@edge-base/cli 0.1.1

package/dist/lib/prompts.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Interactive prompt helpers using Node.js readline.
+ * All prompts return default values silently when stdin is not a TTY (CI/CD).
+ */
+import { type CliChoice } from './agent-contract.js';
+interface PromptMetadata {
+    field?: string;
+    hint?: string;
+    message?: string;
+    choices?: CliChoice[];
+}
+/**
+ * Prompt the user for a text value.
+ * Returns defaultValue (or empty string) in non-TTY environments.
+ */
+export declare function promptText(message: string, defaultValue?: string, metadata?: PromptMetadata): Promise<string>;
+/**
+ * Prompt the user to select from a list of choices.
+ * Returns the first choice in non-TTY environments.
+ */
+export declare function promptSelect(message: string, choices: string[], metadata?: PromptMetadata): Promise<string>;
+/**
+ * Prompt the user for a yes/no confirmation.
+ * Returns defaultValue in non-TTY environments.
+ */
+export declare function promptConfirm(message: string, defaultValue?: boolean): Promise<boolean>;
+export {};
+//# sourceMappingURL=prompts.d.ts.map

package/dist/lib/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/lib/prompts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGtE,UAAU,cAAc;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,cAAc,GACxB,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EAAE,EACjB,QAAQ,CAAC,EAAE,cAAc,GACxB,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,UAAO,GAClB,OAAO,CAAC,OAAO,CAAC,CAiBlB"}

package/dist/lib/prompts.js

@@ -0,0 +1,85 @@
+/**
+ * Interactive prompt helpers using Node.js readline.
+ * All prompts return default values silently when stdin is not a TTY (CI/CD).
+ */
+import { createInterface } from 'node:readline';
+import { raiseNeedsInput } from './agent-contract.js';
+import { isNonInteractive } from './cli-context.js';
+/**
+ * Prompt the user for a text value.
+ * Returns defaultValue (or empty string) in non-TTY environments.
+ */
+export async function promptText(message, defaultValue, metadata) {
+    if (!process.stdin.isTTY || isNonInteractive()) {
+        if (defaultValue !== undefined)
+            return defaultValue;
+        raiseNeedsInput({
+            code: 'input_required',
+            field: metadata?.field,
+            message: metadata?.message ?? `${message.replace(/:?\s*$/, '')} is required.`,
+            hint: metadata?.hint,
+        });
+    }
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const suffix = defaultValue ? ` (${defaultValue})` : '';
+    return new Promise((resolve) => {
+        rl.question(`${message}${suffix}: `, (answer) => {
+            rl.close();
+            resolve(answer.trim() || defaultValue || '');
+        });
+    });
+}
+/**
+ * Prompt the user to select from a list of choices.
+ * Returns the first choice in non-TTY environments.
+ */
+export async function promptSelect(message, choices, metadata) {
+    if (choices.length === 0)
+        return '';
+    if ((!process.stdin.isTTY || isNonInteractive()) && choices.length === 1)
+        return choices[0];
+    if (!process.stdin.isTTY || isNonInteractive()) {
+        raiseNeedsInput({
+            code: 'selection_required',
+            field: metadata?.field,
+            message: metadata?.message ?? `${message.replace(/:?\s*$/, '')}.`,
+            hint: metadata?.hint,
+            choices: metadata?.choices ?? choices.map((choice) => ({
+                label: choice,
+                value: choice,
+            })),
+        });
+    }
+    console.log(message);
+    choices.forEach((c, i) => console.log(`  ${i + 1}. ${c}`));
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => {
+        rl.question('  Select (number): ', (answer) => {
+            rl.close();
+            const idx = parseInt(answer, 10) - 1;
+            resolve(choices[idx] ?? choices[0]);
+        });
+    });
+}
+/**
+ * Prompt the user for a yes/no confirmation.
+ * Returns defaultValue in non-TTY environments.
+ */
+export async function promptConfirm(message, defaultValue = true) {
+    if (!process.stdin.isTTY || isNonInteractive())
+        return defaultValue;
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const suffix = defaultValue ? ' (Y/n)' : ' (y/N)';
+    return new Promise((resolve) => {
+        rl.question(`${message}${suffix}: `, (answer) => {
+            rl.close();
+            const normalized = answer.trim().toLowerCase();
+            if (!normalized) {
+                resolve(defaultValue);
+                return;
+            }
+            resolve(normalized === 'y' || normalized === 'yes');
+        });
+    });
+}
+//# sourceMappingURL=prompts.js.map

package/dist/lib/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/lib/prompts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAkB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AASpD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,YAAqB,EACrB,QAAyB;IAEzB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,EAAE,EAAE,CAAC;QAC/C,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,YAAY,CAAC;QACpD,eAAe,CAAC;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,QAAQ,EAAE,KAAK;YACtB,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe;YAC7E,IAAI,EAAE,QAAQ,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,OAAiB,EACjB,QAAyB;IAEzB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,EAAE,EAAE,CAAC;QAC/C,eAAe,CAAC;YACd,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,QAAQ,EAAE,KAAK;YACtB,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG;YACjE,IAAI,EAAE,QAAQ,EAAE,IAAI;YACpB,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACrD,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE;YAC5C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YACrC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,YAAY,GAAG,IAAI;IAEnB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,EAAE;QAAE,OAAO,YAAY,CAAC;IAEpE,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAElD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,YAAY,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/rate-limit-bindings.d.ts

@@ -0,0 +1,11 @@
+import type { EdgeBaseConfig } from '@edge-base/shared';
+export type BuiltInRateLimitGroup = 'global' | 'db' | 'storage' | 'functions' | 'auth' | 'authSignin' | 'authSignup' | 'events';
+export interface RateLimitBindingSpec {
+    group: BuiltInRateLimitGroup;
+    binding: string;
+    namespaceId: string;
+    limit: number;
+    period: 10 | 60;
+}
+export declare function resolveRateLimitBindings(config?: EdgeBaseConfig | Record<string, unknown>): RateLimitBindingSpec[];
+//# sourceMappingURL=rate-limit-bindings.d.ts.map

package/dist/lib/rate-limit-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-bindings.d.ts","sourceRoot":"","sources":["../../src/lib/rate-limit-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAC7B,QAAQ,GACR,IAAI,GACJ,SAAS,GACT,WAAW,GACX,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,QAAQ,CAAC;AAEb,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,qBAAqB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC;CACjB;AA4CD,wBAAgB,wBAAwB,CACtC,MAAM,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChD,oBAAoB,EAAE,CAmBxB"}

package/dist/lib/rate-limit-bindings.js

@@ -0,0 +1,52 @@
+const DEFAULT_LIMIT = 10_000_000;
+const DEFAULT_PERIOD = 60;
+const BUILT_IN_BINDINGS = [
+    { group: 'global', binding: 'GLOBAL_RATE_LIMITER', namespaceId: '1001' },
+    { group: 'db', binding: 'DB_RATE_LIMITER', namespaceId: '1002' },
+    { group: 'storage', binding: 'STORAGE_RATE_LIMITER', namespaceId: '1003' },
+    { group: 'functions', binding: 'FUNCTIONS_RATE_LIMITER', namespaceId: '1004' },
+    { group: 'auth', binding: 'AUTH_RATE_LIMITER', namespaceId: '1005' },
+    { group: 'authSignin', binding: 'AUTH_SIGNIN_RATE_LIMITER', namespaceId: '1006' },
+    { group: 'authSignup', binding: 'AUTH_SIGNUP_RATE_LIMITER', namespaceId: '1007' },
+    { group: 'events', binding: 'EVENTS_RATE_LIMITER', namespaceId: '1008' },
+];
+function getRateLimitingConfig(config) {
+    if (!config || typeof config !== 'object' || !('rateLimiting' in config))
+        return undefined;
+    const rateLimiting = config.rateLimiting;
+    if (!rateLimiting || typeof rateLimiting !== 'object')
+        return undefined;
+    return rateLimiting;
+}
+function normalizeLimit(limit) {
+    if (typeof limit !== 'number' || !Number.isFinite(limit))
+        return DEFAULT_LIMIT;
+    return Math.max(0, Math.floor(limit));
+}
+function normalizePeriod(period) {
+    return period === 10 ? 10 : DEFAULT_PERIOD;
+}
+function normalizeNamespaceId(namespaceId, fallback) {
+    if (typeof namespaceId !== 'string')
+        return fallback;
+    const trimmed = namespaceId.trim();
+    return trimmed || fallback;
+}
+export function resolveRateLimitBindings(config) {
+    const rateLimiting = getRateLimitingConfig(config);
+    return BUILT_IN_BINDINGS.flatMap((definition) => {
+        const groupConfig = rateLimiting?.[definition.group];
+        const bindingConfig = groupConfig?.binding;
+        if (bindingConfig?.enabled === false) {
+            return [];
+        }
+        return [{
+                group: definition.group,
+                binding: definition.binding,
+                namespaceId: normalizeNamespaceId(bindingConfig?.namespaceId, definition.namespaceId),
+                limit: normalizeLimit(bindingConfig?.limit),
+                period: normalizePeriod(bindingConfig?.period),
+            }];
+    });
+}
+//# sourceMappingURL=rate-limit-bindings.js.map

package/dist/lib/rate-limit-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-bindings.js","sourceRoot":"","sources":["../../src/lib/rate-limit-bindings.ts"],"names":[],"mappings":"AA0BA,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,cAAc,GAAY,EAAE,CAAC;AAEnC,MAAM,iBAAiB,GAA+B;IACpD,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,EAAE;IACxE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE;IAChE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,EAAE;IAC1E,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,EAAE;IAC9E,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,EAAE;IACpE,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,EAAE;IACjF,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,EAAE;IACjF,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,EAAE;CACzE,CAAC;AAEF,SAAS,qBAAqB,CAAC,MAAiD;IAC9E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3F,MAAM,YAAY,GAAI,MAAqC,CAAC,YAAY,CAAC;IACzE,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,YAAkC,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAoB,EAAE,QAAgB;IAClE,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,OAAO,IAAI,QAAQ,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiD;IAEjD,MAAM,YAAY,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAEnD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAC9C,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,WAAW,EAAE,OAAO,CAAC;QAE3C,IAAI,aAAa,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC;gBACN,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,WAAW,EAAE,oBAAoB,CAAC,aAAa,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC;gBACrF,KAAK,EAAE,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC;gBAC3C,MAAM,EAAE,eAAe,CAAC,aAAa,EAAE,MAAM,CAAC;aAC/C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/realtime-provision.d.ts

@@ -0,0 +1,22 @@
+export declare const REALTIME_SECRET_NAMES: readonly ["CF_REALTIME_APP_ID", "CF_REALTIME_APP_SECRET", "CF_REALTIME_TURN_KEY_ID", "CF_REALTIME_TURN_API_TOKEN"];
+export interface RealtimeProvisionOptions {
+    projectDir: string;
+    appName?: string;
+    turnName?: string;
+    forceCreateApp?: boolean;
+    forceCreateTurn?: boolean;
+    syncWorkersSecrets?: boolean;
+}
+export interface RealtimeProvisionResult {
+    appId: string;
+    appSecret: string;
+    appName: string;
+    appSource: 'local' | 'created';
+    turnKeyId: string;
+    turnApiToken: string;
+    turnName: string;
+    turnSource: 'local' | 'created';
+    warnings?: string[];
+}
+export declare function provisionRealtime(options: RealtimeProvisionOptions): Promise<RealtimeProvisionResult>;
+//# sourceMappingURL=realtime-provision.d.ts.map

package/dist/lib/realtime-provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-provision.d.ts","sourceRoot":"","sources":["../../src/lib/realtime-provision.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,qBAAqB,oHAKxB,CAAC;AAgCX,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AA+JD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAmIlC"}

package/dist/lib/realtime-provision.js

@@ -0,0 +1,246 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import chalk from 'chalk';
+import { ensureCloudflareAuth, resolveApiToken } from './cf-auth.js';
+import { isQuiet } from './cli-context.js';
+import { writeLocalSecrets } from './local-secrets.js';
+import { deriveProjectSlug } from './runtime-scaffold.js';
+import { npxCommand } from './npx.js';
+const CLOUDFLARE_API_BASE = 'https://api.cloudflare.com/client/v4';
+export const REALTIME_SECRET_NAMES = [
+    'CF_REALTIME_APP_ID',
+    'CF_REALTIME_APP_SECRET',
+    'CF_REALTIME_TURN_KEY_ID',
+    'CF_REALTIME_TURN_API_TOKEN',
+];
+function parseEnvFile(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    const values = {};
+    const raw = readFileSync(filePath, 'utf-8');
+    for (const line of raw.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const idx = trimmed.indexOf('=');
+        if (idx <= 0)
+            continue;
+        values[trimmed.slice(0, idx).trim()] = trimmed.slice(idx + 1).trim();
+    }
+    return values;
+}
+function readLocalSecretSnapshot(projectDir) {
+    const fromJson = (() => {
+        const filePath = join(projectDir, '.edgebase', 'secrets.json');
+        if (!existsSync(filePath))
+            return {};
+        try {
+            const parsed = JSON.parse(readFileSync(filePath, 'utf-8'));
+            return parsed;
+        }
+        catch {
+            return {};
+        }
+    })();
+    const merged = {
+        ...parseEnvFile(join(projectDir, '.env.development')),
+        ...parseEnvFile(join(projectDir, '.dev.vars')),
+        ...fromJson,
+    };
+    const snapshot = {};
+    for (const key of REALTIME_SECRET_NAMES) {
+        if (typeof merged[key] === 'string' && merged[key]) {
+            snapshot[key] = merged[key];
+        }
+    }
+    return snapshot;
+}
+function readWranglerName(projectDir) {
+    const wranglerPath = join(projectDir, 'wrangler.toml');
+    if (!existsSync(wranglerPath))
+        return null;
+    const content = readFileSync(wranglerPath, 'utf-8');
+    const match = content.match(/^name\s*=\s*"([^"]+)"/m);
+    return match?.[1] ?? null;
+}
+function deriveManagedBaseName(projectDir) {
+    return readWranglerName(projectDir) ?? deriveProjectSlug(projectDir) ?? basename(projectDir);
+}
+function getDefaultRealtimeNames(projectDir) {
+    const baseName = deriveManagedBaseName(projectDir);
+    return {
+        appName: `${baseName}-realtime`,
+        turnName: `${baseName}-turn`,
+    };
+}
+function toProvisionAuthError(error, tokenSource) {
+    if (!(error instanceof Error)) {
+        return new Error('Cloudflare Realtime provisioning failed for an unknown reason.');
+    }
+    if (tokenSource === 'wrangler_oauth' && /authentication error/i.test(error.message)) {
+        return new Error('Cloudflare Calls/Realtime provisioning rejected the current wrangler OAuth token. ' +
+            'Create a Cloudflare API token with Calls Write or Connectivity Admin permissions, export it as CLOUDFLARE_API_TOKEN, and rerun this command.');
+    }
+    return error;
+}
+async function cloudflareApi(accountId, apiToken, path, init) {
+    const response = await fetch(`${CLOUDFLARE_API_BASE}/accounts/${accountId}${path}`, {
+        ...init,
+        headers: {
+            Authorization: `Bearer ${apiToken}`,
+            'Content-Type': 'application/json',
+            ...(init?.headers ?? {}),
+        },
+    });
+    const data = (await response.json().catch(() => ({})));
+    if (!response.ok || !data.success || data.result === undefined) {
+        const errorMessage = data.errors?.map((error) => error.message).filter(Boolean).join(', ');
+        throw new Error(errorMessage || `Cloudflare API request failed (${response.status})`);
+    }
+    return data.result;
+}
+async function listRealtimeApps(accountId, apiToken) {
+    return cloudflareApi(accountId, apiToken, '/calls/apps');
+}
+async function createRealtimeApp(accountId, apiToken, name) {
+    return cloudflareApi(accountId, apiToken, '/calls/apps', {
+        method: 'POST',
+        body: JSON.stringify({ name }),
+    });
+}
+async function listTurnKeys(accountId, apiToken) {
+    return cloudflareApi(accountId, apiToken, '/calls/turn_keys');
+}
+async function createTurnKey(accountId, apiToken, name) {
+    return cloudflareApi(accountId, apiToken, '/calls/turn_keys', {
+        method: 'POST',
+        body: JSON.stringify({ name }),
+    });
+}
+function hasCompleteLocalSecrets(snapshot) {
+    return REALTIME_SECRET_NAMES.every((key) => typeof snapshot[key] === 'string' && snapshot[key]);
+}
+function putWorkersSecret(projectDir, secretName, value) {
+    execFileSync(npxCommand(), ['wrangler', 'secret', 'put', secretName], {
+        cwd: projectDir,
+        input: value,
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
+}
+function syncWorkersSecrets(projectDir, secrets) {
+    for (const [secretName, value] of Object.entries(secrets)) {
+        putWorkersSecret(projectDir, secretName, value);
+    }
+}
+export async function provisionRealtime(options) {
+    const existingSecrets = readLocalSecretSnapshot(options.projectDir);
+    const names = getDefaultRealtimeNames(options.projectDir);
+    const appName = options.appName?.trim() || names.appName;
+    const turnName = options.turnName?.trim() || names.turnName;
+    if (hasCompleteLocalSecrets(existingSecrets) &&
+        !options.forceCreateApp &&
+        !options.forceCreateTurn) {
+        return {
+            appId: existingSecrets.CF_REALTIME_APP_ID,
+            appSecret: existingSecrets.CF_REALTIME_APP_SECRET,
+            appName,
+            appSource: 'local',
+            turnKeyId: existingSecrets.CF_REALTIME_TURN_KEY_ID,
+            turnApiToken: existingSecrets.CF_REALTIME_TURN_API_TOKEN,
+            turnName,
+            turnSource: 'local',
+        };
+    }
+    const auth = await ensureCloudflareAuth(options.projectDir, process.stdout.isTTY);
+    const { token: apiToken, source: apiTokenSource } = resolveApiToken();
+    try {
+        let appId = existingSecrets.CF_REALTIME_APP_ID;
+        let appSecret = existingSecrets.CF_REALTIME_APP_SECRET;
+        let appSource = appId && appSecret ? 'local' : 'created';
+        if (options.forceCreateApp || !appId || !appSecret) {
+            if (!options.forceCreateApp) {
+                const existingApp = (await listRealtimeApps(auth.accountId, apiToken))
+                    .find((candidate) => candidate.name === appName);
+                if (existingApp && (!appId || !appSecret)) {
+                    throw new Error(`Realtime app '${appName}' already exists in Cloudflare, but its secret is not stored locally. ` +
+                        'Cloudflare does not return existing app secrets again. Use --force-create-app to mint a new app or restore CF_REALTIME_APP_SECRET locally.');
+                }
+            }
+            const createdApp = await createRealtimeApp(auth.accountId, apiToken, appName);
+            if (!createdApp.uid || !createdApp.secret) {
+                throw new Error('Cloudflare returned an incomplete Realtime app response.');
+            }
+            appId = createdApp.uid;
+            appSecret = createdApp.secret;
+            appSource = 'created';
+        }
+        let turnKeyId = existingSecrets.CF_REALTIME_TURN_KEY_ID;
+        let turnApiToken = existingSecrets.CF_REALTIME_TURN_API_TOKEN;
+        let turnSource = turnKeyId && turnApiToken ? 'local' : 'created';
+        if (options.forceCreateTurn || !turnKeyId || !turnApiToken) {
+            if (!options.forceCreateTurn) {
+                const existingTurnKey = (await listTurnKeys(auth.accountId, apiToken))
+                    .find((candidate) => candidate.name === turnName);
+                if (existingTurnKey && (!turnKeyId || !turnApiToken)) {
+                    throw new Error(`TURN key '${turnName}' already exists in Cloudflare, but its API token is not stored locally. ` +
+                        'Cloudflare does not return existing TURN key tokens again. Use --force-create-turn to mint a new TURN key or restore CF_REALTIME_TURN_API_TOKEN locally.');
+                }
+            }
+            const createdTurnKey = await createTurnKey(auth.accountId, apiToken, turnName);
+            if (!createdTurnKey.uid || !createdTurnKey.key) {
+                throw new Error('Cloudflare returned an incomplete TURN key response.');
+            }
+            turnKeyId = createdTurnKey.uid;
+            turnApiToken = createdTurnKey.key;
+            turnSource = 'created';
+        }
+        const secrets = {
+            CF_REALTIME_APP_ID: appId,
+            CF_REALTIME_APP_SECRET: appSecret,
+            CF_REALTIME_TURN_KEY_ID: turnKeyId,
+            CF_REALTIME_TURN_API_TOKEN: turnApiToken,
+        };
+        writeLocalSecrets(options.projectDir, secrets);
+        if (options.syncWorkersSecrets !== false) {
+            try {
+                syncWorkersSecrets(options.projectDir, secrets);
+            }
+            catch (err) {
+                const warning = `Realtime secrets were written locally, but syncing Workers secrets failed: ${err instanceof Error ? err.message : String(err)}`;
+                if (!isQuiet()) {
+                    console.log(chalk.yellow('⚠'), warning);
+                    console.log(chalk.dim('  You can retry with `npx edgebase realtime provision` or set the secrets manually.'));
+                }
+                return {
+                    appId: secrets.CF_REALTIME_APP_ID,
+                    appSecret: secrets.CF_REALTIME_APP_SECRET,
+                    appName,
+                    appSource,
+                    turnKeyId: secrets.CF_REALTIME_TURN_KEY_ID,
+                    turnApiToken: secrets.CF_REALTIME_TURN_API_TOKEN,
+                    turnName,
+                    turnSource,
+                    warnings: [
+                        warning,
+                        'You can retry with `npx edgebase realtime provision` or set the secrets manually.',
+                    ],
+                };
+            }
+        }
+        return {
+            appId: secrets.CF_REALTIME_APP_ID,
+            appSecret: secrets.CF_REALTIME_APP_SECRET,
+            appName,
+            appSource,
+            turnKeyId: secrets.CF_REALTIME_TURN_KEY_ID,
+            turnApiToken: secrets.CF_REALTIME_TURN_API_TOKEN,
+            turnName,
+            turnSource,
+        };
+    }
+    catch (error) {
+        throw toProvisionAuthError(error, apiTokenSource);
+    }
+}
+//# sourceMappingURL=realtime-provision.js.map

package/dist/lib/realtime-provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-provision.js","sourceRoot":"","sources":["../../src/lib/realtime-provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,mBAAmB,GAAG,sCAAsC,CAAC;AAEnE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,oBAAoB;IACpB,wBAAwB;IACxB,yBAAyB;IACzB,4BAA4B;CACpB,CAAC;AAqDX,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,IAAI,CAAC;YAAE,SAAS;QACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA2B,CAAC;YACrF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,MAAM,GAAG;QACb,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACrD,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC9C,GAAG,QAAQ;KACc,CAAC;IAE5B,MAAM,QAAQ,GAAgD,EAAE,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,OAAO,gBAAgB,CAAC,UAAU,CAAC,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO;QACL,OAAO,EAAE,GAAG,QAAQ,WAAW;QAC/B,QAAQ,EAAE,GAAG,QAAQ,OAAO;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,WAAqC;IACjF,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,WAAW,KAAK,gBAAgB,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,OAAO,IAAI,KAAK,CACd,oFAAoF;YACpF,8IAA8I,CAC/I,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,QAAgB,EAChB,IAAY,EACZ,IAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,mBAAmB,aAAa,SAAS,GAAG,IAAI,EAAE,EAAE;QAClF,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,QAAQ,EAAE;YACnC,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;SACzB;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA0B,CAAC;IAChF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,kCAAkC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,SAAiB,EACjB,QAAgB;IAEhB,OAAO,aAAa,CAAiC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,QAAgB,EAChB,IAAY;IAEZ,OAAO,aAAa,CAAwB,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE;QAC9E,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,QAAgB;IAEhB,OAAO,aAAa,CAA6B,SAAS,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,QAAgB,EAChB,IAAY;IAEZ,OAAO,aAAa,CAAoB,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE;QAC/E,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAqD;IACpF,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,UAAkB,EAAE,KAAa;IAC7E,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE;QACpE,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,UAAkB,EAClB,OAA2C;IAE3C,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAwC,EAAE,CAAC;QACjG,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC;IAEjC,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC;IAE5D,IACE,uBAAuB,CAAC,eAAe,CAAC;QACxC,CAAC,OAAO,CAAC,cAAc;QACvB,CAAC,OAAO,CAAC,eAAe,EACxB,CAAC;QACD,OAAO;YACL,KAAK,EAAE,eAAe,CAAC,kBAAkB;YACzC,SAAS,EAAE,eAAe,CAAC,sBAAsB;YACjD,OAAO;YACP,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,eAAe,CAAC,uBAAuB;YAClD,YAAY,EAAE,eAAe,CAAC,0BAA0B;YACxD,QAAQ;YACR,UAAU,EAAE,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,eAAe,EAAE,CAAC;IAEtE,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,eAAe,CAAC,kBAAkB,CAAC;QAC/C,IAAI,SAAS,GAAG,eAAe,CAAC,sBAAsB,CAAC;QACvD,IAAI,SAAS,GAAwB,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9E,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;qBACnE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;gBACnD,IAAI,WAAW,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,KAAK,CACb,iBAAiB,OAAO,wEAAwE;wBAChG,4IAA4I,CAC7I,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9E,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YACD,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC;YACvB,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;YAC9B,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;QAED,IAAI,SAAS,GAAG,eAAe,CAAC,uBAAuB,CAAC;QACxD,IAAI,YAAY,GAAG,eAAe,CAAC,0BAA0B,CAAC;QAC9D,IAAI,UAAU,GAAwB,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtF,IAAI,OAAO,CAAC,eAAe,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3D,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM,eAAe,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;qBACnE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;gBACpD,IAAI,eAAe,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CACb,aAAa,QAAQ,2EAA2E;wBAChG,0JAA0J,CAC3J,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/E,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC;YAC/B,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC;YAClC,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;QAED,MAAM,OAAO,GAAG;YACd,kBAAkB,EAAE,KAAM;YAC1B,sBAAsB,EAAE,SAAU;YAClC,uBAAuB,EAAE,SAAU;YACnC,0BAA0B,EAAE,YAAa;SACG,CAAC;QAE/C,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GACX,8EACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CAAC;gBACL,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;oBACxC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,qFAAqF,CAAC,CACjG,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,KAAK,EAAE,OAAO,CAAC,kBAAkB;oBACjC,SAAS,EAAE,OAAO,CAAC,sBAAsB;oBACzC,OAAO;oBACP,SAAS;oBACT,SAAS,EAAE,OAAO,CAAC,uBAAuB;oBAC1C,YAAY,EAAE,OAAO,CAAC,0BAA0B;oBAChD,QAAQ;oBACR,UAAU;oBACV,QAAQ,EAAE;wBACR,OAAO;wBACP,mFAAmF;qBACpF;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,kBAAkB;YACjC,SAAS,EAAE,OAAO,CAAC,sBAAsB;YACzC,OAAO;YACP,SAAS;YACT,SAAS,EAAE,OAAO,CAAC,uBAAuB;YAC1C,YAAY,EAAE,OAAO,CAAC,0BAA0B;YAChD,QAAQ;YACR,UAAU;SACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/lib/resolve-options.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Shared utilities for resolving common CLI options:
+ * - Service Key (--service-key / EDGEBASE_SERVICE_KEY / .edgebase/secrets.json)
+ * - Server URL (--url / EDGEBASE_URL)
+ *
+ * Eliminates duplication across backup, export, admin, seed commands.
+ */
+/**
+ * Resolve Service Key from multiple sources (flag → env → secrets file).
+ * Exits with helpful error if not found.
+ *
+ * Resolution order:
+ * 1. --service-key flag
+ * 2. EDGEBASE_SERVICE_KEY environment variable
+ * 3. .edgebase/secrets.json file (auto-saved after deploy)
+ */
+export declare function resolveServiceKey(options: {
+    serviceKey?: string;
+}): string;
+/**
+ * Resolve Service Key from multiple sources without requiring one to exist.
+ *
+ * Resolution order:
+ * 1. --service-key flag
+ * 2. EDGEBASE_SERVICE_KEY environment variable
+ * 3. .edgebase/secrets.json file (auto-saved after deploy)
+ */
+export declare function resolveOptionalServiceKey(options: {
+    serviceKey?: string;
+}): string | undefined;
+/**
+ * Resolve server URL from flag or environment variable.
+ * Exits with helpful error if not found (when required=true).
+ *
+ * Resolution order:
+ * 1. --url flag
+ * 2. EDGEBASE_URL environment variable
+ */
+export declare function resolveServerUrl(options: {
+    url?: string;
+}, required?: boolean): string;
+//# sourceMappingURL=resolve-options.d.ts.map

package/dist/lib/resolve-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-options.d.ts","sourceRoot":"","sources":["../../src/lib/resolve-options.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgB1E;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAqB9F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,QAAQ,UAAO,GAAG,MAAM,CAqBnF"}

package/dist/lib/resolve-options.js

@@ -0,0 +1,98 @@
+/**
+ * Shared utilities for resolving common CLI options:
+ * - Service Key (--service-key / EDGEBASE_SERVICE_KEY / .edgebase/secrets.json)
+ * - Server URL (--url / EDGEBASE_URL)
+ *
+ * Eliminates duplication across backup, export, admin, seed commands.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { raiseNeedsInput } from './agent-contract.js';
+/**
+ * Resolve Service Key from multiple sources (flag → env → secrets file).
+ * Exits with helpful error if not found.
+ *
+ * Resolution order:
+ * 1. --service-key flag
+ * 2. EDGEBASE_SERVICE_KEY environment variable
+ * 3. .edgebase/secrets.json file (auto-saved after deploy)
+ */
+export function resolveServiceKey(options) {
+    const resolved = resolveOptionalServiceKey(options);
+    if (resolved)
+        return resolved;
+    raiseNeedsInput({
+        code: 'service_key_required',
+        field: 'serviceKey',
+        message: 'Service Key required.',
+        hint: 'Provide --service-key <key>, set EDGEBASE_SERVICE_KEY, or deploy once so .edgebase/secrets.json is populated.',
+        choices: [{
+                label: 'Provide service key flag',
+                value: 'service-key',
+                args: ['--service-key', '<key>'],
+                hint: 'Use an admin Service Key with backup/export/admin commands.',
+            }],
+    });
+}
+/**
+ * Resolve Service Key from multiple sources without requiring one to exist.
+ *
+ * Resolution order:
+ * 1. --service-key flag
+ * 2. EDGEBASE_SERVICE_KEY environment variable
+ * 3. .edgebase/secrets.json file (auto-saved after deploy)
+ */
+export function resolveOptionalServiceKey(options) {
+    // 1. CLI flag
+    if (options.serviceKey)
+        return options.serviceKey;
+    // 2. Environment variable
+    const envKey = process.env.EDGEBASE_SERVICE_KEY;
+    if (envKey)
+        return envKey;
+    // 3. .edgebase/secrets.json (auto-saved after first deploy)
+    const projectDir = process.cwd();
+    const secretsPath = join(projectDir, '.edgebase', 'secrets.json');
+    if (existsSync(secretsPath)) {
+        try {
+            const secrets = JSON.parse(readFileSync(secretsPath, 'utf-8'));
+            if (secrets.SERVICE_KEY)
+                return secrets.SERVICE_KEY;
+        }
+        catch {
+            /* ignore corrupted file */
+        }
+    }
+    return undefined;
+}
+/**
+ * Resolve server URL from flag or environment variable.
+ * Exits with helpful error if not found (when required=true).
+ *
+ * Resolution order:
+ * 1. --url flag
+ * 2. EDGEBASE_URL environment variable
+ */
+export function resolveServerUrl(options, required = true) {
+    // 1. CLI flag
+    if (options.url)
+        return options.url.replace(/\/$/, '');
+    // 2. Environment variable
+    const envUrl = process.env.EDGEBASE_URL;
+    if (envUrl)
+        return envUrl.replace(/\/$/, '');
+    if (!required)
+        return '';
+    raiseNeedsInput({
+        code: 'worker_url_required',
+        field: 'url',
+        message: 'Worker URL required.',
+        hint: 'Provide --url <worker-url> or set EDGEBASE_URL. Typical values are http://localhost:8787 for local dev or https://<name>.workers.dev for production.',
+        choices: [{
+                label: 'Provide worker URL flag',
+                value: 'url',
+                args: ['--url', '<worker-url>'],
+            }],
+    });
+}
+//# sourceMappingURL=resolve-options.js.map

package/dist/lib/resolve-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-options.js","sourceRoot":"","sources":["../../src/lib/resolve-options.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgC;IAChE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,eAAe,CAAC;QACd,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,uBAAuB;QAChC,IAAI,EAAE,+GAA+G;QACrH,OAAO,EAAE,CAAC;gBACR,KAAK,EAAE,0BAA0B;gBACjC,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;gBAChC,IAAI,EAAE,6DAA6D;aACpE,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgC;IACxE,cAAc;IACd,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC;IAElD,0BAA0B;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAChD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,4DAA4D;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAClE,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,OAAO,CAAC,WAAW,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAyB,EAAE,QAAQ,GAAG,IAAI;IACzE,cAAc;IACd,IAAI,OAAO,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEvD,0BAA0B;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACxC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,eAAe,CAAC;QACd,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,sJAAsJ;QAC5J,OAAO,EAAE,CAAC;gBACR,KAAK,EAAE,yBAAyB;gBAChC,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;aAChC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}