@cimplify/sdk 0.44.34 → 0.45.0

package/dist/cli/commands/env.mjs

@@ -1,705 +0,0 @@
-import { promises } from 'fs';
-import path from 'path';
-import os from 'os';
-import readline from 'readline';
-
-// src/cli/commands/env.ts
-
-// src/cli/errors.ts
-var CLI_ERROR_CODE = {
-  NOT_LOGGED_IN: "NOT_LOGGED_IN",
-  NOT_LINKED: "NOT_LINKED",
-  NETWORK_ERROR: "NETWORK_ERROR",
-  AUTH_FAILED: "AUTH_FAILED",
-  PROJECT_NOT_FOUND: "PROJECT_NOT_FOUND",
-  INVALID_INPUT: "INVALID_INPUT",
-  ALREADY_LINKED: "ALREADY_LINKED",
-  SERVER_ERROR: "SERVER_ERROR",
-  ABORTED: "ABORTED",
-  /** Operation needs interactive confirmation and the shell is non-interactive. */
-  INTERACTIVE_REQUIRED: "INTERACTIVE_REQUIRED"
-};
-var EXIT_CODE = {
-  ABORTED: 3,
-  NOT_LINKED: 4,
-  ALREADY_LINKED: 5,
-  GIT_ERROR: 6,
-  INTERACTIVE_REQUIRED: 7,
-  PROJECT_NOT_FOUND: 8,
-  NETWORK_ERROR: 10,
-  SERVER_ERROR: 11,
-  TIMEOUT: 12,
-  NOT_LOGGED_IN: 20,
-  AUTH_FAILED: 21,
-  UNAUTHORIZED: 22,
-  INVALID_INPUT: 30
-};
-var EXIT_CODE_FOR = {
-  NOT_LOGGED_IN: EXIT_CODE.NOT_LOGGED_IN,
-  NOT_LINKED: EXIT_CODE.NOT_LINKED,
-  NETWORK_ERROR: EXIT_CODE.NETWORK_ERROR,
-  AUTH_FAILED: EXIT_CODE.AUTH_FAILED,
-  PROJECT_NOT_FOUND: EXIT_CODE.PROJECT_NOT_FOUND,
-  GIT_ERROR: EXIT_CODE.GIT_ERROR,
-  INVALID_INPUT: EXIT_CODE.INVALID_INPUT,
-  ALREADY_LINKED: EXIT_CODE.ALREADY_LINKED,
-  SERVER_ERROR: EXIT_CODE.SERVER_ERROR,
-  ABORTED: EXIT_CODE.ABORTED,
-  UNAUTHORIZED: EXIT_CODE.UNAUTHORIZED,
-  TIMEOUT: EXIT_CODE.TIMEOUT,
-  INTERACTIVE_REQUIRED: EXIT_CODE.INTERACTIVE_REQUIRED
-};
-var CliError = class extends Error {
-  constructor(code, message, options = {}) {
-    super(message);
-    this.name = "CliError";
-    this.code = code;
-    this.exitCode = options.exitCode ?? EXIT_CODE_FOR[code];
-    this.remediation = options.remediation;
-  }
-};
-
-// src/cli/api-client.ts
-var DEFAULT_API_BASE_URL = "https://api.cimplify.io";
-var ENV_API_BASE_URL = "CIMPLIFY_API_URL";
-var DEFAULT_TIMEOUT_MS = 3e4;
-var HEADER_AUTHORIZATION = "Authorization";
-var HEADER_CONTENT_TYPE = "Content-Type";
-var HEADER_ACCEPT = "Accept";
-var HEADER_USER_AGENT = "User-Agent";
-var BEARER_PREFIX = "Bearer ";
-var CONTENT_TYPE_JSON = "application/json";
-var USER_AGENT = "cimplify-cli";
-var METHOD_GET = "GET";
-var METHOD_POST = "POST";
-var METHOD_PUT = "PUT";
-var METHOD_DELETE = "DELETE";
-var STATUS_UNAUTHORIZED = 401;
-var STATUS_FORBIDDEN = 403;
-var STATUS_NOT_FOUND = 404;
-var STATUS_CONFLICT = 409;
-var STATUS_BAD_REQUEST_MIN = 400;
-var STATUS_SERVER_ERROR_MIN = 500;
-var ApiClient = class _ApiClient {
-  constructor(baseUrl, apiKey) {
-    this.baseUrl = baseUrl.replace(/\/+$/, "");
-    this.apiKey = apiKey;
-  }
-  static fromAuth(auth) {
-    return new _ApiClient(auth.apiBaseUrl, auth.apiKey);
-  }
-  static unauthenticated(baseUrl = resolveBaseUrl()) {
-    return new _ApiClient(baseUrl, "");
-  }
-  static withKey(apiKey, baseUrl = resolveBaseUrl()) {
-    return new _ApiClient(baseUrl, apiKey);
-  }
-  get(pathname, options) {
-    return this.request(METHOD_GET, pathname, void 0, options);
-  }
-  post(pathname, body, options) {
-    return this.request(METHOD_POST, pathname, body, options);
-  }
-  put(pathname, body, options) {
-    return this.request(METHOD_PUT, pathname, body, options);
-  }
-  delete(pathname, options) {
-    return this.request(METHOD_DELETE, pathname, void 0, options);
-  }
-  async request(method, pathname, body, options) {
-    const url = this.buildUrl(pathname, options?.query);
-    const headers = {
-      [HEADER_ACCEPT]: CONTENT_TYPE_JSON,
-      [HEADER_USER_AGENT]: USER_AGENT
-    };
-    if (this.apiKey) {
-      headers[HEADER_AUTHORIZATION] = `${BEARER_PREFIX}${this.apiKey}`;
-    }
-    let payload;
-    if (body !== void 0) {
-      headers[HEADER_CONTENT_TYPE] = CONTENT_TYPE_JSON;
-      payload = JSON.stringify(body);
-    }
-    const controller = new AbortController();
-    const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    let response;
-    try {
-      response = await fetch(url, {
-        method,
-        headers,
-        body: payload,
-        signal: controller.signal
-      });
-    } catch (err) {
-      clearTimeout(timer);
-      throw toNetworkError(err);
-    }
-    clearTimeout(timer);
-    return parseResponse(response);
-  }
-  buildUrl(pathname, query) {
-    const base = pathname.startsWith("/") ? pathname : `/${pathname}`;
-    const url = new URL(`${this.baseUrl}${base}`);
-    if (query) {
-      for (const [k, v] of Object.entries(query)) {
-        if (v === void 0 || v === null) continue;
-        url.searchParams.set(k, String(v));
-      }
-    }
-    return url.toString();
-  }
-};
-function resolveBaseUrl(override) {
-  const fromEnv = process.env[ENV_API_BASE_URL];
-  return fromEnv && fromEnv.length > 0 ? fromEnv : DEFAULT_API_BASE_URL;
-}
-async function parseResponse(response) {
-  const text = await response.text();
-  let body = void 0;
-  if (text.length > 0) {
-    try {
-      body = JSON.parse(text);
-    } catch {
-      throw new CliError(
-        CLI_ERROR_CODE.SERVER_ERROR,
-        `Server returned non-JSON response (status ${response.status}): ${truncate(text)}`
-      );
-    }
-  }
-  if (response.ok) {
-    if (body && typeof body === "object" && "data" in body) {
-      return body.data;
-    }
-    return body;
-  }
-  const code = mapStatusToCode(response.status);
-  const message = extractErrorMessage(body, response.status);
-  throw new CliError(code, message);
-}
-function mapStatusToCode(status) {
-  if (status === STATUS_UNAUTHORIZED) return CLI_ERROR_CODE.AUTH_FAILED;
-  if (status === STATUS_FORBIDDEN) return CLI_ERROR_CODE.AUTH_FAILED;
-  if (status === STATUS_NOT_FOUND) return CLI_ERROR_CODE.PROJECT_NOT_FOUND;
-  if (status === STATUS_CONFLICT) return CLI_ERROR_CODE.ALREADY_LINKED;
-  if (status >= STATUS_SERVER_ERROR_MIN) return CLI_ERROR_CODE.SERVER_ERROR;
-  if (status >= STATUS_BAD_REQUEST_MIN) return CLI_ERROR_CODE.INVALID_INPUT;
-  return CLI_ERROR_CODE.SERVER_ERROR;
-}
-function extractErrorMessage(body, status) {
-  if (body && typeof body === "object") {
-    const envelope = body;
-    if (envelope.error && typeof envelope.error.error_message === "string") {
-      return envelope.error.error_code ? `${envelope.error.error_code}: ${envelope.error.error_message}` : envelope.error.error_message;
-    }
-    if (typeof envelope.message === "string") return envelope.message;
-  }
-  return `HTTP ${status}`;
-}
-function toNetworkError(err) {
-  if (err instanceof DOMException && err.name === "AbortError") {
-    return new CliError(CLI_ERROR_CODE.NETWORK_ERROR, "Request timed out.");
-  }
-  const message = err instanceof Error ? err.message : String(err);
-  return new CliError(CLI_ERROR_CODE.NETWORK_ERROR, `Network error: ${message}`);
-}
-function truncate(value, max = 200) {
-  return value.length > max ? `${value.slice(0, max)}\u2026` : value;
-}
-
-// src/cli/args.ts
-function parseArgs(argv) {
-  const positional = [];
-  const flags = /* @__PURE__ */ new Map();
-  for (let i = 0; i < argv.length; i++) {
-    const arg = argv[i];
-    if (!arg.startsWith("--")) {
-      positional.push(arg);
-      continue;
-    }
-    const eq = arg.indexOf("=");
-    if (eq !== -1) {
-      flags.set(arg.slice(2, eq), arg.slice(eq + 1));
-      continue;
-    }
-    const name = arg.slice(2);
-    const next = argv[i + 1];
-    if (next !== void 0 && !next.startsWith("--")) {
-      flags.set(name, next);
-      i++;
-    } else {
-      flags.set(name, true);
-    }
-  }
-  return { positional, flags };
-}
-function flagString(args, name) {
-  const v = args.flags.get(name);
-  return typeof v === "string" ? v : void 0;
-}
-function flagBool(args, name) {
-  return args.flags.has(name);
-}
-var AUTH_FILE_NAME = "auth.json";
-var PROJECT_FILE_NAME = "project.json";
-var PROJECT_DIR_NAME = ".cimplify";
-var ENV_XDG_CONFIG_HOME = "XDG_CONFIG_HOME";
-var APP_CONFIG_DIR_NAME = "cimplify";
-var HOME_CONFIG_DIR_NAME = ".config";
-var ENCODING_UTF8 = "utf8";
-function authConfigDir() {
-  const xdg = process.env[ENV_XDG_CONFIG_HOME];
-  return xdg ? path.join(xdg, APP_CONFIG_DIR_NAME) : path.join(os.homedir(), HOME_CONFIG_DIR_NAME, APP_CONFIG_DIR_NAME);
-}
-function authConfigPath() {
-  return path.join(authConfigDir(), AUTH_FILE_NAME);
-}
-function projectConfigDir(cwd = process.cwd()) {
-  return path.join(cwd, PROJECT_DIR_NAME);
-}
-function projectConfigPath(cwd = process.cwd()) {
-  return path.join(projectConfigDir(cwd), PROJECT_FILE_NAME);
-}
-async function readJsonFile(filePath) {
-  try {
-    const raw = await promises.readFile(filePath, ENCODING_UTF8);
-    return JSON.parse(raw);
-  } catch (err) {
-    if (err.code === "ENOENT") return null;
-    throw err;
-  }
-}
-async function readAuth() {
-  const data = await readJsonFile(authConfigPath());
-  if (!data) {
-    throw new CliError(
-      CLI_ERROR_CODE.NOT_LOGGED_IN,
-      "Not logged in. Run `cimplify login` first."
-    );
-  }
-  return data;
-}
-async function readProjectLink(cwd = process.cwd()) {
-  const data = await readJsonFile(projectConfigPath(cwd));
-  if (!data) {
-    throw new CliError(
-      CLI_ERROR_CODE.NOT_LINKED,
-      "No project linked. Run `cimplify link <project-id>` first."
-    );
-  }
-  return data;
-}
-
-// src/cli/envfile.ts
-var COMMENT_CHAR = "#";
-var QUOTE_DOUBLE = '"';
-var QUOTE_SINGLE = "'";
-var KEY_SEPARATOR = "=";
-var KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
-function parseEnvFile(text) {
-  const entries = [];
-  const lines = text.split("\n");
-  for (const raw of lines) {
-    const line = raw.trim();
-    if (line.length === 0) continue;
-    if (line.startsWith(COMMENT_CHAR)) continue;
-    const eq = line.indexOf(KEY_SEPARATOR);
-    if (eq === -1) continue;
-    const key = line.slice(0, eq).trim();
-    if (!KEY_PATTERN.test(key)) continue;
-    let value = line.slice(eq + 1).trim();
-    if (value.length >= 2) {
-      const first = value[0];
-      const last = value[value.length - 1];
-      if (first === QUOTE_DOUBLE && last === QUOTE_DOUBLE || first === QUOTE_SINGLE && last === QUOTE_SINGLE) {
-        value = value.slice(1, -1);
-      }
-    }
-    entries.push({ key, value });
-  }
-  return entries;
-}
-function parseKeyValueArg(input) {
-  const eq = input.indexOf(KEY_SEPARATOR);
-  if (eq === -1) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `Expected KEY=VALUE, got "${input}".`
-    );
-  }
-  const key = input.slice(0, eq).trim();
-  if (!KEY_PATTERN.test(key)) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `Invalid env var key "${key}". Must match ${KEY_PATTERN.source}.`
-    );
-  }
-  return { key, value: input.slice(eq + 1) };
-}
-function formatEnvFile(entries) {
-  const lines = [];
-  for (const { key, value } of entries) {
-    const needsQuote = /[\s"'#]/.test(value) || value.length === 0;
-    const rendered = needsQuote ? `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"` : value;
-    lines.push(`${key}=${rendered}`);
-  }
-  return lines.length === 0 ? "" : `${lines.join("\n")}
-`;
-}
-
-// src/cli/output.ts
-var RESET = "\x1B[0m";
-var BOLD_OPEN = "\x1B[1m";
-var DIM_OPEN = "\x1B[2m";
-var GREEN_OPEN = "\x1B[32m";
-var PREFIX_SUCCESS = "\u2713";
-var ENV_JSON = "CIMPLIFY_JSON";
-var ENV_YES = "CIMPLIFY_YES";
-function envFlag(name) {
-  const v = process.env[name];
-  return v === "1" || v === "true";
-}
-function isJsonMode() {
-  return envFlag(ENV_JSON);
-}
-function isAutoYes() {
-  return envFlag(ENV_YES);
-}
-function isInteractive() {
-  return Boolean(process.stdout.isTTY) && Boolean(process.stdin.isTTY);
-}
-function wrap(open, value) {
-  return `${open}${value}${RESET}`;
-}
-function bold(value) {
-  return isJsonMode() ? value : wrap(BOLD_OPEN, value);
-}
-function dim(value) {
-  return isJsonMode() ? value : wrap(DIM_OPEN, value);
-}
-function green(value) {
-  return isJsonMode() ? value : wrap(GREEN_OPEN, value);
-}
-function success(message) {
-  if (isJsonMode()) return;
-  console.log(`${green(PREFIX_SUCCESS)} ${message}`);
-}
-function info(message) {
-  if (isJsonMode()) return;
-  console.log(message);
-}
-var ENV_EMITTED = "__CIMPLIFY_RESULT_EMITTED";
-function result(data) {
-  if (!isJsonMode()) return;
-  if (process.env[ENV_EMITTED] === "1") return;
-  process.env[ENV_EMITTED] = "1";
-  process.stdout.write(`${JSON.stringify({ ok: true, data })}
-`);
-}
-async function promptLine(question) {
-  if (!isInteractive()) {
-    throw new CliError(
-      CLI_ERROR_CODE.INTERACTIVE_REQUIRED,
-      "this operation needs interactive input but stdin is not a TTY",
-      { remediation: "run interactively, or supply the value via a flag" }
-    );
-  }
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  try {
-    return await new Promise((resolve) => {
-      rl.question(question, (answer) => resolve(answer));
-    });
-  } finally {
-    rl.close();
-  }
-}
-async function promptYesNo(question, defaultNo = true) {
-  if (isAutoYes()) return true;
-  if (!isInteractive()) {
-    throw new CliError(
-      CLI_ERROR_CODE.INTERACTIVE_REQUIRED,
-      `this operation needs confirmation: ${question}`,
-      { remediation: "re-run with --yes to accept, or run interactively" }
-    );
-  }
-  const suffix = defaultNo ? " [y/N] " : " [Y/n] ";
-  const answer = (await promptLine(`${question}${suffix}`)).trim().toLowerCase();
-  if (answer === "") return !defaultNo;
-  return answer === "y" || answer === "yes";
-}
-
-// src/cli/types.ts
-var ENV_SCOPE = {
-  DEVELOPMENT: "development",
-  PREVIEW: "preview",
-  STAGING: "staging",
-  PRODUCTION: "production"
-};
-var SECRET_MASK = "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
-var PUBLIC_ENV_PREFIX = "NEXT_PUBLIC_";
-var REPO_PROVIDER = {
-  FREESTYLE: "freestyle",
-  GITHUB: "github",
-  GITEA: "gitea",
-  EXTERNAL: "external"
-};
-new Set(Object.values(REPO_PROVIDER));
-
-// src/cli/commands/env.ts
-var SUB_LS = "ls";
-var SUB_LIST = "list";
-var SUB_PULL = "pull";
-var SUB_PUSH = "push";
-var SUB_ADD = "add";
-var SUB_RM = "rm";
-var SUB_REMOVE = "remove";
-var FLAG_SCOPE = "scope";
-var FLAG_SHOW = "show";
-var FLAG_OUT = "out";
-var FLAG_FILE = "file";
-var FLAG_OVERWRITE = "overwrite";
-var FLAG_SECRET = "secret";
-var FLAG_PUBLIC = "public";
-var FLAG_YES = "yes";
-var DEFAULT_PULL_PATH = ".env.local";
-var PULL_BACKUP_SUFFIX = ".bak";
-var COL_GAP = "  ";
-var COL_KEY = "KEY";
-var COL_SCOPE = "SCOPE";
-var COL_SECRET = "SECRET";
-var COL_VALUE = "VALUE";
-var VALID_SCOPES = new Set(Object.values(ENV_SCOPE));
-function envEndpoint(businessId, projectId) {
-  return `/v1/businesses/${encodeURIComponent(businessId)}/projects/${encodeURIComponent(projectId)}/env-vars`;
-}
-function envItemEndpoint(businessId, projectId, id) {
-  return `${envEndpoint(businessId, projectId)}/${encodeURIComponent(id)}`;
-}
-function bulkSetEndpoint(businessId, projectId) {
-  return `${envEndpoint(businessId, projectId)}/bulk-set`;
-}
-function resolveScope(value, fallback = ENV_SCOPE.PREVIEW) {
-  if (value === void 0) return fallback;
-  if (!VALID_SCOPES.has(value)) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `Invalid scope "${value}". Choose one of: ${[...VALID_SCOPES].join(", ")}.`
-    );
-  }
-  return value;
-}
-function classifyIsSecret(key, override) {
-  if (override.secret && override.public) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      "Cannot pass both --secret and --public."
-    );
-  }
-  if (override.secret) return true;
-  if (override.public) return false;
-  return !key.startsWith(PUBLIC_ENV_PREFIX);
-}
-async function run(argv) {
-  const args = parseArgs(argv);
-  const sub = args.positional[0];
-  if (!sub) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `Usage: cimplify env <${SUB_LS}|${SUB_PULL}|${SUB_PUSH}|${SUB_ADD}|${SUB_RM}>`
-    );
-  }
-  const auth = await readAuth();
-  const link = await readProjectLink();
-  const client = ApiClient.fromAuth(auth);
-  if (sub === SUB_LS || sub === SUB_LIST) {
-    await listEnv(client, link.businessId, link.projectId, args);
-    return;
-  }
-  if (sub === SUB_PULL) {
-    await pullEnv(client, link.businessId, link.projectId, args);
-    return;
-  }
-  if (sub === SUB_PUSH) {
-    await pushEnv(client, link.businessId, link.projectId, args);
-    return;
-  }
-  if (sub === SUB_ADD) {
-    await addEnv(client, link.businessId, link.projectId, args);
-    return;
-  }
-  if (sub === SUB_RM || sub === SUB_REMOVE) {
-    await removeEnv(client, link.businessId, link.projectId, args);
-    return;
-  }
-  throw new CliError(CLI_ERROR_CODE.INVALID_INPUT, `Unknown env subcommand "${sub}"`);
-}
-async function listEnv(client, businessId, projectId, args) {
-  const scope = resolveScope(flagString(args, FLAG_SCOPE));
-  const show = flagBool(args, FLAG_SHOW);
-  const records = await client.get(envEndpoint(businessId, projectId), {
-    query: { scope }
-  });
-  if (records.length === 0) {
-    info(dim(`No env vars in scope "${scope}". Add one: cimplify env add KEY=VALUE`));
-    result({ scope, vars: [] });
-    return;
-  }
-  const keyWidth = Math.max(COL_KEY.length, ...records.map((r) => r.key.length));
-  const scopeWidth = Math.max(COL_SCOPE.length, ...records.map((r) => String(r.scope).length));
-  const secretWidth = Math.max(COL_SECRET.length, "yes".length);
-  info(
-    bold(
-      [
-        COL_KEY.padEnd(keyWidth),
-        COL_SCOPE.padEnd(scopeWidth),
-        COL_SECRET.padEnd(secretWidth),
-        COL_VALUE
-      ].join(COL_GAP)
-    )
-  );
-  for (const r of records) {
-    const value = renderValue(r, show);
-    info(
-      [
-        r.key.padEnd(keyWidth),
-        String(r.scope).padEnd(scopeWidth),
-        (r.is_secret ? "yes" : "no").padEnd(secretWidth),
-        value
-      ].join(COL_GAP)
-    );
-  }
-  result({
-    scope,
-    vars: records.map((r) => ({
-      key: r.key,
-      scope: r.scope,
-      is_secret: r.is_secret,
-      value: r.is_secret ? null : r.value ?? null
-    }))
-  });
-}
-function renderValue(r, show) {
-  if (r.is_secret) return SECRET_MASK;
-  if (r.value === null) return SECRET_MASK;
-  if (!show) return r.value;
-  return r.value;
-}
-async function pullEnv(client, businessId, projectId, args) {
-  const scope = resolveScope(flagString(args, FLAG_SCOPE));
-  const outPath = path.resolve(process.cwd(), flagString(args, FLAG_OUT) ?? DEFAULT_PULL_PATH);
-  const records = await client.get(envEndpoint(businessId, projectId), {
-    query: { scope }
-  });
-  const blockedSecrets = records.filter((r) => r.is_secret).map((r) => r.key);
-  if (blockedSecrets.length > 0) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `Cannot pull secret values: ${blockedSecrets.join(", ")}.
-Secrets are never returned in plaintext to the CLI; use the dashboard to copy them.`
-    );
-  }
-  const entries = records.filter((r) => r.value !== null).map((r) => ({ key: r.key, value: r.value }));
-  await backupIfExists(outPath);
-  await promises.mkdir(path.dirname(outPath), { recursive: true });
-  await promises.writeFile(outPath, formatEnvFile(entries), "utf8");
-  success(`Pulled ${entries.length} var${entries.length === 1 ? "" : "s"} to ${path.relative(process.cwd(), outPath) || outPath}`);
-  result({ scope, count: entries.length, file: outPath });
-}
-async function backupIfExists(target) {
-  try {
-    await promises.stat(target);
-  } catch (err) {
-    if (err.code === "ENOENT") return;
-    throw err;
-  }
-  await promises.copyFile(target, `${target}${PULL_BACKUP_SUFFIX}`);
-}
-async function pushEnv(client, businessId, projectId, args) {
-  const scope = resolveScope(flagString(args, FLAG_SCOPE));
-  const filePath = path.resolve(process.cwd(), flagString(args, FLAG_FILE) ?? DEFAULT_PULL_PATH);
-  const overwrite = flagBool(args, FLAG_OVERWRITE);
-  let raw;
-  try {
-    raw = await promises.readFile(filePath, "utf8");
-  } catch (err) {
-    if (err.code === "ENOENT") {
-      throw new CliError(
-        CLI_ERROR_CODE.INVALID_INPUT,
-        `Env file not found: ${filePath}.
-Use --file to point at a different path.`
-      );
-    }
-    throw err;
-  }
-  const entries = parseEnvFile(raw);
-  if (entries.length === 0) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `No env vars found in ${filePath}.`
-    );
-  }
-  const body = {
-    scope,
-    vars: entries.map((e) => ({
-      key: e.key,
-      value: e.value,
-      is_secret: classifyIsSecret(e.key, { secret: false, public: false })
-    })),
-    overwrite
-  };
-  await client.post(bulkSetEndpoint(businessId, projectId), body);
-  success(`Pushed ${entries.length} var${entries.length === 1 ? "" : "s"} to ${scope}${overwrite ? " (overwrite)" : ""}`);
-  result({ scope, count: entries.length, overwrite });
-}
-async function addEnv(client, businessId, projectId, args) {
-  const positional = args.positional[1];
-  if (!positional) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `Usage: cimplify env ${SUB_ADD} KEY=VALUE [--scope=<scope>] [--secret|--public]`
-    );
-  }
-  const { key, value } = parseKeyValueArg(positional);
-  const scope = resolveScope(flagString(args, FLAG_SCOPE));
-  const isSecret = classifyIsSecret(key, {
-    secret: flagBool(args, FLAG_SECRET),
-    public: flagBool(args, FLAG_PUBLIC)
-  });
-  const body = { key, value, scope, is_secret: isSecret };
-  const created = await client.post(envEndpoint(businessId, projectId), body);
-  success(`Added ${created.key} (${scope}, ${isSecret ? "secret" : "public"})`);
-  result({
-    var: { key: created.key, scope: created.scope, is_secret: created.is_secret }
-  });
-}
-async function removeEnv(client, businessId, projectId, args) {
-  const key = args.positional[1];
-  if (!key) {
-    throw new CliError(
-      CLI_ERROR_CODE.INVALID_INPUT,
-      `Usage: cimplify env ${SUB_RM} <KEY> [--scope=<scope>]`
-    );
-  }
-  const scope = resolveScope(flagString(args, FLAG_SCOPE));
-  const records = await client.get(envEndpoint(businessId, projectId), {
-    query: { scope }
-  });
-  const target = records.find((r) => r.key === key);
-  if (!target) {
-    throw new CliError(
-      CLI_ERROR_CODE.PROJECT_NOT_FOUND,
-      `No env var "${key}" in scope "${scope}".`
-    );
-  }
-  if (!flagBool(args, FLAG_YES)) {
-    const confirmed = await promptYesNo(`Delete ${key} from ${scope}?`, true);
-    if (!confirmed) {
-      throw new CliError(CLI_ERROR_CODE.ABORTED, "Aborted by user.");
-    }
-  }
-  await client.delete(envItemEndpoint(businessId, projectId, target.id));
-  success(`Removed ${key} from ${scope}`);
-  result({ removed: true, key, scope });
-}
-
-export { classifyIsSecret, run as default };