Documentation

Install the CLI, learn the model and look up every command.

CLI reference

storeenv login

Sign in through the browser and unlock your identity on this device.

Global flags
zsh
$ storeenv login
Opening https://storeenv.app/auth/cli?state=9d94c1... in your browser
Code 4821-QK (it must match the one in your browser)
Device key SE:90FF-F3CE-12D8 (type it where you approve this device)
Waiting for authorization... (Ctrl+C to cancel)
Signed in as @ada
This is your first device. Creating your StoreEnv identity...
Your recovery phrase is shown in the browser. Save it there, then confirm 3 words.
$ storeenv login

Flags

--browserOpen the browser (use --no-browser on SSH sessions). Default: true.
--recovery-phraseEnrol this device with your recovery phrase.

The first sign in of a new account; the code and device key change every time.

Good to know

  • The browser does the signing in: email and password, or a sign in method you connected (GitHub, GitLab or Google when they are turned on). The terminal never sees your password.
  • The terminal listens on 127.0.0.1 for a single use code and swaps it for tokens with a direct call. Check that the code in the terminal matches the one in the browser.
  • On a new account the recovery phrase is shown in the browser, where terminal scrollback can't keep it. On a new device of an existing account, approve it from a device you already use, or pass --recovery-phrase.
  • Over SSH use --no-browser and open the printed address on any machine.

Global flags

--project <value>Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes).
--env <value>Environment name.
--jsonMachine readable output.
--yes, -ySkip confirmations.
--colorColoured output (--no-color to turn off). Default: true.
--verboseShow debug details.
--api <value>API base URL of a self-hosted StoreEnv.
--trust-writer <value>Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX.
--allow-unsignedpull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy.