@vibingview/cli 0.1.3 → 0.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibingview/cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "VibingView command-line interface and stdio MCP bridge: pair with browser approval, deploy apps, read logs, manage env vars and databases, and connect AI editors.",
   "license": "MIT",
   "type": "module",

package/src/cli.mjs

@@ -10,7 +10,7 @@ import { fileURLToPath } from "node:url";
 import { ensureGitignore, inferAppName, isIdenticalDeploy, packageProject, readProjectConfig, writeProjectConfig } from "./lib/project.mjs";
 import { defaultTransport, installMcpConfig, maskToken, maskedEntry, mcpConfigPath, MCP_CLIENTS, NPM_PACKAGE } from "./lib/mcp-install.mjs";
 
-export const VERSION = "0.1.3";
+export const VERSION = "0.1.4";
 /** Production control plane used when no --url, VIBINGVIEW_URL or saved login selects another. */
 export const DEFAULT_URL = "https://vibingview.com";
 const USAGE = `VibingView CLI ${VERSION}
@@ -122,11 +122,17 @@ function createClient(base, token) {
       response = await fetch(`${base}${route}`, { ...init, redirect: "error", signal: AbortSignal.timeout(init.timeout ?? 120000), headers: { ...(token ? { Authorization: `Bearer ${token}` } : {}), ...init.headers } });
     } catch (error) { throw new CliError(redact(`Could not reach ${base}: ${error.cause?.message ?? error.message}`)); }
     if (response.status === 204) return {};
-    const body = await response.json().catch(() => ({}));
+    let body = {}, unreadable = false;
+    const text = await response.text().catch(() => { unreadable = true; return ""; });
+    if (text) { try { body = JSON.parse(text); } catch { unreadable = true; } }
+    // A success whose body was cut off (e.g. the connection dropped) must not read as "empty": callers would treat an
+    // unread app list as "no apps" and create a duplicate.
+    if (response.ok && unreadable)
+      throw new CliError(`Could not read the server's answer to ${route.split("?")[0]}. Nothing was assumed; try again (after a deploy, check vibingview status first).`);
     if (!response.ok) {
       let message = typeof body.error === "string" ? body.error : body.error?.message ?? `HTTP ${response.status}`;
       if (response.status === 401 && token) message += " — the token may be expired or revoked, or lacks the permission this command needs (database create/reveal need a token with the 'manage' permission). Run vibingview login or use an appropriately scoped VIBINGVIEW_TOKEN.";
-      throw Object.assign(new CliError(redact(message)), { status: response.status });
+      throw Object.assign(new CliError(redact(message)), { status: response.status, code: typeof body.code === "string" ? body.code : undefined });
     }
     return body;
   };
@@ -315,7 +321,7 @@ export async function main(argv = process.argv.slice(2)) {
   // ----- lookups -------------------------------------------------------------
   const cwd = process.cwd();
   const project = await readProjectConfig(cwd);
-  const workspacesList = async () => (await call("/api/workspaces")).workspaces ?? [];
+  const workspacesList = async () => { const { workspaces } = await call("/api/workspaces"); if (!Array.isArray(workspaces)) throw new CliError("The server did not send the list of workspaces. Nothing was changed; try again."); return workspaces; };
   const isRunning = workspace => String(workspace.status).toUpperCase() === "RUNNING";
   async function resolveWorkspace(reference, { running = true } = {}) {
     const all = await workspacesList();
@@ -371,9 +377,22 @@ export async function main(argv = process.argv.slice(2)) {
     reportNotableSkips(pkg.notable ?? []);
     if (isIdenticalDeploy(linked, pkg.sha256, flags.force)) { out("No changes since the last deploy. Use --force to redeploy anyway."); return 0; }
 
-    const { applications = [] } = await call("/api/apps");
-    let app = linked.applicationId && (!flags.name || flags.name === linked.name) ? applications.find(item => item.id === linked.applicationId) : undefined;
-    if (linked.applicationId && !app && !flags.name) warn("The linked application no longer exists; creating a new one.");
+    if (linked.controlPlane && linked.controlPlane !== base) warn(`This folder was deployed to ${linked.controlPlane}; you are now using ${base}.`);
+    const appList = async () => { const { applications } = await call("/api/apps"); if (!Array.isArray(applications)) throw new CliError("The server did not send the list of applications. Nothing was changed; try again."); return applications; };
+    if (linked.applicationId && flags.name && flags.name !== linked.name && !flags.force) throw new CliError(`This folder is linked to the application "${linked.name}", but --name says "${flags.name}". Drop --name to redeploy it, use --force to create another app, or remove .vibingview/config.json.`);
+    const useLinked = linked.applicationId && (!flags.name || flags.name === linked.name);
+    let app = useLinked ? (await appList()).find(item => item.id === linked.applicationId) : undefined;
+    if (useLinked && !app) {
+      // One answer without the app must never create a duplicate: ask for the app itself before assuming it was deleted.
+      const deleted = await call(`/api/apps/${encodeURIComponent(linked.applicationId)}/settings`).then(() => false, error => {
+        if (error.status === 404 || error.code === "apps.not_found") return true;
+        throw new CliError(`Could not confirm that the linked application ${linked.name ?? linked.applicationId} was deleted (${error.message}). Nothing was created; try again.`);
+      });
+      if (!deleted) {
+        app = (await appList()).find(item => item.id === linked.applicationId);
+        if (!app) throw new CliError(`The linked application ${linked.name ?? linked.applicationId} exists but was missing from the server's list. Nothing was created; try again in a moment.`);
+      } else warn("The linked application was deleted; creating a new one.");
+    }
     const catalog = await call("/api/catalog");
     const suffixes = catalog.domains ?? [];
     let suffix = linked.domainSuffix;
@@ -416,7 +435,8 @@ export async function main(argv = process.argv.slice(2)) {
       if (port !== undefined) form.set("port", String(port));
       if (builder) form.set("builder", builder);
       form.set("file", new Blob([pkg.archive], { type: "application/zip" }), `${name}.zip`);
-      app = (await call("/api/apps", { method: "POST", body: form })).application;
+      // A large upload must not time out client-side while the server finishes creating the app (that made a second app on retry).
+      app = (await call("/api/apps", { method: "POST", body: form, timeout: 120000 + Math.ceil(pkg.archive.length / 1_000_000) * 4000 })).application;
       deploymentId = app.lastDeploymentId;
     }
     const state = { controlPlane: base, workspaceId, applicationId: app.id, name: app.name, url: app.url, domainSuffix: suffix, customDomain: customDomain ?? linked.customDomain, lastHash: linked.lastHash, deployedAt: new Date().toISOString() };
@@ -515,8 +535,20 @@ export async function main(argv = process.argv.slice(2)) {
       const environment = {};
       const pairs = args.slice(1);
       if (flags.stdin) {
-        if (pairs.length !== 1) throw new CliError("Usage: vibingview env set NAME --stdin");
-        environment[pairs[0]] = await readStdin();
+        // One name: the whole input is its value. No name: one NAME=value per line (.env style), so secrets never sit in argv.
+        if (pairs.length > 1) throw new CliError("Usage: vibingview env set NAME --stdin, or env set --stdin with NAME=value lines on stdin");
+        const input = await readStdin();
+        if (pairs.length === 1) environment[pairs[0]] = input;
+        else for (const line of input.split(/\r?\n/)) {
+          const text = line.trim();
+          if (!text || text.startsWith("#")) continue;
+          const match = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(text);
+          if (!match) throw new CliError(`Not a NAME=value line: ${text.slice(0, 40)}`);
+          let value = match[2];
+          if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) value = value.slice(1, -1);
+          environment[match[1]] = value;
+        }
+        if (!Object.keys(environment).length) throw new CliError("No NAME=value lines were read from stdin.");
       } else {
         if (!pairs.length) throw new CliError("Usage: vibingview env set NAME=value [NAME=value…] or NAME --stdin");
         for (const pair of pairs) {

package/src/mcp.mjs

@@ -46,7 +46,7 @@ async function handle(message) {
   const params = message.params && typeof message.params === "object" && !Array.isArray(message.params) ? message.params : {};
   if (message.method === "initialize") {
     const protocolVersion = SUPPORTED_VERSIONS.includes(params.protocolVersion) ? params.protocolVersion : SUPPORTED_VERSIONS[0];
-    return { protocolVersion, capabilities: { tools: { listChanged: false } }, serverInfo: { name: "vibingview", version: "0.1.3" }, instructions: INSTRUCTIONS };
+    return { protocolVersion, capabilities: { tools: { listChanged: false } }, serverInfo: { name: "vibingview", version: "0.1.4" }, instructions: INSTRUCTIONS };
   }
   if (message.method === "ping") return {};
   if (message.method === "tools/list") {