@mybase-dev/cli 1.0.4 → 1.0.5

package/dist/mybase.js

@@ -139,7 +139,7 @@ function parseDotenv(text) {
 // package.json
 var package_default = {
   name: "@mybase-dev/cli",
-  version: "1.0.4",
+  version: "1.0.5",
   description: "The mybase CLI: projects, keys, cron, queues, cache, rate limits, analytics, docs, and agent setup for a self-hosted mybase.",
   type: "module",
   repository: {
@@ -305,6 +305,31 @@ function parseDelay(value) {
   return Math.round(Number(m[1]) * UNITS[m[2]]);
 }
 
+// src/service-enable.ts
+async function linkedEnvs(project) {
+  const overview = await api(`/projects/${encodeURIComponent(project)}/secrets`).catch(() => null);
+  return overview?.envs.filter((e) => e.linked).map((e) => e.name) ?? [];
+}
+async function enableService(project, id, flags) {
+  const envs = flags.has("no-link") ? [] : await linkedEnvs(project);
+  let link = envs.length > 0 && flags.has("link");
+  if (envs.length > 0 && !link && !jsonMode && process.stdin.isTTY) {
+    const answer = prompt(`Add the ${id} keys to the linked secrets envs (${envs.join(", ")})? [Y/n]`);
+    link = !answer?.trim() || /^y/i.test(answer.trim());
+  }
+  const path = `/projects/${encodeURIComponent(project)}/services/${id}`;
+  const result = await api(path, link ? { method: "PUT", body: JSON.stringify({ link: true }) } : { method: "PUT" });
+  return { result, linked: link ? envs : [] };
+}
+function printLinked(project, linked, flags) {
+  if (linked.length > 0)
+    console.log(`
+Keys added to the linked secrets envs: ${linked.join(", ")} (mybase run -p ${project} -e ${linked[0]} -- \u2026)`);
+  else if (flags.has("link"))
+    console.log(`
+No linked secrets envs yet: mybase secrets link -p ${project} -e prod`);
+}
+
 // src/cron.ts
 var cronUsage = `  cron enable <project>          Turn on cron for a project and print its signing secret
   cron disable <project> [--yes] Turn it off, deleting every job and its history
@@ -388,12 +413,13 @@ async function cron(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      await api(`/projects/${encodeURIComponent(p)}/services/cron`, { method: "PUT" });
+      const { linked } = await enableService(p, "cron", flags);
       const secret = await api(`/projects/${encodeURIComponent(p)}/cron/secret`);
-      print({ enabled: "cron", project: p, ...secret }, () => {
+      print({ enabled: "cron", project: p, linked, ...secret }, () => {
         console.log(`Cron enabled for "${p}"
 `);
         printSecret(secret);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -881,12 +907,14 @@ async function analytics(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need2(project, "project name");
-      await api(`/projects/${encodeURIComponent(p)}/services/analytics`, { method: "PUT" });
+      const flags = parseArgs(args).flags;
+      const { linked } = await enableService(p, "analytics", flags);
       const settings = await api(`${base(p)}/settings`);
-      print({ enabled: "analytics", project: p, ...settings }, () => {
+      print({ enabled: "analytics", project: p, linked, ...settings }, () => {
         console.log(`Analytics enabled for "${p}"
 `);
         printSettings(p, settings);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -1351,13 +1379,14 @@ async function cache(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      const res = await api(`/projects/${encodeURIComponent(p)}/services/cache`, { method: "PUT" });
-      if (res.service !== "cache")
+      const { result: res, linked } = await enableService(p, "cache", flags);
+      if (res?.service !== "cache")
         throw new Error("unexpected answer from the API");
-      print({ enabled: "cache", project: p, ...res.credentials }, () => {
+      print({ enabled: "cache", project: p, linked, ...res.credentials }, () => {
         console.log(`Cache enabled for "${p}"
 `);
         printCredentials(p, res.credentials);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -1419,12 +1448,13 @@ async function captcha(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      await api(`/projects/${encodeURIComponent(p)}/services/captcha`, { method: "PUT" });
+      const { linked } = await enableService(p, "captcha", flags);
       const s = await api(base3(p));
-      print({ enabled: "captcha", project: p, ...s }, () => {
+      print({ enabled: "captcha", project: p, linked, ...s }, () => {
         console.log(`Captcha enabled for "${p}"
 `);
         printSettings2(p, s);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -1570,12 +1600,13 @@ async function queue(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      await api(`/projects/${encodeURIComponent(p)}/services/queue`, { method: "PUT" });
+      const { linked } = await enableService(p, "queue", flags);
       const settings = await api(base4(p));
-      print({ enabled: "queue", project: p, ...settings }, () => {
+      print({ enabled: "queue", project: p, linked, ...settings }, () => {
         console.log(`Queues enabled for "${p}"
 `);
         printUsage(p, settings);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -1770,12 +1801,13 @@ async function vector(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      await api(`/projects/${encodeURIComponent(p)}/services/vector`, { method: "PUT" });
+      const { linked } = await enableService(p, "vector", flags);
       const settings = await api(base5(p));
-      print({ enabled: "vector", project: p, ...settings }, () => {
+      print({ enabled: "vector", project: p, linked, ...settings }, () => {
         console.log(`Vector search enabled for "${p}"
 `);
         printUsage2(p, settings);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -1956,12 +1988,13 @@ async function ratelimit(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      await api(`/projects/${encodeURIComponent(p)}/services/ratelimit`, { method: "PUT" });
+      const { linked } = await enableService(p, "ratelimit", flags);
       const settings = await api(base6(p));
-      print({ enabled: "ratelimit", project: p, ...settings }, () => {
+      print({ enabled: "ratelimit", project: p, linked, ...settings }, () => {
         console.log(`Rate limits enabled for "${p}"
 `);
         printUsage3(p, settings);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -2063,8 +2096,11 @@ var secretsUsage = `  secrets enable <project>       Turn on secrets (dev, stagi
   secrets history [--limit 20]   Revisions, newest first
   secrets restore <revision> [--yes]  Put values back as they were after <revision>
   secrets link --env <env,\u2026> [--yes]  Rotate the project's DB/S3/cache credentials and keep them
-                                 in these envs (DATABASE_URL, S3_*, REDIS_URL, MYBASE_URL)
+                                 in these envs (DATABASE_URL, S3_*, REDIS_URL, MYBASE_URL), with
+                                 every service's keys (MYBASE_API_KEY, MYBASE_CRON_SECRET, \u2026)
   secrets unlink [--yes]         Remove the credentials from the env (they stay valid)
+                                 \`<service> enable\` asks to add that service's keys to linked
+                                 envs (--link / --no-link to skip the question)
                                  Project/env: -p/--project, -e/--env, else MYBASE_PROJECT/MYBASE_ENV,
                                  else \`secrets setup\` for this directory`;
 var expandShortFlags = (args) => args.map((a) => a === "-p" ? "--project" : a === "-e" ? "--env" : a);
@@ -2240,7 +2276,7 @@ async function secrets(sub, args) {
     case "link": {
       const { project, env } = await target(flags);
       const envs = env.split(",").map((e) => e.trim()).filter(Boolean);
-      confirm(yes, `This rotates the credentials of "${project}" (database password, storage key, and cache password if the cache is on) and stores the new ones in ${envs.join(", ")} plus any env linked before. Apps still using the old credentials will stop working.`, project, "the project name");
+      confirm(yes, `This rotates the credentials of "${project}" (database password, storage key, cache password if the cache is on, and the API key link made before) and stores the new ones, with the other services' keys, in ${envs.join(", ")} plus any env linked before. Apps still using the old credentials will stop working.`, project, "the project name");
       const result = await api(`${base7(project)}/link`, { method: "POST", body: JSON.stringify({ envs }) });
       print(result, () => {
         console.log(`Rotated and stored in ${result.envs.join(", ")}: ${result.keys.join(", ")}`);
@@ -2300,9 +2336,9 @@ async function search(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      await api(servicePath(p), { method: "PUT" });
+      const { linked } = await enableService(p, "search", flags);
       const searchUrl = `${API_URL}/search/${p}`;
-      print({ enabled: "search", project: p, searchUrl, fetchUrl: `${searchUrl}/fetch` }, () => {
+      print({ enabled: "search", project: p, linked, searchUrl, fetchUrl: `${searchUrl}/fetch` }, () => {
         console.log(`Web search enabled for "${p}"
 `);
         console.log(`  search URL  ${searchUrl}?q=\u2026`);
@@ -2313,6 +2349,7 @@ async function search(sub, args) {
 `);
         console.log(`  const web = createSearchClient({ apiUrl: "${API_URL}", project: "${p}", apiKey: process.env.MYBASE_API_KEY! })`);
         console.log(`  const { results } = await web.search("\u2026")   // or searchTools(web) for an LLM agent`);
+        printLinked(p, linked, flags);
       });
       return true;
     }
@@ -5408,15 +5445,16 @@ async function users(sub, args) {
   switch (sub) {
     case "enable": {
       const p = need(project, "project name");
-      await api(`/projects/${encodeURIComponent(p)}/services/users`, { method: "PUT" });
+      const { linked } = await enableService(p, "users", flags);
       const o = await api(base8(p));
-      print({ enabled: "users", project: p, ...o }, () => {
+      print({ enabled: "users", project: p, linked, ...o }, () => {
         console.log(`Users enabled for "${p}". Better Auth's tables go in the "${o.schema}" schema.
 `);
         console.log("Next:");
         console.log(`  1. An API key for the app: mybase token create ${p}-auth --project ${p} --perm users:write,cache:write`);
         console.log(`  2. The cache, for sessions: mybase cache enable ${p}`);
         console.log(`  3. An auth.ts to start from: mybase users init ${p}`);
+        printLinked(p, linked, flags);
       });
       return true;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mybase-dev/cli",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "The mybase CLI: projects, keys, cron, queues, cache, rate limits, analytics, docs, and agent setup for a self-hosted mybase.",
   "type": "module",
   "repository": {