@vibeframe/cli 0.104.1 → 0.104.2

package/dist/index.js

@@ -26008,21 +26008,8 @@ async function prompt(question, hidden = false) {
   });
 }
 async function getApiKey(envVar, providerName, optionValue) {
-  if (optionValue) {
-    return optionValue;
-  }
-  const providerKey = providerKeyForEnvVar(envVar);
-  if (providerKey) {
-    const configKey = await getApiKeyFromConfig(providerKey);
-    if (configKey) {
-      return configKey;
-    }
-  }
-  loadEnv();
-  const envValue = getEnvValue2(envVar);
-  if (envValue) {
-    return envValue;
-  }
+  const configuredKey = await getConfiguredApiKey(envVar, optionValue);
+  if (configuredKey) return configuredKey;
   if (!process.stdin.isTTY) {
     return null;
   }
@@ -26043,6 +26030,19 @@ async function getApiKey(envVar, providerName, optionValue) {
   }
   return apiKey.trim();
 }
+async function getConfiguredApiKey(envVar, optionValue, options = {}) {
+  if (optionValue) return optionValue;
+  const providerKey = providerKeyForEnvVar(envVar);
+  if (providerKey) {
+    const configKey = await getApiKeyFromConfig(providerKey, { cwd: options.cwd });
+    if (configKey) return configKey;
+  }
+  loadEnv();
+  return getEnvValue2(envVar);
+}
+async function hasConfiguredApiKey(envVar, optionValue, options = {}) {
+  return Boolean(await getConfiguredApiKey(envVar, optionValue, options));
+}
 function hasApiKey(envVar) {
   loadEnv();
   return !!getEnvValue2(envVar);
@@ -26139,7 +26139,7 @@ var init_api_key = __esm({
 
 // src/commands/_shared/tts-resolve.ts
 async function resolveTtsProvider(preferred = "auto") {
-  const choice = preferred === "auto" ? hasApiKey("ELEVENLABS_API_KEY") ? "elevenlabs" : "kokoro" : preferred;
+  const choice = preferred === "auto" ? await getConfiguredApiKey("ELEVENLABS_API_KEY") ? "elevenlabs" : "kokoro" : preferred;
   if (choice === "elevenlabs") {
     return buildElevenLabs();
   }
@@ -26183,7 +26183,6 @@ var init_tts_resolve = __esm({
     "use strict";
     init_dist2();
     init_api_key();
-    init_api_key();
     TtsKeyMissingError = class extends Error {
       constructor(provider) {
         super(
@@ -26554,6 +26553,25 @@ consult this file \u2014 run the generate command directly.
 Browse named styles: \`vibe scene list-styles\`. Re-seed from one with
 \`vibe scene init . --visual-style "Swiss Pulse"\` (idempotent).
 
+## Provider keys and project scope
+
+Use VibeFrame CLI generation for project assets:
+\`vibe generate image|video|speech ...\`. This lets VibeFrame use keys
+from \`vibe setup --scope project\`.
+
+Project-scope keys may live in a parent directory, for example
+\`../.vibeframe/config.yaml\` when this scene was created by
+\`vibe init launch\`. The \`vibe\` CLI searches upward automatically, so do
+not decide keys are missing just because \`.vibeframe/config.yaml\` is not
+inside this scene folder.
+
+To verify scope without exposing secrets, run \`vibe doctor --json\` from
+this directory and inspect \`data.scope.activeScope\` plus
+\`data.scope.project.configPath\`. Never print config contents. Do not use
+a host agent's built-in image/audio generation tool for VibeFrame project
+assets unless the user explicitly requests an external, non-VibeFrame
+asset.
+
 ## Skills \u2014 USE THESE FIRST
 
 @SKILL.md
@@ -32190,7 +32208,7 @@ import { resolve as resolve18 } from "node:path";
 import { writeFile as writeFile15 } from "node:fs/promises";
 async function executeSoundEffect(options) {
   try {
-    const apiKey = hasApiKey("ELEVENLABS_API_KEY") ? await getApiKeyFromConfig("elevenlabs") || process.env.ELEVENLABS_API_KEY : null;
+    const apiKey = await getConfiguredApiKey("ELEVENLABS_API_KEY");
     if (!apiKey)
       return {
         success: false,
@@ -32289,7 +32307,6 @@ var init_sound_effect = __esm({
     init_ora();
     init_dist2();
     init_api_key();
-    init_config();
     init_output();
     init_validate();
   }
@@ -32298,7 +32315,7 @@ var init_sound_effect = __esm({
 // src/commands/generate/music-status.ts
 async function executeMusicStatus(options) {
   try {
-    const apiKey = options.apiKey ?? (hasApiKey("REPLICATE_API_TOKEN") ? await getApiKeyFromConfig("replicate") || process.env.REPLICATE_API_TOKEN : null);
+    const apiKey = await getConfiguredApiKey("REPLICATE_API_TOKEN", options.apiKey);
     if (!apiKey)
       return { success: false, error: "REPLICATE_API_TOKEN required for music status" };
     const replicate = new ReplicateProvider();
@@ -32371,7 +32388,6 @@ var init_music_status = __esm({
     init_source();
     init_dist2();
     init_api_key();
-    init_config();
     init_output();
   }
 });
@@ -32452,7 +32468,7 @@ import { resolve as resolve19, dirname as dirname4 } from "node:path";
 import { writeFile as writeFile16, mkdir as mkdir8 } from "node:fs/promises";
 async function executeBackground(options) {
   try {
-    const apiKey = options.apiKey ?? (hasApiKey("OPENAI_API_KEY") ? await getApiKeyFromConfig("openai") || process.env.OPENAI_API_KEY : null);
+    const apiKey = await getConfiguredApiKey("OPENAI_API_KEY", options.apiKey);
     if (!apiKey)
       return { success: false, error: "OPENAI_API_KEY required for background generation" };
     const openaiImage = new OpenAIImageProvider();
@@ -32583,7 +32599,6 @@ var init_background = __esm({
     init_ora();
     init_dist2();
     init_api_key();
-    init_config();
     init_output();
     init_validate();
   }
@@ -33249,7 +33264,7 @@ import { resolve as resolve21 } from "node:path";
 import { writeFile as writeFile18 } from "node:fs/promises";
 async function executeSpeech(options) {
   try {
-    const apiKey = hasApiKey("ELEVENLABS_API_KEY") ? await getApiKeyFromConfig("elevenlabs") || process.env.ELEVENLABS_API_KEY : null;
+    const apiKey = await getConfiguredApiKey("ELEVENLABS_API_KEY");
     if (!apiKey)
       return {
         success: false,
@@ -33464,7 +33479,6 @@ var init_speech = __esm({
     init_dist2();
     init_api_key();
     init_tty();
-    init_config();
     init_output();
     init_validate();
   }
@@ -33817,7 +33831,7 @@ async function executeVideoGenerate(options) {
       fal: "FAL_API_KEY"
     };
     const envKey = envKeyMap[provider] || "";
-    const key = apiKey || (hasApiKey(envKey) ? process.env[envKey] : void 0);
+    const key = await getConfiguredApiKey(envKey, apiKey);
     if (!key) return { success: false, error: `${envKeyMap[provider]} required for ${provider}` };
     let referenceImage;
     let referenceImageBuffer;
@@ -35073,7 +35087,7 @@ async function executeMusic(options) {
   try {
     const provider = options.provider || "elevenlabs";
     if (provider === "elevenlabs") {
-      const apiKey2 = hasApiKey("ELEVENLABS_API_KEY") ? await getApiKeyFromConfig("elevenlabs") || process.env.ELEVENLABS_API_KEY : null;
+      const apiKey2 = await getConfiguredApiKey("ELEVENLABS_API_KEY");
       if (!apiKey2)
         return {
           success: false,
@@ -35093,7 +35107,7 @@ async function executeMusic(options) {
       await writeFile23(outputPath2, result2.audioBuffer);
       return { success: true, outputPath: outputPath2, provider: "elevenlabs", duration: duration2 };
     }
-    const apiKey = hasApiKey("REPLICATE_API_TOKEN") ? await getApiKeyFromConfig("replicate") || process.env.REPLICATE_API_TOKEN : null;
+    const apiKey = await getConfiguredApiKey("REPLICATE_API_TOKEN");
     if (!apiKey)
       return {
         success: false,
@@ -35328,7 +35342,6 @@ var init_music = __esm({
     init_ora();
     init_dist2();
     init_api_key();
-    init_config();
     init_output();
     init_validate();
     init_status_jobs();
@@ -36395,7 +36408,7 @@ Examples:
             )
           );
         }
-        if (providerEnvMap[provider] && !hasApiKey(providerEnvMap[provider]) && !options.apiKey) {
+        if (providerEnvMap[provider] && !await hasConfiguredApiKey(providerEnvMap[provider], options.apiKey)) {
           const resolved = resolveProvider("image");
           if (resolved) {
             log(source_default.dim(`  ${provider} key not found. Using ${resolved.label} instead.`));
@@ -37835,7 +37848,7 @@ Examples:
           );
           provider = "seedance";
         }
-        if (videoEnvMap[provider] && !hasApiKey(videoEnvMap[provider]) && !options.apiKey) {
+        if (videoEnvMap[provider] && !await hasConfiguredApiKey(videoEnvMap[provider], options.apiKey)) {
           const resolved = resolveProvider("video");
           if (resolved) {
             log(source_default.dim(`  ${provider} key not found. Using ${resolved.label} instead.`));
@@ -71384,7 +71397,7 @@ init_source();
 // package.json
 var package_default = {
   name: "@vibeframe/cli",
-  version: "0.104.1",
+  version: "0.104.2",
   description: "VibeFrame CLI - natural language video editing from the terminal",
   private: false,
   license: "MIT",
@@ -80212,11 +80225,25 @@ When you run vibe commands programmatically:
    echo '{"video":"long.mp4","count":3,"aspect":"9:16"}' | vibe remix auto-shorts --stdin --json
    \`\`\`
 
-## Provider keys
+## Provider keys and project scope
+
+Prefer \`vibe setup --scope project\` for project-local keys. It writes
+\`.vibeframe/config.yaml\` in the setup directory; when you work from a
+nested scene directory, the \`vibe\` CLI automatically searches parent
+directories and uses the nearest project config. Do not assume the config
+file must exist in the current subdirectory.
+
+Run \`vibe doctor --json\` from the directory where you will run commands
+and check \`data.scope.project.configPath\` / \`data.scope.activeScope\` before
+deciding keys are missing. Never print or copy config file contents.
+
+For generated project assets, use VibeFrame commands such as
+\`vibe generate image|video|speech ...\` so these project-scope keys are
+used. Do not switch to a host agent's built-in image/audio generation tool
+unless the user explicitly asks for a non-VibeFrame asset.
 
-API keys live in \`.env\` (gitignored). Copy \`.env.example\` to start. Run
-\`vibe doctor\` to see which keys are currently detected and which providers
-they unlock.
+\`.env\` is still supported as a gitignored fallback. Copy \`.env.example\`
+to start if you prefer environment variables.
 
 ### Composition rules (scene HTML)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibeframe/cli",
-  "version": "0.104.1",
+  "version": "0.104.2",
   "description": "VibeFrame CLI - natural language video editing from the terminal",
   "private": false,
   "license": "MIT",
@@ -183,8 +183,8 @@
     "tsx": "^4.21.0",
     "typescript": "^5.3.3",
     "vitest": "^1.2.2",
-    "@vibeframe/ai-providers": "0.104.1",
-    "@vibeframe/core": "0.104.1"
+    "@vibeframe/ai-providers": "0.104.2",
+    "@vibeframe/core": "0.104.2"
   },
   "engines": {
     "node": ">=20"