@agentuity/cli 0.1.8 → 0.1.10

package/src/utils/apt-validator.ts

@@ -0,0 +1,215 @@
+import { StructuredError, type Logger } from '@agentuity/core';
+import type { Config } from '../types';
+import { getAppBaseURL } from '@agentuity/server';
+import { getUserAgent } from '../api';
+import { getDefaultConfigDir } from '../config';
+import { join, dirname } from 'node:path';
+import { mkdir } from 'node:fs/promises';
+import { z } from 'zod';
+
+const AptValidationError = StructuredError('AptValidationError');
+const AptValidationAPIError = StructuredError('AptValidationAPIError')<{
+	status?: number;
+	body?: string;
+}>();
+const AptValidationResponseError = StructuredError('AptValidationResponseError')<{
+	parseError?: string;
+}>();
+
+export interface InvalidPackage {
+	package: string;
+	error: string;
+	requestedVersion?: string;
+	availableVersions?: string[];
+	searchUrl: string;
+}
+
+export interface AptValidationResult {
+	valid: string[];
+	invalid: InvalidPackage[];
+}
+
+const InvalidPackageSchema = z.object({
+	package: z.string(),
+	error: z.string(),
+	requestedVersion: z.string().optional(),
+	availableVersions: z.array(z.string()).optional(),
+	searchUrl: z.string(),
+});
+
+const ValidateAptDependenciesResponseSchema = z.object({
+	success: z.boolean(),
+	data: z
+		.object({
+			valid: z.array(z.string()),
+			invalid: z.array(InvalidPackageSchema),
+		})
+		.optional(),
+	message: z.string().optional(),
+});
+
+const REQUEST_TIMEOUT_MS = 30000; // 30 seconds client-side timeout
+
+const CacheEntrySchema = z.object({
+	timestamp: z.number(),
+});
+
+const ValidationCacheSchema = z.object({
+	version: z.number(),
+	entries: z.record(z.string(), CacheEntrySchema),
+});
+
+type ValidationCache = z.infer<typeof ValidationCacheSchema>;
+
+const CACHE_VERSION = 1;
+const CACHE_TTL_MS = 90 * 24 * 60 * 60 * 1000; // 90 days
+
+function getCachePath(): string {
+	return join(getDefaultConfigDir(), 'dependency-validation.json');
+}
+
+async function loadCache(logger: Logger): Promise<ValidationCache> {
+	const cachePath = getCachePath();
+	try {
+		const file = Bun.file(cachePath);
+		if (await file.exists()) {
+			const content = await file.json();
+			const parsed = ValidationCacheSchema.safeParse(content);
+			if (parsed.success && parsed.data.version === CACHE_VERSION) {
+				return parsed.data;
+			}
+			logger.debug('Cache invalid or version mismatch, starting fresh');
+		}
+	} catch (err) {
+		logger.debug('Failed to load validation cache: %s', err);
+	}
+	return { version: CACHE_VERSION, entries: {} };
+}
+
+async function saveCache(cache: ValidationCache, logger: Logger): Promise<void> {
+	const cachePath = getCachePath();
+	try {
+		await mkdir(dirname(cachePath), { recursive: true });
+		await Bun.write(cachePath, JSON.stringify(cache, null, 2));
+	} catch (err) {
+		logger.debug('Failed to save validation cache: %s', err);
+	}
+}
+
+function isCacheEntryValid(entry: z.infer<typeof CacheEntrySchema>): boolean {
+	return Date.now() - entry.timestamp < CACHE_TTL_MS;
+}
+
+/**
+ * Validate apt dependencies against the Debian package repository.
+ * Uses a local cache to avoid redundant API calls.
+ * Calls the app API which checks packages against snapshot.debian.org.
+ */
+export async function validateAptDependencies(
+	packages: string[],
+	region: string,
+	config: Config | null,
+	logger: Logger
+): Promise<AptValidationResult> {
+	if (packages.length === 0) {
+		return { valid: [], invalid: [] };
+	}
+
+	const cache = await loadCache(logger);
+	const now = Date.now();
+
+	const cachedValid: string[] = [];
+	const uncachedPackages: string[] = [];
+
+	// Check cache for each package (only valid packages are cached)
+	for (const pkg of packages) {
+		const entry = cache.entries[pkg];
+		if (entry && isCacheEntryValid(entry)) {
+			cachedValid.push(pkg);
+			logger.debug('Cache hit (valid): %s', pkg);
+		} else {
+			uncachedPackages.push(pkg);
+			logger.debug('Cache miss: %s', pkg);
+		}
+	}
+
+	// If all packages are cached, return immediately
+	if (uncachedPackages.length === 0) {
+		logger.debug('All %d packages found in cache', packages.length);
+		return { valid: cachedValid, invalid: [] };
+	}
+
+	logger.debug(
+		'Validating %d uncached packages (%d cached)',
+		uncachedPackages.length,
+		packages.length - uncachedPackages.length
+	);
+
+	const appBaseUrl = getAppBaseURL(region, config?.overrides);
+	const url = `${appBaseUrl}/api/cli/validate/apt-dependencies`;
+
+	const response = await fetch(url, {
+		method: 'POST',
+		headers: {
+			'Content-Type': 'application/json',
+			'User-Agent': getUserAgent(config),
+		},
+		body: JSON.stringify({ packages: uncachedPackages }),
+		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+	});
+
+	if (!response.ok) {
+		const text = await response.text();
+		throw new AptValidationAPIError({
+			message: `Failed to validate apt dependencies: HTTP ${response.status}`,
+			status: response.status,
+			body: text,
+		});
+	}
+
+	let json: unknown;
+	try {
+		json = await response.json();
+	} catch (err) {
+		throw new AptValidationResponseError({
+			message: 'Invalid JSON in API response',
+			parseError: err instanceof Error ? err.message : String(err),
+		});
+	}
+
+	const parsed = ValidateAptDependenciesResponseSchema.safeParse(json);
+
+	if (!parsed.success) {
+		throw new AptValidationResponseError({
+			message: 'Invalid API response structure',
+			parseError: parsed.error.message,
+		});
+	}
+
+	const result = parsed.data;
+
+	if (!result.success || !result.data) {
+		throw new AptValidationError({
+			message: result.message ?? 'Failed to validate apt dependencies',
+		});
+	}
+
+	// Update cache with valid results only (don't cache invalid packages)
+	for (const pkg of result.data.valid) {
+		cache.entries[pkg] = { timestamp: now };
+	}
+
+	await saveCache(cache, logger);
+
+	logger.debug(
+		'Apt validation complete: %d valid, %d invalid (from API)',
+		result.data.valid.length,
+		result.data.invalid.length
+	);
+
+	// Combine cached and fresh results
+	return {
+		valid: [...cachedValid, ...result.data.valid],
+		invalid: result.data.invalid,
+	};
+}

package/dist/cmd/cloud/secret/delete.d.ts

@@ -1,2 +0,0 @@
-export declare const deleteSubcommand: import("../../..").SubcommandDefinition;
-//# sourceMappingURL=delete.d.ts.map

package/dist/cmd/cloud/secret/delete.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/delete.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,gBAAgB,yCA8C3B,CAAC"}

package/dist/cmd/cloud/secret/delete.js

@@ -1,53 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvDelete } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, writeEnvFile, filterAgentuitySdkKeys, } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-const SecretDeleteResponseSchema = z.object({
-    success: z.boolean().describe('Whether the operation succeeded'),
-    key: z.string().describe('Secret key name that was deleted'),
-    path: z.string().describe('Local file path where secret was removed'),
-});
-export const deleteSubcommand = createSubcommand({
-    name: 'delete',
-    aliases: ['del', 'remove', 'rm'],
-    description: 'Delete a secret',
-    tags: ['destructive', 'deletes-resource', 'slow', 'requires-auth', 'requires-project'],
-    idempotent: true,
-    examples: [
-        { command: getCommand('secret delete OLD_API_KEY'), description: 'Delete item' },
-        { command: getCommand('secret rm DATABASE_URL'), description: 'Delete item' },
-    ],
-    requires: { auth: true, project: true, apiClient: true },
-    schema: {
-        args: z.object({
-            key: z.string().describe('the secret key to delete'),
-        }),
-        response: SecretDeleteResponseSchema,
-    },
-    async handler(ctx) {
-        const { args, apiClient, project, projectDir } = ctx;
-        // Delete from cloud (using secrets field)
-        await tui.spinner('Deleting secret from cloud', () => {
-            return projectEnvDelete(apiClient, {
-                id: project.projectId,
-                secrets: [args.key],
-            });
-        });
-        // Update local .env file
-        const envFilePath = await findExistingEnvFile(projectDir);
-        const currentEnv = await readEnvFile(envFilePath);
-        delete currentEnv[args.key];
-        // Filter out AGENTUITY_ keys before writing
-        const filteredEnv = filterAgentuitySdkKeys(currentEnv);
-        await writeEnvFile(envFilePath, filteredEnv);
-        tui.success(`Secret '${args.key}' deleted successfully (cloud + ${envFilePath})`);
-        return {
-            success: true,
-            key: args.key,
-            path: envFilePath,
-        };
-    },
-});
-//# sourceMappingURL=delete.js.map

package/dist/cmd/cloud/secret/delete.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACN,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,sBAAsB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAChE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;IAChD,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;IAChC,WAAW,EAAE,iBAAiB;IAC9B,IAAI,EAAE,CAAC,aAAa,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IACtF,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE;QAChF,EAAE,OAAO,EAAE,UAAU,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE;KAC7E;IACD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SACpD,CAAC;QACF,QAAQ,EAAE,0BAA0B;KACpC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAErD,0CAA0C;QAC1C,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpD,OAAO,gBAAgB,CAAC,SAAS,EAAE;gBAClC,EAAE,EAAE,OAAO,CAAC,SAAS;gBACrB,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;aACnB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5B,4CAA4C;QAC5C,MAAM,WAAW,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE7C,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,mCAAmC,WAAW,GAAG,CAAC,CAAC;QAElF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,WAAW;SACjB,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/get.d.ts

@@ -1,2 +0,0 @@
-export declare const getSubcommand: import("../../..").SubcommandDefinition;
-//# sourceMappingURL=get.d.ts.map

package/dist/cmd/cloud/secret/get.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/get.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,aAAa,yCAgExB,CAAC"}

package/dist/cmd/cloud/secret/get.js

@@ -1,73 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { getCommand } from '../../../command-prefix';
-import { ErrorCode } from '../../../errors';
-const SecretGetResponseSchema = z.object({
-    key: z.string().describe('Secret key name'),
-    value: z.string().describe('Secret value'),
-});
-export const getSubcommand = createSubcommand({
-    name: 'get',
-    description: 'Get a secret value',
-    tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
-    examples: [
-        { command: getCommand('secret get DATABASE_URL'), description: 'Get item details' },
-        {
-            command: getCommand('secret get STRIPE_SECRET_KEY --no-mask'),
-            description: 'Use no mask option',
-        },
-    ],
-    requires: { auth: true, project: true, apiClient: true },
-    schema: {
-        args: z.object({
-            key: z.string().describe('the secret key'),
-        }),
-        options: z.object({
-            mask: z
-                .boolean()
-                .default(!!process.stdout.isTTY)
-                .describe('mask the value in output (default: true in TTY, false otherwise)'),
-        }),
-        response: SecretGetResponseSchema,
-    },
-    idempotent: true,
-    async handler(ctx) {
-        const { args, opts, apiClient, project, options } = ctx;
-        // Fetch project with unmasked secrets
-        const projectData = await tui.spinner('Fetching secrets', () => {
-            return projectGet(apiClient, { id: project.projectId, mask: false });
-        });
-        // Look for the key in secrets
-        const value = projectData.secrets?.[args.key];
-        if (value === undefined) {
-            tui.fatal(`Secret '${args.key}' not found`, ErrorCode.RESOURCE_NOT_FOUND);
-        }
-        if (!options.json) {
-            if (process.stdout.isTTY) {
-                // Display the value, masked by default
-                if (opts?.mask) {
-                    tui.success(`${args.key}=${tui.maskSecret(value)}`);
-                }
-                else {
-                    tui.success(`${args.key}=${value}`);
-                }
-            }
-            else {
-                // Display the value, masked by default
-                if (opts?.mask) {
-                    console.log(`${args.key}=${tui.maskSecret(value)}`);
-                }
-                else {
-                    console.log(`${args.key}=${value}`);
-                }
-            }
-        }
-        return {
-            key: args.key,
-            value,
-        };
-    },
-});
-//# sourceMappingURL=get.js.map

package/dist/cmd/cloud/secret/get.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;IAC7C,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,oBAAoB;IACjC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IAChE,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,yBAAyB,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE;QACnF;YACC,OAAO,EAAE,UAAU,CAAC,wCAAwC,CAAC;YAC7D,WAAW,EAAE,oBAAoB;SACjC;KACD;IACD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;SAC1C,CAAC;QACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC;iBACL,OAAO,EAAE;iBACT,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/B,QAAQ,CAAC,kEAAkE,CAAC;SAC9E,CAAC;QACF,QAAQ,EAAE,uBAAuB;KACjC;IACD,UAAU,EAAE,IAAI;IAEhB,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAExD,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC9D,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,8BAA8B;QAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,aAAa,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC1B,uCAAuC;gBACvC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;oBAChB,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;gBACrC,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,uCAAuC;gBACvC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACP,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;gBACrC,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK;SACL,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/import.d.ts

@@ -1,2 +0,0 @@
-export declare const importSubcommand: import("../../..").SubcommandDefinition;
-//# sourceMappingURL=import.d.ts.map

package/dist/cmd/cloud/secret/import.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/import.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,gBAAgB,yCAwF3B,CAAC"}

package/dist/cmd/cloud/secret/import.js

@@ -1,91 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, writeEnvFile, filterAgentuitySdkKeys, mergeEnvVars, } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-const SecretImportResponseSchema = z.object({
-    success: z.boolean().describe('Whether import succeeded'),
-    imported: z.number().describe('Number of items imported'),
-    skipped: z.number().describe('Number of items skipped'),
-    path: z.string().describe('Local file path where secrets were saved'),
-    file: z.string().describe('Source file path'),
-});
-export const importSubcommand = createSubcommand({
-    name: 'import',
-    description: 'Import secrets from a file to cloud and local .env',
-    tags: [
-        'mutating',
-        'creates-resource',
-        'slow',
-        'api-intensive',
-        'requires-auth',
-        'requires-project',
-    ],
-    examples: [
-        { command: getCommand('secret import .env.local'), description: 'Run .env.local command' },
-        {
-            command: getCommand('secret import .env.backup'),
-            description: 'Run .env.backup command',
-        },
-    ],
-    idempotent: false,
-    requires: { auth: true, project: true, apiClient: true },
-    schema: {
-        args: z.object({
-            file: z.string().describe('path to the .env file to import'),
-        }),
-        response: SecretImportResponseSchema,
-    },
-    async handler(ctx) {
-        const { args, apiClient, project, projectDir } = ctx;
-        // Read the import file
-        const importedSecrets = await readEnvFile(args.file);
-        if (Object.keys(importedSecrets).length === 0) {
-            tui.warning(`No secrets found in ${args.file}`);
-            return {
-                success: false,
-                imported: 0,
-                skipped: 0,
-                path: '',
-                file: args.file,
-            };
-        }
-        // Filter out AGENTUITY_ prefixed keys
-        const filteredSecrets = filterAgentuitySdkKeys(importedSecrets);
-        if (Object.keys(filteredSecrets).length === 0) {
-            tui.warning('No valid secrets to import (all were AGENTUITY_ prefixed)');
-            return {
-                success: false,
-                imported: 0,
-                skipped: Object.keys(importedSecrets).length,
-                path: '',
-                file: args.file,
-            };
-        }
-        // Push to cloud (using secrets field)
-        await tui.spinner('Importing secrets to cloud', () => {
-            return projectEnvUpdate(apiClient, {
-                id: project.projectId,
-                secrets: filteredSecrets,
-            });
-        });
-        // Merge with local .env file
-        const localEnvPath = await findExistingEnvFile(projectDir);
-        const localEnv = await readEnvFile(localEnvPath);
-        const mergedEnv = mergeEnvVars(localEnv, filteredSecrets);
-        await writeEnvFile(localEnvPath, mergedEnv, {
-            skipKeys: Object.keys(mergedEnv).filter((k) => k.startsWith('AGENTUITY_')),
-        });
-        const count = Object.keys(filteredSecrets).length;
-        tui.success(`Imported ${count} secret${count !== 1 ? 's' : ''} from ${args.file} to cloud and ${localEnvPath}`);
-        return {
-            success: true,
-            imported: count,
-            skipped: Object.keys(importedSecrets).length - count,
-            path: localEnvPath,
-            file: args.file,
-        };
-    },
-});
-//# sourceMappingURL=import.js.map

package/dist/cmd/cloud/secret/import.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"import.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACN,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,YAAY,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;IAChD,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,oDAAoD;IACjE,IAAI,EAAE;QACL,UAAU;QACV,kBAAkB;QAClB,MAAM;QACN,eAAe;QACf,eAAe;QACf,kBAAkB;KAClB;IACD,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,0BAA0B,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE;QAC1F;YACC,OAAO,EAAE,UAAU,CAAC,2BAA2B,CAAC;YAChD,WAAW,EAAE,yBAAyB;SACtC;KACD;IACD,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;SAC5D,CAAC;QACF,QAAQ,EAAE,0BAA0B;KACpC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAErD,uBAAuB;QACvB,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;aACf,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,eAAe,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;QAEhE,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM;gBAC5C,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;aACf,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpD,OAAO,gBAAgB,CAAC,SAAS,EAAE;gBAClC,EAAE,EAAE,OAAO,CAAC,SAAS;gBACrB,OAAO,EAAE,eAAe;aACxB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,6BAA6B;QAC7B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAE1D,MAAM,YAAY,CAAC,YAAY,EAAE,SAAS,EAAE;YAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;SAC1E,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;QAClD,GAAG,CAAC,OAAO,CACV,YAAY,KAAK,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,IAAI,iBAAiB,YAAY,EAAE,CAClG,CAAC;QAEF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,KAAK;YACpD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,IAAI,CAAC,IAAI;SACf,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/index.d.ts

@@ -1,3 +0,0 @@
-export declare const command: import("../../..").CommandDefinition;
-export default command;
-//# sourceMappingURL=index.d.ts.map

package/dist/cmd/cloud/secret/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,OAAO,sCAqBlB,CAAC;AACH,eAAe,OAAO,CAAC"}

package/dist/cmd/cloud/secret/index.js

@@ -1,33 +0,0 @@
-import { createCommand } from '../../../types';
-import { pullSubcommand } from './pull';
-import { pushSubcommand } from './push';
-import { setSubcommand } from './set';
-import { getSubcommand } from './get';
-import { deleteSubcommand } from './delete';
-import { importSubcommand } from './import';
-import { listSubcommand } from './list';
-import { getCommand } from '../../../command-prefix';
-export const command = createCommand({
-    name: 'secret',
-    aliases: ['secrets'],
-    description: 'Manage secrets for your project',
-    tags: ['fast', 'requires-auth', 'requires-project'],
-    examples: [
-        { command: getCommand('cloud secret list'), description: 'List all secrets' },
-        {
-            command: getCommand('cloud secret set API_KEY "sk_..."'),
-            description: 'Set a secret value',
-        },
-    ],
-    subcommands: [
-        listSubcommand,
-        pullSubcommand,
-        pushSubcommand,
-        setSubcommand,
-        getSubcommand,
-        deleteSubcommand,
-        importSubcommand,
-    ],
-});
-export default command;
-//# sourceMappingURL=index.js.map

package/dist/cmd/cloud/secret/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC;IACpC,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,WAAW,EAAE,iCAAiC;IAC9C,IAAI,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IACnD,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE;QAC7E;YACC,OAAO,EAAE,UAAU,CAAC,mCAAmC,CAAC;YACxD,WAAW,EAAE,oBAAoB;SACjC;KACD;IACD,WAAW,EAAE;QACZ,cAAc;QACd,cAAc;QACd,cAAc;QACd,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KAChB;CACD,CAAC,CAAC;AACH,eAAe,OAAO,CAAC"}

package/dist/cmd/cloud/secret/list.d.ts

@@ -1,2 +0,0 @@
-export declare const listSubcommand: import("../../..").SubcommandDefinition;
-//# sourceMappingURL=list.d.ts.map

package/dist/cmd/cloud/secret/list.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/list.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc,yCA6DzB,CAAC"}

package/dist/cmd/cloud/secret/list.js

@@ -1,65 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { getCommand } from '../../../command-prefix';
-const SecretListResponseSchema = z.record(z.string(), z.string().describe('Secret value'));
-export const listSubcommand = createSubcommand({
-    name: 'list',
-    aliases: ['ls'],
-    description: 'List all secrets',
-    tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
-    examples: [
-        { command: getCommand('secret list'), description: 'List items' },
-        { command: getCommand('secret list --no-mask'), description: 'Use no mask option' },
-    ],
-    requires: { auth: true, project: true, apiClient: true },
-    idempotent: true,
-    schema: {
-        options: z.object({
-            mask: z
-                .boolean()
-                .default(!!process.stdout.isTTY)
-                .describe('mask the values in output (default: true in TTY for secrets)'),
-        }),
-        response: SecretListResponseSchema,
-    },
-    webUrl: (ctx) => `/projects/${encodeURIComponent(ctx.project.projectId)}/settings`,
-    async handler(ctx) {
-        const { opts, apiClient, project, options } = ctx;
-        // Fetch project with unmasked secrets
-        const projectData = await tui.spinner('Fetching secrets', () => {
-            return projectGet(apiClient, { id: project.projectId, mask: false });
-        });
-        const secrets = projectData.secrets || {};
-        // Skip TUI output in JSON mode
-        if (!options.json) {
-            if (Object.keys(secrets).length === 0) {
-                tui.info('No secrets found');
-            }
-            else {
-                // Display the secrets
-                if (process.stdout.isTTY) {
-                    tui.newline();
-                    tui.success(`Secrets (${Object.keys(secrets).length}):`);
-                    tui.newline();
-                }
-                const sortedKeys = Object.keys(secrets).sort();
-                // For secrets, masking is enabled by default in TTY (can be disabled with --no-mask)
-                const shouldMask = opts?.mask !== false;
-                for (const key of sortedKeys) {
-                    const value = secrets[key];
-                    const displayValue = shouldMask ? tui.maskSecret(value) : value;
-                    if (process.stdout.isTTY) {
-                        console.log(`${tui.bold(key)}=${displayValue}`);
-                    }
-                    else {
-                        console.log(`${key}=${displayValue}`);
-                    }
-                }
-            }
-        }
-        return secrets;
-    },
-});
-//# sourceMappingURL=list.js.map

package/dist/cmd/cloud/secret/list.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;AAE3F,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;IAC9C,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,CAAC,IAAI,CAAC;IACf,WAAW,EAAE,kBAAkB;IAC/B,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IAChE,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE;QACjE,EAAE,OAAO,EAAE,UAAU,CAAC,uBAAuB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE;KACnF;IACD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC;iBACL,OAAO,EAAE;iBACT,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/B,QAAQ,CAAC,8DAA8D,CAAC;SAC1E,CAAC;QACF,QAAQ,EAAE,wBAAwB;KAClC;IACD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW;IAElF,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAElD,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC9D,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;QAE1C,+BAA+B;QAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACP,sBAAsB;gBACtB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC1B,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,GAAG,CAAC,OAAO,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;oBACzD,GAAG,CAAC,OAAO,EAAE,CAAC;gBACf,CAAC;gBAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/C,qFAAqF;gBACrF,MAAM,UAAU,GAAG,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC;gBACxC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC3B,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBAChE,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;oBACjD,CAAC;yBAAM,CAAC;wBACP,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC;oBACvC,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/pull.d.ts

@@ -1,2 +0,0 @@
-export declare const pullSubcommand: import("../../..").SubcommandDefinition;
-//# sourceMappingURL=pull.d.ts.map

package/dist/cmd/cloud/secret/pull.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/pull.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,cAAc,yCA4EzB,CAAC"}