@greatstore/cli 0.0.1 → 0.0.3

package/README.md

@@ -11,85 +11,30 @@ gs push
 gs publish my-widget
 ```
 
-> **Status — MVP.** Authentication today targets a nav-side OAuth bounce
-> at `nav.maker.co/connect_oauth_done` and a short-lived JWT stored at
-> `~/.greatstore/credentials.json`. Bearer acceptance on the worker is a
-> separate planned change (see
-> `tasks/backburner/builder-cli-bearer-auth.md` in the main repo); until
-> that lands, push/publish/list etc. will 401 against the live API.
-
 ## Commands
 
 | Command                                       | What it does                                                  |
 | --------------------------------------------- | ------------------------------------------------------------- |
-| `gs login [--store <slug>]`                   | Open the browser, capture a nav token, persist credentials.   |
-| `gs logout`                                   | Wipe `~/.greatstore/credentials.json`.                        |
-| `gs whoami`                                   | Print the identity stored in your credentials file.           |
+| `gs login`                                    | Sign in.                                                      |
+| `gs logout`                                   | Sign out.                                                     |
+| `gs whoami`                                   | Print the identity you're signed in as.                       |
 | `gs init <name> [--out <dir>] [--store <s>]`  | Scaffold a working component project.                         |
-| `gs list [--json]`                            | List the components in the current store.                     |
+| `gs list [--json]`                            | List components in the current store.                         |
 | `gs pull <name> [--draft\|--live\|--version N] [-o <dir>]` | Download manifest + bundle to disk.            |
 | `gs push [<name>] [--manifest path] [--bundle path]` | Upload a new draft revision.                          |
-| `gs publish <name> [--version N]`             | Promote a draft (or rollback to a historical version) to live.|
-| `gs unpublish <name>`                         | Clear the live pointer; the draft and history stay.           |
-| `gs delete <name> [--yes]`                    | Soft-delete the component (R2 objects are retained).          |
+| `gs publish <name> [--version N]`             | Promote a draft (or roll back to a historical version) to live.|
+| `gs unpublish <name>`                         | Clear the live pointer; draft + history stay.                 |
+| `gs delete <name> [--yes]`                    | Remove the component.                                         |
 
 ## Store selection
 
 Every command except `login`, `logout`, and `whoami` needs a store. The
-CLI resolves it with this precedence:
+CLI picks one in this order:
 
 1. `--store <slug>` flag.
 2. `.gsrc` in the current directory or any ancestor: `{"store":"demo"}`.
 3. `GS_STORE` environment variable.
 4. Error.
 
-`gs init` writes a `.gsrc` for you so commands inside a scaffolded
+`gs init` writes a `.gsrc` for you, so commands inside a scaffolded
 project don't need a flag.
-
-## Environment
-
-- `GS_API_BASE` — override the API base URL (default
-  `https://<slug>.greatstore.ai`). Used for local dev:
-  `GS_API_BASE=http://demo.localhost:8787`.
-- `GS_NAV_BASE` — override the nav OAuth base (default
-  `https://nav.maker.co`). Used for testing against a non-prod Clerk
-  tenant.
-- `GS_BROWSER_CMD` — override the command used to open the browser
-  during `gs login`. Defaults to `open` on macOS, `xdg-open` on Linux,
-  `start` on Windows.
-
-## Credentials storage
-
-`~/.greatstore/credentials.json` is created with mode `0700` on its
-directory and `0600` on the file. The CLI verifies this on every read
-and refuses to use a file with broader permissions.
-
-The credentials file holds a single short-lived JWT plus its decoded
-identity claims. There is no refresh token; when the JWT expires, the
-next command prompts for re-auth and re-runs the browser flow.
-
-## Development
-
-```
-cd cli
-npm install
-npm run typecheck
-npm test
-npm run build
-node dist/cli.js --help
-```
-
-To exercise against local `wrangler dev`, point at the tenant host:
-
-```
-GS_API_BASE=http://demo.localhost:8787 \
-GS_NAV_BASE=https://nav.maker.co \
-node dist/cli.js list --store demo
-```
-
-## Release flow
-
-1. Bump `cli/package.json` version.
-2. Tag: `git tag cli-v0.0.2 && git push origin cli-v0.0.2`.
-3. `cli-publish` GitHub Actions workflow runs typecheck + test + build,
-   then `npm publish --access public` with `NPM_TOKEN`.

package/dist/cli.js

@@ -122,7 +122,7 @@ function waitForCallback(server, expectedState, timeoutMs) {
       }
       const params = url.searchParams;
       const error = params.get("error");
-      const token = params.get("token");
+      const token = params.get("code");
       const returnedState = params.get("state");
       if (returnedState !== expectedState) {
         res.writeHead(400, { "content-type": "text/html" });
@@ -142,7 +142,7 @@ function waitForCallback(server, expectedState, timeoutMs) {
         res.writeHead(400, { "content-type": "text/html" });
         res.end(FAILURE_HTML);
         clearTimeout(timer);
-        settle(() => reject(new LoopbackError("Callback missing `token` query parameter.")));
+        settle(() => reject(new LoopbackError("Callback missing `code` query parameter.")));
         return;
       }
       res.writeHead(200, { "content-type": "text/html" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatstore/cli",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "CLI for authoring and shipping GreatStore custom components.",
   "license": "UNLICENSED",
   "type": "module",