@_nazmiforreal/flutter-ota 0.1.20 → 0.1.21

package/dart-src/packages/cli-tools/lib/flutter_ota_kit_cli.dart

@@ -38,6 +38,7 @@ export 'src/commands/channel.dart';
 export 'src/commands/migrate.dart';
 export 'src/commands/console.dart';
 export 'src/commands/pocketbase.dart';
+export 'src/commands/storage.dart';
 
 import 'src/commands/build.dart';
 import 'src/commands/bundle.dart';
@@ -244,7 +245,7 @@ void _printMissingSubcommand(Command<int> parent) {
   stderr.writeln('');
 
   if (subNames.isNotEmpty) {
-    stderr.writeln('  ${_cyan('Did you mean?')}');
+    stderr.writeln('  ${_cyan('Available subcommands:')}');
     for (final s in subNames) {
       stderr.writeln('    ${_green('${parent.name} $s')}');
     }

package/dart-src/packages/cli-tools/lib/src/cli_base.dart

@@ -35,8 +35,9 @@ Backend requireBackend(FlutterPatcherConfig? config, {Backend? override}) {
   if (override != null) return override;
   if (config == null) {
     throw StateError(
-      'No configuration found. Run `flutter_ota_kit init` or set '
-      'SUPABASE_URL / SUPABASE_SERVICE_ROLE_KEY.',
+      'No configuration found. Run `flutter-ota init <backend>` or set '
+      'the required environment variables for your provider '
+      '(see `flutter-ota init --help`).',
     );
   }
   return resolveBackend(config);

package/dart-src/packages/cli-tools/lib/src/commands/bundle.dart

@@ -1,3 +1,5 @@
+import 'dart:io';
+
 import 'package:flutter_ota_kit_cli/flutter_ota_kit_cli.dart';
 
 import '../ui/ui.dart';
@@ -58,12 +60,15 @@ class BundleCommand extends FlutterPatcherCommand {
 
   @override
   String get description =>
-      'Manage bundles (list / show / delete / disable / enable / force / promote).';
+      'Manage bundles (list / show / delete / disable / enable / force / promote / update).';
 }
 
 class BundleListCommand extends FlutterPatcherCommand {
   BundleListCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null
+        ? 'Backend provider [detected: $detected].'
+        : 'Backend provider.');
     argParser.addOption('channel', abbr: 'c', help: 'Filter by channel.');
     argParser.addOption('platform', abbr: 'p', help: 'Filter by platform.');
     argParser.addOption('enabled', help: 'Filter by enabled (true/false).');
@@ -130,7 +135,8 @@ class BundleListCommand extends FlutterPatcherCommand {
 
 class BundleShowCommand extends FlutterPatcherCommand {
   BundleShowCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null ? 'Backend provider [detected: $detected].' : 'Backend provider.');
     argParser.addOption('id', help: 'Bundle id.');
   }
 
@@ -173,7 +179,8 @@ class BundleShowCommand extends FlutterPatcherCommand {
 
 class BundleDeleteCommand extends FlutterPatcherCommand {
   BundleDeleteCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null ? 'Backend provider [detected: $detected].' : 'Backend provider.');
     argParser.addOption('id', help: 'Bundle id.');
     argParser.addFlag(
       'keep-storage',
@@ -215,7 +222,8 @@ class BundleDeleteCommand extends FlutterPatcherCommand {
 
 class BundleDisableCommand extends FlutterPatcherCommand {
   BundleDisableCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null ? 'Backend provider [detected: $detected].' : 'Backend provider.');
     argParser.addOption('id', help: 'Bundle id.');
   }
 
@@ -246,7 +254,8 @@ class BundleDisableCommand extends FlutterPatcherCommand {
 
 class BundleEnableCommand extends FlutterPatcherCommand {
   BundleEnableCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null ? 'Backend provider [detected: $detected].' : 'Backend provider.');
     argParser.addOption('id', help: 'Bundle id.');
   }
 
@@ -277,7 +286,8 @@ class BundleEnableCommand extends FlutterPatcherCommand {
 
 class BundleForceCommand extends FlutterPatcherCommand {
   BundleForceCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null ? 'Backend provider [detected: $detected].' : 'Backend provider.');
     argParser.addOption('id', help: 'Bundle id.');
     argParser.addFlag(
       'off',
@@ -319,7 +329,8 @@ class BundleForceCommand extends FlutterPatcherCommand {
 
 class BundlePromoteCommand extends FlutterPatcherCommand {
   BundlePromoteCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null ? 'Backend provider [detected: $detected].' : 'Backend provider.');
     argParser.addOption('id', help: 'Bundle id.');
     argParser.addOption('channel', abbr: 'c', help: 'Target channel.');
   }
@@ -351,13 +362,14 @@ class BundlePromoteCommand extends FlutterPatcherCommand {
     await steps.run('Promoting $id to $channel',
         () => promoteBundle(backend, id!, channel));
     steps.summary();
-    box('promote', [kv('bundle', cyan(id!)), kv('channel', channel)]);
+    stdout.writeln('  ${dim('→')} bundle ${cyan(id!)} → channel ${cyan(channel)}');
   });
 }
 
 class BundleUpdateCommand extends FlutterPatcherCommand {
   BundleUpdateCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null ? 'Backend provider [detected: $detected].' : 'Backend provider.');
     argParser.addOption('id', help: 'Bundle id.');
     argParser.addOption('message', abbr: 'm', help: 'New release message.');
     argParser.addOption('target-version', help: 'New target app version (e.g. 1.0.0).');

package/dart-src/packages/cli-tools/lib/src/commands/channel.dart

@@ -1,3 +1,5 @@
+import 'dart:io';
+
 import 'package:flutter_ota_kit_cli/flutter_ota_kit_cli.dart';
 
 import '../ui/ui.dart';
@@ -28,7 +30,10 @@ class ChannelCommand extends FlutterPatcherCommand {
 
 class ChannelListCommand extends FlutterPatcherCommand {
   ChannelListCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null
+        ? 'Backend provider [detected: $detected].'
+        : 'Backend provider.');
   }
 
   final FlutterPatcherConfig? config;
@@ -56,7 +61,10 @@ class ChannelListCommand extends FlutterPatcherCommand {
 
 class ChannelGetCommand extends FlutterPatcherCommand {
   ChannelGetCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null
+        ? 'Backend provider [detected: $detected].'
+        : 'Backend provider.');
     argParser.addOption('channel', abbr: 'c', help: 'Channel.');
   }
 
@@ -100,7 +108,10 @@ class ChannelGetCommand extends FlutterPatcherCommand {
 
 class ChannelSetCommand extends FlutterPatcherCommand {
   ChannelSetCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null
+        ? 'Backend provider [detected: $detected].'
+        : 'Backend provider.');
     argParser.addOption('channel', abbr: 'c', help: 'Channel.');
     argParser.addOption('bundle-id', abbr: 'i', help: 'Bundle id.');
   }
@@ -112,7 +123,7 @@ class ChannelSetCommand extends FlutterPatcherCommand {
   String get name => 'set';
 
   @override
-  String get description => 'Promote a bundle to a channel.';
+  String get description => 'Set the active bundle for a channel.';
 
   @override
   Future<int> run() => runGuarded(() async {
@@ -134,6 +145,6 @@ class ChannelSetCommand extends FlutterPatcherCommand {
     await steps.run('Promoting $bundleId to $channel',
         () => promoteBundle(backend, bundleId, channel));
     steps.summary();
-    box('channel set', [kv('channel', channel), kv('bundle', cyan(bundleId))]);
+    stdout.writeln('  ${dim('→')} channel ${cyan(channel)} = ${cyan(bundleId)}');
   });
 }

package/dart-src/packages/cli-tools/lib/src/commands/config_command.dart

@@ -32,6 +32,9 @@ void _saveProjectJson(Map<String, dynamic> json) {
   final file = configCandidates().first;
   file.parent.createSync(recursive: true);
   file.writeAsStringSync(const JsonEncoder.withIndent('  ').convert(json));
+  if (!Platform.isWindows) {
+    Process.runSync('chmod', ['600', file.path]);
+  }
 }
 
 class ConfigGetCommand extends FlutterPatcherCommand {

package/dart-src/packages/cli-tools/lib/src/commands/console.dart

@@ -35,8 +35,10 @@ class ConsoleCommand extends FlutterPatcherCommand {
   Future<int> run() => runGuarded(() async {
     final consoleDir = _findConsoleDir();
     if (consoleDir == null) {
-      err('Console package not found (expected packages/console).');
-      return;
+      throw PackException(
+        'Console package not found (expected packages/console).',
+        1,
+      );
     }
     if (argResults!['open'] as bool) {
       banner('console · open');
@@ -53,11 +55,8 @@ class ConsoleCommand extends FlutterPatcherCommand {
       return;
     }
     banner('console');
-    box('flutter-ota console', [
-      'Open the web console with Flutter:',
-      '',
-      kv('dir', consoleDir.path),
-      kv('run', 'flutter run -d chrome'),
-    ]);
+    info('Open the web console with Flutter:');
+    step('dir  ${dim(consoleDir.path)}');
+    step('run  ${cyan('flutter run -d chrome')}');
   });
 }

package/dart-src/packages/cli-tools/lib/src/commands/deploy.dart

@@ -6,16 +6,20 @@ import '../backend.dart';
 import '../cli_base.dart';
 import '../config.dart';
 import '../operations.dart';
+import '../pack.dart';
 import '../ui/ui.dart';
 import '../util.dart';
 
 /// `flutter-ota deploy` — zip + upload + register a new bundle.
 class DeployCommand extends FlutterPatcherCommand {
   DeployCommand({this.config, this.backendOverride}) {
+    final detected = config?.provider ?? loadConfig()?.provider;
     argParser.addOption(
       'backend',
       abbr: 'b',
-      help: 'Backend provider (supabase/postgres/cloudflare/aws).',
+      help: detected != null
+          ? 'Backend provider [detected: $detected].'
+          : 'Backend provider.',
     );
     argParser.addOption('source', abbr: 's', help: 'Source directory to zip + upload.');
     argParser.addOption('channel', abbr: 'c', help: 'Target channel.');
@@ -68,14 +72,19 @@ class DeployCommand extends FlutterPatcherCommand {
     final fingerprintHash = argResults!['fingerprint-hash'] as String?;
     final keyPath = argResults!['key'] as String?;
     String? signingKey;
-    if (keyPath != null) signingKey = File(keyPath).readAsStringSync().trim();
+    if (keyPath != null) {
+      final keyFile = File(keyPath);
+      if (!keyFile.existsSync()) {
+        throw PackException('Signing key file not found: $keyPath', 64);
+      }
+      signingKey = keyFile.readAsStringSync().trim();
+    }
     final resolvedGitCommitHash =
         argResults!['git-commit-hash'] as String? ??
         await gitCommitHash(source);
     final bundleId = argResults!['bundle-id'] as String?;
 
     banner('deploy');
-    info('channel ${cyan(channel)}  platform ${cyan(platform)}  source ${dim(source)}');
 
     final steps = Steps('deploy');
     final bundle = await _deployWithPhases(steps, backend, source, channel,

package/dart-src/packages/cli-tools/lib/src/commands/doctor.dart

@@ -1,5 +1,8 @@
+import 'dart:convert';
 import 'dart:io';
 
+import 'package:http/http.dart' as http;
+
 import 'package:flutter_ota_kit_cli/flutter_ota_kit_cli.dart';
 
 import '../ui/ui.dart';
@@ -7,7 +10,10 @@ import '../ui/ui.dart';
 /// `flutter-ota doctor` — environment + backend connectivity check.
 class DoctorCommand extends FlutterPatcherCommand {
   DoctorCommand({this.config, this.backendOverride}) {
-    argParser.addOption('backend', abbr: 'b', help: 'Backend provider.');
+    final detected = config?.provider ?? loadConfig()?.provider;
+    argParser.addOption('backend', abbr: 'b', help: detected != null
+        ? 'Backend provider [detected: $detected].'
+        : 'Backend provider.');
   }
 
   final FlutterPatcherConfig? config;
@@ -41,10 +47,8 @@ class DoctorCommand extends FlutterPatcherCommand {
     steps.success('Channel ${cfg.channel}');
     steps.success('Platform ${cfg.platform}');
 
-    // PocketBase-specific: show binary + health endpoint status.
-    if (cfg.provider == 'pocketbase') {
-      await _checkPocketBase(cfg, steps);
-    }
+    // Backend-specific pre-flight checks.
+    await _checkProvider(cfg, steps);
 
     try {
       final backend = requireBackend(cfg, override: backendOverride);
@@ -64,6 +68,123 @@ class DoctorCommand extends FlutterPatcherCommand {
     steps.summary();
   });
 
+  Future<void> _checkProvider(FlutterPatcherConfig cfg, Steps steps) async {
+    switch (cfg.provider) {
+      case 'supabase':
+        await _checkSupabase(cfg, steps);
+      case 'postgres':
+        await _checkPostgres(cfg, steps);
+      case 'cloudflare':
+        await _checkCloudflare(cfg, steps);
+      case 'aws':
+        await _checkAws(cfg, steps);
+      case 'pocketbase':
+        await _checkPocketBase(cfg, steps);
+      default:
+        steps.fail('Unknown provider: ${cfg.provider}');
+    }
+  }
+
+  Future<void> _checkSupabase(
+    FlutterPatcherConfig cfg,
+    Steps steps,
+  ) async {
+    final url = cfg.supabase.url;
+    if (url == null || url.isEmpty) {
+      steps.fail('SUPABASE_URL not set');
+      return;
+    }
+    try {
+      final res = await http.get(Uri.parse('$url/rest/v1/')).timeout(
+        const Duration(seconds: 5),
+      );
+      if (res.statusCode < 400) {
+        steps.success('Supabase reachable ($url)');
+      } else {
+        steps.fail('Supabase returned ${res.statusCode}');
+      }
+    } catch (e) {
+      steps.fail('Supabase unreachable — $e');
+    }
+  }
+
+  Future<void> _checkPostgres(
+    FlutterPatcherConfig cfg,
+    Steps steps,
+  ) async {
+    final host = cfg.postgres.host;
+    if (host == null || host.isEmpty) {
+      steps.fail('POSTGRES_HOST not set');
+      return;
+    }
+    final port = int.tryParse(cfg.postgres.port ?? '5432') ?? 5432;
+    try {
+      final socket = await Socket.connect(host, port).timeout(
+        const Duration(seconds: 5),
+      );
+      await socket.close();
+      steps.success('Postgres reachable ($host:$port)');
+    } catch (e) {
+      steps.fail('Postgres unreachable — $e');
+    }
+  }
+
+  Future<void> _checkCloudflare(
+    FlutterPatcherConfig cfg,
+    Steps steps,
+  ) async {
+    final accountId = cfg.cloudflare.accountId;
+    final apiToken = cfg.cloudflare.apiToken;
+    if (accountId == null || accountId.isEmpty) {
+      steps.fail('CLOUDFLARE_ACCOUNT_ID not set');
+      return;
+    }
+    if (apiToken == null || apiToken.isEmpty) {
+      steps.fail('CLOUDFLARE_API_TOKEN not set');
+      return;
+    }
+    try {
+      final res = await http
+          .get(
+            Uri.parse(
+              'https://api.cloudflare.com/client/v4/accounts/$accountId',
+            ),
+            headers: {
+              'Authorization': 'Bearer $apiToken',
+              'Content-Type': 'application/json',
+            },
+          )
+          .timeout(const Duration(seconds: 5));
+      final body = jsonDecode(res.body) as Map<String, dynamic>;
+      if (body['success'] == true) {
+        steps.success('Cloudflare account reachable');
+      } else {
+        final errors = body['errors'] as List? ?? [];
+        final msg = errors.isNotEmpty ? errors.first['message'] : res.body;
+        steps.fail('Cloudflare API error: $msg');
+      }
+    } catch (e) {
+      steps.fail('Cloudflare unreachable — $e');
+    }
+  }
+
+  Future<void> _checkAws(
+    FlutterPatcherConfig cfg,
+    Steps steps,
+  ) async {
+    final bucket = cfg.aws.bucket;
+    if (bucket == null || bucket.isEmpty) {
+      steps.fail('AWS_BUCKET not set');
+      return;
+    }
+    final region = cfg.aws.region;
+    if (region == null || region.isEmpty) {
+      steps.fail('AWS_REGION not set');
+      return;
+    }
+    steps.success('AWS S3 bucket "$bucket" in $region');
+  }
+
   Future<void> _checkPocketBase(
     FlutterPatcherConfig cfg,
     Steps steps,
@@ -79,8 +200,8 @@ class DoctorCommand extends FlutterPatcherCommand {
     }
     final url = cfg.pocketbase.url;
     if (url != null && url.isNotEmpty) {
+      final client = PocketBaseClient(url);
       try {
-        final client = PocketBaseClient(url);
         final ok = await client.health();
         if (ok) {
           steps.success('PocketBase reachable');
@@ -89,6 +210,8 @@ class DoctorCommand extends FlutterPatcherCommand {
         }
       } catch (e) {
         steps.fail('PocketBase unreachable — $e');
+      } finally {
+        client.close();
       }
     }
   }

package/dart-src/packages/cli-tools/lib/src/commands/fingerprint.dart

@@ -25,6 +25,7 @@ class FingerprintCommand extends FlutterPatcherCommand {
     banner(name);
     final source = argResults!['source'] as String;
     final hash = generateFingerprint(source);
-    box('fingerprint', [kv('source', source), kv('hash', hash)]);
+    step('source ${dim(source)}');
+    step('hash   ${cyan(hash)}');
   });
 }

package/dart-src/packages/cli-tools/lib/src/commands/init.dart

@@ -227,8 +227,8 @@ class InitCommand extends FlutterPatcherCommand {
               env['SUPABASE_SERVICE_ROLE_KEY'],
             ),
             anonKey: _p(
-              'Supabase publishable key',
-              env['SUPABASE_PUBLISHABLE_KEY'],
+              'Supabase anon key',
+              env['SUPABASE_ANON_KEY'],
             ),
             bucket: _p('Storage bucket', env['SUPABASE_BUCKET'] ?? 'bundles'),
             basePath: _p('Storage base path', env['SUPABASE_BASE_PATH']),
@@ -267,12 +267,14 @@ class InitCommand extends FlutterPatcherCommand {
       step('3. Provision the backend once: ${dim('flutter-ota migrate supabase')}');
     } else if (provider == 'postgres') {
       step('3. Provision the backend: ${dim('flutter-ota migrate postgres')}');
+    } else if (provider == 'cloudflare') {
+      step('3. Provision the backend: ${dim('flutter-ota migrate cloudflare')}');
+    } else if (provider == 'aws') {
+      step('3. Provision the backend: ${dim('flutter-ota migrate aws')}');
     } else if (provider == 'pocketbase') {
-      step('3. Install PocketBase + provision the schema: '
-          '${dim('flutter-ota pocketbase install')} then '
-          '${dim('flutter-ota pocketbase serve')}.');
+      step('3. Provision the backend: ${dim('flutter-ota migrate pocketbase')}');
     }
-    step('4. Build a patch: ${dim('flutter-ota build --name 1.0.1')} '
+    step('4. Build a patch: ${dim('flutter-ota build --version 1.0.1')} '
         'then ${dim('flutter-ota deploy')}');
   });
 
@@ -420,7 +422,7 @@ class InitCommand extends FlutterPatcherCommand {
       default:
         final c = cfg.supabase;
         entries['SUPABASE_URL'] = c.url ?? '';
-        entries['SUPABASE_PUBLISHABLE_KEY'] = c.anonKey ?? '';
+        entries['SUPABASE_ANON_KEY'] = c.anonKey ?? '';
         entries['SUPABASE_BUCKET'] = c.bucket ?? 'bundles';
         entries['CHANNEL'] = cfg.channel;
         entries['APP_VERSION'] = '';
@@ -462,7 +464,14 @@ class InitCommand extends FlutterPatcherCommand {
     step('Added .env to .gitignore');
   }
 
-  String _q(String? s) => s == null ? "''" : "'${s.replaceAll("'", "\\'")}'";
+  String _q(String? s) {
+    if (s == null) return "''";
+    final escaped = s
+        .replaceAll('\\', '\\\\')
+        .replaceAll('\$', '\\\$')
+        .replaceAll("'", "\\'");
+    return "'$escaped'";
+  }
 
   /// Build the body of `lib/flutter_ota_kit_setup.dart` for the selected backend.
   ///
@@ -489,7 +498,7 @@ class InitCommand extends FlutterPatcherCommand {
     password: const String.fromEnvironment('POSTGRES_PASSWORD', defaultValue: ''),
     servingBaseUrl: const String.fromEnvironment('POSTGRES_SERVING_BASE_URL', defaultValue: ${_q(c.servingBaseUrl ?? '')}),
     channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
-    platform: Platform.android,
+    platform: Platform.${cfg.platform},
     updateStrategy: UpdateStrategy.appVersion,
     appVersion: $appVersionExpr,
   ));''';
@@ -506,7 +515,7 @@ class InitCommand extends FlutterPatcherCommand {
     secretAccessKey: const String.fromEnvironment('R2_SECRET_ACCESS_KEY', defaultValue: ''),
     basePath: const String.fromEnvironment('R2_BASE_PATH', defaultValue: ${_q(c.r2BasePath ?? '')}),
     channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
-    platform: Platform.android,
+    platform: Platform.${cfg.platform},
     updateStrategy: UpdateStrategy.appVersion,
     appVersion: $appVersionExpr,
   ));''';
@@ -522,7 +531,7 @@ class InitCommand extends FlutterPatcherCommand {
     basePath: const String.fromEnvironment('AWS_BASE_PATH', defaultValue: ${_q(c.basePath ?? '')}),
     endpoint: const String.fromEnvironment('AWS_ENDPOINT', defaultValue: ${_q(c.endpoint ?? '')}),
     channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
-    platform: Platform.android,
+    platform: Platform.${cfg.platform},
     updateStrategy: UpdateStrategy.appVersion,
     appVersion: $appVersionExpr,
   ));''';
@@ -537,7 +546,7 @@ class InitCommand extends FlutterPatcherCommand {
     bundlesCollection: const String.fromEnvironment('POCKETBASE_BUNDLES_COLLECTION', defaultValue: ${_q(c.bundlesCollection)}),
     bundlesBucket: const String.fromEnvironment('POCKETBASE_BUCKET', defaultValue: ${_q(c.bundlesBucket)}),
     channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
-    platform: Platform.android,
+    platform: Platform.${cfg.platform},
     updateStrategy: UpdateStrategy.appVersion,
     appVersion: $appVersionExpr,
   ));''';
@@ -548,10 +557,10 @@ class InitCommand extends FlutterPatcherCommand {
             '''
   FlutterPatcher.configureSupabase(SupabaseUpdateConfig(
      supabaseUrl: const String.fromEnvironment('SUPABASE_URL', defaultValue: ${_q(c.url ?? '')}),
-     anonKey: const String.fromEnvironment('SUPABASE_PUBLISHABLE_KEY', defaultValue: ''),
+     anonKey: const String.fromEnvironment('SUPABASE_ANON_KEY', defaultValue: ''),
      bucket: const String.fromEnvironment('SUPABASE_BUCKET', defaultValue: ${_q(c.bucket ?? 'bundles')}),
     channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
-    platform: Platform.android,
+    platform: Platform.${cfg.platform},
     updateStrategy: UpdateStrategy.appVersion,
     appVersion: $appVersionExpr,
     sdkVersion: const String.fromEnvironment('SDK_VERSION', defaultValue: '1.0.0'),

package/dart-src/packages/cli-tools/lib/src/commands/keys.dart

@@ -1,4 +1,5 @@
 import 'dart:convert';
+import 'dart:io';
 
 import '../cli_base.dart';
 import '../config.dart';
@@ -53,5 +54,8 @@ class KeysCommand extends FlutterPatcherCommand {
     final file = configCandidates().first;
     file.parent.createSync(recursive: true);
     file.writeAsStringSync(const JsonEncoder.withIndent('  ').convert(json));
+    if (!Platform.isWindows) {
+      Process.runSync('chmod', ['600', file.path]);
+    }
   }
 }