mdpush 1.3.1 → 1.4.0

package/assets/SKILL.md

@@ -1,18 +1,25 @@
 ---
 name: mdpush
-description: Push markdown, text, and HTML artifact files to Preview Reader / sielay server. Use when user wants to upload .md/.txt files to their docs portal OR when user wants to host/share a self-contained HTML artifact (spec, review, design, report, playground).
+description: Push markdown, text, HTML, and PDF files to Preview Reader / sielay server. Use when user wants to upload .md/.txt/.pdf files to their docs portal OR when user wants to host/share a self-contained HTML artifact (spec, review, design, report, playground).
+metadata:
+  category: preview
+  example: "/mdpush design.html --type design  ·  /mdpush report.pdf"
+  deps: "Config: ~/.mdpush.json con { server, token, defaultProject }. Token desde Preview Reader > API Tokens. Nunca commitear ese archivo. Script: scripts/push.sh."
+  installs: []
+  risk: none
 ---
 
-# mdpush — Push Markdown and HTML Artifacts to Preview Reader
+# mdpush — Push Markdown, HTML, and PDF Artifacts to Preview Reader
 
-Push `.md`, `.txt`, and `.html` files from the current project to a Preview Reader server. HTML files are hosted at `/v/:sid` as sandboxed artifacts with an optional type tag.
+Push `.md`, `.txt`, `.html`, and `.pdf` files from the current project to a Preview Reader server. HTML files are hosted at `/v/:sid` as sandboxed artifacts with an optional type tag; PDFs render in the native viewer at `/v/:sid` (uploaded as binary artifacts via `?contentType=pdf`).
 
 ## Usage
 
 ```
 /mdpush <files...>                                 # Push to default project
 /mdpush -p <project-slug> <files...>               # Push to specific project
-/mdpush -f <folder> <files...>                     # Push to subfolder within project (md/txt only)
+/mdpush -f <folder> <files...>                     # Push to subfolder within project (md/txt/pdf)
+/mdpush report.pdf                                  # Upload a PDF to the native viewer
 /mdpush design.html --type design                  # Upload HTML artifact with type tag
 /mdpush spec.html report.md --type spec            # Mix: HTML gets type, .md does not
 ```

package/assets/scripts/push.sh

@@ -181,13 +181,15 @@ for FILE in "${FILES[@]}"; do
   fi
 
   BASENAME=$(basename "$FILE")
-  EXT="${BASENAME##*.}"
+  # Lowercase the extension so branch logic (html/pdf) and the whitelist are
+  # case-insensitive (.PDF, .HTML, .MD all normalize here).
+  EXT=$(printf '%s' "${BASENAME##*.}" | tr '[:upper:]' '[:lower:]')
 
-  # Extension whitelist: md, txt, html
+  # Extension whitelist: md, txt, html, pdf
   case "$EXT" in
-    md|txt|html) ;;
+    md|txt|html|pdf) ;;
     *)
-      echo "SKIP: $BASENAME (unsupported extension — use .md, .txt, or .html)"
+      echo "SKIP: $BASENAME (unsupported extension — use .md, .txt, .html, or .pdf)"
       continue
       ;;
   esac
@@ -300,8 +302,18 @@ for FILE in "${FILES[@]}"; do
       FAILED=$((FAILED + 1))
     fi
 
-  # --- Markdown / text path: original behavior ---
+  # --- Markdown / text / PDF path ---
   else
+    # PDF uploads to the same endpoint but must declare ?contentType=pdf (so the
+    # server tags it as a binary artifact, not markdown); md/txt keep the shared
+    # ?folder query. Folder, when given, is appended in the matching form.
+    if [ "$EXT" = "pdf" ]; then
+      NONHTML_QUERY="?contentType=pdf"
+      [ -n "$FOLDER" ] && NONHTML_QUERY="${NONHTML_QUERY}&folder=${ENCODED_FOLDER}"
+    else
+      NONHTML_QUERY="$FOLDER_QUERY"
+    fi
+
     t_pre_curl=$(_now_ms)
     RESPONSE=$(curl -s -w "\n%{http_code}" \
       --max-time 60 \
@@ -309,7 +321,7 @@ for FILE in "${FILES[@]}"; do
       -H "Authorization: Bearer $TOKEN" \
       -H "X-Requested-With: XMLHttpRequest" \
       -F "files=@$FILE" \
-      "${SERVER}/api/projects/${PROJECT}/upload${FOLDER_QUERY}") || {
+      "${SERVER}/api/projects/${PROJECT}/upload${NONHTML_QUERY}") || {
         t_post_curl=$(_now_ms)
         t_end=$(_now_ms)
         TS=$(date -u +%Y-%m-%dT%H:%M:%S.000Z 2>/dev/null || date -u +%Y-%m-%dT%H:%M:%SZ)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mdpush",
-  "version": "1.3.1",
+  "version": "1.4.0",
   "type": "module",
   "engines": {
     "node": ">=20.0.0"

package/src/commands/setup-command.js

@@ -15,7 +15,7 @@ export async function setupCommand() {
     type: 'text',
     name: 'server',
     message: 'Server URL',
-    initial: 'https://docs.sielay.cloud'
+    initial: 'https://sielay.cloud'
   })
   if (!server) { console.log(chalk.red('Setup cancelled.')); return }
 

package/src/commands/skill-command.js

@@ -4,6 +4,7 @@ import os from 'os'
 import chalk from 'chalk'
 import ora from 'ora'
 import { apiRequest } from '../lib/api-request.js'
+import { publicRequest, resolvePublicServer } from '../lib/public-request.js'
 
 /**
  * `mdpush skill push <dir>` / `mdpush skill install <slug>` — publish a Claude
@@ -114,9 +115,21 @@ export async function skillInstallCommand(slugs, options) {
 }
 
 /** Install one skill. `?source=cli-install` marks a real install so the
- * server bumps install_count (detail-page manifest fetches don't). */
+ * server bumps install_count (detail-page manifest fetches don't).
+ *
+ * With `options.public`, fetch anonymously from /public/skills (no login/token)
+ * — the aitmpl-style flow. Otherwise use the authenticated /api/skills path. */
 async function installOneSkill(slug, options) {
-  const manifestRes = await apiRequest(`/api/skills/${slug}/manifest?source=cli-install`)
+  const anon = !!options.public
+  const server = anon ? resolvePublicServer(options.server) : null
+  const fetchJson = anon
+    ? p => publicRequest(server, `/public/skills/${slug}${p}`)
+    : p => apiRequest(`/api/skills/${slug}${p}`)
+  const fetchFile = anon
+    ? encoded => publicRequest(server, `/public/skills/${slug}/download/${encoded}`)
+    : encoded => apiRequest(`/api/projects/${slug}/download/${encoded}`)
+
+  const manifestRes = await fetchJson('/manifest?source=cli-install')
   const manifest = await manifestRes.json()
 
   const dest = path.resolve(options.dest || path.join(os.homedir(), '.claude', 'skills', slug))
@@ -131,7 +144,7 @@ async function installOneSkill(slug, options) {
       const target = path.join(dest, f.path)
       if (!target.startsWith(dest + path.sep)) throw new Error('Unsafe path in manifest')
       const encoded = f.path.split('/').map(encodeURIComponent).join('/')
-      const res = await apiRequest(`/api/projects/${slug}/download/${encoded}`)
+      const res = await fetchFile(encoded)
       fs.mkdirSync(path.dirname(target), { recursive: true })
       fs.writeFileSync(target, Buffer.from(await res.arrayBuffer()))
       if (target.endsWith('.sh')) { try { fs.chmodSync(target, 0o755) } catch {} }

package/src/index.js

@@ -41,6 +41,8 @@ skill.command('install')
   .description('Install published skills into ~/.claude/skills/<slug>')
   .argument('<slugs...>', 'Skill slug(s) — space or comma separated (see: mdpush skill list)')
   .option('-d, --dest <path>', 'Destination directory (single skill only)')
+  .option('--public', 'Install anonymously from /public/skills (no login required)')
+  .option('-s, --server <url>', 'Server URL for --public (default: stored config or https://docs.sielay.cloud)')
   .action(skillInstallCommand)
 
 skill.command('list')

package/src/lib/public-request.js

@@ -0,0 +1,29 @@
+import { readConfig } from './config-store.js'
+
+/** Default public sielay instance when neither --server nor a login config set one. */
+const DEFAULT_PUBLIC_SERVER = 'https://docs.sielay.cloud'
+
+/**
+ * Resolve the base server URL for anonymous (public) requests. Precedence:
+ * explicit --server → stored login config server → the default public host.
+ * No token is read or sent — these hit /public/* which needs no credential.
+ */
+export function resolvePublicServer(optServer) {
+  if (optServer) return optServer.replace(/\/$/, '')
+  const cfg = readConfig()
+  return (cfg.server || DEFAULT_PUBLIC_SERVER).replace(/\/$/, '')
+}
+
+/** Unauthenticated GET against a sielay /public/* path. */
+export async function publicRequest(server, path) {
+  const res = await fetch(`${server}${path}`)
+  if (!res.ok) {
+    // /public/* returns a uniform 404 for missing / not-public / kill-switch-off,
+    // so surface a single actionable message rather than guessing the cause.
+    if (res.status === 404) {
+      throw new Error('Not found (skill not public, or public skills disabled on this server)')
+    }
+    throw new Error(`HTTP ${res.status}`)
+  }
+  return res
+}