@devorama/secrets 0.1.0

package/dist/chunk-UBFSRMBE.mjs

@@ -0,0 +1,54 @@
+// src/pull.ts
+import { writeFileSync } from "fs";
+import { execa } from "execa";
+async function pull(options) {
+  const { service, envName, output, dryRun = false, verbose = false } = options;
+  const { stdout } = await execa("chamber", ["env", `${service}/${envName}`]);
+  if (verbose) console.log(`Retrieved variables from ${service}/${envName}`);
+  if (dryRun) {
+    console.log(`[dry-run] Would write to ${output}:
+${stdout}`);
+    return;
+  }
+  writeFileSync(output, stdout, "utf-8");
+  const count = stdout.split("\n").filter(Boolean).length;
+  console.log(`\u2713 Pulled ${count} variables to ${output}`);
+}
+
+// src/push.ts
+import { readFileSync } from "fs";
+import { execa as execa2 } from "execa";
+function parseEnvContent(content) {
+  const result = {};
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const idx = trimmed.indexOf("=");
+    if (idx === -1) continue;
+    const key = trimmed.slice(0, idx).trim();
+    const raw = trimmed.slice(idx + 1).trim();
+    result[key] = raw.replace(/^["']|["']$/g, "");
+  }
+  return result;
+}
+async function push(options) {
+  const { envFile, service, envName, dryRun = false, verbose = false } = options;
+  const content = readFileSync(envFile, "utf-8");
+  const entries = Object.entries(parseEnvContent(content));
+  if (verbose) console.log(`Found ${entries.length} variables in ${envFile}`);
+  for (const [key, value] of entries) {
+    if (verbose) console.log(`  ${dryRun ? "[dry-run] " : ""}${key}`);
+    if (!dryRun) {
+      await execa2("chamber", ["write", `${service}/${envName}`, key, value]);
+    }
+  }
+  console.log(
+    `\u2713 ${dryRun ? "[dry-run] " : ""}Pushed ${entries.length} variables to ${service}/${envName}`
+  );
+}
+
+export {
+  pull,
+  push
+};
+//# sourceMappingURL=chunk-UBFSRMBE.mjs.map

package/dist/chunk-UBFSRMBE.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/pull.ts","../src/push.ts"],"sourcesContent":["import { writeFileSync } from 'node:fs'\nimport { execa } from 'execa'\n\nexport interface PullOptions {\n  service: string\n  envName: string\n  output: string\n  dryRun?: boolean\n  verbose?: boolean\n}\n\nexport async function pull(options: PullOptions): Promise<void> {\n  const { service, envName, output, dryRun = false, verbose = false } = options\n\n  const { stdout } = await execa('chamber', ['env', `${service}/${envName}`])\n\n  if (verbose) console.log(`Retrieved variables from ${service}/${envName}`)\n\n  if (dryRun) {\n    console.log(`[dry-run] Would write to ${output}:\\n${stdout}`)\n    return\n  }\n\n  writeFileSync(output, stdout, 'utf-8')\n  const count = stdout.split('\\n').filter(Boolean).length\n  console.log(`✓ Pulled ${count} variables to ${output}`)\n}\n","import { readFileSync } from 'node:fs'\nimport { execa } from 'execa'\n\nexport interface PushOptions {\n  envFile: string\n  service: string\n  envName: string\n  dryRun?: boolean\n  verbose?: boolean\n}\n\nfunction parseEnvContent(content: string): Record<string, string> {\n  const result: Record<string, string> = {}\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed || trimmed.startsWith('#')) continue\n    const idx = trimmed.indexOf('=')\n    if (idx === -1) continue\n    const key = trimmed.slice(0, idx).trim()\n    const raw = trimmed.slice(idx + 1).trim()\n    result[key] = raw.replace(/^[\"']|[\"']$/g, '')\n  }\n  return result\n}\n\nexport async function push(options: PushOptions): Promise<void> {\n  const { envFile, service, envName, dryRun = false, verbose = false } = options\n  const content = readFileSync(envFile, 'utf-8')\n  const entries = Object.entries(parseEnvContent(content))\n\n  if (verbose) console.log(`Found ${entries.length} variables in ${envFile}`)\n\n  for (const [key, value] of entries) {\n    if (verbose) console.log(`  ${dryRun ? '[dry-run] ' : ''}${key}`)\n    if (!dryRun) {\n      await execa('chamber', ['write', `${service}/${envName}`, key, value])\n    }\n  }\n\n  console.log(\n    `✓ ${dryRun ? '[dry-run] ' : ''}Pushed ${entries.length} variables to ${service}/${envName}`\n  )\n}\n"],"mappings":";AAAA,SAAS,qBAAqB;AAC9B,SAAS,aAAa;AAUtB,eAAsB,KAAK,SAAqC;AAC9D,QAAM,EAAE,SAAS,SAAS,QAAQ,SAAS,OAAO,UAAU,MAAM,IAAI;AAEtE,QAAM,EAAE,OAAO,IAAI,MAAM,MAAM,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;AAE1E,MAAI,QAAS,SAAQ,IAAI,4BAA4B,OAAO,IAAI,OAAO,EAAE;AAEzE,MAAI,QAAQ;AACV,YAAQ,IAAI,4BAA4B,MAAM;AAAA,EAAM,MAAM,EAAE;AAC5D;AAAA,EACF;AAEA,gBAAc,QAAQ,QAAQ,OAAO;AACrC,QAAM,QAAQ,OAAO,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE;AACjD,UAAQ,IAAI,iBAAY,KAAK,iBAAiB,MAAM,EAAE;AACxD;;;AC1BA,SAAS,oBAAoB;AAC7B,SAAS,SAAAA,cAAa;AAUtB,SAAS,gBAAgB,SAAyC;AAChE,QAAM,SAAiC,CAAC;AACxC,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,UAAM,MAAM,QAAQ,QAAQ,GAAG;AAC/B,QAAI,QAAQ,GAAI;AAChB,UAAM,MAAM,QAAQ,MAAM,GAAG,GAAG,EAAE,KAAK;AACvC,UAAM,MAAM,QAAQ,MAAM,MAAM,CAAC,EAAE,KAAK;AACxC,WAAO,GAAG,IAAI,IAAI,QAAQ,gBAAgB,EAAE;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,SAAqC;AAC9D,QAAM,EAAE,SAAS,SAAS,SAAS,SAAS,OAAO,UAAU,MAAM,IAAI;AACvE,QAAM,UAAU,aAAa,SAAS,OAAO;AAC7C,QAAM,UAAU,OAAO,QAAQ,gBAAgB,OAAO,CAAC;AAEvD,MAAI,QAAS,SAAQ,IAAI,SAAS,QAAQ,MAAM,iBAAiB,OAAO,EAAE;AAE1E,aAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAClC,QAAI,QAAS,SAAQ,IAAI,KAAK,SAAS,eAAe,EAAE,GAAG,GAAG,EAAE;AAChE,QAAI,CAAC,QAAQ;AACX,YAAMA,OAAM,WAAW,CAAC,SAAS,GAAG,OAAO,IAAI,OAAO,IAAI,KAAK,KAAK,CAAC;AAAA,IACvE;AAAA,EACF;AAEA,UAAQ;AAAA,IACN,UAAK,SAAS,eAAe,EAAE,UAAU,QAAQ,MAAM,iBAAiB,OAAO,IAAI,OAAO;AAAA,EAC5F;AACF;","names":["execa"]}

package/dist/cli.d.cts

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+declare function checkPreflight(): void;
+
+export { checkPreflight };

package/dist/cli.d.ts

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+declare function checkPreflight(): void;
+
+export { checkPreflight };

package/dist/cli.js

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/cli.ts
+var cli_exports = {};
+__export(cli_exports, {
+  checkPreflight: () => checkPreflight
+});
+module.exports = __toCommonJS(cli_exports);
+
+// ../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.14_typescript@5.9.3/node_modules/tsup/assets/cjs_shims.js
+var getImportMetaUrl = () => typeof document === "undefined" ? new URL(`file:${__filename}`).href : document.currentScript && document.currentScript.tagName.toUpperCase() === "SCRIPT" ? document.currentScript.src : new URL("main.js", document.baseURI).href;
+var importMetaUrl = /* @__PURE__ */ getImportMetaUrl();
+
+// src/cli.ts
+var import_node_fs3 = require("fs");
+var import_node_url = require("url");
+var import_commander = require("commander");
+var import_execa3 = require("execa");
+
+// src/pull.ts
+var import_node_fs = require("fs");
+var import_execa = require("execa");
+async function pull(options) {
+  const { service, envName, output, dryRun = false, verbose = false } = options;
+  const { stdout } = await (0, import_execa.execa)("chamber", ["env", `${service}/${envName}`]);
+  if (verbose) console.log(`Retrieved variables from ${service}/${envName}`);
+  if (dryRun) {
+    console.log(`[dry-run] Would write to ${output}:
+${stdout}`);
+    return;
+  }
+  (0, import_node_fs.writeFileSync)(output, stdout, "utf-8");
+  const count = stdout.split("\n").filter(Boolean).length;
+  console.log(`\u2713 Pulled ${count} variables to ${output}`);
+}
+
+// src/push.ts
+var import_node_fs2 = require("fs");
+var import_execa2 = require("execa");
+function parseEnvContent(content) {
+  const result = {};
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const idx = trimmed.indexOf("=");
+    if (idx === -1) continue;
+    const key = trimmed.slice(0, idx).trim();
+    const raw = trimmed.slice(idx + 1).trim();
+    result[key] = raw.replace(/^["']|["']$/g, "");
+  }
+  return result;
+}
+async function push(options) {
+  const { envFile, service, envName, dryRun = false, verbose = false } = options;
+  const content = (0, import_node_fs2.readFileSync)(envFile, "utf-8");
+  const entries = Object.entries(parseEnvContent(content));
+  if (verbose) console.log(`Found ${entries.length} variables in ${envFile}`);
+  for (const [key, value] of entries) {
+    if (verbose) console.log(`  ${dryRun ? "[dry-run] " : ""}${key}`);
+    if (!dryRun) {
+      await (0, import_execa2.execa)("chamber", ["write", `${service}/${envName}`, key, value]);
+    }
+  }
+  console.log(
+    `\u2713 ${dryRun ? "[dry-run] " : ""}Pushed ${entries.length} variables to ${service}/${envName}`
+  );
+}
+
+// src/cli.ts
+function checkPreflight() {
+  try {
+    (0, import_execa3.execaSync)("chamber", ["version"]);
+  } catch {
+    console.error("Error: `chamber` binary not found in PATH.");
+    console.error("Install: https://github.com/segmentio/chamber#installation");
+    process.exit(1);
+  }
+  const hasCredentials = process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY || Boolean(process.env.AWS_PROFILE) || (0, import_node_fs3.existsSync)(`${process.env.HOME}/.aws/credentials`);
+  if (!hasCredentials) {
+    console.error("Error: AWS credentials not configured.");
+    console.error("Set AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY, or configure ~/.aws/credentials");
+    process.exit(1);
+  }
+}
+var program = new import_commander.Command();
+program.name("devtools").description("Devorama developer tools CLI").version("0.1.0");
+var secretsCmd = program.command("secrets").description("Manage secrets via AWS Parameter Store");
+secretsCmd.command("push").description("Push .env variables to AWS Parameter Store").option("--env <file>", ".env file to push", ".env").requiredOption("--service <name>", "Chamber service name").requiredOption("--env-name <name>", "Environment name (e.g. staging, production)").option("--dry-run", "Show what would be pushed without writing", false).option("--verbose", "Log each key being processed", false).action(async (opts) => {
+  checkPreflight();
+  await push({
+    envFile: opts.env,
+    service: opts.service,
+    envName: opts.envName,
+    dryRun: opts.dryRun,
+    verbose: opts.verbose
+  });
+});
+secretsCmd.command("pull").description("Pull variables from AWS Parameter Store to a .env file").requiredOption("--service <name>", "Chamber service name").requiredOption("--env-name <name>", "Environment name (e.g. staging, production)").option("--output <file>", "Output .env file path", ".env").option("--dry-run", "Show what would be written without creating the file", false).option("--verbose", "Log details", false).action(async (opts) => {
+  checkPreflight();
+  await pull({
+    service: opts.service,
+    envName: opts.envName,
+    output: opts.output,
+    dryRun: opts.dryRun,
+    verbose: opts.verbose
+  });
+});
+if (process.argv[1] === (0, import_node_url.fileURLToPath)(importMetaUrl)) {
+  program.parse();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  checkPreflight
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts","../../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.14_typescript@5.9.3/node_modules/tsup/assets/cjs_shims.js","../src/pull.ts","../src/push.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { existsSync } from 'node:fs'\nimport { fileURLToPath } from 'node:url'\nimport { Command } from 'commander'\nimport { execaSync } from 'execa'\nimport { pull } from './pull'\nimport { push } from './push'\n\nexport function checkPreflight(): void {\n  try {\n    execaSync('chamber', ['version'])\n  } catch {\n    console.error('Error: `chamber` binary not found in PATH.')\n    console.error('Install: https://github.com/segmentio/chamber#installation')\n    process.exit(1)\n  }\n\n  const hasCredentials =\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    Boolean(process.env.AWS_PROFILE) ||\n    existsSync(`${process.env.HOME}/.aws/credentials`)\n\n  if (!hasCredentials) {\n    console.error('Error: AWS credentials not configured.')\n    console.error('Set AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY, or configure ~/.aws/credentials')\n    process.exit(1)\n  }\n}\n\nconst program = new Command()\n\nprogram.name('devtools').description('Devorama developer tools CLI').version('0.1.0')\n\nconst secretsCmd = program.command('secrets').description('Manage secrets via AWS Parameter Store')\n\nsecretsCmd\n  .command('push')\n  .description('Push .env variables to AWS Parameter Store')\n  .option('--env <file>', '.env file to push', '.env')\n  .requiredOption('--service <name>', 'Chamber service name')\n  .requiredOption('--env-name <name>', 'Environment name (e.g. staging, production)')\n  .option('--dry-run', 'Show what would be pushed without writing', false)\n  .option('--verbose', 'Log each key being processed', false)\n  .action(async (opts) => {\n    checkPreflight()\n    await push({\n      envFile: opts.env,\n      service: opts.service,\n      envName: opts.envName,\n      dryRun: opts.dryRun,\n      verbose: opts.verbose,\n    })\n  })\n\nsecretsCmd\n  .command('pull')\n  .description('Pull variables from AWS Parameter Store to a .env file')\n  .requiredOption('--service <name>', 'Chamber service name')\n  .requiredOption('--env-name <name>', 'Environment name (e.g. staging, production)')\n  .option('--output <file>', 'Output .env file path', '.env')\n  .option('--dry-run', 'Show what would be written without creating the file', false)\n  .option('--verbose', 'Log details', false)\n  .action(async (opts) => {\n    checkPreflight()\n    await pull({\n      service: opts.service,\n      envName: opts.envName,\n      output: opts.output,\n      dryRun: opts.dryRun,\n      verbose: opts.verbose,\n    })\n  })\n\n// Only parse argv when invoked directly (not when imported in tests)\nif (process.argv[1] === fileURLToPath(import.meta.url)) {\n  program.parse()\n}\n","// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","import { writeFileSync } from 'node:fs'\nimport { execa } from 'execa'\n\nexport interface PullOptions {\n  service: string\n  envName: string\n  output: string\n  dryRun?: boolean\n  verbose?: boolean\n}\n\nexport async function pull(options: PullOptions): Promise<void> {\n  const { service, envName, output, dryRun = false, verbose = false } = options\n\n  const { stdout } = await execa('chamber', ['env', `${service}/${envName}`])\n\n  if (verbose) console.log(`Retrieved variables from ${service}/${envName}`)\n\n  if (dryRun) {\n    console.log(`[dry-run] Would write to ${output}:\\n${stdout}`)\n    return\n  }\n\n  writeFileSync(output, stdout, 'utf-8')\n  const count = stdout.split('\\n').filter(Boolean).length\n  console.log(`✓ Pulled ${count} variables to ${output}`)\n}\n","import { readFileSync } from 'node:fs'\nimport { execa } from 'execa'\n\nexport interface PushOptions {\n  envFile: string\n  service: string\n  envName: string\n  dryRun?: boolean\n  verbose?: boolean\n}\n\nfunction parseEnvContent(content: string): Record<string, string> {\n  const result: Record<string, string> = {}\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed || trimmed.startsWith('#')) continue\n    const idx = trimmed.indexOf('=')\n    if (idx === -1) continue\n    const key = trimmed.slice(0, idx).trim()\n    const raw = trimmed.slice(idx + 1).trim()\n    result[key] = raw.replace(/^[\"']|[\"']$/g, '')\n  }\n  return result\n}\n\nexport async function push(options: PushOptions): Promise<void> {\n  const { envFile, service, envName, dryRun = false, verbose = false } = options\n  const content = readFileSync(envFile, 'utf-8')\n  const entries = Object.entries(parseEnvContent(content))\n\n  if (verbose) console.log(`Found ${entries.length} variables in ${envFile}`)\n\n  for (const [key, value] of entries) {\n    if (verbose) console.log(`  ${dryRun ? '[dry-run] ' : ''}${key}`)\n    if (!dryRun) {\n      await execa('chamber', ['write', `${service}/${envName}`, key, value])\n    }\n  }\n\n  console.log(\n    `✓ ${dryRun ? '[dry-run] ' : ''}Pushed ${entries.length} variables to ${service}/${envName}`\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,IAAM,mBAAmB,MACvB,OAAO,aAAa,cAChB,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,OAC7B,SAAS,iBAAiB,SAAS,cAAc,QAAQ,YAAY,MAAM,WAC1E,SAAS,cAAc,MACvB,IAAI,IAAI,WAAW,SAAS,OAAO,EAAE;AAEtC,IAAM,gBAAgC,iCAAiB;;;ADX9D,IAAAA,kBAA2B;AAC3B,sBAA8B;AAC9B,uBAAwB;AACxB,IAAAC,gBAA0B;;;AEJ1B,qBAA8B;AAC9B,mBAAsB;AAUtB,eAAsB,KAAK,SAAqC;AAC9D,QAAM,EAAE,SAAS,SAAS,QAAQ,SAAS,OAAO,UAAU,MAAM,IAAI;AAEtE,QAAM,EAAE,OAAO,IAAI,UAAM,oBAAM,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;AAE1E,MAAI,QAAS,SAAQ,IAAI,4BAA4B,OAAO,IAAI,OAAO,EAAE;AAEzE,MAAI,QAAQ;AACV,YAAQ,IAAI,4BAA4B,MAAM;AAAA,EAAM,MAAM,EAAE;AAC5D;AAAA,EACF;AAEA,oCAAc,QAAQ,QAAQ,OAAO;AACrC,QAAM,QAAQ,OAAO,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE;AACjD,UAAQ,IAAI,iBAAY,KAAK,iBAAiB,MAAM,EAAE;AACxD;;;AC1BA,IAAAC,kBAA6B;AAC7B,IAAAC,gBAAsB;AAUtB,SAAS,gBAAgB,SAAyC;AAChE,QAAM,SAAiC,CAAC;AACxC,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,UAAM,MAAM,QAAQ,QAAQ,GAAG;AAC/B,QAAI,QAAQ,GAAI;AAChB,UAAM,MAAM,QAAQ,MAAM,GAAG,GAAG,EAAE,KAAK;AACvC,UAAM,MAAM,QAAQ,MAAM,MAAM,CAAC,EAAE,KAAK;AACxC,WAAO,GAAG,IAAI,IAAI,QAAQ,gBAAgB,EAAE;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,SAAqC;AAC9D,QAAM,EAAE,SAAS,SAAS,SAAS,SAAS,OAAO,UAAU,MAAM,IAAI;AACvE,QAAM,cAAU,8BAAa,SAAS,OAAO;AAC7C,QAAM,UAAU,OAAO,QAAQ,gBAAgB,OAAO,CAAC;AAEvD,MAAI,QAAS,SAAQ,IAAI,SAAS,QAAQ,MAAM,iBAAiB,OAAO,EAAE;AAE1E,aAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAClC,QAAI,QAAS,SAAQ,IAAI,KAAK,SAAS,eAAe,EAAE,GAAG,GAAG,EAAE;AAChE,QAAI,CAAC,QAAQ;AACX,gBAAM,qBAAM,WAAW,CAAC,SAAS,GAAG,OAAO,IAAI,OAAO,IAAI,KAAK,KAAK,CAAC;AAAA,IACvE;AAAA,EACF;AAEA,UAAQ;AAAA,IACN,UAAK,SAAS,eAAe,EAAE,UAAU,QAAQ,MAAM,iBAAiB,OAAO,IAAI,OAAO;AAAA,EAC5F;AACF;;;AHlCO,SAAS,iBAAuB;AACrC,MAAI;AACF,iCAAU,WAAW,CAAC,SAAS,CAAC;AAAA,EAClC,QAAQ;AACN,YAAQ,MAAM,4CAA4C;AAC1D,YAAQ,MAAM,4DAA4D;AAC1E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,iBACH,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,QAAQ,IAAI,WAAW,SAC/B,4BAAW,GAAG,QAAQ,IAAI,IAAI,mBAAmB;AAEnD,MAAI,CAAC,gBAAgB;AACnB,YAAQ,MAAM,wCAAwC;AACtD,YAAQ,MAAM,gFAAgF;AAC9F,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEA,IAAM,UAAU,IAAI,yBAAQ;AAE5B,QAAQ,KAAK,UAAU,EAAE,YAAY,8BAA8B,EAAE,QAAQ,OAAO;AAEpF,IAAM,aAAa,QAAQ,QAAQ,SAAS,EAAE,YAAY,wCAAwC;AAElG,WACG,QAAQ,MAAM,EACd,YAAY,4CAA4C,EACxD,OAAO,gBAAgB,qBAAqB,MAAM,EAClD,eAAe,oBAAoB,sBAAsB,EACzD,eAAe,qBAAqB,6CAA6C,EACjF,OAAO,aAAa,6CAA6C,KAAK,EACtE,OAAO,aAAa,gCAAgC,KAAK,EACzD,OAAO,OAAO,SAAS;AACtB,iBAAe;AACf,QAAM,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,EAChB,CAAC;AACH,CAAC;AAEH,WACG,QAAQ,MAAM,EACd,YAAY,wDAAwD,EACpE,eAAe,oBAAoB,sBAAsB,EACzD,eAAe,qBAAqB,6CAA6C,EACjF,OAAO,mBAAmB,yBAAyB,MAAM,EACzD,OAAO,aAAa,wDAAwD,KAAK,EACjF,OAAO,aAAa,eAAe,KAAK,EACxC,OAAO,OAAO,SAAS;AACtB,iBAAe;AACf,QAAM,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,EAChB,CAAC;AACH,CAAC;AAGH,IAAI,QAAQ,KAAK,CAAC,UAAM,+BAAc,aAAe,GAAG;AACtD,UAAQ,MAAM;AAChB;","names":["import_node_fs","import_execa","import_node_fs","import_execa"]}

package/dist/cli.mjs

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+import {
+  pull,
+  push
+} from "./chunk-UBFSRMBE.mjs";
+
+// src/cli.ts
+import { existsSync } from "fs";
+import { fileURLToPath } from "url";
+import { Command } from "commander";
+import { execaSync } from "execa";
+function checkPreflight() {
+  try {
+    execaSync("chamber", ["version"]);
+  } catch {
+    console.error("Error: `chamber` binary not found in PATH.");
+    console.error("Install: https://github.com/segmentio/chamber#installation");
+    process.exit(1);
+  }
+  const hasCredentials = process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY || Boolean(process.env.AWS_PROFILE) || existsSync(`${process.env.HOME}/.aws/credentials`);
+  if (!hasCredentials) {
+    console.error("Error: AWS credentials not configured.");
+    console.error("Set AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY, or configure ~/.aws/credentials");
+    process.exit(1);
+  }
+}
+var program = new Command();
+program.name("devtools").description("Devorama developer tools CLI").version("0.1.0");
+var secretsCmd = program.command("secrets").description("Manage secrets via AWS Parameter Store");
+secretsCmd.command("push").description("Push .env variables to AWS Parameter Store").option("--env <file>", ".env file to push", ".env").requiredOption("--service <name>", "Chamber service name").requiredOption("--env-name <name>", "Environment name (e.g. staging, production)").option("--dry-run", "Show what would be pushed without writing", false).option("--verbose", "Log each key being processed", false).action(async (opts) => {
+  checkPreflight();
+  await push({
+    envFile: opts.env,
+    service: opts.service,
+    envName: opts.envName,
+    dryRun: opts.dryRun,
+    verbose: opts.verbose
+  });
+});
+secretsCmd.command("pull").description("Pull variables from AWS Parameter Store to a .env file").requiredOption("--service <name>", "Chamber service name").requiredOption("--env-name <name>", "Environment name (e.g. staging, production)").option("--output <file>", "Output .env file path", ".env").option("--dry-run", "Show what would be written without creating the file", false).option("--verbose", "Log details", false).action(async (opts) => {
+  checkPreflight();
+  await pull({
+    service: opts.service,
+    envName: opts.envName,
+    output: opts.output,
+    dryRun: opts.dryRun,
+    verbose: opts.verbose
+  });
+});
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  program.parse();
+}
+export {
+  checkPreflight
+};
+//# sourceMappingURL=cli.mjs.map

package/dist/cli.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { existsSync } from 'node:fs'\nimport { fileURLToPath } from 'node:url'\nimport { Command } from 'commander'\nimport { execaSync } from 'execa'\nimport { pull } from './pull'\nimport { push } from './push'\n\nexport function checkPreflight(): void {\n  try {\n    execaSync('chamber', ['version'])\n  } catch {\n    console.error('Error: `chamber` binary not found in PATH.')\n    console.error('Install: https://github.com/segmentio/chamber#installation')\n    process.exit(1)\n  }\n\n  const hasCredentials =\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    Boolean(process.env.AWS_PROFILE) ||\n    existsSync(`${process.env.HOME}/.aws/credentials`)\n\n  if (!hasCredentials) {\n    console.error('Error: AWS credentials not configured.')\n    console.error('Set AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY, or configure ~/.aws/credentials')\n    process.exit(1)\n  }\n}\n\nconst program = new Command()\n\nprogram.name('devtools').description('Devorama developer tools CLI').version('0.1.0')\n\nconst secretsCmd = program.command('secrets').description('Manage secrets via AWS Parameter Store')\n\nsecretsCmd\n  .command('push')\n  .description('Push .env variables to AWS Parameter Store')\n  .option('--env <file>', '.env file to push', '.env')\n  .requiredOption('--service <name>', 'Chamber service name')\n  .requiredOption('--env-name <name>', 'Environment name (e.g. staging, production)')\n  .option('--dry-run', 'Show what would be pushed without writing', false)\n  .option('--verbose', 'Log each key being processed', false)\n  .action(async (opts) => {\n    checkPreflight()\n    await push({\n      envFile: opts.env,\n      service: opts.service,\n      envName: opts.envName,\n      dryRun: opts.dryRun,\n      verbose: opts.verbose,\n    })\n  })\n\nsecretsCmd\n  .command('pull')\n  .description('Pull variables from AWS Parameter Store to a .env file')\n  .requiredOption('--service <name>', 'Chamber service name')\n  .requiredOption('--env-name <name>', 'Environment name (e.g. staging, production)')\n  .option('--output <file>', 'Output .env file path', '.env')\n  .option('--dry-run', 'Show what would be written without creating the file', false)\n  .option('--verbose', 'Log details', false)\n  .action(async (opts) => {\n    checkPreflight()\n    await pull({\n      service: opts.service,\n      envName: opts.envName,\n      output: opts.output,\n      dryRun: opts.dryRun,\n      verbose: opts.verbose,\n    })\n  })\n\n// Only parse argv when invoked directly (not when imported in tests)\nif (process.argv[1] === fileURLToPath(import.meta.url)) {\n  program.parse()\n}\n"],"mappings":";;;;;;;AACA,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAInB,SAAS,iBAAuB;AACrC,MAAI;AACF,cAAU,WAAW,CAAC,SAAS,CAAC;AAAA,EAClC,QAAQ;AACN,YAAQ,MAAM,4CAA4C;AAC1D,YAAQ,MAAM,4DAA4D;AAC1E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,iBACH,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,QAAQ,IAAI,WAAW,KAC/B,WAAW,GAAG,QAAQ,IAAI,IAAI,mBAAmB;AAEnD,MAAI,CAAC,gBAAgB;AACnB,YAAQ,MAAM,wCAAwC;AACtD,YAAQ,MAAM,gFAAgF;AAC9F,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEA,IAAM,UAAU,IAAI,QAAQ;AAE5B,QAAQ,KAAK,UAAU,EAAE,YAAY,8BAA8B,EAAE,QAAQ,OAAO;AAEpF,IAAM,aAAa,QAAQ,QAAQ,SAAS,EAAE,YAAY,wCAAwC;AAElG,WACG,QAAQ,MAAM,EACd,YAAY,4CAA4C,EACxD,OAAO,gBAAgB,qBAAqB,MAAM,EAClD,eAAe,oBAAoB,sBAAsB,EACzD,eAAe,qBAAqB,6CAA6C,EACjF,OAAO,aAAa,6CAA6C,KAAK,EACtE,OAAO,aAAa,gCAAgC,KAAK,EACzD,OAAO,OAAO,SAAS;AACtB,iBAAe;AACf,QAAM,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,EAChB,CAAC;AACH,CAAC;AAEH,WACG,QAAQ,MAAM,EACd,YAAY,wDAAwD,EACpE,eAAe,oBAAoB,sBAAsB,EACzD,eAAe,qBAAqB,6CAA6C,EACjF,OAAO,mBAAmB,yBAAyB,MAAM,EACzD,OAAO,aAAa,wDAAwD,KAAK,EACjF,OAAO,aAAa,eAAe,KAAK,EACxC,OAAO,OAAO,SAAS;AACtB,iBAAe;AACf,QAAM,KAAK;AAAA,IACT,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,EAChB,CAAC;AACH,CAAC;AAGH,IAAI,QAAQ,KAAK,CAAC,MAAM,cAAc,YAAY,GAAG,GAAG;AACtD,UAAQ,MAAM;AAChB;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,19 @@
+interface PushOptions {
+    envFile: string;
+    service: string;
+    envName: string;
+    dryRun?: boolean;
+    verbose?: boolean;
+}
+declare function push(options: PushOptions): Promise<void>;
+
+interface PullOptions {
+    service: string;
+    envName: string;
+    output: string;
+    dryRun?: boolean;
+    verbose?: boolean;
+}
+declare function pull(options: PullOptions): Promise<void>;
+
+export { type PullOptions, type PushOptions, pull, push };

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+interface PushOptions {
+    envFile: string;
+    service: string;
+    envName: string;
+    dryRun?: boolean;
+    verbose?: boolean;
+}
+declare function push(options: PushOptions): Promise<void>;
+
+interface PullOptions {
+    service: string;
+    envName: string;
+    output: string;
+    dryRun?: boolean;
+    verbose?: boolean;
+}
+declare function pull(options: PullOptions): Promise<void>;
+
+export { type PullOptions, type PushOptions, pull, push };

package/dist/index.js

@@ -0,0 +1,81 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  pull: () => pull,
+  push: () => push
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/push.ts
+var import_node_fs = require("fs");
+var import_execa = require("execa");
+function parseEnvContent(content) {
+  const result = {};
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const idx = trimmed.indexOf("=");
+    if (idx === -1) continue;
+    const key = trimmed.slice(0, idx).trim();
+    const raw = trimmed.slice(idx + 1).trim();
+    result[key] = raw.replace(/^["']|["']$/g, "");
+  }
+  return result;
+}
+async function push(options) {
+  const { envFile, service, envName, dryRun = false, verbose = false } = options;
+  const content = (0, import_node_fs.readFileSync)(envFile, "utf-8");
+  const entries = Object.entries(parseEnvContent(content));
+  if (verbose) console.log(`Found ${entries.length} variables in ${envFile}`);
+  for (const [key, value] of entries) {
+    if (verbose) console.log(`  ${dryRun ? "[dry-run] " : ""}${key}`);
+    if (!dryRun) {
+      await (0, import_execa.execa)("chamber", ["write", `${service}/${envName}`, key, value]);
+    }
+  }
+  console.log(
+    `\u2713 ${dryRun ? "[dry-run] " : ""}Pushed ${entries.length} variables to ${service}/${envName}`
+  );
+}
+
+// src/pull.ts
+var import_node_fs2 = require("fs");
+var import_execa2 = require("execa");
+async function pull(options) {
+  const { service, envName, output, dryRun = false, verbose = false } = options;
+  const { stdout } = await (0, import_execa2.execa)("chamber", ["env", `${service}/${envName}`]);
+  if (verbose) console.log(`Retrieved variables from ${service}/${envName}`);
+  if (dryRun) {
+    console.log(`[dry-run] Would write to ${output}:
+${stdout}`);
+    return;
+  }
+  (0, import_node_fs2.writeFileSync)(output, stdout, "utf-8");
+  const count = stdout.split("\n").filter(Boolean).length;
+  console.log(`\u2713 Pulled ${count} variables to ${output}`);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  pull,
+  push
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/push.ts","../src/pull.ts"],"sourcesContent":["export { push } from './push'\nexport { pull } from './pull'\nexport type { PushOptions } from './push'\nexport type { PullOptions } from './pull'\n","import { readFileSync } from 'node:fs'\nimport { execa } from 'execa'\n\nexport interface PushOptions {\n  envFile: string\n  service: string\n  envName: string\n  dryRun?: boolean\n  verbose?: boolean\n}\n\nfunction parseEnvContent(content: string): Record<string, string> {\n  const result: Record<string, string> = {}\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim()\n    if (!trimmed || trimmed.startsWith('#')) continue\n    const idx = trimmed.indexOf('=')\n    if (idx === -1) continue\n    const key = trimmed.slice(0, idx).trim()\n    const raw = trimmed.slice(idx + 1).trim()\n    result[key] = raw.replace(/^[\"']|[\"']$/g, '')\n  }\n  return result\n}\n\nexport async function push(options: PushOptions): Promise<void> {\n  const { envFile, service, envName, dryRun = false, verbose = false } = options\n  const content = readFileSync(envFile, 'utf-8')\n  const entries = Object.entries(parseEnvContent(content))\n\n  if (verbose) console.log(`Found ${entries.length} variables in ${envFile}`)\n\n  for (const [key, value] of entries) {\n    if (verbose) console.log(`  ${dryRun ? '[dry-run] ' : ''}${key}`)\n    if (!dryRun) {\n      await execa('chamber', ['write', `${service}/${envName}`, key, value])\n    }\n  }\n\n  console.log(\n    `✓ ${dryRun ? '[dry-run] ' : ''}Pushed ${entries.length} variables to ${service}/${envName}`\n  )\n}\n","import { writeFileSync } from 'node:fs'\nimport { execa } from 'execa'\n\nexport interface PullOptions {\n  service: string\n  envName: string\n  output: string\n  dryRun?: boolean\n  verbose?: boolean\n}\n\nexport async function pull(options: PullOptions): Promise<void> {\n  const { service, envName, output, dryRun = false, verbose = false } = options\n\n  const { stdout } = await execa('chamber', ['env', `${service}/${envName}`])\n\n  if (verbose) console.log(`Retrieved variables from ${service}/${envName}`)\n\n  if (dryRun) {\n    console.log(`[dry-run] Would write to ${output}:\\n${stdout}`)\n    return\n  }\n\n  writeFileSync(output, stdout, 'utf-8')\n  const count = stdout.split('\\n').filter(Boolean).length\n  console.log(`✓ Pulled ${count} variables to ${output}`)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,qBAA6B;AAC7B,mBAAsB;AAUtB,SAAS,gBAAgB,SAAyC;AAChE,QAAM,SAAiC,CAAC;AACxC,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,UAAM,MAAM,QAAQ,QAAQ,GAAG;AAC/B,QAAI,QAAQ,GAAI;AAChB,UAAM,MAAM,QAAQ,MAAM,GAAG,GAAG,EAAE,KAAK;AACvC,UAAM,MAAM,QAAQ,MAAM,MAAM,CAAC,EAAE,KAAK;AACxC,WAAO,GAAG,IAAI,IAAI,QAAQ,gBAAgB,EAAE;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,eAAsB,KAAK,SAAqC;AAC9D,QAAM,EAAE,SAAS,SAAS,SAAS,SAAS,OAAO,UAAU,MAAM,IAAI;AACvE,QAAM,cAAU,6BAAa,SAAS,OAAO;AAC7C,QAAM,UAAU,OAAO,QAAQ,gBAAgB,OAAO,CAAC;AAEvD,MAAI,QAAS,SAAQ,IAAI,SAAS,QAAQ,MAAM,iBAAiB,OAAO,EAAE;AAE1E,aAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAClC,QAAI,QAAS,SAAQ,IAAI,KAAK,SAAS,eAAe,EAAE,GAAG,GAAG,EAAE;AAChE,QAAI,CAAC,QAAQ;AACX,gBAAM,oBAAM,WAAW,CAAC,SAAS,GAAG,OAAO,IAAI,OAAO,IAAI,KAAK,KAAK,CAAC;AAAA,IACvE;AAAA,EACF;AAEA,UAAQ;AAAA,IACN,UAAK,SAAS,eAAe,EAAE,UAAU,QAAQ,MAAM,iBAAiB,OAAO,IAAI,OAAO;AAAA,EAC5F;AACF;;;AC1CA,IAAAA,kBAA8B;AAC9B,IAAAC,gBAAsB;AAUtB,eAAsB,KAAK,SAAqC;AAC9D,QAAM,EAAE,SAAS,SAAS,QAAQ,SAAS,OAAO,UAAU,MAAM,IAAI;AAEtE,QAAM,EAAE,OAAO,IAAI,UAAM,qBAAM,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;AAE1E,MAAI,QAAS,SAAQ,IAAI,4BAA4B,OAAO,IAAI,OAAO,EAAE;AAEzE,MAAI,QAAQ;AACV,YAAQ,IAAI,4BAA4B,MAAM;AAAA,EAAM,MAAM,EAAE;AAC5D;AAAA,EACF;AAEA,qCAAc,QAAQ,QAAQ,OAAO;AACrC,QAAM,QAAQ,OAAO,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE;AACjD,UAAQ,IAAI,iBAAY,KAAK,iBAAiB,MAAM,EAAE;AACxD;","names":["import_node_fs","import_execa"]}

package/dist/index.mjs

@@ -0,0 +1,9 @@
+import {
+  pull,
+  push
+} from "./chunk-UBFSRMBE.mjs";
+export {
+  pull,
+  push
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@devorama/secrets",
+  "version": "0.1.0",
+  "type": "module",
+  "bin": {
+    "devtools": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "commander": "^12.1.0",
+    "execa": "^9.5.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsup": "^8.3.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "biome check ."
+  }
+}