refactor: data directory re-org

Author: binarylogic

.envrc

@@ -3,6 +3,9 @@
 # Ensure hermit is loaded by the editor
 eval "$("$PWD/bin/hermit" env -)"
 
+# Environment: local for development, dev/prd via doppler
+export TERO_ENV="local"
+
 # Tero CLI configuration - Local control plane (default for development)
 export TERO_API_ENDPOINT="http://localhost:8081"
 export TERO_CHAT_ENDPOINT="http://localhost:8083"
@@ -13,7 +16,7 @@ export TERO_CONTROL_PLANE_DATABASE_URL="postgres://postgres:postgres@localhost:5
 export POWERSYNC_API_TOKEN="${POWERSYNC_API_TOKEN:-dev-cli-token}"
 
 # WorkOS client ID (same for local dev)
-export TERO_WORKOS_CLIENT_ID="client_01JQCC2CJMTB8AY2JRMZXFY9R1"
+export WORKOS_CLIENT_ID="client_01JQCC2CJMTB8AY2JRMZXFY9R1"
 
 # Staging environment (uncomment to use instead of local)
 # export TERO_API_ENDPOINT="https://api.usetero.dev/graphql"

Taskfile.yml

@@ -168,6 +168,11 @@ tasks:
     cmds:
       - "{{.ENV_PREFIX}} go run ./cmd/tero auth status"
 
+  auth:switch:
+    desc: Switch organization (TERO_ENV=local|dev|prd)
+    cmds:
+      - "{{.ENV_PREFIX}} go run ./cmd/tero auth switch {{.CLI_ARGS}}"
+
   # ===========================================================================
   # Admin (internal tooling, not shipped)
   # ===========================================================================

cmd/admin/main.go

@@ -96,7 +96,7 @@ func setup(cmd *cobra.Command) (*workosadmin.Client, string, error) {
 	scope := log.RootScope(logger)
 
 	cliConfig := config.LoadCLIConfig()
-	tokenStore := keyring.New(cliConfig.Namespace())
+	tokenStore := keyring.New(cliConfig.Environment())
 	workosClient := workos.NewClient(cliConfig.WorkOSClientID, cliConfig.APIEndpoint, cliConfig.PowerSyncEndpoint)
 	authService := auth.NewService(workosClient, tokenStore, scope)