@greatstore/cli 0.0.2 → 0.0.4

package/README.md

@@ -11,85 +11,30 @@ gs push
 gs publish my-widget
 ```
 
-> **Status — MVP.** Authentication today targets a nav-side OAuth bounce
-> at `nav.maker.co/connect_oauth_done` and a short-lived JWT stored at
-> `~/.greatstore/credentials.json`. Bearer acceptance on the worker is a
-> separate planned change (see
-> `tasks/backburner/builder-cli-bearer-auth.md` in the main repo); until
-> that lands, push/publish/list etc. will 401 against the live API.
-
 ## Commands
 
 | Command                                       | What it does                                                  |
 | --------------------------------------------- | ------------------------------------------------------------- |
-| `gs login [--store <slug>]`                   | Open the browser, capture a nav token, persist credentials.   |
-| `gs logout`                                   | Wipe `~/.greatstore/credentials.json`.                        |
-| `gs whoami`                                   | Print the identity stored in your credentials file.           |
+| `gs login`                                    | Sign in.                                                      |
+| `gs logout`                                   | Sign out.                                                     |
+| `gs whoami`                                   | Print the identity you're signed in as.                       |
 | `gs init <name> [--out <dir>] [--store <s>]`  | Scaffold a working component project.                         |
-| `gs list [--json]`                            | List the components in the current store.                     |
+| `gs list [--json]`                            | List components in the current store.                         |
 | `gs pull <name> [--draft\|--live\|--version N] [-o <dir>]` | Download manifest + bundle to disk.            |
 | `gs push [<name>] [--manifest path] [--bundle path]` | Upload a new draft revision.                          |
-| `gs publish <name> [--version N]`             | Promote a draft (or rollback to a historical version) to live.|
-| `gs unpublish <name>`                         | Clear the live pointer; the draft and history stay.           |
-| `gs delete <name> [--yes]`                    | Soft-delete the component (R2 objects are retained).          |
+| `gs publish <name> [--version N]`             | Promote a draft (or roll back to a historical version) to live.|
+| `gs unpublish <name>`                         | Clear the live pointer; draft + history stay.                 |
+| `gs delete <name> [--yes]`                    | Remove the component.                                         |
 
 ## Store selection
 
 Every command except `login`, `logout`, and `whoami` needs a store. The
-CLI resolves it with this precedence:
+CLI picks one in this order:
 
 1. `--store <slug>` flag.
 2. `.gsrc` in the current directory or any ancestor: `{"store":"demo"}`.
 3. `GS_STORE` environment variable.
 4. Error.
 
-`gs init` writes a `.gsrc` for you so commands inside a scaffolded
+`gs init` writes a `.gsrc` for you, so commands inside a scaffolded
 project don't need a flag.
-
-## Environment
-
-- `GS_API_BASE` — override the API base URL (default
-  `https://<slug>.greatstore.ai`). Used for local dev:
-  `GS_API_BASE=http://demo.localhost:8787`.
-- `GS_NAV_BASE` — override the nav OAuth base (default
-  `https://nav.maker.co`). Used for testing against a non-prod Clerk
-  tenant.
-- `GS_BROWSER_CMD` — override the command used to open the browser
-  during `gs login`. Defaults to `open` on macOS, `xdg-open` on Linux,
-  `start` on Windows.
-
-## Credentials storage
-
-`~/.greatstore/credentials.json` is created with mode `0700` on its
-directory and `0600` on the file. The CLI verifies this on every read
-and refuses to use a file with broader permissions.
-
-The credentials file holds a single short-lived JWT plus its decoded
-identity claims. There is no refresh token; when the JWT expires, the
-next command prompts for re-auth and re-runs the browser flow.
-
-## Development
-
-```
-cd cli
-npm install
-npm run typecheck
-npm test
-npm run build
-node dist/cli.js --help
-```
-
-To exercise against local `wrangler dev`, point at the tenant host:
-
-```
-GS_API_BASE=http://demo.localhost:8787 \
-GS_NAV_BASE=https://nav.maker.co \
-node dist/cli.js list --store demo
-```
-
-## Release flow
-
-1. Bump `cli/package.json` version.
-2. Tag: `git tag cli-v0.0.2 && git push origin cli-v0.0.2`.
-3. `cli-publish` GitHub Actions workflow runs typecheck + test + build,
-   then `npm publish --access public` with `NPM_TOKEN`.

package/dist/cli.js

@@ -743,10 +743,18 @@ function viteConfig() {
   return `import { defineConfig } from "vite";
 import react from "@vitejs/plugin-react";
 
-// Builds a single ESM bundle suitable for \`gs push\`. React + ReactDOM
-// are externalized \u2014 the GreatStore runtime provides them at load time.
+// Builds a single self-contained ESM bundle suitable for \`gs push\`.
+// React + ReactDOM are bundled in so the file is portable across
+// origins; the storefront mounts each component inside a shadow root
+// so a duplicate React instance is harmless in practice.
+// \`process.env.NODE_ENV\` is substituted at build time \u2014 react-dom
+// reads it to pick prod vs. dev mode, and lib builds don't do this
+// replacement on their own.
 export default defineConfig({
   plugins: [react()],
+  define: {
+    "process.env.NODE_ENV": JSON.stringify("production"),
+  },
   build: {
     lib: {
       entry: "component.tsx",
@@ -756,7 +764,6 @@ export default defineConfig({
     outDir: ".",
     emptyOutDir: false,
     rollupOptions: {
-      external: ["react", "react-dom", "react/jsx-runtime"],
       output: { entryFileNames: "bundle.js" },
     },
     minify: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatstore/cli",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "description": "CLI for authoring and shipping GreatStore custom components.",
   "license": "UNLICENSED",
   "type": "module",