resolve_variables
Preview the configuration keys a project or service will receive before deployment, showing each key's winning scope and whether it is plain, without exposing secret values.
Instructions
What a launch would see: per key, the winning scope and whether it is plain. No values.
The loop is "the agent asks, the human supplies". Call this before a
deploy to see which keys the service will receive (``scope`` is
``project`` or ``production/<service>``). When a key the app needs is
missing, do NOT invent or request the value in chat: ask the human to
run ``nerdit vars set <project> --secret --prompt KEY``, then call this
again to confirm the key is present. A secret value is never returned by
any tool. Owner or admin only; a name outside your scope is 403.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| project | Yes | Immutable prj_ ID or name of an existing project. Prefer the ID from list_projects: a retired ID never addresses a same-name replacement. | |
| service | No | Service inside the project whose launch to resolve for; omit for ``web``, the service of a single-app project. |