@edgestore/cli 1.0.0-rc.6 → 1.0.0-rc.7

package/agent-assets/skills.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
-  "revision": "abf23dea5885c69eb90d1e6448eb7a2a91eb90f5d8524332b61c7eff3c720d6a",
+  "revision": "a41182e1d6c8254cac64febaaf62a9480ffddfc1b3600362c3845aed573cdbbe",
   "files": {
-    "edgestore-setup/SKILL.md": "---\nname: edgestore-setup\ndescription: Use when adding, extending, or troubleshooting EdgeStore file uploads, upload UI, or bucket access policies in a TypeScript/React application. Not for unrelated storage migrations or account administration.\nlicense: MIT\n---\n\n# EdgeStore setup\n\nImplement uploads through the application's UI and server route. Verify the upload\nand retrieval there; if runtime access is unavailable, report what remains untested.\n\n## Establish the application and API version\n\nUse `edgestore --cwd <app> agent context --json` when the CLI is available. Otherwise\ninspect the selected workspace's manifests, installed EdgeStore package metadata,\nexisting routes/provider, and backend env-file convention. In a monorepo identify\nthe frontend and backend separately. Use the app's package versions, not the CLI's.\n\nRead the relevant installed `@edgestore/server`, `@edgestore/react`, or\n`@edgestore/sdk` `agent-docs/README.md` and follow its local references. These\nbelong to the installed package version; the skill and CLI can be newer. If the\nreference is absent, use installed types/source and version-matched documentation,\nand mention the fallback. Read the references again after installing packages.\n\nFor an existing 0.x integration, resolve maintenance versus migration with the\nuser before changing APIs. Preserve installed versions unless an upgrade is\nauthorized. For new integrations, install EdgeStore v1 packages from the `rc`\ntag (for example, `@edgestore/server@rc` and `@edgestore/react@rc`); use\n`@edgestore/sdk@rc` or `@edgestore/cli@rc` when needed. For missing packages in\nan existing integration, choose a compatible, explicit version. Use other\nprereleases only when requested or required by the application.\n\n## Choose the integration\n\nReuse the app's architecture, existing buckets, and configured storage provider.\nRead the matching installed server reference: `next.md` (App or Pages Router),\n`tanstack-start.md`, `remix.md` (Remix or React Router framework mode), `astro.md`,\n`hono.md`, `express.md`, or `fastify.md`. Check the app's routing convention and\nframework version before adapting examples. A React Router client-side app still\nneeds a backend. Reuse the existing backend or ask which one to add. Preserve S3,\nAzure, and custom providers rather than provisioning hosted EdgeStore resources.\n\nInfer a bucket name from the application's feature (for example avatars or\nattachments); fall back to `publicFiles` when context is insufficient. Infer public\nversus protected access from the application and disclose the decision in the\ninitial implementation plan or after implementation. Ask when the access policy\nis ambiguous or the files may be sensitive. Configure the application's\nauthorization rules for protected files.\n\nBefore provisioning, know the selected app/backend, intended provider, account,\nproject, bucket identity, access policy, and env destination. Reuse an existing env\nfile when the backend already loads it; otherwise use the framework's convention.\nPreserve existing env values.\n\n## Use MCP and the CLI\n\nPrefer an available MCP for an action it supports; otherwise use the CLI if\navailable. Start with read-only discovery and request only the permissions needed.\nIf authentication requires the user, explain the sign-in step and continue local work.\n\nCreating resources requires authorization for that setup. A project already\ncreated through MCP should be linked locally, not created again through CLI.\nAfter an uncertain mutation result, inspect for the resource before retrying or\nswitching tools. Do not delete/empty buckets, revoke keys, enable billable overage, or\nchange unrelated resources as an implicit setup step.\n\nFor hosted provisioning or credential delivery, read\n[references/hosted-setup.md](references/hosted-setup.md).\n\n## Implement and verify\n\nConfigure the backend router/provider and the matching client endpoint using\ninstalled references. Keep server keys in a loaded, gitignored backend env file,\nnot frontend variables (`VITE_*`, `NEXT_PUBLIC_*`).\nIn split workspaces, export the real backend router type and import it with\n`import type` on the frontend. For cross-origin calls, configure CORS for the\nintended frontend origin. Wrap the upload UI with the React provider.\n\nFor a failing integration, read the installed server's `troubleshooting.md` and\nthe React package's `errors.md`. Diagnose the failing app request before changing\nremote resources or credentials.\n\nRun `edgestore --cwd <app> doctor --offline` when available, plus the app's own\ntypecheck/build/tests. Investigate doctor warnings and skipped checks. Start the\napp, upload a small test file through its UI and server route, and independently\nretrieve and check the bytes.\nFor protected access, verify unauthenticated retrieval is denied and authorized\nretrieval works.\n\nUse the account and project authorized for testing. Keep credentials and signed\nURLs out of agent output; retrieve protected files in a local process that returns\nonly the result. Clean up only this task's test resources. Summarize the integration\nchoices, checks performed, blockers, and any test resources left behind.\n",
+    "edgestore-setup/SKILL.md": "---\nname: edgestore-setup\ndescription: Use when adding, extending, or troubleshooting EdgeStore file uploads, upload UI, or bucket access policies in a TypeScript/React application. Not for unrelated storage migrations or account administration.\nlicense: MIT\n---\n\n# EdgeStore setup\n\nImplement uploads through the application's UI and server route. Verify the upload\nand retrieval there; if runtime access is unavailable, report what remains untested.\n\n## Establish the application and API version\n\nUse `edgestore --cwd <app> agent context --json` when the CLI is available. Otherwise\ninspect the selected workspace's manifests, installed EdgeStore package metadata,\nexisting routes/provider, and backend env-file convention. In a monorepo identify\nthe frontend and backend separately. Use the app's package versions, not the CLI's.\n\nRead the relevant installed `@edgestore/server`, `@edgestore/react`, or\n`@edgestore/sdk` `agent-docs/README.md` and follow its local references. These\nbelong to the installed package version; the skill and CLI can be newer. If the\nreference is absent, use installed types/source and version-matched documentation,\nand mention the fallback. Read the references again after installing packages.\n\nFor an existing 0.x integration, resolve maintenance versus migration with the\nuser before changing APIs. Preserve installed versions unless an upgrade is\nauthorized. For new integrations, install EdgeStore v1 packages from the `rc`\ntag (for example, `@edgestore/server@rc` and `@edgestore/react@rc`); use\n`@edgestore/sdk@rc` or `@edgestore/cli@rc` when needed. For missing packages in\nan existing integration, choose a compatible, explicit version. Use other\nprereleases only when requested or required by the application.\n\n## Choose the integration\n\nReuse the app's architecture, existing buckets, and configured storage provider.\nRead the matching installed server reference: `next.md` (App or Pages Router),\n`tanstack-start.md`, `remix.md` (Remix or React Router framework mode), `astro.md`,\n`hono.md`, `express.md`, or `fastify.md`. Check the app's routing convention and\nframework version before adapting examples. A React Router client-side app still\nneeds a backend. Reuse the existing backend or ask which one to add. Preserve S3,\nAzure, and custom providers rather than provisioning hosted EdgeStore resources.\n\nInfer a bucket name from the application's feature (for example avatars or\nattachments); fall back to `publicFiles` when context is insufficient. Infer public\nversus protected access from the application. Ask when the access policy is\nambiguous or the files may be sensitive. Configure the application's authorization\nrules for protected files.\n\nBefore changing configuration or provisioning, summarize the proposed setup for\napproval: app/backend, provider, account/project to create or reuse, bucket name,\nwho can access files, upload limits, and env destination. Proceed once approved;\nask again only if the plan materially changes. Reuse an existing env file when\nthe backend already loads it; otherwise use the framework's convention. Preserve\nexisting env values.\n\n## Use MCP and the CLI\n\nPrefer an available MCP for an action it supports; otherwise use the CLI.\nFor hosted setup, complete authentication, project linking, and credential\ndelivery as part of the task. When the CLI is needed but missing, install or\ninvoke `@edgestore/cli` with the application's package manager using the version\nguidance above. Start with read-only discovery.\nWhen sign-in is needed, initiate it with the available tooling, ask the user to\ncomplete the browser step, then resume setup and verification.\n\nCreating resources requires authorization for that setup. A project already\ncreated through MCP should be linked locally, not created again through CLI.\nAfter an uncertain mutation result, inspect for the resource before retrying or\nswitching tools. Do not delete/empty buckets, revoke keys, enable billable overage, or\nchange unrelated resources as an implicit setup step.\n\nFor hosted provisioning or credential delivery, read\n[references/hosted-setup.md](references/hosted-setup.md).\n\n## Implement and verify\n\nConfigure the backend router/provider and the matching client endpoint using\ninstalled references. Keep server keys in a loaded, gitignored backend env file,\nnot frontend variables (`VITE_*`, `NEXT_PUBLIC_*`).\nTreat credentials as required configuration. Do not add conditional providers,\nupload-enable flags, or disabled setup placeholders merely because authentication\nis pending. Finish setup instead; preserve optional-storage behavior only when\nthe application requires it.\nIn split workspaces, export the real backend router type and import it with\n`import type` on the frontend. For cross-origin calls, configure CORS for the\nintended frontend origin. Wrap the upload UI with the React provider.\n\nFor new attachment UI, reuse an existing upload component or build a reusable\ndropzone, preferably with `react-dropzone`, with accessible file selection,\nprogress, and error feedback. Use the React package's `dropzone.md`, `multi-file.md`,\nand `uploader-provider.md` references for examples. If absent, see the\n[Dropzone](https://edgestore.dev/docs/components/dropzone.md),\n[Multi-file uploader](https://edgestore.dev/docs/components/multi-file.md), and\n[Uploader provider](https://edgestore.dev/docs/components/uploader-provider.md) guides.\nAdapt the examples to the installed APIs and app styling; do not introduce a new\nstyling system just to use them.\n\nFor a failing integration, read the installed server's `troubleshooting.md` and\nthe React package's `errors.md`. Diagnose the failing app request before changing\nremote resources or credentials.\n\nRun `edgestore --cwd <app> doctor --offline` when available, plus the app's own\ntypecheck/build/tests. Investigate doctor warnings and skipped checks. Start the\napp, upload a small test file through its UI and server route, and independently\nretrieve and check the bytes.\nFor protected access, verify unauthenticated retrieval is denied and authorized\nretrieval works.\n\nUse the account and project authorized for testing. Keep credentials and signed\nURLs out of agent output; retrieve protected files in a local process that returns\nonly the result. Clean up only this task's test resources. Summarize the integration\nchoices, checks performed, blockers, and any test resources left behind.\n",
     "edgestore-setup/agents/openai.yaml": "interface:\n  display_name: \"EdgeStore Setup\"\n  short_description: \"Use when adding or troubleshooting EdgeStore file uploads.\"\n",
-    "edgestore-setup/references/hosted-setup.md": "# Hosted setup and credential handoff\n\nUse MCP first for supported account/project/bucket discovery and authorized\nchanges; otherwise use the CLI. Confirm the account and project in the tool's\nmetadata before making changes.\n\nTo configure MCP:\n\n```sh\nedgestore mcp setup --client codex --dry-run --json\nedgestore mcp setup --client codex --yes\n```\n\nUse `claude` or `cursor` for those clients. Setup configures\n`https://api.edgestore.dev/mcp`. Sign in through your client and review the\nrequested permissions.\n\nCheck `--help` for the installed CLI's available commands. Use `--json` and file\ndelivery to keep secrets out of tool output. Let the user complete any required login.\n\nAfter MCP creates/selects a project, link the backend to that same project and\nexisting env convention:\n\n```sh\nedgestore --cwd <backend> project link <project-base-path> --env-file <env-file> --json\n```\n\nReuse an existing valid backend key when possible. When a new key is authorized:\n\n```sh\nedgestore --cwd <backend> project key create <project-base-path> --name local --output <env-file> --json\n```\n\nThe destination must be gitignored. If values already exist, inspect the\nconfiguration before considering `--update`. Check key presence and project\nassociation without reading secret values into agent context. If file delivery is\nunavailable, ask the user to configure the key locally, not paste it into chat.\nOn partial failure, follow the returned recovery status before retrying.\n\n`init` provisions or links resources. Use `project link` when MCP has already\ncreated the project.\n"
+    "edgestore-setup/references/hosted-setup.md": "# Hosted setup and credential handoff\n\nUse MCP first for supported account/project/bucket discovery and authorized\nchanges; otherwise use the CLI. Confirm the account and project in the tool's\nmetadata before making changes.\n\nTo configure MCP:\n\n```sh\nedgestore mcp setup --client codex --dry-run --json\nedgestore mcp setup --client codex --yes\n```\n\nUse `claude` or `cursor` for those clients. Setup configures\n`https://api.edgestore.dev/mcp`. Sign in through your client and review the\nrequested permissions.\n\nCheck `--help` for the installed CLI's available commands. Use `--json` and file\ndelivery to keep secrets out of tool output. For CLI authentication, run\n`edgestore login`. If it opens a browser, use that flow rather than opening the\nsame authorization URL again.\n\nAfter MCP creates/selects a project, link the backend to that same project and\nexisting env convention:\n\n```sh\nedgestore --cwd <backend> project link <project-base-path> --env-file <env-file> --json\n```\n\nReuse an existing valid backend key when possible. When a new key is authorized:\n\n```sh\nedgestore --cwd <backend> project key create <project-base-path> --name local --output <env-file> --json\n```\n\nThe destination must be gitignored. If values already exist, inspect the\nconfiguration before considering `--update`. Check key presence and project\nassociation without reading secret values into agent context. If file delivery is\nunavailable, ask the user to configure the key locally, not paste it into chat.\nDo not substitute dashboard instructions for setup the available tools can perform.\nOn partial failure, follow the returned recovery status before retrying.\n\n`init` provisions or links resources. Use `project link` when MCP has already\ncreated the project.\n"
   }
 }

package/dist/bin.mjs

@@ -3023,8 +3023,8 @@ async function projectCreateCommand(runtime, flags, options) {
     });
     const keyLines = isInteractive(runtime, flags) && result.projectKey ? [
         '',
-        `EDGE_STORE_ACCESS_KEY=${result.projectKey.key.accessKey}`,
-        `EDGE_STORE_SECRET_KEY=${result.projectKey.secretKey}`,
+        `EDGESTORE_ACCESS_KEY=${result.projectKey.key.accessKey}`,
+        `EDGESTORE_SECRET_KEY=${result.projectKey.secretKey}`,
         '',
         'Save this secret now. You will not be able to view it again.'
     ] : [];
@@ -3632,10 +3632,13 @@ function parseDotenvAssignment(line) {
     };
 }
 function dotenvValue(contents, name) {
+    return readDotenvValue(contents, name) || undefined;
+}
+function readDotenvValue(contents, name) {
     let value;
     for (const line of contents.split('\n')){
         const assignment = parseDotenvAssignment(line);
-        if (assignment?.name === name) value = assignment.value || undefined;
+        if (assignment?.name === name) value = assignment.value;
     }
     return value;
 }
@@ -3662,6 +3665,10 @@ function findClosingQuote(value, quote) {
     }
     return -1;
 }
+function projectEnvValue(contents, name) {
+    // Preserve an explicitly empty canonical value, matching server resolution.
+    return readDotenvValue(contents, name) ?? readDotenvValue(contents, name.replace('EDGESTORE_', 'EDGE_STORE_'));
+}
 
 async function localApplicationChecks(directory) {
     const checks = [];
@@ -3710,7 +3717,7 @@ async function localApplicationChecks(directory) {
             const exposed = [
                 ...contents.matchAll(/^(?:export\s+)?((?:VITE_|NEXT_PUBLIC_|PUBLIC_)\w*EDGE_?STORE\w*(?:SECRET|ACCESS)_KEY)\s*=/gm)
             ].some((match)=>Boolean(dotenvValue(contents, match[1])));
-            const backendKeys = Boolean(dotenvValue(contents, 'EDGE_STORE_SECRET_KEY') || dotenvValue(contents, 'EDGE_STORE_ACCESS_KEY'));
+            const backendKeys = Boolean(dotenvValue(contents, 'EDGESTORE_SECRET_KEY') || dotenvValue(contents, 'EDGESTORE_ACCESS_KEY') || dotenvValue(contents, 'EDGE_STORE_SECRET_KEY') || dotenvValue(contents, 'EDGE_STORE_ACCESS_KEY'));
             if (exposed || backendKeys && application.role === 'frontend') {
                 checks.push({
                     name: 'Environment boundary',
@@ -4146,14 +4153,14 @@ async function checkEnvFile(runtime, localConfig, checks) {
             label
         };
     }
-    const accessKey = dotenvValue(contents, 'EDGE_STORE_ACCESS_KEY');
-    const hasSecretKey = Boolean(dotenvValue(contents, 'EDGE_STORE_SECRET_KEY'));
+    const accessKey = projectEnvValue(contents, 'EDGESTORE_ACCESS_KEY');
+    const hasSecretKey = Boolean(projectEnvValue(contents, 'EDGESTORE_SECRET_KEY'));
     checks.push({
         name: label,
         status: accessKey && hasSecretKey ? 'pass' : 'warn',
         detail: [
-            `EDGE_STORE_ACCESS_KEY ${accessKey ? 'present' : 'missing'}`,
-            `EDGE_STORE_SECRET_KEY ${hasSecretKey ? 'present' : 'missing'}`
+            `EDGESTORE_ACCESS_KEY ${accessKey ? 'present' : 'missing'}`,
+            `EDGESTORE_SECRET_KEY ${hasSecretKey ? 'present' : 'missing'}`
         ].join(', ')
     });
     return {
@@ -4616,7 +4623,11 @@ function assertAssignmentsAvailable(input) {
     }
 }
 function hasAssignment(contents, name) {
-    return contents.split('\n').some((line)=>parseDotenvAssignment(line)?.name === name);
+    const legacyName = name.replace(/^EDGESTORE_/, 'EDGE_STORE_');
+    return contents.split('\n').some((line)=>{
+        const assignment = parseDotenvAssignment(line);
+        return assignment?.name === name || assignment?.name === legacyName;
+    });
 }
 function updateAssignments(contents, values) {
     const replaced = new Set();
@@ -4823,8 +4834,8 @@ async function initCommand(runtime, flags, options) {
     let envFile;
     if (secretOutput) {
         await preflightEnvSecret(packageCwd, [
-            'EDGE_STORE_ACCESS_KEY',
-            'EDGE_STORE_SECRET_KEY'
+            'EDGESTORE_ACCESS_KEY',
+            'EDGESTORE_SECRET_KEY'
         ], {
             output: secretOutput,
             update: options.update
@@ -4843,8 +4854,8 @@ async function initCommand(runtime, flags, options) {
             await deliverEnvSecretWithRollback({
                 cwd: packageCwd,
                 values: {
-                    EDGE_STORE_ACCESS_KEY: keyResult.key.accessKey,
-                    EDGE_STORE_SECRET_KEY: keyResult.secretKey
+                    EDGESTORE_ACCESS_KEY: keyResult.key.accessKey,
+                    EDGESTORE_SECRET_KEY: keyResult.secretKey
                 },
                 options: {
                     output: secretOutput,
@@ -5861,8 +5872,8 @@ async function createAndDeliverKey(context, input) {
 }
 async function preflightKeyDelivery(runtime, options) {
     await preflightEnvSecret(runtime.cwd, [
-        'EDGE_STORE_ACCESS_KEY',
-        'EDGE_STORE_SECRET_KEY'
+        'EDGESTORE_ACCESS_KEY',
+        'EDGESTORE_SECRET_KEY'
     ], options);
     if (options.output) await protectSecretFile(runtime.cwd, options.output);
 }
@@ -5873,8 +5884,8 @@ function requireSecretDelivery(runtime, flags, options) {
 }
 function keyValues(accessKey, secretKey) {
     return {
-        EDGE_STORE_ACCESS_KEY: accessKey,
-        EDGE_STORE_SECRET_KEY: secretKey
+        EDGESTORE_ACCESS_KEY: accessKey,
+        EDGESTORE_SECRET_KEY: secretKey
     };
 }
 function envLines(values) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edgestore/cli",
-  "version": "1.0.0-rc.6",
+  "version": "1.0.0-rc.7",
   "description": "Command-line interface for EdgeStore accounts and projects",
   "homepage": "https://edgestore.dev",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "@babel/parser": "7.29.7",
     "@babel/types": "7.29.7",
     "@clack/prompts": "1.7.0",
-    "@edgestore/sdk": "1.0.0-rc.6",
+    "@edgestore/sdk": "1.0.0-rc.7",
     "@manypkg/find-root": "3.1.0",
     "@manypkg/get-packages": "3.1.0",
     "@napi-rs/keyring": "1.3.0",