clawdhub 0.0.1

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 Peter Steinberger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -0,0 +1,57 @@
+# `clawdhub`
+
+ClawdHub CLI — install, update, search, and publish agent skills as folders.
+
+## Install
+
+```bash
+# From this repo (shortcut script at repo root)
+bun clawdhub --help
+
+# Once published to npm
+# npm i -g clawdhub
+```
+
+## Auth (publish)
+
+```bash
+clawdhub login
+# or
+clawdhub auth login
+
+# Headless / token paste
+# or (token paste / headless)
+clawdhub login --token clh_...
+```
+
+Notes:
+
+- Browser login opens `https://clawdhub.com/cli/auth` and completes via a loopback callback.
+- Token stored in `~/Library/Application Support/clawdhub/config.json` on macOS (override via `CLAWDHUB_CONFIG_PATH`).
+
+## Examples
+
+```bash
+clawdhub search "postgres backups"
+clawdhub install my-skill-pack
+clawdhub update --all
+clawdhub update --all --no-input --force
+clawdhub publish ./my-skill-pack --slug my-skill-pack --name "My Skill Pack" --version 1.2.0 --changelog "Fixes + docs"
+```
+
+## Sync (upload local skills)
+
+```bash
+# Start anywhere; scans workdir first, then legacy Clawdis/Clawd locations.
+clawdhub sync
+
+# Explicit roots + non-interactive dry-run
+clawdhub sync --root ../clawdis/skills --all --dry-run
+```
+
+## Defaults
+
+- Site: `https://clawdhub.com` (override via `--site` or `CLAWDHUB_SITE`)
+- Registry: discovered from `/.well-known/clawdhub.json` on the site (override via `--registry` or `CLAWDHUB_REGISTRY`)
+- Workdir: current directory (override via `--workdir`)
+- Install dir: `./skills` under workdir (override via `--dir`)

package/bin/clawdhub.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import('../dist/cli.js')

package/dist/browserAuth.d.ts

@@ -0,0 +1,20 @@
+export type LoopbackAuthResult = {
+    token: string;
+    registry?: string;
+    state?: string;
+};
+export declare function buildCliAuthUrl(params: {
+    siteUrl: string;
+    redirectUri: string;
+    label?: string;
+    state: string;
+}): string;
+export declare function isAllowedLoopbackRedirectUri(value: string): boolean;
+export declare function startLoopbackAuthServer(params?: {
+    timeoutMs?: number;
+}): Promise<{
+    redirectUri: string;
+    state: string;
+    waitForResult: () => Promise<LoopbackAuthResult>;
+    close: () => import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>;
+}>;

package/dist/browserAuth.js

@@ -0,0 +1,156 @@
+import { createServer } from 'node:http';
+export function buildCliAuthUrl(params) {
+    const url = new URL('/cli/auth', params.siteUrl);
+    url.searchParams.set('redirect_uri', params.redirectUri);
+    if (params.label)
+        url.searchParams.set('label_b64', encodeBase64Url(params.label));
+    url.searchParams.set('state', params.state);
+    return url.toString();
+}
+export function isAllowedLoopbackRedirectUri(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol !== 'http:')
+        return false;
+    const host = url.hostname.toLowerCase();
+    if (host !== '127.0.0.1' && host !== 'localhost' && host !== '::1' && host !== '[::1]') {
+        return false;
+    }
+    return true;
+}
+export async function startLoopbackAuthServer(params) {
+    const timeoutMs = params?.timeoutMs ?? 5 * 60_000;
+    const expectedState = generateState();
+    let resolveToken = null;
+    let rejectToken = null;
+    const tokenPromise = new Promise((resolve, reject) => {
+        resolveToken = resolve;
+        rejectToken = reject;
+    });
+    const server = createServer((req, res) => {
+        const method = req.method ?? 'GET';
+        const url = req.url ?? '/';
+        if (method === 'GET' && (url === '/' || url.startsWith('/callback'))) {
+            res.statusCode = 200;
+            res.setHeader('Content-Type', 'text/html; charset=utf-8');
+            res.end(CALLBACK_HTML);
+            return;
+        }
+        if (method === 'POST' && url === '/token') {
+            const chunks = [];
+            req.on('data', (chunk) => chunks.push(chunk));
+            req.on('end', () => {
+                try {
+                    const raw = Buffer.concat(chunks).toString('utf8');
+                    const parsed = JSON.parse(raw);
+                    if (!parsed || typeof parsed !== 'object')
+                        throw new Error('invalid payload');
+                    const token = parsed.token;
+                    const registry = parsed.registry;
+                    const state = parsed.state;
+                    if (typeof token !== 'string' || !token.trim())
+                        throw new Error('token required');
+                    if (typeof state !== 'string' || state !== expectedState) {
+                        throw new Error('state mismatch');
+                    }
+                    res.statusCode = 200;
+                    res.setHeader('Content-Type', 'application/json');
+                    res.end(JSON.stringify({ ok: true }));
+                    resolveToken?.({
+                        token: token.trim(),
+                        registry: typeof registry === 'string' ? registry : undefined,
+                        state,
+                    });
+                }
+                catch (error) {
+                    res.statusCode = 400;
+                    res.setHeader('Content-Type', 'application/json');
+                    res.end(JSON.stringify({ ok: false }));
+                    const message = error instanceof Error ? error.message : 'invalid payload';
+                    rejectToken?.(new Error(message));
+                }
+                finally {
+                    server.close();
+                }
+            });
+            return;
+        }
+        res.statusCode = 404;
+        res.setHeader('Content-Type', 'text/plain; charset=utf-8');
+        res.end('Not found');
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => resolve());
+    });
+    const address = server.address();
+    if (!address) {
+        server.close();
+        throw new Error('Failed to bind loopback server');
+    }
+    const redirectUri = `http://127.0.0.1:${address.port}/callback`;
+    const timeout = setTimeout(() => {
+        server.close();
+        rejectToken?.(new Error('Timed out waiting for browser login'));
+    }, timeoutMs);
+    tokenPromise.finally(() => clearTimeout(timeout)).catch(() => { });
+    return {
+        redirectUri,
+        state: expectedState,
+        waitForResult: () => tokenPromise,
+        close: () => server.close(),
+    };
+}
+const CALLBACK_HTML = `<!doctype html>
+<html lang="en">
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>ClawdHub CLI Login</title>
+  <style>
+    :root { color-scheme: light dark; }
+    body { font-family: ui-sans-serif, system-ui, -apple-system, Segoe UI, sans-serif; padding: 24px; }
+    .card { max-width: 560px; margin: 40px auto; padding: 18px 16px; border: 1px solid rgba(127,127,127,.35); border-radius: 12px; }
+    code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
+  </style>
+  <body>
+    <div class="card">
+      <h1 style="margin: 0 0 10px; font-size: 18px;">Completing login…</h1>
+      <p id="status" style="margin: 0; opacity: .8;">Waiting for token.</p>
+    </div>
+    <script>
+      const statusEl = document.getElementById('status')
+      const params = new URLSearchParams(location.hash.replace(/^#/, ''))
+      const token = params.get('token')
+      const registry = params.get('registry')
+      const state = params.get('state')
+      if (!token) {
+        statusEl.textContent = 'Missing token in URL. You can close this tab and try again.'
+      } else if (!state) {
+        statusEl.textContent = 'Missing state in URL. You can close this tab and try again.'
+      } else {
+        fetch('/token', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ token, registry, state }),
+        }).then(() => {
+          statusEl.textContent = 'Logged in. You can close this tab.'
+          setTimeout(() => window.close(), 250)
+        }).catch(() => {
+          statusEl.textContent = 'Failed to send token to CLI. You can close this tab and try again.'
+        })
+      }
+    </script>
+  </body>
+</html>`;
+function encodeBase64Url(value) {
+    return Buffer.from(value, 'utf8').toString('base64url');
+}
+function generateState() {
+    return Buffer.from(crypto.getRandomValues(new Uint8Array(16))).toString('hex');
+}
+//# sourceMappingURL=browserAuth.js.map

package/dist/browserAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserAuth.js","sourceRoot":"","sources":["../src/browserAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AASxC,MAAM,UAAU,eAAe,CAAC,MAK/B;IACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAClF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IACvC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACvF,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAA+B;IAC3E,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,CAAC,GAAG,MAAM,CAAA;IACjD,MAAM,aAAa,GAAG,aAAa,EAAE,CAAA;IAErC,IAAI,YAAY,GAAiD,IAAI,CAAA;IACrE,IAAI,WAAW,GAAoC,IAAI,CAAA;IACvD,MAAM,YAAY,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvE,YAAY,GAAG,OAAO,CAAA;QACtB,WAAW,GAAG,MAAM,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAA;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAA;QAE1B,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;YACzD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YACtB,OAAM;QACR,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAA;YAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;oBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;oBACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;oBAC7E,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAA;oBACnD,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAA;oBAC5D,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAA;oBACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;oBACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;wBACzD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;oBACnC,CAAC;oBACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;oBACjD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;oBACrC,YAAY,EAAE,CAAC;wBACb,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;wBACnB,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;wBAC7D,KAAK;qBACN,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;oBACjD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;oBACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAA;oBAC1E,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;gBACnC,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,KAAK,EAAE,CAAA;gBAChB,CAAC;YACH,CAAC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;QACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAA;QAC1D,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAwB,CAAA;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,OAAO,CAAC,IAAI,WAAW,CAAA;IAE/D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAA;IACjE,CAAC,EAAE,SAAS,CAAC,CAAA;IACb,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAEjE,OAAO;QACL,WAAW;QACX,KAAK,EAAE,aAAa;QACpB,aAAa,EAAE,GAAG,EAAE,CAAC,YAAY;QACjC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAA;AACH,CAAC;AAED,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAwCd,CAAA;AAER,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAChF,CAAC"}

package/dist/browserAuth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/browserAuth.test.js

@@ -0,0 +1,39 @@
+/* @vitest-environment node */
+import { describe, expect, it } from 'vitest';
+import { buildCliAuthUrl, isAllowedLoopbackRedirectUri, startLoopbackAuthServer, } from './browserAuth';
+describe('browserAuth', () => {
+    it('builds auth url', () => {
+        const url = buildCliAuthUrl({
+            siteUrl: 'https://example.com',
+            redirectUri: 'http://127.0.0.1:1234/callback',
+            label: 'CLI token',
+            state: 'state123',
+        });
+        expect(url).toContain('https://example.com/cli/auth?');
+        expect(url).toContain('redirect_uri=');
+        expect(url).toContain('label_b64=');
+        expect(url).toContain('state=');
+    });
+    it('accepts only loopback http redirect uris', () => {
+        expect(isAllowedLoopbackRedirectUri('http://127.0.0.1:1234/callback')).toBe(true);
+        expect(isAllowedLoopbackRedirectUri('http://localhost:1234/callback')).toBe(true);
+        expect(isAllowedLoopbackRedirectUri('http://[::1]:1234/callback')).toBe(true);
+        expect(isAllowedLoopbackRedirectUri('https://127.0.0.1:1234/callback')).toBe(false);
+        expect(isAllowedLoopbackRedirectUri('http://evil.com/callback')).toBe(false);
+    });
+    it('receives token via loopback server', async () => {
+        const server = await startLoopbackAuthServer({ timeoutMs: 2000 });
+        const payload = {
+            token: 'clh_test',
+            registry: 'https://example.convex.site',
+            state: server.state,
+        };
+        await fetch(server.redirectUri.replace('/callback', '/token'), {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(payload),
+        });
+        await expect(server.waitForResult()).resolves.toEqual(payload);
+    });
+});
+//# sourceMappingURL=browserAuth.test.js.map

package/dist/browserAuth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserAuth.test.js","sourceRoot":"","sources":["../src/browserAuth.test.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,eAAe,CAAA;AAEtB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACzB,MAAM,GAAG,GAAG,eAAe,CAAC;YAC1B,OAAO,EAAE,qBAAqB;YAC9B,WAAW,EAAE,gCAAgC;YAC7C,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,UAAU;SAClB,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAA;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,4BAA4B,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,CAAC,4BAA4B,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,CAAC,4BAA4B,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7E,MAAM,CAAC,4BAA4B,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnF,MAAM,CAAC,4BAA4B,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,6BAA6B;YACvC,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAA;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAA;QACF,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/cli/buildInfo.d.ts

@@ -0,0 +1,3 @@
+export declare function getCliCommit(): string | null;
+export declare function getCliVersion(): string;
+export declare function getCliBuildLabel(): string;

package/dist/cli/buildInfo.js

@@ -0,0 +1,103 @@
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+function readPackageVersion() {
+    try {
+        const path = join(dirname(fileURLToPath(import.meta.url)), '../../package.json');
+        const raw = readFileSync(path, 'utf8');
+        const pkg = JSON.parse(raw);
+        return typeof pkg.version === 'string' ? pkg.version : '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+function shortCommit(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    if (trimmed.length <= 8)
+        return trimmed;
+    return trimmed.slice(0, 8);
+}
+export function getCliCommit() {
+    const candidates = [
+        process.env.CLAWDHUB_COMMIT,
+        process.env.VERCEL_GIT_COMMIT_SHA,
+        process.env.GITHUB_SHA,
+        process.env.COMMIT_SHA,
+    ];
+    for (const candidate of candidates) {
+        if (!candidate)
+            continue;
+        const short = shortCommit(candidate);
+        if (short)
+            return short;
+    }
+    return readGitCommitFromCwd();
+}
+export function getCliVersion() {
+    return readPackageVersion();
+}
+export function getCliBuildLabel() {
+    const version = getCliVersion();
+    const commit = getCliCommit();
+    return commit ? `v${version} (${commit})` : `v${version}`;
+}
+function readGitCommitFromCwd() {
+    try {
+        const gitDir = findGitDir(process.cwd());
+        if (!gitDir)
+            return null;
+        const headPath = join(gitDir, 'HEAD');
+        if (!existsSync(headPath))
+            return null;
+        const head = readFileSync(headPath, 'utf8').trim();
+        if (!head)
+            return null;
+        if (!head.startsWith('ref:'))
+            return shortCommit(head);
+        const ref = head.replace(/^ref:\s*/, '').trim();
+        if (!ref)
+            return null;
+        const refPath = join(gitDir, ref);
+        if (!existsSync(refPath))
+            return null;
+        const sha = readFileSync(refPath, 'utf8').trim();
+        return shortCommit(sha);
+    }
+    catch {
+        return null;
+    }
+}
+function findGitDir(start) {
+    let current = resolve(start);
+    for (;;) {
+        const dotGit = join(current, '.git');
+        if (existsSync(dotGit)) {
+            try {
+                const stat = statSync(dotGit);
+                if (stat.isDirectory())
+                    return dotGit;
+            }
+            catch {
+                // ignore
+            }
+            try {
+                const content = readFileSync(dotGit, 'utf8').trim();
+                const match = content.match(/^gitdir:\s*(.+)$/);
+                if (match?.[1])
+                    return resolve(current, match[1]);
+            }
+            catch {
+                return dotGit;
+            }
+            return dotGit;
+        }
+        const parent = resolve(current, '..');
+        if (parent === current)
+            return null;
+        current = parent;
+    }
+}
+//# sourceMappingURL=buildInfo.js.map

package/dist/cli/buildInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildInfo.js","sourceRoot":"","sources":["../../src/cli/buildInfo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAIxC,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAA;QAChF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAA;QAC1C,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACzB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IACvC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU;KACvB,CAAA;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS;YAAE,SAAQ;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;QACpC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,oBAAoB,EAAE,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,kBAAkB,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,aAAa,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;IAC7B,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;AAC3D,CAAC;AAED,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QACtC,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QACrC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QAChD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5B,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACpC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC7B,IAAI,IAAI,CAAC,WAAW,EAAE;oBAAE,OAAO,MAAM,CAAA;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;gBACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;gBAC/C,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;oBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAA;YACf,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QACnC,OAAO,GAAG,MAAM,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/commands/auth.d.ts

@@ -0,0 +1,9 @@
+import type { GlobalOpts } from '../types.js';
+export declare function cmdLoginFlow(opts: GlobalOpts, options: {
+    token?: string;
+    label?: string;
+    browser?: boolean;
+}, inputAllowed: boolean): Promise<void>;
+export declare function cmdLogin(opts: GlobalOpts, tokenFlag: string | undefined, inputAllowed: boolean): Promise<void>;
+export declare function cmdLogout(opts: GlobalOpts): Promise<void>;
+export declare function cmdWhoami(opts: GlobalOpts): Promise<void>;

package/dist/cli/commands/auth.js

@@ -0,0 +1,75 @@
+import { ApiCliWhoamiResponseSchema, ApiRoutes } from 'clawdhub-schema';
+import { buildCliAuthUrl, startLoopbackAuthServer } from '../../browserAuth.js';
+import { readGlobalConfig, writeGlobalConfig } from '../../config.js';
+import { discoverRegistryFromSite } from '../../discovery.js';
+import { apiRequest } from '../../http.js';
+import { getRegistry } from '../registry.js';
+import { createSpinner, fail, formatError, openInBrowser, promptHidden } from '../ui.js';
+export async function cmdLoginFlow(opts, options, inputAllowed) {
+    if (options.token) {
+        await cmdLogin(opts, options.token, inputAllowed);
+        return;
+    }
+    if (options.browser === false) {
+        fail('Token required (use --token or remove --no-browser)');
+    }
+    const label = String(options.label ?? 'CLI token').trim() || 'CLI token';
+    const receiver = await startLoopbackAuthServer();
+    const discovery = await discoverRegistryFromSite(opts.site).catch(() => null);
+    const authBase = discovery?.authBase?.trim() || opts.site;
+    const authUrl = buildCliAuthUrl({
+        siteUrl: authBase,
+        redirectUri: receiver.redirectUri,
+        label,
+        state: receiver.state,
+    });
+    console.log(`Opening browser: ${authUrl}`);
+    openInBrowser(authUrl);
+    const result = await receiver.waitForResult();
+    const registry = result.registry?.trim() || opts.registry;
+    await cmdLogin({ ...opts, registry }, result.token, inputAllowed);
+}
+export async function cmdLogin(opts, tokenFlag, inputAllowed) {
+    if (!tokenFlag && !inputAllowed)
+        fail('Token required (use --token or remove --no-input)');
+    const token = tokenFlag || (await promptHidden('ClawdHub token: '));
+    if (!token)
+        fail('Token required');
+    const registry = await getRegistry(opts, { cache: true });
+    const spinner = createSpinner('Verifying token');
+    try {
+        const whoami = await apiRequest(registry, { method: 'GET', path: ApiRoutes.cliWhoami, token }, ApiCliWhoamiResponseSchema);
+        if (!whoami.user)
+            fail('Login failed');
+        await writeGlobalConfig({ registry, token });
+        const handle = whoami.user.handle ? `@${whoami.user.handle}` : 'unknown user';
+        spinner.succeed(`OK. Logged in as ${handle}.`);
+    }
+    catch (error) {
+        spinner.fail(formatError(error));
+        throw error;
+    }
+}
+export async function cmdLogout(opts) {
+    const cfg = await readGlobalConfig();
+    const registry = cfg?.registry || (await getRegistry(opts, { cache: true }));
+    await writeGlobalConfig({ registry, token: undefined });
+    console.log('OK. Logged out.');
+}
+export async function cmdWhoami(opts) {
+    const cfg = await readGlobalConfig();
+    const token = cfg?.token;
+    if (!token)
+        fail('Not logged in. Run: clawdhub login');
+    const registry = await getRegistry(opts, { cache: true });
+    const spinner = createSpinner('Checking token');
+    try {
+        const whoami = await apiRequest(registry, { method: 'GET', path: ApiRoutes.cliWhoami, token }, ApiCliWhoamiResponseSchema);
+        spinner.succeed(whoami.user.handle ?? 'unknown');
+    }
+    catch (error) {
+        spinner.fail(formatError(error));
+        throw error;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE5C,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAExF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgB,EAChB,OAA8D,EAC9D,YAAqB;IAErB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;QACjD,OAAM;IACR,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,qDAAqD,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,CAAA;IACxE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,EAAE,CAAA;IAChD,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC7E,MAAM,QAAQ,GAAG,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAA;IACzD,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,KAAK;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC,CAAA;IAEF,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;IAC1C,aAAa,CAAC,OAAO,CAAC,CAAA;IAEtB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAA;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAA;IACzD,MAAM,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAgB,EAChB,SAA6B,EAC7B,YAAqB;IAErB,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY;QAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;IAE1F,MAAM,KAAK,GAAG,SAAS,IAAI,CAAC,MAAM,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACnE,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAElC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,OAAO,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,QAAQ,EACR,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EACnD,0BAA0B,CAC3B,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAEtC,MAAM,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAA;QAC7E,OAAO,CAAC,OAAO,CAAC,oBAAoB,MAAM,GAAG,CAAC,CAAA;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAA;IACpC,MAAM,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5E,MAAM,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAA;IACpC,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,CAAA;IACxB,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzD,MAAM,OAAO,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,QAAQ,EACR,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EACnD,0BAA0B,CAC3B,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/cli/commands/publish.d.ts

@@ -0,0 +1,8 @@
+import type { GlobalOpts } from '../types.js';
+export declare function cmdPublish(opts: GlobalOpts, folderArg: string, options: {
+    slug?: string;
+    name?: string;
+    version?: string;
+    changelog?: string;
+    tags?: string;
+}): Promise<void>;

package/dist/cli/commands/publish.js

@@ -0,0 +1,91 @@
+import { stat } from 'node:fs/promises';
+import { basename, resolve } from 'node:path';
+import { ApiCliPublishResponseSchema, ApiCliUploadUrlResponseSchema, ApiRoutes, ApiSkillMetaResponseSchema, ApiUploadFileResponseSchema, CliPublishRequestSchema, parseArk, } from 'clawdhub-schema';
+import semver from 'semver';
+import { readGlobalConfig } from '../../config.js';
+import { apiRequest } from '../../http.js';
+import { listTextFiles, sha256Hex } from '../../skills.js';
+import { getRegistry } from '../registry.js';
+import { sanitizeSlug, titleCase } from '../slug.js';
+import { createSpinner, fail, formatError } from '../ui.js';
+export async function cmdPublish(opts, folderArg, options) {
+    const folder = folderArg ? resolve(opts.workdir, folderArg) : null;
+    if (!folder)
+        fail('Path required');
+    const folderStat = await stat(folder).catch(() => null);
+    if (!folderStat || !folderStat.isDirectory())
+        fail('Path must be a folder');
+    const cfg = await readGlobalConfig();
+    const token = cfg?.token;
+    if (!token)
+        fail('Not logged in. Run: clawdhub login');
+    const registry = await getRegistry(opts, { cache: true });
+    const slug = options.slug ?? sanitizeSlug(basename(folder));
+    const displayName = options.name ?? titleCase(basename(folder));
+    const version = options.version;
+    const changelog = options.changelog ?? '';
+    const tagsValue = options.tags ?? 'latest';
+    const tags = tagsValue
+        .split(',')
+        .map((tag) => tag.trim())
+        .filter(Boolean);
+    if (!slug)
+        fail('--slug required');
+    if (!displayName)
+        fail('--name required');
+    if (!version || !semver.valid(version))
+        fail('--version must be valid semver');
+    const spinner = createSpinner(`Preparing ${slug}@${version}`);
+    try {
+        const meta = await apiRequest(registry, { method: 'GET', path: `/api/skill?slug=${encodeURIComponent(slug)}` }, ApiSkillMetaResponseSchema).catch(() => null);
+        const exists = Boolean(meta?.skill);
+        if (exists && !changelog.trim())
+            fail('--changelog required for updates');
+        const filesOnDisk = await listTextFiles(folder);
+        if (filesOnDisk.length === 0)
+            fail('No files found');
+        if (!filesOnDisk.some((file) => {
+            const lower = file.relPath.toLowerCase();
+            return lower === 'skill.md' || lower === 'skills.md';
+        })) {
+            fail('SKILL.md required');
+        }
+        const uploaded = [];
+        let index = 0;
+        for (const file of filesOnDisk) {
+            index += 1;
+            spinner.text = `Uploading ${file.relPath} (${index}/${filesOnDisk.length})`;
+            const { uploadUrl } = await apiRequest(registry, { method: 'POST', path: ApiRoutes.cliUploadUrl, token }, ApiCliUploadUrlResponseSchema);
+            const storageId = await uploadFile(uploadUrl, file.bytes, file.contentType ?? 'text/plain');
+            const sha256 = sha256Hex(file.bytes);
+            uploaded.push({
+                path: file.relPath,
+                size: file.bytes.byteLength,
+                storageId,
+                sha256,
+                contentType: file.contentType ?? undefined,
+            });
+        }
+        spinner.text = `Publishing ${slug}@${version}`;
+        const body = parseArk(CliPublishRequestSchema, { slug, displayName, version, changelog, tags, files: uploaded }, 'Publish payload');
+        const result = await apiRequest(registry, { method: 'POST', path: ApiRoutes.cliPublish, token, body }, ApiCliPublishResponseSchema);
+        spinner.succeed(`OK. Published ${slug}@${version} (${result.versionId})`);
+    }
+    catch (error) {
+        spinner.fail(formatError(error));
+        throw error;
+    }
+}
+async function uploadFile(uploadUrl, bytes, contentType) {
+    const response = await fetch(uploadUrl, {
+        method: 'POST',
+        headers: { 'Content-Type': contentType || 'application/octet-stream' },
+        body: Buffer.from(bytes),
+    });
+    if (!response.ok) {
+        throw new Error(`Upload failed: ${await response.text()}`);
+    }
+    const payload = parseArk(ApiUploadFileResponseSchema, (await response.json()), 'Upload response');
+    return payload.storageId;
+}
+//# sourceMappingURL=publish.js.map

package/dist/cli/commands/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../src/cli/commands/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,SAAS,EACT,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,QAAQ,GACT,MAAM,iBAAiB,CAAA;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEpD,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAE3D,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAgB,EAChB,SAAiB,EACjB,OAA8F;IAE9F,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IAClC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACvD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAA;IAE3E,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAA;IACpC,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,CAAA;IACxB,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAA;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAA;IAC1C,MAAM,IAAI,GAAG,SAAS;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CAAA;IAElB,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAClC,IAAI,CAAC,WAAW;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAE9E,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,IAAI,IAAI,OAAO,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,QAAQ,EACR,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,EACtE,0BAA0B,CAC3B,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACnB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;QAEzE,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACpD,IACE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAA;YACxC,OAAO,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,WAAW,CAAA;QACtD,CAAC,CAAC,EACF,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC3B,CAAC;QAED,MAAM,QAAQ,GAMT,EAAE,CAAA;QAEP,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,KAAK,IAAI,CAAC,CAAA;YACV,OAAO,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,MAAM,GAAG,CAAA;YAC3E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CACpC,QAAQ,EACR,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,KAAK,EAAE,EACvD,6BAA6B,CAC9B,CAAA;YAED,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAA;YAC3F,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,OAAO;gBAClB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;gBAC3B,SAAS;gBACT,MAAM;gBACN,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;aAC3C,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,cAAc,IAAI,IAAI,OAAO,EAAE,CAAA;QAC9C,MAAM,IAAI,GAAG,QAAQ,CACnB,uBAAuB,EACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAChE,iBAAiB,CAClB,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,QAAQ,EACR,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAC3D,2BAA2B,CAC5B,CAAA;QAED,OAAO,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAA;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,KAAiB,EAAE,WAAmB;IACjF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACtC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,IAAI,0BAA0B,EAAE;QACtE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;KACzB,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CACtB,2BAA2B,EAC3B,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,EAClC,iBAAiB,CAClB,CAAA;IACD,OAAO,OAAO,CAAC,SAAS,CAAA;AAC1B,CAAC"}

package/dist/cli/commands/publish.test.d.ts

@@ -0,0 +1 @@
+export {};