@bussolabs/closeyourit-cli 0.0.21 → 0.0.25

package/dist/base.d.ts

@@ -6,6 +6,10 @@ export declare const UUID_RE: RegExp;
 export declare const projectFlag: {
     project: Interfaces.OptionFlag<string, Interfaces.CustomOptions>;
 };
+/** Shared `--environment <code|id>` flag (required). The backend resolves it within the project. */
+export declare const environmentFlag: {
+    environment: Interfaces.OptionFlag<string, Interfaces.CustomOptions>;
+};
 /** Shared `--page` flag. */
 export declare const pageFlag: {
     page: Interfaces.OptionFlag<number, Interfaces.CustomOptions>;

package/dist/base.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BaseCommand = exports.pageFlag = exports.projectFlag = exports.UUID_RE = void 0;
+exports.BaseCommand = exports.pageFlag = exports.environmentFlag = exports.projectFlag = exports.UUID_RE = void 0;
 const core_1 = require("@oclif/core");
 const config_1 = require("./lib/config");
 const api_1 = require("./lib/api");
@@ -10,6 +10,10 @@ exports.UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}
 exports.projectFlag = {
     project: core_1.Flags.string({ char: 'p', description: 'Project id (UUID) or key', required: true }),
 };
+/** Shared `--environment <code|id>` flag (required). The backend resolves it within the project. */
+exports.environmentFlag = {
+    environment: core_1.Flags.string({ char: 'e', description: 'Environment code (e.g. production) or id', required: true }),
+};
 /** Shared `--page` flag. */
 exports.pageFlag = {
     page: core_1.Flags.integer({ description: 'Page number', default: 1 }),

package/dist/commands/agents/list.js

@@ -24,7 +24,7 @@ class AgentsList extends base_1.BaseCommand {
                 String(agent.kind ?? ''),
                 String(agent.schedule ?? ''),
                 String(agent.enabled ?? ''),
-                String(agent.last_run_status ?? '-'),
+                agent.last_run_status ? (0, output_1.statusCell)(agent.last_run_status) : '-',
                 String(agent.id ?? ''),
             ])));
         }

package/dist/commands/agents/runs/list.js

@@ -19,7 +19,7 @@ class AgentsRunsList extends base_1.BaseCommand {
         const runs = res.data ?? [];
         if (!this.jsonEnabled()) {
             this.log((0, output_1.renderTable)(['STATUS', 'PROJECT', 'DURATION', 'STARTED', 'ID'], runs.map((run) => [
-                String(run.status ?? ''),
+                (0, output_1.statusCell)(run.status),
                 String(run.project_id ?? '-'),
                 run.duration_ms == null ? '-' : `${run.duration_ms} ms`,
                 String(run.started_at ?? '-'),

package/dist/commands/cron-monitors/list.js

@@ -26,7 +26,7 @@ class CronMonitorsList extends base_1.BaseCommand {
         if (!this.jsonEnabled()) {
             this.log((0, output_1.renderTable)(['NAME', 'STATUS', 'INTERVAL (min)', 'LAST CHECK-IN', 'ID'], monitors.map((monitor) => [
                 String(monitor.name ?? ''),
-                String(monitor.status ?? ''),
+                (0, output_1.statusCell)(monitor.status),
                 String(monitor.expected_interval_minutes ?? '-'),
                 String(monitor.last_check_in_at ?? '-'),
                 String(monitor.id ?? ''),

package/dist/commands/errors/list.js

@@ -26,7 +26,7 @@ class ErrorsList extends base_1.BaseCommand {
             this.log((0, output_1.renderTable)(['ID', 'TITLE', 'STATUS', 'EVENTS'], groups.map((group) => [
                 String(group.id ?? ''),
                 String(group.title ?? ''),
-                String(group.status ?? ''),
+                (0, output_1.statusCell)(group.status),
                 String(group.events_count ?? ''),
             ])));
         }

package/dist/commands/ideas/list.js

@@ -29,7 +29,7 @@ class IdeasList extends base_1.BaseCommand {
             this.log((0, output_1.renderTable)(['ID', 'TITLE', 'STATUS', 'VOTES', 'COMMENTS'], ideas.map((idea) => [
                 String(idea.id ?? ''),
                 String(idea.title ?? ''),
-                String(idea.status ?? ''),
+                (0, output_1.statusCell)(idea.status),
                 String(idea.votes_count ?? 0),
                 String(idea.comments_count ?? 0),
             ])));

package/dist/commands/ideas/show.js

@@ -18,14 +18,14 @@ class IdeasShow extends base_1.BaseCommand {
             const { problem, solution, stakeholders, ...fields } = res.data ?? {};
             this.log((0, output_1.renderRecord)(fields));
             if (Array.isArray(stakeholders) && stakeholders.length > 0) {
-                this.log(`\nStakeholders: ${stakeholders.join(', ')}`);
+                this.log(`\n👥 Stakeholders: ${stakeholders.join(', ')}`);
             }
             if (problem) {
-                this.log('\nProblem:');
+                this.log('\n🎯 Problem:');
                 this.log((0, output_1.sanitizeMultiline)(String(problem)));
             }
             if (solution) {
-                this.log('\nSolution:');
+                this.log('\n💡 Solution:');
                 this.log((0, output_1.sanitizeMultiline)(String(solution)));
             }
         }

package/dist/commands/kb/ask.js

@@ -33,7 +33,7 @@ class KbAsk extends base_1.BaseCommand {
                 this.log((0, output_1.sanitizeMultiline)(data.answer));
             const pages = Array.isArray(data.pages) ? data.pages : [];
             if (pages.length > 0) {
-                this.log('\nSources:');
+                this.log('\n📚 Sources:');
                 for (const page of pages) {
                     this.log(`  [${(0, output_1.sanitize)(page.kind)}] ${(0, output_1.sanitize)(page.title)} · ${(0, output_1.sanitize)(page.id)}`);
                 }

package/dist/commands/monitors/list.js

@@ -18,7 +18,7 @@ class MonitorsList extends base_1.BaseCommand {
             this.log((0, output_1.renderTable)(['NAME', 'URL', 'STATUS', 'ACTIVE', 'ID'], monitors.map((monitor) => [
                 String(monitor.name ?? ''),
                 String(monitor.url ?? ''),
-                String(monitor.current_status ?? ''),
+                (0, output_1.statusCell)(monitor.current_status),
                 String(monitor.active ?? ''),
                 String(monitor.id ?? ''),
             ])));

package/dist/commands/run.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../base';
+export default class Run extends BaseCommand {
+    static strict: boolean;
+    static enableJsonFlag: boolean;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/run.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../base");
+const subprocess_1 = require("../lib/subprocess");
+class Run extends base_1.BaseCommand {
+    // Everything after `--` is the child command + its args (not parsed as flags).
+    static strict = false;
+    // The output belongs to the child process, not to us.
+    static enableJsonFlag = false;
+    static description = 'Run a command with the project/environment secrets injected as env vars (like `doppler run`). Secrets never touch disk.';
+    static examples = [
+        '<%= config.bin %> run -p acme-api -e production -- bundle exec rails server',
+        '<%= config.bin %> run -p acme-api -e production -- printenv DATABASE_URL',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        ...base_1.environmentFlag,
+    };
+    async run() {
+        const { argv, flags } = await this.parse(Run);
+        const parts = argv;
+        if (parts.length === 0) {
+            this.error('Provide a command to run after `--`, e.g. `cyi run -p acme -e production -- printenv`', { exit: 1 });
+        }
+        const projectId = await this.resolveProjectId(flags.project);
+        const { data } = await this.api.get(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets/bundle?environment=${encodeURIComponent(flags.environment)}`);
+        const [command, ...commandArgs] = parts;
+        const code = await (0, subprocess_1.runCommand)(command, commandArgs, { ...process.env, ...(data ?? {}) });
+        // Propagate the child's exit code (0 on success) so `cyi run … && next` behaves like the child.
+        this.exit(code);
+    }
+}
+exports.default = Run;

package/dist/commands/secrets/delete.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../base';
+export default class SecretsDelete extends BaseCommand {
+    static args: {
+        name: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/secrets/delete.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+class SecretsDelete extends base_1.BaseCommand {
+    static args = {
+        name: core_1.Args.string({ description: 'Secret name', required: true }),
+    };
+    static description = 'Delete a secret from a project environment';
+    static examples = ['<%= config.bin %> secrets delete -p acme-api -e production API_KEY'];
+    static flags = {
+        ...base_1.projectFlag,
+        ...base_1.environmentFlag,
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretsDelete);
+        const projectId = await this.resolveProjectId(flags.project);
+        const name = args.name.toUpperCase();
+        await this.api.delete(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets/${encodeURIComponent(name)}?environment=${encodeURIComponent(flags.environment)}`);
+        if (!this.jsonEnabled()) {
+            this.log(`Secret ${name} deleted (${flags.environment}).`);
+        }
+        return { deleted: name };
+    }
+}
+exports.default = SecretsDelete;

package/dist/commands/secrets/download.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../base';
+export default class SecretsDownload extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        format: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        out: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/secrets/download.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+class SecretsDownload extends base_1.BaseCommand {
+    static description = 'Download all secrets of an environment as .env or JSON (to a file or stdout). Values with newlines: use --format json. Prefer `cyi run` to avoid writing plaintext to disk.';
+    static examples = [
+        '<%= config.bin %> secrets download -p acme-api -e production --out .env',
+        '<%= config.bin %> secrets download -p acme-api -e production --format json',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        ...base_1.environmentFlag,
+        format: core_1.Flags.string({ default: 'env', description: 'Output format', options: ['env', 'json'] }),
+        out: core_1.Flags.string({ description: 'Write to this file instead of stdout' }),
+    };
+    async run() {
+        const { flags } = await this.parse(SecretsDownload);
+        const projectId = await this.resolveProjectId(flags.project);
+        const res = await this.api.get(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets/bundle?environment=${encodeURIComponent(flags.environment)}`);
+        const map = res.data ?? {};
+        const body = flags.format === 'json'
+            ? JSON.stringify(map, null, 2)
+            : Object.entries(map)
+                .map(([key, value]) => `${key}=${value}`)
+                .join('\n');
+        if (flags.out) {
+            await (0, promises_1.writeFile)(flags.out, `${body}\n`);
+            if (!this.jsonEnabled()) {
+                this.log(`Wrote ${Object.keys(map).length} secrets → ${flags.out}`);
+                this.warn('The file contains plaintext secrets. Prefer `cyi run` to inject them without touching disk.');
+            }
+        }
+        else if (!this.jsonEnabled()) {
+            this.log(body);
+        }
+        return { count: Object.keys(map).length, format: flags.format, out: flags.out ?? null };
+    }
+}
+exports.default = SecretsDownload;

package/dist/commands/secrets/get.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../base';
+export default class SecretsGet extends BaseCommand {
+    static args: {
+        name: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/secrets/get.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+class SecretsGet extends base_1.BaseCommand {
+    static args = {
+        name: core_1.Args.string({ description: 'Secret name', required: true }),
+    };
+    static description = 'Print the value of a single secret (pipeable). Requires the secrets.read permission.';
+    static examples = ['<%= config.bin %> secrets get -p acme-api -e production DATABASE_URL'];
+    static flags = {
+        ...base_1.projectFlag,
+        ...base_1.environmentFlag,
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretsGet);
+        const projectId = await this.resolveProjectId(flags.project);
+        const res = await this.api.get(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets/bundle?environment=${encodeURIComponent(flags.environment)}`);
+        const map = res.data ?? {};
+        const key = args.name.toUpperCase();
+        if (!(key in map)) {
+            this.error(`Secret not found: ${key} (${flags.environment})`, { exit: 1 });
+        }
+        if (!this.jsonEnabled()) {
+            this.log(map[key]);
+        }
+        return { name: key, value: map[key] };
+    }
+}
+exports.default = SecretsGet;

package/dist/commands/secrets/import.d.ts

@@ -0,0 +1,22 @@
+import { BaseCommand } from '../../base';
+interface Entry {
+    name: string;
+    value: string;
+    description?: string;
+}
+/** Parse a .env text into entries: `KEY=VALUE` lines, skipping blanks and `#` comments. */
+export declare function parseEnv(text: string): Entry[];
+/** Parse JSON: either `{ "NAME": "value" }` or `[{ "name", "value", "description" }]`. */
+export declare function parseJson(text: string): Entry[];
+export default class SecretsImport extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        'from-file': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        format: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}
+export {};

package/dist/commands/secrets/import.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseEnv = parseEnv;
+exports.parseJson = parseJson;
+const promises_1 = require("node:fs/promises");
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const stdin_1 = require("../../lib/stdin");
+/** Parse a .env text into entries: `KEY=VALUE` lines, skipping blanks and `#` comments. */
+function parseEnv(text) {
+    const entries = [];
+    for (const raw of text.split('\n')) {
+        const line = raw.trim();
+        if (line.length === 0 || line.startsWith('#'))
+            continue;
+        const eq = line.indexOf('=');
+        if (eq === -1)
+            continue;
+        entries.push({ name: line.slice(0, eq).trim(), value: line.slice(eq + 1) });
+    }
+    return entries;
+}
+/** Parse JSON: either `{ "NAME": "value" }` or `[{ "name", "value", "description" }]`. */
+function parseJson(text) {
+    const data = JSON.parse(text);
+    if (Array.isArray(data)) {
+        return data.map((row) => {
+            const item = row;
+            return { name: String(item.name ?? ''), value: String(item.value ?? ''), description: item.description };
+        });
+    }
+    return Object.entries(data).map(([name, value]) => ({ name, value: String(value) }));
+}
+class SecretsImport extends base_1.BaseCommand {
+    static description = 'Import many secrets at once (all-or-nothing) from a .env or JSON file';
+    static examples = [
+        '<%= config.bin %> secrets import -p acme-api -e production --from-file .env',
+        '<%= config.bin %> secrets import -p acme-api -e production --format json --from-file secrets.json',
+        'doppler secrets download --config production --no-file --format json | <%= config.bin %> secrets import -p acme-api -e production --format json',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        ...base_1.environmentFlag,
+        'from-file': core_1.Flags.string({ description: 'Path to a .env or JSON file (default: read from stdin)' }),
+        format: core_1.Flags.string({ default: 'env', description: 'Input format', options: ['env', 'json'] }),
+    };
+    async run() {
+        const { flags } = await this.parse(SecretsImport);
+        const projectId = await this.resolveProjectId(flags.project);
+        let text;
+        if (flags['from-file']) {
+            text = await (0, promises_1.readFile)(flags['from-file'], 'utf8');
+        }
+        else {
+            if (process.stdin.isTTY) {
+                this.error('Provide --from-file or pipe the input via stdin (e.g. `doppler secrets download --format json | cyi secrets import --format json`)', { exit: 1 });
+            }
+            text = await (0, stdin_1.readStream)();
+        }
+        const variables = flags.format === 'json' ? parseJson(text) : parseEnv(text);
+        if (variables.length === 0) {
+            this.error('No variables found in the input', { exit: 1 });
+        }
+        const res = await this.api.post(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets/import`, { environment: flags.environment, variables });
+        if (!this.jsonEnabled()) {
+            this.log(`Imported ${res.data?.imported ?? variables.length} secrets (${flags.environment}).`);
+        }
+        return res;
+    }
+}
+exports.default = SecretsImport;

package/dist/commands/secrets/list.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../base';
+export default class SecretsList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/secrets/list.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+class SecretsList extends base_1.BaseCommand {
+    static description = 'List secret names for a project (optionally filtered by environment). Never prints values.';
+    static examples = [
+        '<%= config.bin %> secrets list -p acme-api',
+        '<%= config.bin %> secrets list -p acme-api -e production',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        environment: core_1.Flags.string({ char: 'e', description: 'Filter by environment code or id' }),
+    };
+    async run() {
+        const { flags } = await this.parse(SecretsList);
+        const projectId = await this.resolveProjectId(flags.project);
+        const query = flags.environment ? `?environment=${encodeURIComponent(flags.environment)}` : '';
+        const res = await this.api.get(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets${query}`);
+        if (!this.jsonEnabled()) {
+            const rows = (res.data ?? []).map((secret) => [
+                String(secret.name ?? ''),
+                String(secret.environment?.code ?? ''),
+                String(secret.description ?? ''),
+            ]);
+            this.log((0, output_1.renderTable)(['NAME', 'ENVIRONMENT', 'DESCRIPTION'], rows));
+        }
+        return res;
+    }
+}
+exports.default = SecretsList;

package/dist/commands/secrets/set.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../base';
+export default class SecretsSet extends BaseCommand {
+    static args: {
+        assignment: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        value: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/secrets/set.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+class SecretsSet extends base_1.BaseCommand {
+    static args = {
+        assignment: core_1.Args.string({ description: 'NAME=VALUE, or just NAME with --value', required: true }),
+    };
+    static description = 'Set (create or update) a secret for a project environment';
+    static examples = [
+        '<%= config.bin %> secrets set -p acme-api -e production DATABASE_URL=postgres://user:pass@host/db',
+        '<%= config.bin %> secrets set -p acme-api -e production API_KEY --value s3cr3t --description "Stripe key"',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        ...base_1.environmentFlag,
+        value: core_1.Flags.string({ description: 'Secret value (use when the arg is just NAME)' }),
+        description: core_1.Flags.string({ description: 'Optional description' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretsSet);
+        const projectId = await this.resolveProjectId(flags.project);
+        const eq = args.assignment.indexOf('=');
+        const name = eq === -1 ? args.assignment : args.assignment.slice(0, eq);
+        const value = eq === -1 ? flags.value : args.assignment.slice(eq + 1);
+        if (value === undefined) {
+            this.error('Provide a value: use NAME=VALUE or pass --value', { exit: 1 });
+        }
+        const res = await this.api.post(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets`, { environment: flags.environment, name, value, description: flags.description });
+        if (!this.jsonEnabled()) {
+            this.log(`Secret ${String(name).toUpperCase()} saved (${flags.environment}).`);
+        }
+        return res;
+    }
+}
+exports.default = SecretsSet;

package/dist/commands/secrets/sync.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../base';
+export default class SecretsSync extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/secrets/sync.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../base");
+class SecretsSync extends base_1.BaseCommand {
+    static description = "Push the project's vault secrets to its connected GitHub repo Environment secrets (enqueues a background sync). Requires the github.manage permission.";
+    static examples = ['<%= config.bin %> secrets sync -p acme-api'];
+    static flags = {
+        ...base_1.projectFlag,
+    };
+    async run() {
+        const { flags } = await this.parse(SecretsSync);
+        const projectId = await this.resolveProjectId(flags.project);
+        const res = await this.api.post(`/cli/v1/projects/${encodeURIComponent(projectId)}/secrets/sync`);
+        if (!this.jsonEnabled()) {
+            this.log(`Secret sync enqueued for project ${flags.project}.`);
+        }
+        return res;
+    }
+}
+exports.default = SecretsSync;

package/dist/commands/servers/list.js

@@ -27,7 +27,7 @@ class ServersList extends base_1.BaseCommand {
         if (!this.jsonEnabled()) {
             this.log((0, output_1.renderTable)(['NAME', 'STATUS', 'CPU%', 'MEM%', 'DISK%', 'LAST SEEN', 'ID'], hosts.map((host) => [
                 String(host.name ?? ''),
-                String(host.status ?? ''),
+                (0, output_1.statusCell)(host.status),
                 String(host.cpu_pct ?? '-'),
                 String(host.mem_pct ?? '-'),
                 String(host.disk_pct ?? '-'),

package/dist/commands/tickets/list.js

@@ -15,7 +15,7 @@ class TicketsList extends base_1.BaseCommand {
             this.log((0, output_1.renderTable)(['CODE', 'TITLE', 'STATUS'], tickets.map((ticket) => [
                 String(ticket.code ?? ''),
                 String(ticket.title ?? ''),
-                String(ticket.status ?? ''),
+                (0, output_1.statusCell)(ticket.status, typeof ticket.status_color === 'string' ? ticket.status_color : undefined),
             ])));
         }
         return res;

package/dist/commands/tickets/show.js

@@ -46,7 +46,7 @@ class TicketsShow extends base_1.BaseCommand {
         return all;
     }
     renderAttachments(attachments) {
-        this.log(`\nAttachments (${attachments.length})`);
+        this.log(`\n📎 Attachments (${attachments.length})`);
         if (attachments.length === 0)
             return;
         this.log((0, output_1.renderTable)(['ID', 'FILENAME', 'CONTENT_TYPE', 'BYTE_SIZE', 'CREATED_AT'], attachments.map((attachment) => [
@@ -58,7 +58,7 @@ class TicketsShow extends base_1.BaseCommand {
         ])));
     }
     renderComments(comments) {
-        this.log(`\nComments (${comments.length})`);
+        this.log(`\n💬 Comments (${comments.length})`);
         for (const comment of comments) {
             this.log(`\n── ${(0, output_1.sanitize)(comment.author ?? '?')} · ${(0, output_1.sanitize)(comment.created_at ?? '')} · ${(0, output_1.sanitize)(comment.id ?? '')}`);
             this.log((0, output_1.sanitizeMultiline)(comment.body ?? ''));
@@ -90,13 +90,13 @@ class TicketsShow extends base_1.BaseCommand {
         }));
         // Body: description + technical analysis (only if present).
         const scalarBlocks = [
-            ['Description', ticket.description],
-            ['Technical analysis', ticket.technical_analysis],
+            ['📝', 'Description', ticket.description],
+            ['🔧', 'Technical analysis', ticket.technical_analysis],
         ];
-        for (const [label, value] of scalarBlocks) {
+        for (const [icon, label, value] of scalarBlocks) {
             if (value === null || value === undefined || String(value).trim() === '')
                 continue;
-            this.log(`\n${label}\n${'-'.repeat(label.length)}`);
+            this.log((0, output_1.section)(label, icon));
             this.log((0, output_1.sanitizeMultiline)(value));
         }
         this.renderScenarios(Array.isArray(ticket.scenarios) ? ticket.scenarios : []);
@@ -112,7 +112,7 @@ class TicketsShow extends base_1.BaseCommand {
         ];
         scenarios.forEach((scenario, index) => {
             const title = scenario.title ? `Scenario ${index + 1}: ${(0, output_1.sanitize)(scenario.title)}` : `Scenario ${index + 1}`;
-            this.log(`\n${title}\n${'-'.repeat(title.length)}`);
+            this.log((0, output_1.section)(title, '🧪'));
             for (const [label, key] of steps) {
                 const value = scenario[key];
                 if (value === null || value === undefined || String(value).trim() === '')
@@ -125,7 +125,7 @@ class TicketsShow extends base_1.BaseCommand {
     renderConditions(conditions) {
         if (conditions.length === 0)
             return;
-        this.log('\nDefinition of Done\n------------------');
+        this.log((0, output_1.section)('Definition of Done', '✅'));
         for (const condition of conditions)
             this.log(`- ${(0, output_1.sanitizeMultiline)(condition.text ?? '')}`);
     }

package/dist/commands/tokens/list.js

@@ -16,7 +16,7 @@ class TokensList extends base_1.BaseCommand {
                 String(token.id ?? ''),
                 String(token.name ?? ''),
                 String(token.token_prefix ?? ''),
-                String(token.status ?? ''),
+                (0, output_1.statusCell)(token.status),
             ])));
         }
         return res;