@redeemid/emdash 0.0.11 → 0.0.12

package/README.md

@@ -2,7 +2,7 @@
 
 Shopify customer accounts, member levels and paywalls for [EmDash](https://github.com/emdash-cms/emdash) sites. Shopify runs the store and the customer account; EmDash runs the content.
 
-**Status: 0.0.11, early.** Runs on Node and Cloudflare Workers. Sign-in, the member mirror, webhooks, levels, rules, the meter and drip, teasers, badges, the page gate, the Shopify cart and checkout, the staff tools, preferences, protected files, privacy requests, AI agent tools, the command line, replacement text and outbound events are covered by an end-to-end test against a fake store.
+**Status: 0.0.12, early.** Runs on Node and Cloudflare Workers. Sign-in, the member mirror, webhooks, levels, rules, the meter and drip, teasers, badges, the page gate, the Shopify cart and checkout, the staff tools, preferences, protected files, privacy requests, AI agent tools, the command line, replacement text and outbound events are covered by an end-to-end test against a fake store.
 
 ## What it does
 
@@ -89,6 +89,8 @@ Set these secrets in the environment (`.env` locally, `wrangler secret put` on W
 | `REDEEMID_SHOPIFY_STOREFRONT_PRIVATE_TOKEN` | Storefront API | Private access token, for the plan cards and checkout (server-side). |
 | `REDEEMID_SHOPIFY_STOREFRONT_PUBLIC_TOKEN` | Storefront API | Public access token. Only used when the private token isn't set. |
 
+Set them as runtime variables or secrets of the site itself, not as build-time variables. If a value shows as Missing on the Status page, check its name: the Status page also lists any `REDEEMID_` variable that is set but that RedeemID doesn't read, by name only.
+
 RedeemID finds the authorization, token and logout endpoints itself from the store's discovery documents, so they need no setting.
 
 In Shopify, give the Customer Account API client these settings:

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@redeemid/emdash",
-	"version": "0.0.11",
+	"version": "0.0.12",
 	"description": "Shopify customer accounts, member levels and paywalls for EmDash sites. Shopify runs commerce; EmDash runs content.",
 	"type": "module",
 	"license": "MIT",

package/src/agents.ts

@@ -11,7 +11,7 @@
 
 import { adminConfigured } from "./admin-api.js";
 import { describe as describeRequirement, dripDays, levelsFor, membership, passes, requirement, termTree, type Requirement, type Terms } from "./access.js";
-import { ENV, env, storeDomain, type RedeemIDConfig } from "./config.js";
+import { ENV, env, storeDomain, unknownEnvNames, type RedeemIDConfig } from "./config.js";
 import { featuresFor } from "./features.js";
 import { bodyClauses } from "./files.js";
 import { holdsItem, soldItem, type SoldItem } from "./blocks-names.js";
@@ -155,6 +155,7 @@ export async function siteHealth(config: RedeemIDConfig, s: Stores): Promise<Rec
 		lastWebhook: items[0]?.data ?? null,
 		openPrivacyRequests: open.items.length,
 		ignoredTextReplacements: textProblems(config).length,
+		unusedSettings: unknownEnvNames(),
 	};
 }
 

package/src/config.ts

@@ -192,6 +192,19 @@ export function env(name: string): string {
 	return typeof value === "string" ? value.trim() : "";
 }
 
+/**
+ * Names of REDEEMID_ variables that are set but that RedeemID doesn't read,
+ * such as a misspelled secret or a WordPress plugin constant. Names only,
+ * never values.
+ */
+export function unknownEnvNames(): string[] {
+	if (typeof process === "undefined" || !process.env) return [];
+	const known = new Set<string>(Object.values(ENV));
+	return Object.keys(process.env)
+		.filter((k) => k.startsWith("REDEEMID_") && !known.has(k))
+		.sort();
+}
+
 /** The store origin, e.g. https://shop.example.com. */
 export function shopOrigin(config: RedeemIDConfig): string {
 	const raw = storeDomain(config).replace(/\/+$/, "");

package/src/plugin.ts

@@ -28,7 +28,7 @@ import type { ResolvedPlugin, RouteContext } from "emdash";
 import { definePlugin } from "emdash";
 
 import { describe, levelsFor, SIGNED_IN } from "./access.js";
-import { env, ENV, storeDomain, type RedeemIDConfig } from "./config.js";
+import { env, ENV, storeDomain, unknownEnvNames, type RedeemIDConfig } from "./config.js";
 import { discover } from "./shopify.js";
 import { stores, type MemberRecord, type Stores } from "./storage.js";
 import { PAGES, WIDGETS } from "./descriptor.js";
@@ -544,6 +544,7 @@ async function statusPage(config: RedeemIDConfig, request: Request) {
 					{ label: "Storefront API access", value: c.storefront },
 					{ label: "Last webhook", value: delivery ?? "None received yet" },
 					{ label: "Replacement text", value: textSummary(config) },
+					...(unknownEnvNames().length ? [{ label: "Set but not used (check the name)", value: unknownEnvNames().join(", ") }] : []),
 				],
 			},
 			...(textProblems(config).length

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.0.11";
+export const VERSION = "0.0.12";