@globio/cli 0.1.2 → 0.1.4

package/dist/index.js

@@ -5,48 +5,155 @@ import { Command } from "commander";
 
 // src/auth/login.ts
 import * as p from "@clack/prompts";
+import { exec } from "child_process";
 import chalk2 from "chalk";
 
 // src/lib/config.ts
 import chalk from "chalk";
-import Conf from "conf";
-var store = new Conf({
-  projectName: "globio",
-  defaults: {}
-});
+import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "fs";
+import os from "os";
+import path from "path";
+var baseDir = path.join(os.homedir(), ".globio");
+var profilesDir = path.join(baseDir, "profiles");
+var configPath = path.join(baseDir, "config.json");
+function ensureBaseDir() {
+  mkdirSync(baseDir, { recursive: true });
+}
+function ensureProfilesDir() {
+  ensureBaseDir();
+  mkdirSync(profilesDir, { recursive: true });
+}
+function readGlobalConfig() {
+  if (!existsSync(configPath)) {
+    return { active_profile: "default" };
+  }
+  try {
+    const raw = JSON.parse(readFileSync(configPath, "utf-8"));
+    return {
+      active_profile: raw.active_profile ?? "default"
+    };
+  } catch {
+    return { active_profile: "default" };
+  }
+}
+function writeGlobalConfig(data) {
+  ensureBaseDir();
+  writeFileSync(configPath, JSON.stringify(data, null, 2) + "\n");
+}
+function profilePath(name) {
+  return path.join(profilesDir, `${name}.json`);
+}
+function readProfile(name) {
+  const file = profilePath(name);
+  if (!existsSync(file)) return null;
+  try {
+    return JSON.parse(readFileSync(file, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeProfile(name, data) {
+  ensureProfilesDir();
+  writeFileSync(profilePath(name), JSON.stringify(data, null, 2) + "\n");
+}
 var config = {
-  get: () => store.store,
-  set: (values) => {
-    Object.entries(values).forEach(([key, value]) => {
-      if (value !== void 0) {
-        store.set(key, value);
-      }
-    });
+  getBaseDir: () => baseDir,
+  getProfilesDir: () => profilesDir,
+  getActiveProfile: () => readGlobalConfig().active_profile,
+  setActiveProfile: (name) => {
+    writeGlobalConfig({ active_profile: name });
+  },
+  getProfile: (name) => {
+    const profileName = name ?? config.getActiveProfile();
+    if (!profileName) return null;
+    return readProfile(profileName);
+  },
+  setProfile: (name, data) => {
+    const existing = readProfile(name);
+    const next = {
+      pat: data.pat ?? existing?.pat ?? "",
+      account_email: data.account_email ?? existing?.account_email ?? "",
+      account_name: data.account_name ?? existing?.account_name ?? "",
+      active_project_id: data.active_project_id ?? existing?.active_project_id,
+      active_project_name: data.active_project_name ?? existing?.active_project_name,
+      project_api_key: data.project_api_key ?? existing?.project_api_key,
+      created_at: data.created_at ?? existing?.created_at ?? Date.now()
+    };
+    writeProfile(name, next);
+  },
+  deleteProfile: (name) => {
+    const file = profilePath(name);
+    if (existsSync(file)) {
+      rmSync(file);
+    }
+  },
+  listProfiles: () => {
+    if (!existsSync(profilesDir)) return [];
+    return readdirSync(profilesDir).filter((file) => file.endsWith(".json")).map((file) => file.replace(/\.json$/, "")).sort();
   },
-  clear: () => store.clear(),
-  getApiKey: () => store.get("apiKey"),
-  requireAuth: () => {
-    const key = store.get("apiKey");
-    if (!key) {
+  getActiveProfileData: () => {
+    const active = config.getActiveProfile();
+    if (!active) return null;
+    return config.getProfile(active);
+  },
+  requireAuth: (profileName) => {
+    const resolvedProfile = profileName ?? config.getActiveProfile() ?? "default";
+    const profile = config.getProfile(resolvedProfile);
+    if (!profile?.pat) {
       console.error(chalk.red("Not logged in. Run: npx @globio/cli login"));
       process.exit(1);
     }
-    return key;
+    return { pat: profile.pat, profileName: resolvedProfile };
   },
-  requireProject: () => {
-    const projectId = store.get("projectId");
-    if (!projectId) {
+  requireProject: (profileName) => {
+    const resolvedProfile = profileName ?? config.getActiveProfile() ?? "default";
+    const profile = config.getProfile(resolvedProfile);
+    if (!profile?.active_project_id) {
       console.error(
         chalk.red("No active project. Run: npx @globio/cli projects use <projectId>")
       );
       process.exit(1);
     }
-    return projectId;
+    return {
+      projectId: profile.active_project_id,
+      projectName: profile.active_project_name ?? "unnamed"
+    };
   }
 };
 
+// src/lib/manage.ts
+var API_BASE_URL = "https://api.globio.stanlink.online";
+var CONSOLE_BASE_URL = "https://console.globio.stanlink.online";
+function getAuthToken(explicitToken, profileName) {
+  if (explicitToken) return explicitToken;
+  return config.getProfile(profileName)?.pat;
+}
+async function manageRequest(path2, options = {}) {
+  const headers = new Headers();
+  if (!(options.body instanceof FormData)) {
+    headers.set("Content-Type", "application/json");
+  }
+  const token = getAuthToken(options.token, options.profileName);
+  if (token) {
+    headers.set("Authorization", `Bearer ${token}`);
+  }
+  const response = await fetch(`${API_BASE_URL}/manage${path2}`, {
+    method: options.method ?? "GET",
+    headers,
+    body: options.body ? JSON.stringify(options.body) : void 0
+  });
+  const payload = await response.json().catch(() => ({}));
+  if (!response.ok) {
+    throw new Error(payload.error || payload.message || "Management request failed");
+  }
+  return payload.data ?? payload;
+}
+function getConsoleCliAuthUrl(state) {
+  return `${CONSOLE_BASE_URL}/cli-auth?state=${encodeURIComponent(state)}`;
+}
+
 // src/lib/banner.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import figlet from "figlet";
 import gradientString from "gradient-string";
 var globioGradient = gradientString(
@@ -74,116 +181,245 @@ var orange = (s) => "\x1B[38;2;244;140;6m" + s + "\x1B[0m";
 var gold = (s) => "\x1B[38;2;255;208;0m" + s + "\x1B[0m";
 var muted = (s) => "\x1B[2m" + s + "\x1B[0m";
 function getCliVersion() {
-  const file = readFileSync(new URL("../package.json", import.meta.url), "utf8");
+  const file = readFileSync2(new URL("../package.json", import.meta.url), "utf8");
   return JSON.parse(file).version;
 }
 
 // src/auth/login.ts
-var DEFAULT_BASE_URL = "https://api.globio.stanlink.online";
 var version = getCliVersion();
-async function login() {
-  printBanner(version);
-  const values = await p.group(
-    {
-      apiKey: () => p.text({
-        message: "Paste your Globio API key",
-        placeholder: "gk_live_...",
-        validate: (value) => !value ? "API key is required" : void 0
-      }),
-      projectId: () => p.text({
-        message: "Paste your Project ID",
-        placeholder: "proj_...",
-        validate: (value) => !value ? "Project ID is required" : void 0
-      })
-    },
-    {
-      onCancel: () => {
-        p.cancel("Login cancelled.");
-        process.exit(0);
-      }
+function openBrowser(url) {
+  const command = process.platform === "win32" ? `start "" "${url}"` : process.platform === "darwin" ? `open "${url}"` : `xdg-open "${url}"`;
+  exec(command);
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function savePat(token) {
+  const account = await manageRequest("/account", { token });
+  return account;
+}
+async function runTokenLogin(profileName) {
+  const hadProfiles = config.listProfiles().length > 0;
+  const token = await p.text({
+    message: "Paste your personal access token",
+    placeholder: "glo_pat_...",
+    validate: (value) => {
+      if (!value) return "Personal access token is required";
+      if (!value.startsWith("glo_pat_")) return "Token must start with glo_pat_";
+      return void 0;
     }
-  );
+  });
+  if (p.isCancel(token)) {
+    p.cancel("Login cancelled.");
+    process.exit(0);
+  }
   const spinner2 = p.spinner();
-  spinner2.start("Validating credentials...");
+  spinner2.start("Validating personal access token...");
   try {
-    const response = await fetch(`${DEFAULT_BASE_URL}/id/health`, {
-      headers: {
-        "X-Globio-Key": values.apiKey
-      }
+    const account = await savePat(token);
+    config.setProfile(profileName, {
+      pat: token,
+      account_email: account.email,
+      account_name: account.display_name ?? account.email,
+      created_at: Date.now()
     });
-    if (!response.ok) {
-      spinner2.stop("Validation failed.");
-      p.outro(chalk2.red("Invalid API key or project ID."));
-      process.exit(1);
+    if (profileName === "default" || !hadProfiles) {
+      config.setActiveProfile(profileName);
+    }
+    spinner2.stop("Token validated.");
+    p.outro(`Logged in as ${account.email}
+Profile: ${profileName}`);
+  } catch (error) {
+    spinner2.stop("Validation failed.");
+    p.outro(chalk2.red(error instanceof Error ? error.message : "Could not validate token"));
+    process.exit(1);
+  }
+}
+async function runBrowserLogin(profileName) {
+  const state = crypto.randomUUID();
+  const spinner2 = p.spinner();
+  const hadProfiles = config.listProfiles().length > 0;
+  await manageRequest("/cli-auth/request", {
+    method: "POST",
+    body: { state }
+  });
+  const url = getConsoleCliAuthUrl(state);
+  openBrowser(url);
+  console.log("  " + muted("Browser URL: ") + orange(url));
+  console.log("");
+  spinner2.start("Waiting for browser approval...");
+  const deadline = Date.now() + 5 * 60 * 1e3;
+  while (Date.now() < deadline) {
+    try {
+      const status = await manageRequest(
+        `/cli-auth/poll?state=${encodeURIComponent(state)}`
+      );
+      if (status.status === "expired") {
+        spinner2.stop("Approval window expired.");
+        p.outro(chalk2.red("CLI auth request expired. Try again or use globio login --token."));
+        process.exit(1);
+      }
+      if (status.status === "approved" && status.code) {
+        const exchange = await manageRequest("/cli-auth/exchange", {
+          method: "POST",
+          body: { code: status.code }
+        });
+        config.setProfile(profileName, {
+          pat: exchange.token,
+          account_email: exchange.account.email,
+          account_name: exchange.account.display_name ?? exchange.account.email,
+          created_at: Date.now()
+        });
+        if (profileName === "default" || !hadProfiles) {
+          config.setActiveProfile(profileName);
+        }
+        spinner2.stop("Browser approval received.");
+        p.outro(`Logged in as ${exchange.account.email}
+Profile: ${profileName}`);
+        return;
+      }
+    } catch {
     }
-    config.set({
-      apiKey: values.apiKey,
-      projectId: values.projectId
+    await sleep(2e3);
+  }
+  spinner2.stop("Approval timed out.");
+  p.outro(chalk2.red("Timed out waiting for browser approval. Try again or use globio login --token."));
+  process.exit(1);
+}
+async function login(options = {}) {
+  printBanner(version);
+  const profileName = options.profile ?? "default";
+  const existing = config.getProfile(profileName);
+  if (existing) {
+    const proceed = await p.confirm({
+      message: `Already logged in as ${existing.account_email} on profile "${profileName}". Replace?`,
+      initialValue: false
     });
-    spinner2.stop("Credentials validated.");
-    p.outro(
-      "  Logged in.\n\n  " + muted("API Key:  ") + orange(values.apiKey) + "\n  " + muted("Project:  ") + orange(values.projectId)
-    );
-  } catch {
-    spinner2.stop("");
-    p.outro(chalk2.red("Could not connect to Globio. Check your credentials."));
+    if (p.isCancel(proceed) || !proceed) {
+      p.outro("Login cancelled.");
+      return;
+    }
+  }
+  if (options.token) {
+    await runTokenLogin(profileName);
+    return;
+  }
+  const choice = await p.select({
+    message: "Choose a login method",
+    options: [
+      { value: "browser", label: "Browser", hint: "Open console and approve access" },
+      { value: "token", label: "Token", hint: "Paste a personal access token" }
+    ]
+  });
+  if (p.isCancel(choice)) {
+    p.cancel("Login cancelled.");
+    process.exit(0);
+  }
+  if (choice === "token") {
+    await runTokenLogin(profileName);
+    return;
+  }
+  try {
+    await runBrowserLogin(profileName);
+  } catch (error) {
+    p.outro(chalk2.red(error instanceof Error ? error.message : "Could not connect to Globio."));
     process.exit(1);
   }
 }
 
 // src/auth/logout.ts
-import * as p2 from "@clack/prompts";
 import chalk3 from "chalk";
-async function logout() {
-  config.clear();
-  p2.outro(chalk3.green("Logged out."));
+async function logout(options = {}) {
+  const activeProfile = config.getActiveProfile();
+  const profileName = options.profile ?? activeProfile;
+  const profile = profileName ? config.getProfile(profileName) : null;
+  if (!profileName || !profile) {
+    console.log(chalk3.yellow(`No active session on profile "${profileName || "default"}".`));
+    return;
+  }
+  config.deleteProfile(profileName);
+  if (profileName === activeProfile) {
+    const remaining = config.listProfiles();
+    if (remaining.length > 0) {
+      config.setActiveProfile(remaining[0]);
+      console.log(chalk3.green(`Logged out. Switched to profile: ${remaining[0]}`));
+      return;
+    }
+    config.setActiveProfile("");
+    console.log(chalk3.green("Logged out."));
+    return;
+  }
+  console.log(chalk3.green(`Logged out profile: ${profileName}`));
 }
 
-// src/auth/whoami.ts
+// src/auth/useProfile.ts
 import chalk4 from "chalk";
-async function whoami() {
-  const cfg = config.get();
-  if (!cfg.apiKey) {
-    console.log(chalk4.red("Not logged in."));
+async function useProfile(profileName) {
+  const profile = config.getProfile(profileName);
+  if (!profile) {
+    console.log(
+      chalk4.red(
+        `Profile "${profileName}" not found. Run: globio login --profile ${profileName}`
+      )
+    );
+    process.exit(1);
+  }
+  config.setActiveProfile(profileName);
+  console.log(
+    chalk4.green("Switched to profile: ") + orange(profileName) + ` (${profile.account_email})`
+  );
+}
+
+// src/auth/whoami.ts
+import chalk5 from "chalk";
+async function whoami(options = {}) {
+  const profileName = options.profile ?? config.getActiveProfile() ?? "default";
+  const profile = config.getProfile(profileName);
+  if (!profile) {
+    console.log(chalk5.red("Not logged in. Run: globio login"));
     return;
   }
+  const allProfiles = config.listProfiles();
+  const activeProfile = config.getActiveProfile();
   console.log("");
-  console.log(chalk4.cyan("API Key:   ") + cfg.apiKey);
-  console.log(chalk4.cyan("Project:   ") + (cfg.projectId ?? "none"));
+  console.log(
+    muted("Profile:  ") + orange(profileName) + (profileName === activeProfile ? muted(" (active)") : "")
+  );
+  console.log(muted("Account:  ") + profile.account_email);
+  console.log(muted("Name:     ") + (profile.account_name || "\u2014"));
+  console.log(
+    muted("Project:  ") + (profile.active_project_id ? orange(profile.active_project_name || "unnamed") + muted(` (${profile.active_project_id})`) : chalk5.gray("none \u2014 run: globio projects use <id>"))
+  );
+  if (allProfiles.length > 1) {
+    console.log("");
+    console.log(
+      muted("Other profiles: ") + allProfiles.filter((name) => name !== profileName).join(", ")
+    );
+  }
   console.log("");
 }
 
 // src/commands/init.ts
 import * as p5 from "@clack/prompts";
-import { existsSync, readFileSync as readFileSync2, writeFileSync } from "fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 
 // src/prompts/init.ts
-import * as p3 from "@clack/prompts";
+import * as p2 from "@clack/prompts";
 async function promptInit() {
-  return p3.group(
+  return p2.group(
     {
-      apiKey: () => p3.text({
-        message: "Globio API key",
-        placeholder: "gk_live_...",
-        validate: (value) => !value ? "Required" : void 0
-      }),
-      projectId: () => p3.text({
-        message: "Project ID",
-        placeholder: "proj_...",
-        validate: (value) => !value ? "Required" : void 0
-      }),
-      migrateFromFirebase: () => p3.confirm({
+      migrateFromFirebase: () => p2.confirm({
         message: "Migrating from Firebase?",
         initialValue: false
       }),
-      serviceAccountPath: ({ results }) => results.migrateFromFirebase ? p3.text({
+      serviceAccountPath: ({ results }) => results.migrateFromFirebase ? p2.text({
         message: "Path to Firebase service account JSON",
         placeholder: "./serviceAccountKey.json"
       }) : Promise.resolve(void 0)
     },
     {
       onCancel: () => {
-        p3.cancel("Cancelled.");
+        p2.cancel("Cancelled.");
         process.exit(0);
       }
     }
@@ -191,15 +427,15 @@ async function promptInit() {
 }
 
 // src/commands/migrate.ts
-import * as p4 from "@clack/prompts";
-import chalk6 from "chalk";
+import * as p3 from "@clack/prompts";
+import chalk7 from "chalk";
 import { basename } from "path";
 
 // src/lib/firebase.ts
 async function initFirebase(serviceAccountPath) {
   const admin = await import("firebase-admin");
-  const { readFileSync: readFileSync4 } = await import("fs");
-  const serviceAccount = JSON.parse(readFileSync4(serviceAccountPath, "utf-8"));
+  const { readFileSync: readFileSync5 } = await import("fs");
+  const serviceAccount = JSON.parse(readFileSync5(serviceAccountPath, "utf-8"));
   if (!admin.default.apps.length) {
     admin.default.initializeApp({
       credential: admin.default.credential.cert(serviceAccount),
@@ -214,12 +450,12 @@ async function initFirebase(serviceAccountPath) {
 }
 
 // src/lib/progress.ts
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 import cliProgress from "cli-progress";
 function createProgressBar(label) {
   const bar = new cliProgress.SingleBar(
     {
-      format: chalk5.cyan(label) + " [{bar}] {percentage}% | {value}/{total}",
+      format: chalk6.cyan(label) + " [{bar}] {percentage}% | {value}/{total}",
       barCompleteChar: "\u2588",
       barIncompleteChar: "\u2591",
       hideCursor: true
@@ -231,32 +467,38 @@ function createProgressBar(label) {
 
 // src/lib/sdk.ts
 import { Globio } from "@globio/sdk";
-function getClient() {
-  const apiKey = config.requireAuth();
-  config.requireProject();
+function getClient(profileName) {
+  const { pat } = config.requireAuth(profileName);
+  const { projectId } = config.requireProject(profileName);
+  const profile = config.getProfile(profileName);
+  const apiKey = profile?.project_api_key ?? pat;
+  void projectId;
   return new Globio({ apiKey });
 }
 
 // src/commands/migrate.ts
 var version2 = getCliVersion();
+function resolveProfileName(profile) {
+  return profile ?? config.getActiveProfile() ?? "default";
+}
 async function migrateFirestore(options) {
   printBanner(version2);
-  p4.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
+  p3.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
   const { firestore } = await initFirebase(options.from);
-  const client = getClient();
+  const client = getClient(resolveProfileName(options.profile));
   let collections = [];
   if (options.all) {
     const snapshot = await firestore.listCollections();
     collections = snapshot.map((collection) => collection.id);
     console.log(
-      chalk6.cyan(
+      chalk7.cyan(
         `Found ${collections.length} collections: ${collections.join(", ")}`
       )
     );
   } else if (options.collection) {
     collections = [options.collection];
   } else {
-    console.log(chalk6.red("Specify --collection <name> or --all"));
+    console.log(chalk7.red("Specify --collection <name> or --all"));
     process.exit(1);
   }
   const results = {};
@@ -301,32 +543,32 @@ async function migrateFirestore(options) {
     }
     bar.stop();
     console.log(
-      chalk6.green(`  \u2713 ${results[collectionId].success} documents migrated`)
+      chalk7.green(`  \u2713 ${results[collectionId].success} documents migrated`)
     );
     if (results[collectionId].failed > 0) {
-      console.log(chalk6.red(`  \u2717 ${results[collectionId].failed} failed`));
+      console.log(chalk7.red(`  \u2717 ${results[collectionId].failed} failed`));
       console.log(
-        chalk6.gray(
+        chalk7.gray(
           "  Failed IDs: " + results[collectionId].failedIds.slice(0, 10).join(", ") + (results[collectionId].failedIds.length > 10 ? "..." : "")
         )
       );
     }
   }
   console.log("");
-  p4.outro(
+  p3.outro(
     orange("\u2713") + "  Migration complete.\n\n  " + muted("Your Firebase data is intact.") + "\n  " + muted("Delete it manually when ready.")
   );
 }
 async function migrateFirebaseStorage(options) {
   printBanner(version2);
-  p4.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
+  p3.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
   const { storage } = await initFirebase(options.from);
-  const client = getClient();
+  const client = getClient(resolveProfileName(options.profile));
   const bucketName = options.bucket.replace(/^gs:\/\//, "");
   const bucket = storage.bucket(bucketName);
   const prefix = options.folder ? options.folder.replace(/^\//, "") : "";
   const [files] = await bucket.getFiles(prefix ? { prefix } : {});
-  console.log(chalk6.cyan(`Found ${files.length} files to migrate`));
+  console.log(chalk7.cyan(`Found ${files.length} files to migrate`));
   const bar = createProgressBar("Storage");
   bar.start(files.length, 0);
   let success = 0;
@@ -354,39 +596,195 @@ async function migrateFirebaseStorage(options) {
   }
   bar.stop();
   console.log("");
-  console.log(chalk6.green(`  \u2713 ${success} files migrated`));
+  console.log(chalk7.green(`  \u2713 ${success} files migrated`));
   if (failed > 0) {
-    console.log(chalk6.red(`  \u2717 ${failed} failed`));
+    console.log(chalk7.red(`  \u2717 ${failed} failed`));
   }
-  p4.outro(
+  p3.outro(
     orange("\u2713") + "  Migration complete.\n\n  " + muted("Your Firebase data is intact.") + "\n  " + muted("Delete it manually when ready.")
   );
 }
 
+// src/commands/projects.ts
+import * as p4 from "@clack/prompts";
+import chalk8 from "chalk";
+function slugify(value) {
+  return value.toLowerCase().trim().replace(/[^a-z0-9\\s-]/g, "").replace(/\\s+/g, "-").replace(/-+/g, "-");
+}
+function resolveProfileName2(profileName) {
+  return profileName ?? config.getActiveProfile() ?? "default";
+}
+async function createServerKey(projectId, profileName) {
+  const created = await manageRequest(`/projects/${projectId}/keys`, {
+    method: "POST",
+    body: {
+      name: "CLI server key",
+      scope: "server"
+    },
+    profileName
+  });
+  if (!created.token) {
+    throw new Error("Management API did not return a project API key");
+  }
+  return created.token;
+}
+async function projectsList(options = {}) {
+  const profileName = resolveProfileName2(options.profile);
+  config.requireAuth(profileName);
+  const projects2 = await manageRequest("/projects", { profileName });
+  const activeProjectId = config.getProfile(profileName)?.active_project_id;
+  const grouped = /* @__PURE__ */ new Map();
+  for (const project of projects2) {
+    const list = grouped.get(project.org_name) ?? [];
+    list.push(project);
+    grouped.set(project.org_name, list);
+  }
+  console.log("");
+  if (!projects2.length) {
+    console.log(chalk8.gray("No projects found."));
+    console.log("");
+    return;
+  }
+  for (const [orgName, orgProjects] of grouped.entries()) {
+    console.log(chalk8.cyan(`org: ${orgName}`));
+    for (const project of orgProjects) {
+      const marker = project.id === activeProjectId ? chalk8.green("\u25CF") : chalk8.gray("\u25CB");
+      const active = project.id === activeProjectId ? chalk8.green("  (active)") : "";
+      console.log(`  ${marker} ${project.slug.padEnd(22)} ${chalk8.gray(project.id)}${active}`);
+    }
+    console.log("");
+  }
+}
+async function projectsUse(projectId, options = {}) {
+  const profileName = resolveProfileName2(options.profile);
+  config.requireAuth(profileName);
+  const projects2 = await manageRequest("/projects", { profileName });
+  const project = projects2.find((item) => item.id === projectId);
+  if (!project) {
+    console.log(chalk8.red(`Project not found: ${projectId}`));
+    process.exit(1);
+  }
+  await manageRequest(`/projects/${projectId}/keys`, { profileName });
+  const apiKey = await createServerKey(projectId, profileName);
+  config.setProfile(profileName, {
+    active_project_id: project.id,
+    active_project_name: project.name,
+    project_api_key: apiKey
+  });
+  config.setActiveProfile(profileName);
+  console.log(
+    chalk8.green("Active project set to: ") + chalk8.cyan(`${project.name} (${project.id})`)
+  );
+}
+async function projectsCreate(options = {}) {
+  const profileName = resolveProfileName2(options.profile);
+  config.requireAuth(profileName);
+  const orgs = await manageRequest("/orgs", { profileName });
+  if (!orgs.length) {
+    console.log(chalk8.red("No organizations found. Create one in the console first."));
+    process.exit(1);
+  }
+  const orgId = await p4.select({
+    message: "Select an organization",
+    options: orgs.map((org) => ({
+      value: org.id,
+      label: org.name,
+      hint: org.role
+    }))
+  });
+  if (p4.isCancel(orgId)) {
+    p4.cancel("Project creation cancelled.");
+    process.exit(0);
+  }
+  const values = await p4.group(
+    {
+      name: () => p4.text({
+        message: "Project name",
+        validate: (value) => !value ? "Project name is required" : void 0
+      }),
+      slug: ({ results }) => p4.text({
+        message: "Project slug",
+        initialValue: slugify(String(results.name ?? "")),
+        validate: (value) => !value ? "Project slug is required" : void 0
+      }),
+      environment: () => p4.select({
+        message: "Environment",
+        options: [
+          { value: "development", label: "development" },
+          { value: "staging", label: "staging" },
+          { value: "production", label: "production" }
+        ]
+      })
+    },
+    {
+      onCancel: () => {
+        p4.cancel("Project creation cancelled.");
+        process.exit(0);
+      }
+    }
+  );
+  const result = await manageRequest("/projects", {
+    method: "POST",
+    body: {
+      org_id: orgId,
+      name: values.name,
+      slug: values.slug,
+      environment: values.environment
+    },
+    profileName
+  });
+  config.setProfile(profileName, {
+    active_project_id: result.project.id,
+    active_project_name: result.project.name,
+    project_api_key: result.keys.server
+  });
+  config.setActiveProfile(profileName);
+  console.log("");
+  console.log(chalk8.green("Project created successfully."));
+  console.log(chalk8.cyan("Project: ") + `${result.project.name} (${result.project.id})`);
+  console.log(chalk8.cyan("Client key: ") + result.keys.client);
+  console.log(chalk8.cyan("Server key: ") + result.keys.server);
+  console.log("");
+}
+
 // src/commands/init.ts
 var version3 = getCliVersion();
-async function init() {
+async function init(options = {}) {
   printBanner(version3);
   p5.intro(orange("\u21D2\u21D2") + "  Initialize your Globio project");
+  const profileName = options.profile ?? config.getActiveProfile() ?? "default";
+  const profile = config.getProfile(profileName);
+  if (!profile) {
+    console.log("Run: npx @globio/cli login --profile " + profileName);
+    process.exit(1);
+  }
+  if (!profile.active_project_id) {
+    await projectsCreate({ profile: profileName });
+  } else {
+    await projectsUse(profile.active_project_id, { profile: profileName });
+  }
   const values = await promptInit();
-  config.set({
-    apiKey: values.apiKey,
-    projectId: values.projectId
-  });
-  if (!existsSync("globio.config.ts")) {
-    writeFileSync(
+  const activeProfile = config.getProfile(profileName);
+  const activeProjectKey = activeProfile?.project_api_key;
+  const { projectId: activeProjectId } = config.requireProject(profileName);
+  if (!activeProjectKey) {
+    console.log("No project API key cached. Run: npx @globio/cli projects use " + activeProjectId);
+    process.exit(1);
+  }
+  if (!existsSync2("globio.config.ts")) {
+    writeFileSync2(
       "globio.config.ts",
-      `import { GlobioClient } from '@globio/sdk';
+      `import { Globio } from '@globio/sdk';
 
-export const globio = new GlobioClient({
+export const globio = new Globio({
   apiKey: process.env.GLOBIO_API_KEY!,
 });
 `
     );
     printSuccess("Created globio.config.ts");
   }
-  if (!existsSync(".env")) {
-    writeFileSync(".env", `GLOBIO_API_KEY=${values.apiKey}
+  if (!existsSync2(".env")) {
+    writeFileSync2(".env", `GLOBIO_API_KEY=${activeProjectKey}
 `);
     printSuccess("Created .env");
   }
@@ -395,40 +793,31 @@ export const globio = new GlobioClient({
     printSuccess("Starting Firebase migration...");
     await migrateFirestore({
       from: values.serviceAccountPath,
-      all: true
+      all: true,
+      profile: profileName
     });
     const serviceAccount = JSON.parse(
-      readFileSync2(values.serviceAccountPath, "utf-8")
+      readFileSync3(values.serviceAccountPath, "utf-8")
     );
     await migrateFirebaseStorage({
       from: values.serviceAccountPath,
       bucket: `${serviceAccount.project_id}.appspot.com`,
-      all: true
+      all: true,
+      profile: profileName
     });
   }
   console.log("");
   p5.outro(
-    orange("\u21D2\u21D2") + "  Your project is ready.\n\n  " + muted("Next steps:") + "\n\n  npm install @globio/sdk\n  npx @globio/cli functions create my-first-function"
-  );
-}
+    orange("\u21D2\u21D2") + "  Your project is ready.\n\n  " + muted("Next steps:") + `
 
-// src/commands/projects.ts
-import chalk7 from "chalk";
-async function projectsList() {
-  const cfg = config.get();
-  console.log("");
-  console.log(
-    chalk7.cyan("Active project: ") + (cfg.projectId ?? chalk7.gray("none"))
+  npm install @globio/sdk
+  # active project: ${activeProjectId}
+  npx @globio/cli functions create my-first-function`
   );
-  console.log("");
-}
-async function projectsUse(projectId) {
-  config.set({ projectId });
-  console.log(chalk7.green("Active project set to: ") + chalk7.cyan(projectId));
 }
 
 // src/commands/services.ts
-import chalk8 from "chalk";
+import chalk9 from "chalk";
 var ALL_SERVICES = [
   "id",
   "doc",
@@ -441,30 +830,36 @@ var ALL_SERVICES = [
   "brain",
   "code"
 ];
-async function servicesList() {
+async function servicesList(options = {}) {
+  void options.profile;
+  void config;
   console.log("");
-  console.log(chalk8.cyan("Available Globio services:"));
+  console.log(chalk9.cyan("Available Globio services:"));
   ALL_SERVICES.forEach((service) => {
-    console.log("  " + chalk8.white(service));
+    console.log("  " + chalk9.white(service));
   });
   console.log("");
   console.log(
-    chalk8.gray("Manage service access via console.globio.stanlink.online")
+    chalk9.gray("Manage service access via console.globio.stanlink.online")
   );
   console.log("");
 }
 
 // src/commands/functions.ts
-import chalk9 from "chalk";
+import chalk10 from "chalk";
 import ora from "ora";
-import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-async function functionsList() {
-  const client = getClient();
+import { existsSync as existsSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+function resolveProfileName3(profile) {
+  return profile ?? config.getActiveProfile() ?? "default";
+}
+async function functionsList(options = {}) {
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora("Fetching functions...").start();
   const result = await client.code.listFunctions();
   spinner2.stop();
   if (!result.success || !result.data.length) {
-    console.log(chalk9.gray("No functions found."));
+    console.log(chalk10.gray("No functions found."));
     return;
   }
   console.log("");
@@ -478,10 +873,10 @@ async function functionsList() {
   });
   console.log("");
 }
-async function functionsCreate(slug) {
+async function functionsCreate(slug, _options = {}) {
   const filename = `${slug}.js`;
-  if (existsSync2(filename)) {
-    console.log(chalk9.yellow(`${filename} already exists.`));
+  if (existsSync3(filename)) {
+    console.log(chalk10.yellow(`${filename} already exists.`));
     return;
   }
   const template = `/**
@@ -499,24 +894,25 @@ async function handler(input, globio) {
   };
 }
 `;
-  writeFileSync2(filename, template);
-  console.log(chalk9.green(`Created ${filename}`));
+  writeFileSync3(filename, template);
+  console.log(chalk10.green(`Created ${filename}`));
   console.log(
-    chalk9.gray(`Deploy with: npx @globio/cli functions deploy ${slug}`)
+    chalk10.gray(`Deploy with: npx @globio/cli functions deploy ${slug}`)
   );
 }
 async function functionsDeploy(slug, options) {
   const filename = options.file ?? `${slug}.js`;
-  if (!existsSync2(filename)) {
+  if (!existsSync3(filename)) {
     console.log(
-      chalk9.red(
+      chalk10.red(
         `File not found: ${filename}. Create it with: npx @globio/cli functions create ${slug}`
       )
     );
     process.exit(1);
   }
-  const code = readFileSync3(filename, "utf-8");
-  const client = getClient();
+  const code = readFileSync4(filename, "utf-8");
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(`Deploying ${slug}...`).start();
   const existing = await client.code.getFunction(slug);
   let result;
@@ -546,16 +942,17 @@ async function functionsInvoke(slug, options) {
     try {
       input = JSON.parse(options.input);
     } catch {
-      console.error(chalk9.red("--input must be valid JSON"));
+      console.error(chalk10.red("--input must be valid JSON"));
       process.exit(1);
     }
   }
-  const client = getClient();
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(`Invoking ${slug}...`).start();
   const result = await client.code.invoke(slug, input);
   spinner2.stop();
   if (!result.success) {
-    console.log(chalk9.red("Invocation failed"));
+    console.log(chalk10.red("Invocation failed"));
     console.error(result.error.message);
     return;
   }
@@ -567,12 +964,13 @@ Duration: ${result.data.duration_ms}ms`));
 }
 async function functionsLogs(slug, options) {
   const limit = options.limit ? parseInt(options.limit, 10) : 20;
-  const client = getClient();
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora("Fetching invocations...").start();
   const result = await client.code.getInvocations(slug, limit);
   spinner2.stop();
   if (!result.success || !result.data.length) {
-    console.log(chalk9.gray("No invocations yet."));
+    console.log(chalk10.gray("No invocations yet."));
     return;
   }
   console.log("");
@@ -580,13 +978,14 @@ async function functionsLogs(slug, options) {
     const status = inv.success ? "\x1B[38;2;244;140;6m\u2713\x1B[0m" : "\x1B[31m\u2717\x1B[0m";
     const date = new Date(inv.invoked_at * 1e3).toISOString().replace("T", " ").slice(0, 19);
     console.log(
-      `  ${status}  ${chalk9.gray(date)}  ${inv.duration_ms}ms  ${chalk9.gray(`[${inv.trigger_type}]`)}`
+      `  ${status}  ${chalk10.gray(date)}  ${inv.duration_ms}ms  ${chalk10.gray(`[${inv.trigger_type}]`)}`
     );
   });
   console.log("");
 }
-async function functionsDelete(slug) {
-  const client = getClient();
+async function functionsDelete(slug, options = {}) {
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(`Deleting ${slug}...`).start();
   const result = await client.code.deleteFunction(slug);
   if (!result.success) {
@@ -596,8 +995,9 @@ async function functionsDelete(slug) {
   }
   spinner2.succeed(`Deleted ${slug}`);
 }
-async function functionsToggle(slug, active) {
-  const client = getClient();
+async function functionsToggle(slug, active, options = {}) {
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(
     `${active ? "Enabling" : "Disabling"} ${slug}...`
   ).start();
@@ -616,28 +1016,50 @@ var program = new Command();
 program.name("globio").description("The official Globio CLI").version(version4).addHelpText("beforeAll", () => {
   printBanner(version4);
   return "";
-});
-program.command("login").description("Log in to your Globio account").action(login);
-program.command("logout").description("Log out").action(logout);
-program.command("whoami").description("Show current account and project").action(whoami);
-program.command("init").description("Initialize a Globio project").action(init);
+}).addHelpText(
+  "after",
+  `
+Examples:
+  $ globio login
+  $ globio login --profile work
+  $ globio use work
+  $ globio projects list
+  $ globio projects use proj_abc123
+  $ globio functions deploy my-function
+  $ globio migrate firestore --from ./key.json --all
+
+Credentials are stored in ~/.globio/profiles/
+`
+);
+program.command("login").description("Log in to your Globio account").option("-p, --profile <name>", "Profile name", "default").option("--token", "Use a personal access token").action(login);
+program.command("logout").description("Log out").option("--profile <name>", "Use a specific profile").action(logout);
+program.command("whoami").description("Show current account and project").option("--profile <name>", "Use a specific profile").action(whoami);
+program.command("use <profile>").description("Switch active profile").action(useProfile);
+program.command("init").description("Initialize a Globio project").option("--profile <name>", "Use a specific profile").action(init);
 var projects = program.command("projects").description("Manage projects");
-projects.command("list").description("List projects").action(projectsList);
-projects.command("use <projectId>").description("Set active project").action(projectsUse);
-program.command("services").description("List available Globio services").action(servicesList);
+projects.command("list").description("List projects").option("--profile <name>", "Use a specific profile").action(projectsList);
+projects.command("create").description("Create a project").option("--profile <name>", "Use a specific profile").action(projectsCreate);
+projects.command("use <projectId>").description("Set active project").option("--profile <name>", "Use a specific profile").action(projectsUse);
+program.command("services").description("List available Globio services").option("--profile <name>", "Use a specific profile").action(servicesList);
 var functions = program.command("functions").alias("fn").description("Manage GlobalCode edge functions");
-functions.command("list").description("List all functions").action(functionsList);
-functions.command("create <slug>").description("Scaffold a new function file locally").action(functionsCreate);
-functions.command("deploy <slug>").description("Deploy a function to GlobalCode").option("-f, --file <path>", "Path to function file").option("-n, --name <name>", "Display name").action(functionsDeploy);
-functions.command("invoke <slug>").description("Invoke a function").option("-i, --input <json>", "JSON input payload").action(functionsInvoke);
-functions.command("logs <slug>").description("Show invocation history").option("-l, --limit <n>", "Number of entries", "20").action(functionsLogs);
-functions.command("delete <slug>").description("Delete a function").action(functionsDelete);
-functions.command("enable <slug>").description("Enable a function").action((slug) => functionsToggle(slug, true));
-functions.command("disable <slug>").description("Disable a function").action((slug) => functionsToggle(slug, false));
+functions.command("list").description("List all functions").option("--profile <name>", "Use a specific profile").action(functionsList);
+functions.command("create <slug>").description("Scaffold a new function file locally").option("--profile <name>", "Use a specific profile").action(functionsCreate);
+functions.command("deploy <slug>").description("Deploy a function to GlobalCode").option("-f, --file <path>", "Path to function file").option("-n, --name <name>", "Display name").option("--profile <name>", "Use a specific profile").action(functionsDeploy);
+functions.command("invoke <slug>").description("Invoke a function").option("-i, --input <json>", "JSON input payload").option("--profile <name>", "Use a specific profile").action(functionsInvoke);
+functions.command("logs <slug>").description("Show invocation history").option("-l, --limit <n>", "Number of entries", "20").option("--profile <name>", "Use a specific profile").action(functionsLogs);
+functions.command("delete <slug>").description("Delete a function").option("--profile <name>", "Use a specific profile").action(functionsDelete);
+functions.command("enable <slug>").description("Enable a function").option("--profile <name>", "Use a specific profile").action((slug, options) => functionsToggle(slug, true, options));
+functions.command("disable <slug>").description("Disable a function").option("--profile <name>", "Use a specific profile").action((slug, options) => functionsToggle(slug, false, options));
 var migrate = program.command("migrate").description("Migrate from Firebase to Globio");
-migrate.command("firestore").description("Migrate Firestore collections to GlobalDoc").requiredOption("--from <path>", "Path to Firebase service account JSON").option("--collection <name>", "Migrate a specific collection").option("--all", "Migrate all collections").action(migrateFirestore);
-migrate.command("firebase-storage").description("Migrate Firebase Storage to GlobalVault").requiredOption("--from <path>", "Path to Firebase service account JSON").requiredOption("--bucket <name>", "Firebase Storage bucket").option("--folder <path>", "Migrate a specific folder").option("--all", "Migrate all files").action(migrateFirebaseStorage);
-if (process.argv.length <= 2) {
-  program.help();
+migrate.command("firestore").description("Migrate Firestore collections to GlobalDoc").requiredOption("--from <path>", "Path to Firebase service account JSON").option("--collection <name>", "Migrate a specific collection").option("--all", "Migrate all collections").option("--profile <name>", "Use a specific profile").action(migrateFirestore);
+migrate.command("firebase-storage").description("Migrate Firebase Storage to GlobalVault").requiredOption("--from <path>", "Path to Firebase service account JSON").requiredOption("--bucket <name>", "Firebase Storage bucket").option("--folder <path>", "Migrate a specific folder").option("--all", "Migrate all files").option("--profile <name>", "Use a specific profile").action(migrateFirebaseStorage);
+async function main() {
+  if (process.argv.length <= 2) {
+    program.help();
+  }
+  await program.parseAsync();
 }
-await program.parseAsync();
+main().catch((error) => {
+  console.error(error instanceof Error ? error.message : error);
+  process.exit(1);
+});