getmyenv 0.5.3 → 0.6.0

package/dist/commands/start.js

@@ -0,0 +1,118 @@
+import fs from "node:fs";
+import path from "node:path";
+import pc from "picocolors";
+import { DEFAULT_CONTEXT_SLUG } from "@getmyenv/shared";
+import { promptChoice, promptConfirm, readClaimFile, readLine, readProjectMeta, rootEnvFiles, writeProjectMeta, } from "../lib/fs.js";
+import { ApiClient, getSessionToken, resolveApiUrl } from "../lib/api.js";
+import { authorizeFolder } from "../lib/authorize.js";
+import { NOT_LINKED_STEPS } from "../lib/bootstrap.js";
+import { createGuestProject, folderNameHint } from "./guest.js";
+import { statusCommand } from "./status.js";
+/** Best guess at the app's start command, for the printed `run` line. */
+export function suggestedStartCommand(cwd = process.cwd()) {
+    const pkgFile = path.join(cwd, "package.json");
+    if (fs.existsSync(pkgFile)) {
+        try {
+            const pkg = JSON.parse(fs.readFileSync(pkgFile, "utf8"));
+            if (pkg.scripts?.dev)
+                return "npm run dev";
+            if (pkg.scripts?.start)
+                return "npm start";
+        }
+        catch {
+            /* ignore */
+        }
+        return "node index.js";
+    }
+    if (fs.existsSync(path.join(cwd, "manage.py")))
+        return "python manage.py runserver";
+    if (fs.existsSync(path.join(cwd, "go.mod")))
+        return "go run .";
+    if (fs.existsSync(path.join(cwd, "Cargo.toml")))
+        return "cargo run";
+    return "<your start command>";
+}
+export function runLine(context, cwd = process.cwd()) {
+    const ctx = context && context !== DEFAULT_CONTEXT_SLUG ? ` ${context}` : "";
+    return `npx getmyenv run${ctx} -- ${suggestedStartCommand(cwd)}`;
+}
+async function nameFirstContext(apiUrl) {
+    const answer = (await readLine(`Name your first context ${pc.dim("[Development]")}: `)).trim();
+    if (!answer || answer.toLowerCase() === "development")
+        return DEFAULT_CONTEXT_SLUG;
+    const token = getSessionToken();
+    const created = await new ApiClient(apiUrl, token).request("POST", "/api/cli/contexts", { name: answer });
+    console.error(`${pc.green("✓")} Context ${pc.bold(created.name)} (${created.slug})`);
+    return created.slug;
+}
+/** A project that already has keys or its own contexts is set up. Do not ask for a first context. */
+function isFreshProject(who) {
+    if (who.keys.length > 0)
+        return false;
+    return who.contexts.every((c) => c.slug === DEFAULT_CONTEXT_SLUG || c.protection === "locked");
+}
+function defaultContextFor(who) {
+    const open = who.contexts.filter((c) => c.protection === "open");
+    return (open.find((c) => c.slug === DEFAULT_CONTEXT_SLUG) ?? open[0])?.slug ?? DEFAULT_CONTEXT_SLUG;
+}
+/**
+ * Guided setup for an unlinked folder, in a terminal.
+ * Start without an account, or sign in. Then offer to import a detected .env.
+ */
+export async function startSetup(opts) {
+    console.error(pc.bold("\ngetmyenv"));
+    console.error(pc.dim("Keep using environment variables. Stop managing them as files.\n"));
+    const apiUrl = resolveApiUrl(opts.apiUrl);
+    const existing = readProjectMeta();
+    if (readClaimFile()) {
+        throw new Error("This folder has a guest project (claim.json) but no token on this machine. Claim it: npx getmyenv claim");
+    }
+    if (existing?.projectId) {
+        console.error(`This folder uses ${pc.bold(existing.projectName ?? existing.projectId)}. Sign in to get a token.\n`);
+        await authorizeFolder({ apiUrl });
+        return;
+    }
+    const choice = await promptChoice("How do you want to start?", ["Start without an account (guest project, claim within 60 days)", "Sign in"], 0);
+    console.error("");
+    let context = DEFAULT_CONTEXT_SLUG;
+    if (choice === 0) {
+        const name = (await readLine(`Project name ${pc.dim(`[${folderNameHint()}]`)}: `)).trim() ||
+            folderNameHint();
+        await createGuestProject({ name, apiUrl });
+    }
+    else {
+        const who = await authorizeFolder({ apiUrl });
+        context = isFreshProject(who) ? await nameFirstContext(apiUrl) : defaultContextFor(who);
+        const meta = readProjectMeta();
+        if (meta)
+            writeProjectMeta({ ...meta, context });
+    }
+    const files = rootEnvFiles();
+    if (files.length > 0) {
+        const rel = files.map((f) => path.basename(f)).join(", ");
+        const ok = await promptConfirm(`Import ${rel}? Values are encrypted before upload.`, {
+            defaultYes: true,
+        });
+        if (ok) {
+            const { importCommand } = await import("./import.js");
+            await importCommand(undefined, { apiUrl, yes: true });
+        }
+    }
+    if (!opts.thenContinue) {
+        console.error("Start your app with:\n");
+        console.error(pc.cyan(`  ${runLine(context)}\n`));
+    }
+}
+/** Bare `getmyenv`: setup when unlinked (terminal only), status when linked. */
+export async function startCommand(opts) {
+    if (getSessionToken()) {
+        await statusCommand(opts);
+        return;
+    }
+    if (!process.stdin.isTTY) {
+        console.log(NOT_LINKED_STEPS);
+        return;
+    }
+    await startSetup({ apiUrl: opts.apiUrl });
+}
+//# sourceMappingURL=start.js.map

package/dist/commands/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,aAAa,EACb,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAEtD,CAAC;YACF,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG;gBAAE,OAAO,aAAa,CAAC;YAC3C,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK;gBAAE,OAAO,WAAW,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,4BAA4B,CAAC;IACpF,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IACpE,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAsB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACjE,MAAM,GAAG,GAAG,OAAO,IAAI,OAAO,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,OAAO,mBAAmB,GAAG,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAc;IAC5C,MAAM,MAAM,GAAG,CACb,MAAM,QAAQ,CAAC,2BAA2B,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CACvE,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa;QAAE,OAAO,oBAAoB,CAAC;IACnF,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,OAAO,CACxD,MAAM,EACN,mBAAmB,EACnB,EAAE,IAAI,EAAE,MAAM,EAAE,CACjB,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,qGAAqG;AACrG,SAAS,cAAc,CAAC,GAAmB;IACzC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAmB;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,oBAAoB,CAAC;AACtG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAiD;IAChF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAE1F,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,IAAI,aAAa,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACpH,MAAM,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,2BAA2B,EAC3B,CAAC,gEAAgE,EAAE,SAAS,CAAC,EAC7E,CAAC,CACF,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,IAAI,OAAO,GAAW,oBAAoB,CAAC;IAC3C,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,IAAI,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YAC5E,cAAc,EAAE,CAAC;QACnB,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;QAC/B,IAAI,IAAI;YAAE,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,UAAU,GAAG,uCAAuC,EAAE;YACnF,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACtD,MAAM,aAAa,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,IAAI,eAAe,EAAE,EAAE,CAAC;QACtB,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/commands/status.d.ts

@@ -0,0 +1,5 @@
+/** Project, token, contexts with value counts, and the run command. Names only. */
+export declare function statusCommand(opts?: {
+    apiUrl?: string;
+}): Promise<void>;
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAYA,mFAAmF;AACnF,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BjF"}

package/dist/commands/status.js

@@ -0,0 +1,40 @@
+import pc from "picocolors";
+import { isDefaultApiUrl } from "../lib/api.js";
+import { ensureTokenAndLink } from "../lib/bootstrap.js";
+import { defaultContextSlug } from "../lib/context.js";
+import { runLine } from "./start.js";
+const TOKEN_KIND = {
+    folder: "folder (open contexts, read and write)",
+    guest: "guest (Development, read and write)",
+    server: "server (one locked context, read-only)",
+};
+/** Project, token, contexts with value counts, and the run command. Names only. */
+export async function statusCommand(opts = {}) {
+    const { who, apiUrl, meta } = await ensureTokenAndLink({ apiUrl: opts.apiUrl });
+    const current = defaultContextSlug(who, meta);
+    console.log(`${pc.bold(who.project.name)}${who.user ? pc.dim(`  ${who.user.email}`) : ""}`);
+    console.log(pc.dim(`Token: ${TOKEN_KIND[who.token.kind] ?? who.token.kind}`));
+    if (process.env.GETMYENV_TOKEN?.trim())
+        console.log(pc.dim("Source: GETMYENV_TOKEN"));
+    if (!isDefaultApiUrl(apiUrl))
+        console.log(pc.dim(`API: ${apiUrl}`));
+    console.log("");
+    const total = who.keys.length;
+    const width = Math.max(...who.contexts.map((c) => c.slug.length), 4);
+    console.log(`Contexts (${total} variable${total === 1 ? "" : "s"}):`);
+    for (const c of who.contexts) {
+        const set = who.keys.filter((k) => {
+            const s = k.status[c.slug];
+            return s === "set" || s === "expiring_soon";
+        }).length;
+        const marker = c.slug === current ? pc.green("*") : " ";
+        const lock = c.protection === "locked" ? pc.yellow(" locked") : "";
+        const name = c.name.toLowerCase() === c.slug ? "" : pc.dim(`  ${c.name}`);
+        console.log(`  ${marker} ${c.slug.padEnd(width)}  ${set}/${total} set${lock}${name}`);
+    }
+    console.log("");
+    console.log("Run your app:");
+    console.log(pc.cyan(`  ${runLine(current)}`));
+    console.log("");
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,wCAAwC;IAChD,KAAK,EAAE,qCAAqC;IAC5C,MAAM,EAAE,wCAAwC;CACjD,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA4B,EAAE;IAChE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAE9C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,eAAe,CAAC;QAC9C,CAAC,CAAC,CAAC,MAAM,CAAC;QACV,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,OAAO,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/unlink.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Unlink this folder: revoke its token and remove local getmyenv files.
+ * The project, its contexts and values stay.
+ */
+export declare function unlinkCommand(opts: {
+    apiUrl?: string;
+    yes?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=unlink.d.ts.map

package/dist/commands/unlink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unlink.d.ts","sourceRoot":"","sources":["../../src/commands/unlink.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4D3F"}

package/dist/commands/unlink.js

@@ -0,0 +1,70 @@
+import fs from "node:fs";
+import path from "node:path";
+import pc from "picocolors";
+import { getGetenvDir, promptConfirm, readClaimFile, readProjectMeta } from "../lib/fs.js";
+import { clearFolderToken, readFolderToken } from "../lib/credentials.js";
+import { clearCachedKey } from "../lib/pek.js";
+import { clearCachedPek, keychainAccount } from "../lib/keychain.js";
+import { ApiClient, ApiError, resolveApiUrl } from "../lib/api.js";
+/**
+ * Unlink this folder: revoke its token and remove local getmyenv files.
+ * The project, its contexts and values stay.
+ */
+export async function unlinkCommand(opts) {
+    const meta = readProjectMeta();
+    const folder = readFolderToken();
+    const projectFile = path.join(getGetenvDir(), "project.json");
+    if (!folder && !meta?.projectId && !fs.existsSync(projectFile)) {
+        console.log(pc.dim("This folder is not linked."));
+        return;
+    }
+    if (!opts.yes && !process.stdin.isTTY) {
+        throw new Error("Unlink revokes this folder's token. Without a terminal, pass --yes.");
+    }
+    if (!opts.yes) {
+        const label = meta?.projectName ?? meta?.projectId ?? "this folder";
+        const ok = await promptConfirm(`Unlink ${label}? Revokes this folder's token and removes .getmyenv files. The project and its values stay.`, { defaultYes: false });
+        if (!ok) {
+            console.log(pc.dim("Kept."));
+            return;
+        }
+    }
+    if (folder) {
+        try {
+            await new ApiClient(resolveApiUrl(opts.apiUrl), folder.token).request("DELETE", "/api/cli/token");
+            console.log(`${pc.green("✓")} Token revoked`);
+        }
+        catch (err) {
+            // 401/404: the token is already gone on the server. Anything else keeps
+            // token.json, so a still-valid token is never left without a local copy.
+            if (!(err instanceof ApiError && (err.status === 401 || err.status === 404))) {
+                throw new Error("Could not revoke the token on the server. Nothing was removed. Try again, or revoke it on the CLI page first.");
+            }
+            console.log(pc.dim("Token was already revoked."));
+        }
+    }
+    const projectId = meta?.projectId ?? folder?.projectId;
+    if (projectId && (await clearCachedPek(keychainAccount(resolveApiUrl(opts.apiUrl), projectId)))) {
+        console.log(`${pc.green("✓")} Removed the unlocked key from the OS keychain`);
+    }
+    if (clearFolderToken())
+        console.log(`${pc.green("✓")} Removed token.json`);
+    if (clearCachedKey())
+        console.log(`${pc.green("✓")} Removed key.json`);
+    if (fs.existsSync(projectFile)) {
+        fs.unlinkSync(projectFile);
+        console.log(`${pc.green("✓")} Removed project.json`);
+    }
+    if (readClaimFile()) {
+        console.log(pc.yellow("Kept claim.json. It is the only way to claim this guest project. Delete it if you do not need the project."));
+    }
+    try {
+        const dir = getGetenvDir();
+        if (fs.readdirSync(dir).length === 0)
+            fs.rmdirSync(dir);
+    }
+    catch {
+        /* ignore */
+    }
+}
+//# sourceMappingURL=unlink.js.map

package/dist/commands/unlink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unlink.js","sourceRoot":"","sources":["../../src/commands/unlink.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAwC;IAC1E,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,SAAS,IAAI,aAAa,CAAC;QACpE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5B,UAAU,KAAK,6FAA6F,EAC5G,EAAE,UAAU,EAAE,KAAK,EAAE,CACtB,CAAC;QACF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,IAAI,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAClG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,yEAAyE;YACzE,IAAI,CAAC,CAAC,GAAG,YAAY,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,MAAM,EAAE,SAAS,CAAC;IACvD,IAAI,SAAS,IAAI,CAAC,MAAM,cAAc,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,gBAAgB,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC3E,IAAI,cAAc,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,aAAa,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,MAAM,CAAC,4GAA4G,CAAC,CACxH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC"}

package/dist/lib/api-url.d.ts

@@ -5,4 +5,16 @@ export declare function normalizeApiBase(url: string): string;
 export declare function isDefaultApiUrl(url: string | undefined | null): boolean;
 /** Persist only when different from production. */
 export declare function apiUrlForDisk(url: string | undefined | null): string | undefined;
+export declare function isLocalHost(hostname: string): boolean;
+/** https anywhere, http only for localhost. Returns the parsed URL or null. */
+export declare function parseSafeUrl(raw: string): URL | null;
+/**
+ * Pick the API base: --api-url, then GETMYENV_API_URL, then the gitignored
+ * token.json, then production. project.json is committed, so it is never read.
+ */
+export declare function pickApiUrl(sources: {
+    override?: string;
+    env?: string;
+    tokenFile?: string;
+}): string;
 //# sourceMappingURL=api-url.d.ts.map

package/dist/lib/api-url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-url.d.ts","sourceRoot":"","sources":["../../src/lib/api-url.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,eAAO,MAAM,cAAc,yBAAyB,CAAC;AAErD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAGvE;AAED,mDAAmD;AACnD,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,MAAM,GAAG,SAAS,CAGpB"}
+{"version":3,"file":"api-url.d.ts","sourceRoot":"","sources":["../../src/lib/api-url.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,eAAO,MAAM,cAAc,yBAAyB,CAAC;AAErD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAGvE;AAED,mDAAmD;AACnD,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,MAAM,GAAG,SAAS,CAGpB;AAID,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI,CAWpD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAOT"}

package/dist/lib/api-url.js

@@ -15,4 +15,36 @@ export function apiUrlForDisk(url) {
         return undefined;
     return normalizeApiBase(url);
 }
+const LOCAL_HOSTS = new Set(["localhost", "127.0.0.1", "[::1]"]);
+export function isLocalHost(hostname) {
+    return LOCAL_HOSTS.has(hostname.toLowerCase());
+}
+/** https anywhere, http only for localhost. Returns the parsed URL or null. */
+export function parseSafeUrl(raw) {
+    let url;
+    try {
+        url = new URL(raw.trim());
+    }
+    catch {
+        return null;
+    }
+    if (url.username || url.password)
+        return null;
+    if (url.protocol === "https:")
+        return url;
+    if (url.protocol === "http:" && isLocalHost(url.hostname))
+        return url;
+    return null;
+}
+/**
+ * Pick the API base: --api-url, then GETMYENV_API_URL, then the gitignored
+ * token.json, then production. project.json is committed, so it is never read.
+ */
+export function pickApiUrl(sources) {
+    const raw = sources.override?.trim() || sources.env?.trim() || sources.tokenFile?.trim() || PRODUCTION_API;
+    if (!parseSafeUrl(raw)) {
+        throw new Error(`Refusing API URL ${raw}. Use https, or http://localhost for local development.`);
+    }
+    return normalizeApiBase(raw);
+}
 //# sourceMappingURL=api-url.js.map

package/dist/lib/api-url.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-url.js","sourceRoot":"","sources":["../../src/lib/api-url.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAErD,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,GAA8B;IAC5D,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC;AAClD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,aAAa,CAC3B,GAA8B;IAE9B,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"api-url.js","sourceRoot":"","sources":["../../src/lib/api-url.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAErD,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,GAA8B;IAC5D,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC;AAClD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,aAAa,CAC3B,GAA8B;IAE9B,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC1C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAI1B;IACC,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC;IACjG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,yDAAyD,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/lib/api.d.ts

@@ -1,26 +1,46 @@
 /**
- * CLI API client. Never logs response bodies that may contain ciphertext details
- * beyond what is needed; never prints secret plaintext.
+ * CLI API client. Never prints plaintext values.
  */
-import { type CliScope } from "./credentials.js";
 /** Keep in sync with packages/cli/package.json version. */
-export declare const CLI_VERSION = "0.5.3";
-export { PRODUCTION_API, isDefaultApiUrl, apiUrlForDisk, normalizeApiBase } from "./api-url.js";
+export declare const CLI_VERSION = "0.6.0";
+export { PRODUCTION_API, isDefaultApiUrl, apiUrlForDisk, normalizeApiBase, parseSafeUrl, } from "./api-url.js";
+export type Protection = "open" | "locked";
+export type ValueStatus = "set" | "expiring_soon" | "expired" | "missing";
+export type ContextInfo = {
+    id: number;
+    slug: string;
+    name: string;
+    protection: Protection;
+};
 export type WhoamiResponse = {
-    projectId: string;
-    projectName: string;
-    cliScope: CliScope;
-    label: string | null;
-    allowedCidrs?: string[];
-    isGuest?: boolean;
-    guestExpiresAt?: string | null;
+    project: {
+        id: string;
+        name: string;
+        hasKey: boolean;
+    };
+    token: {
+        kind: "folder" | "guest" | "server";
+        label: string | null;
+        /** Server tokens: the one locked context they read. */
+        context: string | null;
+        allowedCidrs: string[];
+    };
+    user: {
+        email: string;
+    } | null;
+    isGuest: boolean;
+    guestExpiresAt: string | null;
+    contexts: ContextInfo[];
+    keys: Array<{
+        name: string;
+        status: Record<string, ValueStatus>;
+    }>;
 };
 export declare class ApiError extends Error {
     status: number;
     constructor(message: string, status: number);
 }
-/** Resolve API base: CLI override → env var → folder token/meta → production. */
-export declare function resolveApiUrl(cliOverride?: string, _hint?: unknown): string;
+export declare function resolveApiUrl(cliOverride?: string): string;
 export declare class ApiClient {
     private baseUrl;
     private token?;
@@ -28,14 +48,6 @@ export declare class ApiClient {
     private headers;
     request<T>(method: string, path: string, body?: unknown, extraHeaders?: Record<string, string>): Promise<T>;
 }
-/** Env / folder token only (no prompt). Prefer ensureSessionToken for interactive commands. */
+/** Env / folder token only, no prompt. */
 export declare function getSessionToken(): string | undefined;
-/** True when the folder is already authorized (env or .getmyenv/token.json). */
-export declare function hasSessionToken(): boolean;
-/**
- * Env → folder token. When missing, TTY runs the browser auth flow
- * and writes `.getmyenv/token.json`. Non-TTY throws (use GETMYENV_TOKEN).
- */
-export declare function ensureSessionToken(_hint?: unknown): Promise<string>;
-export { readFolderToken, writeFolderToken, tokenFilePath, } from "./credentials.js";
 //# sourceMappingURL=api.d.ts.map

package/dist/lib/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAGL,KAAK,QAAQ,EAEd,MAAM,kBAAkB,CAAC;AAG1B,2DAA2D;AAC3D,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhG,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,qBAAa,QAAS,SAAQ,KAAK;IACjC,MAAM,EAAE,MAAM,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAU3E;AAED,qBAAa,SAAS;IAElB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,KAAK,CAAC;gBADN,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,YAAA;IAGxB,OAAO,CAAC,OAAO;IAWT,OAAO,CAAC,CAAC,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,OAAO,CAAC,CAAC,CAAC;CAmBd;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,IAAI,MAAM,GAAG,SAAS,CAIpD;AAED,gFAAgF;AAChF,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,CAAC,EAAE,OAAO,GACd,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,2DAA2D;AAC3D,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAC3C,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IACvD,KAAK,EAAE;QACL,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;QACpC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,uDAAuD;QACvD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,IAAI,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;KAAE,CAAC,CAAC;CACpE,CAAC;AAEF,qBAAa,QAAS,SAAQ,KAAK;IACjC,MAAM,EAAE,MAAM,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,wBAAgB,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED,qBAAa,SAAS;IAElB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,KAAK,CAAC;gBADN,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,YAAA;IAGxB,OAAO,CAAC,OAAO;IAWT,OAAO,CAAC,CAAC,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,OAAO,CAAC,CAAC,CAAC;CAwBd;AAED,0CAA0C;AAC1C,wBAAgB,eAAe,IAAI,MAAM,GAAG,SAAS,CAIpD"}

package/dist/lib/api.js

@@ -1,14 +1,11 @@
 /**
- * CLI API client. Never logs response bodies that may contain ciphertext details
- * beyond what is needed; never prints secret plaintext.
+ * CLI API client. Never prints plaintext values.
  */
-import pc from "picocolors";
-import { readProjectMeta } from "./fs.js";
-import { readFolderToken, } from "./credentials.js";
-import { PRODUCTION_API } from "./api-url.js";
+import { readFolderToken } from "./credentials.js";
+import { pickApiUrl } from "./api-url.js";
 /** Keep in sync with packages/cli/package.json version. */
-export const CLI_VERSION = "0.5.3";
-export { PRODUCTION_API, isDefaultApiUrl, apiUrlForDisk, normalizeApiBase } from "./api-url.js";
+export const CLI_VERSION = "0.6.0";
+export { PRODUCTION_API, isDefaultApiUrl, apiUrlForDisk, normalizeApiBase, parseSafeUrl, } from "./api-url.js";
 export class ApiError extends Error {
     status;
     constructor(message, status) {
@@ -17,20 +14,12 @@ export class ApiError extends Error {
         this.status = status;
     }
 }
-/** Resolve API base: CLI override → env var → folder token/meta → production. */
-export function resolveApiUrl(cliOverride, _hint) {
-    if (cliOverride?.trim())
-        return cliOverride.trim();
-    if (process.env.GETMYENV_API_URL?.trim()) {
-        return process.env.GETMYENV_API_URL.trim();
-    }
-    const token = readFolderToken();
-    if (token?.apiUrl)
-        return token.apiUrl;
-    const meta = readProjectMeta();
-    if (meta?.apiUrl)
-        return meta.apiUrl;
-    return PRODUCTION_API;
+export function resolveApiUrl(cliOverride) {
+    return pickApiUrl({
+        override: cliOverride,
+        env: process.env.GETMYENV_API_URL,
+        tokenFile: readFolderToken()?.apiUrl,
+    });
 }
 export class ApiClient {
     baseUrl;
@@ -51,11 +40,17 @@ export class ApiClient {
         return h;
     }
     async request(method, path, body, extraHeaders) {
-        const res = await fetch(`${this.baseUrl.replace(/\/$/, "")}${path}`, {
-            method,
-            headers: this.headers(extraHeaders),
-            body: body === undefined ? undefined : JSON.stringify(body),
-        });
+        let res;
+        try {
+            res = await fetch(`${this.baseUrl.replace(/\/$/, "")}${path}`, {
+                method,
+                headers: this.headers(extraHeaders),
+                body: body === undefined ? undefined : JSON.stringify(body),
+            });
+        }
+        catch {
+            throw new ApiError(`Could not reach ${this.baseUrl}`, 0);
+        }
         if (!res.ok) {
             let message = `HTTP ${res.status}`;
             try {
@@ -73,42 +68,11 @@ export class ApiClient {
         return (await res.json());
     }
 }
-/** Env / folder token only (no prompt). Prefer ensureSessionToken for interactive commands. */
+/** Env / folder token only, no prompt. */
 export function getSessionToken() {
     const env = process.env.GETMYENV_TOKEN?.trim();
     if (env)
         return env;
     return readFolderToken()?.token;
 }
-/** True when the folder is already authorized (env or .getmyenv/token.json). */
-export function hasSessionToken() {
-    return !!getSessionToken();
-}
-/**
- * Env → folder token. When missing, TTY runs the browser auth flow
- * and writes `.getmyenv/token.json`. Non-TTY throws (use GETMYENV_TOKEN).
- */
-export async function ensureSessionToken(_hint) {
-    const env = process.env.GETMYENV_TOKEN?.trim();
-    if (env)
-        return env;
-    const existing = readFolderToken();
-    if (existing)
-        return existing.token;
-    if (!process.stdin.isTTY) {
-        throw new Error("No CLI token in this folder. Set GETMYENV_TOKEN for CI, or run in a TTY.");
-    }
-    // Lazy import to avoid a cycle (authorize ↔ api).
-    const { authorizeFolder } = await import("./authorize.js");
-    await authorizeFolder();
-    const after = readFolderToken();
-    if (!after) {
-        throw new Error("Authorization did not complete. Re-run this command, or set GETMYENV_TOKEN for CI.");
-    }
-    return after.token;
-}
-export { readFolderToken, writeFolderToken, tokenFilePath, } from "./credentials.js";
-// picocolors is referenced by callers; re-export nothing here.
-void pc;
-void {};
 //# sourceMappingURL=api.js.map

package/dist/lib/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EACL,eAAe,GAIhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAYhG,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,MAAM,CAAS;IACf,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,WAAoB,EAAE,KAAe;IACjE,IAAI,WAAW,EAAE,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IACvC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,IAAI,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACrC,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,OAAO,SAAS;IAEV;IACA;IAFV,YACU,OAAe,EACf,KAAc;QADd,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAS;IACrB,CAAC;IAEI,OAAO,CAAC,KAA8B;QAC5C,MAAM,CAAC,GAA2B;YAChC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;YAC1B,wBAAwB,EAAE,WAAW;YACrC,GAAG,KAAK;SACT,CAAC;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,CAAC,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,IAAc,EACd,YAAqC;QAErC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;YACnE,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YACnC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;gBACtD,IAAI,IAAI,CAAC,KAAK;oBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,OAAO,eAAe,EAAE,EAAE,KAAK,CAAC;AAClC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAe;IAEf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IAEpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,eAAe,EAAE,CAAC;IAExB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC;AAED,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,+DAA+D;AAC/D,KAAK,EAAE,CAAC;AACR,KAAM,EAAkB,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,OAAO,EACL,cAAc,EACd,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,MAAM,cAAc,CAAC;AA4BtB,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,MAAM,CAAS;IACf,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,WAAoB;IAChD,OAAO,UAAU,CAAC;QAChB,QAAQ,EAAE,WAAW;QACrB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QACjC,SAAS,EAAE,eAAe,EAAE,EAAE,MAAM;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,SAAS;IAEV;IACA;IAFV,YACU,OAAe,EACf,KAAc;QADd,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAS;IACrB,CAAC;IAEI,OAAO,CAAC,KAA8B;QAC5C,MAAM,CAAC,GAA2B;YAChC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;YAC1B,wBAAwB,EAAE,WAAW;YACrC,GAAG,KAAK;SACT,CAAC;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,CAAC,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,IAAc,EACd,YAAqC;QAErC,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;gBAC7D,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;gBACnC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,mBAAmB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;gBACtD,IAAI,IAAI,CAAC,KAAK;oBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;CACF;AAED,0CAA0C;AAC1C,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,OAAO,eAAe,EAAE,EAAE,KAAK,CAAC;AAClC,CAAC"}

package/dist/lib/authorize.d.ts

@@ -1,9 +1,16 @@
-export type AuthorizeOpts = {
-    apiUrl?: string;
-};
+import { type WhoamiResponse } from "./api.js";
+/** Command + argv to open a URL. No shell, so the URL is never parsed as a command. */
+export declare function browserCommand(raw: string, platform?: NodeJS.Platform): {
+    cmd: string;
+    args: string[];
+} | null;
+export declare function openBrowser(url: string): void;
+export declare function sleep(ms: number): Promise<void>;
 /**
- * Authorize this folder via browser (writes token.json + project.json).
- * Used by bootstrap when no folder token exists. CI uses GETMYENV_TOKEN.
+ * Sign in via the browser and link this folder (writes token.json + project.json).
+ * CI uses GETMYENV_TOKEN instead.
  */
-export declare function authorizeFolder(opts?: AuthorizeOpts): Promise<void>;
+export declare function authorizeFolder(opts?: {
+    apiUrl?: string;
+}): Promise<WhoamiResponse>;
 //# sourceMappingURL=authorize.d.ts.map

package/dist/lib/authorize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/lib/authorize.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAuIF;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB7E"}
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/lib/authorize.ts"],"names":[],"mappings":"AASA,OAAO,EAA0C,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAEvF,uFAAuF;AACvF,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CASxC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc7C;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AA6GD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,OAAO,CAAC,cAAc,CAAC,CAOzB"}