@agentuity/cli 0.1.8 → 0.1.10

package/dist/cmd/cloud/secret/pull.js

@@ -1,82 +0,0 @@
-import { z } from 'zod';
-import { join } from 'node:path';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, writeEnvFile, mergeEnvVars } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-const SecretPullResponseSchema = z.object({
-    success: z.boolean().describe('Whether pull succeeded'),
-    pulled: z.number().describe('Number of items pulled'),
-    path: z.string().describe('Local file path where secrets were saved'),
-    force: z.boolean().describe('Whether force mode was used'),
-});
-export const pullSubcommand = createSubcommand({
-    name: 'pull',
-    description: 'Pull secrets from cloud to local .env file',
-    tags: ['slow', 'requires-auth', 'requires-project'],
-    idempotent: true,
-    examples: [
-        { command: getCommand('secret pull'), description: 'Run pull command' },
-        { command: getCommand('secret pull --force'), description: 'Use force option' },
-    ],
-    requires: { auth: true, project: true, apiClient: true },
-    prerequisites: ['cloud deploy'],
-    schema: {
-        options: z.object({
-            force: z.boolean().default(false).describe('overwrite local values with cloud values'),
-        }),
-        response: SecretPullResponseSchema,
-    },
-    async handler(ctx) {
-        const { opts, apiClient, project, projectDir } = ctx;
-        // Fetch project with unmasked secrets
-        const projectData = await tui.spinner('Pulling secrets from cloud', () => {
-            return projectGet(apiClient, { id: project.projectId, mask: false });
-        });
-        const cloudSecrets = { ...projectData.env, ...projectData.secrets }; // secret pull with actually do both secrets and env since thats likely what the user would want
-        // Target file is always .env
-        const targetEnvPath = await findExistingEnvFile(projectDir);
-        const localEnv = await readEnvFile(targetEnvPath);
-        // Merge: cloud values override local if force=true, otherwise keep local
-        let mergedEnv;
-        if (opts?.force) {
-            // Cloud values take priority
-            mergedEnv = mergeEnvVars(localEnv, cloudSecrets);
-        }
-        else {
-            // Local values take priority (only add new keys from cloud)
-            mergedEnv = mergeEnvVars(cloudSecrets, localEnv);
-        }
-        // Write to .env (skip AGENTUITY_ keys)
-        await writeEnvFile(targetEnvPath, mergedEnv, {
-            skipKeys: Object.keys(mergedEnv).filter((k) => k.startsWith('AGENTUITY_')),
-        });
-        // Write AGENTUITY_SDK_KEY to .env if present and missing locally
-        if (projectData.api_key) {
-            const dotEnvPath = join(projectDir, '.env');
-            const dotEnv = await readEnvFile(dotEnvPath);
-            if (!dotEnv.AGENTUITY_SDK_KEY) {
-                dotEnv.AGENTUITY_SDK_KEY = projectData.api_key;
-                await writeEnvFile(dotEnvPath, dotEnv, {
-                    addComment: (key) => {
-                        if (key === 'AGENTUITY_SDK_KEY') {
-                            return 'AGENTUITY_SDK_KEY is a sensitive value and should not be committed to version control.';
-                        }
-                        return null;
-                    },
-                });
-                tui.info(`Wrote AGENTUITY_SDK_KEY to ${dotEnvPath}`);
-            }
-        }
-        const count = Object.keys(cloudSecrets).length;
-        tui.success(`Pulled ${count} secret${count !== 1 ? 's' : ''} to ${targetEnvPath}`);
-        return {
-            success: true,
-            pulled: count,
-            path: targetEnvPath,
-            force: opts?.force ?? false,
-        };
-    },
-});
-//# sourceMappingURL=pull.js.map

package/dist/cmd/cloud/secret/pull.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pull.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/pull.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;IAC9C,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,4CAA4C;IACzD,IAAI,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IACnD,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE;QACvE,EAAE,OAAO,EAAE,UAAU,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE;KAC/E;IACD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,MAAM,EAAE;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;SACtF,CAAC;QACF,QAAQ,EAAE,wBAAwB;KAClC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAErD,sCAAsC;QACtC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACxE,OAAO,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,gGAAgG;QAErK,6BAA6B;QAC7B,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;QAElD,yEAAyE;QACzE,IAAI,SAAiC,CAAC;QACtC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,6BAA6B;YAC7B,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACP,4DAA4D;YAC5D,SAAS,GAAG,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,uCAAuC;QACvC,MAAM,YAAY,CAAC,aAAa,EAAE,SAAS,EAAE;YAC5C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;SAC1E,CAAC,CAAC;QAEH,iEAAiE;QACjE,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;YAE7C,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC/B,MAAM,CAAC,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC;gBAC/C,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE;oBACtC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;wBACnB,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;4BACjC,OAAO,wFAAwF,CAAC;wBACjG,CAAC;wBACD,OAAO,IAAI,CAAC;oBACb,CAAC;iBACD,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC;YACtD,CAAC;QACF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,aAAa,EAAE,CAAC,CAAC;QAEnF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK;SAC3B,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/push.d.ts

@@ -1,2 +0,0 @@
-export declare const pushSubcommand: import("../../..").SubcommandDefinition;
-//# sourceMappingURL=push.d.ts.map

package/dist/cmd/cloud/secret/push.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/push.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,cAAc,yCAuDzB,CAAC"}

package/dist/cmd/cloud/secret/push.js

@@ -1,61 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, filterAgentuitySdkKeys } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-const SecretPushResponseSchema = z.object({
-    success: z.boolean().describe('Whether push succeeded'),
-    pushed: z.number().describe('Number of items pushed'),
-    source: z.string().describe('Source file path'),
-});
-export const pushSubcommand = createSubcommand({
-    name: 'push',
-    description: 'Push secrets from local .env file to cloud',
-    tags: [
-        'mutating',
-        'updates-resource',
-        'slow',
-        'api-intensive',
-        'requires-auth',
-        'requires-project',
-    ],
-    idempotent: true,
-    examples: [{ command: getCommand('secret push'), description: 'Run push command' }],
-    requires: { auth: true, project: true, apiClient: true },
-    prerequisites: ['secret set'],
-    schema: {
-        response: SecretPushResponseSchema,
-    },
-    async handler(ctx) {
-        const { apiClient, project, projectDir } = ctx;
-        // Read local env file
-        const envFilePath = await findExistingEnvFile(projectDir);
-        const localEnv = await readEnvFile(envFilePath);
-        // Filter out AGENTUITY_ prefixed keys (don't push SDK keys)
-        const filteredSecrets = filterAgentuitySdkKeys(localEnv);
-        if (Object.keys(filteredSecrets).length === 0) {
-            tui.warning('No secrets to push');
-            return {
-                success: false,
-                pushed: 0,
-                source: envFilePath,
-            };
-        }
-        // Push to cloud (using secrets field)
-        await tui.spinner('Pushing secrets to cloud', () => {
-            return projectEnvUpdate(apiClient, {
-                id: project.projectId,
-                secrets: filteredSecrets,
-            });
-        });
-        const count = Object.keys(filteredSecrets).length;
-        tui.success(`Pushed ${count} secret${count !== 1 ? 's' : ''} to cloud`);
-        return {
-            success: true,
-            pushed: count,
-            source: envFilePath,
-        };
-    },
-});
-//# sourceMappingURL=push.js.map

package/dist/cmd/cloud/secret/push.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"push.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/push.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;IAC9C,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,4CAA4C;IACzD,IAAI,EAAE;QACL,UAAU;QACV,kBAAkB;QAClB,MAAM;QACN,eAAe;QACf,eAAe;QACf,kBAAkB;KAClB;IACD,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACnF,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,aAAa,EAAE,CAAC,YAAY,CAAC;IAC7B,MAAM,EAAE;QACP,QAAQ,EAAE,wBAAwB;KAClC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAE/C,sBAAsB;QACtB,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAEhD,4DAA4D;QAC5D,MAAM,eAAe,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAEzD,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,WAAW;aACnB,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,GAAG,CAAC,OAAO,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClD,OAAO,gBAAgB,CAAC,SAAS,EAAE;gBAClC,EAAE,EAAE,OAAO,CAAC,SAAS;gBACrB,OAAO,EAAE,eAAe;aACxB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;QAClD,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAExE,OAAO;YACN,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,WAAW;SACnB,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/secret/set.d.ts

@@ -1,2 +0,0 @@
-export declare const setSubcommand: import("../../..").SubcommandDefinition;
-//# sourceMappingURL=set.d.ts.map

package/dist/cmd/cloud/secret/set.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"set.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/set.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,aAAa,yCAyDxB,CAAC"}

package/dist/cmd/cloud/secret/set.js

@@ -1,63 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, writeEnvFile, filterAgentuitySdkKeys, } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-const SecretSetResponseSchema = z.object({
-    success: z.boolean().describe('Whether the operation succeeded'),
-    key: z.string().describe('Secret key name'),
-    path: z.string().describe('Local file path where secret was saved'),
-});
-export const setSubcommand = createSubcommand({
-    name: 'set',
-    description: 'Set a secret',
-    tags: ['mutating', 'updates-resource', 'slow', 'requires-auth', 'requires-project'],
-    idempotent: true,
-    examples: [
-        {
-            command: getCommand('secret set DATABASE_URL "postgres://user:pass@host:5432/db"'),
-            description: 'Set the DATABASE_URL environment secret',
-        },
-        {
-            command: getCommand('secret set STRIPE_SECRET_KEY "sk_live_..."'),
-            description: 'Set the STRIPE_SECRET_KEY environment secret',
-        },
-    ],
-    requires: { auth: true, project: true, apiClient: true },
-    schema: {
-        args: z.object({
-            key: z.string().min(1, 'key must not be empty').describe('the secret key'),
-            value: z.string().min(1, 'value must not be empty').describe('the secret value'),
-        }),
-        response: SecretSetResponseSchema,
-    },
-    async handler(ctx) {
-        const { args, apiClient, project, projectDir } = ctx;
-        // Validate key doesn't start with AGENTUITY_
-        if (args.key.startsWith('AGENTUITY_')) {
-            tui.fatal('Cannot set AGENTUITY_ prefixed variables. These are reserved for system use.');
-        }
-        // Set in cloud (using secrets field)
-        await tui.spinner('Setting secret in cloud', () => {
-            return projectEnvUpdate(apiClient, {
-                id: project.projectId,
-                secrets: { [args.key]: args.value },
-            });
-        });
-        // Update local .env file
-        const envFilePath = await findExistingEnvFile(projectDir);
-        const currentEnv = await readEnvFile(envFilePath);
-        currentEnv[args.key] = args.value;
-        // Filter out AGENTUITY_ keys before writing
-        const filteredEnv = filterAgentuitySdkKeys(currentEnv);
-        await writeEnvFile(envFilePath, filteredEnv);
-        tui.success(`Secret '${args.key}' set successfully (cloud + ${envFilePath})`);
-        return {
-            success: true,
-            key: args.key,
-            path: envFilePath,
-        };
-    },
-});
-//# sourceMappingURL=set.js.map

package/dist/cmd/cloud/secret/set.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"set.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/secret/set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACN,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,sBAAsB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAChE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACnE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;IAC7C,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,cAAc;IAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC;IACnF,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,UAAU,CAAC,6DAA6D,CAAC;YAClF,WAAW,EAAE,yCAAyC;SACtD;QACD;YACC,OAAO,EAAE,UAAU,CAAC,4CAA4C,CAAC;YACjE,WAAW,EAAE,8CAA8C;SAC3D;KACD;IACD,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IACxD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;SAChF,CAAC;QACF,QAAQ,EAAE,uBAAuB;KACjC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAErD,6CAA6C;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAC3F,CAAC;QAED,qCAAqC;QACrC,MAAM,GAAG,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACjD,OAAO,gBAAgB,CAAC,SAAS,EAAE;gBAClC,EAAE,EAAE,OAAO,CAAC,SAAS;gBACrB,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE;aACnC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAElC,4CAA4C;QAC5C,MAAM,WAAW,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE7C,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,+BAA+B,WAAW,GAAG,CAAC,CAAC;QAE9E,OAAO;YACN,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,WAAW;SACjB,CAAC;IACH,CAAC;CACD,CAAC,CAAC"}

package/src/cmd/cloud/secret/delete.ts

@@ -1,65 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvDelete } from '@agentuity/server';
-import {
-	findExistingEnvFile,
-	readEnvFile,
-	writeEnvFile,
-	filterAgentuitySdkKeys,
-} from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretDeleteResponseSchema = z.object({
-	success: z.boolean().describe('Whether the operation succeeded'),
-	key: z.string().describe('Secret key name that was deleted'),
-	path: z.string().describe('Local file path where secret was removed'),
-});
-
-export const deleteSubcommand = createSubcommand({
-	name: 'delete',
-	aliases: ['del', 'remove', 'rm'],
-	description: 'Delete a secret',
-	tags: ['destructive', 'deletes-resource', 'slow', 'requires-auth', 'requires-project'],
-	idempotent: true,
-	examples: [
-		{ command: getCommand('secret delete OLD_API_KEY'), description: 'Delete item' },
-		{ command: getCommand('secret rm DATABASE_URL'), description: 'Delete item' },
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	schema: {
-		args: z.object({
-			key: z.string().describe('the secret key to delete'),
-		}),
-		response: SecretDeleteResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { args, apiClient, project, projectDir } = ctx;
-
-		// Delete from cloud (using secrets field)
-		await tui.spinner('Deleting secret from cloud', () => {
-			return projectEnvDelete(apiClient, {
-				id: project.projectId,
-				secrets: [args.key],
-			});
-		});
-
-		// Update local .env file
-		const envFilePath = await findExistingEnvFile(projectDir);
-		const currentEnv = await readEnvFile(envFilePath);
-		delete currentEnv[args.key];
-
-		// Filter out AGENTUITY_ keys before writing
-		const filteredEnv = filterAgentuitySdkKeys(currentEnv);
-		await writeEnvFile(envFilePath, filteredEnv);
-
-		tui.success(`Secret '${args.key}' deleted successfully (cloud + ${envFilePath})`);
-
-		return {
-			success: true,
-			key: args.key,
-			path: envFilePath,
-		};
-	},
-});

package/src/cmd/cloud/secret/get.ts

@@ -1,77 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { getCommand } from '../../../command-prefix';
-import { ErrorCode } from '../../../errors';
-
-const SecretGetResponseSchema = z.object({
-	key: z.string().describe('Secret key name'),
-	value: z.string().describe('Secret value'),
-});
-
-export const getSubcommand = createSubcommand({
-	name: 'get',
-	description: 'Get a secret value',
-	tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
-	examples: [
-		{ command: getCommand('secret get DATABASE_URL'), description: 'Get item details' },
-		{
-			command: getCommand('secret get STRIPE_SECRET_KEY --no-mask'),
-			description: 'Use no mask option',
-		},
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	schema: {
-		args: z.object({
-			key: z.string().describe('the secret key'),
-		}),
-		options: z.object({
-			mask: z
-				.boolean()
-				.default(!!process.stdout.isTTY)
-				.describe('mask the value in output (default: true in TTY, false otherwise)'),
-		}),
-		response: SecretGetResponseSchema,
-	},
-	idempotent: true,
-
-	async handler(ctx) {
-		const { args, opts, apiClient, project, options } = ctx;
-
-		// Fetch project with unmasked secrets
-		const projectData = await tui.spinner('Fetching secrets', () => {
-			return projectGet(apiClient, { id: project.projectId, mask: false });
-		});
-
-		// Look for the key in secrets
-		const value = projectData.secrets?.[args.key];
-
-		if (value === undefined) {
-			tui.fatal(`Secret '${args.key}' not found`, ErrorCode.RESOURCE_NOT_FOUND);
-		}
-
-		if (!options.json) {
-			if (process.stdout.isTTY) {
-				// Display the value, masked by default
-				if (opts?.mask) {
-					tui.success(`${args.key}=${tui.maskSecret(value)}`);
-				} else {
-					tui.success(`${args.key}=${value}`);
-				}
-			} else {
-				// Display the value, masked by default
-				if (opts?.mask) {
-					console.log(`${args.key}=${tui.maskSecret(value)}`);
-				} else {
-					console.log(`${args.key}=${value}`);
-				}
-			}
-		}
-
-		return {
-			key: args.key,
-			value,
-		};
-	},
-});

package/src/cmd/cloud/secret/import.ts

@@ -1,110 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import {
-	findExistingEnvFile,
-	readEnvFile,
-	writeEnvFile,
-	filterAgentuitySdkKeys,
-	mergeEnvVars,
-} from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretImportResponseSchema = z.object({
-	success: z.boolean().describe('Whether import succeeded'),
-	imported: z.number().describe('Number of items imported'),
-	skipped: z.number().describe('Number of items skipped'),
-	path: z.string().describe('Local file path where secrets were saved'),
-	file: z.string().describe('Source file path'),
-});
-
-export const importSubcommand = createSubcommand({
-	name: 'import',
-	description: 'Import secrets from a file to cloud and local .env',
-	tags: [
-		'mutating',
-		'creates-resource',
-		'slow',
-		'api-intensive',
-		'requires-auth',
-		'requires-project',
-	],
-	examples: [
-		{ command: getCommand('secret import .env.local'), description: 'Run .env.local command' },
-		{
-			command: getCommand('secret import .env.backup'),
-			description: 'Run .env.backup command',
-		},
-	],
-	idempotent: false,
-	requires: { auth: true, project: true, apiClient: true },
-	schema: {
-		args: z.object({
-			file: z.string().describe('path to the .env file to import'),
-		}),
-		response: SecretImportResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { args, apiClient, project, projectDir } = ctx;
-
-		// Read the import file
-		const importedSecrets = await readEnvFile(args.file);
-
-		if (Object.keys(importedSecrets).length === 0) {
-			tui.warning(`No secrets found in ${args.file}`);
-			return {
-				success: false,
-				imported: 0,
-				skipped: 0,
-				path: '',
-				file: args.file,
-			};
-		}
-
-		// Filter out AGENTUITY_ prefixed keys
-		const filteredSecrets = filterAgentuitySdkKeys(importedSecrets);
-
-		if (Object.keys(filteredSecrets).length === 0) {
-			tui.warning('No valid secrets to import (all were AGENTUITY_ prefixed)');
-			return {
-				success: false,
-				imported: 0,
-				skipped: Object.keys(importedSecrets).length,
-				path: '',
-				file: args.file,
-			};
-		}
-
-		// Push to cloud (using secrets field)
-		await tui.spinner('Importing secrets to cloud', () => {
-			return projectEnvUpdate(apiClient, {
-				id: project.projectId,
-				secrets: filteredSecrets,
-			});
-		});
-
-		// Merge with local .env file
-		const localEnvPath = await findExistingEnvFile(projectDir);
-		const localEnv = await readEnvFile(localEnvPath);
-		const mergedEnv = mergeEnvVars(localEnv, filteredSecrets);
-
-		await writeEnvFile(localEnvPath, mergedEnv, {
-			skipKeys: Object.keys(mergedEnv).filter((k) => k.startsWith('AGENTUITY_')),
-		});
-
-		const count = Object.keys(filteredSecrets).length;
-		tui.success(
-			`Imported ${count} secret${count !== 1 ? 's' : ''} from ${args.file} to cloud and ${localEnvPath}`
-		);
-
-		return {
-			success: true,
-			imported: count,
-			skipped: Object.keys(importedSecrets).length - count,
-			path: localEnvPath,
-			file: args.file,
-		};
-	},
-});

package/src/cmd/cloud/secret/index.ts

@@ -1,33 +0,0 @@
-import { createCommand } from '../../../types';
-import { pullSubcommand } from './pull';
-import { pushSubcommand } from './push';
-import { setSubcommand } from './set';
-import { getSubcommand } from './get';
-import { deleteSubcommand } from './delete';
-import { importSubcommand } from './import';
-import { listSubcommand } from './list';
-import { getCommand } from '../../../command-prefix';
-
-export const command = createCommand({
-	name: 'secret',
-	aliases: ['secrets'],
-	description: 'Manage secrets for your project',
-	tags: ['fast', 'requires-auth', 'requires-project'],
-	examples: [
-		{ command: getCommand('cloud secret list'), description: 'List all secrets' },
-		{
-			command: getCommand('cloud secret set API_KEY "sk_..."'),
-			description: 'Set a secret value',
-		},
-	],
-	subcommands: [
-		listSubcommand,
-		pullSubcommand,
-		pushSubcommand,
-		setSubcommand,
-		getSubcommand,
-		deleteSubcommand,
-		importSubcommand,
-	],
-});
-export default command;

package/src/cmd/cloud/secret/list.ts

@@ -1,70 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { getCommand } from '../../../command-prefix';
-
-const SecretListResponseSchema = z.record(z.string(), z.string().describe('Secret value'));
-
-export const listSubcommand = createSubcommand({
-	name: 'list',
-	aliases: ['ls'],
-	description: 'List all secrets',
-	tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
-	examples: [
-		{ command: getCommand('secret list'), description: 'List items' },
-		{ command: getCommand('secret list --no-mask'), description: 'Use no mask option' },
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	idempotent: true,
-	schema: {
-		options: z.object({
-			mask: z
-				.boolean()
-				.default(!!process.stdout.isTTY)
-				.describe('mask the values in output (default: true in TTY for secrets)'),
-		}),
-		response: SecretListResponseSchema,
-	},
-	webUrl: (ctx) => `/projects/${encodeURIComponent(ctx.project.projectId)}/settings`,
-
-	async handler(ctx) {
-		const { opts, apiClient, project, options } = ctx;
-
-		// Fetch project with unmasked secrets
-		const projectData = await tui.spinner('Fetching secrets', () => {
-			return projectGet(apiClient, { id: project.projectId, mask: false });
-		});
-
-		const secrets = projectData.secrets || {};
-
-		// Skip TUI output in JSON mode
-		if (!options.json) {
-			if (Object.keys(secrets).length === 0) {
-				tui.info('No secrets found');
-			} else {
-				// Display the secrets
-				if (process.stdout.isTTY) {
-					tui.newline();
-					tui.success(`Secrets (${Object.keys(secrets).length}):`);
-					tui.newline();
-				}
-
-				const sortedKeys = Object.keys(secrets).sort();
-				// For secrets, masking is enabled by default in TTY (can be disabled with --no-mask)
-				const shouldMask = opts?.mask !== false;
-				for (const key of sortedKeys) {
-					const value = secrets[key];
-					const displayValue = shouldMask ? tui.maskSecret(value) : value;
-					if (process.stdout.isTTY) {
-						console.log(`${tui.bold(key)}=${displayValue}`);
-					} else {
-						console.log(`${key}=${displayValue}`);
-					}
-				}
-			}
-		}
-
-		return secrets;
-	},
-});