timeback 0.2.2-beta.20260401002024 → 0.2.2-beta.20260402000431

package/dist/cli.js

@@ -26823,7 +26823,7 @@ function date4(params) {
 
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
-// ../clients/core/dist/chunk-jqy7m30q.js
+// ../clients/core/dist/chunk-bq65zn6q.js
 var log3 = createScopedLogger("edubridge");
 function normalizeBoolean(value) {
   if (typeof value === "boolean")
@@ -26995,6 +26995,13 @@ var StringTimebackGrade = exports_external.string().transform((value, ctx) => {
     return exports_external.NEVER;
   }
   const stripped = raw.replace(/\bgrade\b/g, "").replace(/(\d+)(st|nd|rd|th)\b/g, "$1").trim();
+  if (stripped === "") {
+    ctx.addIssue({
+      code: "custom",
+      message: "must be a valid Timeback grade"
+    });
+    return exports_external.NEVER;
+  }
   if (stripped === "pre-k" || stripped === "pk") {
     return -1;
   }
@@ -33251,6 +33258,13 @@ var StringTimebackGrade2 = exports_external.string().transform((value, ctx) => {
     return exports_external.NEVER;
   }
   const stripped = raw.replace(/\bgrade\b/g, "").replace(/(\d+)(st|nd|rd|th)\b/g, "$1").trim();
+  if (stripped === "") {
+    ctx.addIssue({
+      code: "custom",
+      message: "must be a valid Timeback grade"
+    });
+    return exports_external.NEVER;
+  }
   if (stripped === "pre-k" || stripped === "pk") {
     return -1;
   }
@@ -35111,8 +35125,13 @@ var CredentialsSchema = exports_external.object({
   clientSecret: NonEmptyString2,
   email: exports_external.email("Valid email is required").optional()
 });
-var ClientIdSchema = exports_external.string().min(1, "Client ID is required").regex(/^[a-z0-9]+$/, "Client ID must contain only lowercase letters and numbers");
-var ClientSecretSchema = exports_external.string().min(1, "Client secret is required").regex(/^[a-z0-9]+$/, "Client secret must contain only lowercase letters and numbers").max(53, "Client secret must be less than 53 characters");
+var StoredCredentialsSchema = exports_external.object({
+  clientId: NonEmptyString2.optional(),
+  clientSecret: NonEmptyString2.optional(),
+  email: exports_external.email("Valid email is required").optional()
+}).refine((value) => value.email || value.clientId && value.clientSecret, "Saved credentials must include an email or a client ID/client secret pair").refine((value) => Boolean(value.clientId) === Boolean(value.clientSecret), "Saved credentials must include both client ID and client secret");
+var ClientIdSchema = exports_external.string().min(1, "Client ID is required").max(128, "Client ID must be at most 128 characters").regex(/^[\w+]+$/, "Client ID must contain only letters, digits, underscores, or +");
+var ClientSecretSchema = exports_external.string().min(24, "Client secret must be at least 24 characters").max(64, "Client secret must be at most 64 characters").regex(/^[\w+]+$/, "Client secret must contain only letters, digits, underscores, or +");
 var MasteryTrackCredentialsSchema = exports_external.object({
   apiKey: NonEmptyString2,
   email: exports_external.email("Valid email is required")
@@ -36344,24 +36363,41 @@ async function writeCredentialsStore(store) {
   await writeFile(CREDENTIALS_FILE, JSON.stringify(cleaned, null, 2), { mode: 384 });
   return true;
 }
-async function getSavedCredentials(environment) {
-  const store = await readCredentialsStore();
+function getStoredCredentialsFromStore(store, environment) {
   const namespaced = store.timeback?.[environment];
   if (namespaced) {
-    const result = CredentialsSchema.safeParse(namespaced);
+    const result = StoredCredentialsSchema.safeParse(namespaced);
     if (result.success) {
       return result.data;
     }
   }
   const legacy = store[environment];
   if (legacy) {
-    const result = CredentialsSchema.safeParse(legacy);
+    const result = StoredCredentialsSchema.safeParse(legacy);
     if (result.success) {
       return result.data;
     }
   }
   return null;
 }
+async function getStoredCredentials(environment) {
+  const store = await readCredentialsStore();
+  return getStoredCredentialsFromStore(store, environment);
+}
+function toCredentials(stored) {
+  if (stored?.clientId && stored.clientSecret) {
+    return {
+      clientId: stored.clientId,
+      clientSecret: stored.clientSecret,
+      email: stored.email
+    };
+  }
+  return null;
+}
+async function getSavedCredentials(environment) {
+  const stored = await getStoredCredentials(environment);
+  return toCredentials(stored);
+}
 async function saveCredentials(environment, credentials) {
   const store = await readCredentialsStore();
   store.timeback = store.timeback ?? {};
@@ -36369,6 +36405,44 @@ async function saveCredentials(environment, credentials) {
   delete store[environment];
   return writeCredentialsStore(store);
 }
+async function saveCredentialEmail(environment, email3) {
+  const store = await readCredentialsStore();
+  const existing = getStoredCredentialsFromStore(store, environment);
+  if (email3) {
+    store.timeback = store.timeback ?? {};
+    store.timeback[environment] = {
+      ...existing ?? {},
+      email: email3
+    };
+  } else if (existing?.clientId && existing.clientSecret) {
+    store.timeback = store.timeback ?? {};
+    store.timeback[environment] = {
+      clientId: existing.clientId,
+      clientSecret: existing.clientSecret
+    };
+  } else {
+    delete store.timeback?.[environment];
+    if (store.timeback && Object.keys(store.timeback).length === 0) {
+      delete store.timeback;
+    }
+  }
+  delete store[environment];
+  return writeCredentialsStore(store);
+}
+async function getStoredCredentialEmail(environment) {
+  const stored = await getStoredCredentials(environment);
+  return stored?.email;
+}
+async function getEnvironmentsWithStoredEmail() {
+  const store = await readCredentialsStore();
+  const environments = [];
+  for (const env2 of ENVIRONMENTS) {
+    if (getStoredCredentialsFromStore(store, env2)?.email) {
+      environments.push(env2);
+    }
+  }
+  return environments;
+}
 async function clearCredentials(environment) {
   const store = await readCredentialsStore();
   if (environment) {
@@ -36389,18 +36463,23 @@ async function getConfiguredEnvironments() {
   const store = await readCredentialsStore();
   const configured = [];
   for (const env2 of ENVIRONMENTS) {
-    const namespaced = store.timeback?.[env2];
-    if (namespaced && CredentialsSchema.safeParse(namespaced).success) {
-      configured.push(env2);
-      continue;
-    }
-    const legacy = store[env2];
-    if (legacy && CredentialsSchema.safeParse(legacy).success) {
+    if (toCredentials(getStoredCredentialsFromStore(store, env2))) {
       configured.push(env2);
     }
   }
   return configured;
 }
+async function getAvailableEnvironments() {
+  const available = await getConfiguredEnvironments();
+  if (getEnvCredentials()) {
+    for (const env2 of ENVIRONMENTS) {
+      if (!available.includes(env2)) {
+        available.push(env2);
+      }
+    }
+  }
+  return available;
+}
 function getEnvCredentials() {
   const clientId = process.env.TIMEBACK_API_CLIENT_ID ?? process.env.TIMEBACK_CLIENT_ID;
   const clientSecret = process.env.TIMEBACK_API_CLIENT_SECRET ?? process.env.TIMEBACK_CLIENT_SECRET;
@@ -36414,10 +36493,12 @@ function getEnvCredentials() {
 }
 async function loadCredentials(environment) {
   const envCreds = getEnvCredentials();
+  const storedCreds = await getStoredCredentials(environment);
   if (envCreds) {
-    return { success: true, credentials: envCreds, source: "env" };
+    const merged = storedCreds?.email ? { ...envCreds, email: storedCreds.email } : envCreds;
+    return { success: true, credentials: merged, source: "env" };
   }
-  const savedCreds = await getSavedCredentials(environment);
+  const savedCreds = toCredentials(storedCreds);
   if (savedCreds) {
     return { success: true, credentials: savedCreds, source: "saved" };
   }
@@ -39302,7 +39383,7 @@ You need to configure your Timeback API credentials first.`, "Credentials Setup"
 }
 async function runImportFlow(opts = {}) {
   const { format: format2 = true } = opts;
-  let configuredEnvs = await getConfiguredEnvironments();
+  let configuredEnvs = await getAvailableEnvironments();
   if (configuredEnvs.length === 0) {
     const setupResult = await setupCredentials();
     if (setupResult === "cancelled") {
@@ -39311,7 +39392,7 @@ async function runImportFlow(opts = {}) {
     if (setupResult === "error") {
       return { success: false, error: "Credential validation failed" };
     }
-    configuredEnvs = await getConfiguredEnvironments();
+    configuredEnvs = await getAvailableEnvironments();
     if (configuredEnvs.length === 0) {
       return { success: false, error: "Failed to configure credentials" };
     }
@@ -40652,6 +40733,13 @@ var StringTimebackGrade3 = exports_external.string().transform((value, ctx) => {
     return exports_external.NEVER;
   }
   const stripped = raw.replace(/\bgrade\b/g, "").replace(/(\d+)(st|nd|rd|th)\b/g, "$1").trim();
+  if (stripped === "") {
+    ctx.addIssue({
+      code: "custom",
+      message: "must be a valid Timeback grade"
+    });
+    return exports_external.NEVER;
+  }
   if (stripped === "pre-k" || stripped === "pk") {
     return -1;
   }
@@ -47224,11 +47312,15 @@ function exitCancelled(isOverwriting, exitOnComplete) {
 // src/commands/credentials/email.ts
 async function updateEmail(options = {}) {
   const { exitOnComplete = true, env: envOption } = options;
-  const configuredEnvs = [];
-  for (const env2 of ENVIRONMENTS) {
-    const creds = await getSavedCredentials(env2);
-    if (creds)
-      configuredEnvs.push(env2);
+  const emailEnvs = await getEnvironmentsWithStoredEmail();
+  const requestedEnv = envOption && ENVIRONMENTS.includes(envOption) ? envOption : undefined;
+  let configuredEnvs;
+  if (requestedEnv) {
+    const hasStoredEmail = await getStoredCredentialEmail(requestedEnv);
+    const hasUsableCredentials = (await loadCredentials(requestedEnv)).success;
+    configuredEnvs = hasStoredEmail || hasUsableCredentials ? [requestedEnv] : [];
+  } else {
+    configuredEnvs = [...new Set([...await getAvailableEnvironments(), ...emailEnvs])];
   }
   if (configuredEnvs.length === 0) {
     M2.warn("No credentials configured");
@@ -47258,15 +47350,8 @@ async function updateEmail(options = {}) {
     }
     targetEnv = selected;
   }
-  const currentCreds = await getSavedCredentials(targetEnv);
-  if (!currentCreds) {
-    M2.error("Credentials not found");
-    outro.error("Credentials not found");
-    if (exitOnComplete)
-      process.exit(0);
-    return false;
-  }
-  const currentEmail = currentCreds.email;
+  const currentCredsResult = await loadCredentials(targetEnv);
+  const currentEmail = currentCredsResult.success ? currentCredsResult.credentials.email : await getStoredCredentialEmail(targetEnv);
   const message = currentEmail ? `Email ${dim(`(current: ${currentEmail})`)}` : `Email ${dim("(not set)")}`;
   const email3 = await he({
     message,
@@ -47295,6 +47380,14 @@ async function updateEmail(options = {}) {
     return true;
   }
   if (normalizedEmail) {
+    if (!currentCredsResult.success) {
+      M2.error("Credentials required to set email");
+      outro.error("Credentials required to set email");
+      if (exitOnComplete)
+        process.exit(0);
+      return false;
+    }
+    const currentCreds = currentCredsResult.credentials;
     const s = Y2();
     s.start("Validating email...");
     const result = await validateEmailWithTimeback(targetEnv, currentCreds.clientId, currentCreds.clientSecret, normalizedEmail);
@@ -47315,10 +47408,7 @@ async function updateEmail(options = {}) {
         email: normalizedEmail
       });
       if (accountCreated) {
-        await saveCredentials(targetEnv, {
-          ...currentCreds,
-          email: normalizedEmail
-        });
+        await saveCredentialEmail(targetEnv, normalizedEmail);
         M2.success(`Email saved for ${targetEnv}`);
         outro.success();
       } else {
@@ -47328,20 +47418,14 @@ async function updateEmail(options = {}) {
         process.exit(0);
       return accountCreated;
     }
-    await saveCredentials(targetEnv, {
-      ...currentCreds,
-      email: normalizedEmail
-    });
+    await saveCredentialEmail(targetEnv, normalizedEmail);
     s.stop(green(`Email updated for ${targetEnv}`));
     outro.success();
     if (exitOnComplete)
       process.exit(0);
     return true;
   }
-  await saveCredentials(targetEnv, {
-    ...currentCreds,
-    email: undefined
-  });
+  await saveCredentialEmail(targetEnv, undefined);
   outro.success(`Email cleared for ${targetEnv}`);
   if (exitOnComplete)
     process.exit(0);
@@ -47359,13 +47443,19 @@ async function listCredentials(options = {}) {
   const { exitOnComplete = true } = options;
   const timebackLines = [];
   const masteryTrackLines = [];
+  const envCreds = getEnvCredentials();
   let hasAnyTimeback = false;
   let hasAnyMasteryTrack = false;
+  let hasSavedTimeback = false;
+  const hasEnvTimeback = Boolean(envCreds);
   for (const env2 of ENVIRONMENTS) {
     const creds = await getSavedCredentials(env2);
-    if (creds) {
+    if (creds && hasEnvTimeback) {
+      timebackLines.push(`${dim("●")} ${env2}: ${creds.clientId}`);
+      hasSavedTimeback = true;
+    } else if (creds) {
       timebackLines.push(`${green("●")} ${env2}: ${creds.clientId}`);
-      hasAnyTimeback = true;
+      hasSavedTimeback = true;
     } else {
       timebackLines.push(`${dim("○")} ${env2}: not configured`);
     }
@@ -47377,12 +47467,26 @@ async function listCredentials(options = {}) {
       masteryTrackLines.push(`${dim("○")} ${env2}: not configured`);
     }
   }
+  hasAnyTimeback = hasSavedTimeback || hasEnvTimeback;
+  if (envCreds) {
+    timebackLines.push(`${green("●")} env: ${envCreds.clientId} ${yellow("[override]")}`);
+  }
   Me(timebackLines.join(`
 `), "Timeback");
   Me(masteryTrackLines.join(`
 `), "MasteryTrack");
   if (hasAnyTimeback || hasAnyMasteryTrack) {
-    outro.info(`Credentials stored in ${blueBright(underline(tildify(getCredentialsPath())))}`);
+    const details = [];
+    if (hasSavedTimeback || hasAnyMasteryTrack) {
+      details.push(`Credentials stored in ${blueBright(underline(tildify(getCredentialsPath())))}`);
+    }
+    if (hasEnvTimeback) {
+      details.push("Timeback env credentials are active");
+    }
+    if (details.length > 0) {
+      outro.info(details.join(`
+`));
+    }
   } else {
     const shouldAdd = await ye({
       message: "No credentials configured. Add now?"
@@ -47424,7 +47528,7 @@ async function removeCredentials(options = {}) {
       configuredEnvs.push(env2);
   }
   if (configuredEnvs.length === 0) {
-    M2.warn(provider === "masterytrack" ? "No MasteryTrack credentials configured" : "No credentials configured");
+    M2.warn(provider === "masterytrack" ? "No saved MasteryTrack credentials configured" : "No saved credentials configured");
     if (exitOnComplete)
       process.exit(0);
     return;
@@ -48243,7 +48347,7 @@ You need to configure your Timeback API credentials first.`, "Credentials Setup"
   return "ok";
 }
 async function ensureConfiguredEnvironments(targetEnv) {
-  let configuredEnvs = await getConfiguredEnvironments();
+  let configuredEnvs = await getAvailableEnvironments();
   const needsSetup = targetEnv ? !configuredEnvs.includes(targetEnv) : configuredEnvs.length === 0;
   if (needsSetup) {
     const setupResult = await setupCredentials2(targetEnv);
@@ -48253,7 +48357,7 @@ async function ensureConfiguredEnvironments(targetEnv) {
     if (setupResult === "error") {
       return { status: "error" };
     }
-    configuredEnvs = await getConfiguredEnvironments();
+    configuredEnvs = await getAvailableEnvironments();
     const stillMissing = targetEnv ? !configuredEnvs.includes(targetEnv) : configuredEnvs.length === 0;
     if (stillMissing) {
       return { status: "error" };
@@ -52598,8 +52702,8 @@ async function installAndDisplay(options) {
 
 // src/commands/init/lib/postInit.ts
 async function ensureSyncEmail(targetEnv) {
-  const creds = await getSavedCredentials(targetEnv);
-  if (creds && !creds.email) {
+  const result = await loadCredentials(targetEnv);
+  if (result.success && !result.credentials.email) {
     return await updateEmail({ exitOnComplete: false, env: targetEnv });
   }
   return true;
@@ -76464,6 +76568,13 @@ var StringTimebackGrade4 = exports_external2.string().transform((value, ctx) =>
     return exports_external2.NEVER;
   }
   const stripped = raw.replace(/\bgrade\b/g, "").replace(/(\d+)(st|nd|rd|th)\b/g, "$1").trim();
+  if (stripped === "") {
+    ctx.addIssue({
+      code: "custom",
+      message: "must be a valid Timeback grade"
+    });
+    return exports_external2.NEVER;
+  }
   if (stripped === "pre-k" || stripped === "pk") {
     return -1;
   }
@@ -78317,8 +78428,13 @@ var CredentialsSchema2 = exports_external2.object({
   clientSecret: NonEmptyString4,
   email: exports_external2.email("Valid email is required").optional()
 });
-var ClientIdSchema2 = exports_external2.string().min(1, "Client ID is required").regex(/^[a-z0-9]+$/, "Client ID must contain only lowercase letters and numbers");
-var ClientSecretSchema2 = exports_external2.string().min(1, "Client secret is required").regex(/^[a-z0-9]+$/, "Client secret must contain only lowercase letters and numbers").max(53, "Client secret must be less than 53 characters");
+var StoredCredentialsSchema2 = exports_external2.object({
+  clientId: NonEmptyString4.optional(),
+  clientSecret: NonEmptyString4.optional(),
+  email: exports_external2.email("Valid email is required").optional()
+}).refine((value) => value.email || value.clientId && value.clientSecret, "Saved credentials must include an email or a client ID/client secret pair").refine((value) => Boolean(value.clientId) === Boolean(value.clientSecret), "Saved credentials must include both client ID and client secret");
+var ClientIdSchema2 = exports_external2.string().min(1, "Client ID is required").max(128, "Client ID must be at most 128 characters").regex(/^[\w+]+$/, "Client ID must contain only letters, digits, underscores, or +");
+var ClientSecretSchema2 = exports_external2.string().min(24, "Client secret must be at least 24 characters").max(64, "Client secret must be at most 64 characters").regex(/^[\w+]+$/, "Client secret must contain only letters, digits, underscores, or +");
 var MasteryTrackCredentialsSchema2 = exports_external2.object({
   apiKey: NonEmptyString4,
   email: exports_external2.email("Valid email is required")
@@ -78639,24 +78755,41 @@ async function writeCredentialsStore2(store) {
   await writeFile3(CREDENTIALS_FILE2, JSON.stringify(cleaned, null, 2), { mode: 384 });
   return true;
 }
-async function getSavedCredentials2(environment) {
-  const store = await readCredentialsStore2();
+function getStoredCredentialsFromStore2(store, environment) {
   const namespaced = store.timeback?.[environment];
   if (namespaced) {
-    const result = CredentialsSchema2.safeParse(namespaced);
+    const result = StoredCredentialsSchema2.safeParse(namespaced);
     if (result.success) {
       return result.data;
     }
   }
   const legacy = store[environment];
   if (legacy) {
-    const result = CredentialsSchema2.safeParse(legacy);
+    const result = StoredCredentialsSchema2.safeParse(legacy);
     if (result.success) {
       return result.data;
     }
   }
   return null;
 }
+async function getStoredCredentials2(environment) {
+  const store = await readCredentialsStore2();
+  return getStoredCredentialsFromStore2(store, environment);
+}
+function toCredentials2(stored) {
+  if (stored?.clientId && stored.clientSecret) {
+    return {
+      clientId: stored.clientId,
+      clientSecret: stored.clientSecret,
+      email: stored.email
+    };
+  }
+  return null;
+}
+async function getSavedCredentials2(environment) {
+  const stored = await getStoredCredentials2(environment);
+  return toCredentials2(stored);
+}
 async function saveCredentials2(environment, credentials) {
   const store = await readCredentialsStore2();
   store.timeback = store.timeback ?? {};
@@ -78664,6 +78797,44 @@ async function saveCredentials2(environment, credentials) {
   delete store[environment];
   return writeCredentialsStore2(store);
 }
+async function saveCredentialEmail2(environment, email32) {
+  const store = await readCredentialsStore2();
+  const existing = getStoredCredentialsFromStore2(store, environment);
+  if (email32) {
+    store.timeback = store.timeback ?? {};
+    store.timeback[environment] = {
+      ...existing ?? {},
+      email: email32
+    };
+  } else if (existing?.clientId && existing.clientSecret) {
+    store.timeback = store.timeback ?? {};
+    store.timeback[environment] = {
+      clientId: existing.clientId,
+      clientSecret: existing.clientSecret
+    };
+  } else {
+    delete store.timeback?.[environment];
+    if (store.timeback && Object.keys(store.timeback).length === 0) {
+      delete store.timeback;
+    }
+  }
+  delete store[environment];
+  return writeCredentialsStore2(store);
+}
+async function getStoredCredentialEmail2(environment) {
+  const stored = await getStoredCredentials2(environment);
+  return stored?.email;
+}
+async function getEnvironmentsWithStoredEmail2() {
+  const store = await readCredentialsStore2();
+  const environments = [];
+  for (const env22 of ENVIRONMENTS2) {
+    if (getStoredCredentialsFromStore2(store, env22)?.email) {
+      environments.push(env22);
+    }
+  }
+  return environments;
+}
 async function clearCredentials2(environment) {
   const store = await readCredentialsStore2();
   if (environment) {
@@ -78684,18 +78855,23 @@ async function getConfiguredEnvironments2() {
   const store = await readCredentialsStore2();
   const configured = [];
   for (const env22 of ENVIRONMENTS2) {
-    const namespaced = store.timeback?.[env22];
-    if (namespaced && CredentialsSchema2.safeParse(namespaced).success) {
-      configured.push(env22);
-      continue;
-    }
-    const legacy = store[env22];
-    if (legacy && CredentialsSchema2.safeParse(legacy).success) {
+    if (toCredentials2(getStoredCredentialsFromStore2(store, env22))) {
       configured.push(env22);
     }
   }
   return configured;
 }
+async function getAvailableEnvironments2() {
+  const available = await getConfiguredEnvironments2();
+  if (getEnvCredentials2()) {
+    for (const env22 of ENVIRONMENTS2) {
+      if (!available.includes(env22)) {
+        available.push(env22);
+      }
+    }
+  }
+  return available;
+}
 function getEnvCredentials2() {
   const clientId = process.env.TIMEBACK_API_CLIENT_ID ?? process.env.TIMEBACK_CLIENT_ID;
   const clientSecret = process.env.TIMEBACK_API_CLIENT_SECRET ?? process.env.TIMEBACK_CLIENT_SECRET;
@@ -78709,10 +78885,12 @@ function getEnvCredentials2() {
 }
 async function loadCredentials2(environment) {
   const envCreds = getEnvCredentials2();
+  const storedCreds = await getStoredCredentials2(environment);
   if (envCreds) {
-    return { success: true, credentials: envCreds, source: "env" };
+    const merged = storedCreds?.email ? { ...envCreds, email: storedCreds.email } : envCreds;
+    return { success: true, credentials: merged, source: "env" };
   }
-  const savedCreds = await getSavedCredentials2(environment);
+  const savedCreds = toCredentials2(storedCreds);
   if (savedCreds) {
     return { success: true, credentials: savedCreds, source: "saved" };
   }
@@ -78722,7 +78900,7 @@ async function loadCredentials2(environment) {
   };
 }
 async function loadAllCredentials2() {
-  const configuredEnvs = await getConfiguredEnvironments2();
+  const configuredEnvs = await getAvailableEnvironments2();
   const credentials = {};
   for (const env22 of configuredEnvs) {
     const result = await loadCredentials2(env22);
@@ -80236,21 +80414,40 @@ async function addCredentials2(options = {}) {
 async function listCredentials2(options = {}) {
   const { exitOnComplete = true, inline = false } = options;
   const lines = [];
+  const envCreds = getEnvCredentials2();
   let hasAny = false;
+  let hasSaved = false;
+  const hasEnv = Boolean(envCreds);
   for (const env22 of ENVIRONMENTS2) {
     const creds = await getSavedCredentials2(env22);
-    if (creds) {
+    if (creds && hasEnv) {
+      lines.push(`${dim2("●")} ${env22}: ${creds.clientId}`);
+      hasSaved = true;
+    } else if (creds) {
       lines.push(`${green2("●")} ${env22}: ${creds.clientId}`);
-      hasAny = true;
+      hasSaved = true;
     } else {
-      lines.push(`${dim2("○")} ${env22}: ${"not configured"}`);
+      lines.push(`${dim2("○")} ${env22}: not configured`);
     }
   }
+  hasAny = hasSaved || hasEnv;
+  if (envCreds) {
+    lines.push(`${green2("●")} env: ${envCreds.clientId} ${yellow2("[override]")}`);
+  }
   Me2(lines.join(`
 `), "Configured environments");
   if (hasAny) {
-    if (!inline)
-      outro2.info(`Credentials stored in ${blueBright2(underline2(getCredentialsPath2()))}`);
+    const details = [];
+    if (hasSaved) {
+      details.push(`Credentials stored in ${blueBright2(underline2(getCredentialsPath2()))}`);
+    }
+    if (hasEnv) {
+      details.push("Timeback env credentials are active");
+    }
+    if (details.length > 0 && !inline) {
+      outro2.info(details.join(`
+`));
+    }
   } else {
     const shouldAdd = await ye2({
       message: "No credentials configured. Add now?"
@@ -80267,12 +80464,12 @@ async function listCredentials2(options = {}) {
 }
 async function updateEmail2(options = {}) {
   const { exitOnComplete = true, inline = false } = options;
-  const configuredEnvs = [];
-  for (const env22 of ENVIRONMENTS2) {
-    const creds = await getSavedCredentials2(env22);
-    if (creds)
-      configuredEnvs.push(env22);
-  }
+  const configuredEnvs = [
+    ...new Set([
+      ...await getAvailableEnvironments2(),
+      ...await getEnvironmentsWithStoredEmail2()
+    ])
+  ];
   if (configuredEnvs.length === 0) {
     M22.warn("No credentials configured");
     if (!inline)
@@ -80301,16 +80498,8 @@ async function updateEmail2(options = {}) {
     }
     targetEnv = selected;
   }
-  const currentCreds = await getSavedCredentials2(targetEnv);
-  if (!currentCreds) {
-    M22.error("Credentials not found");
-    if (!inline)
-      outro2.error("Credentials not found");
-    if (exitOnComplete)
-      process.exit(0);
-    return;
-  }
-  const currentEmail = currentCreds.email;
+  const currentCredsResult = await loadCredentials2(targetEnv);
+  const currentEmail = currentCredsResult.success ? currentCredsResult.credentials.email : await getStoredCredentialEmail2(targetEnv);
   const message = currentEmail ? `Email ${dim2(`(current: ${currentEmail})`)}` : `Email ${dim2("(not set)")}`;
   const email32 = await he2({
     message,
@@ -80333,7 +80522,23 @@ async function updateEmail2(options = {}) {
   }
   const normalized = email32 ? normalizeEmail2(email32) : undefined;
   const emailUnchanged = (normalized ?? "") === (currentEmail ?? "");
+  if (emailUnchanged) {
+    if (!inline)
+      outro2.info("Email unchanged");
+    if (exitOnComplete)
+      process.exit(0);
+    return;
+  }
   if (normalized) {
+    if (!currentCredsResult.success) {
+      M22.error("Credentials required to set email");
+      if (!inline)
+        outro2.error("Credentials required to set email");
+      if (exitOnComplete)
+        process.exit(0);
+      return;
+    }
+    const currentCreds = currentCredsResult.credentials;
     const s = Y22();
     s.start("Checking account...");
     const result = await validateEmailWithTimeback2(targetEnv, currentCreds.clientId, currentCreds.clientSecret, normalized);
@@ -80354,11 +80559,8 @@ async function updateEmail2(options = {}) {
         clientSecret: currentCreds.clientSecret,
         email: normalized
       });
-      if (accountCreated && !emailUnchanged) {
-        await saveCredentials2(targetEnv, {
-          ...currentCreds,
-          email: normalized
-        });
+      if (accountCreated) {
+        await saveCredentialEmail2(targetEnv, normalized);
         M22.success(`Email saved for ${targetEnv}`);
       }
       if (!inline) {
@@ -80373,17 +80575,7 @@ async function updateEmail2(options = {}) {
       return;
     }
     s.stop(green2("Account verified"));
-    if (emailUnchanged) {
-      if (!inline)
-        outro2.info("Email unchanged");
-      if (exitOnComplete)
-        process.exit(0);
-      return;
-    }
-    await saveCredentials2(targetEnv, {
-      ...currentCreds,
-      email: normalized
-    });
+    await saveCredentialEmail2(targetEnv, normalized);
     M22.success(`Email updated for ${targetEnv}`);
     if (!inline)
       outro2.success();
@@ -80391,10 +80583,7 @@ async function updateEmail2(options = {}) {
       process.exit(0);
     return;
   }
-  await saveCredentials2(targetEnv, {
-    ...currentCreds,
-    email: undefined
-  });
+  await saveCredentialEmail2(targetEnv, undefined);
   if (!inline)
     outro2.success(`Email cleared for ${targetEnv}`);
   if (exitOnComplete)
@@ -80409,7 +80598,7 @@ async function removeCredentials2(options = {}) {
       configuredEnvs.push(env22);
   }
   if (configuredEnvs.length === 0) {
-    M22.warn("No credentials configured");
+    M22.warn("No saved credentials configured");
     if (exitOnComplete)
       process.exit(0);
     return;
@@ -80615,7 +80804,7 @@ async function promptNoConfig(credentials, configuredEnvs, opts = {}) {
 }
 async function resolveConfigSource(courseIds, opts, defaultEnvironment) {
   const parserOpts = { playcademy: opts.playcademy };
-  let configuredEnvs = await getConfiguredEnvironments2();
+  let configuredEnvs = await getAvailableEnvironments2();
   let credentials = {};
   if (courseIds.length > 0) {
     if (configuredEnvs.length > 0) {
@@ -82945,8 +83134,8 @@ var cors = (options) => {
 async function handleBootstrap(c, ctx) {
   const { bootstrap } = c.get("services");
   const env22 = c.get("env");
-  const freshCredentials = await getSavedCredentials2(env22);
-  const email32 = freshCredentials?.email;
+  const freshCredentials = await loadCredentials2(env22);
+  const email32 = freshCredentials.success ? freshCredentials.credentials.email : undefined;
   const courseIds = ctx.userConfig.courseIds[env22];
   const result = await bootstrap.getBootstrap({ email: email32, courseIds });
   return c.json(result);
@@ -83975,18 +84164,18 @@ class StatusService {
     this.ctx = ctx;
   }
   async getStatus() {
-    const configuredEnvironments = await getConfiguredEnvironments2();
+    const configuredEnvironments = await getAvailableEnvironments2();
     const [stagingCreds, productionCreds] = await Promise.all([
-      getSavedCredentials2("staging"),
-      getSavedCredentials2("production")
+      loadCredentials2("staging"),
+      loadCredentials2("production")
     ]);
-    const defaultCreds = this.ctx.defaultEnvironment === "staging" ? stagingCreds : this.ctx.defaultEnvironment === "production" ? productionCreds : null;
-    const clientId = defaultCreds?.clientId ?? stagingCreds?.clientId ?? productionCreds?.clientId ?? this.ctx.credentials.staging?.clientId ?? this.ctx.credentials.production?.clientId;
+    const defaultCreds = this.ctx.defaultEnvironment === "staging" ? stagingCreds.success ? stagingCreds.credentials : null : this.ctx.defaultEnvironment === "production" ? productionCreds.success ? productionCreds.credentials : null : null;
+    const clientId = defaultCreds?.clientId ?? (stagingCreds.success ? stagingCreds.credentials.clientId : undefined) ?? (productionCreds.success ? productionCreds.credentials.clientId : undefined) ?? this.ctx.credentials.staging?.clientId ?? this.ctx.credentials.production?.clientId;
     return {
       config: this.ctx.userConfig,
       environment: this.ctx.defaultEnvironment,
       configuredEnvironments,
-      hasEmail: !!stagingCreds?.email || !!productionCreds?.email,
+      hasEmail: stagingCreds.success && Boolean(stagingCreds.credentials.email) || productionCreds.success && Boolean(productionCreds.credentials.email),
       clientId,
       sensors: this.ctx.derivedSensors
     };
@@ -84636,7 +84825,7 @@ async function launchServer(serverConfig, userConfig, credentials, env22, opts,
 }
 async function handleCourseIdsCase(courseIds, opts, serverConfig) {
   const env22 = opts.env ?? await promptEnvironmentForCourseIds(courseIds.length);
-  let configuredEnvs = await getConfiguredEnvironments2();
+  let configuredEnvs = await getAvailableEnvironments2();
   let credentials = configuredEnvs.length > 0 ? await loadAllCredentials2() : {};
   const resolvedResult = await resolveConfigSource(courseIds, opts, env22);
   if (!resolvedResult) {
@@ -84688,7 +84877,7 @@ async function handleConfigFileCase(userConfig, configPath, opts, serverConfig)
   await launchServer(serverConfig, userConfig, credentials, env22, opts, configPath);
 }
 async function handleImportFlowCase(opts, serverConfig) {
-  let configuredEnvs = await getConfiguredEnvironments2();
+  let configuredEnvs = await getAvailableEnvironments2();
   let credentials = {};
   let selectedEnv;
   if (configuredEnvs.length === 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "timeback",
-	"version": "0.2.2-beta.20260401002024",
+	"version": "0.2.2-beta.20260402000431",
 	"type": "module",
 	"bin": {
 		"timeback": "./dist/cli.js"

package/schema.json

@@ -15,13 +15,13 @@
 			"$ref": "#/definitions/__schema22"
 		},
 		"sensor": {
-			"$ref": "#/definitions/__schema52"
+			"$ref": "#/definitions/__schema38"
 		},
 		"launchUrl": {
-			"$ref": "#/definitions/__schema53"
+			"$ref": "#/definitions/__schema39"
 		},
 		"studio": {
-			"$ref": "#/definitions/__schema54"
+			"$ref": "#/definitions/__schema40"
 		}
 	},
 	"required": ["name", "courses"],
@@ -282,16 +282,16 @@
 					"$ref": "#/definitions/__schema24"
 				},
 				"ids": {
-					"$ref": "#/definitions/__schema40"
+					"$ref": "#/definitions/__schema26"
 				},
 				"sensor": {
-					"$ref": "#/definitions/__schema43"
+					"$ref": "#/definitions/__schema29"
 				},
 				"launchUrl": {
-					"$ref": "#/definitions/__schema44"
+					"$ref": "#/definitions/__schema30"
 				},
 				"overrides": {
-					"$ref": "#/definitions/__schema45"
+					"$ref": "#/definitions/__schema31"
 				}
 			},
 			"required": ["subject"],
@@ -325,121 +325,88 @@
 		"__schema24": {
 			"allOf": [
 				{
+					"allOf": [
+						{
+							"$ref": "#/definitions/__schema25"
+						}
+					],
 					"$ref": "#/definitions/TimebackGrade"
 				}
 			]
 		},
 		"__schema25": {
-			"type": "number",
-			"const": -1
-		},
-		"__schema26": {
-			"type": "number",
-			"const": 0
-		},
-		"__schema27": {
-			"type": "number",
-			"const": 1
-		},
-		"__schema28": {
-			"type": "number",
-			"const": 2
-		},
-		"__schema29": {
-			"type": "number",
-			"const": 3
-		},
-		"__schema30": {
-			"type": "number",
-			"const": 4
-		},
-		"__schema31": {
-			"type": "number",
-			"const": 5
-		},
-		"__schema32": {
-			"type": "number",
-			"const": 6
-		},
-		"__schema33": {
-			"type": "number",
-			"const": 7
-		},
-		"__schema34": {
-			"type": "number",
-			"const": 8
-		},
-		"__schema35": {
-			"type": "number",
-			"const": 9
-		},
-		"__schema36": {
-			"type": "number",
-			"const": 10
-		},
-		"__schema37": {
-			"type": "number",
-			"const": 11
-		},
-		"__schema38": {
-			"type": "number",
-			"const": 12
-		},
-		"__schema39": {
-			"type": "number",
-			"const": 13
-		},
-		"TimebackGrade": {
 			"anyOf": [
 				{
-					"$ref": "#/definitions/__schema25"
+					"type": "number",
+					"const": -1
 				},
 				{
-					"$ref": "#/definitions/__schema26"
+					"type": "number",
+					"const": 0
 				},
 				{
-					"$ref": "#/definitions/__schema27"
+					"type": "number",
+					"const": 1
 				},
 				{
-					"$ref": "#/definitions/__schema28"
+					"type": "number",
+					"const": 2
 				},
 				{
-					"$ref": "#/definitions/__schema29"
+					"type": "number",
+					"const": 3
 				},
 				{
-					"$ref": "#/definitions/__schema30"
+					"type": "number",
+					"const": 4
 				},
 				{
-					"$ref": "#/definitions/__schema31"
+					"type": "number",
+					"const": 5
 				},
 				{
-					"$ref": "#/definitions/__schema32"
+					"type": "number",
+					"const": 6
 				},
 				{
-					"$ref": "#/definitions/__schema33"
+					"type": "number",
+					"const": 7
 				},
 				{
-					"$ref": "#/definitions/__schema34"
+					"type": "number",
+					"const": 8
 				},
 				{
-					"$ref": "#/definitions/__schema35"
+					"type": "number",
+					"const": 9
 				},
 				{
-					"$ref": "#/definitions/__schema36"
+					"type": "number",
+					"const": 10
 				},
 				{
-					"$ref": "#/definitions/__schema37"
+					"type": "number",
+					"const": 11
 				},
 				{
-					"$ref": "#/definitions/__schema38"
+					"type": "number",
+					"const": 12
 				},
 				{
-					"$ref": "#/definitions/__schema39"
+					"type": "number",
+					"const": 13
 				}
-			],
-			"description": "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+			]
 		},
-		"__schema40": {
+		"TimebackGrade": {
+			"description": "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)",
+			"allOf": [
+				{
+					"$ref": "#/definitions/__schema25"
+				}
+			]
+		},
+		"__schema26": {
 			"anyOf": [
 				{
 					"$ref": "#/definitions/CourseIds"
@@ -453,34 +420,34 @@
 			"type": "object",
 			"properties": {
 				"staging": {
-					"$ref": "#/definitions/__schema41"
+					"$ref": "#/definitions/__schema27"
 				},
 				"production": {
-					"$ref": "#/definitions/__schema42"
+					"$ref": "#/definitions/__schema28"
 				}
 			},
 			"additionalProperties": false,
 			"description": "Environment-specific course IDs (populated by sync)"
 		},
-		"__schema41": {
+		"__schema27": {
 			"type": "string",
 			"description": "Course ID in staging environment"
 		},
-		"__schema42": {
+		"__schema28": {
 			"type": "string",
 			"description": "Course ID in production environment"
 		},
-		"__schema43": {
+		"__schema29": {
 			"type": "string",
 			"format": "uri",
 			"description": "Caliper sensor endpoint URL for this course"
 		},
-		"__schema44": {
+		"__schema30": {
 			"type": "string",
 			"format": "uri",
 			"description": "LTI launch URL for this course"
 		},
-		"__schema45": {
+		"__schema31": {
 			"allOf": [
 				{
 					"$ref": "#/definitions/CourseOverrides"
@@ -491,16 +458,16 @@
 			"type": "object",
 			"properties": {
 				"staging": {
-					"$ref": "#/definitions/__schema46"
+					"$ref": "#/definitions/__schema32"
 				},
 				"production": {
-					"$ref": "#/definitions/__schema51"
+					"$ref": "#/definitions/__schema37"
 				}
 			},
 			"additionalProperties": false,
 			"description": "Per-environment course overrides"
 		},
-		"__schema46": {
+		"__schema32": {
 			"description": "Overrides for staging environment",
 			"allOf": [
 				{
@@ -508,21 +475,21 @@
 				}
 			]
 		},
-		"__schema47": {
+		"__schema33": {
 			"type": "string",
 			"description": "Course level for this environment"
 		},
-		"__schema48": {
+		"__schema34": {
 			"type": "string",
 			"format": "uri",
 			"description": "Caliper sensor endpoint URL for this environment"
 		},
-		"__schema49": {
+		"__schema35": {
 			"type": "string",
 			"format": "uri",
 			"description": "LTI launch URL for this environment"
 		},
-		"__schema50": {
+		"__schema36": {
 			"allOf": [
 				{
 					"$ref": "#/definitions/CourseMetadata"
@@ -533,22 +500,22 @@
 			"type": "object",
 			"properties": {
 				"level": {
-					"$ref": "#/definitions/__schema47"
+					"$ref": "#/definitions/__schema33"
 				},
 				"sensor": {
-					"$ref": "#/definitions/__schema48"
+					"$ref": "#/definitions/__schema34"
 				},
 				"launchUrl": {
-					"$ref": "#/definitions/__schema49"
+					"$ref": "#/definitions/__schema35"
 				},
 				"metadata": {
-					"$ref": "#/definitions/__schema50"
+					"$ref": "#/definitions/__schema36"
 				}
 			},
 			"additionalProperties": false,
 			"description": "Environment-specific course overrides (non-identity fields)"
 		},
-		"__schema51": {
+		"__schema37": {
 			"description": "Overrides for production environment",
 			"allOf": [
 				{
@@ -556,27 +523,27 @@
 				}
 			]
 		},
-		"__schema52": {
+		"__schema38": {
 			"type": "string",
 			"format": "uri",
 			"description": "Default Caliper sensor endpoint URL for all courses"
 		},
-		"__schema53": {
+		"__schema39": {
 			"type": "string",
 			"format": "uri",
 			"description": "Default LTI launch URL for all courses"
 		},
-		"__schema54": {
+		"__schema40": {
 			"type": "object",
 			"properties": {
 				"telemetry": {
-					"$ref": "#/definitions/__schema55"
+					"$ref": "#/definitions/__schema41"
 				}
 			},
 			"additionalProperties": false,
 			"description": "Studio-specific configuration"
 		},
-		"__schema55": {
+		"__schema41": {
 			"default": true,
 			"type": "boolean",
 			"description": "Enable anonymous usage telemetry for Studio (default: true)"
@@ -597,13 +564,13 @@
 					"$ref": "#/definitions/__schema22"
 				},
 				"sensor": {
-					"$ref": "#/definitions/__schema52"
+					"$ref": "#/definitions/__schema38"
 				},
 				"launchUrl": {
-					"$ref": "#/definitions/__schema53"
+					"$ref": "#/definitions/__schema39"
 				},
 				"studio": {
-					"$ref": "#/definitions/__schema54"
+					"$ref": "#/definitions/__schema40"
 				}
 			},
 			"required": ["name", "courses"],