@camox/cli 0.58.0 → 0.59.0

package/dist/index.mjs

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
-import { c as NOT_PUBLISHED_CODES, i as getProject, l as NO_DEVELOPMENT_DRAFT_ERROR, n as developmentDraftHeaders, o as DEVELOPMENT_DRAFT, r as getDevelopmentDraft, s as DRAFT_ENDED_ERROR_CODE, t as callTool } from "./api-CBYfBQrH.mjs";
 import { t as installLocalhostDns } from "./local-dns-DQIT1ucr.mjs";
-import { a as removeAuthTokenForUrl, i as readAuthTokenForUrl, n as isLoopbackUrl, o as verifyOneTimeToken, r as normalizeUrl, s as writeAuthTokenForUrl, t as createPreviewSignInUrl } from "./auth-core-xLeorUUV.mjs";
+import { i as UUID, n as pushCode, t as createCodeReadToken } from "./api-DU0iBFMw.mjs";
+import { a as removeAuthTokenForUrl, i as readAuthTokenForUrl, o as verifyOneTimeToken, s as writeAuthTokenForUrl } from "./auth-core-BpVsNVnR.mjs";
 import { object, or } from "@optique/core/constructs";
 import { message } from "@optique/core/message";
 import { defineProgram } from "@optique/core/program";
 import { runSync } from "@optique/run";
-import { mkdtemp, open, readFile, rm, stat } from "node:fs/promises";
-import { multiple, optional } from "@optique/core/modifiers";
-import { command, constant, option } from "@optique/core/primitives";
-import { choice, string } from "@optique/core/valueparser";
 import { execSync, spawnSync } from "node:child_process";
-import http from "node:http";
+import path, { join, resolve } from "node:path";
 import * as p from "@clack/prompts";
 import { log } from "@clack/prompts";
-import fs, { openAsBlob } from "node:fs";
+import { optional } from "@optique/core/modifiers";
+import { argument, command, constant, option } from "@optique/core/primitives";
+import { string } from "@optique/core/valueparser";
+import http from "node:http";
+import fs, { mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
-import path, { basename, extname, join } from "node:path";
+import { text } from "node:stream/consumers";
 import { ZodError, z } from "zod";
 //#region src/lib/auth.ts
 const CAMOX_URL = process.env.CAMOX_URL || "https://app.camox.ai";
@@ -118,7 +118,7 @@ async function authenticateUser() {
 async function getOrAuthenticate() {
 	const stored = readAuthToken();
 	if (stored) {
-		const { verifySession } = await import("./api-Ph2yMPXw.mjs");
+		const { verifySession } = await import("./api-DOHUrl0V.mjs");
 		if (await verifySession(stored.token)) {
 			p.log.info(`Authenticated as ${stored.name}`);
 			return stored;
@@ -129,63 +129,133 @@ async function getOrAuthenticate() {
 	return authenticateUser();
 }
 //#endregion
-//#region src/lib/output.ts
-function isJsonMode(mode) {
-	if (mode === "json") return true;
-	return !process.stdout.isTTY;
+//#region src/lib/git-credential.ts
+/**
+* The Git config entries that make `camox git-credential` the credential helper for a remote's
+* host, written in a clone's own config only. An empty `helper` first drops every helper set
+* elsewhere for that host, such as a keychain that would keep expired read tokens. Git sends the
+* path, which names the project.
+*/
+function credentialHelperConfig(remote) {
+	const { origin } = new URL(remote);
+	return [
+		[`credential.${origin}.helper`, ""],
+		[`credential.${origin}.helper`, `!${helperCommand()}`],
+		[`credential.${origin}.useHttpPath`, "true"]
+	];
 }
-function printResult(value, mode) {
-	const indent = isJsonMode(mode) ? 0 : 2;
-	process.stdout.write(`${JSON.stringify(value, null, indent)}\n`);
+/** This CLI, as a shell runs it: with this Node.js, so it works without `camox` on the PATH. */
+function helperCommand() {
+	const quote = (arg) => `'${arg.replaceAll("'", `'\\''`)}'`;
+	return `${quote(process.execPath)} ${quote(process.argv[1])} git-credential`;
 }
-function printError(err) {
-	process.stderr.write(`${JSON.stringify(err)}\n`);
+/** Parses what Git writes to a credential helper: `key=value` lines up to a blank one. */
+function parseCredentialRequest(input) {
+	const request = {};
+	for (const line of input.split("\n")) {
+		if (line === "") break;
+		const at = line.indexOf("=");
+		if (at > 0) request[line.slice(0, at)] = line.slice(at + 1);
+	}
+	return request;
 }
-/**
-* Parse a JSON flag value, surfacing a structured CLI error if the input
-* isn't valid JSON. Block `content` and `settings` arrive this way.
-*/
-function parseJsonFlag(name, raw) {
+/** The Project ID a repo's remote path names: `git/<namespace>/<Project ID>.git`. */
+function projectIdOfPath(path) {
+	return path?.match(/([^/]+?)(?:\.git)?\/?$/)?.[1];
+}
+//#endregion
+//#region src/commands/clone.ts
+const parser$5 = command("clone", object({
+	command: constant("clone"),
+	project: argument(string({ metavar: "PROJECT" }), { description: message`The project's Project Slug or Project ID.` }),
+	directory: optional(argument(string({ metavar: "DIRECTORY" }), { description: message`Where to clone it. Defaults to its Project Slug.` }))
+}), { description: message`Clone a project's code, for a project whose code can be worked on outside Camox.` });
+async function handler$5(args) {
+	p.intro(`camox clone ${args.project}`);
+	const { token } = await getOrAuthenticate().catch(() => {
+		p.log.error("Authentication failed.");
+		process.exit(1);
+	});
+	let access;
 	try {
-		return JSON.parse(raw);
-	} catch (e) {
-		const message = e instanceof Error ? e.message : String(e);
-		throw Object.assign(/* @__PURE__ */ new Error(`Invalid JSON for ${name}: ${message}`), { __cliError: {
-			code: "INVALID_JSON",
-			message: `Invalid JSON for ${name}`,
-			details: message
-		} });
+		access = await createCodeReadToken(token, args.project);
+	} catch (error) {
+		p.log.error(error instanceof Error ? error.message : String(error));
+		process.exit(1);
+	}
+	const directory = resolve(args.directory ?? access.projectSlug);
+	const config = credentialHelperConfig(access.remote).flatMap(([key, value]) => ["--config", `${key}=${value}`]);
+	const cloned = spawnSync("git", [
+		"clone",
+		...config,
+		access.remote,
+		directory
+	], { stdio: "inherit" });
+	if (cloned.error || cloned.status !== 0) {
+		p.log.error(cloned.error ? `Could not run Git: ${cloned.error.message}` : "Git couldn't clone it.");
+		process.exit(1);
 	}
+	p.log.info("Installing dependencies...");
+	const executable = process.platform === "win32" ? "pnpm.cmd" : "pnpm";
+	const installed = spawnSync(executable, ["install"], {
+		cwd: directory,
+		stdio: "inherit"
+	});
+	if (installed.error || installed.status !== 0) {
+		p.log.error(`Cloned into ${directory}, but installing its dependencies failed.`);
+		process.exit(1);
+	}
+	p.outro(`Cloned into ${directory}.`);
+	process.exit(0);
 }
+//#endregion
+//#region src/commands/git-credential.ts
+const parser$4 = command("git-credential", object({
+	command: constant("git-credential"),
+	action: argument(string({ metavar: "ACTION" }), { description: message`What Git asks: get, store or erase.` })
+}), { description: message`The Git credential helper \`camox clone\` sets up: answers Git with short-lived read tokens.` });
 /**
-* Only the first dev-mode sync after login creates the development draft, so the CLI can't
-* (ADR 0010).
+* Answers Git's credential protocol (git-credential(1)). Only `get` is answered, with a fresh
+* read token: tokens are short-lived, so there's nothing to store or erase. Errors go to stderr,
+* since stdout is Git's.
 */
-const NO_DEVELOPMENT_DRAFT_CLI_ERROR = {
-	code: NO_DEVELOPMENT_DRAFT_ERROR,
-	message: "You have no development draft in this project yet. Run your site locally once (e.g. `pnpm dev`) to create your development draft, then retry."
-};
-/** Whether an error, or an error response body, says the caller has no development draft. */
-function isNoDevelopmentDraft(err) {
-	if (!err || typeof err !== "object" || !("code" in err)) return false;
-	return err.code === NO_DEVELOPMENT_DRAFT_ERROR;
+async function handler$4(args) {
+	const request = parseCredentialRequest(await text(process.stdin));
+	if (args.action !== "get") process.exit(0);
+	const project = projectIdOfPath(request.path);
+	if (!project) process.exit(0);
+	const session = readAuthToken();
+	if (!session) {
+		process.stderr.write("camox: not logged in. Run `camox login`, then try again.\n");
+		process.exit(1);
+	}
+	try {
+		const { token, expiresAt } = await createCodeReadToken(session.token, project);
+		const expiry = Math.floor(new Date(expiresAt).getTime() / 1e3);
+		process.stdout.write(`username=camox\npassword=${token}\npassword_expiry_utc=${expiry}\n`);
+		process.exit(0);
+	} catch (error) {
+		process.stderr.write(`camox: ${error instanceof Error ? error.message : String(error)}\n`);
+		process.exit(1);
+	}
 }
-function asCliError(err) {
-	if (err && typeof err === "object" && "__cliError" in err) return err.__cliError;
-	if (isNoDevelopmentDraft(err)) return NO_DEVELOPMENT_DRAFT_CLI_ERROR;
-	if (err instanceof Error) return {
-		code: "INTERNAL_ERROR",
-		message: err.message
-	};
-	return {
-		code: "INTERNAL_ERROR",
-		message: String(err)
-	};
+//#endregion
+//#region src/commands/login.ts
+const parser$3 = command("login", object({ command: constant("login") }));
+const handler$3 = login;
+async function login() {
+	p.intro("camox login");
+	try {
+		await getOrAuthenticate();
+	} catch {
+		p.log.error("Authentication failed.");
+		process.exit(1);
+	}
+	p.outro("You're all set!");
+	process.exit(0);
 }
 //#endregion
 //#region ../api-contract/src/ids.ts
-/** The id of a content entity: one UUIDv7, kept in Live and every draft (ADR 0004). */
-const uuidv7Schema = /* @__PURE__ */ z.uuidv7();
 /**
 * A Project ID: a UUIDv7 in lowercase only, the form the project's Worker is named by, so an
 * uppercase one fails here rather than silently naming no project.
@@ -267,817 +337,15 @@ function loadRuntime(cwd = process.cwd()) {
 	}
 }
 //#endregion
-//#region src/lib/dispatch.ts
-/**
-* Strip undefined fields. Optique returns `undefined` for absent optional
-* flags, but the tool's Zod input often distinguishes `key: undefined` from
-* the key being absent. Send only the keys the user actually passed.
-*/
-function compact(input) {
-	const out = {};
-	for (const [k, v] of Object.entries(input)) if (v !== void 0) out[k] = v;
-	return out;
-}
-function fail$2(err, code) {
-	printError(err);
-	process.exit(code);
-}
-async function resolveProjectId(token, project, apiUrl) {
-	try {
-		return (await getProject(token, project, apiUrl)).id;
-	} catch (err) {
-		if (isNoDevelopmentDraft(err)) return fail$2(NO_DEVELOPMENT_DRAFT_CLI_ERROR, 2);
-		return fail$2({
-			code: "PROJECT_LOOKUP_FAILED",
-			message: `Could not load project "${project}".`,
-			details: err instanceof Error ? err.message : String(err)
-		}, 2);
-	}
-}
-async function callRemote(params) {
-	try {
-		return await callTool(params);
-	} catch (err) {
-		return fail$2(asCliError(err), 1);
-	}
-}
-/**
-* Resolve auth + project, call the registered tool via `agent.callTool`,
-* and render the result. Exit codes: 0 on success, 1 on tool error, 2 on
-* auth/project resolution failure.
-*
-* Project, apiUrl, and authenticationUrl come from the vite plugin's
-* `node_modules/.camox/runtime.json` sidecar. `--project` and `CAMOX_PROJECT`
-* may override the project, by its Project ID or its Project Slug. Every request names the caller's
-* development draft (ADR 0010); no command takes a draft, Live or production flag.
-*/
-async function resolveCommandContext(opts) {
-	let runtime;
-	try {
-		runtime = loadRuntime(opts.cwd);
-	} catch (err) {
-		if (err instanceof RuntimeDirectoryError) return fail$2({
-			code: "INVALID_CWD",
-			message: err.message
-		}, 2);
-		if (err instanceof RuntimeNotFoundError || err instanceof RuntimeMalformedError) return fail$2({
-			code: "RUNTIME_NOT_FOUND",
-			message: err.message
-		}, 2);
-		throw err;
-	}
-	const project = opts.projectFlag?.trim() || process.env.CAMOX_PROJECT?.trim() || runtime.projectId;
-	const token = readAuthTokenForUrl(runtime.authenticationUrl, opts.cwd);
-	if (!token) return fail$2({
-		code: "NOT_AUTHENTICATED",
-		message: `No stored credentials for ${runtime.authenticationUrl}. Run \`camox login\` against this backend first.`
-	}, 2);
-	const projectId = await resolveProjectId(token.token, project, runtime.apiUrl);
-	return {
-		token: token.token,
-		apiUrl: runtime.apiUrl,
-		projectId,
-		disableTelemetry: runtime.disableTelemetry
-	};
-}
-/**
-* Resolve auth + project and call a tool, returning its result for the command to render.
-* Exits like `dispatch` when the call fails.
-*/
-async function callToolResult(opts) {
-	const response = await callRemote({
-		...await resolveCommandContext(opts),
-		name: opts.toolName,
-		args: compact({
-			...opts.args,
-			locale: opts.locale
-		})
-	});
-	if (!response.ok) {
-		printError(response.error);
-		process.exit(1);
-	}
-	return response.result;
-}
-async function dispatch(opts) {
-	printResult(await callToolResult(opts), opts.outputMode);
-	process.exit(0);
-}
-//#endregion
 //#region src/lib/runtime-options.ts
-const cwdFlag = optional(option("--cwd", string({ metavar: "PATH" }), { description: message`Start runtime lookup in this directory and walk upward. Relative to the shell's current directory; does not change how other file paths resolve.` }));
-/** The project a command targets, overriding the one in the runtime sidecar. */
-const projectFlag = optional(option("--project", string({ metavar: "PROJECT" }), { description: message`Target this project, by its Project ID or its Project Slug. Takes precedence over CAMOX_PROJECT. Defaults to the project of the app found by the runtime lookup.` }));
-/** The locale a content command reads or writes (ADR 0015). */
-const localeFlag = optional(option("--locale", string({ metavar: "TAG" }), { description: message`Read or write content in this locale, by its BCP 47 tag, such as de. Defaults to the default locale. List locales with locales list.` }));
-//#endregion
-//#region src/lib/uuidv7.ts
-/** An entity id option: rejects anything that isn't a UUIDv7 before any request. */
-function uuidv7() {
-	return {
-		mode: "sync",
-		metavar: "ID",
-		placeholder: "",
-		parse(input) {
-			if (uuidv7Schema.safeParse(input).success) return {
-				success: true,
-				value: input
-			};
-			return {
-				success: false,
-				error: message`Expected a UUIDv7, but got ${input}.`
-			};
-		},
-		format: (value) => value
-	};
-}
-//#endregion
-//#region src/commands/blocks.ts
-const jsonFlag$3 = option("--json");
-const fieldFileFlag = multiple(option("--field-file", string({ metavar: "NAME=PATH" }), { description: message`Set the string field NAME to the raw contents of the file at PATH, without JSON escaping. Repeat to set several fields. Merges with --content; when both set a field, the file wins.` }));
-const types = command("types", object({
-	command: constant("blocks.types"),
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: jsonFlag$3
-}));
-const describe = command("describe", object({
-	command: constant("blocks.describe"),
-	type: multiple(option("--type", string({ metavar: "TYPE" })), { min: 1 }),
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: jsonFlag$3
-}));
-const get$2 = command("get", object({
-	command: constant("blocks.get"),
-	id: option("--id", uuidv7()),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag$3
-}));
-const getMany = command("get-many", object({
-	command: constant("blocks.get-many"),
-	id: multiple(option("--id", uuidv7()), { min: 1 }),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag$3
-}));
-const create$1 = command("create", object({
-	command: constant("blocks.create"),
-	pageId: option("--page-id", uuidv7()),
-	type: option("--type", string({ metavar: "TYPE" })),
-	content: optional(option("--content", string({ metavar: "JSON" }))),
-	fieldFile: fieldFileFlag,
-	settings: optional(option("--settings", string({ metavar: "JSON" }))),
-	position: optional(option("--position", choice(["first", "last"], { metavar: "WHERE" }))),
-	afterId: optional(option("--after-id", uuidv7())),
-	beforeId: optional(option("--before-id", uuidv7())),
-	afterPosition: optional(option("--after-position", string({ metavar: "POS" }))),
-	beforePosition: optional(option("--before-position", string({ metavar: "POS" }))),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag$3
-}));
-const edit = command("edit", object({
-	command: constant("blocks.edit"),
-	id: option("--id", uuidv7()),
-	content: optional(option("--content", string({ metavar: "JSON" }))),
-	fieldFile: fieldFileFlag,
-	settings: optional(option("--settings", string({ metavar: "JSON" }))),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag$3
-}));
-const move = command("move", object({
-	command: constant("blocks.move"),
-	id: option("--id", uuidv7()),
-	position: optional(option("--position", choice(["first", "last"], { metavar: "WHERE" }))),
-	afterId: optional(option("--after-id", uuidv7())),
-	beforeId: optional(option("--before-id", uuidv7())),
-	afterPosition: optional(option("--after-position", string({ metavar: "POS" }))),
-	beforePosition: optional(option("--before-position", string({ metavar: "POS" }))),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag$3
-}));
-const del$1 = command("delete", object({
-	command: constant("blocks.delete"),
-	id: option("--id", uuidv7()),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag$3
-}));
-const parser$12 = command("blocks", or(types, describe, get$2, getMany, create$1, edit, move, del$1));
-const POSITIONING_FLAGS = [
-	["position", "--position"],
-	["afterId", "--after-id"],
-	["beforeId", "--before-id"],
-	["afterPosition", "--after-position"],
-	["beforePosition", "--before-position"]
-];
-/**
-* Both `create` and `move` accept multiple positioning inputs, but only one is
-* meaningful per call. The server will reject conflicts, but we surface the
-* mistake earlier (and with friendlier wording) by checking on the client.
-*/
-function collectPositioningArgs(args) {
-	const used = [];
-	const toolArgs = {};
-	for (const [key, flag] of POSITIONING_FLAGS) {
-		const value = args[key];
-		if (value === void 0) continue;
-		used.push(flag);
-		Object.assign(toolArgs, { [key]: value });
-	}
-	return {
-		used,
-		toolArgs
-	};
-}
-function fail$1(code, message) {
-	throw Object.assign(new Error(message), { __cliError: {
-		code,
-		message
-	} });
-}
-/**
-* Build block content from `--content` and repeated `--field-file NAME=PATH`
-* flags. Every file is read before anything is sent, so a bad path fails the
-* whole command without a partial write. Files win over `--content` on conflicts.
-*/
-async function resolveContent(rawContent, fieldFiles) {
-	const content = rawContent !== void 0 ? parseJsonFlag("--content", rawContent) : void 0;
-	if (fieldFiles.length === 0) return content;
-	if (content !== void 0 && (typeof content !== "object" || content === null || Array.isArray(content))) fail$1("INVALID_ARGS", "--content must be a JSON object when combined with --field-file.");
-	const merged = { ...content };
-	for (const entry of fieldFiles) {
-		const separator = entry.indexOf("=");
-		const name = entry.slice(0, separator);
-		const path = entry.slice(separator + 1);
-		if (separator <= 0 || !path) fail$1("INVALID_ARGS", `Invalid --field-file "${entry}". Use --field-file NAME=PATH.`);
-		try {
-			merged[name] = await readFile(path, "utf8");
-		} catch (err) {
-			fail$1("FILE_READ_ERROR", `Cannot read --field-file ${name}=${path} (${err instanceof Error && "code" in err ? String(err.code) : String(err)}).`);
-		}
-	}
-	return merged;
-}
-async function handler$12(args) {
-	const outputMode = args.json ? "json" : "auto";
-	const cwd = args.cwd;
-	const projectFlag = args.project;
-	const locale = args.locale;
-	try {
-		switch (args.command) {
-			case "blocks.types": return dispatch({
-				toolName: "listBlockTypes",
-				args: {},
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-			case "blocks.describe": return dispatch({
-				toolName: "describeBlockTypes",
-				args: { types: [...args.type] },
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-			case "blocks.get": return dispatch({
-				toolName: "getBlock",
-				args: { id: args.id },
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-			case "blocks.get-many": return dispatch({
-				toolName: "getBlocks",
-				args: { ids: [...args.id] },
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-			case "blocks.create": {
-				if (args.content === void 0 && args.fieldFile.length === 0) {
-					printError({
-						code: "INVALID_ARGS",
-						message: "Pass --content, --field-file, or both."
-					});
-					process.exit(2);
-				}
-				const content = await resolveContent(args.content, args.fieldFile);
-				const settings = args.settings !== void 0 ? parseJsonFlag("--settings", args.settings) : void 0;
-				const { used, toolArgs } = collectPositioningArgs(args);
-				if (used.length > 1) {
-					printError({
-						code: "INVALID_ARGS",
-						message: `Pass at most one positioning flag — got: ${used.join(", ")}.`
-					});
-					process.exit(2);
-				}
-				return dispatch({
-					toolName: "createBlock",
-					args: {
-						pageId: args.pageId,
-						type: args.type,
-						content,
-						settings,
-						...toolArgs
-					},
-					cwd,
-					projectFlag,
-					locale,
-					outputMode
-				});
-			}
-			case "blocks.edit": {
-				const content = await resolveContent(args.content, args.fieldFile);
-				const settings = args.settings !== void 0 ? parseJsonFlag("--settings", args.settings) : void 0;
-				return dispatch({
-					toolName: "editBlock",
-					args: {
-						id: args.id,
-						content,
-						settings
-					},
-					cwd,
-					projectFlag,
-					locale,
-					outputMode
-				});
-			}
-			case "blocks.move": {
-				const { used, toolArgs } = collectPositioningArgs(args);
-				if (used.length === 0) {
-					printError({
-						code: "INVALID_ARGS",
-						message: "Pass a positioning flag — one of --position, --after-id, --before-id, --after-position, --before-position. Use `--position last` to move a block to the end of the page."
-					});
-					process.exit(2);
-				}
-				if (used.length > 1) {
-					printError({
-						code: "INVALID_ARGS",
-						message: `Pass at most one positioning flag — got: ${used.join(", ")}.`
-					});
-					process.exit(2);
-				}
-				return dispatch({
-					toolName: "moveBlock",
-					args: {
-						id: args.id,
-						...toolArgs
-					},
-					cwd,
-					projectFlag,
-					locale,
-					outputMode
-				});
-			}
-			case "blocks.delete": return dispatch({
-				toolName: "deleteBlock",
-				args: { id: args.id },
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-		}
-	} catch (err) {
-		printError(asCliError(err));
-		process.exit(1);
-	}
-}
-//#endregion
-//#region src/commands/delete.ts
-const parser$11 = command("delete", object({
-	command: constant("delete"),
-	yes: option("--yes", "-y", { description: message`Delete without asking for confirmation.` }),
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: option("--json")
-}), { description: message`Delete every change in your development draft. Live is untouched.` });
-const WARNING = "This deletes every change in your development draft and can't be undone.";
-async function confirmed() {
-	if (!process.stdin.isTTY || !process.stdout.isTTY) {
-		printError({
-			code: "CONFIRMATION_REQUIRED",
-			message: `${WARNING} Re-run with --yes to confirm.`
-		});
-		process.exit(2);
-	}
-	return await p.confirm({
-		message: `${WARNING} Delete it?`,
-		initialValue: false
-	}) === true;
-}
-async function handler$11(args) {
-	const outputMode = args.json ? "json" : "auto";
-	if (!args.yes && !await confirmed()) {
-		printError({
-			code: "CANCELLED",
-			message: "Nothing was deleted."
-		});
-		process.exit(1);
-	}
-	const result = await callToolResult({
-		toolName: "deleteDraft",
-		args: {},
-		cwd: args.cwd,
-		projectFlag: args.project
-	});
-	if (isJsonMode(outputMode)) printResult(result, outputMode);
-	else process.stdout.write("Deleted every change in your development draft.\n");
-	process.exit(0);
-}
-const TIMEOUT_MS = 12e4;
-const MAX_REDIRECTS = 5;
-function fail(code, message) {
-	throw Object.assign(new Error(message), { __cliError: {
-		code,
-		message
-	} });
-}
-function validateMetadata(options) {
-	if (options.alt !== void 0 && options.aiMetadata === "on") fail("INVALID_ARGS", "--alt cannot be combined with --ai-metadata on.");
-}
-function validateUpload(options) {
-	if (options.file !== void 0 === (options.url !== void 0)) fail("INVALID_ARGS", "Pass exactly one of --file or --url.");
-	validateMetadata(options);
-	validateFilename(options.filename);
-}
-function validateFilename(filename) {
-	if (filename !== void 0 && (!filename.trim() || /[\\/]/.test(filename) || filename.split("").some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127) || filename === "." || filename === "..")) fail("INVALID_ARGS", "--filename must be a non-empty filename without directories or control characters.");
-}
-function httpUrl(value) {
-	let url;
-	try {
-		url = new URL(value);
-	} catch {
-		return fail("DOWNLOAD_FAILED", "Invalid media URL.");
-	}
-	if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) fail("DOWNLOAD_FAILED", "Media URLs must use HTTP(S) without embedded credentials.");
-	return url;
-}
-const MIME_TYPES = {
-	".jpg": "image/jpeg",
-	".jpeg": "image/jpeg",
-	".png": "image/png",
-	".webp": "image/webp",
-	".gif": "image/gif",
-	".avif": "image/avif",
-	".svg": "image/svg+xml",
-	".ico": "image/x-icon",
-	".bmp": "image/bmp",
-	".pdf": "application/pdf",
-	".mp4": "video/mp4",
-	".webm": "video/webm",
-	".mov": "video/quicktime",
-	".mp3": "audio/mpeg",
-	".wav": "audio/wav",
-	".ogg": "audio/ogg",
-	".txt": "text/plain",
-	".json": "application/json"
-};
-function mimeType(filename) {
-	return MIME_TYPES[extname(filename).toLowerCase()] ?? "application/octet-stream";
-}
-async function download(source, destination) {
-	try {
-		let url = httpUrl(source);
-		const signal = AbortSignal.timeout(TIMEOUT_MS);
-		for (let redirects = 0; redirects <= MAX_REDIRECTS; redirects++) {
-			const response = await fetch(url, {
-				redirect: "manual",
-				signal
-			});
-			if ([
-				301,
-				302,
-				303,
-				307,
-				308
-			].includes(response.status)) {
-				await response.body?.cancel();
-				const location = response.headers.get("location");
-				if (!location || redirects === MAX_REDIRECTS) fail("DOWNLOAD_FAILED", "Missing redirect location or too many redirects.");
-				url = httpUrl(new URL(location, url).href);
-				continue;
-			}
-			if (!response.ok || !response.body) {
-				await response.body?.cancel();
-				fail("DOWNLOAD_FAILED", `Media download failed (HTTP ${response.status}).`);
-			}
-			if (Number(response.headers.get("content-length")) > 104857600) {
-				await response.body.cancel();
-				fail("FILE_TOO_LARGE", "File exceeds the 100 MiB limit.");
-			}
-			const file = await open(destination, "w");
-			let size = 0;
-			try {
-				for await (const chunk of response.body) {
-					size += chunk.byteLength;
-					if (size > 104857600) fail("FILE_TOO_LARGE", "File exceeds the 100 MiB limit.");
-					await file.writeFile(chunk);
-				}
-			} finally {
-				await file.close();
-			}
-			const filename = basename(decodeURIComponent(url.pathname)) || "upload";
-			return {
-				filename,
-				mimeType: response.headers.get("content-type")?.split(";")[0]?.trim() || mimeType(filename)
-			};
-		}
-		return fail("DOWNLOAD_FAILED", "Too many redirects.");
-	} catch (error) {
-		if (error && typeof error === "object" && "__cliError" in error) throw error;
-		return fail("DOWNLOAD_FAILED", "Could not download media (network, timeout, or local I/O failure).");
-	}
-}
-async function uploadFile(context, options, targetId) {
-	validateUpload(options);
-	let temporaryDirectory;
-	try {
-		let path = options.file;
-		let filename = path ? basename(path) : "upload";
-		let type = mimeType(filename);
-		if (options.url !== void 0) {
-			temporaryDirectory = await mkdtemp(join(tmpdir(), "camox-upload-"));
-			path = join(temporaryDirectory, "download");
-			const downloaded = await download(options.url, path);
-			filename = downloaded.filename;
-			type = downloaded.mimeType;
-		}
-		if (!path) fail("INVALID_ARGS", "Provide a file path.");
-		const info = await stat(path);
-		if (!info.isFile()) fail("INVALID_ARGS", "Upload source must be a regular file.");
-		if (info.size > 104857600) fail("FILE_TOO_LARGE", "File exceeds the 100 MiB limit.");
-		const body = new FormData();
-		if (type === "application/octet-stream") type = mimeType(options.filename ?? filename);
-		body.set("file", await openAsBlob(path, { type }), options.filename ?? filename);
-		body.set("projectId", String(context.projectId));
-		if (options.alt !== void 0) body.set("alt", options.alt);
-		if (options.aiMetadata !== void 0 || options.alt !== void 0) body.set("aiMetadata", String(options.alt === void 0 && options.aiMetadata === "on"));
-		const headers = developmentDraftHeaders(context.token, context.disableTelemetry);
-		let response;
-		try {
-			const endpoint = targetId === void 0 ? "/files/upload" : `/files/${targetId}/content`;
-			response = await fetch(`${context.apiUrl}${endpoint}`, {
-				method: "POST",
-				headers,
-				body,
-				signal: AbortSignal.timeout(TIMEOUT_MS),
-				redirect: "error"
-			});
-		} catch {
-			return fail("UPLOAD_FAILED", targetId === void 0 ? "Media upload failed (network or timeout). Check files list before retrying." : `File replacement failed (network or timeout). Check files get --id ${targetId} before retrying.`);
-		}
-		if (!response.ok) {
-			if (isNoDevelopmentDraft(await response.json().catch(() => null))) throw Object.assign(new Error(NO_DEVELOPMENT_DRAFT_CLI_ERROR.message), { __cliError: NO_DEVELOPMENT_DRAFT_CLI_ERROR });
-			fail("UPLOAD_FAILED", `${targetId === void 0 ? "Media upload" : "File replacement"} failed (HTTP ${response.status}).`);
-		}
-		return await response.json();
-	} finally {
-		if (temporaryDirectory) await rm(temporaryDirectory, {
-			recursive: true,
-			force: true
-		});
-	}
-}
-//#endregion
-//#region src/commands/files.ts
-const common = {
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: option("--json")
-};
-const metadata = {
-	alt: optional(option("--alt", string({ metavar: "TEXT" }), { description: message`Alt text (including an empty string). Alt text and filename are one group: writing either makes both manual, keeping the current value of the other.` })),
-	aiMetadata: optional(option("--ai-metadata", choice(["on", "off"]), { description: message`on makes alt text and filename generated again and schedules asynchronous generation for raster images; it cannot be combined with --alt, nor with --filename on a metadata-only update. off keeps the current values as manual.` }))
-};
-const parser$10 = command("files", or(command("upload", object({
-	command: constant("files.upload"),
-	file: optional(option("--file", string({ metavar: "PATH" }), { description: message`Local file to upload. Pass exactly one of --file or --url.` })),
-	url: optional(option("--url", string({ metavar: "URL" }), { description: message`HTTP(S) URL to download and copy into Camox, not an external reference.` })),
-	filename: optional(option("--filename", string({ metavar: "NAME" }), { description: message`Override the local basename or final URL path filename.` })),
-	...metadata,
-	...common
-}), { description: message`Upload a file (maximum 100 MiB). Example: camox files upload --url https://example.com/hero.webp --alt "Product screenshot". Returns the stored file ID and URL. Without metadata options, raster images use automatic metadata.` }), command("update", object({
-	command: constant("files.update"),
-	id: option("--id", uuidv7()),
-	file: optional(option("--file", string({ metavar: "PATH" }), { description: message`Replace file content from a local path, keeping its ID and references. Mutually exclusive with --url.` })),
-	url: optional(option("--url", string({ metavar: "URL" }), { description: message`Download and replace file content from an HTTP(S) URL, keeping its ID and references. Mutually exclusive with --file.` })),
-	filename: optional(option("--filename", string({ metavar: "NAME" }), { description: message`Set the filename. Metadata-only renames preserve the URL and make alt text and filename manual; replacement uses the source filename unless overridden.` })),
-	...metadata,
-	...common
-}), { description: message`Update metadata or replace file content with --file or --url (maximum 100 MiB). Replacing affects every reference to this file in your development draft; its ID stays unchanged but its URL changes. Omitted alt text and AI settings are preserved. Example: camox files update --id <FILE_ID> --file ./hero.jpg --alt "Updated description". Use --alt "" for intentionally empty alt text.` }), command("get", object({
-	command: constant("files.get"),
-	id: option("--id", uuidv7()),
-	...common
-}), { description: message`Inspect a file in the selected project.` }), command("list", object({
-	command: constant("files.list"),
-	...common
-}), { description: message`List files in the selected project.` })), { description: message`Upload and manage files in your development draft.` });
-async function handler$10(args) {
-	const outputMode = args.json ? "json" : "auto";
-	const options = {
-		cwd: args.cwd,
-		projectFlag: args.project,
-		outputMode
-	};
-	try {
-		if (args.command === "files.upload") {
-			validateUpload(args);
-			printResult(await uploadFile(await resolveCommandContext(options), args), outputMode);
-			process.exit(0);
-		}
-		if (args.command === "files.list") return dispatch({
-			...options,
-			toolName: "listFiles",
-			args: {}
-		});
-		if (args.command === "files.get") return dispatch({
-			...options,
-			toolName: "getFile",
-			args: { id: args.id }
-		});
-		if (args.file !== void 0 || args.url !== void 0) {
-			validateUpload(args);
-			printResult(await uploadFile(await resolveCommandContext(options), args, args.id), outputMode);
-			process.exit(0);
-		}
-		validateMetadata(args);
-		validateFilename(args.filename);
-		if (args.filename !== void 0 && args.aiMetadata === "on") {
-			printError({
-				code: "INVALID_ARGS",
-				message: "--filename cannot be combined with --ai-metadata on."
-			});
-			process.exit(2);
-		}
-		if (args.alt === void 0 && args.aiMetadata === void 0 && args.filename === void 0) {
-			printError({
-				code: "INVALID_ARGS",
-				message: "Pass --file, --url, --filename, --alt or --ai-metadata."
-			});
-			process.exit(2);
-		}
-		return dispatch({
-			...options,
-			toolName: "updateFile",
-			args: {
-				id: args.id,
-				alt: args.alt,
-				filename: args.filename,
-				aiMetadata: args.aiMetadata === void 0 ? void 0 : args.aiMetadata === "on"
-			}
-		});
-	} catch (err) {
-		const error = asCliError(err);
-		printError(error);
-		process.exit(error.code === "INVALID_ARGS" ? 2 : 1);
-	}
-}
-//#endregion
-//#region src/commands/init.ts
-const parser$9 = command("init", object({ command: constant("init") }));
-const handler$9 = init;
-const DASHBOARD_URL = process.env.CAMOX_URL || "https://app.camox.ai";
-/**
-* Projects are created from the dashboard, which hosts them, so `camox init` (and
-* `npm create camox`, which runs it) only says where to go. It exits non-zero, since it created
-* nothing.
-*/
-function init() {
-	p.intro("camox init");
-	p.log.info(`Projects are now created from the Camox dashboard: ${DASHBOARD_URL}`);
-	p.outro("Nothing was created.");
-	process.exit(1);
-}
-//#endregion
-//#region src/commands/layouts.ts
-const jsonFlag$2 = option("--json");
-const list$2 = command("list", object({
-	command: constant("layouts.list"),
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: jsonFlag$2
-}), { description: message`List layout metadata. Use layouts get --layout-id NAME with a returned layoutId to discover its blocks.` });
-const get$1 = command("get", object({
-	command: constant("layouts.get"),
-	layoutId: option("--layout-id", string({ metavar: "NAME" })),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag$2
-}), { description: message`Inspect a layout and its blocks, including shared navigation and footer IDs for blocks get and blocks edit. A layout is named by the layoutId its code gives it, as listed by layouts list.` });
-const parser$8 = command("layouts", or(list$2, get$1));
-async function handler$8(args) {
-	const outputMode = args.json ? "json" : "auto";
-	const cwd = args.cwd;
-	const projectFlag = args.project;
-	const locale = args.locale;
-	switch (args.command) {
-		case "layouts.list": return dispatch({
-			toolName: "listLayouts",
-			args: {},
-			cwd,
-			projectFlag,
-			locale,
-			outputMode
-		});
-		case "layouts.get": return dispatch({
-			toolName: "getLayout",
-			args: { layoutId: args.layoutId },
-			cwd,
-			projectFlag,
-			locale,
-			outputMode
-		});
-	}
-}
-//#endregion
-//#region src/commands/locales.ts
-const jsonFlag$1 = option("--json");
-const tagFlag = option("--tag", string({ metavar: "TAG" }), { description: message`A BCP 47 language tag, such as de, pt-BR or fr-CA.` });
-const list$1 = command("list", object({
-	command: constant("locales.list"),
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: jsonFlag$1
-}), { description: message`List the draft's locales, the default locale first. Pass a locale's tag to --locale on pages, blocks and layouts commands to read or write its content.` });
-const add = command("add", object({
-	command: constant("locales.add"),
-	tag: tagFlag,
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: jsonFlag$1
-}), { description: message`Add a locale. Every page, block, repeatable item, synced block and collection record of the default locale gets a copy in it, keeping its id, which Camox translates in the background. Publishing puts the locale on Live. Example: camox locales add --tag de.` });
-const remove = command("remove", object({
-	command: constant("locales.remove"),
-	tag: tagFlag,
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: jsonFlag$1
-}), { description: message`Remove a locale with all of its content. Publishing deletes them from Live for good. The default locale can't be removed.` });
-const setDefaultTag = command("set-default-tag", object({
-	command: constant("locales.set-default-tag"),
-	tag: tagFlag,
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: jsonFlag$1
-}), { description: message`Correct the default locale's tag, such as from en to en-GB, on Live and in every draft at once. Only possible while it's the only locale.` });
-const parser$7 = command("locales", or(list$1, add, remove, setDefaultTag));
-const TOOLS = {
-	"locales.list": "listLocales",
-	"locales.add": "addLocale",
-	"locales.remove": "removeLocale",
-	"locales.set-default-tag": "setDefaultLocaleTag"
-};
-async function handler$7(args) {
-	const outputMode = args.json ? "json" : "auto";
-	return dispatch({
-		toolName: TOOLS[args.command],
-		args: "tag" in args ? { tag: args.tag } : {},
-		cwd: args.cwd,
-		projectFlag: args.project,
-		outputMode
-	});
-}
-//#endregion
-//#region src/commands/login.ts
-const parser$6 = command("login", object({ command: constant("login") }));
-const handler$6 = login;
-async function login() {
-	p.intro("camox login");
-	try {
-		await getOrAuthenticate();
-	} catch {
-		p.log.error("Authentication failed.");
-		process.exit(1);
-	}
-	p.outro("You're all set!");
-	process.exit(0);
-}
+const cwdFlag = optional(option("--cwd", string({ metavar: "PATH" }), { description: message`Start runtime lookup in this directory and walk upward. Relative to the shell's current directory.` }));
 //#endregion
 //#region src/commands/logout.ts
-const parser$5 = command("logout", object({
+const parser$2 = command("logout", object({
 	command: constant("logout"),
 	cwd: cwdFlag
 }));
-const handler$5 = logout;
+const handler$2 = logout;
 function logout(args = {}) {
 	p.intro("camox logout");
 	let authenticationUrl = null;
@@ -1100,389 +368,152 @@ function logout(args = {}) {
 	p.log.success(`Logged out from ${token.name}.`);
 }
 //#endregion
-//#region src/commands/pages.ts
-const jsonFlag = option("--json");
-const list = command("list", object({
-	command: constant("pages.list"),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag
-}));
-const get = command("get", object({
-	command: constant("pages.get"),
-	id: optional(option("--id", uuidv7())),
-	path: optional(option("--path", string({ metavar: "PATH" }))),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag
-}));
-const create = command("create", object({
-	command: constant("pages.create"),
-	nickname: optional(option("--nickname", string({ metavar: "TEXT" }))),
-	pathSegment: option("--path-segment", string({ metavar: "SEGMENT" })),
-	layoutId: option("--layout-id", string({ metavar: "NAME" })),
-	parentPageId: optional(option("--parent-page-id", uuidv7())),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag
-}));
-const update = command("update", object({
-	command: constant("pages.update"),
-	id: optional(option("--id", uuidv7())),
-	path: optional(option("--path", string({ metavar: "PATH" }))),
-	nickname: optional(option("--nickname", string({ metavar: "TEXT" }))),
-	pathSegment: optional(option("--path-segment", string({ metavar: "SEGMENT" }))),
-	parentPageId: optional(option("--parent-page-id", uuidv7())),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag
-}), { description: message`Update a page. Pass exactly one of --id or --path and at least one update field. Omitted fields are preserved. Example: camox pages update --path /about --nickname "About". Edit SEO metadata with pages set-seo.` });
-const setSeo = command("set-seo", object({
-	command: constant("pages.set-seo"),
-	id: optional(option("--id", uuidv7())),
-	path: optional(option("--path", string({ metavar: "PATH" }))),
-	metaTitle: optional(option("--meta-title", string({ metavar: "TEXT" }), { description: message`Set the SEO title. Makes both fields manual.` })),
-	metaDescription: optional(option("--meta-description", string({ metavar: "TEXT" }), { description: message`Set the SEO description. An empty string clears it. Makes both fields manual.` })),
-	aiSeo: optional(option("--ai-seo", choice(["on", "off"]), { description: message`on makes both fields generated again and schedules asynchronous generation; it cannot be combined with --meta-title or --meta-description. off keeps the current values as manual.` })),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag
-}), { description: message`Set a page's SEO metadata. The meta title and description are one group: both generated by AI, or both manual. Writing one field makes both fields manual, keeping the current value of the other. Pass exactly one of --id or --path and at least one of --meta-title, --meta-description or --ai-seo. An empty meta title blocks publishing. Example: camox pages set-seo --path /about --meta-title "About us" --meta-description "Meet the team". Read metadata with pages get.` });
-const setLayout = command("set-layout", object({
-	command: constant("pages.set-layout"),
-	id: option("--id", uuidv7()),
-	layoutId: option("--layout-id", string({ metavar: "NAME" })),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag
-}));
-const del = command("delete", object({
-	command: constant("pages.delete"),
-	id: option("--id", uuidv7()),
-	cwd: cwdFlag,
-	project: projectFlag,
-	locale: localeFlag,
-	json: jsonFlag
-}));
-const parser$4 = command("pages", or(list, get, create, update, setSeo, setLayout, del));
-async function handler$4(args) {
-	const outputMode = args.json ? "json" : "auto";
-	const cwd = args.cwd;
-	const projectFlag = args.project;
-	const locale = args.locale;
-	switch (args.command) {
-		case "pages.list": return dispatch({
-			toolName: "listPages",
-			args: {},
-			cwd,
-			projectFlag,
-			locale,
-			outputMode
-		});
-		case "pages.get":
-			if (args.id == null === (args.path == null)) {
-				printError({
-					code: "INVALID_ARGS",
-					message: "Pass exactly one of --id or --path."
-				});
-				process.exit(2);
-			}
-			return dispatch({
-				toolName: "getPage",
-				args: args.id != null ? { id: args.id } : { path: args.path },
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-		case "pages.create": return dispatch({
-			toolName: "createPage",
-			args: {
-				nickname: args.nickname,
-				pathSegment: args.pathSegment,
-				layoutId: args.layoutId,
-				parentPageId: args.parentPageId
-			},
-			cwd,
-			projectFlag,
-			locale,
-			outputMode
-		});
-		case "pages.update":
-			if (args.id == null === (args.path == null)) {
-				printError({
-					code: "INVALID_ARGS",
-					message: "Pass exactly one of --id or --path."
-				});
-				process.exit(2);
-			}
-			if ([
-				args.nickname,
-				args.pathSegment,
-				args.parentPageId
-			].every((v) => v === void 0)) {
-				printError({
-					code: "INVALID_ARGS",
-					message: "Pass at least one field to update."
-				});
-				process.exit(2);
-			}
-			return dispatch({
-				toolName: "updatePage",
-				args: {
-					...args.id != null ? { id: args.id } : { path: args.path },
-					nickname: args.nickname,
-					pathSegment: args.pathSegment,
-					parentPageId: args.parentPageId
-				},
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-		case "pages.set-seo": {
-			if (args.id == null === (args.path == null)) {
-				printError({
-					code: "INVALID_ARGS",
-					message: "Pass exactly one of --id or --path."
-				});
-				process.exit(2);
-			}
-			const writesField = args.metaTitle !== void 0 || args.metaDescription !== void 0;
-			if (!writesField && args.aiSeo === void 0) {
-				printError({
-					code: "INVALID_ARGS",
-					message: "Pass at least one of --meta-title, --meta-description or --ai-seo."
-				});
-				process.exit(2);
-			}
-			if (args.aiSeo === "on" && writesField) {
-				printError({
-					code: "INVALID_ARGS",
-					message: "--ai-seo on cannot be combined with --meta-title or --meta-description."
-				});
-				process.exit(2);
-			}
-			return dispatch({
-				toolName: "setPageSeo",
-				args: {
-					...args.id != null ? { id: args.id } : { path: args.path },
-					metaTitle: args.metaTitle,
-					metaDescription: args.metaDescription,
-					aiSeo: args.aiSeo === void 0 ? void 0 : args.aiSeo === "on"
-				},
-				cwd,
-				projectFlag,
-				locale,
-				outputMode
-			});
-		}
-		case "pages.set-layout": return dispatch({
-			toolName: "setPageLayout",
-			args: {
-				id: args.id,
-				layoutId: args.layoutId
-			},
-			cwd,
-			projectFlag,
-			locale,
-			outputMode
-		});
-		case "pages.delete": return dispatch({
-			toolName: "deletePage",
-			args: { id: args.id },
-			cwd,
-			projectFlag,
-			locale,
-			outputMode
-		});
-	}
-}
-//#endregion
-//#region src/commands/preview.ts
-const parser$3 = command("preview", object({
-	command: constant("preview"),
-	cwd: cwdFlag,
-	url: option("--url", string()),
-	json: option("--json")
-}), { description: message`Create a single-use sign-in URL for local verification. Open it in your automation browser within three minutes. The URL is a credential; do not share it.` });
-async function handler$3(args) {
-	try {
-		const url = new URL(args.url);
-		if (!isLoopbackUrl(url)) throw new Error("Preview requires an http(s) loopback URL without credentials.");
-		const runtime = loadRuntime(args.cwd);
-		const auth = readAuthTokenForUrl(runtime.authenticationUrl, args.cwd);
-		if (!auth?.email) {
-			printError({
-				code: "NOT_AUTHENTICATED",
-				message: `Run camox login for ${runtime.authenticationUrl} first.`
-			});
-			process.exitCode = 2;
-			return;
-		}
-		const target = {
-			projectUuid: runtime.projectId,
-			apiUrl: normalizeUrl(runtime.apiUrl)
-		};
-		printResult({
-			url: await createPreviewSignInUrl(url.href, target, auth.token),
-			projectId: target.projectUuid,
-			apiUrl: target.apiUrl,
-			warning: "Single-use sign-in credential, valid for three minutes. Open in your verification browser; do not share or commit."
-		}, args.json ? "json" : "auto");
-	} catch (error) {
-		printError({
-			code: "PREVIEW_FAILED",
-			message: error instanceof Error ? error.message : "Could not create preview."
-		});
-		process.exitCode = 2;
-	}
-}
-//#endregion
-//#region src/lib/publish-preview.ts
-function where(owner) {
-	if (!owner) return "";
-	switch (owner.kind) {
-		case "page": return ` on page ${owner.path}`;
-		case "layout": return ` in layout ${owner.name}`;
-		case "syncedBlock": return ` in synced block ${owner.title}`;
-		case "collection": return ` in collection ${owner.title}`;
-	}
-}
-const subject = (item) => `${item.entity} "${item.label}"${where(item.owner)}`;
-const when = (at) => at === null ? "" : ` on ${new Date(at).toLocaleString()}`;
-function conflictLine(conflict) {
-	if (conflict.liveVersion === null) return `${subject(conflict)}: deleted on Live`;
-	if (conflict.release) return `${subject(conflict)}: changed by a release${when(conflict.publishedAt)}`;
-	const by = conflict.publishedBy?.name ?? "someone";
-	return `${subject(conflict)}: published by ${by}${when(conflict.publishedAt)}`;
-}
-const LOST_REASONS = {
-	parentGone: "what it belongs to is gone from Live and the draft",
-	writtenAfterDeletion: "published after the draft deleted what it belongs to"
+//#region src/commands/push.ts
+const parser$1 = command("push", object({
+	command: constant("push"),
+	draft: optional(option("--draft", string({ metavar: "DRAFT_ID" }), { description: message`Push to this open draft, such as one Camox's agent started, rather than the branch's own.` }))
+}), { description: message`Push the current branch's commits to its draft, on a project whose code can be worked on outside Camox: a new draft on its first push.` });
+/** A draft's branch, as a branch's upstream names it: `origin/<draft id>`. */
+const DRAFT_UPSTREAM = new RegExp(`^origin/(${UUID})$`, "i");
+/** What the spinner says while the push is at each step. */
+const STEPS = {
+	checking: "Checking your commits...",
+	waiting: "Waiting for Camox's agent to finish its turn in the draft...",
+	building: "Building your code..."
 };
-function section(title, lines) {
-	if (lines.length === 0) return [];
-	return [
-		`${title} (${lines.length})`,
-		...lines.map((line) => `  - ${line}`),
-		""
-	];
-}
-const changeLine = (change) => `${change.change} ${subject(change)}`;
-/**
-* The draft's changes, under the locale each is in once the draft changes more than its default
-* locale: the default locale first, then the others, then what every locale shares, like files.
-*/
-function changesSection(preview) {
-	const { changes, defaultLocale } = preview;
-	const tags = new Set(changes.map((change) => change.locale));
-	if ([...tags].every((tag) => tag === null || tag === defaultLocale)) return section("Changes", changes.map(changeLine));
-	const rank = (tag) => tag === defaultLocale ? 0 : tag === null ? 2 : 1;
-	const ordered = [...tags].sort((a, b) => rank(a) - rank(b) || (a ?? "").localeCompare(b ?? ""));
-	return [
-		`Changes (${changes.length})`,
-		...ordered.flatMap((tag) => [`  ${tag ?? "Every locale"}`, ...changes.filter((change) => change.locale === tag).map((change) => `    - ${changeLine(change)}`)]),
-		""
-	];
-}
-/** The preview as text, in the order ADR 0009 lists it, ending with the token. */
-function formatPreview(preview) {
-	const lines = [
-		...section("Blockers: fix these in your development draft before publishing", preview.blockers.map((problem) => `${subject(problem)}: ${problem.message}`)),
-		...section("Conflicts: Live changed these since your draft did; publishing overwrites Live's version", preview.conflicts.map(conflictLine)),
-		...section("Lost changes: publishing drops these", preview.lost.map((lost) => `${subject(lost)}: ${LOST_REASONS[lost.reason]}`)),
-		...section("Warnings: already on Live, not blocking", preview.warnings.map((problem) => `${subject(problem)}: ${problem.message}`)),
-		...changesSection(preview)
-	];
-	if (preview.changes.length === 0) lines.push("Your development draft has no changes.", "");
-	lines.push(`Token: ${preview.token}`, ...nextStep(preview));
-	return `${lines.join("\n")}\n`;
-}
-/**
-* What to do next: fix the blockers, or publish when there is something to publish, waiting for
-* running translations or publishing anyway.
-*/
-function nextStep(preview) {
-	if (preview.blockers.length > 0) return ["Publishing is blocked until the blockers are fixed."];
-	if (preview.changes.length === 0) return [];
-	const publish = `camox publish --confirm ${preview.token}`;
-	if (preview.translating.length > 0) return [`Translations into ${preview.translating.join(", ")} are still running: publish once they finish, or publish anyway and Camox finishes them in a draft of its own.`, `Publish anyway with: ${publish} --anyway`];
-	return [`Publish with: ${publish}`];
-}
-//#endregion
-//#region src/commands/publish.ts
-const parser$2 = command("publish", object({
-	command: constant("publish"),
-	confirm: optional(option("--confirm", string({ metavar: "TOKEN" }), { description: message`Publish, with the token \`camox publish\` printed with the list you reviewed.` })),
-	anyway: option("--anyway", { description: message`With --confirm, publish while translations are still running: Camox finishes them in a draft of its own and publishes it once they're done.` }),
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: option("--json")
-}), { description: message`List what publishing your development draft to Live would do, with a token; publish with --confirm <token>.` });
-async function handler$2(args) {
-	const outputMode = args.json ? "json" : "auto";
-	const target = {
-		cwd: args.cwd,
-		projectFlag: args.project
-	};
-	if (args.confirm === void 0) {
-		printPreview(await callToolResult({
-			...target,
-			toolName: "previewPublish",
-			args: {}
-		}), outputMode);
-		process.exit(0);
-	}
-	const result = await callToolResult({
-		...target,
-		toolName: "publishDraft",
-		args: {
-			token: args.confirm,
-			...args.anyway && { publishAnyway: true }
-		}
+/** The Project ID the camox() plugin names in a Vite config. */
+const PROJECT_ID = new RegExp(`\\bprojectId\\s*:\\s*["'](${UUID})["']`, "i");
+const fail = (text) => {
+	p.log.error(text);
+	process.exit(1);
+};
+/** Runs `git` in the checkout, returning its trimmed output, or failing with `why`. */
+function git(args, why, { quiet = false } = {}) {
+	const run = spawnSync("git", args, {
+		encoding: "utf8",
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
 	});
-	if (result.published !== false) {
-		if (isJsonMode(outputMode)) printResult(result, outputMode);
-		else process.stdout.write("Published your development draft to Live.\n");
-		process.exit(0);
-	}
-	if (result.reason === "empty") {
-		if (isJsonMode(outputMode)) printResult(result, outputMode);
-		else process.stdout.write("Your development draft has no changes: nothing to publish.\n");
-		process.exit(0);
-	}
-	if (result.reason === "deleted") {
-		printError({
-			code: DRAFT_ENDED_ERROR_CODE,
-			message: `${result.message} Nothing was published.`
+	if (run.error || run.status !== 0) {
+		if (quiet) return void 0;
+		return fail(`${why}${run.stderr ? `\n${run.stderr.trim()}` : ""}`);
+	}
+	return run.stdout.trim();
+}
+const listed = (errors) => errors.map((error) => {
+	const column = "column" in error ? `:${error.column}` : "";
+	return error.file ? `${error.file}:${error.line}${column} ${error.message}` : error.message;
+}).join("\n");
+async function handler$1(args) {
+	p.intro("camox push");
+	const root = git(["rev-parse", "--show-toplevel"], "Run camox push inside a project's checkout.");
+	let config;
+	try {
+		config = readFileSync(join(root, "vite.config.ts"), "utf8");
+	} catch {
+		return fail("This checkout has no vite.config.ts naming its project.");
+	}
+	const projectUuid = config.match(PROJECT_ID)?.[1]?.toLowerCase();
+	if (!projectUuid) return fail("This checkout's vite.config.ts doesn't name a Project ID.");
+	const branch = git([
+		"symbolic-ref",
+		"--quiet",
+		"--short",
+		"HEAD"
+	], "Check out a branch to push.");
+	if (branch === "main") return fail("Push a branch of your own: main changes only by publishing.");
+	const upstream = git([
+		"rev-parse",
+		"--abbrev-ref",
+		"--symbolic-full-name",
+		`${branch}@{upstream}`
+	], "", { quiet: true });
+	const draftId = args.draft ?? upstream?.match(DRAFT_UPSTREAM)?.[1]?.toLowerCase();
+	const { token } = await getOrAuthenticate().catch(() => fail("Authentication failed."));
+	git([
+		"fetch",
+		"--quiet",
+		"origin",
+		"main"
+	], "Couldn't fetch main.");
+	const base = git([
+		"merge-base",
+		"HEAD",
+		"origin/main"
+	], "Your branch shares no history with main.");
+	const draftFetched = !!draftId && git([
+		"fetch",
+		"--quiet",
+		"origin",
+		`+refs/heads/${draftId}:refs/remotes/origin/${draftId}`
+	], "", { quiet: true }) !== void 0;
+	const scratch = mkdtempSync(join(tmpdir(), "camox-push-"));
+	let bundle;
+	try {
+		const file = join(scratch, "push.bundle");
+		git([
+			"bundle",
+			"create",
+			"--quiet",
+			file,
+			branch,
+			`^${base}`,
+			...draftFetched ? [`^origin/${draftId}`] : []
+		], "Your branch has no new commits to push.");
+		bundle = readFileSync(file);
+	} finally {
+		rmSync(scratch, {
+			recursive: true,
+			force: true
 		});
-		process.exit(1);
 	}
-	printError({
-		code: NOT_PUBLISHED_CODES[result.reason],
-		message: `${result.message} Nothing was published.`
-	});
-	printPreview(result.preview, outputMode);
-	process.exit(1);
-}
-function printPreview(preview, outputMode) {
-	if (isJsonMode(outputMode)) return printResult(preview, outputMode);
-	process.stdout.write(formatPreview(preview));
+	const spinner = p.spinner();
+	spinner.start("Pushing your commits...");
+	let pushed;
+	try {
+		const events = await pushCode(token, {
+			projectUuid,
+			branch,
+			...draftId && { draftId },
+			bundle: new File([new Uint8Array(bundle)], `${branch}.bundle`)
+		});
+		for await (const event of events) if (event.type === "progress") spinner.message(STEPS[event.step] ?? "Pushing...");
+		else pushed = event;
+		if (!pushed) throw new Error("Camox ended the push without landing it. Push again.");
+	} catch (error) {
+		spinner.error("Camox refused the push.");
+		const data = error.data;
+		return fail([error instanceof Error ? error.message : String(error), data?.build && listed(data.build)].filter(Boolean).join("\n"));
+	}
+	spinner.stop("Pushed.");
+	git([
+		"fetch",
+		"--quiet",
+		"origin",
+		pushed.draftId
+	], "Couldn't fetch the draft's branch.");
+	git([
+		"branch",
+		`--set-upstream-to=origin/${pushed.draftId}`,
+		branch
+	], "Couldn't set your branch's upstream to the draft's branch.");
+	const { result } = pushed;
+	if (result.ok) p.log.success("Your code built.");
+	else if (result.types.length > 0) p.log.warn(`Your code built, but has type errors, which block publishing:\n${listed(result.types)}`);
+	else p.log.warn(`Your code built, but the preview can't show it:\n${listed(result.build)}`);
+	p.outro(`Review your draft in the studio: ${pushed.studioUrl}`);
+	process.exit(0);
 }
 //#endregion
 //#region src/commands/release.ts
-const parser$1 = command("release", object({
+const parser = command("release", object({
 	command: constant("release"),
 	dryRun: option("--dry-run", { description: message`Build the website as a release would, without logging in or syncing its definitions to Live.` })
 }));
-function handler$1(args) {
+function handler(args) {
 	p.intro(args.dryRun ? "camox release --dry-run" : "camox release");
 	if (!args.dryRun && !process.env.CAMOX_DEPLOY_TOKEN) {
 		p.log.error("CAMOX_DEPLOY_TOKEN is required to release to Live.");
@@ -1509,100 +540,9 @@ function handler$1(args) {
 	process.exit(0);
 }
 //#endregion
-//#region src/commands/status.ts
-const parser = command("status", object({
-	command: constant("status"),
-	cwd: cwdFlag,
-	project: projectFlag,
-	json: option("--json")
-}));
-async function developmentDraftStatus(params) {
-	try {
-		const project = await getProject(params.token, params.project, params.apiUrl);
-		return {
-			exists: true,
-			changeCount: (await getDevelopmentDraft({
-				...params,
-				projectId: project.id
-			})).changeCount
-		};
-	} catch (err) {
-		if (isNoDevelopmentDraft(err)) return {
-			exists: false,
-			changeCount: 0
-		};
-		return {
-			exists: null,
-			error: err instanceof Error ? err.message : String(err)
-		};
-	}
-}
-function describeDraft(draft, authenticationUrl) {
-	if (!draft) return `(sign in to see it — run \`camox login\` for ${authenticationUrl})`;
-	if (draft.exists === null) return `(couldn't be checked: ${draft.error})`;
-	if (!draft.exists) return "no development draft yet — run your site locally once to create it";
-	if (draft.changeCount === 0) return "no changes";
-	return `${draft.changeCount} change${draft.changeCount === 1 ? "" : "s"} — \`camox publish\` lists them`;
-}
-async function handler(args) {
-	let runtime;
-	try {
-		runtime = loadRuntime(args.cwd);
-	} catch (err) {
-		if (err instanceof RuntimeDirectoryError) {
-			printError({
-				code: "INVALID_CWD",
-				message: err.message
-			});
-			process.exit(2);
-		}
-		if (err instanceof RuntimeNotFoundError || err instanceof RuntimeMalformedError) {
-			printError({
-				code: "RUNTIME_NOT_FOUND",
-				message: err.message
-			});
-			process.exit(2);
-		}
-		throw err;
-	}
-	const project = args.project?.trim() || process.env.CAMOX_PROJECT?.trim() || runtime.projectId;
-	const token = readAuthTokenForUrl(runtime.authenticationUrl, args.cwd);
-	const developmentDraft = token ? await developmentDraftStatus({
-		token: token.token,
-		apiUrl: runtime.apiUrl,
-		project,
-		disableTelemetry: runtime.disableTelemetry
-	}) : null;
-	const status = {
-		project,
-		draft: DEVELOPMENT_DRAFT,
-		developmentDraft,
-		apiUrl: runtime.apiUrl,
-		authenticationUrl: runtime.authenticationUrl,
-		authenticated: token !== null,
-		user: token ? {
-			name: token.name,
-			email: token.email
-		} : null
-	};
-	if (args.json || !process.stdout.isTTY) {
-		process.stdout.write(`${JSON.stringify(status, null, process.stdout.isTTY ? 2 : 0)}\n`);
-		process.exit(0);
-	}
-	const lines = [
-		`project:     ${status.project}`,
-		`draft:       ${describeDraft(developmentDraft, status.authenticationUrl)}`,
-		`api:         ${status.apiUrl}`,
-		`auth:        ${status.authenticationUrl}`,
-		status.user ? `signed in:   ${status.user.name} <${status.user.email}>` : `signed in:   (no token for ${status.authenticationUrl} — run \`camox login\`)`
-	];
-	process.stdout.write(`${lines.join("\n")}\n`);
-	process.exit(0);
-}
-//#endregion
 //#region src/index.ts
 const program = defineProgram({
-	parser: or(parser$9, parser$6, parser$5, parser$1, parser, parser$3, parser$4, parser$12, parser$8, parser$7, parser$2, parser$11, parser$10),
+	parser: or(parser$3, parser$2, parser, parser$5, parser$1, parser$4),
 	metadata: {
 		name: "camox",
 		brief: message`Camox CLI`
@@ -1610,63 +550,22 @@ const program = defineProgram({
 });
 const result = runSync(program, { help: "both" });
 switch (result.command) {
-	case "init":
-		handler$9();
-		break;
 	case "login":
-		await handler$6();
+		await handler$3();
 		break;
 	case "logout":
-		handler$5(result);
+		handler$2(result);
 		break;
 	case "release":
-		handler$1(result);
-		break;
-	case "preview":
-		await handler$3(result);
-		break;
-	case "status":
-		await handler(result);
-		break;
-	case "pages.list":
-	case "pages.get":
-	case "pages.create":
-	case "pages.update":
-	case "pages.set-seo":
-	case "pages.set-layout":
-	case "pages.delete":
-		await handler$4(result);
-		break;
-	case "blocks.types":
-	case "blocks.describe":
-	case "blocks.get":
-	case "blocks.get-many":
-	case "blocks.create":
-	case "blocks.edit":
-	case "blocks.move":
-	case "blocks.delete":
-		await handler$12(result);
-		break;
-	case "files.upload":
-	case "files.update":
-	case "files.get":
-	case "files.list":
-		await handler$10(result);
-		break;
-	case "layouts.list":
-	case "layouts.get":
-		await handler$8(result);
+		handler(result);
 		break;
-	case "locales.list":
-	case "locales.add":
-	case "locales.remove":
-	case "locales.set-default-tag":
-		await handler$7(result);
+	case "clone":
+		await handler$5(result);
 		break;
-	case "publish":
-		await handler$2(result);
+	case "push":
+		await handler$1(result);
 		break;
-	case "delete": await handler$11(result);
+	case "git-credential": await handler$4(result);
 }
 //#endregion
 export {};