my-provider-dash-manager 0.2.8 → 0.3.0

package/README.md

@@ -31,12 +31,23 @@ panel lets you store a GitHub token, encrypted with Windows DPAPI, so the feed s
 ### Install from the command line
 
 ```bash
-npx my-provider-dash-manager                    # fetch the newest release and run its installer
-npx my-provider-dash-manager -- --silent        # install without the wizard
-npx my-provider-dash-manager -- --download-only # just fetch the .exe
+npx my-provider-dash-manager            # install (or update) and launch
 ```
 
-From a checkout of this repository, the same thing is `npm run install:latest`.
+The same CLI manages the whole lifecycle — install it globally with
+`npm i -g my-provider-dash-manager` and the commands are also available as `mpdm`:
+
+| Command | What it does |
+|---|---|
+| `my-provider-dash-manager` | Install or update to the newest release, then launch |
+| `… install` / `… update` | Install or update only |
+| `… start` | Launch the installed app |
+| `… status` | Installed version vs latest, plus where the app and your data live |
+| `… where` | Print the install and data paths |
+| `… uninstall` | Run the uninstaller (your accounts and sessions are kept) |
+
+Flags: `--silent` (no wizard), `--download-only`, `--force`, `--version`, `--help`.
+From a checkout of this repository the equivalent is `npm run install:latest`.
 
 It prints the latest version and its release notes and verifies the download really is a Windows
 executable before running it. No authentication is needed; a `GH_TOKEN` is used only if present.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-provider-dash-manager",
-  "version": "0.2.8",
+  "version": "0.3.0",
   "description": "Manage many accounts per cloud service (Vercel, Netlify, Supabase, Cloudflare, Railway, Render, GitHub) in one desktop app \u2014 isolated persistent sessions, one tab per account.",
   "main": "src/main.js",
   "scripts": {
@@ -50,9 +50,11 @@
   },
   "license": "SEE LICENSE IN LICENSE",
   "bin": {
-    "my-provider-dash-manager": "scripts/install-latest.js"
+    "my-provider-dash-manager": "scripts/cli.js",
+    "mpdm": "scripts/cli.js"
   },
   "files": [
+    "scripts/cli.js",
     "scripts/install-latest.js",
     "README.md",
     "LICENSE"

package/scripts/cli.js

@@ -0,0 +1,156 @@
+#!/usr/bin/env node
+// Command line for My Provider Dash Manager.
+//
+//   npx my-provider-dash-manager            install (or update) and launch the app
+//   npx my-provider-dash-manager install    install/update only, do not launch
+//   npx my-provider-dash-manager update     alias of install — always fetches the newest release
+//   npx my-provider-dash-manager start      launch the installed app
+//   npx my-provider-dash-manager status     what is installed, what is available, where data lives
+//   npx my-provider-dash-manager uninstall  run the app's uninstaller
+//   npx my-provider-dash-manager where      print the install and data paths
+//
+// Flags: --silent (no wizard) · --download-only · --version · --help
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawn, execFileSync } = require('child_process');
+const { latestRelease, downloadAsset } = require('./install-latest.js');
+
+const PRODUCT = 'My Provider Dash Manager';
+const DATA_DIR = path.join(process.env.APPDATA || os.homedir(), 'multi-acc-manager');
+const args = process.argv.slice(2);
+const flags = new Set(args.filter(a => a.startsWith('-')));
+const cmd = (args.find(a => !a.startsWith('-')) || 'default').toLowerCase();
+
+function pkgVersion() {
+  try { return require('../package.json').version; } catch { return 'unknown'; }
+}
+
+// Where NSIS puts a per-user install, plus the usual per-machine fallbacks.
+function installedExe() {
+  const candidates = [
+    path.join(process.env.LOCALAPPDATA || '', 'Programs', PRODUCT, `${PRODUCT}.exe`),
+    path.join(process.env.PROGRAMFILES || '', PRODUCT, `${PRODUCT}.exe`),
+    path.join(process.env['PROGRAMFILES(X86)'] || '', PRODUCT, `${PRODUCT}.exe`),
+  ];
+  return candidates.find(p => p && fs.existsSync(p)) || null;
+}
+
+function installedUninstaller() {
+  const exe = installedExe();
+  if (!exe) return null;
+  const dir = path.dirname(exe);
+  const u = fs.readdirSync(dir).find(f => /^Uninstall .*\.exe$/i.test(f));
+  return u ? path.join(dir, u) : null;
+}
+
+// Windows reports a four-part ProductVersion (0.2.3.0); releases are three-part (0.2.3).
+function normaliseVersion(v) {
+  if (!v) return null;
+  const parts = String(v).trim().split('.').slice(0, 3);
+  while (parts.length < 3) parts.push('0');
+  return parts.join('.');
+}
+
+function installedVersion() {
+  const exe = installedExe();
+  if (!exe) return null;
+  try {
+    const out = execFileSync('powershell.exe', ['-NoProfile', '-Command',
+      `(Get-Item -LiteralPath '${exe.replace(/'/g, "''")}').VersionInfo.ProductVersion`],
+      { encoding: 'utf8', timeout: 15000 });
+    return normaliseVersion(out.trim()) || null;
+  } catch { return null; }
+}
+
+function launch() {
+  const exe = installedExe();
+  if (!exe) throw new Error('The app is not installed yet — run: npx my-provider-dash-manager install');
+  spawn(exe, [], { detached: true, stdio: 'ignore' }).unref();
+  console.log(`Launched ${PRODUCT}.`);
+}
+
+async function install({ launchAfter }) {
+  const rel = await latestRelease();
+  const have = installedVersion();
+  if (have === rel.version && !flags.has('--force')) {
+    console.log(`Already on the latest version (${have}).`);
+    if (launchAfter) launch();
+    return;
+  }
+  console.log(have ? `Installed: ${have} → updating to ${rel.version}` : `Installing ${rel.version}`);
+  if (rel.notes) console.log(`\n${rel.notes.split('\n').slice(0, 10).join('\n')}\n`);
+  const dest = await downloadAsset(rel);
+  if (flags.has('--download-only')) { console.log(`\nSaved to ${dest}`); return; }
+  console.log(`\nRunning the installer${flags.has('--silent') ? ' (silent)' : ''}…`);
+  const child = spawn(dest, flags.has('--silent') ? ['/S'] : [], { detached: true, stdio: 'ignore' });
+  child.unref();
+  console.log('The installer is unsigned, so SmartScreen may ask you to confirm.');
+  if (launchAfter && flags.has('--silent')) {
+    setTimeout(() => { try { launch(); } catch (e) { console.error(e.message); } }, 15000);
+  }
+}
+
+async function status() {
+  const have = installedVersion();
+  const exe = installedExe();
+  let latest = null;
+  try { latest = (await latestRelease()).version; } catch (e) { latest = `unavailable (${e.message})`; }
+  console.log(`${PRODUCT}`);
+  console.log(`  installed:  ${have || 'not installed'}`);
+  console.log(`  latest:     ${latest}`);
+  console.log(`  cli:        ${pkgVersion()}`);
+  console.log(`  app:        ${exe || '—'}`);
+  console.log(`  data:       ${fs.existsSync(DATA_DIR) ? DATA_DIR : DATA_DIR + '  (not created yet)'}`);
+  if (have && typeof latest === 'string' && have !== latest && !latest.startsWith('unavailable')) {
+    console.log(`\nAn update is available — run: npx my-provider-dash-manager update`);
+  }
+}
+
+function where() {
+  console.log(`app:  ${installedExe() || 'not installed'}`);
+  console.log(`data: ${DATA_DIR}`);
+}
+
+function uninstall() {
+  const u = installedUninstaller();
+  if (!u) throw new Error('No uninstaller found — the app does not appear to be installed.');
+  console.log('Starting the uninstaller. Your accounts and sessions in the data folder are NOT removed;');
+  console.log(`delete ${DATA_DIR} yourself if you want them gone.`);
+  spawn(u, [], { detached: true, stdio: 'ignore' }).unref();
+}
+
+function help() {
+  console.log(`${PRODUCT} — CLI ${pkgVersion()}
+
+  npx my-provider-dash-manager             install (or update) and launch
+  npx my-provider-dash-manager install     install/update only
+  npx my-provider-dash-manager update      always fetch the newest release
+  npx my-provider-dash-manager start       launch the installed app
+  npx my-provider-dash-manager status      installed vs latest version, paths
+  npx my-provider-dash-manager where       print install and data paths
+  npx my-provider-dash-manager uninstall   run the uninstaller (keeps your data)
+
+Flags: --silent  --download-only  --force  --version  --help
+Windows only. https://github.com/FiredMosquito831/my-provider-dash-manager`);
+}
+
+(async () => {
+  if (flags.has('--help') || flags.has('-h') || cmd === 'help') return help();
+  if (flags.has('--version') || flags.has('-v') || cmd === 'version') return console.log(pkgVersion());
+  if (process.platform !== 'win32' && cmd !== 'status') {
+    throw new Error('This app is Windows-only.');
+  }
+  switch (cmd) {
+    case 'default': return install({ launchAfter: true });
+    case 'install': case 'update': case 'upgrade': return install({ launchAfter: false });
+    case 'start': case 'run': case 'launch': return launch();
+    case 'status': return status();
+    case 'where': case 'paths': return where();
+    case 'uninstall': case 'remove': return uninstall();
+    default: console.error(`Unknown command: ${cmd}\n`); return help();
+  }
+})().catch(err => {
+  console.error(`\nFailed: ${err.message}`);
+  process.exit(1);
+});

package/scripts/install-latest.js

@@ -1,12 +1,9 @@
 #!/usr/bin/env node
-// Fetch the latest published release and run its installer.
+// Fetches the latest published release and runs its installer.
 //
-//   npm run install:latest              download + launch the installer
-//   npm run install:latest -- --silent  install without the wizard UI
-//   npm run install:latest -- --download-only
-//
-// Auth: the repository is private, so a token is required — GH_TOKEN/GITHUB_TOKEN from the
-// environment, or whatever `gh auth token` returns. Making the repo public removes that need.
+// Used directly (`npm run install:latest`) and as the engine behind scripts/cli.js.
+// The repository is public, so no authentication is needed; GH_TOKEN is used only if present
+// (which keeps this working if the repo is ever made private again).
 const fs = require('fs');
 const os = require('os');
 const path = require('path');
@@ -14,28 +11,25 @@ const https = require('https');
 const { execFileSync, spawn } = require('child_process');
 
 const REPO = 'FiredMosquito831/my-provider-dash-manager';
-const args = process.argv.slice(2);
-const silent = args.includes('--silent');
-const downloadOnly = args.includes('--download-only');
 
 function token() {
   if (process.env.GH_TOKEN) return process.env.GH_TOKEN;
   if (process.env.GITHUB_TOKEN) return process.env.GITHUB_TOKEN;
-  try { return execFileSync('gh', ['auth', 'token'], { encoding: 'utf8' }).trim(); } catch { return null; }
+  try { return execFileSync('gh', ['auth', 'token'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); }
+  catch { return null; }
 }
 
-// accept: 'application/vnd.github+json' for API calls, 'application/octet-stream' for asset bytes.
-// Without the octet-stream Accept, the asset endpoint returns JSON metadata instead of the file.
+// accept: JSON for API calls, octet-stream for asset bytes. Without the octet-stream Accept the
+// asset endpoint returns metadata instead of the file — a silent failure that yields a 1.7 KB "exe".
 function get(url, tok, accept = 'application/vnd.github+json', redirects = 0) {
   return new Promise((resolve, reject) => {
-    const headers = { 'User-Agent': 'my-provider-dash-manager-installer', Accept: accept };
+    const headers = { 'User-Agent': 'my-provider-dash-manager', Accept: accept };
     if (tok) headers.Authorization = `Bearer ${tok}`;
     https.get(url, { headers }, res => {
       if ([301, 302, 307, 308].includes(res.statusCode) && res.headers.location) {
         if (redirects > 5) return reject(new Error('too many redirects'));
         res.resume();
-        // S3 asset redirects reject an Authorization header, so drop it after the first hop
-        return resolve(get(res.headers.location, null, accept, redirects + 1));
+        return resolve(get(res.headers.location, null, accept, redirects + 1)); // S3 rejects our auth header
       }
       resolve(res);
     }).on('error', reject);
@@ -48,67 +42,79 @@ async function json(url, tok) {
     let d = ''; res.setEncoding('utf8');
     res.on('data', c => { d += c; }); res.on('end', () => resolve(d)); res.on('error', reject);
   });
-  if (res.statusCode === 404) throw new Error('Release not found. The repo is private — set GH_TOKEN or run `gh auth login`.');
-  if (res.statusCode === 401 || res.statusCode === 403) throw new Error('GitHub rejected the token (needs read access to this repo).');
+  if (res.statusCode === 404) throw new Error('No published release found for this repository.');
+  if (res.statusCode === 401 || res.statusCode === 403) throw new Error('GitHub rejected the request (rate limit or token).');
   if (res.statusCode >= 400) throw new Error(`GitHub API returned HTTP ${res.statusCode}`);
   return JSON.parse(body);
 }
 
-function download(url, tok, dest, size) {
-  return new Promise(async (resolve, reject) => {
-    const res = await get(url, tok, 'application/octet-stream');
-    if (res.statusCode >= 400) return reject(new Error(`download failed: HTTP ${res.statusCode}`));
-    const out = fs.createWriteStream(dest);
-    let done = 0; let lastPct = -1;
-    res.on('data', c => {
-      done += c.length;
-      if (size) {
-        const pct = Math.floor((done / size) * 100);
-        if (pct !== lastPct && pct % 5 === 0) { lastPct = pct; process.stdout.write(`\r  downloading… ${pct}%`); }
-      }
-    });
-    res.pipe(out);
-    out.on('finish', () => { process.stdout.write('\r  downloading… 100%\n'); out.close(() => resolve(dest)); });
-    out.on('error', reject);
-    res.on('error', reject);
-  });
-}
-
-(async () => {
-  const tok = token();
-  if (!tok) console.warn('! No GitHub token found (GH_TOKEN or `gh auth login`) — this will fail while the repo is private.\n');
-
-  console.log(`Looking up the latest release of ${REPO}…`);
-  const rel = await json(`https://api.github.com/repos/${REPO}/releases/latest`, tok);
-  const version = String(rel.tag_name || '').replace(/^v/, '');
+/** The newest release: { version, notes, asset, url }. */
+async function latestRelease() {
+  const rel = await json(`https://api.github.com/repos/${REPO}/releases/latest`, token());
   const asset = (rel.assets || []).find(a => a.name.endsWith('.exe'));
   if (!asset) throw new Error(`Release ${rel.tag_name} has no .exe asset.`);
+  return {
+    version: String(rel.tag_name || '').replace(/^v/, ''),
+    notes: rel.body ? String(rel.body).trim() : '',
+    url: rel.html_url,
+    asset,
+  };
+}
 
-  let installed = null;
-  try { installed = require('../package.json').version; } catch {}
-  console.log(`  latest: ${version}${installed ? `   (this checkout: ${installed})` : ''}`);
-  if (rel.body) console.log(`\n${String(rel.body).trim().split('\n').slice(0, 12).join('\n')}\n`);
-
-  const dest = path.join(os.tmpdir(), asset.name);
-  console.log(`Downloading ${asset.name} (${(asset.size / 1048576).toFixed(1)} MB)…`);
-  await download(asset.url, tok, dest, asset.size); // .url (not browser_download_url) works for private repos
-
-  // Never hand a non-executable to spawn(): the asset endpoint returns JSON metadata unless the
-  // request asks for octet-stream, and that failure is otherwise silent.
-  const stat = fs.statSync(dest);
-  const head = Buffer.alloc(2);
-  const fd = fs.openSync(dest, 'r'); fs.readSync(fd, head, 0, 2, 0); fs.closeSync(fd);
-  if (head.toString('latin1') !== 'MZ') throw new Error(`downloaded file is not a Windows executable (${stat.size} bytes)`);
-  if (asset.size && stat.size !== asset.size) throw new Error(`size mismatch: expected ${asset.size} bytes, got ${stat.size}`);
-  console.log(`  verified: ${(stat.size / 1048576).toFixed(1)} MB Windows executable`);
+/** Downloads the release asset to temp and verifies it really is a Windows executable. */
+function downloadAsset(rel, onProgress) {
+  const dest = path.join(os.tmpdir(), rel.asset.name);
+  return new Promise(async (resolve, reject) => {
+    try {
+      const res = await get(rel.asset.url, token(), 'application/octet-stream');
+      if (res.statusCode >= 400) return reject(new Error(`download failed: HTTP ${res.statusCode}`));
+      const out = fs.createWriteStream(dest);
+      let done = 0; let lastPct = -1;
+      res.on('data', c => {
+        done += c.length;
+        const pct = Math.floor((done / rel.asset.size) * 100);
+        if (pct !== lastPct && pct % 5 === 0) {
+          lastPct = pct;
+          if (onProgress) onProgress(pct);
+          else process.stdout.write(`\r  downloading… ${pct}%`);
+        }
+      });
+      res.pipe(out);
+      res.on('error', reject);
+      out.on('error', reject);
+      out.on('finish', () => out.close(() => {
+        if (!onProgress) process.stdout.write('\r  downloading… 100%\n');
+        try {
+          const stat = fs.statSync(dest);
+          const head = Buffer.alloc(2);
+          const fd = fs.openSync(dest, 'r'); fs.readSync(fd, head, 0, 2, 0); fs.closeSync(fd);
+          if (head.toString('latin1') !== 'MZ') throw new Error(`downloaded file is not a Windows executable (${stat.size} bytes)`);
+          if (rel.asset.size && stat.size !== rel.asset.size) throw new Error(`size mismatch: expected ${rel.asset.size}, got ${stat.size}`);
+        } catch (e) { return reject(e); }
+        resolve(dest);
+      }));
+    } catch (e) { reject(e); }
+  });
+}
 
-  if (downloadOnly) { console.log(`\nSaved to ${dest}`); return; }
+module.exports = { latestRelease, downloadAsset, REPO };
 
-  console.log(`\nLaunching the installer${silent ? ' (silent)' : ''}…`);
-  const child = spawn(dest, silent ? ['/S'] : [], { detached: true, stdio: 'ignore', shell: false });
-  child.unref();
-  console.log('The installer is running. It is unsigned, so SmartScreen may ask you to confirm.');
-})().catch(err => {
-  console.error(`\nFailed: ${err.message}`);
-  process.exit(1);
-});
+// Standalone use: download and run, honouring --silent / --download-only.
+if (require.main === module) {
+  const args = process.argv.slice(2);
+  (async () => {
+    console.log(`Looking up the latest release of ${REPO}…`);
+    const rel = await latestRelease();
+    let installed = null;
+    try { installed = require('../package.json').version; } catch {}
+    console.log(`  latest: ${rel.version}${installed ? `   (this checkout: ${installed})` : ''}`);
+    if (rel.notes) console.log(`\n${rel.notes.split('\n').slice(0, 12).join('\n')}\n`);
+    console.log(`Downloading ${rel.asset.name} (${(rel.asset.size / 1048576).toFixed(1)} MB)…`);
+    const dest = await downloadAsset(rel);
+    console.log(`  verified: ${(fs.statSync(dest).size / 1048576).toFixed(1)} MB Windows executable`);
+    if (args.includes('--download-only')) return console.log(`\nSaved to ${dest}`);
+    console.log(`\nLaunching the installer${args.includes('--silent') ? ' (silent)' : ''}…`);
+    spawn(dest, args.includes('--silent') ? ['/S'] : [], { detached: true, stdio: 'ignore' }).unref();
+    console.log('The installer is unsigned, so SmartScreen may ask you to confirm.');
+  })().catch(err => { console.error(`\nFailed: ${err.message}`); process.exit(1); });
+}