@pplethai/cli 0.3.1 → 0.4.1

package/templates/golden-path/src/dev-personas.ts

@@ -0,0 +1,88 @@
+// Mock identities for local development (`npm run dev`).
+//
+// Pick one with DEV_PERSONA in .dev.vars (default "hq-staff"); add your own by
+// appending to DEV_PERSONAS. Each persona is a real Identity shape, so what
+// works against a persona works against a real PPLE ID user in production.
+//
+// This whole module is compiled out of the deployed Worker: it is only reached
+// from the `import.meta.env.DEV` branch in src/auth.ts, which `vite build`
+// eliminates (docs/adr/0011). Nothing here can run in production.
+//
+// The rule your app code must follow (docs/adr/0012): gate authorization on
+// `effective`, use `actor` for audit/display only, and honor
+// `effective.isDelegated`.
+import type { Identity } from "../shared/api";
+
+export const DEFAULT_DEV_PERSONA = "hq-staff";
+
+export const DEV_PERSONAS: Record<string, Identity> = {
+  // Party HQ staff: every province in scope, no special capabilities. Default.
+  "hq-staff": {
+    actor: { sub: "dev-hq-staff", name: "Local Dev (HQ)", mobile: "0800000001" },
+    effective: {
+      isDelegated: false,
+      activeRole: "hq",
+      eligibleRoles: ["hq"],
+      provinces: ["all"],
+      extraRoles: [],
+    },
+  },
+
+  // A province coordinator: scoped to a single province.
+  "province-coordinator": {
+    actor: {
+      sub: "dev-province-coordinator",
+      name: "Local Dev (จังหวัด)",
+      mobile: "0800000002",
+    },
+    effective: {
+      isDelegated: false,
+      activeRole: "province",
+      eligibleRoles: ["province"],
+      provinces: ["เชียงใหม่"],
+      extraRoles: ["province_co"],
+    },
+  },
+
+  // Carries the platform:admin extra-role (may work the platform admin queue).
+  "platform-admin": {
+    actor: {
+      sub: "dev-platform-admin",
+      name: "Local Dev (Admin)",
+      mobile: "0800000003",
+    },
+    effective: {
+      isDelegated: false,
+      activeRole: "hq",
+      eligibleRoles: ["hq"],
+      provinces: ["all"],
+      extraRoles: ["platform:admin"],
+    },
+  },
+
+  // A delegate acting for a supervisor: effective.* are the SUPERVISOR's role
+  // and scope, actor.* is the delegate human, and isDelegated is true.
+  delegate: {
+    actor: { sub: "dev-delegate", name: "Local Dev (ผู้รับมอบ)", mobile: "0800000004" },
+    effective: {
+      isDelegated: true,
+      activeRole: "province",
+      eligibleRoles: ["province"],
+      provinces: ["เชียงใหม่"],
+      extraRoles: [],
+    },
+  },
+};
+
+/** Resolve the configured persona; an unknown name warns and falls back to the
+ * default so a typo never breaks local dev. */
+export function resolveDevPersona(name: string | undefined): Identity {
+  const key = name?.trim() || DEFAULT_DEV_PERSONA;
+  const persona = DEV_PERSONAS[key];
+  if (persona) return persona;
+  console.warn(
+    `Unknown DEV_PERSONA "${key}"; using "${DEFAULT_DEV_PERSONA}". ` +
+      `Valid personas: ${Object.keys(DEV_PERSONAS).join(", ")}.`,
+  );
+  return DEV_PERSONAS[DEFAULT_DEV_PERSONA] as Identity;
+}

package/templates/golden-path/src/env.ts

@@ -14,6 +14,8 @@ export interface Env {
   NOTIFY_API_BASE: string;
   NOTIFY_API_KEY?: string;
 
-  // Local development auth bypass. Never set in production.
-  DEV_AUTH?: string;
+  // Local development only: which mock persona to sign in as (src/dev-personas.ts).
+  // Unset means the default persona; "none" turns the bypass off. Never set in
+  // production — the dev bypass is compiled out of the deployed Worker anyway.
+  DEV_PERSONA?: string;
 }

package/templates/golden-path/src/index.ts

@@ -4,8 +4,9 @@
 // so each concern is easy to find and test.
 import { Hono } from "hono";
 import type { ContentfulStatusCode } from "hono/utils/http-status";
+import type { Identity } from "../shared/api";
 import { CreateNoteSchema, NotificationSchema } from "../shared/api";
-import { authenticate, type Identity } from "./auth";
+import { authenticate } from "./auth";
 import { addNote, listNotes } from "./db";
 import type { Env } from "./env";
 import { getFile, listFiles, putFile } from "./files";
@@ -29,12 +30,13 @@ export function createApp(overrides: AppOverrides = {}) {
   // Liveness check — no auth, so uptime monitors and CI smoke tests can hit it.
   app.get("/health", (c) => c.json({ ok: true }));
 
-  // Everything below requires a valid PPLE ID token.
+  // Everything below requires a valid PPLE ID token. authenticate() owns the
+  // whole decision — including the local dev-persona bypass — so a missing
+  // token is just one of the ways it can say 401.
   app.use("*", async (c, next) => {
     const token = (c.req.header("authorization") ?? "")
       .replace(/^Bearer\s+/i, "")
       .trim();
-    if (!token) return c.json({ error: "not_authenticated" }, 401);
     const result = await authenticate(c.env, token, fetchImpl);
     if (!result.ok) {
       return c.json(
@@ -46,10 +48,9 @@ export function createApp(overrides: AppOverrides = {}) {
     await next();
   });
 
-  app.get("/me", (c) => {
-    const { sub, name } = c.get("identity");
-    return c.json({ sub, name });
-  });
+  // The signed-in caller. `actor` is who is clicking; `effective` is what they
+  // may do — gate authorization on `effective`, never on `actor`.
+  app.get("/me", (c) => c.json(c.get("identity")));
 
   // --- D1 demo: a shared notes list ---
   app.get("/notes", async (c) => c.json({ notes: await listNotes(c.env.DB) }));

package/templates/golden-path/src/vite-env.d.ts

@@ -0,0 +1,14 @@
+// The Worker is built by Vite (via @cloudflare/vite-plugin), so `import.meta.env`
+// is available here just as it is in the browser bundle. Vite replaces
+// `import.meta.env.DEV` with a literal: `true` under `vite dev` and `vitest`,
+// `false` in `vite build` — which is what lets the local auth bypass in
+// src/auth.ts be dead-code-eliminated from the deployed Worker.
+interface ImportMetaEnv {
+  readonly DEV: boolean;
+  readonly PROD: boolean;
+  readonly MODE: string;
+}
+
+interface ImportMeta {
+  readonly env: ImportMetaEnv;
+}

package/templates/golden-path/test/harness.ts

@@ -2,7 +2,10 @@ import { env } from "cloudflare:test";
 import type { Env } from "../src/env";
 import { createApp } from "../src/index";
 
-export const DEV_TOKEN = "dev-token";
+// A placeholder bearer. In tests `import.meta.env.DEV` is true, so the Worker
+// signs in as the default persona and ignores the token — the value only
+// matters on the real PPLE ID path, where tests pass an explicit one.
+export const DEV_TOKEN = "dev";
 
 export interface Fakes {
   /** Handles GET {SSO_BASE_URL}/oidc/v1/userinfo */
@@ -39,7 +42,8 @@ export function makeHarness(fakes: Fakes = {}, envOverrides: Partial<Env> = {})
     ...env,
     SSO_BASE_URL: "https://sso.test",
     NOTIFY_API_BASE: "",
-    DEV_AUTH: DEV_TOKEN,
+    // No DEV_PERSONA ⇒ the default persona. Pass { DEV_PERSONA: "none" } to
+    // exercise the real PPLE ID path instead.
     ...envOverrides,
   };
 

package/templates/golden-path/test/smoke.test.ts

@@ -11,38 +11,121 @@ describe("health", () => {
   });
 });
 
-describe("authentication", () => {
-  it("rejects requests without a token", async () => {
+describe("local dev personas", () => {
+  it("signs in as the default persona (hq-staff) with no config", async () => {
     const h = makeHarness();
-    const res = await h.request("/api/me", {}, null);
-    expect(res.status).toBe(401);
-    expect(await res.json()).toMatchObject({ error: "not_authenticated" });
+    const res = await h.request("/api/me");
+    expect(res.status).toBe(200);
+    expect(await res.json()).toMatchObject({
+      actor: { sub: "dev-hq-staff" },
+      effective: { activeRole: "hq", provinces: ["all"], isDelegated: false },
+    });
   });
 
-  it("accepts the dev-bypass token locally", async () => {
-    const h = makeHarness();
-    const res = await h.request("/api/me");
+  it("switches persona via DEV_PERSONA, even without a token", async () => {
+    const h = makeHarness({}, { DEV_PERSONA: "province-coordinator" });
+    const res = await h.request("/api/me", {}, null);
     expect(res.status).toBe(200);
-    expect(await res.json()).toMatchObject({ sub: "dev-user" });
+    expect(await res.json()).toMatchObject({
+      effective: { activeRole: "province", provinces: ["เชียงใหม่"], extraRoles: ["province_co"] },
+    });
+  });
+
+  it("exposes a delegate persona as effective≠actor", async () => {
+    const h = makeHarness({}, { DEV_PERSONA: "delegate" });
+    const { actor, effective } = await (await h.request("/api/me")).json<{
+      actor: { sub: string };
+      effective: { isDelegated: boolean };
+    }>();
+    expect(actor.sub).toBe("dev-delegate");
+    expect(effective.isDelegated).toBe(true);
+  });
+
+  it("falls back to the default persona on an unknown DEV_PERSONA", async () => {
+    const h = makeHarness({}, { DEV_PERSONA: "does-not-exist" });
+    expect(await (await h.request("/api/me")).json()).toMatchObject({
+      actor: { sub: "dev-hq-staff" },
+    });
+  });
+});
+
+describe("real PPLE ID authentication (DEV_PERSONA=none)", () => {
+  it("rejects requests without a token", async () => {
+    const h = makeHarness({}, { DEV_PERSONA: "none" });
+    const res = await h.request("/api/me", {}, null);
+    expect(res.status).toBe(401);
+    expect(await res.json()).toMatchObject({ error: "not_authenticated" });
   });
 
   it("validates real tokens against PPLE ID userinfo", async () => {
-    // No dev bypass here; an unknown token must be checked with PPLE ID.
     const h = makeHarness(
       { sso: () => Response.json({ error: "invalid_token" }, { status: 401 }) },
-      { DEV_AUTH: undefined },
+      { DEV_PERSONA: "none" },
     );
     const res = await h.request("/api/me", {}, "some-real-looking-token");
     expect(res.status).toBe(401);
   });
 
-  it("resolves identity from a valid PPLE ID token", async () => {
+  it("resolves an effective/actor Identity from a valid token", async () => {
     const h = makeHarness(
-      { sso: () => Response.json({ sub: "u-42", name: "Somchai" }) },
-      { DEV_AUTH: undefined },
+      {
+        sso: () =>
+          Response.json({
+            sub: "u-42",
+            name: "Somchai",
+            ad: {
+              user: {
+                id: 7,
+                role: "hq",
+                mobile: "0810000007",
+                metadata: { ad: { extra_roles: ["exco"] } },
+              },
+              actualPpleUser: { id: 7, role: "hq", mobile: "0810000007" },
+              activeRole: "hq",
+              eligibleRoles: ["hq"],
+              eligibleProvinces: ["all"],
+            },
+          }),
+      },
+      { DEV_PERSONA: "none" },
     );
     const res = await h.request("/api/me", {}, "valid-token");
-    expect(await res.json()).toMatchObject({ sub: "u-42", name: "Somchai" });
+    expect(await res.json()).toMatchObject({
+      actor: { sub: "u-42", name: "Somchai", mobile: "0810000007" },
+      effective: {
+        isDelegated: false,
+        activeRole: "hq",
+        provinces: ["all"],
+        extraRoles: ["exco"],
+      },
+    });
+  });
+
+  it("keeps actor (the delegate) distinct from effective (the supervisor)", async () => {
+    const h = makeHarness(
+      {
+        sso: () =>
+          Response.json({
+            sub: "u-delegate",
+            name: "Nok",
+            ad: {
+              // The supervisor whose authority is in effect…
+              user: { id: 9, role: "province", mobile: "0810000009" },
+              // …while the real human acting is the delegate.
+              actualPpleUser: { id: 14, role: "delegate", mobile: "0810000014" },
+              activeRole: "province",
+              eligibleRoles: ["province"],
+              eligibleProvinces: ["เชียงใหม่"],
+            },
+          }),
+      },
+      { DEV_PERSONA: "none" },
+    );
+    const res = await h.request("/api/me", {}, "valid-token");
+    expect(await res.json()).toMatchObject({
+      actor: { sub: "u-delegate", mobile: "0810000014" },
+      effective: { isDelegated: true, activeRole: "province", provinces: ["เชียงใหม่"] },
+    });
   });
 });
 

package/templates/golden-path/web/App.tsx

@@ -42,7 +42,7 @@ export function App() {
       <header className="appbar">
         <Logo className="appbar__logo" title="People's Party" />
         <span className="appbar__title">PPLE App</span>
-        {me && <Badge>{me.name ?? me.sub}</Badge>}
+        {me && <Badge>{me.actor.name ?? me.actor.sub}</Badge>}
       </header>
 
       <div className="stack">

package/templates/golden-path/web/main.tsx

@@ -35,8 +35,8 @@ function ErrorScreen({ message }: { message: string }) {
 
 const root = createRoot(document.getElementById("root")!);
 
-// Establish the session (PPLE Today token, browser PPLE ID login, or local
-// DEV_AUTH) before rendering, so the first paint is the right screen.
+// Establish the session (PPLE Today token, browser PPLE ID login, or a local
+// dev persona) before rendering, so the first paint is the right screen.
 bootstrap().then((result) => {
   root.render(
     <StrictMode>

package/templates/golden-path/web/pple.ts

@@ -1,8 +1,8 @@
 // The single place the app talks to PPLE Today and to its own API.
 //
 // Three ways the app can start:
-//   1. Local dev (`vite dev`) — bypass PPLE Today, use the DEV_AUTH token so
-//      the Worker accepts you as a fake user.
+//   1. Local dev (`vite dev`) — no login. The Worker signs you in as a mock
+//      persona (DEV_PERSONA); we just attach a placeholder bearer it ignores.
 //   2. Inside PPLE Today — the SDK captures the access token from the launch
 //      URL; we attach it to every API call.
 //   3. A plain browser — the same SDK runs the PPLE ID OIDC sign-in (redirect
@@ -21,8 +21,9 @@ const OAUTH_CLIENT_ID = import.meta.env.VITE_OAUTH_CLIENT_ID ?? "";
 const OAUTH_REDIRECT_URI =
   import.meta.env.VITE_OAUTH_REDIRECT_URI ?? window.location.origin;
 
-// Must match DEV_AUTH in .dev.vars so the Worker's dev bypass accepts it.
-const DEV_TOKEN = "dev-token";
+// In local dev the Worker ignores the token entirely (it signs you in as a
+// mock persona), but api() still needs a non-null bearer to attach.
+const DEV_PLACEHOLDER_TOKEN = "dev";
 
 export type Bootstrap =
   | { kind: "signed-in" }
@@ -34,7 +35,7 @@ let token: string | null = null;
 export async function bootstrap(): Promise<Bootstrap> {
   try {
     if (import.meta.env.DEV) {
-      token = DEV_TOKEN;
+      token = DEV_PLACEHOLDER_TOKEN;
       return { kind: "signed-in" };
     }
 

package/dist/api.js

@@ -1,108 +0,0 @@
-// The Provisioner API as the CLI sees it. Every non-2xx answer becomes a
-// sentence a Builder can act on — this is the only place in the CLI that
-// knows the platform's error codes.
-import { CliError, SIGN_IN_EXPIRED } from "./errors.js";
-export class ProvisionerClient {
-    deps;
-    token;
-    constructor(deps, token) {
-        this.deps = deps;
-        this.token = token;
-    }
-    me() {
-        return this.request("GET", "/me");
-    }
-    app(slug) {
-        return this.request("GET", `/apps/${encodeURIComponent(slug)}`, { slug });
-    }
-    /** Create a Builder App; the Provisioner assigns the App Slug (ADR-0001). */
-    createApp(name) {
-        return this.request("POST", "/apps", { body: { name } });
-    }
-    repoToken(slug) {
-        return this.request("POST", `/apps/${encodeURIComponent(slug)}/repo-token`, { slug });
-    }
-    deploys(slug) {
-        return this.request("GET", `/apps/${encodeURIComponent(slug)}/deploys`, { slug }).then((r) => r.deploys);
-    }
-    env(slug) {
-        return this.request("GET", `/apps/${encodeURIComponent(slug)}/env`, { slug }).then((r) => r.env);
-    }
-    metrics(slug) {
-        return this.request("GET", `/apps/${encodeURIComponent(slug)}/metrics`, { slug });
-    }
-    collaborators(slug) {
-        return this.request("GET", `/apps/${encodeURIComponent(slug)}/collaborators`, { slug }).then((r) => r.collaborators);
-    }
-    requests(slug) {
-        return this.request("GET", `/apps/${encodeURIComponent(slug)}/requests`, { slug }).then((r) => r.requests);
-    }
-    invites(slug) {
-        return this.request("GET", `/apps/${encodeURIComponent(slug)}/invites`, { slug }).then((r) => r.invites);
-    }
-    setEnv(slug, key, value, secret) {
-        return this.request("PUT", `/apps/${encodeURIComponent(slug)}/env/${encodeURIComponent(key)}`, { slug, body: { value, secret } });
-    }
-    deleteEnv(slug, key) {
-        return this.request("DELETE", `/apps/${encodeURIComponent(slug)}/env/${encodeURIComponent(key)}`, { slug, envKey: key });
-    }
-    async request(method, path, context = {}) {
-        const url = `${this.deps.config.apiBase}${path}`;
-        const headers = {
-            authorization: `Bearer ${this.token}`,
-        };
-        let body;
-        if (context.body !== undefined) {
-            headers["content-type"] = "application/json";
-            body = JSON.stringify(context.body);
-        }
-        const res = await this.deps
-            .fetch(url, { method, headers, body })
-            .catch(() => null);
-        if (!res) {
-            throw new CliError("เชื่อมต่อ PPLE Platform ไม่ได้", "ตรวจสอบการเชื่อมต่ออินเทอร์เน็ตแล้วลองใหม่อีกครั้ง");
-        }
-        if (res.ok) {
-            if (res.status === 204)
-                return undefined;
-            return (await res.json());
-        }
-        const errBody = (await res.json().catch(() => ({})));
-        throw platformError(res.status, errBody.error, context);
-    }
-}
-function platformError(status, code, context = {}) {
-    const { slug, envKey } = context;
-    if (status === 401)
-        return SIGN_IN_EXPIRED;
-    if (code === "not_org_member") {
-        return new CliError("PPLE ID ของคุณยังไม่ได้อยู่ในองค์กรของพรรค จึงสร้างแอปไม่ได้", "กรุณาติดต่อหัวหน้าทีมของคุณเพื่อเพิ่มสิทธิ์ แล้วลองใหม่อีกครั้ง");
-    }
-    if (code === "agreement_required") {
-        return new CliError("คุณยังไม่ได้ยอมรับข้อตกลงผู้พัฒนา", "ยอมรับได้ที่ https://console.ppleth.ai แล้วรันคำสั่งนี้อีกครั้ง");
-    }
-    if (code === "app_has_no_repo") {
-        return new CliError(`${slug ? `"${slug}"` : "แอปนี้"} ยังตั้งค่าไม่เสร็จ`, "รอสักครู่แล้วลองใหม่อีกครั้ง หากยังเป็นแบบนี้ กรุณาติดต่อทีมแพลตฟอร์ม");
-    }
-    if (code === "invalid_key") {
-        return new CliError("คีย์นี้ใช้เป็นชื่อไม่ได้", "คีย์ต้องขึ้นต้นด้วยตัวอักษรหรือขีดล่าง ตามด้วยตัวอักษร ตัวเลข หรือขีดล่าง");
-    }
-    if (code === "reserved_key") {
-        return new CliError("คีย์นี้ถูกสงวนไว้โดยแพลตฟอร์ม", "เลือกชื่ออื่น — APP_SLUG, DB, FILES, NOTIFY_* และ PPLE_DEPLOY_ID ถูกใช้ไปแล้ว");
-    }
-    if (code === "invalid_value") {
-        return new CliError("บันทึกค่านี้ไม่สำเร็จ", "ส่งค่ามาเป็น argument ผ่าน `--file` หรือทาง stdin");
-    }
-    if (status === 404) {
-        if (envKey) {
-            return new CliError(`แอปนี้ไม่ได้ตั้งค่า "${envKey}" ไว้`, "รัน `pple env list` เพื่อดูค่าที่ตั้งไว้");
-        }
-        return new CliError(slug
-            ? `ไม่มีแอปชื่อ "${slug}" ที่เป็นของคุณ`
-            : "ไม่พบสิ่งนี้บนแพลตฟอร์ม", "ตรวจสอบรายการแอปได้ที่ https://console.ppleth.ai");
-    }
-    if (status >= 500 || code === "sso_unavailable") {
-        return new CliError("PPLE Platform กำลังมีปัญหาในขณะนี้", "รอสักครู่แล้วลองใหม่อีกครั้ง หากยังเกิดขึ้นอีก กรุณาแจ้งทีมแพลตฟอร์ม");
-    }
-    return new CliError("PPLE Platform ปฏิเสธคำขอนี้", code ? `ข้อความจากระบบ: ${code}` : undefined);
-}

package/dist/cli.js

@@ -1,151 +0,0 @@
-import * as auth from "./commands/auth.js";
-import { deploy } from "./commands/deploy.js";
-import * as env from "./commands/env.js";
-import { info } from "./commands/info.js";
-import { init } from "./commands/init.js";
-import { upgrade } from "./commands/upgrade.js";
-import { CliError } from "./errors.js";
-import { checkForUpdate, wantsUpdateCheck } from "./update.js";
-const USAGE = `pple — สร้างและส่งแอปขึ้น PPLE Platform
-
-  pple auth login          เข้าสู่ระบบด้วย PPLE ID ของคุณ
-  pple auth logout         ลบการเข้าสู่ระบบออกจากเครื่องนี้
-  pple whoami              ดูว่ากำลังเข้าสู่ระบบด้วยบัญชีใด
-
-  pple init                สร้างแอปและตั้งค่าโค้ดบนเครื่องนี้
-  pple init --name "App"   สร้างแอปโดยไม่ต้องถาม (สำหรับ agent/สคริปต์)
-  pple init <app>          ตั้งค่าแอปที่มีอยู่แล้วบนแพลตฟอร์ม
-  pple deploy [-m "note"]  ส่งการเปลี่ยนแปลงของคุณขึ้นใช้งานจริง
-  pple info [<slug>]       ดูสถานะ การใช้งาน การดีพลอย และคีย์ env ของแอปนี้
-
-  pple env list            ดูตัวแปรและ secret ของแอปนี้
-  pple env set <KEY> [VAL] ตั้งค่าตัวแปร (หรือ --secret) รับค่าจาก arg, --file หรือ stdin
-  pple env delete <KEY>    ลบตัวแปรหรือ secret
-
-  pple upgrade             อัปเดต pple เป็นเวอร์ชันล่าสุด
-
-ตัวเลือก
-  -m, --message <note>     สิ่งที่เปลี่ยนแปลง แสดงในประวัติของแอป
-      --name <App Name>    สร้างแอปใหม่ด้วยชื่อนี้ (pple init)
-      --dir <folder>       ตำแหน่งที่จะวางโค้ดของแอป (pple init)
-      --file <path>        อ่านค่า env จากไฟล์ (pple env set)
-      --secret             เก็บค่าเป็น secret แบบเขียนอย่างเดียว (pple env set)
-  -h, --help               แสดงวิธีใช้นี้
-`;
-/**
- * Parse and run one command line. Returns the process exit code; expected
- * failures come back as 1 with a Builder-language message already printed,
- * and anything else throws for the entry point to report as a CLI bug.
- */
-export async function run(argv, deps) {
-    try {
-        // Before the command, never during it: an upgrade mid-deploy would swap
-        // the CLI under its own feet, and this is the one point where handing the
-        // whole command line to the new version costs nothing.
-        if (wantsUpdateCheck(argv)) {
-            const handled = await checkForUpdate(deps, argv);
-            if (handled !== null)
-                return handled;
-        }
-        await dispatch(argv, deps);
-        return 0;
-    }
-    catch (e) {
-        if (e instanceof CliError) {
-            deps.out.fail(e);
-            return 1;
-        }
-        throw e;
-    }
-}
-async function dispatch(argv, deps) {
-    const args = [...argv];
-    if (args.length === 0 || args[0] === "--help" || args[0] === "-h") {
-        deps.out.say(USAGE);
-        return;
-    }
-    const command = args.shift();
-    switch (command) {
-        case "auth": {
-            const sub = args.shift();
-            if (sub === "login")
-                return auth.login(deps);
-            if (sub === "logout")
-                return auth.logout(deps);
-            if (sub === "whoami")
-                return auth.whoami(deps);
-            throw unknown(`auth ${sub ?? ""}`.trim());
-        }
-        case "whoami":
-            return auth.whoami(deps);
-        case "init": {
-            const dir = takeOption(args, "--dir");
-            const name = takeOption(args, "--name");
-            const slug = args.shift();
-            if (name !== undefined && slug) {
-                throw new CliError("`pple init` รับได้เฉพาะชื่อแอปใหม่ หรือแอปที่มีอยู่แล้ว อย่างใดอย่างหนึ่งเท่านั้น", 'ใช้ `pple init --name "ชื่อแอปของคุณ"` เพื่อสร้างใหม่ หรือ `pple init <app>` สำหรับแอปที่มีอยู่แล้ว');
-            }
-            return init(deps, { slug, name, dir });
-        }
-        case "deploy": {
-            const message = takeOption(args, "--message", "-m");
-            return deploy(deps, { message });
-        }
-        case "info": {
-            const slug = args.shift();
-            return info(deps, slug);
-        }
-        case "env": {
-            const sub = args.shift();
-            if (sub === "list")
-                return env.list(deps);
-            if (sub === "set") {
-                const secret = takeFlag(args, "--secret");
-                const file = takeOption(args, "--file");
-                const key = args.shift();
-                const value = args.shift();
-                if (!key) {
-                    throw new CliError("`pple env set` ต้องระบุ KEY", "ตัวอย่าง: `pple env set API_URL https://example.com`");
-                }
-                return env.set(deps, { key, value, secret, file });
-            }
-            if (sub === "delete") {
-                const key = args.shift();
-                if (!key) {
-                    throw new CliError("`pple env delete` ต้องระบุ KEY", "ตัวอย่าง: `pple env delete API_URL`");
-                }
-                return env.remove(deps, key);
-            }
-            throw unknown(`env ${sub ?? ""}`.trim());
-        }
-        case "upgrade":
-            return upgrade(deps);
-        case "help":
-            deps.out.say(USAGE);
-            return;
-        default:
-            throw unknown(command ?? "");
-    }
-}
-function unknown(command) {
-    return new CliError(`ไม่มีคำสั่ง \`pple ${command}\``, "รัน `pple --help` เพื่อดูคำสั่งทั้งหมด");
-}
-/** Pull `--name value` out of the argument list, wherever it appears. */
-function takeOption(args, long, short) {
-    const index = args.findIndex((arg) => arg === long || (short && arg === short));
-    if (index === -1)
-        return undefined;
-    const [, value] = args.splice(index, 2);
-    if (value === undefined || value.startsWith("-")) {
-        throw new CliError(`\`${long}\` ต้องระบุค่าตามหลัง`);
-    }
-    return value;
-}
-/** Pull a bare `--flag` out of the argument list, wherever it appears. */
-function takeFlag(args, flag) {
-    const index = args.indexOf(flag);
-    if (index === -1)
-        return false;
-    args.splice(index, 1);
-    return true;
-}