@stacksjs/buddy 0.70.257 → 0.70.259

package/dist/commands/env.js

@@ -1,312 +1 @@
-import process from "node:process";
-import { log, onUnknownSubcommand } from "@stacksjs/cli";
-import { decryptEnv, encryptEnv, getEnv, getKeypair, resolveEnvFile, rotateKeypair, setEnv } from "@stacksjs/env";
-import { ExitCode } from "@stacksjs/types";
-export function env(buddy) {
-  const descriptions = {
-    env: "Interact with your environment variables",
-    get: "Get an environment variable",
-    set: "Set an environment variable",
-    encrypt: "Encrypt a value",
-    decrypt: "Decrypt a value",
-    check: "Check environment configuration and validate setup",
-    pretty: "Pretty print the result",
-    stdout: "Output the result to stdout",
-    keypair: "Generate a keypair",
-    fileKeys: "The path to the file containing the keys",
-    excludeKey: "The key to exclude from encryption",
-    rotate: "Rotate a keypair",
-    format: "The format to output the result (json, shell, eval)",
-    all: "Get all environment variables",
-    file: "The environment file to use",
-    project: "Target a specific project",
-    verbose: "Enable verbose output"
-  };
-  buddy.command("env:get [key]", descriptions.get).option("-f, --file [file]", descriptions.file, { default: "" }).option("--format [format]", descriptions.format, { default: "json" }).option("-a, --all", descriptions.all, { default: !1 }).option("-p, --pretty", descriptions.pretty, { default: !1 }).option("-p, --project [project]", descriptions.project, { default: !1 }).option("--verbose", descriptions.verbose, { default: !1 }).example("buddy env:get SECRET").example("buddy env:get SECRET --file .env.production").example("buddy env:get --all --pretty").example("buddy env:get --format shell").example("buddy env:get --format eval").example("buddy env:get --format json").action(async (key, options) => {
-    log.debug("Running `buddy env:get` ...", options);
-    const result = getEnv(key, {
-      file: resolveEnvFile(options.file, options.env),
-      keysFile: options.fileKeys,
-      all: options.all,
-      format: options.format,
-      prettyPrint: options.pretty
-    });
-    if (result.success) {
-      console.log(result.output);
-      process.exit(ExitCode.Success);
-    } else {
-      console.error(result.error);
-      process.exit(ExitCode.FatalError);
-    }
-  });
-  buddy.command("env:set [key] [value]", descriptions.set).option("-f, --file [file]", descriptions.file, { default: "" }).option("-fk, --file-keys [fileKeys]", descriptions.fileKeys, { default: "" }).option("--plain", "Don't encrypt the value", { default: !1 }).option("--verbose", descriptions.verbose, { default: !1 }).example("buddy env:set SECRET=value").example("buddy env:set SECRET value").example("buddy env:set SECRET value --file .env.production").example("buddy env:set SECRET value --plain").action(async (key, value, options) => {
-    log.debug("Running `buddy env:set` ...", options);
-    if (!key || !value) {
-      console.error("Both key and value are required");
-      process.exit(ExitCode.FatalError);
-    }
-    const result = setEnv(key, value, {
-      file: resolveEnvFile(options.file, options.env),
-      keysFile: options.fileKeys,
-      plain: options.plain
-    });
-    if (result.success) {
-      console.log(result.output);
-      process.exit(ExitCode.Success);
-    } else {
-      console.error(result.error);
-      process.exit(ExitCode.FatalError);
-    }
-  });
-  buddy.command("env:encrypt [key]", descriptions.encrypt).option("-f, --file [file]", descriptions.file, { default: "" }).option("-fk, --file-keys [fileKeys]", descriptions.fileKeys, { default: "" }).option("-o, --stdout", descriptions.stdout, { default: !1 }).option("-ek, --exclude-key [excludeKey]", descriptions.excludeKey, { default: "" }).example("buddy env:encrypt").example("buddy env:encrypt --file .env.production").example('buddy env:encrypt -k "SECRET_*"').action(async (key, options) => {
-    log.debug("Running `buddy env:encrypt` ...", options);
-    const result = encryptEnv({
-      file: resolveEnvFile(options.file, options.env),
-      keysFile: options.fileKeys,
-      key,
-      excludeKey: options.excludeKey,
-      stdout: options.stdout
-    });
-    if (result.success) {
-      console.log(result.output);
-      process.exit(ExitCode.Success);
-    } else {
-      console.error(result.error);
-      process.exit(ExitCode.FatalError);
-    }
-  });
-  buddy.command("env:decrypt [key]", descriptions.decrypt).option("-f, --file [file]", descriptions.file, { default: "" }).option("-fk, --file-keys [fileKeys]", descriptions.fileKeys, { default: "" }).option("-o, --stdout", descriptions.stdout, { default: !1 }).example("buddy env:decrypt").example("buddy env:decrypt --file .env.production").example('buddy env:decrypt -k "SECRET_*"').action(async (key, options) => {
-    log.debug("Running `buddy env:decrypt` ...", options);
-    const result = decryptEnv({
-      file: resolveEnvFile(options.file, options.env),
-      keysFile: options.fileKeys,
-      key,
-      stdout: options.stdout
-    });
-    if (result.success) {
-      console.log(result.output);
-      process.exit(ExitCode.Success);
-    } else {
-      console.error(result.error);
-      process.exit(ExitCode.FatalError);
-    }
-  });
-  buddy.command("env:keypair [key]", descriptions.keypair).option("-f, --file [file]", descriptions.file, { default: "" }).option("-fk, --file-keys [fileKeys]", descriptions.fileKeys, { default: "" }).option("--format [format]", descriptions.format, { default: "json" }).example("buddy env:keypair").example("buddy env:keypair --file .env.production").example("buddy env:keypair DOTENV_PRIVATE_KEY").action(async (key, options) => {
-    log.debug("Running `buddy env:keypair` ...", options);
-    const result = getKeypair(key, {
-      file: resolveEnvFile(options.file, options.env),
-      keysFile: options.fileKeys,
-      format: options.format
-    });
-    if (result.success) {
-      console.log(result.output);
-      process.exit(ExitCode.Success);
-    } else {
-      console.error(result.error);
-      process.exit(ExitCode.FatalError);
-    }
-  });
-  buddy.command("env:rotate [key]", descriptions.rotate).option("-f, --file [file]", descriptions.file, { default: "" }).option("-fk, --file-keys [fileKeys]", descriptions.fileKeys, { default: "" }).option("-o, --stdout", descriptions.stdout, { default: !1 }).option("-ek, --exclude-key [excludeKey]", descriptions.excludeKey, { default: "" }).example("buddy env:rotate").example("buddy env:rotate --file .env.production").action(async (key, options) => {
-    log.debug("Running `buddy env:rotate` ...", options);
-    const result = rotateKeypair({
-      file: resolveEnvFile(options.file, options.env),
-      keysFile: options.fileKeys,
-      key,
-      excludeKey: options.excludeKey,
-      stdout: options.stdout
-    });
-    if (result.success) {
-      console.log(result.output);
-      process.exit(ExitCode.Success);
-    } else {
-      console.error(result.error);
-      process.exit(ExitCode.FatalError);
-    }
-  });
-  buddy.command("env:check", descriptions.check).option("-f, --file [file]", descriptions.file, { default: "" }).option("--verbose", descriptions.verbose, { default: !1 }).example("buddy env:check").example("buddy env:check --file .env.production").action(async (options) => {
-    log.debug("Running `buddy env:check` ...", options);
-    const { bold, dim, green, red, yellow, intro } = await import("@stacksjs/cli"), { storage } = await import("@stacksjs/storage"), { existsSync } = await import("node:fs"), { resolve } = await import("node:path");
-    await intro("buddy env:check");
-    const checks = [], envFile = options.file || ".env", envPath = resolve(process.cwd(), envFile);
-    if (existsSync(envPath)) {
-      checks.push({
-        name: `${envFile} file`,
-        status: "pass",
-        message: "Found"
-      });
-      try {
-        const envContent = await storage.readTextFile(envPath), contentStr = typeof envContent === "string" ? envContent : envContent.data, values = parseEnvAssignments(contentStr), keys = Object.keys(values), varCount = keys.length;
-        checks.push({
-          name: "Environment variables",
-          status: "pass",
-          message: `${varCount} variables defined`
-        });
-        if ("APP_KEY" in values)
-          if ((values.APP_KEY ?? "").length > 0)
-            checks.push({
-              name: "APP_KEY",
-              status: "pass",
-              message: "Set"
-            });
-          else
-            checks.push({
-              name: "APP_KEY",
-              status: "warn",
-              message: "Empty (run: buddy key:generate)"
-            });
-        else
-          checks.push({
-            name: "APP_KEY",
-            status: "warn",
-            message: "Not found (run: buddy key:generate)"
-          });
-        const hasPublicKey = keys.some((key) => key.startsWith("DOTENV_PUBLIC_KEY")), hasPrivateKey = keys.some((key) => key.startsWith("DOTENV_PRIVATE_KEY")) || existsSync(resolve(process.cwd(), ".env.keys"));
-        if (hasPublicKey && hasPrivateKey)
-          checks.push({
-            name: "Encryption keys",
-            status: "pass",
-            message: "Public and private keys configured"
-          });
-        else if (hasPublicKey || hasPrivateKey)
-          checks.push({
-            name: "Encryption keys",
-            status: "warn",
-            message: "Incomplete keypair (run: buddy env:keypair)"
-          });
-        else
-          checks.push({
-            name: "Encryption keys",
-            status: "warn",
-            message: "Not configured (optional)"
-          });
-        const declaredTenants = await resolveDeclaredTenants();
-        if (declaredTenants.tenants.length === 0)
-          checks.push({
-            name: "Tenant isolation",
-            status: "pass",
-            message: "No tenants declared (cloud.tenants)"
-          });
-        else {
-          const { foreignTenantKeys, partitionTenantEnv } = await import("@stacksjs/env"), foreign = foreignTenantKeys(partitionTenantEnv(values, declaredTenants)), isShipped = /^\.env\.[a-z]+$/.test(envFile), total = foreign.reduce((sum, entry) => sum + entry.keys.length, 0);
-          if (foreign.length === 0)
-            checks.push({
-              name: "Tenant isolation",
-              status: "pass",
-              message: `No foreign keys (checked ${declaredTenants.tenants.join(", ")})`
-            });
-          else if (!isShipped)
-            checks.push({
-              name: "Tenant isolation",
-              status: "pass",
-              message: `${total} archived key(s) \u2014 ${envFile} is local-only and never deployed`
-            });
-          else {
-            checks.push({
-              name: "Tenant isolation",
-              status: "warn",
-              message: `${total} key(s) belong to another tenant \u2014 move them to .env`
-            });
-            for (const { tenant, keys } of foreign)
-              checks.push({
-                name: `  ${tenant}`,
-                status: "warn",
-                message: keys.join(", ")
-              });
-          }
-        }
-      } catch (error) {
-        checks.push({
-          name: `${envFile} content`,
-          status: "fail",
-          message: `Cannot read file: ${error}`
-        });
-      }
-    } else
-      checks.push({
-        name: `${envFile} file`,
-        status: "fail",
-        message: "Not found"
-      });
-    const keysPath = resolve(process.cwd(), ".env.keys");
-    if (existsSync(keysPath))
-      checks.push({
-        name: ".env.keys file",
-        status: "pass",
-        message: "Found"
-      });
-    else
-      checks.push({
-        name: ".env.keys file",
-        status: "warn",
-        message: "Not found (optional for encryption)"
-      });
-    console.log("");
-    console.log(bold("Environment Configuration Check:"));
-    console.log(dim("\u2500".repeat(60)));
-    console.log("");
-    let hasFailures = !1, hasWarnings = !1;
-    for (const check of checks) {
-      let statusIcon = "", statusColor = (text) => text;
-      if (check.status === "pass") {
-        statusIcon = "\u2713";
-        statusColor = green;
-      } else if (check.status === "warn") {
-        statusIcon = "\u26A0";
-        statusColor = yellow;
-        hasWarnings = !0;
-      } else {
-        statusIcon = "\u2717";
-        statusColor = red;
-        hasFailures = !0;
-      }
-      console.log(`${statusColor(statusIcon)} ${bold(check.name.padEnd(25))} ${dim(check.message)}`);
-    }
-    console.log("");
-    console.log(dim("\u2500".repeat(60)));
-    console.log("");
-    if (hasFailures) {
-      console.log(red("\u2717 Some critical checks failed. Please address the issues above."));
-      process.exit(ExitCode.FatalError);
-    } else if (hasWarnings) {
-      console.log(yellow("\u26A0 Some checks have warnings. Your environment should work but may have issues."));
-      process.exit(ExitCode.Success);
-    } else {
-      console.log(green("\u2713 All checks passed! Your environment configuration looks healthy."));
-      process.exit(ExitCode.Success);
-    }
-  });
-  onUnknownSubcommand(buddy, "env");
-}
-async function resolveDeclaredTenants() {
-  try {
-    const { config } = await import("@stacksjs/config"), cloud = config.cloud, app = config.app, tenants = Array.isArray(cloud?.tenants) ? cloud.tenants.filter((slug) => typeof slug === "string") : [];
-    return { self: app?.name, tenants };
-  } catch {
-    return { tenants: [] };
-  }
-}
-export function parseEnvAssignments(content) {
-  const values = {}, assignment = /^\s*(?:export\s+)?([A-Z_][A-Z0-9_]*)\s*=\s*(.*)$/i, lines = content.split(/\r?\n/);
-  for (let i = 0;i < lines.length; i++) {
-    const line = lines[i];
-    if (!line.trim() || line.trimStart().startsWith("#"))
-      continue;
-    const match = line.match(assignment);
-    if (!match)
-      continue;
-    const [, key, first] = match;
-    let raw = first.trim();
-    const quote = raw[0] === '"' || raw[0] === "'" ? raw[0] : void 0;
-    if (quote) {
-      raw = raw.slice(1);
-      while (!raw.endsWith(quote) && i + 1 < lines.length) {
-        i++;
-        raw += lines[i];
-      }
-      raw = raw.endsWith(quote) ? raw.slice(0, -1) : raw;
-    } else
-      raw = raw.replace(/\s+#.*$/, "").trim();
-    values[key] = raw;
-  }
-  return values;
-}
+import process from"node:process";import{log,onUnknownSubcommand}from"@stacksjs/cli";import{decryptEnv,encryptEnv,getEnv,getKeypair,resolveEnvFile,rotateKeypair,setEnv}from"@stacksjs/env";import{ExitCode}from"@stacksjs/types";export function env(buddy){const descriptions={env:"Interact with your environment variables",get:"Get an environment variable",set:"Set an environment variable",encrypt:"Encrypt a value",decrypt:"Decrypt a value",check:"Check environment configuration and validate setup",pretty:"Pretty print the result",stdout:"Output the result to stdout",keypair:"Generate a keypair",fileKeys:"The path to the file containing the keys",excludeKey:"The key to exclude from encryption",rotate:"Rotate a keypair",format:"The format to output the result (json, shell, eval)",all:"Get all environment variables",file:"The environment file to use",project:"Target a specific project",verbose:"Enable verbose output"};buddy.command("env:get [key]",descriptions.get).option("-f, --file [file]",descriptions.file,{default:""}).option("--format [format]",descriptions.format,{default:"json"}).option("-a, --all",descriptions.all,{default:!1}).option("-p, --pretty",descriptions.pretty,{default:!1}).option("-p, --project [project]",descriptions.project,{default:!1}).option("--verbose",descriptions.verbose,{default:!1}).example("buddy env:get SECRET").example("buddy env:get SECRET --file .env.production").example("buddy env:get --all --pretty").example("buddy env:get --format shell").example("buddy env:get --format eval").example("buddy env:get --format json").action(async(key,options)=>{log.debug("Running `buddy env:get` ...",options);const result=getEnv(key,{file:resolveEnvFile(options.file,options.env),keysFile:options.fileKeys,all:options.all,format:options.format,prettyPrint:options.pretty});if(result.success){console.log(result.output);process.exit(ExitCode.Success)}else{console.error(result.error);process.exit(ExitCode.FatalError)}});buddy.command("env:set [key] [value]",descriptions.set).option("-f, --file [file]",descriptions.file,{default:""}).option("-fk, --file-keys [fileKeys]",descriptions.fileKeys,{default:""}).option("--plain","Don't encrypt the value",{default:!1}).option("--verbose",descriptions.verbose,{default:!1}).example("buddy env:set SECRET=value").example("buddy env:set SECRET value").example("buddy env:set SECRET value --file .env.production").example("buddy env:set SECRET value --plain").action(async(key,value,options)=>{log.debug("Running `buddy env:set` ...",options);if(!key||!value){console.error("Both key and value are required");process.exit(ExitCode.FatalError)}const result=setEnv(key,value,{file:resolveEnvFile(options.file,options.env),keysFile:options.fileKeys,plain:options.plain});if(result.success){console.log(result.output);process.exit(ExitCode.Success)}else{console.error(result.error);process.exit(ExitCode.FatalError)}});buddy.command("env:encrypt [key]",descriptions.encrypt).option("-f, --file [file]",descriptions.file,{default:""}).option("-fk, --file-keys [fileKeys]",descriptions.fileKeys,{default:""}).option("-o, --stdout",descriptions.stdout,{default:!1}).option("-ek, --exclude-key [excludeKey]",descriptions.excludeKey,{default:""}).example("buddy env:encrypt").example("buddy env:encrypt --file .env.production").example('buddy env:encrypt -k "SECRET_*"').action(async(key,options)=>{log.debug("Running `buddy env:encrypt` ...",options);const result=encryptEnv({file:resolveEnvFile(options.file,options.env),keysFile:options.fileKeys,key,excludeKey:options.excludeKey,stdout:options.stdout});if(result.success){console.log(result.output);process.exit(ExitCode.Success)}else{console.error(result.error);process.exit(ExitCode.FatalError)}});buddy.command("env:decrypt [key]",descriptions.decrypt).option("-f, --file [file]",descriptions.file,{default:""}).option("-fk, --file-keys [fileKeys]",descriptions.fileKeys,{default:""}).option("-o, --stdout",descriptions.stdout,{default:!1}).example("buddy env:decrypt").example("buddy env:decrypt --file .env.production").example('buddy env:decrypt -k "SECRET_*"').action(async(key,options)=>{log.debug("Running `buddy env:decrypt` ...",options);const result=decryptEnv({file:resolveEnvFile(options.file,options.env),keysFile:options.fileKeys,key,stdout:options.stdout});if(result.success){console.log(result.output);process.exit(ExitCode.Success)}else{console.error(result.error);process.exit(ExitCode.FatalError)}});buddy.command("env:keypair [key]",descriptions.keypair).option("-f, --file [file]",descriptions.file,{default:""}).option("-fk, --file-keys [fileKeys]",descriptions.fileKeys,{default:""}).option("--format [format]",descriptions.format,{default:"json"}).example("buddy env:keypair").example("buddy env:keypair --file .env.production").example("buddy env:keypair DOTENV_PRIVATE_KEY").action(async(key,options)=>{log.debug("Running `buddy env:keypair` ...",options);const result=getKeypair(key,{file:resolveEnvFile(options.file,options.env),keysFile:options.fileKeys,format:options.format});if(result.success){console.log(result.output);process.exit(ExitCode.Success)}else{console.error(result.error);process.exit(ExitCode.FatalError)}});buddy.command("env:rotate [key]",descriptions.rotate).option("-f, --file [file]",descriptions.file,{default:""}).option("-fk, --file-keys [fileKeys]",descriptions.fileKeys,{default:""}).option("-o, --stdout",descriptions.stdout,{default:!1}).option("-ek, --exclude-key [excludeKey]",descriptions.excludeKey,{default:""}).example("buddy env:rotate").example("buddy env:rotate --file .env.production").action(async(key,options)=>{log.debug("Running `buddy env:rotate` ...",options);const result=rotateKeypair({file:resolveEnvFile(options.file,options.env),keysFile:options.fileKeys,key,excludeKey:options.excludeKey,stdout:options.stdout});if(result.success){console.log(result.output);process.exit(ExitCode.Success)}else{console.error(result.error);process.exit(ExitCode.FatalError)}});buddy.command("env:check",descriptions.check).option("-f, --file [file]",descriptions.file,{default:""}).option("--verbose",descriptions.verbose,{default:!1}).example("buddy env:check").example("buddy env:check --file .env.production").action(async(options)=>{log.debug("Running `buddy env:check` ...",options);const{bold,dim,green,red,yellow,intro}=await import("@stacksjs/cli"),{storage}=await import("@stacksjs/storage"),{existsSync}=await import("node:fs"),{resolve}=await import("node:path");await intro("buddy env:check");const checks=[],envFile=options.file||".env",envPath=resolve(process.cwd(),envFile);if(existsSync(envPath)){checks.push({name:`${envFile} file`,status:"pass",message:"Found"});try{const envContent=await storage.readTextFile(envPath),contentStr=typeof envContent==="string"?envContent:envContent.data,values=parseEnvAssignments(contentStr),keys=Object.keys(values),varCount=keys.length;checks.push({name:"Environment variables",status:"pass",message:`${varCount} variables defined`});if("APP_KEY"in values)if((values.APP_KEY??"").length>0)checks.push({name:"APP_KEY",status:"pass",message:"Set"});else checks.push({name:"APP_KEY",status:"warn",message:"Empty (run: buddy key:generate)"});else checks.push({name:"APP_KEY",status:"warn",message:"Not found (run: buddy key:generate)"});const hasPublicKey=keys.some((key)=>key.startsWith("DOTENV_PUBLIC_KEY")),hasPrivateKey=keys.some((key)=>key.startsWith("DOTENV_PRIVATE_KEY"))||existsSync(resolve(process.cwd(),".env.keys"));if(hasPublicKey&&hasPrivateKey)checks.push({name:"Encryption keys",status:"pass",message:"Public and private keys configured"});else if(hasPublicKey||hasPrivateKey)checks.push({name:"Encryption keys",status:"warn",message:"Incomplete keypair (run: buddy env:keypair)"});else checks.push({name:"Encryption keys",status:"warn",message:"Not configured (optional)"});const declaredTenants=await resolveDeclaredTenants();if(declaredTenants.tenants.length===0)checks.push({name:"Tenant isolation",status:"pass",message:"No tenants declared (cloud.tenants)"});else{const{foreignTenantKeys,partitionTenantEnv}=await import("@stacksjs/env"),foreign=foreignTenantKeys(partitionTenantEnv(values,declaredTenants)),isShipped=/^\.env\.[a-z]+$/.test(envFile),total=foreign.reduce((sum,entry)=>sum+entry.keys.length,0);if(foreign.length===0)checks.push({name:"Tenant isolation",status:"pass",message:`No foreign keys (checked ${declaredTenants.tenants.join(", ")})`});else if(!isShipped)checks.push({name:"Tenant isolation",status:"pass",message:`${total} archived key(s) \u2014 ${envFile} is local-only and never deployed`});else{checks.push({name:"Tenant isolation",status:"warn",message:`${total} key(s) belong to another tenant \u2014 move them to .env`});for(const{tenant,keys}of foreign)checks.push({name:`  ${tenant}`,status:"warn",message:keys.join(", ")})}}}catch(error){checks.push({name:`${envFile} content`,status:"fail",message:`Cannot read file: ${error}`})}}else checks.push({name:`${envFile} file`,status:"fail",message:"Not found"});const keysPath=resolve(process.cwd(),".env.keys");if(existsSync(keysPath))checks.push({name:".env.keys file",status:"pass",message:"Found"});else checks.push({name:".env.keys file",status:"warn",message:"Not found (optional for encryption)"});console.log("");console.log(bold("Environment Configuration Check:"));console.log(dim("\u2500".repeat(60)));console.log("");let hasFailures=!1,hasWarnings=!1;for(const check of checks){let statusIcon="",statusColor=(text)=>text;if(check.status==="pass"){statusIcon="\u2713";statusColor=green}else if(check.status==="warn"){statusIcon="\u26A0";statusColor=yellow;hasWarnings=!0}else{statusIcon="\u2717";statusColor=red;hasFailures=!0}console.log(`${statusColor(statusIcon)} ${bold(check.name.padEnd(25))} ${dim(check.message)}`)}console.log("");console.log(dim("\u2500".repeat(60)));console.log("");if(hasFailures){console.log(red("\u2717 Some critical checks failed. Please address the issues above."));process.exit(ExitCode.FatalError)}else if(hasWarnings){console.log(yellow("\u26A0 Some checks have warnings. Your environment should work but may have issues."));process.exit(ExitCode.Success)}else{console.log(green("\u2713 All checks passed! Your environment configuration looks healthy."));process.exit(ExitCode.Success)}});onUnknownSubcommand(buddy,"env")}async function resolveDeclaredTenants(){try{const{config}=await import("@stacksjs/config"),cloud=config.cloud,app=config.app,tenants=Array.isArray(cloud?.tenants)?cloud.tenants.filter((slug)=>typeof slug==="string"):[];return{self:app?.name,tenants}}catch{return{tenants:[]}}}export function parseEnvAssignments(content){const values={},assignment=/^\s*(?:export\s+)?([A-Z_][A-Z0-9_]*)\s*=\s*(.*)$/i,lines=content.split(/\r?\n/);for(let i=0;i<lines.length;i++){const line=lines[i];if(!line.trim()||line.trimStart().startsWith("#"))continue;const match=line.match(assignment);if(!match)continue;const[,key,first]=match;let raw=first.trim();const quote=raw[0]==='"'||raw[0]==="'"?raw[0]:void 0;if(quote){raw=raw.slice(1);while(!raw.endsWith(quote)&&i+1<lines.length){i++;raw+=lines[i]}raw=raw.endsWith(quote)?raw.slice(0,-1):raw}else raw=raw.replace(/\s+#.*$/,"").trim();values[key]=raw}return values}

package/dist/commands/extension.js

@@ -1,239 +1 @@
-import process from "node:process";
-import { log } from "@stacksjs/cli";
-function parseSafariPlatforms(platform) {
-  if (!platform)
-    return;
-  if (platform === "all")
-    return ["macos", "ios"];
-  if (platform === "macos" || platform === "ios")
-    return [platform];
-  throw Error(`Invalid Safari platform ${platform}; use macos, ios, or all`);
-}
-export function extension(buddy) {
-  const load = async () => {
-    const { loadExtensionConfig } = await import("@stacksjs/browser-extension"), config = await loadExtensionConfig(process.cwd());
-    if (!config) {
-      log.error("No extension config found. Create `config/extension.ts` exporting `defineExtension({ \u2026 })`.");
-      process.exit(1);
-    }
-    const pkg = await Bun.file(`${process.cwd()}/package.json`).json().catch(() => ({}));
-    return { config, version: pkg.version ?? "0.0.0" };
-  };
-  buddy.command("extension:build", "Build the browser extension (Chrome + Firefox + Safari) from config/extension.ts").option("--target <target>", "Build a single target (chrome | firefox | safari); omit to build all").option("--version <version>", "Override the extension version (defaults to package.json)").action(async (options) => {
-    const { buildExtension, buildAllTargets } = await import("@stacksjs/browser-extension"), { config, version } = await load(), v = options.version ?? version;
-    if (options.target) {
-      const { outdir } = await buildExtension(config, { target: options.target, version: v });
-      log.success(`Built ${config.name} ${v} (${options.target}) \u2192 ${outdir}`);
-    } else {
-      await buildAllTargets(config, { version: v });
-      log.success(`Built ${config.name} ${v} for ${(config.targets ?? ["chrome", "firefox"]).join(", ")}`);
-    }
-  });
-  buddy.command("extension:init", "Scaffold a Chrome, Firefox, or Safari extension, including the Safari Xcode app").option("--name <name>", "Extension display name").option("--target <target>", "Scaffold chrome, firefox, safari, or all (default all)").option("--bundle-id <id>", "Safari container bundle identifier").option("--team-id <id>", "Apple Developer team used for Safari signing").option("--platform <platform>", "Safari platform: macos, ios, or all (default all)").option("--force", "Overwrite existing starter and Safari scaffold files").action(async (options) => {
-    const target = options.target ?? "all";
-    if (!["chrome", "firefox", "safari", "all"].includes(target))
-      throw Error(`Invalid extension target ${target}; use chrome, firefox, safari, or all`);
-    const { scaffoldExtensionProject } = await import("@stacksjs/browser-extension"), result = await scaffoldExtensionProject({
-      name: options.name,
-      target,
-      bundleId: options.bundleId,
-      teamId: options.teamId,
-      platforms: parseSafariPlatforms(options.platform) ?? ["macos", "ios"],
-      force: Boolean(options.force)
-    });
-    for (const file of result.written)
-      log.success(`created ${file}`);
-    for (const file of result.skipped)
-      log.info(`skip (exists): ${file}`);
-    if (result.safari)
-      log.success(`Scaffolded the Safari container app \u2192 ${result.safari.dir}`);
-    log.info("Next: add icons under public/icons, then run `buddy extension:build`.");
-  });
-  buddy.command("extension:package", "Build + zip the browser extension into store-ready archives").option("--target <target>", "Package a single target (chrome | firefox | safari); omit to package all").option("--version <version>", "Override the extension version (defaults to package.json)").action(async (options) => {
-    const { packageExtension } = await import("@stacksjs/browser-extension"), { config, version } = await load(), v = options.version ?? version, targets = options.target ? [options.target] : config.targets ?? ["chrome", "firefox"];
-    for (const target of targets) {
-      const out = await packageExtension(config, { target, version: v });
-      log.success(`Packaged ${config.name} (${target}) \u2192 ${out}`);
-    }
-  });
-  buddy.command("extension:chrome:status", "Fetch the Chrome Web Store item status").option("--service-account-path <path>", "Google service-account JSON key path").option("--access-token <token>", "Short-lived Chrome Web Store OAuth access token").action(async (options) => {
-    const { ChromeWebStoreClient } = await import("@stacksjs/browser-extension"), { config } = await load();
-    if (!config.chromeWebStore)
-      throw Error("Chrome status needs chromeWebStore.publisherId and chromeWebStore.itemId in config/extension.ts");
-    const status = await new ChromeWebStoreClient(options).fetchStatus(config.chromeWebStore);
-    log.info(`Chrome Web Store item ${status.itemId}`);
-    log.info(`published: ${status.publishedItemRevisionStatus?.state ?? "none"}`);
-    log.info(`submitted: ${status.submittedItemRevisionStatus?.state ?? "none"}`);
-    if (status.warned)
-      log.warn("Chrome has warned this item for a policy violation.");
-    if (status.takenDown)
-      log.error("Chrome has taken this item down for a policy violation.");
-  });
-  buddy.command("extension:chrome:publish", "Build, upload, and submit the Chrome extension through Web Store API v2").option("--version <version>", "Override the extension version (defaults to package.json)").option("--service-account-path <path>", "Google service-account JSON key path").option("--access-token <token>", "Short-lived Chrome Web Store OAuth access token").option("--upload-only", "Upload without submitting the item for review").option("--allow-warnings", "Submit even when Chrome reports validation warnings").action(async (options) => {
-    const { publishChromeExtension } = await import("@stacksjs/browser-extension"), { config, version } = await load(), result = await publishChromeExtension(config, {
-      version: options.version ?? version,
-      serviceAccountPath: options.serviceAccountPath,
-      accessToken: options.accessToken,
-      uploadOnly: Boolean(options.uploadOnly),
-      blockOnWarnings: !options.allowWarnings
-    });
-    if (result.deferred) {
-      log.warn(`${result.deferred.reason}. Version ${options.version ?? version} remains queued for the next automated retry.`);
-      return;
-    }
-    if (result.alreadyPublished) {
-      log.success(result.alreadyPublished.reason);
-      return;
-    }
-    log.success(`Uploaded Chrome package ${result.packagePath} (${result.upload?.crxVersion ?? "processing complete"})`);
-    if (result.publish)
-      log.success(`Submitted Chrome Web Store item ${result.publish.itemId}: ${result.publish.state}`);
-  });
-  buddy.command("extension:firefox:previews", "Sync the Firefox listing screenshots declared in config/extension.ts").option("--api-key <issuer>", "AMO JWT issuer").option("--api-secret <secret>", "AMO JWT secret").option("--dry-run", "Report what would change without touching the listing").action(async (options) => {
-    const { syncFirefoxPreviews } = await import("@stacksjs/browser-extension"), { config } = await load(), result = await syncFirefoxPreviews(config, {
-      issuer: options.apiKey,
-      secret: options.apiSecret,
-      dryRun: options.dryRun
-    });
-    if (result.unchanged)
-      log.info("Firefox listing screenshots already match config/extension.ts");
-    else if (options.dryRun)
-      log.info(`Would replace ${result.removed.length} Firefox listing screenshot(s)`);
-    else
-      log.success(`Synced ${result.uploaded.length} Firefox listing screenshot(s), removed ${result.removed.length}`);
-  });
-  buddy.command("extension:firefox:publish", "Build and submit the Firefox extension through Mozilla Add-ons").option("--version <version>", "Override the extension version (defaults to package.json)").option("--api-key <issuer>", "AMO JWT issuer").option("--api-secret <secret>", "AMO JWT secret").option("--source-code <path>", "Human-readable source archive for AMO review").option("--approval-timeout <milliseconds>", "How long to wait for human approval (default 0)").action(async (options) => {
-    const { publishFirefoxExtension } = await import("@stacksjs/browser-extension"), { config, version } = await load(), result = await publishFirefoxExtension(config, {
-      version: options.version ?? version,
-      issuer: options.apiKey,
-      secret: options.apiSecret,
-      sourceCodePath: options.sourceCode,
-      approvalTimeout: options.approvalTimeout === void 0 ? void 0 : Number(options.approvalTimeout)
-    });
-    log.success(`Submitted Firefox extension (${result.channel}) \u2192 ${result.artifactsDir}`);
-    if (config.firefoxAddons?.screenshots?.length)
-      try {
-        const { syncFirefoxPreviews } = await import("@stacksjs/browser-extension"), previews = await syncFirefoxPreviews(config, { issuer: options.apiKey, secret: options.apiSecret });
-        if (previews.unchanged)
-          log.info("Firefox listing screenshots already match");
-        else
-          log.success(`Synced ${previews.uploaded.length} Firefox listing screenshot(s), removed ${previews.removed.length}`);
-      } catch (error) {
-        log.warn(`[extension:firefox:publish] listing screenshots left as they were: ${error.message}`);
-      }
-    if (result.artifacts.length)
-      log.info(`new artifacts: ${result.artifacts.join(", ")}`);
-  });
-  buddy.command("extension:safari:provision", "Register Safari Bundle IDs and check the App Store Connect app record").option("--api-key-id <id>", "App Store Connect API key ID").option("--api-issuer-id <id>", "App Store Connect API issuer ID").option("--api-key-path <path>", "Path to the App Store Connect AuthKey_*.p8 file").option("--check", "Report missing resources without creating Bundle IDs").option("--version <version>", "Create or align App Store versions (defaults to package.json)").option("--platform <platform>", "Provision macos, ios, or all (defaults to config safariPlatforms)").action(async (options) => {
-    const { provisionSafariApp } = await import("@stacksjs/browser-extension"), { config, version } = await load(), result = await provisionSafariApp(config, {
-      keyId: options.apiKeyId,
-      issuerId: options.apiIssuerId,
-      keyPath: options.apiKeyPath,
-      checkOnly: Boolean(options.check),
-      version: options.version ?? version,
-      platforms: parseSafariPlatforms(options.platform)
-    });
-    for (const resource of [result.container, result.extension])
-      if (resource.created)
-        log.success(`Registered Bundle ID ${resource.identifier}`);
-      else if (resource.exists)
-        log.success(`Bundle ID exists: ${resource.identifier}`);
-      else
-        log.warn(`Bundle ID is missing: ${resource.identifier}`);
-    if (result.appRecord.exists)
-      log.success(`App Store Connect app record exists (${result.appRecord.id})`);
-    else
-      log.warn("App Store Connect app record is missing. Apple requires creating it in the App Store Connect website.");
-    for (const appStoreVersion of result.appStoreVersions) {
-      const action = appStoreVersion.created ? "Created" : appStoreVersion.updated ? "Updated" : "Ready";
-      log.success(`${action} Safari ${appStoreVersion.platform} App Store version ${appStoreVersion.version}`);
-    }
-  });
-  buddy.command("extension:safari:init", "Scaffold the Safari container app (Xcode project) from the template").option("--bundle-id <id>", "Base bundle identifier (defaults to config safariBundleId)").option("--dir <dir>", "Output directory for the Xcode project (default safari)").option("--force", "Overwrite existing scaffold files").option("--team-id <id>", "Apple Developer team used for signing").action(async (options) => {
-    const { scaffoldSafariApp } = await import("@stacksjs/browser-extension"), { config } = await load(), { dir, written, skipped } = await scaffoldSafariApp(config, {
-      bundleId: options.bundleId,
-      dir: options.dir,
-      force: Boolean(options.force),
-      teamId: options.teamId
-    });
-    log.success(`Scaffolded the Safari container app \u2192 ${dir} (${written.length} files)`);
-    if (skipped.length)
-      log.info(`kept ${skipped.length} existing files (use --force to overwrite)`);
-  });
-  buddy.command("extension:safari:app", "Build the extension and its macOS, iPhone, and iPad Safari container apps").option("--release", "Build the Release configuration (default Debug)").option("--signed", "Sign locally against the Apple ID in Xcode (local builds only \u2014 see below)").option("--skip-xcodebuild", "Only build + sync the extension payload").option("--version <version>", "Override the extension version (defaults to package.json)").option("--platform <platform>", "Build macos, ios, or all (defaults to config safariPlatforms)").action(async (options) => {
-    const { buildSafariApp, buildSafariUniversalApp } = await import("@stacksjs/browser-extension"), { config, version } = await load(), platforms = parseSafariPlatforms(options.platform) ?? config.safariPlatforms ?? ["macos"];
-    if (platforms.includes("ios")) {
-      const result = await buildSafariUniversalApp(config, {
-        version: options.version ?? version,
-        release: Boolean(options.release),
-        signed: Boolean(options.signed),
-        skipXcodebuild: Boolean(options.skipXcodebuild),
-        platforms
-      });
-      for (const platform of platforms) {
-        const appPath = result.appPaths[platform];
-        if (appPath)
-          log.success(`Built Safari ${platform} app ${appPath}`);
-      }
-      if (options.skipXcodebuild)
-        log.success(`Generated universal Safari project \u2192 ${result.project}`);
-      if (result.appPaths.macos)
-        log.info("Open the macOS app once, then enable the extension in Safari > Settings > Extensions.");
-      if (result.appPaths.ios)
-        log.info("Install the iOS app on an iPhone, iPad, or Simulator, then enable it in Settings > Apps > Safari > Extensions.");
-      return;
-    }
-    const { appPath, resources } = await buildSafariApp(config, {
-      version: options.version ?? version,
-      release: Boolean(options.release),
-      signed: Boolean(options.signed),
-      skipXcodebuild: Boolean(options.skipXcodebuild)
-    });
-    if (appPath) {
-      log.success(`Built ${appPath}`);
-      log.info("Open the app once, then enable the extension in Safari > Settings > Extensions.");
-    } else
-      log.success(`Extension payload synced \u2192 ${resources}`);
-  });
-  buddy.command("extension:safari:publish", "Archive and validate or upload the Safari app to App Store Connect").option("--version <version>", "Override the marketing version (defaults to package.json)").option("--build-number <number>", "CFBundleVersion (defaults to GITHUB_RUN_NUMBER or Unix time)").option("--team-id <id>", "Apple Developer team (defaults to config safariTeamId)").option("--api-key-id <id>", "App Store Connect API key ID").option("--api-issuer-id <id>", "App Store Connect API issuer ID").option("--api-key-path <path>", "Path to the App Store Connect AuthKey_*.p8 file").option("--validate-only", "Create and validate the archive without uploading it").option("--platform <platform>", "Publish macos, ios, or all (defaults to config safariPlatforms)").option("--skip-screenshots", "Do not regenerate the App Store screenshot set before publishing").action(async (options) => {
-    const { publishSafariApp } = await import("@stacksjs/browser-extension"), { config, version } = await load();
-    if (!options.skipScreenshots)
-      try {
-        const { generateProjectImages } = await import("@stacksjs/actions");
-        await generateProjectImages({ only: ["app-store"] });
-      } catch (error) {
-        log.warn(`[extension:safari:publish] using the committed screenshots \u2014 could not regenerate: ${error.message}`);
-      }
-    const result = await publishSafariApp(config, {
-      version: options.version ?? version,
-      buildNumber: options.buildNumber,
-      teamId: options.teamId,
-      keyId: options.apiKeyId,
-      issuerId: options.apiIssuerId,
-      keyPath: options.apiKeyPath,
-      validateOnly: Boolean(options.validateOnly),
-      platforms: parseSafariPlatforms(options.platform)
-    });
-    for (const deferred of result.deferred)
-      log.warn(`${deferred.reason}. Version ${deferred.version} remains queued for the next automated retry.`);
-    for (const published of result.alreadyPublished)
-      log.success(`Safari ${published.platform} version ${published.version} is already published${published.state ? ` (${published.state})` : ""}`);
-    if (result.artifacts.length)
-      log.success(options.validateOnly ? `Validated Safari ${result.artifacts.map((artifact) => artifact.platform).join(" + ")} archives (build ${result.buildNumber})` : `Uploaded and selected Safari ${result.attachments.map((attachment) => attachment.platform).join(" + ")} build ${result.buildNumber} in App Store Connect`);
-    if (result.appStoreSubmission?.reviewSubmissionIds.length)
-      log.success(`Submitted ${result.appStoreSubmission.reviewSubmissionIds.length} Safari version(s) to App Review`);
-  });
-  buddy.command("extension:safari:submit", "Synchronize metadata and submit an existing Safari version to App Review").option("--version <version>", "Marketing version to submit (defaults to package.json)").option("--api-key-id <id>", "App Store Connect API key ID").option("--api-issuer-id <id>", "App Store Connect API issuer ID").option("--api-key-path <path>", "Path to the App Store Connect AuthKey_*.p8 file").option("--platform <platform>", "Submit macos, ios, or all (defaults to config safariPlatforms)").option("--prepare-only", "Synchronize the listing without submitting it for review").action(async (options) => {
-    const { submitSafariAppStore } = await import("@stacksjs/browser-extension"), { config, version } = await load(), result = await submitSafariAppStore(config, {
-      version: options.version ?? version,
-      keyId: options.apiKeyId,
-      issuerId: options.apiIssuerId,
-      keyPath: options.apiKeyPath,
-      platforms: parseSafariPlatforms(options.platform),
-      submit: !options.prepareOnly
-    });
-    log.success(`Synchronized ${result.versions.map((item) => item.platform).join(" + ")} App Store listings`);
-    if (result.reviewSubmissionIds.length)
-      log.success(`Submitted ${result.reviewSubmissionIds.length} Safari version(s) to App Review`);
-  });
-}
+import process from"node:process";import{log}from"@stacksjs/cli";function parseSafariPlatforms(platform){if(!platform)return;if(platform==="all")return["macos","ios"];if(platform==="macos"||platform==="ios")return[platform];throw Error(`Invalid Safari platform ${platform}; use macos, ios, or all`)}export function extension(buddy){const load=async()=>{const{loadExtensionConfig}=await import("@stacksjs/browser-extension"),config=await loadExtensionConfig(process.cwd());if(!config){log.error("No extension config found. Create `config/extension.ts` exporting `defineExtension({ \u2026 })`.");process.exit(1)}const pkg=await Bun.file(`${process.cwd()}/package.json`).json().catch(()=>({}));return{config,version:pkg.version??"0.0.0"}};buddy.command("extension:build","Build the browser extension (Chrome + Firefox + Safari) from config/extension.ts").option("--target <target>","Build a single target (chrome | firefox | safari); omit to build all").option("--version <version>","Override the extension version (defaults to package.json)").action(async(options)=>{const{buildExtension,buildAllTargets}=await import("@stacksjs/browser-extension"),{config,version}=await load(),v=options.version??version;if(options.target){const{outdir}=await buildExtension(config,{target:options.target,version:v});log.success(`Built ${config.name} ${v} (${options.target}) \u2192 ${outdir}`)}else{await buildAllTargets(config,{version:v});log.success(`Built ${config.name} ${v} for ${(config.targets??["chrome","firefox"]).join(", ")}`)}});buddy.command("extension:init","Scaffold a Chrome, Firefox, or Safari extension, including the Safari Xcode app").option("--name <name>","Extension display name").option("--target <target>","Scaffold chrome, firefox, safari, or all (default all)").option("--bundle-id <id>","Safari container bundle identifier").option("--team-id <id>","Apple Developer team used for Safari signing").option("--platform <platform>","Safari platform: macos, ios, or all (default all)").option("--force","Overwrite existing starter and Safari scaffold files").action(async(options)=>{const target=options.target??"all";if(!["chrome","firefox","safari","all"].includes(target))throw Error(`Invalid extension target ${target}; use chrome, firefox, safari, or all`);const{scaffoldExtensionProject}=await import("@stacksjs/browser-extension"),result=await scaffoldExtensionProject({name:options.name,target,bundleId:options.bundleId,teamId:options.teamId,platforms:parseSafariPlatforms(options.platform)??["macos","ios"],force:Boolean(options.force)});for(const file of result.written)log.success(`created ${file}`);for(const file of result.skipped)log.info(`skip (exists): ${file}`);if(result.safari)log.success(`Scaffolded the Safari container app \u2192 ${result.safari.dir}`);log.info("Next: add icons under public/icons, then run `buddy extension:build`.")});buddy.command("extension:package","Build + zip the browser extension into store-ready archives").option("--target <target>","Package a single target (chrome | firefox | safari); omit to package all").option("--version <version>","Override the extension version (defaults to package.json)").action(async(options)=>{const{packageExtension}=await import("@stacksjs/browser-extension"),{config,version}=await load(),v=options.version??version,targets=options.target?[options.target]:config.targets??["chrome","firefox"];for(const target of targets){const out=await packageExtension(config,{target,version:v});log.success(`Packaged ${config.name} (${target}) \u2192 ${out}`)}});buddy.command("extension:chrome:status","Fetch the Chrome Web Store item status").option("--service-account-path <path>","Google service-account JSON key path").option("--access-token <token>","Short-lived Chrome Web Store OAuth access token").action(async(options)=>{const{ChromeWebStoreClient}=await import("@stacksjs/browser-extension"),{config}=await load();if(!config.chromeWebStore)throw Error("Chrome status needs chromeWebStore.publisherId and chromeWebStore.itemId in config/extension.ts");const status=await new ChromeWebStoreClient(options).fetchStatus(config.chromeWebStore);log.info(`Chrome Web Store item ${status.itemId}`);log.info(`published: ${status.publishedItemRevisionStatus?.state??"none"}`);log.info(`submitted: ${status.submittedItemRevisionStatus?.state??"none"}`);if(status.warned)log.warn("Chrome has warned this item for a policy violation.");if(status.takenDown)log.error("Chrome has taken this item down for a policy violation.")});buddy.command("extension:chrome:publish","Build, upload, and submit the Chrome extension through Web Store API v2").option("--version <version>","Override the extension version (defaults to package.json)").option("--service-account-path <path>","Google service-account JSON key path").option("--access-token <token>","Short-lived Chrome Web Store OAuth access token").option("--upload-only","Upload without submitting the item for review").option("--allow-warnings","Submit even when Chrome reports validation warnings").action(async(options)=>{const{publishChromeExtension}=await import("@stacksjs/browser-extension"),{config,version}=await load(),result=await publishChromeExtension(config,{version:options.version??version,serviceAccountPath:options.serviceAccountPath,accessToken:options.accessToken,uploadOnly:Boolean(options.uploadOnly),blockOnWarnings:!options.allowWarnings});if(result.deferred){log.warn(`${result.deferred.reason}. Version ${options.version??version} remains queued for the next automated retry.`);return}if(result.alreadyPublished){log.success(result.alreadyPublished.reason);return}log.success(`Uploaded Chrome package ${result.packagePath} (${result.upload?.crxVersion??"processing complete"})`);if(result.publish)log.success(`Submitted Chrome Web Store item ${result.publish.itemId}: ${result.publish.state}`)});buddy.command("extension:firefox:previews","Sync the Firefox listing screenshots declared in config/extension.ts").option("--api-key <issuer>","AMO JWT issuer").option("--api-secret <secret>","AMO JWT secret").option("--dry-run","Report what would change without touching the listing").action(async(options)=>{const{syncFirefoxPreviews}=await import("@stacksjs/browser-extension"),{config}=await load(),result=await syncFirefoxPreviews(config,{issuer:options.apiKey,secret:options.apiSecret,dryRun:options.dryRun});if(result.unchanged)log.info("Firefox listing screenshots already match config/extension.ts");else if(options.dryRun)log.info(`Would replace ${result.removed.length} Firefox listing screenshot(s)`);else log.success(`Synced ${result.uploaded.length} Firefox listing screenshot(s), removed ${result.removed.length}`)});buddy.command("extension:firefox:publish","Build and submit the Firefox extension through Mozilla Add-ons").option("--version <version>","Override the extension version (defaults to package.json)").option("--api-key <issuer>","AMO JWT issuer").option("--api-secret <secret>","AMO JWT secret").option("--source-code <path>","Human-readable source archive for AMO review").option("--approval-timeout <milliseconds>","How long to wait for human approval (default 0)").action(async(options)=>{const{publishFirefoxExtension}=await import("@stacksjs/browser-extension"),{config,version}=await load(),result=await publishFirefoxExtension(config,{version:options.version??version,issuer:options.apiKey,secret:options.apiSecret,sourceCodePath:options.sourceCode,approvalTimeout:options.approvalTimeout===void 0?void 0:Number(options.approvalTimeout)});log.success(`Submitted Firefox extension (${result.channel}) \u2192 ${result.artifactsDir}`);if(config.firefoxAddons?.screenshots?.length)try{const{syncFirefoxPreviews}=await import("@stacksjs/browser-extension"),previews=await syncFirefoxPreviews(config,{issuer:options.apiKey,secret:options.apiSecret});if(previews.unchanged)log.info("Firefox listing screenshots already match");else log.success(`Synced ${previews.uploaded.length} Firefox listing screenshot(s), removed ${previews.removed.length}`)}catch(error){log.warn(`[extension:firefox:publish] listing screenshots left as they were: ${error.message}`)}if(result.artifacts.length)log.info(`new artifacts: ${result.artifacts.join(", ")}`)});buddy.command("extension:safari:provision","Register Safari Bundle IDs and check the App Store Connect app record").option("--api-key-id <id>","App Store Connect API key ID").option("--api-issuer-id <id>","App Store Connect API issuer ID").option("--api-key-path <path>","Path to the App Store Connect AuthKey_*.p8 file").option("--check","Report missing resources without creating Bundle IDs").option("--version <version>","Create or align App Store versions (defaults to package.json)").option("--platform <platform>","Provision macos, ios, or all (defaults to config safariPlatforms)").action(async(options)=>{const{provisionSafariApp}=await import("@stacksjs/browser-extension"),{config,version}=await load(),result=await provisionSafariApp(config,{keyId:options.apiKeyId,issuerId:options.apiIssuerId,keyPath:options.apiKeyPath,checkOnly:Boolean(options.check),version:options.version??version,platforms:parseSafariPlatforms(options.platform)});for(const resource of[result.container,result.extension])if(resource.created)log.success(`Registered Bundle ID ${resource.identifier}`);else if(resource.exists)log.success(`Bundle ID exists: ${resource.identifier}`);else log.warn(`Bundle ID is missing: ${resource.identifier}`);if(result.appRecord.exists)log.success(`App Store Connect app record exists (${result.appRecord.id})`);else log.warn("App Store Connect app record is missing. Apple requires creating it in the App Store Connect website.");for(const appStoreVersion of result.appStoreVersions){const action=appStoreVersion.created?"Created":appStoreVersion.updated?"Updated":"Ready";log.success(`${action} Safari ${appStoreVersion.platform} App Store version ${appStoreVersion.version}`)}});buddy.command("extension:safari:init","Scaffold the Safari container app (Xcode project) from the template").option("--bundle-id <id>","Base bundle identifier (defaults to config safariBundleId)").option("--dir <dir>","Output directory for the Xcode project (default safari)").option("--force","Overwrite existing scaffold files").option("--team-id <id>","Apple Developer team used for signing").action(async(options)=>{const{scaffoldSafariApp}=await import("@stacksjs/browser-extension"),{config}=await load(),{dir,written,skipped}=await scaffoldSafariApp(config,{bundleId:options.bundleId,dir:options.dir,force:Boolean(options.force),teamId:options.teamId});log.success(`Scaffolded the Safari container app \u2192 ${dir} (${written.length} files)`);if(skipped.length)log.info(`kept ${skipped.length} existing files (use --force to overwrite)`)});buddy.command("extension:safari:app","Build the extension and its macOS, iPhone, and iPad Safari container apps").option("--release","Build the Release configuration (default Debug)").option("--signed","Sign locally against the Apple ID in Xcode (local builds only \u2014 see below)").option("--skip-xcodebuild","Only build + sync the extension payload").option("--version <version>","Override the extension version (defaults to package.json)").option("--platform <platform>","Build macos, ios, or all (defaults to config safariPlatforms)").action(async(options)=>{const{buildSafariApp,buildSafariUniversalApp}=await import("@stacksjs/browser-extension"),{config,version}=await load(),platforms=parseSafariPlatforms(options.platform)??config.safariPlatforms??["macos"];if(platforms.includes("ios")){const result=await buildSafariUniversalApp(config,{version:options.version??version,release:Boolean(options.release),signed:Boolean(options.signed),skipXcodebuild:Boolean(options.skipXcodebuild),platforms});for(const platform of platforms){const appPath=result.appPaths[platform];if(appPath)log.success(`Built Safari ${platform} app ${appPath}`)}if(options.skipXcodebuild)log.success(`Generated universal Safari project \u2192 ${result.project}`);if(result.appPaths.macos)log.info("Open the macOS app once, then enable the extension in Safari > Settings > Extensions.");if(result.appPaths.ios)log.info("Install the iOS app on an iPhone, iPad, or Simulator, then enable it in Settings > Apps > Safari > Extensions.");return}const{appPath,resources}=await buildSafariApp(config,{version:options.version??version,release:Boolean(options.release),signed:Boolean(options.signed),skipXcodebuild:Boolean(options.skipXcodebuild)});if(appPath){log.success(`Built ${appPath}`);log.info("Open the app once, then enable the extension in Safari > Settings > Extensions.")}else log.success(`Extension payload synced \u2192 ${resources}`)});buddy.command("extension:safari:publish","Archive and validate or upload the Safari app to App Store Connect").option("--version <version>","Override the marketing version (defaults to package.json)").option("--build-number <number>","CFBundleVersion (defaults to GITHUB_RUN_NUMBER or Unix time)").option("--team-id <id>","Apple Developer team (defaults to config safariTeamId)").option("--api-key-id <id>","App Store Connect API key ID").option("--api-issuer-id <id>","App Store Connect API issuer ID").option("--api-key-path <path>","Path to the App Store Connect AuthKey_*.p8 file").option("--validate-only","Create and validate the archive without uploading it").option("--platform <platform>","Publish macos, ios, or all (defaults to config safariPlatforms)").option("--skip-screenshots","Do not regenerate the App Store screenshot set before publishing").action(async(options)=>{const{publishSafariApp}=await import("@stacksjs/browser-extension"),{config,version}=await load();if(!options.skipScreenshots)try{const{generateProjectImages}=await import("@stacksjs/actions");await generateProjectImages({only:["app-store"]})}catch(error){log.warn(`[extension:safari:publish] using the committed screenshots \u2014 could not regenerate: ${error.message}`)}const result=await publishSafariApp(config,{version:options.version??version,buildNumber:options.buildNumber,teamId:options.teamId,keyId:options.apiKeyId,issuerId:options.apiIssuerId,keyPath:options.apiKeyPath,validateOnly:Boolean(options.validateOnly),platforms:parseSafariPlatforms(options.platform)});for(const deferred of result.deferred)log.warn(`${deferred.reason}. Version ${deferred.version} remains queued for the next automated retry.`);for(const published of result.alreadyPublished)log.success(`Safari ${published.platform} version ${published.version} is already published${published.state?` (${published.state})`:""}`);if(result.artifacts.length)log.success(options.validateOnly?`Validated Safari ${result.artifacts.map((artifact)=>artifact.platform).join(" + ")} archives (build ${result.buildNumber})`:`Uploaded and selected Safari ${result.attachments.map((attachment)=>attachment.platform).join(" + ")} build ${result.buildNumber} in App Store Connect`);if(result.appStoreSubmission?.reviewSubmissionIds.length)log.success(`Submitted ${result.appStoreSubmission.reviewSubmissionIds.length} Safari version(s) to App Review`)});buddy.command("extension:safari:submit","Synchronize metadata and submit an existing Safari version to App Review").option("--version <version>","Marketing version to submit (defaults to package.json)").option("--api-key-id <id>","App Store Connect API key ID").option("--api-issuer-id <id>","App Store Connect API issuer ID").option("--api-key-path <path>","Path to the App Store Connect AuthKey_*.p8 file").option("--platform <platform>","Submit macos, ios, or all (defaults to config safariPlatforms)").option("--prepare-only","Synchronize the listing without submitting it for review").action(async(options)=>{const{submitSafariAppStore}=await import("@stacksjs/browser-extension"),{config,version}=await load(),result=await submitSafariAppStore(config,{version:options.version??version,keyId:options.apiKeyId,issuerId:options.apiIssuerId,keyPath:options.apiKeyPath,platforms:parseSafariPlatforms(options.platform),submit:!options.prepareOnly});log.success(`Synchronized ${result.versions.map((item)=>item.platform).join(" + ")} App Store listings`);if(result.reviewSubmissionIds.length)log.success(`Submitted ${result.reviewSubmissionIds.length} Safari version(s) to App Review`)})}