sfora-cli 0.13.1 → 0.15.0

package/dist/skills-command.js

@@ -0,0 +1,75 @@
+import { readFile } from "node:fs/promises";
+import { diffSkillBundles, installSkillBundle, readSkillBundle, scanLocalSkills, uninstallSkill, validateSkillBundle } from "./local-core/index.js";
+import { SkillsClient } from "./skills-client.js";
+export const SKILLS_HELP = `Skills:
+  sfora skills scan [root ...] --json          Discover complete local skill bundles
+  sfora skills list --project <slug>           List cloud project skills
+  sfora skills push <folder> --project <slug> --expected-version <N> [--expected-revision <N>]
+                                              Upload draft and publish (0 for a new skill)
+  sfora skills pull <name> <bundle.json> --project <slug> [--version <N>]
+  sfora skills install <name> --project <slug> --skills-target <directory> [--version <N>]
+  sfora skills install-file <bundle.json> --skills-target <directory>
+  sfora skills diff <folder> <name> --project <slug> [--version <N>]
+  sfora skills uninstall <installed-folder>   Remove only an unchanged Sfora-owned install
+`;
+export async function runSkillsCommand(args, settings) {
+    const [verb, first, second] = args.rest;
+    for (const [label, value] of [["version", args.skillVersion], ["expected-version", args.expectedVersion], ["expected-revision", args.expectedRevision]]) {
+        if (value !== undefined && (!Number.isSafeInteger(value) || value < (label === "version" ? 1 : 0)))
+            throw new Error(`--${label} must be a ${label === "version" ? "positive" : "non-negative"} integer.`);
+    }
+    const print = (value) => console.log(JSON.stringify(value, null, args.json ? undefined : 2));
+    const need = (value, label) => { if (!value)
+        throw new Error(`${label} is required.\n${SKILLS_HELP}`); return value; };
+    if (verb === "scan") {
+        print(await scanLocalSkills(args.rest.length > 1 ? args.rest.slice(1) : undefined));
+        return;
+    }
+    if (verb === "uninstall") {
+        await uninstallSkill(need(first, "Installed folder"));
+        print({ uninstalled: first });
+        return;
+    }
+    if (verb === "install-file") {
+        const bundle = JSON.parse(await readFile(need(first, "Bundle JSON"), "utf8"));
+        validateSkillBundle(bundle);
+        print(await installSkillBundle(bundle, need(args.skillsTarget, "--skills-target"), first));
+        return;
+    }
+    const project = need(args.project, "--project");
+    const client = new SkillsClient(settings);
+    if (verb === "list") {
+        print(await client.list(project));
+        return;
+    }
+    if (verb === "push") {
+        if (args.expectedVersion === undefined)
+            throw new Error("--expected-version is required (0 for a new skill). Read the current version with skills list first.");
+        const bundle = await readSkillBundle(need(first, "Skill folder"));
+        const draft = await client.saveDraft(project, bundle, args.expectedVersion, args.expectedRevision);
+        print(await client.publish(project, bundle.name, args.expectedVersion, draft.draftRevision));
+        return;
+    }
+    if (verb === "pull") {
+        const bundle = await client.download(project, need(first, "Skill name"), args.skillVersion);
+        // Export refuses to overwrite unrelated files; explicit repeated exports can choose a new path.
+        const { atomicCreate } = await import("./local-core/files.js");
+        await atomicCreate(need(second, "Output bundle JSON"), `${JSON.stringify(bundle, null, 2)}\n`);
+        print({ path: second, hash: bundle.hash });
+        return;
+    }
+    if (verb === "install") {
+        const name = need(first, "Skill name");
+        const version = args.skillVersion ?? (await client.detail(project, name)).skill.version;
+        if (!Number.isSafeInteger(version) || version < 1)
+            throw new Error("This skill has no published version to install.");
+        const bundle = await client.download(project, name, version);
+        print(await installSkillBundle(bundle, need(args.skillsTarget, "--skills-target"), `${settings.url}/${project}/${name}`, version));
+        return;
+    }
+    if (verb === "diff") {
+        print(diffSkillBundles(await readSkillBundle(need(first, "Local folder")), await client.download(project, need(second, "Skill name"), args.skillVersion)));
+        return;
+    }
+    throw new Error(SKILLS_HELP);
+}

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare const CLI_VERSION = "0.15.0";

package/dist/version.js

@@ -0,0 +1,2 @@
+// Generated by scripts/sync-format.mjs from package.json.
+export const CLI_VERSION = "0.15.0";

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "sfora-cli",
-  "version": "0.13.1",
+  "version": "0.15.0",
   "type": "module",
-  "description": "Your sfora workspace as a markdown filesystem — a CLI + MCP server. Post/task/doc, ls/cat/grep, and a shell so agents operate sfora natively.",
+  "description": "Your sfora workspace as a markdown filesystem \u2014 a CLI + MCP server. Post/task/doc, ls/cat/grep, and a shell so agents operate sfora natively.",
   "keywords": [
     "sfora",
     "mcp",
@@ -52,5 +52,23 @@
   },
   "engines": {
     "node": ">=20"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./local-core": {
+      "types": "./dist/local-core/index.d.ts",
+      "import": "./dist/local-core/index.js"
+    },
+    "./config": {
+      "types": "./dist/config.d.ts",
+      "import": "./dist/config.js"
+    },
+    "./skills-client": {
+      "types": "./dist/skills-client.d.ts",
+      "import": "./dist/skills-client.js"
+    }
   }
 }

package/dist/config.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/config.test.js

@@ -1,94 +0,0 @@
-import { describe, it, expect, beforeEach } from "vitest";
-import { resolveSettings, upsertProfile, effectiveProfiles, profileKey, DEFAULT_URL, } from "./config.js";
-const DEV_URL = "https://valuable-llama-777.eu-west-1.convex.site";
-// resolveSettings reads SFORA_* env as a fallback — clear them so tests assert
-// the config/flag behavior in isolation.
-beforeEach(() => {
-    delete process.env.SFORA_URL;
-    delete process.env.SFORA_ORG;
-    delete process.env.SFORA_API_KEY;
-});
-describe("legacy migration", () => {
-    it("folds a legacy top-level identity into a profile", () => {
-        const cfg = {
-            url: DEFAULT_URL,
-            org: "wavyr",
-            apiKey: "sfora_ak_prod",
-        };
-        const profiles = effectiveProfiles(cfg);
-        expect(profiles[profileKey(DEFAULT_URL, "wavyr")]).toEqual({
-            url: DEFAULT_URL,
-            org: "wavyr",
-            apiKey: "sfora_ak_prod",
-        });
-    });
-    it("resolves the sole legacy identity with no flags", () => {
-        const cfg = {
-            url: DEFAULT_URL,
-            org: "wavyr",
-            apiKey: "sfora_ak_prod",
-        };
-        expect(resolveSettings({}, cfg)).toEqual({
-            url: DEFAULT_URL,
-            org: "wavyr",
-            apiKey: "sfora_ak_prod",
-        });
-    });
-});
-describe("no cross-deployment key reuse", () => {
-    it("does NOT send the prod key to an unmatched dev target", () => {
-        const cfg = {
-            url: DEFAULT_URL,
-            org: "wavyr",
-            apiKey: "sfora_ak_prod",
-        };
-        const r = resolveSettings({ url: DEV_URL, org: "test" }, cfg);
-        expect(r.url).toBe(DEV_URL);
-        expect(r.org).toBe("test");
-        // The whole point: no key rather than the wrong key.
-        expect(r.apiKey).toBeUndefined();
-    });
-});
-describe("profiles coexist (the fix)", () => {
-    it("login to dev does not clobber the prod key; each resolves by intent", () => {
-        let cfg = {
-            url: DEFAULT_URL,
-            org: "wavyr",
-            apiKey: "sfora_ak_prod",
-        };
-        // Simulate `sfora login` against dev.
-        cfg = upsertProfile(cfg, {
-            url: DEV_URL,
-            org: "test",
-            apiKey: "sfora_ak_dev",
-        }).cfg;
-        // Both keys are retained.
-        const profiles = effectiveProfiles(cfg);
-        expect(Object.keys(profiles)).toHaveLength(2);
-        // Prod still reachable by intent.
-        expect(resolveSettings({ org: "wavyr" }, cfg).apiKey).toBe("sfora_ak_prod");
-        expect(resolveSettings({ url: DEFAULT_URL }, cfg).apiKey).toBe("sfora_ak_prod");
-        // Dev reachable by intent.
-        expect(resolveSettings({ org: "test" }, cfg).apiKey).toBe("sfora_ak_dev");
-        // No intent → the last login (active profile) wins.
-        expect(resolveSettings({}, cfg)).toEqual({
-            url: DEV_URL,
-            org: "test",
-            apiKey: "sfora_ak_dev",
-        });
-    });
-});
-describe("bot identity", () => {
-    it("uses the named bot's key and never the personal fallback", () => {
-        const cfg = {
-            url: DEFAULT_URL,
-            org: "wavyr",
-            apiKey: "sfora_ak_prod",
-            bots: { ci: { apiKey: "sfora_ak_ci", org: "wavyr" } },
-        };
-        const r = resolveSettings({ bot: "ci" }, cfg);
-        expect(r.apiKey).toBe("sfora_ak_ci");
-        const missing = resolveSettings({ bot: "nope" }, cfg);
-        expect(missing.apiKey).toBeUndefined();
-    });
-});