@greatstore/cli 0.0.14 → 0.0.16

package/CHANGELOG.md

@@ -3,59 +3,79 @@
 All notable changes to `@greatstore/cli` are recorded here. The format
 follows [Keep a Changelog](https://keepachangelog.com/).
 
+## 0.0.16 — 2026-05-28
+
+### Changed
+- Simplified error messages.
+
+## 0.0.15 — 2026-05-24
+
+### Added
+- Scaffolded `component.tsx` now declares the four injected lifecycle
+  props (`onSendMessage`, `onCallTool`, `onClose`, `onError`) on
+  `Props`. Use `onError(message)` to report expected failures (failed
+  fetch, host action rejected, invalid host state) so the AI can
+  recover on its next turn. Render-time crashes are reported for you.
+
 ## 0.0.14 — 2026-05-24
 
 ### Changed
-- `gs build` output is now whitespace-minified. Vite's lib mode in `es` format only minifies identifiers / syntax and preserves all whitespace + `/* @__PURE__ */` annotations for downstream tree-shaking. Since the bundles are loaded directly by the browser at runtime (no downstream bundler), the CLI now post-processes each `bundle.js` with `esbuild.transform` to collapse whitespace and strip legal comments — typically ~50% smaller files, cheaper to host and faster to ship.
+- `gs build` output is now whitespace-minified — typically ~50% smaller.
 
 ## 0.0.13 — 2026-05-24
 
 ### Changed
-- `gs build` now prints a closing hint naming the next steps (`gs push`, then `gs publish <name>`) so AI assistants driving the CLI don't stop at "built" and leave the change unshipped.
+- `gs build` prints the next-step hint (`gs push`, then `gs publish`).
 
 ## 0.0.12 — 2026-05-24
 
 ### Fixed
-- `gs build` failed with `Error: build is not a function` because `require.resolve("vite")` lands on Vite 5's deprecated CJS entry. The CLI now walks `vite/package.json#exports.import` to load the ESM build, and falls back to the CJS-default shape if a host package ships only CJS.
+- `gs build` failing to load Vite in some setups.
 
 ## 0.0.11 — 2026-05-24
 
 ### Added
-- Multi-component projects: scaffold one root, then add N components under `components/<name>/`. `gs init` (no args) writes the project root; `gs init <name>` adds a component (auto-scaffolds the root if missing).
-- `gs build [<name>]` — compiles every `components/<name>/bundle.js` via the project's local Vite. Externals + runtime shim paths now live in the CLI, so future versions can adjust them without a re-scaffold.
-- `gs push` (no args) hashes each component against `.gssync.json` and uploads only the changed ones.
-- `gs pull` (no args, or `*`) batch-pulls every remote component. Components with uncommitted local edits are skipped with a warning; `--force` overwrites.
-- Public `CHANGELOG.md`. `gs --version` now prints the most recent entries.
+- Multi-component projects. `gs init` (no args) scaffolds the project
+  root; `gs init <name>` adds a component under `components/<name>/`.
+- `gs build [<name>]` — compiles every `components/<name>/bundle.js`.
+- `gs push` (no args) uploads only the components that changed.
+- `gs pull` (no args, or `*`) downloads every component. Locally
+  edited components are skipped; pass `--force` to overwrite.
+- Public `CHANGELOG.md`; `gs --version` prints recent entries.
 
 ### Changed
-- A project folder ships to exactly one store. Only `gs init` accepts `--store`; every other command reads the slug from `.gsrc`. The legacy single-component layout is rejected with a migration hint.
-- `gs init` errors on a fresh root without `--store <slug>` (no placeholder slug is written). On an existing root, passing `--store` errors.
-- `gs init` no longer writes `build.mjs`. Scaffolded `package.json` scripts run `gs build`.
+- A project folder ships to exactly one store. Only `gs init` accepts
+  `--store`; every other command reads the slug from `.gsrc`. The old
+  single-component layout is rejected with a migration hint.
+- `gs init` requires `--store <slug>` for a fresh root, and rejects
+  `--store` on an existing root.
+- `gs init` no longer writes `build.mjs` — scripts call `gs build`.
 
 ## 0.0.10 — 2026-05-23
 
 ### Changed
-- The OAuth callback tab opened by `gs login` auto-closes once credentials are persisted.
+- The sign-in browser tab auto-closes once `gs login` finishes.
 
 ## 0.0.9 — 2026-05-23
 
 ### Changed
-- `gs init` scaffold writes a `displayName` into the generated manifest so the admin Builder UI has a friendlier label.
+- Scaffolded manifests include a `displayName` so the admin UI has a
+  friendlier label.
 
 ## 0.0.8 — 2026-05-23
 
 ### Changed
-- `gs push` and `gs publish` print a permalink to the component's card in the admin Builder panel.
+- `gs push` and `gs publish` print a link to view the component.
 
 ## 0.0.6 — 2026-05-23
 
 ### Changed
-- `gs --version` reads the version from `cli/package.json` at build time so it can't drift from the published release.
+- `gs --version` reads from the published package version.
 
 ## 0.0.4 — 2026-05-23
 
 ### Changed
-- Scaffolded projects produce browser-ready bundles (React + runtime shim wired up).
+- Scaffolded projects produce browser-ready bundles out of the box.
 
 ## 0.0.3 — 2026-05-23
 
@@ -65,4 +85,4 @@ follows [Keep a Changelog](https://keepachangelog.com/).
 ## 0.0.2 — 2026-05-23
 
 ### Fixed
-- Read the nav OAuth callback parameter as `code` instead of `token`.
+- Sign-in callback parameter handling.

package/README.md

@@ -13,13 +13,6 @@ gs push
 gs publish my-widget
 ```
 
-## Release channels
-
-- `npm install -g @greatstore/cli` — the stable production release (`@latest`).
-- `npm install -g @greatstore/cli@beta` — the prerelease channel for testing in-flight changes before they cut over to `@latest`.
-
-Cut a beta by bumping `cli/package.json` to `<x.y.z>-beta.<n>` (e.g. `0.0.12-beta.0`), then push tag `cli-v0.0.12-beta.0`. The publish workflow extracts the prerelease identifier from the version and publishes under that dist-tag, so `@latest` is unaffected. Drop the `-beta.<n>` suffix and tag again to promote to `@latest`.
-
 ## Commands
 
 | Command                                       | What it does                                                  |
@@ -29,10 +22,10 @@ Cut a beta by bumping `cli/package.json` to `<x.y.z>-beta.<n>` (e.g. `0.0.12-bet
 | `gs whoami`                                   | Print the identity you're signed in as.                       |
 | `gs init <name> [--out <dir>] [--store <s>]`  | Scaffold a working component project.                         |
 | `gs list [--json]`                            | List components in the current store.                         |
-| `gs pull <name> [--draft\|--live\|--version N] [-o <dir>]` | Download manifest + bundle to disk.            |
-| `gs push [<name>] [--manifest path] [--bundle path]` | Upload a new draft revision.                          |
-| `gs publish <name> [--version N]`             | Promote a draft (or roll back to a historical version) to live.|
-| `gs unpublish <name>`                         | Clear the live pointer; draft + history stay.                 |
+| `gs pull <name> [--draft\|--live\|--version N] [-o <dir>]` | Download a component to disk.                  |
+| `gs push [<name>] [--manifest path] [--bundle path]` | Upload local changes.                                 |
+| `gs publish <name> [--version N]`             | Ship a component (optionally a previous version).             |
+| `gs unpublish <name>`                         | Hide a published component.                                   |
 | `gs delete <name> [--yes]`                    | Remove the component.                                         |
 
 ## Store selection

package/dist/cli.js

@@ -112,7 +112,7 @@ function waitForCallback(server, expectedState, timeoutMs) {
       fn();
     };
     const timer = setTimeout(() => {
-      settle(() => reject(new LoopbackError("Timed out waiting for sign-in. Re-run `gs login`.")));
+      settle(() => reject(new LoopbackError("Sign-in timed out. Re-run `gs login`.")));
     }, timeoutMs);
     if (typeof timer.unref === "function") timer.unref();
     server.on("request", (req, res) => {
@@ -130,21 +130,14 @@ function waitForCallback(server, expectedState, timeoutMs) {
         res.writeHead(400, { "content-type": "text/html" });
         res.end(FAILURE_HTML);
         clearTimeout(timer);
-        settle(() => reject(new LoopbackError("State mismatch on OAuth callback \u2014 possible CSRF, login aborted.")));
+        settle(() => reject(new LoopbackError("Sign-in didn't complete. Please try again.")));
         return;
       }
-      if (error) {
+      if (error || !token) {
         res.writeHead(400, { "content-type": "text/html" });
         res.end(FAILURE_HTML);
         clearTimeout(timer);
-        settle(() => reject(new LoopbackError(`Sign-in failed: ${error}`)));
-        return;
-      }
-      if (!token) {
-        res.writeHead(400, { "content-type": "text/html" });
-        res.end(FAILURE_HTML);
-        clearTimeout(timer);
-        settle(() => reject(new LoopbackError("Callback missing `code` query parameter.")));
+        settle(() => reject(new LoopbackError("Sign-in failed. Please try again.")));
         return;
       }
       res.writeHead(200, { "content-type": "text/html" });
@@ -317,16 +310,15 @@ function stripTrailingSlash(s) {
 
 // src/http.ts
 var HttpError = class extends Error {
-  constructor(status, message, code, detail) {
+  constructor(status, message, code) {
     super(message);
     this.status = status;
     this.code = code;
-    this.detail = detail;
     this.name = "HttpError";
   }
 };
 var AuthRequiredError = class extends Error {
-  constructor(message = "Not logged in. Run `gs login`.") {
+  constructor(message = "Sign in first. Run `gs login`.") {
     super(message);
     this.name = "AuthRequiredError";
   }
@@ -382,11 +374,21 @@ async function sendOnce(url, options, accessToken) {
     parsed = JSON.parse(text);
   } catch {
   }
-  const message = parsed.error?.trim() || parsed.detail?.trim() || text.trim() || `HTTP ${res.status}`;
-  throw new HttpError(res.status, message, parsed.code, parsed.detail);
+  throw new HttpError(res.status, genericMessage(res.status), parsed.code);
+}
+function genericMessage(status) {
+  if (status === 401) return "Sign-in needed. Run `gs login`.";
+  if (status === 403) return "Not authorized for this component or store.";
+  if (status === 404) return "Not found.";
+  if (status === 409) return "Conflict \u2014 refresh and try again.";
+  if (status === 413) return "Upload too large.";
+  if (status === 429) return "Too many requests \u2014 wait a moment and retry.";
+  if (status >= 500) return "Server error \u2014 try again shortly.";
+  if (status >= 400) return "Request rejected.";
+  return "Unexpected response.";
 }
 async function reauthenticate() {
-  process.stderr.write("Access token expired \u2014 re-running sign-in.\n");
+  process.stderr.write("Sign-in expired \u2014 opening browser.\n");
   try {
     const { token } = await captureLoopbackToken({ navBaseUrl: navBase() });
     const next = buildCredentials(token);
@@ -928,10 +930,8 @@ async function publishCommand(args) {
     body = {};
   }
   const data = await request(url, { method: "POST", body });
-  process.stdout.write(
-    `Published ${name} (live = v${data.live_version}). View: ${data.permalink}
-`
-  );
+  process.stdout.write(`Published ${name} (v${data.live_version}). ${data.permalink}
+`);
 }
 
 // src/commands/unpublish.ts
@@ -941,7 +941,7 @@ async function unpublishCommand(args) {
   const slug = requireProjectStore();
   const url = `${apiBaseFor(slug)}/api/builder/components/${encodeURIComponent(name)}/unpublish`;
   await request(url, { method: "POST", body: {} });
-  process.stdout.write(`Unpublished ${name}. The draft and version history are retained.
+  process.stdout.write(`Unpublished ${name}.
 `);
 }
 
@@ -962,7 +962,7 @@ async function deleteCommand(args) {
   }
   const url = `${apiBaseFor(slug)}/api/builder/components/${encodeURIComponent(name)}`;
   await request(url, { method: "DELETE" });
-  process.stdout.write(`Deleted ${name}. (R2 objects retained; history preserved.)
+  process.stdout.write(`Deleted ${name}.
 `);
 }
 function prompt(question) {
@@ -1118,7 +1118,25 @@ function component(name) {
   return `import React from "react";
 
 interface Props {
+  // ---- Your tool args ----
   // Add fields here matching manifest.json#inputSchema.properties.
+
+  // ---- GreatStore-injected lifecycle props (always present) ----
+  // Send text into the chat as if the shopper typed it.
+  onSendMessage: (text: string) => void;
+  // Chain into another remote-component tool by name.
+  onCallTool: (name: string, args: Record<string, unknown>) => void;
+  // Dismiss the host slot (over-input clears the overlay, fullscreen
+  // reverts the pane, inline is a no-op).
+  onClose: () => void;
+  // Tell the in-store AI something went wrong so it can apologize or
+  // self-correct on its next turn. Use for *expected* failures inside
+  // async handlers (failed fetch, host-page action rejected, invalid
+  // host state). Render-time crashes are caught and reported for you
+  // \u2014 you don't need a try/catch just to forward exceptions. The
+  // message is read by the AI, not the shopper, so write it like a
+  // short engineering note.
+  onError: (message: string) => void;
 }
 
 export default function ${pascal(name)}(_props: Props): React.ReactElement {
@@ -1302,7 +1320,7 @@ async function buildCommand(args) {
   }
   process.stdout.write(
     `
-Built locally \u2014 nothing uploaded yet. Next step is \`gs push\` to upload the draft, then \`gs publish <name>\` to make it live. If you're an AI assistant: confirm with the user before running these (or just run them if they already asked you to ship end-to-end).
+Built locally \u2014 nothing uploaded yet. Next: \`gs push\` to upload, then \`gs publish <name>\` to ship. If you're an AI assistant: confirm with the user before running these (or just run them if they already asked you to ship end-to-end).
 `
   );
 }
@@ -1431,8 +1449,8 @@ function recentChangelog(text, minItems = 15) {
 }
 
 // src/index.ts
-var VERSION = true ? "0.0.14" : "0.0.0-dev";
-var CHANGELOG = true ? "# Changelog\n\nAll notable changes to `@greatstore/cli` are recorded here. The format\nfollows [Keep a Changelog](https://keepachangelog.com/).\n\n## 0.0.14 \u2014 2026-05-24\n\n### Changed\n- `gs build` output is now whitespace-minified. Vite's lib mode in `es` format only minifies identifiers / syntax and preserves all whitespace + `/* @__PURE__ */` annotations for downstream tree-shaking. Since the bundles are loaded directly by the browser at runtime (no downstream bundler), the CLI now post-processes each `bundle.js` with `esbuild.transform` to collapse whitespace and strip legal comments \u2014 typically ~50% smaller files, cheaper to host and faster to ship.\n\n## 0.0.13 \u2014 2026-05-24\n\n### Changed\n- `gs build` now prints a closing hint naming the next steps (`gs push`, then `gs publish <name>`) so AI assistants driving the CLI don't stop at \"built\" and leave the change unshipped.\n\n## 0.0.12 \u2014 2026-05-24\n\n### Fixed\n- `gs build` failed with `Error: build is not a function` because `require.resolve(\"vite\")` lands on Vite 5's deprecated CJS entry. The CLI now walks `vite/package.json#exports.import` to load the ESM build, and falls back to the CJS-default shape if a host package ships only CJS.\n\n## 0.0.11 \u2014 2026-05-24\n\n### Added\n- Multi-component projects: scaffold one root, then add N components under `components/<name>/`. `gs init` (no args) writes the project root; `gs init <name>` adds a component (auto-scaffolds the root if missing).\n- `gs build [<name>]` \u2014 compiles every `components/<name>/bundle.js` via the project's local Vite. Externals + runtime shim paths now live in the CLI, so future versions can adjust them without a re-scaffold.\n- `gs push` (no args) hashes each component against `.gssync.json` and uploads only the changed ones.\n- `gs pull` (no args, or `*`) batch-pulls every remote component. Components with uncommitted local edits are skipped with a warning; `--force` overwrites.\n- Public `CHANGELOG.md`. `gs --version` now prints the most recent entries.\n\n### Changed\n- A project folder ships to exactly one store. Only `gs init` accepts `--store`; every other command reads the slug from `.gsrc`. The legacy single-component layout is rejected with a migration hint.\n- `gs init` errors on a fresh root without `--store <slug>` (no placeholder slug is written). On an existing root, passing `--store` errors.\n- `gs init` no longer writes `build.mjs`. Scaffolded `package.json` scripts run `gs build`.\n\n## 0.0.10 \u2014 2026-05-23\n\n### Changed\n- The OAuth callback tab opened by `gs login` auto-closes once credentials are persisted.\n\n## 0.0.9 \u2014 2026-05-23\n\n### Changed\n- `gs init` scaffold writes a `displayName` into the generated manifest so the admin Builder UI has a friendlier label.\n\n## 0.0.8 \u2014 2026-05-23\n\n### Changed\n- `gs push` and `gs publish` print a permalink to the component's card in the admin Builder panel.\n\n## 0.0.6 \u2014 2026-05-23\n\n### Changed\n- `gs --version` reads the version from `cli/package.json` at build time so it can't drift from the published release.\n\n## 0.0.4 \u2014 2026-05-23\n\n### Changed\n- Scaffolded projects produce browser-ready bundles (React + runtime shim wired up).\n\n## 0.0.3 \u2014 2026-05-23\n\n### Changed\n- Trimmed public README to the essentials.\n\n## 0.0.2 \u2014 2026-05-23\n\n### Fixed\n- Read the nav OAuth callback parameter as `code` instead of `token`.\n" : "";
+var VERSION = true ? "0.0.16" : "0.0.0-dev";
+var CHANGELOG = true ? "# Changelog\n\nAll notable changes to `@greatstore/cli` are recorded here. The format\nfollows [Keep a Changelog](https://keepachangelog.com/).\n\n## 0.0.16 \u2014 2026-05-28\n\n### Changed\n- Simplified error messages.\n\n## 0.0.15 \u2014 2026-05-24\n\n### Added\n- Scaffolded `component.tsx` now declares the four injected lifecycle\n  props (`onSendMessage`, `onCallTool`, `onClose`, `onError`) on\n  `Props`. Use `onError(message)` to report expected failures (failed\n  fetch, host action rejected, invalid host state) so the AI can\n  recover on its next turn. Render-time crashes are reported for you.\n\n## 0.0.14 \u2014 2026-05-24\n\n### Changed\n- `gs build` output is now whitespace-minified \u2014 typically ~50% smaller.\n\n## 0.0.13 \u2014 2026-05-24\n\n### Changed\n- `gs build` prints the next-step hint (`gs push`, then `gs publish`).\n\n## 0.0.12 \u2014 2026-05-24\n\n### Fixed\n- `gs build` failing to load Vite in some setups.\n\n## 0.0.11 \u2014 2026-05-24\n\n### Added\n- Multi-component projects. `gs init` (no args) scaffolds the project\n  root; `gs init <name>` adds a component under `components/<name>/`.\n- `gs build [<name>]` \u2014 compiles every `components/<name>/bundle.js`.\n- `gs push` (no args) uploads only the components that changed.\n- `gs pull` (no args, or `*`) downloads every component. Locally\n  edited components are skipped; pass `--force` to overwrite.\n- Public `CHANGELOG.md`; `gs --version` prints recent entries.\n\n### Changed\n- A project folder ships to exactly one store. Only `gs init` accepts\n  `--store`; every other command reads the slug from `.gsrc`. The old\n  single-component layout is rejected with a migration hint.\n- `gs init` requires `--store <slug>` for a fresh root, and rejects\n  `--store` on an existing root.\n- `gs init` no longer writes `build.mjs` \u2014 scripts call `gs build`.\n\n## 0.0.10 \u2014 2026-05-23\n\n### Changed\n- The sign-in browser tab auto-closes once `gs login` finishes.\n\n## 0.0.9 \u2014 2026-05-23\n\n### Changed\n- Scaffolded manifests include a `displayName` so the admin UI has a\n  friendlier label.\n\n## 0.0.8 \u2014 2026-05-23\n\n### Changed\n- `gs push` and `gs publish` print a link to view the component.\n\n## 0.0.6 \u2014 2026-05-23\n\n### Changed\n- `gs --version` reads from the published package version.\n\n## 0.0.4 \u2014 2026-05-23\n\n### Changed\n- Scaffolded projects produce browser-ready bundles out of the box.\n\n## 0.0.3 \u2014 2026-05-23\n\n### Changed\n- Trimmed public README to the essentials.\n\n## 0.0.2 \u2014 2026-05-23\n\n### Fixed\n- Sign-in callback parameter handling.\n" : "";
 var HELP = `gs \u2014 GreatStore CLI (v${VERSION})
 
 Usage:
@@ -1529,12 +1547,8 @@ main().then((code) => process.exit(code)).catch((err) => {
     process.stderr.write(`${err.message}
 `);
   } else if (err instanceof HttpError) {
-    process.stderr.write(`Error (HTTP ${err.status}): ${err.message}
-`);
-    if (err.detail && err.detail !== err.message) {
-      process.stderr.write(`  ${err.detail}
+    process.stderr.write(`Error: ${err.message}
 `);
-    }
   } else if (err instanceof StoreResolutionError || err instanceof LoopbackError) {
     process.stderr.write(`Error: ${err.message}
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatstore/cli",
-  "version": "0.0.14",
+  "version": "0.0.16",
   "description": "CLI for authoring and shipping GreatStore custom components.",
   "license": "UNLICENSED",
   "type": "module",