@agentuity/cli 3.0.0-alpha.7 → 3.0.0-beta.0

package/src/cmd/cloud/env/set.ts

@@ -1,272 +0,0 @@
-import { z } from 'zod';
-import { createSubcommand } from '../../../types';
-import * as tui from '../../../tui';
-import { projectEnvUpdate, orgEnvUpdate } from '@agentuity/server';
-import {
-	looksLikeSecret,
-	isReservedAgentuityKey,
-	isPublicVarKey,
-	PUBLIC_VAR_PREFIXES,
-} from '../../../env-util';
-import { getCommand } from '../../../command-prefix';
-import { resolveOrgId, isOrgScope } from './org-util';
-
-interface ParsedEnvPair {
-	key: string;
-	value: string;
-}
-
-/**
- * Parse env set arguments into key-value pairs.
- * Supports two formats:
- * - Legacy: KEY VALUE (exactly 2 args)
- * - KEY=VALUE format: KEY1=VALUE1 [KEY2=VALUE2 ...]
- */
-function parseEnvArgs(rawArgs: string[]): ParsedEnvPair[] {
-	if (rawArgs.length === 0) {
-		tui.fatal(
-			'No arguments provided. Usage: env set KEY VALUE or env set KEY=VALUE [KEY2=VALUE2 ...]'
-		);
-	}
-
-	// Check if first arg contains '=' — if so, treat ALL args as KEY=VALUE format
-	const firstArg = rawArgs[0]!;
-	if (firstArg.includes('=')) {
-		const pairs: ParsedEnvPair[] = [];
-		for (const arg of rawArgs) {
-			const eqIndex = arg.indexOf('=');
-			if (eqIndex === -1 || eqIndex === 0) {
-				tui.fatal(`Invalid format: '${arg}'. Expected KEY=VALUE format.`);
-			}
-			const key = arg.substring(0, eqIndex);
-			const value = arg.substring(eqIndex + 1);
-			if (!key) {
-				tui.fatal(`Invalid format: '${arg}'. Key cannot be empty.`);
-			}
-			pairs.push({ key, value });
-		}
-		return pairs;
-	}
-
-	// Legacy format: exactly 2 args = KEY VALUE
-	if (rawArgs.length === 2) {
-		const key = rawArgs[0]!.trim();
-		if (!key) {
-			tui.fatal(
-				'Invalid format: key cannot be empty. Usage: env set KEY VALUE or env set KEY=VALUE'
-			);
-		}
-		return [{ key, value: rawArgs[1]! }];
-	}
-
-	// Ambiguous: 1 arg without '=' or 3+ args without '='
-	if (rawArgs.length === 1) {
-		tui.fatal(`Missing value for '${rawArgs[0]}'. Usage: env set KEY VALUE or env set KEY=VALUE`);
-	}
-
-	// 3+ args without '=' in first arg
-	tui.fatal(
-		'Multiple variables must use KEY=VALUE format. Usage: env set KEY1=VALUE1 KEY2=VALUE2 ...'
-	);
-}
-
-const EnvSetResponseSchema = z.object({
-	success: z.boolean().describe('Whether the operation succeeded'),
-	keys: z.array(z.string()).describe('Environment variable keys that were set'),
-	secretKeys: z.array(z.string()).describe('Keys that were stored as secrets'),
-	envKeys: z.array(z.string()).describe('Keys that were stored as env vars'),
-	scope: z.enum(['project', 'org']).describe('The scope where the variables were set'),
-});
-
-export const setSubcommand = createSubcommand({
-	name: 'set',
-	description: 'Set one or more environment variables or secrets',
-	tags: ['mutating', 'updates-resource', 'slow', 'requires-auth'],
-	idempotent: true,
-	requires: { auth: true, apiClient: true },
-	optional: { project: true },
-	examples: [
-		{
-			command: getCommand('env set NODE_ENV production'),
-			description: 'Set environment variable',
-		},
-		{
-			command: getCommand('env set NODE_ENV=production'),
-			description: 'Set using KEY=VALUE format',
-		},
-		{ command: getCommand('env set PORT 3000'), description: 'Set port number' },
-		{
-			command: getCommand('env set NODE_ENV=production LOG_LEVEL=info PORT=3000'),
-			description: 'Set multiple variables at once',
-		},
-		{
-			command: getCommand('env set API_KEY "sk_..." --secret'),
-			description: 'Set a secret value',
-		},
-		{
-			command: getCommand('env set OPENAI_API_KEY "sk_..." --secret --org'),
-			description: 'Set an organization-wide secret',
-		},
-	],
-	schema: {
-		args: z.object({
-			args: z.array(z.string()).describe('KEY VALUE or KEY=VALUE [KEY2=VALUE2 ...]'),
-		}),
-		options: z.object({
-			secret: z
-				.boolean()
-				.default(false)
-				.describe('store as a secret (encrypted and masked in UI)'),
-			org: z
-				.union([z.boolean(), z.string()])
-				.optional()
-				.describe(
-					'set at organization level (use --org for default org, or --org <orgId> for specific org)'
-				),
-		}),
-		response: EnvSetResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { args: cmdArgs, opts, apiClient, project, config } = ctx;
-		const useOrgScope = isOrgScope(opts?.org);
-		const forceSecret = opts?.secret ?? false;
-
-		// Require project context if not using org scope
-		if (!useOrgScope && !project) {
-			tui.fatal(
-				'Project context required. Run from a project directory or use --org for organization scope.'
-			);
-		}
-
-		const pairs = parseEnvArgs(cmdArgs.args);
-
-		// Validate all keys first
-		for (const pair of pairs) {
-			if (isReservedAgentuityKey(pair.key)) {
-				tui.fatal(
-					`Cannot set AGENTUITY_ prefixed variables: '${pair.key}'. These are reserved for system use.`
-				);
-			}
-		}
-
-		// Reject duplicate keys
-		const seenKeys = new Set<string>();
-		for (const pair of pairs) {
-			if (seenKeys.has(pair.key)) {
-				tui.fatal(`Duplicate key '${pair.key}'. Each variable may only be specified once.`);
-			}
-			seenKeys.add(pair.key);
-		}
-
-		// Classify each pair as env or secret
-		const envPairs: Record<string, string> = {};
-		const secretPairs: Record<string, string> = {};
-		const secretKeysList: string[] = [];
-		const envKeysList: string[] = [];
-
-		for (const pair of pairs) {
-			const isPublic = isPublicVarKey(pair.key);
-			let isSecret = forceSecret;
-
-			// Validate public vars cannot be secrets
-			if (isSecret && isPublic) {
-				tui.fatal(
-					`Cannot set public variables as secrets. '${pair.key}' (prefix ${PUBLIC_VAR_PREFIXES.join(', ')}) is exposed to the frontend.`
-				);
-			}
-
-			// Auto-detect if this looks like a secret and offer to store as secret
-			// Skip auto-detect for public vars since they can never be secrets
-			if (!isSecret && !isPublic && looksLikeSecret(pair.key, pair.value)) {
-				if (pairs.length === 1) {
-					// Single pair: offer interactive prompt (existing behavior)
-					tui.warning(`The variable '${pair.key}' looks like it should be a secret.`);
-					const storeAsSecret = await tui.confirm('Store as a secret instead?', true);
-					if (storeAsSecret) {
-						isSecret = true;
-					}
-				} else {
-					// Multiple pairs: auto-detect silently
-					isSecret = true;
-					tui.info(`Auto-detected '${pair.key}' as a secret`);
-				}
-			}
-
-			if (isSecret) {
-				secretPairs[pair.key] = pair.value;
-				secretKeysList.push(pair.key);
-			} else {
-				envPairs[pair.key] = pair.value;
-				envKeysList.push(pair.key);
-			}
-		}
-
-		const totalCount = pairs.length;
-		const allKeys = [...envKeysList, ...secretKeysList];
-		const secretSuffix =
-			secretKeysList.length > 0
-				? ` (${secretKeysList.length} secret${secretKeysList.length !== 1 ? 's' : ''})`
-				: '';
-
-		if (useOrgScope) {
-			// Organization scope
-			const orgId = await resolveOrgId(apiClient, config, opts!.org!);
-
-			const updatePayload: {
-				id: string;
-				env?: Record<string, string>;
-				secrets?: Record<string, string>;
-			} = { id: orgId };
-			if (Object.keys(envPairs).length > 0) updatePayload.env = envPairs;
-			if (Object.keys(secretPairs).length > 0) updatePayload.secrets = secretPairs;
-
-			await tui.spinner(
-				`Setting ${totalCount} organization variable${totalCount !== 1 ? 's' : ''} in cloud`,
-				() => {
-					return orgEnvUpdate(apiClient, updatePayload);
-				}
-			);
-
-			tui.success(
-				`Organization variable${totalCount !== 1 ? 's' : ''} set successfully: ${allKeys.join(', ')}${secretSuffix}`
-			);
-
-			return {
-				success: true,
-				keys: allKeys,
-				secretKeys: secretKeysList,
-				envKeys: envKeysList,
-				scope: 'org' as const,
-			};
-		} else {
-			// Project scope
-			const updatePayload: {
-				id: string;
-				env?: Record<string, string>;
-				secrets?: Record<string, string>;
-			} = { id: project!.projectId };
-			if (Object.keys(envPairs).length > 0) updatePayload.env = envPairs;
-			if (Object.keys(secretPairs).length > 0) updatePayload.secrets = secretPairs;
-
-			await tui.spinner(
-				`Setting ${totalCount} variable${totalCount !== 1 ? 's' : ''} in cloud`,
-				() => {
-					return projectEnvUpdate(apiClient, updatePayload);
-				}
-			);
-
-			tui.success(
-				`Variable${totalCount !== 1 ? 's' : ''} set successfully: ${allKeys.join(', ')}${secretSuffix}`
-			);
-
-			return {
-				success: true,
-				keys: allKeys,
-				secretKeys: secretKeysList,
-				envKeys: envKeysList,
-				scope: 'project' as const,
-			};
-		}
-	},
-});

package/src/cmd/cloud/index.ts

@@ -1,69 +0,0 @@
-import { createCommand } from '../../types';
-import { deploySubcommand } from './deploy';
-import { dbCommand } from './db';
-import { redisCommand } from './redis';
-import { storageCommand } from './storage';
-import { sessionCommand } from './session';
-import { threadCommand } from './thread';
-import { sshSubcommand } from './ssh';
-import { scpSubcommand } from './scp';
-import { deploymentCommand } from './deployment';
-import keyvalueCommand from './keyvalue';
-import queueCommand from './queue';
-import webhookCommand from './webhook';
-import { agentCommand } from './agent';
-import envCommand from './env';
-import apikeyCommand from './apikey';
-import oidcCommand from './oidc';
-import streamCommand from './stream';
-import vectorCommand from './vector';
-import { emailCommand } from './email';
-import taskCommand from './task';
-import sandboxCommand from './sandbox';
-import scheduleCommand from './schedule';
-import workflowCommand from './workflow';
-import servicesCommand from './services';
-import { regionSubcommand } from './region';
-import { machineCommand } from './machine';
-import { monitorSubcommand } from './monitor';
-import { getCommand } from '../../command-prefix';
-
-export const command = createCommand({
-	name: 'cloud',
-	description: 'Cloud related commands',
-	tags: ['slow', 'requires-auth'],
-	examples: [
-		{ command: getCommand('cloud deploy'), description: 'Deploy your agent to the cloud' },
-		{ command: getCommand('cloud deployment list'), description: 'List all deployments' },
-		{ command: getCommand('cloud region select'), description: 'Set default region' },
-	],
-	subcommands: [
-		apikeyCommand,
-		oidcCommand,
-		keyvalueCommand,
-		queueCommand,
-		webhookCommand,
-		taskCommand,
-		agentCommand,
-		streamCommand,
-		emailCommand,
-		vectorCommand,
-		sandboxCommand,
-		scheduleCommand,
-		workflowCommand,
-		envCommand,
-		deploySubcommand,
-		dbCommand,
-		redisCommand,
-		storageCommand,
-		servicesCommand,
-		sessionCommand,
-		threadCommand,
-		sshSubcommand,
-		scpSubcommand,
-		monitorSubcommand,
-		deploymentCommand,
-		regionSubcommand,
-		machineCommand,
-	],
-});

package/src/cmd/cloud/keyvalue/create-namespace.ts

@@ -1,53 +0,0 @@
-import { z } from 'zod';
-import { createCommand } from '../../../types';
-import * as tui from '../../../tui';
-import { createStorageAdapter } from './util';
-import { getCommand } from '../../../command-prefix';
-export const createNamespaceSubcommand = createCommand({
-	name: 'create-namespace',
-	aliases: ['create'],
-	description: 'Create a new keyvalue namespace',
-	tags: ['mutating', 'creates-resource', 'slow', 'requires-auth'],
-	idempotent: false,
-	requires: { auth: true, region: true },
-	optional: { project: true },
-	examples: [
-		{
-			command: getCommand('cloud kv create-namespace production'),
-			description: 'Create production namespace',
-		},
-		{
-			command: getCommand('cloud kv create staging'),
-			description: 'Create staging namespace (using alias)',
-		},
-		{ command: getCommand('cloud kv create cache'), description: 'Create cache namespace' },
-	],
-	schema: {
-		args: z.object({
-			name: z.string().min(1).max(64).describe('the namespace name'),
-		}),
-		response: z.object({
-			success: z.boolean().describe('Whether the operation succeeded'),
-			namespace: z.string().describe('Namespace name'),
-			message: z.string().optional().describe('Success message'),
-		}),
-	},
-
-	async handler(ctx) {
-		const { args } = ctx;
-		const kv = await createStorageAdapter(ctx);
-
-		await kv.createNamespace(args.name);
-		if (!ctx.options.json) {
-			tui.success(`Namespace ${tui.bold(args.name)} created`);
-		}
-
-		return {
-			success: true,
-			namespace: args.name,
-			message: `Namespace ${args.name} created`,
-		};
-	},
-});
-
-export default createNamespaceSubcommand;

package/src/cmd/cloud/keyvalue/delete-namespace.ts

@@ -1,86 +0,0 @@
-import { z } from 'zod';
-import { createCommand } from '../../../types';
-import { ErrorCode } from '../../../errors';
-import * as tui from '../../../tui';
-import { createStorageAdapter } from './util';
-import { getCommand } from '../../../command-prefix';
-export const deleteNamespaceSubcommand = createCommand({
-	name: 'delete-namespace',
-	aliases: ['rm-namespace', 'del-namespace', 'remove-namespace', 'terminate-namespace'],
-	description: 'Delete a keyvalue namespace and all its keys',
-	tags: ['destructive', 'deletes-resource', 'slow', 'requires-auth'],
-	idempotent: true,
-	requires: { auth: true, region: true },
-	optional: { project: true },
-	examples: [
-		{
-			command: getCommand('cloud kv delete-namespace staging'),
-			description: 'Delete staging namespace (interactive)',
-		},
-		{
-			command: getCommand('cloud kv rm-namespace cache --confirm'),
-			description: 'Delete cache without confirmation',
-		},
-		{
-			command: getCommand('cloud kv delete-namespace production --confirm'),
-			description: 'Force delete production',
-		},
-	],
-	schema: {
-		args: z.object({
-			name: z.string().min(1).max(64).describe('the namespace name'),
-		}),
-		options: z.object({
-			confirm: z
-				.boolean()
-				.optional()
-				.default(false)
-				.describe('if true will not prompt for confirmation'),
-		}),
-		response: z.object({
-			success: z.boolean().describe('Whether the deletion succeeded'),
-			namespace: z.string().describe('Deleted namespace name'),
-			message: z.string().optional().describe('Confirmation message'),
-		}),
-	},
-
-	async handler(ctx) {
-		const { args, opts } = ctx;
-		const kv = await createStorageAdapter(ctx);
-
-		if (!opts?.confirm) {
-			if (!process.stdin.isTTY) {
-				tui.fatal(
-					'No TTY and --confirm is not set. Refusing to delete',
-					ErrorCode.VALIDATION_FAILED
-				);
-			}
-			tui.warning(`This will delete namespace ${tui.bold(args.name)} and ALL its keys.`);
-			const confirm = await new Promise<boolean>((resolve) => {
-				process.stdout.write('Are you sure? (yes/no): ');
-				process.stdin.once('data', (data) => {
-					const answer = data.toString().trim().toLowerCase();
-					resolve(answer === 'yes' || answer === 'y');
-				});
-			});
-
-			if (!confirm) {
-				tui.info('Cancelled');
-				return { success: false, namespace: args.name, message: 'Cancelled' };
-			}
-		}
-
-		await kv.deleteNamespace(args.name);
-		if (!ctx.options.json) {
-			tui.success(`Namespace ${tui.bold(args.name)} deleted`);
-		}
-
-		return {
-			success: true,
-			namespace: args.name,
-			message: `Namespace ${args.name} deleted`,
-		};
-	},
-});
-
-export default deleteNamespaceSubcommand;

package/src/cmd/cloud/keyvalue/delete.ts

@@ -1,62 +0,0 @@
-import { z } from 'zod';
-import { createCommand } from '../../../types';
-import * as tui from '../../../tui';
-import { createStorageAdapter } from './util';
-import { getCommand } from '../../../command-prefix';
-const KVDeleteResponseSchema = z.object({
-	success: z.boolean().describe('Whether the operation succeeded'),
-	namespace: z.string().describe('Namespace name'),
-	key: z.string().describe('Key name'),
-	durationMs: z.number().describe('Operation duration in milliseconds'),
-});
-
-export const deleteSubcommand = createCommand({
-	name: 'delete',
-	aliases: ['rm', 'del', 'remove', 'terminate'],
-	description: 'Delete a key from the keyvalue storage',
-	tags: ['destructive', 'deletes-resource', 'slow', 'requires-auth'],
-	idempotent: true,
-	requires: { auth: true, region: true },
-	optional: { project: true },
-	examples: [
-		{
-			command: getCommand('cloud kv delete production user:123'),
-			description: 'Delete user data',
-		},
-		{
-			command: getCommand('cloud kv delete cache session:abc'),
-			description: 'Delete cached session',
-		},
-		{
-			command: getCommand('cloud kv rm staging cache:homepage'),
-			description: 'Delete homepage cache (using alias)',
-		},
-	],
-	schema: {
-		args: z.object({
-			namespace: z.string().min(1).describe('the namespace name'),
-			key: z.string().min(1).describe('the key name'),
-		}),
-		response: KVDeleteResponseSchema,
-	},
-
-	async handler(ctx) {
-		const { args } = ctx;
-		const started = Date.now();
-		const storage = await createStorageAdapter(ctx);
-		await storage.delete(args.namespace, args.key);
-		const durationMs = Date.now() - started;
-		if (!ctx.options.json) {
-			tui.success(`deleted in ${durationMs.toFixed(1)}ms`);
-		}
-
-		return {
-			success: true,
-			namespace: args.namespace,
-			key: args.key,
-			durationMs,
-		};
-	},
-});
-
-export default deleteSubcommand;

package/src/cmd/cloud/keyvalue/get.ts

@@ -1,80 +0,0 @@
-import { z } from 'zod';
-import { createCommand } from '../../../types';
-import * as tui from '../../../tui';
-import { tryParseJSON } from '../../../json';
-import { createStorageAdapter } from './util';
-import { getCommand } from '../../../command-prefix';
-const KVGetResponseSchema = z.object({
-	exists: z.boolean().describe('Whether the key exists'),
-	data: z.union([z.string(), z.any()]).optional().describe('Value data (string or binary)'),
-	contentType: z.string().optional().describe('Content type'),
-	expiresAt: z.string().optional().describe('Expiration time as ISO 8601 timestamp'),
-});
-
-export const getSubcommand = createCommand({
-	name: 'get',
-	aliases: ['show', 'info'],
-	description: 'Get a value from the keyvalue storage',
-	tags: ['read-only', 'fast', 'requires-auth'],
-	requires: { auth: true, region: true },
-	optional: { project: true },
-	examples: [
-		{ command: getCommand('cloud kv get production user:123'), description: 'Get user data' },
-		{ command: getCommand('cloud kv get cache session:abc'), description: 'Get cached session' },
-		{
-			command: getCommand('cloud kv get staging cache:homepage'),
-			description: 'Get homepage cache',
-		},
-	],
-	schema: {
-		args: z.object({
-			namespace: z.string().min(1).describe('the namespace name'),
-			key: z.string().min(1).describe('the key name'),
-		}),
-		response: KVGetResponseSchema,
-	},
-	webUrl: (ctx) => `/services/kv/${encodeURIComponent(ctx.args.namespace)}`,
-	idempotent: true,
-
-	async handler(ctx) {
-		const { args, options } = ctx;
-		const storage = await createStorageAdapter(ctx);
-		const started = Date.now();
-		const res = await storage.get(args.namespace, args.key);
-
-		if (!options.json) {
-			if (res.exists) {
-				if (res.data) {
-					if (res.contentType?.includes('json')) {
-						const val = tryParseJSON(res.data as unknown as string);
-						tui.json(val);
-					} else if (res.contentType?.includes('text')) {
-						console.log(String(res.data));
-					} else {
-						const b = res.data as ArrayBuffer;
-						tui.info(`Read ${b.byteLength} bytes (${res.contentType})`);
-					}
-					const expiresInfo = res.expiresAt
-						? `, expires ${new Date(res.expiresAt).toLocaleString()}`
-						: '';
-					tui.success(
-						`retrieved in ${(Date.now() - started).toFixed(1)}ms (${res.contentType}${expiresInfo})`
-					);
-				} else {
-					tui.warning(`${args.key} returned empty data for ${args.namespace}`);
-				}
-			} else {
-				tui.warning(`${args.key} does not exist in ${args.namespace}`);
-			}
-		}
-
-		return {
-			exists: res.exists,
-			data: res.data,
-			contentType: res.exists ? res.contentType : undefined,
-			expiresAt: res.exists ? res.expiresAt : undefined,
-		};
-	},
-});
-
-export default getSubcommand;

package/src/cmd/cloud/keyvalue/index.ts

@@ -1,40 +0,0 @@
-import { createCommand } from '../../../types';
-import { createNamespaceSubcommand } from './create-namespace';
-import { deleteSubcommand } from './delete';
-import { deleteNamespaceSubcommand } from './delete-namespace';
-import { getSubcommand } from './get';
-import { keysSubcommand } from './keys';
-import { listNamespacesSubcommand } from './list-namespaces';
-import { replSubcommand } from './repl';
-import { searchSubcommand } from './search';
-import { setSubcommand } from './set';
-import { statsSubcommand } from './stats';
-import { getCommand } from '../../../command-prefix';
-
-export const command = createCommand({
-	name: 'keyvalue',
-	aliases: ['kv', 'keyvalues'],
-	description: 'Manage keyvalue storage for your projects',
-	tags: ['read-only', 'fast', 'requires-auth'],
-	examples: [
-		{
-			command: getCommand('cloud keyvalue repl'),
-			description: 'Start interactive key-value REPL',
-		},
-		{ command: getCommand('cloud kv get mykey'), description: 'Get value for key' },
-	],
-	subcommands: [
-		replSubcommand,
-		getSubcommand,
-		setSubcommand,
-		deleteSubcommand,
-		statsSubcommand,
-		searchSubcommand,
-		keysSubcommand,
-		listNamespacesSubcommand,
-		createNamespaceSubcommand,
-		deleteNamespaceSubcommand,
-	],
-	requires: { auth: true },
-});
-export default command;