# Configuration and uploads

`~/.vatio/config.json` stores `base_url` and `token`. Environment variables
override saved settings: `VATIO_BASE_URL`, `VATIO_TOKEN`, and `VATIO_HOME`
(the configuration directory). `config show` can print the saved token;
use `doctor` when sharing diagnostics.

After a command, the CLI says when npm has a newer release. It checks at most
once a day, only on a terminal, never in CI. `VATIO_NO_UPDATE_NOTIFIER=1` turns
it off.

`diff` and `push` send workspace files to the platform for validation. They
require network access and authentication. `push` creates the remote if
missing; `diff` requires an existing workspace.

Uploads exclude hidden files and directories, `node_modules`, `tmp`, and `log`.
Limits are 500 files, 2 MB per file, and 8 MB total. These exclusions do not
make an ordinary file safe to store credentials in.