@wervt/cli 0.2.11 → 0.2.13

package/README.md

@@ -1,3 +1,20 @@
 # @wervt/cli
 
-Build and host small Nuxt apps written by agents. Work in progress, nothing usable yet.
+The `wervt` command: deploy and manage apps on a [wervt](https://wervt.app) server.
+
+```bash
+vpx @wervt/cli login --url https://api.wervt.app   # approve the code in the dashboard
+vpx @wervt/cli skill install                       # teach your agent wervt
+```
+
+In an app (`vp create wervt my-app` adds the CLI as a dev dependency):
+
+```bash
+vp exec wervt deploy                      # build, upload, migrate, activate
+vp exec wervt access my-app --public      # or --add friend@example.com
+vp exec wervt logs my-app
+```
+
+Without [Vite+](https://viteplus.dev), use `npx @wervt/cli` and `pnpm exec wervt`. `wervt --help`
+lists every command: `apps`, `releases`, `rollback`, `activate`, `env`, `tokens`, `members`,
+`tasks`, `stats`, `delete`, `whoami`, … Docs: [wervt.app](https://wervt.app/getting-started/quickstart).

package/dist/index.mjs

@@ -463,6 +463,45 @@ const access = defineCommand({
 		if (result.visibility === "private") console.log(result.allow.length ? `allowed: ${result.allow.join(", ")}` : "allowed: admins only");
 	}
 });
+const members = defineCommand({
+	meta: {
+		name: "members",
+		description: "Show or change who manages an app (its owner and members)"
+	},
+	args: {
+		app: {
+			type: "positional",
+			required: true,
+			description: "App name"
+		},
+		add: {
+			type: "string",
+			description: "Add members by email (comma separated)"
+		},
+		remove: {
+			type: "string",
+			description: "Remove members by email (comma separated)"
+		},
+		owner: {
+			type: "string",
+			description: "Hand the app to another owner"
+		},
+		...connection
+	},
+	async run({ args }) {
+		const change = {};
+		if (args.add) change.add = toList(args.add);
+		if (args.remove) change.remove = toList(args.remove);
+		if (args.owner) change.owner = args.owner;
+		const result = await (Object.keys(change).length ? await api(`/v1/apps/${args.app}/owners`, args, {
+			method: "PATCH",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(change)
+		}) : await api(`/v1/apps/${args.app}/owners`, args)).json();
+		console.log(`owner: ${result.owner}`);
+		console.log(`members: ${result.members.length ? result.members.join(", ") : "none"}`);
+	}
+});
 const env = defineCommand({
 	meta: {
 		name: "env",
@@ -504,6 +543,48 @@ const env = defineCommand({
 		if (Object.keys(set).length || unset.length) console.log("Applies from the next request.");
 	}
 });
+const accounts = defineCommand({
+	meta: {
+		name: "accounts",
+		description: "Admins: list accounts and their app limits, or set one"
+	},
+	args: {
+		email: {
+			type: "positional",
+			required: false,
+			description: "Account to change"
+		},
+		apps: {
+			type: "string",
+			description: "Apps the account may own: a number, \"none\" for no limit, \"default\""
+		},
+		...connection
+	},
+	async run({ args }) {
+		if (args.email) {
+			if (!args.apps) throw new Error("Pass --apps <n|none|default> to change the limit");
+			const apps = args.apps === "none" ? null : args.apps === "default" ? "default" : Number(args.apps);
+			const result = await (await api(`/v1/accounts/${encodeURIComponent(args.email)}`, args, {
+				method: "PATCH",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({ apps })
+			})).json();
+			return console.log(`${result.email}: ${result.limits.apps ?? "no limit"} apps`);
+		}
+		const result = await (await api("/v1/accounts", args)).json();
+		console.log(`default: ${result.defaults.apps ?? "no limit"} apps per account`);
+		for (const account of result.accounts) {
+			const list = account.apps.length ? `  ${account.apps.join(", ")}` : "";
+			if (account.admin) {
+				console.log(`${account.email}  ${account.apps.length} apps (admin)${list}`);
+				continue;
+			}
+			const limit = account.limits.apps ?? "no limit";
+			const own = "apps" in account.custom ? "" : " (default)";
+			console.log(`${account.email}  ${account.apps.length}/${limit}${own}${list}`);
+		}
+	}
+});
 const tokens = defineCommand({
 	meta: {
 		name: "tokens",
@@ -791,12 +872,16 @@ const whoami = defineCommand({
 	args: connection,
 	async run({ args }) {
 		const { url, token } = await resolveConfig(args);
-		const deployApp = token.match(/^wervtd_([a-z0-9-]+)_/)?.[1];
-		let role = deployApp ? `deploy token for ${deployApp}` : "unknown";
-		if (!deployApp) {
-			const res = await fetch(`${url}/v1/databases`, { headers: { authorization: `Bearer ${token}` } });
-			if (res.status === 401) throw new Error(`The token is not valid for ${url}`);
-			role = res.ok ? "admin" : res.status === 403 ? "read" : `unknown (${res.status})`;
+		const res = await fetch(`${url}/v1/whoami`, { headers: { authorization: `Bearer ${token}` } });
+		if (res.status === 401) throw new Error(`The token is not valid for ${url}`);
+		let role;
+		if (res.ok) {
+			const me = await res.json();
+			role = me.role === "deploy" ? `deploy token for ${me.app}` : me.email ? `${me.role} (${me.email})` : me.role;
+		} else {
+			const deployApp = token.match(/^wervtd_([a-z0-9-]+)_/)?.[1];
+			const probe = deployApp ? void 0 : await fetch(`${url}/v1/databases`, { headers: { authorization: `Bearer ${token}` } });
+			role = deployApp ? `deploy token for ${deployApp}` : probe.ok ? "admin" : probe.status === 403 ? "read" : `unknown (${probe.status})`;
 		}
 		console.log(`${url}\n${role}`);
 	}
@@ -939,6 +1024,8 @@ runMain(defineCommand({
 		rollback,
 		reprovision,
 		access,
+		members,
+		accounts,
 		env,
 		tokens,
 		tasks,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wervt/cli",
-  "version": "0.2.11",
+  "version": "0.2.13",
   "description": "Deploy and manage apps on wervt.",
   "keywords": [
     "agents",

package/skill/SKILL.md

@@ -63,8 +63,9 @@ existing app, work in its repository instead.
 
 ```bash
 pnpm exec wervt deploy                            # build, upload, migrate, activate
-pnpm exec wervt access <name> --public            # new apps are private (signed-in admins only)
+pnpm exec wervt access <name> --public            # new apps are private (owner, members, admins)
 pnpm exec wervt access <name> --add a@x.com,*@company.com   # or let specific people in
+pnpm exec wervt members <name> --add a@x.com      # who may deploy and manage it (the first deploy owns it)
 pnpm exec wervt env <name> --set KEY=value        # server env vars, applied from the next request
 ```