@onexapis/cli 1.1.17 → 1.1.19

package/README.md

@@ -19,24 +19,33 @@ Requires Node.js >= 18.
 ## Quick Start
 
 ```bash
-# 1. Configure credentials (one-time setup)
-onexthm config
+# 1. Login to OneX platform
+onexthm login
 
 # 2. Create a new theme project
 onexthm init my-theme
+cd my-theme
 
-# Or clone an existing theme
-onexthm clone simple
+# 3. Develop with live preview
+onexthm dev
+
+# 4. Publish to marketplace (authenticated, secure)
+onexthm publish
 ```
 
-```bash
-# Other useful commands
-onexthm list                              # List themes, sections, blocks
-onexthm create:section hero --theme simple  # Scaffold a section
-onexthm validate --theme simple           # Validate theme structure
-onexthm build --theme simple              # Build a theme
-onexthm upload --theme simple             # Upload to S3
-onexthm clone simple                      # Clone a theme from S3
+## Theme Developer Flow
+
+```
+onexthm login                  # Authenticate with OneX platform
+onexthm init my-store          # Scaffold theme from template (7 sections, 3 pages)
+cd my-store
+onexthm dev                    # Live preview at localhost:3456
+onexthm create:section pricing # Add new section
+onexthm validate               # Check structure
+onexthm build                  # Compile for production
+onexthm publish                # Register → build → upload → scan → publish
+onexthm whoami                 # Check logged-in status
+onexthm logout                 # End session
 ```
 
 ## Commands
@@ -212,15 +221,72 @@ onexthm clone simple -n my-store
 onexthm clone simple -v 1.0.0 -o ./my-clone --no-install
 ```
 
-### `onexthm config`
+### `onexthm login`
 
-Interactive setup for CLI credentials. Saves configuration to `~/.onexthm/.env` so S3 commands (`clone`, `upload`, `download`) work from any directory.
+Authenticate with the OneX platform. Stores encrypted JWT token in `~/.onexthm/auth.json`.
 
 ```bash
-onexthm config
+onexthm login
+# Email: dev@example.com
+# Password: ********
+# ✓ Logged in! Token stored securely.
+```
+
+Required before `onexthm publish`. Token auto-refreshes on expiry.
+
+### `onexthm logout`
+
+Clear stored authentication tokens.
+
+```bash
+onexthm logout
 ```
 
-Prompts for:
+### `onexthm whoami`
+
+Show current logged-in developer info.
+
+```bash
+onexthm whoami
+# Email: dev@example.com
+# Company: 9e61d187-...
+# Status: ✓ Active
+```
+
+### `onexthm publish`
+
+Build, scan, and publish theme to the marketplace. Requires login.
+
+```bash
+onexthm publish
+# ✓ Logged in as dev@example.com
+# Publishing my-store v1.0.0...
+#   1. Registering theme...     ✓
+#   2. Building...              ✓ (54 KB)
+#   3. Getting upload URL...    ✓
+#   4. Uploading bundle...      ✓
+#   5. Uploading source...      ✓
+#   6. Scanning & publishing... ✓ Published!
+```
+
+| Option               | Description          |
+| -------------------- | -------------------- |
+| `-t, --theme <path>` | Theme directory path |
+
+Security features:
+
+- **Ownership check** — only theme owner can publish updates
+- **Presigned URLs** — no AWS credentials needed
+- **Security scan** — blocks eval(), XSS, crypto mining, data exfiltration
+- **Audit logging** — every publish is logged with developer identity
+
+### `onexthm config` (Legacy)
+
+Interactive setup for S3 credentials. **Not needed for `onexthm publish`** — use `onexthm login` instead.
+
+```bash
+onexthm config
+```
 
 | Key                      | Description           | Required |
 | ------------------------ | --------------------- | -------- |