@initx-plugin/env 0.1.4 → 0.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +31 -2
- package/dist/index.mjs +20 -23
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -106,7 +106,7 @@ Legacy flat config remains GitHub config; its token is accepted only on the defa
|
|
|
106
106
|
| `initx env run <store> -- <command> [...args]` | Inject a store directly into one child process and return its exit status |
|
|
107
107
|
| `initx env apply <store> --repo o/r` | Write a store into a repo's GitHub Actions secrets |
|
|
108
108
|
|
|
109
|
-
Command failures print only the error message
|
|
109
|
+
Command failures print only the error message through `logger.error` and exit with code 1, without a stack
|
|
110
110
|
trace or minified source dump. A failed connectivity check in `env-config status` also exits
|
|
111
111
|
with code 1. `env run` continues to forward the child's own exit status, signals and output.
|
|
112
112
|
Terminal messages use the existing utils color builders: errors are red, successful changes
|
|
@@ -176,7 +176,7 @@ tests exercise the real direct-child termination and listener cleanup by trigger
|
|
|
176
176
|
signal event over IPC; interactive console Ctrl+C still needs a manual console check.
|
|
177
177
|
|
|
178
178
|
`run` writes no `.env`, `$GITHUB_ENV`, dotenv artifact or secret cache, and emits no GitHub masking
|
|
179
|
-
protocol. Its own diagnostics
|
|
179
|
+
protocol. Its own diagnostics use the utils logger without values, tokens, complete response bodies or
|
|
180
180
|
command argument lists. **Child output is inherited without masking**: a script can still print
|
|
181
181
|
secrets. The parent environment, including inherited GitHub tokens, is retained. This is process
|
|
182
182
|
injection for trusted scripts and stores, not an isolation sandbox or encrypted secret manager.
|
|
@@ -363,6 +363,35 @@ pnpm lint
|
|
|
363
363
|
pnpm typecheck
|
|
364
364
|
```
|
|
365
365
|
|
|
366
|
+
To debug a GitLab request with an existing local initx installation, run `pnpm stub` and
|
|
367
|
+
`ix plugin add .` in this plugin directory. This links the plugin, without installing the CLI
|
|
368
|
+
in the project. Leave stub mode enabled while diagnosing; source changes then take effect directly.
|
|
369
|
+
The switch comes from initx's context (`ctx.cliOptions.debug` or `ctx.cliOptions.d`). In the
|
|
370
|
+
business project, repeat your original command with initx's existing global debug option:
|
|
371
|
+
|
|
372
|
+
```powershell
|
|
373
|
+
ix env push my-store --token <gitlab-token> --debug
|
|
374
|
+
```
|
|
375
|
+
|
|
376
|
+
Plugin debug messages use `logger.debug` and retain only empty-vault initialization, write results,
|
|
377
|
+
failed requests, and permission summaries. Routine read requests, expected missing-file/ref responses,
|
|
378
|
+
and successful project lookups are silent. No URLs, tokens, request/response
|
|
379
|
+
bodies, commit messages or variable values are logged. For a branch-write permission failure,
|
|
380
|
+
debug mode makes additional read-only project/branch/protection requests; failed diagnostics
|
|
381
|
+
preserve the original error and never retry the write. `accessLevel: 30` means Developer and
|
|
382
|
+
`40` means Maintainer. `allowedPushLevels` lists numeric levels from the exact-name protection
|
|
383
|
+
rule, when readable. A missing/unreadable rule does not rule out wildcard or initial default-branch
|
|
384
|
+
policies. For an empty project, creating the first branch is still subject to GitLab permissions.
|
|
385
|
+
In GitLab CE 15.9.4, default-branch protection can apply before the first branch exists:
|
|
386
|
+
`ProtectedBranch.protected?` treats an empty project with default-branch protection as protected.
|
|
387
|
+
If a Developer token is denied on the first commit, use a Maintainer token with `api`, or have
|
|
388
|
+
a project maintainer configure the intended initial-branch policy. A failed protection lookup
|
|
389
|
+
(`403`) means the token cannot inspect the rule; it does not mean there is no protection.
|
|
390
|
+
See the versioned [ProtectedBranch model](https://github.com/gitlabhq/gitlabhq/blob/v15.9.4/app/models/protected_branch.rb).
|
|
391
|
+
All human-readable messages use the existing utils logger (which currently writes to stdout).
|
|
392
|
+
Raw JSON, shell exports and GitHub Actions protocol lines remain data output without logger prefixes;
|
|
393
|
+
the child's own stdout/stderr and exit status remain unchanged.
|
|
394
|
+
|
|
366
395
|
`pnpm test` runs unit tests and isolated child-process fixtures with fake GitHub/GitLab responses and
|
|
367
396
|
temporary directories. Tests use the existing core matcher and direct command handlers, without
|
|
368
397
|
installing or importing the initx CLI. Child-process tests check execution markers and nonzero
|
package/dist/index.mjs
CHANGED
|
@@ -1,28 +1,27 @@
|
|
|
1
|
-
import{InitxPlugin as Iu}from"@initx-plugin/core";import{readFile as au,copyFile as Su,writeFile as cu,stat as Ou,readdir as Uu}from"node:fs/promises";import f from"node:process";import{useColors as ju,logger as l,inquirer as x}from"@initx-plugin/utils";import{readFileSync as Ru,appendFileSync as Gu}from"node:fs";import{resolve as Pu}from"node:path";import{z as B}from"zod";import{Buffer as S}from"node:buffer";import{randomBytes as Fu}from"node:crypto";import lu from"libsodium-wrappers";import{constants as Lu}from"node:os";import Vu from"cross-spawn";function z(u){return u.replace(/-([a-z])/g,(t,e)=>e.toUpperCase())}function q(u,t){return u[t]??u[z(t)]}function Hu(u){if(typeof u=="string")return u===""?void 0:u;if(typeof u=="number")return String(u);if(Array.isArray(u))return u.length?u.map(String).join(","):void 0}function Ku(u={},t=[]){const e=new Set(t);return{raw:u,string:n=>Hu(q(u,n)),boolean:n=>{const r=q(u,n);return typeof r=="boolean"?r:e.has(`--${n}`)||e.has(`--${z(n)}`)},has:n=>q(u,n)!==void 0?!0:e.has(`--${n}`)||e.has(`--${z(n)}`)}}function P(u){if(!u.has("config"))return;const t=u.raw.config;if(typeof t!="string"||!t.trim())throw new Error("--config \u9700\u8981\u5355\u4E2A\u6587\u4EF6\u8DEF\u5F84");return t}const Xu={authentication:"\u8BA4\u8BC1\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u5F53\u524D\u540E\u7AEF\u7684 token",permission:"\u6CA1\u6709\u6743\u9650\uFF0C\u8BF7\u68C0\u67E5 token \u6388\u6743\u4E0E\u5206\u652F\u4FDD\u62A4","not-found":"\u4ED3\u5E93\u6216 ref \u4E0D\u5B58\u5728\uFF0C\u6216\u5F53\u524D token \u65E0\u6743\u8BBF\u95EE",conflict:"\u8FDC\u7AEF\u7248\u672C\u5DF2\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u8BFB\u53D6\uFF1Bpush \u53EF\u7528 --force \u91CD\u8BFB\u540E\u91CD\u8BD5\u4E00\u6B21",validation:"\u8BF7\u6C42\u6216\u54CD\u5E94\u4E0D\u5408\u6CD5\uFF0C\u8BF7\u68C0\u67E5\u8DEF\u5F84\u3001ref \u4E0E\u914D\u7F6E","rate-limit":"API \u8BF7\u6C42\u88AB\u9650\u6D41\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",network:"\u7F51\u7EDC\u8BF7\u6C42\u5931\u8D25\u6216\u8D85\u65F6\uFF1B\u5199\u5165\u7ED3\u679C\u53EF\u80FD\u672A\u77E5\uFF0C\u8BF7\u5148\u91CD\u8BFB\u786E\u8BA4",unsupported:"\u5B58\u50A8\u540E\u7AEF\u4E0D\u652F\u6301\u6B64\u64CD\u4F5C"};class g extends Error{constructor(t,e){super(`${Xu[t]}${e?`\uFF08HTTP ${e}\uFF09`:""}`),this.code=t,this.status=e,this.name="StorageError"}}function Ju(u){return u instanceof g&&u.code==="conflict"}function Z(u){const t=u.status,e=t===429||t===403&&(u.headers.get("x-ratelimit-remaining")==="0"||u.headers.has("retry-after"));return new g(e?"rate-limit":t===401?"authentication":t===403?"permission":t===404?"not-found":t>=500?"network":"validation",t)}const b={github:"https://api.github.com",gitlab:"https://gitlab.com/api/v4"};function y(u,t=!1){if(!(u===""&&t)){if(u.split("/").some(e=>e==="."||e===".."))throw Object.assign(new g("validation"),{message:"\u8DEF\u5F84\u4E0D\u80FD\u5305\u542B . \u6216 .."});if(!u||/[\\\x00-\x1F\x7F]/.test(u)||u.startsWith("/")||/^[A-Z]:/i.test(u)||u.split("/").some(e=>!e||e==="."||e===".."))throw new g("validation")}}function _(u){try{const t=new URL(u);if(!["https:","http:"].includes(t.protocol)||t.username||t.password||t.search||t.hash)throw new Error("Invalid API base URL");return t.href.replace(/\/+$/,"")}catch{throw new g("validation")}}function T(u,t){if(y(t),/\s/.test(t)||(u==="github"?t.split("/").length!==2:!/^\d+$/.test(t)&&t.split("/").length<2))throw new Error(u==="github"?"\u4ED3\u5E93\u8981\u5199\u6210 owner/repo \u5F62\u5F0F":"GitLab \u4ED3\u5E93\u5FC5\u987B\u662F\u6570\u5B57\u9879\u76EE ID \u6216 group/subgroup/project")}const Yu=B.object({schema:B.literal(1),storage:B.object({type:B.enum(["github","gitlab"]),apiBaseUrl:B.string().min(1).optional(),repo:B.string().min(1),branch:B.string().min(1).optional(),path:B.string().optional()}).strict()}).strict();class L extends Error{constructor(t){super(t),this.name="ProjectConfigError"}}function Wu(u,t=f.cwd()){const e=Pu(t,u||".initx-env.json");let n;try{n=Ru(e,"utf8")}catch(o){if(!u&&o.code==="ENOENT")return;throw new L("\u65E0\u6CD5\u8BFB\u53D6\u9879\u76EE\u914D\u7F6E\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5 --config \u8DEF\u5F84\u4E0E\u6587\u4EF6\u6743\u9650")}let r;try{r=Yu.parse(JSON.parse(n))}catch{throw new L("\u9879\u76EE\u914D\u7F6E\u5FC5\u987B\u662F schema 1 \u7684\u5408\u6CD5 JSON\uFF0C\u4E14\u53EA\u80FD\u5305\u542B\u975E\u654F\u611F storage \u5B9A\u4F4D\u5B57\u6BB5\uFF08\u7981\u6B62 token / vars\uFF09")}try{const o={...r.storage,apiBaseUrl:_(r.storage.apiBaseUrl||b[r.storage.type])};return T(o.type,o.repo),o.path!==void 0&&y(o.path,!0),{file:e,storage:o}}catch{throw new L("\u9879\u76EE storage \u7684 API \u5730\u5740\u3001\u4ED3\u5E93\u6216\u8DEF\u5F84\u4E0D\u5408\u6CD5")}}const V="main",H="stores";function K(u,t){return`${u}:${_(t)}`}function O(u){const t=u.storage?.type||"github";if(t!=="github"&&t!=="gitlab")throw new Error("\u672C\u5730 storage.type \u5FC5\u987B\u662F github \u6216 gitlab");return{type:t,apiBaseUrl:_(u.storage?.apiBaseUrl||b[t])}}function Mu(u,t){const e=t.env??f.env,n=Wu(t.config,t.cwd),r=O(u),o=t.type||e.INITX_ENV_TYPE||n?.storage.type||r.type;if(o!=="github"&&o!=="gitlab")throw new Error("storage.type \u5FC5\u987B\u662F github \u6216 gitlab");const i=o,s=n?.storage.type===i,a=t.apiBaseUrl||e.INITX_ENV_API_BASE_URL||(s?n.storage.apiBaseUrl:void 0)||(r.type===i?r.apiBaseUrl:b[i]),E=_(a),F=r.type===i&&r.apiBaseUrl===E,p=s&&n.storage.apiBaseUrl===E,d=F?u.storage||u:{},h=p?n.storage:void 0,C={type:t.type?"override":e.INITX_ENV_TYPE?"INITX_ENV_TYPE":n?"project":"local/default",apiBaseUrl:t.apiBaseUrl?"override":e.INITX_ENV_API_BASE_URL?"INITX_ENV_API_BASE_URL":p?"project":F?"local/default":"default",repo:"",branch:"",path:""};function A($,w){const I=`INITX_ENV_${$.toUpperCase()}`,v=[[t[$]||void 0,"override"],[e[I]||void 0,I],[h?.[$],"project"],[d[$]||void 0,"local"],[w,"default"]].find(([Nu])=>Nu!==void 0);return C[$]=v[1],v[0]}return{type:i,apiBaseUrl:E,repo:A("repo",""),branch:A("branch",V),path:A("path",H),sources:C,configSource:n?.file||"local/env/default"}}function zu(u,t,e){const n=t.env??f.env;if(t.token)return{token:t.token,source:"flag"};if(n.INITX_ENV_TOKEN)return{token:n.INITX_ENV_TOKEN,source:"INITX_ENV_TOKEN"};const r=e.type==="github"&&e.apiBaseUrl===b.github;if(r){for(const i of["GH_TOKEN","GITHUB_TOKEN"])if(n[i])return{token:n[i],source:i}}const o=u.credentials?.[K(e.type,e.apiBaseUrl)];return o?{token:o,source:"config"}:r&&u.token?{token:u.token,source:"config"}:{token:"",source:"none"}}function X(u,t={}){const e=Mu(u,t);if(!e.repo)throw new Error("\u8FD8\u6CA1\u914D vault \u4ED3\u5E93\uFF0C\u8BF7\u914D\u7F6E .initx-env.json \u6216 env-config set repo <owner/repo>");T(e.type,e.repo),y(e.path,!0);const{token:n,source:r}=zu(u,t,e);if(!n)throw new Error("\u6CA1\u6709\u53EF\u7528\u7684\u5F53\u524D\u540E\u7AEF token\uFF0C\u8BF7\u8BBE\u7F6E INITX_ENV_TOKEN\u3001--token \u6216\u7ED1\u5B9A\u5F53\u524D API \u5730\u5740\u7684\u672C\u5730\u51ED\u636E");return{...e,token:n,tokenSource:r}}function qu(u){return u?"***":"(\u672A\u8BBE\u7F6E)"}function Q(u){return qu(u)}async function D(u,t={}){try{return await fetch(u,{...t,redirect:"error",signal:AbortSignal.timeout(3e4)})}catch{throw new g("network")}}async function k(u){try{return await u.json()}catch(t){throw new g(t instanceof SyntaxError?"validation":"network")}}function m(u){if(!u.ok)throw Z(u)}function pu(u){return{Authorization:`Bearer ${u}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28","User-Agent":"initx-plugin-env"}}class Zu{constructor(t,e){this.location=t,T("github",t.repo),this.base=`${_(t.apiBaseUrl)}/repos/${t.repo.split("/").map(encodeURIComponent).join("/")}`,this.headers=pu(e)}capabilities={read:!0,list:!0,write:!0,delete:!0,conditionalWrite:!0};base;headers;url(t){y(t,!0);const e=t?`/${t.split("/").map(encodeURIComponent).join("/")}`:"";return`${this.base}/contents${e}?${new URLSearchParams({ref:this.location.branch})}`}async checkTarget(){const t=await D(`${this.base}/commits/${encodeURIComponent(this.location.branch)}`,{headers:this.headers});if(!await this.isEmptyRepository(t)){if(t.status===404){const e=await D(`${this.base}/commits?per_page=1`,{headers:this.headers});if(await this.isEmptyRepository(e))return;m(e)}m(t)}}async isEmptyRepository(t){return t.status!==409?!1:(await k(t))?.message==="Git Repository is empty."}async read(t){y(t);const e=await D(this.url(t),{headers:this.headers});if(e.status===404||await this.isEmptyRepository(e))return await this.checkTarget(),null;m(e);const n=await k(e);if(!n||n.type!=="file"||typeof n.sha!="string"||!n.sha||typeof n.content!="string"||n.encoding!=="base64")throw new g("validation");return{content:S.from(n.content,"base64").toString("utf8"),version:n.sha}}async list(t){const e=await D(this.url(t),{headers:this.headers});if(e.status===404||await this.isEmptyRepository(e))return await this.checkTarget(),[];m(e);const n=await k(e);if(!Array.isArray(n)||n.some(r=>!r||typeof r.name!="string"||typeof r.path!="string"||typeof r.type!="string"))throw new g("validation");return n.map(r=>({name:r.name,path:r.path,kind:r.type==="file"?"file":r.type==="dir"?"directory":"other"}))}async write(t,e,n){y(t);const r=n.condition;if(r.kind!=="create"&&(r.kind!=="update"||!r.expectedVersion))throw new g("validation");const o=await D(this.url(t),{method:"PUT",headers:{...this.headers,"Content-Type":"application/json"},body:JSON.stringify({branch:this.location.branch,message:n.message||"env: write store",content:S.from(e).toString("base64"),...r.kind==="update"?{sha:r.expectedVersion}:{}})});if([404,409,422].includes(o.status)){const i=await this.read(t);if(r.kind==="create"?i!==null:i?.version!==r.expectedVersion)throw new g("conflict",o.status)}if(!o.ok)throw Z(o)}async remove(t,e){if(y(t),!e.expectedVersion)throw new g("validation");const n=await D(this.url(t),{method:"DELETE",headers:{...this.headers,"Content-Type":"application/json"},body:JSON.stringify({branch:this.location.branch,message:e.message||"env: remove store",sha:e.expectedVersion})});if([404,409,422].includes(n.status)&&(await this.read(t))?.version!==e.expectedVersion)throw new g("conflict",n.status);m(n)}}async function Eu(u){if(u.status!==400)return;let t;try{t=await k(u)}catch(e){if(e instanceof g&&e.code==="network")throw e}if(t?.message==="You are not allowed to push into this branch")throw new g("permission",400)}class Qu{constructor(t,e){this.location=t,T("gitlab",t.repo),this.projectUrl=`${_(t.apiBaseUrl)}/projects/${encodeURIComponent(t.repo)}`,this.base=`${this.projectUrl}/repository`,this.headers={"PRIVATE-TOKEN":e,"Content-Type":"application/json"}}capabilities={read:!0,list:!0,write:!0,delete:!0,conditionalWrite:!0};projectUrl;base;headers;fileUrl(t){return y(t),`${this.base}/files/${encodeURIComponent(t)}`}async checkTarget(){const t=await D(`${this.base}/commits/${encodeURIComponent(this.location.branch)}`,{headers:this.headers});if(t.status===404){const e=await D(this.projectUrl,{headers:this.headers});m(e);const n=await k(e);if(!n||typeof n.empty_repo!="boolean")throw new g("validation");if(n.empty_repo)return!1}return m(t),!0}async read(t){const e=await D(`${this.fileUrl(t)}?${new URLSearchParams({ref:this.location.branch})}`,{headers:this.headers});if(e.status===404)return await this.checkTarget(),null;m(e);const n=await k(e);if(!n||typeof n.content!="string"||n.encoding!=="base64"||typeof n.last_commit_id!="string"||!n.last_commit_id)throw new g("validation");return{content:S.from(n.content,"base64").toString("utf8"),version:n.last_commit_id}}async list(t){y(t,!0);const e=[];if(!await this.checkTarget())return e;for(let n=1;;n++){const r=new URLSearchParams({ref:this.location.branch,per_page:"100",page:String(n),...t?{path:t}:{}}),o=await D(`${this.base}/tree?${r}`,{headers:this.headers});if(o.status===404)return await this.checkTarget(),e;m(o);const i=await k(o);if(!Array.isArray(i)||i.some(a=>!a||typeof a.name!="string"||typeof a.path!="string"||typeof a.type!="string"))throw new g("validation");e.push(...i.map(a=>({name:a.name,path:a.path,kind:a.type==="blob"?"file":a.type==="tree"?"directory":"other"})));const s=o.headers.get("x-next-page");if(!i.length||s===""||s===null&&i.length<100)return e;if(s!==null&&s!==String(n+1))throw new g("validation")}}async write(t,e,n){const r=n.condition;if(r.kind!=="create"&&(r.kind!=="update"||!r.expectedVersion))throw new g("validation");const o=await D(this.fileUrl(t),{method:r.kind==="create"?"POST":"PUT",headers:this.headers,body:JSON.stringify({branch:this.location.branch,commit_message:n.message||"env: write store",content:S.from(e).toString("base64"),encoding:"base64",...r.kind==="update"?{last_commit_id:r.expectedVersion}:{}})});if(await Eu(o),[400,404,409,422].includes(o.status)){const i=await this.read(t);if(r.kind==="create"?i!==null:i?.version!==r.expectedVersion)throw new g("conflict",o.status);if(r.kind==="update"&&o.status===400&&i?.content===e)return}if(!o.ok)throw Z(o)}async remove(t,e){if(y(t),!e.expectedVersion)throw new g("validation");const n=await D(`${this.base}/commits`,{method:"POST",headers:this.headers,body:JSON.stringify({branch:this.location.branch,commit_message:e.message||"env: remove store",actions:[{action:"delete",file_path:t,last_commit_id:e.expectedVersion}]})});if(await Eu(n),[400,404,409,422].includes(n.status)&&(await this.read(t))?.version!==e.expectedVersion)throw new g("conflict",n.status);m(n)}}const ut={github:Zu,gitlab:Qu};function J(u){const t=ut[u.type];if(!t)throw new g("unsupported");return new t(u,u.token)}function Y(u,t){if(!u.capabilities[t])throw new g("unsupported")}const uu=1,tt=B.object({repo:B.string().regex(/^[^/\s]+\/[^/\s]+$/,"\u5FC5\u987B\u662F owner/repo \u5F62\u5F0F"),env:B.string().nullish()}),et=B.object({schema:B.number().int().positive().default(uu),vars:B.record(B.string(),B.string()).default({}),targets:B.object({envFiles:B.array(B.string().min(1)).optional(),secrets:B.array(tt).optional()}).optional()});function fu(){return{schema:uu,vars:{}}}function N(u){const t=u.trim().replace(/\.json$/i,"");if(!t)throw new Error("store \u540D\u4E0D\u80FD\u4E3A\u7A7A");if(t.includes("/")||t.includes("\\"))throw new Error(`store \u540D\u4E0D\u80FD\u5305\u542B\u8DEF\u5F84\u5206\u9694\u7B26\uFF1A"${u}"`);if(t==="."||t==="..")throw new Error(`store \u540D\u4E0D\u80FD\u662F "${t}"`);if(/[\u0000-\u001F\u007F]/.test(t))throw new Error("store \u540D\u4E0D\u80FD\u5305\u542B\u63A7\u5236\u5B57\u7B26");if(t.length>100)throw new Error("store \u540D\u592A\u957F\uFF08\u4E0A\u9650 100 \u5B57\u7B26\uFF09");return t}function nt(u){return/^[A-Z_]\w*$/i.test(u)?u.toUpperCase().startsWith("GITHUB_")?"GITHUB_ \u524D\u7F00\u662F GitHub \u4FDD\u7559\u7684":null:"\u53EA\u5141\u8BB8\u5B57\u6BCD\u3001\u6570\u5B57\u3001\u4E0B\u5212\u7EBF\uFF0C\u4E14\u4E0D\u80FD\u4EE5\u6570\u5B57\u5F00\u5934"}function rt(u){return/^[A-Z_][\w.-]*$/i.test(u)}function hu(u,t){const e=N(t),n=(u||"").trim().replace(/^\/+|\/+$/g,""),r=n?`${n}/${e}.json`:`${e}.json`;return y(r),r}function ot(u,t){let e;try{e=JSON.parse(u)}catch{throw new Error(`store "${t}" \u4E0D\u662F\u5408\u6CD5 JSON`)}const n=et.safeParse(e);if(!n.success)throw new Error(`store "${t}" \u7ED3\u6784\u4E0D\u5408\u6CD5\uFF1A${n.error.issues.map(r=>`${r.path.join(".")||"(root)"} ${r.message}`).join("; ")}`);return n.data}function it(u){return`${JSON.stringify({...u,schema:u.schema??uu},null,2)}
|
|
2
|
-
`}async function
|
|
3
|
-
`:e==="r"?"\r":e==="t"?" ":e)}function
|
|
4
|
-
`)){const n=/[ \t]#/.exec(e);if(n!==null)return e.slice(0,n.index).replace(/[ \t]+$/,"")}return t.replace(/[ \t]+$/,"")}function
|
|
5
|
-
`)&&t.pop(),t}function Cu(u){for(let t=0;t<u.length;t+=1){if(u[t]==="\\"){t+=1;continue}if(u[t]==='"')return t}return-1}function
|
|
6
|
-
${u[s]}`,p=Cu(F);a="double",E=
|
|
1
|
+
import{InitxPlugin as ju}from"@initx-plugin/core";import{logger as c,useColors as Su,inquirer as _}from"@initx-plugin/utils";import{readFile as cu,copyFile as Uu,writeFile as lu,stat as Ou,readdir as Ru}from"node:fs/promises";import h from"node:process";import{readFileSync as Pu,appendFileSync as Gu}from"node:fs";import{resolve as Lu}from"node:path";import{z as C}from"zod";import{Buffer as S}from"node:buffer";import{randomBytes as Fu}from"node:crypto";import pu from"libsodium-wrappers";import{constants as Vu}from"node:os";import Hu from"cross-spawn";function z(u){return u.replace(/-([a-z])/g,(t,e)=>e.toUpperCase())}function Z(u,t){return u[t]??u[z(t)]}function Ku(u){if(typeof u=="string")return u===""?void 0:u;if(typeof u=="number")return String(u);if(Array.isArray(u))return u.length?u.map(String).join(","):void 0}function Xu(u={},t=[]){const e=new Set(t);return{raw:u,string:n=>Ku(Z(u,n)),boolean:n=>{const o=Z(u,n);return typeof o=="boolean"?o:e.has(`--${n}`)||e.has(`--${z(n)}`)},has:n=>Z(u,n)!==void 0?!0:e.has(`--${n}`)||e.has(`--${z(n)}`)}}function L(u){if(!u.has("config"))return;const t=u.raw.config;if(typeof t!="string"||!t.trim())throw new Error("--config \u9700\u8981\u5355\u4E2A\u6587\u4EF6\u8DEF\u5F84");return t}const Ju={authentication:"\u8BA4\u8BC1\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u5F53\u524D\u540E\u7AEF\u7684 token",permission:"\u6CA1\u6709\u6743\u9650\uFF0C\u8BF7\u68C0\u67E5 token \u6388\u6743\u4E0E\u5206\u652F\u4FDD\u62A4","not-found":"\u4ED3\u5E93\u6216 ref \u4E0D\u5B58\u5728\uFF0C\u6216\u5F53\u524D token \u65E0\u6743\u8BBF\u95EE",conflict:"\u8FDC\u7AEF\u7248\u672C\u5DF2\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u8BFB\u53D6\uFF1Bpush \u53EF\u7528 --force \u91CD\u8BFB\u540E\u91CD\u8BD5\u4E00\u6B21",validation:"\u8BF7\u6C42\u6216\u54CD\u5E94\u4E0D\u5408\u6CD5\uFF0C\u8BF7\u68C0\u67E5\u8DEF\u5F84\u3001ref \u4E0E\u914D\u7F6E","rate-limit":"API \u8BF7\u6C42\u88AB\u9650\u6D41\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",network:"\u7F51\u7EDC\u8BF7\u6C42\u5931\u8D25\u6216\u8D85\u65F6\uFF1B\u5199\u5165\u7ED3\u679C\u53EF\u80FD\u672A\u77E5\uFF0C\u8BF7\u5148\u91CD\u8BFB\u786E\u8BA4",unsupported:"\u5B58\u50A8\u540E\u7AEF\u4E0D\u652F\u6301\u6B64\u64CD\u4F5C"};class g extends Error{constructor(t,e){super(`${Ju[t]}${e?`\uFF08HTTP ${e}\uFF09`:""}`),this.code=t,this.status=e,this.name="StorageError"}}function Yu(u){return u instanceof g&&u.code==="conflict"}function Q(u){const t=u.status,e=t===429||t===403&&(u.headers.get("x-ratelimit-remaining")==="0"||u.headers.has("retry-after"));return new g(e?"rate-limit":t===401?"authentication":t===403?"permission":t===404?"not-found":t>=500?"network":"validation",t)}const k={github:"https://api.github.com",gitlab:"https://gitlab.com/api/v4"};function B(u,t=!1){if(!(u===""&&t)){if(u.split("/").some(e=>e==="."||e===".."))throw Object.assign(new g("validation"),{message:"\u8DEF\u5F84\u4E0D\u80FD\u5305\u542B . \u6216 .."});if(!u||/[\\\x00-\x1F\x7F]/.test(u)||u.startsWith("/")||/^[A-Z]:/i.test(u)||u.split("/").some(e=>!e||e==="."||e===".."))throw new g("validation")}}function T(u){try{const t=new URL(u);if(!["https:","http:"].includes(t.protocol)||t.username||t.password||t.search||t.hash)throw new Error("Invalid API base URL");return t.href.replace(/\/+$/,"")}catch{throw new g("validation")}}function I(u,t){if(B(t),/\s/.test(t)||(u==="github"?t.split("/").length!==2:!/^\d+$/.test(t)&&t.split("/").length<2))throw new Error(u==="github"?"\u4ED3\u5E93\u8981\u5199\u6210 owner/repo \u5F62\u5F0F":"GitLab \u4ED3\u5E93\u5FC5\u987B\u662F\u6570\u5B57\u9879\u76EE ID \u6216 group/subgroup/project")}const qu=C.object({schema:C.literal(1),storage:C.object({type:C.enum(["github","gitlab"]),apiBaseUrl:C.string().min(1).optional(),repo:C.string().min(1),branch:C.string().min(1).optional(),path:C.string().optional()}).strict()}).strict();class V extends Error{constructor(t){super(t),this.name="ProjectConfigError"}}function Wu(u,t=h.cwd()){const e=Lu(t,u||".initx-env.json");let n;try{n=Pu(e,"utf8")}catch(r){if(!u&&r.code==="ENOENT")return;throw new V("\u65E0\u6CD5\u8BFB\u53D6\u9879\u76EE\u914D\u7F6E\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5 --config \u8DEF\u5F84\u4E0E\u6587\u4EF6\u6743\u9650")}let o;try{o=qu.parse(JSON.parse(n))}catch{throw new V("\u9879\u76EE\u914D\u7F6E\u5FC5\u987B\u662F schema 1 \u7684\u5408\u6CD5 JSON\uFF0C\u4E14\u53EA\u80FD\u5305\u542B\u975E\u654F\u611F storage \u5B9A\u4F4D\u5B57\u6BB5\uFF08\u7981\u6B62 token / vars\uFF09")}try{const r={...o.storage,apiBaseUrl:T(o.storage.apiBaseUrl||k[o.storage.type])};return I(r.type,r.repo),r.path!==void 0&&B(r.path,!0),{file:e,storage:r}}catch{throw new V("\u9879\u76EE storage \u7684 API \u5730\u5740\u3001\u4ED3\u5E93\u6216\u8DEF\u5F84\u4E0D\u5408\u6CD5")}}const H="main",K="stores";function X(u,t){return`${u}:${T(t)}`}function U(u){const t=u.storage?.type||"github";if(t!=="github"&&t!=="gitlab")throw new Error("\u672C\u5730 storage.type \u5FC5\u987B\u662F github \u6216 gitlab");return{type:t,apiBaseUrl:T(u.storage?.apiBaseUrl||k[t])}}function Mu(u,t){const e=t.env??h.env,n=Wu(t.config,t.cwd),o=U(u),r=t.type||e.INITX_ENV_TYPE||n?.storage.type||o.type;if(r!=="github"&&r!=="gitlab")throw new Error("storage.type \u5FC5\u987B\u662F github \u6216 gitlab");const i=r,s=n?.storage.type===i,a=t.apiBaseUrl||e.INITX_ENV_API_BASE_URL||(s?n.storage.apiBaseUrl:void 0)||(o.type===i?o.apiBaseUrl:k[i]),E=T(a),F=o.type===i&&o.apiBaseUrl===E,p=s&&n.storage.apiBaseUrl===E,d=F?u.storage||u:{},f=p?n.storage:void 0,y={type:t.type?"override":e.INITX_ENV_TYPE?"INITX_ENV_TYPE":n?"project":"local/default",apiBaseUrl:t.apiBaseUrl?"override":e.INITX_ENV_API_BASE_URL?"INITX_ENV_API_BASE_URL":p?"project":F?"local/default":"default",repo:"",branch:"",path:""};function A(m,w){const j=`INITX_ENV_${m.toUpperCase()}`,v=[[t[m]||void 0,"override"],[e[j]||void 0,j],[f?.[m],"project"],[d[m]||void 0,"local"],[w,"default"]].find(([Nu])=>Nu!==void 0);return y[m]=v[1],v[0]}return{type:i,apiBaseUrl:E,repo:A("repo",""),branch:A("branch",H),path:A("path",K),sources:y,configSource:n?.file||"local/env/default"}}function zu(u,t,e){const n=t.env??h.env;if(t.token)return{token:t.token,source:"flag"};if(n.INITX_ENV_TOKEN)return{token:n.INITX_ENV_TOKEN,source:"INITX_ENV_TOKEN"};const o=e.type==="github"&&e.apiBaseUrl===k.github;if(o){for(const i of["GH_TOKEN","GITHUB_TOKEN"])if(n[i])return{token:n[i],source:i}}const r=u.credentials?.[X(e.type,e.apiBaseUrl)];return r?{token:r,source:"config"}:o&&u.token?{token:u.token,source:"config"}:{token:"",source:"none"}}function J(u,t={}){const e=Mu(u,t);if(!e.repo)throw new Error("\u8FD8\u6CA1\u914D vault \u4ED3\u5E93\uFF0C\u8BF7\u914D\u7F6E .initx-env.json \u6216 env-config set repo <owner/repo>");I(e.type,e.repo),B(e.path,!0);const{token:n,source:o}=zu(u,t,e);if(!n)throw new Error("\u6CA1\u6709\u53EF\u7528\u7684\u5F53\u524D\u540E\u7AEF token\uFF0C\u8BF7\u8BBE\u7F6E INITX_ENV_TOKEN\u3001--token \u6216\u7ED1\u5B9A\u5F53\u524D API \u5730\u5740\u7684\u672C\u5730\u51ED\u636E");return{...e,token:n,tokenSource:o}}function Zu(u){return u?"***":"(\u672A\u8BBE\u7F6E)"}function uu(u){return Zu(u)}async function x(u,t={}){try{return await fetch(u,{...t,redirect:"error",signal:AbortSignal.timeout(3e4)})}catch{throw new g("network")}}async function b(u){try{return await u.json()}catch(t){throw new g(t instanceof SyntaxError?"validation":"network")}}function D(u){if(!u.ok)throw Q(u)}function Eu(u){return{Authorization:`Bearer ${u}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28","User-Agent":"initx-plugin-env"}}class Qu{constructor(t,e){this.location=t,I("github",t.repo),this.base=`${T(t.apiBaseUrl)}/repos/${t.repo.split("/").map(encodeURIComponent).join("/")}`,this.headers=Eu(e)}capabilities={read:!0,list:!0,write:!0,delete:!0,conditionalWrite:!0};base;headers;url(t){B(t,!0);const e=t?`/${t.split("/").map(encodeURIComponent).join("/")}`:"";return`${this.base}/contents${e}?${new URLSearchParams({ref:this.location.branch})}`}async checkTarget(){const t=await x(`${this.base}/commits/${encodeURIComponent(this.location.branch)}`,{headers:this.headers});if(!await this.isEmptyRepository(t)){if(t.status===404){const e=await x(`${this.base}/commits?per_page=1`,{headers:this.headers});if(await this.isEmptyRepository(e))return;D(e)}D(t)}}async isEmptyRepository(t){return t.status!==409?!1:(await b(t))?.message==="Git Repository is empty."}async read(t){B(t);const e=await x(this.url(t),{headers:this.headers});if(e.status===404||await this.isEmptyRepository(e))return await this.checkTarget(),null;D(e);const n=await b(e);if(!n||n.type!=="file"||typeof n.sha!="string"||!n.sha||typeof n.content!="string"||n.encoding!=="base64")throw new g("validation");return{content:S.from(n.content,"base64").toString("utf8"),version:n.sha}}async list(t){const e=await x(this.url(t),{headers:this.headers});if(e.status===404||await this.isEmptyRepository(e))return await this.checkTarget(),[];D(e);const n=await b(e);if(!Array.isArray(n)||n.some(o=>!o||typeof o.name!="string"||typeof o.path!="string"||typeof o.type!="string"))throw new g("validation");return n.map(o=>({name:o.name,path:o.path,kind:o.type==="file"?"file":o.type==="dir"?"directory":"other"}))}async write(t,e,n){B(t);const o=n.condition;if(o.kind!=="create"&&(o.kind!=="update"||!o.expectedVersion))throw new g("validation");const r=await x(this.url(t),{method:"PUT",headers:{...this.headers,"Content-Type":"application/json"},body:JSON.stringify({branch:this.location.branch,message:n.message||"env: write store",content:S.from(e).toString("base64"),...o.kind==="update"?{sha:o.expectedVersion}:{}})});if([404,409,422].includes(r.status)){const i=await this.read(t);if(o.kind==="create"?i!==null:i?.version!==o.expectedVersion)throw new g("conflict",r.status)}if(!r.ok)throw Q(r)}async remove(t,e){if(B(t),!e.expectedVersion)throw new g("validation");const n=await x(this.url(t),{method:"DELETE",headers:{...this.headers,"Content-Type":"application/json"},body:JSON.stringify({branch:this.location.branch,message:e.message||"env: remove store",sha:e.expectedVersion})});if([404,409,422].includes(n.status)&&(await this.read(t))?.version!==e.expectedVersion)throw new g("conflict",n.status);D(n)}}function l(u,t,e="stdout"){return h.env.NO_COLOR!==void 0||h.env.FORCE_COLOR==="0"||!h[e].isTTY&&!h.env.FORCE_COLOR?u:Su(u)[t]().toString()}function ut(u){const t=u instanceof Error&&u.message?u.message:"\u547D\u4EE4\u6267\u884C\u5931\u8D25";c.error(l(t,"red")),h.exitCode=1}function $(u,t){u&&c.debug(l(`GitLab ${JSON.stringify(t)}`,"gray"))}function fu(u){return[0,5,10,20,30,40,50].includes(u)?u:void 0}async function tt(u){if(u.status!==400)return;let t;try{t=await b(u)}catch(e){if(e instanceof g&&e.code==="network")throw e}if(t?.message==="You are not allowed to push into this branch")throw new g("permission",400)}class et{constructor(t,e){this.location=t,I("gitlab",t.repo),this.projectUrl=`${T(t.apiBaseUrl)}/projects/${encodeURIComponent(t.repo)}`,this.base=`${this.projectUrl}/repository`,this.headers={"PRIVATE-TOKEN":e,"Content-Type":"application/json"},this.debug=t.debug===!0}capabilities={read:!0,list:!0,write:!0,delete:!0,conditionalWrite:!0};projectUrl;base;headers;debug;fileUrl(t){return B(t),`${this.base}/files/${encodeURIComponent(t)}`}async request(t,e,n={}){let o;try{o=await x(e,{...n,headers:this.headers})}catch(r){throw $(this.debug,{operation:t,event:"network-error"}),r}return n.method?$(this.debug,{operation:t,event:"write-result",status:o.status}):!o.ok&&o.status!==404&&$(this.debug,{operation:t,event:"request-failed",status:o.status}),o}async projectInfo(){const t=await this.request("project",this.projectUrl);D(t);const e=await b(t);if(!e||typeof e.empty_repo!="boolean")throw new g("validation");return e}async diagnosePermission(){if(this.debug)try{const t=await this.projectInfo(),e=[t.permissions?.project_access?.access_level,t.permissions?.group_access?.access_level].map(fu).filter(o=>o!==void 0);if($(this.debug,{operation:"project",event:"permissions",emptyRepo:t.empty_repo,archived:typeof t.archived=="boolean"?t.archived:void 0,accessLevel:e.length?Math.max(...e):void 0}),!t.empty_repo){const o=await this.request("branch",`${this.base}/branches/${encodeURIComponent(this.location.branch)}`);if(o.ok){const r=await b(o);$(this.debug,{operation:"branch",event:"permissions",protected:typeof r?.protected=="boolean"?r.protected:void 0,canPush:typeof r?.can_push=="boolean"?r.can_push:void 0})}}const n=await this.request("protection",`${this.projectUrl}/protected_branches/${encodeURIComponent(this.location.branch)}`);if(n.ok){const o=await b(n);if(Array.isArray(o?.push_access_levels)){const r=o.push_access_levels.map(i=>fu(i?.access_level)).filter(i=>i!==void 0);$(this.debug,{operation:"protection",event:"permissions",allowedPushLevels:r})}}}catch{$(this.debug,{operation:"project",event:"unavailable"})}}async rejectPermission(t){try{await tt(t)}catch(e){throw e instanceof g&&e.code==="permission"&&await this.diagnosePermission(),e}t.status===403&&await this.diagnosePermission()}async checkTarget(){const t=await this.request("commit",`${this.base}/commits/${encodeURIComponent(this.location.branch)}`);if(t.status===404){if((await this.projectInfo()).empty_repo)return $(this.debug,{operation:"project",event:"empty-repository"}),!1;$(this.debug,{operation:"commit",event:"request-failed",status:t.status})}return D(t),!0}async read(t){const e=await this.request("file-read",`${this.fileUrl(t)}?${new URLSearchParams({ref:this.location.branch})}`);if(e.status===404)return await this.checkTarget(),null;D(e);const n=await b(e);if(!n||typeof n.content!="string"||n.encoding!=="base64"||typeof n.last_commit_id!="string"||!n.last_commit_id)throw new g("validation");return{content:S.from(n.content,"base64").toString("utf8"),version:n.last_commit_id}}async list(t){B(t,!0);const e=[];if(!await this.checkTarget())return e;for(let n=1;;n++){const o=new URLSearchParams({ref:this.location.branch,per_page:"100",page:String(n),...t?{path:t}:{}}),r=await this.request("tree",`${this.base}/tree?${o}`);if(r.status===404)return await this.checkTarget(),e;D(r);const i=await b(r);if(!Array.isArray(i)||i.some(a=>!a||typeof a.name!="string"||typeof a.path!="string"||typeof a.type!="string"))throw new g("validation");e.push(...i.map(a=>({name:a.name,path:a.path,kind:a.type==="blob"?"file":a.type==="tree"?"directory":"other"})));const s=r.headers.get("x-next-page");if(!i.length||s===""||s===null&&i.length<100)return e;if(s!==null&&s!==String(n+1))throw new g("validation")}}async write(t,e,n){const o=n.condition;if(o.kind!=="create"&&(o.kind!=="update"||!o.expectedVersion))throw new g("validation");const r=await this.request(o.kind==="create"?"file-create":"file-update",this.fileUrl(t),{method:o.kind==="create"?"POST":"PUT",headers:this.headers,body:JSON.stringify({branch:this.location.branch,commit_message:n.message||"env: write store",content:S.from(e).toString("base64"),encoding:"base64",...o.kind==="update"?{last_commit_id:o.expectedVersion}:{}})});if(await this.rejectPermission(r),[400,404,409,422].includes(r.status)){const i=await this.read(t);if(o.kind==="create"?i!==null:i?.version!==o.expectedVersion)throw new g("conflict",r.status);if(o.kind==="update"&&r.status===400&&i?.content===e)return}if(!r.ok)throw Q(r)}async remove(t,e){if(B(t),!e.expectedVersion)throw new g("validation");const n=await this.request("file-delete",`${this.base}/commits`,{method:"POST",headers:this.headers,body:JSON.stringify({branch:this.location.branch,commit_message:e.message||"env: remove store",actions:[{action:"delete",file_path:t,last_commit_id:e.expectedVersion}]})});if(await this.rejectPermission(n),[400,404,409,422].includes(n.status)&&(await this.read(t))?.version!==e.expectedVersion)throw new g("conflict",n.status);D(n)}}const nt={github:Qu,gitlab:et};function Y(u){const t=nt[u.type];if(!t)throw new g("unsupported");return new t(u,u.token)}function q(u,t){if(!u.capabilities[t])throw new g("unsupported")}const tu=1,ot=C.object({repo:C.string().regex(/^[^/\s]+\/[^/\s]+$/,"\u5FC5\u987B\u662F owner/repo \u5F62\u5F0F"),env:C.string().nullish()}),rt=C.object({schema:C.number().int().positive().default(tu),vars:C.record(C.string(),C.string()).default({}),targets:C.object({envFiles:C.array(C.string().min(1)).optional(),secrets:C.array(ot).optional()}).optional()});function hu(){return{schema:tu,vars:{}}}function N(u){const t=u.trim().replace(/\.json$/i,"");if(!t)throw new Error("store \u540D\u4E0D\u80FD\u4E3A\u7A7A");if(t.includes("/")||t.includes("\\"))throw new Error(`store \u540D\u4E0D\u80FD\u5305\u542B\u8DEF\u5F84\u5206\u9694\u7B26\uFF1A"${u}"`);if(t==="."||t==="..")throw new Error(`store \u540D\u4E0D\u80FD\u662F "${t}"`);if(/[\u0000-\u001F\u007F]/.test(t))throw new Error("store \u540D\u4E0D\u80FD\u5305\u542B\u63A7\u5236\u5B57\u7B26");if(t.length>100)throw new Error("store \u540D\u592A\u957F\uFF08\u4E0A\u9650 100 \u5B57\u7B26\uFF09");return t}function it(u){return/^[A-Z_]\w*$/i.test(u)?u.toUpperCase().startsWith("GITHUB_")?"GITHUB_ \u524D\u7F00\u662F GitHub \u4FDD\u7559\u7684":null:"\u53EA\u5141\u8BB8\u5B57\u6BCD\u3001\u6570\u5B57\u3001\u4E0B\u5212\u7EBF\uFF0C\u4E14\u4E0D\u80FD\u4EE5\u6570\u5B57\u5F00\u5934"}function st(u){return/^[A-Z_][\w.-]*$/i.test(u)}function du(u,t){const e=N(t),n=(u||"").trim().replace(/^\/+|\/+$/g,""),o=n?`${n}/${e}.json`:`${e}.json`;return B(o),o}function at(u,t){let e;try{e=JSON.parse(u)}catch{throw new Error(`store "${t}" \u4E0D\u662F\u5408\u6CD5 JSON`)}const n=rt.safeParse(e);if(!n.success)throw new Error(`store "${t}" \u7ED3\u6784\u4E0D\u5408\u6CD5\uFF1A${n.error.issues.map(o=>`${o.path.join(".")||"(root)"} ${o.message}`).join("; ")}`);return n.data}function ct(u){return`${JSON.stringify({...u,schema:u.schema??tu},null,2)}
|
|
2
|
+
`}async function eu(u,t){q(u,"list");const e=(t||"").trim().replace(/^\/+|\/+$/g,"");return(await u.list(e)).filter(n=>n.kind==="file"&&n.name.toLowerCase().endsWith(".json")).map(n=>n.name.replace(/\.json$/i,"")).sort((n,o)=>n.localeCompare(o))}async function O(u,t,e){const n=du(t,e);q(u,"read");const o=await u.read(n);if(!o)return null;const r=N(e);return{name:r,path:n,version:o.version,store:at(o.content,r)}}async function nu(u,t,e,n,o,r){q(u,"write"),q(u,"conditionalWrite"),await u.write(du(t,e),ct(n),{message:o,condition:r===void 0?{kind:"create"}:{kind:"update",expectedVersion:r}})}function gu(u,t){const e={added:[],updated:[],unchanged:[]};for(const[n,o]of Object.entries(t)){const r=u.vars[n];r===void 0?(u.vars[n]=o,e.added.push(n)):r===o?e.unchanged.push(n):(u.vars[n]=o,e.updated.push(n))}return e}const wu=/^export[ \t]+/,lt=/^([^=]*)=(.*)$/;function Ft(u){const t=u.replace(/[ \t]+$/,"");return t===""||/^[ \t]/.test(t)?null:t}const pt=/^[ \t]*#/;function yu(u){return typeof u=="object"&&u!==null&&u.code==="ENOENT"}async function Et(u){try{return await Ou(u)}catch(t){if(yu(t))return null;throw t}}function ft(u){return u.replace(/\\([nrt"\\])/g,(t,e)=>e==="n"?`
|
|
3
|
+
`:e==="r"?"\r":e==="t"?" ":e)}function ht(u){const t=u.replace(/^[ \t]+/,"");for(const e of t.split(`
|
|
4
|
+
`)){const n=/[ \t]#/.exec(e);if(n!==null)return e.slice(0,n.index).replace(/[ \t]+$/,"")}return t.replace(/[ \t]+$/,"")}function dt(u){if(u==="")return[];const t=u.split(/\r?\n/);return u.endsWith(`
|
|
5
|
+
`)&&t.pop(),t}function Cu(u){for(let t=0;t<u.length;t+=1){if(u[t]==="\\"){t+=1;continue}if(u[t]==='"')return t}return-1}function gt(u,t){const e=u[t];if(pt.test(e))return null;const n=wu.test(e),o=lt.exec(n?e.replace(wu,""):e);if(o===null)return null;const r=Ft(o[1]);if(r===null)return null;const i=o[2];let s=t,a="none",E;if(i.startsWith('"')){let F=i.slice(1),p=Cu(F);for(;p===-1&&s+1<u.length;)s+=1,F+=`
|
|
6
|
+
${u[s]}`,p=Cu(F);a="double",E=ft(p===-1?F:F.slice(0,p))}else if(i.startsWith("'")){const F=i.indexOf("'",1);a="single",E=F===-1?i.slice(1):i.slice(1,F)}else E=ht(i);return{key:r,value:E,exportPrefix:n,quote:a,raw:e,startLine:t,endLine:s}}function W(u){const t=u.includes(`\r
|
|
7
7
|
`)?`\r
|
|
8
8
|
`:`
|
|
9
9
|
`,e=u.endsWith(`
|
|
10
|
-
`),n=
|
|
11
|
-
`){const e=Object.entries(u).map(([n,
|
|
12
|
-
`))return`${t}=${e}`;const n=
|
|
10
|
+
`),n=dt(u),o=new Map,r=[],i=[];for(let s=0;s<n.length;){const a=gt(n,s);if(a===null){s+=1;continue}o.has(a.key)&&!r.includes(a.key)&&r.push(a.key),o.set(a.key,a.value),i.push(a),s=a.endLine+1}return{lines:n,pairs:o,duplicates:r,eol:t,trailingNewline:e,entries:i}}const wt=/[\s"'\\#$`]/;function yt(u){return u!==""&&!wt.test(u)}function Ct(u){return yt(u)?u:`"${u.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\n/g,"\\n").replace(/\r/g,"\\r").replace(/\t/g,"\\t")}"`}function ou(u,t,e){return`${e?"export ":""}${u}=${Ct(t)}`}function Au(u,t,e){return`${u.join(t)}${e?t:""}`}function Bu(u,t){const{pairs:e}=W(u),n=[],o=[],r=[],i=new Map;for(const[s,a]of Object.entries(t))i.set(s,a),e.has(s)?e.get(s)===a?r.push(s):o.push(s):n.push(s);return{added:n,updated:o,unchanged:r,target:i}}function At(u,t){if(u===""){const F=Bt(t);return{content:F,added:Object.keys(t),updated:[],unchanged:[],duplicates:[],changed:F!==u}}const e=W(u),{added:n,updated:o,unchanged:r,target:i}=Bu(u,t),s=e.lines,a=new Map;e.entries.forEach((F,p)=>a.set(F.key,p));for(let F=e.entries.length-1;F>=0;F-=1){const p=e.entries[F];if(a.get(p.key)!==F)continue;const d=i.get(p.key);if(d===void 0||d===p.value)continue;const f=ou(p.key,d,p.exportPrefix);s.splice(p.startLine,p.endLine-p.startLine+1,f)}if(n.length>0){s.length>0&&s[s.length-1].trim()!==""&&s.push("");for(const F of n)s.push(ou(F,t[F],!1))}const E=Au(s,e.eol,e.trailingNewline);return{content:E,added:n,updated:o,unchanged:r,duplicates:e.duplicates,changed:E!==u}}function Bt(u,t=`
|
|
11
|
+
`){const e=Object.entries(u).map(([n,o])=>ou(n,o,!1));return e.length===0?"":Au(e,t,!0)}function Dt(u,t){const{added:e,updated:n,unchanged:o}=Bu(u,t),r=[...W(u).pairs.keys()].filter(i=>!(i in t));return{added:e,updated:n,unchanged:o,localOnly:r}}async function ru(u){try{return await cu(u,"utf8")}catch(t){if(yu(t))return null;throw t}}async function mt(u,t){const e=await Et(u);if(e!==null&&e.isFile()){if(await cu(u,"utf8")!==t){const n=`${u}.bak`;return await Uu(u,n),await lu(u,t,"utf8"),{backupPath:n}}return{backupPath:null}}return await lu(u,t,"utf8"),{backupPath:null}}function Du(){return h.env.GITHUB_ACTIONS==="true"?!0:typeof h.env.GITHUB_ENV=="string"&&h.env.GITHUB_ENV.length>0}function bt(u){let t=`EOF_${Fu(4).toString("hex")}`;for(;u.includes(t);)t=`EOF_${Fu(4).toString("hex")}`;return t}function vt(u){return Object.entries(u).map(([t,e])=>{if(!e.includes(`
|
|
12
|
+
`))return`${t}=${e}`;const n=bt(e);return[`${t}<<${n}`,e,n].join(`
|
|
13
13
|
`)}).join(`
|
|
14
|
-
`)}const
|
|
15
|
-
`)||e.includes("\r")){const n=e.replace(
|
|
16
|
-
`)}function
|
|
17
|
-
`)||u.includes("\r"))for(const t of u.split(/\r?\n/))t!==""&&console.log(`::add-mask::${t}`);console.log(`::add-mask::${u}`)}function
|
|
18
|
-
${a}`,{encoding:"utf8"}),{target:"github_env",injected:
|
|
19
|
-
`),f.exitCode=1}const _t=/^\.env(?:\..+)?$/,Tt=[".bak",".example",".sample",".template",".keys",".enc"];async function Nt(u,t){const[e="list",...n]=t;switch(e){case"list":case"ls":return It(u);case"pull":return Ut(u,n);case"set":return Rt(u,n);case"push":return Gt(u,n);case"setup":return Lt(u,n);default:throw new Error(`\u672A\u77E5\u5B50\u547D\u4EE4 "${e}"\uFF0C\u53EF\u7528\uFF1Alist | pull | set | push | setup | apply\uFF08npx initx env help\uFF09`)}}function j(u,t={}){const e=X(u.store,{token:u.options.string("token"),config:P(u.options),repo:t.repo});return{config:e,client:J(e)}}async function It(u){const{config:t,client:e}=j(u),n=await tu(e,t.path);if(!n.length){l.warn(c(`${t.repo} \u7684 ${t.path}/ \u4E0B\u8FD8\u6CA1\u6709 store`,"yellow")),l.info("\u5EFA\u4E00\u4E2A\uFF1Anpx initx env set <\u540D\u5B57> KEY=value");return}l.info(`${c(t.repo,"blue")} \xB7 ${c(`${t.path}/`,"blue")} \u5171 ${n.length} \u4E2A store\uFF1A`);for(const r of n)l.info(` - ${c(r,"blue")}`)}async function yu(u,t,e){if(e)return N(e);const n=await tu(u,t);if(!n.length)throw new Error("\u4ED3\u5E93\u91CC\u8FD8\u6CA1\u6709 store\u3002\u5148\u5EFA\u4E00\u4E2A\uFF1Anpx initx env set <\u540D\u5B57> KEY=value");if(n.length===1)return n[0];if(!f.stdin.isTTY)throw new Error(`\u6709\u591A\u4E2A store\uFF0C\u975E\u4EA4\u4E92\u73AF\u5883\u4E0B\u5FC5\u987B\u6307\u5B9A\u540D\u5B57\uFF1A
|
|
14
|
+
`)}const $t=/[\s'"$]/,kt=/[\\"$`]/g;function xt(u){return Object.entries(u).map(([t,e])=>{if(e.includes(`
|
|
15
|
+
`)||e.includes("\r")){const n=e.replace(kt,o=>`\\${o}`).replace(/\r\n|\r|\n/g,"\\n");return`${t}="${n}"`}return $t.test(e)?`${t}='${e.replace(/'/g,"'\\''")}'`:`${t}=${e}`}).join(`
|
|
16
|
+
`)}function _t(u){if(u.includes(`
|
|
17
|
+
`)||u.includes("\r"))for(const t of u.split(/\r?\n/))t!==""&&console.log(`::add-mask::${t}`);console.log(`::add-mask::${u}`)}function Tt(u,t={}){const{forceStdout:e=!1,mask:n=!0}=t,o=Object.keys(u),r=[];if(n&&o.length>0&&Du())for(const a of o)_t(u[a]),r.push(a);const i=e?void 0:h.env.GITHUB_ENV;if(i){const a=vt(u);return a!==""&&Gu(i,`
|
|
18
|
+
${a}`,{encoding:"utf8"}),{target:"github_env",injected:o,masked:r}}const s=xt(u);return s!==""&&console.log(s),{target:"stdout",injected:o,masked:r}}const It=/^\.env(?:\..+)?$/,Nt=[".bak",".example",".sample",".template",".keys",".enc"];async function jt(u,t){const[e="list",...n]=t;switch(e){case"list":case"ls":return St(u);case"pull":return Rt(u,n);case"set":return Gt(u,n);case"push":return Lt(u,n);case"setup":return Ht(u,n);default:throw new Error(`\u672A\u77E5\u5B50\u547D\u4EE4 "${e}"\uFF0C\u53EF\u7528\uFF1Alist | pull | set | push | setup | apply\uFF08npx initx env help\uFF09`)}}function R(u,t={}){const e=J(u.store,{token:u.options.string("token"),config:L(u.options),repo:t.repo});return{config:e,client:Y({...e,debug:u.options.boolean("debug")||u.options.boolean("d")})}}async function St(u){const{config:t,client:e}=R(u),n=await eu(e,t.path);if(!n.length){c.warn(l(`${t.repo} \u7684 ${t.path}/ \u4E0B\u8FD8\u6CA1\u6709 store`,"yellow")),c.info("\u5EFA\u4E00\u4E2A\uFF1Anpx initx env set <\u540D\u5B57> KEY=value");return}c.info(`${l(t.repo,"blue")} \xB7 ${l(`${t.path}/`,"blue")} \u5171 ${n.length} \u4E2A store\uFF1A`);for(const o of n)c.info(` - ${l(o,"blue")}`)}async function mu(u,t,e){if(e)return N(e);const n=await eu(u,t);if(!n.length)throw new Error("\u4ED3\u5E93\u91CC\u8FD8\u6CA1\u6709 store\u3002\u5148\u5EFA\u4E00\u4E2A\uFF1Anpx initx env set <\u540D\u5B57> KEY=value");if(n.length===1)return n[0];if(!h.stdin.isTTY)throw new Error(`\u6709\u591A\u4E2A store\uFF0C\u975E\u4EA4\u4E92\u73AF\u5883\u4E0B\u5FC5\u987B\u6307\u5B9A\u540D\u5B57\uFF1A
|
|
20
19
|
${n.join(`
|
|
21
|
-
`)}`);return
|
|
22
|
-
${
|
|
23
|
-
`)}`);const o=await x.select("\u5199\u5230\u54EA\u4E2A\u6587\u4EF6",r);return[r[o]]}async function Ot(){return(await Uu(f.cwd(),{withFileTypes:!0})).filter(u=>u.isFile()&&_t.test(u.name)).map(u=>u.name).filter(u=>!Tt.some(t=>u.endsWith(t))).sort((u,t)=>{const e=n=>n===".env.local"?0:n===".env"?1:2;return e(u)-e(t)||u.localeCompare(t)})}async function Ut(u,t){const{config:e,client:n}=j(u),r=await yu(n,e.path,t[0]),o=await ou(n,e.path,r),i=o.store.vars,s=Object.keys(i);if(!s.length){l.warn(c(`store "${r}" \u91CC\u6CA1\u6709\u4EFB\u4F55\u53D8\u91CF`,"yellow"));return}const a=await St(u,o),E=u.options.boolean("dry-run");for(const F of a){const p=await ru(F)??"",d=wt(p,i);if(!d.changed){l.info(`${c(F,"blue")}: \u5DF2\u7ECF\u662F\u6700\u65B0\u7684\uFF08${s.length} \u4E2A\u53D8\u91CF\uFF0C\u65E0\u9700\u6539\u52A8\uFF09`);continue}if(E){const C=Bt(p,i);l.info(`${c(F,"blue")}\uFF08${c("--dry-run\uFF0C\u672A\u5199\u5165","yellow")}\uFF09\uFF1A`);for(const A of C.added)l.info(c(` + ${A}`,"green"));for(const A of C.updated)l.info(c(` ~ ${A}`,"yellow"));continue}const{backupPath:h}=await At(F,d.content);l.success(c(`${F}: \u65B0\u589E ${d.added.length} \xB7 \u66F4\u65B0 ${d.updated.length} \xB7 \u672A\u53D8 ${d.unchanged.length}`,"green")),h&&l.info(` \u65E7\u6587\u4EF6\u5907\u4EFD\u5728 ${c(h,"blue")}`),d.duplicates.length&&l.warn(c(` \u6CE8\u610F\uFF1A${d.duplicates.join(", ")} \u5728\u6587\u4EF6\u91CC\u51FA\u73B0\u591A\u6B21\uFF0C\u53EA\u66F4\u65B0\u4E86\u6700\u540E\u4E00\u884C`,"yellow"))}}function jt(u){const t={};for(const e of u){const n=e.indexOf("=");if(n<=0)throw new Error("\u53C2\u6570\u8981\u5199\u6210 KEY=value \u5F62\u5F0F");const r=e.slice(0,n).trim(),o=e.slice(n+1);if(!rt(r))throw new Error(`\u53D8\u91CF\u540D\u4E0D\u5408\u6CD5\uFF1A"${r}"`);t[r]=o}if(!Object.keys(t).length)throw new Error("\u81F3\u5C11\u7ED9\u4E00\u4E2A KEY=value");return t}async function Rt(u,t){const[e,...n]=t;if(!e)throw new Error("\u7528\u6CD5\uFF1Anpx initx env set <store \u540D> KEY=value [KEY2=value2 ...]");const r=N(e),o=jt(n),{config:i,client:s}=j(u),a=await U(s,i.path,r),E=a?.store??fu(),F=du(E,o);if(!F.added.length&&!F.updated.length){l.info(`store "${c(r,"blue")}" \u65E0\u9700\u6539\u52A8\uFF08${F.unchanged.length} \u4E2A\u53D8\u91CF\u503C\u76F8\u540C\uFF09`);return}await eu(s,i.path,r,E,`env: set ${Object.keys(o).join(", ")} in ${r}`,a?.version),l.success(c(`store "${r}" \u5DF2\u66F4\u65B0\uFF1A\u65B0\u589E ${F.added.length} \xB7 \u4FEE\u6539 ${F.updated.length}`,"green"));for(const p of F.added)l.info(c(` + ${p}`,"green"));for(const p of F.updated)l.info(c(` ~ ${p}`,"yellow"))}async function Gt(u,t){const[e]=t;if(!e)throw new Error("\u7528\u6CD5\uFF1Anpx initx env push <store \u540D> [--from .env.local] [--prune] [--force]");const n=N(e),r=u.options.string("from")??await Pt(),o=await ru(r);if(o===null)throw new Error(`\u627E\u4E0D\u5230\u6587\u4EF6 "${r}"\uFF08\u7528 --from \u6307\u5B9A\uFF09`);const i=Object.fromEntries(W(o).pairs);if(!Object.keys(i).length)throw new Error(`"${r}" \u91CC\u6CA1\u89E3\u6790\u51FA\u4EFB\u4F55 KEY=value`);const{config:s,client:a}=j(u),E=await U(a,s.path,n),F=E?.store??fu(),p=du(F,i),d=[];if(u.options.boolean("prune"))for(const C of Object.keys(F.vars))C in i||(delete F.vars[C],d.push(C));if(!p.added.length&&!p.updated.length&&!d.length){l.info(`store "${c(n,"blue")}" \u65E0\u9700\u6539\u52A8\uFF08${c(r,"blue")} \u91CC\u7684\u503C\u90FD\u4E00\u6837\uFF09`);return}const h=`env: push ${n} from ${r}`;try{await eu(a,s.path,n,F,h,E?.version)}catch(C){if(!Ju(C)||!u.options.boolean("force"))throw C;const A=await ou(a,s.path,n);l.warn(c("\u8FDC\u7AEF\u5DF2\u66F4\u65B0\uFF0C--force\uFF1A\u4EE5\u672C\u5730\u6587\u4EF6\u4E3A\u51C6\u91CD\u65B0\u5199\u5165","yellow")),await eu(a,s.path,n,F,h,A.version)}l.success(c(`store "${n}" \u5DF2\u66F4\u65B0\uFF1A\u65B0\u589E ${p.added.length} \xB7 \u4FEE\u6539 ${p.updated.length}${d.length?` \xB7 \u5220\u9664 ${d.length}`:""}`,"green"))}async function Pt(){for(const u of[".env.local",".env"])if(await ru(u)!==null)return u;throw new Error("\u5F53\u524D\u76EE\u5F55\u6CA1\u6709 .env.local / .env\uFF08\u7528 --from \u6307\u5B9A\u6587\u4EF6\uFF09")}async function Lt(u,t){const{config:e,client:n}=j(u),r=await yu(n,e.path,t[0]),o=(await ou(n,e.path,r)).store.vars;if(!Object.keys(o).length)throw new Error(`store "${r}" \u91CC\u6CA1\u6709\u4EFB\u4F55\u53D8\u91CF`);if(u.options.boolean("json")){console.log(JSON.stringify(o)),l.info(`\u5DF2\u8F93\u51FA ${Object.keys(o).length} \u4E2A\u53D8\u91CF\uFF08JSON\uFF09`);return}const i=kt(o,{forceStdout:u.options.boolean("stdout"),mask:!u.options.boolean("no-mask")});if(i.target==="github_env"){l.success(c(`\u5DF2\u6CE8\u5165\u672C\u6B21 job \u7684\u540E\u7EED\u6B65\u9AA4\uFF08${i.injected.length} \u4E2A\u53D8\u91CF\uFF0C${i.masked.length} \u4E2A\u5DF2\u8131\u654F\uFF09`,"green"));return}Du()||l.warn(c("\u5F53\u524D\u4E0D\u5728 GitHub Actions \u91CC\uFF0C\u53D8\u91CF\u6253\u5230 stdout\uFF08\u53EF\u4EE5 eval \u6216\u91CD\u5B9A\u5411\uFF09","yellow"))}const mu=32;let iu;function Vt(){return iu||(iu=lu.ready.then(()=>lu)),iu}function Ht(u,t){let e;try{e=u.from_base64(t.trim(),u.base64_variants.ORIGINAL)}catch{throw new Error("GitHub \u516C\u94A5\u89E3\u7801\u5931\u8D25\uFF1A\u5B83\u4E0D\u662F\u5408\u6CD5\u7684 base64\uFF08ORIGINAL \u53D8\u4F53\uFF09\u5B57\u7B26\u4E32\uFF1B\u8BF7\u786E\u8BA4\u4F20\u5165\u7684\u662F public-key \u63A5\u53E3\u8FD4\u56DE\u7684 key \u5B57\u6BB5\uFF0C\u800C\u4E0D\u662F key_id")}if(e.length!==mu)throw new Error(`GitHub \u516C\u94A5\u957F\u5EA6\u4E0D\u6B63\u786E\uFF1AX25519 \u516C\u94A5\u5FC5\u987B\u662F ${mu} \u5B57\u8282\uFF0C\u5B9E\u9645 ${e.length} \u5B57\u8282\u3002 \u8FD9\u79CD\u60C5\u51B5\u901A\u5E38\u662F key_id \u4E0E key \u4E24\u4E2A\u5B57\u6BB5\u5F04\u53CD\u4E86\uFF08\u6216\u628A key_id \u5F53\u6210\u4E86\u516C\u94A5\uFF09\uFF1B\u8BF7\u6539\u7528 public-key \u63A5\u53E3\u8FD4\u56DE\u7684 key \u5B57\u6BB5`);return e}async function Kt(u,t){const e=await Vt(),n=Ht(e,u),r=e.crypto_box_seal(e.from_string(t),n);return e.to_base64(r,e.base64_variants.ORIGINAL)}async function $u(u,t,e={}){const n=await D(u,{...e,headers:{...pu(t),...e.headers??{}}});return m(n),n}function vu(u,t){const[e,n]=u.split("/",2),r=`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(n)}`;return t?`${r}/environments/${encodeURIComponent(t)}/secrets`:`${r}/actions/secrets`}async function Xt(u,t,e){const n=await $u(`${vu(u,e)}/public-key`,t),r=await k(n);if(!r.key_id||!r.key)throw new Error(`\u62FF\u4E0D\u5230 ${u} \u7684\u516C\u94A5\uFF08\u8FD4\u56DE\u4F53\u91CC\u6CA1\u6709 key_id/key\uFF09`);return{keyId:r.key_id,key:r.key}}async function Jt(u,t,e,n,r={}){const{keyId:o,key:i}=await Xt(u,t,r.env),s=await Kt(i,n);return(await $u(`${vu(u,r.env)}/${encodeURIComponent(e)}`,t,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({encrypted_value:s,key_id:o})})).status===201?"created":"updated"}function Yt(u,t,e=f.env){const n=t||e.INITX_ENV_TARGET_TOKEN||(u.type==="github"&&u.apiBaseUrl===b.github?u.token:"");if(!n)throw new Error("GitHub Actions \u76EE\u6807\u9700\u8981\u72EC\u7ACB\u51ED\u636E\uFF1A--target-token \u6216 INITX_ENV_TARGET_TOKEN");return{write(r,o,i,s){return T("github",r),Jt(r,n,o,i,{env:s})}}}const Wt=48*1024;async function Mt(u,t){const[e]=t;if(!e)throw new Error("\u7528\u6CD5\uFF1Anpx initx env apply <store \u540D> --repo <owner/repo> [--env <\u73AF\u5883\u540D>] [--only A,B] [--dry-run]");const n=N(e),r=X(u.store,{token:u.options.string("token"),config:P(u.options)}),o=J(r),i=Yt(r,u.options.string("target-token")),s=await U(o,r.path,n);if(!s)throw new Error(`\u4ED3\u5E93\u91CC\u6CA1\u6709 store "${n}"\u3002\u7528 npx initx env list \u770B\u770B\u6709\u54EA\u4E9B`);const a=s.store.targets?.secrets?.[0],E=u.options.string("repo")??a?.repo;if(!E)throw new Error("\u8981\u6307\u5B9A\u5199\u5165\u76EE\u6807\uFF1A--repo <owner/repo>\uFF0C\u6216\u5728 store \u91CC\u5199 targets.secrets");T("github",E);const F=u.options.string("env")??a?.env??null,p=u.options.string("only")?.split(",").map(w=>w.trim()).filter(Boolean),d=Object.entries(s.store.vars).filter(([w])=>!p||p.includes(w));if(!d.length)throw new Error(p?.length?`--only \u91CC\u6CA1\u6709\u4EFB\u4F55\u53D8\u91CF\u547D\u4E2D store "${n}"`:`store "${n}" \u91CC\u6CA1\u6709\u53D8\u91CF`);const h=[];for(const[w,I]of d){const v=nt(w);if(v){h.push(`${w} \u2014 \u540D\u5B57\u4E0D\u5408\u6CD5\uFF1A${v}`);continue}S.byteLength(I,"utf8")>Wt&&h.push(`${w} \u2014 \u503C\u8D85\u8FC7 48 KB \u4E0A\u9650`)}if(h.length){l.error(c("\u8FD9\u4E9B\u53D8\u91CF\u4E0D\u80FD\u5199\u8FDB Actions secrets\uFF1A","red"));for(const w of h)l.error(c(` ${w}`,"red"));if(!u.options.boolean("skip-invalid"))throw new Error(`\u6709 ${h.length} \u4E2A\u53D8\u91CF\u4E0D\u5408\u6CD5\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u6539\u540D\u540E\u7528 --only \u6392\u9664\uFF0C\u6216\u52A0 --skip-invalid \u8DF3\u8FC7\uFF09`);l.warn(c("--skip-invalid\uFF1A\u8DF3\u8FC7\u8FD9\u4E9B\u53D8\u91CF","yellow"))}const C=new Set(h.map(w=>w.split(" \u2014 ")[0])),A=d.filter(([w])=>!C.has(w));if(u.options.boolean("dry-run")){l.info(`${c("--dry-run","yellow")}\uFF1A\u5C06\u5199\u5165 ${A.length} \u4E2A secret \u2192 ${c(E,"blue")}${F?`\uFF08\u73AF\u5883 ${c(F,"blue")}\uFF09`:"\uFF08\u4ED3\u5E93\u7EA7\uFF09"}`);for(const[w]of A)l.info(` ${c(w,"blue")}`);return}l.info(`\u5199\u5165 ${c(E,"blue")}${F?`\uFF08\u73AF\u5883 ${c(F,"blue")}\uFF09`:"\uFF08\u4ED3\u5E93\u7EA7\uFF09"} \u2026`);const $=[];for(const[w,I]of A)try{const v=await i.write(E,w,I,F);l.success(c(`${w}: ${v==="created"?"\u65B0\u5EFA":"\u66F4\u65B0"}`,"green"))}catch(v){$.push(w),l.error(c(`${w}: \u5931\u8D25 \u2014 ${v.message}`,"red"))}if($.length)throw new Error(`${$.length} \u4E2A secret \u5199\u5165\u5931\u8D25\uFF1A${$.join(", ")}`);l.success(c(`\u5B8C\u6210\uFF1A${A.length} \u4E2A secret \u2192 ${E}`,"green")),F&&l.info("\u73AF\u5883\u7EA7 secret \u9700\u8981\u8BE5 environment \u5DF2\u5B58\u5728\uFF0C\u4E14 job \u5F15\u7528\u5B83\u65F6\u624D\u53EF\u7528")}const R=["type","apiBaseUrl","repo","token","branch","path"],bu="token \u4F1A\u4EE5**\u660E\u6587**\u5B58\u5728 ~/.initx/stores/@initx-plugin/env/store.json\uFF1B\u4ECB\u610F\u7684\u8BDD\u6539\u7528\u73AF\u5883\u53D8\u91CF INITX_ENV_TOKEN\uFF0C\u6216\u6BCF\u6B21\u7528 --token \u4F20\u3002";function su(u){return R.includes(u)}async function zt(u,t,e){const[n="status",...r]=t;switch(n){case"setup":return qt(u);case"set":return G(u,r);case"get":return Zt(u,r);case"list":case"ls":return Qt(u);case"rm":case"remove":return ue(u,r);case"status":return te(u,e);default:xu()}}async function qt(u){if(!f.stdin.isTTY)throw new Error(`setup \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\u3002\u975E\u4EA4\u4E92\u73AF\u5883\u8BF7\u7528\uFF1A
|
|
20
|
+
`)}`);return _.search("\u9009\u4E00\u4E2A store",n)}async function iu(u,t,e){const n=await O(u,t,e);if(!n)throw new Error(`\u4ED3\u5E93\u91CC\u6CA1\u6709 store "${e}"\u3002\u7528 npx initx env list \u770B\u770B\u6709\u54EA\u4E9B`);return n}async function Ut(u,t){const e=u.options.string("to");if(e)return e.split(",").map(i=>i.trim()).filter(Boolean);const n=t.store.targets?.envFiles;if(n?.length)return n;const o=await Ot();if(o.length===1)return o;if(o.length===0){if(!h.stdin.isTTY)return[".env.local"];if(!await _.confirm("\u5F53\u524D\u76EE\u5F55\u6CA1\u6709 .env \u6587\u4EF6\uFF0C\u65B0\u5EFA .env.local\uFF1F"))throw new Error("\u5DF2\u53D6\u6D88\uFF08\u4E5F\u53EF\u4EE5\u7528 --to <\u6587\u4EF6> \u6307\u5B9A\u76EE\u6807\uFF09");return[".env.local"]}if(!h.stdin.isTTY)throw new Error(`\u5F53\u524D\u76EE\u5F55\u6709\u591A\u4E2A .env \u6587\u4EF6\uFF0C\u975E\u4EA4\u4E92\u73AF\u5883\u4E0B\u8BF7\u7528 --to \u6307\u5B9A\uFF1A
|
|
21
|
+
${o.join(`
|
|
22
|
+
`)}`);const r=await _.select("\u5199\u5230\u54EA\u4E2A\u6587\u4EF6",o);return[o[r]]}async function Ot(){return(await Ru(h.cwd(),{withFileTypes:!0})).filter(u=>u.isFile()&&It.test(u.name)).map(u=>u.name).filter(u=>!Nt.some(t=>u.endsWith(t))).sort((u,t)=>{const e=n=>n===".env.local"?0:n===".env"?1:2;return e(u)-e(t)||u.localeCompare(t)})}async function Rt(u,t){const{config:e,client:n}=R(u),o=await mu(n,e.path,t[0]),r=await iu(n,e.path,o),i=r.store.vars,s=Object.keys(i);if(!s.length){c.warn(l(`store "${o}" \u91CC\u6CA1\u6709\u4EFB\u4F55\u53D8\u91CF`,"yellow"));return}const a=await Ut(u,r),E=u.options.boolean("dry-run");for(const F of a){const p=await ru(F)??"",d=At(p,i);if(!d.changed){c.info(`${l(F,"blue")}: \u5DF2\u7ECF\u662F\u6700\u65B0\u7684\uFF08${s.length} \u4E2A\u53D8\u91CF\uFF0C\u65E0\u9700\u6539\u52A8\uFF09`);continue}if(E){const y=Dt(p,i);c.info(`${l(F,"blue")}\uFF08${l("--dry-run\uFF0C\u672A\u5199\u5165","yellow")}\uFF09\uFF1A`);for(const A of y.added)c.info(l(` + ${A}`,"green"));for(const A of y.updated)c.info(l(` ~ ${A}`,"yellow"));continue}const{backupPath:f}=await mt(F,d.content);c.success(l(`${F}: \u65B0\u589E ${d.added.length} \xB7 \u66F4\u65B0 ${d.updated.length} \xB7 \u672A\u53D8 ${d.unchanged.length}`,"green")),f&&c.info(` \u65E7\u6587\u4EF6\u5907\u4EFD\u5728 ${l(f,"blue")}`),d.duplicates.length&&c.warn(l(` \u6CE8\u610F\uFF1A${d.duplicates.join(", ")} \u5728\u6587\u4EF6\u91CC\u51FA\u73B0\u591A\u6B21\uFF0C\u53EA\u66F4\u65B0\u4E86\u6700\u540E\u4E00\u884C`,"yellow"))}}function Pt(u){const t={};for(const e of u){const n=e.indexOf("=");if(n<=0)throw new Error("\u53C2\u6570\u8981\u5199\u6210 KEY=value \u5F62\u5F0F");const o=e.slice(0,n).trim(),r=e.slice(n+1);if(!st(o))throw new Error(`\u53D8\u91CF\u540D\u4E0D\u5408\u6CD5\uFF1A"${o}"`);t[o]=r}if(!Object.keys(t).length)throw new Error("\u81F3\u5C11\u7ED9\u4E00\u4E2A KEY=value");return t}async function Gt(u,t){const[e,...n]=t;if(!e)throw new Error("\u7528\u6CD5\uFF1Anpx initx env set <store \u540D> KEY=value [KEY2=value2 ...]");const o=N(e),r=Pt(n),{config:i,client:s}=R(u),a=await O(s,i.path,o),E=a?.store??hu(),F=gu(E,r);if(!F.added.length&&!F.updated.length){c.info(`store "${l(o,"blue")}" \u65E0\u9700\u6539\u52A8\uFF08${F.unchanged.length} \u4E2A\u53D8\u91CF\u503C\u76F8\u540C\uFF09`);return}await nu(s,i.path,o,E,`env: set ${Object.keys(r).join(", ")} in ${o}`,a?.version),c.success(l(`store "${o}" \u5DF2\u66F4\u65B0\uFF1A\u65B0\u589E ${F.added.length} \xB7 \u4FEE\u6539 ${F.updated.length}`,"green"));for(const p of F.added)c.info(l(` + ${p}`,"green"));for(const p of F.updated)c.info(l(` ~ ${p}`,"yellow"))}async function Lt(u,t){const[e]=t;if(!e)throw new Error("\u7528\u6CD5\uFF1Anpx initx env push <store \u540D> [--from .env.local] [--prune] [--force]");const n=N(e),o=u.options.string("from")??await Vt(),r=await ru(o);if(r===null)throw new Error(`\u627E\u4E0D\u5230\u6587\u4EF6 "${o}"\uFF08\u7528 --from \u6307\u5B9A\uFF09`);const i=Object.fromEntries(W(r).pairs);if(!Object.keys(i).length)throw new Error(`"${o}" \u91CC\u6CA1\u89E3\u6790\u51FA\u4EFB\u4F55 KEY=value`);const{config:s,client:a}=R(u),E=await O(a,s.path,n),F=E?.store??hu(),p=gu(F,i),d=[];if(u.options.boolean("prune"))for(const y of Object.keys(F.vars))y in i||(delete F.vars[y],d.push(y));if(!p.added.length&&!p.updated.length&&!d.length){c.info(`store "${l(n,"blue")}" \u65E0\u9700\u6539\u52A8\uFF08${l(o,"blue")} \u91CC\u7684\u503C\u90FD\u4E00\u6837\uFF09`);return}const f=`env: push ${n} from ${o}`;try{await nu(a,s.path,n,F,f,E?.version)}catch(y){if(!Yu(y)||!u.options.boolean("force"))throw y;const A=await iu(a,s.path,n);c.warn(l("\u8FDC\u7AEF\u5DF2\u66F4\u65B0\uFF0C--force\uFF1A\u4EE5\u672C\u5730\u6587\u4EF6\u4E3A\u51C6\u91CD\u65B0\u5199\u5165","yellow")),await nu(a,s.path,n,F,f,A.version)}c.success(l(`store "${n}" \u5DF2\u66F4\u65B0\uFF1A\u65B0\u589E ${p.added.length} \xB7 \u4FEE\u6539 ${p.updated.length}${d.length?` \xB7 \u5220\u9664 ${d.length}`:""}`,"green"))}async function Vt(){for(const u of[".env.local",".env"])if(await ru(u)!==null)return u;throw new Error("\u5F53\u524D\u76EE\u5F55\u6CA1\u6709 .env.local / .env\uFF08\u7528 --from \u6307\u5B9A\u6587\u4EF6\uFF09")}async function Ht(u,t){const{config:e,client:n}=R(u),o=await mu(n,e.path,t[0]),r=(await iu(n,e.path,o)).store.vars;if(!Object.keys(r).length)throw new Error(`store "${o}" \u91CC\u6CA1\u6709\u4EFB\u4F55\u53D8\u91CF`);if(u.options.boolean("json")){console.log(JSON.stringify(r)),c.info(`\u5DF2\u8F93\u51FA ${Object.keys(r).length} \u4E2A\u53D8\u91CF\uFF08JSON\uFF09`);return}const i=Tt(r,{forceStdout:u.options.boolean("stdout"),mask:!u.options.boolean("no-mask")});if(i.target==="github_env"){c.success(l(`\u5DF2\u6CE8\u5165\u672C\u6B21 job \u7684\u540E\u7EED\u6B65\u9AA4\uFF08${i.injected.length} \u4E2A\u53D8\u91CF\uFF0C${i.masked.length} \u4E2A\u5DF2\u8131\u654F\uFF09`,"green"));return}Du()||c.warn(l("\u5F53\u524D\u4E0D\u5728 GitHub Actions \u91CC\uFF0C\u53D8\u91CF\u6253\u5230 stdout\uFF08\u53EF\u4EE5 eval \u6216\u91CD\u5B9A\u5411\uFF09","yellow"))}const bu=32;let su;function Kt(){return su||(su=pu.ready.then(()=>pu)),su}function Xt(u,t){let e;try{e=u.from_base64(t.trim(),u.base64_variants.ORIGINAL)}catch{throw new Error("GitHub \u516C\u94A5\u89E3\u7801\u5931\u8D25\uFF1A\u5B83\u4E0D\u662F\u5408\u6CD5\u7684 base64\uFF08ORIGINAL \u53D8\u4F53\uFF09\u5B57\u7B26\u4E32\uFF1B\u8BF7\u786E\u8BA4\u4F20\u5165\u7684\u662F public-key \u63A5\u53E3\u8FD4\u56DE\u7684 key \u5B57\u6BB5\uFF0C\u800C\u4E0D\u662F key_id")}if(e.length!==bu)throw new Error(`GitHub \u516C\u94A5\u957F\u5EA6\u4E0D\u6B63\u786E\uFF1AX25519 \u516C\u94A5\u5FC5\u987B\u662F ${bu} \u5B57\u8282\uFF0C\u5B9E\u9645 ${e.length} \u5B57\u8282\u3002 \u8FD9\u79CD\u60C5\u51B5\u901A\u5E38\u662F key_id \u4E0E key \u4E24\u4E2A\u5B57\u6BB5\u5F04\u53CD\u4E86\uFF08\u6216\u628A key_id \u5F53\u6210\u4E86\u516C\u94A5\uFF09\uFF1B\u8BF7\u6539\u7528 public-key \u63A5\u53E3\u8FD4\u56DE\u7684 key \u5B57\u6BB5`);return e}async function Jt(u,t){const e=await Kt(),n=Xt(e,u),o=e.crypto_box_seal(e.from_string(t),n);return e.to_base64(o,e.base64_variants.ORIGINAL)}async function vu(u,t,e={}){const n=await x(u,{...e,headers:{...Eu(t),...e.headers??{}}});return D(n),n}function $u(u,t){const[e,n]=u.split("/",2),o=`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(n)}`;return t?`${o}/environments/${encodeURIComponent(t)}/secrets`:`${o}/actions/secrets`}async function Yt(u,t,e){const n=await vu(`${$u(u,e)}/public-key`,t),o=await b(n);if(!o.key_id||!o.key)throw new Error(`\u62FF\u4E0D\u5230 ${u} \u7684\u516C\u94A5\uFF08\u8FD4\u56DE\u4F53\u91CC\u6CA1\u6709 key_id/key\uFF09`);return{keyId:o.key_id,key:o.key}}async function qt(u,t,e,n,o={}){const{keyId:r,key:i}=await Yt(u,t,o.env),s=await Jt(i,n);return(await vu(`${$u(u,o.env)}/${encodeURIComponent(e)}`,t,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({encrypted_value:s,key_id:r})})).status===201?"created":"updated"}function Wt(u,t,e=h.env){const n=t||e.INITX_ENV_TARGET_TOKEN||(u.type==="github"&&u.apiBaseUrl===k.github?u.token:"");if(!n)throw new Error("GitHub Actions \u76EE\u6807\u9700\u8981\u72EC\u7ACB\u51ED\u636E\uFF1A--target-token \u6216 INITX_ENV_TARGET_TOKEN");return{write(o,r,i,s){return I("github",o),qt(o,n,r,i,{env:s})}}}const Mt=48*1024;async function zt(u,t){const[e]=t;if(!e)throw new Error("\u7528\u6CD5\uFF1Anpx initx env apply <store \u540D> --repo <owner/repo> [--env <\u73AF\u5883\u540D>] [--only A,B] [--dry-run]");const n=N(e),o=J(u.store,{token:u.options.string("token"),config:L(u.options)}),r=Y({...o,debug:u.options.boolean("debug")||u.options.boolean("d")}),i=Wt(o,u.options.string("target-token")),s=await O(r,o.path,n);if(!s)throw new Error(`\u4ED3\u5E93\u91CC\u6CA1\u6709 store "${n}"\u3002\u7528 npx initx env list \u770B\u770B\u6709\u54EA\u4E9B`);const a=s.store.targets?.secrets?.[0],E=u.options.string("repo")??a?.repo;if(!E)throw new Error("\u8981\u6307\u5B9A\u5199\u5165\u76EE\u6807\uFF1A--repo <owner/repo>\uFF0C\u6216\u5728 store \u91CC\u5199 targets.secrets");I("github",E);const F=u.options.string("env")??a?.env??null,p=u.options.string("only")?.split(",").map(w=>w.trim()).filter(Boolean),d=Object.entries(s.store.vars).filter(([w])=>!p||p.includes(w));if(!d.length)throw new Error(p?.length?`--only \u91CC\u6CA1\u6709\u4EFB\u4F55\u53D8\u91CF\u547D\u4E2D store "${n}"`:`store "${n}" \u91CC\u6CA1\u6709\u53D8\u91CF`);const f=[];for(const[w,j]of d){const v=it(w);if(v){f.push(`${w} \u2014 \u540D\u5B57\u4E0D\u5408\u6CD5\uFF1A${v}`);continue}S.byteLength(j,"utf8")>Mt&&f.push(`${w} \u2014 \u503C\u8D85\u8FC7 48 KB \u4E0A\u9650`)}if(f.length){c.error(l("\u8FD9\u4E9B\u53D8\u91CF\u4E0D\u80FD\u5199\u8FDB Actions secrets\uFF1A","red"));for(const w of f)c.error(l(` ${w}`,"red"));if(!u.options.boolean("skip-invalid"))throw new Error(`\u6709 ${f.length} \u4E2A\u53D8\u91CF\u4E0D\u5408\u6CD5\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u6539\u540D\u540E\u7528 --only \u6392\u9664\uFF0C\u6216\u52A0 --skip-invalid \u8DF3\u8FC7\uFF09`);c.warn(l("--skip-invalid\uFF1A\u8DF3\u8FC7\u8FD9\u4E9B\u53D8\u91CF","yellow"))}const y=new Set(f.map(w=>w.split(" \u2014 ")[0])),A=d.filter(([w])=>!y.has(w));if(u.options.boolean("dry-run")){c.info(`${l("--dry-run","yellow")}\uFF1A\u5C06\u5199\u5165 ${A.length} \u4E2A secret \u2192 ${l(E,"blue")}${F?`\uFF08\u73AF\u5883 ${l(F,"blue")}\uFF09`:"\uFF08\u4ED3\u5E93\u7EA7\uFF09"}`);for(const[w]of A)c.info(` ${l(w,"blue")}`);return}c.info(`\u5199\u5165 ${l(E,"blue")}${F?`\uFF08\u73AF\u5883 ${l(F,"blue")}\uFF09`:"\uFF08\u4ED3\u5E93\u7EA7\uFF09"} \u2026`);const m=[];for(const[w,j]of A)try{const v=await i.write(E,w,j,F);c.success(l(`${w}: ${v==="created"?"\u65B0\u5EFA":"\u66F4\u65B0"}`,"green"))}catch(v){m.push(w),c.error(l(`${w}: \u5931\u8D25 \u2014 ${v.message}`,"red"))}if(m.length)throw new Error(`${m.length} \u4E2A secret \u5199\u5165\u5931\u8D25\uFF1A${m.join(", ")}`);c.success(l(`\u5B8C\u6210\uFF1A${A.length} \u4E2A secret \u2192 ${E}`,"green")),F&&c.info("\u73AF\u5883\u7EA7 secret \u9700\u8981\u8BE5 environment \u5DF2\u5B58\u5728\uFF0C\u4E14 job \u5F15\u7528\u5B83\u65F6\u624D\u53EF\u7528")}const P=["type","apiBaseUrl","repo","token","branch","path"],ku="token \u4F1A\u4EE5**\u660E\u6587**\u5B58\u5728 ~/.initx/stores/@initx-plugin/env/store.json\uFF1B\u4ECB\u610F\u7684\u8BDD\u6539\u7528\u73AF\u5883\u53D8\u91CF INITX_ENV_TOKEN\uFF0C\u6216\u6BCF\u6B21\u7528 --token \u4F20\u3002";function au(u){return P.includes(u)}async function Zt(u,t,e){const[n="status",...o]=t;switch(n){case"setup":return Qt(u);case"set":return G(u,o);case"get":return ue(u,o);case"list":case"ls":return te(u);case"rm":case"remove":return ee(u,o);case"status":return ne(u,e);default:_u()}}async function Qt(u){if(!h.stdin.isTTY)throw new Error(`setup \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\u3002\u975E\u4EA4\u4E92\u73AF\u5883\u8BF7\u7528\uFF1A
|
|
24
23
|
npx initx env-config set repo <owner/repo>
|
|
25
|
-
npx initx env-config set token <pat>`);const t=
|
|
24
|
+
npx initx env-config set token <pat>`);const t=U(u),e=await _.input(`vault \u4ED3\u5E93\uFF08${t.type}\uFF09`,{default:M(u,"repo"),required:!0});G(u,["repo",e]);const n=await _.password(`${t.type} token\uFF08\u56DE\u8F66\u4FDD\u7559\u5F53\u524D\u503C\uFF09`,{mask:"*"});n&&G(u,["token",n]);const o=await _.input("\u5206\u652F",{default:M(u,"branch")||H});G(u,["branch",o||H]);const r=await _.input("store \u76EE\u5F55",{default:M(u,"path")||K});G(u,["path",r||K]),c.success(l("\u672C\u5730 vault \u914D\u7F6E\u5DF2\u4FDD\u5B58","green")),c.warn(l(ku,"yellow"))}function G(u,t){const[e,...n]=t;if(!e||!au(e))throw new Error(`\u7528\u6CD5\uFF1Anpx initx env-config set <${P.join("|")}> <\u503C>`);const o=n.join(" ").trim();if(!o)throw new Error(`${e} \u7684\u503C\u4E0D\u80FD\u4E3A\u7A7A`);const r=U(u);if(e==="type"||e==="apiBaseUrl"){if(e==="type"&&o!=="github"&&o!=="gitlab")throw new Error("type \u5FC5\u987B\u662F github \u6216 gitlab");const i=e==="type"?o:r.type,s=e==="apiBaseUrl"?T(o):i===r.type?r.apiBaseUrl:k[i],a=r.type===i&&r.apiBaseUrl===s;u.storage={...a?u.storage||{repo:u.repo,branch:u.branch,path:u.path}:{},type:i,apiBaseUrl:s}}else e==="token"?u.storage?(u.credentials??={})[X(r.type,r.apiBaseUrl)]=o:u.token=o:(e==="repo"&&I(r.type,o),e==="path"&&B(o),u.storage?u.storage[e]=o:u[e]=o);if(e==="token"){c.success(l(`token \u5DF2\u4FDD\u5B58\uFF1A${uu(o)}`,"green")),c.warn(l(ku,"yellow"));return}c.success(`${e} = ${l(o,"green")}`)}function ue(u,t){const[e]=t;if(!e||!au(e))throw new Error(`\u7528\u6CD5\uFF1Anpx initx env-config get <${P.join("|")}>`);c.info(`${e} = ${l(xu(u,e),"blue")}`)}function te(u){for(const t of P)c.info(`${t}: ${l(xu(u,t),"blue")}`)}function ee(u,t){const[e]=t;if(!e||!au(e))throw new Error(`\u7528\u6CD5\uFF1Anpx initx env-config rm <${P.join("|")}>`);if(e==="token"){const n=U(u);delete u.credentials?.[X(n.type,n.apiBaseUrl)],n.type==="github"&&n.apiBaseUrl===k.github&&delete u.token}else e==="type"||e==="apiBaseUrl"?delete u.storage:u.storage?delete u.storage[e]:delete u[e];c.success(l(`\u5DF2\u6E05\u9664 ${e}`,"green"))}async function ne(u,t){const e=L(t);let n;try{n=J(u,{token:t.string("token"),config:e})}catch(i){if(i instanceof V)throw i;c.warn(l(i.message,"yellow"));return}if(c.info(`\u5B58\u50A8\u540E\u7AEF: ${l(n.type,"blue")}`),c.info(`API \u5730\u5740: ${l(n.apiBaseUrl,"blue")}`),c.info(`\u914D\u7F6E\u6765\u6E90: ${l(n.configSource,"blue")}`),c.info(`\u5B57\u6BB5\u6765\u6E90: ${l(JSON.stringify(n.sources),"gray")}`),c.info(`vault \u4ED3\u5E93: ${l(n.repo,"blue")}`),c.info(`\u5206\u652F: ${l(n.branch,"blue")}`),c.info(`store \u76EE\u5F55: ${l(n.path,"blue")}`),c.info(`token: ${l(uu(n.token),"yellow")}\uFF08\u6765\u81EA ${n.tokenSource}\uFF09`),t.boolean("offline")){c.info(l("\uFF08--offline\uFF1A\u8DF3\u8FC7\u8FDE\u901A\u6027\u68C0\u67E5\uFF09","gray"));return}const o=Y({...n,debug:t.boolean("debug")||t.boolean("d")}),r=await eu(o,n.path);c.success(l(`\u8FDE\u901A\u6B63\u5E38\uFF0C${n.path}/ \u4E0B\u6709 ${r.length} \u4E2A store`,"green"))}function M(u,t){const e=U(u);return t==="type"||t==="apiBaseUrl"?e[t]:t==="token"?u.credentials?.[X(e.type,e.apiBaseUrl)]||(e.type==="github"&&e.apiBaseUrl===k.github?u.token:void 0):u.storage?u.storage[t]:u[t]}function xu(u,t){const e=M(u,t);return t==="token"?uu(e||""):e??"(\u672A\u8BBE\u7F6E)"}function oe(){_u()}function _u(){c.info(`
|
|
26
25
|
\u7528\u6CD5\uFF1Anpx initx env-config <\u547D\u4EE4>
|
|
27
26
|
|
|
28
27
|
setup \u4EA4\u4E92\u5F0F\u914D\u7F6E\u5F53\u524D\u672C\u5730\u540E\u7AEF\uFF08repo / token / branch / path\uFF09
|
|
@@ -45,9 +44,7 @@ get/list/set/rm \u4EC5\u64CD\u4F5C\u672C\u5730\u914D\u7F6E\uFF1B\u5207\u6362 typ
|
|
|
45
44
|
npx initx env-config set type gitlab
|
|
46
45
|
npx initx env-config set apiBaseUrl https://gitlab.example.com/api/v4
|
|
47
46
|
npx initx env-config set repo group/subgroup/vault
|
|
48
|
-
`)}function
|
|
49
|
-
`),re(p)}catch(n){const r=e==="\u53D8\u91CF\u6821\u9A8C"||e==="\u53C2\u6570"?`\uFF1A${n.message}`:"";f.stderr.write(`${c(`env run: ${e}\u5931\u8D25${r}`,"red","stderr")}
|
|
50
|
-
`),f.exitCode=1}}const ae=["list","ls","pull","set","push","setup","apply","run","help"],ce=["setup","set","get","list","ls","rm","remove","status","help"];class Fe extends Iu{defaultStore={branch:V,path:H};rules=[{matching:"env",description:"Env vars from a private repo: env list | pull | set | push | setup | apply | run",optional:[void 0,...ae]},{matching:"env-config",description:"Configure GitHub/GitLab vault storage and check connectivity",optional:[void 0,...ce]}];async handle(t,...e){try{await this.dispatch(t,...e)}catch(n){xt(n)}}async dispatch(t,...e){const n=e.filter(a=>typeof a=="string"),r=Ku(t.cliOptions,t.optionsList),o=t.store??{};if(t.key==="env-config"){if(n[0]==="help"||r.boolean("help")){ee();return}await zt(o,n,r);return}if(n[0]==="run"&&!r.boolean("help")&&!r.boolean("h")){await se({store:o,options:r},n.slice(1));return}if(!n.length||n[0]==="help"||r.boolean("help")||r.boolean("h")){le();return}const[i,...s]=n;if(i==="apply"){await Mt({store:o,options:r},s);return}await Nt({store:o,options:r},[i,...s])}}function le(){console.log(`
|
|
47
|
+
`)}function Tu(u){return 128+(Vu.signals[u]??1)}function re(u,t,e){return new Promise(n=>{let o,r,i,s=!1;const a=f=>{const y=f.code;return{code:y==="ENOENT"?127:y==="EACCES"?126:1,errorCode:y??"UNKNOWN"}},E=f=>{s||(s=!0,clearTimeout(r),h.removeListener("SIGINT",p),h.removeListener("SIGTERM",d),n(f))},F=f=>{if(!(s||i||o.exitCode!==null||o.signalCode!==null)){i=f;try{o.kill(f)}catch{}r=setTimeout(()=>{try{o.kill("SIGKILL")}catch{}finally{o.unref(),E({code:Tu(f),signal:f})}},5e3)}};function p(){F("SIGINT")}function d(){F("SIGTERM")}try{o=Hu(u,t,{env:e,stdio:"inherit",shell:!1})}catch(f){E(a(f));return}h.on("SIGINT",p),h.on("SIGTERM",d),o.once("error",f=>E(a(f))),o.once("close",(f,y)=>{const A=i??y??void 0;E(A?{code:Tu(A),signal:A}:{code:f??1})})})}function ie(u){if(h.exitCode=u.code,u.signal&&h.platform!=="win32"){const t=u.signal;h.once("beforeExit",()=>{try{h.kill(h.pid,t)}catch{h.exitCode=u.code}})}}const Iu="\u7528\u6CD5\uFF1Ainitx env run <store> [--config <file>] [--token <token>] -- <command> [...args]";function se(u,t){if(u.length!==1||!u[0])throw new Error(Iu);const e=N(u[0]);if(!Array.isArray(t)||!t.every(n=>typeof n=="string")||!t[0]?.trim())throw new Error(Iu);if(t.some(n=>n.includes("\0")))throw new Error("\u547D\u4EE4\u6216\u53C2\u6570\u4E0D\u80FD\u5305\u542B NUL");return{name:e,command:t[0],args:t.slice(1)}}function ae(u,t=h.env,e=h.platform){const n={...t},o=new Set;for(const[r,i]of Object.entries(u)){if(!/^[A-Z_]\w*$/i.test(r))throw new Error(`\u53D8\u91CF\u540D ${JSON.stringify(r)} \u4E0D\u5408\u6CD5\uFF1A\u53EA\u5141\u8BB8\u5B57\u6BCD\u3001\u6570\u5B57\u3001\u4E0B\u5212\u7EBF\uFF0C\u4E0D\u80FD\u4EE5\u6570\u5B57\u5F00\u5934`);if(typeof i!="string"||i.includes("\0"))throw new Error(`\u53D8\u91CF ${JSON.stringify(r)} \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u4E14\u4E0D\u80FD\u5305\u542B NUL`);const s=e==="win32"?r.toUpperCase():r;if(o.has(s))throw new Error(`\u53D8\u91CF ${JSON.stringify(r)} \u5728 Windows \u4E0A\u5B58\u5728\u5927\u5C0F\u5199\u51B2\u7A81`);o.add(s)}if(e==="win32"){const r=new Set;for(const i of Object.keys(n)){const s=i.toUpperCase();o.has(s)||r.has(s)?delete n[i]:r.add(s)}}return{...n,...u}}async function ce(u,t){let e="\u53C2\u6570";try{const n=se(t,u.options.raw["--"]),o=new Set(["--","token","config","debug","d"]);if(Object.keys(u.options.raw).some(d=>!o.has(d)))throw new Error("run \u53EA\u652F\u6301 --token / --config \u548C\u5168\u5C40 --debug / -d\uFF1B\u5B50\u8FDB\u7A0B\u53C2\u6570\u5FC5\u987B\u653E\u5728 -- \u540E");const r=u.options.raw.token;if(r!==void 0&&typeof r!="string"&&typeof r!="number")throw new Error("--token \u9700\u8981\u5355\u4E2A\u503C");const i=u.options.raw.config;if(i!==void 0&&(typeof i!="string"||!i))throw new Error("--config \u9700\u8981\u5355\u4E2A\u6587\u4EF6\u8DEF\u5F84");e="\u914D\u7F6E";const s=J(u.store,{token:u.options.string("token"),config:L(u.options)});e="\u8BFB\u53D6 store";const a=Y({...s,debug:u.options.boolean("debug")||u.options.boolean("d")}),E=await O(a,s.path,n.name);if(!E)throw new Error("store \u4E0D\u5B58\u5728");e="\u53D8\u91CF\u6821\u9A8C";const F=ae(E.store.vars);e="\u542F\u52A8\u5B50\u8FDB\u7A0B";const p=await re(n.command,n.args,F);p.errorCode&&c.error(l(`env run: \u542F\u52A8\u5931\u8D25\uFF08${p.errorCode}\uFF09`,"red")),ie(p)}catch(n){const o=e==="\u53D8\u91CF\u6821\u9A8C"||e==="\u53C2\u6570"?`\uFF1A${n.message}`:"";c.error(l(`env run: ${e}\u5931\u8D25${o}`,"red")),h.exitCode=1}}const le=["list","ls","pull","set","push","setup","apply","run","help"],Fe=["setup","set","get","list","ls","rm","remove","status","help"];class pe extends ju{defaultStore={branch:H,path:K};rules=[{matching:"env",description:"Env vars from a private repo: env list | pull | set | push | setup | apply | run",optional:[void 0,...le]},{matching:"env-config",description:"Configure GitHub/GitLab vault storage and check connectivity",optional:[void 0,...Fe]}];async handle(t,...e){try{await this.dispatch(t,...e)}catch(n){ut(n)}}async dispatch(t,...e){const n=e.filter(a=>typeof a=="string"),o=Xu(t.cliOptions,t.optionsList);c.setLevel(o.boolean("debug")||o.boolean("d")?"debug":"info");const r=t.store??{};if(t.key==="env-config"){if(n[0]==="help"||o.boolean("help")){oe();return}await Zt(r,n,o);return}if(n[0]==="run"&&!o.boolean("help")&&!o.boolean("h")){await ce({store:r,options:o},n.slice(1));return}if(!n.length||n[0]==="help"||o.boolean("help")||o.boolean("h")){Ee();return}const[i,...s]=n;if(i==="apply"){await zt({store:r,options:o},s);return}await jt({store:r,options:o},[i,...s])}}function Ee(){c.info(`
|
|
51
48
|
\u7528\u6CD5\uFF1Anpx initx env <\u547D\u4EE4>
|
|
52
49
|
|
|
53
50
|
list \u5217\u51FA vault \u4ED3\u5E93\u91CC\u6240\u6709 store
|
|
@@ -84,4 +81,4 @@ get/list/set/rm \u4EC5\u64CD\u4F5C\u672C\u5730\u914D\u7F6E\uFF1B\u5207\u6362 typ
|
|
|
84
81
|
npx initx env pull mail-peon-publish
|
|
85
82
|
npx initx env setup mail-peon-publish --token "$GITHUB_TOKEN"
|
|
86
83
|
npx initx env apply mail-peon-publish --repo mail-peon/mail-peon
|
|
87
|
-
`)}export{
|
|
84
|
+
`)}export{pe as default};
|
package/package.json
CHANGED