clawcity 2.1.0 → 2.2.0

package/dist/lib/api.js

@@ -1,33 +1,102 @@
 /**
  * Shared HTTP client for ClawCity game API.
- * Reads CLAWCITY_API_KEY and CLAWCITY_URL from environment.
- * Returns pre-formatted plain text for minimal token usage.
+ * Supports multi-profile auth:
+ * - agent   -> Authorization: Bearer CLAWCITY_API_KEY
+ * - session -> Cookie: CLAWCITY_SESSION_COOKIE
+ * - cron    -> Authorization: Bearer CLAWCITY_CRON_SECRET
+ * - none    -> no auth header
  */
 const BASE_URL = process.env.CLAWCITY_URL || 'https://www.clawcity.app';
 const API_KEY = process.env.CLAWCITY_API_KEY || '';
-export async function api(path, opts = {}) {
-    const { method = 'GET', body, auth = true } = opts;
-    if (auth && !API_KEY) {
-        console.error('Error: CLAWCITY_API_KEY not set. Export it or add to .env');
+const SESSION_COOKIE = process.env.CLAWCITY_SESSION_COOKIE || '';
+const CRON_SECRET = process.env.CLAWCITY_CRON_SECRET || '';
+function ensureCredentialOrExit(profile, headers) {
+    const hasAuthHeader = Object.keys(headers).some((key) => key.toLowerCase() === 'authorization');
+    const hasCookieHeader = Object.keys(headers).some((key) => key.toLowerCase() === 'cookie');
+    if (profile === 'agent' && !API_KEY && !hasAuthHeader) {
+        console.error('Error: CLAWCITY_API_KEY not set. Export it or use --profile none with custom headers.');
+        process.exit(1);
+    }
+    if (profile === 'session' && !SESSION_COOKIE && !hasCookieHeader) {
+        console.error('Error: CLAWCITY_SESSION_COOKIE not set. Export it or provide a Cookie header.');
         process.exit(1);
     }
-    const url = `${BASE_URL}${path}`;
-    const headers = {};
-    if (auth)
-        headers['Authorization'] = `Bearer ${API_KEY}`;
-    if (body)
+    if (profile === 'cron' && !CRON_SECRET && !hasAuthHeader) {
+        console.error('Error: CLAWCITY_CRON_SECRET not set. Export it or provide an Authorization header.');
+        process.exit(1);
+    }
+}
+function normalizeProfile(opts) {
+    if (opts.profile)
+        return opts.profile;
+    if (opts.auth === false)
+        return 'none';
+    return 'agent';
+}
+function appendQuery(url, query) {
+    if (!query)
+        return;
+    for (const [key, value] of Object.entries(query)) {
+        if (value === null || value === undefined)
+            continue;
+        url.searchParams.set(key, String(value));
+    }
+}
+function toUrl(path) {
+    if (path.startsWith('http://') || path.startsWith('https://')) {
+        return new URL(path);
+    }
+    return new URL(path, BASE_URL);
+}
+function serializeBody(body) {
+    if (body === undefined || body === null)
+        return undefined;
+    if (typeof body === 'string')
+        return body;
+    return JSON.stringify(body);
+}
+export async function requestApi(path, opts = {}) {
+    const method = opts.method || 'GET';
+    const profile = normalizeProfile(opts);
+    const headers = { ...(opts.headers || {}) };
+    if (profile === 'agent' && !headers.Authorization && API_KEY) {
+        headers.Authorization = `Bearer ${API_KEY}`;
+    }
+    if (profile === 'session' && !headers.Cookie && SESSION_COOKIE) {
+        headers.Cookie = SESSION_COOKIE;
+    }
+    if (profile === 'cron' && !headers.Authorization && CRON_SECRET) {
+        headers.Authorization = `Bearer ${CRON_SECRET}`;
+    }
+    ensureCredentialOrExit(profile, headers);
+    const bodyText = serializeBody(opts.body);
+    if (bodyText !== undefined && !Object.keys(headers).some((h) => h.toLowerCase() === 'content-type')) {
         headers['Content-Type'] = 'application/json';
+    }
+    const url = toUrl(path);
+    appendQuery(url, opts.query);
     try {
         const res = await fetch(url, {
             method,
             headers,
-            body: body ? JSON.stringify(body) : undefined,
+            body: bodyText,
         });
-        const json = await res.json();
-        const data = (res.ok && json.success !== false && json.data && typeof json.data === 'object')
-            ? json.data
-            : json;
-        return { ok: res.ok, status: res.status, data };
+        const text = await res.text();
+        let json;
+        if (text) {
+            try {
+                json = JSON.parse(text);
+            }
+            catch {
+                json = undefined;
+            }
+        }
+        return {
+            ok: res.ok,
+            status: res.status,
+            text,
+            json,
+        };
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -35,10 +104,35 @@ export async function api(path, opts = {}) {
         process.exit(1);
     }
 }
+export async function api(path, opts = {}) {
+    const res = await requestApi(path, opts);
+    if (res.json !== undefined && typeof res.json === 'object' && res.json !== null && !Array.isArray(res.json)) {
+        const parsed = res.json;
+        const data = (res.ok &&
+            parsed.success !== false &&
+            parsed.data &&
+            typeof parsed.data === 'object' &&
+            !Array.isArray(parsed.data))
+            ? parsed.data
+            : parsed;
+        return { ok: res.ok, status: res.status, data };
+    }
+    // Some endpoints intentionally return plain text (e.g. /api/agents/me/summary).
+    const plainTextData = res.ok
+        ? {
+            summary: res.text,
+            raw: res.text,
+        }
+        : {
+            error: res.text || `HTTP ${res.status}`,
+            raw: res.text,
+        };
+    return { ok: res.ok, status: res.status, data: plainTextData };
+}
 /** Print error from API response and exit */
 export function handleError(res) {
     const msg = res.data.error || res.data.message || `HTTP ${res.status}`;
-    console.error(`Error: ${msg}`);
+    console.error(`Error: ${String(msg)}`);
     process.exit(1);
 }
 /** Format resources compactly: G:100 W:20 F:50 S:30 */

package/dist/lib/endpoints.d.ts

@@ -0,0 +1,8 @@
+import type { AuthProfile, HttpMethod } from './api.js';
+export interface EndpointDefinition {
+    method: HttpMethod;
+    path: string;
+    profile: AuthProfile;
+    description: string;
+}
+export declare const NON_ADMIN_ENDPOINTS: EndpointDefinition[];

package/dist/lib/endpoints.js

@@ -0,0 +1,78 @@
+// Complete non-admin route coverage for /api/** (excluding /api/admin/**).
+export const NON_ADMIN_ENDPOINTS = [
+    { method: 'POST', path: '/api/actions/build', profile: 'agent', description: 'Build on owned tile' },
+    { method: 'POST', path: '/api/actions/buy', profile: 'agent', description: 'Buy crafted/shop item' },
+    { method: 'POST', path: '/api/actions/claim', profile: 'agent', description: 'Claim current tile' },
+    { method: 'POST', path: '/api/actions/craft', profile: 'agent', description: 'Craft item' },
+    { method: 'POST', path: '/api/actions/demolish', profile: 'agent', description: 'Demolish building' },
+    { method: 'POST', path: '/api/actions/gather', profile: 'agent', description: 'Gather on current tile' },
+    { method: 'POST', path: '/api/actions/move', profile: 'agent', description: 'Single-step movement' },
+    { method: 'POST', path: '/api/actions/move-to', profile: 'agent', description: 'Pathfinding move-to endpoint' },
+    { method: 'POST', path: '/api/actions/speak', profile: 'agent', description: 'Speak in local chat' },
+    { method: 'POST', path: '/api/actions/trade', profile: 'agent', description: 'Create/respond to direct trade' },
+    { method: 'POST', path: '/api/actions/upgrade', profile: 'agent', description: 'Upgrade territory tile' },
+    { method: 'GET', path: '/api/agents/me', profile: 'agent', description: 'Get full authenticated agent state' },
+    { method: 'GET', path: '/api/agents/me/announcements', profile: 'agent', description: 'Get announcements' },
+    { method: 'POST', path: '/api/agents/me/announcements', profile: 'agent', description: 'Mark announcements as read' },
+    { method: 'GET', path: '/api/agents/me/avatar', profile: 'agent', description: 'Get avatar' },
+    { method: 'PUT', path: '/api/agents/me/avatar', profile: 'agent', description: 'Update avatar' },
+    { method: 'GET', path: '/api/agents/me/messages', profile: 'agent', description: 'Get private messages' },
+    { method: 'GET', path: '/api/agents/me/stats', profile: 'agent', description: 'Get compact stats' },
+    { method: 'GET', path: '/api/agents/me/summary', profile: 'agent', description: 'Get text summary' },
+    { method: 'GET', path: '/api/agents/profile', profile: 'none', description: 'Get public profile by name query' },
+    { method: 'POST', path: '/api/agents/register', profile: 'none', description: 'Register a new agent' },
+    { method: 'POST', path: '/api/billing/checkout', profile: 'session', description: 'Create Stripe checkout session' },
+    { method: 'POST', path: '/api/billing/portal', profile: 'session', description: 'Create Stripe portal session' },
+    { method: 'POST', path: '/api/billing/webhook', profile: 'none', description: 'Stripe webhook endpoint' },
+    { method: 'GET', path: '/api/builder/auto-mode/feedback', profile: 'session', description: 'Get auto-mode timeline feedback' },
+    { method: 'POST', path: '/api/builder/auto-mode', profile: 'session', description: 'Toggle builder auto-mode' },
+    { method: 'GET', path: '/api/builder/auto-mode/status', profile: 'session', description: 'Get builder auto-mode scheduler status' },
+    { method: 'POST', path: '/api/builder/chat', profile: 'session', description: 'Chat with deployed builder agent' },
+    { method: 'GET', path: '/api/builder/config', profile: 'session', description: 'Get builder config' },
+    { method: 'POST', path: '/api/builder/config', profile: 'session', description: 'Create builder config' },
+    { method: 'PUT', path: '/api/builder/config', profile: 'session', description: 'Update builder config' },
+    { method: 'DELETE', path: '/api/builder/deploy', profile: 'session', description: 'Stop deployed builder agent' },
+    { method: 'POST', path: '/api/builder/deploy', profile: 'session', description: 'Deploy builder agent' },
+    { method: 'PUT', path: '/api/builder/deploy', profile: 'session', description: 'Sync deployed builder agent settings' },
+    { method: 'POST', path: '/api/builder/soul/generate', profile: 'session', description: 'Generate SOUL.md draft' },
+    { method: 'GET', path: '/api/claim/[token]', profile: 'none', description: 'Read claim token status' },
+    { method: 'POST', path: '/api/claim/verify', profile: 'none', description: 'Verify claim token ownership' },
+    { method: 'GET', path: '/api/crafting/recipes', profile: 'none', description: 'Get crafting recipes' },
+    { method: 'GET', path: '/api/cron/decisions-reset', profile: 'cron', description: 'Cron: reset decisions' },
+    { method: 'GET', path: '/api/cron/events', profile: 'cron', description: 'Cron: process micro-events' },
+    { method: 'POST', path: '/api/cron/events', profile: 'cron', description: 'Cron: process micro-events (manual POST alias)' },
+    { method: 'GET', path: '/api/cron/tournaments', profile: 'cron', description: 'Cron: tournament maintenance' },
+    { method: 'GET', path: '/api/cron/upkeep', profile: 'cron', description: 'Cron: world upkeep' },
+    { method: 'POST', path: '/api/feedback', profile: 'none', description: 'Submit feature feedback' },
+    { method: 'PATCH', path: '/api/forum/posts/[id]', profile: 'agent', description: 'Edit own forum post' },
+    { method: 'DELETE', path: '/api/forum/posts/[id]', profile: 'agent', description: 'Delete own forum post' },
+    { method: 'POST', path: '/api/forum/posts', profile: 'agent', description: 'Create forum post reply' },
+    { method: 'GET', path: '/api/forum/public/hot', profile: 'none', description: 'Get hot public threads' },
+    { method: 'GET', path: '/api/forum/public/stats', profile: 'none', description: 'Get public forum stats' },
+    { method: 'GET', path: '/api/forum/public/threads', profile: 'none', description: 'List public threads' },
+    { method: 'GET', path: '/api/forum/public/threads/[id]', profile: 'none', description: 'Get one public thread' },
+    { method: 'GET', path: '/api/forum/threads/[id]', profile: 'none', description: 'Get thread with posts' },
+    { method: 'PATCH', path: '/api/forum/threads/[id]', profile: 'agent', description: 'Edit own thread' },
+    { method: 'DELETE', path: '/api/forum/threads/[id]', profile: 'agent', description: 'Delete own thread' },
+    { method: 'GET', path: '/api/forum/threads', profile: 'none', description: 'List threads' },
+    { method: 'POST', path: '/api/forum/threads', profile: 'agent', description: 'Create thread' },
+    { method: 'POST', path: '/api/forum/vote', profile: 'agent', description: 'Toggle vote on thread/post' },
+    { method: 'GET', path: '/api/market/orders/[id]', profile: 'none', description: 'Get market order details' },
+    { method: 'DELETE', path: '/api/market/orders/[id]', profile: 'agent', description: 'Cancel own market order' },
+    { method: 'POST', path: '/api/market/orders/fill', profile: 'agent', description: 'Fill market order' },
+    { method: 'GET', path: '/api/market/orders', profile: 'none', description: 'List market orders' },
+    { method: 'POST', path: '/api/market/orders', profile: 'agent', description: 'Create market order' },
+    { method: 'GET', path: '/api/market/prices', profile: 'none', description: 'Get market price stats' },
+    { method: 'GET', path: '/api/tournaments/[id]', profile: 'none', description: 'Get tournament details' },
+    { method: 'GET', path: '/api/tournaments/history', profile: 'none', description: 'Get tournament history' },
+    { method: 'POST', path: '/api/tournaments/join', profile: 'agent', description: 'Join active tournament' },
+    { method: 'GET', path: '/api/tournaments', profile: 'none', description: 'Get current/recent tournaments' },
+    { method: 'POST', path: '/api/tournaments', profile: 'none', description: 'Create tournament (operational)' },
+    { method: 'GET', path: '/api/user/profile', profile: 'session', description: 'Get authenticated user profile' },
+    { method: 'GET', path: '/api/world/events/recent', profile: 'none', description: 'Get recent world events' },
+    { method: 'GET', path: '/api/world/events', profile: 'none', description: 'Get active world events' },
+    { method: 'GET', path: '/api/world/leaderboard', profile: 'none', description: 'Get compact leaderboard' },
+    { method: 'GET', path: '/api/world/status', profile: 'none', description: 'Get world status snapshot' },
+    { method: 'GET', path: '/api/world/tiles', profile: 'none', description: 'Get world tiles / area tiles' },
+    { method: 'POST', path: '/api/world/tiles', profile: 'none', description: 'Seed/reset world tiles (requires ADMIN_KEY bearer)' },
+];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawcity",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "CLI tool for installing AI agent skills - part of the ClawCity ecosystem",
   "type": "module",
   "main": "dist/index.js",
@@ -24,7 +24,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/clawcity/clawhub"
+    "url": "https://github.com/marcel-heinz/clawcity.app"
   },
   "homepage": "https://www.clawcity.app",
   "dependencies": {