fimo 0.2.2 → 0.2.3-experimental.1782118113229

package/assets/skills/fimo-cli/references/domains.md

@@ -8,6 +8,8 @@
 | **Custom domain**     | A hostname the user owns (e.g. `blog.example.com`), attached via DNS | Premium                | Many        | `project_domains` table    |
 | **Registered domain** | A new domain bought _through_ Fimo via the registrar reseller        | Premium + feature flag | Many        | `registered_domains` table |
 
+> **A renamed URL or custom domain only resolves once the site is published** (`fimo deploy --publish`); before that it returns "Project Not Found".
+
 ## Commands
 
 ```bash
@@ -106,6 +108,7 @@ Propagation: typically 15–30 minutes, up to 48 hours rarely.
 
 ## Common errors
 
+- **"Project Not Found" on a new URL or custom domain.** The route exists but the site was never published — run `fimo deploy --publish`.
 - **"Custom domains require a Premium plan."** — the operation is paid; the message includes the org billing URL. Free users can still run `list`, `rename-default`, `suggest-default`, `search`, and `pricing`.
 - **"Domain purchase is not enabled on this account."** — the registered-domains feature flag is off on this API instance. Contact support.
 - **"This URL is not available."** — slug or hostname collides with another project or is reserved.

package/dist/cli/bundle.json

@@ -1,8 +1,8 @@
 {
   "bundled": true,
   "bundler": "esbuild",
-  "bundledAt": "2026-06-19T11:24:36.610Z",
-  "cliVersion": "0.2.2",
+  "bundledAt": "2026-06-22T08:48:42.757Z",
+  "cliVersion": "0.2.3-experimental.1782118113229",
   "external": [
     "oxc-parser",
     "fsevents"

package/dist/cli/index.js

@@ -18242,7 +18242,8 @@ async function copyTemplate(templateRoot, targetDir) {
   pinFimoDependency(targetDir);
 }
 function pinFimoDependency(targetDir) {
-  const pin = resolveFimoPin({ devPackageRoot: CLI_ROOT });
+  const useLocalPackage = process.env.FIMO_LOCAL_PACKAGE === "1";
+  const pin = resolveFimoPin({ devPackageRoot: useLocalPackage ? CLI_ROOT : null });
   if (!pin) {
     return;
   }
@@ -93640,7 +93641,7 @@ var init_migrate_apply = __esm({
 });
 
 // src/cli/commands/migrate.ts
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { spawnSync as spawnSync4 } from "node:child_process";
 import fs31 from "node:fs";
 import path33 from "node:path";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
@@ -93891,7 +93892,7 @@ function runBundledMigrationScript(scriptName, args) {
     process.exitCode = 1;
     return;
   }
-  const result = spawnSync3(process.execPath, [scriptPath, ...args], {
+  const result = spawnSync4(process.execPath, [scriptPath, ...args], {
     stdio: "inherit"
   });
   if (result.error) {
@@ -103252,6 +103253,55 @@ async function gitCredentialCommand(operation) {
 }
 __name(gitCredentialCommand, "gitCredentialCommand");
 
+// src/cli/commands/install.ts
+init_dist();
+init_skills();
+import { spawnSync as spawnSync3 } from "node:child_process";
+var PACKAGE = "fimo";
+function detectPackageManager3(userAgent = process.env.npm_config_user_agent ?? "") {
+  const name = userAgent.split("/", 1)[0];
+  if (name === "pnpm" || name === "yarn" || name === "bun") {
+    return name;
+  }
+  return "npm";
+}
+__name(detectPackageManager3, "detectPackageManager");
+function globalAddCommand(pm) {
+  switch (pm) {
+    case "pnpm":
+      return { cmd: "pnpm", args: ["add", "-g", PACKAGE] };
+    case "yarn":
+      return { cmd: "yarn", args: ["global", "add", PACKAGE] };
+    case "bun":
+      return { cmd: "bun", args: ["add", "-g", PACKAGE] };
+    default:
+      return { cmd: "npm", args: ["install", "-g", PACKAGE] };
+  }
+}
+__name(globalAddCommand, "globalAddCommand");
+async function installCommand(options = {}) {
+  if (!options.skipCli) {
+    const { cmd, args } = globalAddCommand(detectPackageManager3());
+    const printable = `${cmd} ${args.join(" ")}`;
+    ui.info({ command: "install", message: `Installing the fimo CLI globally (${printable})\u2026` });
+    const result = spawnSync3(cmd, args, { stdio: "inherit" });
+    if (result.status === 0) {
+      ui.ok({ command: "install", headline: "fimo CLI installed globally." });
+    } else {
+      ui.warn({
+        command: "install",
+        message: `Couldn't install fimo globally with ${cmd}. Install it manually: ${printable}. Continuing with skills\u2026`
+      });
+    }
+  }
+  await skillsInstallCommand(options);
+  ui.info({
+    command: "install",
+    message: "Next: run `fimo login` to connect your account, then `fimo create` to start a project."
+  });
+}
+__name(installCommand, "installCommand");
+
 // src/cli/commands/integrations.ts
 init_dist6();
 import path30 from "node:path";
@@ -106409,6 +106459,11 @@ program.name("fimo").description("Fimo CLI").version(computeVersionString()).opt
 program.command("login").description("Sign in through your browser").action(loginCommand);
 program.command("logout").description("Revoke the current session and clear local credentials").action(logoutCommand);
 program.command("whoami").description("Show the current signed-in user").action(whoamiCommand);
+program.command("install").description("Install the fimo CLI globally and set up skills for your AI coding tools").option("--agents <list>", "Comma-separated list of agent IDs (e.g. claude-code,cursor)").option(
+  "-a, --agent <id>",
+  "Repeatable: pass once per agent (-a claude-code -a cursor)",
+  (value, prev2 = []) => [...prev2, value]
+).option("--mode <mode>", "Skill install method: symlink | copy (default: symlink)").option("-y, --yes", "Skip prompts (non-interactive)").option("--skip-cli", "Skip the global CLI install; only set up skills").action(installCommand);
 registerProjectSecretsCommands(program);
 registerIntegrationsCommands(program);
 registerChannelsCommands(program);

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "fimo",
-  "version": "0.2.2",
+  "version": "0.2.3-experimental.1782118113229",
   "description": "Fimo CLI - create, deploy, and manage Fimo projects",
   "bin": {
-    "fimo": "./dist/cli/index.js"
+    "fimo": "dist/cli/index.js"
   },
   "files": [
     "dist/",

package/release.json

@@ -1,5 +1,5 @@
 {
   "source": "npm",
-  "apiUrl": "https://api.fimo.ai",
-  "webUrl": "https://fimo.ai"
+  "apiUrl": "https://api.staging.fimo.team",
+  "webUrl": "https://staging.fimo.team"
 }

package/scripts/bump-version.mjs

@@ -1,28 +1,21 @@
 #!/usr/bin/env node
-// Bumps the Fimo CLI version + creates the matching scoped git tag.
+// Bumps the Fimo CLI version in apps/cli/package.json — NO git tag, NO commit.
 //
-// Tag scheme: scoped per-app, e.g. `cli@1.0.0`. This is the convention the
-// monorepo will use as it adopts semver releases for individual apps -
-// `fimovm@x.y.z` will follow the same shape once that package starts
-// shipping. Scoped tags avoid the ambiguity of a global `v1.0.0` in a repo
-// with multiple independently-versioned artifacts.
+// Under the branch-driven release model the version lives in
+// apps/cli/package.json and you bump it in a PR. CI creates the
+// `cli@<version>` git tag when it publishes `@latest` on a `production`
+// merge, so this script must NOT create a tag — that would collide with
+// CI's tag-guard (the publish would skip, thinking the version already
+// shipped).
 //
 // Usage:
 //   pnpm -F fimo release:bump patch
 //   pnpm -F fimo release:bump minor
 //   pnpm -F fimo release:bump major
-//   pnpm -F fimo release:bump prerelease --preid next
 //   pnpm -F fimo release:bump 1.2.3            # explicit version
 //
-// What it does:
-//   1. Validates the working tree is clean (no half-finished changes get
-//      caught in the release commit).
-//   2. Delegates to `pnpm version` for the semver bump + commit + tag -
-//      same battle-tested machinery as `npm version`, just plumbed with our
-//      `cli@` tag prefix and a conventional-commit message.
-//
-// Tags this produces are LOCAL only. Push them with `git push origin cli@x.y.z`
-// - that's the trigger for the CI release workflow (P0-7).
+// After bumping, commit the change in your PR. Merging it through to
+// `production` is what publishes `@latest` and creates the tag.
 
 import { spawnSync } from 'node:child_process';
 import { dirname, resolve } from 'node:path';
@@ -50,22 +43,10 @@ if (!VALID_INCREMENTS.has(increment) && !isExplicitVersion) {
   process.exit(1);
 }
 
-const status = spawnSync('git', ['status', '--porcelain'], { encoding: 'utf8' });
-if (status.status !== 0) {
-  console.error('[cli/bump] git status failed; are you in a git checkout?');
-  process.exit(status.status ?? 1);
-}
-if (status.stdout.trim() !== '') {
-  console.error('[cli/bump] working tree is not clean. Commit or stash before bumping.');
-  console.error(status.stdout);
-  process.exit(1);
-}
-
-console.log(`[cli/bump] increment: ${increment}`);
-console.log(`[cli/bump] cwd:       ${CLI_ROOT}`);
-
-const versionArgs = ['version', '--tag-version-prefix=cli@', '--message=chore(cli): release cli@%s', ...args];
-
+// Bump package.json ONLY — `--no-git-tag-version` skips both the commit and
+// the tag. CI owns the `cli@<version>` tag (created on the @latest publish).
+// Use pnpm (not npm) — npm chokes on the `workspace:*` devDeps.
+const versionArgs = ['version', '--no-git-tag-version', ...args];
 console.log(`[cli/bump] $ pnpm ${versionArgs.join(' ')}`);
 const result = spawnSync('pnpm', versionArgs, { cwd: CLI_ROOT, stdio: 'inherit' });
 if (result.status !== 0) {
@@ -73,5 +54,5 @@ if (result.status !== 0) {
   process.exit(result.status ?? 1);
 }
 
-console.log('[cli/bump] done. Push the tag with:');
-console.log('  git push origin develop && git push origin cli@<new-version>');
+console.log('[cli/bump] bumped apps/cli/package.json (no tag, no commit).');
+console.log('[cli/bump] commit it in your PR — merging to `production` publishes @latest + tags it.');

package/scripts/publish-npm.mjs

@@ -13,7 +13,7 @@
 //   3. Bakes a channel-appropriate release.json (lib/release-core.mjs) —
 //      staging URLs for experimental/staging, prod for latest. Never a tunnel.
 //   4. For prerelease channels, synthesizes a disposable X.Y.Z-<tag>.<n> version.
-//   5. Runs `npm publish --tag <distTag>` (with --provenance in CI).
+//   5. Runs `npm publish --tag <distTag>` (no --provenance — strapi/fimo is private).
 //   6. Restores package.json + removes the transient release.json.
 //
 // `npm publish` triggers prepublishOnly (clean → build → build:bundle), so the
@@ -106,11 +106,11 @@ try {
   // 3. Bake release.json (allowlist-enforced).
   writeReleaseJson(CLI_ROOT, channel);
 
-  // 4. Publish.
+  // 4. Publish. No --provenance: sigstore provenance requires a PUBLIC source
+  //    repo, and strapi/fimo is private (npm returns 422 otherwise). Trusted
+  //    Publishing (OIDC auth) works regardless of repo visibility — it's only
+  //    the attestation that's public-repo-only.
   const publishArgs = ['publish', '--access', 'public', '--tag', channel.distTag];
-  if (isCI) {
-    publishArgs.push('--provenance');
-  }
   if (dryRun) {
     publishArgs.push('--dry-run');
   }

package/templates/react-router/package.json

@@ -22,7 +22,7 @@
     "cmdk": "^1.1.1",
     "date-fns": "^4.1.0",
     "embla-carousel-react": "^8.6.0",
-    "fimo": "0.2.2",
+    "fimo": "0.2.3-experimental.1782118113229",
     "input-otp": "^1.4.2",
     "isbot": "^5",
     "lucide-react": "^0.577.0",
@@ -53,11 +53,5 @@
     "tw-animate-css": "^1.4.0",
     "typescript": "5.9.3",
     "vite": "^8.0.13"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "esbuild",
-      "fimo"
-    ]
   }
 }

package/templates/react-router/pnpm-workspace.yaml

@@ -1,3 +1,6 @@
-allowBuilds:
-  esbuild: true
-  fimo: true
+# Build approval is handled at install time by fimopm's
+# `--dangerously-allow-all-builds`. Do NOT add `allowBuilds` /
+# `onlyBuiltDependencies` here: pnpm refuses to have both an allowlist and
+# allow-all-builds (ERR_PNPM_CONFIG_CONFLICT_BUILT_DEPENDENCIES), which makes
+# `fimopm install` install nothing — the project's `fimo` dep goes missing and
+# the deploy build fails to resolve `fimo/vite`.