toolaby 1.8.3 → 1.8.4

package/README.md

@@ -1,6 +1,6 @@
 # toolaby
 
-The Toolaby command line. It puts the Wall — sign-in, a Free plan, paid plans, licences and subscriptions — into a Chrome extension you already have, or makes a new one for you.
+The Toolaby command line. It puts Toolaby — sign-in, a Free plan, paid plans, licences and subscriptions — into a Chrome extension you already have, or makes a new one for you.
 
 ```sh
 npm i -g toolaby                  # once; or run every command through `npx -y toolaby@latest …`
@@ -12,18 +12,18 @@ The command is `toolaby-cli`: on Windows, the Command Prompt runs a `toolaby.js`
 
 In a repository you did not write, use the installed command: `npx` can run a `toolaby` the project carries, or fetch one from a registry the project's `.npmrc` names.
 
-Every command acts on the test Wall (`toolaby.app/test`) unless told `--live` (`toolaby.app`), as Stripe's command line does. `toolaby tools` lists your ids on either side.
+Every command acts on Test (`toolaby.app/test`) unless told `--live` (`toolaby.app`), as Stripe's command line does. `toolaby tools` lists your ids on either side.
 
 ## What it does
 
-**`toolaby login`** signs you in. It shows a code and opens the Toolaby dashboard; you approve the code there — as the account the dashboard is signed in to — and the command is signed in as that account from then on. It works the way GitHub's and Stripe's command lines sign in, and only ever acts on that account's own tools. It opens only the Wall's own page, over https (or on `localhost`, for a Wall on your machine); any other address is refused and nothing is signed in.
+**`toolaby login`** signs you in. It shows a code and opens the Toolaby dashboard; you approve the code there — as the account the dashboard is signed in to — and the command is signed in as that account from then on. It works the way GitHub's and Stripe's command lines sign in, and only ever acts on that account's own tools. It opens only Toolaby's own page, over https (or on `localhost`, for a server on your machine); any other address is refused and nothing is signed in.
 
 **`toolaby wire <tool-id>`**, run in your extension's folder, wires that extension to your tool:
 
-- it adds the Wall's files — a small client library, a config with your tool's id and public key, and the Wall's popup, which stands in front of yours;
-- it adds three lines to your `manifest.json` (a permission and your Wall address) and creates a background file if you have none;
-- it puts the Wall's background in front of yours, `toolaby.background.js`: yours runs as it did — a classic one's `importScripts()` included — and the Wall starts with it;
-- your own code does not change. When your popup opens, the Wall's page checks what the Free plan holds and either sends the person straight to your popup or shows sign-in, the free-use meter or the plans.
+- it adds Toolaby's files — a small client library, a config with your tool's id and public key, and Toolaby's popup, which stands in front of yours;
+- it adds three lines to your `manifest.json` (a permission and your Toolaby address) and creates a background file if you have none;
+- it puts Toolaby's background in front of yours, `toolaby.background.js`: yours runs as it did — a classic one's `importScripts()` included — and Toolaby starts with it;
+- your own code does not change. When your popup opens, Toolaby's page checks what the Free plan holds and either sends the person straight to your popup or shows sign-in, the free-use meter or the plans.
 
 It prints what it did in a few rows — `✓` done, `!` worth a look, `→` a step for you, with the exact code — and what to do next, in colour in a terminal (`NO_COLOR` turns it off). When your code sets or reads the popup itself (`chrome.action.setPopup()`, `getPopup()`), it says where; `--own-popup` keeps your popup in front.
 
@@ -38,8 +38,8 @@ If the extension is built with WXT, CRXJS or Plasmo, the command puts the same f
 ## Where things live
 
 - Your session: `~/.config/toolaby/credentials.json`, readable by you alone (mode 600). `toolaby logout` deletes it after revoking it.
-- The session is per side. `TOOLABY_TOKEN` stands in for the file where there is no home directory (CI), and is sent to one Wall only: Live (`toolaby.app`), or the one `TOOLABY_TOKEN_WALL` names — `TOOLABY_TOKEN_WALL=https://toolaby.app/test` for a Test session. If that Wall refuses it, the session `toolaby login` stored for that Wall is used instead. `TOOLABY_WALL` or `--wall <url>` names any other Wall.
+- The session is per side. `TOOLABY_TOKEN` stands in for the file where there is no home directory (CI), and is sent to one server only: Live (`toolaby.app`), or the one `TOOLABY_TOKEN_WALL` names — `TOOLABY_TOKEN_WALL=https://toolaby.app/test` for a Test session. If that server refuses it, the session `toolaby login` stored for that server is used instead. `TOOLABY_WALL` or `--wall <url>` names any other server.
 
-`wire` and `create` write only inside the folder they work on, and never through a symbolic link. A manifest, a framework's config or a Wall that names a place outside it (`../`, an absolute path, a link) is refused before anything is written. `create` writes only the files it knows a new extension has.
+`wire` and `create` write only inside the folder they work on, and never through a symbolic link. A manifest, a framework's config or a server that names a place outside it (`../`, an absolute path, a link) is refused before anything is written. `create` writes only the files it knows a new extension has.
 
-The files the command writes into your extension contain nothing secret: your tool's id, your Wall's address and the *public* key your extension verifies licences with — the same things every copy of your extension carries once it is published.
+The files the command writes into your extension contain nothing secret: your tool's id, your Toolaby address and the *public* key your extension verifies licences with — the same things every copy of your extension carries once it is published.

package/bin.mjs

@@ -44,7 +44,7 @@ import { runMcp } from './lib/mcp.js';
 import { runCheck } from './lib/check.js';
 import { inside, signInPage, devicePolling, opener, privateKind, privateContent, privateCopies, googleKey, projectRoot, gitDirectory, gitObject, gitObjects, gitFile, notAnImage, unpacked, COMPRESSED, publicLinks, privateLinks, oneLine, fetchBounded, fetchHere, readBounded, readText, SCAFFOLD_FILES } from './lib/safe.js';
 
-const VERSION = '1.8.3';
+const VERSION = '1.8.4';
 const CLIENT_ID = 'toolaby-cli';
 const argv = process.argv.slice(2);
 // `--version` and `--help` are commands of their own; every other command is the first bare word.
@@ -104,7 +104,7 @@ const ANSWER_TIME = 30_000;
 async function api(path, { method = 'GET', body, token = storedToken() } = {}) {
   // The time ran out (fetchHere's deadline; AbortError where an older Node says so): one line, whichever part was late.
   // A Wall that answered a byte at a time held `login` and `wire` for ever (round 8, 25 Sep 2026).
-  const late = (e) => (e?.name === 'TimeoutError' || e?.name === 'AbortError' ? new Error(`The Wall at ${wall} did not answer ${path.split('?')[0]} within ${ANSWER_TIME / 1000} seconds.`) : null);
+  const late = (e) => (e?.name === 'TimeoutError' || e?.name === 'AbortError' ? new Error(`Toolaby at ${wall} did not answer ${path.split('?')[0]} within ${ANSWER_TIME / 1000} seconds.`) : null);
   // Only the Wall answers for the Wall: a redirect elsewhere — Live's /test is Test's — is refused (lib/safe.js).
   const res = await fetchHere(`${wall}${path}`, {
     ms: ANSWER_TIME,
@@ -122,7 +122,7 @@ async function api(path, { method = 'GET', body, token = storedToken() } = {}) {
   // end filled the command's memory, and the MCP server's, which hands what it reads to an agent (25 Sep 2026).
   // An answer cut short reads as no JSON, as it always has; only one past the limit, or the time, stops the command.
   const bytes = await readBounded(res, ANSWER_LIMIT).catch((e) => { const why = late(e); if (why) throw why; return Buffer.alloc(0); });
-  if (!bytes) throw new Error(`The Wall at ${wall} answered ${path.split('?')[0]} with more than ${ANSWER_LIMIT / 1024 / 1024} MB, which no answer of a Wall's is. None of it was used.`);
+  if (!bytes) throw new Error(`Toolaby at ${wall} answered ${path.split('?')[0]} with more than ${ANSWER_LIMIT / 1024 / 1024} MB, which no answer of Toolaby's is. None of it was used.`);
   let json = {};
   try { json = JSON.parse(bytes.toString('utf8')); } catch { /* not JSON: the status says what happened */ }
   return { status: res.status, ok: res.ok, json };
@@ -138,16 +138,16 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
 async function login() {
   const start = await api('/api/dev-auth/device/code', { method: 'POST', body: { client_id: CLIENT_ID }, token: null });
-  if (!start.ok || !start.json.device_code) fail(`The Wall at ${wall} did not start a sign-in (HTTP ${start.status}). Is the address right? --wall names another.`);
+  if (!start.ok || !start.json.device_code) fail(`Toolaby at ${wall} did not start a sign-in (HTTP ${start.status}). Is the address right? --wall names another.`);
   const { device_code, user_code, verification_uri, verification_uri_complete } = start.json;
   const link = verification_uri_complete || `${verification_uri}?user_code=${encodeURIComponent(user_code)}`;
   // The Wall's own page, over https (http on this machine), or nothing opened and nothing signed in: an address the
   // Wall hands over is opened on this computer, and a file: or another site's page opens whatever it names.
   const page = signInPage(link, wall);
-  if (!page) fail(`The Wall at ${wall} gave ${JSON.stringify(String(link).slice(0, 200))} as its sign-in page, which is not its own address over https.\n  It was not opened, and nothing was signed in.`);
+  if (!page) fail(`Toolaby at ${wall} gave ${JSON.stringify(String(link).slice(0, 200))} as its sign-in page, which is not its own address over https.\n  It was not opened, and nothing was signed in.`);
   // How often it asks and for how long: what the Wall said, a quarter of an hour at most (lib/safe.js).
   const { every: first, lasts } = devicePolling(start.json);
-  out(`\n  Sign in to the ${side} Wall to continue.\n\n    Open   ${page}\n    Code   ${oneLine(user_code)}   (approve it there — it expires in ${Math.round(lasts / 60_000)} minutes)\n`);
+  out(`\n  Sign in to Toolaby (${side}) to continue.\n\n    Open   ${page}\n    Code   ${oneLine(user_code)}   (approve it there — it expires in ${Math.round(lasts / 60_000)} minutes)\n`);
   openBrowser(page);
   let every = first;
   const until = Date.now() + lasts;
@@ -171,7 +171,7 @@ async function login() {
     if (why === 'slow_down') every += 5000;
     else if (why === 'expired_token') fail('The code expired before it was approved. Run `npx -y toolaby@latest login` again.');
     else if (why === 'access_denied') fail('The sign-in was denied in the browser. Nothing was signed in.');
-    else if (why && why !== 'authorization_pending') fail(`The Wall answered "${oneLine(why)}"${poll.json.error_description ? `: ${oneLine(poll.json.error_description)}` : ''}.`);
+    else if (why && why !== 'authorization_pending') fail(`Toolaby answered "${oneLine(why)}"${poll.json.error_description ? `: ${oneLine(poll.json.error_description)}` : ''}.`);
   }
   fail('The code expired before it was approved. Run `npx -y toolaby@latest login` again.');
 }
@@ -188,7 +188,7 @@ async function whoami() {
   if (!token) fail(`Not signed in to ${side} (${wall}). Run \`npx -y toolaby@latest login${live ? ' --live' : ''}\`.${envElsewhere()}`);
   const me = await api('/api/cli/me', { token });
   if (me.status === 401) fail(`The session for ${wall} is no longer valid. Run \`npx -y toolaby@latest login\`.`);
-  if (!me.ok) fail(`The Wall answered HTTP ${me.status}.`);
+  if (!me.ok) fail(`Toolaby answered HTTP ${me.status}.`);
   out(`\n  ${oneLine(me.json.email)}  ·  ${side}  ·  ${wall}\n`);
   for (const w of me.json.workspaces) out(`    ${oneLine(w.name)}  (${oneLine(w.slug)}, ${oneLine(w.role)})  ${oneLine(w.site)}`);
   out();
@@ -202,7 +202,7 @@ async function logout() {
   const res = await api('/api/dev-auth/sign-out', { method: 'POST', body: {}, token: entry?.token ?? envToken() }).catch(() => ({ ok: false, status: 0 }));
   delete all[wall];
   writeCredentials(all);
-  out(res.ok ? `\n  Signed out of ${side} (${wall}): the session was revoked and forgotten.\n` : `\n  The session was forgotten here, but the Wall could not be reached to revoke it (HTTP ${res.status}); it expires on its own, or sign it out from the dashboard.\n`);
+  out(res.ok ? `\n  Signed out of ${side} (${wall}): the session was revoked and forgotten.\n` : `\n  The session was forgotten here, but Toolaby could not be reached to revoke it (HTTP ${res.status}); it expires on its own, or sign it out from the dashboard.\n`);
   if (envToken()) out('  TOOLABY_TOKEN is set in this shell and still authenticates.\n');
 }
 
@@ -210,7 +210,7 @@ async function tools() {
   const token = await tokenOrLogin();
   const res = await api('/api/cli/tools', { token });
   if (res.status === 401) fail(`The session for ${side} is no longer valid. Run \`npx -y toolaby@latest login${live ? ' --live' : ''}\`.`);
-  if (!res.ok) fail(`The Wall answered HTTP ${res.status}.`);
+  if (!res.ok) fail(`Toolaby answered HTTP ${res.status}.`);
   if (!res.json.tools.length) { out(`\n  No tools on ${side} yet. Make one in the dashboard, then \`toolaby wire <tool-id>${live ? ' --live' : ''}\` in your extension's folder.\n`); return; }
   out(`\n  ${side}\n`);
   for (const t of res.json.tools) out(`    ${oneLine(t.slug).padEnd(40)} ${oneLine(t.name)}${t.bundle ? '  (bundle)' : ''}   ${oneLine(t.site)}`);
@@ -272,7 +272,7 @@ async function filesFor(slug, scaffold, manifestKey = null, surfaces = null) {
     const who = me?.ok ? `\n\n  You are signed in as ${oneLine(me.json.email)}${me.json.workspaces.length ? ` (workspaces: ${me.json.workspaces.map((w) => oneLine(w.slug)).join(', ')})` : ' (no workspace yet)'}.\n  Another account owns it? \`toolaby logout\`, sign in to the dashboard as that account, then run this again.` : '';
     fail(`${oneLine(res.json.message ?? `No tool "${slug}" in your workspaces.`)}${who}`);
   }
-  if (!res.ok) fail(oneLine(res.json.message ?? `The Wall answered HTTP ${res.status}.`));
+  if (!res.ok) fail(oneLine(res.json.message ?? `Toolaby answered HTTP ${res.status}.`));
   return res.json;
 }
 
@@ -325,9 +325,9 @@ async function wire() {
   // The extension's own background, with the Wall's in front of it — and, for a classic one, the client as a script.
   const wrap = wiring?.background.kind === 'wrap' ? wiring.background : null;
   const classicClient = wrap?.classic ? `${project.codeDir}${CLASSIC_CLIENT}` : null;
-  const at = placesIn(dir, [...targets, ...entries, ...stale, ...(worker ? [worker] : []), ...(wrap ? [wrap.file] : []), ...(classicClient ? [classicClient] : []), ...(wiring?.changed ? ['manifest.json'] : [])], { ...(worker ? { [worker]: 'the background the manifest names' } : {}), ...(wrap ? { [wrap.file]: "the Wall's background, beside yours" } : {}) });
+  const at = placesIn(dir, [...targets, ...entries, ...stale, ...(worker ? [worker] : []), ...(wrap ? [wrap.file] : []), ...(classicClient ? [classicClient] : []), ...(wiring?.changed ? ['manifest.json'] : [])], { ...(worker ? { [worker]: 'the background the manifest names' } : {}), ...(wrap ? { [wrap.file]: "Toolaby's background, beside yours" } : {}) });
   // A file of the developer's own where the Wall's background goes is never replaced: only one the Wall wrote.
-  if (wrap && wrap.file !== namedWorker && there(at[wrap.file]) && !wrappedBy(readOr(at[wrap.file], ''))) fail(`${wrap.file} is already in ${dir}, and it is not the Wall's. Rename it, then run this again. Nothing was written.`);
+  if (wrap && wrap.file !== namedWorker && there(at[wrap.file]) && !wrappedBy(readOr(at[wrap.file], ''))) fail(`${wrap.file} is already in ${dir}, and it is not Toolaby's. Rename it, then run this again. Nothing was written.`);
   // Taken for missing, it may only be out of the listing's sight — spelt "./background.js", in dist/, or deeper down:
   // the developer's own background is never replaced by two lines of ours.
   if (worker && there(at[worker])) fail(`${JSON.stringify(worker)}, the background the manifest names, is already in ${dir}; it would have been replaced. Nothing was written.\n  Name it in the manifest as the folder spells it — or, if a build writes it, run this with --into the folder whose manifest.json names it.`);
@@ -338,7 +338,7 @@ async function wire() {
   // The agent files come from Walls that write them; one that does not is older, not newer, than this command.
   const agentPaths = new Set(AGENT_FILES.map((f) => f.path));
   const missing = [...targets, ...(classicClient ? [classicClient] : [])].filter((p) => !agentPaths.has(p)).map((p) => p.split('/').pop()).filter((name) => typeof plan.files[name] !== 'string');
-  if (missing.length) fail(`This command (${VERSION}) is older than the Wall at ${wall}: it expects ${missing.join(', ')}, which the Wall no longer hands out.\n  Update it: npm install -g toolaby@latest — or run the Wall's own copy: npx --yes ${wall}/toolaby.tgz ${command} ${slug}`);
+  if (missing.length) fail(`This command (${VERSION}) is older than Toolaby at ${wall}: it expects ${missing.join(', ')}, which Toolaby no longer hands out.\n  Update it: npm install -g toolaby@latest — or run Toolaby's own copy: npx --yes ${wall}/toolaby.tgz ${command} ${slug}`);
   const wrote = targets.filter((path) => typeof plan.files[path.split('/').pop()] === 'string');
   for (const path of wrote) write(path, fillPages(plan.files[path.split('/').pop()], { appPopup, appSidePanel }));
   for (const f of entries) { write(f, plan.files[f]); wrote.push(f); }
@@ -386,12 +386,12 @@ async function create() {
   // the folder as it came let a Wall at another address — --wall, TOOLABY_WALL — write any file, anywhere.
   const scaffold = Array.isArray(plan.scaffold) && plan.scaffold.length ? plan.scaffold : SCAFFOLD_FILES;
   const unknown = scaffold.filter((f) => !SCAFFOLD_FILES.includes(f));
-  if (unknown.length) fail(`The Wall at ${wall} named ${unknown.map((f) => JSON.stringify(f)).join(', ')} among a new extension's files: not ${unknown.length > 1 ? 'files' : 'a file'} this command (${VERSION}) writes.\n  Nothing was written. If the Wall is newer than this command, update it: npm install -g toolaby@latest`);
+  if (unknown.length) fail(`Toolaby at ${wall} named ${unknown.map((f) => JSON.stringify(f)).join(', ')} among a new extension's files: not ${unknown.length > 1 ? 'files' : 'a file'} this command (${VERSION}) writes.\n  Nothing was written. If Toolaby is newer than this command, update it: npm install -g toolaby@latest`);
   // Both surfaces (the default), one of them, or none at all for a tool that works from the background — and beside each,
   // the Wall's page for it, which toolaby.showPaywall() opens when an action is refused (the extension's own pages stay in front).
   const wanted = [...CODE_FILES, ...scaffoldFilesFor(surfaces, scaffold), ...(hasPopup(surfaces) ? POPUP_FILES : []), ...(hasSidePanel(surfaces) ? SIDE_PANEL_FILES : [])];
   const absent = wanted.filter((f) => typeof plan.files[f] !== 'string');
-  if (absent.length) fail(`The Wall at ${wall} named ${absent.join(', ')} for a new extension but did not hand ${absent.length > 1 ? 'them' : 'it'} over.\n  Nothing was written. Update this command: npm install -g toolaby@latest — or run the Wall's own copy: npx --yes ${wall}/toolaby.tgz create ${slug}`);
+  if (absent.length) fail(`Toolaby at ${wall} named ${absent.join(', ')} for a new extension but did not hand ${absent.length > 1 ? 'them' : 'it'} over.\n  Nothing was written. Update this command: npm install -g toolaby@latest — or run Toolaby's own copy: npx --yes ${wall}/toolaby.tgz create ${slug}`);
   // What a coding agent reads: the guide with this tool's features and plans, the skill, AGENTS.md and CLAUDE.md.
   const agentFiles = AGENT_FILES.filter((f) => typeof plan.files[f.name] === 'string');
   const entries = AGENT_ENTRY_FILES.filter((f) => typeof plan.files[f] === 'string');
@@ -403,7 +403,7 @@ async function create() {
   const iconBytes = {};
   for (const icon of icons) {
     const got = await fetchBounded(`${wall}/boilerplate/${icon}`).catch((e) => ({ why: e.name === 'TimeoutError' ? 'it took longer than 30 seconds' : oneLine(e.message) }));
-    if (got.why || !got.body) fail(`The Wall at ${wall} did not send ${icon}: ${got.why ?? 'it sent more than a megabyte, which no icon is'}. Nothing was written.`);
+    if (got.why || !got.body) fail(`Toolaby at ${wall} did not send ${icon}: ${got.why ?? 'it sent more than a megabyte, which no icon is'}. Nothing was written.`);
     iconBytes[icon] = got.body;
   }
   const write = (rel, content) => { mkdirSync(dirname(at[rel]), { recursive: true }); writeFileSync(at[rel], content); };
@@ -418,7 +418,7 @@ async function create() {
   for (const f of entries) write(f, plan.files[f]);
   const clicking = { both: 'Click the icon: the popup shows what the Free plan holds. Open side panel, in it, is the same page at the panel\'s width', popup: 'Click the icon: the popup shows what the Free plan holds', 'side-panel': 'Click the icon: the side panel opens — it has no popup, so the click is the panel\'s', none: 'No popup and no side panel: nothing opens on a click. Your code says when to sell — toolaby.openPaymentPage()' }[surfaces];
   out(`\n  ${oneLine(plan.name)} → ${dir}${surfaces === 'both' ? '' : `  (--surfaces ${surfaces})`}\n\n    1. chrome://extensions → Developer mode → Load unpacked → ${dir}\n    2. ${clicking}; Buy opens ${oneLine(plan.buyer ?? `${plan.site}/tools/${slug}`)}\n\n  Edit background.js: your work goes behind toolaby.gate().\n  Surfaces, and how to add or drop one later: ${wall}/docs/surfaces\n`);
-  if (typeof plan.files['TOOLABY.md'] === 'string') out(`  With a coding agent: AGENTS.md and TOOLABY.md tell it how this extension sells. For Claude Code, the Wall itself:\n    claude mcp add toolaby -- npx -y toolaby@latest mcp${live ? ' --live' : ''}\n`);
+  if (typeof plan.files['TOOLABY.md'] === 'string') out(`  With a coding agent: AGENTS.md and TOOLABY.md tell it how this extension sells. For Claude Code, Toolaby itself:\n    claude mcp add toolaby -- npx -y toolaby@latest mcp${live ? ' --live' : ''}\n`);
 }
 
 // ── webhooks: the catalogue, and a delivery on demand ───────────────────────────────────────────────────────────────
@@ -445,7 +445,7 @@ function devSecret() {
 async function catalogue() {
   const res = await api('/api/cli/webhooks/events', { token: await tokenOrLogin() });
   if (res.status === 401) fail(`The session for ${side} is no longer valid. Run \`npx -y toolaby@latest login${live ? ' --live' : ''}\`.`);
-  if (!res.ok) fail(`The Wall answered HTTP ${res.status}.`);
+  if (!res.ok) fail(`Toolaby answered HTTP ${res.status}.`);
   return res.json.events;
 }
 async function webhooks() {
@@ -468,7 +468,7 @@ async function webhooks() {
     const to = opt('--to');
     if (!to) {
       const res = await api('/api/cli/webhooks/trigger', { method: 'POST', body: { type, workspace: opt('--workspace') ?? undefined }, token: await tokenOrLogin() });
-      if (!res.ok) fail(oneLine(res.json.message ?? `The Wall answered HTTP ${res.status}.`));
+      if (!res.ok) fail(oneLine(res.json.message ?? `Toolaby answered HTTP ${res.status}.`));
       out(`\n  Sent ${oneLine(res.json.sent)} to every endpoint of ${oneLine(res.json.workspace)} · ${side}. Its id is ${oneLine(res.json.id)}; the delivery log is under Configure → Webhooks.\n`);
       return;
     }
@@ -494,7 +494,7 @@ async function webhooks() {
   if (sub === 'endpoints') {
     const ws = opt('--workspace');
     const res = await api(`/api/cli/webhooks/endpoints${ws ? `?workspace=${encodeURIComponent(ws)}` : ''}`, { token: await tokenOrLogin() });
-    if (!res.ok) fail(oneLine(res.json.message ?? `The Wall answered HTTP ${res.status}.`));
+    if (!res.ok) fail(oneLine(res.json.message ?? `Toolaby answered HTTP ${res.status}.`));
     out(`\n  ${oneLine(res.json.workspace)} · ${side}\n`);
     if (res.json.endpoints.length === 0) out('    None yet. `npx -y toolaby@latest webhooks add <url>` registers one.');
     for (const e of res.json.endpoints) out(`    ${oneLine(e.id)}  ${e.disabled ? 'paused ' : 'on     '} ${oneLine(e.url)}${e.description ? `  — ${oneLine(e.description)}` : ''}${e.events.length ? `  (${oneLine(e.events.join(', '))})` : ''}`);
@@ -506,7 +506,7 @@ async function webhooks() {
     if (!url) fail('usage: npx -y toolaby@latest webhooks add <url> [--description <text>] [--events a.b,c.d] [--workspace <slug>]');
     const events = (opt('--events') ?? '').split(',').map((e) => e.trim()).filter(Boolean);
     const res = await api('/api/cli/webhooks/endpoints', { method: 'POST', body: { url, description: opt('--description') ?? '', events, workspace: opt('--workspace') ?? undefined }, token: await tokenOrLogin() });
-    if (!res.ok) fail(oneLine(res.json.message ?? `The Wall answered HTTP ${res.status}.`));
+    if (!res.ok) fail(oneLine(res.json.message ?? `Toolaby answered HTTP ${res.status}.`));
     out(`\n  Added ${oneLine(res.json.id)} → ${oneLine(res.json.url)} · ${oneLine(res.json.workspace)} · ${side}\n\n  Signing secret, shown once — keep it where your server keeps secrets:\n\n    ${oneLine(res.json.secret)}\n`);
     return;
   }
@@ -514,7 +514,7 @@ async function webhooks() {
     const id = positional[1];
     if (!id) fail('usage: npx -y toolaby@latest webhooks remove <ep_…> [--workspace <slug>]   — `npx -y toolaby@latest webhooks endpoints` lists them');
     const res = await api('/api/cli/webhooks/endpoints', { method: 'DELETE', body: { id, workspace: opt('--workspace') ?? undefined }, token: await tokenOrLogin() });
-    if (!res.ok) fail(oneLine(res.json.message ?? `The Wall answered HTTP ${res.status}.`));
+    if (!res.ok) fail(oneLine(res.json.message ?? `Toolaby answered HTTP ${res.status}.`));
     out(`\n  Removed ${oneLine(res.json.removed)} · ${oneLine(res.json.workspace)} · ${side}. Deliveries to it stop at once.\n`);
     return;
   }
@@ -731,8 +731,8 @@ function pack() {
       try { const facts = JSON.parse(Buffer.from(k.split('_')[2], 'base64url').toString('utf8')); if (typeof facts.s === 'string') sites.add(facts.s.replace(/\/$/, '')); } catch { /* not a key after all */ }
     }
   }
-  if ((modes.has('test') || modes.has('dev')) && !flag('--allow-test')) problems.push(`It carries a ${[...modes].filter((m) => m !== 'live').map((m) => `tk_${m}_`).join(' and ')} key: it would sell on ${modes.has('test') ? 'Test, with test cards' : 'a development Wall'}. Run \`npx -y toolaby@latest wire <tool-id> --live --force\`, build again, then pack. (--allow-test packs it anyway, for a build you will not publish.)`);
-  if (modes.size === 0) out('\n  No tool key found in the build: it is not wired to the Wall, or the key is somewhere this cannot read. Packing anyway.');
+  if ((modes.has('test') || modes.has('dev')) && !flag('--allow-test')) problems.push(`It carries a ${[...modes].filter((m) => m !== 'live').map((m) => `tk_${m}_`).join(' and ')} key: it would sell on ${modes.has('test') ? 'Test, with test cards' : 'a development server'}. Run \`npx -y toolaby@latest wire <tool-id> --live --force\`, build again, then pack. (--allow-test packs it anyway, for a build you will not publish.)`);
+  if (modes.size === 0) out('\n  No tool key found in the build: it is not wired to Toolaby, or the key is somewhere this cannot read. Packing anyway.');
 
   // Addresses of this machine have no place in a store build.
   const local = [...(manifest.host_permissions ?? []), ...(manifest.externally_connectable?.matches ?? [])].filter((m) => typeof m === 'string' && LOCAL.test(m));
@@ -751,7 +751,7 @@ function pack() {
   const keys = new Set([...sites].map(sitePattern));
   const strangers = [...new Set([...(manifest.host_permissions ?? []), ...(manifest.externally_connectable?.matches ?? [])])]
     .filter((m) => typeof m === 'string' && !keys.has(m) && walls.some((w) => { const h = hostOf(m); return !!h && (h === w || h.endsWith(`.${w}`)); }));
-  if (strangers.length && !flag('--allow-wall-hosts')) problems.push(`The manifest names ${strangers.map(oneLine).join(', ')}: the Wall's, and no key's in this build — another workspace, or the other side's Test address. A store build asks its buyers for ${strangers.length > 1 ? 'these' : 'it'} at install for nothing: take ${strangers.length > 1 ? 'them' : 'it'} out of host_permissions and externally_connectable. (--allow-wall-hosts packs it anyway.)`);
+  if (strangers.length && !flag('--allow-wall-hosts')) problems.push(`The manifest names ${strangers.map(oneLine).join(', ')}: Toolaby's, and no key's in this build — another workspace, or the other side's Test address. A store build asks its buyers for ${strangers.length > 1 ? 'these' : 'it'} at install for nothing: take ${strangers.length > 1 ? 'them' : 'it'} out of host_permissions and externally_connectable. (--allow-wall-hosts packs it anyway.)`);
   if (problems.length) fail(`Not packed:\n\n${problems.map((p) => `  · ${p}`).join('\n\n')}`);
 
   const hadKey = typeof manifest.key === 'string';
@@ -782,7 +782,7 @@ function pack() {
   // Said, not refused: the links are the project's, not the build's, and the build may hold nothing of theirs yet.
   const linked = project ? publicLinks(project, folder) : [];
   if (linked.length) out(`  Links in the folders a build copies as they are: ${linked.slice(0, 8).map(oneLine).join(', ')}${linked.length > 8 ? ` and ${linked.length - 8} more` : ''}. The build copies what each points at, a private file too: make each the file itself.`);
-  if (hadKey) out('  The manifest\'s "key" is left out: the store keeps the id it gives the item. Your unpacked copy keeps the key and its own id; the Wall admits both once the listing\'s address is on the tool.');
+  if (hadKey) out('  The manifest\'s "key" is left out: the store keeps the id it gives the item. Your unpacked copy keeps the key and its own id; Toolaby admits both once the listing\'s address is on the tool.');
   out('  Upload it at https://chrome.google.com/webstore/devconsole — a new item, or Package → Upload new package.\n');
 }
 
@@ -807,13 +807,13 @@ function help() {
     wire <tool-id>                     wire the extension in this folder to your tool, on Test
     wire <tool-id> --live              the same, on Live: the store build
                                        --into <folder>   another folder     --force   replace the platform's files
-                                       --own-popup       keep your popup in front (the Wall's opens from toolaby.showPaywall())
+                                       --own-popup       keep your popup in front (Toolaby's opens from toolaby.showPaywall())
     upgrade <tool-id>                  the platform's files replaced with the current ones — the popup, the client — yours untouched
     create <tool-id>                   a new, minimal extension for your tool, in <tool-id>/   --dir <folder>
                                        --surfaces both|popup|side-panel|none   what it opens (default: both)
     tools                              your tools, with their ids
     pack [folder]                      the zip for the Chrome Web Store: the built extension, its manifest's "key" left out;
-                                       refuses a Test key, localhost, or another of the Wall's hosts inside
+                                       refuses a Test key, localhost, or another of Toolaby's hosts inside
                                        --out <file.zip>
                                        leaves out keys, certificates, .env and credential files, source maps, secrets,
                                        git's files, a build's copy of a private file (compressed, UTF-16 or base64),
@@ -821,7 +821,7 @@ function help() {
                                        --allow-private packs them
     check [folder]                     whether the extension here is wired right: files, key, manifest, client, features;
                                        --browser loads it in Chromium (needs Playwright in the project)
-    mcp                                the Wall for coding agents, an MCP server on stdio:
+    mcp                                Toolaby for coding agents, an MCP server on stdio:
                                        claude mcp add toolaby -- npx -y toolaby@latest mcp
     webhooks events                    the six events, with an example of each
     webhooks trigger <event>           an example delivery to your endpoints; --to <url> sends it to a local server instead
@@ -829,8 +829,8 @@ function help() {
     login · whoami · logout            the session, per side; a command that needs one signs you in itself
 
     Every command acts on Test (toolaby.app/test) unless told --live (toolaby.app).
-    --wall <url> or TOOLABY_WALL names any other Wall; TOOLABY_TOKEN a session, for CI —
-    sent to Live alone, or to the one Wall TOOLABY_TOKEN_WALL names (https://toolaby.app/test for Test).
+    --wall <url> or TOOLABY_WALL names any other server; TOOLABY_TOKEN a session, for CI —
+    sent to Live alone, or to the one server TOOLABY_TOKEN_WALL names (https://toolaby.app/test for Test).
 
     In a repository you did not write, install it (npm i -g toolaby) and type toolaby-cli: npx can run a toolaby
     the project carries, or fetch one from a registry its .npmrc names.

package/lib/check.js

@@ -81,7 +81,7 @@ export async function runCheck({ dir: given, out, api, token, detectProject, wir
   const at = (f) => join(dir, `${project.codeDir}${f}`);
   const missing = ['toolaby.js', 'toolaby.config.js'].filter((f) => !existsSync(at(f)));
   if (missing.length) { bad(`${missing.map((f) => `${project.codeDir}${f}`).join(' and ')} missing. Run \`npx -y toolaby@latest wire <tool-id>\` here.`); return false; }
-  ok(`The Wall's files are in ${project.codeDir || 'the top folder'}.`);
+  ok(`Toolaby's files are in ${project.codeDir || 'the top folder'}.`);
 
   // 3. The tool key, and the tool it names — from a file: a link to a device or a pipe is read as nothing.
   const configText = readOr(at('toolaby.config.js'), '');
@@ -94,15 +94,15 @@ export async function runCheck({ dir: given, out, api, token, detectProject, wir
   // project's key sent the two requests wherever it named, and a tool id of ".." made the signed-in one a request for
   // another route (25 Sep 2026).
   if (!keySite(key.site) || !TOOL_ID.test(key.slug)) {
-    bad(`The tool key names ${JSON.stringify(key.slug)} at ${JSON.stringify(key.site)}, which is not a tool on a Wall: its address is https (http only on this machine) with nothing after the host, and its id lowercase letters, digits and dashes. Nothing was asked of it. \`npx -y toolaby@latest upgrade <tool-id>\` writes the tool's own key.`);
+    bad(`The tool key names ${JSON.stringify(key.slug)} at ${JSON.stringify(key.site)}, which is not a tool on a Toolaby server: its address is https (http only on this machine) with nothing after the host, and its id lowercase letters, digits and dashes. Nothing was asked of it. \`npx -y toolaby@latest upgrade <tool-id>\` writes the tool's own key.`);
     return false;
   }
-  ok(`The tool key names ${key.slug}, on ${mode === 'live' ? 'Live' : mode === 'test' ? 'Test' : 'a development Wall'} (${key.site}).`);
+  ok(`The tool key names ${key.slug}, on ${mode === 'live' ? 'Live' : mode === 'test' ? 'Test' : 'a development server'} (${key.site}).`);
   const pub = await fetchBounded(`${key.site}/api/tools/${encodeURIComponent(key.slug)}`).then((r) => ({ status: r.status, json: jsonOf(r.body) })).catch(() => ({ status: 0, json: null }));
   const tool = pub.status === 200 ? pub.json : null;
-  if (!tool) bad(pub.status === 0 ? `The Wall at ${key.site} could not be reached.` : pub.status === 404 ? `The Wall does not sell ${key.slug}: deleted, switched off, or on the other side. \`npx -y toolaby@latest tools${mode === 'live' ? ' --live' : ''}\` lists yours.` : `The Wall answered HTTP ${pub.status} for the tool.`);
+  if (!tool) bad(pub.status === 0 ? `Toolaby at ${key.site} could not be reached.` : pub.status === 404 ? `Toolaby does not sell ${key.slug}: deleted, switched off, or on the other side. \`npx -y toolaby@latest tools${mode === 'live' ? ' --live' : ''}\` lists yours.` : `Toolaby answered HTTP ${pub.status} for the tool.`);
   else {
-    ok(`The Wall knows it: ${oneLine(tool.name)}.`);
+    ok(`Toolaby knows it: ${oneLine(tool.name)}.`);
     const jwk = tool.publicKeyJwk ?? {};
     if (key.x && jwk.x && (key.x !== jwk.x || key.y !== jwk.y)) warn('The workspace\'s signing key was rotated after this key was written. Installed copies fetch the new one; `npx -y toolaby@latest upgrade <tool-id>` writes it in.');
   }
@@ -114,8 +114,8 @@ export async function runCheck({ dir: given, out, api, token, detectProject, wir
     const again = wireManifest(manifest, { site: key.site, has, remembered: null, rememberedSidePanel: null, manifestKey: typeof manifest.key === 'string' ? manifest.key : null, workerSource: workerText });
     // The background is said below, in a line of its own.
     const needed = (again.did ?? []).filter((d) => !/popup|side panel|service worker/i.test(d));
-    if (needed.length) bad(`The manifest lacks what the Wall needs: ${needed.map(oneLine).join('; ')}. \`npx -y toolaby@latest upgrade ${key.slug}\` adds it.`);
-    else ok('The manifest has the permissions and host permissions the Wall needs.');
+    if (needed.length) bad(`The manifest lacks what Toolaby needs: ${needed.map(oneLine).join('; ')}. \`npx -y toolaby@latest upgrade ${key.slug}\` adds it.`);
+    else ok('The manifest has the permissions and host permissions Toolaby needs.');
     // The identity: without the `key`, each copy's id follows its folder, and once the extension is named the tool key refuses every copy not chosen.
     if (typeof manifest.key !== 'string' && /manifestKey:\s*'[A-Za-z0-9+/]{100,}={0,2}'/.test(configText)) warn(`manifest.json has no "key": each copy's id then depends on its folder, and once your extension is named the tool key refuses any copy you did not choose on the Keys page. \`npx -y toolaby@latest upgrade ${key.slug}\` adds it.`);
   } else warn(`The manifest is generated by ${project.label}: build, then check the built manifest has ${sitePattern(key.site)} in host_permissions and externally_connectable.`);
@@ -128,20 +128,20 @@ export async function runCheck({ dir: given, out, api, token, detectProject, wir
     const wraps = wrappedBy(text);
     // What wiring again would do with it, by the same rules (wiring/manifest).
     const b = wireManifest(manifest, { site: key.site, has, workerSource: text }).background;
-    if (!named || text === null) bad(`Nothing starts the Wall: the manifest names no background${named ? ` it can find (${oneLine(named)})` : ''}. ${upgrade} adds one.`);
+    if (!named || text === null) bad(`Nothing starts Toolaby: the manifest names no background${named ? ` it can find (${oneLine(named)})` : ''}. ${upgrade} adds one.`);
     else if (b.kind === 'gone') bad(`${oneLine(named)} runs ${oneLine(b.wraps)}, which is no longer in the folder. Put your background's file name in manifest.json, then ${upgrade}.`);
-    else if (b.kind === 'rename') bad(`The Wall can't load a file named ${JSON.stringify(oneLine(b.file))}. Rename it to ${oneLine(b.to)}, put that in manifest.json, then ${upgrade}.`);
-    else if (b.kind === 'lines') bad(`${oneLine(b.file)} never starts the Wall, so the popup cannot reach it. Add at its top: ${oneLine(project.workerLines.trim().replace(/\n+/g, ' '))}`);
+    else if (b.kind === 'rename') bad(`Toolaby can't load a file named ${JSON.stringify(oneLine(b.file))}. Rename it to ${oneLine(b.to)}, put that in manifest.json, then ${upgrade}.`);
+    else if (b.kind === 'lines') bad(`${oneLine(b.file)} never starts Toolaby, so the popup cannot reach it. Add at its top: ${oneLine(project.workerLines.trim().replace(/\n+/g, ' '))}`);
     else if (wraps) {
       // A classic one carries the key it starts with: the one in toolaby.config.js, or the background starts with an old one.
       const carried = text.match(/"key":"([^"]+)"/)?.[1];
-      if (carried && carried !== keyText) bad(`${oneLine(named)} starts the Wall with another key than toolaby.config.js. \`npx -y toolaby@latest upgrade ${key.slug}\` writes both again.`);
-      else ok(`The background starts the Wall, and runs yours (${oneLine(wraps)}).`);
-    } else if (startsWall(text)) ok(`The background (${oneLine(named)}) starts the Wall.`);
-    else bad(`${oneLine(named)} never starts the Wall, so the popup cannot reach it. ${upgrade} puts the Wall's in front of it; yours stays as it is.`);
+      if (carried && carried !== keyText) bad(`${oneLine(named)} starts Toolaby with another key than toolaby.config.js. \`npx -y toolaby@latest upgrade ${key.slug}\` writes both again.`);
+      else ok(`The background starts Toolaby, and runs yours (${oneLine(wraps)}).`);
+    } else if (startsWall(text)) ok(`The background (${oneLine(named)}) starts Toolaby.`);
+    else bad(`${oneLine(named)} never starts Toolaby, so the popup cannot reach it. ${upgrade} puts Toolaby's in front of it; yours stays as it is.`);
   } else if (project.worker && !project.extraFiles) {
-    if (startsWall(readOr(join(dir, project.worker), ''))) ok(`The background (${oneLine(project.worker)}) starts the Wall.`);
-    else bad(`${oneLine(project.worker)} never starts the Wall, so the popup cannot reach it. Add at its top: ${oneLine(project.workerLines.trim().replace(/\n+/g, ' '))}`);
+    if (startsWall(readOr(join(dir, project.worker), ''))) ok(`The background (${oneLine(project.worker)}) starts Toolaby.`);
+    else bad(`${oneLine(project.worker)} never starts Toolaby, so the popup cannot reach it. Add at its top: ${oneLine(project.workerLines.trim().replace(/\n+/g, ' '))}`);
   }
   // A popup the code swaps while it runs: the Wall's in front of it can be skipped.
   if (project.manifestFile && manifest?.action?.default_popup === 'toolaby-popup.html') {
@@ -151,9 +151,9 @@ export async function runCheck({ dir: given, out, api, token, detectProject, wir
 
   // 5. The client, as fresh as the Wall's.
   const client = await fetchBounded(`${key.site}/client/toolaby.js`).then((r) => (r.ok && r.body ? r.body.toString('utf8') : null)).catch(() => null);
-  if (client === null) warn('The Wall\'s current client could not be read to compare.');
-  else if (sha(client) !== sha(readOr(at('toolaby.js'), ''))) warn(`toolaby.js is not the Wall's current client. \`npx -y toolaby@latest upgrade ${key.slug}\` replaces it (your own files stay).`);
-  else ok('toolaby.js is the Wall\'s current client.');
+  if (client === null) warn('Toolaby\'s current client could not be read to compare.');
+  else if (sha(client) !== sha(readOr(at('toolaby.js'), ''))) warn(`toolaby.js is not Toolaby's current client. \`npx -y toolaby@latest upgrade ${key.slug}\` replaces it (your own files stay).`);
+  else ok('toolaby.js is Toolaby\'s current client.');
 
   // 6. The features the code gates on, against the tool's; and the page showPaywall() opens.
   const sources = sourceFiles(dir).map((f) => { try { return readText(f); } catch { return ''; } });
@@ -182,7 +182,7 @@ export async function runCheck({ dir: given, out, api, token, detectProject, wir
     else if (facts?.ok) warn('No copy has checked in yet: load it at chrome://extensions and open it once.');
     // The key carries what the Free plan holds and the kind of plan sold: a change since it was written leaves it behind.
     const current = facts?.ok ? facts.json?.toolKey : null;
-    if (typeof current === 'string' && current.split('_')[1] === mode && current !== keyText) warn(`The tool key in toolaby.config.js is older than the Wall's: what the Free plan holds, the plans or the signing key changed since it was written. \`npx -y toolaby@latest upgrade ${key.slug}\` writes the current one.`);
+    if (typeof current === 'string' && current.split('_')[1] === mode && current !== keyText) warn(`The tool key in toolaby.config.js is older than Toolaby's: what the Free plan holds, the plans or the signing key changed since it was written. \`npx -y toolaby@latest upgrade ${key.slug}\` writes the current one.`);
   }
 
   // 8. In a browser: the background answers.
@@ -215,7 +215,7 @@ async function browserCheck({ dir, project, manifest, ok, warn, bad }) {
       chrome.runtime.sendMessage({ action: 'getLicenseStatus' }).then((r) => r ?? null),
       new Promise((r) => setTimeout(() => r('timeout'), 8000)),
     ])).catch((e) => `error: ${e.message}`);
-    if (answer && answer !== 'timeout' && !String(answer).startsWith('error')) ok('The background answers the Wall\'s client: its listeners registered.');
+    if (answer && answer !== 'timeout' && !String(answer).startsWith('error')) ok('The background answers Toolaby\'s client: its listeners registered.');
     else bad(`The background did not answer (${oneLine(answer ?? 'nothing')}): its module threw while loading, so none of its listeners registered.`);
     await page.close().catch(() => {});
     // The extension's own pages, each opened in a tab: one whose script throws is a popup that opens blank.

package/lib/manifest.js

@@ -49,7 +49,7 @@ export function wallWorkerSource(b, config) {
     const depth = b.file.split('/').length - 1;
     const up = '../'.repeat(depth);
     const own = b.wraps.slice(b.wraps.lastIndexOf('/') + 1);
-    const head = `// The Wall's background, in front of yours: ${b.wraps} runs as it did, then the Wall starts.\n// Written by the Wall's wiring (toolaby wire): keep it, never edit it. Your code stays in ${b.wraps}.\n// toolaby-wraps: ${b.wraps}\n`;
+    const head = `// Toolaby's background, in front of yours: ${b.wraps} runs as it did, then Toolaby starts.\n// Written by Toolaby's wiring (toolaby wire): keep it, never edit it. Your code stays in ${b.wraps}.\n// toolaby-wraps: ${b.wraps}\n`;
     if (!b.classic)
         return `${head}import { toolaby } from '${up || './'}toolaby.js';\nimport './${own}';\n\ntoolaby.ensureBackground();\n`;
     const c = config ?? { key: '', appPopup: '', appSidePanel: '' };
@@ -164,12 +164,12 @@ export function wireManifest(input, o) {
     const appPopup = o.ownInFront ? null : ownPopup;
     if (appPopup && declared !== WALL_POPUP) {
         manifest.action = { ...manifest.action, default_popup: WALL_POPUP };
-        did.push(`the Wall's popup in front of ${appPopup}: it opens on to yours while the device may, and shows the panel when it may not`);
+        did.push(`Toolaby's popup in front of ${appPopup}: it opens on to yours while the device may, and shows the panel when it may not`);
     }
     // Asked to keep the extension's own in front after a wiring stood the Wall's there: theirs goes back.
     if (o.ownInFront && declared === WALL_POPUP && ownPopup) {
         manifest.action = { ...manifest.action, default_popup: ownPopup };
-        did.push(`${ownPopup} back in front: toolaby.showPaywall() opens the Wall's popup`);
+        did.push(`${ownPopup} back in front: toolaby.showPaywall() opens Toolaby's popup`);
     }
     // The extension's own side panel, the same way: the Wall's in front, with the permission a side panel needs.
     // Chrome spells it side_panel.default_path, Firefox sidebar_action.default_panel; a manifest may carry both.
@@ -183,7 +183,7 @@ export function wireManifest(input, o) {
         // The extension's own side panel stays in front, as its popup does — and goes back there after a wiring put the Wall's.
         if (declaredPanel === WALL_SIDE_PANEL && ownSidePanel) {
             manifest.side_panel = { ...manifest.side_panel, default_path: ownSidePanel };
-            did.push(`${ownSidePanel} back in front: toolaby.showPaywall() opens the Wall's side panel`);
+            did.push(`${ownSidePanel} back in front: toolaby.showPaywall() opens Toolaby's side panel`);
         }
         if (declaredSidebar === WALL_SIDE_PANEL && ownSidePanel)
             manifest.sidebar_action = { ...manifest.sidebar_action, default_panel: ownSidePanel };
@@ -192,12 +192,12 @@ export function wireManifest(input, o) {
         manifest.side_panel = { ...manifest.side_panel, default_path: WALL_SIDE_PANEL };
         if (!(Array.isArray(manifest.permissions) && manifest.permissions.includes('sidePanel')))
             manifest.permissions = add(manifest.permissions, 'sidePanel');
-        did.push(`the Wall's side panel in front of ${declaredPanel}: the same as the popup, at the panel's width`);
+        did.push(`Toolaby's side panel in front of ${declaredPanel}: the same as the popup, at the panel's width`);
     }
     // Firefox's sidebar, when it names the same page — one that names another is left alone rather than pointed elsewhere.
     if (!o.ownInFront && theirs(declaredSidebar) && (!declaredPanel || declaredSidebar === declaredPanel)) {
         manifest.sidebar_action = { ...manifest.sidebar_action, default_panel: WALL_SIDE_PANEL };
-        did.push(`the Wall's side panel in front of ${declaredSidebar} in Firefox's sidebar_action too`);
+        did.push(`Toolaby's side panel in front of ${declaredSidebar} in Firefox's sidebar_action too`);
     }
     // The background. None named, or named and not there: one of the Wall's alone, a module. The extension's own: left as
     // it is, and the Wall's stood in front of it — beside it, a module for a module and a classic script for a classic

package/lib/mcp.js

@@ -35,7 +35,7 @@ function toolsFor(side) {
     {
       name: 'toolaby_whoami',
       title: 'Who is signed in',
-      description: `The developer signed in to the ${side} Wall, and their workspaces.`,
+      description: `The developer signed in to Toolaby (${side}), and their workspaces.`,
       inputSchema: { type: 'object', properties: {}, additionalProperties: false },
       annotations: READS,
       run: (_a, api) => api('/api/cli/me'),
@@ -43,7 +43,7 @@ function toolsFor(side) {
     {
       name: 'toolaby_list_tools',
       title: 'List tools',
-      description: `Every tool in the developer's workspaces on the ${side} Wall, with the id the other tools take.`,
+      description: `Every tool in the developer's workspaces on Toolaby (${side}), with the id the other tools take.`,
       inputSchema: { type: 'object', properties: {}, additionalProperties: false },
       annotations: READS,
       run: (_a, api) => api('/api/cli/tools'),
@@ -51,7 +51,7 @@ function toolsFor(side) {
     {
       name: 'toolaby_get_tool',
       title: 'Read a tool',
-      description: `One tool on the ${side} Wall: what the Free plan holds (freePlan.holds, in a sentence), its features, its plans with what each unlocks, its tool key, and its extension: identityId is the id of every copy whose manifest has the tool's key (such a copy needs no binding, so boundId stays null), checkedInAt says whether one has checked in, inUse which builds. Then the addresses of its pages.`,
+      description: `One tool on Toolaby (${side}): what the Free plan holds (freePlan.holds, in a sentence), its features, its plans with what each unlocks, its tool key, and its extension: identityId is the id of every copy whose manifest has the tool's key (such a copy needs no binding, so boundId stays null), checkedInAt says whether one has checked in, inUse which builds. Then the addresses of its pages.`,
       inputSchema: { type: 'object', properties: { tool }, required: ['tool'], additionalProperties: false },
       annotations: READS,
       run: (a, api) => api(`/api/cli/tools/${encodeURIComponent(a.tool)}`),
@@ -59,7 +59,7 @@ function toolsFor(side) {
     {
       name: 'toolaby_create_tool',
       title: 'Create a tool',
-      description: `A new tool on the ${side} Wall. This changes what the developer's own workspace sells: one more tool. Its Free plan holds everything until access is set. Then wire an extension to it: \`npx -y toolaby@latest create <id>\` for a new one, \`npx -y toolaby@latest wire <id>\` for an existing one.`,
+      description: `A new tool on Toolaby (${side}). This changes what the developer's own workspace sells: one more tool. Its Free plan holds everything until access is set. Then wire an extension to it: \`npx -y toolaby@latest create <id>\` for a new one, \`npx -y toolaby@latest wire <id>\` for an existing one.`,
       inputSchema: {
         type: 'object',
         properties: {
@@ -165,7 +165,7 @@ function toolsFor(side) {
     {
       name: 'toolaby_docs',
       title: 'Read the docs',
-      description: 'The Wall\'s docs as Markdown. Without a page: the index, every page with what it covers. With a page (like "gating", "pricing", "reference/client"): that page.',
+      description: 'Toolaby\'s docs as Markdown. Without a page: the index, every page with what it covers. With a page (like "gating", "pricing", "reference/client"): that page.',
       inputSchema: { type: 'object', properties: { page: { type: 'string' } }, additionalProperties: false },
       annotations: READS,
       run: (a, _api, docs) => docs(a.page),
@@ -177,7 +177,7 @@ function toolsFor(side) {
 function resultOf(res) {
   const body = res.json ?? {};
   if (res.ok) return { content: [{ type: 'text', text: typeof res.text === 'string' ? res.text : JSON.stringify(body, null, 2) }], ...(typeof res.text === 'string' ? {} : { structuredContent: body }) };
-  const why = body.message ?? body.error ?? `The Wall answered HTTP ${res.status}.`;
+  const why = body.message ?? body.error ?? `Toolaby answered HTTP ${res.status}.`;
   return { content: [{ type: 'text', text: why }], isError: true };
 }
 
@@ -195,7 +195,7 @@ export function runMcp({ version, side, wall, api, token }) {
     const url = clean ? `${wall}/docs/${clean}.md` : `${wall}/llms.txt`;
     // The Wall's own pages, a few megabytes at most: a redirect elsewhere handed an agent any host's page as the docs (25 Sep 2026).
     const res = await fetchBounded(url, { limit: 4 * 1024 * 1024 }).catch(() => ({ ok: false, status: 0, body: null }));
-    if (res.ok && !res.body) return { ok: false, status: 413, json: { message: 'The docs page is larger than any the Wall serves.' } };
+    if (res.ok && !res.body) return { ok: false, status: 413, json: { message: 'The docs page is larger than any Toolaby serves.' } };
     const text = res.body ? res.body.toString('utf8') : '';
     return res.ok ? { ok: true, status: res.status, text } : { ok: false, status: res.status, json: { message: res.status === 404 ? `No docs page "${clean}". Call toolaby_docs without a page for the index.` : `The docs answered HTTP ${res.status}.` } };
   };
@@ -208,7 +208,7 @@ export function runMcp({ version, side, wall, api, token }) {
       return { result: { content: [{ type: 'text', text: 'A tool id is lowercase letters, digits and dashes, as toolaby_list_tools gives it.' }], isError: true } };
     }
     if (name !== 'toolaby_docs' && !token()) {
-      return { result: { content: [{ type: 'text', text: `Not signed in to the ${side} Wall (${wall}). Run \`npx -y toolaby@latest login${side === 'Live' ? ' --live' : ''}\` in a terminal, then call this again.` }], isError: true } };
+      return { result: { content: [{ type: 'text', text: `Not signed in to Toolaby (${side}, ${wall}). Run \`npx -y toolaby@latest login${side === 'Live' ? ' --live' : ''}\` in a terminal, then call this again.` }], isError: true } };
     }
     try {
       return { result: resultOf(await t.run(args ?? {}, api, docs)) };
@@ -228,8 +228,8 @@ export function runMcp({ version, side, wall, api, token }) {
         return send({ id: msg.id, result: {
           protocolVersion: PROTOCOL_VERSIONS.includes(asked) ? asked : PROTOCOL_VERSIONS[0],
           capabilities: { tools: { listChanged: false } },
-          serverInfo: { name: 'toolaby', title: 'Toolaby Wall', version },
-          instructions: `The Toolaby Wall (${side}, ${wall}): accounts, licences, subscriptions and the paywall for Chrome extensions. Read a tool with toolaby_get_tool before changing it; the extension gates paid work with toolaby.gate({ feature }) and each feature key must exist on the tool (toolaby_set_features). Wire files with the shell: npx -y toolaby@latest create|wire|upgrade <id>, check with npx -y toolaby@latest check. toolaby_docs reads the docs.`,
+          serverInfo: { name: 'toolaby', title: 'Toolaby', version },
+          instructions: `Toolaby (${side}, ${wall}): accounts, licences, subscriptions and the paywall for Chrome extensions. Read a tool with toolaby_get_tool before changing it; the extension gates paid work with toolaby.gate({ feature }) and each feature key must exist on the tool (toolaby_set_features). Wire files with the shell: npx -y toolaby@latest create|wire|upgrade <id>, check with npx -y toolaby@latest check. toolaby_docs reads the docs.`,
         } });
       }
       case 'notifications/initialized':

package/lib/project.js

@@ -131,7 +131,7 @@ export function detectProject(o) {
             kind: 'plasmo', label: 'Plasmo', codeDir: '', popupDir: '', manifestFile: null, wrapper: false, appPopup: null, appSidePanel: null, worker, built: false, foundManifest: null,
             createWorker: worker ? null : { file: workerFile, content: workerLines },
             workerLines, snippets: [{ file: 'package.json', language: 'json', code }],
-            note: 'Plasmo builds only the pages its manifest names, so the Wall\'s popup cannot stand in front of yours: ask the gate in your popup — the lines are in the docs, under Plasmo.',
+            note: 'Plasmo builds only the pages its manifest names, so Toolaby\'s popup cannot stand in front of yours: ask the gate in your popup — the lines are in the docs, under Plasmo.',
         };
     }
     if (crxjs && !has('manifest.json')) {
@@ -147,10 +147,10 @@ export function detectProject(o) {
         const workerFile = worker ?? 'src/background.ts';
         const workerLines = `import { toolaby } from '${importPath(workerFile)}';\n\ntoolaby.startBackground();\n`;
         const code = [
-            `// ${configFile ?? 'manifest.config.ts'} — the Wall's needs come from toolaby.config.js: import once, spread inside defineManifest({ … })`,
+            `// ${configFile ?? 'manifest.config.ts'} — Toolaby's needs come from toolaby.config.js: import once, spread inside defineManifest({ … })`,
             `import { manifest as toolaby } from '${importPath(configFile ?? 'manifest.config.ts').replace(/toolaby\.js$/, 'toolaby.manifest.js')}';`,
             ``,
-            `...toolaby, // the extension's id, the storage permission, the Wall's address`,
+            `...toolaby, // the extension's id, the storage permission, Toolaby's address`,
             ...(appPopup ? [`action: { default_popup: 'toolaby-popup.html' },`] : []),
             ...(appSidePanel ? [`side_panel: { default_path: 'toolaby-sidepanel.html' }, // and 'sidePanel' among the permissions`] : []),
             ...(worker ? [] : [`background: { service_worker: '${workerFile}', type: 'module' },`]),
@@ -159,7 +159,7 @@ export function detectProject(o) {
         const viteFile = first(has, ['vite.config.ts', 'vite.config.js', 'vite.config.mts', 'vite.config.mjs']) ?? 'vite.config.ts';
         const inputs = [appPopup ? `popup: '${appPopup}'` : null, appSidePanel ? `sidepanel: '${appSidePanel}'` : null].filter(Boolean).join(', ');
         const vite = [
-            `// ${viteFile} — CRXJS builds only the pages the manifest names: this keeps ${appPopup && appSidePanel ? 'your popup and side panel' : appSidePanel ? 'your side panel' : 'your popup'} built, for the Wall's to hand over to`,
+            `// ${viteFile} — CRXJS builds only the pages the manifest names: this keeps ${appPopup && appSidePanel ? 'your popup and side panel' : appSidePanel ? 'your side panel' : 'your popup'} built, for Toolaby's to hand over to`,
             `export default defineConfig({`,
             `  plugins: [crx({ manifest })],`,
             `  build: { rollupOptions: { input: { ${inputs} } } },`,

package/lib/summary.js

@@ -21,51 +21,51 @@ export function wiringSummary(o) {
     if (o.appPopup) {
         rows.push(o.popupSwap
             ? { tone: 'warn', label: 'Popup', text: `Your code handles the popup itself (${o.popupSwap.call} in ${o.popupSwap.file}), so keep yours in front`, fix: 'own-popup' }
-            : { tone: 'ok', label: 'Popup', text: `The Wall checks first, then opens ${o.appPopup}` });
+            : { tone: 'ok', label: 'Popup', text: `Toolaby checks first, then opens ${o.appPopup}` });
     }
     else if (ownPopup && o.keptForSwap && o.popupSwap)
         rows.push({ tone: 'ok', label: 'Popup', text: `Yours stays in front, as your code handles it (${o.popupSwap.call} in ${o.popupSwap.file})` });
     else if (ownPopup)
-        rows.push({ tone: 'ok', label: 'Popup', text: `Yours stays in front; toolaby.showPaywall() opens the Wall's` });
+        rows.push({ tone: 'ok', label: 'Popup', text: `Yours stays in front; toolaby.showPaywall() opens Toolaby's` });
     else if (p.note)
         rows.push({ tone: 'warn', label: 'Popup', text: p.note });
     else if (!o.appSidePanel && !w?.ownSidePanel)
-        rows.push({ tone: 'ok', label: 'Popup', text: 'None: the Wall steps in where your code calls toolaby.gate()' });
+        rows.push({ tone: 'ok', label: 'Popup', text: 'None: Toolaby steps in where your code calls toolaby.gate()' });
     if (o.appSidePanel)
-        rows.push({ tone: 'ok', label: 'Side panel', text: `The Wall checks first, then opens ${o.appSidePanel}` });
+        rows.push({ tone: 'ok', label: 'Side panel', text: `Toolaby checks first, then opens ${o.appSidePanel}` });
     else if (w?.ownSidePanel)
-        rows.push({ tone: 'ok', label: 'Side panel', text: `Yours stays in front; toolaby.showPaywall() opens the Wall's` });
+        rows.push({ tone: 'ok', label: 'Side panel', text: `Yours stays in front; toolaby.showPaywall() opens Toolaby's` });
     // The background: what starts the Wall.
     if (w) {
         const b = w.background;
         if (b.kind === 'new')
-            rows.push({ tone: 'ok', label: 'Background', text: `${b.file} starts the Wall` });
+            rows.push({ tone: 'ok', label: 'Background', text: `${b.file} starts Toolaby` });
         else if (b.kind === 'wrap')
-            rows.push({ tone: 'ok', label: 'Background', text: `${b.wraps} runs as before, and the Wall starts with it` });
+            rows.push({ tone: 'ok', label: 'Background', text: `${b.wraps} runs as before, and Toolaby starts with it` });
         else if (b.kind === 'started')
-            rows.push({ tone: 'ok', label: 'Background', text: `${b.file} starts the Wall` });
+            rows.push({ tone: 'ok', label: 'Background', text: `${b.file} starts Toolaby` });
         else if (b.kind === 'lines')
             rows.push({ tone: 'todo', label: 'Background', text: `Add these 2 lines to the top of ${b.file}:`, code: `import { toolaby } from '${importPath(b.file)}';\n\ntoolaby.startBackground();` });
         else if (b.kind === 'gone')
             rows.push({ tone: 'todo', label: 'Background', text: `${b.wraps} is no longer in the folder. Put your background's file name in manifest.json:`, code: '"background": { "service_worker": "your-background.js" }', again: true });
         else
-            rows.push({ tone: 'todo', label: 'Background', text: `The Wall can't load a file named "${b.file}". Rename it to ${b.to}, and in manifest.json:`, code: `"background": { "service_worker": "${b.to}" }`, again: true });
+            rows.push({ tone: 'todo', label: 'Background', text: `Toolaby can't load a file named "${b.file}". Rename it to ${b.to}, and in manifest.json:`, code: `"background": { "service_worker": "${b.to}" }`, again: true });
     }
     else if (p.extraFiles?.length)
-        rows.push({ tone: 'ok', label: 'Background', text: `${p.label} starts the Wall (${p.extraFiles.map((f) => f.to).join(', ')})` });
+        rows.push({ tone: 'ok', label: 'Background', text: `${p.label} starts Toolaby (${p.extraFiles.map((f) => f.to).join(', ')})` });
     else if (p.createWorker)
-        rows.push({ tone: 'ok', label: 'Background', text: `${p.createWorker.file} starts the Wall` });
+        rows.push({ tone: 'ok', label: 'Background', text: `${p.createWorker.file} starts Toolaby` });
     else if (p.worker && !o.workerStarts)
         rows.push({ tone: 'todo', label: 'Background', text: `Add these 2 lines to the top of ${p.worker}:`, code: p.workerLines.trim() });
     else if (p.worker)
-        rows.push({ tone: 'ok', label: 'Background', text: `${p.worker} starts the Wall` });
+        rows.push({ tone: 'ok', label: 'Background', text: `${p.worker} starts Toolaby` });
     // With no page of the Wall's in front, the paywall opens only where the code asks for it: when nothing does, the lines.
     if (!o.appPopup && !o.appSidePanel && o.gates === false && p.kind === 'plain') {
         rows.push({ tone: 'todo', label: 'Paywall', text: p.built ? 'Nothing opens it yet. Where your paid action starts, add (the import is the path to toolaby.js):' : 'Nothing opens it yet. Where your paid action starts, in a module script, add:', code: `import { toolaby } from '${p.built ? './toolaby.js' : '/toolaby.js'}';\n\nconst permit = await toolaby.gate();\nif (!permit.allowed) return toolaby.showPaywall(permit);` });
     }
     // The manifest: what it gained, or, generated by a framework, what its config needs.
     if (w)
-        rows.push({ tone: 'ok', label: 'Manifest', text: w.added.length ? w.added.join(' · ') : 'Has what the Wall needs' });
+        rows.push({ tone: 'ok', label: 'Manifest', text: w.added.length ? w.added.join(' · ') : 'Has what Toolaby needs' });
     for (const sn of p.snippets)
         rows.push({ tone: 'todo', label: 'Manifest', text: `Add to ${sn.file}:`, code: sn.code.trim() });
     if (p.built)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolaby",
-  "version": "1.8.3",
+  "version": "1.8.4",
   "description": "The Toolaby command line: sign in once, then wire any Chrome extension to your tool on the Wall — sign-in, the Free plan, licences and subscriptions — or start a new one; check it, and give coding agents the Wall as an MCP server.",
   "type": "module",
   "bin": {