@etree/cli 2.0.1

package/dist/commands/member.js

@@ -0,0 +1,119 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerMemberCommands = registerMemberCommands;
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../lib/api");
+/**
+ * Helper: find a wallet ID by name from the user's wallets.
+ */
+async function findWalletId(name) {
+    const result = await api_1.api.get("/wallets");
+    const owned = result.owned.find((w) => w.name === name);
+    if (owned)
+        return owned.id;
+    const shared = result.shared.find((w) => w.name === name);
+    if (shared)
+        return shared.id;
+    return null;
+}
+function registerMemberCommands(program) {
+    const member = program.command("member").description("Manage wallet members");
+    // ── member add ──
+    member
+        .command("add <wallet> <username>")
+        .description("Add a member to a wallet")
+        .option("-r, --role <role>", "Role: admin, read, write", "read")
+        .action(async (walletName, username, opts) => {
+        const spinner = (0, ora_1.default)("Adding member...").start();
+        try {
+            const walletId = await findWalletId(walletName);
+            if (!walletId) {
+                spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+                return;
+            }
+            const result = await api_1.api.post(`/wallets/${walletId}/members`, {
+                username,
+                role: opts.role,
+            });
+            spinner.succeed(chalk_1.default.green(`Added "${username}" as ${opts.role} to "${walletName}"`));
+            if (result.public_key) {
+                console.log(chalk_1.default.dim(`   Their public key: ${result.public_key.substring(0, 20)}...`));
+                console.log(chalk_1.default.yellow("   ⚠ Remember to re-encrypt secrets for this user:"));
+                console.log(chalk_1.default.yellow(`     envtree secret share ${walletName}`));
+            }
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+    // ── member list ──
+    member
+        .command("list <wallet>")
+        .alias("ls")
+        .description("List members of a wallet")
+        .action(async (walletName) => {
+        const spinner = (0, ora_1.default)("Fetching members...").start();
+        try {
+            const walletId = await findWalletId(walletName);
+            if (!walletId) {
+                spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+                return;
+            }
+            const result = await api_1.api.get(`/wallets/${walletId}/members`);
+            spinner.stop();
+            console.log(chalk_1.default.bold(`\nMembers of "${walletName}"`));
+            // Owner
+            if (result.owner) {
+                console.log(`   ${chalk_1.default.cyan(result.owner.username)} ${chalk_1.default.dim(`(${result.owner.email})`)} ${chalk_1.default.green("[owner]")}`);
+            }
+            // Members
+            if (result.members && result.members.length > 0) {
+                for (const m of result.members) {
+                    const roleColor = m.role === "admin"
+                        ? chalk_1.default.magenta
+                        : m.role === "write"
+                            ? chalk_1.default.blue
+                            : chalk_1.default.dim;
+                    console.log(`   ${chalk_1.default.cyan(m.user.username)} ${chalk_1.default.dim(`(${m.user.email})`)} ${roleColor(`[${m.role}]`)}`);
+                }
+            }
+            else {
+                console.log(chalk_1.default.dim("   No additional members"));
+            }
+            console.log("");
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+    // ── member remove ──
+    member
+        .command("remove <wallet> <username>")
+        .description("Remove a member from a wallet")
+        .action(async (walletName, username) => {
+        const spinner = (0, ora_1.default)("Removing member...").start();
+        try {
+            const walletId = await findWalletId(walletName);
+            if (!walletId) {
+                spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+                return;
+            }
+            // Look up user ID by username
+            const profileResult = await api_1.api.get(`/profile/${username}`);
+            if (!profileResult.profile) {
+                spinner.fail(chalk_1.default.red(`User "${username}" not found`));
+                return;
+            }
+            await api_1.api.delete(`/wallets/${walletId}/members/${profileResult.profile.id}`);
+            spinner.succeed(chalk_1.default.green(`Removed "${username}" from "${walletName}"`));
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+}
+//# sourceMappingURL=member.js.map

package/dist/commands/member.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member.js","sourceRoot":"","sources":["../../src/commands/member.ts"],"names":[],"mappings":";;;;;AAiBA,wDAgIC;AAhJD,kDAA0B;AAC1B,8CAAsB;AACtB,oCAAiC;AAEjC;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAE9E,mBAAmB;IACnB,MAAM;SACH,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,CAAC;SAC/D,MAAM,CACL,KAAK,EAAE,UAAkB,EAAE,QAAgB,EAAE,IAAsB,EAAE,EAAE;QACrE,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,IAAI,CAAC,YAAY,QAAQ,UAAU,EAAE;gBAC5D,QAAQ;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CACT,UAAU,QAAQ,QAAQ,IAAI,CAAC,IAAI,QAAQ,UAAU,GAAG,CACzD,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CACP,wBAAwB,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAChE,CACF,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,oDAAoD,CACrD,CACF,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CAAC,6BAA6B,UAAU,EAAE,CAAC,CACxD,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CACF,CAAC;IAEJ,oBAAoB;IACpB,MAAM;SACH,OAAO,CAAC,eAAe,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,UAAU,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,GAAG,CAAC,CAAC,CAAC;YAExD,QAAQ;YACR,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CACT,MAAM,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,eAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAC5G,CAAC;YACJ,CAAC;YAED,UAAU;YACV,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC/B,MAAM,SAAS,GACb,CAAC,CAAC,IAAI,KAAK,OAAO;wBAChB,CAAC,CAAC,eAAK,CAAC,OAAO;wBACf,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO;4BAClB,CAAC,CAAC,eAAK,CAAC,IAAI;4BACZ,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC;oBAClB,OAAO,CAAC,GAAG,CACT,MAAM,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAClG,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,sBAAsB;IACtB,MAAM;SACH,OAAO,CAAC,4BAA4B,CAAC;SACrC,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,QAAgB,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,8BAA8B;YAC9B,MAAM,aAAa,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,QAAQ,aAAa,CAAC,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,MAAM,SAAG,CAAC,MAAM,CACd,YAAY,QAAQ,YAAY,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,CAC3D,CAAC;YACF,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CAAC,YAAY,QAAQ,WAAW,UAAU,GAAG,CAAC,CAC1D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/secret.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "commander";
+/**
+ * Shared logic for pushing a secret (used by `secret set` and top-level `push`).
+ */
+export declare function pushSecret(walletName: string, keyName: string, value: string): Promise<void>;
+/**
+ * Shared logic for pulling secrets (used by `secret pull` and top-level `pull`).
+ */
+export declare function pullSecrets(walletName: string, opts: {
+    output?: string;
+    sync?: boolean;
+}): Promise<void>;
+export declare function registerSecretCommands(program: Command): void;

package/dist/commands/secret.js

@@ -0,0 +1,307 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pushSecret = pushSecret;
+exports.pullSecrets = pullSecrets;
+exports.registerSecretCommands = registerSecretCommands;
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../lib/api");
+const crypto_1 = require("../lib/crypto");
+const key_store_1 = require("../lib/key-store");
+const env_manager_1 = require("../lib/env-manager");
+/**
+ * Helper: find a wallet ID by name.
+ */
+async function findWalletId(name) {
+    const result = await api_1.api.get("/wallets");
+    const owned = result.owned.find((w) => w.name === name);
+    if (owned)
+        return owned.id;
+    const shared = result.shared.find((w) => w.name === name);
+    if (shared)
+        return shared.id;
+    return null;
+}
+/**
+ * Get all public keys of wallet members (owner + members).
+ */
+async function getWalletPublicKeys(walletId) {
+    const result = await api_1.api.get(`/wallets/${walletId}/members`);
+    const keys = [];
+    if (result.owner?.public_key) {
+        keys.push(result.owner.public_key);
+    }
+    if (result.members) {
+        for (const m of result.members) {
+            if (m.user?.public_key) {
+                keys.push(m.user.public_key);
+            }
+        }
+    }
+    return keys;
+}
+/**
+ * Shared logic for pushing a secret (used by `secret set` and top-level `push`).
+ */
+async function pushSecret(walletName, keyName, value) {
+    const spinner = (0, ora_1.default)("Encrypting and saving secret...").start();
+    try {
+        const walletId = await findWalletId(walletName);
+        if (!walletId) {
+            spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+            return;
+        }
+        spinner.text = "Fetching member public keys...";
+        const publicKeys = await getWalletPublicKeys(walletId);
+        if (publicKeys.length === 0) {
+            spinner.fail(chalk_1.default.red("No members with public keys found"));
+            return;
+        }
+        spinner.text = `Encrypting for ${publicKeys.length} member(s)...`;
+        const secrets = [];
+        for (const pk of publicKeys) {
+            const ciphertext = await (0, crypto_1.encrypt)(value, pk);
+            secrets.push({
+                key_name: keyName,
+                encrypted_value: ciphertext,
+                encrypted_for: pk,
+            });
+        }
+        spinner.text = "Uploading encrypted secrets...";
+        await api_1.api.post(`/wallets/${walletId}/secrets`, { secrets });
+        spinner.succeed(chalk_1.default.green(`Secret "${keyName}" saved (encrypted for ${publicKeys.length} member(s))`));
+    }
+    catch (err) {
+        spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+    }
+    finally {
+        (0, crypto_1.shutdown)();
+    }
+}
+/**
+ * Shared logic for pulling secrets (used by `secret pull` and top-level `pull`).
+ */
+async function pullSecrets(walletName, opts) {
+    const privateKey = (0, key_store_1.requirePrivateKey)();
+    const spinner = (0, ora_1.default)("Pulling secrets...").start();
+    try {
+        const walletId = await findWalletId(walletName);
+        if (!walletId) {
+            spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+            return;
+        }
+        const result = await api_1.api.get(`/wallets/${walletId}/secrets`);
+        if (result.secrets.length === 0) {
+            spinner.warn(chalk_1.default.yellow(`No secrets found in wallet "${walletName}"`));
+            return;
+        }
+        spinner.text = `Decrypting ${result.secrets.length} secret(s)...`;
+        const lines = [];
+        lines.push(`# EnvTree — ${walletName}`);
+        lines.push(`# Generated at ${new Date().toISOString()}`);
+        lines.push("");
+        const decrypted = [];
+        for (const secret of result.secrets) {
+            try {
+                const plaintext = await (0, crypto_1.decrypt)(secret.encrypted_value, privateKey);
+                lines.push(`${secret.key_name}=${plaintext}`);
+                decrypted.push({ key: secret.key_name, value: plaintext });
+            }
+            catch {
+                lines.push(`# FAILED TO DECRYPT: ${secret.key_name}`);
+            }
+        }
+        const outputStr = lines.join("\n") + "\n";
+        if (opts.sync) {
+            // Sync directly into the local .env
+            spinner.text = "Syncing secrets to .env...";
+            for (const { key, value } of decrypted) {
+                (0, env_manager_1.updateEnvFile)(key, value);
+            }
+            (0, env_manager_1.ensureGitIgnore)(".env");
+            spinner.succeed(chalk_1.default.green(`${decrypted.length} secret(s) synced to .env`));
+        }
+        else if (opts.output) {
+            const fs = require("fs");
+            fs.writeFileSync(opts.output, outputStr);
+            spinner.succeed(chalk_1.default.green(`${result.secrets.length} secret(s) written to ${opts.output}`));
+        }
+        else {
+            spinner.stop();
+            console.log(outputStr);
+        }
+    }
+    catch (err) {
+        spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+    }
+    finally {
+        (0, crypto_1.shutdown)();
+    }
+}
+function registerSecretCommands(program) {
+    const secret = program
+        .command("secret")
+        .description("Manage encrypted secrets");
+    // ── secret set ──
+    secret
+        .command("set <wallet> <key> <value>")
+        .description("Encrypt & store a secret for all wallet members")
+        .action(pushSecret);
+    // ── secret update ──
+    secret
+        .command("update <wallet> <key> <value>")
+        .description("Update an existing secret's value (re-encrypts for all members)")
+        .action(pushSecret);
+    // ── secret get ──
+    secret
+        .command("get <wallet> <key>")
+        .description("Decrypt and display a specific secret")
+        .option("-s, --save", "Save the value to your local .env file")
+        .action(async (walletName, keyName, opts) => {
+        const privateKey = (0, key_store_1.requirePrivateKey)();
+        const spinner = (0, ora_1.default)("Fetching and decrypting...").start();
+        try {
+            const walletId = await findWalletId(walletName);
+            if (!walletId) {
+                spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+                return;
+            }
+            const result = await api_1.api.get(`/wallets/${walletId}/secrets`);
+            const secret = result.secrets.find((s) => s.key_name === keyName);
+            if (!secret) {
+                spinner.fail(chalk_1.default.red(`Secret "${keyName}" not found in wallet "${walletName}"`));
+                return;
+            }
+            spinner.text = "Decrypting...";
+            const plaintext = await (0, crypto_1.decrypt)(secret.encrypted_value, privateKey);
+            if (opts.save) {
+                spinner.text = "Saving to .env...";
+                (0, env_manager_1.updateEnvFile)(keyName, plaintext);
+                (0, env_manager_1.ensureGitIgnore)(".env");
+                spinner.succeed(chalk_1.default.green(`Secret "${keyName}" saved to .env`));
+            }
+            else {
+                spinner.stop();
+                console.log(`${chalk_1.default.cyan(keyName)}=${plaintext}`);
+            }
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+        finally {
+            (0, crypto_1.shutdown)();
+        }
+    });
+    // ── secret list ──
+    secret
+        .command("list <wallet>")
+        .alias("ls")
+        .description("List all secret keys in a wallet")
+        .action(async (walletName) => {
+        const spinner = (0, ora_1.default)("Fetching secrets...").start();
+        try {
+            const walletId = await findWalletId(walletName);
+            if (!walletId) {
+                spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+                return;
+            }
+            const result = await api_1.api.get(`/wallets/${walletId}/secrets/all`);
+            spinner.stop();
+            if (result.keys.length === 0) {
+                console.log(chalk_1.default.yellow(`No secrets in wallet "${walletName}"`));
+                return;
+            }
+            console.log(chalk_1.default.bold(`\nSecrets in "${walletName}"`));
+            for (const key of result.keys) {
+                console.log(`   ${chalk_1.default.cyan(key)}`);
+            }
+            console.log(chalk_1.default.dim(`\n   ${result.keys.length} secret(s) total\n`));
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+    // ── secret pull ──
+    secret
+        .command("pull <wallet>")
+        .description("Pull and decrypt all secrets")
+        .option("-o, --output <file>", "Write to a file instead of stdout")
+        .option("--sync", "Sync all secrets directly to your local .env")
+        .action(async (walletName, opts) => {
+        await pullSecrets(walletName, opts);
+    });
+    // ── secret delete ──
+    secret
+        .command("delete <wallet> <key>")
+        .alias("rm")
+        .description("Delete a secret from a wallet")
+        .action(async (walletName, keyName) => {
+        const spinner = (0, ora_1.default)("Deleting secret...").start();
+        try {
+            const walletId = await findWalletId(walletName);
+            if (!walletId) {
+                spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+                return;
+            }
+            const result = await api_1.api.get(`/wallets/${walletId}/secrets`);
+            const secret = result.secrets.find((s) => s.key_name === keyName);
+            if (!secret) {
+                spinner.fail(chalk_1.default.red(`Secret "${keyName}" not found`));
+                return;
+            }
+            await api_1.api.delete(`/wallets/${walletId}/secrets/${secret.id}`);
+            spinner.succeed(chalk_1.default.green(`Secret "${keyName}" deleted from "${walletName}"`));
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+    // ── secret share ──
+    secret
+        .command("share <wallet>")
+        .description("Re-encrypt all secrets for all current wallet members")
+        .action(async (walletName) => {
+        const privateKey = (0, key_store_1.requirePrivateKey)();
+        const spinner = (0, ora_1.default)("Re-encrypting secrets for all members...").start();
+        try {
+            const walletId = await findWalletId(walletName);
+            if (!walletId) {
+                spinner.fail(chalk_1.default.red(`Wallet "${walletName}" not found`));
+                return;
+            }
+            const mySecrets = await api_1.api.get(`/wallets/${walletId}/secrets`);
+            if (mySecrets.secrets.length === 0) {
+                spinner.warn(chalk_1.default.yellow("No secrets to share"));
+                return;
+            }
+            const publicKeys = await getWalletPublicKeys(walletId);
+            spinner.text = `Re-encrypting ${mySecrets.secrets.length} secret(s) for ${publicKeys.length} member(s)...`;
+            const allSecrets = [];
+            for (const secret of mySecrets.secrets) {
+                const plaintext = await (0, crypto_1.decrypt)(secret.encrypted_value, privateKey);
+                for (const pk of publicKeys) {
+                    const ciphertext = await (0, crypto_1.encrypt)(plaintext, pk);
+                    allSecrets.push({
+                        key_name: secret.key_name,
+                        encrypted_value: ciphertext,
+                        encrypted_for: pk,
+                    });
+                }
+            }
+            await api_1.api.post(`/wallets/${walletId}/secrets`, {
+                secrets: allSecrets,
+            });
+            spinner.succeed(chalk_1.default.green(`${mySecrets.secrets.length} secret(s) re-encrypted for ${publicKeys.length} member(s)`));
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+        finally {
+            (0, crypto_1.shutdown)();
+        }
+    });
+}
+//# sourceMappingURL=secret.js.map

package/dist/commands/secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.js","sourceRoot":"","sources":["../../src/commands/secret.ts"],"names":[],"mappings":";;;;;AA6CA,gCA6CC;AAKD,kCAqEC;AAED,wDAsNC;AA3XD,kDAA0B;AAC1B,8CAAsB;AACtB,oCAAiC;AACjC,0CAA2D;AAC3D,gDAAqD;AACrD,oDAAoE;AAEpE;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,UAAU,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,IAAI,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,OAAe,EACf,KAAa;IAEb,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,iCAAiC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAEvD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,kBAAkB,UAAU,CAAC,MAAM,eAAe,CAAC;QAClE,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,IAAA,gBAAO,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,eAAe,EAAE,UAAU;gBAC3B,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAChD,MAAM,SAAG,CAAC,IAAI,CAAC,YAAY,QAAQ,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAE5D,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CACT,WAAW,OAAO,0BAA0B,UAAU,CAAC,MAAM,aAAa,CAC3E,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,IAAA,iBAAQ,GAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,IAAyC;IAEzC,MAAM,UAAU,GAAG,IAAA,6BAAiB,GAAE,CAAC;IACvC,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,UAAU,CAAC,CAAC;QAE7D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,MAAM,CAAC,+BAA+B,UAAU,GAAG,CAAC,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,cAAc,MAAM,CAAC,OAAO,CAAC,MAAM,eAAe,CAAC;QAElE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,MAAM,SAAS,GAAqC,EAAE,CAAC;QACvD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAA,gBAAO,EAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBACpE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC9C,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAE1C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,oCAAoC;YACpC,OAAO,CAAC,IAAI,GAAG,4BAA4B,CAAC;YAC5C,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,SAAS,EAAE,CAAC;gBACvC,IAAA,2BAAa,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,IAAA,6BAAe,EAAC,MAAM,CAAC,CAAC;YACxB,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CACT,GAAG,SAAS,CAAC,MAAM,2BAA2B,CAC/C,CACF,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YACzB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzC,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CACT,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,yBAAyB,IAAI,CAAC,MAAM,EAAE,CAC/D,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,IAAA,iBAAQ,GAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAE3C,mBAAmB;IACnB,MAAM;SACH,OAAO,CAAC,4BAA4B,CAAC;SACrC,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtB,sBAAsB;IACtB,MAAM;SACH,OAAO,CAAC,+BAA+B,CAAC;SACxC,WAAW,CAAC,iEAAiE,CAAC;SAC9E,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtB,mBAAmB;IACnB,MAAM;SACH,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,YAAY,EAAE,wCAAwC,CAAC;SAC9D,MAAM,CACL,KAAK,EACH,UAAkB,EAClB,OAAe,EACf,IAAwB,EACxB,EAAE;QACF,MAAM,UAAU,GAAG,IAAA,6BAAiB,GAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,UAAU,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAChC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CACnC,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,GAAG,CACP,WAAW,OAAO,0BAA0B,UAAU,GAAG,CAC1D,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,OAAO,CAAC,IAAI,GAAG,eAAe,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,IAAA,gBAAO,EAC7B,MAAM,CAAC,eAAe,EACtB,UAAU,CACX,CAAC;YAEF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,GAAG,mBAAmB,CAAC;gBACnC,IAAA,2BAAa,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAClC,IAAA,6BAAe,EAAC,MAAM,CAAC,CAAC;gBACxB,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CAAC,WAAW,OAAO,iBAAiB,CAAC,CACjD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,IAAA,iBAAQ,GAAE,CAAC;QACb,CAAC;IACH,CAAC,CACF,CAAC;IAEJ,oBAAoB;IACpB,MAAM;SACH,OAAO,CAAC,eAAe,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,cAAc,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yBAAyB,UAAU,GAAG,CAAC,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,GAAG,CAAC,CAAC,CAAC;YACxD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,MAAM,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,oBAAoB;IACpB,MAAM;SACH,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,qBAAqB,EAAE,mCAAmC,CAAC;SAClE,MAAM,CAAC,QAAQ,EAAE,8CAA8C,CAAC;SAChE,MAAM,CACL,KAAK,EACH,UAAkB,EAClB,IAAyC,EACzC,EAAE;QACF,MAAM,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC,CACF,CAAC;IAEJ,sBAAsB;IACtB,MAAM;SACH,OAAO,CAAC,uBAAuB,CAAC;SAChC,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,OAAe,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,UAAU,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAChC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CACnC,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,OAAO,aAAa,CAAC,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YAED,MAAM,SAAG,CAAC,MAAM,CAAC,YAAY,QAAQ,YAAY,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CAAC,WAAW,OAAO,mBAAmB,UAAU,GAAG,CAAC,CAChE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,qBAAqB;IACrB,MAAM;SACH,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;QACnC,MAAM,UAAU,GAAG,IAAA,6BAAiB,GAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAA,aAAG,EACjB,0CAA0C,CAC3C,CAAC,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,YAAY,QAAQ,UAAU,CAAC,CAAC;YAChE,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAEvD,OAAO,CAAC,IAAI,GAAG,iBAAiB,SAAS,CAAC,OAAO,CAAC,MAAM,kBAAkB,UAAU,CAAC,MAAM,eAAe,CAAC;YAE3G,MAAM,UAAU,GAAG,EAAE,CAAC;YACtB,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvC,MAAM,SAAS,GAAG,MAAM,IAAA,gBAAO,EAC7B,MAAM,CAAC,eAAe,EACtB,UAAU,CACX,CAAC;gBAEF,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;oBAC5B,MAAM,UAAU,GAAG,MAAM,IAAA,gBAAO,EAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAChD,UAAU,CAAC,IAAI,CAAC;wBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,eAAe,EAAE,UAAU;wBAC3B,aAAa,EAAE,EAAE;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,SAAG,CAAC,IAAI,CAAC,YAAY,QAAQ,UAAU,EAAE;gBAC7C,OAAO,EAAE,UAAU;aACpB,CAAC,CAAC;YAEH,OAAO,CAAC,OAAO,CACb,eAAK,CAAC,KAAK,CACT,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,+BAA+B,UAAU,CAAC,MAAM,YAAY,CACxF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,IAAA,iBAAQ,GAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/shortcuts.d.ts

@@ -0,0 +1,7 @@
+import { Command } from "commander";
+/**
+ * Register top-level shortcut commands:
+ *   et push <wallet> <key> <value>  →  secret set
+ *   et pull <wallet>                →  secret pull --sync
+ */
+export declare function registerShortcuts(program: Command): void;

package/dist/commands/shortcuts.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerShortcuts = registerShortcuts;
+const secret_1 = require("./secret");
+/**
+ * Register top-level shortcut commands:
+ *   et push <wallet> <key> <value>  →  secret set
+ *   et pull <wallet>                →  secret pull --sync
+ */
+function registerShortcuts(program) {
+    // ── et push ──
+    program
+        .command("push <wallet> <key> <value>")
+        .description("Shortcut: Encrypt & store a secret (same as: secret set)")
+        .action(secret_1.pushSecret);
+    // ── et pull ──
+    program
+        .command("pull <wallet>")
+        .description("Shortcut: Sync all secrets to local .env (same as: secret pull --sync)")
+        .option("-o, --output <file>", "Write to a file instead of syncing to .env")
+        .action(async (walletName, opts) => {
+        // Default behavior: --sync (write to .env)
+        await (0, secret_1.pullSecrets)(walletName, { sync: !opts.output, output: opts.output });
+    });
+}
+//# sourceMappingURL=shortcuts.js.map

package/dist/commands/shortcuts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortcuts.js","sourceRoot":"","sources":["../../src/commands/shortcuts.ts"],"names":[],"mappings":";;AAQA,8CAgBC;AAvBD,qCAAmD;AAEnD;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,OAAgB;IAChD,gBAAgB;IAChB,OAAO;SACJ,OAAO,CAAC,6BAA6B,CAAC;SACtC,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,mBAAU,CAAC,CAAC;IAEtB,gBAAgB;IAChB,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,wEAAwE,CAAC;SACrF,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,CAAC;SAC3E,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,IAAyB,EAAE,EAAE;QAC9D,2CAA2C;QAC3C,MAAM,IAAA,oBAAW,EAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/wallet.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare function registerWalletCommands(program: Command): void;

package/dist/commands/wallet.js

@@ -0,0 +1,88 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWalletCommands = registerWalletCommands;
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const api_1 = require("../lib/api");
+function registerWalletCommands(program) {
+    const wallet = program.command("wallet").description("Manage key wallets");
+    // ── wallet create ──
+    wallet
+        .command("create <name>")
+        .description("Create a new key wallet")
+        .option("-d, --description <desc>", "Wallet description")
+        .action(async (name, opts) => {
+        const spinner = (0, ora_1.default)("Creating wallet...").start();
+        try {
+            const result = await api_1.api.post("/wallets", {
+                name,
+                description: opts.description,
+            });
+            spinner.succeed(chalk_1.default.green(`Wallet "${name}" created`));
+            console.log(chalk_1.default.dim(`   ID: ${result.wallet.id}`));
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+    // ── wallet list ──
+    wallet
+        .command("list")
+        .alias("ls")
+        .description("List all your wallets")
+        .action(async () => {
+        const spinner = (0, ora_1.default)("Fetching wallets...").start();
+        try {
+            const result = await api_1.api.get("/wallets");
+            spinner.stop();
+            if (result.owned.length === 0 && result.shared.length === 0) {
+                console.log(chalk_1.default.yellow("No wallets found. Create one with: envtree wallet create <name>"));
+                return;
+            }
+            if (result.owned.length > 0) {
+                console.log(chalk_1.default.bold("\nOwned Wallets"));
+                for (const w of result.owned) {
+                    console.log(`   ${chalk_1.default.cyan(w.name)} ${chalk_1.default.dim(`(${w.id.substring(0, 8)}...)`)}`);
+                    if (w.description)
+                        console.log(`      ${chalk_1.default.dim(w.description)}`);
+                }
+            }
+            if (result.shared.length > 0) {
+                console.log(chalk_1.default.bold("\nShared Wallets"));
+                for (const w of result.shared) {
+                    console.log(`   ${chalk_1.default.cyan(w.name)} ${chalk_1.default.dim(`[${w.role}]`)} ${chalk_1.default.dim(`(${w.id?.substring(0, 8)}...)`)}`);
+                }
+            }
+            console.log("");
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+    // ── wallet delete ──
+    wallet
+        .command("delete <name>")
+        .description("Delete a wallet (owner only)")
+        .action(async (name) => {
+        const spinner = (0, ora_1.default)("Finding wallet...").start();
+        try {
+            // Find wallet by name
+            const listResult = await api_1.api.get("/wallets");
+            const target = listResult.owned.find((w) => w.name === name);
+            if (!target) {
+                spinner.fail(chalk_1.default.red(`Wallet "${name}" not found or you are not the owner`));
+                return;
+            }
+            spinner.text = "Deleting wallet...";
+            await api_1.api.delete(`/wallets/${target.id}`);
+            spinner.succeed(chalk_1.default.green(`Wallet "${name}" deleted`));
+        }
+        catch (err) {
+            spinner.fail(chalk_1.default.red(`Failed: ${err.message}`));
+        }
+    });
+}
+//# sourceMappingURL=wallet.js.map

package/dist/commands/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/commands/wallet.ts"],"names":[],"mappings":";;;;;AAKA,wDA2FC;AA/FD,kDAA0B;AAC1B,8CAAsB;AACtB,oCAAiC;AAEjC,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAE3E,sBAAsB;IACtB,MAAM;SACH,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,0BAA0B,EAAE,oBAAoB,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAA8B,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,IAAI,CAAC,UAAU,EAAE;gBACxC,IAAI;gBACJ,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,eAAK,CAAC,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,oBAAoB;IACpB,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,uBAAuB,CAAC;SACpC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5D,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,iEAAiE,CAClE,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC7B,OAAO,CAAC,GAAG,CACT,MAAM,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;oBACF,IAAI,CAAC,CAAC,WAAW;wBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,eAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC5C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC9B,OAAO,CAAC,GAAG,CACT,MAAM,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CACrG,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,sBAAsB;IACtB,MAAM;SACH,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,UAAU,GAAG,MAAM,SAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAElE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,GAAG,CAAC,WAAW,IAAI,sCAAsC,CAAC,CACjE,CAAC;gBACF,OAAO;YACT,CAAC;YAED,OAAO,CAAC,IAAI,GAAG,oBAAoB,CAAC;YACpC,MAAM,SAAG,CAAC,MAAM,CAAC,YAAY,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,OAAO,CAAC,eAAK,CAAC,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const auth_1 = require("./commands/auth");
+const wallet_1 = require("./commands/wallet");
+const member_1 = require("./commands/member");
+const secret_1 = require("./commands/secret");
+const init_1 = require("./commands/init");
+const config_1 = require("./commands/config");
+const shortcuts_1 = require("./commands/shortcuts");
+const program = new commander_1.Command();
+program
+    .name("et")
+    .description("EnvTree — Securely manage and share environment variables")
+    .version("1.0.0")
+    .addHelpText("after", `
+Quick Start:
+  $ et init                              First-time setup (signup/login)
+  $ et push <wallet> <key> <value>       Encrypt & store a secret
+  $ et pull <wallet>                     Sync all secrets to local .env
+  $ et whoami                            Check current user
+
+Examples:
+  $ et init
+  $ et push production DB_URL "postgres://..."
+  $ et pull production
+  $ et pull production -o .env.production
+  $ et secret list production
+  $ et member add production alice --role write
+`);
+// Core commands
+(0, auth_1.registerAuthCommands)(program);
+(0, init_1.registerInitCommand)(program);
+(0, config_1.registerConfigCommands)(program);
+// Resource commands
+(0, wallet_1.registerWalletCommands)(program);
+(0, member_1.registerMemberCommands)(program);
+(0, secret_1.registerSecretCommands)(program);
+// Top-level shortcuts
+(0, shortcuts_1.registerShortcuts)(program);
+program.parse(process.argv);
+//# sourceMappingURL=index.js.map