@envmanager-cli/cli 0.1.9 → 0.2.0

package/dist/bin/envmanager.js

@@ -464,6 +464,147 @@ import { resolve } from "path";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
 import { join as join2, dirname } from "path";
 import { z } from "zod";
+
+// src/lib/formatters.ts
+import * as yaml from "js-yaml";
+var EXPORT_FORMATS = [
+  "dotenv",
+  "docker-compose",
+  "k8s-secret",
+  "k8s-configmap",
+  "vercel",
+  "railway",
+  "render"
+];
+function sanitizeK8sName(name) {
+  return name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^-+|-+$/g, "").substring(0, 63);
+}
+function toDotEnv(variables) {
+  return variables.map((v) => {
+    const needsQuotes = /[\s='"#\n\r]/.test(v.value);
+    const value = needsQuotes ? `"${v.value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n")}"` : v.value;
+    return `${v.key}=${value}`;
+  }).join("\n");
+}
+function toDockerCompose(variables) {
+  const envData = {};
+  for (const v of variables) {
+    envData[v.key] = v.value;
+  }
+  const snippet = {
+    services: {
+      app: {
+        environment: envData
+      }
+    }
+  };
+  const yamlOutput = yaml.dump(snippet, { lineWidth: -1, quotingType: '"' });
+  return `# Docker Compose environment section
+# Copy this into your docker-compose.yml and replace 'app' with your service name
+${yamlOutput}`;
+}
+function toKubernetesSecret(variables, config) {
+  const data = {};
+  for (const v of variables) {
+    data[v.key] = Buffer.from(v.value).toString("base64");
+  }
+  const manifest = {
+    apiVersion: "v1",
+    kind: "Secret",
+    metadata: {
+      name: config.name,
+      namespace: config.namespace
+    },
+    type: "Opaque",
+    data
+  };
+  return yaml.dump(manifest, { lineWidth: -1, quotingType: '"' });
+}
+function toKubernetesConfigMap(variables, config) {
+  const data = {};
+  for (const v of variables) {
+    data[v.key] = v.value;
+  }
+  const manifest = {
+    apiVersion: "v1",
+    kind: "ConfigMap",
+    metadata: {
+      name: config.name,
+      namespace: config.namespace
+    },
+    data
+  };
+  return yaml.dump(manifest, { lineWidth: -1, quotingType: '"' });
+}
+function toVercelCLI(variables) {
+  if (variables.length === 0) return "# No variables to export";
+  const header = `# Vercel CLI commands to add environment variables
+# Run these commands in your project directory
+# Docs: https://vercel.com/docs/cli/env
+# Note: You may need to run 'vercel login' first
+
+`;
+  const commands = variables.map((v) => {
+    if (v.value.includes("\n")) {
+      const escapedValue = v.value.replace(/'/g, "'\\''");
+      return `vercel env add ${v.key} production << 'EOF'
+${escapedValue}
+EOF`;
+    } else {
+      const escapedValue = v.value.replace(/'/g, "'\\''");
+      return `echo '${escapedValue}' | vercel env add ${v.key} production`;
+    }
+  }).join("\n\n");
+  return header + commands;
+}
+function toRailwayCLI(variables) {
+  if (variables.length === 0) return "# No variables to export";
+  const header = `# Railway CLI commands to set environment variables
+# Run these commands in your project directory
+# Docs: https://docs.railway.app/reference/cli-api#variables-set
+# Note: You may need to run 'railway login' first
+
+`;
+  const commands = variables.map((v) => {
+    const escapedValue = v.value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    return `railway variables set ${v.key}="${escapedValue}"`;
+  }).join("\n");
+  return header + commands;
+}
+function toRenderCLI(variables) {
+  if (variables.length === 0) return "# No variables to export";
+  const header = `# Render CLI commands to set environment variables
+# Run these commands in your project directory
+# Docs: https://render.com/docs/cli
+# Note: You may need to authenticate first
+
+`;
+  const commands = variables.map((v) => {
+    const escapedValue = v.value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    return `render env:set ${v.key}="${escapedValue}"`;
+  }).join("\n");
+  return header + commands;
+}
+function formatVariables(variables, format, k8sConfig) {
+  switch (format) {
+    case "dotenv":
+      return toDotEnv(variables);
+    case "docker-compose":
+      return toDockerCompose(variables);
+    case "k8s-secret":
+      return toKubernetesSecret(variables, k8sConfig ?? { name: "app-secrets", namespace: "default" });
+    case "k8s-configmap":
+      return toKubernetesConfigMap(variables, k8sConfig ?? { name: "app-config", namespace: "default" });
+    case "vercel":
+      return toVercelCLI(variables);
+    case "railway":
+      return toRailwayCLI(variables);
+    case "render":
+      return toRenderCLI(variables);
+  }
+}
+
+// src/lib/config.ts
 var ConfigSchema = z.object({
   project_id: z.string().uuid().optional(),
   project_name: z.string().optional(),
@@ -471,7 +612,11 @@ var ConfigSchema = z.object({
   environment_id: z.string().uuid().optional(),
   organization_id: z.string().uuid().optional(),
   output: z.string().default(".env"),
-  api_url: z.string().url().optional()
+  api_url: z.string().url().optional(),
+  format: z.enum(EXPORT_FORMATS).optional(),
+  k8s_namespace: z.string().optional(),
+  k8s_name: z.string().optional(),
+  tags: z.array(z.string()).optional()
 });
 var CONFIG_FILENAMES = ["envmanager.json", ".envmanagerrc"];
 function findConfigFile(startDir = process.cwd()) {
@@ -741,17 +886,23 @@ function resolveAll(variables) {
 }
 
 // src/commands/pull.ts
-var pullCommand = new Command4("pull").description("Pull environment variables from EnvManager to local .env file").option("--org <name>", "Organization name (required if you belong to multiple)").option("-e, --environment <name>", 'Environment name (default: from config or "development")').option("-p, --project <id>", "Project ID (default: from config)").option("-o, --output <file>", "Output file path (default: .env)").option("--no-secrets", "Exclude secret values (will be empty)").option("-f, --force", "Overwrite existing file without prompting").option("-r, --resolve-references", "Resolve ${VAR} references to their values").option("-F, --include-fallbacks", "Include fallback values for empty variables").option("-s, --show-sources", "Show value source as inline comments").action(async (options) => {
+var pullCommand = new Command4("pull").description("Pull environment variables from EnvManager to local .env file").option("--org <name>", "Organization name (required if you belong to multiple)").option("-e, --environment <name>", 'Environment name (default: from config or "development")').option("-p, --project <id>", "Project ID (default: from config)").option("-o, --output <file>", "Output file path (default: .env)").option("--no-secrets", "Exclude secret values (will be empty)").option("-f, --force", "Overwrite existing file without prompting").option("-r, --resolve-references", "Resolve ${VAR} references to their values").option("-F, --include-fallbacks", "Include fallback values for empty variables").option("-s, --show-sources", "Show value source as inline comments").option("--format <type>", `Export format (${EXPORT_FORMATS.join(", ")})`).option("--k8s-namespace <ns>", 'Kubernetes namespace (default: "default")').option("--k8s-name <name>", "Kubernetes resource name").option("--tag <tags...>", "Filter by tags (untagged variables always included)").action(async (options) => {
   const spinner = ora3("Connecting to EnvManager...").start();
   try {
     const config = loadConfig();
     const projectInput = options.project || config?.project_id;
     const envName = options.environment || config?.environment || "development";
-    const outputFile = resolve(options.output || ".env");
+    const outputFile = resolve(options.output || config?.output || ".env");
     const includeSecrets = options.secrets !== false;
     const shouldResolve = options.resolveReferences === true;
     const shouldFallback = options.includeFallbacks === true;
     const shouldShowSources = options.showSources === true;
+    const formatInput = options.format || config?.format || "dotenv";
+    if (!EXPORT_FORMATS.includes(formatInput)) {
+      spinner.fail(`Invalid format "${formatInput}". Valid formats: ${EXPORT_FORMATS.join(", ")}`);
+      process.exit(1);
+    }
+    const format = formatInput;
     if (!projectInput) {
       spinner.fail("No project specified");
       console.log(chalk4.yellow("\nSpecify a project with --project <id-or-name> or create envmanager.json"));
@@ -807,7 +958,11 @@ File ${outputFile} already exists.`));
       console.log(chalk4.gray("Use --force to overwrite."));
       process.exit(1);
     }
-    const vars = variables.sort((a, b) => a.key.localeCompare(b.key));
+    const filterTags = options.tag || config?.tags || [];
+    const vars = filterTags.length > 0 ? variables.filter((v) => {
+      const t = v.tags || [];
+      return t.length === 0 || t.some((tag) => filterTags.includes(tag));
+    }).sort((a, b) => a.key.localeCompare(b.key)) : variables.sort((a, b) => a.key.localeCompare(b.key));
     let resolvedMap = null;
     if (shouldResolve) {
       spinner.text = "Resolving variable references...";
@@ -828,39 +983,64 @@ File ${outputFile} already exists.`));
       const resolved = resolveAll(inputs);
       resolvedMap = new Map(resolved.map((r) => [r.key, r]));
     }
-    spinner.text = "Writing .env file...";
-    const envContent = vars.map((v) => {
+    spinner.text = `Writing ${format} output...`;
+    const exportVars = vars.map((v) => {
       let value;
-      let source = null;
       if (resolvedMap) {
-        const resolved = resolvedMap.get(v.key);
-        value = resolved.resolvedValue;
-        source = resolved.source;
+        value = resolvedMap.get(v.key).resolvedValue;
       } else if (shouldFallback && (!v.value || v.value === "") && v.fallback_value) {
         value = v.fallback_value;
-        source = "fallback";
       } else {
         value = v.value || "";
       }
-      const needsQuotes = value.includes(" ") || value.includes("\n") || value.includes('"');
-      const formattedValue = needsQuotes ? `"${value.replace(/"/g, '\\"')}"` : value;
-      let line = `${v.key}=${formattedValue}`;
-      if (shouldShowSources && resolvedMap) {
-        const resolved = resolvedMap.get(v.key);
-        if (resolved.references.length > 0 && resolved.source !== "empty") {
-          line += `  # resolved from ${resolved.rawValue ?? v.value ?? ""}`;
-        } else if (resolved.source === "fallback") {
+      return { key: v.key, value, isSecret: v.is_secret };
+    });
+    let content;
+    if (format === "dotenv" && (shouldShowSources || shouldResolve)) {
+      content = vars.map((v) => {
+        let value;
+        let source = null;
+        if (resolvedMap) {
+          const resolved = resolvedMap.get(v.key);
+          value = resolved.resolvedValue;
+          source = resolved.source;
+        } else if (shouldFallback && (!v.value || v.value === "") && v.fallback_value) {
+          value = v.fallback_value;
+          source = "fallback";
+        } else {
+          value = v.value || "";
+        }
+        const needsQuotes = value.includes(" ") || value.includes("\n") || value.includes('"');
+        const formattedValue = needsQuotes ? `"${value.replace(/"/g, '\\"')}"` : value;
+        let line = `${v.key}=${formattedValue}`;
+        if (shouldShowSources && resolvedMap) {
+          const resolved = resolvedMap.get(v.key);
+          if (resolved.references.length > 0 && resolved.source !== "empty") {
+            line += `  # resolved from ${resolved.rawValue ?? v.value ?? ""}`;
+          } else if (resolved.source === "fallback") {
+            line += `  # fallback value`;
+          }
+        } else if (shouldShowSources && source === "fallback") {
           line += `  # fallback value`;
         }
-      } else if (shouldShowSources && source === "fallback") {
-        line += `  # fallback value`;
+        return line;
+      }).join("\n");
+    } else {
+      let k8sConfig;
+      if (format === "k8s-secret" || format === "k8s-configmap") {
+        const defaultName = format === "k8s-secret" ? "app-secrets" : "app-config";
+        k8sConfig = {
+          name: sanitizeK8sName(options.k8sName || config?.k8s_name || defaultName),
+          namespace: options.k8sNamespace || config?.k8s_namespace || "default"
+        };
       }
-      return line;
-    }).join("\n");
-    writeFileSync2(outputFile, envContent + "\n");
+      content = formatVariables(exportVars, format, k8sConfig);
+    }
+    writeFileSync2(outputFile, content + "\n");
     const secretCount = vars.filter((v) => v.is_secret).length;
     const plainCount = vars.length - secretCount;
-    spinner.succeed(`Pulled ${variables.length} variables to ${outputFile}`);
+    const tagInfo = filterTags.length > 0 ? ` (tags: ${filterTags.join(", ")})` : "";
+    spinner.succeed(`Pulled ${vars.length} variables to ${outputFile} (${format})${tagInfo}`);
     console.log(chalk4.gray(`  ${plainCount} plain, ${secretCount} secrets`));
     client.rpc("log_variable_access", {
       p_environment_id: environmentId,
@@ -1166,7 +1346,7 @@ import chalk7 from "chalk";
 import ora5 from "ora";
 import { readFileSync as readFileSync4, existsSync as existsSync5 } from "fs";
 import { resolve as resolve3 } from "path";
-var diffCommand = new Command6("diff").description("Show differences between local .env and EnvManager").option("--org <name>", "Organization name (required if you belong to multiple)").option("-e, --environment <name>", 'Environment name (default: from config or "development")').option("-p, --project <id>", "Project ID (default: from config)").option("-i, --input <file>", "Input file path (default: .env)").option("--keys-only", "Only show key names, not values").action(async (options) => {
+var diffCommand = new Command6("diff").description("Show differences between local .env and EnvManager").option("--org <name>", "Organization name (required if you belong to multiple)").option("-e, --environment <name>", 'Environment name (default: from config or "development")').option("-p, --project <id>", "Project ID (default: from config)").option("-i, --input <file>", "Input file path (default: .env)").option("--keys-only", "Only show key names, not values").option("--tag <tags...>", "Filter by tags (untagged variables always included)").action(async (options) => {
   const spinner = ora5("Comparing...").start();
   try {
     const config = loadConfig();
@@ -1218,8 +1398,13 @@ var diffCommand = new Command6("diff").description("Show differences between loc
       console.error(chalk7.red(varError.message));
       process.exit(1);
     }
+    const filterTags = options.tag || config?.tags || [];
+    const filteredRemoteData = filterTags.length > 0 ? (remoteVarsData || []).filter((v) => {
+      const t = v.tags || [];
+      return t.length === 0 || t.some((tag) => filterTags.includes(tag));
+    }) : remoteVarsData || [];
     const remoteVars = /* @__PURE__ */ new Map();
-    for (const v of remoteVarsData || []) {
+    for (const v of filteredRemoteData) {
       remoteVars.set(v.key, v);
     }
     spinner.stop();
@@ -1703,7 +1888,7 @@ function mergeWithRemote(local, remoteVariables, strategy) {
 }
 
 // src/commands/dev.ts
-var devCommand = new Command9("dev").description("Start real-time sync daemon - watches for remote variable changes").option("--org <name>", "Organization name (required if you belong to multiple)").option("-e, --environment <name>", 'Environment name (default: from config or "development")').option("-p, --project <id>", "Project ID (default: from config)").option("--output <file>", "Output file path (default: .env)").option("--no-watch", "Disable local file watching").option("--strategy <type>", "Merge strategy: remote_wins, local_wins, merge_new (default: remote_wins)", "remote_wins").action(async (options) => {
+var devCommand = new Command9("dev").description("Start real-time sync daemon - watches for remote variable changes").option("--org <name>", "Organization name (required if you belong to multiple)").option("-e, --environment <name>", 'Environment name (default: from config or "development")').option("-p, --project <id>", "Project ID (default: from config)").option("--output <file>", "Output file path (default: .env)").option("--no-watch", "Disable local file watching").option("--strategy <type>", "Merge strategy: remote_wins, local_wins, merge_new (default: remote_wins)", "remote_wins").option("--tag <tags...>", "Filter by tags (untagged variables always included)").action(async (options) => {
   const spinner = ora7("Starting dev mode...").start();
   try {
     const config = loadConfig();
@@ -1740,8 +1925,16 @@ var devCommand = new Command9("dev").description("Start real-time sync daemon -
       process.exit(1);
     }
     const environmentId = environment.id;
+    const filterTags = options.tag || config?.tags || [];
+    const applyTagFilter = (vars) => {
+      if (filterTags.length === 0) return vars;
+      return vars.filter((v) => {
+        const t = v.tags || [];
+        return t.length === 0 || t.some((tag) => filterTags.includes(tag));
+      });
+    };
     spinner.text = "Performing initial sync...";
-    const remoteVariables = await fetchAllVariables(environmentId, true);
+    const remoteVariables = applyTagFilter(await fetchAllVariables(environmentId, true));
     let localVariables = /* @__PURE__ */ new Map();
     if (existsSync7(outputFile)) {
       const content = readFileSync6(outputFile, "utf-8");
@@ -1758,7 +1951,7 @@ var devCommand = new Command9("dev").description("Start real-time sync daemon -
     let isPaused = false;
     let lastRemoteKeys = null;
     async function syncRemoteToLocal(silent = false) {
-      const updatedVariables = await fetchAllVariables(environmentId, true);
+      const updatedVariables = applyTagFilter(await fetchAllVariables(environmentId, true));
       const currentLocal = /* @__PURE__ */ new Map();
       if (existsSync7(outputFile)) {
         const content = readFileSync6(outputFile, "utf-8");
@@ -2003,9 +2196,9 @@ function validateAgainstTemplate(template, env) {
 }
 
 // src/lib/template-yaml.ts
-import yaml from "js-yaml";
+import yaml2 from "js-yaml";
 function parseYamlTemplate(content) {
-  const parsed = yaml.load(content);
+  const parsed = yaml2.load(content);
   if (!parsed || typeof parsed !== "object") {
     throw new Error("Invalid YAML template: must be an object");
   }
@@ -2150,7 +2343,7 @@ function generateYamlTemplate(variables, options = {}) {
     vars[v.key] = varConfig;
   }
   template.variables = vars;
-  return yaml.dump(template, { lineWidth: -1, quotingType: '"' });
+  return yaml2.dump(template, { lineWidth: -1, quotingType: '"' });
 }
 
 // src/commands/init.ts