carboncanvas-cli 0.1.0

package/dist/upload.js

@@ -0,0 +1,83 @@
+// Upload half of the publish contract. THE SHAPE HERE IS FIXED — it is the
+// source of truth for the server (see CONTRACT.md), the way networkClient.ts is
+// for comments. Do not change one side without the other.
+//
+//   POST {serviceUrl}/api/publish
+//     Authorization: Bearer <token>
+//     multipart/form-data:
+//       bundle : .tar.gz of the dist dir (filename bundle.tar.gz)
+//       meta   : JSON string (PublishMeta)
+//
+//   200 → PublishResult
+//   401 → invalid/expired token
+//   402 → { error, message }  publish capability not entitled
+//   400 → { error, message }  validation (size cap / bad bundle)
+//   413 → too large
+//   503 → { error, message }  publish/provider not configured server-side
+import { promises as fs } from 'node:fs';
+export class PublishError extends Error {
+    status;
+    // A secondary line (e.g. upgrade hint) shown under the main message.
+    hint;
+    constructor(message, status, hint) {
+        super(message);
+        this.name = 'PublishError';
+        this.status = status;
+        this.hint = hint;
+    }
+}
+async function readErrorBody(res) {
+    try {
+        return (await res.json());
+    }
+    catch {
+        return {};
+    }
+}
+// Build the multipart form for the request. Exposed for tests.
+export async function buildPublishForm(tarPath, meta) {
+    const buf = await fs.readFile(tarPath);
+    const form = new FormData();
+    // Uint8Array view keeps types happy across Node's Blob signature.
+    const blob = new Blob([new Uint8Array(buf)], { type: 'application/gzip' });
+    form.append('bundle', blob, 'bundle.tar.gz');
+    form.append('meta', JSON.stringify(meta));
+    return form;
+}
+export async function publishBundle(serviceUrl, token, tarPath, meta, fetchImpl = fetch) {
+    const base = serviceUrl.replace(/\/+$/, '');
+    const form = await buildPublishForm(tarPath, meta);
+    let res;
+    try {
+        res = await fetchImpl(`${base}/api/publish`, {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${token}` },
+            body: form,
+        });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new PublishError(`Could not reach the Carbon Canvas backend at ${base} (${detail}). ` +
+            'Check your network and --service-url, then retry.');
+    }
+    if (res.status === 200) {
+        return (await res.json());
+    }
+    const body = await readErrorBody(res);
+    switch (res.status) {
+        case 401:
+            throw new PublishError('Your token is invalid or expired. Run `carboncanvas login` to paste a fresh token.', 401);
+        case 402:
+            throw new PublishError(body.message ?? 'Publishing is not included in your current plan.', 402, 'Upgrade your plan on the dashboard to enable `publish`.');
+        case 400:
+            throw new PublishError(body.message ?? 'The server rejected the bundle (validation failed).', 400);
+        case 413:
+            throw new PublishError(body.message ?? 'The bundle is too large for the server to accept.', 413);
+        case 503:
+            throw new PublishError(body.message ??
+                'Publishing is not configured on this server (no CDN provider). Contact the operator.', 503);
+        default:
+            throw new PublishError(body.message ?? `Publish failed with HTTP ${res.status}.`, res.status);
+    }
+}
+//# sourceMappingURL=upload.js.map

package/dist/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gFAAgF;AAChF,0DAA0D;AAC1D,EAAE;AACF,kCAAkC;AAClC,oCAAoC;AACpC,2BAA2B;AAC3B,kEAAkE;AAClE,2CAA2C;AAC3C,EAAE;AACF,wBAAwB;AACxB,gCAAgC;AAChC,8DAA8D;AAC9D,iEAAiE;AACjE,oBAAoB;AACpB,0EAA0E;AAE1E,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAqBzC,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,MAAM,CAAU;IAChB,qEAAqE;IACrE,IAAI,CAAU;IACd,YAAY,OAAe,EAAE,MAAe,EAAE,IAAa;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAQD,KAAK,UAAU,aAAa,CAAC,GAAa;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,IAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,kEAAkE;IAClE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,KAAa,EACb,OAAe,EACf,IAAiB,EACjB,YAAuB,KAAK;IAE5B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEnD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,cAAc,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;YAC7C,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,YAAY,CACpB,gDAAgD,IAAI,KAAK,MAAM,KAAK;YAClE,mDAAmD,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,GAAG;YACN,MAAM,IAAI,YAAY,CACpB,oFAAoF,EACpF,GAAG,CACJ,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,OAAO,IAAI,kDAAkD,EAClE,GAAG,EACH,yDAAyD,CAC1D,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,OAAO,IAAI,qDAAqD,EACrE,GAAG,CACJ,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,OAAO,IAAI,mDAAmD,EACnE,GAAG,CACJ,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,OAAO;gBACV,sFAAsF,EACxF,GAAG,CACJ,CAAC;QACJ;YACE,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,OAAO,IAAI,4BAA4B,GAAG,CAAC,MAAM,GAAG,EACzD,GAAG,CAAC,MAAM,CACX,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/verify.js

@@ -0,0 +1,25 @@
+// Token verification against the backend.
+//
+// A creator API token is valid iff `GET /api/entitlements` with
+// `Authorization: Bearer <token>` returns 200 (the endpoint is session-gated —
+// server/src/routes/entitlements.ts — so 401 means the token is not a live
+// session). We inject `fetchImpl` for testability; it defaults to global fetch.
+export async function verifyToken(serviceUrl, token, fetchImpl = fetch) {
+    const base = serviceUrl.replace(/\/+$/, '');
+    const res = await fetchImpl(`${base}/api/entitlements`, {
+        method: 'GET',
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (res.status === 200) {
+        let entitlement;
+        try {
+            entitlement = await res.json();
+        }
+        catch {
+            entitlement = undefined;
+        }
+        return { ok: true, status: 200, entitlement };
+    }
+    return { ok: false, status: res.status };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,gEAAgE;AAChE,+EAA+E;AAC/E,2EAA2E;AAC3E,gFAAgF;AAWhF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,KAAa,EACb,YAAuB,KAAK;IAE5B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,mBAAmB,EAAE;QACtD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,SAAS,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC"}

package/dist/walk.js

@@ -0,0 +1,44 @@
+// Recursive directory walk returning relative file paths + sizes. Shared by the
+// packer (caps), the canvasId grep, and the name-preservation check.
+import { promises as fs } from 'node:fs';
+import * as path from 'node:path';
+export async function walkDir(root) {
+    const out = [];
+    async function recurse(dir) {
+        const entries = await fs.readdir(dir, { withFileTypes: true });
+        for (const e of entries) {
+            const abs = path.join(dir, e.name);
+            if (e.isDirectory()) {
+                await recurse(abs);
+            }
+            else if (e.isFile()) {
+                const st = await fs.stat(abs);
+                out.push({
+                    rel: path.relative(root, abs).split(path.sep).join('/'),
+                    abs,
+                    size: st.size,
+                });
+            }
+        }
+    }
+    await recurse(root);
+    return out;
+}
+// Read and concatenate the text of files matching an extension set. Used to grep
+// the built bundle. Caps total read to avoid pathological memory use.
+export async function readBundleText(root, extensions, maxBytes = 64 * 1024 * 1024) {
+    const files = await walkDir(root);
+    const exts = new Set(extensions.map((e) => e.toLowerCase()));
+    let total = 0;
+    const chunks = [];
+    for (const f of files) {
+        if (!exts.has(path.extname(f.rel).toLowerCase()))
+            continue;
+        if (total + f.size > maxBytes)
+            break;
+        total += f.size;
+        chunks.push(await fs.readFile(f.abs, 'utf8'));
+    }
+    return chunks.join('\n');
+}
+//# sourceMappingURL=walk.js.map

package/dist/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../src/walk.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,qEAAqE;AAErE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY;IACxC,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,UAAU,OAAO,CAAC,GAAW;QAChC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC;oBACP,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACvD,GAAG;oBACH,IAAI,EAAE,EAAE,CAAC,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,UAAoB,EACpB,QAAQ,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IAE3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC3D,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM;QACrC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "carboncanvas-cli",
+  "version": "0.1.0",
+  "description": "Carbon Canvas CLI \u2014 build your prototype locally and publish the static output to a hosted, commentable review link. Bin name: `carboncanvas`.",
+  "type": "module",
+  "bin": {
+    "carboncanvas": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CONTRACT.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "tar": "^7.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rollsroych/quilt.git",
+    "directory": "cli"
+  },
+  "homepage": "https://app.carboncanvas.design"
+}