instant-cli 1.0.21-branch-cli-codex.25190871505.1 → 1.0.21-branch-cli-codex-update.25190875900.1

package/src/index.ts

@@ -29,6 +29,7 @@ import { PACKAGE_ALIAS_AND_FULL_NAMES } from './context/projectInfo.ts';
 import { authClientAddCmd } from './commands/auth/client/add.ts';
 import { authClientListCmd } from './commands/auth/client/list.ts';
 import { authClientDeleteCmd } from './commands/auth/client/delete.ts';
+import { authClientUpdateCmd } from './commands/auth/client/update.ts';
 import { authOriginListCmd } from './commands/auth/origin/list.ts';
 import { authOriginDeleteCmd } from './commands/auth/origin/delete.ts';
 import { authOriginAddCmd } from './commands/auth/origin/add.ts';
@@ -198,6 +199,68 @@ export const authClientDeleteDef = authClient
     );
   });
 
+export const authClientUpdateDef = authClient
+  .command('update')
+  .description('Update an OAuth client')
+  .allowExcessArguments(true)
+  .allowUnknownOption(true)
+  .option('--id <client-id>', 'Client ID to update')
+  .option('--name <client-name>', 'Client name to update')
+  .option(
+    '-a --app <app-id>',
+    'App ID to update a client in. Defaults to *_INSTANT_APP_ID in .env',
+  )
+  .option(
+    '--dev-credentials',
+    'Switch a Google web client to Instant dev credentials.',
+  )
+  .addHelpText(
+    'after',
+    `
+Provider Specific Options:
+  Google:
+   --dev-credentials          (web only)
+   --client-id
+   --client-secret            (web only)
+   --custom-redirect-uri      (optional, web only)
+  GitHub:
+   --client-id
+   --client-secret
+   --custom-redirect-uri      (optional)
+  Apple:
+   --services-id
+   --team-id                  (web redirect flow)
+   --key-id                   (web redirect flow)
+   --private-key-file         (web redirect flow)
+   --custom-redirect-uri      (optional, web redirect flow only)
+  LinkedIn:
+   --client-id
+   --client-secret
+   --custom-redirect-uri      (optional)
+  Clerk:
+   --publishable-key
+  Firebase:
+   --project-id
+`,
+  )
+  .action((opts) => {
+    opts = {
+      ...opts,
+      ...minimist(process.argv),
+    };
+    return runCommandEffect(
+      authClientUpdateCmd(opts).pipe(
+        Effect.provide(
+          WithAppLayer({
+            coerce: false,
+            appId: opts.app,
+            allowAdminToken: true,
+          }),
+        ),
+      ),
+    );
+  });
+
 const authOrigin = auth.command('origin');
 export const authOriginListDef = authOrigin
   .command('list')

package/src/lib/oauth.ts

@@ -143,6 +143,35 @@ export const addOAuthClient = Effect.fn(function* (params: {
     );
 });
 
+export const updateOAuthClient = Effect.fn(function* (params: {
+  appId?: string;
+  oauthClientId: string;
+  clientId?: string;
+  clientSecret?: string;
+  discoveryEndpoint?: string;
+  redirectTo?: string | null;
+  meta?: unknown;
+  useSharedCredentials?: boolean;
+}) {
+  const http = (yield* InstantHttpAuthed).pipe(withCommand('auth'));
+  const targetAppId = params.appId ?? (yield* CurrentApp).appId;
+
+  return yield* http
+    .post(`/dash/apps/${targetAppId}/oauth_clients/${params.oauthClientId}`, {
+      body: HttpBody.unsafeJson({
+        client_id: params.clientId,
+        client_secret: params.clientSecret,
+        discovery_endpoint: params.discoveryEndpoint,
+        redirect_to: params.redirectTo,
+        meta: params.meta,
+        use_shared_credentials: params.useSharedCredentials,
+      }),
+    })
+    .pipe(
+      Effect.flatMap(HttpClientResponse.schemaBodyJson(AddOAuthClientResponse)),
+    );
+});
+
 // Due to the long prompt text, we use modifiers to manually create the prompt so we can
 // change it after submission.
 export const promptForRedirectURI = Effect.fn(function* (
@@ -245,6 +274,37 @@ export const getClientNameAndProvider = Effect.fn(function* (
   return { provider, clientName };
 });
 
+export const findClientByIdOrName = Effect.fn(function* (params: {
+  id?: string;
+  name?: string;
+}) {
+  if (params.id && params.name) {
+    return yield* BadArgsError.make({
+      message: 'Cannot specify both --id and --name',
+    });
+  }
+  if (!params.id && !params.name) {
+    return yield* BadArgsError.make({
+      message: 'Must specify --id or --name',
+    });
+  }
+
+  const auth = yield* getAppsAuth();
+  const clients = auth.oauth_clients ?? [];
+  const client = params.id
+    ? clients.find((entry) => entry.id === params.id)
+    : clients.find((entry) => entry.client_name === params.name);
+
+  if (!client) {
+    const lookup = params.id ? `id ${params.id}` : `name ${params.name}`;
+    return yield* BadArgsError.make({
+      message: `OAuth client not found: ${lookup}`,
+    });
+  }
+
+  return { auth, client };
+});
+
 export const removeAuthorizedOrigin = Effect.fn(function* (originId: string) {
   const http = (yield* InstantHttpAuthed).pipe(
     withCommand('auth origin delete'),