@efebia/one-env 1.0.0 → 1.0.2

package/README.md

@@ -1,4 +1,4 @@
-# one-env
+# @efebia/one-env
 
 Type-safe environment configuration management for Node.js applications with runtime validation and CLI tools.
 
@@ -9,22 +9,23 @@ Type-safe environment configuration management for Node.js applications with run
 - 🛠️ **CLI tools** for generating, validating, and managing environment files
 - 🌍 **Multiple sources**: Load from YAML files or JSON environment variables
 - 🚀 **Production ready**: Validate AWS Secrets Manager configurations
+- 📤 **Push & Pull**: Sync secrets with AWS Secrets Manager
 - 💡 **Developer friendly**: Autocomplete for all environment variables
 
 ## Installation
 
 ```bash
 # Using npm
-npm install one-env zod
+npm install @efebia/one-env zod
 
 # Using yarn
-yarn add one-env zod
+yarn add @efebia/one-env zod
 
 # Using pnpm
-pnpm add one-env zod
+pnpm add @efebia/one-env zod
 ```
 
-Note: `zod` v4 is a peer dependency and must be installed separately.
+Note: Zod (^4.0.0) is a peer dependency and must be installed separately.
 
 ## Quick Start
 
@@ -56,12 +57,16 @@ export default EnvSchema;
 ### 2. Use in your application
 
 ```typescript
-// config.ts
-import { createEnvWithInit } from 'one-env';
-import EnvSchema from './env-schema';
+// env.ts
+import { createEnvWithInit } from '@efebia/one-env';
+import EnvSchema from './env-schema.js';
 
-// Create env instance
+// Create env instance (singleton pattern)
 const env = createEnvWithInit(EnvSchema);
+export default env;
+
+// app.ts
+import env from './env.js';
 
 // Initialize with YAML file
 env.init({ file: './env.local.yml' });
@@ -80,11 +85,13 @@ export const config = {
 };
 ```
 
+**Note**: Using `createEnvWithInit` as a singleton helps with concurrency and prevents errors from calling `env.get()` before initialization due to import order issues.
+
 ### 3. Alternative: Immediate initialization
 
 ```typescript
-import { createEnv } from 'one-env';
-import EnvSchema from './env-schema';
+import { createEnv } from '@efebia/one-env';
+import EnvSchema from './env-schema.js';
 
 // Initialize immediately
 const env = createEnv({ 
@@ -98,7 +105,7 @@ const port = env.get('port');
 
 ## CLI Tools
 
-one-env includes powerful CLI tools for managing your environment configuration:
+@efebia/one-env includes powerful CLI tools for managing your environment configuration:
 
 ### Generate environment file
 
@@ -109,7 +116,7 @@ Create a new environment file with default values from your schema:
 one-env generate -s ./env-schema.js
 
 # Generate with custom output
-one-env generate -s ./env-schema.js -o env.example.yml
+one-env generate -s ./env-schema.js -o env.prod.yml
 
 # Force overwrite existing file
 one-env generate -s ./env-schema.js --force
@@ -145,6 +152,62 @@ one-env validate-aws -s ./env-schema.js --secret-name my-app/prod --profile prod
 one-env validate-aws -s ./env-schema.js --secret-name my-app/prod --region us-east-1
 ```
 
+### Pull from AWS Secrets Manager
+
+Pull your environment configuration from AWS Secrets Manager to a local file:
+
+```bash
+# Pull from AWS to local file
+one-env pull -s ./env-schema.js --secret-name dev-envs
+
+# Pull with custom output file
+one-env pull -s ./env-schema.js --secret-name prod-envs --output env.prod.yml
+
+# Force overwrite existing file
+one-env pull -s ./env-schema.js --secret-name dev-envs --force
+
+# With specific AWS profile and region
+one-env pull -s ./env-schema.js --secret-name dev-envs --profile development --region us-east-1
+```
+
+### Push to AWS Secrets Manager
+
+Push your local environment configuration to AWS Secrets Manager:
+
+```bash
+# Push to AWS (with confirmation prompt)
+one-env push -s ./env-schema.js --file env.prod.yml --secret-name prod-envs
+
+# Push with environment tag
+one-env push -s ./env-schema.js --file env.prod.yml --secret-name prod-envs --environment production
+
+# Dry-run to preview what will be pushed
+one-env push -s ./env-schema.js --file env.prod.yml --secret-name prod-envs --dry-run
+
+# Skip confirmation prompt (for CI/CD)
+one-env push -s ./env-schema.js --file env.prod.yml --secret-name prod-envs --force
+
+# With specific AWS profile and region
+one-env push -s ./env-schema.js --file env.prod.yml --secret-name prod-envs --profile production --region us-east-1
+```
+
+### Typical Workflow
+
+Update a single value in development:
+
+```bash
+# 1. Pull current configuration
+one-env pull -s ./env-schema.js --secret-name dev-envs
+
+# 2. Edit the file locally
+vim env.pulled.yml  # Change databaseUrl or any other value
+
+# 3. Push changes back
+one-env push -s ./env-schema.js --file env.pulled.yml --secret-name dev-envs
+```
+
+**Security Note**: Never commit files containing actual secrets. Use `.gitignore` to exclude environment files with sensitive data.
+
 ## API Reference
 
 ### `createEnv(options)`
@@ -227,49 +290,36 @@ export default z.object({
 
 ### 2. Environment-specific Files
 
-Use different files for different environments:
+The schema auto-generates environment files with defaults:
 
 ```
 env.local.yml      # Local development (gitignored)
-env.test.yml       # Test environment
-env.example.yml    # Example file (committed)
 ```
 
-### 3. CI/CD Integration
-
-```yaml
-# .github/workflows/validate.yml
-- name: Validate environment
-  run: |
-    npx one-env validate -s ./env-schema.js --json
-    
-- name: Validate production secrets
-  run: |
-    npx one-env validate-aws \
-      -s ./env-schema.js \
-      --secret-name prod/myapp \
-      --profile production
-```
+Use the `generate` command to create new environment files from your schema, eliminating the need for example files.
 
-### 4. Type Exports
+### 3. Singleton Pattern
 
-Export types for use across your application:
+Create a singleton instance to avoid initialization issues:
 
 ```typescript
-// config.ts
-import { createEnvWithInit } from 'one-env';
-import { z } from 'zod/v4';
-import EnvSchema from './env-schema';
-
-export type Config = z.infer<typeof EnvSchema>;
+// env.ts
+import { createEnvWithInit } from '@efebia/one-env';
+import EnvSchema from '../../env-schema.js';
 
 const env = createEnvWithInit(EnvSchema);
 export default env;
 ```
 
+This pattern:
+- Prevents race conditions during initialization
+- Handles import order dependencies gracefully
+- Ensures consistent state across your application
+- Avoids errors from calling `env.get()` before `env.init()`
+
 ## Error Handling
 
-one-env provides clear error messages for configuration issues:
+@efebia/one-env provides clear error messages for configuration issues:
 
 ```
 Environment validation failed:
@@ -280,8 +330,8 @@ Environment validation failed:
 
 ## Requirements
 
-- Node.js >= 18.0.0
-- Zod v4 (peer dependency)
+- Node.js >= 20.0.0
+- Zod (^4.0.0 peer dependency)
 
 ## License
 
@@ -293,4 +343,11 @@ Contributions are welcome! Please feel free to submit a Pull Request.
 
 ## Support
 
-For bugs and feature requests, please [create an issue](https://github.com/yourusername/one-env/issues).
+For bugs and feature requests, please [create an issue](https://github.com/efebia/be-libs/issues).
+
+## Changelog
+
+### 1.0.2 (Upcoming)
+- Add `pull` command to download secrets from AWS Secrets Manager
+- Rename `upload` command to `push` for consistent workflow
+- Fix Node.js version requirement (>= 20.0.0)

package/lib/cli/commands/pull.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Pull command implementation
+ * Pulls environment configuration from AWS Secrets Manager to a local file
+ */
+import { PullOptions } from '../types.js';
+/**
+ * Handles the pull command
+ * @param options - Command options
+ */
+export declare function handlePullCommand(options: PullOptions): Promise<void>;
+//# sourceMappingURL=pull.d.ts.map

package/lib/cli/commands/pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/pull.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQ1C;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA+F3E"}

package/lib/cli/commands/pull.js

@@ -0,0 +1,98 @@
+/**
+ * Pull command implementation
+ * Pulls environment configuration from AWS Secrets Manager to a local file
+ */
+import chalk from 'chalk';
+import { createSecretsManagerClient, getSecretValue } from '../utils/aws.js';
+import { resolvePath, fileExists, writeFile, createYamlContent } from '../utils/file.js';
+import { validateEnvData } from '../utils/validation.js';
+import { printValidationResults, printStatus } from '../utils/formatting.js';
+import { loadSchema, formatSchemaSource } from '../utils/schema-loader.js';
+import readline from 'node:readline/promises';
+/**
+ * Handles the pull command
+ * @param options - Command options
+ */
+export async function handlePullCommand(options) {
+    // Configure AWS client
+    const client = createSecretsManagerClient(options.region, options.profile);
+    try {
+        // Load schema dynamically
+        printStatus(`Loading schema from ${formatSchemaSource(options.schema)}...`, 'info');
+        const schema = await loadSchema(options.schema);
+        // Fetch secret from AWS
+        printStatus(`Fetching secret '${options.secretName}' from AWS Secrets Manager...`, 'info');
+        const secretData = await getSecretValue(client, options.secretName);
+        // Validate against schema
+        printStatus('Validating pulled configuration against schema...', 'info');
+        const validationResults = validateEnvData(secretData, schema, options.secretName, options.region);
+        if (!validationResults.success) {
+            console.error(`\n${chalk.red.bold('Warning:')} Pulled configuration has validation issues\n`);
+            printValidationResults(validationResults);
+            console.log(`\n${chalk.yellow('Note:')} The configuration will still be saved, but you should fix these issues before pushing.`);
+        }
+        else {
+            printStatus('Configuration is valid!', 'success');
+        }
+        // Check if output file exists
+        const outputPath = resolvePath(options.output);
+        if (fileExists(outputPath) && !options.force) {
+            const rl = readline.createInterface({
+                input: process.stdin,
+                output: process.stdout
+            });
+            console.log(`\n${chalk.yellow.bold('Warning:')} File '${options.output}' already exists`);
+            const answer = await rl.question(`\nDo you want to overwrite it? (yes/no): `);
+            rl.close();
+            if (answer.toLowerCase() !== 'yes' && answer.toLowerCase() !== 'y') {
+                console.log('\n' + chalk.yellow('Pull cancelled'));
+                process.exit(0);
+            }
+        }
+        // Create YAML content with header
+        const header = `# Environment Configuration File
+# Pulled from AWS Secrets Manager
+# Secret: ${options.secretName}
+# Region: ${options.region}
+# Date: ${new Date().toISOString()}
+# 
+# WARNING: This file contains secrets! Do not commit to version control.
+# Add to .gitignore: ${options.output}
+
+`;
+        const yamlContent = createYamlContent(secretData);
+        const fullContent = header + yamlContent.split('\n').slice(3).join('\n'); // Remove default header
+        // Write to file
+        writeFile(outputPath, fullContent);
+        printStatus(`Configuration saved to '${options.output}'`, 'success');
+        console.log(`\n${chalk.green.bold('Success!')} Environment configuration has been pulled`);
+        console.log(`\n${chalk.yellow.bold('Security reminder:')}`);
+        console.log(`  - Do not commit this file to version control`);
+        console.log(`  - Add '${options.output}' to your .gitignore file`);
+        console.log(`  - Consider adding pattern 'env.*.yml' to .gitignore`);
+        console.log(`\n${chalk.cyan('Next steps:')}`);
+        console.log(`  1. Edit '${options.output}' to make your changes`);
+        console.log(`  2. Push changes back:`);
+        console.log(chalk.cyan(`     one-env push --schema ${options.schema} --file ${options.output} --secret-name ${options.secretName} --region ${options.region}`));
+    }
+    catch (error) {
+        const tips = [];
+        if (error.message.includes('not found')) {
+            tips.push('Check that the secret name and region are correct.');
+            tips.push('Ensure you have AWS credentials configured.');
+        }
+        else if (error.message.includes('credentials')) {
+            tips.push("Configure AWS credentials using 'aws configure' or environment variables.");
+        }
+        else if (error.message.includes('AccessDenied')) {
+            tips.push('Ensure your AWS credentials have permission to read secrets.');
+            tips.push('Required permission: secretsmanager:GetSecretValue');
+        }
+        console.error(`\n${chalk.red.bold('Error:')} ${error.message}\n`);
+        tips.forEach(tip => {
+            console.log(`${chalk.yellow('Tip:')} ${tip}`);
+        });
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=pull.js.map

package/lib/cli/commands/pull.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.js","sourceRoot":"","sources":["../../../src/cli/commands/pull.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAoB;IACxD,uBAAuB;IACvB,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3E,IAAI,CAAC;QACD,0BAA0B;QAC1B,WAAW,CAAC,uBAAuB,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEhD,wBAAwB;QACxB,WAAW,CAAC,oBAAoB,OAAO,CAAC,UAAU,+BAA+B,EAAE,MAAM,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAEpE,0BAA0B;QAC1B,WAAW,CAAC,mDAAmD,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,iBAAiB,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAElG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,+CAA+C,CAAC,CAAC;YAC9F,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAC;QACrI,CAAC;aAAM,CAAC;YACJ,WAAW,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;gBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACzB,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YAC9E,EAAE,CAAC,KAAK,EAAE,CAAC;YAEX,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,MAAM,MAAM,GAAG;;YAEX,OAAO,CAAC,UAAU;YAClB,OAAO,CAAC,MAAM;UAChB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;;;uBAGX,OAAO,CAAC,MAAM;;CAEpC,CAAC;QAEM,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB;QAElG,gBAAgB;QAChB,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAEnC,WAAW,CAAC,2BAA2B,OAAO,CAAC,MAAM,GAAG,EAAE,SAAS,CAAC,CAAC;QAErE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,2BAA2B,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QAErE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,MAAM,wBAAwB,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,kBAAkB,OAAO,CAAC,UAAU,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEpK,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAC3F,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC"}

package/lib/cli/commands/push.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Push command implementation
+ * Pushes environment configuration to AWS Secrets Manager
+ */
+import { PushOptions } from '../types.js';
+/**
+ * Handles the push command
+ * @param options - Command options
+ */
+export declare function handlePushCommand(options: PushOptions): Promise<void>;
+//# sourceMappingURL=push.d.ts.map

package/lib/cli/commands/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/push.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQ1C;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAkH3E"}

package/lib/cli/commands/push.js

@@ -0,0 +1,111 @@
+/**
+ * Push command implementation
+ * Pushes environment configuration to AWS Secrets Manager
+ */
+import chalk from 'chalk';
+import { createSecretsManagerClient, createOrUpdateSecret, getSecretValue } from '../utils/aws.js';
+import { resolvePath, loadYamlFile } from '../utils/file.js';
+import { validateEnvData } from '../utils/validation.js';
+import { printValidationResults, printStatus } from '../utils/formatting.js';
+import { loadSchema, formatSchemaSource } from '../utils/schema-loader.js';
+import readline from 'node:readline/promises';
+/**
+ * Handles the push command
+ * @param options - Command options
+ */
+export async function handlePushCommand(options) {
+    // Configure AWS client
+    const client = createSecretsManagerClient(options.region, options.profile);
+    try {
+        // Load schema dynamically
+        printStatus(`Loading schema from ${formatSchemaSource(options.schema)}...`, 'info');
+        const schema = await loadSchema(options.schema);
+        // Load environment file
+        printStatus(`Loading environment file '${options.file}'...`, 'info');
+        const filePath = resolvePath(options.file);
+        const envData = loadYamlFile(filePath);
+        // Validate against schema first
+        printStatus('Validating configuration against schema...', 'info');
+        const validationResults = validateEnvData(envData, schema, options.file);
+        if (!validationResults.success) {
+            console.error(`\n${chalk.red.bold('Error:')} Configuration validation failed\n`);
+            printValidationResults(validationResults);
+            process.exit(1);
+        }
+        printStatus('Configuration is valid!', 'success');
+        // Check if secret exists (for dry-run info)
+        let secretExists = false;
+        try {
+            await getSecretValue(client, options.secretName);
+            secretExists = true;
+        }
+        catch (error) {
+            if (!error.message.includes('not found')) {
+                throw error; // Re-throw if it's not a "not found" error
+            }
+        }
+        // Dry-run mode
+        if (options.dryRun) {
+            console.log(`\n${chalk.blue.bold('DRY-RUN MODE:')} No changes will be made\n`);
+            console.log(chalk.cyan('Secret Details:'));
+            console.log(`  Name: ${options.secretName}`);
+            console.log(`  Region: ${options.region}`);
+            console.log(`  Environment: ${options.environment || 'Not specified'}`);
+            console.log(`  Status: ${secretExists ? 'UPDATE existing secret' : 'CREATE new secret'}`);
+            if (secretExists) {
+                console.log(`\n${chalk.yellow('Note:')} Secret already exists and will be updated`);
+            }
+            console.log(`\n${chalk.cyan('Configuration to push:')}`);
+            console.log(JSON.stringify(envData, null, 2));
+            return;
+        }
+        // Confirmation prompt (unless --force)
+        if (!options.force) {
+            const rl = readline.createInterface({
+                input: process.stdin,
+                output: process.stdout
+            });
+            console.log(`\n${chalk.yellow.bold('Warning:')} You are about to ${secretExists ? 'UPDATE' : 'CREATE'} a secret in AWS Secrets Manager`);
+            console.log(`  Secret: ${options.secretName}`);
+            console.log(`  Region: ${options.region}`);
+            if (options.environment) {
+                console.log(`  Environment: ${options.environment}`);
+            }
+            const answer = await rl.question(`\nDo you want to continue? (yes/no): `);
+            rl.close();
+            if (answer.toLowerCase() !== 'yes' && answer.toLowerCase() !== 'y') {
+                console.log('\n' + chalk.yellow('Push cancelled'));
+                process.exit(0);
+            }
+        }
+        // Push to AWS
+        printStatus(`${secretExists ? 'Updating' : 'Creating'} secret '${options.secretName}' in AWS Secrets Manager...`, 'info');
+        const tags = options.environment ? [
+            { Key: 'Environment', Value: options.environment },
+            { Key: 'ManagedBy', Value: 'one-env' }
+        ] : [
+            { Key: 'ManagedBy', Value: 'one-env' }
+        ];
+        await createOrUpdateSecret(client, options.secretName, envData, tags);
+        printStatus(`Secret '${options.secretName}' ${secretExists ? 'updated' : 'created'} successfully!`, 'success');
+        console.log(`\n${chalk.green.bold('Success!')} Environment configuration has been pushed`);
+        console.log(`\nYou can validate it with:`);
+        console.log(chalk.cyan(`  one-env validate-aws --schema ${options.schema} --secret-name ${options.secretName} --region ${options.region}`));
+    }
+    catch (error) {
+        const tips = [];
+        if (error.message.includes('credentials')) {
+            tips.push("Configure AWS credentials using 'aws configure' or environment variables.");
+        }
+        else if (error.message.includes('AccessDenied')) {
+            tips.push('Ensure your AWS credentials have permission to create/update secrets.');
+            tips.push('Required permissions: secretsmanager:CreateSecret, secretsmanager:UpdateSecret, secretsmanager:TagResource');
+        }
+        console.error(`\n${chalk.red.bold('Error:')} ${error.message}\n`);
+        tips.forEach(tip => {
+            console.log(`${chalk.yellow('Tip:')} ${tip}`);
+        });
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=push.js.map

package/lib/cli/commands/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../../src/cli/commands/push.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAoB;IACxD,uBAAuB;IACvB,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3E,IAAI,CAAC;QACD,0BAA0B;QAC1B,WAAW,CAAC,uBAAuB,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEhD,wBAAwB;QACxB,WAAW,CAAC,6BAA6B,OAAO,CAAC,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEvC,gCAAgC;QAChC,WAAW,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,iBAAiB,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEzE,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;YACjF,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,WAAW,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;QAElD,4CAA4C;QAC5C,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACjD,YAAY,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvC,MAAM,KAAK,CAAC,CAAC,2CAA2C;YAC5D,CAAC;QACL,CAAC;QAED,eAAe;QACf,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,aAAa,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAE1F,IAAI,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;YACxF,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAE9C,OAAO;QACX,CAAC;QAED,uCAAuC;QACvC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;gBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACzB,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,kCAAkC,CAAC,CAAC;YACzI,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YAC1E,EAAE,CAAC,KAAK,EAAE,CAAC;YAEX,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACL,CAAC;QAED,cAAc;QACd,WAAW,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,YAAY,OAAO,CAAC,UAAU,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAE1H,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/B,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE;YAClD,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;SACzC,CAAC,CAAC,CAAC;YACA,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;SACzC,CAAC;QAEF,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAEtE,WAAW,CAAC,WAAW,OAAO,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAE/G,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,OAAO,CAAC,MAAM,kBAAkB,OAAO,CAAC,UAAU,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEhJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAC3F,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACnF,IAAI,CAAC,IAAI,CAAC,4GAA4G,CAAC,CAAC;QAC5H,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC"}

package/lib/cli/env-tool.d.ts

@@ -6,6 +6,8 @@
  * - generate: Creates new environment files with default values from schema
  * - validate: Validates existing environment files against the schema
  * - validate-aws: Validates AWS Secrets Manager secrets against the schema
+ * - pull: Pulls environment configuration from AWS Secrets Manager
+ * - push: Pushes environment configuration to AWS Secrets Manager
  */
 export {};
 //# sourceMappingURL=env-tool.d.ts.map

package/lib/cli/env-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-tool.d.ts","sourceRoot":"","sources":["../../src/cli/env-tool.ts"],"names":[],"mappings":";AAEA;;;;;;;GAOG"}
+{"version":3,"file":"env-tool.d.ts","sourceRoot":"","sources":["../../src/cli/env-tool.ts"],"names":[],"mappings":";AAEA;;;;;;;;;GASG"}

package/lib/cli/env-tool.js

@@ -6,12 +6,16 @@
  * - generate: Creates new environment files with default values from schema
  * - validate: Validates existing environment files against the schema
  * - validate-aws: Validates AWS Secrets Manager secrets against the schema
+ * - pull: Pulls environment configuration from AWS Secrets Manager
+ * - push: Pushes environment configuration to AWS Secrets Manager
  */
 import { Command } from 'commander';
 import chalk from 'chalk';
 import { handleGenerateCommand } from './commands/generate.js';
 import { handleValidateCommand } from './commands/validate.js';
 import { handleValidateAwsCommand } from './commands/validate-aws.js';
+import { handlePushCommand } from './commands/push.js';
+import { handlePullCommand } from './commands/pull.js';
 // ============================================================================
 // MAIN CLI SETUP
 // ============================================================================
@@ -46,6 +50,30 @@ program
     .option('--profile <profile>', 'AWS profile to use (optional)')
     .option('--json', 'Output results in JSON format', false)
     .action(handleValidateAwsCommand);
+// Pull command
+program
+    .command('pull')
+    .description('Pull environment configuration from AWS Secrets Manager')
+    .requiredOption('-s, --schema <path>', 'Path to schema file (TypeScript or JavaScript)')
+    .option('--secret-name <name>', 'Name of the secret in AWS Secrets Manager', 'envs')
+    .option('--output <file>', 'Output file name', 'env.pulled.yml')
+    .option('--region <region>', 'AWS region', process.env['AWS_REGION'] || 'eu-west-1')
+    .option('--profile <profile>', 'AWS profile to use (optional)')
+    .option('--force', 'Overwrite existing file without confirmation', false)
+    .action(handlePullCommand);
+// Push command
+program
+    .command('push')
+    .description('Push environment configuration to AWS Secrets Manager')
+    .requiredOption('-s, --schema <path>', 'Path to schema file (TypeScript or JavaScript)')
+    .requiredOption('--file <path>', 'Path to the environment file to push')
+    .option('--secret-name <name>', 'Name of the secret in AWS Secrets Manager', 'envs')
+    .option('--region <region>', 'AWS region', process.env['AWS_REGION'] || 'eu-west-1')
+    .option('--profile <profile>', 'AWS profile to use (optional)')
+    .option('--environment <env>', 'Environment tag (e.g., dev, staging, prod)')
+    .option('--dry-run', 'Preview what would be pushed without making changes', false)
+    .option('--force', 'Skip confirmation prompts', false)
+    .action(handlePushCommand);
 // Check dependencies before running
 try {
     await import('js-yaml');

package/lib/cli/env-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-tool.js","sourceRoot":"","sources":["../../src/cli/env-tool.ts"],"names":[],"mappings":";AAEA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACF,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,wCAAwC,CAAC;KACrD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,mBAAmB;AACnB,OAAO;KACF,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,+DAA+D,CAAC;KAC5E,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,eAAe,CAAC;KAClE,MAAM,CAAC,aAAa,EAAE,8CAA8C,EAAE,KAAK,CAAC;KAC5E,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEnC,mBAAmB;AACnB,OAAO;KACF,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,mDAAmD,CAAC;KAChE,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,eAAe,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC;KACxD,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEnC,uBAAuB;AACvB,OAAO;KACF,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,qDAAqD,CAAC;KAClE,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,MAAM,CAAC,sBAAsB,EAAE,2CAA2C,EAAE,MAAM,CAAC;KACnF,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC;KACnF,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;KAC9D,MAAM,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC;KACxD,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEtC,oCAAoC;AACpC,IAAI,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,cAAc;AACd,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"env-tool.js","sourceRoot":"","sources":["../../src/cli/env-tool.ts"],"names":[],"mappings":";AAEA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACF,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,wCAAwC,CAAC;KACrD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,mBAAmB;AACnB,OAAO;KACF,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,+DAA+D,CAAC;KAC5E,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,eAAe,CAAC;KAClE,MAAM,CAAC,aAAa,EAAE,8CAA8C,EAAE,KAAK,CAAC;KAC5E,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEnC,mBAAmB;AACnB,OAAO;KACF,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,mDAAmD,CAAC;KAChE,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,eAAe,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC;KACxD,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEnC,uBAAuB;AACvB,OAAO;KACF,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,qDAAqD,CAAC;KAClE,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,MAAM,CAAC,sBAAsB,EAAE,2CAA2C,EAAE,MAAM,CAAC;KACnF,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC;KACnF,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;KAC9D,MAAM,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC;KACxD,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEtC,eAAe;AACf,OAAO;KACF,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,yDAAyD,CAAC;KACtE,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,MAAM,CAAC,sBAAsB,EAAE,2CAA2C,EAAE,MAAM,CAAC;KACnF,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;KAC/D,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC;KACnF,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;KAC9D,MAAM,CAAC,SAAS,EAAE,8CAA8C,EAAE,KAAK,CAAC;KACxE,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAE/B,eAAe;AACf,OAAO;KACF,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,uDAAuD,CAAC;KACpE,cAAc,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;KACvF,cAAc,CAAC,eAAe,EAAE,sCAAsC,CAAC;KACvE,MAAM,CAAC,sBAAsB,EAAE,2CAA2C,EAAE,MAAM,CAAC;KACnF,MAAM,CAAC,mBAAmB,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC;KACnF,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;KAC9D,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,CAAC;KAC3E,MAAM,CAAC,WAAW,EAAE,qDAAqD,EAAE,KAAK,CAAC;KACjF,MAAM,CAAC,SAAS,EAAE,2BAA2B,EAAE,KAAK,CAAC;KACrD,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAE/B,oCAAoC;AACpC,IAAI,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,cAAc;AACd,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/lib/cli/types.d.ts

@@ -18,6 +18,24 @@ export interface ValidateAwsOptions {
     profile?: string;
     json: boolean;
 }
+export interface PushOptions {
+    schema: string;
+    file: string;
+    secretName: string;
+    region: string;
+    profile?: string;
+    environment?: string;
+    dryRun: boolean;
+    force: boolean;
+}
+export interface PullOptions {
+    schema: string;
+    secretName: string;
+    output: string;
+    region: string;
+    profile?: string;
+    force: boolean;
+}
 export interface ValidationResult {
     success: boolean;
     source: string;

package/lib/cli/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;CACjB;AAGD,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC5B,eAAe,EAAE,cAAc,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAGD,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAGD,MAAM,WAAW,oBAAoB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,kBAAkB,CAAC;IACtD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAClB;AAGD,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC5B,eAAe,EAAE,cAAc,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAGD,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAGD,MAAM,WAAW,oBAAoB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,kBAAkB,CAAC;IACtD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC"}

package/lib/cli/utils/aws.d.ts

@@ -1,7 +1,7 @@
 /**
  * AWS utilities for the environment CLI tool
  */
-import { SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { SecretsManagerClient, Tag } from '@aws-sdk/client-secrets-manager';
 /**
  * Creates an AWS Secrets Manager client
  * @param region - AWS region
@@ -17,4 +17,13 @@ export declare function createSecretsManagerClient(region: string, profile?: str
  * @throws Error if secret not found or has no value
  */
 export declare function getSecretValue(client: SecretsManagerClient, secretName: string): Promise<any>;
+/**
+ * Creates or updates a secret in AWS Secrets Manager
+ * @param client - SecretsManagerClient instance
+ * @param secretName - Name of the secret to create/update
+ * @param secretData - The data to store in the secret
+ * @param tags - Optional tags to apply to the secret
+ * @throws Error if creation/update fails
+ */
+export declare function createOrUpdateSecret(client: SecretsManagerClient, secretName: string, secretData: any, tags?: Tag[]): Promise<void>;
 //# sourceMappingURL=aws.d.ts.map

package/lib/cli/utils/aws.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aws.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/aws.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iCAAiC,CAAC;AAE9F;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAWjG;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAsBnG"}
+{"version":3,"file":"aws.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/aws.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACH,oBAAoB,EAIpB,GAAG,EACN,MAAM,iCAAiC,CAAC;AAEzC;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAWjG;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAsBnG;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACtC,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,GAAG,EACf,IAAI,CAAC,EAAE,GAAG,EAAE,GACb,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/lib/cli/utils/aws.js

@@ -1,7 +1,7 @@
 /**
  * AWS utilities for the environment CLI tool
  */
-import { SecretsManagerClient, GetSecretValueCommand } from '@aws-sdk/client-secrets-manager';
+import { SecretsManagerClient, GetSecretValueCommand, CreateSecretCommand, UpdateSecretCommand } from '@aws-sdk/client-secrets-manager';
 /**
  * Creates an AWS Secrets Manager client
  * @param region - AWS region
@@ -47,4 +47,37 @@ export async function getSecretValue(client, secretName) {
         throw error;
     }
 }
+/**
+ * Creates or updates a secret in AWS Secrets Manager
+ * @param client - SecretsManagerClient instance
+ * @param secretName - Name of the secret to create/update
+ * @param secretData - The data to store in the secret
+ * @param tags - Optional tags to apply to the secret
+ * @throws Error if creation/update fails
+ */
+export async function createOrUpdateSecret(client, secretName, secretData, tags) {
+    const secretString = JSON.stringify(secretData, null, 2);
+    try {
+        // Try to create the secret first
+        const createCommand = new CreateSecretCommand({
+            Name: secretName,
+            SecretString: secretString,
+            Tags: tags
+        });
+        await client.send(createCommand);
+    }
+    catch (error) {
+        if (error.name === 'ResourceExistsException') {
+            // Secret already exists, update it instead
+            const updateCommand = new UpdateSecretCommand({
+                SecretId: secretName,
+                SecretString: secretString
+            });
+            await client.send(updateCommand);
+        }
+        else {
+            throw error;
+        }
+    }
+}
 //# sourceMappingURL=aws.js.map

package/lib/cli/utils/aws.js.map

@@ -1 +1 @@
-{"version":3,"file":"aws.js","sourceRoot":"","sources":["../../../src/cli/utils/aws.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAE9F;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc,EAAE,OAAgB;IACvE,MAAM,YAAY,GAAQ;QACtB,MAAM,EAAE,MAAM;KACjB,CAAC;IAEF,IAAI,OAAO,EAAE,CAAC;QACV,uCAAuC;QACvC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B,EAAE,UAAkB;IACjF,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC;YACtC,QAAQ,EAAE,UAAU;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,oCAAoC,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC"}
+{"version":3,"file":"aws.js","sourceRoot":"","sources":["../../../src/cli/utils/aws.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACH,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EAEtB,MAAM,iCAAiC,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc,EAAE,OAAgB;IACvE,MAAM,YAAY,GAAQ;QACtB,MAAM,EAAE,MAAM;KACjB,CAAC;IAEF,IAAI,OAAO,EAAE,CAAC;QACV,uCAAuC;QACvC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B,EAAE,UAAkB;IACjF,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC;YACtC,QAAQ,EAAE,UAAU;SACvB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,oCAAoC,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,MAA4B,EAC5B,UAAkB,EAClB,UAAe,EACf,IAAY;IAEZ,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEzD,IAAI,CAAC;QACD,iCAAiC;QACjC,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;YAC1C,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,YAAY;YAC1B,IAAI,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YAC3C,2CAA2C;YAC3C,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;gBAC1C,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,YAAY;aAC7B,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@efebia/one-env",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Type-safe environment configuration with validation and CLI tools",
   "keywords": [
     "env",