@lotics/cli 0.33.0 → 0.35.0

package/dist/app_commands.d.ts

@@ -86,6 +86,15 @@ export declare function appCreate(client: LoticsClient, args: {
 export declare function appSetSubdomain(client: LoticsClient, args: {
     subdomain: string;
 }): Promise<void>;
+/**
+ * `lotics app rename <name>` — change the current app's display name (the
+ * launcher/title shown in the workspace). The app_id comes from the local
+ * `package.json` manifest. Wraps the `update_app` tool — the public address
+ * (`lotics app subdomain`) and the code (`lotics app deploy`) are unchanged.
+ */
+export declare function appRename(client: LoticsClient, args: {
+    name: string;
+}): Promise<void>;
 export declare function appPull(client: LoticsClient, args: {
     app_id: string;
     targetPath?: string;

package/dist/app_commands.js

@@ -238,6 +238,19 @@ export async function appSetSubdomain(client, args) {
     const result = await client.setAppSubdomain(meta.app_id, args.subdomain);
     console.error(`Public address set: https://${result.public_subdomain}.lotics.app`);
 }
+/**
+ * `lotics app rename <name>` — change the current app's display name (the
+ * launcher/title shown in the workspace). The app_id comes from the local
+ * `package.json` manifest. Wraps the `update_app` tool — the public address
+ * (`lotics app subdomain`) and the code (`lotics app deploy`) are unchanged.
+ */
+export async function appRename(client, args) {
+    const meta = readAppMeta(process.cwd());
+    const res = await client.execute("update_app", { app_id: meta.app_id, name: args.name });
+    if (res.error)
+        throw new Error(res.error);
+    console.error(`App renamed: "${args.name}" (${meta.app_id})`);
+}
 export async function appPull(client, args) {
     const app = await client.getApp(args.app_id);
     if (!app.current_version_id) {

package/dist/cli.js

@@ -5,7 +5,7 @@ import readline from "node:readline";
 import { LoticsClient, API_BASE_URL } from "./client.js";
 import { resolveAuth, loadConfig, saveConfig, deleteConfig, getConfigPath, checkForUpdate } from "./config.js";
 import { VERSION } from "./version.js";
-import { appCreate, appPull, appDeploy, appDev, appSetSubdomain } from "./app_commands.js";
+import { appCreate, appPull, appDeploy, appDev, appSetSubdomain, appRename } from "./app_commands.js";
 import { parseArgs } from "./args.js";
 import { runXlsxCommand } from "./xlsx.js";
 import { runDocxCommand } from "./docx.js";
@@ -54,6 +54,7 @@ COMMANDS
                                        (--force-workflow-sync wipes server-only
                                        workflow aliases; default refuses)
   lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address
+  lotics app rename "<new name>"       Rename the app's display name (launcher title)
   lotics app dev [path]                Run the app locally with HMR (RPC forwarded to prod)
   lotics xlsx <subcommand> ...         Read/write/edit .xlsx files on your local filesystem
                                        (uses the bundled Lotics xlsx engine; prefer over
@@ -378,6 +379,7 @@ async function main() {
         console.error("  lotics app deploy [-m <message>] [--force-workflow-sync]");
         console.error("                                       Build + upload the current directory");
         console.error("  lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address");
+        console.error("  lotics app rename \"<new name>\"        Rename the app's display name (launcher title)");
         console.error("  lotics app dev [path]                Run the app locally with HMR + RPC forwarding");
         process.exit(1);
     }
@@ -510,6 +512,16 @@ async function main() {
             await appSetSubdomain(client, { subdomain: newSubdomain });
             return;
         }
+        if (subcommand === "rename") {
+            const newName = toolArgs;
+            if (!newName) {
+                console.error('Usage: lotics app rename "<new name>"');
+                console.error("Changes the app's display name (run inside the app directory).");
+                process.exit(1);
+            }
+            await appRename(client, { name: newName });
+            return;
+        }
         if (subcommand === "dev") {
             // First positional is an optional project path (defaults to cwd).
             // --port and --vite-port can override the wrapper / Vite ports.

package/dist/client.js

@@ -262,10 +262,15 @@ export class LoticsClient {
         return absolutePath;
     }
     async downloadFileById(fileId, outputDir, options) {
-        const url = `${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/download`;
-        const response = await fetch(url, {
-            headers: this.buildHeaders(),
-        });
+        // Resolve a presigned URL (the file proxy is auth-gated and served by an
+        // edge Worker that doesn't accept the API key). The signed_url endpoint
+        // takes the API key and returns a short-lived, directly-fetchable URL
+        // whose Content-Disposition carries the original filename.
+        const signedUrlRes = await fetch(`${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/signed_url`, { headers: this.buildHeaders() });
+        if (!signedUrlRes.ok)
+            await this.throwResponseError(signedUrlRes);
+        const { url } = (await signedUrlRes.json());
+        const response = await fetch(url);
         if (!response.ok)
             await this.throwResponseError(response);
         const disposition = response.headers.get("content-disposition") ?? "";

package/dist/dev/wrapper_page.d.ts

@@ -3,10 +3,12 @@
  *
  * The wrapper page is served at http://localhost:<port>/ and embeds the
  * project's Vite dev server in an iframe with the same
- * sandbox="allow-scripts allow-same-origin" attribute production uses —
- * safe because the Vite iframe is cross-origin to this wrapper (different
- * port), so the app gets its own real origin (and Web Storage) without
- * being able to reach the wrapper. The iframe sends postMessage RPCs to
+ * sandbox="allow-scripts allow-same-origin allow-downloads" attribute
+ * production uses — safe because the Vite iframe is cross-origin to this
+ * wrapper (different port), so the app gets its own real origin (and Web
+ * Storage) without being able to reach the wrapper. `allow-downloads` lets
+ * apps trigger file downloads (generated xlsx / pdf etc.) — Chrome blocks
+ * every download path from sandboxed iframes without it. The iframe sends postMessage RPCs to
  * this wrapper, which forwards them to the local /_rpc endpoint, which
  * dispatches to api.lotics.ai with the CLI's API key.
  *

package/dist/dev/wrapper_page.js

@@ -3,10 +3,12 @@
  *
  * The wrapper page is served at http://localhost:<port>/ and embeds the
  * project's Vite dev server in an iframe with the same
- * sandbox="allow-scripts allow-same-origin" attribute production uses —
- * safe because the Vite iframe is cross-origin to this wrapper (different
- * port), so the app gets its own real origin (and Web Storage) without
- * being able to reach the wrapper. The iframe sends postMessage RPCs to
+ * sandbox="allow-scripts allow-same-origin allow-downloads" attribute
+ * production uses — safe because the Vite iframe is cross-origin to this
+ * wrapper (different port), so the app gets its own real origin (and Web
+ * Storage) without being able to reach the wrapper. `allow-downloads` lets
+ * apps trigger file downloads (generated xlsx / pdf etc.) — Chrome blocks
+ * every download path from sandboxed iframes without it. The iframe sends postMessage RPCs to
  * this wrapper, which forwards them to the local /_rpc endpoint, which
  * dispatches to api.lotics.ai with the CLI's API key.
  *
@@ -58,7 +60,7 @@ export function buildWrapperPage(args) {
     <span>workspace <code>${escapeHtml(workspace_id)}</code></span>
     <span>RPC → <code>${escapeHtml(api_url)}</code></span>
   </header>
-  <iframe id="app" sandbox="allow-scripts allow-same-origin" allow="clipboard-write"></iframe>
+  <iframe id="app" sandbox="allow-scripts allow-same-origin allow-downloads" allow="clipboard-write"></iframe>
   <script>
     (function () {
       const APP_ID = ${JSON.stringify(app_id)};

package/dist/src/cli.js

@@ -31504,10 +31504,13 @@ var LoticsClient = class {
     return absolutePath;
   }
   async downloadFileById(fileId, outputDir, options) {
-    const url = `${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/download`;
-    const response = await fetch(url, {
-      headers: this.buildHeaders()
-    });
+    const signedUrlRes = await fetch(
+      `${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/signed_url`,
+      { headers: this.buildHeaders() }
+    );
+    if (!signedUrlRes.ok) await this.throwResponseError(signedUrlRes);
+    const { url } = await signedUrlRes.json();
+    const response = await fetch(url);
     if (!response.ok) await this.throwResponseError(response);
     const disposition = response.headers.get("content-disposition") ?? "";
     const match = disposition.match(/filename="?([^";\n]+)"?/);
@@ -31678,7 +31681,7 @@ import { tmpdir } from "node:os";
 
 // src/starter_template.ts
 var STARTER_FALLBACK_UI_VERSION = "1.8.0";
-var STARTER_FALLBACK_SDK_VERSION = "0.9.0";
+var STARTER_FALLBACK_SDK_VERSION = "0.11.0";
 function buildStarterTemplate(args) {
   const uiVersion = args.ui_version ?? `^${STARTER_FALLBACK_UI_VERSION}`;
   const sdkVersion = args.sdk_version ?? `^${STARTER_FALLBACK_SDK_VERSION}`;
@@ -32217,7 +32220,7 @@ function buildWrapperPage(args) {
     <span>workspace <code>${escapeHtml2(workspace_id)}</code></span>
     <span>RPC \u2192 <code>${escapeHtml2(api_url)}</code></span>
   </header>
-  <iframe id="app" sandbox="allow-scripts allow-same-origin" allow="clipboard-write"></iframe>
+  <iframe id="app" sandbox="allow-scripts allow-same-origin allow-downloads" allow="clipboard-write"></iframe>
   <script>
     (function () {
       const APP_ID = ${JSON.stringify(app_id)};
@@ -32773,6 +32776,12 @@ async function appSetSubdomain(client, args) {
   const result = await client.setAppSubdomain(meta.app_id, args.subdomain);
   console.error(`Public address set: https://${result.public_subdomain}.lotics.app`);
 }
+async function appRename(client, args) {
+  const meta = readAppMeta(process.cwd());
+  const res = await client.execute("update_app", { app_id: meta.app_id, name: args.name });
+  if (res.error) throw new Error(res.error);
+  console.error(`App renamed: "${args.name}" (${meta.app_id})`);
+}
 async function appPull(client, args) {
   const app = await client.getApp(args.app_id);
   if (!app.current_version_id) {
@@ -46334,6 +46343,7 @@ COMMANDS
                                        (--force-workflow-sync wipes server-only
                                        workflow aliases; default refuses)
   lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address
+  lotics app rename "<new name>"       Rename the app's display name (launcher title)
   lotics app dev [path]                Run the app locally with HMR (RPC forwarded to prod)
   lotics xlsx <subcommand> ...         Read/write/edit .xlsx files on your local filesystem
                                        (uses the bundled Lotics xlsx engine; prefer over
@@ -46642,6 +46652,7 @@ async function main() {
     console.error("  lotics app deploy [-m <message>] [--force-workflow-sync]");
     console.error("                                       Build + upload the current directory");
     console.error("  lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address");
+    console.error(`  lotics app rename "<new name>"        Rename the app's display name (launcher title)`);
     console.error("  lotics app dev [path]                Run the app locally with HMR + RPC forwarding");
     process.exit(1);
   }
@@ -46766,6 +46777,16 @@ Available workspaces:`);
       await appSetSubdomain(client, { subdomain: newSubdomain });
       return;
     }
+    if (subcommand === "rename") {
+      const newName = toolArgs;
+      if (!newName) {
+        console.error('Usage: lotics app rename "<new name>"');
+        console.error("Changes the app's display name (run inside the app directory).");
+        process.exit(1);
+      }
+      await appRename(client, { name: newName });
+      return;
+    }
     if (subcommand === "dev") {
       const projectDir = toolArgs;
       let port;

package/dist/starter_template.d.ts

@@ -40,7 +40,7 @@ export interface StarterFile {
  * fall back here when the lookup fails.
  */
 export declare const STARTER_FALLBACK_UI_VERSION = "1.8.0";
-export declare const STARTER_FALLBACK_SDK_VERSION = "0.9.0";
+export declare const STARTER_FALLBACK_SDK_VERSION = "0.11.0";
 export declare function buildStarterTemplate(args: {
     app_name: string;
     app_id: string;

package/dist/starter_template.js

@@ -36,7 +36,7 @@
  * fall back here when the lookup fails.
  */
 export const STARTER_FALLBACK_UI_VERSION = "1.8.0";
-export const STARTER_FALLBACK_SDK_VERSION = "0.9.0";
+export const STARTER_FALLBACK_SDK_VERSION = "0.11.0";
 export function buildStarterTemplate(args) {
     const uiVersion = args.ui_version ?? `^${STARTER_FALLBACK_UI_VERSION}`;
     const sdkVersion = args.sdk_version ?? `^${STARTER_FALLBACK_SDK_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {