convex 1.36.0 → 1.37.0

package/dist/cli.bundle.cjs

@@ -18183,7 +18183,7 @@ var require_context = __commonJS({
       };
     });
     var nodeContextIntegration = core.defineIntegration(_nodeContextIntegration);
-    var Context11 = core.convertIntegrationFnToClass(INTEGRATION_NAME, nodeContextIntegration);
+    var Context12 = core.convertIntegrationFnToClass(INTEGRATION_NAME, nodeContextIntegration);
     function _updateContext(contexts) {
       if (_optionalChain([contexts, "optionalAccess", (_11) => _11.app, "optionalAccess", (_12) => _12.app_memory])) {
         contexts.app.app_memory = process.memoryUsage().rss;
@@ -18393,7 +18393,7 @@ var require_context = __commonJS({
         return void 0;
       }
     }
-    exports2.Context = Context11;
+    exports2.Context = Context12;
     exports2.getDeviceContext = getDeviceContext;
     exports2.nodeContextIntegration = nodeContextIntegration;
     exports2.readDirAsync = readDirAsync;
@@ -28695,7 +28695,7 @@ var version;
 var init_index = __esm({
   "src/index.ts"() {
     "use strict";
-    version = "1.36.0";
+    version = "1.37.0";
   }
 });
 
@@ -62688,13 +62688,10 @@ async function createRedirectURI(ctx, apiKey, uri) {
     }
   );
   if (!response.ok) {
-    if (response.status === 422) {
-      const errorText2 = await response.text();
-      if (errorText2.includes("already exists")) {
-        return { modified: false };
-      }
-    }
     const errorText = await response.text();
+    if (response.status === 422 && errorText.includes("already exists")) {
+      return { modified: false };
+    }
     return await ctx.crash({
       exitCode: 1,
       errorType: "fatal",
@@ -62741,13 +62738,10 @@ async function createCORSOrigin(ctx, apiKey, origin) {
     }
   );
   if (!response.ok) {
-    if (response.status === 409) {
-      const errorText2 = await response.text();
-      if (errorText2.includes("duplicate_cors_origin") || errorText2.includes("already exists")) {
-        return { modified: false };
-      }
-    }
     const errorText = await response.text();
+    if (response.status === 409 && (errorText.includes("duplicate_cors_origin") || errorText.includes("already exists"))) {
+      return { modified: false };
+    }
     return await ctx.crash({
       exitCode: 1,
       errorType: "fatal",
@@ -77820,13 +77814,19 @@ function convexAiMarkdownBody(convexDir) {
   const normalizedConvexDir = convexDir.replaceAll("\\", "/");
   return `This project uses [Convex](https://convex.dev) as its backend.
 
-When working on Convex code, **always read \`${normalizedConvexDir}/_generated/ai/guidelines.md\` first** for important guidelines on how to correctly use Convex APIs and patterns. The file contains rules that override what you may have learned about Convex from training data.
+When working on Convex code, **always read
+\`${normalizedConvexDir}/_generated/ai/guidelines.md\` first** for important guidelines on
+how to correctly use Convex APIs and patterns. The file contains rules that
+override what you may have learned about Convex from training data.
 
-Convex agent skills for common tasks can be installed by running \`npx convex ai-files install\`.`;
+Convex agent skills for common tasks can be installed by running
+\`npx convex ai-files install\`.`;
 }
 function agentsMdConvexSection(convexDir) {
   return `${AGENTS_MD_START_MARKER}
+
 ${convexAiMarkdownBody(convexDir)}
+
 ${AGENTS_MD_END_MARKER}`;
 }
 var AGENTS_MD_START_MARKER, AGENTS_MD_END_MARKER;
@@ -77893,7 +77893,9 @@ var init_agentsmd2 = __esm({
 // src/cli/codegen_templates/claudemd.ts
 function claudeMdConvexSection(convexDir) {
   return `${CLAUDE_MD_START_MARKER}
+
 ${convexAiMarkdownBody(convexDir)}
+
 ${CLAUDE_MD_END_MARKER}`;
 }
 var CLAUDE_MD_START_MARKER, CLAUDE_MD_END_MARKER;
@@ -133408,6 +133410,57 @@ async function performLogin(ctx, {
       printedMessage: null
     });
   }
+  if (vercel) {
+    await promptJoinVercelTeams(ctx);
+  }
+}
+async function promptJoinVercelTeams(ctx) {
+  const fetch2 = bigBrainFetch(ctx);
+  let teams;
+  try {
+    const res = await fetch2(
+      new URL("vercel/potential_teams", `${provisionHost}/`)
+    );
+    if (!res.ok) {
+      logVerbose(
+        `vercel/potential_teams returned ${res.status}; skipping team-join prompt`
+      );
+      return;
+    }
+    teams = await res.json();
+  } catch (err) {
+    logVerbose(`Failed to fetch potential Vercel teams: ${String(err)}`);
+    return;
+  }
+  if (teams.length === 0) return;
+  for (const [index, team] of teams.entries()) {
+    const displayName = team.teamName.replace(/ \(Vercel\)$/, "");
+    const counter = teams.length > 1 ? `[${index + 1}/${teams.length}] ` : "";
+    const lines = [
+      chalkStderr.bold(`${counter}You've been invited to join ${displayName}`) + ` (${team.planName}) through the Vercel marketplace.`
+    ];
+    if (team.pricingNotice) {
+      lines.push(chalkStderr.yellow(team.pricingNotice));
+    }
+    lines.push(`Join "${displayName}"?`);
+    const join = await promptYesNo(ctx, {
+      message: `${lines.join("\n")}`,
+      default: true
+    });
+    if (!join) continue;
+    try {
+      await fetch2(
+        new URL(
+          `vercel/potential_teams/${team.teamId}/join`,
+          `${provisionHost}/`
+        ),
+        { method: "POST" }
+      );
+      logFinishedStep(`Joined ${displayName}`);
+    } catch (err) {
+      logFailure(`Failed to join ${displayName}: ${String(err)}`);
+    }
+  }
 }
 async function optins(ctx, acceptOptIns) {
   const bbAuth = ctx.bigBrainAuth();
@@ -133860,14 +133913,6 @@ async function selectExistingProject(ctx, chosenConfiguration, config3) {
     forceDevDeployment: config3.local ? "local" : config3.cloud ? "cloud" : void 0
   });
   logFinishedStep(`Reinitialized project ${chalkStderr.bold(projectSlug)}`);
-  const { configPath, projectConfig } = await readProjectConfig(ctx);
-  const folder = functionsDir(configPath, projectConfig);
-  await attemptSetupAiFiles({
-    ctx,
-    aiFilesConfig: projectConfig.aiFiles,
-    convexDir: import_path31.default.resolve(folder),
-    projectDir: import_path31.default.resolve(import_path31.default.dirname(configPath))
-  });
   return { teamSlug, projectSlug, devDeployment };
 }
 async function askToConfigure(ctx) {
@@ -133986,7 +134031,7 @@ async function warn(ctx, options) {
   );
 }
 async function teamUsageState(ctx, teamId) {
-  const { usageState } = await bigBrainAPI({
+  const { usageState } = await bigBrainAPIMaybeThrows({
     ctx,
     method: "GET",
     path: "dashboard/teams/" + teamId + "/usage/team_usage_state"
@@ -133994,7 +134039,7 @@ async function teamUsageState(ctx, teamId) {
   return usageState;
 }
 async function teamSpendingLimitsState(ctx, teamId) {
-  const response = await bigBrainAPI({
+  const response = await bigBrainAPIMaybeThrows({
     ctx,
     method: "GET",
     path: "dashboard/teams/" + teamId + "/get_spending_limits"
@@ -134007,10 +134052,17 @@ async function usageStateWarning(ctx, targetDeployment) {
     return;
   }
   const { teamId, team } = await fetchTeamAndProject(ctx, targetDeployment);
-  const [usageState, spendingLimitsState] = await Promise.all([
-    teamUsageState(ctx, teamId),
-    teamSpendingLimitsState(ctx, teamId)
-  ]);
+  let usageState;
+  let spendingLimitsState;
+  try {
+    [usageState, spendingLimitsState] = await Promise.all([
+      teamUsageState(ctx, teamId),
+      teamSpendingLimitsState(ctx, teamId)
+    ]);
+  } catch (err) {
+    logVerbose("Skipping usage state warning:", err);
+    return;
+  }
   if (spendingLimitsState === "Disabled") {
     await warn(ctx, {
       title: "Your projects are disabled because you exceeded your spending limit.",
@@ -134192,7 +134244,7 @@ Command.prototype.addDeploymentSelectionOptions = function(action, options) {
   ).addOption(
     new Option(
       "--deployment <deployment>",
-      action + " a specific deployment. Accepts:\n\u2022 a deployment name (e.g. joyful-capybara-123)\u2022 a deployment reference (e.g. dev/james, staging)\n\u2022 `dev` (for your personal dev deployment)\n\u2022 `prod` (for your project\u2019s default production deployment)\n\u2022 `local` (for your local dev deployment).\nYou can also select deployments in other projects with `project-slug:reference` or `team-slug:project-slug:reference`."
+      action + " a specific deployment. Accepts:\n\u2022 a deployment name (e.g. joyful-capybara-123)\n\u2022 a deployment reference (e.g. dev/james, staging)\n\u2022 `dev` (for your personal dev deployment)\n\u2022 `prod` (for your project\u2019s default production deployment)\n\u2022 `local` (for your local dev deployment).\nYou can also select deployments in other projects with `project-slug:reference` or `team-slug:project-slug:reference`."
     ).conflicts(["--prod", "--preview-name", "--deployment-name", "--url"])
   ).addOption(
     new Option(
@@ -136259,22 +136311,33 @@ function defaultEnvBackend(ctx, projectId, dtype) {
 
 // src/cli/envDefault.ts
 init_api3();
-var envDefaultSet = new Command("set").usage("[options] <name> <value>").arguments("[name] [value]").summary("Set a default variable").description(
-  "Set default environment variables for your project's deployment type.\n\n  npx convex env default set NAME 'value'\n  npx convex env default set NAME # omit a value to set one interactively\n  npx convex env default set NAME --from-file value.txt\n  npx convex env default set --from-file .env.defaults\nWhen setting multiple values, it will refuse all changes if any variables are already set to different values by default. Pass --force to overwrite the provided values.\nThe deployment type is determined by the current deployment (local maps to dev).\n"
-).option(
-  "--from-file <file>",
-  "Read environment variables from a .env file. Without --force, fails if any existing variable has a different value."
-).option(
-  "--force",
-  "When setting multiple variables, overwrite existing environment variable values instead of failing on mismatch."
-).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false).action(async (name, value, cmdOptions, cmd) => {
+function addEnvDefaultOptions(cmd) {
+  return cmd.addOption(
+    new Option(
+      "--type <type>",
+      "Manage default env vars for the given deployment type (dev, preview, prod) instead of inferring from the current deployment."
+    )
+  ).addOption(
+    new Option(
+      "--project <project>",
+      "Select a project manually. Accepts `team-slug:project-slug` or just `project-slug` (team inferred from your current project). Requires --type."
+    )
+  );
+}
+var envDefaultSet = addEnvDefaultOptions(
+  new Command("set").usage("[options] <name> <value>").arguments("[name] [value]").summary("Set a default variable").description(
+    "Set default environment variables for your project's deployment type.\n\n  npx convex env default set NAME 'value'\n  npx convex env default set NAME # omit a value to set one interactively\n  npx convex env default set NAME --from-file value.txt\n  npx convex env default set --from-file .env.defaults\nWhen setting multiple values, it will refuse all changes if any variables are already set to different values by default. Pass --force to overwrite the provided values.\nThe deployment type is determined by the current deployment (local maps to dev), or by --type if provided.\n"
+  ).option(
+    "--from-file <file>",
+    "Read environment variables from a .env file. Without --force, fails if any existing variable has a different value."
+  ).option(
+    "--force",
+    "When setting multiple variables, overwrite existing environment variable values instead of failing on mismatch."
+  ).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false)
+).action(async (name, value, cmdOptions, cmd) => {
   const options = cmd.optsWithGlobals();
-  const { ctx, deployment: deployment2 } = await selectEnvDeployment(options);
+  const { ctx, backend } = await resolveEnvDefaultBackend(options);
   await ensureHasConvexDependency(ctx, "env default set");
-  const backend = await resolveDefaultEnvBackend(
-    ctx,
-    deployment2.deploymentFields
-  );
   const didAnything = await envSet(ctx, backend, name, value, cmdOptions);
   if (didAnything === false) {
     cmd.outputHelp({ error: true });
@@ -136285,46 +136348,122 @@ var envDefaultSet = new Command("set").usage("[options] <name> <value>").argumen
     });
   }
 });
-var envDefaultGet = new Command("get").arguments("<name>").summary("Print a default variable's value").description(
-  "Print a default variable's value: `npx convex env default get NAME`\nThe deployment type is determined by the current deployment (local maps to dev)."
-).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false).action(async (envVarName, _options2, cmd) => {
+var envDefaultGet = addEnvDefaultOptions(
+  new Command("get").arguments("<name>").summary("Print a default variable's value").description(
+    "Print a default variable's value: `npx convex env default get NAME`\nThe deployment type is determined by the current deployment (local maps to dev), or by --type if provided."
+  ).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false)
+).action(async (envVarName, _options2, cmd) => {
   const options = cmd.optsWithGlobals();
-  const { ctx, deployment: deployment2 } = await selectEnvDeployment(options);
+  const { ctx, backend } = await resolveEnvDefaultBackend(options);
   await ensureHasConvexDependency(ctx, "env default get");
-  const backend = await resolveDefaultEnvBackend(
-    ctx,
-    deployment2.deploymentFields
-  );
   await envGet(ctx, backend, envVarName);
 });
-var envDefaultRemove = new Command("remove").alias("rm").alias("unset").arguments("<name>").summary("Unset a default variable").description(
-  "Unset a default variable: `npx convex env default remove NAME`\nIf the variable doesn't exist, the command doesn't do anything and succeeds.\nThe deployment type is determined by the current deployment (local maps to dev)."
-).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false).action(async (name, _options2, cmd) => {
+var envDefaultRemove = addEnvDefaultOptions(
+  new Command("remove").alias("rm").alias("unset").arguments("<name>").summary("Unset a default variable").description(
+    "Unset a default variable: `npx convex env default remove NAME`\nIf the variable doesn't exist, the command doesn't do anything and succeeds.\nThe deployment type is determined by the current deployment (local maps to dev), or by --type if provided."
+  ).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false)
+).action(async (name, _options2, cmd) => {
   const options = cmd.optsWithGlobals();
-  const { ctx, deployment: deployment2 } = await selectEnvDeployment(options);
+  const { ctx, backend } = await resolveEnvDefaultBackend(options);
   await ensureHasConvexDependency(ctx, "env default remove");
-  const backend = await resolveDefaultEnvBackend(
-    ctx,
-    deployment2.deploymentFields
-  );
   await envRemove(ctx, backend, name);
 });
-var envDefaultList = new Command("list").summary("List all default variables").description(
-  "List all default variables: `npx convex env default list`\nThe deployment type is determined by the current deployment (local maps to dev)."
-).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false).action(async (_options2, cmd) => {
+var envDefaultList = addEnvDefaultOptions(
+  new Command("list").summary("List all default variables").description(
+    "List all default variables: `npx convex env default list`\nThe deployment type is determined by the current deployment (local maps to dev), or by --type if provided."
+  ).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false)
+).action(async (_options2, cmd) => {
   const options = cmd.optsWithGlobals();
-  const { ctx, deployment: deployment2 } = await selectEnvDeployment(options);
+  const { ctx, backend } = await resolveEnvDefaultBackend(options);
   await ensureHasConvexDependency(ctx, "env default list");
-  const backend = await resolveDefaultEnvBackend(
-    ctx,
-    deployment2.deploymentFields
-  );
   await envList(ctx, backend);
 });
 var envDefault = new Command("default").summary("Manage project-level default environment variables").description(
-  "Manage default environment variables for your project.\n\nThe default environment variables read and written to by this command are the ones for the deployment type of the current deployment (i.e. dev in most cases).\n\n  Set a default variable: `npx convex env default set NAME 'value'`\n  Unset a default variable: `npx convex env default remove NAME`\n  List all default variables: `npx convex env default list`\n  Print a default variable's value: `npx convex env default get NAME`\n\n"
+  "Manage default environment variables for your project.\n\nThe default environment variables read and written to by this command are the ones for the deployment type of the current deployment (i.e. dev in most cases), unless --type is provided.\n\n  Set a default variable: `npx convex env default set NAME 'value'`\n  Unset a default variable: `npx convex env default remove NAME`\n  List all default variables: `npx convex env default list`\n  Print a default variable's value: `npx convex env default get NAME`\n\n"
 ).addCommand(envDefaultSet).addCommand(envDefaultGet).addCommand(envDefaultRemove).addCommand(envDefaultList).helpCommand(false);
-async function resolveDefaultEnvBackend(ctx, deploymentFields) {
+async function resolveEnvDefaultBackend(options) {
+  const dtypeOverride = normalizeTypeOption(options.type);
+  if (options.project !== void 0) {
+    const parsedProject = parseProjectOption(options.project);
+    if (parsedProject === null) {
+      const ctx3 = await oneoffContext(options);
+      return await ctx3.crash({
+        exitCode: 1,
+        errorType: "fatal",
+        printedMessage: "error: --project must be `team-slug:project-slug` or `project-slug`."
+      });
+    }
+    if (dtypeOverride === void 0) {
+      const ctx3 = await oneoffContext(options);
+      return await ctx3.crash({
+        exitCode: 1,
+        errorType: "fatal",
+        printedMessage: "error: --project requires --type to also be set."
+      });
+    }
+    let ctx2;
+    let resolved;
+    if (parsedProject.kind === "teamAndProject") {
+      ctx2 = await oneoffContext(options);
+      resolved = {
+        teamSlug: parsedProject.teamSlug,
+        projectSlug: parsedProject.projectSlug
+      };
+    } else {
+      const selected = await selectEnvDeployment(options);
+      ctx2 = selected.ctx;
+      if (selected.deployment.deploymentFields === null) {
+        return await ctx2.crash({
+          exitCode: 1,
+          errorType: "fatal",
+          printedMessage: "error: --project <project-slug> requires a current cloud deployment to infer the team from. Use `team-slug:project-slug` to specify the team explicitly."
+        });
+      }
+      const { team } = await fetchTeamAndProject(
+        ctx2,
+        selected.deployment.deploymentFields.deploymentName
+      );
+      resolved = { teamSlug: team, projectSlug: parsedProject.projectSlug };
+    }
+    const details = await getProjectDetails(ctx2, {
+      kind: "teamAndProjectSlugs",
+      teamSlug: resolved.teamSlug,
+      projectSlug: resolved.projectSlug
+    });
+    return {
+      ctx: ctx2,
+      backend: defaultEnvBackend(ctx2, details.id, dtypeOverride)
+    };
+  }
+  const { ctx, deployment: deployment2 } = await selectEnvDeployment(options);
+  const backend = await resolveDefaultEnvBackend(
+    ctx,
+    deployment2.deploymentFields,
+    dtypeOverride
+  );
+  return { ctx, backend };
+}
+function normalizeTypeOption(type) {
+  if (type === void 0) return void 0;
+  if (type === "development") return "dev";
+  if (type === "production") return "prod";
+  return type;
+}
+function parseProjectOption(value) {
+  const parts = value.split(":");
+  if (parts.length === 1 && parts[0].length > 0) {
+    return { kind: "projectOnly", projectSlug: parts[0] };
+  }
+  if (parts.length === 2 && parts[0].length > 0 && parts[1].length > 0) {
+    return {
+      kind: "teamAndProject",
+      teamSlug: parts[0],
+      projectSlug: parts[1]
+    };
+  }
+  return null;
+}
+async function resolveDefaultEnvBackend(ctx, deploymentFields, dtypeOverride) {
   if (deploymentFields === null) {
     return await ctx.crash({
       exitCode: 1,
@@ -136339,7 +136478,7 @@ async function resolveDefaultEnvBackend(ctx, deploymentFields) {
       printedMessage: "Default environment variables are not available for anonymous deployments."
     });
   }
-  const dtype = resolveDefaultEnvDtype(deploymentFields.deploymentType);
+  const dtype = dtypeOverride ?? resolveDefaultEnvDtype(deploymentFields.deploymentType);
   const { projectId } = await fetchTeamAndProject(
     ctx,
     deploymentFields.deploymentName
@@ -147385,8 +147524,157 @@ function defaultRef(branch, deploymentType) {
   return ref;
 }
 
+// src/cli/deploymentTokenCreate.ts
+init_source();
+init_log();
+init_api3();
+init_envvars();
+init_utils5();
+var deploymentTokenCreate = new Command("create").summary("Create an access token").description(
+  `Creates a deploy key that, when set as ${chalkStderr.bold(CONVEX_DEPLOY_KEY_ENV_VAR_NAME)}, scopes all commands to the target deployment. Defaults to the current deployment if '--deployment' isn't passed
+
+  Print a new deploy key to stdout:           \`npx convex deployment token create my-token\`
+  Save a new deploy key in ${ENV_VAR_FILE_PATH}:        \`npx convex deployment token create my-token --save-env\`
+  Save a new deploy key in a custom env file: \`npx convex deployment token create ci-token --save-env .env.production\`
+  Create a key for the project's prod:        \`npx convex deployment token create ci-token --deployment prod\`
+`
+).argument("<name>", "Name for the new deploy key").allowExcessArguments(false).option(
+  "--save-env [path]",
+  `Save the new key as ${CONVEX_DEPLOY_KEY_ENV_VAR_NAME} in an env file instead of printing it. Defaults to ${ENV_VAR_FILE_PATH}.`
+).addDeploymentSelectionOptions(actionDescription("Create a deploy key for")).showHelpAfterError().action(async (name, options) => {
+  const ctx = await oneoffContext(options);
+  const auth2 = ctx.bigBrainAuth();
+  if (auth2 === null || auth2.kind !== "accessToken") {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: `Creating a deploy key currently requires being logged in with a personal access token. ${process.env[CONVEX_DEPLOY_KEY_ENV_VAR_NAME] ? `Unset ${CONVEX_DEPLOY_KEY_ENV_VAR_NAME}` : `Run ${chalkStderr.bold("npx convex login")}`} and try again.`
+    });
+  }
+  const deploymentSelection = await getDeploymentSelection(ctx, options);
+  const deployment2 = await loadSelectedDeploymentCredentials(
+    ctx,
+    deploymentSelection,
+    { ensureLocalRunning: false }
+  );
+  if (deployment2.deploymentFields === null) {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: "Cannot create a deploy key for a self-hosted deployment."
+    });
+  }
+  const { deploymentName, deploymentType } = deployment2.deploymentFields;
+  if (deploymentType === "local" || deploymentType === "anonymous") {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: `Cannot create a deploy key for a ${deploymentType} deployment.`
+    });
+  }
+  showSpinner(`Creating deploy key for ${deploymentName}...`);
+  const response = await typedPlatformClient(ctx).POST(
+    "/deployments/{deployment_name}/create_deploy_key",
+    {
+      params: { path: { deployment_name: deploymentName } },
+      body: { name }
+    }
+  );
+  const deployKey = response.data.deployKey;
+  if (options.saveEnv === void 0) {
+    logFinishedStep(`Created deploy key "${name}" for ${deploymentName}.`);
+    logOutput(deployKey);
+    return;
+  }
+  const envFile = typeof options.saveEnv === "string" ? options.saveEnv : ENV_VAR_FILE_PATH;
+  const existingFileContent = ctx.fs.exists(envFile) ? ctx.fs.readUtf8File(envFile) : null;
+  const updatedContent = changedEnvVarFile({
+    existingFileContent,
+    envVarName: CONVEX_DEPLOY_KEY_ENV_VAR_NAME,
+    envVarValue: deployKey,
+    commentAfterValue: null,
+    commentOnPreviousLine: null
+  });
+  if (updatedContent === null) {
+    logFinishedStep(
+      `Deploy key for ${deploymentName} already present in ${envFile}; no changes made.`
+    );
+    return;
+  }
+  ctx.fs.writeUtf8File(envFile, updatedContent);
+  logFinishedStep(
+    `Saved deploy key "${name}" for ${deploymentName} as ${CONVEX_DEPLOY_KEY_ENV_VAR_NAME} in ${envFile}.`
+  );
+});
+
+// src/cli/deploymentTokenDelete.ts
+init_source();
+init_log();
+init_api3();
+init_utils5();
+var deploymentTokenDelete = new Command("delete").summary("Delete an access token").description(
+  "Delete an access token. Currently only deploy keys (deployment-scoped access tokens) are supported.\n\nThe positional `<nameOrToken>` can be the unique name of the deploy key (as passed to `token create`) or the deploy key value itself. The target deployment defaults to the currently-selected one; pass `--deployment` to target a different deployment.\n\n  Delete by name:  `npx convex deployment token delete my-token`\n  Delete by value: `npx convex deployment token delete 'dev:happy-animal-123|ey...'`\n  Target prod:     `npx convex deployment token delete ci-token --deployment prod`"
+).argument(
+  "<nameOrToken>",
+  "The unique name of the deploy key, or the deploy key value itself."
+).allowExcessArguments(false).addDeploymentSelectionOptions(actionDescription("Delete a deploy key for")).showHelpAfterError().action(async (nameOrToken, options) => {
+  const ctx = await oneoffContext(options);
+  const auth2 = ctx.bigBrainAuth();
+  if (auth2 === null || auth2.kind !== "accessToken") {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: `Deleting a deploy key requires being logged in with a personal access token. ${auth2 === null ? "Run " : `Unset ${CONVEX_DEPLOY_KEY_ENV_VAR_NAME} and run `}${chalkStderr.bold("npx convex login")} and try again.`
+    });
+  }
+  const deploymentSelection = await getDeploymentSelection(ctx, options);
+  const deployment2 = await loadSelectedDeploymentCredentials(
+    ctx,
+    deploymentSelection,
+    { ensureLocalRunning: false }
+  );
+  if (deployment2.deploymentFields === null) {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: "Cannot delete a deploy key for a self-hosted deployment."
+    });
+  }
+  const { deploymentName, deploymentType } = deployment2.deploymentFields;
+  if (deploymentType === "local" || deploymentType === "anonymous") {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: `Cannot delete a deploy key for a ${deploymentType} deployment.`
+    });
+  }
+  if (/^(dev|prod|preview|local):[^|]*$/.test(nameOrToken)) {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: `"${nameOrToken}" looks like a partial deploy key \u2014 your shell likely consumed the \`|\` and everything after it. Wrap the value in single quotes (e.g. ${chalkStderr.bold(`npx convex deployment token delete '${nameOrToken}|...'`)}) and try again.`
+    });
+  }
+  const pipeIdx = nameOrToken.indexOf("|");
+  const id = pipeIdx >= 0 ? nameOrToken.slice(pipeIdx + 1) : nameOrToken;
+  showSpinner(`Deleting deploy key for ${deploymentName}...`);
+  await typedPlatformClient(ctx).POST(
+    "/deployments/{deployment_name}/delete_deploy_key",
+    {
+      params: { path: { deployment_name: deploymentName } },
+      body: { id }
+    }
+  );
+  logFinishedStep(`Deleted deploy key for ${deploymentName}.`);
+});
+
+// src/cli/deploymentToken.ts
+var deploymentToken = new Command("token").summary("Manage access tokens").description(
+  "Create and delete access tokens. Currently supports deploy keys."
+).addCommand(deploymentTokenCreate).addCommand(deploymentTokenDelete);
+
 // src/cli/deployment.ts
-var deployment = new Command("deployment").summary("Manage deployments").description("Manage deployments in your project.").addCommand(deploymentSelect).addCommand(deploymentCreate);
+var deployment = new Command("deployment").summary("Manage deployments").description("Manage deployments in your project.").addCommand(deploymentSelect).addCommand(deploymentCreate).addCommand(deploymentToken);
 
 // src/cli/aiFiles.ts
 var import_path34 = __toESM(require("path"), 1);