@lpm-registry/cli 0.58.0 → 0.59.1

package/lib/commands/npmrc.js

@@ -1,178 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { request } from "../api.js";
-import { getRegistryUrl, getToken } from "../config.js";
-import { createSpinner, log, printHeader } from "../ui.js";
-
-/**
- * Generate a read-only .npmrc token for local development.
- * Creates a 30-day scoped token and writes it to the project's .npmrc.
- * Also ensures .npmrc is in .gitignore to prevent accidental commits.
- */
-export async function npmrc(options) {
-  printHeader();
-
-  const token = await getToken();
-  if (!token) {
-    log.error(
-      'You must be logged in to generate an .npmrc token. Run "lpm login" first.',
-    );
-    process.exit(1);
-  }
-
-  const projectRoot = process.cwd();
-  const npmrcPath = path.join(projectRoot, ".npmrc");
-  const gitignorePath = path.join(projectRoot, ".gitignore");
-
-  // Check for package.json
-  const pkgJsonPath = path.join(projectRoot, "package.json");
-  if (!fs.existsSync(pkgJsonPath)) {
-    log.warn("No package.json found. Run this command in your project root.");
-  }
-
-  // Derive project name for the token label
-  let projectName = "project";
-  if (fs.existsSync(pkgJsonPath)) {
-    try {
-      const pkg = JSON.parse(fs.readFileSync(pkgJsonPath, "utf8"));
-      if (pkg.name) {
-        projectName = pkg.name.replace(/[^a-zA-Z0-9._-]/g, "-");
-      }
-    } catch {
-      // Invalid package.json — use default name
-    }
-  }
-
-  const expiryDays = parseInt(options?.days, 10) || 30;
-  const spinner = createSpinner("Creating read-only token...").start();
-
-  // Call server to create a scoped read-only token
-  let readToken;
-  let expiresAt;
-  try {
-    const tokenName = `npmrc-${projectName}-${new Date().toISOString().slice(0, 10)}`;
-    const response = await request("/-/token/create", {
-      method: "POST",
-      body: JSON.stringify({
-        scope: "read",
-        name: tokenName,
-        expiryDays,
-      }),
-      headers: { "Content-Type": "application/json" },
-    });
-
-    if (!response.ok) {
-      const text = await response.text();
-      throw new Error(`Token creation failed: ${response.status} ${text}`);
-    }
-
-    const data = await response.json();
-    readToken = data.token;
-    expiresAt = data.expiresAt;
-    spinner.succeed("Read-only token created.");
-  } catch (error) {
-    spinner.fail(`Failed to create token: ${error.message}`);
-    process.exit(1);
-  }
-
-  // Build .npmrc content
-  const registryUrl = getRegistryUrl();
-  const fullRegistryUrl = registryUrl.endsWith("/api/registry")
-    ? registryUrl
-    : `${registryUrl}/api/registry`;
-  const registryHost = fullRegistryUrl.replace(/^https?:/, "");
-
-  // Default: scoped (only @lpm.dev packages through lpm.dev).
-  // --proxy: route all npm traffic through lpm.dev (Pro/Org feature).
-  let useScoped = !options?.proxy;
-
-  // Read existing .npmrc and check for custom default registry
-  let npmrcContent = "";
-  if (fs.existsSync(npmrcPath)) {
-    const existingContent = fs.readFileSync(npmrcPath, "utf8");
-
-    // Detect custom default registry (not npmjs.org and not lpm.dev)
-    if (!useScoped) {
-      const registryLine = existingContent
-        .split("\n")
-        .find(
-          (line) =>
-            line.match(/^registry=/) &&
-            !line.includes("registry.npmjs.org") &&
-            !line.includes("lpm.dev"),
-        );
-      if (registryLine) {
-        log.warn(`Found existing default registry: ${registryLine.trim()}`);
-        log.warn("Using --scoped mode to avoid overriding it.");
-        log.warn(
-          "To use LPM as your default registry, remove the existing registry= line first.",
-        );
-        useScoped = true;
-      }
-    }
-
-    // Remove old LPM config lines (both scoped and unscoped formats)
-    npmrcContent = existingContent
-      .split("\n")
-      .filter((line) => {
-        return (
-          !line.includes("@lpm.dev:registry") &&
-          !line.match(/^registry=.*lpm\.dev/) &&
-          !line.includes("lpm.dev/api/registry/:_authToken") &&
-          !line.includes("_authToken=lpm_") &&
-          // biome-ignore lint/suspicious/noTemplateCurlyInString: matching literal npm token placeholder
-          !line.includes("_authToken=${LPM_TOKEN}") &&
-          !line.includes("# LPM Registry")
-        );
-      })
-      .join("\n")
-      .trim();
-  }
-
-  const registryLine = useScoped
-    ? `@lpm.dev:registry=${fullRegistryUrl}`
-    : `registry=${fullRegistryUrl}`;
-
-  const lpmConfig = `# LPM Registry (generated by lpm setup local — do not commit)
-${registryLine}
-${registryHost}/:_authToken=${readToken}`;
-
-  npmrcContent = npmrcContent ? `${npmrcContent}\n\n${lpmConfig}` : lpmConfig;
-  fs.writeFileSync(npmrcPath, `${npmrcContent}\n`);
-
-  // Ensure .npmrc is in .gitignore
-  let gitignoreUpdated = false;
-  if (fs.existsSync(gitignorePath)) {
-    const gitignore = fs.readFileSync(gitignorePath, "utf8");
-    if (!gitignore.split("\n").some((line) => line.trim() === ".npmrc")) {
-      fs.writeFileSync(gitignorePath, `${gitignore.trimEnd()}\n.npmrc\n`);
-      gitignoreUpdated = true;
-    }
-  } else {
-    fs.writeFileSync(gitignorePath, ".npmrc\n");
-    gitignoreUpdated = true;
-  }
-
-  // Output
-  console.log("");
-  log.success(".npmrc configured with read-only LPM token.");
-  if (gitignoreUpdated) {
-    log.info(".npmrc added to .gitignore to prevent token leaks.");
-  }
-
-  if (useScoped) {
-    log.info("Only @lpm.dev packages will route through lpm.dev.");
-  } else {
-    log.info("All packages (LPM + npm) will route through lpm.dev.");
-    log.info("Note: First install may update resolved URLs in your lockfile.");
-  }
-
-  const expiryDate = new Date(expiresAt).toLocaleDateString("en-US", {
-    year: "numeric",
-    month: "long",
-    day: "numeric",
-  });
-  log.info(`Token expires: ${expiryDate}`);
-  log.info("Run `lpm setup local` again to refresh when expired.");
-  console.log("");
-}

package/lib/commands/open.js

@@ -1,82 +0,0 @@
-import fs from "node:fs"
-import path from "node:path"
-import open from "open"
-import { request } from "../api.js"
-import { getRegistryUrl } from "../config.js"
-import { createSpinner } from "../ui.js"
-
-/**
- * Parse owner from LPM package name.
- * @param {string} name - Package name (e.g., '@lpm.dev/owner.pkg-name')
- * @returns {{ owner: string, pkgName: string } | null}
- */
-function parseOwner(name) {
-	if (name.startsWith("@lpm.dev/")) {
-		const nameWithOwner = name.replace("@lpm.dev/", "")
-		const dotIndex = nameWithOwner.indexOf(".")
-		if (dotIndex === -1) return null
-		return {
-			owner: nameWithOwner.substring(0, dotIndex),
-			pkgName: nameWithOwner.substring(dotIndex + 1),
-		}
-	}
-	return null
-}
-
-export async function openDashboard() {
-	const spinner = createSpinner("Opening dashboard...").start()
-	const registryUrl = getRegistryUrl()
-
-	// Default URL
-	let url = `${registryUrl}/dashboard`
-
-	// Check if we are in a package directory
-	const pkgPath = path.join(process.cwd(), "package.json")
-	if (fs.existsSync(pkgPath)) {
-		try {
-			const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"))
-			const parsed = parseOwner(pkg.name)
-
-			if (parsed) {
-				const { owner, pkgName } = parsed
-				spinner.text = `Detected package ${pkg.name}. Checking owner...`
-
-				// Fetch user info to determine if owner is personal or org
-				try {
-					const response = await request("/-/whoami")
-					if (response.ok) {
-						const data = await response.json()
-
-						// Check if owner matches user's personal username
-						if (data.profile_username && data.profile_username === owner) {
-							url = `${registryUrl}/dashboard/packages`
-							spinner.text = `Opening personal packages dashboard...`
-						}
-						// Check if owner matches one of user's organizations
-						else if (data.organizations?.some(org => org.slug === owner)) {
-							url = `${registryUrl}/dashboard/orgs/${owner}/packages`
-							spinner.text = `Opening ${owner} organization packages...`
-						}
-						// Owner not recognized, fall back to public package page
-						else {
-							url = `${registryUrl}/${owner}.${pkgName}`
-							spinner.text = `Opening public package page...`
-						}
-					} else {
-						// Not authenticated, open public package page
-						url = `${registryUrl}/${owner}.${pkgName}`
-						spinner.text = `Opening public package page...`
-					}
-				} catch (_apiError) {
-					// API error, fall back to dashboard
-					url = `${registryUrl}/dashboard`
-				}
-			}
-		} catch (_e) {
-			// ignore JSON parse errors
-		}
-	}
-
-	await open(url)
-	spinner.succeed(`Opened ${url}`)
-}

package/lib/commands/outdated.js

@@ -1,291 +0,0 @@
-/**
- * Outdated Command
- *
- * Check for outdated dependencies in the project.
- *
- * Usage:
- *   lpm outdated [options]
- *
- * Options:
- *   --json    Output in JSON format
- *   --all     Show all dependencies, not just outdated ones
- *
- * @module cli/lib/commands/outdated
- */
-
-import { existsSync, readFileSync } from "node:fs"
-import { join } from "node:path"
-import chalk from "chalk"
-import ora from "ora"
-import { post } from "../api.js"
-
-/**
- * Read and parse package.json from current directory.
- * @returns {Object | null}
- */
-function readPackageJson() {
-	const packageJsonPath = join(process.cwd(), "package.json")
-
-	if (!existsSync(packageJsonPath)) {
-		return null
-	}
-
-	try {
-		const content = readFileSync(packageJsonPath, "utf8")
-		return JSON.parse(content)
-	} catch {
-		return null
-	}
-}
-
-/**
- * Read package-lock.json for current versions.
- * @returns {Object | null}
- */
-function readPackageLock() {
-	const lockPath = join(process.cwd(), "package-lock.json")
-
-	if (!existsSync(lockPath)) {
-		return null
-	}
-
-	try {
-		const content = readFileSync(lockPath, "utf8")
-		const lock = JSON.parse(content)
-		return lock.packages || lock.dependencies || null
-	} catch {
-		return null
-	}
-}
-
-/**
- * Compare semver versions.
- * @param {string} current
- * @param {string} latest
- * @returns {'major' | 'minor' | 'patch' | 'same' | 'unknown'}
- */
-function getUpdateType(current, latest) {
-	const parseVersion = v => {
-		const match = v.match(/^(\d+)\.(\d+)\.(\d+)/)
-		if (!match) return null
-		return [
-			parseInt(match[1], 10),
-			parseInt(match[2], 10),
-			parseInt(match[3], 10),
-		]
-	}
-
-	const currentParts = parseVersion(current)
-	const latestParts = parseVersion(latest)
-
-	if (!currentParts || !latestParts) return "unknown"
-
-	if (latestParts[0] > currentParts[0]) return "major"
-	if (latestParts[1] > currentParts[1]) return "minor"
-	if (latestParts[2] > currentParts[2]) return "patch"
-
-	return "same"
-}
-
-/**
- * Get color for update type.
- * @param {string} type
- * @returns {Function}
- */
-function getUpdateColor(type) {
-	switch (type) {
-		case "major":
-			return chalk.red
-		case "minor":
-			return chalk.yellow
-		case "patch":
-			return chalk.green
-		default:
-			return chalk.dim
-	}
-}
-
-/**
- * Execute the outdated command.
- *
- * @param {Object} options - Command options
- * @param {boolean} [options.json] - Output as JSON
- * @param {boolean} [options.all] - Show all dependencies
- */
-export async function outdated(options = {}) {
-	const spinner = ora("Reading dependencies...").start()
-
-	// Read package.json
-	const packageJson = readPackageJson()
-
-	if (!packageJson) {
-		spinner.fail(chalk.red("No package.json found in current directory."))
-		process.exit(1)
-	}
-
-	const dependencies = {
-		...(packageJson.dependencies || {}),
-	}
-
-	const devDependencies = {
-		...(packageJson.devDependencies || {}),
-	}
-
-	const allDeps = { ...dependencies, ...devDependencies }
-	const depCount = Object.keys(allDeps).length
-
-	if (depCount === 0) {
-		spinner.succeed(chalk.green("No dependencies to check."))
-		return
-	}
-
-	// Get current versions from lock file
-	const lockData = readPackageLock()
-
-	// Build dependency list
-	const depList = Object.entries(allDeps).map(([name, version]) => {
-		let currentVersion = version.replace(/^[\^~]/, "")
-
-		if (lockData) {
-			const lockEntry = lockData[name] || lockData[`node_modules/${name}`]
-			if (lockEntry?.version) {
-				currentVersion = lockEntry.version
-			}
-		}
-
-		return {
-			name,
-			currentVersion,
-			wantedVersion: version,
-			isDev: name in devDependencies,
-		}
-	})
-
-	spinner.text = `Checking ${depCount} dependencies...`
-
-	try {
-		const response = await post(
-			"/outdated",
-			{
-				dependencies: depList.map(d => ({
-					name: d.name,
-					version: d.currentVersion,
-				})),
-			},
-			{
-				onRetry: (attempt, max) => {
-					spinner.text = `Checking (retry ${attempt}/${max})...`
-				},
-			},
-		)
-
-		if (!response.ok) {
-			const data = await response.json().catch(() => ({}))
-			throw new Error(data.error || "Outdated check failed.")
-		}
-
-		const data = await response.json()
-		const latestVersions = data.packages || {}
-
-		spinner.stop()
-
-		// Merge latest versions with our data
-		const results = depList.map(dep => {
-			const latest = latestVersions[dep.name]?.latest || dep.currentVersion
-			const updateType = getUpdateType(dep.currentVersion, latest)
-
-			return {
-				...dep,
-				latestVersion: latest,
-				updateType,
-				isOutdated: updateType !== "same" && updateType !== "unknown",
-			}
-		})
-
-		// Filter if not showing all
-		const displayResults = options.all
-			? results
-			: results.filter(r => r.isOutdated)
-
-		// JSON output
-		if (options.json) {
-			console.log(JSON.stringify(displayResults, null, 2))
-			return
-		}
-
-		// No outdated packages
-		if (displayResults.length === 0) {
-			console.log(
-				chalk.green(`\n✓ All ${depCount} dependencies are up to date.\n`),
-			)
-			return
-		}
-
-		// Display results
-		const outdatedCount = results.filter(r => r.isOutdated).length
-		console.log(
-			chalk.bold(
-				`\n${outdatedCount} outdated package${outdatedCount > 1 ? "s" : ""} in ${depCount} dependencies.\n`,
-			),
-		)
-
-		// Calculate column widths
-		const maxNameLen = Math.max(...displayResults.map(r => r.name.length), 10)
-		const maxCurrentLen = Math.max(
-			...displayResults.map(r => r.currentVersion.length),
-			7,
-		)
-		const maxLatestLen = Math.max(
-			...displayResults.map(r => r.latestVersion.length),
-			6,
-		)
-
-		// Header
-		console.log(
-			`  ${chalk.dim("Package".padEnd(maxNameLen))}  ${chalk.dim("Current".padEnd(maxCurrentLen))}  ${chalk.dim("Latest".padEnd(maxLatestLen))}  ${chalk.dim("Type")}`,
-		)
-		console.log(
-			chalk.dim(
-				`  ${"─".repeat(maxNameLen + maxCurrentLen + maxLatestLen + 20)}`,
-			),
-		)
-
-		// Rows
-		for (const result of displayResults) {
-			const name = result.name.padEnd(maxNameLen)
-			const current = result.currentVersion.padEnd(maxCurrentLen)
-			const latest = result.latestVersion.padEnd(maxLatestLen)
-			const color = getUpdateColor(result.updateType)
-			const devTag = result.isDev ? chalk.dim(" (dev)") : ""
-
-			console.log(
-				`  ${chalk.cyan(name)}  ${chalk.dim(current)}  ${color(latest)}  ${color(result.updateType)}${devTag}`,
-			)
-		}
-
-		console.log("")
-
-		// Summary
-		const majorCount = results.filter(r => r.updateType === "major").length
-		const minorCount = results.filter(r => r.updateType === "minor").length
-		const patchCount = results.filter(r => r.updateType === "patch").length
-
-		const parts = []
-		if (majorCount > 0) parts.push(chalk.red(`${majorCount} major`))
-		if (minorCount > 0) parts.push(chalk.yellow(`${minorCount} minor`))
-		if (patchCount > 0) parts.push(chalk.green(`${patchCount} patch`))
-
-		if (parts.length > 0) {
-			console.log(
-				`  ${parts.join(", ")} update${outdatedCount > 1 ? "s" : ""} available.`,
-			)
-			console.log("")
-		}
-	} catch (error) {
-		spinner.fail(chalk.red("Outdated check failed."))
-		console.error(chalk.red(`  ${error.message}`))
-		process.exit(1)
-	}
-}
-
-export default outdated

package/lib/commands/pool-stats.js

@@ -1,100 +0,0 @@
-import chalk from "chalk"
-import ora from "ora"
-import { get } from "../api.js"
-
-/**
- * Format cents to a dollar string.
- * @param {number} cents
- * @returns {string}
- */
-function formatCents(cents) {
-	if (!cents && cents !== 0) return "$0.00"
-	return `$${(cents / 100).toFixed(2)}`
-}
-
-/**
- * Fetch and display Pool earnings statistics for the authenticated user.
- *
- * @param {Object} [options]
- * @param {boolean} [options.json] - Output as JSON
- */
-export async function poolStats(options = {}) {
-	const spinner = options.json
-		? null
-		: ora("Fetching pool statistics...").start()
-
-	try {
-		const response = await get("/pool/stats", {
-			skipRetry: false,
-			onRetry: spinner
-				? (attempt, max) => {
-						spinner.text = `Fetching (retry ${attempt}/${max})...`
-					}
-				: undefined,
-		})
-
-		const data = await response.json().catch(() => ({}))
-
-		if (!response.ok) {
-			throw new Error(data.error || `Request failed: ${response.status}`)
-		}
-
-		if (options.json) {
-			console.log(JSON.stringify(data, null, 2))
-			return
-		}
-
-		if (spinner) spinner.stop()
-
-		const packages = data.packages || []
-
-		console.log("")
-		console.log(chalk.bold("  Pool Earnings — Current Month"))
-		console.log(chalk.dim(`  Period: ${data.billingPeriod || "N/A"}`))
-		console.log("")
-
-		// Summary stats
-		console.log(
-			`  ${chalk.bold("Your Estimate:")}  ${chalk.green(formatCents(data.estimatedEarningsCents))}`,
-		)
-		console.log("")
-
-		if (packages.length === 0) {
-			console.log(chalk.dim("  No pool packages found."))
-			console.log(
-				chalk.dim(
-					"  Publish a package with Pool distribution to start earning.",
-				),
-			)
-			console.log("")
-			return
-		}
-
-		// Table header
-		const nameWidth = Math.max(30, ...packages.map(p => p.name.length + 2))
-		console.log(
-			`  ${chalk.dim("Package".padEnd(nameWidth))}${chalk.dim("Installs".padStart(10))}${chalk.dim("Share %".padStart(10))}${chalk.dim("Earnings".padStart(12))}`,
-		)
-		console.log(chalk.dim(`  ${"─".repeat(nameWidth + 32)}`))
-
-		for (const pkg of packages) {
-			const name = pkg.name.padEnd(nameWidth)
-			const installs = (pkg.installCount || 0).toLocaleString().padStart(10)
-			const share = `${(pkg.sharePercentage || 0).toFixed(2)}%`.padStart(10)
-			const earnings = formatCents(pkg.estimatedEarningsCents).padStart(12)
-			console.log(`  ${name}${installs}${share}${chalk.green(earnings)}`)
-		}
-
-		console.log("")
-	} catch (error) {
-		if (spinner) spinner.fail(chalk.red("Failed to fetch pool statistics."))
-		if (options.json) {
-			console.log(JSON.stringify({ error: error.message }))
-		} else {
-			console.error(chalk.red(`  ${error.message}`))
-		}
-		process.exit(1)
-	}
-}
-
-export default poolStats