@agentuity/cli 0.1.8 → 0.1.10

package/src/cmd/cloud/secret/pull.ts

@@ -1,92 +0,0 @@
-import { z } from 'zod';
-import { join } from 'node:path';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, writeEnvFile, mergeEnvVars } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretPullResponseSchema = z.object({
-	success: z.boolean().describe('Whether pull succeeded'),
-	pulled: z.number().describe('Number of items pulled'),
-	path: z.string().describe('Local file path where secrets were saved'),
-	force: z.boolean().describe('Whether force mode was used'),
-});
-
-export const pullSubcommand = createSubcommand({
-	name: 'pull',
-	description: 'Pull secrets from cloud to local .env file',
-	tags: ['slow', 'requires-auth', 'requires-project'],
-	idempotent: true,
-	examples: [
-		{ command: getCommand('secret pull'), description: 'Run pull command' },
-		{ command: getCommand('secret pull --force'), description: 'Use force option' },
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	prerequisites: ['cloud deploy'],
-	schema: {
-		options: z.object({
-			force: z.boolean().default(false).describe('overwrite local values with cloud values'),
-		}),
-		response: SecretPullResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { opts, apiClient, project, projectDir } = ctx;
-
-		// Fetch project with unmasked secrets
-		const projectData = await tui.spinner('Pulling secrets from cloud', () => {
-			return projectGet(apiClient, { id: project.projectId, mask: false });
-		});
-
-		const cloudSecrets = { ...projectData.env, ...projectData.secrets }; // secret pull with actually do both secrets and env since thats likely what the user would want
-
-		// Target file is always .env
-		const targetEnvPath = await findExistingEnvFile(projectDir);
-		const localEnv = await readEnvFile(targetEnvPath);
-
-		// Merge: cloud values override local if force=true, otherwise keep local
-		let mergedEnv: Record<string, string>;
-		if (opts?.force) {
-			// Cloud values take priority
-			mergedEnv = mergeEnvVars(localEnv, cloudSecrets);
-		} else {
-			// Local values take priority (only add new keys from cloud)
-			mergedEnv = mergeEnvVars(cloudSecrets, localEnv);
-		}
-
-		// Write to .env (skip AGENTUITY_ keys)
-		await writeEnvFile(targetEnvPath, mergedEnv, {
-			skipKeys: Object.keys(mergedEnv).filter((k) => k.startsWith('AGENTUITY_')),
-		});
-
-		// Write AGENTUITY_SDK_KEY to .env if present and missing locally
-		if (projectData.api_key) {
-			const dotEnvPath = join(projectDir, '.env');
-			const dotEnv = await readEnvFile(dotEnvPath);
-
-			if (!dotEnv.AGENTUITY_SDK_KEY) {
-				dotEnv.AGENTUITY_SDK_KEY = projectData.api_key;
-				await writeEnvFile(dotEnvPath, dotEnv, {
-					addComment: (key) => {
-						if (key === 'AGENTUITY_SDK_KEY') {
-							return 'AGENTUITY_SDK_KEY is a sensitive value and should not be committed to version control.';
-						}
-						return null;
-					},
-				});
-				tui.info(`Wrote AGENTUITY_SDK_KEY to ${dotEnvPath}`);
-			}
-		}
-
-		const count = Object.keys(cloudSecrets).length;
-		tui.success(`Pulled ${count} secret${count !== 1 ? 's' : ''} to ${targetEnvPath}`);
-
-		return {
-			success: true,
-			pulled: count,
-			path: targetEnvPath,
-			force: opts?.force ?? false,
-		};
-	},
-});

package/src/cmd/cloud/secret/push.ts

@@ -1,69 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, filterAgentuitySdkKeys } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretPushResponseSchema = z.object({
-	success: z.boolean().describe('Whether push succeeded'),
-	pushed: z.number().describe('Number of items pushed'),
-	source: z.string().describe('Source file path'),
-});
-
-export const pushSubcommand = createSubcommand({
-	name: 'push',
-	description: 'Push secrets from local .env file to cloud',
-	tags: [
-		'mutating',
-		'updates-resource',
-		'slow',
-		'api-intensive',
-		'requires-auth',
-		'requires-project',
-	],
-	idempotent: true,
-	examples: [{ command: getCommand('secret push'), description: 'Run push command' }],
-	requires: { auth: true, project: true, apiClient: true },
-	prerequisites: ['secret set'],
-	schema: {
-		response: SecretPushResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { apiClient, project, projectDir } = ctx;
-
-		// Read local env file
-		const envFilePath = await findExistingEnvFile(projectDir);
-		const localEnv = await readEnvFile(envFilePath);
-
-		// Filter out AGENTUITY_ prefixed keys (don't push SDK keys)
-		const filteredSecrets = filterAgentuitySdkKeys(localEnv);
-
-		if (Object.keys(filteredSecrets).length === 0) {
-			tui.warning('No secrets to push');
-			return {
-				success: false,
-				pushed: 0,
-				source: envFilePath,
-			};
-		}
-
-		// Push to cloud (using secrets field)
-		await tui.spinner('Pushing secrets to cloud', () => {
-			return projectEnvUpdate(apiClient, {
-				id: project.projectId,
-				secrets: filteredSecrets,
-			});
-		});
-
-		const count = Object.keys(filteredSecrets).length;
-		tui.success(`Pushed ${count} secret${count !== 1 ? 's' : ''} to cloud`);
-
-		return {
-			success: true,
-			pushed: count,
-			source: envFilePath,
-		};
-	},
-});

package/src/cmd/cloud/secret/set.ts

@@ -1,76 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import {
-	findExistingEnvFile,
-	readEnvFile,
-	writeEnvFile,
-	filterAgentuitySdkKeys,
-} from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretSetResponseSchema = z.object({
-	success: z.boolean().describe('Whether the operation succeeded'),
-	key: z.string().describe('Secret key name'),
-	path: z.string().describe('Local file path where secret was saved'),
-});
-
-export const setSubcommand = createSubcommand({
-	name: 'set',
-	description: 'Set a secret',
-	tags: ['mutating', 'updates-resource', 'slow', 'requires-auth', 'requires-project'],
-	idempotent: true,
-	examples: [
-		{
-			command: getCommand('secret set DATABASE_URL "postgres://user:pass@host:5432/db"'),
-			description: 'Set the DATABASE_URL environment secret',
-		},
-		{
-			command: getCommand('secret set STRIPE_SECRET_KEY "sk_live_..."'),
-			description: 'Set the STRIPE_SECRET_KEY environment secret',
-		},
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	schema: {
-		args: z.object({
-			key: z.string().min(1, 'key must not be empty').describe('the secret key'),
-			value: z.string().min(1, 'value must not be empty').describe('the secret value'),
-		}),
-		response: SecretSetResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { args, apiClient, project, projectDir } = ctx;
-
-		// Validate key doesn't start with AGENTUITY_
-		if (args.key.startsWith('AGENTUITY_')) {
-			tui.fatal('Cannot set AGENTUITY_ prefixed variables. These are reserved for system use.');
-		}
-
-		// Set in cloud (using secrets field)
-		await tui.spinner('Setting secret in cloud', () => {
-			return projectEnvUpdate(apiClient, {
-				id: project.projectId,
-				secrets: { [args.key]: args.value },
-			});
-		});
-
-		// Update local .env file
-		const envFilePath = await findExistingEnvFile(projectDir);
-		const currentEnv = await readEnvFile(envFilePath);
-		currentEnv[args.key] = args.value;
-
-		// Filter out AGENTUITY_ keys before writing
-		const filteredEnv = filterAgentuitySdkKeys(currentEnv);
-		await writeEnvFile(envFilePath, filteredEnv);
-
-		tui.success(`Secret '${args.key}' set successfully (cloud + ${envFilePath})`);
-
-		return {
-			success: true,
-			key: args.key,
-			path: envFilePath,
-		};
-	},
-});