fimo 0.2.5 → 0.3.0-staging.17

package/assets/skills/fimo-cli/SKILL.md

@@ -3,9 +3,10 @@ name: fimo-cli
 description: >-
   The `fimo` CLI scaffolds and manages Fimo projects from the command line.
   Load when the user wants to create a new Fimo project, build content
-  (schemas, entries, forms, media, labels/locales), deploy a site, invite
-  collaborators, inspect AI credits, log in or switch organizations, or set
-  up Fimo for their AI tool. Most "do X with Fimo" tasks go through this skill.
+  (schemas, entries, forms, media, labels/locales), deploy a site, manage
+  custom domains, check site traffic/analytics, invite collaborators, inspect
+  AI credits, log in or switch organizations, or set up Fimo for their AI
+  tool. Most "do X with Fimo" tasks go through this skill.
 ---
 
 # Fimo CLI

package/dist/cli/bundle.json

@@ -1,8 +1,8 @@
 {
   "bundled": true,
   "bundler": "esbuild",
-  "bundledAt": "2026-06-30T13:10:02.190Z",
-  "cliVersion": "0.2.5",
+  "bundledAt": "2026-07-02T12:32:25.763Z",
+  "cliVersion": "0.3.0-staging.17",
   "external": [
     "oxc-parser",
     "fsevents"

package/dist/cli/index.js

@@ -19612,6 +19612,15 @@ function throwUnauthorized(cfg, status) {
   }
   throw new UnauthorizedError(cfg.apiUrl, status);
 }
+async function throwPermissionDenied(cfg, response) {
+  let required2 = [];
+  try {
+    const body = await response.json();
+    required2 = Array.isArray(body.required) ? body.required : body.required ? [body.required] : [];
+  } catch {
+  }
+  throw new PermissionDeniedError(cfg.apiUrl, required2);
+}
 async function fimoFetch(url2, init) {
   const headers = new Headers(init.headers);
   if (!headers.has(CLI_VERSION_HEADER)) {
@@ -19626,7 +19635,7 @@ async function fimoFetch(url2, init) {
   }
   return response;
 }
-var ApiRequestError, UnauthorizedError, CLI_VERSION_HEADER, CLI_LATEST_HEADER, FIMO_ENV_HEADER, FimoApiClient;
+var ApiRequestError, UnauthorizedError, PermissionDeniedError, CLI_VERSION_HEADER, CLI_LATEST_HEADER, FIMO_ENV_HEADER, FimoApiClient;
 var init_api = __esm({
   "src/cli/api.ts"() {
     init_auth();
@@ -19667,7 +19676,27 @@ var init_api = __esm({
         this.status = status;
       }
     };
+    PermissionDeniedError = class extends Error {
+      static {
+        __name(this, "PermissionDeniedError");
+      }
+      // 403: the session is VALID but the principal's role lacks a permission.
+      // Distinct from UnauthorizedError (401, stale/invalid token) so the CLI
+      // never tells a correctly-authenticated caller to `fimo login` — that
+      // false diagnosis gets repeated verbatim by agent callers.
+      apiUrl;
+      /** Permission(s) the server reported missing — the 403 body's `required`. */
+      required;
+      constructor(apiUrl, required2 = [], message) {
+        const detail = required2.length ? ` Missing permission: ${required2.join(", ")}.` : "";
+        super(message ?? `You don't have permission to do this on ${apiUrl}.${detail}`);
+        this.name = "PermissionDeniedError";
+        this.apiUrl = apiUrl;
+        this.required = required2;
+      }
+    };
     __name(throwUnauthorized, "throwUnauthorized");
+    __name(throwPermissionDenied, "throwPermissionDenied");
     CLI_VERSION_HEADER = "X-Fimo-CLI-Version";
     CLI_LATEST_HEADER = "X-Fimo-CLI-Latest";
     FIMO_ENV_HEADER = "X-Fimo-Env";
@@ -19732,9 +19761,12 @@ var init_api = __esm({
           headers.set(FIMO_ENV_HEADER, this.env);
         }
         const response = await fimoFetch(`${this.cfg.apiUrl}${path46}`, { ...init, headers });
-        if (response.status === 401 || response.status === 403 && !opts.allow403) {
+        if (response.status === 401) {
           throwUnauthorized(this.cfg, response.status);
         }
+        if (response.status === 403 && !opts.allow403) {
+          await throwPermissionDenied(this.cfg, response);
+        }
         if (!response.ok) {
           const error45 = await this.formatError(response);
           throw new ApiRequestError(init.method ?? "GET", path46, response.status, error45);
@@ -19752,9 +19784,12 @@ var init_api = __esm({
           headers.set(FIMO_ENV_HEADER, this.env);
         }
         const response = await fimoFetch(`${this.cfg.apiUrl}${path46}`, { ...init, headers });
-        if (response.status === 401 || response.status === 403) {
+        if (response.status === 401) {
           throwUnauthorized(this.cfg, response.status);
         }
+        if (response.status === 403) {
+          await throwPermissionDenied(this.cfg, response);
+        }
         if (!response.ok) {
           const error45 = await this.formatError(response);
           throw new Error(`API ${init.method ?? "GET"} ${path46} failed: ${response.status} ${error45}`);
@@ -41596,7 +41631,7 @@ var init_color = __esm({
 
 // src/cli/utils/auth-errors.ts
 function isCliAuthError(err) {
-  return err instanceof NotAuthenticatedError || err instanceof UnauthorizedError;
+  return err instanceof NotAuthenticatedError || err instanceof UnauthorizedError || err instanceof PermissionDeniedError;
 }
 function rethrowCliAuthError(err, beforeThrow) {
   if (isCliAuthError(err)) {
@@ -41610,6 +41645,16 @@ function retryCommand(args = process.argv.slice(2)) {
 function formatCliAuthError(err, opts = {}) {
   const p2 = opts.palette ?? palette;
   const command = retryCommand(opts.args);
+  if (err instanceof PermissionDeniedError) {
+    return [
+      `${p2.red("\u2717")} You don't have permission to run this command.`,
+      "",
+      err.required.length ? `  Missing permission: ${p2.bold(err.required.join(", "))}` : "  Your role on this project does not allow this action.",
+      "  Ask a project admin for access, or use an account with a higher role.",
+      "",
+      p2.dim(`  Backend: ${err.apiUrl}`)
+    ].join("\n");
+  }
   const expired = err instanceof UnauthorizedError;
   const intro = expired ? "Your Fimo session is expired or invalid." : "You're not signed in to Fimo.";
   const loginVerb = expired ? "refresh your session" : "sign in";
@@ -42736,7 +42781,9 @@ var init_integration_dto = __esm({
     BindProjectChannelRequestSchema = external_exports.object({
       ref: external_exports.string().min(1),
       connectionAlias: external_exports.string().min(1).optional(),
-      agentName: external_exports.string().min(1).max(160).nullable().optional()
+      agentName: external_exports.string().min(1).max(160).nullable().optional(),
+      /** Take over a channel already bound to another project in the same org (org owner/admin only). */
+      force: external_exports.boolean().optional()
     });
     ProjectChannelBindingDTOSchema = external_exports.object({
       id: external_exports.uuid(),
@@ -45322,6 +45369,16 @@ var init_git = __esm({
 });
 
 // src/cli/utils/project-context.ts
+function projectSettingsFromEnv() {
+  const projectId = process.env.FIMO_PROJECT_ID?.trim();
+  if (!projectId) return null;
+  return {
+    projectId,
+    organizationId: process.env.FIMO_ORGANIZATION_ID?.trim() ?? "",
+    name: process.env.FIMO_PROJECT_NAME?.trim() ?? projectId,
+    apiUrl: process.env.FIMO_API_URL?.trim() ?? loadConfig().apiUrl
+  };
+}
 async function resolveEnvFromGit(cwd) {
   if (!await isGitRepo(cwd)) return null;
   try {
@@ -45343,7 +45400,11 @@ async function getProjectContext(opts = {}) {
   try {
     settings = loadProjectSettings(cwd);
   } catch {
-    throw new NotInProjectError();
+    const fromEnv = projectSettingsFromEnv();
+    if (!fromEnv) {
+      throw new NotInProjectError();
+    }
+    settings = fromEnv;
   }
   let env2;
   let source;
@@ -45447,6 +45508,7 @@ var init_project_context = __esm({
         this.name = "NotInProjectError";
       }
     };
+    __name(projectSettingsFromEnv, "projectSettingsFromEnv");
     InvalidEnvOverrideError = class extends Error {
       static {
         __name(this, "InvalidEnvOverrideError");
@@ -100149,7 +100211,7 @@ Examples:
 Run \`fimo channels <command> --help\` for command-specific help.
 `
   );
-  channels.command("bind <ref>").description("Bind a provider channel to this project").option("--project <id>", "Project id (defaults to .fimo.settings.json projectId)").option("-C, --cwd <dir>", "Project directory").option("--connection <alias>", "Connection alias when a project has more than one provider connection").option("--agent <name>", "Agent name reserved for this channel binding").action((ref, opts) => bindCommand(ref, opts));
+  channels.command("bind <ref>").description("Bind a provider channel to this project").option("--project <id>", "Project id (defaults to .fimo.settings.json projectId)").option("-C, --cwd <dir>", "Project directory").option("--connection <alias>", "Connection alias when a project has more than one provider connection").option("--agent <name>", "Agent name reserved for this channel binding").option("--force", "Take over a channel already bound to another project in your org (org owner/admin only)").action((ref, opts) => bindCommand(ref, opts));
 }
 __name(registerChannelsCommands, "registerChannelsCommands");
 async function bindCommand(ref, opts) {
@@ -100158,7 +100220,8 @@ async function bindCommand(ref, opts) {
   const binding = await api.bindProjectChannel(projectId, {
     ref,
     connectionAlias: opts.connection,
-    agentName: opts.agent
+    agentName: opts.agent,
+    force: opts.force
   });
   ui.ok({
     command: "channels bind",
@@ -109194,13 +109257,22 @@ program.parseAsync(process.argv).catch((err) => {
   const command = process.argv[2] ?? "fimo";
   if (isCliAuthError(err)) {
     if (currentMode().format === "json") {
-      const isExpired = err instanceof UnauthorizedError;
-      ui.error({
-        command,
-        code: isExpired ? "SESSION_EXPIRED" : "NOT_AUTHENTICATED",
-        message: err.message,
-        hint: isExpired ? "Run `fimo login` to refresh." : "Run `fimo login` to sign in."
-      });
+      if (err instanceof PermissionDeniedError) {
+        ui.error({
+          command,
+          code: "PERMISSION_DENIED",
+          message: err.message,
+          hint: err.required.length ? `Your role lacks \`${err.required.join(", ")}\` on this project \u2014 ask a project admin for access.` : "Your role does not allow this action on this project \u2014 ask a project admin for access."
+        });
+      } else {
+        const isExpired = err instanceof UnauthorizedError;
+        ui.error({
+          command,
+          code: isExpired ? "SESSION_EXPIRED" : "NOT_AUTHENTICATED",
+          message: err.message,
+          hint: isExpired ? "Run `fimo login` to refresh." : "Run `fimo login` to sign in."
+        });
+      }
     } else {
       renderCliAuthError(err);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fimo",
-  "version": "0.2.5",
+  "version": "0.3.0-staging.17",
   "description": "Fimo CLI - create, deploy, and manage Fimo projects",
   "bin": {
     "fimo": "dist/cli/index.js"

package/release.json

@@ -1,5 +1,5 @@
 {
   "source": "npm",
-  "apiUrl": "https://api.fimo.ai",
-  "webUrl": "https://fimo.ai"
+  "apiUrl": "https://api.staging.fimo.team",
+  "webUrl": "https://staging.fimo.team"
 }

package/templates/react-router/package.json

@@ -21,7 +21,7 @@
     "cmdk": "^1.1.1",
     "date-fns": "^4.1.0",
     "embla-carousel-react": "^8.6.0",
-    "fimo": "0.2.5",
+    "fimo": "0.3.0-staging.17",
     "input-otp": "^1.4.2",
     "isbot": "^5",
     "lucide-react": "^0.577.0",