@hot-updater/supabase 1.2.0-rc.7 → 1.2.0-rc.8

package/dist/edge.d.cts

@@ -1,2 +1,2 @@
-import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.cjs";
+import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-DFBKC3sm.cjs";
 export { type SupabaseDatabaseConfig, type SupabaseStorageConfig, supabaseDatabase, supabaseStorage };

package/dist/edge.d.mts

@@ -1,2 +1,2 @@
-import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.mjs";
+import { i as supabaseDatabase, n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-DFBKC3sm.mjs";
 export { type SupabaseDatabaseConfig, type SupabaseStorageConfig, supabaseDatabase, supabaseStorage };

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.cjs";
+import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-DFBKC3sm.cjs";
 import { ToolingDatabase } from "@hot-updater/plugin-core";
 //#region src/supabaseMigration.d.ts
 /**

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-B131_auF.mjs";
+import { n as supabaseStorage, r as SupabaseDatabaseConfig, t as SupabaseStorageConfig } from "./supabaseStorage-DFBKC3sm.mjs";
 import { ToolingDatabase } from "@hot-updater/plugin-core";
 //#region src/supabaseMigration.d.ts
 /**

package/dist/init/index.cjs

@@ -6421,14 +6421,15 @@ const supabaseDatabase = (config) => {
 //#region iac/configTemplate.ts
 /**
 * The config init writes. With the `resources` init set up, it names them,
-* and reads the service role key with `secretEnv`, from the environment and
+* and reads the service role key with `secret()`, from the environment and
 * `.env.hotupdater`, then the config's `secrets` adapter. Without them, as
-* the agent scaffold writes it, it reads every value from the environment.
+* the agent scaffold writes it before the agent creates the project, it
+* reads the URL and bucket from the environment, where the agent records
+* them, and the key with `secret()` alike.
 */
 const getConfigScaffold = (build, resources) => {
 	const supabaseUrl = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_URL!" : JSON.stringify(resources.supabaseUrl);
-	const serviceRoleKey = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY!" : `async () =>
-      (await deploySecrets()).HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY`;
+	const serviceRoleKey = "secret(\"HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY\")";
 	const storageConfig = {
 		imports: [{
 			pkg: "@hot-updater/supabase",
@@ -6450,7 +6451,6 @@ const getConfigScaffold = (build, resources) => {
     supabaseServiceRoleKey: ${serviceRoleKey},
   })`
 	};
-	const helperStatements = resources === void 0 ? [] : [(0, _hot_updater_cli_tools.secretEnvHelper)("deploySecrets", ["HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY"])];
 	const builder = new _hot_updater_cli_tools.ConfigBuilder().setBuildType(build).setStorage(storageConfig).setDatabase(databaseConfig).setPlugins({
 		imports: [{
 			pkg: "hot-updater/plugins",
@@ -6462,11 +6462,11 @@ const getConfigScaffold = (build, resources) => {
 		}],
 		configString: "[apiKeys(), insights(), remoteConfig()]"
 	});
-	if (resources !== void 0) builder.addImport({
+	builder.addImport({
 		pkg: "hot-updater",
-		named: ["secretEnv"]
-	}).setIntermediateCode(helperStatements.map(({ code }) => code).join("\n\n"));
-	return (0, _hot_updater_cli_tools.createHotUpdaterConfigScaffoldFromBuilder)(builder, { helperStatements });
+		named: ["secret"]
+	});
+	return (0, _hot_updater_cli_tools.createHotUpdaterConfigScaffoldFromBuilder)(builder);
 };
 //#endregion
 //#region iac/init/index.ts

package/dist/init/index.mjs

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 import fs from "fs/promises";
 import path from "path";
-import { ConfigBuilder, InitError, MissingInitInputsError, assembleServer, assertInfrastructureGenerationAtUrl, assertInitInputs, assertInitProviderInputs, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffoldFromBuilder, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, link, makeEnv, moduleSpecifiersOf, p, printAppSetup, provisionClientCredential, readHotUpdaterInitEnv, resolveInitProviderInput, resolvePackageVersion, secretEnvHelper, transformEnv, transformTemplate, writeHotUpdaterFiles } from "@hot-updater/cli-tools";
+import { ConfigBuilder, InitError, MissingInitInputsError, assembleServer, assertInfrastructureGenerationAtUrl, assertInitInputs, assertInitProviderInputs, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffoldFromBuilder, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, link, makeEnv, moduleSpecifiersOf, p, printAppSetup, provisionClientCredential, readHotUpdaterInitEnv, resolveInitProviderInput, resolvePackageVersion, transformEnv, transformTemplate, writeHotUpdaterFiles } from "@hot-updater/cli-tools";
 import { apiKeys, insights, remoteConfig } from "@hot-updater/server/plugins";
 import { fileURLToPath } from "node:url";
 import { ChildProcess, execFile, spawn, spawnSync } from "node:child_process";
@@ -6416,14 +6416,15 @@ const supabaseDatabase = (config) => {
 //#region iac/configTemplate.ts
 /**
 * The config init writes. With the `resources` init set up, it names them,
-* and reads the service role key with `secretEnv`, from the environment and
+* and reads the service role key with `secret()`, from the environment and
 * `.env.hotupdater`, then the config's `secrets` adapter. Without them, as
-* the agent scaffold writes it, it reads every value from the environment.
+* the agent scaffold writes it before the agent creates the project, it
+* reads the URL and bucket from the environment, where the agent records
+* them, and the key with `secret()` alike.
 */
 const getConfigScaffold = (build, resources) => {
 	const supabaseUrl = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_URL!" : JSON.stringify(resources.supabaseUrl);
-	const serviceRoleKey = resources === void 0 ? "process.env.HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY!" : `async () =>
-      (await deploySecrets()).HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY`;
+	const serviceRoleKey = "secret(\"HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY\")";
 	const storageConfig = {
 		imports: [{
 			pkg: "@hot-updater/supabase",
@@ -6445,7 +6446,6 @@ const getConfigScaffold = (build, resources) => {
     supabaseServiceRoleKey: ${serviceRoleKey},
   })`
 	};
-	const helperStatements = resources === void 0 ? [] : [secretEnvHelper("deploySecrets", ["HOT_UPDATER_SUPABASE_SERVICE_ROLE_KEY"])];
 	const builder = new ConfigBuilder().setBuildType(build).setStorage(storageConfig).setDatabase(databaseConfig).setPlugins({
 		imports: [{
 			pkg: "hot-updater/plugins",
@@ -6457,11 +6457,11 @@ const getConfigScaffold = (build, resources) => {
 		}],
 		configString: "[apiKeys(), insights(), remoteConfig()]"
 	});
-	if (resources !== void 0) builder.addImport({
+	builder.addImport({
 		pkg: "hot-updater",
-		named: ["secretEnv"]
-	}).setIntermediateCode(helperStatements.map(({ code }) => code).join("\n\n"));
-	return createHotUpdaterConfigScaffoldFromBuilder(builder, { helperStatements });
+		named: ["secret"]
+	});
+	return createHotUpdaterConfigScaffoldFromBuilder(builder);
 };
 //#endregion
 //#region iac/init/index.ts

package/dist/{supabaseStorage-B131_auF.d.cts → supabaseStorage-DFBKC3sm.d.cts}

@@ -1,13 +1,13 @@
-import { EngineDatabase, StorageAdapterWith } from "@hot-updater/plugin-core";
+import { EngineDatabase, Lazy, StorageAdapterWith } from "@hot-updater/plugin-core";
 //#region src/supabaseConfig.d.ts
 type SupabaseServiceRoleConfig = {
   supabaseUrl: string;
   /**
    * The project's service role key, or a function that returns it, such as
-   * one that reads it with `secretEnv`: called on the first request, so a
-   * config loads without the key.
+   * `secret("<name>")` in `hot-updater.config.ts`: called on the first
+   * request, so a config loads without the key.
    */
-  supabaseServiceRoleKey: string | (() => string | Promise<string>);
+  supabaseServiceRoleKey: Lazy<string>;
 };
 //#endregion
 //#region src/supabaseDatabase.d.ts

package/dist/{supabaseStorage-B131_auF.d.mts → supabaseStorage-DFBKC3sm.d.mts}

@@ -1,13 +1,13 @@
-import { EngineDatabase, StorageAdapterWith } from "@hot-updater/plugin-core";
+import { EngineDatabase, Lazy, StorageAdapterWith } from "@hot-updater/plugin-core";
 //#region src/supabaseConfig.d.ts
 type SupabaseServiceRoleConfig = {
   supabaseUrl: string;
   /**
    * The project's service role key, or a function that returns it, such as
-   * one that reads it with `secretEnv`: called on the first request, so a
-   * config loads without the key.
+   * `secret("<name>")` in `hot-updater.config.ts`: called on the first
+   * request, so a config loads without the key.
    */
-  supabaseServiceRoleKey: string | (() => string | Promise<string>);
+  supabaseServiceRoleKey: Lazy<string>;
 };
 //#endregion
 //#region src/supabaseDatabase.d.ts

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/supabase",
   "type": "module",
-  "version": "1.2.0-rc.7",
+  "version": "1.2.0-rc.8",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -51,10 +51,10 @@
     "@supabase/supabase-js": "2.76.1",
     "hono": "4.12.34",
     "uuidv7": "^1.0.2",
-    "@hot-updater/protocol": "1.2.0-rc.7",
-    "@hot-updater/plugin-core": "1.2.0-rc.7",
-    "@hot-updater/cli-tools": "1.2.0-rc.7",
-    "@hot-updater/server": "1.2.0-rc.7"
+    "@hot-updater/protocol": "1.2.0-rc.8",
+    "@hot-updater/plugin-core": "1.2.0-rc.8",
+    "@hot-updater/server": "1.2.0-rc.8",
+    "@hot-updater/cli-tools": "1.2.0-rc.8"
   },
   "devDependencies": {
     "@electric-sql/pglite": "0.4.1",
@@ -64,9 +64,9 @@
     "execa": "9.5.2",
     "@types/node": "^20",
     "mime": "^4.0.4",
-    "@hot-updater/mock": "1.2.0-rc.7",
-    "@hot-updater/test-utils": "1.2.0-rc.7",
-    "@hot-updater/postgres": "1.2.0-rc.7"
+    "@hot-updater/mock": "1.2.0-rc.8",
+    "@hot-updater/test-utils": "1.2.0-rc.8",
+    "@hot-updater/postgres": "1.2.0-rc.8"
   },
   "scripts": {
     "build": "tsdown",