@swell/cli 2.4.0 → 2.5.0

package/dist/commands/api/delete.d.ts

@@ -8,6 +8,7 @@ export default class ApiDelete extends SwellApiCommand {
     };
     static flags: {
         live: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+        api: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     static examples: string[];
     get method(): HttpMethod;

package/dist/commands/api/delete.js

@@ -3,7 +3,8 @@ import { HttpMethod } from '../../lib/api.js';
 import { SwellApiCommand } from '../../swell-api-command.js';
 export default class ApiDelete extends SwellApiCommand {
     static summary = 'Send a DELETE request to the Swell API.';
-    static description = 'Remove existing resources from the Swell Backend API.';
+    static description = `Remove existing resources from the Swell API.
+    Use --api frontend for public key authentication scoped to your app or user.`;
     static args = {
         path: Args.string({
             description: 'API endpoint path (must start with /)',
@@ -15,10 +16,16 @@ export default class ApiDelete extends SwellApiCommand {
             description: 'Use live environment instead of test',
             default: false,
         }),
+        api: Flags.string({
+            description: 'Use frontend or backend API (frontend uses public key auth).',
+            options: ['backend', 'frontend'],
+            default: 'backend',
+        }),
     };
     static examples = [
         'swell api delete /products/abc123',
         'swell api delete /functions/my-app/clear-cache',
+        'swell api delete /products/abc123 --api frontend',
     ];
     get method() {
         return HttpMethod.DELETE;

package/dist/commands/api/get.d.ts

@@ -8,6 +8,7 @@ export default class ApiGet extends SwellApiCommand {
     };
     static flags: {
         live: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+        api: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     static examples: string[];
     get method(): HttpMethod;

package/dist/commands/api/get.js

@@ -3,8 +3,9 @@ import { HttpMethod } from '../../lib/api.js';
 import { SwellApiCommand } from '../../swell-api-command.js';
 export default class ApiGet extends SwellApiCommand {
     static summary = 'Send a GET request to the Swell API.';
-    static description = `Retrieve data from the Swell Backend API.
-  The command performs a GET request to the specified endpoint path.`;
+    static description = `Retrieve data from the Swell API.
+    The command performs a GET request to the specified endpoint path.
+    Use --api frontend for public key authentication scoped to your app or user.`;
     static args = {
         path: Args.string({
             description: 'API endpoint path (must start with /)',
@@ -16,12 +17,18 @@ export default class ApiGet extends SwellApiCommand {
             description: 'Use live environment instead of test',
             default: false,
         }),
+        api: Flags.string({
+            description: 'Use frontend or backend API (frontend uses public key auth).',
+            options: ['backend', 'frontend'],
+            default: 'backend',
+        }),
     };
     static examples = [
         'swell api get /products',
         'swell api get "/products?limit=10&category=shoes"',
         'swell api get /products/abc123',
         'swell api get /functions/my-app/get-inventory',
+        'swell api get /products --api frontend',
     ];
     get method() {
         return HttpMethod.GET;

package/dist/commands/api/index.js

@@ -2,8 +2,9 @@ import { Command } from '@oclif/core';
 export default class Api extends Command {
     static summary = 'Send requests directly to the Swell Backend API.';
     static description = `Run Swell API requests directly from the command line.
-  Supports GET, POST, PUT, and DELETE methods with optional test/live environments.
-  Call app functions via /functions/<app_id>/<function_name> paths.`;
+    Supports GET, POST, PUT, and DELETE methods with optional test/live environments.
+    Use --api frontend for public key authentication via the frontend API.
+    Call app functions via /functions/<app_id>/<function_name> paths.`;
     static examples = [
         'swell api get /products',
         'swell api post /products --body \'{"name":"New product"}\'',
@@ -11,6 +12,7 @@ export default class Api extends Command {
         'swell api delete /products/abc123',
         'swell api get /functions/my-app/get-inventory',
         'swell api post /functions/my-app/create-order --body \'{"items":["sku-1"]}\'',
+        'swell api get /products --api frontend',
     ];
     async run() {
         this.log('Use "swell api get|post|put|delete" to interact with the Swell API.');

package/dist/commands/api/post.d.ts

@@ -9,6 +9,7 @@ export default class ApiPost extends SwellApiCommand {
     static flags: {
         body: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         live: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+        api: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     static examples: string[];
     get method(): HttpMethod;

package/dist/commands/api/post.js

@@ -3,8 +3,9 @@ import { HttpMethod } from '../../lib/api.js';
 import { SwellApiCommand } from '../../swell-api-command.js';
 export default class ApiPost extends SwellApiCommand {
     static summary = 'Send a POST request to the Swell API.';
-    static description = `Create new resources in the Swell Backend API.
-  You can provide a JSON body directly or specify a file path containing JSON data.`;
+    static description = `Create new resources in the Swell API.
+    You can provide a JSON body directly or specify a file path containing JSON data.
+    Use --api frontend for public key authentication scoped to your app or user.`;
     static args = {
         path: Args.string({
             description: 'API endpoint path (must start with /)',
@@ -19,11 +20,17 @@ export default class ApiPost extends SwellApiCommand {
             description: 'Use live environment instead of test',
             default: false,
         }),
+        api: Flags.string({
+            description: 'Use frontend or backend API (frontend uses public key auth).',
+            options: ['backend', 'frontend'],
+            default: 'backend',
+        }),
     };
     static examples = [
         'swell api post /products --body \'{"name": "Product", "price": 100}\'',
         'swell api post /products --body ./product.json',
         'swell api post /functions/my-app/create-order --body \'{"items":["sku-1"]}\'',
+        `swell api post /products --body '{"name": "Product"}' --api frontend`,
     ];
     get method() {
         return HttpMethod.POST;

package/dist/commands/api/put.d.ts

@@ -9,6 +9,7 @@ export default class ApiPut extends SwellApiCommand {
     static flags: {
         body: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         live: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+        api: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     static examples: string[];
     get method(): HttpMethod;

package/dist/commands/api/put.js

@@ -3,8 +3,9 @@ import { HttpMethod } from '../../lib/api.js';
 import { SwellApiCommand } from '../../swell-api-command.js';
 export default class ApiPut extends SwellApiCommand {
     static summary = 'Send a PUT request to the Swell API.';
-    static description = `Update existing resources in the Swell Backend API.
-  You can provide a JSON body directly or specify a file path containing JSON data.`;
+    static description = `Update existing resources in the Swell API.
+    You can provide a JSON body directly or specify a file path containing JSON data.
+    Use --api frontend for public key authentication scoped to your app or user.`;
     static args = {
         path: Args.string({
             description: 'API endpoint path (must start with /)',
@@ -19,11 +20,17 @@ export default class ApiPut extends SwellApiCommand {
             description: 'Use live environment instead of test',
             default: false,
         }),
+        api: Flags.string({
+            description: 'Use frontend or backend API (frontend uses public key auth).',
+            options: ['backend', 'frontend'],
+            default: 'backend',
+        }),
     };
     static examples = [
         'swell api put /products/{id} --body \'{"id": "abc123", "name": "Updated"}\'',
         'swell api put /products/abc123 --body ./product.json',
         'swell api put /functions/my-app/update-stock --body \'{"sku":"abc","qty":10}\'',
+        `swell api put /products/abc123 --body '{"name": "Updated"}' --api frontend`,
     ];
     get method() {
         return HttpMethod.PUT;

package/dist/commands/app/frontend/dev.js

@@ -1,5 +1,5 @@
 import { Flags } from '@oclif/core';
-import { getProjectCommands, } from '../../../lib/apps/index.js';
+import { CUSTOM_FRAMEWORK_SLUG, getManualDevHint, getProjectCommands, } from '../../../lib/apps/index.js';
 import { default as localConfig } from '../../../lib/config.js';
 import style from '../../../lib/style.js';
 import { PushAppCommand } from '../../../push-app-command.js';
@@ -70,6 +70,23 @@ export default class AppFrontendDev extends PushAppCommand {
         if (!projectType) {
             return;
         }
+        // Manual mode for unrecognized frameworks
+        if (projectType.slug === CUSTOM_FRAMEWORK_SLUG) {
+            const hintCommand = getManualDevHint(this.appPath, serverPort);
+            const currentStore = localConfig.getDefaultStore();
+            const sessionId = localConfig.getSessionId(currentStore);
+            this.log(`Detected a frontend project but could not identify the framework.`);
+            this.log(`Start your dev server manually on port ${serverPort}:\n`);
+            this.log(`  cd frontend && ${hintCommand}\n`);
+            this.log(`The Swell tunnel is ready and will route traffic once your server is running.\n`);
+            this.logAppLocalUrl(currentStore, sessionId);
+            if (!isAppDev) {
+                this.watchForChanges();
+            }
+            // Keep the process alive so the tunnel remains open
+            await new Promise(() => { });
+            return;
+        }
         // Get commands transformed for the detected package manager
         const { devCommand } = getProjectCommands(this.appPath, projectType);
         const currentStore = localConfig.getDefaultStore();

package/dist/commands/inspect/models.d.ts

@@ -17,7 +17,6 @@ export default class Models extends SwellCommand {
     private showAppModels;
     private showModels;
     private getModelPath;
-    private getCurrentAppSlugId;
     private getAppSlugId;
     private showModelDetail;
     private resolveModelPath;

package/dist/commands/inspect/models.js

@@ -1,6 +1,6 @@
 import { Args, Flags } from '@oclif/core';
-import * as fs from 'node:fs';
 import { FetchError } from 'node-fetch';
+import { getCurrentAppSlugId } from '../../lib/apps/index.js';
 import { default as localConfig } from '../../lib/config.js';
 import { SwellCommand } from '../../swell-command.js';
 export default class Models extends SwellCommand {
@@ -109,7 +109,7 @@ With a collection path, it retrieves the model for that specific collection in J
         this.showModels(models, 'Standard');
     }
     async showAppModels(appsById, modelsByAppId) {
-        const currentAppSlugId = await this.getCurrentAppSlugId();
+        const currentAppSlugId = await getCurrentAppSlugId();
         for (const [appId, app] of Object.entries(appsById)) {
             const models = modelsByAppId[appId];
             if (models) {
@@ -153,19 +153,6 @@ With a collection path, it retrieves the model for that specific collection in J
         }
         return `/${model.name}`;
     }
-    async getCurrentAppSlugId() {
-        const hasAppContext = fs.existsSync('swell.json');
-        if (!hasAppContext) {
-            return;
-        }
-        try {
-            const appConfig = JSON.parse(await fs.promises.readFile('swell.json', 'utf8'));
-            return appConfig.id;
-        }
-        catch {
-            // noop
-        }
-    }
     getAppSlugId(app) {
         return app.public_id || app.private_id.replace(/^_/, '');
     }

package/dist/create-app-command.js

@@ -429,7 +429,7 @@ export class CreateAppCommand extends SwellCommand {
             // Required for yarn workspaces, good practice for all package managers
             private: true,
             scripts: {
-                typecheck: '([ -z "$(find functions -name \'*.ts\' 2>/dev/null | head -1)" ] || tsc --noEmit) && ([ ! -f test/tsconfig.json ] || tsc --noEmit -p test) && ([ ! -f frontend/tsconfig.json ] || tsc --noEmit -p frontend)',
+                typecheck: '([ -z "$(find functions -name \'*.ts\' 2>/dev/null | head -1)" ] || tsc --noEmit) && ([ ! -f test/tsconfig.json ] || tsc --build --noEmit test) && ([ ! -f frontend/tsconfig.json ] || tsc --build --noEmit frontend)',
             },
             version: config.get('version'),
         };

package/dist/env/local.d.ts

@@ -1,6 +1,7 @@
 declare namespace _default {
     let API_BASE_URL: string;
     let ADMIN_API_BASE_URL: string;
+    let FRONTEND_API_BASE_URL: string;
     let LOGIN_HOST: string;
     let APP_PAGES_HOST: string;
     let STOREFRONT_FRONTEND_HOST: string;

package/dist/env/local.js

@@ -1,6 +1,7 @@
 export default {
     API_BASE_URL: 'https://localapi.schema.io:4443',
     ADMIN_API_BASE_URL: 'http://${STORE_ID}.swell.test:4001/admin/api',
+    FRONTEND_API_BASE_URL: 'http://${STORE_ID}.swell.test:4001/api',
     LOGIN_HOST: 'http://${STORE_ID}.swell.test:3000',
     APP_PAGES_HOST: 'http://${STORE_ID}--${APP_ID}--${ENV}.swell.test:4001',
     STOREFRONT_FRONTEND_HOST: 'http://${BRANCH_PREFIX}${STOREFRONT_SLUG}.swell.test:4001',

package/dist/env/production.d.ts

@@ -1,6 +1,7 @@
 declare namespace _default {
     let API_BASE_URL: string;
     let ADMIN_API_BASE_URL: string;
+    let FRONTEND_API_BASE_URL: string;
     let LOGIN_HOST: string;
     let APP_PAGES_HOST: string;
     let STOREFRONT_FRONTEND_HOST: string;

package/dist/env/production.js

@@ -1,6 +1,7 @@
 export default {
     API_BASE_URL: 'https://api.swell.store',
     ADMIN_API_BASE_URL: 'https://${STORE_ID}.swell.store/admin/api',
+    FRONTEND_API_BASE_URL: 'https://${STORE_ID}.swell.store/api',
     LOGIN_HOST: 'https://${STORE_ID}.swell.store',
     APP_PAGES_HOST: 'https://${STORE_ID}--${APP_ID}--${ENV}.swell.store',
     STOREFRONT_FRONTEND_HOST: 'https://${BRANCH_PREFIX}${STOREFRONT_SLUG}.swell.store',

package/dist/env/review.d.ts

@@ -1,6 +1,7 @@
 declare namespace _default {
     let API_BASE_URL: string;
     let ADMIN_API_BASE_URL: string;
+    let FRONTEND_API_BASE_URL: string;
     let LOGIN_HOST: string;
     let APP_PAGES_HOST: string;
     let STOREFRONT_FRONTEND_HOST: string;

package/dist/env/review.js

@@ -1,6 +1,7 @@
 export default {
     API_BASE_URL: 'https://${REVIEW_DOMAIN}.rav2.swell.store',
     ADMIN_API_BASE_URL: 'https://${STORE_ID}.${REVIEW_DOMAIN}.rav2.swell.store/admin/api',
+    FRONTEND_API_BASE_URL: 'https://${STORE_ID}.${REVIEW_DOMAIN}.rav2.swell.store/api',
     LOGIN_HOST: 'https://${REVIEW_DOMAIN}.rav2.swell.store',
     APP_PAGES_HOST: 'https://${STORE_ID}--${APP_ID}--${ENV}.${REVIEW_DOMAIN}.rav2.swell.store',
     STOREFRONT_FRONTEND_HOST: 'https://${BRANCH_PREFIX}${STOREFRONT_SLUG}.${REVIEW_DOMAIN}.rav2.swell.store',

package/dist/env/staging.d.ts

@@ -1,6 +1,7 @@
 declare namespace _default {
     let API_BASE_URL: string;
     let ADMIN_API_BASE_URL: string;
+    let FRONTEND_API_BASE_URL: string;
     let LOGIN_HOST: string;
     let APP_PAGES_HOST: string;
     let STOREFRONT_FRONTEND_HOST: string;

package/dist/env/staging.js

@@ -1,6 +1,7 @@
 export default {
     API_BASE_URL: 'https://staging.swell.store',
     ADMIN_API_BASE_URL: 'https://${STORE_ID}.staging.swell.store/admin/api',
+    FRONTEND_API_BASE_URL: 'https://${STORE_ID}.staging.swell.store/api',
     LOGIN_HOST: 'https://staging.swell.store',
     APP_PAGES_HOST: 'https://${STORE_ID}--${APP_ID}--${ENV}.staging.swell.store',
     STOREFRONT_FRONTEND_HOST: 'https://${BRANCH_PREFIX}${STOREFRONT_SLUG}.staging.swell.store',

package/dist/lib/api.d.ts

@@ -5,10 +5,11 @@ export declare enum HttpMethod {
     DELETE = "delete"
 }
 export default class Api {
+    storeId: string | undefined;
     envId: string | undefined;
     secretKey: string | undefined;
-    storeId: string | undefined;
-    constructor(storeId?: string, envId?: string, secretKey?: string);
+    publicKey: string | undefined;
+    constructor(storeId?: string, envId?: string, publicKey?: string, secretKey?: string);
     api(pathOpts: Api.Paths, options: Api.RequestOptions): Promise<any>;
     get(pathOpts: Api.Paths, options?: Api.RequestOptions): Promise<any>;
     getAll(pathOpts: Api.Paths, options?: Api.RequestOptions): Promise<{
@@ -21,6 +22,8 @@ export default class Api {
     isTestEnvEnabled(): Promise<boolean>;
     setEnv(envId: string): Promise<void>;
     setStoreEnv(storeId: string, envId?: string): Promise<void>;
+    setPublicKey(publicKey?: string): Promise<void>;
+    private isFrontend;
     private isAdmin;
     private truncatePath;
     private waitForAsyncResponse;

package/dist/lib/api.js

@@ -1,7 +1,9 @@
 import fetch from 'node-fetch';
 import { stringify } from 'qs';
+import { getCurrentAppSlugId, hasAppContext } from './apps/index.js';
 import config from './config.js';
-import { API_BASE_URL, getAdminApiBaseUrl } from './constants.js';
+import { API_BASE_URL, getAdminApiBaseUrl, getFrontendApiBaseUrl, } from './constants.js';
+import style from './style.js';
 export var HttpMethod;
 (function (HttpMethod) {
     HttpMethod["GET"] = "get";
@@ -15,7 +17,7 @@ const defaultHeaders = (opts) => ({
     ...opts,
 });
 const authenticatedHeaders = (storeId, opts = {}) => {
-    let { secretKey, sessionId, ...moreOpts } = opts;
+    let { publicKey, secretKey, sessionId, ...moreOpts } = opts;
     sessionId ??= config.getSessionId(storeId);
     if (secretKey) {
         return defaultHeaders({
@@ -23,6 +25,12 @@ const authenticatedHeaders = (storeId, opts = {}) => {
             ...moreOpts,
         });
     }
+    if (publicKey) {
+        return defaultHeaders({
+            Authorization: `Basic ${Buffer.from(publicKey).toString('base64')}`,
+            ...moreOpts,
+        });
+    }
     if (sessionId) {
         return defaultHeaders({
             'X-Session': sessionId,
@@ -32,12 +40,14 @@ const authenticatedHeaders = (storeId, opts = {}) => {
     return defaultHeaders(moreOpts);
 };
 export default class Api {
+    storeId;
     envId;
     secretKey;
-    storeId;
-    constructor(storeId, envId, secretKey) {
+    publicKey;
+    constructor(storeId, envId, publicKey, secretKey) {
         this.storeId = storeId;
         this.envId = envId;
+        this.publicKey = publicKey;
         this.secretKey = secretKey;
     }
     async api(pathOpts, options) {
@@ -50,14 +60,17 @@ export default class Api {
                 ...options?.headers,
                 ...(this.envId ? { 'Swell-Env': this.envId } : undefined),
                 ...authenticatedHeaders(storeId, {
+                    publicKey: this.publicKey,
                     secretKey: this.secretKey,
                     sessionId: options.sessionId,
                 }),
             },
         };
-        path = this.isAdmin()
-            ? `${getAdminApiBaseUrl(storeId)}/${this.truncatePath(pathOpts.adminPath)}`
-            : `${API_BASE_URL}/${this.truncatePath(pathOpts.backendPath)}`;
+        path = this.isFrontend(pathOpts)
+            ? `${getFrontendApiBaseUrl(storeId)}/${this.truncatePath(pathOpts.frontendPath)}`
+            : this.isAdmin(pathOpts)
+                ? `${getAdminApiBaseUrl(storeId)}/${this.truncatePath(pathOpts.adminPath)}`
+                : `${API_BASE_URL}/${this.truncatePath(pathOpts.backendPath)}`;
         if (options.query) {
             path += `?${stringify(options.query)}`;
         }
@@ -179,8 +192,46 @@ export default class Api {
         this.storeId = storeId;
         this.envId = envId;
     }
-    isAdmin() {
-        return !this.secretKey;
+    async setPublicKey(publicKey) {
+        if (publicKey) {
+            this.publicKey = publicKey;
+            return;
+        }
+        const appSlugId = await getCurrentAppSlugId();
+        const response = await this.post({ adminPath: '/data/:batch' }, {
+            query: [
+                {
+                    method: 'get',
+                    url: '/:clients/:self/keys/:last',
+                    data: {
+                        scope: 'user',
+                        public: { $exists: true },
+                        revoked: { $ne: true },
+                    },
+                },
+                appSlugId && {
+                    method: 'get',
+                    url: '/:clients/:self/apps/:last',
+                    data: {
+                        app_private_id: `_${appSlugId}`,
+                    },
+                },
+            ],
+        });
+        const [userKey, installedApp] = Object.values(response);
+        this.publicKey = installedApp?.public_key || userKey?.public;
+        if (!this.publicKey) {
+            throw new Error('No API public key available. Run inside a deployed app or create a user-scoped public key.');
+        }
+        else if (hasAppContext() && !installedApp?.public_key) {
+            console.warn(style.funcWarn('⚠ No app context found. Running in user scope.'));
+        }
+    }
+    isFrontend(pathOpts) {
+        return Boolean(pathOpts.frontendPath) && Boolean(this.publicKey);
+    }
+    isAdmin(pathOpts) {
+        return Boolean(pathOpts.adminPath) && !this.secretKey;
     }
     truncatePath(path) {
         return path?.startsWith('/') ? path.slice(1) : path;

package/dist/lib/apps/index.d.ts

@@ -126,6 +126,7 @@ export interface FrontendProjectType {
     name: string;
     slug: string;
 }
+export declare const CUSTOM_FRAMEWORK_SLUG = "custom";
 export declare const FrontendProjectTypes: FrontendProjectType[];
 export declare function getFrontendProjectSlugs(withNone?: boolean, withLegacy?: boolean): string[];
 export declare function getFrontendProjectValidValues(withNone?: boolean, withLegacy?: boolean): string;
@@ -140,6 +141,11 @@ export declare function getProjectCommands(appPath: string, projectType: Fronten
     buildCommand?: string;
     devCommand: string;
 };
+/**
+ * Get a suggested dev command for an unrecognized frontend project,
+ * translated for the detected package manager.
+ */
+export declare function getManualDevHint(appPath: string, port: number): string;
 export declare function getConfigTypeFromPath(path: string): ConfigType | undefined;
 export declare function getConfigTypeKeyFromValue(value: string): string | undefined;
 export declare function filePathExists(filePath: string): boolean;
@@ -165,3 +171,5 @@ interface BatchAppFiles {
  * @returns {BatchAppFiles[]} Batches of files to push
  */
 export declare function batchAppFilesByType(configs: AppConfig[]): BatchAppFiles[];
+export declare function hasAppContext(): boolean;
+export declare function getCurrentAppSlugId(): Promise<string | undefined>;

package/dist/lib/apps/index.js

@@ -114,6 +114,8 @@ export var ConfigInputFields;
     ConfigInputFields["VALUES"] = "values";
     ConfigInputFields["VERSION"] = "version";
 })(ConfigInputFields || (ConfigInputFields = {}));
+// Slug for unrecognized frontend frameworks (manual dev server mode)
+export const CUSTOM_FRAMEWORK_SLUG = 'custom';
 // Frontend project types - all use direct commands run from frontend/ directory
 export const FrontendProjectTypes = [
     {
@@ -198,6 +200,16 @@ export function getFrontendProjectType(appPath) {
                     return detectedType;
                 }
             }
+            // Fallback: if package.json has a dev script, treat as unrecognized framework
+            if (pkg.scripts?.dev) {
+                return {
+                    buildCommand: pkg.scripts?.build ? 'npm run build' : '',
+                    devCommand: '',
+                    mainPackage: '',
+                    name: 'Custom',
+                    slug: CUSTOM_FRAMEWORK_SLUG,
+                };
+            }
         }
         catch {
             // Ignore JSON parse errors, try next path
@@ -220,6 +232,14 @@ export function getProjectCommands(appPath, projectType) {
         devCommand: transformCommand(projectType.devCommand, pm),
     };
 }
+/**
+ * Get a suggested dev command for an unrecognized frontend project,
+ * translated for the detected package manager.
+ */
+export function getManualDevHint(appPath, port) {
+    const pm = detectPackageManager(appPath);
+    return transformCommand(`npm run dev -- --port ${port}`, pm);
+}
 export function getConfigTypeFromPath(path) {
     for (const type in AllConfigPaths) {
         if (AllConfigPaths[type] === path) {
@@ -361,3 +381,18 @@ export function batchAppFilesByType(configs) {
     // Add base files if config types are not specified
     return batches;
 }
+export function hasAppContext() {
+    return fs.existsSync('swell.json');
+}
+export async function getCurrentAppSlugId() {
+    if (!hasAppContext()) {
+        return;
+    }
+    try {
+        const appConfig = JSON.parse(await fs.promises.readFile('swell.json', 'utf8'));
+        return appConfig.id;
+    }
+    catch {
+        // noop
+    }
+}

package/dist/lib/constants.d.ts

@@ -2,6 +2,7 @@ export declare const API_BASE_URL: any;
 export declare const LOCAL_PROXY_PROVIDER: any;
 export declare const SCHEMAS_BASE_URL: any;
 export declare function getAdminApiBaseUrl(storeId: string): any;
+export declare function getFrontendApiBaseUrl(storeId: string): any;
 export declare function getLoginHost(storeId?: string): any;
 export declare function getAppFrontendHost(storeId: string, installedAppId: string): any;
 export declare function getStorefrontFrontendHost(storefrontSlug: string, branchId?: string): any;

package/dist/lib/constants.js

@@ -5,6 +5,8 @@ import { env } from './config.js';
 export const API_BASE_URL = env.get('API_BASE_URL') || defaultEnv.API_BASE_URL;
 // url for admin api calls
 const ADMIN_API_BASE_URL = env.get('ADMIN_API_BASE_URL') || defaultEnv.ADMIN_API_BASE_URL;
+// url for store api calls
+const FRONTEND_API_BASE_URL = env.get('FRONTEND_API_BASE_URL') || defaultEnv.FRONTEND_API_BASE_URL;
 // url host for admin login
 const LOGIN_HOST = env.get('LOGIN_HOST') || defaultEnv.LOGIN_HOST;
 // url host for app frontend
@@ -19,6 +21,9 @@ export const SCHEMAS_BASE_URL = env.get('SCHEMAS_BASE_URL') || defaultEnv.SCHEMA
 export function getAdminApiBaseUrl(storeId) {
     return ADMIN_API_BASE_URL.replace('${STORE_ID}', storeId);
 }
+export function getFrontendApiBaseUrl(storeId) {
+    return FRONTEND_API_BASE_URL.replace('${STORE_ID}', storeId);
+}
 export function getLoginHost(storeId) {
     return LOGIN_HOST.replace('${STORE_ID}', storeId || 'login');
 }

package/dist/push-app-command.js

@@ -6,7 +6,7 @@ import * as path from 'node:path';
 import Stream from 'node:stream';
 import ora from 'ora';
 import { default as swellConfig } from './lib/app-config.js';
-import { ConfigType, getFrontendProjectValidValues, allConfigFilesInDir, appConfigFromFile, filePathExists, filePathExistsAsync, findAppConfig, getAppSlugId, getConfigTypeFromPath, getConfigTypeKeyFromValue, getFrontendProjectType, getProjectCommands, globAllFilesByPath, hashString, isPathDirectory, } from './lib/apps/index.js';
+import { ConfigType, getFrontendProjectValidValues, allConfigFilesInDir, CUSTOM_FRAMEWORK_SLUG, appConfigFromFile, filePathExists, filePathExistsAsync, findAppConfig, getAppSlugId, getConfigTypeFromPath, getConfigTypeKeyFromValue, getFrontendProjectType, getProjectCommands, globAllFilesByPath, hashString, isPathDirectory, } from './lib/apps/index.js';
 import { getGlobIgnorePathsChecker } from './lib/apps/paths.js';
 import { default as localConfig } from './lib/config.js';
 import { toAppId } from './lib/create/index.js';
@@ -110,6 +110,14 @@ export class PushAppCommand extends RemoteAppCommand {
             this.showFrontendMigrationError();
             return; // unreachable but helps TypeScript narrow the type
         }
+        // Skip automatic build for unrecognized frameworks
+        if (projectType.slug === CUSTOM_FRAMEWORK_SLUG) {
+            if (projectType.buildCommand) {
+                this.log(`Skipping automatic frontend build for unrecognized framework.\n` +
+                    `Run your build command manually before deploying.\n`);
+            }
+            return;
+        }
         // Get commands transformed for the detected package manager
         const { buildCommand } = getProjectCommands(this.appPath, projectType);
         if (!buildCommand) {
@@ -758,7 +766,9 @@ export class PushAppCommand extends RemoteAppCommand {
                 $environment_id: 'test',
                 frontend: {
                     deployment_hash: deploymentHash,
-                    framework: projectType.slug,
+                    ...(projectType.slug !== CUSTOM_FRAMEWORK_SLUG && {
+                        framework: projectType.slug,
+                    }),
                     service: 'cloudflare',
                     url: deploymentUrl,
                 },

package/dist/swell-api-command.js

@@ -29,10 +29,14 @@ export class SwellApiCommand extends SwellCommand {
         const parsedInput = await super.parse(options, argv);
         const { args, flags } = parsedInput;
         const { path: requestPath } = args;
-        const { live, body } = flags;
+        const { live, api, body } = flags;
+        const isFrontendAPI = api === 'frontend';
         if (!live) {
             await this.api.setEnv('test');
         }
+        if (isFrontendAPI) {
+            await this.api.setPublicKey();
+        }
         if (!requestPath.startsWith('/')) {
             throw new Error('Path must start with a forward slash (/)');
         }
@@ -53,7 +57,9 @@ export class SwellApiCommand extends SwellCommand {
             const queryParams = this.parseQueryString(queryString);
             return this.buildFunctionCallRequest(parsedInput, functionId, processedBody, queryParams);
         }
-        const paths = { adminPath: `/data${requestPath}` };
+        const paths = isFrontendAPI
+            ? { frontendPath: requestPath }
+            : { adminPath: `/data${requestPath}` };
         return {
             ...parsedInput,
             paths,

package/oclif.manifest.json

@@ -381,10 +381,11 @@
           "required": true
         }
       },
-      "description": "Remove existing resources from the Swell Backend API.",
+      "description": "Remove existing resources from the Swell API.\n    Use --api frontend for public key authentication scoped to your app or user.",
       "examples": [
         "swell api delete /products/abc123",
-        "swell api delete /functions/my-app/clear-cache"
+        "swell api delete /functions/my-app/clear-cache",
+        "swell api delete /products/abc123 --api frontend"
       ],
       "flags": {
         "live": {
@@ -392,6 +393,18 @@
           "name": "live",
           "allowNo": false,
           "type": "boolean"
+        },
+        "api": {
+          "description": "Use frontend or backend API (frontend uses public key auth).",
+          "name": "api",
+          "default": "backend",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "backend",
+            "frontend"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -419,12 +432,13 @@
           "required": true
         }
       },
-      "description": "Retrieve data from the Swell Backend API.\n  The command performs a GET request to the specified endpoint path.",
+      "description": "Retrieve data from the Swell API.\n    The command performs a GET request to the specified endpoint path.\n    Use --api frontend for public key authentication scoped to your app or user.",
       "examples": [
         "swell api get /products",
         "swell api get \"/products?limit=10&category=shoes\"",
         "swell api get /products/abc123",
-        "swell api get /functions/my-app/get-inventory"
+        "swell api get /functions/my-app/get-inventory",
+        "swell api get /products --api frontend"
       ],
       "flags": {
         "live": {
@@ -432,6 +446,18 @@
           "name": "live",
           "allowNo": false,
           "type": "boolean"
+        },
+        "api": {
+          "description": "Use frontend or backend API (frontend uses public key auth).",
+          "name": "api",
+          "default": "backend",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "backend",
+            "frontend"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -453,14 +479,15 @@
     "api": {
       "aliases": [],
       "args": {},
-      "description": "Run Swell API requests directly from the command line.\n  Supports GET, POST, PUT, and DELETE methods with optional test/live environments.\n  Call app functions via /functions/<app_id>/<function_name> paths.",
+      "description": "Run Swell API requests directly from the command line.\n    Supports GET, POST, PUT, and DELETE methods with optional test/live environments.\n    Use --api frontend for public key authentication via the frontend API.\n    Call app functions via /functions/<app_id>/<function_name> paths.",
       "examples": [
         "swell api get /products",
         "swell api post /products --body '{\"name\":\"New product\"}'",
         "swell api put /products/abc123 --body ./update.json",
         "swell api delete /products/abc123",
         "swell api get /functions/my-app/get-inventory",
-        "swell api post /functions/my-app/create-order --body '{\"items\":[\"sku-1\"]}'"
+        "swell api post /functions/my-app/create-order --body '{\"items\":[\"sku-1\"]}'",
+        "swell api get /products --api frontend"
       ],
       "flags": {},
       "hasDynamicHelp": false,
@@ -489,11 +516,12 @@
           "required": true
         }
       },
-      "description": "Create new resources in the Swell Backend API.\n  You can provide a JSON body directly or specify a file path containing JSON data.",
+      "description": "Create new resources in the Swell API.\n    You can provide a JSON body directly or specify a file path containing JSON data.\n    Use --api frontend for public key authentication scoped to your app or user.",
       "examples": [
         "swell api post /products --body '{\"name\": \"Product\", \"price\": 100}'",
         "swell api post /products --body ./product.json",
-        "swell api post /functions/my-app/create-order --body '{\"items\":[\"sku-1\"]}'"
+        "swell api post /functions/my-app/create-order --body '{\"items\":[\"sku-1\"]}'",
+        "swell api post /products --body '{\"name\": \"Product\"}' --api frontend"
       ],
       "flags": {
         "body": {
@@ -508,6 +536,18 @@
           "name": "live",
           "allowNo": false,
           "type": "boolean"
+        },
+        "api": {
+          "description": "Use frontend or backend API (frontend uses public key auth).",
+          "name": "api",
+          "default": "backend",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "backend",
+            "frontend"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -535,11 +575,12 @@
           "required": true
         }
       },
-      "description": "Update existing resources in the Swell Backend API.\n  You can provide a JSON body directly or specify a file path containing JSON data.",
+      "description": "Update existing resources in the Swell API.\n    You can provide a JSON body directly or specify a file path containing JSON data.\n    Use --api frontend for public key authentication scoped to your app or user.",
       "examples": [
         "swell api put /products/{id} --body '{\"id\": \"abc123\", \"name\": \"Updated\"}'",
         "swell api put /products/abc123 --body ./product.json",
-        "swell api put /functions/my-app/update-stock --body '{\"sku\":\"abc\",\"qty\":10}'"
+        "swell api put /functions/my-app/update-stock --body '{\"sku\":\"abc\",\"qty\":10}'",
+        "swell api put /products/abc123 --body '{\"name\": \"Updated\"}' --api frontend"
       ],
       "flags": {
         "body": {
@@ -554,6 +595,18 @@
           "name": "live",
           "allowNo": false,
           "type": "boolean"
+        },
+        "api": {
+          "description": "Use frontend or backend API (frontend uses public key auth).",
+          "name": "api",
+          "default": "backend",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "backend",
+            "frontend"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -2884,5 +2937,5 @@
       ]
     }
   },
-  "version": "2.4.0"
+  "version": "2.5.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swell/cli",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "type": "module",
   "description": "Swell's command line interface/utility",
   "keywords": [