Find your project and environment

#!/usr/bin/env bash
# Recipe: find-your-project
#
# Every other call in this cookbook needs a projectID, an environmentAlias, and
# often a workspaceID. This resolves all three from the one ID you can read off
# the dashboard, and proves the token actually reaches that project.
#
# Required environment:
#   VF_PAT         personal access token (Settings -> Access tokens), vfp_..._...
#   VF_PROJECT_ID  the project ID (Settings -> General -> Metadata)
set -euo pipefail

: "${VF_PAT:?set VF_PAT to a personal access token from Settings -> Access tokens}"
: "${VF_PROJECT_ID:?set VF_PROJECT_ID to the project ID from Settings -> General -> Metadata}"

BASE="https://realtime-api.voiceflow.com/v1/stable"
AUTH="Authorization: Bearer $VF_PAT"

fail() { echo "FAIL at $1" >&2; exit 1; }

# 1. Resolve UPWARD from the project you named, rather than listing workspaces
#    and taking the first. A personal access token is user-scoped - it reaches
#    every workspace the account belongs to - so "the first workspace" is an
#    arbitrary one that may not be yours to touch. Start from the ID you know.
PROJECT=$(curl -sf "$BASE/project/$VF_PROJECT_ID" -H "$AUTH") \
  || fail "read project $VF_PROJECT_ID (a 401 means the token is wrong or expired; a 404 means this token's account cannot see that project)"

WORKSPACE_ID=$(echo "$PROJECT" | jq -r '.project.workspaceID')
echo "$PROJECT" | jq -e '.project.workspaceID | type == "string"' > /dev/null \
  || fail "project carries no workspaceID"

# 2. Confirm the project really sits in the workspace it claims. Reading the
#    ID back is what turns "I pasted an ID" into "this token can reach it".
WORKSPACE=$(curl -sf "$BASE/workspace/$WORKSPACE_ID" -H "$AUTH") \
  || fail "read workspace $WORKSPACE_ID"
echo "$WORKSPACE" | jq -e --arg w "$WORKSPACE_ID" '.workspace.id == $w' > /dev/null \
  || fail "workspace $WORKSPACE_ID did not return itself"

# 3. Environments carry the alias every later call needs. A new project has one
#    called `main`; `isMain` marks it whatever it was later renamed to, so read
#    the flag rather than hard-coding the string.
ENVS=$(curl -sf "$BASE/environment?projectID=$VF_PROJECT_ID" -H "$AUTH") \
  || fail "list environments for project $VF_PROJECT_ID"
echo "$ENVS" | jq -e '[.environments[] | select(.isMain)] | length == 1' > /dev/null \
  || fail "expected exactly one environment flagged isMain"

ALIAS=$(echo "$ENVS" | jq -r '.environments[] | select(.isMain) | .alias')

echo "ok: project '$(echo "$PROJECT" | jq -r '.project.name')' sits in workspace '$(echo "$WORKSPACE" | jq -r '.workspace.name')' ($WORKSPACE_ID) with $(echo "$ENVS" | jq '.environments | length') environment(s); main alias is '$ALIAS'"