@crewx/cli 0.9.0-rc.47 → 0.9.0-rc.49

package/dist/commands/publish.d.ts

@@ -0,0 +1 @@
+export declare function handlePublish(args: string[]): Promise<void>;

package/dist/commands/publish.js

@@ -0,0 +1,267 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handlePublish = handlePublish;
+/**
+ * crewx publish handler — thin CLI wrapper over @crewx/sdk/publish.
+ *
+ * Usage:
+ *   crewx publish [dir] [--dry-run] [--version <semver>] [--json] [--upload]
+ *
+ * All scanning, exclusion-rule judgment, secret detection, hashing, and
+ * tar.gz packing lives in @crewx/sdk/publish (planPublish / packTemplate).
+ * Submit+upload (WI-SHR-20260806-013) lives in the same package
+ * (uploadToMarketplace) for the same reason — see that module's header.
+ * This command only parses argv, forwards options, reads auth.json
+ * (read-only — see readAuthJson()'s own doc), and renders the result.
+ */
+const fs = __importStar(require("fs"));
+const publish_1 = require("@crewx/sdk/publish");
+const parse_common_flags_1 = require("./parse-common-flags");
+function parsePublishFlags(args) {
+    const flags = { dryRun: false, json: false, help: false, upload: false };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--help' || arg === '-h') {
+            flags.help = true;
+            continue;
+        }
+        if (arg === '--dry-run') {
+            flags.dryRun = true;
+            continue;
+        }
+        if (arg === '--json') {
+            flags.json = true;
+            continue;
+        }
+        if (arg === '--upload') {
+            flags.upload = true;
+            continue;
+        }
+        if (arg === '--version') {
+            const value = args[i + 1];
+            if (value === undefined)
+                throw new parse_common_flags_1.UnknownOptionError('--version requires a value');
+            flags.version = value;
+            i++;
+            continue;
+        }
+        if (arg.startsWith('--version=')) {
+            flags.version = arg.slice('--version='.length);
+            continue;
+        }
+        if (arg.startsWith('-')) {
+            throw new parse_common_flags_1.UnknownOptionError(`Unknown option: ${arg}`);
+        }
+        if (flags.dir === undefined) {
+            flags.dir = arg;
+            continue;
+        }
+        throw new parse_common_flags_1.UnknownOptionError(`Unknown option: ${arg}`);
+    }
+    return flags;
+}
+function resolveWorkspaceDir(flags) {
+    return flags.dir ?? process.env['CREWX_WORKSPACE'] ?? process.cwd();
+}
+function printJson(payload) {
+    console.log(JSON.stringify(payload));
+}
+/** Prints the error and exits 1. Never returns (matches `process.exit`'s `never` type). */
+function failWithError(err, json) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (json) {
+        printJson({ success: false, error: message });
+    }
+    else {
+        console.error(`✗ ${message}`);
+    }
+    process.exit(1);
+}
+function printHelp() {
+    console.log(`
+crewx publish — package a workspace as a distributable template archive
+
+Usage:
+  crewx publish [dir] [--dry-run] [--version <semver>] [--json] [--upload]
+
+Arguments:
+  dir              Workspace to publish (default: $CREWX_WORKSPACE or cwd)
+
+Options:
+  --dry-run        Scan + build manifest only; do not write a .tgz
+  --version <ver>  Override manifest version (semver, e.g. 1.0.0)
+  --json           Print machine-readable JSON to stdout
+  --upload         Submit + upload the packed archive to marketplace
+                    (requires CREWX_MARKETPLACE_URL and a prior login;
+                    ignored when combined with --dry-run)
+  --help, -h       Show this help
+
+Notes:
+  Without --upload, this command only scans the workspace, applies
+  exclusion rules, checks for secrets, and packs a local
+  .crewx/publish/<name>-<version>.tgz archive.
+`.trim());
+}
+/** CREWX_MARKETPLACE_URL — same env var name as the server's MARKETPLACE_DISABLED check, never a second name. */
+function requireMarketplaceUrl() {
+    const url = process.env['CREWX_MARKETPLACE_URL'];
+    if (!url) {
+        throw new Error('CREWX_MARKETPLACE_URL이 설정되지 않았습니다 — 업로드하려면 이 환경변수가 필요합니다');
+    }
+    return url;
+}
+async function handlePublish(args) {
+    const flags = parsePublishFlags(args);
+    if (flags.help) {
+        printHelp();
+        return;
+    }
+    const dir = resolveWorkspaceDir(flags);
+    process.stderr.write(`[publish] scanning ${dir}...\n`);
+    let plan;
+    try {
+        plan = await (0, publish_1.planPublish)(dir, { version: flags.version });
+    }
+    catch (err) {
+        failWithError(err, flags.json);
+    }
+    if (plan.secretFindings.length > 0) {
+        if (flags.json) {
+            printJson({ success: false, error: 'secret findings detected', findings: plan.secretFindings });
+        }
+        else {
+            console.error('✗ secret findings detected — publish aborted');
+            for (const f of plan.secretFindings) {
+                console.error(`  ${f.path}:${f.line} (${f.rule})`);
+            }
+        }
+        process.exit(1);
+    }
+    if (flags.dryRun) {
+        if (flags.json) {
+            printJson({
+                success: true,
+                dryRun: true,
+                workspace: dir,
+                manifest: plan.manifest,
+                included: plan.included,
+                excluded: plan.excluded,
+            });
+        }
+        else {
+            console.log('✓ dry-run — no archive written');
+            console.log(`  workspace: ${dir}`);
+            console.log(`  name: ${plan.manifest.name}  version: ${plan.manifest.version}`);
+            console.log(`  included: ${plan.included.length} files`);
+            console.log(`  excluded: ${plan.excluded.length} entries`);
+            for (const e of plan.excluded) {
+                console.log(`    ${e.path} (${e.rule})`);
+            }
+        }
+        return;
+    }
+    // Resolved before packing (not after) so a doomed --upload run (no
+    // marketplace url / no session) never writes a stray .tgz to the
+    // workspace — WI-SHR-20260806-013 AC-U5.
+    let marketplaceUrl = '';
+    let accessToken = '';
+    if (flags.upload) {
+        try {
+            marketplaceUrl = requireMarketplaceUrl();
+            accessToken = (0, publish_1.readAuthJson)().access_token;
+        }
+        catch (err) {
+            failWithError(err, flags.json);
+        }
+    }
+    process.stderr.write(`[publish] packing ${plan.manifest.name}@${plan.manifest.version}...\n`);
+    let packed;
+    try {
+        packed = await (0, publish_1.packTemplate)(dir, { version: flags.version });
+    }
+    catch (err) {
+        failWithError(err, flags.json);
+    }
+    const fileCount = packed.manifest.files.length;
+    const totalBytes = fs.statSync(packed.tgzPath).size;
+    let uploadResult;
+    if (flags.upload) {
+        process.stderr.write(`[publish] uploading ${packed.manifest.name}@${packed.manifest.version} to ${marketplaceUrl}...\n`);
+        try {
+            uploadResult = await (0, publish_1.uploadToMarketplace)({
+                tgzPath: packed.tgzPath,
+                manifest: packed.manifest,
+                baseUrl: marketplaceUrl,
+                accessToken,
+            });
+        }
+        catch (err) {
+            failWithError(err, flags.json);
+        }
+        process.stderr.write(`[publish] submit -> ${uploadResult.submitOutcome}\n`);
+    }
+    if (flags.json) {
+        printJson({
+            success: true,
+            tgzPath: packed.tgzPath,
+            fileCount,
+            totalBytes,
+            manifest: packed.manifest,
+            ...(uploadResult
+                ? {
+                    slug: uploadResult.slug,
+                    version: uploadResult.version,
+                    artifactChecksum: uploadResult.artifactChecksum,
+                    artifactSizeBytes: uploadResult.artifactSizeBytes,
+                    submitOutcome: uploadResult.submitOutcome,
+                    versionUpdate: uploadResult.versionUpdate,
+                    serverVersionBefore: uploadResult.serverVersionBefore,
+                }
+                : {}),
+        });
+    }
+    else {
+        console.log(`✓ packed: ${packed.tgzPath}`);
+        console.log(`  files: ${fileCount}  bytes: ${totalBytes}`);
+        if (uploadResult) {
+            console.log(`✓ uploaded: ${uploadResult.slug}@${uploadResult.version} (${uploadResult.submitOutcome})`);
+            console.log(`  artifactChecksum: ${uploadResult.artifactChecksum}  artifactSizeBytes: ${uploadResult.artifactSizeBytes}`);
+        }
+    }
+    if (!flags.upload) {
+        console.error('⚠ 업로드하려면 --upload 를 사용하세요 — 생성된 파일 경로를 확인하세요');
+    }
+}

package/dist/commands/registry.js

@@ -18,6 +18,7 @@ exports.KNOWN_COMMANDS = new Set([
     'db',
     'help',
     'shortcut',
+    'publish',
     'slack', 'slack:files',
     'hook', 'hook-dispatch',
 ]);

package/dist/main.js

@@ -46,12 +46,11 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 // ─── P0-1: Env Bootstrap ─────────────────────────────────────────────────────
 // Must run before any other code that might use process.env.CREWX_CLI.
-const env_defaults_1 = require("./utils/env-defaults");
-const sdk_1 = require("@crewx/sdk");
+const sdk_compat_1 = require("./utils/sdk-compat");
 const dotenv = __importStar(require("dotenv"));
 const path_1 = require("path");
-process.env.CREWX_CLI ??= (0, env_defaults_1.resolveCrewxCli)();
-process.env.CREWX_WORKSPACE ??= (0, env_defaults_1.resolveCrewxWorkspace)();
+process.env.CREWX_CLI ??= sdk_compat_1.sdkCompat.resolveCrewxCli();
+process.env.CREWX_WORKSPACE ??= sdk_compat_1.sdkCompat.resolveCrewxWorkspace();
 // Load the workspace .env (WI-20260725-010): keeps CLI (crewx q/x) in parity with
 // the server's ConfigModule, which already reads cwd/.env. override:false so a
 // value already present in the shell/environment always wins over the file.
@@ -61,7 +60,7 @@ dotenv.config({ path: (0, path_1.join)(process.env.CREWX_WORKSPACE, '.env'), ove
 // Best-effort, non-blocking: fetch remote model registry so new models get
 // accurate pricing without a CLI republish. Falls back to bundled table on
 // failure / offline. Browser entry does not call this automatically.
-void (0, sdk_1.initPricingRemote)();
+sdk_compat_1.sdkCompat.initPricingRemote();
 // ─── Command Imports ──────────────────────────────────────────────────────────
 const query_1 = require("./commands/query");
 const execute_1 = require("./commands/execute");
@@ -74,6 +73,7 @@ const log_1 = require("./commands/log");
 const doctor_1 = require("./commands/doctor");
 const init_1 = require("./commands/init");
 const shortcut_1 = require("./commands/shortcut");
+const publish_1 = require("./commands/publish");
 const builtin_1 = require("./builtin");
 const slack_1 = require("./commands/slack");
 const install_1 = require("./commands/hook/install");
@@ -194,6 +194,10 @@ async function main() {
         case 'shortcut':
             await (0, shortcut_1.handleShortcut)(args.slice(1));
             return;
+        // WI-20260803-004: crewx publish [dir] [--dry-run] [--version <semver>] [--json]
+        case 'publish':
+            await (0, publish_1.handlePublish)(args.slice(1));
+            return;
         // SDK-009: slack / slack:files
         case 'slack':
         case 'slack:files':
@@ -319,6 +323,13 @@ Desktop Shortcut (Windows only):
   shortcut install [--force] [--json]     Install/repair the Desktop shortcut
   shortcut uninstall [--json]             Remove the Desktop shortcut
 
+Publish:
+  publish [dir] [options]         Package a workspace as a distributable template archive
+    --dry-run                     Scan + build manifest only; do not write a .tgz
+    --version <ver>               Override manifest version (semver)
+    --json                        Print machine-readable JSON to stdout
+    (marketplace upload is not yet supported by this command)
+
 Built-in Tools:
   memory <args>                  Memory tool
   search <args>                  Search tool

package/dist/utils/env-defaults.d.ts

@@ -1,5 +1,2 @@
-/**
- * CREWX_* environment variable defaults for CLI bootstrap.
- * Re-exported from @crewx/sdk for convenience.
- */
-export { resolveCrewxCli, resolveCrewxWorkspace } from '@crewx/sdk';
+export declare function resolveCrewxCli(): string;
+export declare function resolveCrewxWorkspace(): string;

package/dist/utils/env-defaults.js

@@ -1,10 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveCrewxWorkspace = exports.resolveCrewxCli = void 0;
+exports.resolveCrewxCli = resolveCrewxCli;
+exports.resolveCrewxWorkspace = resolveCrewxWorkspace;
 /**
  * CREWX_* environment variable defaults for CLI bootstrap.
- * Re-exported from @crewx/sdk for convenience.
+ * Routed through the SDK compatibility accessor for older SDK installations.
  */
-var sdk_1 = require("@crewx/sdk");
-Object.defineProperty(exports, "resolveCrewxCli", { enumerable: true, get: function () { return sdk_1.resolveCrewxCli; } });
-Object.defineProperty(exports, "resolveCrewxWorkspace", { enumerable: true, get: function () { return sdk_1.resolveCrewxWorkspace; } });
+const sdk_compat_1 = require("./sdk-compat");
+function resolveCrewxCli() {
+    return sdk_compat_1.sdkCompat.resolveCrewxCli();
+}
+function resolveCrewxWorkspace() {
+    return sdk_compat_1.sdkCompat.resolveCrewxWorkspace();
+}

package/dist/utils/sdk-compat.d.ts

@@ -0,0 +1,21 @@
+type PricingInitializer = () => Promise<unknown> | unknown;
+export interface SdkLike {
+    resolveCrewxCli?: () => string;
+    resolveCrewxWorkspace?: () => string;
+    initPricingRemote?: PricingInitializer;
+}
+export interface SdkCompat {
+    resolveCrewxCli(): string;
+    resolveCrewxWorkspace(): string;
+    initPricingRemote(): void;
+}
+/**
+ * Create the CLI bootstrap capability accessor for the installed SDK.
+ *
+ * SDK exports are additive across compatible majors, so an older SDK may not
+ * expose every capability that a newer CLI knows about. Optional capabilities
+ * are checked here rather than at each bootstrap call site.
+ */
+export declare function createSdkCompat(sdkLike?: SdkLike): SdkCompat;
+export declare const sdkCompat: SdkCompat;
+export {};

package/dist/utils/sdk-compat.js

@@ -0,0 +1,72 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sdkCompat = void 0;
+exports.createSdkCompat = createSdkCompat;
+const sdk = __importStar(require("@crewx/sdk"));
+/**
+ * Create the CLI bootstrap capability accessor for the installed SDK.
+ *
+ * SDK exports are additive across compatible majors, so an older SDK may not
+ * expose every capability that a newer CLI knows about. Optional capabilities
+ * are checked here rather than at each bootstrap call site.
+ */
+function createSdkCompat(sdkLike = sdk) {
+    return {
+        resolveCrewxCli: () => {
+            if (typeof sdkLike.resolveCrewxCli === 'function') {
+                return sdkLike.resolveCrewxCli();
+            }
+            return process.env.CREWX_CLI || 'npx crewx';
+        },
+        resolveCrewxWorkspace: () => {
+            if (typeof sdkLike.resolveCrewxWorkspace === 'function') {
+                return sdkLike.resolveCrewxWorkspace();
+            }
+            return process.env.CREWX_WORKSPACE || process.cwd();
+        },
+        initPricingRemote: () => {
+            if (typeof sdkLike.initPricingRemote !== 'function')
+                return;
+            try {
+                void Promise.resolve(sdkLike.initPricingRemote()).catch(() => undefined);
+            }
+            catch {
+                // Remote pricing is optional and must not block CLI startup.
+            }
+        },
+    };
+}
+exports.sdkCompat = createSdkCompat();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewx/cli",
-  "version": "0.9.0-rc.47",
+  "version": "0.9.0-rc.49",
   "license": "UNLICENSED",
   "engines": {
     "node": ">=20.19.0"
@@ -25,18 +25,18 @@
     "better-sqlite3": "*",
     "dotenv": "17.2.3",
     "isomorphic-git": "1.37.1",
-    "@crewx/doc": "0.1.9-rc.39",
-    "@crewx/cron": "0.1.10-rc.81",
-    "@crewx/workflow": "0.3.22-rc.93",
-    "@crewx/search": "0.1.10-rc.42",
-    "@crewx/memory": "0.1.23-rc.63",
+    "@crewx/sdk": "0.9.0-rc.49",
+    "@crewx/memory": "0.1.23-rc.65",
+    "@crewx/doc": "0.1.9-rc.41",
+    "@crewx/search": "0.1.10-rc.44",
+    "@crewx/wbs": "0.1.10-rc.74",
+    "@crewx/cron": "0.1.10-rc.83",
     "@crewx/skill": "0.1.20",
-    "@crewx/wi": "0.1.10-rc.67",
-    "@crewx/chromex": "0.1.0-rc.79",
-    "@crewx/sdk": "0.9.0-rc.0",
-    "@crewx/notify": "0.1.0-rc.17",
+    "@crewx/workflow": "0.3.22-rc.95",
+    "@crewx/wi": "0.1.10-rc.69",
     "@crewx/shared": "0.0.6",
-    "@crewx/wbs": "0.1.10-rc.72"
+    "@crewx/chromex": "0.1.0-rc.81",
+    "@crewx/notify": "0.1.0-rc.19"
   },
   "devDependencies": {
     "@types/better-sqlite3": "*",