayload ? { functions: functionsPayload } : {}
+          });
+          log.success(
+            `Updated version ${targetVersion} (permissions/blueprint${functionsPayload ? `, ${functionsPayload.length} function(s)` : ""})`
+          );
+        }
       }
     }
     for (const comp of manifest.components) {
@@ -222,6 +280,24 @@ var deploy_default = defineCommand({
         }
       }
     }
+    if (!isNew) {
+      if (dryRun) {
+        log.info("[dry-run] Would re-sync the installation in this org (if installed)");
+      } else {
+        try {
+          const installation = await client.getInstallation(appId);
+          if (installation) {
+            await client.patchInstallation(appId, { version: targetVersion });
+            log.success(`Re-synced installation in this org to v${targetVersion}`);
+            log.warn(
+              "Re-syncing disables the installation \u2014 open the app in epilot (Settings \u2192 Apps) and save its configuration to re-enable it."
+            );
+          }
+        } catch (err) {
+          log.warn(`Could not re-sync installation: ${err.message}`);
+        }
+      }
+    }
     if (dryRun) {
       log.header("Dry run complete. No changes were made.");
     } else {
@@ -229,6 +305,11 @@ var deploy_default = defineCommand({
     }
   }
 });
+function normalizeGrants(grants = []) {
+  return JSON.stringify(
+    grants.map((g) => ({ action: g.action, resource: g.resource ?? null })).sort((a, b) => `${a.action}|${a.resource}`.localeCompare(`${b.action}|${b.resource}`))
+  );
+}
 export {
   deploy_default as default
 };

package/dist/dev-JEAHUYQU.js

@@ -0,0 +1,105 @@
+#!/usr/bin/env node
+import {
+  createAppApiClient,
+  log,
+  readManifest
+} from "./chunk-UDGF4AVJ.js";
+import "./chunk-M3M3C5WH.js";
+import "./chunk-YHQA2AVG.js";
+import "./chunk-7ZQ666ZQ.js";
+
+// src/commands/app/dev.ts
+import { defineCommand } from "citty";
+import { resolve } from "path";
+var dev_default = defineCommand({
+  meta: { name: "dev", description: "Serve a component from localhost inside epilot (dev mode)" },
+  args: {
+    path: { type: "positional", description: "Path to manifest.json", required: false },
+    component: { type: "string", alias: "c", description: "Component to override (folder name in components/)" },
+    url: { type: "string", alias: "u", description: "Local dev server URL (default: http://localhost:5173)" },
+    off: { type: "boolean", description: "Disable dev mode and remove the override" },
+    token: { type: "string", alias: "t", description: "Bearer token" },
+    server: { type: "string", alias: "s", description: "Override server base URL" },
+    profile: { type: "string", description: "Use a named profile" }
+  },
+  run: async ({ args }) => {
+    const manifestPath = resolve(args.path ?? "manifest.json");
+    const manifest = readManifest(manifestPath);
+    const client = createAppApiClient({ token: args.token, server: args.server, profile: args.profile });
+    if (!manifest.app_id) {
+      log.error("No app_id in manifest \u2014 deploy the app once before using dev mode.");
+      process.exit(1);
+    }
+    const appId = manifest.app_id;
+    const overrideUrl = args.url ?? "http://localhost:5173";
+    const overridable = manifest.components.filter(
+      (c) => c.component_type === "CUSTOM_JOURNEY_BLOCK" || c.surfaces && Object.keys(c.surfaces).length > 0
+    );
+    let localComponent = args.component ? manifest.components.find((c) => c._dir === args.component) : void 0;
+    if (args.component && !localComponent) {
+      log.error(`Component "${args.component}" not found in manifest (expected its folder name in components/).`);
+      process.exit(1);
+    }
+    if (!localComponent) {
+      if (overridable.length === 1) {
+        localComponent = overridable[0];
+      } else if (overridable.length === 0) {
+        log.error(
+          "No overridable component found \u2014 dev mode works for UI components (capabilities, pages, portal blocks, journey blocks)."
+        );
+        process.exit(1);
+      } else {
+        log.error(
+          `Multiple UI components found \u2014 pick one with --component <name>: ${overridable.map((c) => c._dir).filter(Boolean).join(", ")}`
+        );
+        process.exit(1);
+      }
+    }
+    const config = await client.getConfiguration(appId);
+    const version = config.latest_version;
+    const remoteVersion = await client.getVersion(appId, version);
+    const remoteComponents = remoteVersion.components ?? [];
+    const remoteComponent = remoteComponents.find((c) => c.id === localComponent.id);
+    if (!remoteComponent) {
+      log.error(`Component ${localComponent.id} not found in deployed version ${version} \u2014 deploy first.`);
+      process.exit(1);
+    }
+    if (remoteComponent.component_type === "CUSTOM_JOURNEY_BLOCK") {
+      const configuration = remoteComponent.configuration ?? {};
+      if (args.off) {
+        delete configuration.override_dev_mode;
+      } else {
+        configuration.override_dev_mode = { override_url: overrideUrl };
+      }
+      remoteComponent.configuration = configuration;
+    } else {
+      const surfaces = remoteComponent.surfaces ?? {};
+      for (const surface of Object.values(surfaces)) {
+        if (surface && typeof surface === "object") {
+          if (args.off) {
+            delete surface.override_url;
+          } else {
+            surface.override_url = overrideUrl;
+          }
+        }
+      }
+    }
+    await client.upsertComponent(appId, version, remoteComponent);
+    await client.patchMetadata(appId, { dev_mode: !args.off });
+    if (args.off) {
+      log.header("Dev mode disabled.");
+      log.dim("The component is served from the CDN again.");
+    } else {
+      log.header(`Dev mode enabled for ${localComponent._dir ?? localComponent.id}`);
+      log.info(`epilot now loads this component from ${overrideUrl}`);
+      log.info("");
+      log.info(`  1. cd components/${localComponent._dir ?? "<component>"} && npm run dev`);
+      log.info("  2. Reload the page in epilot to see your changes");
+      log.info("");
+      log.dim("Turn off with: epilot app dev --off  (required before cloning a new version)");
+    }
+  }
+});
+export {
+  dev_default as default
+};

package/dist/{export-ZRDJCALM.js → export-VLAY2KZP.js}

@@ -4,7 +4,7 @@ import {
   log,
   toManifest,
   writeManifest
-} from "./chunk-QOD77YLW.js";
+} from "./chunk-UDGF4AVJ.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{init-BXAGJAPS.js → init-C66L5GFR.js}

@@ -2,7 +2,7 @@
 import {
   log,
   writeManifest
-} from "./chunk-QOD77YLW.js";
+} from "./chunk-UDGF4AVJ.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";
@@ -108,6 +108,9 @@ var init_default = defineCommand({
         "- `CUSTOM_FLOW_ACTION_EXTERNAL` \u2014 External integration webhook",
         "- `PORTAL_EXTENSION` \u2014 Portal extension hooks",
         "- `EXTERNAL_PRODUCT_CATALOG` \u2014 External product catalog hooks",
+        "",
+        "Inline in manifest.json (no directory):",
+        "- `API_PROXY` \u2014 Server-side API proxy with credential injection",
         ""
       ].join("\n")
     );
@@ -250,6 +253,21 @@ Deploy the app:
 
 The deploy command reads \`components/<dir>/configuration.json\` at deploy time and uses it as the component's configuration. This means you edit config in the component directory, not in manifest.json.
 
+**Deploy does not update existing installations.** Installations keep a frozen snapshot of
+components, options and grants. After deploying to an app that is already installed:
+
+\`\`\`bash
+epilot app api patchInstallation <appId> -d '{"version":"<version>"}'
+\`\`\`
+
+This refreshes components and grants **and preserves configured option values**
+(uninstall/reinstall loses them; \`promote-to\` to the already-installed version is a silent
+no-op). The patch resets \`enabled\` to \`false\` \u2014 an org admin must re-save the app
+configuration in the epilot UI afterwards.
+
+**Auth tokens expire after ~1 hour.** A mid-deploy 403 that reads like a permissions problem
+is usually just an expired token \u2014 run \`epilot auth login\` and deploy again.
+
 ### \`epilot app export --app-id <id> [-o manifest.json]\`
 Export an existing app from the API as a manifest.json.
 
@@ -440,9 +458,95 @@ Hooks that provide products from an external catalog to epilot Journeys.
 
 **Hook types:** \`products\`, \`product-recommendations\`.
 
+### Inline components (no directory at all)
+
+#### API_PROXY
+A server-side proxy that lets your frontend components call an external API without exposing
+credentials to the browser. Added with \`epilot app add-component <name> --type API_PROXY\`
+(prompts for proxy name, target URL and auth type). Unlike every other component type it has
+**no \`_dir\` and no folder** \u2014 it lives inline in \`manifest.json\`:
+
+\`\`\`json
+{
+  "component_type": "API_PROXY",
+  "configuration": {
+    "name": "sap",
+    "target": "https://my-gateway.example.com",
+    "auth_type": "header"
+  }
+}
+\`\`\`
+
+Call it from the frontend with the \`@epilot/app-sdk\` helper (do not hand-roll fetch):
+
+\`\`\`ts
+import { proxy } from '@epilot/app-sdk';
+
+const data = await proxy('sap', '/API_BUSINESS_PARTNER/A_BusinessPartner', {
+  appId,
+  token, // App Bridge session token
+});
+\`\`\`
+
+Current limits \u2014 probe your target with curl through the proxy before building on it:
+
+- **Query parameters are rejected** (400) by the proxy route's own request validation.
+  Workaround until fixed: percent-encode the \`?\` into the path
+  (\`/path%3F$expand=to_Customer\`) \u2014 fragile, leave a comment where you do it.
+- Only **GET and POST** are proxied \u2014 no PUT/PATCH/DELETE.
+- \`auth_type\` is \`none | header | bearer | oauth2\` \u2014 there is **no \`basic\`**. For HTTP Basic
+  targets, add one secret option holding a pre-computed Base64 \`user:pass\` and configure
+  \`"headers": { "Authorization": "Basic {{my_basic_secret}}" }\`.
+
+## Local Development (Dev Mode)
+
+\`npm run dev\` alone is of limited use for capabilities/pages: outside the epilot iframe there
+is no token and no entity. **Dev mode** makes epilot load your component from localhost inside
+the real epilot UI (localhost is a trustworthy origin, so the HTTPS iframe allows it).
+
+\`\`\`bash
+epilot app dev                                  # enable (default URL http://localhost:5173)
+epilot app dev -c my-tab -u http://localhost:3000   # pick component and URL
+epilot app dev --off                            # disable \u2014 required before cloning a version
+\`\`\`
+
+Then \`npm run dev\` in the component folder and reload the entity page in epilot.
+
+If your CLI version predates \`app dev\`, it wraps these two raw API patches:
+
+\`\`\`bash
+# 1. Enable dev mode on the app
+epilot app api patchMetadata <appId> -d '{"dev_mode": true}'
+
+# 2. Add the override URL to the component.
+#    The PATCH does NOT merge \u2014 fetch the full component object first and re-send
+#    ALL of it with the override added, or you get: 400 must have required property 'id'.
+epilot app api getConfiguration <appId>
+epilot app api patchComponent <appId> <version> <componentId> -d '<full component + override>'
+\`\`\`
+
+The override location **depends on the component type**:
+
+| Component type | Override field |
+| --- | --- |
+| \`CUSTOM_CAPABILITY\` (and other zip surfaces) | \`surfaces.capability_config.override_url\` |
+| \`CUSTOM_JOURNEY_BLOCK\` | \`configuration.override_dev_mode.override_url\` |
+
+Do not copy the journey-block shape onto a capability \u2014 it silently does nothing.
+
+To leave dev mode, set \`dev_mode: false\` and remove the override (again re-sending the full
+component).
+
+Note: the dev-mode switch in the epilot portal UI is a different mechanism and does not write
+these fields.
+
 ## Workflow: Building an App from Scratch
 
 \`\`\`bash
+# 0. If the app calls an external API: probe it with curl FIRST.
+#    Get auth + one real response working in the terminal before writing any code.
+#    (Through the proxy too, once deployed \u2014 its limits bite real targets, see API_PROXY.)
+
 # 1. Scaffold the project
 epilot app init my-app
 cd my-app
@@ -492,16 +596,72 @@ For every component with a \`_dir\` field, the CLI reads \`components/<dir>/conf
 5. Injects the CDN URL into the component configuration/surfaces before upserting
 
 ### Permissions
-Apps can request permissions via the \`permissions\` array in the manifest. These are created as a role when the app is installed. Common actions: \`entity:read\`, \`entity:write\`, \`entity:delete\`, \`workflow:read\`, \`workflow:write\`.
+
+Apps request permissions via the \`permissions\` array in the manifest. On installation, epilot
+creates a role with these grants in the installing organization. Common actions:
+\`entity:read\`, \`entity:write\`, \`entity:delete\`, \`workflow:read\`, \`workflow:write\`.
+
+What permissions do and do not cover:
+
+- They gate the app's **server-side** access to epilot APIs.
+- They do **not** make the App Bridge token work against the Entity API \u2014 that call returns
+  403 even with the permission granted. To show the current entity's data in a capability,
+  read it from the App Bridge context (see the App Bridge section); that path needs **no
+  permission at all**. Only request \`entity:*\` permissions for genuine server-side API use.
+- **Every \`epilot app deploy\` re-patches the version's grants and desyncs existing
+  installations** \u2014 the installed app starts getting 403s while the permissions UI still
+  shows everything granted. After deploying to an already-installed app, re-sync with
+  \`epilot app api patchInstallation <appId> -d '{"version":"<version>"}'\`, then have an org
+  admin re-save the app configuration in epilot (the patch resets \`enabled\` to false).
 
 ### Options
-Components can declare \`options\` \u2014 configuration values set by the installing organization. Types: \`text\`, \`number\`, \`boolean\`, \`secret\`. Secret values are encrypted and never included in the manifest. Use \`{{option_key}}\` in configuration URLs/headers for interpolation.
+Components can declare \`options\` \u2014 configuration values set by the installing organization. Types: \`text\`, \`number\`, \`boolean\`, \`secret\`. Use \`{{option_key}}\` in configuration URLs/headers for interpolation.
+
+Two caveats:
+- **Options merge on upsert.** Deploying a component without an \`options\` key leaves the old
+  options in place, so removed options stay visible to installing admins. Send \`"options": []\`
+  once to clear them, then patch the installation.
+- **"Secret" means not delivered to the app's browser code.** Secret values are never stored
+  in the manifest and are injected server-side \u2014 but organization admins with API access can
+  read stored values back. Do not describe them to users as unreadable.
 
 ### Descriptions
 All user-facing text (app name, component names, descriptions) must include a \`de\` (German) translation. \`en\` is optional but recommended.
 
 ### App Bridge
-Components that render inside epilot (capabilities, pages, portal blocks) use \`@epilot/app-bridge\` to communicate with the parent window. The bridge provides an auth token and language setting. Always wrap your React app in an \`AppBridgeProvider\`.
+
+Capabilities, pages and portal blocks run in an iframe and talk to epilot via
+\`@epilot/app-bridge\`. Wrap your app in an \`AppBridgeProvider\`.
+
+**The context already contains the entity.** \`getEntityContext()\` returns the full entity
+next to its id (the \`EntityContext\` type may not declare the \`entity\` field yet \u2014 it is
+there at runtime). A tab that renders entity data needs no Entity API call and no
+\`entity:read\` permission:
+
+\`\`\`ts
+const ctx = await getEntityContext()
+ctx.entityId            // '53a9f8c4-\u2026'
+(ctx as any).entity     // the whole entity \u2014 prefer this over fetching it
+\`\`\`
+
+Prefer this over the Entity API: it is one round-trip cheaper, and app tokens are **not**
+guaranteed to authorise direct Entity API calls (expect 403 there even when the permission
+shows as granted).
+
+**\`initialize()\` makes one attempt and rejects after \`timeout\` (default 5000 ms).** There is
+no internal retry, so if the parent is not listening yet the message is lost. Retry 2\u20133 times
+before concluding you are outside epilot, and keep the session token even when a later
+context request fails \u2014 otherwise "epilot answered oddly" is indistinguishable from "no epilot".
+
+**Report your height.** The iframe does not auto-size. Call \`updateContentHeight(px)\` from a
+\`ResizeObserver\` on \`document.body\`. Do **not** set \`html, body, #root { height: 100% }\` while
+measuring \`scrollHeight\` \u2014 the body then can never exceed the iframe, so the reported height
+never grows and the tab stays a small scrolling box.
+
+**Refresh on becoming visible.** \`onVisibilityChange(cb)\` fires when the user switches tabs.
+
+**Debugging.** Your console output goes to the iframe's JS context (\`cdn.app.sls.epilot.io\`),
+not \`top\`. Switch the DevTools context selector or you will see nothing and assume nothing ran.
 
 ### Volt UI
 Use \`@epilot/volt-ui\` for UI components in App Bridge surfaces (capabilities, pages, portal blocks). It provides cards, buttons, forms, selectors, and more \u2014 consistent with epilot's design system.

package/dist/{remove-component-LPTHVN4P.js → remove-component-7C7MPSBF.js}

@@ -3,7 +3,7 @@ import {
   log,
   readManifest,
   writeManifest
-} from "./chunk-QOD77YLW.js";
+} from "./chunk-UDGF4AVJ.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{review-OZTM3XBD.js → review-JZTMQNU3.js}

@@ -3,7 +3,7 @@ import {
   createAppApiClient,
   log,
   readManifest
-} from "./chunk-QOD77YLW.js";
+} from "./chunk-UDGF4AVJ.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{upgrade-HU256V6J.js → upgrade-KY6R7SUW.js}

@@ -72,7 +72,7 @@ ${GREEN}${BOLD}Upgraded to @epilot/cli@${latest}${RESET}
   }
 });
 var getCurrentVersion = () => {
-  if (true) return "0.1.108";
+  if (true) return "0.1.110";
   try {
     const output = execSync("npm ls -g @epilot/cli --depth=0 --json 2>/dev/null", {
       encoding: "utf-8",

package/dist/{validate-TLSOTJAY.js → validate-J35DJW3H.js}

@@ -2,7 +2,7 @@
 import {
   log,
   validateManifest
-} from "./chunk-QOD77YLW.js";
+} from "./chunk-UDGF4AVJ.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";
@@ -40,6 +40,14 @@ var validate_default = defineCommand({
     const manifest = result.manifest;
     log.success(`${manifestPath} is valid`);
     log.info(`${manifest.components.length} component(s) defined`);
+    if (manifest.functions?.length) {
+      const scheduled = manifest.functions.filter((f) => f.type === "scheduled");
+      const workflow = manifest.functions.filter((f) => f.type === "workflow");
+      log.info(`${manifest.functions.length} function(s): ${workflow.length} workflow, ${scheduled.length} scheduled`);
+      for (const fn of scheduled) {
+        log.dim(`${fn.name}: ${fn.schedule}${fn.schedule_timezone ? ` (${fn.schedule_timezone})` : ""}`);
+      }
+    }
     const secretOptions = manifest.components.flatMap((c) => (c.options ?? []).filter((o) => o.type === "secret"));
     if (secretOptions.length > 0) log.info(`${secretOptions.length} secret option(s) (set per-installation)`);
     if (manifest.assets?.logo) log.info(`Logo: ${manifest.assets.logo}`);

package/dist/{versions-VA4H3EPK.js → versions-2TMTHO7W.js}

@@ -3,7 +3,7 @@ import {
   createAppApiClient,
   log,
   readManifest
-} from "./chunk-QOD77YLW.js";
+} from "./chunk-UDGF4AVJ.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/cli",
-  "version": "0.1.108",
+  "version": "0.1.110",
   "description": "CLI for epilot APIs",
   "type": "module",
   "bin": {

package/dist/app-RULTIGMJ.js

@@ -1,24 +0,0 @@
-#!/usr/bin/env node
-
-// src/commands/app/index.ts
-import { defineCommand } from "citty";
-var app_default = defineCommand({
-  meta: {
-    name: "app",
-    description: "Manage epilot Apps \u2014 create, deploy, and manage app manifests"
-  },
-  subCommands: {
-    init: () => import("./init-BXAGJAPS.js").then((m) => m.default),
-    "add-component": () => import("./add-component-UPHG3VNG.js").then((m) => m.default),
-    "remove-component": () => import("./remove-component-LPTHVN4P.js").then((m) => m.default),
-    validate: () => import("./validate-TLSOTJAY.js").then((m) => m.default),
-    deploy: () => import("./deploy-NRQHZ635.js").then((m) => m.default),
-    export: () => import("./export-ZRDJCALM.js").then((m) => m.default),
-    versions: () => import("./versions-VA4H3EPK.js").then((m) => m.default),
-    review: () => import("./review-OZTM3XBD.js").then((m) => m.default),
-    api: () => import("./api-5W2UMWCW.js").then((m) => m.default)
-  }
-});
-export {
-  app_default as default
-};