@adobe/aio-cli-plugin-app-storage 1.3.0-pre.2026-02-20.sha-df98265c → 1.5.0

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@adobe/aio-cli-plugin-app-storage",
-  "version": "1.3.0-pre.2026-02-20.sha-df98265c",
+  "version": "1.5.0",
   "dependencies": {
     "@adobe/aio-lib-core-config": "^5",
     "@adobe/aio-lib-core-logging": "^3",
-    "@adobe/aio-lib-db": "^0.1.0-beta.8",
+    "@adobe/aio-lib-db": "^1.0.0",
     "@adobe/aio-lib-env": "^3.0.1",
+    "@adobe/aio-lib-ims": "^8.0.0",
     "@adobe/aio-lib-state": "^5.3.0",
     "@inquirer/prompts": "^5",
     "@oclif/core": "^4",
@@ -91,6 +92,5 @@
     "setupFiles": [
       "<rootDir>/test/jest.env.js"
     ]
-  },
-  "prereleaseSha": "df98265cea69ce4b581e2ac725aac8af6a598035"
-}
+  }
+}

package/src/DBBaseCommand.js

@@ -12,10 +12,11 @@ governing permissions and limitations under the License.
 
 import { BaseCommand } from './BaseCommand.js'
 import config from '@adobe/aio-lib-core-config'
-import { CONFIG_RUNTIME_AUTH, CONFIG_RUNTIME_NAMESPACE } from './constants/global.js'
+import { CONFIG_RUNTIME_NAMESPACE } from './constants/global.js'
 import { AVAILABLE_REGIONS, CONFIG_DB_ENDPOINT, CONFIG_DB_REGION, DEFAULT_REGION } from './constants/db.js'
 import { Flags } from '@oclif/core'
 import { getCliEnv } from '@adobe/aio-lib-env'
+import { getAccessToken } from './utils/authHelper.js'
 
 export class DBBaseCommand extends BaseCommand {
   async init () {
@@ -33,12 +34,27 @@ export class DBBaseCommand extends BaseCommand {
   async initializeDBClient () {
     try {
       const region = this.flags?.region || config.get(CONFIG_DB_REGION) || DEFAULT_REGION
+      const runtimeNamespace = config.get(CONFIG_RUNTIME_NAMESPACE)
+      if (!runtimeNamespace) {
+        this.error(
+          `Database commands require App Builder project configuration.
+Please make sure the 'AIO_RUNTIME_NAMESPACE' environment variable is configured`
+        )
+      }
+
+      const authToken = await getAccessToken()
+      if (!authToken) {
+        this.error(
+          'Database commands require IMS token for authentication. Please make sure you have the required Ims credentials configured in environment variables.'
+        )
+      }
+
       // Get database configuration
       const dbConfig = {
         ow: {
-          namespace: config.get(CONFIG_RUNTIME_NAMESPACE),
-          auth: config.get(CONFIG_RUNTIME_AUTH)
+          namespace: runtimeNamespace
         },
+        token: authToken,
         region
       }
 
@@ -48,14 +64,6 @@ export class DBBaseCommand extends BaseCommand {
         this.error(`Invalid region '${region}' for the ${getCliEnv()} environment, must be one of: ${allowedRegions.join(', ')}`)
       }
 
-      // Validate required configuration
-      if (!(dbConfig.ow.namespace && dbConfig.ow.auth)) {
-        this.error(
-          `Database commands require App Builder project configuration.
-Please make sure the 'AIO_RUNTIME_NAMESPACE' and 'AIO_RUNTIME_AUTH' environment variables are configured.`
-        )
-      }
-
       const endpointOverride = config.get(CONFIG_DB_ENDPOINT)
       if (endpointOverride) {
         process.env.AIO_DB_ENDPOINT = endpointOverride
@@ -70,7 +78,7 @@ Please make sure the 'AIO_RUNTIME_NAMESPACE' and 'AIO_RUNTIME_AUTH' environment
       this.debugLogger?.info?.('Initializing DB client with config:', {
         namespace: dbConfig.ow.namespace,
         region: dbConfig.region,
-        hasAuth: !!dbConfig.ow.auth
+        hasToken: !!dbConfig.token
       })
 
       // Initialize the database client
@@ -97,12 +105,12 @@ Please make sure the 'AIO_RUNTIME_NAMESPACE' and 'AIO_RUNTIME_AUTH' environment
 // Add json and region flags to GLOBAL FLAGS section in --help output
 DBBaseCommand.flags = {
   ...BaseCommand.flags,
-  json: {
+  json: Flags.boolean({
     description: 'Format output as json.',
     default: false,
     required: false,
     helpGroup: 'GLOBAL'
-  },
+  }),
   region: Flags.string({
     description: `Database region. Defaults to 'AIO_DB_REGION' environment variable or '${DEFAULT_REGION}' if neither is set. Any database region set in 'app.config.yaml' takes precedence over all of these.\n<options: ${AVAILABLE_REGIONS.prod.join('|')}>`,
     required: false,

package/src/commands/app/db/status.js

@@ -111,6 +111,10 @@ export class Status extends DBBaseCommand {
       this.log(chalk.dim(`   Message: ${provisionStatusResponse.message}`))
     }
 
+    if (provisionStatusResponse.region) {
+      this.log(chalk.dim(`   Region: ${provisionStatusResponse.region}`))
+    }
+
     if (provisionStatusResponse.submitted) {
       this.log(chalk.dim(`   Submitted: ${new Date(provisionStatusResponse.submitted).toLocaleString()}`))
     }

package/src/constants/global.js

@@ -12,3 +12,5 @@ governing permissions and limitations under the License.
 
 export const CONFIG_RUNTIME_NAMESPACE = 'runtime.namespace'
 export const CONFIG_RUNTIME_AUTH = 'runtime.auth'
+export const CONFIG_IMS_TECHNICAL_ACCOUNT_EMAIL_PLACEHOLDER = 'dummy@techacct.adobe.com'
+export const CONFIG_IMS_TECHNICAL_ACCOUNT_ID_PLACEHOLDER = 'dummy@techacct.adobe.com'

package/src/utils/authHelper.js

@@ -0,0 +1,81 @@
+/*
+Copyright 2026 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
+/**
+ * Helper to get the IMS access token using Adobe I/O SDK
+ * @returns {string} The IMS access token
+ */
+import aioLibIms from '@adobe/aio-lib-ims'
+import { CONFIG_IMS_TECHNICAL_ACCOUNT_EMAIL_PLACEHOLDER, CONFIG_IMS_TECHNICAL_ACCOUNT_ID_PLACEHOLDER } from '../constants/global.js'
+const normalizeArrayString = (value) => {
+  try {
+    const parsed = JSON.parse(value)
+    return Array.isArray(parsed) ? JSON.stringify(parsed) : '[]'
+  } catch {
+    const items = value.split(',').map((entry) => entry.trim()).filter(Boolean)
+    return JSON.stringify(items)
+  }
+}
+
+const buildAuthConfig = () => {
+  const clientId = process.env.IMS_OAUTH_S2S_CLIENT_ID
+  const clientSecret = process.env.IMS_OAUTH_S2S_CLIENT_SECRET
+  const orgId = process.env.IMS_OAUTH_S2S_ORG_ID
+  const scopes = process.env.IMS_OAUTH_S2S_SCOPES
+  const technicalAccountEmail = process.env.IMS_OAUTH_S2S_TECHNICAL_ACCOUNT_EMAIL || CONFIG_IMS_TECHNICAL_ACCOUNT_EMAIL_PLACEHOLDER
+  const technicalAccountId = process.env.IMS_OAUTH_S2S_TECHNICAL_ACCOUNT_ID || CONFIG_IMS_TECHNICAL_ACCOUNT_ID_PLACEHOLDER
+
+  if (!clientId || !clientSecret || !orgId || !scopes) {
+    throw new Error('Missing required credentials. Please set IMS_OAUTH_S2S_CLIENT_ID, IMS_OAUTH_S2S_CLIENT_SECRET, IMS_OAUTH_S2S_ORG_ID, and IMS_OAUTH_S2S_SCOPES environment variables.')
+  }
+
+  return {
+    client_id: clientId,
+    client_secrets: normalizeArrayString(clientSecret),
+    ims_org_id: orgId,
+    scopes: normalizeArrayString(scopes),
+    technical_account_email: technicalAccountEmail,
+    technical_account_id: technicalAccountId
+  }
+}
+
+/**
+ * Get or generate an IMS access token using OAuth Server-to-Server credentials.
+ * @returns {Promise<string>} The access token
+ */
+export async function getAccessToken () {
+  const runtimeNamespace = process.env.AIO_RUNTIME_NAMESPACE
+
+  if (!runtimeNamespace) {
+    throw new Error('Runtime namespace is required. Please set AIO_RUNTIME_NAMESPACE environment variable.')
+  }
+
+  try {
+    const authConfig = buildAuthConfig()
+    const imsContextName = `oauth_s2s_${runtimeNamespace}`
+
+    const { context, getToken } = aioLibIms
+    await context.set(imsContextName, authConfig, true)
+    const accessToken = await getToken(imsContextName)
+
+    if (!accessToken) {
+      throw new Error('Failed to generate access token. Please verify your credentials.')
+    }
+
+    return accessToken
+  } catch (error) {
+    if (error instanceof Error) {
+      throw error
+    }
+    throw new Error('Failed to retrieve access token: Unknown error')
+  }
+}