Initial Commit

scripts/configure-convex.ts

@@ -0,0 +1,12 @@
+export {};
+// Run only against your intended self-hosted deployment. Values are never printed.
+const names = ['CONVEX_BRIDGE_SECRET', 'APP_AUTH_ISSUER', 'APP_AUTH_JWKS'] as const;
+if (!process.env.CONVEX_SELF_HOSTED_URL || !process.env.CONVEX_SELF_HOSTED_ADMIN_KEY) throw new Error('Set self-hosted URL and admin key before configuring Convex.');
+for (const name of names) {
+  const value = process.env[name];
+  if (!value) throw new Error(`Missing ${name}`);
+  // Pipe values rather than exposing them in process arguments or shell history.
+  const child = Bun.spawn(['bun', 'node_modules/convex/bin/main.js', 'env', 'set', name], { stdin: new Blob([value]), stdout: 'pipe', stderr: 'pipe' });
+  if (await child.exited !== 0) throw new Error(`Could not configure ${name}; check deployment URL/admin key (output suppressed to protect secrets).`);
+  console.log(`Configured ${name}`);
+}