bod-cli 0.9.2 → 0.10.2

package/.cursor/skills/using-bod-cli/SKILL.md

@@ -124,6 +124,16 @@ Open an app in the default browser. Resolves the URL from the app's domain.
 bod open my-api               # opens https://my-api.bodify.example.com
 ```
 
+### `bod host <path> [--slug <s>] [--app <appId>]`
+Publish a file or folder to a public CDN URL (`https://serve.bod.ee/s/<slug>/…`). Handles create → upload → finalize and prints the live URL. Ephemeral (48h) unless `--app` links it to an app (then persistent). See the **bod-serve** skill for the full flow.
+
+```bash
+bod host ./dist                    # a static site → live URL
+bod host ./clip.mp3                # a single file (video/audio/pdf/image)
+bod host ./dist --slug my-site     # reuse/update an existing slug
+bod host ./assets --app my-api     # persistent app assets
+```
+
 ### `bod env list|set|unset <app>`
 Manage environment variables.
 

package/CLAUDE.md

@@ -33,7 +33,7 @@ src/
     ├── rollback.ts     # bod rollback [app]
     ├── apps.ts         # bod apps list|status
     ├── logs.ts         # bod logs <app> [-f]
-    ├── env.ts          # bod env list|set|unset (set supports -f .env)
+    ├── env.ts          # bod env list|set|unset; scoped by <app>/--global/--group (+ --env); set supports -f .env
     ├── open.ts         # bod open <app>
     ├── add.ts          # bod add <pkg>
     └── remove.ts       # bod remove <pkg>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bod-cli",
-  "version": "0.9.2",
+  "version": "0.10.2",
   "type": "module",
   "bin": {
     "bod": "./src/cli.ts"

package/src/cli.ts

@@ -13,6 +13,7 @@ import addCmd from './commands/add'
 import removeCmd from './commands/remove'
 import openCmd from './commands/open'
 import serveCmd from './commands/serve'
+import hostCmd from './commands/host'
 import sshCmd from './commands/ssh'
 import publishCmd from './commands/publish'
 import dbCmd from './commands/db'
@@ -46,6 +47,7 @@ const subCommands = {
   remove: removeCmd,
   open: openCmd,
   serve: serveCmd,
+  host: hostCmd,
   ssh: sshCmd,
   publish: publishCmd,
   db: dbCmd,
@@ -108,7 +110,8 @@ const main = defineCommand({
         // Commands with subcommands need a default, commands with required positionals need prompting
         const interactiveArgs = await getInteractiveArgs(command)
         if (interactiveArgs === null) continue // user cancelled
-        await runCommand(subCommands[command as keyof typeof subCommands], { rawArgs: interactiveArgs })
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- citty's CommandDef union isn't assignable to itself across a heterogeneous subCommands map
+        await runCommand(subCommands[command as keyof typeof subCommands] as any, { rawArgs: interactiveArgs })
       } catch (e) {
         if ((e as Error).name === 'ExitPromptError') continue
         console.error(`Error: ${(e as Error).message}`)

package/src/commands/deploy.ts

@@ -138,13 +138,60 @@ function branchToSubdomain(branch: string, domain: string, productionBranch: str
   return `${sanitized}--${domain}`
 }
 
+/**
+ * A transport-level failure (socket reset, DNS blip, 5xx/429 from the edge) as opposed to a
+ * definitive answer from the server. `BodClient.request` throws `METHOD /path → <status>: body`
+ * for HTTP errors and lets fetch's own errors (`socket connection was closed unexpectedly`, …)
+ * propagate as-is — so anything without a 4xx status marker is retryable.
+ */
+function isTransientError(err: unknown): boolean {
+  const msg = err instanceof Error ? err.message : String(err)
+  const status = msg.match(/→ (\d{3}):/)?.[1]
+  if (!status) return true // fetch threw — never reached the server, or the reply was cut off
+  return status === '408' || status === '429' || status.startsWith('5')
+}
+
+/**
+ * The poll loop only OBSERVES a deployment the server already accepted — a dead poll socket says
+ * nothing about whether the deploy succeeded. So transient reads are retried instead of aborting
+ * the command. Deliberately NOT in `BodClient`: the deploy upload/POST are non-idempotent and must
+ * not be blindly replayed.
+ */
+async function getWithRetry<T>(client: BodClient, path: string, attempts = 4): Promise<T> {
+  let lastErr: unknown
+  for (let i = 0; i < attempts; i++) {
+    try {
+      return await client.get<T>(path)
+    } catch (err) {
+      lastErr = err
+      if (!isTransientError(err) || i === attempts - 1) throw err
+      const backoff = 1000 * 2 ** i // 1s, 2s, 4s
+      console.log(chalk.dim(`  (poll transport hiccup: ${err instanceof Error ? err.message : err} — retrying in ${backoff / 1000}s)`))
+      await Bun.sleep(backoff)
+    }
+  }
+  throw lastErr
+}
+
 async function pollDeploy(client: BodClient, appId: string, since: number, instanceCaps?: { baseDomain?: string | null }, localConfig?: { localDomain?: string; caddyPort?: number } | null) {
   console.log(chalk.dim('Waiting for deployment...'))
   let lastStatus = ''
   let lastLogTs = since
   for (let i = 0; i < 120; i++) {
     await Bun.sleep(2000)
-    const detail = await client.get<any>(`/apps/${appId}`)
+    let detail: any
+    try {
+      detail = await getWithRetry<any>(client, `/apps/${appId}`)
+    } catch (err) {
+      if (!isTransientError(err)) throw err
+      // The deploy was accepted; we simply lost the ability to watch it. Failing here would report
+      // a healthy deploy as broken — and, worse, make a genuinely broken one look identical.
+      // Verify the deployed app itself (smoke test / `bod apps status`) — that is the real gate.
+      console.log(chalk.yellow(`⚠ Lost contact with the API while watching the deployment (${err instanceof Error ? err.message : err}).`))
+      console.log(chalk.yellow('  The deployment was accepted and is still running server-side — this is a POLL failure, not a deploy failure.'))
+      console.log(chalk.yellow('  Verify with "bod apps status" or by hitting the app.'))
+      return
+    }
     const deps = detail.deployments ?? []
     const latest = deps.find((d: any) => (d.createdAt ?? 0) >= since)
     if (!latest) continue

package/src/commands/env.ts

@@ -78,7 +78,7 @@ function quoteDotEnvValue(value: string): string {
 }
 
 const listCmd = defineCommand({
-  meta: { name: 'list', description: 'List env vars. Per-app: resolved KEY=VALUE. --global: all variables with scopes (masked).' },
+  meta: { name: 'list', description: 'List env vars. Per-app: resolved KEY=VALUE. --global/--group: variables in that scope (masked).' },
   args: {
     app: { type: 'positional', description: 'App name (or reads from bodify.yaml)', required: false },
     env: { type: 'string', alias: 'e', description: 'Environment (e.g. prod)' },
@@ -122,7 +122,7 @@ const listCmd = defineCommand({
 })
 
 const setCmd = defineCommand({
-  meta: { name: 'set', description: 'Set a secret (KEY=VALUE or -f .env). Scoped to <app>, --global, and/or --env.' },
+  meta: { name: 'set', description: 'Set a secret (KEY=VALUE or -f .env). Scoped to <app>, --global, --group, and/or --env.' },
   args: {
     app: { type: 'positional', description: 'App name (or reads from bodify.yaml; omit with --global)', required: false },
     pair: { type: 'positional', description: 'KEY=VALUE', required: false },

package/src/commands/host.ts

@@ -0,0 +1,93 @@
+import { defineCommand } from 'citty'
+import chalk from 'chalk'
+import { statSync, readdirSync, readFileSync, existsSync } from 'fs'
+import { join, relative, basename, extname } from 'path'
+import { loadConfig, getResolvedInstance } from '../config'
+
+const MIME: Record<string, string> = {
+  '.html': 'text/html; charset=utf-8', '.htm': 'text/html; charset=utf-8',
+  '.css': 'text/css; charset=utf-8', '.js': 'text/javascript; charset=utf-8',
+  '.mjs': 'text/javascript; charset=utf-8', '.json': 'application/json',
+  '.map': 'application/json', '.xml': 'application/xml', '.txt': 'text/plain; charset=utf-8',
+  '.svg': 'image/svg+xml', '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg',
+  '.gif': 'image/gif', '.webp': 'image/webp', '.avif': 'image/avif', '.ico': 'image/x-icon',
+  '.mp4': 'video/mp4', '.webm': 'video/webm', '.mov': 'video/quicktime',
+  '.mp3': 'audio/mpeg', '.wav': 'audio/wav', '.ogg': 'audio/ogg', '.m4a': 'audio/mp4',
+  '.pdf': 'application/pdf', '.wasm': 'application/wasm',
+  '.woff': 'font/woff', '.woff2': 'font/woff2', '.ttf': 'font/ttf', '.otf': 'font/otf',
+}
+function mimeFor(path: string): string { return MIME[extname(path).toLowerCase()] ?? 'application/octet-stream' }
+
+// Collect { rel, abs } for a file or (recursively) a directory. Skips dotfiles + node_modules.
+function collect(root: string): Array<{ rel: string; abs: string }> {
+  const st = statSync(root)
+  if (st.isFile()) return [{ rel: basename(root), abs: root }]
+  const out: Array<{ rel: string; abs: string }> = []
+  const walk = (dir: string) => {
+    for (const name of readdirSync(dir)) {
+      if (name.startsWith('.') || name === 'node_modules') continue
+      const abs = join(dir, name)
+      const s = statSync(abs)
+      if (s.isDirectory()) walk(abs)
+      else out.push({ rel: relative(root, abs).split('\\').join('/'), abs })
+    }
+  }
+  walk(root)
+  return out
+}
+
+export default defineCommand({
+  meta: { name: 'host', description: 'Publish a file or folder to the web (serve.bod.ee) and get a CDN URL' },
+  args: {
+    path: { type: 'positional', description: 'File or directory to publish', required: true },
+    slug: { type: 'string', description: 'Reuse/update an existing site slug' },
+    app: { type: 'string', description: 'Link to a Bodify app id → persistent (else ephemeral, 48h)' },
+  },
+  async run({ args }) {
+    const root = args.path
+    if (!existsSync(root)) { console.error(chalk.red(`Path not found: ${root}`)); process.exit(1) }
+
+    const files = collect(root)
+    if (!files.length) { console.error(chalk.red('No files to publish')); process.exit(1) }
+
+    const { url, apiKey, name: instanceName } = getResolvedInstance(loadConfig())
+    const auth: Record<string, string> = apiKey ? { Authorization: `Bearer ${apiKey}` } : {}
+    const totalBytes = files.reduce((n, f) => n + statSync(f.abs).size, 0)
+    console.log(chalk.dim(`Publishing ${files.length} file(s), ${(totalBytes / 1024).toFixed(1)} KB to ${instanceName}...`))
+
+    // 1. Create the site + presigned uploads.
+    const manifest = files.map(f => ({ path: f.rel, contentType: mimeFor(f.rel), size: statSync(f.abs).size }))
+    const createRes = await fetch(`${url}/api/v1/publish`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', ...auth },
+      body: JSON.stringify({ files: manifest, slug: args.slug, appId: args.app }),
+    })
+    if (!createRes.ok) { console.error(chalk.red(`Publish failed: ${createRes.status} ${await createRes.text()}`)); process.exit(1) }
+    const site = await createRes.json() as {
+      slug: string; siteUrl: string; expiresAt?: number
+      upload: { uploads: Array<{ path: string; url: string | null; key: string }>; finalizeUrl: string }
+    }
+
+    // 2. Upload each file — presigned PUT (R2) or direct-to-agent PUT (local provider).
+    const byPath = new Map(files.map(f => [f.rel, f.abs]))
+    for (const u of site.upload.uploads) {
+      const abs = byPath.get(u.path)!
+      const data = new Uint8Array(readFileSync(abs))
+      const ct = mimeFor(u.path)
+      const target = u.url ?? `${url}/api/v1/upload/${site.slug}/${u.path.split('/').map(encodeURIComponent).join('/')}`
+      const putRes = await fetch(target, {
+        method: 'PUT',
+        headers: { 'Content-Type': ct, ...(u.url ? {} : auth) },
+        body: data,
+      })
+      if (!putRes.ok) { console.error(chalk.red(`Upload failed for ${u.path}: ${putRes.status} ${await putRes.text()}`)); process.exit(1) }
+    }
+
+    // 3. Finalize.
+    const finRes = await fetch(`${url}${site.upload.finalizeUrl}`, { method: 'POST', headers: { ...auth } })
+    if (!finRes.ok) { console.error(chalk.red(`Finalize failed: ${finRes.status} ${await finRes.text()}`)); process.exit(1) }
+
+    console.log(chalk.green(`✓ Live: ${site.siteUrl}`))
+    console.log(chalk.dim(`  slug: ${site.slug}${args.app ? `  (persistent, app ${args.app})` : site.expiresAt ? `  (expires ${new Date(site.expiresAt).toISOString()})` : ''}`))
+  },
+})