@loopress/cli 0.12.0 → 0.13.0

package/README.md

@@ -21,7 +21,7 @@ $ npm install -g @loopress/cli
 $ lps COMMAND
 running command...
 $ lps (--version)
-@loopress/cli/0.12.0 linux-x64 node-v24.18.0
+@loopress/cli/0.13.0 linux-x64 node-v24.18.0
 $ lps --help [COMMAND]
 USAGE
   $ lps COMMAND
@@ -61,6 +61,7 @@ report.
 * [`lps project switch`](#lps-project-switch)
 * [`lps project sync`](#lps-project-sync)
 * [`lps snippet list`](#lps-snippet-list)
+* [`lps snippet publish [PATH]`](#lps-snippet-publish-path)
 * [`lps snippet pull [PATH]`](#lps-snippet-pull-path)
 * [`lps snippet push [PATH]`](#lps-snippet-push-path)
 * [`lps status`](#lps-status)
@@ -85,7 +86,7 @@ EXAMPLES
   $ lps composer pull --dry-run
 ```
 
-_See code: [src/commands/composer/pull.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/composer/pull.ts)_
+_See code: [src/commands/composer/pull.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/composer/pull.ts)_
 
 ## `lps composer push`
 
@@ -107,7 +108,7 @@ EXAMPLES
   $ lps composer push --dry-run
 ```
 
-_See code: [src/commands/composer/push.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/composer/push.ts)_
+_See code: [src/commands/composer/push.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/composer/push.ts)_
 
 ## `lps help [COMMAND]`
 
@@ -144,7 +145,7 @@ EXAMPLES
   $ lps init
 ```
 
-_See code: [src/commands/init.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/init.ts)_
 
 ## `lps login`
 
@@ -161,7 +162,7 @@ EXAMPLES
   $ lps login
 ```
 
-_See code: [src/commands/login.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/login.ts)_
 
 ## `lps logout`
 
@@ -178,7 +179,7 @@ EXAMPLES
   $ lps logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/logout.ts)_
 
 ## `lps plugin add SLUG [VERSION]`
 
@@ -206,7 +207,7 @@ EXAMPLES
   $ lps plugin add contact-form-7 --dry-run
 ```
 
-_See code: [src/commands/plugin/add.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/plugin/add.ts)_
+_See code: [src/commands/plugin/add.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/plugin/add.ts)_
 
 ## `lps plugin pull`
 
@@ -228,7 +229,7 @@ EXAMPLES
   $ lps plugin pull --dry-run
 ```
 
-_See code: [src/commands/plugin/pull.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/plugin/pull.ts)_
+_See code: [src/commands/plugin/pull.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/plugin/pull.ts)_
 
 ## `lps plugin push`
 
@@ -250,24 +251,25 @@ EXAMPLES
   $ lps plugin push --dry-run
 ```
 
-_See code: [src/commands/plugin/push.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/plugin/push.ts)_
+_See code: [src/commands/plugin/push.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/plugin/push.ts)_
 
 ## `lps project config`
 
-Add or update a WordPress project environment
+Add or update a WordPress project environment. By default, authorizes via WordPress in your browser; manual username/Application Password entry is available as a fallback.
 
 ```
 USAGE
   $ lps project config
 
 DESCRIPTION
-  Add or update a WordPress project environment
+  Add or update a WordPress project environment. By default, authorizes via WordPress in your browser; manual
+  username/Application Password entry is available as a fallback.
 
 EXAMPLES
   $ lps project config
 ```
 
-_See code: [src/commands/project/config.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/project/config.ts)_
+_See code: [src/commands/project/config.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/project/config.ts)_
 
 ## `lps project list`
 
@@ -284,7 +286,7 @@ EXAMPLES
   $ lps project list
 ```
 
-_See code: [src/commands/project/list.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/project/list.ts)_
+_See code: [src/commands/project/list.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/project/list.ts)_
 
 ## `lps project remove`
 
@@ -301,7 +303,7 @@ EXAMPLES
   $ lps project remove
 ```
 
-_See code: [src/commands/project/remove.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/project/remove.ts)_
+_See code: [src/commands/project/remove.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/project/remove.ts)_
 
 ## `lps project switch`
 
@@ -318,7 +320,7 @@ EXAMPLES
   $ lps project switch
 ```
 
-_See code: [src/commands/project/switch.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/project/switch.ts)_
+_See code: [src/commands/project/switch.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/project/switch.ts)_
 
 ## `lps project sync`
 
@@ -335,7 +337,7 @@ EXAMPLES
   $ lps project sync
 ```
 
-_See code: [src/commands/project/sync.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/project/sync.ts)_
+_See code: [src/commands/project/sync.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/project/sync.ts)_
 
 ## `lps snippet list`
 
@@ -355,7 +357,30 @@ EXAMPLES
   $ lps snippet list
 ```
 
-_See code: [src/commands/snippet/list.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/snippet/list.ts)_
+_See code: [src/commands/snippet/list.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/snippet/list.ts)_
+
+## `lps snippet publish [PATH]`
+
+Publish snippets to your Loopress account so they can be deployed to other projects. Does not touch any WordPress site.
+
+```
+USAGE
+  $ lps snippet publish [PATH]
+
+ARGUMENTS
+  [PATH]  Path to snippets directory (overrides project config)
+
+DESCRIPTION
+  Publish snippets to your Loopress account so they can be deployed to other projects. Does not touch any WordPress
+  site.
+
+EXAMPLES
+  $ lps snippet publish
+
+  $ lps snippet publish --path ./snippets
+```
+
+_See code: [src/commands/snippet/publish.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/snippet/publish.ts)_
 
 ## `lps snippet pull [PATH]`
 
@@ -380,7 +405,7 @@ EXAMPLES
   $ lps snippet pull --path ./snippets
 ```
 
-_See code: [src/commands/snippet/pull.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/snippet/pull.ts)_
+_See code: [src/commands/snippet/pull.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/snippet/pull.ts)_
 
 ## `lps snippet push [PATH]`
 
@@ -406,7 +431,7 @@ EXAMPLES
   $ lps snippet push --path ./snippets
 ```
 
-_See code: [src/commands/snippet/push.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/snippet/push.ts)_
+_See code: [src/commands/snippet/push.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/snippet/push.ts)_
 
 ## `lps status`
 
@@ -423,5 +448,5 @@ EXAMPLES
   $ lps status
 ```
 
-_See code: [src/commands/status.ts](https://github.com/loopress/loopress/blob/v0.12.0/src/commands/status.ts)_
+_See code: [src/commands/status.ts](https://github.com/loopress/loopress/blob/v0.13.0/src/commands/status.ts)_
 <!-- commandsstop -->

package/dist/commands/login.d.ts

@@ -3,6 +3,5 @@ export default class Login extends Command {
     static description: string;
     static examples: string[];
     run(): Promise<void>;
-    private openBrowser;
     private waitForCallback;
 }

package/dist/commands/login.js

@@ -1,9 +1,7 @@
 import { Command } from '@oclif/core';
-import { exec } from 'node:child_process';
-import { createServer } from 'node:http';
 import { authManager } from '../config/auth.manager.js';
+import { renderResultPage, waitForLocalCallback } from '../lib/local-callback-server.js';
 const CONSOLE_URL = 'https://console.loopress.dev';
-const TIMEOUT_MS = 5 * 60 * 1000;
 export default class Login extends Command {
     static description = 'Log in to the Loopress console';
     static examples = ['$ lps login'];
@@ -12,95 +10,28 @@ export default class Login extends Command {
         authManager.setAuth({ email, savedAt: new Date().toISOString(), token });
         this.log(`\nLogged in${email ? ` as ${email}` : ''}. You're all set!`);
     }
-    openBrowser(url) {
-        const cmds = {
-            darwin: `open "${url}"`,
-            linux: `xdg-open "${url}"`,
-            win32: `start "" "${url}"`,
-        };
-        const cmd = cmds[process.platform];
-        if (cmd)
-            exec(cmd);
-    }
     waitForCallback() {
-        return new Promise((resolve, reject) => {
-            const server = createServer((req, res) => {
-                try {
-                    const url = new URL(req.url ?? '/', 'http://localhost');
-                    const token = url.searchParams.get('token');
-                    const email = url.searchParams.get('email') ?? undefined;
-                    if (!token) {
-                        res.writeHead(400, { 'Content-Type': 'text/plain' });
-                        res.end('Missing token');
-                        return;
-                    }
-                    res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-                    res.end(SUCCESS_PAGE);
-                    clearTimeout(timer);
-                    server.close();
-                    resolve({ email, token });
-                }
-                catch (error) {
-                    res.writeHead(500);
-                    res.end('Internal error');
-                    server.close();
-                    reject(error);
+        return waitForLocalCallback({
+            buildUrl: (callbackBaseUrl) => `${CONSOLE_URL}/cli-auth?callbackUrl=${encodeURIComponent(`${callbackBaseUrl}/callback`)}`,
+            handleRequest(url, { resolveWithPage, respondBadRequest }) {
+                const token = url.searchParams.get('token');
+                const email = url.searchParams.get('email') ?? undefined;
+                if (!token) {
+                    respondBadRequest('Missing token');
+                    return;
                 }
-            });
-            server.on('error', (err) => {
-                clearTimeout(timer);
-                reject(err);
-            });
-            const timer = setTimeout(() => {
-                server.close();
-                reject(new Error('Login timed out after 5 minutes. Please try again.'));
-            }, TIMEOUT_MS);
-            server.listen(0, '127.0.0.1', () => {
-                const { port } = server.address();
-                const callbackUrl = `http://localhost:${port}/callback`;
-                const loginUrl = `${CONSOLE_URL}/cli-auth?callbackUrl=${encodeURIComponent(callbackUrl)}`;
-                this.log('Opening Loopress console in your browser...');
-                this.log(`\nIf it doesn't open automatically, visit:\n${loginUrl}\n`);
-                this.openBrowser(loginUrl);
-            });
+                resolveWithPage(SUCCESS_PAGE, { email, token });
+            },
+            log: (message) => this.log(message),
+            openingMessage: 'Opening Loopress console in your browser...',
+            timeoutMessage: 'Login timed out after 5 minutes. Please try again.',
         });
     }
 }
-const SUCCESS_PAGE = `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Loopress: Logged in</title>
-  <style>
-    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
-    body {
-      font-family: system-ui, -apple-system, sans-serif;
-      background: #f0fdf4;
-      display: flex;
-      align-items: center;
-      justify-content: center;
-      min-height: 100dvh;
-    }
-    .card {
-      background: #fff;
-      border-radius: 16px;
-      padding: 2.5rem 3rem;
-      text-align: center;
-      box-shadow: 0 4px 32px rgba(0, 0, 0, .08);
-      max-width: 420px;
-      width: 90%;
-    }
-    .icon { font-size: 3rem; margin-bottom: 1rem; }
-    h1 { color: #15803d; font-size: 1.5rem; margin-bottom: .5rem; }
-    p { color: #6b7280; font-size: .95rem; line-height: 1.5; }
-  </style>
-</head>
-<body>
-  <div class="card">
-    <div class="icon">✅</div>
-    <h1>Login successful!</h1>
-    <p>You can close this tab and return to your terminal.</p>
-  </div>
-</body>
-</html>`;
+const SUCCESS_PAGE = renderResultPage({
+    background: '#f0fdf4',
+    heading: 'Login successful!',
+    headingColor: '#15803d',
+    icon: '✅',
+    tabTitle: 'Logged in',
+});

package/dist/commands/project/config.d.ts

@@ -3,5 +3,7 @@ export default class Config extends Command {
     static description: string;
     static examples: string[];
     run(): Promise<void>;
+    private promptManualCredentials;
+    private resolveCredentials;
     private resolveProject;
 }

package/dist/commands/project/config.js

@@ -1,9 +1,13 @@
 import { confirm, input, password as passwordPrompt, select } from '@inquirer/prompts';
 import { Command } from '@oclif/core';
 import { configManager } from '../../config/project-config.manager.js';
+import { authorizeWithBrowser } from '../../lib/wp-authorize-flow.js';
+import { diagnoseWpSite } from '../../lib/wp-site-diagnostic.js';
 const NEW_PROJECT = '__new__';
+const AUTH_BROWSER = 'browser';
+const AUTH_MANUAL = 'manual';
 export default class Config extends Command {
-    static description = 'Add or update a WordPress project environment';
+    static description = 'Add or update a WordPress project environment. By default, authorizes via WordPress in your browser; manual username/Application Password entry is available as a fallback.';
     static examples = ['$ lps project config'];
     async run() {
         await this.parse(Config);
@@ -34,7 +38,7 @@ export default class Config extends Command {
                 return;
             }
         }
-        const url = await input({
+        const rawUrl = await input({
             message: 'WordPress URL',
             validate(value) {
                 try {
@@ -49,15 +53,8 @@ export default class Config extends Command {
                 }
             },
         });
-        const user = await input({
-            message: 'Username',
-            validate: (value) => (value.trim().length > 0 ? true : 'Username cannot be empty'),
-        });
-        const appPassword = await passwordPrompt({
-            mask: '*',
-            message: 'Application password',
-            validate: (value) => (value.trim().length > 0 ? true : 'Application password cannot be empty'),
-        });
+        const url = rawUrl.replace(/\/+$/, '');
+        const { appPassword, user } = await this.resolveCredentials(url);
         const token = `${user}:${appPassword}`;
         const env = {
             addedAt: new Date().toISOString(),
@@ -79,6 +76,43 @@ export default class Config extends Command {
         this.log(`✓ "${projectName}/${envName}" configured`);
         this.log('→ Run `lps project switch` to change the active project or environment');
     }
+    async promptManualCredentials() {
+        const user = await input({
+            message: 'Username',
+            validate: (value) => (value.trim().length > 0 ? true : 'Username cannot be empty'),
+        });
+        const appPassword = await passwordPrompt({
+            mask: '*',
+            message: 'Application password',
+            validate: (value) => (value.trim().length > 0 ? true : 'Application password cannot be empty'),
+        });
+        return { appPassword, user };
+    }
+    async resolveCredentials(url) {
+        const authMode = await select({
+            choices: [
+                { name: 'Authorize in my browser (recommended)', value: AUTH_BROWSER },
+                { name: 'Enter credentials manually', value: AUTH_MANUAL },
+            ],
+            message: 'How do you want to authenticate?',
+        });
+        if (authMode === AUTH_MANUAL) {
+            return this.promptManualCredentials();
+        }
+        const diagnostic = await diagnoseWpSite(url);
+        if (!diagnostic.ok) {
+            this.warn(`${diagnostic.reason}\nFalling back to manual credential entry.`);
+            return this.promptManualCredentials();
+        }
+        try {
+            const { password, userLogin } = await authorizeWithBrowser(url, (message) => this.log(message));
+            return { appPassword: password, user: userLogin };
+        }
+        catch (error) {
+            this.warn(`${error.message}\nFalling back to manual credential entry.`);
+            return this.promptManualCredentials();
+        }
+    }
     async resolveProject() {
         const projects = configManager.listProjects();
         if (projects.length > 0) {

package/dist/commands/snippet/publish.d.ts

@@ -0,0 +1,10 @@
+import { Command } from '@oclif/core';
+export default class Publish extends Command {
+    static args: {
+        path: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+    private toPayload;
+}

package/dist/commands/snippet/publish.js

@@ -0,0 +1,74 @@
+import { Args, Command } from '@oclif/core';
+import { join } from 'node:path';
+import slugify from 'slugify';
+import { authManager } from '../../config/auth.manager.js';
+import { configManager } from '../../config/project-config.manager.js';
+import { ApiClient } from '../../lib/api-client.js';
+import { loadSnippets } from '../../lib/load-snippets.js';
+import { readLocalConfig } from '../../utils/loopress-config.js';
+// Publishes to the Loopress api (not a WordPress site), so this does not extend
+// `LoopressCommand`/`PushCommand`: those force an environment to be resolved, but a project
+// publishing its snippets for sharing doesn't need one, a pure "library" project 
+// may have zero environments configured at all.
+export default class Publish extends Command {
+    static args = {
+        path: Args.string({ description: 'Path to snippets directory (overrides project config)' }),
+    };
+    static description = 'Publish snippets to your Loopress account so they can be deployed to other projects. Does not touch any WordPress site.';
+    static examples = ['$ lps snippet publish', '$ lps snippet publish --path ./snippets'];
+    async run() {
+        const { args } = await this.parse(Publish);
+        const token = process.env.LOOPRESS_TOKEN ?? authManager.getAuth()?.token;
+        if (!token) {
+            this.error('Not logged in. Run `lps login` first.');
+        }
+        const localConfig = await readLocalConfig();
+        const projectId = localConfig.projectId ?? configManager.getCurrentProject()?.id;
+        if (!projectId) {
+            this.error('No project configured. Run `lps project config` first.');
+        }
+        const project = configManager.getProject(projectId);
+        if (!project) {
+            this.error(`Project "${projectId}" (from loopress.json) not found. Run \`lps project config\` to configure it.`);
+        }
+        if (!project.apiProjectId) {
+            this.error(`Project "${project.name}" is not linked to your Loopress account yet. Run \`lps project sync\` first.`);
+        }
+        const path = args.path ?? join(localConfig.rootDir ?? '.', localConfig.snippetsDir ?? 'snippets');
+        this.log(`Publishing snippets from ${path}`);
+        let snippets;
+        try {
+            snippets = await loadSnippets(path);
+        }
+        catch (error) {
+            this.error(error.message);
+        }
+        const api = new ApiClient(token);
+        try {
+            await api.post(`projects/${project.apiProjectId}/snippets/publish`, {
+                snippets: snippets.map((snippet) => this.toPayload(snippet)),
+            });
+        }
+        catch (error) {
+            this.error(error.message);
+        }
+        this.log(`Published ${snippets.length} snippet${snippets.length === 1 ? '' : 's'} to your Loopress account.`);
+    }
+    toPayload(snippet) {
+        return {
+            active: snippet.active,
+            code: snippet.code,
+            insertMethod: snippet.insertMethod,
+            location: snippet.location,
+            name: snippet.name,
+            priority: snippet.priority,
+            shortcodeAttributes: snippet.shortcodeAttributes,
+            // Derived from the snippet's name rather than its on-disk filename: the same
+            // slugification `push`/`pull` already use for the canonical `<id>-<slug>` filename
+            // convention, so it stays stable even for a not-yet-pushed file with an arbitrary name.
+            slug: slugify(snippet.name, { lower: true, strict: true }),
+            tags: snippet.tags,
+            type: snippet.type,
+        };
+    }
+}

package/dist/commands/snippet/push.js

@@ -1,18 +1,12 @@
 import { Args } from '@oclif/core';
 import { Listr } from 'listr2';
-import { readdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { readFile, rename, rm, writeFile } from 'node:fs/promises';
 import { basename, dirname, extname, join } from 'node:path';
 import slugify from 'slugify';
+import { loadSnippets as loadSnippetsFromDisk } from '../../lib/load-snippets.js';
 import { PushCommand } from '../../lib/push-command.js';
 import { isNotFoundError } from '../../lib/wp-client.js';
-import { defaultLocationForType, normalizeSnippet, parseInsertMethod, parseLocation, parseType, SNIPPETS_ENDPOINT, stripPhpOpeningTag, } from '../../utils/snippet-format.js';
-const TYPE_BY_EXTENSION = {
-    '.css': 'css',
-    '.html': 'html',
-    '.js': 'js',
-    '.php': 'php',
-    '.txt': 'text',
-};
+import { normalizeSnippet, SNIPPETS_ENDPOINT, stripPhpOpeningTag } from '../../utils/snippet-format.js';
 export default class Push extends PushCommand {
     static args = {
         path: Args.string({ description: 'Path to snippets directory (overrides project config)' }),
@@ -78,71 +72,12 @@ export default class Push extends PushCommand {
         await rm(oldMetaPath, { force: true });
     }
     async loadSnippets(path) {
-        const snippets = [];
-        let files;
         try {
-            files = await readdir(path);
+            return await loadSnippetsFromDisk(path, (message) => this.warn(message));
         }
         catch (error) {
-            this.error(`Error loading snippets: ${error.message}`);
+            this.error(error.message);
         }
-        for (const file of files) {
-            const ext = extname(file);
-            if (!(ext in TYPE_BY_EXTENSION))
-                continue;
-            const filePath = join(path, file);
-            const metaPath = join(path, `${basename(file, ext)}.json`);
-            // One snippet's files are read in isolation: a corrupted or hand-broken sidecar
-            // (bad JSON, unreadable file, ...) must only skip that snippet, not abort the entire
-            // push for every other snippet in the directory.
-            try {
-                const content = await readFile(filePath, 'utf8');
-                let id;
-                let name;
-                let type;
-                let active = false;
-                let tags = [];
-                let location = null;
-                let insertMethod = null;
-                let priority = 10;
-                let shortcodeAttributes = [];
-                try {
-                    const metaContent = await readFile(metaPath, 'utf8');
-                    const meta = JSON.parse(metaContent);
-                    id = meta.id ? Number(meta.id) : undefined;
-                    name = meta.name ? String(meta.name) : undefined;
-                    type = parseType(meta.type) ?? undefined;
-                    active = Boolean(meta.active);
-                    tags = Array.isArray(meta.tags) ? meta.tags.map(String) : [];
-                    location = parseLocation(meta.location);
-                    insertMethod = parseInsertMethod(meta.insertMethod);
-                    priority = meta.priority === undefined ? 10 : Number(meta.priority);
-                    shortcodeAttributes = Array.isArray(meta.shortcodeAttributes) ? meta.shortcodeAttributes.map(String) : [];
-                }
-                catch (error) {
-                    if (error.code !== 'ENOENT')
-                        throw error;
-                }
-                const resolvedType = type ?? (ext in TYPE_BY_EXTENSION ? TYPE_BY_EXTENSION[ext] : 'php');
-                snippets.push({
-                    active,
-                    code: content,
-                    id,
-                    insertMethod: insertMethod ?? 'auto',
-                    location: location ?? defaultLocationForType(resolvedType),
-                    name: name ?? basename(file, ext),
-                    path: filePath,
-                    priority,
-                    shortcodeAttributes,
-                    tags,
-                    type: resolvedType,
-                });
-            }
-            catch (error) {
-                this.warn(`Skipping "${metaPath}": ${error.message}`);
-            }
-        }
-        return snippets;
     }
     // Throwing on failure (rather than returning a boolean) is what lets Listr mark the task as
     // failed (red cross) instead of completed; `exitOnError: false` on the task list still lets

package/dist/lib/load-snippets.d.ts

@@ -0,0 +1,2 @@
+import { Snippet } from '../types/snippet.js';
+export declare function loadSnippets(path: string, onSkip?: (message: string) => void): Promise<Snippet[]>;

package/dist/lib/load-snippets.js

@@ -0,0 +1,84 @@
+import { readdir, readFile } from 'node:fs/promises';
+import { basename, extname, join } from 'node:path';
+import { defaultLocationForType, parseInsertMethod, parseLocation, parseType, } from '../utils/snippet-format.js';
+const TYPE_BY_EXTENSION = {
+    '.css': 'css',
+    '.html': 'html',
+    '.js': 'js',
+    '.php': 'php',
+    '.txt': 'text',
+};
+// Shared by `snippet push` (pushes to the project's own WordPress site) and `snippet publish`
+// (publishes to the Loopress api as a shared source) — both read the same local `snippets/`
+// directory the same way. `onSkip` is optional so callers that don't care about per-file
+// warnings (e.g. `snippet publish`) can ignore them; skipped files are simply left out either way.
+export async function loadSnippets(path, onSkip) {
+    const snippets = [];
+    let files;
+    try {
+        files = await readdir(path);
+    }
+    catch (error) {
+        throw new Error(`Error loading snippets: ${error.message}`);
+    }
+    for (const file of files) {
+        const ext = extname(file);
+        if (!(ext in TYPE_BY_EXTENSION))
+            continue;
+        const filePath = join(path, file);
+        const metaPath = join(path, `${basename(file, ext)}.json`);
+        // One snippet's files are read in isolation: a corrupted or hand-broken sidecar (bad JSON,
+        // unreadable file, ...) must only skip that snippet, not abort loading every other one.
+        let content;
+        try {
+            content = await readFile(filePath, 'utf8');
+        }
+        catch (error) {
+            onSkip?.(`Skipping "${filePath}": ${error.message}`);
+            continue;
+        }
+        let id;
+        let name;
+        let type;
+        let active = false;
+        let tags = [];
+        let location = null;
+        let insertMethod = null;
+        let priority = 10;
+        let shortcodeAttributes = [];
+        try {
+            const metaContent = await readFile(metaPath, 'utf8');
+            const meta = JSON.parse(metaContent);
+            id = meta.id === undefined ? undefined : Number(meta.id);
+            name = meta.name ? String(meta.name) : undefined;
+            type = parseType(meta.type) ?? undefined;
+            active = Boolean(meta.active);
+            tags = Array.isArray(meta.tags) ? meta.tags.map(String) : [];
+            location = parseLocation(meta.location);
+            insertMethod = parseInsertMethod(meta.insertMethod);
+            priority = meta.priority === undefined ? 10 : Number(meta.priority);
+            shortcodeAttributes = Array.isArray(meta.shortcodeAttributes) ? meta.shortcodeAttributes.map(String) : [];
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                onSkip?.(`Skipping "${metaPath}": ${error.message}`);
+                continue;
+            }
+        }
+        const resolvedType = type ?? (ext in TYPE_BY_EXTENSION ? TYPE_BY_EXTENSION[ext] : 'php');
+        snippets.push({
+            active,
+            code: content,
+            id,
+            insertMethod: insertMethod ?? 'auto',
+            location: location ?? defaultLocationForType(resolvedType),
+            name: name ?? basename(file, ext),
+            path: filePath,
+            priority,
+            shortcodeAttributes,
+            tags,
+            type: resolvedType,
+        });
+    }
+    return snippets;
+}

package/dist/lib/local-callback-server.d.ts

@@ -0,0 +1,25 @@
+export type CallbackHelpers<T> = {
+    rejectWithPage: (page: string, error: Error) => void;
+    resolveWithPage: (page: string, value: T) => void;
+    respondBadRequest: (message: string) => void;
+};
+/**
+ * Both `login` and `authorizeWithBrowser` send the user to a URL in their browser and need to
+ * catch the resulting redirect on a short-lived local server; this factors out the server setup,
+ * timeout, and browser-opening boilerplate they'd otherwise duplicate.
+ */
+export declare function waitForLocalCallback<T>(options: {
+    buildUrl: (callbackBaseUrl: string) => string;
+    handleRequest: (url: URL, helpers: CallbackHelpers<T>) => void;
+    log: (message: string) => void;
+    openingMessage: string;
+    timeoutMessage: string;
+    timeoutMs?: number;
+}): Promise<T>;
+export declare function renderResultPage(options: {
+    background: string;
+    heading: string;
+    headingColor: string;
+    icon: string;
+    tabTitle: string;
+}): string;

package/dist/lib/local-callback-server.js

@@ -0,0 +1,93 @@
+import { createServer } from 'node:http';
+import { openBrowser } from './open-browser.js';
+/**
+ * Both `login` and `authorizeWithBrowser` send the user to a URL in their browser and need to
+ * catch the resulting redirect on a short-lived local server; this factors out the server setup,
+ * timeout, and browser-opening boilerplate they'd otherwise duplicate.
+ */
+export function waitForLocalCallback(options) {
+    const timeoutMs = options.timeoutMs ?? 5 * 60 * 1000;
+    return new Promise((resolve, reject) => {
+        function finish(res, page, settle) {
+            res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+            res.end(page);
+            clearTimeout(timer);
+            server.close();
+            settle();
+        }
+        const server = createServer((req, res) => {
+            try {
+                const url = new URL(req.url ?? '/', 'http://localhost');
+                options.handleRequest(url, {
+                    rejectWithPage: (page, error) => finish(res, page, () => reject(error)),
+                    resolveWithPage: (page, value) => finish(res, page, () => resolve(value)),
+                    respondBadRequest(message) {
+                        res.writeHead(400, { 'Content-Type': 'text/plain' });
+                        res.end(message);
+                    },
+                });
+            }
+            catch (error) {
+                res.writeHead(500);
+                res.end('Internal error');
+                server.close();
+                reject(error);
+            }
+        });
+        server.on('error', (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+        const timer = setTimeout(() => {
+            server.close();
+            reject(new Error(options.timeoutMessage));
+        }, timeoutMs);
+        server.listen(0, '127.0.0.1', () => {
+            const { port } = server.address();
+            const targetUrl = options.buildUrl(`http://localhost:${port}`);
+            options.log(options.openingMessage);
+            options.log(`\nIf it doesn't open automatically, visit:\n${targetUrl}\n`);
+            openBrowser(targetUrl);
+        });
+    });
+}
+export function renderResultPage(options) {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Loopress: ${options.tabTitle}</title>
+  <style>
+    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: system-ui, -apple-system, sans-serif;
+      background: ${options.background};
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100dvh;
+    }
+    .card {
+      background: #fff;
+      border-radius: 16px;
+      padding: 2.5rem 3rem;
+      text-align: center;
+      box-shadow: 0 4px 32px rgba(0, 0, 0, .08);
+      max-width: 420px;
+      width: 90%;
+    }
+    .icon { font-size: 3rem; margin-bottom: 1rem; }
+    h1 { color: ${options.headingColor}; font-size: 1.5rem; margin-bottom: .5rem; }
+    p { color: #6b7280; font-size: .95rem; line-height: 1.5; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <div class="icon">${options.icon}</div>
+    <h1>${options.heading}</h1>
+    <p>You can close this tab and return to your terminal.</p>
+  </div>
+</body>
+</html>`;
+}

package/dist/lib/open-browser.d.ts

@@ -0,0 +1,2 @@
+/** Opens `url` in the user's default browser, best-effort (no-op on unknown platforms). */
+export declare function openBrowser(url: string): void;

package/dist/lib/open-browser.js

@@ -0,0 +1,12 @@
+import { execFile } from 'node:child_process';
+/** Opens `url` in the user's default browser, best-effort (no-op on unknown platforms). */
+export function openBrowser(url) {
+    const commands = {
+        darwin: ['open', [url]],
+        linux: ['xdg-open', [url]],
+        win32: ['cmd', ['/c', 'start', '', url]],
+    };
+    const command = commands[process.platform];
+    if (command)
+        execFile(...command);
+}

package/dist/lib/wp-authorize-flow.d.ts

@@ -0,0 +1,10 @@
+export type AuthorizeResult = {
+    password: string;
+    userLogin: string;
+};
+/**
+ * Runs WordPress's native "authorize application" flow: opens a local callback server,
+ * sends the user to `<siteUrl>/wp-admin/authorize-application.php`, and resolves with the
+ * generated Application Password once WordPress redirects back.
+ */
+export declare function authorizeWithBrowser(siteUrl: string, log: (message: string) => void): Promise<AuthorizeResult>;

package/dist/lib/wp-authorize-flow.js

@@ -0,0 +1,53 @@
+import { randomBytes } from 'node:crypto';
+import { renderResultPage, waitForLocalCallback } from './local-callback-server.js';
+const APP_NAME = 'Loopress';
+/**
+ * Runs WordPress's native "authorize application" flow: opens a local callback server,
+ * sends the user to `<siteUrl>/wp-admin/authorize-application.php`, and resolves with the
+ * generated Application Password once WordPress redirects back.
+ */
+export function authorizeWithBrowser(siteUrl, log) {
+    const state = randomBytes(32).toString('hex');
+    return waitForLocalCallback({
+        buildUrl(callbackBaseUrl) {
+            const successUrl = `${callbackBaseUrl}/callback?state=${state}`;
+            const rejectUrl = `${callbackBaseUrl}/reject?state=${state}`;
+            return (`${siteUrl}/wp-admin/authorize-application.php?app_name=${encodeURIComponent(APP_NAME)}` +
+                `&success_url=${encodeURIComponent(successUrl)}&reject_url=${encodeURIComponent(rejectUrl)}`);
+        },
+        handleRequest(url, { rejectWithPage, resolveWithPage, respondBadRequest }) {
+            if (url.searchParams.get('state') !== state) {
+                respondBadRequest('Invalid or missing state');
+                return;
+            }
+            if (url.pathname === '/reject') {
+                rejectWithPage(REJECTED_PAGE, new Error('Authorization rejected in WordPress. You can enter credentials manually instead.'));
+                return;
+            }
+            const userLogin = url.searchParams.get('user_login');
+            const password = url.searchParams.get('password');
+            if (!userLogin || !password) {
+                respondBadRequest('Missing user_login or password');
+                return;
+            }
+            resolveWithPage(SUCCESS_PAGE, { password, userLogin });
+        },
+        log,
+        openingMessage: 'Opening WordPress in your browser to authorize Loopress...',
+        timeoutMessage: 'Authorization timed out after 5 minutes. You can enter credentials manually instead.',
+    });
+}
+const SUCCESS_PAGE = renderResultPage({
+    background: '#f0fdf4',
+    heading: 'Authorization successful!',
+    headingColor: '#15803d',
+    icon: '✅',
+    tabTitle: 'Authorized',
+});
+const REJECTED_PAGE = renderResultPage({
+    background: '#fef2f2',
+    heading: 'Authorization rejected',
+    headingColor: '#b91c1c',
+    icon: '✕',
+    tabTitle: 'Authorization rejected',
+});

package/dist/lib/wp-site-diagnostic.d.ts

@@ -0,0 +1,13 @@
+export declare const REQUEST_TIMEOUT_MS = 10000;
+export type DiagnosticResult = {
+    ok: false;
+    reason: string;
+} | {
+    ok: true;
+};
+/**
+ * Pre-flight checks run before starting the browser authorization flow, so failures
+ * (unreachable site, blocked REST API, WordPress too old) surface as an actionable
+ * message instead of a confusing timeout once the browser is already open.
+ */
+export declare function diagnoseWpSite(siteUrl: string): Promise<DiagnosticResult>;

package/dist/lib/wp-site-diagnostic.js

@@ -0,0 +1,46 @@
+import got from 'got';
+export const REQUEST_TIMEOUT_MS = 10_000;
+/**
+ * Pre-flight checks run before starting the browser authorization flow, so failures
+ * (unreachable site, blocked REST API, WordPress too old) surface as an actionable
+ * message instead of a confusing timeout once the browser is already open.
+ */
+export async function diagnoseWpSite(siteUrl) {
+    try {
+        await got.get(`${siteUrl}/wp-json/`, { timeout: { request: REQUEST_TIMEOUT_MS } });
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: `Could not reach the WordPress REST API at ${siteUrl}/wp-json/. The site may be unreachable, or a security plugin may be blocking it. (${describe(error)})`,
+        };
+    }
+    try {
+        const response = await got.head(`${siteUrl}/wp-admin/authorize-application.php`, {
+            throwHttpErrors: false,
+            timeout: { request: REQUEST_TIMEOUT_MS },
+        });
+        if (response.statusCode === 404) {
+            return {
+                ok: false,
+                reason: `The application authorization page was not found on ${siteUrl}. This WordPress site may be older than 5.6, or the feature may be disabled by a plugin.`,
+            };
+        }
+        if (response.statusCode >= 400) {
+            return {
+                ok: false,
+                reason: `The application authorization page at ${siteUrl}/wp-admin/authorize-application.php returned an error (HTTP ${response.statusCode}).`,
+            };
+        }
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: `Could not reach ${siteUrl}/wp-admin/authorize-application.php. (${describe(error)})`,
+        };
+    }
+    return { ok: true };
+}
+function describe(error) {
+    return error instanceof Error ? error.message : String(error);
+}

package/oclif.manifest.json

@@ -351,6 +351,36 @@
         "list.js"
       ]
     },
+    "snippet:publish": {
+      "aliases": [],
+      "args": {
+        "path": {
+          "description": "Path to snippets directory (overrides project config)",
+          "name": "path"
+        }
+      },
+      "description": "Publish snippets to your Loopress account so they can be deployed to other projects. Does not touch any WordPress site.",
+      "examples": [
+        "$ lps snippet publish",
+        "$ lps snippet publish --path ./snippets"
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "snippet:publish",
+      "pluginAlias": "@loopress/cli",
+      "pluginName": "@loopress/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "snippet",
+        "publish.js"
+      ]
+    },
     "snippet:pull": {
       "aliases": [],
       "args": {
@@ -437,7 +467,7 @@
     "project:config": {
       "aliases": [],
       "args": {},
-      "description": "Add or update a WordPress project environment",
+      "description": "Add or update a WordPress project environment. By default, authorizes via WordPress in your browser; manual username/Application Password entry is available as a fallback.",
       "examples": [
         "$ lps project config"
       ],
@@ -555,5 +585,5 @@
       ]
     }
   },
-  "version": "0.12.0"
+  "version": "0.13.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@loopress/cli",
   "description": "CLI tool for syncing WordPress code snippets, plugins, and Composer dependencies via the REST API",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "author": "jean-smaug",
   "bin": {
     "loopress": "bin/run.js",
@@ -109,6 +109,7 @@
     "prewatch": "pnpm run schema:types",
     "watch": "tsc -b --watch",
     "build": "shx rm -rf dist && pnpm run schema:types && tsc -b",
+    "prelint": "pnpm run schema:types",
     "lint": "eslint",
     "pretest": "pnpm run schema:types",
     "posttest": "pnpm run lint",