sitevision-cli 1.0.0-beta.13 → 1.0.0-beta.15

package/dist/shell/actions.d.ts

@@ -0,0 +1,45 @@
+import type { ProjectInfo, DeployConfig } from '../types/index.js';
+export type Tab = 'overview' | 'config' | 'versions' | 'log';
+export type Credential = {
+    accessToken?: string;
+    sessionCookie?: string;
+};
+export interface ActionContext {
+    project: ProjectInfo;
+    reload: () => void;
+    askPassword: (label: string, rememberLabel?: string) => Promise<{
+        password: string;
+        remember: boolean;
+    } | null>;
+    login: (method: 'oauth2' | 'cookie') => Promise<Credential | null>;
+    confirm: (message: string) => Promise<boolean>;
+    setTab: (tab: Tab) => void;
+    openWorkspaceSettings?: () => void;
+    openSettings: () => void;
+    environment: string;
+    isProduction: boolean;
+    cycleEnvironment: () => void;
+    addEnvironment: () => Promise<void>;
+    notify: (text: string, level?: 'info' | 'ok' | 'warn' | 'error') => void;
+    quit: () => void;
+}
+export interface Action {
+    id: string;
+    key?: string;
+    group: 'app' | 'setup' | 'auth';
+    label: string;
+    detail?: (project: ProjectInfo) => string | undefined;
+    enabled?: (project: ProjectInfo) => boolean;
+    run: (ctx: ActionContext) => Promise<void>;
+}
+export declare function forgetSession(project: ProjectInfo): void;
+/** Top-bar auth state without prompting for anything. */
+export declare function authState(project: ProjectInfo): {
+    ready: boolean;
+    label: string;
+};
+export declare function resolveDeployConfig(ctx: ActionContext, fresh?: boolean): Promise<DeployConfig | null>;
+export declare const actions: Action[];
+export declare function actionForKey(key: string): Action | undefined;
+/** Subsequence match, case-insensitive: "dpp" matches "Deploy to production". */
+export declare function fuzzyMatch(query: string, text: string): boolean;

package/dist/types/index.d.ts

@@ -6,11 +6,11 @@
 /**
  * App types supported by Sitevision
  */
-export type AppType = 'WebApp' | 'Widget' | 'RESTApp';
+export type AppType = 'WebApp' | 'Widget' | 'RESTApp' | 'MCPServer';
 /**
  * Simplified app type for internal use
  */
-export type SimpleAppType = 'web' | 'widget' | 'rest';
+export type SimpleAppType = 'web' | 'widget' | 'rest' | 'mcp';
 /**
  * A manifest text field that may be a plain string or a localized object keyed
  * by language code, e.g. `{sv: 'Namn', en: 'Name'}`. Sitevision allows either
@@ -51,9 +51,18 @@ export interface DevProperties {
     authMethod?: 'basic' | 'oauth2' | 'cookie';
     oauth2?: OAuth2Config;
     sessionLoginUrl?: string;
+    baseEnvironment?: string;
+    production?: boolean;
+    environments?: Record<string, EnvironmentOverride>;
     accessToken?: string;
     sessionCookie?: string;
+    environmentName?: string;
+    productionEnvironment?: boolean;
 }
+/** Fields an environment may override; everything else comes from the base. */
+export type EnvironmentOverride = Partial<Pick<DevProperties, 'domain' | 'siteName' | 'addonName' | 'username' | 'authMethod' | 'oauth2' | 'sessionLoginUrl' | 'useHTTPForDevDeploy'>> & {
+    production?: boolean;
+};
 /**
  * OAuth2 provider config for bearer-token deploys.
  *
@@ -112,6 +121,7 @@ export interface ProjectInfo {
     hasSigningProperties: boolean;
     hasLegacyPassword: boolean;
     devProperties?: DevProperties;
+    inheritedKeys: string[];
     packageJson: PackageJson;
     hasSitevisionScripts: boolean;
     hasNodeModules: boolean;

package/dist/utils/config.d.ts

@@ -1,3 +1,13 @@
+import { type Language } from './i18n.js';
+/** User-facing preferences editable from the shell's Settings screen. */
+export interface Settings {
+    language: Language;
+    introAnimation: boolean;
+}
+export declare function getSettings(): Settings;
+export declare function setSettings(patch: Partial<Settings>): void;
+/** Path of the config file, for display. */
+export declare function settingsFile(): string;
 /**
  * True until the user has completed the first-run welcome at least once.
  */

package/dist/utils/config.js

@@ -26,6 +26,20 @@ function writeConfig(config) {
         // shows again next time, which is harmless.
     }
 }
+export function getSettings() {
+    const config = readConfig();
+    return {
+        language: config.language ?? 'en',
+        introAnimation: config.introAnimation ?? true,
+    };
+}
+export function setSettings(patch) {
+    writeConfig({ ...readConfig(), ...patch });
+}
+/** Path of the config file, for display. */
+export function settingsFile() {
+    return configFile();
+}
 /**
  * True until the user has completed the first-run welcome at least once.
  */

package/dist/utils/environments.d.ts

@@ -0,0 +1,20 @@
+import type { DevProperties, EnvironmentOverride, ProjectInfo } from '../types/index.js';
+/** Name of the environment the top-level dev properties describe. */
+export declare function baseEnvironment(dev?: Partial<DevProperties>): string;
+export declare function environmentNames(dev?: Partial<DevProperties>): string[];
+export declare function isProductionEnvironment(name: string, dev?: Partial<DevProperties>): boolean;
+/** Badge colour: dev green, production red, anything else yellow. */
+export declare function environmentColor(name: string, dev?: Partial<DevProperties>): 'green' | 'yellow' | 'red';
+/**
+ * The effective dev properties for one environment: the base with that
+ * environment's overrides applied and credentials resolved for its
+ * domain/username. The base ("dev") is returned as-is.
+ */
+export declare function resolveEnvironment(dev: DevProperties, name: string): DevProperties;
+/** A project view whose dev properties are resolved for `name`. */
+export declare function environmentProject(project: ProjectInfo, name: string): ProjectInfo;
+/**
+ * Write one environment's override into the base: keep only the keys whose
+ * value differs from the base, so the file stays minimal.
+ */
+export declare function withEnvironmentOverride(base: DevProperties, name: string, values: EnvironmentOverride): DevProperties;

package/dist/utils/environments.js

@@ -0,0 +1,74 @@
+import { resolveRuntimeSecrets } from './project-detection.js';
+/** Name of the environment the top-level dev properties describe. */
+export function baseEnvironment(dev) {
+    return dev?.baseEnvironment?.trim() || 'dev';
+}
+export function environmentNames(dev) {
+    const base = baseEnvironment(dev);
+    return [
+        base,
+        ...Object.keys(dev?.environments ?? {}).filter(name => name !== base),
+    ];
+}
+export function isProductionEnvironment(name, dev) {
+    if (name === baseEnvironment(dev))
+        return dev?.production ?? false;
+    return dev?.environments?.[name]?.production ?? /prod/i.test(name);
+}
+/** Badge colour: dev green, production red, anything else yellow. */
+export function environmentColor(name, dev) {
+    if (isProductionEnvironment(name, dev))
+        return 'red';
+    return name === baseEnvironment(dev) ? 'green' : 'yellow';
+}
+/**
+ * The effective dev properties for one environment: the base with that
+ * environment's overrides applied and credentials resolved for its
+ * domain/username. The base ("dev") is returned as-is.
+ */
+export function resolveEnvironment(dev, name) {
+    const production = isProductionEnvironment(name, dev);
+    if (name === baseEnvironment(dev)) {
+        return { ...dev, environmentName: name, productionEnvironment: production };
+    }
+    const override = dev.environments?.[name] ?? {};
+    const { production: _production, ...fields } = override;
+    const resolved = {
+        ...dev,
+        ...fields,
+        password: undefined,
+        accessToken: undefined,
+        sessionCookie: undefined,
+        environmentName: name,
+        productionEnvironment: production,
+    };
+    return resolveRuntimeSecrets(resolved);
+}
+/** A project view whose dev properties are resolved for `name`. */
+export function environmentProject(project, name) {
+    if (!project.devProperties)
+        return project;
+    return {
+        ...project,
+        devProperties: resolveEnvironment(project.devProperties, name),
+    };
+}
+/**
+ * Write one environment's override into the base: keep only the keys whose
+ * value differs from the base, so the file stays minimal.
+ */
+export function withEnvironmentOverride(base, name, values) {
+    const current = { ...base.environments?.[name] };
+    const changed = Object.fromEntries(Object.entries(values).map(([key, value]) => {
+        const baseValue = base[key];
+        const same = value === undefined ||
+            value === '' ||
+            JSON.stringify(value) === JSON.stringify(baseValue);
+        return [key, same ? undefined : value];
+    }));
+    const override = Object.fromEntries(Object.entries({ ...current, ...changed }).filter(([, value]) => value !== undefined));
+    return {
+        ...base,
+        environments: { ...base.environments, [name]: override },
+    };
+}

package/dist/utils/i18n.d.ts

@@ -0,0 +1,12 @@
+/**
+ * UI language. English strings are the keys; `t()` returns them untouched in
+ * English and looks them up in the Swedish table otherwise, falling back to
+ * English for anything untranslated. `{name}` placeholders are filled from
+ * the vars argument.
+ */
+export type Language = 'en' | 'sv';
+export declare const LANGUAGES: Language[];
+export declare const LANGUAGE_NAMES: Record<Language, string>;
+export declare function getLanguage(): Language;
+export declare function setLanguage(language: Language): void;
+export declare function t(text: string, vars?: Record<string, string | number>): string;

package/dist/utils/i18n.js

@@ -0,0 +1,263 @@
+export const LANGUAGES = ['en', 'sv'];
+export const LANGUAGE_NAMES = {
+    en: 'English',
+    sv: 'Svenska',
+};
+let current = 'en';
+export function getLanguage() {
+    return current;
+}
+export function setLanguage(language) {
+    current = language;
+}
+export function t(text, vars) {
+    let out = current === 'sv' ? (sv[text] ?? text) : text;
+    if (vars) {
+        for (const [name, value] of Object.entries(vars)) {
+            out = out.split(`{${name}}`).join(String(value));
+        }
+    }
+    return out;
+}
+const sv = {
+    // Frame
+    APP: 'APP',
+    'WORKSPACE {n} apps': 'ARBETSYTA {n} appar',
+    'WORKSPACE 1 app': 'ARBETSYTA 1 app',
+    '{arrow} {n} more': '{arrow} {n} till',
+    'deps·config·sync·signing': 'beroenden·konfig·synk·sign',
+    'Workspace settings': 'Arbetsyteinställningar',
+    TASKS: 'UPPGIFTER',
+    // Tabs
+    Overview: 'Översikt',
+    Config: 'Konfig',
+    Versions: 'Versioner',
+    Log: 'Logg',
+    Ovw: 'Övs',
+    Cfg: 'Kfg',
+    Ver: 'Ver',
+    id: 'id',
+    version: 'version',
+    type: 'typ',
+    addon: 'tillägg',
+    site: 'webbplats',
+    domain: 'domän',
+    auth: 'auth',
+    'signing user': 'signeringsanv.',
+    'not set': 'ej satt',
+    '↑ root': '↑ rot',
+    ' · bundled': ' · paketerad',
+    deps: 'beroenden',
+    config: 'konfig',
+    sync: 'synk',
+    signing: 'signering',
+    scripts: 'scripts',
+    'missing · i to install': 'saknas · i för att installera',
+    'not installed · i to install': 'ej installerat · i för att installera',
+    'dev properties': 'dev-egenskaper',
+    'missing · e to edit': 'saknas · e för att redigera',
+    '{n} diffs · y to apply': '{n} skillnader · y för att tillämpa',
+    '1 diff · y to apply': '1 skillnad · y för att tillämpa',
+    'missing · / set up signing': 'saknas · / konfigurera signering',
+    'not installed': 'ej installerat',
+    '⚠ plaintext password in .dev_properties.json · / migrate': '⚠ lösenord i klartext i .dev_properties.json · / migrera',
+    RECENT: 'SENASTE',
+    '⚠ Configure dev properties first (e).': '⚠ Konfigurera dev-egenskaper först (e).',
+    'Press R to fetch versions from {domain}.': 'Tryck R för att hämta versioner från {domain}.',
+    'APP IDENTIFIER': 'APP-ID',
+    VERSION: 'VERSION',
+    ACTIVE: 'AKTIV',
+    'No versions uploaded to {addon}.': 'Inga versioner uppladdade till {addon}.',
+    '{n} versions · a activate selected · R refresh': '{n} versioner · a aktivera vald · R uppdatera',
+    '1 version · a activate selected · R refresh': '1 version · a aktivera vald · R uppdatera',
+    ' · fetched {time}': ' · hämtad {time}',
+    'No task yet. d dev · w watch · b build · s sign · p deploy': 'Ingen uppgift ännu. d dev · w watch · b build · s sign · p deploy',
+    ' · following': ' · följer',
+    // Palette
+    SETUP: 'INSTÄLLNINGAR',
+    AUTH: 'AUTH',
+    Commands: 'Kommandon',
+    '{n} actions': '{n} åtgärder',
+    'type to filter · ↑↓ move · Enter run · Esc close': 'skriv för att filtrera · ↑↓ flytta · Enter kör · Esc stäng',
+    // Addon picker
+    'Addon Repository': 'Tilläggsförråd',
+    '{n} of {m}': '{n} av {m}',
+    'fetching addons': 'hämtar tillägg',
+    '↑↓ move · Enter select · Esc cancel': '↑↓ flytta · Enter välj · Esc avbryt',
+    // Actions
+    Dev: 'Dev',
+    Watch: 'Watch',
+    Build: 'Build',
+    Sign: 'Sign',
+    Deploy: 'Driftsätt',
+    'Deploy (force)': 'Driftsätt (tvinga)',
+    'to {env}': 'till {env}',
+    'Switch environment': 'Byt miljö',
+    'Add environment': 'Lägg till miljö',
+    'e.g. test or prod, overriding domain and auth': 't.ex. test eller prod, med egen domän och auth',
+    'Environment name (e.g. test, prod)': 'Miljönamn (t.ex. test, prod)',
+    'Deploy the signed {id} to {env} and activate it?': 'Driftsätt signerade {id} till {env} och aktivera?',
+    'Dev never deploys to a production environment ({env}). Switch with E.': 'Dev driftsätter aldrig till en produktionsmiljö ({env}). Byt med E.',
+    'switched to {env}': 'bytte till {env}',
+    'environment {env} added': 'miljön {env} tillagd',
+    environment: 'miljö',
+    production: 'produktion',
+    env: 'miljö',
+    '↑ dev': '↑ dev',
+    'Activate a remote version': 'Aktivera en fjärrversion',
+    'Stop running task': 'Stoppa pågående uppgift',
+    'Edit config': 'Redigera konfig',
+    'Sync package.json': 'Synka package.json',
+    'Migrate password to OS keychain': 'Flytta lösenord till nyckelringen',
+    'Install dependencies': 'Installera beroenden',
+    'Log in': 'Logga in',
+    'Log out': 'Logga ut',
+    Quit: 'Avsluta',
+    Settings: 'Inställningar',
+    'build, sign and deploy on change': 'bygg, signera och driftsätt vid ändring',
+    'build and deploy on change': 'bygg och driftsätt vid ändring',
+    'rebuild and sign only': 'bara bygg om och signera',
+    'rebuild only': 'bara bygg om',
+    'credentials missing': 'uppgifter saknas',
+    'signed zip · confirms first': 'signerad zip · bekräftar först',
+    'shared auth and site config for every app': 'delad auth och webbplatskonfig för alla appar',
+    'dev properties, auth method, signing': 'dev-egenskaper, auth-metod, signering',
+    '{n} diffs': '{n} skillnader',
+    '1 diff': '1 skillnad',
+    'in sync': 'synkad',
+    'forget stored credentials for this site': 'glöm sparade uppgifter för webbplatsen',
+    'language, intro animation, workspace config': 'språk, introanimation, arbetsytans konfig',
+    'Workspace config': 'Arbetsytans konfig',
+    'not configured': 'ej konfigurerad',
+    'basic · password needed': 'basic · lösenord krävs',
+    'oauth2 · not logged in': 'oauth2 · ej inloggad',
+    'sso · not logged in': 'sso · ej inloggad',
+    'Dev properties not configured. Edit config first.': 'Dev-egenskaper ej konfigurerade. Redigera konfig först.',
+    'Deploy password for {user}@{domain}': 'Driftsättningslösenord för {user}@{domain}',
+    'Save to OS keychain': 'Spara i nyckelringen',
+    'Signing credentials not configured.': 'Signeringsuppgifter ej konfigurerade.',
+    'Signing password for {user} (developer.sitevision.se)': 'Signeringslösenord för {user} (developer.sitevision.se)',
+    'A dev/watch task is already running for this app (K stops it).': 'En dev/watch-uppgift körs redan för appen (K stoppar den).',
+    'stopped {n} task(s)': 'stoppade {n} uppgift(er)',
+    'nothing running': 'inget körs',
+    'Not in a workspace: run svc at the repo root.': 'Ingen arbetsyta: kör svc i repots rot.',
+    'package.json updated': 'package.json uppdaterad',
+    'password moved to keychain': 'lösenord flyttat till nyckelringen',
+    'could not access keychain': 'kunde inte nå nyckelringen',
+    'logged in': 'inloggad',
+    'credentials removed': 'uppgifter borttagna',
+    // Config form
+    'Development domain': 'Utvecklingsdomän',
+    'Site name': 'Webbplatsnamn',
+    'Addon name': 'Tilläggsnamn',
+    Username: 'Användarnamn',
+    'Auth method': 'Auth-metod',
+    Password: 'Lösenord',
+    'OAuth2 client id': 'OAuth2 klient-id',
+    'Authorization endpoint': 'Auktoriseringsendpoint',
+    'Token endpoint': 'Token-endpoint',
+    Scopes: 'Scopes',
+    'Client secret': 'Klienthemlighet',
+    'Login URL': 'Inloggnings-URL',
+    'Use HTTP': 'Använd HTTP',
+    'Signing user': 'Signeringsanvändare',
+    Certificate: 'Certifikat',
+    'Signing password': 'Signeringslösenord',
+    '^O pick from repo': '^O välj från förråd',
+    'Space-separated scopes to request. ALL grants the Sitevision API and offline_access adds a refresh token so later runs log in silently. Match the casing your client expects.': 'Scopes att begära, separerade med mellanslag. ALL ger Sitevision-API:et och offline_access ger en refresh-token så att senare körningar loggar in tyst. Använd det skiftläge klienten förväntar sig.',
+    'blank = site root': 'tomt = webbplatsens rot',
+    'required for signed deploys': 'krävs för signerad driftsättning',
+    'blank = prompt each run': 'tomt = fråga varje gång',
+    SIGNING: 'SIGNERING',
+    ENVIRONMENT: 'MILJÖ',
+    'Environment name': 'Miljönamn',
+    Production: 'Produktion',
+    'What this base configuration is: dev, test, prod… Other environments are added on top of it with E or the palette and override only what differs.': 'Vad denna grundkonfiguration är: dev, test, prod… Andra miljöer läggs ovanpå med E eller paletten och skriver bara över det som skiljer.',
+    'Treat deploys to this base environment as production: signed zip, confirmation, activation, and no dev loop. Off by default even when the name says prod, so a repo with only a production site still gets a dev loop.': 'Behandla driftsättningar till grundmiljön som produktion: signerad zip, bekräftelse, aktivering och ingen dev-loop. Av som standard även om namnet säger prod, så att ett repo med bara en produktionssajt ändå får en dev-loop.',
+    'Saved {label}.': 'Sparade {label}.',
+    'Looking up OAuth2 endpoints…': 'Slår upp OAuth2-endpoints…',
+    'Endpoints filled from the site OpenID config.': 'Endpoints ifyllda från webbplatsens OpenID-konfig.',
+    'Could not discover OAuth2 endpoints; enter them by hand.': 'Kunde inte hitta OAuth2-endpoints; ange dem manuellt.',
+    '✗ required': '✗ krävs',
+    keychain: 'nyckelring',
+    local: 'lokal',
+    '•••••••• keychain': '•••••••• nyckelring',
+    FIELD: 'FÄLT',
+    VALUE: 'VÄRDE',
+    SOURCE: 'KÄLLA',
+    "Shared by every app below {root}. An app's own value wins.": 'Delas av alla appar under {root}. Appens eget värde vinner.',
+    'PACKAGE.JSON SYNC': 'PACKAGE.JSON-SYNK',
+    '←→ choose · Enter confirm · Esc cancel': '←→ välj · Enter bekräfta · Esc avbryt',
+    'Enter save · Esc cancel': 'Enter spara · Esc avbryt',
+    '↑↓ field · Enter edit · ^O pick addon': '↑↓ fält · Enter redigera · ^O välj tillägg',
+    '↑↓ field · Enter edit': '↑↓ fält · Enter redigera',
+    'Tab to edit': 'Tab för att redigera',
+    yes: 'ja',
+    no: 'nej',
+    // Shell
+    workspace: 'arbetsyta',
+    settings: 'inställningar',
+    save: 'spara',
+    cancel: 'avbryt',
+    field: 'fält',
+    edit: 'redigera',
+    back: 'tillbaka',
+    quit: 'avsluta',
+    'edit settings': 'redigera inställningar',
+    apps: 'appar',
+    activate: 'aktivera',
+    refresh: 'uppdatera',
+    deploy: 'driftsätt',
+    commands: 'kommandon',
+    follow: 'följ',
+    wrap: 'radbryt',
+    stop: 'stoppa',
+    'pick addon': 'välj tillägg',
+    login: 'logga in',
+    install: 'installera',
+    '{v} is already active': '{v} är redan aktiv',
+    '{v} activated': '{v} aktiverad',
+    'No credentials.': 'Inga uppgifter.',
+    'not available': 'ej tillgänglig',
+    '{n} tasks': '{n} uppgifter',
+    idle: 'inaktiv',
+    'workspace config saved': 'arbetsytans konfig sparad',
+    'config saved': 'konfig sparad',
+    ' · shared .dev_properties.json at the root': ' · delad .dev_properties.json i roten',
+    'y confirm · n cancel': 'y bekräfta · n avbryt',
+    // Config help
+    'Domain of the development environment (USE or TSE) without https://, e.g. myorg-use.sitevision-cloud.se. Deploys and version lookups go here.': 'Domän för utvecklingsmiljön (USE eller TSE) utan https://, t.ex. myorg-use.sitevision-cloud.se. Driftsättningar och versionslistor går hit.',
+    "Name of the site's root node in Sitevision, exactly as shown in the site tree. It becomes part of the REST API path.": 'Namnet på webbplatsens rotnod i Sitevision, exakt som i webbplatsträdet. Det blir en del av REST API-sökvägen.',
+    "Name of the addon (custom module) in the site's Addon Repository that this app is uploaded into. Ctrl+O lists the existing ones.": 'Namnet på tillägget (custom module) i webbplatsens tilläggsförråd som appen laddas upp till. Ctrl+O listar befintliga.',
+    'Sitevision account used for deploys, usually your Sitevision Cloud e-mail. It needs DEVELOPER or MANAGE_ADDONS permission on the site.': 'Sitevision-konto som används för driftsättning, oftast din Sitevision Cloud-e-post. Behöver DEVELOPER eller MANAGE_ADDONS på webbplatsen.',
+    "How deploys authenticate: basic = username and password; oauth2 = bearer token from the site's OAuth2 provider (PKCE, opens a browser); cookie = reuse a browser SSO/SAML session.": 'Hur driftsättningar autentiseras: basic = användarnamn och lösenord; oauth2 = bearer-token från webbplatsens OAuth2-provider (PKCE, öppnar webbläsare); cookie = återanvänd en SSO/SAML-session från webbläsaren.',
+    'Deploy password for the account above. Stored in the OS keychain, never in a file. Leave empty to be asked on each run.': 'Driftsättningslösenord för kontot ovan. Sparas i nyckelringen, aldrig i en fil. Lämna tomt för att bli tillfrågad varje gång.',
+    'Client id of the OAuth2 client registered on the site. Its redirect URI must be http://127.0.0.1:8137/callback.': 'Klient-id för OAuth2-klienten som är registrerad på webbplatsen. Dess redirect-URI måste vara http://127.0.0.1:8137/callback.',
+    "The provider's authorization URL. Filled in from the site's OpenID configuration when it can be discovered.": 'Providerns auktoriserings-URL. Fylls i från webbplatsens OpenID-konfiguration när den kan hittas.',
+    "The provider's token URL. Filled in from the site's OpenID configuration when it can be discovered.": 'Providerns token-URL. Fylls i från webbplatsens OpenID-konfiguration när den kan hittas.',
+    'Secret of a confidential OAuth2 client, stored in the OS keychain. Leave empty for a public client.': 'Hemlighet för en konfidentiell OAuth2-klient, sparas i nyckelringen. Lämna tomt för en publik klient.',
+    'Page opened in the browser for the SSO login. Leave empty to use the site root.': 'Sida som öppnas i webbläsaren för SSO-inloggning. Tomt = webbplatsens rot.',
+    'Use plain HTTP instead of HTTPS for deploys. Only for local or test servers without TLS.': 'Använd HTTP i stället för HTTPS vid driftsättning. Bara för lokala servrar eller testservrar utan TLS.',
+    'Your developer.sitevision.se account. Production deploys need the app signed by it.': 'Ditt konto på developer.sitevision.se. Produktionsdriftsättningar kräver att appen är signerad av det.',
+    'Which certificate to sign with when your developer account has several. Leave empty for the default.': 'Vilket certifikat som ska signera när utvecklarkontot har flera. Tomt = standard.',
+    'Password for the signing account, stored in the OS keychain. Leave empty to be asked on each run.': 'Lösenord för signeringskontot, sparas i nyckelringen. Lämna tomt för att bli tillfrågad varje gång.',
+    // Settings screen
+    Language: 'Språk',
+    'Intro animation': 'Introanimation',
+    on: 'på',
+    off: 'av',
+    'Saved.': 'Sparat.',
+    'stored in {file}': 'sparas i {file}',
+    '↑↓ setting · Enter edit · Esc close': '↑↓ inställning · Enter redigera · Esc stäng',
+    // Password prompt / login
+    'Press Enter to submit, Esc to cancel': 'Tryck Enter för att skicka, Esc för att avbryta',
+    '(Tab to toggle)': '(Tab växlar)',
+    'OAuth2 login': 'OAuth2-inloggning',
+    'Session cookie login': 'Sessionskaka-inloggning',
+    'Waiting for you to finish login in the browser…': 'Väntar på att du loggar in i webbläsaren…',
+    "If the browser didn't open, visit:": 'Om webbläsaren inte öppnades, gå till:',
+    'Opening browser…': 'Öppnar webbläsare…',
+    'Log in in the opened browser, then press Enter to capture the session.': 'Logga in i webbläsaren och tryck sedan Enter för att fånga sessionen.',
+    'Capturing session…': 'Fångar session…',
+    'Press Esc to cancel.': 'Tryck Esc för att avbryta.',
+};

package/dist/utils/oauth2-auth.d.ts

@@ -1,6 +1,7 @@
 import type { DevProperties } from '../types/index.js';
 /** Default loopback port. Fixed so a single redirect URI can be whitelisted. */
 export declare const DEFAULT_REDIRECT_PORT = 8137;
+export declare const DEFAULT_SCOPES: string[];
 /** RFC 7636 S256 pair. Exported for testing the challenge derivation. */
 export declare function createPkcePair(): {
     verifier: string;

package/dist/utils/oauth2-auth.js

@@ -1,10 +1,13 @@
 import http from 'http';
 import crypto from 'crypto';
-import { spawn } from 'child_process';
+import open from 'open';
 import { makeRequest, summarizeErrorBody } from './sitevision-api.js';
 import { getOAuth2RefreshToken, setOAuth2RefreshToken, deleteOAuth2RefreshToken, getOAuth2ClientSecret, } from './keychain.js';
 /** Default loopback port. Fixed so a single redirect URI can be whitelisted. */
 export const DEFAULT_REDIRECT_PORT = 8137;
+// Sitevision's provider grants everything under ALL; offline_access adds the
+// refresh token so later runs log in silently.
+export const DEFAULT_SCOPES = ['ALL', 'offline_access'];
 /** Seconds to wait for the user to finish logging in before giving up. */
 const LOGIN_TIMEOUT_MS = 300_000;
 function base64url(buffer) {
@@ -81,15 +84,11 @@ export async function discoverOAuth2Config(domain, useHTTP = false) {
     }
 }
 export function openBrowser(url) {
-    const isWin = process.platform === 'win32';
-    const cmd = process.platform === 'darwin' ? 'open' : isWin ? 'cmd' : 'xdg-open';
-    const args = isWin ? ['/c', 'start', '', url] : [url];
-    try {
-        spawn(cmd, args, { stdio: 'ignore', detached: true }).unref();
-    }
-    catch {
+    // Preserve the full OAuth URL, including & and percent-encoded parameters,
+    // through Windows shell parsing. `open` handles platform-specific escaping.
+    void open(url).catch(() => {
         // Fall back to the printed URL.
-    }
+    });
 }
 /**
  * Turn a redirect's query params into a result, prioritizing the provider's own
@@ -185,9 +184,7 @@ export function beginOAuth2Login(dev) {
     url.searchParams.set('state', state);
     url.searchParams.set('code_challenge', challenge);
     url.searchParams.set('code_challenge_method', 'S256');
-    if (config.scopes?.length) {
-        url.searchParams.set('scope', config.scopes.join(' '));
-    }
+    url.searchParams.set('scope', (config.scopes ?? DEFAULT_SCOPES).join(' '));
     const loopback = startLoopback(port, state);
     const complete = async () => {
         const redirect = await loopback.result;

package/dist/utils/project-detection.d.ts

@@ -22,6 +22,14 @@ export declare function findDevPropertiesPath(root: string): string | null;
  * Get the default dev properties path (for creating new files)
  */
 export declare function getDefaultDevPropertiesPath(root: string): string;
+/**
+ * The dev properties a workspace root defines (its own file merged over any
+ * ancestors'), with the deploy password resolved from the keychain like an
+ * app's would be. Used to edit shared config from the shell.
+ */
+export declare function readWorkspaceDevProperties(root: string): Partial<DevProperties>;
+/** Dev properties inherited from ancestor directories only (no own file). */
+export declare function readInheritedDevProperties(root: string): Partial<DevProperties>;
 /**
  * Get the full app ID including any prefix/suffix from environment
  *
@@ -81,12 +89,25 @@ export declare function readManifest(cwd: string): {
  * Detect if the current directory is a Sitevision project
  */
 export declare function detectProject(cwd?: string): ProjectInfo | null;
+/**
+ * Fill the runtime-only credential fields for the given domain/username:
+ * deploy password (env var > keychain), OAuth2 access token (env var), and
+ * session cookie (env var > keychain). Mutates and returns `dev`.
+ */
+export declare function resolveRuntimeSecrets(dev: DevProperties): DevProperties;
 /**
  * Validate that we're in a Sitevision project directory
  */
 export declare function requireProject(cwd?: string): ProjectInfo;
 /**
- * Get the app type (web, widget, rest)
+ * The app type (web, widget, rest, mcp), or undefined for a manifest type
+ * this CLI does not know. Display code uses this so one odd app never takes
+ * the whole shell down.
+ */
+export declare function appTypeOf(manifest: SitevisionManifest): SimpleAppType | undefined;
+/**
+ * Get the app type (web, widget, rest, mcp). Throws for unknown types, since
+ * build and deploy cannot proceed without knowing the endpoints.
  */
 export declare function getAppType(manifest: SitevisionManifest): SimpleAppType;
 /**
@@ -109,6 +130,7 @@ export declare function writeDevProperties(projectRoot: string, properties: DevP
  */
 export interface SvcConfig {
     syncPackageJson?: boolean;
+    environment?: string;
     [key: string]: unknown;
 }
 export declare function readSvcConfig(projectRoot: string): SvcConfig;