@_nazmiforreal/flutter-ota 0.1.3 → 0.1.4

package/dart-src/packages/cli-tools/lib/src/commands/init.dart

@@ -7,6 +7,12 @@ import 'package:flutter_patcher_cli/flutter_patcher_cli.dart';
 import '../ui/ui.dart';
 
 /// `flutter_patcher init` — scaffold a project config file.
+///
+/// Prompts (interactively, when attached to a terminal) for the credentials the
+/// **selected** backend provider needs, defaulting each field to its
+/// corresponding environment variable so CI runs can be non-interactive. The
+/// result is saved as `.flutter_patcher.json` (cwd) or the global config when
+/// `--global` is passed.
 class InitCommand extends Command<int> {
   InitCommand({this.config, this.backendOverride});
 
@@ -22,62 +28,136 @@ class InitCommand extends Command<int> {
 
   @override
   ArgParser get argParser => ArgParser()
-    ..addOption('provider', defaultsTo: 'supabase', help: 'Backend provider.')
-    ..addOption('url', help: 'Supabase project URL.')
-    ..addOption('key', help: 'Supabase service role key.')
-    ..addOption('anon-key', help: 'Supabase anon key.')
-    ..addOption('bucket', defaultsTo: 'bundles', help: 'Storage bucket.')
-    ..addOption('base-path', help: 'Storage base path.')
+    ..addOption('provider',
+        abbr: 'p', defaultsTo: 'supabase', help: 'Backend provider.')
     ..addOption('channel', defaultsTo: 'production', help: 'Default channel.')
     ..addOption('platform', defaultsTo: 'android', help: 'Default platform.')
     ..addOption('source', defaultsTo: './dist', help: 'Default deploy source.')
+    ..addFlag('global', help: 'Write to the global ~/.flutter_patcher config.')
     ..addFlag('force', abbr: 'f', help: 'Overwrite an existing config.');
 
-  String? _prompt(String label, String? current) {
+  String? _p(String label, String? current) {
     if (!stdin.hasTerminal) return current;
-    stdout.write('$label${current != null ? ' [$current]' : ''}: ');
+    final hint = current != null && current.isNotEmpty ? ' [$current]' : '';
+    stdout.write('$label$hint: ');
     final line = stdin.readLineSync();
-    return (line == null || line.trim().isEmpty) ? current : line.trim();
+    final trimmed = (line ?? '').trim();
+    return trimmed.isEmpty ? current : trimmed;
   }
 
   @override
   Future<int> run() => runGuarded(() async {
-        final file = configCandidates().first;
+        final file = argResults!['global'] as bool
+            ? configCandidates().last
+            : configCandidates().first;
         if (file.existsSync() && !(argResults!['force'] as bool)) {
           throw PackException(
             'Config already exists at ${file.path}. Use --force to overwrite.',
             64,
           );
         }
-        banner('init');
 
         final provider = argResults!['provider'] as String;
-        final url = _prompt('Supabase URL', argResults!['url'] as String?);
-        final key = _prompt(
-          'Supabase service role key',
-          argResults!['key'] as String?,
-        );
-        final anonKey = argResults!['anon-key'] as String?;
-        final bucket = argResults!['bucket'] as String? ?? 'bundles';
-        final basePath = argResults!['base-path'] as String?;
         final channel = argResults!['channel'] as String? ?? 'production';
         final platform = argResults!['platform'] as String? ?? 'android';
         final source = argResults!['source'] as String? ?? './dist';
+        final env = Platform.environment;
 
-        final cfg = FlutterPatcherConfig(
-          provider: provider,
-          supabase: SupabaseConfigJson(
-            url: url,
-            serviceRoleKey: key,
-            anonKey: anonKey,
-            bucket: bucket,
-            basePath: basePath,
-          ),
-          channel: channel,
-          platform: platform,
-          source: source,
-        );
-        saveConfig(cfg);
+        banner('init');
+
+        late FlutterPatcherConfig cfg;
+        switch (provider) {
+          case 'postgres':
+            cfg = FlutterPatcherConfig(
+              provider: provider,
+              channel: channel,
+              platform: platform,
+              source: source,
+              supabase: const SupabaseConfigJson(),
+              postgres: PostgresConfigJson(
+                host: _p('Postgres host', env['POSTGRES_HOST']),
+                port: _p('Postgres port', env['POSTGRES_PORT'] ?? '5432'),
+                database: _p('Postgres database', env['POSTGRES_DB'] ?? 'postgres'),
+                username: _p('Postgres username', env['POSTGRES_USER']),
+                password: _p('Postgres password', env['POSTGRES_PASSWORD']),
+                sslMode: _p('Postgres sslmode', env['POSTGRES_SSLMODE']),
+                basePath: _p('Storage base path', env['POSTGRES_BASE_PATH']),
+                servingBaseUrl:
+                    _p('Serving base url', env['POSTGRES_SERVING_BASE_URL']),
+              ),
+            );
+          case 'cloudflare':
+            cfg = FlutterPatcherConfig(
+              provider: provider,
+              channel: channel,
+              platform: platform,
+              source: source,
+              supabase: const SupabaseConfigJson(),
+              cloudflare: CloudflareConfigJson(
+                accountId: _p('Cloudflare account id', env['CLOUDFLARE_ACCOUNT_ID']),
+                d1DatabaseId:
+                    _p('Cloudflare D1 database id', env['CLOUDFLARE_D1_DATABASE_ID']),
+                apiToken: _p('Cloudflare API token', env['CLOUDFLARE_API_TOKEN']),
+                r2Bucket:
+                    _p('R2 bucket', env['R2_BUCKET'] ?? 'bundles'),
+                r2AccessKeyId: _p('R2 access key id', env['R2_ACCESS_KEY_ID']),
+                r2SecretAccessKey:
+                    _p('R2 secret access key', env['R2_SECRET_ACCESS_KEY']),
+                r2BasePath: _p('R2 base path', env['R2_BASE_PATH']),
+              ),
+            );
+          case 'aws':
+            cfg = FlutterPatcherConfig(
+              provider: provider,
+              channel: channel,
+              platform: platform,
+              source: source,
+              supabase: const SupabaseConfigJson(),
+              aws: AwsConfigJson(
+                bucket: _p('AWS bucket', env['AWS_BUCKET']),
+                region: _p('AWS region', env['AWS_REGION']),
+                accessKeyId: _p('AWS access key id', env['AWS_ACCESS_KEY_ID']),
+                secretAccessKey:
+                    _p('AWS secret access key', env['AWS_SECRET_ACCESS_KEY']),
+                endpoint: _p('AWS endpoint', env['AWS_ENDPOINT']),
+                basePath: _p('AWS base path', env['AWS_BASE_PATH']),
+                sessionToken: _p('AWS session token', env['AWS_SESSION_TOKEN']),
+              ),
+            );
+          case 'standalone':
+            cfg = FlutterPatcherConfig(
+              provider: provider,
+              channel: channel,
+              platform: platform,
+              source: source,
+              supabase: const SupabaseConfigJson(),
+              standalone: StandaloneConfigJson(
+                baseUrl: _p('Standalone base url', env['STANDALONE_BASE_URL']),
+              ),
+            );
+          case 'supabase':
+          default:
+            cfg = FlutterPatcherConfig(
+              provider: 'supabase',
+              channel: channel,
+              platform: platform,
+              source: source,
+              supabase: SupabaseConfigJson(
+                url: _p('Supabase URL', env['SUPABASE_URL']),
+                serviceRoleKey:
+                    _p('Supabase service role key', env['SUPABASE_SERVICE_ROLE_KEY']),
+                anonKey: _p('Supabase anon key', env['SUPABASE_ANON_KEY']),
+                bucket: _p('Storage bucket', env['SUPABASE_BUCKET'] ?? 'bundles'),
+                basePath: _p('Storage base path', env['SUPABASE_BASE_PATH']),
+              ),
+            );
+        }
+
+        saveConfig(cfg, global: argResults!['global'] as bool);
         step('Wrote ${file.path}');
+        stdout.writeln(
+          '  ${yellow('⚠')} Secrets are stored in plaintext. Restrict file '
+          'permissions and use a secrets manager in production.',
+        );
       });
 }

package/dart-src/packages/cli-tools/lib/src/config.dart

@@ -161,13 +161,23 @@ FlutterPatcherConfig? loadConfig() {
   return null;
 }
 
-/// Persist a config to the project file (cwd).
-void saveConfig(FlutterPatcherConfig config) {
-  final file = configCandidates().first;
+/// Persist a config. By default writes the project file (cwd); pass
+/// [global: true] to write the global `~/.flutter_patcher/config.json`.
+void saveConfig(FlutterPatcherConfig config, {bool global = false}) {
+  final file = global ? configCandidates().last : configCandidates().first;
   file.parent.createSync(recursive: true);
   file.writeAsStringSync(
     const JsonEncoder.withIndent('  ').convert(config.toJson()),
   );
+  // Config may contain secrets (service-role keys, DB passwords, tokens). On
+  // POSIX systems tighten to owner-only read/write so they aren't world-readable.
+  if (!Platform.isWindows) {
+    try {
+      Process.runSync('chmod', ['600', file.path]);
+    } catch (_) {
+      // Non-fatal: chmod may be unavailable in some sandboxes.
+    }
+  }
 }
 
 /// Nested dot-path get/set helpers used by `config get/set`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@_nazmiforreal/flutter-ota",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Command-line interface for flutter_patcher — an OTA code-push tool for Flutter, hot-updater compatible.",
   "bin": {
     "flutter-patcher": "./bin/flutter-patcher.js"