@oxprotocol/cli 0.1.0

package/LICENSE

@@ -0,0 +1,189 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of tracking or improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Support. While redistributing the Work or
+      Derivative Works thereof, You may accept and offer support, warranty,
+      indemnity, or other liability obligations consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or support.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2025 OXP contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied. See the License for the specific language governing permissions
+   and limitations under the License.

package/README.md

@@ -0,0 +1,73 @@
+# @oxprotocol/cli
+
+The official command-line tool for the [Open eXtensions Protocol](https://oxp.dev).
+
+## Install
+
+Pick whichever package manager you already have. The CLI ships as a single
+npm package — there is **no separate installer to download**.
+
+### One-shot (no install)
+
+```sh
+npx @oxprotocol/cli@latest create my-ext
+pnpm dlx @oxprotocol/cli create my-ext
+yarn dlx @oxprotocol/cli create my-ext
+```
+
+### Persistent install (recommended)
+
+```sh
+npm  i -g @oxprotocol/cli       # then: oxp <command>
+pnpm add -g @oxprotocol/cli
+yarn global add @oxprotocol/cli
+```
+
+After install, `oxp --help` lists every subcommand.
+
+### `npm create` shortcut
+
+For scaffolding only, the dedicated `create-oxp` wrapper plays nicely with
+the `npm create` / `pnpm create` convention:
+
+```sh
+npm  create oxp@latest my-ext
+pnpm create oxp my-ext
+yarn create oxp my-ext
+```
+
+## First run
+
+```sh
+oxp login            # email + password, in the terminal (Expo-style)
+oxp login --browser  # OR authorise via the web (OAuth device flow)
+
+oxp create my-ext    # scaffold (pick a template with -t)
+cd my-ext
+oxp dev              # watch + hot-reload against a local host
+oxp pack             # build a deterministic, signed .oxp bundle
+oxp publish          # upload to the registry
+```
+
+Tokens are stored at `~/.oxp/credentials` (mode 0600). The CLI sends them
+as `Authorization: Bearer <raw>`. Rotate any time with `oxp token rotate`.
+
+## Environment
+
+| Var            | Default                  | Purpose                       |
+| -------------- | ------------------------ | ----------------------------- |
+| `OXP_REGISTRY` | `http://localhost:3000`  | Registry base URL             |
+| `OXP_HOME`    | `~/.oxp`                 | Config + credentials directory |
+
+## Programmatic use
+
+Subcommand functions are also exported for wrapper packages:
+
+```ts
+import { create, pack, publish } from "@oxprotocol/cli";
+const code = await create(["my-ext", "-t", "hello-rust"]);
+```
+
+## License
+
+MIT

package/dist/cli.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+/**
+ * `oxp` — Open eXtensions Protocol command-line tool.
+ *
+ * Subcommands:
+ *   oxp create <name>       scaffold a new extension from the hello-world template
+ *   oxp pack [dir]          build a deterministic, signed .oxp bundle from the project
+ *   oxp login               store an API token under ~/.oxp/credentials
+ *   oxp publish [bundle]    POST a .oxp + signature to the registry
+ *   oxp keygen              show the local Ed25519 key id (creating one if needed)
+ *
+ * No external CLI library — keeps install lean.
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG"}

package/dist/cli.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+/**
+ * `oxp` — Open eXtensions Protocol command-line tool.
+ *
+ * Subcommands:
+ *   oxp create <name>       scaffold a new extension from the hello-world template
+ *   oxp pack [dir]          build a deterministic, signed .oxp bundle from the project
+ *   oxp login               store an API token under ~/.oxp/credentials
+ *   oxp publish [bundle]    POST a .oxp + signature to the registry
+ *   oxp keygen              show the local Ed25519 key id (creating one if needed)
+ *
+ * No external CLI library — keeps install lean.
+ */
+import { create } from "./commands/create.js";
+import { pack } from "./commands/pack.js";
+import { dev } from "./commands/dev.js";
+import { login } from "./commands/login.js";
+import { logout } from "./commands/logout.js";
+import { whoami } from "./commands/whoami.js";
+import { publish } from "./commands/publish.js";
+import { install } from "./commands/install.js";
+import { installUrl } from "./commands/install-url.js";
+import { keygen } from "./commands/keygen.js";
+import { token } from "./commands/token.js";
+import { protocolRegister } from "./commands/protocol-register.js";
+import { doctor } from "./commands/doctor.js";
+const VERSION = "0.1.0";
+const HELP = `oxp ${VERSION} — Open eXtensions Protocol
+
+Usage:
+  oxp create [-t TPL] <name> Scaffold a new extension in ./<name>
+                             Templates: hello-html (default), hello-code, hello-tree
+  oxp dev [dir]              Watch + repack + serve over ws/http (default port 7373)
+  oxp pack [dir]             Build dist/<slug>-<version>.oxp from <dir> (default: cwd)
+  oxp login                  Sign in (email + password in terminal)
+  oxp login --browser        Sign in via browser (OAuth device flow)
+  oxp logout [--local-only]  Revoke local credentials (and the server token by default)
+  oxp whoami [--json]        Show the identity behind the local credentials
+  oxp token rotate           Mint a successor token; old token gets a 5-min grace
+  oxp publish [bundle]       Upload a .oxp + signature to the registry
+  oxp publish --dry-run      Validate the bundle but do not POST
+  oxp install <id> [-y]      Install @publisher/slug from the registry into
+                             $OXP_HOME/host-store/, auto-detect IDEs, and
+                             keep their host adapters in sync.
+  oxp install --from <url>   Install from an oxp:// deep link
+  oxp install-url <wasm-url> Install a raw .wasm component (https/file/http)
+                             into the shared host-store. Both VS Code and
+                             JetBrains hosts pick it up automatically.
+  oxp install-url --list     List previously URL-installed extensions
+  oxp protocol-register      Register the oxp:// URL scheme on this machine
+  oxp doctor [--json]        Inspect this machine and report what OXP can see
+  oxp keygen                 Print the local Ed25519 publisher key id
+  oxp help                   Show this message
+  oxp version                Print version
+
+Environment:
+  OXP_REGISTRY               Registry base URL (default http://localhost:3000)
+  OXP_HOME                   Config dir (default ~/.oxp)
+`;
+async function main(argv) {
+    const [cmd, ...rest] = argv;
+    switch (cmd) {
+        case undefined:
+        case "help":
+        case "-h":
+        case "--help":
+            process.stdout.write(HELP);
+            return 0;
+        case "version":
+        case "-v":
+        case "--version":
+            process.stdout.write(VERSION + "\n");
+            return 0;
+        case "create":
+            return create(rest);
+        case "dev":
+            return dev(rest);
+        case "pack":
+            return pack(rest);
+        case "login":
+            return login(rest);
+        case "logout":
+            return logout(rest);
+        case "whoami":
+            return whoami(rest);
+        case "token":
+            return token(rest);
+        case "publish":
+            return publish(rest);
+        case "install":
+            return install(rest);
+        case "install-url":
+            return installUrl(rest);
+        case "protocol-register":
+            return protocolRegister(rest);
+        case "doctor":
+            return doctor(rest);
+        case "keygen":
+            return keygen(rest);
+        default:
+            process.stderr.write(`oxp: unknown command '${cmd}'\n\n` + HELP);
+            return 2;
+    }
+}
+main(process.argv.slice(2)).then((code) => process.exit(code), (err) => {
+    process.stderr.write(`oxp: ${err.message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,IAAI,GAAG,OAAO,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+B1B,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,IAAI,CAAC;QACV,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC;QACX,KAAK,SAAS,CAAC;QACf,KAAK,IAAI,CAAC;QACV,KAAK,WAAW;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;YACrC,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,KAAK;YACR,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,aAAa;YAChB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,mBAAmB;YACtB,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,GAAG,EAAE,EAAE;IACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAS,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF,CAAC"}

package/dist/commands/create.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `oxp create [--template <name>] <project>` — copy a template into ./<project>,
+ * substituting placeholders. Default template: hello-html.
+ */
+export declare function create(args: string[]): Promise<number>;
+//# sourceMappingURL=create.d.ts.map

package/dist/commands/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AA0BA;;;GAGG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA0G5D"}

package/dist/commands/create.js

@@ -0,0 +1,212 @@
+import { promises as fs } from "node:fs";
+import { join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { worldSha256 } from "@oxprotocol/wit";
+import { fail, info, readCredentials, registryUrl } from "../util.js";
+/**
+ * Templates shipped with the CLI. Add more by dropping a directory in
+ *   packages/cli/templates/<name>/
+ * with placeholder substitutions:
+ *   __PUBLISHER__         npm-style scope without the leading @
+ *   __SLUG__              kebab-case project slug
+ *   __SLUG_UNDERSCORED__  same with - → _ (Rust crate names)
+ *   __DISPLAY_NAME__      title-cased name for UIs
+ *   __WIT_SHA__           sha256 of the canonical oxp:extension WIT world
+ *                         this CLI was built against (component-v1 only)
+ */
+const TEMPLATES = [
+    "hello-html",
+    "hello-code",
+    "hello-tree",
+    "hello-rust",
+];
+const DEFAULT_TEMPLATE = "hello-html";
+/**
+ * `oxp create [--template <name>] <project>` — copy a template into ./<project>,
+ * substituting placeholders. Default template: hello-html.
+ */
+export async function create(args) {
+    let template = DEFAULT_TEMPLATE;
+    const positional = [];
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === "--template" || a === "-t") {
+            const v = args[++i];
+            if (!v)
+                fail("usage: oxp create --template <name> <project>");
+            assertTemplate(v);
+            template = v;
+        }
+        else if (a.startsWith("--template=")) {
+            const v = a.slice("--template=".length);
+            assertTemplate(v);
+            template = v;
+        }
+        else if (a === "--list-templates") {
+            process.stdout.write(TEMPLATES.join("\n") + "\n");
+            return 0;
+        }
+        else {
+            positional.push(a);
+        }
+    }
+    const name = positional[0];
+    if (!name)
+        fail("usage: oxp create [--template <name>] <project>\n" +
+            `  templates: ${TEMPLATES.join(", ")}`);
+    const slug = name.toLowerCase();
+    if (!/^[a-z0-9-]+$/.test(slug)) {
+        fail(`'${name}' is not a valid slug (lowercase letters, digits, dashes only)`);
+    }
+    const dest = resolve(process.cwd(), name);
+    try {
+        await fs.access(dest);
+        fail(`destination '${name}' already exists`);
+    }
+    catch {
+        // good
+    }
+    const here = fileURLToPath(import.meta.url);
+    const templateDir = await locateTemplate(here, template);
+    if (!templateDir)
+        fail(`could not find template '${template}'`);
+    const publisher = await resolvePublisher();
+    const displayName = name
+        .split(/[-_\s]+/)
+        .filter(Boolean)
+        .map((w) => w[0].toUpperCase() + w.slice(1))
+        .join(" ");
+    // Rust crate / wasm artefact names cannot contain dashes.
+    const slugUnderscored = slug.replace(/-/g, "_");
+    // Only computed for component-v1 templates that ship `wit/`. Reading
+    // the canonical world from disk is cheap (~5 KB), so unconditional.
+    const witSha = worldSha256();
+    await copyTree(templateDir, dest, (txt) => txt
+        .replaceAll("__PUBLISHER__", publisher)
+        .replaceAll("__SLUG_UNDERSCORED__", slugUnderscored)
+        .replaceAll("__SLUG__", slug)
+        .replaceAll("__DISPLAY_NAME__", displayName)
+        .replaceAll("__WIT_SHA__", witSha));
+    info(`✓ created ${name}/ from template '${template}'`);
+    info(`  publisher: @${publisher}`);
+    info(`  slug:      ${slug}`);
+    info("");
+    if (template === "hello-rust") {
+        info(`Next steps:`);
+        info(`  cd ${name}`);
+        info(`  rustup target add wasm32-wasip2                                  # one-time`);
+        info(`  oxp pack                                                         # builds + packs`);
+        info(`  oxp publish                                                      # ship it`);
+    }
+    else if (template === "hello-code") {
+        info(`Next steps:`);
+        info(`  cd ${name}`);
+        info(`  pnpm install`);
+        info(`  oxp dev                                                          # live reload in IDE`);
+        info(`  oxp pack && oxp publish                                          # ship it`);
+    }
+    else {
+        info(`Next steps:`);
+        info(`  cd ${name}`);
+        info(`  oxp dev                                                          # live reload in IDE`);
+        info(`  oxp pack && oxp publish                                          # ship it`);
+    }
+    return 0;
+}
+/**
+ * Resolve the publisher handle to use for the new project.
+ *
+ * Priority:
+ *  1. Logged-in registry handle (from `oxp whoami`)
+ *  2. System username ($USER / $USERNAME), normalised to [a-z0-9-]
+ *
+ * Network call is best-effort with a 3 s timeout — if anything fails we
+ * fall back silently so `oxp create` still works offline.
+ */
+async function resolvePublisher() {
+    const fallback = (process.env.USER ?? process.env.USERNAME ?? "you")
+        .toLowerCase()
+        .replace(/[^a-z0-9-]/g, "-");
+    const token = await readCredentials();
+    if (!token)
+        return fallback;
+    try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 3_000);
+        const res = await fetch(`${registryUrl()}/api/v1/auth/whoami`, {
+            headers: { authorization: `Bearer ${token}` },
+            signal: controller.signal,
+        }).finally(() => clearTimeout(timer));
+        if (!res.ok)
+            return fallback;
+        const body = (await res.json());
+        if (body.ok && body.handle)
+            return body.handle;
+    }
+    catch {
+        // offline or timeout — fall back without noise
+    }
+    return fallback;
+}
+function assertTemplate(v) {
+    if (!TEMPLATES.includes(v)) {
+        fail(`unknown template '${v}'. available: ${TEMPLATES.join(", ")}`);
+    }
+}
+async function locateTemplate(fromFile, template) {
+    let dir = fromFile;
+    for (let i = 0; i < 8; i++) {
+        dir = resolve(dir, "..");
+        const candidates = [
+            join(dir, "templates", template),
+            join(dir, "packages/cli/templates", template),
+        ];
+        if (template === "hello-html") {
+            candidates.push(join(dir, "examples/hello-world/template"));
+        }
+        for (const candidate of candidates) {
+            try {
+                await fs.access(join(candidate, "oxp.json"));
+                return candidate;
+            }
+            catch {
+                // keep walking
+            }
+        }
+    }
+    return null;
+}
+const TEXT_EXT = new Set([
+    ".json",
+    ".html",
+    ".md",
+    ".txt",
+    ".js",
+    ".ts",
+    ".css",
+    ".toml",
+    ".rs",
+    ".wit",
+    ".gitignore",
+]);
+async function copyTree(src, dest, transform) {
+    await fs.mkdir(dest, { recursive: true });
+    for (const entry of await fs.readdir(src, { withFileTypes: true })) {
+        const sp = join(src, entry.name);
+        const dp = join(dest, entry.name);
+        if (entry.isDirectory()) {
+            await copyTree(sp, dp, transform);
+        }
+        else if (entry.isFile()) {
+            const ext = entry.name.slice(entry.name.lastIndexOf("."));
+            if (TEXT_EXT.has(ext)) {
+                const txt = await fs.readFile(sp, "utf8");
+                await fs.writeFile(dp, transform(txt));
+            }
+            else {
+                await fs.copyFile(sp, dp);
+            }
+        }
+    }
+}
+//# sourceMappingURL=create.js.map

package/dist/commands/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,MAAM,SAAS,GAAG;IAChB,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,YAAY;CACJ,CAAC;AAEX,MAAM,gBAAgB,GAAiB,YAAY,CAAC;AAEpD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,IAAI,QAAQ,GAAiB,gBAAgB,CAAC;IAC9C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC;gBAAE,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAC9D,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACxC,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC;QACX,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI;QACP,IAAI,CACF,mDAAmD;YACjD,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzC,CAAC;IAEJ,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,IAAI,CACF,IAAI,IAAI,gEAAgE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW;QAAE,IAAI,CAAC,4BAA4B,QAAQ,GAAG,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI;SACrB,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC5C,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,0DAA0D;IAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChD,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAE7B,MAAM,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACxC,GAAG;SACA,UAAU,CAAC,eAAe,EAAE,SAAS,CAAC;SACtC,UAAU,CAAC,sBAAsB,EAAE,eAAe,CAAC;SACnD,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC;SAC5B,UAAU,CAAC,kBAAkB,EAAE,WAAW,CAAC;SAC3C,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,CACrC,CAAC;IAEF,IAAI,CAAC,aAAa,IAAI,oBAAoB,QAAQ,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrB,IAAI,CACF,+EAA+E,CAChF,CAAC;QACF,IAAI,CACF,qFAAqF,CACtF,CAAC;QACF,IAAI,CACF,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACvB,IAAI,CACF,yFAAyF,CAC1F,CAAC;QACF,IAAI,CACF,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,aAAa,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrB,IAAI,CACF,yFAAyF,CAC1F,CAAC;QACF,IAAI,CACF,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,gBAAgB;IAC7B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC;SACjE,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,EAAE,qBAAqB,EAAE;YAC7D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;YAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;QAC3E,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAE,SAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,QAAgB;IAEhB,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC;YAChC,IAAI,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,CAAC;SAC9C,CAAC;QACF,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC7C,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,YAAY;CACb,CAAC,CAAC;AAEH,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,IAAY,EACZ,SAAgC;IAEhC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/dev.d.ts

@@ -0,0 +1,2 @@
+export declare function dev(args: string[]): Promise<number>;
+//# sourceMappingURL=dev.d.ts.map

package/dist/commands/dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAoCA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoJzD"}