feat: add signature to actor get-public-url (#767)

This PR is part of apify/apify-core#19363,
which updates `KeyValueStore.getPublicUrl(recordKey)` to generate signed
links using HMAC.

This PR:
- adds signature to actor get-public-url to Apify CLI

Author: danpoletaev

package.json

@@ -62,7 +62,7 @@
         "@apify/actor-templates": "^0.1.5",
         "@apify/consts": "^2.36.0",
         "@apify/input_schema": "^3.12.0",
-        "@apify/utilities": "^2.12.0",
+        "@apify/utilities": "^2.15.1",
         "@crawlee/memory-storage": "^3.12.0",
         "@oclif/core": "~4.2.0",
         "@oclif/plugin-help": "~6.2.8",

src/commands/actor/get-public-url.ts

@@ -1,6 +1,8 @@
 import { ACTOR_ENV_VARS, APIFY_ENV_VARS } from '@apify/consts';
+import { createHmacSignature } from '@apify/utilities';
 import { Args } from '@oclif/core';
 
+import { getApifyStorageClient } from '../../lib/actor.js';
 import { ApifyCommand } from '../../lib/apify_command.js';
 import { CommandExitCodes } from '../../lib/consts.js';
 import { error } from '../../lib/outputs.js';
@@ -27,6 +29,35 @@ export class GetPublicUrlCommand extends ApifyCommand<typeof GetPublicUrlCommand
 		const apiBase = process.env[APIFY_ENV_VARS.API_PUBLIC_BASE_URL];
 		const storeId = process.env[ACTOR_ENV_VARS.DEFAULT_KEY_VALUE_STORE_ID];
 
-		console.log(`${apiBase}/v2/key-value-stores/${storeId}/records/${key}`);
+		// This should never happen, but handle it gracefully to prevent crashes.
+		if (!storeId) {
+			error({
+				message: `Missing environment variable: ${ACTOR_ENV_VARS.DEFAULT_KEY_VALUE_STORE_ID}. Please set it before running the command.`,
+			});
+			process.exitCode = CommandExitCodes.InvalidInput;
+			return;
+		}
+
+		const apifyClient = await getApifyStorageClient();
+		const store = await apifyClient.keyValueStore(storeId).get();
+
+		const publicUrl = new URL(`${apiBase}/v2/key-value-stores/${storeId}/records/${key}`);
+
+		if (!store) {
+			error({
+				message: `Key-Value store with ID '${storeId}' was not found. Ensure the store exists and that the correct ID is set in ${ACTOR_ENV_VARS.DEFAULT_KEY_VALUE_STORE_ID}.`,
+			});
+			process.exitCode = CommandExitCodes.NotFound;
+			return;
+		}
+
+		// @ts-expect-error Add types to client
+		const { urlSigningSecretKey } = store;
+
+		if (urlSigningSecretKey) {
+			publicUrl.searchParams.append('signature', createHmacSignature(urlSigningSecretKey as string, key));
+		}
+
+		console.log(publicUrl.toString());
 	}
 }

src/lib/consts.ts

@@ -112,5 +112,6 @@ export enum CommandExitCodes {
 	InvalidInput = 5,
 	InvalidActorJson = 5,
 
+	NotFound = 250,
 	NotImplemented = 255,
 }

yarn.lock

@@ -130,7 +130,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@apify/utilities@npm:^2.12.0, @apify/utilities@npm:^2.15.1, @apify/utilities@npm:^2.7.10, @apify/utilities@npm:^2.9.3":
+"@apify/utilities@npm:^2.15.1, @apify/utilities@npm:^2.7.10, @apify/utilities@npm:^2.9.3":
   version: 2.15.1
   resolution: "@apify/utilities@npm:2.15.1"
   dependencies:
@@ -3886,7 +3886,7 @@ __metadata:
     "@apify/eslint-config-ts": "npm:^0.4.1"
     "@apify/input_schema": "npm:^3.12.0"
     "@apify/tsconfig": "npm:^0.1.0"
-    "@apify/utilities": "npm:^2.12.0"
+    "@apify/utilities": "npm:^2.15.1"
     "@biomejs/biome": "npm:^1.8.3"
     "@crawlee/memory-storage": "npm:^3.12.0"
     "@crawlee/types": "npm:^3.11.1"