Add affiliate: a cursor over a list of signup pages

[ralyodio]

Point it at any text file with links in it. It walks them one at a time, remembers which you have dealt with, and keeps the referral link each one hands back.

affiliate list --file programs.md
affiliate next --open
affiliate join elevenlabs https://try.elevenlabs.io/abc123
affiliate links --format markdown

Nothing in it knows what an affiliate program is — the list is the input, so it works for any batch of signup pages.

Parsing

A bare column of URLs, a markdown table, a bullet list, a CSV. Rather than asking which format it is, it takes the first URL on the line and works the name out from context: the bracketed text of a markdown link, the first cell of a table row, or the host when there is nothing else. A line with no URL is a heading, not an error.

The URL pattern deliberately does not treat ) as a terminator. Doing so truncates any path containing a bracket (/wiki_(disambiguation)); it over-matches and balances back instead, which handles that and markdown links with the same code.

The parts worth reviewing

• utm_* collapses to one entry. The same page shared from a newsletter and from a tweet would otherwise ask you to sign up twice.
• A joined entry survives being dropped from the list — it moves to the end rather than disappearing. Losing a referral link because somebody tidied the source file would be the worst thing this could do.
• A recorded referral link survives a later status change, so skip typed at the wrong index is not unrecoverable.
• Contact address resolves --email → $AFFILIATE_EMAIL → profile file → moshcode whoami. The account is last because it is the one you cannot override in the moment, and signing up as the wrong identity does not undo.
• answers prints gaps as (not set) rather than inventing them. A form that asks for audience size and receives an unchecked number is the fastest way to lose the account it was meant to open.
• ListError vs UsageError so a bad index exits 1 ("you typed it wrong") and 2 stays "this broke".

It does not submit anything

Signing up accepts terms and hands over payout identity as a named person, and every one of these is behind an email-verification loop regardless — a form-filler would stop at the same wall with one more moving part. Opening the next page, having the answers ready to paste, and keeping the links in one place is the part that was actually tedious.

Verification

• 253 tests pass (29 new), pnpm typecheck clean.
• Exercised end to end against a real markdown list: parsed 9 entries out of a document (tables, bullets and prose links), joined one with a link, emitted markdown, and resolved the contact email from moshcode whoami.

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

6 finding(s)

MEDIUM: 1 | LOW: 5

Severity	Rule	Location
MEDIUM	redos-nested-quantifier	src/domain-free.ts:56
LOW	insecure-temp-file	test/blog.test.ts:73
LOW	insecure-temp-file	test/blog.test.ts:74
LOW	insecure-temp-file	test/credentials.test.ts:43
LOW	insecure-temp-file	test/credentials.test.ts:44
LOW	secret-generic-api-key	test/credentials.test.ts:208

Snippets are redacted; ThreatCrush never prints matched credential material.