@eide/foir-cli 0.7.0 → 0.9.0

package/dist/cli.js

@@ -2955,7 +2955,7 @@ function createOperationsMethods(client) {
           allowedRoles: params.allowedRoles ?? [],
           precondition: params.precondition,
           configId: params.configId,
-          supportsAsyncCallback: params.supportsAsyncCallback,
+          supportsAsync: params.supportsAsync,
           callbackTtlSeconds: params.callbackTtlSeconds
         })
       );
@@ -2976,7 +2976,7 @@ function createOperationsMethods(client) {
           callbackTimeoutRetryPolicy: params.callbackTimeoutRetryPolicy,
           precondition: params.precondition,
           isActive: params.isActive,
-          supportsAsyncCallback: params.supportsAsyncCallback,
+          supportsAsync: params.supportsAsync,
           callbackTtlSeconds: params.callbackTtlSeconds
         })
       );
@@ -4880,7 +4880,7 @@ import { resolve as resolve4 } from "path";
 function zeroCounts() {
   return { created: 0, updated: 0, deleted: 0 };
 }
-async function reconcileConfig(client, configId, manifest) {
+async function reconcileConfig(client, configId, manifest, options = {}) {
   const summary = {
     models: zeroCounts(),
     operations: zeroCounts(),
@@ -4901,7 +4901,13 @@ async function reconcileConfig(client, configId, manifest) {
   await reconcileAuthProviders(client, manifest.authProviders ?? [], summary);
   await reconcilePlacements(client, configId, manifest.placements ?? [], summary);
   await reconcileProfileSchema(client, manifest, summary);
-  await reconcileApiKeys(client, manifest.key, manifest.apiKeys ?? [], summary);
+  await reconcileApiKeys(
+    client,
+    manifest.key,
+    manifest.apiKeys ?? [],
+    summary,
+    options.rotateKeys ?? false
+  );
   return summary;
 }
 async function reconcileModels(client, configId, models, summary) {
@@ -4973,8 +4979,8 @@ async function reconcileOperations(client, configId, operations, operationBaseUr
     }
     const ex = existingByKey.get(op.key);
     const endpoint = resolveEndpoint(op.endpoint, operationBaseUrl);
-    const supportsAsyncCallback = op.mode === "async";
-    if (supportsAsyncCallback && op.timeoutMs && op.timeoutMs > 1e4) {
+    const supportsAsync = op.mode === "async";
+    if (supportsAsync && op.timeoutMs && op.timeoutMs > 1e4) {
       console.warn(
         `\u26A0 operation "${op.key}": mode=async but timeoutMs=${op.timeoutMs} \u2014 ack should return in <10s; long timeouts mask slow extensions`
       );
@@ -4994,7 +5000,7 @@ async function reconcileOperations(client, configId, operations, operationBaseUr
         callbackTimeoutRetryPolicy: op.callbackTimeoutRetryPolicy ?? empty,
         precondition: op.precondition ?? empty,
         isActive: op.isActive,
-        supportsAsyncCallback,
+        supportsAsync,
         callbackTtlSeconds: op.callbackTtlSeconds
       });
       summary.operations.updated++;
@@ -5015,7 +5021,7 @@ async function reconcileOperations(client, configId, operations, operationBaseUr
         allowedRoles: op.allowedRoles,
         precondition: op.precondition,
         configId,
-        supportsAsyncCallback,
+        supportsAsync,
         callbackTtlSeconds: op.callbackTtlSeconds
       });
       summary.operations.created++;
@@ -5242,7 +5248,7 @@ async function reconcileProfileSchema(client, manifest, summary) {
   });
   summary.profileSchemaUpdated = true;
 }
-async function reconcileApiKeys(client, configKey, apiKeys, summary) {
+async function reconcileApiKeys(client, configKey, apiKeys, summary, rotateKeys) {
   if (apiKeys.length === 0) return;
   const existing = await client.identity.listApiKeys({ limit: 200 });
   const existingByName = new Map(
@@ -5264,8 +5270,10 @@ async function reconcileApiKeys(client, configKey, apiKeys, summary) {
           updateScopes: true
         });
       }
-      const rotated = await client.identity.rotateApiKey(existingKey.id);
-      rawKey = rotated?.apiKey?.rawKey;
+      if (rotateKeys) {
+        const rotated = await client.identity.rotateApiKey(existingKey.id);
+        rawKey = rotated?.apiKey?.rawKey;
+      }
     } else {
       const result = await client.identity.createApiKey({
         name: key.name,
@@ -5603,23 +5611,6 @@ function syncEnvVar(envPath, key, value) {
 `, "utf-8");
   return "written";
 }
-function writeEnvVar(envPath, key, value) {
-  let content = "";
-  if (existsSync4(envPath)) {
-    content = readFileSync(envPath, "utf-8");
-    const regex = new RegExp(`^${key}=`, "m");
-    if (regex.test(content)) {
-      return false;
-    }
-  }
-  if (content && !content.endsWith("\n")) {
-    content += "\n";
-  }
-  content += `${key}=${value}
-`;
-  writeFileSync2(envPath, content, "utf-8");
-  return true;
-}
 function printSummary(summary) {
   const lines = [];
   const fmt = (label, c) => {
@@ -5645,7 +5636,11 @@ function printSummary(summary) {
   }
 }
 function registerPushCommand(program2, globalOpts) {
-  program2.command("push").description("Push foir.config.ts to the platform").option("--config <path>", "Path to config file (default: auto-discover)").option("--force", "Force reinstall (delete and recreate)", false).option("--env <path>", "Path to .env file (default: .env)").action(
+  program2.command("push").description("Push foir.config.ts to the platform").option("--config <path>", "Path to config file (default: auto-discover)").option("--force", "Force reinstall (delete and recreate)", false).option(
+    "--rotate-keys",
+    "Rotate existing API keys and rewrite their values in .env",
+    false
+  ).option("--env <path>", "Path to .env file (default: .env)").action(
     withErrorHandler(
       globalOpts,
       async (opts) => {
@@ -5685,7 +5680,9 @@ function registerPushCommand(program2, globalOpts) {
         }
         const configId = applyResult.id;
         console.log(chalk6.dim("Reconciling resources..."));
-        const summary = await reconcileConfig(client, configId, config2);
+        const summary = await reconcileConfig(client, configId, config2, {
+          rotateKeys: opts.rotateKeys ?? false
+        });
         console.log();
         console.log(chalk6.green("\u2713 Config applied successfully"));
         console.log(`  Config ID:  ${chalk6.cyan(configId)}`);
@@ -5724,14 +5721,18 @@ function registerPushCommand(program2, globalOpts) {
         if (envWrites.length > 0) {
           console.log();
           for (const { key, value, label } of envWrites) {
-            const written = writeEnvVar(envPath, key, value);
-            if (written) {
+            const result = syncEnvVar(envPath, key, value);
+            if (result === "unchanged") {
               console.log(
-                chalk6.green(`\u2713 ${label}`) + chalk6.dim(` \u2192 ${key} written to ${envPath}`)
+                chalk6.dim(`  ${label}: ${key} already up to date in ${envPath}, skipped`)
+              );
+            } else if (result === "replaced") {
+              console.log(
+                chalk6.yellow(`\u27F3 ${label}`) + chalk6.dim(` \u2192 ${key} updated in ${envPath}`)
               );
             } else {
               console.log(
-                chalk6.dim(`  ${label}: ${key} already exists in ${envPath}, skipped`)
+                chalk6.green(`\u2713 ${label}`) + chalk6.dim(` \u2192 ${key} written to ${envPath}`)
               );
             }
           }

package/dist/lib/config-helpers.d.ts

@@ -112,7 +112,7 @@ interface ApplyConfigOperationInput {
      * in 2026-04 — every ASYNC dispatch now carries a scoped callback token
      * and the platform tracks the execution to terminal state.
      *
-     * Default: `sync`. The CLI maps this to `supportsAsyncCallback` on the
+     * Default: `sync`. The CLI maps this to `supportsAsync` on the
      * platform Operation row — the operation can still be dispatched in SYNC
      * mode at runtime when callers want a blocking call.
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eide/foir-cli",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Universal platform CLI for Foir platform",
   "type": "module",
   "publishConfig": {
@@ -50,7 +50,7 @@
     "@bufbuild/protovalidate": "^1.1.1",
     "@connectrpc/connect": "^2.0.0",
     "@connectrpc/connect-node": "^2.0.0",
-    "@eide/foir-proto-ts": "^0.16.0",
+    "@eide/foir-proto-ts": "^0.17.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
     "dotenv": "^16.4.5",