@supatype/cli 0.2.0 → 0.2.1

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
 
-> @supatype/cli@0.2.0 build /home/runner/work/supatype/supatype/packages/cli
+> @supatype/cli@0.2.1 build /home/runner/work/supatype/supatype/packages/cli
 > tsc --project tsconfig.json && node --input-type=module -e "import{cpSync,mkdirSync}from'node:fs';const a='dist/assets';mkdirSync(a,{recursive:true});cpSync('assets/supatype-logo-wordmark.ascii.txt',a+'/supatype-logo-wordmark.ascii.txt')"
 

package/.turbo/turbo-test.log

@@ -1,14 +1,14 @@
 
-> @supatype/cli@0.2.0 test /home/runner/work/supatype/supatype/packages/cli
+> @supatype/cli@0.2.1 test /home/runner/work/supatype/supatype/packages/cli
 > vitest run
 
 
  RUN  v4.0.18 /home/runner/work/supatype/supatype/packages/cli
 
- ✓ tests/access-composition.test.ts (26 tests) 90ms
- ✓ tests/type-extractor.test.ts (44 tests) 117ms
- ✓ tests/model-hooks.test.ts (21 tests) 66ms
- ✓ tests/runtime-contract.test.ts (49 tests) 142ms
+ ✓ tests/access-composition.test.ts (26 tests) 389ms
+ ✓ tests/type-extractor.test.ts (44 tests) 484ms
+ ✓ tests/model-hooks.test.ts (21 tests) 110ms
+ ✓ tests/runtime-contract.test.ts (49 tests) 212ms
 stdout | tests/init.test.ts > scaffold() > creates all expected files
   created  package.json
   created  supatype.config.ts
@@ -295,12 +295,12 @@
   created  public/.gitkeep
   created  .gitignore
 
- ✓ tests/init.test.ts (26 tests) 44ms
- ✓ tests/model-constraints.test.ts (18 tests) 76ms
- ✓ tests/external-database-compose.test.ts (17 tests) 8ms
- ✓ tests/field-masking-tier.test.ts (16 tests) 14ms
+ ✓ tests/init.test.ts (26 tests) 108ms
+ ✓ tests/model-constraints.test.ts (18 tests) 98ms
+ ✓ tests/external-database-compose.test.ts (17 tests) 15ms
+ ✓ tests/field-masking-tier.test.ts (16 tests) 20ms
 
- ✓ tests/dev-ui.test.ts (21 tests) 117ms
+ ✓ tests/dev-ui.test.ts (21 tests) 129ms
 
 [supatype] Shutting down…
 stdout | tests/docker-runtime.test.ts > requireDockerDaemon > exits when the daemon is unavailable
@@ -311,54 +311,53 @@
 
   docker: daemon down
 
- ✓ tests/docker-runtime.test.ts (10 tests) 12ms
- ✓ tests/hooks-generator.test.ts (7 tests) 5380ms
-     ✓ typechecks under strict mode, together with a handler that uses it  1784ms
-     ✓ rejects a handler for a table that declares no hook  1801ms
-     ✓ typechecks with a validator written the way the docs will show it  1768ms
- ✓ tests/config.test.ts (19 tests) 5148ms
-     ✓ loads a valid supatype.config.ts (plain export default, no package imports)  529ms
-     ✓ normalizes shorthand schema string to { path, pg_schema }  520ms
-     ✓ loads a supatype.config.js (plain ESM)  485ms
-     ✓ loads config without a versions section (latest by default)  533ms
-     ✓ prefers supatype.config.ts over supatype.config.js when both exist  588ms
-     ✓ supports optional output field in config  581ms
-     ✓ merges supatype.local.config.ts over base  1021ms
-     ✓ loads defineConfig import before @supatype/cli is installed (init scaffold)  880ms
- ✓ tests/db-preflight.test.ts (14 tests) 5ms
- ✓ tests/field-bounds.test.ts (23 tests) 9ms
- ✓ tests/cache-clean.test.ts (8 tests) 1667ms
-     ✓ keeps pinned versions and removes the rest  551ms
-     ✓ --force removes pinned versions  514ms
-     ✓ explicit version removes even when pinned (with warning)  590ms
- ✓ tests/functions-deno-types.test.ts (7 tests) 2732ms
-     ✓ adds functions to root tsconfig exclude when possible  510ms
-     ✓ tsc fails with Cannot find name Deno without ambient types  1604ms
-     ✓ tsc passes for Deno.env after ensureFunctionsDenoTypes  612ms
- ✓ tests/field-bounds-matrix.test.ts (124 tests) 24ms
- ✓ tests/external-database-config.test.ts (14 tests) 5ms
- ✓ tests/compose-services.test.ts (12 tests) 19ms
- ✓ tests/field-validators.test.ts (10 tests) 38ms
- ✓ tests/command-chrome-coverage.test.ts (1 test) 16ms
- ✓ tests/hook-upload.test.ts (8 tests) 14ms
- ✓ tests/env-file.test.ts (9 tests) 14ms
+ ✓ tests/docker-runtime.test.ts (10 tests) 26ms
+ ✓ tests/hooks-generator.test.ts (7 tests) 8413ms
+     ✓ typechecks under strict mode, together with a handler that uses it  2834ms
+     ✓ rejects a handler for a table that declares no hook  2770ms
+     ✓ typechecks with a validator written the way the docs will show it  2745ms
+ ✓ tests/config.test.ts (19 tests) 8257ms
+     ✓ loads a valid supatype.config.ts (plain export default, no package imports)  844ms
+     ✓ normalizes shorthand schema string to { path, pg_schema }  881ms
+     ✓ loads a supatype.config.js (plain ESM)  818ms
+     ✓ loads config without a versions section (latest by default)  757ms
+     ✓ prefers supatype.config.ts over supatype.config.js when both exist  901ms
+     ✓ supports optional output field in config  843ms
+     ✓ merges supatype.local.config.ts over base  1667ms
+     ✓ loads defineConfig import before @supatype/cli is installed (init scaffold)  1527ms
+ ✓ tests/db-preflight.test.ts (14 tests) 13ms
+ ✓ tests/field-bounds.test.ts (23 tests) 21ms
+ ✓ tests/cache-clean.test.ts (8 tests) 2699ms
+     ✓ keeps pinned versions and removes the rest  908ms
+     ✓ --force removes pinned versions  870ms
+     ✓ explicit version removes even when pinned (with warning)  900ms
+ ✓ tests/functions-deno-types.test.ts (7 tests) 3746ms
+     ✓ tsc fails with Cannot find name Deno without ambient types  2517ms
+     ✓ tsc passes for Deno.env after ensureFunctionsDenoTypes  1204ms
+ ✓ tests/field-bounds-matrix.test.ts (124 tests) 49ms
+ ✓ tests/external-database-config.test.ts (14 tests) 13ms
+ ✓ tests/compose-services.test.ts (12 tests) 13ms
+ ✓ tests/field-validators.test.ts (10 tests) 80ms
+ ✓ tests/command-chrome-coverage.test.ts (1 test) 19ms
+ ✓ tests/hook-upload.test.ts (8 tests) 16ms
+ ✓ tests/env-file.test.ts (9 tests) 18ms
 stdout | tests/link.test.ts > link model > migrates cloud.json into link.json
+stderr | tests/link.test.ts > link model > migrates cloud.json into link.json
   created  package.json
   created  supatype.config.ts
   created  schema/index.ts
+[supatype] Migrated .supatype/cloud.json → .supatype/link.json (legacy files kept; remove manually when ready).
   created  .env
   created  seed.ts
+
   created  seeds/.gitkeep
   created  public/.gitkeep
   created  .gitignore
 
-stderr | tests/link.test.ts > link model > migrates cloud.json into link.json
-[supatype] Migrated .supatype/cloud.json → .supatype/link.json (legacy files kept; remove manually when ready).
-
- ✓ tests/link.test.ts (4 tests) 2564ms
-     ✓ resolveTarget returns cloud mode with /api/v1 prefix  899ms
-     ✓ resolveTarget returns self-host mode with /platform/v1 prefix  789ms
-     ✓ targetSchemaRollback posts to /platform/v1 when linked  867ms
+ ✓ tests/link.test.ts (4 tests) 3807ms
+     ✓ resolveTarget returns cloud mode with /api/v1 prefix  1230ms
+     ✓ resolveTarget returns self-host mode with /platform/v1 prefix  1281ms
+     ✓ targetSchemaRollback posts to /platform/v1 when linked  1279ms
 stdout | tests/admin-ensure.test.ts > init admin seed in .env > writes SUPATYPE_ADMIN_* when scaffold options include credentials
   created  package.json
   created  supatype.config.ts
@@ -369,8 +368,8 @@
   created  public/.gitkeep
   created  .gitignore
 
- ✓ tests/admin-ensure.test.ts (10 tests) 144ms
- ✓ tests/service-role-check.test.ts (10 tests) 8ms
+ ✓ tests/admin-ensure.test.ts (10 tests) 166ms
+ ✓ tests/service-role-check.test.ts (10 tests) 11ms
 stdout | tests/admin-studio-membership.test.ts > first admin user creation > does not write a role into app_metadata
 [supatype] Admin user "admin@example.com" created (role: admin).
 [supatype] Log in at /admin after starting the dev server.
@@ -387,46 +386,47 @@
 [supatype] Admin user "admin@example.com" created (role: admin).
 [supatype] Log in at /admin after starting the dev server.
 
- ✓ tests/admin-studio-membership.test.ts (5 tests) 385ms
- ✓ tests/augmentation-generator.test.ts (6 tests) 16ms
- ✓ tests/pull-utils.test.ts (49 tests) 10ms
- ✓ tests/keys.test.ts (11 tests) 13237ms
-     ✓ exits 0 with --secret  1193ms
-     ✓ outputs ANON_KEY= line  1194ms
-     ✓ outputs SERVICE_ROLE_KEY= line  1074ms
-     ✓ ANON_KEY is a valid three-part JWT  1092ms
-     ✓ SERVICE_ROLE_KEY payload has role: service_role  1053ms
-     ✓ JWT has exp in the future  1047ms
-     ✓ --exp-years changes the expiry window  2168ms
-     ✓ reads JWT_SECRET from environment variable  1063ms
-     ✓ reads JWT_SECRET from .env file  1105ms
-     ✓ exits non-zero when no secret is available  1134ms
-     ✓ keys --help shows --secret and --exp-years options  1108ms
- ✓ tests/schema-sources.test.ts (5 tests) 1099ms
-     ✓ buildSchemaSourcesPayload includes manifest metadata  459ms
-     ✓ restore overwrites modified local files  604ms
+ ✓ tests/admin-studio-membership.test.ts (5 tests) 470ms
+ ✓ tests/augmentation-generator.test.ts (6 tests) 23ms
+ ✓ tests/pull-utils.test.ts (49 tests) 14ms
+ ✓ tests/schema-sources.test.ts (5 tests) 1531ms
+     ✓ buildSchemaSourcesPayload includes manifest metadata  734ms
+     ✓ restore overwrites modified local files  742ms
+ ✓ tests/keys.test.ts (11 tests) 21707ms
+     ✓ exits 0 with --secret  2102ms
+     ✓ outputs ANON_KEY= line  1906ms
+     ✓ outputs SERVICE_ROLE_KEY= line  1832ms
+     ✓ ANON_KEY is a valid three-part JWT  1714ms
+     ✓ SERVICE_ROLE_KEY payload has role: service_role  1673ms
+     ✓ JWT has exp in the future  1806ms
+     ✓ --exp-years changes the expiry window  3534ms
+     ✓ reads JWT_SECRET from environment variable  1820ms
+     ✓ reads JWT_SECRET from .env file  1825ms
+     ✓ exits non-zero when no secret is available  1640ms
+     ✓ keys --help shows --secret and --exp-years options  1844ms
 stderr | tests/binary-cache-cloud-overrides.test.ts > isLinkedToCloudProject > is true when .supatype/cloud.json has projectSlug
 [supatype] Migrated .supatype/cloud.json → .supatype/link.json (legacy files kept; remove manually when ready).
 
- ✓ tests/binary-cache-cloud-overrides.test.ts (11 tests) 17ms
- ✓ tests/homebrew-formula.test.ts (4 tests) 110ms
- ✓ tests/local-server-image-env.test.ts (5 tests) 218ms
- ✓ tests/minisign.test.ts (5 tests) 8ms
- ✓ tests/engine-floor.test.ts (11 tests) 7ms
- ✓ tests/local-secrets.test.ts (5 tests) 7ms
- ✓ tests/api-schemas.test.ts (10 tests) 7ms
+ ✓ tests/binary-cache-cloud-overrides.test.ts (11 tests) 20ms
+ ✓ tests/local-server-image-env.test.ts (5 tests) 12ms
+ ✓ tests/homebrew-formula.test.ts (4 tests) 252ms
+ ✓ tests/minisign.test.ts (5 tests) 17ms
+ ✓ tests/local-secrets.test.ts (5 tests) 11ms
+ ✓ tests/engine-floor.test.ts (11 tests) 12ms
+ ✓ tests/self-host-keys.test.ts (7 tests) 13ms
+ ✓ tests/readiness-poll.test.ts (3 tests) 333ms
+     ✓ ends promptly when it carries a deadline  326ms
+ ✓ tests/api-schemas.test.ts (10 tests) 14ms
 stdout | tests/storage-provision.test.ts > provisionBuckets > POSTs each bucket to the storage API
 [supatype] Storage bucket "photos" ready.
 
 stdout | tests/storage-provision.test.ts > provisionBuckets > POSTs each bucket to the storage API
 [supatype] Storage bucket "avatars" ready.
 
- ✓ tests/storage-provision.test.ts (6 tests) 10ms
- ✓ tests/cached-artifact-format.test.ts (7 tests) 7ms
- ✓ tests/readiness-poll.test.ts (3 tests) 320ms
-     ✓ ends promptly when it carries a deadline  317ms
- ✓ tests/target-client-refresh.test.ts (3 tests) 9ms
- ✓ tests/proxy-dev-app.test.ts (7 tests) 5ms
+ ✓ tests/cached-artifact-format.test.ts (7 tests) 16ms
+ ✓ tests/storage-provision.test.ts (6 tests) 14ms
+ ✓ tests/target-client-refresh.test.ts (3 tests) 12ms
+ ✓ tests/proxy-dev-app.test.ts (7 tests) 7ms
 stdout | tests/app-command.test.ts > supatype app add --static > sets app.mode=static and static_dir in supatype.config.ts
   created  package.json
   created  supatype.config.ts
@@ -447,80 +447,80 @@
   created  public/.gitkeep
   created  .gitignore
 
- ✓ tests/service-role-routes.test.ts (4 tests) 1404ms
-     ✓ reads the declared list  465ms
-     ✓ is an empty list when a project declares none  458ms
-     ✓ sends what the project declared, hook entries included  479ms
- ✓ tests/app-command.test.ts (2 tests) 2281ms
-     ✓ sets app.mode=static and static_dir in supatype.config.ts  1088ms
-     ✓ creates the static directory when missing  1191ms
- ✓ tests/init-dependency-versions.test.ts (4 tests) 28ms
- ✓ tests/compose-parsable-defaults.test.ts (2 tests) 6ms
- ✓ tests/type-resolver.test.ts (2 tests) 13ms
- ✓ tests/engine-push-output.test.ts (7 tests) 6ms
- ✓ tests/cli-help.test.ts (16 tests) 17072ms
-     ✓ --help lists all top-level commands  1059ms
-     ✓ --version prints package.json version  1058ms
-     ✓ self-update --help describes the command  975ms
-     ✓ init --help describes the init command  1062ms
-     ✓ push --help describes the push command and --yes flag  1091ms
-     ✓ diff --help describes the diff command  1054ms
-     ✓ pull --help describes scaffold pull command  1091ms
-     ✓ doctor --help describes drift report command  1142ms
-     ✓ introspect --help describes database introspection command  1060ms
-     ✓ adopt --help describes adoption ceremony command  1025ms
-     ✓ reset --help shows --yes flag  987ms
-     ✓ app --help describes the app command with add/remove subcommands  1006ms
-     ✓ app add --help shows --static and --port options  1046ms
-     ✓ self-host --help shows compose only (legacy commands hidden)  1161ms
-     ✓ self-host compose --help shows compose subcommands  1139ms
-     ✓ unknown command exits non-zero  1108ms
- ✓ tests/command-chrome-wrap.test.ts (3 tests) 6ms
- ✓ tests/cli-install-method.test.ts (8 tests) 5ms
- ✓ tests/doctor-render.test.ts (3 tests) 5ms
- ✓ tests/port-in-use.test.ts (4 tests) 26ms
- ✓ tests/archive-name-alias.test.ts (4 tests) 5ms
- ✓ tests/ensure-binary.test.ts (2 tests) 8ms
- ✓ tests/init-project-detect.test.ts (4 tests) 9ms
- ✓ tests/tsx-runner.test.ts (7 tests) 2520ms
-       ✓ evaluates a simple expression and returns stdout  329ms
-       ✓ evaluates TypeScript syntax (type annotations)  343ms
-       ✓ can serialize a JSON object to stdout  339ms
-       ✓ returns non-zero exit code on syntax error  350ms
-       ✓ returns non-zero exit code on runtime error  360ms
-       ✓ captures stderr separately from stdout  344ms
-       ✓ runs a .ts file and returns its stdout  448ms
- ✓ tests/doctor-service-role.test.ts (4 tests) 5ms
- ✓ tests/required-host-components.test.ts (4 tests) 4ms
- ✓ tests/dev-ports-owner.test.ts (6 tests) 4ms
- ✓ tests/ui-messages.test.ts (5 tests) 5ms
- ✓ tests/normalize-admin-config.test.ts (1 test) 5ms
- ✓ tests/ui-confirm.test.ts (3 tests) 6ms
- ✓ tests/docker-postgres.test.ts (5 tests) 4ms
- ✓ tests/binary-download-lock.test.ts (2 tests) 5ms
- ✓ tests/dev-session-lock.test.ts (2 tests) 3ms
- ✓ tests/dev-ports.test.ts (3 tests) 5ms
- ✓ tests/config-load-failure.test.ts (2 tests) 2836ms
-     ✓ is reported, rather than treated as absent  1611ms
-     ✓ does not stop the CLI working with no config at all  1223ms
- ✓ tests/route-manifest.test.ts (1 test) 4ms
- ✓ tests/dev-ready-panel.test.ts (2 tests) 3ms
- ✓ tests/studio-admin-roles.test.ts (3 tests) 3ms
- ✓ tests/release-pins.test.ts (2 tests) 3ms
- ✓ tests/realtime-launch.test.ts (1 test) 4ms
- ✓ tests/ensure-dev-api-config.test.ts (1 test) 3ms
- ✓ tests/seed-discover.test.ts (2 tests) 10ms
- ✓ tests/rest-cache-admin.test.ts (1 test) 40ms
- ✓ tests/init-package-json.test.ts (1 test) 2ms
- ✓ tests/resolve-api-url.test.ts (2 tests) 5ms
- ✓ tests/pg-spawn-env.test.ts (2 tests) 4ms
- ✓ tests/migrate-from-v1.test.ts (1 test) 12ms
- ✓ tests/cli-package-version.test.ts (1 test) 3ms
- ✓ tests/postgres-archive-tag.test.ts (1 test) 2ms
- ✓ tests/stdin-after-ink.test.ts (1 test) 2ms
-
- Test Files  84 passed (84)
-      Tests  812 passed (812)
-   Start at  07:11:48
-   Duration  35.25s (transform 4.64s, setup 0ms, import 33.01s, tests 60.32s, environment 10ms)
+ ✓ tests/service-role-routes.test.ts (4 tests) 2190ms
+     ✓ reads the declared list  675ms
+     ✓ is an empty list when a project declares none  826ms
+     ✓ sends what the project declared, hook entries included  685ms
+ ✓ tests/app-command.test.ts (2 tests) 3695ms
+     ✓ sets app.mode=static and static_dir in supatype.config.ts  1771ms
+     ✓ creates the static directory when missing  1921ms
+ ✓ tests/init-dependency-versions.test.ts (4 tests) 43ms
+ ✓ tests/compose-parsable-defaults.test.ts (2 tests) 13ms
+ ✓ tests/type-resolver.test.ts (2 tests) 19ms
+ ✓ tests/engine-push-output.test.ts (7 tests) 10ms
+ ✓ tests/cli-help.test.ts (16 tests) 28425ms
+     ✓ --help lists all top-level commands  1744ms
+     ✓ --version prints package.json version  1808ms
+     ✓ self-update --help describes the command  1649ms
+     ✓ init --help describes the init command  1945ms
+     ✓ push --help describes the push command and --yes flag  1831ms
+     ✓ diff --help describes the diff command  1706ms
+     ✓ pull --help describes scaffold pull command  1765ms
+     ✓ doctor --help describes drift report command  1814ms
+     ✓ introspect --help describes database introspection command  1654ms
+     ✓ adopt --help describes adoption ceremony command  1823ms
+     ✓ reset --help shows --yes flag  1728ms
+     ✓ app --help describes the app command with add/remove subcommands  1722ms
+     ✓ app add --help shows --static and --port options  1724ms
+     ✓ self-host --help shows compose only (legacy commands hidden)  1791ms
+     ✓ self-host compose --help shows compose subcommands  1944ms
+     ✓ unknown command exits non-zero  1769ms
+ ✓ tests/command-chrome-wrap.test.ts (3 tests) 9ms
+ ✓ tests/cli-install-method.test.ts (8 tests) 8ms
+ ✓ tests/port-in-use.test.ts (4 tests) 33ms
+ ✓ tests/tsx-runner.test.ts (7 tests) 3630ms
+       ✓ evaluates a simple expression and returns stdout  457ms
+       ✓ evaluates TypeScript syntax (type annotations)  488ms
+       ✓ can serialize a JSON object to stdout  479ms
+       ✓ returns non-zero exit code on syntax error  544ms
+       ✓ returns non-zero exit code on runtime error  511ms
+       ✓ captures stderr separately from stdout  478ms
+       ✓ runs a .ts file and returns its stdout  667ms
+ ✓ tests/archive-name-alias.test.ts (4 tests) 10ms
+ ✓ tests/ensure-binary.test.ts (2 tests) 12ms
+ ✓ tests/init-project-detect.test.ts (4 tests) 14ms
+ ✓ tests/doctor-render.test.ts (3 tests) 7ms
+ ✓ tests/doctor-service-role.test.ts (4 tests) 7ms
+ ✓ tests/dev-ports-owner.test.ts (6 tests) 6ms
+ ✓ tests/required-host-components.test.ts (4 tests) 6ms
+ ✓ tests/ui-messages.test.ts (5 tests) 8ms
+ ✓ tests/normalize-admin-config.test.ts (1 test) 9ms
+ ✓ tests/ui-confirm.test.ts (3 tests) 10ms
+ ✓ tests/docker-postgres.test.ts (5 tests) 6ms
+ ✓ tests/binary-download-lock.test.ts (2 tests) 15ms
+ ✓ tests/dev-session-lock.test.ts (2 tests) 6ms
+ ✓ tests/dev-ports.test.ts (3 tests) 7ms
+ ✓ tests/route-manifest.test.ts (1 test) 5ms
+ ✓ tests/dev-ready-panel.test.ts (2 tests) 6ms
+ ✓ tests/config-load-failure.test.ts (2 tests) 4661ms
+     ✓ is reported, rather than treated as absent  2711ms
+     ✓ does not stop the CLI working with no config at all  1946ms
+ ✓ tests/studio-admin-roles.test.ts (3 tests) 4ms
+ ✓ tests/realtime-launch.test.ts (1 test) 6ms
+ ✓ tests/seed-discover.test.ts (2 tests) 28ms
+ ✓ tests/release-pins.test.ts (2 tests) 4ms
+ ✓ tests/ensure-dev-api-config.test.ts (1 test) 6ms
+ ✓ tests/rest-cache-admin.test.ts (1 test) 44ms
+ ✓ tests/init-package-json.test.ts (1 test) 4ms
+ ✓ tests/pg-spawn-env.test.ts (2 tests) 5ms
+ ✓ tests/migrate-from-v1.test.ts (1 test) 13ms
+ ✓ tests/resolve-api-url.test.ts (2 tests) 7ms
+ ✓ tests/cli-package-version.test.ts (1 test) 4ms
+ ✓ tests/postgres-archive-tag.test.ts (1 test) 3ms
+ ✓ tests/stdin-after-ink.test.ts (1 test) 4ms
+
+ Test Files  85 passed (85)
+      Tests  819 passed (819)
+   Start at  08:09:42
+   Duration  58.92s (transform 8.11s, setup 0ms, import 58.53s, tests 96.41s, environment 19ms)
 

package/.turbo/turbo-typecheck.log

@@ -1,4 +1,4 @@
 
-> @supatype/cli@0.2.0 typecheck /home/runner/work/supatype/supatype/packages/cli
+> @supatype/cli@0.2.1 typecheck /home/runner/work/supatype/supatype/packages/cli
 > tsc --project tsconfig.json --noEmit && tsc --project tests/tsconfig.json --noEmit
 

package/dist/cli-version-embedded.js

@@ -9,5 +9,5 @@
 // Annotated `string`, not left to inference: once a release stamps a value here, the
 // inferred literal type makes the `!== ""` test in cliPackageVersion() a compile error
 // (TS2367, no overlap), so the build would only fail during a release.
-export const EMBEDDED_CLI_VERSION = "0.2.0";
+export const EMBEDDED_CLI_VERSION = "0.2.1";
 //# sourceMappingURL=cli-version-embedded.js.map

package/dist/commands/keys.d.ts

@@ -15,4 +15,18 @@ export declare function generateAndWriteKeys(dir: string, expYears?: number): {
     serviceKey: string;
 } | null;
 export declare function resolveSecret(dir?: string): string | undefined;
+/**
+ * Mint ANON_KEY / SERVICE_ROLE_KEY into `dir`'s .env only where they are
+ * missing or blank, and report which ones were filled.
+ *
+ * Deliberately not `generateAndWriteKeys`, which rewrites them unconditionally.
+ * That is right for `init`, where the project is new, and wrong for anything
+ * that runs on an existing deployment: reissuing the anon key on every start
+ * would lock out every client already holding one.
+ *
+ * A self-host `.env` copied from the template arrives with both keys empty, and
+ * the server refuses to serve without a service role key outside dev mode. That
+ * left the documented quick start unable to start at all.
+ */
+export declare function fillMissingKeys(dir: string, expYears?: number): string[];
 //# sourceMappingURL=keys.d.ts.map

package/dist/commands/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAMxC,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8BnD;AAID,oEAAoE;AACpE,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,SAAK,GACZ;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAOzC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAK,GACZ;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuBhD;AAiBD,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,GAAG,SAAS,CAsB7E"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAMxC,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8BnD;AAID,oEAAoE;AACpE,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,SAAK,GACZ;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAOzC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAK,GACZ;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuBhD;AAiBD,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,GAAG,SAAS,CAsB7E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,EAAE,CAyBpE"}

package/dist/commands/keys.js

@@ -106,4 +106,41 @@ export function resolveSecret(dir = process.cwd()) {
     }
     return undefined;
 }
+/**
+ * Mint ANON_KEY / SERVICE_ROLE_KEY into `dir`'s .env only where they are
+ * missing or blank, and report which ones were filled.
+ *
+ * Deliberately not `generateAndWriteKeys`, which rewrites them unconditionally.
+ * That is right for `init`, where the project is new, and wrong for anything
+ * that runs on an existing deployment: reissuing the anon key on every start
+ * would lock out every client already holding one.
+ *
+ * A self-host `.env` copied from the template arrives with both keys empty, and
+ * the server refuses to serve without a service role key outside dev mode. That
+ * left the documented quick start unable to start at all.
+ */
+export function fillMissingKeys(dir, expYears = 10) {
+    const envPath = resolve(dir, ".env");
+    if (!existsSync(envPath))
+        return [];
+    const content = readFileSync(envPath, "utf8");
+    const blank = (name) => {
+        const current = readEnvVar(content, name);
+        return current === undefined || current.trim() === "";
+    };
+    const needed = ["ANON_KEY", "SERVICE_ROLE_KEY"].filter(blank);
+    if (needed.length === 0)
+        return [];
+    const secret = resolveSecret(dir);
+    if (!secret)
+        return [];
+    const { anonKey, serviceKey } = signKeyPair(secret, expYears);
+    const minted = { ANON_KEY: anonKey, SERVICE_ROLE_KEY: serviceKey };
+    let next = content;
+    for (const name of needed) {
+        next = upsertEnvVar(next, name, minted[name]);
+    }
+    writeFileSync(envPath, next, "utf8");
+    return needed;
+}
 //# sourceMappingURL=keys.js.map

package/dist/commands/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEhD,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,mBAAmB,EAAE,8DAA8D,CAAC;SAC3F,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,EAAE,IAAI,CAAC;SAC1E,MAAM,CAAC,CAAC,IAA2C,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAA;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,+DAA+D,CAAC,CAAA;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;QAE/C,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAA;QACjF,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAA;QAE5F,KAAK,CAAC,+BAA+B,QAAQ,YAAY,CAAC,CAAA;QAC1D,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,CAAA;QAC5B,KAAK,CAAC,mBAAmB,GAAG,UAAU,CAAC,CAAA;QACvC,KAAK,CAAC,sEAAsE,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;AACN,CAAC;AAED,gFAAgF;AAEhF,oEAAoE;AACpE,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,QAAQ,GAAG,EAAE;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;IAC/C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC;QAC1E,UAAU,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC;KACtF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,QAAQ,GAAG,EAAE;IAEb,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAE7D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3C,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;QACpD,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAA;QAC/D,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,wBAAwB,EAAE,OAAO,CAAC,CAAA;QAClE,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAA;QACpE,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAA;QACzE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;QACpG,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAA;YAC5D,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,0BAA0B,EAAE,MAAM,CAAC,CAAA;QACrE,CAAC;QACD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IACzC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,GAAW,EAAE,KAAa;IAC/D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,OAAO,GAAG,OAAO,GAAG,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,CAAA;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,GAAW;IAC9C,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACvD,gCAAgC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAA;IAE3B,6CAA6C;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAE1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;gBACxD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAA;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/commands/keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAEhD,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,mBAAmB,EAAE,8DAA8D,CAAC;SAC3F,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,EAAE,IAAI,CAAC;SAC1E,MAAM,CAAC,CAAC,IAA2C,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAA;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,+DAA+D,CAAC,CAAA;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;QAE/C,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAA;QACjF,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAA;QAE5F,KAAK,CAAC,+BAA+B,QAAQ,YAAY,CAAC,CAAA;QAC1D,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,CAAA;QAC5B,KAAK,CAAC,mBAAmB,GAAG,UAAU,CAAC,CAAA;QACvC,KAAK,CAAC,sEAAsE,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;AACN,CAAC;AAED,gFAAgF;AAEhF,oEAAoE;AACpE,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,QAAQ,GAAG,EAAE;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;IAC/C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC;QAC1E,UAAU,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC;KACtF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,QAAQ,GAAG,EAAE;IAEb,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAE7D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3C,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;QACpD,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAA;QAC/D,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,wBAAwB,EAAE,OAAO,CAAC,CAAA;QAClE,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAA;QACpE,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAA;QACzE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;QACpG,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAA;YAC5D,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,0BAA0B,EAAE,MAAM,CAAC,CAAA;QACrE,CAAC;QACD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IACzC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,GAAW,EAAE,KAAa;IAC/D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,OAAO,GAAG,OAAO,GAAG,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,CAAA;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,GAAW;IAC9C,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACvD,gCAAgC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAA;IAE3B,6CAA6C;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAE1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;gBACxD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAA;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,QAAQ,GAAG,EAAE;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAW,EAAE;QACtC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACzC,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;IACvD,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAElC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAEtB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7D,MAAM,MAAM,GAA2B,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAA;IAE1F,IAAI,IAAI,GAAG,OAAO,CAAA;IAClB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAW,CAAC,CAAA;IACzD,CAAC;IACD,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IACpC,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/commands/self-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-host.d.ts","sourceRoot":"","sources":["../../src/commands/self-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAiBnC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2WvD"}
+{"version":3,"file":"self-host.d.ts","sourceRoot":"","sources":["../../src/commands/self-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAkBnC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmXvD"}

package/dist/commands/self-host.js

@@ -12,6 +12,7 @@ import { spawnSync } from "node:child_process";
 import { gzipSync } from "node:zlib";
 import { loadConfig } from "../config.js";
 import { connectionString } from "../project-config.js";
+import { fillMissingKeys } from "./keys.js";
 import { resolveBinary } from "../binary-cache.js";
 import { generateUnits } from "../systemd.js";
 import { readPid } from "../process-manager.js";
@@ -46,6 +47,14 @@ export function registerSelfHost(program) {
         const config = loadConfig(cwd);
         const project = composeProjectName(config.project.name);
         const args = opts.detach ? ["up", "-d"] : ["up"];
+        // A .env copied from the template arrives with both keys blank, and the
+        // server will not serve without a service role key outside dev mode.
+        // Only blanks are filled: reissuing a key an operator is already using
+        // would lock out every client holding the old one.
+        const filled = fillMissingKeys(cwd);
+        if (filled.length > 0) {
+            console.log(`[supatype] Minted ${filled.join(" and ")} in .env from JWT_SECRET.`);
+        }
         const brand = { intro: "Self-host deployment" };
         const status = await withSpinner("Starting self-host Compose stack", async () => {
             const out = writeSelfHostCompose(cwd, config);