toolaby 1.1.0 → 1.2.0

package/README.md

@@ -3,11 +3,13 @@
 The Toolaby command line. It puts the Wall — sign-in, a Free plan, paid plans, licences and subscriptions — into a Chrome extension you already have, or makes a new one for you.
 
 ```sh
-npm i -g toolaby            # once (or run every command through `npx -y toolaby …`)
-toolaby login               # once: a code to approve in your browser
-toolaby wire <tool-id>      # in your extension's folder; `toolaby tools` lists your ids
+npm i -g toolaby              # once (or run every command through `npx -y toolaby …`)
+toolaby wire <tool-id>        # in your extension's folder, on Test; signs you in first if it must
+toolaby wire <tool-id> --live # the same, on Live: the store build
 ```
 
+Every command acts on the test Wall (`test.toolaby.app`) unless told `--live` (`toolaby.app`), as Stripe's command line does. `toolaby tools` lists your ids on either side.
+
 ## What it does
 
 **`toolaby login`** signs you in. It shows a code and opens the Toolaby dashboard; you approve the code there — as the account the dashboard is signed in to — and the command is signed in as that account from then on. It works the way GitHub's and Stripe's command lines sign in, and only ever acts on that account's own tools.
@@ -27,6 +29,6 @@ If the extension is built with WXT, CRXJS or Plasmo, the command puts the same f
 ## Where things live
 
 - Your session: `~/.config/toolaby/credentials.json`, readable by you alone (mode 600). `toolaby logout` deletes it after revoking it.
-- `TOOLABY_TOKEN` stands in for the file where there is no home directory (CI). `TOOLABY_WALL` or `--wall <url>` names another Wall (the default is `https://toolaby.app`).
+- The session is per side. `TOOLABY_TOKEN` stands in for the file where there is no home directory (CI). `TOOLABY_WALL` or `--wall <url>` names any other Wall.
 
 The files the command writes into your extension contain nothing secret: your tool's id, your Wall's address and the *public* key your extension verifies licences with — the same things every copy of your extension carries once it is published.

package/bin.mjs

@@ -7,12 +7,16 @@
 //   toolaby tools                     your tools, with the ids the commands want
 //   toolaby whoami · logout · help
 //
+// Test and live, as Stripe's command line has them: every command acts on
+// the TEST Wall (test.toolaby.app) unless told `--live`, so the everyday
+// command is the safe one and going live is a word you type on purpose.
 // Signed in, the command acts as you and only on your tools, as Clerk's and
 // Stripe's do: nothing is fetched for a tool your workspaces do not own. The
 // session lives in ~/.config/toolaby/credentials.json (mode 600), one per
-// Wall; `logout` revokes it on the server before forgetting it. TOOLABY_TOKEN
-// stands in for the file where there is no home (CI); TOOLABY_WALL for the
-// Wall's address (https://toolaby.app unless told).
+// side; a command that needs one and has none signs you in on the spot.
+// `logout` revokes it on the server before forgetting it. TOOLABY_TOKEN
+// stands in for the file where there is no home (CI); TOOLABY_WALL or
+// `--wall <url>` names any other Wall (a laptop's, a self-hosted one).
 //
 // The wiring rules — what a folder is and what its manifest needs — are the
 // platform's own (wall/src/packages/wiring), carried here transpiled in lib/,
@@ -24,7 +28,7 @@ import { spawn } from 'node:child_process';
 import { wireManifest, WORKER_LINES } from './lib/manifest.js';
 import { detectProject, CODE_FILES, filesToWrite, BUILD_COPY_NOTE } from './lib/project.js';
 
-const VERSION = '1.1.0';
+const VERSION = '1.2.0';
 const CLIENT_ID = 'toolaby-cli';
 const argv = process.argv.slice(2);
 // `--version` and `--help` are commands of their own; every other command is the first bare word.
@@ -33,7 +37,11 @@ const rest = argv.filter((a) => a !== command);
 const positional = rest.filter((a) => !a.startsWith('--'));
 const opt = (k, d = null) => { const i = rest.indexOf(k); return i >= 0 && rest[i + 1] && !rest[i + 1].startsWith('--') ? rest[i + 1] : d; };
 const flag = (k) => rest.includes(k);
-const wall = (opt('--wall') ?? process.env.TOOLABY_WALL ?? 'https://toolaby.app').replace(/\/$/, '');
+const WALLS = { test: 'https://test.toolaby.app', live: 'https://toolaby.app' };
+const live = flag('--live');
+const wall = (opt('--wall') ?? process.env.TOOLABY_WALL ?? (live ? WALLS.live : WALLS.test)).replace(/\/$/, '');
+/** The side, for every message: what a developer must never be unsure of. */
+const side = wall === WALLS.live ? 'Live' : wall === WALLS.test ? 'Test' : wall;
 const out = (s = '') => console.log(s);
 const fail = (s) => { console.error(`\n  ${s}\n`); process.exit(1); };
 
@@ -72,7 +80,7 @@ async function login() {
   const { device_code, user_code, verification_uri, verification_uri_complete, interval = 5, expires_in = 600 } = start.json;
   const link = verification_uri_complete || `${verification_uri}?user_code=${encodeURIComponent(user_code)}`;
   const page = link.startsWith('http') ? link : `${wall}${link}`;
-  out(`\n  Sign in to the Wall to continue.\n\n    Open   ${page}\n    Code   ${user_code}   (approve it there — it expires in ${Math.round(expires_in / 60)} minutes)\n`);
+  out(`\n  Sign in to the ${side} Wall to continue.\n\n    Open   ${page}\n    Code   ${user_code}   (approve it there — it expires in ${Math.round(expires_in / 60)} minutes)\n`);
   openBrowser(page);
   let every = Math.max(1, Number(interval) || 5) * 1000;
   const until = Date.now() + Number(expires_in) * 1000;
@@ -88,7 +96,7 @@ async function login() {
       const all = readCredentials();
       all[wall] = { token, email, at: new Date().toISOString() };
       writeCredentials(all);
-      out(`\n\n  Signed in${email ? ` as ${email}` : ''}.\n`);
+      out(`\n\n  Signed in${email ? ` as ${email}` : ''} · ${side}.\n`);
       return token;
     }
     const why = poll.json.error;
@@ -107,11 +115,11 @@ async function tokenOrLogin() {
 
 async function whoami() {
   const token = storedToken();
-  if (!token) fail(`Not signed in to ${wall}. Run \`toolaby login\`.`);
+  if (!token) fail(`Not signed in to ${side} (${wall}). Run \`toolaby login${live ? ' --live' : ''}\`.`);
   const me = await api('/api/cli/me', { token });
   if (me.status === 401) fail(`The session for ${wall} is no longer valid. Run \`toolaby login\`.`);
   if (!me.ok) fail(`The Wall answered HTTP ${me.status}.`);
-  out(`\n  ${me.json.email}  ·  ${wall}\n`);
+  out(`\n  ${me.json.email}  ·  ${side}  ·  ${wall}\n`);
   for (const w of me.json.workspaces) out(`    ${w.name}  (${w.slug}, ${w.role})  ${w.site}`);
   out();
 }
@@ -119,22 +127,22 @@ async function whoami() {
 async function logout() {
   const all = readCredentials();
   const entry = all[wall];
-  if (!entry && !process.env.TOOLABY_TOKEN) { out(`\n  Not signed in to ${wall}.\n`); return; }
+  if (!entry && !process.env.TOOLABY_TOKEN) { out(`\n  Not signed in to ${side} (${wall}).\n`); return; }
   // Revoked on the server first; forgotten here whatever the server said — but the difference is reported.
   const res = await api('/api/dev-auth/sign-out', { method: 'POST', body: {}, token: entry?.token ?? process.env.TOOLABY_TOKEN }).catch(() => ({ ok: false, status: 0 }));
   delete all[wall];
   writeCredentials(all);
-  out(res.ok ? `\n  Signed out of ${wall}: the session was revoked and forgotten.\n` : `\n  The session was forgotten here, but the Wall could not be reached to revoke it (HTTP ${res.status}); it expires on its own, or sign it out from the dashboard.\n`);
+  out(res.ok ? `\n  Signed out of ${side} (${wall}): the session was revoked and forgotten.\n` : `\n  The session was forgotten here, but the Wall could not be reached to revoke it (HTTP ${res.status}); it expires on its own, or sign it out from the dashboard.\n`);
   if (process.env.TOOLABY_TOKEN) out('  TOOLABY_TOKEN is set in this shell and still authenticates.\n');
 }
 
 async function tools() {
   const token = await tokenOrLogin();
   const res = await api('/api/cli/tools', { token });
-  if (res.status === 401) fail(`The session for ${wall} is no longer valid. Run \`toolaby login\`.`);
+  if (res.status === 401) fail(`The session for ${side} is no longer valid. Run \`toolaby login${live ? ' --live' : ''}\`.`);
   if (!res.ok) fail(`The Wall answered HTTP ${res.status}.`);
-  if (!res.json.tools.length) { out('\n  No tools yet. Make one in the dashboard, then `toolaby wire <tool-id>` in your extension\'s folder.\n'); return; }
-  out();
+  if (!res.json.tools.length) { out(`\n  No tools on ${side} yet. Make one in the dashboard, then \`toolaby wire <tool-id>${live ? ' --live' : ''}\` in your extension's folder.\n`); return; }
+  out(`\n  ${side}\n`);
   for (const t of res.json.tools) out(`    ${t.slug.padEnd(40)} ${t.name}${t.bundle ? '  (bundle)' : ''}   ${t.site}`);
   out();
 }
@@ -212,7 +220,7 @@ async function wire() {
     ownWorker = { file: project.worker, classic: false };
   }
 
-  out(`\n  ${plan.name} → ${dir}${project.kind === 'plain' ? '' : `  (${project.label})`}\n`);
+  out(`\n  ${plan.name} → ${dir}${project.kind === 'plain' ? '' : `  (${project.label})`}  ·  ${side}${side === 'Test' ? ' (the tk_test_ key; `--live` for the store build)' : ''}\n`);
   out(`  Written: ${targets.join(', ')}${did.length ? `,\n           ${did.join(',\n           ')}` : ''}.\n`);
   for (const sn of project.snippets) out(`  Add to ${sn.file} — yours to paste, the manifest being generated:\n\n${sn.code.split('\n').map((l) => `     ${l}`).join('\n')}\n`);
   if (ownWorker) out(`  Your background, ${ownWorker.file}: add${ownWorker.classic ? ' — after giving "background" a "type": "module" in manifest.json (importScripts() is not available in a module worker)' : ''}:\n\n${project.workerLines.trimEnd().split('\n').map((l) => `     ${l}`).join('\n')}\n`);
@@ -242,14 +250,15 @@ function help() {
   out(`
   toolaby — the Toolaby command line (${VERSION})
 
-    toolaby login                      sign in: a code to approve in the browser
-    toolaby wire <tool-id>             wire the extension in this folder to your tool
+    toolaby wire <tool-id>             wire the extension in this folder to your tool, on Test
+    toolaby wire <tool-id> --live      the same, on Live: the store build
                                        --into <folder>   another folder     --force   replace the platform's files
     toolaby create <tool-id>           a new, minimal extension for your tool, in <tool-id>/   --dir <folder>
     toolaby tools                      your tools, with their ids
-    toolaby whoami · logout
+    toolaby login · whoami · logout    the session, per side; a command that needs one signs you in itself
 
-    --wall <url>   the Wall to talk to (https://toolaby.app; TOOLABY_WALL)      TOOLABY_TOKEN   a session, for CI
+    Every command acts on Test (test.toolaby.app) unless told --live (toolaby.app).
+    --wall <url> or TOOLABY_WALL names any other Wall; TOOLABY_TOKEN a session, for CI.
 `);
 }
 

package/lib/manifest.js

@@ -22,7 +22,7 @@ export function wireManifest(input, o) {
     const own = typeof manifest.key === 'string' && manifest.key.trim() ? manifest.key.trim() : null;
     if (!own && o.manifestKey) {
         manifest.key = o.manifestKey;
-        did.push('a "key", so the extension keeps one id and the platform knows it');
+        did.push('a "key", so the extension keeps one id across reloads and machines');
     }
     const manifestKey = own ?? o.manifestKey ?? null;
     const add = (list, value) => { const arr = Array.isArray(list) ? [...list] : []; if (!arr.includes(value))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolaby",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "The Toolaby command line: sign in once, then wire any Chrome extension to your tool on the Wall — sign-in, the Free plan, licences and subscriptions — or start a new one.",
   "type": "module",
   "bin": { "toolaby": "./bin.mjs" },