deepnote
diff --git a/‎packages/cli/src/commands/notebooks/rename-notebook.test.ts‎
Lines changed: 56 additions & 5 deletions b/‎packages/cli/src/commands/notebooks/rename-notebook.test.ts‎
Lines changed: 56 additions & 5 deletions
diff --git a/‎packages/cli/src/commands/notebooks/rename-notebook.ts‎
Lines changed: 6 additions & 1 deletion b/‎packages/cli/src/commands/notebooks/rename-notebook.ts‎
Lines changed: 6 additions & 1 deletion
@@ -1,3 +1,6 @@
+import fs from 'node:fs/promises'
+import os from 'node:os'
+import path from 'node:path'
 import { ApiError } from '@deepnote/database-integrations'
 import { Command } from 'commander'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
@@ -94,6 +97,46 @@ describe('notebooks rename command', () => {
     )
   })
 
+  it('reads the token from a .env file in the working directory', async () => {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), 'deepnote-rename-'))
+    try {
+      await fs.writeFile(path.join(dir, '.env'), 'DEEPNOTE_TOKEN=dotenv-token\n')
+      vi.spyOn(process, 'cwd').mockReturnValue(dir)
+
+      await createNotebooksRenameAction(new Command())(NOTEBOOK_ID, 'Renamed', options({ token: undefined }))
+
+      expect(cloudMock.updateNotebook).toHaveBeenCalledWith(
+        expect.any(String),
+        'dotenv-token',
+        NOTEBOOK_ID,
+        expect.anything()
+      )
+      expect(process.exitCode).toBeUndefined()
+    } finally {
+      await fs.rm(dir, { recursive: true, force: true })
+    }
+  })
+
+  it('prefers a real environment variable over the .env file', async () => {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), 'deepnote-rename-'))
+    try {
+      await fs.writeFile(path.join(dir, '.env'), 'DEEPNOTE_TOKEN=dotenv-token\n')
+      vi.spyOn(process, 'cwd').mockReturnValue(dir)
+      process.env.DEEPNOTE_TOKEN = 'env-token'
+
+      await createNotebooksRenameAction(new Command())(NOTEBOOK_ID, 'Renamed', options({ token: undefined }))
+
+      expect(cloudMock.updateNotebook).toHaveBeenCalledWith(
+        expect.any(String),
+        'env-token',
+        NOTEBOOK_ID,
+        expect.anything()
+      )
+    } finally {
+      await fs.rm(dir, { recursive: true, force: true })
+    }
+  })
+
   it('emits the stable JSON contract on success', async () => {
     await createNotebooksRenameAction(new Command())(NOTEBOOK_ID, 'Renamed', options({ output: 'json' }))
 
@@ -117,11 +160,19 @@ describe('notebooks rename command', () => {
     })
 
     it('exits with invalid usage when no token is available', async () => {
-      await createNotebooksRenameAction(new Command())(NOTEBOOK_ID, 'Renamed', options({ token: undefined }))
-
-      expect(cloudMock.updateNotebook).not.toHaveBeenCalled()
-      expect(process.exitCode).toEqual(ExitCode.InvalidUsage)
-      expect(errorSpy.mock.calls.flat().join('\n')).not.toEqual('')
+      // Run from an empty directory so a developer's own .env cannot supply a token.
+      const dir = await fs.mkdtemp(path.join(os.tmpdir(), 'deepnote-rename-'))
+      try {
+        vi.spyOn(process, 'cwd').mockReturnValue(dir)
+
+        await createNotebooksRenameAction(new Command())(NOTEBOOK_ID, 'Renamed', options({ token: undefined }))
+
+        expect(cloudMock.updateNotebook).not.toHaveBeenCalled()
+        expect(process.exitCode).toEqual(ExitCode.InvalidUsage)
+        expect(errorSpy.mock.calls.flat().join('\n')).not.toEqual('')
+      } finally {
+        await fs.rm(dir, { recursive: true, force: true })
+      }
     })
 
     it('treats API conflicts as invalid usage and surfaces the server message', async () => {
 
@@ -1,6 +1,8 @@
+import { join } from 'node:path'
 import { updateNotebook } from '@deepnote/cloud'
-import { ApiError, DEFAULT_API_URL } from '@deepnote/database-integrations'
+import { ApiError, DEFAULT_API_URL, DEFAULT_ENV_FILE } from '@deepnote/database-integrations'
 import type { Command } from 'commander'
+import dotenv from 'dotenv'
 import { DEEPNOTE_TOKEN_ENV } from '../../constants'
 import { ExitCode } from '../../exit-codes'
 import { log, error as logError, outputJson } from '../../output'
@@ -57,6 +59,9 @@ async function renameNotebookInCloud(
     throw new InvalidRenameInputError('Notebook name cannot be empty.')
   }
 
+  // Load .env from the working directory before reading the token — mirrors `sync` and `run --cloud`.
+  dotenv.config({ path: join(process.cwd(), DEFAULT_ENV_FILE), quiet: true })
+
   const token = options.token?.trim() || process.env[DEEPNOTE_TOKEN_ENV]?.trim()
   if (!token) {
     throw new MissingTokenError()