@fluid-app/fluid-cli-widget 0.1.39 → 0.1.41

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { i as fluidOsV0WidgetPackageGitCredentialCreate, l as WidgetToolingError, n as loadAndValidateWidgetPackage, r as publishWidgetPackage$1, t as buildWidgetPackage$1 } from "./src-CTSiuhqb.mjs";
+import { i as fluidOsV0WidgetPackageGitCredentialCreate, l as WidgetToolingError, n as loadAndValidateWidgetPackage, r as publishWidgetPackage$1, t as buildWidgetPackage$1 } from "./src-DmzhQfOq.mjs";
 import { Command } from "commander";
 import path from "node:path";
 import { randomUUID } from "node:crypto";
@@ -574,9 +574,9 @@ function isRecord$3(value) {
 }
 //#endregion
 //#region src/utils/template.ts
-const EMBEDDED_PORTAL_SDK_VERSION = "0.1.482";
-const EMBEDDED_CLI_CORE_VERSION = "0.1.19";
-const EMBEDDED_CLI_WIDGET_VERSION = "0.1.39";
+const EMBEDDED_PORTAL_SDK_VERSION = "0.1.485";
+const EMBEDDED_CLI_CORE_VERSION = "0.1.20";
+const EMBEDDED_CLI_WIDGET_VERSION = "0.1.41";
 function getDefaultTemplatePath() {
 	return path.join(findPackageRoot(), "templates", "default");
 }
@@ -2198,17 +2198,26 @@ function unwrapResponseData(response) {
 /**
 * Mint a git credential for a widget package.
 *
-* Backend (fluid-commerce PR #19162 — not deployed to prod yet):
+* Backend endpoints:
 *   - droplet-owned: POST /api/droplets/:uuid/widget_package/git_credential
 *   - company-owned: POST /api/company/fluid_os/widget_package/git_credential
 * Both respond `{ git_credential: { remote_url, expires_at } }`.
 *
+* The raw droplet-scoped call must pass `security` — the hey-api runtime only
+* attaches the bearer token when a request declares it (generated SDK
+* functions do; a bare `client.post` does not, and the request goes out
+* unauthenticated → 401 "Invalid credentials").
+*
 * Throws the underlying `ApiError` (with `.status`) on failure so callers can
 * decide whether to degrade gracefully (see `isGitSyncUnavailable`).
 */
 async function mintWidgetGitCredential(options) {
 	const response = unwrapResponseData(options.droplet ? await options.client.post({
 		responseStyle: "data",
+		security: [{
+			scheme: "bearer",
+			type: "http"
+		}],
 		url: `/api/droplets/${encodeURIComponent(options.droplet)}/widget_package/git_credential`
 	}) : await fluidOsV0WidgetPackageGitCredentialCreate({
 		client: options.client,
@@ -2254,9 +2263,10 @@ function getErrorStatus(err) {
 }
 /**
 * Should a git-credential failure degrade to "publish artifacts only" rather
-* than abort? True when the endpoint isn't deployed (404) or the package's git
-* repo isn't provisioned/connected yet (409). Other statuses (auth, 5xx) are
-* genuine errors the caller may still choose to treat as best-effort.
+* than abort? True when there is no repository to sync with yet: the widget
+* package record does not exist (404), or it exists but its `GitSync` repo has
+* not been created and connected (409). Other statuses (auth, 5xx) are genuine
+* errors the caller may still choose to treat as best-effort.
 */
 function isGitSyncUnavailable(err) {
 	const status = getErrorStatus(err);
@@ -2692,6 +2702,10 @@ async function listDroplets(client) {
 		const firstResponse = await client.get({
 			query: { page: 1 },
 			responseStyle: "data",
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
 			url: "/api/droplets"
 		});
 		const totalPages = Math.min(readTotalPages(firstResponse) ?? 1, MAX_DROPLET_PAGES);
@@ -2699,6 +2713,10 @@ async function listDroplets(client) {
 		for (let page = 2; page <= totalPages; page += 1) responses.push(await client.get({
 			query: { page },
 			responseStyle: "data",
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
 			url: "/api/droplets"
 		}));
 		return responses.flatMap(normalizeDropletsResponse);
@@ -2799,6 +2817,10 @@ const linkCommand = new Command("link").description("Link this widget project to
 async function fetchDropletWidgetStatus(options) {
 	return extractArray(await options.client.get({
 		responseStyle: "data",
+		security: [{
+			scheme: "bearer",
+			type: "http"
+		}],
 		url: `/api/droplets/${encodeURIComponent(options.droplet)}/widget_package_versions`
 	})).map(normalizeVersionSummary);
 }
@@ -2806,6 +2828,10 @@ async function fetchDropletWidgetLogs(options) {
 	return extractArray(await options.client.get({
 		query: options.limit ? { limit: options.limit } : void 0,
 		responseStyle: "data",
+		security: [{
+			scheme: "bearer",
+			type: "http"
+		}],
 		url: `/api/droplets/${encodeURIComponent(options.droplet)}/widget_package_versions/logs`
 	})).map(normalizeLogEntry);
 }
@@ -3066,6 +3092,10 @@ function str(value) {
 async function fetchCurrentUser(client) {
 	const raw = await client.get({
 		responseStyle: "data",
+		security: [{
+			scheme: "bearer",
+			type: "http"
+		}],
 		url: "/api/me"
 	});
 	const composed = [str(raw.first_name), str(raw.last_name)].filter((part) => part !== null).join(" ").trim();