@ishlabs/cli 0.12.1 → 0.12.2

package/dist/auth.d.ts

@@ -18,8 +18,8 @@
  * server's `local` mode keeps reading them without changes.
  */
 export declare function getAppUrl(): string;
-export declare function getSupabaseUrl(): string;
-export declare function getSupabaseAnonKey(): string;
+export declare function getSupabaseUrl(dev?: boolean): string;
+export declare function getSupabaseAnonKey(dev?: boolean): string;
 /**
  * Resolve the Supabase project (URL + anon key) that issued the given JWT.
  * Falls back to env vars / production defaults when the token is unparsable
@@ -32,7 +32,9 @@ export declare function resolveSupabaseProjectFromToken(accessToken: string | un
 export declare function decodeJwtExp(token: string): number;
 export declare function decodeJwtClaims(token: string): Record<string, unknown> | undefined;
 export declare function isTokenExpired(token: string, bufferSeconds?: number): boolean;
-export declare function login(): Promise<{
+export declare function login(opts?: {
+    dev?: boolean;
+}): Promise<{
     accessToken: string;
     refreshToken: string;
     clientId: string;

package/dist/auth.js

@@ -29,26 +29,32 @@ const DEFAULT_APP_URL = "https://app.ishlabs.io";
 // must send refresh requests back to that same project (with its matching
 // publishable/anon key) or Supabase will reject them.
 const SUPABASE_PROJECTS = {
-    // Development (default — local dev work hits this project)
-    "muqvgnqyubmqnfnqwxuk.supabase.co": {
-        url: "https://muqvgnqyubmqnfnqwxuk.supabase.co",
-        anonKey: "sb_publishable_pxXwY9EaWFwkR7h728NWvQ_NFqGfh8K",
-    },
-    // Production
+    // Production (default — end users hit this)
     "hngymyxdyamokpbeakps.supabase.co": {
         url: "https://hngymyxdyamokpbeakps.supabase.co",
         anonKey: "sb_publishable_JlS-HfwNyDqLNbrfbrkUlw_PSdZJdo2",
     },
+    // Development (opt-in via --dev or ISH_SUPABASE_URL/_ANON_KEY env vars)
+    "muqvgnqyubmqnfnqwxuk.supabase.co": {
+        url: "https://muqvgnqyubmqnfnqwxuk.supabase.co",
+        anonKey: "sb_publishable_pxXwY9EaWFwkR7h728NWvQ_NFqGfh8K",
+    },
 };
-const DEFAULT_SUPABASE_PROJECT = SUPABASE_PROJECTS["muqvgnqyubmqnfnqwxuk.supabase.co"];
+const PROD_SUPABASE_PROJECT = SUPABASE_PROJECTS["hngymyxdyamokpbeakps.supabase.co"];
+const DEV_SUPABASE_PROJECT = SUPABASE_PROJECTS["muqvgnqyubmqnfnqwxuk.supabase.co"];
 export function getAppUrl() {
     return process.env.ISH_APP_URL ?? DEFAULT_APP_URL;
 }
-export function getSupabaseUrl() {
-    return process.env.ISH_SUPABASE_URL ?? DEFAULT_SUPABASE_PROJECT.url;
+// Precedence (matches resolveApiUrl): --dev > ISH_SUPABASE_URL env > prod default.
+export function getSupabaseUrl(dev) {
+    if (dev)
+        return DEV_SUPABASE_PROJECT.url;
+    return process.env.ISH_SUPABASE_URL ?? PROD_SUPABASE_PROJECT.url;
 }
-export function getSupabaseAnonKey() {
-    return process.env.ISH_SUPABASE_ANON_KEY ?? DEFAULT_SUPABASE_PROJECT.anonKey;
+export function getSupabaseAnonKey(dev) {
+    if (dev)
+        return DEV_SUPABASE_PROJECT.anonKey;
+    return process.env.ISH_SUPABASE_ANON_KEY ?? PROD_SUPABASE_PROJECT.anonKey;
 }
 /**
  * Resolve the Supabase project (URL + anon key) that issued the given JWT.
@@ -73,7 +79,7 @@ export function resolveSupabaseProjectFromToken(accessToken) {
                 // default key for apikey (best-effort; will likely fail without env override).
                 return {
                     url: `https://${host}`,
-                    anonKey: envKey ?? DEFAULT_SUPABASE_PROJECT.anonKey,
+                    anonKey: envKey ?? PROD_SUPABASE_PROJECT.anonKey,
                 };
             }
         }
@@ -82,8 +88,8 @@ export function resolveSupabaseProjectFromToken(accessToken) {
         }
     }
     return {
-        url: envUrl ?? DEFAULT_SUPABASE_PROJECT.url,
-        anonKey: envKey ?? DEFAULT_SUPABASE_PROJECT.anonKey,
+        url: envUrl ?? PROD_SUPABASE_PROJECT.url,
+        anonKey: envKey ?? PROD_SUPABASE_PROJECT.anonKey,
     };
 }
 // --- Browser open ---
@@ -221,8 +227,8 @@ function generatePkcePair() {
     const challenge = crypto.createHash("sha256").update(verifier).digest("base64url");
     return { verifier, challenge };
 }
-export async function login() {
-    const supabaseUrl = getSupabaseUrl();
+export async function login(opts = {}) {
+    const supabaseUrl = getSupabaseUrl(opts.dev);
     const server = await startCallbackServer();
     const redirectUri = `http://127.0.0.1:${server.port}/callback`;
     try {

package/dist/index.js

@@ -89,7 +89,7 @@ program
     .description("Authenticate with ish via your browser")
     .action(async (_opts, cmd) => {
     await runInline(cmd, async (globals) => {
-        const tokens = await login();
+        const tokens = await login({ dev: globals.dev });
         const config = loadConfig();
         config.access_token = tokens.accessToken;
         config.refresh_token = tokens.refreshToken;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ishlabs/cli",
-  "version": "0.12.1",
+  "version": "0.12.2",
   "description": "The command-line interface for ish",
   "type": "module",
   "bin": {