Indiana CLI

The CLI is a private workspace package and is not published to npm. Build and run it from the Indiana repository root. All commands below use the repository entry pnpm --silent grow.

Replace the UUID placeholders with the IDs of your existing organization and App. Select Org, App and environment before login. context use only saves your selection; the server checks ownership, current membership and approved scope.

config init creates grow.config.json in the current directory without overwriting an existing file. Scope priority is explicit flags, project configuration, then the selected profile. context use updates existing project configuration, otherwise the selected profile. Configuration may be committed; keep tokens and SDK keys out of it.

• The CLI opens your system browser. Sign in with your console account and approve the OAuth identity request.
• A second page shows the device request, App, environment and project.read permission. Check the device label and terminal pairing code before approval.
• The CLI waits for approval, then saves credentials. Pending requests expire after 10 minutes and management grants after 30 days. Token refresh does not extend the grant.

Login uses Authorization Code with PKCE S256. The exact callback is http://127.0.0.1:43187/callback, used only by the local CLI to receive OAuth responses. The management service and approval pages use the deployed origin. An occupied port fails login; the callback is not changed or loosened.

The CLI uses user OAuth credentials, without browser cookies, client secrets or SDK keys. Each remote query rechecks the account, Auth session, client, grant and membership. New browserless logins and CI service accounts are not available yet.

Credentials default to the operating system credential store, bound to the management origin, profile, issuer, client, user and session. An unavailable credential store fails explicitly, without automatic file fallback. POSIX users may explicitly choose --credential-store file with 0700 directories and 0600 files. Windows does not support this file mode.

logout revokes this device's server grant before deleting local credentials. Network failure retains credentials and reports incomplete revocation. logout --local only removes local credentials; the server grant may remain valid. Open https://groove-grow.vercel.app/cli/sessions to review and revoke individual devices. Revoking one device leaves other devices unchanged.

Use the current schemaVersion 1 FunnelDocument / PaywallDocument. Input must be valid UTF-8 and JSON, at most 1,000,000 bytes. draft allows incomplete drafts; publish checks publication structure. validate accepts --file - for stdin. Obsolete formats are rejected.

Validation reports validation=local and serverChecks=not_run. Structural validity does not authorize publication: tenant access, fixed references, providers and current state still require server checks. diff emits JSON Pointers, change kinds and stable SHA-256 hashes without document values. It shows up to 100 changes with total / truncated fields.