@episoda/cli 0.2.171 → 0.2.173

package/dist/index.js

@@ -2931,6 +2931,23 @@ Branch: ${details.branchName}`;
   }
 });
 
+// ../core/dist/internal-env-keys.js
+var require_internal_env_keys = __commonJS({
+  "../core/dist/internal-env-keys.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.INTERNAL_ONLY_ENV_KEYS = void 0;
+    exports2.isInternalOnlyEnvKey = isInternalOnlyEnvKey2;
+    exports2.INTERNAL_ONLY_ENV_KEYS = [
+      "AI_CREDENTIALS_ENCRYPTION_KEY"
+    ];
+    var INTERNAL_ONLY_ENV_KEY_SET = new Set(exports2.INTERNAL_ONLY_ENV_KEYS);
+    function isInternalOnlyEnvKey2(key) {
+      return INTERNAL_ONLY_ENV_KEY_SET.has(key.toUpperCase());
+    }
+  }
+});
+
 // ../core/dist/index.js
 var require_dist = __commonJS({
   "../core/dist/index.js"(exports2) {
@@ -2966,6 +2983,7 @@ var require_dist = __commonJS({
     __exportStar(require_errors(), exports2);
     __exportStar(require_git_validator(), exports2);
     __exportStar(require_git_parser(), exports2);
+    __exportStar(require_internal_env_keys(), exports2);
     var version_1 = require_version();
     Object.defineProperty(exports2, "VERSION", { enumerable: true, get: function() {
       return version_1.VERSION;
@@ -7279,14 +7297,15 @@ async function envListCommand(options = {}) {
   if (!data.success || !data.env_vars) {
     throw new Error("Failed to parse env vars response");
   }
-  if (data.env_vars.length === 0) {
+  const visibleEnvVars = data.env_vars.filter((envVar) => !(0, import_core17.isInternalOnlyEnvKey)(envVar.key));
+  if (visibleEnvVars.length === 0) {
     status.info("No environment variables configured.");
     status.info("Add one with: episoda env set KEY=value");
     return;
   }
   console.log("\nEnvironment Variables:");
   console.log("\u2500".repeat(60));
-  for (const envVar of data.env_vars) {
+  for (const envVar of visibleEnvVars) {
     const envBadge = envVar.environment === "all" ? "" : ` [${envVar.environment}]`;
     const sealed = envVar.is_sealed ? " (sealed)" : "";
     if (options.showValues) {
@@ -7297,7 +7316,7 @@ async function envListCommand(options = {}) {
     }
   }
   console.log("");
-  console.log(`Total: ${data.env_vars.length} variable(s)`);
+  console.log(`Total: ${visibleEnvVars.length} variable(s)`);
   if (!options.showValues) {
     console.log("\nTip: Use --show-values to see value previews");
   }
@@ -7324,6 +7343,9 @@ async function envSetCommand(keyValue, options = {}) {
 Keys must be uppercase with underscores (e.g., API_KEY, DATABASE_URL)`
     );
   }
+  if ((0, import_core17.isInternalOnlyEnvKey)(key)) {
+    throw new Error(`${key} is managed internally and cannot be set via episoda env`);
+  }
   const url = `${apiUrl}/api/projects/${config.project_id}/env-vars`;
   const response = await fetch(url, {
     method: "POST",
@@ -7383,6 +7405,9 @@ async function envRemoveCommand(key) {
   if (!config || !config.access_token) {
     throw new Error("Not authenticated. Please run `episoda auth` first.");
   }
+  if ((0, import_core17.isInternalOnlyEnvKey)(key)) {
+    throw new Error(`${key} is managed internally and cannot be removed via episoda env`);
+  }
   const apiUrl = config.api_url || "https://episoda.dev";
   const listUrl = `${apiUrl}/api/projects/${config.project_id}/env-vars`;
   const listResponse = await fetch(listUrl, {
@@ -7419,7 +7444,10 @@ async function envPullCommand(options = {}) {
   const apiUrl = config.api_url || "https://episoda.dev";
   status.info("Fetching environment variables...");
   const envVars = await fetchEnvVars(apiUrl, config.access_token);
-  if (Object.keys(envVars).length === 0) {
+  const visibleEnvVars = Object.fromEntries(
+    Object.entries(envVars).filter(([key]) => !(0, import_core17.isInternalOnlyEnvKey)(key))
+  );
+  if (Object.keys(visibleEnvVars).length === 0) {
     status.warning("No environment variables found.");
     return;
   }
@@ -7433,7 +7461,7 @@ async function envPullCommand(options = {}) {
     "# To refresh: episoda env pull",
     ""
   ].join("\n");
-  const envContent = Object.entries(envVars).map(([key, value]) => {
+  const envContent = Object.entries(visibleEnvVars).map(([key, value]) => {
     if (/[\s'"#$`\\]/.test(value) || value.includes("\n")) {
       const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n");
       return `${key}="${escaped}"`;
@@ -7448,7 +7476,7 @@ async function envPullCommand(options = {}) {
   const filename = options.file || ".env";
   const filepath = path16.resolve(process.cwd(), filename);
   fs14.writeFileSync(filepath, fullContent, { mode: 384 });
-  status.success(`Wrote ${Object.keys(envVars).length} env vars to ${filename}`);
+  status.success(`Wrote ${Object.keys(visibleEnvVars).length} env vars to ${filename}`);
 }
 async function promptForValue(key) {
   if (!process.stdin.isTTY) {