@hot-updater/cloudflare 0.35.7 → 0.35.9

package/dist/index.cjs

@@ -6958,13 +6958,14 @@ createExeca(mapScriptAsync, {}, deepScriptOptions, setScriptSync);
 const { sendMessage, getOneMessage, getEachMessage, getCancelSignal } = getIpcExport();
 //#endregion
 //#region src/utils/createWrangler.ts
-const createWrangler = ({ stdio, accountId, cloudflareApiToken, cwd }) => {
+const createWrangler = ({ stdio, accountId, cloudflareApiToken, cwd, nonInteractive }) => {
 	const $ = execa({
 		stdio,
 		extendsEnv: true,
-		shell: stdio === "inherit",
+		shell: false,
 		cwd,
 		env: {
+			...nonInteractive ? { CI: "true" } : {},
 			CLOUDFLARE_ACCOUNT_ID: accountId,
 			CLOUDFLARE_API_TOKEN: cloudflareApiToken
 		}

package/dist/index.mjs

@@ -6953,13 +6953,14 @@ createExeca(mapScriptAsync, {}, deepScriptOptions, setScriptSync);
 const { sendMessage, getOneMessage, getEachMessage, getCancelSignal } = getIpcExport();
 //#endregion
 //#region src/utils/createWrangler.ts
-const createWrangler = ({ stdio, accountId, cloudflareApiToken, cwd }) => {
+const createWrangler = ({ stdio, accountId, cloudflareApiToken, cwd, nonInteractive }) => {
 	const $ = execa({
 		stdio,
 		extendsEnv: true,
-		shell: stdio === "inherit",
+		shell: false,
 		cwd,
 		env: {
+			...nonInteractive ? { CI: "true" } : {},
 			CLOUDFLARE_ACCOUNT_ID: accountId,
 			CLOUDFLARE_API_TOKEN: cloudflareApiToken
 		}

package/dist/init/index.cjs

@@ -0,0 +1,87 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region iac/init/index.ts
+const initProvider = {
+	label: "Cloudflare D1 + R2 + Worker",
+	inputs: {
+		accountId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_ACCOUNT_ID",
+			help: "Cloudflare account ID",
+			prompt: {
+				message: "Account List",
+				type: "select"
+			}
+		},
+		apiToken: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_API_TOKEN",
+			help: "API token with D1 edit permission",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the Cloudflare D1 API Token",
+				type: "password"
+			}
+		},
+		bucketName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_BUCKET_NAME",
+			help: "R2 bucket name",
+			prompt: {
+				defaultValue: "hot-updater-storage",
+				message: "Enter the name of the new R2 Bucket",
+				placeholder: "hot-updater-storage",
+				type: "text"
+			}
+		},
+		accessKeyId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID",
+			help: "R2 access key ID",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the R2 Access Key ID",
+				type: "password"
+			}
+		},
+		secretAccessKey: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY",
+			help: "R2 secret access key",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the R2 Secret Access Key",
+				type: "password"
+			}
+		},
+		workerName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_WORKER_NAME",
+			help: "Worker name",
+			prompt: {
+				defaultValue: "hot-updater",
+				message: "Enter the name of the worker",
+				placeholder: "hot-updater",
+				type: "text"
+			}
+		},
+		d1DatabaseId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_ID",
+			help: "D1 database ID"
+		},
+		d1DatabaseName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_NAME",
+			help: "D1 database name",
+			prompt: {
+				defaultValue: "hot-updater",
+				message: "Enter the name of the new D1 Database",
+				placeholder: "hot-updater",
+				type: "text"
+			}
+		},
+		r2Private: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_PRIVATE",
+			help: "Whether the R2 bucket is private (true or false)",
+			prompt: {
+				message: "Make R2 bucket private?",
+				type: "confirm"
+			},
+			validate: (value) => value === "true" || value === "false"
+		}
+	}
+};
+//#endregion
+exports.initProvider = initProvider;

package/dist/init/index.d.cts

@@ -0,0 +1,86 @@
+//#region iac/init/index.d.ts
+declare const initProvider: {
+  readonly label: "Cloudflare D1 + R2 + Worker";
+  readonly inputs: {
+    readonly accountId: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_ACCOUNT_ID";
+      readonly help: "Cloudflare account ID";
+      readonly prompt: {
+        readonly message: "Account List";
+        readonly type: "select";
+      };
+    };
+    readonly apiToken: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_API_TOKEN";
+      readonly help: "API token with D1 edit permission";
+      readonly persistence: "with-consent";
+      readonly prompt: {
+        readonly message: "Enter the Cloudflare D1 API Token";
+        readonly type: "password";
+      };
+    };
+    readonly bucketName: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_BUCKET_NAME";
+      readonly help: "R2 bucket name";
+      readonly prompt: {
+        readonly defaultValue: "hot-updater-storage";
+        readonly message: "Enter the name of the new R2 Bucket";
+        readonly placeholder: "hot-updater-storage";
+        readonly type: "text";
+      };
+    };
+    readonly accessKeyId: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID";
+      readonly help: "R2 access key ID";
+      readonly persistence: "with-consent";
+      readonly prompt: {
+        readonly message: "Enter the R2 Access Key ID";
+        readonly type: "password";
+      };
+    };
+    readonly secretAccessKey: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY";
+      readonly help: "R2 secret access key";
+      readonly persistence: "with-consent";
+      readonly prompt: {
+        readonly message: "Enter the R2 Secret Access Key";
+        readonly type: "password";
+      };
+    };
+    readonly workerName: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_WORKER_NAME";
+      readonly help: "Worker name";
+      readonly prompt: {
+        readonly defaultValue: "hot-updater";
+        readonly message: "Enter the name of the worker";
+        readonly placeholder: "hot-updater";
+        readonly type: "text";
+      };
+    };
+    readonly d1DatabaseId: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_ID";
+      readonly help: "D1 database ID";
+    };
+    readonly d1DatabaseName: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_NAME";
+      readonly help: "D1 database name";
+      readonly prompt: {
+        readonly defaultValue: "hot-updater";
+        readonly message: "Enter the name of the new D1 Database";
+        readonly placeholder: "hot-updater";
+        readonly type: "text";
+      };
+    };
+    readonly r2Private: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_PRIVATE";
+      readonly help: "Whether the R2 bucket is private (true or false)";
+      readonly prompt: {
+        readonly message: "Make R2 bucket private?";
+        readonly type: "confirm";
+      };
+      readonly validate: (value: string | undefined) => value is "true" | "false";
+    };
+  };
+};
+//#endregion
+export { initProvider };

package/dist/init/index.d.mts

@@ -0,0 +1,86 @@
+//#region iac/init/index.d.ts
+declare const initProvider: {
+  readonly label: "Cloudflare D1 + R2 + Worker";
+  readonly inputs: {
+    readonly accountId: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_ACCOUNT_ID";
+      readonly help: "Cloudflare account ID";
+      readonly prompt: {
+        readonly message: "Account List";
+        readonly type: "select";
+      };
+    };
+    readonly apiToken: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_API_TOKEN";
+      readonly help: "API token with D1 edit permission";
+      readonly persistence: "with-consent";
+      readonly prompt: {
+        readonly message: "Enter the Cloudflare D1 API Token";
+        readonly type: "password";
+      };
+    };
+    readonly bucketName: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_BUCKET_NAME";
+      readonly help: "R2 bucket name";
+      readonly prompt: {
+        readonly defaultValue: "hot-updater-storage";
+        readonly message: "Enter the name of the new R2 Bucket";
+        readonly placeholder: "hot-updater-storage";
+        readonly type: "text";
+      };
+    };
+    readonly accessKeyId: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID";
+      readonly help: "R2 access key ID";
+      readonly persistence: "with-consent";
+      readonly prompt: {
+        readonly message: "Enter the R2 Access Key ID";
+        readonly type: "password";
+      };
+    };
+    readonly secretAccessKey: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY";
+      readonly help: "R2 secret access key";
+      readonly persistence: "with-consent";
+      readonly prompt: {
+        readonly message: "Enter the R2 Secret Access Key";
+        readonly type: "password";
+      };
+    };
+    readonly workerName: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_WORKER_NAME";
+      readonly help: "Worker name";
+      readonly prompt: {
+        readonly defaultValue: "hot-updater";
+        readonly message: "Enter the name of the worker";
+        readonly placeholder: "hot-updater";
+        readonly type: "text";
+      };
+    };
+    readonly d1DatabaseId: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_ID";
+      readonly help: "D1 database ID";
+    };
+    readonly d1DatabaseName: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_NAME";
+      readonly help: "D1 database name";
+      readonly prompt: {
+        readonly defaultValue: "hot-updater";
+        readonly message: "Enter the name of the new D1 Database";
+        readonly placeholder: "hot-updater";
+        readonly type: "text";
+      };
+    };
+    readonly r2Private: {
+      readonly envKey: "HOT_UPDATER_CLOUDFLARE_R2_PRIVATE";
+      readonly help: "Whether the R2 bucket is private (true or false)";
+      readonly prompt: {
+        readonly message: "Make R2 bucket private?";
+        readonly type: "confirm";
+      };
+      readonly validate: (value: string | undefined) => value is "true" | "false";
+    };
+  };
+};
+//#endregion
+export { initProvider };

package/dist/init/index.mjs

@@ -0,0 +1,86 @@
+//#region iac/init/index.ts
+const initProvider = {
+	label: "Cloudflare D1 + R2 + Worker",
+	inputs: {
+		accountId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_ACCOUNT_ID",
+			help: "Cloudflare account ID",
+			prompt: {
+				message: "Account List",
+				type: "select"
+			}
+		},
+		apiToken: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_API_TOKEN",
+			help: "API token with D1 edit permission",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the Cloudflare D1 API Token",
+				type: "password"
+			}
+		},
+		bucketName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_BUCKET_NAME",
+			help: "R2 bucket name",
+			prompt: {
+				defaultValue: "hot-updater-storage",
+				message: "Enter the name of the new R2 Bucket",
+				placeholder: "hot-updater-storage",
+				type: "text"
+			}
+		},
+		accessKeyId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID",
+			help: "R2 access key ID",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the R2 Access Key ID",
+				type: "password"
+			}
+		},
+		secretAccessKey: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY",
+			help: "R2 secret access key",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the R2 Secret Access Key",
+				type: "password"
+			}
+		},
+		workerName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_WORKER_NAME",
+			help: "Worker name",
+			prompt: {
+				defaultValue: "hot-updater",
+				message: "Enter the name of the worker",
+				placeholder: "hot-updater",
+				type: "text"
+			}
+		},
+		d1DatabaseId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_ID",
+			help: "D1 database ID"
+		},
+		d1DatabaseName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_NAME",
+			help: "D1 database name",
+			prompt: {
+				defaultValue: "hot-updater",
+				message: "Enter the name of the new D1 Database",
+				placeholder: "hot-updater",
+				type: "text"
+			}
+		},
+		r2Private: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_PRIVATE",
+			help: "Whether the R2 bucket is private (true or false)",
+			prompt: {
+				message: "Make R2 bucket private?",
+				type: "confirm"
+			},
+			validate: (value) => value === "true" || value === "false"
+		}
+	}
+};
+//#endregion
+export { initProvider };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/cloudflare",
   "type": "module",
-  "version": "0.35.7",
+  "version": "0.35.9",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -11,6 +11,11 @@
       "import": "./dist/index.mjs",
       "require": "./dist/index.cjs"
     },
+    "./init": {
+      "types": "./dist/init/index.d.cts",
+      "import": "./dist/init/index.mjs",
+      "require": "./dist/init/index.cjs"
+    },
     "./worker": {
       "types": "./dist/worker/index.d.cts",
       "import": "./dist/worker/index.mjs",
@@ -56,11 +61,11 @@
     "cloudflare": "4.2.0",
     "hono": "4.12.9",
     "uuidv7": "^1.0.2",
-    "@hot-updater/cli-tools": "0.35.7",
-    "@hot-updater/core": "0.35.7",
-    "@hot-updater/js": "0.35.7",
-    "@hot-updater/plugin-core": "0.35.7",
-    "@hot-updater/server": "0.35.7"
+    "@hot-updater/cli-tools": "0.35.9",
+    "@hot-updater/core": "0.35.9",
+    "@hot-updater/js": "0.35.9",
+    "@hot-updater/server": "0.35.9",
+    "@hot-updater/plugin-core": "0.35.9"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "0.13.0",
@@ -73,11 +78,12 @@
     "pg-minify": "^1.6.5",
     "semver": "^7.6.3",
     "toml": "^3.0.0",
-    "typescript": "^6.0.2",
+    "@typescript/native": "npm:typescript@^7.0.2",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
     "vitest": "4.1.4",
     "wrangler": "^4.5.0",
     "xdg-app-paths": "^8.3.0",
-    "@hot-updater/test-utils": "0.35.7"
+    "@hot-updater/test-utils": "0.35.9"
   },
   "scripts": {
     "build": "tsdown && pnpm build:worker",

package/src/utils/createWrangler.spec.ts

@@ -0,0 +1,75 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+  command: vi.fn(),
+  execa: vi.fn(),
+}));
+
+vi.mock("execa", () => ({
+  execa: mocks.execa,
+}));
+
+import { createWrangler } from "./createWrangler";
+
+describe("createWrangler", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    mocks.execa.mockReturnValue(mocks.command);
+    mocks.command.mockResolvedValue({});
+  });
+
+  it("marks replay commands as CI so Wrangler skips nested prompts", async () => {
+    const wrangler = createWrangler({
+      accountId: "account-id",
+      cloudflareApiToken: "api-token",
+      cwd: "/tmp/cloudflare-init",
+      nonInteractive: true,
+      stdio: "inherit",
+    });
+
+    await wrangler("d1", "migrations", "apply", "hot-updater", "--remote");
+
+    expect(mocks.execa).toHaveBeenCalledWith({
+      cwd: "/tmp/cloudflare-init",
+      env: {
+        CI: "true",
+        CLOUDFLARE_ACCOUNT_ID: "account-id",
+        CLOUDFLARE_API_TOKEN: "api-token",
+      },
+      extendsEnv: true,
+      shell: false,
+      stdio: "inherit",
+    });
+    expect(mocks.command).toHaveBeenCalledWith("npx", [
+      "wrangler",
+      "d1",
+      "migrations",
+      "apply",
+      "hot-updater",
+      "--remote",
+    ]);
+  });
+
+  it("passes shell metacharacters as one argument", async () => {
+    const wrangler = createWrangler({
+      accountId: "account-id",
+      cloudflareApiToken: "api-token",
+      cwd: "/tmp/cloudflare-init",
+      stdio: "inherit",
+    });
+
+    await wrangler("deploy", "--name", "safe; printf INJECTED");
+
+    expect(mocks.execa).toHaveBeenCalledWith(
+      expect.objectContaining({
+        shell: false,
+      }),
+    );
+    expect(mocks.command).toHaveBeenCalledWith("npx", [
+      "wrangler",
+      "deploy",
+      "--name",
+      "safe; printf INJECTED",
+    ]);
+  });
+});

package/src/utils/createWrangler.ts

@@ -3,21 +3,23 @@ import { execa } from "execa";
 export const createWrangler = ({
   stdio,
   accountId,
-
   cloudflareApiToken,
   cwd,
+  nonInteractive,
 }: {
   stdio?: "inherit" | "pipe" | "ignore" | "overlapped";
   accountId: string;
   cloudflareApiToken: string;
   cwd: string;
+  nonInteractive?: boolean;
 }) => {
   const $ = execa({
     stdio,
     extendsEnv: true,
-    shell: stdio === "inherit",
+    shell: false,
     cwd,
     env: {
+      ...(nonInteractive ? { CI: "true" } : {}),
       CLOUDFLARE_ACCOUNT_ID: accountId,
       CLOUDFLARE_API_TOKEN: cloudflareApiToken,
     },

package/worker/dist/README.md

@@ -1 +1 @@
-This folder contains the built output assets for the worker "hot-updater" generated at 2026-07-25T16:46:45.127Z.
+This folder contains the built output assets for the worker "hot-updater" generated at 2026-07-31T17:01:25.237Z.

package/worker/dist/index.js

@@ -3249,7 +3249,7 @@ init_performance2();
 init_virtual_unenv_global_polyfill_cloudflare_unenv_preset_node_process();
 init_virtual_unenv_global_polyfill_cloudflare_unenv_preset_node_console();
 init_performance2();
-var version2 = "0.35.7";
+var version2 = "0.35.9";
 
 // ../../packages/server/dist/version.mjs
 var HOT_UPDATER_SERVER_VERSION = version2;