convex 1.48.0-alpha.0 → 1.48.0

package/dist/esm/cli/account.js

@@ -1,221 +0,0 @@
-"use strict";
-import { Command } from "@commander-js/extra-typings";
-import path from "path";
-import { createLoginCommand } from "./login.js";
-import { createLogoutCommand } from "./logout.js";
-import { oneoffContext } from "../bundler/context.js";
-import {
-  logFinishedStep,
-  logMessage,
-  logOutput,
-  logWarning
-} from "../bundler/log.js";
-import { loadProjectEnvironmentVariables } from "./lib/envvars.js";
-import { isAuthorizedHeader, performLogin } from "./lib/login.js";
-import {
-  getProfileSelection,
-  initializeDefaultProfile,
-  readProfileAuth,
-  readProfileCredentials,
-  readProfileSettings,
-  savedProfileNames,
-  validateProfileName,
-  updateProfileSettings
-} from "./lib/profiles.js";
-import {
-  bindProfileToDirectory,
-  projectAccess
-} from "./lib/profileManagement.js";
-import { warnIfDeployKeyOverridesLogin } from "./lib/deployKeyWarning.js";
-import { promptOptions, promptString } from "./lib/utils/prompts.js";
-async function profileContext() {
-  const ctx = await oneoffContext({ skipAuth: true });
-  loadProjectEnvironmentVariables();
-  return ctx;
-}
-const profileList = new Command("list").description(
-  "List saved accounts, credential status, and directory selections"
-).allowExcessArguments(false).action(async () => {
-  const ctx = await profileContext();
-  const settings = await readProfileSettings(ctx);
-  const selected = await getProfileSelection(ctx);
-  const names = /* @__PURE__ */ new Set([
-    ...savedProfileNames(ctx),
-    ...Object.values(settings.directories ?? {}),
-    ...settings.defaultProfile === void 0 ? [] : [settings.defaultProfile],
-    ...selected === null ? [] : [selected.name]
-  ]);
-  warnIfDeployKeyOverridesLogin(
-    ctx,
-    typeof settings.accessToken === "string" || savedProfileNames(ctx).length > 0
-  );
-  if (names.size === 0) {
-    logMessage(
-      typeof settings.accessToken === "string" ? await isAuthorizedHeader(ctx, `Bearer ${settings.accessToken}`) ? "Logged in without a named account. Name this login with `npx convex login --account personal --select`." : "Your saved login is no longer valid. Run `npx convex login --account <name>`." : "No saved accounts. Run `npx convex login --account <name>`."
-    );
-    return;
-  }
-  if (selected !== null)
-    logMessage(`Selected account: ${selected.name} (${selected.source})`);
-  if (settings.defaultProfile !== void 0)
-    logMessage(`Default account: ${settings.defaultProfile}`);
-  for (const name of [...names].sort()) {
-    const credentials = await readProfileCredentials(
-      ctx,
-      { name, source: "saved accounts" },
-      true
-    );
-    const valid = credentials !== null && await isAuthorizedHeader(ctx, `Bearer ${credentials.accessToken}`);
-    const label = `${name}${credentials?.email ? ` (${credentials.email})` : ""}`;
-    const status = credentials === null ? " \u26A0\uFE0F Not logged in" : valid ? "" : " \u26A0\uFE0F Invalid credentials";
-    logOutput(`${label}${status}`);
-    for (const [directory, profile] of Object.entries(
-      settings.directories ?? {}
-    )) {
-      if (profile === name) logOutput(`    ${directory}`);
-    }
-  }
-});
-const accountSelect = new Command("select").description("Use a saved account in this directory and its subdirectories").argument("<account>", "Account name, such as work or personal").option(
-  "--force",
-  "Select this account even if deployment access cannot be verified"
-).allowExcessArguments(false).action(async (name, options) => {
-  const ctx = await profileContext();
-  if (!await bindProfileToDirectory(ctx, name, options.force)) {
-    await ctx.crash({
-      exitCode: 1,
-      errorType: "fatal",
-      printedMessage: null
-    });
-  }
-});
-const profileDefault = new Command("default").description(
-  "Show or set the default account for directories without a directory selection"
-).argument("[account]", "Account name").allowExcessArguments(false).action(async (name) => {
-  const ctx = await profileContext();
-  if (name === void 0) {
-    const settings = await readProfileSettings(ctx);
-    logOutput(
-      settings.defaultProfile === void 0 ? "No default account is set." : `Default account: ${settings.defaultProfile}`
-    );
-    return;
-  }
-  await updateProfileSettings(ctx, async (settings) => {
-    const credentials = await readProfileCredentials(ctx, {
-      name,
-      source: "account default"
-    });
-    settings.defaultProfile = name;
-    settings.accessToken = credentials.accessToken;
-  });
-  logFinishedStep(`Default account: ${name}`);
-});
-const accountDeselect = new Command("deselect").description(
-  "Clear this directory's account selection, inheriting its parent's selection or the default"
-).allowExcessArguments(false).action(async () => {
-  const ctx = await profileContext();
-  const directory = path.resolve(process.cwd());
-  const removed = await updateProfileSettings(ctx, (settings) => {
-    if (settings.directories && Object.hasOwn(settings.directories, directory)) {
-      delete settings.directories[directory];
-      return true;
-    }
-    return false;
-  });
-  if (removed)
-    logFinishedStep(`Removed the directory selection for ${directory}.`);
-  else logMessage(`No directory selection is saved for ${directory}.`);
-  const selected = await getProfileSelection(ctx);
-  if (selected !== null)
-    logMessage(`Selected account: ${selected.name} (${selected.source})`);
-});
-const profileSettings = new Command("settings").summary("Show or change account settings").description(
-  "Show or change account settings.\n\nRenewing an account login revokes its replaced personal access token unless another saved login uses it. To keep replaced tokens active, run:\n\n  `npx convex@latest account settings revoke-replaced-tokens false`"
-).argument("[name]", "revoke-replaced-tokens").argument("[value]", "true or false").allowExcessArguments(false).action(async (name, value, _options, cmd) => {
-  const ctx = await profileContext();
-  const settings = await readProfileSettings(ctx);
-  if (name === void 0 && value === void 0) {
-    logOutput(
-      `revoke-replaced-tokens: ${settings.revokeReplacedTokens ?? true}`
-    );
-    return;
-  }
-  if (name !== "revoke-replaced-tokens" || value !== "true" && value !== "false") {
-    cmd.error(
-      "Usage: npx convex account settings revoke-replaced-tokens <true|false>"
-    );
-  }
-  await updateProfileSettings(ctx, (settings2) => {
-    settings2.revokeReplacedTokens = value === "true";
-  });
-  logFinishedStep(`Set revoke-replaced-tokens to ${value}.`);
-});
-export const account = new Command("account").summary("Manage saved accounts and their directory selections").description(
-  "Manage saved accounts and their directory selections.\n\nSave logins for multiple Convex accounts under names such as work and personal. `npx convex@latest account login` and `npx convex@latest account logout` are aliases for the top-level login and logout commands, with the same options. Select the appropriate account for each personal, work, or client project.\n\nIn your personal project directory, save an account:\n\n  `npx convex@latest login --account personal --select`\n\nIn your work project directory, log in with your work account and check its teams:\n\n  `npx convex@latest login --account work --select`\n  `npx convex@latest login status`\n\nChoose the appropriate account in the browser; sign out of the dashboard first if it is using another account. Upgrade each project's `convex` dependency to a version that supports saved accounts, then run `npx convex dev` to develop with its selected account.\n\n`login --account` saves credentials without changing directory selections. Add `--select` to select the account for this directory and its subdirectories after checking deployment access. The first saved account becomes the default if no other account is saved. To select a saved account in another directory, run `npx convex@latest account select work`. Run `npx convex@latest account deselect` to remove this directory's selection and inherit its parent or default. Run `npx convex@latest account default` to show the default, or `npx convex@latest account default work` to change it. The closest directory selection wins. Selections use absolute paths, so select the account again after moving a project.\n\nThe first account name is assigned to your existing login if you are already logged in, and becomes the default for directories without a selection. Use `--force` to authenticate another account instead, keeping the existing login as the default. Names start with a lowercase letter or number and contain only lowercase letters, numbers, hyphens, and underscores.\n\n`CONVEX_ACCOUNT` in the shell or project env file overrides directory selections and the default account. Deployment and project keys take priority over saved accounts.\n\nUse `npx convex@latest logout --account work` to remove one account's credentials, or `npx convex@latest logout --all` to remove all saved credentials. Logout preserves directory selections; a logged-out account requires login before use.\n\nAfter saving accounts, use `npx convex@latest` for login, logout, and account commands in every project directory on this machine. Plain `npx convex` can run the older version installed in that project. Specifying `@latest` runs the latest published CLI without updating the project's dependency.\n\nOlder CLIs ignore directory selections and `CONVEX_ACCOUNT`, using the shared login instead (normally the default account). Upgrade the project's `convex` dependency to use saved accounts with project commands such as `npx convex dev` and `npx convex deploy`.\n\nLogging in with an older CLI can change the shared login independently of your saved accounts, or discard account settings if the shared login has been removed. Logging out with an older CLI deletes directory selections and the default selection but leaves named account credentials behind. Recreate any lost selections with `npx convex@latest account select <name>` and `npx convex@latest account default <name>`.\n\nRenewing an account login can revoke its previous token and interrupt running CLI processes of any version that still use it. Restart those commands after renewing the login, or keep replaced tokens active with `npx convex@latest account settings revoke-replaced-tokens false`."
-).addCommand(profileList).addCommand(accountSelect).addCommand(profileDefault).addCommand(accountDeselect).addCommand(profileSettings).addCommand(createLoginCommand()).addCommand(createLogoutCommand()).addHelpCommand(false);
-export async function handleNoAccessToConfiguredProject(ctx, target, envFile) {
-  const auth = ctx.bigBrainAuth();
-  const current = auth?.kind === "accessToken" ? auth.profile?.name : void 0;
-  const project = target.kind === "deploymentName" ? `deployment "${target.deploymentName}"` : target.kind === "teamAndProjectSlugs" ? `project "${target.teamSlug}/${target.projectSlug}"` : "the configured project";
-  logWarning(
-    `${current ? `Account "${current}"` : "Your account"} cannot access ${project}. It may belong to another account.`
-  );
-  const alternatives = [];
-  if (target.kind !== "projectDeployKey") {
-    for (const name2 of savedProfileNames(ctx)) {
-      if (name2 === current) continue;
-      const credentials = await readProfileCredentials(ctx, {
-        name: name2,
-        source: "saved accounts"
-      });
-      if (await projectAccess(credentials.accessToken, target) === "yes")
-        alternatives.push(name2);
-    }
-  }
-  if (!process.stdin.isTTY) {
-    const selection2 = await getProfileSelection(ctx, { envFile });
-    const overrideHint = selection2?.source.startsWith("CONVEX_ACCOUNT") ? ` Update or unset CONVEX_ACCOUNT (${selection2.source}) before retrying.` : "";
-    return await ctx.crash({
-      exitCode: 1,
-      errorType: "fatal",
-      printedMessage: `${alternatives.length > 0 ? `A saved account can access it: ${alternatives.map((name2) => `\`npx convex account select ${name2}\``).join(" or ")}.` : "Log in to its account with `npx convex login --account <name> --select`."}${overrideHint} To select a different project, run \`npx convex dev --configure\` (this changes CONVEX_DEPLOYMENT).`
-    });
-  }
-  const choice = await promptOptions(ctx, {
-    message: "Which account should this project use?",
-    choices: [
-      ...alternatives.map((name2) => ({
-        name: `Use account "${name2}"`,
-        value: { kind: "use", name: name2 }
-      })),
-      { name: "Log in to another account", value: { kind: "login" } },
-      {
-        name: "Configure a different project (changes CONVEX_DEPLOYMENT)",
-        value: { kind: "chooseProject" }
-      }
-    ]
-  });
-  if (choice.kind === "chooseProject") return "chooseProject";
-  const name = choice.kind === "use" ? choice.name : await promptString(ctx, {
-    message: "Account name (for example, work):"
-  });
-  await validateProfileName(ctx, name);
-  if (choice.kind === "login") {
-    const selection2 = { name, source: "account recovery" };
-    await performLogin(ctx, { profile: selection2 });
-    await initializeDefaultProfile(ctx, selection2, false);
-  }
-  if (!await bindProfileToDirectory(ctx, name, false, target))
-    return "chooseProject";
-  const selection = await getProfileSelection(ctx, { envFile });
-  if (selection?.name !== name) {
-    return await ctx.crash({
-      exitCode: 1,
-      errorType: "invalid filesystem or env vars",
-      printedMessage: `Remove the account override from ${selection?.source} before retrying.`
-    });
-  }
-  ctx._updateBigBrainAuth(await readProfileAuth(ctx, selection));
-  return "retry";
-}
-//# sourceMappingURL=account.js.map

package/dist/esm/cli/account.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/cli/account.ts"],
-  "sourcesContent": ["import { Command } from \"@commander-js/extra-typings\";\nimport path from \"path\";\nimport { createLoginCommand } from \"./login.js\";\nimport { createLogoutCommand } from \"./logout.js\";\nimport { Context, oneoffContext } from \"../bundler/context.js\";\nimport {\n  logFinishedStep,\n  logMessage,\n  logOutput,\n  logWarning,\n} from \"../bundler/log.js\";\nimport { loadProjectEnvironmentVariables } from \"./lib/envvars.js\";\nimport { isAuthorizedHeader, performLogin } from \"./lib/login.js\";\nimport {\n  getProfileSelection,\n  initializeDefaultProfile,\n  readProfileAuth,\n  readProfileCredentials,\n  readProfileSettings,\n  savedProfileNames,\n  validateProfileName,\n  updateProfileSettings,\n} from \"./lib/profiles.js\";\nimport {\n  bindProfileToDirectory,\n  projectAccess,\n} from \"./lib/profileManagement.js\";\nimport { warnIfDeployKeyOverridesLogin } from \"./lib/deployKeyWarning.js\";\nimport { ProjectSelection } from \"./lib/deploymentSelection.js\";\nimport { promptOptions, promptString } from \"./lib/utils/prompts.js\";\n\nasync function profileContext() {\n  const ctx = await oneoffContext({ skipAuth: true });\n  loadProjectEnvironmentVariables();\n  return ctx;\n}\n\nconst profileList = new Command(\"list\")\n  .description(\n    \"List saved accounts, credential status, and directory selections\",\n  )\n  .allowExcessArguments(false)\n  .action(async () => {\n    const ctx = await profileContext();\n    const settings = await readProfileSettings(ctx);\n    const selected = await getProfileSelection(ctx);\n    const names = new Set([\n      ...savedProfileNames(ctx),\n      ...Object.values(settings.directories ?? {}),\n      ...(settings.defaultProfile === undefined\n        ? []\n        : [settings.defaultProfile]),\n      ...(selected === null ? [] : [selected.name]),\n    ]);\n    warnIfDeployKeyOverridesLogin(\n      ctx,\n      typeof settings.accessToken === \"string\" ||\n        savedProfileNames(ctx).length > 0,\n    );\n    if (names.size === 0) {\n      logMessage(\n        typeof settings.accessToken === \"string\"\n          ? (await isAuthorizedHeader(ctx, `Bearer ${settings.accessToken}`))\n            ? \"Logged in without a named account. Name this login with `npx convex login --account personal --select`.\"\n            : \"Your saved login is no longer valid. Run `npx convex login --account <name>`.\"\n          : \"No saved accounts. Run `npx convex login --account <name>`.\",\n      );\n      return;\n    }\n    if (selected !== null)\n      logMessage(`Selected account: ${selected.name} (${selected.source})`);\n    if (settings.defaultProfile !== undefined)\n      logMessage(`Default account: ${settings.defaultProfile}`);\n    for (const name of [...names].sort()) {\n      const credentials = await readProfileCredentials(\n        ctx,\n        { name, source: \"saved accounts\" },\n        true,\n      );\n      const valid =\n        credentials !== null &&\n        (await isAuthorizedHeader(ctx, `Bearer ${credentials.accessToken}`));\n      const label = `${name}${credentials?.email ? ` (${credentials.email})` : \"\"}`;\n      const status =\n        credentials === null\n          ? \" \u26A0\uFE0F Not logged in\"\n          : valid\n            ? \"\"\n            : \" \u26A0\uFE0F Invalid credentials\";\n      logOutput(`${label}${status}`);\n      for (const [directory, profile] of Object.entries(\n        settings.directories ?? {},\n      )) {\n        if (profile === name) logOutput(`    ${directory}`);\n      }\n    }\n  });\n\nconst accountSelect = new Command(\"select\")\n  .description(\"Use a saved account in this directory and its subdirectories\")\n  .argument(\"<account>\", \"Account name, such as work or personal\")\n  .option(\n    \"--force\",\n    \"Select this account even if deployment access cannot be verified\",\n  )\n  .allowExcessArguments(false)\n  .action(async (name, options) => {\n    const ctx = await profileContext();\n    if (!(await bindProfileToDirectory(ctx, name, options.force))) {\n      await ctx.crash({\n        exitCode: 1,\n        errorType: \"fatal\",\n        printedMessage: null,\n      });\n    }\n  });\n\nconst profileDefault = new Command(\"default\")\n  .description(\n    \"Show or set the default account for directories without a directory selection\",\n  )\n  .argument(\"[account]\", \"Account name\")\n  .allowExcessArguments(false)\n  .action(async (name) => {\n    const ctx = await profileContext();\n    if (name === undefined) {\n      const settings = await readProfileSettings(ctx);\n      logOutput(\n        settings.defaultProfile === undefined\n          ? \"No default account is set.\"\n          : `Default account: ${settings.defaultProfile}`,\n      );\n      return;\n    }\n    await updateProfileSettings(ctx, async (settings) => {\n      const credentials = await readProfileCredentials(ctx, {\n        name,\n        source: \"account default\",\n      });\n      settings.defaultProfile = name;\n      settings.accessToken = credentials!.accessToken;\n    });\n    logFinishedStep(`Default account: ${name}`);\n  });\n\nconst accountDeselect = new Command(\"deselect\")\n  .description(\n    \"Clear this directory's account selection, inheriting its parent's selection or the default\",\n  )\n  .allowExcessArguments(false)\n  .action(async () => {\n    const ctx = await profileContext();\n    const directory = path.resolve(process.cwd());\n    const removed = await updateProfileSettings(ctx, (settings) => {\n      if (\n        settings.directories &&\n        Object.hasOwn(settings.directories, directory)\n      ) {\n        delete settings.directories[directory];\n        return true;\n      }\n      return false;\n    });\n    if (removed)\n      logFinishedStep(`Removed the directory selection for ${directory}.`);\n    else logMessage(`No directory selection is saved for ${directory}.`);\n    const selected = await getProfileSelection(ctx);\n    if (selected !== null)\n      logMessage(`Selected account: ${selected.name} (${selected.source})`);\n  });\n\nconst profileSettings = new Command(\"settings\")\n  .summary(\"Show or change account settings\")\n  .description(\n    \"Show or change account settings.\\n\\n\" +\n      \"Renewing an account login revokes its replaced personal access token unless another saved login uses it. To keep replaced tokens active, run:\\n\\n\" +\n      \"  `npx convex@latest account settings revoke-replaced-tokens false`\",\n  )\n  .argument(\"[name]\", \"revoke-replaced-tokens\")\n  .argument(\"[value]\", \"true or false\")\n  .allowExcessArguments(false)\n  .action(async (name, value, _options, cmd) => {\n    const ctx = await profileContext();\n    const settings = await readProfileSettings(ctx);\n    if (name === undefined && value === undefined) {\n      logOutput(\n        `revoke-replaced-tokens: ${settings.revokeReplacedTokens ?? true}`,\n      );\n      return;\n    }\n    if (\n      name !== \"revoke-replaced-tokens\" ||\n      (value !== \"true\" && value !== \"false\")\n    ) {\n      cmd.error(\n        \"Usage: npx convex account settings revoke-replaced-tokens <true|false>\",\n      );\n    }\n    await updateProfileSettings(ctx, (settings) => {\n      settings.revokeReplacedTokens = value === \"true\";\n    });\n    logFinishedStep(`Set revoke-replaced-tokens to ${value}.`);\n  });\n\nexport const account = new Command(\"account\")\n  .summary(\"Manage saved accounts and their directory selections\")\n  .description(\n    \"Manage saved accounts and their directory selections.\\n\\n\" +\n      \"Save logins for multiple Convex accounts under names such as work and personal. `npx convex@latest account login` and `npx convex@latest account logout` are aliases for the top-level login and logout commands, with the same options. Select the appropriate account for each personal, work, or client project.\\n\\n\" +\n      \"In your personal project directory, save an account:\\n\\n\" +\n      \"  `npx convex@latest login --account personal --select`\\n\\n\" +\n      \"In your work project directory, log in with your work account and check its teams:\\n\\n\" +\n      \"  `npx convex@latest login --account work --select`\\n\" +\n      \"  `npx convex@latest login status`\\n\\n\" +\n      \"Choose the appropriate account in the browser; sign out of the dashboard first if it is using another account. Upgrade each project's `convex` dependency to a version that supports saved accounts, then run `npx convex dev` to develop with its selected account.\\n\\n\" +\n      \"`login --account` saves credentials without changing directory selections. Add `--select` to select the account for this directory and its subdirectories after checking deployment access. The first saved account becomes the default if no other account is saved. To select a saved account in another directory, run `npx convex@latest account select work`. Run `npx convex@latest account deselect` to remove this directory's selection and inherit its parent or default. Run `npx convex@latest account default` to show the default, or `npx convex@latest account default work` to change it. The closest directory selection wins. Selections use absolute paths, so select the account again after moving a project.\\n\\n\" +\n      \"The first account name is assigned to your existing login if you are already logged in, and becomes the default for directories without a selection. Use `--force` to authenticate another account instead, keeping the existing login as the default. Names start with a lowercase letter or number and contain only lowercase letters, numbers, hyphens, and underscores.\\n\\n\" +\n      \"`CONVEX_ACCOUNT` in the shell or project env file overrides directory selections and the default account. Deployment and project keys take priority over saved accounts.\\n\\n\" +\n      \"Use `npx convex@latest logout --account work` to remove one account's credentials, or `npx convex@latest logout --all` to remove all saved credentials. Logout preserves directory selections; a logged-out account requires login before use.\\n\\n\" +\n      \"After saving accounts, use `npx convex@latest` for login, logout, and account commands in every project directory on this machine. Plain `npx convex` can run the older version installed in that project. Specifying `@latest` runs the latest published CLI without updating the project's dependency.\\n\\n\" +\n      \"Older CLIs ignore directory selections and `CONVEX_ACCOUNT`, using the shared login instead (normally the default account). Upgrade the project's `convex` dependency to use saved accounts with project commands such as `npx convex dev` and `npx convex deploy`.\\n\\n\" +\n      \"Logging in with an older CLI can change the shared login independently of your saved accounts, or discard account settings if the shared login has been removed. Logging out with an older CLI deletes directory selections and the default selection but leaves named account credentials behind. Recreate any lost selections with `npx convex@latest account select <name>` and `npx convex@latest account default <name>`.\\n\\n\" +\n      \"Renewing an account login can revoke its previous token and interrupt running CLI processes of any version that still use it. Restart those commands after renewing the login, or keep replaced tokens active with `npx convex@latest account settings revoke-replaced-tokens false`.\",\n  )\n  .addCommand(profileList)\n  .addCommand(accountSelect)\n  .addCommand(profileDefault)\n  .addCommand(accountDeselect)\n  .addCommand(profileSettings)\n  .addCommand(createLoginCommand())\n  .addCommand(createLogoutCommand())\n  .addHelpCommand(false);\n\nexport async function handleNoAccessToConfiguredProject(\n  ctx: Context,\n  target: ProjectSelection,\n  envFile?: string,\n): Promise<\"retry\" | \"chooseProject\"> {\n  const auth = ctx.bigBrainAuth();\n  const current = auth?.kind === \"accessToken\" ? auth.profile?.name : undefined;\n  const project =\n    target.kind === \"deploymentName\"\n      ? `deployment \"${target.deploymentName}\"`\n      : target.kind === \"teamAndProjectSlugs\"\n        ? `project \"${target.teamSlug}/${target.projectSlug}\"`\n        : \"the configured project\";\n  logWarning(\n    `${current ? `Account \"${current}\"` : \"Your account\"} cannot access ${project}. It may belong to another account.`,\n  );\n  const alternatives: string[] = [];\n  if (target.kind !== \"projectDeployKey\") {\n    for (const name of savedProfileNames(ctx)) {\n      if (name === current) continue;\n      const credentials = await readProfileCredentials(ctx, {\n        name,\n        source: \"saved accounts\",\n      });\n      if ((await projectAccess(credentials!.accessToken, target)) === \"yes\")\n        alternatives.push(name);\n    }\n  }\n  if (!process.stdin.isTTY) {\n    const selection = await getProfileSelection(ctx, { envFile });\n    const overrideHint = selection?.source.startsWith(\"CONVEX_ACCOUNT\")\n      ? ` Update or unset CONVEX_ACCOUNT (${selection.source}) before retrying.`\n      : \"\";\n    return await ctx.crash({\n      exitCode: 1,\n      errorType: \"fatal\",\n      printedMessage: `${\n        alternatives.length > 0\n          ? `A saved account can access it: ${alternatives.map((name) => `\\`npx convex account select ${name}\\``).join(\" or \")}.`\n          : \"Log in to its account with `npx convex login --account <name> --select`.\"\n      }${overrideHint} To select a different project, run \\`npx convex dev --configure\\` (this changes CONVEX_DEPLOYMENT).`,\n    });\n  }\n  type Choice =\n    | { kind: \"use\"; name: string }\n    | { kind: \"login\" }\n    | { kind: \"chooseProject\" };\n  const choice = await promptOptions<Choice>(ctx, {\n    message: \"Which account should this project use?\",\n    choices: [\n      ...alternatives.map((name) => ({\n        name: `Use account \"${name}\"`,\n        value: { kind: \"use\", name } as const,\n      })),\n      { name: \"Log in to another account\", value: { kind: \"login\" } as const },\n      {\n        name: \"Configure a different project (changes CONVEX_DEPLOYMENT)\",\n        value: { kind: \"chooseProject\" } as const,\n      },\n    ],\n  });\n  if (choice.kind === \"chooseProject\") return \"chooseProject\";\n  const name =\n    choice.kind === \"use\"\n      ? choice.name\n      : await promptString(ctx, {\n          message: \"Account name (for example, work):\",\n        });\n  await validateProfileName(ctx, name);\n  if (choice.kind === \"login\") {\n    const selection = { name, source: \"account recovery\" };\n    await performLogin(ctx, { profile: selection });\n    await initializeDefaultProfile(ctx, selection, false);\n  }\n  if (!(await bindProfileToDirectory(ctx, name, false, target)))\n    return \"chooseProject\";\n  const selection = await getProfileSelection(ctx, { envFile });\n  if (selection?.name !== name) {\n    return await ctx.crash({\n      exitCode: 1,\n      errorType: \"invalid filesystem or env vars\",\n      printedMessage: `Remove the account override from ${selection?.source} before retrying.`,\n    });\n  }\n  ctx._updateBigBrainAuth(await readProfileAuth(ctx, selection));\n  return \"retry\";\n}\n"],
-  "mappings": ";AAAA,SAAS,eAAe;AACxB,OAAO,UAAU;AACjB,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAkB,qBAAqB;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uCAAuC;AAChD,SAAS,oBAAoB,oBAAoB;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qCAAqC;AAE9C,SAAS,eAAe,oBAAoB;AAE5C,eAAe,iBAAiB;AAC9B,QAAM,MAAM,MAAM,cAAc,EAAE,UAAU,KAAK,CAAC;AAClD,kCAAgC;AAChC,SAAO;AACT;AAEA,MAAM,cAAc,IAAI,QAAQ,MAAM,EACnC;AAAA,EACC;AACF,EACC,qBAAqB,KAAK,EAC1B,OAAO,YAAY;AAClB,QAAM,MAAM,MAAM,eAAe;AACjC,QAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C,QAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C,QAAM,QAAQ,oBAAI,IAAI;AAAA,IACpB,GAAG,kBAAkB,GAAG;AAAA,IACxB,GAAG,OAAO,OAAO,SAAS,eAAe,CAAC,CAAC;AAAA,IAC3C,GAAI,SAAS,mBAAmB,SAC5B,CAAC,IACD,CAAC,SAAS,cAAc;AAAA,IAC5B,GAAI,aAAa,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI;AAAA,EAC7C,CAAC;AACD;AAAA,IACE;AAAA,IACA,OAAO,SAAS,gBAAgB,YAC9B,kBAAkB,GAAG,EAAE,SAAS;AAAA,EACpC;AACA,MAAI,MAAM,SAAS,GAAG;AACpB;AAAA,MACE,OAAO,SAAS,gBAAgB,WAC3B,MAAM,mBAAmB,KAAK,UAAU,SAAS,WAAW,EAAE,IAC7D,4GACA,kFACF;AAAA,IACN;AACA;AAAA,EACF;AACA,MAAI,aAAa;AACf,eAAW,qBAAqB,SAAS,IAAI,KAAK,SAAS,MAAM,GAAG;AACtE,MAAI,SAAS,mBAAmB;AAC9B,eAAW,oBAAoB,SAAS,cAAc,EAAE;AAC1D,aAAW,QAAQ,CAAC,GAAG,KAAK,EAAE,KAAK,GAAG;AACpC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA,EAAE,MAAM,QAAQ,iBAAiB;AAAA,MACjC;AAAA,IACF;AACA,UAAM,QACJ,gBAAgB,QACf,MAAM,mBAAmB,KAAK,UAAU,YAAY,WAAW,EAAE;AACpE,UAAM,QAAQ,GAAG,IAAI,GAAG,aAAa,QAAQ,KAAK,YAAY,KAAK,MAAM,EAAE;AAC3E,UAAM,SACJ,gBAAgB,OACZ,gCACA,QACE,KACA;AACR,cAAU,GAAG,KAAK,GAAG,MAAM,EAAE;AAC7B,eAAW,CAAC,WAAW,OAAO,KAAK,OAAO;AAAA,MACxC,SAAS,eAAe,CAAC;AAAA,IAC3B,GAAG;AACD,UAAI,YAAY,KAAM,WAAU,OAAO,SAAS,EAAE;AAAA,IACpD;AAAA,EACF;AACF,CAAC;AAEH,MAAM,gBAAgB,IAAI,QAAQ,QAAQ,EACvC,YAAY,8DAA8D,EAC1E,SAAS,aAAa,wCAAwC,EAC9D;AAAA,EACC;AAAA,EACA;AACF,EACC,qBAAqB,KAAK,EAC1B,OAAO,OAAO,MAAM,YAAY;AAC/B,QAAM,MAAM,MAAM,eAAe;AACjC,MAAI,CAAE,MAAM,uBAAuB,KAAK,MAAM,QAAQ,KAAK,GAAI;AAC7D,UAAM,IAAI,MAAM;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,MACX,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AACF,CAAC;AAEH,MAAM,iBAAiB,IAAI,QAAQ,SAAS,EACzC;AAAA,EACC;AACF,EACC,SAAS,aAAa,cAAc,EACpC,qBAAqB,KAAK,EAC1B,OAAO,OAAO,SAAS;AACtB,QAAM,MAAM,MAAM,eAAe;AACjC,MAAI,SAAS,QAAW;AACtB,UAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C;AAAA,MACE,SAAS,mBAAmB,SACxB,+BACA,oBAAoB,SAAS,cAAc;AAAA,IACjD;AACA;AAAA,EACF;AACA,QAAM,sBAAsB,KAAK,OAAO,aAAa;AACnD,UAAM,cAAc,MAAM,uBAAuB,KAAK;AAAA,MACpD;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AACD,aAAS,iBAAiB;AAC1B,aAAS,cAAc,YAAa;AAAA,EACtC,CAAC;AACD,kBAAgB,oBAAoB,IAAI,EAAE;AAC5C,CAAC;AAEH,MAAM,kBAAkB,IAAI,QAAQ,UAAU,EAC3C;AAAA,EACC;AACF,EACC,qBAAqB,KAAK,EAC1B,OAAO,YAAY;AAClB,QAAM,MAAM,MAAM,eAAe;AACjC,QAAM,YAAY,KAAK,QAAQ,QAAQ,IAAI,CAAC;AAC5C,QAAM,UAAU,MAAM,sBAAsB,KAAK,CAAC,aAAa;AAC7D,QACE,SAAS,eACT,OAAO,OAAO,SAAS,aAAa,SAAS,GAC7C;AACA,aAAO,SAAS,YAAY,SAAS;AACrC,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,CAAC;AACD,MAAI;AACF,oBAAgB,uCAAuC,SAAS,GAAG;AAAA,MAChE,YAAW,uCAAuC,SAAS,GAAG;AACnE,QAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C,MAAI,aAAa;AACf,eAAW,qBAAqB,SAAS,IAAI,KAAK,SAAS,MAAM,GAAG;AACxE,CAAC;AAEH,MAAM,kBAAkB,IAAI,QAAQ,UAAU,EAC3C,QAAQ,iCAAiC,EACzC;AAAA,EACC;AAGF,EACC,SAAS,UAAU,wBAAwB,EAC3C,SAAS,WAAW,eAAe,EACnC,qBAAqB,KAAK,EAC1B,OAAO,OAAO,MAAM,OAAO,UAAU,QAAQ;AAC5C,QAAM,MAAM,MAAM,eAAe;AACjC,QAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C,MAAI,SAAS,UAAa,UAAU,QAAW;AAC7C;AAAA,MACE,2BAA2B,SAAS,wBAAwB,IAAI;AAAA,IAClE;AACA;AAAA,EACF;AACA,MACE,SAAS,4BACR,UAAU,UAAU,UAAU,SAC/B;AACA,QAAI;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,sBAAsB,KAAK,CAACA,cAAa;AAC7C,IAAAA,UAAS,uBAAuB,UAAU;AAAA,EAC5C,CAAC;AACD,kBAAgB,iCAAiC,KAAK,GAAG;AAC3D,CAAC;AAEI,aAAM,UAAU,IAAI,QAAQ,SAAS,EACzC,QAAQ,sDAAsD,EAC9D;AAAA,EACC;AAgBF,EACC,WAAW,WAAW,EACtB,WAAW,aAAa,EACxB,WAAW,cAAc,EACzB,WAAW,eAAe,EAC1B,WAAW,eAAe,EAC1B,WAAW,mBAAmB,CAAC,EAC/B,WAAW,oBAAoB,CAAC,EAChC,eAAe,KAAK;AAEvB,sBAAsB,kCACpB,KACA,QACA,SACoC;AACpC,QAAM,OAAO,IAAI,aAAa;AAC9B,QAAM,UAAU,MAAM,SAAS,gBAAgB,KAAK,SAAS,OAAO;AACpE,QAAM,UACJ,OAAO,SAAS,mBACZ,eAAe,OAAO,cAAc,MACpC,OAAO,SAAS,wBACd,YAAY,OAAO,QAAQ,IAAI,OAAO,WAAW,MACjD;AACR;AAAA,IACE,GAAG,UAAU,YAAY,OAAO,MAAM,cAAc,kBAAkB,OAAO;AAAA,EAC/E;AACA,QAAM,eAAyB,CAAC;AAChC,MAAI,OAAO,SAAS,oBAAoB;AACtC,eAAWC,SAAQ,kBAAkB,GAAG,GAAG;AACzC,UAAIA,UAAS,QAAS;AACtB,YAAM,cAAc,MAAM,uBAAuB,KAAK;AAAA,QACpD,MAAAA;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AACD,UAAK,MAAM,cAAc,YAAa,aAAa,MAAM,MAAO;AAC9D,qBAAa,KAAKA,KAAI;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,UAAMC,aAAY,MAAM,oBAAoB,KAAK,EAAE,QAAQ,CAAC;AAC5D,UAAM,eAAeA,YAAW,OAAO,WAAW,gBAAgB,IAC9D,oCAAoCA,WAAU,MAAM,uBACpD;AACJ,WAAO,MAAM,IAAI,MAAM;AAAA,MACrB,UAAU;AAAA,MACV,WAAW;AAAA,MACX,gBAAgB,GACd,aAAa,SAAS,IAClB,kCAAkC,aAAa,IAAI,CAACD,UAAS,+BAA+BA,KAAI,IAAI,EAAE,KAAK,MAAM,CAAC,MAClH,0EACN,GAAG,YAAY;AAAA,IACjB,CAAC;AAAA,EACH;AAKA,QAAM,SAAS,MAAM,cAAsB,KAAK;AAAA,IAC9C,SAAS;AAAA,IACT,SAAS;AAAA,MACP,GAAG,aAAa,IAAI,CAACA,WAAU;AAAA,QAC7B,MAAM,gBAAgBA,KAAI;AAAA,QAC1B,OAAO,EAAE,MAAM,OAAO,MAAAA,MAAK;AAAA,MAC7B,EAAE;AAAA,MACF,EAAE,MAAM,6BAA6B,OAAO,EAAE,MAAM,QAAQ,EAAW;AAAA,MACvE;AAAA,QACE,MAAM;AAAA,QACN,OAAO,EAAE,MAAM,gBAAgB;AAAA,MACjC;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI,OAAO,SAAS,gBAAiB,QAAO;AAC5C,QAAM,OACJ,OAAO,SAAS,QACZ,OAAO,OACP,MAAM,aAAa,KAAK;AAAA,IACtB,SAAS;AAAA,EACX,CAAC;AACP,QAAM,oBAAoB,KAAK,IAAI;AACnC,MAAI,OAAO,SAAS,SAAS;AAC3B,UAAMC,aAAY,EAAE,MAAM,QAAQ,mBAAmB;AACrD,UAAM,aAAa,KAAK,EAAE,SAASA,WAAU,CAAC;AAC9C,UAAM,yBAAyB,KAAKA,YAAW,KAAK;AAAA,EACtD;AACA,MAAI,CAAE,MAAM,uBAAuB,KAAK,MAAM,OAAO,MAAM;AACzD,WAAO;AACT,QAAM,YAAY,MAAM,oBAAoB,KAAK,EAAE,QAAQ,CAAC;AAC5D,MAAI,WAAW,SAAS,MAAM;AAC5B,WAAO,MAAM,IAAI,MAAM;AAAA,MACrB,UAAU;AAAA,MACV,WAAW;AAAA,MACX,gBAAgB,oCAAoC,WAAW,MAAM;AAAA,IACvE,CAAC;AAAA,EACH;AACA,MAAI,oBAAoB,MAAM,gBAAgB,KAAK,SAAS,CAAC;AAC7D,SAAO;AACT;",
-  "names": ["settings", "name", "selection"]
-}

package/dist/esm/cli/lib/deployKeyWarning.js

@@ -1,27 +0,0 @@
-"use strict";
-import { logWarning } from "../../bundler/log.js";
-import {
-  deploymentNameFromAdminKey,
-  deploymentTypeFromAdminKey,
-  isDeploymentKey,
-  isPreviewDeployKey,
-  isProjectKey
-} from "./deployment.js";
-import { getDeployKeySource } from "./envvars.js";
-import { IGNORED_DEPLOY_KEY, readDeployKeyFromEnv } from "./utils/utils.js";
-const warnedContexts = /* @__PURE__ */ new WeakSet();
-export function warnIfDeployKeyOverridesLogin(ctx, hasAccount) {
-  if (!hasAccount || warnedContexts.has(ctx) || process.env.CONVEX_OVERRIDE_ACCESS_TOKEN)
-    return;
-  const key = readDeployKeyFromEnv((name) => process.env[name]);
-  if (key === void 0 || key === IGNORED_DEPLOY_KEY || isPreviewDeployKey(key))
-    return;
-  const { envVarName, source } = getDeployKeySource(key);
-  const type = deploymentTypeFromAdminKey(key);
-  const target = isDeploymentKey(key) ? `${type === "prod" ? "production" : type} deployment "${deploymentNameFromAdminKey(key)}"` : isProjectKey(key) ? "the project selected by the key" : "the deployment selected by the key";
-  logWarning(
-    `WARNING: ${envVarName} in ${source} overrides your Convex account for deployment commands. They target ${target}. Remove ${envVarName} to use the selected account.`
-  );
-  warnedContexts.add(ctx);
-}
-//# sourceMappingURL=deployKeyWarning.js.map

package/dist/esm/cli/lib/deployKeyWarning.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/cli/lib/deployKeyWarning.ts"],
-  "sourcesContent": ["import { Context } from \"../../bundler/context.js\";\nimport { logWarning } from \"../../bundler/log.js\";\nimport {\n  deploymentNameFromAdminKey,\n  deploymentTypeFromAdminKey,\n  isDeploymentKey,\n  isPreviewDeployKey,\n  isProjectKey,\n} from \"./deployment.js\";\nimport { getDeployKeySource } from \"./envvars.js\";\nimport { IGNORED_DEPLOY_KEY, readDeployKeyFromEnv } from \"./utils/utils.js\";\n\nconst warnedContexts = new WeakSet<Context>();\n\nexport function warnIfDeployKeyOverridesLogin(\n  ctx: Context,\n  hasAccount: boolean,\n) {\n  if (\n    !hasAccount ||\n    warnedContexts.has(ctx) ||\n    process.env.CONVEX_OVERRIDE_ACCESS_TOKEN\n  )\n    return;\n  const key = readDeployKeyFromEnv((name) => process.env[name]);\n  if (\n    key === undefined ||\n    key === IGNORED_DEPLOY_KEY ||\n    isPreviewDeployKey(key)\n  )\n    return;\n  const { envVarName, source } = getDeployKeySource(key);\n  const type = deploymentTypeFromAdminKey(key);\n  const target = isDeploymentKey(key)\n    ? `${type === \"prod\" ? \"production\" : type} deployment \"${deploymentNameFromAdminKey(key)}\"`\n    : isProjectKey(key)\n      ? \"the project selected by the key\"\n      : \"the deployment selected by the key\";\n  logWarning(\n    `WARNING: ${envVarName} in ${source} overrides your Convex account for deployment commands. They target ${target}. Remove ${envVarName} to use the selected account.`,\n  );\n  warnedContexts.add(ctx);\n}\n"],
-  "mappings": ";AACA,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,oBAAoB,4BAA4B;AAEzD,MAAM,iBAAiB,oBAAI,QAAiB;AAErC,gBAAS,8BACd,KACA,YACA;AACA,MACE,CAAC,cACD,eAAe,IAAI,GAAG,KACtB,QAAQ,IAAI;AAEZ;AACF,QAAM,MAAM,qBAAqB,CAAC,SAAS,QAAQ,IAAI,IAAI,CAAC;AAC5D,MACE,QAAQ,UACR,QAAQ,sBACR,mBAAmB,GAAG;AAEtB;AACF,QAAM,EAAE,YAAY,OAAO,IAAI,mBAAmB,GAAG;AACrD,QAAM,OAAO,2BAA2B,GAAG;AAC3C,QAAM,SAAS,gBAAgB,GAAG,IAC9B,GAAG,SAAS,SAAS,eAAe,IAAI,gBAAgB,2BAA2B,GAAG,CAAC,MACvF,aAAa,GAAG,IACd,oCACA;AACN;AAAA,IACE,YAAY,UAAU,OAAO,MAAM,uEAAuE,MAAM,YAAY,UAAU;AAAA,EACxI;AACA,iBAAe,IAAI,GAAG;AACxB;",
-  "names": []
-}

package/dist/esm/cli/lib/profileManagement.js

@@ -1,179 +0,0 @@
-"use strict";
-import { logMessage, logWarning } from "../../bundler/log.js";
-import { provisionHost } from "./config.js";
-import { version } from "../version.js";
-import {
-  isAnonymousDeployment,
-  getDeploymentTypeFromConfiguredDeployment,
-  stripDeploymentTypePrefix
-} from "./deployment.js";
-import { CONVEX_DEPLOYMENT_ENV_VAR_NAME } from "./utils/utils.js";
-import { promptYesNo } from "./utils/prompts.js";
-import { loadProjectEnvironmentVariables } from "./envvars.js";
-import {
-  readProfileCredentials,
-  readProfileSettings,
-  readProfileToken,
-  savedProfileNames,
-  writeProfileDirectory
-} from "./profiles.js";
-export async function profileApi(token, pathname, body) {
-  return await fetch(`${provisionHost}${pathname}`, {
-    method: body === void 0 ? "GET" : "POST",
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "Convex-Client": `npm-cli-${version}`,
-      ...body === void 0 ? {} : { "Content-Type": "application/json" }
-    },
-    ...body === void 0 ? {} : { body: JSON.stringify(body) },
-    signal: AbortSignal.timeout(1e4)
-  });
-}
-export async function deploymentAccess(token, deploymentName) {
-  try {
-    const response = await profileApi(
-      token,
-      `/v1/deployments/${encodeURIComponent(deploymentName)}`
-    );
-    if (response.ok) return "yes";
-    return [401, 403, 404].includes(response.status) ? "no" : "unknown";
-  } catch {
-    return "unknown";
-  }
-}
-export async function projectAccess(token, target) {
-  if (target.kind === "deploymentName")
-    return deploymentAccess(token, target.deploymentName);
-  if (target.kind !== "teamAndProjectSlugs") return "unknown";
-  try {
-    const response = await profileApi(
-      token,
-      `/v1/teams/${encodeURIComponent(target.teamSlug)}/projects/${encodeURIComponent(target.projectSlug)}`
-    );
-    if (response.ok) return "yes";
-    return [401, 403, 404].includes(response.status) ? "no" : "unknown";
-  } catch {
-    return "unknown";
-  }
-}
-function configuredCloudDeployment() {
-  const configured = process.env[CONVEX_DEPLOYMENT_ENV_VAR_NAME]?.trim();
-  if (!configured || getDeploymentTypeFromConfiguredDeployment(configured) === "local")
-    return null;
-  const name = stripDeploymentTypePrefix(configured);
-  return isAnonymousDeployment(name) ? null : name;
-}
-export async function bindProfileToDirectory(ctx, name, force = false, target) {
-  const credentials = await readProfileCredentials(ctx, {
-    name,
-    source: "account selection"
-  });
-  loadProjectEnvironmentVariables();
-  const deployment = configuredCloudDeployment();
-  const selectedTarget = target ?? (deployment === null ? null : {
-    kind: "deploymentName",
-    deploymentName: deployment,
-    deploymentType: null
-  });
-  if (!force && selectedTarget !== null) {
-    const label = selectedTarget.kind === "teamAndProjectSlugs" ? `project "${selectedTarget.teamSlug}/${selectedTarget.projectSlug}"` : `deployment "${selectedTarget.kind === "deploymentName" ? selectedTarget.deploymentName : "configured"}"`;
-    const access = await projectAccess(
-      credentials.accessToken,
-      selectedTarget
-    );
-    if (access !== "yes") {
-      logWarning(
-        access === "no" ? `Account "${name}" cannot access ${label}.` : `Could not verify whether account "${name}" can access ${label}.`
-      );
-      if (!process.stdin.isTTY || !await promptYesNo(ctx, {
-        message: `Use account "${name}" here anyway?`,
-        default: false
-      })) {
-        logMessage(
-          `Directory selection unchanged. To select this account anyway, run \`npx convex account select ${name} --force\`.`
-        );
-        return false;
-      }
-    }
-  }
-  await writeProfileDirectory(ctx, name);
-  return true;
-}
-export async function profileLoginMetadata(ctx, profile, loginToken, previous) {
-  let identity = null;
-  try {
-    const response = await profileApi(loginToken, "/api/dashboard/profile");
-    if (response.ok) {
-      const data = await response.json();
-      if ((typeof data.id === "number" || typeof data.id === "string") && typeof data.email === "string") {
-        identity = { memberId: String(data.id), email: data.email };
-      }
-    }
-  } catch {
-  }
-  const sameAccount = previous !== null && (previous.memberId === void 0 || identity === null) ? await tokensBelongToSameAccount(previous.accessToken, loginToken) : null;
-  if (previous !== null && (previous.memberId === void 0 || identity === null ? sameAccount !== true : identity.memberId !== previous.memberId)) {
-    return await ctx.crash({
-      exitCode: 1,
-      errorType: "fatal",
-      printedMessage: sameAccount === null && (previous.memberId === void 0 || identity === null) ? `Could not verify the identity of saved account "${profile.name}". To replace this saved login, run \`npx convex logout --account ${profile.name}\` followed by \`npx convex login --account ${profile.name}\`. Choose the intended account when logging in.` : `The login does not match saved account "${profile.name}". Log in with the matching account, or choose another name with \`npx convex login --account <name>\`.`
-    });
-  }
-  return {
-    ...identity ?? (previous?.memberId === void 0 ? {} : { memberId: previous.memberId, email: previous.email })
-  };
-}
-async function tokensBelongToSameAccount(older, newer) {
-  try {
-    const responses = await Promise.all(
-      [older, newer].map(
-        (token) => profileApi(token, "/v1/list_personal_access_tokens?limit=100")
-      )
-    );
-    if (responses.some((response) => !response.ok)) return null;
-    const lists = await Promise.all(
-      responses.map((response) => response.json())
-    );
-    if (lists.some(
-      (list) => !Array.isArray(list.items) || list.items.length === 0
-    ))
-      return null;
-    const ids = new Set(
-      lists[0].items.map((token) => String(token.id))
-    );
-    if (lists[1].items.some((token) => ids.has(String(token.id))))
-      return true;
-    return lists.some((list) => list.pagination?.hasMore !== false) ? null : false;
-  } catch {
-    return null;
-  }
-}
-export async function revokeReplacedProfileToken(ctx, previous, accessToken) {
-  if (previous === void 0 || previous === accessToken) return;
-  const settings = await readProfileSettings(ctx);
-  if (settings.revokeReplacedTokens === false || settings.accessToken === previous)
-    return;
-  for (const name of savedProfileNames(ctx)) {
-    const token = readProfileToken(ctx, name);
-    if (token === null) {
-      logWarning(
-        `The new login was saved, but account "${name}" could not be read. Skipping revocation of the replaced token.`
-      );
-      return;
-    }
-    if (token === previous) return;
-  }
-  try {
-    const response = await profileApi(
-      accessToken,
-      "/v1/delete_personal_access_token",
-      { id: previous }
-    );
-    if (response.ok) return;
-  } catch {
-  }
-  logWarning(
-    "The new login was saved, but the replaced token could not be revoked. You can remove it in the dashboard's account settings."
-  );
-}
-//# sourceMappingURL=profileManagement.js.map

package/dist/esm/cli/lib/profileManagement.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/cli/lib/profileManagement.ts"],
-  "sourcesContent": ["import { ProjectSelection } from \"./deploymentSelection.js\";\nimport { Context } from \"../../bundler/context.js\";\nimport { logMessage, logWarning } from \"../../bundler/log.js\";\nimport { provisionHost } from \"./config.js\";\nimport { version } from \"../version.js\";\nimport {\n  isAnonymousDeployment,\n  getDeploymentTypeFromConfiguredDeployment,\n  stripDeploymentTypePrefix,\n} from \"./deployment.js\";\nimport { CONVEX_DEPLOYMENT_ENV_VAR_NAME } from \"./utils/utils.js\";\nimport { promptYesNo } from \"./utils/prompts.js\";\nimport { loadProjectEnvironmentVariables } from \"./envvars.js\";\nimport {\n  ProfileCredentials,\n  ProfileSelection,\n  readProfileCredentials,\n  readProfileSettings,\n  readProfileToken,\n  savedProfileNames,\n  writeProfileDirectory,\n} from \"./profiles.js\";\n\nexport async function profileApi(\n  token: string,\n  pathname: string,\n  body?: unknown,\n) {\n  return await fetch(`${provisionHost}${pathname}`, {\n    method: body === undefined ? \"GET\" : \"POST\",\n    headers: {\n      Authorization: `Bearer ${token}`,\n      \"Convex-Client\": `npm-cli-${version}`,\n      ...(body === undefined ? {} : { \"Content-Type\": \"application/json\" }),\n    },\n    ...(body === undefined ? {} : { body: JSON.stringify(body) }),\n    signal: AbortSignal.timeout(10_000),\n  });\n}\n\nexport async function deploymentAccess(\n  token: string,\n  deploymentName: string,\n): Promise<\"yes\" | \"no\" | \"unknown\"> {\n  try {\n    const response = await profileApi(\n      token,\n      `/v1/deployments/${encodeURIComponent(deploymentName)}`,\n    );\n    if (response.ok) return \"yes\";\n    return [401, 403, 404].includes(response.status) ? \"no\" : \"unknown\";\n  } catch {\n    return \"unknown\";\n  }\n}\n\nexport async function projectAccess(\n  token: string,\n  target: ProjectSelection,\n): Promise<\"yes\" | \"no\" | \"unknown\"> {\n  if (target.kind === \"deploymentName\")\n    return deploymentAccess(token, target.deploymentName);\n  if (target.kind !== \"teamAndProjectSlugs\") return \"unknown\";\n  try {\n    const response = await profileApi(\n      token,\n      `/v1/teams/${encodeURIComponent(target.teamSlug)}/projects/${encodeURIComponent(target.projectSlug)}`,\n    );\n    if (response.ok) return \"yes\";\n    return [401, 403, 404].includes(response.status) ? \"no\" : \"unknown\";\n  } catch {\n    return \"unknown\";\n  }\n}\n\nfunction configuredCloudDeployment(): string | null {\n  const configured = process.env[CONVEX_DEPLOYMENT_ENV_VAR_NAME]?.trim();\n  if (\n    !configured ||\n    getDeploymentTypeFromConfiguredDeployment(configured) === \"local\"\n  )\n    return null;\n  const name = stripDeploymentTypePrefix(configured);\n  return isAnonymousDeployment(name) ? null : name;\n}\n\nexport async function bindProfileToDirectory(\n  ctx: Context,\n  name: string,\n  force = false,\n  target?: ProjectSelection,\n): Promise<boolean> {\n  const credentials = await readProfileCredentials(ctx, {\n    name,\n    source: \"account selection\",\n  });\n  loadProjectEnvironmentVariables();\n  const deployment = configuredCloudDeployment();\n  const selectedTarget =\n    target ??\n    (deployment === null\n      ? null\n      : {\n          kind: \"deploymentName\" as const,\n          deploymentName: deployment,\n          deploymentType: null,\n        });\n  if (!force && selectedTarget !== null) {\n    const label =\n      selectedTarget.kind === \"teamAndProjectSlugs\"\n        ? `project \"${selectedTarget.teamSlug}/${selectedTarget.projectSlug}\"`\n        : `deployment \"${selectedTarget.kind === \"deploymentName\" ? selectedTarget.deploymentName : \"configured\"}\"`;\n    const access = await projectAccess(\n      credentials!.accessToken,\n      selectedTarget,\n    );\n    if (access !== \"yes\") {\n      logWarning(\n        access === \"no\"\n          ? `Account \"${name}\" cannot access ${label}.`\n          : `Could not verify whether account \"${name}\" can access ${label}.`,\n      );\n      if (\n        !process.stdin.isTTY ||\n        !(await promptYesNo(ctx, {\n          message: `Use account \"${name}\" here anyway?`,\n          default: false,\n        }))\n      ) {\n        logMessage(\n          `Directory selection unchanged. To select this account anyway, run \\`npx convex account select ${name} --force\\`.`,\n        );\n        return false;\n      }\n    }\n  }\n  await writeProfileDirectory(ctx, name);\n  return true;\n}\n\nexport async function profileLoginMetadata(\n  ctx: Context,\n  profile: ProfileSelection,\n  loginToken: string,\n  previous: ProfileCredentials | null,\n): Promise<Omit<ProfileCredentials, \"accessToken\">> {\n  let identity: { memberId: string; email: string } | null = null;\n  try {\n    const response = await profileApi(loginToken, \"/api/dashboard/profile\");\n    if (response.ok) {\n      const data = await response.json();\n      if (\n        (typeof data.id === \"number\" || typeof data.id === \"string\") &&\n        typeof data.email === \"string\"\n      ) {\n        identity = { memberId: String(data.id), email: data.email };\n      }\n    }\n  } catch {\n    // Older authentication tokens can be valid without access to the dashboard profile API.\n  }\n  const sameAccount =\n    previous !== null && (previous.memberId === undefined || identity === null)\n      ? await tokensBelongToSameAccount(previous.accessToken, loginToken)\n      : null;\n  if (\n    previous !== null &&\n    (previous.memberId === undefined || identity === null\n      ? sameAccount !== true\n      : identity.memberId !== previous.memberId)\n  ) {\n    return await ctx.crash({\n      exitCode: 1,\n      errorType: \"fatal\",\n      printedMessage:\n        sameAccount === null &&\n        (previous.memberId === undefined || identity === null)\n          ? `Could not verify the identity of saved account \"${profile.name}\". To replace this saved login, run \\`npx convex logout --account ${profile.name}\\` followed by \\`npx convex login --account ${profile.name}\\`. Choose the intended account when logging in.`\n          : `The login does not match saved account \"${profile.name}\". Log in with the matching account, or choose another name with \\`npx convex login --account <name>\\`.`,\n    });\n  }\n  return {\n    ...(identity ??\n      (previous?.memberId === undefined\n        ? {}\n        : { memberId: previous.memberId, email: previous.email })),\n  };\n}\n\nasync function tokensBelongToSameAccount(\n  older: string,\n  newer: string,\n): Promise<boolean | null> {\n  try {\n    const responses = await Promise.all(\n      [older, newer].map((token) =>\n        profileApi(token, \"/v1/list_personal_access_tokens?limit=100\"),\n      ),\n    );\n    if (responses.some((response) => !response.ok)) return null;\n    const lists = await Promise.all(\n      responses.map((response) => response.json()),\n    );\n    if (\n      lists.some(\n        (list) => !Array.isArray(list.items) || list.items.length === 0,\n      )\n    )\n      return null;\n    const ids = new Set(\n      lists[0].items.map((token: { id: unknown }) => String(token.id)),\n    );\n    if (\n      lists[1].items.some((token: { id: unknown }) => ids.has(String(token.id)))\n    )\n      return true;\n    // Disjoint partial pages cannot establish that the accounts differ.\n    return lists.some((list) => list.pagination?.hasMore !== false)\n      ? null\n      : false;\n  } catch {\n    return null;\n  }\n}\n\nexport async function revokeReplacedProfileToken(\n  ctx: Context,\n  previous: string | undefined,\n  accessToken: string,\n) {\n  if (previous === undefined || previous === accessToken) return;\n  const settings = await readProfileSettings(ctx);\n  if (\n    settings.revokeReplacedTokens === false ||\n    settings.accessToken === previous\n  )\n    return;\n  for (const name of savedProfileNames(ctx)) {\n    const token = readProfileToken(ctx, name);\n    if (token === null) {\n      logWarning(\n        `The new login was saved, but account \"${name}\" could not be read. Skipping revocation of the replaced token.`,\n      );\n      return;\n    }\n    if (token === previous) return;\n  }\n  try {\n    // The API verifies token ownership using the newly authenticated account.\n    const response = await profileApi(\n      accessToken,\n      \"/v1/delete_personal_access_token\",\n      { id: previous },\n    );\n    if (response.ok) return;\n  } catch {\n    // The new credentials are already saved, so a failed revocation can be retried in the dashboard.\n  }\n  logWarning(\n    \"The new login was saved, but the replaced token could not be revoked. You can remove it in the dashboard's account settings.\",\n  );\n}\n"],
-  "mappings": ";AAEA,SAAS,YAAY,kBAAkB;AACvC,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sCAAsC;AAC/C,SAAS,mBAAmB;AAC5B,SAAS,uCAAuC;AAChD;AAAA,EAGE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,sBAAsB,WACpB,OACA,UACA,MACA;AACA,SAAO,MAAM,MAAM,GAAG,aAAa,GAAG,QAAQ,IAAI;AAAA,IAChD,QAAQ,SAAS,SAAY,QAAQ;AAAA,IACrC,SAAS;AAAA,MACP,eAAe,UAAU,KAAK;AAAA,MAC9B,iBAAiB,WAAW,OAAO;AAAA,MACnC,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,gBAAgB,mBAAmB;AAAA,IACrE;AAAA,IACA,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,IAAI,EAAE;AAAA,IAC3D,QAAQ,YAAY,QAAQ,GAAM;AAAA,EACpC,CAAC;AACH;AAEA,sBAAsB,iBACpB,OACA,gBACmC;AACnC,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,mBAAmB,mBAAmB,cAAc,CAAC;AAAA,IACvD;AACA,QAAI,SAAS,GAAI,QAAO;AACxB,WAAO,CAAC,KAAK,KAAK,GAAG,EAAE,SAAS,SAAS,MAAM,IAAI,OAAO;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,sBAAsB,cACpB,OACA,QACmC;AACnC,MAAI,OAAO,SAAS;AAClB,WAAO,iBAAiB,OAAO,OAAO,cAAc;AACtD,MAAI,OAAO,SAAS,sBAAuB,QAAO;AAClD,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,aAAa,mBAAmB,OAAO,QAAQ,CAAC,aAAa,mBAAmB,OAAO,WAAW,CAAC;AAAA,IACrG;AACA,QAAI,SAAS,GAAI,QAAO;AACxB,WAAO,CAAC,KAAK,KAAK,GAAG,EAAE,SAAS,SAAS,MAAM,IAAI,OAAO;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA2C;AAClD,QAAM,aAAa,QAAQ,IAAI,8BAA8B,GAAG,KAAK;AACrE,MACE,CAAC,cACD,0CAA0C,UAAU,MAAM;AAE1D,WAAO;AACT,QAAM,OAAO,0BAA0B,UAAU;AACjD,SAAO,sBAAsB,IAAI,IAAI,OAAO;AAC9C;AAEA,sBAAsB,uBACpB,KACA,MACA,QAAQ,OACR,QACkB;AAClB,QAAM,cAAc,MAAM,uBAAuB,KAAK;AAAA,IACpD;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AACD,kCAAgC;AAChC,QAAM,aAAa,0BAA0B;AAC7C,QAAM,iBACJ,WACC,eAAe,OACZ,OACA;AAAA,IACE,MAAM;AAAA,IACN,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,EAClB;AACN,MAAI,CAAC,SAAS,mBAAmB,MAAM;AACrC,UAAM,QACJ,eAAe,SAAS,wBACpB,YAAY,eAAe,QAAQ,IAAI,eAAe,WAAW,MACjE,eAAe,eAAe,SAAS,mBAAmB,eAAe,iBAAiB,YAAY;AAC5G,UAAM,SAAS,MAAM;AAAA,MACnB,YAAa;AAAA,MACb;AAAA,IACF;AACA,QAAI,WAAW,OAAO;AACpB;AAAA,QACE,WAAW,OACP,YAAY,IAAI,mBAAmB,KAAK,MACxC,qCAAqC,IAAI,gBAAgB,KAAK;AAAA,MACpE;AACA,UACE,CAAC,QAAQ,MAAM,SACf,CAAE,MAAM,YAAY,KAAK;AAAA,QACvB,SAAS,gBAAgB,IAAI;AAAA,QAC7B,SAAS;AAAA,MACX,CAAC,GACD;AACA;AAAA,UACE,iGAAiG,IAAI;AAAA,QACvG;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,QAAM,sBAAsB,KAAK,IAAI;AACrC,SAAO;AACT;AAEA,sBAAsB,qBACpB,KACA,SACA,YACA,UACkD;AAClD,MAAI,WAAuD;AAC3D,MAAI;AACF,UAAM,WAAW,MAAM,WAAW,YAAY,wBAAwB;AACtE,QAAI,SAAS,IAAI;AACf,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,WACG,OAAO,KAAK,OAAO,YAAY,OAAO,KAAK,OAAO,aACnD,OAAO,KAAK,UAAU,UACtB;AACA,mBAAW,EAAE,UAAU,OAAO,KAAK,EAAE,GAAG,OAAO,KAAK,MAAM;AAAA,MAC5D;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,QAAM,cACJ,aAAa,SAAS,SAAS,aAAa,UAAa,aAAa,QAClE,MAAM,0BAA0B,SAAS,aAAa,UAAU,IAChE;AACN,MACE,aAAa,SACZ,SAAS,aAAa,UAAa,aAAa,OAC7C,gBAAgB,OAChB,SAAS,aAAa,SAAS,WACnC;AACA,WAAO,MAAM,IAAI,MAAM;AAAA,MACrB,UAAU;AAAA,MACV,WAAW;AAAA,MACX,gBACE,gBAAgB,SACf,SAAS,aAAa,UAAa,aAAa,QAC7C,mDAAmD,QAAQ,IAAI,qEAAqE,QAAQ,IAAI,+CAA+C,QAAQ,IAAI,qDAC3M,2CAA2C,QAAQ,IAAI;AAAA,IAC/D,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,GAAI,aACD,UAAU,aAAa,SACpB,CAAC,IACD,EAAE,UAAU,SAAS,UAAU,OAAO,SAAS,MAAM;AAAA,EAC7D;AACF;AAEA,eAAe,0BACb,OACA,OACyB;AACzB,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ;AAAA,MAC9B,CAAC,OAAO,KAAK,EAAE;AAAA,QAAI,CAAC,UAClB,WAAW,OAAO,2CAA2C;AAAA,MAC/D;AAAA,IACF;AACA,QAAI,UAAU,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,EAAG,QAAO;AACvD,UAAM,QAAQ,MAAM,QAAQ;AAAA,MAC1B,UAAU,IAAI,CAAC,aAAa,SAAS,KAAK,CAAC;AAAA,IAC7C;AACA,QACE,MAAM;AAAA,MACJ,CAAC,SAAS,CAAC,MAAM,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAM,WAAW;AAAA,IAChE;AAEA,aAAO;AACT,UAAM,MAAM,IAAI;AAAA,MACd,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC,UAA2B,OAAO,MAAM,EAAE,CAAC;AAAA,IACjE;AACA,QACE,MAAM,CAAC,EAAE,MAAM,KAAK,CAAC,UAA2B,IAAI,IAAI,OAAO,MAAM,EAAE,CAAC,CAAC;AAEzE,aAAO;AAET,WAAO,MAAM,KAAK,CAAC,SAAS,KAAK,YAAY,YAAY,KAAK,IAC1D,OACA;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,sBAAsB,2BACpB,KACA,UACA,aACA;AACA,MAAI,aAAa,UAAa,aAAa,YAAa;AACxD,QAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C,MACE,SAAS,yBAAyB,SAClC,SAAS,gBAAgB;AAEzB;AACF,aAAW,QAAQ,kBAAkB,GAAG,GAAG;AACzC,UAAM,QAAQ,iBAAiB,KAAK,IAAI;AACxC,QAAI,UAAU,MAAM;AAClB;AAAA,QACE,yCAAyC,IAAI;AAAA,MAC/C;AACA;AAAA,IACF;AACA,QAAI,UAAU,SAAU;AAAA,EAC1B;AACA,MAAI;AAEF,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,SAAS;AAAA,IACjB;AACA,QAAI,SAAS,GAAI;AAAA,EACnB,QAAQ;AAAA,EAER;AACA;AAAA,IACE;AAAA,EACF;AACF;",
-  "names": []
-}