getmyenv 0.1.1 → 0.3.1

package/dist/lib/bootstrap.js

@@ -0,0 +1,64 @@
+import { promptConfirm, readProjectMeta, } from "../lib/fs.js";
+import { ApiClient, ensureSessionToken, getSessionToken, resolveApiUrl, } from "../lib/api.js";
+import { linkCommand } from "../commands/link.js";
+import { tokenCommand } from "../commands/token.js";
+/**
+ * Ensure a CLI token exists (TTY runs token), then ensure this folder is linked
+ * to the token project (TTY confirms + link). Returns whoami + linked ids.
+ */
+export async function ensureTokenAndLink(opts) {
+    if (!getSessionToken()) {
+        if (!process.stdin.isTTY) {
+            throw new Error("No CLI token. Run: npx getmyenv token");
+        }
+        await tokenCommand({
+            apiUrl: opts.apiUrl,
+            skipLinkOffer: true,
+        });
+    }
+    let meta = readProjectMeta();
+    let token = await ensureSessionToken(meta?.projectId);
+    const apiUrl = resolveApiUrl(opts.apiUrl, meta?.projectId);
+    const client = new ApiClient(apiUrl, token);
+    const who = await client.request("GET", "/api/cli/whoami");
+    if (meta?.projectId && String(meta.projectId) !== String(who.projectId)) {
+        throw new Error([
+            `Linked project (${meta.projectName ?? meta.projectId}) does not match this token (${who.projectName}, ${who.projectId}).`,
+            "Run: npx getmyenv link --force",
+            "Or create a CLI token for this project on /cli.",
+        ].join("\n"));
+    }
+    if (!meta?.projectId) {
+        if (opts.forceLink || process.stdin.isTTY) {
+            if (!opts.forceLink && process.stdin.isTTY) {
+                const ok = await promptConfirm(`Folder is not linked. Link to token project and ${opts.action}?`, { defaultYes: true });
+                if (!ok) {
+                    throw new Error("Run: npx getmyenv link  first");
+                }
+            }
+            await linkCommand(undefined, {
+                apiUrl,
+                force: true,
+                env: who.cliScope,
+                skipPushOffer: true,
+            });
+            meta = readProjectMeta();
+            token = await ensureSessionToken(meta?.projectId);
+        }
+    }
+    if (!meta?.projectId) {
+        throw new Error([
+            "No project is linked to this folder.",
+            "Create a project in the dashboard (/projects/new), create a CLI token,",
+            "then: npx getmyenv token && npx getmyenv link",
+        ].join("\n"));
+    }
+    return {
+        who,
+        apiUrl,
+        token,
+        projectId: String(meta.projectId),
+        projectName: meta.projectName ?? who.projectName,
+    };
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/lib/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/lib/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,eAAe,EACf,aAAa,GAEd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAUpD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAmB;IAO1D,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,YAAY,CAAC;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,GAAG,eAAe,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAiB,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAE3E,IAAI,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb;YACE,mBAAmB,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,gCAAgC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,SAAS,IAAI;YAC1H,gCAAgC;YAChC,iDAAiD;SAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC3C,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5B,mDAAmD,IAAI,CAAC,MAAM,GAAG,EACjE,EAAE,UAAU,EAAE,IAAI,EAAE,CACrB,CAAC;gBACF,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YACD,MAAM,WAAW,CAAC,SAAS,EAAE;gBAC3B,MAAM;gBACN,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE,GAAG,CAAC,QAAQ;gBACjB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,IAAI,GAAG,eAAe,EAAE,CAAC;YACzB,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb;YACE,sCAAsC;YACtC,wEAAwE;YACxE,+CAA+C;SAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG;QACH,MAAM;QACN,KAAK;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW;KACjD,CAAC;AACJ,CAAC"}

package/dist/lib/confirm.d.ts

@@ -0,0 +1,17 @@
+export type ConflictItem = {
+    name: string;
+    /** Short human detail, e.g. "local differs from remote". */
+    detail?: string;
+};
+/**
+ * Prompt only when there are conflicts. Returns true to proceed.
+ * Non-TTY: requires `yes` to be true when conflicts exist.
+ */
+export declare function confirmDiff(opts: {
+    conflicts: ConflictItem[];
+    /** What will happen if the user confirms, e.g. "Overwrite local values". */
+    action: string;
+    /** Skip the prompt when true (still returns false if conflicts and non-TTY without yes). */
+    yes?: boolean;
+}): Promise<boolean>;
+//# sourceMappingURL=confirm.d.ts.map

package/dist/lib/confirm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.d.ts","sourceRoot":"","sources":["../../src/lib/confirm.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,GAAG,OAAO,CAAC,OAAO,CAAC,CAsBnB"}

package/dist/lib/confirm.js

@@ -0,0 +1,26 @@
+import pc from "picocolors";
+import { promptConfirm } from "./fs.js";
+/**
+ * Prompt only when there are conflicts. Returns true to proceed.
+ * Non-TTY: requires `yes` to be true when conflicts exist.
+ */
+export async function confirmDiff(opts) {
+    const { conflicts, action, yes } = opts;
+    if (conflicts.length === 0)
+        return true;
+    console.log(pc.yellow(`\n${conflicts.length} conflict(s):`));
+    for (const c of conflicts.slice(0, 20)) {
+        console.log(`  ${c.name}${c.detail ? pc.dim(` - ${c.detail}`) : ""}`);
+    }
+    if (conflicts.length > 20) {
+        console.log(pc.dim(`  …and ${conflicts.length - 20} more`));
+    }
+    console.log("");
+    if (yes)
+        return true;
+    if (!process.stdin.isTTY) {
+        throw new Error(`Conflicts require confirmation. Re-run with --yes to ${action.toLowerCase()}.`);
+    }
+    return promptConfirm(`${action}?`, { defaultYes: false });
+}
+//# sourceMappingURL=confirm.js.map

package/dist/lib/confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../../src/lib/confirm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAQxC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAMjC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,SAAS,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAErB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,wDAAwD,MAAM,CAAC,WAAW,EAAE,GAAG,CAChF,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC,GAAG,MAAM,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/dist/lib/credentials.d.ts

@@ -1,9 +1,70 @@
-export type Credentials = {
+export type CliScope = "development" | "production";
+export type TokenEntry = {
+    token: string;
+    apiUrl?: string;
+    projectName: string;
+    cliScope: CliScope;
+    addedAt: string;
+};
+/** Credentials file format v2: one token per project. */
+export type CredentialsV2 = {
+    version: 2;
+    tokens: Record<string, TokenEntry>;
+    /** Default project id (string or number from older writes). */
+    default?: number | string;
+};
+/** Legacy single-token file. */
+export type CredentialsV1 = {
     token: string;
     apiUrl?: string;
 };
-export declare function readCredentials(): Credentials | null;
-export declare function writeCredentials(creds: Credentials): string;
-export declare function clearCredentials(): boolean;
 export declare function credentialsFilePath(): string;
+export declare function readCredentialsV2(): CredentialsV2 | null;
+/** Legacy v1 blob, if present and not yet migrated. */
+export declare function readCredentialsV1(): CredentialsV1 | null;
+export declare function writeCredentialsV2(creds: CredentialsV2): string;
+export declare function upsertTokenEntry(projectId: string | number, entry: Omit<TokenEntry, "addedAt"> & {
+    addedAt?: string;
+}, opts?: {
+    setDefault?: boolean;
+}): string;
+export declare function removeTokenEntry(projectId: string | number): boolean;
+export declare function clearAllCredentials(): boolean;
+export declare function setDefaultProject(projectId: string | number): boolean;
+export declare function findTokenByNameOrId(nameOrId: string): {
+    projectId: string;
+    entry: TokenEntry;
+} | null;
+export type ResolvedToken = {
+    token: string;
+    apiUrl?: string;
+    projectId?: string;
+    entry?: TokenEntry;
+    source: "env" | "linked" | "default" | "v1" | "single";
+};
+/**
+ * Selection: GETMYENV_TOKEN > linked projectId entry > default > single entry > v1.
+ */
+export declare function resolveStoredToken(linkedProjectId?: string | number | null): ResolvedToken | null;
+/**
+ * Migrate a v1 credentials file into v2 using whoami metadata.
+ * Returns the new store, or null if nothing to migrate / whoami failed.
+ */
+export declare function migrateV1ToV2(meta: {
+    projectId: string | number;
+    projectName: string;
+    cliScope: CliScope;
+    apiUrl?: string;
+}): CredentialsV2 | null;
+/** @deprecated Prefer resolveStoredToken / readCredentialsV2. */
+export declare function readCredentials(): {
+    token: string;
+    apiUrl?: string;
+} | null;
+/** @deprecated Prefer upsertTokenEntry. */
+export declare function writeCredentials(creds: {
+    token: string;
+    apiUrl?: string;
+}): string;
+export declare function clearCredentials(): boolean;
 //# sourceMappingURL=credentials.d.ts.map

package/dist/lib/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAMF,wBAAgB,eAAe,IAAI,WAAW,GAAG,IAAI,CAgBpD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAQ3D;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAK1C;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,CAAC;AAEpD,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,yDAAyD;AACzD,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B,CAAC;AAEF,gCAAgC;AAChC,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAMF,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAyBD,wBAAgB,iBAAiB,IAAI,aAAa,GAAG,IAAI,CA+BxD;AAED,uDAAuD;AACvD,wBAAgB,iBAAiB,IAAI,aAAa,GAAG,IAAI,CAUxD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAqB/D;AAED,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,MAAM,EAC1B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EACzD,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,MAAM,CAgBR;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAepE;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAK7C;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAQrE;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,GACf;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG,IAAI,CAiBjD;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,GAAG,QAAQ,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GACvC,aAAa,GAAG,IAAI,CAsDtB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,aAAa,GAAG,IAAI,CAmBvB;AAED,iEAAiE;AACjE,wBAAgB,eAAe,IAAI;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAI3E;AAED,2CAA2C;AAC3C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAsBT;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C"}

package/dist/lib/credentials.js

@@ -4,43 +4,282 @@ import { getConfigDir } from "./fs.js";
 function credentialsPath() {
     return path.join(getConfigDir(), "credentials.json");
 }
-export function readCredentials() {
+export function credentialsFilePath() {
+    return credentialsPath();
+}
+function readRaw() {
     const file = credentialsPath();
     if (!fs.existsSync(file))
         return null;
     try {
-        const data = JSON.parse(fs.readFileSync(file, "utf8"));
-        if (!data.token || typeof data.token !== "string")
-            return null;
-        return {
-            token: data.token.trim(),
-            apiUrl: typeof data.apiUrl === "string" && data.apiUrl.trim()
-                ? data.apiUrl.trim()
-                : undefined,
-        };
+        return JSON.parse(fs.readFileSync(file, "utf8"));
     }
     catch {
         return null;
     }
 }
-export function writeCredentials(creds) {
+function isV2(data) {
+    if (!data || typeof data !== "object")
+        return false;
+    const d = data;
+    return d.version === 2 && d.tokens != null && typeof d.tokens === "object";
+}
+function isV1(data) {
+    if (!data || typeof data !== "object")
+        return false;
+    const d = data;
+    if (d.version === 2)
+        return false;
+    return typeof d.token === "string" && d.token.trim().length > 0;
+}
+export function readCredentialsV2() {
+    const raw = readRaw();
+    if (!isV2(raw))
+        return null;
+    const tokens = {};
+    for (const [id, entry] of Object.entries(raw.tokens)) {
+        if (!entry || typeof entry !== "object")
+            continue;
+        const e = entry;
+        if (!e.token || typeof e.token !== "string")
+            continue;
+        const scope = e.cliScope === "production" ? "production" : "development";
+        tokens[String(id)] = {
+            token: e.token.trim(),
+            apiUrl: typeof e.apiUrl === "string" && e.apiUrl.trim()
+                ? e.apiUrl.trim()
+                : undefined,
+            projectName: typeof e.projectName === "string" && e.projectName.trim()
+                ? e.projectName.trim()
+                : String(id),
+            cliScope: scope,
+            addedAt: typeof e.addedAt === "string" && e.addedAt
+                ? e.addedAt
+                : new Date().toISOString(),
+        };
+    }
+    return {
+        version: 2,
+        tokens,
+        default: raw.default != null ? raw.default : undefined,
+    };
+}
+/** Legacy v1 blob, if present and not yet migrated. */
+export function readCredentialsV1() {
+    const raw = readRaw();
+    if (!isV1(raw))
+        return null;
+    return {
+        token: raw.token.trim(),
+        apiUrl: typeof raw.apiUrl === "string" && raw.apiUrl.trim()
+            ? raw.apiUrl.trim()
+            : undefined,
+    };
+}
+export function writeCredentialsV2(creds) {
     const file = credentialsPath();
-    const payload = { token: creds.token.trim() };
-    if (creds.apiUrl?.trim())
-        payload.apiUrl = creds.apiUrl.trim();
+    const tokens = {};
+    for (const [id, entry] of Object.entries(creds.tokens)) {
+        tokens[String(id)] = {
+            token: entry.token.trim(),
+            projectName: entry.projectName,
+            cliScope: entry.cliScope,
+            addedAt: entry.addedAt,
+            ...(entry.apiUrl?.trim() ? { apiUrl: entry.apiUrl.trim() } : {}),
+        };
+    }
+    const payload = {
+        version: 2,
+        tokens,
+        ...(creds.default != null ? { default: creds.default } : {}),
+    };
     fs.writeFileSync(file, JSON.stringify(payload, null, 2) + "\n", {
         mode: 0o600,
     });
     return file;
 }
-export function clearCredentials() {
+export function upsertTokenEntry(projectId, entry, opts) {
+    const id = String(projectId);
+    const existing = readCredentialsV2() ?? { version: 2, tokens: {} };
+    existing.tokens[id] = {
+        token: entry.token.trim(),
+        projectName: entry.projectName,
+        cliScope: entry.cliScope,
+        addedAt: entry.addedAt ?? new Date().toISOString(),
+        ...(entry.apiUrl?.trim() ? { apiUrl: entry.apiUrl.trim() } : {}),
+    };
+    if (opts?.setDefault !== false) {
+        existing.default = id;
+    }
+    else if (existing.default == null) {
+        existing.default = id;
+    }
+    return writeCredentialsV2(existing);
+}
+export function removeTokenEntry(projectId) {
+    const store = readCredentialsV2();
+    if (!store)
+        return false;
+    const id = String(projectId);
+    if (!store.tokens[id])
+        return false;
+    delete store.tokens[id];
+    if (String(store.default) === id) {
+        const remaining = Object.keys(store.tokens);
+        store.default = remaining[0];
+    }
+    if (Object.keys(store.tokens).length === 0) {
+        return clearAllCredentials();
+    }
+    writeCredentialsV2(store);
+    return true;
+}
+export function clearAllCredentials() {
     const file = credentialsPath();
     if (!fs.existsSync(file))
         return false;
     fs.unlinkSync(file);
     return true;
 }
-export function credentialsFilePath() {
-    return credentialsPath();
+export function setDefaultProject(projectId) {
+    const store = readCredentialsV2();
+    if (!store)
+        return false;
+    const id = String(projectId);
+    if (!store.tokens[id])
+        return false;
+    store.default = id;
+    writeCredentialsV2(store);
+    return true;
+}
+export function findTokenByNameOrId(nameOrId) {
+    const store = readCredentialsV2();
+    if (!store)
+        return null;
+    const needle = nameOrId.trim().toLowerCase();
+    if (store.tokens[nameOrId.trim()]) {
+        return { projectId: nameOrId.trim(), entry: store.tokens[nameOrId.trim()] };
+    }
+    const matches = Object.entries(store.tokens).filter(([id, e]) => id === nameOrId.trim() ||
+        e.projectName.toLowerCase() === needle ||
+        e.projectName.toLowerCase().includes(needle));
+    if (matches.length === 1) {
+        return { projectId: matches[0][0], entry: matches[0][1] };
+    }
+    return null;
+}
+/**
+ * Selection: GETMYENV_TOKEN > linked projectId entry > default > single entry > v1.
+ */
+export function resolveStoredToken(linkedProjectId) {
+    const fromEnv = process.env.GETMYENV_TOKEN?.trim();
+    if (fromEnv) {
+        return { token: fromEnv, source: "env" };
+    }
+    const store = readCredentialsV2();
+    if (store) {
+        if (linkedProjectId != null) {
+            const id = String(linkedProjectId);
+            const entry = store.tokens[id];
+            if (entry) {
+                return {
+                    token: entry.token,
+                    apiUrl: entry.apiUrl,
+                    projectId: id,
+                    entry,
+                    source: "linked",
+                };
+            }
+        }
+        if (store.default != null) {
+            const id = String(store.default);
+            const entry = store.tokens[id];
+            if (entry) {
+                return {
+                    token: entry.token,
+                    apiUrl: entry.apiUrl,
+                    projectId: id,
+                    entry,
+                    source: "default",
+                };
+            }
+        }
+        const ids = Object.keys(store.tokens);
+        if (ids.length === 1) {
+            const id = ids[0];
+            const entry = store.tokens[id];
+            return {
+                token: entry.token,
+                apiUrl: entry.apiUrl,
+                projectId: id,
+                entry,
+                source: "single",
+            };
+        }
+        return null;
+    }
+    const v1 = readCredentialsV1();
+    if (v1) {
+        return { token: v1.token, apiUrl: v1.apiUrl, source: "v1" };
+    }
+    return null;
+}
+/**
+ * Migrate a v1 credentials file into v2 using whoami metadata.
+ * Returns the new store, or null if nothing to migrate / whoami failed.
+ */
+export function migrateV1ToV2(meta) {
+    const v1 = readCredentialsV1();
+    if (!v1)
+        return null;
+    const id = String(meta.projectId);
+    const store = {
+        version: 2,
+        tokens: {
+            [id]: {
+                token: v1.token,
+                apiUrl: meta.apiUrl ?? v1.apiUrl,
+                projectName: meta.projectName,
+                cliScope: meta.cliScope,
+                addedAt: new Date().toISOString(),
+            },
+        },
+        default: id,
+    };
+    writeCredentialsV2(store);
+    return store;
+}
+/** @deprecated Prefer resolveStoredToken / readCredentialsV2. */
+export function readCredentials() {
+    const resolved = resolveStoredToken();
+    if (!resolved)
+        return null;
+    return { token: resolved.token, apiUrl: resolved.apiUrl };
+}
+/** @deprecated Prefer upsertTokenEntry. */
+export function writeCredentials(creds) {
+    const existing = readCredentialsV2();
+    if (existing && Object.keys(existing.tokens).length > 0) {
+        const id = String(existing.default ?? Object.keys(existing.tokens)[0] ?? "unknown");
+        const prev = existing.tokens[id];
+        return upsertTokenEntry(id, {
+            token: creds.token,
+            apiUrl: creds.apiUrl ?? prev?.apiUrl,
+            projectName: prev?.projectName ?? id,
+            cliScope: prev?.cliScope ?? "development",
+        });
+    }
+    // Write a temporary v1-shaped file until whoami upgrades it.
+    const file = credentialsPath();
+    const payload = { token: creds.token.trim() };
+    if (creds.apiUrl?.trim())
+        payload.apiUrl = creds.apiUrl.trim();
+    fs.writeFileSync(file, JSON.stringify(payload, null, 2) + "\n", {
+        mode: 0o600,
+    });
+    return file;
+}
+export function clearCredentials() {
+    return clearAllCredentials();
 }
 //# sourceMappingURL=credentials.js.map

package/dist/lib/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAOvC,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACxB,MAAM,EACJ,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACnD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACpB,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAkB;IACjD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC9D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA0BvC,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;AAC7E,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,CAAC,GAAG,KAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACtD,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG;YACnB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;YACrB,MAAM,EACJ,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC7C,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACjB,CAAC,CAAC,SAAS;YACf,WAAW,EACT,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;gBACvD,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;gBACtB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAChB,QAAQ,EAAE,KAAK;YACf,OAAO,EACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO;gBACxC,CAAC,CAAC,CAAC,CAAC,OAAO;gBACX,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC/B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM;QACN,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;QACvB,MAAM,EACJ,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YACjD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YACnB,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;YACzB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAkB;QAC7B,OAAO,EAAE,CAAC;QACV,MAAM;QACN,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC9D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAA0B,EAC1B,KAAyD,EACzD,IAA+B;IAE/B,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QACzB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClD,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IACF,IAAI,IAAI,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;QAC/B,QAAQ,CAAC,OAAO,GAAG,EAAE,CAAC;IACxB,CAAC;SAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QACpC,QAAQ,CAAC,OAAO,GAAG,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAA0B;IACzD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IACD,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAA0B;IAC1D,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;IACnB,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgB;IAEhB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAE,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,EAAE,KAAK,QAAQ,CAAC,IAAI,EAAE;QACtB,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,MAAM;QACtC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,eAAwC;IAExC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO;oBACL,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,EAAE;oBACb,KAAK;oBACL,MAAM,EAAE,QAAQ;iBACjB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO;oBACL,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,EAAE;oBACb,KAAK;oBACL,MAAM,EAAE,SAAS;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;YACnB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAE,CAAC;YAChC,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,EAAE;gBACb,KAAK;gBACL,MAAM,EAAE,QAAQ;aACjB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC/B,IAAI,EAAE,EAAE,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAK7B;IACC,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,KAAK,GAAkB;QAC3B,OAAO,EAAE,CAAC;QACV,MAAM,EAAE;YACN,CAAC,EAAE,CAAC,EAAE;gBACJ,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM;gBAChC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAClC;SACF;QACD,OAAO,EAAE,EAAE;KACZ,CAAC;IACF,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe;IAC7B,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,gBAAgB,CAAC,KAGhC;IACC,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,MAAM,CACf,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CACjE,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,gBAAgB,CAAC,EAAE,EAAE;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM;YACpC,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE;YACpC,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,aAAa;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,6DAA6D;IAC7D,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC9D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,mBAAmB,EAAE,CAAC;AAC/B,CAAC"}

package/dist/lib/fs.d.ts

@@ -2,7 +2,8 @@ export type ProjectMeta = {
     projectId?: string;
     projectName?: string;
     apiUrl?: string;
-    protectionMode?: "simple" | "advanced";
+    /** Default -e when omitted (from token scope at link time). */
+    defaultEnv?: "development" | "production";
 };
 export type RequirementsMeta = {
     required: string[];
@@ -15,9 +16,15 @@ export declare function writeRequirements(required: string[], cwd?: string): voi
 export declare function readRequirements(cwd?: string): string[];
 /** OS user config for machine identity - never in the repo. */
 export declare function getConfigDir(): string;
+/**
+ * Read one line from a TTY without using raw mode.
+ * Safe to call after promptHidden.
+ */
+export declare function readLine(question: string): Promise<string>;
 /**
  * Read a secret from stdin (TTY-hidden, or piped via --vault-password-stdin).
  * Refuses to echo secrets on a non-TTY unless allowStdin is true.
+ * Always restores stdin so a later promptConfirm / promptChoice can run.
  */
 export declare function promptHidden(question: string, opts?: {
     allowStdin?: boolean;
@@ -27,6 +34,10 @@ export declare function promptConfirm(question: string, opts?: {
 }): Promise<boolean>;
 /** 1-based numbered choice. Empty input selects defaultIndex (0-based). */
 export declare function promptChoice(question: string, options: string[], defaultIndex?: number): Promise<number>;
+/** Throw with clear next steps when this folder has no linked project. */
+export declare function requireLinkedProject(meta: ProjectMeta | null): asserts meta is ProjectMeta & {
+    projectId: NonNullable<ProjectMeta["projectId"]>;
+};
 export declare function ensureGitignoreHasEnv(cwd?: string): void;
 /** First-class languages shown on landing / docs. */
 export type DetectedLanguage = "node" | "python" | "ruby" | "rust" | "go" | "php" | "java" | "dotnet";
@@ -51,6 +62,13 @@ export declare function isEnvSampleFile(filePath: string): boolean;
 export declare function listEnvFiles(cwd?: string): string[];
 /** First candidate from listEnvFiles, or null. */
 export declare function findEnvFile(cwd?: string): string | null;
+/** Basename contains "production" (e.g. .env.production, .env.production.local). */
+export declare function isProductionEnvFilename(filePath: string): boolean;
+/**
+ * Env files safe to push: every .env* candidate except production-named files.
+ * Production values belong in the dashboard, not in the repo.
+ */
+export declare function listPushEnvFiles(cwd?: string): string[];
 /** Infer CLI -e name from an env file basename. */
 export declare function inferEnvNameFromFile(filePath: string): string;
 //# sourceMappingURL=fs.d.ts.map

package/dist/lib/fs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/lib/fs.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,wBAAgB,cAAc,CAAC,GAAG,SAAgB,GAAG,MAAM,CAE1D;AAED,wBAAgB,YAAY,CAAC,GAAG,SAAgB,GAAG,MAAM,CAExD;AAED,wBAAgB,eAAe,CAAC,GAAG,SAAgB,GAAG,WAAW,GAAG,IAAI,CAIvE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,SAAgB,GAAG,IAAI,CAQ7E;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAAE,EAClB,GAAG,SAAgB,GAClB,IAAI,CASN;AAED,wBAAgB,gBAAgB,CAAC,GAAG,SAAgB,GAAG,MAAM,EAAE,CAK9D;AAED,+DAA+D;AAC/D,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,MAAM,CAAC,CA2CjB;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EAAE,EACjB,YAAY,SAAI,GACf,OAAO,CAAC,MAAM,CAAC,CA6BjB;AAED,wBAAgB,qBAAqB,CAAC,GAAG,SAAgB,GAAG,IAAI,CAc/D;AAED,qDAAqD;AACrD,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,QAAQ,GACR,MAAM,GACN,MAAM,GACN,IAAI,GACJ,KAAK,GACL,MAAM,GACN,QAAQ,CAAC;AAuGb,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,GAAG,SAAgB,GAAG,KAAK,CAAC;IAC1D,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAmBD;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,gBAAgB,GAAG,IAAI,EACjC,IAAI,EAAE,MAAM,GACX,MAAM,CAoBR;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,SAAgB,GAAG,MAAM,EAAE,CAwD5D;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBrE;AAsCD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOzD;AAsBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,SAAgB,GAAG,MAAM,EAAE,CA6B1D;AAED,kDAAkD;AAClD,wBAAgB,WAAW,CAAC,GAAG,SAAgB,GAAG,MAAM,GAAG,IAAI,CAE9D;AAED,mDAAmD;AACnD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK7D"}
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/lib/fs.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,wBAAgB,cAAc,CAAC,GAAG,SAAgB,GAAG,MAAM,CAE1D;AAED,wBAAgB,YAAY,CAAC,GAAG,SAAgB,GAAG,MAAM,CAExD;AAED,wBAAgB,eAAe,CAAC,GAAG,SAAgB,GAAG,WAAW,GAAG,IAAI,CAIvE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,SAAgB,GAAG,IAAI,CAQ7E;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAAE,EAClB,GAAG,SAAgB,GAClB,IAAI,CASN;AAED,wBAAgB,gBAAgB,CAAC,GAAG,SAAgB,GAAG,MAAM,EAAE,CAK9D;AAED,+DAA+D;AAC/D,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAcD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB1D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,MAAM,CAAC,CAuCjB;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,2EAA2E;AAC3E,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EAAE,EACjB,YAAY,SAAI,GACf,OAAO,CAAC,MAAM,CAAC,CAejB;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,GAAG,IAAI,GACvB,OAAO,CAAC,IAAI,IAAI,WAAW,GAAG;IAAE,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAA;CAAE,CAUpF;AAED,wBAAgB,qBAAqB,CAAC,GAAG,SAAgB,GAAG,IAAI,CAc/D;AAED,qDAAqD;AACrD,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,QAAQ,GACR,MAAM,GACN,MAAM,GACN,IAAI,GACJ,KAAK,GACL,MAAM,GACN,QAAQ,CAAC;AAuGb,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,GAAG,SAAgB,GAAG,KAAK,CAAC;IAC1D,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAmBD;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,gBAAgB,GAAG,IAAI,EACjC,IAAI,EAAE,MAAM,GACX,MAAM,CAoBR;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,SAAgB,GAAG,MAAM,EAAE,CAwD5D;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBrE;AAsCD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOzD;AAsBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,SAAgB,GAAG,MAAM,EAAE,CA6B1D;AAED,kDAAkD;AAClD,wBAAgB,WAAW,CAAC,GAAG,SAAgB,GAAG,MAAM,GAAG,IAAI,CAE9D;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,SAAgB,GAAG,MAAM,EAAE,CAE9D;AAED,mDAAmD;AACnD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK7D"}