@layr-labs/ecloud-cli 1.0.0-devep2 → 1.0.0-devep3

package/VERSION

@@ -1,2 +1,2 @@
-version=1.0.0-devep2
-commit=6556c862a68b0eb9962b654b22d428d984c9e6a5
+version=1.0.0-devep3
+commit=ae7213bb77bd5448778a2774d92c43d3d9a7cb67

package/dist/commands/compute/app/configure/tls.js

@@ -8,60 +8,7 @@ import chalk from "chalk";
 import { input, confirm } from "@inquirer/prompts";
 
 // src/templates/tls/Caddyfile.tmpl
-var Caddyfile_default = `# Caddy configuration for automatic HTTPS
-# The DOMAIN environment variable will be injected at runtime
-
-{$DOMAIN:localhost} {
-    # TLS configuration - always use provided certificates generated by tls-keygen
-    tls /run/tls/fullchain.pem /run/tls/privkey.pem
-
-    # Reverse proxy to your Node.js application
-    # Modify the port to match your application (default: 3000)
-    reverse_proxy localhost:{$APP_PORT:3000} {
-        # Health check configuration
-        health_uri /health
-        health_interval 30s
-        health_timeout 5s
-        health_status 200
-    }
-
-    # Custom headers
-    header {
-        # Security headers
-        X-Content-Type-Options "nosniff"
-        X-Frame-Options "DENY"
-        X-XSS-Protection "1; mode=block"
-        Referrer-Policy "strict-origin-when-cross-origin"
-
-        # Remove server header
-        -Server
-    }
-
-    # Logging
-    log {
-        output stdout
-        format console
-        level INFO
-    }
-
-    # Request size limits
-    request_body {
-        max_size 10MB
-    }
-}
-
-# HTTP endpoint (optional, for health checks or redirects)
-:80 {
-    # Redirect to HTTPS only when host isn't localhost
-    @for_domain expression {host} != "localhost"
-    redir @for_domain https://{host}{uri} permanent
-
-    # Health check endpoint (always available via HTTP)
-    handle /health {
-        respond "OK" 200
-    }
-}
-`;
+var Caddyfile_default = '# Caddy configuration for automatic HTTPS\n#\n# Two sites can be configured at runtime via env vars that\n# ecloud-platform / the CLI inject into tee-env metadata:\n#\n#   ECLOUD_PLATFORM_HOST \u2014 the platform-derived hostname\n#                          (<addr>.<env>.eigencloud.xyz). Always set\n#                          for platform-routed apps. Cert at\n#                          /run/tls/platform/fullchain.pem.\n#   DOMAIN               \u2014 optional user-supplied custom domain.\n#                          Cert at /run/tls/domain/fullchain.pem.\n#\n# When a variable is unset, Caddy substitutes the default listed\n# after the colon. We use distinct defaults per site so each block\n# binds to a unique name at bootstrap \u2014 both blocks overlapping\n# on "localhost" would cause Caddy to reject the config.\n{$ECLOUD_PLATFORM_HOST:localhost.platform.invalid} {\n    tls /run/tls/platform/fullchain.pem /run/tls/platform/privkey.pem\n\n    reverse_proxy localhost:{$APP_PORT:3000} {\n        health_uri /health\n        health_interval 30s\n        health_timeout 5s\n        health_status 200\n    }\n\n    header {\n        X-Content-Type-Options "nosniff"\n        X-Frame-Options "DENY"\n        X-XSS-Protection "1; mode=block"\n        Referrer-Policy "strict-origin-when-cross-origin"\n        -Server\n    }\n\n    log {\n        output stdout\n        format console\n        level INFO\n    }\n\n    request_body {\n        max_size 10MB\n    }\n}\n\n{$DOMAIN:localhost.user.invalid} {\n    tls /run/tls/domain/fullchain.pem /run/tls/domain/privkey.pem\n\n    reverse_proxy localhost:{$APP_PORT:3000} {\n        health_uri /health\n        health_interval 30s\n        health_timeout 5s\n        health_status 200\n    }\n\n    header {\n        X-Content-Type-Options "nosniff"\n        X-Frame-Options "DENY"\n        X-XSS-Protection "1; mode=block"\n        Referrer-Policy "strict-origin-when-cross-origin"\n        -Server\n    }\n\n    log {\n        output stdout\n        format console\n        level INFO\n    }\n\n    request_body {\n        max_size 10MB\n    }\n}\n\n# HTTP endpoint (optional, for health checks or redirects)\n:80 {\n    # Redirect to HTTPS for any real (non-placeholder) host\n    @for_domain expression {host} != "localhost.platform.invalid" && {host} != "localhost.user.invalid" && {host} != "localhost"\n    redir @for_domain https://{host}{uri} permanent\n\n    # Health check endpoint (always available via HTTP)\n    handle /health {\n        respond "OK" 200\n    }\n}\n';
 
 // src/templates/tls/templates.ts
 function getCaddyfileTemplate() {
@@ -106,24 +53,31 @@ function validatePort(value) {
   return true;
 }
 var ConfigureTLS = class _ConfigureTLS extends Command {
-  static description = "Configure TLS for your application";
-  static summary = `Configures TLS for your EigenCloud application.
+  static description = "Configure a custom domain for your app (optional)";
+  static summary = `Configures a custom domain for your EigenCloud application.
 
-Prompts for domain and TLS settings (or accepts them via flags), then:
-- Creates a Caddyfile for automatic HTTPS via Caddy reverse proxy
-- Appends TLS variables to .env with your values
+By default, every deployed app is reachable at its platform-derived
+hostname (<app-address>.<env-name>.eigencloud.xyz) with TLS already
+set up. You only need this command if you also want the app reachable
+at a custom domain you control.
+
+Running this command:
+- Creates a Caddyfile serving both the platform hostname and your
+  custom domain
+- Appends DOMAIN + Caddy settings to .env
 - Appends TLS placeholders to .env.example
 
-TLS certificates are automatically obtained via Let's Encrypt using the tls-keygen tool.`;
+After running this, set a DNS A record for your custom domain
+pointing at the platform's proxy IP, then deploy/upgrade. Certs for
+both hostnames are obtained via Let's Encrypt at VM boot.`;
   static examples = [
-    "<%= config.bin %> compute app configure tls",
     "<%= config.bin %> compute app configure tls --domain myapp.example.com",
     "<%= config.bin %> compute app configure tls --domain myapp.example.com --app-port 8080",
     "<%= config.bin %> compute app configure tls --domain myapp.example.com --no-acme-staging"
   ];
   static flags = {
     domain: Flags.string({
-      description: "Domain name for TLS certificate"
+      description: "Custom domain name for TLS certificate (additive to the platform hostname)"
     }),
     "app-port": Flags.string({
       description: "Port your application listens on",
@@ -145,7 +99,7 @@ TLS certificates are automatically obtained via Let's Encrypt using the tls-keyg
     const cwd = process.cwd();
     const envPath = path.join(cwd, ".env");
     if (envFileHasTlsConfig(envPath)) {
-      this.warn("TLS is already configured in .env (DOMAIN is set). Skipping.");
+      this.warn("Custom domain is already configured in .env (DOMAIN is set). Skipping.");
       return;
     }
     const caddyfilePath = path.join(cwd, "Caddyfile");
@@ -160,14 +114,14 @@ TLS certificates are automatically obtained via Let's Encrypt using the tls-keyg
     let domain = flags.domain;
     if (!domain) {
       domain = await input({
-        message: "Domain name:",
+        message: "Custom domain name:",
         validate: validateDomain
       });
     } else {
       const result = validateDomain(domain);
       if (result !== true) this.error(result);
     }
-    let appPort = flags["app-port"];
+    const appPort = flags["app-port"];
     const portResult = validatePort(appPort);
     if (portResult !== true) this.error(portResult);
     const acmeStaging = flags["acme-staging"] !== void 0 ? flags["acme-staging"] : await confirm({
@@ -179,12 +133,18 @@ TLS certificates are automatically obtained via Let's Encrypt using the tls-keyg
       default: false
     });
     this.log("");
-    this.log(chalk.bold("TLS Configuration:"));
-    this.log(`  Domain:          ${domain.trim()}`);
+    this.log(chalk.bold("Custom domain configuration:"));
+    this.log(`  Custom domain:   ${domain.trim()}`);
     this.log(`  App port:        ${appPort.trim()}`);
     this.log(`  ACME staging:    ${acmeStaging}`);
     this.log(`  Caddy logs:      ${enableCaddyLogs}`);
     this.log("");
+    this.log(
+      chalk.gray(
+        "Note: your app will also be reachable at its platform-derived hostname (<app-address>.<env>.eigencloud.xyz) with its own cert."
+      )
+    );
+    this.log("");
     if (!flags.domain) {
       const confirmed = await confirm({
         message: "Write these settings to .env?",
@@ -210,12 +170,12 @@ TLS certificates are automatically obtained via Let's Encrypt using the tls-keyg
       this.log(`Updated .env.example`);
     }
     this.log("");
-    this.log(chalk.green("TLS configured successfully"));
+    this.log(chalk.green("Custom domain configured successfully"));
     this.log("");
     this.log("Next steps:");
     this.log("");
-    this.log("1. Set up DNS A record pointing to your instance IP");
-    this.log("   Run 'ecloud compute app list' to get IP address");
+    this.log(`1. Set up a DNS A record for ${domain.trim()} pointing at the platform proxy IP`);
+    this.log("   Run 'ecloud compute app list' to confirm the IP once the app is running");
     this.log("");
     this.log("2. Deploy or upgrade:");
     this.log("   ecloud compute app deploy    # new app");

package/dist/commands/compute/app/configure/tls.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/commands/compute/app/configure/tls.ts","../../../../../src/templates/tls/Caddyfile.tmpl","../../../../../src/templates/tls/templates.ts"],"sourcesContent":["import { Command, Flags } from \"@oclif/core\";\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport chalk from \"chalk\";\nimport { input, confirm } from \"@inquirer/prompts\";\nimport {\n  getCaddyfileTemplate,\n  getTlsEnvBlock,\n  TLS_ENV_EXAMPLE_BLOCK,\n} from \"../../../../templates/tls/templates.js\";\n\nfunction envFileHasTlsConfig(filePath: string): boolean {\n  if (!fs.existsSync(filePath)) return false;\n  const content = fs.readFileSync(filePath, \"utf-8\");\n  return /^DOMAIN=/m.test(content);\n}\n\nfunction validateDomain(value: string): true | string {\n  const trimmed = value.trim();\n  if (!trimmed) return \"Domain is required\";\n  if (trimmed.toLowerCase() === \"localhost\") return \"Domain cannot be localhost\";\n  if (!/^[a-zA-Z0-9]([a-zA-Z0-9-]*\\.)+[a-zA-Z]{2,}$/.test(trimmed))\n    return \"Enter a valid domain (e.g. myapp.example.com)\";\n  return true;\n}\n\nfunction validatePort(value: string): true | string {\n  const num = Number(value.trim());\n  if (!Number.isInteger(num) || num < 1 || num > 65535) return \"Enter a valid port (1-65535)\";\n  return true;\n}\n\nexport default class ConfigureTLS extends Command {\n  static description = \"Configure TLS for your application\";\n\n  static summary = `Configures TLS for your EigenCloud application.\n\nPrompts for domain and TLS settings (or accepts them via flags), then:\n- Creates a Caddyfile for automatic HTTPS via Caddy reverse proxy\n- Appends TLS variables to .env with your values\n- Appends TLS placeholders to .env.example\n\nTLS certificates are automatically obtained via Let's Encrypt using the tls-keygen tool.`;\n\n  static examples = [\n    \"<%= config.bin %> compute app configure tls\",\n    \"<%= config.bin %> compute app configure tls --domain myapp.example.com\",\n    \"<%= config.bin %> compute app configure tls --domain myapp.example.com --app-port 8080\",\n    \"<%= config.bin %> compute app configure tls --domain myapp.example.com --no-acme-staging\",\n  ];\n\n  static flags = {\n    domain: Flags.string({\n      description: \"Domain name for TLS certificate\",\n    }),\n    \"app-port\": Flags.string({\n      description: \"Port your application listens on\",\n      default: \"3000\",\n    }),\n    \"acme-staging\": Flags.boolean({\n      description: \"Use Let's Encrypt staging environment\",\n      default: true,\n      allowNo: true,\n    }),\n    \"caddy-logs\": Flags.boolean({\n      description: \"Enable Caddy debug logs\",\n      default: false,\n      allowNo: true,\n    }),\n  };\n\n  async run() {\n    const { flags } = await this.parse(ConfigureTLS);\n    const cwd = process.cwd();\n\n    // Check if TLS is already configured in .env\n    const envPath = path.join(cwd, \".env\");\n    if (envFileHasTlsConfig(envPath)) {\n      this.warn(\"TLS is already configured in .env (DOMAIN is set). Skipping.\");\n      return;\n    }\n\n    // Write Caddyfile\n    const caddyfilePath = path.join(cwd, \"Caddyfile\");\n    if (fs.existsSync(caddyfilePath)) {\n      this.log(\"Caddyfile already exists, keeping existing file.\");\n    } else {\n      const caddyfileContent = getCaddyfileTemplate();\n      fs.writeFileSync(caddyfilePath, caddyfileContent, { mode: 0o644 });\n      this.log(\"Created Caddyfile\");\n    }\n\n    this.log(\"\");\n\n    // Resolve values: use flags if provided, otherwise prompt\n    let domain = flags.domain;\n    if (!domain) {\n      domain = await input({\n        message: \"Domain name:\",\n        validate: validateDomain,\n      });\n    } else {\n      const result = validateDomain(domain);\n      if (result !== true) this.error(result);\n    }\n\n    let appPort = flags[\"app-port\"];\n    // Only prompt if the user didn't pass --app-port at all (default is \"3000\")\n    // Since oclif always provides the default, we use the default directly\n    const portResult = validatePort(appPort);\n    if (portResult !== true) this.error(portResult);\n\n    const acmeStaging =\n      flags[\"acme-staging\"] !== undefined\n        ? flags[\"acme-staging\"]\n        : await confirm({\n            message:\n              \"Use Let's Encrypt staging? (recommended for first deploy to avoid rate limits)\",\n            default: true,\n          });\n\n    const enableCaddyLogs =\n      flags[\"caddy-logs\"] !== undefined\n        ? flags[\"caddy-logs\"]\n        : await confirm({\n            message: \"Enable Caddy debug logs?\",\n            default: false,\n          });\n\n    // Show summary\n    this.log(\"\");\n    this.log(chalk.bold(\"TLS Configuration:\"));\n    this.log(`  Domain:          ${domain.trim()}`);\n    this.log(`  App port:        ${appPort.trim()}`);\n    this.log(`  ACME staging:    ${acmeStaging}`);\n    this.log(`  Caddy logs:      ${enableCaddyLogs}`);\n    this.log(\"\");\n\n    // Only ask for confirmation in interactive mode (no --domain flag)\n    if (!flags.domain) {\n      const confirmed = await confirm({\n        message: \"Write these settings to .env?\",\n        default: true,\n      });\n\n      if (!confirmed) {\n        this.log(\"Cancelled.\");\n        return;\n      }\n    }\n\n    const vars = {\n      domain: domain.trim(),\n      appPort: appPort.trim(),\n      acmeStaging,\n      enableCaddyLogs,\n    };\n\n    // Append to .env\n    const envBlock = getTlsEnvBlock(vars);\n    fs.appendFileSync(envPath, envBlock, { mode: 0o644 });\n    this.log(`Updated .env`);\n\n    // Append to .env.example (with placeholders, skip if already has DOMAIN)\n    const envExamplePath = path.join(cwd, \".env.example\");\n    if (!envFileHasTlsConfig(envExamplePath)) {\n      fs.appendFileSync(envExamplePath, TLS_ENV_EXAMPLE_BLOCK, { mode: 0o644 });\n      this.log(`Updated .env.example`);\n    }\n\n    // Print next steps\n    this.log(\"\");\n    this.log(chalk.green(\"TLS configured successfully\"));\n    this.log(\"\");\n    this.log(\"Next steps:\");\n    this.log(\"\");\n    this.log(\"1. Set up DNS A record pointing to your instance IP\");\n    this.log(\"   Run 'ecloud compute app list' to get IP address\");\n    this.log(\"\");\n    this.log(\"2. Deploy or upgrade:\");\n    this.log(\"   ecloud compute app deploy    # new app\");\n    this.log(\"   ecloud compute app upgrade   # existing app\");\n    this.log(\"\");\n\n    if (acmeStaging) {\n      this.log(chalk.yellow(\"Note: ACME_STAGING is enabled (recommended for first deploy)\"));\n      this.log(\"Once verified, switch to production certs:\");\n      this.log(\"  1. Set ACME_STAGING=false in .env\");\n      this.log(\"  2. Set ACME_FORCE_ISSUE=true in .env (one-time)\");\n      this.log(\"  3. Run: ecloud compute app upgrade\");\n      this.log(\"\");\n    }\n\n    this.log(\"Let's Encrypt rate limit: 5 certificates/week per domain\");\n  }\n}\n","# Caddy configuration for automatic HTTPS\n# The DOMAIN environment variable will be injected at runtime\n\n{$DOMAIN:localhost} {\n    # TLS configuration - always use provided certificates generated by tls-keygen\n    tls /run/tls/fullchain.pem /run/tls/privkey.pem\n\n    # Reverse proxy to your Node.js application\n    # Modify the port to match your application (default: 3000)\n    reverse_proxy localhost:{$APP_PORT:3000} {\n        # Health check configuration\n        health_uri /health\n        health_interval 30s\n        health_timeout 5s\n        health_status 200\n    }\n\n    # Custom headers\n    header {\n        # Security headers\n        X-Content-Type-Options \"nosniff\"\n        X-Frame-Options \"DENY\"\n        X-XSS-Protection \"1; mode=block\"\n        Referrer-Policy \"strict-origin-when-cross-origin\"\n\n        # Remove server header\n        -Server\n    }\n\n    # Logging\n    log {\n        output stdout\n        format console\n        level INFO\n    }\n\n    # Request size limits\n    request_body {\n        max_size 10MB\n    }\n}\n\n# HTTP endpoint (optional, for health checks or redirects)\n:80 {\n    # Redirect to HTTPS only when host isn't localhost\n    @for_domain expression {host} != \"localhost\"\n    redir @for_domain https://{host}{uri} permanent\n\n    # Health check endpoint (always available via HTTP)\n    handle /health {\n        respond \"OK\" 200\n    }\n}\n","/**\n * TLS configuration templates\n */\n\nimport caddyfileTemplate from \"./Caddyfile.tmpl\";\n\n/**\n * Get the Caddyfile template\n */\nexport function getCaddyfileTemplate(): string {\n  return caddyfileTemplate;\n}\n\nexport interface TlsEnvVars {\n  domain: string;\n  appPort: string;\n  acmeStaging: boolean;\n  enableCaddyLogs: boolean;\n}\n\n/**\n * Generate the TLS env block with user-provided values for .env\n */\nexport function getTlsEnvBlock(vars: TlsEnvVars): string {\n  return `\n# TLS Configuration\nDOMAIN=${vars.domain}\nAPP_PORT=${vars.appPort}\nENABLE_CADDY_LOGS=${vars.enableCaddyLogs}\nACME_STAGING=${vars.acmeStaging}\nACME_FORCE_ISSUE=false\n`;\n}\n\n/**\n * Placeholder TLS block for .env.example\n */\nexport const TLS_ENV_EXAMPLE_BLOCK = `\n# TLS Configuration\n# DOMAIN=yourdomain.com\n# APP_PORT=3000\n# ENABLE_CADDY_LOGS=false\n# ACME_STAGING=false\n# ACME_FORCE_ISSUE=false\n`;\n"],"mappings":";;;AAAA,SAAS,SAAS,aAAa;AAC/B,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,OAAO,WAAW;AAClB,SAAS,OAAO,eAAe;;;ACJ/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACSO,SAAS,uBAA+B;AAC7C,SAAO;AACT;AAYO,SAAS,eAAe,MAA0B;AACvD,SAAO;AAAA;AAAA,SAEA,KAAK,MAAM;AAAA,WACT,KAAK,OAAO;AAAA,oBACH,KAAK,eAAe;AAAA,eACzB,KAAK,WAAW;AAAA;AAAA;AAG/B;AAKO,IAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AF1BrC,SAAS,oBAAoB,UAA2B;AACtD,MAAI,CAAI,cAAW,QAAQ,EAAG,QAAO;AACrC,QAAM,UAAa,gBAAa,UAAU,OAAO;AACjD,SAAO,YAAY,KAAK,OAAO;AACjC;AAEA,SAAS,eAAe,OAA8B;AACpD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,YAAY,MAAM,YAAa,QAAO;AAClD,MAAI,CAAC,8CAA8C,KAAK,OAAO;AAC7D,WAAO;AACT,SAAO;AACT;AAEA,SAAS,aAAa,OAA8B;AAClD,QAAM,MAAM,OAAO,MAAM,KAAK,CAAC;AAC/B,MAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,MAAO,QAAO;AAC7D,SAAO;AACT;AAEA,IAAqB,eAArB,MAAqB,sBAAqB,QAAQ;AAAA,EAChD,OAAO,cAAc;AAAA,EAErB,OAAO,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASjB,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,QAAQ,MAAM,OAAO;AAAA,MACnB,aAAa;AAAA,IACf,CAAC;AAAA,IACD,YAAY,MAAM,OAAO;AAAA,MACvB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,IACD,gBAAgB,MAAM,QAAQ;AAAA,MAC5B,aAAa;AAAA,MACb,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,IACD,cAAc,MAAM,QAAQ;AAAA,MAC1B,aAAa;AAAA,MACb,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAM;AACV,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,aAAY;AAC/C,UAAM,MAAM,QAAQ,IAAI;AAGxB,UAAM,UAAe,UAAK,KAAK,MAAM;AACrC,QAAI,oBAAoB,OAAO,GAAG;AAChC,WAAK,KAAK,8DAA8D;AACxE;AAAA,IACF;AAGA,UAAM,gBAAqB,UAAK,KAAK,WAAW;AAChD,QAAO,cAAW,aAAa,GAAG;AAChC,WAAK,IAAI,kDAAkD;AAAA,IAC7D,OAAO;AACL,YAAM,mBAAmB,qBAAqB;AAC9C,MAAG,iBAAc,eAAe,kBAAkB,EAAE,MAAM,IAAM,CAAC;AACjE,WAAK,IAAI,mBAAmB;AAAA,IAC9B;AAEA,SAAK,IAAI,EAAE;AAGX,QAAI,SAAS,MAAM;AACnB,QAAI,CAAC,QAAQ;AACX,eAAS,MAAM,MAAM;AAAA,QACnB,SAAS;AAAA,QACT,UAAU;AAAA,MACZ,CAAC;AAAA,IACH,OAAO;AACL,YAAM,SAAS,eAAe,MAAM;AACpC,UAAI,WAAW,KAAM,MAAK,MAAM,MAAM;AAAA,IACxC;AAEA,QAAI,UAAU,MAAM,UAAU;AAG9B,UAAM,aAAa,aAAa,OAAO;AACvC,QAAI,eAAe,KAAM,MAAK,MAAM,UAAU;AAE9C,UAAM,cACJ,MAAM,cAAc,MAAM,SACtB,MAAM,cAAc,IACpB,MAAM,QAAQ;AAAA,MACZ,SACE;AAAA,MACF,SAAS;AAAA,IACX,CAAC;AAEP,UAAM,kBACJ,MAAM,YAAY,MAAM,SACpB,MAAM,YAAY,IAClB,MAAM,QAAQ;AAAA,MACZ,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAGP,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,MAAM,KAAK,oBAAoB,CAAC;AACzC,SAAK,IAAI,sBAAsB,OAAO,KAAK,CAAC,EAAE;AAC9C,SAAK,IAAI,sBAAsB,QAAQ,KAAK,CAAC,EAAE;AAC/C,SAAK,IAAI,sBAAsB,WAAW,EAAE;AAC5C,SAAK,IAAI,sBAAsB,eAAe,EAAE;AAChD,SAAK,IAAI,EAAE;AAGX,QAAI,CAAC,MAAM,QAAQ;AACjB,YAAM,YAAY,MAAM,QAAQ;AAAA,QAC9B,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,WAAW;AACd,aAAK,IAAI,YAAY;AACrB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX,QAAQ,OAAO,KAAK;AAAA,MACpB,SAAS,QAAQ,KAAK;AAAA,MACtB;AAAA,MACA;AAAA,IACF;AAGA,UAAM,WAAW,eAAe,IAAI;AACpC,IAAG,kBAAe,SAAS,UAAU,EAAE,MAAM,IAAM,CAAC;AACpD,SAAK,IAAI,cAAc;AAGvB,UAAM,iBAAsB,UAAK,KAAK,cAAc;AACpD,QAAI,CAAC,oBAAoB,cAAc,GAAG;AACxC,MAAG,kBAAe,gBAAgB,uBAAuB,EAAE,MAAM,IAAM,CAAC;AACxE,WAAK,IAAI,sBAAsB;AAAA,IACjC;AAGA,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,MAAM,MAAM,6BAA6B,CAAC;AACnD,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,aAAa;AACtB,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,qDAAqD;AAC9D,SAAK,IAAI,oDAAoD;AAC7D,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,uBAAuB;AAChC,SAAK,IAAI,2CAA2C;AACpD,SAAK,IAAI,gDAAgD;AACzD,SAAK,IAAI,EAAE;AAEX,QAAI,aAAa;AACf,WAAK,IAAI,MAAM,OAAO,8DAA8D,CAAC;AACrF,WAAK,IAAI,4CAA4C;AACrD,WAAK,IAAI,qCAAqC;AAC9C,WAAK,IAAI,mDAAmD;AAC5D,WAAK,IAAI,sCAAsC;AAC/C,WAAK,IAAI,EAAE;AAAA,IACb;AAEA,SAAK,IAAI,0DAA0D;AAAA,EACrE;AACF;","names":[]}
+{"version":3,"sources":["../../../../../src/commands/compute/app/configure/tls.ts","../../../../../src/templates/tls/Caddyfile.tmpl","../../../../../src/templates/tls/templates.ts"],"sourcesContent":["import { Command, Flags } from \"@oclif/core\";\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport chalk from \"chalk\";\nimport { input, confirm } from \"@inquirer/prompts\";\nimport {\n  getCaddyfileTemplate,\n  getTlsEnvBlock,\n  TLS_ENV_EXAMPLE_BLOCK,\n} from \"../../../../templates/tls/templates.js\";\n\nfunction envFileHasTlsConfig(filePath: string): boolean {\n  if (!fs.existsSync(filePath)) return false;\n  const content = fs.readFileSync(filePath, \"utf-8\");\n  return /^DOMAIN=/m.test(content);\n}\n\nfunction validateDomain(value: string): true | string {\n  const trimmed = value.trim();\n  if (!trimmed) return \"Domain is required\";\n  if (trimmed.toLowerCase() === \"localhost\") return \"Domain cannot be localhost\";\n  if (!/^[a-zA-Z0-9]([a-zA-Z0-9-]*\\.)+[a-zA-Z]{2,}$/.test(trimmed))\n    return \"Enter a valid domain (e.g. myapp.example.com)\";\n  return true;\n}\n\nfunction validatePort(value: string): true | string {\n  const num = Number(value.trim());\n  if (!Number.isInteger(num) || num < 1 || num > 65535) return \"Enter a valid port (1-65535)\";\n  return true;\n}\n\nexport default class ConfigureTLS extends Command {\n  static description = \"Configure a custom domain for your app (optional)\";\n\n  static summary = `Configures a custom domain for your EigenCloud application.\n\nBy default, every deployed app is reachable at its platform-derived\nhostname (<app-address>.<env-name>.eigencloud.xyz) with TLS already\nset up. You only need this command if you also want the app reachable\nat a custom domain you control.\n\nRunning this command:\n- Creates a Caddyfile serving both the platform hostname and your\n  custom domain\n- Appends DOMAIN + Caddy settings to .env\n- Appends TLS placeholders to .env.example\n\nAfter running this, set a DNS A record for your custom domain\npointing at the platform's proxy IP, then deploy/upgrade. Certs for\nboth hostnames are obtained via Let's Encrypt at VM boot.`;\n\n  static examples = [\n    \"<%= config.bin %> compute app configure tls --domain myapp.example.com\",\n    \"<%= config.bin %> compute app configure tls --domain myapp.example.com --app-port 8080\",\n    \"<%= config.bin %> compute app configure tls --domain myapp.example.com --no-acme-staging\",\n  ];\n\n  static flags = {\n    domain: Flags.string({\n      description: \"Custom domain name for TLS certificate (additive to the platform hostname)\",\n    }),\n    \"app-port\": Flags.string({\n      description: \"Port your application listens on\",\n      default: \"3000\",\n    }),\n    \"acme-staging\": Flags.boolean({\n      description: \"Use Let's Encrypt staging environment\",\n      default: true,\n      allowNo: true,\n    }),\n    \"caddy-logs\": Flags.boolean({\n      description: \"Enable Caddy debug logs\",\n      default: false,\n      allowNo: true,\n    }),\n  };\n\n  async run() {\n    const { flags } = await this.parse(ConfigureTLS);\n    const cwd = process.cwd();\n\n    const envPath = path.join(cwd, \".env\");\n    if (envFileHasTlsConfig(envPath)) {\n      this.warn(\"Custom domain is already configured in .env (DOMAIN is set). Skipping.\");\n      return;\n    }\n\n    // Write Caddyfile. The same template also serves the platform\n    // hostname so the file is safe to drop in even if the user\n    // later removes the DOMAIN line from .env.\n    const caddyfilePath = path.join(cwd, \"Caddyfile\");\n    if (fs.existsSync(caddyfilePath)) {\n      this.log(\"Caddyfile already exists, keeping existing file.\");\n    } else {\n      const caddyfileContent = getCaddyfileTemplate();\n      fs.writeFileSync(caddyfilePath, caddyfileContent, { mode: 0o644 });\n      this.log(\"Created Caddyfile\");\n    }\n\n    this.log(\"\");\n\n    // Resolve values: use flags if provided, otherwise prompt\n    let domain = flags.domain;\n    if (!domain) {\n      domain = await input({\n        message: \"Custom domain name:\",\n        validate: validateDomain,\n      });\n    } else {\n      const result = validateDomain(domain);\n      if (result !== true) this.error(result);\n    }\n\n    const appPort = flags[\"app-port\"];\n    const portResult = validatePort(appPort);\n    if (portResult !== true) this.error(portResult);\n\n    const acmeStaging =\n      flags[\"acme-staging\"] !== undefined\n        ? flags[\"acme-staging\"]\n        : await confirm({\n            message:\n              \"Use Let's Encrypt staging? (recommended for first deploy to avoid rate limits)\",\n            default: true,\n          });\n\n    const enableCaddyLogs =\n      flags[\"caddy-logs\"] !== undefined\n        ? flags[\"caddy-logs\"]\n        : await confirm({\n            message: \"Enable Caddy debug logs?\",\n            default: false,\n          });\n\n    // Show summary\n    this.log(\"\");\n    this.log(chalk.bold(\"Custom domain configuration:\"));\n    this.log(`  Custom domain:   ${domain.trim()}`);\n    this.log(`  App port:        ${appPort.trim()}`);\n    this.log(`  ACME staging:    ${acmeStaging}`);\n    this.log(`  Caddy logs:      ${enableCaddyLogs}`);\n    this.log(\"\");\n    this.log(\n      chalk.gray(\n        \"Note: your app will also be reachable at its platform-derived hostname (<app-address>.<env>.eigencloud.xyz) with its own cert.\",\n      ),\n    );\n    this.log(\"\");\n\n    // Only ask for confirmation in interactive mode (no --domain flag)\n    if (!flags.domain) {\n      const confirmed = await confirm({\n        message: \"Write these settings to .env?\",\n        default: true,\n      });\n\n      if (!confirmed) {\n        this.log(\"Cancelled.\");\n        return;\n      }\n    }\n\n    const vars = {\n      domain: domain.trim(),\n      appPort: appPort.trim(),\n      acmeStaging,\n      enableCaddyLogs,\n    };\n\n    // Append to .env\n    const envBlock = getTlsEnvBlock(vars);\n    fs.appendFileSync(envPath, envBlock, { mode: 0o644 });\n    this.log(`Updated .env`);\n\n    // Append to .env.example (with placeholders, skip if already has DOMAIN)\n    const envExamplePath = path.join(cwd, \".env.example\");\n    if (!envFileHasTlsConfig(envExamplePath)) {\n      fs.appendFileSync(envExamplePath, TLS_ENV_EXAMPLE_BLOCK, { mode: 0o644 });\n      this.log(`Updated .env.example`);\n    }\n\n    // Print next steps\n    this.log(\"\");\n    this.log(chalk.green(\"Custom domain configured successfully\"));\n    this.log(\"\");\n    this.log(\"Next steps:\");\n    this.log(\"\");\n    this.log(`1. Set up a DNS A record for ${domain.trim()} pointing at the platform proxy IP`);\n    this.log(\"   Run 'ecloud compute app list' to confirm the IP once the app is running\");\n    this.log(\"\");\n    this.log(\"2. Deploy or upgrade:\");\n    this.log(\"   ecloud compute app deploy    # new app\");\n    this.log(\"   ecloud compute app upgrade   # existing app\");\n    this.log(\"\");\n\n    if (acmeStaging) {\n      this.log(chalk.yellow(\"Note: ACME_STAGING is enabled (recommended for first deploy)\"));\n      this.log(\"Once verified, switch to production certs:\");\n      this.log(\"  1. Set ACME_STAGING=false in .env\");\n      this.log(\"  2. Set ACME_FORCE_ISSUE=true in .env (one-time)\");\n      this.log(\"  3. Run: ecloud compute app upgrade\");\n      this.log(\"\");\n    }\n\n    this.log(\"Let's Encrypt rate limit: 5 certificates/week per domain\");\n  }\n}\n","# Caddy configuration for automatic HTTPS\n#\n# Two sites can be configured at runtime via env vars that\n# ecloud-platform / the CLI inject into tee-env metadata:\n#\n#   ECLOUD_PLATFORM_HOST — the platform-derived hostname\n#                          (<addr>.<env>.eigencloud.xyz). Always set\n#                          for platform-routed apps. Cert at\n#                          /run/tls/platform/fullchain.pem.\n#   DOMAIN               — optional user-supplied custom domain.\n#                          Cert at /run/tls/domain/fullchain.pem.\n#\n# When a variable is unset, Caddy substitutes the default listed\n# after the colon. We use distinct defaults per site so each block\n# binds to a unique name at bootstrap — both blocks overlapping\n# on \"localhost\" would cause Caddy to reject the config.\n{$ECLOUD_PLATFORM_HOST:localhost.platform.invalid} {\n    tls /run/tls/platform/fullchain.pem /run/tls/platform/privkey.pem\n\n    reverse_proxy localhost:{$APP_PORT:3000} {\n        health_uri /health\n        health_interval 30s\n        health_timeout 5s\n        health_status 200\n    }\n\n    header {\n        X-Content-Type-Options \"nosniff\"\n        X-Frame-Options \"DENY\"\n        X-XSS-Protection \"1; mode=block\"\n        Referrer-Policy \"strict-origin-when-cross-origin\"\n        -Server\n    }\n\n    log {\n        output stdout\n        format console\n        level INFO\n    }\n\n    request_body {\n        max_size 10MB\n    }\n}\n\n{$DOMAIN:localhost.user.invalid} {\n    tls /run/tls/domain/fullchain.pem /run/tls/domain/privkey.pem\n\n    reverse_proxy localhost:{$APP_PORT:3000} {\n        health_uri /health\n        health_interval 30s\n        health_timeout 5s\n        health_status 200\n    }\n\n    header {\n        X-Content-Type-Options \"nosniff\"\n        X-Frame-Options \"DENY\"\n        X-XSS-Protection \"1; mode=block\"\n        Referrer-Policy \"strict-origin-when-cross-origin\"\n        -Server\n    }\n\n    log {\n        output stdout\n        format console\n        level INFO\n    }\n\n    request_body {\n        max_size 10MB\n    }\n}\n\n# HTTP endpoint (optional, for health checks or redirects)\n:80 {\n    # Redirect to HTTPS for any real (non-placeholder) host\n    @for_domain expression {host} != \"localhost.platform.invalid\" && {host} != \"localhost.user.invalid\" && {host} != \"localhost\"\n    redir @for_domain https://{host}{uri} permanent\n\n    # Health check endpoint (always available via HTTP)\n    handle /health {\n        respond \"OK\" 200\n    }\n}\n","/**\n * TLS configuration templates\n */\n\nimport caddyfileTemplate from \"./Caddyfile.tmpl\";\n\n/**\n * Get the Caddyfile template\n */\nexport function getCaddyfileTemplate(): string {\n  return caddyfileTemplate;\n}\n\nexport interface TlsEnvVars {\n  domain: string;\n  appPort: string;\n  acmeStaging: boolean;\n  enableCaddyLogs: boolean;\n}\n\n/**\n * Generate the TLS env block with user-provided values for .env\n */\nexport function getTlsEnvBlock(vars: TlsEnvVars): string {\n  return `\n# TLS Configuration\nDOMAIN=${vars.domain}\nAPP_PORT=${vars.appPort}\nENABLE_CADDY_LOGS=${vars.enableCaddyLogs}\nACME_STAGING=${vars.acmeStaging}\nACME_FORCE_ISSUE=false\n`;\n}\n\n/**\n * Placeholder TLS block for .env.example\n */\nexport const TLS_ENV_EXAMPLE_BLOCK = `\n# TLS Configuration\n# DOMAIN=yourdomain.com\n# APP_PORT=3000\n# ENABLE_CADDY_LOGS=false\n# ACME_STAGING=false\n# ACME_FORCE_ISSUE=false\n`;\n"],"mappings":";;;AAAA,SAAS,SAAS,aAAa;AAC/B,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,OAAO,WAAW;AAClB,SAAS,OAAO,eAAe;;;ACJ/B;;;ACSO,SAAS,uBAA+B;AAC7C,SAAO;AACT;AAYO,SAAS,eAAe,MAA0B;AACvD,SAAO;AAAA;AAAA,SAEA,KAAK,MAAM;AAAA,WACT,KAAK,OAAO;AAAA,oBACH,KAAK,eAAe;AAAA,eACzB,KAAK,WAAW;AAAA;AAAA;AAG/B;AAKO,IAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AF1BrC,SAAS,oBAAoB,UAA2B;AACtD,MAAI,CAAI,cAAW,QAAQ,EAAG,QAAO;AACrC,QAAM,UAAa,gBAAa,UAAU,OAAO;AACjD,SAAO,YAAY,KAAK,OAAO;AACjC;AAEA,SAAS,eAAe,OAA8B;AACpD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,YAAY,MAAM,YAAa,QAAO;AAClD,MAAI,CAAC,8CAA8C,KAAK,OAAO;AAC7D,WAAO;AACT,SAAO;AACT;AAEA,SAAS,aAAa,OAA8B;AAClD,QAAM,MAAM,OAAO,MAAM,KAAK,CAAC;AAC/B,MAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,MAAO,QAAO;AAC7D,SAAO;AACT;AAEA,IAAqB,eAArB,MAAqB,sBAAqB,QAAQ;AAAA,EAChD,OAAO,cAAc;AAAA,EAErB,OAAO,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBjB,OAAO,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO,QAAQ;AAAA,IACb,QAAQ,MAAM,OAAO;AAAA,MACnB,aAAa;AAAA,IACf,CAAC;AAAA,IACD,YAAY,MAAM,OAAO;AAAA,MACvB,aAAa;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,IACD,gBAAgB,MAAM,QAAQ;AAAA,MAC5B,aAAa;AAAA,MACb,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,IACD,cAAc,MAAM,QAAQ;AAAA,MAC1B,aAAa;AAAA,MACb,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAM;AACV,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,MAAM,aAAY;AAC/C,UAAM,MAAM,QAAQ,IAAI;AAExB,UAAM,UAAe,UAAK,KAAK,MAAM;AACrC,QAAI,oBAAoB,OAAO,GAAG;AAChC,WAAK,KAAK,wEAAwE;AAClF;AAAA,IACF;AAKA,UAAM,gBAAqB,UAAK,KAAK,WAAW;AAChD,QAAO,cAAW,aAAa,GAAG;AAChC,WAAK,IAAI,kDAAkD;AAAA,IAC7D,OAAO;AACL,YAAM,mBAAmB,qBAAqB;AAC9C,MAAG,iBAAc,eAAe,kBAAkB,EAAE,MAAM,IAAM,CAAC;AACjE,WAAK,IAAI,mBAAmB;AAAA,IAC9B;AAEA,SAAK,IAAI,EAAE;AAGX,QAAI,SAAS,MAAM;AACnB,QAAI,CAAC,QAAQ;AACX,eAAS,MAAM,MAAM;AAAA,QACnB,SAAS;AAAA,QACT,UAAU;AAAA,MACZ,CAAC;AAAA,IACH,OAAO;AACL,YAAM,SAAS,eAAe,MAAM;AACpC,UAAI,WAAW,KAAM,MAAK,MAAM,MAAM;AAAA,IACxC;AAEA,UAAM,UAAU,MAAM,UAAU;AAChC,UAAM,aAAa,aAAa,OAAO;AACvC,QAAI,eAAe,KAAM,MAAK,MAAM,UAAU;AAE9C,UAAM,cACJ,MAAM,cAAc,MAAM,SACtB,MAAM,cAAc,IACpB,MAAM,QAAQ;AAAA,MACZ,SACE;AAAA,MACF,SAAS;AAAA,IACX,CAAC;AAEP,UAAM,kBACJ,MAAM,YAAY,MAAM,SACpB,MAAM,YAAY,IAClB,MAAM,QAAQ;AAAA,MACZ,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AAGP,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,MAAM,KAAK,8BAA8B,CAAC;AACnD,SAAK,IAAI,sBAAsB,OAAO,KAAK,CAAC,EAAE;AAC9C,SAAK,IAAI,sBAAsB,QAAQ,KAAK,CAAC,EAAE;AAC/C,SAAK,IAAI,sBAAsB,WAAW,EAAE;AAC5C,SAAK,IAAI,sBAAsB,eAAe,EAAE;AAChD,SAAK,IAAI,EAAE;AACX,SAAK;AAAA,MACH,MAAM;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AACA,SAAK,IAAI,EAAE;AAGX,QAAI,CAAC,MAAM,QAAQ;AACjB,YAAM,YAAY,MAAM,QAAQ;AAAA,QAC9B,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC;AAED,UAAI,CAAC,WAAW;AACd,aAAK,IAAI,YAAY;AACrB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX,QAAQ,OAAO,KAAK;AAAA,MACpB,SAAS,QAAQ,KAAK;AAAA,MACtB;AAAA,MACA;AAAA,IACF;AAGA,UAAM,WAAW,eAAe,IAAI;AACpC,IAAG,kBAAe,SAAS,UAAU,EAAE,MAAM,IAAM,CAAC;AACpD,SAAK,IAAI,cAAc;AAGvB,UAAM,iBAAsB,UAAK,KAAK,cAAc;AACpD,QAAI,CAAC,oBAAoB,cAAc,GAAG;AACxC,MAAG,kBAAe,gBAAgB,uBAAuB,EAAE,MAAM,IAAM,CAAC;AACxE,WAAK,IAAI,sBAAsB;AAAA,IACjC;AAGA,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,MAAM,MAAM,uCAAuC,CAAC;AAC7D,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,aAAa;AACtB,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,gCAAgC,OAAO,KAAK,CAAC,oCAAoC;AAC1F,SAAK,IAAI,4EAA4E;AACrF,SAAK,IAAI,EAAE;AACX,SAAK,IAAI,uBAAuB;AAChC,SAAK,IAAI,2CAA2C;AACpD,SAAK,IAAI,gDAAgD;AACzD,SAAK,IAAI,EAAE;AAEX,QAAI,aAAa;AACf,WAAK,IAAI,MAAM,OAAO,8DAA8D,CAAC;AACrF,WAAK,IAAI,4CAA4C;AACrD,WAAK,IAAI,qCAAqC;AAC9C,WAAK,IAAI,mDAAmD;AAC5D,WAAK,IAAI,sCAAsC;AAC/C,WAAK,IAAI,EAAE;AAAA,IACb;AAEA,SAAK,IAAI,0DAA0D;AAAA,EACrE;AACF;","names":[]}

package/dist/commands/compute/app/deploy.js

@@ -304,7 +304,7 @@ function findAvailableName(environment, baseName) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/info.js

@@ -219,7 +219,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/list.js

@@ -198,7 +198,7 @@ function getAppName(environment, appID) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/logs.js

@@ -245,7 +245,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/profile/set.js

@@ -285,7 +285,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/releases.js

@@ -236,7 +236,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/start.js

@@ -244,7 +244,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/stop.js

@@ -244,7 +244,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/terminate.js

@@ -244,7 +244,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/app/upgrade.js

@@ -323,7 +323,7 @@ function listApps(environment) {
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/build/info.js

@@ -155,7 +155,7 @@ var APPS_DIR = path2.join(CONFIG_DIR, "apps");
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/build/list.js

@@ -158,7 +158,7 @@ var APPS_DIR = path2.join(CONFIG_DIR, "apps");
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/build/logs.js

@@ -155,7 +155,7 @@ var APPS_DIR = path2.join(CONFIG_DIR, "apps");
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/build/status.js

@@ -156,7 +156,7 @@ var APPS_DIR = path2.join(CONFIG_DIR, "apps");
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/build/submit.js

@@ -156,7 +156,7 @@ var APPS_DIR = path2.join(CONFIG_DIR, "apps");
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/build/verify.js

@@ -156,7 +156,7 @@ var APPS_DIR = path2.join(CONFIG_DIR, "apps");
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/commands/compute/undelegate.js

@@ -155,7 +155,7 @@ var APPS_DIR = path2.join(CONFIG_DIR, "apps");
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 function getClientId() {
   return `ecloud-cli/v${getCliVersion()}`;

package/dist/hooks/init/__tests__/version-check.test.js

@@ -7,7 +7,7 @@ import { getBuildType as getBuildType5 } from "@layr-labs/ecloud-sdk";
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 
 // src/commands/upgrade.ts

package/dist/hooks/init/version-check.js

@@ -7,7 +7,7 @@ import { getBuildType as getBuildType4 } from "@layr-labs/ecloud-sdk";
 
 // src/utils/version.ts
 function getCliVersion() {
-  return true ? "1.0.0-devep2" : "0.0.0";
+  return true ? "1.0.0-devep3" : "0.0.0";
 }
 
 // src/commands/upgrade.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layr-labs/ecloud-cli",
-  "version": "1.0.0-devep2",
+  "version": "1.0.0-devep3",
   "type": "module",
   "files": [
     "dist",
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@inquirer/prompts": "7.10.1",
-    "@layr-labs/ecloud-sdk": "1.0.0-devep2",
+    "@layr-labs/ecloud-sdk": "1.0.0-devep3",
     "@napi-rs/keyring": "1.2.0",
     "@oclif/core": "4.8.0",
     "@oclif/plugin-autocomplete": "3.2.40",