@fluid-app/fluid-cli 0.1.15 → 0.1.17

package/dist/{token-D4DJFSdm.mjs → token-Bdv5tSmm.mjs}

@@ -330,10 +330,10 @@ function readConfig() {
 	} catch {
 		return createDefaultConfig();
 	}
-	return {
+	return withDurableWorkspaceAliases({
 		...createDefaultConfig(),
 		...parsed
-	};
+	});
 }
 function writeConfig(config) {
 	const configPath = getConfigFilePath();
@@ -344,7 +344,7 @@ function writeConfig(config) {
 	});
 	const tmpPath = join(dir, `.fluid-config-${randomBytes(6).toString("hex")}.tmp`);
 	try {
-		writeFileSync(tmpPath, JSON.stringify(config, null, 2) + "\n", {
+		writeFileSync(tmpPath, JSON.stringify(withDurableWorkspaceAliases(config), null, 2) + "\n", {
 			encoding: "utf-8",
 			mode: 384
 		});
@@ -356,6 +356,38 @@ function writeConfig(config) {
 		throw err;
 	}
 }
+function workspaceSlug(value) {
+	return value.toLowerCase().trim().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+}
+function storefrontSlug(value) {
+	return workspaceSlug((value.trim().replace(/^[a-z][a-z0-9+.-]*:\/\//i, "").split(/[/?#]/, 1)[0]?.replace(/:\d+$/, "") ?? "").replace(/\.fluid\.app$/i, ""));
+}
+/** Preserve rename history even when `fluid logout` clears the profiles that
+* originally carried it. Derivation on read migrates existing config files;
+* normalization on every write makes the migration durable before profiles
+* are removed. */
+function withDurableWorkspaceAliases(config) {
+	const aliases = {};
+	const add = (storefront, candidates) => {
+		const key = storefrontSlug(storefront);
+		if (!key) return;
+		const values = new Set(aliases[key] ?? []);
+		for (const candidate of candidates) {
+			const slug = workspaceSlug(candidate);
+			if (slug) values.add(slug);
+		}
+		if (values.size > 0) aliases[key] = [...values];
+	};
+	for (const [storefront, candidates] of Object.entries(config.workspaceAliasesByFluidShop ?? {})) {
+		if (!Array.isArray(candidates)) continue;
+		add(storefront, candidates.filter((candidate) => typeof candidate === "string"));
+	}
+	for (const profile of Object.values(config.profiles)) if (profile.fluidShop) add(profile.fluidShop, [profile.name, profile.companyName]);
+	return Object.keys(aliases).length > 0 || config.workspaceAliasesByFluidShop !== void 0 ? {
+		...config,
+		workspaceAliasesByFluidShop: aliases
+	} : config;
+}
 function updateConfig(updater) {
 	const updated = updater(readConfig());
 	writeConfig(updated);
@@ -428,16 +460,21 @@ function findProjectConfig(startDir) {
 /**
 * Get the auth token for a named profile, or the active profile when omitted.
 *
-* Resolution order (when `profileName` is omitted):
-*   1. Project-level `.fluidrc` profile (walks upward from cwd)
-*   2. Global active profile from `~/.fluid/config.json`
+* Resolution order (when `profileName` is omitted — mirrors `resolveToken`
+* in domain/context.ts):
+*   1. `FLUID_TOKEN` / `FLUID_API_TOKEN` environment variables
+*   2. Project-level `.fluidrc` profile (walks upward from cwd)
+*   3. Global active profile from `~/.fluid/config.json`
 *
 * When `profileName` is provided explicitly (e.g. via `--profile` flag),
-* it takes precedence over both `.fluidrc` and the active profile.
+* it takes precedence over the environment variables, `.fluidrc`, and the
+* active profile.
 */
 function getAuthToken(profileName) {
 	const config = readConfig();
 	if (profileName) return config.profiles[profileName]?.token ?? null;
+	const envToken = process.env["FLUID_TOKEN"] ?? process.env["FLUID_API_TOKEN"];
+	if (envToken) return envToken;
 	const projectConfig = findProjectConfig(process.cwd());
 	if (projectConfig?.profile) {
 		const profile = config.profiles[projectConfig.profile];
@@ -464,4 +501,4 @@ function listProfileNames() {
 //#endregion
 export { unwrapOr as A, isSuccess as C, tryCatch as D, success as E, tryCatchAsync as O, isNodeError as S, mapResult as T, validateToken as _, readConfig as a, isError as b, getConfigDir as c, FLUID_API_ERROR as d, confirmMfa as f, switchCompany as g, sendMfa as h, findProjectConfig as i, unwrap as k, getConfigFilePath as l, getFluidApiBase as m, getAuthToken as n, updateConfig as o, fetchUserCompanies as p, listProfileNames as r, writeConfig as s, getActiveProfile as t, createDefaultConfig as u, failure as v, mapError as w, isFailure as x, getErrorMessage as y };
 
-//# sourceMappingURL=token-D4DJFSdm.mjs.map
+//# sourceMappingURL=token-Bdv5tSmm.mjs.map

package/dist/token-Bdv5tSmm.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-Bdv5tSmm.mjs","names":[],"sources":["../src/utils/result.ts","../src/auth/fluid-api.ts","../src/config/types.ts","../src/config/paths.ts","../src/config/config.ts","../src/config/project-config.ts","../src/auth/token.ts"],"sourcesContent":["/**\n * Result type utilities for type-safe error handling\n *\n * The Result<T, E> pattern provides a discriminated union for fallible operations,\n * enabling exhaustive handling without try/catch blocks.\n */\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Result type - discriminated union for success/failure\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface Success<T> {\n  readonly success: true;\n  readonly value: T;\n}\n\nexport interface Failure<E> {\n  readonly success: false;\n  readonly error: E;\n}\n\nexport type Result<T, E = Error> = Success<T> | Failure<E>;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Constructor functions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function success<T>(value: T): Success<T> {\n  return { success: true, value };\n}\n\nexport function failure<E>(error: E): Failure<E> {\n  return { success: false, error };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Type guards\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function isSuccess<T, E>(result: Result<T, E>): result is Success<T> {\n  return result.success === true;\n}\n\nexport function isFailure<T, E>(result: Result<T, E>): result is Failure<E> {\n  return result.success === false;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Utility functions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function tryCatch<T>(fn: () => T): Result<T, Error> {\n  try {\n    return success(fn());\n  } catch (error) {\n    return failure(error instanceof Error ? error : new Error(String(error)));\n  }\n}\n\nexport async function tryCatchAsync<T>(\n  fn: () => Promise<T>,\n): Promise<Result<T, Error>> {\n  try {\n    return success(await fn());\n  } catch (error) {\n    return failure(error instanceof Error ? error : new Error(String(error)));\n  }\n}\n\nexport function unwrap<T, E>(result: Result<T, E>): T {\n  if (isSuccess(result)) return result.value;\n  // Always throw an Error instance so V8 attaches a stack trace and\n  // `instanceof Error` checks in catch blocks work as expected.\n  if (result.error instanceof Error) throw result.error;\n  throw new Error(\n    typeof result.error === \"object\" && result.error !== null\n      ? JSON.stringify(result.error)\n      : String(result.error),\n  );\n}\n\nexport function unwrapOr<T, E>(result: Result<T, E>, defaultValue: T): T {\n  if (isSuccess(result)) return result.value;\n  return defaultValue;\n}\n\nexport function mapResult<T, U, E>(\n  result: Result<T, E>,\n  fn: (value: T) => U,\n): Result<U, E> {\n  if (isSuccess(result)) return success(fn(result.value));\n  return result;\n}\n\nexport function mapError<T, E, F>(\n  result: Result<T, E>,\n  fn: (error: E) => F,\n): Result<T, F> {\n  if (isFailure(result)) return failure(fn(result.error));\n  return result;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Error narrowing utilities\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport function isError(value: unknown): value is Error {\n  return value instanceof Error;\n}\n\nexport function isNodeError(value: unknown): value is NodeJS.ErrnoException {\n  return value instanceof Error && \"code\" in value;\n}\n\nexport function getErrorMessage(error: unknown): string {\n  if (error instanceof Error) return error.message;\n  if (typeof error === \"string\") return error;\n  return String(error);\n}\n","/**\n * Fluid API client for authentication operations\n */\n\nimport type { CliError } from \"../utils/errors.js\";\nimport { type Result, success, failure } from \"../utils/result.js\";\n\nconst API_TIMEOUT_MS = 10_000;\n\nexport function getFluidApiBase(): string {\n  return process.env[\"FLUID_API_BASE\"] ?? \"https://api.fluid.app\";\n}\n\nfunction makeSignal(): { signal: AbortSignal; cleanup: () => void } {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), API_TIMEOUT_MS);\n  return { signal: controller.signal, cleanup: () => clearTimeout(timer) };\n}\n\nexport interface FluidApiError extends CliError {\n  readonly code: string;\n  readonly message: string;\n  readonly details?: string;\n}\n\nexport const FLUID_API_ERROR = {\n  INVALID_TOKEN: {\n    code: \"INVALID_TOKEN\",\n    message: \"Token is invalid or expired\",\n  },\n  API_UNREACHABLE: {\n    code: \"API_UNREACHABLE\",\n    message: \"Could not reach the Fluid API\",\n  },\n  UUID_NOT_FOUND: {\n    code: \"UUID_NOT_FOUND\",\n    message: \"Verification session not found\",\n  },\n  CODE_EXPIRED: {\n    code: \"CODE_EXPIRED\",\n    message: \"Verification code has expired — please request a new one\",\n  },\n  INVALID_CODE: {\n    code: \"INVALID_CODE\",\n    message: \"Invalid verification code\",\n  },\n  COMPANY_NOT_FOUND: {\n    code: \"COMPANY_NOT_FOUND\",\n    message: \"Company not found\",\n  },\n  SWITCH_FAILED: {\n    code: \"SWITCH_FAILED\",\n    message: \"Failed to switch company\",\n  },\n} as const;\n\nfunction createApiError(\n  template: { readonly code: string; readonly message: string },\n  details?: string,\n): FluidApiError {\n  return { code: template.code, message: template.message, details };\n}\n\nexport interface CompanyInfo {\n  readonly name: string;\n}\n\nexport interface UserCompany {\n  readonly id: number;\n  readonly name: string;\n}\n\nexport interface SwitchCompanyResult {\n  readonly companyId: number;\n  readonly companyName: string;\n  readonly fluidShop: string;\n  readonly jwt: string;\n}\n\nexport interface MfaResponse {\n  readonly uuid: string;\n  readonly expiresAt: string;\n}\n\nexport interface CompanyChoice {\n  readonly id: number;\n  readonly name: string;\n  readonly shopName: string;\n  readonly jwt: string;\n}\n\nexport interface ConfirmMfaResponse {\n  readonly authType: string;\n  readonly companies: CompanyChoice[];\n}\n\n/**\n * Validate a token against the Fluid API and return company info\n */\nexport async function validateToken(\n  token: string,\n): Promise<Result<CompanyInfo, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  try {\n    const response = await fetch(\n      `${getFluidApiBase()}/api/company/v1/companies/me`,\n      {\n        method: \"GET\",\n        headers: {\n          Authorization: `Bearer ${token}`,\n        },\n        signal,\n      },\n    );\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        data?: { company?: { name?: string } };\n      };\n      const name = data?.data?.company?.name;\n      if (!name) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.API_UNREACHABLE,\n            \"Unexpected response shape from /companies/me\",\n          ),\n        );\n      }\n      return success({ name });\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.INVALID_TOKEN,\n          `HTTP ${response.status}: Check that your token is valid and non-expired.`,\n        ),\n      );\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Send a multi-factor authentication code to the given email address.\n * Always returns 201 from the API (anti-enumeration).\n */\nexport async function sendMfa(\n  email: string,\n): Promise<Result<MfaResponse, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  try {\n    const response = await fetch(\n      `${getFluidApiBase()}/api/authentication/send_mfa`,\n      {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ email }),\n        signal,\n      },\n    );\n\n    if (response.status === 201) {\n      const data = (await response.json()) as {\n        multi_factor_authentication?: {\n          uuid?: string;\n          verification_code_expires_at?: string;\n        };\n      };\n      const uuid = data.multi_factor_authentication?.uuid;\n      const expiresAt =\n        data.multi_factor_authentication?.verification_code_expires_at;\n      if (!uuid || !expiresAt) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.API_UNREACHABLE,\n            \"Unexpected response shape from /send_mfa\",\n          ),\n        );\n      }\n      return success({ uuid, expiresAt });\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Confirm a multi-factor authentication code and retrieve company JWTs.\n */\nexport async function confirmMfa(\n  uuid: string,\n  code: string,\n): Promise<Result<ConfirmMfaResponse, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  try {\n    const response = await fetch(\n      `${getFluidApiBase()}/api/authentication/confirm_mfa`,\n      {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          uuid,\n          multi_factor_authentication: { verification_code: code },\n        }),\n        signal,\n      },\n    );\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        authenticated?: boolean;\n        auth_type?: string;\n        companies?:\n          | {\n              id: number;\n              name: string;\n              shop_name: string;\n              jwt: string;\n            }[]\n          | null;\n      };\n      if (!data.authenticated) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.INVALID_CODE,\n            \"Authentication was not confirmed by the server\",\n          ),\n        );\n      }\n      const companies = Array.isArray(data.companies) ? data.companies : [];\n      return success({\n        authType: data.auth_type ?? \"\",\n        companies: companies.map((c) => ({\n          id: c.id,\n          name: c.name,\n          shopName: c.shop_name,\n          jwt: c.jwt,\n        })),\n      });\n    }\n\n    if (response.status === 404) {\n      return failure(createApiError(FLUID_API_ERROR.UUID_NOT_FOUND));\n    }\n    if (response.status === 410) {\n      return failure(createApiError(FLUID_API_ERROR.CODE_EXPIRED));\n    }\n    if (response.status === 422) {\n      return failure(createApiError(FLUID_API_ERROR.INVALID_CODE));\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Fetch all companies the authenticated user has access to.\n */\nexport async function fetchUserCompanies(\n  token: string,\n  baseUrl?: string,\n): Promise<Result<UserCompany[], FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  const apiBase = baseUrl ?? getFluidApiBase();\n  try {\n    const response = await fetch(`${apiBase}/api/me`, {\n      method: \"GET\",\n      headers: { Authorization: `Bearer ${token}` },\n      signal,\n    });\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        companies?: { id: number; name: string }[];\n      };\n      const companies = Array.isArray(data.companies) ? data.companies : [];\n      return success(companies.map((c) => ({ id: c.id, name: c.name })));\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.INVALID_TOKEN,\n          `HTTP ${response.status}`,\n        ),\n      );\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.API_UNREACHABLE,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n\n/**\n * Switch to a different company and receive a new JWT.\n *\n * Response shape (from @fluid-app/auth SwitchCompanyResponse):\n *   { company: { id, name, fluid_shop, jwt }, meta: { request_id, timestamp } }\n */\nexport async function switchCompany(\n  token: string,\n  companyId: number,\n  baseUrl?: string,\n): Promise<Result<SwitchCompanyResult, FluidApiError>> {\n  const { signal, cleanup } = makeSignal();\n  const apiBase = baseUrl ?? getFluidApiBase();\n  try {\n    const response = await fetch(\n      `${apiBase}/api/authentication/company/${companyId}/switch`,\n      {\n        method: \"PUT\",\n        headers: {\n          Authorization: `Bearer ${token}`,\n          \"Content-Type\": \"application/json\",\n        },\n        signal,\n      },\n    );\n\n    if (response.ok) {\n      const data = (await response.json()) as {\n        company?: {\n          id: number;\n          name: string;\n          fluid_shop: string;\n          jwt: string;\n        };\n      };\n      const company = data.company;\n      if (!company?.jwt) {\n        return failure(\n          createApiError(\n            FLUID_API_ERROR.SWITCH_FAILED,\n            \"Unexpected response shape from /switch\",\n          ),\n        );\n      }\n      return success({\n        companyId: company.id,\n        companyName: company.name,\n        fluidShop: company.fluid_shop,\n        jwt: company.jwt,\n      });\n    }\n\n    if (response.status === 404) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.COMPANY_NOT_FOUND,\n          `Company ${companyId} not found`,\n        ),\n      );\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      return failure(\n        createApiError(\n          FLUID_API_ERROR.INVALID_TOKEN,\n          `HTTP ${response.status}`,\n        ),\n      );\n    }\n\n    const body = await response.text();\n    return failure(\n      createApiError(\n        FLUID_API_ERROR.SWITCH_FAILED,\n        `HTTP ${response.status}: ${body}`,\n      ),\n    );\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return failure(createApiError(FLUID_API_ERROR.API_UNREACHABLE, message));\n  } finally {\n    cleanup();\n  }\n}\n","/**\n * Configuration types for the Fluid CLI\n */\n\nexport interface FluidProfile {\n  readonly name: string;\n  readonly token: string;\n  readonly companyName: string;\n  readonly storedAt: string; // ISO-8601\n  readonly baseUrl?: string;\n  /** Stable storefront identity written by Mist and newer auth endpoints. */\n  readonly fluidShop?: string;\n}\n\nexport interface FluidConfig {\n  activeProfile: string | null;\n  profiles: Record<string, FluidProfile>;\n  plugins: Record<string, unknown>;\n  /**\n   * Allow-list of plugin package names.\n   *\n   * - `null` (default) — auto-discover and load all `@fluid-app/fluid-cli-*`\n   *   and `*-cli-commands` packages found in `node_modules` or the pnpm\n   *   workspace. Only `@fluid-app`-scoped packages matching the naming\n   *   convention are eligible; no third-party code is loaded.\n   * - `string[]` — only load plugins whose names appear in the array.\n   *   Set to `[]` to disable all plugins.\n   */\n  enabledPlugins: string[] | null;\n  /** Historical local workspace slugs, keyed by stable storefront slug.\n   * Optional because older CLI versions and hand-written test configs do not\n   * know about Mist's local workspace compatibility metadata. */\n  workspaceAliasesByFluidShop?: Record<string, string[]>;\n}\n\nexport function createDefaultConfig(): FluidConfig {\n  return {\n    activeProfile: null,\n    profiles: {},\n    plugins: {},\n    enabledPlugins: null, // auto-discover all plugins\n  };\n}\n","/**\n * XDG-compliant config directory resolution\n *\n * Priority:\n * 1. FLUID_CONFIG_DIR env var (explicit override)\n * 2. ~/.fluid/ on macOS (convention for CLI tools)\n * 3. %APPDATA%/fluid/ on Windows\n * 4. $XDG_CONFIG_HOME/fluid/ on Linux (XDG spec)\n * 5. ~/.config/fluid/ fallback on Linux\n */\n\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nexport function getConfigDir(): string {\n  const envOverride = process.env[\"FLUID_CONFIG_DIR\"];\n  if (envOverride) return envOverride;\n\n  if (process.platform === \"darwin\") {\n    return join(homedir(), \".fluid\");\n  }\n\n  if (process.platform === \"win32\") {\n    const appData =\n      process.env[\"APPDATA\"] ?? join(homedir(), \"AppData\", \"Roaming\");\n    return join(appData, \"fluid\");\n  }\n\n  const xdgConfig = process.env[\"XDG_CONFIG_HOME\"];\n  if (xdgConfig) return join(xdgConfig, \"fluid\");\n\n  return join(homedir(), \".config\", \"fluid\");\n}\n\nexport function getConfigFilePath(): string {\n  return join(getConfigDir(), \"config.json\");\n}\n","/**\n * Read/write config.json with atomic writes and safe defaults\n */\n\nimport {\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  renameSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { randomBytes } from \"node:crypto\";\nimport { type FluidConfig, createDefaultConfig } from \"./types.js\";\nimport { getConfigFilePath } from \"./paths.js\";\n\nexport function readConfig(): FluidConfig {\n  const configPath = getConfigFilePath();\n\n  if (!existsSync(configPath)) {\n    return createDefaultConfig();\n  }\n\n  const raw = readFileSync(configPath, \"utf-8\");\n\n  let parsed: Partial<FluidConfig>;\n  try {\n    parsed = JSON.parse(raw) as Partial<FluidConfig>;\n  } catch {\n    // Corrupted config — fall back to defaults rather than crashing\n    return createDefaultConfig();\n  }\n\n  // Merge with defaults to handle schema evolution\n  return withDurableWorkspaceAliases({\n    ...createDefaultConfig(),\n    ...parsed,\n  });\n}\n\nexport function writeConfig(config: FluidConfig): void {\n  const configPath = getConfigFilePath();\n  const dir = dirname(configPath);\n\n  // 0o700: owner-only access so other users cannot enumerate the config dir\n  mkdirSync(dir, { recursive: true, mode: 0o700 });\n\n  // Atomic write: write to a temp file in the same directory, then rename.\n  // rename() is a POSIX atomic operation — a crash mid-write will never leave\n  // a partially-written config.json. The temp file must be on the same\n  // filesystem as the destination for rename() to succeed.\n  const suffix = randomBytes(6).toString(\"hex\");\n  const tmpPath = join(dir, `.fluid-config-${suffix}.tmp`);\n\n  try {\n    writeFileSync(\n      tmpPath,\n      JSON.stringify(withDurableWorkspaceAliases(config), null, 2) + \"\\n\",\n      {\n        encoding: \"utf-8\",\n        // NOTE: mode: 0o600 restricts to owner read/write on POSIX (macOS, Linux).\n        // On Windows, Node.js ignores this option — NTFS permissions are not\n        // set via the mode parameter. Windows file protection would require\n        // icacls or Windows security descriptor APIs.\n        mode: 0o600,\n      },\n    );\n    renameSync(tmpPath, configPath);\n  } catch (err) {\n    // Clean up the temp file if something went wrong before the rename\n    try {\n      unlinkSync(tmpPath);\n    } catch {\n      // ignore cleanup errors — the temp file may not exist yet\n    }\n    throw err;\n  }\n}\n\nfunction workspaceSlug(value: string): string {\n  return value\n    .toLowerCase()\n    .trim()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-|-$/g, \"\");\n}\n\nfunction storefrontSlug(value: string): string {\n  const withoutScheme = value.trim().replace(/^[a-z][a-z0-9+.-]*:\\/\\//i, \"\");\n  const host = withoutScheme.split(/[/?#]/, 1)[0]?.replace(/:\\d+$/, \"\") ?? \"\";\n  return workspaceSlug(host.replace(/\\.fluid\\.app$/i, \"\"));\n}\n\n/** Preserve rename history even when `fluid logout` clears the profiles that\n * originally carried it. Derivation on read migrates existing config files;\n * normalization on every write makes the migration durable before profiles\n * are removed. */\nfunction withDurableWorkspaceAliases(config: FluidConfig): FluidConfig {\n  const aliases: Record<string, string[]> = {};\n  const add = (storefront: string, candidates: readonly string[]): void => {\n    const key = storefrontSlug(storefront);\n    if (!key) return;\n    const values = new Set(aliases[key] ?? []);\n    for (const candidate of candidates) {\n      const slug = workspaceSlug(candidate);\n      if (slug) values.add(slug);\n    }\n    if (values.size > 0) aliases[key] = [...values];\n  };\n\n  for (const [storefront, candidates] of Object.entries(\n    config.workspaceAliasesByFluidShop ?? {},\n  )) {\n    if (!Array.isArray(candidates)) continue;\n    add(\n      storefront,\n      candidates.filter(\n        (candidate): candidate is string => typeof candidate === \"string\",\n      ),\n    );\n  }\n  for (const profile of Object.values(config.profiles)) {\n    if (profile.fluidShop) {\n      add(profile.fluidShop, [profile.name, profile.companyName]);\n    }\n  }\n\n  return Object.keys(aliases).length > 0 ||\n    config.workspaceAliasesByFluidShop !== undefined\n    ? { ...config, workspaceAliasesByFluidShop: aliases }\n    : config;\n}\n\nexport function updateConfig(\n  updater: (config: FluidConfig) => FluidConfig,\n): FluidConfig {\n  const config = readConfig();\n  const updated = updater(config);\n  writeConfig(updated);\n  return updated;\n}\n","/**\n * Project-level config (.fluidrc) reader.\n *\n * Walks upward from a starting directory to find a `.fluidrc` file.\n * The file is JSON with a `profile` field that maps to a profile name\n * in `~/.fluid/config.json`.\n *\n * This allows portal repos to pin themselves to a specific CLI profile\n * so that `fluid portal pull` / `push` always use the correct company\n * credentials, regardless of which profile is globally active.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport interface ProjectRcConfig {\n  readonly profile: string;\n}\n\nconst RC_FILENAME = \".fluidrc\";\n\n/** Cached result keyed by the starting directory. */\nlet cachedResult: { dir: string; config: ProjectRcConfig | null } | undefined;\n\n/**\n * Walk upward from `startDir` looking for a `.fluidrc` file.\n *\n * Returns the parsed config when found, or `null` if no valid `.fluidrc`\n * exists in any ancestor directory.\n *\n * The result is cached per starting directory for the lifetime of the\n * process — CLI commands are short-lived so stale-cache is not a concern.\n */\nexport function findProjectConfig(startDir: string): ProjectRcConfig | null {\n  if (cachedResult && cachedResult.dir === startDir) {\n    return cachedResult.config;\n  }\n\n  let dir = startDir;\n  while (true) {\n    const rcPath = join(dir, RC_FILENAME);\n    if (existsSync(rcPath)) {\n      try {\n        const raw = readFileSync(rcPath, \"utf-8\");\n        const parsed = JSON.parse(raw) as Partial<ProjectRcConfig>;\n        if (typeof parsed.profile === \"string\" && parsed.profile.length > 0) {\n          const config: ProjectRcConfig = { profile: parsed.profile };\n          cachedResult = { dir: startDir, config };\n          return config;\n        }\n      } catch {\n        // Malformed .fluidrc — treat as absent\n      }\n\n      // Found a .fluidrc but it was invalid or empty — stop searching\n      // upward to avoid confusing inheritance from a parent directory.\n      cachedResult = { dir: startDir, config: null };\n      return null;\n    }\n\n    const parent = dirname(dir);\n    if (parent === dir) break; // reached filesystem root\n    dir = parent;\n  }\n\n  cachedResult = { dir: startDir, config: null };\n  return null;\n}\n\n/** Reset the cache. Exposed for tests only. */\nexport function _resetProjectConfigCache(): void {\n  cachedResult = undefined;\n}\n","/**\n * Token storage and retrieval from config\n */\n\nimport { readConfig } from \"../config/config.js\";\nimport { findProjectConfig } from \"../config/project-config.js\";\nimport type { FluidProfile } from \"../config/types.js\";\n\n/**\n * Get the auth token for a named profile, or the active profile when omitted.\n *\n * Resolution order (when `profileName` is omitted — mirrors `resolveToken`\n * in domain/context.ts):\n *   1. `FLUID_TOKEN` / `FLUID_API_TOKEN` environment variables\n *   2. Project-level `.fluidrc` profile (walks upward from cwd)\n *   3. Global active profile from `~/.fluid/config.json`\n *\n * When `profileName` is provided explicitly (e.g. via `--profile` flag),\n * it takes precedence over the environment variables, `.fluidrc`, and the\n * active profile.\n */\nexport function getAuthToken(profileName?: string): string | null {\n  const config = readConfig();\n\n  // Explicit profile name takes precedence\n  if (profileName) {\n    const profile = config.profiles[profileName];\n    return profile?.token ?? null;\n  }\n\n  // Environment variable override (before any stored profile)\n  const envToken = process.env[\"FLUID_TOKEN\"] ?? process.env[\"FLUID_API_TOKEN\"];\n  if (envToken) return envToken;\n\n  // Project-level .fluidrc profile\n  const projectConfig = findProjectConfig(process.cwd());\n  if (projectConfig?.profile) {\n    const profile = config.profiles[projectConfig.profile];\n    if (profile) return profile.token;\n  }\n\n  // Fall back to global active profile\n  if (!config.activeProfile) return null;\n  const profile = config.profiles[config.activeProfile];\n  return profile?.token ?? null;\n}\n\n/**\n * Get the active profile, or null if not logged in\n */\nexport function getActiveProfile(): FluidProfile | null {\n  const config = readConfig();\n  if (!config.activeProfile) return null;\n\n  return config.profiles[config.activeProfile] ?? null;\n}\n\n/**\n * List all stored profile names\n */\nexport function listProfileNames(): string[] {\n  const config = readConfig();\n  return Object.keys(config.profiles);\n}\n"],"mappings":";;;;;AA2BA,SAAgB,QAAW,OAAsB;AAC/C,QAAO;EAAE,SAAS;EAAM;EAAO;;AAGjC,SAAgB,QAAW,OAAsB;AAC/C,QAAO;EAAE,SAAS;EAAO;EAAO;;AAOlC,SAAgB,UAAgB,QAA4C;AAC1E,QAAO,OAAO,YAAY;;AAG5B,SAAgB,UAAgB,QAA4C;AAC1E,QAAO,OAAO,YAAY;;AAO5B,SAAgB,SAAY,IAA+B;AACzD,KAAI;AACF,SAAO,QAAQ,IAAI,CAAC;UACb,OAAO;AACd,SAAO,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;;;AAI7E,eAAsB,cACpB,IAC2B;AAC3B,KAAI;AACF,SAAO,QAAQ,MAAM,IAAI,CAAC;UACnB,OAAO;AACd,SAAO,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;;;AAI7E,SAAgB,OAAa,QAAyB;AACpD,KAAI,UAAU,OAAO,CAAE,QAAO,OAAO;AAGrC,KAAI,OAAO,iBAAiB,MAAO,OAAM,OAAO;AAChD,OAAM,IAAI,MACR,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,OACjD,KAAK,UAAU,OAAO,MAAM,GAC5B,OAAO,OAAO,MAAM,CACzB;;AAGH,SAAgB,SAAe,QAAsB,cAAoB;AACvE,KAAI,UAAU,OAAO,CAAE,QAAO,OAAO;AACrC,QAAO;;AAGT,SAAgB,UACd,QACA,IACc;AACd,KAAI,UAAU,OAAO,CAAE,QAAO,QAAQ,GAAG,OAAO,MAAM,CAAC;AACvD,QAAO;;AAGT,SAAgB,SACd,QACA,IACc;AACd,KAAI,UAAU,OAAO,CAAE,QAAO,QAAQ,GAAG,OAAO,MAAM,CAAC;AACvD,QAAO;;AAOT,SAAgB,QAAQ,OAAgC;AACtD,QAAO,iBAAiB;;AAG1B,SAAgB,YAAY,OAAgD;AAC1E,QAAO,iBAAiB,SAAS,UAAU;;AAG7C,SAAgB,gBAAgB,OAAwB;AACtD,KAAI,iBAAiB,MAAO,QAAO,MAAM;AACzC,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAO,OAAO,MAAM;;;;AC9GtB,MAAM,iBAAiB;AAEvB,SAAgB,kBAA0B;AACxC,QAAO,QAAQ,IAAI,qBAAqB;;AAG1C,SAAS,aAA2D;CAClE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,eAAe;AAClE,QAAO;EAAE,QAAQ,WAAW;EAAQ,eAAe,aAAa,MAAM;EAAE;;AAS1E,MAAa,kBAAkB;CAC7B,eAAe;EACb,MAAM;EACN,SAAS;EACV;CACD,iBAAiB;EACf,MAAM;EACN,SAAS;EACV;CACD,gBAAgB;EACd,MAAM;EACN,SAAS;EACV;CACD,cAAc;EACZ,MAAM;EACN,SAAS;EACV;CACD,cAAc;EACZ,MAAM;EACN,SAAS;EACV;CACD,mBAAmB;EACjB,MAAM;EACN,SAAS;EACV;CACD,eAAe;EACb,MAAM;EACN,SAAS;EACV;CACF;AAED,SAAS,eACP,UACA,SACe;AACf,QAAO;EAAE,MAAM,SAAS;EAAM,SAAS,SAAS;EAAS;EAAS;;;;;AAuCpE,eAAsB,cACpB,OAC6C;CAC7C,MAAM,EAAE,QAAQ,YAAY,YAAY;AACxC,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,iBAAiB,CAAC,+BACrB;GACE,QAAQ;GACR,SAAS,EACP,eAAe,UAAU,SAC1B;GACD;GACD,CACF;AAED,MAAI,SAAS,IAAI;GAIf,MAAM,QAHQ,MAAM,SAAS,MAAM,GAGhB,MAAM,SAAS;AAClC,OAAI,CAAC,KACH,QAAO,QACL,eACE,gBAAgB,iBAChB,+CACD,CACF;AAEH,UAAO,QAAQ,EAAE,MAAM,CAAC;;AAG1B,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IACjD,QAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,OAAO,mDACzB,CACF;EAGH,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;;AAQb,eAAsB,QACpB,OAC6C;CAC7C,MAAM,EAAE,QAAQ,YAAY,YAAY;AACxC,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,iBAAiB,CAAC,+BACrB;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAC/B;GACD,CACF;AAED,MAAI,SAAS,WAAW,KAAK;GAC3B,MAAM,OAAQ,MAAM,SAAS,MAAM;GAMnC,MAAM,OAAO,KAAK,6BAA6B;GAC/C,MAAM,YACJ,KAAK,6BAA6B;AACpC,OAAI,CAAC,QAAQ,CAAC,UACZ,QAAO,QACL,eACE,gBAAgB,iBAChB,2CACD,CACF;AAEH,UAAO,QAAQ;IAAE;IAAM;IAAW,CAAC;;EAGrC,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;AAOb,eAAsB,WACpB,MACA,MACoD;CACpD,MAAM,EAAE,QAAQ,YAAY,YAAY;AACxC,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,iBAAiB,CAAC,kCACrB;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IACnB;IACA,6BAA6B,EAAE,mBAAmB,MAAM;IACzD,CAAC;GACF;GACD,CACF;AAED,MAAI,SAAS,IAAI;GACf,MAAM,OAAQ,MAAM,SAAS,MAAM;AAYnC,OAAI,CAAC,KAAK,cACR,QAAO,QACL,eACE,gBAAgB,cAChB,iDACD,CACF;GAEH,MAAM,YAAY,MAAM,QAAQ,KAAK,UAAU,GAAG,KAAK,YAAY,EAAE;AACrE,UAAO,QAAQ;IACb,UAAU,KAAK,aAAa;IAC5B,WAAW,UAAU,KAAK,OAAO;KAC/B,IAAI,EAAE;KACN,MAAM,EAAE;KACR,UAAU,EAAE;KACZ,KAAK,EAAE;KACR,EAAE;IACJ,CAAC;;AAGJ,MAAI,SAAS,WAAW,IACtB,QAAO,QAAQ,eAAe,gBAAgB,eAAe,CAAC;AAEhE,MAAI,SAAS,WAAW,IACtB,QAAO,QAAQ,eAAe,gBAAgB,aAAa,CAAC;AAE9D,MAAI,SAAS,WAAW,IACtB,QAAO,QAAQ,eAAe,gBAAgB,aAAa,CAAC;EAG9D,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;AAOb,eAAsB,mBACpB,OACA,SAC+C;CAC/C,MAAM,EAAE,QAAQ,YAAY,YAAY;CACxC,MAAM,UAAU,WAAW,iBAAiB;AAC5C,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,UAAU;GAChD,QAAQ;GACR,SAAS,EAAE,eAAe,UAAU,SAAS;GAC7C;GACD,CAAC;AAEF,MAAI,SAAS,IAAI;GACf,MAAM,OAAQ,MAAM,SAAS,MAAM;AAInC,UAAO,SADW,MAAM,QAAQ,KAAK,UAAU,GAAG,KAAK,YAAY,EAAE,EAC5C,KAAK,OAAO;IAAE,IAAI,EAAE;IAAI,MAAM,EAAE;IAAM,EAAE,CAAC;;AAGpE,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IACjD,QAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,SAClB,CACF;EAGH,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,iBAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;;;;;AAUb,eAAsB,cACpB,OACA,WACA,SACqD;CACrD,MAAM,EAAE,QAAQ,YAAY,YAAY;CACxC,MAAM,UAAU,WAAW,iBAAiB;AAC5C,KAAI;EACF,MAAM,WAAW,MAAM,MACrB,GAAG,QAAQ,8BAA8B,UAAU,UACnD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;IACjB;GACD;GACD,CACF;AAED,MAAI,SAAS,IAAI;GASf,MAAM,WARQ,MAAM,SAAS,MAAM,EAQd;AACrB,OAAI,CAAC,SAAS,IACZ,QAAO,QACL,eACE,gBAAgB,eAChB,yCACD,CACF;AAEH,UAAO,QAAQ;IACb,WAAW,QAAQ;IACnB,aAAa,QAAQ;IACrB,WAAW,QAAQ;IACnB,KAAK,QAAQ;IACd,CAAC;;AAGJ,MAAI,SAAS,WAAW,IACtB,QAAO,QACL,eACE,gBAAgB,mBAChB,WAAW,UAAU,YACtB,CACF;AAGH,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IACjD,QAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,SAClB,CACF;EAGH,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAO,QACL,eACE,gBAAgB,eAChB,QAAQ,SAAS,OAAO,IAAI,OAC7B,CACF;UACM,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,QAAQ,eAAe,gBAAgB,iBAAiB,QAAQ,CAAC;WAChE;AACR,WAAS;;;;;AChYb,SAAgB,sBAAmC;AACjD,QAAO;EACL,eAAe;EACf,UAAU,EAAE;EACZ,SAAS,EAAE;EACX,gBAAgB;EACjB;;;;;;;;;;;;;;AC3BH,SAAgB,eAAuB;CACrC,MAAM,cAAc,QAAQ,IAAI;AAChC,KAAI,YAAa,QAAO;AAExB,KAAI,QAAQ,aAAa,SACvB,QAAO,KAAK,SAAS,EAAE,SAAS;AAGlC,KAAI,QAAQ,aAAa,QAGvB,QAAO,KADL,QAAQ,IAAI,cAAc,KAAK,SAAS,EAAE,WAAW,UAAU,EAC5C,QAAQ;CAG/B,MAAM,YAAY,QAAQ,IAAI;AAC9B,KAAI,UAAW,QAAO,KAAK,WAAW,QAAQ;AAE9C,QAAO,KAAK,SAAS,EAAE,WAAW,QAAQ;;AAG5C,SAAgB,oBAA4B;AAC1C,QAAO,KAAK,cAAc,EAAE,cAAc;;;;;;;AClB5C,SAAgB,aAA0B;CACxC,MAAM,aAAa,mBAAmB;AAEtC,KAAI,CAAC,WAAW,WAAW,CACzB,QAAO,qBAAqB;CAG9B,MAAM,MAAM,aAAa,YAAY,QAAQ;CAE7C,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,IAAI;SAClB;AAEN,SAAO,qBAAqB;;AAI9B,QAAO,4BAA4B;EACjC,GAAG,qBAAqB;EACxB,GAAG;EACJ,CAAC;;AAGJ,SAAgB,YAAY,QAA2B;CACrD,MAAM,aAAa,mBAAmB;CACtC,MAAM,MAAM,QAAQ,WAAW;AAG/B,WAAU,KAAK;EAAE,WAAW;EAAM,MAAM;EAAO,CAAC;CAOhD,MAAM,UAAU,KAAK,KAAK,iBADX,YAAY,EAAE,CAAC,SAAS,MAAM,CACK,MAAM;AAExD,KAAI;AACF,gBACE,SACA,KAAK,UAAU,4BAA4B,OAAO,EAAE,MAAM,EAAE,GAAG,MAC/D;GACE,UAAU;GAKV,MAAM;GACP,CACF;AACD,aAAW,SAAS,WAAW;UACxB,KAAK;AAEZ,MAAI;AACF,cAAW,QAAQ;UACb;AAGR,QAAM;;;AAIV,SAAS,cAAc,OAAuB;AAC5C,QAAO,MACJ,aAAa,CACb,MAAM,CACN,QAAQ,eAAe,IAAI,CAC3B,QAAQ,UAAU,GAAG;;AAG1B,SAAS,eAAe,OAAuB;AAG7C,QAAO,eAFe,MAAM,MAAM,CAAC,QAAQ,4BAA4B,GAAG,CAC/C,MAAM,SAAS,EAAE,CAAC,IAAI,QAAQ,SAAS,GAAG,IAAI,IAC/C,QAAQ,kBAAkB,GAAG,CAAC;;;;;;AAO1D,SAAS,4BAA4B,QAAkC;CACrE,MAAM,UAAoC,EAAE;CAC5C,MAAM,OAAO,YAAoB,eAAwC;EACvE,MAAM,MAAM,eAAe,WAAW;AACtC,MAAI,CAAC,IAAK;EACV,MAAM,SAAS,IAAI,IAAI,QAAQ,QAAQ,EAAE,CAAC;AAC1C,OAAK,MAAM,aAAa,YAAY;GAClC,MAAM,OAAO,cAAc,UAAU;AACrC,OAAI,KAAM,QAAO,IAAI,KAAK;;AAE5B,MAAI,OAAO,OAAO,EAAG,SAAQ,OAAO,CAAC,GAAG,OAAO;;AAGjD,MAAK,MAAM,CAAC,YAAY,eAAe,OAAO,QAC5C,OAAO,+BAA+B,EAAE,CACzC,EAAE;AACD,MAAI,CAAC,MAAM,QAAQ,WAAW,CAAE;AAChC,MACE,YACA,WAAW,QACR,cAAmC,OAAO,cAAc,SAC1D,CACF;;AAEH,MAAK,MAAM,WAAW,OAAO,OAAO,OAAO,SAAS,CAClD,KAAI,QAAQ,UACV,KAAI,QAAQ,WAAW,CAAC,QAAQ,MAAM,QAAQ,YAAY,CAAC;AAI/D,QAAO,OAAO,KAAK,QAAQ,CAAC,SAAS,KACnC,OAAO,gCAAgC,KAAA,IACrC;EAAE,GAAG;EAAQ,6BAA6B;EAAS,GACnD;;AAGN,SAAgB,aACd,SACa;CAEb,MAAM,UAAU,QADD,YAAY,CACI;AAC/B,aAAY,QAAQ;AACpB,QAAO;;;;;;;;;;;;;;;ACzHT,MAAM,cAAc;;AAGpB,IAAI;;;;;;;;;;AAWJ,SAAgB,kBAAkB,UAA0C;AAC1E,KAAI,gBAAgB,aAAa,QAAQ,SACvC,QAAO,aAAa;CAGtB,IAAI,MAAM;AACV,QAAO,MAAM;EACX,MAAM,SAAS,KAAK,KAAK,YAAY;AACrC,MAAI,WAAW,OAAO,EAAE;AACtB,OAAI;IACF,MAAM,MAAM,aAAa,QAAQ,QAAQ;IACzC,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAAG;KACnE,MAAM,SAA0B,EAAE,SAAS,OAAO,SAAS;AAC3D,oBAAe;MAAE,KAAK;MAAU;MAAQ;AACxC,YAAO;;WAEH;AAMR,kBAAe;IAAE,KAAK;IAAU,QAAQ;IAAM;AAC9C,UAAO;;EAGT,MAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,WAAW,IAAK;AACpB,QAAM;;AAGR,gBAAe;EAAE,KAAK;EAAU,QAAQ;EAAM;AAC9C,QAAO;;;;;;;;;;;;;;;;;;;;AC7CT,SAAgB,aAAa,aAAqC;CAChE,MAAM,SAAS,YAAY;AAG3B,KAAI,YAEF,QADgB,OAAO,SAAS,cAChB,SAAS;CAI3B,MAAM,WAAW,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAC3D,KAAI,SAAU,QAAO;CAGrB,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK,CAAC;AACtD,KAAI,eAAe,SAAS;EAC1B,MAAM,UAAU,OAAO,SAAS,cAAc;AAC9C,MAAI,QAAS,QAAO,QAAQ;;AAI9B,KAAI,CAAC,OAAO,cAAe,QAAO;AAElC,QADgB,OAAO,SAAS,OAAO,gBACvB,SAAS;;;;;AAM3B,SAAgB,mBAAwC;CACtD,MAAM,SAAS,YAAY;AAC3B,KAAI,CAAC,OAAO,cAAe,QAAO;AAElC,QAAO,OAAO,SAAS,OAAO,kBAAkB;;;;;AAMlD,SAAgB,mBAA6B;CAC3C,MAAM,SAAS,YAAY;AAC3B,QAAO,OAAO,KAAK,OAAO,SAAS"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluid-app/fluid-cli",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "Core CLI for Fluid Commerce — auth, config, and plugin system",
   "bin": {
     "fluid": "./dist/bin/fluid.mjs"

package/template-skills/fluid-widget-authoring/SKILL.md

@@ -1,253 +1,62 @@
 ---
 name: fluid-widget-authoring
-description: Use when creating, modifying, reviewing, validating, building, or publishing Fluid widgets in generated portal projects or standalone widget projects, including manifest metadata, property schemas, runtime CSS, development endpoints, validation, build, and publish workflows.
+description: Use when authoring, validating, building, or publishing company or Droplet Fluid Remote DOM widget packages.
 ---
 
-# Fluid Widget Authoring
-
-Use this skill when creating, modifying, reviewing, validating, building, or publishing Fluid widgets.
-
-This skill supports two generated-project contexts with different sources and
-release commands:
-
-- **Generated portal projects:** use `pnpm widget:create <name>` or `pnpm exec fluid portal widget create <name>` for company-owned portal widgets. The scaffold writes widget source under `src/widgets/<name>/`; `src/widgets.config.ts` is the package source consumed by `fluid portal deploy`.
-- **Generated standalone widget projects:** use the widget CLI for droplet-owned packages. `manifest.ts` is the authoring source, `fluid.widget.config.ts` links ownership, and `fluid widget publish` releases the package.
-
-## Boundaries
-
-- Widget code belongs under `src/widgets/` in both generated portal-widget scaffolds and standalone widget projects.
-- In generated portal projects, keep portal definition work in `portal/` and widget work in `src/widgets/`.
-- In standalone widget projects, do not add a portal app, droplet scaffold, backend, Rails code, or Next.js structure.
-- In standalone widget projects, package metadata lives in root `manifest.ts`, CLI ownership config lives in `fluid.widget.config.ts`, and the Remote DOM worker entry lives in `src/index.ts`.
-- Keep runtime CSS in `styles.css` or files imported by the worker build graph. Standalone projects keep a guarded import in `src/index.ts` so build tooling emits CSS without running style injection inside the worker.
-
-## Manifest checklist
-
-Use `defineWidget()`, `defineWidgetPackage()`, and `startWidgetPackage()` from `@fluid-app/portal-sdk/widgets/worker`.
-
-For each widget:
-
-- `name`: stable URL-safe name. Changing it changes the generated widget type.
-- `component`: host-safe React component.
-- `displayName`, `description`, `icon`, `category`: builder palette metadata.
-- `defaultProps`: JSON-serializable defaults only.
-- `propertySchema`: builder fields, also JSON-serializable.
-- `container`: `block`, `card`, `inline`, or `fullscreen`.
-- `uses`: every typed portal function the widget calls. Pass the function values themselves; do not write capability names by hand.
-- `resizable`: omit/false, true, `horizontal`, `vertical`, `both`, or an object with axis flags and optional min sizes.
-
-For a company package in a generated portal project:
-
-- Keep the package definition in `src/widgets.config.ts`.
-- Omit `packageType` or set it to `company`.
-- Set a stable `packageStableId`; `defineWidgetPackage()` requires it for company packages.
-- Do not add a worker entry. `fluid portal deploy` builds the company package into its Remote DOM worker artifact.
-
-For a standalone droplet package:
-
-- Keep `packageType` as `droplet`.
-- Keep the package definition in root `manifest.ts` and export it through `fluid.widget.config.ts`.
-- Do not author runtime artifact URLs. Dev and build inject `workerEntryUrl` into the canonical package descriptor.
-- Built manifests use package-local artifact paths; the catalog resolves them to absolute public URLs before a host loads the descriptor.
-- Droplet package IDs remain fully qualified as `droplet.<linked-droplet-key>` in dev, build, and catalog output.
-- Keep `version` as SemVer without build metadata.
-- Keep at least one widget in `widgets`.
-- Do not manually set `packageStableId` in this generated droplet template; the CLI injects the linked droplet key.
-
-## Property schema quick reference
-
-Top-level keys:
-
-- `tabsConfig`: optional tabs with `id` and `label`.
-- `fields`: editable controls.
-- `dataSourceTargetProps`: prop keys that data sources may populate.
-- `itemConfigSchema`: optional per-item fields for custom data-source item settings.
-- Avoid `validate` in standalone published metadata because metadata must be serializable.
-
-Base field keys:
-
-- `key`, `label`, and `type` are required.
-- Optional: `description`, `defaultValue`, `tab`, `group`, `advanced`, `requiresKeyValue`.
-- `advanced: true` is for lower-frequency theme/style overrides.
-- `requiresKeyValue` can be one condition or an array of AND conditions.
-
-Supported field types:
-
-- `text`: single-line string; supports `placeholder`, `maxLength`, `tokenSuggestions`.
-- `textarea`: multi-line string; supports `placeholder`, `rows`, `maxLength`.
-- `number`: numeric input; supports `min`, `max`, `step`.
-- `boolean`: toggle.
-- `select`: dropdown; requires `options` with `label` and `value`.
-- `color`: basic color value.
-- `range`: slider; requires `min`, `max`; optional `step`.
-- `dataSource`: data-source configuration.
-- `resource`: resource picker; optional `allowedTypes`.
-- `image`: media picker; optional `accept` as `image`, `video`, or `any`.
-- `alignment`: alignment picker; requires vertical/horizontal enabled flags.
-- `slider`: numeric slider; supports `min`, `max`, `step`, `unit`.
-- `colorPicker`: color picker; supports `swatches`.
-- `sectionHeader`: visual header; supports `subtitle`.
-- `separator`: visual divider.
-- `buttonGroup`: segmented control; requires options with `value` and optional labels/icons.
-- `colorSelect`: semantic theme color selector; supports `excludeColors`.
-- `sectionLayoutSelect`: visual layout selector.
-- `background`: combined background resource/color control.
-- `contentPosition`: 3-by-3 position picker.
-- `textSizeSelect`: theme text size selector.
-- `cssUnit`: number plus unit; supports unit allowlist/default and per-unit min/max/step maps.
-- `fontPicker`: Google font picker; supports `placeholder`.
-- `stringArray`: editable list of strings; supports `placeholder`.
-- `borderRadius`: four-corner radius editor; requires `keys.topLeft`, `keys.topRight`, `keys.bottomLeft`, `keys.bottomRight`.
-- `screenPicker`: portal screen picker; supports `includeSystemItems`.
-
-## Data-source-ready props
-
-- Add bindable prop names to `dataSourceTargetProps`.
-- Make components resilient to missing, empty, or partial prop data.
-- Render empty states for empty arrays and invalid items.
-- Keep defaults in `defaultProps` so manual use works before a data source is connected.
-- Use `itemConfigSchema` for per-selected-item settings.
-- Do not fetch directly when props/data sources can provide data.
-
-## Component quality and accessibility
-
-- Use typed props and defaults.
-- Guard unsafe array/object access.
-- Keep render deterministic and side-effect free.
-- Clean up effects.
-- Keep bundles small and avoid unnecessary large dependencies.
-- Never put secrets or tenant credentials in widget source, props, or defaults.
-- Use semantic HTML.
-- Ensure keyboard access and visible focus states.
-- Add labels or accessible names to controls.
-- Add alt text for meaningful media.
-- Keep heading order logical.
-- Respect reduced motion.
-- Use theme foreground/background pairs for contrast.
-
-## Theme and CSS
-
-Prefer Fluid semantic CSS variables:
-
-- Surface and text: `--background`, `--foreground`, `--card`, `--card-foreground`, `--popover`, `--popover-foreground`.
-- Brand/actions: `--primary`, `--primary-foreground`.
-- Supporting UI: `--secondary`, `--secondary-foreground`, `--muted`, `--muted-foreground`, `--accent`, `--accent-foreground`.
-- Status/chrome: `--destructive`, `--destructive-foreground`, `--border`, `--input`, `--ring`.
-- Charts: `--chart-1` through `--chart-5`.
-- Radius: `--radius`, `--radius-sm`, `--radius-md`, `--radius-lg`, `--radius-xl`.
-- Fonts and sizes may be available as `--font-header`, `--font-body`, and `--font-size-*` theme aliases.
-
-Tailwind equivalents, when Tailwind is available, are semantic utilities such as `bg-background`, `text-foreground`, `bg-card`, `text-card-foreground`, `bg-primary`, `text-primary-foreground`, `border-border`, `ring-ring`, and `rounded-lg`. Plain CSS is the most portable runtime default for this template.
-
-Light/dark mode is controlled by host theme variables and may use `data-theme-mode="dark"`. Prefer tokens so light and dark work automatically. If a mode-specific rule is necessary, scope it to the dark-mode attribute and still use tokens.
-
-CSS must be reachable from `src/index.ts` or another worker module. Prefix selectors with the widget name and do not rely on global body styles for published runtime output.
-
-## Remote DOM runtime
-
-- In a company portal project, `src/widgets.config.ts` is authoring input; the portal CLI generates the worker artifact. Do not add a hand-written worker bootstrap.
-- In a standalone widget project, `src/index.ts` calls `startWidgetPackage(widgetPackage)` exactly once.
-- Generated portals read company packages from the authenticated `/api/app/widget-packages` catalog.
-- Standalone widget dev exposes `/__widget-packages__` as the local canonical descriptor endpoint and `/__runtime-entry__` as the worker entry. It does not bundle a second host or iframe preview application.
-- Do not add global widget registries, classic script loaders, or direct React host previews.
-- Call typed portal functions from `@fluid-app/portal-sdk/widgets/worker` directly and list each function in `defineWidget({ uses: [...] })`.
-
-## Typed portal functions
-
-Built-in worker functions are `getUserAccount`, `getStore`, `getPortalApp`,
-`getPortalProfile`, `getNavigationState`, `buildPortalHref`, `navigateTo`,
-`getFullscreenState`, `requestFullscreen`, and `exitFullscreen`. Getters await
-and return resolved data; they do not return query-status snapshots.
-
-```ts
-import {
-  defineWidget,
-  getUserAccount,
-  navigateTo,
-} from "@fluid-app/portal-sdk/widgets/worker";
-
-async function openProfile(): Promise<void> {
-  const account = await getUserAccount();
-  await navigateTo(account.slug);
-}
-
-export const profileButton = defineWidget({
-  name: "ProfileButton",
-  component: ProfileButton,
-  uses: [getUserAccount, navigateTo],
-});
-```
-
-`defineWidget()` derives and deduplicates descriptor declarations from `uses`.
-The worker and host both enforce those declarations. If a call fails with
-`PortalFunctionError` code `NOT_DECLARED`, add the called function to that
-widget's `uses` array. Do not author a raw `capabilities` array.
-
-The account result is intentionally allowlisted. It may include email, but it
-does not expose phone numbers, addresses, payment data, credentials,
-government or tax identifiers, dates of birth, raw metadata, or unknown future
-fields. There is no `tenantClient` worker API.
-
-For a company-specific operation, create one typed function definition shared
-by worker and host:
-
-```ts
-export const getQuote = definePortalFunction<QuoteResult, QuoteRequest>({
-  capability: "company.example.quotes",
-  version: "1",
-  method: "get",
-});
-```
-
-Call `getQuote(input)` directly in the worker and include `getQuote` in `uses`.
-The portal host installs the implementation with
-`implementPortalFunction(getQuote, handler)` in `remoteWidgets.functions`.
-Built-ins cannot be overridden and duplicate custom implementations are
-rejected.
-
-Custom inputs and outputs are JSON-only: null, booleans, finite numbers,
-strings, arrays, and objects made from those values. Do not pass `undefined`,
-functions, Dates, Maps, Sets, class instances, `NaN`, or `Infinity`. Types
-describe the contract and runtime validation guards the protocol boundary.
-
-## Company portal widget preflight
-
-In a generated portal project, validate and dry-run the company package with:
-
-```bash
-pnpm typecheck
-pnpm build
-pnpm exec fluid portal deploy --dry-run
-```
-
-Publish company-owned runtime artifacts with `fluid portal deploy`. This does
-not push `portal/` JSON or deploy the hosted portal shell.
-
-## Standalone droplet widget preflight
-
-In a generated standalone widget project, run:
-
-```bash
-pnpm typecheck
-pnpm validate
-pnpm build
-```
-
-For standalone publish readiness, also run:
-
-```bash
-pnpm run widget:publish --dry-run
-```
-
-Publish the linked droplet-owned package with `fluid widget publish`. Do not use
-`fluid portal deploy` from a standalone project.
-
-Common failures:
-
-- Missing droplet UUID: run `pnpm run widget:link` or pass a droplet option.
-- No source package found: ensure `fluid.widget.config.ts` exports the package from `manifest.ts`.
-- Invalid package type: keep `packageType: "droplet"`.
-- Invalid name/key/version: use URL-safe identifiers and SemVer without build metadata.
-- Non-serializable metadata: remove functions, undefined, Dates, NaN, Infinity, Maps, Sets, and class instances.
-- Missing published CSS: keep the guarded CSS import reachable from the worker build graph.
-- Local development only succeeds: remove local-only URLs and guard browser APIs.
+# Fluid widget authoring
+
+## Choose the workflow
+
+- Standalone Droplet package: use `fluid widget` commands and the package's
+  `manifest.ts` plus `fluid.widget.config.ts`.
+- Company package inside a portal project: use `fluid portal widget create`,
+  register the package in `src/widgets.config.ts`, and publish it with
+  `fluid portal deploy`.
+
+Do not copy configuration between these package types. Their owners and
+publication endpoints differ.
+
+## Authoring workflow
+
+1. Inspect the project layout and preserve existing work.
+2. Confirm whether the package is company-owned in a portal project or linked
+   to a Droplet in a standalone widget project.
+3. Inspect the current manifest and installed API reference before changing
+   package metadata. Use the installed reference for the exact fields, values,
+   portal functions, and capabilities supported by this SDK version.
+4. Implement the component for missing, partial, and malformed JSON inputs.
+5. Make the widget comply with the portal theme. Use semantic CSS variables and
+   `colorSelect` fields. The legacy `color` field is deprecated. Add custom
+   colors or styling properties only when the theme engine cannot represent an
+   explicit product requirement.
+6. Keep runtime CSS in the project-root `styles.css` and scope it to the
+   widget. Company widget modules must not import CSS; preserve the standalone
+   template's guarded worker import.
+7. Typecheck, validate, build, and inspect the result in a portal host. Use a
+   dry run before an authorized publication.
+
+## Completion checks
+
+- Defaults satisfy the property schema and render a useful initial state.
+- Missing and malformed JSON do not crash rendering.
+- Every portal function and capability in the component appears in `uses`.
+- Keyboard, focus, labels, contrast, and reduced motion work.
+- Light and dark themes work without literal color overrides.
+- Generated artifacts were inspected but not edited or committed.
+- The package version changed if an immutable published package changed.
+
+## References
+
+- [Package authoring](references/package-authoring.md)
+- [Property fields](references/property-fields.md)
+- [Portal functions](references/portal-functions.md)
+- [Runtime, styling, accessibility, and security](references/runtime-and-styling.md)
+- [Development and publication](references/workflows.md)
+- [Installed widget API](../../../node_modules/@fluid-app/portal-sdk/authoring/widget-api/api.md)
+- [Installed widget commands](../../../node_modules/@fluid-app/fluid-cli-widget/authoring/commands.md)
+
+If an LSP is unavailable, use the installed API reference. The installed
+reference and declarations match the SDK version in this project.
+
+Use the project scripts and installed command reference to select checks for
+the current project type.

package/template-skills/fluid-widget-authoring/references/package-authoring.md

@@ -0,0 +1,28 @@
+# Package authoring
+
+Use `@fluid-app/portal-sdk/widgets/worker` for worker APIs. Read the installed
+widget API before changing package or widget metadata. It is the authoritative
+contract for the installed SDK version; this guide does not repeat its fields
+or accepted values.
+
+Keep package identity and widget names stable after publication. Publish a new
+semantic version for each release. Do not author runtime artifact URLs; the
+build and publication flow creates them.
+
+Keep widget registration, defaults, property-schema metadata, and declared
+uses together in the package manifest. Confirm that defaults satisfy the
+schema and that every function or capability used at runtime is declared.
+
+Company widget packages are registered in a portal project's
+`src/widgets.config.ts`. Standalone widget packages are associated with an
+existing Droplet through `fluid.widget.config.ts`. That file resolves and
+exports the package from `manifest.ts`; it does not own package identity,
+version, or widgets.
+
+Use the portal JSON Schema for the exact third-party widget type and node
+shape. Do not copy its pattern into project guidance or infer a type from an
+empty catalog response.
+
+All metadata that crosses the worker boundary must satisfy the installed
+JSON-value types. Use those types instead of maintaining a separate list of
+allowed or prohibited JavaScript values.

package/template-skills/fluid-widget-authoring/references/portal-functions.md

@@ -0,0 +1,23 @@
+# Portal-function guidance
+
+Use the installed widget API for the complete set of portal functions, their
+arguments, return types, errors, and capability declarations. Do not maintain
+a function or capability list in this skill.
+
+Call portal functions directly and put the same function values in the
+widget's `uses` array. Do not write a parallel capability-name list. The worker
+and host enforce those declarations. If a call reports that it was not
+declared, add the called function value to `uses` and rebuild the package.
+
+Treat every returned value as the documented allowlisted view, not as a raw
+tenant API response. Worker code has no tenant API client. Handle unavailable
+or partial data without crashing the widget.
+
+For a company-specific operation, define one typed portal function in a module
+shared by the worker package and portal host. Register its host implementation
+through the portal's remote-widget configuration. Use the installed worker and
+host API references for the exact definition, implementation, and error
+contracts.
+
+Do not override a built-in function or register the same custom function more
+than once. Inputs and outputs must satisfy the installed JSON-value types.

package/template-skills/fluid-widget-authoring/references/property-fields.md

@@ -0,0 +1,36 @@
+# Property fields
+
+Property fields define the builder editor and generated portal JSON Schema.
+Put the prop description on the field that produces that prop. Do not create a
+separate prop-description section.
+
+Every prop-producing field needs a stable `key`, clear `label`, precise
+`description`, and a valid default when the field supports one. Use the
+installed API reference for the current field types, options, and required
+members.
+
+Section headers and separators organize the editor and do not produce props.
+
+## Theme-aware fields
+
+Use `colorSelect` when an author must choose a color. Its value comes from the
+theme engine's semantic color-token contract. The legacy `color` field is
+deprecated. Do not add new uses. Avoid arbitrary color controls unless an
+explicit product requirement cannot use the theme engine.
+
+Apply the same rule to other visual properties. Prefer theme typography,
+spacing, radii, borders, and shadows over widget-owned values. If a necessary
+custom style can override a theme-derived value, mark it `advanced`, provide a
+theme-compatible default, and describe the compatibility cost.
+
+## Data sources
+
+If a prop exists only as a data-source result, document it on the canonical
+data-source field rather than in a parallel prop list. Keep each target prop's
+description with that mapping and keep the schema's target-prop declaration in
+sync. Use the installed property-field API for the exact mapping shape and
+per-item configuration contract.
+
+Components must accept missing, empty, partial, or malformed data and render a
+useful empty state. Prefer props and host data sources to direct network
+requests.

package/template-skills/fluid-widget-authoring/references/runtime-and-styling.md

@@ -0,0 +1,44 @@
+# Runtime, styling, accessibility, and security
+
+## Component behavior
+
+Use semantic HTML, accessible names, keyboard operation, visible focus, useful
+alt text, logical heading order, and reduced-motion handling. Guard unsafe
+array and object access, clean up effects, and keep rendering deterministic.
+
+## Theme and CSS
+
+Use the theme contract supplied by the host. Inspect the active theme and the
+installed theme API for the exact semantic variables; do not copy a partial
+token list into widget guidance.
+
+Theme compliance is the default, not an optional polish step. A widget should
+inherit the active theme for colors, typography, spacing, radii, borders,
+focus, and charts. Do not hardcode a visual value or expose a custom styling
+property when a semantic token represents the same intent. Use the
+`colorSelect` property field for author-selectable semantic colors. The legacy
+`color` field is deprecated. Use arbitrary colors only for a product-specific
+value that cannot be semantic, and verify contrast in every supported theme.
+
+Keep styles in the generated project's root `styles.css`. The standalone
+template keeps a guarded import in its worker entry, and both widget build
+flows include the root stylesheet in their output. Scope selectors to the
+widget and do not depend on global `body` styles.
+
+## Security and network access
+
+Follow the worker isolation boundary in the installed runtime contract. Do not
+assume that browser or host application facilities are available. Declare every
+portal function and capability in `uses`.
+
+Add `networkAccess` only for public HTTP APIs after package review and
+placement consent. The grant is bound to the package ID, package version, and
+capability version. Fluid does not add credentials, cookies, tokens, or
+headers. The widget's `RequestInit`, including credential mode, remains in
+effect.
+
+Treat worker network access as approved public HTTP fetch, not as general
+browser or server access. The runtime reference owns the exact destination and
+ambient-API policy. Native redirects and DNS results are not revalidated.
+Never embed secrets, credentials, private endpoints, or tenant tokens. Use a
+typed host portal function or server application instead.