vibefast-cli 0.1.1

package/cloudflare-worker/QUICKSTART.md

@@ -0,0 +1,200 @@
+# Cloudflare Worker Quick Start
+
+## What You Have Now
+
+Your current worker at `https://vibefast.mzafar611.workers.dev` is close but missing:
+- Proper routing (`/api/recipe/fetch` instead of `/`)
+- Signed URLs (yours uses public URLs)
+- Additional endpoints for `list`, `devices`, etc.
+
+## Deploy the New Worker (2 Options)
+
+### Option 1: Automated Setup (Recommended)
+
+```bash
+cd vibefast-cli/cloudflare-worker
+./setup.sh
+```
+
+This script will:
+1. ✅ Create KV namespace for licenses
+2. ✅ Create R2 bucket for recipes
+3. ✅ Add a test license token
+4. ✅ Create and upload a test recipe
+5. ✅ Deploy the worker
+
+**Time:** ~2 minutes
+
+### Option 2: Manual Setup
+
+```bash
+# 1. Create KV namespace
+wrangler kv:namespace create "LICENSES"
+# Copy the ID and update wrangler.toml
+
+# 2. Create R2 bucket
+wrangler r2 bucket create vibefast-recipes
+
+# 3. Generate and add a token
+node generate-token.js
+# Copy the wrangler command and run it
+
+# 4. Deploy
+wrangler deploy
+```
+
+## After Deployment
+
+### 1. Get Your Worker URL
+
+After running `wrangler deploy`, you'll see:
+```
+Published vibefast-cli-worker
+  https://vibefast-cli-worker.YOUR_SUBDOMAIN.workers.dev
+```
+
+### 2. Update CLI Configuration
+
+**Option A:** Environment variable (temporary)
+```bash
+export VIBEFAST_WORKER_URL=https://vibefast-cli-worker.YOUR_SUBDOMAIN.workers.dev
+```
+
+**Option B:** Update CLI code (permanent)
+Edit `vibefast-cli/src/core/http.ts`:
+```typescript
+const WORKER_URL = process.env.VIBEFAST_WORKER_URL || 'https://vibefast-cli-worker.YOUR_SUBDOMAIN.workers.dev';
+```
+
+Then rebuild:
+```bash
+cd vibefast-cli
+npm run build
+```
+
+### 3. Test the Full Flow
+
+```bash
+cd vibefast-monorepo
+
+# Login with test token
+vf login --token TEST_TOKEN_12345
+
+# Verify setup
+vf doctor
+
+# List available recipes
+vf list
+
+# Install a feature
+vf add mini-native
+
+# Check what was installed
+cat .vibefast/journal.json
+
+# Remove it
+vf remove mini-native
+```
+
+## Troubleshooting
+
+### "Failed to fetch recipe: Not found"
+- Check that recipes are uploaded to R2: `wrangler r2 object list vibefast-recipes`
+- Recipe filename must match: `<feature>@latest.zip`
+
+### "Invalid or inactive token"
+- Verify token is in KV: `wrangler kv:key get --binding=LICENSES "lic:<hash>"`
+- Check token hash: `node generate-token.js YOUR_TOKEN`
+
+### "Device limit reached"
+- List devices: `vf devices`
+- Deactivate one: `vf devices --deactivate <id>`
+
+### Worker not responding
+- Check logs: `wrangler tail`
+- Verify bindings in `wrangler.toml`
+
+## Adding More Recipes
+
+### 1. Create Recipe Structure
+
+```bash
+mkdir -p my-recipe/apps/native/src/app/my-feature
+```
+
+### 2. Add Files
+
+```bash
+# Create the feature component
+cat > my-recipe/apps/native/src/app/my-feature/index.tsx << 'EOF'
+import { View, Text } from 'react-native';
+
+export default function MyFeature() {
+  return (
+    <View className="flex-1 items-center justify-center">
+      <Text className="text-2xl">My Feature</Text>
+    </View>
+  );
+}
+EOF
+```
+
+### 3. Create Manifest
+
+```bash
+cat > my-recipe/recipe.json << 'EOF'
+{
+  "name": "my-feature",
+  "version": "0.1.0",
+  "description": "My awesome feature",
+  "copy": [
+    {
+      "from": "apps/native/src/app/my-feature",
+      "to": "apps/native/src/app/(root)/(protected)/my-feature"
+    }
+  ],
+  "nav": {
+    "href": "/(root)/(protected)/my-feature",
+    "label": "My Feature"
+  },
+  "target": "native"
+}
+EOF
+```
+
+### 4. Package and Upload
+
+```bash
+cd my-recipe
+zip -r ../my-feature@latest.zip .
+cd ..
+wrangler r2 object put vibefast-recipes/my-feature@latest.zip --file=my-feature@latest.zip
+```
+
+### 5. Install via CLI
+
+```bash
+cd vibefast-monorepo
+vf add my-feature
+```
+
+## Production Checklist
+
+Before going live:
+
+- [ ] Replace test tokens with real customer tokens
+- [ ] Set up proper token generation system
+- [ ] Add monitoring (Cloudflare Analytics)
+- [ ] Set up alerts for errors
+- [ ] Implement proper rate limiting (KV-based)
+- [ ] Add token revocation system
+- [ ] Set up automated backups of KV data
+- [ ] Document customer onboarding flow
+- [ ] Create admin dashboard for license management
+
+## Next Steps
+
+1. Run `./setup.sh` to deploy
+2. Test with `vf doctor` and `vf list`
+3. Create your first real recipe (Phase 4)
+4. Start building features!

package/cloudflare-worker/README.md

@@ -0,0 +1,242 @@
+# VibeFast CLI Cloudflare Worker
+
+Backend API for VibeFast CLI authentication and recipe delivery.
+
+## Setup
+
+### 1. Install Wrangler CLI
+
+```bash
+npm install -g wrangler
+wrangler login
+```
+
+### 2. Create KV Namespace
+
+```bash
+wrangler kv:namespace create "LICENSES"
+```
+
+Copy the `id` from the output and update `wrangler.toml`:
+```toml
+[[kv_namespaces]]
+binding = "LICENSES"
+id = "YOUR_KV_NAMESPACE_ID_HERE"
+```
+
+### 3. Create R2 Bucket
+
+```bash
+wrangler r2 bucket create vibefast-recipes
+```
+
+### 4. Add a Test License
+
+```bash
+# Generate token hash
+echo -n "TEST_TOKEN_12345" | openssl dgst -sha256 -hex
+# Output: (stdin)= abc123...
+
+# Add to KV
+wrangler kv:key put --binding=LICENSES "lic:abc123..." '{
+  "status": "active",
+  "max_devices": 2,
+  "devices": [],
+  "lastSeen": null
+}' --preview false
+```
+
+Or use this Node.js script:
+
+```javascript
+const crypto = require('crypto');
+const token = 'TEST_TOKEN_12345';
+const hash = crypto.createHash('sha256').update(token).digest('hex');
+console.log('Token:', token);
+console.log('Hash:', hash);
+console.log('KV Key:', `lic:${hash}`);
+```
+
+### 5. Upload a Test Recipe
+
+Create a test recipe zip:
+
+```bash
+mkdir -p test-recipe
+echo '{"name":"mini-native","version":"0.1.0","target":"native","copy":[],"nav":{"href":"/mini","label":"Mini"}}' > test-recipe/recipe.json
+zip -r mini-native@latest.zip test-recipe/
+```
+
+Upload to R2:
+
+```bash
+wrangler r2 object put vibefast-recipes/mini-native@latest.zip --file=mini-native@latest.zip
+```
+
+### 6. Deploy Worker
+
+```bash
+wrangler deploy
+```
+
+### 7. Update CLI Environment Variable
+
+```bash
+export VIBEFAST_WORKER_URL=https://vibefast.YOUR_SUBDOMAIN.workers.dev
+```
+
+Or update the CLI's `src/core/http.ts`:
+
+```typescript
+const WORKER_URL = process.env.VIBEFAST_WORKER_URL || 'https://vibefast.YOUR_SUBDOMAIN.workers.dev';
+```
+
+## Testing
+
+### Test Recipe Fetch
+
+```bash
+curl -X POST "https://vibefast.YOUR_SUBDOMAIN.workers.dev/api/recipe/fetch" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "token": "TEST_TOKEN_12345",
+    "device": {
+      "id": "test-device-1",
+      "os": "darwin",
+      "arch": "arm64",
+      "version": "0.1.0"
+    },
+    "feature": "mini-native",
+    "target": "native",
+    "starter": {
+      "name": "vibefast",
+      "version": "1.0.0"
+    }
+  }'
+```
+
+Expected response:
+```json
+{
+  "ok": true,
+  "signedUrl": "https://...",
+  "expiresIn": 180,
+  "watermark": "abc12345-test1234"
+}
+```
+
+### Test List Recipes
+
+```bash
+curl -X GET "https://vibefast.YOUR_SUBDOMAIN.workers.dev/api/recipes/list" \
+  -H "Authorization: Bearer TEST_TOKEN_12345"
+```
+
+### Test List Devices
+
+```bash
+curl -X GET "https://vibefast.YOUR_SUBDOMAIN.workers.dev/api/devices/list" \
+  -H "Authorization: Bearer TEST_TOKEN_12345"
+```
+
+### Test Deactivate Device
+
+```bash
+curl -X POST "https://vibefast.YOUR_SUBDOMAIN.workers.dev/api/devices/deactivate" \
+  -H "Authorization: Bearer TEST_TOKEN_12345" \
+  -H "Content-Type: application/json" \
+  -d '{"deviceId": "test-device-1"}'
+```
+
+## API Endpoints
+
+### POST `/api/recipe/fetch`
+Validates token, checks device slots, returns signed URL to recipe zip.
+
+**Request:**
+```json
+{
+  "token": "string",
+  "device": { "id": "string", "os": "string", "arch": "string", "version": "string" },
+  "feature": "string",
+  "target": "native|web",
+  "starter": { "name": "string", "version": "string" }
+}
+```
+
+**Response:**
+```json
+{
+  "ok": true,
+  "signedUrl": "string",
+  "expiresIn": 180,
+  "watermark": "string"
+}
+```
+
+### GET `/api/recipes/list`
+Lists available recipes.
+
+**Headers:** `Authorization: Bearer <token>`
+
+**Response:**
+```json
+{
+  "recipes": [
+    { "name": "string", "target": "native|web", "description": "string", "version": "string" }
+  ]
+}
+```
+
+### GET `/api/devices/list`
+Lists active devices for the token.
+
+**Headers:** `Authorization: Bearer <token>`
+
+**Response:**
+```json
+{
+  "devices": [
+    { "id": "string", "os": "string", "arch": "string", "lastSeen": "string" }
+  ],
+  "maxDevices": 2
+}
+```
+
+### POST `/api/devices/deactivate`
+Deactivates a device.
+
+**Headers:** `Authorization: Bearer <token>`
+
+**Request:**
+```json
+{
+  "deviceId": "string"
+}
+```
+
+## License Data Structure
+
+KV Key: `lic:<sha256(token)>`
+
+```json
+{
+  "status": "active",
+  "max_devices": 2,
+  "devices": ["device-id-1", "device-id-2"],
+  "lastSeen": "2024-01-01T00:00:00Z"
+}
+```
+
+## Rate Limiting
+
+- 30 requests per minute per token
+- Enforced in-memory (resets on worker restart)
+- For production, use KV-based rate limiting
+
+## Security Notes
+
+- Tokens are hashed with SHA-256 before storage
+- Signed URLs expire after 3 minutes
+- Device IDs are stable per machine
+- CORS enabled for CLI access

package/cloudflare-worker/generate-token.js

@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+
+import crypto from 'crypto';
+
+// Get token from command line or generate random
+const token = process.argv[2] || `VF_${crypto.randomBytes(16).toString('hex')}`;
+
+// Generate SHA-256 hash
+const hash = crypto.createHash('sha256').update(token).digest('hex');
+
+console.log('');
+console.log('🔑 VibeFast Token Generated');
+console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+console.log('');
+console.log('Token:  ', token);
+console.log('Hash:   ', hash);
+console.log('KV Key: ', `lic:${hash}`);
+console.log('');
+console.log('📋 Add to KV with:');
+console.log('');
+console.log(`wrangler kv:key put --binding=LICENSES "lic:${hash}" '{
+  "status": "active",
+  "max_devices": 2,
+  "devices": [],
+  "lastSeen": null
+}' --preview false`);
+console.log('');
+console.log('🧪 Test with CLI:');
+console.log('');
+console.log(`vf login --token ${token}`);
+console.log('vf doctor');
+console.log('');

package/cloudflare-worker/setup.sh

@@ -0,0 +1,143 @@
+#!/bin/bash
+set -e
+
+echo "🚀 VibeFast CLI Worker Setup"
+echo ""
+
+# Check if wrangler is installed
+if ! command -v wrangler &> /dev/null; then
+    echo "❌ Wrangler CLI not found. Installing..."
+    npm install -g wrangler
+fi
+
+echo "✅ Wrangler CLI found"
+echo ""
+
+# Login check
+echo "🔐 Checking Cloudflare authentication..."
+if ! wrangler whoami &> /dev/null; then
+    echo "Please login to Cloudflare:"
+    wrangler login
+fi
+
+echo "✅ Authenticated"
+echo ""
+
+# Create KV namespace
+echo "📦 Creating KV namespace for licenses..."
+KV_OUTPUT=$(wrangler kv:namespace create "LICENSES" 2>&1)
+KV_ID=$(echo "$KV_OUTPUT" | grep -o 'id = "[^"]*"' | cut -d'"' -f2)
+
+if [ -z "$KV_ID" ]; then
+    echo "⚠️  KV namespace might already exist. Check wrangler.toml"
+else
+    echo "✅ KV Namespace created: $KV_ID"
+    echo ""
+    echo "📝 Update wrangler.toml with this ID:"
+    echo "   id = \"$KV_ID\""
+fi
+
+echo ""
+
+# Create R2 bucket
+echo "🪣 Creating R2 bucket for recipes..."
+if wrangler r2 bucket create vibefast-recipes 2>&1 | grep -q "already exists"; then
+    echo "✅ R2 bucket already exists"
+else
+    echo "✅ R2 bucket created: vibefast-recipes"
+fi
+
+echo ""
+
+# Generate test token
+echo "🔑 Generating test token..."
+TEST_TOKEN="TEST_TOKEN_12345"
+TOKEN_HASH=$(echo -n "$TEST_TOKEN" | openssl dgst -sha256 -hex | awk '{print $2}')
+
+echo "Token: $TEST_TOKEN"
+echo "Hash: $TOKEN_HASH"
+echo "KV Key: lic:$TOKEN_HASH"
+echo ""
+
+# Add test license to KV
+echo "💾 Adding test license to KV..."
+LICENSE_DATA='{
+  "status": "active",
+  "max_devices": 2,
+  "devices": [],
+  "lastSeen": null
+}'
+
+wrangler kv:key put --binding=LICENSES "lic:$TOKEN_HASH" "$LICENSE_DATA" --preview false
+
+echo "✅ Test license added"
+echo ""
+
+# Create test recipe
+echo "📦 Creating test recipe..."
+mkdir -p test-recipe/apps/native/src/app/mini
+cat > test-recipe/recipe.json << 'EOF'
+{
+  "name": "mini-native",
+  "version": "0.1.0",
+  "description": "Demo feature (Expo)",
+  "copy": [
+    {
+      "from": "apps/native/src/app/mini",
+      "to": "apps/native/src/app/(root)/(protected)/mini"
+    }
+  ],
+  "nav": {
+    "href": "/(root)/(protected)/mini",
+    "label": "Mini"
+  },
+  "target": "native"
+}
+EOF
+
+cat > test-recipe/apps/native/src/app/mini/index.tsx << 'EOF'
+import { View, Text } from 'react-native';
+
+export default function MiniFeature() {
+  return (
+    <View className="flex-1 items-center justify-center">
+      <Text className="text-2xl font-bold">Mini Feature</Text>
+      <Text className="text-gray-600">Installed via VibeFast CLI</Text>
+    </View>
+  );
+}
+EOF
+
+cd test-recipe
+zip -r ../mini-native@latest.zip . > /dev/null
+cd ..
+rm -rf test-recipe
+
+echo "✅ Test recipe created: mini-native@latest.zip"
+echo ""
+
+# Upload to R2
+echo "☁️  Uploading test recipe to R2..."
+wrangler r2 object put vibefast-recipes/mini-native@latest.zip --file=mini-native@latest.zip
+
+echo "✅ Recipe uploaded"
+echo ""
+
+# Deploy worker
+echo "🚀 Deploying worker..."
+wrangler deploy
+
+echo ""
+echo "✅ Setup complete!"
+echo ""
+echo "📋 Next steps:"
+echo "1. Note your worker URL from the output above"
+echo "2. Update CLI environment variable:"
+echo "   export VIBEFAST_WORKER_URL=https://YOUR_WORKER.workers.dev"
+echo ""
+echo "3. Test the CLI:"
+echo "   cd ../vibefast-monorepo"
+echo "   vf login --token $TEST_TOKEN"
+echo "   vf list"
+echo "   vf add mini-native"
+echo ""

package/cloudflare-worker/test-recipe/apps/native/src/app/mini/index.tsx

@@ -0,0 +1,15 @@
+import { View, Text } from 'react-native';
+
+export default function MiniFeature() {
+  return (
+    <View className="flex-1 items-center justify-center bg-background">
+      <Text className="text-3xl font-bold text-foreground">🎉 Mini Feature</Text>
+      <Text className="mt-4 text-lg text-muted-foreground">
+        Installed via VibeFast CLI
+      </Text>
+      <Text className="mt-2 text-sm text-muted-foreground">
+        This is a demo feature to test the CLI workflow
+      </Text>
+    </View>
+  );
+}

package/cloudflare-worker/test-recipe/recipe.json

@@ -0,0 +1,16 @@
+{
+  "name": "mini-native",
+  "version": "0.1.0",
+  "description": "Demo feature (Expo)",
+  "copy": [
+    {
+      "from": "apps/native/src/app/mini",
+      "to": "apps/native/src/app/(root)/(protected)/mini"
+    }
+  ],
+  "nav": {
+    "href": "/(root)/(protected)/mini",
+    "label": "Mini"
+  },
+  "target": "native"
+}