withvibe 0.1.4

package/LICENSE

@@ -0,0 +1,93 @@
+Elastic License 2.0
+
+Copyright (c) 2026 WithVibe
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject
+to the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor's trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+*As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.*
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that organization.
+**control** means ownership of substantially all the assets of an entity, or
+the power to direct its management and policies by vote, contract, or
+otherwise. Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under
+these terms.
+
+**use** means anything you do with the software requiring one of your licenses.
+
+**trademark** means trademarks, service marks, and similar rights.

package/README.md

@@ -0,0 +1,67 @@
+# withvibe
+
+CLI to run a withvibe environment locally — clones the repos defined by the
+env, boots its `docker-compose` stack, and opens it in VSCode.
+
+Binary name: `withvibe`.
+
+## Install (from source)
+
+```bash
+pnpm --filter withvibe build
+node packages/cli/dist/index.js --help
+```
+
+To use the `withvibe` name globally, link the package:
+
+```bash
+cd packages/cli && pnpm link --global
+withvibe --help
+```
+
+## Commands
+
+### `withvibe login`
+
+Authorize this machine against a withvibe server. Stores a CLI token in your
+OS keyring (or falls back to a config file).
+
+```bash
+withvibe login
+withvibe login --force        # re-auth even if a token exists
+withvibe --server <url> login # point at a non-default server
+```
+
+### `withvibe env <envId>`
+
+Set up the given env on this machine: pre-flight checks, GitHub-account
+confirmation, repo cloning, port allocation, then `docker compose up -d`, and
+finally launches VSCode.
+
+```bash
+withvibe env env_abc123
+withvibe env env_abc123 --no-open  # skip VSCode launch
+```
+
+## Configuration
+
+| Flag / env var | Purpose | Default |
+| --- | --- | --- |
+| `--server <url>` / `WITHVIBE_SERVER` | Withvibe web server URL | `http://localhost:3000` |
+
+## How it works
+
+1. **Preflight** — checks `git`, `docker`, `gh`, and `code` are on `PATH`.
+2. **GitHub auth** — uses `gh auth status` to show which account git will use, with a prompt to switch.
+3. **Repo clone** — clones each repo declared by the env into a per-env workspace folder.
+4. **Ports** — allocates host ports and wires them into the compose project.
+5. **`docker compose up -d`** — starts the env's services.
+6. **VSCode** — opens the workspace folder.
+
+## Links
+
+- Website / docs: <https://withvibe.dev>
+
+## License
+
+Elastic License 2.0 — see the [root LICENSE](../../LICENSE).

package/dist/api.js

@@ -0,0 +1,29 @@
+// Thin wrapper around the web app's HTTP endpoints used by the CLI.
+// The server URL always points at the Next.js web app (not the Nest API) —
+// web is the auth edge and mints the internal JWT to call Nest.
+async function request(server, path, init = {}) {
+    const url = `${server.replace(/\/$/, "")}${path}`;
+    const res = await fetch(url, init);
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`${init.method || "GET"} ${path} → ${res.status} ${res.statusText}${body ? `\n${body}` : ""}`);
+    }
+    return (await res.json());
+}
+export async function initiateLogin(server, label) {
+    return request(server, "/api/cli-auth/initiate", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ label }),
+    });
+}
+export async function pollLogin(server, code) {
+    return request(server, `/api/cli-auth/poll?code=${encodeURIComponent(code)}`);
+}
+export async function fetchLocalBundle(server, token, envId) {
+    return request(server, `/api/envs/${encodeURIComponent(envId)}/local-bundle`, { headers: { authorization: `Bearer ${token}` } });
+}
+export async function fetchExportReadiness(server, token, envId) {
+    return request(server, `/api/envs/${encodeURIComponent(envId)}/export-readiness`, { headers: { authorization: `Bearer ${token}` } });
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,2EAA2E;AAC3E,gEAAgE;AAiChE,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,IAAY,EACZ,OAAoB,EAAE;IAEtB,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,GAC/D,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EACvB,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,KAAa;IAEb,OAAO,OAAO,CAAmB,MAAM,EAAE,wBAAwB,EAAE;QACjE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,IAAY;IAEZ,OAAO,OAAO,CACZ,MAAM,EACN,2BAA2B,kBAAkB,CAAC,IAAI,CAAC,EAAE,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAAa,EACb,KAAa;IAEb,OAAO,OAAO,CACZ,MAAM,EACN,aAAa,kBAAkB,CAAC,KAAK,CAAC,eAAe,EACrD,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;AACJ,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,KAAa,EACb,KAAa;IAEb,OAAO,OAAO,CACZ,MAAM,EACN,aAAa,kBAAkB,CAAC,KAAK,CAAC,mBAAmB,EACzD,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;AACJ,CAAC"}

package/dist/assets/docker-compose.yml

@@ -0,0 +1,130 @@
+# Single-host deployment for the withvibe stack.
+#   - postgres: data store
+#   - api:      NestJS, drives Docker via DooD (host socket mounted in)
+#   - web:      Next.js standalone server, proxies auth routes to api over the
+#               compose network
+#
+# Two ways to run this:
+#
+# A) From source (this repo):
+#      cp .env.example .env  &&  edit secrets
+#      docker compose up -d --build
+#
+# B) From a prebuilt bundle (no source on the target host):
+#      ./scripts/build-bundle.sh        # locally, produces dist/withvibe-deploy.tar.gz
+#      scp dist/withvibe-deploy.tar.gz user@host:~ && ssh user@host
+#      tar -xzf withvibe-deploy.tar.gz && cd withvibe-deploy-*
+#      docker load -i images.tar
+#      cp .env.example .env  &&  edit secrets
+#      docker compose up -d
+#
+# Production posture: bring-your-own reverse proxy / TLS in front of :3000.
+
+name: withvibe
+
+services:
+  postgres:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-withvibe}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-withvibe}
+      POSTGRES_DB: ${POSTGRES_DB:-withvibe}
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-withvibe} -d ${POSTGRES_DB:-withvibe}"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+    networks: [withvibe]
+
+  api:
+    image: withvibe/api:${WITHVIBE_VERSION:-latest}
+    build:
+      context: .
+      dockerfile: apps/api/Dockerfile
+    restart: unless-stopped
+    depends_on:
+      postgres:
+        condition: service_healthy
+    environment:
+      DATABASE_URL: postgresql://${POSTGRES_USER:-withvibe}:${POSTGRES_PASSWORD:-withvibe}@postgres:5432/${POSTGRES_DB:-withvibe}
+      INTERNAL_JWT_SECRET: ${INTERNAL_JWT_SECRET}
+      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY}
+      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID}
+      GOOGLE_CLIENT_SECRET: ${GOOGLE_CLIENT_SECRET}
+      GITHUB_TOKEN: ${GITHUB_TOKEN}
+      WEB_PUBLIC_URL: ${WEB_PUBLIC_URL:-http://localhost:3000}
+      API_PUBLIC_URL: ${API_PUBLIC_URL:-http://localhost:4000}
+      PUBLIC_HOST: ${PUBLIC_HOST:-localhost}
+      # Name of the external Docker network Traefik is attached to. The
+      # subdomain rewriter joins each exposed env service to this network
+      # and points Traefik labels at it. Must match the network's `name:`
+      # on the host. Defaults to the platform's own `withvibe` network when
+      # operators colocate Traefik there; set explicitly otherwise.
+      PROXY_NETWORK: ${PROXY_NETWORK:-withvibe}
+      # Traefik entrypoint name the env's router binds to (must match
+      # Traefik's static config — `websecure` is the platform default :443
+      # entrypoint).
+      TRAEFIK_ENTRYPOINT: ${TRAEFIK_ENTRYPOINT:-websecure}
+      # Traefik certresolver name for issuing TLS certs. Empty string
+      # disables TLS labels (useful when an upstream LB terminates TLS or
+      # for local plain-HTTP dev).
+      TRAEFIK_CERT_RESOLVER: ${TRAEFIK_CERT_RESOLVER:-letsencrypt}
+      REPO_BASE_DIR: ${REPO_BASE_DIR:-/root/.withvibe/repos}
+      # Persisted per-user `code tunnel` auth dirs. Mounted volume below.
+      CODE_TUNNEL_DATA_DIR: /var/lib/withvibe/code-tunnel
+      LOG_LEVEL: ${LOG_LEVEL:-info}
+      WITHVIBE_VERSION: ${WITHVIBE_VERSION:-latest}
+      NODE_ENV: production
+      PORT: "4000"
+    ports:
+      # Exposed for DooD-spawned runner sidecars that call back via
+      # host.docker.internal:4000 (CLAUDE_RUNNER_MCP_BASE_URL default). The
+      # host-side port is configurable via API_HOST_PORT so installs on
+      # boxes with :4000 already taken can map to e.g. 4001 transparently.
+      - "${API_HOST_PORT:-4000}:4000"
+    volumes:
+      # DooD: api drives the host docker daemon to spawn env sidecars.
+      - /var/run/docker.sock:/var/run/docker.sock
+      # Path-parity bind mount: host and container see clones under the
+      # SAME absolute path, so when api emits `docker run -v <path>:...`
+      # the host daemon finds <path>.
+      - ${REPO_BASE_DIR:-/root/.withvibe/repos}:${REPO_BASE_DIR:-/root/.withvibe/repos}
+      # Persist `code tunnel` per-user auth dirs across redeploys so users
+      # don't have to re-run the device-code login every time.
+      - code-tunnel-data:/var/lib/withvibe/code-tunnel
+    extra_hosts:
+      # So spawned sidecars resolving host.docker.internal hit the host
+      # gateway on Linux too (Docker Desktop wires this automatically on
+      # Mac/Windows; this line is harmless there).
+      - "host.docker.internal:host-gateway"
+    networks: [withvibe]
+
+  web:
+    image: withvibe/web:${WITHVIBE_VERSION:-latest}
+    build:
+      context: .
+      dockerfile: apps/web/Dockerfile
+    restart: unless-stopped
+    depends_on:
+      - api
+    environment:
+      # Server-side rewrites (next.config.ts) point /api/auth/* and
+      # /api/cli-auth/* at this URL. Inside the compose network the api
+      # service is reachable as `api:4000`.
+      API_BASE_URL: http://api:4000
+      NODE_ENV: production
+      PORT: "3000"
+    ports:
+      - "${WEB_HOST_PORT:-3000}:3000"
+    networks: [withvibe]
+
+volumes:
+  postgres-data:
+  code-tunnel-data:
+
+networks:
+  withvibe:
+    name: withvibe

package/dist/config.js

@@ -0,0 +1,48 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import os from "node:os";
+function configDir() {
+    return path.join(os.homedir(), ".withvibe");
+}
+function configPath() {
+    return path.join(configDir(), "config.json");
+}
+export async function loadConfig() {
+    try {
+        const raw = await fs.readFile(configPath(), "utf-8");
+        const parsed = JSON.parse(raw);
+        if (!parsed.server || !parsed.token)
+            return null;
+        return {
+            server: parsed.server,
+            token: parsed.token,
+            savedAt: parsed.savedAt || "",
+        };
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === "ENOENT")
+            return null;
+        throw err;
+    }
+}
+export async function saveConfig(cfg) {
+    await fs.mkdir(configDir(), { recursive: true, mode: 0o700 });
+    await fs.writeFile(configPath(), JSON.stringify(cfg, null, 2), {
+        mode: 0o600,
+    });
+}
+export async function clearConfig() {
+    try {
+        await fs.unlink(configPath());
+    }
+    catch (err) {
+        if (err.code !== "ENOENT")
+            throw err;
+    }
+}
+// Root the CLI uses for everything it creates on the user's machine.
+export function withvibeHome() {
+    return path.join(os.homedir(), "withvibe");
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAUzB,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;SAC9B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;QAC7C,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAc;IAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC7D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC"}