mdpush 1.3.0 → 1.4.0

package/assets/SKILL.md

@@ -1,18 +1,25 @@
 ---
 name: mdpush
-description: Push markdown, text, and HTML artifact files to Preview Reader / sielay server. Use when user wants to upload .md/.txt files to their docs portal OR when user wants to host/share a self-contained HTML artifact (spec, review, design, report, playground).
+description: Push markdown, text, HTML, and PDF files to Preview Reader / sielay server. Use when user wants to upload .md/.txt/.pdf files to their docs portal OR when user wants to host/share a self-contained HTML artifact (spec, review, design, report, playground).
+metadata:
+  category: preview
+  example: "/mdpush design.html --type design  ·  /mdpush report.pdf"
+  deps: "Config: ~/.mdpush.json con { server, token, defaultProject }. Token desde Preview Reader > API Tokens. Nunca commitear ese archivo. Script: scripts/push.sh."
+  installs: []
+  risk: none
 ---
 
-# mdpush — Push Markdown and HTML Artifacts to Preview Reader
+# mdpush — Push Markdown, HTML, and PDF Artifacts to Preview Reader
 
-Push `.md`, `.txt`, and `.html` files from the current project to a Preview Reader server. HTML files are hosted at `/v/:sid` as sandboxed artifacts with an optional type tag.
+Push `.md`, `.txt`, `.html`, and `.pdf` files from the current project to a Preview Reader server. HTML files are hosted at `/v/:sid` as sandboxed artifacts with an optional type tag; PDFs render in the native viewer at `/v/:sid` (uploaded as binary artifacts via `?contentType=pdf`).
 
 ## Usage
 
 ```
 /mdpush <files...>                                 # Push to default project
 /mdpush -p <project-slug> <files...>               # Push to specific project
-/mdpush -f <folder> <files...>                     # Push to subfolder within project (md/txt only)
+/mdpush -f <folder> <files...>                     # Push to subfolder within project (md/txt/pdf)
+/mdpush report.pdf                                  # Upload a PDF to the native viewer
 /mdpush design.html --type design                  # Upload HTML artifact with type tag
 /mdpush spec.html report.md --type spec            # Mix: HTML gets type, .md does not
 ```

package/assets/scripts/push.sh

@@ -181,13 +181,15 @@ for FILE in "${FILES[@]}"; do
   fi
 
   BASENAME=$(basename "$FILE")
-  EXT="${BASENAME##*.}"
+  # Lowercase the extension so branch logic (html/pdf) and the whitelist are
+  # case-insensitive (.PDF, .HTML, .MD all normalize here).
+  EXT=$(printf '%s' "${BASENAME##*.}" | tr '[:upper:]' '[:lower:]')
 
-  # Extension whitelist: md, txt, html
+  # Extension whitelist: md, txt, html, pdf
   case "$EXT" in
-    md|txt|html) ;;
+    md|txt|html|pdf) ;;
     *)
-      echo "SKIP: $BASENAME (unsupported extension — use .md, .txt, or .html)"
+      echo "SKIP: $BASENAME (unsupported extension — use .md, .txt, .html, or .pdf)"
       continue
       ;;
   esac
@@ -300,8 +302,18 @@ for FILE in "${FILES[@]}"; do
       FAILED=$((FAILED + 1))
     fi
 
-  # --- Markdown / text path: original behavior ---
+  # --- Markdown / text / PDF path ---
   else
+    # PDF uploads to the same endpoint but must declare ?contentType=pdf (so the
+    # server tags it as a binary artifact, not markdown); md/txt keep the shared
+    # ?folder query. Folder, when given, is appended in the matching form.
+    if [ "$EXT" = "pdf" ]; then
+      NONHTML_QUERY="?contentType=pdf"
+      [ -n "$FOLDER" ] && NONHTML_QUERY="${NONHTML_QUERY}&folder=${ENCODED_FOLDER}"
+    else
+      NONHTML_QUERY="$FOLDER_QUERY"
+    fi
+
     t_pre_curl=$(_now_ms)
     RESPONSE=$(curl -s -w "\n%{http_code}" \
       --max-time 60 \
@@ -309,7 +321,7 @@ for FILE in "${FILES[@]}"; do
       -H "Authorization: Bearer $TOKEN" \
       -H "X-Requested-With: XMLHttpRequest" \
       -F "files=@$FILE" \
-      "${SERVER}/api/projects/${PROJECT}/upload${FOLDER_QUERY}") || {
+      "${SERVER}/api/projects/${PROJECT}/upload${NONHTML_QUERY}") || {
         t_post_curl=$(_now_ms)
         t_end=$(_now_ms)
         TS=$(date -u +%Y-%m-%dT%H:%M:%S.000Z 2>/dev/null || date -u +%Y-%m-%dT%H:%M:%SZ)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mdpush",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "type": "module",
   "engines": {
     "node": ">=20.0.0"

package/src/commands/setup-command.js

@@ -15,7 +15,7 @@ export async function setupCommand() {
     type: 'text',
     name: 'server',
     message: 'Server URL',
-    initial: 'https://docs.sielay.cloud'
+    initial: 'https://sielay.cloud'
   })
   if (!server) { console.log(chalk.red('Setup cancelled.')); return }
 

package/src/commands/skill-command.js

@@ -4,6 +4,7 @@ import os from 'os'
 import chalk from 'chalk'
 import ora from 'ora'
 import { apiRequest } from '../lib/api-request.js'
+import { publicRequest, resolvePublicServer } from '../lib/public-request.js'
 
 /**
  * `mdpush skill push <dir>` / `mdpush skill install <slug>` — publish a Claude
@@ -114,9 +115,21 @@ export async function skillInstallCommand(slugs, options) {
 }
 
 /** Install one skill. `?source=cli-install` marks a real install so the
- * server bumps install_count (detail-page manifest fetches don't). */
+ * server bumps install_count (detail-page manifest fetches don't).
+ *
+ * With `options.public`, fetch anonymously from /public/skills (no login/token)
+ * — the aitmpl-style flow. Otherwise use the authenticated /api/skills path. */
 async function installOneSkill(slug, options) {
-  const manifestRes = await apiRequest(`/api/skills/${slug}/manifest?source=cli-install`)
+  const anon = !!options.public
+  const server = anon ? resolvePublicServer(options.server) : null
+  const fetchJson = anon
+    ? p => publicRequest(server, `/public/skills/${slug}${p}`)
+    : p => apiRequest(`/api/skills/${slug}${p}`)
+  const fetchFile = anon
+    ? encoded => publicRequest(server, `/public/skills/${slug}/download/${encoded}`)
+    : encoded => apiRequest(`/api/projects/${slug}/download/${encoded}`)
+
+  const manifestRes = await fetchJson('/manifest?source=cli-install')
   const manifest = await manifestRes.json()
 
   const dest = path.resolve(options.dest || path.join(os.homedir(), '.claude', 'skills', slug))
@@ -131,7 +144,7 @@ async function installOneSkill(slug, options) {
       const target = path.join(dest, f.path)
       if (!target.startsWith(dest + path.sep)) throw new Error('Unsafe path in manifest')
       const encoded = f.path.split('/').map(encodeURIComponent).join('/')
-      const res = await apiRequest(`/api/projects/${slug}/download/${encoded}`)
+      const res = await fetchFile(encoded)
       fs.mkdirSync(path.dirname(target), { recursive: true })
       fs.writeFileSync(target, Buffer.from(await res.arrayBuffer()))
       if (target.endsWith('.sh')) { try { fs.chmodSync(target, 0o755) } catch {} }
@@ -147,12 +160,59 @@ async function installOneSkill(slug, options) {
   if (failed) throw new Error(`${failed} file(s) failed`)
 }
 
-/** List published skills. */
-export async function skillListCommand() {
+/** Fetch + print the catalog table. Returns the skills array (or []). */
+async function printCatalog({ numbered = false } = {}) {
   const res = await apiRequest('/api/skills')
   const skills = await res.json()
-  if (skills.length === 0) return console.log(chalk.yellow('No skills published.'))
-  for (const s of skills) {
-    console.log(`${chalk.cyan(s.slug.padEnd(24))} ${s.description || chalk.gray('(no description)')}`)
+  if (skills.length === 0) {
+    console.log(chalk.yellow('No skills published.'))
+    return []
+  }
+  skills.forEach((s, i) => {
+    const idx = numbered ? chalk.gray(`${String(i + 1).padStart(3)}. `) : ''
+    const cat = (s.category || '—').padEnd(10)
+    const installs = String(s.installCount ?? 0).padStart(4)
+    const desc = (s.description || '(no description)').slice(0, 80)
+    console.log(`${idx}${chalk.cyan(s.slug.padEnd(24))} ${chalk.magenta(cat)} ${chalk.gray(`⤓${installs}`)}  ${desc}`)
+  })
+  return skills
+}
+
+/** List published skills (slug · category · installs · description). */
+export async function skillListCommand() {
+  await printCatalog()
+}
+
+/**
+ * Interactive browse (`mdpush skill` with no subcommand) — numbered catalog,
+ * pick by number/comma list, installs the selection. Zero-dependency prompt
+ * via node:readline; falls back to plain list when stdin isn't a TTY.
+ */
+export async function skillBrowseCommand() {
+  const skills = await printCatalog({ numbered: true })
+  if (skills.length === 0 || !process.stdin.isTTY) return
+
+  const readline = await import('node:readline/promises')
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout })
+  // Race against 'close' — an EOF on stdin (Ctrl-D, piped input running dry)
+  // would otherwise leave the question promise pending forever.
+  const answer = (await Promise.race([
+    rl.question(chalk.blue('\nInstall which? (numbers, comma-separated — empty to exit): ')),
+    new Promise(resolve => rl.once('close', () => resolve('')))
+  ])).trim()
+  rl.close()
+  // A TTY stdin touched by readline keeps the event loop alive after close —
+  // exit explicitly on every path (install failures already exit(1) upstream).
+  if (!answer) process.exit(0)
+
+  const picks = [...new Set(answer.split(/[\s,]+/))]
+    .map(n => skills[parseInt(n, 10) - 1])
+    .filter(Boolean)
+    .map(s => s.slug)
+  if (picks.length === 0) {
+    console.log(chalk.yellow('No valid selection.'))
+    process.exit(2)
   }
+  await skillInstallCommand(picks, {})
+  process.exit(0)
 }

package/src/index.js

@@ -1,14 +1,18 @@
+import { createRequire } from 'module'
 import { program } from 'commander'
+
+// Single-source the CLI version from package.json (was hardcoded and stale)
+const pkg = createRequire(import.meta.url)('../package.json')
 import { loginCommand } from './commands/login-command.js'
 import { pushCommand } from './commands/push-command.js'
 import { configCommand } from './commands/config-command.js'
 import { logoutCommand } from './commands/logout-command.js'
-import { skillPushCommand, skillInstallCommand, skillListCommand } from './commands/skill-command.js'
+import { skillPushCommand, skillInstallCommand, skillListCommand, skillBrowseCommand } from './commands/skill-command.js'
 
 program
   .name('mdpush')
   .description('Push markdown, text, and HTML artifact files to sielay')
-  .version('1.1.0')
+  .version(pkg.version)
 
 program.command('login')
   .description('Authenticate with server')
@@ -25,6 +29,7 @@ program.command('push')
 
 const skill = program.command('skill')
   .description('Publish and install Claude Code skill bundles (projects with kind=skill)')
+  .action(skillBrowseCommand) // bare `mdpush skill` → interactive browse
 
 skill.command('push')
   .description('Push a skill directory (must contain SKILL.md) to the server')
@@ -36,6 +41,8 @@ skill.command('install')
   .description('Install published skills into ~/.claude/skills/<slug>')
   .argument('<slugs...>', 'Skill slug(s) — space or comma separated (see: mdpush skill list)')
   .option('-d, --dest <path>', 'Destination directory (single skill only)')
+  .option('--public', 'Install anonymously from /public/skills (no login required)')
+  .option('-s, --server <url>', 'Server URL for --public (default: stored config or https://docs.sielay.cloud)')
   .action(skillInstallCommand)
 
 skill.command('list')

package/src/lib/public-request.js

@@ -0,0 +1,29 @@
+import { readConfig } from './config-store.js'
+
+/** Default public sielay instance when neither --server nor a login config set one. */
+const DEFAULT_PUBLIC_SERVER = 'https://docs.sielay.cloud'
+
+/**
+ * Resolve the base server URL for anonymous (public) requests. Precedence:
+ * explicit --server → stored login config server → the default public host.
+ * No token is read or sent — these hit /public/* which needs no credential.
+ */
+export function resolvePublicServer(optServer) {
+  if (optServer) return optServer.replace(/\/$/, '')
+  const cfg = readConfig()
+  return (cfg.server || DEFAULT_PUBLIC_SERVER).replace(/\/$/, '')
+}
+
+/** Unauthenticated GET against a sielay /public/* path. */
+export async function publicRequest(server, path) {
+  const res = await fetch(`${server}${path}`)
+  if (!res.ok) {
+    // /public/* returns a uniform 404 for missing / not-public / kill-switch-off,
+    // so surface a single actionable message rather than guessing the cause.
+    if (res.status === 404) {
+      throw new Error('Not found (skill not public, or public skills disabled on this server)')
+    }
+    throw new Error(`HTTP ${res.status}`)
+  }
+  return res
+}