@edge-base/cli 0.1.1

package/README.md

@@ -0,0 +1,182 @@
+<h1 align="center">@edge-base/cli</h1>
+
+<p align="center">
+  <b>Command-line workflow for EdgeBase</b><br>
+  Scaffold projects, run local development, deploy to Cloudflare, and operate your EdgeBase stack from one CLI
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@edge-base/cli"><img src="https://img.shields.io/npm/v/%40edge-base%2Fcli?color=brightgreen" alt="npm"></a>&nbsp;
+  <a href="https://edgebase.fun/docs/cli"><img src="https://img.shields.io/badge/docs-cli-blue" alt="Docs"></a>&nbsp;
+  <a href="https://github.com/edge-base/edgebase/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="MIT License"></a>
+</p>
+
+<p align="center">
+  <a href="https://edgebase.fun/docs/getting-started/quickstart"><b>Quickstart</b></a> ·
+  <a href="https://edgebase.fun/docs/cli"><b>CLI Overview</b></a> ·
+  <a href="https://edgebase.fun/docs/cli/workflows"><b>CLI Workflows</b></a> ·
+  <a href="https://edgebase.fun/docs/cli/reference"><b>CLI Reference</b></a>
+</p>
+
+---
+
+`@edge-base/cli` is the command surface for the full EdgeBase project lifecycle.
+
+Use it to:
+
+- bootstrap a new project
+- run local development with hot reload
+- deploy and destroy project-scoped Cloudflare resources
+- generate types, migrations, backups, and exports
+- manage secrets, keys, plugins, and admin operations
+
+> Beta: the CLI is already usable, but some commands and flags may still evolve before general availability.
+
+## Documentation Map
+
+- [Quickstart](https://edgebase.fun/docs/getting-started/quickstart)
+  Start a new EdgeBase project with `npm create edge-base@latest`
+- [CLI Overview](https://edgebase.fun/docs/cli)
+  Understand what the CLI owns across local development, deploy, data workflows, and tooling
+- [CLI Workflows](https://edgebase.fun/docs/cli/workflows)
+  Task-focused guides for common flows
+- [CLI Reference](https://edgebase.fun/docs/cli/reference)
+  Full command inventory, aliases, and environment variables
+
+## For AI Coding Assistants
+
+This package ships with an `llms.txt` file for AI-assisted CLI usage.
+
+You can find it:
+
+- after install: `node_modules/@edge-base/cli/llms.txt`
+- in the repository: [llms.txt](https://github.com/edge-base/edgebase/blob/main/packages/cli/llms.txt)
+
+Use it when you want an agent to:
+
+- pick the right command for a workflow
+- avoid guessing package-manager entrypoints
+- prefer `--json --non-interactive` in automation
+- stay inside the supported EdgeBase project structure
+
+## Installation
+
+For new projects, the best starting point is:
+
+```bash
+npm create edge-base@latest my-app
+```
+
+That scaffold installs the local CLI into the generated project for you.
+
+If you want the CLI globally:
+
+```bash
+npm install -g @edge-base/cli
+```
+
+After that, you can run:
+
+```bash
+edgebase --help
+```
+
+## Quick Start
+
+### Start a new project
+
+```bash
+npm create edge-base@latest my-app
+cd my-app
+npm run dev
+```
+
+Inside an EdgeBase project, the local CLI is available through:
+
+```bash
+npx edgebase dev
+```
+
+### Deploy to Cloudflare
+
+```bash
+cp .env.release.example .env.release
+npx edgebase deploy
+```
+
+### Generate types
+
+```bash
+npx edgebase typegen
+```
+
+## What The CLI Covers
+
+| Area | Commands | What it covers |
+| --- | --- | --- |
+| Project lifecycle | `init`, `dev`, `deploy`, `destroy`, `logs`, `upgrade` | Bootstrap, local runtime, deploy, cleanup, logging, and package upgrades |
+| Data workflow | `migration`, `migrate`, `seed`, `backup`, `export`, `typegen`, `neon` | Schema changes, provider migrations, fixture data, backups, exports, generated types, Neon setup |
+| Security and admin | `secret`, `keys`, `admin` | Secrets, Service Key/JWT rotation, and admin recovery flows |
+| Plugins and tooling | `plugins`, `create-plugin`, `docker`, `webhook-test`, `completion`, `describe`, `telemetry`, `realtime` | Plugin scaffolding, plugin maintenance, Docker support, completions, machine-readable command descriptions, telemetry, and Cloudflare Realtime setup |
+
+## Recommended Usage Pattern
+
+Most teams do **not** need a global install.
+
+A good default flow is:
+
+1. scaffold with `npm create edge-base@latest`
+2. keep the CLI local to the generated project
+3. run commands with `npm run ...` or `npx edgebase ...`
+
+If you are adding EdgeBase to an existing frontend repo, a clean default is to scaffold into a dedicated subdirectory:
+
+```bash
+cd your-frontend-project
+npm create edge-base@latest edgebase
+```
+
+That keeps the frontend app and the EdgeBase project close together without mixing them into the same root by accident.
+
+## Automation And CI
+
+When another tool, agent, or CI job is driving the CLI, prefer:
+
+```bash
+edgebase --json --non-interactive <command>
+```
+
+This makes the CLI return structured responses instead of hanging on prompts.
+
+Useful companion commands:
+
+```bash
+edgebase --json describe
+edgebase --json describe --command "deploy"
+edgebase --json describe --command "backup restore"
+```
+
+Read more: [CLI Reference](https://edgebase.fun/docs/cli/reference)
+
+## Common Environment Variables
+
+| Variable | Used by |
+| --- | --- |
+| `EDGEBASE_URL` | Remote commands such as `migrate`, `backup`, `export`, `admin`, `plugins cleanup`, and `destroy` |
+| `EDGEBASE_SERVICE_KEY` | Remote admin commands and Service Key authenticated flows |
+| `CLOUDFLARE_API_TOKEN` | Non-interactive deploy/destroy flows |
+| `CLOUDFLARE_ACCOUNT_ID` | Account-scoped Cloudflare operations |
+| `NEON_API_KEY` | `edgebase neon setup` in non-interactive environments |
+
+## Related Packages
+
+- [`create-edge-base`](https://www.npmjs.com/package/create-edge-base)
+  First-run project bootstrap package
+- [`@edge-base/web`](https://www.npmjs.com/package/@edge-base/web)
+  Browser SDK for app code
+- [`@edge-base/admin`](https://www.npmjs.com/package/@edge-base/admin)
+  Trusted server-side SDK for admin tasks
+
+## License
+
+MIT

package/dist/commands/admin.d.ts

@@ -0,0 +1,10 @@
+/**
+ * CLI: `npx edgebase admin` — Admin management commands
+ *
+ * Subcommands:
+ *   reset-password — Reset admin password via Service Key or Cloudflare D1 direct access
+ */
+import { Command } from 'commander';
+export declare function toSqliteStringLiteral(value: string): string;
+export declare const adminCommand: Command;
+//# sourceMappingURL=admin.d.ts.map

package/dist/commands/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/commands/admin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsHpC,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAuID,eAAO,MAAM,YAAY,SACkB,CAAC"}

package/dist/commands/admin.js

@@ -0,0 +1,307 @@
+/**
+ * CLI: `npx edgebase admin` — Admin management commands
+ *
+ * Subcommands:
+ *   reset-password — Reset admin password via Service Key or Cloudflare D1 direct access
+ */
+import { Command } from 'commander';
+import { execFileSync } from 'node:child_process';
+import * as readline from 'node:readline';
+import { webcrypto } from 'node:crypto';
+import chalk from 'chalk';
+import { fetchWithTimeout } from '../lib/fetch-with-timeout.js';
+import { resolveOptionalServiceKey, resolveServerUrl } from '../lib/resolve-options.js';
+import { isCliStructuredError, raiseCliError, raiseNeedsInput, } from '../lib/agent-contract.js';
+import { ensureCloudflareAuth } from '../lib/cf-auth.js';
+import { isJson, isNonInteractive, isQuiet } from '../lib/cli-context.js';
+import { readProjectWranglerContext, resolveManagedD1DatabaseName, } from '../lib/project-runtime.js';
+import { wranglerCommand, wranglerArgs } from '../lib/wrangler.js';
+const HASH_ITERATIONS = 100_000;
+const SALT_LENGTH = 16;
+const KEY_LENGTH = 32;
+function toBase64(buffer) {
+    return Buffer.from(buffer).toString('base64');
+}
+async function hashPassword(password) {
+    const salt = webcrypto.getRandomValues(new Uint8Array(SALT_LENGTH));
+    const keyMaterial = await webcrypto.subtle.importKey('raw', new TextEncoder().encode(password), 'PBKDF2', false, ['deriveBits']);
+    const hash = await webcrypto.subtle.deriveBits({
+        name: 'PBKDF2',
+        salt,
+        iterations: HASH_ITERATIONS,
+        hash: 'SHA-256',
+    }, keyMaterial, KEY_LENGTH * 8);
+    return `pbkdf2:sha256:${HASH_ITERATIONS}:${toBase64(salt.buffer)}:${toBase64(hash)}`;
+}
+function prompt(question, hidden = false, options) {
+    if (!process.stdin.isTTY || isNonInteractive()) {
+        raiseNeedsInput({
+            code: 'admin_input_required',
+            field: options?.field,
+            message: options?.message ?? `${question.replace(/:?\s*$/, '')} is required.`,
+            hint: options?.hint,
+        });
+    }
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        if (hidden && process.stdout.isTTY) {
+            process.stdout.write(question);
+            const stdin = process.stdin;
+            const oldRawMode = stdin.isRaw;
+            stdin.setRawMode(true);
+            let input = '';
+            stdin.resume();
+            stdin.on('data', function handler(ch) {
+                const c = ch.toString('utf8');
+                if (c === '\n' || c === '\r' || c === '\u0004') {
+                    stdin.setRawMode(oldRawMode ?? false);
+                    stdin.removeListener('data', handler);
+                    stdin.pause();
+                    rl.close();
+                    process.stdout.write('\n');
+                    resolve(input);
+                }
+                else if (c === '\u007F' || c === '\b') {
+                    if (input.length > 0)
+                        input = input.slice(0, -1);
+                }
+                else {
+                    input += c;
+                }
+            });
+        }
+        else {
+            rl.question(question, (answer) => {
+                rl.close();
+                resolve(answer);
+            });
+        }
+    });
+}
+function extractCommandFailure(error) {
+    if (!(error instanceof Error))
+        return 'Command failed for an unknown reason.';
+    const execError = error;
+    if (typeof execError.stderr === 'string' && execError.stderr.trim())
+        return execError.stderr.trim();
+    if (Buffer.isBuffer(execError.stderr) && execError.stderr.length > 0) {
+        return execError.stderr.toString('utf-8').trim();
+    }
+    if (typeof execError.stdout === 'string' && execError.stdout.trim())
+        return execError.stdout.trim();
+    if (Buffer.isBuffer(execError.stdout) && execError.stdout.length > 0) {
+        return execError.stdout.toString('utf-8').trim();
+    }
+    return error.message;
+}
+export function toSqliteStringLiteral(value) {
+    return `'${value.replace(/'/g, "''")}'`;
+}
+async function resetViaD1Direct(projectDir, email, newPassword, local) {
+    if (!local) {
+        const isTTY = Boolean(process.stdout.isTTY);
+        await ensureCloudflareAuth(projectDir, isTTY);
+    }
+    const dbName = resolveManagedD1DatabaseName(projectDir, 'AUTH_DB');
+    if (!dbName) {
+        raiseCliError({
+            code: 'auth_db_not_found',
+            message: 'Could not resolve AUTH_DB for this EdgeBase project.',
+            hint: 'Check your edgebase.config.ts and wrangler.toml, then retry.',
+        });
+    }
+    const configDir = readProjectWranglerContext(projectDir).dir;
+    const localFlag = local ? ['--local'] : [];
+    if (!isQuiet()) {
+        console.log('🔄 Hashing password...');
+    }
+    const passwordHash = await hashPassword(newPassword);
+    const now = new Date().toISOString();
+    if (!isQuiet()) {
+        console.log('🔍 Checking admin account...');
+    }
+    const normalizedEmail = email.trim().toLowerCase();
+    try {
+        const checkOutput = execFileSync(wranglerCommand(), wranglerArgs([
+            'wrangler', 'd1', 'execute', dbName,
+            ...localFlag,
+            '--command', `SELECT id, email FROM _admins WHERE LOWER(TRIM(email)) = ${toSqliteStringLiteral(normalizedEmail)}`,
+            '--json',
+        ]), {
+            cwd: configDir,
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 30000,
+        });
+        const results = JSON.parse(checkOutput);
+        const rows = results?.[0]?.results ?? [];
+        if (rows.length === 0) {
+            raiseCliError({
+                code: 'admin_not_found',
+                message: `No admin found with email: ${email}`,
+                field: 'email',
+                hint: 'Check the admin email address and retry.',
+            });
+        }
+        const adminId = rows[0].id;
+        if (!isQuiet()) {
+            console.log('🔄 Resetting password...');
+        }
+        execFileSync(wranglerCommand(), wranglerArgs([
+            'wrangler', 'd1', 'execute', dbName,
+            ...localFlag,
+            '--command', `UPDATE _admins SET passwordHash = ${toSqliteStringLiteral(passwordHash)}, updatedAt = ${toSqliteStringLiteral(now)} WHERE id = ${toSqliteStringLiteral(adminId)}`,
+        ]), {
+            cwd: configDir,
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 30000,
+        });
+        execFileSync(wranglerCommand(), wranglerArgs([
+            'wrangler', 'd1', 'execute', dbName,
+            ...localFlag,
+            '--command', `DELETE FROM _admin_sessions WHERE adminId = ${toSqliteStringLiteral(adminId)}`,
+        ]), {
+            cwd: configDir,
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 30000,
+        });
+        return {
+            mode: 'd1_direct',
+            email,
+            local,
+            dbName,
+            sessionsRevoked: true,
+        };
+    }
+    catch (error) {
+        if (isCliStructuredError(error))
+            throw error;
+        const message = extractCommandFailure(error);
+        if (message.includes('no such table')) {
+            raiseCliError({
+                code: 'auth_db_not_initialized',
+                message: 'Auth database not initialized. Deploy your project first.',
+            });
+        }
+        raiseCliError({
+            code: 'admin_password_reset_failed',
+            message: `D1 operation failed: ${message}`,
+            hint: 'Check your Wrangler login, D1 permissions, and project configuration, then retry.',
+        });
+    }
+}
+export const adminCommand = new Command('admin')
+    .description('Admin management commands');
+adminCommand
+    .command('reset-password')
+    .description('Reset admin password')
+    .option('--url <url>', 'Worker URL (default: EDGEBASE_URL or http://localhost:8787)')
+    .option('--service-key <key>', 'Service Key (or set EDGEBASE_SERVICE_KEY env)')
+    .option('--email <email>', 'Admin email (skip interactive prompt)')
+    .option('--password <password>', 'New password (skip interactive prompt)')
+    .option('--local', 'Use local D1 database (for local dev)')
+    .action(async (options) => {
+    const email = options.email ?? await prompt('Admin email: ', false, {
+        field: 'email',
+        hint: 'Rerun with --email <email>.',
+        message: 'An admin email is required before password reset can continue.',
+    });
+    const newPassword = options.password ?? await prompt('New password (min 8 chars): ', true, {
+        field: 'password',
+        hint: 'Rerun with --password <password>.',
+        message: 'A new password is required before password reset can continue.',
+    });
+    if (!email) {
+        raiseNeedsInput({
+            code: 'admin_email_required',
+            field: 'email',
+            message: 'An admin email is required before password reset can continue.',
+            hint: 'Rerun with --email <email>.',
+        });
+    }
+    if (!newPassword) {
+        raiseNeedsInput({
+            code: 'admin_password_required',
+            field: 'password',
+            message: 'A new password is required before password reset can continue.',
+            hint: 'Rerun with --password <password>.',
+        });
+    }
+    if (newPassword.length < 8) {
+        raiseCliError({
+            code: 'admin_password_too_short',
+            field: 'password',
+            message: 'Password must be at least 8 characters.',
+            hint: 'Choose a password with at least 8 characters and rerun the command.',
+        });
+    }
+    const serviceKey = resolveOptionalServiceKey(options);
+    if (serviceKey) {
+        const url = resolveServerUrl({ url: options.url }, false) || 'http://localhost:8787';
+        if (!isQuiet()) {
+            console.log('\n🔄 Resetting admin password...');
+        }
+        try {
+            const resp = await fetchWithTimeout(`${url}/admin/api/internal/reset-password`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-EdgeBase-Service-Key': serviceKey,
+                },
+                body: JSON.stringify({ email, newPassword }),
+            });
+            const data = await resp.json();
+            if (!resp.ok || !data.ok) {
+                raiseCliError({
+                    code: 'admin_password_reset_failed',
+                    message: `Failed: ${data.message || 'Unknown error'} (${data.code || resp.status})`,
+                    hint: 'Check that the Worker is reachable and the service key has admin privileges.',
+                });
+            }
+            const result = {
+                mode: 'service_key',
+                email,
+                url,
+                sessionsRevoked: true,
+            };
+            if (isJson()) {
+                console.log(JSON.stringify({
+                    status: 'success',
+                    ...result,
+                }));
+                return;
+            }
+            console.log(chalk.green('✅'), 'Password reset successfully. All admin sessions have been revoked.');
+            return;
+        }
+        catch (error) {
+            if (isCliStructuredError(error))
+                throw error;
+            raiseCliError({
+                code: 'admin_connection_failed',
+                message: `Connection failed: ${error.message}`,
+                hint: 'Make sure the Worker is running and the URL is correct.',
+            });
+        }
+    }
+    const local = Boolean(options.local);
+    if (!isQuiet()) {
+        console.log(chalk.dim(`\n  No Service Key found. Using ${local ? 'local' : 'Cloudflare'} D1 direct access...\n`));
+    }
+    const projectDir = process.cwd();
+    const result = await resetViaD1Direct(projectDir, email, newPassword, local);
+    if (isJson()) {
+        console.log(JSON.stringify({
+            status: 'success',
+            ...result,
+        }));
+        return;
+    }
+    console.log(chalk.green('✅'), 'Password reset successfully. All admin sessions have been revoked.');
+});
+//# sourceMappingURL=admin.js.map

package/dist/commands/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/commands/admin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEnE,MAAM,eAAe,GAAG,OAAO,CAAC;AAChC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,SAAS,QAAQ,CAAC,MAAmB;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAEpE,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAClD,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,QAAQ,EACR,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,UAAU,CAC5C;QACE,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,UAAU,EAAE,eAAe;QAC3B,IAAI,EAAE,SAAS;KAChB,EACD,WAAW,EACX,UAAU,GAAG,CAAC,CACf,CAAC;IAEF,OAAO,iBAAiB,eAAe,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,MAAM,CACb,QAAgB,EAChB,MAAM,GAAG,KAAK,EACd,OAA6D;IAE7D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,EAAE,EAAE,CAAC;QAC/C,eAAe,CAAC;YACd,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,OAAO,EAAE,KAAK;YACrB,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe;YAC7E,IAAI,EAAE,OAAO,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;YAC/B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,EAAU;gBAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC/C,KAAK,CAAC,UAAU,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;oBACtC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACtC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,EAAE,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;qBAAM,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;wBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,uCAAuC,CAAC;IAC9E,MAAM,SAAS,GAAG,KAAuE,CAAC;IAC1F,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpG,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpG,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC1C,CAAC;AAWD,KAAK,UAAU,gBAAgB,CAC7B,UAAkB,EAClB,KAAa,EACb,WAAmB,EACnB,KAAc;IAEd,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,4BAA4B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,aAAa,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,sDAAsD;YAC/D,IAAI,EAAE,8DAA8D;SACrE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3C,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,YAAY,CAC9B,eAAe,EAAE,EACjB,YAAY,CAAC;YACX,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;YACnC,GAAG,SAAS;YACZ,WAAW,EAAE,4DAA4D,qBAAqB,CAAC,eAAe,CAAC,EAAE;YACjH,QAAQ;SACT,CAAC,EACF;YACE,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,KAAK;SACf,CACF,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QAEzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,aAAa,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,8BAA8B,KAAK,EAAE;gBAC9C,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,0CAA0C;aACjD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3B,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;QACD,YAAY,CACV,eAAe,EAAE,EACjB,YAAY,CAAC;YACX,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;YACnC,GAAG,SAAS;YACZ,WAAW,EAAE,qCAAqC,qBAAqB,CAAC,YAAY,CAAC,iBAAiB,qBAAqB,CAAC,GAAG,CAAC,eAAe,qBAAqB,CAAC,OAAO,CAAC,EAAE;SAChL,CAAC,EACF;YACE,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,KAAK;SACf,CACF,CAAC;QAEF,YAAY,CACV,eAAe,EAAE,EACjB,YAAY,CAAC;YACX,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;YACnC,GAAG,SAAS;YACZ,WAAW,EAAE,+CAA+C,qBAAqB,CAAC,OAAO,CAAC,EAAE;SAC7F,CAAC,EACF;YACE,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,KAAK;SACf,CACF,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,KAAK;YACL,KAAK;YACL,MAAM;YACN,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAE7C,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,aAAa,CAAC;gBACZ,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;QACL,CAAC;QAED,aAAa,CAAC;YACZ,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,wBAAwB,OAAO,EAAE;YAC1C,IAAI,EAAE,mFAAmF;SAC1F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAE5C,YAAY;KACT,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,sBAAsB,CAAC;KACnC,MAAM,CAAC,aAAa,EAAE,6DAA6D,CAAC;KACpF,MAAM,CAAC,qBAAqB,EAAE,+CAA+C,CAAC;KAC9E,MAAM,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;KAClE,MAAM,CAAC,uBAAuB,EAAE,wCAAwC,CAAC;KACzE,MAAM,CAAC,SAAS,EAAE,uCAAuC,CAAC;KAC1D,MAAM,CAAC,KAAK,EAAE,OAAkG,EAAE,EAAE;IACnH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE;QAClE,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,gEAAgE;KAC1E,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,MAAM,CAAC,8BAA8B,EAAE,IAAI,EAAE;QACzF,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,gEAAgE;KAC1E,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,eAAe,CAAC;YACd,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,gEAAgE;YACzE,IAAI,EAAE,6BAA6B;SACpC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,eAAe,CAAC;YACd,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,gEAAgE;YACzE,IAAI,EAAE,mCAAmC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,aAAa,CAAC;YACZ,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,yCAAyC;YAClD,IAAI,EAAE,qEAAqE;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEtD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,IAAI,uBAAuB,CAAC;QACrF,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,GAAG,oCAAoC,EAAE;gBAC9E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,wBAAwB,EAAE,UAAU;iBACrC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAuD,CAAC;YAEpF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACzB,aAAa,CAAC;oBACZ,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,WAAW,IAAI,CAAC,OAAO,IAAI,eAAe,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG;oBACnF,IAAI,EAAE,8EAA8E;iBACrF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAwB;gBAClC,IAAI,EAAE,aAAa;gBACnB,KAAK;gBACL,GAAG;gBACH,eAAe,EAAE,IAAI;aACtB,CAAC;YAEF,IAAI,MAAM,EAAE,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,MAAM,EAAE,SAAS;oBACjB,GAAG,MAAM;iBACV,CAAC,CAAC,CAAC;gBACJ,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,oEAAoE,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,oBAAoB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC7C,aAAa,CAAC;gBACZ,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,sBAAuB,KAAe,CAAC,OAAO,EAAE;gBACzD,IAAI,EAAE,yDAAyD;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mCAAmC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,wBAAwB,CAAC,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAE7E,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,MAAM,EAAE,SAAS;YACjB,GAAG,MAAM;SACV,CAAC,CAAC,CAAC;QACJ,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,oEAAoE,CAAC,CAAC;AACtG,CAAC,CAAC,CAAC"}

package/dist/commands/backup.d.ts

@@ -0,0 +1,148 @@
+import { Command } from 'commander';
+/**
+ * `npx edgebase backup` — Portable backup & restore via Worker Admin API.
+ *
+ * - `backup create`  — Download all DO + D1 + optional R2/secrets as JSON (or tar.gz)
+ * - `backup restore` — Restore from a backup file
+ *
+ * Backup JSON format v1.1:
+ *   { version, timestamp, source, config?, secrets?, control, auth, databases, storage? }
+ *
+ * Authentication: Service Key via --service-key flag or EDGEBASE_SERVICE_KEY env var.
+ * Target: Worker URL via --url flag or EDGEBASE_URL env var.
+ */
+interface BackupAPIOptions {
+    url: string;
+    serviceKey: string;
+}
+declare function apiCall<T>(opts: BackupAPIOptions, path: string, method?: 'GET' | 'POST', body?: unknown): Promise<T>;
+declare function apiBinary(opts: BackupAPIOptions, path: string): Promise<{
+    buffer: ArrayBuffer;
+    contentType: string;
+}>;
+declare function apiUpload(opts: BackupAPIOptions, path: string, body: Buffer | Uint8Array, contentType: string): Promise<void>;
+interface DODump {
+    doName: string;
+    doType: 'database' | 'auth';
+    schema?: Record<string, string>;
+    tables: Record<string, unknown[]>;
+    timestamp: string;
+}
+interface DataNamespaceDump {
+    type: 'data';
+    namespace: string;
+    tables: Record<string, unknown[]>;
+    tableOrder?: string[];
+    timestamp: string;
+}
+interface StorageObject {
+    key: string;
+    size: number;
+    etag: string;
+    contentType: string;
+}
+/** v1.1 backup format — */
+interface BackupFileV1_1 {
+    version: '1.1';
+    timestamp: string;
+    source: string;
+    config?: Record<string, unknown>;
+    secrets?: Record<string, string>;
+    control: {
+        d1: Record<string, unknown[]>;
+    };
+    auth: {
+        d1: Record<string, unknown[]>;
+        shards: Record<string, DODump>;
+    };
+    databases: Record<string, DODump>;
+    dataNamespaces?: Record<string, DataNamespaceDump>;
+    storage?: {
+        objects: StorageObject[];
+    };
+}
+declare function resolveOptions(options: {
+    url?: string;
+    serviceKey?: string;
+}): BackupAPIOptions;
+/**
+ * Run async tasks with a concurrency limit.
+ * Returns results in the same order as the input tasks.
+ */
+declare function throttle<T>(tasks: Array<() => Promise<T>>, limit: number): Promise<T[]>;
+/**
+ * Run async tasks with a concurrency limit and collect both fulfilled/rejected results.
+ * Results stay aligned with the input task order.
+ */
+declare function throttleSettled<T>(tasks: Array<() => Promise<T>>, limit: number): Promise<Array<PromiseSettledResult<T>>>;
+declare function errorMessage(err: unknown): string;
+declare function outputJson(payload: Record<string, unknown>): void;
+declare function logHuman(...args: unknown[]): void;
+declare function logHumanError(...args: unknown[]): void;
+declare function writeHuman(text: string): void;
+declare function collectSettledFailures<T>(results: Array<PromiseSettledResult<T>>, labels: string[]): string[];
+declare function summarizeFailures(stage: string, failures: string[], max?: number): string;
+declare function parseBackupFile(raw: unknown): BackupFileV1_1;
+interface DownloadSessionPaths {
+    sessionDir: string;
+    storageDir: string;
+    manifestPath: string;
+}
+declare function resolveDownloadSessionPaths(edgebaseTmpDir: string, timestamp: string, resumeStorageDir?: string | null): DownloadSessionPaths;
+/** Parse .dev.vars file → key/value map */
+declare function parseDevVars(filePath: string): Record<string, string>;
+/** Read secrets from environment */
+declare function readSecrets(projectDir: string): Record<string, string> | null;
+/** Write secrets to environment */
+declare function writeSecrets(projectDir: string, secrets: Record<string, string>): void;
+/** Recursively collect all files in a directory */
+declare function collectFiles(dir: string, base?: string): Array<{
+    path: string;
+    rel: string;
+}>;
+export interface CloudflareAPIOptions {
+    accountId: string;
+    apiToken: string;
+}
+/**
+ * Enumerate all DO instances via Cloudflare REST API.
+ * Returns hex IDs of DOs that have stored data.
+ * Uses cursor pagination for large namespaces.
+ */
+export declare function enumerateDOsViaCFAPI(cf: CloudflareAPIOptions, namespaceId: string): Promise<string[]>;
+/**
+ * Get all DO namespace IDs for this worker via Cloudflare REST API.
+ * Returns array of { id, name, class } for each namespace.
+ */
+export declare function getCFNamespaces(cf: CloudflareAPIOptions): Promise<Array<{
+    id: string;
+    name: string;
+    class: string;
+}>>;
+export declare const backupCommand: Command;
+/** Exported for testing */
+export declare const _internals: {
+    apiCall: typeof apiCall;
+    apiBinary: typeof apiBinary;
+    apiUpload: typeof apiUpload;
+    parseDevVars: typeof parseDevVars;
+    readSecrets: typeof readSecrets;
+    writeSecrets: typeof writeSecrets;
+    collectFiles: typeof collectFiles;
+    resolveOptions: typeof resolveOptions;
+    throttle: typeof throttle;
+    throttleSettled: typeof throttleSettled;
+    errorMessage: typeof errorMessage;
+    outputJson: typeof outputJson;
+    logHuman: typeof logHuman;
+    logHumanError: typeof logHumanError;
+    writeHuman: typeof writeHuman;
+    collectSettledFailures: typeof collectSettledFailures;
+    summarizeFailures: typeof summarizeFailures;
+    parseBackupFile: typeof parseBackupFile;
+    resolveDownloadSessionPaths: typeof resolveDownloadSessionPaths;
+    enumerateDOsViaCFAPI: typeof enumerateDOsViaCFAPI;
+    getCFNamespaces: typeof getCFNamespaces;
+};
+export {};
+//# sourceMappingURL=backup.d.ts.map