fabrica-e-commerce 0.1.4 → 0.1.5

package/README.md

@@ -38,7 +38,7 @@ On Windows CMD, these commands do not require Unix tools such as `find` or `xarg
 
 ## Commands
 
-- `build` — checks dependencies (git, GitHub CLI, Vercel CLI), creates a Fabrica Connect Supabase job, opens the OAuth bridge, asks for required secrets, clones `https://github.com/trucount/fabrica-final-e-c.git`, verifies/logs in to Vercel (`vercel login`), pushes that code to a **new GitHub repository** under your account, connects the Vercel project to that repo for continuous deployment, writes every environment variable to production/preview/development, and deploys with `vercel --prod`.
+- `build` — checks dependencies (git, GitHub CLI, Vercel CLI), creates a Fabrica Connect Supabase job, opens the OAuth bridge, asks for required secrets, clones `https://github.com/trucount/fabrica-final-e-c.git`, verifies/logs in to Vercel (`vercel login`), publishes that code to a **new GitHub repository** under your account, connects the Vercel project to that repo for continuous deployment, writes every environment variable to production/preview/development, and deploys with `vercel --prod`.
 - `list` — shows locally saved deployments and lets you replace a saved project's Vercel environment variable (across production, preview, and development), then redeploys.
 - `vins` — verifies the CLI's external dependencies (`git`, GitHub CLI `gh`, and the Vercel CLI via `npx`) and automatically installs anything missing using your system's package manager (`apt-get`/`dnf`/`pacman` on Linux, `brew` on macOS, `winget`/`choco` on Windows). Prints manual install links for anything it can't install automatically.
 - `info` / `.info` — prints package, bridge, repository, and local data paths.
@@ -62,7 +62,7 @@ On Windows CMD, these commands do not require Unix tools such as `find` or `xarg
 5. Adds `SUPABASE_URL` and `SUPABASE_ANON_KEY` from the bridge response.
 6. **Step 3 — deploy:**
    - Verifies you're logged in to Vercel (`vercel whoami`); if not, runs an interactive `vercel login` and waits for it to finish.
-   - Logs in to the GitHub CLI if needed (`gh auth login`), detaches the cloned code from the template's git history, and pushes it to a **brand new private GitHub repository** under your account via `gh repo create --source . --push`.
+   - Logs in to the GitHub CLI if needed (`gh auth login`), detaches the cloned code from the template's git history, and publishes it to a **brand new private GitHub repository** under your account using the GitHub API, avoiding separate `git push` credential prompts.
    - Links a new Vercel project with `vercel link --yes --project <name>` and connects it to the new GitHub repo with `vercel git connect` so future pushes auto-deploy.
    - Writes every collected environment variable (including the Supabase URL/anon key) to the **production, preview, and development** environments with `vercel env add`, so the values are permanent for the project, not just the first deploy.
    - Creates the production deployment with `vercel --prod --yes`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fabrica-e-commerce",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Orange themed CMD launcher for deploying Fabrica e-commerce stores with Supabase and Vercel.",
   "type": "module",
   "bin": {

package/src/github.js

@@ -1,3 +1,5 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
 import process from 'node:process';
 import { commandExists, runCommand, runCommandCapture } from './system.js';
 import { choose } from './prompt.js';
@@ -35,12 +37,12 @@ export async function ensureGithubLogin() {
     kv('GitHub', 'Logged in');
   }
 
-  const gitSpin = spinner('Configuring GitHub credentials for git push');
+  const gitSpin = spinner('Configuring GitHub API credentials');
   if (await setupGithubGitCredentials()) {
-    gitSpin.succeed('GitHub credentials ready for git push');
+    gitSpin.succeed('GitHub API credentials ready');
   } else {
     gitSpin.fail('Could not configure GitHub git credentials automatically');
-    console.log('If git push asks for credentials, complete the prompt or run: gh auth setup-git');
+    console.log('Continuing with GitHub API publishing; if Git later asks for credentials, run: gh auth setup-git');
   }
 }
 
@@ -59,7 +61,7 @@ async function ensureGithubRepo(owner, repoName) {
   const fullName = `${owner}/${repoName}`;
   if (await githubRepoExists(owner, repoName)) {
     const action = await choose(`GitHub repo ${fullName} already exists. What should Fabrica do?`, [
-      { name: 'Use the existing repo and push this storefront to it', value: 'use' },
+      { name: 'Use the existing repo and publish this storefront to it', value: 'use' },
       { name: 'Stop so I can choose a different Vercel project/repo name', value: 'stop' }
     ]);
     if (action === 'stop') throw new Error(`GitHub repo ${fullName} already exists. Re-run build with a different project name.`);
@@ -84,41 +86,65 @@ async function setOrigin(project, repoUrl) {
   }
 }
 
-async function pushWithCredentialFallback(project) {
-  const spin = spinner('Pushing storefront to GitHub');
-  let push = await runCommandCapture('git', ['push', '-u', 'origin', 'main'], { cwd: project.target });
-  if (push.code === 0) {
-    spin.succeed('Pushed storefront to GitHub');
-    return;
-  }
 
-  spin.fail('Initial git push failed');
-  console.log('GitHub rejected the push credentials. Re-configuring GitHub CLI credentials and retrying...');
-  await setupGithubGitCredentials();
-  push = await runCommandCapture('git', ['push', '-u', 'origin', 'main'], { cwd: project.target });
-  if (push.code === 0) {
-    kv('GitHub push', 'Succeeded after refreshing credentials');
-    return;
+async function ghApiJson(args, body) {
+  const result = await runCommandCapture('gh', ['api', ...args, '--input', '-'], { input: JSON.stringify(body) });
+  if (result.code !== 0) throw new Error(result.stderr || result.stdout || `gh api ${args.join(' ')} failed`);
+  return result.stdout ? JSON.parse(result.stdout) : {};
+}
+
+async function ghApiGet(args) {
+  const result = await runCommandCapture('gh', ['api', ...args]);
+  if (result.code !== 0) return null;
+  return result.stdout ? JSON.parse(result.stdout) : {};
+}
+
+async function listTrackedFiles(project) {
+  const result = await runCommandCapture('git', ['ls-files', '-z'], { cwd: project.target });
+  if (result.code !== 0) throw new Error(result.stderr || 'Could not list storefront files for GitHub upload.');
+  return result.stdout.split('\0').filter(Boolean);
+}
+
+async function createGithubBlob(project, owner, repoName, filePath) {
+  const absolute = path.join(project.target, filePath);
+  const content = await fs.readFile(absolute);
+  const blob = await ghApiJson([`repos/${owner}/${repoName}/git/blobs`], {
+    content: content.toString('base64'),
+    encoding: 'base64'
+  });
+  return { path: filePath.replace(/\\/g, '/'), mode: '100644', type: 'blob', sha: blob.sha };
+}
+
+async function publishWithGithubApi(project, owner, repoName) {
+  const spin = spinner('Publishing storefront through GitHub API');
+  const files = await listTrackedFiles(project);
+  const treeItems = [];
+  for (const filePath of files) {
+    treeItems.push(await createGithubBlob(project, owner, repoName, filePath));
   }
 
-  console.log(push.stderr || push.stdout || 'git push failed');
-  const action = await choose('GitHub push still needs authentication. What should Fabrica do?', [
-    { name: 'Open GitHub login again, then retry push', value: 'login' },
-    { name: 'Stop so I can fix GitHub credentials manually', value: 'stop' }
-  ]);
-  if (action === 'login') {
-    await runCommand('gh', ['auth', 'login', '--hostname', 'github.com', '--git-protocol', 'https', '--web']);
-    await setupGithubGitCredentials();
-    await runCommand('git', ['push', '-u', 'origin', 'main'], { cwd: project.target });
-    kv('GitHub push', 'Succeeded after login');
-    return;
+  const tree = await ghApiJson([`repos/${owner}/${repoName}/git/trees`], { tree: treeItems });
+
+  const existingRef = await ghApiGet([`repos/${owner}/${repoName}/git/ref/heads/main`]);
+  const parents = existingRef?.object?.sha ? [existingRef.object.sha] : [];
+  const commit = await ghApiJson([`repos/${owner}/${repoName}/git/commits`], {
+    message: 'Initial commit from Fabrica storefront',
+    tree: tree.sha,
+    parents
+  });
+
+  if (existingRef?.ref) {
+    await ghApiJson([`repos/${owner}/${repoName}/git/refs/heads/main`, '--method', 'PATCH'], { sha: commit.sha, force: true });
+  } else {
+    await ghApiJson([`repos/${owner}/${repoName}/git/refs`], { ref: 'refs/heads/main', sha: commit.sha });
   }
-  throw new Error('GitHub push failed. Run "gh auth setup-git" or "gh auth login", then rerun build.');
+  spin.succeed('Published storefront to GitHub without git push');
 }
 
+
 // Re-homes the cloned storefront code into a brand new GitHub repository
 // owned by the logged-in user, so the deployed Vercel project can stay
-// connected to that repo (git push -> auto deploy) instead of the original
+// connected to that repo (future changes can auto deploy) instead of the original
 // template repository.
 export async function createGithubRepoFromClone(project) {
   section('GitHub repository');
@@ -140,7 +166,7 @@ export async function createGithubRepoFromClone(project) {
 
   await ensureGithubRepo(owner, repoName);
   await setOrigin(project, repoUrl);
-  await pushWithCredentialFallback(project);
+  await publishWithGithubApi(project, owner, repoName);
 
   const browserUrl = `https://github.com/${owner}/${repoName}`;
   kv('GitHub repo', browserUrl);

package/src/system.js

@@ -46,6 +46,7 @@ export function runCommandCapture(command, args, options = {}) {
     let child;
     try {
       child = spawn(executable(command), args, spawnOptions(command, options, 'pipe'));
+      if (options.input) child.stdin.end(options.input);
     } catch (error) {
       resolve({ code: null, stdout: '', stderr: '', error });
       return;

package/src/ui.js

@@ -21,7 +21,7 @@ export function help() {
   banner();
   console.log(`
 ${orange('Commands')}
-  ${bold('build')}      Connect Supabase, collect secrets, clone the store, push to a new GitHub repo, deploy to Vercel
+  ${bold('build')}      Connect Supabase, collect secrets, clone the store, publish to a new GitHub repo, deploy to Vercel
   ${bold('list')}       Show deployed Fabrica projects and edit env variables
   ${bold('vins')}       Verify CLI dependencies (git, gh, vercel) and auto-install anything missing
   ${bold('info')}       Show package, bridge, repo, and local storage information