@specific.dev/cli 0.1.186 → 0.1.187

package/dist/cli.js

@@ -368324,7 +368324,7 @@ function parseReferenceString(str) {
   const storageMatch = str.match(new RegExp(`^storage\\.(${id})\\.(\\w+)$`));
   if (storageMatch && storageMatch[1] && storageMatch[2]) {
     const attr = storageMatch[2];
-    if (["endpoint", "access_key", "secret_key", "bucket"].includes(attr)) {
+    if (["endpoint", "access_key", "secret_key", "bucket", "public_url"].includes(attr)) {
       return {
         type: "storage",
         name: storageMatch[1],
@@ -368860,8 +368860,28 @@ function parseStorage(data) {
     return [];
   }
   const result = [];
-  for (const [name] of Object.entries(data)) {
-    result.push({ name });
+  for (const [name, fieldsArray] of Object.entries(data)) {
+    if (Array.isArray(fieldsArray) && fieldsArray.length > 1) {
+      throw new Error(`Storage "${name}" is defined more than once. Merge the blocks into a single storage "${name}" block.`);
+    }
+    const fields = Array.isArray(fieldsArray) ? fieldsArray[0] : fieldsArray;
+    if (!fields || typeof fields !== "object" || Array.isArray(fields)) {
+      result.push({ name });
+      continue;
+    }
+    const fieldObj = fields;
+    const unknownFields = Object.keys(fieldObj).filter((field) => field !== "public");
+    if (unknownFields.length > 0) {
+      throw new Error(`Storage "${name}" has unsupported field "${unknownFields[0]}". Supported fields: public.`);
+    }
+    const publicValue = Array.isArray(fieldObj.public) ? fieldObj.public[0] : fieldObj.public;
+    if (publicValue !== void 0 && typeof publicValue !== "boolean") {
+      throw new Error(`Storage "${name}" has invalid "public" value. Must be a boolean.`);
+    }
+    result.push({
+      name,
+      ...publicValue !== void 0 ? { public: publicValue } : {}
+    });
   }
   return result;
 }
@@ -369021,82 +369041,127 @@ function validateEndpointReferences(config) {
   for (const service of config.services) {
     serviceEndpointsMap.set(service.name, service.endpoints);
   }
+  const storageByName = new Map(config.storage.map((storage) => [storage.name, storage]));
+  const validateStorageReference = (ownerType, ownerName, key, ref, envLabel2 = "env var") => {
+    const target = storageByName.get(ref.name);
+    if (!target) {
+      errors.push({
+        service: ownerName,
+        message: `${ownerType} "${ownerName}" references unknown storage "${ref.name}" in ${envLabel2} "${key}".`
+      });
+      return;
+    }
+    if (ref.attribute === "public_url" && target.public !== true) {
+      errors.push({
+        service: ownerName,
+        message: `${ownerType} "${ownerName}" references public_url of storage "${ref.name}" in ${envLabel2} "${key}", but that storage is not public. Add \`public = true\` to the storage block.`
+      });
+    }
+  };
   for (const service of config.services) {
-    if (!service.env)
-      continue;
-    for (const [key, value] of Object.entries(service.env)) {
-      const refs = extractEnvReferences(value);
-      for (const ref of refs) {
-        if (service.endpoints.length > 1 && ref.type === "port") {
-          errors.push({
-            service: service.name,
-            message: `Service "${service.name}" has multiple endpoints but uses \${port} for env var "${key}". Use \${endpoint.<name>.port} instead.`
-          });
-        }
-        if (ref.type === "service") {
-          const serviceRef = ref;
-          const targetEndpoints = serviceEndpointsMap.get(serviceRef.serviceName);
-          if (!targetEndpoints) {
-            errors.push({
-              service: service.name,
-              message: `Service "${service.name}" references unknown service "${serviceRef.serviceName}" in env var "${key}".`
-            });
-            continue;
-          }
-          if (targetEndpoints.length > 1 && !serviceRef.endpointName) {
+    if (service.env) {
+      for (const [key, value] of Object.entries(service.env)) {
+        const refs = extractEnvReferences(value);
+        for (const ref of refs) {
+          if (ref.type === "storage") {
+            validateStorageReference("Service", service.name, key, ref);
+          }
+          if (service.endpoints.length > 1 && ref.type === "port") {
             errors.push({
               service: service.name,
-              message: `Service "${service.name}" references service "${serviceRef.serviceName}" which has multiple endpoints, but no endpoint name specified in env var "${key}". Use \${service.${serviceRef.serviceName}.endpoint.<name>.${serviceRef.attribute}} instead.`
+              message: `Service "${service.name}" has multiple endpoints but uses \${port} for env var "${key}". Use \${endpoint.<name>.port} instead.`
             });
           }
-          if (serviceRef.endpointName) {
-            const endpointExists = targetEndpoints.some((e) => e.name === serviceRef.endpointName);
-            if (!endpointExists) {
+          if (ref.type === "service") {
+            const serviceRef = ref;
+            const targetEndpoints = serviceEndpointsMap.get(serviceRef.serviceName);
+            if (!targetEndpoints) {
               errors.push({
                 service: service.name,
-                message: `Service "${service.name}" references endpoint "${serviceRef.endpointName}" on service "${serviceRef.serviceName}" in env var "${key}", but that endpoint does not exist.`
+                message: `Service "${service.name}" references unknown service "${serviceRef.serviceName}" in env var "${key}".`
               });
+              continue;
             }
-          }
-          if (serviceRef.attribute === "public_url") {
-            const endpointName = serviceRef.endpointName;
-            if (endpointName) {
-              const targetEndpoint = targetEndpoints.find((e) => e.name === endpointName);
-              if (targetEndpoint && !targetEndpoint.public) {
+            if (targetEndpoints.length > 1 && !serviceRef.endpointName) {
+              errors.push({
+                service: service.name,
+                message: `Service "${service.name}" references service "${serviceRef.serviceName}" which has multiple endpoints, but no endpoint name specified in env var "${key}". Use \${service.${serviceRef.serviceName}.endpoint.<name>.${serviceRef.attribute}} instead.`
+              });
+            }
+            if (serviceRef.endpointName) {
+              const endpointExists = targetEndpoints.some((e) => e.name === serviceRef.endpointName);
+              if (!endpointExists) {
                 errors.push({
                   service: service.name,
-                  message: `Service "${service.name}" references public_url of endpoint "${endpointName}" on service "${serviceRef.serviceName}" in env var "${key}", but that endpoint is not public. Add \`public = true\` to the endpoint.`
+                  message: `Service "${service.name}" references endpoint "${serviceRef.endpointName}" on service "${serviceRef.serviceName}" in env var "${key}", but that endpoint does not exist.`
                 });
               }
-            } else {
-              const defaultEndpoint = targetEndpoints.length === 1 ? targetEndpoints[0] : targetEndpoints.find((e) => e.name === "default");
-              if (defaultEndpoint && !defaultEndpoint.public) {
-                errors.push({
-                  service: service.name,
-                  message: `Service "${service.name}" references public_url of service "${serviceRef.serviceName}" in env var "${key}", but its endpoint is not public. Add \`public = true\` to the endpoint.`
-                });
+            }
+            if (serviceRef.attribute === "public_url") {
+              const endpointName = serviceRef.endpointName;
+              if (endpointName) {
+                const targetEndpoint = targetEndpoints.find((e) => e.name === endpointName);
+                if (targetEndpoint && !targetEndpoint.public) {
+                  errors.push({
+                    service: service.name,
+                    message: `Service "${service.name}" references public_url of endpoint "${endpointName}" on service "${serviceRef.serviceName}" in env var "${key}", but that endpoint is not public. Add \`public = true\` to the endpoint.`
+                  });
+                }
+              } else {
+                const defaultEndpoint = targetEndpoints.length === 1 ? targetEndpoints[0] : targetEndpoints.find((e) => e.name === "default");
+                if (defaultEndpoint && !defaultEndpoint.public) {
+                  errors.push({
+                    service: service.name,
+                    message: `Service "${service.name}" references public_url of service "${serviceRef.serviceName}" in env var "${key}", but its endpoint is not public. Add \`public = true\` to the endpoint.`
+                  });
+                }
               }
             }
           }
+          if (ref.type === "endpoint") {
+            const endpointRef = ref;
+            const endpointExists = service.endpoints.some((e) => e.name === endpointRef.endpointName);
+            if (!endpointExists) {
+              errors.push({
+                service: service.name,
+                message: `Service "${service.name}" references endpoint "${endpointRef.endpointName}" in env var "${key}", but that endpoint is not defined on this service.`
+              });
+            }
+          }
+          if (ref.type === "volume") {
+            const volumeRef = ref;
+            const volumeExists = service.volumes?.some((v) => v.name === volumeRef.volumeName);
+            if (!volumeExists) {
+              errors.push({
+                service: service.name,
+                message: `Service "${service.name}" references volume "${volumeRef.volumeName}" in env var "${key}", but that volume is not defined on this service.`
+              });
+            }
+          }
         }
-        if (ref.type === "endpoint") {
-          const endpointRef = ref;
-          const endpointExists = service.endpoints.some((e) => e.name === endpointRef.endpointName);
-          if (!endpointExists) {
-            errors.push({
-              service: service.name,
-              message: `Service "${service.name}" references endpoint "${endpointRef.endpointName}" in env var "${key}", but that endpoint is not defined on this service.`
-            });
+      }
+    }
+    if (service.dev?.env) {
+      for (const [key, value] of Object.entries(service.dev.env)) {
+        for (const ref of extractEnvReferences(value)) {
+          if (ref.type === "storage") {
+            validateStorageReference("Service", service.name, key, ref, "dev env var");
           }
         }
-        if (ref.type === "volume") {
-          const volumeRef = ref;
-          const volumeExists = service.volumes?.some((v) => v.name === volumeRef.volumeName);
-          if (!volumeExists) {
-            errors.push({
-              service: service.name,
-              message: `Service "${service.name}" references volume "${volumeRef.volumeName}" in env var "${key}", but that volume is not defined on this service.`
-            });
+      }
+    }
+  }
+  for (const cron of config.crons) {
+    for (const [envLabel2, env2] of [
+      ["env var", cron.env],
+      ["dev env var", cron.dev?.env]
+    ]) {
+      if (!env2)
+        continue;
+      for (const [key, value] of Object.entries(env2)) {
+        for (const ref of extractEnvReferences(value)) {
+          if (ref.type === "storage") {
+            validateStorageReference("Cron", cron.name, key, ref, envLabel2);
           }
         }
       }
@@ -369945,6 +370010,7 @@ async function startStorage(storage, port, dataDir) {
     accessKey,
     secretKey,
     bucket: storage.name,
+    ...storage.public ? { publicUrl: `${endpoint}/${encodeURIComponent(storage.name)}` } : {},
     async stop() {
       const httpServer = server.httpServer;
       if (httpServer) {
@@ -370350,6 +370416,11 @@ function resolveEnvValue(value, resources, secrets, configs, servicePort, servic
             throw new Error(`Storage "${value.name}" does not have a bucket`);
           }
           return storage.bucket;
+        case "public_url":
+          if (!storage.publicUrl) {
+            throw new Error(`Storage "${value.name}" is not public`);
+          }
+          return storage.publicUrl;
         default:
           throw new Error(`Unknown storage attribute: ${String(value.attribute)}`);
       }
@@ -372605,6 +372676,8 @@ async function startResources(options2) {
     if (instance.endpoint) dbState.endpoint = instance.endpoint;
     if (instance.accessKey) dbState.accessKey = instance.accessKey;
     if (instance.secretKey) dbState.secretKey = instance.secretKey;
+    if (instance.bucket) dbState.bucket = instance.bucket;
+    if (instance.publicUrl) dbState.publicUrl = instance.publicUrl;
     await stateManager.registerDatabase(storage.name, dbState);
   }
   if (temporalConfigs.length > 0) {
@@ -374225,7 +374298,8 @@ Add them to the config block in specific.local`
         type: r.type,
         port: r.port,
         host: r.host,
-        syncEnabled: r.type === "postgres" && syncDatabases.has(name)
+        syncEnabled: r.type === "postgres" && syncDatabases.has(name),
+        ...r.publicUrl ? { publicUrl: r.publicUrl } : {}
       })),
       hasTemporal,
       hasMail,
@@ -374886,7 +374960,7 @@ function trackEvent(event, properties) {
     event,
     properties: {
       ...properties,
-      cli_version: "0.1.186",
+      cli_version: "0.1.187",
       platform: process.platform,
       node_version: process.version,
       project_id: getProjectId()
@@ -375355,6 +375429,18 @@ import { execFile as execFile8 } from "child_process";
 
 // node_modules/.pnpm/@specific+config@file+..+config/node_modules/@specific/config/dist/parser.js
 var import_hcl2_json_parser3 = __toESM(require_dist2(), 1);
+
+// node_modules/.pnpm/@specific+config@file+..+config/node_modules/@specific/config/dist/types.js
+function extractEnvReferences2(value) {
+  if (typeof value === "string")
+    return [];
+  if (value.type === "interpolated") {
+    return value.parts.filter((p) => p.type === "ref").map((p) => p.ref);
+  }
+  return [value];
+}
+
+// node_modules/.pnpm/@specific+config@file+..+config/node_modules/@specific/config/dist/parser.js
 var { parseToObject: parseToObject3 } = import_hcl2_json_parser3.default;
 function parseReference2(value) {
   if (typeof value !== "string") {
@@ -375446,7 +375532,7 @@ function parseReferenceString2(str) {
   const storageMatch = str.match(new RegExp(`^storage\\.(${id})\\.(\\w+)$`));
   if (storageMatch && storageMatch[1] && storageMatch[2]) {
     const attr = storageMatch[2];
-    if (["endpoint", "access_key", "secret_key", "bucket"].includes(attr)) {
+    if (["endpoint", "access_key", "secret_key", "bucket", "public_url"].includes(attr)) {
       return {
         type: "storage",
         name: storageMatch[1],
@@ -375982,8 +376068,28 @@ function parseStorage2(data) {
     return [];
   }
   const result = [];
-  for (const [name] of Object.entries(data)) {
-    result.push({ name });
+  for (const [name, fieldsArray] of Object.entries(data)) {
+    if (Array.isArray(fieldsArray) && fieldsArray.length > 1) {
+      throw new Error(`Storage "${name}" is defined more than once. Merge the blocks into a single storage "${name}" block.`);
+    }
+    const fields = Array.isArray(fieldsArray) ? fieldsArray[0] : fieldsArray;
+    if (!fields || typeof fields !== "object" || Array.isArray(fields)) {
+      result.push({ name });
+      continue;
+    }
+    const fieldObj = fields;
+    const unknownFields = Object.keys(fieldObj).filter((field) => field !== "public");
+    if (unknownFields.length > 0) {
+      throw new Error(`Storage "${name}" has unsupported field "${unknownFields[0]}". Supported fields: public.`);
+    }
+    const publicValue = Array.isArray(fieldObj.public) ? fieldObj.public[0] : fieldObj.public;
+    if (publicValue !== void 0 && typeof publicValue !== "boolean") {
+      throw new Error(`Storage "${name}" has invalid "public" value. Must be a boolean.`);
+    }
+    result.push({
+      name,
+      ...publicValue !== void 0 ? { public: publicValue } : {}
+    });
   }
   return result;
 }
@@ -376126,6 +376232,146 @@ async function parseConfig2(hcl) {
     environments: parseEnvironments2(json.environment)
   };
 }
+function validateEndpointReferences2(config) {
+  const errors = [];
+  const serviceEndpointsMap = /* @__PURE__ */ new Map();
+  for (const service of config.services) {
+    serviceEndpointsMap.set(service.name, service.endpoints);
+  }
+  const storageByName = new Map(config.storage.map((storage) => [storage.name, storage]));
+  const validateStorageReference = (ownerType, ownerName, key, ref, envLabel2 = "env var") => {
+    const target = storageByName.get(ref.name);
+    if (!target) {
+      errors.push({
+        service: ownerName,
+        message: `${ownerType} "${ownerName}" references unknown storage "${ref.name}" in ${envLabel2} "${key}".`
+      });
+      return;
+    }
+    if (ref.attribute === "public_url" && target.public !== true) {
+      errors.push({
+        service: ownerName,
+        message: `${ownerType} "${ownerName}" references public_url of storage "${ref.name}" in ${envLabel2} "${key}", but that storage is not public. Add \`public = true\` to the storage block.`
+      });
+    }
+  };
+  for (const service of config.services) {
+    if (service.env) {
+      for (const [key, value] of Object.entries(service.env)) {
+        const refs = extractEnvReferences2(value);
+        for (const ref of refs) {
+          if (ref.type === "storage") {
+            validateStorageReference("Service", service.name, key, ref);
+          }
+          if (service.endpoints.length > 1 && ref.type === "port") {
+            errors.push({
+              service: service.name,
+              message: `Service "${service.name}" has multiple endpoints but uses \${port} for env var "${key}". Use \${endpoint.<name>.port} instead.`
+            });
+          }
+          if (ref.type === "service") {
+            const serviceRef = ref;
+            const targetEndpoints = serviceEndpointsMap.get(serviceRef.serviceName);
+            if (!targetEndpoints) {
+              errors.push({
+                service: service.name,
+                message: `Service "${service.name}" references unknown service "${serviceRef.serviceName}" in env var "${key}".`
+              });
+              continue;
+            }
+            if (targetEndpoints.length > 1 && !serviceRef.endpointName) {
+              errors.push({
+                service: service.name,
+                message: `Service "${service.name}" references service "${serviceRef.serviceName}" which has multiple endpoints, but no endpoint name specified in env var "${key}". Use \${service.${serviceRef.serviceName}.endpoint.<name>.${serviceRef.attribute}} instead.`
+              });
+            }
+            if (serviceRef.endpointName) {
+              const endpointExists = targetEndpoints.some((e) => e.name === serviceRef.endpointName);
+              if (!endpointExists) {
+                errors.push({
+                  service: service.name,
+                  message: `Service "${service.name}" references endpoint "${serviceRef.endpointName}" on service "${serviceRef.serviceName}" in env var "${key}", but that endpoint does not exist.`
+                });
+              }
+            }
+            if (serviceRef.attribute === "public_url") {
+              const endpointName = serviceRef.endpointName;
+              if (endpointName) {
+                const targetEndpoint = targetEndpoints.find((e) => e.name === endpointName);
+                if (targetEndpoint && !targetEndpoint.public) {
+                  errors.push({
+                    service: service.name,
+                    message: `Service "${service.name}" references public_url of endpoint "${endpointName}" on service "${serviceRef.serviceName}" in env var "${key}", but that endpoint is not public. Add \`public = true\` to the endpoint.`
+                  });
+                }
+              } else {
+                const defaultEndpoint = targetEndpoints.length === 1 ? targetEndpoints[0] : targetEndpoints.find((e) => e.name === "default");
+                if (defaultEndpoint && !defaultEndpoint.public) {
+                  errors.push({
+                    service: service.name,
+                    message: `Service "${service.name}" references public_url of service "${serviceRef.serviceName}" in env var "${key}", but its endpoint is not public. Add \`public = true\` to the endpoint.`
+                  });
+                }
+              }
+            }
+          }
+          if (ref.type === "endpoint") {
+            const endpointRef = ref;
+            const endpointExists = service.endpoints.some((e) => e.name === endpointRef.endpointName);
+            if (!endpointExists) {
+              errors.push({
+                service: service.name,
+                message: `Service "${service.name}" references endpoint "${endpointRef.endpointName}" in env var "${key}", but that endpoint is not defined on this service.`
+              });
+            }
+          }
+          if (ref.type === "volume") {
+            const volumeRef = ref;
+            const volumeExists = service.volumes?.some((v) => v.name === volumeRef.volumeName);
+            if (!volumeExists) {
+              errors.push({
+                service: service.name,
+                message: `Service "${service.name}" references volume "${volumeRef.volumeName}" in env var "${key}", but that volume is not defined on this service.`
+              });
+            }
+          }
+        }
+      }
+    }
+    if (service.dev?.env) {
+      for (const [key, value] of Object.entries(service.dev.env)) {
+        for (const ref of extractEnvReferences2(value)) {
+          if (ref.type === "storage") {
+            validateStorageReference("Service", service.name, key, ref, "dev env var");
+          }
+        }
+      }
+    }
+  }
+  for (const cron of config.crons) {
+    for (const [envLabel2, env2] of [
+      ["env var", cron.env],
+      ["dev env var", cron.dev?.env]
+    ]) {
+      if (!env2)
+        continue;
+      for (const [key, value] of Object.entries(env2)) {
+        for (const ref of extractEnvReferences2(value)) {
+          if (ref.type === "storage") {
+            validateStorageReference("Cron", cron.name, key, ref, envLabel2);
+          }
+        }
+      }
+    }
+  }
+  return errors;
+}
+function assertValidReferences(config) {
+  const errors = validateEndpointReferences2(config);
+  if (errors.length > 0) {
+    throw new Error(errors.map((error) => error.message).join("\n"));
+  }
+}
 
 // src/commands/check.tsx
 async function runReshapeCheck(migrationsDir) {
@@ -376161,6 +376407,7 @@ function CheckUI() {
       const hcl = fs22.readFileSync(configPath, "utf-8");
       try {
         const config2 = await parseConfig2(hcl);
+        assertValidReferences(config2);
         const localPath = path20.join(process.cwd(), LOCAL_FILE);
         if (fs22.existsSync(localPath)) {
           const localContent = fs22.readFileSync(localPath, "utf-8");
@@ -376236,7 +376483,7 @@ function CheckUI() {
   const reshapeChecks = state.reshapeChecks ?? [];
   const reshapeErrors = reshapeChecks.filter((r) => !r.success);
   const hasReshapeErrors = reshapeErrors.length > 0;
-  return /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React3.createElement(Text3, { color: hasReshapeErrors ? "yellow" : "green" }, hasReshapeErrors ? "Configuration is valid but reshape migrations have errors" : "Configuration is valid"), config.builds.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Builds (", config.builds.length, "):"), config.builds.map((b) => /* @__PURE__ */ React3.createElement(Text3, { key: b.name }, "  ", "- ", b.name, b.base ? ` (${b.base})` : "", b.dockerfile ? ` (dockerfile: ${b.dockerfile})` : ""))), config.services.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Services (", config.services.length, "):"), config.services.map((s) => /* @__PURE__ */ React3.createElement(Text3, { key: s.name }, "  ", "- ", s.name, s.build ? ` (build: ${s.build.name})` : "", s.image ? ` (image: ${s.image})` : ""))), config.crons.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Crons (", config.crons.length, "):"), config.crons.map((c) => /* @__PURE__ */ React3.createElement(Text3, { key: c.name }, "  ", "- ", c.name, " (", c.schedule, ")", c.build ? ` (build: ${c.build.name})` : "", c.image ? ` (image: ${c.image})` : ""))), config.postgres.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Postgres (", config.postgres.length, "):"), config.postgres.map((p) => /* @__PURE__ */ React3.createElement(Text3, { key: p.name }, "  ", "- ", p.name, p.reshape?.enabled ? " (reshape enabled)" : ""))), reshapeChecks.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Reshape Migrations:"), reshapeChecks.map((r) => /* @__PURE__ */ React3.createElement(Box3, { key: r.databaseName, flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, null, "  ", /* @__PURE__ */ React3.createElement(Text3, { color: r.success ? "green" : "red" }, r.success ? "pass" : "fail"), " ", r.databaseName, " (", r.migrationsDir, ")"), r.error && /* @__PURE__ */ React3.createElement(Text3, { color: "red" }, "       ", r.error)))), config.redis.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Redis (", config.redis.length, "):"), config.redis.map((r) => /* @__PURE__ */ React3.createElement(Text3, { key: r.name }, "  ", "- ", r.name))), config.storage.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Storage (", config.storage.length, "):"), config.storage.map((s) => /* @__PURE__ */ React3.createElement(Text3, { key: s.name }, "  ", "- ", s.name))), config.configs.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Config (", config.configs.length, "):"), config.configs.map((c) => /* @__PURE__ */ React3.createElement(Text3, { key: c.name }, "  ", "- ", c.name, c.default ? ` (default: ${c.default})` : ""))), config.environments.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Environments (", config.environments.length, "):"), config.environments.map((e) => /* @__PURE__ */ React3.createElement(Text3, { key: e.name }, "  ", "- ", e.name))));
+  return /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React3.createElement(Text3, { color: hasReshapeErrors ? "yellow" : "green" }, hasReshapeErrors ? "Configuration is valid but reshape migrations have errors" : "Configuration is valid"), config.builds.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Builds (", config.builds.length, "):"), config.builds.map((b) => /* @__PURE__ */ React3.createElement(Text3, { key: b.name }, "  ", "- ", b.name, b.base ? ` (${b.base})` : "", b.dockerfile ? ` (dockerfile: ${b.dockerfile})` : ""))), config.services.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Services (", config.services.length, "):"), config.services.map((s) => /* @__PURE__ */ React3.createElement(Text3, { key: s.name }, "  ", "- ", s.name, s.build ? ` (build: ${s.build.name})` : "", s.image ? ` (image: ${s.image})` : ""))), config.crons.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Crons (", config.crons.length, "):"), config.crons.map((c) => /* @__PURE__ */ React3.createElement(Text3, { key: c.name }, "  ", "- ", c.name, " (", c.schedule, ")", c.build ? ` (build: ${c.build.name})` : "", c.image ? ` (image: ${c.image})` : ""))), config.postgres.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Postgres (", config.postgres.length, "):"), config.postgres.map((p) => /* @__PURE__ */ React3.createElement(Text3, { key: p.name }, "  ", "- ", p.name, p.reshape?.enabled ? " (reshape enabled)" : ""))), reshapeChecks.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Reshape Migrations:"), reshapeChecks.map((r) => /* @__PURE__ */ React3.createElement(Box3, { key: r.databaseName, flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, null, "  ", /* @__PURE__ */ React3.createElement(Text3, { color: r.success ? "green" : "red" }, r.success ? "pass" : "fail"), " ", r.databaseName, " (", r.migrationsDir, ")"), r.error && /* @__PURE__ */ React3.createElement(Text3, { color: "red" }, "       ", r.error)))), config.redis.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Redis (", config.redis.length, "):"), config.redis.map((r) => /* @__PURE__ */ React3.createElement(Text3, { key: r.name }, "  ", "- ", r.name))), config.storage.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Storage (", config.storage.length, "):"), config.storage.map((s) => /* @__PURE__ */ React3.createElement(Text3, { key: s.name }, "  ", "- ", s.name, s.public ? " (public)" : ""))), config.configs.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Config (", config.configs.length, "):"), config.configs.map((c) => /* @__PURE__ */ React3.createElement(Text3, { key: c.name }, "  ", "- ", c.name, c.default ? ` (default: ${c.default})` : ""))), config.environments.length > 0 && /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { bold: true }, "Environments (", config.environments.length, "):"), config.environments.map((e) => /* @__PURE__ */ React3.createElement(Text3, { key: e.name }, "  ", "- ", e.name))));
 }
 function checkCommand() {
   render3(/* @__PURE__ */ React3.createElement(CheckUI, null));
@@ -378528,7 +378775,13 @@ async function execCommand(serviceName, command, instanceKey = "default", option
           endpoint: dbState.endpoint,
           accessKey: dbState.accessKey,
           secretKey: dbState.secretKey,
-          bucket: dbState.engine === "object_store" ? name : void 0,
+          // State written by older SDK versions predates the bucket field;
+          // object-store buckets were always named after the resource.
+          bucket: dbState.bucket ?? (dbState.engine === "object_store" ? name : void 0),
+          // Same legacy-state fallback for publicUrl: an older dev daemon
+          // never records it, but the local URL is derivable from the
+          // endpoint when the config marks the storage public.
+          publicUrl: dbState.publicUrl ?? (dbState.engine === "object_store" && dbState.endpoint && config.storage.find((s) => s.name === name)?.public === true ? `${dbState.endpoint}/${encodeURIComponent(name)}` : void 0),
           syncUrl: dbState.syncUrl,
           syncSecret: dbState.syncSecret,
           reshapeEnabled: dbState.reshapeEnabled,
@@ -379301,7 +379554,7 @@ function compareVersions(a, b) {
   return 0;
 }
 async function checkForUpdate() {
-  const currentVersion = "0.1.186";
+  const currentVersion = "0.1.187";
   const response = await fetch(`${BINARIES_BASE_URL}/latest?t=${Date.now()}`);
   if (!response.ok) {
     throw new Error(`Failed to check for updates: HTTP ${response.status}`);
@@ -380218,7 +380471,7 @@ async function domainAddCommand(service, domain, options2) {
 var program = new Command();
 var env = "production";
 var envLabel = env !== "production" ? `[${env.toUpperCase()}] ` : "";
-program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.186").enablePositionalOptions();
+program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.187").enablePositionalOptions();
 program.command("init").description("Initialize project for use with a coding agent").option("--agent <name...>", "Agents to configure (cursor, claude, codex, other)").addHelpText("after", `
 Examples:
   $ specific init

package/dist/docs/storage.md

@@ -36,6 +36,36 @@ storage "uploads" {}
 - `access_key` - Access key for authentication
 - `secret_key` - Secret key for authentication
 - `bucket` - Bucket name
+- `public_url` - HTTPS origin for anonymous reads (public buckets only)
+
+## Public buckets
+
+Public access is opt-in:
+
+```hcl
+storage "assets" {
+  public = true
+}
+
+service "web" {
+  build = build.web
+
+  env = {
+    ASSETS_PUBLIC_URL = storage.assets.public_url
+  }
+}
+```
+
+`public_url` has no trailing slash. Append an object key to it, for example
+`${ASSETS_PUBLIC_URL}/images/logo.png`.
+
+Anonymous users can read objects, but uploads and deletes still require
+credentials. Directory listing is disabled. CORS, cache headers, and custom
+domains must be configured separately. Removing `public = true` makes the
+bucket private again on the next deployment.
+
+Preview buckets contain a fork of their parent bucket. Making one public can
+expose copied parent data.
 
 ## Production management
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specific.dev/cli",
-  "version": "0.1.186",
+  "version": "0.1.187",
   "description": "CLI for Specific infrastructure-as-code",
   "type": "module",
   "main": "dist/cli.js",