@absolutejs/cli 0.1.0

package/LICENSE

@@ -0,0 +1,93 @@
+# Business Source License 1.1
+
+**Licensor:** Alex Kahn
+
+**Licensed Work:** @absolutejs/cli (https://github.com/absolutejs/cli)
+
+**Change Date:** May 31, 2030
+
+**Change License:** Apache License, Version 2.0
+
+---
+
+## Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, permitting limited production use.
+
+### Additional Use Grant
+
+You may use the Licensed Work in production, provided your use does not include
+any of the following:
+
+1. **Offering a Competing Service.** You may not offer the Licensed Work, or
+   any derivative or substantial portion of it, to third parties as a hosted or
+   managed Platform-as-a-Service (PaaS) control plane that competes with a
+   hosted PaaS CLI / control-plane surface (including, but not limited to,
+   Vercel CLI, Railway CLI, Fly CLI, Render CLI, Heroku CLI, Cloudflare
+   Workers CLI, Supabase CLI, AWS Amplify CLI, Convex CLI, or any similar
+   hosted offering whose primary value to its users is deploy orchestration,
+   secrets propagation, environment-variable management, or rollback over a
+   managed PaaS). This includes any product whose primary value to its users
+   is the functionality the Licensed Work provides.
+
+2. **Resale or Redistribution as a Standalone Product.** You may not sell,
+   license, or distribute the Licensed Work, or any derivative or fork of it,
+   as a standalone commercial product.
+
+3. **Removal of Attribution.** Any derivative work, fork, or redistribution of
+   the Licensed Work must prominently credit AbsoluteJS and include a link to
+   the original project repository (https://github.com/absolutejs/cli).
+
+For clarity, the following uses are expressly permitted:
+
+- Using the Licensed Work to operate your own infrastructure or your own
+  customers' deployments (whether commercial or non-commercial), so long as
+  the Licensed Work itself is not the primary product you are selling.
+- Using the Licensed Work as a dependency in commercial software you build and
+  sell, as long as the software is not itself a competing managed PaaS of the
+  kind described in clause 1.
+- Providing consulting, development, or professional services to clients using
+  the Licensed Work.
+- Forking and modifying the Licensed Work for your own internal use, provided
+  attribution is maintained.
+
+### Change Date and Change License
+
+On the Change Date specified above, or on such other date as the Licensor may
+specify by written notice, the Licensed Work will be made available under the
+Change License (Apache License, Version 2.0). Until the Change Date, the terms
+of this Business Source License 1.1 apply.
+
+### Trademark
+
+This license does not grant you any rights to use the "AbsoluteJS" or
+"@absolutejs" name, logo, or any related trademarks. Forks and derivative works
+must not be named or branded in a manner that suggests endorsement by or
+affiliation with AbsoluteJS or the Licensor.
+
+### Notices
+
+You must not remove or obscure any licensing, copyright, or other notices
+included in the Licensed Work.
+
+### No Warranty
+
+THE LICENSED WORK IS PROVIDED "AS IS". THE LICENSOR HEREBY DISCLAIMS ALL
+WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE LICENSOR BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR
+IN CONNECTION WITH THE LICENSED WORK OR THE USE OR OTHER DEALINGS IN THE
+LICENSED WORK.
+
+---
+
+## Contact
+
+For commercial licensing inquiries or additional permissions, contact:
+
+- **Alex Kahn**
+- alexkahndev@gmail.com
+- alexkahndev.github.io

package/README.md

@@ -0,0 +1,136 @@
+# @absolutejs/cli
+
+Substrate CLI for the AbsoluteJS PaaS. Verbs over
+[`@absolutejs/secrets`](https://github.com/absolutejs/secrets) and
+[`@absolutejs/deploy`](https://github.com/absolutejs/deploy):
+
+```
+absolutejs secrets list                  list secret names + fingerprints
+absolutejs secrets rotate STRIPE_KEY     generate + persist a new value
+absolutejs env push prod                 push resolved env file to a stage
+absolutejs env diff prod                 see what `env push` would change
+absolutejs deploy rollback prod          roll back to the previous release
+```
+
+Sibling to [`@absolutejs/absolute`](https://github.com/absolutejs/absolute)
+(framework CLI: `dev`, `start`, `compile`, etc.). They're complementary —
+`absolute` is `dev/build/codegen`, `absolutejs` is `secrets/env/deploy`.
+
+## Install
+
+```bash
+bun add -d @absolutejs/cli
+```
+
+The `absolutejs` binary lands in `node_modules/.bin/`. Run via `bunx
+absolutejs`, `npx absolutejs`, or alias it in your shell.
+
+## Config — `absolutejs.config.ts`
+
+Drop one in your project root. The CLI walks up from the cwd to find it.
+
+```ts
+import { defineConfig } from '@absolutejs/cli';
+import {
+  createSecretBroker,
+  encryptedFileAdapter,
+} from '@absolutejs/secrets';
+import { hetznerTarget } from '@absolutejs/deploy/hetzner';
+import { createDeployer } from '@absolutejs/deploy';
+
+const adapter = encryptedFileAdapter({
+  path: './.secrets.enc.json',
+  key: {
+    type: 'passphrase',
+    passphrase: process.env.SECRETS_MASTER!,
+  },
+});
+
+const broker = createSecretBroker({ adapter });
+
+const prodTarget = () =>
+  hetznerTarget({
+    token: process.env.HETZNER_TOKEN!,
+    name: 'api-prod-1',
+    region: 'nbg1',
+    serverType: 'cx22',
+    image: 'ubuntu-22.04',
+    sshKeys: [process.env.HETZNER_KEY_FINGERPRINT!],
+  });
+
+export default defineConfig({
+  secrets: broker,
+  secretAdapter: adapter,
+  deployments: [
+    {
+      name: 'prod',
+      target: prodTarget,
+      remotePath: '/etc/api.env',
+      secretNames: ['DATABASE_URL', 'STRIPE_KEY'],
+      extras: { NODE_ENV: 'production' },
+      reload: 'systemctl reload api',
+      deployer: async () =>
+        createDeployer({
+          appName: 'api',
+          target: await prodTarget(),
+        }),
+    },
+  ],
+});
+```
+
+The `target` and `deployer` fields are LAZY (`() => …`). Verbs that
+don't touch a remote (`secrets list`, `secrets set`) never invoke
+them — `absolutejs secrets list` won't accidentally provision a
+Hetzner box.
+
+## Commands
+
+### `secrets`
+
+| Verb | Description |
+| --- | --- |
+| `list` | Print every name + fingerprint from the adapter. Plaintext never appears. |
+| `get <name> [--show]` | Resolve one secret. Default prints `fingerprint=` only; `--show` prints plaintext. |
+| `set <NAME>=<value>` | Put a value via the configured adapter. |
+| `rotate <name>` | Call `broker.rotate(name)` — generates a new value, persists, fires `onRotate` listeners. |
+
+### `env`
+
+| Verb | Description |
+| --- | --- |
+| `push <stage>` | Resolve `secretNames` + `extras` for the stage, atomic-write the remote env file, run `reload`. |
+| `pull <stage>` | Read the remote env file as-is. |
+| `diff <stage> [--all]` | Show added/changed/removed keys between what `push` would write and what's currently on the remote. `--all` also lists unchanged keys. |
+
+### `deploy`
+
+| Verb | Description |
+| --- | --- |
+| `releases <stage>` | List release history for a stage. |
+| `status <stage>` | Current release id + recent history. |
+| `rollback <stage> [--to <id>]` | Roll back to `--to` or the previous release. |
+
+### Global flags
+
+- `--json` — machine-readable output.
+- `--help` — top-level banner.
+
+## Composition with the rotation loop
+
+```bash
+# Rotate STRIPE_KEY in the broker.
+absolutejs secrets rotate STRIPE_KEY
+
+# Push to every deployment that uses it.
+absolutejs env push prod
+absolutejs env push staging
+```
+
+`broker.rotate` fires the in-process `onRotate` listeners (long-lived
+DB clients swap creds in place); `env push` propagates to the remote
+boxes and reloads the services.
+
+## License
+
+BSL-1.1 with named carveout. Change date: 2030-05-31 (Apache 2.0).

package/bin/absolutejs.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+import { main } from '../dist/cli.js';
+process.exit(await main(process.argv.slice(2)));

package/dist/cli.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `absolutejs` binary entry. Parses argv, loads
+ * `absolutejs.config.ts`, dispatches to a verb handler.
+ *
+ * Hand-rolled arg parser — no commander/yargs dep, keeping with the
+ * substrate's zero-peer-dep posture.
+ */
+export type ParsedArgs = {
+    command: string | undefined;
+    verb: string | undefined;
+    positional: string[];
+    flags: Record<string, string | boolean>;
+};
+/**
+ * Parse `argv` into command + verb + positional + flags.
+ *
+ * Conventions:
+ *   absolutejs <command> <verb> <pos...> [--flag] [--flag=value] [--flag value]
+ *
+ * Bare `--flag` becomes `{flag: true}`. `--flag=value` and `--flag value`
+ * both become `{flag: value}`. Positional args don't start with `-`.
+ */
+export declare const parseArgs: (argv: string[]) => ParsedArgs;
+export declare const main: (argv: string[]) => Promise<number>;