@ubox-tools/deploy-xperience 1.1.8 → 1.1.10

package/README.md

@@ -35,13 +35,29 @@ npx @ubox-tools/deploy-xperience [app1 app2 ...] [options]
 | `--show` | Show the browser window (default: headless) |
 | `--help` | Print usage and exit |
 
-Credentials can also be supplied via environment variables:
+Credentials are resolved in this order:
+
+1. CLI flags (`--email`, `--password`)
+2. Environment variables (`UBOX_EMAIL`, `UBOX_PASSWORD`)
+3. `ubox-credentials.json` in the project root
+4. Interactive prompt (if the terminal is interactive)
+
+**`ubox-credentials.json`** (place in the experience project root):
+
+```json
+{
+  "email": "me@example.com",
+  "password": "secret"
+}
+```
+
+**Environment variables:**
 
 ```
 UBOX_EMAIL=me@example.com UBOX_PASSWORD=secret npx @ubox-tools/deploy-xperience
 ```
 
-If either credential is missing and the terminal is interactive, the script prompts for them.
+If a credential is provided by a higher-priority source, the file value for that field is ignored.
 
 ## Examples
 

package/deploy.js

@@ -141,6 +141,23 @@ Examples:
 
 // ─── Credentials ──────────────────────────────────────────────────────────────
 
+function loadCredentialsFile() {
+  const filePath = path.join(process.cwd(), 'ubox-credentials.json');
+  try {
+    const raw = fs.readFileSync(filePath, 'utf8');
+    const data = JSON.parse(raw);
+    const email    = typeof data.email    === 'string' && data.email.trim();
+    const password = typeof data.password === 'string' && data.password.trim();
+    if (email && password) {
+      console.log('Using credentials from ubox-credentials.json');
+      return { email, password };
+    }
+  } catch (_) {
+    // File missing or invalid — continue with normal credential flow
+  }
+  return null;
+}
+
 async function promptCredentials(email, password) {
   if (email && password) return { email, password };
 
@@ -256,6 +273,16 @@ function generateProxy(appName) {
     }
 
     if (isHTML) {
+      // Asset path substitution for HTML src/href attributes
+      const assetInStringRe = /(['"])(?:\.\.\/)*assets\/([^'"]+)\1/g;
+      content = content.replace(assetInStringRe, (match, quote, assetFile) => {
+        const assetExt = path.extname(assetFile).slice(1).toLowerCase();
+        const type     = assetResourceType(assetExt);
+        const absPath  = path.join(ASSETS_DIR, assetFile);
+        if (fs.existsSync(absPath)) assets[assetFile] = { type, absPath };
+        return `"{resources:${type}/${assetFile}}"`;
+      });
+
       // Strip local <link> tags (keep CDN ones with https://)
       content = content.replace(/<link\b[^>]*\bhref=["'](?!https?:\/\/)[^"']*["'][^>]*\/?>/gi, '');
       // Strip local <script src> tags (keep CDN ones)
@@ -1080,7 +1107,15 @@ async function main() {
   if (noPlayer) console.log('Flags   : --noplayer (skip Ubox creation)');
   console.log('');
 
-  const { email, password } = await promptCredentials(emailArg, passwordArg);
+  let credEmail = emailArg, credPassword = passwordArg;
+  if (!credEmail || !credPassword) {
+    const fileCreds = loadCredentialsFile();
+    if (fileCreds) {
+      if (!credEmail)    credEmail    = fileCreds.email;
+      if (!credPassword) credPassword = fileCreds.password;
+    }
+  }
+  const { email, password } = await promptCredentials(credEmail, credPassword);
 
   const browser = await puppeteer.launch({
     headless: !show,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ubox-tools/deploy-xperience",
-  "version": "1.1.8",
+  "version": "1.1.10",
   "description": "Deploy a Ubox experience to studio.ubox.world",
   "bin": { "deploy-xperience": "./deploy.js" },
   "dependencies": { "puppeteer": "*" },