pubkeyc

pubkeyc

Deploy frontend apps to pubkey.cloud from the command line.

Usage

No install required:

npx pubkeyc login
npx pubkeyc deploy --project my-app

Or install it globally:

npm install -g pubkeyc
pubkeyc deploy

Commands

Command	Description
pubkeyc login	Authenticate via your browser (device-code flow).
pubkeyc whoami	Show the currently authenticated user.
pubkeyc logout	Forget the cached token.
pubkeyc tokens	Manage long-lived API tokens for CI (create / list / revoke).
pubkeyc deploy	Bundle the current directory and deploy it.

deploy packages your current working directory (respecting .gitignore and .pubkeyignore), uploads it, and triggers a server-side build. The target project defaults to pubkey.json / package.json#pubkey.project / the directory name; override it with --project <slug>.

Deploy options

Flag	Description
--project <slug>	Target project. Auto-created on first deploy.
--label <label>	Optional label (for example, a branch name).
--commit <sha>	Pass a git revision through.
--yes	Skip interactive prompts.

Global flags

Flag	Description
--provider <url>	Override the API endpoint (alias: --api). With login, the URL is saved alongside the issued token.

CI / non-interactive deploys

login needs a browser, so for CI use a long-lived API token instead. Mint one once from a machine where you're logged in:

pubkeyc login                       # interactive, one time
pubkeyc tokens create ci            # prints the secret ONCE — copy it

Then store it as a CI secret and pass it via the environment — no browser, no cached credentials file:

export PUBKEY_TOKEN=pk_…            # the token you just minted
pubkeyc deploy --project my-app --yes --license MIT --i-own-content

PUBKEY_TOKEN overrides any cached login. Tokens are revocable (pubkeyc tokens revoke <id>) and can expire (--expires <days>); minting and revoking require an interactive session, so a leaked CI token can only deploy.

Environment

Variable	Description
PUBKEY_TOKEN	Auth token for CI / non-interactive use. Overrides any cached login. Mint with pubkeyc tokens create.
PUBKEY_API_ORIGIN	Fallback API origin when neither --provider nor a saved login origin is present. Defaults to https://api.pubkey.cloud (set to http://localhost:4000 for local development).

Requirements

Node.js 18 or newer.