@envpilot/cli 1.3.4 → 1.4.1

package/dist/index.js

@@ -9,7 +9,7 @@ function initSentry() {
   Sentry.init({
     dsn,
     environment: "cli",
-    release: true ? "1.3.4" : "0.0.0",
+    release: true ? "1.4.1" : "0.0.0",
     // Free tier: disable performance monitoring
     tracesSampleRate: 0,
     beforeSend(event) {
@@ -748,6 +748,11 @@ var projectSchema = z.object({
   userRole: z.string().nullable().optional(),
   projectRole: z.string().nullable().optional()
 });
+var variableTagSchema = z.object({
+  _id: z.string(),
+  name: z.string(),
+  color: z.string()
+});
 var variableSchema = z.object({
   _id: z.string(),
   key: z.string(),
@@ -756,7 +761,8 @@ var variableSchema = z.object({
   projectId: z.string(),
   description: z.string().optional(),
   isSensitive: z.boolean().optional(),
-  version: z.number().optional()
+  version: z.number().optional(),
+  tags: z.array(variableTagSchema).optional()
 });
 var environmentSchema = z.enum([
   "development",
@@ -1384,10 +1390,356 @@ function printPostInit(selectedOrg, selectedProject) {
 import { Command as Command3 } from "commander";
 import chalk5 from "chalk";
 import inquirer2 from "inquirer";
+
+// src/lib/format-converter.ts
+var ALL_FORMATS = [
+  "env",
+  "json",
+  "yaml",
+  "docker-compose",
+  "aws",
+  "vercel",
+  "netlify"
+];
+function serialize(vars, format, meta) {
+  switch (format) {
+    case "env":
+      return serializeEnv(vars, meta);
+    case "json":
+      return serializeJson(vars);
+    case "yaml":
+      return serializeYaml(vars, meta);
+    case "docker-compose":
+      return serializeDockerCompose(vars, meta);
+    case "aws":
+      return serializeAws(vars, meta);
+    case "vercel":
+      return serializeVercel(vars);
+    case "netlify":
+      return serializeNetlify(vars, meta);
+  }
+}
+function parse(content, format, options) {
+  switch (format) {
+    case "env":
+      return parseEnvFile(content);
+    case "json":
+      return parseJson(content);
+    case "yaml":
+      return parseYaml(content);
+    case "docker-compose":
+      return parseDockerCompose(content);
+    case "aws":
+      return parseAws(content, options?.prefix);
+    case "vercel":
+      return parseVercel(content);
+    case "netlify":
+      return parseNetlify(content);
+  }
+}
+function getDefaultFilename(format, environment) {
+  const env = environment || "development";
+  switch (format) {
+    case "env":
+      return env === "development" ? ".env.local" : `.env.${env}`;
+    case "json":
+      return `${env}.json`;
+    case "yaml":
+      return `${env}.yaml`;
+    case "docker-compose":
+      return "docker-compose.yml";
+    case "aws":
+      return `${env}.aws.json`;
+    case "vercel":
+      return `${env}.vercel.json`;
+    case "netlify":
+      return "netlify.toml";
+  }
+}
+function serializeEnv(vars, meta) {
+  const lines = [];
+  if (meta?.environment) {
+    lines.push(`# Environment: ${meta.environment}`);
+  }
+  if (meta?.projectName) {
+    lines.push(`# Project: ${meta.projectName}`);
+  }
+  if (lines.length > 0) {
+    lines.push(`# Exported: ${(/* @__PURE__ */ new Date()).toISOString()}`);
+    lines.push("");
+  }
+  return lines.join("\n") + stringifyEnv(vars, { sort: true });
+}
+function serializeJson(vars) {
+  const sorted = Object.keys(vars).sort().reduce(
+    (obj, key) => {
+      obj[key] = vars[key];
+      return obj;
+    },
+    {}
+  );
+  return JSON.stringify(sorted, null, 2) + "\n";
+}
+function parseJson(content) {
+  const data = JSON.parse(content);
+  if (typeof data !== "object" || data === null || Array.isArray(data)) {
+    throw new Error("Expected a JSON object with string key-value pairs");
+  }
+  const result = {};
+  for (const [key, value] of Object.entries(data)) {
+    if (typeof value === "string") {
+      result[key] = value;
+    } else if (value !== null && value !== void 0) {
+      result[key] = String(value);
+    }
+  }
+  return result;
+}
+function yamlQuote(value) {
+  if (value === "" || value === "true" || value === "false" || value === "null" || value === "~" || /^[0-9]/.test(value) || /[:#\[\]{}&*!|>'"%@`]/.test(value) || value.includes("\n") || value.startsWith(" ") || value.endsWith(" ")) {
+    const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t");
+    return `"${escaped}"`;
+  }
+  return value;
+}
+function serializeYaml(vars, meta) {
+  const lines = [];
+  if (meta?.environment) {
+    lines.push(`# Environment: ${meta.environment}`);
+  }
+  if (meta?.projectName) {
+    lines.push(`# Project: ${meta.projectName}`);
+  }
+  if (lines.length > 0) {
+    lines.push("");
+  }
+  for (const key of Object.keys(vars).sort()) {
+    lines.push(`${key}: ${yamlQuote(vars[key])}`);
+  }
+  return lines.join("\n") + "\n";
+}
+function parseYaml(content) {
+  const result = {};
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const colonIndex = trimmed.indexOf(": ");
+    if (colonIndex === -1) {
+      if (trimmed.endsWith(":")) {
+        const key2 = trimmed.slice(0, -1).trim();
+        if (key2 && /^[A-Za-z_][A-Za-z0-9_]*$/.test(key2)) {
+          result[key2] = "";
+        }
+      }
+      continue;
+    }
+    const key = trimmed.substring(0, colonIndex).trim();
+    let value = trimmed.substring(colonIndex + 2).trim();
+    if (line.startsWith(" ") || line.startsWith("	")) continue;
+    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+      value = value.slice(1, -1);
+      if (value.includes("\\")) {
+        value = value.replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
+      }
+    }
+    if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+function serializeDockerCompose(vars, meta) {
+  const lines = [];
+  if (meta?.environment || meta?.projectName) {
+    lines.push("# Docker Compose environment variables");
+    if (meta.projectName) lines.push(`# Project: ${meta.projectName}`);
+    if (meta.environment) lines.push(`# Environment: ${meta.environment}`);
+    lines.push("");
+  }
+  lines.push("services:");
+  lines.push("  app:");
+  lines.push("    environment:");
+  for (const key of Object.keys(vars).sort()) {
+    lines.push(`      ${key}: ${yamlQuote(vars[key])}`);
+  }
+  return lines.join("\n") + "\n";
+}
+function parseDockerCompose(content) {
+  const result = {};
+  const lines = content.split("\n");
+  let inEnvironment = false;
+  let environmentIndent = -1;
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const indent = line.length - line.trimStart().length;
+    if (trimmed === "environment:") {
+      inEnvironment = true;
+      environmentIndent = indent;
+      continue;
+    }
+    if (inEnvironment) {
+      if (indent <= environmentIndent && trimmed !== "") {
+        inEnvironment = false;
+        environmentIndent = -1;
+        continue;
+      }
+      if (trimmed.startsWith("- ")) {
+        const entry = trimmed.slice(2);
+        const eqIdx = entry.indexOf("=");
+        if (eqIdx !== -1) {
+          const key = entry.substring(0, eqIdx).trim();
+          let value = entry.substring(eqIdx + 1).trim();
+          if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+            value = value.slice(1, -1);
+          }
+          if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+            result[key] = value;
+          }
+        }
+        continue;
+      }
+      const colonIndex = trimmed.indexOf(": ");
+      if (colonIndex !== -1) {
+        const key = trimmed.substring(0, colonIndex).trim();
+        let value = trimmed.substring(colonIndex + 2).trim();
+        if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+          value = value.slice(1, -1);
+          if (value.includes("\\")) {
+            value = value.replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
+          }
+        }
+        if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+          result[key] = value;
+        }
+      } else if (trimmed.endsWith(":")) {
+        const key = trimmed.slice(0, -1).trim();
+        if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+          result[key] = "";
+        }
+      }
+    }
+  }
+  return result;
+}
+function serializeAws(vars, meta) {
+  const prefix = meta?.prefix || `/${meta?.projectName || "app"}`;
+  const parameters = Object.keys(vars).sort().map((key) => ({
+    name: `${prefix}/${key}`,
+    value: vars[key],
+    type: "SecureString"
+  }));
+  return JSON.stringify({ parameters }, null, 2) + "\n";
+}
+function parseAws(content, prefix) {
+  const data = JSON.parse(content);
+  const result = {};
+  const params = data.parameters || data.Parameters || [];
+  if (!Array.isArray(params)) {
+    throw new Error(
+      "Expected AWS Parameter Store format with 'parameters' array"
+    );
+  }
+  for (const param of params) {
+    const name = param.name || param.Name || "";
+    const value = param.value || param.Value || "";
+    let key;
+    if (prefix && name.startsWith(prefix + "/")) {
+      key = name.substring(prefix.length + 1);
+    } else {
+      const lastSlash = name.lastIndexOf("/");
+      key = lastSlash !== -1 ? name.substring(lastSlash + 1) : name;
+    }
+    if (key && /^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+function serializeVercel(vars) {
+  const sorted = Object.keys(vars).sort().reduce(
+    (obj, key) => {
+      obj[key] = vars[key];
+      return obj;
+    },
+    {}
+  );
+  return JSON.stringify({ env: sorted }, null, 2) + "\n";
+}
+function parseVercel(content) {
+  const data = JSON.parse(content);
+  const result = {};
+  const env = data.env;
+  if (!env || typeof env !== "object" || Array.isArray(env)) {
+    throw new Error("Expected Vercel format with 'env' object");
+  }
+  for (const [key, value] of Object.entries(env)) {
+    if (typeof value === "string") {
+      result[key] = value;
+    } else if (value !== null && value !== void 0) {
+      result[key] = String(value);
+    }
+  }
+  return result;
+}
+function tomlQuote(value) {
+  const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t");
+  return `"${escaped}"`;
+}
+function serializeNetlify(vars, meta) {
+  const lines = [];
+  if (meta?.environment || meta?.projectName) {
+    if (meta.projectName) lines.push(`# Project: ${meta.projectName}`);
+    if (meta.environment) lines.push(`# Environment: ${meta.environment}`);
+    lines.push("");
+  }
+  lines.push("[build.environment]");
+  for (const key of Object.keys(vars).sort()) {
+    lines.push(`  ${key} = ${tomlQuote(vars[key])}`);
+  }
+  return lines.join("\n") + "\n";
+}
+function parseNetlify(content) {
+  const result = {};
+  const lines = content.split("\n");
+  let inBuildEnv = false;
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("[")) {
+      inBuildEnv = trimmed === "[build.environment]" || trimmed === "[build.environment]";
+      continue;
+    }
+    if (!inBuildEnv) continue;
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eqIndex = trimmed.indexOf("=");
+    if (eqIndex === -1) continue;
+    const key = trimmed.substring(0, eqIndex).trim();
+    let value = trimmed.substring(eqIndex + 1).trim();
+    if (value.startsWith('"') && value.endsWith('"')) {
+      value = value.slice(1, -1);
+      value = value.replace(/\\n/g, "\n").replace(/\\r/g, "\r").replace(/\\t/g, "	").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
+    } else if (value.startsWith("'") && value.endsWith("'")) {
+      value = value.slice(1, -1);
+    }
+    if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+
+// src/commands/pull.ts
 var pullCommand = new Command3("pull").description("Download environment variables to local .env file").option(
   "-e, --env <environment>",
   "Environment (development, staging, production)"
-).option("-f, --file <path>", "Output file path (default: .env)").option("--force", "Overwrite without confirmation").option("--format <format>", "Output format: env, json", "env").option("--dry-run", "Show what would be downloaded without writing").option("--project <name-or-id>", "Pull a specific linked project").option("--all", "Pull all linked projects").action(async (options) => {
+).option("-f, --file <path>", "Output file path (default: .env)").option("--force", "Overwrite without confirmation").option(
+  "--format <format>",
+  "Output format: env, json, yaml, docker-compose, aws, vercel, netlify",
+  "env"
+).option(
+  "--prefix <prefix>",
+  "AWS Parameter Store path prefix (default: /project-name)"
+).option("--dry-run", "Show what would be downloaded without writing").option("--project <name-or-id>", "Pull a specific linked project").option("--all", "Pull all linked projects").action(async (options) => {
   try {
     if (!isAuthenticated()) {
       throw notAuthenticated();
@@ -1420,7 +1772,12 @@ var pullCommand = new Command3("pull").description("Download environment variabl
     if (!projectConfig) throw notInitialized();
     checkTrackedFiles();
     const environment = options.env || projectConfig.environment || "development";
-    const outputPath = options.file || getEnvPathForEnvironment(environment);
+    const fmt = options.format || "env";
+    if (!ALL_FORMATS.includes(fmt)) {
+      error(`Unknown format: ${fmt}. Supported: ${ALL_FORMATS.join(", ")}`);
+      process.exit(1);
+    }
+    const outputPath = options.file || (fmt === "env" ? getEnvPathForEnvironment(environment) : getDefaultFilename(fmt, environment));
     await pullProject(
       {
         projectId: projectConfig.projectId,
@@ -1479,7 +1836,8 @@ async function pullAllProjects(options) {
 async function pullSingleProject(project, options) {
   checkTrackedFiles();
   const environment = options.env || project.environment;
-  const outputPath = options.file || getEnvPathForEnvironment(environment);
+  const fmt = options.format || "env";
+  const outputPath = options.file || (fmt === "env" ? getEnvPathForEnvironment(environment) : getDefaultFilename(fmt, environment));
   await pullProject(
     {
       projectId: project.projectId,
@@ -1552,10 +1910,8 @@ async function pullProject(project, outputPath, options) {
     }
   } catch {
   }
-  if (options.format === "json") {
-    const fs = await import("fs");
-    fs.writeFileSync(outputPath, JSON.stringify(remoteVars, null, 2) + "\n");
-  } else {
+  const fmt = options.format || "env";
+  if (fmt === "env") {
     const comments = {};
     for (const variable of variables) {
       if (variable.description) {
@@ -1563,6 +1919,14 @@ async function pullProject(project, outputPath, options) {
       }
     }
     writeEnvFile(outputPath, remoteVars, { sort: true, comments });
+  } else {
+    const fs = await import("fs");
+    const output = serialize(remoteVars, fmt, {
+      projectName: project.projectId,
+      environment: project.environment,
+      prefix: options.prefix
+    });
+    fs.writeFileSync(outputPath, output, "utf-8");
   }
   const role = getRole();
   applyFileProtection(outputPath, role, metaProjectRole);
@@ -1658,7 +2022,14 @@ function validateEnvVars(vars) {
 var pushCommand = new Command4("push").description("Upload local .env file to cloud").option(
   "-e, --env <environment>",
   "Target environment (development, staging, production)"
-).option("-f, --file <path>", "Input file path (default: .env)").option("--merge", "Merge with existing variables (default)").option("--replace", "Replace all existing variables").option("--dry-run", "Show what would be uploaded without making changes").option("--force", "Skip confirmation").option("--project <name-or-id>", "Push to a specific linked project").action(async (options) => {
+).option("-f, --file <path>", "Input file path (default: .env)").option("--merge", "Merge with existing variables (default)").option("--replace", "Replace all existing variables").option(
+  "--format <format>",
+  "Input format: env, json, yaml, docker-compose, aws, vercel, netlify",
+  "env"
+).option(
+  "--prefix <prefix>",
+  "AWS Parameter Store path prefix (default: /project-name)"
+).option("--dry-run", "Show what would be uploaded without making changes").option("--force", "Skip confirmation").option("--project <name-or-id>", "Push to a specific linked project").action(async (options) => {
   try {
     if (!isAuthenticated()) {
       throw notAuthenticated();
@@ -1740,9 +2111,25 @@ var pushCommand = new Command4("push").description("Upload local .env file to cl
       }
     }
     const environment = options.env || defaultEnvironment || "development";
-    const inputPath = options.file || getEnvPathForEnvironment(environment);
+    const fmt = options.format || "env";
+    if (!ALL_FORMATS.includes(fmt)) {
+      error(`Unknown format: ${fmt}. Supported: ${ALL_FORMATS.join(", ")}`);
+      process.exit(1);
+    }
+    const inputPath = options.file || (fmt === "env" ? getEnvPathForEnvironment(environment) : getDefaultFilename(fmt, environment));
     const mode = options.replace ? "replace" : "merge";
-    const localVars = readEnvFile(inputPath);
+    let localVars;
+    if (fmt === "env") {
+      localVars = readEnvFile(inputPath);
+    } else {
+      const { readFileSync: readFileSync4, existsSync: existsSync4 } = await import("fs");
+      if (!existsSync4(inputPath)) {
+        localVars = null;
+      } else {
+        const content = readFileSync4(inputPath, "utf-8");
+        localVars = parse(content, fmt, { prefix: options.prefix });
+      }
+    }
     if (!localVars) {
       throw fileNotFound(inputPath);
     }
@@ -2224,7 +2611,7 @@ var listCommand = new Command6("list").description("List resources").argument(
   "[resource]",
   "Resource type: projects, organizations, variables, linked",
   "projects"
-).option("-o, --organization <id>", "Organization ID (for projects/variables)").option("-p, --project <id>", "Project ID (for variables)").option("-e, --env <environment>", "Environment filter (for variables)").option("--show-values", "Show actual variable values (masked by default)").option("--json", "Output as JSON").action(async (resource, options) => {
+).option("-o, --organization <id>", "Organization ID (for projects/variables)").option("-p, --project <id>", "Project ID (for variables)").option("-e, --env <environment>", "Environment filter (for variables)").option("-t, --tag <name>", "Filter by tag name (for variables)").option("--show-values", "Show actual variable values (masked by default)").option("--json", "Output as JSON").action(async (resource, options) => {
   try {
     if (!isAuthenticated()) {
       throw notAuthenticated();
@@ -2408,36 +2795,47 @@ async function listVariables(api, projectConfig, options) {
     metaProjectRole = response.meta?.projectRole;
     return response.data || [];
   });
-  if (variables.length === 0) {
-    info(`No variables found${environment ? ` for ${environment}` : ""}.`);
+  const tagFilter = options.tag?.toLowerCase();
+  const filtered = tagFilter ? variables.filter(
+    (v) => v.tags?.some((t) => t.name.toLowerCase() === tagFilter)
+  ) : variables;
+  if (filtered.length === 0) {
+    info(
+      `No variables found${environment ? ` for ${environment}` : ""}${tagFilter ? ` with tag "${options.tag}"` : ""}.`
+    );
     return;
   }
   if (options.json) {
-    const output = variables.map((v) => ({
+    const output = filtered.map((v) => ({
       ...v,
       value: options.showValues ? v.value : maskValue(v.value)
     }));
     console.log(JSON.stringify(output, null, 2));
     return;
   }
-  header(`Variables${environment ? ` (${environment})` : ""}`);
+  header(
+    `Variables${environment ? ` (${environment})` : ""}${tagFilter ? ` [tag: ${options.tag}]` : ""}`
+  );
   console.log();
+  const hasTags = filtered.some((v) => v.tags && v.tags.length > 0);
   table(
-    variables.map((variable) => ({
+    filtered.map((variable) => ({
       key: variable.key,
       value: options.showValues ? variable.value : maskValue(variable.value),
       sensitive: variable.isSensitive ? chalk8.yellow("\u25CF") : "",
+      tags: hasTags ? variable.tags?.map((t) => t.name).join(", ") || chalk8.dim("-") : "",
       version: `v${variable.version}`
     })),
     [
       { key: "key", header: "Key" },
       { key: "value", header: "Value", width: 40 },
       { key: "sensitive", header: "" },
+      ...hasTags ? [{ key: "tags", header: "Tags", width: 25 }] : [],
       { key: "version", header: "Ver" }
     ]
   );
   console.log();
-  console.log(chalk8.dim(`Total: ${variables.length} variables`));
+  console.log(chalk8.dim(`Total: ${filtered.length} variables`));
   const role = getRole();
   if (role) {
     console.log(chalk8.dim(`Your org role: ${formatRole(role)}`));
@@ -3141,7 +3539,7 @@ var usageCommand = new Command11("usage").description("Show plan usage and limit
 // src/lib/version-check.ts
 import chalk13 from "chalk";
 import Conf2 from "conf";
-var CLI_VERSION = true ? "1.3.4" : "0.0.0";
+var CLI_VERSION = true ? "1.4.1" : "0.0.0";
 var CHECK_INTERVAL = 60 * 60 * 1e3;
 var _cache = null;
 function getCache() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envpilot/cli",
-  "version": "1.3.4",
+  "version": "1.4.1",
   "description": "Envpilot CLI — sync and manage environment variables from the terminal",
   "type": "module",
   "bin": {