@1claw/cli 0.1.0

package/dist/src/commands/env.js

@@ -0,0 +1,164 @@
+import { Command } from "commander";
+import { spawn } from "node:child_process";
+import { readFile, writeFile } from "node:fs/promises";
+import chalk from "chalk";
+import ora from "ora";
+import { api } from "../client.js";
+import { requireToken, resolveVaultId, handleError } from "../middleware.js";
+import { printSuccess } from "../output.js";
+export const envCommand = new Command("env").description("Environment variable management for CI/CD");
+envCommand
+    .command("pull")
+    .description("Pull secrets from a vault as environment variables")
+    .option("-v, --vault <id>", "Vault ID")
+    .option("--prefix <prefix>", "Only pull secrets under this path prefix")
+    .option("-f, --format <format>", "Output format: dotenv, json, shell", "dotenv")
+    .option("-o, --output <file>", "Write to file instead of stdout")
+    .action(async (opts) => {
+    try {
+        requireToken();
+        const vaultId = resolveVaultId(opts);
+        const spinner = ora("Fetching secrets…").start();
+        const query = {};
+        if (opts.prefix)
+            query.prefix = opts.prefix;
+        const secrets = await api(`/vaults/${vaultId}/secrets`, { query });
+        const envSecrets = secrets.filter((s) => s.secret_type === "env_bundle" ||
+            s.secret_type === "api_key" ||
+            s.secret_type === "password");
+        const values = {};
+        for (const s of envSecrets) {
+            const detail = await api(`/vaults/${vaultId}/secrets/${encodeURIComponent(s.path)}`);
+            if (s.secret_type === "env_bundle") {
+                for (const line of detail.value.split("\n")) {
+                    const trimmed = line.trim();
+                    if (!trimmed || trimmed.startsWith("#"))
+                        continue;
+                    const eqIdx = trimmed.indexOf("=");
+                    if (eqIdx > 0) {
+                        values[trimmed.slice(0, eqIdx).trim()] = trimmed
+                            .slice(eqIdx + 1)
+                            .trim()
+                            .replace(/^["']|["']$/g, "");
+                    }
+                }
+            }
+            else {
+                const envKey = s.path.replace(/[/-]/g, "_").toUpperCase();
+                values[envKey] = detail.value;
+            }
+        }
+        spinner.stop();
+        let output;
+        switch (opts.format) {
+            case "json":
+                output = JSON.stringify(values, null, 2) + "\n";
+                break;
+            case "shell":
+                output =
+                    Object.entries(values)
+                        .map(([k, v]) => `export ${k}=${shellEscape(v)}`)
+                        .join("\n") + "\n";
+                break;
+            case "dotenv":
+            default:
+                output =
+                    Object.entries(values)
+                        .map(([k, v]) => `${k}=${v.includes(" ") ? `"${v}"` : v}`)
+                        .join("\n") + "\n";
+                break;
+        }
+        if (opts.output) {
+            await writeFile(opts.output, output);
+            printSuccess(`Wrote ${Object.keys(values).length} variables to ${opts.output}`);
+        }
+        else {
+            process.stdout.write(output);
+        }
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+envCommand
+    .command("push <file>")
+    .description("Push a .env file to vault as an env_bundle secret")
+    .option("-v, --vault <id>", "Vault ID")
+    .option("-p, --path <path>", "Secret path in vault", "config/env")
+    .action(async (file, opts) => {
+    try {
+        requireToken();
+        const vaultId = resolveVaultId(opts);
+        const content = await readFile(file, "utf-8");
+        const lineCount = content
+            .split("\n")
+            .filter((l) => l.trim() && !l.trim().startsWith("#")).length;
+        await api(`/vaults/${vaultId}/secrets/${encodeURIComponent(opts.path)}`, {
+            method: "PUT",
+            body: { value: content, secret_type: "env_bundle" },
+        });
+        printSuccess(`Pushed ${lineCount} variables from ${chalk.bold(file)} to ${chalk.bold(opts.path)}`);
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+envCommand
+    .command("run <command...>")
+    .description("Run a command with vault secrets injected as environment variables")
+    .option("-v, --vault <id>", "Vault ID")
+    .option("--prefix <prefix>", "Only inject secrets under this path prefix")
+    .action(async (commandParts, opts) => {
+    try {
+        requireToken();
+        const vaultId = resolveVaultId(opts);
+        const spinner = ora("Loading secrets…").start();
+        const query = {};
+        if (opts.prefix)
+            query.prefix = opts.prefix;
+        const secrets = await api(`/vaults/${vaultId}/secrets`, { query });
+        const envVars = {};
+        for (const s of secrets) {
+            if (!["env_bundle", "api_key", "password"].includes(s.secret_type))
+                continue;
+            const detail = await api(`/vaults/${vaultId}/secrets/${encodeURIComponent(s.path)}`);
+            if (s.secret_type === "env_bundle") {
+                for (const line of detail.value.split("\n")) {
+                    const trimmed = line.trim();
+                    if (!trimmed || trimmed.startsWith("#"))
+                        continue;
+                    const eqIdx = trimmed.indexOf("=");
+                    if (eqIdx > 0) {
+                        envVars[trimmed.slice(0, eqIdx).trim()] = trimmed
+                            .slice(eqIdx + 1)
+                            .trim()
+                            .replace(/^["']|["']$/g, "");
+                    }
+                }
+            }
+            else {
+                envVars[s.path.replace(/[/-]/g, "_").toUpperCase()] =
+                    detail.value;
+            }
+        }
+        spinner.succeed(`Loaded ${Object.keys(envVars).length} secrets. Running command…`);
+        const [cmd, ...args] = commandParts;
+        const child = spawn(cmd, args, {
+            stdio: "inherit",
+            env: { ...process.env, ...envVars },
+            shell: true,
+        });
+        child.on("exit", (code) => {
+            process.exit(code ?? 1);
+        });
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+function shellEscape(s) {
+    if (/^[a-zA-Z0-9._\-/:=@]+$/.test(s))
+        return s;
+    return `'${s.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=env.js.map

package/dist/src/commands/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/commands/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,YAAY,EAA2B,MAAM,cAAc,CAAC;AAQrE,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CACpD,2CAA2C,CAC9C,CAAC;AAEF,UAAU;KACL,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;KACtC,MAAM,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;KACvE,MAAM,CACH,uBAAuB,EACvB,oCAAoC,EACpC,QAAQ,CACX;KACA,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;KAChE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACnB,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE5C,MAAM,OAAO,GAAG,MAAM,GAAG,CACrB,WAAW,OAAO,UAAU,EAC5B,EAAE,KAAK,EAAE,CACZ,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CACF,CAAC,CAAC,WAAW,KAAK,YAAY;YAC9B,CAAC,CAAC,WAAW,KAAK,SAAS;YAC3B,CAAC,CAAC,WAAW,KAAK,UAAU,CACnC,CAAC;QAEF,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,GAAG,CACpB,WAAW,OAAO,YAAY,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAC7D,CAAC;YAEF,IAAI,CAAC,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;gBACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACnC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACZ,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO;6BAC3C,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;6BAChB,IAAI,EAAE;6BACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;oBACrC,CAAC;gBACL,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC1D,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;YAClC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,MAAc,CAAC;QACnB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,KAAK,MAAM;gBACP,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;gBAChD,MAAM;YACV,KAAK,OAAO;gBACR,MAAM;oBACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;yBACjB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;yBAChD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBAC3B,MAAM;YACV,KAAK,QAAQ,CAAC;YACd;gBACI,MAAM;oBACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;yBACjB,GAAG,CACA,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACP,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAC/C;yBACA,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBAC3B,MAAM;QACd,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,YAAY,CACR,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,iBAAiB,IAAI,CAAC,MAAM,EAAE,CACpE,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,UAAU;KACL,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,mDAAmD,CAAC;KAChE,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;KACtC,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,YAAY,CAAC;KACjE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IACzB,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO;aACpB,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAEjE,MAAM,GAAG,CACL,WAAW,OAAO,YAAY,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC7D;YACI,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE;SACtD,CACJ,CAAC;QAEF,YAAY,CACR,UAAU,SAAS,mBAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,UAAU;KACL,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CACR,oEAAoE,CACvE;KACA,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;KACtC,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;KACzE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;IACjC,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;QAChD,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE5C,MAAM,OAAO,GAAG,MAAM,GAAG,CACrB,WAAW,OAAO,UAAU,EAC5B,EAAE,KAAK,EAAE,CACZ,CAAC;QAEF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,IACI,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAC3C,CAAC,CAAC,WAAW,CAChB;gBAED,SAAS;YAEb,MAAM,MAAM,GAAG,MAAM,GAAG,CACpB,WAAW,OAAO,YAAY,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAC7D,CAAC;YAEF,IAAI,CAAC,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;gBACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACnC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACZ,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO;6BAC5C,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;6BAChB,IAAI,EAAE;6BACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;oBACrC,CAAC;gBACL,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC/C,MAAM,CAAC,KAAK,CAAC;YACrB,CAAC;QACL,CAAC;QAED,OAAO,CAAC,OAAO,CACX,UAAU,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,4BAA4B,CACpE,CAAC;QAEF,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,YAAY,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC3B,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE;YACnC,KAAK,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACtB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,SAAS,WAAW,CAAC,CAAS;IAC1B,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC"}

package/dist/src/commands/login.d.ts

@@ -0,0 +1,5 @@
+import { Command } from "commander";
+export declare const loginCommand: Command;
+export declare const logoutCommand: Command;
+export declare const whoamiCommand: Command;
+//# sourceMappingURL=login.d.ts.map

package/dist/src/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,eAAO,MAAM,YAAY,SAwDnB,CAAC;AAEP,eAAO,MAAM,aAAa,SAKpB,CAAC;AAEP,eAAO,MAAM,aAAa,SA2BpB,CAAC"}

package/dist/src/commands/login.js

@@ -0,0 +1,88 @@
+import { Command } from "commander";
+import inquirer from "inquirer";
+import chalk from "chalk";
+import { loginWithDevice, loginWithCredentials, completeMfaLogin, } from "../auth.js";
+import { getAuth, clearAuth, getConfigPath, setApiUrl } from "../config.js";
+import { printSuccess, printError, printKeyValue, printInfo, } from "../output.js";
+import { handleError } from "../middleware.js";
+export const loginCommand = new Command("login")
+    .description("Authenticate with 1Claw")
+    .option("--email", "Use email/password instead of browser login")
+    .option("--api-url <url>", "Override the API URL")
+    .action(async (opts) => {
+    try {
+        if (opts.apiUrl) {
+            setApiUrl(opts.apiUrl);
+            printInfo(`API URL set to ${opts.apiUrl}`);
+        }
+        if (opts.email) {
+            const answers = await inquirer.prompt([
+                { type: "input", name: "email", message: "Email:" },
+                {
+                    type: "password",
+                    name: "password",
+                    message: "Password:",
+                    mask: "•",
+                },
+            ]);
+            const result = await loginWithCredentials(answers.email, answers.password);
+            if (!result)
+                return;
+            if (result.mfaToken) {
+                const mfa = await inquirer.prompt([
+                    {
+                        type: "input",
+                        name: "code",
+                        message: "MFA code (from authenticator app):",
+                    },
+                ]);
+                const finalAuth = await completeMfaLogin(result.mfaToken, mfa.code);
+                if (!finalAuth)
+                    return;
+                printSuccess(`Logged in as ${chalk.bold(finalAuth.email)}`);
+                return;
+            }
+            printSuccess(`Logged in as ${chalk.bold(result.email)}`);
+            return;
+        }
+        const auth = await loginWithDevice();
+        if (auth) {
+            printSuccess(`Logged in as ${chalk.bold(auth.email)}`);
+        }
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+export const logoutCommand = new Command("logout")
+    .description("Clear stored credentials")
+    .action(() => {
+    clearAuth();
+    printSuccess("Logged out. Credentials removed.");
+});
+export const whoamiCommand = new Command("whoami")
+    .description("Show current authenticated user")
+    .action(async () => {
+    try {
+        const auth = getAuth();
+        if (!auth) {
+            printError("Not authenticated. Run `1claw login` first.");
+            process.exit(1);
+        }
+        if (auth.email === "env") {
+            printInfo("Authenticated via ONECLAW_TOKEN environment variable.");
+            return;
+        }
+        printKeyValue([
+            ["Email", auth.email],
+            ["User ID", auth.userId],
+            ["Org ID", auth.orgId],
+            ["Token expires", auth.expiresAt ?? "unknown"],
+            ["Config", getConfigPath()],
+        ]);
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+//# sourceMappingURL=login.js.map

package/dist/src/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACH,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EACH,YAAY,EACZ,UAAU,EACV,aAAa,EACb,SAAS,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC3C,WAAW,CAAC,yBAAyB,CAAC;KACtC,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC;KAChE,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;KACjD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACnB,IAAI,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,SAAS,CAAC,kBAAkB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;gBAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACnD;oBACI,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,WAAW;oBACpB,IAAI,EAAE,GAAG;iBACZ;aACJ,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACrC,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,QAAQ,CACnB,CAAC;YACF,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,IAAK,MAAc,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;oBAC9B;wBACI,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,oCAAoC;qBAChD;iBACJ,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACnC,MAAc,CAAC,QAAQ,EACxB,GAAG,CAAC,IAAI,CACX,CAAC;gBACF,IAAI,CAAC,SAAS;oBAAE,OAAO;gBACvB,YAAY,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACX,CAAC;YAED,YAAY,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzD,OAAO;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACP,YAAY,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC7C,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,GAAG,EAAE;IACT,SAAS,EAAE,CAAC;IACZ,YAAY,CAAC,kCAAkC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC7C,WAAW,CAAC,iCAAiC,CAAC;KAC9C,MAAM,CAAC,KAAK,IAAI,EAAE;IACf,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,UAAU,CAAC,6CAA6C,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACvB,SAAS,CACL,uDAAuD,CAC1D,CAAC;YACF,OAAO;QACX,CAAC;QAED,aAAa,CAAC;YACV,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;YACrB,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;YACxB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;YACtB,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;YAC9C,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/commands/mfa.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const mfaCommand: Command;
+//# sourceMappingURL=mfa.d.ts.map

package/dist/src/commands/mfa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.d.ts","sourceRoot":"","sources":["../../../src/commands/mfa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,eAAO,MAAM,UAAU,SAEtB,CAAC"}

package/dist/src/commands/mfa.js

@@ -0,0 +1,123 @@
+import { Command } from "commander";
+import chalk from "chalk";
+import inquirer from "inquirer";
+import { api } from "../client.js";
+import { requireToken, handleError } from "../middleware.js";
+import { printKeyValue, printSuccess, printInfo, } from "../output.js";
+export const mfaCommand = new Command("mfa").description("Manage two-factor authentication");
+mfaCommand
+    .command("status")
+    .description("Check MFA status")
+    .action(async () => {
+    try {
+        requireToken();
+        const status = await api("/auth/mfa/status");
+        printKeyValue([
+            [
+                "MFA",
+                status.enabled
+                    ? chalk.green("Enabled")
+                    : chalk.yellow("Disabled"),
+            ],
+        ]);
+        if (!status.enabled) {
+            printInfo("Run `1claw mfa enable` to set up two-factor authentication.");
+        }
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+mfaCommand
+    .command("enable")
+    .description("Enable TOTP two-factor authentication")
+    .action(async () => {
+    try {
+        requireToken();
+        const setup = await api("/auth/mfa/setup", { method: "POST" });
+        console.log();
+        console.log(chalk.bold("  Set up two-factor authentication"));
+        console.log();
+        console.log("  Add this account to your authenticator app:");
+        console.log();
+        console.log(`  Secret key: ${chalk.cyan.bold(setup.secret)}`);
+        console.log();
+        console.log(chalk.dim(`  URI: ${setup.otpauth_uri}`));
+        console.log();
+        const { code } = await inquirer.prompt([
+            {
+                type: "input",
+                name: "code",
+                message: "Enter the 6-digit code from your app to verify:",
+                validate: (v) => /^\d{6}$/.test(v) || "Enter a 6-digit code",
+            },
+        ]);
+        const result = await api("/auth/mfa/verify-setup", { method: "POST", body: { code } });
+        printSuccess("Two-factor authentication enabled!");
+        console.log();
+        console.log(chalk.yellow.bold("  Save these recovery codes in a safe place:"));
+        console.log(chalk.yellow("  Each code can only be used once."));
+        console.log();
+        for (const rc of result.recovery_codes) {
+            console.log(`  ${chalk.bold(rc)}`);
+        }
+        console.log();
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+mfaCommand
+    .command("disable")
+    .description("Disable two-factor authentication")
+    .action(async () => {
+    try {
+        requireToken();
+        const { method } = await inquirer.prompt([
+            {
+                type: "list",
+                name: "method",
+                message: "Confirm with:",
+                choices: [
+                    {
+                        name: "TOTP code from authenticator app",
+                        value: "totp",
+                    },
+                    { name: "Account password", value: "password" },
+                ],
+            },
+        ]);
+        const body = {};
+        if (method === "totp") {
+            const { code } = await inquirer.prompt([
+                {
+                    type: "input",
+                    name: "code",
+                    message: "Enter your 6-digit TOTP code:",
+                    validate: (v) => /^\d{6}$/.test(v) || "Enter a 6-digit code",
+                },
+            ]);
+            body.code = code;
+        }
+        else {
+            const { password } = await inquirer.prompt([
+                {
+                    type: "password",
+                    name: "password",
+                    message: "Enter your account password:",
+                    mask: "•",
+                },
+            ]);
+            body.password = password;
+        }
+        await api("/auth/mfa", {
+            method: "DELETE",
+            body,
+        });
+        printSuccess("Two-factor authentication disabled.");
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+//# sourceMappingURL=mfa.js.map

package/dist/src/commands/mfa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.js","sourceRoot":"","sources":["../../../src/commands/mfa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACH,aAAa,EACb,YAAY,EACZ,SAAS,GAEZ,MAAM,cAAc,CAAC;AAEtB,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CACpD,kCAAkC,CACrC,CAAC;AAEF,UAAU;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,kBAAkB,CAAC;KAC/B,MAAM,CAAC,KAAK,IAAI,EAAE;IACf,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,GAAG,CAAuB,kBAAkB,CAAC,CAAC;QAEnE,aAAa,CAAC;YACV;gBACI,KAAK;gBACL,MAAM,CAAC,OAAO;oBACV,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;oBACxB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;aACjC;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,SAAS,CACL,6DAA6D,CAChE,CAAC;QACN,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,UAAU;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,KAAK,IAAI,EAAE;IACf,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QAEf,MAAM,KAAK,GAAG,MAAM,GAAG,CAGpB,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAE1C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACnC;gBACI,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,iDAAiD;gBAC1D,QAAQ,EAAE,CAAC,CAAS,EAAE,EAAE,CACpB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sBAAsB;aAClD;SACJ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CACpB,wBAAwB,EACxB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CACrC,CAAC;QAEF,YAAY,CAAC,oCAAoC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,CAAC,IAAI,CACb,8CAA8C,CACjD,CACJ,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,UAAU;KACL,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,mCAAmC,CAAC;KAChD,MAAM,CAAC,KAAK,IAAI,EAAE;IACf,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QAEf,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACrC;gBACI,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,eAAe;gBACxB,OAAO,EAAE;oBACL;wBACI,IAAI,EAAE,kCAAkC;wBACxC,KAAK,EAAE,MAAM;qBAChB;oBACD,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE;iBAClD;aACJ;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,GAA2B,EAAE,CAAC;QAExC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACnC;oBACI,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,+BAA+B;oBACxC,QAAQ,EAAE,CAAC,CAAS,EAAE,EAAE,CACpB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sBAAsB;iBAClD;aACJ,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,CAAC;YACJ,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACvC;oBACI,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,GAAG;iBACZ;aACJ,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,CAAC;QAED,MAAM,GAAG,CAAC,WAAW,EAAE;YACnB,MAAM,EAAE,QAAQ;YAChB,IAAI;SACP,CAAC,CAAC;QAEH,YAAY,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/commands/policy.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const policyCommand: Command;
+//# sourceMappingURL=policy.d.ts.map

package/dist/src/commands/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/commands/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,eAAO,MAAM,aAAa,SAEzB,CAAC"}

package/dist/src/commands/policy.js

@@ -0,0 +1,114 @@
+import { Command } from "commander";
+import chalk from "chalk";
+import { api } from "../client.js";
+import { requireToken, resolveVaultId, handleError } from "../middleware.js";
+import { printTable, printKeyValue, printSuccess, printJson, } from "../output.js";
+export const policyCommand = new Command("policy").description("Manage access policies");
+policyCommand
+    .command("list")
+    .alias("ls")
+    .description("List policies for a vault")
+    .option("-v, --vault <id>", "Vault ID")
+    .option("--json", "Output as JSON")
+    .action(async (opts) => {
+    try {
+        requireToken();
+        const vaultId = resolveVaultId(opts);
+        const policies = await api(`/vaults/${vaultId}/policies`);
+        if (opts.json) {
+            printJson(policies);
+            return;
+        }
+        printTable(policies.map((p) => ({
+            ...p,
+            permissions: p.permissions.join(", "),
+            principal: `${p.principal_type}:${p.principal_id.slice(0, 8)}…`,
+            expires: p.expires_at
+                ? new Date(p.expires_at).toLocaleDateString()
+                : chalk.dim("never"),
+        })), [
+            { key: "id", header: "ID", width: 36 },
+            { key: "principal", header: "Principal", width: 20 },
+            { key: "path_pattern", header: "Path pattern", width: 20 },
+            { key: "permissions", header: "Permissions", width: 16 },
+            { key: "expires", header: "Expires" },
+        ]);
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+policyCommand
+    .command("create")
+    .description("Create an access policy")
+    .option("-v, --vault <id>", "Vault ID")
+    .requiredOption("--principal-type <type>", "Principal type: agent or user")
+    .requiredOption("--principal-id <id>", "Principal UUID")
+    .requiredOption("--path <pattern>", "Path glob pattern (e.g. api-keys/*)")
+    .option("--permissions <perms>", "Comma-separated: read, write, delete", "read")
+    .option("--expires <date>", "Expiration date (ISO 8601)")
+    .action(async (opts) => {
+    try {
+        requireToken();
+        const vaultId = resolveVaultId(opts);
+        const body = {
+            principal_type: opts.principalType,
+            principal_id: opts.principalId,
+            path_pattern: opts.path,
+            permissions: opts.permissions
+                .split(",")
+                .map((s) => s.trim()),
+        };
+        if (opts.expires)
+            body.expires_at = opts.expires;
+        const policy = await api(`/vaults/${vaultId}/policies`, {
+            method: "POST",
+            body,
+        });
+        printSuccess(`Policy created: ${policy.id}`);
+        printKeyValue([
+            ["ID", policy.id],
+            [
+                "Principal",
+                `${policy.principal_type}:${policy.principal_id}`,
+            ],
+            ["Path", policy.path_pattern],
+            ["Permissions", policy.permissions.join(", ")],
+        ]);
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+policyCommand
+    .command("delete <id>")
+    .description("Delete a policy")
+    .option("-v, --vault <id>", "Vault ID")
+    .option("-y, --yes", "Skip confirmation")
+    .action(async (id, opts) => {
+    try {
+        requireToken();
+        const vaultId = resolveVaultId(opts);
+        if (!opts.yes) {
+            const inquirer = await import("inquirer");
+            const { confirm } = await inquirer.default.prompt([
+                {
+                    type: "confirm",
+                    name: "confirm",
+                    message: `Delete policy ${id}?`,
+                    default: false,
+                },
+            ]);
+            if (!confirm)
+                return;
+        }
+        await api(`/vaults/${vaultId}/policies/${id}`, {
+            method: "DELETE",
+        });
+        printSuccess("Policy deleted.");
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+//# sourceMappingURL=policy.js.map

package/dist/src/commands/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/commands/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACH,UAAU,EACV,aAAa,EACb,YAAY,EACZ,SAAS,GACZ,MAAM,cAAc,CAAC;AAatB,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAC1D,wBAAwB,CAC3B,CAAC;AAEF,aAAa;KACR,OAAO,CAAC,MAAM,CAAC;KACf,KAAK,CAAC,IAAI,CAAC;KACX,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;KACtC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACnB,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAW,WAAW,OAAO,WAAW,CAAC,CAAC;QAEpE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,OAAO;QACX,CAAC;QAED,UAAU,CACN,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjB,GAAG,CAAC;YACJ,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,SAAS,EAAE,GAAG,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;YAC/D,OAAO,EAAE,CAAC,CAAC,UAAU;gBACjB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE;gBAC7C,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC,EACH;YACI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YACtC,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE;YACpD,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE;YAC1D,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE;YACxD,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;SACxC,CACJ,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,aAAa;KACR,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,yBAAyB,CAAC;KACtC,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;KACtC,cAAc,CAAC,yBAAyB,EAAE,+BAA+B,CAAC;KAC1E,cAAc,CAAC,qBAAqB,EAAE,gBAAgB,CAAC;KACvD,cAAc,CAAC,kBAAkB,EAAE,qCAAqC,CAAC;KACzE,MAAM,CACH,uBAAuB,EACvB,sCAAsC,EACtC,MAAM,CACT;KACA,MAAM,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACnB,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,IAAI,GAA4B;YAClC,cAAc,EAAE,IAAI,CAAC,aAAa;YAClC,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;iBACxB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpC,CAAC;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAS,WAAW,OAAO,WAAW,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,IAAI;SACP,CAAC,CAAC;QAEH,YAAY,CAAC,mBAAmB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC;YACV,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACjB;gBACI,WAAW;gBACX,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,YAAY,EAAE;aACpD;YACD,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC;YAC7B,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACjD,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,aAAa;KACR,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,iBAAiB,CAAC;KAC9B,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;KACtC,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC;KACxC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;IACvB,IAAI,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAErC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC9C;oBACI,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,iBAAiB,EAAE,GAAG;oBAC/B,OAAO,EAAE,KAAK;iBACjB;aACJ,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO;QACzB,CAAC;QAED,MAAM,GAAG,CAAC,WAAW,OAAO,aAAa,EAAE,EAAE,EAAE;YAC3C,MAAM,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,YAAY,CAAC,iBAAiB,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/commands/secret.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const secretCommand: Command;
+//# sourceMappingURL=secret.d.ts.map

package/dist/src/commands/secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.d.ts","sourceRoot":"","sources":["../../../src/commands/secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,eAAO,MAAM,aAAa,SAEzB,CAAC"}