@hot-updater/cloudflare 1.2.0-rc.0 → 1.2.0-rc.10

package/dist/index.cjs

@@ -24,9 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 let cloudflare = require("cloudflare");
 cloudflare = __toESM(cloudflare, 1);
-let _aws_sdk_client_s3 = require("@aws-sdk/client-s3");
-let _aws_sdk_lib_storage = require("@aws-sdk/lib-storage");
-let _aws_sdk_s3_request_presigner = require("@aws-sdk/s3-request-presigner");
+let _hot_updater_storage_s3 = require("@hot-updater/storage-s3");
 //#region src/d1Executor.ts
 var D1ExecutionError = class extends Error {
 	name = "D1ExecutionError";
@@ -86,7 +84,12 @@ const encode = ({ sql, params }) => ({
 * time, or a batch D1 runs in one transaction.
 */
 const d1RestRunner = (config) => {
-	const cloudflare$1 = new cloudflare.default({ apiToken: config.cloudflareApiToken });
+	const { cloudflareApiToken } = config;
+	let client;
+	const connect = () => client ??= (async () => new cloudflare.default({ apiToken: typeof cloudflareApiToken === "function" ? await cloudflareApiToken() : cloudflareApiToken }))().catch((error) => {
+		client = void 0;
+		throw error;
+	});
 	const batch = async (statements) => {
 		const [first] = statements;
 		if (first === void 0) return [];
@@ -97,7 +100,7 @@ const d1RestRunner = (config) => {
 			account_id: config.accountId,
 			batch: statements.map(encode)
 		};
-		const page = await cloudflare$1.d1.database.query(config.databaseId, body);
+		const page = await (await connect()).d1.database.query(config.databaseId, body);
 		const results = [];
 		for await (const resultPage of page.iterPages()) for (const result of resultPage.result) results.push(toSqlResult(result));
 		if (results.length !== statements.length) throw new D1ExecutionError();
@@ -152,94 +155,17 @@ const d1Database = (config) => ({
 });
 //#endregion
 //#region src/r2S3Storage.ts
-/** Devices download right after the update check that returns the URL. */
-const PRESIGNED_URL_EXPIRES_IN_SECONDS = 3600;
-const isObjectNotFoundError = (error) => {
-	if (error instanceof Error && (error.name === "NotFound" || error.name === "NoSuchKey")) return true;
-	return typeof error === "object" && error !== null && "$metadata" in error && error.$metadata?.httpStatusCode === 404;
-};
 const createR2S3Storage = (config) => {
-	const { accountId, basePath, bucketName, endpoint, forcePathStyle, region, ...s3Config } = config;
-	const client = new _aws_sdk_client_s3.S3Client({
+	const { accountId, endpoint, forcePathStyle, region, ...s3Config } = config;
+	return (0, _hot_updater_storage_s3.createS3Storage)({
+		name: "r2Storage",
+		protocol: "r2"
+	}, {
 		...s3Config,
 		endpoint: endpoint ?? `https://${accountId}.r2.cloudflarestorage.com`,
 		forcePathStyle: forcePathStyle ?? true,
 		region: region ?? "auto"
 	});
-	const getStorageKey = (0, _hot_updater_plugin_core.createStorageKeyBuilder)(basePath);
-	const parseAndValidate = (storageUri) => {
-		const parsed = (0, _hot_updater_plugin_core.parseStorageUri)(storageUri, "r2");
-		if (parsed.bucket !== bucketName) throw new Error(`Bucket name mismatch: expected "${bucketName}", but found "${parsed.bucket}".`);
-		return parsed;
-	};
-	return (0, _hot_updater_plugin_core.createStorageAdapter)({
-		name: "r2Storage",
-		protocol: "r2",
-		async put({ key, body, contentLength, contentType }) {
-			const storageKey = getStorageKey(key);
-			await new _aws_sdk_lib_storage.Upload({
-				client,
-				params: {
-					Body: body,
-					Bucket: bucketName,
-					CacheControl: "max-age=31536000",
-					ContentLength: contentLength,
-					ContentType: contentType,
-					Key: storageKey
-				}
-			}).done();
-			return { storageUri: (0, _hot_updater_plugin_core.createStorageUri)({
-				protocol: "r2",
-				bucket: bucketName,
-				key: storageKey
-			}) };
-		},
-		async get({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			try {
-				const response = await client.send(new _aws_sdk_client_s3.GetObjectCommand({
-					Bucket: bucketName,
-					Key: key
-				}));
-				if (!response.Body) return { response: null };
-				const headers = new Headers();
-				if (response.ContentType) headers.set("content-type", response.ContentType);
-				if (response.ContentLength !== void 0) headers.set("content-length", String(response.ContentLength));
-				return { response: new Response(response.Body.transformToWebStream(), { headers }) };
-			} catch (error) {
-				if (isObjectNotFoundError(error)) return { response: null };
-				throw error;
-			}
-		},
-		async getDownloadUrl({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			return { url: await (0, _aws_sdk_s3_request_presigner.getSignedUrl)(client, new _aws_sdk_client_s3.GetObjectCommand({
-				Bucket: bucketName,
-				Key: key
-			}), { expiresIn: PRESIGNED_URL_EXPIRES_IN_SECONDS }) };
-		},
-		async exists({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			try {
-				await client.send(new _aws_sdk_client_s3.HeadObjectCommand({
-					Bucket: bucketName,
-					Key: key
-				}));
-				return { exists: true };
-			} catch (error) {
-				if (isObjectNotFoundError(error)) return { exists: false };
-				throw error;
-			}
-		},
-		async delete({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			await client.send(new _aws_sdk_client_s3.DeleteObjectCommand({
-				Bucket: bucketName,
-				Key: key
-			}));
-			return { deleted: true };
-		}
-	});
 };
 //#endregion
 //#region src/r2Storage.ts

package/dist/index.d.cts

@@ -1,10 +1,15 @@
-import { StorageAdapterWith, ToolingDatabase } from "@hot-updater/plugin-core";
-import { S3ClientConfig } from "@aws-sdk/client-s3";
+import { Lazy, StorageAdapterWith, ToolingDatabase } from "@hot-updater/plugin-core";
+import { S3ClientConfig, S3CredentialsOption, S3StorageOperations } from "@hot-updater/storage-s3";
 //#region src/d1Rest.d.ts
 interface D1RestConfig {
   readonly databaseId: string;
   readonly accountId: string;
-  readonly cloudflareApiToken: string;
+  /**
+   * An API token with D1 edit permission, or a function that returns it,
+   * such as `secret("<name>")` in `hot-updater.config.ts`: called on the
+   * first query, so a config loads without the token.
+   */
+  readonly cloudflareApiToken: Lazy<string>;
 }
 //#endregion
 //#region src/d1Executor.d.ts
@@ -26,16 +31,17 @@ type D1DatabaseConfig = D1RestConfig;
 declare const d1Database: (config: D1DatabaseConfig) => ToolingDatabase;
 //#endregion
 //#region src/r2S3Storage.d.ts
-interface R2S3StorageConfig extends S3ClientConfig {
+interface R2S3StorageConfig extends Omit<S3ClientConfig, "credentials"> {
   accountId: string;
   bucketName: string;
-  credentials: NonNullable<S3ClientConfig["credentials"]>;
+  /** The SDK's credentials, or an R2 access key whose fields are lazy. */
+  credentials: NonNullable<S3CredentialsOption>;
   /** Base path where bundles will be stored in the bucket. */
   basePath?: string;
 }
 //#endregion
 //#region src/r2Storage.d.ts
 type R2StorageConfig = R2S3StorageConfig;
-declare const r2Storage: (config: R2S3StorageConfig) => StorageAdapterWith<"put" | "get" | "getDownloadUrl" | "exists" | "delete">;
+declare const r2Storage: (config: R2S3StorageConfig) => StorageAdapterWith<S3StorageOperations>;
 //#endregion
 export { D1DatabaseConfig, D1ExecutionError, type R2S3StorageConfig, R2StorageConfig, d1Database, r2Storage };

package/dist/index.d.mts

@@ -1,10 +1,15 @@
-import { StorageAdapterWith, ToolingDatabase } from "@hot-updater/plugin-core";
-import { S3ClientConfig } from "@aws-sdk/client-s3";
+import { Lazy, StorageAdapterWith, ToolingDatabase } from "@hot-updater/plugin-core";
+import { S3ClientConfig, S3CredentialsOption, S3StorageOperations } from "@hot-updater/storage-s3";
 //#region src/d1Rest.d.ts
 interface D1RestConfig {
   readonly databaseId: string;
   readonly accountId: string;
-  readonly cloudflareApiToken: string;
+  /**
+   * An API token with D1 edit permission, or a function that returns it,
+   * such as `secret("<name>")` in `hot-updater.config.ts`: called on the
+   * first query, so a config loads without the token.
+   */
+  readonly cloudflareApiToken: Lazy<string>;
 }
 //#endregion
 //#region src/d1Executor.d.ts
@@ -26,16 +31,17 @@ type D1DatabaseConfig = D1RestConfig;
 declare const d1Database: (config: D1DatabaseConfig) => ToolingDatabase;
 //#endregion
 //#region src/r2S3Storage.d.ts
-interface R2S3StorageConfig extends S3ClientConfig {
+interface R2S3StorageConfig extends Omit<S3ClientConfig, "credentials"> {
   accountId: string;
   bucketName: string;
-  credentials: NonNullable<S3ClientConfig["credentials"]>;
+  /** The SDK's credentials, or an R2 access key whose fields are lazy. */
+  credentials: NonNullable<S3CredentialsOption>;
   /** Base path where bundles will be stored in the bucket. */
   basePath?: string;
 }
 //#endregion
 //#region src/r2Storage.d.ts
 type R2StorageConfig = R2S3StorageConfig;
-declare const r2Storage: (config: R2S3StorageConfig) => StorageAdapterWith<"put" | "get" | "getDownloadUrl" | "exists" | "delete">;
+declare const r2Storage: (config: R2S3StorageConfig) => StorageAdapterWith<S3StorageOperations>;
 //#endregion
 export { D1DatabaseConfig, D1ExecutionError, type R2S3StorageConfig, R2StorageConfig, d1Database, r2Storage };

package/dist/index.mjs

@@ -1,8 +1,6 @@
-import { WRITE_GUARD_TABLE, coreSettings, coreTarget, createEngineDatabase, createSqlAdapter, createStorageAdapter, createStorageKeyBuilder, createStorageUri, createTableStatements, generateEngineSql, parseStorageUri } from "@hot-updater/plugin-core";
+import { WRITE_GUARD_TABLE, coreSettings, coreTarget, createEngineDatabase, createSqlAdapter, createTableStatements, generateEngineSql } from "@hot-updater/plugin-core";
 import Cloudflare from "cloudflare";
-import { DeleteObjectCommand, GetObjectCommand, HeadObjectCommand, S3Client } from "@aws-sdk/client-s3";
-import { Upload } from "@aws-sdk/lib-storage";
-import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
+import { createS3Storage } from "@hot-updater/storage-s3";
 //#region src/d1Executor.ts
 var D1ExecutionError = class extends Error {
 	name = "D1ExecutionError";
@@ -62,7 +60,12 @@ const encode = ({ sql, params }) => ({
 * time, or a batch D1 runs in one transaction.
 */
 const d1RestRunner = (config) => {
-	const cloudflare = new Cloudflare({ apiToken: config.cloudflareApiToken });
+	const { cloudflareApiToken } = config;
+	let client;
+	const connect = () => client ??= (async () => new Cloudflare({ apiToken: typeof cloudflareApiToken === "function" ? await cloudflareApiToken() : cloudflareApiToken }))().catch((error) => {
+		client = void 0;
+		throw error;
+	});
 	const batch = async (statements) => {
 		const [first] = statements;
 		if (first === void 0) return [];
@@ -73,7 +76,7 @@ const d1RestRunner = (config) => {
 			account_id: config.accountId,
 			batch: statements.map(encode)
 		};
-		const page = await cloudflare.d1.database.query(config.databaseId, body);
+		const page = await (await connect()).d1.database.query(config.databaseId, body);
 		const results = [];
 		for await (const resultPage of page.iterPages()) for (const result of resultPage.result) results.push(toSqlResult(result));
 		if (results.length !== statements.length) throw new D1ExecutionError();
@@ -128,94 +131,17 @@ const d1Database = (config) => ({
 });
 //#endregion
 //#region src/r2S3Storage.ts
-/** Devices download right after the update check that returns the URL. */
-const PRESIGNED_URL_EXPIRES_IN_SECONDS = 3600;
-const isObjectNotFoundError = (error) => {
-	if (error instanceof Error && (error.name === "NotFound" || error.name === "NoSuchKey")) return true;
-	return typeof error === "object" && error !== null && "$metadata" in error && error.$metadata?.httpStatusCode === 404;
-};
 const createR2S3Storage = (config) => {
-	const { accountId, basePath, bucketName, endpoint, forcePathStyle, region, ...s3Config } = config;
-	const client = new S3Client({
+	const { accountId, endpoint, forcePathStyle, region, ...s3Config } = config;
+	return createS3Storage({
+		name: "r2Storage",
+		protocol: "r2"
+	}, {
 		...s3Config,
 		endpoint: endpoint ?? `https://${accountId}.r2.cloudflarestorage.com`,
 		forcePathStyle: forcePathStyle ?? true,
 		region: region ?? "auto"
 	});
-	const getStorageKey = createStorageKeyBuilder(basePath);
-	const parseAndValidate = (storageUri) => {
-		const parsed = parseStorageUri(storageUri, "r2");
-		if (parsed.bucket !== bucketName) throw new Error(`Bucket name mismatch: expected "${bucketName}", but found "${parsed.bucket}".`);
-		return parsed;
-	};
-	return createStorageAdapter({
-		name: "r2Storage",
-		protocol: "r2",
-		async put({ key, body, contentLength, contentType }) {
-			const storageKey = getStorageKey(key);
-			await new Upload({
-				client,
-				params: {
-					Body: body,
-					Bucket: bucketName,
-					CacheControl: "max-age=31536000",
-					ContentLength: contentLength,
-					ContentType: contentType,
-					Key: storageKey
-				}
-			}).done();
-			return { storageUri: createStorageUri({
-				protocol: "r2",
-				bucket: bucketName,
-				key: storageKey
-			}) };
-		},
-		async get({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			try {
-				const response = await client.send(new GetObjectCommand({
-					Bucket: bucketName,
-					Key: key
-				}));
-				if (!response.Body) return { response: null };
-				const headers = new Headers();
-				if (response.ContentType) headers.set("content-type", response.ContentType);
-				if (response.ContentLength !== void 0) headers.set("content-length", String(response.ContentLength));
-				return { response: new Response(response.Body.transformToWebStream(), { headers }) };
-			} catch (error) {
-				if (isObjectNotFoundError(error)) return { response: null };
-				throw error;
-			}
-		},
-		async getDownloadUrl({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			return { url: await getSignedUrl(client, new GetObjectCommand({
-				Bucket: bucketName,
-				Key: key
-			}), { expiresIn: PRESIGNED_URL_EXPIRES_IN_SECONDS }) };
-		},
-		async exists({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			try {
-				await client.send(new HeadObjectCommand({
-					Bucket: bucketName,
-					Key: key
-				}));
-				return { exists: true };
-			} catch (error) {
-				if (isObjectNotFoundError(error)) return { exists: false };
-				throw error;
-			}
-		},
-		async delete({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			await client.send(new DeleteObjectCommand({
-				Bucket: bucketName,
-				Key: key
-			}));
-			return { deleted: true };
-		}
-	});
 };
 //#endregion
 //#region src/r2Storage.ts

package/dist/init/index.cjs

@@ -113,7 +113,12 @@ const encode = ({ sql, params }) => ({
 * time, or a batch D1 runs in one transaction.
 */
 const d1RestRunner = (config) => {
-	const cloudflare$1 = new cloudflare.default({ apiToken: config.cloudflareApiToken });
+	const { cloudflareApiToken } = config;
+	let client;
+	const connect = () => client ??= (async () => new cloudflare.default({ apiToken: typeof cloudflareApiToken === "function" ? await cloudflareApiToken() : cloudflareApiToken }))().catch((error) => {
+		client = void 0;
+		throw error;
+	});
 	const batch = async (statements) => {
 		const [first] = statements;
 		if (first === void 0) return [];
@@ -124,7 +129,7 @@ const d1RestRunner = (config) => {
 			account_id: config.accountId,
 			batch: statements.map(encode)
 		};
-		const page = await cloudflare$1.d1.database.query(config.databaseId, body);
+		const page = await (await connect()).d1.database.query(config.databaseId, body);
 		const results = [];
 		for await (const resultPage of page.iterPages()) for (const result of resultPage.result) results.push(toSqlResult(result));
 		if (results.length !== statements.length) throw new D1ExecutionError();
@@ -11320,7 +11325,12 @@ const initProvider = {
 			},
 			validate: (value) => value === "true" || value === "false"
 		}
-	}
+	},
+	secrets: [
+		"HOT_UPDATER_CLOUDFLARE_API_TOKEN",
+		"HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID",
+		"HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY"
+	]
 };
 //#endregion
 //#region iac/cloudflareInitInputs.ts
@@ -11408,8 +11418,27 @@ const inputCloudflareInitSecrets = async ({ accountId, bucketName, apiToken, acc
 };
 //#endregion
 //#region iac/configTemplate.ts
-const getConfigScaffold = (build) => {
-	return (0, _hot_updater_cli_tools.createHotUpdaterConfigScaffoldFromBuilder)(new _hot_updater_cli_tools.ConfigBuilder().setBuildType(build).setStorage({
+/**
+* The config init writes. With the `resources` init set up, it names them,
+* and reads the API token and R2 keys with `secret()`, from the
+* environment and `.env.hotupdater`, then the config's `secrets` adapter.
+* Without them, as the agent scaffold writes it before the agent creates the
+* resources, it reads their IDs from the environment, where the agent
+* records them, and the credentials with `secret()` alike.
+*/
+const getConfigScaffold = (build, resources) => {
+	const builder = new _hot_updater_cli_tools.ConfigBuilder().setBuildType(build).setPlugins({
+		imports: [{
+			pkg: "hot-updater/plugins",
+			named: [
+				"apiKeys",
+				"insights",
+				"remoteConfig"
+			]
+		}],
+		configString: "[apiKeys(), insights(), remoteConfig()]"
+	});
+	if (resources === void 0) return (0, _hot_updater_cli_tools.createHotUpdaterConfigScaffoldFromBuilder)(builder.setStorage({
 		imports: [{
 			pkg: "@hot-updater/cloudflare",
 			named: ["r2Storage"]
@@ -11418,8 +11447,8 @@ const getConfigScaffold = (build) => {
     bucketName: process.env.HOT_UPDATER_CLOUDFLARE_R2_BUCKET_NAME!,
     accountId: process.env.HOT_UPDATER_CLOUDFLARE_ACCOUNT_ID!,
     credentials: {
-      accessKeyId: process.env.HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID!,
-      secretAccessKey: process.env.HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY!,
+      accessKeyId: secret("HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID"),
+      secretAccessKey: secret("HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY"),
     },
   })`
 	}).setDatabase({
@@ -11430,18 +11459,41 @@ const getConfigScaffold = (build) => {
 		configString: `d1Database({
     databaseId: process.env.HOT_UPDATER_CLOUDFLARE_D1_DATABASE_ID!,
     accountId: process.env.HOT_UPDATER_CLOUDFLARE_ACCOUNT_ID!,
-    cloudflareApiToken: process.env.HOT_UPDATER_CLOUDFLARE_API_TOKEN!,
+    cloudflareApiToken: secret("HOT_UPDATER_CLOUDFLARE_API_TOKEN"),
   })`
-	}).setPlugins({
+	}).addImport({
+		pkg: "hot-updater",
+		named: ["secret"]
+	}));
+	const accountId = JSON.stringify(resources.accountId);
+	const storageConfig = {
 		imports: [{
-			pkg: "hot-updater/plugins",
-			named: [
-				"apiKeys",
-				"insights",
-				"remoteConfig"
-			]
+			pkg: "@hot-updater/cloudflare",
+			named: ["r2Storage"]
 		}],
-		configString: "[apiKeys(), insights(), remoteConfig()]"
+		configString: `r2Storage({
+    bucketName: ${JSON.stringify(resources.bucketName)},
+    accountId: ${accountId},
+    credentials: {
+      accessKeyId: secret("HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID"),
+      secretAccessKey: secret("HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY"),
+    },
+  })`
+	};
+	const databaseConfig = {
+		imports: [{
+			pkg: "@hot-updater/cloudflare",
+			named: ["d1Database"]
+		}],
+		configString: `d1Database({
+    databaseId: ${JSON.stringify(resources.d1DatabaseId)},
+    accountId: ${accountId},
+    cloudflareApiToken: secret("HOT_UPDATER_CLOUDFLARE_API_TOKEN"),
+  })`
+	};
+	return (0, _hot_updater_cli_tools.createHotUpdaterConfigScaffoldFromBuilder)(builder.setStorage(storageConfig).setDatabase(databaseConfig).addImport({
+		pkg: "hot-updater",
+		named: ["secret"]
 	}));
 };
 //#endregion
@@ -11514,10 +11566,10 @@ const deployWorker = async (apiToken, accountId, { credentialSource, d1DatabaseI
 		await removeTmpDir();
 	}
 };
-const runInit = async ({ build, envFile }) => {
+const runInit = async ({ build, envFile, secretsEnv }) => {
 	const cwd = (0, _hot_updater_cli_tools.getCwd)();
 	const nonInteractive = envFile !== void 0;
-	const initEnvSources = await (0, _hot_updater_cli_tools.readHotUpdaterInitEnv)(cwd, envFile);
+	const initEnvSources = await (0, _hot_updater_cli_tools.readHotUpdaterInitEnv)(cwd, envFile, secretsEnv);
 	const { managedEnv } = initEnvSources;
 	const initInputEnv = (0, _hot_updater_cli_tools.getHotUpdaterInitInputEnv)(initEnvSources, nonInteractive);
 	const existingInputs = resolveCloudflareInitInputs(initInputEnv);
@@ -11867,7 +11919,11 @@ const runInit = async ({ build, envFile }) => {
 		await database.dispose?.();
 	}
 	_hot_updater_cli_tools.p.log.success("Generated '.env.hotupdater' file with Cloudflare settings.");
-	await (0, _hot_updater_cli_tools.writeHotUpdaterFiles)(getConfigScaffold(build), {
+	await (0, _hot_updater_cli_tools.writeHotUpdaterFiles)(getConfigScaffold(build, {
+		accountId,
+		bucketName: selectedBucketName,
+		d1DatabaseId: selectedD1DatabaseId
+	}), {
 		cwd,
 		settings: "Cloudflare"
 	});

package/dist/init/index.d.cts

@@ -82,9 +82,10 @@ declare const initProvider: {
       readonly validate: (value: string | undefined) => value is "true" | "false";
     };
   };
+  readonly secrets: readonly ["HOT_UPDATER_CLOUDFLARE_API_TOKEN", "HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID", "HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY"];
 };
 //#endregion
 //#region iac/index.d.ts
-declare const runInit: ({ build, envFile }: RunInitOptions) => Promise<void>;
+declare const runInit: ({ build, envFile, secretsEnv }: RunInitOptions) => Promise<void>;
 //#endregion
 export { initProvider, runInit };

package/dist/init/index.d.mts

@@ -82,9 +82,10 @@ declare const initProvider: {
       readonly validate: (value: string | undefined) => value is "true" | "false";
     };
   };
+  readonly secrets: readonly ["HOT_UPDATER_CLOUDFLARE_API_TOKEN", "HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID", "HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY"];
 };
 //#endregion
 //#region iac/index.d.ts
-declare const runInit: ({ build, envFile }: RunInitOptions) => Promise<void>;
+declare const runInit: ({ build, envFile, secretsEnv }: RunInitOptions) => Promise<void>;
 //#endregion
 export { initProvider, runInit };