@getxflow/cli 0.23.0 → 0.25.0

package/dist/commands/auth.js

@@ -92,13 +92,10 @@ function logout(args) {
         return;
     }
     const orgs = (0, credentials_1.listOrgs)(apiUrl);
+    // The pointer always lands on a stored key, so no active one means no keys.
     const active = orgs.find((org) => org.active);
     if (!active) {
-        // A record from an older CLI names no organization: forget the whole address.
-        if ((0, credentials_1.forgetAllOrgs)(apiUrl))
-            (0, ui_1.ok)(`The key for ${apiUrl} is deleted`);
-        else
-            (0, ui_1.warn)(`There is no stored key for ${apiUrl}`);
+        (0, ui_1.warn)(`There is no stored key for ${apiUrl}`);
         return;
     }
     const { nextActive } = (0, credentials_1.forgetOrg)(apiUrl, active.organizationId);

package/dist/commands/deploy.js

@@ -26,7 +26,9 @@ function reportIssues(e) {
         (0, ui_1.out)(`  ${(0, ui_1.bold)(issue.code)} ${where}`);
         (0, ui_1.note)((0, ui_1.dim)(`    ${issue.message}`));
     }
-    throw new errors_1.CliError(e.message, e.hint);
+    // Not the platform hint: it names its own JSON field, and a terminal has no field,
+    // it has the list printed right above.
+    throw new errors_1.CliError(e.message, 'Fix what is listed above and retry: the build did not start');
 }
 /** Poll the build until it finishes, printing phases. */
 async function waitForBuild(client, projectId, started) {

package/dist/commands/dev.js

@@ -38,7 +38,14 @@ async function dev() {
     // Ctrl+C reaches the server on its own; staying alive until it is gone is what
     // hands its exit code back instead of leaving it to print over the prompt.
     process.on('SIGINT', () => { });
-    const result = (0, spawn_1.run)('npm', ['run', 'dev'], { stdio: 'inherit', cwd: root, env });
+    // Appended last, so it beats the --host of the dev script: the server holds the key
+    // of the project and answers this machine alone. By number, not by name: proxies of
+    // older templates cut the Host at ':' and so never match [::1].
+    const result = (0, spawn_1.run)('npm', ['run', 'dev', '--', '--host', '127.0.0.1'], {
+        stdio: 'inherit',
+        cwd: root,
+        env,
+    });
     if (result.error) {
         throw new errors_1.CliError(`Could not start npm run dev: ${result.error.message}`, 'npm ships with Node.js: check that npm works in this terminal');
     }

package/dist/commands/functions.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.functionsList = functionsList;
+exports.failureHint = failureHint;
 exports.functionsInvoke = functionsInvoke;
 const api_1 = require("../api");
 const args_1 = require("../args");
@@ -38,6 +39,37 @@ function prettyBody(text) {
         return text;
     }
 }
+/**
+ * Refusals the wrapper writes itself, before the handler runs. Nothing about them
+ * reaches the logs, and the answer already names the cause.
+ *
+ * Matched by value and not by the presence of the field, because a handler is free to
+ * put a reason of its own into the body it returns, and that one did run.
+ *
+ * Keep in sync with lib/yandex-functions/call-outcome.ts, which the MCP tool calls:
+ * this package ships without dependencies and cannot reach into the platform. One test
+ * holds the two halves together.
+ */
+const WRAPPER_REASONS = ['no_pass', 'invalid', 'expired', 'no_access', 'unavailable', 'role'];
+/** What to look at next, when the function did not answer with a success. */
+function failureHint(name, status, body) {
+    let reason;
+    try {
+        reason = JSON.parse(body).reason;
+    }
+    catch {
+        reason = undefined;
+    }
+    const logs = `The stack and console output: xflow functions logs ${name}`;
+    if (typeof reason !== 'string' || !WRAPPER_REASONS.includes(reason))
+        return logs;
+    if (reason !== 'role' || status < 500)
+        return undefined;
+    // Two different answers wear this one: a threshold the platform cannot read, refused
+    // before the handler and so absent from the logs, and a handler that answered 5xx with
+    // a reason of that name itself, which is logged. Emptiness there tells them apart.
+    return `${logs}. Nothing there means the declared minRole is the problem: fix functions/${name}/index.ts`;
+}
 /** Call a function the same way the application does. */
 async function functionsInvoke(args) {
     const { projectId, client } = await (0, session_1.projectTarget)(args);
@@ -95,6 +127,6 @@ async function functionsInvoke(args) {
     if (text)
         (0, ui_1.out)((0, args_1.flagBool)(args, 'json') ? text : prettyBody(text));
     if (!response.ok) {
-        throw new errors_1.CliError(`The function answered ${response.status}`, `The stack and console output: xflow functions logs ${name}`);
+        throw new errors_1.CliError(`The function answered ${response.status}`, failureHint(name, response.status, text));
     }
 }

package/dist/commands/org.js

@@ -18,13 +18,7 @@ function orgList() {
     const apiUrl = (0, config_1.apiUrlFor)((0, config_1.localConfig)());
     const orgs = (0, credentials_1.listOrgs)(apiUrl);
     if (orgs.length === 0) {
-        if ((0, credentials_1.storedKeyInputs)(apiUrl).legacyToken) {
-            (0, ui_1.note)(`One key is stored for ${apiUrl}, its organization is unknown`);
-            (0, ui_1.note)((0, ui_1.dim)('  Sign in again to refresh it: xflow login'));
-        }
-        else {
-            (0, ui_1.note)(`No keys for ${apiUrl}. Sign in: xflow login`);
-        }
+        (0, ui_1.note)(`No keys for ${apiUrl}. Sign in: xflow login`);
         return;
     }
     (0, ui_1.table)(orgs.map((org) => [org.active ? '*' : ' ', org.name ?? '(unnamed)', org.organizationId]));
@@ -62,9 +56,6 @@ function orgSwitch(args) {
     const apiUrl = (0, config_1.apiUrlFor)((0, config_1.localConfig)());
     const orgs = (0, credentials_1.listOrgs)(apiUrl);
     if (orgs.length === 0) {
-        if ((0, credentials_1.storedKeyInputs)(apiUrl).legacyToken) {
-            throw new errors_1.CliError(`The stored key for ${apiUrl} names no organization`, 'Sign in again to refresh it: xflow login');
-        }
         throw new errors_1.CliError(`No keys for ${apiUrl}`, 'Sign in: xflow login');
     }
     const byId = orgs.find((org) => org.organizationId === wanted);

package/dist/commands/schedules.js

@@ -8,6 +8,13 @@ const errors_1 = require("../errors");
 const json_arg_1 = require("../json-arg");
 const session_1 = require("../session");
 const ui_1 = require("../ui");
+/**
+ * The payload is kept as it was written, and `--payload-file` takes a file a person
+ * formatted: its newlines would break a row of a table into several.
+ */
+function oneLine(payload) {
+    return (payload ?? '').replace(/\s+/g, ' ').trim();
+}
 async function schedulesList(args) {
     const { projectId, client } = await (0, session_1.projectTarget)(args);
     const data = await (0, api_1.apiJson)(client, `/api/v1/projects/${projectId}/schedules`);
@@ -16,12 +23,18 @@ async function schedulesList(args) {
         (0, ui_1.note)((0, ui_1.dim)('  To run a function on a timer: xflow schedules set <function> "0 3 ? * * *"'));
         return;
     }
-    (0, ui_1.table)(data.schedules.map((row) => [
-        row.function,
-        row.cron,
-        row.description === row.cron ? '' : row.description,
-        row.status === 'active' ? '' : (row.error ?? row.status),
-    ]));
+    (0, ui_1.table)(data.schedules.map((row) => {
+        // The body the timer sends. Nothing else printed it, so a schedule said when a
+        // function runs and never what it gets.
+        const payload = oneLine(row.payload);
+        return [
+            row.function,
+            row.cron,
+            row.description === row.cron ? '' : row.description,
+            payload.length > 40 ? `${payload.slice(0, 39)}…` : payload,
+            row.status === 'active' ? '' : (row.error ?? row.status),
+        ];
+    }));
 }
 async function schedulesSet(args) {
     const functionName = args.words[1];
@@ -36,6 +49,8 @@ async function schedulesSet(args) {
         body: { function: functionName, cron, payload },
     });
     (0, ui_1.ok)(`${(0, ui_1.bold)(row.function)} runs ${row.description}`);
+    if (row.payload)
+        (0, ui_1.note)((0, ui_1.dim)(`  The timer sends: ${oneLine(row.payload)}`));
     (0, ui_1.note)((0, ui_1.dim)(`  The time is UTC. To check by hand: xflow functions invoke ${row.function}`));
 }
 async function schedulesRemove(args) {

package/dist/credentials.js

@@ -47,56 +47,38 @@ function writeStore(store) {
 function isLegacy(value) {
     return !!value && typeof value.token === 'string';
 }
-/** The mirror for older CLIs: the key of the active organization, or nothing. */
-function syncLegacy(store, apiUrl) {
-    const address = store.orgs?.[apiUrl];
-    if (!address)
-        return;
-    const active = address.active ? address.keys[address.active] : undefined;
-    if (active && address.active) {
-        store[apiUrl] = { token: active.token, organizationId: address.active, savedAt: active.savedAt };
-        address.mirror = address.active;
-    }
-    else {
-        delete store[apiUrl];
-        address.mirror = null;
-    }
-}
 /**
- * Fold writes made by an older CLI back into the map. Its login rewrites only
- * the mirror record, its logout deletes only it; both are treated as what the
- * person meant: "sign in to this organization" and "forget the key I am using".
+ * Fold a record predating the map into it and erase the record. A record naming
+ * no organization cannot be placed in the map and is dropped: the answer is one
+ * xflow login, while leaving it would leave the key where the old proxy looks.
  * Returns true when the store changed and has to be written back.
  */
 function reconcile(store, apiUrl) {
     const legacy = store[apiUrl];
-    let address = store.orgs?.[apiUrl];
     let changed = false;
-    if (isLegacy(legacy) && legacy.organizationId) {
-        const orgs = address ?? { active: null, keys: {} };
-        const known = orgs.keys[legacy.organizationId];
-        if (!known || known.token !== legacy.token || orgs.active !== legacy.organizationId) {
-            orgs.keys[legacy.organizationId] = { ...known, token: legacy.token, savedAt: legacy.savedAt };
-            orgs.active = legacy.organizationId;
+    if (isLegacy(legacy)) {
+        if (legacy.organizationId) {
+            const orgs = store.orgs?.[apiUrl] ?? { active: null, keys: {} };
+            // The map wins: it is what this CLI wrote last.
+            if (!orgs.keys[legacy.organizationId]) {
+                orgs.keys[legacy.organizationId] = { token: legacy.token, savedAt: legacy.savedAt };
+            }
             store.orgs = store.orgs ?? {};
             store.orgs[apiUrl] = orgs;
-            address = orgs;
-            changed = true;
-        }
-    }
-    if (!isLegacy(legacy) && address?.active && address.keys[address.active]) {
-        if (address.mirror === address.active) {
-            // The mirror we wrote for this key is gone: an older CLI logged out.
-            delete address.keys[address.active];
-            address.active = null;
         }
-        // Otherwise no mirror was ever written for this key (a hand-made or
-        // restored file): deleting it would lose a key nobody asked to forget.
-        // Either way the store changed: the mirror has to be rebuilt.
+        delete store[apiUrl];
         changed = true;
     }
-    // The pointer must land on a stored key, or on nothing.
+    const address = store.orgs?.[apiUrl];
     if (address) {
+        // The field the erased record was tracked by. Left in place, a 0.24.0 still on
+        // the machine reads "the mirror I wrote is gone" as a logout and drops the key.
+        const stale = address;
+        if ('mirror' in stale) {
+            delete stale.mirror;
+            changed = true;
+        }
+        // The pointer must land on a stored key, or on nothing.
         const ids = Object.keys(address.keys);
         const active = address.active && address.keys[address.active] ? address.active : (ids[0] ?? null);
         if (address.active !== active) {
@@ -104,8 +86,6 @@ function reconcile(store, apiUrl) {
             changed = true;
         }
     }
-    if (changed)
-        syncLegacy(store, apiUrl);
     return changed;
 }
 /** Read the store with the drift of older CLIs healed, persisting the healing. */
@@ -116,7 +96,6 @@ function load(apiUrl) {
     return store;
 }
 function commit(store, apiUrl) {
-    syncLegacy(store, apiUrl);
     const address = store.orgs?.[apiUrl];
     if (address && Object.keys(address.keys).length === 0) {
         delete store.orgs?.[apiUrl];
@@ -158,32 +137,38 @@ function saveOrgCredential(apiUrl, organizationId, token, name) {
 /** Cache the display name; a stale one is refreshed by any login or whoami. */
 function rememberOrgName(apiUrl, organizationId, name) {
     const store = readStore();
-    reconcile(store, apiUrl);
+    let changed = reconcile(store, apiUrl);
     const entry = store.orgs?.[apiUrl]?.keys[organizationId];
-    if (!entry || entry.name === name)
-        return;
-    entry.name = name;
-    commit(store, apiUrl);
+    if (entry && entry.name !== name) {
+        entry.name = name;
+        changed = true;
+    }
+    if (changed)
+        commit(store, apiUrl);
 }
 function setActiveOrg(apiUrl, organizationId) {
     const store = readStore();
-    reconcile(store, apiUrl);
+    let changed = reconcile(store, apiUrl);
     const orgs = store.orgs?.[apiUrl];
-    if (!orgs?.keys[organizationId])
-        return false;
-    if (orgs.active !== organizationId) {
+    const known = !!orgs?.keys[organizationId];
+    if (orgs && known && orgs.active !== organizationId) {
         orgs.active = organizationId;
-        commit(store, apiUrl);
+        changed = true;
     }
-    return true;
+    if (changed)
+        commit(store, apiUrl);
+    return known;
 }
 /** Forget one organization; the pointer moves to any remaining one. */
 function forgetOrg(apiUrl, organizationId) {
     const store = readStore();
-    reconcile(store, apiUrl);
+    const healed = reconcile(store, apiUrl);
     const orgs = store.orgs?.[apiUrl];
-    if (!orgs?.keys[organizationId])
+    if (!orgs?.keys[organizationId]) {
+        if (healed)
+            commit(store, apiUrl);
         return { removed: false, nextActive: null };
+    }
     delete orgs.keys[organizationId];
     if (orgs.active === organizationId)
         orgs.active = Object.keys(orgs.keys)[0] ?? null;
@@ -199,8 +184,9 @@ function forgetOrg(apiUrl, organizationId) {
 /** Forget every key of the address; other addresses are untouched. */
 function forgetAllOrgs(apiUrl) {
     const store = readStore();
-    reconcile(store, apiUrl);
-    const had = !!store.orgs?.[apiUrl] || isLegacy(store[apiUrl]);
+    // A record erased by reconcile was a key as well: counted here, or the address
+    // looks empty and the erasure never reaches the file.
+    const had = reconcile(store, apiUrl) || !!store.orgs?.[apiUrl];
     if (!had)
         return false;
     if (store.orgs) {
@@ -236,16 +222,9 @@ function pickKey(inputs) {
     const active = activeId ? inputs.orgs?.keys[activeId] : undefined;
     if (active && activeId)
         return { token: active.token, source: 'active', organizationId: activeId };
-    if (inputs.legacyToken)
-        return { token: inputs.legacyToken, source: 'active', organizationId: null };
     return null;
 }
 /** The store-backed half of pickKey's inputs; the caller adds env and the folder binding. */
 function storedKeyInputs(apiUrl) {
-    const store = load(apiUrl);
-    const legacy = store[apiUrl];
-    return {
-        orgs: store.orgs?.[apiUrl] ?? null,
-        legacyToken: isLegacy(legacy) ? legacy.token : null,
-    };
+    return { orgs: load(apiUrl).orgs?.[apiUrl] ?? null };
 }

package/dist/help.js

@@ -40,7 +40,7 @@ ${(0, ui_1.bold)('Getting started')}
   xflow init [dir]                new project from the platform template
   xflow templates                 which templates are available
   xflow link <id>                 link this folder to a project, an empty one also gets the sources
-  xflow dev                       run the app on localhost:3000, cloud functions included
+  xflow dev                       run the app on 127.0.0.1:3000, cloud functions included
   xflow skills                    pick the agents that get the platform instructions
   xflow mcp install               give the agent platform access without a terminal
 
@@ -465,6 +465,9 @@ how Yandex works. ${(0, ui_1.bold)('The time is always UTC')}, local time is not
   --payload '{"mode":"full"}'      the body the function will receive
   --payload-file body.json         the same body from a file
 
+${(0, ui_1.bold)('list')} prints that body next to the schedule, so what a timer sends can be read
+back without setting it again.
+
 A scheduled run arrives at the handler as a POST with no headers, and the project
 token is not checked on it: such an event cannot be forged from outside. The function
 has to be deployed already, since the schedule points at it and not the other way round.
@@ -538,20 +541,26 @@ is always read by the agent, which is why the pointer is appended there, at the
 the file and once. ${(0, ui_1.bold)('CLAUDE.md')} is left alone: Claude Code reads .claude/skills anyway.`,
     dev: `${(0, ui_1.bold)('xflow dev')}: run the application on this machine
 
-Runs ${(0, ui_1.bold)('npm run dev')} in the project folder (localhost:3000) with the access key of the
+Runs ${(0, ui_1.bold)('npm run dev')} in the project folder (127.0.0.1:3000) with the access key of the
 organization that holds the project. The dev server trades that key for a visitor pass,
 so the cloud functions answer here the way they do on the platform. The key is picked
 as for every other command (${(0, ui_1.bold)('xflow help org')}): with several organizations signed
 in, the right one is found and the folder is bound to it.
 
-Use it instead of a bare ${(0, ui_1.bold)('npm run dev')}, which gets no key from here: its function
-calls fail, or go out under the key of whichever organization is active.
+Use it instead of a bare ${(0, ui_1.bold)('npm run dev')}: that one is handed no key, so its calls to
+cloud functions fail. In a project made before this command the failure reads "No access
+key for the platform: run xflow login", and signing in will not help, because the key is
+no longer left in a file for that dev server to pick up.
 
 The platform address comes from the CLI too, not from .env, so the key goes to the
 platform that issued it and nowhere else. It never reaches the browser: the page gets
 only the ${(0, ui_1.bold)('VITE_')} variables. The project token and the function addresses are
 fetched on every start as well: a function someone else shipped answers here without a
-deploy of yours.`,
+deploy of yours.
+
+The server listens on 127.0.0.1 and nowhere else, because it holds that key: on a
+shared network, anything else would let a neighbour call the functions of the project
+as you. A phone on the same Wi-Fi therefore cannot open it either.`,
     pull: `${(0, ui_1.bold)('xflow pull')}: fetch the sources
 
 By default it fetches the latest revision into the project folder and refuses to write

package/dist/session.js

@@ -84,7 +84,7 @@ async function findProjectOrg(apiUrl, projectId) {
  */
 async function connectProject(projectId, root, config) {
     const session = connect(config, { ignoreFolder: root === null });
-    if (session.source !== 'active' || session.organizationId === null)
+    if (session.source !== 'active')
         return session;
     const orgs = (0, credentials_1.listOrgs)(session.apiUrl);
     if (orgs.length <= 1)

package/dist/template.js

@@ -18,7 +18,7 @@ An application on XFlow.
 
 \`\`\`bash
 npm install       # dependencies
-xflow dev         # develop on localhost:3000
+xflow dev         # develop on 127.0.0.1:3000
 xflow deploy      # send the code and build it on the platform
 xflow publish     # show the dev version to visitors
 \`\`\`

package/dist/version.js

@@ -2,6 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_API_URL = exports.CLI_VERSION = void 0;
 /** Keep in sync with cli/package.json. */
-exports.CLI_VERSION = '0.23.0';
+exports.CLI_VERSION = '0.25.0';
 /** Overridden by XFLOW_API_URL or the `api` field in xflow.json. */
 exports.DEFAULT_API_URL = 'https://app.getxflow.com';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getxflow/cli",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "CLI for the XFlow platform: source sync, deployment and publishing of applications",
   "license": "UNLICENSED",
   "engines": {

package/skills/xflow/SKILL.md

@@ -22,7 +22,7 @@ contains the fix.
 
 ## Keeping these instructions current
 
-These instructions ship with xflow CLI 0.23.0, so the copy you are reading can be older than
+These instructions ship with xflow CLI 0.25.0, so the copy you are reading can be older than
 the CLI answering your commands.
 
 When the CLI says this file does not match it, run `xflow skills --refresh` and then **read
@@ -602,7 +602,10 @@ own devtools.
 
 Run the app locally with `xflow dev`, not a bare `npm run dev`: it hands the dev server
 the key of the project's organization, which cloud functions need to answer, and their
-current addresses, including functions someone else deployed.
+current addresses, including functions someone else deployed. A bare `npm run dev` gets
+no key at all, so its function calls fail whatever the error says. The server answers
+`127.0.0.1` alone, because it holds that key: a phone on the same network cannot open it,
+and neither can anybody else on that network.
 
 ## Environment