@base44-preview/cli 0.0.50-pr.445.70f94f4 → 0.0.50-pr.445.83cecf3

package/dist/cli/index.js

@@ -134614,11 +134614,11 @@ var require_prettier = __commonJS((exports, module) => {
 var require_formatter = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve6) {
-        resolve6(value);
+      return value instanceof P9 ? value : new P9(function(resolve7) {
+        resolve7(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve6, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve7, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -134634,7 +134634,7 @@ var require_formatter = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve6(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve7(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -139287,7 +139287,7 @@ var require_url = __commonJS((exports) => {
   };
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.parse = undefined;
-  exports.resolve = resolve6;
+  exports.resolve = resolve7;
   exports.cwd = cwd;
   exports.getProtocol = getProtocol;
   exports.getExtension = getExtension;
@@ -139315,7 +139315,7 @@ var require_url = __commonJS((exports) => {
   var urlDecodePatterns = [/%23/g, "#", /%24/g, "$", /%26/g, "&", /%2C/g, ",", /%40/g, "@"];
   var parse11 = (u4) => new URL(u4);
   exports.parse = parse11;
-  function resolve6(from, to5) {
+  function resolve7(from, to5) {
     const fromUrl = new URL((0, convert_path_to_posix_1.default)(from), "https://aaa.nonexistanturl.com");
     const resolvedUrl = new URL((0, convert_path_to_posix_1.default)(to5), fromUrl);
     const endSpaces = to5.match(/(\s*)$/)?.[1] || "";
@@ -139451,7 +139451,7 @@ var require_url = __commonJS((exports) => {
   }
   function relative4(from, to5) {
     if (!isFileSystemPath(from) || !isFileSystemPath(to5)) {
-      return resolve6(from, to5);
+      return resolve7(from, to5);
     }
     const fromDir = path_1.default.dirname(stripHash(from));
     const toPath4 = stripHash(to5);
@@ -140127,7 +140127,7 @@ var require_plugins = __commonJS((exports) => {
     let plugin;
     let lastError;
     let index = 0;
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       runNextPlugin();
       function runNextPlugin() {
         plugin = plugins[index++];
@@ -140155,7 +140155,7 @@ var require_plugins = __commonJS((exports) => {
         }
       }
       function onSuccess(result) {
-        resolve6({
+        resolve7({
           plugin,
           result
         });
@@ -141488,11 +141488,11 @@ var require_lib3 = __commonJS((exports) => {
 var require_resolver = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve6) {
-        resolve6(value);
+      return value instanceof P9 ? value : new P9(function(resolve7) {
+        resolve7(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve6, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve7, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -141508,7 +141508,7 @@ var require_resolver = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve6(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve7(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -141629,11 +141629,11 @@ var require_optionValidator = __commonJS((exports) => {
 var require_src3 = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve6) {
-        resolve6(value);
+      return value instanceof P9 ? value : new P9(function(resolve7) {
+        resolve7(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve6, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve7, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -141649,7 +141649,7 @@ var require_src3 = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve6(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve7(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -147274,11 +147274,11 @@ var require_raw_body = __commonJS((exports, module) => {
     if (done) {
       return readStream(stream, encoding, length, limit, wrap(done));
     }
-    return new Promise(function executor(resolve6, reject) {
+    return new Promise(function executor(resolve7, reject) {
       readStream(stream, encoding, length, limit, function onRead2(err, buf) {
         if (err)
           return reject(err);
-        resolve6(buf);
+        resolve7(buf);
       });
     });
   }
@@ -160403,7 +160403,7 @@ var require_view = __commonJS((exports, module) => {
   var basename4 = path18.basename;
   var extname2 = path18.extname;
   var join22 = path18.join;
-  var resolve6 = path18.resolve;
+  var resolve7 = path18.resolve;
   module.exports = View;
   function View(name2, options8) {
     var opts = options8 || {};
@@ -160437,7 +160437,7 @@ var require_view = __commonJS((exports, module) => {
     debug('lookup "%s"', name2);
     for (var i5 = 0;i5 < roots.length && !path19; i5++) {
       var root2 = roots[i5];
-      var loc = resolve6(root2, name2);
+      var loc = resolve7(root2, name2);
       var dir = dirname15(loc);
       var file2 = basename4(loc);
       path19 = this.resolve(dir, file2);
@@ -160462,7 +160462,7 @@ var require_view = __commonJS((exports, module) => {
     });
     sync = false;
   };
-  View.prototype.resolve = function resolve7(dir, file2) {
+  View.prototype.resolve = function resolve8(dir, file2) {
     var ext = this.ext;
     var path19 = join22(dir, file2);
     var stat2 = tryStat(path19);
@@ -162621,7 +162621,7 @@ var require_application = __commonJS((exports, module) => {
   var compileETag = require_utils10().compileETag;
   var compileQueryParser = require_utils10().compileQueryParser;
   var compileTrust = require_utils10().compileTrust;
-  var resolve6 = __require("node:path").resolve;
+  var resolve7 = __require("node:path").resolve;
   var once9 = require_once();
   var Router = require_router();
   var slice = Array.prototype.slice;
@@ -162675,7 +162675,7 @@ var require_application = __commonJS((exports, module) => {
     this.mountpath = "/";
     this.locals.settings = this.settings;
     this.set("view", View);
-    this.set("views", resolve6("views"));
+    this.set("views", resolve7("views"));
     this.set("jsonp callback name", "callback");
     if (env3 === "production") {
       this.enable("view cache");
@@ -164166,7 +164166,7 @@ var require_send = __commonJS((exports, module) => {
   var extname2 = path18.extname;
   var join22 = path18.join;
   var normalize2 = path18.normalize;
-  var resolve6 = path18.resolve;
+  var resolve7 = path18.resolve;
   var sep = path18.sep;
   var BYTES_RANGE_REGEXP = /^ *bytes=/;
   var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1000;
@@ -164195,7 +164195,7 @@ var require_send = __commonJS((exports, module) => {
     this._maxage = opts.maxAge || opts.maxage;
     this._maxage = typeof this._maxage === "string" ? ms8(this._maxage) : Number(this._maxage);
     this._maxage = !isNaN(this._maxage) ? Math.min(Math.max(0, this._maxage), MAX_MAXAGE) : 0;
-    this._root = opts.root ? resolve6(opts.root) : null;
+    this._root = opts.root ? resolve7(opts.root) : null;
   }
   util2.inherits(SendStream, Stream2);
   SendStream.prototype.error = function error48(status, err) {
@@ -164344,7 +164344,7 @@ var require_send = __commonJS((exports, module) => {
         return res;
       }
       parts = normalize2(path19).split(sep);
-      path19 = resolve6(path19);
+      path19 = resolve7(path19);
     }
     if (containsDotFile(parts)) {
       debug('%s dotfile "%s"', this._dotfiles, path19);
@@ -164672,7 +164672,7 @@ var require_response = __commonJS((exports, module) => {
   var cookie = require_cookie();
   var send = require_send();
   var extname2 = path18.extname;
-  var resolve6 = path18.resolve;
+  var resolve7 = path18.resolve;
   var vary = require_vary();
   var { Buffer: Buffer7 } = __require("node:buffer");
   var res = Object.create(http.ServerResponse.prototype);
@@ -164881,7 +164881,7 @@ var require_response = __commonJS((exports, module) => {
     }
     opts = Object.create(opts);
     opts.headers = headers;
-    var fullPath = !opts.root ? resolve6(path19) : path19;
+    var fullPath = !opts.root ? resolve7(path19) : path19;
     return this.sendFile(fullPath, opts, done);
   };
   res.contentType = res.type = function contentType(type) {
@@ -165142,7 +165142,7 @@ var require_serve_static = __commonJS((exports, module) => {
   var encodeUrl = require_encodeurl();
   var escapeHtml = require_escape_html();
   var parseUrl = require_parseurl();
-  var resolve6 = __require("path").resolve;
+  var resolve7 = __require("path").resolve;
   var send = require_send();
   var url3 = __require("url");
   module.exports = serveStatic;
@@ -165161,7 +165161,7 @@ var require_serve_static = __commonJS((exports, module) => {
       throw new TypeError("option setHeaders must be function");
     }
     opts.maxage = opts.maxage || opts.maxAge || 0;
-    opts.root = resolve6(root2);
+    opts.root = resolve7(root2);
     var onDirectory = redirect ? createRedirectDirectoryListener() : createNotFoundDirectoryListener();
     return function serveStatic2(req, res, next) {
       if (req.method !== "GET" && req.method !== "HEAD") {
@@ -168535,8 +168535,8 @@ var require_executor = __commonJS((exports, module) => {
     }
     resetBuffer() {
       this.buffer = new Waterfall;
-      this.buffer.chain(new Promise((resolve6) => {
-        this._triggerBuffer = resolve6;
+      this.buffer.chain(new Promise((resolve7) => {
+        this._triggerBuffer = resolve7;
       }));
       if (this.ready)
         this._triggerBuffer();
@@ -169556,7 +169556,7 @@ var require_storage = __commonJS((exports, module) => {
       throw e8;
     }
   };
-  var writeFileLinesAsync = (filename, lines, mode = DEFAULT_FILE_MODE) => new Promise((resolve6, reject) => {
+  var writeFileLinesAsync = (filename, lines, mode = DEFAULT_FILE_MODE) => new Promise((resolve7, reject) => {
     try {
       const stream = writeFileStream(filename, { mode });
       const readable2 = Readable6.from(lines);
@@ -169573,7 +169573,7 @@ var require_storage = __commonJS((exports, module) => {
           if (err)
             reject(err);
           else
-            resolve6();
+            resolve7();
         });
       });
       readable2.on("error", (err) => {
@@ -169744,7 +169744,7 @@ var require_persistence = __commonJS((exports, module) => {
       return { data: tdata, indexes };
     }
     treatRawStreamAsync(rawStream) {
-      return new Promise((resolve6, reject) => {
+      return new Promise((resolve7, reject) => {
         const dataById = {};
         const indexes = {};
         let corruptItems = 0;
@@ -169787,7 +169787,7 @@ var require_persistence = __commonJS((exports, module) => {
             }
           }
           const data = Object.values(dataById);
-          resolve6({ data, indexes });
+          resolve7({ data, indexes });
         });
         lineStream.on("error", function(err) {
           reject(err, null);
@@ -195398,13 +195398,13 @@ var require_broadcast_operator = __commonJS((exports) => {
       return true;
     }
     emitWithAck(ev2, ...args) {
-      return new Promise((resolve6, reject) => {
+      return new Promise((resolve7, reject) => {
         args.push((err, responses) => {
           if (err) {
             err.responses = responses;
             return reject(err);
           } else {
-            return resolve6(responses);
+            return resolve7(responses);
           }
         });
         this.emit(ev2, ...args);
@@ -195592,12 +195592,12 @@ var require_socket2 = __commonJS((exports) => {
     }
     emitWithAck(ev2, ...args) {
       const withErr = this.flags.timeout !== undefined;
-      return new Promise((resolve6, reject) => {
+      return new Promise((resolve7, reject) => {
         args.push((arg1, arg2) => {
           if (withErr) {
-            return arg1 ? reject(arg1) : resolve6(arg2);
+            return arg1 ? reject(arg1) : resolve7(arg2);
           } else {
-            return resolve6(arg1);
+            return resolve7(arg1);
           }
         });
         this.emit(ev2, ...args);
@@ -196052,13 +196052,13 @@ var require_namespace = __commonJS((exports) => {
       return true;
     }
     serverSideEmitWithAck(ev2, ...args) {
-      return new Promise((resolve6, reject) => {
+      return new Promise((resolve7, reject) => {
         args.push((err, responses) => {
           if (err) {
             err.responses = responses;
             return reject(err);
           } else {
-            return resolve6(responses);
+            return resolve7(responses);
           }
         });
         this.serverSideEmit(ev2, ...args);
@@ -196742,7 +196742,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         return localSockets;
       }
       const requestId = randomId();
-      return new Promise((resolve6, reject) => {
+      return new Promise((resolve7, reject) => {
         const timeout3 = setTimeout(() => {
           const storedRequest2 = this.requests.get(requestId);
           if (storedRequest2) {
@@ -196752,7 +196752,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         }, opts.flags.timeout || DEFAULT_TIMEOUT);
         const storedRequest = {
           type: MessageType.FETCH_SOCKETS,
-          resolve: resolve6,
+          resolve: resolve7,
           timeout: timeout3,
           current: 0,
           expected: expectedResponseCount,
@@ -196962,7 +196962,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         return localSockets;
       }
       const requestId = randomId();
-      return new Promise((resolve6, reject) => {
+      return new Promise((resolve7, reject) => {
         const timeout3 = setTimeout(() => {
           const storedRequest2 = this.customRequests.get(requestId);
           if (storedRequest2) {
@@ -196972,7 +196972,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         }, opts.flags.timeout || DEFAULT_TIMEOUT);
         const storedRequest = {
           type: MessageType.FETCH_SOCKETS,
-          resolve: resolve6,
+          resolve: resolve7,
           timeout: timeout3,
           missingUids: new Set([...this.nodesMap.keys()]),
           responses: localSockets
@@ -197701,13 +197701,13 @@ var require_dist4 = __commonJS((exports, module) => {
       this.engine.close();
       (0, uws_1.restoreAdapter)();
       if (this.httpServer) {
-        return new Promise((resolve6) => {
+        return new Promise((resolve7) => {
           this.httpServer.close((err) => {
             fn9 && fn9(err);
             if (err) {
               debug("server was not running");
             }
-            resolve6();
+            resolve7();
           });
         });
       } else {
@@ -215914,14 +215914,14 @@ var require_async_iterator = __commonJS((exports, module) => {
     };
   }
   function readAndResolve(iter) {
-    var resolve6 = iter[kLastResolve];
-    if (resolve6 !== null) {
+    var resolve7 = iter[kLastResolve];
+    if (resolve7 !== null) {
       var data = iter[kStream].read();
       if (data !== null) {
         iter[kLastPromise] = null;
         iter[kLastResolve] = null;
         iter[kLastReject] = null;
-        resolve6(createIterResult(data, false));
+        resolve7(createIterResult(data, false));
       }
     }
   }
@@ -215929,13 +215929,13 @@ var require_async_iterator = __commonJS((exports, module) => {
     process.nextTick(readAndResolve, iter);
   }
   function wrapForNext(lastPromise, iter) {
-    return function(resolve6, reject) {
+    return function(resolve7, reject) {
       lastPromise.then(function() {
         if (iter[kEnded]) {
-          resolve6(createIterResult(undefined, true));
+          resolve7(createIterResult(undefined, true));
           return;
         }
-        iter[kHandlePromise](resolve6, reject);
+        iter[kHandlePromise](resolve7, reject);
       }, reject);
     };
   }
@@ -215954,12 +215954,12 @@ var require_async_iterator = __commonJS((exports, module) => {
         return Promise.resolve(createIterResult(undefined, true));
       }
       if (this[kStream].destroyed) {
-        return new Promise(function(resolve6, reject) {
+        return new Promise(function(resolve7, reject) {
           process.nextTick(function() {
             if (_this[kError]) {
               reject(_this[kError]);
             } else {
-              resolve6(createIterResult(undefined, true));
+              resolve7(createIterResult(undefined, true));
             }
           });
         });
@@ -215982,13 +215982,13 @@ var require_async_iterator = __commonJS((exports, module) => {
     return this;
   }), _defineProperty(_Object$setPrototypeO, "return", function _return() {
     var _this2 = this;
-    return new Promise(function(resolve6, reject) {
+    return new Promise(function(resolve7, reject) {
       _this2[kStream].destroy(null, function(err) {
         if (err) {
           reject(err);
           return;
         }
-        resolve6(createIterResult(undefined, true));
+        resolve7(createIterResult(undefined, true));
       });
     });
   }), _Object$setPrototypeO), AsyncIteratorPrototype);
@@ -216010,15 +216010,15 @@ var require_async_iterator = __commonJS((exports, module) => {
       value: stream._readableState.endEmitted,
       writable: true
     }), _defineProperty(_Object$create, kHandlePromise, {
-      value: function value(resolve6, reject) {
+      value: function value(resolve7, reject) {
         var data = iterator[kStream].read();
         if (data) {
           iterator[kLastPromise] = null;
           iterator[kLastResolve] = null;
           iterator[kLastReject] = null;
-          resolve6(createIterResult(data, false));
+          resolve7(createIterResult(data, false));
         } else {
-          iterator[kLastResolve] = resolve6;
+          iterator[kLastResolve] = resolve7;
           iterator[kLastReject] = reject;
         }
       },
@@ -216037,12 +216037,12 @@ var require_async_iterator = __commonJS((exports, module) => {
         iterator[kError] = err;
         return;
       }
-      var resolve6 = iterator[kLastResolve];
-      if (resolve6 !== null) {
+      var resolve7 = iterator[kLastResolve];
+      if (resolve7 !== null) {
         iterator[kLastPromise] = null;
         iterator[kLastResolve] = null;
         iterator[kLastReject] = null;
-        resolve6(createIterResult(undefined, true));
+        resolve7(createIterResult(undefined, true));
       }
       iterator[kEnded] = true;
     });
@@ -216054,7 +216054,7 @@ var require_async_iterator = __commonJS((exports, module) => {
 
 // ../../node_modules/readable-stream/lib/internal/streams/from.js
 var require_from = __commonJS((exports, module) => {
-  function asyncGeneratorStep(gen, resolve6, reject, _next, _throw, key2, arg) {
+  function asyncGeneratorStep(gen, resolve7, reject, _next, _throw, key2, arg) {
     try {
       var info = gen[key2](arg);
       var value = info.value;
@@ -216063,7 +216063,7 @@ var require_from = __commonJS((exports, module) => {
       return;
     }
     if (info.done) {
-      resolve6(value);
+      resolve7(value);
     } else {
       Promise.resolve(value).then(_next, _throw);
     }
@@ -216071,13 +216071,13 @@ var require_from = __commonJS((exports, module) => {
   function _asyncToGenerator(fn9) {
     return function() {
       var self2 = this, args = arguments;
-      return new Promise(function(resolve6, reject) {
+      return new Promise(function(resolve7, reject) {
         var gen = fn9.apply(self2, args);
         function _next(value) {
-          asyncGeneratorStep(gen, resolve6, reject, _next, _throw, "next", value);
+          asyncGeneratorStep(gen, resolve7, reject, _next, _throw, "next", value);
         }
         function _throw(err) {
-          asyncGeneratorStep(gen, resolve6, reject, _next, _throw, "throw", err);
+          asyncGeneratorStep(gen, resolve7, reject, _next, _throw, "throw", err);
         }
         _next(undefined);
       });
@@ -241789,20 +241789,16 @@ function hasAnyLoginMethod(config3) {
 var SOCIAL_PROVIDERS = {
   google: {
     field: "enableGoogleLogin",
-    label: "Google",
     customOAuth: {
       modeField: "googleOAuthMode",
       clientIdField: "googleOAuthClientId",
-      secretKey: "google_oauth_client_secret",
-      envVar: "BASE44_GOOGLE_OAUTH_CLIENT_SECRET",
-      promptMessage: "Enter Google OAuth client secret"
+      secretKey: "google_oauth_client_secret"
     }
   },
-  microsoft: { field: "enableMicrosoftLogin", label: "Microsoft" },
-  facebook: { field: "enableFacebookLogin", label: "Facebook" },
-  apple: { field: "enableAppleLogin", label: "Apple" }
+  microsoft: { field: "enableMicrosoftLogin" },
+  facebook: { field: "enableFacebookLogin" },
+  apple: { field: "enableAppleLogin" }
 };
-var VALID_PROVIDER_NAMES = Object.keys(SOCIAL_PROVIDERS);
 function toAuthConfigPayload(config3) {
   return {
     enable_username_password: config3.enableUsernamePassword,
@@ -250900,44 +250896,74 @@ function getAuthPushCommand() {
 }
 
 // src/cli/commands/auth/social-login.ts
-import { dirname as dirname10, join as join15 } from "node:path";
+import { dirname as dirname10, join as join15, resolve as resolve2 } from "node:path";
+var PROVIDER_LABELS = {
+  google: "Google",
+  microsoft: "Microsoft",
+  facebook: "Facebook",
+  apple: "Apple"
+};
+var VALID_PROVIDER_NAMES = Object.keys(SOCIAL_PROVIDERS);
+var PROVIDER_OAUTH_CLI = {
+  google: {
+    envVar: "BASE44_GOOGLE_OAUTH_CLIENT_SECRET",
+    promptMessage: "Enter Google OAuth client secret"
+  }
+};
+function hasSecretOptions(options) {
+  return Boolean(options.clientSecret || options.clientSecretStdin || options.envFile);
+}
 function hasCustomOAuthOptions(options) {
-  return Boolean(options.clientId || options.clientSecret || options.clientSecretStdin);
+  return Boolean(options.clientId || hasSecretOptions(options));
 }
 async function socialLoginAction({ log, isNonInteractive, runTask: runTask2 }, provider, action, options) {
   const shouldEnable = action === "enable";
   const providerInfo = SOCIAL_PROVIDERS[provider];
+  const label = PROVIDER_LABELS[provider];
   const hasOAuthOptions = hasCustomOAuthOptions(options);
   if (hasOAuthOptions && !providerInfo.customOAuth) {
     throw new InvalidInputError(`Custom OAuth options are only supported for providers with custom OAuth (e.g., google). Use: base44 auth social-login ${provider} ${action}`);
   }
   if (hasOAuthOptions && !shouldEnable) {
-    throw new InvalidInputError(`Custom OAuth options cannot be used with disable. To disable ${providerInfo.label} login: base44 auth social-login ${provider} disable`);
+    throw new InvalidInputError(`Custom OAuth options cannot be used with disable. To disable ${label} login: base44 auth social-login ${provider} disable`);
+  }
+  if (hasSecretOptions(options) && !options.clientId) {
+    throw new InvalidInputError(`--client-id is required when providing a client secret. Use: base44 auth social-login ${provider} enable --client-id <id> --client-secret <secret>`);
   }
   const oauth = providerInfo.customOAuth;
+  const oauthCli = PROVIDER_OAUTH_CLI[provider];
   const useCustomOAuth = shouldEnable && hasOAuthOptions && oauth != null;
   let clientSecret;
-  if (useCustomOAuth && oauth) {
-    clientSecret = await resolveSecret({
-      flagValue: options.clientSecret,
-      fromStdin: options.clientSecretStdin,
-      envVar: oauth.envVar,
-      promptMessage: oauth.promptMessage,
-      isNonInteractive,
-      name: "client secret",
-      hints: [
-        {
-          message: `Provide via flag:   base44 auth social-login ${provider} enable --client-id <id> --client-secret <secret>`,
-          command: `base44 auth social-login ${provider} enable --client-id <id> --client-secret <secret>`
-        },
-        {
-          message: `Provide via stdin:  echo <secret> | base44 auth social-login ${provider} enable --client-id <id> --client-secret-stdin`
-        },
-        {
-          message: `Provide via env:    ${oauth.envVar}=<secret> base44 auth social-login ${provider} enable --client-id <id>`
-        }
-      ]
-    });
+  if (useCustomOAuth && oauth && oauthCli && hasSecretOptions(options)) {
+    if (options.envFile) {
+      const secrets = await parseEnvFile(resolve2(options.envFile));
+      const value = secrets[oauthCli.envVar];
+      if (!value) {
+        throw new InvalidInputError(`Key "${oauthCli.envVar}" not found in ${options.envFile}.`);
+      }
+      clientSecret = value;
+    } else {
+      clientSecret = await resolveSecret({
+        flagValue: options.clientSecret,
+        fromStdin: options.clientSecretStdin,
+        envVar: oauthCli.envVar,
+        promptMessage: oauthCli.promptMessage,
+        isNonInteractive,
+        name: "client secret",
+        hints: [
+          {
+            message: `Provide via flag:   base44 auth social-login ${provider} enable --client-id <id> --client-secret <secret>`,
+            command: `base44 auth social-login ${provider} enable --client-id <id> --client-secret <secret>`
+          },
+          {
+            message: `Provide via stdin:  echo <secret> | base44 auth social-login ${provider} enable --client-id <id> --client-secret-stdin`
+          },
+          {
+            message: `Provide via env:    ${oauthCli.envVar}=<secret> base44 auth social-login ${provider} enable --client-id <id>`
+          }
+        ]
+      });
+    }
   }
   const { project: project2 } = await readProjectConfig();
   const configDir = dirname10(project2.configPath);
@@ -250947,19 +250973,22 @@ async function socialLoginAction({ log, isNonInteractive, runTask: runTask2 }, p
     await runTask2("Saving client secret", async () => pushCustomOAuthSecret(provider, clientSecret));
   }
   if (!shouldEnable && !hasAnyLoginMethod(updated)) {
-    log.warn(`Disabling ${providerInfo.label} login will leave no login methods enabled. Users will be locked out.`);
+    log.warn(`Disabling ${label} login will leave no login methods enabled. Users will be locked out.`);
   }
   const newStatus = shouldEnable ? "enabled" : "disabled";
   const oauthNote = useCustomOAuth ? " with custom OAuth" : "";
-  return {
-    outroMessage: `${providerInfo.label} login ${newStatus}${oauthNote} in local config. Run \`base44 auth push\` or \`base44 deploy\` to apply.`
-  };
+  let outroMessage = `${label} login ${newStatus}${oauthNote} in local config. Run \`base44 auth push\` or \`base44 deploy\` to apply.`;
+  if (useCustomOAuth && !clientSecret) {
+    outroMessage += `
+Remember to push the client secret separately: base44 secrets set --env-file <path>`;
+  }
+  return { outroMessage };
 }
 function getSocialLoginCommand() {
   return new Base44Command("social-login").description("Enable or disable social login providers (google, microsoft, facebook, apple)").addArgument(new Argument("<provider>", "social login provider").choices(VALID_PROVIDER_NAMES)).addArgument(new Argument("<action>", "enable or disable the provider").choices([
     "enable",
     "disable"
-  ])).option("--client-id <id>", "custom OAuth client ID (Google only)").option("--client-secret <secret>", "custom OAuth client secret (Google only)").option("--client-secret-stdin", "read client secret from stdin (Google only)").action(socialLoginAction);
+  ])).option("--client-id <id>", "custom OAuth client ID (Google only)").option("--client-secret <secret>", "custom OAuth client secret (Google only)").option("--client-secret-stdin", "read client secret from stdin (Google only)").option("--env-file <path>", "read client secret from a .env file (Google only)").action(socialLoginAction);
 }
 
 // src/cli/commands/auth/index.ts
@@ -251562,19 +251591,19 @@ var baseOpen = async (options) => {
   }
   const subprocess = childProcess3.spawn(command2, cliArguments, childProcessOptions);
   if (options.wait) {
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       subprocess.once("error", reject);
       subprocess.once("close", (exitCode) => {
         if (!options.allowNonzeroExitCode && exitCode !== 0) {
           reject(new Error(`Exited with code ${exitCode}`));
           return;
         }
-        resolve2(subprocess);
+        resolve3(subprocess);
       });
     });
   }
   if (isFallbackAttempt) {
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       subprocess.once("error", reject);
       subprocess.once("spawn", () => {
         subprocess.once("close", (exitCode) => {
@@ -251584,17 +251613,17 @@ var baseOpen = async (options) => {
             return;
           }
           subprocess.unref();
-          resolve2(subprocess);
+          resolve3(subprocess);
         });
       });
     });
   }
   subprocess.unref();
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     subprocess.once("error", reject);
     subprocess.once("spawn", () => {
       subprocess.off("error", reject);
-      resolve2(subprocess);
+      resolve3(subprocess);
     });
   });
 };
@@ -252135,7 +252164,7 @@ function getFunctionsCommand() {
 }
 
 // src/cli/commands/project/create.ts
-import { basename as basename3, join as join18, resolve as resolve2 } from "node:path";
+import { basename as basename3, join as join18, resolve as resolve3 } from "node:path";
 var import_kebabCase = __toESM(require_kebabCase(), 1);
 var DEFAULT_TEMPLATE_ID = "backend-only";
 async function getTemplateById(templateId) {
@@ -252200,7 +252229,7 @@ async function createInteractive(options, ctx) {
   }, ctx);
 }
 async function createNonInteractive(options, ctx) {
-  ctx.log.info(`Creating a new project at ${resolve2(options.path)}`);
+  ctx.log.info(`Creating a new project at ${resolve3(options.path)}`);
   const template2 = await getTemplateById(options.template ?? DEFAULT_TEMPLATE_ID);
   return await executeCreate({
     template: template2,
@@ -252221,7 +252250,7 @@ async function executeCreate({
   isInteractive
 }, { log, runTask: runTask2 }) {
   const name2 = rawName.trim();
-  const resolvedPath = resolve2(projectPath);
+  const resolvedPath = resolve3(projectPath);
   const { projectId } = await runTask2("Setting up your project...", async () => {
     return await createProjectFiles({
       name: name2,
@@ -252737,7 +252766,7 @@ function getSecretsListCommand() {
 }
 
 // src/cli/commands/secrets/set.ts
-import { resolve as resolve3 } from "node:path";
+import { resolve as resolve4 } from "node:path";
 function parseEntries(entries) {
   const secrets = {};
   for (const entry of entries) {
@@ -252768,7 +252797,7 @@ async function setSecretsAction({ log, runTask: runTask2 }, entries, options) {
   validateInput(entries, options);
   let secrets;
   if (options.envFile) {
-    secrets = await parseEnvFile(resolve3(options.envFile));
+    secrets = await parseEnvFile(resolve4(options.envFile));
     if (Object.keys(secrets).length === 0) {
       throw new InvalidInputError("The env file contains no valid KEY=VALUE entries.");
     }
@@ -252797,7 +252826,7 @@ function getSecretsCommand() {
 }
 
 // src/cli/commands/site/deploy.ts
-import { resolve as resolve4 } from "node:path";
+import { resolve as resolve5 } from "node:path";
 async function deployAction2({ isNonInteractive, runTask: runTask2 }, options) {
   if (isNonInteractive && !options.yes) {
     throw new InvalidInputError("--yes is required in non-interactive mode");
@@ -252812,7 +252841,7 @@ async function deployAction2({ isNonInteractive, runTask: runTask2 }, options) {
       ]
     });
   }
-  const outputDir = resolve4(project2.root, project2.site.outputDirectory);
+  const outputDir = resolve5(project2.root, project2.site.outputDirectory);
   if (!options.yes) {
     const shouldDeploy = await Re({
       message: `Deploy site from ${project2.site.outputDirectory}?`
@@ -253013,14 +253042,14 @@ var getLocalHosts = () => {
   }
   return results;
 };
-var checkAvailablePort = (options8) => new Promise((resolve6, reject) => {
+var checkAvailablePort = (options8) => new Promise((resolve7, reject) => {
   const server = net.createServer();
   server.unref();
   server.on("error", reject);
   server.listen(options8, () => {
     const { port } = server.address();
     server.close(() => {
-      resolve6(port);
+      resolve7(port);
     });
   });
 });
@@ -253273,7 +253302,7 @@ class FunctionManager {
     });
   }
   waitForReady(name2, runningFunc) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       runningFunc.process.on("exit", (code2) => {
         if (!runningFunc.ready) {
           clearTimeout(timeout3);
@@ -253296,7 +253325,7 @@ class FunctionManager {
           runningFunc.ready = true;
           clearTimeout(timeout3);
           runningFunc.process.stdout?.off("data", onData);
-          resolve6(runningFunc.port);
+          resolve7(runningFunc.port);
         }
       };
       runningFunc.process.stdout?.on("data", onData);
@@ -253317,9 +253346,13 @@ function createFunctionRouter(manager, logger2) {
     on: {
       proxyReq: (proxyReq, req) => {
         const xAppId = req.headers["x-app-id"];
+        const authorization = req.headers.authorization;
         if (xAppId) {
           proxyReq.setHeader("Base44-App-Id", xAppId);
         }
+        if (authorization) {
+          proxyReq.setHeader("Base44-Service-Authorization", authorization);
+        }
         proxyReq.setHeader("Base44-Api-Url", `${req.protocol}://${req.headers.host}`);
       },
       error: (err, _req, res) => {
@@ -254932,7 +254965,7 @@ class NodeFsHandler {
         this._addToNodeFs(path19, initialAdd, wh2, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve8, reject) => {
       if (!stream)
         return reject();
       stream.once(STR_END, () => {
@@ -254941,7 +254974,7 @@ class NodeFsHandler {
           return;
         }
         const wasThrottled = throttler ? throttler.clear() : false;
-        resolve7(undefined);
+        resolve8(undefined);
         previous.getChildren().filter((item) => {
           return item !== directory && !current.has(item);
         }).forEach((item) => {
@@ -255846,7 +255879,7 @@ async function createDevServer(options8) {
     devLogger.warn(`"${req.originalUrl}" is not supported in local development, passing call to production`);
     remoteProxy(req, res, next);
   });
-  const server = await new Promise((resolve8, reject) => {
+  const server = await new Promise((resolve9, reject) => {
     const s5 = app.listen(port, "127.0.0.1", (err) => {
       if (err) {
         if ("code" in err && err.code === "EADDRINUSE") {
@@ -255855,7 +255888,7 @@ async function createDevServer(options8) {
           reject(err);
         }
       } else {
-        resolve8(s5);
+        resolve9(s5);
       }
     });
   });
@@ -255970,6 +256003,17 @@ async function runScript(options8) {
   }
 }
 // src/cli/commands/exec.ts
+function readStdin2() {
+  return new Promise((resolve9, reject) => {
+    let data = "";
+    process.stdin.setEncoding("utf-8");
+    process.stdin.on("data", (chunk) => {
+      data += chunk;
+    });
+    process.stdin.on("end", () => resolve9(data));
+    process.stdin.on("error", reject);
+  });
+}
 async function execAction(isNonInteractive) {
   const noInputError = new InvalidInputError("No input provided. Pipe a script to stdin.", {
     hints: [
@@ -255982,7 +256026,7 @@ async function execAction(isNonInteractive) {
   if (!isNonInteractive) {
     throw noInputError;
   }
-  const code2 = await readStdin();
+  const code2 = await readStdin2();
   if (!code2.trim()) {
     throw noInputError;
   }
@@ -256005,7 +256049,7 @@ Examples:
 }
 
 // src/cli/commands/project/eject.ts
-import { resolve as resolve8 } from "node:path";
+import { resolve as resolve9 } from "node:path";
 var import_kebabCase2 = __toESM(require_kebabCase(), 1);
 async function eject(ctx, options8) {
   const { log, runTask: runTask2, isNonInteractive } = ctx;
@@ -256061,7 +256105,7 @@ async function eject(ctx, options8) {
     Ne("Operation cancelled.");
     throw new CLIExitError(0);
   }
-  const resolvedPath = resolve8(selectedPath);
+  const resolvedPath = resolve9(selectedPath);
   await runTask2("Downloading your project's code...", async (updateMessage) => {
     await createProjectFilesForExistingProject({
       projectId,
@@ -258429,14 +258473,14 @@ async function addSourceContext(frames) {
   return frames;
 }
 function getContextLinesFromFile(path19, ranges, output) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const stream = createReadStream2(path19);
     const lineReaded = createInterface2({
       input: stream
     });
     function destroyStreamAndResolve() {
       stream.destroy();
-      resolve9();
+      resolve10();
     }
     let lineNumber = 0;
     let currentRangeIndex = 0;
@@ -259548,15 +259592,15 @@ class PostHogBackendClient extends PostHogCoreStateless {
       return true;
     if (this.featureFlagsPoller === undefined)
       return false;
-    return new Promise((resolve9) => {
+    return new Promise((resolve10) => {
       const timeout3 = setTimeout(() => {
         cleanup();
-        resolve9(false);
+        resolve10(false);
       }, timeoutMs);
       const cleanup = this._events.on("localEvaluationFlagsLoaded", (count2) => {
         clearTimeout(timeout3);
         cleanup();
-        resolve9(count2 > 0);
+        resolve10(count2 > 0);
       });
     });
   }
@@ -260379,4 +260423,4 @@ export {
   CLIExitError
 };
 
-//# debugId=58EE333998DEDA5664756E2164756E21
+//# debugId=1C22BA7E3D00606564756E2164756E21