@agentuity/cli 0.0.50 → 0.0.52

package/dist/cmd/cloud/resource/list.js

@@ -0,0 +1,89 @@
+import { z } from 'zod';
+import { listResources } from '@agentuity/server';
+import { createSubcommand } from '../../../types';
+import * as tui from '../../../tui';
+import { getCatalystAPIClient } from '../../../config';
+import { getCommand } from '../../../command-prefix';
+const ResourceListResponseSchema = z.object({
+    db: z
+        .array(z.object({
+        name: z.string().describe('Database name'),
+        url: z.string().optional().describe('Database connection URL'),
+    }))
+        .describe('List of database resources'),
+    s3: z
+        .array(z.object({
+        bucket_name: z.string().describe('Storage bucket name'),
+        access_key: z.string().optional().describe('S3 access key'),
+        secret_key: z.string().optional().describe('S3 secret key'),
+        region: z.string().optional().describe('S3 region'),
+        endpoint: z.string().optional().describe('S3 endpoint URL'),
+    }))
+        .describe('List of storage resources'),
+});
+export const listSubcommand = createSubcommand({
+    name: 'list',
+    description: 'List cloud resources for an organization',
+    tags: ['read-only', 'fast', 'requires-auth'],
+    aliases: ['ls'],
+    requires: { auth: true, org: true, region: true },
+    idempotent: true,
+    examples: [
+        getCommand('cloud resource list'),
+        getCommand('--json cloud resource list'),
+        getCommand('cloud resource ls'),
+    ],
+    schema: {
+        response: ResourceListResponseSchema,
+    },
+    async handler(ctx) {
+        const { logger, options, orgId, region, config, auth } = ctx;
+        const catalystClient = getCatalystAPIClient(config, logger, auth);
+        const resources = await tui.spinner({
+            message: `Fetching resources for ${orgId} in ${region}`,
+            clearOnSuccess: true,
+            callback: async () => {
+                return listResources(catalystClient, orgId, region);
+            },
+        });
+        // Output based on format
+        if (options.json) {
+            console.log(JSON.stringify(resources, null, 2));
+        }
+        else {
+            // Text table format
+            if (resources.db.length === 0 && resources.s3.length === 0) {
+                tui.info('No resources found');
+                return { db: [], s3: [] };
+            }
+            if (resources.db.length > 0) {
+                tui.info(tui.bold('Databases'));
+                tui.newline();
+                for (const db of resources.db) {
+                    console.log(tui.bold(db.name));
+                    if (db.url)
+                        console.log(` URL:        ${tui.muted(db.url)}`);
+                    tui.newline();
+                }
+            }
+            if (resources.s3.length > 0) {
+                tui.info(tui.bold('Storage'));
+                tui.newline();
+                for (const s3 of resources.s3) {
+                    console.log(tui.bold(s3.bucket_name));
+                    if (s3.access_key)
+                        console.log(` Access Key: ${tui.muted(s3.access_key)}`);
+                    if (s3.secret_key)
+                        console.log(` Secret Key: ${tui.muted(s3.secret_key)}`);
+                    if (s3.region)
+                        console.log(` Region:     ${tui.muted(s3.region)}`);
+                    if (s3.endpoint)
+                        console.log(` Endpoint:   ${tui.muted(s3.endpoint)}`);
+                    tui.newline();
+                }
+            }
+        }
+        return resources;
+    },
+});
+//# sourceMappingURL=list.js.map

package/dist/cmd/cloud/resource/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/resource/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC;SACH,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;KAC9D,CAAC,CACF;SACA,QAAQ,CAAC,4BAA4B,CAAC;IACxC,EAAE,EAAE,CAAC;SACH,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KAC3D,CAAC,CACF;SACA,QAAQ,CAAC,2BAA2B,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;IAC9C,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,0CAA0C;IACvD,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC;IAC5C,OAAO,EAAE,CAAC,IAAI,CAAC;IACf,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACjD,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE;QACT,UAAU,CAAC,qBAAqB,CAAC;QACjC,UAAU,CAAC,4BAA4B,CAAC;QACxC,UAAU,CAAC,mBAAmB,CAAC;KAC/B;IACD,MAAM,EAAE;QACP,QAAQ,EAAE,0BAA0B;KACpC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;QAE7D,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAElE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;YACnC,OAAO,EAAE,0BAA0B,KAAK,OAAO,MAAM,EAAE;YACvD,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACpB,OAAO,aAAa,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;SACD,CAAC,CAAC;QAEH,yBAAyB;QACzB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACP,oBAAoB;YACpB,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;YAC3B,CAAC;YAED,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBAChC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC/B,IAAI,EAAE,CAAC,GAAG;wBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC7D,GAAG,CAAC,OAAO,EAAE,CAAC;gBACf,CAAC;YACF,CAAC;YAED,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;oBACtC,IAAI,EAAE,CAAC,UAAU;wBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC3E,IAAI,EAAE,CAAC,UAAU;wBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC3E,IAAI,EAAE,CAAC,MAAM;wBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnE,IAAI,EAAE,CAAC,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACvE,GAAG,CAAC,OAAO,EAAE,CAAC;gBACf,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/scp/download.js

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+import { createSubcommand } from '../../../types';
+import * as tui from '../../../tui';
+import { getIONHost } from '../../../config';
+import { getCommand } from '../../../command-prefix';
+const args = z.object({
+    source: z.string().describe('the source file'),
+    destination: z.string().optional().describe('the destination file'),
+});
+const options = z.object({
+    identifier: z.string().optional().describe('The project or deployment id to use'),
+});
+export const downloadCommand = createSubcommand({
+    name: 'download',
+    aliases: ['get'],
+    description: 'Download a file using security copy',
+    tags: ['read-only', 'slow', 'requires-auth', 'requires-deployment'],
+    idempotent: true,
+    examples: [
+        `${getCommand('cloud scp download')} /var/log/app.log          # Download to current directory`,
+        `${getCommand('cloud scp download')} /var/log/app.log ./logs/  # Download to specific path`,
+        `${getCommand('cloud scp download')} /app/config.json --identifier=proj_abc123xyz`,
+        `${getCommand('cloud scp download')} ~/logs/*.log ./logs/      # Download multiple files`,
+    ],
+    requires: { apiClient: true, auth: true },
+    optional: { project: true },
+    prerequisites: ['cloud deploy'],
+    schema: {
+        args,
+        options,
+        response: z.object({
+            success: z.boolean().describe('Whether download succeeded'),
+            source: z.string().describe('Remote source path'),
+            destination: z.string().describe('Local destination path'),
+            identifier: z.string().describe('Project or deployment identifier'),
+        }),
+    },
+    async handler(ctx) {
+        const { apiClient, args, opts, project, projectDir, config } = ctx;
+        let identifier = opts?.identifier ?? project?.projectId;
+        if (!identifier) {
+            identifier = await tui.showProjectList(apiClient, true);
+        }
+        const hostname = getIONHost(config);
+        const destination = args.destination ?? projectDir;
+        try {
+            const spawn = Bun.spawn({
+                cmd: ['scp', `${identifier}@${hostname}:${args.source}`, destination],
+                cwd: projectDir,
+                stdout: 'inherit',
+                stderr: 'inherit',
+                stdin: 'inherit',
+            });
+            await spawn.exited;
+            if (spawn.exitCode !== 0) {
+                tui.error(`SCP download failed: ${identifier}@${hostname}:${args.source} -> ${destination} (exit code: ${spawn.exitCode})`);
+                process.exit(spawn.exitCode ?? 1);
+            }
+            return {
+                success: true,
+                source: args.source,
+                destination,
+                identifier,
+            };
+        }
+        catch (error) {
+            tui.error(`SCP download error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            process.exit(1);
+        }
+    },
+});
+//# sourceMappingURL=download.js.map

package/dist/cmd/cloud/scp/download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/scp/download.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CACnE,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;IAC/C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,WAAW,EAAE,qCAAqC;IAClD,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,qBAAqB,CAAC;IACnE,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE;QACT,GAAG,UAAU,CAAC,oBAAoB,CAAC,4DAA4D;QAC/F,GAAG,UAAU,CAAC,oBAAoB,CAAC,wDAAwD;QAC3F,GAAG,UAAU,CAAC,oBAAoB,CAAC,+CAA+C;QAClF,GAAG,UAAU,CAAC,oBAAoB,CAAC,sDAAsD;KACzF;IACD,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;IACzC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAC3B,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,MAAM,EAAE;QACP,IAAI;QACJ,OAAO;QACP,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;SACnE,CAAC;KACF;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QAEnE,IAAI,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,OAAO,EAAE,SAAS,CAAC;QAExD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,UAAU,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC;QAEnD,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBACvB,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,UAAU,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC;gBACrE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,MAAM,CAAC;YAEnB,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,KAAK,CACR,wBAAwB,UAAU,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,OAAO,WAAW,gBAAgB,KAAK,CAAC,QAAQ,GAAG,CAChH,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;YACnC,CAAC;YAED,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW;gBACX,UAAU;aACV,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CACR,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACjF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/scp/index.js

@@ -0,0 +1,10 @@
+import { createCommand } from '../../../types';
+import { downloadCommand } from './download';
+import { uploadCommand } from './upload';
+export const scpSubcommand = createCommand({
+    name: 'scp',
+    description: 'Secure Copy commands',
+    tags: ['slow', 'requires-auth', 'requires-deployment'],
+    subcommands: [downloadCommand, uploadCommand],
+});
+//# sourceMappingURL=index.js.map

package/dist/cmd/cloud/scp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/scp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;IAC1C,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,sBAAsB;IACnC,IAAI,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,qBAAqB,CAAC;IACtD,WAAW,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;CAC7C,CAAC,CAAC"}

package/dist/cmd/cloud/scp/upload.js

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+import { createSubcommand } from '../../../types';
+import * as tui from '../../../tui';
+import { getIONHost } from '../../../config';
+import { getCommand } from '../../../command-prefix';
+const args = z.object({
+    source: z.string().describe('the source file'),
+    destination: z
+        .string()
+        .optional()
+        .describe('the destination file (defaults to . for current directory on remote)'),
+});
+const options = z.object({
+    identifier: z.string().optional().describe('The project or deployment id to use'),
+});
+export const uploadCommand = createSubcommand({
+    name: 'upload',
+    aliases: ['cp', 'put'],
+    description: 'Upload a file using security copy',
+    tags: ['mutating', 'updates-resource', 'slow', 'requires-auth', 'requires-deployment'],
+    idempotent: false,
+    examples: [
+        `${getCommand('cloud scp upload')} ./config.json                # Upload to remote home directory`,
+        `${getCommand('cloud scp upload')} ./config.json /app/config.json # Upload to specific path`,
+        `${getCommand('cloud scp upload')} ./config.json --identifier=proj_abc123xyz`,
+        `${getCommand('cloud scp upload')} ./logs/*.log ~/logs/        # Upload multiple files`,
+    ],
+    requires: { apiClient: true, auth: true },
+    schema: {
+        args,
+        options,
+        response: z.object({
+            success: z.boolean().describe('Whether upload succeeded'),
+            source: z.string().describe('Local source path'),
+            destination: z.string().describe('Remote destination path'),
+            identifier: z.string().describe('Project or deployment identifier'),
+        }),
+    },
+    optional: { project: true },
+    prerequisites: ['cloud deploy'],
+    async handler(ctx) {
+        const { apiClient, args, opts, project, projectDir, config } = ctx;
+        let identifier = opts?.identifier ?? project?.projectId;
+        if (!identifier) {
+            identifier = await tui.showProjectList(apiClient, true);
+        }
+        const hostname = getIONHost(config);
+        const destination = args.destination ?? '.';
+        try {
+            const spawn = Bun.spawn({
+                cmd: ['scp', args.source, `${identifier}@${hostname}:${destination}`],
+                cwd: projectDir,
+                stdout: 'inherit',
+                stderr: 'inherit',
+                stdin: 'inherit',
+            });
+            await spawn.exited;
+            if (spawn.exitCode !== 0) {
+                tui.error(`SCP upload failed: ${args.source} -> ${identifier}@${hostname}:${destination} (exit code: ${spawn.exitCode})`);
+                process.exit(spawn.exitCode ?? 1);
+            }
+            return {
+                success: true,
+                source: args.source,
+                destination,
+                identifier,
+            };
+        }
+        catch (error) {
+            tui.error(`SCP upload error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            process.exit(1);
+        }
+    },
+});
+//# sourceMappingURL=upload.js.map

package/dist/cmd/cloud/scp/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/scp/upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC9C,WAAW,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;IAC7C,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IACtB,WAAW,EAAE,mCAAmC;IAChD,IAAI,EAAE,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,qBAAqB,CAAC;IACtF,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE;QACT,GAAG,UAAU,CAAC,kBAAkB,CAAC,iEAAiE;QAClG,GAAG,UAAU,CAAC,kBAAkB,CAAC,2DAA2D;QAC5F,GAAG,UAAU,CAAC,kBAAkB,CAAC,4CAA4C;QAC7E,GAAG,UAAU,CAAC,kBAAkB,CAAC,sDAAsD;KACvF;IACD,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;IACzC,MAAM,EAAE;QACP,IAAI;QACJ,OAAO;QACP,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;SACnE,CAAC;KACF;IACD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAC3B,aAAa,EAAE,CAAC,cAAc,CAAC;IAE/B,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QAEnE,IAAI,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,OAAO,EAAE,SAAS,CAAC;QAExD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,UAAU,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC;QAE5C,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBACvB,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,UAAU,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;gBACrE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,MAAM,CAAC;YAEnB,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,KAAK,CACR,sBAAsB,IAAI,CAAC,MAAM,OAAO,UAAU,IAAI,QAAQ,IAAI,WAAW,gBAAgB,KAAK,CAAC,QAAQ,GAAG,CAC9G,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;YACnC,CAAC;YAED,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW;gBACX,UAAU;aACV,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/delete.d.ts

@@ -0,0 +1,2 @@
+export declare const deleteSubcommand: import("../../..").SubcommandDefinition;
+//# sourceMappingURL=delete.d.ts.map

package/dist/cmd/cloud/secret/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/delete.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,gBAAgB,yCA2C3B,CAAC"}

package/dist/cmd/cloud/secret/delete.js

@@ -0,0 +1,50 @@
+import { z } from 'zod';
+import { createSubcommand } from '../../../types';
+import * as tui from '../../../tui';
+import { projectEnvDelete } from '@agentuity/server';
+import { findEnvFile, readEnvFile, writeEnvFile, filterAgentuitySdkKeys } from '../../../env-util';
+import { getCommand } from '../../../command-prefix';
+const SecretDeleteResponseSchema = z.object({
+    success: z.boolean().describe('Whether the operation succeeded'),
+    key: z.string().describe('Secret key name that was deleted'),
+    path: z.string().describe('Local file path where secret was removed'),
+});
+export const deleteSubcommand = createSubcommand({
+    name: 'delete',
+    aliases: ['del', 'remove', 'rm'],
+    description: 'Delete a secret',
+    tags: ['destructive', 'deletes-resource', 'slow', 'requires-auth', 'requires-project'],
+    idempotent: true,
+    examples: [getCommand('secret delete OLD_API_KEY'), getCommand('secret rm DATABASE_URL')],
+    requires: { auth: true, project: true, apiClient: true },
+    schema: {
+        args: z.object({
+            key: z.string().describe('the secret key to delete'),
+        }),
+        response: SecretDeleteResponseSchema,
+    },
+    async handler(ctx) {
+        const { args, apiClient, project, projectDir } = ctx;
+        // Delete from cloud (using secrets field)
+        await tui.spinner('Deleting secret from cloud', () => {
+            return projectEnvDelete(apiClient, {
+                id: project.projectId,
+                secrets: [args.key],
+            });
+        });
+        // Update local .env.production file
+        const envFilePath = await findEnvFile(projectDir);
+        const currentEnv = await readEnvFile(envFilePath);
+        delete currentEnv[args.key];
+        // Filter out AGENTUITY_ keys before writing
+        const filteredEnv = filterAgentuitySdkKeys(currentEnv);
+        await writeEnvFile(envFilePath, filteredEnv);
+        tui.success(`Secret '${args.key}' deleted successfully (cloud + ${envFilePath})`);
+        return {
+            success: true,
+            key: args.key,
+            path: envFilePath,
+        };
+    },
+});
+//# sourceMappingURL=delete.js.map

package/dist/cmd/cloud/secret/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAChE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;IAChD,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;IAChC,WAAW,EAAE,iBAAiB;IAC9B,IAAI,EAAE,CAAC,aAAa,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IACtF,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,UAAU,CAAC,wBAAwB,CAAC,CAAC;IACzF,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SACpD,CAAC;QACF,QAAQ,EAAE,0BAA0B;KACpC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAErD,0CAA0C;QAC1C,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpD,OAAO,gBAAgB,CAAC,SAAS,EAAE;gBAClC,EAAE,EAAE,OAAO,CAAC,SAAS;gBACrB,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;aACnB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,oCAAoC;QACpC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5B,4CAA4C;QAC5C,MAAM,WAAW,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE7C,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,mCAAmC,WAAW,GAAG,CAAC,CAAC;QAElF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,WAAW;SACjB,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/get.d.ts

@@ -0,0 +1,2 @@
+export declare const getSubcommand: import("../../..").SubcommandDefinition;
+//# sourceMappingURL=get.d.ts.map

package/dist/cmd/cloud/secret/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/get.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,aAAa,yCA2DxB,CAAC"}

package/dist/cmd/cloud/secret/get.js

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+import { createSubcommand } from '../../../types';
+import * as tui from '../../../tui';
+import { projectGet } from '@agentuity/server';
+import { maskSecret } from '../../../env-util';
+import { getCommand } from '../../../command-prefix';
+import { ErrorCode } from '../../../errors';
+const SecretGetResponseSchema = z.object({
+    key: z.string().describe('Secret key name'),
+    value: z.string().describe('Secret value'),
+});
+export const getSubcommand = createSubcommand({
+    name: 'get',
+    description: 'Get a secret value',
+    tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
+    examples: [
+        getCommand('secret get DATABASE_URL'),
+        getCommand('secret get STRIPE_SECRET_KEY --no-mask'),
+    ],
+    requires: { auth: true, project: true, apiClient: true },
+    schema: {
+        args: z.object({
+            key: z.string().describe('the secret key'),
+        }),
+        options: z.object({
+            mask: z
+                .boolean()
+                .default(!!process.stdout.isTTY)
+                .describe('mask the value in output (default: true in TTY, false otherwise)'),
+        }),
+        response: SecretGetResponseSchema,
+    },
+    idempotent: true,
+    async handler(ctx) {
+        const { args, opts, apiClient, project } = ctx;
+        // Fetch project with unmasked secrets
+        const projectData = await tui.spinner('Fetching secrets', () => {
+            return projectGet(apiClient, { id: project.projectId, mask: false });
+        });
+        // Look for the key in secrets
+        const value = projectData.secrets?.[args.key];
+        if (value === undefined) {
+            tui.fatal(`Secret '${args.key}' not found`, ErrorCode.RESOURCE_NOT_FOUND);
+        }
+        if (process.stdout.isTTY) {
+            // Display the value, masked by default
+            if (opts?.mask) {
+                tui.success(`${args.key}=${maskSecret(value)}`);
+            }
+            else {
+                tui.success(`${args.key}=${value}`);
+            }
+        }
+        else {
+            // Display the value, masked by default
+            if (opts?.mask) {
+                console.log(`${args.key}=${maskSecret(value)}`);
+            }
+            else {
+                console.log(`${args.key}=${value}`);
+            }
+        }
+        return {
+            key: args.key,
+            value,
+        };
+    },
+});
+//# sourceMappingURL=get.js.map

package/dist/cmd/cloud/secret/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;IAC7C,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,oBAAoB;IACjC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IAChE,QAAQ,EAAE;QACT,UAAU,CAAC,yBAAyB,CAAC;QACrC,UAAU,CAAC,wCAAwC,CAAC;KACpD;IACD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;SAC1C,CAAC;QACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC;iBACL,OAAO,EAAE;iBACT,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/B,QAAQ,CAAC,kEAAkE,CAAC;SAC9E,CAAC;QACF,QAAQ,EAAE,uBAAuB;KACjC;IACD,UAAU,EAAE,IAAI;IAEhB,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAE/C,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC9D,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,8BAA8B;QAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,aAAa,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,uCAAuC;YACvC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;gBAChB,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YACrC,CAAC;QACF,CAAC;aAAM,CAAC;YACP,uCAAuC;YACvC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YACrC,CAAC;QACF,CAAC;QAED,OAAO;YACN,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK;SACL,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/import.d.ts

@@ -0,0 +1,2 @@
+export declare const importSubcommand: import("../../..").SubcommandDefinition;
+//# sourceMappingURL=import.d.ts.map

package/dist/cmd/cloud/secret/import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/import.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,gBAAgB,yCAqF3B,CAAC"}

package/dist/cmd/cloud/secret/import.js

@@ -0,0 +1,88 @@
+import { z } from 'zod';
+import { createSubcommand } from '../../../types';
+import * as tui from '../../../tui';
+import { projectEnvUpdate } from '@agentuity/server';
+import { findEnvFile, readEnvFile, writeEnvFile, filterAgentuitySdkKeys, mergeEnvVars, } from '../../../env-util';
+import { getCommand } from '../../../command-prefix';
+const SecretImportResponseSchema = z.object({
+    success: z.boolean().describe('Whether import succeeded'),
+    imported: z.number().describe('Number of items imported'),
+    skipped: z.number().describe('Number of items skipped'),
+    path: z.string().describe('Local file path where secrets were saved'),
+    file: z.string().describe('Source file path'),
+});
+export const importSubcommand = createSubcommand({
+    name: 'import',
+    description: 'Import secrets from a file to cloud and local .env.production',
+    tags: [
+        'mutating',
+        'creates-resource',
+        'slow',
+        'api-intensive',
+        'requires-auth',
+        'requires-project',
+    ],
+    examples: [
+        getCommand('secret import .env.local'),
+        getCommand('secret import .env.production.backup'),
+    ],
+    idempotent: false,
+    requires: { auth: true, project: true, apiClient: true },
+    schema: {
+        args: z.object({
+            file: z.string().describe('path to the .env file to import'),
+        }),
+        response: SecretImportResponseSchema,
+    },
+    async handler(ctx) {
+        const { args, apiClient, project, projectDir } = ctx;
+        // Read the import file
+        const importedSecrets = await readEnvFile(args.file);
+        if (Object.keys(importedSecrets).length === 0) {
+            tui.warning(`No secrets found in ${args.file}`);
+            return {
+                success: false,
+                imported: 0,
+                skipped: 0,
+                path: '',
+                file: args.file,
+            };
+        }
+        // Filter out AGENTUITY_ prefixed keys
+        const filteredSecrets = filterAgentuitySdkKeys(importedSecrets);
+        if (Object.keys(filteredSecrets).length === 0) {
+            tui.warning('No valid secrets to import (all were AGENTUITY_ prefixed)');
+            return {
+                success: false,
+                imported: 0,
+                skipped: Object.keys(importedSecrets).length,
+                path: '',
+                file: args.file,
+            };
+        }
+        // Push to cloud (using secrets field)
+        await tui.spinner('Importing secrets to cloud', () => {
+            return projectEnvUpdate(apiClient, {
+                id: project.projectId,
+                secrets: filteredSecrets,
+            });
+        });
+        // Merge with local .env.production file
+        const localEnvPath = await findEnvFile(projectDir);
+        const localEnv = await readEnvFile(localEnvPath);
+        const mergedEnv = mergeEnvVars(localEnv, filteredSecrets);
+        await writeEnvFile(localEnvPath, mergedEnv, {
+            skipKeys: Object.keys(mergedEnv).filter((k) => k.startsWith('AGENTUITY_')),
+        });
+        const count = Object.keys(filteredSecrets).length;
+        tui.success(`Imported ${count} secret${count !== 1 ? 's' : ''} from ${args.file} to cloud and ${localEnvPath}`);
+        return {
+            success: true,
+            imported: count,
+            skipped: Object.keys(importedSecrets).length - count,
+            path: localEnvPath,
+            file: args.file,
+        };
+    },
+});
+//# sourceMappingURL=import.js.map

package/dist/cmd/cloud/secret/import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACN,WAAW,EACX,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,YAAY,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;IAChD,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,+DAA+D;IAC5E,IAAI,EAAE;QACL,UAAU;QACV,kBAAkB;QAClB,MAAM;QACN,eAAe;QACf,eAAe;QACf,kBAAkB;KAClB;IACD,QAAQ,EAAE;QACT,UAAU,CAAC,0BAA0B,CAAC;QACtC,UAAU,CAAC,sCAAsC,CAAC;KAClD;IACD,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;SAC5D,CAAC;QACF,QAAQ,EAAE,0BAA0B;KACpC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAErD,uBAAuB;QACvB,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;aACf,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,eAAe,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;QAEhE,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM;gBAC5C,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;aACf,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpD,OAAO,gBAAgB,CAAC,SAAS,EAAE;gBAClC,EAAE,EAAE,OAAO,CAAC,SAAS;gBACrB,OAAO,EAAE,eAAe;aACxB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,wCAAwC;QACxC,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAE1D,MAAM,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE;YAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;SAC1E,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;QAClD,GAAG,CAAC,OAAO,CACV,YAAY,KAAK,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,IAAI,iBAAiB,YAAY,EAAE,CAClG,CAAC;QAEF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,KAAK;YACpD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,IAAI,CAAC,IAAI;SACf,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/index.d.ts

@@ -0,0 +1,3 @@
+export declare const command: import("../../..").CommandDefinition;
+export default command;
+//# sourceMappingURL=index.d.ts.map

package/dist/cmd/cloud/secret/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/index.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,OAAO,sCAalB,CAAC;AACH,eAAe,OAAO,CAAC"}

package/dist/cmd/cloud/secret/index.js

@@ -0,0 +1,24 @@
+import { createCommand } from '../../../types';
+import { pullSubcommand } from './pull';
+import { pushSubcommand } from './push';
+import { setSubcommand } from './set';
+import { getSubcommand } from './get';
+import { deleteSubcommand } from './delete';
+import { importSubcommand } from './import';
+import { listSubcommand } from './list';
+export const command = createCommand({
+    name: 'secret',
+    description: 'Manage secrets for your project',
+    tags: ['fast', 'requires-auth', 'requires-project'],
+    subcommands: [
+        listSubcommand,
+        pullSubcommand,
+        pushSubcommand,
+        setSubcommand,
+        getSubcommand,
+        deleteSubcommand,
+        importSubcommand,
+    ],
+});
+export default command;
+//# sourceMappingURL=index.js.map

package/dist/cmd/cloud/secret/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC;IACpC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,iCAAiC;IAC9C,IAAI,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IACnD,WAAW,EAAE;QACZ,cAAc;QACd,cAAc;QACd,cAAc;QACd,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KAChB;CACD,CAAC,CAAC;AACH,eAAe,OAAO,CAAC"}

package/dist/cmd/cloud/secret/list.d.ts

@@ -0,0 +1,2 @@
+export declare const listSubcommand: import("../../..").SubcommandDefinition;
+//# sourceMappingURL=list.d.ts.map

package/dist/cmd/cloud/secret/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/list.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,cAAc,yCAuDzB,CAAC"}

package/dist/cmd/cloud/secret/list.js

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+import { createSubcommand } from '../../../types';
+import * as tui from '../../../tui';
+import { projectGet } from '@agentuity/server';
+import { maskSecret } from '../../../env-util';
+import { getCommand } from '../../../command-prefix';
+const SecretListResponseSchema = z.record(z.string(), z.string().describe('Secret value'));
+export const listSubcommand = createSubcommand({
+    name: 'list',
+    aliases: ['ls'],
+    description: 'List all secrets',
+    tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
+    examples: [getCommand('secret list'), getCommand('secret list --no-mask')],
+    requires: { auth: true, project: true, apiClient: true },
+    idempotent: true,
+    schema: {
+        options: z.object({
+            mask: z
+                .boolean()
+                .default(!!process.stdout.isTTY)
+                .describe('mask the values in output (default: true in TTY for secrets)'),
+        }),
+        response: SecretListResponseSchema,
+    },
+    async handler(ctx) {
+        const { opts, apiClient, project } = ctx;
+        // Fetch project with unmasked secrets
+        const projectData = await tui.spinner('Fetching secrets', () => {
+            return projectGet(apiClient, { id: project.projectId, mask: false });
+        });
+        const secrets = projectData.secrets || {};
+        if (Object.keys(secrets).length === 0) {
+            tui.info('No secrets found');
+            return {};
+        }
+        // Display the secrets
+        if (process.stdout.isTTY) {
+            tui.newline();
+            tui.success(`Secrets (${Object.keys(secrets).length}):`);
+            tui.newline();
+        }
+        const sortedKeys = Object.keys(secrets).sort();
+        // For secrets, masking is enabled by default in TTY (can be disabled with --no-mask)
+        const shouldMask = opts?.mask !== false;
+        for (const key of sortedKeys) {
+            const value = secrets[key];
+            const displayValue = shouldMask ? maskSecret(value) : value;
+            if (process.stdout.isTTY) {
+                console.log(`${tui.bold(key)}=${displayValue}`);
+            }
+            else {
+                console.log(`${key}=${displayValue}`);
+            }
+        }
+        return secrets;
+    },
+});
+//# sourceMappingURL=list.js.map