convex 1.47.0 → 1.48.0

package/dist/cli.bundle.cjs

@@ -47456,7 +47456,7 @@ var version;
 var init_index = __esm({
   "src/index.ts"() {
     "use strict";
-    version = "1.47.0";
+    version = "1.48.0";
   }
 });
 
@@ -50786,6 +50786,9 @@ function printLocalDeploymentWelcomeMessage() {
 function releaseDate(version4) {
   return /^precompiled-(\d{4}-\d{2}-\d{2})-/.exec(version4)?.[1] ?? null;
 }
+function isValidBackendVersion(version4) {
+  return /^precompiled-\d{4}-\d{2}-\d{2}-[\w.-]+$/.test(version4);
+}
 var LOCAL_BACKEND_INSTANCE_SECRET;
 var init_utils2 = __esm({
   "src/cli/lib/localDeployment/utils.ts"() {
@@ -53713,6 +53716,7 @@ async function ensureBackendBinaryDownloaded(ctx, version4) {
   return _ensureBackendBinaryDownloaded(ctx, latestVersionWithBinary);
 }
 async function _ensureBackendBinaryDownloaded(ctx, version4) {
+  await assertValidBackendVersion(ctx, version4);
   logVerbose(`Ensuring backend binary downloaded for version ${version4}`);
   const existingDownload = await checkForExistingDownload(ctx, version4);
   if (existingDownload !== null) {
@@ -53725,6 +53729,18 @@ async function _ensureBackendBinaryDownloaded(ctx, version4) {
   const binaryPath = await downloadBackendBinary(ctx, version4);
   return { version: version4, binaryPath };
 }
+async function assertValidBackendVersion(ctx, version4) {
+  if (!isValidBackendVersion(version4)) {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: "Invalid local backend version",
+      errForSentry: new LocalDeploymentError(
+        `Invalid local backend version: ${JSON.stringify(version4)}`
+      )
+    });
+  }
+}
 async function findLatestVersionWithBinary(ctx, requireSuccess) {
   if (cachedLatestVersion !== null) {
     return cachedLatestVersion;
@@ -53847,7 +53863,7 @@ function getDownloadPath() {
   return null;
 }
 function getGithubDownloadUrl(version4, filename) {
-  return `https://github.com/get-convex/convex-backend/releases/download/${version4}/${filename}`;
+  return `https://github.com/convex/convex-backend/releases/download/${version4}/${filename}`;
 }
 async function downloadZipFile(ctx, args) {
   const { version: version4, filename, nameForLogging } = args;
@@ -53902,6 +53918,7 @@ async function downloadZipFile(ctx, args) {
   return executablePath(version4);
 }
 async function ensureDashboardDownloaded(ctx, version4) {
+  await assertValidBackendVersion(ctx, version4);
   const config3 = loadGlobalDashboardConfig(ctx);
   if (config3 !== null && config3.version === version4) {
     return;
@@ -53942,6 +53959,7 @@ var init_download = __esm({
     init_fsUtils();
     init_errors3();
     import_path5 = __toESM(require("path"), 1);
+    init_utils2();
     cachedLatestVersion = null;
   }
 });
@@ -63774,6 +63792,11 @@ async function handleDashboard(ctx, deployment2, options) {
     ctx,
     dashboardPort,
     async (request, response) => {
+      if (!isLoopbackHost(request.headers.host, dashboardPort)) {
+        response.statusCode = 403;
+        response.end();
+        return;
+      }
       const pathname = new URL(
         request.url ?? "/",
         // We only want to extract the pathname so the base doesn’t matter
@@ -63810,6 +63833,10 @@ async function handleDashboard(ctx, deployment2, options) {
     cleanupHandle
   };
 }
+function isLoopbackHost(host, port) {
+  const normalizedHost = host?.toLowerCase();
+  return normalizedHost === `127.0.0.1:${port}` || normalizedHost === `localhost:${port}`;
+}
 async function reportSelfHostedEvent(ctx, {
   anonymousId,
   eventName,
@@ -101547,6 +101574,130 @@ var require_chokidar = __commonJS({
   }
 });
 
+// ../node_modules/.pnpm/@vercel+detect-agent@1.2.5/node_modules/@vercel/detect-agent/dist/index.js
+var require_dist = __commonJS({
+  "../node_modules/.pnpm/@vercel+detect-agent@1.2.5/node_modules/@vercel/detect-agent/dist/index.js"(exports2, module2) {
+    "use strict";
+    var __defProp3 = Object.defineProperty;
+    var __getOwnPropDesc3 = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames3 = Object.getOwnPropertyNames;
+    var __hasOwnProp3 = Object.prototype.hasOwnProperty;
+    var __export2 = (target3, all) => {
+      for (var name in all)
+        __defProp3(target3, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps3 = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames3(from))
+          if (!__hasOwnProp3.call(to, key) && key !== except)
+            __defProp3(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc3(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toCommonJS = (mod2) => __copyProps3(__defProp3({}, "__esModule", { value: true }), mod2);
+    var src_exports = {};
+    __export2(src_exports, {
+      KNOWN_AGENTS: () => KNOWN_AGENTS,
+      determineAgent: () => determineAgent2
+    });
+    module2.exports = __toCommonJS(src_exports);
+    var import_promises3 = require("node:fs/promises");
+    var import_node_fs5 = require("node:fs");
+    var DEVIN_LOCAL_PATH = "/opt/.devin";
+    var CURSOR = "cursor";
+    var CURSOR_CLI = "cursor-cli";
+    var CLAUDE = "claude";
+    var COWORK = "cowork";
+    var DEVIN = "devin";
+    var REPLIT = "replit";
+    var GEMINI = "gemini";
+    var CODEX = "codex";
+    var ANTIGRAVITY = "antigravity";
+    var AUGMENT_CLI = "augment-cli";
+    var OPENCODE = "opencode";
+    var GITHUB_COPILOT = "github-copilot";
+    var GITHUB_COPILOT_CLI = "github-copilot-cli";
+    var V0 = "v0";
+    var KNOWN_AGENTS = {
+      CURSOR,
+      CURSOR_CLI,
+      CLAUDE,
+      COWORK,
+      DEVIN,
+      REPLIT,
+      GEMINI,
+      CODEX,
+      ANTIGRAVITY,
+      AUGMENT_CLI,
+      OPENCODE,
+      GITHUB_COPILOT,
+      V0
+    };
+    async function determineAgent2() {
+      if (process.env.AI_AGENT) {
+        const name = process.env.AI_AGENT.trim();
+        if (name) {
+          if (name === GITHUB_COPILOT || name === GITHUB_COPILOT_CLI) {
+            return {
+              isAgent: true,
+              agent: { name: GITHUB_COPILOT }
+            };
+          }
+          if (name === V0) {
+            return {
+              isAgent: true,
+              agent: { name: V0 }
+            };
+          }
+          return {
+            isAgent: true,
+            agent: { name }
+          };
+        }
+      }
+      if (process.env.CURSOR_TRACE_ID) {
+        return { isAgent: true, agent: { name: CURSOR } };
+      }
+      if (process.env.CURSOR_AGENT || process.env.CURSOR_EXTENSION_HOST_ROLE === "agent-exec") {
+        return { isAgent: true, agent: { name: CURSOR_CLI } };
+      }
+      if (process.env.GEMINI_CLI) {
+        return { isAgent: true, agent: { name: GEMINI } };
+      }
+      if (process.env.CODEX_SANDBOX || process.env.CODEX_CI || process.env.CODEX_THREAD_ID) {
+        return { isAgent: true, agent: { name: CODEX } };
+      }
+      if (process.env.ANTIGRAVITY_AGENT) {
+        return { isAgent: true, agent: { name: ANTIGRAVITY } };
+      }
+      if (process.env.AUGMENT_AGENT) {
+        return { isAgent: true, agent: { name: AUGMENT_CLI } };
+      }
+      if (process.env.OPENCODE_CLIENT) {
+        return { isAgent: true, agent: { name: OPENCODE } };
+      }
+      if (process.env.CLAUDECODE || process.env.CLAUDE_CODE) {
+        if (process.env.CLAUDE_CODE_IS_COWORK) {
+          return { isAgent: true, agent: { name: COWORK } };
+        }
+        return { isAgent: true, agent: { name: CLAUDE } };
+      }
+      if (process.env.REPL_ID) {
+        return { isAgent: true, agent: { name: REPLIT } };
+      }
+      if (process.env.COPILOT_MODEL || process.env.COPILOT_ALLOW_ALL || process.env.COPILOT_GITHUB_TOKEN) {
+        return { isAgent: true, agent: { name: GITHUB_COPILOT } };
+      }
+      try {
+        await (0, import_promises3.access)(DEVIN_LOCAL_PATH, import_node_fs5.constants.F_OK);
+        return { isAgent: true, agent: { name: DEVIN } };
+      } catch (_error) {
+      }
+      return { isAgent: false, agent: void 0 };
+    }
+  }
+});
+
 // ../node_modules/.pnpm/openid-client@5.7.1/node_modules/openid-client/lib/errors.js
 var require_errors4 = __commonJS({
   "../node_modules/.pnpm/openid-client@5.7.1/node_modules/openid-client/lib/errors.js"(exports2, module2) {
@@ -115138,6 +115289,45 @@ var startPushResponse = looseObject({
   app: checkedComponent,
   schemaChange
 });
+var MIN_SCRUBBED_VALUE_LENGTH = 8;
+function redactEnvironmentVariableValues(node, environmentVariables) {
+  const values = Object.values(environmentVariables).filter((value) => value.length >= MIN_SCRUBBED_VALUE_LENGTH).flatMap((value) => {
+    const escaped = JSON.stringify(value).slice(1, -1);
+    return escaped === value ? [value] : [value, escaped];
+  }).sort((a, b) => b.length - a.length);
+  const scrub = (child) => {
+    if (typeof child === "string") {
+      return values.reduce(
+        (scrubbed, value) => scrubbed.split(value).join("<redacted>"),
+        child
+      );
+    }
+    if (Array.isArray(child)) {
+      return child.map(scrub);
+    }
+    if (child !== null && typeof child === "object") {
+      return Object.fromEntries(
+        Object.entries(child).map(([key, grandchild]) => [
+          key,
+          scrub(grandchild)
+        ])
+      );
+    }
+    return child;
+  };
+  return scrub(node);
+}
+function startPushResponseForLogging(response) {
+  return {
+    ...redactEnvironmentVariableValues(response, response.environmentVariables),
+    environmentVariables: Object.fromEntries(
+      Object.keys(response.environmentVariables).map((name) => [
+        name,
+        "<redacted>"
+      ])
+    )
+  };
+}
 var evaluatePushResponse = looseObject({
   schemaChange
 });
@@ -121107,7 +121297,9 @@ async function startComponentsPushAndCodegen(ctx, parentSpan, projectConfig, con
     (span) => startPush(ctx, span, startPushRequest2, options)
   );
   if (options.verbose) {
-    logMessage("startPush: " + JSON.stringify(startPushResponse2, null, 2));
+    logMessage(
+      "startPush: " + JSON.stringify(startPushResponseForLogging(startPushResponse2), null, 2)
+    );
   }
   if (options.codegen) {
     changeSpinner("Generating TypeScript bindings...");
@@ -121255,7 +121447,14 @@ async function runComponentsPush(ctx, options, configPath, projectConfig) {
 }
 function printDiff(startPushResponse2, finishPushResponse, opts) {
   if (opts.verbose) {
-    const diffString = JSON.stringify(finishPushResponse, null, 2);
+    const diffString = JSON.stringify(
+      redactEnvironmentVariableValues(
+        finishPushResponse,
+        startPushResponse2.environmentVariables
+      ),
+      null,
+      2
+    );
     logMessage(diffString);
     return;
   }
@@ -122424,6 +122623,18 @@ async function readFromStdin() {
 
 // src/cli/lib/env.ts
 init_prompts();
+
+// src/cli/lib/utils/aiAgent.ts
+var import_detect_agent = __toESM(require_dist(), 1);
+async function detectAiAgent() {
+  if (process.env.CONVEX_AGENT_MODE) {
+    return "CONVEX_AGENT_MODE";
+  }
+  const result = await (0, import_detect_agent.determineAgent)();
+  return result.isAgent ? result.agent.name : null;
+}
+
+// src/cli/lib/env.ts
 init_envvars();
 
 // src/cli/lib/formatEnvValueForDotfile.ts
@@ -122570,8 +122781,10 @@ async function envList(ctx, backend, options) {
     logMessage(`No environment variables set${backend.notice}`);
     return;
   }
+  const agent = options?.namesOnly || options?.includeValues ? null : await detectAiAgent();
+  const namesOnly = options?.namesOnly || agent !== null;
   for (const { name, value } of envs) {
-    if (options?.namesOnly) {
+    if (namesOnly) {
       logOutput(name);
       continue;
     }
@@ -122581,6 +122794,11 @@ async function envList(ctx, backend, options) {
     }
     logOutput(`${name}=${formatted}`);
   }
+  if (agent !== null) {
+    logMessage(
+      `Listed names only because an AI agent (${agent}) appears to be running this command. Pass --include-values to print the values too.`
+    );
+  }
 }
 async function getFileContents(ctx, filePath) {
   if (!ctx.fs.exists(filePath)) {
@@ -123237,7 +123455,7 @@ async function installGuidelinesFile({
         "Could not download Convex AI guidelines right now. You can retry with: npx convex ai-files install"
       )
     );
-    return;
+    return false;
   }
   await import_fs10.promises.mkdir(aiDirForConvexDir(convexDir), { recursive: true });
   await import_fs10.promises.writeFile(guidelinesPathForConvexDir(convexDir), guidelines, "utf8");
@@ -123245,6 +123463,7 @@ async function installGuidelinesFile({
   logMessage(
     `${chalkStderr.green("\u2714")} ${guidelinesPathForConvexDir(convexDir)} written`
   );
+  return true;
 }
 
 // src/cli/lib/aiFiles/state.ts
@@ -123255,7 +123474,7 @@ var aiFilesStateSchema = external_exports.object({
   guidelinesHash: external_exports.string().nullable(),
   agentsMdSectionHash: external_exports.string().nullable(),
   claudeMdHash: external_exports.string().nullable(),
-  // Commit SHA from get-convex/agent-skills that was current when skills were
+  // Commit SHA from convex/agent-skills that was current when skills were
   // last installed. Used to detect when newer skills are available.
   agentSkillsSha: external_exports.string().nullable()
 });
@@ -123434,7 +123653,7 @@ function configuredSkillAgents(aiFilesConfig) {
   return aiFilesConfig?.skills?.agents ?? defaultAgents;
 }
 function runSkillsAdd(cwd2, agents) {
-  const args = ["add", "get-convex/agent-skills", "--yes", "--copy"];
+  const args = ["add", "convex/agent-skills", "--yes", "--copy"];
   for (const agent of agents) {
     args.push("--agent", agent);
   }
@@ -123490,21 +123709,22 @@ async function installSkills({
   aiFilesConfig
 }) {
   const agents = configuredSkillAgents(aiFilesConfig);
-  if (agents.length === 0) return;
-  if (!await shouldRunSkillsCli()) return;
+  if (agents.length === 0) return true;
+  if (!await shouldRunSkillsCli()) return true;
   logMessage("Installing Convex agent skills...");
   const skillsOk = await runSkillsAdd(projectDir, agents);
   if (!skillsOk) {
     logMessage(
       chalkStderr.yellow(
-        "Could not install agent skills. You can retry manually with: npx skills add get-convex/agent-skills --copy"
+        "Could not install agent skills. You can retry manually with: npx skills add convex/agent-skills --copy"
       )
     );
-    return;
+    return false;
   }
   const sha = await fetchAgentSkillsSha();
   if (sha) state.agentSkillsSha = sha;
   logMessage(`${chalkStderr.green("\u2714")} Skills installed`);
+  return true;
 }
 async function removeInstalledSkills({
   projectDir,
@@ -123591,12 +123811,23 @@ async function installAiFiles({
 }) {
   const convexDirName = import_path25.default.relative(projectDir, convexDir);
   const state = await readAiStateOrDefault(convexDir);
-  await installGuidelinesFile({ convexDir, state });
+  const guidelinesInstalled = await installGuidelinesFile({ convexDir, state });
   await applyAgentsMdSection({ projectDir, state, convexDirName });
   await applyClaudeMdSection({ projectDir, state, convexDirName });
-  await installSkills({ projectDir, state, aiFilesConfig });
+  const skillsInstalled = await installSkills({
+    projectDir,
+    state,
+    aiFilesConfig
+  });
   await removeLegacyCursorRulesFile(projectDir);
   await writeAiState({ state, convexDir });
+  if (!guidelinesInstalled || !skillsInstalled) {
+    return {
+      kind: "error",
+      message: "Some Convex AI files could not be installed. See the messages above."
+    };
+  }
+  return { kind: "success" };
 }
 async function attemptToInstallAiFiles(opts) {
   try {
@@ -125925,8 +126156,19 @@ async function resolveProjectPaths() {
 var aiInstall = new Command2("install").summary("Install or refresh Convex AI files").description(
   "Installs the following (or refreshes them if already present):\n  - convex/_generated/ai/guidelines.md\n  - AGENTS.md (Convex section only)\n  - CLAUDE.md (Convex section only)\n  - Agent skills (installed to each coding agent's native path, configured via convex.json)"
 ).allowExcessArguments(false).action(async () => {
-  const { projectDir, convexDir, aiFilesConfig } = await resolveProjectPaths();
-  await installAiFiles({ projectDir, convexDir, aiFilesConfig });
+  const { ctx, projectDir, convexDir, aiFilesConfig } = await resolveProjectPaths();
+  const result = await installAiFiles({
+    projectDir,
+    convexDir,
+    aiFilesConfig
+  });
+  if (result.kind === "error") {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: result.message
+    });
+  }
   logMessage(`${chalkStderr.green("\u2714")} Convex AI files installed.`);
 });
 var aiEnable = new Command2("enable").summary("Enable Convex AI files").description(
@@ -125943,8 +126185,19 @@ var aiEnable = new Command2("enable").summary("Enable Convex AI files").descript
 var aiUpdate = new Command2("update").summary("Update Convex AI files to the latest version").description(
   "Updates the following to their latest versions:\n  - convex/_generated/ai/guidelines.md\n  - AGENTS.md (Convex section only)\n  - CLAUDE.md (Convex section only)\n  - Agent skills (installed to each coding agent's native path, configured via convex.json)"
 ).allowExcessArguments(false).action(async () => {
-  const { projectDir, convexDir, aiFilesConfig } = await resolveProjectPaths();
-  await installAiFiles({ projectDir, convexDir, aiFilesConfig });
+  const { ctx, projectDir, convexDir, aiFilesConfig } = await resolveProjectPaths();
+  const result = await installAiFiles({
+    projectDir,
+    convexDir,
+    aiFilesConfig
+  });
+  if (result.kind === "error") {
+    return await ctx.crash({
+      exitCode: 1,
+      errorType: "fatal",
+      printedMessage: result.message
+    });
+  }
   logMessage(`${chalkStderr.green("\u2714")} Convex AI files updated.`);
 });
 var aiDisable = new Command2("disable").summary("Disable Convex AI files without removing them").description(
@@ -130846,6 +131099,8 @@ var envDefaultList = addEnvDefaultOptions(
       "\u2022 List only default variable names (no values): `npx convex env default list --names-only`",
       "\u2022 List all default variables and their values: `npx convex env default list --include-values`",
       "",
+      "When an AI agent runs this command (detected from environment variables like AI_AGENT or CLAUDECODE), only names are listed unless --include-values is passed.",
+      "",
       "The deployment type is determined by the current deployment (local maps to dev), or by --type if provided."
     ].join("\n")
   ).option(
@@ -130854,7 +131109,7 @@ var envDefaultList = addEnvDefaultOptions(
   ).addOption(
     new Option2(
       "--include-values",
-      "Print each variable's value alongside its name, in .env format (the default). Pass it explicitly in scripts that rely on the values."
+      "Print each variable's value alongside its name, in .env format. This is the default unless an AI agent is detected, so pass it explicitly in scripts that rely on the values."
     ).conflicts("namesOnly")
   ).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false)
 ).action(async (cmdOptions, cmd) => {
@@ -130862,7 +131117,8 @@ var envDefaultList = addEnvDefaultOptions(
   const { ctx, backend } = await resolveEnvDefaultBackend(options);
   await ensureHasConvexDependency(ctx, "env default list");
   await envList(ctx, backend, {
-    namesOnly: cmdOptions.namesOnly ?? false
+    namesOnly: cmdOptions.namesOnly ?? false,
+    includeValues: cmdOptions.includeValues ?? false
   });
 });
 var envDefault = new Command2("default").summary("Manage project-level default environment variables").description(
@@ -131090,7 +131346,9 @@ var envListCmd = new Command2("list").summary("List all environment variables an
     "\u2022 List only variable names (no values): `npx convex env list --names-only`",
     "\u2022 List all variables and their values: `npx convex env list --include-values`",
     "\u2022 Save all variables to a file: `npx convex env list --include-values > .env.convex`",
-    "\u2022 Append to a file: `npx convex env list --include-values >> .env.convex`"
+    "\u2022 Append to a file: `npx convex env list --include-values >> .env.convex`",
+    "",
+    "When an AI agent runs this command (detected from environment variables like AI_AGENT or CLAUDECODE), only names are listed unless --include-values is passed."
   ].join("\n")
 ).option(
   "--names-only",
@@ -131098,7 +131356,7 @@ var envListCmd = new Command2("list").summary("List all environment variables an
 ).addOption(
   new Option2(
     "--include-values",
-    "Print each variable's value alongside its name, in .env format (the default). Pass it explicitly in scripts that rely on the values."
+    "Print each variable's value alongside its name, in .env format. This is the default unless an AI agent is detected, so pass it explicitly in scripts that rely on the values."
   ).conflicts("namesOnly")
 ).configureHelp({ showGlobalOptions: true }).allowExcessArguments(false).action(async (cmdOptions, cmd) => {
   const options = cmd.optsWithGlobals();
@@ -131110,7 +131368,8 @@ var envListCmd = new Command2("list").summary("List all environment variables an
     action: async () => {
       const backend = deploymentEnvBackend(ctx, deployment2);
       await envList(ctx, backend, {
-        namesOnly: cmdOptions.namesOnly ?? false
+        namesOnly: cmdOptions.namesOnly ?? false,
+        includeValues: cmdOptions.includeValues ?? false
       });
     }
   });
@@ -151150,7 +151409,7 @@ var require_limit = /* @__PURE__ */ __commonJSMin(((exports2) => {
   };
   exports2.default = formatLimitPlugin;
 }));
-var require_dist = /* @__PURE__ */ __commonJSMin(((exports2, module2) => {
+var require_dist2 = /* @__PURE__ */ __commonJSMin(((exports2, module2) => {
   Object.defineProperty(exports2, "__esModule", { value: true });
   const formats_1 = require_formats();
   const limit_1 = require_limit();
@@ -151185,7 +151444,7 @@ var require_dist = /* @__PURE__ */ __commonJSMin(((exports2, module2) => {
 var import_ajv = require_ajv();
 var import__2019 = require__2019();
 var import__2020 = require__2020();
-var import_dist = /* @__PURE__ */ __toESM2(require_dist(), 1);
+var import_dist = /* @__PURE__ */ __toESM2(require_dist2(), 1);
 var addFormats = import_dist.default;
 function createDefaultAjvInstance(engineClass) {
   const ajv = new engineClass({