@botiverse/testbed-cli 0.4.0 → 0.5.0

package/lib/main.mjs

@@ -37,6 +37,12 @@ export const USAGE = `testbed — cloud phones + the acceptance testbed in the R
                                          install for any runtime via "npx skills add" (Claude Code, Codex, Cursor, Gemini, OpenCode, ...)
   testbed skill --copy-to DIR            plain copy of SKILL.md (offline / unsupported runtime)
 
+  testbed qa-account list                QA account pool (labels, environments; never secrets)
+  testbed qa-account get <label> [--env staging|production] [--out FILE]
+                                         one QA login for a device; credential goes to --out (0600) or --json
+  testbed qa-account add <label> --env staging|production --username EMAIL
+                                         owner only; password is read from stdin, never from an argument
+
   testbed cases                          acceptance case library
   testbed run <case-id...> [--app --ref --apk --apk-run --release --by]
   testbed run --all [...]                the whole case table in one run (release smoke)
@@ -66,6 +72,11 @@ function table(rows, cols, out) {
   for (const r of rows) out(cols.map((c, i) => String(r[c] ?? "").padEnd(w[i])).join("  "));
 }
 
+async function readStdin(stream = process.stdin) {
+  if (stream.isTTY) return "";
+  let data = ""; for await (const chunk of stream) data += chunk; return data;
+}
+
 function writeKeyFile(path, key) {
   const fd = openSync(path, "wx", 0o600);
   try { writeSync(fd, key.endsWith("\n") ? key : key + "\n"); } finally { closeSync(fd); }
@@ -292,6 +303,44 @@ export async function main(argv, opts) {
         out(`installed skill 'testbed' via npx skills${agents.length ? ` for ${agents.join(", ")}` : ""}${global ? " (global)" : ""}`);
         return exit(0);
       }
+      case "qa-account": {
+        const sub = args.shift();
+        switch (sub) {
+          case "list": {
+            const d = await api("GET", "/device-broker/qa-accounts");
+            const rows = d.accounts ?? [];
+            emit(d, () => rows.length
+              ? table(rows.map((a) => ({ env: a.environment, label: a.label, email: a.login_email ?? "-", visibility: a.visibility ?? "-", status: a.status ?? "-" })), ["env", "label", "email", "visibility", "status"], out)
+              : out("no QA accounts visible to you"));
+            return exit(0);
+          }
+          case "get": {
+            const label = args[0]; if (!label) throw new Error("usage: testbed qa-account get <label> [--env ENV] [--out FILE]");
+            const envName = takeFlag(args, "env"); const outPath = takeFlag(args, "out");
+            const q = envName ? `?environment=${encodeURIComponent(envName)}` : "";
+            const d = await api("GET", `/device-broker/qa-account/${encodeURIComponent(label)}${q}`);
+            if (json) { out(JSON.stringify(d, null, 2)); return exit(0); }
+            if (outPath) {
+              writeKeyFile(outPath, `${d.username ?? d.login_email ?? ""}\n${d.password ?? ""}\n`);
+              out(`qa account ${d.label ?? label} (${d.environment ?? envName ?? "?"}): username ${d.username ?? d.login_email ?? "?"}; credential written to ${outPath} (0600)`);
+            } else {
+              out(`qa account ${d.label ?? label} (${d.environment ?? envName ?? "?"}): username ${d.username ?? d.login_email ?? "?"}; password not shown — pass --out FILE or --json`);
+            }
+            return exit(0);
+          }
+          case "add": {
+            const label = args[0]; const envName = takeFlag(args, "env"); const username = takeFlag(args, "username");
+            if (!label || !envName || !username) throw new Error("usage: testbed qa-account add <label> --env ENV --username EMAIL   (password on stdin)");
+            const password = (await readStdin(opts.stdin)).replace(/\r?\n$/, "");
+            if (!password) throw new Error("password must be provided on stdin (e.g. printf '%s' \"$PW\" | testbed qa-account add …)");
+            const d = await api("PUT", `/device-broker/qa-account/${encodeURIComponent(label)}`, { environment: envName, username, password });
+            emit(d, () => out(`qa account ${d.label} (${d.environment}) ${d.secret_version > 1 ? "rotated" : "created"}, secret version ${d.secret_version}`));
+            return exit(0);
+          }
+          default:
+            throw new Error("usage: testbed qa-account <list|get|add> …");
+        }
+      }
       case "cases": {
         const d = await api("GET", "/cases");
         emit(d, () => table(d.cases.map((c) => ({ id: c.id, tier: c.tier, rev: c.revision, title: c.title })), ["id", "tier", "rev", "title"], out));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botiverse/testbed-cli",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "CLI for testbed \u2014 cloud phones and the acceptance testbed in the Raft release loop",
   "license": "MIT",
   "type": "module",