@shipdit/cli 0.2.0 → 0.2.2

package/dist/index.mjs

@@ -367,9 +367,9 @@ const o$1 = (...t) => hc(...t);
 const s$1 = (...t) => hc(...t);
 const c$1 = (...t) => hc(...t);
 const l$1 = (...t) => hc(...t);
-const u$2 = (...t) => hc(...t);
+const u$1 = (...t) => hc(...t);
 const d$2 = (...t) => hc(...t);
-const f$1 = (...t) => hc(...t);
+const f$2 = (...t) => hc(...t);
 const p$1 = (...t) => hc(...t);
 const m$1 = (...t) => hc(...t);
 const h$1 = (...t) => hc(...t);
@@ -377,10 +377,12 @@ const g$1 = (...t) => hc(...t);
 const _$1 = (...t) => hc(...t);
 const v$1 = (...t) => hc(...t);
 const y$1 = (...t) => hc(...t);
-function b$1(e) {
+const b$1 = (...t) => hc(...t);
+const x$1 = (...t) => hc(...t);
+function S$1(e) {
 	return `${e.replace(/\/+$/, ``)}/api/v1/rpc`;
 }
-function x$1(e) {
+function C$1(e) {
 	return {
 		...e.fetch ? { fetch: e.fetch } : {},
 		init: { credentials: e.client === `dashboard` ? `include` : `same-origin` },
@@ -390,122 +392,142 @@ function x$1(e) {
 		}
 	};
 }
-async function S$1(e, t) {
+async function w$1(e, t) {
 	return i$1(await e({ json: t }));
 }
-function C$1(e) {
-	let t = b$1(e.baseUrl), n = x$1(e), r = a$1(t, n), i = o$1(t, n), C = s$1(t, n), w = c$1(t, n), T = l$1(t, n), E = u$2(t, n), D = d$2(t, n), O = f$1(t, n), k = h$1(t, n), A = p$1(t, n), j = m$1(t, n), M = g$1(t, n), N = _$1(t, n), P = v$1(t, n), F = y$1(t, n);
+function T$1(e) {
+	let t = S$1(e.baseUrl), n = C$1(e), r = a$1(t, n), i = o$1(t, n), T = s$1(t, n), E = c$1(t, n), D = l$1(t, n), O = u$1(t, n), k = d$2(t, n), A = f$2(t, n), j = g$1(t, n), M = h$1(t, n), N = p$1(t, n), P = m$1(t, n), F = _$1(t, n), I = v$1(t, n), L = y$1(t, n), R = b$1(t, n), z = x$1(t, n);
 	return {
 		me: {
-			get: (e = {}) => S$1(r.me.$post, e),
-			feedback: (e) => S$1(r.me.feedback.$post, e)
+			get: (e = {}) => w$1(r.me.$post, e),
+			feedback: (e) => w$1(r.me.feedback.$post, e)
 		},
 		project: {
-			list: (e = {}) => S$1(i.project.list.$post, e),
-			create: (e) => S$1(i.project.create.$post, e),
-			update: (e) => S$1(i.project.update.$post, e),
-			archive: (e) => S$1(i.project.archive.$post, e),
-			listTeams: (e) => S$1(i.project.listTeams.$post, e),
-			setTeams: (e) => S$1(i.project.setTeams.$post, e)
+			list: (e = {}) => w$1(i.project.list.$post, e),
+			create: (e) => w$1(i.project.create.$post, e),
+			update: (e) => w$1(i.project.update.$post, e),
+			archive: (e) => w$1(i.project.archive.$post, e),
+			listTeams: (e) => w$1(i.project.listTeams.$post, e),
+			setTeams: (e) => w$1(i.project.setTeams.$post, e)
 		},
-		team: { listMembers: (e) => S$1(F.team.listMembers.$post, e) },
+		team: { listMembers: (e) => w$1(R.team.listMembers.$post, e) },
 		environment: {
-			list: (e) => S$1(C.environment.list.$post, e),
-			create: (e) => S$1(C.environment.create.$post, e),
-			update: (e) => S$1(C.environment.update.$post, e),
-			archive: (e) => S$1(C.environment.archive.$post, e)
+			list: (e) => w$1(T.environment.list.$post, e),
+			create: (e) => w$1(T.environment.create.$post, e),
+			update: (e) => w$1(T.environment.update.$post, e),
+			archive: (e) => w$1(T.environment.archive.$post, e)
 		},
 		flag: {
-			list: (e) => S$1(w.flag.list.$post, e),
-			get: (e) => S$1(w.flag.get.$post, e),
-			create: (e) => S$1(w.flag.create.$post, e),
-			update: (e) => S$1(w.flag.update.$post, e),
-			archive: (e) => S$1(w.flag.archive.$post, e),
-			updateEnvironment: (e) => S$1(w.flag.updateEnvironment.$post, e),
-			toggleEnvironment: (e) => S$1(w.flag.toggleEnvironment.$post, e),
-			listEnvironmentStates: (e) => S$1(w.flag.listEnvironmentStates.$post, e),
-			pull: (e) => S$1(w.flag.pull.$post, e),
-			diff: (e) => S$1(w.flag.diff.$post, e),
-			push: (e) => S$1(w.flag.push.$post, e)
+			list: (e) => w$1(E.flag.list.$post, e),
+			get: (e) => w$1(E.flag.get.$post, e),
+			create: (e) => w$1(E.flag.create.$post, e),
+			update: (e) => w$1(E.flag.update.$post, e),
+			archive: (e) => w$1(E.flag.archive.$post, e),
+			updateEnvironment: (e) => w$1(E.flag.updateEnvironment.$post, e),
+			toggleEnvironment: (e) => w$1(E.flag.toggleEnvironment.$post, e),
+			listEnvironmentStates: (e) => w$1(E.flag.listEnvironmentStates.$post, e),
+			pull: (e) => w$1(E.flag.pull.$post, e),
+			diff: (e) => w$1(E.flag.diff.$post, e),
+			push: (e) => w$1(E.flag.push.$post, e)
 		},
 		apiKey: {
-			list: (e = {}) => S$1(T.apiKey.list.$post, e),
-			create: (e) => S$1(T.apiKey.create.$post, e),
-			revoke: (e) => S$1(T.apiKey.revoke.$post, e)
+			list: (e = {}) => w$1(D.apiKey.list.$post, e),
+			create: (e) => w$1(D.apiKey.create.$post, e),
+			revoke: (e) => w$1(D.apiKey.revoke.$post, e)
 		},
 		sdkKey: {
-			list: (e = {}) => S$1(O.sdkKey.list.$post, e),
-			create: (e) => S$1(O.sdkKey.create.$post, e),
-			revoke: (e) => S$1(O.sdkKey.revoke.$post, e)
+			list: (e = {}) => w$1(A.sdkKey.list.$post, e),
+			create: (e) => w$1(A.sdkKey.create.$post, e),
+			revoke: (e) => w$1(A.sdkKey.revoke.$post, e)
+		},
+		serviceAccount: {
+			list: (e = {}) => w$1(j.serviceAccount.list.$post, e),
+			get: (e) => w$1(j.serviceAccount.get.$post, e),
+			create: (e) => w$1(j.serviceAccount.create.$post, e),
+			update: (e) => w$1(j.serviceAccount.update.$post, e),
+			disable: (e) => w$1(j.serviceAccount.disable.$post, e),
+			enable: (e) => w$1(j.serviceAccount.enable.$post, e),
+			delete: (e) => w$1(j.serviceAccount.delete.$post, e),
+			createToken: (e) => w$1(j.serviceAccount.createToken.$post, e),
+			listTokens: (e) => w$1(j.serviceAccount.listTokens.$post, e),
+			revokeToken: (e) => w$1(j.serviceAccount.revokeToken.$post, e)
 		},
 		segment: {
-			list: (e) => S$1(k.segment.list.$post, e),
-			get: (e) => S$1(k.segment.get.$post, e),
-			create: (e) => S$1(k.segment.create.$post, e),
-			update: (e) => S$1(k.segment.update.$post, e),
-			archive: (e) => S$1(k.segment.archive.$post, e),
-			listEnvironmentStates: (e) => S$1(k.segment.listEnvironmentStates.$post, e),
-			updateEnvironment: (e) => S$1(k.segment.updateEnvironment.$post, e)
+			list: (e) => w$1(M.segment.list.$post, e),
+			get: (e) => w$1(M.segment.get.$post, e),
+			create: (e) => w$1(M.segment.create.$post, e),
+			update: (e) => w$1(M.segment.update.$post, e),
+			archive: (e) => w$1(M.segment.archive.$post, e),
+			listEnvironmentStates: (e) => w$1(M.segment.listEnvironmentStates.$post, e),
+			updateEnvironment: (e) => w$1(M.segment.updateEnvironment.$post, e)
 		},
 		evaluatedEntity: {
-			list: (e) => S$1(A.evaluatedEntity.list.$post, e),
-			get: (e) => S$1(A.evaluatedEntity.get.$post, e),
-			delete: (e) => S$1(A.evaluatedEntity.delete.$post, e)
+			list: (e) => w$1(N.evaluatedEntity.list.$post, e),
+			get: (e) => w$1(N.evaluatedEntity.get.$post, e),
+			delete: (e) => w$1(N.evaluatedEntity.delete.$post, e)
 		},
 		evaluationFact: {
-			list: (e) => S$1(j.evaluationFact.list.$post, e),
-			byRule: (e) => S$1(j.evaluationFact.byRule.$post, e),
-			orgSummary: (e = {}) => S$1(j.evaluationFact.orgSummary.$post, e),
-			projectSummary: (e) => S$1(j.evaluationFact.projectSummary.$post, e),
-			simulate: (e) => S$1(j.evaluationFact.simulate.$post, e)
+			list: (e) => w$1(P.evaluationFact.list.$post, e),
+			byRule: (e) => w$1(P.evaluationFact.byRule.$post, e),
+			orgSummary: (e = {}) => w$1(P.evaluationFact.orgSummary.$post, e),
+			projectSummary: (e) => w$1(P.evaluationFact.projectSummary.$post, e),
+			simulate: (e) => w$1(P.evaluationFact.simulate.$post, e)
 		},
-		snapshot: { publish: (e) => S$1(M.snapshot.publish.$post, e) },
-		device: { authorize: (e) => S$1(N.device.authorize.$post, e) },
+		snapshot: { publish: (e) => w$1(F.snapshot.publish.$post, e) },
+		device: { authorize: (e) => w$1(I.device.authorize.$post, e) },
 		billing: {
-			get: (e = {}) => S$1(P.billing.get.$post, e),
-			attach: (e) => S$1(P.billing.attach.$post, e),
-			openPortal: (e) => S$1(P.billing.openPortal.$post, e)
+			get: (e = {}) => w$1(L.billing.get.$post, e),
+			attach: (e) => w$1(L.billing.attach.$post, e),
+			openPortal: (e) => w$1(L.billing.openPortal.$post, e)
 		},
 		approval: {
-			listPolicies: (e = {}) => S$1(E.approval.listPolicies.$post, e),
-			createPolicy: (e) => S$1(E.approval.createPolicy.$post, e),
-			updatePolicy: (e) => S$1(E.approval.updatePolicy.$post, e),
-			deletePolicy: (e) => S$1(E.approval.deletePolicy.$post, e),
-			listRequests: (e = {}) => S$1(E.approval.listRequests.$post, e),
-			get: (e) => S$1(E.approval.get.$post, e),
-			approve: (e) => S$1(E.approval.approve.$post, e),
-			reject: (e) => S$1(E.approval.reject.$post, e),
-			cancel: (e) => S$1(E.approval.cancel.$post, e)
+			listPolicies: (e = {}) => w$1(O.approval.listPolicies.$post, e),
+			createPolicy: (e) => w$1(O.approval.createPolicy.$post, e),
+			updatePolicy: (e) => w$1(O.approval.updatePolicy.$post, e),
+			deletePolicy: (e) => w$1(O.approval.deletePolicy.$post, e),
+			listRequests: (e = {}) => w$1(O.approval.listRequests.$post, e),
+			get: (e) => w$1(O.approval.get.$post, e),
+			approve: (e) => w$1(O.approval.approve.$post, e),
+			reject: (e) => w$1(O.approval.reject.$post, e),
+			cancel: (e) => w$1(O.approval.cancel.$post, e)
 		},
 		audit: {
-			list: (e = {}) => S$1(D.audit.list.$post, e),
-			get: (e) => S$1(D.audit.get.$post, e),
-			actions: (e = {}) => S$1(D.audit.actions.$post, e),
-			export: (e) => S$1(D.audit.export.$post, e),
-			getSettings: (e = {}) => S$1(D.audit.getSettings.$post, e),
-			updateSettings: (e) => S$1(D.audit.updateSettings.$post, e),
-			listDestinations: (e = {}) => S$1(D.audit.listDestinations.$post, e),
-			createDestination: (e) => S$1(D.audit.createDestination.$post, e),
-			updateDestination: (e) => S$1(D.audit.updateDestination.$post, e),
-			deleteDestination: (e) => S$1(D.audit.deleteDestination.$post, e),
-			testDestination: (e) => S$1(D.audit.testDestination.$post, e)
+			list: (e = {}) => w$1(k.audit.list.$post, e),
+			get: (e) => w$1(k.audit.get.$post, e),
+			actions: (e = {}) => w$1(k.audit.actions.$post, e),
+			export: (e) => w$1(k.audit.export.$post, e),
+			getSettings: (e = {}) => w$1(k.audit.getSettings.$post, e),
+			updateSettings: (e) => w$1(k.audit.updateSettings.$post, e),
+			listDestinations: (e = {}) => w$1(k.audit.listDestinations.$post, e),
+			createDestination: (e) => w$1(k.audit.createDestination.$post, e),
+			updateDestination: (e) => w$1(k.audit.updateDestination.$post, e),
+			deleteDestination: (e) => w$1(k.audit.deleteDestination.$post, e),
+			testDestination: (e) => w$1(k.audit.testDestination.$post, e)
+		},
+		sso: {
+			getSettings: (e = {}) => w$1(z.sso.getSettings.$post, e),
+			listProviders: (e = {}) => w$1(z.sso.listProviders.$post, e),
+			updateAllowedDomains: (e) => w$1(z.sso.updateAllowedDomains.$post, e),
+			setEnforcement: (e) => w$1(z.sso.setEnforcement.$post, e)
 		},
 		raw: {
 			me: r,
 			project: i,
-			environment: C,
-			flag: w,
-			apiKey: T,
-			approval: E,
-			audit: D,
-			sdkKey: O,
-			segment: k,
-			evaluatedEntity: A,
-			evaluationFact: j,
-			snapshot: M,
-			device: N,
-			billing: P,
-			team: F
+			environment: T,
+			flag: E,
+			apiKey: D,
+			approval: O,
+			audit: k,
+			sdkKey: A,
+			serviceAccount: j,
+			segment: M,
+			evaluatedEntity: N,
+			evaluationFact: P,
+			snapshot: F,
+			device: I,
+			billing: L,
+			team: R,
+			sso: z
 		}
 	};
 }
@@ -748,7 +770,7 @@ var version = "1.7.1";
 
 //#endregion
 //#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/version.mjs
-const PACKAGE_VERSION$2 = version;
+const PACKAGE_VERSION$3 = version;
 
 //#endregion
 //#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/url.mjs
@@ -787,7 +809,7 @@ function isSafeUrlScheme(value) {
 const twoFactorClient = (options) => {
 	return {
 		id: "two-factor",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		atomListeners: [{
 			matcher: (path) => path.startsWith("/two-factor/"),
@@ -1847,7 +1869,24 @@ const t$1 = createAccessControl({
 		`revoke`
 	],
 	evaluated_entity: [`read`, `delete`],
-	billing: [`read`, `manage`]
+	billing: [`read`, `manage`],
+	sso: [
+		`read`,
+		`manage`,
+		`enforce`
+	],
+	service_account: [
+		`create`,
+		`read`,
+		`update`,
+		`disable`,
+		`delete`
+	],
+	service_account_token: [
+		`create`,
+		`read`,
+		`revoke`
+	]
 });
 const n$1 = {
 	viewer: t$1.newRole({
@@ -1930,7 +1969,20 @@ const n$1 = {
 			`revoke`
 		],
 		evaluated_entity: [`read`, `delete`],
-		billing: [`read`, `manage`]
+		billing: [`read`, `manage`],
+		sso: [`read`, `manage`],
+		service_account: [
+			`create`,
+			`read`,
+			`update`,
+			`disable`,
+			`delete`
+		],
+		service_account_token: [
+			`create`,
+			`read`,
+			`revoke`
+		]
 	}),
 	owner: t$1.newRole({
 		organization: [`update`, `delete`],
@@ -1983,7 +2035,24 @@ const n$1 = {
 			`revoke`
 		],
 		evaluated_entity: [`read`, `delete`],
-		billing: [`read`, `manage`]
+		billing: [`read`, `manage`],
+		sso: [
+			`read`,
+			`manage`,
+			`enforce`
+		],
+		service_account: [
+			`create`,
+			`read`,
+			`update`,
+			`disable`,
+			`delete`
+		],
+		service_account_token: [
+			`create`,
+			`read`,
+			`revoke`
+		]
 	})
 };
 
@@ -2978,7 +3047,7 @@ function createAuthClient(options) {
 const inferAdditionalFields = (schema) => {
 	return {
 		id: "additional-fields-client",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {}
 	};
 };
@@ -2993,7 +3062,7 @@ const adminClient = (options) => {
 	};
 	return {
 		id: "admin-client",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		getActions: () => ({ admin: { checkRolePermission: (data) => {
 			return hasPermission({
@@ -3023,7 +3092,7 @@ const adminClient = (options) => {
 const deviceAuthorizationClient = () => {
 	return {
 		id: "device-authorization",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		pathMethods: {
 			"/device/code": "POST",
@@ -3056,7 +3125,7 @@ const organizationClient = (options) => {
 	};
 	return {
 		id: "organization",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		getActions: ($fetch, _$store, co) => ({
 			$Infer: {
@@ -3165,14 +3234,14 @@ const API_KEY_ERROR_CODES = defineErrorCodes({
 	NO_DEFAULT_API_KEY_CONFIGURATION_FOUND: "No default api-key configuration found.",
 	ORGANIZATION_PLUGIN_REQUIRED: "Organization plugin is required for organization-owned API keys. Please install and configure the organization plugin."
 });
-const PACKAGE_VERSION$1 = "1.7.1";
+const PACKAGE_VERSION$2 = "1.7.1";
 
 //#endregion
 //#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_2568c45b7ee73e55b396faf3d8bd3e1a/node_modules/@better-auth/api-key/dist/client.mjs
 const apiKeyClient = () => {
 	return {
 		id: "api-key",
-		version: PACKAGE_VERSION$1,
+		version: PACKAGE_VERSION$2,
 		$InferServerPlugin: {},
 		pathMethods: {
 			"/api-key/create": "POST",
@@ -3202,7 +3271,7 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 	RESOLVE_USER_REQUIRED: "Passkey registration requires either an authenticated session or a resolveUser callback when requireSession is false",
 	RESOLVED_USER_INVALID: "Resolved user is invalid"
 });
-const PACKAGE_VERSION = "1.7.1";
+const PACKAGE_VERSION$1 = "1.7.1";
 
 //#endregion
 //#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/bufferToBase64URLString.js
@@ -3846,7 +3915,7 @@ const passkeyClient = () => {
 	const $listPasskeys = /* @__PURE__ */ atom();
 	return {
 		id: "passkey",
-		version: PACKAGE_VERSION,
+		version: PACKAGE_VERSION$1,
 		$InferServerPlugin: {},
 		getActions: ($fetch, $store) => getPasskeyActions($fetch, {
 			$listPasskeys,
@@ -3875,15 +3944,46 @@ const passkeyClient = () => {
 	};
 };
 
+//#endregion
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+f_ab392d2d19ca264106fdcee67033c1f1/node_modules/@better-auth/sso/dist/version-BbG1DbY-.mjs
+const PACKAGE_VERSION = "1.7.1";
+
+//#endregion
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+f_ab392d2d19ca264106fdcee67033c1f1/node_modules/@better-auth/sso/dist/client.mjs
+const ssoClient = (options) => {
+	return {
+		id: "sso-client",
+		version: PACKAGE_VERSION,
+		$InferServerPlugin: {},
+		pathMethods: {
+			"/sso/providers": "GET",
+			"/sso/get-provider": "GET"
+		}
+	};
+};
+
 //#endregion
 //#region ../auth/dist/client.mjs
-function u$1(n) {
+function d$1(n) {
 	return [
 		apiKeyClient(),
 		adminClient(),
 		deviceAuthorizationClient(),
 		twoFactorClient({ twoFactorPage: n?.twoFactorPage ?? `/auth/two-factor` }),
 		passkeyClient(),
+		ssoClient({
+			domainVerification: { enabled: !0 },
+			schema: { ssoProvider: { additionalFields: {
+				displayName: {
+					type: `string`,
+					required: !1
+				},
+				enabled: {
+					type: `boolean`,
+					required: !1
+				}
+			} } }
+		}),
 		organizationClient({
 			ac: t$1,
 			roles: n$1,
@@ -3892,11 +3992,11 @@ function u$1(n) {
 		inferAdditionalFields()
 	];
 }
-const d$1 = (e) => createAuthClient({
+const f$1 = (e) => createAuthClient({
 	baseURL: e.baseURL,
 	basePath: e.basePath,
 	fetchOptions: e.fetchOptions,
-	plugins: u$1(e)
+	plugins: d$1(e)
 });
 
 //#endregion
@@ -3922,7 +4022,7 @@ function exitCodeForError(error) {
 //#region src/lib/client.ts
 const AUTH_BASE_PATH = "/api/v1/auth";
 function createCliAuthClient(apiUrl) {
-	return d$1({
+	return f$1({
 		baseURL: apiUrl,
 		basePath: AUTH_BASE_PATH
 	});
@@ -3986,7 +4086,7 @@ async function createCliApiClient(runtime) {
 		sessionToken,
 		orgSlug: runtime.org
 	});
-	const client = C$1({
+	const client = T$1({
 		baseUrl: runtime.apiUrl,
 		client: "cli",
 		getHeaders: () => {
@@ -4023,7 +4123,7 @@ async function resolveProjectId(client, runtime) {
 		if (!match) throw new CliError("not_found", `Project not found: ${runtime.project}`);
 		projectId = match.id;
 	}
-	if (!projectId) throw new CliError("validation_error", "Project is required. Pass --project, set SHIPD_PROJECT, or use an API key with project metadata.");
+	if (!projectId) throw new CliError("validation_error", "Project is required. Pass --project, set SHIPD_PROJECT, or use a management key / service-account token bound to a project.");
 	return {
 		organizationId: me.organization.id,
 		projectId
@@ -4037,7 +4137,7 @@ async function resolveIds(client, runtime) {
 		if (!match) throw new CliError("not_found", `Environment not found: ${runtime.env}`);
 		environmentId = match.id;
 	}
-	if (!environmentId) throw new CliError("validation_error", "Environment is required. Pass --env, set SHIPD_ENV, or use an API key with environment metadata.");
+	if (!environmentId) throw new CliError("validation_error", "Environment is required. Pass --env, set SHIPD_ENV, or use a management key / service-account token bound to an environment.");
 	return {
 		organizationId,
 		projectId,
@@ -4163,6 +4263,7 @@ function registerAuthCommands(program) {
 			return;
 		}
 		if (me.auth.type === "user") console.log(`User: ${me.auth.name} <${me.auth.email}>`);
+		else if (me.auth.type === "service_account") console.log(`Service account: ${me.auth.serviceAccountId} (token ${me.auth.tokenId})`);
 		else console.log(`API key: ${me.auth.keyId}`);
 		console.log(`Organization: ${me.organization.slug} (${me.organization.id})`);
 		if (me.project) console.log(`Project: ${me.project.slug} (${me.project.id})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipdit/cli",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "shipd's command-line interface",
   "repository": {
     "type": "git",
@@ -19,7 +19,7 @@
   "dependencies": {
     "commander": "^14.0.0",
     "jiti": "^2.5.1",
-    "shipdit": "0.2.2",
+    "shipdit": "0.2.3",
     "zod": "^4"
   },
   "devDependencies": {