@vosjs/cli 0.85.0 → 0.86.0

package/README.md

@@ -39,8 +39,9 @@ Node 18 or newer and a Chromium-family browser. A system Chrome is used when pre
 ```bash
 vos setup [--agent claude,cursor,codex,copilot|all] [--global] [--no-skills] [--skills-from-catalog] [--no-rules] [--no-browser] [--url <dev server>]
 vos doctor [--url <dev server>]     # what is ready, in words; exit 3 when no browser
-vos whoami                          # the key's name and the account it belongs to, never the key
-vos logout                          # remove ~/.config/vos/credentials
+vos whoami                          # the account in use, its key's name, and every other account stored; never a key
+vos switch [<handle>]               # use another stored account (with two stored, the other one)
+vos logout [<handle>] [--all]       # forget the account in use, a named one, or every stored credential
 ```
 
 `vos setup` detects the agents present by their directories (`.claude/`, `.cursor/`, `.codex/` or `.agents/`, `.github/copilot`; the home forms under `--global`), installs the skills into them from the copy of the catalog this package ships (`skills/`, the catalog at the tag this release was cut from; `--skills-from-catalog` fetches that same tag through skills.sh instead, with the bundled copy as the fallback when it cannot be reached), finds a browser in the recorder's own order or installs Chromium, writes one block between `<!-- vos:begin -->` and `<!-- vos:end -->` markers into `AGENTS.md` (or `CLAUDE.md` when only that exists), so a second run replaces its own text and never yours, and ends with `doctor`. These four verbs print NDJSON whenever stdout is not a TTY, and every `done` event carries `next_step`.
@@ -531,10 +532,10 @@ vos brand https://your.app --out BRAND.md                      # the brand kit,
 
 ## The vos.so loop
 
-Everything that runs on your machine is open source; [vos.so](https://vos.so) is the hosted platform: a studio for the human half of an edit, version history with a typed changelog, a shelf of projects and recipes. All vos.so traffic lives behind one client: one origin (`VOS_ORIGIN`, default `https://vos.so`; `--origin` per call), one credential ladder (`--key`, then `VOS_API_KEY`, then `~/.config/vos/credentials`, written by `vos login` with the origin it was minted for; a `vos_rg_` remix grant is just a key), one tracking file (`vos.json` beside the artifact). Credentials are never printed, and the stored one is sent only to the origin it was minted for (a file written before the origin line is `https://vos.so`'s): a command aimed at another origin sends no key and says so, so pass `--key` or `VOS_API_KEY` for it, or `vos login --origin <it>`. Keys can never publish: pushes are private, and humans publish on vos.so.
+Everything that runs on your machine is open source; [vos.so](https://vos.so) is the hosted platform: a studio for the human half of an edit, version history with a typed changelog, a shelf of projects and recipes. All vos.so traffic lives behind one client: one origin (`VOS_ORIGIN`, default `https://vos.so`; `--origin` per call), one credential ladder (`--key`, then `--account <handle>`, then `VOS_API_KEY`, then `VOS_ACCOUNT`, then the account in use at `~/.config/vos/credentials`; a `vos_rg_` remix grant is just a key), one tracking file (`vos.json` beside the artifact). **A person is many accounts** (themselves, and every organization they act for), so `vos login` is additive: the approval page asks which account the terminal is signed in as, every account signed in is stored by name under `~/.config/vos/accounts/<host>/<id>`, the one in use is copied to `~/.config/vos/credentials` (its first line is still the key, for every older reader), `vos switch [<handle>]` changes which, `vos whoami` says which is in use and what else is stored, and `--account <handle>` or `VOS_ACCOUNT` picks a stored one for a command without switching; a name nothing is stored under is refused in words, never answered with another account. A key acts for exactly the account it belongs to, so switching is choosing a key. Credentials are never printed, and a stored one is sent only to the origin it was minted for (a file written before the origin line is `https://vos.so`'s): a command aimed at another origin sends no key and says so, so pass `--key` or `VOS_API_KEY` for it, or `vos login --origin <it>`. Keys can never publish: pushes are private, and humans publish on vos.so.
 
 ```bash
-vos login [--key <k>] [--label <name>] [--no-browser]   # browser sign-in: a code and a vos.so/cli/auth URL, a human approves, the key stores itself
+vos login [--key <k>] [--label <name>] [--no-browser]   # browser sign-in: a code and a vos.so/cli/auth URL, a human approves (as themselves or an org), the key stores itself beside the ones already stored
 vos login --handoff https://vos.so/h/<token>           # the setup link a signed-in person's line carries: exchanged once for a key, no click
 vos fetch <vosId|url> [--out <slug>] [--media]         # a program writes config.json + vos.json; a take writes doc.json (+ the recording with --media)
 vos check bright-loop/config.json                      # full local validation
@@ -593,7 +594,7 @@ vos push /tmp/take --label "$TAG launch" --yes --json       # VOS_API_KEY as a r
 - **`--max-duration <s>`** on `record` and `create` defaults to the hosted recording cap, read live from `GET /api/limits` (2 s, fail-open to 30 min when the origin is unreachable): the capture stops there and the done event says so. Cut the flow rather than raising the cap; the platform refuses a longer take.
 - **`create`** is the one-shot verb: record, auto-plan and render in one command and one browser session. The take directory still lands on disk, so the full loop (frames, edit `doc.json`, re-render) stays open afterwards.
 - **`vos validate <thing>`** takes an `actions.json`, a take directory, a program directory (`config.json`, plus its program document when present), or a `kit.json`; exit 1 on any problem.
-- **Environment.** `VOS_ORIGIN` (the platform, and the studio `vos open` opens), `VOS_API_KEY`, `VOS_BROWSER_PATH`, `VOS_CLIENT` (the client string a push self-reports; unset, a push names the coding agent that spawned the CLI, read from its environment the way `@vercel/detect-agent` reads it, e.g. `claude-code vos-cli`, else `vos-cli`).
+- **Environment.** `VOS_ORIGIN` (the platform, and the studio `vos open` opens), `VOS_API_KEY` (a key, as a CI secret; it outranks the store), `VOS_ACCOUNT` (a stored account by handle, for a shell or a runner that never holds a key), `VOS_BROWSER_PATH`, `VOS_CLIENT` (the client string a push self-reports; unset, a push names the coding agent that spawned the CLI, read from its environment the way `@vercel/detect-agent` reads it, e.g. `claude-code vos-cli`, else `vos-cli`).
 
 ## Programmatic use
 

package/dist/{assetManifest-32VI7OK7.js → assetManifest-QFJ7X6TT.js}

@@ -4,12 +4,12 @@ import {
   localManifestRefs,
   pullManifest,
   uploadManifest
-} from "./chunk-M5ZBQFPG.js";
-import "./chunk-EPSYIF2S.js";
+} from "./chunk-V3RUNUNP.js";
+import "./chunk-PZP76YJI.js";
 export {
   hostedLiteralWarnings,
   localManifestRefs,
   pullManifest,
   uploadManifest
 };
-//# sourceMappingURL=assetManifest-32VI7OK7.js.map
+//# sourceMappingURL=assetManifest-QFJ7X6TT.js.map

package/dist/{chunk-Q47FUCYN.js → chunk-2LAXJZCG.js}

@@ -3,7 +3,7 @@ import {
   ASSET_ROUTE,
   UsageError,
   serveFile
-} from "./chunk-EPSYIF2S.js";
+} from "./chunk-PZP76YJI.js";
 
 // src/loadConfig.ts
 import { readFile } from "fs/promises";
@@ -573,4 +573,4 @@ export {
   setFlags,
   applyDataSets
 };
-//# sourceMappingURL=chunk-Q47FUCYN.js.map
+//# sourceMappingURL=chunk-2LAXJZCG.js.map

package/dist/{chunk-PF2NEZYU.js → chunk-7A3PZARL.js}

@@ -128,13 +128,20 @@ var manifest = {
     },
     {
       name: "whoami",
-      summary: "the key\u2019s name and the account it belongs to, never the key"
+      summary: "the account in use and every other one stored for the origin, never a key"
     },
-    { name: "logout", summary: "remove ~/.config/vos/credentials" }
+    {
+      name: "switch",
+      summary: "use another stored account (vos login once per account stores them all)"
+    },
+    {
+      name: "logout",
+      summary: "forget the account in use, a named one (vos logout <handle>), or all (--all)"
+    }
   ]
 };
 
 export {
   manifest
 };
-//# sourceMappingURL=chunk-PF2NEZYU.js.map
+//# sourceMappingURL=chunk-7A3PZARL.js.map

package/dist/{chunk-PF2NEZYU.js.map → chunk-7A3PZARL.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/plugin/manifest.ts"],"sourcesContent":["/**\n * The verb manifest of the take pipeline and the vos.so verbs — what\n * `vos help` lists under the engine verbs. It kept the shape a separately\n * installed plugin once handed the host (name + host range), so a script\n * reading it keeps working.\n */\nexport interface PluginVerb {\n  name: string\n  summary: string\n}\n\nexport interface PluginManifest {\n  name: string\n  /** Host versions this plugin speaks the run(argv) contract with. */\n  hostRange: string\n  verbs: PluginVerb[]\n}\n\nexport const manifest: PluginManifest = {\n  name: '@vosjs/cli',\n  hostRange: '>=0.9.0',\n  verbs: [\n    {\n      name: 'create',\n      summary: 'record + auto-plan + render, one command (--strict)',\n    },\n    {\n      name: 'record',\n      summary: 'drive actions.json into a take (screencast + cursor track)',\n    },\n    {\n      name: 'look',\n      summary:\n        'see a page before scripting it (signed in, like record): a screenshot + every control in view with one proposed stable selector',\n    },\n    {\n      name: 'plan',\n      summary:\n        'plan zoom/cursor effects into doc.json (wand contract); --reuse re-times a previous cut onto a re-recording',\n    },\n    {\n      name: 'render',\n      summary: 'render a take directory (engine configs render in the host)',\n    },\n    {\n      name: 'frames',\n      summary:\n        'PNG stills at output times / zoom apexes (each checked against its zoom-off twin) / moments / exact sizes',\n    },\n    {\n      name: 'check-video',\n      summary:\n        'check a rendered file: facts, scene changes, loudness, first and last frames',\n    },\n    {\n      name: 'deliver',\n      summary:\n        'render a take to release video destinations (YouTube, X, Shorts/LinkedIn, GitHub) + verified kit.json',\n    },\n    {\n      name: 'digest',\n      summary:\n        'see a recording before cutting it: moments (clicks, typing, scrolls, idle, scenes) + footage frames + crops, in doc units',\n    },\n    { name: 'open', summary: 'serve the take into the vos.so studio' },\n    {\n      name: 'validate',\n      summary:\n        'lint actions.json, a take dir (doc.json semantics), or re-measure a kit.json against the channel specs',\n    },\n    {\n      name: 'actions',\n      summary:\n        'from-agent-browser: turn an agent-browser walk (steps.jsonl) into actions.json; what cannot follow is named',\n    },\n    {\n      name: 'ingest',\n      summary:\n        'a take from a recording someone else made, with its cursor track from a trace beside it (Playwright trace.zip, stamped records, CSV); without one nothing is planned',\n    },\n    {\n      name: 'join',\n      summary:\n        'several takes and video files as one take: each next input a media, its spans tagged, its layers moved to where it starts; --captions anchors every step caption',\n    },\n    {\n      name: 'score',\n      summary:\n        \"a music track as the film's score, its strongest swell landed on a step or a second (--dry-run prints the loudness envelope and the plan)\",\n    },\n    {\n      name: 'audio',\n      summary:\n        'measure: every audio clip’s loudness (integrated LUFS, sample peak) written beside it, which a clip’s normalize target plays it to',\n    },\n    {\n      name: 'music',\n      summary:\n        'ls: the library one line per track (tempo, vocals, loops, the sentence); pick: the beds that fit this film, best first, with reasons and the vos score line that places each',\n    },\n    {\n      name: 'port',\n      summary:\n        'bring a page, a HyperFrames or a Remotion piece: inventory (its words, colours, faces, media, scenes) then scaffold (a data-first program.mjs to translate the motion into)',\n    },\n    {\n      name: 'build',\n      summary:\n        'program.mjs (real functions) → config.json, refusing what cannot run on its own (module-scope reads, syntax the page cannot parse, non-JSON data)',\n    },\n    {\n      name: 'compare',\n      summary:\n        \"a program against the source's own render: per-frame SSIM and source | vos | difference sheets; exits 1 when any frame is under the threshold\",\n    },\n    {\n      name: 'brand',\n      summary:\n        \"write a product's BRAND.md, witnessed: /design.md, /llms.txt, then the page (palette, faces, marks, the avoid list)\",\n    },\n    {\n      name: 'fetch',\n      summary: 'download a hosted program: config.json + vos.json tracking',\n    },\n    {\n      name: 'push',\n      summary: 'push a config.json or take to vos.so (private; versioned)',\n    },\n    {\n      name: 'duplicate',\n      summary:\n        'a private sibling of your OWN vos (someone else\\u2019s is remixed: fetch + push --remix-of)',\n    },\n    {\n      name: 'pull',\n      summary:\n        'sync what changed on vos.so since your base (--media brings a take’s footage home)',\n    },\n    {\n      name: 'folder',\n      summary:\n        'list/create/pull folders, move voses and assets into them (pull = the context package on disk)',\n    },\n    {\n      name: 'asset',\n      summary:\n        'your files: push or import one, list them (assets ls), see storage (assets usage) and what uses a file (assets why)',\n    },\n    {\n      name: 'recipe',\n      summary:\n        'push a recipe .md into a folder, or replace one in place (prior body kept)',\n    },\n    {\n      name: 'login',\n      summary: 'sign in via the browser (or --key); stores a content key',\n    },\n    {\n      name: 'setup',\n      summary:\n        'ready this machine: the vos skills into your agent, a browser, one rules block, then doctor',\n    },\n    {\n      name: 'doctor',\n      summary:\n        'what is ready, in words: node, browser, ffmpeg, skills, a credential (never printed), the dev server',\n    },\n    {\n      name: 'whoami',\n      summary: 'the key’s name and the account it belongs to, never the key',\n    },\n    { name: 'logout', summary: 'remove ~/.config/vos/credentials' },\n  ],\n}\n"],"mappings":";;;AAkBO,IAAM,WAA2B;AAAA,EACtC,MAAM;AAAA,EACN,WAAW;AAAA,EACX,OAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA,EAAE,MAAM,QAAQ,SAAS,wCAAwC;AAAA,IACjE;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,EAAE,MAAM,UAAU,SAAS,mCAAmC;AAAA,EAChE;AACF;","names":[]}
+{"version":3,"sources":["../src/plugin/manifest.ts"],"sourcesContent":["/**\n * The verb manifest of the take pipeline and the vos.so verbs — what\n * `vos help` lists under the engine verbs. It kept the shape a separately\n * installed plugin once handed the host (name + host range), so a script\n * reading it keeps working.\n */\nexport interface PluginVerb {\n  name: string\n  summary: string\n}\n\nexport interface PluginManifest {\n  name: string\n  /** Host versions this plugin speaks the run(argv) contract with. */\n  hostRange: string\n  verbs: PluginVerb[]\n}\n\nexport const manifest: PluginManifest = {\n  name: '@vosjs/cli',\n  hostRange: '>=0.9.0',\n  verbs: [\n    {\n      name: 'create',\n      summary: 'record + auto-plan + render, one command (--strict)',\n    },\n    {\n      name: 'record',\n      summary: 'drive actions.json into a take (screencast + cursor track)',\n    },\n    {\n      name: 'look',\n      summary:\n        'see a page before scripting it (signed in, like record): a screenshot + every control in view with one proposed stable selector',\n    },\n    {\n      name: 'plan',\n      summary:\n        'plan zoom/cursor effects into doc.json (wand contract); --reuse re-times a previous cut onto a re-recording',\n    },\n    {\n      name: 'render',\n      summary: 'render a take directory (engine configs render in the host)',\n    },\n    {\n      name: 'frames',\n      summary:\n        'PNG stills at output times / zoom apexes (each checked against its zoom-off twin) / moments / exact sizes',\n    },\n    {\n      name: 'check-video',\n      summary:\n        'check a rendered file: facts, scene changes, loudness, first and last frames',\n    },\n    {\n      name: 'deliver',\n      summary:\n        'render a take to release video destinations (YouTube, X, Shorts/LinkedIn, GitHub) + verified kit.json',\n    },\n    {\n      name: 'digest',\n      summary:\n        'see a recording before cutting it: moments (clicks, typing, scrolls, idle, scenes) + footage frames + crops, in doc units',\n    },\n    { name: 'open', summary: 'serve the take into the vos.so studio' },\n    {\n      name: 'validate',\n      summary:\n        'lint actions.json, a take dir (doc.json semantics), or re-measure a kit.json against the channel specs',\n    },\n    {\n      name: 'actions',\n      summary:\n        'from-agent-browser: turn an agent-browser walk (steps.jsonl) into actions.json; what cannot follow is named',\n    },\n    {\n      name: 'ingest',\n      summary:\n        'a take from a recording someone else made, with its cursor track from a trace beside it (Playwright trace.zip, stamped records, CSV); without one nothing is planned',\n    },\n    {\n      name: 'join',\n      summary:\n        'several takes and video files as one take: each next input a media, its spans tagged, its layers moved to where it starts; --captions anchors every step caption',\n    },\n    {\n      name: 'score',\n      summary:\n        \"a music track as the film's score, its strongest swell landed on a step or a second (--dry-run prints the loudness envelope and the plan)\",\n    },\n    {\n      name: 'audio',\n      summary:\n        'measure: every audio clip’s loudness (integrated LUFS, sample peak) written beside it, which a clip’s normalize target plays it to',\n    },\n    {\n      name: 'music',\n      summary:\n        'ls: the library one line per track (tempo, vocals, loops, the sentence); pick: the beds that fit this film, best first, with reasons and the vos score line that places each',\n    },\n    {\n      name: 'port',\n      summary:\n        'bring a page, a HyperFrames or a Remotion piece: inventory (its words, colours, faces, media, scenes) then scaffold (a data-first program.mjs to translate the motion into)',\n    },\n    {\n      name: 'build',\n      summary:\n        'program.mjs (real functions) → config.json, refusing what cannot run on its own (module-scope reads, syntax the page cannot parse, non-JSON data)',\n    },\n    {\n      name: 'compare',\n      summary:\n        \"a program against the source's own render: per-frame SSIM and source | vos | difference sheets; exits 1 when any frame is under the threshold\",\n    },\n    {\n      name: 'brand',\n      summary:\n        \"write a product's BRAND.md, witnessed: /design.md, /llms.txt, then the page (palette, faces, marks, the avoid list)\",\n    },\n    {\n      name: 'fetch',\n      summary: 'download a hosted program: config.json + vos.json tracking',\n    },\n    {\n      name: 'push',\n      summary: 'push a config.json or take to vos.so (private; versioned)',\n    },\n    {\n      name: 'duplicate',\n      summary:\n        'a private sibling of your OWN vos (someone else\\u2019s is remixed: fetch + push --remix-of)',\n    },\n    {\n      name: 'pull',\n      summary:\n        'sync what changed on vos.so since your base (--media brings a take’s footage home)',\n    },\n    {\n      name: 'folder',\n      summary:\n        'list/create/pull folders, move voses and assets into them (pull = the context package on disk)',\n    },\n    {\n      name: 'asset',\n      summary:\n        'your files: push or import one, list them (assets ls), see storage (assets usage) and what uses a file (assets why)',\n    },\n    {\n      name: 'recipe',\n      summary:\n        'push a recipe .md into a folder, or replace one in place (prior body kept)',\n    },\n    {\n      name: 'login',\n      summary: 'sign in via the browser (or --key); stores a content key',\n    },\n    {\n      name: 'setup',\n      summary:\n        'ready this machine: the vos skills into your agent, a browser, one rules block, then doctor',\n    },\n    {\n      name: 'doctor',\n      summary:\n        'what is ready, in words: node, browser, ffmpeg, skills, a credential (never printed), the dev server',\n    },\n    {\n      name: 'whoami',\n      summary:\n        'the account in use and every other one stored for the origin, never a key',\n    },\n    {\n      name: 'switch',\n      summary:\n        'use another stored account (vos login once per account stores them all)',\n    },\n    {\n      name: 'logout',\n      summary:\n        'forget the account in use, a named one (vos logout <handle>), or all (--all)',\n    },\n  ],\n}\n"],"mappings":";;;AAkBO,IAAM,WAA2B;AAAA,EACtC,MAAM;AAAA,EACN,WAAW;AAAA,EACX,OAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA,EAAE,MAAM,QAAQ,SAAS,wCAAwC;AAAA,IACjE;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-EPSYIF2S.js → chunk-PZP76YJI.js}

@@ -341,9 +341,8 @@ function hasFlag(flags, name) {
 }
 
 // src/plugin/platform.ts
-import { mkdirSync as mkdirSync2, readFileSync, writeFileSync as writeFileSync2 } from "fs";
-import { homedir } from "os";
-import { dirname as dirname2, join } from "path";
+import { readFileSync as readFileSync2 } from "fs";
+import { join as join2 } from "path";
 
 // src/plugin/hostAgent.ts
 import { existsSync } from "fs";
@@ -389,6 +388,204 @@ function detectHostAgent(env = process.env, exists = existsSync) {
   return null;
 }
 
+// src/plugin/accounts.ts
+import {
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync2,
+  readFileSync,
+  readdirSync,
+  rmSync,
+  writeFileSync as writeFileSync2
+} from "fs";
+import { homedir } from "os";
+import { dirname as dirname2, join } from "path";
+var CREDENTIALS_PATH = join(homedir(), ".config", "vos", "credentials");
+var ACCOUNTS_DIR = join(homedir(), ".config", "vos", "accounts");
+var DEFAULT_ORIGIN = "https://vos.so";
+var ACCOUNT_ENV = "VOS_ACCOUNT";
+var DEFAULT_STORE = {
+  credentialsPath: CREDENTIALS_PATH,
+  accountsDir: ACCOUNTS_DIR
+};
+function originOf(url) {
+  try {
+    return new URL(url).origin;
+  } catch {
+    return url.replace(/\/+$/, "");
+  }
+}
+function accountFrom(value) {
+  if (!value || typeof value !== "object") return null;
+  const u = value;
+  if (typeof u.id !== "string" || !u.id) return null;
+  return {
+    id: u.id,
+    kind: u.kind === "org" ? "org" : "person",
+    handle: typeof u.username === "string" && u.username ? u.username : null
+  };
+}
+function formatCredential(c) {
+  const account = c.account ? `account=${c.account.id} ${c.account.kind}${c.account.handle ? ` ${c.account.handle}` : ""}
+` : "";
+  return `${c.key.trim()}
+origin=${originOf(c.origin)}
+${account}`;
+}
+function parseCredential(text) {
+  const [first, ...rest] = text.split("\n");
+  const key = first.trim();
+  if (!key) return null;
+  let origin = "";
+  let account = null;
+  for (const raw of rest) {
+    const line = raw.trim();
+    if (line.startsWith("origin=")) origin = originOf(line.slice(7).trim());
+    else if (line.startsWith("account=")) {
+      const [id, kind, handle] = line.slice(8).trim().split(/\s+/);
+      if (id)
+        account = {
+          id,
+          kind: kind === "org" ? "org" : "person",
+          handle: handle || null
+        };
+    }
+  }
+  return { key, origin: origin || DEFAULT_ORIGIN, account };
+}
+function readFile(path) {
+  try {
+    return parseCredential(readFileSync(path, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function writeFile2(path, c) {
+  mkdirSync2(dirname2(path), { recursive: true, mode: 448 });
+  writeFileSync2(path, formatCredential(c), { mode: 384 });
+}
+function hostDir(origin) {
+  let host;
+  try {
+    host = new URL(origin).host;
+  } catch {
+    host = origin.replace(/^https?:\/\//, "").replace(/\/.*$/, "");
+  }
+  return host.replace(/[^A-Za-z0-9.-]/g, "_") || "unknown";
+}
+function accountPath(store, origin, accountId) {
+  return join(store.accountsDir, hostDir(origin), accountId);
+}
+function readActive(store = DEFAULT_STORE) {
+  return readFile(store.credentialsPath);
+}
+function listStored(store = DEFAULT_STORE, origin) {
+  const active = readActive(store);
+  const want = origin ? originOf(origin) : null;
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const push = (c) => {
+    if (!c || want && c.origin !== want || seen.has(c.key)) return;
+    seen.add(c.key);
+    out.push(c);
+  };
+  push(active);
+  let hosts = [];
+  try {
+    hosts = readdirSync(store.accountsDir);
+  } catch {
+    return out;
+  }
+  for (const host of hosts.sort()) {
+    let files = [];
+    try {
+      files = readdirSync(join(store.accountsDir, host));
+    } catch {
+      continue;
+    }
+    for (const file of files.sort()) {
+      push(readFile(join(store.accountsDir, host, file)));
+    }
+  }
+  return out;
+}
+function isActive(c, store = DEFAULT_STORE) {
+  return readActive(store)?.key === c.key;
+}
+function accountLabel(a) {
+  if (!a) return "an unnamed account";
+  return a.handle ? `@${a.handle}` : a.id;
+}
+function matchesAccount(a, ref) {
+  if (!a) return false;
+  const want = ref.trim().replace(/^@/, "");
+  if (!want) return false;
+  if (a.id === want) return true;
+  return !!a.handle && a.handle.toLowerCase() === want.toLowerCase();
+}
+function findStored(store, origin, ref) {
+  return listStored(store, origin).find((c) => matchesAccount(c.account, ref)) ?? null;
+}
+function activate(store, c) {
+  writeFile2(store.credentialsPath, c);
+  return store.credentialsPath;
+}
+function storeCredential(store, c) {
+  const previous = readActive(store);
+  let setAside = null;
+  if (previous && previous.key !== c.key) {
+    if (previous.account) {
+      writeFile2(
+        accountPath(store, previous.origin, previous.account.id),
+        previous
+      );
+      setAside = previous;
+    }
+  }
+  if (c.account) writeFile2(accountPath(store, c.origin, c.account.id), c);
+  return { path: activate(store, c), setAside };
+}
+function removeStored(store, c) {
+  const wasActive = isActive(c, store);
+  if (c.account) {
+    rmSync(accountPath(store, c.origin, c.account.id), { force: true });
+  }
+  if (wasActive) rmSync(store.credentialsPath, { force: true });
+  return { wasActive };
+}
+function removeAll(store) {
+  const had = existsSync2(store.credentialsPath) || existsSync2(store.accountsDir);
+  rmSync(store.credentialsPath, { force: true });
+  rmSync(store.accountsDir, { recursive: true, force: true });
+  return { had };
+}
+function switchTarget(stored, activeKey, ref, origin) {
+  if (ref) {
+    const to = stored.find((c) => matchesAccount(c.account, ref));
+    if (!to)
+      return {
+        ok: false,
+        error: `no credential stored for ${ref.startsWith("@") ? ref : `@${ref.replace(/^@/, "")}`} on ${origin}; run vos login and approve as it${stored.length ? `, or vos switch ${stored.map((c) => accountLabel(c.account)).join(" | ")}` : ""}`
+      };
+    return { ok: true, to };
+  }
+  const others = stored.filter((c) => c.key !== activeKey);
+  if (stored.length === 0)
+    return {
+      ok: false,
+      error: `nothing is stored for ${origin}; run vos login`
+    };
+  if (stored.length === 1)
+    return {
+      ok: false,
+      error: `only ${accountLabel(stored[0].account)} is stored for ${origin}; run vos login and approve as another account to add one`
+    };
+  if (others.length === 1) return { ok: true, to: others[0] };
+  return {
+    ok: false,
+    error: `say which: vos switch ${stored.map((c) => accountLabel(c.account)).join(" | ")}`
+  };
+}
+
 // src/plugin/platform.ts
 function platformOrigin(flags = {}) {
   const legacyEnv = process.env.VOS_API_BASE?.trim();
@@ -422,40 +619,63 @@ function parseVosId(input) {
 function deriveSlug(title) {
   return title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 50).replace(/-+$/, "") || "remix";
 }
-var CREDENTIALS_PATH = join(homedir(), ".config", "vos", "credentials");
-var DEFAULT_ORIGIN = "https://vos.so";
-function originOf(url) {
-  try {
-    return new URL(url).origin;
-  } catch {
-    return url.replace(/\/+$/, "");
-  }
-}
-function readStoredCredential(path = CREDENTIALS_PATH) {
-  let text;
-  try {
-    text = readFileSync(path, "utf8");
-  } catch {
-    return null;
-  }
-  const [first, ...rest] = text.split("\n");
-  const key = first.trim();
-  if (!key) return null;
-  const line = rest.map((l) => l.trim()).find((l) => l.startsWith("origin="));
-  const origin = line ? originOf(line.slice("origin=".length).trim()) : "";
-  return { key, origin: origin || DEFAULT_ORIGIN };
-}
 var storedFor = /* @__PURE__ */ new Map();
 var warned = /* @__PURE__ */ new Set();
+var lastResolved = null;
+function lastCredential() {
+  return lastResolved;
+}
+function credentialFlags(flags) {
+  const str = (name) => typeof flags[name] === "string" ? flags[name] : void 0;
+  return {
+    key: str("key"),
+    account: str("account"),
+    origin: platformOrigin({ origin: str("origin"), api: str("api") })
+  };
+}
+function fromStore(c, via) {
+  if (!c) return null;
+  storedFor.set(c.key, c.origin);
+  lastResolved = { key: c.key, via, account: c.account, origin: c.origin };
+  return c.key;
+}
 function resolveCredential(explicit, path = CREDENTIALS_PATH) {
-  const flag = explicit?.trim();
-  if (flag) return flag;
+  const ask = typeof explicit === "string" || explicit === void 0 ? { key: explicit } : explicit;
+  const store = ask.store ?? {
+    ...DEFAULT_STORE,
+    ...path !== CREDENTIALS_PATH ? { credentialsPath: path } : {}
+  };
+  const origin = ask.origin ?? platformOrigin();
+  const flag = ask.key?.trim();
+  if (flag) {
+    lastResolved = { key: flag, via: "flag", account: null, origin: null };
+    return flag;
+  }
+  const named = ask.account?.trim();
+  if (named) {
+    const found = findStored(store, origin, named);
+    if (!found)
+      throw new Error(noSuchAccount(store, origin, named, "--account"));
+    return fromStore(found, "account-flag");
+  }
   const env = process.env.VOS_API_KEY?.trim();
-  if (env) return env;
-  const stored = readStoredCredential(path);
-  if (!stored) return null;
-  storedFor.set(stored.key, stored.origin);
-  return stored.key;
+  if (env) {
+    lastResolved = { key: env, via: "env", account: null, origin: null };
+    return env;
+  }
+  const envName = process.env[ACCOUNT_ENV]?.trim();
+  if (envName) {
+    const found = findStored(store, origin, envName);
+    if (!found)
+      throw new Error(noSuchAccount(store, origin, envName, ACCOUNT_ENV));
+    return fromStore(found, "account-env");
+  }
+  return fromStore(readActive(store), "stored");
+}
+function noSuchAccount(store, origin, ref, how) {
+  const have = listStored(store, origin).map((c) => accountLabel(c.account));
+  const name = ref.startsWith("@") ? ref : `@${ref}`;
+  return `${how} names ${name}, and no credential for it is stored for ${origin}: run vos login and approve as ${name}` + (have.length ? ` (stored: ${have.join(", ")})` : "");
 }
 function bearerFor(key, url) {
   if (!key) return {};
@@ -477,20 +697,25 @@ var mintAt = (origin = DEFAULT_ORIGIN) => `${originOf(origin)}/app/api`;
 function requireCredential(explicit, origin) {
   const key = resolveCredential(explicit);
   if (!key) {
+    const at = origin ?? (typeof explicit === "object" ? explicit.origin : void 0) ?? platformOrigin();
     throw new Error(
-      `no credential found \u2014 pass --key, set VOS_API_KEY, or run \`vos login\` (mint a content key at ${mintAt(origin ?? platformOrigin())}; a vos_rg_ remix grant works too)`
+      `no credential found \u2014 pass --key, set VOS_API_KEY, or run \`vos login\` (mint a content key at ${mintAt(at)}; a vos_rg_ remix grant works too)`
     );
   }
   return key;
 }
-function writeCredential(key, origin = DEFAULT_ORIGIN, path = CREDENTIALS_PATH) {
-  mkdirSync2(dirname2(path), { recursive: true, mode: 448 });
-  writeFileSync2(path, `${key.trim()}
-origin=${originOf(origin)}
-`, {
-    mode: 384
+function writeCredential(key, origin = DEFAULT_ORIGIN, path = CREDENTIALS_PATH, account = null) {
+  return storeLogin(key, origin, account, {
+    ...DEFAULT_STORE,
+    ...path !== CREDENTIALS_PATH ? { credentialsPath: path } : {}
+  }).path;
+}
+function storeLogin(key, origin, account, store = DEFAULT_STORE) {
+  return storeCredential(store, {
+    key: key.trim(),
+    origin: originOf(origin),
+    account
   });
-  return path;
 }
 function clientId(env = process.env, exists) {
   const explicit = env.VOS_CLIENT?.trim();
@@ -560,13 +785,13 @@ function hostedMediaOf(value) {
 }
 function readJsonFile(file) {
   try {
-    return JSON.parse(readFileSync(file, "utf8"));
+    return JSON.parse(readFileSync2(file, "utf8"));
   } catch {
     return null;
   }
 }
 function readSyncState(dir) {
-  const own = readJsonFile(join(dir, SYNC_STATE_NAME));
+  const own = readJsonFile(join2(dir, SYNC_STATE_NAME));
   if (own && typeof own.vosId === "string") {
     return {
       vosId: own.vosId,
@@ -578,7 +803,7 @@ function readSyncState(dir) {
       ...hostedMediaOf(own.hostedMedia) ? { hostedMedia: hostedMediaOf(own.hostedMedia) } : {}
     };
   }
-  const push = readJsonFile(join(dir, "push.json"));
+  const push = readJsonFile(join2(dir, "push.json"));
   if (push && typeof push.vosId === "string") {
     return {
       vosId: push.vosId,
@@ -586,7 +811,7 @@ function readSyncState(dir) {
       ...typeof push.pushedAt === "string" ? { pushedAt: push.pushedAt } : {}
     };
   }
-  const meta = readJsonFile(join(dir, "meta.json"));
+  const meta = readJsonFile(join2(dir, "meta.json"));
   if (meta && typeof meta.id === "string") {
     return {
       vosId: meta.id,
@@ -604,7 +829,7 @@ function writeSyncState(dir, patch) {
     ...patch
   };
   writeFileSafeSync(
-    join(dir, SYNC_STATE_NAME),
+    join2(dir, SYNC_STATE_NAME),
     `${JSON.stringify(merged, null, 2)}
 `
   );
@@ -631,19 +856,19 @@ function serverWarnings(body, log) {
 import { createHash } from "crypto";
 import {
   closeSync,
-  existsSync as existsSync2,
+  existsSync as existsSync3,
   mkdirSync as mkdirSync3,
   openSync,
   readSync,
-  readdirSync,
+  readdirSync as readdirSync2,
   realpathSync,
   renameSync,
-  rmSync,
+  rmSync as rmSync2,
   statSync,
   writeFileSync as writeFileSync3
 } from "fs";
 import { homedir as homedir2 } from "os";
-import { extname, join as join2, resolve, sep } from "path";
+import { extname, join as join3, resolve, sep } from "path";
 var ASSET_ROUTE = "/__assets/";
 var UUID = "[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}";
 var HOSTED_URI = new RegExp(`^asset:(${UUID})$`);
@@ -729,7 +954,7 @@ function localFile(ref, baseDir) {
     };
   }
   const file = resolve(baseDir, ref);
-  if (!existsSync2(file) || !statSync(file).isFile()) {
+  if (!existsSync3(file) || !statSync(file).isFile()) {
     return { refused: "which is not a file beside the config" };
   }
   const root = realpathSync(baseDir);
@@ -765,11 +990,11 @@ function manifestRefs(config) {
   return out;
 }
 async function fetchHosted(id, opts) {
-  const dir = opts.cacheDir ?? join2(homedir2(), ".cache", "vos", "assets");
-  const cached = existsSync2(dir) ? readdirSync(dir).find(
+  const dir = opts.cacheDir ?? join3(homedir2(), ".cache", "vos", "assets");
+  const cached = existsSync3(dir) ? readdirSync2(dir).find(
     (f) => (f === id || f.startsWith(`${id}.`)) && !f.endsWith(".part")
   ) : void 0;
-  if (cached) return join2(dir, cached);
+  if (cached) return join3(dir, cached);
   if (!opts.origin || !opts.key) {
     opts.log(
       `note: asset ${id} is hosted and no credential is set, so the render cannot load it (vos login, or keep the file beside the config and name its path)`
@@ -787,7 +1012,7 @@ async function fetchHosted(id, opts) {
   }
   mkdirSync3(dir, { recursive: true, mode: 448 });
   const type = (res.headers.get("content-type") ?? "").split(";")[0].trim();
-  const file = join2(dir, `${id}${extensionFor(type)}`);
+  const file = join3(dir, `${id}${extensionFor(type)}`);
   const partial = `${file}.part`;
   try {
     writeFileSync3(partial, new Uint8Array(await res.arrayBuffer()), {
@@ -795,7 +1020,7 @@ async function fetchHosted(id, opts) {
     });
     renameSync(partial, file);
   } finally {
-    rmSync(partial, { force: true });
+    rmSync2(partial, { force: true });
   }
   return file;
 }
@@ -920,10 +1145,25 @@ export {
   numFlag2,
   strFlag,
   hasFlag,
+  CREDENTIALS_PATH,
+  ACCOUNT_ENV,
+  DEFAULT_STORE,
+  originOf,
+  accountFrom,
+  readActive,
+  listStored,
+  isActive,
+  accountLabel,
+  findStored,
+  activate,
+  removeStored,
+  removeAll,
+  switchTarget,
   platformOrigin,
   parseVosId,
   deriveSlug,
-  CREDENTIALS_PATH,
+  lastCredential,
+  credentialFlags,
   resolveCredential,
   bearerFor,
   mintAt,
@@ -947,4 +1187,4 @@ export {
   programAssets,
   missingManifestFiles
 };
-//# sourceMappingURL=chunk-EPSYIF2S.js.map
+//# sourceMappingURL=chunk-PZP76YJI.js.map