Overview
Maya’s login lands in orgfieldkit, project web-app, environment production. Those three scopes show up on management keys, SDK keys, and every shipd command.
Hierarchy
production, canary, or production-eu — protection is the isProduction flag, not the name.
What is global vs per env
Changing a definition (type, variants, …) applies to all environments.
shipd push warns. Applying it requires flag.production.toggle even if --env staging.
Default-only updates on non-production use flag.state.update.
Keys
shipd login is device auth: you pick org → project → env, and the CLI stores a management key, not a user session.