feat(cloud): multi-select provider connect with repo-marker pre-selection (--multi)

src/auth/oauth.ts

@@ -363,8 +363,8 @@ export interface BrowserFlowOptions {
   // (the console keeps it alive across the provider round-trip), so a brand-new
   // user creates the account and lands on the consent screen in one browser trip.
   signupEntry?: boolean;
-  // Which provider the user picked in the CLI. The signup page ignores it today;
-  // sent so the console can auto-start that provider without another click.
+  // Which provider the user picked in the CLI. The console signup page
+  // auto-starts that provider's OAuth without another click.
   provider?: 'google' | 'github';
 }
 

src/commands/cloud/connect.ts

@@ -21,10 +21,13 @@ import { CLIError } from '../../errors/base';
 import { ExitCode } from '../../errors/codes';
 import { openBrowser } from '../../utils/browser';
 import { isInteractive } from '../../utils/env';
+import { existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
 import {
   BACK,
   cancel,
   note,
+  promptMultiselect,
   promptSelectOrBack,
   promptConfirmOrBack,
 } from '../../utils/prompt';
@@ -54,6 +57,36 @@ const PROVIDER_OPTIONS: Array<{ value: Provider; label: string; hint: string }>
   { value: 'kubernetes', label: 'Kubernetes', hint: 'in-cluster agent, installed with Helm (console)' },
 ];
 
+// Lightweight repo markers for --multi pre-selection: cwd plus one directory
+// level, filenames only — no file contents are read.
+const PROVIDER_MARKERS: Partial<Record<Provider, string[]>> = {
+  cloudflare: ['wrangler.toml', 'wrangler.json', 'wrangler.jsonc'],
+  vercel: ['vercel.json', '.vercel'],
+  aws: ['cdk.json', 'serverless.yml', 'serverless.yaml', 'samconfig.toml', '.aws-sam'],
+  fly: ['fly.toml'],
+  render: ['render.yaml'],
+  supabase: ['supabase/config.toml'],
+  kubernetes: ['Chart.yaml', 'kustomization.yaml'],
+};
+
+function detectProviders(root: string): Provider[] {
+  const dirs = [root];
+  try {
+    for (const entry of readdirSync(root, { withFileTypes: true }).slice(0, 200)) {
+      if (entry.isDirectory() && !entry.name.startsWith('.') && entry.name !== 'node_modules') {
+        dirs.push(join(root, entry.name));
+      }
+    }
+  } catch {
+    return [];
+  }
+  const detected: Provider[] = [];
+  for (const [provider, markers] of Object.entries(PROVIDER_MARKERS) as Array<[Provider, string[]]>) {
+    if (dirs.some((d) => markers.some((m) => existsSync(join(d, m))))) detected.push(provider);
+  }
+  return detected;
+}
+
 // Same region list the console offers; the flag accepts any region so accounts
 // in regions not listed here are not locked out.
 const AWS_REGIONS = [
@@ -448,9 +481,11 @@ export const cloudConnectCommand: Command = {
     // Render
     { flag: '--api-key <key>', description: 'Render API key', type: 'string' },
     { flag: '--no-browser', description: 'AWS / Vercel / PlanetScale / Supabase: print the URL instead of opening it', type: 'boolean' },
+    { flag: '--multi', description: 'Pick several providers at once (pre-checked from repo markers in the current directory), then connect them one at a time', type: 'boolean' },
   ],
   examples: [
     'polylane cloud connect',
+    'polylane cloud connect --multi',
     'polylane cloud connect --provider vercel',
     'polylane cloud connect --provider cloudflare --token <token>',
     'polylane cloud connect --provider aws --account 123456789012 --region us-east-1 --subscribe-alarms',
@@ -466,6 +501,34 @@ export const cloudConnectCommand: Command = {
     const api = new PolylaneAPI(config);
     const providerFromFlag = getArgString(args, 'provider') !== undefined;
 
+    if (getArgBoolean(args, 'multi') === true && !providerFromFlag) {
+      if (!isInteractive(config.nonInteractive)) {
+        throw new CLIError(
+          '--multi needs a TTY',
+          ExitCode.USAGE,
+          'Run interactively, or pass --provider to connect one provider at a time'
+        );
+      }
+      const detected = detectProviders(process.cwd());
+      const selected = await promptMultiselect(
+        { nonInteractive: config.nonInteractive },
+        'Which clouds do you use? (space toggles, enter continues)',
+        PROVIDER_OPTIONS.map((o) => (detected.includes(o.value) ? { ...o, hint: `detected · ${o.hint}` } : o)),
+        detected
+      );
+      let connected = 0;
+      for (const provider of selected) {
+        // BACK from a flow's first step skips that provider and moves on to
+        // the next selected one, rather than reopening a picker.
+        if ((await connectProvider(config, api, args, workspaceId, provider, noBrowser)) !== BACK) connected += 1;
+      }
+      if (connected === 0) {
+        cancel('Nothing connected.');
+        process.exitCode = ExitCode.GENERAL;
+      }
+      return;
+    }
+
     // Provider selection restarts whenever the user backs out of the first
     // step of the chosen flow, so nothing is committed until a flow completes.
     for (;;) {

src/utils/prompt.ts

@@ -98,6 +98,24 @@ export async function promptSelectOrBack<T extends string>(
   return result as T;
 }
 
+export async function promptMultiselect<T extends string>(
+  ctx: PromptContext,
+  message: string,
+  options: Array<{ value: T; label: string; hint?: string }>,
+  initialValues: T[] = []
+): Promise<T[]> {
+  ensureInteractive(ctx, message);
+  type MultiOption = { value: string; label: string; hint?: string };
+  const result = await p.multiselect<MultiOption[], string>({
+    message,
+    options,
+    initialValues,
+    required: false,
+  });
+  if (p.isCancel(result)) return [];
+  return result as T[];
+}
+
 export async function promptConfirm(
   ctx: PromptContext,
   message: string,