fix: check wrangler auth via config file instead of unreliable whoami

wrangler whoami fails in Bun.spawn due to network issues, causing
false not_authenticated status. Read the local config file to check
for oauth_token/api_token instead.

Bump shipkey to 0.3.10

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: guo-yu

package.json

@@ -1,6 +1,6 @@
 {
   "name": "shipkey",
-  "version": "0.3.9",
+  "version": "0.3.10",
   "type": "module",
   "workspaces": ["packages/*"],
   "repository": {

src/targets/cloudflare.ts

@@ -1,8 +1,41 @@
+import { readFile } from "fs/promises";
+import { join } from "path";
+import { homedir } from "os";
 import type { SyncTarget, SyncResult, TargetStatus } from "./types";
 
 export class CloudflareTarget implements SyncTarget {
   readonly name = "Cloudflare Workers";
 
+  private getWranglerConfigPaths(): string[] {
+    const home = homedir();
+    const custom = process.env.WRANGLER_HOME;
+    const paths: string[] = [];
+    if (custom) paths.push(join(custom, "config", "default.toml"));
+    if (process.platform === "darwin") {
+      paths.push(join(home, "Library", "Preferences", ".wrangler", "config", "default.toml"));
+    }
+    // XDG / Linux / fallback
+    const xdg = process.env.XDG_CONFIG_HOME || join(home, ".config");
+    paths.push(join(xdg, ".wrangler", "config", "default.toml"));
+    // Windows
+    if (process.env.APPDATA) {
+      paths.push(join(process.env.APPDATA, ".wrangler", "config", "default.toml"));
+    }
+    return paths;
+  }
+
+  private async checkAuthFromConfig(): Promise<boolean> {
+    for (const configPath of this.getWranglerConfigPaths()) {
+      try {
+        const config = await readFile(configPath, "utf-8");
+        if (config.includes("oauth_token") || config.includes("api_token")) {
+          return true;
+        }
+      } catch {}
+    }
+    return false;
+  }
+
   async checkStatus(): Promise<TargetStatus> {
     try {
       const proc = Bun.spawn(["wrangler", "--version"], {
@@ -15,20 +48,21 @@ export class CloudflareTarget implements SyncTarget {
       return "not_installed";
     }
 
+    // Try wrangler whoami first (most accurate when network is available)
     try {
       const proc = Bun.spawn(["wrangler", "whoami"], {
         stdout: "pipe",
         stderr: "pipe",
       });
       const stdout = await new Response(proc.stdout).text();
       await proc.exited;
-      if (proc.exitCode !== 0 || !stdout.includes("You are logged in")) {
-        return "not_authenticated";
-      }
-      return "ready";
-    } catch {
-      return "not_authenticated";
-    }
+      if (stdout.includes("You are logged in")) return "ready";
+    } catch {}
+
+    // Fallback: check local config file (works offline / when Bun.spawn network fails)
+    if (await this.checkAuthFromConfig()) return "ready";
+
+    return "not_authenticated";
   }
 
   async isAvailable(): Promise<boolean> {