@blockyfy/stg-cli 0.4.1 → 0.4.3

package/dist/index.js

@@ -5,7 +5,7 @@ import { Command } from "commander";
 import chalk9 from "chalk";
 import {
   readFileSync as readFileSync7,
-  existsSync as existsSync7,
+  existsSync as existsSync8,
   readdirSync,
   statSync,
   openSync,
@@ -13,7 +13,7 @@ import {
   closeSync
 } from "fs";
 import { readFile, stat as fsStat, open as fsOpen } from "fs/promises";
-import { resolve as resolve2, extname, join as join5, basename } from "path";
+import { resolve as resolve2, extname, join as join6, basename } from "path";
 import os from "os";
 
 // src/types.ts
@@ -31,7 +31,7 @@ var DEFAULT_CONFIG = {
     { tokenType: "Property" /* Property */, prefix: "_prop" },
     { tokenType: "Method" /* Method */, prefix: "_fn" }
   ],
-  storePath: `${process.env["HOME"] ?? "/tmp"}/.pretense`
+  storePath: `${process.env["HOME"] ?? "/tmp"}/.pretest`
 };
 
 // src/scanner.ts
@@ -866,20 +866,50 @@ function scan(code, language) {
 }
 
 // src/salt.ts
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
-import { join } from "path";
+import { readFileSync, writeFileSync, mkdirSync, existsSync as existsSync2, renameSync as renameSync2 } from "fs";
+import { join as join2 } from "path";
 import { homedir } from "os";
 import { randomBytes } from "crypto";
+
+// src/config-dir.ts
+import { existsSync, renameSync } from "fs";
+import { join } from "path";
+var PROJECT_CONFIG_DIR_NAME = ".pretest";
+var LEGACY_PROJECT_CONFIG_DIR_NAME = ".pretense";
+function migrateLegacyProjectConfigDir(parentDir) {
+  const next = join(parentDir, PROJECT_CONFIG_DIR_NAME);
+  const prev = join(parentDir, LEGACY_PROJECT_CONFIG_DIR_NAME);
+  if (existsSync(next)) return;
+  if (!existsSync(prev)) return;
+  try {
+    renameSync(prev, next);
+  } catch {
+  }
+}
+
+// src/salt.ts
 var SALT_BYTES = 32;
 function getSaltPath() {
-  const dir = join(homedir(), ".pretense");
-  return { dir, path: join(dir, "mutation.salt") };
+  const home = homedir();
+  migrateLegacyProjectConfigDir(home);
+  const dir = join2(home, PROJECT_CONFIG_DIR_NAME);
+  const legacyDir = join2(home, LEGACY_PROJECT_CONFIG_DIR_NAME);
+  const path = join2(dir, "mutation.salt");
+  const legacySalt = join2(legacyDir, "mutation.salt");
+  if (!existsSync2(path) && existsSync2(legacySalt)) {
+    try {
+      if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
+      renameSync2(legacySalt, path);
+    } catch {
+    }
+  }
+  return { dir, path };
 }
 var _cachedSalt = null;
 function getMutationSalt() {
   if (_cachedSalt) return _cachedSalt;
   const { dir, path } = getSaltPath();
-  if (existsSync(path)) {
+  if (existsSync2(path)) {
     try {
       const raw = readFileSync(path, "utf-8").trim();
       if (/^[0-9a-f]{64}$/i.test(raw)) {
@@ -901,6 +931,12 @@ function getMutationSalt() {
 function buildSaltedSeed(baseSeed) {
   return `${baseSeed}:${getMutationSalt()}`;
 }
+function effectiveSeedForMutation(userSeed) {
+  if (userSeed === "pretense" || userSeed === "pretest") {
+    return buildSaltedSeed("pretense");
+  }
+  return userSeed;
+}
 
 // src/deterministic-id.ts
 function hash32(str) {
@@ -944,7 +980,7 @@ function prefixForType(type) {
       return "_tok";
   }
 }
-function mutate(code, language, seed = "pretense") {
+function mutate(code, language, seed = "pretest") {
   const startMs = performance.now();
   const lang = language ?? detectLanguage(code);
   if (!code || !code.trim()) {
@@ -955,7 +991,7 @@ function mutate(code, language, seed = "pretense") {
       stats: { tokensScanned: 0, tokensMutated: 0, durationMs: 0, language: lang }
     };
   }
-  const effectiveSeed = seed === "pretense" ? buildSaltedSeed(seed) : seed;
+  const effectiveSeed = effectiveSeedForMutation(seed);
   const { tokens } = scan(code, lang);
   const map = /* @__PURE__ */ new Map();
   for (const token of tokens) {
@@ -1044,7 +1080,7 @@ function reverse(mutatedCode, map, secretsMap) {
 // src/secrets.ts
 var SECRET_PATTERNS = [
   { name: "anthropic-api-key", category: "secret", severity: "critical", defaultAction: "block", pattern: /sk-ant-api\d{2}-[A-Za-z0-9_-]{40,}/g },
-  /** Legacy `sk-…` and modern `sk-proj-…` (hyphenated body); aligned with @pretense/scanner */
+  /** Legacy `sk-…` and modern `sk-proj-…` (hyphenated body); aligned with upstream scanner heuristics */
   { name: "openai-api-key", category: "secret", severity: "critical", defaultAction: "block", pattern: /sk-(?:proj-)?[A-Za-z0-9_-]{20,}/g },
   { name: "aws-access-key", category: "secret", severity: "critical", defaultAction: "block", pattern: /AKIA[0-9A-Z]{16}/g },
   /** `AWS_SECRET = '…40 chars…'` (not `AWS_SECRET_ACCESS_KEY`, which is covered below). */
@@ -1307,7 +1343,7 @@ function applyRedactionsTracked(text, matches, mutationSeed = buildSaltedSeed("p
 }
 
 // src/store.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2 } from "fs";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync3 } from "fs";
 import { dirname } from "path";
 var MutationStore = class {
   entries = /* @__PURE__ */ new Map();
@@ -1372,7 +1408,7 @@ var MutationStore = class {
    */
   persist() {
     const dir = dirname(this.filePath);
-    if (!existsSync2(dir)) {
+    if (!existsSync3(dir)) {
       mkdirSync2(dir, { recursive: true });
     }
     const data = JSON.stringify([...this.entries.values()], null, 2);
@@ -1383,7 +1419,7 @@ var MutationStore = class {
    * No-ops if the file doesn't exist.
    */
   load() {
-    if (!existsSync2(this.filePath)) return;
+    if (!existsSync3(this.filePath)) return;
     try {
       const raw = readFileSync2(this.filePath, "utf-8");
       const parsed = JSON.parse(raw);
@@ -1418,41 +1454,42 @@ var MutationStore = class {
 };
 
 // src/config.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join2, resolve } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join3, resolve } from "path";
 import { createHmac } from "crypto";
-var CONFIG_DIR_NAME = ".pretense";
+var CONFIG_DIR_NAME = PROJECT_CONFIG_DIR_NAME;
 var CONFIG_FILE = "config.json";
 var MUTATION_MAP_FILE = "mutation-map.json";
 var AUDIT_LOG_FILE = "audit.log";
 var USAGE_FILE = "usage.json";
 function getConfigDir(baseDir) {
   const base = baseDir ?? process.cwd();
+  migrateLegacyProjectConfigDir(base);
   return resolve(base, CONFIG_DIR_NAME);
 }
 function initConfig(dir) {
   const configDir = getConfigDir(dir);
-  if (!existsSync3(configDir)) {
+  if (!existsSync4(configDir)) {
     mkdirSync3(configDir, { recursive: true });
   }
-  const configPath = join2(configDir, CONFIG_FILE);
-  if (!existsSync3(configPath)) {
+  const configPath = join3(configDir, CONFIG_FILE);
+  if (!existsSync4(configPath)) {
     const config = {
       ...DEFAULT_CONFIG,
       storePath: configDir
     };
     writeFileSync3(configPath, JSON.stringify(config, null, 2), "utf-8");
   }
-  const mapPath = join2(configDir, MUTATION_MAP_FILE);
-  if (!existsSync3(mapPath)) {
+  const mapPath = join3(configDir, MUTATION_MAP_FILE);
+  if (!existsSync4(mapPath)) {
     writeFileSync3(mapPath, "[]", "utf-8");
   }
-  const auditPath = join2(configDir, AUDIT_LOG_FILE);
-  if (!existsSync3(auditPath)) {
+  const auditPath = join3(configDir, AUDIT_LOG_FILE);
+  if (!existsSync4(auditPath)) {
     writeFileSync3(auditPath, "", "utf-8");
   }
-  const usagePath = join2(configDir, USAGE_FILE);
-  if (!existsSync3(usagePath)) {
+  const usagePath = join3(configDir, USAGE_FILE);
+  if (!existsSync4(usagePath)) {
     const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
     const month = today.slice(0, 7);
     const usageData = { month, mutations: 0, firstUseDate: today };
@@ -1466,8 +1503,8 @@ function initConfig(dir) {
 }
 function loadConfig(dir) {
   const configDir = getConfigDir(dir);
-  const configPath = join2(configDir, CONFIG_FILE);
-  if (!existsSync3(configPath)) {
+  const configPath = join3(configDir, CONFIG_FILE);
+  if (!existsSync4(configPath)) {
     return { ...DEFAULT_CONFIG };
   }
   try {
@@ -1480,7 +1517,7 @@ function loadConfig(dir) {
 }
 var USAGE_HMAC_SECRET = "pretense_usage_integrity_v1";
 function getUsageSecret() {
-  return process.env["PRETENSE_USAGE_SECRET"] ?? USAGE_HMAC_SECRET;
+  return process.env["PRETEST_USAGE_SECRET"]?.trim() || process.env["PRETENSE_USAGE_SECRET"]?.trim() || USAGE_HMAC_SECRET;
 }
 function computeUsageChecksum(data) {
   const payload = JSON.stringify({ month: data.month, mutations: data.mutations, firstUseDate: data.firstUseDate });
@@ -1492,10 +1529,10 @@ function verifyUsageChecksum(data) {
 }
 function loadUsage(dir) {
   const configDir = getConfigDir(dir);
-  const usagePath = join2(configDir, USAGE_FILE);
+  const usagePath = join3(configDir, USAGE_FILE);
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const currentMonth = today.slice(0, 7);
-  if (!existsSync3(usagePath)) {
+  if (!existsSync4(usagePath)) {
     return { month: currentMonth, mutations: 0, firstUseDate: today };
   }
   try {
@@ -1506,7 +1543,7 @@ function loadUsage(dir) {
       return { month: currentMonth, mutations: 0, firstUseDate: data.firstUseDate ?? legacyDate };
     }
     if (!verifyUsageChecksum({ month: data.month, mutations: data.mutations, firstUseDate: data.firstUseDate, checksum: data.checksum })) {
-      process.stderr.write("[PRETENSE] Warning: usage.json integrity check failed. Resetting usage counter.\n");
+      process.stderr.write("[PRETEST] Warning: usage.json integrity check failed. Resetting usage counter.\n");
       return { month: currentMonth, mutations: 0, firstUseDate: data.firstUseDate ?? today };
     }
     if (data.month !== currentMonth) {
@@ -1519,10 +1556,10 @@ function loadUsage(dir) {
 }
 function saveUsage(usage, dir) {
   const configDir = getConfigDir(dir);
-  if (!existsSync3(configDir)) {
+  if (!existsSync4(configDir)) {
     mkdirSync3(configDir, { recursive: true });
   }
-  const usagePath = join2(configDir, USAGE_FILE);
+  const usagePath = join3(configDir, USAGE_FILE);
   const checksum = computeUsageChecksum(usage);
   writeFileSync3(usagePath, JSON.stringify({ ...usage, checksum }, null, 2), "utf-8");
 }
@@ -1531,7 +1568,7 @@ var LICENSE_PAYLOAD_REGEX = /^[a-zA-Z0-9]+$/;
 function isValidLicenseKey(key, prefix) {
   if (key.length < MIN_LICENSE_KEY_LENGTH) return false;
   const afterPrefix = key.slice(prefix.length);
-  const hmacSecret = process.env["PRETENSE_LICENSE_SECRET"];
+  const hmacSecret = process.env["PRETEST_LICENSE_SECRET"]?.trim() || process.env["PRETENSE_LICENSE_SECRET"]?.trim();
   if (hmacSecret) {
     const lastUnderscore = afterPrefix.lastIndexOf("_");
     if (lastUnderscore === -1) return false;
@@ -1545,7 +1582,7 @@ function isValidLicenseKey(key, prefix) {
   return LICENSE_PAYLOAD_REGEX.test(afterPrefix);
 }
 function detectTier() {
-  const key = process.env["PRETENSE_LICENSE_KEY"] ?? "";
+  const key = process.env["PRETEST_LICENSE_KEY"]?.trim() || process.env["PRETENSE_LICENSE_KEY"]?.trim() || "";
   if (key.startsWith("pre_ent_") && isValidLicenseKey(key, "pre_ent_")) return "enterprise";
   if (key.startsWith("pre_pro_") && isValidLicenseKey(key, "pre_pro_")) return "pro";
   return "free";
@@ -1568,13 +1605,13 @@ function getTierLimits(tier) {
 }
 
 // src/audit.ts
-import { appendFileSync, existsSync as existsSync4, readFileSync as readFileSync4, mkdirSync as mkdirSync4 } from "fs";
-import { join as join3, dirname as dirname2 } from "path";
+import { appendFileSync, existsSync as existsSync5, readFileSync as readFileSync4, mkdirSync as mkdirSync4 } from "fs";
+import { join as join4, dirname as dirname2 } from "path";
 function writeAuditEntry(entry, dir) {
   const configDir = getConfigDir(dir);
-  const auditPath = join3(configDir, "audit.log");
+  const auditPath = join4(configDir, "audit.log");
   const logDir = dirname2(auditPath);
-  if (!existsSync4(logDir)) {
+  if (!existsSync5(logDir)) {
     mkdirSync4(logDir, { recursive: true });
   }
   const line = JSON.stringify(entry) + "\n";
@@ -1594,8 +1631,8 @@ function createAuditEntry(sessionId, file, identifiersMutated, secretsBlocked, l
 function readAuditLog(options = {}) {
   const { limit, dir } = options;
   const configDir = getConfigDir(dir);
-  const auditPath = join3(configDir, "audit.log");
-  if (!existsSync4(auditPath)) {
+  const auditPath = join4(configDir, "audit.log");
+  if (!existsSync5(auditPath)) {
     return [];
   }
   const raw = readFileSync4(auditPath, "utf-8");
@@ -1662,7 +1699,7 @@ import { Hono } from "hono";
 import { serve } from "@hono/node-server";
 import { nanoid } from "nanoid";
 import { createServer } from "net";
-import { existsSync as existsSync6, watch } from "fs";
+import { existsSync as existsSync7, watch } from "fs";
 
 // src/auth.ts
 import { createHash } from "crypto";
@@ -1782,18 +1819,55 @@ async function collectGitContextCached(cwd = process.cwd(), now = Date.now()) {
 }
 
 // src/commands/login.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync5, writeFileSync as writeFileSync4, readFileSync as readFileSync5, chmodSync, readSync } from "fs";
-import { join as join4 } from "path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, writeFileSync as writeFileSync4, readFileSync as readFileSync5, chmodSync, readSync } from "fs";
+import { join as join5 } from "path";
 import { homedir as homedir2 } from "os";
 import readline from "readline/promises";
 import chalk from "chalk";
-var CONFIG_DIR_NAME2 = ".pretense";
+
+// src/dashboard-env.ts
+var DASHBOARD_API_KEY_ENVS = ["PRETEST_API_KEY", "PRETENSE_API_KEY"];
+var DASHBOARD_API_URL_ENVS = ["PRETEST_API_URL", "PRETENSE_API_URL"];
+var DASHBOARD_NO_BANNER_ENVS = ["PRETEST_NO_BANNER", "PRETENSE_NO_BANNER"];
+function firstNonEmptyEnv(names) {
+  for (const name of names) {
+    const v = process.env[name]?.trim();
+    if (v) return v;
+  }
+  return "";
+}
+function activeDashboardApiKeyEnvName() {
+  for (const name of DASHBOARD_API_KEY_ENVS) {
+    const v = process.env[name]?.trim();
+    if (v) return name;
+  }
+  return null;
+}
+function assignDashboardApiKeyToProcess(key) {
+  process.env["PRETEST_API_KEY"] = key;
+  process.env["PRETENSE_API_KEY"] = key;
+}
+function clearDashboardApiKeyFromProcess() {
+  delete process.env["PRETEST_API_KEY"];
+  delete process.env["PRETENSE_API_KEY"];
+}
+function hasDashboardApiKeyInEnv() {
+  return DASHBOARD_API_KEY_ENVS.some((n) => !!process.env[n]?.trim());
+}
+
+// src/publish-info.ts
+var PUBLISH_PACKAGE_URL = "https://www.npmjs.com/package/@blockyfy/stg-cli";
+
+// src/commands/login.ts
+var CONFIG_DIR_NAME2 = PROJECT_CONFIG_DIR_NAME;
 var CONFIG_FILE2 = "config.json";
 function getUserDashboardConfigDir() {
-  return join4(homedir2(), CONFIG_DIR_NAME2);
+  const home = homedir2();
+  migrateLegacyProjectConfigDir(home);
+  return join5(home, CONFIG_DIR_NAME2);
 }
 function getUserDashboardConfigPath() {
-  return join4(getUserDashboardConfigDir(), CONFIG_FILE2);
+  return join5(getUserDashboardConfigDir(), CONFIG_FILE2);
 }
 function isValidKeyShape(key) {
   const trimmed = key.trim();
@@ -1826,29 +1900,30 @@ function maskKey(key) {
   return `${trimmed.slice(0, 12)}${"\u2022".repeat(8)}${trimmed.slice(-4)}`;
 }
 function logDashboardCredentialHint() {
-  const env = process.env["PRETENSE_API_KEY"]?.trim() ?? "";
+  const envName = activeDashboardApiKeyEnvName();
+  const env = envName ? process.env[envName]?.trim() ?? "" : "";
   const envOk = env.length > 0 && isValidKeyShape(env);
   const abs = getUserDashboardConfigPath();
   const fk = loadApiKey();
-  if (envOk) {
+  if (envOk && envName) {
     console.error(
       chalk.gray(
-        `[pretense] Dashboard key source: PRETENSE_API_KEY in environment (${maskKey(env)}) \u2014 unset this variable after logout if you expect no key.`
+        `[pretest] Dashboard key source: ${envName} in environment (${maskKey(env)}) \u2014 unset this variable after logout if you expect no key.`
       )
     );
   } else if (fk && isValidKeyShape(fk)) {
-    console.error(chalk.gray(`[pretense] Dashboard key source: ${abs} (${maskKey(fk)})`));
+    console.error(chalk.gray(`[pretest] Dashboard key source: ${abs} (${maskKey(fk)})`));
   } else {
-    console.error(chalk.gray("[pretense] Dashboard key source: none configured."));
+    console.error(chalk.gray("[pretest] Dashboard key source: none configured."));
   }
 }
 function saveApiKey(key, configDir = getUserDashboardConfigDir()) {
-  if (!existsSync5(configDir)) {
+  if (!existsSync6(configDir)) {
     mkdirSync5(configDir, { recursive: true });
   }
-  const path = join4(configDir, CONFIG_FILE2);
+  const path = join5(configDir, CONFIG_FILE2);
   let existing = {};
-  if (existsSync5(path)) {
+  if (existsSync6(path)) {
     try {
       existing = JSON.parse(readFileSync5(path, "utf-8"));
     } catch {
@@ -1868,8 +1943,8 @@ function saveApiKey(key, configDir = getUserDashboardConfigDir()) {
   return path;
 }
 function removeSavedDashboardCredentials(configDir = getUserDashboardConfigDir()) {
-  const path = join4(configDir, CONFIG_FILE2);
-  if (!existsSync5(path)) return { removed: false, path };
+  const path = join5(configDir, CONFIG_FILE2);
+  if (!existsSync6(path)) return { removed: false, path };
   let existing = {};
   try {
     existing = JSON.parse(readFileSync5(path, "utf-8"));
@@ -1889,8 +1964,8 @@ function removeSavedDashboardCredentials(configDir = getUserDashboardConfigDir()
   return { removed: true, path };
 }
 function loadApiKey(configDir = getUserDashboardConfigDir()) {
-  const path = join4(configDir, CONFIG_FILE2);
-  if (!existsSync5(path)) return null;
+  const path = join5(configDir, CONFIG_FILE2);
+  if (!existsSync6(path)) return null;
   try {
     const raw = readFileSync5(path, "utf-8");
     const parsed = JSON.parse(raw);
@@ -1903,7 +1978,7 @@ function loadApiKey(configDir = getUserDashboardConfigDir()) {
   return null;
 }
 function resolveDashboardKeyCandidate() {
-  const env = (process.env["PRETENSE_API_KEY"] ?? "").trim();
+  const env = firstNonEmptyEnv(DASHBOARD_API_KEY_ENVS);
   if (env.length > 0) {
     if (!isValidKeyShape(env)) {
       return { key: null, fromFile: false, badEnv: true };
@@ -1919,14 +1994,14 @@ function resolveDashboardKeyCandidate() {
 function installDashboardKeyForCurrentProcess(key) {
   const trimmed = key.trim();
   const path = saveApiKey(trimmed);
-  process.env["PRETENSE_API_KEY"] = trimmed;
+  assignDashboardApiKeyToProcess(trimmed);
   return path;
 }
 async function promptDashboardApiKeyAfterFailure() {
   if (!process.stdin.isTTY || !process.stdout.isTTY) return null;
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
   try {
-    const line = (await rl.question(chalk.bold("Pretense dashboard API key: "))).trim();
+    const line = (await rl.question(chalk.bold("Dashboard API key: "))).trim();
     return line.length > 0 ? line : null;
   } finally {
     rl.close();
@@ -1935,9 +2010,15 @@ async function promptDashboardApiKeyAfterFailure() {
 async function ensureDashboardKeyForStart() {
   const { key, fromFile, badEnv } = resolveDashboardKeyCandidate();
   if (badEnv) {
-    console.error(chalk.red("Error: PRETENSE_API_KEY is set but is not a valid Pretense dashboard API key shape."));
     console.error(
-      chalk.gray("Keys look like prtns_live_\u2026 or pk_live_\u2026. Fix the variable or unset it to use ~/.pretense/config.json.")
+      chalk.red(
+        "Error: A dashboard API key is set in the environment but does not match the expected key shape."
+      )
+    );
+    console.error(
+      chalk.gray(
+        "Keys look like prtns_live_\u2026 or pk_live_\u2026. Fix the variable or unset it to use ~/.pretest/config.json."
+      )
     );
     process.exit(1);
   }
@@ -1947,32 +2028,34 @@ async function ensureDashboardKeyForStart() {
   if (fromFile) {
     console.warn(
       chalk.yellow(
-        "Ignoring invalid `api_key` in ~/.pretense/config.json (wrong shape). Enter a new key or run `pretense login --key ...`."
+        "Ignoring invalid `api_key` in ~/.pretest/config.json (wrong shape). Enter a new key or run `pretest login --key ...`."
       )
     );
   }
   const stdinOk = process.stdin.isTTY;
   const stdoutOk = process.stdout.isTTY;
   if (!stdinOk || !stdoutOk) {
-    console.error(chalk.red("Error: Pretense API key required to start the proxy."));
+    console.error(chalk.red("Error: Dashboard API key required to start the proxy."));
     console.error(
-      chalk.gray(
-        "Save one with `pretense login --key prtns_live_...` or set PRETENSE_API_KEY."
-      )
+      chalk.gray("Save one with `pretest login --key prtns_live_...` or set PRETEST_API_KEY.")
     );
     process.exit(1);
   }
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
   try {
-    console.log(chalk.cyan("No Pretense API key found in ~/.pretense/config.json or $PRETENSE_API_KEY."));
-    const entered = (await rl.question(chalk.bold("Enter your Pretense API key: "))).trim();
+    console.log(
+      chalk.cyan(
+        "No dashboard API key found in ~/.pretest/config.json. Set PRETEST_API_KEY or run pretest login."
+      )
+    );
+    const entered = (await rl.question(chalk.bold("Enter your dashboard API key: "))).trim();
     if (!entered) {
       console.error(chalk.red("No key entered; exiting."));
       process.exit(1);
     }
     if (!isValidKeyShape(entered)) {
-      console.error(chalk.red("That does not look like a Pretense API key (expect prtns_live_\u2026 or pk_live_\u2026)."));
-      console.error(chalk.gray("Get one from your Pretense dashboard, then run `pretense login --key ...`."));
+      console.error(chalk.red("That does not look like a dashboard API key (expect prtns_live_\u2026 or pk_live_\u2026)."));
+      console.error(chalk.gray(`Get a key via the package page, then run \`pretest login --key ...\`: ${PUBLISH_PACKAGE_URL}`));
       process.exit(1);
     }
     const path = installDashboardKeyForCurrentProcess(entered);
@@ -1983,29 +2066,29 @@ async function ensureDashboardKeyForStart() {
   }
   const persisted = resolveDashboardKeyCandidate();
   if (!persisted.key || persisted.badEnv) {
-    console.error(chalk.red("Error: Pretense dashboard API key could not be confirmed after login prompt."));
+    console.error(chalk.red("Error: Dashboard API key could not be confirmed after login prompt."));
     process.exit(1);
   }
 }
 function runLogin(opts = {}) {
-  const candidate = opts.key?.trim() || (process.env["PRETENSE_API_KEY"] ?? "").trim() || readStdinIfPiped();
+  const candidate = opts.key?.trim() || firstNonEmptyEnv(DASHBOARD_API_KEY_ENVS) || readStdinIfPiped();
   if (!candidate) {
     console.error(chalk.red("Error: no API key provided."));
     console.error(
-      chalk.gray("Try: pretense login --key pk_live_xxxxx")
+      chalk.gray("Try: pretest login --key pk_live_xxxxx")
     );
     console.error(
-      chalk.gray("  or: echo $PRETENSE_API_KEY | pretense login")
+      chalk.gray("  or: echo $PRETEST_API_KEY | pretest login")
     );
     return 1;
   }
   if (!isValidKeyShape(candidate)) {
-    console.error(chalk.red("Error: that does not look like a Pretense API key."));
+    console.error(chalk.red("Error: that does not look like a dashboard API key."));
     console.error(
       chalk.gray("Keys start with prtns_live_ (or pk_live_) and are at least 24 characters long.")
     );
     console.error(
-      chalk.gray("Get one at https://pretense.ai/dashboard/settings/api-keys")
+      chalk.gray(`See: ${PUBLISH_PACKAGE_URL}`)
     );
     return 1;
   }
@@ -2030,10 +2113,10 @@ function usageSummaryFromValidate(v) {
     keyStatus: "active"
   };
 }
-var DEFAULT_PRETENSE_API_URL = "https://api.pretense.ai";
+var DEFAULT_PRETENSE_API_URL = "https://pretense-stg-api.nxtsen.com";
 var DEFAULT_REQUEST_TIMEOUT_MS = 15e3;
 function getConfiguredApiRoot(rootOverride) {
-  const raw = (rootOverride ?? process.env["PRETENSE_API_URL"] ?? DEFAULT_PRETENSE_API_URL).trim();
+  const raw = (rootOverride?.trim() || firstNonEmptyEnv(DASHBOARD_API_URL_ENVS) || DEFAULT_PRETENSE_API_URL).trim();
   if (!raw) {
     return DEFAULT_PRETENSE_API_URL.replace(/\/$/, "");
   }
@@ -2043,7 +2126,7 @@ function getConfiguredApiRoot(rootOverride) {
   }
   try {
     const u = new URL(normalized);
-    const origin = /^pretense\.ai$/i.test(u.hostname) ? "https://api.pretense.ai" : u.origin;
+    const origin = /^pretense\.ai$/i.test(u.hostname) ? DEFAULT_PRETENSE_API_URL.replace(/\/$/, "") : u.origin;
     const path = u.pathname === "/" ? "" : u.pathname.replace(/\/$/, "");
     return `${origin}${path}`;
   } catch {
@@ -2056,20 +2139,20 @@ function getCliApiUrl(pathWithinCli, rootOverride) {
   return `${root}/api/cli/${tail}`;
 }
 function getApiRequestTimeoutMs() {
-  const raw = process.env["PRETENSE_API_TIMEOUT_MS"]?.trim();
+  const raw = process.env["PRETEST_API_TIMEOUT_MS"]?.trim() || process.env["PRETENSE_API_TIMEOUT_MS"]?.trim();
   if (!raw || !/^\d+$/.test(raw)) return DEFAULT_REQUEST_TIMEOUT_MS;
   const n = parseInt(raw, 10);
   return Math.min(Math.max(n, 3e3), 12e4);
 }
 function getApiKey() {
-  const fromEnv = process.env["PRETENSE_API_KEY"]?.trim();
+  const fromEnv = firstNonEmptyEnv(DASHBOARD_API_KEY_ENVS);
   if (fromEnv) return fromEnv;
   const fromFile = loadApiKey();
   if (!fromFile) return null;
   const t = fromFile.trim();
   return t.length > 0 ? t : null;
 }
-function getPretenseApiKey() {
+function getDashboardApiKey() {
   return getApiKey();
 }
 var cachedValidation = null;
@@ -2109,7 +2192,7 @@ async function validateKey(opts = {}) {
   const apiKey = getApiKey();
   if (!apiKey) {
     if (enforceReachability) {
-      const err = new Error("Missing Pretense dashboard API key");
+      const err = new Error("Missing dashboard API key");
       err.code = "MISSING_API_KEY";
       cachedValidation = null;
       lastValidationSuccessAt = 0;
@@ -2139,7 +2222,7 @@ async function validateKey(opts = {}) {
       throw err;
     }
     if (!resp.ok) {
-      const msg = `Pretense API returned HTTP ${resp.status} from ${validateUrl}`;
+      const msg = `Dashboard API returned HTTP ${resp.status} from ${validateUrl}`;
       if (enforceReachability) {
         cachedValidation = null;
         lastValidationSuccessAt = 0;
@@ -2176,14 +2259,14 @@ async function validateKey(opts = {}) {
       throw err;
     }
     if (enforceReachability) {
-      const msg = err.name === "AbortError" ? `Timed out after ${timeoutMs}ms reaching ${validateUrl} (raise PRETENSE_API_TIMEOUT_MS)` : `Cannot reach Pretense API at ${validateUrl}: ${err.message}`;
+      const msg = err.name === "AbortError" ? `Timed out after ${timeoutMs}ms reaching ${validateUrl} (raise PRETEST_API_TIMEOUT_MS or PRETENSE_API_TIMEOUT_MS)` : `Cannot reach dashboard API at ${validateUrl}: ${err.message}`;
       cachedValidation = null;
       lastValidationSuccessAt = 0;
       throw makeBackendReachabilityError("BACKEND_UNAVAILABLE", msg);
     }
     if (opts.verbose) {
       process.stderr.write(
-        `[PRETENSE] Backend validation failed: ${err.message}
+        `[PRETEST] Backend validation failed: ${err.message}
 `
       );
     }
@@ -2209,7 +2292,7 @@ async function fetchUsageSummary(opts = {}) {
   } catch (err) {
     if (opts.verbose) {
       process.stderr.write(
-        `[PRETENSE] Usage summary fetch failed: ${err.message}
+        `[PRETEST] Usage summary fetch failed: ${err.message}
 `
       );
     }
@@ -2227,7 +2310,7 @@ async function isWithinLimits() {
     if (check.mutationsRemaining !== -1 && check.mutationsRemaining <= 0) {
       return {
         allowed: false,
-        reason: `Monthly mutation limit reached (${check.mutationsUsed}/${check.monthlyMutationLimit}). Upgrade at https://pretense.ai/pricing`
+        reason: `Monthly mutation limit reached (${check.mutationsUsed}/${check.monthlyMutationLimit}). See ${PUBLISH_PACKAGE_URL}`
       };
     }
     return { allowed: true };
@@ -2262,13 +2345,13 @@ async function uploadLog(event, options) {
       signal: controller.signal
     });
     if (!resp.ok && verbose) {
-      process.stderr.write(`[PRETENSE] log upload HTTP ${resp.status}
+      process.stderr.write(`[PRETEST] log upload HTTP ${resp.status}
 `);
     }
   } catch (err) {
     if (verbose) {
       const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`[PRETENSE] log upload failed: ${msg}
+      process.stderr.write(`[PRETEST] log upload failed: ${msg}
 `);
     }
   } finally {
@@ -2282,13 +2365,18 @@ function printStartClientInstructions(port) {
   const host = `http://localhost:${port}`;
   console.log();
   console.log(chalk2.cyan.bold("\u2500\u2500 Client setup (environment variables) \u2500\u2500"));
-  console.log(chalk2.gray("Point the CLI at the Pretense backend API (optional if using default):"));
+  console.log(chalk2.gray("Point the CLI at the backend API (optional if using default):"));
   console.log(
-    chalk2.white(`export PRETENSE_API_URL='https://api.pretense.ai'`)
+    chalk2.white(`export PRETEST_API_URL='https://pretense-stg-api.nxtsen.com'`)
   );
   console.log();
-  console.log(chalk2.gray("Log in with your Pretense dashboard API key:"));
-  console.log(chalk2.white("pretense login --key your-pretense-api-key"));
+  console.log(chalk2.gray("Log in with your dashboard API key:"));
+  console.log(chalk2.white("pretest login --key your-dashboard-api-key"));
+  console.log();
+  console.log(
+    chalk2.gray("Documentation:"),
+    chalk2.cyan.underline(PUBLISH_PACKAGE_URL)
+  );
   console.log();
   console.log(
     chalk2.gray("Set the LLM base URL for your provider (proxy below):")
@@ -2305,15 +2393,15 @@ function printStartClientInstructions(port) {
   console.log(chalk2.cyan.bold("\u2500\u2500 Stop & log out \u2500\u2500"));
   console.log(
     chalk2.gray(
-      "Stop the proxy: press Ctrl+C in the terminal where pretense start is running."
+      "Stop the proxy: press Ctrl+C in the terminal where pretest start is running."
     )
   );
   console.log(
     chalk2.gray(
-      "Remove the saved Pretense dashboard key from ~/.pretense/config.json:"
+      "Remove the saved dashboard key from ~/.pretest/config.json:"
     )
   );
-  console.log(chalk2.white("pretense logout"));
+  console.log(chalk2.white("pretest logout"));
   console.log(
     chalk2.gray(
       "(confirm with y / cancel with n.) Mutations stop immediately unless this proxy was started with"
@@ -2321,7 +2409,7 @@ function printStartClientInstructions(port) {
   );
   console.log(
     chalk2.gray(
-      "PRETENSE_API_KEY set in that same terminal \u2014 then press Ctrl+C and run pretense start again."
+      "PRETEST_API_KEY in that same terminal \u2014 then press Ctrl+C and run pretest start again."
     )
   );
   console.log();
@@ -2354,11 +2442,11 @@ function attachDashboardLogoutWatcher(enabled) {
     if (!fk) {
       if (dashboardSavedCredentialsRevoked) return;
       dashboardSavedCredentialsRevoked = true;
-      delete process.env["PRETENSE_API_KEY"];
+      clearDashboardApiKeyFromProcess();
       clearValidationCache();
       try {
         process.stderr.write(
-          `\x1B[33m[PRETENSE] Saved dashboard API key removed (~/.pretense/config.json, e.g. pretense logout). LLM proxy POST requests are disabled until you run pretense login and restart pretense start.\x1B[0m
+          `\x1B[33m[PRETEST] Saved dashboard API key removed (~/.pretest/config.json, e.g. pretest logout). LLM proxy POST requests are disabled until you run pretest login and restart pretest start.\x1B[0m
 `
         );
       } catch {
@@ -2375,7 +2463,7 @@ function attachDashboardLogoutWatcher(enabled) {
     debounceTimer = setTimeout(applyFilesystemCredentialState, 120);
   };
   try {
-    if (!existsSync6(dir)) return;
+    if (!existsSync7(dir)) return;
     watch(dir, () => {
       schedule();
     });
@@ -2484,8 +2572,8 @@ function daysSinceFirstUse() {
 function printUpgradeNudge(reason) {
   process.stdout.write(
     `
-\x1B[33m[PRETENSE] ${reason}\x1B[0m
-\x1B[33m[PRETENSE] Upgrade to Pro: https://pretense.ai/pricing\x1B[0m
+\x1B[33m[PRETEST] ${reason}\x1B[0m
+\x1B[33m[PRETEST] Upgrade to Pro: ${PUBLISH_PACKAGE_URL}\x1B[0m
 
 `
   );
@@ -2499,7 +2587,7 @@ function createProxy(opts = {}) {
   app.get(
     "/",
     (c) => c.json({
-      name: "pretense",
+      name: "pretest",
       version: getCliSemver(),
       status: "running",
       routes: {
@@ -2510,7 +2598,7 @@ function createProxy(opts = {}) {
         "POST /*": "Proxy to upstream LLM API (Anthropic, OpenAI, Google auto-detected)"
       },
       languages: ["TypeScript", "JavaScript", "Python", "Go", "Java", "C#", "Ruby", "Rust"],
-      docs: "https://pretense.ai/docs"
+      docs: PUBLISH_PACKAGE_URL
     })
   );
   app.get(
@@ -2569,19 +2657,19 @@ function createProxy(opts = {}) {
         {
           error: {
             type: "pretense_session_logged_out",
-            message: "Saved Pretense dashboard credentials were removed (for example pretense logout). Run pretense login, then restart pretense start. If you started the proxy with PRETENSE_API_KEY in this shell, stop it (Ctrl+C) and start again after logout."
+            message: "Saved dashboard credentials were removed (for example pretest logout). Run pretest login, then restart pretest start. If you started the proxy with a dashboard API key in this shell, stop it (Ctrl+C) and start again after logout."
           }
         },
         401
       );
     }
-    const pretenseDashboardKey = getPretenseApiKey();
-    if (!pretenseDashboardKey) {
+    const dashboardApiKey = getDashboardApiKey();
+    if (!dashboardApiKey) {
       return c.json(
         {
           error: {
             type: "pretense_dashboard_key_required",
-            message: "Configure your Pretense dashboard API key: run `pretense login --key prtns_live_...` or set PRETENSE_API_KEY."
+            message: "Configure your dashboard API key: run `pretest login --key prtns_live_...` or set PRETEST_API_KEY."
           }
         },
         401
@@ -2629,12 +2717,12 @@ function createProxy(opts = {}) {
     );
     const { monthlyMutations } = getTierLimits(tier);
     const usage = loadUsage();
-    if (tier === "free" && usage.mutations >= monthlyMutations) {
+    if (!dashboardApiKey && tier === "free" && usage.mutations >= monthlyMutations) {
       return c.json(
         {
           error: {
             type: "pretense_rate_limit",
-            message: `Monthly mutation limit reached (${monthlyMutations}/month). Upgrade to Pro for unlimited: https://pretense.ai/pricing`
+            message: `Monthly mutation limit reached (${monthlyMutations}/month). Upgrade to Pro for unlimited: ${PUBLISH_PACKAGE_URL}`
           }
         },
         429
@@ -2658,7 +2746,7 @@ function createProxy(opts = {}) {
         {
           error: {
             type: "pretense_forbidden",
-            message: "This API key is read-only. Create a read_write key in the dashboard to use the Pretense proxy."
+            message: "This API key is read-only. Create a read_write key in the dashboard to use the Pretest proxy."
           }
         },
         403
@@ -2714,7 +2802,7 @@ function createProxy(opts = {}) {
     usage.mutations += tokensMutated;
     saveUsage(usage);
     const remoteLogDisabled = process.env["PRETENSE_DISABLE_REMOTE_LOG"] === "1";
-    if (pretenseDashboardKey && !remoteLogDisabled) {
+    if (dashboardApiKey && !remoteLogDisabled) {
       void uploadLog(
         {
           file_count: 0,
@@ -2723,7 +2811,7 @@ function createProxy(opts = {}) {
           llm_provider: provider,
           cli_version: getCliSemver()
         },
-        { apiKey: pretenseDashboardKey, verbose }
+        { apiKey: dashboardApiKey, verbose }
       );
       bumpCachedUsageAfterLog(tokensMutated);
     }
@@ -2732,7 +2820,7 @@ function createProxy(opts = {}) {
       printUpgradeNudge(`${usage.mutations}/${monthlyMutations} monthly mutations used. Running low!`);
     }
     if (tier === "free" && daysSinceFirstUse() >= 7) {
-      printUpgradeNudge("You've been using Pretense for 7+ days. Unlock Pro features: unlimited mutations, 90-day audit, Slack alerts.");
+      printUpgradeNudge("You've been using Pretest for 7+ days. Unlock Pro features: unlimited mutations, 90-day audit, Slack alerts.");
     }
     const entry = {
       id: requestId,
@@ -2749,7 +2837,7 @@ function createProxy(opts = {}) {
       createAuditEntry(requestId, "proxy-request", tokensMutated, blockedSecrets.length, provider, latencyMs)
     );
     if (verbose && tokensMutated > 0) {
-      process.stdout.write(`[PRETENSE] ${tokensMutated} tokens mutated for request ${requestId}
+      process.stdout.write(`[PRETEST] ${tokensMutated} tokens mutated for request ${requestId}
 `);
     }
     const headers = {};
@@ -2876,12 +2964,12 @@ function startProxy(opts = {}) {
   const requestedPort = opts.port ?? opts.config?.port ?? DEFAULT_CONFIG.port;
   const app = createProxy(opts);
   void (async () => {
-    const pretenseDashboardKeyFromEnvAtLaunch = !!process.env["PRETENSE_API_KEY"]?.trim();
-    const dashboardKey = getPretenseApiKey();
+    const dashboardKeyFromEnvAtLaunch = hasDashboardApiKeyInEnv();
+    const dashboardKey = getDashboardApiKey();
     if (!dashboardKey || !isValidKeyShape(dashboardKey)) {
       process.stderr.write(
-        `\x1B[31m[PRETENSE] API key required or invalid shape. Run \`pretense login --key prtns_live_...\`\x1B[0m
-\x1B[31m[PRETENSE] or set PRETENSE_API_KEY. Get a key at https://pretense.ai/dashboard/settings/api-keys\x1B[0m
+        `\x1B[31m[PRETEST] API key required or invalid shape. Run \`pretest login --key prtns_live_...\`\x1B[0m
+\x1B[31m[PRETEST] or set PRETEST_API_KEY. See ${PUBLISH_PACKAGE_URL}\x1B[0m
 `
       );
       process.exit(1);
@@ -2896,7 +2984,7 @@ function startProxy(opts = {}) {
         });
         if (!validation) {
           process.stderr.write(
-            `\x1B[31m[PRETENSE] Startup validation failed (no API key or unreachable backend). Cannot start proxy.\x1B[0m
+            `\x1B[31m[PRETEST] Startup validation failed (no API key or unreachable backend). Cannot start proxy.\x1B[0m
 `
           );
           process.exit(1);
@@ -2904,7 +2992,7 @@ function startProxy(opts = {}) {
         const plan = validation.plan ?? "FREE";
         const remaining = validation.mutationsRemaining === -1 ? "unlimited" : String(validation.mutationsRemaining);
         process.stdout.write(
-          `\x1B[32m[PRETENSE] Key validated: ${plan} plan` + (validation.organizationName ? ` (${validation.organizationName})` : "") + ` \u2014 ${remaining} mutations remaining\x1B[0m
+          `\x1B[32m[PRETEST] Key validated: ${plan} plan` + (validation.organizationName ? ` (${validation.organizationName})` : "") + ` \u2014 ${remaining} mutations remaining\x1B[0m
 `
         );
         break;
@@ -2912,62 +3000,62 @@ function startProxy(opts = {}) {
         const code = err.code;
         const msg = err.message;
         if (code === "BACKEND_UNAVAILABLE" || code === "AUTH_BACKEND_REJECTED") {
-          process.stderr.write(`\x1B[31m[PRETENSE] ${msg}\x1B[0m
+          process.stderr.write(`\x1B[31m[PRETEST] ${msg}\x1B[0m
 `);
-          process.stderr.write(`\x1B[31m[PRETENSE] Fix network or set PRETENSE_API_URL if using a custom API.\x1B[0m
+          process.stderr.write(`\x1B[31m[PRETEST] Fix network or set PRETEST_API_URL (or PRETENSE_API_URL) if using a custom API.\x1B[0m
 `);
           process.exit(1);
         }
         if (code === "ORG_INACTIVE") {
-          process.stderr.write(`\x1B[31m[PRETENSE] ${msg}\x1B[0m
+          process.stderr.write(`\x1B[31m[PRETEST] ${msg}\x1B[0m
 `);
-          process.stderr.write(`\x1B[31m[PRETENSE] Your organization is inactive; contact support.\x1B[0m
+          process.stderr.write(`\x1B[31m[PRETEST] Your organization is inactive; contact support.\x1B[0m
 `);
           process.exit(1);
         }
         const authRetryable = code === "INVALID_API_KEY" || code === "KEY_REVOKED" || code === "KEY_EXPIRED" || code === "AUTH_ERROR" || code === "MISSING_API_KEY";
         if (authRetryable && interactive) {
-          process.stderr.write(`\x1B[31m[PRETENSE] ${msg}\x1B[0m
+          process.stderr.write(`\x1B[31m[PRETEST] ${msg}\x1B[0m
 `);
           process.stderr.write(
-            `\x1B[33m[PRETENSE] Enter your Pretense dashboard API key and press Enter (Ctrl+C to quit).\x1B[0m
+            `\x1B[33m[PRETEST] Enter your dashboard API key and press Enter (Ctrl+C to quit).\x1B[0m
 `
           );
           let entered = null;
           for (; ; ) {
             entered = await promptDashboardApiKeyAfterFailure();
             if (!entered) {
-              process.stderr.write(`\x1B[31m[PRETENSE] No key entered; exiting.\x1B[0m
+              process.stderr.write(`\x1B[31m[PRETEST] No key entered; exiting.\x1B[0m
 `);
               process.exit(1);
             }
             if (isValidKeyShape(entered)) break;
             process.stderr.write(
-              `\x1B[31m[PRETENSE] That does not look like a Pretense dashboard key (expect prtns_live_\u2026 or pk_live_\u2026).\x1B[0m
+              `\x1B[31m[PRETEST] That does not look like a dashboard key (expect prtns_live_\u2026 or pk_live_\u2026).\x1B[0m
 `
             );
           }
           const savedPath = installDashboardKeyForCurrentProcess(entered);
-          process.stdout.write(`\x1B[32m[PRETENSE] Saved API key to ${savedPath}\x1B[0m
+          process.stdout.write(`\x1B[32m[PRETEST] Saved API key to ${savedPath}\x1B[0m
 `);
           clearValidationCache();
           continue;
         }
         if (code === "KEY_REVOKED" || code === "KEY_EXPIRED" || code === "INVALID_API_KEY" || code === "AUTH_ERROR" || code === "MISSING_API_KEY") {
-          process.stderr.write(`\x1B[31m[PRETENSE] ${msg}\x1B[0m
+          process.stderr.write(`\x1B[31m[PRETEST] ${msg}\x1B[0m
 `);
-          process.stderr.write(`\x1B[31m[PRETENSE] Run 'pretense login --key <new-key>' to fix.\x1B[0m
+          process.stderr.write(`\x1B[31m[PRETEST] Run 'pretest login --key <new-key>' to fix.\x1B[0m
 `);
           process.exit(1);
         }
-        process.stderr.write(`\x1B[31m[PRETENSE] ${msg}\x1B[0m
+        process.stderr.write(`\x1B[31m[PRETEST] ${msg}\x1B[0m
 `);
-        process.stderr.write(`\x1B[31m[PRETENSE] Run 'pretense login --key <new-key>' or check connectivity.\x1B[0m
+        process.stderr.write(`\x1B[31m[PRETEST] Run 'pretest login --key <new-key>' or check connectivity.\x1B[0m
 `);
         process.exit(1);
       }
     }
-    attachDashboardLogoutWatcher(!pretenseDashboardKeyFromEnvAtLaunch);
+    attachDashboardLogoutWatcher(!dashboardKeyFromEnvAtLaunch);
     const bannerTier = tierFromDashboardPlan(
       getCachedValidation()?.plan,
       detectTier()
@@ -2976,13 +3064,13 @@ function startProxy(opts = {}) {
     try {
       port = await findAvailablePort(requestedPort, 10);
     } catch (err) {
-      process.stderr.write(`\x1B[31m[PRETENSE] ${err.message}\x1B[0m
+      process.stderr.write(`\x1B[31m[PRETEST] ${err.message}\x1B[0m
 `);
       process.exit(1);
     }
     if (port !== requestedPort) {
       process.stderr.write(
-        `\x1B[33m[PRETENSE] Port ${requestedPort} in use, falling back to ${port}.\x1B[0m
+        `\x1B[33m[PRETEST] Port ${requestedPort} in use, falling back to ${port}.\x1B[0m
 `
       );
     }
@@ -2990,7 +3078,7 @@ function startProxy(opts = {}) {
     serve({ fetch: app.fetch, port }, () => {
       const portStr = String(port);
       process.stdout.write(`
-\x1B[36mPretense v${getCliSemver()}  [${bannerTier.toUpperCase()}]\x1B[0m
+\x1B[36mPretest v${getCliSemver()}  [${bannerTier.toUpperCase()}]\x1B[0m
   Your code hits AI naked. We fix that.
 
   Proxy:    http://localhost:${portStr}
@@ -3012,7 +3100,7 @@ function startProxy(opts = {}) {
 `);
       setInterval(() => {
         if (dashboardSavedCredentialsRevoked) return;
-        if (!getPretenseApiKey()) return;
+        if (!getDashboardApiKey()) return;
         void validateKey({
           force: true,
           verbose: opts.verbose,
@@ -3068,13 +3156,13 @@ function printTokenFooter(filesScanned, mutationsMade) {
   if (tier === "free") {
     if (pct >= 80) {
       process.stderr.write(
-        chalk3.yellow(`  \u26A0  Approaching free-tier limit. Upgrade: ${chalk3.bold("pretense upgrade")}
+        chalk3.yellow(`  \u26A0  Approaching free-tier limit. Upgrade: ${chalk3.bold("pretest upgrade")}
 
 `)
       );
     } else {
       process.stderr.write(
-        chalk3.gray(`  Run ${chalk3.bold("pretense status")} for details, ${chalk3.bold("pretense upgrade")} to remove limits.
+        chalk3.gray(`  Run ${chalk3.bold("pretest status")} for details, ${chalk3.bold("pretest upgrade")} to remove limits.
 
 `)
       );
@@ -3086,19 +3174,19 @@ function printTokenFooter(filesScanned, mutationsMade) {
 
 // src/banner.ts
 import chalk4 from "chalk";
-var BANNER_RAW = `\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    pretense
+var BANNER_RAW = `\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    pretest
 \u2588\u2588          \u2588\u2588
 \u2588\u2588          \u2588\u2588    Stop your code from
 \u2588\u2588          \u2588\u2588    leaking to any LLM.
 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588
-\u2588\u2588                pretense.ai
+\u2588\u2588                @blockyfy/stg-cli
 \u2588\u2588
 \u2588\u2588
 \u2588\u2588
 \u2588\u2588`;
 var ICE_BLUE = "#7DD3FC";
 function shouldPrint() {
-  if (process.env.PRETENSE_NO_BANNER === "1") return false;
+  if (DASHBOARD_NO_BANNER_ENVS.some((n) => process.env[n] === "1")) return false;
   if (!process.stdout.isTTY) return false;
   if (process.env.CI) return false;
   return true;
@@ -3143,7 +3231,7 @@ async function runStatus() {
     const tierBadge2 = plan === "ENTERPRISE" ? chalk5.bgMagenta.white.bold(" ENTERPRISE ") : plan === "PRO" ? chalk5.bgBlue.white.bold(" PRO ") : chalk5.bgGray.white.bold(" FREE ");
     const lines2 = [];
     lines2.push("");
-    lines2.push(`${chalk5.cyan("Pretense")} ${chalk5.gray(`v${getCliSemver()}`)}  ${tierBadge2}  ${chalk5.green("(synced)")}`);
+    lines2.push(`${chalk5.cyan("Pretest")} ${chalk5.gray(`v${getCliSemver()}`)}  ${tierBadge2}  ${chalk5.green("(synced)")}`);
     lines2.push("");
     lines2.push(`  Plan:        ${chalk5.bold(plan)}`);
     lines2.push(`  Mutations:   ${fmt2(remote.mutationsUsed)} / ${fmt2(remote.monthlyMutationLimit)} this month`);
@@ -3157,7 +3245,7 @@ async function runStatus() {
     }
     lines2.push("");
     if (plan === "FREE") {
-      lines2.push(`  ${chalk5.gray("Upgrade:")}  ${chalk5.bold("pretense upgrade")}`);
+      lines2.push(`  ${chalk5.gray("Upgrade:")}  ${chalk5.bold("pretest upgrade")}`);
       lines2.push("");
     }
     process.stdout.write(lines2.join("\n") + "\n");
@@ -3170,7 +3258,7 @@ async function runStatus() {
   const tierBadge = tier === "enterprise" ? chalk5.bgMagenta.white.bold(" ENTERPRISE ") : tier === "pro" ? chalk5.bgBlue.white.bold(" PRO ") : chalk5.bgGray.white.bold(" FREE ");
   const lines = [];
   lines.push("");
-  lines.push(`${chalk5.cyan("Pretense")} ${chalk5.gray(`v${getCliSemver()}`)}  ${tierBadge}  ${chalk5.yellow("(offline)")}`);
+  lines.push(`${chalk5.cyan("Pretest")} ${chalk5.gray(`v${getCliSemver()}`)}  ${tierBadge}  ${chalk5.yellow("(offline)")}`);
   lines.push("");
   lines.push(`  Plan:        ${chalk5.bold(PLAN_LABEL[tier])} ${chalk5.gray("(" + planLimits.pricePerMonth + ")")}`);
   lines.push(`  Mutations:   ${fmt2(usage.mutations)} / ${fmt2(planLimits.monthlyMutations)} this month`);
@@ -3179,8 +3267,8 @@ async function runStatus() {
   lines.push(`  Audit log:   ${Number.isFinite(tierLimits.auditRetentionDays) ? `${tierLimits.auditRetentionDays} days` : "unlimited"}`);
   lines.push("");
   if (tier === "free") {
-    lines.push(`  ${chalk5.gray("Upgrade:")}  ${chalk5.bold("pretense upgrade")}`);
-    lines.push(`  ${chalk5.gray("Credits:")}  ${chalk5.bold("pretense credits")}`);
+    lines.push(`  ${chalk5.gray("Upgrade:")}  ${chalk5.bold("pretest upgrade")}`);
+    lines.push(`  ${chalk5.gray("Credits:")}  ${chalk5.bold("pretest credits")}`);
     lines.push("");
   }
   process.stdout.write(lines.join("\n") + "\n");
@@ -3188,12 +3276,12 @@ async function runStatus() {
 
 // src/commands/upgrade.ts
 import chalk6 from "chalk";
-var PRICING_URL = "https://pretense.ai/pricing";
+var PRICING_URL = PUBLISH_PACKAGE_URL;
 function runUpgrade() {
   const tier = detectTier();
   const lines = [];
   lines.push("");
-  lines.push(chalk6.cyan.bold("  Pretense Plans"));
+  lines.push(chalk6.cyan.bold("  Pretest Plans"));
   lines.push("");
   lines.push(chalk6.gray("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510"));
   lines.push(chalk6.gray("  \u2502              \u2502   Free   \u2502    Pro   \u2502  Enterprise \u2502"));
@@ -3212,7 +3300,7 @@ function runUpgrade() {
   lines.push(`  ${chalk6.gray("Upgrade at:")}    ${chalk6.cyan.underline(PRICING_URL)}`);
   lines.push("");
   lines.push(chalk6.gray("  After purchase, set:"));
-  lines.push(chalk6.gray("    export PRETENSE_LICENSE_KEY=pre_pro_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"));
+  lines.push(chalk6.gray("    export PRETEST_LICENSE_KEY=pre_pro_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"));
   lines.push("");
   process.stdout.write(lines.join("\n") + "\n");
 }
@@ -3251,7 +3339,7 @@ async function runCredits() {
     const pct2 = cap2 > 0 && cap2 !== -1 ? Math.round(used2 / cap2 * 100) : 0;
     const lines2 = [];
     lines2.push("");
-    lines2.push(chalk7.cyan.bold("  Pretense Credits") + "  " + chalk7.green("(synced)"));
+    lines2.push(chalk7.cyan.bold("  Pretest Credits") + "  " + chalk7.green("(synced)"));
     lines2.push("");
     lines2.push(`  Plan:        ${chalk7.bold(remote.plan)}`);
     lines2.push(`  Resets:      ${new Date(remote.periodResetsAt).toLocaleDateString()}`);
@@ -3261,10 +3349,10 @@ async function runCredits() {
     lines2.push(`  Remaining:   ${fmt3(remaining2)}`);
     lines2.push("");
     if (remote.plan === "FREE" && cap2 !== -1 && used2 >= cap2 * 0.8) {
-      lines2.push(chalk7.yellow("  Warning: Approaching free-tier limit. Run 'pretense upgrade' for unlimited."));
+      lines2.push(chalk7.yellow("  Warning: Approaching free-tier limit. Run 'pretest upgrade' for unlimited."));
       lines2.push("");
     } else if (remote.plan === "FREE") {
-      lines2.push(chalk7.gray("  Tip: Run 'pretense upgrade' to compare plans."));
+      lines2.push(chalk7.gray("  Tip: Run 'pretest upgrade' to compare plans."));
       lines2.push("");
     }
     process.stdout.write(lines2.join("\n") + "\n");
@@ -3279,7 +3367,7 @@ async function runCredits() {
   const pct = Number.isFinite(cap) && cap > 0 ? Math.round(used / cap * 100) : 0;
   const lines = [];
   lines.push("");
-  lines.push(chalk7.cyan.bold("  Pretense Credits") + "  " + chalk7.yellow("(offline)"));
+  lines.push(chalk7.cyan.bold("  Pretest Credits") + "  " + chalk7.yellow("(offline)"));
   lines.push("");
   lines.push(`  Plan:        ${chalk7.bold(PLAN_LABEL2[tier])}`);
   lines.push(`  Month:       ${usage.month}`);
@@ -3289,10 +3377,10 @@ async function runCredits() {
   lines.push(`  Remaining:   ${fmt3(remaining)}`);
   lines.push("");
   if (tier === "free" && Number.isFinite(cap) && used >= cap * 0.8) {
-    lines.push(chalk7.yellow("  Warning: Approaching free-tier limit. Run 'pretense upgrade' for unlimited."));
+    lines.push(chalk7.yellow("  Warning: Approaching free-tier limit. Run 'pretest upgrade' for unlimited."));
     lines.push("");
   } else if (tier === "free") {
-    lines.push(chalk7.gray("  Tip: Run 'pretense upgrade' to compare plans."));
+    lines.push(chalk7.gray("  Tip: Run 'pretest upgrade' to compare plans."));
     lines.push("");
   }
   process.stdout.write(lines.join("\n") + "\n");
@@ -3303,14 +3391,16 @@ import readline2 from "readline/promises";
 import chalk8 from "chalk";
 async function runLogout(opts = {}) {
   if (!loadApiKey()) {
-    console.log(chalk8.gray("No saved Pretense dashboard API key in ~/.pretense/config.json."));
-    console.log(chalk8.gray("If you use PRETENSE_API_KEY in your shell, run unset PRETENSE_API_KEY."));
+    console.log(chalk8.gray("No saved dashboard API key in ~/.pretest/config.json."));
+    console.log(
+      chalk8.gray("If you use PRETEST_API_KEY in your shell, run unset PRETEST_API_KEY.")
+    );
     return 0;
   }
   if (!opts.assumeYes) {
     if (!process.stdin.isTTY || !process.stdout.isTTY) {
       console.error(chalk8.red("Error: confirmation requires an interactive terminal."));
-      console.error(chalk8.gray("Run `pretense logout --yes` to skip the prompt."));
+      console.error(chalk8.gray("Run `pretest logout --yes` to skip the prompt."));
       return 1;
     }
     const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
@@ -3327,17 +3417,19 @@ async function runLogout(opts = {}) {
       rl.close();
     }
   }
-  const hadEnvDashboardKey = !!process.env["PRETENSE_API_KEY"]?.trim();
+  const hadEnvDashboardKey = hasDashboardApiKeyInEnv();
   const { removed, path } = removeSavedDashboardCredentials();
   clearValidationCache();
-  delete process.env["PRETENSE_API_KEY"];
+  clearDashboardApiKeyFromProcess();
   if (removed) {
     console.log(chalk8.green("Logged out. Removed saved API key from"), chalk8.bold(path));
-    console.log(chalk8.gray("Other terminals: run unset PRETENSE_API_KEY if that variable is still exported (e.g. in ~/.zshrc)."));
+    console.log(
+      chalk8.gray("Other terminals: run unset PRETEST_API_KEY if that variable is still exported (e.g. in ~/.zshrc).")
+    );
     if (hadEnvDashboardKey) {
       console.log(
         chalk8.yellow(
-          "This shell had PRETENSE_API_KEY set; it was cleared for this process only. Restart any running pretense proxy (Ctrl+C, then pretense start)."
+          "This shell had a dashboard key in the environment; it was cleared for this process only. Restart any running pretest proxy (Ctrl+C, then pretest start)."
         )
       );
     }
@@ -3350,7 +3442,7 @@ async function runLogout(opts = {}) {
   const major = parseInt(process.versions.node.split(".")[0], 10);
   if (Number.isNaN(major) || major < 18) {
     process.stderr.write(
-      `pretense requires Node.js 18 or newer (you have v${process.versions.node}).
+      `pretest requires Node.js 18 or newer (you have v${process.versions.node}).
 `
     );
     process.stderr.write(`Upgrade via nvm: nvm install 20 && nvm use 20
@@ -3482,7 +3574,7 @@ function validateLanguage(lang) {
 }
 function collectFiles(target) {
   const abs = resolve2(target);
-  if (!existsSync7(abs)) {
+  if (!existsSync8(abs)) {
     return [];
   }
   const stat = statSync(abs);
@@ -3500,13 +3592,14 @@ function collectFiles(target) {
       ".git",
       "dist",
       "build",
+      ".pretest",
       ".pretense",
       ".next",
       "__pycache__",
       ".Trash"
     ]);
     for (const entry of entries) {
-      const fullPath = join5(dir, entry.name);
+      const fullPath = join6(dir, entry.name);
       if (entry.isDirectory()) {
         if (skipDirs.has(entry.name)) continue;
         walk(fullPath);
@@ -3519,12 +3612,12 @@ function collectFiles(target) {
   return files;
 }
 var program = new Command();
-program.name("pretense").description("AI firewall CLI \u2014 mutates proprietary code before LLM API calls").version(VERSION).hook("preAction", () => {
+program.name("pretest").description("AI firewall CLI \u2014 mutates proprietary code before LLM API calls").version(VERSION).hook("preAction", () => {
   printBanner();
 });
-program.command("init").description("Initialize .pretense/ config in current directory").option("-d, --dir <path>", "Target directory", process.cwd()).action((opts) => {
+program.command("init").description("Initialize .pretest/ config in current directory").option("-d, --dir <path>", "Target directory", process.cwd()).action((opts) => {
   const dir = resolve2(opts.dir);
-  console.log(chalk9.cyan("Initializing Pretense in"), chalk9.bold(dir));
+  console.log(chalk9.cyan("Initializing Pretest in"), chalk9.bold(dir));
   const configDir = initConfig(dir);
   const files = collectFiles(dir);
   const langCounts = {};
@@ -3532,16 +3625,16 @@ program.command("init").description("Initialize .pretense/ config in current dir
     const lang = langFromExt(f);
     langCounts[lang] = (langCounts[lang] ?? 0) + 1;
   }
-  console.log(chalk9.green("\n  .pretense/ created at"), chalk9.bold(configDir));
+  console.log(chalk9.green("\n  .pretest/ created at"), chalk9.bold(configDir));
   console.log(chalk9.gray(`
   Scanned ${files.length} source files:`));
   for (const [lang, count] of Object.entries(langCounts)) {
     console.log(chalk9.gray(`    ${lang}: ${count} files`));
   }
-  console.log(chalk9.cyan("\n  Next: run"), chalk9.bold("pretense start"), chalk9.cyan("to launch the proxy"));
+  console.log(chalk9.cyan("\n  Next: run"), chalk9.bold("pretest start"), chalk9.cyan("to launch the proxy"));
   console.log();
 });
-program.command("start").description("Start the Pretense proxy server").option("-p, --port <number>", "Port number", "9339").option("-v, --verbose", "Enable verbose logging", false).action(async (opts) => {
+program.command("start").description("Start the Pretest proxy server").option("-p, --port <number>", "Port number", "9339").option("-v, --verbose", "Enable verbose logging", false).action(async (opts) => {
   const config = loadConfig();
   const port = validatePort(opts.port);
   if (port === null) {
@@ -3660,7 +3753,7 @@ function parseSizeOption(value) {
 }
 program.command("scan <target>").description("Scan file or directory for identifiers and secrets (no mutation)").option("--secrets-only", "Only scan for secrets/credentials", false).option("--json", "Output as JSON", false).option("--max-file-size <size>", "Skip files larger than this (e.g. 10mb, 500k)", "10mb").option("--concurrency <n>", "Max files scanned in parallel", String(SCAN_CONCURRENCY)).option("--quiet", "Suppress progress output", false).action(async (target, opts) => {
   const absTarget = resolve2(target);
-  if (!existsSync7(absTarget)) {
+  if (!existsSync8(absTarget)) {
     console.error(chalk9.red("Error: Path not found:"), chalk9.bold(absTarget));
     process.exit(1);
   }
@@ -3708,7 +3801,7 @@ program.command("scan <target>").description("Scan file or directory for identif
       interrupted
     }, null, 2));
   } else {
-    console.log(chalk9.cyan("\nPretense Scan Results\n"));
+    console.log(chalk9.cyan("\nPretest Scan Results\n"));
     for (const r of allResults) {
       if (r.skipped) {
         if (r.skipped === "too-large") {
@@ -3749,9 +3842,9 @@ program.command("scan <target>").description("Scan file or directory for identif
     process.exit(2);
   }
 });
-program.command("mutate <file>").description("Mutate identifiers for stdout (scanner redacts secrets/PII in the source first)").option("-s, --seed <seed>", "Mutation seed", "pretense").option("-l, --language <lang>", "Source language (typescript, javascript, python, go, java, csharp, ruby, rust)").option("--save", "Save mutation map to .pretense/", false).option("--json", "Output as JSON (includes map + stats)", false).action((file, opts) => {
+program.command("mutate <file>").description("Mutate identifiers for stdout (scanner redacts secrets/PII in the source first)").option("-s, --seed <seed>", "Mutation seed", "pretest").option("-l, --language <lang>", "Source language (typescript, javascript, python, go, java, csharp, ruby, rust)").option("--save", "Save mutation map to .pretest/", false).option("--json", "Output as JSON (includes map + stats)", false).action((file, opts) => {
   const absPath = resolve2(file);
-  if (!existsSync7(absPath)) {
+  if (!existsSync8(absPath)) {
     console.error(chalk9.red("Error: File not found:"), chalk9.bold(absPath));
     process.exit(1);
   }
@@ -3771,13 +3864,13 @@ program.command("mutate <file>").description("Mutate identifiers for stdout (sca
   const code = readFileSync7(absPath, "utf-8");
   const lang = opts.language ? validateLanguage(opts.language) : langFromExt(absPath);
   const secretScan = scan2(code);
-  const effectiveSeed = opts.seed === "pretense" ? buildSaltedSeed(opts.seed) : opts.seed;
+  const effectiveSeed = effectiveSeedForMutation(opts.seed);
   const { redactedCode: redacted, secretsMap } = applyRedactionsTracked(code, secretScan.matches, effectiveSeed);
   const secretsRedacted = secretsMap.size;
   const result = mutate(redacted, lang, opts.seed);
   if (opts.save) {
     const configDir = getConfigDir();
-    const store = new MutationStore(join5(configDir, "mutation-map.json"));
+    const store = new MutationStore(join6(configDir, "mutation-map.json"));
     store.load();
     store.save({
       id: absPath,
@@ -3815,15 +3908,15 @@ program.command("mutate <file>").description("Mutate identifiers for stdout (sca
 });
 program.command("reverse <file>").description("Reverse mutations using stored map").option("-m, --map <path>", "Path to mutation map JSON file").action((file, opts) => {
   const absPath = resolve2(file);
-  if (!existsSync7(absPath)) {
+  if (!existsSync8(absPath)) {
     console.error(chalk9.red("Error: File not found:"), chalk9.bold(absPath));
     process.exit(1);
   }
   const mutatedCode = readFileSync7(absPath, "utf-8");
-  const mapPath = opts.map ? resolve2(opts.map) : join5(getConfigDir(), "mutation-map.json");
-  if (!existsSync7(mapPath)) {
+  const mapPath = opts.map ? resolve2(opts.map) : join6(getConfigDir(), "mutation-map.json");
+  if (!existsSync8(mapPath)) {
     console.error(chalk9.red("Error: Mutation map not found:"), chalk9.bold(mapPath));
-    console.error(chalk9.gray("Run 'pretense mutate --save' first, or specify --map <path>"));
+    console.error(chalk9.gray("Run 'pretest mutate --save' first, or specify --map <path>"));
     process.exit(1);
   }
   let store;
@@ -3832,13 +3925,13 @@ program.command("reverse <file>").description("Reverse mutations using stored ma
     store.load();
   } catch {
     console.error(chalk9.red("Error: Failed to load mutation map:"), chalk9.bold(mapPath));
-    console.error(chalk9.gray("The file may be corrupted. Run 'pretense mutate --save' to regenerate."));
+    console.error(chalk9.gray("The file may be corrupted. Run 'pretest mutate --save' to regenerate."));
     process.exit(1);
   }
   const entry = store.get(absPath) ?? store.getByHash(absPath) ?? store.list(1)[0];
   if (!entry) {
     console.error(chalk9.red("Error: No mutation map entries found."));
-    console.error(chalk9.gray("Run 'pretense mutate --save <file>' first to generate a map."));
+    console.error(chalk9.gray("Run 'pretest mutate --save <file>' first to generate a map."));
     process.exit(1);
   }
   const map = MutationStore.toMap(entry);
@@ -3858,16 +3951,16 @@ program.command("audit").description("View the audit log").option("--json", "Out
   const output = formatAudit(entries, format);
   console.log(output);
 });
-program.command("version").description("Print Pretense CLI version").action(() => {
-  console.log(`@pretense/cli v${VERSION}`);
+program.command("version").description("Print Pretest CLI version").action(() => {
+  console.log(`@blockyfy/stg-cli v${VERSION}`);
 });
 program.command("status").description("Show current plan, monthly quota, seat usage").action(async () => {
   await runStatus();
 });
-program.command("usage").description("Alias for `pretense status` \u2014 show monthly quota usage").action(async () => {
+program.command("usage").description("Alias for `pretest status` \u2014 show monthly quota usage").action(async () => {
   await runStatus();
 });
-program.command("tokens").description("Alias for `pretense credits` \u2014 show remaining mutation budget").action(async () => {
+program.command("tokens").description("Alias for `pretest credits` \u2014 show remaining mutation budget").action(async () => {
   await runCredits();
 });
 program.command("upgrade").description("Compare plans and upgrade to Pro or Enterprise").action(() => {
@@ -3876,11 +3969,11 @@ program.command("upgrade").description("Compare plans and upgrade to Pro or Ente
 program.command("credits").description("Show remaining mutation/scan budget for the current month").action(async () => {
   await runCredits();
 });
-program.command("login").description("Save a Pretense API key to ~/.pretense/config.json for future CLI runs").option("-k, --key <key>", "API key (prtns_live_... or pk_live_...). If omitted, read from $PRETENSE_API_KEY or stdin.").action((opts) => {
+program.command("login").description("Save a dashboard API key to ~/.pretest/config.json for future CLI runs").option("-k, --key <key>", "API key (prtns_live_... or pk_live_...). If omitted, read from $PRETEST_API_KEY or stdin.").action((opts) => {
   const code = runLogin({ key: opts.key });
   if (code !== 0) process.exit(code);
 });
-program.command("logout").description("Remove the saved Pretense dashboard API key from ~/.pretense/config.json").option("-y, --yes", "Skip confirmation prompt", false).action(async (opts) => {
+program.command("logout").description("Remove the saved dashboard API key from ~/.pretest/config.json").option("-y, --yes", "Skip confirmation prompt", false).action(async (opts) => {
   const code = await runLogout({ assumeYes: opts.yes === true });
   if (code !== 0) process.exit(code);
 });