@camox/cli 0.36.3 → 0.39.0

package/dist/auth-core-cCuk5aZy.mjs

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+//#region src/lib/auth-core.ts
+const AUTH_DIR = path.join(os.homedir(), ".camox");
+const AUTH_FILE = path.join(AUTH_DIR, "auth.json");
+function normalizeUrl(url) {
+	return url.replace(/\/+$/, "");
+}
+function readAllTokens() {
+	try {
+		return JSON.parse(fs.readFileSync(AUTH_FILE, "utf-8"));
+	} catch {
+		return {};
+	}
+}
+function writeAllTokens(tokens) {
+	fs.mkdirSync(AUTH_DIR, { recursive: true });
+	fs.writeFileSync(AUTH_FILE, JSON.stringify(tokens, null, 2), { mode: 384 });
+}
+/** Look up stored credentials for a specific Camox authentication backend. */
+function readAuthTokenForUrl(authenticationUrl) {
+	const entry = readAllTokens()[normalizeUrl(authenticationUrl)];
+	if (entry?.token && entry?.name && typeof entry.email === "string") return entry;
+	return null;
+}
+function writeAuthTokenForUrl(authenticationUrl, token) {
+	const tokens = readAllTokens();
+	tokens[normalizeUrl(authenticationUrl)] = token;
+	writeAllTokens(tokens);
+}
+function removeAuthTokenForUrl(authenticationUrl) {
+	const tokens = readAllTokens();
+	delete tokens[normalizeUrl(authenticationUrl)];
+	if (Object.keys(tokens).length > 0) {
+		writeAllTokens(tokens);
+		return;
+	}
+	try {
+		fs.unlinkSync(AUTH_FILE);
+	} catch {}
+}
+async function verifyOneTimeToken(apiUrl, token) {
+	const res = await fetch(`${normalizeUrl(apiUrl)}/api/auth/one-time-token/verify`, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify({ token })
+	});
+	if (!res.ok) throw new Error(`OTT verification failed: ${res.status}`);
+	const data = await res.json();
+	const user = data.user;
+	if (!user?.name) throw new Error("No user info in verification response");
+	const sessionToken = data.session?.token;
+	if (!sessionToken) throw new Error("No session token in verification response");
+	return {
+		name: user.name,
+		email: user.email ?? "",
+		token: sessionToken
+	};
+}
+//#endregion
+export { writeAuthTokenForUrl as a, verifyOneTimeToken as i, readAuthTokenForUrl as n, removeAuthTokenForUrl as r, normalizeUrl as t };

package/dist/index.d.mts

@@ -0,0 +1,2 @@
+
+export { };

package/dist/index.mjs

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { a as getProjectBySlug, i as createProject, n as checkSlugAvailability, o as listOrganizations, r as createOrganization, s as setActiveOrganization, t as callTool } from "./api-COfB7AKI.mjs";
+import { a as writeAuthTokenForUrl, i as verifyOneTimeToken, n as readAuthTokenForUrl, r as removeAuthTokenForUrl } from "./auth-core-cCuk5aZy.mjs";
 import { object, or } from "@optique/core/constructs";
 import { message } from "@optique/core/message";
 import { defineProgram } from "@optique/core/program";
@@ -7,13 +8,12 @@ import { runSync } from "@optique/run";
 import { multiple, optional } from "@optique/core/modifiers";
 import { command, constant, option } from "@optique/core/primitives";
 import { choice, integer, string } from "@optique/core/valueparser";
-import { execSync, spawn } from "node:child_process";
-import fs from "node:fs";
+import { execSync, spawn, spawnSync } from "node:child_process";
 import http from "node:http";
-import os from "node:os";
-import path from "node:path";
 import * as p from "@clack/prompts";
 import { log } from "@clack/prompts";
+import fs from "node:fs";
+import path from "node:path";
 import { ZodError, z } from "zod";
 import { fileURLToPath } from "node:url";
 import slugify from "slugify";
@@ -21,47 +21,14 @@ import slugify from "slugify";
 const CAMOX_URL = process.env.CAMOX_URL || "https://app.camox.dev";
 const CAMOX_API_URL = process.env.CAMOX_API_URL || "https://api.camox.dev";
 const AUTH_TIMEOUT_MS = 300 * 1e3;
-const AUTH_DIR = path.join(os.homedir(), ".camox");
-const AUTH_FILE = path.join(AUTH_DIR, "auth.json");
-function normalizeUrl(url) {
-	return url.replace(/\/+$/, "");
-}
-function readAllTokens() {
-	try {
-		return JSON.parse(fs.readFileSync(AUTH_FILE, "utf-8"));
-	} catch {
-		return {};
-	}
-}
-function writeAllTokens(tokens) {
-	fs.mkdirSync(AUTH_DIR, { recursive: true });
-	fs.writeFileSync(AUTH_FILE, JSON.stringify(tokens, null, 2), { mode: 384 });
-}
 function readAuthToken() {
 	return readAuthTokenForUrl(CAMOX_URL);
 }
-/**
-* Look up a stored token by an explicit auth URL. Used by the tool dispatch
-* path, which sources the URL from the vite plugin sidecar rather than env
-* vars so the right credential is selected per project.
-*/
-function readAuthTokenForUrl(authenticationUrl) {
-	const entry = readAllTokens()[normalizeUrl(authenticationUrl)];
-	if (entry?.token && entry?.name) return entry;
-	return null;
-}
 function writeAuthToken(token) {
-	const tokens = readAllTokens();
-	tokens[normalizeUrl(CAMOX_URL)] = token;
-	writeAllTokens(tokens);
+	writeAuthTokenForUrl(CAMOX_URL, token);
 }
 function removeAuthToken() {
-	const tokens = readAllTokens();
-	delete tokens[normalizeUrl(CAMOX_URL)];
-	if (Object.keys(tokens).length === 0) try {
-		fs.unlinkSync(AUTH_FILE);
-	} catch {}
-	else writeAllTokens(tokens);
+	removeAuthTokenForUrl(CAMOX_URL);
 }
 function openBrowser(url) {
 	const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
@@ -107,24 +74,6 @@ function startCallbackServer() {
 		server.on("error", reject);
 	});
 }
-async function verifyOtt(token) {
-	const res = await fetch(`${CAMOX_API_URL}/api/auth/one-time-token/verify`, {
-		method: "POST",
-		headers: { "Content-Type": "application/json" },
-		body: JSON.stringify({ token })
-	});
-	if (!res.ok) throw new Error(`OTT verification failed: ${res.status}`);
-	const data = await res.json();
-	const user = data.user;
-	if (!user?.name) throw new Error("No user info in verification response");
-	const sessionToken = data.session?.token;
-	if (!sessionToken) throw new Error("No session token in verification response");
-	return {
-		name: user.name,
-		email: user.email ?? "",
-		sessionToken
-	};
-}
 async function authenticateUser() {
 	const { port, ottPromise, close } = await startCallbackServer();
 	const action = await p.select({
@@ -151,14 +100,9 @@ async function authenticateUser() {
 	try {
 		const ott = await Promise.race([ottPromise, new Promise((_, reject) => setTimeout(() => reject(/* @__PURE__ */ new Error("Authentication timed out")), AUTH_TIMEOUT_MS))]);
 		s.message("Verifying...");
-		const result = await verifyOtt(ott);
-		const authToken = {
-			token: result.sessionToken,
-			name: result.name,
-			email: result.email
-		};
+		const authToken = await verifyOneTimeToken(CAMOX_API_URL, ott);
 		writeAuthToken(authToken);
-		s.stop(`Authenticated as ${result.name}`);
+		s.stop(`Authenticated as ${authToken.name}`);
 		return authToken;
 	} catch (err) {
 		s.stop("Authentication failed.");
@@ -373,7 +317,7 @@ const projectFlag$3 = optional(option("--project", string({ metavar: "SLUG" })))
 const jsonFlag$3 = option("--json");
 const productionFlag$2 = option("--production");
 const liveFlag$1 = option("--live");
-const parser$7 = command("blocks", or(command("types", object({
+const parser$8 = command("blocks", or(command("types", object({
 	command: constant("blocks.types"),
 	project: projectFlag$3,
 	production: productionFlag$2,
@@ -464,7 +408,7 @@ function collectPositioningArgs(args) {
 		toolArgs
 	};
 }
-async function handler$7(args) {
+async function handler$8(args) {
 	const outputMode = args.json ? "json" : "auto";
 	const projectFlag = args.project;
 	const production = args.production;
@@ -589,7 +533,7 @@ async function handler$7(args) {
 const projectFlag$2 = optional(option("--project", string({ metavar: "SLUG" })));
 const jsonFlag$2 = option("--json");
 const yesFlag = option("--yes", "-y");
-const parser$6 = command("env", or(command("check", object({
+const parser$7 = command("env", or(command("check", object({
 	command: constant("env.check"),
 	project: projectFlag$2,
 	json: jsonFlag$2
@@ -604,7 +548,7 @@ const parser$6 = command("env", or(command("check", object({
 	project: projectFlag$2,
 	json: jsonFlag$2
 }))));
-async function handler$6(args) {
+async function handler$7(args) {
 	const outputMode = args.json ? "json" : "auto";
 	const projectFlag = args.project;
 	switch (args.command) {
@@ -634,6 +578,16 @@ async function handler$6(args) {
 	}
 }
 //#endregion
+//#region src/lib/agent-skills.ts
+function createAgentSkillLinks(targetDir) {
+	const agentsSkillsDir = path.join(targetDir, ".agents", "skills");
+	const claudeSkillsDir = path.join(targetDir, ".claude", "skills");
+	fs.mkdirSync(agentsSkillsDir, { recursive: true });
+	fs.mkdirSync(claudeSkillsDir, { recursive: true });
+	fs.symlinkSync("../../node_modules/camox/skills/camox", path.join(agentsSkillsDir, "camox"));
+	fs.symlinkSync("../../.agents/skills/camox", path.join(claudeSkillsDir, "camox"));
+}
+//#endregion
 //#region src/lib/utils.ts
 const packageManagerVersions = {
 	pnpm: "pnpm@11.1.3",
@@ -702,8 +656,8 @@ function copyDir(src, dest, replacements) {
 }
 //#endregion
 //#region src/commands/init.ts
-const parser$5 = command("init", object({ command: constant("init") }));
-const handler$5 = init;
+const parser$6 = command("init", object({ command: constant("init") }));
+const handler$6 = init;
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const ownPkg = JSON.parse(fs.readFileSync(path.resolve(__dirname, "..", "package.json"), "utf-8"));
 const PNPM_WORKSPACE = `allowBuilds:
@@ -900,6 +854,7 @@ async function init() {
 	const s = p.spinner();
 	s.start("Scaffolding project...");
 	copyDir(path.resolve(__dirname, "..", "templates", "default"), targetDir, { "{{projectName}}": name });
+	createAgentSkillLinks(targetDir);
 	const viteConfigPath = path.join(targetDir, "vite.config.ts");
 	let viteConfig = fs.readFileSync(viteConfigPath, "utf-8");
 	viteConfig = viteConfig.replace(/"[^"]*"(,?)[ \t]*\/\/[ \t]*camox-cli:replace-slug.*$/gm, `"${project.slug}"$1`);
@@ -913,7 +868,6 @@ async function init() {
 	pkg.packageManager = packageManagerVersions[pm];
 	fs.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}\n`);
 	if (pm === "pnpm") fs.writeFileSync(path.join(targetDir, "pnpm-workspace.yaml"), PNPM_WORKSPACE);
-	fs.writeFileSync(path.join(targetDir, ".env"), `CAMOX_SYNC_SECRET=${project.syncSecret}\n`);
 	fs.writeFileSync(path.join(targetDir, ".gitignore"), `node_modules
 .DS_Store
 dist
@@ -975,13 +929,13 @@ src/routeTree.gen.ts
 const projectFlag$1 = optional(option("--project", string({ metavar: "SLUG" })));
 const jsonFlag$1 = option("--json");
 const productionFlag$1 = option("--production");
-const parser$4 = command("layouts", or(command("list", object({
+const parser$5 = command("layouts", or(command("list", object({
 	command: constant("layouts.list"),
 	project: projectFlag$1,
 	production: productionFlag$1,
 	json: jsonFlag$1
 }))));
-async function handler$4(args) {
+async function handler$5(args) {
 	const outputMode = args.json ? "json" : "auto";
 	const projectFlag = args.project;
 	const production = args.production;
@@ -997,8 +951,8 @@ async function handler$4(args) {
 }
 //#endregion
 //#region src/commands/login.ts
-const parser$3 = command("login", object({ command: constant("login") }));
-const handler$3 = login;
+const parser$4 = command("login", object({ command: constant("login") }));
+const handler$4 = login;
 async function login() {
 	p.intro("camox login");
 	try {
@@ -1012,16 +966,27 @@ async function login() {
 }
 //#endregion
 //#region src/commands/logout.ts
-const parser$2 = command("logout", object({ command: constant("logout") }));
-const handler$2 = logout;
+const parser$3 = command("logout", object({ command: constant("logout") }));
+const handler$3 = logout;
 function logout() {
 	p.intro("camox logout");
-	const token = readAuthToken();
+	let authenticationUrl = null;
+	try {
+		authenticationUrl = loadRuntime().authenticationUrl;
+	} catch (error) {
+		if (error instanceof RuntimeMalformedError) {
+			log.error(error.message);
+			return;
+		}
+		if (!(error instanceof RuntimeNotFoundError)) throw error;
+	}
+	const token = authenticationUrl ? readAuthTokenForUrl(authenticationUrl) : readAuthToken();
 	if (!token) {
 		log.error("Not logged in.");
 		return;
 	}
-	removeAuthToken();
+	if (authenticationUrl) removeAuthTokenForUrl(authenticationUrl);
+	else removeAuthToken();
 	p.log.success(`Logged out from ${token.name}.`);
 }
 //#endregion
@@ -1070,7 +1035,7 @@ const discardChanges = command("discard-changes", object({
 	production: productionFlag,
 	json: jsonFlag
 }));
-const parser$1 = command("pages", or(list, get, command("create", object({
+const parser$2 = command("pages", or(list, get, command("create", object({
 	command: constant("pages.create"),
 	nickname: optional(option("--nickname", string({ metavar: "TEXT" }))),
 	pathSegment: option("--path-segment", string({ metavar: "SEGMENT" })),
@@ -1102,7 +1067,7 @@ const parser$1 = command("pages", or(list, get, command("create", object({
 	production: productionFlag,
 	json: jsonFlag
 })), publish, unpublish, discardChanges));
-async function handler$1(args) {
+async function handler$2(args) {
 	const outputMode = args.json ? "json" : "auto";
 	const projectFlag = args.project;
 	const production = args.production;
@@ -1224,6 +1189,34 @@ async function handler$1(args) {
 	}
 }
 //#endregion
+//#region src/commands/release.ts
+const parser$1 = command("release", object({ command: constant("release") }));
+function handler$1() {
+	p.intro("camox release");
+	if (!process.env.CAMOX_DEPLOY_TOKEN) {
+		p.log.error("CAMOX_DEPLOY_TOKEN is required to release to production.");
+		process.exit(1);
+	}
+	p.log.info("Building and syncing the production environment...");
+	const result = spawnSync(process.platform === "win32" ? "vp.cmd" : "vp", ["build"], {
+		stdio: "inherit",
+		env: {
+			...process.env,
+			CAMOX_INTERNAL_RELEASE: "1"
+		}
+	});
+	if (result.error) {
+		p.log.error(`Could not start the production build: ${result.error.message}`);
+		process.exit(1);
+	}
+	if (result.status !== 0) {
+		p.log.error("Production release failed.");
+		process.exit(result.status ?? 1);
+	}
+	p.outro("Production release prepared successfully.");
+	process.exit(0);
+}
+//#endregion
 //#region src/commands/status.ts
 const parser = command("status", object({
 	command: constant("status"),
@@ -1274,7 +1267,7 @@ async function handler(args) {
 //#endregion
 //#region src/index.ts
 const result = runSync(defineProgram({
-	parser: or(parser$5, parser$3, parser$2, parser, parser$1, parser$7, parser$4, parser$6),
+	parser: or(parser$6, parser$4, parser$3, parser$1, parser, parser$2, parser$8, parser$5, parser$7),
 	metadata: {
 		name: "camox",
 		brief: message`Camox CLI`
@@ -1282,13 +1275,16 @@ const result = runSync(defineProgram({
 }), { help: "both" });
 switch (result.command) {
 	case "init":
-		await handler$5();
+		await handler$6();
 		break;
 	case "login":
-		await handler$3();
+		await handler$4();
 		break;
 	case "logout":
-		handler$2();
+		handler$3();
+		break;
+	case "release":
+		handler$1();
 		break;
 	case "status":
 		await handler(result);
@@ -1302,7 +1298,7 @@ switch (result.command) {
 	case "pages.publish":
 	case "pages.unpublish":
 	case "pages.discard-changes":
-		await handler$1(result);
+		await handler$2(result);
 		break;
 	case "blocks.types":
 	case "blocks.describe":
@@ -1312,15 +1308,15 @@ switch (result.command) {
 	case "blocks.edit":
 	case "blocks.move":
 	case "blocks.delete":
-		await handler$7(result);
+		await handler$8(result);
 		break;
 	case "layouts.list":
-		await handler$4(result);
+		await handler$5(result);
 		break;
 	case "env.check":
 	case "env.push":
 	case "env.pull":
-		await handler$6(result);
+		await handler$7(result);
 		break;
 }
 //#endregion

package/dist/lib/auth-core.d.mts

@@ -0,0 +1,15 @@
+
+//#region src/lib/auth-core.d.ts
+interface AuthToken {
+  token: string;
+  name: string;
+  email: string;
+}
+declare function normalizeUrl(url: string): string;
+/** Look up stored credentials for a specific Camox authentication backend. */
+declare function readAuthTokenForUrl(authenticationUrl: string): AuthToken | null;
+declare function writeAuthTokenForUrl(authenticationUrl: string, token: AuthToken): void;
+declare function removeAuthTokenForUrl(authenticationUrl: string): void;
+declare function verifyOneTimeToken(apiUrl: string, token: string): Promise<AuthToken>;
+//#endregion
+export { AuthToken, normalizeUrl, readAuthTokenForUrl, removeAuthTokenForUrl, verifyOneTimeToken, writeAuthTokenForUrl };

package/dist/lib/auth-core.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { a as writeAuthTokenForUrl, i as verifyOneTimeToken, n as readAuthTokenForUrl, r as removeAuthTokenForUrl, t as normalizeUrl } from "../auth-core-cCuk5aZy.mjs";
+export { normalizeUrl, readAuthTokenForUrl, removeAuthTokenForUrl, verifyOneTimeToken, writeAuthTokenForUrl };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camox/cli",
-  "version": "0.36.3",
+  "version": "0.39.0",
   "license": "MIT",
   "bin": {
     "camox": "./dist/index.mjs"
@@ -12,7 +12,11 @@
   "type": "module",
   "main": "./dist/index.mjs",
   "exports": {
-    ".": "./dist/index.mjs"
+    ".": "./dist/index.mjs",
+    "./auth": {
+      "types": "./dist/lib/auth-core.d.mts",
+      "import": "./dist/lib/auth-core.mjs"
+    }
   },
   "dependencies": {
     "@clack/prompts": "^0.10.0",
@@ -27,7 +31,7 @@
     "@types/node": "^24.12.4",
     "@typescript/native-preview": "7.0.0-dev.20260412.1",
     "vite-plus": "^0.1.21",
-    "@camox/api-contract": "0.36.3"
+    "@camox/api-contract": "0.39.0"
   },
   "nx": {
     "tags": [

package/templates/default/.env.example

@@ -1,2 +1,2 @@
-# Required — retrieve from https://app.camox.dev
-CAMOX_SYNC_SECRET=
+# CI-only production releases — retrieve from https://app.camox.dev
+CAMOX_DEPLOY_TOKEN=

package/templates/default/package.json

@@ -8,6 +8,7 @@
     "dev": "vp dev --port 7400",
     "start": "node .output/server/index.mjs",
     "build": "vp build",
+    "release": "camox release",
     "serve": "vp preview",
     "lint": "vp lint",
     "check": "vp check"

package/templates/default/vite.config.ts

@@ -3,9 +3,7 @@ import tailwindcss from "@tailwindcss/vite";
 import react, { reactCompilerPreset } from "@vitejs/plugin-react";
 import { camox } from "camox/vite";
 import { nitro } from "nitro/vite";
-import { defineConfig, loadEnv } from "vite-plus";
-
-const env = loadEnv(process.env.NODE_ENV!, process.cwd(), "CAMOX_");
+import { defineConfig } from "vite-plus";
 
 export default defineConfig({
   resolve: { tsconfigPaths: true },
@@ -14,7 +12,6 @@ export default defineConfig({
     nitro(),
     camox({
       projectSlug: "camox-template-default-01", // camox-cli:replace-slug
-      syncSecret: env.CAMOX_SYNC_SECRET,
       // camox-cli:dev-only-start
       _internal: {
         authenticationUrl: "http://localhost:3274",