@agentuity/cli 0.1.9 → 0.1.10

package/src/cmd/cloud/secret/get.ts

@@ -1,77 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { getCommand } from '../../../command-prefix';
-import { ErrorCode } from '../../../errors';
-
-const SecretGetResponseSchema = z.object({
-	key: z.string().describe('Secret key name'),
-	value: z.string().describe('Secret value'),
-});
-
-export const getSubcommand = createSubcommand({
-	name: 'get',
-	description: 'Get a secret value',
-	tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
-	examples: [
-		{ command: getCommand('secret get DATABASE_URL'), description: 'Get item details' },
-		{
-			command: getCommand('secret get STRIPE_SECRET_KEY --no-mask'),
-			description: 'Use no mask option',
-		},
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	schema: {
-		args: z.object({
-			key: z.string().describe('the secret key'),
-		}),
-		options: z.object({
-			mask: z
-				.boolean()
-				.default(!!process.stdout.isTTY)
-				.describe('mask the value in output (default: true in TTY, false otherwise)'),
-		}),
-		response: SecretGetResponseSchema,
-	},
-	idempotent: true,
-
-	async handler(ctx) {
-		const { args, opts, apiClient, project, options } = ctx;
-
-		// Fetch project with unmasked secrets
-		const projectData = await tui.spinner('Fetching secrets', () => {
-			return projectGet(apiClient, { id: project.projectId, mask: false });
-		});
-
-		// Look for the key in secrets
-		const value = projectData.secrets?.[args.key];
-
-		if (value === undefined) {
-			tui.fatal(`Secret '${args.key}' not found`, ErrorCode.RESOURCE_NOT_FOUND);
-		}
-
-		if (!options.json) {
-			if (process.stdout.isTTY) {
-				// Display the value, masked by default
-				if (opts?.mask) {
-					tui.success(`${args.key}=${tui.maskSecret(value)}`);
-				} else {
-					tui.success(`${args.key}=${value}`);
-				}
-			} else {
-				// Display the value, masked by default
-				if (opts?.mask) {
-					console.log(`${args.key}=${tui.maskSecret(value)}`);
-				} else {
-					console.log(`${args.key}=${value}`);
-				}
-			}
-		}
-
-		return {
-			key: args.key,
-			value,
-		};
-	},
-});

package/src/cmd/cloud/secret/import.ts

@@ -1,110 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import {
-	findExistingEnvFile,
-	readEnvFile,
-	writeEnvFile,
-	filterAgentuitySdkKeys,
-	mergeEnvVars,
-} from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretImportResponseSchema = z.object({
-	success: z.boolean().describe('Whether import succeeded'),
-	imported: z.number().describe('Number of items imported'),
-	skipped: z.number().describe('Number of items skipped'),
-	path: z.string().describe('Local file path where secrets were saved'),
-	file: z.string().describe('Source file path'),
-});
-
-export const importSubcommand = createSubcommand({
-	name: 'import',
-	description: 'Import secrets from a file to cloud and local .env',
-	tags: [
-		'mutating',
-		'creates-resource',
-		'slow',
-		'api-intensive',
-		'requires-auth',
-		'requires-project',
-	],
-	examples: [
-		{ command: getCommand('secret import .env.local'), description: 'Run .env.local command' },
-		{
-			command: getCommand('secret import .env.backup'),
-			description: 'Run .env.backup command',
-		},
-	],
-	idempotent: false,
-	requires: { auth: true, project: true, apiClient: true },
-	schema: {
-		args: z.object({
-			file: z.string().describe('path to the .env file to import'),
-		}),
-		response: SecretImportResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { args, apiClient, project, projectDir } = ctx;
-
-		// Read the import file
-		const importedSecrets = await readEnvFile(args.file);
-
-		if (Object.keys(importedSecrets).length === 0) {
-			tui.warning(`No secrets found in ${args.file}`);
-			return {
-				success: false,
-				imported: 0,
-				skipped: 0,
-				path: '',
-				file: args.file,
-			};
-		}
-
-		// Filter out AGENTUITY_ prefixed keys
-		const filteredSecrets = filterAgentuitySdkKeys(importedSecrets);
-
-		if (Object.keys(filteredSecrets).length === 0) {
-			tui.warning('No valid secrets to import (all were AGENTUITY_ prefixed)');
-			return {
-				success: false,
-				imported: 0,
-				skipped: Object.keys(importedSecrets).length,
-				path: '',
-				file: args.file,
-			};
-		}
-
-		// Push to cloud (using secrets field)
-		await tui.spinner('Importing secrets to cloud', () => {
-			return projectEnvUpdate(apiClient, {
-				id: project.projectId,
-				secrets: filteredSecrets,
-			});
-		});
-
-		// Merge with local .env file
-		const localEnvPath = await findExistingEnvFile(projectDir);
-		const localEnv = await readEnvFile(localEnvPath);
-		const mergedEnv = mergeEnvVars(localEnv, filteredSecrets);
-
-		await writeEnvFile(localEnvPath, mergedEnv, {
-			skipKeys: Object.keys(mergedEnv).filter((k) => k.startsWith('AGENTUITY_')),
-		});
-
-		const count = Object.keys(filteredSecrets).length;
-		tui.success(
-			`Imported ${count} secret${count !== 1 ? 's' : ''} from ${args.file} to cloud and ${localEnvPath}`
-		);
-
-		return {
-			success: true,
-			imported: count,
-			skipped: Object.keys(importedSecrets).length - count,
-			path: localEnvPath,
-			file: args.file,
-		};
-	},
-});

package/src/cmd/cloud/secret/index.ts

@@ -1,33 +0,0 @@
-import { createCommand } from '../../../types';
-import { pullSubcommand } from './pull';
-import { pushSubcommand } from './push';
-import { setSubcommand } from './set';
-import { getSubcommand } from './get';
-import { deleteSubcommand } from './delete';
-import { importSubcommand } from './import';
-import { listSubcommand } from './list';
-import { getCommand } from '../../../command-prefix';
-
-export const command = createCommand({
-	name: 'secret',
-	aliases: ['secrets'],
-	description: 'Manage secrets for your project',
-	tags: ['fast', 'requires-auth', 'requires-project'],
-	examples: [
-		{ command: getCommand('cloud secret list'), description: 'List all secrets' },
-		{
-			command: getCommand('cloud secret set API_KEY "sk_..."'),
-			description: 'Set a secret value',
-		},
-	],
-	subcommands: [
-		listSubcommand,
-		pullSubcommand,
-		pushSubcommand,
-		setSubcommand,
-		getSubcommand,
-		deleteSubcommand,
-		importSubcommand,
-	],
-});
-export default command;

package/src/cmd/cloud/secret/list.ts

@@ -1,70 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { getCommand } from '../../../command-prefix';
-
-const SecretListResponseSchema = z.record(z.string(), z.string().describe('Secret value'));
-
-export const listSubcommand = createSubcommand({
-	name: 'list',
-	aliases: ['ls'],
-	description: 'List all secrets',
-	tags: ['read-only', 'fast', 'requires-auth', 'requires-project'],
-	examples: [
-		{ command: getCommand('secret list'), description: 'List items' },
-		{ command: getCommand('secret list --no-mask'), description: 'Use no mask option' },
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	idempotent: true,
-	schema: {
-		options: z.object({
-			mask: z
-				.boolean()
-				.default(!!process.stdout.isTTY)
-				.describe('mask the values in output (default: true in TTY for secrets)'),
-		}),
-		response: SecretListResponseSchema,
-	},
-	webUrl: (ctx) => `/projects/${encodeURIComponent(ctx.project.projectId)}/settings`,
-
-	async handler(ctx) {
-		const { opts, apiClient, project, options } = ctx;
-
-		// Fetch project with unmasked secrets
-		const projectData = await tui.spinner('Fetching secrets', () => {
-			return projectGet(apiClient, { id: project.projectId, mask: false });
-		});
-
-		const secrets = projectData.secrets || {};
-
-		// Skip TUI output in JSON mode
-		if (!options.json) {
-			if (Object.keys(secrets).length === 0) {
-				tui.info('No secrets found');
-			} else {
-				// Display the secrets
-				if (process.stdout.isTTY) {
-					tui.newline();
-					tui.success(`Secrets (${Object.keys(secrets).length}):`);
-					tui.newline();
-				}
-
-				const sortedKeys = Object.keys(secrets).sort();
-				// For secrets, masking is enabled by default in TTY (can be disabled with --no-mask)
-				const shouldMask = opts?.mask !== false;
-				for (const key of sortedKeys) {
-					const value = secrets[key];
-					const displayValue = shouldMask ? tui.maskSecret(value) : value;
-					if (process.stdout.isTTY) {
-						console.log(`${tui.bold(key)}=${displayValue}`);
-					} else {
-						console.log(`${key}=${displayValue}`);
-					}
-				}
-			}
-		}
-
-		return secrets;
-	},
-});

package/src/cmd/cloud/secret/pull.ts

@@ -1,92 +0,0 @@
-import { z } from 'zod';
-import { join } from 'node:path';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectGet } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, writeEnvFile, mergeEnvVars } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretPullResponseSchema = z.object({
-	success: z.boolean().describe('Whether pull succeeded'),
-	pulled: z.number().describe('Number of items pulled'),
-	path: z.string().describe('Local file path where secrets were saved'),
-	force: z.boolean().describe('Whether force mode was used'),
-});
-
-export const pullSubcommand = createSubcommand({
-	name: 'pull',
-	description: 'Pull secrets from cloud to local .env file',
-	tags: ['slow', 'requires-auth', 'requires-project'],
-	idempotent: true,
-	examples: [
-		{ command: getCommand('secret pull'), description: 'Run pull command' },
-		{ command: getCommand('secret pull --force'), description: 'Use force option' },
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	prerequisites: ['cloud deploy'],
-	schema: {
-		options: z.object({
-			force: z.boolean().default(false).describe('overwrite local values with cloud values'),
-		}),
-		response: SecretPullResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { opts, apiClient, project, projectDir } = ctx;
-
-		// Fetch project with unmasked secrets
-		const projectData = await tui.spinner('Pulling secrets from cloud', () => {
-			return projectGet(apiClient, { id: project.projectId, mask: false });
-		});
-
-		const cloudSecrets = { ...projectData.env, ...projectData.secrets }; // secret pull with actually do both secrets and env since thats likely what the user would want
-
-		// Target file is always .env
-		const targetEnvPath = await findExistingEnvFile(projectDir);
-		const localEnv = await readEnvFile(targetEnvPath);
-
-		// Merge: cloud values override local if force=true, otherwise keep local
-		let mergedEnv: Record<string, string>;
-		if (opts?.force) {
-			// Cloud values take priority
-			mergedEnv = mergeEnvVars(localEnv, cloudSecrets);
-		} else {
-			// Local values take priority (only add new keys from cloud)
-			mergedEnv = mergeEnvVars(cloudSecrets, localEnv);
-		}
-
-		// Write to .env (skip AGENTUITY_ keys)
-		await writeEnvFile(targetEnvPath, mergedEnv, {
-			skipKeys: Object.keys(mergedEnv).filter((k) => k.startsWith('AGENTUITY_')),
-		});
-
-		// Write AGENTUITY_SDK_KEY to .env if present and missing locally
-		if (projectData.api_key) {
-			const dotEnvPath = join(projectDir, '.env');
-			const dotEnv = await readEnvFile(dotEnvPath);
-
-			if (!dotEnv.AGENTUITY_SDK_KEY) {
-				dotEnv.AGENTUITY_SDK_KEY = projectData.api_key;
-				await writeEnvFile(dotEnvPath, dotEnv, {
-					addComment: (key) => {
-						if (key === 'AGENTUITY_SDK_KEY') {
-							return 'AGENTUITY_SDK_KEY is a sensitive value and should not be committed to version control.';
-						}
-						return null;
-					},
-				});
-				tui.info(`Wrote AGENTUITY_SDK_KEY to ${dotEnvPath}`);
-			}
-		}
-
-		const count = Object.keys(cloudSecrets).length;
-		tui.success(`Pulled ${count} secret${count !== 1 ? 's' : ''} to ${targetEnvPath}`);
-
-		return {
-			success: true,
-			pulled: count,
-			path: targetEnvPath,
-			force: opts?.force ?? false,
-		};
-	},
-});

package/src/cmd/cloud/secret/push.ts

@@ -1,69 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import { findExistingEnvFile, readEnvFile, filterAgentuitySdkKeys } from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretPushResponseSchema = z.object({
-	success: z.boolean().describe('Whether push succeeded'),
-	pushed: z.number().describe('Number of items pushed'),
-	source: z.string().describe('Source file path'),
-});
-
-export const pushSubcommand = createSubcommand({
-	name: 'push',
-	description: 'Push secrets from local .env file to cloud',
-	tags: [
-		'mutating',
-		'updates-resource',
-		'slow',
-		'api-intensive',
-		'requires-auth',
-		'requires-project',
-	],
-	idempotent: true,
-	examples: [{ command: getCommand('secret push'), description: 'Run push command' }],
-	requires: { auth: true, project: true, apiClient: true },
-	prerequisites: ['secret set'],
-	schema: {
-		response: SecretPushResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { apiClient, project, projectDir } = ctx;
-
-		// Read local env file
-		const envFilePath = await findExistingEnvFile(projectDir);
-		const localEnv = await readEnvFile(envFilePath);
-
-		// Filter out AGENTUITY_ prefixed keys (don't push SDK keys)
-		const filteredSecrets = filterAgentuitySdkKeys(localEnv);
-
-		if (Object.keys(filteredSecrets).length === 0) {
-			tui.warning('No secrets to push');
-			return {
-				success: false,
-				pushed: 0,
-				source: envFilePath,
-			};
-		}
-
-		// Push to cloud (using secrets field)
-		await tui.spinner('Pushing secrets to cloud', () => {
-			return projectEnvUpdate(apiClient, {
-				id: project.projectId,
-				secrets: filteredSecrets,
-			});
-		});
-
-		const count = Object.keys(filteredSecrets).length;
-		tui.success(`Pushed ${count} secret${count !== 1 ? 's' : ''} to cloud`);
-
-		return {
-			success: true,
-			pushed: count,
-			source: envFilePath,
-		};
-	},
-});

package/src/cmd/cloud/secret/set.ts

@@ -1,76 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate } from '@agentuity/server';
-import {
-	findExistingEnvFile,
-	readEnvFile,
-	writeEnvFile,
-	filterAgentuitySdkKeys,
-} from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-
-const SecretSetResponseSchema = z.object({
-	success: z.boolean().describe('Whether the operation succeeded'),
-	key: z.string().describe('Secret key name'),
-	path: z.string().describe('Local file path where secret was saved'),
-});
-
-export const setSubcommand = createSubcommand({
-	name: 'set',
-	description: 'Set a secret',
-	tags: ['mutating', 'updates-resource', 'slow', 'requires-auth', 'requires-project'],
-	idempotent: true,
-	examples: [
-		{
-			command: getCommand('secret set DATABASE_URL "postgres://user:pass@host:5432/db"'),
-			description: 'Set the DATABASE_URL environment secret',
-		},
-		{
-			command: getCommand('secret set STRIPE_SECRET_KEY "sk_live_..."'),
-			description: 'Set the STRIPE_SECRET_KEY environment secret',
-		},
-	],
-	requires: { auth: true, project: true, apiClient: true },
-	schema: {
-		args: z.object({
-			key: z.string().min(1, 'key must not be empty').describe('the secret key'),
-			value: z.string().min(1, 'value must not be empty').describe('the secret value'),
-		}),
-		response: SecretSetResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { args, apiClient, project, projectDir } = ctx;
-
-		// Validate key doesn't start with AGENTUITY_
-		if (args.key.startsWith('AGENTUITY_')) {
-			tui.fatal('Cannot set AGENTUITY_ prefixed variables. These are reserved for system use.');
-		}
-
-		// Set in cloud (using secrets field)
-		await tui.spinner('Setting secret in cloud', () => {
-			return projectEnvUpdate(apiClient, {
-				id: project.projectId,
-				secrets: { [args.key]: args.value },
-			});
-		});
-
-		// Update local .env file
-		const envFilePath = await findExistingEnvFile(projectDir);
-		const currentEnv = await readEnvFile(envFilePath);
-		currentEnv[args.key] = args.value;
-
-		// Filter out AGENTUITY_ keys before writing
-		const filteredEnv = filterAgentuitySdkKeys(currentEnv);
-		await writeEnvFile(envFilePath, filteredEnv);
-
-		tui.success(`Secret '${args.key}' set successfully (cloud + ${envFilePath})`);
-
-		return {
-			success: true,
-			key: args.key,
-			path: envFilePath,
-		};
-	},
-});