@somewhere-tech/cli 0.27.4 → 0.27.6

package/dist/lib/init-scaffold.js

@@ -0,0 +1,52 @@
+import { existsSync, lstatSync, mkdirSync, readdirSync, writeFileSync, } from 'node:fs';
+import { dirname, relative, resolve } from 'node:path';
+const INIT_METADATA = new Set([
+    '.DS_Store',
+    '.git',
+    '.mcp.json',
+    '.somewhere.json',
+]);
+/**
+ * Rule-9 boundary for `somewhere init`: a new/empty directory receives the
+ * starter, while a directory containing application source keeps the original
+ * link-only behavior. Dotfiles count as source unless they are metadata the
+ * init command itself owns.
+ */
+export function canWriteInitScaffold(dir) {
+    if (!existsSync(dir))
+        return true;
+    return readdirSync(dir).every((name) => INIT_METADATA.has(name));
+}
+/**
+ * Write a complete template only after every path passes confinement and
+ * overwrite checks. No partial scaffold is written on a preflight failure.
+ */
+export function writeInitScaffold(dir, files) {
+    const root = resolve(dir);
+    const targets = new Map();
+    for (const file of files) {
+        const normalizedPath = file.path.replace(/\\/g, '/').replace(/^\/+/, '');
+        if (!normalizedPath || normalizedPath.endsWith('/')) {
+            throw new Error(`Invalid scaffold file path: ${file.path}`);
+        }
+        const target = resolve(root, normalizedPath);
+        const rel = relative(root, target);
+        if (rel.startsWith('..') || rel === '') {
+            throw new Error(`Scaffold file escapes the project directory: ${file.path}`);
+        }
+        if (targets.has(target)) {
+            throw new Error(`Duplicate scaffold file path: ${normalizedPath}`);
+        }
+        if (existsSync(target)) {
+            const kind = lstatSync(target).isDirectory() ? 'directory' : 'file';
+            throw new Error(`Refusing to overwrite existing ${kind}: ${normalizedPath}`);
+        }
+        targets.set(target, { path: normalizedPath, content: file.content });
+    }
+    for (const [target, file] of targets) {
+        mkdirSync(dirname(target), { recursive: true });
+        writeFileSync(target, file.content, { encoding: 'utf8', flag: 'wx' });
+    }
+    return { created: [...targets.values()].map(({ path }) => path) };
+}
+//# sourceMappingURL=init-scaffold.js.map

package/dist/lib/init-scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-scaffold.js","sourceRoot":"","sources":["../../src/lib/init-scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,WAAW;IACX,MAAM;IACN,WAAW;IACX,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,KAAkC;IAElC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6C,CAAC;IAErE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,KAAK,cAAc,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;AACpE,CAAC"}

package/dist/lib/init-template.js

@@ -0,0 +1,442 @@
+const PACKAGE_JSON = `{
+  "name": "somewhere-happy-path",
+  "private": true,
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@somewhere-tech/sdk": "^0.7.2",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "react-router-dom": "^7.9.5"
+  },
+  "devDependencies": {
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "@vitejs/plugin-react": "^5.1.0",
+    "typescript": "^5.9.3",
+    "vite": "^7.2.2"
+  }
+}
+`;
+const TSCONFIG = `{
+  "compilerOptions": {
+    "target": "ES2022",
+    "useDefineForClassFields": true,
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "allowJs": false,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "strict": true,
+    "forceConsistentCasingInFileNames": true,
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx"
+  },
+  "include": ["src", "api", "vite.config.ts"]
+}
+`;
+const RUNTIME_TYPES = `export interface AppUser {
+  id: string;
+  email?: string | null;
+  display_name?: string | null;
+}
+
+export interface Runtime {
+  auth: {
+    fromRequest(req: Request): Promise<AppUser | null>;
+  };
+  db: {
+    query<T>(
+      sql: string,
+      params?: unknown[],
+      options?: { user?: AppUser },
+    ): Promise<{ data: T[]; count: number; changes: number }>;
+  };
+  fs: {
+    uploadFromRequest(
+      req: Request,
+      options: {
+        path: string;
+        maxBytes?: number;
+        allowedTypes?: string[];
+        fieldName?: string;
+        public?: boolean;
+      },
+    ): Promise<{
+      url: string;
+      path: string;
+      size: number;
+      contentType: string;
+      visibility: 'private' | 'public';
+    }>;
+    setOwner(path: string, user: AppUser): Promise<unknown>;
+  };
+}
+`;
+const AUTH_FUNCTION = `import {
+  somewhereAuth,
+  type SwAuthNamespace,
+} from '@somewhere-tech/sdk/server';
+
+export default function auth(req: Request, sw: SwAuthNamespace): Promise<Response> {
+  return somewhereAuth(req, sw);
+}
+`;
+const DATA_FUNCTION = `import type { Runtime } from './_lib/runtime';
+
+interface GreetingRow {
+  user_id: string;
+  message: string;
+}
+
+// Source of truth: worker/src/runtime/auth.ts:728 (fromRequest) and
+// worker/src/runtime/db.ts:1653 (query). Browser code never receives SQL or a
+// database connection; it calls this same-origin function.
+export default async function data(req: Request, sw: Runtime): Promise<Response> {
+  const user = await sw.auth.fromRequest(req);
+  if (!user) return Response.json({ error: 'UNAUTHORIZED' }, { status: 401 });
+
+  const result = await sw.db.query<GreetingRow>(
+    'SELECT ? AS user_id, ? AS message',
+    [user.id, 'Your database call ran server-side.'],
+  );
+  return Response.json({ greeting: result.data[0] ?? null });
+}
+`;
+const UPLOAD_FUNCTION = `import type { Runtime } from './_lib/runtime';
+
+// Source of truth: worker/src/runtime/auth.ts:728 (fromRequest) and
+// worker/src/runtime/fs.ts:207 (uploadFromRequest). Files are private by
+// default; the returned URL is short-lived, and ownership is assigned here.
+export default async function upload(req: Request, sw: Runtime): Promise<Response> {
+  const user = await sw.auth.fromRequest(req);
+  if (!user) return Response.json({ error: 'UNAUTHORIZED' }, { status: 401 });
+  if (req.method !== 'POST') {
+    return Response.json({ error: 'METHOD_NOT_ALLOWED' }, { status: 405 });
+  }
+
+  const uploaded = await sw.fs.uploadFromRequest(req, {
+    path: \`/uploads/\${user.id}/\${crypto.randomUUID()}\`,
+    fieldName: 'file',
+    maxBytes: 10 * 1024 * 1024,
+    allowedTypes: ['image/jpeg', 'image/png', 'application/pdf', 'text/plain'],
+  });
+  await sw.fs.setOwner(uploaded.path, user);
+  return Response.json({ file: uploaded });
+}
+`;
+const APP_TYPES = `export interface ServerGreeting {
+  user_id: string;
+  message: string;
+}
+
+export interface UploadResult {
+  url: string;
+  path: string;
+  size: number;
+  contentType: string;
+  visibility: 'private' | 'public';
+}
+`;
+const AUTH_SERVICE = `import {
+  createSomewhereAuth,
+  type SomewhereAuth,
+} from '@somewhere-tech/sdk/auth';
+import type { ServerGreeting, UploadResult } from '../types/app';
+
+export const authClient = createSomewhereAuth();
+
+export function signIn(
+  auth: SomewhereAuth,
+  email: string,
+  password: string,
+) {
+  return auth.signIn({ email, password });
+}
+
+export function signUp(
+  auth: SomewhereAuth,
+  email: string,
+  password: string,
+) {
+  return auth.signUp({ email, password });
+}
+
+export function signOut(auth: SomewhereAuth) {
+  return auth.signOut();
+}
+
+export async function startGoogleSignIn(auth: SomewhereAuth): Promise<void> {
+  window.location.assign(await auth.googleSignInUrl({
+    redirectUri: window.location.origin + '/auth/callback',
+  }));
+}
+
+async function requireOk(response: Response): Promise<Response> {
+  if (response.ok) return response;
+  const value = await response.json().catch(() => ({})) as { message?: string };
+  throw new Error(value.message ?? \`Request failed (\${response.status})\`);
+}
+
+export async function loadServerGreeting(
+  auth: SomewhereAuth,
+): Promise<ServerGreeting> {
+  const response = await requireOk(await auth.fetch('/api/data'));
+  const value = await response.json() as { greeting: ServerGreeting };
+  return value.greeting;
+}
+
+export async function uploadFile(
+  auth: SomewhereAuth,
+  file: File,
+): Promise<UploadResult> {
+  const form = new FormData();
+  form.set('file', file);
+  const response = await requireOk(await auth.fetch('/api/upload', {
+    method: 'POST',
+    body: form,
+  }));
+  const value = await response.json() as { file: UploadResult };
+  return value.file;
+}
+`;
+const HOME_PAGE = `import {
+  useState,
+  type ChangeEvent,
+  type FormEvent,
+} from 'react';
+import {
+  SignedIn,
+  SignedOut,
+  useAuth,
+  useUser,
+} from '@somewhere-tech/sdk/react';
+import {
+  loadServerGreeting,
+  signIn,
+  signOut,
+  signUp,
+  startGoogleSignIn,
+  uploadFile,
+} from '../services/app';
+
+export function HomePage() {
+  return (
+    <main>
+      <header>
+        <p className="eyebrow">somewhere.tech happy path</p>
+        <h1>One secure app, already wired.</h1>
+        <p>SDK auth, server-side data, private file uploads, and raw-source deploy.</p>
+      </header>
+      <SignedOut><AuthForm /></SignedOut>
+      <SignedIn><Workspace /></SignedIn>
+    </main>
+  );
+}
+
+function AuthForm() {
+  const auth = useAuth();
+  const [email, setEmail] = useState('');
+  const [password, setPassword] = useState('');
+  const [message, setMessage] = useState('');
+
+  async function submit(create: boolean) {
+    setMessage('');
+    try {
+      await (create ? signUp(auth, email, password) : signIn(auth, email, password));
+    } catch (error) {
+      setMessage(error instanceof Error ? error.message : String(error));
+    }
+  }
+
+  return (
+    <section className="panel">
+      <form onSubmit={(event: FormEvent<HTMLFormElement>) => {
+        event.preventDefault();
+        void submit(false);
+      }}>
+        <label>Email<input type="email" value={email} onChange={(event: ChangeEvent<HTMLInputElement>) => setEmail(event.target.value)} required /></label>
+        <label>Password<input type="password" value={password} onChange={(event: ChangeEvent<HTMLInputElement>) => setPassword(event.target.value)} minLength={8} required /></label>
+        <div className="actions">
+          <button type="submit">Sign in</button>
+          <button type="button" className="secondary" onClick={() => void submit(true)}>Create account</button>
+        </div>
+      </form>
+      <button className="google" onClick={() => void startGoogleSignIn(auth)}>Continue with Google</button>
+      {message && <p className="message">{message}</p>}
+    </section>
+  );
+}
+
+function Workspace() {
+  const auth = useAuth();
+  const user = useUser();
+  const [message, setMessage] = useState('Ready.');
+
+  return (
+    <section className="panel">
+      <p>Signed in as <strong>{user?.email ?? user?.id}</strong></p>
+      <div className="actions">
+        <button onClick={() => void loadServerGreeting(auth).then((value) => setMessage(value.message)).catch((error: unknown) => setMessage(String(error)))}>
+          Run server data example
+        </button>
+        <label className="upload">
+          Upload a private file
+          <input type="file" onChange={(event: ChangeEvent<HTMLInputElement>) => {
+            const file = event.target.files?.[0];
+            if (file) void uploadFile(auth, file).then((value) => setMessage(\`Uploaded \${value.path}\`)).catch((error: unknown) => setMessage(String(error)));
+          }} />
+        </label>
+        <button className="secondary" onClick={() => void signOut(auth)}>Sign out</button>
+      </div>
+      <p className="message">{message}</p>
+    </section>
+  );
+}
+`;
+const APP = `import { AuthCallback } from '@somewhere-tech/sdk/react';
+import { BrowserRouter, Route, Routes } from 'react-router-dom';
+import { HomePage } from './pages/HomePage';
+
+export function App() {
+  return (
+    <BrowserRouter>
+      <Routes>
+        <Route path="/auth/callback" element={<AuthCallback provider="google" />} />
+        <Route path="*" element={<HomePage />} />
+      </Routes>
+    </BrowserRouter>
+  );
+}
+`;
+const MAIN = `import { StrictMode } from 'react';
+import { createRoot } from 'react-dom/client';
+import { SomewhereAuthProvider } from '@somewhere-tech/sdk/react';
+import { App } from './App';
+import { authClient } from './services/app';
+import './styles.css';
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <SomewhereAuthProvider client={authClient}>
+      <App />
+    </SomewhereAuthProvider>
+  </StrictMode>,
+);
+`;
+const STYLES = `:root {
+  font-family: Inter, ui-sans-serif, system-ui, sans-serif;
+  color: #15201c;
+  background: #edf4ef;
+}
+
+* { box-sizing: border-box; }
+body { margin: 0; min-width: 320px; }
+button, input { font: inherit; }
+main { width: min(760px, calc(100% - 32px)); margin: 12vh auto; }
+header { margin-bottom: 32px; }
+h1 { max-width: 620px; margin: 8px 0; font-size: clamp(2.5rem, 8vw, 5rem); line-height: .95; letter-spacing: -.06em; }
+.eyebrow { color: #14734c; font-weight: 750; text-transform: uppercase; letter-spacing: .12em; }
+.panel { padding: 28px; border: 1px solid #c6d8ce; border-radius: 22px; background: rgba(255,255,255,.82); box-shadow: 0 20px 60px rgba(21,32,28,.08); }
+form, label { display: grid; gap: 8px; }
+form { gap: 18px; }
+input { width: 100%; padding: 12px 14px; border: 1px solid #b8c9c0; border-radius: 10px; background: white; }
+.actions { display: flex; flex-wrap: wrap; gap: 10px; margin-top: 18px; }
+button, .upload { padding: 12px 16px; border: 0; border-radius: 999px; background: #14734c; color: white; cursor: pointer; font-weight: 700; }
+.secondary { background: #dce9e1; color: #18382b; }
+.google { width: 100%; margin-top: 12px; background: #17231e; }
+.upload input { display: none; }
+.message { margin-top: 20px; color: #385548; }
+`;
+const AGENT_GUIDE = `# somewhere.tech project contract
+
+This starter is intentionally the one happy path:
+
+## Auth
+
+Auth is handled by \`@somewhere-tech/sdk\` — use its client and hooks.
+
+## Data, files, and deploy
+
+- Browser data and file calls go to \`api/*\`. Only those server functions call
+  \`sw.db\` and \`sw.fs\`; do not move SQL or platform calls into \`src/\`.
+- Deploy raw source from this directory with \`somewhere deploy\`. Do not run a
+  build first and never deploy \`dist/\` or \`build/\`; the platform compiles
+  TypeScript, TSX, CSS, and imports.
+
+Safe loop:
+
+\`\`\`sh
+npm install
+npm run typecheck
+somewhere deploy-check
+somewhere deploy
+\`\`\`
+
+Runtime citations for the server data and files examples:
+
+- \`worker/src/runtime/db.ts:1653\` query
+- \`worker/src/runtime/fs.ts:207\` uploadFromRequest
+`;
+const README = `# somewhere.tech starter
+
+One narrow production architecture is already wired:
+
+## Auth
+
+Auth is handled by \`@somewhere-tech/sdk\` — use its client and hooks.
+
+## Data and files
+
+- authenticated data through a server function using \`sw.db\`;
+- private file upload through a server function using \`sw.fs\`;
+
+## Run
+
+\`\`\`sh
+npm install
+npm run dev
+npm run typecheck
+somewhere deploy-check
+somewhere deploy
+\`\`\`
+
+Deploy the raw source. There is intentionally no build script.
+`;
+export function createHappyPathTemplate() {
+    return [
+        { path: '.gitignore', content: 'node_modules\\ndist\\nbuild\\n.env\\n' },
+        { path: 'AGENTS.md', content: AGENT_GUIDE },
+        { path: 'CLAUDE.md', content: AGENT_GUIDE },
+        { path: 'README.md', content: README },
+        { path: 'package.json', content: PACKAGE_JSON },
+        { path: 'tsconfig.json', content: TSCONFIG },
+        {
+            path: 'vite.config.ts',
+            content: `import { defineConfig } from 'vite';\nimport react from '@vitejs/plugin-react';\n\nexport default defineConfig({ plugins: [react()] });\n`,
+        },
+        {
+            path: 'index.html',
+            content: `<!doctype html>\n<html lang="en">\n  <head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /><title>somewhere.tech starter</title></head>\n  <body><div id="root"></div><script type="module" src="/src/main.tsx"></script></body>\n</html>\n`,
+        },
+        { path: 'api/_lib/runtime.ts', content: RUNTIME_TYPES },
+        { path: 'api/auth/[...path].ts', content: AUTH_FUNCTION },
+        { path: 'api/data.ts', content: DATA_FUNCTION },
+        { path: 'api/upload.ts', content: UPLOAD_FUNCTION },
+        { path: 'src/types/app.ts', content: APP_TYPES },
+        { path: 'src/services/app.ts', content: AUTH_SERVICE },
+        { path: 'src/pages/HomePage.tsx', content: HOME_PAGE },
+        { path: 'src/App.tsx', content: APP },
+        { path: 'src/main.tsx', content: MAIN },
+        { path: 'src/styles.css', content: STYLES },
+    ];
+}
+//# sourceMappingURL=init-template.js.map

package/dist/lib/init-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-template.js","sourceRoot":"","sources":["../../src/lib/init-template.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBpB,CAAC;AAEF,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;CAoBhB,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCrB,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;;CAQrB,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;CAoBrB,CAAC;AAEF,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBvB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;;;;;CAYjB,CAAC;AAEF,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6DpB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6FjB,CAAC;AAEF,MAAM,GAAG,GAAG;;;;;;;;;;;;;;CAcX,CAAC;AAEF,MAAM,IAAI,GAAG;;;;;;;;;;;;;;CAcZ,CAAC;AAEF,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBd,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BnB,CAAC;AAEF,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBd,CAAC;AAEF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,uCAAuC,EAAE;QACxE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;QAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;QAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;QACtC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE;QAC/C,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE;QAC5C;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,2IAA2I;SACrJ;QACD;YACE,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,6RAA6R;SACvS;QACD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,aAAa,EAAE;QACvD,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,aAAa,EAAE;QACzD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE;QAC/C,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE;QACnD,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE;QAChD,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,YAAY,EAAE;QACtD,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,SAAS,EAAE;QACtD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE;QACrC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE;QACvC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE;KAC5C,CAAC;AACJ,CAAC"}

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@somewhere-tech/cli",
-  "version": "0.27.4",
+  "version": "0.27.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@somewhere-tech/cli",
-      "version": "0.27.4",
+      "version": "0.27.6",
       "bundleDependencies": [
         "@modelcontextprotocol/sdk",
         "chokidar",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@somewhere-tech/cli",
-  "version": "0.27.4",
-  "description": "CLI for somewhere.tech — auth, projects, deploy, pull, promote, db, logs, env, MCP bridge.",
+  "version": "0.27.6",
+  "description": "CLI for somewhere.tech \u2014 auth, projects, deploy, pull, promote, db, logs, env, MCP bridge.",
   "keywords": [
     "somewhere",
     "somewhere.tech",

package/dist/lib/client-hint.js

@@ -1,30 +0,0 @@
-import { readFileSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-export function detectAgentOrigin(env) {
-    if (env.CLAUDECODE || env.CLAUDE_CODE_ENTRYPOINT)
-        return 'claude-code';
-    if (env.CURSOR_TRACE_ID || env.CURSOR_AGENT)
-        return 'cursor';
-    if (Object.keys(env).some((key) => key.startsWith('CODEX_')))
-        return 'codex';
-    return null;
-}
-function currentVersion() {
-    try {
-        const pkg = JSON.parse(readFileSync(join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'package.json'), 'utf8'));
-        return typeof pkg.version === 'string' && /^[0-9A-Za-z.+_-]+$/.test(pkg.version)
-            ? pkg.version
-            : 'unknown';
-    }
-    catch {
-        return 'unknown';
-    }
-}
-/** Privacy-limited client hint: only CLI version plus a detected agent name.
- *  Environment variable values are never transmitted. */
-export function buildClientHint(env = process.env, version = currentVersion()) {
-    const agent = detectAgentOrigin(env);
-    return `cli/${version}${agent ? `+${agent}` : ''}`;
-}
-//# sourceMappingURL=client-hint.js.map

package/dist/lib/client-hint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-hint.js","sourceRoot":"","sources":["../../src/lib/client-hint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,sBAAsB;QAAE,OAAO,aAAa,CAAC;IACvE,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACvE,CAAC;QAC3B,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAC9E,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,eAAe,CAC7B,MAAyB,OAAO,CAAC,GAAG,EACpC,OAAO,GAAG,cAAc,EAAE;IAE1B,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACrD,CAAC"}

package/dist/lib/pinned-release-retry.js

@@ -1,36 +0,0 @@
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-function requiredBaseReleaseId(error) {
-    if (!isRecord(error) ||
-        error.statusCode !== 400 ||
-        error.code !== 'BASE_RELEASE_REQUIRED' ||
-        !isRecord(error.data)) {
-        return null;
-    }
-    const activeReleaseId = error.data.active_release_id;
-    return typeof activeReleaseId === 'string' && activeReleaseId.trim().length > 0
-        ? activeReleaseId
-        : null;
-}
-export function pinnedReleaseRetryBody(error, body) {
-    const activeReleaseId = requiredBaseReleaseId(error);
-    return activeReleaseId === null
-        ? null
-        : { ...body, base_release_id: activeReleaseId };
-}
-export async function callWithPinnedReleaseRetry(request, body) {
-    try {
-        return await request(body);
-    }
-    catch (error) {
-        const retryBody = pinnedReleaseRetryBody(error, body);
-        if (retryBody === null)
-            throw error;
-        // Safe to retry once: this is the base the worker just declared current. If
-        // another publish lands first, its CAS returns STALE_RELEASE_BASE rather than
-        // double-applying the edit, preserving the protection this field provides.
-        return request(retryBody);
-    }
-}
-//# sourceMappingURL=pinned-release-retry.js.map

package/dist/lib/pinned-release-retry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-release-retry.js","sourceRoot":"","sources":["../../src/lib/pinned-release-retry.ts"],"names":[],"mappings":"AAAA,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,UAAU,KAAK,GAAG;QACxB,KAAK,CAAC,IAAI,KAAK,uBAAuB;QACtC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EACrB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACrD,OAAO,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC7E,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,IAA6B;IAE7B,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,eAAe,KAAK,IAAI;QAC7B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAsD,EACtD,IAA6B;IAE7B,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC;QAEpC,4EAA4E;QAC5E,8EAA8E;QAC9E,2EAA2E;QAC3E,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}