@1claw/cli 0.1.0

package/dist/src/index.js

@@ -0,0 +1,51 @@
+import { Command } from "commander";
+import { loginCommand, logoutCommand, whoamiCommand, } from "./commands/login.js";
+import { vaultCommand } from "./commands/vault.js";
+import { secretCommand } from "./commands/secret.js";
+import { envCommand } from "./commands/env.js";
+import { agentCommand } from "./commands/agent.js";
+import { policyCommand } from "./commands/policy.js";
+import { shareCommand } from "./commands/share.js";
+import { billingCommand } from "./commands/billing.js";
+import { auditCommand } from "./commands/audit.js";
+import { mfaCommand } from "./commands/mfa.js";
+import { configCommand } from "./commands/config.js";
+import { setOutputFormat, setApiUrl } from "./config.js";
+export function createProgram() {
+    const program = new Command("1claw")
+        .version("0.1.0")
+        .description("1Claw CLI — HSM-backed secret management for AI agents and humans");
+    // Auth
+    program.addCommand(loginCommand);
+    program.addCommand(logoutCommand);
+    program.addCommand(whoamiCommand);
+    // Core resources
+    program.addCommand(vaultCommand);
+    program.addCommand(secretCommand);
+    program.addCommand(envCommand);
+    program.addCommand(agentCommand);
+    program.addCommand(policyCommand);
+    // Sharing
+    program.addCommand(shareCommand);
+    // Billing
+    program.addCommand(billingCommand);
+    // Security
+    program.addCommand(auditCommand);
+    program.addCommand(mfaCommand);
+    // Config
+    program.addCommand(configCommand);
+    // Global options
+    program.option("--json", "Force JSON output for all commands");
+    program.option("--api-url <url>", "Override API URL for this invocation");
+    program.hook("preAction", () => {
+        const globalOpts = program.opts();
+        if (globalOpts.json) {
+            setOutputFormat("json");
+        }
+        if (globalOpts.apiUrl) {
+            setApiUrl(globalOpts.apiUrl);
+        }
+    });
+    return program;
+}
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACH,YAAY,EACZ,aAAa,EACb,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,UAAU,aAAa;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAC/B,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CACR,mEAAmE,CACtE,CAAC;IAEN,OAAO;IACP,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE/B,SAAS;IACT,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/src/middleware.d.ts

@@ -0,0 +1,6 @@
+export declare function requireToken(): string;
+export declare function resolveVaultId(opts: {
+    vault?: string;
+}): string;
+export declare function handleError(err: unknown): never;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/src/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":"AAIA,wBAAgB,YAAY,IAAI,MAAM,CAOrC;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAS/D;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAY/C"}

package/dist/src/middleware.js

@@ -0,0 +1,35 @@
+import { getToken, getDefaultVaultId } from "./config.js";
+import { printError } from "./output.js";
+import { ApiError } from "./client.js";
+export function requireToken() {
+    const token = getToken();
+    if (!token) {
+        printError("Not authenticated. Run `1claw login` first.");
+        process.exit(1);
+    }
+    return token;
+}
+export function resolveVaultId(opts) {
+    const id = opts.vault ?? getDefaultVaultId();
+    if (!id) {
+        printError("No vault specified. Use --vault <id> or run `1claw vault link <id>`.");
+        process.exit(1);
+    }
+    return id;
+}
+export function handleError(err) {
+    if (err instanceof ApiError) {
+        printError(`API error (${err.status}): ${err.detail}`);
+        if (err.status === 401) {
+            printError("Try running `1claw login` to re-authenticate.");
+        }
+    }
+    else if (err instanceof Error) {
+        printError(err.message);
+    }
+    else {
+        printError(String(err));
+    }
+    process.exit(1);
+}
+//# sourceMappingURL=middleware.js.map

package/dist/src/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,UAAU,YAAY;IACxB,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,UAAU,CAAC,6CAA6C,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAwB;IACnD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC;IAC7C,IAAI,CAAC,EAAE,EAAE,CAAC;QACN,UAAU,CACN,sEAAsE,CACzE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACpC,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC1B,UAAU,CAAC,cAAc,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACrB,UAAU,CAAC,+CAA+C,CAAC,CAAC;QAChE,CAAC;IACL,CAAC;SAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAC9B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACJ,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/src/output.d.ts

@@ -0,0 +1,12 @@
+export declare function printJson(data: unknown): void;
+export declare function printTable(rows: Record<string, unknown>[], columns: {
+    key: string;
+    header: string;
+    width?: number;
+}[]): void;
+export declare function printKeyValue(pairs: [string, string | undefined][]): void;
+export declare function printSuccess(msg: string): void;
+export declare function printWarning(msg: string): void;
+export declare function printError(msg: string): void;
+export declare function printInfo(msg: string): void;
+//# sourceMappingURL=output.d.ts.map

package/dist/src/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/output.ts"],"names":[],"mappings":"AAGA,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED,wBAAgB,UAAU,CACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAC/B,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAC3D,IAAI,CAwCN;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,IAAI,CAiBzE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE5C;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE3C"}

package/dist/src/output.js

@@ -0,0 +1,71 @@
+import chalk from "chalk";
+import { getOutputFormat } from "./config.js";
+export function printJson(data) {
+    console.log(JSON.stringify(data, null, 2));
+}
+export function printTable(rows, columns) {
+    const format = getOutputFormat();
+    if (format === "json") {
+        printJson(rows);
+        return;
+    }
+    if (format === "plain" || rows.length === 0) {
+        if (rows.length === 0) {
+            console.log(chalk.dim("No results."));
+            return;
+        }
+        for (const row of rows) {
+            const parts = columns.map((c) => String(row[c.key] ?? ""));
+            console.log(parts.join("\t"));
+        }
+        return;
+    }
+    const widths = columns.map((c) => {
+        if (c.width)
+            return c.width;
+        const maxData = Math.max(...rows.map((r) => String(r[c.key] ?? "").length));
+        return Math.max(c.header.length, maxData);
+    });
+    const headerLine = columns
+        .map((c, i) => chalk.bold(c.header.padEnd(widths[i])))
+        .join("  ");
+    console.log(headerLine);
+    console.log(chalk.dim("─".repeat(headerLine.length)));
+    for (const row of rows) {
+        const line = columns
+            .map((c, i) => String(row[c.key] ?? "").padEnd(widths[i]))
+            .join("  ");
+        console.log(line);
+    }
+}
+export function printKeyValue(pairs) {
+    const format = getOutputFormat();
+    if (format === "json") {
+        const obj = {};
+        for (const [k, v] of pairs) {
+            if (v !== undefined)
+                obj[k] = v;
+        }
+        printJson(obj);
+        return;
+    }
+    const maxKey = Math.max(...pairs.map(([k]) => k.length));
+    for (const [key, value] of pairs) {
+        if (value === undefined)
+            continue;
+        console.log(`${chalk.bold(key.padEnd(maxKey))}  ${value}`);
+    }
+}
+export function printSuccess(msg) {
+    console.log(chalk.green("✓") + " " + msg);
+}
+export function printWarning(msg) {
+    console.log(chalk.yellow("⚠") + " " + msg);
+}
+export function printError(msg) {
+    console.error(chalk.red("✗") + " " + msg);
+}
+export function printInfo(msg) {
+    console.log(chalk.blue("ℹ") + " " + msg);
+}
+//# sourceMappingURL=output.js.map

package/dist/src/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,UAAU,SAAS,CAAC,IAAa;IACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU,CACtB,IAA+B,EAC/B,OAA0D;IAE1D,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IAEjC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO;IACX,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YACtC,OAAO;QACX,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7B,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACpB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CACpD,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAO;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;aACzD,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAqC;IAC/D,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IAEjC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;AAC7C,CAAC"}

package/package.json

@@ -0,0 +1,57 @@
+{
+    "name": "@1claw/cli",
+    "version": "0.1.0",
+    "description": "CLI for 1Claw — secrets management for AI agents and humans",
+    "license": "PolyForm-Noncommercial-1.0.0",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/1clawAI/1claw-cli"
+    },
+    "homepage": "https://1claw.xyz",
+    "bin": {
+        "1claw": "./dist/bin/1claw.js"
+    },
+    "type": "module",
+    "exports": {
+        ".": "./dist/index.js"
+    },
+    "files": [
+        "dist"
+    ],
+    "scripts": {
+        "build": "tsc",
+        "prepublishOnly": "npm run build",
+        "dev": "tsc --watch",
+        "start": "node dist/bin/1claw.js",
+        "test": "bash scripts/test-cli.sh",
+        "lint": "tsc --noEmit",
+        "clean": "rm -rf dist"
+    },
+    "dependencies": {
+        "chalk": "^5.4.1",
+        "commander": "^13.1.0",
+        "conf": "^13.1.0",
+        "inquirer": "^12.3.2",
+        "open": "^10.1.0",
+        "ora": "^8.2.0"
+    },
+    "devDependencies": {
+        "@types/node": "^22.13.4",
+        "typescript": "^5.7.3"
+    },
+    "engines": {
+        "node": ">=20"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "keywords": [
+        "1claw",
+        "secrets",
+        "vault",
+        "cli",
+        "ai-agents",
+        "devops",
+        "ci-cd"
+    ]
+}