@eve-horizon/cli 0.2.11 → 0.2.13

package/dist/commands/profile.js

@@ -1,155 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleProfile = handleProfile;
-const context_1 = require("../lib/context");
-const output_1 = require("../lib/output");
-function handleProfile(subcommand, positionals, flags) {
-    const json = Boolean(flags.json);
-    if (flags.global) {
-        throw new Error('Global profiles have been removed. Profiles are repo-local; remove --global.');
-    }
-    switch (subcommand) {
-        case 'list': {
-            const repoProfiles = (0, context_1.loadRepoProfiles)();
-            const profiles = Object.entries(repoProfiles.profiles).map(([name, profile]) => ({
-                name,
-                active: name === repoProfiles.activeProfile,
-                ...profile,
-            }));
-            (0, output_1.outputJson)({ active_profile: repoProfiles.activeProfile ?? null, profiles }, json);
-            return;
-        }
-        case 'show': {
-            const requestedName = positionals[0];
-            const repoProfiles = (0, context_1.loadRepoProfiles)();
-            const name = resolveProfileName(repoProfiles, requestedName);
-            if (!name) {
-                throw new Error('No local profiles configured. Use `eve profile set` to create one.');
-            }
-            const profile = repoProfiles.profiles[name];
-            if (!profile) {
-                throw new Error(`Profile ${name} not found`);
-            }
-            const active = repoProfiles.activeProfile === name;
-            (0, output_1.outputJson)({ name, active, ...profile }, json, `${name} (local)`);
-            return;
-        }
-        case 'use': {
-            const isClear = Boolean(flags.clear);
-            // Handle --clear: remove local profile
-            if (isClear) {
-                const removed = (0, context_1.removeRepoProfile)();
-                if (removed) {
-                    (0, output_1.outputJson)({ cleared: true, path: (0, context_1.getRepoProfilePath)() }, json, `✓ Removed local profile store (${(0, context_1.getRepoProfilePath)()})`);
-                }
-                else {
-                    (0, output_1.outputJson)({ cleared: false }, json, `No local profile to remove`);
-                }
-                return;
-            }
-            const name = positionals[0];
-            if (!name) {
-                throw new Error('Usage: eve profile use <name>');
-            }
-            const repoProfiles = (0, context_1.loadRepoProfiles)();
-            if (!repoProfiles.profiles[name]) {
-                repoProfiles.profiles[name] = {};
-            }
-            repoProfiles.profiles[name] = applyProfileFlags(repoProfiles.profiles[name], flags);
-            repoProfiles.activeProfile = name;
-            (0, context_1.saveRepoProfiles)(repoProfiles);
-            (0, output_1.outputJson)({ active_profile: name, path: (0, context_1.getRepoProfilePath)(), ...repoProfiles.profiles[name] }, json, `✓ Active profile: ${name} (${(0, context_1.getRepoProfilePath)()})`);
-            return;
-        }
-        case 'create': {
-            const name = positionals[0];
-            if (!name) {
-                throw new Error('Usage: eve profile create <name> [--api-url <url> ...]');
-            }
-            const repoProfiles = (0, context_1.loadRepoProfiles)();
-            if (repoProfiles.profiles[name]) {
-                throw new Error(`Profile ${name} already exists`);
-            }
-            repoProfiles.profiles[name] = applyProfileFlags({}, flags);
-            if (!repoProfiles.activeProfile) {
-                repoProfiles.activeProfile = name;
-            }
-            (0, context_1.saveRepoProfiles)(repoProfiles);
-            (0, output_1.outputJson)({ name, ...repoProfiles.profiles[name] }, json, `✓ Profile created: ${name}`);
-            return;
-        }
-        case 'set': {
-            const repoProfiles = (0, context_1.loadRepoProfiles)();
-            const name = resolveProfileName(repoProfiles, positionals[0]) ?? 'default';
-            if (!repoProfiles.profiles[name]) {
-                repoProfiles.profiles[name] = {};
-            }
-            repoProfiles.profiles[name] = applyProfileFlags(repoProfiles.profiles[name], flags);
-            repoProfiles.activeProfile = name;
-            (0, context_1.saveRepoProfiles)(repoProfiles);
-            (0, output_1.outputJson)({ active_profile: name, ...repoProfiles.profiles[name], path: (0, context_1.getRepoProfilePath)() }, json, `✓ Profile set: ${name} (${(0, context_1.getRepoProfilePath)()})`);
-            return;
-        }
-        case 'remove': {
-            const name = positionals[0];
-            if (!name) {
-                throw new Error('Usage: eve profile remove <name>');
-            }
-            const repoProfiles = (0, context_1.loadRepoProfiles)();
-            if (!repoProfiles.profiles[name]) {
-                throw new Error(`Profile ${name} not found`);
-            }
-            delete repoProfiles.profiles[name];
-            if (repoProfiles.activeProfile === name) {
-                const [first] = Object.keys(repoProfiles.profiles);
-                repoProfiles.activeProfile = first;
-            }
-            if (!repoProfiles.activeProfile && Object.keys(repoProfiles.profiles).length === 0) {
-                (0, context_1.removeRepoProfile)();
-                (0, output_1.outputJson)({ removed: name, cleared: true }, json, `✓ Removed profile ${name} (store cleared)`);
-                return;
-            }
-            (0, context_1.saveRepoProfiles)(repoProfiles);
-            (0, output_1.outputJson)({ removed: name, active_profile: repoProfiles.activeProfile ?? null }, json, `✓ Removed profile ${name}`);
-            return;
-        }
-        default:
-            throw new Error('Usage: eve profile <list|show|use|create|set|remove>');
-    }
-}
-function applyProfileFlags(profile, flags) {
-    const updated = { ...profile };
-    if (typeof flags['api-url'] === 'string')
-        updated.api_url = flags['api-url'];
-    if (typeof flags.org === 'string')
-        updated.org_id = flags.org;
-    if (typeof flags.project === 'string')
-        updated.project_id = flags.project;
-    if (typeof flags['supabase-url'] === 'string')
-        updated.supabase_url = flags['supabase-url'];
-    if (typeof flags['supabase-anon-key'] === 'string')
-        updated.supabase_anon_key = flags['supabase-anon-key'];
-    // --harness accepts "harness" or "harness:variant" format
-    if (typeof flags.harness === 'string')
-        updated.default_harness = flags.harness;
-    // Auth defaults
-    if (typeof flags['default-email'] === 'string')
-        updated.default_email = flags['default-email'];
-    if (typeof flags['default-ssh-key'] === 'string')
-        updated.default_ssh_key = flags['default-ssh-key'];
-    return updated;
-}
-function resolveProfileName(repoProfiles, requestedName) {
-    if (requestedName)
-        return requestedName;
-    if (repoProfiles.activeProfile)
-        return repoProfiles.activeProfile;
-    const names = Object.keys(repoProfiles.profiles);
-    if (names.length === 0)
-        return undefined;
-    if (names.length === 1)
-        return names[0];
-    if (names.includes('default'))
-        return 'default';
-    return names[0];
-}

package/dist/commands/project.js

@@ -1,212 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleProject = handleProject;
-const args_1 = require("../lib/args");
-const client_1 = require("../lib/client");
-const output_1 = require("../lib/output");
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const node_child_process_1 = require("node:child_process");
-async function handleProject(subcommand, positionals, flags, context) {
-    const json = Boolean(flags.json);
-    switch (subcommand) {
-        case 'ensure': {
-            const name = typeof flags.name === 'string' ? flags.name : '';
-            const repoUrl = typeof flags['repo-url'] === 'string' ? flags['repo-url'] : '';
-            const branch = typeof flags.branch === 'string' ? flags.branch : 'main';
-            const slug = typeof flags.slug === 'string' ? flags.slug : undefined;
-            const orgIdRaw = typeof flags.org === 'string' ? flags.org : context.orgId;
-            const force = (0, args_1.toBoolean)(flags.force) ?? false;
-            if (!name || !repoUrl) {
-                throw new Error('Usage: eve project ensure --name <name> --repo-url <url> [--branch <branch>] [--slug <slug>]');
-            }
-            if (!orgIdRaw) {
-                throw new Error('Missing org id. Provide --org or set a profile default.');
-            }
-            const body = { org_id: orgIdRaw, name, repo_url: repoUrl, branch, force };
-            if (slug)
-                body.slug = slug;
-            const project = await (0, client_1.requestJson)(context, '/projects/ensure', {
-                method: 'POST',
-                body,
-            });
-            (0, output_1.outputJson)(project, json, `✓ Project ready: ${project.id} (${name})`);
-            return;
-        }
-        case 'list': {
-            const all = Boolean(flags.all);
-            const includeDeletedFlag = flags.include_deleted ?? flags['include-deleted'];
-            // When --all is set, don't require org context
-            const orgId = all
-                ? (typeof flags.org === 'string' ? flags.org : undefined)
-                : (typeof flags.org === 'string' ? flags.org : context.orgId);
-            const query = buildQuery({
-                limit: typeof flags.limit === 'string' ? flags.limit : (all ? '50' : undefined),
-                offset: typeof flags.offset === 'string' ? flags.offset : undefined,
-                include_deleted: (0, args_1.toBoolean)(includeDeletedFlag) ? 'true' : undefined,
-                org_id: orgId,
-                name: typeof flags.name === 'string' ? flags.name : undefined,
-            });
-            const response = await (0, client_1.requestJson)(context, `/projects${query}`);
-            if (json) {
-                (0, output_1.outputJson)(response, json);
-            }
-            else if (all) {
-                console.log('All projects (admin view):');
-                console.log('');
-                (0, output_1.outputJson)(response, json);
-            }
-            else {
-                (0, output_1.outputJson)(response, json);
-            }
-            return;
-        }
-        case 'get': {
-            const projectId = positionals[0];
-            if (!projectId)
-                throw new Error('Usage: eve project get <project_id>');
-            const includeDeletedFlag = flags.include_deleted ?? flags['include-deleted'];
-            const query = buildQuery({
-                include_deleted: (0, args_1.toBoolean)(includeDeletedFlag) ? 'true' : undefined,
-            });
-            const response = await (0, client_1.requestJson)(context, `/projects/${projectId}${query}`);
-            (0, output_1.outputJson)(response, json);
-            return;
-        }
-        case 'update': {
-            const projectId = positionals[0];
-            if (!projectId) {
-                throw new Error('Usage: eve project update <project_id> [--name <name>] [--repo-url <url>]');
-            }
-            const body = {};
-            if (typeof flags.name === 'string')
-                body.name = flags.name;
-            if (typeof flags['repo-url'] === 'string')
-                body.repo_url = flags['repo-url'];
-            if (typeof flags.branch === 'string')
-                body.branch = flags.branch;
-            const deleted = (0, args_1.toBoolean)(flags.deleted);
-            if (deleted !== undefined)
-                body.deleted = deleted;
-            const response = await (0, client_1.requestJson)(context, `/projects/${projectId}`, { method: 'PATCH', body });
-            (0, output_1.outputJson)(response, json);
-            return;
-        }
-        case 'sync': {
-            const dir = typeof flags.dir === 'string' ? flags.dir : process.cwd();
-            const manifestPath = (0, node_path_1.join)(dir, '.eve', 'manifest.yaml');
-            const validateSecretsFlag = flags['validate-secrets'] ?? flags.validate_secrets;
-            const validateSecrets = (0, args_1.toBoolean)(validateSecretsFlag) ?? false;
-            const strict = (0, args_1.toBoolean)(flags.strict) ?? false;
-            // Read manifest file
-            let yaml;
-            try {
-                yaml = (0, node_fs_1.readFileSync)(manifestPath, 'utf-8');
-            }
-            catch (error) {
-                throw new Error(`Failed to read manifest at ${manifestPath}: ${error.message}`);
-            }
-            // Get git info
-            let gitSha;
-            let branch;
-            try {
-                gitSha = (0, node_child_process_1.execSync)('git rev-parse HEAD', { cwd: dir, encoding: 'utf-8' }).trim();
-                branch = (0, node_child_process_1.execSync)('git branch --show-current', { cwd: dir, encoding: 'utf-8' }).trim();
-            }
-            catch (error) {
-                // Git info is optional, continue without it
-                console.warn('Warning: Could not get git info:', error.message);
-            }
-            // Determine project ID
-            const projectIdRaw = typeof flags.project === 'string' ? flags.project : context.projectId;
-            if (!projectIdRaw) {
-                // Try to parse project ID from manifest
-                const projectMatch = yaml.match(/^project:\s*(\S+)/m);
-                if (projectMatch) {
-                    const projectIdFromManifest = projectMatch[1];
-                    const response = await (0, client_1.requestJson)(context, `/projects/${projectIdFromManifest}/manifest`, {
-                        method: 'POST',
-                        body: {
-                            yaml,
-                            git_sha: gitSha,
-                            branch,
-                            validate_secrets: validateSecrets || strict,
-                            strict,
-                        },
-                    });
-                    if (json) {
-                        (0, output_1.outputJson)(response, json);
-                    }
-                    else {
-                        console.log(`✓ Manifest synced to ${projectIdFromManifest}`);
-                        console.log(`  Hash: ${response.manifest_hash.substring(0, 12)}...`);
-                        if (gitSha)
-                            console.log(`  Git SHA: ${gitSha.substring(0, 8)}`);
-                        if (branch)
-                            console.log(`  Branch: ${branch}`);
-                        if (response.parsed_defaults && Object.keys(response.parsed_defaults).length > 0) {
-                            console.log('\nParsed defaults.env:');
-                            Object.entries(response.parsed_defaults).forEach(([key, value]) => {
-                                console.log(`  ${key}: ${JSON.stringify(value)}`);
-                            });
-                        }
-                        if (response.warnings && response.warnings.length > 0) {
-                            console.log('\nWarnings:');
-                            response.warnings.forEach((warning) => {
-                                console.log(`  - ${warning}`);
-                            });
-                        }
-                    }
-                    return;
-                }
-                throw new Error('Missing project id. Provide --project or set a profile default, or add "project: proj_xxx" to manifest.');
-            }
-            const response = await (0, client_1.requestJson)(context, `/projects/${projectIdRaw}/manifest`, {
-                method: 'POST',
-                body: {
-                    yaml,
-                    git_sha: gitSha,
-                    branch,
-                    validate_secrets: validateSecrets || strict,
-                    strict,
-                },
-            });
-            if (json) {
-                (0, output_1.outputJson)(response, json);
-            }
-            else {
-                console.log(`✓ Manifest synced to ${projectIdRaw}`);
-                console.log(`  Hash: ${response.manifest_hash.substring(0, 12)}...`);
-                if (gitSha)
-                    console.log(`  Git SHA: ${gitSha.substring(0, 8)}`);
-                if (branch)
-                    console.log(`  Branch: ${branch}`);
-                if (response.parsed_defaults && Object.keys(response.parsed_defaults).length > 0) {
-                    console.log('\nParsed defaults.env:');
-                    Object.entries(response.parsed_defaults).forEach(([key, value]) => {
-                        console.log(`  ${key}: ${JSON.stringify(value)}`);
-                    });
-                }
-                if (response.warnings && response.warnings.length > 0) {
-                    console.log('\nWarnings:');
-                    response.warnings.forEach((warning) => {
-                        console.log(`  - ${warning}`);
-                    });
-                }
-            }
-            return;
-        }
-        default:
-            throw new Error('Usage: eve project <ensure|list|get|update|sync>');
-    }
-}
-function buildQuery(params) {
-    const search = new URLSearchParams();
-    Object.entries(params).forEach(([key, value]) => {
-        if (value === undefined || value === '')
-            return;
-        search.set(key, String(value));
-    });
-    const query = search.toString();
-    return query ? `?${query}` : '';
-}

package/dist/commands/release.js

@@ -1,69 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleRelease = handleRelease;
-const client_1 = require("../lib/client");
-const output_1 = require("../lib/output");
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-async function handleRelease(subcommand, positionals, flags, context) {
-    const json = Boolean(flags.json);
-    switch (subcommand) {
-        case 'resolve': {
-            const tag = positionals[0];
-            if (!tag) {
-                throw new Error('Usage: eve release resolve <tag> [--project <id>]');
-            }
-            // Determine project ID
-            let projectId = typeof flags.project === 'string' ? flags.project : context.projectId;
-            // If no project ID provided, try to detect from local .eve/manifest.yaml
-            if (!projectId) {
-                const dir = typeof flags.dir === 'string' ? flags.dir : process.cwd();
-                const manifestPath = (0, node_path_1.join)(dir, '.eve', 'manifest.yaml');
-                try {
-                    const yaml = (0, node_fs_1.readFileSync)(manifestPath, 'utf-8');
-                    const projectMatch = yaml.match(/^project:\s*(\S+)/m);
-                    if (projectMatch) {
-                        projectId = projectMatch[1];
-                    }
-                }
-                catch (error) {
-                    // Manifest file not found or not readable, continue without it
-                }
-            }
-            if (!projectId) {
-                throw new Error('Missing project id. Provide --project, set a profile default, or add "project: proj_xxx" to .eve/manifest.yaml');
-            }
-            // Call the API endpoint
-            try {
-                const release = await (0, client_1.requestJson)(context, `/projects/${projectId}/releases/by-tag/${encodeURIComponent(tag)}`);
-                if (json) {
-                    // Output full JSON
-                    (0, output_1.outputJson)(release, json);
-                }
-                else {
-                    // Human-readable format
-                    const displayTag = release.tag || tag;
-                    const displayVersion = release.version || 'N/A';
-                    const shortSha = release.git_sha.substring(0, 8);
-                    const shortHash = release.manifest_hash.substring(0, 12);
-                    console.log(`Release ${displayTag}`);
-                    console.log(`  ID:       ${release.id}`);
-                    console.log(`  SHA:      ${shortSha}...`);
-                    console.log(`  Manifest: ${shortHash}...`);
-                    console.log(`  Version:  ${displayVersion}`);
-                }
-            }
-            catch (error) {
-                // Enhance 404 errors with more context
-                if (error instanceof Error && error.message.includes('HTTP 404')) {
-                    throw new Error(`Release with tag "${tag}" not found for project ${projectId}\n\n` +
-                        `Make sure the release exists and the tag is correct.`);
-                }
-                throw error;
-            }
-            return;
-        }
-        default:
-            throw new Error('Usage: eve release <resolve>');
-    }
-}

package/dist/commands/secrets.js

@@ -1,218 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleSecrets = handleSecrets;
-const node_fs_1 = require("node:fs");
-const client_1 = require("../lib/client");
-const output_1 = require("../lib/output");
-async function handleSecrets(subcommand, positionals, flags, context) {
-    const json = Boolean(flags.json);
-    switch (subcommand) {
-        case 'set': {
-            const scope = resolveScope(flags, context);
-            const key = positionals[0] ?? (typeof flags.key === 'string' ? flags.key : undefined);
-            const value = positionals[1] ?? (typeof flags.value === 'string' ? flags.value : undefined);
-            const type = typeof flags.type === 'string' ? flags.type : undefined;
-            if (!key || !value) {
-                throw new Error('Usage: eve secrets set <key> <value> [--project <id>|--org <id>|--user <id>|--system] [--type <type>]');
-            }
-            const body = { key, value };
-            if (type)
-                body.type = type;
-            const response = await (0, client_1.requestJson)(context, `${scopeBasePath(scope)}`, {
-                method: 'POST',
-                body,
-            });
-            (0, output_1.outputJson)(response, json, `✓ Secret set: ${key}`);
-            return;
-        }
-        case 'list': {
-            const scope = resolveScope(flags, context);
-            const query = buildQuery({
-                limit: typeof flags.limit === 'string' ? flags.limit : undefined,
-                offset: typeof flags.offset === 'string' ? flags.offset : undefined,
-            });
-            const response = await (0, client_1.requestJson)(context, `${scopeBasePath(scope)}${query}`);
-            (0, output_1.outputJson)(response, json);
-            return;
-        }
-        case 'show': {
-            const scope = resolveScope(flags, context);
-            const key = positionals[0] ?? (typeof flags.key === 'string' ? flags.key : undefined);
-            if (!key) {
-                throw new Error('Usage: eve secrets show <key> [--project <id>|--org <id>|--user <id>|--system]');
-            }
-            const response = await (0, client_1.requestJson)(context, `${scopeBasePath(scope)}/${encodeURIComponent(key)}`);
-            (0, output_1.outputJson)(response, json);
-            return;
-        }
-        case 'delete': {
-            const scope = resolveScope(flags, context);
-            const key = positionals[0] ?? (typeof flags.key === 'string' ? flags.key : undefined);
-            if (!key) {
-                throw new Error('Usage: eve secrets delete <key> [--project <id>|--org <id>|--user <id>|--system]');
-            }
-            await (0, client_1.requestJson)(context, `${scopeBasePath(scope)}/${encodeURIComponent(key)}`, { method: 'DELETE' });
-            (0, output_1.outputJson)({ ok: true }, json, `✓ Secret deleted: ${key}`);
-            return;
-        }
-        case 'import': {
-            const scope = resolveScope(flags, context);
-            const filePath = typeof flags.file === 'string' ? flags.file : '.env';
-            const fileContents = (0, node_fs_1.readFileSync)(filePath, 'utf8');
-            const entries = parseEnvFile(fileContents);
-            if (entries.length === 0) {
-                throw new Error(`No entries found in ${filePath}`);
-            }
-            for (const [key, value] of entries) {
-                await (0, client_1.requestJson)(context, `${scopeBasePath(scope)}`, {
-                    method: 'POST',
-                    body: { key, value },
-                });
-            }
-            (0, output_1.outputJson)({ imported: entries.length }, json, `✓ Imported ${entries.length} secrets`);
-            return;
-        }
-        case 'validate': {
-            const projectId = resolveProjectScope(flags, context);
-            const keys = parseKeys(positionals, flags);
-            const body = {};
-            if (keys.length > 0)
-                body.keys = keys;
-            const response = await (0, client_1.requestJson)(context, `/projects/${projectId}/secrets/validate`, {
-                method: 'POST',
-                body,
-            });
-            if (json) {
-                (0, output_1.outputJson)(response, json);
-            }
-            else if (response.missing.length === 0) {
-                console.log('✓ All required secrets are present');
-            }
-            else {
-                console.log('Missing secrets:');
-                response.missing.forEach((item) => {
-                    console.log(`- ${item.key}`);
-                    item.hints.forEach((hint) => console.log(`  ${hint}`));
-                });
-            }
-            return;
-        }
-        case 'ensure': {
-            const projectId = resolveProjectScope(flags, context);
-            const keys = parseKeys(positionals, flags);
-            if (keys.length === 0) {
-                throw new Error('Usage: eve secrets ensure --project <id> --keys <key1,key2>');
-            }
-            const response = await (0, client_1.requestJson)(context, `/projects/${projectId}/secrets/ensure`, {
-                method: 'POST',
-                body: { keys },
-            });
-            (0, output_1.outputJson)(response, json, `✓ Secrets ensured (${response.created.length} created)`);
-            return;
-        }
-        case 'export': {
-            const projectId = resolveProjectScope(flags, context);
-            const keys = parseKeys(positionals, flags);
-            if (keys.length === 0) {
-                throw new Error('Usage: eve secrets export --project <id> --keys <key1,key2>');
-            }
-            const response = await (0, client_1.requestJson)(context, `/projects/${projectId}/secrets/export`, {
-                method: 'POST',
-                body: { keys },
-            });
-            if (json) {
-                (0, output_1.outputJson)(response, json);
-            }
-            else {
-                console.log('Exported secrets (handle carefully):');
-                response.data.forEach((item) => {
-                    console.log(`${item.key}=${item.value}`);
-                });
-            }
-            return;
-        }
-        default:
-            throw new Error('Usage: eve secrets <set|list|show|delete|import|validate|ensure|export>');
-    }
-}
-function resolveScope(flags, context) {
-    // Explicit flags take priority in the order: system > project > org > user
-    const explicitSystem = Boolean(flags.system);
-    const explicitProject = typeof flags.project === 'string' ? flags.project : undefined;
-    const explicitOrg = typeof flags.org === 'string' ? flags.org : undefined;
-    const explicitUser = typeof flags.user === 'string' ? flags.user : undefined;
-    // Check for mutual exclusivity
-    const explicitFlags = [explicitSystem, explicitProject, explicitOrg, explicitUser].filter(Boolean);
-    if (explicitFlags.length > 1) {
-        throw new Error('Cannot specify multiple scope flags. Use only one of: --system, --project, --org, or --user');
-    }
-    // If explicit flags are provided, use them in priority order
-    if (explicitSystem)
-        return { scopeType: 'system', scopeId: 'system' };
-    if (explicitProject)
-        return { scopeType: 'project', scopeId: explicitProject };
-    if (explicitOrg)
-        return { scopeType: 'org', scopeId: explicitOrg };
-    if (explicitUser)
-        return { scopeType: 'user', scopeId: explicitUser };
-    // Fall back to profile defaults
-    if (context.projectId)
-        return { scopeType: 'project', scopeId: context.projectId };
-    if (context.orgId)
-        return { scopeType: 'org', scopeId: context.orgId };
-    throw new Error('Missing scope. Provide --system, --project, --org, or --user (or set profile defaults).');
-}
-function scopeBasePath(scope) {
-    switch (scope.scopeType) {
-        case 'system':
-            return `/system/secrets`;
-        case 'project':
-            return `/projects/${scope.scopeId}/secrets`;
-        case 'org':
-            return `/orgs/${scope.scopeId}/secrets`;
-        case 'user':
-            return `/users/${scope.scopeId}/secrets`;
-    }
-}
-function resolveProjectScope(flags, context) {
-    const scope = resolveScope(flags, context);
-    if (scope.scopeType !== 'project') {
-        throw new Error('This command requires --project (or a project default profile).');
-    }
-    return scope.scopeId;
-}
-function buildQuery(params) {
-    const search = new URLSearchParams();
-    Object.entries(params).forEach(([key, value]) => {
-        if (value === undefined || value === '')
-            return;
-        search.set(key, String(value));
-    });
-    const query = search.toString();
-    return query ? `?${query}` : '';
-}
-function parseEnvFile(contents) {
-    const lines = contents.split(/\r?\n/);
-    const entries = [];
-    for (const line of lines) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith('#'))
-            continue;
-        const eqIndex = trimmed.indexOf('=');
-        if (eqIndex === -1)
-            continue;
-        const key = trimmed.slice(0, eqIndex).trim();
-        const value = trimmed.slice(eqIndex + 1).trim();
-        if (!key)
-            continue;
-        entries.push([key, value]);
-    }
-    return entries;
-}
-function parseKeys(positionals, flags) {
-    const positionalKeys = positionals.filter((value) => typeof value === 'string' && value.length > 0);
-    const flagKeys = typeof flags.keys === 'string'
-        ? flags.keys.split(',').map((value) => value.trim()).filter(Boolean)
-        : [];
-    return Array.from(new Set([...positionalKeys, ...flagKeys]));
-}