sitevision-cli 1.0.0-beta.32 → 1.0.0-beta.33

package/CHANGELOG.md

@@ -1,5 +1,55 @@
 # Changelog
 
+## 1.0.0-beta.33
+
+- **Breaking:** `--token` and `--cookie` are removed, since credentials on the
+  command line end up in shell history. Use `SITEVISION_ACCESS_TOKEN` or
+  `SITEVISION_SESSION_COOKIE` instead.
+- **Breaking:** an unknown flag is now an error (exit code 2), so a misspelt
+  `--production` never turns into a dev deploy.
+- `svc build`, `svc sign` and `svc deploy` work without a terminal. They print
+  their log line by line and exit on their own with a proper exit code: 0 on
+  success, 1 on failure, 130 when a prompt is cancelled. `svc dev` and
+  `svc watch` no longer crash when stdin is a pipe.
+- New flags: `--no-zip` for `build`, and the short forms `-s`, `-f`, `-p` and
+  `-a`.
+- Global settings in `~/.config/sitevision-cli/config.json`: a default signing
+  user and certificate for every project that does not set its own, and
+  switches for the update check and the addon name warning. Edit them with `,`
+  in the shell, which now shows a description of each setting and opens from
+  anywhere, or run `svc setup-signing --global`. A file that does not parse is
+  reported and left alone.
+- The Config tab marks the addon name with `≠ manifest` when it matches none
+  of the manifest's names. Nothing is changed for you; the two are different
+  things and `svc` only points the difference out.
+- The manifest's name and description always have a Swedish row in the Config
+  tab. Filling it in on a plain name keeps the old text as the English one.
+- In a workspace, an environment's addon name is stored per app. Setting it
+  for one app no longer leaks into the others.
+- `svc` names the missing setting when the deploy config is incomplete,
+  instead of posting to "undefined".
+- A production deploy with `--activate` fails if the activation did not
+  happen, and the confirmation names the addon it deploys to.
+- OAuth2 requires https and a token endpoint on the site's own domain. A
+  refresh token is only thrown away when the site rejects it, not on a network
+  error. An expired session cookie is removed so the next deploy asks for a
+  new login.
+- A plaintext password in `.dev_properties.json` is moved to the keychain when
+  the file is saved, and `svc` says so when the keychain cannot store a secret.
+  `SVC_NO_KEYCHAIN=1` turns the keychain off for CI.
+- `svc dev` with a project's own webpack config no longer deploys a half-built
+  zip when several files change at once.
+- Builds work when dependencies are hoisted to the workspace root, a
+  `manifest.json` in the project root is picked up, file names with å, ä and ö
+  survive in the zip, and `SITEVISION_APP_ID_PREFIX`/`_SUFFIX` apply to build,
+  sign and deploy alike.
+- A broken app in a workspace is skipped with a message instead of stopping
+  the shell. The shell asks before quitting during app creation, the PROD
+  badge survives a narrow terminal, Esc cancels a confirm, and Ctrl-modified
+  keys never fire a shortcut.
+- The update check is skipped without a terminal and when `CI` is set.
+- Updated user guides in English and Swedish.
+
 ## 1.0.0-beta.32
 
 - Sitevision CLI can now create new apps. **New app** in the command palette

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Rasmus Söderström
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/cli.js

@@ -13,7 +13,7 @@ import { requireProject, detectProject, migrateLegacyPassword, } from './utils/p
 import { discoverApps } from './utils/workspace.js';
 import { promptYesNo } from './utils/password-prompt.js';
 import { checkForUpdate } from './utils/version-check.js';
-import { isFirstRun, markFirstRunComplete, getLastSeenVersion, setLastSeenVersion, getSettings, } from './utils/config.js';
+import { isFirstRun, markFirstRunComplete, getLastSeenVersion, setLastSeenVersion, getSettings, configProblem, settingsFile, } from './utils/config.js';
 import { setLanguage } from './utils/i18n.js';
 import { WelcomeScreen } from './components/WelcomeScreen.js';
 import { AnimatedLogo } from './components/AnimatedLogo.js';
@@ -31,11 +31,21 @@ const cli = meow(`
 	  sign          Sign the app for production deployment
 	  deploy        Deploy the application
 	  info          Show project information
+	  setup-signing Store the signing username and certificate
 
 	Options
-	  --minimal     Shell: compact layout for small terminals
-	  --help        Show this help message
-	  --version     Show version number
+	  --signed, -s      dev/watch: sign after each build
+	  --force, -f       deploy: overwrite the existing addon version
+	  --production, -p  deploy: upload the signed zip to production
+	  --activate, -a    deploy: activate after a production deploy
+	  --no-zip          build: skip the zip archive
+	  --global          setup-signing: save for every project on this machine
+	  --minimal         Shell: compact layout for small terminals
+	  --help            Show this help message
+	  --version         Show version number
+
+	Credentials for CI come from the environment: SITEVISION_DEPLOY_PASSWORD,
+	SITEVISION_ACCESS_TOKEN or SITEVISION_SESSION_COOKIE.
 
 	Examples
 	  $ svc                     # Shell: run inside an app, or at the repo root
@@ -50,9 +60,20 @@ const cli = meow(`
 	  $ svc info
 `, {
     importMeta: import.meta,
+    allowUnknownFlags: false,
     flags: {
         signed: {
             type: 'boolean',
+            shortFlag: 's',
+            default: false,
+        },
+        zip: {
+            type: 'boolean',
+            default: true,
+        },
+        activate: {
+            type: 'boolean',
+            shortFlag: 'a',
             default: false,
         },
         force: {
@@ -65,16 +86,14 @@ const cli = meow(`
             shortFlag: 'p',
             default: false,
         },
-        token: {
-            type: 'string',
-        },
-        cookie: {
-            type: 'string',
-        },
         minimal: {
             type: 'boolean',
             default: false,
         },
+        global: {
+            type: 'boolean',
+            default: false,
+        },
     },
 });
 const [commandName, ...args] = cli.input;
@@ -145,10 +164,19 @@ async function playIntro(art) {
 // Run the full-screen shell on the alternate screen buffer so the scrollback
 // is untouched, and restore it on exit. The animated wordmark plays first,
 // inside the same buffer, when the terminal is wide enough for it.
-async function runShell(apps, workspaceRoot, updatedFrom) {
+async function runShell(apps, workspaceRoot, updatedFrom, skipped = []) {
     process.stdout.write('\x1b[?1049h\x1b[H');
     // Also leave the alternate screen when a signal exits past the finally.
     process.once('exit', () => process.stdout.write('\x1b[?1049l'));
+    // A crash outside React would print into the alternate screen and vanish
+    // with it: leave it first, then report.
+    const crash = (error) => {
+        process.stdout.write('\x1b[?1049l');
+        console.error('svc crashed:', error);
+        shutdown(1);
+    };
+    process.once('uncaughtException', crash);
+    process.once('unhandledRejection', crash);
     try {
         const art = process.stdin.isTTY && settings.introAnimation && !cli.flags.minimal
             ? pickIntroArt(process.stdout.columns ?? 0)
@@ -161,7 +189,7 @@ async function runShell(apps, workspaceRoot, updatedFrom) {
         // the terminal to itself, and starts the shell again.
         for (;;) {
             let job;
-            const app = render(_jsx(Shell, { apps: apps, workspaceRoot: workspaceRoot, version: pkg.version, minimal: cli.flags.minimal, updatedFrom: updatedFrom, handover: next => {
+            const app = render(_jsx(Shell, { apps: apps, workspaceRoot: workspaceRoot, version: pkg.version, minimal: cli.flags.minimal, updatedFrom: updatedFrom, skipped: skipped, handover: next => {
                     job = next;
                     app.unmount();
                 } }));
@@ -172,8 +200,10 @@ async function runShell(apps, workspaceRoot, updatedFrom) {
             process.stdout.write('\x1b[?1049l');
             // eslint-disable-next-line no-await-in-loop
             await job();
-            if (workspaceRoot)
-                apps = discoverApps(workspaceRoot);
+            if (workspaceRoot) {
+                skipped = [];
+                apps = discoverApps(workspaceRoot, skipped);
+            }
             updatedFrom = undefined;
             process.stdout.write('\x1b[?1049h\x1b[2J\x1b[H');
         }
@@ -209,8 +239,13 @@ async function main() {
         }
         // Record the current version so the banner shows once per upgrade.
         setLastSeenVersion(pkg.version);
+        if (configProblem()) {
+            console.log(`\x1b[33m  ${settingsFile()} does not parse and is ignored: ${configProblem()}\x1b[0m`);
+        }
         // Check npm for a newer published release.
-        const latestVersion = await checkForUpdate(pkg.name, pkg.version);
+        const latestVersion = settings.updateCheck && process.stdout.isTTY && !process.env['CI']
+            ? await checkForUpdate(pkg.name, pkg.version)
+            : null;
         if (latestVersion) {
             console.log(`\x1b[33m  ↑ update available: ${pkg.version} → ${latestVersion}  (run: npm i -g ${pkg.name})\x1b[0m`);
         }
@@ -226,11 +261,13 @@ async function main() {
             fail(error.message, 'Fix the manifest and try again');
         }
         if (!project) {
-            const apps = discoverApps(process.cwd());
+            const skipped = [];
+            const apps = discoverApps(process.cwd(), skipped);
             if (apps.length === 0) {
-                fail('No Sitevision apps found here.', 'Run svc inside an app directory (manifest.json) or at the root of a repo that contains apps.');
+                fail('No Sitevision apps found here.', skipped[0] ??
+                    'Run svc inside an app directory (manifest.json) or at the root of a repo that contains apps.');
             }
-            await runShell(apps, process.cwd(), isUpdate ? lastSeen : undefined);
+            await runShell(apps, process.cwd(), isUpdate ? lastSeen : undefined, skipped);
             shutdown();
             return;
         }
@@ -257,22 +294,6 @@ async function main() {
             return fail(error.message, "Make sure you're in a Sitevision project directory");
         }
     })();
-    // --token / --cookie override the resolved bearer token / session cookie for
-    // this run (manual / CI path, alongside SITEVISION_ACCESS_TOKEN and
-    // SITEVISION_SESSION_COOKIE).
-    if (cli.flags.token || cli.flags.cookie) {
-        if (project.devProperties) {
-            if (cli.flags.token) {
-                project.devProperties.accessToken = cli.flags.token;
-            }
-            if (cli.flags.cookie) {
-                project.devProperties.sessionCookie = cli.flags.cookie;
-            }
-        }
-        else {
-            console.log('\x1b[33m--token/--cookie needs a .dev_properties.json (domain, site, addon) to deploy against.\x1b[0m');
-        }
-    }
     // Get the command
     const command = getCommand(commandName);
     if (!command) {
@@ -290,7 +311,7 @@ async function main() {
                 console.log('\x1b[32m✓ Password moved to keychain.\x1b[0m\n');
             }
             else {
-                console.log('\x1b[31mCould not access keychain; leaving the file unchanged.\x1b[0m\n');
+                console.log('\x1b[31mCould not move the password; the file still holds it.\x1b[0m\n');
             }
         }
     }

package/dist/commands/TaskScreen.js

@@ -0,0 +1,32 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef } from 'react';
+import { styleText } from 'node:util';
+import { Box, useStdout } from 'ink';
+import { StatusIndicator } from '../components/StatusIndicator.js';
+import { useTasks } from '../utils/tasks.js';
+import { useFinish } from './use-finish.js';
+const LEVEL_STYLE = { info: 'reset', ok: 'green', warn: 'yellow', error: 'red' };
+/**
+ * A one-shot command: the task's log printed above the status as it comes (a
+ * terminal keeps it in scrollback, CI keeps all of it), then exit with its result.
+ */
+export function TaskScreen({ task, stay = false, children }) {
+    const { write } = useStdout();
+    const live = useTasks().find(t => t.id === task.id) ?? task;
+    const result = live.status === 'running'
+        ? undefined
+        : live.status === 'success'
+            ? 'success'
+            : 'error';
+    // ponytail: counts lines, so past the task's 2000-line cap (where old lines
+    // are dropped) some would be skipped. No one-shot command logs that much.
+    const printed = useRef(0);
+    useEffect(() => {
+        for (const line of live.lines.slice(printed.current)) {
+            write(`${styleText('dim', line.tag.padEnd(3))} ${styleText(LEVEL_STYLE[line.level], line.text)}\n`);
+        }
+        printed.current = live.lines.length;
+    });
+    useFinish(result, stay && result === 'error');
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, marginTop: 1, children: [_jsx(StatusIndicator, { status: result ?? 'running', label: live.phase, message: `${live.label} ${live.appName}` }), children] }));
+}

package/dist/commands/build.js

@@ -1,192 +1,13 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import React from 'react';
-import { render, Box, Text, useInput } from 'ink';
-import { StatusIndicator } from '../components/StatusIndicator.js';
-import { WebpackRunner, hasLocalWebpackConfig } from '../utils/webpack-runner.js';
-import { hasSitevisionScripts, runSitevisionScriptsBuild, getDelegatedZipPath, checkSitevisionScriptsCompatibility, } from '../utils/sitevision-scripts-runner.js';
-import { copyStaticToBuild, copySrcToBuild, cleanBuild, formatFileSize, createBuildZip, getZipSize, zipExists, } from '../utils/zip.js';
-import { isBundledApp, getAppType, getFullAppId, } from '../utils/project-detection.js';
-export function BuildScreen({ projectRoot, manifest, createZip = true, onBack, }) {
-    const [state, setState] = React.useState({
-        status: 'cleaning',
-        message: 'Cleaning build directory...',
-    });
-    useInput((input, key) => {
-        if (onBack &&
-            (key.escape || input === 'q') &&
-            (state.status === 'success' || state.status === 'error')) {
-            onBack();
-        }
-    });
-    const isBundled = isBundledApp(manifest);
-    React.useEffect(() => {
-        async function runBuild() {
-            try {
-                // Step 1: Clean build directory
-                setState({ status: 'cleaning', message: 'Cleaning build directory...' });
-                cleanBuild(projectRoot);
-                // Step 2: Build or copy files
-                if (isBundled && !hasLocalWebpackConfig(projectRoot)) {
-                    // No project-local webpack config: delegate the whole build to
-                    // @sitevision/sitevision-scripts, which compiles + zips to
-                    // dist/<appId>.zip (the path the CLI's sign/deploy already use).
-                    if (!hasSitevisionScripts(projectRoot)) {
-                        setState({
-                            status: 'error',
-                            error: 'No webpack.config.js found and @sitevision/sitevision-scripts is not installed. Run npm install.',
-                        });
-                        return;
-                    }
-                    // Warn if the installed sitevision-scripts is outside the range
-                    // the delegated build was validated against.
-                    const warning = checkSitevisionScriptsCompatibility(projectRoot).warning;
-                    setState({
-                        status: 'building',
-                        message: 'Building via sitevision-scripts...',
-                        warning,
-                    });
-                    const sitevisionResult = await runSitevisionScriptsBuild(projectRoot);
-                    if (!sitevisionResult.success) {
-                        setState({
-                            status: 'error',
-                            error: `${sitevisionResult.error}\n${sitevisionResult.output.slice(-1000)}`,
-                            warning,
-                        });
-                        return;
-                    }
-                    // sitevision-scripts already produced the zip; report it directly.
-                    const zipPath = getDelegatedZipPath(projectRoot, manifest.id);
-                    if (!zipExists(zipPath)) {
-                        setState({
-                            status: 'error',
-                            error: `Build reported success but no zip was found at ${zipPath}.`,
-                            warning,
-                        });
-                        return;
-                    }
-                    setState({
-                        status: 'success',
-                        message: 'Build complete',
-                        zipPath,
-                        zipSize: getZipSize(zipPath),
-                        warning,
-                    });
-                    return;
-                }
-                if (isBundled) {
-                    // Project ships its own webpack config: build it in-process.
-                    if (!WebpackRunner.isWebpackAvailable(projectRoot)) {
-                        setState({
-                            status: 'error',
-                            error: 'webpack not found. Run npm install to install dependencies.',
-                        });
-                        return;
-                    }
-                    setState({ status: 'building', message: 'Compiling with webpack...' });
-                    const appType = getAppType(manifest);
-                    const runner = new WebpackRunner(projectRoot, {
-                        mode: 'production',
-                        cssPrefix: manifest.id,
-                        restApp: appType !== 'web' && appType !== 'widget',
-                    });
-                    const result = await runner.run();
-                    await runner.close();
-                    if (!result.success) {
-                        setState({
-                            status: 'error',
-                            error: result.errors?.join('\n') || 'Build failed',
-                            result,
-                        });
-                        return;
-                    }
-                    // Copy static files after webpack build
-                    setState({ status: 'copying', message: 'Copying static files...' });
-                    copyStaticToBuild(projectRoot);
-                    setState(prev => ({ ...prev, result }));
-                }
-                else {
-                    // Non-bundled app: just copy files
-                    setState({ status: 'copying', message: 'Copying source files...' });
-                    copySrcToBuild(projectRoot);
-                    copyStaticToBuild(projectRoot);
-                }
-                // Step 3: Create zip if requested
-                if (createZip) {
-                    setState({ status: 'zipping', message: 'Creating zip archive...' });
-                    const appId = getFullAppId(manifest.id);
-                    const zipPath = await createBuildZip(projectRoot, appId);
-                    const zipSize = getZipSize(zipPath);
-                    setState(prev => ({
-                        ...prev,
-                        status: 'success',
-                        message: 'Build complete',
-                        zipPath,
-                        zipSize,
-                    }));
-                }
-                else {
-                    setState(prev => ({
-                        ...prev,
-                        status: 'success',
-                        message: 'Build complete',
-                    }));
-                }
-            }
-            catch (error) {
-                setState({
-                    status: 'error',
-                    error: error instanceof Error ? error.message : String(error),
-                });
-            }
-        }
-        runBuild();
-    }, [projectRoot, manifest, isBundled, createZip]);
-    const getStatusIndicator = () => {
-        switch (state.status) {
-            case 'cleaning':
-            case 'building':
-            case 'copying':
-            case 'zipping':
-                return 'running';
-            case 'success':
-                return 'success';
-            case 'error':
-                return 'error';
-        }
-    };
-    const getStatusLabel = () => {
-        switch (state.status) {
-            case 'cleaning':
-                return 'Cleaning';
-            case 'building':
-                return 'Building';
-            case 'copying':
-                return 'Copying files';
-            case 'zipping':
-                return 'Creating zip';
-            case 'success':
-                return 'Build complete';
-            case 'error':
-                return 'Build failed';
-        }
-    };
-    return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(StatusIndicator, { status: getStatusIndicator(), label: getStatusLabel(), message: state.message }) }), state.warning && (_jsx(Box, { marginBottom: 1, children: _jsxs(Text, { color: "yellow", children: ["\u26A0 ", state.warning] }) })), state.status === 'success' && state.result?.stats && (_jsxs(Box, { flexDirection: "column", marginLeft: 2, children: [_jsxs(Text, { dimColor: true, children: ["Compiled in ", state.result.stats.time, "ms"] }), state.result.stats.assets &&
-                        state.result.stats.assets.length > 0 && (_jsxs(Text, { dimColor: true, children: ["Assets: ", state.result.stats.assets.join(', ')] }))] })), state.status === 'success' && state.zipPath && (_jsxs(Box, { flexDirection: "column", marginLeft: 2, marginTop: 1, children: [_jsxs(Text, { color: "green", children: ["\u2713 Created: ", state.zipPath] }), state.zipSize !== undefined && (_jsxs(Text, { dimColor: true, children: [" Size: ", formatFileSize(state.zipSize)] }))] })), state.result?.warnings && state.result.warnings.length > 0 && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Text, { color: "yellow", children: "Warnings:" }), state.result.warnings.slice(0, 5).map((warning, i) => (_jsx(Text, { color: "yellow", dimColor: true, children: warning.substring(0, 200) }, i))), state.result.warnings.length > 5 && (_jsxs(Text, { color: "yellow", dimColor: true, children: ["...and ", state.result.warnings.length - 5, " more"] }))] })), state.status === 'error' && state.error && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(Text, { color: "red", children: state.error }) })), onBack && (state.status === 'success' || state.status === 'error') && (_jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: "Press q or Esc to return to menu" }) }))] }));
-}
+import { jsx as _jsx } from "react/jsx-runtime";
+import { render } from 'ink';
+import { TaskScreen } from './TaskScreen.js';
+import { startBuild } from '../utils/tasks.js';
 export const buildCommand = {
     name: 'build',
     description: 'Build the application for production',
     requiresProject: true,
-    flags: {
-        'no-zip': {
-            type: 'boolean',
-            description: 'Skip creating the zip archive',
-            default: false,
-        },
-    },
     async execute({ project, flags }) {
-        const createZip = !flags['no-zip'];
-        const { waitUntilExit } = render(_jsx(BuildScreen, { projectRoot: project.root, manifest: project.manifest, createZip: createZip }));
-        await waitUntilExit();
+        const task = startBuild(project, { zip: flags['zip'] !== false });
+        await render(_jsx(TaskScreen, { task: task })).waitUntilExit();
     },
 };