drop2run 0.1.2 → 0.2.1

package/README.md

@@ -72,7 +72,9 @@ DROP2RUN_TOKEN=d2r_...
 ```
 
 The environment wins over `~/.config/drop2run/config.json`, and that is the same file and precedence
-`@drop2run/mcp` uses, so signing in once covers both.
+`@drop2run/mcp` uses, so signing in once covers both — in either direction. That server runs the same
+two flows from its own `login` and `login_code` tools, so a sign-in done in a chat leaves this command
+line signed in too.
 
 `drop2run where` says which source is in force without printing the token, so "why is it using the wrong
 account" is answerable in an issue report or a CI log.

package/dist/index.js

@@ -1,10 +1,10 @@
 import { join, dirname, relative, sep, resolve } from "node:path";
 import { readFileSync, writeFileSync, chmodSync, renameSync, mkdirSync } from "node:fs";
 import { homedir, hostname } from "node:os";
-import { realpath, readdir, stat, readFile } from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { randomBytes, createHash } from "node:crypto";
 import { createServer } from "node:http";
+import { realpath, readdir, stat, readFile } from "node:fs/promises";
 async function call(credentials, path, init2 = {}) {
   const response = await fetch(`${credentials.apiBaseUrl}/${path}`, {
     ...init2,
@@ -125,20 +125,188 @@ function clearToken(path = configPath()) {
   renameSync(temporary, path);
   return true;
 }
-function missingCredentialsMessage() {
-  return [
-    "No Drop2Run access token.",
-    "",
-    "Run `drop2run login` to sign in through a browser, which stores one for you.",
+function missingCredentialsMessage(surface = "cli") {
+  const signIn = surface === "mcp" ? [
+    "Call the `login` tool to sign in through a browser, which stores a token.",
     "",
+    "Where no browser can be opened on this machine — a container, a remote host — call",
+    "`login_code` instead and pass on the short code it gives you."
+  ] : ["Run `drop2run login` to sign in through a browser, which stores one for you."];
+  const byHand = surface === "mcp" ? [
+    "To set one without signing in here, create a token at",
+    "https://dropto.run/account/tokens and either:",
+    `  - put it in ${configPath()} as {"token": "d2r_..."}, which this`,
+    "    server reads on every call and needs no restart, or",
+    `  - set ${TOKEN_VARIABLE} in the environment and restart this server, since it reads`,
+    "    the environment it was started in."
+  ] : [
     "For CI, or where no browser can be opened, create a token at",
     "https://dropto.run/account/tokens and either:",
     `  - set ${TOKEN_VARIABLE} in the environment, or`,
-    `  - put it in ${configPath()} as {"token": "d2r_..."}`,
+    `  - put it in ${configPath()} as {"token": "d2r_..."}`
+  ];
+  return [
+    "No Drop2Run access token.",
+    "",
+    ...signIn,
+    "",
+    ...byHand,
     "",
     "The token is shown once when it is created and cannot be recovered afterwards."
   ].join("\n");
 }
+const TIMEOUT_MS = 5 * 60 * 1e3;
+function newAttempt() {
+  const verifier = randomBytes(32).toString("base64url");
+  return {
+    verifier,
+    challenge: createHash("sha256").update(verifier).digest("base64url"),
+    state: randomBytes(16).toString("base64url")
+  };
+}
+function clientName(surface) {
+  const clean2 = (value) => value.trim().replace(/[^A-Za-z0-9._-]/g, "-");
+  const label = "";
+  const raw = clean2(hostname()).slice(0, 64 - label.length);
+  return `${raw === "" ? "drop2run" : raw}${label}`;
+}
+function openBrowser(url) {
+  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn(command, [...args], { stdio: "ignore", detached: true });
+    child.unref();
+    child.on("error", () => {
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function listen(state) {
+  return new Promise((resolveListener, rejectListener) => {
+    let settle = null;
+    let fail = null;
+    const received = new Promise((resolveCode, rejectCode) => {
+      settle = resolveCode;
+      fail = rejectCode;
+    });
+    const server = createServer((request2, response) => {
+      const url = new URL(request2.url ?? "/", "http://127.0.0.1");
+      if (url.pathname !== "/cb") {
+        response.writeHead(404, { "Content-Type": "text/plain" });
+        response.end("Not found.\n");
+        return;
+      }
+      const code = url.searchParams.get("code") ?? "";
+      const returned = url.searchParams.get("state") ?? "";
+      if (returned !== state || code === "") {
+        respond(
+          response,
+          400,
+          "Sign-in could not be completed",
+          "This did not come from the sign-in that was started here. Nothing has been changed."
+        );
+        fail?.(new Error("The browser returned a response that did not match this sign-in."));
+        return;
+      }
+      respond(response, 200, "Signed in", "You can close this tab now.");
+      settle?.({ code });
+    });
+    server.on("error", (error) => {
+      rejectListener(error);
+      fail?.(error instanceof Error ? error : new Error(String(error)));
+    });
+    server.listen(0, "127.0.0.1", () => {
+      const address = server.address();
+      if (address === null) {
+        rejectListener(new Error("Could not open a local port to receive the sign-in."));
+        return;
+      }
+      resolveListener({
+        port: address.port,
+        received,
+        close: () => server.close()
+      });
+    });
+  });
+}
+function respond(response, status, title, detail) {
+  response.writeHead(status, { "Content-Type": "text/html; charset=utf-8" });
+  response.end(
+    `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${title} — drop2run</title><style>body{font:16px/1.6 system-ui,sans-serif;margin:20vh auto;max-width:28rem;padding:0 1.5rem;color:#12211f}h1{font-size:1.4rem;margin:0 0 .5rem}p{margin:0;color:#64706e}@media(prefers-color-scheme:dark){body{background:#0d1413;color:#e8efee}p{color:#9aa8a6}}</style></head><body><h1>${title}</h1><p>${detail}</p></body></html>
+`
+  );
+}
+async function waitForCallback(received, timeoutMs = TIMEOUT_MS) {
+  let timer;
+  try {
+    return await Promise.race([
+      received,
+      new Promise((_, reject) => {
+        timer = setTimeout(
+          () => reject(new Error("Timed out waiting for the browser. Nothing has been changed.")),
+          timeoutMs
+        );
+      })
+    ]);
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+  }
+}
+function consentUrl(dashboardUrl, attempt, port, name) {
+  const url = new URL("/cli-auth", dashboardUrl);
+  url.searchParams.set("challenge", attempt.challenge);
+  url.searchParams.set("state", attempt.state);
+  url.searchParams.set("port", String(port));
+  url.searchParams.set("name", name);
+  return url.toString();
+}
+async function startDevice(apiBaseUrl, clientName2) {
+  const response = await fetch(`${apiBaseUrl}/auth/cli/device`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ clientName: clientName2 })
+  });
+  if (!response.ok) throw new Error(await problemDetail(response));
+  return await response.json();
+}
+async function pollDevice(apiBaseUrl, deviceCode) {
+  let response;
+  try {
+    response = await fetch(`${apiBaseUrl}/auth/cli/device/token`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ deviceCode })
+    });
+  } catch {
+    return { state: "pending" };
+  }
+  if (response.ok) {
+    const body = await response.json();
+    return { state: "granted", token: { token: body.token, name: body.name, email: body.email } };
+  }
+  const problem = await response.json().catch(() => null);
+  if (problem?.type === "authorization_pending") return { state: "pending" };
+  if (problem?.type === "slow_down") return { state: "slow_down" };
+  return {
+    state: "dead",
+    message: problem?.detail ?? `The API answered ${response.status}.`
+  };
+}
+async function problemDetail(response) {
+  const problem = await response.json().catch(() => null);
+  return problem?.detail ?? `The API answered ${response.status}.`;
+}
+async function exchange(apiBaseUrl, code, verifier) {
+  const response = await fetch(`${apiBaseUrl}/auth/cli/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ code, verifier })
+  });
+  if (!response.ok) throw new Error(await problemDetail(response));
+  const body = await response.json();
+  return { token: body.token, name: body.name, email: body.email };
+}
 const PROJECT_FILE = "drop2run.json";
 function projectPath(directory = process.cwd()) {
   return join(directory, PROJECT_FILE);
@@ -299,6 +467,56 @@ function isDocumentPath(path) {
   const lower = path.toLowerCase();
   return DOCUMENT_EXTENSIONS.some((extension) => lower.endsWith(extension));
 }
+const VIEWABLE_EXTENSIONS = [
+  // Documents — these also count at any depth, via DOCUMENT_EXTENSIONS.
+  ".md",
+  ".markdown",
+  ".pdf",
+  // Prose the reader shows preformatted.
+  ".txt",
+  ".log",
+  ".csv",
+  // Source the reader shows with highlighting.
+  ".json",
+  ".yaml",
+  ".yml",
+  ".toml",
+  ".css",
+  ".js",
+  ".ts",
+  ".tsx",
+  ".jsx",
+  ".sh",
+  ".xml",
+  // Pictures the reader shows with an img element.
+  ".png",
+  ".jpg",
+  ".jpeg",
+  ".gif",
+  ".webp",
+  ".avif",
+  ".svg",
+  ".ico",
+  // See the note above: a floor for a caller that did not rename it.
+  ".html",
+  ".htm"
+];
+function isViewablePath(path) {
+  const lower = path.toLowerCase();
+  return VIEWABLE_EXTENSIONS.some((extension) => lower.endsWith(extension));
+}
+function canPublish(paths) {
+  if (paths.some((path) => path === REQUIRED_INDEX)) return true;
+  if (paths.some(isDocumentPath)) return true;
+  return paths.length === 1 && paths[0] !== void 0 && isViewablePath(paths[0]);
+}
+function renameOfLoneHtmlPage(paths) {
+  if (paths.length !== 1) return null;
+  const [only] = paths;
+  if (only === void 0 || only === REQUIRED_INDEX) return null;
+  const lower = only.toLowerCase();
+  return lower.endsWith(".html") || lower.endsWith(".htm") ? only : null;
+}
 function formatBytes(bytes) {
   if (bytes < 1024) return `${bytes} B`;
   if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
@@ -312,11 +530,10 @@ function checkLimits(files, limits) {
       "That drop contained no files to deploy. Folders like .git and node_modules are skipped."
     );
   }
-  const hasIndex = files.some((file) => file.path === REQUIRED_INDEX);
-  if (!hasIndex && !files.some((file) => isDocumentPath(file.path))) {
+  if (!canPublish(files.map((file) => file.path))) {
     throw new DeployError(
       ClientErrorCode.MissingIndex,
-      `A site needs an ${REQUIRED_INDEX} at its top level, or at least one .md or .pdf file to publish as a documents site. Drop the folder that contains it, not the folder above.`
+      `A site needs an ${REQUIRED_INDEX} at its top level, or at least one .md or .pdf file to publish as a documents site — or be a single file that can be displayed on its own, such as a note, a PDF, a page or an image. Drop the folder that contains it, not the folder above.`
     );
   }
   if (!limits) return;
@@ -327,9 +544,7 @@ function checkLimits(files, limits) {
       { limit: limits.maxFiles, actual: files.length }
     );
   }
-  const oversized = files.find(
-    (file) => file.bytes.length > limits.maxFileBytes
-  );
+  const oversized = files.find((file) => file.bytes.length > limits.maxFileBytes);
   if (oversized) {
     throw new DeployError(
       ClientErrorCode.FileTooLarge,
@@ -558,8 +773,10 @@ function asDeployError(error) {
 }
 async function deploy(source, siteId, onProgress, signal, options = {}) {
   try {
-    const files = await source(signal);
-    onProgress({ type: "collecting", files: files.length });
+    const collected = await source(signal);
+    onProgress({ type: "collecting", files: collected.length });
+    const rename = renameOfLoneHtmlPage(collected.map((file) => file.path));
+    const files = rename === null ? collected : collected.map((file) => file.path === rename ? { ...file, path: "index.html" } : file);
     const hashed = await hashAll(
       files,
       (done, total) => onProgress({ type: "hashing", done, total }),
@@ -694,156 +911,6 @@ async function publish(credentials, source, site) {
 function publishDirectory(credentials, directory, site) {
   return publish(credentials, directorySource(directory), site);
 }
-const TIMEOUT_MS = 5 * 60 * 1e3;
-function newAttempt() {
-  const verifier = randomBytes(32).toString("base64url");
-  return {
-    verifier,
-    challenge: createHash("sha256").update(verifier).digest("base64url"),
-    state: randomBytes(16).toString("base64url")
-  };
-}
-function clientName() {
-  const raw = hostname().trim().replace(/[^A-Za-z0-9._-]/g, "-").slice(0, 64);
-  return raw === "" ? "drop2run-cli" : raw;
-}
-function openBrowser(url) {
-  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    const child = spawn(command, [...args], { stdio: "ignore", detached: true });
-    child.unref();
-    child.on("error", () => {
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function listen(state) {
-  return new Promise((resolveListener, rejectListener) => {
-    let settle = null;
-    let fail = null;
-    const received = new Promise((resolveCode, rejectCode) => {
-      settle = resolveCode;
-      fail = rejectCode;
-    });
-    const server = createServer((request2, response) => {
-      const url = new URL(request2.url ?? "/", "http://127.0.0.1");
-      if (url.pathname !== "/cb") {
-        response.writeHead(404, { "Content-Type": "text/plain" });
-        response.end("Not found.\n");
-        return;
-      }
-      const code = url.searchParams.get("code") ?? "";
-      const returned = url.searchParams.get("state") ?? "";
-      if (returned !== state || code === "") {
-        respond(
-          response,
-          400,
-          "Sign-in could not be completed",
-          "This did not come from the sign-in that was started here. Nothing has been changed."
-        );
-        fail?.(new Error("The browser returned a response that did not match this sign-in."));
-        return;
-      }
-      respond(response, 200, "Signed in", "You can close this tab and go back to the terminal.");
-      settle?.({ code });
-    });
-    server.on("error", (error) => {
-      rejectListener(error);
-      fail?.(error instanceof Error ? error : new Error(String(error)));
-    });
-    server.listen(0, "127.0.0.1", () => {
-      const address = server.address();
-      if (address === null) {
-        rejectListener(new Error("Could not open a local port to receive the sign-in."));
-        return;
-      }
-      resolveListener({
-        port: address.port,
-        received,
-        close: () => server.close()
-      });
-    });
-  });
-}
-function respond(response, status, title, detail) {
-  response.writeHead(status, { "Content-Type": "text/html; charset=utf-8" });
-  response.end(
-    `<!doctype html><html lang="en"><head><meta charset="utf-8"><title>${title} — drop2run</title><style>body{font:16px/1.6 system-ui,sans-serif;margin:20vh auto;max-width:28rem;padding:0 1.5rem;color:#12211f}h1{font-size:1.4rem;margin:0 0 .5rem}p{margin:0;color:#64706e}@media(prefers-color-scheme:dark){body{background:#0d1413;color:#e8efee}p{color:#9aa8a6}}</style></head><body><h1>${title}</h1><p>${detail}</p></body></html>
-`
-  );
-}
-async function waitForCallback(received, timeoutMs = TIMEOUT_MS) {
-  let timer;
-  try {
-    return await Promise.race([
-      received,
-      new Promise((_, reject) => {
-        timer = setTimeout(
-          () => reject(new Error("Timed out waiting for the browser. Nothing has been changed.")),
-          timeoutMs
-        );
-      })
-    ]);
-  } finally {
-    if (timer !== void 0) clearTimeout(timer);
-  }
-}
-function consentUrl(dashboardUrl, attempt, port, name) {
-  const url = new URL("/cli-auth", dashboardUrl);
-  url.searchParams.set("challenge", attempt.challenge);
-  url.searchParams.set("state", attempt.state);
-  url.searchParams.set("port", String(port));
-  url.searchParams.set("name", name);
-  return url.toString();
-}
-async function startDevice(apiBaseUrl, clientName2) {
-  const response = await fetch(`${apiBaseUrl}/auth/cli/device`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ clientName: clientName2 })
-  });
-  if (!response.ok) throw new Error(await problemDetail(response));
-  return await response.json();
-}
-async function pollDevice(apiBaseUrl, deviceCode) {
-  let response;
-  try {
-    response = await fetch(`${apiBaseUrl}/auth/cli/device/token`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ deviceCode })
-    });
-  } catch {
-    return { state: "pending" };
-  }
-  if (response.ok) {
-    const body = await response.json();
-    return { state: "granted", token: { token: body.token, name: body.name, email: body.email } };
-  }
-  const problem = await response.json().catch(() => null);
-  if (problem?.type === "authorization_pending") return { state: "pending" };
-  if (problem?.type === "slow_down") return { state: "slow_down" };
-  return {
-    state: "dead",
-    message: problem?.detail ?? `The API answered ${response.status}.`
-  };
-}
-async function problemDetail(response) {
-  const problem = await response.json().catch(() => null);
-  return problem?.detail ?? `The API answered ${response.status}.`;
-}
-async function exchange(apiBaseUrl, code, verifier) {
-  const response = await fetch(`${apiBaseUrl}/auth/cli/token`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ code, verifier })
-  });
-  if (!response.ok) throw new Error(await problemDetail(response));
-  const body = await response.json();
-  return { token: body.token, name: body.name, email: body.email };
-}
 function failure(text) {
   return { text, json: { error: text }, code: 1 };
 }
@@ -1191,7 +1258,7 @@ async function run(argv) {
   const positional = argv.filter((argument) => !argument.startsWith("-"));
   const [command, ...rest] = positional;
   if (argv.includes("--version")) {
-    const { version } = await import("./package-RiuDiPsO.js").then(
+    const { version } = await import("./package-D-UHpX_a.js").then(
       (module) => module.default
     );
     return { text: version, json: { version }, code: 0 };

package/dist/{package-RiuDiPsO.js → package-D-UHpX_a.js}

@@ -1,5 +1,5 @@
 const name = "drop2run";
-const version = "0.1.2";
+const version = "0.2.1";
 const description = "Publish a static site to Drop2Run from the command line.";
 const license = "MIT";
 const type = "module";
@@ -8,7 +8,9 @@ const files = ["bin", "dist"];
 const engines = { "node": ">=20" };
 const publishConfig = { "access": "public" };
 const homepage = "https://dropto.run";
-const keywords = ["static-site", "deploy", "hosting", "cli"];
+const repository = { "type": "git", "url": "git+https://github.com/Drop-to-run/drop2run-cli.git" };
+const bugs = { "url": "https://github.com/Drop-to-run/drop2run-cli/issues" };
+const keywords = ["static-site", "deploy", "hosting", "cli", "ai", "claude", "agent", "llm"];
 const scripts = { "prepublishOnly": "npm run build && npm test", "build": "vite build", "typecheck": "tsc --noEmit", "test": "vitest run", "lint": "biome check .", "format": "biome check --write ." };
 const devDependencies = { "@biomejs/biome": "^2.5.11", "@types/node": "^26.4.0", "typescript": "^5.9.3", "vite": "^7.2.1", "vitest": "^4.1.11" };
 const _package = {
@@ -22,12 +24,15 @@ const _package = {
   engines,
   publishConfig,
   homepage,
+  repository,
+  bugs,
   keywords,
   scripts,
   devDependencies
 };
 export {
   bin,
+  bugs,
   _package as default,
   description,
   devDependencies,
@@ -38,6 +43,7 @@ export {
   license,
   name,
   publishConfig,
+  repository,
   scripts,
   type,
   version

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "drop2run",
-	"version": "0.1.2",
+	"version": "0.2.1",
 	"description": "Publish a static site to Drop2Run from the command line.",
 	"license": "MIT",
 	"type": "module",
@@ -18,11 +18,22 @@
 		"access": "public"
 	},
 	"homepage": "https://dropto.run",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/Drop-to-run/drop2run-cli.git"
+	},
+	"bugs": {
+		"url": "https://github.com/Drop-to-run/drop2run-cli/issues"
+	},
 	"keywords": [
 		"static-site",
 		"deploy",
 		"hosting",
-		"cli"
+		"cli",
+		"ai",
+		"claude",
+		"agent",
+		"llm"
 	],
 	"scripts": {
 		"prepublishOnly": "npm run build && npm test",