@xano/cli 1.0.2-beta.4 → 1.0.2-beta.6

package/dist/commands/workspace/delete/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceDelete extends BaseCommand {
     static description = 'Delete a workspace via the Xano Metadata API. Cannot delete workspaces with active tenants.';
@@ -42,23 +40,7 @@ Deleted workspace 123
     };
     async run() {
         const { flags } = await this.parse(WorkspaceDelete);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Get workspace ID from flag or profile
         const workspaceId = flags.workspace || profile.workspace;
         if (!workspaceId) {
@@ -119,24 +101,4 @@ Deleted workspace 123
             });
         });
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/edit/index.d.ts

@@ -15,5 +15,4 @@ export default class WorkspaceEdit extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
 }

package/dist/commands/workspace/edit/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceEdit extends BaseCommand {
     static description = 'Edit an existing workspace via the Xano Metadata API';
@@ -67,23 +65,7 @@ Updated workspace: my-workspace (ID: 123)
     };
     async run() {
         const { flags } = await this.parse(WorkspaceEdit);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Get workspace ID from flag or profile
         const workspaceId = flags.workspace || profile.workspace;
         if (!workspaceId) {
@@ -160,23 +142,4 @@ Updated workspace: my-workspace (ID: 123)
             }
         }
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/get/index.d.ts

@@ -10,5 +10,4 @@ export default class WorkspaceGet extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
 }

package/dist/commands/workspace/get/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceGet extends BaseCommand {
     static description = 'Get details of a specific workspace from the Xano Metadata API';
@@ -41,23 +39,7 @@ Workspace: my-workspace (ID: 123)
     };
     async run() {
         const { flags } = await this.parse(WorkspaceGet);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Get workspace ID from flag or profile
         const workspaceId = flags.workspace || profile.workspace;
         if (!workspaceId) {
@@ -112,23 +94,4 @@ Workspace: my-workspace (ID: 123)
             }
         }
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/list/index.d.ts

@@ -10,5 +10,4 @@ export default class WorkspaceList extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
 }

package/dist/commands/workspace/list/index.js

@@ -1,6 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
-import * as fs from 'node:fs';
 import BaseCommand from '../../../base-command.js';
 export default class WorkspaceList extends BaseCommand {
     static description = 'List all workspaces from the Xano Metadata API';
@@ -57,23 +55,7 @@ Available workspaces:
     };
     async run() {
         const { flags } = await this.parse(WorkspaceList);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile:create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile } = this.resolveProfile(flags);
         // Construct the API URL
         const apiUrl = `${profile.instance_origin}/api:meta/workspace`;
         // Fetch workspaces from the API
@@ -136,23 +118,4 @@ Available workspaces:
             }
         }
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile:create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
 }

package/dist/commands/workspace/pull/index.d.ts

@@ -14,7 +14,6 @@ export default class Pull extends BaseCommand {
         verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    private loadCredentials;
     /**
      * Sanitize a document name for use as a filename.
      * Strips quotes, replaces spaces with underscores, and removes

package/dist/commands/workspace/pull/index.js

@@ -1,5 +1,4 @@
 import { Flags } from '@oclif/core';
-import * as yaml from 'js-yaml';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import snakeCase from 'lodash.snakecase';
@@ -59,23 +58,7 @@ Pulled 58 documents
     };
     async run() {
         const { flags } = await this.parse(Pull);
-        // Get profile name (default or from flag/env)
-        const profileName = flags.profile || this.getDefaultProfile();
-        // Load credentials
-        const credentials = this.loadCredentials();
-        // Get the profile configuration
-        if (!(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found. Available profiles: ${Object.keys(credentials.profiles).join(', ')}\n` +
-                `Create a profile using 'xano profile:create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        // Validate required fields
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
+        const { profile, profileName } = this.resolveProfile(flags);
         // Determine workspace_id from flag or profile
         let workspaceId;
         if (flags.workspace) {
@@ -258,25 +241,6 @@ Pulled 58 documents
         }
         this.log(`Pulled ${writtenCount} documents to ${flags.directory}`);
     }
-    loadCredentials() {
-        const credentialsPath = this.getCredentialsPath();
-        // Check if credentials file exists
-        if (!fs.existsSync(credentialsPath)) {
-            this.error(`Credentials file not found at ${credentialsPath}\n` + `Create a profile using 'xano profile:create'`);
-        }
-        // Read credentials file
-        try {
-            const fileContent = fs.readFileSync(credentialsPath, 'utf8');
-            const parsed = yaml.load(fileContent);
-            if (!parsed || typeof parsed !== 'object' || !('profiles' in parsed)) {
-                this.error('Credentials file has invalid format.');
-            }
-            return parsed;
-        }
-        catch (error) {
-            this.error(`Failed to parse credentials file: ${error}`);
-        }
-    }
     /**
      * Sanitize a document name for use as a filename.
      * Strips quotes, replaces spaces with underscores, and removes

package/dist/utils/local-config.d.ts

@@ -0,0 +1,43 @@
+import type { ProfileConfig } from '../base-command.js';
+export declare const LOCAL_PROFILE_FILENAME = "profile.yaml";
+/** Fields a project-local profile.yaml may set. No secrets allowed. */
+export interface LocalProfileConfig {
+    account_origin?: string;
+    branch?: string;
+    instance_origin?: string;
+    profile?: string;
+    workspace?: string;
+}
+/**
+ * Parse the raw contents of a profile.yaml.
+ * - Throws if `access_token` is present (secrets belong in credentials.yaml).
+ * - Returns null if the content is not an object or has no recognized keys
+ *   (so an unrelated profile.yaml from another tool is ignored, not hijacked).
+ */
+export declare function parseLocalProfile(raw: string): LocalProfileConfig | null;
+/**
+ * Return a new profile with the local override fields applied.
+ * The `profile` pointer is never copied; secrets are preserved from the base.
+ */
+export declare function applyLocalOverrides(base: ProfileConfig, local: LocalProfileConfig): ProfileConfig;
+/**
+ * Decide which profile name to use and whether local overrides apply.
+ * Precedence: explicit -p/XANO_PROFILE > local profile.yaml > credentials default.
+ * An explicit profile disables the local file entirely (name and overrides).
+ */
+export declare function resolveProfileSelection(params: {
+    defaultProfile: string;
+    explicitProfile?: string;
+    hasLocal: boolean;
+    localProfileName?: string;
+}): {
+    applyLocal: boolean;
+    profileName: string;
+};
+/** Format the one-line banner shown when a local profile.yaml is in effect. */
+export declare function formatLocalProfileBanner(profileName: string, workspace: string | undefined, relativePath: string): string;
+/**
+ * Walk up from `startDir` to the filesystem root, returning the path of the
+ * first profile.yaml found, or null if none exists.
+ */
+export declare function findLocalProfilePath(startDir: string): null | string;

package/dist/utils/local-config.js

@@ -0,0 +1,88 @@
+import * as yaml from 'js-yaml';
+import * as fs from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+export const LOCAL_PROFILE_FILENAME = 'profile.yaml';
+const RECOGNIZED_KEYS = ['profile', 'workspace', 'instance_origin', 'account_origin', 'branch'];
+/**
+ * Fields that may be layered onto a resolved profile (everything except the profile pointer).
+ * NOTE: `insecure` is intentionally NOT listed here — a project file must never silently
+ * disable TLS verification (security boundary).
+ */
+const OVERRIDE_KEYS = ['workspace', 'instance_origin', 'account_origin', 'branch'];
+/**
+ * Parse the raw contents of a profile.yaml.
+ * - Throws if `access_token` is present (secrets belong in credentials.yaml).
+ * - Returns null if the content is not an object or has no recognized keys
+ *   (so an unrelated profile.yaml from another tool is ignored, not hijacked).
+ */
+export function parseLocalProfile(raw) {
+    const parsed = yaml.load(raw);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return null;
+    }
+    const obj = parsed;
+    if ('access_token' in obj) {
+        throw new Error(`profile.yaml must not contain access_token. ` +
+            `Tokens belong in credentials.yaml — reference a profile by name instead.`);
+    }
+    const config = {};
+    for (const key of RECOGNIZED_KEYS) {
+        if (obj[key] !== undefined && obj[key] !== null) {
+            config[key] = String(obj[key]);
+        }
+    }
+    if (Object.keys(config).length === 0) {
+        return null;
+    }
+    return config;
+}
+/**
+ * Return a new profile with the local override fields applied.
+ * The `profile` pointer is never copied; secrets are preserved from the base.
+ */
+export function applyLocalOverrides(base, local) {
+    const result = { ...base };
+    for (const key of OVERRIDE_KEYS) {
+        if (local[key] !== undefined) {
+            result[key] = local[key];
+        }
+    }
+    return result;
+}
+/**
+ * Decide which profile name to use and whether local overrides apply.
+ * Precedence: explicit -p/XANO_PROFILE > local profile.yaml > credentials default.
+ * An explicit profile disables the local file entirely (name and overrides).
+ */
+export function resolveProfileSelection(params) {
+    if (params.explicitProfile) {
+        return { applyLocal: false, profileName: params.explicitProfile };
+    }
+    if (params.hasLocal) {
+        return { applyLocal: true, profileName: params.localProfileName ?? params.defaultProfile };
+    }
+    return { applyLocal: false, profileName: params.defaultProfile };
+}
+/** Format the one-line banner shown when a local profile.yaml is in effect. */
+export function formatLocalProfileBanner(profileName, workspace, relativePath) {
+    const workspaceClause = workspace ? ` (workspace ${workspace})` : '';
+    return `Using profile '${profileName}'${workspaceClause} · ${relativePath}`;
+}
+/**
+ * Walk up from `startDir` to the filesystem root, returning the path of the
+ * first profile.yaml found, or null if none exists.
+ */
+export function findLocalProfilePath(startDir) {
+    let dir = resolve(startDir);
+    while (true) {
+        const candidate = join(dir, LOCAL_PROFILE_FILENAME);
+        if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {
+            return candidate;
+        }
+        const parent = dirname(dir);
+        if (parent === dir) {
+            return null;
+        }
+        dir = parent;
+    }
+}