sfora-cli 0.2.0 → 0.4.0

package/README.md

@@ -7,6 +7,7 @@ or `echo >` straight into it. Ships first-class verbs, an interactive shell, and
 an **MCP server** (`--mcp`) so agents in Claude / Cursor operate sfora natively.
 
 ```bash
+sfora new "Acme"                          # create a project
 sfora post plan.md --project acme        # push a markdown plan as a post
 sfora task spec.md --project acme         # …or a task on the board
 sfora cat /projects/acme/board/01-todo/0042-fix-login.md
@@ -30,10 +31,14 @@ shell interpreter backs the interactive mode).
 ```bash
 npm i -g sfora-cli      # installs the `sfora` command; or: npx sfora-cli …
 
-sfora login             # authorize via the browser (saves a key)
-sfora --org <slug>      # interactive shell (omit --org once saved)
+sfora login             # authorize as you (browser; saves your key)
+sfora login --bot ci    # …or as a named bot (its own key)
+sfora                   # interactive shell — explore /projects, cat, grep
 ```
 
+One CLI for everyone: the default identity is **you**; add `--bot <name>` to any
+command to run as that bot.
+
 `sfora init` writes `~/.sfora/config.json` (chmod 600). Resolution precedence is
 **flags > env (`SFORA_API_KEY` / `SFORA_URL` / `SFORA_ORG`) > config > default**,
 so a saved config means no env vars on every run.

package/dist/api-client.d.ts

@@ -70,6 +70,11 @@ export declare class SforaApiClient {
     constructor(config: SforaApiConfig);
     /** `GET /v1/fs/projects` */
     listProjects(): Promise<Project[]>;
+    /** `POST /v1/fs/projects` — create a project; the caller becomes its lead. */
+    createProject(name: string): Promise<{
+        slug: string;
+        name: string;
+    }>;
     /**
      * `GET …/posts` or `…/drafts`. `scheduled` lists drafts that have a
      * (future) `scheduledFor` set.

package/dist/api-client.js

@@ -85,6 +85,11 @@ export class SforaApiClient {
         const data = await this.#json("/v1/fs/projects");
         return data.projects;
     }
+    /** `POST /v1/fs/projects` — create a project; the caller becomes its lead. */
+    async createProject(name) {
+        const res = await this.#request("POST", "/v1/fs/projects", JSON.stringify({ name }));
+        return (await res.json());
+    }
     /**
      * `GET …/posts` or `…/drafts`. `scheduled` lists drafts that have a
      * (future) `scheduledFor` set.

package/dist/cli.js

@@ -10,7 +10,7 @@ import * as readline from "node:readline";
 import { spawn } from "node:child_process";
 import { readFile as readLocalFile } from "node:fs/promises";
 import { basename } from "node:path";
-import { createSforaShell } from "./index.js";
+import { createSforaShell, SforaApiClient } from "./index.js";
 import { runMcpServer } from "./mcp-server.js";
 import { readConfig, writeConfig, resolveSettings, DEFAULT_URL, } from "./config.js";
 const colors = {
@@ -47,10 +47,12 @@ function parseArgs(argv) {
             args.key = argv[++i];
         else if (a.startsWith("--key="))
             args.key = a.slice("--key=".length);
-        else if (a === "--agent")
-            args.agent = argv[++i];
+        else if (a === "--bot" || a === "--agent")
+            args.bot = argv[++i];
+        else if (a.startsWith("--bot="))
+            args.bot = a.slice("--bot=".length);
         else if (a.startsWith("--agent="))
-            args.agent = a.slice("--agent=".length);
+            args.bot = a.slice("--agent=".length);
         else if (a === "--web")
             args.web = argv[++i];
         else if (a.startsWith("--web="))
@@ -77,15 +79,21 @@ function parseArgs(argv) {
 const HELP = `sfora — the CLI for your sfora workspace
 
 Get started:
-  sfora login [--agent <name>]        Authorize via the browser (saves a key)
+  sfora login                         Authorize as you (saves your key)
+  sfora login --bot <name>            Authorize as a named bot (its own key)
+
+Run as a bot: add --bot <name> to any command (default identity is you).
 
 Push markdown straight to sfora:
   sfora post <file.md> [--project <slug>] [--draft]   Publish (or draft) a post
   sfora task <file.md> [--project <slug>] [--column <name>]   Create a task
   sfora doc  <file.md> [--project <slug>]             Create a doc
 
-Browse:
+Projects:
+  sfora new "<name>"                  Create a project
   sfora projects                      List your projects
+
+Browse:
   sfora ls [path]                     List a path (default /projects)
   sfora cat <path>                    Print a file's markdown
   sfora                               Open the interactive shell
@@ -149,7 +157,7 @@ async function runLogin(args, baseUrl) {
         const res = await fetch(`${base}/v1/cli/start`, {
             method: "POST",
             headers: { "content-type": "application/json" },
-            body: JSON.stringify({ agent: args.agent }),
+            body: JSON.stringify({ agent: args.bot }),
         });
         if (!res.ok)
             throw new Error(`start failed (${res.status})`);
@@ -165,7 +173,7 @@ async function runLogin(args, baseUrl) {
         ? `${webOverride.replace(/\/+$/, "")}/cli?code=${encodeURIComponent(start.userCode)}`
         : start.verifyUrl;
     console.log(`\n${colors.bold}Authorize the sfora CLI${colors.reset}` +
-        (args.agent ? ` ${colors.dim}(agent: ${args.agent})${colors.reset}` : "") +
+        (args.bot ? ` ${colors.dim}(bot: ${args.bot})${colors.reset}` : "") +
         `\n  ${colors.cyan}${verifyUrl}${colors.reset}\n  ${colors.dim}code: ${start.userCode}${colors.reset}\n`);
     openBrowser(verifyUrl);
     process.stdout.write(`${colors.dim}Waiting for approval…${colors.reset}`);
@@ -186,12 +194,21 @@ async function runLogin(args, baseUrl) {
             continue;
         }
         if (data.status === "approved" && data.apiKey) {
-            const path = await writeConfig({
-                url: base,
-                apiKey: data.apiKey,
-                org: data.orgSlug ?? undefined,
-            });
-            console.log(`\n${colors.green}✓${colors.reset} Logged in as ${data.name ?? "you"}${data.orgSlug ? ` ${colors.dim}(${data.orgSlug})${colors.reset}` : ""} — saved ${path}`);
+            const cfg = await readConfig();
+            const next = { ...cfg, url: base };
+            if (args.bot) {
+                // Save under the bot's slot; keep the user's personal key intact.
+                next.bots = {
+                    ...cfg.bots,
+                    [args.bot]: { apiKey: data.apiKey, org: data.orgSlug ?? undefined },
+                };
+            }
+            else {
+                next.apiKey = data.apiKey;
+                next.org = data.orgSlug ?? cfg.org;
+            }
+            const path = await writeConfig(next);
+            console.log(`\n${colors.green}✓${colors.reset} Logged in as ${data.name ?? "you"}${data.orgSlug ? ` ${colors.dim}(${data.orgSlug})${colors.reset}` : ""}${args.bot ? ` ${colors.dim}[bot: ${args.bot}]${colors.reset}` : ""} — saved ${path}`);
             return;
         }
         if (data.status === "expired" || data.status === "unknown") {
@@ -246,14 +263,30 @@ async function resolveProject(fs, flag, md) {
         return slugs[0];
     throw new Error(`specify --project <slug>${slugs.length ? ` (yours: ${slugs.join(", ")})` : ""}`);
 }
-const VERBS = new Set(["projects", "ls", "cat", "post", "task", "doc"]);
-async function runVerb(args, fs) {
+const VERBS = new Set([
+    "projects",
+    "new",
+    "ls",
+    "cat",
+    "post",
+    "task",
+    "doc",
+]);
+async function runVerb(args, fs, client) {
     const ok = (msg) => console.log(`${colors.green}✓${colors.reset} ${msg}`);
     if (args.command === "projects") {
         const slugs = await fs.readdir("/projects");
         console.log(slugs.length ? slugs.join("\n") : "(no projects)");
         return;
     }
+    if (args.command === "new") {
+        const name = args.rest.join(" ").trim();
+        if (!name)
+            throw new Error('usage: sfora new "<project name>"');
+        const res = await client.createProject(name);
+        ok(`Created project ${res.name} · /projects/${res.slug}`);
+        return;
+    }
     if (args.command === "ls") {
         const entries = await fs.readdir(args.rest[0] ?? "/projects");
         console.log(entries.join("\n"));
@@ -315,7 +348,7 @@ async function main() {
         return;
     }
     const cfg = await readConfig();
-    const settings = resolveSettings({ url: args.url, apiKey: args.key, org: args.org }, cfg);
+    const settings = resolveSettings({ url: args.url, apiKey: args.key, org: args.org, bot: args.bot }, cfg);
     const { url: baseUrl, apiKey } = settings;
     if (args.command === "mcp-config") {
         printMcpConfig(settings);
@@ -326,8 +359,10 @@ async function main() {
         return;
     }
     if (!apiKey) {
-        process.stderr.write(`${colors.red}error:${colors.reset} no API key found.\n` +
-            `Run \`sfora login\` to authorize, or \`sfora init\` to set one.\n`);
+        process.stderr.write(args.bot
+            ? `${colors.red}error:${colors.reset} no key for bot '${args.bot}'. Run \`sfora login --bot ${args.bot}\`.\n`
+            : `${colors.red}error:${colors.reset} no API key found.\n` +
+                `Run \`sfora login\` to authorize, or \`sfora init\` to set one.\n`);
         process.exitCode = 1;
         return;
     }
@@ -338,8 +373,9 @@ async function main() {
             apiKey,
             org: settings.org ?? "",
         });
+        const client = new SforaApiClient({ baseUrl, apiKey });
         try {
-            await runVerb(args, fs);
+            await runVerb(args, fs, client);
         }
         catch (e) {
             process.stderr.write(`${colors.red}error:${colors.reset} ${e instanceof Error ? e.message : String(e)}\n`);

package/dist/config.d.ts

@@ -2,6 +2,10 @@ export interface SforaConfig {
     url?: string;
     apiKey?: string;
     org?: string;
+    bots?: Record<string, {
+        apiKey?: string;
+        org?: string;
+    }>;
 }
 export declare const CONFIG_PATH: string;
 export declare const DEFAULT_URL = "http://localhost:2222";
@@ -16,4 +20,5 @@ export declare function resolveSettings(flags: {
     url?: string;
     apiKey?: string;
     org?: string;
+    bot?: string;
 }, cfg: SforaConfig): ResolvedSettings;

package/dist/config.js

@@ -31,8 +31,19 @@ function pick(...vals) {
     return vals.find((v) => v != null && v !== "");
 }
 export function resolveSettings(flags, cfg) {
+    const url = pick(flags.url, process.env.SFORA_URL, cfg.url) ?? DEFAULT_URL;
+    // `--bot <name>`: act as that saved bot. Don't fall back to the user's key /
+    // SFORA_API_KEY env, so the identity is never silently the wrong one.
+    if (flags.bot) {
+        const bot = cfg.bots?.[flags.bot];
+        return {
+            url,
+            apiKey: pick(flags.apiKey, bot?.apiKey),
+            org: pick(flags.org, bot?.org, cfg.org),
+        };
+    }
     return {
-        url: pick(flags.url, process.env.SFORA_URL, cfg.url) ?? DEFAULT_URL,
+        url,
         apiKey: pick(flags.apiKey, process.env.SFORA_API_KEY, cfg.apiKey),
         org: pick(flags.org, process.env.SFORA_ORG, cfg.org),
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sfora-cli",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "type": "module",
   "description": "Your sfora workspace as a markdown filesystem — a CLI + MCP server. Post/task/doc, ls/cat/grep, and a shell so agents operate sfora natively.",
   "keywords": [