cli-anything-brissoto-pay 1.0.0__tar.gz

cli_anything_brissoto_pay-1.0.0/.gitignore

@@ -0,0 +1,24 @@
+node_modules
+.DS_Store
+dist
+dist-ssr
+*.local
+.env
+.nitro
+.tanstack
+.wrangler
+.output
+.vinxi
+__unconfig*
+todos.json
+/coverage
+/test-results
+/playwright-report
+.env.prod.convex
+.expo
+
+# Python CLI (cli/)
+.venv
+__pycache__
+.pytest_cache
+.coverage

cli_anything_brissoto_pay-1.0.0/.python-version

@@ -0,0 +1 @@
+3.12

cli_anything_brissoto_pay-1.0.0/PKG-INFO

@@ -0,0 +1,84 @@
+Metadata-Version: 2.5
+Name: cli-anything-brissoto-pay
+Version: 1.0.0
+Summary: Set apps up in the Brissoto Pay gateway from a coding agent.
+Project-URL: Documentation, https://pay.brissoto.com/docs
+License-Expression: MIT
+Requires-Python: >=3.10
+Requires-Dist: click>=8.1
+Requires-Dist: convex>=0.8
+Description-Content-Type: text/markdown
+
+# cli-anything-brissoto-pay
+
+Sets an app up in the Brissoto Pay gateway, from a coding agent or by hand. Admins only.
+
+## Install
+
+Needs [uv](https://docs.astral.sh/uv/) (`brew install uv`). Nothing to install in the project: `uvx` runs the latest release.
+
+## With a coding agent
+
+1. Open [pay.brissoto.com/docs](https://pay.brissoto.com/docs), click **Copy** on "Set up with a coding agent".
+2. Paste it into your coding agent (Claude Code, Codex, Cursor) in the app's project.
+3. Approve the sign-in in your browser, then answer its questions.
+
+It starts in test and asks you before replacing a key or going live.
+
+## By hand
+
+```sh
+uvx cli-anything-brissoto-pay login                       # approve in the browser, 30 days
+uvx cli-anything-brissoto-pay apps create --name Heyama --color "#0F766E" --language fr
+uvx cli-anything-brissoto-pay apps get heyama              # the Dev server's id
+uvx cli-anything-brissoto-pay servers update <server> --webhook-url https://api.heyama.com/webhooks/pay --return-url http://localhost:3000/paid
+uvx cli-anything-brissoto-pay servers key <server>
+uvx cli-anything-brissoto-pay servers webhook-secret <server>
+uvx cli-anything-brissoto-pay webhooks test <server>
+uvx cli-anything-brissoto-pay go-live heyama --webhook-url https://api.heyama.com/webhooks/pay --return-url https://heyama.com/paid --yes
+```
+
+Put the key and secret in `BRISSOTO_PAY_API_KEY` and `BRISSOTO_PAY_WEBHOOK_SECRET`, in an env file that is not committed.
+
+## Commands
+
+| Command                                                         | Does                                     |
+| --------------------------------------------------------------- | ---------------------------------------- |
+| `apps list`                                                     | Every app                                |
+| `apps get <slug>`                                               | One app, its servers, URLs and key hints |
+| `apps create --name --color --language [--logo]`                | A Test app with a Dev server             |
+| `apps branding <slug> [--name] [--color] [--language] [--logo]` | Change its brand                         |
+| `servers add <slug> <name>`                                     | A test server                            |
+| `servers update <server> [--webhook-url] [--return-url ...]`    | Its URLs                                 |
+| `servers key <server> [--yes]`                                  | Its API key, shown once                  |
+| `servers webhook-secret <server> [--yes]`                       | Its webhook secret, shown once           |
+| `methods list [--env] [--app]`                                  | Payment methods and their providers      |
+| `methods set <slug> <method> --on\|--off`                       | Offer a method in test, or not           |
+| `webhooks test <server> [--wait]`                               | Send a `webhook.test`, say how it went   |
+| `payments list <slug> [--env] [--days] [--status] [--page]`     | The app's payments                       |
+| `payments get <id>`                                             | One payment, its attempts and webhooks   |
+| `go-live <slug> [--webhook-url] [--return-url ...] --yes`       | Production server, live key and secret   |
+
+Replacing a key or secret, and `go-live`, fail with `confirmation_required` without `--yes`.
+
+No command opens the REPL. Every command takes `--json` and `--help`.
+
+| Option         | Env var                   | Default                  |
+| -------------- | ------------------------- | ------------------------ |
+| `--gateway`    | `BRISSOTO_PAY_GATEWAY`    | `prod`                   |
+| `--convex-url` | `BRISSOTO_PAY_CONVEX_URL` | the gateway's Convex URL |
+| `--web-url`    | `BRISSOTO_PAY_WEB_URL`    | the gateway's dashboard  |
+
+| Gateway | Convex URL                             | Dashboard                  |
+| ------- | -------------------------------------- | -------------------------- |
+| `prod`  | `https://api-pay.brissoto.com`         | `https://pay.brissoto.com` |
+| `dev`   | `https://giant-bison-875.convex.cloud` | `http://localhost:4310`    |
+
+Sessions: `~/.config/brissoto-pay/sessions.json`, one per Convex URL.
+
+## Develop
+
+```sh
+npm run test:cli
+uv run --directory cli cli-anything-brissoto-pay --help
+```

cli_anything_brissoto_pay-1.0.0/README.md

@@ -0,0 +1,73 @@
+# cli-anything-brissoto-pay
+
+Sets an app up in the Brissoto Pay gateway, from a coding agent or by hand. Admins only.
+
+## Install
+
+Needs [uv](https://docs.astral.sh/uv/) (`brew install uv`). Nothing to install in the project: `uvx` runs the latest release.
+
+## With a coding agent
+
+1. Open [pay.brissoto.com/docs](https://pay.brissoto.com/docs), click **Copy** on "Set up with a coding agent".
+2. Paste it into your coding agent (Claude Code, Codex, Cursor) in the app's project.
+3. Approve the sign-in in your browser, then answer its questions.
+
+It starts in test and asks you before replacing a key or going live.
+
+## By hand
+
+```sh
+uvx cli-anything-brissoto-pay login                       # approve in the browser, 30 days
+uvx cli-anything-brissoto-pay apps create --name Heyama --color "#0F766E" --language fr
+uvx cli-anything-brissoto-pay apps get heyama              # the Dev server's id
+uvx cli-anything-brissoto-pay servers update <server> --webhook-url https://api.heyama.com/webhooks/pay --return-url http://localhost:3000/paid
+uvx cli-anything-brissoto-pay servers key <server>
+uvx cli-anything-brissoto-pay servers webhook-secret <server>
+uvx cli-anything-brissoto-pay webhooks test <server>
+uvx cli-anything-brissoto-pay go-live heyama --webhook-url https://api.heyama.com/webhooks/pay --return-url https://heyama.com/paid --yes
+```
+
+Put the key and secret in `BRISSOTO_PAY_API_KEY` and `BRISSOTO_PAY_WEBHOOK_SECRET`, in an env file that is not committed.
+
+## Commands
+
+| Command                                                         | Does                                     |
+| --------------------------------------------------------------- | ---------------------------------------- |
+| `apps list`                                                     | Every app                                |
+| `apps get <slug>`                                               | One app, its servers, URLs and key hints |
+| `apps create --name --color --language [--logo]`                | A Test app with a Dev server             |
+| `apps branding <slug> [--name] [--color] [--language] [--logo]` | Change its brand                         |
+| `servers add <slug> <name>`                                     | A test server                            |
+| `servers update <server> [--webhook-url] [--return-url ...]`    | Its URLs                                 |
+| `servers key <server> [--yes]`                                  | Its API key, shown once                  |
+| `servers webhook-secret <server> [--yes]`                       | Its webhook secret, shown once           |
+| `methods list [--env] [--app]`                                  | Payment methods and their providers      |
+| `methods set <slug> <method> --on\|--off`                       | Offer a method in test, or not           |
+| `webhooks test <server> [--wait]`                               | Send a `webhook.test`, say how it went   |
+| `payments list <slug> [--env] [--days] [--status] [--page]`     | The app's payments                       |
+| `payments get <id>`                                             | One payment, its attempts and webhooks   |
+| `go-live <slug> [--webhook-url] [--return-url ...] --yes`       | Production server, live key and secret   |
+
+Replacing a key or secret, and `go-live`, fail with `confirmation_required` without `--yes`.
+
+No command opens the REPL. Every command takes `--json` and `--help`.
+
+| Option         | Env var                   | Default                  |
+| -------------- | ------------------------- | ------------------------ |
+| `--gateway`    | `BRISSOTO_PAY_GATEWAY`    | `prod`                   |
+| `--convex-url` | `BRISSOTO_PAY_CONVEX_URL` | the gateway's Convex URL |
+| `--web-url`    | `BRISSOTO_PAY_WEB_URL`    | the gateway's dashboard  |
+
+| Gateway | Convex URL                             | Dashboard                  |
+| ------- | -------------------------------------- | -------------------------- |
+| `prod`  | `https://api-pay.brissoto.com`         | `https://pay.brissoto.com` |
+| `dev`   | `https://giant-bison-875.convex.cloud` | `http://localhost:4310`    |
+
+Sessions: `~/.config/brissoto-pay/sessions.json`, one per Convex URL.
+
+## Develop
+
+```sh
+npm run test:cli
+uv run --directory cli cli-anything-brissoto-pay --help
+```

cli_anything_brissoto_pay-1.0.0/cli_anything/brissoto_pay/__init__.py

@@ -0,0 +1,3 @@
+"""Brissoto Pay CLI: set apps up in the gateway from a coding agent."""
+
+__version__ = "1.0.0"

cli_anything_brissoto_pay-1.0.0/cli_anything/brissoto_pay/__main__.py

@@ -0,0 +1,5 @@
+"""`python -m cli_anything.brissoto_pay`."""
+
+from .brissoto_pay_cli import main
+
+main()

cli_anything_brissoto_pay-1.0.0/cli_anything/brissoto_pay/brissoto_pay_cli.py

@@ -0,0 +1,195 @@
+"""`cli-anything-brissoto-pay`: Click entry point and REPL."""
+
+from __future__ import annotations
+
+from importlib.resources import files
+from typing import NoReturn
+
+import click
+
+from .commands.apps import apps
+from .commands.go_live import go_live
+from .commands.methods import methods
+from .commands.payments import payments
+from .commands.servers import servers
+from .commands.webhooks import webhooks
+from .core.client import signed_out
+from .core.config import (
+    CONVEX_URL_ENV,
+    GATEWAY_ENV,
+    GATEWAYS,
+    PROD,
+    WEB_URL_ENV,
+)
+from .core.errors import CliError
+from .core.login import new_secret, pkce_challenge, sign_in_url, wait_for_code
+from .core.runtime import Runtime
+from .utils.options import json_option, pass_runtime
+from .utils.output import emit, emit_error
+from .utils.repl import run_repl
+
+class BrissotoPayGroup(click.Group):
+    """Turns a `CliError` into the error shape and a non-zero exit."""
+
+    def parse_args(self, ctx: click.Context, args: list[str]) -> list[str]:
+        ctx.meta["argv"] = list(args)
+        try:
+            return super().parse_args(ctx, args)
+        except click.UsageError as error:
+            self._usage_error(ctx, error)
+
+    def invoke(self, ctx: click.Context):
+        runtime = ctx.find_object(Runtime)
+        try:
+            return super().invoke(ctx)
+        except CliError as error:
+            emit_error(runtime.json, error)
+            ctx.exit(1)
+        except click.UsageError as error:
+            self._usage_error(ctx, error)
+
+    def _usage_error(self, ctx: click.Context, error: click.UsageError) -> NoReturn:
+        """With `--json`, a usage error in the error shape, exit 2; else Click's own."""
+        runtime = ctx.find_object(Runtime)
+        if not (runtime.json or "--json" in ctx.meta["argv"]):
+            raise error
+        emit_error(True, CliError("usage", error.format_message()))
+        ctx.exit(2)
+
+
+@click.group(cls=BrissotoPayGroup, invoke_without_command=True)
+@click.option("--json", "as_json", is_flag=True, help="Answer in JSON.")
+@click.option(
+    "--gateway",
+    type=click.Choice(list(GATEWAYS)),
+    envvar=GATEWAY_ENV,
+    default=PROD,
+    show_default=True,
+    help="Deployment: its Convex URL and dashboard.",
+)
+@click.option(
+    "--convex-url",
+    envvar=CONVEX_URL_ENV,
+    help="Convex URL, instead of the gateway's.",
+)
+@click.option(
+    "--web-url",
+    envvar=WEB_URL_ENV,
+    help="Dashboard that approves the sign-in, instead of the gateway's.",
+)
+@click.pass_context
+def cli(
+    ctx: click.Context,
+    as_json: bool,
+    gateway: str,
+    convex_url: str | None,
+    web_url: str | None,
+) -> None:
+    """Set apps up in the Brissoto Pay gateway. No command opens the REPL."""
+    runtime = ctx.ensure_object(Runtime)
+    runtime.json = as_json
+    default_convex_url, default_web_url = GATEWAYS[gateway]
+    runtime.convex_url = (convex_url or default_convex_url).strip().rstrip("/")
+    runtime.web_url = (web_url or default_web_url).strip().rstrip("/")
+    if ctx.invoked_subcommand is None and not runtime.in_repl:
+        run_repl(ctx, runtime)
+
+
+@cli.command()
+@json_option
+@pass_runtime
+def skill(runtime: Runtime) -> None:
+    """Print the skill that teaches a coding agent the setup flow."""
+    text = files(__package__).joinpath("skills/SKILL.md").read_text(encoding="utf-8")
+    emit(runtime.json, {"skill": text}, text.rstrip("\n"))
+
+
+CLI_PROVIDER = "cli"
+
+SIGN_IN_REFUSED = (
+    "The approval was refused: it expired, was used, or you are no longer an Admin."
+    " Run login again."
+)
+
+
+def _viewer(runtime: Runtime) -> dict:
+    viewer = runtime.client().query("users:viewer")
+    if not viewer:
+        raise signed_out()
+    return {
+        "email": viewer["email"],
+        "name": viewer["name"],
+        "gateway": runtime.convex_url,
+    }
+
+
+@cli.command()
+@json_option
+@pass_runtime
+def login(runtime: Runtime) -> None:
+    """Sign in: approve in the browser with your Admin account."""
+    state = new_secret()
+    verifier = new_secret()
+    url = sign_in_url(
+        runtime.web_url, state, pkce_challenge(verifier), runtime.hostname()
+    )
+
+    def open_page() -> None:
+        click.echo(f"Open this page to approve: {url}", err=True)
+        try:
+            runtime.open_browser(url)
+        except Exception:
+            pass
+
+    code = wait_for_code(runtime.callback_port, state, runtime.login_timeout, open_page)
+    gateway = runtime.gateway
+    gateway.set_auth(None)
+    result = gateway.action(
+        "auth:signIn",
+        {"provider": CLI_PROVIDER, "params": {"code": code, "codeVerifier": verifier}},
+    )
+    tokens = (result or {}).get("tokens")
+    if not tokens:
+        raise CliError("sign_in_refused", SIGN_IN_REFUSED)
+    runtime.store.put(runtime.convex_url, tokens["token"], tokens["refreshToken"])
+    viewer = _viewer(runtime)
+    emit(runtime.json, viewer, f"Signed in as {viewer['email']} on {viewer['gateway']}")
+
+
+@cli.command()
+@json_option
+@pass_runtime
+def logout(runtime: Runtime) -> None:
+    """Sign out: end this gateway's session and forget it."""
+    if runtime.store.get(runtime.convex_url) is not None:
+        try:
+            runtime.client().action("auth:signOut")
+        except CliError:
+            pass
+        runtime.store.drop(runtime.convex_url)
+    emit(
+        runtime.json,
+        {"signedOut": True, "gateway": runtime.convex_url},
+        f"Signed out of {runtime.convex_url}",
+    )
+
+
+@cli.command()
+@json_option
+@pass_runtime
+def whoami(runtime: Runtime) -> None:
+    """Say who is signed in, and on which gateway."""
+    viewer = _viewer(runtime)
+    emit(runtime.json, viewer, f"{viewer['email']} on {viewer['gateway']}")
+
+
+cli.add_command(apps)
+cli.add_command(servers)
+cli.add_command(methods)
+cli.add_command(webhooks)
+cli.add_command(payments)
+cli.add_command(go_live)
+
+
+def main() -> None:
+    cli(obj=Runtime())

cli_anything_brissoto_pay-1.0.0/cli_anything/brissoto_pay/commands/__init__.py

@@ -0,0 +1 @@
+"""The setup commands, one module per group."""

cli_anything_brissoto_pay-1.0.0/cli_anything/brissoto_pay/commands/apps.py

@@ -0,0 +1,144 @@
+"""`apps`: find the app this project belongs to, create it, brand it."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+import click
+
+from ..core.client import Client
+from ..core.config import ENVIRONMENTS, LIVE, TEST
+from ..core.errors import CliError
+from ..core.runtime import Runtime
+from ..utils.options import json_option, pass_runtime
+from ..utils.output import emit, server_lines
+
+
+@click.group()
+def apps() -> None:
+    """List, read, create and brand apps."""
+
+
+def _state(app: dict) -> str:
+    state = LIVE if app["live"] else TEST
+    return f"{state}, archived" if app["archived"] else state
+
+
+@apps.command("list")
+@json_option
+@pass_runtime
+def list_apps(runtime: Runtime) -> None:
+    """Every app, archived ones last."""
+    found = runtime.client().query("apps/queries:list")
+    lines = [f"{app['slug']}  {app['name']}  {_state(app)}" for app in found]
+    emit(runtime.json, found, "\n".join(lines) or "No app yet.")
+
+
+def app_detail(runtime: Runtime, slug: str) -> dict:
+    """The app with its Test and Live sides, or a `not_found` error."""
+    detail = runtime.client().query("apps/queries:get", {"slug": slug})
+    if detail is None:
+        raise CliError("not_found", f"No app {slug}. Run: apps list")
+    return detail
+
+
+@apps.command()
+@click.argument("slug")
+@json_option
+@pass_runtime
+def get(runtime: Runtime, slug: str) -> None:
+    """One app with its servers, URLs and key hints, in Test and Live."""
+    detail = app_detail(runtime, slug)
+    app = detail["app"]
+    lines = [
+        (
+            f"{app['name']} ({app['slug']}): {_state(app)},"
+            f" colour {app['color']}, language {app['defaultLanguage']}"
+        )
+    ]
+    for side in ENVIRONMENTS:
+        if detail[side]:
+            lines.append(f"{side.capitalize()}:")
+            for server in detail[side]["servers"]:
+                lines.extend(server_lines(server))
+    emit(runtime.json, detail, "\n".join(lines))
+
+
+LANGUAGE = click.Choice(["fr", "en"])
+LOGO = click.Path(dir_okay=False, path_type=Path)
+
+
+def upload_logo(client: Client, logo: Path) -> str:
+    """The logo file in Convex storage; returns its storage id."""
+    upload_url = client.mutation("apps/mutations:generateLogoUploadUrl")
+    return client.upload(upload_url, logo)
+
+
+@apps.command()
+@click.option("--name", required=True, help="As payers see it, e.g. Heyama.")
+@click.option("--color", required=True, help="Brand colour, e.g. #0F7B5F.")
+@click.option(
+    "--language", required=True, type=LANGUAGE, help="Checkout's default language."
+)
+@click.option("--logo", type=LOGO, help="Logo file, e.g. public/logo.png.")
+@json_option
+@pass_runtime
+def create(
+    runtime: Runtime, name: str, color: str, language: str, logo: Path | None
+) -> None:
+    """A new app, in Test with a Dev server and no key yet."""
+    client = runtime.client()
+    args = {"name": name.strip(), "color": color.strip(), "defaultLanguage": language}
+    if logo is not None:
+        args["logoId"] = upload_logo(client, logo)
+    slug = client.mutation("apps/mutations:create", args)["slug"]
+    emit(
+        runtime.json,
+        {"slug": slug},
+        f"Created {slug}, in Test with a Dev server and no key yet. Next: apps get {slug}",
+    )
+
+
+#: What `updateBranding` would clear if left out: sent back as they are.
+KEPT = ("termsUrl", "privacyUrl", "supportEmail", "supportWhatsapp")
+
+
+@apps.command()
+@click.argument("slug")
+@click.option("--name", help="As payers see it, e.g. Heyama.")
+@click.option("--color", help="Brand colour, e.g. #0F7B5F.")
+@click.option("--language", type=LANGUAGE, help="Checkout's default language.")
+@click.option("--logo", type=LOGO, help="Logo file, e.g. public/logo.png.")
+@json_option
+@pass_runtime
+def branding(
+    runtime: Runtime,
+    slug: str,
+    name: str | None,
+    color: str | None,
+    language: str | None,
+    logo: Path | None,
+) -> None:
+    """Change an app's name, colour, language or logo; the rest stays."""
+    if name is None and color is None and language is None and logo is None:
+        raise CliError(
+            "nothing_to_change",
+            "Give at least one of --name, --color, --language, --logo.",
+        )
+    client = runtime.client()
+    app = app_detail(runtime, slug)["app"]
+    args = {
+        "slug": slug,
+        "name": app["name"] if name is None else name.strip(),
+        "color": app["color"] if color is None else color.strip(),
+        "defaultLanguage": language or app["defaultLanguage"],
+        **{field: app[field] for field in KEPT if app[field] is not None},
+    }
+    if logo is not None:
+        args["logoId"] = upload_logo(client, logo)
+    client.mutation("apps/mutations:updateBranding", args)
+    emit(
+        runtime.json,
+        {"slug": slug, "updated": True},
+        f"Updated the branding of {slug}.",
+    )

cli_anything_brissoto_pay-1.0.0/cli_anything/brissoto_pay/commands/go_live.py

@@ -0,0 +1,75 @@
+"""`go-live`: the app takes real payments. Only after the Admin's yes."""
+
+from __future__ import annotations
+
+import click
+
+from ..core.config import LIVE
+from ..core.errors import CliError
+from ..core.runtime import Runtime
+from ..utils.options import json_option, pass_runtime
+from ..utils.output import emit
+from .apps import app_detail
+
+
+def production_server_id(detail: dict) -> str:
+    """The id of a live app's Production server."""
+    return detail[LIVE]["servers"][0]["id"]
+
+
+@click.command("go-live")
+@click.argument("slug")
+@click.option(
+    "--webhook-url",
+    help="Production webhook URL, e.g. https://heyama.com/api/webhooks.",
+)
+@click.option(
+    "--return-url",
+    "return_urls",
+    multiple=True,
+    help="Production return URL, e.g. https://heyama.com. Repeat for more.",
+)
+@click.option("--yes", is_flag=True, help="Go live: the Admin agreed.")
+@json_option
+@pass_runtime
+def go_live(
+    runtime: Runtime,
+    slug: str,
+    webhook_url: str | None,
+    return_urls: tuple[str, ...],
+    yes: bool,
+) -> None:
+    """Take a Test app live at its Production URLs. Needs --yes."""
+    detail = app_detail(runtime, slug)
+    if detail[LIVE]:
+        raise CliError(
+            "already_live",
+            f"{slug} is already live. Change its Production URLs with"
+            f" servers update {production_server_id(detail)}.",
+        )
+    webhook = webhook_url.strip() if webhook_url else None
+    returns = [url.strip() for url in return_urls]
+    args: dict = {"slug": slug, "returnUrls": returns}
+    if webhook:
+        args["webhookUrl"] = webhook
+    client = runtime.client()
+    if not yes:
+        # Every check of going live, nothing written: a refusal comes before the summary.
+        client.mutation("apps/mutations:goLive", {**args, "dryRun": True})
+        at = f"webhook URL {webhook}" if webhook else "no webhook URL"
+        raise CliError(
+            "confirmation_required",
+            f"Going live makes {slug} take real payments, with the methods and"
+            f" settings it has in Test, on a Production server with {at} and"
+            f" return URLs {', '.join(returns) or 'none'}. Its live API key and"
+            " webhook secret are shown once. Ask the Admin, then run again with --yes.",
+        )
+    secrets = client.mutation("apps/mutations:goLive", args)
+    server_id = production_server_id(app_detail(runtime, slug))
+    emit(
+        runtime.json,
+        {"slug": slug, "serverId": server_id, **secrets},
+        f"{slug} is live. Production server {server_id}, shown this once:\n"
+        f"API key: {secrets['apiKey']}\n"
+        f"Webhook secret: {secrets['webhookSecret']}",
+    )

cli_anything_brissoto_pay-1.0.0/cli_anything/brissoto_pay/commands/methods.py

@@ -0,0 +1,58 @@
+"""`methods`: the payment methods, and which ones an app offers."""
+
+from __future__ import annotations
+
+import click
+
+from ..core.config import TEST
+from ..core.runtime import Runtime
+from ..utils.options import environment_option, json_option, pass_runtime
+from ..utils.output import emit
+
+
+@click.group()
+def methods() -> None:
+    """List the payment methods; turn one on or off for an app."""
+
+
+@methods.command("list")
+@environment_option
+@click.option("--app", "slug", help="Say whether this app offers each, e.g. heyama.")
+@json_option
+@pass_runtime
+def list_methods(runtime: Runtime, environment: str, slug: str | None) -> None:
+    """Every method in checkout order, with its provider and status."""
+    found = runtime.client().query("methods/queries:list", {"environment": environment})
+    lines = []
+    for row in found:
+        served = "by " + row["servedBy"]["name"] if row["servedBy"] else "no provider"
+        line = (
+            f"{row['id']}  {row['name']}  {row['country']} {row['currency']}"
+            f"  {row['status']}, {served}"
+        )
+        if slug is not None:
+            row["on"] = slug not in row["offApps"]
+            line += f"  {'on' if row['on'] else 'off'} for {slug}"
+        lines.append(line)
+    emit(runtime.json, found, "\n".join(lines))
+
+
+@methods.command("set")
+@click.argument("slug")
+@click.argument("method")
+@click.option("--on/--off", "on", default=None, help="Offer it, or not.")
+@json_option
+@pass_runtime
+def set_method(runtime: Runtime, slug: str, method: str, on: bool | None) -> None:
+    """Let the app offer a method at checkout in Test, or not. Live follows at go live."""
+    if on is None:
+        raise click.UsageError("Give --on or --off.")
+    runtime.client().mutation(
+        "methods/mutations:setAppAccess",
+        {"method": method, "environment": TEST, "slug": slug, "enabled": on},
+    )
+    emit(
+        runtime.json,
+        {"slug": slug, "method": method, "environment": TEST, "on": on},
+        f"{method} is {'on' if on else 'off'} for {slug} in {TEST}.",
+    )