@supacloud/cli 0.14.2 → 0.14.4

package/README.md

@@ -68,8 +68,20 @@ supacloud-cli frontend list --ref abc123
 supacloud-cli branch create --name feature-orders --data_mode schema_only
 supacloud-cli branch promotion_plan --branch_ref preview123
 supacloud-cli branch promote --branch_ref preview123 --plan_checksum <sha256>
+supacloud-cli edge_functions deploy --ref abc123 --slug hello --path ./supabase/functions/hello
+supacloud-cli edge_functions deploy_bundle --ref abc123 --slug hello --files '{"index.ts":"export default { fetch: () => new Response(\"ok\") }"}'
+supacloud-cli edge_functions source --ref abc123 --slug hello --output ./hello.ts
 ```
 
+`edge_functions deploy --path` bundles local TypeScript and dependencies with
+Bun and runs a local syntax check before upload. The Management API validates and
+normalizes the final server-side artifact against the multi-tenant Edge Runtime
+module policy consistently for CLI, Web Console, and direct API deployments.
+`deploy_bundle --files` accepts a JSON object in shell usage.
+Use `source --output <file>` for large Functions so terminal or automation output
+limits cannot truncate the original TS/JS source code. The destination must not
+already exist.
+
 Branch promotion is migration-first. `branch promotion_plan` prints pending
 versions, names, statement counts, and checksums without echoing SQL into terminal
 logs; review the migration files or the Web Console SQL view before approval.

package/dist/index.js

@@ -6155,15 +6155,18 @@ async function runCli(cliTools, args, options = {}) {
     console.error(`❌ Unknown command: ${toolName}`);
     console.error(`Available commands: 
   ${formatAvailableCommands()}`);
-    process.exit(1);
+    process.exitCode = 1;
+    return;
   }
   if (args.length === 1 || args[1] === "--help" || args[1] === "-h") {
     console.error(formatToolHelp(toolName, tool));
-    process.exit(0);
+    process.exitCode = 0;
+    return;
   }
   if (args.length > 2 && !args[1].startsWith("--") && (args[2] === "--help" || args[2] === "-h")) {
     console.error(formatActionHelp(toolName, args[1], tool));
-    process.exit(0);
+    process.exitCode = 0;
+    return;
   }
   const parsedArgs = {};
   let startIdx = 1;
@@ -6198,14 +6201,14 @@ async function runCli(cliTools, args, options = {}) {
     } else {
       console.log(JSON.stringify(result, null, 2));
     }
-    process.exit(cliToolResultIsError(result) ? 1 : 0);
+    process.exitCode = cliToolResultIsError(result) ? 1 : 0;
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     console.error(`❌ Error: ${message}`);
     if (message.includes("required")) {
       console.error(`Hint: Pass arguments like --ref YOUR_REF`);
     }
-    process.exit(1);
+    process.exitCode = 1;
   }
 }
 
@@ -7524,6 +7527,19 @@ function parseBackgroundRoutes(value) {
   }
 }
 var backgroundRoutesSchema = Type.Optional(decodedSchema(Type.Union([Type.String(), Type.Array(Type.String())]), Type.Array(Type.String()), parseBackgroundRoutes));
+var functionFilesRecordSchema = Type.Record(Type.String(), Type.String());
+function parseFunctionFiles(input) {
+  if (typeof input !== "string")
+    return input;
+  try {
+    return JSON.parse(input);
+  } catch (error) {
+    if (!(error instanceof SyntaxError))
+      throw error;
+    throw new Error("Invalid files JSON object");
+  }
+}
+var functionFilesSchema = decodedSchema(Type.Union([Type.String(), functionFilesRecordSchema]), functionFilesRecordSchema, parseFunctionFiles);
 var secretListSchema = Type.Array(Type.Object({ name: Type.String(), value: Type.String() }));
 function parseSecrets(value) {
   if (Array.isArray(value))
@@ -7551,6 +7567,26 @@ function parseSecrets(value) {
   }).filter((entry) => entry.name);
 }
 var secretsSchema = Type.Optional(decodedSchema(Type.Union([Type.String(), secretListSchema]), secretListSchema, parseSecrets));
+function confirmedFunctionConfig(payload, expected) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload))
+    return false;
+  const response = payload;
+  if (expected.verify_jwt !== undefined && response.verify_jwt !== expected.verify_jwt)
+    return false;
+  if (expected.background_routes !== undefined) {
+    if (!Array.isArray(response.background_routes))
+      return false;
+    if (JSON.stringify(response.background_routes) !== JSON.stringify(expected.background_routes))
+      return false;
+  }
+  return true;
+}
+function functionSourceCode(payload) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload))
+    return null;
+  const code = payload.code;
+  return typeof code === "string" ? code : null;
+}
 function registerAdvancedTools(server, http) {
   server.tool("edge_functions", `Edge Function management (Deno/Bun serverless). Server auto-bundles dependencies.
 Actions: list, deploy, deploy_bundle, config, source, delete, check`, {
@@ -7559,13 +7595,14 @@ Actions: list, deploy, deploy_bundle, config, source, delete, check`, {
     slug: optional(Type.String(), "[deploy/deploy_bundle/config/source/delete/check] Function name"),
     code: optional(Type.String(), "[deploy/check] Function source code (TypeScript)"),
     path: optional(Type.String(), "[deploy/check] Local file path to read code from (alternative to code)"),
-    files: optional(Type.Record(Type.String(), Type.String()), "[deploy_bundle] File map: { 'index.ts': '...', '_shared/x.ts': '...' }"),
+    output: optional(Type.String(), "[source] Write source to this local file instead of stdout; the file must not already exist"),
+    files: optional(functionFilesSchema, "[deploy_bundle] File map as a JSON object: { 'index.ts': '...', '_shared/x.ts': '...' }"),
     entrypoint: optional(Type.String(), "[deploy_bundle] Entrypoint file (default: index.ts)"),
     minify: optional(Type.Boolean(), "[deploy/deploy_bundle] Minify bundle"),
     verify_jwt: optional(Type.Boolean(), "[deploy/deploy_bundle/config] Set JWT verification for this function"),
     background_routes: withDescription(backgroundRoutesSchema, "[deploy/deploy_bundle/config] Background route paths; pass comma-separated or JSON array in CLI")
   }, async (args) => {
-    const { action, ref, slug, path: pathArg, files, entrypoint, minify, verify_jwt, background_routes } = args;
+    const { action, ref, slug, path: pathArg, output, files, entrypoint, minify, verify_jwt, background_routes } = args;
     let code = args.code;
     const need = (f, v) => {
       if (!v)
@@ -7585,6 +7622,17 @@ Actions: list, deploy, deploy_bundle, config, source, delete, check`, {
       const cr = await http.patch(`/v1/projects/${ref}/functions/${slug}/config`, functionConfig());
       return cr.ok ? `✅ Function ${slug} config updated
 ${JSON.stringify(cr.data, null, 2)}` : `❌ Config update failed (${cr.status}): ${JSON.stringify(cr.data)}`;
+    };
+    const confirmedDeploymentText = async (successText, responsePayload) => {
+      if (!hasFunctionConfig() || confirmedFunctionConfig(responsePayload, functionConfig())) {
+        return successText;
+      }
+      const fallback = await http.patch(`/v1/projects/${ref}/functions/${slug}/config`, functionConfig());
+      if (!fallback.ok || !confirmedFunctionConfig(fallback.data, functionConfig())) {
+        return `❌ Partial deployment (unsafe): POST succeeded and the code/bundle was deployed, but the function policy was not confirmed; legacy PATCH fallback failed (${fallback.status}): ${JSON.stringify(fallback.data)}`;
+      }
+      return `${successText}
+⚠️ Legacy non-atomic compatibility path: policy applied with follow-up PATCH`;
     };
     const checkSyntax = async (sourceCode) => {
       const tmpDir = mkdtempSync(join2(tmpdir(), "supacloud-edge-check-"));
@@ -7603,8 +7651,9 @@ ${e.stderr || e.message}` };
     if (pathArg && !code) {
       try {
         code = await bundleEdgeFunctionPath(pathArg);
-      } catch (e) {
-        throw new Error(`Failed to bundle/read path ${pathArg}: ${e.message}`);
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to bundle/read path ${pathArg}: ${message}`);
       }
     }
     switch (action) {
@@ -7630,24 +7679,31 @@ ${checkRes.err}`;
 ${deployCheck.err}`;
           break;
         }
-        const dr = await http.post(`/v1/projects/${ref}/functions/${slug}`, { code, minify });
+        const dr = await http.post(`/v1/projects/${ref}/functions/${slug}`, {
+          code,
+          minify,
+          ...functionConfig()
+        });
         if (!dr.ok) {
           text = `❌ Failed (${dr.status}): ${JSON.stringify(dr.data)}`;
           break;
         }
-        text = hasFunctionConfig() ? `✅ Function ${slug} deployed
-${await updateFunctionConfig()}` : `✅ Function ${slug} deployed`;
+        text = await confirmedDeploymentText(`✅ Function ${slug} deployed`, dr.data);
         break;
       case "deploy_bundle":
         need("slug", slug);
         need("files", files);
-        const br = await http.post(`/v1/projects/${ref}/functions/${slug}/bundle`, { files, entrypoint, minify });
+        const br = await http.post(`/v1/projects/${ref}/functions/${slug}/bundle`, {
+          files,
+          entrypoint,
+          minify,
+          ...functionConfig()
+        });
         if (!br.ok) {
           text = `❌ Failed (${br.status}): ${JSON.stringify(br.data)}`;
           break;
         }
-        text = hasFunctionConfig() ? `✅ Function ${slug} bundle deployed (${Object.keys(files).length} files)
-${await updateFunctionConfig()}` : `✅ Function ${slug} bundle deployed (${Object.keys(files).length} files)`;
+        text = await confirmedDeploymentText(`✅ Function ${slug} bundle deployed (${Object.keys(files).length} files)`, br.data);
         break;
       case "config":
         text = await updateFunctionConfig();
@@ -7655,7 +7711,22 @@ ${await updateFunctionConfig()}` : `✅ Function ${slug} bundle deployed (${Obje
       case "source":
         need("slug", slug);
         const sr = await http.get(`/v1/projects/${ref}/functions/${slug}/source`);
-        text = sr.ok ? JSON.stringify(sr.data, null, 2) : `❌ Not found (${sr.status})`;
+        if (!sr.ok) {
+          text = `❌ Not found (${sr.status})`;
+          break;
+        }
+        if (!output) {
+          text = JSON.stringify(sr.data, null, 2);
+          break;
+        }
+        const sourceCode = functionSourceCode(sr.data);
+        if (sourceCode === null) {
+          text = "❌ Source response did not contain a string code field";
+          break;
+        }
+        const outputPath = resolve2(output);
+        writeFileSync(outputPath, sourceCode, { flag: "wx" });
+        text = `✅ Function ${slug} source written to ${outputPath} (${Buffer.byteLength(sourceCode)} bytes)`;
         break;
       case "delete":
         need("slug", slug);
@@ -9840,7 +9911,8 @@ async function main() {
   const args = process.argv.slice(2);
   if (args.length === 0 || args[0] === "--help" || args[0] === "-h") {
     printHelp();
-    process.exit(0);
+    process.exitCode = 0;
+    return;
   }
   const cliTools = createCliTools();
   if (args.length === 1 && !["ai", "supabase"].includes(args[0]) && cliTools[args[0]]) {
@@ -9862,5 +9934,5 @@ async function main() {
 }
 main().catch((error) => {
   console.error(`${commandName} failed:`, error);
-  process.exit(1);
+  process.exitCode = 1;
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.14.2",
+  "version": "0.14.4",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",