small-software 0.6.0__tar.gz → 0.7.0__tar.gz

{small_software-0.6.0 → small_software-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: small-software
-Version: 0.6.0
+Version: 0.7.0
 Summary: A cloud for small software: deploy team apps to Railway in one command, private by default, shared by work email
 Author: RuslanKazyradzi13
 License-Expression: MIT
@@ -70,8 +70,25 @@ From source, in a clone of the repository:
 pip install ./small-cli
 ```
 
-**Windows.** `pip install` creates `small.exe`, which Smart App Control / Application Control may block because it
-is unsigned. If that happens, either:
+**Windows (recommended): one command in PowerShell.**
+
+```powershell
+irm https://raw.githubusercontent.com/RuslanKazyradzi13/small-software/main/install.ps1 | iex
+```
+
+It installs small into its own Python environment in `%LOCALAPPDATA%\Programs\small` and adds a `small`
+command that Smart App Control does not block (there is no unsigned `small.exe`). Needs Python 3.9+, no admin
+rights; run it again to upgrade. Uninstall:
+
+```powershell
+& ([scriptblock]::Create((irm https://raw.githubusercontent.com/RuslanKazyradzi13/small-software/main/install.ps1))) -Uninstall
+```
+
+Values with `&` or `|` (URLs, for example) need PowerShell's stop-parsing token:
+`small --% env set "URL=https://x?a=1&b=2"`.
+
+**Windows with pip.** `pip install` creates `small.exe`, which Smart App Control / Application Control may
+block because it is unsigned. If that happens, either:
 
 - run small through Python, which works everywhere: `python -m small_cli deploy` (any command works this way);
 - or add the `small-cli` folder of a clone to `PATH`, and `small.cmd` will serve the `small` command. Run this in
@@ -154,12 +171,15 @@ The sample apps are in English: both the page text and the code comments.
   `small deploy` passes `ACCESS_TOKEN` from `small.json` to Railway. The app opens at
   `https://<domain>/?token=<ACCESS_TOKEN>`; without the token visitors get a 403 page with a **Request access**
   button. The server listens on `$HOST:$PORT`, by default `0.0.0.0` and the `PORT` set by Railway.
-- **The `streamlit` template.** Streamlit is not a WSGI app, so `magic_link.py` cannot wrap it. The same logic is
-  built into `app.py` as `require_access()`: the same `ACCESS_TOKEN` and `ACCESS_REQUEST_URL`, an "Invite only"
-  screen and a **Request access** form that writes an `[access-request]` line to the log. Like magic-link, the
-  access screen follows the visitor's browser language (`ACCESS_LANG` forces one). There are two differences.
-  Streamlit cannot set cookies, so the token stays in the address bar, which is how access survives a page reload.
-  And Streamlit is a single-page app, so the "no access" screen is served with HTTP 200, not 403.
+- **The `streamlit` template.** Streamlit can't be wrapped in middleware, so `require_access()` in `app.py` uses
+  `MagicLinkGate` from `magic_link.py`: the same variables (`ACCESS_EMAILS`, `ACCESS_TOKEN`, `SESSION_SECRET`,
+  `ACCESS_REQUEST_URL`...), one-time links, limits and logs as the other templates, and the access screen follows the
+  visitor's browser language. Differences:
+  - Sign-in by email: the link leads to `https://<domain>/?t=...` and shows a **Sign in** button; only the click
+    signs in. The 30-day session is a signed cookie written by a tiny same-origin frame, so unlike in the other
+    templates it is **not HttpOnly**: don't render untrusted HTML in a protected app. **Sign out** is in the sidebar.
+  - Personal links keep the token in the address bar (`?token=`), which is how they survive a page reload.
+  - Streamlit is a single-page app, so the "no access" screen is served with HTTP 200, not 403.
   Railway runs `python app.py`, and `app.py` restarts itself through `streamlit run` on `$HOST:$PORT`.
   Run it locally the same way: `python app.py`.
 - **Name.** By default, the folder name plus a random suffix, for example `my-service-3f9a`. An explicit name in
@@ -204,6 +224,12 @@ Buttons on the card of a deployed app:
   The token only goes to the browser's address bar on navigation; it is not in the dashboard page data.
 - **Logs** opens a window with the last 200 lines of the app or build log (tabs **App** / **Build**).
   Requires `RAILWAY_API_TOKEN`; without it the button is disabled.
+- **Share** opens who has access: work emails, whole domains and personal-link names (never the links
+  themselves). Type `ivan@company.com`, `@company.com` or a name and click **Add**, or click **Revoke** next to
+  anyone. It does exactly what `small access add` / `revoke` does: updates small.json and Railway and restarts
+  the app. A new personal link is shown only once, with a Copy button, and works like a password. Requires
+  `RAILWAY_API_TOKEN`. The page and its requests are protected: a per-run key, `Host`/`Origin` checks, no
+  framing, JSON only.
 
 - **Port** 3000 by default; if it is busy, any free port is used. The URL is printed to stdout.
 - **The server listens on `127.0.0.1` only** and answers 403 to requests with a foreign `Host` (DNS rebinding
@@ -247,6 +273,46 @@ $10 per GB of memory, $0.15 per GB of volume. The result reads "≈ $X/mo at cur
 - **This is an estimate, not a bill.** Egress ($0.05/GB), the plan's free allowance ($5 on Hobby, $20 on Pro) and
   the subscription are not included. The exact amount is in Railway → Usage.
 
+## `small mcp`: AI agents (Claude Code, Cursor...)
+
+```
+small mcp
+```
+
+Runs an [MCP](https://modelcontextprotocol.io) server on stdin/stdout, so an AI coding agent can create, deploy and
+share apps itself: *"Deploy this folder and give ivan@company.com access."*
+
+**Connect it:**
+- **Claude Code:** `claude mcp add small -- small mcp` (Windows: `claude mcp add small -- cmd /c small mcp`).
+- **Cursor** (`~/.cursor/mcp.json`), **Claude Desktop**, **Windsurf** and other clients:
+
+  ```json
+  {"mcpServers": {"small": {"command": "small", "args": ["mcp"]}}}
+  ```
+
+  On Windows use `"command": "cmd", "args": ["/c", "small", "mcp"]`, or `"command": "python", "args": ["-m",
+  "small_cli", "mcp"]` if small was installed with pip.
+- `RAILWAY_API_TOKEN` must be in the environment the agent starts from. After setting it, restart the agent.
+
+**Tools:**
+
+| Tool | What it does |
+|---|---|
+| `init_app` | `small init`: a ready app from a template |
+| `deploy_app` | `small deploy`: returns the URL; progress is streamed while it builds |
+| `share_app` | `small access add`: an email, `@domain` or a personal-link name |
+| `revoke_access` | `small access revoke` |
+| `list_access` | `small access list` |
+| `list_apps` | apps under a folder with URL and latest deploy status |
+| `app_logs` | `small logs`: app or build log |
+| `set_env` | `small env set` / `unset` |
+
+- **No delete tool:** `small destroy` stays a terminal command.
+- **Prefer emails.** A personal link (a name instead of an email) is returned to the agent, so it passes through the
+  chat like any other text; with email sign-in nothing secret does.
+- The tools run the same code as the commands and answer in small's language (`SMALL_LANG`). Your MCP client
+  normally asks you before each tool call.
+
 ## `small deploy`
 
 ```
@@ -315,8 +381,7 @@ then takes effect on the next deploy.
 - Someone who is not on the list and enters their email gets the same "Check your email" response, and the owner
   receives an access request (in the log, and in Telegram if connected) with a ready-made
   `small access add their@address` command.
-- Works in the `python-http`, `fastapi` and `node-http` templates. `streamlit` supports personal links only for
-  now.
+- Works in all templates: `python-http`, `fastapi`, `node-http` and `streamlit` (see the `streamlit` notes above).
 
 *By personal invite link*:
 - **`add bob`** creates a token, adds it to `ACCESS_TOKEN` as `bob:token`, restarts the app and prints the link.
@@ -501,8 +566,8 @@ The tests start a local mock of the Railway API (GraphQL + the upload endpoint)
 deploy, repeat deploy, failed build, crash, taken domain, several workspaces, wrong token, ignore rules.
 
 Template tests on real frameworks are skipped if the framework is not installed; the rest pass.
-- 6 `streamlit` tests: the access gate through `streamlit.testing.v1.AppTest` (with personal tokens) and the server
-  through `python app.py`.
+- `streamlit` tests: the access gate through `streamlit.testing.v1.AppTest` (personal tokens and sign-in by email:
+  form, one-time link, session cookie, revocation, sign out) and the server through `python app.py`.
 - 2 `fastapi` tests: `TestClient` and `uvicorn main:app` the way Railway runs it, plus a check that the token is
   hidden in the access log.
 

{small_software-0.6.0 → small_software-0.7.0}/README.md

@@ -42,8 +42,25 @@ From source, in a clone of the repository:
 pip install ./small-cli
 ```
 
-**Windows.** `pip install` creates `small.exe`, which Smart App Control / Application Control may block because it
-is unsigned. If that happens, either:
+**Windows (recommended): one command in PowerShell.**
+
+```powershell
+irm https://raw.githubusercontent.com/RuslanKazyradzi13/small-software/main/install.ps1 | iex
+```
+
+It installs small into its own Python environment in `%LOCALAPPDATA%\Programs\small` and adds a `small`
+command that Smart App Control does not block (there is no unsigned `small.exe`). Needs Python 3.9+, no admin
+rights; run it again to upgrade. Uninstall:
+
+```powershell
+& ([scriptblock]::Create((irm https://raw.githubusercontent.com/RuslanKazyradzi13/small-software/main/install.ps1))) -Uninstall
+```
+
+Values with `&` or `|` (URLs, for example) need PowerShell's stop-parsing token:
+`small --% env set "URL=https://x?a=1&b=2"`.
+
+**Windows with pip.** `pip install` creates `small.exe`, which Smart App Control / Application Control may
+block because it is unsigned. If that happens, either:
 
 - run small through Python, which works everywhere: `python -m small_cli deploy` (any command works this way);
 - or add the `small-cli` folder of a clone to `PATH`, and `small.cmd` will serve the `small` command. Run this in
@@ -126,12 +143,15 @@ The sample apps are in English: both the page text and the code comments.
   `small deploy` passes `ACCESS_TOKEN` from `small.json` to Railway. The app opens at
   `https://<domain>/?token=<ACCESS_TOKEN>`; without the token visitors get a 403 page with a **Request access**
   button. The server listens on `$HOST:$PORT`, by default `0.0.0.0` and the `PORT` set by Railway.
-- **The `streamlit` template.** Streamlit is not a WSGI app, so `magic_link.py` cannot wrap it. The same logic is
-  built into `app.py` as `require_access()`: the same `ACCESS_TOKEN` and `ACCESS_REQUEST_URL`, an "Invite only"
-  screen and a **Request access** form that writes an `[access-request]` line to the log. Like magic-link, the
-  access screen follows the visitor's browser language (`ACCESS_LANG` forces one). There are two differences.
-  Streamlit cannot set cookies, so the token stays in the address bar, which is how access survives a page reload.
-  And Streamlit is a single-page app, so the "no access" screen is served with HTTP 200, not 403.
+- **The `streamlit` template.** Streamlit can't be wrapped in middleware, so `require_access()` in `app.py` uses
+  `MagicLinkGate` from `magic_link.py`: the same variables (`ACCESS_EMAILS`, `ACCESS_TOKEN`, `SESSION_SECRET`,
+  `ACCESS_REQUEST_URL`...), one-time links, limits and logs as the other templates, and the access screen follows the
+  visitor's browser language. Differences:
+  - Sign-in by email: the link leads to `https://<domain>/?t=...` and shows a **Sign in** button; only the click
+    signs in. The 30-day session is a signed cookie written by a tiny same-origin frame, so unlike in the other
+    templates it is **not HttpOnly**: don't render untrusted HTML in a protected app. **Sign out** is in the sidebar.
+  - Personal links keep the token in the address bar (`?token=`), which is how they survive a page reload.
+  - Streamlit is a single-page app, so the "no access" screen is served with HTTP 200, not 403.
   Railway runs `python app.py`, and `app.py` restarts itself through `streamlit run` on `$HOST:$PORT`.
   Run it locally the same way: `python app.py`.
 - **Name.** By default, the folder name plus a random suffix, for example `my-service-3f9a`. An explicit name in
@@ -176,6 +196,12 @@ Buttons on the card of a deployed app:
   The token only goes to the browser's address bar on navigation; it is not in the dashboard page data.
 - **Logs** opens a window with the last 200 lines of the app or build log (tabs **App** / **Build**).
   Requires `RAILWAY_API_TOKEN`; without it the button is disabled.
+- **Share** opens who has access: work emails, whole domains and personal-link names (never the links
+  themselves). Type `ivan@company.com`, `@company.com` or a name and click **Add**, or click **Revoke** next to
+  anyone. It does exactly what `small access add` / `revoke` does: updates small.json and Railway and restarts
+  the app. A new personal link is shown only once, with a Copy button, and works like a password. Requires
+  `RAILWAY_API_TOKEN`. The page and its requests are protected: a per-run key, `Host`/`Origin` checks, no
+  framing, JSON only.
 
 - **Port** 3000 by default; if it is busy, any free port is used. The URL is printed to stdout.
 - **The server listens on `127.0.0.1` only** and answers 403 to requests with a foreign `Host` (DNS rebinding
@@ -219,6 +245,46 @@ $10 per GB of memory, $0.15 per GB of volume. The result reads "≈ $X/mo at cur
 - **This is an estimate, not a bill.** Egress ($0.05/GB), the plan's free allowance ($5 on Hobby, $20 on Pro) and
   the subscription are not included. The exact amount is in Railway → Usage.
 
+## `small mcp`: AI agents (Claude Code, Cursor...)
+
+```
+small mcp
+```
+
+Runs an [MCP](https://modelcontextprotocol.io) server on stdin/stdout, so an AI coding agent can create, deploy and
+share apps itself: *"Deploy this folder and give ivan@company.com access."*
+
+**Connect it:**
+- **Claude Code:** `claude mcp add small -- small mcp` (Windows: `claude mcp add small -- cmd /c small mcp`).
+- **Cursor** (`~/.cursor/mcp.json`), **Claude Desktop**, **Windsurf** and other clients:
+
+  ```json
+  {"mcpServers": {"small": {"command": "small", "args": ["mcp"]}}}
+  ```
+
+  On Windows use `"command": "cmd", "args": ["/c", "small", "mcp"]`, or `"command": "python", "args": ["-m",
+  "small_cli", "mcp"]` if small was installed with pip.
+- `RAILWAY_API_TOKEN` must be in the environment the agent starts from. After setting it, restart the agent.
+
+**Tools:**
+
+| Tool | What it does |
+|---|---|
+| `init_app` | `small init`: a ready app from a template |
+| `deploy_app` | `small deploy`: returns the URL; progress is streamed while it builds |
+| `share_app` | `small access add`: an email, `@domain` or a personal-link name |
+| `revoke_access` | `small access revoke` |
+| `list_access` | `small access list` |
+| `list_apps` | apps under a folder with URL and latest deploy status |
+| `app_logs` | `small logs`: app or build log |
+| `set_env` | `small env set` / `unset` |
+
+- **No delete tool:** `small destroy` stays a terminal command.
+- **Prefer emails.** A personal link (a name instead of an email) is returned to the agent, so it passes through the
+  chat like any other text; with email sign-in nothing secret does.
+- The tools run the same code as the commands and answer in small's language (`SMALL_LANG`). Your MCP client
+  normally asks you before each tool call.
+
 ## `small deploy`
 
 ```
@@ -287,8 +353,7 @@ then takes effect on the next deploy.
 - Someone who is not on the list and enters their email gets the same "Check your email" response, and the owner
   receives an access request (in the log, and in Telegram if connected) with a ready-made
   `small access add their@address` command.
-- Works in the `python-http`, `fastapi` and `node-http` templates. `streamlit` supports personal links only for
-  now.
+- Works in all templates: `python-http`, `fastapi`, `node-http` and `streamlit` (see the `streamlit` notes above).
 
 *By personal invite link*:
 - **`add bob`** creates a token, adds it to `ACCESS_TOKEN` as `bob:token`, restarts the app and prints the link.
@@ -473,8 +538,8 @@ The tests start a local mock of the Railway API (GraphQL + the upload endpoint)
 deploy, repeat deploy, failed build, crash, taken domain, several workspaces, wrong token, ignore rules.
 
 Template tests on real frameworks are skipped if the framework is not installed; the rest pass.
-- 6 `streamlit` tests: the access gate through `streamlit.testing.v1.AppTest` (with personal tokens) and the server
-  through `python app.py`.
+- `streamlit` tests: the access gate through `streamlit.testing.v1.AppTest` (personal tokens and sign-in by email:
+  form, one-time link, session cookie, revocation, sign out) and the server through `python app.py`.
 - 2 `fastapi` tests: `TestClient` and `uvicorn main:app` the way Railway runs it, plus a check that the token is
   hidden in the access log.
 

{small_software-0.6.0 → small_software-0.7.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "small-software"
-version = "0.6.0"
+version = "0.7.0"
 description = "A cloud for small software: deploy team apps to Railway in one command, private by default, shared by work email"
 license = "MIT"
 license-files = ["LICENSE"]

small_software-0.7.0/small_cli/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.7.0"

{small_software-0.6.0 → small_software-0.7.0}/small_cli/access.py

@@ -1,7 +1,8 @@
-"""Доступ к приложению: ACCESS_TOKEN (ссылки-приглашения "имя:токен,…") и ACCESS_EMAILS (вход по почте).
+"""App access: ACCESS_TOKEN (invite links "name:token,…") and ACCESS_EMAILS (sign-in by email).
 
-Тот же формат понимают magic_link.py, magic-link.js и шаблон streamlit: убрали чей-то токен — его ссылка
-и куки перестают работать, у остальных всё остаётся. Убрали адрес из ACCESS_EMAILS — вход по нему закрыт сразу.
+magic_link.py, magic-link.js and the streamlit template understand the same format: remove someone's token and
+their link and cookie stop working, while everyone else keeps access. Remove an address from ACCESS_EMAILS and
+sign-in with it is closed at once.
 """
 
 import re
@@ -38,12 +39,12 @@ def new_token():
 
 
 def is_email(value):
-    """Адрес почты или целый домен "@company.com"."""
+    """An email address or a whole domain "@company.com"."""
     return bool(EMAIL_RE.match(value) or DOMAIN_RE.match(value))
 
 
 def parse_emails(value):
-    """"Ivan@Company.com, @team.com" -> ["ivan@company.com", "@team.com"]: без регистра, повторов и мусора."""
+    """"Ivan@Company.com, @team.com" -> ["ivan@company.com", "@team.com"]: lowercased, without duplicates or junk."""
     found = []
     for item in (value or "").split(","):
         item = item.strip().lower()
@@ -53,7 +54,7 @@ def parse_emails(value):
 
 
 def app_env(root, state, warn=None):
-    """(переменные приложения, откуда каждая): Railway, поверх — непустые значения из small.json."""
+    """(app variables, where each one comes from): Railway, overlaid with non-empty values from small.json."""
     env, sources = {}, {}
     linked = all(state.get(k) for k in ("projectId", "environmentId", "serviceId"))
     if linked and token_from_env():
@@ -72,7 +73,7 @@ def app_env(root, state, warn=None):
 
 
 def current(root, state, warn=None):
-    """(записи ACCESS_TOKEN, откуда): из small.json, иначе из переменных сервиса в Railway, иначе ([], None)."""
+    """(ACCESS_TOKEN entries, source): from small.json, else from the service variables in Railway, else ([], None)."""
     raw = load_config(root / CONFIG_FILE)["env"].get("ACCESS_TOKEN")
     if raw:
         return parse(raw), CONFIG_FILE
@@ -83,7 +84,7 @@ def current(root, state, warn=None):
 
 
 def pick(entries, name=None):
-    """Токен человека name; без имени — первый (владельца). None, если такого нет."""
+    """The token of the person `name`; without a name, the first one (the owner's). None if there is no such entry."""
     if name is None:
         return entries[0][1] if entries else None
     return next((token for who, token in entries if who == name), None)
@@ -95,20 +96,32 @@ def invite_link(domain, token):
 
 
 def email_login_problem(root):
-    """None — код приложения умеет вход по почте; иначе — что мешает и как исправить."""
-    for name, template in (("magic_link.py", "python-http"), ("magic-link.js", "node-http")):
+    """None if the app code supports sign-in by email; otherwise, what is in the way and how to fix it.
+
+    Streamlit cannot be wrapped in middleware: there sign-in by email is done by require_access() in app.py via
+    MagicLinkGate from magic_link.py, so new versions of both files are needed."""
+    app = root / "app.py"
+    source = app.read_text(encoding="utf-8", errors="replace") if app.is_file() else ""
+    streamlit = "streamlit" in source
+    if streamlit and "MagicLinkGate" not in source:
+        return (tr("app.py is from an old streamlit template without sign-in by email. Take require_access() from "
+                   "the new app.py, and magic_link.py next to it: %s (or grant a personal link: small access add NAME)",
+                   "app.py — из старого шаблона streamlit, без входа по почте. Возьмите require_access() из нового "
+                   "app.py и magic_link.py рядом с ним: %s (или выдайте личную ссылку: small access add ИМЯ)")
+                % (TEMPLATES_DIR / "streamlit"))
+    for name, template in (("magic_link.py", "streamlit" if streamlit else "python-http"),
+                           ("magic-link.js", "node-http")):
         path = root / name
         if path.is_file():
-            if "ACCESS_EMAILS" in path.read_text(encoding="utf-8", errors="replace"):
+            text = path.read_text(encoding="utf-8", errors="replace")
+            if "ACCESS_EMAILS" in text and (not streamlit or "MagicLinkGate" in text):
                 return None
             return (tr("%s in the app is an old version and does not support sign-in by email. "
                        "Replace it with the new one: %s",
                        "%s в приложении старой версии и не знает входа по почте. Замените его новым: %s")
                     % (name, TEMPLATES_DIR / template / name))
-    app = root / "app.py"
-    if app.is_file() and "streamlit" in app.read_text(encoding="utf-8", errors="replace"):
-        return tr("the streamlit template does not support sign-in by email yet — "
-                  "grant a personal link instead: small access add NAME",
-                  "в шаблоне streamlit вход по почте пока не поддерживается — "
-                  "выдайте личную ссылку: small access add ИМЯ")
+    if streamlit:
+        return (tr("magic_link.py is missing next to app.py. Copy it from the template: %s",
+                   "рядом с app.py нет magic_link.py. Скопируйте его из шаблона: %s")
+                % (TEMPLATES_DIR / "streamlit" / "magic_link.py"))
     return None

{small_software-0.6.0 → small_software-0.7.0}/small_cli/archive.py

@@ -1,19 +1,19 @@
-"""Сбор файлов проекта с учётом .gitignore/.railwayignore и упаковка в .tar.gz для Railway."""
+"""Collecting project files with .gitignore/.railwayignore applied, and packing them into a .tar.gz for Railway."""
 
 import io
 import os
 import re
 import tarfile
 
-# Никогда не загружаются, даже без .gitignore.
+# Never uploaded, even without a .gitignore.
 ALWAYS_IGNORED = {".git", "node_modules", "__pycache__", ".venv", "venv"}
 IGNORE_FILES = (".gitignore", ".railwayignore")
 
 
 class IgnoreRules:
-    """Подмножество синтаксиса .gitignore: *, **, ?, [...], !отрицание, /якорь, хвостовой / для папок.
+    """A subset of .gitignore syntax: *, **, ?, [...], !negation, /anchor, trailing / for folders.
 
-    Читаются только файлы в корне проекта; вложенные .gitignore не учитываются.
+    Only the files in the project root are read; nested .gitignore files are not taken into account.
     """
 
     def __init__(self, lines):
@@ -90,9 +90,9 @@ def _translate(pattern):
 
 
 def collect_files(root, skip_root_files=()):
-    """Относительные пути (через /) всех файлов, которые уйдут в Railway.
+    """Relative paths (with /) of all files that will go to Railway.
 
-    skip_root_files — имена файлов, которые не загружаются, только если лежат в корне (служебные файлы CLI).
+    skip_root_files: names of files that are not uploaded, but only when they are in the root (the CLI's own files).
     """
     rules = IgnoreRules.load(root)
     files = []

{small_software-0.6.0 → small_software-0.7.0}/small_cli/cli.py

@@ -1,7 +1,7 @@
-"""small — микро-приложения на Railway одной командой.
+"""small: micro-apps on Railway with one command.
 
-Точка входа: разбор аргументов и обработка ошибок. Сами команды — в small_cli/commands/,
-общие помощники — в small_cli/common.py.
+Entry point: argument parsing and error handling. The commands themselves live in small_cli/commands/,
+shared helpers in small_cli/common.py.
 """
 
 import argparse
@@ -31,9 +31,10 @@ def main(argv=None):
 
 
 def setup_streams():
-    """В терминал Python пишет Unicode сам. Вывод в канал или файл (`small logs | Select-String вход`) он кодирует
-    в ANSI (cp1251), а PowerShell читает его в кодировке консоли (866 или UTF-8): кириллица превращается в мусор,
-    и поиск по ней ничего не находит. Поэтому в канал пишем в кодировке, которой его прочитают."""
+    """Python writes Unicode to a terminal on its own. Output to a pipe or file
+    (`small logs | Select-String <Cyrillic word>`) it encodes as ANSI (cp1251), while PowerShell reads it in the
+    console encoding (866 or UTF-8): Cyrillic turns into garbage and searching for it finds nothing. So for a pipe
+    we write in the encoding it will be read with."""
     encoding = pipe_encoding()
     for stream in (sys.stdout, sys.stderr):
         if not hasattr(stream, "reconfigure"):
@@ -45,8 +46,8 @@ def setup_streams():
 
 
 def pipe_encoding():
-    """Кодировка для вывода в канал: PYTHONIOENCODING, если задана (small.cmd запускает `python -I`, и сам Python
-    её не читает), иначе на Windows — кодировка консоли. None — оставить как есть."""
+    """Encoding for output to a pipe: PYTHONIOENCODING if set (small.cmd runs `python -I`, so Python itself
+    does not read it), otherwise on Windows the console encoding. None means leave it as is."""
     explicit = os.environ.get("PYTHONIOENCODING", "").split(":")[0]
     if explicit:
         try:
@@ -55,7 +56,7 @@ def pipe_encoding():
             return None
     if sys.platform != "win32":
         return None
-    codepage = _console_codepage()  # 0 — у процесса нет консоли
+    codepage = _console_codepage()  # 0: the process has no console
     return "utf-8" if codepage == 65001 else "cp%d" % codepage if codepage else None
 
 

small_software-0.7.0/small_cli/commands/__init__.py

@@ -0,0 +1,8 @@
+"""small commands. Each module adds its subcommands with a register(subparsers) function.
+
+The order here is the order in `small --help`: from creating an app to deleting it.
+"""
+
+from . import access, dashboard, db, deploy, destroy, domain, env, init, link, logs, mail, mcp, notify, sleep
+
+ALL = (init, deploy, link, access, mail, notify, env, db, domain, sleep, logs, dashboard, mcp, destroy)