Add mrt save-credentials command (#286)

* Add `mrt save-credentials` command

Adds a new command to save MRT credentials (username and API key) to the
~/.mobify file, replacing the manual echo/JSON workflow. Supports
--credentials-file override, --cloud-origin for alternate file paths,
and --yes to skip overwrite confirmation. File is written with 0o600
permissions.

* chore: add changeset for mrt save-credentials

* Extract shared confirm prompt utility

Move the duplicated confirm() pattern to a shared prompts.ts module.
Use (y/N) format matching existing CLI conventions with default-no.

* Migrate all commands to shared confirm prompt utility

Replace duplicated readline-based confirm functions across 10 commands
with the shared confirm() from prompts.ts. The shared utility auto-appends
(y/N) or (Y/n) hints and supports configurable defaults.

Author: clavery

.changeset/mrt-save-credentials.md

@@ -0,0 +1,6 @@
+---
+'@salesforce/b2c-cli': minor
+'@salesforce/b2c-dx-docs': patch
+---
+
+Add `mrt save-credentials` command to save MRT API credentials to the ~/.mobify file

docs/cli/mrt.md

@@ -20,6 +20,7 @@ Commands for managing Managed Runtime (MRT) projects, environments, and bundles
 | `mrt env access-control` | `list` | Manage access control headers |
 | `mrt bundle` | `deploy`, `list`, `history`, `download` | Manage bundles and deployments |
 | `mrt tail-logs` | | Tail real-time application logs |
+| `mrt save-credentials` | | Save MRT credentials to ~/.mobify |
 | `mrt user` | `profile`, `api-key`, `email-prefs` | Manage user settings |
 
 ## Global MRT Flags
@@ -55,15 +56,9 @@ MRT commands use API key authentication. The API key is configured in the Manage
 
 Provide the API key via one of these methods:
 
-1. **Command-line flag**: `--api-key your-api-key`
-2. **Environment variable**: `export MRT_API_KEY=your-api-key`
-3. **Mobify config file**: `~/.mobify` with `api_key` field
-
-```json
-{
-  "api_key": "your-mrt-api-key"
-}
-```
+1. **Save credentials** (recommended): `b2c mrt save-credentials --user you@example.com --api-key your-api-key`
+2. **Command-line flag**: `--api-key your-api-key`
+3. **Environment variable**: `export MRT_API_KEY=your-api-key`
 
 For complete setup instructions, see the [Authentication Guide](/guide/authentication#managed-runtime-api-key).
 
@@ -539,6 +534,37 @@ b2c mrt tail-logs -p my-storefront -e staging --json
 
 ---
 
+## Save Credentials
+
+### b2c mrt save-credentials
+
+Save MRT credentials (username and API key) to the `~/.mobify` file. Prompts for confirmation before overwriting an existing file.
+
+```bash
+# Save credentials
+b2c mrt save-credentials --user user@example.com --api-key abc123
+
+# Overwrite without confirmation
+b2c mrt save-credentials --user user@example.com --api-key abc123 --yes
+
+# Save to a custom credentials file
+b2c mrt save-credentials --user user@example.com --api-key abc123 --credentials-file ./my-creds
+
+# Save for a specific cloud origin (writes to ~/.mobify--<hostname>)
+b2c mrt save-credentials --user user@example.com --api-key abc123 --cloud-origin https://cloud-staging.example.com
+```
+
+**Flags:**
+| Flag | Description |
+|------|-------------|
+| `--user` | MRT username (email). Required. |
+| `--api-key` | MRT API key. Required. |
+| `--cloud-origin` | MRT cloud origin URL. Determines the credentials file path (e.g., `~/.mobify--<hostname>`). |
+| `--credentials-file` | Explicit path to credentials file (overrides default `~/.mobify`). |
+| `--yes`, `-y` | Overwrite existing credentials without confirmation. |
+
+---
+
 ## User Commands
 
 ### b2c mrt user profile

docs/guide/authentication.md

@@ -374,11 +374,11 @@ MRT commands use a separate API key system.
 ### Configuring the API Key
 
 ```bash
-# Environment variable
-export MRT_API_KEY=your-mrt-api-key
+# Save credentials to ~/.mobify
+b2c mrt save-credentials --user your-email@example.com --api-key your-mrt-api-key
 
-# Or in ~/.mobify config file
-echo '{"api_key": "your-mrt-api-key"}' > ~/.mobify
+# Or use an environment variable
+export MRT_API_KEY=your-mrt-api-key
 ```
 
 ## Quick Start Example

packages/b2c-cli/src/commands/code/delete.ts

@@ -3,28 +3,11 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-import * as readline from 'node:readline';
 import {Args, Flags} from '@oclif/core';
 import {InstanceCommand} from '@salesforce/b2c-tooling-sdk/cli';
 import {deleteCodeVersion} from '@salesforce/b2c-tooling-sdk/operations/code';
 import {t, withDocs} from '../../i18n/index.js';
-
-/**
- * Simple confirmation prompt.
- */
-async function confirm(message: string): Promise<boolean> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stderr,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(`${message} `, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-    });
-  });
-}
+import {confirm} from '../../prompts.js';
 
 export default class CodeDelete extends InstanceCommand<typeof CodeDelete> {
   static hiddenAliases = ['code:delete'];
@@ -75,7 +58,7 @@ export default class CodeDelete extends InstanceCommand<typeof CodeDelete> {
       const confirmed = await this.operations.confirm(
         t(
           'commands.code.delete.confirm',
-          'Are you sure you want to delete code version "{{codeVersion}}" on {{hostname}}? (y/n)',
+          'Are you sure you want to delete code version "{{codeVersion}}" on {{hostname}}?',
           {codeVersion, hostname},
         ),
       );

packages/b2c-cli/src/commands/mrt/env/delete.ts

@@ -3,28 +3,11 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-import * as readline from 'node:readline';
 import {Args, Flags} from '@oclif/core';
 import {MrtCommand} from '@salesforce/b2c-tooling-sdk/cli';
 import {deleteEnv} from '@salesforce/b2c-tooling-sdk/operations/mrt';
 import {t, withDocs} from '../../../i18n/index.js';
-
-/**
- * Simple confirmation prompt.
- */
-async function confirm(message: string): Promise<boolean> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stderr,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(`${message} `, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-    });
-  });
-}
+import {confirm} from '../../../prompts.js';
 
 /**
  * Delete an environment (target) from a Managed Runtime project.
@@ -83,7 +66,7 @@ export default class MrtEnvDelete extends MrtCommand<typeof MrtEnvDelete> {
       const confirmed = await this.operations.confirm(
         t(
           'commands.mrt.env.delete.confirm',
-          'Are you sure you want to delete environment "{{slug}}" from {{project}}? (y/n)',
+          'Are you sure you want to delete environment "{{slug}}" from {{project}}?',
           {
             slug,
             project,

packages/b2c-cli/src/commands/mrt/env/redirect/clone.ts

@@ -3,28 +3,11 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-import * as readline from 'node:readline';
 import {Flags} from '@oclif/core';
 import {MrtCommand} from '@salesforce/b2c-tooling-sdk/cli';
 import {cloneRedirects, type CloneRedirectsResult} from '@salesforce/b2c-tooling-sdk/operations/mrt';
 import {t, withDocs} from '../../../../i18n/index.js';
-
-/**
- * Prompt for confirmation.
- */
-async function confirm(message: string): Promise<boolean> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(`${message} (y/N): `, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-    });
-  });
-}
+import {confirm} from '../../../../prompts.js';
 
 /**
  * Clone redirects from one environment to another.

packages/b2c-cli/src/commands/mrt/env/redirect/delete.ts

@@ -3,28 +3,11 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-import * as readline from 'node:readline';
 import {Args, Flags} from '@oclif/core';
 import {MrtCommand} from '@salesforce/b2c-tooling-sdk/cli';
 import {deleteRedirect} from '@salesforce/b2c-tooling-sdk/operations/mrt';
 import {t, withDocs} from '../../../../i18n/index.js';
-
-/**
- * Prompt for confirmation.
- */
-async function confirm(message: string): Promise<boolean> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(`${message} (y/N): `, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-    });
-  });
-}
+import {confirm} from '../../../../prompts.js';
 
 /**
  * Delete a redirect from an MRT environment.

packages/b2c-cli/src/commands/mrt/project/delete.ts

@@ -3,28 +3,11 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-import * as readline from 'node:readline';
 import {Args, Flags} from '@oclif/core';
 import {MrtCommand} from '@salesforce/b2c-tooling-sdk/cli';
 import {deleteProject} from '@salesforce/b2c-tooling-sdk/operations/mrt';
 import {t, withDocs} from '../../../i18n/index.js';
-
-/**
- * Simple confirmation prompt.
- */
-async function confirm(message: string): Promise<boolean> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stderr,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(`${message} `, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-    });
-  });
-}
+import {confirm} from '../../../prompts.js';
 
 /**
  * Delete result for JSON output.
@@ -78,7 +61,7 @@ export default class MrtProjectDelete extends MrtCommand<typeof MrtProjectDelete
     // Confirm deletion unless --force is specified
     if (!force && !this.jsonEnabled()) {
       const confirmed = await confirm(
-        t('commands.mrt.project.delete.confirm', 'Are you sure you want to delete project "{{slug}}"? (y/n)', {slug}),
+        t('commands.mrt.project.delete.confirm', 'Are you sure you want to delete project "{{slug}}"?', {slug}),
       );
 
       if (!confirmed) {

packages/b2c-cli/src/commands/mrt/project/member/remove.ts

@@ -3,28 +3,11 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-import * as readline from 'node:readline';
 import {Args, Flags} from '@oclif/core';
 import {MrtCommand} from '@salesforce/b2c-tooling-sdk/cli';
 import {removeMember} from '@salesforce/b2c-tooling-sdk/operations/mrt';
 import {t, withDocs} from '../../../../i18n/index.js';
-
-/**
- * Prompt for confirmation.
- */
-async function confirm(message: string): Promise<boolean> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(`${message} (y/N): `, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-    });
-  });
-}
+import {confirm} from '../../../../prompts.js';
 
 /**
  * Remove a member from an MRT project.

packages/b2c-cli/src/commands/mrt/project/notification/delete.ts

@@ -3,28 +3,11 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-import * as readline from 'node:readline';
 import {Args, Flags} from '@oclif/core';
 import {MrtCommand} from '@salesforce/b2c-tooling-sdk/cli';
 import {deleteNotification} from '@salesforce/b2c-tooling-sdk/operations/mrt';
 import {t, withDocs} from '../../../../i18n/index.js';
-
-/**
- * Prompt for confirmation.
- */
-async function confirm(message: string): Promise<boolean> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    rl.question(`${message} (y/N): `, (answer) => {
-      rl.close();
-      resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-    });
-  });
-}
+import {confirm} from '../../../../prompts.js';
 
 /**
  * Delete a notification from an MRT project.