@firenet-designs/fnd-cli 2.0.0 → 2.2.0

package/oclif.manifest.json

@@ -1,5 +1,36 @@
 {
   "commands": {
+    "backfill-project": {
+      "aliases": [],
+      "args": {
+        "shop": {
+          "description": "Shopify store handle, passed to Claude as a hint",
+          "name": "shop",
+          "required": false
+        }
+      },
+      "description": "Backfill missing scaffold files in an EXISTING repo + theme: .gitignore, .shopifyignore, CLAUDE.md. Each is created only if absent — existing files are left untouched. Does NOT git init, pull the theme, commit, or touch GitHub.\n\nRequires the claude CLI (npm install -g @anthropic-ai/claude-code) for the CLAUDE.md step.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> my-store",
+        "<%= config.bin %> <%= command.id %> my-store \"extra hints\""
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "backfill-project",
+      "pluginAlias": "@firenet-designs/fnd-cli",
+      "pluginName": "@firenet-designs/fnd-cli",
+      "pluginType": "core",
+      "strict": false,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "backfill-project.js"
+      ]
+    },
     "create-app": {
       "aliases": [],
       "args": {},
@@ -40,6 +71,37 @@
         "create-app.js"
       ]
     },
+    "create-project": {
+      "aliases": [],
+      "args": {
+        "shop": {
+          "description": "Shopify store handle — pulls the live theme from <shop>.myshopify.com (omit to skip)",
+          "name": "shop",
+          "required": false
+        }
+      },
+      "description": "Scaffold a new client project: git on branch production, ignore files, Shopify theme pull, a Claude-generated CLAUDE.md, then a private GitHub repo under the FireNet-Designs org.\n\nRequires the claude CLI (npm install -g @anthropic-ai/claude-code) for the CLAUDE.md step.\n\nGitHub auth comes from YOUR environment — run `gh auth login` once, or export GH_TOKEN in your shell profile. This CLI never stores credentials. Override the org with FND_GH_ORG.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> my-store",
+        "<%= config.bin %> <%= command.id %> my-store \"Acme storefront, Klaviyo\""
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "create-project",
+      "pluginAlias": "@firenet-designs/fnd-cli",
+      "pluginName": "@firenet-designs/fnd-cli",
+      "pluginType": "core",
+      "strict": false,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "create-project.js"
+      ]
+    },
     "token": {
       "aliases": [],
       "args": {},
@@ -120,7 +182,115 @@
         "commands",
         "token.js"
       ]
+    },
+    "workspace:cleanup": {
+      "aliases": [],
+      "args": {},
+      "description": "Unmount a leftover reverse-SSHFS mount on the remote — use this if a workspace session dropped before it could clean up after itself.\n\nUnmounts the remote mount and removes the matching entry from your local authorized_keys. With no --mount, it targets the same path `workspace` would use for the current directory.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> --ssh user@host",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --mount /home/fnd/cole/fnd-cli"
+      ],
+      "flags": {
+        "mount": {
+          "description": "exact remote mount path to unmount (defaults to the current dir mapping)",
+          "name": "mount",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "mount-base": {
+          "description": "base dir on the remote, used to derive the default mount path",
+          "name": "mount-base",
+          "default": "/home/fnd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "ssh": {
+          "description": "remote to connect to, as user@host",
+          "name": "ssh",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "workspace:cleanup",
+      "pluginAlias": "@firenet-designs/fnd-cli",
+      "pluginName": "@firenet-designs/fnd-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "workspace",
+        "cleanup.js"
+      ]
+    },
+    "workspace": {
+      "aliases": [],
+      "args": {},
+      "description": "Open a remote workspace: mirror the current directory onto a remote Linux box via reverse SSHFS and drop into a shell there, cleaning everything up on exit.\n\nThe remote reaches your machine through the ssh tunnel (-R), so your local SSH server is never exposed to the internet or port-forwarded. For the back-connection the remote authenticates with its OWN SSH key, which is temporarily added to your local authorized_keys and removed again on exit. Locally you need an SSH *server* running (sshd), not sshfs — sshfs runs on the remote.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> --ssh user@203.0.113.4",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --port 40222",
+        "<%= config.bin %> <%= command.id %> --ssh user@host --mount-base /home/fnd --local-ssh-port 2222"
+      ],
+      "flags": {
+        "local-ssh-port": {
+          "description": "port your LOCAL SSH server listens on (the tunnel forwards back to this)",
+          "name": "local-ssh-port",
+          "default": 22,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "mount-base": {
+          "description": "base dir on the remote; the mount lands at <base>/<local-user>/<dir-name>",
+          "name": "mount-base",
+          "default": "/home/fnd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "port": {
+          "char": "p",
+          "description": "reverse-tunnel port opened on the remote (random 20000-60000 if omitted)",
+          "name": "port",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "ssh": {
+          "description": "remote to connect to, as user@host",
+          "name": "ssh",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "workspace",
+      "pluginAlias": "@firenet-designs/fnd-cli",
+      "pluginName": "@firenet-designs/fnd-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "workspace",
+        "index.js"
+      ]
     }
   },
-  "version": "2.0.0"
+  "version": "2.2.0"
 }

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "@firenet-designs/fnd-cli",
   "description": "A new CLI generated with oclif",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "author": "Cole Denslow",
+  "contributors": [
+    "Justin Schellenberg"
+  ],
   "bin": {
     "fnd": "bin/run.js"
   },
@@ -26,18 +29,22 @@
     "eslint": "^9",
     "eslint-config-oclif": "^6",
     "eslint-config-prettier": "^10",
-    "mocha": "^10",
+    "mocha": "^11",
     "oclif": "^4",
-    "shx": "^0.3.3",
+    "shx": "^0.4.0",
     "ts-node": "^10",
     "typescript": "^5"
   },
   "engines": {
     "node": ">=24.0.0"
   },
+  "overrides": {
+    "glob": "^13"
+  },
   "files": [
     "./bin",
     "./dist",
+    "./prompts",
     "./oclif.manifest.json"
   ],
   "homepage": "https://github.com/FireNet-Designs/fnd-cli",
@@ -52,7 +59,7 @@
   },
   "type": "module",
   "oclif": {
-    "bin": "fnd-cli",
+    "bin": "fnd",
     "dirname": "fnd-cli",
     "commands": "./dist/commands",
     "hooks": {
@@ -67,6 +74,9 @@
     "topics": {
       "hello": {
         "description": "Say hello to the world and others"
+      },
+      "workspace": {
+        "description": "Open a remote reverse-SSHFS workspace and run Claude on it"
       }
     }
   },

package/prompts/init-project-auto.md

@@ -0,0 +1,183 @@
+# Init Project (Auto) — Generate & Write CLAUDE.md, No Questions
+
+You are generating a `CLAUDE.md` for the code repo in the **current working directory** and writing it to disk at `./CLAUDE.md`. This is a non-interactive, one-shot run.
+
+## Hard rules
+
+- **Do NOT ask the user anything.** There is no human watching this run. Infer every field from the repo. Where you genuinely cannot infer a value, use the sensible default noted below — never a placeholder like `[fill in]`.
+- **Write the file yourself** to `./CLAUDE.md` using the Write tool. Do not print it in a code block and stop.
+- If `./CLAUDE.md` already exists, read it first and treat the run as an update: keep any human-written project notes, refresh the inferred sections.
+- Keep the whole thing tight. This file is loaded on every future session in the repo — no filler.
+
+## Step 1 — Inspect the repo (read-only)
+
+Look at the current directory to infer the fields. Useful signals:
+
+- `package.json` → name, scripts (dev/test/lint/typecheck/build/deploy), dependencies (stack + runtime via `engines`), entry (`main`/`module`/`exports`).
+- `shopify.app.toml` → **Shopify App**. Look for an `extensions/` dir → note each extension and its `shopify.extension.toml`.
+- `shopify.theme.toml`, or top-level `templates/ sections/ snippets/ layout/ config/` → **Shopify Theme**.
+- `@shopify/hydrogen` in deps, or `app/routes/` + `remix`/`vite` → **Shopify Hydrogen**.
+- `next.config.*` or `next` in deps → **Next.js**.
+- An Express/Fastify/Hono server entry with no frontend → **Node API**.
+- Anything else → **Custom** (write 4-6 conventions tailored to the actual stack).
+- `tsconfig.json`, lockfile type (`package-lock.json`/`pnpm-lock.yaml`/`yarn.lock`/`bun.lockb`), `.nvmrc`/`engines` → runtime + package manager.
+- `.env.example` / `.env.sample` → external services (Klaviyo, Stripe, Shopify Admin API, a DB URL, etc.).
+- Top two levels of the directory tree → Project Structure block.
+
+Defaults when a signal is missing: Type = `Custom`; Runtime = latest LTS Node; Build output = `none`; External Services = omit the section; commands = omit rows that don't exist.
+
+## Step 2 — Write `./CLAUDE.md` with exactly this structure
+
+```
+# [Project Name]
+
+**Type:** [Project Type]
+**Stack:** [Stack — comma separated]
+**Runtime:** [Runtime + package manager]
+
+## What This Is
+
+[One or two sentences inferred from README/package.json description. If none, describe it from the code.]
+
+---
+
+## Engineering Principles
+
+These apply to every file touched in this project.
+
+| Principle | Rule |
+|-----------|------|
+| Separation of concerns | One module, one reason to change |
+| No side effects at the core | Pure logic in the middle, IO/network/DB/filesystem only at the edges |
+| Open/Closed | Extend by adding — modify existing code only to fix bugs, never for a new caller |
+| WET before DRY | Duplicate until three identical-shape instances, then extract |
+| No unnecessary abstraction | If you can delete it and nothing breaks, delete it |
+| Boundary validation only | Validate user input and external API responses — trust internal code |
+| Comments explain WHY | Not what. Never describe what the code does. |
+
+---
+
+## Project Structure
+
+```
+[Top two levels of the directory tree]
+```
+
+**Entry point:** `[entry point]`
+**Build output:** `[build output]` — generated, never edit directly
+
+---
+
+## Conventions
+
+[Insert the matching preset block below for the detected type. For Custom, write 4-6 stack-specific rules, one per line, imperative voice.]
+
+---
+
+## Workflow
+
+| Task | Command |
+|------|---------|
+| Dev | `[dev]` |
+| Test | `[test]` |
+| Lint | `[lint]` |
+| Type check | `[typecheck]` |
+| Build | `[build]` |
+| Deploy | `[deploy]` |
+
+(Omit rows with no real command.)
+
+---
+
+## External Services
+
+[One line per service + what it's for. Omit this whole section if none.]
+
+---
+
+## Package Security
+
+- Never install a package younger than 14 days — let the community catch malicious releases first.
+- Read every install command before approving the dependencies it pulls in.
+
+---
+
+## Agent Behavior
+
+- **Never ask the user to test, run, or verify anything.** Claude owns the full dev loop — write, run, debug, fix, repeat until it works.
+- If something genuinely cannot be verified (e.g. a visual UI state), say so explicitly. Never claim success without verifying.
+- **Destructive commands require confirmation first.** Destructive = force push, `reset --hard`, deleting files/branches, dropping tables, removing packages, overwriting uncommitted work.
+- Everything else: just run it. For complex or non-obvious commands, give one line of context — then run without waiting.
+
+---
+
+## Do Not Touch
+
+- `[build output]` — generated output, never edit directly
+- `.env` / `.env.*` — never read or write secret values; use `.env.example` for shape only
+- Lockfiles — source of truth, never edit manually
+- `node_modules/` — never edit
+[Any extra off-limits dirs you spotted]
+```
+
+## Convention presets
+
+### Shopify Theme
+```
+- Liquid templates live in `templates/`, `sections/`, `snippets/`, `layout/`
+- CSS: `assets/[name].css`; JS: `assets/[name].js` — no bundler unless one is set up
+- `config/settings_data.json` is written by Shopify admin — read but treat as volatile
+- `config/settings_schema.json` is the source of truth for theme settings
+- Never inline styles or scripts in Liquid — use asset references
+- `{% schema %}` blocks must be valid JSON; verify with `shopify theme check`
+```
+
+### Shopify App
+```
+- App entry: `[entry]`; Shopify CLI manages tunneling + dev environment
+- `shopify.app.toml` — app config, commit it
+- Extensions live in `extensions/[name]/`, each with its own `shopify.extension.toml`
+- Never hardcode shop domain or access tokens — read from env or session
+- Webhook handlers must verify HMAC before processing
+```
+
+**If this is a Shopify App with extensions, ALSO append this block to the `Conventions` section verbatim:**
+```
+### Extension Constraints (hard platform limits)
+- **No third-party libraries inside extension code.** Extensions run in a constrained sandbox — write plain code, no npm deps bundled into the extension.
+- Hard limits per extension: **128 kB input / 11M instructions / 20 kB output.** Exceeding any of these fails the function at runtime.
+- Keep extension logic minimal and allocation-free in hot paths; do work in the app backend where possible.
+```
+
+### Shopify Hydrogen
+```
+- Remix file routing: `app/routes/` maps 1:1 to URL segments
+- Loaders run server-side; actions handle mutations
+- Storefront API queries live in `app/graphql/` as `.graphql` files
+- Set cache headers in the loader return — never skip them on product/collection routes
+- `public/` is served as-is; `app/assets/` goes through Vite
+```
+
+### Next.js
+```
+- App Router: `app/`; `page.tsx` = route, `layout.tsx` = shell
+- Server Components by default — add `"use client"` only when necessary
+- API routes: `app/api/[route]/route.ts`
+- Only `NEXT_PUBLIC_`-prefixed env vars are client-visible
+- Always use `next/image` for content images, never raw `<img>`
+- Never fetch in a Client Component when a Server Component can do it
+```
+
+### Node API
+```
+- Route handlers in `src/routes/`, one file per resource
+- Middleware in `src/middleware/`, applied in `src/app.ts`
+- Validate request bodies at the route boundary only — not inside service functions
+- Service functions are pure: typed inputs, typed outputs
+- Database access only inside `src/db/` or `src/repositories/` — never in routes
+- Environment config loaded once in `src/config.ts`
+```
+
+## Step 3 — Confirm
+
+After writing, print one line: the absolute path of the file written and the detected project type. Nothing else.