chore: Updated examples.

Author: smorin

README.md

@@ -52,7 +52,16 @@ Variables to resolve:
 
   API_TOKEN
     source:  manual (interactive prompt)
-    instructions: Create a token in your admin UI and paste it here.
+    instructions:
+      Example (GitHub fine-grained personal access token):
+      1) Go to https://github.com and sign in.
+      2) Click your avatar (top-right) -> Settings.
+      3) Scroll to the bottom of the left sidebar -> Developer settings.
+      4) Personal access tokens -> Fine-grained tokens -> Generate new token.
+      5) Set an expiration date, limit repository access, and grant least-privilege permissions.
+      6) Click Generate token and copy it immediately (you won't be able to see it again).
+      7) Paste the token here when prompted by envgen.
+      Tip: Store it in a password manager and rotate it regularly.
 
   APP_NAME
     source:  static
@@ -189,14 +198,21 @@ variables:
       production: "{base_url}"
 
   VITE_API_KEY:
-    description: "API key (local is static; prod comes from Secret Manager)"
+    description: "API key (prompt locally; prod comes from Secret Manager)"
     source_key: API_KEY
+    source_instructions: |
+      Example (GitHub fine-grained personal access token):
+      1) Go to https://github.com and sign in.
+      2) Click your avatar (top-right) -> Settings.
+      3) Scroll to the bottom of the left sidebar -> Developer settings.
+      4) Personal access tokens -> Fine-grained tokens -> Generate new token.
+      5) Set an expiration date, limit repository access, and grant least-privilege permissions.
+      6) Click Generate token and copy it immediately (you won't be able to see it again).
+      7) Save it somewhere secure (you won't be able to view it again later).
     environments: [local, production]
     resolvers:
       - environments: [local]
-        source: static
-        values:
-          local: "API_KEY-local"
+        source: manual
       - environments: [production]
         source: gcloud
 ```

schemas/envgen.sample.yaml

@@ -43,7 +43,7 @@ variables:
   #
   # Common optional fields:
   # - sensitive: true|false (defaults to true; controls masking in output)
-  # - source_instructions: shown for manual sources to help people find the value
+  # - source_instructions: shown for manual sources to help people find the value (supports multi-line with |)
   # - notes: free-form metadata for humans
   # - environments: limit a variable to specific environments
   # - resolvers: (schema v2) pick different sources per environment
@@ -61,7 +61,16 @@ variables:
   API_TOKEN:
     description: "API token used for local development."
     source: manual
-    source_instructions: "Create a token in your admin UI and paste it here."
+    source_instructions: |
+      Example (GitHub fine-grained personal access token):
+      1) Go to https://github.com and sign in.
+      2) Click your avatar (top-right) -> Settings.
+      3) Scroll to the bottom of the left sidebar -> Developer settings.
+      4) Personal access tokens -> Fine-grained tokens -> Generate new token.
+      5) Set an expiration date, limit repository access, and grant least-privilege permissions.
+      6) Click Generate token and copy it immediately (you won't be able to see it again).
+      7) Paste the token here when prompted by envgen.
+      Tip: Store it in a password manager and rotate it regularly.
     notes: "Rotate quarterly."
 
   BUILD_ID:

src/commands/pull.rs

@@ -24,6 +24,24 @@ enum ResolveResult {
     Failed(String, String),  // (var_name, error)
 }
 
+fn print_labeled_multiline(indent: &str, label: &str, value: &str) {
+    let value = value.trim();
+    if value.is_empty() {
+        return;
+    }
+
+    let lines: Vec<&str> = value.lines().collect();
+    if lines.len() == 1 {
+        println!("{}{}: {}", indent, label, lines[0]);
+        return;
+    }
+
+    println!("{}{}:", indent, label);
+    for line in lines {
+        println!("{}  {}", indent, line);
+    }
+}
+
 /// Run the `pull` command: resolve variables and write the .env file.
 pub async fn run_pull(opts: PullOptions) -> Result<bool> {
     // Parse and validate schema
@@ -162,7 +180,7 @@ pub async fn run_pull(opts: PullOptions) -> Result<bool> {
                     println!("    source:  manual (skipped; use --interactive to prompt)");
                 }
                 if let Some(instructions) = &var.source_instructions {
-                    println!("    instructions: {}", instructions.trim());
+                    print_labeled_multiline("    ", "instructions", instructions);
                 }
                 println!();
             } else {

src/resolver/manual_source.rs

@@ -15,6 +15,24 @@ pub struct ManualResolveOptions<'a> {
     pub non_interactive: bool,
 }
 
+fn print_labeled_multiline(indent: &str, label: &str, value: &str) {
+    let value = value.trim();
+    if value.is_empty() {
+        return;
+    }
+
+    let lines: Vec<&str> = value.lines().collect();
+    if lines.len() == 1 {
+        println!("{}{}: {}", indent, label, lines[0]);
+        return;
+    }
+
+    println!("{}{}:", indent, label);
+    for line in lines {
+        println!("{}  {}", indent, line);
+    }
+}
+
 /// Prompt the user for a manual variable value.
 /// Returns None if non-interactive mode is enabled.
 pub fn resolve_manual(opts: ManualResolveOptions<'_>) -> Result<Option<String>> {
@@ -31,7 +49,7 @@ pub fn resolve_manual(opts: ManualResolveOptions<'_>) -> Result<Option<String>>
 
     if let Some(instructions) = opts.source_instructions {
         let expanded = expand_instructions(instructions, &ctx);
-        println!("  Instructions: {}", expanded.trim());
+        print_labeled_multiline("  ", "Instructions", &expanded);
     }
 
     println!();