feat: add OpenAI OAuth, strict model overrides, and Gmail pull mode

src/cli/shared.ts

@@ -2,6 +2,38 @@ import { loadConfig } from '../config/index.js';
 import type { Config } from '../config/index.js';
 import { resolve, dirname, join } from 'path';
 import { homedir } from 'os';
+import { existsSync, readFileSync } from 'fs';
+
+function loadEnvFileIfPresent(): void {
+  const envFile = process.env.FLYNN_ENV_FILE ?? resolve(homedir(), '.config/flynn/cloud.env');
+  if (!existsSync(envFile)) {
+    return;
+  }
+
+  const raw = readFileSync(envFile, 'utf-8');
+  for (const line of raw.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith('#')) {
+      continue;
+    }
+
+    const idx = trimmed.indexOf('=');
+    if (idx <= 0) {
+      continue;
+    }
+
+    const key = trimmed.slice(0, idx).trim();
+    const value = trimmed.slice(idx + 1);
+    if (!key) {
+      continue;
+    }
+
+    // Don't override existing env vars.
+    if (process.env[key] === undefined) {
+      process.env[key] = value;
+    }
+  }
+}
 
 /** Get the config file path from env or default location. */
 export function getConfigPath(): string {
@@ -30,6 +62,7 @@ export function resolveOverlayPath(basePath: string): string | undefined {
 export function loadConfigSafe(configPath?: string): { config?: Config; error?: string } {
   const path = configPath ?? getConfigPath();
   try {
+    loadEnvFileIfPresent();
     const overlayPath = resolveOverlayPath(path);
     const config = loadConfig(path, overlayPath);
     return { config };