@dreamboard-games/cli 0.1.30-alpha.17 → 0.1.30-alpha.19

package/README.md

@@ -35,7 +35,9 @@ Use browser login:
 dreamboard login
 ```
 
-The published CLI stores your refreshable session in the operating system credential store via `@napi-rs/keyring`. It does not fall back to plaintext `~/.dreamboard/auth.json`.
+The CLI stores your refreshable session in `~/.dreamboard/auth.json` by default. The file is written atomically with owner-only permissions (`0600`).
+
+The operating system keychain is optional. Set `"credentialBackend": "keychain"` in `~/.dreamboard/config.json`, or use `DREAMBOARD_CREDENTIAL_BACKEND=keychain`, to opt in.
 
 That stored session includes the Clerk refresh token the CLI needs to renew and exchange for short-lived Dreamboard API tokens automatically. Direct JWT injection is intentionally not part of the published CLI flow.
 

package/dist/agent-verifier/agent-workspace-verifier.mjs

@@ -3,11 +3,11 @@ import {
   assertCompilerPortableDependencies,
   consola,
   resolveProjectContext
-} from "./chunk-NFL3Z4Z7.mjs";
+} from "./chunk-5D3OJBDT.mjs";
 import "./chunk-WSIYUUSD.mjs";
-import "./chunk-CO3BRUD6.mjs";
-import "./chunk-DPYC2NDB.mjs";
-import "./chunk-AXXUGU7Q.mjs";
+import "./chunk-AWZ4M4NS.mjs";
+import "./chunk-UMW24KZI.mjs";
+import "./chunk-6AKXIY37.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import "./chunk-RDYXWXXC.mjs";
 import "./chunk-MYMVXTZT.mjs";
@@ -48,7 +48,7 @@ Usage:
 }
 async function materializePreparedWorkspace(args) {
   const inputPath = readRequiredOption(args, "--input");
-  const { materializeWorkspaceProject } = await import("./materialize-workspace-ENPMB66P.mjs");
+  const { materializeWorkspaceProject } = await import("./materialize-workspace-PWNT6HQK.mjs");
   const input = JSON.parse(
     await readFile(inputPath, "utf8")
   );
@@ -84,9 +84,9 @@ async function verifyAgentWorkspace(rawMode, args) {
 }
 async function runFullBackendConnectedVerification(parsedFlags) {
   const [{ default: cmdSync }, { default: cmdCompile }, { default: cmdTest }] = await Promise.all([
-    import("./sync-JSATJXVJ.mjs"),
-    import("./compile-SDQ25N7K.mjs"),
-    import("./test-LQAGEQLY.mjs")
+    import("./sync-5YM4CSXL.mjs"),
+    import("./compile-MO2URO5Z.mjs"),
+    import("./test-CNNVTFIG.mjs")
   ]);
   await runCommandDefinition(cmdSync, { ...parsedFlags, force: true });
   await runCommandDefinition(cmdCompile, parsedFlags);
@@ -150,9 +150,9 @@ async function runCloudLocalVerification(projectRoot, projectConfig, config) {
     { assertReducerContractPreflight },
     { getProjectLocalMaintainerRegistry }
   ] = await Promise.all([
-    import("./static-scaffold-K52P52SV.mjs"),
-    import("./local-files-WPHUV6GU.mjs"),
-    import("./workspace-codegen-4IWICKLB.mjs"),
+    import("./static-scaffold-HXUQLJVN.mjs"),
+    import("./local-files-DAFIR7SN.mjs"),
+    import("./workspace-codegen-SPPVHURX.mjs"),
     import("./workspace-dependencies-ZMHPHVQV.mjs"),
     import("./reducer-contract-preflight-FQB7M4PU.mjs"),
     import("./project-state-XKUSCFSV.mjs")
@@ -188,7 +188,7 @@ async function runCloudLocalVerification(projectRoot, projectConfig, config) {
     generateReducerNativeArtifacts,
     isReducerNativeTestingWorkspace,
     runReducerNativeScenarios
-  } = await import("./reducer-native-test-harness-GY2CCQWN.mjs");
+  } = await import("./reducer-native-test-harness-X2KQYSCD.mjs");
   if (await isReducerNativeTestingWorkspace(projectRoot)) {
     const { bases } = await generateReducerNativeArtifacts({
       projectRoot,

package/dist/agent-verifier/{chunk-LKQ557TJ.mjs → chunk-334H4LE4.mjs}

@@ -9,14 +9,14 @@ import {
   isLibraryPath,
   materializeManifest,
   writeManifestSource
-} from "./chunk-H3XNWKJU.mjs";
+} from "./chunk-7LFDFXLS.mjs";
 import {
   readWorkspaceTextFile,
   readWorkspaceTextFileIfExists,
   resolveWorkspacePath,
   unlinkWorkspaceFile,
   writeWorkspaceTextFile
-} from "./chunk-WAFBU5U7.mjs";
+} from "./chunk-OJFZVGEL.mjs";
 import {
   LOCAL_IGNORE_DIRS,
   MANIFEST_FILE,
@@ -189,4 +189,4 @@ export {
   writeSnapshotFromFiles,
   getLocalDiff
 };
-//# sourceMappingURL=chunk-LKQ557TJ.mjs.map
+//# sourceMappingURL=chunk-334H4LE4.mjs.map

package/dist/agent-verifier/{chunk-DWLTCUUX.mjs → chunk-3Y4FRMTK.mjs}

@@ -7,14 +7,14 @@ import {
   STALE_CONTRACT_ARTIFACT_CODE,
   isStaleContractArtifactError,
   toDreamboardApiError
-} from "./chunk-G2ECODRB.mjs";
+} from "./chunk-PLXXH5LY.mjs";
 import {
   createUserTokenManager,
   resolveLocalHarnessAccessToken
-} from "./chunk-CO3BRUD6.mjs";
+} from "./chunk-AWZ4M4NS.mjs";
 import {
   loadManifest
-} from "./chunk-LKQ557TJ.mjs";
+} from "./chunk-334H4LE4.mjs";
 import {
   REDUCER_TESTING_TYPES_WRAPPER_CONTENT,
   buildReducerTestingContractContent
@@ -31,7 +31,7 @@ import {
   getSessionSnapshot,
   hashContent,
   startGame
-} from "./chunk-H3XNWKJU.mjs";
+} from "./chunk-7LFDFXLS.mjs";
 import {
   external_exports
 } from "./chunk-JZTH3EMV.mjs";
@@ -41,7 +41,7 @@ import {
   workspacePathExists,
   writeWorkspaceJsonFile,
   writeWorkspaceTextFile
-} from "./chunk-WAFBU5U7.mjs";
+} from "./chunk-OJFZVGEL.mjs";
 import {
   PROJECT_DIR_NAME
 } from "./chunk-M7UVBANQ.mjs";
@@ -3317,4 +3317,4 @@ export {
   generateReducerNativeArtifacts,
   runReducerNativeScenarios
 };
-//# sourceMappingURL=chunk-DWLTCUUX.mjs.map
+//# sourceMappingURL=chunk-3Y4FRMTK.mjs.map

package/dist/agent-verifier/{chunk-NFL3Z4Z7.mjs → chunk-5D3OJBDT.mjs}

@@ -4,17 +4,17 @@ import {
   loadProjectConfig
 } from "./chunk-WSIYUUSD.mjs";
 import {
+  IS_PUBLISHED_BUILD,
+  PUBLISHED_ENVIRONMENT,
   createUserTokenManager,
   resolveLocalHarnessAccessToken
-} from "./chunk-CO3BRUD6.mjs";
+} from "./chunk-AWZ4M4NS.mjs";
 import {
   loadGlobalConfig
-} from "./chunk-DPYC2NDB.mjs";
+} from "./chunk-UMW24KZI.mjs";
 import {
-  IS_PUBLISHED_BUILD,
-  PUBLISHED_ENVIRONMENT,
   getStoredSession
-} from "./chunk-AXXUGU7Q.mjs";
+} from "./chunk-6AKXIY37.mjs";
 import {
   readJsonFile,
   readTextFileIfExists
@@ -1320,6 +1320,9 @@ function requireAuth(config) {
 function valueOrUndefined(value) {
   return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
 }
+async function loadProjectContextCredentials(requireAuth2, loadCredentials = getStoredSession) {
+  return requireAuth2 ? loadCredentials() : void 0;
+}
 async function resolveProjectContext(flags, opts) {
   const projectRoot = await findProjectRoot(process.cwd());
   if (!projectRoot) {
@@ -1328,12 +1331,13 @@ async function resolveProjectContext(flags, opts) {
     );
   }
   const projectConfig = await loadProjectConfig(projectRoot);
+  const requireAuthForContext = opts?.requireAuth !== false;
   const [globalConfig, credentials] = await Promise.all([
     loadGlobalConfig(),
-    getStoredSession()
+    loadProjectContextCredentials(requireAuthForContext)
   ]);
   const config = resolveConfig(globalConfig, flags, projectConfig, credentials);
-  if (opts?.requireAuth !== false) {
+  if (requireAuthForContext) {
     requireAuth(config);
     await configureClient(config);
   }
@@ -1540,4 +1544,4 @@ export {
   assertCompilerPortableDependencies,
   assertReleaseEnvironmentPortableDependencies
 };
-//# sourceMappingURL=chunk-NFL3Z4Z7.mjs.map
+//# sourceMappingURL=chunk-5D3OJBDT.mjs.map