smoonb 1.0.13 → 1.0.14

package/package.json

@@ -1,71 +1,71 @@
-{
-  "name": "smoonb",
-  "version": "1.0.13",
-  "description": "Complete Supabase backup and migration tool. https://www.smoonb.com/#price",
-  "preferGlobal": false,
-  "preventGlobalInstall": true,
-  "main": "index.js",
-  "bin": {
-    "smoonb": "bin/smoonb.js"
-  },
-  "scripts": {
-    "test": "node --test tests/*.test.js",
-    "start": "node bin/smoonb.js",
-    "preinstall": "node -e \"if(process.env.npm_config_global) { console.error('\\n❌ SMOONB NÃO DEVE SER INSTALADO GLOBALMENTE!\\n\\n📋 Para usar o smoonb, instale localmente no seu projeto:\\n   npm install smoonb\\n\\n💡 Depois execute com:\\n   npx smoonb backup\\n\\n🚫 Instalação global cancelada!\\n'); process.exit(1); }\"",
-    "postinstall": "echo '\\n✅ smoonb instalado com sucesso!\\n💡 Execute: npx smoonb backup\\n📖 Documentação: https://github.com/almmello/smoonb\\n'",
-    "lint": "eslint . --ext .js",
-    "lint:fix": "eslint . --ext .js --fix",
-    "build": "node scripts/build.js",
-    "build:check": "node scripts/build.js",
-    "prepublishOnly": "npm test && npm run lint && npm run build",
-    "test:docker": "node tests/integration/circular-restore.js",
-    "test:restore:docker": "node tests/integration/verified-restore.js",
-    "test:backup:docker": "node tests/integration/backup-isolation.js"
-  },
-  "keywords": [
-    "supabase",
-    "backup",
-    "migration",
-    "postgresql",
-    "edge-functions",
-    "database",
-    "cli",
-    "tool"
-  ],
-  "author": "Goalmoon Tecnologia LTDA <https://www.smoonb.com>",
-  "license": "SEE LICENSE IN LICENSE.md",
-  "engines": {
-    "node": "^22.0.0 || ^24.0.0 || ^26.0.0"
-  },
-  "dependencies": {
-    "@supabase/supabase-js": "^2.93.0",
-    "adm-zip": "0.6.1",
-    "chalk": "^4.1.2",
-    "commander": "^11.1.0",
-    "env-paths": "^4.0.0",
-    "inquirer": "^8.2.7",
-    "supabase": "2.122.1"
-  },
-  "type": "commonjs",
-  "devDependencies": {
-    "eslint": "^9.38.0"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/almmello/smoonb.git"
-  },
-  "bugs": {
-    "url": "https://github.com/almmello/smoonb/issues"
-  },
-  "homepage": "https://www.smoonb.com",
-  "files": [
-    "bin/",
-    "src/",
-    "README.md",
-    "README.pt-BR.md",
-    "LICENSE",
-    "LICENSE.pt-BR.md",
-    "CHANGELOG.md",
-    "npm-shrinkwrap.json"
-  ]
-}
+{
+  "name": "smoonb",
+  "version": "1.0.14",
+  "description": "Complete Supabase backup and migration tool. https://www.smoonb.com/#price",
+  "preferGlobal": false,
+  "preventGlobalInstall": true,
+  "main": "index.js",
+  "bin": {
+    "smoonb": "bin/smoonb.js"
+  },
+  "scripts": {
+    "test": "node --test tests/*.test.js",
+    "start": "node bin/smoonb.js",
+    "preinstall": "node -e \"if(process.env.npm_config_global) { console.error('\\n❌ SMOONB NÃO DEVE SER INSTALADO GLOBALMENTE!\\n\\n📋 Para usar o smoonb, instale localmente no seu projeto:\\n   npm install smoonb\\n\\n💡 Depois execute com:\\n   npx smoonb backup\\n\\n🚫 Instalação global cancelada!\\n'); process.exit(1); }\"",
+    "postinstall": "echo '\\n✅ smoonb instalado com sucesso!\\n💡 Execute: npx smoonb backup\\n📖 Documentação: https://github.com/almmello/smoonb\\n'",
+    "lint": "eslint . --ext .js",
+    "lint:fix": "eslint . --ext .js --fix",
+    "build": "node scripts/build.js",
+    "build:check": "node scripts/build.js",
+    "prepublishOnly": "npm test && npm run lint && npm run build",
+    "test:docker": "node tests/integration/circular-restore.js",
+    "test:restore:docker": "node tests/integration/verified-restore.js",
+    "test:backup:docker": "node tests/integration/backup-isolation.js"
+  },
+  "keywords": [
+    "supabase",
+    "backup",
+    "migration",
+    "postgresql",
+    "edge-functions",
+    "database",
+    "cli",
+    "tool"
+  ],
+  "author": "Goalmoon Tecnologia LTDA <https://www.smoonb.com>",
+  "license": "SEE LICENSE IN LICENSE.md",
+  "engines": {
+    "node": "^22.0.0 || ^24.0.0 || ^26.0.0"
+  },
+  "dependencies": {
+    "@supabase/supabase-js": "^2.93.0",
+    "adm-zip": "0.6.1",
+    "chalk": "^4.1.2",
+    "commander": "^11.1.0",
+    "env-paths": "^4.0.0",
+    "inquirer": "^8.2.7",
+    "supabase": "2.122.1"
+  },
+  "type": "commonjs",
+  "devDependencies": {
+    "eslint": "^9.38.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/almmello/smoonb.git"
+  },
+  "bugs": {
+    "url": "https://github.com/almmello/smoonb/issues"
+  },
+  "homepage": "https://www.smoonb.com",
+  "files": [
+    "bin/",
+    "src/",
+    "README.md",
+    "README.pt-BR.md",
+    "LICENSE",
+    "LICENSE.pt-BR.md",
+    "CHANGELOG.md",
+    "npm-shrinkwrap.json"
+  ]
+}

package/src/commands/backup/index.js

@@ -4,7 +4,7 @@ const fs = require('fs').promises;
 const { ensureDir, writeJson } = require('../../utils/fsx');
 const { showBetaBanner } = require('../../utils/banner');
 const { getDockerVersion } = require('../../utils/docker');
-const { readEnvFile, backupEnvFile } = require('../../utils/env');
+const { readEnvFile, writeEnvFile, backupEnvFile } = require('../../utils/env');
 const { saveEnvMap } = require('../../utils/envMap');
 const { mapEnvVariablesInteractively, askComponentsFlags, printSupabasePostgresMajorHintOnce } = require('../../interactive/envMapper');
 const { confirm } = require('../../utils/prompt');
@@ -85,7 +85,7 @@ module.exports = async (options) => {
     await ensureDir(backupDir);
 
     // Backup e mapeamento do .env.local
-    const envBackupPath = path.join(backupDir, 'env', '.env.local');
+    const envBackupPath = path.join(backupDir, 'env', '.env.local.before');
     await ensureDir(path.dirname(envBackupPath));
     
     // Verificar se o arquivo existe antes de fazer backup
@@ -93,7 +93,8 @@ module.exports = async (options) => {
       await fs.access(envPath);
       await backupEnvFile(envPath, envBackupPath);
       console.log(chalk.blue(`📁 ${getT('env.mapping.backupCreated', { path: path.relative(process.cwd(), envBackupPath) })}`));
-    } catch {
+    } catch (error) {
+      if (error.code !== 'ENOENT') throw error;
       // Arquivo não existe, não fazer backup
       console.log(chalk.yellow(`⚠️  ${getT('env.mapping.fileNotFound')}`));
     }
@@ -110,10 +111,13 @@ module.exports = async (options) => {
       'SMOONB_TELEMETRY_ENABLED'
     ];
     const currentEnv = await readEnvFile(envPath);
-    const { finalEnv, dePara } = await mapEnvVariablesInteractively(currentEnv, expectedKeys);
-    // Mapping applies to this run only.
+    const { finalEnv, dePara } = await mapEnvVariablesInteractively(currentEnv, expectedKeys, async (entry, mapping) => {
+      await writeEnvFile(envPath, entry);
+      await saveEnvMap(mapping, path.join(backupDir, 'env', 'env-map.json'));
+    });
+    await backupEnvFile(envPath, path.join(backupDir, 'env', '.env.local'));
     await saveEnvMap(dePara, path.join(backupDir, 'env', 'env-map.json'));
-    console.log(chalk.green(`✅ ${getT('backup.environmentPreserved')}`));
+    console.log(chalk.green(`✅ ${getT('backup.environmentSaved')}`));
 
     function getValue(expectedKey) {
       const clientKey = Object.keys(dePara).find(k => dePara[k] === expectedKey);

package/src/commands/backup/steps/00-license.js

@@ -1,7 +1,7 @@
 const https = require('https');
 const inquirer = require('inquirer');
 const path = require('path');
-const { readEnvFile } = require('../../../utils/env');
+const { readEnvFile, writeEnvFile } = require('../../../utils/env');
 const { APP_CONFIG } = require('../../../config/appConfig');
 const { t } = require('../../../i18n');
 const ui = require('../../../utils/cliUi');
@@ -271,7 +271,7 @@ module.exports = async (options) => {
       ui.link(`   ${appUrl}`);
       process.exit(1);
     }
-    // Keep interactive credentials in memory; preserve the project's environment file.
+    await writeEnvFile(envPath, { [LICENSE_KEY_ENV]: licenseKey });
     process.env[LICENSE_KEY_ENV] = licenseKey;
   }
 

package/src/i18n/locales/en.json

@@ -155,8 +155,8 @@
   "disclaimer.operationCancelled": "Operation cancelled by user.",
 
   "consent.title": "Smoonb will read .env.local and preserve the project file.",
-  "consent.backup": "A copy of .env.local will be saved inside the backup.",
-  "consent.mapping": "We will map your environment variables to ensure all required keys are present and have the correct values for the target project.",
+  "consent.backup": "The previous configuration and the configuration used will be copied to the backup env folder.",
+  "consent.mapping": "Each confirmed value will be saved immediately to .env.local, before backup. Other variables will be preserved, and saved values will remain available if execution fails or is canceled.",
   "consent.proceed": "Do you consent to proceed?",
 
   "help.configuration": "CONFIGURATION:",
@@ -821,5 +821,5 @@
   "error.storageCredentialsNotConfigured": "Target project credentials not configured. SUPABASE_PROJECT_ID and SUPABASE_ACCESS_TOKEN are required",
   "error.supabaseCredentialsNotConfigured": "Supabase credentials not configured. NEXT_PUBLIC_SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY are required",
   "restore.verified.remapUrls": "Update old Supabase service URLs to the new project in data and files? (Includes URLs inside JSON; unrelated text and IDs are preserved.)",
-  "backup.environmentPreserved": "Environment mapped for this run; project file preserved."
+  "backup.environmentSaved": "Configuration saved to .env.local; available on the next run even if backup fails."
 }

package/src/i18n/locales/pt-BR.json

@@ -155,8 +155,8 @@
   "disclaimer.operationCancelled": "Operação cancelada pelo usuário.",
 
   "consent.title": "O smoonb irá ler .env.local e preservar o arquivo do projeto.",
-  "consent.backup": "Uma cópia de .env.local será salva dentro do backup.",
-  "consent.mapping": "Vamos mapear suas variáveis de ambiente para garantir que todas as chaves necessárias estejam presentes e com os valores corretos do projeto de destino.",
+  "consent.backup": "A configuração anterior e a configuração usada serão copiadas para a pasta env do backup.",
+  "consent.mapping": "Cada valor confirmado será salvo imediatamente em .env.local, antes do backup. As demais variáveis serão preservadas, e os valores salvos continuarão disponíveis se a execução falhar ou for cancelada.",
   "consent.proceed": "Você consente em prosseguir?",
 
   "help.configuration": "CONFIGURAÇÃO:",
@@ -820,5 +820,5 @@
   "error.storageCredentialsNotConfigured": "Credenciais do projeto destino não configuradas. É necessário SUPABASE_PROJECT_ID e SUPABASE_ACCESS_TOKEN",
   "error.supabaseCredentialsNotConfigured": "Credenciais do Supabase não configuradas. É necessário NEXT_PUBLIC_SUPABASE_URL e SUPABASE_SERVICE_ROLE_KEY",
   "restore.verified.remapUrls": "Atualizar os endereços Supabase do projeto antigo para o novo nos dados e arquivos? (Inclui URLs em campos JSON; outros textos e IDs são preservados.)",
-  "backup.environmentPreserved": "Ambiente mapeado para esta execução; arquivo do projeto preservado."
+  "backup.environmentSaved": "Configuração salva em .env.local; disponível para a próxima execução, mesmo se o backup falhar."
 }

package/src/interactive/envMapper.js

@@ -14,7 +14,7 @@ function printSupabasePostgresMajorHintOnce(getT) {
   ui.hint(`      ${getT('env.supabasePostgresMajor.hintBody')}`);
 }
 
-async function mapEnvVariablesInteractively(env, expectedKeys) {
+async function mapEnvVariablesInteractively(env, expectedKeys, onMapped = async () => {}) {
   _printedSupabasePostgresMajorHint = false;
   const finalEnv = { ...env };
   const dePara = {};
@@ -208,6 +208,7 @@ async function mapEnvVariablesInteractively(env, expectedKeys) {
           throw new Error(`Duplicidade de mapeamento detectada para ${clientKey}`);
         }
         dePara[clientKey] = expected;
+        await onMapped({ [clientKey]: finalEnv[clientKey] }, { ...dePara });
         continue;
       }
     }
@@ -261,6 +262,7 @@ async function mapEnvVariablesInteractively(env, expectedKeys) {
       throw new Error(`Duplicidade de mapeamento detectada para ${clientKey}`);
     }
     dePara[clientKey] = expected;
+    await onMapped({ [clientKey]: finalEnv[clientKey] }, { ...dePara });
   }
 
   // Após processar todas as variáveis, perguntar sobre idioma padrão se SMOONB_OUTPUT_DIR foi processado
@@ -288,6 +290,7 @@ async function mapEnvVariablesInteractively(env, expectedKeys) {
     }]);
 
     finalEnv.SMOONB_LANG = selectedLang;
+    await onMapped({ SMOONB_LANG: selectedLang }, { ...dePara });
     console.log(chalk.green(`✅ ${getT('env.language.saved', { lang: selectedLang })}`));
     console.log(chalk.yellow(`💡 ${getT('env.language.note')}`));
   }

package/src/utils/env.js

@@ -1,5 +1,6 @@
 const fsp = require('fs').promises;
 const path = require('path');
+const { randomUUID } = require('crypto');
 
 function parseEnvContent(content) {
   const lines = content.replace(/\r\n/g, '\n').split('\n');
@@ -9,10 +10,10 @@ function parseEnvContent(content) {
     if (!trimmed || trimmed.startsWith('#')) continue;
     const eqIndex = line.indexOf('=');
     if (eqIndex === -1) continue;
-    const key = line.slice(0, eqIndex).trim();
+    const key = line.slice(0, eqIndex).trim().replace(/^export\s+/, '');
     let value = line.slice(eqIndex + 1);
     // Remove optional quotes
-    if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) {
+    if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'")) || (value.startsWith("`") && value.endsWith("`"))) {
       value = value.slice(1, -1);
     }
     entries[key] = value;
@@ -20,10 +21,19 @@ function parseEnvContent(content) {
   return entries;
 }
 
+function encodeEnvValue(value) {
+  const raw = String(value ?? '');
+  if (!/[\s#"'`]/.test(raw)) return raw;
+  const quote = ["'", '`', '"'].find(q => !raw.includes(q) && (q !== '"' || !/\\[nr]/.test(raw)));
+  if (!quote) throw new Error('Environment value cannot be safely quoted; file was not changed');
+  return quote + raw + quote;
+}
+
 function stringifyEnv(entries, existingContent) {
   // Best-effort: keep existing comments and order; update or append keys
   const existingLines = (existingContent || '').replace(/\r\n/g, '\n').split('\n');
   const seen = new Set();
+  const existingEntries = parseEnvContent(existingContent || '');
   const resultLines = [];
 
   for (const line of existingLines) {
@@ -33,12 +43,12 @@ function stringifyEnv(entries, existingContent) {
       continue;
     }
     const eqIndex = line.indexOf('=');
-    const key = line.slice(0, eqIndex).trim();
+    const prefix = line.slice(0, eqIndex);
+    const key = prefix.trim().replace(/^export\s+/, '');
     if (Object.prototype.hasOwnProperty.call(entries, key)) {
-      const rawValue = entries[key] ?? '';
-      const needsQuote = /\s|[#]/.test(rawValue);
-      const safeValue = needsQuote ? `"${rawValue.replace(/"/g, '\\"')}"` : rawValue;
-      resultLines.push(`${key}=${safeValue}`);
+      if (existingEntries[key] === entries[key]) { resultLines.push(line); seen.add(key); continue; }
+      const safeValue = encodeEnvValue(entries[key]);
+      resultLines.push(`${prefix}=${safeValue}`);
       seen.add(key);
     } else {
       resultLines.push(line);
@@ -47,15 +57,14 @@ function stringifyEnv(entries, existingContent) {
 
   for (const [key, value] of Object.entries(entries)) {
     if (seen.has(key)) continue;
-    const rawValue = value ?? '';
-    const needsQuote = /\s|[#]/.test(rawValue);
-    const safeValue = needsQuote ? `"${rawValue.replace(/"/g, '\\"')}"` : rawValue;
+    const safeValue = encodeEnvValue(value);
     resultLines.push(`${key}=${safeValue}`);
   }
 
   // Ensure trailing newline
-  let out = resultLines.join('\n');
-  if (!out.endsWith('\n')) out += '\n';
+  const newline = (existingContent || '').includes('\r\n') ? '\r\n' : '\n';
+  let out = resultLines.join(newline);
+  if (!out.endsWith('\n')) out += newline;
   return out;
 }
 
@@ -73,9 +82,18 @@ async function writeEnvFile(filePath, entries, _options = {}) {
   const dir = path.dirname(filePath);
   await fsp.mkdir(dir, { recursive: true });
   let existing = '';
-  try { existing = await fsp.readFile(filePath, 'utf8'); } catch {}
+  try { existing = await fsp.readFile(filePath, 'utf8'); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+  for (const [key, value] of Object.entries(entries)) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key) || /[\r\n\0]/.test(String(value ?? ''))) throw new Error('Invalid environment entry; file was not changed');
+  }
   const content = stringifyEnv(entries, existing);
-  await fsp.writeFile(filePath, content, 'utf8');
+  if (content === existing) return;
+  const temporary = path.join(dir, `.smoonb-env-${randomUUID()}.tmp`);
+  try {
+    await fsp.writeFile(temporary, content, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+    await fsp.rename(temporary, filePath);
+  } finally { await fsp.unlink(temporary).catch(error => { if (error.code !== 'ENOENT') throw error; }); }
+
 }
 
 async function backupEnvFile(srcPath, destPath) {
@@ -86,7 +104,7 @@ async function backupEnvFile(srcPath, destPath) {
     await fsp.copyFile(srcPath, destPath);
   } catch (e) {
     if (e.code === 'ENOENT') {
-      // Arquivo não existe, não fazer backup de arquivo vazio
+      // Arquivo não existe, não fazer backup de arquivo vazio
       return;
     }
     throw e;