@a3t/rapid-core 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,330 @@
+/**
+ * RAPID Configuration Types
+ */
+interface RapidConfig {
+    $schema?: string;
+    version: '1.0';
+    name?: string;
+    container?: ContainerConfig;
+    secrets?: SecretsConfig;
+    agents: AgentsConfig;
+    context?: ContextConfig;
+    mcp?: McpConfig;
+}
+interface ContainerConfig {
+    devcontainer?: string;
+    compose?: string;
+    autoStart?: boolean;
+    buildArgs?: Record<string, string>;
+}
+interface SecretsConfig {
+    provider?: 'env' | '1password' | 'vault';
+    vault?: string;
+    address?: string;
+    items?: Record<string, string>;
+    envrc?: EnvrcConfig;
+    dotenv?: DotenvConfig;
+}
+interface EnvrcConfig {
+    generate?: boolean;
+    path?: string;
+    includeLocal?: boolean;
+}
+interface DotenvConfig {
+    enabled?: boolean;
+    files?: string[];
+    warn?: boolean;
+}
+interface AgentsConfig {
+    default: string;
+    available: Record<string, AgentDefinition>;
+}
+interface AgentDefinition {
+    cli: string;
+    instructionFile?: string;
+    envVars?: string[];
+    installCmd?: string;
+    args?: string[];
+}
+interface ContextConfig {
+    files?: string[];
+    dirs?: string[];
+    exclude?: string[];
+    generateAgentFiles?: boolean;
+    templateDir?: string;
+    preserve?: string[];
+}
+interface McpConfig {
+    configFile?: string;
+    servers?: Record<string, McpServerConfig>;
+}
+interface McpServerConfig {
+    enabled?: boolean;
+    [key: string]: unknown;
+}
+/**
+ * Agent status
+ */
+interface AgentStatus {
+    name: string;
+    available: boolean;
+    cliPath?: string;
+    version?: string;
+}
+/**
+ * Environment status
+ */
+interface EnvironmentStatus {
+    configPath?: string;
+    configValid: boolean;
+    agents: AgentStatus[];
+    secretsLoaded: boolean;
+    containerRunning: boolean;
+}
+
+/**
+ * Configuration loading and validation
+ */
+
+interface LoadedConfig {
+    config: RapidConfig;
+    filepath: string;
+    rootDir: string;
+}
+/**
+ * Load RAPID configuration from the current directory or ancestors
+ */
+declare function loadConfig(cwd?: string): Promise<LoadedConfig | null>;
+/**
+ * Load configuration from a specific file
+ */
+declare function loadConfigFromFile(filepath: string): Promise<LoadedConfig>;
+/**
+ * Get default configuration
+ */
+declare function getDefaultConfig(): RapidConfig;
+/**
+ * Merge user config with defaults
+ */
+declare function mergeWithDefaults(config: Partial<RapidConfig>): RapidConfig;
+
+/**
+ * Agent detection and management
+ */
+
+/**
+ * Check if an agent CLI is available
+ */
+declare function checkAgentAvailable(agent: AgentDefinition): Promise<AgentStatus>;
+/**
+ * Check all configured agents
+ */
+declare function checkAllAgents(config: RapidConfig): Promise<AgentStatus[]>;
+/**
+ * Get the default agent from config
+ */
+declare function getDefaultAgent(config: RapidConfig): AgentDefinition | null;
+/**
+ * Get a specific agent by name
+ */
+declare function getAgent(config: RapidConfig, name: string): AgentDefinition | null;
+/**
+ * Launch an agent CLI
+ */
+declare function launchAgent(agent: AgentDefinition, options?: {
+    cwd?: string;
+    env?: Record<string, string>;
+    stdio?: 'inherit' | 'pipe';
+}): Promise<void>;
+
+/**
+ * Logging utilities
+ */
+type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+declare function setLogLevel(level: LogLevel): void;
+declare function getLogLevel(): LogLevel;
+declare const logger: {
+    debug(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    success(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    error(message: string, ...args: unknown[]): void;
+    brand(text: string): string;
+    dim(text: string): string;
+    bold(text: string): string;
+    header(text: string): void;
+    blank(): void;
+};
+
+/**
+ * Container management utilities
+ * Uses devcontainer CLI for container lifecycle
+ */
+
+interface ContainerStatus {
+    exists: boolean;
+    running: boolean;
+    containerId?: string;
+    containerName?: string;
+}
+interface DevcontainerConfig {
+    name?: string;
+    image?: string;
+    dockerFile?: string;
+    build?: {
+        dockerfile?: string;
+        context?: string;
+    };
+    [key: string]: unknown;
+}
+/**
+ * Check if devcontainer CLI is available
+ */
+declare function hasDevcontainerCli(): Promise<boolean>;
+/**
+ * Check if Docker is available
+ */
+declare function hasDocker(): Promise<boolean>;
+/**
+ * Get the devcontainer.json path
+ */
+declare function getDevcontainerPath(rootDir: string, config?: RapidConfig): string;
+/**
+ * Load devcontainer.json
+ */
+declare function loadDevcontainerConfig(rootDir: string, config?: RapidConfig): Promise<DevcontainerConfig | null>;
+/**
+ * Get container name for a project
+ */
+declare function getContainerName(rootDir: string, devcontainerConfig?: DevcontainerConfig): string;
+/**
+ * Check container status using devcontainer labels
+ */
+declare function getContainerStatus(rootDir: string, _config?: RapidConfig): Promise<ContainerStatus>;
+/**
+ * Start the dev container using devcontainer CLI
+ */
+declare function startContainer(rootDir: string, _config?: RapidConfig, options?: {
+    rebuild?: boolean;
+    quiet?: boolean;
+}): Promise<{
+    success: boolean;
+    containerId?: string;
+    error?: string;
+}>;
+/**
+ * Stop the dev container
+ */
+declare function stopContainer(rootDir: string, config?: RapidConfig, options?: {
+    remove?: boolean;
+}): Promise<{
+    success: boolean;
+    error?: string;
+}>;
+/**
+ * Execute a command inside the dev container
+ */
+declare function execInContainer(rootDir: string, command: string[], _config?: RapidConfig, options?: {
+    interactive?: boolean;
+    tty?: boolean;
+    env?: Record<string, string>;
+}): Promise<void>;
+
+/**
+ * Secrets management for RAPID
+ * Supports 1Password, HashiCorp Vault, and environment variables
+ */
+
+interface SecretStatus {
+    name: string;
+    reference: string;
+    provider: 'env' | '1password' | 'vault';
+    available: boolean;
+    error?: string;
+}
+interface SecretsStatus {
+    provider: 'env' | '1password' | 'vault';
+    authenticated: boolean;
+    authMethod?: 'service-account' | 'user' | 'token';
+    secrets: SecretStatus[];
+    allAvailable: boolean;
+}
+interface OpAuthStatus {
+    authenticated: boolean;
+    method: 'service-account' | 'user' | 'none';
+    accountInfo?: string;
+}
+/**
+ * Check if 1Password CLI is installed
+ */
+declare function hasOpCli(): Promise<boolean>;
+/**
+ * Check if OP_SERVICE_ACCOUNT_TOKEN is set
+ */
+declare function hasOpServiceAccountToken(): boolean;
+/**
+ * Check if 1Password CLI is authenticated (via service account or user)
+ */
+declare function isOpAuthenticated(): Promise<boolean>;
+/**
+ * Get detailed 1Password authentication status
+ */
+declare function getOpAuthStatus(): Promise<OpAuthStatus>;
+/**
+ * Check if HashiCorp Vault CLI is installed
+ */
+declare function hasVaultCli(): Promise<boolean>;
+/**
+ * Check if HashiCorp Vault is authenticated
+ */
+declare function isVaultAuthenticated(): Promise<boolean>;
+/**
+ * Read a secret from 1Password
+ * @param reference - 1Password reference (e.g., "op://vault/item/field")
+ */
+declare function readOpSecret(reference: string): Promise<string | null>;
+/**
+ * Read a secret from HashiCorp Vault
+ * @param path - Vault path (e.g., "secret/data/myproject")
+ * @param field - Field name within the secret
+ */
+declare function readVaultSecret(path: string, field: string): Promise<string | null>;
+/**
+ * Verify a single secret is accessible
+ */
+declare function verifySecret(name: string, reference: string, provider: 'env' | '1password' | 'vault', config?: SecretsConfig): Promise<SecretStatus>;
+/**
+ * Verify all secrets in configuration
+ */
+declare function verifySecrets(config: SecretsConfig): Promise<SecretsStatus>;
+/**
+ * Load all secrets into environment
+ */
+declare function loadSecrets(config: SecretsConfig): Promise<Record<string, string>>;
+/**
+ * Generate .envrc file from secrets configuration
+ */
+declare function generateEnvrc(config: SecretsConfig): string;
+/**
+ * Write .envrc file to project directory
+ */
+declare function writeEnvrc(rootDir: string, config: SecretsConfig): Promise<string>;
+/**
+ * Check if .envrc exists in project
+ */
+declare function hasEnvrc(rootDir: string, config?: SecretsConfig): Promise<boolean>;
+/**
+ * Read existing .envrc content
+ */
+declare function readEnvrc(rootDir: string, config?: SecretsConfig): Promise<string | null>;
+/**
+ * Get a summary of provider requirements
+ */
+declare function getProviderInfo(provider: 'env' | '1password' | 'vault'): {
+    name: string;
+    cliRequired: string | null;
+    authCommand: string | null;
+    installUrl: string | null;
+};
+
+export { type AgentDefinition, type AgentStatus, type AgentsConfig, type ContainerConfig, type ContainerStatus, type ContextConfig, type DevcontainerConfig, type DotenvConfig, type EnvironmentStatus, type EnvrcConfig, type LoadedConfig, type LogLevel, type McpConfig, type McpServerConfig, type OpAuthStatus, type RapidConfig, type SecretStatus, type SecretsConfig, type SecretsStatus, checkAgentAvailable, checkAllAgents, execInContainer, generateEnvrc, getAgent, getContainerName, getContainerStatus, getDefaultAgent, getDefaultConfig, getDevcontainerPath, getLogLevel, getOpAuthStatus, getProviderInfo, hasDevcontainerCli, hasDocker, hasEnvrc, hasOpCli, hasOpServiceAccountToken, hasVaultCli, isOpAuthenticated, isVaultAuthenticated, launchAgent, loadConfig, loadConfigFromFile, loadDevcontainerConfig, loadSecrets, logger, mergeWithDefaults, readEnvrc, readOpSecret, readVaultSecret, setLogLevel, startContainer, stopContainer, verifySecret, verifySecrets, writeEnvrc };

package/dist/index.js

@@ -0,0 +1,721 @@
+// src/config.ts
+import { cosmiconfig } from "cosmiconfig";
+import { readFile } from "fs/promises";
+import { dirname, resolve } from "path";
+var CONFIG_NAME = "rapid";
+var CONFIG_FILES = ["rapid.json", "rapid.config.json", ".rapidrc", ".rapidrc.json"];
+async function loadConfig(cwd) {
+  const explorer = cosmiconfig(CONFIG_NAME, {
+    searchPlaces: CONFIG_FILES,
+    loaders: {
+      ".json": async (filepath) => {
+        const content = await readFile(filepath, "utf-8");
+        return JSON.parse(content);
+      }
+    }
+  });
+  const result = await explorer.search(cwd);
+  if (!result || result.isEmpty) {
+    return null;
+  }
+  return {
+    config: result.config,
+    filepath: result.filepath,
+    rootDir: dirname(result.filepath)
+  };
+}
+async function loadConfigFromFile(filepath) {
+  const content = await readFile(filepath, "utf-8");
+  const config = JSON.parse(content);
+  return {
+    config,
+    filepath: resolve(filepath),
+    rootDir: dirname(resolve(filepath))
+  };
+}
+function getDefaultConfig() {
+  return {
+    version: "1.0",
+    agents: {
+      default: "claude",
+      available: {
+        claude: {
+          cli: "claude",
+          instructionFile: "CLAUDE.md",
+          envVars: ["ANTHROPIC_API_KEY"]
+        },
+        opencode: {
+          cli: "opencode",
+          instructionFile: "AGENTS.md",
+          envVars: ["ANTHROPIC_API_KEY"]
+        },
+        aider: {
+          cli: "aider",
+          instructionFile: "AGENTS.md",
+          envVars: ["ANTHROPIC_API_KEY"],
+          args: ["--model", "claude-3-5-sonnet-20241022"]
+        }
+      }
+    },
+    secrets: {
+      provider: "env"
+    },
+    context: {
+      files: ["README.md"],
+      dirs: ["docs/"],
+      generateAgentFiles: true
+    }
+  };
+}
+function mergeWithDefaults(config) {
+  const defaults = getDefaultConfig();
+  return {
+    ...defaults,
+    ...config,
+    agents: {
+      ...defaults.agents,
+      ...config.agents,
+      available: {
+        ...defaults.agents.available,
+        ...config.agents?.available
+      }
+    },
+    secrets: {
+      ...defaults.secrets,
+      ...config.secrets
+    },
+    context: {
+      ...defaults.context,
+      ...config.context
+    }
+  };
+}
+
+// src/agents.ts
+import { execa } from "execa";
+import which from "which";
+async function checkAgentAvailable(agent) {
+  try {
+    const cliPath = await which(agent.cli);
+    let version;
+    try {
+      const result = await execa(agent.cli, ["--version"], { timeout: 5e3 });
+      version = result.stdout.trim().split("\n")[0];
+    } catch {
+    }
+    return {
+      name: agent.cli,
+      available: true,
+      cliPath,
+      ...version !== void 0 && { version }
+    };
+  } catch {
+    return {
+      name: agent.cli,
+      available: false
+    };
+  }
+}
+async function checkAllAgents(config) {
+  const results = [];
+  for (const [name, agent] of Object.entries(config.agents.available)) {
+    const status = await checkAgentAvailable(agent);
+    results.push({
+      ...status,
+      name
+    });
+  }
+  return results;
+}
+function getDefaultAgent(config) {
+  const defaultName = config.agents.default;
+  return config.agents.available[defaultName] || null;
+}
+function getAgent(config, name) {
+  return config.agents.available[name] || null;
+}
+async function launchAgent(agent, options = {}) {
+  const args = agent.args ?? [];
+  const cwd = options.cwd ?? process.cwd();
+  await execa(agent.cli, args, {
+    cwd,
+    env: {
+      ...process.env,
+      ...options.env
+    },
+    stdio: options.stdio ?? "inherit"
+  });
+}
+
+// src/logger.ts
+import chalk from "chalk";
+var LOG_LEVELS = {
+  debug: 0,
+  info: 1,
+  warn: 2,
+  error: 3
+};
+var currentLevel = "info";
+function setLogLevel(level) {
+  currentLevel = level;
+}
+function getLogLevel() {
+  return currentLevel;
+}
+function shouldLog(level) {
+  return LOG_LEVELS[level] >= LOG_LEVELS[currentLevel];
+}
+var logger = {
+  debug(message, ...args) {
+    if (shouldLog("debug")) {
+      console.log(chalk.gray(`[debug] ${message}`), ...args);
+    }
+  },
+  info(message, ...args) {
+    if (shouldLog("info")) {
+      console.log(chalk.blue("\u2139"), message, ...args);
+    }
+  },
+  success(message, ...args) {
+    if (shouldLog("info")) {
+      console.log(chalk.green("\u2713"), message, ...args);
+    }
+  },
+  warn(message, ...args) {
+    if (shouldLog("warn")) {
+      console.log(chalk.yellow("\u26A0"), message, ...args);
+    }
+  },
+  error(message, ...args) {
+    if (shouldLog("error")) {
+      console.error(chalk.red("\u2717"), message, ...args);
+    }
+  },
+  // Styled output helpers
+  brand(text) {
+    return chalk.hex("#818cf8")(text);
+  },
+  dim(text) {
+    return chalk.dim(text);
+  },
+  bold(text) {
+    return chalk.bold(text);
+  },
+  // Print a header
+  header(text) {
+    console.log();
+    console.log(chalk.bold(text));
+    console.log(chalk.dim("\u2500".repeat(text.length)));
+  },
+  // Print a blank line
+  blank() {
+    console.log();
+  }
+};
+
+// src/container.ts
+import { execa as execa2 } from "execa";
+import which2 from "which";
+import { readFile as readFile2 } from "fs/promises";
+import { join } from "path";
+async function hasDevcontainerCli() {
+  try {
+    await which2("devcontainer");
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function hasDocker() {
+  try {
+    await execa2("docker", ["info"], { timeout: 5e3 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function getDevcontainerPath(rootDir, config) {
+  const customPath = config?.container?.devcontainer;
+  if (customPath) {
+    return join(rootDir, customPath);
+  }
+  return join(rootDir, ".devcontainer", "devcontainer.json");
+}
+async function loadDevcontainerConfig(rootDir, config) {
+  try {
+    const configPath = getDevcontainerPath(rootDir, config);
+    const content = await readFile2(configPath, "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return null;
+  }
+}
+function getContainerName(rootDir, devcontainerConfig) {
+  const dirName = rootDir.split("/").pop() || "rapid";
+  const name = devcontainerConfig?.name || dirName;
+  return `rapid-${name}`.toLowerCase().replace(/[^a-z0-9-]/g, "-");
+}
+async function getContainerStatus(rootDir, _config) {
+  try {
+    const result = await execa2("docker", [
+      "ps",
+      "-a",
+      "--filter",
+      `label=devcontainer.local_folder=${rootDir}`,
+      "--format",
+      "{{.ID}}	{{.State}}	{{.Names}}"
+    ]);
+    const lines = result.stdout.trim().split("\n").filter(Boolean);
+    if (lines.length === 0) {
+      return { exists: false, running: false };
+    }
+    const parts = lines[0]?.split("	");
+    const containerId = parts?.[0];
+    const state = parts?.[1];
+    const containerName = parts?.[2];
+    if (!containerId || !containerName) {
+      return { exists: false, running: false };
+    }
+    return {
+      exists: true,
+      running: state === "running",
+      containerId,
+      containerName
+    };
+  } catch {
+    return { exists: false, running: false };
+  }
+}
+async function startContainer(rootDir, _config, options = {}) {
+  const hasDevCli = await hasDevcontainerCli();
+  if (!hasDevCli) {
+    return {
+      success: false,
+      error: "devcontainer CLI not found. Install with: npm install -g @devcontainers/cli"
+    };
+  }
+  const hasDockerRunning = await hasDocker();
+  if (!hasDockerRunning) {
+    return {
+      success: false,
+      error: "Docker is not running. Please start Docker Desktop."
+    };
+  }
+  try {
+    const args = ["up", "--workspace-folder", rootDir];
+    if (options.rebuild) {
+      args.push("--remove-existing-container");
+    }
+    const result = await execa2("devcontainer", args, {
+      stdio: options.quiet ? "pipe" : "inherit",
+      cwd: rootDir
+    });
+    if (options.quiet && result.stdout) {
+      try {
+        const output = JSON.parse(result.stdout);
+        return { success: true, containerId: output.containerId };
+      } catch {
+        return { success: true };
+      }
+    }
+    return { success: true };
+  } catch (error) {
+    const execError = error;
+    const stderr = typeof execError.stderr === "string" ? execError.stderr : void 0;
+    return {
+      success: false,
+      error: stderr || execError.message
+    };
+  }
+}
+async function stopContainer(rootDir, config, options = {}) {
+  const status = await getContainerStatus(rootDir, config);
+  if (!status.exists) {
+    return { success: true };
+  }
+  try {
+    if (status.running) {
+      await execa2("docker", ["stop", status.containerId]);
+    }
+    if (options.remove) {
+      await execa2("docker", ["rm", status.containerId]);
+    }
+    return { success: true };
+  } catch (error) {
+    const execError = error;
+    const stderr = typeof execError.stderr === "string" ? execError.stderr : void 0;
+    return {
+      success: false,
+      error: stderr || execError.message
+    };
+  }
+}
+async function execInContainer(rootDir, command, _config, options = {}) {
+  const hasDevCli = await hasDevcontainerCli();
+  if (!hasDevCli) {
+    throw new Error("devcontainer CLI not found. Install with: npm install -g @devcontainers/cli");
+  }
+  const args = ["exec", "--workspace-folder", rootDir];
+  if (options.env) {
+    for (const [key, value] of Object.entries(options.env)) {
+      args.push("--remote-env", `${key}=${value}`);
+    }
+  }
+  args.push(...command);
+  await execa2("devcontainer", args, {
+    stdio: "inherit",
+    cwd: rootDir
+  });
+}
+
+// src/secrets.ts
+import { spawn } from "child_process";
+import { readFile as readFile3, writeFile, access } from "fs/promises";
+import { join as join2 } from "path";
+async function execCommand(command, args, options = {}) {
+  return new Promise((resolve2) => {
+    const proc = spawn(command, args, {
+      stdio: ["pipe", "pipe", "pipe"],
+      timeout: options.timeout ?? 3e4
+    });
+    let stdout = "";
+    let stderr = "";
+    proc.stdout?.on("data", (data) => {
+      stdout += data.toString();
+    });
+    proc.stderr?.on("data", (data) => {
+      stderr += data.toString();
+    });
+    proc.on("close", (code) => {
+      resolve2({ stdout: stdout.trim(), stderr: stderr.trim(), exitCode: code ?? 1 });
+    });
+    proc.on("error", (err) => {
+      resolve2({ stdout: "", stderr: err.message, exitCode: 1 });
+    });
+  });
+}
+async function hasOpCli() {
+  const result = await execCommand("op", ["--version"]);
+  return result.exitCode === 0;
+}
+function hasOpServiceAccountToken() {
+  return !!process.env.OP_SERVICE_ACCOUNT_TOKEN;
+}
+async function isOpAuthenticated() {
+  if (hasOpServiceAccountToken()) {
+    const result2 = await execCommand("op", ["vault", "list", "--format=json"]);
+    return result2.exitCode === 0;
+  }
+  const result = await execCommand("op", ["account", "list"]);
+  return result.exitCode === 0 && result.stdout.length > 0;
+}
+async function getOpAuthStatus() {
+  if (hasOpServiceAccountToken()) {
+    const result2 = await execCommand("op", ["vault", "list", "--format=json"]);
+    if (result2.exitCode === 0) {
+      return {
+        authenticated: true,
+        method: "service-account",
+        accountInfo: "Service Account"
+      };
+    }
+    return {
+      authenticated: false,
+      method: "none",
+      accountInfo: "Invalid service account token"
+    };
+  }
+  const result = await execCommand("op", ["account", "list", "--format=json"]);
+  if (result.exitCode === 0 && result.stdout.length > 0) {
+    try {
+      const accounts = JSON.parse(result.stdout);
+      if (accounts.length > 0) {
+        return {
+          authenticated: true,
+          method: "user",
+          accountInfo: accounts[0].email || accounts[0].url
+        };
+      }
+    } catch {
+      return {
+        authenticated: true,
+        method: "user"
+      };
+    }
+  }
+  return {
+    authenticated: false,
+    method: "none"
+  };
+}
+async function hasVaultCli() {
+  const result = await execCommand("vault", ["--version"]);
+  return result.exitCode === 0;
+}
+async function isVaultAuthenticated() {
+  const result = await execCommand("vault", ["token", "lookup"]);
+  return result.exitCode === 0;
+}
+async function readOpSecret(reference) {
+  const result = await execCommand("op", ["read", reference]);
+  if (result.exitCode !== 0) {
+    return null;
+  }
+  return result.stdout;
+}
+async function readVaultSecret(path, field) {
+  const result = await execCommand("vault", ["kv", "get", "-field", field, path]);
+  if (result.exitCode !== 0) {
+    return null;
+  }
+  return result.stdout;
+}
+async function verifySecret(name, reference, provider, config) {
+  const status = {
+    name,
+    reference,
+    provider,
+    available: false
+  };
+  try {
+    switch (provider) {
+      case "env": {
+        const value = process.env[name];
+        status.available = !!value && value.length > 0;
+        if (!status.available) {
+          status.error = "Environment variable not set";
+        }
+        break;
+      }
+      case "1password": {
+        const value = await readOpSecret(reference);
+        status.available = value !== null;
+        if (!status.available) {
+          status.error = "Secret not found in 1Password";
+        }
+        break;
+      }
+      case "vault": {
+        const field = reference.split("/").pop() || "value";
+        const vaultPath = reference.includes("/") ? reference.substring(0, reference.lastIndexOf("/")) : config?.vault || "secret/data/default";
+        const value = await readVaultSecret(vaultPath, field);
+        status.available = value !== null;
+        if (!status.available) {
+          status.error = "Secret not found in Vault";
+        }
+        break;
+      }
+    }
+  } catch (error) {
+    status.error = error instanceof Error ? error.message : String(error);
+    status.available = false;
+  }
+  return status;
+}
+async function verifySecrets(config) {
+  const provider = config.provider || "env";
+  let authenticated = true;
+  switch (provider) {
+    case "1password":
+      authenticated = await isOpAuthenticated();
+      break;
+    case "vault":
+      authenticated = await isVaultAuthenticated();
+      break;
+    case "env":
+      authenticated = true;
+      break;
+  }
+  const secrets = [];
+  if (config.items) {
+    for (const [name, reference] of Object.entries(config.items)) {
+      const status = await verifySecret(name, reference, provider, config);
+      secrets.push(status);
+    }
+  }
+  const allAvailable = secrets.length === 0 || secrets.every((s) => s.available);
+  return {
+    provider,
+    authenticated,
+    secrets,
+    allAvailable
+  };
+}
+async function loadSecrets(config) {
+  const provider = config.provider || "env";
+  const secrets = {};
+  if (!config.items) {
+    return secrets;
+  }
+  for (const [name, reference] of Object.entries(config.items)) {
+    try {
+      let value = null;
+      switch (provider) {
+        case "env":
+          value = process.env[name] || null;
+          break;
+        case "1password":
+          value = await readOpSecret(reference);
+          break;
+        case "vault": {
+          const field = reference.split("/").pop() || "value";
+          const path = reference.substring(0, reference.lastIndexOf("/")) || config.vault || "";
+          value = await readVaultSecret(path, field);
+          break;
+        }
+      }
+      if (value) {
+        secrets[name] = value;
+      }
+    } catch (error) {
+      logger.debug(`Failed to load secret ${name}: ${error}`);
+    }
+  }
+  return secrets;
+}
+function generateEnvrc(config) {
+  const provider = config.provider || "env";
+  const lines = [
+    "# .envrc - RAPID project secrets",
+    "# This file is safe to commit - it contains NO secrets, only references",
+    "#",
+    `# Provider: ${provider}`,
+    `# Generated by: rapid secrets generate`,
+    ""
+  ];
+  if (!config.items || Object.keys(config.items).length === 0) {
+    lines.push("# No secrets configured in rapid.json");
+    return lines.join("\n");
+  }
+  switch (provider) {
+    case "1password":
+      lines.push("# Secrets loaded from 1Password");
+      lines.push("# Requires: 1Password CLI (op) installed and authenticated");
+      lines.push("");
+      for (const [name, reference] of Object.entries(config.items)) {
+        lines.push(`export ${name}=$(op read "${reference}")`);
+      }
+      break;
+    case "vault":
+      lines.push("# Secrets loaded from HashiCorp Vault");
+      lines.push("# Requires: Vault CLI installed and authenticated");
+      lines.push("");
+      if (config.address) {
+        lines.push(`export VAULT_ADDR="${config.address}"`);
+        lines.push("");
+      }
+      for (const [name, reference] of Object.entries(config.items)) {
+        const path = config.vault || "secret/data/default";
+        lines.push(`export ${name}=$(vault kv get -field=${reference} ${path})`);
+      }
+      break;
+    case "env":
+      lines.push("# WARNING: env provider expects secrets to be set manually");
+      lines.push("# Consider using 1password or vault for better security");
+      lines.push("");
+      lines.push("# Uncomment and set values (DO NOT commit actual values!)");
+      for (const name of Object.keys(config.items)) {
+        lines.push(`# export ${name}="your-value-here"`);
+      }
+      break;
+  }
+  if (config.envrc?.includeLocal !== false) {
+    lines.push("");
+    lines.push("# Load local overrides if present");
+    lines.push("[[ -f .env.local ]] && source_env .env.local");
+  }
+  lines.push("");
+  return lines.join("\n");
+}
+async function writeEnvrc(rootDir, config) {
+  const envrcPath = config.envrc?.path || ".envrc";
+  const fullPath = join2(rootDir, envrcPath);
+  const content = generateEnvrc(config);
+  await writeFile(fullPath, content);
+  return fullPath;
+}
+async function hasEnvrc(rootDir, config) {
+  const envrcPath = config?.envrc?.path || ".envrc";
+  const fullPath = join2(rootDir, envrcPath);
+  try {
+    await access(fullPath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readEnvrc(rootDir, config) {
+  const envrcPath = config?.envrc?.path || ".envrc";
+  const fullPath = join2(rootDir, envrcPath);
+  try {
+    const content = await readFile3(fullPath, "utf-8");
+    return content;
+  } catch {
+    return null;
+  }
+}
+function getProviderInfo(provider) {
+  switch (provider) {
+    case "1password":
+      return {
+        name: "1Password",
+        cliRequired: "op",
+        authCommand: "eval $(op signin)",
+        installUrl: "https://developer.1password.com/docs/cli/get-started/"
+      };
+    case "vault":
+      return {
+        name: "HashiCorp Vault",
+        cliRequired: "vault",
+        authCommand: "vault login",
+        installUrl: "https://developer.hashicorp.com/vault/docs/install"
+      };
+    case "env":
+      return {
+        name: "Environment Variables",
+        cliRequired: null,
+        authCommand: null,
+        installUrl: null
+      };
+  }
+}
+export {
+  checkAgentAvailable,
+  checkAllAgents,
+  execInContainer,
+  generateEnvrc,
+  getAgent,
+  getContainerName,
+  getContainerStatus,
+  getDefaultAgent,
+  getDefaultConfig,
+  getDevcontainerPath,
+  getLogLevel,
+  getOpAuthStatus,
+  getProviderInfo,
+  hasDevcontainerCli,
+  hasDocker,
+  hasEnvrc,
+  hasOpCli,
+  hasOpServiceAccountToken,
+  hasVaultCli,
+  isOpAuthenticated,
+  isVaultAuthenticated,
+  launchAgent,
+  loadConfig,
+  loadConfigFromFile,
+  loadDevcontainerConfig,
+  loadSecrets,
+  logger,
+  mergeWithDefaults,
+  readEnvrc,
+  readOpSecret,
+  readVaultSecret,
+  setLogLevel,
+  startContainer,
+  stopContainer,
+  verifySecret,
+  verifySecrets,
+  writeEnvrc
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts","../src/agents.ts","../src/logger.ts","../src/container.ts","../src/secrets.ts"],"sourcesContent":["/**\n * Configuration loading and validation\n */\n\nimport { cosmiconfig } from 'cosmiconfig';\nimport { readFile } from 'node:fs/promises';\nimport { dirname, resolve } from 'node:path';\nimport type { RapidConfig } from './types.js';\n\nconst CONFIG_NAME = 'rapid';\nconst CONFIG_FILES = ['rapid.json', 'rapid.config.json', '.rapidrc', '.rapidrc.json'];\n\nexport interface LoadedConfig {\n  config: RapidConfig;\n  filepath: string;\n  rootDir: string;\n}\n\n/**\n * Load RAPID configuration from the current directory or ancestors\n */\nexport async function loadConfig(cwd?: string): Promise<LoadedConfig | null> {\n  const explorer = cosmiconfig(CONFIG_NAME, {\n    searchPlaces: CONFIG_FILES,\n    loaders: {\n      '.json': async (filepath) => {\n        const content = await readFile(filepath, 'utf-8');\n        return JSON.parse(content);\n      },\n    },\n  });\n\n  const result = await explorer.search(cwd);\n\n  if (!result || result.isEmpty) {\n    return null;\n  }\n\n  return {\n    config: result.config as RapidConfig,\n    filepath: result.filepath,\n    rootDir: dirname(result.filepath),\n  };\n}\n\n/**\n * Load configuration from a specific file\n */\nexport async function loadConfigFromFile(filepath: string): Promise<LoadedConfig> {\n  const content = await readFile(filepath, 'utf-8');\n  const config = JSON.parse(content) as RapidConfig;\n\n  return {\n    config,\n    filepath: resolve(filepath),\n    rootDir: dirname(resolve(filepath)),\n  };\n}\n\n/**\n * Get default configuration\n */\nexport function getDefaultConfig(): RapidConfig {\n  return {\n    version: '1.0',\n    agents: {\n      default: 'claude',\n      available: {\n        claude: {\n          cli: 'claude',\n          instructionFile: 'CLAUDE.md',\n          envVars: ['ANTHROPIC_API_KEY'],\n        },\n        opencode: {\n          cli: 'opencode',\n          instructionFile: 'AGENTS.md',\n          envVars: ['ANTHROPIC_API_KEY'],\n        },\n        aider: {\n          cli: 'aider',\n          instructionFile: 'AGENTS.md',\n          envVars: ['ANTHROPIC_API_KEY'],\n          args: ['--model', 'claude-3-5-sonnet-20241022'],\n        },\n      },\n    },\n    secrets: {\n      provider: 'env',\n    },\n    context: {\n      files: ['README.md'],\n      dirs: ['docs/'],\n      generateAgentFiles: true,\n    },\n  };\n}\n\n/**\n * Merge user config with defaults\n */\nexport function mergeWithDefaults(config: Partial<RapidConfig>): RapidConfig {\n  const defaults = getDefaultConfig();\n\n  return {\n    ...defaults,\n    ...config,\n    agents: {\n      ...defaults.agents,\n      ...config.agents,\n      available: {\n        ...defaults.agents.available,\n        ...config.agents?.available,\n      },\n    },\n    secrets: {\n      ...defaults.secrets,\n      ...config.secrets,\n    },\n    context: {\n      ...defaults.context,\n      ...config.context,\n    },\n  };\n}\n","/**\n * Agent detection and management\n */\n\nimport { execa } from 'execa';\nimport which from 'which';\nimport type { AgentDefinition, AgentStatus, RapidConfig } from './types.js';\n\n/**\n * Check if an agent CLI is available\n */\nexport async function checkAgentAvailable(agent: AgentDefinition): Promise<AgentStatus> {\n  try {\n    const cliPath = await which(agent.cli);\n\n    // Try to get version\n    let version: string | undefined;\n    try {\n      const result = await execa(agent.cli, ['--version'], { timeout: 5000 });\n      version = result.stdout.trim().split('\\n')[0];\n    } catch {\n      // Version check failed, but CLI exists\n    }\n\n    return {\n      name: agent.cli,\n      available: true,\n      cliPath,\n      ...(version !== undefined && { version }),\n    };\n  } catch {\n    return {\n      name: agent.cli,\n      available: false,\n    };\n  }\n}\n\n/**\n * Check all configured agents\n */\nexport async function checkAllAgents(config: RapidConfig): Promise<AgentStatus[]> {\n  const results: AgentStatus[] = [];\n\n  for (const [name, agent] of Object.entries(config.agents.available)) {\n    const status = await checkAgentAvailable(agent);\n    results.push({\n      ...status,\n      name,\n    });\n  }\n\n  return results;\n}\n\n/**\n * Get the default agent from config\n */\nexport function getDefaultAgent(config: RapidConfig): AgentDefinition | null {\n  const defaultName = config.agents.default;\n  return config.agents.available[defaultName] || null;\n}\n\n/**\n * Get a specific agent by name\n */\nexport function getAgent(config: RapidConfig, name: string): AgentDefinition | null {\n  return config.agents.available[name] || null;\n}\n\n/**\n * Launch an agent CLI\n */\nexport async function launchAgent(\n  agent: AgentDefinition,\n  options: {\n    cwd?: string;\n    env?: Record<string, string>;\n    stdio?: 'inherit' | 'pipe';\n  } = {}\n): Promise<void> {\n  const args = agent.args ?? [];\n  const cwd = options.cwd ?? process.cwd();\n\n  await execa(agent.cli, args, {\n    cwd,\n    env: {\n      ...process.env,\n      ...options.env,\n    },\n    stdio: options.stdio ?? 'inherit',\n  });\n}\n","/**\n * Logging utilities\n */\n\nimport chalk from 'chalk';\n\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error';\n\nconst LOG_LEVELS: Record<LogLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n};\n\nlet currentLevel: LogLevel = 'info';\n\nexport function setLogLevel(level: LogLevel): void {\n  currentLevel = level;\n}\n\nexport function getLogLevel(): LogLevel {\n  return currentLevel;\n}\n\nfunction shouldLog(level: LogLevel): boolean {\n  return LOG_LEVELS[level] >= LOG_LEVELS[currentLevel];\n}\n\nexport const logger = {\n  debug(message: string, ...args: unknown[]): void {\n    if (shouldLog('debug')) {\n      console.log(chalk.gray(`[debug] ${message}`), ...args);\n    }\n  },\n\n  info(message: string, ...args: unknown[]): void {\n    if (shouldLog('info')) {\n      console.log(chalk.blue('ℹ'), message, ...args);\n    }\n  },\n\n  success(message: string, ...args: unknown[]): void {\n    if (shouldLog('info')) {\n      console.log(chalk.green('✓'), message, ...args);\n    }\n  },\n\n  warn(message: string, ...args: unknown[]): void {\n    if (shouldLog('warn')) {\n      console.log(chalk.yellow('⚠'), message, ...args);\n    }\n  },\n\n  error(message: string, ...args: unknown[]): void {\n    if (shouldLog('error')) {\n      console.error(chalk.red('✗'), message, ...args);\n    }\n  },\n\n  // Styled output helpers\n  brand(text: string): string {\n    return chalk.hex('#818cf8')(text);\n  },\n\n  dim(text: string): string {\n    return chalk.dim(text);\n  },\n\n  bold(text: string): string {\n    return chalk.bold(text);\n  },\n\n  // Print a header\n  header(text: string): void {\n    console.log();\n    console.log(chalk.bold(text));\n    console.log(chalk.dim('─'.repeat(text.length)));\n  },\n\n  // Print a blank line\n  blank(): void {\n    console.log();\n  },\n};\n","/**\n * Container management utilities\n * Uses devcontainer CLI for container lifecycle\n */\n\nimport { execa, type ExecaError } from 'execa';\nimport which from 'which';\nimport { readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { RapidConfig } from './types.js';\n\nexport interface ContainerStatus {\n  exists: boolean;\n  running: boolean;\n  containerId?: string;\n  containerName?: string;\n}\n\nexport interface DevcontainerConfig {\n  name?: string;\n  image?: string;\n  dockerFile?: string;\n  build?: {\n    dockerfile?: string;\n    context?: string;\n  };\n  [key: string]: unknown;\n}\n\n/**\n * Check if devcontainer CLI is available\n */\nexport async function hasDevcontainerCli(): Promise<boolean> {\n  try {\n    await which('devcontainer');\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Check if Docker is available\n */\nexport async function hasDocker(): Promise<boolean> {\n  try {\n    await execa('docker', ['info'], { timeout: 5000 });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Get the devcontainer.json path\n */\nexport function getDevcontainerPath(rootDir: string, config?: RapidConfig): string {\n  const customPath = config?.container?.devcontainer;\n  if (customPath) {\n    return join(rootDir, customPath);\n  }\n  return join(rootDir, '.devcontainer', 'devcontainer.json');\n}\n\n/**\n * Load devcontainer.json\n */\nexport async function loadDevcontainerConfig(\n  rootDir: string,\n  config?: RapidConfig\n): Promise<DevcontainerConfig | null> {\n  try {\n    const configPath = getDevcontainerPath(rootDir, config);\n    const content = await readFile(configPath, 'utf-8');\n    return JSON.parse(content);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Get container name for a project\n */\nexport function getContainerName(rootDir: string, devcontainerConfig?: DevcontainerConfig): string {\n  // Use devcontainer name if available, otherwise derive from directory\n  const dirName = rootDir.split('/').pop() || 'rapid';\n  const name = devcontainerConfig?.name || dirName;\n  // Sanitize for Docker container name\n  return `rapid-${name}`.toLowerCase().replace(/[^a-z0-9-]/g, '-');\n}\n\n/**\n * Check container status using devcontainer labels\n */\nexport async function getContainerStatus(\n  rootDir: string,\n  _config?: RapidConfig\n): Promise<ContainerStatus> {\n  try {\n    // Use devcontainer label to find the container (this is how devcontainer CLI tracks containers)\n    const result = await execa('docker', [\n      'ps',\n      '-a',\n      '--filter',\n      `label=devcontainer.local_folder=${rootDir}`,\n      '--format',\n      '{{.ID}}\\t{{.State}}\\t{{.Names}}',\n    ]);\n\n    const lines = result.stdout.trim().split('\\n').filter(Boolean);\n    if (lines.length === 0) {\n      return { exists: false, running: false };\n    }\n\n    const parts = lines[0]?.split('\\t');\n    const containerId = parts?.[0];\n    const state = parts?.[1];\n    const containerName = parts?.[2];\n\n    if (!containerId || !containerName) {\n      return { exists: false, running: false };\n    }\n\n    return {\n      exists: true,\n      running: state === 'running',\n      containerId,\n      containerName,\n    };\n  } catch {\n    return { exists: false, running: false };\n  }\n}\n\n/**\n * Start the dev container using devcontainer CLI\n */\nexport async function startContainer(\n  rootDir: string,\n  _config?: RapidConfig,\n  options: { rebuild?: boolean; quiet?: boolean } = {}\n): Promise<{ success: boolean; containerId?: string; error?: string }> {\n  const hasDevCli = await hasDevcontainerCli();\n\n  if (!hasDevCli) {\n    return {\n      success: false,\n      error: 'devcontainer CLI not found. Install with: npm install -g @devcontainers/cli',\n    };\n  }\n\n  const hasDockerRunning = await hasDocker();\n  if (!hasDockerRunning) {\n    return {\n      success: false,\n      error: 'Docker is not running. Please start Docker Desktop.',\n    };\n  }\n\n  try {\n    const args = ['up', '--workspace-folder', rootDir];\n\n    if (options.rebuild) {\n      args.push('--remove-existing-container');\n    }\n\n    const result = await execa('devcontainer', args, {\n      stdio: options.quiet ? 'pipe' : 'inherit',\n      cwd: rootDir,\n    });\n\n    // Parse the container ID from output\n    // devcontainer up outputs JSON with containerId\n    if (options.quiet && result.stdout) {\n      try {\n        const output = JSON.parse(result.stdout);\n        return { success: true, containerId: output.containerId };\n      } catch {\n        return { success: true };\n      }\n    }\n\n    return { success: true };\n  } catch (error) {\n    const execError = error as ExecaError;\n    const stderr = typeof execError.stderr === 'string' ? execError.stderr : undefined;\n    return {\n      success: false,\n      error: stderr || execError.message,\n    };\n  }\n}\n\n/**\n * Stop the dev container\n */\nexport async function stopContainer(\n  rootDir: string,\n  config?: RapidConfig,\n  options: { remove?: boolean } = {}\n): Promise<{ success: boolean; error?: string }> {\n  const status = await getContainerStatus(rootDir, config);\n\n  if (!status.exists) {\n    return { success: true }; // Nothing to stop\n  }\n\n  try {\n    if (status.running) {\n      await execa('docker', ['stop', status.containerId!]);\n    }\n\n    if (options.remove) {\n      await execa('docker', ['rm', status.containerId!]);\n    }\n\n    return { success: true };\n  } catch (error) {\n    const execError = error as ExecaError;\n    const stderr = typeof execError.stderr === 'string' ? execError.stderr : undefined;\n    return {\n      success: false,\n      error: stderr || execError.message,\n    };\n  }\n}\n\n/**\n * Execute a command inside the dev container\n */\nexport async function execInContainer(\n  rootDir: string,\n  command: string[],\n  _config?: RapidConfig,\n  options: { interactive?: boolean; tty?: boolean; env?: Record<string, string> } = {}\n): Promise<void> {\n  const hasDevCli = await hasDevcontainerCli();\n\n  if (!hasDevCli) {\n    throw new Error('devcontainer CLI not found. Install with: npm install -g @devcontainers/cli');\n  }\n\n  const args = ['exec', '--workspace-folder', rootDir];\n\n  // Add environment variables\n  if (options.env) {\n    for (const [key, value] of Object.entries(options.env)) {\n      args.push('--remote-env', `${key}=${value}`);\n    }\n  }\n\n  // Add the command\n  args.push(...command);\n\n  await execa('devcontainer', args, {\n    stdio: 'inherit',\n    cwd: rootDir,\n  });\n}\n","/**\n * Secrets management for RAPID\n * Supports 1Password, HashiCorp Vault, and environment variables\n */\n\nimport { spawn } from 'node:child_process';\nimport { readFile, writeFile, access } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { SecretsConfig } from './types.js';\nimport { logger } from './logger.js';\n\nexport interface SecretStatus {\n  name: string;\n  reference: string;\n  provider: 'env' | '1password' | 'vault';\n  available: boolean;\n  error?: string;\n}\n\nexport interface SecretsStatus {\n  provider: 'env' | '1password' | 'vault';\n  authenticated: boolean;\n  authMethod?: 'service-account' | 'user' | 'token';\n  secrets: SecretStatus[];\n  allAvailable: boolean;\n}\n\nexport interface OpAuthStatus {\n  authenticated: boolean;\n  method: 'service-account' | 'user' | 'none';\n  accountInfo?: string;\n}\n\n/**\n * Execute a command and return stdout\n */\nasync function execCommand(\n  command: string,\n  args: string[],\n  options: { timeout?: number } = {}\n): Promise<{ stdout: string; stderr: string; exitCode: number }> {\n  return new Promise((resolve) => {\n    const proc = spawn(command, args, {\n      stdio: ['pipe', 'pipe', 'pipe'],\n      timeout: options.timeout ?? 30000,\n    });\n\n    let stdout = '';\n    let stderr = '';\n\n    proc.stdout?.on('data', (data) => {\n      stdout += data.toString();\n    });\n\n    proc.stderr?.on('data', (data) => {\n      stderr += data.toString();\n    });\n\n    proc.on('close', (code) => {\n      resolve({ stdout: stdout.trim(), stderr: stderr.trim(), exitCode: code ?? 1 });\n    });\n\n    proc.on('error', (err) => {\n      resolve({ stdout: '', stderr: err.message, exitCode: 1 });\n    });\n  });\n}\n\n/**\n * Check if 1Password CLI is installed\n */\nexport async function hasOpCli(): Promise<boolean> {\n  const result = await execCommand('op', ['--version']);\n  return result.exitCode === 0;\n}\n\n/**\n * Check if OP_SERVICE_ACCOUNT_TOKEN is set\n */\nexport function hasOpServiceAccountToken(): boolean {\n  return !!process.env.OP_SERVICE_ACCOUNT_TOKEN;\n}\n\n/**\n * Check if 1Password CLI is authenticated (via service account or user)\n */\nexport async function isOpAuthenticated(): Promise<boolean> {\n  // Service account token takes precedence\n  if (hasOpServiceAccountToken()) {\n    // Verify the token works by trying to list vaults\n    const result = await execCommand('op', ['vault', 'list', '--format=json']);\n    return result.exitCode === 0;\n  }\n\n  // Fall back to user authentication\n  const result = await execCommand('op', ['account', 'list']);\n  return result.exitCode === 0 && result.stdout.length > 0;\n}\n\n/**\n * Get detailed 1Password authentication status\n */\nexport async function getOpAuthStatus(): Promise<OpAuthStatus> {\n  // Check for service account token first\n  if (hasOpServiceAccountToken()) {\n    const result = await execCommand('op', ['vault', 'list', '--format=json']);\n    if (result.exitCode === 0) {\n      return {\n        authenticated: true,\n        method: 'service-account',\n        accountInfo: 'Service Account',\n      };\n    }\n    return {\n      authenticated: false,\n      method: 'none',\n      accountInfo: 'Invalid service account token',\n    };\n  }\n\n  // Check for user authentication\n  const result = await execCommand('op', ['account', 'list', '--format=json']);\n  if (result.exitCode === 0 && result.stdout.length > 0) {\n    try {\n      const accounts = JSON.parse(result.stdout);\n      if (accounts.length > 0) {\n        return {\n          authenticated: true,\n          method: 'user',\n          accountInfo: accounts[0].email || accounts[0].url,\n        };\n      }\n    } catch {\n      // Parse error, but command succeeded\n      return {\n        authenticated: true,\n        method: 'user',\n      };\n    }\n  }\n\n  return {\n    authenticated: false,\n    method: 'none',\n  };\n}\n\n/**\n * Check if HashiCorp Vault CLI is installed\n */\nexport async function hasVaultCli(): Promise<boolean> {\n  const result = await execCommand('vault', ['--version']);\n  return result.exitCode === 0;\n}\n\n/**\n * Check if HashiCorp Vault is authenticated\n */\nexport async function isVaultAuthenticated(): Promise<boolean> {\n  const result = await execCommand('vault', ['token', 'lookup']);\n  return result.exitCode === 0;\n}\n\n/**\n * Read a secret from 1Password\n * @param reference - 1Password reference (e.g., \"op://vault/item/field\")\n */\nexport async function readOpSecret(reference: string): Promise<string | null> {\n  const result = await execCommand('op', ['read', reference]);\n  if (result.exitCode !== 0) {\n    return null;\n  }\n  return result.stdout;\n}\n\n/**\n * Read a secret from HashiCorp Vault\n * @param path - Vault path (e.g., \"secret/data/myproject\")\n * @param field - Field name within the secret\n */\nexport async function readVaultSecret(path: string, field: string): Promise<string | null> {\n  const result = await execCommand('vault', ['kv', 'get', '-field', field, path]);\n  if (result.exitCode !== 0) {\n    return null;\n  }\n  return result.stdout;\n}\n\n/**\n * Verify a single secret is accessible\n */\nexport async function verifySecret(\n  name: string,\n  reference: string,\n  provider: 'env' | '1password' | 'vault',\n  config?: SecretsConfig\n): Promise<SecretStatus> {\n  const status: SecretStatus = {\n    name,\n    reference,\n    provider,\n    available: false,\n  };\n\n  try {\n    switch (provider) {\n      case 'env': {\n        const value = process.env[name];\n        status.available = !!value && value.length > 0;\n        if (!status.available) {\n          status.error = 'Environment variable not set';\n        }\n        break;\n      }\n\n      case '1password': {\n        // Reference should be in format op://vault/item/field\n        const value = await readOpSecret(reference);\n        status.available = value !== null;\n        if (!status.available) {\n          status.error = 'Secret not found in 1Password';\n        }\n        break;\n      }\n\n      case 'vault': {\n        // Parse path and field from reference\n        const field = reference.split('/').pop() || 'value';\n        const vaultPath = reference.includes('/')\n          ? reference.substring(0, reference.lastIndexOf('/'))\n          : config?.vault || 'secret/data/default';\n\n        const value = await readVaultSecret(vaultPath, field);\n        status.available = value !== null;\n        if (!status.available) {\n          status.error = 'Secret not found in Vault';\n        }\n        break;\n      }\n    }\n  } catch (error) {\n    status.error = error instanceof Error ? error.message : String(error);\n    status.available = false;\n  }\n\n  return status;\n}\n\n/**\n * Verify all secrets in configuration\n */\nexport async function verifySecrets(config: SecretsConfig): Promise<SecretsStatus> {\n  const provider = config.provider || 'env';\n  let authenticated = true;\n\n  // Check authentication status for provider\n  switch (provider) {\n    case '1password':\n      authenticated = await isOpAuthenticated();\n      break;\n    case 'vault':\n      authenticated = await isVaultAuthenticated();\n      break;\n    case 'env':\n      authenticated = true;\n      break;\n  }\n\n  const secrets: SecretStatus[] = [];\n\n  if (config.items) {\n    for (const [name, reference] of Object.entries(config.items)) {\n      const status = await verifySecret(name, reference, provider, config);\n      secrets.push(status);\n    }\n  }\n\n  const allAvailable = secrets.length === 0 || secrets.every((s) => s.available);\n\n  return {\n    provider,\n    authenticated,\n    secrets,\n    allAvailable,\n  };\n}\n\n/**\n * Load all secrets into environment\n */\nexport async function loadSecrets(config: SecretsConfig): Promise<Record<string, string>> {\n  const provider = config.provider || 'env';\n  const secrets: Record<string, string> = {};\n\n  if (!config.items) {\n    return secrets;\n  }\n\n  for (const [name, reference] of Object.entries(config.items)) {\n    try {\n      let value: string | null = null;\n\n      switch (provider) {\n        case 'env':\n          value = process.env[name] || null;\n          break;\n\n        case '1password':\n          value = await readOpSecret(reference);\n          break;\n\n        case 'vault': {\n          const field = reference.split('/').pop() || 'value';\n          const path = reference.substring(0, reference.lastIndexOf('/')) || config.vault || '';\n          value = await readVaultSecret(path, field);\n          break;\n        }\n      }\n\n      if (value) {\n        secrets[name] = value;\n      }\n    } catch (error) {\n      logger.debug(`Failed to load secret ${name}: ${error}`);\n    }\n  }\n\n  return secrets;\n}\n\n/**\n * Generate .envrc file from secrets configuration\n */\nexport function generateEnvrc(config: SecretsConfig): string {\n  const provider = config.provider || 'env';\n  const lines: string[] = [\n    '# .envrc - RAPID project secrets',\n    '# This file is safe to commit - it contains NO secrets, only references',\n    '#',\n    `# Provider: ${provider}`,\n    `# Generated by: rapid secrets generate`,\n    '',\n  ];\n\n  if (!config.items || Object.keys(config.items).length === 0) {\n    lines.push('# No secrets configured in rapid.json');\n    return lines.join('\\n');\n  }\n\n  switch (provider) {\n    case '1password':\n      lines.push('# Secrets loaded from 1Password');\n      lines.push('# Requires: 1Password CLI (op) installed and authenticated');\n      lines.push('');\n      for (const [name, reference] of Object.entries(config.items)) {\n        lines.push(`export ${name}=$(op read \"${reference}\")`);\n      }\n      break;\n\n    case 'vault':\n      lines.push('# Secrets loaded from HashiCorp Vault');\n      lines.push('# Requires: Vault CLI installed and authenticated');\n      lines.push('');\n      if (config.address) {\n        lines.push(`export VAULT_ADDR=\"${config.address}\"`);\n        lines.push('');\n      }\n      for (const [name, reference] of Object.entries(config.items)) {\n        const path = config.vault || 'secret/data/default';\n        lines.push(`export ${name}=$(vault kv get -field=${reference} ${path})`);\n      }\n      break;\n\n    case 'env':\n      lines.push('# WARNING: env provider expects secrets to be set manually');\n      lines.push('# Consider using 1password or vault for better security');\n      lines.push('');\n      lines.push('# Uncomment and set values (DO NOT commit actual values!)');\n      for (const name of Object.keys(config.items)) {\n        lines.push(`# export ${name}=\"your-value-here\"`);\n      }\n      break;\n  }\n\n  // Add .env.local loading if configured\n  if (config.envrc?.includeLocal !== false) {\n    lines.push('');\n    lines.push('# Load local overrides if present');\n    lines.push('[[ -f .env.local ]] && source_env .env.local');\n  }\n\n  lines.push('');\n  return lines.join('\\n');\n}\n\n/**\n * Write .envrc file to project directory\n */\nexport async function writeEnvrc(rootDir: string, config: SecretsConfig): Promise<string> {\n  const envrcPath = config.envrc?.path || '.envrc';\n  const fullPath = join(rootDir, envrcPath);\n  const content = generateEnvrc(config);\n\n  await writeFile(fullPath, content);\n  return fullPath;\n}\n\n/**\n * Check if .envrc exists in project\n */\nexport async function hasEnvrc(rootDir: string, config?: SecretsConfig): Promise<boolean> {\n  const envrcPath = config?.envrc?.path || '.envrc';\n  const fullPath = join(rootDir, envrcPath);\n\n  try {\n    await access(fullPath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Read existing .envrc content\n */\nexport async function readEnvrc(rootDir: string, config?: SecretsConfig): Promise<string | null> {\n  const envrcPath = config?.envrc?.path || '.envrc';\n  const fullPath = join(rootDir, envrcPath);\n\n  try {\n    const content = await readFile(fullPath, 'utf-8');\n    return content;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Get a summary of provider requirements\n */\nexport function getProviderInfo(provider: 'env' | '1password' | 'vault'): {\n  name: string;\n  cliRequired: string | null;\n  authCommand: string | null;\n  installUrl: string | null;\n} {\n  switch (provider) {\n    case '1password':\n      return {\n        name: '1Password',\n        cliRequired: 'op',\n        authCommand: 'eval $(op signin)',\n        installUrl: 'https://developer.1password.com/docs/cli/get-started/',\n      };\n    case 'vault':\n      return {\n        name: 'HashiCorp Vault',\n        cliRequired: 'vault',\n        authCommand: 'vault login',\n        installUrl: 'https://developer.hashicorp.com/vault/docs/install',\n      };\n    case 'env':\n      return {\n        name: 'Environment Variables',\n        cliRequired: null,\n        authCommand: null,\n        installUrl: null,\n      };\n  }\n}\n"],"mappings":";AAIA,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,SAAS,eAAe;AAGjC,IAAM,cAAc;AACpB,IAAM,eAAe,CAAC,cAAc,qBAAqB,YAAY,eAAe;AAWpF,eAAsB,WAAW,KAA4C;AAC3E,QAAM,WAAW,YAAY,aAAa;AAAA,IACxC,cAAc;AAAA,IACd,SAAS;AAAA,MACP,SAAS,OAAO,aAAa;AAC3B,cAAM,UAAU,MAAM,SAAS,UAAU,OAAO;AAChD,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,SAAS,MAAM,SAAS,OAAO,GAAG;AAExC,MAAI,CAAC,UAAU,OAAO,SAAS;AAC7B,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,SAAS,QAAQ,OAAO,QAAQ;AAAA,EAClC;AACF;AAKA,eAAsB,mBAAmB,UAAyC;AAChF,QAAM,UAAU,MAAM,SAAS,UAAU,OAAO;AAChD,QAAM,SAAS,KAAK,MAAM,OAAO;AAEjC,SAAO;AAAA,IACL;AAAA,IACA,UAAU,QAAQ,QAAQ;AAAA,IAC1B,SAAS,QAAQ,QAAQ,QAAQ,CAAC;AAAA,EACpC;AACF;AAKO,SAAS,mBAAgC;AAC9C,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,QACT,QAAQ;AAAA,UACN,KAAK;AAAA,UACL,iBAAiB;AAAA,UACjB,SAAS,CAAC,mBAAmB;AAAA,QAC/B;AAAA,QACA,UAAU;AAAA,UACR,KAAK;AAAA,UACL,iBAAiB;AAAA,UACjB,SAAS,CAAC,mBAAmB;AAAA,QAC/B;AAAA,QACA,OAAO;AAAA,UACL,KAAK;AAAA,UACL,iBAAiB;AAAA,UACjB,SAAS,CAAC,mBAAmB;AAAA,UAC7B,MAAM,CAAC,WAAW,4BAA4B;AAAA,QAChD;AAAA,MACF;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,UAAU;AAAA,IACZ;AAAA,IACA,SAAS;AAAA,MACP,OAAO,CAAC,WAAW;AAAA,MACnB,MAAM,CAAC,OAAO;AAAA,MACd,oBAAoB;AAAA,IACtB;AAAA,EACF;AACF;AAKO,SAAS,kBAAkB,QAA2C;AAC3E,QAAM,WAAW,iBAAiB;AAElC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG;AAAA,IACH,QAAQ;AAAA,MACN,GAAG,SAAS;AAAA,MACZ,GAAG,OAAO;AAAA,MACV,WAAW;AAAA,QACT,GAAG,SAAS,OAAO;AAAA,QACnB,GAAG,OAAO,QAAQ;AAAA,MACpB;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,GAAG,SAAS;AAAA,MACZ,GAAG,OAAO;AAAA,IACZ;AAAA,IACA,SAAS;AAAA,MACP,GAAG,SAAS;AAAA,MACZ,GAAG,OAAO;AAAA,IACZ;AAAA,EACF;AACF;;;ACvHA,SAAS,aAAa;AACtB,OAAO,WAAW;AAMlB,eAAsB,oBAAoB,OAA8C;AACtF,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,MAAM,GAAG;AAGrC,QAAI;AACJ,QAAI;AACF,YAAM,SAAS,MAAM,MAAM,MAAM,KAAK,CAAC,WAAW,GAAG,EAAE,SAAS,IAAK,CAAC;AACtE,gBAAU,OAAO,OAAO,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;AAAA,IAC9C,QAAQ;AAAA,IAER;AAEA,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,MACA,GAAI,YAAY,UAAa,EAAE,QAAQ;AAAA,IACzC;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAKA,eAAsB,eAAe,QAA6C;AAChF,QAAM,UAAyB,CAAC;AAEhC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,SAAS,GAAG;AACnE,UAAM,SAAS,MAAM,oBAAoB,KAAK;AAC9C,YAAQ,KAAK;AAAA,MACX,GAAG;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AACT;AAKO,SAAS,gBAAgB,QAA6C;AAC3E,QAAM,cAAc,OAAO,OAAO;AAClC,SAAO,OAAO,OAAO,UAAU,WAAW,KAAK;AACjD;AAKO,SAAS,SAAS,QAAqB,MAAsC;AAClF,SAAO,OAAO,OAAO,UAAU,IAAI,KAAK;AAC1C;AAKA,eAAsB,YACpB,OACA,UAII,CAAC,GACU;AACf,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,QAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAEvC,QAAM,MAAM,MAAM,KAAK,MAAM;AAAA,IAC3B;AAAA,IACA,KAAK;AAAA,MACH,GAAG,QAAQ;AAAA,MACX,GAAG,QAAQ;AAAA,IACb;AAAA,IACA,OAAO,QAAQ,SAAS;AAAA,EAC1B,CAAC;AACH;;;ACxFA,OAAO,WAAW;AAIlB,IAAM,aAAuC;AAAA,EAC3C,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAEA,IAAI,eAAyB;AAEtB,SAAS,YAAY,OAAuB;AACjD,iBAAe;AACjB;AAEO,SAAS,cAAwB;AACtC,SAAO;AACT;AAEA,SAAS,UAAU,OAA0B;AAC3C,SAAO,WAAW,KAAK,KAAK,WAAW,YAAY;AACrD;AAEO,IAAM,SAAS;AAAA,EACpB,MAAM,YAAoB,MAAuB;AAC/C,QAAI,UAAU,OAAO,GAAG;AACtB,cAAQ,IAAI,MAAM,KAAK,WAAW,OAAO,EAAE,GAAG,GAAG,IAAI;AAAA,IACvD;AAAA,EACF;AAAA,EAEA,KAAK,YAAoB,MAAuB;AAC9C,QAAI,UAAU,MAAM,GAAG;AACrB,cAAQ,IAAI,MAAM,KAAK,QAAG,GAAG,SAAS,GAAG,IAAI;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,QAAQ,YAAoB,MAAuB;AACjD,QAAI,UAAU,MAAM,GAAG;AACrB,cAAQ,IAAI,MAAM,MAAM,QAAG,GAAG,SAAS,GAAG,IAAI;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,KAAK,YAAoB,MAAuB;AAC9C,QAAI,UAAU,MAAM,GAAG;AACrB,cAAQ,IAAI,MAAM,OAAO,QAAG,GAAG,SAAS,GAAG,IAAI;AAAA,IACjD;AAAA,EACF;AAAA,EAEA,MAAM,YAAoB,MAAuB;AAC/C,QAAI,UAAU,OAAO,GAAG;AACtB,cAAQ,MAAM,MAAM,IAAI,QAAG,GAAG,SAAS,GAAG,IAAI;AAAA,IAChD;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,MAAsB;AAC1B,WAAO,MAAM,IAAI,SAAS,EAAE,IAAI;AAAA,EAClC;AAAA,EAEA,IAAI,MAAsB;AACxB,WAAO,MAAM,IAAI,IAAI;AAAA,EACvB;AAAA,EAEA,KAAK,MAAsB;AACzB,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB;AAAA;AAAA,EAGA,OAAO,MAAoB;AACzB,YAAQ,IAAI;AACZ,YAAQ,IAAI,MAAM,KAAK,IAAI,CAAC;AAC5B,YAAQ,IAAI,MAAM,IAAI,SAAI,OAAO,KAAK,MAAM,CAAC,CAAC;AAAA,EAChD;AAAA;AAAA,EAGA,QAAc;AACZ,YAAQ,IAAI;AAAA,EACd;AACF;;;AC/EA,SAAS,SAAAA,cAA8B;AACvC,OAAOC,YAAW;AAClB,SAAS,YAAAC,iBAAgB;AACzB,SAAS,YAAY;AAwBrB,eAAsB,qBAAuC;AAC3D,MAAI;AACF,UAAMD,OAAM,cAAc;AAC1B,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,YAA8B;AAClD,MAAI;AACF,UAAMD,OAAM,UAAU,CAAC,MAAM,GAAG,EAAE,SAAS,IAAK,CAAC;AACjD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,oBAAoB,SAAiB,QAA8B;AACjF,QAAM,aAAa,QAAQ,WAAW;AACtC,MAAI,YAAY;AACd,WAAO,KAAK,SAAS,UAAU;AAAA,EACjC;AACA,SAAO,KAAK,SAAS,iBAAiB,mBAAmB;AAC3D;AAKA,eAAsB,uBACpB,SACA,QACoC;AACpC,MAAI;AACF,UAAM,aAAa,oBAAoB,SAAS,MAAM;AACtD,UAAM,UAAU,MAAME,UAAS,YAAY,OAAO;AAClD,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,iBAAiB,SAAiB,oBAAiD;AAEjG,QAAM,UAAU,QAAQ,MAAM,GAAG,EAAE,IAAI,KAAK;AAC5C,QAAM,OAAO,oBAAoB,QAAQ;AAEzC,SAAO,SAAS,IAAI,GAAG,YAAY,EAAE,QAAQ,eAAe,GAAG;AACjE;AAKA,eAAsB,mBACpB,SACA,SAC0B;AAC1B,MAAI;AAEF,UAAM,SAAS,MAAMF,OAAM,UAAU;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,MACA,mCAAmC,OAAO;AAAA,MAC1C;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,QAAQ,OAAO,OAAO,KAAK,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO;AAC7D,QAAI,MAAM,WAAW,GAAG;AACtB,aAAO,EAAE,QAAQ,OAAO,SAAS,MAAM;AAAA,IACzC;AAEA,UAAM,QAAQ,MAAM,CAAC,GAAG,MAAM,GAAI;AAClC,UAAM,cAAc,QAAQ,CAAC;AAC7B,UAAM,QAAQ,QAAQ,CAAC;AACvB,UAAM,gBAAgB,QAAQ,CAAC;AAE/B,QAAI,CAAC,eAAe,CAAC,eAAe;AAClC,aAAO,EAAE,QAAQ,OAAO,SAAS,MAAM;AAAA,IACzC;AAEA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,UAAU;AAAA,MACnB;AAAA,MACA;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,QAAQ,OAAO,SAAS,MAAM;AAAA,EACzC;AACF;AAKA,eAAsB,eACpB,SACA,SACA,UAAkD,CAAC,GACkB;AACrE,QAAM,YAAY,MAAM,mBAAmB;AAE3C,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM,UAAU;AACzC,MAAI,CAAC,kBAAkB;AACrB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAEA,MAAI;AACF,UAAM,OAAO,CAAC,MAAM,sBAAsB,OAAO;AAEjD,QAAI,QAAQ,SAAS;AACnB,WAAK,KAAK,6BAA6B;AAAA,IACzC;AAEA,UAAM,SAAS,MAAMA,OAAM,gBAAgB,MAAM;AAAA,MAC/C,OAAO,QAAQ,QAAQ,SAAS;AAAA,MAChC,KAAK;AAAA,IACP,CAAC;AAID,QAAI,QAAQ,SAAS,OAAO,QAAQ;AAClC,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,OAAO,MAAM;AACvC,eAAO,EAAE,SAAS,MAAM,aAAa,OAAO,YAAY;AAAA,MAC1D,QAAQ;AACN,eAAO,EAAE,SAAS,KAAK;AAAA,MACzB;AAAA,IACF;AAEA,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB,SAAS,OAAO;AACd,UAAM,YAAY;AAClB,UAAM,SAAS,OAAO,UAAU,WAAW,WAAW,UAAU,SAAS;AACzE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,UAAU,UAAU;AAAA,IAC7B;AAAA,EACF;AACF;AAKA,eAAsB,cACpB,SACA,QACA,UAAgC,CAAC,GACc;AAC/C,QAAM,SAAS,MAAM,mBAAmB,SAAS,MAAM;AAEvD,MAAI,CAAC,OAAO,QAAQ;AAClB,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAEA,MAAI;AACF,QAAI,OAAO,SAAS;AAClB,YAAMA,OAAM,UAAU,CAAC,QAAQ,OAAO,WAAY,CAAC;AAAA,IACrD;AAEA,QAAI,QAAQ,QAAQ;AAClB,YAAMA,OAAM,UAAU,CAAC,MAAM,OAAO,WAAY,CAAC;AAAA,IACnD;AAEA,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB,SAAS,OAAO;AACd,UAAM,YAAY;AAClB,UAAM,SAAS,OAAO,UAAU,WAAW,WAAW,UAAU,SAAS;AACzE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,UAAU,UAAU;AAAA,IAC7B;AAAA,EACF;AACF;AAKA,eAAsB,gBACpB,SACA,SACA,SACA,UAAkF,CAAC,GACpE;AACf,QAAM,YAAY,MAAM,mBAAmB;AAE3C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AAEA,QAAM,OAAO,CAAC,QAAQ,sBAAsB,OAAO;AAGnD,MAAI,QAAQ,KAAK;AACf,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AACtD,WAAK,KAAK,gBAAgB,GAAG,GAAG,IAAI,KAAK,EAAE;AAAA,IAC7C;AAAA,EACF;AAGA,OAAK,KAAK,GAAG,OAAO;AAEpB,QAAMA,OAAM,gBAAgB,MAAM;AAAA,IAChC,OAAO;AAAA,IACP,KAAK;AAAA,EACP,CAAC;AACH;;;AC7PA,SAAS,aAAa;AACtB,SAAS,YAAAG,WAAU,WAAW,cAAc;AAC5C,SAAS,QAAAC,aAAY;AA6BrB,eAAe,YACb,SACA,MACA,UAAgC,CAAC,GAC8B;AAC/D,SAAO,IAAI,QAAQ,CAACC,aAAY;AAC9B,UAAM,OAAO,MAAM,SAAS,MAAM;AAAA,MAChC,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,SAAS,QAAQ,WAAW;AAAA,IAC9B,CAAC;AAED,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,SAAK,QAAQ,GAAG,QAAQ,CAAC,SAAS;AAChC,gBAAU,KAAK,SAAS;AAAA,IAC1B,CAAC;AAED,SAAK,QAAQ,GAAG,QAAQ,CAAC,SAAS;AAChC,gBAAU,KAAK,SAAS;AAAA,IAC1B,CAAC;AAED,SAAK,GAAG,SAAS,CAAC,SAAS;AACzB,MAAAA,SAAQ,EAAE,QAAQ,OAAO,KAAK,GAAG,QAAQ,OAAO,KAAK,GAAG,UAAU,QAAQ,EAAE,CAAC;AAAA,IAC/E,CAAC;AAED,SAAK,GAAG,SAAS,CAAC,QAAQ;AACxB,MAAAA,SAAQ,EAAE,QAAQ,IAAI,QAAQ,IAAI,SAAS,UAAU,EAAE,CAAC;AAAA,IAC1D,CAAC;AAAA,EACH,CAAC;AACH;AAKA,eAAsB,WAA6B;AACjD,QAAM,SAAS,MAAM,YAAY,MAAM,CAAC,WAAW,CAAC;AACpD,SAAO,OAAO,aAAa;AAC7B;AAKO,SAAS,2BAAoC;AAClD,SAAO,CAAC,CAAC,QAAQ,IAAI;AACvB;AAKA,eAAsB,oBAAsC;AAE1D,MAAI,yBAAyB,GAAG;AAE9B,UAAMC,UAAS,MAAM,YAAY,MAAM,CAAC,SAAS,QAAQ,eAAe,CAAC;AACzE,WAAOA,QAAO,aAAa;AAAA,EAC7B;AAGA,QAAM,SAAS,MAAM,YAAY,MAAM,CAAC,WAAW,MAAM,CAAC;AAC1D,SAAO,OAAO,aAAa,KAAK,OAAO,OAAO,SAAS;AACzD;AAKA,eAAsB,kBAAyC;AAE7D,MAAI,yBAAyB,GAAG;AAC9B,UAAMA,UAAS,MAAM,YAAY,MAAM,CAAC,SAAS,QAAQ,eAAe,CAAC;AACzE,QAAIA,QAAO,aAAa,GAAG;AACzB,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QAAQ;AAAA,QACR,aAAa;AAAA,MACf;AAAA,IACF;AACA,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ;AAAA,MACR,aAAa;AAAA,IACf;AAAA,EACF;AAGA,QAAM,SAAS,MAAM,YAAY,MAAM,CAAC,WAAW,QAAQ,eAAe,CAAC;AAC3E,MAAI,OAAO,aAAa,KAAK,OAAO,OAAO,SAAS,GAAG;AACrD,QAAI;AACF,YAAM,WAAW,KAAK,MAAM,OAAO,MAAM;AACzC,UAAI,SAAS,SAAS,GAAG;AACvB,eAAO;AAAA,UACL,eAAe;AAAA,UACf,QAAQ;AAAA,UACR,aAAa,SAAS,CAAC,EAAE,SAAS,SAAS,CAAC,EAAE;AAAA,QAChD;AAAA,MACF;AAAA,IACF,QAAQ;AAEN,aAAO;AAAA,QACL,eAAe;AAAA,QACf,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,QAAQ;AAAA,EACV;AACF;AAKA,eAAsB,cAAgC;AACpD,QAAM,SAAS,MAAM,YAAY,SAAS,CAAC,WAAW,CAAC;AACvD,SAAO,OAAO,aAAa;AAC7B;AAKA,eAAsB,uBAAyC;AAC7D,QAAM,SAAS,MAAM,YAAY,SAAS,CAAC,SAAS,QAAQ,CAAC;AAC7D,SAAO,OAAO,aAAa;AAC7B;AAMA,eAAsB,aAAa,WAA2C;AAC5E,QAAM,SAAS,MAAM,YAAY,MAAM,CAAC,QAAQ,SAAS,CAAC;AAC1D,MAAI,OAAO,aAAa,GAAG;AACzB,WAAO;AAAA,EACT;AACA,SAAO,OAAO;AAChB;AAOA,eAAsB,gBAAgB,MAAc,OAAuC;AACzF,QAAM,SAAS,MAAM,YAAY,SAAS,CAAC,MAAM,OAAO,UAAU,OAAO,IAAI,CAAC;AAC9E,MAAI,OAAO,aAAa,GAAG;AACzB,WAAO;AAAA,EACT;AACA,SAAO,OAAO;AAChB;AAKA,eAAsB,aACpB,MACA,WACA,UACA,QACuB;AACvB,QAAM,SAAuB;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb;AAEA,MAAI;AACF,YAAQ,UAAU;AAAA,MAChB,KAAK,OAAO;AACV,cAAM,QAAQ,QAAQ,IAAI,IAAI;AAC9B,eAAO,YAAY,CAAC,CAAC,SAAS,MAAM,SAAS;AAC7C,YAAI,CAAC,OAAO,WAAW;AACrB,iBAAO,QAAQ;AAAA,QACjB;AACA;AAAA,MACF;AAAA,MAEA,KAAK,aAAa;AAEhB,cAAM,QAAQ,MAAM,aAAa,SAAS;AAC1C,eAAO,YAAY,UAAU;AAC7B,YAAI,CAAC,OAAO,WAAW;AACrB,iBAAO,QAAQ;AAAA,QACjB;AACA;AAAA,MACF;AAAA,MAEA,KAAK,SAAS;AAEZ,cAAM,QAAQ,UAAU,MAAM,GAAG,EAAE,IAAI,KAAK;AAC5C,cAAM,YAAY,UAAU,SAAS,GAAG,IACpC,UAAU,UAAU,GAAG,UAAU,YAAY,GAAG,CAAC,IACjD,QAAQ,SAAS;AAErB,cAAM,QAAQ,MAAM,gBAAgB,WAAW,KAAK;AACpD,eAAO,YAAY,UAAU;AAC7B,YAAI,CAAC,OAAO,WAAW;AACrB,iBAAO,QAAQ;AAAA,QACjB;AACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,WAAO,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,WAAO,YAAY;AAAA,EACrB;AAEA,SAAO;AACT;AAKA,eAAsB,cAAc,QAA+C;AACjF,QAAM,WAAW,OAAO,YAAY;AACpC,MAAI,gBAAgB;AAGpB,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,sBAAgB,MAAM,kBAAkB;AACxC;AAAA,IACF,KAAK;AACH,sBAAgB,MAAM,qBAAqB;AAC3C;AAAA,IACF,KAAK;AACH,sBAAgB;AAChB;AAAA,EACJ;AAEA,QAAM,UAA0B,CAAC;AAEjC,MAAI,OAAO,OAAO;AAChB,eAAW,CAAC,MAAM,SAAS,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG;AAC5D,YAAM,SAAS,MAAM,aAAa,MAAM,WAAW,UAAU,MAAM;AACnE,cAAQ,KAAK,MAAM;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,eAAe,QAAQ,WAAW,KAAK,QAAQ,MAAM,CAAC,MAAM,EAAE,SAAS;AAE7E,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKA,eAAsB,YAAY,QAAwD;AACxF,QAAM,WAAW,OAAO,YAAY;AACpC,QAAM,UAAkC,CAAC;AAEzC,MAAI,CAAC,OAAO,OAAO;AACjB,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,MAAM,SAAS,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG;AAC5D,QAAI;AACF,UAAI,QAAuB;AAE3B,cAAQ,UAAU;AAAA,QAChB,KAAK;AACH,kBAAQ,QAAQ,IAAI,IAAI,KAAK;AAC7B;AAAA,QAEF,KAAK;AACH,kBAAQ,MAAM,aAAa,SAAS;AACpC;AAAA,QAEF,KAAK,SAAS;AACZ,gBAAM,QAAQ,UAAU,MAAM,GAAG,EAAE,IAAI,KAAK;AAC5C,gBAAM,OAAO,UAAU,UAAU,GAAG,UAAU,YAAY,GAAG,CAAC,KAAK,OAAO,SAAS;AACnF,kBAAQ,MAAM,gBAAgB,MAAM,KAAK;AACzC;AAAA,QACF;AAAA,MACF;AAEA,UAAI,OAAO;AACT,gBAAQ,IAAI,IAAI;AAAA,MAClB;AAAA,IACF,SAAS,OAAO;AACd,aAAO,MAAM,yBAAyB,IAAI,KAAK,KAAK,EAAE;AAAA,IACxD;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,cAAc,QAA+B;AAC3D,QAAM,WAAW,OAAO,YAAY;AACpC,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe,QAAQ;AAAA,IACvB;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,SAAS,OAAO,KAAK,OAAO,KAAK,EAAE,WAAW,GAAG;AAC3D,UAAM,KAAK,uCAAuC;AAClD,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB;AAEA,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,YAAM,KAAK,iCAAiC;AAC5C,YAAM,KAAK,4DAA4D;AACvE,YAAM,KAAK,EAAE;AACb,iBAAW,CAAC,MAAM,SAAS,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG;AAC5D,cAAM,KAAK,UAAU,IAAI,eAAe,SAAS,IAAI;AAAA,MACvD;AACA;AAAA,IAEF,KAAK;AACH,YAAM,KAAK,uCAAuC;AAClD,YAAM,KAAK,mDAAmD;AAC9D,YAAM,KAAK,EAAE;AACb,UAAI,OAAO,SAAS;AAClB,cAAM,KAAK,sBAAsB,OAAO,OAAO,GAAG;AAClD,cAAM,KAAK,EAAE;AAAA,MACf;AACA,iBAAW,CAAC,MAAM,SAAS,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG;AAC5D,cAAM,OAAO,OAAO,SAAS;AAC7B,cAAM,KAAK,UAAU,IAAI,0BAA0B,SAAS,IAAI,IAAI,GAAG;AAAA,MACzE;AACA;AAAA,IAEF,KAAK;AACH,YAAM,KAAK,4DAA4D;AACvE,YAAM,KAAK,yDAAyD;AACpE,YAAM,KAAK,EAAE;AACb,YAAM,KAAK,2DAA2D;AACtE,iBAAW,QAAQ,OAAO,KAAK,OAAO,KAAK,GAAG;AAC5C,cAAM,KAAK,YAAY,IAAI,oBAAoB;AAAA,MACjD;AACA;AAAA,EACJ;AAGA,MAAI,OAAO,OAAO,iBAAiB,OAAO;AACxC,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,mCAAmC;AAC9C,UAAM,KAAK,8CAA8C;AAAA,EAC3D;AAEA,QAAM,KAAK,EAAE;AACb,SAAO,MAAM,KAAK,IAAI;AACxB;AAKA,eAAsB,WAAW,SAAiB,QAAwC;AACxF,QAAM,YAAY,OAAO,OAAO,QAAQ;AACxC,QAAM,WAAWC,MAAK,SAAS,SAAS;AACxC,QAAM,UAAU,cAAc,MAAM;AAEpC,QAAM,UAAU,UAAU,OAAO;AACjC,SAAO;AACT;AAKA,eAAsB,SAAS,SAAiB,QAA0C;AACxF,QAAM,YAAY,QAAQ,OAAO,QAAQ;AACzC,QAAM,WAAWA,MAAK,SAAS,SAAS;AAExC,MAAI;AACF,UAAM,OAAO,QAAQ;AACrB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,UAAU,SAAiB,QAAgD;AAC/F,QAAM,YAAY,QAAQ,OAAO,QAAQ;AACzC,QAAM,WAAWA,MAAK,SAAS,SAAS;AAExC,MAAI;AACF,UAAM,UAAU,MAAMC,UAAS,UAAU,OAAO;AAChD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,gBAAgB,UAK9B;AACA,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,aAAa;AAAA,QACb,YAAY;AAAA,MACd;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,aAAa;AAAA,QACb,YAAY;AAAA,MACd;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,aAAa;AAAA,QACb,YAAY;AAAA,MACd;AAAA,EACJ;AACF;","names":["execa","which","readFile","readFile","join","resolve","result","join","readFile"]}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@a3t/rapid-core",
+  "version": "0.1.0",
+  "description": "Core library for RAPID - AI-assisted development with dev containers",
+  "license": "MIT",
+  "author": "Steve Rude <steve@rude.la>",
+  "homepage": "https://getrapid.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/a3tai/rapid.git",
+    "directory": "packages/core"
+  },
+  "keywords": [
+    "rapid",
+    "ai",
+    "devcontainer",
+    "claude",
+    "opencode",
+    "development"
+  ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "chalk": "^5.4.1",
+    "cosmiconfig": "^9.0.0",
+    "execa": "^9.6.1",
+    "which": "^5.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.0",
+    "@types/which": "^3.0.4",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.0.5"
+  },
+  "peerDependencies": {
+    "@a3t/rapid-schema": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "echo 'No tests yet'",
+    "clean": "rm -rf dist .turbo"
+  }
+}