vercel 59.14.0 → 59.15.1

package/dist/commands/env/index.js

@@ -4,3422 +4,37 @@ import { dirname as __dirname_ } from 'node:path';
 const require = __createRequire(import.meta.url);
 const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
-import {
-  CHECKBOX_INSTRUCTIONS,
-  getCustomEnvironments,
-  readStandardInput,
-  require_dist as require_dist3
-} from "../../chunks/chunk-XFF5TGRA.js";
-import {
-  getInvalidSubcommand
-} from "../../chunks/chunk-VGIMO3ZK.js";
-import {
-  ellipsis
-} from "../../chunks/chunk-OAMU5QO6.js";
-import {
-  formatTable
-} from "../../chunks/chunk-GVNCVKCI.js";
-import "../../chunks/chunk-ND5CF2H3.js";
-import {
-  isGuidanceEnabled,
-  suggestNextCommands
-} from "../../chunks/chunk-AKLTIZCU.js";
-import {
-  formatEnvironment
-} from "../../chunks/chunk-EFYMIIER.js";
-import {
-  validateLsArgs
-} from "../../chunks/chunk-JSD4EZL3.js";
-import {
-  validateJsonOutput
-} from "../../chunks/chunk-KXDWXXJH.js";
-import {
-  getSubcommand
-} from "../../chunks/chunk-YPQSDAEW.js";
-import {
-  getCommandAliases
-} from "../../chunks/chunk-CFDDM4TX.js";
-import "../../chunks/chunk-CJV7J7B5.js";
-import "../../chunks/chunk-EZKW5YJ2.js";
-import "../../chunks/chunk-NFU4XJIR.js";
-import "../../chunks/chunk-3HZLXCVL.js";
-import "../../chunks/chunk-7Q45OKWR.js";
-import "../../chunks/chunk-GY5I4AYD.js";
-import "../../chunks/chunk-4TUMNBEE.js";
-import "../../chunks/chunk-POOO7W47.js";
-import "../../chunks/chunk-SLPSPYVR.js";
-import "../../chunks/chunk-HKHXKSXQ.js";
-import "../../chunks/chunk-EDMW7SBH.js";
-import "../../chunks/chunk-4KD5BYHB.js";
-import "../../chunks/chunk-XDGOOW3K.js";
-import "../../chunks/chunk-VP5Y3SZG.js";
-import {
-  autoInstallVercelPlugin
-} from "../../chunks/chunk-K3RED3VO.js";
-import {
-  require_execa
-} from "../../chunks/chunk-5NF5HOBJ.js";
-import {
-  stamp_default
-} from "../../chunks/chunk-64IF634X.js";
-import "../../chunks/chunk-ZDU2NODC.js";
-import "../../chunks/chunk-PEC3CQSK.js";
-import "../../chunks/chunk-VXYGCOKL.js";
-import {
-  require_ms
-} from "../../chunks/chunk-GGP5R3FU.js";
-import {
-  ENV_VISIBILITY_DEPRECATION_MESSAGE,
-  SENSITIVE_ENV_VALUE_PLACEHOLDER,
-  formatVisibilityLabel,
-  getApiPublicPrefix,
-  getEnvKeyWarnings,
-  getEnvRecords,
-  getFrameworkPublicPrefix,
-  getLocalSecretFallbackMessage,
-  getLocalSvelteKitPublicPrefixes,
-  getPublicPrefix,
-  getPublicPrefixSecretVisibilityError,
-  getUnavailableSecretValuesMessage,
-  isFlagsSecretNeedingSplit,
-  isSecretEnvVar,
-  looksLikeSecret,
-  looksLikeSecretValue,
-  normalizeStdinEnvValue,
-  pull,
-  pullEnvRecords,
-  removePublicPrefix,
-  resolveEnvVarTypeOption,
-  resolveEnvVarVisibility,
-  shouldConfirmRotationBeforeDelete,
-  validateEnvValue
-} from "../../chunks/chunk-FVF4UHDM.js";
-import {
-  resolveProjectContext
-} from "../../chunks/chunk-RTJASENB.js";
-import "../../chunks/chunk-FRVG4OW3.js";
-import "../../chunks/chunk-6E6KPBXY.js";
-import "../../chunks/chunk-JC2O346E.js";
-import "../../chunks/chunk-67CRVWDF.js";
-import "../../chunks/chunk-RNSMTWA6.js";
-import "../../chunks/chunk-UG2WOB5L.js";
-import {
-  addSubcommand,
-  envCommand,
-  envTargetChoices,
-  getEnvTargetPlaceholder,
-  isValidEnvTarget,
-  listSubcommand,
-  parseEnvTargetArg,
-  pullSubcommand,
-  removeSubcommand,
-  runSubcommand,
-  updateSubcommand
-} from "../../chunks/chunk-XUAWTW4W.js";
-import "../../chunks/chunk-JZXJZX7O.js";
-import "../../chunks/chunk-HRXRELD3.js";
-import {
-  STANDARD_ENVIRONMENTS,
-  formatProject
-} from "../../chunks/chunk-PNGVSHR3.js";
-import {
-  parseTarget
-} from "../../chunks/chunk-RN6V5ODW.js";
-import {
-  help
-} from "../../chunks/chunk-YS76T533.js";
-import {
-  TelemetryClient,
-  require_dist as require_dist2
-} from "../../chunks/chunk-HB4UKFDO.js";
-import "../../chunks/chunk-B5XLQKHI.js";
-import "../../chunks/chunk-SM3F3PYJ.js";
-import "../../chunks/chunk-XNIZGCN5.js";
-import "../../chunks/chunk-NW34PW6V.js";
-import {
-  printError
-} from "../../chunks/chunk-3VM7HWF6.js";
-import {
-  parseArguments
-} from "../../chunks/chunk-57RHXXXG.js";
-import "../../chunks/chunk-4IALDGB7.js";
-import {
-  getTeamByIdOrSlug,
-  param,
-  printAlignedLabel
-} from "../../chunks/chunk-AJ5HUOWB.js";
-import "../../chunks/chunk-G5FBSUL4.js";
-import {
-  buildCommandWithYes,
-  buildEnvAddCommandWithPreservedArgs,
-  buildEnvRmCommandWithPreservedArgs,
-  buildEnvUpdateCommandWithPreservedArgs,
-  getPreservedArgsForEnvAdd,
-  getPreservedArgsForEnvRm,
-  getPreservedArgsForEnvUpdate,
-  outputActionRequired,
-  outputAgentError,
-  quoteArg,
-  redactEnvValueArgs,
-  withGlobalFlags
-} from "../../chunks/chunk-26CU4Q3C.js";
-import "../../chunks/chunk-XPJLPUKO.js";
-import {
-  isAPIError
-} from "../../chunks/chunk-CV5YC2EN.js";
-import {
-  getCommandName,
-  getCommandNamePlain,
-  getFlagsSpecification,
-  getGlobalFlagsFromArgs,
-  require_lib
-} from "../../chunks/chunk-Q2DGFCO7.js";
-import {
-  emoji,
-  output_manager_default,
-  prependEmoji
-} from "../../chunks/chunk-2JIX6UMI.js";
-import "../../chunks/chunk-P4QNYOFB.js";
-import {
-  require_dist
-} from "../../chunks/chunk-ZW6HETRE.js";
-import {
-  require_source
-} from "../../chunks/chunk-S7KYDPEM.js";
-import {
-  __toESM
-} from "../../chunks/chunk-TZ2YI2VH.js";
-
-// src/commands/env/add.ts
-var import_chalk = __toESM(require_source(), 1);
-
-// src/util/env/add-env-record.ts
-var import_constants = __toESM(require_dist2(), 1);
-async function addEnvRecord(client, projectId, upsert, type, key, value, targets, gitBranch, visibility) {
-  const actionWord = upsert ? "Overriding" : "Adding";
-  output_manager_default.debug(
-    `${actionWord} ${type} Environment Variable ${key} to ${targets.length} targets`
-  );
-  const target = [];
-  const customEnvironmentIds = [];
-  for (const t of targets) {
-    const arr = import_constants.PROJECT_ENV_TARGET.includes(t) ? target : customEnvironmentIds;
-    arr.push(t);
-  }
-  const body = {
-    type,
-    key,
-    value,
-    target,
-    customEnvironmentIds: customEnvironmentIds.length > 0 ? customEnvironmentIds : void 0,
-    gitBranch: gitBranch || void 0,
-    ...visibility !== void 0 ? { visibility } : {}
-  };
-  const args = upsert ? `?upsert=${upsert}` : "";
-  const url = `/v10/projects/${projectId}/env${args}`;
-  await client.fetch(url, {
-    method: "POST",
-    body
-  });
-}
-
-// src/util/env/known-error.ts
-var import_error_utils = __toESM(require_dist(), 1);
-var knownErrorsCodes = /* @__PURE__ */ new Set([
-  "BAD_REQUEST",
-  "ENV_ALREADY_EXISTS",
-  "ENV_CONFLICT",
-  "EXISTING_KEY_AND_TARGET",
-  "FORBIDDEN",
-  "ID_NOT_FOUND",
-  "INVALID_KEY",
-  "INVALID_VALUE",
-  "KEY_INVALID_CHARACTERS",
-  "KEY_INVALID_LENGTH",
-  "KEY_RESERVED",
-  "RESERVED_ENV_VARIABLE",
-  "MAX_ENVS_EXCEEDED",
-  "MISSING_ID",
-  "MISSING_KEY",
-  "MISSING_TARGET",
-  "MISSING_VALUE",
-  "NOT_AUTHORIZED",
-  "NOT_DECRYPTABLE",
-  "SYSTEM_ENV_WITH_VALUE",
-  "TEAM_NOT_FOUND",
-  "TOO_MANY_IDS",
-  "TOO_MANY_KEYS",
-  "UNKNOWN_ERROR",
-  "VALUE_INVALID_LENGTH",
-  "VALUE_INVALID_TYPE"
-]);
-function isKnownError(error) {
-  const code = (0, import_error_utils.isErrnoException)(error) ? error.code : null;
-  if (!code)
-    return false;
-  return knownErrorsCodes.has(code.toUpperCase());
-}
-
-// src/util/telemetry/commands/env/add.ts
-var EnvAddTelemetryClient = class extends TelemetryClient {
-  trackCliArgumentName(name) {
-    if (name) {
-      this.trackCliArgument({
-        arg: "name",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliArgumentEnvironment(environment) {
-    if (environment) {
-      const allStandard = environment.split(",").map((t) => t.trim()).every((t) => STANDARD_ENVIRONMENTS.includes(t));
-      this.trackCliArgument({
-        arg: "environment",
-        value: allStandard ? environment : this.redactedValue
-      });
-    }
-  }
-  trackCliArgumentGitBranch(gitBranch) {
-    if (gitBranch) {
-      this.trackCliArgument({
-        arg: "git-branch",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliOptionGitBranch(gitBranch) {
-    if (gitBranch) {
-      this.trackCliOption({
-        option: "git-branch",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliOptionValue(value) {
-    if (value) {
-      this.trackCliOption({
-        option: "value",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliOptionVisibility(visibility) {
-    if (visibility) {
-      const validVisibilities = ["config", "secret"];
-      this.trackCliOption({
-        option: "visibility",
-        value: validVisibilities.includes(visibility) ? visibility : this.redactedValue
-      });
-    }
-  }
-  trackCliOptionType(type) {
-    if (type) {
-      const validTypes = ["config", "secret"];
-      this.trackCliOption({
-        option: "type",
-        value: validTypes.includes(type) ? type : this.redactedValue
-      });
-    }
-  }
-  trackCliFlagSensitive(sensitive) {
-    if (sensitive) {
-      this.trackCliFlag("sensitive");
-    }
-  }
-  trackCliFlagNoSensitive(noSensitive) {
-    if (noSensitive) {
-      this.trackCliFlag("no-sensitive");
-    }
-  }
-  trackCliFlagForce(force) {
-    if (force) {
-      this.trackCliFlag("force");
-    }
-  }
-  trackCliFlagGuidance(guidance) {
-    if (guidance) {
-      this.trackCliFlag("guidance");
-    }
-  }
-  trackCliFlagYes(yes) {
-    if (yes) {
-      this.trackCliFlag("yes");
-    }
-  }
-};
-
-// src/commands/env/add.ts
-import { determineAgent } from "@vercel/detect-agent";
-
-// src/util/env/secret-storage-guidance.ts
-function includesDevelopment(targets) {
-  return targets.length === 0 || targets.includes("development");
-}
-function getProductionSecretPolicyErrorKind(message) {
-  if (/production secrets?.*different value|different value.*production secrets?/i.test(
-    message
-  )) {
-    return "different-values";
-  }
-  if (/production secrets?.*(?:own environment group|separat)|(?:own environment group|separat).*production secrets?/i.test(
-    message
-  )) {
-    return "separate-environments";
-  }
-  return null;
-}
-function getProductionSecretPolicyRecovery(kind) {
-  return kind === "different-values" ? "Use different Secret values for Production and non-Production." : "Create separate Production and non-Production variables with different values.";
-}
-function getSecretStorageChoice(targets, recommendedReason) {
-  const availability = includesDevelopment(targets) ? "hidden in the dashboard; Development values can be pulled" : "hidden in the dashboard and unavailable to pulls";
-  const recommendation = recommendedReason ? `; recommended ${recommendedReason}` : "";
-  return `Secret (${availability}${recommendation})`;
-}
-function getDefaultSecretStorageGuidance(targets) {
-  if (includesDevelopment(targets)) {
-    return "Stored as Secret by default. This value is hidden in the dashboard; Development values can be pulled. Use `--type config` for other values you need to read later.";
-  }
-  return "Stored as Secret by default. This value is hidden in the dashboard and unavailable to pulls; use `--type config` for values you need to read later.";
-}
-
-// src/commands/env/add.ts
-function looksLikeCredentialName(key, publicPrefix = getPublicPrefix(key)) {
-  return looksLikeSecret(publicPrefix ? key.slice(publicPrefix.length) : key);
-}
-function filterEnvChoicesForSensitivity(choices, opts) {
-  if (opts.policyOn) {
-    return choices.filter((c) => c.value === "development");
-  }
-  return choices;
-}
-function getTargetCompatibilityError(envTargets, isSensitive, policyOn) {
-  const hasSensitiveCapable = envTargets.some((t) => t !== "development");
-  if (!isSensitive && policyOn && hasSensitiveCapable) {
-    return `Your team requires sensitive Environment Variables for Production and Preview. To add a non-sensitive value, target the Development Environment only. Run ${getCommandName(
-      "env add"
-    )} with the development target instead.`;
-  }
-  return null;
-}
-function resolveFinalType(envTargets, isSensitive, opts) {
-  const hasDevelopment = envTargets.includes("development");
-  if (hasDevelopment && !isSensitive) {
-    return "encrypted";
-  }
-  if (opts.forceEncrypted && !opts.policyOn) {
-    return "encrypted";
-  }
-  if (isSensitive || opts.forceSensitive || opts.policyOn) {
-    return "sensitive";
-  }
-  return "encrypted";
-}
-function fillEnvAddTemplate(template, opts) {
-  const targetPlaceholder = getEnvTargetPlaceholder();
-  return template.replace(/<name>/g, opts.envName ? quoteArg(opts.envName) : "<name>").split(targetPlaceholder).join(opts.envTargetArg ? quoteArg(opts.envTargetArg) : targetPlaceholder).replace(
-    /<git-branch>/g,
-    opts.envGitBranch ? quoteArg(opts.envGitBranch) : "<git-branch>"
-  ).replace(
-    /<gitbranch>/g,
-    opts.envGitBranch ? quoteArg(opts.envGitBranch) : "<gitbranch>"
-  ).replace(/<value>/g, "<value>");
-}
-function multiTargetSuggestion(argv, envName, targets, addNoSensitive) {
-  const flag = addNoSensitive ? " --no-sensitive" : "";
-  return {
-    command: buildEnvAddCommandWithPreservedArgs(
-      argv,
-      `env add ${envName} ${targets.join(",")} --value "<value>"${flag} --yes`
-    ),
-    when: addNoSensitive ? "Add one non-sensitive variable to all listed environments" : "Add one variable to multiple environments"
-  };
-}
-function filterSensitiveMultiTargetSuggestionTargets(targets, _opts) {
-  return targets;
-}
-function projectLabel(link) {
-  return `${link.org.slug}/${link.project.name}`;
-}
-function formatEnvironmentTarget(target, customEnvironments) {
-  const standardTarget = envTargetChoices.find(
-    (choice) => choice.value === target
-  );
-  if (standardTarget) {
-    return standardTarget.name;
-  }
-  const customEnvironment = customEnvironments.find(
-    (env) => env.id === target || env.slug === target
-  );
-  return customEnvironment?.slug ?? target;
-}
-function formatEnvironmentTargets(envTargets, customEnvironments) {
-  return envTargets.map((target) => formatEnvironmentTarget(target, customEnvironments)).join(", ");
-}
-function printEnvAddResult(link, envName, envTargets, envGitBranch, customEnvironments, finalType, force, visibility) {
-  output_manager_default.print("\n");
-  printAlignedLabel(force ? "Overrode" : "Added", envName, { gutter: "\u2713" });
-  printAlignedLabel("Project", projectLabel(link));
-  printAlignedLabel(
-    "Environments",
-    formatEnvironmentTargets(envTargets, customEnvironments)
-  );
-  if (envGitBranch) {
-    printAlignedLabel("Branch", envGitBranch);
-  }
-  const visibilityLabel = formatVisibilityLabel(visibility, finalType);
-  if (visibilityLabel) {
-    printAlignedLabel("Type", visibilityLabel);
-  }
-}
-function printEnvAddWarning(message) {
-  output_manager_default.print(`${import_chalk.default.yellow("!")} ${message}
-`);
-}
-function promptEnvValue(client, opts) {
-  return client.input.text({
-    message: `Value?`,
-    ...opts.isSensitive ? { transformer: (value) => "*".repeat(value.length) } : {}
-  });
-}
-function buildHumanEnvAddCommand(argv, commandTemplate) {
-  const globalFlags = getGlobalFlagsFromArgs(argv.slice(2), {
-    preserveProject: true
-  }).filter((flag) => !flag.startsWith("--non-interactive"));
-  const suffix = globalFlags.length > 0 ? ` ${globalFlags.map(quoteArg).join(" ")}` : "";
-  return getCommandNamePlain(`${commandTemplate}${suffix}`);
-}
-async function add(client, argv) {
-  let parsedArgs;
-  const flagsSpecification = getFlagsSpecification(addSubcommand.options);
-  try {
-    parsedArgs = parseArguments(argv, flagsSpecification);
-  } catch (err) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "invalid_arguments",
-          message: err instanceof Error ? err.message : String(err)
-        },
-        1
-      );
-    }
-    printError(err);
-    return 1;
-  }
-  const { args, flags: opts } = parsedArgs;
-  const stdInput = await readStandardInput(client.stdin);
-  const valueFromFlag = typeof opts["--value"] === "string" ? opts["--value"] : void 0;
-  let [envName, envTargetArg] = args;
-  const positionalGitBranch = args[2];
-  const optionGitBranch = typeof opts["--git-branch"] === "string" ? opts["--git-branch"] : void 0;
-  let envGitBranch = optionGitBranch ?? positionalGitBranch;
-  const forceSensitive = Boolean(opts["--sensitive"]);
-  const forceEncrypted = Boolean(opts["--no-sensitive"]);
-  const typeOption = resolveEnvVarTypeOption({
-    type: typeof opts["--type"] === "string" ? opts["--type"] : void 0,
-    visibility: typeof opts["--visibility"] === "string" ? opts["--visibility"] : void 0
-  });
-  let explicitType = typeOption.explicitVisibility;
-  let typeSource = explicitType || forceSensitive || forceEncrypted ? "argv" : void 0;
-  const telemetryClient = new EnvAddTelemetryClient({
-    opts: {
-      store: client.telemetryEventStore
-    }
-  });
-  telemetryClient.trackCliArgumentName(envName);
-  telemetryClient.trackCliArgumentEnvironment(envTargetArg);
-  telemetryClient.trackCliArgumentGitBranch(positionalGitBranch);
-  telemetryClient.trackCliOptionGitBranch(optionGitBranch);
-  telemetryClient.trackCliOptionValue(
-    valueFromFlag === void 0 ? void 0 : "<redacted>"
-  );
-  telemetryClient.trackCliFlagSensitive(opts["--sensitive"]);
-  telemetryClient.trackCliFlagNoSensitive(opts["--no-sensitive"]);
-  telemetryClient.trackCliFlagForce(opts["--force"]);
-  telemetryClient.trackCliFlagGuidance(opts["--guidance"]);
-  telemetryClient.trackCliFlagYes(opts["--yes"]);
-  telemetryClient.trackCliOptionType(
-    typeof opts["--type"] === "string" ? opts["--type"] : void 0
-  );
-  telemetryClient.trackCliOptionVisibility(
-    typeof opts["--visibility"] === "string" ? opts["--visibility"] : void 0
-  );
-  telemetryClient.trackCliOptionProject(opts["--project"]);
-  if (typeOption.error) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: typeOption.errorReason ?? "invalid_type",
-          message: typeOption.error
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(typeOption.error);
-    return 1;
-  }
-  if (typeOption.usedDeprecatedVisibility) {
-    printEnvAddWarning(ENV_VISIBILITY_DEPRECATION_MESSAGE);
-  }
-  const typeConflictMessage = forceSensitive ? forceEncrypted ? "`--sensitive` and `--no-sensitive` cannot be used together. Pick one." : explicitType === "config" ? "`--type config` cannot be used with `--sensitive`. Pick one." : null : forceEncrypted && explicitType === "secret" ? "`--type secret` cannot be used with `--no-sensitive`. Pick one." : null;
-  if (typeConflictMessage) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "conflicting_type_flags",
-          message: typeConflictMessage
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(typeConflictMessage);
-    return 1;
-  }
-  if (positionalGitBranch && optionGitBranch) {
-    output_manager_default.error(
-      "Git branch was provided twice. Use either `--git-branch <git-branch>` or the legacy third argument."
-    );
-    return 1;
-  }
-  if (args.length > 3) {
-    output_manager_default.error(
-      `Invalid number of arguments. Usage: ${getCommandName(
-        `env add <name> ${getEnvTargetPlaceholder()} --git-branch <git-branch>`
-      )}`
-    );
-    return 1;
-  }
-  if (stdInput && (!envName || !envTargetArg)) {
-    output_manager_default.error(
-      `Invalid number of arguments. Usage: ${getCommandName(
-        `env add <name> <target> --git-branch <git-branch> < <file>`
-      )}`
-    );
-    return 1;
-  }
-  let envTargets = envTargetArg ? parseEnvTargetArg(envTargetArg) : [];
-  let resolvedLink;
-  if (client.nonInteractive) {
-    const link2 = await resolveProjectContext({
-      client,
-      projectNameOrId: opts["--project"]
-    });
-    if (link2.status === "error") {
-      return link2.exitCode;
-    }
-    if (link2.status === "not_linked") {
-      const preserved = getPreservedArgsForEnvAdd(client.argv);
-      const linkPreserved = preserved.filter((a, i) => {
-        if (a === "--value")
-          return false;
-        if (a.startsWith("--value="))
-          return false;
-        if (i > 0 && preserved[i - 1] === "--value")
-          return false;
-        return true;
-      });
-      const linkArgv = [
-        ...client.argv.slice(0, 2),
-        "link",
-        "--scope",
-        "<scope>",
-        ...linkPreserved
-      ];
-      let envAddRetryArgv = redactEnvValueArgs(client.argv);
-      if (envTargetArg === "preview" && envGitBranch === void 0) {
-        const argvArgs = client.argv.slice(2);
-        const addIdx = argvArgs.indexOf("add");
-        if (addIdx !== -1) {
-          let pos = addIdx + 1;
-          let positionals = 0;
-          while (pos < argvArgs.length && positionals < 3 && !argvArgs[pos].startsWith("-")) {
-            positionals++;
-            pos++;
-          }
-          const insertAt = 2 + pos;
-          envAddRetryArgv = redactEnvValueArgs([
-            ...client.argv.slice(0, insertAt),
-            "<gitbranch>",
-            ...client.argv.slice(insertAt)
-          ]);
-        }
-      }
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "not_linked",
-          message: `Your codebase isn't linked to a project on Vercel. Run \`${getCommandNamePlain(
-            "link"
-          )}\` to begin. Use \`--yes\` for non-interactive mode; use \`--scope\` or \`--project\` to specify a team or project. Then run your \`env add\` command.`,
-          next: [
-            { command: buildCommandWithYes(linkArgv) },
-            { command: buildCommandWithYes(envAddRetryArgv) }
-          ]
-        },
-        1
-      );
-    }
-    if (link2.status !== "linked")
-      return 1;
-    resolvedLink = link2;
-    const { project: project2 } = link2;
-    const org = link2.org;
-    client.config.currentTeam = org.type === "team" ? org.id : void 0;
-    const [{ envs: envs2 }, customEnvironments2] = await Promise.all([
-      getEnvRecords(client, project2.id, "vercel-cli:env:add"),
-      getCustomEnvironments(client, project2.id)
-    ]);
-    const matchingEnvs2 = envs2.filter((r) => r.key === envName);
-    const existingTargets2 = /* @__PURE__ */ new Set();
-    const existingCustomEnvs2 = /* @__PURE__ */ new Set();
-    for (const env of matchingEnvs2) {
-      if (typeof env.target === "string") {
-        existingTargets2.add(env.target);
-      } else if (Array.isArray(env.target)) {
-        for (const target of env.target) {
-          existingTargets2.add(target);
-        }
-      }
-      if (env.customEnvironmentIds) {
-        for (const customEnvId of env.customEnvironmentIds) {
-          existingCustomEnvs2.add(customEnvId);
-        }
-      }
-    }
-    const choices2 = [
-      ...envTargetChoices.filter((c) => !existingTargets2.has(c.value)),
-      ...customEnvironments2.filter((c) => !existingCustomEnvs2.has(c.id)).map((c) => ({
-        name: c.slug,
-        value: c.id
-      }))
-    ];
-    const missing = [];
-    if (!envName)
-      missing.push("missing_name");
-    if (valueFromFlag === void 0 && !stdInput)
-      missing.push("missing_value");
-    if (!envTargetArg && choices2.length > 0)
-      missing.push("missing_environment");
-    if (envTargetArg === "preview" && envGitBranch === void 0 && !(client.nonInteractive && args.length === 2)) {
-      missing.push("git_branch_required");
-    }
-    if (missing.length > 0) {
-      const parts = missing.map((m) => {
-        if (m === "missing_name")
-          return "variable name";
-        if (m === "missing_value")
-          return "--value or stdin";
-        if (m === "missing_environment")
-          return "environment (production, preview, development, or a comma-separated list)";
-        if (m === "git_branch_required")
-          return "`--git-branch <git-branch>` for Preview, or omit for all Preview branches";
-        return m;
-      });
-      const fullTemplate = `env add <name> ${getEnvTargetPlaceholder()} --value "<value>" --yes`;
-      const filledTemplate = fillEnvAddTemplate(fullTemplate, {
-        envName,
-        envTargetArg,
-        envGitBranch
-      });
-      const next = [];
-      const onlyGitBranchMissing = missing.length === 1 && missing[0] === "git_branch_required";
-      if (!onlyGitBranchMissing) {
-        next.push({
-          command: buildEnvAddCommandWithPreservedArgs(
-            client.argv,
-            filledTemplate
-          )
-        });
-      }
-      if (missing.includes("git_branch_required") && envName && (valueFromFlag !== void 0 || stdInput)) {
-        const branchSpecific = fillEnvAddTemplate(
-          'env add <name> preview --git-branch <git-branch> --value "<value>" --yes',
-          { envName, envTargetArg: "preview" }
-        );
-        const branchAll = fillEnvAddTemplate(
-          'env add <name> preview --value "<value>" --yes',
-          { envName, envTargetArg: "preview" }
-        );
-        next.push(
-          {
-            command: buildEnvAddCommandWithPreservedArgs(
-              client.argv,
-              branchSpecific
-            ),
-            when: "Add to a specific Git branch"
-          },
-          {
-            command: buildEnvAddCommandWithPreservedArgs(
-              client.argv,
-              branchAll
-            ),
-            when: "Add to all Preview branches"
-          }
-        );
-      }
-      if (missing.includes("missing_environment")) {
-        const standardAvailable = choices2.map((c) => c.value).filter((v) => isValidEnvTarget(v));
-        const multiTargets = filterSensitiveMultiTargetSuggestionTargets(
-          standardAvailable,
-          {
-            forceSensitive: Boolean(opts["--sensitive"]),
-            policyOn: false
-          }
-        );
-        if (multiTargets.length > 1) {
-          next.push(
-            multiTargetSuggestion(
-              client.argv,
-              envName || "<name>",
-              multiTargets,
-              multiTargets.includes("development") && !opts["--no-sensitive"]
-            )
-          );
-        }
-      }
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "missing_requirements",
-          missing,
-          message: `Provide all required inputs for non-interactive mode: ${parts.join("; ")}. Example: \`${filledTemplate}\``,
-          next
-        },
-        1
-      );
-    }
-  }
-  if (!envName) {
-    envName = await client.input.text({
-      message: `Name?`,
-      validate: (val) => val ? true : "Name cannot be empty"
-    });
-  }
-  if (!resolvedLink) {
-    const link2 = await resolveProjectContext({
-      client,
-      projectNameOrId: opts["--project"]
-    });
-    if (link2.status === "error") {
-      return link2.exitCode;
-    } else if (link2.status === "not_linked") {
-      if (client.nonInteractive) {
-        const preserved = getPreservedArgsForEnvAdd(client.argv);
-        const linkPreserved = preserved.filter((a, i) => {
-          if (a === "--value")
-            return false;
-          if (a.startsWith("--value="))
-            return false;
-          if (i > 0 && preserved[i - 1] === "--value")
-            return false;
-          return true;
-        });
-        const linkArgv = [
-          ...client.argv.slice(0, 2),
-          "link",
-          "--scope",
-          "<scope>",
-          ...linkPreserved
-        ];
-        outputAgentError(
-          client,
-          {
-            status: "error",
-            reason: "not_linked",
-            message: `Your codebase isn't linked to a project on Vercel. Run ${getCommandNamePlain(
-              "link"
-            )} to begin. Use --yes for non-interactive; use --scope or --project to specify team or project. Then run your env add command.`,
-            next: [
-              { command: buildCommandWithYes(linkArgv) },
-              { command: buildCommandWithYes(redactEnvValueArgs(client.argv)) }
-            ]
-          },
-          1
-        );
-      } else {
-        output_manager_default.error(
-          `Your codebase isn\u2019t linked to a project on Vercel. Run ${getCommandName(
-            "link"
-          )} to begin.`
-        );
-      }
-      return 1;
-    }
-    resolvedLink = link2;
-  }
-  const link = resolvedLink;
-  client.config.currentTeam = link.org.type === "team" ? link.org.id : void 0;
-  const { project } = link;
-  if (explicitType === "secret" || forceSensitive) {
-    const publicPrefixError = getPublicPrefixSecretVisibilityError(envName, {
-      visibility: explicitType === "secret" ? "secret" : void 0,
-      type: "sensitive",
-      context: "add"
-    });
-    if (publicPrefixError) {
-      if (client.nonInteractive) {
-        outputAgentError(
-          client,
-          {
-            status: "error",
-            reason: "invalid_type",
-            message: publicPrefixError
-          },
-          1
-        );
-      }
-      output_manager_default.fatal(publicPrefixError);
-      return 1;
-    }
-  }
-  let keyAccepted = false;
-  while (!keyAccepted) {
-    const apiPublicPrefix2 = getApiPublicPrefix(envName);
-    const frameworkPublicPrefix = getFrameworkPublicPrefix(
-      project.framework,
-      envName
-    );
-    const globallyKnownPrefix = getPublicPrefix(envName);
-    const deferFrameworkSecretError = frameworkPublicPrefix !== null && (explicitType === "secret" || forceSensitive);
-    const keyWarnings = deferFrameworkSecretError || globallyKnownPrefix !== null && apiPublicPrefix2 === null && frameworkPublicPrefix === null ? [] : getEnvKeyWarnings(envName);
-    const sensitiveWarning = keyWarnings.find((w) => w.requiresConfirmation);
-    if (!sensitiveWarning) {
-      for (const warning of keyWarnings) {
-        printEnvAddWarning(warning.message);
-      }
-      keyAccepted = true;
-      break;
-    }
-    const nameWithoutPrefix = removePublicPrefix(envName);
-    const publicPrefix = getPublicPrefix(envName);
-    if (typeSource === "argv") {
-      for (const warning of keyWarnings) {
-        printEnvAddWarning(warning.message);
-      }
-      keyAccepted = true;
-      break;
-    }
-    const privateCommand = buildEnvAddCommandWithPreservedArgs(
-      client.argv,
-      `env add ${nameWithoutPrefix} ${envTargetArg ?? getEnvTargetPlaceholder()} --type secret --value "<value>" --yes`
-    );
-    const publicCommand = buildEnvAddCommandWithPreservedArgs(
-      client.argv,
-      `env add ${envName} ${envTargetArg ?? getEnvTargetPlaceholder()} --type config --value "<value>" --yes`
-    );
-    const humanTargetArg = envTargetArg ? ` ${envTargetArg}` : "";
-    const privateHumanCommand = buildHumanEnvAddCommand(
-      client.argv,
-      `env add ${nameWithoutPrefix}${humanTargetArg} --type secret`
-    );
-    const publicHumanCommand = buildHumanEnvAddCommand(
-      client.argv,
-      `env add ${envName}${humanTargetArg} --type config`
-    );
-    const message = `\`${envName}\` looks like a credential, and \`${publicPrefix}\` exposes its value to anyone visiting your site. Choose explicitly: rename to \`${nameWithoutPrefix}\` with \`--type secret\` to keep it private, or keep the name with \`--type config\` to expose it.`;
-    if (client.nonInteractive || opts["--yes"] || !!stdInput) {
-      if (client.nonInteractive) {
-        outputActionRequired(client, {
-          status: "action_required",
-          reason: "public_prefix_requires_type",
-          message,
-          choices: [
-            {
-              id: "private",
-              name: `Keep private: rename to ${nameWithoutPrefix} and use Secret`
-            },
-            {
-              id: "public",
-              name: `Expose publicly: keep ${envName} as Config`
-            }
-          ],
-          next: [
-            {
-              command: privateCommand,
-              when: "Keep it private; replace <value> before running"
-            },
-            {
-              command: publicCommand,
-              when: "Expose it publicly; replace <value> before running"
-            }
-          ]
-        });
-      }
-      output_manager_default.fatal(message);
-      output_manager_default.print(`  Keep it private:
+import{CHECKBOX_INSTRUCTIONS,getCustomEnvironments,readStandardInput,require_dist as require_dist3}from"../../chunks/chunk-COQGD2EI.js";import{getInvalidSubcommand}from"../../chunks/chunk-TG2RCYTH.js";import{ellipsis}from"../../chunks/chunk-ZDX75YNZ.js";import{formatTable}from"../../chunks/chunk-NUGLE4QY.js";import"../../chunks/chunk-MBL6TXEJ.js";import{isGuidanceEnabled,suggestNextCommands}from"../../chunks/chunk-6YAADRQB.js";import{formatEnvironment}from"../../chunks/chunk-4QX77CP7.js";import{validateLsArgs}from"../../chunks/chunk-3TXEXPUW.js";import{validateJsonOutput}from"../../chunks/chunk-D4MW3RDW.js";import{getSubcommand}from"../../chunks/chunk-ETV3C2CV.js";import{getCommandAliases}from"../../chunks/chunk-BATE73HA.js";import"../../chunks/chunk-3QT7VOE3.js";import"../../chunks/chunk-O7G3CZ42.js";import"../../chunks/chunk-N3N5UHIL.js";import"../../chunks/chunk-YMVDWVMO.js";import"../../chunks/chunk-M5AV545M.js";import"../../chunks/chunk-IVWPQYIH.js";import"../../chunks/chunk-3QHJYVCY.js";import"../../chunks/chunk-NBVY237X.js";import"../../chunks/chunk-WUZD4KBL.js";import"../../chunks/chunk-MEAY2K5Z.js";import"../../chunks/chunk-EQ52F4LH.js";import"../../chunks/chunk-7R5FEXZ5.js";import"../../chunks/chunk-FKCOBJFH.js";import"../../chunks/chunk-CVKB54WW.js";import"../../chunks/chunk-JKTQV2QJ.js";import"../../chunks/chunk-JEIMW3CO.js";import"../../chunks/chunk-ZKYS7EAB.js";import{autoInstallVercelPlugin}from"../../chunks/chunk-TJCIHDPZ.js";import{require_execa}from"../../chunks/chunk-HBFPLBTX.js";import{stamp_default}from"../../chunks/chunk-XPXOV5UO.js";import"../../chunks/chunk-2I64AYHG.js";import"../../chunks/chunk-SOJCELXH.js";import"../../chunks/chunk-JZRMH5UA.js";import{require_ms}from"../../chunks/chunk-QTKJC2O5.js";import{ENV_VISIBILITY_DEPRECATION_MESSAGE,SENSITIVE_ENV_VALUE_PLACEHOLDER,formatVisibilityLabel,getApiPublicPrefix,getEnvKeyWarnings,getEnvRecords,getFrameworkPublicPrefix,getLocalSecretFallbackMessage,getLocalSvelteKitPublicPrefixes,getPublicPrefix,getPublicPrefixSecretVisibilityError,getUnavailableSecretValuesMessage,isFlagsSecretNeedingSplit,isSecretEnvVar,looksLikeSecret,looksLikeSecretValue,normalizeStdinEnvValue,pull,pullEnvRecords,removePublicPrefix,resolveEnvVarTypeOption,resolveEnvVarVisibility,shouldConfirmRotationBeforeDelete,validateEnvValue}from"../../chunks/chunk-OKZDOANA.js";import{resolveProjectContext}from"../../chunks/chunk-ENS6KX2F.js";import"../../chunks/chunk-L243RUIR.js";import"../../chunks/chunk-ULLWCOYC.js";import"../../chunks/chunk-KK4AJES5.js";import"../../chunks/chunk-N6CNMMSZ.js";import"../../chunks/chunk-CN2QZO4U.js";import"../../chunks/chunk-HZZ5L472.js";import"../../chunks/chunk-LDM3SQAU.js";import"../../chunks/chunk-ENBTTYJR.js";import"../../chunks/chunk-XQ73QIQ3.js";import{addSubcommand,envCommand,envTargetChoices,getEnvTargetPlaceholder,isValidEnvTarget,listSubcommand,parseEnvTargetArg,pullSubcommand,removeSubcommand,runSubcommand,updateSubcommand}from"../../chunks/chunk-K3KJZLBD.js";import{param}from"../../chunks/chunk-SXUEGVWB.js";import{STANDARD_ENVIRONMENTS,formatProject}from"../../chunks/chunk-YV6CTDHR.js";import{help}from"../../chunks/chunk-2B2MN3U5.js";import"../../chunks/chunk-6TAQ6OWD.js";import{parseTarget}from"../../chunks/chunk-GRNTLNC7.js";import"../../chunks/chunk-G7Y77DFH.js";import"../../chunks/chunk-JYAUUIR4.js";import"../../chunks/chunk-WPS6JZF6.js";import{buildCommandWithYes,buildEnvAddCommandWithPreservedArgs,buildEnvRmCommandWithPreservedArgs,buildEnvUpdateCommandWithPreservedArgs,getPreservedArgsForEnvAdd,getPreservedArgsForEnvRm,getPreservedArgsForEnvUpdate,outputActionRequired,outputAgentError,quoteArg,redactEnvValueArgs,withGlobalFlags}from"../../chunks/chunk-NS4FH2TY.js";import"../../chunks/chunk-5QQNYN4N.js";import{TelemetryClient,require_dist as require_dist2}from"../../chunks/chunk-57GHYR4Y.js";import"../../chunks/chunk-RCTYVKM5.js";import{parseArguments}from"../../chunks/chunk-HTC6KO2B.js";import"../../chunks/chunk-5XJNPXQK.js";import{printError}from"../../chunks/chunk-LNPMDXBJ.js";import"../../chunks/chunk-MY4MONOH.js";import"../../chunks/chunk-7T6TL3GQ.js";import"../../chunks/chunk-BRK4OB4B.js";import"../../chunks/chunk-VLZ47RWM.js";import"../../chunks/chunk-F2ZWW2IO.js";import"../../chunks/chunk-B4ATVYZW.js";import"../../chunks/chunk-PPCFQQSU.js";import"../../chunks/chunk-OSCCYU74.js";import{getFlagsSpecification,getGlobalFlagsFromArgs}from"../../chunks/chunk-JAJW3P42.js";import{printAlignedLabel}from"../../chunks/chunk-XSVBYDYI.js";import{getTeamByIdOrSlug}from"../../chunks/chunk-EVZRQGNK.js";import{isAPIError}from"../../chunks/chunk-R2TGGVCT.js";import{getCommandName,getCommandNamePlain,require_lib}from"../../chunks/chunk-FI772UVH.js";import"../../chunks/chunk-XFVGX5HG.js";import{emoji,output_manager_default,prependEmoji}from"../../chunks/chunk-Z6Y55QJW.js";import{require_dist}from"../../chunks/chunk-QGIQK47P.js";import"../../chunks/chunk-AVSPFBLM.js";import"../../chunks/chunk-XCJDGQO7.js";import"../../chunks/chunk-YPTLSODC.js";import"../../chunks/chunk-7HL2RPUO.js";import{require_source}from"../../chunks/chunk-U7KCDTCH.js";import"../../chunks/chunk-N3ZZ7FHQ.js";import"../../chunks/chunk-GU6VIFR5.js";import{__toESM}from"../../chunks/chunk-6L236MNA.js";var import_chalk=__toESM(require_source(),1);var import_constants=__toESM(require_dist2(),1);async function addEnvRecord(client,projectId,upsert,type,key,value,targets,gitBranch,visibility){let actionWord=upsert?"Overriding":"Adding";output_manager_default.debug(`${actionWord} ${type} Environment Variable ${key} to ${targets.length} targets`);let target=[],customEnvironmentIds=[];for(let t of targets)(import_constants.PROJECT_ENV_TARGET.includes(t)?target:customEnvironmentIds).push(t);let body={type,key,value,target,customEnvironmentIds:customEnvironmentIds.length>0?customEnvironmentIds:void 0,gitBranch:gitBranch||void 0,...visibility!==void 0?{visibility}:{}},args=upsert?`?upsert=${upsert}`:"",url=`/v10/projects/${projectId}/env${args}`;await client.fetch(url,{method:"POST",body})}var import_error_utils=__toESM(require_dist(),1),knownErrorsCodes=new Set(["BAD_REQUEST","ENV_ALREADY_EXISTS","ENV_CONFLICT","EXISTING_KEY_AND_TARGET","FORBIDDEN","ID_NOT_FOUND","INVALID_KEY","INVALID_VALUE","KEY_INVALID_CHARACTERS","KEY_INVALID_LENGTH","KEY_RESERVED","RESERVED_ENV_VARIABLE","MAX_ENVS_EXCEEDED","MISSING_ID","MISSING_KEY","MISSING_TARGET","MISSING_VALUE","NOT_AUTHORIZED","NOT_DECRYPTABLE","SYSTEM_ENV_WITH_VALUE","TEAM_NOT_FOUND","TOO_MANY_IDS","TOO_MANY_KEYS","UNKNOWN_ERROR","VALUE_INVALID_LENGTH","VALUE_INVALID_TYPE"]);function isKnownError(error){let code=(0,import_error_utils.isErrnoException)(error)?error.code:null;return code?knownErrorsCodes.has(code.toUpperCase()):!1}var EnvAddTelemetryClient=class extends TelemetryClient{trackCliArgumentName(name){name&&this.trackCliArgument({arg:"name",value:this.redactedValue})}trackCliArgumentEnvironment(environment){if(environment){let allStandard=environment.split(",").map(t=>t.trim()).every(t=>STANDARD_ENVIRONMENTS.includes(t));this.trackCliArgument({arg:"environment",value:allStandard?environment:this.redactedValue})}}trackCliArgumentGitBranch(gitBranch){gitBranch&&this.trackCliArgument({arg:"git-branch",value:this.redactedValue})}trackCliOptionGitBranch(gitBranch){gitBranch&&this.trackCliOption({option:"git-branch",value:this.redactedValue})}trackCliOptionValue(value){value&&this.trackCliOption({option:"value",value:this.redactedValue})}trackCliOptionVisibility(visibility){if(visibility){let validVisibilities=["config","secret"];this.trackCliOption({option:"visibility",value:validVisibilities.includes(visibility)?visibility:this.redactedValue})}}trackCliOptionType(type){if(type){let validTypes=["config","secret"];this.trackCliOption({option:"type",value:validTypes.includes(type)?type:this.redactedValue})}}trackCliFlagSensitive(sensitive){sensitive&&this.trackCliFlag("sensitive")}trackCliFlagNoSensitive(noSensitive){noSensitive&&this.trackCliFlag("no-sensitive")}trackCliFlagForce(force){force&&this.trackCliFlag("force")}trackCliFlagGuidance(guidance){guidance&&this.trackCliFlag("guidance")}trackCliFlagYes(yes){yes&&this.trackCliFlag("yes")}};import{determineAgent}from"@vercel/detect-agent";function includesDevelopment(targets){return targets.length===0||targets.includes("development")}function getProductionSecretPolicyErrorKind(message){return/production secrets?.*different value|different value.*production secrets?/i.test(message)?"different-values":/production secrets?.*(?:own environment group|separat)|(?:own environment group|separat).*production secrets?/i.test(message)?"separate-environments":null}function getProductionSecretPolicyRecovery(kind){return kind==="different-values"?"Use different Secret values for Production and non-Production.":"Create separate Production and non-Production variables with different values."}function getSecretStorageChoice(targets,recommendedReason){let availability=includesDevelopment(targets)?"hidden in the dashboard; Development values can be pulled":"hidden in the dashboard and unavailable to pulls",recommendation=recommendedReason?`; recommended ${recommendedReason}`:"";return`Secret (${availability}${recommendation})`}function getDefaultSecretStorageGuidance(targets){return includesDevelopment(targets)?"Stored as Secret by default. This value is hidden in the dashboard; Development values can be pulled. Use `--type config` for other values you need to read later.":"Stored as Secret by default. This value is hidden in the dashboard and unavailable to pulls; use `--type config` for values you need to read later."}function looksLikeCredentialName(key,publicPrefix=getPublicPrefix(key)){return looksLikeSecret(publicPrefix?key.slice(publicPrefix.length):key)}function filterEnvChoicesForSensitivity(choices,opts){return opts.policyOn?choices.filter(c=>c.value==="development"):choices}function getTargetCompatibilityError(envTargets,isSensitive,policyOn){let hasSensitiveCapable=envTargets.some(t=>t!=="development");return!isSensitive&&policyOn&&hasSensitiveCapable?`Your team requires sensitive Environment Variables for Production and Preview. To add a non-sensitive value, target the Development Environment only. Run ${getCommandName("env add")} with the development target instead.`:null}function resolveFinalType(envTargets,isSensitive,opts){return envTargets.includes("development")&&!isSensitive||opts.forceEncrypted&&!opts.policyOn?"encrypted":isSensitive||opts.forceSensitive||opts.policyOn?"sensitive":"encrypted"}function fillEnvAddTemplate(template,opts){let targetPlaceholder=getEnvTargetPlaceholder();return template.replace(/<name>/g,opts.envName?quoteArg(opts.envName):"<name>").split(targetPlaceholder).join(opts.envTargetArg?quoteArg(opts.envTargetArg):targetPlaceholder).replace(/<git-branch>/g,opts.envGitBranch?quoteArg(opts.envGitBranch):"<git-branch>").replace(/<gitbranch>/g,opts.envGitBranch?quoteArg(opts.envGitBranch):"<gitbranch>").replace(/<value>/g,"<value>")}function multiTargetSuggestion(argv,envName,targets,addNoSensitive){let flag=addNoSensitive?" --no-sensitive":"";return{command:buildEnvAddCommandWithPreservedArgs(argv,`env add ${envName} ${targets.join(",")} --value "<value>"${flag} --yes`),when:addNoSensitive?"Add one non-sensitive variable to all listed environments":"Add one variable to multiple environments"}}function filterSensitiveMultiTargetSuggestionTargets(targets,_opts){return targets}function projectLabel(link){return`${link.org.slug}/${link.project.name}`}function formatEnvironmentTarget(target,customEnvironments){let standardTarget=envTargetChoices.find(choice=>choice.value===target);return standardTarget?standardTarget.name:customEnvironments.find(env=>env.id===target||env.slug===target)?.slug??target}function formatEnvironmentTargets(envTargets,customEnvironments){return envTargets.map(target=>formatEnvironmentTarget(target,customEnvironments)).join(", ")}function printEnvAddResult(link,envName,envTargets,envGitBranch,customEnvironments,finalType,force,visibility){output_manager_default.print(`
+`),printAlignedLabel(force?"Overrode":"Added",envName,{gutter:"\u2713"}),printAlignedLabel("Project",projectLabel(link)),printAlignedLabel("Environments",formatEnvironmentTargets(envTargets,customEnvironments)),envGitBranch&&printAlignedLabel("Branch",envGitBranch);let visibilityLabel=formatVisibilityLabel(visibility,finalType);visibilityLabel&&printAlignedLabel("Type",visibilityLabel)}function printEnvAddWarning(message){output_manager_default.print(`${import_chalk.default.yellow("!")} ${message}
+`)}function promptEnvValue(client,opts){return client.input.text({message:"Value?",...opts.isSensitive?{transformer:value=>"*".repeat(value.length)}:{}})}function buildHumanEnvAddCommand(argv,commandTemplate){let globalFlags=getGlobalFlagsFromArgs(argv.slice(2),{preserveProject:!0}).filter(flag=>!flag.startsWith("--non-interactive")),suffix=globalFlags.length>0?` ${globalFlags.map(quoteArg).join(" ")}`:"";return getCommandNamePlain(`${commandTemplate}${suffix}`)}async function add(client,argv){let parsedArgs,flagsSpecification=getFlagsSpecification(addSubcommand.options);try{parsedArgs=parseArguments(argv,flagsSpecification)}catch(err){return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_arguments",message:err instanceof Error?err.message:String(err)},1),printError(err),1}let{args,flags:opts}=parsedArgs,stdInput=await readStandardInput(client.stdin),valueFromFlag=typeof opts["--value"]=="string"?opts["--value"]:void 0,[envName,envTargetArg]=args,positionalGitBranch=args[2],optionGitBranch=typeof opts["--git-branch"]=="string"?opts["--git-branch"]:void 0,envGitBranch=optionGitBranch??positionalGitBranch,forceSensitive=!!opts["--sensitive"],forceEncrypted=!!opts["--no-sensitive"],typeOption=resolveEnvVarTypeOption({type:typeof opts["--type"]=="string"?opts["--type"]:void 0,visibility:typeof opts["--visibility"]=="string"?opts["--visibility"]:void 0}),explicitType=typeOption.explicitVisibility,typeSource=explicitType||forceSensitive||forceEncrypted?"argv":void 0,telemetryClient=new EnvAddTelemetryClient({opts:{store:client.telemetryEventStore}});if(telemetryClient.trackCliArgumentName(envName),telemetryClient.trackCliArgumentEnvironment(envTargetArg),telemetryClient.trackCliArgumentGitBranch(positionalGitBranch),telemetryClient.trackCliOptionGitBranch(optionGitBranch),telemetryClient.trackCliOptionValue(valueFromFlag===void 0?void 0:"<redacted>"),telemetryClient.trackCliFlagSensitive(opts["--sensitive"]),telemetryClient.trackCliFlagNoSensitive(opts["--no-sensitive"]),telemetryClient.trackCliFlagForce(opts["--force"]),telemetryClient.trackCliFlagGuidance(opts["--guidance"]),telemetryClient.trackCliFlagYes(opts["--yes"]),telemetryClient.trackCliOptionType(typeof opts["--type"]=="string"?opts["--type"]:void 0),telemetryClient.trackCliOptionVisibility(typeof opts["--visibility"]=="string"?opts["--visibility"]:void 0),telemetryClient.trackCliOptionProject(opts["--project"]),typeOption.error)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:typeOption.errorReason??"invalid_type",message:typeOption.error},1),output_manager_default.fatal(typeOption.error),1;typeOption.usedDeprecatedVisibility&&printEnvAddWarning(ENV_VISIBILITY_DEPRECATION_MESSAGE);let typeConflictMessage=forceSensitive?forceEncrypted?"`--sensitive` and `--no-sensitive` cannot be used together. Pick one.":explicitType==="config"?"`--type config` cannot be used with `--sensitive`. Pick one.":null:forceEncrypted&&explicitType==="secret"?"`--type secret` cannot be used with `--no-sensitive`. Pick one.":null;if(typeConflictMessage)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"conflicting_type_flags",message:typeConflictMessage},1),output_manager_default.fatal(typeConflictMessage),1;if(positionalGitBranch&&optionGitBranch)return output_manager_default.error("Git branch was provided twice. Use either `--git-branch <git-branch>` or the legacy third argument."),1;if(args.length>3)return output_manager_default.error(`Invalid number of arguments. Usage: ${getCommandName(`env add <name> ${getEnvTargetPlaceholder()} --git-branch <git-branch>`)}`),1;if(stdInput&&(!envName||!envTargetArg))return output_manager_default.error(`Invalid number of arguments. Usage: ${getCommandName("env add <name> <target> --git-branch <git-branch> < <file>")}`),1;let envTargets=envTargetArg?parseEnvTargetArg(envTargetArg):[],resolvedLink;if(client.nonInteractive){let link2=await resolveProjectContext({client,projectNameOrId:opts["--project"]});if(link2.status==="error")return link2.exitCode;if(link2.status==="not_linked"){let preserved=getPreservedArgsForEnvAdd(client.argv),linkPreserved=preserved.filter((a,i)=>!(a==="--value"||a.startsWith("--value=")||i>0&&preserved[i-1]==="--value")),linkArgv=[...client.argv.slice(0,2),"link","--scope","<scope>",...linkPreserved],envAddRetryArgv=redactEnvValueArgs(client.argv);if(envTargetArg==="preview"&&envGitBranch===void 0){let argvArgs=client.argv.slice(2),addIdx=argvArgs.indexOf("add");if(addIdx!==-1){let pos=addIdx+1,positionals=0;for(;pos<argvArgs.length&&positionals<3&&!argvArgs[pos].startsWith("-");)positionals++,pos++;let insertAt=2+pos;envAddRetryArgv=redactEnvValueArgs([...client.argv.slice(0,insertAt),"<gitbranch>",...client.argv.slice(insertAt)])}}outputAgentError(client,{status:"error",reason:"not_linked",message:`Your codebase isn't linked to a project on Vercel. Run \`${getCommandNamePlain("link")}\` to begin. Use \`--yes\` for non-interactive mode; use \`--scope\` or \`--project\` to specify a team or project. Then run your \`env add\` command.`,next:[{command:buildCommandWithYes(linkArgv)},{command:buildCommandWithYes(envAddRetryArgv)}]},1)}if(link2.status!=="linked")return 1;resolvedLink=link2;let{project:project2}=link2,org=link2.org;client.config.currentTeam=org.type==="team"?org.id:void 0;let[{envs:envs2},customEnvironments2]=await Promise.all([getEnvRecords(client,project2.id,"vercel-cli:env:add"),getCustomEnvironments(client,project2.id)]),matchingEnvs2=envs2.filter(r=>r.key===envName),existingTargets2=new Set,existingCustomEnvs2=new Set;for(let env of matchingEnvs2){if(typeof env.target=="string")existingTargets2.add(env.target);else if(Array.isArray(env.target))for(let target of env.target)existingTargets2.add(target);if(env.customEnvironmentIds)for(let customEnvId of env.customEnvironmentIds)existingCustomEnvs2.add(customEnvId)}let choices2=[...envTargetChoices.filter(c=>!existingTargets2.has(c.value)),...customEnvironments2.filter(c=>!existingCustomEnvs2.has(c.id)).map(c=>({name:c.slug,value:c.id}))],missing=[];if(envName||missing.push("missing_name"),valueFromFlag===void 0&&!stdInput&&missing.push("missing_value"),!envTargetArg&&choices2.length>0&&missing.push("missing_environment"),envTargetArg==="preview"&&envGitBranch===void 0&&!(client.nonInteractive&&args.length===2)&&missing.push("git_branch_required"),missing.length>0){let parts=missing.map(m=>m==="missing_name"?"variable name":m==="missing_value"?"--value or stdin":m==="missing_environment"?"environment (production, preview, development, or a comma-separated list)":m==="git_branch_required"?"`--git-branch <git-branch>` for Preview, or omit for all Preview branches":m),fullTemplate=`env add <name> ${getEnvTargetPlaceholder()} --value "<value>" --yes`,filledTemplate=fillEnvAddTemplate(fullTemplate,{envName,envTargetArg,envGitBranch}),next=[];if(missing.length===1&&missing[0]==="git_branch_required"||next.push({command:buildEnvAddCommandWithPreservedArgs(client.argv,filledTemplate)}),missing.includes("git_branch_required")&&envName&&(valueFromFlag!==void 0||stdInput)){let branchSpecific=fillEnvAddTemplate('env add <name> preview --git-branch <git-branch> --value "<value>" --yes',{envName,envTargetArg:"preview"}),branchAll=fillEnvAddTemplate('env add <name> preview --value "<value>" --yes',{envName,envTargetArg:"preview"});next.push({command:buildEnvAddCommandWithPreservedArgs(client.argv,branchSpecific),when:"Add to a specific Git branch"},{command:buildEnvAddCommandWithPreservedArgs(client.argv,branchAll),when:"Add to all Preview branches"})}if(missing.includes("missing_environment")){let standardAvailable=choices2.map(c=>c.value).filter(v=>isValidEnvTarget(v)),multiTargets=filterSensitiveMultiTargetSuggestionTargets(standardAvailable,{forceSensitive:!!opts["--sensitive"],policyOn:!1});multiTargets.length>1&&next.push(multiTargetSuggestion(client.argv,envName||"<name>",multiTargets,multiTargets.includes("development")&&!opts["--no-sensitive"]))}outputActionRequired(client,{status:"action_required",reason:"missing_requirements",missing,message:`Provide all required inputs for non-interactive mode: ${parts.join("; ")}. Example: \`${filledTemplate}\``,next},1)}}if(envName||(envName=await client.input.text({message:"Name?",validate:val=>val?!0:"Name cannot be empty"})),!resolvedLink){let link2=await resolveProjectContext({client,projectNameOrId:opts["--project"]});if(link2.status==="error")return link2.exitCode;if(link2.status==="not_linked"){if(client.nonInteractive){let preserved=getPreservedArgsForEnvAdd(client.argv),linkPreserved=preserved.filter((a,i)=>!(a==="--value"||a.startsWith("--value=")||i>0&&preserved[i-1]==="--value")),linkArgv=[...client.argv.slice(0,2),"link","--scope","<scope>",...linkPreserved];outputAgentError(client,{status:"error",reason:"not_linked",message:`Your codebase isn't linked to a project on Vercel. Run ${getCommandNamePlain("link")} to begin. Use --yes for non-interactive; use --scope or --project to specify team or project. Then run your env add command.`,next:[{command:buildCommandWithYes(linkArgv)},{command:buildCommandWithYes(redactEnvValueArgs(client.argv))}]},1)}else output_manager_default.error(`Your codebase isn\u2019t linked to a project on Vercel. Run ${getCommandName("link")} to begin.`);return 1}resolvedLink=link2}let link=resolvedLink;client.config.currentTeam=link.org.type==="team"?link.org.id:void 0;let{project}=link;if(explicitType==="secret"||forceSensitive){let publicPrefixError=getPublicPrefixSecretVisibilityError(envName,{visibility:explicitType==="secret"?"secret":void 0,type:"sensitive",context:"add"});if(publicPrefixError)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_type",message:publicPrefixError},1),output_manager_default.fatal(publicPrefixError),1}let keyAccepted=!1;for(;!keyAccepted;){let apiPublicPrefix2=getApiPublicPrefix(envName),frameworkPublicPrefix=getFrameworkPublicPrefix(project.framework,envName),globallyKnownPrefix=getPublicPrefix(envName),keyWarnings=frameworkPublicPrefix!==null&&(explicitType==="secret"||forceSensitive)||globallyKnownPrefix!==null&&apiPublicPrefix2===null&&frameworkPublicPrefix===null?[]:getEnvKeyWarnings(envName);if(!keyWarnings.find(w=>w.requiresConfirmation)){for(let warning of keyWarnings)printEnvAddWarning(warning.message);keyAccepted=!0;break}let nameWithoutPrefix=removePublicPrefix(envName),publicPrefix=getPublicPrefix(envName);if(typeSource==="argv"){for(let warning of keyWarnings)printEnvAddWarning(warning.message);keyAccepted=!0;break}let privateCommand=buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${nameWithoutPrefix} ${envTargetArg??getEnvTargetPlaceholder()} --type secret --value "<value>" --yes`),publicCommand=buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} ${envTargetArg??getEnvTargetPlaceholder()} --type config --value "<value>" --yes`),humanTargetArg=envTargetArg?` ${envTargetArg}`:"",privateHumanCommand=buildHumanEnvAddCommand(client.argv,`env add ${nameWithoutPrefix}${humanTargetArg} --type secret`),publicHumanCommand=buildHumanEnvAddCommand(client.argv,`env add ${envName}${humanTargetArg} --type config`),message=`\`${envName}\` looks like a credential, and \`${publicPrefix}\` exposes its value to anyone visiting your site. Choose explicitly: rename to \`${nameWithoutPrefix}\` with \`--type secret\` to keep it private, or keep the name with \`--type config\` to expose it.`;if(client.nonInteractive||opts["--yes"]||stdInput)return client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"public_prefix_requires_type",message,choices:[{id:"private",name:`Keep private: rename to ${nameWithoutPrefix} and use Secret`},{id:"public",name:`Expose publicly: keep ${envName} as Config`}],next:[{command:privateCommand,when:"Keep it private; replace <value> before running"},{command:publicCommand,when:"Expose it publicly; replace <value> before running"}]}),output_manager_default.fatal(message),output_manager_default.print(`  Keep it private:
     ${privateHumanCommand}
-`);
-      output_manager_default.print(`  Expose it publicly:
+`),output_manager_default.print(`  Expose it publicly:
     ${publicHumanCommand}
-`);
-      return 1;
-    }
-    for (const warning of keyWarnings) {
-      printEnvAddWarning(warning.message);
-    }
-    const action = await client.input.select({
-      message: "How should this variable be stored?",
-      choices: [
-        {
-          name: `Keep private: rename to ${nameWithoutPrefix} and use Secret`,
-          value: "p"
-        },
-        {
-          name: `Expose to anyone visiting your site: keep ${envName} as Config`,
-          value: "c"
-        },
-        { name: "Enter a different name", value: "r" }
-      ]
-    });
-    if (action === "p") {
-      envName = nameWithoutPrefix;
-      explicitType = "secret";
-      typeSource = "prompt";
-      output_manager_default.log(`Renamed to ${envName}`);
-    } else if (action === "c") {
-      explicitType = "config";
-      typeSource = "prompt";
-      keyAccepted = true;
-    } else {
-      envName = await client.input.text({
-        message: `Name?`,
-        validate: (val) => val ? true : "Name cannot be empty"
-      });
-    }
-  }
-  let customSveltePublicPrefix;
-  const apiPublicPrefix = getApiPublicPrefix(envName);
-  const matchingFrameworkPublicPrefix = getFrameworkPublicPrefix(
-    project.framework,
-    envName
-  );
-  if (matchingFrameworkPublicPrefix !== null && (explicitType === "secret" || forceSensitive)) {
-    const message = `\`${matchingFrameworkPublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Rename the variable without the framework's public prefix to keep it private, or use \`--type config\` only if the value is safe to expose.`;
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        { status: "error", reason: "invalid_type", message },
-        1
-      );
-    }
-    output_manager_default.fatal(message);
-    return 1;
-  }
-  if (project.framework === "sveltekit" || project.framework === "sveltekit-1" || project.framework === "sveltekit-2") {
-    const localPublicPrefixes = await getLocalSvelteKitPublicPrefixes(
-      link.repoRoot ?? client.cwd,
-      project.rootDirectory
-    );
-    const matchingLocalPrefix = localPublicPrefixes?.find(
-      (prefix) => envName.startsWith(prefix)
-    );
-    if (matchingLocalPrefix !== void 0 && apiPublicPrefix === null && matchingFrameworkPublicPrefix === null) {
-      customSveltePublicPrefix = matchingLocalPrefix;
-    }
-  }
-  if (customSveltePublicPrefix !== void 0 && (explicitType === "secret" || forceSensitive)) {
-    const message = customSveltePublicPrefix === "" ? "This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser and cannot be kept private as a Secret. Change the SvelteKit `publicPrefix`, or use `--type config` only if the value is safe to expose." : `\`${customSveltePublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Rename the variable without the configured public prefix, or use \`--type config\` only if the value is safe to expose.`;
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        { status: "error", reason: "invalid_type", message },
-        1
-      );
-    }
-    output_manager_default.fatal(message);
-    return 1;
-  }
-  if (customSveltePublicPrefix !== void 0) {
-    printEnvAddWarning(
-      customSveltePublicPrefix === "" ? "This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser." : `\`${customSveltePublicPrefix}\` variables are exposed to the browser by this SvelteKit project.`
-    );
-  }
-  const skipConfirm = opts["--yes"] || !!stdInput || valueFromFlag !== void 0;
-  const [{ envs }, customEnvironments] = await Promise.all([
-    getEnvRecords(client, project.id, "vercel-cli:env:add"),
-    getCustomEnvironments(client, project.id)
-  ]);
-  if (envTargets.length > 0) {
-    const resolved = [];
-    const invalid = [];
-    for (const target of envTargets) {
-      if (isValidEnvTarget(target)) {
-        resolved.push(target);
-        continue;
-      }
-      const custom = customEnvironments.find(
-        (c) => c.id === target || c.slug === target
-      );
-      if (custom) {
-        resolved.push(custom.id);
-      } else {
-        invalid.push(target);
-      }
-    }
-    if (invalid.length > 0) {
-      const valid = [
-        ...envTargetChoices.map((c) => c.value),
-        ...customEnvironments.map((c) => c.slug)
-      ];
-      const message = `Invalid environment: ${invalid.join(
-        ", "
-      )}. Valid environments: ${valid.join(
-        ", "
-      )}. Separate multiple environments with commas.`;
-      if (client.nonInteractive) {
-        outputAgentError(
-          client,
-          { status: "error", reason: "invalid_environment", message },
-          1
-        );
-      }
-      output_manager_default.error(message);
-      return 1;
-    }
-    envTargets = resolved;
-  }
-  if (envGitBranch && envTargets.length > 1) {
-    const message = "A Git branch can only be set when Preview is the only selected environment.";
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        { status: "error", reason: "branch_requires_preview_only", message },
-        1
-      );
-    }
-    output_manager_default.error(message);
-    return 1;
-  }
-  const matchingEnvs = envs.filter((r) => r.key === envName);
-  const existingTargets = /* @__PURE__ */ new Set();
-  const existingCustomEnvs = /* @__PURE__ */ new Set();
-  for (const env of matchingEnvs) {
-    if (typeof env.target === "string") {
-      existingTargets.add(env.target);
-    } else if (Array.isArray(env.target)) {
-      for (const target of env.target) {
-        existingTargets.add(target);
-      }
-    }
-    if (env.customEnvironmentIds) {
-      for (const customEnvId of env.customEnvironmentIds) {
-        existingCustomEnvs.add(customEnvId);
-      }
-    }
-  }
-  const choices = [
-    ...envTargetChoices.filter((c) => !existingTargets.has(c.value)).map((c) => ({ name: c.name, value: c.value })),
-    ...customEnvironments.filter((c) => !existingCustomEnvs.has(c.id)).map((c) => ({ name: c.slug, value: c.id }))
-  ];
-  if (!envGitBranch && choices.length === 0 && !opts["--force"]) {
-    const projectFlag = opts["--project"] ? ` --project ${opts["--project"]}` : "";
-    output_manager_default.error(
-      `The variable ${param(
-        envName
-      )} has already been added to all Environments. To remove, run ${getCommandName(
-        `env rm ${envName}${projectFlag}`
-      )}.`
-    );
-    return 1;
-  }
-  const policyOn = false;
-  let teamSensitivePolicyOn = false;
-  let disjunctiveProductionSecretPolicyOn = false;
-  if (link.org.type === "team") {
-    try {
-      const team = await getTeamByIdOrSlug(client, link.org.id);
-      teamSensitivePolicyOn = team?.sensitiveEnvironmentVariablePolicy === "on";
-      disjunctiveProductionSecretPolicyOn = team?.disjunctiveProductionSecretPolicy === "on";
-    } catch {
-    }
-  }
-  const userWasExplicit = forceSensitive || forceEncrypted || !!explicitType;
-  const skipSensitivePrompt = userWasExplicit || client.nonInteractive || skipConfirm;
-  const isDevelopmentOnlyTarget = envTargets.length === 1 && envTargets[0] === "development";
-  let isSensitive;
-  if (forceSensitive) {
-    isSensitive = true;
-  } else if (forceEncrypted) {
-    isSensitive = false;
-  } else if (explicitType) {
-    isSensitive = explicitType === "secret";
-  } else if (apiPublicPrefix || matchingFrameworkPublicPrefix || customSveltePublicPrefix !== void 0) {
-    isSensitive = false;
-    explicitType = "config";
-    typeSource = "inferred";
-  } else if (isDevelopmentOnlyTarget) {
-    isSensitive = false;
-    typeSource = "inferred";
-  } else if (skipSensitivePrompt) {
-    isSensitive = true;
-    typeSource = "default";
-  } else {
-    const selectedType = await client.input.select({
-      message: "Environment Variable type?",
-      choices: [
-        {
-          name: getSecretStorageChoice(
-            envTargets,
-            looksLikeCredentialName(envName) ? "because this name looks like a credential" : void 0
-          ),
-          value: "secret"
-        },
-        { name: "Config (can be revealed after saving)", value: "config" }
-      ]
-    });
-    isSensitive = selectedType === "secret";
-    explicitType = selectedType;
-    typeSource = "prompt";
-  }
-  if (envTargets.length > 0) {
-    const compatibilityError = getTargetCompatibilityError(
-      envTargets,
-      isSensitive,
-      policyOn
-    );
-    if (compatibilityError) {
-      if (client.nonInteractive) {
-        const next = [
-          {
-            command: buildEnvAddCommandWithPreservedArgs(
-              client.argv,
-              `env add ${envName} development --value "<value>" --yes`
-            ),
-            when: "Add as non-sensitive to Development only"
-          }
-        ];
-        outputAgentError(
-          client,
-          {
-            status: "error",
-            reason: "non_sensitive_not_allowed_on_production_preview",
-            message: compatibilityError,
-            next
-          },
-          1
-        );
-      }
-      output_manager_default.error(compatibilityError);
-      return 1;
-    }
-  }
-  const envChoices = filterEnvChoicesForSensitivity(choices, {
-    isSensitive,
-    policyOn
-  });
-  if (policyOn && isSensitive) {
-    for (const choice of envChoices) {
-      if (choice.value === "production" || choice.value === "preview") {
-        choice.checked = true;
-      }
-    }
-  } else if (envChoices.length === 1) {
-    envChoices[0].checked = true;
-  }
-  if (!envGitBranch && envChoices.length === 0 && envTargets.length === 0 && !opts["--force"]) {
-    output_manager_default.error(
-      `No Environments are available for this variable with the selected sensitivity. Your team requires sensitive Environment Variables for Production and Preview.`
-    );
-    return 1;
-  }
-  let envValue;
-  if (stdInput) {
-    const normalizedStdinValue = normalizeStdinEnvValue(stdInput);
-    envValue = normalizedStdinValue.value;
-    if (normalizedStdinValue.strippedTrailingNewline) {
-      output_manager_default.log("Removed trailing newline from stdin input");
-    }
-  } else if (valueFromFlag !== void 0) {
-    envValue = valueFromFlag;
-  } else {
-    if (client.nonInteractive) {
-      outputActionRequired(client, {
-        status: "action_required",
-        reason: "missing_value",
-        message: 'In non-interactive mode provide the value via --value or stdin. Example: vercel env add <name> <environment> --value "<value>" --yes',
-        next: [
-          {
-            command: buildEnvAddCommandWithPreservedArgs(
-              client.argv,
-              `env add <name> ${getEnvTargetPlaceholder()} --value "<value>" --yes`
-            )
-          }
-        ]
-      });
-    }
-    envValue = await promptEnvValue(client, { isSensitive });
-  }
-  let { finalValue } = await validateEnvValue({
-    envName,
-    initialValue: envValue,
-    skipConfirm,
-    promptForValue: () => promptEnvValue(client, { isSensitive }),
-    selectAction: (choices2) => client.input.select({ message: "Value?", choices: choices2 }),
-    showWarning: (msg) => printEnvAddWarning(msg),
-    showLog: (msg) => output_manager_default.log(msg)
-  });
-  while (envTargets.length === 0) {
-    if (client.nonInteractive && envChoices.length > 0) {
-      const standardAvailable = choices.map((c) => c.value).filter((v) => isValidEnvTarget(v));
-      const multiTargets = filterSensitiveMultiTargetSuggestionTargets(
-        standardAvailable,
-        {
-          forceSensitive,
-          policyOn
-        }
-      );
-      const next = [];
-      if (multiTargets.length > 1) {
-        next.push(
-          multiTargetSuggestion(
-            client.argv,
-            envName,
-            multiTargets,
-            multiTargets.includes("development") && !forceEncrypted
-          )
-        );
-      }
-      next.push(
-        ...envChoices.slice(0, 5).map((c) => ({
-          command: buildEnvAddCommandWithPreservedArgs(
-            client.argv,
-            `env add ${envName} ${c.value} --value "<value>" --yes`
-          )
-        }))
-      );
-      outputActionRequired(client, {
-        status: "action_required",
-        reason: "missing_environment",
-        message: `Specify one or more environments (comma-separated). Add as argument or use: ${buildEnvAddCommandWithPreservedArgs(
-          client.argv,
-          `env add ${envName} <environment>[,<environment>] --value "<value>" --yes`
-        )}`,
-        choices: envChoices.map((c) => ({
-          id: c.value,
-          name: typeof c.name === "string" ? c.name : c.value
-        })),
-        next
-      });
-    }
-    envTargets = await client.input.checkbox({
-      message: `Environments?`,
-      instructions: CHECKBOX_INSTRUCTIONS,
-      choices: envChoices
-    });
-    if (envTargets.length === 0) {
-      output_manager_default.error("Please select at least one Environment");
-    }
-  }
-  const postSelectionError = getTargetCompatibilityError(
-    envTargets,
-    isSensitive,
-    policyOn
-  );
-  if (postSelectionError) {
-    output_manager_default.error(postSelectionError);
-    return 1;
-  }
-  if (envGitBranch === void 0 && envTargets.length === 1 && envTargets[0] === "preview" && !opts["--yes"] && !(client.nonInteractive && args.length === 2)) {
-    if (client.nonInteractive) {
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "git_branch_required",
-          message: `Add ${envName} to which Git branch for Preview? Pass branch as third argument, or omit for all Preview branches.`,
-          next: [
-            {
-              command: buildEnvAddCommandWithPreservedArgs(
-                client.argv,
-                `env add ${envName} preview --git-branch <git-branch> --value "<value>" --yes`
-              ),
-              when: "Add to a specific Git branch"
-            },
-            {
-              command: buildEnvAddCommandWithPreservedArgs(
-                client.argv,
-                `env add ${envName} preview --value "<value>" --yes`
-              ),
-              when: "Add to all Preview branches"
-            }
-          ]
-        },
-        1
-      );
-    } else {
-      output_manager_default.print(
-        `  ${import_chalk.default.dim("Leave empty to apply to all Preview branches.")}
-`
-      );
-      envGitBranch = await client.input.text({
-        message: `Git branch?`
-      });
-    }
-  }
-  const hasDevelopment = envTargets.includes("development");
-  let finalType = resolveFinalType(envTargets, isSensitive, {
-    forceSensitive,
-    forceEncrypted,
-    policyOn
-  });
-  if (policyOn && !hasDevelopment) {
-    if (forceEncrypted) {
-      printEnvAddWarning(
-        `--no-sensitive is ignored: your team enforces sensitive Environment Variables for Production and Preview.`
-      );
-      finalType = "sensitive";
-    }
-  }
-  while (finalType === "encrypted" && (looksLikeCredentialName(envName, customSveltePublicPrefix) || looksLikeSecretValue(finalValue))) {
-    printEnvAddWarning(
-      "This name or value looks like a credential. Config values can be revealed after saving."
-    );
-    const publicPrefix = getApiPublicPrefix(envName) ?? getFrameworkPublicPrefix(project.framework, envName) ?? customSveltePublicPrefix;
-    if (publicPrefix !== void 0 && typeSource === "inferred") {
-      const privateName = envName.slice(publicPrefix.length);
-      const privateCommand = buildEnvAddCommandWithPreservedArgs(
-        client.argv,
-        `env add ${privateName} ${envTargets.join(
-          ","
-        )} --type secret --value "<value>" --yes`
-      );
-      const publicCommand = buildEnvAddCommandWithPreservedArgs(
-        client.argv,
-        `env add ${envName} ${envTargets.join(
-          ","
-        )} --type config --value "<value>" --yes`
-      );
-      const privateHumanCommand = buildHumanEnvAddCommand(
-        client.argv,
-        `env add ${privateName} ${envTargets.join(",")} --type secret`
-      );
-      const publicHumanCommand = buildHumanEnvAddCommand(
-        client.argv,
-        `env add ${envName} ${envTargets.join(",")} --type config`
-      );
-      const message = publicPrefix === "" ? `\`${envName}\` looks like a credential, and this SvelteKit project exposes every Environment Variable to the browser. Change the SvelteKit \`publicPrefix\` to keep it private, or use \`--type config\` only if the value is safe to expose.` : `\`${envName}\` looks like a credential, and \`${publicPrefix}\` exposes its value to anyone visiting your site. Choose explicitly: rename to \`${privateName}\` with \`--type secret\` to keep it private, or keep the name with \`--type config\` to expose it.`;
-      if (client.nonInteractive) {
-        outputActionRequired(client, {
-          status: "action_required",
-          reason: "public_prefix_requires_type",
-          message,
-          next: [
-            ...publicPrefix === "" ? [] : [
-              {
-                command: privateCommand,
-                when: "Keep it private; replace <value> before running"
-              }
-            ],
-            {
-              command: publicCommand,
-              when: "Expose it publicly; replace <value> before running"
-            }
-          ]
-        });
-      }
-      if (opts["--yes"]) {
-        output_manager_default.fatal(message);
-        if (publicPrefix !== "") {
-          output_manager_default.print(`  Keep it private:
+`),1;for(let warning of keyWarnings)printEnvAddWarning(warning.message);let action=await client.input.select({message:"How should this variable be stored?",choices:[{name:`Keep private: rename to ${nameWithoutPrefix} and use Secret`,value:"p"},{name:`Expose to anyone visiting your site: keep ${envName} as Config`,value:"c"},{name:"Enter a different name",value:"r"}]});action==="p"?(envName=nameWithoutPrefix,explicitType="secret",typeSource="prompt",output_manager_default.log(`Renamed to ${envName}`)):action==="c"?(explicitType="config",typeSource="prompt",keyAccepted=!0):envName=await client.input.text({message:"Name?",validate:val=>val?!0:"Name cannot be empty"})}let customSveltePublicPrefix,apiPublicPrefix=getApiPublicPrefix(envName),matchingFrameworkPublicPrefix=getFrameworkPublicPrefix(project.framework,envName);if(matchingFrameworkPublicPrefix!==null&&(explicitType==="secret"||forceSensitive)){let message=`\`${matchingFrameworkPublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Rename the variable without the framework's public prefix to keep it private, or use \`--type config\` only if the value is safe to expose.`;return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_type",message},1),output_manager_default.fatal(message),1}if(project.framework==="sveltekit"||project.framework==="sveltekit-1"||project.framework==="sveltekit-2"){let matchingLocalPrefix=(await getLocalSvelteKitPublicPrefixes(link.repoRoot??client.cwd,project.rootDirectory))?.find(prefix=>envName.startsWith(prefix));matchingLocalPrefix!==void 0&&apiPublicPrefix===null&&matchingFrameworkPublicPrefix===null&&(customSveltePublicPrefix=matchingLocalPrefix)}if(customSveltePublicPrefix!==void 0&&(explicitType==="secret"||forceSensitive)){let message=customSveltePublicPrefix===""?"This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser and cannot be kept private as a Secret. Change the SvelteKit `publicPrefix`, or use `--type config` only if the value is safe to expose.":`\`${customSveltePublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Rename the variable without the configured public prefix, or use \`--type config\` only if the value is safe to expose.`;return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_type",message},1),output_manager_default.fatal(message),1}customSveltePublicPrefix!==void 0&&printEnvAddWarning(customSveltePublicPrefix===""?"This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser.":`\`${customSveltePublicPrefix}\` variables are exposed to the browser by this SvelteKit project.`);let skipConfirm=opts["--yes"]||!!stdInput||valueFromFlag!==void 0,[{envs},customEnvironments]=await Promise.all([getEnvRecords(client,project.id,"vercel-cli:env:add"),getCustomEnvironments(client,project.id)]);if(envTargets.length>0){let resolved=[],invalid=[];for(let target of envTargets){if(isValidEnvTarget(target)){resolved.push(target);continue}let custom=customEnvironments.find(c=>c.id===target||c.slug===target);custom?resolved.push(custom.id):invalid.push(target)}if(invalid.length>0){let valid=[...envTargetChoices.map(c=>c.value),...customEnvironments.map(c=>c.slug)],message=`Invalid environment: ${invalid.join(", ")}. Valid environments: ${valid.join(", ")}. Separate multiple environments with commas.`;return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_environment",message},1),output_manager_default.error(message),1}envTargets=resolved}if(envGitBranch&&envTargets.length>1){let message="A Git branch can only be set when Preview is the only selected environment.";return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"branch_requires_preview_only",message},1),output_manager_default.error(message),1}let matchingEnvs=envs.filter(r=>r.key===envName),existingTargets=new Set,existingCustomEnvs=new Set;for(let env of matchingEnvs){if(typeof env.target=="string")existingTargets.add(env.target);else if(Array.isArray(env.target))for(let target of env.target)existingTargets.add(target);if(env.customEnvironmentIds)for(let customEnvId of env.customEnvironmentIds)existingCustomEnvs.add(customEnvId)}let choices=[...envTargetChoices.filter(c=>!existingTargets.has(c.value)).map(c=>({name:c.name,value:c.value})),...customEnvironments.filter(c=>!existingCustomEnvs.has(c.id)).map(c=>({name:c.slug,value:c.id}))];if(!envGitBranch&&choices.length===0&&!opts["--force"]){let projectFlag=opts["--project"]?` --project ${opts["--project"]}`:"";return output_manager_default.error(`The variable ${param(envName)} has already been added to all Environments. To remove, run ${getCommandName(`env rm ${envName}${projectFlag}`)}.`),1}let policyOn=!1,teamSensitivePolicyOn=!1,disjunctiveProductionSecretPolicyOn=!1;if(link.org.type==="team")try{let team=await getTeamByIdOrSlug(client,link.org.id);teamSensitivePolicyOn=team?.sensitiveEnvironmentVariablePolicy==="on",disjunctiveProductionSecretPolicyOn=team?.disjunctiveProductionSecretPolicy==="on"}catch{}let skipSensitivePrompt=forceSensitive||forceEncrypted||!!explicitType||client.nonInteractive||skipConfirm,isDevelopmentOnlyTarget=envTargets.length===1&&envTargets[0]==="development",isSensitive;if(forceSensitive)isSensitive=!0;else if(forceEncrypted)isSensitive=!1;else if(explicitType)isSensitive=explicitType==="secret";else if(apiPublicPrefix||matchingFrameworkPublicPrefix||customSveltePublicPrefix!==void 0)isSensitive=!1,explicitType="config",typeSource="inferred";else if(isDevelopmentOnlyTarget)isSensitive=!1,typeSource="inferred";else if(skipSensitivePrompt)isSensitive=!0,typeSource="default";else{let selectedType=await client.input.select({message:"Environment Variable type?",choices:[{name:getSecretStorageChoice(envTargets,looksLikeCredentialName(envName)?"because this name looks like a credential":void 0),value:"secret"},{name:"Config (can be revealed after saving)",value:"config"}]});isSensitive=selectedType==="secret",explicitType=selectedType,typeSource="prompt"}if(envTargets.length>0){let compatibilityError=getTargetCompatibilityError(envTargets,isSensitive,policyOn);if(compatibilityError){if(client.nonInteractive){let next=[{command:buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} development --value "<value>" --yes`),when:"Add as non-sensitive to Development only"}];outputAgentError(client,{status:"error",reason:"non_sensitive_not_allowed_on_production_preview",message:compatibilityError,next},1)}return output_manager_default.error(compatibilityError),1}}let envChoices=filterEnvChoicesForSensitivity(choices,{isSensitive,policyOn});if(policyOn&&isSensitive)for(let choice of envChoices)(choice.value==="production"||choice.value==="preview")&&(choice.checked=!0);else envChoices.length===1&&(envChoices[0].checked=!0);if(!envGitBranch&&envChoices.length===0&&envTargets.length===0&&!opts["--force"])return output_manager_default.error("No Environments are available for this variable with the selected sensitivity. Your team requires sensitive Environment Variables for Production and Preview."),1;let envValue;if(stdInput){let normalizedStdinValue=normalizeStdinEnvValue(stdInput);envValue=normalizedStdinValue.value,normalizedStdinValue.strippedTrailingNewline&&output_manager_default.log("Removed trailing newline from stdin input")}else valueFromFlag!==void 0?envValue=valueFromFlag:(client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"missing_value",message:'In non-interactive mode provide the value via --value or stdin. Example: vercel env add <name> <environment> --value "<value>" --yes',next:[{command:buildEnvAddCommandWithPreservedArgs(client.argv,`env add <name> ${getEnvTargetPlaceholder()} --value "<value>" --yes`)}]}),envValue=await promptEnvValue(client,{isSensitive}));let{finalValue}=await validateEnvValue({envName,initialValue:envValue,skipConfirm,promptForValue:()=>promptEnvValue(client,{isSensitive}),selectAction:choices2=>client.input.select({message:"Value?",choices:choices2}),showWarning:msg=>printEnvAddWarning(msg),showLog:msg=>output_manager_default.log(msg)});for(;envTargets.length===0;){if(client.nonInteractive&&envChoices.length>0){let standardAvailable=choices.map(c=>c.value).filter(v=>isValidEnvTarget(v)),multiTargets=filterSensitiveMultiTargetSuggestionTargets(standardAvailable,{forceSensitive,policyOn}),next=[];multiTargets.length>1&&next.push(multiTargetSuggestion(client.argv,envName,multiTargets,multiTargets.includes("development")&&!forceEncrypted)),next.push(...envChoices.slice(0,5).map(c=>({command:buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} ${c.value} --value "<value>" --yes`)}))),outputActionRequired(client,{status:"action_required",reason:"missing_environment",message:`Specify one or more environments (comma-separated). Add as argument or use: ${buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} <environment>[,<environment>] --value "<value>" --yes`)}`,choices:envChoices.map(c=>({id:c.value,name:typeof c.name=="string"?c.name:c.value})),next})}envTargets=await client.input.checkbox({message:"Environments?",instructions:CHECKBOX_INSTRUCTIONS,choices:envChoices}),envTargets.length===0&&output_manager_default.error("Please select at least one Environment")}let postSelectionError=getTargetCompatibilityError(envTargets,isSensitive,policyOn);if(postSelectionError)return output_manager_default.error(postSelectionError),1;envGitBranch===void 0&&envTargets.length===1&&envTargets[0]==="preview"&&!opts["--yes"]&&!(client.nonInteractive&&args.length===2)&&(client.nonInteractive?outputActionRequired(client,{status:"action_required",reason:"git_branch_required",message:`Add ${envName} to which Git branch for Preview? Pass branch as third argument, or omit for all Preview branches.`,next:[{command:buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} preview --git-branch <git-branch> --value "<value>" --yes`),when:"Add to a specific Git branch"},{command:buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} preview --value "<value>" --yes`),when:"Add to all Preview branches"}]},1):(output_manager_default.print(`  ${import_chalk.default.dim("Leave empty to apply to all Preview branches.")}
+`),envGitBranch=await client.input.text({message:"Git branch?"})));let hasDevelopment=envTargets.includes("development"),finalType=resolveFinalType(envTargets,isSensitive,{forceSensitive,forceEncrypted,policyOn});for(policyOn&&!hasDevelopment&&forceEncrypted&&(printEnvAddWarning("--no-sensitive is ignored: your team enforces sensitive Environment Variables for Production and Preview."),finalType="sensitive");finalType==="encrypted"&&(looksLikeCredentialName(envName,customSveltePublicPrefix)||looksLikeSecretValue(finalValue));){printEnvAddWarning("This name or value looks like a credential. Config values can be revealed after saving.");let publicPrefix=getApiPublicPrefix(envName)??getFrameworkPublicPrefix(project.framework,envName)??customSveltePublicPrefix;if(publicPrefix!==void 0&&typeSource==="inferred"){let privateName=envName.slice(publicPrefix.length),privateCommand=buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${privateName} ${envTargets.join(",")} --type secret --value "<value>" --yes`),publicCommand=buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} ${envTargets.join(",")} --type config --value "<value>" --yes`),privateHumanCommand=buildHumanEnvAddCommand(client.argv,`env add ${privateName} ${envTargets.join(",")} --type secret`),publicHumanCommand=buildHumanEnvAddCommand(client.argv,`env add ${envName} ${envTargets.join(",")} --type config`),message=publicPrefix===""?`\`${envName}\` looks like a credential, and this SvelteKit project exposes every Environment Variable to the browser. Change the SvelteKit \`publicPrefix\` to keep it private, or use \`--type config\` only if the value is safe to expose.`:`\`${envName}\` looks like a credential, and \`${publicPrefix}\` exposes its value to anyone visiting your site. Choose explicitly: rename to \`${privateName}\` with \`--type secret\` to keep it private, or keep the name with \`--type config\` to expose it.`;if(client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"public_prefix_requires_type",message,next:[...publicPrefix===""?[]:[{command:privateCommand,when:"Keep it private; replace <value> before running"}],{command:publicCommand,when:"Expose it publicly; replace <value> before running"}]}),opts["--yes"])return output_manager_default.fatal(message),publicPrefix!==""&&output_manager_default.print(`  Keep it private:
     ${privateHumanCommand}
-`);
-        }
-        output_manager_default.print(`  Expose it publicly:
+`),output_manager_default.print(`  Expose it publicly:
     ${publicHumanCommand}
-`);
-        return 1;
-      }
-      const selectedAction = await client.input.select({
-        message: "How should this variable be stored?",
-        choices: [
-          ...publicPrefix === "" ? [] : [
-            {
-              name: `Keep private: rename to ${privateName} and use Secret`,
-              value: "private"
-            }
-          ],
-          {
-            name: `Expose to anyone visiting your site: keep ${envName} as Config`,
-            value: "public"
-          },
-          { name: "Enter a different value", value: "reenter" }
-        ]
-      });
-      if (selectedAction === "private") {
-        envName = privateName;
-        finalType = "sensitive";
-        explicitType = "secret";
-        typeSource = "prompt";
-        output_manager_default.log(`Renamed to ${envName}`);
-        break;
-      }
-      if (selectedAction === "reenter") {
-        const reenteredValue = await promptEnvValue(client, {
-          isSensitive: false
-        });
-        const validated = await validateEnvValue({
-          envName,
-          initialValue: reenteredValue,
-          skipConfirm: false,
-          promptForValue: () => promptEnvValue(client, { isSensitive: false }),
-          selectAction: (choices2) => client.input.select({ message: "Value?", choices: choices2 }),
-          showWarning: (msg) => printEnvAddWarning(msg),
-          showLog: (msg) => output_manager_default.log(msg)
-        });
-        finalValue = validated.finalValue;
-        continue;
-      }
-    } else if (typeSource !== "argv" && typeSource !== "prompt" && !opts["--yes"] && !client.nonInteractive) {
-      const selectedType = await client.input.select({
-        message: "Store this value as?",
-        choices: [
-          {
-            name: getSecretStorageChoice(envTargets, "for this value"),
-            value: "secret"
-          },
-          {
-            name: "Config (can be revealed after saving)",
-            value: "config"
-          }
-        ]
-      });
-      if (selectedType === "secret") {
-        finalType = "sensitive";
-        explicitType = "secret";
-        typeSource = "prompt";
-      }
-    }
-    break;
-  }
-  if (finalType === "sensitive" && customSveltePublicPrefix !== void 0 && envName.startsWith(customSveltePublicPrefix)) {
-    printEnvAddWarning(
-      "This SvelteKit project exposes this variable to the browser; the Secret type does not prevent that. Rename the variable without the configured public prefix to keep it private."
-    );
-  }
-  if (isFlagsSecretNeedingSplit({
-    key: envName,
-    type: finalType,
-    targets: envTargets.filter(isValidEnvTarget),
-    customEnvironmentIds: envTargets.filter(
-      (target) => !isValidEnvTarget(target)
-    )
-  })) {
-    printEnvAddWarning(
-      "FLAGS_SECRET should use a separate value for each environment so Development overrides cannot affect Preview or Production."
-    );
-  }
-  const hasProduction = envTargets.includes("production");
-  const hasNonProduction = envTargets.some((target) => target !== "production");
-  if (finalType === "sensitive" && disjunctiveProductionSecretPolicyOn && hasProduction && hasNonProduction) {
-    const message = "Your team requires Production and non-Production Secrets to be stored separately with different values. Run one command for Production and another for the remaining environments.";
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "production_secret_must_be_separate",
-          message,
-          next: [
-            {
-              command: buildEnvAddCommandWithPreservedArgs(
-                client.argv,
-                `env add ${envName} production --type secret --value "<production-value>" --yes`
-              ),
-              when: "Set the Production Secret"
-            },
-            {
-              command: buildEnvAddCommandWithPreservedArgs(
-                client.argv,
-                `env add ${envName} ${envTargets.filter((target) => target !== "production").join(
-                  ","
-                )} --type secret --value "<non-production-value>" --yes`
-              ),
-              when: "Set the non-Production Secret"
-            }
-          ]
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(message);
-    return 1;
-  }
-  const upsert = opts["--force"] ? "true" : "";
-  const { visibility, error: visibilityError } = resolveEnvVarVisibility({
-    explicitVisibility: explicitType,
-    explicitOptionSource: typeOption.source,
-    type: finalType,
-    key: envName,
-    envTargets,
-    teamSensitivePolicyOn,
-    context: "add"
-  });
-  if (visibilityError) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "invalid_type",
-          message: visibilityError
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(visibilityError);
-    return 1;
-  }
-  try {
-    output_manager_default.spinner("Saving\u2026");
-    await addEnvRecord(
-      client,
-      project.id,
-      upsert,
-      finalType,
-      envName,
-      finalValue,
-      envTargets,
-      envGitBranch,
-      visibility
-    );
-  } catch (err) {
-    if (client.nonInteractive && isAPIError(err)) {
-      const productionSecretPolicyError = getProductionSecretPolicyErrorKind(
-        err.serverMessage
-      );
-      const reason = productionSecretPolicyError ? productionSecretPolicyError === "different-values" ? "production_secret_requires_different_value" : "production_secret_must_be_separate" : err.slug || (err.serverMessage?.toLowerCase().includes("branch") ? "branch_not_found" : "api_error");
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason,
-          message: productionSecretPolicyError ? `${err.serverMessage} ${getProductionSecretPolicyRecovery(
-            productionSecretPolicyError
-          )}` : err.serverMessage
-        },
-        1
-      );
-    }
-    if (isAPIError(err) && isKnownError(err)) {
-      output_manager_default.error(err.serverMessage);
-      return 1;
-    }
-    throw err;
-  }
-  printEnvAddResult(
-    link,
-    envName,
-    envTargets,
-    envGitBranch,
-    customEnvironments,
-    finalType,
-    Boolean(opts["--force"]),
-    visibility
-  );
-  if (typeSource === "default") {
-    output_manager_default.print(
-      `  ${import_chalk.default.dim(getDefaultSecretStorageGuidance(envTargets))}
-`
-    );
-  }
-  const { isAgent } = await determineAgent();
-  const guidanceMode = isGuidanceEnabled(
-    client,
-    parsedArgs.flags["--guidance"],
-    isAgent
-  );
-  if (guidanceMode) {
-    suggestNextCommands([
-      {
-        description: "List Environment Variables",
-        command: withGlobalFlags(client, "env ls", { preserveProject: true })
-      },
-      {
-        description: "Pull Development Environment Variables into .env.local",
-        command: withGlobalFlags(client, "env pull", {
-          preserveProject: true
-        })
-      }
-    ]);
-  }
-  return 0;
-}
-
-// src/commands/env/ls.ts
-var import_chalk2 = __toESM(require_source(), 1);
-var import_ms = __toESM(require_ms(), 1);
-
-// src/util/env/format-environments.ts
-var import_title = __toESM(require_lib(), 1);
-function formatEnvironments(link, env, customEnvironments) {
-  const defaultTargets = (Array.isArray(env.target) ? env.target : [env.target || ""]).map((t) => {
-    return formatEnvironment(link.org.slug, link.project.name, {
-      id: t,
-      slug: (0, import_title.default)(t)
-    });
-  });
-  const customTargets = env.customEnvironmentIds ? env.customEnvironmentIds.map((id) => customEnvironments.find((e) => e.id === id)).filter(Boolean).map((e) => formatEnvironment(link.org.slug, link.project.name, e)) : [];
-  const targetsString = [...defaultTargets, ...customTargets].join(", ");
-  return env.gitBranch ? `${targetsString} (${env.gitBranch})` : targetsString;
-}
-
-// src/util/telemetry/commands/env/ls.ts
-var EnvLsTelemetryClient = class extends TelemetryClient {
-  trackCliArgumentEnvironment(environment) {
-    if (environment) {
-      this.trackCliArgument({
-        arg: "environment",
-        value: STANDARD_ENVIRONMENTS.includes(
-          environment
-        ) ? environment : this.redactedValue
-      });
-    }
-  }
-  trackCliArgumentGitBranch(gitBranch) {
-    if (gitBranch) {
-      this.trackCliArgument({
-        arg: "git-branch",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliFlagGuidance(guidance) {
-    if (guidance) {
-      this.trackCliFlag("guidance");
-    }
-  }
-  trackCliFlagJson(json) {
-    if (json) {
-      this.trackCliFlag("json");
-    }
-  }
-};
-
-// src/commands/env/ls.ts
-import { determineAgent as determineAgent2 } from "@vercel/detect-agent";
-async function ls(client, argv) {
-  const telemetryClient = new EnvLsTelemetryClient({
-    opts: {
-      store: client.telemetryEventStore
-    }
-  });
-  let parsedArgs;
-  const flagsSpecification = getFlagsSpecification(listSubcommand.options);
-  try {
-    parsedArgs = parseArguments(argv, flagsSpecification);
-  } catch (err) {
-    printError(err);
-    return 1;
-  }
-  const { args, flags } = parsedArgs;
-  const validationResult = validateLsArgs({
-    commandName: "env ls",
-    args,
-    maxArgs: 2,
-    exitCode: 1,
-    usageString: getCommandName(
-      `env ls ${getEnvTargetPlaceholder()} <gitbranch>`
-    )
-  });
-  if (validationResult !== 0) {
-    return validationResult;
-  }
-  const [envTarget, envGitBranch] = args;
-  const formatResult = validateJsonOutput(flags);
-  if (!formatResult.valid) {
-    output_manager_default.error(formatResult.error);
-    return 1;
-  }
-  const asJson = formatResult.jsonOutput;
-  telemetryClient.trackCliArgumentEnvironment(envTarget);
-  telemetryClient.trackCliArgumentGitBranch(envGitBranch);
-  telemetryClient.trackCliFlagGuidance(flags["--guidance"]);
-  telemetryClient.trackCliOptionFormat(flags["--format"]);
-  const projectName = flags["--project"];
-  telemetryClient.trackCliOptionProject(projectName);
-  const link = await resolveProjectContext({
-    client,
-    projectNameOrId: projectName,
-    commandName: "env ls"
-  });
-  if (link.status === "error") {
-    return link.exitCode;
-  } else if (link.status === "not_linked") {
-    output_manager_default.error(
-      `Your codebase isn\u2019t linked to a project on Vercel. Pass --project <name>, or ${client.nonInteractive ? `run ${getCommandName("link --yes --team <team-id> --project <project-id>")} to link non-interactively.` : `run ${getCommandName("link")} to begin.`}`
-    );
-    return 1;
-  }
-  client.config.currentTeam = link.org.type === "team" ? link.org.id : void 0;
-  const { project, org } = link;
-  const lsStamp = stamp_default();
-  const [envsResult, customEnvs] = await Promise.all([
-    getEnvRecords(client, project.id, "vercel-cli:env:ls", {
-      target: envTarget,
-      gitBranch: envGitBranch
-    }),
-    getCustomEnvironments(client, project.id)
-  ]);
-  const { envs } = envsResult;
-  const projectSlugLink = formatProject(org.slug, project.name);
-  if (asJson) {
-    output_manager_default.stopSpinner();
-    const jsonOutput = {
-      envs: envs.map((env) => ({
-        key: env.key,
-        value: isSecretEnvVar(env) ? void 0 : env.value,
-        type: env.type,
-        visibility: env.visibility,
-        target: env.target,
-        gitBranch: env.gitBranch,
-        configurationId: env.configurationId,
-        createdAt: env.createdAt,
-        updatedAt: env.updatedAt
-      }))
-    };
-    client.stdout.write(`${JSON.stringify(jsonOutput, null, 2)}
-`);
-  } else if (envs.length === 0) {
-    output_manager_default.log(
-      `No Environment Variables found for ${projectSlugLink} ${import_chalk2.default.gray(lsStamp())}`
-    );
-  } else {
-    output_manager_default.log(
-      `Environment Variables found for ${projectSlugLink} ${import_chalk2.default.gray(lsStamp())}`
-    );
-    client.stdout.write(`${getTable(link, envs, customEnvs)}
-`);
-  }
-  if (!asJson) {
-    const { isAgent } = await determineAgent2();
-    const guidanceMode = isGuidanceEnabled(
-      client,
-      parsedArgs.flags["--guidance"],
-      isAgent
-    );
-    if (guidanceMode) {
-      suggestNextCommands([
-        {
-          description: "Add an Environment Variable",
-          command: withGlobalFlags(client, "env add", {
-            preserveProject: true
-          })
-        },
-        {
-          description: "Remove an Environment Variable",
-          command: withGlobalFlags(client, "env rm", {
-            preserveProject: true
-          })
-        },
-        {
-          description: "Pull Development Environment Variables into .env.local",
-          command: withGlobalFlags(client, "env pull", {
-            preserveProject: true
-          })
-        }
-      ]);
-    }
-  }
-  return 0;
-}
-function getTable(link, records, customEnvironments) {
-  const label = records.some((env) => env.gitBranch) ? "environments (git branch)" : "environments";
-  return formatTable(
-    ["name", "value", "type", label, "created"],
-    ["l", "l", "l", "l", "l"],
-    [
-      {
-        name: "",
-        rows: records.map((row) => getRow(link, row, customEnvironments))
-      }
-    ]
-  );
-}
-function getRow(link, env, customEnvironments) {
-  let value;
-  if (isSecretEnvVar(env)) {
-    value = import_chalk2.default.gray.italic("Hidden");
-  } else if (env.type === "system") {
-    value = import_chalk2.default.gray.italic(env.value);
-  } else {
-    const singleLineValue = env.value.replace(/\s/g, " ");
-    value = import_chalk2.default.gray(ellipsis(singleLineValue, 19));
-  }
-  const now = Date.now();
-  return [
-    import_chalk2.default.bold(env.key),
-    value,
-    getEnvironmentVariableTypeLabel(env),
-    formatEnvironments(link, env, customEnvironments),
-    env.createdAt ? `${(0, import_ms.default)(now - env.createdAt)} ago` : ""
-  ];
-}
-function getEnvironmentVariableTypeLabel(env) {
-  if (isSecretEnvVar(env)) {
-    return "Secret";
-  }
-  if (env.type === "system") {
-    return "System";
-  }
-  return "Config";
-}
-
-// src/commands/env/rm.ts
-var import_chalk3 = __toESM(require_source(), 1);
-
-// src/util/env/remove-env-record.ts
-async function removeEnvRecord(client, projectId, env) {
-  output_manager_default.debug(`Removing Environment Variable ${env.key}`);
-  const url = `/v10/projects/${projectId}/env/${env.id}`;
-  await client.fetch(url, {
-    method: "DELETE"
-  });
-}
-
-// src/util/telemetry/commands/env/rm.ts
-var EnvRmTelemetryClient = class extends TelemetryClient {
-  trackCliArgumentName(name) {
-    if (name) {
-      this.trackCliArgument({
-        arg: "name",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliArgumentEnvironment(environment) {
-    if (environment) {
-      this.trackCliArgument({
-        arg: "environment",
-        value: STANDARD_ENVIRONMENTS.includes(
-          environment
-        ) ? environment : this.redactedValue
-      });
-    }
-  }
-  trackCliArgumentGitBranch(gitBranch) {
-    if (gitBranch) {
-      this.trackCliArgument({
-        arg: "git-branch",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliFlagYes(yes) {
-    if (yes) {
-      this.trackCliFlag("yes");
-    }
-  }
-};
-
-// src/commands/env/rm.ts
-function printEnvRmWarning(message) {
-  output_manager_default.print(`${import_chalk3.default.yellow("!")} ${message}
-`);
-}
-async function rm(client, argv) {
-  const telemetryClient = new EnvRmTelemetryClient({
-    opts: {
-      store: client.telemetryEventStore
-    }
-  });
-  let parsedArgs;
-  const flagsSpecification = getFlagsSpecification(removeSubcommand.options);
-  try {
-    parsedArgs = parseArguments(argv, flagsSpecification);
-  } catch (err) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "invalid_arguments",
-          message: err instanceof Error ? err.message : String(err)
-        },
-        1
-      );
-    }
-    printError(err);
-    return 1;
-  }
-  const { args, flags: opts } = parsedArgs;
-  if (args.length > 3) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "invalid_arguments",
-          message: `Invalid number of arguments. Usage: \`${getCommandNamePlain(
-            `env rm <name> ${getEnvTargetPlaceholder()} <gitbranch>`
-          )}\``
-        },
-        1
-      );
-    }
-    output_manager_default.error(
-      `Invalid number of arguments. Usage: ${getCommandName(
-        `env rm <name> ${getEnvTargetPlaceholder()} <gitbranch>`
-      )}`
-    );
-    return 1;
-  }
-  let [envName, envTarget, envGitBranch] = args;
-  telemetryClient.trackCliArgumentName(envName);
-  telemetryClient.trackCliArgumentEnvironment(envTarget);
-  telemetryClient.trackCliArgumentGitBranch(envGitBranch);
-  telemetryClient.trackCliFlagYes(opts["--yes"]);
-  telemetryClient.trackCliOptionProject(opts["--project"]);
-  const link = await resolveProjectContext({
-    client,
-    projectNameOrId: opts["--project"]
-  });
-  if (link.status === "error") {
-    return link.exitCode;
-  } else if (link.status === "not_linked") {
-    if (client.nonInteractive) {
-      const preserved = getPreservedArgsForEnvRm(client.argv).filter(
-        (a) => a !== "--yes" && a !== "-y"
-      );
-      const linkArgv = [
-        ...client.argv.slice(0, 2),
-        "link",
-        "--scope",
-        "<scope>",
-        ...preserved
-      ];
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "not_linked",
-          message: `Your codebase isn't linked to a project on Vercel. Run \`${getCommandNamePlain(
-            "link"
-          )}\` to begin. Use \`--yes\` for non-interactive; use \`--scope\` or \`--project\` to specify team or project.`,
-          next: [
-            { command: buildCommandWithYes(linkArgv) },
-            { command: buildCommandWithYes(client.argv) }
-          ]
-        },
-        1
-      );
-    } else {
-      output_manager_default.error(
-        `Your codebase isn\u2019t linked to a project on Vercel. Run ${getCommandName(
-          "link"
-        )} to begin.`
-      );
-    }
-    return 1;
-  }
-  client.config.currentTeam = link.org.type === "team" ? link.org.id : void 0;
-  const { project } = link;
-  if (!envName) {
-    if (client.nonInteractive) {
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "missing_name",
-          message: "Provide the variable name as an argument. Example: `vercel env rm <name> --yes`",
-          next: [
-            {
-              command: buildEnvRmCommandWithPreservedArgs(
-                client.argv,
-                `env rm <name> ${getEnvTargetPlaceholder()} --yes`
-              )
-            }
-          ]
-        },
-        1
-      );
-    }
-    envName = await client.input.text({
-      message: "What's the name of the variable?",
-      validate: (val) => val ? true : "Name cannot be empty"
-    });
-  }
-  const [result, customEnvironments] = await Promise.all([
-    getEnvRecords(client, project.id, "vercel-cli:env:rm", {
-      target: envTarget,
-      gitBranch: envGitBranch
-    }),
-    getCustomEnvironments(client, project.id)
-  ]);
-  let envs = result.envs.filter((env2) => env2.key === envName);
-  if (envs.length === 0) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "env_not_found",
-          message: `Environment Variable ${envName} was not found.`
-        },
-        1
-      );
-    }
-    output_manager_default.error(`Environment Variable was not found.
-`);
-    return 1;
-  }
-  while (envs.length > 1) {
-    if (client.nonInteractive) {
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "multiple_envs",
-          message: `Multiple Environment Variables match ${envName}. Specify target and/or branch to remove one.`,
-          next: [
-            {
-              command: buildEnvRmCommandWithPreservedArgs(
-                client.argv,
-                `env rm ${envName} ${getEnvTargetPlaceholder()} --yes`
-              )
-            }
-          ]
-        },
-        1
-      );
-    }
-    const id = await client.input.select({
-      message: `Remove ${envName} from which Environments?`,
-      choices: envs.map((env2) => ({
-        value: env2.id,
-        name: formatEnvironments(link, env2, customEnvironments)
-      }))
-    });
-    if (!id) {
-      output_manager_default.error("Please select at least one Environment Variable to remove");
-    }
-    envs = envs.filter((env2) => env2.id === id);
-  }
-  const env = envs[0];
-  const shouldWarnAboutRotation = shouldConfirmRotationBeforeDelete({
-    key: env.key,
-    type: env.type,
-    hasPublicPrefix: getPublicPrefix(env.key) !== null
-  });
-  const rotationWarning = "Removing this variable from Vercel does not revoke the credential. Rotate or disable it at its provider.";
-  if (shouldWarnAboutRotation) {
-    printEnvRmWarning(rotationWarning);
-  }
-  const skipConfirmation = opts["--yes"];
-  if (!skipConfirmation) {
-    if (client.nonInteractive) {
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "confirmation_required",
-          message: `Removing Environment Variable ${env.key}. ${shouldWarnAboutRotation ? `${rotationWarning} ` : ""}Use --yes to confirm.`,
-          next: [{ command: buildCommandWithYes(client.argv) }]
-        },
-        1
-      );
-    }
-    if (!await client.input.confirm(
-      `Remove ${param(env.key)} from ${formatEnvironments(
-        link,
-        env,
-        customEnvironments
-      )} in Project ${import_chalk3.default.bold(project.name)}?`,
-      false
-    )) {
-      output_manager_default.log("Canceled");
-      return 0;
-    }
-  }
-  const rmStamp = stamp_default();
-  try {
-    output_manager_default.spinner("Removing");
-    await removeEnvRecord(client, project.id, env);
-  } catch (err) {
-    if (client.nonInteractive && isAPIError(err)) {
-      const reason = err.slug || (err.serverMessage?.toLowerCase().includes("branch") ? "branch_not_found" : "api_error");
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason,
-          message: err.serverMessage
-        },
-        1
-      );
-    }
-    if (isAPIError(err) && isKnownError(err)) {
-      output_manager_default.error(err.serverMessage);
-      return 1;
-    }
-    throw err;
-  }
-  output_manager_default.print(
-    `${prependEmoji(
-      `Removed Environment Variable ${import_chalk3.default.gray(rmStamp())}`,
-      emoji("success")
-    )}
-`
-  );
-  return 0;
-}
-
-// src/commands/env/run.ts
-var import_env = __toESM(require_dist3(), 1);
-var import_chalk4 = __toESM(require_source(), 1);
-var import_execa = __toESM(require_execa(), 1);
-function printEnvRunWarning(message) {
-  output_manager_default.print(`${import_chalk4.default.yellow("!")} ${message}
-`);
-}
-function omitUnavailableSecretPlaceholders(localEnv, secretKeys) {
-  const safeLocalEnv = { ...localEnv };
-  for (const key of secretKeys) {
-    if (safeLocalEnv[key] === SENSITIVE_ENV_VALUE_PLACEHOLDER) {
-      delete safeLocalEnv[key];
-    }
-  }
-  return safeLocalEnv;
-}
-function parseRunArgs(argv) {
-  const argvIndex = argv.indexOf("--");
-  const hasDoubleDash = argvIndex !== -1;
-  const vercelArgs = hasDoubleDash ? argv.slice(2, argvIndex) : argv.slice(2);
-  const userCommand = hasDoubleDash ? argv.slice(argvIndex + 1) : [];
-  return { vercelArgs, userCommand };
-}
-function needsHelpForRun(client) {
-  const { vercelArgs } = parseRunArgs(client.argv);
-  const flagsSpecification = getFlagsSpecification(runSubcommand.options);
-  try {
-    const parsedArgs = parseArguments(vercelArgs, flagsSpecification);
-    return Boolean(parsedArgs.flags["--help"]);
-  } catch {
-    return false;
-  }
-}
-async function run(client, telemetry) {
-  const { vercelArgs, userCommand } = parseRunArgs(client.argv);
-  let parsedArgs;
-  const flagsSpecification = getFlagsSpecification(runSubcommand.options);
-  try {
-    parsedArgs = parseArguments(vercelArgs, flagsSpecification);
-  } catch (error) {
-    printError(error);
-    return 1;
-  }
-  if (userCommand.length === 0) {
-    outputActionRequired(
-      client,
-      {
-        status: "action_required",
-        reason: "missing_command",
-        message: "No command provided. Use `--` to separate Vercel flags from your command.",
-        next: [{ command: getCommandNamePlain("env run -- <command>") }]
-      },
-      1
-    );
-    output_manager_default.error(
-      `No command provided. Use \`--\` to separate vercel flags from your command.`
-    );
-    return 1;
-  }
-  const projectName = parsedArgs.flags["--project"];
-  telemetry.trackCliOptionProject(projectName);
-  const link = await resolveProjectContext({
-    client,
-    projectNameOrId: projectName
-  });
-  if (link.status === "error") {
-    return link.exitCode;
-  } else if (link.status === "not_linked") {
-    outputActionRequired(
-      client,
-      {
-        status: "action_required",
-        reason: "not_linked",
-        message: "Your codebase isn't linked to a project on Vercel. Run `vercel link`, then retry this command.",
-        next: [{ command: getCommandNamePlain("link") }]
-      },
-      1
-    );
-    output_manager_default.error(
-      `Your codebase isn't linked to a project on Vercel. Run ${getCommandName(
-        "link"
-      )} to begin.`
-    );
-    return 1;
-  }
-  client.config.currentTeam = link.org.type === "team" ? link.org.id : void 0;
-  const environment = parseTarget({
-    flagName: "environment",
-    flags: parsedArgs.flags
-  }) || "development";
-  const gitBranch = parsedArgs.flags["--git-branch"];
-  output_manager_default.spinner(`Downloading \`${environment}\` environment variables`);
-  const records = await pullEnvRecords(
-    client,
-    link.project.id,
-    "vercel-cli:env:run",
-    {
-      target: environment,
-      gitBranch
-    }
-  );
-  output_manager_default.stopSpinner();
-  output_manager_default.debug(
-    `Running command with ${Object.keys(records.env).length} environment variables`
-  );
-  let localEnv = {};
-  try {
-    localEnv = (0, import_env.loadEnvConfig)(client.cwd, true).combinedEnv;
-  } catch (err) {
-    output_manager_default.debug(`Failed to load local env files: ${err}`);
-  }
-  const localPlaceholderKeys = Object.entries(localEnv).filter(([, value]) => value === SENSITIVE_ENV_VALUE_PLACEHOLDER).map(([key]) => key);
-  const safeLocalEnv = omitUnavailableSecretPlaceholders(
-    localEnv,
-    localPlaceholderKeys
-  );
-  const processPlaceholderKeys = Object.keys(records.env).filter(
-    (key) => process.env[key] === SENSITIVE_ENV_VALUE_PLACEHOLDER
-  );
-  const safeProcessEnv = omitUnavailableSecretPlaceholders(
-    process.env,
-    processPlaceholderKeys
-  );
-  const unavailableCandidateKeys = new Set(
-    Object.entries(records.env).filter(
-      ([key, value]) => !value && !safeLocalEnv[key] && !safeProcessEnv[key]
-    ).map(([key]) => key)
-  );
-  if (unavailableCandidateKeys.size > 0) {
-    try {
-      const { envs } = await getEnvRecords(
-        client,
-        link.project.id,
-        "vercel-cli:env:run",
-        { target: environment, gitBranch }
-      );
-      const unavailableSecretKeys = envs.filter(
-        (env) => isSecretEnvVar(env) && unavailableCandidateKeys.has(env.key)
-      );
-      if (unavailableSecretKeys.length > 0) {
-        printEnvRunWarning(
-          `${getUnavailableSecretValuesMessage(
-            environment,
-            unavailableSecretKeys.length
-          )}${getLocalSecretFallbackMessage(unavailableSecretKeys.length)}`
-        );
-      }
-    } catch {
-    }
-  }
-  try {
-    const result = await (0, import_execa.default)(userCommand[0], userCommand.slice(1), {
-      cwd: client.cwd,
-      stdio: "inherit",
-      reject: false,
-      env: {
-        ...records.env,
-        ...safeLocalEnv,
-        ...safeProcessEnv
-      }
-    });
-    if (result instanceof Error && typeof result.exitCode !== "number") {
-      output_manager_default.prettyError(result);
-      return 1;
-    }
-    return result.exitCode;
-  } catch (err) {
-    output_manager_default.prettyError(err);
-    return 1;
-  }
-}
-
-// src/commands/env/update.ts
-var import_chalk5 = __toESM(require_source(), 1);
-
-// src/util/env/update-env-record.ts
-var import_constants3 = __toESM(require_dist2(), 1);
-async function updateEnvRecord(client, projectId, envId, type, key, value, targets, gitBranch, visibility) {
-  output_manager_default.debug(
-    `Updating ${type} Environment Variable ${key} in ${targets.length} targets`
-  );
-  const target = [];
-  const customEnvironmentIds = [];
-  for (const t of targets) {
-    const arr = import_constants3.PROJECT_ENV_TARGET.includes(t) ? target : customEnvironmentIds;
-    arr.push(t);
-  }
-  const body = {
-    type,
-    value,
-    target,
-    customEnvironmentIds: customEnvironmentIds.length > 0 ? customEnvironmentIds : void 0,
-    gitBranch: gitBranch || void 0,
-    ...visibility !== void 0 ? { visibility } : {}
-  };
-  if (key) {
-    body.key = key;
-  }
-  const url = `/v10/projects/${projectId}/env/${envId}`;
-  await client.fetch(url, {
-    method: "PATCH",
-    body
-  });
-}
-
-// src/util/telemetry/commands/env/update.ts
-var EnvUpdateTelemetryClient = class extends TelemetryClient {
-  trackCliArgumentName(name) {
-    if (name) {
-      this.trackCliArgument({
-        arg: "name",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliArgumentEnvironment(environment) {
-    if (environment) {
-      this.trackCliArgument({
-        arg: "environment",
-        value: STANDARD_ENVIRONMENTS.includes(
-          environment
-        ) ? environment : this.redactedValue
-      });
-    }
-  }
-  trackCliArgumentGitBranch(gitBranch) {
-    if (gitBranch) {
-      this.trackCliArgument({
-        arg: "git-branch",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliFlagSensitive(sensitive) {
-    if (sensitive) {
-      this.trackCliFlag("sensitive");
-    }
-  }
-  trackCliFlagYes(yes) {
-    if (yes) {
-      this.trackCliFlag("yes");
-    }
-  }
-  trackCliOptionValue(value) {
-    if (value) {
-      this.trackCliOption({
-        option: "value",
-        value: this.redactedValue
-      });
-    }
-  }
-  trackCliOptionVisibility(visibility) {
-    if (visibility) {
-      const validVisibilities = ["config", "secret"];
-      this.trackCliOption({
-        option: "visibility",
-        value: validVisibilities.includes(visibility) ? visibility : this.redactedValue
-      });
-    }
-  }
-  trackCliOptionType(type) {
-    if (type) {
-      const validTypes = ["config", "secret"];
-      this.trackCliOption({
-        option: "type",
-        value: validTypes.includes(type) ? type : this.redactedValue
-      });
-    }
-  }
-};
-
-// src/commands/env/update.ts
-function looksLikeCredentialName2(key, publicPrefix = getPublicPrefix(key)) {
-  return looksLikeSecret(publicPrefix ? key.slice(publicPrefix.length) : key);
-}
-function printEnvUpdateWarning(message) {
-  output_manager_default.print(`${import_chalk5.default.yellow("!")} ${message}
-`);
-}
-function omitEnvValueArgs(argv) {
-  const out = [];
-  for (let i = 0; i < argv.length; i++) {
-    if (argv[i] === "--value") {
-      i++;
-      continue;
-    }
-    if (argv[i].startsWith("--value="))
-      continue;
-    out.push(argv[i]);
-  }
-  return out;
-}
-function formatTargetArg(targets, customEnvironments) {
-  return targets.map(
-    (target) => customEnvironments.find(
-      (environment) => environment.id === target || environment.slug === target
-    )?.slug ?? target
-  ).join(",");
-}
-function promptEnvUpdateValue(client, envName, isSecret) {
-  return client.input.text({
-    message: `What's the new value of ${envName}?`,
-    ...isSecret ? { transformer: (value) => "*".repeat(value.length) } : {}
-  });
-}
-async function update(client, argv) {
-  let parsedArgs;
-  const flagsSpecification = getFlagsSpecification(updateSubcommand.options);
-  try {
-    parsedArgs = parseArguments(argv, flagsSpecification);
-  } catch (err) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "invalid_arguments",
-          message: err instanceof Error ? err.message : String(err)
-        },
-        1
-      );
-    }
-    printError(err);
-    return 1;
-  }
-  const { args, flags: opts } = parsedArgs;
-  const valueFromFlag = typeof opts["--value"] === "string" ? opts["--value"] : void 0;
-  const stdInput = await readStandardInput(client.stdin);
-  let [envName, envTargetArg, envGitBranch] = args;
-  const typeOption = resolveEnvVarTypeOption({
-    type: typeof opts["--type"] === "string" ? opts["--type"] : void 0,
-    visibility: typeof opts["--visibility"] === "string" ? opts["--visibility"] : void 0
-  });
-  let explicitType = typeOption.explicitVisibility;
-  const typeWasExplicit = explicitType !== void 0 || Boolean(opts["--sensitive"]);
-  const telemetryClient = new EnvUpdateTelemetryClient({
-    opts: {
-      store: client.telemetryEventStore
-    }
-  });
-  telemetryClient.trackCliArgumentName(envName);
-  telemetryClient.trackCliArgumentEnvironment(envTargetArg);
-  telemetryClient.trackCliArgumentGitBranch(envGitBranch);
-  telemetryClient.trackCliFlagSensitive(opts["--sensitive"]);
-  telemetryClient.trackCliFlagYes(opts["--yes"]);
-  telemetryClient.trackCliOptionValue(
-    valueFromFlag === void 0 ? void 0 : "<redacted>"
-  );
-  telemetryClient.trackCliOptionType(
-    typeof opts["--type"] === "string" ? opts["--type"] : void 0
-  );
-  telemetryClient.trackCliOptionVisibility(
-    typeof opts["--visibility"] === "string" ? opts["--visibility"] : void 0
-  );
-  if (typeOption.error) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: typeOption.errorReason ?? "invalid_type",
-          message: typeOption.error
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(typeOption.error);
-    return 1;
-  }
-  if (typeOption.usedDeprecatedVisibility) {
-    printEnvUpdateWarning(ENV_VISIBILITY_DEPRECATION_MESSAGE);
-  }
-  if (explicitType === "config" && opts["--sensitive"]) {
-    const message = "`--type config` cannot be used with `--sensitive`. Pick one.";
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "conflicting_type_flags",
-          message
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(message);
-    return 1;
-  }
-  if (args.length > 3) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "invalid_arguments",
-          message: `Invalid number of arguments. Usage: \`${getCommandNamePlain(
-            `env update <name> ${getEnvTargetPlaceholder()} <gitbranch>`
-          )}\``
-        },
-        1
-      );
-    }
-    output_manager_default.error(
-      `Invalid number of arguments. Usage: ${getCommandName(
-        `env update <name> ${getEnvTargetPlaceholder()} <gitbranch>`
-      )}`
-    );
-    return 1;
-  }
-  if (stdInput && (!envName || !envTargetArg)) {
-    output_manager_default.error(
-      `Invalid number of arguments. Usage: ${getCommandName(
-        `env update <name> <target> <gitbranch> < <file>`
-      )}`
-    );
-    return 1;
-  }
-  if (client.nonInteractive) {
-    const missing = [];
-    if (!envName)
-      missing.push("missing_name");
-    if (!stdInput && valueFromFlag === void 0)
-      missing.push("missing_value");
-    if (missing.length > 0) {
-      const parts = missing.map(
-        (m) => m === "missing_name" ? "name" : "--value or stdin"
-      );
-      const targetPart = envTargetArg || getEnvTargetPlaceholder();
-      const branchPart = envTargetArg === "preview" || envTargetArg === "development" ? " <gitbranch>" : "";
-      const template = `env update ${envName || "<name>"} ${targetPart}${branchPart} --value <value> --yes`;
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "missing_requirements",
-          missing,
-          message: `Provide all required inputs for non-interactive mode: ${parts.join("; ")}. Example: ${getCommandNamePlain(template)}`,
-          next: [
-            {
-              command: buildEnvUpdateCommandWithPreservedArgs(
-                client.argv,
-                template
-              )
-            }
-          ]
-        },
-        1
-      );
-    }
-  }
-  const envTargets = [];
-  if (envTargetArg) {
-    envTargets.push(envTargetArg);
-  }
-  if (!envName) {
-    if (client.nonInteractive) {
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "missing_name",
-          message: "Provide the variable name as an argument. Example: vercel env update <name>",
-          next: [
-            {
-              command: buildEnvUpdateCommandWithPreservedArgs(
-                client.argv,
-                `env update <name> ${getEnvTargetPlaceholder()} --value <value> --yes`
-              )
-            }
-          ]
-        },
-        1
-      );
-    } else {
-      envName = await client.input.text({
-        message: `What's the name of the variable to update?`,
-        validate: (val) => val ? true : "Name cannot be empty"
-      });
-    }
-  }
-  telemetryClient.trackCliOptionProject(opts["--project"]);
-  const link = await resolveProjectContext({
-    client,
-    projectNameOrId: opts["--project"]
-  });
-  if (link.status === "error") {
-    return link.exitCode;
-  } else if (link.status === "not_linked") {
-    if (client.nonInteractive) {
-      const preserved = omitEnvValueArgs(
-        getPreservedArgsForEnvUpdate(client.argv)
-      ).filter((a) => a !== "--yes" && a !== "-y");
-      const linkArgv = [
-        ...client.argv.slice(0, 2),
-        "link",
-        "--scope",
-        "<scope>",
-        ...preserved
-      ];
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "not_linked",
-          message: `Your codebase isn't linked to a project on Vercel. Run ${getCommandNamePlain(
-            "link"
-          )} to begin. Use --yes for non-interactive; use --scope or --project to specify team or project.`,
-          next: [
-            { command: buildCommandWithYes(linkArgv) },
-            {
-              command: buildCommandWithYes(redactEnvValueArgs(client.argv))
-            }
-          ]
-        },
-        1
-      );
-    }
-    output_manager_default.error(
-      `Your codebase isn't linked to a project on Vercel. Run ${getCommandName(
-        "link"
-      )} to begin.`
-    );
-    return 1;
-  }
-  client.config.currentTeam = link.org.type === "team" ? link.org.id : void 0;
-  const { project } = link;
-  const [{ envs }, customEnvironments] = await Promise.all([
-    getEnvRecords(client, project.id, "vercel-cli:env:update"),
-    getCustomEnvironments(client, project.id)
-  ]);
-  const customEnvironment = customEnvironments.find(
-    ({ slug, id }) => slug === envTargetArg || id === envTargetArg
-  );
-  const normalizedEnvTargetArg = customEnvironment?.id || envTargetArg;
-  const matchingEnvs = envs.filter((r) => r.key === envName);
-  if (matchingEnvs.length === 0) {
-    const listFlags = getGlobalFlagsFromArgs(client.argv.slice(2), {
-      preserveProject: true
-    });
-    const listArgs = `env ls ${listFlags.join(" ")}`.trim();
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "env_not_found",
-          message: `The variable ${envName} was not found. Run ${getCommandNamePlain(listArgs)} to see all available Environment Variables.`
-        },
-        1
-      );
-    }
-    output_manager_default.error(
-      `The variable ${param(envName)} was not found. Run ${getCommandName(listArgs)} to see all available Environment Variables.`
-    );
-    return 1;
-  }
-  let selectedEnv;
-  if (envTargetArg || envGitBranch) {
-    const filteredEnvs = matchingEnvs.filter((env) => {
-      const matchesTarget = !normalizedEnvTargetArg || (Array.isArray(env.target) ? env.target.includes(normalizedEnvTargetArg) : env.target === normalizedEnvTargetArg) || env.customEnvironmentIds && env.customEnvironmentIds.includes(normalizedEnvTargetArg);
-      const matchesGitBranch = !envGitBranch || env.gitBranch === envGitBranch;
-      return matchesTarget && matchesGitBranch;
-    });
-    if (filteredEnvs.length === 0) {
-      if (client.nonInteractive) {
-        outputAgentError(
-          client,
-          {
-            status: "error",
-            reason: "env_not_found",
-            message: `No Environment Variable ${envName} found matching the specified target/branch.`
-          },
-          1
-        );
-      }
-      output_manager_default.error(
-        `No Environment Variable ${param(envName)} found matching the specified criteria.`
-      );
-      return 1;
-    }
-    if (filteredEnvs.length === 1) {
-      selectedEnv = filteredEnvs[0];
-    } else {
-      if (client.nonInteractive) {
-        outputActionRequired(
-          client,
-          {
-            status: "action_required",
-            reason: "multiple_envs",
-            message: `Multiple Environment Variables match ${envName}. Specify target and/or branch to update one.`,
-            next: [
-              {
-                command: buildEnvUpdateCommandWithPreservedArgs(
-                  client.argv,
-                  `env update ${envName} ${getEnvTargetPlaceholder()} <gitbranch> --value "<value>" --yes`
-                )
-              }
-            ]
-          },
-          1
-        );
-      }
-      const choices = filteredEnvs.map((env, index) => {
-        const targets2 = formatEnvironments(link, env, customEnvironments);
-        return {
-          name: targets2,
-          value: index
-        };
-      });
-      const selectedIndex = await client.input.select({
-        message: `Multiple Environment Variables found for ${param(envName)}. Which one do you want to update?`,
-        choices
-      });
-      selectedEnv = filteredEnvs[selectedIndex];
-    }
-  } else if (matchingEnvs.length === 1) {
-    selectedEnv = matchingEnvs[0];
-  } else {
-    if (client.nonInteractive) {
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "multiple_envs",
-          message: `Multiple Environment Variables match ${envName}. Specify target and/or branch to update one.`,
-          next: [
-            {
-              command: buildEnvUpdateCommandWithPreservedArgs(
-                client.argv,
-                `env update ${envName} ${getEnvTargetPlaceholder()} <gitbranch> --value "<value>" --yes`
-              )
-            }
-          ]
-        },
-        1
-      );
-    }
-    const choices = matchingEnvs.map((env, index) => {
-      const targets2 = formatEnvironments(link, env, customEnvironments);
-      return {
-        name: targets2,
-        value: index
-      };
-    });
-    const selectedIndex = await client.input.select({
-      message: `Multiple Environment Variables found for ${param(envName)}. Which one do you want to update?`,
-      choices
-    });
-    selectedEnv = matchingEnvs[selectedIndex];
-  }
-  let customSveltePublicPrefix;
-  const apiPublicPrefix = getApiPublicPrefix(envName);
-  const frameworkPublicPrefix = getFrameworkPublicPrefix(
-    project.framework,
-    envName
-  );
-  if (project.framework === "sveltekit" || project.framework === "sveltekit-1" || project.framework === "sveltekit-2") {
-    const localPublicPrefixes = await getLocalSvelteKitPublicPrefixes(
-      link.repoRoot ?? client.cwd,
-      project.rootDirectory
-    );
-    const matchingLocalPrefix = localPublicPrefixes?.find(
-      (prefix) => envName.startsWith(prefix)
-    );
-    if (matchingLocalPrefix !== void 0 && apiPublicPrefix === null && frameworkPublicPrefix === null) {
-      customSveltePublicPrefix = matchingLocalPrefix;
-    }
-  }
-  const targets = Array.isArray(selectedEnv.target) ? selectedEnv.target : [selectedEnv.target].filter(
-    (r) => Boolean(r)
-  );
-  const allTargets = [...targets, ...selectedEnv.customEnvironmentIds || []];
-  const selectedEnvIsSecret = isSecretEnvVar(selectedEnv);
-  if (explicitType === "config" && selectedEnvIsSecret) {
-    const removeTargetArg = envTargetArg || targets[0] || allTargets[0] || getEnvTargetPlaceholder();
-    const addTargetArg = formatTargetArg(allTargets, customEnvironments) || removeTargetArg;
-    const removeBranchArg = selectedEnv.gitBranch ? ` ${quoteArg(selectedEnv.gitBranch)}` : "";
-    const addBranchArg = selectedEnv.gitBranch ? ` --git-branch ${quoteArg(selectedEnv.gitBranch)}` : "";
-    const globalFlags = getGlobalFlagsFromArgs(client.argv.slice(2), {
-      preserveProject: true
-    });
-    const humanGlobalFlags = globalFlags.filter(
-      (flag) => !flag.startsWith("--non-interactive")
-    );
-    const globalSuffix = globalFlags.length > 0 ? ` ${globalFlags.map(quoteArg).join(" ")}` : "";
-    const humanGlobalSuffix = humanGlobalFlags.length > 0 ? ` ${humanGlobalFlags.map(quoteArg).join(" ")}` : "";
-    const removeCommand = getCommandNamePlain(
-      `env rm ${envName} ${removeTargetArg}${removeBranchArg} --yes${globalSuffix}`
-    );
-    const addCommand = getCommandNamePlain(
-      `env add ${envName} ${addTargetArg}${addBranchArg} --type config --value "<value>" --yes${globalSuffix}`
-    );
-    const removeHumanCommand = getCommandNamePlain(
-      `env rm ${envName} ${removeTargetArg}${removeBranchArg}${humanGlobalSuffix}`
-    );
-    const addHumanCommand = getCommandNamePlain(
-      `env add ${envName} ${addTargetArg}${addBranchArg} --type config${humanGlobalSuffix}`
-    );
-    const message = "A Secret cannot be changed to Config. To store this value as Config, remove the variable and add it again with `--type config`.";
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "secret_cannot_become_config",
-          message,
-          next: [
-            {
-              command: removeCommand,
-              when: "Remove the Secret from all of its environments"
-            },
-            {
-              command: addCommand,
-              when: "Add it again as Config; replace <value> before running"
-            }
-          ]
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(
-      `A Secret cannot be changed to Config. Remove the variable, then add it again as Config. ${param(envName)} will be unavailable to new builds between these commands.`
-    );
-    output_manager_default.print(`  Remove:
+`),1;let selectedAction=await client.input.select({message:"How should this variable be stored?",choices:[...publicPrefix===""?[]:[{name:`Keep private: rename to ${privateName} and use Secret`,value:"private"}],{name:`Expose to anyone visiting your site: keep ${envName} as Config`,value:"public"},{name:"Enter a different value",value:"reenter"}]});if(selectedAction==="private"){envName=privateName,finalType="sensitive",explicitType="secret",typeSource="prompt",output_manager_default.log(`Renamed to ${envName}`);break}if(selectedAction==="reenter"){let reenteredValue=await promptEnvValue(client,{isSensitive:!1});finalValue=(await validateEnvValue({envName,initialValue:reenteredValue,skipConfirm:!1,promptForValue:()=>promptEnvValue(client,{isSensitive:!1}),selectAction:choices2=>client.input.select({message:"Value?",choices:choices2}),showWarning:msg=>printEnvAddWarning(msg),showLog:msg=>output_manager_default.log(msg)})).finalValue;continue}}else typeSource!=="argv"&&typeSource!=="prompt"&&!opts["--yes"]&&!client.nonInteractive&&await client.input.select({message:"Store this value as?",choices:[{name:getSecretStorageChoice(envTargets,"for this value"),value:"secret"},{name:"Config (can be revealed after saving)",value:"config"}]})==="secret"&&(finalType="sensitive",explicitType="secret",typeSource="prompt");break}finalType==="sensitive"&&customSveltePublicPrefix!==void 0&&envName.startsWith(customSveltePublicPrefix)&&printEnvAddWarning("This SvelteKit project exposes this variable to the browser; the Secret type does not prevent that. Rename the variable without the configured public prefix to keep it private."),isFlagsSecretNeedingSplit({key:envName,type:finalType,targets:envTargets.filter(isValidEnvTarget),customEnvironmentIds:envTargets.filter(target=>!isValidEnvTarget(target))})&&printEnvAddWarning("FLAGS_SECRET should use a separate value for each environment so Development overrides cannot affect Preview or Production.");let hasProduction=envTargets.includes("production"),hasNonProduction=envTargets.some(target=>target!=="production");if(finalType==="sensitive"&&disjunctiveProductionSecretPolicyOn&&hasProduction&&hasNonProduction){let message="Your team requires Production and non-Production Secrets to be stored separately with different values. Run one command for Production and another for the remaining environments.";return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"production_secret_must_be_separate",message,next:[{command:buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} production --type secret --value "<production-value>" --yes`),when:"Set the Production Secret"},{command:buildEnvAddCommandWithPreservedArgs(client.argv,`env add ${envName} ${envTargets.filter(target=>target!=="production").join(",")} --type secret --value "<non-production-value>" --yes`),when:"Set the non-Production Secret"}]},1),output_manager_default.fatal(message),1}let upsert=opts["--force"]?"true":"",{visibility,error:visibilityError}=resolveEnvVarVisibility({explicitVisibility:explicitType,explicitOptionSource:typeOption.source,type:finalType,key:envName,envTargets,teamSensitivePolicyOn,context:"add"});if(visibilityError)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_type",message:visibilityError},1),output_manager_default.fatal(visibilityError),1;try{output_manager_default.spinner("Saving\u2026"),await addEnvRecord(client,project.id,upsert,finalType,envName,finalValue,envTargets,envGitBranch,visibility)}catch(err){if(client.nonInteractive&&isAPIError(err)){let productionSecretPolicyError=getProductionSecretPolicyErrorKind(err.serverMessage),reason=productionSecretPolicyError?productionSecretPolicyError==="different-values"?"production_secret_requires_different_value":"production_secret_must_be_separate":err.slug||(err.serverMessage?.toLowerCase().includes("branch")?"branch_not_found":"api_error");outputAgentError(client,{status:"error",reason,message:productionSecretPolicyError?`${err.serverMessage} ${getProductionSecretPolicyRecovery(productionSecretPolicyError)}`:err.serverMessage},1)}if(isAPIError(err)&&isKnownError(err))return output_manager_default.error(err.serverMessage),1;throw err}printEnvAddResult(link,envName,envTargets,envGitBranch,customEnvironments,finalType,!!opts["--force"],visibility),typeSource==="default"&&output_manager_default.print(`  ${import_chalk.default.dim(getDefaultSecretStorageGuidance(envTargets))}
+`);let{isAgent}=await determineAgent();return isGuidanceEnabled(client,parsedArgs.flags["--guidance"],isAgent)&&suggestNextCommands([{description:"List Environment Variables",command:withGlobalFlags(client,"env ls",{preserveProject:!0})},{description:"Pull Development Environment Variables into .env.local",command:withGlobalFlags(client,"env pull",{preserveProject:!0})}]),0}var import_chalk2=__toESM(require_source(),1),import_ms=__toESM(require_ms(),1);var import_title=__toESM(require_lib(),1);function formatEnvironments(link,env,customEnvironments){let defaultTargets=(Array.isArray(env.target)?env.target:[env.target||""]).map(t=>formatEnvironment(link.org.slug,link.project.name,{id:t,slug:(0,import_title.default)(t)})),customTargets=env.customEnvironmentIds?env.customEnvironmentIds.map(id=>customEnvironments.find(e=>e.id===id)).filter(Boolean).map(e=>formatEnvironment(link.org.slug,link.project.name,e)):[],targetsString=[...defaultTargets,...customTargets].join(", ");return env.gitBranch?`${targetsString} (${env.gitBranch})`:targetsString}var EnvLsTelemetryClient=class extends TelemetryClient{trackCliArgumentEnvironment(environment){environment&&this.trackCliArgument({arg:"environment",value:STANDARD_ENVIRONMENTS.includes(environment)?environment:this.redactedValue})}trackCliArgumentGitBranch(gitBranch){gitBranch&&this.trackCliArgument({arg:"git-branch",value:this.redactedValue})}trackCliFlagGuidance(guidance){guidance&&this.trackCliFlag("guidance")}trackCliFlagJson(json){json&&this.trackCliFlag("json")}};import{determineAgent as determineAgent2}from"@vercel/detect-agent";async function ls(client,argv){let telemetryClient=new EnvLsTelemetryClient({opts:{store:client.telemetryEventStore}}),parsedArgs,flagsSpecification=getFlagsSpecification(listSubcommand.options);try{parsedArgs=parseArguments(argv,flagsSpecification)}catch(err){return printError(err),1}let{args,flags}=parsedArgs,validationResult=validateLsArgs({commandName:"env ls",args,maxArgs:2,exitCode:1,usageString:getCommandName(`env ls ${getEnvTargetPlaceholder()} <gitbranch>`)});if(validationResult!==0)return validationResult;let[envTarget,envGitBranch]=args,formatResult=validateJsonOutput(flags);if(!formatResult.valid)return output_manager_default.error(formatResult.error),1;let asJson=formatResult.jsonOutput;telemetryClient.trackCliArgumentEnvironment(envTarget),telemetryClient.trackCliArgumentGitBranch(envGitBranch),telemetryClient.trackCliFlagGuidance(flags["--guidance"]),telemetryClient.trackCliOptionFormat(flags["--format"]);let projectName=flags["--project"];telemetryClient.trackCliOptionProject(projectName);let link=await resolveProjectContext({client,projectNameOrId:projectName,commandName:"env ls"});if(link.status==="error")return link.exitCode;if(link.status==="not_linked")return output_manager_default.error(`Your codebase isn\u2019t linked to a project on Vercel. Pass --project <name>, or ${client.nonInteractive?`run ${getCommandName("link --yes --team <team-id> --project <project-id>")} to link non-interactively.`:`run ${getCommandName("link")} to begin.`}`),1;client.config.currentTeam=link.org.type==="team"?link.org.id:void 0;let{project,org}=link,lsStamp=stamp_default(),[envsResult,customEnvs]=await Promise.all([getEnvRecords(client,project.id,"vercel-cli:env:ls",{target:envTarget,gitBranch:envGitBranch}),getCustomEnvironments(client,project.id)]),{envs}=envsResult,projectSlugLink=formatProject(org.slug,project.name);if(asJson){output_manager_default.stopSpinner();let jsonOutput={envs:envs.map(env=>({key:env.key,value:isSecretEnvVar(env)?void 0:env.value,type:env.type,visibility:env.visibility,target:env.target,gitBranch:env.gitBranch,configurationId:env.configurationId,createdAt:env.createdAt,updatedAt:env.updatedAt}))};client.stdout.write(`${JSON.stringify(jsonOutput,null,2)}
+`)}else envs.length===0?output_manager_default.log(`No Environment Variables found for ${projectSlugLink} ${import_chalk2.default.gray(lsStamp())}`):(output_manager_default.log(`Environment Variables found for ${projectSlugLink} ${import_chalk2.default.gray(lsStamp())}`),client.stdout.write(`${getTable(link,envs,customEnvs)}
+`));if(!asJson){let{isAgent}=await determineAgent2();isGuidanceEnabled(client,parsedArgs.flags["--guidance"],isAgent)&&suggestNextCommands([{description:"Add an Environment Variable",command:withGlobalFlags(client,"env add",{preserveProject:!0})},{description:"Remove an Environment Variable",command:withGlobalFlags(client,"env rm",{preserveProject:!0})},{description:"Pull Development Environment Variables into .env.local",command:withGlobalFlags(client,"env pull",{preserveProject:!0})}])}return 0}function getTable(link,records,customEnvironments){let label=records.some(env=>env.gitBranch)?"environments (git branch)":"environments";return formatTable(["name","value","type",label,"created"],["l","l","l","l","l"],[{name:"",rows:records.map(row=>getRow(link,row,customEnvironments))}])}function getRow(link,env,customEnvironments){let value;if(isSecretEnvVar(env))value=import_chalk2.default.gray.italic("Hidden");else if(env.type==="system")value=import_chalk2.default.gray.italic(env.value);else{let singleLineValue=env.value.replace(/\s/g," ");value=import_chalk2.default.gray(ellipsis(singleLineValue,19))}let now=Date.now();return[import_chalk2.default.bold(env.key),value,getEnvironmentVariableTypeLabel(env),formatEnvironments(link,env,customEnvironments),env.createdAt?`${(0,import_ms.default)(now-env.createdAt)} ago`:""]}function getEnvironmentVariableTypeLabel(env){return isSecretEnvVar(env)?"Secret":env.type==="system"?"System":"Config"}var import_chalk3=__toESM(require_source(),1);async function removeEnvRecord(client,projectId,env){output_manager_default.debug(`Removing Environment Variable ${env.key}`);let url=`/v10/projects/${projectId}/env/${env.id}`;await client.fetch(url,{method:"DELETE"})}var EnvRmTelemetryClient=class extends TelemetryClient{trackCliArgumentName(name){name&&this.trackCliArgument({arg:"name",value:this.redactedValue})}trackCliArgumentEnvironment(environment){environment&&this.trackCliArgument({arg:"environment",value:STANDARD_ENVIRONMENTS.includes(environment)?environment:this.redactedValue})}trackCliArgumentGitBranch(gitBranch){gitBranch&&this.trackCliArgument({arg:"git-branch",value:this.redactedValue})}trackCliFlagYes(yes){yes&&this.trackCliFlag("yes")}};function printEnvRmWarning(message){output_manager_default.print(`${import_chalk3.default.yellow("!")} ${message}
+`)}async function rm(client,argv){let telemetryClient=new EnvRmTelemetryClient({opts:{store:client.telemetryEventStore}}),parsedArgs,flagsSpecification=getFlagsSpecification(removeSubcommand.options);try{parsedArgs=parseArguments(argv,flagsSpecification)}catch(err){return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_arguments",message:err instanceof Error?err.message:String(err)},1),printError(err),1}let{args,flags:opts}=parsedArgs;if(args.length>3)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_arguments",message:`Invalid number of arguments. Usage: \`${getCommandNamePlain(`env rm <name> ${getEnvTargetPlaceholder()} <gitbranch>`)}\``},1),output_manager_default.error(`Invalid number of arguments. Usage: ${getCommandName(`env rm <name> ${getEnvTargetPlaceholder()} <gitbranch>`)}`),1;let[envName,envTarget,envGitBranch]=args;telemetryClient.trackCliArgumentName(envName),telemetryClient.trackCliArgumentEnvironment(envTarget),telemetryClient.trackCliArgumentGitBranch(envGitBranch),telemetryClient.trackCliFlagYes(opts["--yes"]),telemetryClient.trackCliOptionProject(opts["--project"]);let link=await resolveProjectContext({client,projectNameOrId:opts["--project"]});if(link.status==="error")return link.exitCode;if(link.status==="not_linked"){if(client.nonInteractive){let preserved=getPreservedArgsForEnvRm(client.argv).filter(a=>a!=="--yes"&&a!=="-y"),linkArgv=[...client.argv.slice(0,2),"link","--scope","<scope>",...preserved];outputAgentError(client,{status:"error",reason:"not_linked",message:`Your codebase isn't linked to a project on Vercel. Run \`${getCommandNamePlain("link")}\` to begin. Use \`--yes\` for non-interactive; use \`--scope\` or \`--project\` to specify team or project.`,next:[{command:buildCommandWithYes(linkArgv)},{command:buildCommandWithYes(client.argv)}]},1)}else output_manager_default.error(`Your codebase isn\u2019t linked to a project on Vercel. Run ${getCommandName("link")} to begin.`);return 1}client.config.currentTeam=link.org.type==="team"?link.org.id:void 0;let{project}=link;envName||(client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"missing_name",message:"Provide the variable name as an argument. Example: `vercel env rm <name> --yes`",next:[{command:buildEnvRmCommandWithPreservedArgs(client.argv,`env rm <name> ${getEnvTargetPlaceholder()} --yes`)}]},1),envName=await client.input.text({message:"What's the name of the variable?",validate:val=>val?!0:"Name cannot be empty"}));let[result,customEnvironments]=await Promise.all([getEnvRecords(client,project.id,"vercel-cli:env:rm",{target:envTarget,gitBranch:envGitBranch}),getCustomEnvironments(client,project.id)]),envs=result.envs.filter(env2=>env2.key===envName);if(envs.length===0)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"env_not_found",message:`Environment Variable ${envName} was not found.`},1),output_manager_default.error(`Environment Variable was not found.
+`),1;for(;envs.length>1;){client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"multiple_envs",message:`Multiple Environment Variables match ${envName}. Specify target and/or branch to remove one.`,next:[{command:buildEnvRmCommandWithPreservedArgs(client.argv,`env rm ${envName} ${getEnvTargetPlaceholder()} --yes`)}]},1);let id=await client.input.select({message:`Remove ${envName} from which Environments?`,choices:envs.map(env2=>({value:env2.id,name:formatEnvironments(link,env2,customEnvironments)}))});id||output_manager_default.error("Please select at least one Environment Variable to remove"),envs=envs.filter(env2=>env2.id===id)}let env=envs[0],shouldWarnAboutRotation=shouldConfirmRotationBeforeDelete({key:env.key,type:env.type,hasPublicPrefix:getPublicPrefix(env.key)!==null}),rotationWarning="Removing this variable from Vercel does not revoke the credential. Rotate or disable it at its provider.";if(shouldWarnAboutRotation&&printEnvRmWarning(rotationWarning),!opts["--yes"]&&(client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"confirmation_required",message:`Removing Environment Variable ${env.key}. ${shouldWarnAboutRotation?`${rotationWarning} `:""}Use --yes to confirm.`,next:[{command:buildCommandWithYes(client.argv)}]},1),!await client.input.confirm(`Remove ${param(env.key)} from ${formatEnvironments(link,env,customEnvironments)} in Project ${import_chalk3.default.bold(project.name)}?`,!1)))return output_manager_default.log("Canceled"),0;let rmStamp=stamp_default();try{output_manager_default.spinner("Removing"),await removeEnvRecord(client,project.id,env)}catch(err){if(client.nonInteractive&&isAPIError(err)){let reason=err.slug||(err.serverMessage?.toLowerCase().includes("branch")?"branch_not_found":"api_error");outputAgentError(client,{status:"error",reason,message:err.serverMessage},1)}if(isAPIError(err)&&isKnownError(err))return output_manager_default.error(err.serverMessage),1;throw err}return output_manager_default.print(`${prependEmoji(`Removed Environment Variable ${import_chalk3.default.gray(rmStamp())}`,emoji("success"))}
+`),0}var import_env=__toESM(require_dist3(),1),import_chalk4=__toESM(require_source(),1),import_execa=__toESM(require_execa(),1);function printEnvRunWarning(message){output_manager_default.print(`${import_chalk4.default.yellow("!")} ${message}
+`)}function omitUnavailableSecretPlaceholders(localEnv,secretKeys){let safeLocalEnv={...localEnv};for(let key of secretKeys)safeLocalEnv[key]===SENSITIVE_ENV_VALUE_PLACEHOLDER&&delete safeLocalEnv[key];return safeLocalEnv}function parseRunArgs(argv){let argvIndex=argv.indexOf("--"),hasDoubleDash=argvIndex!==-1,vercelArgs=hasDoubleDash?argv.slice(2,argvIndex):argv.slice(2),userCommand=hasDoubleDash?argv.slice(argvIndex+1):[];return{vercelArgs,userCommand}}function needsHelpForRun(client){let{vercelArgs}=parseRunArgs(client.argv),flagsSpecification=getFlagsSpecification(runSubcommand.options);try{return!!parseArguments(vercelArgs,flagsSpecification).flags["--help"]}catch{return!1}}async function run(client,telemetry){let{vercelArgs,userCommand}=parseRunArgs(client.argv),parsedArgs,flagsSpecification=getFlagsSpecification(runSubcommand.options);try{parsedArgs=parseArguments(vercelArgs,flagsSpecification)}catch(error){return printError(error),1}if(userCommand.length===0)return outputActionRequired(client,{status:"action_required",reason:"missing_command",message:"No command provided. Use `--` to separate Vercel flags from your command.",next:[{command:getCommandNamePlain("env run -- <command>")}]},1),output_manager_default.error("No command provided. Use `--` to separate vercel flags from your command."),1;let projectName=parsedArgs.flags["--project"];telemetry.trackCliOptionProject(projectName);let link=await resolveProjectContext({client,projectNameOrId:projectName});if(link.status==="error")return link.exitCode;if(link.status==="not_linked")return outputActionRequired(client,{status:"action_required",reason:"not_linked",message:"Your codebase isn't linked to a project on Vercel. Run `vercel link`, then retry this command.",next:[{command:getCommandNamePlain("link")}]},1),output_manager_default.error(`Your codebase isn't linked to a project on Vercel. Run ${getCommandName("link")} to begin.`),1;client.config.currentTeam=link.org.type==="team"?link.org.id:void 0;let environment=parseTarget({flagName:"environment",flags:parsedArgs.flags})||"development",gitBranch=parsedArgs.flags["--git-branch"];output_manager_default.spinner(`Downloading \`${environment}\` environment variables`);let records=await pullEnvRecords(client,link.project.id,"vercel-cli:env:run",{target:environment,gitBranch});output_manager_default.stopSpinner(),output_manager_default.debug(`Running command with ${Object.keys(records.env).length} environment variables`);let localEnv={};try{localEnv=(0,import_env.loadEnvConfig)(client.cwd,!0).combinedEnv}catch(err){output_manager_default.debug(`Failed to load local env files: ${err}`)}let localPlaceholderKeys=Object.entries(localEnv).filter(([,value])=>value===SENSITIVE_ENV_VALUE_PLACEHOLDER).map(([key])=>key),safeLocalEnv=omitUnavailableSecretPlaceholders(localEnv,localPlaceholderKeys),processPlaceholderKeys=Object.keys(records.env).filter(key=>process.env[key]===SENSITIVE_ENV_VALUE_PLACEHOLDER),safeProcessEnv=omitUnavailableSecretPlaceholders(process.env,processPlaceholderKeys),unavailableCandidateKeys=new Set(Object.entries(records.env).filter(([key,value])=>!value&&!safeLocalEnv[key]&&!safeProcessEnv[key]).map(([key])=>key));if(unavailableCandidateKeys.size>0)try{let{envs}=await getEnvRecords(client,link.project.id,"vercel-cli:env:run",{target:environment,gitBranch}),unavailableSecretKeys=envs.filter(env=>isSecretEnvVar(env)&&unavailableCandidateKeys.has(env.key));unavailableSecretKeys.length>0&&printEnvRunWarning(`${getUnavailableSecretValuesMessage(environment,unavailableSecretKeys.length)}${getLocalSecretFallbackMessage(unavailableSecretKeys.length)}`)}catch{}try{let result=await(0,import_execa.default)(userCommand[0],userCommand.slice(1),{cwd:client.cwd,stdio:"inherit",reject:!1,env:{...records.env,...safeLocalEnv,...safeProcessEnv}});return result instanceof Error&&typeof result.exitCode!="number"?(output_manager_default.prettyError(result),1):result.exitCode}catch(err){return output_manager_default.prettyError(err),1}}var import_chalk5=__toESM(require_source(),1);var import_constants3=__toESM(require_dist2(),1);async function updateEnvRecord(client,projectId,envId,type,key,value,targets,gitBranch,visibility){output_manager_default.debug(`Updating ${type} Environment Variable ${key} in ${targets.length} targets`);let target=[],customEnvironmentIds=[];for(let t of targets)(import_constants3.PROJECT_ENV_TARGET.includes(t)?target:customEnvironmentIds).push(t);let body={type,value,target,customEnvironmentIds:customEnvironmentIds.length>0?customEnvironmentIds:void 0,gitBranch:gitBranch||void 0,...visibility!==void 0?{visibility}:{}};key&&(body.key=key);let url=`/v10/projects/${projectId}/env/${envId}`;await client.fetch(url,{method:"PATCH",body})}var EnvUpdateTelemetryClient=class extends TelemetryClient{trackCliArgumentName(name){name&&this.trackCliArgument({arg:"name",value:this.redactedValue})}trackCliArgumentEnvironment(environment){environment&&this.trackCliArgument({arg:"environment",value:STANDARD_ENVIRONMENTS.includes(environment)?environment:this.redactedValue})}trackCliArgumentGitBranch(gitBranch){gitBranch&&this.trackCliArgument({arg:"git-branch",value:this.redactedValue})}trackCliFlagSensitive(sensitive){sensitive&&this.trackCliFlag("sensitive")}trackCliFlagYes(yes){yes&&this.trackCliFlag("yes")}trackCliOptionValue(value){value&&this.trackCliOption({option:"value",value:this.redactedValue})}trackCliOptionVisibility(visibility){if(visibility){let validVisibilities=["config","secret"];this.trackCliOption({option:"visibility",value:validVisibilities.includes(visibility)?visibility:this.redactedValue})}}trackCliOptionType(type){if(type){let validTypes=["config","secret"];this.trackCliOption({option:"type",value:validTypes.includes(type)?type:this.redactedValue})}}};function looksLikeCredentialName2(key,publicPrefix=getPublicPrefix(key)){return looksLikeSecret(publicPrefix?key.slice(publicPrefix.length):key)}function printEnvUpdateWarning(message){output_manager_default.print(`${import_chalk5.default.yellow("!")} ${message}
+`)}function omitEnvValueArgs(argv){let out=[];for(let i=0;i<argv.length;i++){if(argv[i]==="--value"){i++;continue}argv[i].startsWith("--value=")||out.push(argv[i])}return out}function formatTargetArg(targets,customEnvironments){return targets.map(target=>customEnvironments.find(environment=>environment.id===target||environment.slug===target)?.slug??target).join(",")}function promptEnvUpdateValue(client,envName,isSecret){return client.input.text({message:`What's the new value of ${envName}?`,...isSecret?{transformer:value=>"*".repeat(value.length)}:{}})}async function update(client,argv){let parsedArgs,flagsSpecification=getFlagsSpecification(updateSubcommand.options);try{parsedArgs=parseArguments(argv,flagsSpecification)}catch(err){return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_arguments",message:err instanceof Error?err.message:String(err)},1),printError(err),1}let{args,flags:opts}=parsedArgs,valueFromFlag=typeof opts["--value"]=="string"?opts["--value"]:void 0,stdInput=await readStandardInput(client.stdin),[envName,envTargetArg,envGitBranch]=args,typeOption=resolveEnvVarTypeOption({type:typeof opts["--type"]=="string"?opts["--type"]:void 0,visibility:typeof opts["--visibility"]=="string"?opts["--visibility"]:void 0}),explicitType=typeOption.explicitVisibility,typeWasExplicit=explicitType!==void 0||!!opts["--sensitive"],telemetryClient=new EnvUpdateTelemetryClient({opts:{store:client.telemetryEventStore}});if(telemetryClient.trackCliArgumentName(envName),telemetryClient.trackCliArgumentEnvironment(envTargetArg),telemetryClient.trackCliArgumentGitBranch(envGitBranch),telemetryClient.trackCliFlagSensitive(opts["--sensitive"]),telemetryClient.trackCliFlagYes(opts["--yes"]),telemetryClient.trackCliOptionValue(valueFromFlag===void 0?void 0:"<redacted>"),telemetryClient.trackCliOptionType(typeof opts["--type"]=="string"?opts["--type"]:void 0),telemetryClient.trackCliOptionVisibility(typeof opts["--visibility"]=="string"?opts["--visibility"]:void 0),typeOption.error)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:typeOption.errorReason??"invalid_type",message:typeOption.error},1),output_manager_default.fatal(typeOption.error),1;if(typeOption.usedDeprecatedVisibility&&printEnvUpdateWarning(ENV_VISIBILITY_DEPRECATION_MESSAGE),explicitType==="config"&&opts["--sensitive"]){let message="`--type config` cannot be used with `--sensitive`. Pick one.";return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"conflicting_type_flags",message},1),output_manager_default.fatal(message),1}if(args.length>3)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_arguments",message:`Invalid number of arguments. Usage: \`${getCommandNamePlain(`env update <name> ${getEnvTargetPlaceholder()} <gitbranch>`)}\``},1),output_manager_default.error(`Invalid number of arguments. Usage: ${getCommandName(`env update <name> ${getEnvTargetPlaceholder()} <gitbranch>`)}`),1;if(stdInput&&(!envName||!envTargetArg))return output_manager_default.error(`Invalid number of arguments. Usage: ${getCommandName("env update <name> <target> <gitbranch> < <file>")}`),1;if(client.nonInteractive){let missing=[];if(envName||missing.push("missing_name"),!stdInput&&valueFromFlag===void 0&&missing.push("missing_value"),missing.length>0){let parts=missing.map(m=>m==="missing_name"?"name":"--value or stdin"),targetPart=envTargetArg||getEnvTargetPlaceholder(),template=`env update ${envName||"<name>"} ${targetPart}${envTargetArg==="preview"||envTargetArg==="development"?" <gitbranch>":""} --value <value> --yes`;outputActionRequired(client,{status:"action_required",reason:"missing_requirements",missing,message:`Provide all required inputs for non-interactive mode: ${parts.join("; ")}. Example: ${getCommandNamePlain(template)}`,next:[{command:buildEnvUpdateCommandWithPreservedArgs(client.argv,template)}]},1)}}envTargetArg&&[].push(envTargetArg),envName||(client.nonInteractive?outputActionRequired(client,{status:"action_required",reason:"missing_name",message:"Provide the variable name as an argument. Example: vercel env update <name>",next:[{command:buildEnvUpdateCommandWithPreservedArgs(client.argv,`env update <name> ${getEnvTargetPlaceholder()} --value <value> --yes`)}]},1):envName=await client.input.text({message:"What's the name of the variable to update?",validate:val=>val?!0:"Name cannot be empty"})),telemetryClient.trackCliOptionProject(opts["--project"]);let link=await resolveProjectContext({client,projectNameOrId:opts["--project"]});if(link.status==="error")return link.exitCode;if(link.status==="not_linked"){if(client.nonInteractive){let preserved=omitEnvValueArgs(getPreservedArgsForEnvUpdate(client.argv)).filter(a=>a!=="--yes"&&a!=="-y"),linkArgv=[...client.argv.slice(0,2),"link","--scope","<scope>",...preserved];outputAgentError(client,{status:"error",reason:"not_linked",message:`Your codebase isn't linked to a project on Vercel. Run ${getCommandNamePlain("link")} to begin. Use --yes for non-interactive; use --scope or --project to specify team or project.`,next:[{command:buildCommandWithYes(linkArgv)},{command:buildCommandWithYes(redactEnvValueArgs(client.argv))}]},1)}return output_manager_default.error(`Your codebase isn't linked to a project on Vercel. Run ${getCommandName("link")} to begin.`),1}client.config.currentTeam=link.org.type==="team"?link.org.id:void 0;let{project}=link,[{envs},customEnvironments]=await Promise.all([getEnvRecords(client,project.id,"vercel-cli:env:update"),getCustomEnvironments(client,project.id)]),normalizedEnvTargetArg=customEnvironments.find(({slug,id})=>slug===envTargetArg||id===envTargetArg)?.id||envTargetArg,matchingEnvs=envs.filter(r=>r.key===envName);if(matchingEnvs.length===0){let listArgs=`env ls ${getGlobalFlagsFromArgs(client.argv.slice(2),{preserveProject:!0}).join(" ")}`.trim();return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"env_not_found",message:`The variable ${envName} was not found. Run ${getCommandNamePlain(listArgs)} to see all available Environment Variables.`},1),output_manager_default.error(`The variable ${param(envName)} was not found. Run ${getCommandName(listArgs)} to see all available Environment Variables.`),1}let selectedEnv;if(envTargetArg||envGitBranch){let filteredEnvs=matchingEnvs.filter(env=>{let matchesTarget=!normalizedEnvTargetArg||(Array.isArray(env.target)?env.target.includes(normalizedEnvTargetArg):env.target===normalizedEnvTargetArg)||env.customEnvironmentIds&&env.customEnvironmentIds.includes(normalizedEnvTargetArg),matchesGitBranch=!envGitBranch||env.gitBranch===envGitBranch;return matchesTarget&&matchesGitBranch});if(filteredEnvs.length===0)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"env_not_found",message:`No Environment Variable ${envName} found matching the specified target/branch.`},1),output_manager_default.error(`No Environment Variable ${param(envName)} found matching the specified criteria.`),1;if(filteredEnvs.length===1)selectedEnv=filteredEnvs[0];else{client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"multiple_envs",message:`Multiple Environment Variables match ${envName}. Specify target and/or branch to update one.`,next:[{command:buildEnvUpdateCommandWithPreservedArgs(client.argv,`env update ${envName} ${getEnvTargetPlaceholder()} <gitbranch> --value "<value>" --yes`)}]},1);let choices=filteredEnvs.map((env,index)=>({name:formatEnvironments(link,env,customEnvironments),value:index})),selectedIndex=await client.input.select({message:`Multiple Environment Variables found for ${param(envName)}. Which one do you want to update?`,choices});selectedEnv=filteredEnvs[selectedIndex]}}else if(matchingEnvs.length===1)selectedEnv=matchingEnvs[0];else{client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"multiple_envs",message:`Multiple Environment Variables match ${envName}. Specify target and/or branch to update one.`,next:[{command:buildEnvUpdateCommandWithPreservedArgs(client.argv,`env update ${envName} ${getEnvTargetPlaceholder()} <gitbranch> --value "<value>" --yes`)}]},1);let choices=matchingEnvs.map((env,index)=>({name:formatEnvironments(link,env,customEnvironments),value:index})),selectedIndex=await client.input.select({message:`Multiple Environment Variables found for ${param(envName)}. Which one do you want to update?`,choices});selectedEnv=matchingEnvs[selectedIndex]}let customSveltePublicPrefix,apiPublicPrefix=getApiPublicPrefix(envName),frameworkPublicPrefix=getFrameworkPublicPrefix(project.framework,envName);if(project.framework==="sveltekit"||project.framework==="sveltekit-1"||project.framework==="sveltekit-2"){let matchingLocalPrefix=(await getLocalSvelteKitPublicPrefixes(link.repoRoot??client.cwd,project.rootDirectory))?.find(prefix=>envName.startsWith(prefix));matchingLocalPrefix!==void 0&&apiPublicPrefix===null&&frameworkPublicPrefix===null&&(customSveltePublicPrefix=matchingLocalPrefix)}let targets=Array.isArray(selectedEnv.target)?selectedEnv.target:[selectedEnv.target].filter(r=>!!r),allTargets=[...targets,...selectedEnv.customEnvironmentIds||[]],selectedEnvIsSecret=isSecretEnvVar(selectedEnv);if(explicitType==="config"&&selectedEnvIsSecret){let removeTargetArg=envTargetArg||targets[0]||allTargets[0]||getEnvTargetPlaceholder(),addTargetArg=formatTargetArg(allTargets,customEnvironments)||removeTargetArg,removeBranchArg=selectedEnv.gitBranch?` ${quoteArg(selectedEnv.gitBranch)}`:"",addBranchArg=selectedEnv.gitBranch?` --git-branch ${quoteArg(selectedEnv.gitBranch)}`:"",globalFlags=getGlobalFlagsFromArgs(client.argv.slice(2),{preserveProject:!0}),humanGlobalFlags=globalFlags.filter(flag=>!flag.startsWith("--non-interactive")),globalSuffix=globalFlags.length>0?` ${globalFlags.map(quoteArg).join(" ")}`:"",humanGlobalSuffix=humanGlobalFlags.length>0?` ${humanGlobalFlags.map(quoteArg).join(" ")}`:"",removeCommand=getCommandNamePlain(`env rm ${envName} ${removeTargetArg}${removeBranchArg} --yes${globalSuffix}`),addCommand=getCommandNamePlain(`env add ${envName} ${addTargetArg}${addBranchArg} --type config --value "<value>" --yes${globalSuffix}`),removeHumanCommand=getCommandNamePlain(`env rm ${envName} ${removeTargetArg}${removeBranchArg}${humanGlobalSuffix}`),addHumanCommand=getCommandNamePlain(`env add ${envName} ${addTargetArg}${addBranchArg} --type config${humanGlobalSuffix}`),message="A Secret cannot be changed to Config. To store this value as Config, remove the variable and add it again with `--type config`.";return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"secret_cannot_become_config",message,next:[{command:removeCommand,when:"Remove the Secret from all of its environments"},{command:addCommand,when:"Add it again as Config; replace <value> before running"}]},1),output_manager_default.fatal(`A Secret cannot be changed to Config. Remove the variable, then add it again as Config. ${param(envName)} will be unavailable to new builds between these commands.`),output_manager_default.print(`  Remove:
     ${removeHumanCommand}
-`);
-    output_manager_default.print(
-      `  Add as Config (prompts for the value):
+`),output_manager_default.print(`  Add as Config (prompts for the value):
     ${addHumanCommand}
-`
-    );
-    return 1;
-  }
-  if (explicitType === "secret" || opts["--sensitive"]) {
-    const knownPublicPrefix = apiPublicPrefix ?? frameworkPublicPrefix;
-    const publicPrefix = knownPublicPrefix ?? customSveltePublicPrefix;
-    const apiPublicPrefixError = apiPublicPrefix ? getPublicPrefixSecretVisibilityError(envName, {
-      visibility: explicitType === "secret" ? "secret" : void 0,
-      type: "sensitive",
-      context: "update"
-    }) : null;
-    const publicPrefixError = apiPublicPrefixError ? apiPublicPrefixError : knownPublicPrefix ? `\`${knownPublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Add a new Secret without the public prefix, then remove this Config.` : customSveltePublicPrefix === "" ? "This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser and cannot be kept private as a Secret. Change the SvelteKit `publicPrefix`, or keep this variable as Config only if the value is safe to expose." : customSveltePublicPrefix !== void 0 ? `\`${customSveltePublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Add a new Secret without the configured public prefix, then remove this Config.` : null;
-    if (publicPrefixError) {
-      const privateName = publicPrefix === void 0 ? envName : envName.slice(publicPrefix.length);
-      const removeTargetArg = envTargetArg || targets[0] || allTargets[0] || getEnvTargetPlaceholder();
-      const addTargetArg = formatTargetArg(allTargets, customEnvironments) || removeTargetArg;
-      const removeBranchArg = selectedEnv.gitBranch ? ` ${quoteArg(selectedEnv.gitBranch)}` : "";
-      const addBranchArg = selectedEnv.gitBranch ? ` --git-branch ${quoteArg(selectedEnv.gitBranch)}` : "";
-      const globalFlags = getGlobalFlagsFromArgs(client.argv.slice(2), {
-        preserveProject: true
-      });
-      const humanGlobalFlags = globalFlags.filter(
-        (flag) => !flag.startsWith("--non-interactive")
-      );
-      const globalSuffix = globalFlags.length > 0 ? ` ${globalFlags.map(quoteArg).join(" ")}` : "";
-      const humanGlobalSuffix = humanGlobalFlags.length > 0 ? ` ${humanGlobalFlags.map(quoteArg).join(" ")}` : "";
-      const addCommand = publicPrefix === "" ? void 0 : getCommandNamePlain(
-        `env add ${privateName} ${addTargetArg}${addBranchArg} --type secret --value "<value>" --yes${globalSuffix}`
-      );
-      const removeCommand = getCommandNamePlain(
-        `env rm ${envName} ${removeTargetArg}${removeBranchArg} --yes${globalSuffix}`
-      );
-      const addHumanCommand = publicPrefix === "" ? void 0 : getCommandNamePlain(
-        `env add ${privateName} ${addTargetArg}${addBranchArg} --type secret${humanGlobalSuffix}`
-      );
-      const removeHumanCommand = getCommandNamePlain(
-        `env rm ${envName} ${removeTargetArg}${removeBranchArg}${humanGlobalSuffix}`
-      );
-      if (client.nonInteractive) {
-        outputAgentError(
-          client,
-          {
-            status: "error",
-            reason: "invalid_type",
-            message: publicPrefixError,
-            next: addCommand ? [
-              {
-                command: addCommand,
-                when: "Add the private Secret; replace <value> before running"
-              },
-              {
-                command: removeCommand,
-                when: "Remove the public Config after the Secret is available"
-              }
-            ] : []
-          },
-          1
-        );
-      }
-      output_manager_default.fatal(publicPrefixError);
-      if (addHumanCommand) {
-        output_manager_default.print(
-          `  Add the private Secret (prompts for the value):
+`),1}if(explicitType==="secret"||opts["--sensitive"]){let knownPublicPrefix=apiPublicPrefix??frameworkPublicPrefix,publicPrefix=knownPublicPrefix??customSveltePublicPrefix,apiPublicPrefixError=apiPublicPrefix?getPublicPrefixSecretVisibilityError(envName,{visibility:explicitType==="secret"?"secret":void 0,type:"sensitive",context:"update"}):null,publicPrefixError=apiPublicPrefixError||(knownPublicPrefix?`\`${knownPublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Add a new Secret without the public prefix, then remove this Config.`:customSveltePublicPrefix===""?"This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser and cannot be kept private as a Secret. Change the SvelteKit `publicPrefix`, or keep this variable as Config only if the value is safe to expose.":customSveltePublicPrefix!==void 0?`\`${customSveltePublicPrefix}\` exposes this value to anyone visiting your site, so \`${envName}\` cannot be kept private as a Secret. Add a new Secret without the configured public prefix, then remove this Config.`:null);if(publicPrefixError){let privateName=publicPrefix===void 0?envName:envName.slice(publicPrefix.length),removeTargetArg=envTargetArg||targets[0]||allTargets[0]||getEnvTargetPlaceholder(),addTargetArg=formatTargetArg(allTargets,customEnvironments)||removeTargetArg,removeBranchArg=selectedEnv.gitBranch?` ${quoteArg(selectedEnv.gitBranch)}`:"",addBranchArg=selectedEnv.gitBranch?` --git-branch ${quoteArg(selectedEnv.gitBranch)}`:"",globalFlags=getGlobalFlagsFromArgs(client.argv.slice(2),{preserveProject:!0}),humanGlobalFlags=globalFlags.filter(flag=>!flag.startsWith("--non-interactive")),globalSuffix=globalFlags.length>0?` ${globalFlags.map(quoteArg).join(" ")}`:"",humanGlobalSuffix=humanGlobalFlags.length>0?` ${humanGlobalFlags.map(quoteArg).join(" ")}`:"",addCommand=publicPrefix===""?void 0:getCommandNamePlain(`env add ${privateName} ${addTargetArg}${addBranchArg} --type secret --value "<value>" --yes${globalSuffix}`),removeCommand=getCommandNamePlain(`env rm ${envName} ${removeTargetArg}${removeBranchArg} --yes${globalSuffix}`),addHumanCommand=publicPrefix===""?void 0:getCommandNamePlain(`env add ${privateName} ${addTargetArg}${addBranchArg} --type secret${humanGlobalSuffix}`),removeHumanCommand=getCommandNamePlain(`env rm ${envName} ${removeTargetArg}${removeBranchArg}${humanGlobalSuffix}`);return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_type",message:publicPrefixError,next:addCommand?[{command:addCommand,when:"Add the private Secret; replace <value> before running"},{command:removeCommand,when:"Remove the public Config after the Secret is available"}]:[]},1),output_manager_default.fatal(publicPrefixError),addHumanCommand&&(output_manager_default.print(`  Add the private Secret (prompts for the value):
     ${addHumanCommand}
-`
-        );
-        output_manager_default.print(
-          `  Remove the public Config:
+`),output_manager_default.print(`  Remove the public Config:
     ${removeHumanCommand}
-`
-        );
-      }
-      return 1;
-    }
-  }
-  if (customSveltePublicPrefix !== void 0) {
-    printEnvUpdateWarning(
-      customSveltePublicPrefix === "" ? "This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser." : `\`${customSveltePublicPrefix}\` variables are exposed to the browser by this SvelteKit project.`
-    );
-  }
-  let teamSensitivePolicyOn = false;
-  let disjunctiveProductionSecretPolicyOn = false;
-  if (link.org.type === "team") {
-    try {
-      const team = await getTeamByIdOrSlug(client, link.org.id);
-      teamSensitivePolicyOn = team?.sensitiveEnvironmentVariablePolicy === "on";
-      disjunctiveProductionSecretPolicyOn = team?.disjunctiveProductionSecretPolicy === "on";
-    } catch {
-    }
-  }
-  let envValue;
-  const shouldMaskValue = Boolean(opts["--sensitive"]) || explicitType === "secret" || explicitType === void 0 && selectedEnvIsSecret;
-  if (stdInput) {
-    const normalizedStdinValue = normalizeStdinEnvValue(stdInput);
-    envValue = normalizedStdinValue.value;
-    if (normalizedStdinValue.strippedTrailingNewline) {
-      output_manager_default.log("Removed trailing newline from stdin input");
-    }
-  } else if (valueFromFlag !== void 0) {
-    envValue = valueFromFlag;
-  } else {
-    if (client.nonInteractive) {
-      const branchPart = envTargetArg === "preview" || envTargetArg === "development" ? " <gitbranch>" : "";
-      const targetPart = envTargetArg || getEnvTargetPlaceholder();
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "missing_value",
-          message: 'In non-interactive mode, provide the new value with `--value` or stdin. Example: `vercel env update <name> <environment> --value "<value>" --yes`',
-          next: [
-            {
-              command: buildEnvUpdateCommandWithPreservedArgs(
-                client.argv,
-                `env update ${envName} ${targetPart}${branchPart} --value <value> --yes`
-              )
-            }
-          ]
-        },
-        1
-      );
-    }
-    envValue = await promptEnvUpdateValue(client, envName, shouldMaskValue);
-  }
-  const skipConfirm = opts["--yes"] || !!stdInput || valueFromFlag !== void 0;
-  const { finalValue } = await validateEnvValue({
-    envName,
-    initialValue: envValue,
-    skipConfirm,
-    promptForValue: () => promptEnvUpdateValue(client, envName, shouldMaskValue),
-    selectAction: (choices) => client.input.select({ message: "How to proceed?", choices }),
-    showWarning: printEnvUpdateWarning,
-    showLog: (msg) => output_manager_default.log(msg)
-  });
-  let type = opts["--sensitive"] || explicitType === "secret" ? "sensitive" : explicitType === "config" ? "encrypted" : selectedEnv.type;
-  const isFinalSecret = () => type === "sensitive" || explicitType === void 0 && selectedEnvIsSecret;
-  if (!isFinalSecret() && (type === "plain" || type === "encrypted") && (looksLikeCredentialName2(envName, customSveltePublicPrefix) || looksLikeSecretValue(finalValue))) {
-    printEnvUpdateWarning(
-      "This name or value looks like a credential. Config values can be revealed after saving."
-    );
-    const publicPrefix = apiPublicPrefix ?? frameworkPublicPrefix ?? customSveltePublicPrefix;
-    if (publicPrefix !== null && publicPrefix !== void 0) {
-      printEnvUpdateWarning(
-        publicPrefix === "" ? "This SvelteKit project exposes every Environment Variable to the browser. Keep Config only if the value is safe to expose." : `\`${publicPrefix}\` exposes this value to anyone visiting your site. Keep Config only if the value is safe to expose.`
-      );
-      if (!typeWasExplicit && (opts["--yes"] || client.nonInteractive)) {
-        const message = publicPrefix === "" ? "This SvelteKit project exposes every Environment Variable to the browser. To keep this value private, change the configured public prefix before storing it as Secret. If the value is safe to expose, rerun with `--type config`." : `\`${publicPrefix}\` exposes \`${envName}\` to anyone visiting your site. To keep this value private, add \`${envName.slice(
-          publicPrefix.length
-        )}\` as Secret, then remove \`${envName}\`. If the value is safe to expose, rerun with \`--type config\`.`;
-        if (client.nonInteractive) {
-          outputAgentError(
-            client,
-            {
-              status: "error",
-              reason: "unsafe_public_config",
-              message
-            },
-            1
-          );
-        }
-        output_manager_default.fatal(message);
-        return 1;
-      }
-      if (publicPrefix !== "" && !typeWasExplicit && !opts["--yes"] && !client.nonInteractive) {
-        const privateName = envName.slice(publicPrefix.length);
-        const removeTargetArg = envTargetArg || targets[0] || allTargets[0] || getEnvTargetPlaceholder();
-        const addTargetArg = formatTargetArg(allTargets, customEnvironments) || removeTargetArg;
-        const removeBranchArg = selectedEnv.gitBranch ? ` ${quoteArg(selectedEnv.gitBranch)}` : "";
-        const addBranchArg = selectedEnv.gitBranch ? ` --git-branch ${quoteArg(selectedEnv.gitBranch)}` : "";
-        const humanGlobalFlags = getGlobalFlagsFromArgs(client.argv.slice(2), {
-          preserveProject: true
-        }).filter((flag) => !flag.startsWith("--non-interactive"));
-        const humanGlobalSuffix = humanGlobalFlags.length > 0 ? ` ${humanGlobalFlags.map(quoteArg).join(" ")}` : "";
-        const addPrivateCommand = getCommandNamePlain(
-          `env add ${privateName} ${addTargetArg}${addBranchArg} --type secret${humanGlobalSuffix}`
-        );
-        const removePublicCommand = getCommandNamePlain(
-          `env rm ${envName} ${removeTargetArg}${removeBranchArg}${humanGlobalSuffix}`
-        );
-        const selectedAction = await client.input.select({
-          message: "How should this variable be stored?",
-          choices: [
-            {
-              name: `Keep private: add ${privateName} as Secret, then remove ${envName}`,
-              value: "private"
-            },
-            {
-              name: `Expose to anyone visiting your site: keep ${envName} as Config`,
-              value: "config"
-            }
-          ]
-        });
-        if (selectedAction === "private") {
-          output_manager_default.print("  Add the private Secret (prompts for the value):\n");
-          output_manager_default.print(`    ${addPrivateCommand}
-`);
-          output_manager_default.print("  Remove the public Config:\n");
-          output_manager_default.print(`    ${removePublicCommand}
-`);
-          return 1;
-        }
-      }
-    } else if (!typeWasExplicit && !opts["--yes"] && !client.nonInteractive) {
-      const selectedType = await client.input.select({
-        message: "Store this value as?",
-        choices: [
-          {
-            name: getSecretStorageChoice(targets, "for this value"),
-            value: "secret"
-          },
-          {
-            name: "Config (can be revealed after saving)",
-            value: "config"
-          }
-        ]
-      });
-      if (selectedType === "secret") {
-        type = "sensitive";
-        explicitType = "secret";
-      }
-    } else if (!typeWasExplicit) {
-      printEnvUpdateWarning("Re-run with `--type secret` to protect it.");
-    }
-  }
-  if (isFinalSecret() && !selectedEnvIsSecret) {
-    printEnvUpdateWarning(
-      "The previous value was readable as Config and may have been exposed. If this variable still holds the same credential, rotate it at its provider and update this variable again."
-    );
-  }
-  const finalPublicPrefix = apiPublicPrefix ?? frameworkPublicPrefix ?? customSveltePublicPrefix;
-  if (isFinalSecret() && finalPublicPrefix !== null && finalPublicPrefix !== void 0) {
-    printEnvUpdateWarning(
-      finalPublicPrefix === "" ? "This SvelteKit project exposes every Environment Variable to the browser; the Secret type does not prevent that. Change the configured public prefix to keep values private." : `\`${finalPublicPrefix}\` exposes this variable to the browser; the Secret type does not prevent that. Rename the variable without the public prefix to keep it private.`
-    );
-  }
-  if (isFinalSecret() && disjunctiveProductionSecretPolicyOn && targets.includes("production") && allTargets.some((target) => target !== "production")) {
-    const message = "Your team requires Production and non-Production Secrets to be stored separately with different values. Create separate variables with different values before converting this one.";
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "production_secret_must_be_separate",
-          message
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(message);
-    return 1;
-  }
-  const preserveExistingVisibility = explicitType === void 0 && selectedEnv.visibility === "secret" && type !== "sensitive";
-  const { visibility: resolvedVisibility, error: visibilityError } = resolveEnvVarVisibility({
-    explicitVisibility: typeOption.source ? explicitType : void 0,
-    explicitOptionSource: typeOption.source,
-    type,
-    key: envName,
-    envTargets: allTargets,
-    teamSensitivePolicyOn,
-    context: "update"
-  });
-  const visibility = preserveExistingVisibility ? void 0 : resolvedVisibility;
-  const displayVisibility = preserveExistingVisibility ? selectedEnv.visibility : visibility;
-  if (visibilityError) {
-    if (client.nonInteractive) {
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason: "invalid_type",
-          message: visibilityError
-        },
-        1
-      );
-    }
-    output_manager_default.fatal(visibilityError);
-    return 1;
-  }
-  if (!opts["--yes"]) {
-    const visibilityLabel2 = formatVisibilityLabel(displayVisibility, type);
-    if (client.nonInteractive) {
-      outputActionRequired(
-        client,
-        {
-          status: "action_required",
-          reason: "confirmation_required",
-          message: `Update ${envName} as ${visibilityLabel2} in ${formatEnvironments(
-            link,
-            selectedEnv,
-            customEnvironments
-          )}? Use --yes to confirm.`,
-          next: [
-            {
-              command: buildCommandWithYes(redactEnvValueArgs(client.argv))
-            }
-          ]
-        },
-        1
-      );
-    }
-    output_manager_default.print("\n");
-    printAlignedLabel("Project", `${link.org.slug}/${project.name}`);
-    printAlignedLabel(
-      "Environments",
-      formatEnvironments(link, selectedEnv, customEnvironments)
-    );
-    if (visibilityLabel2) {
-      printAlignedLabel("Type", visibilityLabel2);
-    }
-    const confirmed = await client.input.confirm(
-      "Update this Environment Variable?",
-      false
-    );
-    if (!confirmed) {
-      output_manager_default.log("Canceled");
-      return 0;
-    }
-  }
-  try {
-    output_manager_default.spinner("Updating");
-    const keyToUpdate = isFinalSecret() ? void 0 : envName;
-    await updateEnvRecord(
-      client,
-      project.id,
-      selectedEnv.id,
-      type,
-      keyToUpdate,
-      finalValue,
-      allTargets,
-      selectedEnv.gitBranch || "",
-      visibility
-    );
-  } catch (err) {
-    if (client.nonInteractive && isAPIError(err)) {
-      const productionSecretPolicyError = getProductionSecretPolicyErrorKind(
-        err.serverMessage
-      );
-      const reason = productionSecretPolicyError ? productionSecretPolicyError === "different-values" ? "production_secret_requires_different_value" : "production_secret_must_be_separate" : err.slug || (err.serverMessage?.toLowerCase().includes("branch") ? "branch_not_found" : "api_error");
-      outputAgentError(
-        client,
-        {
-          status: "error",
-          reason,
-          message: productionSecretPolicyError ? `${err.serverMessage} ${getProductionSecretPolicyRecovery(
-            productionSecretPolicyError
-          )}` : err.serverMessage
-        },
-        1
-      );
-    }
-    if (isAPIError(err) && isKnownError(err)) {
-      output_manager_default.error(err.serverMessage);
-      return 1;
-    }
-    throw err;
-  }
-  output_manager_default.print("\n");
-  printAlignedLabel("Updated", envName, { gutter: "\u2713" });
-  printAlignedLabel("Project", `${link.org.slug}/${project.name}`);
-  printAlignedLabel(
-    "Environments",
-    formatEnvironments(link, selectedEnv, customEnvironments)
-  );
-  const visibilityLabel = formatVisibilityLabel(displayVisibility, type);
-  if (visibilityLabel) {
-    printAlignedLabel("Type", visibilityLabel);
-  }
-  return 0;
-}
-
-// src/util/telemetry/commands/env/index.ts
-var EnvTelemetryClient = class extends TelemetryClient {
-  trackCliSubcommandList(actual) {
-    this.trackCliSubcommand({
-      subcommand: "ls",
-      value: actual
-    });
-  }
-  trackCliSubcommandAdd(actual) {
-    this.trackCliSubcommand({
-      subcommand: "add",
-      value: actual
-    });
-  }
-  trackCliSubcommandRemove(actual) {
-    this.trackCliSubcommand({
-      subcommand: "rm",
-      value: actual
-    });
-  }
-  trackCliSubcommandPull(actual) {
-    this.trackCliSubcommand({
-      subcommand: "pull",
-      value: actual
-    });
-  }
-  trackCliSubcommandRun(actual) {
-    this.trackCliSubcommand({
-      subcommand: "run",
-      value: actual
-    });
-  }
-  trackCliSubcommandUpdate(actual) {
-    this.trackCliSubcommand({
-      subcommand: "update",
-      value: actual
-    });
-  }
-};
-
-// src/commands/env/index.ts
-var COMMAND_CONFIG = {
-  ls: getCommandAliases(listSubcommand),
-  add: getCommandAliases(addSubcommand),
-  rm: getCommandAliases(removeSubcommand),
-  pull: getCommandAliases(pullSubcommand),
-  run: getCommandAliases(runSubcommand),
-  update: getCommandAliases(updateSubcommand)
-};
-async function main(client) {
-  const telemetry = new EnvTelemetryClient({
-    opts: {
-      store: client.telemetryEventStore
-    }
-  });
-  let parsedArgs;
-  const flagsSpecification = getFlagsSpecification(envCommand.options);
-  try {
-    parsedArgs = parseArguments(client.argv.slice(2), flagsSpecification, {
-      permissive: true
-    });
-  } catch (err) {
-    printError(err);
-    return 1;
-  }
-  const subArgs = parsedArgs.args.slice(1);
-  const { subcommand, args, subcommandOriginal } = getSubcommand(
-    subArgs,
-    COMMAND_CONFIG
-  );
-  const needHelp = parsedArgs.flags["--help"];
-  if (!subcommand && needHelp) {
-    telemetry.trackCliFlagHelp("env", subcommand);
-    output_manager_default.print(help(envCommand, { columns: client.stderr.columns }));
-    return 2;
-  }
-  function printHelp(command) {
-    output_manager_default.print(
-      help(command, { parent: envCommand, columns: client.stderr.columns })
-    );
-  }
-  let exitCode;
-  switch (subcommand) {
-    case "ls":
-      if (needHelp) {
-        telemetry.trackCliFlagHelp("env", subcommandOriginal);
-        printHelp(listSubcommand);
-        return 2;
-      }
-      telemetry.trackCliSubcommandList(subcommandOriginal);
-      exitCode = await ls(client, args);
-      break;
-    case "add":
-      if (needHelp) {
-        telemetry.trackCliFlagHelp("env", subcommandOriginal);
-        printHelp(addSubcommand);
-        return 2;
-      }
-      telemetry.trackCliSubcommandAdd(subcommandOriginal);
-      exitCode = await add(client, args);
-      break;
-    case "rm":
-      if (needHelp) {
-        telemetry.trackCliFlagHelp("env", subcommandOriginal);
-        printHelp(removeSubcommand);
-        return 2;
-      }
-      telemetry.trackCliSubcommandRemove(subcommandOriginal);
-      exitCode = await rm(client, args);
-      break;
-    case "pull":
-      if (needHelp) {
-        telemetry.trackCliFlagHelp("env", subcommandOriginal);
-        printHelp(pullSubcommand);
-        return 2;
-      }
-      telemetry.trackCliSubcommandPull(subcommandOriginal);
-      exitCode = await pull(client, args);
-      break;
-    case "run":
-      if (needsHelpForRun(client)) {
-        telemetry.trackCliFlagHelp("env", subcommandOriginal);
-        printHelp(runSubcommand);
-        return 2;
-      }
-      telemetry.trackCliSubcommandRun(subcommandOriginal);
-      exitCode = await run(client, telemetry);
-      break;
-    case "update":
-      if (needHelp) {
-        telemetry.trackCliFlagHelp("env", subcommandOriginal);
-        printHelp(updateSubcommand);
-        return 2;
-      }
-      telemetry.trackCliSubcommandUpdate(subcommandOriginal);
-      exitCode = await update(client, args);
-      break;
-    default:
-      output_manager_default.error(getInvalidSubcommand(COMMAND_CONFIG));
-      output_manager_default.print(help(envCommand, { columns: client.stderr.columns }));
-      return 2;
-  }
-  if (exitCode === 0) {
-    await autoInstallVercelPlugin(client);
-  }
-  return exitCode;
-}
-export {
-  main as default
-};
+`)),1}}customSveltePublicPrefix!==void 0&&printEnvUpdateWarning(customSveltePublicPrefix===""?"This SvelteKit project uses an empty `publicPrefix`, so every Environment Variable is exposed to the browser.":`\`${customSveltePublicPrefix}\` variables are exposed to the browser by this SvelteKit project.`);let teamSensitivePolicyOn=!1,disjunctiveProductionSecretPolicyOn=!1;if(link.org.type==="team")try{let team=await getTeamByIdOrSlug(client,link.org.id);teamSensitivePolicyOn=team?.sensitiveEnvironmentVariablePolicy==="on",disjunctiveProductionSecretPolicyOn=team?.disjunctiveProductionSecretPolicy==="on"}catch{}let envValue,shouldMaskValue=!!opts["--sensitive"]||explicitType==="secret"||explicitType===void 0&&selectedEnvIsSecret;if(stdInput){let normalizedStdinValue=normalizeStdinEnvValue(stdInput);envValue=normalizedStdinValue.value,normalizedStdinValue.strippedTrailingNewline&&output_manager_default.log("Removed trailing newline from stdin input")}else if(valueFromFlag!==void 0)envValue=valueFromFlag;else{if(client.nonInteractive){let branchPart=envTargetArg==="preview"||envTargetArg==="development"?" <gitbranch>":"",targetPart=envTargetArg||getEnvTargetPlaceholder();outputActionRequired(client,{status:"action_required",reason:"missing_value",message:'In non-interactive mode, provide the new value with `--value` or stdin. Example: `vercel env update <name> <environment> --value "<value>" --yes`',next:[{command:buildEnvUpdateCommandWithPreservedArgs(client.argv,`env update ${envName} ${targetPart}${branchPart} --value <value> --yes`)}]},1)}envValue=await promptEnvUpdateValue(client,envName,shouldMaskValue)}let skipConfirm=opts["--yes"]||!!stdInput||valueFromFlag!==void 0,{finalValue}=await validateEnvValue({envName,initialValue:envValue,skipConfirm,promptForValue:()=>promptEnvUpdateValue(client,envName,shouldMaskValue),selectAction:choices=>client.input.select({message:"How to proceed?",choices}),showWarning:printEnvUpdateWarning,showLog:msg=>output_manager_default.log(msg)}),type=opts["--sensitive"]||explicitType==="secret"?"sensitive":explicitType==="config"?"encrypted":selectedEnv.type,isFinalSecret=()=>type==="sensitive"||explicitType===void 0&&selectedEnvIsSecret;if(!isFinalSecret()&&(type==="plain"||type==="encrypted")&&(looksLikeCredentialName2(envName,customSveltePublicPrefix)||looksLikeSecretValue(finalValue))){printEnvUpdateWarning("This name or value looks like a credential. Config values can be revealed after saving.");let publicPrefix=apiPublicPrefix??frameworkPublicPrefix??customSveltePublicPrefix;if(publicPrefix!=null){if(printEnvUpdateWarning(publicPrefix===""?"This SvelteKit project exposes every Environment Variable to the browser. Keep Config only if the value is safe to expose.":`\`${publicPrefix}\` exposes this value to anyone visiting your site. Keep Config only if the value is safe to expose.`),!typeWasExplicit&&(opts["--yes"]||client.nonInteractive)){let message=publicPrefix===""?"This SvelteKit project exposes every Environment Variable to the browser. To keep this value private, change the configured public prefix before storing it as Secret. If the value is safe to expose, rerun with `--type config`.":`\`${publicPrefix}\` exposes \`${envName}\` to anyone visiting your site. To keep this value private, add \`${envName.slice(publicPrefix.length)}\` as Secret, then remove \`${envName}\`. If the value is safe to expose, rerun with \`--type config\`.`;return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"unsafe_public_config",message},1),output_manager_default.fatal(message),1}if(publicPrefix!==""&&!typeWasExplicit&&!opts["--yes"]&&!client.nonInteractive){let privateName=envName.slice(publicPrefix.length),removeTargetArg=envTargetArg||targets[0]||allTargets[0]||getEnvTargetPlaceholder(),addTargetArg=formatTargetArg(allTargets,customEnvironments)||removeTargetArg,removeBranchArg=selectedEnv.gitBranch?` ${quoteArg(selectedEnv.gitBranch)}`:"",addBranchArg=selectedEnv.gitBranch?` --git-branch ${quoteArg(selectedEnv.gitBranch)}`:"",humanGlobalFlags=getGlobalFlagsFromArgs(client.argv.slice(2),{preserveProject:!0}).filter(flag=>!flag.startsWith("--non-interactive")),humanGlobalSuffix=humanGlobalFlags.length>0?` ${humanGlobalFlags.map(quoteArg).join(" ")}`:"",addPrivateCommand=getCommandNamePlain(`env add ${privateName} ${addTargetArg}${addBranchArg} --type secret${humanGlobalSuffix}`),removePublicCommand=getCommandNamePlain(`env rm ${envName} ${removeTargetArg}${removeBranchArg}${humanGlobalSuffix}`);if(await client.input.select({message:"How should this variable be stored?",choices:[{name:`Keep private: add ${privateName} as Secret, then remove ${envName}`,value:"private"},{name:`Expose to anyone visiting your site: keep ${envName} as Config`,value:"config"}]})==="private")return output_manager_default.print(`  Add the private Secret (prompts for the value):
+`),output_manager_default.print(`    ${addPrivateCommand}
+`),output_manager_default.print(`  Remove the public Config:
+`),output_manager_default.print(`    ${removePublicCommand}
+`),1}}else!typeWasExplicit&&!opts["--yes"]&&!client.nonInteractive?await client.input.select({message:"Store this value as?",choices:[{name:getSecretStorageChoice(targets,"for this value"),value:"secret"},{name:"Config (can be revealed after saving)",value:"config"}]})==="secret"&&(type="sensitive",explicitType="secret"):typeWasExplicit||printEnvUpdateWarning("Re-run with `--type secret` to protect it.")}isFinalSecret()&&!selectedEnvIsSecret&&printEnvUpdateWarning("The previous value was readable as Config and may have been exposed. If this variable still holds the same credential, rotate it at its provider and update this variable again.");let finalPublicPrefix=apiPublicPrefix??frameworkPublicPrefix??customSveltePublicPrefix;if(isFinalSecret()&&finalPublicPrefix!==null&&finalPublicPrefix!==void 0&&printEnvUpdateWarning(finalPublicPrefix===""?"This SvelteKit project exposes every Environment Variable to the browser; the Secret type does not prevent that. Change the configured public prefix to keep values private.":`\`${finalPublicPrefix}\` exposes this variable to the browser; the Secret type does not prevent that. Rename the variable without the public prefix to keep it private.`),isFinalSecret()&&disjunctiveProductionSecretPolicyOn&&targets.includes("production")&&allTargets.some(target=>target!=="production")){let message="Your team requires Production and non-Production Secrets to be stored separately with different values. Create separate variables with different values before converting this one.";return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"production_secret_must_be_separate",message},1),output_manager_default.fatal(message),1}let preserveExistingVisibility=explicitType===void 0&&selectedEnv.visibility==="secret"&&type!=="sensitive",{visibility:resolvedVisibility,error:visibilityError}=resolveEnvVarVisibility({explicitVisibility:typeOption.source?explicitType:void 0,explicitOptionSource:typeOption.source,type,key:envName,envTargets:allTargets,teamSensitivePolicyOn,context:"update"}),visibility=preserveExistingVisibility?void 0:resolvedVisibility,displayVisibility=preserveExistingVisibility?selectedEnv.visibility:visibility;if(visibilityError)return client.nonInteractive&&outputAgentError(client,{status:"error",reason:"invalid_type",message:visibilityError},1),output_manager_default.fatal(visibilityError),1;if(!opts["--yes"]){let visibilityLabel2=formatVisibilityLabel(displayVisibility,type);if(client.nonInteractive&&outputActionRequired(client,{status:"action_required",reason:"confirmation_required",message:`Update ${envName} as ${visibilityLabel2} in ${formatEnvironments(link,selectedEnv,customEnvironments)}? Use --yes to confirm.`,next:[{command:buildCommandWithYes(redactEnvValueArgs(client.argv))}]},1),output_manager_default.print(`
+`),printAlignedLabel("Project",`${link.org.slug}/${project.name}`),printAlignedLabel("Environments",formatEnvironments(link,selectedEnv,customEnvironments)),visibilityLabel2&&printAlignedLabel("Type",visibilityLabel2),!await client.input.confirm("Update this Environment Variable?",!1))return output_manager_default.log("Canceled"),0}try{output_manager_default.spinner("Updating");let keyToUpdate=isFinalSecret()?void 0:envName;await updateEnvRecord(client,project.id,selectedEnv.id,type,keyToUpdate,finalValue,allTargets,selectedEnv.gitBranch||"",visibility)}catch(err){if(client.nonInteractive&&isAPIError(err)){let productionSecretPolicyError=getProductionSecretPolicyErrorKind(err.serverMessage),reason=productionSecretPolicyError?productionSecretPolicyError==="different-values"?"production_secret_requires_different_value":"production_secret_must_be_separate":err.slug||(err.serverMessage?.toLowerCase().includes("branch")?"branch_not_found":"api_error");outputAgentError(client,{status:"error",reason,message:productionSecretPolicyError?`${err.serverMessage} ${getProductionSecretPolicyRecovery(productionSecretPolicyError)}`:err.serverMessage},1)}if(isAPIError(err)&&isKnownError(err))return output_manager_default.error(err.serverMessage),1;throw err}output_manager_default.print(`
+`),printAlignedLabel("Updated",envName,{gutter:"\u2713"}),printAlignedLabel("Project",`${link.org.slug}/${project.name}`),printAlignedLabel("Environments",formatEnvironments(link,selectedEnv,customEnvironments));let visibilityLabel=formatVisibilityLabel(displayVisibility,type);return visibilityLabel&&printAlignedLabel("Type",visibilityLabel),0}var EnvTelemetryClient=class extends TelemetryClient{trackCliSubcommandList(actual){this.trackCliSubcommand({subcommand:"ls",value:actual})}trackCliSubcommandAdd(actual){this.trackCliSubcommand({subcommand:"add",value:actual})}trackCliSubcommandRemove(actual){this.trackCliSubcommand({subcommand:"rm",value:actual})}trackCliSubcommandPull(actual){this.trackCliSubcommand({subcommand:"pull",value:actual})}trackCliSubcommandRun(actual){this.trackCliSubcommand({subcommand:"run",value:actual})}trackCliSubcommandUpdate(actual){this.trackCliSubcommand({subcommand:"update",value:actual})}};var COMMAND_CONFIG={ls:getCommandAliases(listSubcommand),add:getCommandAliases(addSubcommand),rm:getCommandAliases(removeSubcommand),pull:getCommandAliases(pullSubcommand),run:getCommandAliases(runSubcommand),update:getCommandAliases(updateSubcommand)};async function main(client){let telemetry=new EnvTelemetryClient({opts:{store:client.telemetryEventStore}}),parsedArgs,flagsSpecification=getFlagsSpecification(envCommand.options);try{parsedArgs=parseArguments(client.argv.slice(2),flagsSpecification,{permissive:!0})}catch(err){return printError(err),1}let subArgs=parsedArgs.args.slice(1),{subcommand,args,subcommandOriginal}=getSubcommand(subArgs,COMMAND_CONFIG),needHelp=parsedArgs.flags["--help"];if(!subcommand&&needHelp)return telemetry.trackCliFlagHelp("env",subcommand),output_manager_default.print(help(envCommand,{columns:client.stderr.columns})),2;function printHelp(command){output_manager_default.print(help(command,{parent:envCommand,columns:client.stderr.columns}))}let exitCode;switch(subcommand){case"ls":if(needHelp)return telemetry.trackCliFlagHelp("env",subcommandOriginal),printHelp(listSubcommand),2;telemetry.trackCliSubcommandList(subcommandOriginal),exitCode=await ls(client,args);break;case"add":if(needHelp)return telemetry.trackCliFlagHelp("env",subcommandOriginal),printHelp(addSubcommand),2;telemetry.trackCliSubcommandAdd(subcommandOriginal),exitCode=await add(client,args);break;case"rm":if(needHelp)return telemetry.trackCliFlagHelp("env",subcommandOriginal),printHelp(removeSubcommand),2;telemetry.trackCliSubcommandRemove(subcommandOriginal),exitCode=await rm(client,args);break;case"pull":if(needHelp)return telemetry.trackCliFlagHelp("env",subcommandOriginal),printHelp(pullSubcommand),2;telemetry.trackCliSubcommandPull(subcommandOriginal),exitCode=await pull(client,args);break;case"run":if(needsHelpForRun(client))return telemetry.trackCliFlagHelp("env",subcommandOriginal),printHelp(runSubcommand),2;telemetry.trackCliSubcommandRun(subcommandOriginal),exitCode=await run(client,telemetry);break;case"update":if(needHelp)return telemetry.trackCliFlagHelp("env",subcommandOriginal),printHelp(updateSubcommand),2;telemetry.trackCliSubcommandUpdate(subcommandOriginal),exitCode=await update(client,args);break;default:return output_manager_default.error(getInvalidSubcommand(COMMAND_CONFIG)),output_manager_default.print(help(envCommand,{columns:client.stderr.columns})),2}return exitCode===0&&await autoInstallVercelPlugin(client),exitCode}export{main as default};