@globio/cli 0.1.3 → 0.1.5

package/dist/index.js

@@ -10,97 +10,134 @@ import chalk2 from "chalk";
 
 // src/lib/config.ts
 import chalk from "chalk";
-import Conf from "conf";
-var store = new Conf({
-  projectName: "globio",
-  defaults: {}
-});
+import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "fs";
+import os from "os";
+import path from "path";
+var baseDir = path.join(os.homedir(), ".globio");
+var profilesDir = path.join(baseDir, "profiles");
+var configPath = path.join(baseDir, "config.json");
+function ensureBaseDir() {
+  mkdirSync(baseDir, { recursive: true });
+}
+function ensureProfilesDir() {
+  ensureBaseDir();
+  mkdirSync(profilesDir, { recursive: true });
+}
+function readGlobalConfig() {
+  if (!existsSync(configPath)) {
+    return { active_profile: "default" };
+  }
+  try {
+    const raw = JSON.parse(readFileSync(configPath, "utf-8"));
+    return {
+      active_profile: raw.active_profile ?? "default"
+    };
+  } catch {
+    return { active_profile: "default" };
+  }
+}
+function writeGlobalConfig(data) {
+  ensureBaseDir();
+  writeFileSync(configPath, JSON.stringify(data, null, 2) + "\n");
+}
+function profilePath(name) {
+  return path.join(profilesDir, `${name}.json`);
+}
+function readProfile(name) {
+  const file = profilePath(name);
+  if (!existsSync(file)) return null;
+  try {
+    return JSON.parse(readFileSync(file, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeProfile(name, data) {
+  ensureProfilesDir();
+  writeFileSync(profilePath(name), JSON.stringify(data, null, 2) + "\n");
+}
 var config = {
-  get: () => store.store,
-  set: (values) => {
-    Object.entries(values).forEach(([key, value]) => {
-      if (value !== void 0) {
-        store.set(key, value);
-      }
-    });
+  getBaseDir: () => baseDir,
+  getProfilesDir: () => profilesDir,
+  getActiveProfile: () => readGlobalConfig().active_profile,
+  setActiveProfile: (name) => {
+    writeGlobalConfig({ active_profile: name });
   },
-  clear: () => store.clear(),
-  getPat: () => store.get("pat"),
-  requirePat: () => {
-    const pat = store.get("pat");
-    if (!pat) {
-      console.error(chalk.red("Not logged in. Run: npx @globio/cli login"));
-      process.exit(1);
-    }
-    return pat;
+  getProfile: (name) => {
+    const profileName = name ?? config.getActiveProfile();
+    if (!profileName) return null;
+    return readProfile(profileName);
   },
-  requireProject: () => {
-    const projectId = store.get("projectId");
-    if (!projectId) {
-      console.error(
-        chalk.red("No active project. Run: npx @globio/cli projects use <projectId>")
-      );
-      process.exit(1);
-    }
-    return projectId;
+  setProfile: (name, data) => {
+    const existing = readProfile(name);
+    const next = {
+      pat: data.pat ?? existing?.pat ?? "",
+      account_email: data.account_email ?? existing?.account_email ?? "",
+      account_name: data.account_name ?? existing?.account_name ?? "",
+      active_project_id: data.active_project_id ?? existing?.active_project_id,
+      active_project_name: data.active_project_name ?? existing?.active_project_name,
+      project_api_key: data.project_api_key ?? existing?.project_api_key,
+      created_at: data.created_at ?? existing?.created_at ?? Date.now()
+    };
+    writeProfile(name, next);
   },
-  setProjectAuth: (projectId, apiKey, projectName) => {
-    const projectApiKeys = store.get("projectApiKeys") ?? {};
-    const projectNames = store.get("projectNames") ?? {};
-    projectApiKeys[projectId] = apiKey;
-    if (projectName) {
-      projectNames[projectId] = projectName;
-    }
-    store.set("projectApiKeys", projectApiKeys);
-    store.set("projectNames", projectNames);
-    store.set("projectId", projectId);
-    if (projectName) {
-      store.set("projectName", projectName);
+  deleteProfile: (name) => {
+    const file = profilePath(name);
+    if (existsSync(file)) {
+      rmSync(file);
     }
   },
-  getProjectApiKey: (projectId) => {
-    const projectApiKeys = store.get("projectApiKeys") ?? {};
-    return projectApiKeys[projectId];
+  listProfiles: () => {
+    if (!existsSync(profilesDir)) return [];
+    return readdirSync(profilesDir).filter((file) => file.endsWith(".json")).map((file) => file.replace(/\.json$/, "")).sort();
   },
-  requireProjectApiKey: () => {
-    const projectId = store.get("projectId");
-    if (!projectId) {
-      console.error(
-        chalk.red("No active project. Run: npx @globio/cli projects use <projectId>")
-      );
+  getActiveProfileData: () => {
+    const active = config.getActiveProfile();
+    if (!active) return null;
+    return config.getProfile(active);
+  },
+  requireAuth: (profileName) => {
+    const resolvedProfile = profileName ?? config.getActiveProfile() ?? "default";
+    const profile = config.getProfile(resolvedProfile);
+    if (!profile?.pat) {
+      console.error(chalk.red("Not logged in. Run: npx @globio/cli login"));
       process.exit(1);
     }
-    const projectApiKeys = store.get("projectApiKeys") ?? {};
-    const apiKey = projectApiKeys[projectId];
-    if (!apiKey) {
+    return { pat: profile.pat, profileName: resolvedProfile };
+  },
+  requireProject: (profileName) => {
+    const resolvedProfile = profileName ?? config.getActiveProfile() ?? "default";
+    const profile = config.getProfile(resolvedProfile);
+    if (!profile?.active_project_id) {
       console.error(
-        chalk.red(
-          "No project API key stored for the active project. Run: npx @globio/cli projects use <projectId>"
-        )
+        chalk.red("No active project. Run: npx @globio/cli projects use <projectId>")
       );
       process.exit(1);
     }
-    return apiKey;
+    return {
+      projectId: profile.active_project_id,
+      projectName: profile.active_project_name ?? "unnamed"
+    };
   }
 };
 
 // src/lib/manage.ts
 var API_BASE_URL = "https://api.globio.stanlink.online";
 var CONSOLE_BASE_URL = "https://console.globio.stanlink.online";
-function getAuthToken(explicitToken) {
+function getAuthToken(explicitToken, profileName) {
   if (explicitToken) return explicitToken;
-  return config.getPat();
+  return config.getProfile(profileName)?.pat;
 }
-async function manageRequest(path, options = {}) {
+async function manageRequest(path2, options = {}) {
   const headers = new Headers();
   if (!(options.body instanceof FormData)) {
     headers.set("Content-Type", "application/json");
   }
-  const token = getAuthToken(options.token);
+  const token = getAuthToken(options.token, options.profileName);
   if (token) {
     headers.set("Authorization", `Bearer ${token}`);
   }
-  const response = await fetch(`${API_BASE_URL}/manage${path}`, {
+  const response = await fetch(`${API_BASE_URL}/manage${path2}`, {
     method: options.method ?? "GET",
     headers,
     body: options.body ? JSON.stringify(options.body) : void 0
@@ -116,7 +153,7 @@ function getConsoleCliAuthUrl(state) {
 }
 
 // src/lib/banner.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import figlet from "figlet";
 import gradientString from "gradient-string";
 var globioGradient = gradientString(
@@ -144,7 +181,7 @@ var orange = (s) => "\x1B[38;2;244;140;6m" + s + "\x1B[0m";
 var gold = (s) => "\x1B[38;2;255;208;0m" + s + "\x1B[0m";
 var muted = (s) => "\x1B[2m" + s + "\x1B[0m";
 function getCliVersion() {
-  const file = readFileSync(new URL("../package.json", import.meta.url), "utf8");
+  const file = readFileSync2(new URL("../package.json", import.meta.url), "utf8");
   return JSON.parse(file).version;
 }
 
@@ -159,14 +196,23 @@ function sleep(ms) {
 }
 async function savePat(token) {
   const account = await manageRequest("/account", { token });
-  config.set({
-    pat: token,
-    accountEmail: account.email,
-    accountName: account.display_name ?? account.email
-  });
   return account;
 }
-async function runTokenLogin() {
+function warnOnDuplicateAccount(accountEmail, targetProfileName) {
+  const allProfiles = config.listProfiles();
+  const duplicate = allProfiles.find((name) => {
+    const profile = config.getProfile(name);
+    return profile?.account_email === accountEmail && name !== targetProfileName;
+  });
+  if (!duplicate) return;
+  console.log("");
+  console.log(
+    chalk2.yellow("  \u26A0  ") + chalk2.white(accountEmail) + chalk2.gray(" is already logged in under profile ") + orange(`"${duplicate}"`) + chalk2.gray(".")
+  );
+  console.log("");
+}
+async function runTokenLogin(profileName) {
+  const hadProfiles = config.listProfiles().length > 0;
   const token = await p.text({
     message: "Paste your personal access token",
     placeholder: "glo_pat_...",
@@ -184,17 +230,29 @@ async function runTokenLogin() {
   spinner2.start("Validating personal access token...");
   try {
     const account = await savePat(token);
+    warnOnDuplicateAccount(account.email, profileName);
+    config.setProfile(profileName, {
+      pat: token,
+      account_email: account.email,
+      account_name: account.display_name ?? account.email,
+      created_at: Date.now()
+    });
+    if (profileName === "default" || !hadProfiles) {
+      config.setActiveProfile(profileName);
+    }
     spinner2.stop("Token validated.");
-    p.outro(`Logged in as ${account.email}`);
+    p.outro(`Logged in as ${account.email}
+Profile: ${profileName}`);
   } catch (error) {
     spinner2.stop("Validation failed.");
     p.outro(chalk2.red(error instanceof Error ? error.message : "Could not validate token"));
     process.exit(1);
   }
 }
-async function runBrowserLogin() {
+async function runBrowserLogin(profileName) {
   const state = crypto.randomUUID();
   const spinner2 = p.spinner();
+  const hadProfiles = config.listProfiles().length > 0;
   await manageRequest("/cli-auth/request", {
     method: "POST",
     body: { state }
@@ -220,13 +278,19 @@ async function runBrowserLogin() {
           method: "POST",
           body: { code: status.code }
         });
-        config.set({
+        warnOnDuplicateAccount(exchange.account.email, profileName);
+        config.setProfile(profileName, {
           pat: exchange.token,
-          accountEmail: exchange.account.email,
-          accountName: exchange.account.display_name ?? exchange.account.email
+          account_email: exchange.account.email,
+          account_name: exchange.account.display_name ?? exchange.account.email,
+          created_at: Date.now()
         });
+        if (profileName === "default" || !hadProfiles) {
+          config.setActiveProfile(profileName);
+        }
         spinner2.stop("Browser approval received.");
-        p.outro(`Logged in as ${exchange.account.email}`);
+        p.outro(`Logged in as ${exchange.account.email}
+Profile: ${profileName}`);
         return;
       }
     } catch {
@@ -239,8 +303,20 @@ async function runBrowserLogin() {
 }
 async function login(options = {}) {
   printBanner(version);
+  const profileName = options.profile ?? "default";
+  const existing = config.getProfile(profileName);
+  if (existing) {
+    const proceed = await p.confirm({
+      message: `Already logged in as ${existing.account_email} on profile "${profileName}". Replace?`,
+      initialValue: false
+    });
+    if (p.isCancel(proceed) || !proceed) {
+      p.outro("Login cancelled.");
+      return;
+    }
+  }
   if (options.token) {
-    await runTokenLogin();
+    await runTokenLogin(profileName);
     return;
   }
   const choice = await p.select({
@@ -255,11 +331,11 @@ async function login(options = {}) {
     process.exit(0);
   }
   if (choice === "token") {
-    await runTokenLogin();
+    await runTokenLogin(profileName);
     return;
   }
   try {
-    await runBrowserLogin();
+    await runBrowserLogin(profileName);
   } catch (error) {
     p.outro(chalk2.red(error instanceof Error ? error.message : "Could not connect to Globio."));
     process.exit(1);
@@ -267,51 +343,98 @@ async function login(options = {}) {
 }
 
 // src/auth/logout.ts
-import * as p2 from "@clack/prompts";
 import chalk3 from "chalk";
-async function logout() {
-  config.clear();
-  p2.outro(chalk3.green("Logged out."));
+async function logout(options = {}) {
+  const activeProfile = config.getActiveProfile();
+  const profileName = options.profile ?? activeProfile;
+  const profile = profileName ? config.getProfile(profileName) : null;
+  if (!profileName || !profile) {
+    console.log(chalk3.yellow(`No active session on profile "${profileName || "default"}".`));
+    return;
+  }
+  config.deleteProfile(profileName);
+  if (profileName === activeProfile) {
+    const remaining = config.listProfiles();
+    if (remaining.length > 0) {
+      config.setActiveProfile(remaining[0]);
+      console.log(chalk3.green(`Logged out. Switched to profile: ${remaining[0]}`));
+      return;
+    }
+    config.setActiveProfile("");
+    console.log(chalk3.green("Logged out."));
+    return;
+  }
+  console.log(chalk3.green(`Logged out profile: ${profileName}`));
 }
 
-// src/auth/whoami.ts
+// src/auth/useProfile.ts
 import chalk4 from "chalk";
-async function whoami() {
-  const cfg = config.get();
-  if (!cfg.pat) {
-    console.log(chalk4.red("Not logged in."));
+async function useProfile(profileName) {
+  const profile = config.getProfile(profileName);
+  if (!profile) {
+    console.log(
+      chalk4.red(
+        `Profile "${profileName}" not found. Run: globio login --profile ${profileName}`
+      )
+    );
+    process.exit(1);
+  }
+  config.setActiveProfile(profileName);
+  console.log(
+    chalk4.green("Switched to profile: ") + orange(profileName) + ` (${profile.account_email})`
+  );
+}
+
+// src/auth/whoami.ts
+import chalk5 from "chalk";
+async function whoami(options = {}) {
+  const profileName = options.profile ?? config.getActiveProfile() ?? "default";
+  const profile = config.getProfile(profileName);
+  if (!profile) {
+    console.log(chalk5.red("Not logged in. Run: globio login"));
     return;
   }
+  const allProfiles = config.listProfiles();
+  const activeProfile = config.getActiveProfile();
   console.log("");
-  console.log(chalk4.cyan("Account:   ") + (cfg.accountEmail ?? "unknown"));
-  console.log(chalk4.cyan("Name:      ") + (cfg.accountName ?? "unknown"));
   console.log(
-    chalk4.cyan("Project:   ") + (cfg.projectId ? `${cfg.projectName ?? "unnamed"} (${cfg.projectId})` : "none")
+    muted("Profile:  ") + orange(profileName) + (profileName === activeProfile ? muted(" (active)") : "")
   );
+  console.log(muted("Account:  ") + profile.account_email);
+  console.log(muted("Name:     ") + (profile.account_name || "\u2014"));
+  console.log(
+    muted("Project:  ") + (profile.active_project_id ? orange(profile.active_project_name || "unnamed") + muted(` (${profile.active_project_id})`) : chalk5.gray("none \u2014 run: globio projects use <id>"))
+  );
+  if (allProfiles.length > 1) {
+    console.log("");
+    console.log(
+      muted("Other profiles: ") + allProfiles.filter((name) => name !== profileName).join(", ")
+    );
+  }
   console.log("");
 }
 
 // src/commands/init.ts
-import * as p6 from "@clack/prompts";
-import { existsSync, readFileSync as readFileSync2, writeFileSync } from "fs";
+import * as p5 from "@clack/prompts";
+import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 
 // src/prompts/init.ts
-import * as p3 from "@clack/prompts";
+import * as p2 from "@clack/prompts";
 async function promptInit() {
-  return p3.group(
+  return p2.group(
     {
-      migrateFromFirebase: () => p3.confirm({
+      migrateFromFirebase: () => p2.confirm({
         message: "Migrating from Firebase?",
         initialValue: false
       }),
-      serviceAccountPath: ({ results }) => results.migrateFromFirebase ? p3.text({
+      serviceAccountPath: ({ results }) => results.migrateFromFirebase ? p2.text({
         message: "Path to Firebase service account JSON",
         placeholder: "./serviceAccountKey.json"
       }) : Promise.resolve(void 0)
     },
     {
       onCancel: () => {
-        p3.cancel("Cancelled.");
+        p2.cancel("Cancelled.");
         process.exit(0);
       }
     }
@@ -319,15 +442,15 @@ async function promptInit() {
 }
 
 // src/commands/migrate.ts
-import * as p4 from "@clack/prompts";
-import chalk6 from "chalk";
+import * as p3 from "@clack/prompts";
+import chalk7 from "chalk";
 import { basename } from "path";
 
 // src/lib/firebase.ts
 async function initFirebase(serviceAccountPath) {
   const admin = await import("firebase-admin");
-  const { readFileSync: readFileSync4 } = await import("fs");
-  const serviceAccount = JSON.parse(readFileSync4(serviceAccountPath, "utf-8"));
+  const { readFileSync: readFileSync5 } = await import("fs");
+  const serviceAccount = JSON.parse(readFileSync5(serviceAccountPath, "utf-8"));
   if (!admin.default.apps.length) {
     admin.default.initializeApp({
       credential: admin.default.credential.cert(serviceAccount),
@@ -342,12 +465,12 @@ async function initFirebase(serviceAccountPath) {
 }
 
 // src/lib/progress.ts
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 import cliProgress from "cli-progress";
 function createProgressBar(label) {
   const bar = new cliProgress.SingleBar(
     {
-      format: chalk5.cyan(label) + " [{bar}] {percentage}% | {value}/{total}",
+      format: chalk6.cyan(label) + " [{bar}] {percentage}% | {value}/{total}",
       barCompleteChar: "\u2588",
       barIncompleteChar: "\u2591",
       hideCursor: true
@@ -359,31 +482,38 @@ function createProgressBar(label) {
 
 // src/lib/sdk.ts
 import { Globio } from "@globio/sdk";
-function getClient() {
-  const apiKey = config.requireProjectApiKey();
+function getClient(profileName) {
+  const { pat } = config.requireAuth(profileName);
+  const { projectId } = config.requireProject(profileName);
+  const profile = config.getProfile(profileName);
+  const apiKey = profile?.project_api_key ?? pat;
+  void projectId;
   return new Globio({ apiKey });
 }
 
 // src/commands/migrate.ts
 var version2 = getCliVersion();
+function resolveProfileName(profile) {
+  return profile ?? config.getActiveProfile() ?? "default";
+}
 async function migrateFirestore(options) {
   printBanner(version2);
-  p4.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
+  p3.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
   const { firestore } = await initFirebase(options.from);
-  const client = getClient();
+  const client = getClient(resolveProfileName(options.profile));
   let collections = [];
   if (options.all) {
     const snapshot = await firestore.listCollections();
     collections = snapshot.map((collection) => collection.id);
     console.log(
-      chalk6.cyan(
+      chalk7.cyan(
         `Found ${collections.length} collections: ${collections.join(", ")}`
       )
     );
   } else if (options.collection) {
     collections = [options.collection];
   } else {
-    console.log(chalk6.red("Specify --collection <name> or --all"));
+    console.log(chalk7.red("Specify --collection <name> or --all"));
     process.exit(1);
   }
   const results = {};
@@ -428,32 +558,32 @@ async function migrateFirestore(options) {
     }
     bar.stop();
     console.log(
-      chalk6.green(`  \u2713 ${results[collectionId].success} documents migrated`)
+      chalk7.green(`  \u2713 ${results[collectionId].success} documents migrated`)
     );
     if (results[collectionId].failed > 0) {
-      console.log(chalk6.red(`  \u2717 ${results[collectionId].failed} failed`));
+      console.log(chalk7.red(`  \u2717 ${results[collectionId].failed} failed`));
       console.log(
-        chalk6.gray(
+        chalk7.gray(
           "  Failed IDs: " + results[collectionId].failedIds.slice(0, 10).join(", ") + (results[collectionId].failedIds.length > 10 ? "..." : "")
         )
       );
     }
   }
   console.log("");
-  p4.outro(
+  p3.outro(
     orange("\u2713") + "  Migration complete.\n\n  " + muted("Your Firebase data is intact.") + "\n  " + muted("Delete it manually when ready.")
   );
 }
 async function migrateFirebaseStorage(options) {
   printBanner(version2);
-  p4.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
+  p3.intro(gold("\u21D2\u21D2") + "  Firebase \u2192 Globio Migration");
   const { storage } = await initFirebase(options.from);
-  const client = getClient();
+  const client = getClient(resolveProfileName(options.profile));
   const bucketName = options.bucket.replace(/^gs:\/\//, "");
   const bucket = storage.bucket(bucketName);
   const prefix = options.folder ? options.folder.replace(/^\//, "") : "";
   const [files] = await bucket.getFiles(prefix ? { prefix } : {});
-  console.log(chalk6.cyan(`Found ${files.length} files to migrate`));
+  console.log(chalk7.cyan(`Found ${files.length} files to migrate`));
   const bar = createProgressBar("Storage");
   bar.start(files.length, 0);
   let success = 0;
@@ -481,39 +611,43 @@ async function migrateFirebaseStorage(options) {
   }
   bar.stop();
   console.log("");
-  console.log(chalk6.green(`  \u2713 ${success} files migrated`));
+  console.log(chalk7.green(`  \u2713 ${success} files migrated`));
   if (failed > 0) {
-    console.log(chalk6.red(`  \u2717 ${failed} failed`));
+    console.log(chalk7.red(`  \u2717 ${failed} failed`));
   }
-  p4.outro(
+  p3.outro(
     orange("\u2713") + "  Migration complete.\n\n  " + muted("Your Firebase data is intact.") + "\n  " + muted("Delete it manually when ready.")
   );
 }
 
 // src/commands/projects.ts
-import * as p5 from "@clack/prompts";
-import chalk7 from "chalk";
+import * as p4 from "@clack/prompts";
+import chalk8 from "chalk";
 function slugify(value) {
   return value.toLowerCase().trim().replace(/[^a-z0-9\\s-]/g, "").replace(/\\s+/g, "-").replace(/-+/g, "-");
 }
-async function ensureProjectKey(projectId) {
-  const existingKey = config.getProjectApiKey(projectId);
-  if (existingKey) return existingKey;
+function resolveProfileName2(profileName) {
+  return profileName ?? config.getActiveProfile() ?? "default";
+}
+async function createServerKey(projectId, profileName) {
   const created = await manageRequest(`/projects/${projectId}/keys`, {
     method: "POST",
     body: {
       name: "CLI server key",
       scope: "server"
-    }
+    },
+    profileName
   });
   if (!created.token) {
     throw new Error("Management API did not return a project API key");
   }
   return created.token;
 }
-async function projectsList() {
-  const projects2 = await manageRequest("/projects");
-  const activeProjectId = config.get().projectId;
+async function projectsList(options = {}) {
+  const profileName = resolveProfileName2(options.profile);
+  config.requireAuth(profileName);
+  const projects2 = await manageRequest("/projects", { profileName });
+  const activeProjectId = config.getProfile(profileName)?.active_project_id;
   const grouped = /* @__PURE__ */ new Map();
   for (const project of projects2) {
     const list = grouped.get(project.org_name) ?? [];
@@ -522,38 +656,50 @@ async function projectsList() {
   }
   console.log("");
   if (!projects2.length) {
-    console.log(chalk7.gray("No projects found."));
+    console.log(chalk8.gray("No projects found."));
     console.log("");
     return;
   }
   for (const [orgName, orgProjects] of grouped.entries()) {
-    console.log(chalk7.cyan(`org: ${orgName}`));
+    console.log(chalk8.cyan(`org: ${orgName}`));
     for (const project of orgProjects) {
-      const marker = project.id === activeProjectId ? chalk7.green("\u25CF") : chalk7.gray("\u25CB");
-      const active = project.id === activeProjectId ? chalk7.green("  (active)") : "";
-      console.log(`  ${marker} ${project.slug.padEnd(22)} ${chalk7.gray(project.id)}${active}`);
+      const marker = project.id === activeProjectId ? chalk8.green("\u25CF") : chalk8.gray("\u25CB");
+      const active = project.id === activeProjectId ? chalk8.green("  (active)") : "";
+      console.log(`  ${marker} ${project.slug.padEnd(22)} ${chalk8.gray(project.id)}${active}`);
     }
     console.log("");
   }
 }
-async function projectsUse(projectId) {
-  const projects2 = await manageRequest("/projects");
+async function projectsUse(projectId, options = {}) {
+  const profileName = resolveProfileName2(options.profile);
+  config.requireAuth(profileName);
+  const projects2 = await manageRequest("/projects", { profileName });
   const project = projects2.find((item) => item.id === projectId);
   if (!project) {
-    console.log(chalk7.red(`Project not found: ${projectId}`));
+    console.log(chalk8.red(`Project not found: ${projectId}`));
     process.exit(1);
   }
-  const apiKey = await ensureProjectKey(projectId);
-  config.setProjectAuth(projectId, apiKey, project.name);
-  console.log(chalk7.green("Active project set to: ") + chalk7.cyan(`${project.name} (${project.id})`));
+  await manageRequest(`/projects/${projectId}/keys`, { profileName });
+  const apiKey = await createServerKey(projectId, profileName);
+  config.setProfile(profileName, {
+    active_project_id: project.id,
+    active_project_name: project.name,
+    project_api_key: apiKey
+  });
+  config.setActiveProfile(profileName);
+  console.log(
+    chalk8.green("Active project set to: ") + chalk8.cyan(`${project.name} (${project.id})`)
+  );
 }
-async function projectsCreate() {
-  const orgs = await manageRequest("/orgs");
+async function projectsCreate(options = {}) {
+  const profileName = resolveProfileName2(options.profile);
+  config.requireAuth(profileName);
+  const orgs = await manageRequest("/orgs", { profileName });
   if (!orgs.length) {
-    console.log(chalk7.red("No organizations found. Create one in the console first."));
+    console.log(chalk8.red("No organizations found. Create one in the console first."));
     process.exit(1);
   }
-  const orgId = await p5.select({
+  const orgId = await p4.select({
     message: "Select an organization",
     options: orgs.map((org) => ({
       value: org.id,
@@ -561,22 +707,22 @@ async function projectsCreate() {
       hint: org.role
     }))
   });
-  if (p5.isCancel(orgId)) {
-    p5.cancel("Project creation cancelled.");
+  if (p4.isCancel(orgId)) {
+    p4.cancel("Project creation cancelled.");
     process.exit(0);
   }
-  const values = await p5.group(
+  const values = await p4.group(
     {
-      name: () => p5.text({
+      name: () => p4.text({
         message: "Project name",
         validate: (value) => !value ? "Project name is required" : void 0
       }),
-      slug: ({ results }) => p5.text({
+      slug: ({ results }) => p4.text({
         message: "Project slug",
         initialValue: slugify(String(results.name ?? "")),
         validate: (value) => !value ? "Project slug is required" : void 0
       }),
-      environment: () => p5.select({
+      environment: () => p4.select({
         message: "Environment",
         options: [
           { value: "development", label: "development" },
@@ -587,7 +733,7 @@ async function projectsCreate() {
     },
     {
       onCancel: () => {
-        p5.cancel("Project creation cancelled.");
+        p4.cancel("Project creation cancelled.");
         process.exit(0);
       }
     }
@@ -599,33 +745,49 @@ async function projectsCreate() {
       name: values.name,
       slug: values.slug,
       environment: values.environment
-    }
+    },
+    profileName
   });
-  config.setProjectAuth(result.project.id, result.keys.server, result.project.name);
+  config.setProfile(profileName, {
+    active_project_id: result.project.id,
+    active_project_name: result.project.name,
+    project_api_key: result.keys.server
+  });
+  config.setActiveProfile(profileName);
   console.log("");
-  console.log(chalk7.green("Project created successfully."));
-  console.log(chalk7.cyan("Project: ") + `${result.project.name} (${result.project.id})`);
-  console.log(chalk7.cyan("Client key: ") + result.keys.client);
-  console.log(chalk7.cyan("Server key: ") + result.keys.server);
+  console.log(chalk8.green("Project created successfully."));
+  console.log(chalk8.cyan("Project: ") + `${result.project.name} (${result.project.id})`);
+  console.log(chalk8.cyan("Client key: ") + result.keys.client);
+  console.log(chalk8.cyan("Server key: ") + result.keys.server);
   console.log("");
 }
 
 // src/commands/init.ts
 var version3 = getCliVersion();
-async function init() {
+async function init(options = {}) {
   printBanner(version3);
-  p6.intro(orange("\u21D2\u21D2") + "  Initialize your Globio project");
-  const cfg = config.get();
-  if (!cfg.projectId) {
-    await projectsCreate();
+  p5.intro(orange("\u21D2\u21D2") + "  Initialize your Globio project");
+  const profileName = options.profile ?? config.getActiveProfile() ?? "default";
+  const profile = config.getProfile(profileName);
+  if (!profile) {
+    console.log("Run: npx @globio/cli login --profile " + profileName);
+    process.exit(1);
+  }
+  if (!profile.active_project_id) {
+    await projectsCreate({ profile: profileName });
   } else {
-    await projectsUse(cfg.projectId);
+    await projectsUse(profile.active_project_id, { profile: profileName });
   }
   const values = await promptInit();
-  const activeProjectKey = config.requireProjectApiKey();
-  const activeProjectId = config.requireProject();
-  if (!existsSync("globio.config.ts")) {
-    writeFileSync(
+  const activeProfile = config.getProfile(profileName);
+  const activeProjectKey = activeProfile?.project_api_key;
+  const { projectId: activeProjectId } = config.requireProject(profileName);
+  if (!activeProjectKey) {
+    console.log("No project API key cached. Run: npx @globio/cli projects use " + activeProjectId);
+    process.exit(1);
+  }
+  if (!existsSync2("globio.config.ts")) {
+    writeFileSync2(
       "globio.config.ts",
       `import { Globio } from '@globio/sdk';
 
@@ -636,8 +798,8 @@ export const globio = new Globio({
     );
     printSuccess("Created globio.config.ts");
   }
-  if (!existsSync(".env")) {
-    writeFileSync(".env", `GLOBIO_API_KEY=${activeProjectKey}
+  if (!existsSync2(".env")) {
+    writeFileSync2(".env", `GLOBIO_API_KEY=${activeProjectKey}
 `);
     printSuccess("Created .env");
   }
@@ -646,19 +808,21 @@ export const globio = new Globio({
     printSuccess("Starting Firebase migration...");
     await migrateFirestore({
       from: values.serviceAccountPath,
-      all: true
+      all: true,
+      profile: profileName
     });
     const serviceAccount = JSON.parse(
-      readFileSync2(values.serviceAccountPath, "utf-8")
+      readFileSync3(values.serviceAccountPath, "utf-8")
     );
     await migrateFirebaseStorage({
       from: values.serviceAccountPath,
       bucket: `${serviceAccount.project_id}.appspot.com`,
-      all: true
+      all: true,
+      profile: profileName
     });
   }
   console.log("");
-  p6.outro(
+  p5.outro(
     orange("\u21D2\u21D2") + "  Your project is ready.\n\n  " + muted("Next steps:") + `
 
   npm install @globio/sdk
@@ -667,8 +831,30 @@ export const globio = new Globio({
   );
 }
 
+// src/commands/profiles.ts
+import chalk9 from "chalk";
+async function profilesList() {
+  const profiles2 = config.listProfiles();
+  const active = config.getActiveProfile();
+  if (!profiles2.length) {
+    console.log(chalk9.gray("No profiles found. Run: globio login"));
+    return;
+  }
+  console.log("");
+  for (const name of profiles2) {
+    const data = config.getProfile(name);
+    const isActive = name === active;
+    const bullet = isActive ? orange("\u25CF") : chalk9.gray("\u25CB");
+    const label = isActive ? orange(name) : chalk9.white(name);
+    const email = data?.account_email ? muted(data.account_email) : chalk9.gray("unknown");
+    const tag = isActive ? muted(" (active)") : "";
+    console.log(`  ${bullet}  ${label}   ${email}${tag}`);
+  }
+  console.log("");
+}
+
 // src/commands/services.ts
-import chalk8 from "chalk";
+import chalk10 from "chalk";
 var ALL_SERVICES = [
   "id",
   "doc",
@@ -681,30 +867,36 @@ var ALL_SERVICES = [
   "brain",
   "code"
 ];
-async function servicesList() {
+async function servicesList(options = {}) {
+  void options.profile;
+  void config;
   console.log("");
-  console.log(chalk8.cyan("Available Globio services:"));
+  console.log(chalk10.cyan("Available Globio services:"));
   ALL_SERVICES.forEach((service) => {
-    console.log("  " + chalk8.white(service));
+    console.log("  " + chalk10.white(service));
   });
   console.log("");
   console.log(
-    chalk8.gray("Manage service access via console.globio.stanlink.online")
+    chalk10.gray("Manage service access via console.globio.stanlink.online")
   );
   console.log("");
 }
 
 // src/commands/functions.ts
-import chalk9 from "chalk";
+import chalk11 from "chalk";
 import ora from "ora";
-import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-async function functionsList() {
-  const client = getClient();
+import { existsSync as existsSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+function resolveProfileName3(profile) {
+  return profile ?? config.getActiveProfile() ?? "default";
+}
+async function functionsList(options = {}) {
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora("Fetching functions...").start();
   const result = await client.code.listFunctions();
   spinner2.stop();
   if (!result.success || !result.data.length) {
-    console.log(chalk9.gray("No functions found."));
+    console.log(chalk11.gray("No functions found."));
     return;
   }
   console.log("");
@@ -718,10 +910,10 @@ async function functionsList() {
   });
   console.log("");
 }
-async function functionsCreate(slug) {
+async function functionsCreate(slug, _options = {}) {
   const filename = `${slug}.js`;
-  if (existsSync2(filename)) {
-    console.log(chalk9.yellow(`${filename} already exists.`));
+  if (existsSync3(filename)) {
+    console.log(chalk11.yellow(`${filename} already exists.`));
     return;
   }
   const template = `/**
@@ -739,24 +931,25 @@ async function handler(input, globio) {
   };
 }
 `;
-  writeFileSync2(filename, template);
-  console.log(chalk9.green(`Created ${filename}`));
+  writeFileSync3(filename, template);
+  console.log(chalk11.green(`Created ${filename}`));
   console.log(
-    chalk9.gray(`Deploy with: npx @globio/cli functions deploy ${slug}`)
+    chalk11.gray(`Deploy with: npx @globio/cli functions deploy ${slug}`)
   );
 }
 async function functionsDeploy(slug, options) {
   const filename = options.file ?? `${slug}.js`;
-  if (!existsSync2(filename)) {
+  if (!existsSync3(filename)) {
     console.log(
-      chalk9.red(
+      chalk11.red(
         `File not found: ${filename}. Create it with: npx @globio/cli functions create ${slug}`
       )
     );
     process.exit(1);
   }
-  const code = readFileSync3(filename, "utf-8");
-  const client = getClient();
+  const code = readFileSync4(filename, "utf-8");
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(`Deploying ${slug}...`).start();
   const existing = await client.code.getFunction(slug);
   let result;
@@ -786,16 +979,17 @@ async function functionsInvoke(slug, options) {
     try {
       input = JSON.parse(options.input);
     } catch {
-      console.error(chalk9.red("--input must be valid JSON"));
+      console.error(chalk11.red("--input must be valid JSON"));
       process.exit(1);
     }
   }
-  const client = getClient();
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(`Invoking ${slug}...`).start();
   const result = await client.code.invoke(slug, input);
   spinner2.stop();
   if (!result.success) {
-    console.log(chalk9.red("Invocation failed"));
+    console.log(chalk11.red("Invocation failed"));
     console.error(result.error.message);
     return;
   }
@@ -807,12 +1001,13 @@ Duration: ${result.data.duration_ms}ms`));
 }
 async function functionsLogs(slug, options) {
   const limit = options.limit ? parseInt(options.limit, 10) : 20;
-  const client = getClient();
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora("Fetching invocations...").start();
   const result = await client.code.getInvocations(slug, limit);
   spinner2.stop();
   if (!result.success || !result.data.length) {
-    console.log(chalk9.gray("No invocations yet."));
+    console.log(chalk11.gray("No invocations yet."));
     return;
   }
   console.log("");
@@ -820,13 +1015,14 @@ async function functionsLogs(slug, options) {
     const status = inv.success ? "\x1B[38;2;244;140;6m\u2713\x1B[0m" : "\x1B[31m\u2717\x1B[0m";
     const date = new Date(inv.invoked_at * 1e3).toISOString().replace("T", " ").slice(0, 19);
     console.log(
-      `  ${status}  ${chalk9.gray(date)}  ${inv.duration_ms}ms  ${chalk9.gray(`[${inv.trigger_type}]`)}`
+      `  ${status}  ${chalk11.gray(date)}  ${inv.duration_ms}ms  ${chalk11.gray(`[${inv.trigger_type}]`)}`
     );
   });
   console.log("");
 }
-async function functionsDelete(slug) {
-  const client = getClient();
+async function functionsDelete(slug, options = {}) {
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(`Deleting ${slug}...`).start();
   const result = await client.code.deleteFunction(slug);
   if (!result.success) {
@@ -836,8 +1032,9 @@ async function functionsDelete(slug) {
   }
   spinner2.succeed(`Deleted ${slug}`);
 }
-async function functionsToggle(slug, active) {
-  const client = getClient();
+async function functionsToggle(slug, active, options = {}) {
+  const profileName = resolveProfileName3(options.profile);
+  const client = getClient(profileName);
   const spinner2 = ora(
     `${active ? "Enabling" : "Disabling"} ${slug}...`
   ).start();
@@ -856,28 +1053,45 @@ var program = new Command();
 program.name("globio").description("The official Globio CLI").version(version4).addHelpText("beforeAll", () => {
   printBanner(version4);
   return "";
-});
-program.command("login").description("Log in to your Globio account").option("--token", "Use a personal access token").action(login);
-program.command("logout").description("Log out").action(logout);
-program.command("whoami").description("Show current account and project").action(whoami);
-program.command("init").description("Initialize a Globio project").action(init);
+}).addHelpText(
+  "after",
+  `
+Examples:
+  $ globio login
+  $ globio login --profile work
+  $ globio use work
+  $ globio projects list
+  $ globio projects use proj_abc123
+  $ globio functions deploy my-function
+  $ globio migrate firestore --from ./key.json --all
+
+Credentials are stored in ~/.globio/profiles/
+`
+);
+program.command("login").description("Log in to your Globio account").option("-p, --profile <name>", "Profile name", "default").option("--token", "Use a personal access token").action(login);
+program.command("logout").description("Log out").option("--profile <name>", "Use a specific profile").action(logout);
+program.command("whoami").description("Show current account and project").option("--profile <name>", "Use a specific profile").action(whoami);
+program.command("use <profile>").description("Switch active profile").action(useProfile);
+program.command("init").description("Initialize a Globio project").option("--profile <name>", "Use a specific profile").action(init);
+var profiles = program.command("profiles").description("Manage login profiles").action(profilesList);
+profiles.command("list").description("List all profiles").action(profilesList);
 var projects = program.command("projects").description("Manage projects");
-projects.command("list").description("List projects").action(projectsList);
-projects.command("create").description("Create a project").action(projectsCreate);
-projects.command("use <projectId>").description("Set active project").action(projectsUse);
-program.command("services").description("List available Globio services").action(servicesList);
+projects.command("list").description("List projects").option("--profile <name>", "Use a specific profile").action(projectsList);
+projects.command("create").description("Create a project").option("--profile <name>", "Use a specific profile").action(projectsCreate);
+projects.command("use <projectId>").description("Set active project").option("--profile <name>", "Use a specific profile").action(projectsUse);
+program.command("services").description("List available Globio services").option("--profile <name>", "Use a specific profile").action(servicesList);
 var functions = program.command("functions").alias("fn").description("Manage GlobalCode edge functions");
-functions.command("list").description("List all functions").action(functionsList);
-functions.command("create <slug>").description("Scaffold a new function file locally").action(functionsCreate);
-functions.command("deploy <slug>").description("Deploy a function to GlobalCode").option("-f, --file <path>", "Path to function file").option("-n, --name <name>", "Display name").action(functionsDeploy);
-functions.command("invoke <slug>").description("Invoke a function").option("-i, --input <json>", "JSON input payload").action(functionsInvoke);
-functions.command("logs <slug>").description("Show invocation history").option("-l, --limit <n>", "Number of entries", "20").action(functionsLogs);
-functions.command("delete <slug>").description("Delete a function").action(functionsDelete);
-functions.command("enable <slug>").description("Enable a function").action((slug) => functionsToggle(slug, true));
-functions.command("disable <slug>").description("Disable a function").action((slug) => functionsToggle(slug, false));
+functions.command("list").description("List all functions").option("--profile <name>", "Use a specific profile").action(functionsList);
+functions.command("create <slug>").description("Scaffold a new function file locally").option("--profile <name>", "Use a specific profile").action(functionsCreate);
+functions.command("deploy <slug>").description("Deploy a function to GlobalCode").option("-f, --file <path>", "Path to function file").option("-n, --name <name>", "Display name").option("--profile <name>", "Use a specific profile").action(functionsDeploy);
+functions.command("invoke <slug>").description("Invoke a function").option("-i, --input <json>", "JSON input payload").option("--profile <name>", "Use a specific profile").action(functionsInvoke);
+functions.command("logs <slug>").description("Show invocation history").option("-l, --limit <n>", "Number of entries", "20").option("--profile <name>", "Use a specific profile").action(functionsLogs);
+functions.command("delete <slug>").description("Delete a function").option("--profile <name>", "Use a specific profile").action(functionsDelete);
+functions.command("enable <slug>").description("Enable a function").option("--profile <name>", "Use a specific profile").action((slug, options) => functionsToggle(slug, true, options));
+functions.command("disable <slug>").description("Disable a function").option("--profile <name>", "Use a specific profile").action((slug, options) => functionsToggle(slug, false, options));
 var migrate = program.command("migrate").description("Migrate from Firebase to Globio");
-migrate.command("firestore").description("Migrate Firestore collections to GlobalDoc").requiredOption("--from <path>", "Path to Firebase service account JSON").option("--collection <name>", "Migrate a specific collection").option("--all", "Migrate all collections").action(migrateFirestore);
-migrate.command("firebase-storage").description("Migrate Firebase Storage to GlobalVault").requiredOption("--from <path>", "Path to Firebase service account JSON").requiredOption("--bucket <name>", "Firebase Storage bucket").option("--folder <path>", "Migrate a specific folder").option("--all", "Migrate all files").action(migrateFirebaseStorage);
+migrate.command("firestore").description("Migrate Firestore collections to GlobalDoc").requiredOption("--from <path>", "Path to Firebase service account JSON").option("--collection <name>", "Migrate a specific collection").option("--all", "Migrate all collections").option("--profile <name>", "Use a specific profile").action(migrateFirestore);
+migrate.command("firebase-storage").description("Migrate Firebase Storage to GlobalVault").requiredOption("--from <path>", "Path to Firebase service account JSON").requiredOption("--bucket <name>", "Firebase Storage bucket").option("--folder <path>", "Migrate a specific folder").option("--all", "Migrate all files").option("--profile <name>", "Use a specific profile").action(migrateFirebaseStorage);
 async function main() {
   if (process.argv.length <= 2) {
     program.help();