@getxflow/cli 0.2.0 → 0.3.0

package/dist/bin.js

@@ -69,10 +69,6 @@ async function run(args) {
             }
             throw new errors_1.CliError(`Unknown command: mcp ${second}`, 'Available: install');
         case 'functions':
-            // The command is gone, but silence would leave the habit unexplained.
-            if (second === 'deploy') {
-                throw new errors_1.CliError('Functions are deployed by the build now', 'Run xflow deploy: it ships the functions and then builds the application with their addresses');
-            }
             if (second === 'invoke') {
                 await (0, functions_1.functionsInvoke)(rest);
                 return;

package/dist/commands/projects.js

@@ -63,7 +63,7 @@ async function init(args) {
     }
     (0, ui_1.step)('Fetching the template');
     const archive = await (0, api_1.apiBinary)(client, `/api/v1/templates/${templateId}/archive`);
-    const files = (0, zip_1.zipRead)(archive);
+    const files = (0, zip_1.dropDirectoryEntries)((0, zip_1.zipRead)(archive));
     (0, ui_1.step)('Creating the project on the platform');
     const project = await (0, api_1.apiJson)(client, '/api/v1/projects', {
         method: 'POST',

package/dist/commands/sources.js

@@ -47,7 +47,7 @@ async function confirmForce(client, projectId, server, local) {
     (0, ui_1.warn)(`The server holds revision ${server.revision} from ${(0, ui_1.formatAge)(server.created_at)}, ${server.file_count} files`);
     try {
         const info = await (0, api_1.apiJson)(client, `/api/v1/projects/${projectId}/pull`);
-        const serverPaths = new Set((0, zip_1.zipRead)(await (0, api_1.downloadUrl)(info.download_url)).map((e) => e.path));
+        const serverPaths = new Set((0, zip_1.dropDirectoryEntries)((0, zip_1.zipRead)(await (0, api_1.downloadUrl)(info.download_url))).map((e) => e.path));
         const localPaths = new Set(local.map((f) => f.path));
         const disappearing = [...serverPaths].filter((p) => !localPaths.has(p));
         if (disappearing.length > 0) {
@@ -132,7 +132,7 @@ async function pull(args) {
         (0, ui_1.warn)('The hash of the downloaded tree did not match the server one: the contents may have changed in transit');
     }
     (0, node_fs_1.mkdirSync)(target, { recursive: true });
-    for (const entry of entries) {
+    for (const entry of (0, zip_1.dropDirectoryEntries)(entries)) {
         const path = (0, node_path_1.join)(target, entry.path);
         (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
         (0, node_fs_1.writeFileSync)(path, entry.content);

package/dist/template.js

@@ -25,7 +25,7 @@ xflow publish     # show the dev version to visitors
 \`\`\`
 
 The interface is built on the template components: \`src/components/ui\` (buttons, fields,
-dialogs) and \`src/components/blocks\` (table, form, filters, kanban, charts). Layout built
+dialogs) and \`src/components/blocks\` (a data table and charts). Layout built
 on top of them looks like the rest of the platform, while custom colors in place of the
 tokens from \`src/index.css\` break that consistency.
 

package/dist/tree.js

@@ -19,6 +19,9 @@ const DEFAULT_IGNORE = [
     '.env.*',
     '.DS_Store',
     'Thumbs.db',
+    // Compiler cache: rewritten by every local build, so it would make a new
+    // revision out of nothing.
+    'tsconfig.tsbuildinfo',
 ];
 const IGNORE_FILE = '.xflowignore';
 function globToRegExpSource(pattern) {

package/dist/version.js

@@ -2,6 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_API_URL = exports.CLI_VERSION = void 0;
 /** Keep in sync with cli/package.json. */
-exports.CLI_VERSION = '0.2.0';
+exports.CLI_VERSION = '0.3.0';
 /** Overridden by XFLOW_API_URL or the `api` field in xflow.json. */
 exports.DEFAULT_API_URL = 'https://app.getxflow.com';

package/dist/zip.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ZipError = void 0;
 exports.zipCreate = zipCreate;
+exports.dropDirectoryEntries = dropDirectoryEntries;
 exports.zipRead = zipRead;
 const node_zlib_1 = require("node:zlib");
 class ZipError extends Error {
@@ -122,6 +123,25 @@ function isSafeEntryPath(path) {
     }
     return path.split('/').every((part) => part !== '' && part !== '.' && part !== '..');
 }
+/**
+ * Drop entries whose name is a directory elsewhere in the same archive: old
+ * revisions carry folders as empty files, and unpacking them collides with the
+ * directory of the same name. Call it before writing to disk, not inside
+ * zipRead: the tree hash is checked against the archive as the server made it.
+ */
+function dropDirectoryEntries(entries) {
+    const directories = new Set();
+    for (const entry of entries) {
+        const segments = entry.path.split('/');
+        segments.pop();
+        let current = '';
+        for (const segment of segments) {
+            current = current ? `${current}/${segment}` : segment;
+            directories.add(current);
+        }
+    }
+    return entries.filter((entry) => !directories.has(entry.path));
+}
 function zipRead(buffer) {
     if (buffer.length < 22)
         throw new ZipError('The file is too small to be a zip');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getxflow/cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "CLI for the XFlow platform: source sync, deployment and publishing of applications",
   "license": "UNLICENSED",
   "engines": {

package/skills/xflow/SKILL.md

@@ -103,6 +103,30 @@ Interface rules, checked outside `src/components/ui` and `src/components/blocks`
   `react-hot-toast`, `react-dnd`) must have it mounted in `App.tsx`. Missing providers
   build fine and give visitors a white screen.
 
+Template integrity. The app grows out of the platform template, and part of that template
+is not yours to change. The reference is a snapshot of the project itself, taken when the
+platform first looked at it, so these rules never argue with work that was already there:
+
+- Platform files must stay byte for byte as they arrived: `src/lib/theme-sync.ts`,
+  `src/lib/platform-auth.ts`, `src/contexts/platform-auth-context.tsx`,
+  `src/hooks/use-platform-auth.ts`, `src/utils/error-logger.ts`, `src/lib/xflow.ts`.
+  They wire the app to the platform, and every way they break is a silent one. Build what
+  you need around them, never inside them.
+- The entry point keeps calling `initThemeSync()`, `initPlatformAuth()` and
+  `initErrorLogger()`, keeps importing `index.css` and keeps mounting `ThemeProvider`.
+  How the file is written is up to you.
+- `index.html` keeps the element with `id="root"` and the script that loads `src/main`.
+- Theme token names in `src/index.css` stay declared, in `:root` and in `.dark` alike, and
+  the Tailwind config keeps mapping them. Change the values as much as the design needs:
+  it is the names that components paint with.
+- The Tailwind `content` globs keep covering `src/**`. Narrow them and Tailwind strips
+  every class the app uses.
+- Files under `src/components/ui` and `src/components/blocks` may be edited freely but
+  not deleted.
+
+A rejection names the file and the revision to take the original from:
+`xflow pull --revision N --into ./original`, then copy the file back.
+
 ## Cloud functions
 
 Server-side code lives in `functions/<name>/index.ts` and exports `handler`. There is no
@@ -209,8 +233,7 @@ The platform design system already ships inside the project, and the app is supp
 to look like a part of the platform:
 
 - `src/components/ui` for primitives: buttons, inputs, dialogs, tables, menus
-- `src/components/blocks` for composed blocks: `data-table`, `entity-form`,
-  `filter-bar`, `detail-panel`, `kanban`, `charts`, `user-picker`, `relation-picker`
+- `src/components/blocks` for composed blocks: `data-table` and `charts`
 - `src/index.css` for color tokens
 
 Before writing your own component, check whether a block already covers it: props are
@@ -221,7 +244,7 @@ the design system sits in the project.
 
 The app runs inside the platform in an iframe and receives the theme and the current
 user from it. The `usePlatformAuth()` hook gives the name, role, permissions and the
-list of organization members: that is what `user-picker` is built on.
+list of organization members.
 
 ## Errors from a deployed app