add reflex hosting cli

[adhami3310]

No description provided.

[codspeed-hq]

Merging this PR will not alter performance

✅ 9 untouched benchmarks

---

_{Comparing import-hosting-cli (1ac5a95) with main (2fe1a44)}

[greptile-apps]

Greptile Summary

This PR introduces the reflex-hosting-cli package — a standalone CLI for managing Reflex cloud deployments, projects, secrets, and app lifecycle — along with a comprehensive test suite. The majority of issues raised in earlier review rounds have been addressed (token logging, file truncation on re-login, URL injection via f-strings, pagination recursion, missing raise statements, and unguarded PackageNotFoundError).

• P1 (v2/cli.py): The envfile ImportError handler in deploy does not call raise click.exceptions.Exit(1), so when python-dotenv is absent the deploy proceeds with no environment variables — silently omitting all intended secrets. The same bug was already fixed in secrets.py.

Confidence Score: 4/5

Safe to merge after the envfile silent-drop bug in deploy is fixed; all other previously flagged P0/P1 issues are resolved.

One remaining P1 defect: the envfile ImportError in v2/cli.py:deploy falls through without exiting, causing a deploy with no env vars when python-dotenv is missing. All other major issues from prior review rounds are addressed. The P2 mutation in ScaleParams.as_json does not block merge.

packages/reflex-hosting-cli/src/reflex_cli/v2/cli.py — the envfile ImportError handler in deploy()

Important Files Changed

Filename	Overview
packages/reflex-hosting-cli/src/reflex_cli/utils/hosting.py	Core hosting utilities (2227 lines): auth, token management, app/project CRUD, log fetching, deployment — previously flagged issues (token logging, file truncation, URL injection, pagination) are addressed; minor side-effect mutation in ScaleParams.as_json remains.
packages/reflex-hosting-cli/src/reflex_cli/v2/cli.py	Top-level deploy/login/logout entry points: contains a P1 bug where envfile ImportError does not exit, causing deploy to proceed with no env vars; otherwise structure is sound.
packages/reflex-hosting-cli/src/reflex_cli/v2/deployments.py	hosting_cli group callback: PackageNotFoundError for reflex is now properly guarded; check_version still hard-exits on any newer patch (acknowledged as follow-up).
packages/reflex-hosting-cli/src/reflex_cli/v2/apps.py	App management commands (stop/start/delete/logs/scale/inspect/list): app_logs now uses a while loop with isinstance cursor check; list_apps and app_logs both catch NotAuthenticatedError; looks correct.
packages/reflex-hosting-cli/src/reflex_cli/v2/project.py	Project management commands: missing raise statements for NotAuthenticatedError are fixed; select_project now catches NotAuthenticatedError alongside HTTPStatusError.
packages/reflex-hosting-cli/src/reflex_cli/v2/secrets.py	Secrets commands: envfile ImportError now exits cleanly; NotAuthenticatedError handled in all three commands; correct.

_{Reviews (8): Last reviewed commit: "add any missing timeouts and guard again..." | Re-trigger Greptile}

[adhami3310]

@greptile

[adhami3310]

@greptile

[adhami3310]

@greptile

[adhami3310]

@greptile

[adhami3310]

@greptile

[adhami3310]

@greptile

[adhami3310]

@greptile

[greptile-apps]

envfile ImportError falls through — deployment uses wrong env vars

When --envfile is given but python-dotenv is not installed, the ImportError is caught and logged, but execution falls through without exiting. The processed_envs variable retains whatever was set earlier (typically None when only --envfile was provided, since the --env flags are ignored when --envfile is set), so create_deployment is called with no env vars at all — silently dropping every intended secret from the deployment. The identical bug was already fixed in secrets.py's update_secrets; a raise click.exceptions.Exit(1) from None is needed inside this except ImportError block.