@maker-or/opencms 0.1.7 → 0.1.8

package/README.md

@@ -23,6 +23,8 @@ npx @maker-or/opencms deploy
 
 The generated `cms/schema.json` file defines the project's content types and allowed blocks. The CLI syncs it to the development environment when `dev` or `deploy` runs.
 
+`opencms deploy` promotes the development schema and only published development pages as one production snapshot. Draft pages stay out of production and production pages no longer present in the published development snapshot are removed. When `VERCEL_TOKEN` is set, the command also deploys the application with its project ID, API origin, and production CMS environment supplied to Vercel at build time and runtime.
+
 The CLI stores its local login configuration in `~/.config/opencms/config.json` (or `$XDG_CONFIG_HOME/opencms/config.json` when configured).
 
 The CLI uses the OpenCMS control-plane origin from `OPENCMS_URL`. Set it to the dashboard/API origin for your hosted, local, or self-hosted instance. `OPENCMS_API_URL` and `OPENCMS_DASHBOARD_URL` remain supported as separate legacy overrides, but there is no baked-in deployment URL.

package/dist/index.js

@@ -2,9 +2,10 @@
 
 // src/index.ts
 import { createServer } from "node:http";
+import { randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
-import { access, mkdir, readdir, readFile, rm, writeFile } from "node:fs/promises";
+import { access, chmod, mkdir, readdir, readFile, rm, writeFile } from "node:fs/promises";
 import { constants } from "node:fs";
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline/promises";
@@ -103,18 +104,21 @@ function createSdk(options = {}) {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(input)
+      }),
+      delete: (targetProjectId) => request(`/api/projects/${targetProjectId}`, {
+        method: "DELETE"
       })
     },
     schema: {
       get: () => {
         if (!projectId)
           throw new Error("projectId is required to get the schema");
-        return request(`/api/projects/${projectId}/schema`);
+        return request(`/api/projects/${projectId}/schema?environment=${environment}`);
       },
       update: (schema) => {
         if (!projectId)
           throw new Error("projectId is required to update the schema");
-        return request(`/api/projects/${projectId}/schema`, {
+        return request(`/api/projects/${projectId}/schema?environment=${environment}`, {
           method: "PUT",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify(schema)
@@ -205,6 +209,27 @@ function createSdk(options = {}) {
   };
 }
 
+// src/vercel.ts
+function vercelDeploymentArgs({
+  apiUrl,
+  projectId,
+  token
+}) {
+  const connectionVariables = [
+    `NEXT_PUBLIC_OPENCMS_PROJECT_ID=${projectId}`,
+    `OPENCMS_API_URL=${apiUrl}`,
+    "OPENCMS_ENVIRONMENT=production"
+  ];
+  return [
+    "vercel",
+    "--prod",
+    "--yes",
+    "--token",
+    token,
+    ...connectionVariables.flatMap((value) => ["--build-env", value, "--env", value])
+  ];
+}
+
 // src/index.ts
 var configRoot = process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config");
 var configPath = join(configRoot, "opencms", "config.json");
@@ -218,9 +243,14 @@ async function readConfig() {
   }
 }
 async function writeConfig(config) {
-  await mkdir(join(configRoot, "opencms"), { recursive: true });
+  const directory = join(configRoot, "opencms");
+  await mkdir(directory, { recursive: true, mode: 448 });
   await writeFile(configPath, `${JSON.stringify(config, null, 2)}
-`, "utf8");
+`, { encoding: "utf8", mode: 384 });
+  if (process.platform !== "win32") {
+    await chmod(directory, 448);
+    await chmod(configPath, 384);
+  }
 }
 function tokenFor(config) {
   return process.env.OPENCMS_CLERK_TOKEN ?? config.token ?? null;
@@ -272,6 +302,7 @@ async function openBrowser(url) {
   await runCommand(command[0], command.slice(1));
 }
 async function browserLogin(config) {
+  const loginState = randomUUID();
   let resolveToken = () => {
     return;
   };
@@ -289,14 +320,24 @@ async function browserLogin(config) {
       response.end("Waiting for opencms login.");
       return;
     }
+    if (url.searchParams.get("state") !== loginState) {
+      response.writeHead(400, { "Content-Type": "text/plain", "Cache-Control": "no-store" });
+      response.end("Invalid login state.");
+      return;
+    }
     const token = url.searchParams.get("token");
     if (!token) {
-      response.writeHead(400, { "Content-Type": "text/plain" });
+      response.writeHead(400, { "Content-Type": "text/plain", "Cache-Control": "no-store" });
       response.end("Missing login token.");
       return;
     }
     resolveToken(token);
-    response.writeHead(200, { "Content-Type": "text/html" });
+    response.writeHead(200, {
+      "Content-Type": "text/html",
+      "Cache-Control": "no-store",
+      "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'",
+      "X-Content-Type-Options": "nosniff"
+    });
     response.end("<h1>OpenCMS login complete</h1><p>You can close this window.</p>");
   });
   await new Promise((resolve2, reject) => {
@@ -307,7 +348,7 @@ async function browserLogin(config) {
   if (!address || typeof address === "string")
     throw new Error("Unable to start the login callback server.");
   const callback = `http://127.0.0.1:${address.port}/callback`;
-  const loginUrl = `${dashboardUrlFor(config)}/cli/login?redirect_uri=${encodeURIComponent(callback)}`;
+  const loginUrl = `${dashboardUrlFor(config)}/cli/login?redirect_uri=${encodeURIComponent(callback)}&state=${encodeURIComponent(loginState)}`;
   console.log(`Opening ${loginUrl}`);
   try {
     await openBrowser(loginUrl);
@@ -339,6 +380,18 @@ async function reauthenticate(config) {
   await writeConfig({ ...config, token: loggedInToken, apiUrl: apiUrlFor(config) });
   return loggedInToken;
 }
+async function withReauthentication(operation) {
+  let config = await readConfig();
+  try {
+    return await operation(config);
+  } catch (error) {
+    if (!(error instanceof OpenCmsApiError) || error.status !== 401)
+      throw error;
+    await reauthenticate(config);
+    config = await readConfig();
+    return operation(config);
+  }
+}
 async function login() {
   const config = await readConfig();
   if (process.env.OPENCMS_CLERK_TOKEN) {
@@ -352,6 +405,18 @@ async function login() {
 }
 async function logout() {
   const config = await readConfig();
+  if (config.token?.startsWith("ocms_")) {
+    try {
+      const response = await fetch(`${apiUrlFor(config)}/api/cli/tokens/current`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${config.token}` }
+      });
+      if (!response.ok)
+        console.warn("OpenCMS: The remote CLI session could not be revoked.");
+    } catch {
+      console.warn("OpenCMS: The remote CLI session could not be revoked.");
+    }
+  }
   const { token: _token, ...withoutToken } = config;
   await writeConfig(withoutToken);
   console.log("Logged out of OpenCMS.");
@@ -430,6 +495,9 @@ async function createProject() {
   const name = await ask("Project name: ");
   if (!name)
     throw new Error("A project name is required.");
+  const destination = resolve(process.cwd(), slugify(name));
+  if (await fileExists(destination))
+    throw new Error(`Destination already exists: ${destination}`);
   let currentConfig = await readConfig();
   let client = sdk(currentConfig);
   let project;
@@ -443,12 +511,21 @@ async function createProject() {
     client = sdk(currentConfig);
     project = await client.projects.create({ name });
   }
-  const destination = resolve(process.cwd(), slugify(project.name));
-  await pullTemplate(destination);
-  const baseUrl = apiUrlFor(config);
-  await writeProjectEnv(destination, project, baseUrl);
-  await ensureCmsDirectory(destination, project, baseUrl);
-  await installDependencies(destination);
+  const baseUrl = apiUrlFor(currentConfig);
+  try {
+    await pullTemplate(destination);
+    await writeProjectEnv(destination, project, baseUrl);
+    await ensureCmsDirectory(destination, project, baseUrl);
+    await installDependencies(destination);
+  } catch (error) {
+    await rm(destination, { recursive: true, force: true });
+    try {
+      await client.projects.delete(project.id);
+    } catch {
+      console.error(`OpenCMS: Local setup failed and cloud rollback also failed. Project ID: ${project.id}`);
+    }
+    throw error;
+  }
   await writeConfig({ ...await readConfig(), projectId: project.id, apiUrl: baseUrl });
   console.log(`
 Created ${project.name}.`);
@@ -463,14 +540,8 @@ Next steps:
 async function runDev() {
   const config = await readConfig();
   await ensureToken(config);
-  try {
-    await syncLocalSchema(await projectIdFromEnv(), await readConfig());
-  } catch (error) {
-    if (!(error instanceof OpenCmsApiError) || error.status !== 401)
-      throw error;
-    await reauthenticate(await readConfig());
-    await syncLocalSchema(await projectIdFromEnv(), await readConfig());
-  }
+  const projectId = await projectIdFromEnv();
+  await withReauthentication((currentConfig) => syncLocalSchema(projectId, currentConfig));
   const manager = await packageManager(process.cwd());
   const script = await nextDevScript(process.cwd());
   const command = manager[0] === "npm" ? ["npm", "run", script] : manager[0] === "pnpm" ? ["pnpm", script] : manager[0] === "yarn" ? ["yarn", script] : ["bun", "run", script];
@@ -532,24 +603,20 @@ async function deploy() {
   const projectId = await projectIdFromEnv() ?? config.projectId;
   if (!projectId)
     throw new Error("No OpenCMS project is configured in this directory.");
-  let deployment;
-  try {
-    await syncLocalSchema(projectId, await readConfig());
-    deployment = await sdk(await readConfig()).deploy(projectId);
-  } catch (error) {
-    if (!(error instanceof OpenCmsApiError) || error.status !== 401)
-      throw error;
-    await reauthenticate(await readConfig());
-    await syncLocalSchema(projectId, await readConfig());
-    deployment = await sdk(await readConfig()).deploy(projectId);
-  }
-  console.log(`Deployed ${deployment.sourceEnvironment} content to ${deployment.targetEnvironment}.`);
+  await withReauthentication((currentConfig) => syncLocalSchema(projectId, currentConfig));
   if (process.env.VERCEL_TOKEN) {
     console.log("Deploying the application to Vercel…");
-    if (await runCommand("npx", ["vercel", "--prod", "--yes", "--token", process.env.VERCEL_TOKEN], { cwd: process.cwd(), inherit: true }) !== 0) {
+    const args = vercelDeploymentArgs({
+      apiUrl: apiUrlFor(await readConfig()),
+      projectId,
+      token: process.env.VERCEL_TOKEN
+    });
+    if (await runCommand("npx", args, { cwd: process.cwd(), inherit: true }) !== 0) {
       throw new Error("Vercel deployment failed.");
     }
   }
+  const deployment = await withReauthentication((currentConfig) => sdk(currentConfig).deploy(projectId));
+  console.log(`Deployed ${deployment.sourceEnvironment} content to ${deployment.targetEnvironment}.`);
 }
 function printHelp() {
   console.log(`OpenCMS CLI

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maker-or/opencms",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "The developer-first CLI for OpenCMS",
   "type": "module",
   "repository": {
@@ -28,6 +28,7 @@
     "build": "bun build src/index.ts --outfile dist/index.js --target=node --format=esm",
     "dev": "bun --watch src/index.ts",
     "start": "node dist/index.js",
+    "test": "bun run build && bun test",
     "typecheck": "tsc --noEmit",
     "prepack": "bun run build"
   },
@@ -35,6 +36,7 @@
     "node": ">=20"
   },
   "devDependencies": {
+    "@types/bun": "latest",
     "@types/node": "^22.13.10",
     "typescript": "^5.8.3"
   }