@etree/cli 2.0.1 → 2.0.3

package/dist/lib/crypto.d.ts

@@ -1,23 +1,8 @@
-/**
- * Generate a new X25519 key pair.
- */
 export declare function generateKeys(): Promise<{
     private_key: string;
     public_key: string;
 }>;
-/**
- * Derive the public key from an existing private key.
- */
 export declare function derivePublicKey(privateKey: string): Promise<string>;
-/**
- * Encrypt a plaintext value using the recipient's public key (SealedBox).
- */
 export declare function encrypt(plaintext: string, publicKey: string): Promise<string>;
-/**
- * Decrypt a ciphertext using the recipient's private key (SealedBox).
- */
 export declare function decrypt(ciphertext: string, privateKey: string): Promise<string>;
-/**
- * Shut down the crypto engine process.
- */
 export declare function shutdown(): void;

package/dist/lib/crypto.js

@@ -1,173 +1,49 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateKeys = generateKeys;
 exports.derivePublicKey = derivePublicKey;
 exports.encrypt = encrypt;
 exports.decrypt = decrypt;
 exports.shutdown = shutdown;
-const child_process_1 = require("child_process");
-const path = __importStar(require("path"));
-const CRYPTO_ENGINE_PATH = path.resolve(__dirname, "../../../../packages/crypto/engine.py");
-let engineProcess = null;
-/**
- * Get or spawn the crypto engine Python process.
- */
-function getEngine() {
-    if (engineProcess && !engineProcess.killed) {
-        return engineProcess;
-    }
-    // Try venv python first, fall back to system python
-    const venvDir = path.resolve(__dirname, "../../../../packages/crypto/.venv");
-    const isWindows = process.platform === "win32";
-    // Potential Venv Paths
-    const potentialVenvPaths = isWindows
-        ? [
-            path.join(venvDir, "Scripts", "python.exe"),
-            path.join(venvDir, "bin", "python.exe"),
-        ]
-        : [path.join(venvDir, "bin", "python")];
-    let pythonCmd = isWindows ? "python" : "python3";
-    for (const venvPath of potentialVenvPaths) {
-        if (require("fs").existsSync(venvPath)) {
-            pythonCmd = venvPath;
-            break;
-        }
-    }
-    // If we haven't found a venv python, verify the system command exists
-    if (pythonCmd === "python" || pythonCmd === "python3") {
-        try {
-            // Use system python if it exists and works
-            require("child_process").execSync(`${pythonCmd} --version`, {
-                stdio: "ignore",
-            });
-        }
-        catch {
-            // If the preferred one fails, try the fallback
-            pythonCmd = pythonCmd === "python3" ? "python" : "python3";
-        }
-    }
-    engineProcess = (0, child_process_1.spawn)(pythonCmd, [CRYPTO_ENGINE_PATH], {
-        stdio: ["pipe", "pipe", "pipe"],
-        cwd: path.resolve(__dirname, "../../../../packages/crypto"),
-    });
-    engineProcess.on("exit", () => {
-        engineProcess = null;
-    });
-    return engineProcess;
-}
-/**
- * Send a command to the crypto engine and get the response.
- */
-function sendCommand(request) {
-    return new Promise((resolve, reject) => {
-        const engine = getEngine();
-        const onData = (data) => {
-            try {
-                const response = JSON.parse(data.toString().trim());
-                engine.stdout.removeListener("data", onData);
-                engine.stderr.removeListener("data", onError);
-                if (response.status === "error") {
-                    reject(new Error(response.message));
-                }
-                else {
-                    resolve(response);
-                }
-            }
-            catch (e) {
-                // partial data, wait for more
-            }
-        };
-        const onError = (data) => {
-            engine.stdout.removeListener("data", onData);
-            engine.stderr.removeListener("data", onError);
-            reject(new Error(`Crypto engine error: ${data.toString()}`));
-        };
-        engine.stdout.on("data", onData);
-        engine.stderr.on("data", onError);
-        engine.stdin.write(JSON.stringify(request) + "\n");
-    });
+const libsodium_wrappers_1 = __importDefault(require("libsodium-wrappers"));
+const buffer_1 = require("buffer");
+async function getSodium() {
+    await libsodium_wrappers_1.default.ready;
+    return libsodium_wrappers_1.default;
 }
-/**
- * Generate a new X25519 key pair.
- */
 async function generateKeys() {
-    const result = await sendCommand({ action: "generate_keys" });
+    const sodium = await getSodium();
+    const keypair = sodium.crypto_box_keypair();
     return {
-        private_key: result.private_key,
-        public_key: result.public_key,
+        private_key: buffer_1.Buffer.from(keypair.privateKey).toString("base64"),
+        public_key: buffer_1.Buffer.from(keypair.publicKey).toString("base64"),
     };
 }
-/**
- * Derive the public key from an existing private key.
- */
 async function derivePublicKey(privateKey) {
-    const result = await sendCommand({
-        action: "derive_public_key",
-        data: { private_key: privateKey },
-    });
-    return result.public_key;
+    const sodium = await getSodium();
+    const sk = buffer_1.Buffer.from(privateKey, "base64");
+    const pk = sodium.crypto_scalarmult_base(sk);
+    return buffer_1.Buffer.from(pk).toString("base64");
 }
-/**
- * Encrypt a plaintext value using the recipient's public key (SealedBox).
- */
 async function encrypt(plaintext, publicKey) {
-    const result = await sendCommand({
-        action: "encrypt",
-        data: { plaintext, public_key: publicKey },
-    });
-    return result.ciphertext;
+    const sodium = await getSodium();
+    const pk = buffer_1.Buffer.from(publicKey, "base64");
+    const encrypted = sodium.crypto_box_seal(sodium.from_string(plaintext), pk);
+    return buffer_1.Buffer.from(encrypted).toString("base64");
 }
-/**
- * Decrypt a ciphertext using the recipient's private key (SealedBox).
- */
 async function decrypt(ciphertext, privateKey) {
-    const result = await sendCommand({
-        action: "decrypt",
-        data: { ciphertext, private_key: privateKey },
-    });
-    return result.plaintext;
+    const sodium = await getSodium();
+    const ct = buffer_1.Buffer.from(ciphertext, "base64");
+    const sk = buffer_1.Buffer.from(privateKey, "base64");
+    // Need to compute public key corresponding to private key for unsealing
+    const pk = sodium.crypto_scalarmult_base(sk);
+    const decrypted = sodium.crypto_box_seal_open(ct, pk, sk);
+    return sodium.to_string(decrypted);
 }
-/**
- * Shut down the crypto engine process.
- */
 function shutdown() {
-    if (engineProcess && !engineProcess.killed) {
-        engineProcess.stdin.end();
-        engineProcess.kill();
-        engineProcess = null;
-    }
+    // Graceful stub for backward compatibility
 }
 //# sourceMappingURL=crypto.js.map

package/dist/lib/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/lib/crypto.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiHA,oCASC;AAKD,0CAMC;AAKD,0BASC;AAKD,0BASC;AAKD,4BAMC;AA5KD,iDAAsE;AACtE,2CAA6B;AAE7B,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CACrC,SAAS,EACT,uCAAuC,CACxC,CAAC;AAEF,IAAI,aAAa,GAA0C,IAAI,CAAC;AAYhE;;GAEG;AACH,SAAS,SAAS;IAChB,IAAI,aAAa,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC3C,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAE/C,uBAAuB;IACvB,MAAM,kBAAkB,GAAG,SAAS;QAClC,CAAC,CAAC;YACE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC;SACxC;QACH,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1C,IAAI,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,SAAS,GAAG,QAAQ,CAAC;YACrB,MAAM;QACR,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,2CAA2C;YAC3C,OAAO,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,SAAS,YAAY,EAAE;gBAC1D,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,aAAa,GAAG,IAAA,qBAAK,EAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE;QACrD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC;KAC5D,CAAC,CAAC;IAEH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAC5B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,OAAsB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;YAC9B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE9C,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,8BAA8B;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAElC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY;IAIhC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,EAAE,mBAAmB;QAC3B,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;KAClC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,OAAO,CAC3B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE;KAC3C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,OAAO,CAC3B,UAAkB,EAClB,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE;KAC9C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,SAAS,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,QAAQ;IACtB,IAAI,aAAa,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC3C,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,aAAa,CAAC,IAAI,EAAE,CAAC;QACrB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/lib/crypto.ts"],"names":[],"mappings":";;;;;AAQA,oCAUC;AAED,0CAKC;AAED,0BAQC;AAED,0BAaC;AAED,4BAEC;AAtDD,4EAAyC;AACzC,mCAAgC;AAEhC,KAAK,UAAU,SAAS;IACtB,MAAM,4BAAO,CAAC,KAAK,CAAC;IACpB,OAAO,4BAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,YAAY;IAIhC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;IAC5C,OAAO;QACL,WAAW,EAAE,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/D,UAAU,EAAE,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC9D,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAEM,KAAK,UAAU,OAAO,CAC3B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,eAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAEM,KAAK,UAAU,OAAO,CAC3B,UAAkB,EAClB,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE7C,wEAAwE;IACxE,MAAM,EAAE,GAAG,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,QAAQ;IACtB,2CAA2C;AAC7C,CAAC"}

package/package.json

@@ -1,10 +1,13 @@
 {
   "name": "@etree/cli",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "private": false,
+  "files": [
+    "dist"
+  ],
   "bin": {
-    "et": "./dist/index.js",
-    "envtree": "./dist/index.js"
+    "et": "dist/index.js",
+    "envtree": "dist/index.js"
   },
   "scripts": {
     "dev": "tsc --watch",
@@ -17,12 +20,14 @@
     "commander": "^13.1.0",
     "conf": "^10.2.0",
     "inquirer": "^8.2.6",
+    "libsodium-wrappers": "^0.8.2",
     "ora": "^5.4.1"
   },
   "devDependencies": {
     "@envtree/eslint-config": "workspace:*",
     "@envtree/typescript-config": "workspace:*",
     "@types/inquirer": "^8.2.10",
+    "@types/libsodium-wrappers": "^0.8.2",
     "@types/node": "^22.15.2",
     "tsx": "^4.19.4",
     "typescript": "5.9.2"

package/eslint.config.mjs

@@ -1,4 +0,0 @@
-import { config } from "@envtree/eslint-config/base";
-
-/** @type {import("eslint").Linter.Config[]} */
-export default config;

package/src/commands/auth.ts

@@ -1,258 +0,0 @@
-import { Command } from "commander";
-import inquirer from "inquirer";
-import chalk from "chalk";
-import ora from "ora";
-import { apiRequest } from "../lib/api";
-import { saveSession, clearSession, getSession } from "../lib/config";
-import { generateKeys, derivePublicKey, shutdown } from "../lib/crypto";
-import { savePrivateKey, hasPrivateKey } from "../lib/key-store";
-
-export function registerAuthCommands(program: Command): void {
-  // ── signup ──
-  program
-    .command("signup")
-    .description("Create a new EnvTree account")
-    .action(async () => {
-      const answers = await inquirer.prompt([
-        { type: "input", name: "email", message: "Email:" },
-        { type: "input", name: "username", message: "Username:" },
-        {
-          type: "password",
-          name: "password",
-          message: "Password:",
-          mask: "*",
-        },
-        {
-          type: "password",
-          name: "confirmPassword",
-          message: "Confirm Password:",
-          mask: "*",
-        },
-      ]);
-
-      if (answers.password !== answers.confirmPassword) {
-        console.log(chalk.red("Passwords do not match"));
-        return;
-      }
-
-      const spinner = ora("Creating account...").start();
-      try {
-        const result = await apiRequest(
-          "POST",
-          "/auth/signup",
-          {
-            email: answers.email,
-            password: answers.password,
-            username: answers.username,
-          },
-          false,
-        );
-
-        if (!result.session) {
-          spinner.succeed(
-            "Account created! Please verify your email, then run: et login",
-          );
-          return;
-        }
-
-        saveSession({
-          access_token: result.session.access_token,
-          refresh_token: result.session.refresh_token,
-          user_id: result.user.id,
-          email: answers.email,
-          username: answers.username,
-        });
-
-        spinner.text = "Generating encryption keys...";
-        const keys = await generateKeys();
-        savePrivateKey(keys.private_key);
-
-        await apiRequest("PUT", "/profile/public-key", {
-          public_key: keys.public_key,
-        });
-
-        spinner.succeed(chalk.green("Account created & keys generated!"));
-        console.log(
-          chalk.dim(`   User: ${answers.username} (${answers.email})`),
-        );
-        console.log(
-          chalk.dim("   Private key saved to ~/.envtree/private_key"),
-        );
-      } catch (err: any) {
-        spinner.fail(chalk.red(`Signup failed: ${err.message}`));
-      } finally {
-        shutdown();
-      }
-    });
-
-  // ── login ──
-  program
-    .command("login")
-    .description("Log in to your EnvTree account")
-    .option("-e, --email <email>", "Email (non-interactive)")
-    .option("-p, --password <password>", "Password (non-interactive)")
-    .action(async (opts: { email?: string; password?: string }) => {
-      let email = opts.email;
-      let password = opts.password;
-
-      // Interactive mode if flags not provided
-      if (!email || !password) {
-        const answers = await inquirer.prompt([
-          ...(!email
-            ? [{ type: "input", name: "email", message: "Email:" }]
-            : []),
-          ...(!password
-            ? [
-                {
-                  type: "password",
-                  name: "password",
-                  message: "Password:",
-                  mask: "*",
-                },
-              ]
-            : []),
-        ]);
-        email = email || answers.email;
-        password = password || answers.password;
-      }
-
-      const spinner = ora("Logging in...").start();
-      try {
-        const result = await apiRequest(
-          "POST",
-          "/auth/login",
-          { email, password },
-          false,
-        );
-
-        saveSession({
-          access_token: result.session.access_token,
-          refresh_token: result.session.refresh_token,
-          user_id: result.user.id,
-          email: result.user.email,
-          username: email!,
-        });
-
-        // Fetch profile to get real username
-        const profileResult = await apiRequest(
-          "GET",
-          "/profile/me",
-          undefined,
-          true,
-        );
-        if (profileResult.profile?.username) {
-          saveSession({
-            access_token: result.session.access_token,
-            refresh_token: result.session.refresh_token,
-            user_id: result.user.id,
-            email: result.user.email,
-            username: profileResult.profile.username,
-          });
-        }
-
-        // Always sync public key with server
-        if (hasPrivateKey()) {
-          // Derive public key from existing private key and upload it
-          spinner.text = "Syncing encryption keys...";
-          const privateKey = require("../lib/key-store").getPrivateKey();
-          const publicKey = await derivePublicKey(privateKey);
-          await apiRequest("PUT", "/profile/public-key", {
-            public_key: publicKey,
-          });
-          spinner.succeed(chalk.green("Logged in!"));
-        } else {
-          // Generate a new keypair
-          spinner.text = "Generating encryption keys...";
-          const keys = await generateKeys();
-          savePrivateKey(keys.private_key);
-
-          await apiRequest("PUT", "/profile/public-key", {
-            public_key: keys.public_key,
-          });
-
-          spinner.succeed(chalk.green("Logged in & keys generated!"));
-          console.log(
-            chalk.dim("   Private key saved to ~/.envtree/private_key"),
-          );
-        }
-
-        console.log(chalk.dim(`   User: ${result.user.email}`));
-      } catch (err: any) {
-        spinner.fail(chalk.red(`Login failed: ${err.message}`));
-      } finally {
-        shutdown();
-      }
-    });
-
-  // ── logout ──
-  program
-    .command("logout")
-    .description("Log out of your EnvTree account")
-    .action(() => {
-      clearSession();
-      console.log(chalk.green("Logged out"));
-    });
-
-  // ── whoami ──
-  program
-    .command("whoami")
-    .description("Show the current logged-in user")
-    .action(async () => {
-      const session = getSession();
-      if (!session) {
-        console.log(chalk.yellow("Not logged in. Run: et login"));
-        return;
-      }
-
-      try {
-        const result = await apiRequest("GET", "/profile/me");
-        console.log(chalk.bold("EnvTree User"));
-        console.log(`   Username:   ${result.profile.username}`);
-        console.log(`   Email:      ${result.profile.email}`);
-        console.log(
-          `   Public Key: ${result.profile.public_key ? result.profile.public_key.substring(0, 20) + "..." : chalk.yellow("not set")}`,
-        );
-      } catch {
-        console.log(chalk.dim(`   Username: ${session.username}`));
-        console.log(chalk.dim(`   Email:    ${session.email}`));
-        console.log(chalk.yellow("   (offline — showing cached info)"));
-      }
-    });
-
-  // ── delete-account ──
-  program
-    .command("delete-account")
-    .description("Permanently delete your EnvTree account")
-    .action(async () => {
-      const session = getSession();
-      if (!session) {
-        console.log(chalk.yellow("Not logged in. Run: et login"));
-        return;
-      }
-
-      const { confirm } = await inquirer.prompt([
-        {
-          type: "confirm",
-          name: "confirm",
-          message: chalk.red(
-            "⚠ This will permanently delete your account and all your wallets. Are you sure?",
-          ),
-          default: false,
-        },
-      ]);
-
-      if (!confirm) {
-        console.log(chalk.dim("Cancelled."));
-        return;
-      }
-
-      const spinner = ora("Deleting account...").start();
-      try {
-        await apiRequest("DELETE", "/auth/account");
-        clearSession();
-        spinner.succeed(chalk.green("Account deleted. Goodbye!"));
-      } catch (err: any) {
-        spinner.fail(chalk.red(`Failed: ${err.message}`));
-      }
-    });
-}

package/src/commands/config.ts

@@ -1,47 +0,0 @@
-import { Command } from "commander";
-import chalk from "chalk";
-import { getConfig, saveConfig } from "../lib/config";
-
-export function registerConfigCommands(program: Command): void {
-  const config = program
-    .command("config")
-    .description("Manage CLI configuration");
-
-  // ── config show ──
-  config
-    .command("show")
-    .description("Display current configuration")
-    .action(() => {
-      const cfg = getConfig();
-      console.log(chalk.bold("\nEnvTree Config"));
-      console.log(`   Server:  ${chalk.cyan(cfg.server_url)}`);
-      console.log(
-        `   Session: ${cfg.session ? chalk.green("active") + chalk.dim(` (${cfg.session.email})`) : chalk.yellow("none")}`,
-      );
-      console.log(
-        chalk.dim(`   Config:  ~/.envtree/config.json`),
-      );
-      console.log(
-        chalk.dim(`   Keys:    ~/.envtree/private_key`),
-      );
-      console.log("");
-    });
-
-  // ── config set ──
-  config
-    .command("set <key> <value>")
-    .description("Set a configuration value (e.g. server URL)")
-    .action((key: string, value: string) => {
-      const cfg = getConfig();
-
-      if (key === "server" || key === "server_url") {
-        cfg.server_url = value;
-        saveConfig(cfg);
-        console.log(chalk.green(`Server URL set to: ${value}`));
-      } else {
-        console.log(
-          chalk.red(`Unknown config key: "${key}". Available: server`),
-        );
-      }
-    });
-}