@kalphq/cli 0.0.0-dev-20260513002146 → 0.0.0-dev-20260513005156

package/dist/{chunk-TNKYKA7N.js → chunk-GNQI376N.js}

@@ -1,12 +1,58 @@
 #!/usr/bin/env node
 import {
-  getCloudflareIdentity
-} from "./chunk-5RODADXW.js";
+  ensureGlobalConfigDir
+} from "./chunk-FO24J6XL.js";
 
-// src/utils/providers/cloudflare.ts
-import { execa } from "execa";
-import { mkdtemp, readFile, rm, writeFile } from "fs/promises";
+// src/utils/auth.ts
+import { readFile, writeFile } from "fs/promises";
 import { join } from "path";
+import { execa } from "execa";
+var AUTH_FILE = async () => join(await ensureGlobalConfigDir(), "auth.json");
+async function getCloudflareIdentity() {
+  try {
+    const run = async (args) => execa("npx", args, {
+      env: { FORCE_COLOR: "0", CLOUDFLARE_OUTPUT_FORMAT: "json" }
+    });
+    const firstAttempt = await run([
+      "wrangler",
+      "whoami",
+      "--output-format",
+      "json"
+    ]).catch(() => null);
+    if (firstAttempt) {
+      return JSON.parse(firstAttempt.stdout);
+    }
+    const fallback = await run(["wrangler", "whoami", "--json"]);
+    return JSON.parse(fallback.stdout);
+  } catch {
+    return null;
+  }
+}
+async function saveAuthConfig(config) {
+  const authPath = await AUTH_FILE();
+  await writeFile(authPath, JSON.stringify(config, null, 2), "utf-8");
+}
+async function getAuthConfig() {
+  try {
+    const authPath = await AUTH_FILE();
+    const content = await readFile(authPath, "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return null;
+  }
+}
+async function requireAuth() {
+  const auth = await getAuthConfig();
+  if (!auth || new Date(auth.expiresAt).getTime() <= Date.now()) {
+    throw new Error("Not authenticated. Run `kalp login` first.");
+  }
+  return auth;
+}
+
+// src/utils/providers/cloudflare.ts
+import { execa as execa2 } from "execa";
+import { mkdtemp, readFile as readFile2, rm, writeFile as writeFile2 } from "fs/promises";
+import { join as join2 } from "path";
 import { tmpdir } from "os";
 function parseNamespaceList(stdout) {
   try {
@@ -21,6 +67,29 @@ function parseNamespaceList(stdout) {
   }
   return [];
 }
+function parseSecretsList(stdout) {
+  const trimmed = stdout.trim();
+  if (!trimmed) return [];
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (!Array.isArray(parsed)) return [];
+    const secrets = [];
+    for (const item of parsed) {
+      const record = item;
+      const name = record.name;
+      if (typeof name !== "string" || name.length === 0) continue;
+      const type = typeof record.type === "string" ? record.type : void 0;
+      if (type) {
+        secrets.push({ name, type });
+      } else {
+        secrets.push({ name });
+      }
+    }
+    return secrets;
+  } catch {
+    return [];
+  }
+}
 function findWorkerUrl(output) {
   const match = output.match(/https:\/\/[^\s]+\.workers\.dev/);
   return match?.[0] ?? null;
@@ -83,7 +152,7 @@ function parseCustomDomainsFromStatusOutput(statusJson) {
 }
 async function resolveCustomDomains(params) {
   const { cwd, configPath, workerName } = params;
-  const status = await execa(
+  const status = await execa2(
     "npx",
     [
       "wrangler",
@@ -99,13 +168,13 @@ async function resolveCustomDomains(params) {
   ).catch(() => null);
   const fromStatus = status ? parseCustomDomainsFromStatusOutput(status.stdout) : [];
   if (fromStatus.length > 0) return fromStatus;
-  const configText = await readFile(configPath, "utf-8").catch(() => "");
+  const configText = await readFile2(configPath, "utf-8").catch(() => "");
   return extractCustomDomainsFromRoutesConfig(configText);
 }
 var cloudflareProvider = {
   name: "cloudflare",
   async login() {
-    await execa("npx", ["wrangler", "login"], { stdio: "inherit" });
+    await execa2("npx", ["wrangler", "login"], { stdio: "inherit" });
   },
   async whoami() {
     const identity = await getCloudflareIdentity();
@@ -116,19 +185,48 @@ var cloudflareProvider = {
     return { provider: "cloudflare", accountId, email };
   },
   async putSecret({ cwd, configPath, name, value }) {
-    await execa(
+    await execa2(
       "npx",
       ["wrangler", "secret", "put", name, "--config", configPath],
       { cwd, input: `${value}
 ` }
     );
   },
+  async listSecrets({ cwd, configPath }) {
+    const jsonAttempt = await execa2(
+      "npx",
+      [
+        "wrangler",
+        "secret",
+        "list",
+        "--config",
+        configPath,
+        "--format",
+        "json"
+      ],
+      { cwd }
+    ).catch(() => null);
+    if (jsonAttempt) return parseSecretsList(jsonAttempt.stdout);
+    const fallback = await execa2(
+      "npx",
+      ["wrangler", "secret", "list", "--config", configPath],
+      { cwd }
+    );
+    return parseSecretsList(fallback.stdout);
+  },
+  async deleteSecret({ cwd, configPath, name }) {
+    await execa2(
+      "npx",
+      ["wrangler", "secret", "delete", name, "--config", configPath],
+      { cwd }
+    );
+  },
   async deployRuntime({ cwd, configPath, useSecretsFile }) {
     const args = useSecretsFile ? ["wrangler", "deploy", "--config", configPath, "--secrets-file", ".env"] : ["wrangler", "deploy", "--config", configPath];
-    const deploy = await execa("npx", args, { cwd });
+    const deploy = await execa2("npx", args, { cwd });
     const rawOutput = [deploy.stdout, deploy.stderr].filter(Boolean).join("\n");
     const workerUrl = findWorkerUrl(rawOutput);
-    const configText = await readFile(configPath, "utf-8").catch(() => null);
+    const configText = await readFile2(configPath, "utf-8").catch(() => null);
     const workerName = configText?.match(/"name"\s*:\s*"([^"]+)"/)?.[1];
     const customDomains = workerName ? await resolveCustomDomains({ cwd, configPath, workerName }).catch(() => []) : [];
     if (!workerUrl) {
@@ -144,7 +242,7 @@ var cloudflareProvider = {
     return { workerUrl, customDomains, rawOutput };
   },
   async putManifest({ cwd, configPath, key, jsonPath }) {
-    await execa(
+    await execa2(
       "npx",
       [
         "wrangler",
@@ -164,7 +262,7 @@ var cloudflareProvider = {
     );
   },
   async putValue({ cwd, configPath, key, value }) {
-    await execa(
+    await execa2(
       "npx",
       [
         "wrangler",
@@ -183,7 +281,7 @@ var cloudflareProvider = {
     );
   },
   async deleteValue({ cwd, configPath, key }) {
-    await execa(
+    await execa2(
       "npx",
       [
         "wrangler",
@@ -201,7 +299,7 @@ var cloudflareProvider = {
     );
   },
   async getValue({ cwd, configPath, key }) {
-    const result = await execa(
+    const result = await execa2(
       "npx",
       [
         "wrangler",
@@ -221,13 +319,13 @@ var cloudflareProvider = {
     return output ? output : null;
   },
   async listNamespaces({ cwd, configPath }) {
-    const json = await execa(
+    const json = await execa2(
       "npx",
       ["wrangler", "kv", "namespace", "list", "--config", configPath, "--json"],
       { cwd }
     ).catch(() => null);
     if (json) return parseNamespaceList(json.stdout);
-    const plain = await execa(
+    const plain = await execa2(
       "npx",
       ["wrangler", "kv", "namespace", "list", "--config", configPath],
       { cwd }
@@ -242,6 +340,8 @@ function resolveProvider() {
 }
 
 export {
+  saveAuthConfig,
+  requireAuth,
   resolveProvider
 };
-//# sourceMappingURL=chunk-TNKYKA7N.js.map
+//# sourceMappingURL=chunk-GNQI376N.js.map

package/dist/chunk-GNQI376N.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/auth.ts","../src/utils/providers/cloudflare.ts","../src/utils/providers/index.ts"],"sourcesContent":["import { readFile, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { execa } from \"execa\";\nimport { ensureGlobalConfigDir } from \"@/utils/config\";\n\nconst AUTH_FILE = async () => join(await ensureGlobalConfigDir(), \"auth.json\");\n\nexport interface AuthConfig {\n  provider: \"cloudflare\";\n  accountId: string;\n  email: string;\n  expiresAt: string;\n}\n\ninterface CloudflareIdentity {\n  loggedIn?: boolean;\n  email?: string;\n  accounts?: Array<{ id?: string; account_tag?: string; name?: string }>;\n}\n\nexport async function getCloudflareIdentity(): Promise<CloudflareIdentity | null> {\n  try {\n    const run = async (args: string[]) =>\n      execa(\"npx\", args, {\n        env: { FORCE_COLOR: \"0\", CLOUDFLARE_OUTPUT_FORMAT: \"json\" },\n      });\n\n    const firstAttempt = await run([\n      \"wrangler\",\n      \"whoami\",\n      \"--output-format\",\n      \"json\",\n    ]).catch(() => null);\n\n    if (firstAttempt) {\n      return JSON.parse(firstAttempt.stdout) as CloudflareIdentity;\n    }\n\n    const fallback = await run([\"wrangler\", \"whoami\", \"--json\"]);\n    return JSON.parse(fallback.stdout) as CloudflareIdentity;\n  } catch {\n    return null;\n  }\n}\n\nexport async function saveAuthConfig(config: AuthConfig): Promise<void> {\n  const authPath = await AUTH_FILE();\n  await writeFile(authPath, JSON.stringify(config, null, 2), \"utf-8\");\n}\n\nexport async function getAuthConfig(): Promise<AuthConfig | null> {\n  try {\n    const authPath = await AUTH_FILE();\n    const content = await readFile(authPath, \"utf-8\");\n    return JSON.parse(content) as AuthConfig;\n  } catch {\n    return null;\n  }\n}\n\nexport async function isLoggedIn(): Promise<boolean> {\n  const auth = await getAuthConfig();\n  if (!auth) return false;\n  return new Date(auth.expiresAt).getTime() > Date.now();\n}\n\nexport async function requireAuth(): Promise<AuthConfig> {\n  const auth = await getAuthConfig();\n  if (!auth || new Date(auth.expiresAt).getTime() <= Date.now()) {\n    throw new Error(\"Not authenticated. Run `kalp login` first.\");\n  }\n  return auth;\n}\n\n/**\n * Backward-compatible helper for legacy commands.\n * Returns a pseudo-token when Cloudflare auth is present.\n */\nexport async function getAuthToken(): Promise<string | null> {\n  const auth = await getAuthConfig();\n  if (!auth || new Date(auth.expiresAt).getTime() <= Date.now()) {\n    return null;\n  }\n  return `${auth.provider}:${auth.accountId}`;\n}\n","import { execa } from \"execa\";\nimport { mkdtemp, readFile, rm, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { tmpdir } from \"node:os\";\nimport type { RuntimeProvider, RemoteSecret } from \"@/utils/providers/types\";\nimport { getCloudflareIdentity } from \"@/utils/auth\";\n\nfunction parseNamespaceList(stdout: string): Array<{ id: string; title: string }> {\n  try {\n    const parsed = JSON.parse(stdout);\n    if (Array.isArray(parsed)) {\n      return parsed\n        .map((item) => ({\n          id: String((item as { id?: string }).id ?? \"\"),\n          title: String((item as { title?: string }).title ?? \"\"),\n        }))\n        .filter((item) => !!item.id && !!item.title);\n    }\n  } catch {}\n  return [];\n}\n\nfunction parseSecretsList(stdout: string): RemoteSecret[] {\n  const trimmed = stdout.trim();\n  if (!trimmed) return [];\n\n  try {\n    const parsed = JSON.parse(trimmed) as unknown;\n    if (!Array.isArray(parsed)) return [];\n    const secrets: RemoteSecret[] = [];\n    for (const item of parsed) {\n      const record = item as Record<string, unknown>;\n      const name = record.name;\n      if (typeof name !== \"string\" || name.length === 0) continue;\n      const type = typeof record.type === \"string\" ? record.type : undefined;\n      if (type) {\n        secrets.push({ name, type });\n      } else {\n        secrets.push({ name });\n      }\n    }\n    return secrets;\n  } catch {\n    return [];\n  }\n}\n\nfunction findWorkerUrl(output: string): string | null {\n  const match = output.match(/https:\\/\\/[^\\s]+\\.workers\\.dev/);\n  return match?.[0] ?? null;\n}\n\nfunction normalizeDomainCandidate(value: string): string | null {\n  const trimmed = value.trim();\n  if (!trimmed || trimmed.includes(\"@\")) return null;\n\n  const fromUrl = trimmed.match(/^https?:\\/\\/([^/\\s]+)/i)?.[1];\n  const candidate = (fromUrl ?? trimmed).replace(/^https?:\\/\\//i, \"\").split(\"/\")[0] ?? \"\";\n  const host = candidate.replace(/^\\*\\./, \"\").toLowerCase();\n\n  if (!host) return null;\n  if (host.includes(\"*\")) return null;\n  if (host.endsWith(\".workers.dev\")) return null;\n  if (host.endsWith(\".pages.dev\")) return null;\n  if (!/^[a-z0-9.-]+\\.[a-z]{2,}$/i.test(host)) return null;\n  return host;\n}\n\nfunction extractCustomDomainsFromRoutesConfig(configText: string): string[] {\n  const routesMatch = configText.match(/\"routes\"\\s*:\\s*(\\[[\\s\\S]*?\\])/);\n  if (!routesMatch) return [];\n  const serializedRoutes = routesMatch[1];\n  if (!serializedRoutes) return [];\n\n  try {\n    const routes = JSON.parse(serializedRoutes) as Array<{\n      pattern?: string;\n      custom_domain?: boolean;\n    }>;\n    if (!Array.isArray(routes)) return [];\n    const domains = routes\n      .filter((route) => route?.custom_domain === true)\n      .map((route) => normalizeDomainCandidate(String(route.pattern ?? \"\")))\n      .filter((domain): domain is string => !!domain);\n    return [...new Set(domains)];\n  } catch {\n    return [];\n  }\n}\n\nfunction collectDomainsFromStatusNode(\n  node: unknown,\n  keyHint: string | null,\n  out: Set<string>,\n): void {\n  if (typeof node === \"string\") {\n    if (keyHint && /(domain|route|pattern)/i.test(keyHint)) {\n      const normalized = normalizeDomainCandidate(node);\n      if (normalized) out.add(normalized);\n    }\n    return;\n  }\n\n  if (Array.isArray(node)) {\n    for (const item of node) {\n      collectDomainsFromStatusNode(item, keyHint, out);\n    }\n    return;\n  }\n\n  if (!node || typeof node !== \"object\") return;\n  for (const [key, value] of Object.entries(node as Record<string, unknown>)) {\n    collectDomainsFromStatusNode(value, key, out);\n  }\n}\n\nfunction parseCustomDomainsFromStatusOutput(statusJson: string): string[] {\n  try {\n    const parsed = JSON.parse(statusJson) as unknown;\n    const domains = new Set<string>();\n    collectDomainsFromStatusNode(parsed, null, domains);\n    return [...domains].sort((a, b) => a.localeCompare(b));\n  } catch {\n    return [];\n  }\n}\n\nasync function resolveCustomDomains(params: {\n  cwd: string;\n  configPath: string;\n  workerName: string;\n}): Promise<string[]> {\n  const { cwd, configPath, workerName } = params;\n\n  const status = await execa(\n    \"npx\",\n    [\n      \"wrangler\",\n      \"deployments\",\n      \"status\",\n      \"--name\",\n      workerName,\n      \"--json\",\n      \"--config\",\n      configPath,\n    ],\n    { cwd },\n  ).catch(() => null);\n\n  const fromStatus = status ? parseCustomDomainsFromStatusOutput(status.stdout) : [];\n  if (fromStatus.length > 0) return fromStatus;\n\n  const configText = await readFile(configPath, \"utf-8\").catch(() => \"\");\n  return extractCustomDomainsFromRoutesConfig(configText);\n}\n\nexport const cloudflareProvider: RuntimeProvider = {\n  name: \"cloudflare\",\n  async login() {\n    await execa(\"npx\", [\"wrangler\", \"login\"], { stdio: \"inherit\" });\n  },\n  async whoami() {\n    const identity = await getCloudflareIdentity();\n    const account = identity?.accounts?.[0];\n    const accountId = account?.id ?? account?.account_tag;\n    const email = identity?.email;\n    if (!accountId || !email) return null;\n    return { provider: \"cloudflare\", accountId, email };\n  },\n  async putSecret({ cwd, configPath, name, value }) {\n    await execa(\n      \"npx\",\n      [\"wrangler\", \"secret\", \"put\", name, \"--config\", configPath],\n      { cwd, input: `${value}\\n` },\n    );\n  },\n  async listSecrets({ cwd, configPath }) {\n    const jsonAttempt = await execa(\n      \"npx\",\n      [\n        \"wrangler\",\n        \"secret\",\n        \"list\",\n        \"--config\",\n        configPath,\n        \"--format\",\n        \"json\",\n      ],\n      { cwd },\n    ).catch(() => null);\n    if (jsonAttempt) return parseSecretsList(jsonAttempt.stdout);\n\n    const fallback = await execa(\n      \"npx\",\n      [\"wrangler\", \"secret\", \"list\", \"--config\", configPath],\n      { cwd },\n    );\n    return parseSecretsList(fallback.stdout);\n  },\n  async deleteSecret({ cwd, configPath, name }) {\n    await execa(\n      \"npx\",\n      [\"wrangler\", \"secret\", \"delete\", name, \"--config\", configPath],\n      { cwd },\n    );\n  },\n  async deployRuntime({ cwd, configPath, useSecretsFile }) {\n    const args = useSecretsFile\n      ? [\"wrangler\", \"deploy\", \"--config\", configPath, \"--secrets-file\", \".env\"]\n      : [\"wrangler\", \"deploy\", \"--config\", configPath];\n    const deploy = await execa(\"npx\", args, { cwd });\n    const rawOutput = [deploy.stdout, deploy.stderr].filter(Boolean).join(\"\\n\");\n    const workerUrl = findWorkerUrl(rawOutput);\n    const configText = await readFile(configPath, \"utf-8\").catch(() => null);\n    const workerName = configText?.match(/\"name\"\\s*:\\s*\"([^\"]+)\"/)?.[1];\n    const customDomains = workerName\n      ? await resolveCustomDomains({ cwd, configPath, workerName }).catch(() => [])\n      : [];\n\n    if (!workerUrl) {\n      if (!workerName) {\n        throw new Error(\"Could not resolve runtime URL from deployment output.\");\n      }\n      return {\n        workerUrl: `https://${workerName}.workers.dev`,\n        customDomains,\n        rawOutput,\n      };\n    }\n    return { workerUrl, customDomains, rawOutput };\n  },\n  async putManifest({ cwd, configPath, key, jsonPath }) {\n    await execa(\n      \"npx\",\n      [\n        \"wrangler\",\n        \"kv\",\n        \"key\",\n        \"put\",\n        \"--binding\",\n        \"KALP_MANIFESTS\",\n        key,\n        \"--path\",\n        jsonPath,\n        \"--remote\",\n        \"--config\",\n        configPath,\n      ],\n      { cwd },\n    );\n  },\n  async putValue({ cwd, configPath, key, value }) {\n    await execa(\n      \"npx\",\n      [\n        \"wrangler\",\n        \"kv\",\n        \"key\",\n        \"put\",\n        \"--binding\",\n        \"KALP_MANIFESTS\",\n        key,\n        value,\n        \"--remote\",\n        \"--config\",\n        configPath,\n      ],\n      { cwd },\n    );\n  },\n  async deleteValue({ cwd, configPath, key }) {\n    await execa(\n      \"npx\",\n      [\n        \"wrangler\",\n        \"kv\",\n        \"key\",\n        \"delete\",\n        \"--binding\",\n        \"KALP_MANIFESTS\",\n        key,\n        \"--remote\",\n        \"--config\",\n        configPath,\n      ],\n      { cwd },\n    );\n  },\n  async getValue({ cwd, configPath, key }) {\n    const result = await execa(\n      \"npx\",\n      [\n        \"wrangler\",\n        \"kv\",\n        \"key\",\n        \"get\",\n        \"--binding\",\n        \"KALP_MANIFESTS\",\n        key,\n        \"--remote\",\n        \"--config\",\n        configPath,\n      ],\n      { cwd },\n    ).catch(() => null);\n    const output = result?.stdout?.trim();\n    return output ? output : null;\n  },\n  async listNamespaces({ cwd, configPath }) {\n    const json = await execa(\n      \"npx\",\n      [\"wrangler\", \"kv\", \"namespace\", \"list\", \"--config\", configPath, \"--json\"],\n      { cwd },\n    ).catch(() => null);\n    if (json) return parseNamespaceList(json.stdout);\n    const plain = await execa(\n      \"npx\",\n      [\"wrangler\", \"kv\", \"namespace\", \"list\", \"--config\", configPath],\n      { cwd },\n    );\n    return parseNamespaceList(plain.stdout);\n  },\n};\n\nexport async function withTempJsonFile<T>(\n  prefix: string,\n  payload: unknown,\n  fn: (path: string) => Promise<T>,\n): Promise<T> {\n  const dir = await mkdtemp(join(tmpdir(), prefix));\n  const filePath = join(dir, \"payload.json\");\n  await writeFile(filePath, JSON.stringify(payload), \"utf-8\");\n  try {\n    return await fn(filePath);\n  } finally {\n    await rm(dir, { recursive: true, force: true });\n  }\n}\n","import { cloudflareProvider } from \"@/utils/providers/cloudflare\";\nimport type { RuntimeProvider } from \"@/utils/providers/types\";\n\nexport function resolveProvider(): RuntimeProvider {\n  return cloudflareProvider;\n}\n\nexport type {\n  RuntimeProvider,\n  ProviderIdentity,\n  DeployResult,\n  RemoteSecret,\n} from \"@/utils/providers/types\";\n"],"mappings":";;;;;;AAAA,SAAS,UAAU,iBAAiB;AACpC,SAAS,YAAY;AACrB,SAAS,aAAa;AAGtB,IAAM,YAAY,YAAY,KAAK,MAAM,sBAAsB,GAAG,WAAW;AAe7E,eAAsB,wBAA4D;AAChF,MAAI;AACF,UAAM,MAAM,OAAO,SACjB,MAAM,OAAO,MAAM;AAAA,MACjB,KAAK,EAAE,aAAa,KAAK,0BAA0B,OAAO;AAAA,IAC5D,CAAC;AAEH,UAAM,eAAe,MAAM,IAAI;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,EAAE,MAAM,MAAM,IAAI;AAEnB,QAAI,cAAc;AAChB,aAAO,KAAK,MAAM,aAAa,MAAM;AAAA,IACvC;AAEA,UAAM,WAAW,MAAM,IAAI,CAAC,YAAY,UAAU,QAAQ,CAAC;AAC3D,WAAO,KAAK,MAAM,SAAS,MAAM;AAAA,EACnC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,eAAe,QAAmC;AACtE,QAAM,WAAW,MAAM,UAAU;AACjC,QAAM,UAAU,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,OAAO;AACpE;AAEA,eAAsB,gBAA4C;AAChE,MAAI;AACF,UAAM,WAAW,MAAM,UAAU;AACjC,UAAM,UAAU,MAAM,SAAS,UAAU,OAAO;AAChD,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,cAAmC;AACvD,QAAM,OAAO,MAAM,cAAc;AACjC,MAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ,KAAK,KAAK,IAAI,GAAG;AAC7D,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,SAAO;AACT;;;ACxEA,SAAS,SAAAA,cAAa;AACtB,SAAS,SAAS,YAAAC,WAAU,IAAI,aAAAC,kBAAiB;AACjD,SAAS,QAAAC,aAAY;AACrB,SAAS,cAAc;AAIvB,SAAS,mBAAmB,QAAsD;AAChF,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,MAAM;AAChC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,aAAO,OACJ,IAAI,CAAC,UAAU;AAAA,QACd,IAAI,OAAQ,KAAyB,MAAM,EAAE;AAAA,QAC7C,OAAO,OAAQ,KAA4B,SAAS,EAAE;AAAA,MACxD,EAAE,EACD,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,KAAK;AAAA,IAC/C;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,SAAO,CAAC;AACV;AAEA,SAAS,iBAAiB,QAAgC;AACxD,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAS,QAAO,CAAC;AAEtB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,QAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,UAAM,UAA0B,CAAC;AACjC,eAAW,QAAQ,QAAQ;AACzB,YAAM,SAAS;AACf,YAAM,OAAO,OAAO;AACpB,UAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG;AACnD,YAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,UAAI,MAAM;AACR,gBAAQ,KAAK,EAAE,MAAM,KAAK,CAAC;AAAA,MAC7B,OAAO;AACL,gBAAQ,KAAK,EAAE,KAAK,CAAC;AAAA,MACvB;AAAA,IACF;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,cAAc,QAA+B;AACpD,QAAM,QAAQ,OAAO,MAAM,gCAAgC;AAC3D,SAAO,QAAQ,CAAC,KAAK;AACvB;AAEA,SAAS,yBAAyB,OAA8B;AAC9D,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,WAAW,QAAQ,SAAS,GAAG,EAAG,QAAO;AAE9C,QAAM,UAAU,QAAQ,MAAM,wBAAwB,IAAI,CAAC;AAC3D,QAAM,aAAa,WAAW,SAAS,QAAQ,iBAAiB,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK;AACrF,QAAM,OAAO,UAAU,QAAQ,SAAS,EAAE,EAAE,YAAY;AAExD,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,KAAK,SAAS,GAAG,EAAG,QAAO;AAC/B,MAAI,KAAK,SAAS,cAAc,EAAG,QAAO;AAC1C,MAAI,KAAK,SAAS,YAAY,EAAG,QAAO;AACxC,MAAI,CAAC,4BAA4B,KAAK,IAAI,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,qCAAqC,YAA8B;AAC1E,QAAM,cAAc,WAAW,MAAM,+BAA+B;AACpE,MAAI,CAAC,YAAa,QAAO,CAAC;AAC1B,QAAM,mBAAmB,YAAY,CAAC;AACtC,MAAI,CAAC,iBAAkB,QAAO,CAAC;AAE/B,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,gBAAgB;AAI1C,QAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,UAAM,UAAU,OACb,OAAO,CAAC,UAAU,OAAO,kBAAkB,IAAI,EAC/C,IAAI,CAAC,UAAU,yBAAyB,OAAO,MAAM,WAAW,EAAE,CAAC,CAAC,EACpE,OAAO,CAAC,WAA6B,CAAC,CAAC,MAAM;AAChD,WAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC;AAAA,EAC7B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,6BACP,MACA,SACA,KACM;AACN,MAAI,OAAO,SAAS,UAAU;AAC5B,QAAI,WAAW,0BAA0B,KAAK,OAAO,GAAG;AACtD,YAAM,aAAa,yBAAyB,IAAI;AAChD,UAAI,WAAY,KAAI,IAAI,UAAU;AAAA,IACpC;AACA;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAW,QAAQ,MAAM;AACvB,mCAA6B,MAAM,SAAS,GAAG;AAAA,IACjD;AACA;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAA+B,GAAG;AAC1E,iCAA6B,OAAO,KAAK,GAAG;AAAA,EAC9C;AACF;AAEA,SAAS,mCAAmC,YAA8B;AACxE,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,UAAU;AACpC,UAAM,UAAU,oBAAI,IAAY;AAChC,iCAA6B,QAAQ,MAAM,OAAO;AAClD,WAAO,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAAA,EACvD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,qBAAqB,QAId;AACpB,QAAM,EAAE,KAAK,YAAY,WAAW,IAAI;AAExC,QAAM,SAAS,MAAMC;AAAA,IACnB;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,IAAI;AAAA,EACR,EAAE,MAAM,MAAM,IAAI;AAElB,QAAM,aAAa,SAAS,mCAAmC,OAAO,MAAM,IAAI,CAAC;AACjF,MAAI,WAAW,SAAS,EAAG,QAAO;AAElC,QAAM,aAAa,MAAMC,UAAS,YAAY,OAAO,EAAE,MAAM,MAAM,EAAE;AACrE,SAAO,qCAAqC,UAAU;AACxD;AAEO,IAAM,qBAAsC;AAAA,EACjD,MAAM;AAAA,EACN,MAAM,QAAQ;AACZ,UAAMD,OAAM,OAAO,CAAC,YAAY,OAAO,GAAG,EAAE,OAAO,UAAU,CAAC;AAAA,EAChE;AAAA,EACA,MAAM,SAAS;AACb,UAAM,WAAW,MAAM,sBAAsB;AAC7C,UAAM,UAAU,UAAU,WAAW,CAAC;AACtC,UAAM,YAAY,SAAS,MAAM,SAAS;AAC1C,UAAM,QAAQ,UAAU;AACxB,QAAI,CAAC,aAAa,CAAC,MAAO,QAAO;AACjC,WAAO,EAAE,UAAU,cAAc,WAAW,MAAM;AAAA,EACpD;AAAA,EACA,MAAM,UAAU,EAAE,KAAK,YAAY,MAAM,MAAM,GAAG;AAChD,UAAMA;AAAA,MACJ;AAAA,MACA,CAAC,YAAY,UAAU,OAAO,MAAM,YAAY,UAAU;AAAA,MAC1D,EAAE,KAAK,OAAO,GAAG,KAAK;AAAA,EAAK;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,MAAM,YAAY,EAAE,KAAK,WAAW,GAAG;AACrC,UAAM,cAAc,MAAMA;AAAA,MACxB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,EAAE,IAAI;AAAA,IACR,EAAE,MAAM,MAAM,IAAI;AAClB,QAAI,YAAa,QAAO,iBAAiB,YAAY,MAAM;AAE3D,UAAM,WAAW,MAAMA;AAAA,MACrB;AAAA,MACA,CAAC,YAAY,UAAU,QAAQ,YAAY,UAAU;AAAA,MACrD,EAAE,IAAI;AAAA,IACR;AACA,WAAO,iBAAiB,SAAS,MAAM;AAAA,EACzC;AAAA,EACA,MAAM,aAAa,EAAE,KAAK,YAAY,KAAK,GAAG;AAC5C,UAAMA;AAAA,MACJ;AAAA,MACA,CAAC,YAAY,UAAU,UAAU,MAAM,YAAY,UAAU;AAAA,MAC7D,EAAE,IAAI;AAAA,IACR;AAAA,EACF;AAAA,EACA,MAAM,cAAc,EAAE,KAAK,YAAY,eAAe,GAAG;AACvD,UAAM,OAAO,iBACT,CAAC,YAAY,UAAU,YAAY,YAAY,kBAAkB,MAAM,IACvE,CAAC,YAAY,UAAU,YAAY,UAAU;AACjD,UAAM,SAAS,MAAMA,OAAM,OAAO,MAAM,EAAE,IAAI,CAAC;AAC/C,UAAM,YAAY,CAAC,OAAO,QAAQ,OAAO,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC1E,UAAM,YAAY,cAAc,SAAS;AACzC,UAAM,aAAa,MAAMC,UAAS,YAAY,OAAO,EAAE,MAAM,MAAM,IAAI;AACvE,UAAM,aAAa,YAAY,MAAM,wBAAwB,IAAI,CAAC;AAClE,UAAM,gBAAgB,aAClB,MAAM,qBAAqB,EAAE,KAAK,YAAY,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC,CAAC,IAC1E,CAAC;AAEL,QAAI,CAAC,WAAW;AACd,UAAI,CAAC,YAAY;AACf,cAAM,IAAI,MAAM,uDAAuD;AAAA,MACzE;AACA,aAAO;AAAA,QACL,WAAW,WAAW,UAAU;AAAA,QAChC;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,WAAW,eAAe,UAAU;AAAA,EAC/C;AAAA,EACA,MAAM,YAAY,EAAE,KAAK,YAAY,KAAK,SAAS,GAAG;AACpD,UAAMD;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,EAAE,IAAI;AAAA,IACR;AAAA,EACF;AAAA,EACA,MAAM,SAAS,EAAE,KAAK,YAAY,KAAK,MAAM,GAAG;AAC9C,UAAMA;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,EAAE,IAAI;AAAA,IACR;AAAA,EACF;AAAA,EACA,MAAM,YAAY,EAAE,KAAK,YAAY,IAAI,GAAG;AAC1C,UAAMA;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,EAAE,IAAI;AAAA,IACR;AAAA,EACF;AAAA,EACA,MAAM,SAAS,EAAE,KAAK,YAAY,IAAI,GAAG;AACvC,UAAM,SAAS,MAAMA;AAAA,MACnB;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,EAAE,IAAI;AAAA,IACR,EAAE,MAAM,MAAM,IAAI;AAClB,UAAM,SAAS,QAAQ,QAAQ,KAAK;AACpC,WAAO,SAAS,SAAS;AAAA,EAC3B;AAAA,EACA,MAAM,eAAe,EAAE,KAAK,WAAW,GAAG;AACxC,UAAM,OAAO,MAAMA;AAAA,MACjB;AAAA,MACA,CAAC,YAAY,MAAM,aAAa,QAAQ,YAAY,YAAY,QAAQ;AAAA,MACxE,EAAE,IAAI;AAAA,IACR,EAAE,MAAM,MAAM,IAAI;AAClB,QAAI,KAAM,QAAO,mBAAmB,KAAK,MAAM;AAC/C,UAAM,QAAQ,MAAMA;AAAA,MAClB;AAAA,MACA,CAAC,YAAY,MAAM,aAAa,QAAQ,YAAY,UAAU;AAAA,MAC9D,EAAE,IAAI;AAAA,IACR;AACA,WAAO,mBAAmB,MAAM,MAAM;AAAA,EACxC;AACF;;;AC/TO,SAAS,kBAAmC;AACjD,SAAO;AACT;","names":["execa","readFile","writeFile","join","execa","readFile"]}

package/dist/chunk-NV2IZ4XM.js

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+
+// src/utils/secret.ts
+import { randomBytes } from "crypto";
+import { readFile, writeFile } from "fs/promises";
+import { join } from "path";
+var SECRET_KEY = "KALP_SECRET_KEY";
+var STUDIO_PASSWORD = "KALP_STUDIO_PASSWORD";
+var STUDIO_ADMIN_USER = "KALP_STUDIO_ADMIN_USER";
+var SERVICE_KEY = "KALP_SERVICE_KEY";
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function parseEnv(content) {
+  const result = {};
+  for (const line of content.split(/\r?\n/g)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eqIndex = trimmed.indexOf("=");
+    if (eqIndex <= 0) continue;
+    const key = trimmed.slice(0, eqIndex).trim();
+    const value = trimmed.slice(eqIndex + 1).trim();
+    result[key] = value;
+  }
+  return result;
+}
+function applyEnvUpdates(content, updates) {
+  let next = content;
+  for (const [key, value] of Object.entries(updates)) {
+    const line = `${key}=${value}`;
+    const pattern = new RegExp(`^${escapeRegExp(key)}=.*$`, "m");
+    if (pattern.test(next)) {
+      next = next.replace(pattern, line);
+      continue;
+    }
+    const trimmed = next.trimEnd();
+    next = trimmed.length > 0 ? `${trimmed}
+${line}
+` : `${line}
+`;
+  }
+  return next.trimEnd() + "\n";
+}
+async function readEnvFile(cwd) {
+  const envPath = join(cwd, ".env");
+  try {
+    return await readFile(envPath, "utf-8");
+  } catch {
+    return "";
+  }
+}
+async function readDevVarsFile(cwd) {
+  const devVarsPath = join(cwd, ".dev.vars");
+  try {
+    return await readFile(devVarsPath, "utf-8");
+  } catch {
+    return "";
+  }
+}
+function generateStudioPassword() {
+  return randomBytes(24).toString("base64url");
+}
+function generateServiceKey() {
+  return `kalp_sk_live_${randomBytes(32).toString("base64url")}`;
+}
+async function ensureStudioSecrets(cwd) {
+  const envPath = join(cwd, ".env");
+  const devVarsPath = join(cwd, ".dev.vars");
+  const content = await readEnvFile(cwd);
+  const parsed = parseEnv(content);
+  const key = parsed[SECRET_KEY]?.trim() || randomBytes(32).toString("hex");
+  const studioPassword = parsed[STUDIO_PASSWORD]?.trim() || generateStudioPassword();
+  const studioAdminUser = parsed[STUDIO_ADMIN_USER]?.trim() || "admin";
+  const serviceKey = parsed[SERVICE_KEY]?.trim() || generateServiceKey();
+  const isNew = !parsed[SECRET_KEY]?.trim() || !parsed[STUDIO_PASSWORD]?.trim() || !parsed[STUDIO_ADMIN_USER]?.trim() || !parsed[SERVICE_KEY]?.trim();
+  const next = applyEnvUpdates(content, {
+    [SECRET_KEY]: key,
+    [STUDIO_PASSWORD]: studioPassword,
+    [STUDIO_ADMIN_USER]: studioAdminUser,
+    [SERVICE_KEY]: serviceKey
+  });
+  await writeFile(envPath, next, "utf-8");
+  const devVarsContent = await readDevVarsFile(cwd);
+  const nextDevVars = applyEnvUpdates(devVarsContent, {
+    [SECRET_KEY]: key,
+    [STUDIO_PASSWORD]: studioPassword,
+    [STUDIO_ADMIN_USER]: studioAdminUser,
+    [SERVICE_KEY]: serviceKey
+  });
+  await writeFile(devVarsPath, nextDevVars, "utf-8");
+  return { key, studioPassword, studioAdminUser, serviceKey, isNew };
+}
+async function ensureSecretKey(cwd) {
+  const secrets = await ensureStudioSecrets(cwd);
+  return { key: secrets.key, isNew: secrets.isNew };
+}
+
+export {
+  ensureStudioSecrets,
+  ensureSecretKey
+};
+//# sourceMappingURL=chunk-NV2IZ4XM.js.map

package/dist/chunk-NV2IZ4XM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/secret.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { readFile, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nexport const SECRET_KEY = \"KALP_SECRET_KEY\";\nexport const STUDIO_PASSWORD = \"KALP_STUDIO_PASSWORD\";\nexport const STUDIO_ADMIN_USER = \"KALP_STUDIO_ADMIN_USER\";\nexport const SERVICE_KEY = \"KALP_SERVICE_KEY\";\n\nfunction escapeRegExp(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nfunction parseEnv(content: string): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const line of content.split(/\\r?\\n/g)) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith(\"#\")) continue;\n    const eqIndex = trimmed.indexOf(\"=\");\n    if (eqIndex <= 0) continue;\n    const key = trimmed.slice(0, eqIndex).trim();\n    const value = trimmed.slice(eqIndex + 1).trim();\n    result[key] = value;\n  }\n  return result;\n}\n\nfunction applyEnvUpdates(content: string, updates: Record<string, string>): string {\n  let next = content;\n  for (const [key, value] of Object.entries(updates)) {\n    const line = `${key}=${value}`;\n    const pattern = new RegExp(`^${escapeRegExp(key)}=.*$`, \"m\");\n    if (pattern.test(next)) {\n      next = next.replace(pattern, line);\n      continue;\n    }\n    const trimmed = next.trimEnd();\n    next = trimmed.length > 0 ? `${trimmed}\\n${line}\\n` : `${line}\\n`;\n  }\n\n  return next.trimEnd() + \"\\n\";\n}\n\nasync function readEnvFile(cwd: string): Promise<string> {\n  const envPath = join(cwd, \".env\");\n  try {\n    return await readFile(envPath, \"utf-8\");\n  } catch {\n    return \"\";\n  }\n}\n\nasync function readDevVarsFile(cwd: string): Promise<string> {\n  const devVarsPath = join(cwd, \".dev.vars\");\n  try {\n    return await readFile(devVarsPath, \"utf-8\");\n  } catch {\n    return \"\";\n  }\n}\n\nfunction generateStudioPassword(): string {\n  return randomBytes(24).toString(\"base64url\");\n}\n\nfunction generateServiceKey(): string {\n  return `kalp_sk_live_${randomBytes(32).toString(\"base64url\")}`;\n}\n\nexport interface StudioSecrets {\n  key: string;\n  studioPassword: string;\n  studioAdminUser: string;\n  serviceKey: string;\n  isNew: boolean;\n}\n\nexport async function ensureStudioSecrets(cwd: string): Promise<StudioSecrets> {\n  const envPath = join(cwd, \".env\");\n  const devVarsPath = join(cwd, \".dev.vars\");\n  const content = await readEnvFile(cwd);\n  const parsed = parseEnv(content);\n\n  const key = parsed[SECRET_KEY]?.trim() || randomBytes(32).toString(\"hex\");\n  const studioPassword = parsed[STUDIO_PASSWORD]?.trim() || generateStudioPassword();\n  const studioAdminUser = parsed[STUDIO_ADMIN_USER]?.trim() || \"admin\";\n  const serviceKey = parsed[SERVICE_KEY]?.trim() || generateServiceKey();\n\n  const isNew =\n    !parsed[SECRET_KEY]?.trim() ||\n    !parsed[STUDIO_PASSWORD]?.trim() ||\n    !parsed[STUDIO_ADMIN_USER]?.trim() ||\n    !parsed[SERVICE_KEY]?.trim();\n\n  const next = applyEnvUpdates(content, {\n    [SECRET_KEY]: key,\n    [STUDIO_PASSWORD]: studioPassword,\n    [STUDIO_ADMIN_USER]: studioAdminUser,\n    [SERVICE_KEY]: serviceKey,\n  });\n  await writeFile(envPath, next, \"utf-8\");\n\n  const devVarsContent = await readDevVarsFile(cwd);\n  const nextDevVars = applyEnvUpdates(devVarsContent, {\n    [SECRET_KEY]: key,\n    [STUDIO_PASSWORD]: studioPassword,\n    [STUDIO_ADMIN_USER]: studioAdminUser,\n    [SERVICE_KEY]: serviceKey,\n  });\n  await writeFile(devVarsPath, nextDevVars, \"utf-8\");\n\n  return { key, studioPassword, studioAdminUser, serviceKey, isNew };\n}\n\nexport async function ensureSecretKey(\n  cwd: string,\n): Promise<{ key: string; isNew: boolean }> {\n  const secrets = await ensureStudioSecrets(cwd);\n  return { key: secrets.key, isNew: secrets.isNew };\n}\n\nexport async function readSecretKey(cwd: string): Promise<string | null> {\n  try {\n    const envContent = await readEnvFile(cwd);\n    const parsed = parseEnv(envContent);\n    return parsed[SECRET_KEY] ?? null;\n  } catch {\n    return null;\n  }\n}\n\nexport async function readStudioSecrets(cwd: string): Promise<{\n  key: string;\n  studioPassword: string;\n  studioAdminUser: string;\n  serviceKey: string;\n} | null> {\n  try {\n    const envContent = await readEnvFile(cwd);\n    const parsed = parseEnv(envContent);\n    const key = parsed[SECRET_KEY]?.trim();\n    const studioPassword = parsed[STUDIO_PASSWORD]?.trim();\n    const studioAdminUser = parsed[STUDIO_ADMIN_USER]?.trim() || \"admin\";\n    const serviceKey = parsed[SERVICE_KEY]?.trim();\n    if (!key || !studioPassword || !serviceKey) return null;\n    return { key, studioPassword, studioAdminUser, serviceKey };\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;AAAA,SAAS,mBAAmB;AAC5B,SAAS,UAAU,iBAAiB;AACpC,SAAS,YAAY;AAEd,IAAM,aAAa;AACnB,IAAM,kBAAkB;AACxB,IAAM,oBAAoB;AAC1B,IAAM,cAAc;AAE3B,SAAS,aAAa,OAAuB;AAC3C,SAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD;AAEA,SAAS,SAAS,SAAyC;AACzD,QAAM,SAAiC,CAAC;AACxC,aAAW,QAAQ,QAAQ,MAAM,QAAQ,GAAG;AAC1C,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,UAAM,UAAU,QAAQ,QAAQ,GAAG;AACnC,QAAI,WAAW,EAAG;AAClB,UAAM,MAAM,QAAQ,MAAM,GAAG,OAAO,EAAE,KAAK;AAC3C,UAAM,QAAQ,QAAQ,MAAM,UAAU,CAAC,EAAE,KAAK;AAC9C,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAAiB,SAAyC;AACjF,MAAI,OAAO;AACX,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,UAAM,OAAO,GAAG,GAAG,IAAI,KAAK;AAC5B,UAAM,UAAU,IAAI,OAAO,IAAI,aAAa,GAAG,CAAC,QAAQ,GAAG;AAC3D,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,aAAO,KAAK,QAAQ,SAAS,IAAI;AACjC;AAAA,IACF;AACA,UAAM,UAAU,KAAK,QAAQ;AAC7B,WAAO,QAAQ,SAAS,IAAI,GAAG,OAAO;AAAA,EAAK,IAAI;AAAA,IAAO,GAAG,IAAI;AAAA;AAAA,EAC/D;AAEA,SAAO,KAAK,QAAQ,IAAI;AAC1B;AAEA,eAAe,YAAY,KAA8B;AACvD,QAAM,UAAU,KAAK,KAAK,MAAM;AAChC,MAAI;AACF,WAAO,MAAM,SAAS,SAAS,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBAAgB,KAA8B;AAC3D,QAAM,cAAc,KAAK,KAAK,WAAW;AACzC,MAAI;AACF,WAAO,MAAM,SAAS,aAAa,OAAO;AAAA,EAC5C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,yBAAiC;AACxC,SAAO,YAAY,EAAE,EAAE,SAAS,WAAW;AAC7C;AAEA,SAAS,qBAA6B;AACpC,SAAO,gBAAgB,YAAY,EAAE,EAAE,SAAS,WAAW,CAAC;AAC9D;AAUA,eAAsB,oBAAoB,KAAqC;AAC7E,QAAM,UAAU,KAAK,KAAK,MAAM;AAChC,QAAM,cAAc,KAAK,KAAK,WAAW;AACzC,QAAM,UAAU,MAAM,YAAY,GAAG;AACrC,QAAM,SAAS,SAAS,OAAO;AAE/B,QAAM,MAAM,OAAO,UAAU,GAAG,KAAK,KAAK,YAAY,EAAE,EAAE,SAAS,KAAK;AACxE,QAAM,iBAAiB,OAAO,eAAe,GAAG,KAAK,KAAK,uBAAuB;AACjF,QAAM,kBAAkB,OAAO,iBAAiB,GAAG,KAAK,KAAK;AAC7D,QAAM,aAAa,OAAO,WAAW,GAAG,KAAK,KAAK,mBAAmB;AAErE,QAAM,QACJ,CAAC,OAAO,UAAU,GAAG,KAAK,KAC1B,CAAC,OAAO,eAAe,GAAG,KAAK,KAC/B,CAAC,OAAO,iBAAiB,GAAG,KAAK,KACjC,CAAC,OAAO,WAAW,GAAG,KAAK;AAE7B,QAAM,OAAO,gBAAgB,SAAS;AAAA,IACpC,CAAC,UAAU,GAAG;AAAA,IACd,CAAC,eAAe,GAAG;AAAA,IACnB,CAAC,iBAAiB,GAAG;AAAA,IACrB,CAAC,WAAW,GAAG;AAAA,EACjB,CAAC;AACD,QAAM,UAAU,SAAS,MAAM,OAAO;AAEtC,QAAM,iBAAiB,MAAM,gBAAgB,GAAG;AAChD,QAAM,cAAc,gBAAgB,gBAAgB;AAAA,IAClD,CAAC,UAAU,GAAG;AAAA,IACd,CAAC,eAAe,GAAG;AAAA,IACnB,CAAC,iBAAiB,GAAG;AAAA,IACrB,CAAC,WAAW,GAAG;AAAA,EACjB,CAAC;AACD,QAAM,UAAU,aAAa,aAAa,OAAO;AAEjD,SAAO,EAAE,KAAK,gBAAgB,iBAAiB,YAAY,MAAM;AACnE;AAEA,eAAsB,gBACpB,KAC0C;AAC1C,QAAM,UAAU,MAAM,oBAAoB,GAAG;AAC7C,SAAO,EAAE,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM;AAClD;","names":[]}

package/dist/{chunk-PY6VAS54.js → chunk-X56YSZGT.js}

@@ -1,9 +1,12 @@
 #!/usr/bin/env node
 import {
+  ensureStudioSecrets
+} from "./chunk-NV2IZ4XM.js";
+import {
+  requireAuth,
   resolveProvider
-} from "./chunk-TNKYKA7N.js";
+} from "./chunk-GNQI376N.js";
 import {
-  ensureStudioSecrets,
   getRequiredSecretForProvider,
   loadProjectConfig,
   materializeRuntime,
@@ -13,10 +16,7 @@ import {
   resolveProviderFromConfig,
   resolveRuntimeIdentityConfig,
   writeProjectState
-} from "./chunk-63JREECU.js";
-import {
-  requireAuth
-} from "./chunk-5RODADXW.js";
+} from "./chunk-DHCCSWJN.js";
 
 // src/utils/deploy.ts
 import { readFile, writeFile } from "fs/promises";
@@ -158,7 +158,42 @@ async function runInitialDeploy(cwd) {
   };
 }
 
+// src/utils/deploy-target.ts
+import * as p from "@clack/prompts";
+import pc from "picocolors";
+async function promptDeployTarget(message) {
+  const selected = await p.select({
+    message,
+    options: [
+      {
+        value: "cloudflare",
+        label: "Cloudflare",
+        hint: "Available now"
+      },
+      {
+        value: "kalp-cloud",
+        label: "Kalp Cloud",
+        hint: "Coming soon"
+      }
+    ]
+  });
+  if (p.isCancel(selected)) return null;
+  return selected;
+}
+function showKalpCloudWaitlist() {
+  p.note(
+    [
+      `${pc.bold("Kalp Cloud is coming soon \u{1F680}")}`,
+      pc.dim("Join the waitlist for early access:"),
+      pc.cyan("https://usekalp.com/waitlist")
+    ].join("\n"),
+    "Kalp Cloud"
+  );
+}
+
 export {
-  runInitialDeploy
+  runInitialDeploy,
+  promptDeployTarget,
+  showKalpCloudWaitlist
 };
-//# sourceMappingURL=chunk-PY6VAS54.js.map
+//# sourceMappingURL=chunk-X56YSZGT.js.map

package/dist/chunk-X56YSZGT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/deploy.ts","../src/utils/deploy-target.ts"],"sourcesContent":["import { readFile, writeFile } from \"node:fs/promises\";\nimport { createHash } from \"node:crypto\";\nimport { requireAuth } from \"@/utils/auth\";\nimport { ensureStudioSecrets } from \"@/utils/secret\";\nimport { readProjectState, writeProjectState } from \"@/utils/project-state\";\nimport { materializeRuntime } from \"@/utils/runtime\";\nimport {\n  getRequiredSecretForProvider,\n  readDotEnv,\n  resolveProviderFromConfig,\n} from \"@/utils/ai\";\nimport {\n  loadProjectConfig,\n  resolveIdentityAuthRequirements,\n  resolveRuntimeIdentityConfig,\n} from \"@/utils/project-config\";\nimport { resolveProvider } from \"@/utils/providers\";\n\ninterface RuntimeWranglerConfig {\n  name?: string;\n  kv_namespaces?: Array<{ binding: string; id?: string }>;\n}\n\ninterface KvNamespaceInfo {\n  id: string;\n  title: string;\n}\n\nasync function readWranglerConfig(\n  configPath: string,\n): Promise<RuntimeWranglerConfig> {\n  const text = await readFile(configPath, \"utf-8\");\n  return JSON.parse(text) as RuntimeWranglerConfig;\n}\n\nasync function writeWranglerConfig(\n  configPath: string,\n  config: RuntimeWranglerConfig,\n): Promise<void> {\n  await writeFile(configPath, `${JSON.stringify(config, null, 2)}\\n`, \"utf-8\");\n}\n\nfunction deriveKvNamespaceTitle(workerName: string, binding: string): string {\n  return `${workerName}-${binding.toLowerCase().replace(/_/g, \"-\")}`;\n}\n\nasync function listKvNamespaces(\n  cwd: string,\n  configPath: string,\n): Promise<KvNamespaceInfo[]> {\n  const provider = resolveProvider();\n  const namespaces = await provider.listNamespaces({ cwd, configPath });\n  return namespaces.map((item) => ({\n    id: item.id,\n    title: item.title,\n  }));\n}\n\nasync function ensureKvNamespaceBindingId(\n  cwd: string,\n  configPath: string,\n): Promise<string | null> {\n  const config = await readWranglerConfig(configPath);\n  const binding = config.kv_namespaces?.find(\n    (item) => item.binding === \"KALP_MANIFESTS\",\n  );\n\n  if (!binding || !config.name) return null;\n  if (binding.id) return binding.id;\n\n  const expectedTitle = deriveKvNamespaceTitle(config.name, binding.binding);\n  const namespaces = await listKvNamespaces(cwd, configPath);\n  const existing = namespaces.find((item) => item.title === expectedTitle);\n  if (!existing) return null;\n\n  binding.id = existing.id;\n  await writeWranglerConfig(configPath, config);\n  return existing.id;\n}\n\nfunction isNamespaceAlreadyExistsError(output: string): boolean {\n  return output.includes(\"[code: 10014]\") && output.includes(\"already exists\");\n}\n\nexport async function runInitialDeploy(cwd: string): Promise<{\n  workerUrl: string;\n  customDomains: string[];\n  accountId: string;\n  studioAdminUser: string;\n  studioPassword: string;\n  serviceKey: string;\n  credentialsChanged: boolean;\n  serviceKeyChanged: boolean;\n}> {\n  const auth = await requireAuth();\n  const loadedConfig = await loadProjectConfig(cwd);\n  const identityConfig = resolveRuntimeIdentityConfig(loadedConfig.raw);\n  const identitySecretRequirements = resolveIdentityAuthRequirements(identityConfig);\n  const aiProvider = await resolveProviderFromConfig(cwd);\n  const requiredProviderSecret = getRequiredSecretForProvider(aiProvider);\n  const secrets = await ensureStudioSecrets(cwd);\n  const envMap = await readDotEnv(cwd);\n  const providerSecretValue = envMap[requiredProviderSecret]?.trim();\n  if (!providerSecretValue) {\n    throw new Error(\n      `Missing required secret ${requiredProviderSecret} for provider \"${aiProvider}\". Add it to .env before deploy.`,\n    );\n  }\n\n  const resolvedIdentitySecrets = identitySecretRequirements.map((requirement) => {\n    const value = envMap[requirement.envKey]?.trim();\n    if (!value) {\n      throw new Error(\n        `Missing required secret ${requirement.envKey} for ${requirement.reason}. Add it to .env before deploy.`,\n      );\n    }\n    return { name: requirement.envKey, value };\n  });\n\n  const runtimeProvider = resolveProvider();\n  const runtime = await materializeRuntime(cwd);\n  let secretSyncFailed = false;\n  const secretEntries = [\n    [\"KALP_SECRET_KEY\", secrets.key],\n    [\"KALP_STUDIO_PASSWORD\", secrets.studioPassword],\n    [\"KALP_STUDIO_ADMIN_USER\", secrets.studioAdminUser],\n    [\"KALP_SERVICE_KEY\", secrets.serviceKey],\n    [requiredProviderSecret, providerSecretValue],\n    ...resolvedIdentitySecrets.map((item) => [item.name, item.value] as const),\n  ];\n  const dedupedSecrets = new Map<string, string>();\n  for (const [name, value] of secretEntries) {\n    dedupedSecrets.set(name, value);\n  }\n\n  for (const [name, value] of dedupedSecrets.entries()) {\n    try {\n      await runtimeProvider.putSecret({\n        cwd,\n        configPath: runtime.wranglerConfigPath,\n        name,\n        value,\n      });\n    } catch {\n      secretSyncFailed = true;\n      break;\n    }\n  }\n\n  await ensureKvNamespaceBindingId(cwd, runtime.wranglerConfigPath).catch(\n    () => null,\n  );\n\n  let deploy = await runtimeProvider\n    .deployRuntime({\n      cwd,\n      configPath: runtime.wranglerConfigPath,\n      useSecretsFile: secretSyncFailed,\n    })\n    .catch((error) => error);\n  if (deploy instanceof Error) {\n    const combined = deploy.message;\n    if (isNamespaceAlreadyExistsError(combined)) {\n      await ensureKvNamespaceBindingId(cwd, runtime.wranglerConfigPath);\n      deploy = await runtimeProvider.deployRuntime({\n        cwd,\n        configPath: runtime.wranglerConfigPath,\n        useSecretsFile: secretSyncFailed,\n      });\n    } else {\n      throw deploy;\n    }\n  }\n\n  const workerUrl = deploy.workerUrl;\n  const customDomains = deploy.customDomains ?? [];\n\n  const existingState = await readProjectState(cwd);\n\n  const credentialsFingerprint = createHash(\"sha256\")\n    .update(`${secrets.studioAdminUser}:${secrets.studioPassword}`)\n    .digest(\"hex\");\n  const credentialsChanged =\n    existingState?.studioCredentialsFingerprint !== credentialsFingerprint;\n  const serviceKeyFingerprint = createHash(\"sha256\")\n    .update(secrets.serviceKey)\n    .digest(\"hex\");\n  const serviceKeyChanged =\n    existingState?.serviceKeyFingerprint !== serviceKeyFingerprint;\n\n  await writeProjectState(cwd, {\n    workerUrl,\n    deployedAt: new Date().toISOString(),\n    accountId: auth.accountId,\n    studioCredentialsFingerprint: credentialsFingerprint,\n    serviceKeyFingerprint,\n    agents: existingState?.agents ?? {},\n  });\n\n  return {\n    workerUrl,\n    customDomains,\n    accountId: auth.accountId,\n    studioAdminUser: secrets.studioAdminUser,\n    studioPassword: secrets.studioPassword,\n    serviceKey: secrets.serviceKey,\n    credentialsChanged,\n    serviceKeyChanged,\n  };\n}\n","import * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\n\nexport type DeployTarget = \"cloudflare\" | \"kalp-cloud\";\n\nexport async function promptDeployTarget(message: string): Promise<DeployTarget | null> {\n  const selected = await p.select({\n    message,\n    options: [\n      {\n        value: \"cloudflare\",\n        label: \"Cloudflare\",\n        hint: \"Available now\",\n      },\n      {\n        value: \"kalp-cloud\",\n        label: \"Kalp Cloud\",\n        hint: \"Coming soon\",\n      },\n    ],\n  });\n\n  if (p.isCancel(selected)) return null;\n  return selected as DeployTarget;\n}\n\nexport function showKalpCloudWaitlist(): void {\n  p.note(\n    [\n      `${pc.bold(\"Kalp Cloud is coming soon 🚀\")}`,\n      pc.dim(\"Join the waitlist for early access:\"),\n      pc.cyan(\"https://usekalp.com/waitlist\"),\n    ].join(\"\\n\"),\n    \"Kalp Cloud\",\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,UAAU,iBAAiB;AACpC,SAAS,kBAAkB;AA2B3B,eAAe,mBACb,YACgC;AAChC,QAAM,OAAO,MAAM,SAAS,YAAY,OAAO;AAC/C,SAAO,KAAK,MAAM,IAAI;AACxB;AAEA,eAAe,oBACb,YACA,QACe;AACf,QAAM,UAAU,YAAY,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,GAAM,OAAO;AAC7E;AAEA,SAAS,uBAAuB,YAAoB,SAAyB;AAC3E,SAAO,GAAG,UAAU,IAAI,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG,CAAC;AAClE;AAEA,eAAe,iBACb,KACA,YAC4B;AAC5B,QAAM,WAAW,gBAAgB;AACjC,QAAM,aAAa,MAAM,SAAS,eAAe,EAAE,KAAK,WAAW,CAAC;AACpE,SAAO,WAAW,IAAI,CAAC,UAAU;AAAA,IAC/B,IAAI,KAAK;AAAA,IACT,OAAO,KAAK;AAAA,EACd,EAAE;AACJ;AAEA,eAAe,2BACb,KACA,YACwB;AACxB,QAAM,SAAS,MAAM,mBAAmB,UAAU;AAClD,QAAM,UAAU,OAAO,eAAe;AAAA,IACpC,CAAC,SAAS,KAAK,YAAY;AAAA,EAC7B;AAEA,MAAI,CAAC,WAAW,CAAC,OAAO,KAAM,QAAO;AACrC,MAAI,QAAQ,GAAI,QAAO,QAAQ;AAE/B,QAAM,gBAAgB,uBAAuB,OAAO,MAAM,QAAQ,OAAO;AACzE,QAAM,aAAa,MAAM,iBAAiB,KAAK,UAAU;AACzD,QAAM,WAAW,WAAW,KAAK,CAAC,SAAS,KAAK,UAAU,aAAa;AACvE,MAAI,CAAC,SAAU,QAAO;AAEtB,UAAQ,KAAK,SAAS;AACtB,QAAM,oBAAoB,YAAY,MAAM;AAC5C,SAAO,SAAS;AAClB;AAEA,SAAS,8BAA8B,QAAyB;AAC9D,SAAO,OAAO,SAAS,eAAe,KAAK,OAAO,SAAS,gBAAgB;AAC7E;AAEA,eAAsB,iBAAiB,KASpC;AACD,QAAM,OAAO,MAAM,YAAY;AAC/B,QAAM,eAAe,MAAM,kBAAkB,GAAG;AAChD,QAAM,iBAAiB,6BAA6B,aAAa,GAAG;AACpE,QAAM,6BAA6B,gCAAgC,cAAc;AACjF,QAAM,aAAa,MAAM,0BAA0B,GAAG;AACtD,QAAM,yBAAyB,6BAA6B,UAAU;AACtE,QAAM,UAAU,MAAM,oBAAoB,GAAG;AAC7C,QAAM,SAAS,MAAM,WAAW,GAAG;AACnC,QAAM,sBAAsB,OAAO,sBAAsB,GAAG,KAAK;AACjE,MAAI,CAAC,qBAAqB;AACxB,UAAM,IAAI;AAAA,MACR,2BAA2B,sBAAsB,kBAAkB,UAAU;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,0BAA0B,2BAA2B,IAAI,CAAC,gBAAgB;AAC9E,UAAM,QAAQ,OAAO,YAAY,MAAM,GAAG,KAAK;AAC/C,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR,2BAA2B,YAAY,MAAM,QAAQ,YAAY,MAAM;AAAA,MACzE;AAAA,IACF;AACA,WAAO,EAAE,MAAM,YAAY,QAAQ,MAAM;AAAA,EAC3C,CAAC;AAED,QAAM,kBAAkB,gBAAgB;AACxC,QAAM,UAAU,MAAM,mBAAmB,GAAG;AAC5C,MAAI,mBAAmB;AACvB,QAAM,gBAAgB;AAAA,IACpB,CAAC,mBAAmB,QAAQ,GAAG;AAAA,IAC/B,CAAC,wBAAwB,QAAQ,cAAc;AAAA,IAC/C,CAAC,0BAA0B,QAAQ,eAAe;AAAA,IAClD,CAAC,oBAAoB,QAAQ,UAAU;AAAA,IACvC,CAAC,wBAAwB,mBAAmB;AAAA,IAC5C,GAAG,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,KAAK,KAAK,CAAU;AAAA,EAC3E;AACA,QAAM,iBAAiB,oBAAI,IAAoB;AAC/C,aAAW,CAAC,MAAM,KAAK,KAAK,eAAe;AACzC,mBAAe,IAAI,MAAM,KAAK;AAAA,EAChC;AAEA,aAAW,CAAC,MAAM,KAAK,KAAK,eAAe,QAAQ,GAAG;AACpD,QAAI;AACF,YAAM,gBAAgB,UAAU;AAAA,QAC9B;AAAA,QACA,YAAY,QAAQ;AAAA,QACpB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,yBAAmB;AACnB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,2BAA2B,KAAK,QAAQ,kBAAkB,EAAE;AAAA,IAChE,MAAM;AAAA,EACR;AAEA,MAAI,SAAS,MAAM,gBAChB,cAAc;AAAA,IACb;AAAA,IACA,YAAY,QAAQ;AAAA,IACpB,gBAAgB;AAAA,EAClB,CAAC,EACA,MAAM,CAAC,UAAU,KAAK;AACzB,MAAI,kBAAkB,OAAO;AAC3B,UAAM,WAAW,OAAO;AACxB,QAAI,8BAA8B,QAAQ,GAAG;AAC3C,YAAM,2BAA2B,KAAK,QAAQ,kBAAkB;AAChE,eAAS,MAAM,gBAAgB,cAAc;AAAA,QAC3C;AAAA,QACA,YAAY,QAAQ;AAAA,QACpB,gBAAgB;AAAA,MAClB,CAAC;AAAA,IACH,OAAO;AACL,YAAM;AAAA,IACR;AAAA,EACF;AAEA,QAAM,YAAY,OAAO;AACzB,QAAM,gBAAgB,OAAO,iBAAiB,CAAC;AAE/C,QAAM,gBAAgB,MAAM,iBAAiB,GAAG;AAEhD,QAAM,yBAAyB,WAAW,QAAQ,EAC/C,OAAO,GAAG,QAAQ,eAAe,IAAI,QAAQ,cAAc,EAAE,EAC7D,OAAO,KAAK;AACf,QAAM,qBACJ,eAAe,iCAAiC;AAClD,QAAM,wBAAwB,WAAW,QAAQ,EAC9C,OAAO,QAAQ,UAAU,EACzB,OAAO,KAAK;AACf,QAAM,oBACJ,eAAe,0BAA0B;AAE3C,QAAM,kBAAkB,KAAK;AAAA,IAC3B;AAAA,IACA,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,WAAW,KAAK;AAAA,IAChB,8BAA8B;AAAA,IAC9B;AAAA,IACA,QAAQ,eAAe,UAAU,CAAC;AAAA,EACpC,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,KAAK;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,gBAAgB,QAAQ;AAAA,IACxB,YAAY,QAAQ;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACF;;;ACjNA,YAAY,OAAO;AACnB,OAAO,QAAQ;AAIf,eAAsB,mBAAmB,SAA+C;AACtF,QAAM,WAAW,MAAQ,SAAO;AAAA,IAC9B;AAAA,IACA,SAAS;AAAA,MACP;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF,CAAC;AAED,MAAM,WAAS,QAAQ,EAAG,QAAO;AACjC,SAAO;AACT;AAEO,SAAS,wBAA8B;AAC5C,EAAE;AAAA,IACA;AAAA,MACE,GAAG,GAAG,KAAK,qCAA8B,CAAC;AAAA,MAC1C,GAAG,IAAI,qCAAqC;AAAA,MAC5C,GAAG,KAAK,8BAA8B;AAAA,IACxC,EAAE,KAAK,IAAI;AAAA,IACX;AAAA,EACF;AACF;","names":[]}

package/dist/delete-DY5FQAHW.js

@@ -0,0 +1,127 @@
+#!/usr/bin/env node
+import {
+  generateTypes
+} from "./chunk-MMS3GWBG.js";
+import {
+  readLocalSecretsFromConfig,
+  resolveSecretsRuntimeConfigPath,
+  writeLocalSecretsToConfig
+} from "./chunk-5ZRVO3TQ.js";
+import "./chunk-INB3LG6O.js";
+import {
+  requireAuth,
+  resolveProvider
+} from "./chunk-GNQI376N.js";
+import "./chunk-FO24J6XL.js";
+import "./chunk-DHCCSWJN.js";
+
+// src/commands/secrets/delete.ts
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+import pc from "picocolors";
+var LOGO = "\u{1F98B}";
+var delete_default = defineCommand({
+  meta: {
+    name: "delete",
+    description: "Delete a secret from remote runtime and local config"
+  },
+  args: {
+    key: {
+      type: "string",
+      alias: "k",
+      description: "Secret key to delete"
+    },
+    yes: {
+      type: "boolean",
+      alias: "y",
+      description: "Skip confirmation prompt",
+      default: false
+    },
+    help: {
+      type: "boolean",
+      alias: "h",
+      description: "Show help",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const cwd = process.cwd();
+    if (args.help) {
+      p.log.info(`${pc.bold("Usage")}: kalp secrets delete -k <KEY>`);
+      return;
+    }
+    p.intro(`${LOGO} ${pc.bold("kalp secrets delete")}`);
+    await requireAuth().catch(() => {
+      p.log.error("Not authenticated. Run `kalp login` first.");
+      process.exit(1);
+    });
+    let configPath;
+    try {
+      configPath = await resolveSecretsRuntimeConfigPath(cwd);
+    } catch (error) {
+      p.log.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+    const provider = resolveProvider();
+    let remoteSecrets;
+    try {
+      remoteSecrets = await provider.listSecrets({ cwd, configPath });
+    } catch (error) {
+      p.log.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+    if (!remoteSecrets || remoteSecrets.length === 0) {
+      p.log.info(pc.dim("No remote secrets to delete."));
+      p.outro("Done");
+      return;
+    }
+    let key = args.key?.trim();
+    if (!key) {
+      const selected = await p.select({
+        message: "Select a secret to delete",
+        options: remoteSecrets.map((secret) => secret.name).sort((a, b) => a.localeCompare(b)).map((name) => ({ value: name, label: name }))
+      });
+      if (p.isCancel(selected)) {
+        p.outro("Cancelled");
+        return;
+      }
+      key = String(selected);
+    }
+    const existsRemote = remoteSecrets.some((secret) => secret.name === key);
+    if (!existsRemote) {
+      p.log.error(`Secret ${pc.cyan(key)} not found in remote runtime.`);
+      process.exit(1);
+    }
+    if (!args.yes) {
+      const confirmed = await p.confirm({
+        message: `Delete ${pc.cyan(key)} from remote runtime and local config?`,
+        initialValue: false
+      });
+      if (p.isCancel(confirmed) || !confirmed) {
+        p.outro("Cancelled");
+        return;
+      }
+    }
+    const spinner2 = p.spinner();
+    spinner2.start(`Deleting ${pc.cyan(key)}`);
+    try {
+      await provider.deleteSecret({ cwd, configPath, name: key });
+      const localSecrets = await readLocalSecretsFromConfig(cwd);
+      await writeLocalSecretsToConfig(
+        cwd,
+        localSecrets.filter((secret) => secret !== key)
+      );
+      await generateTypes(cwd);
+      spinner2.stop(`Secret ${pc.cyan(key)} deleted`);
+      p.outro("Done");
+    } catch (error) {
+      spinner2.stop("Failed to delete secret");
+      p.log.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
+  }
+});
+export {
+  delete_default as default
+};
+//# sourceMappingURL=delete-DY5FQAHW.js.map

package/dist/delete-DY5FQAHW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/secrets/delete.ts"],"sourcesContent":["import { defineCommand } from \"citty\";\nimport * as p from \"@clack/prompts\";\nimport pc from \"picocolors\";\nimport { requireAuth } from \"@/utils/auth\";\nimport { generateTypes } from \"@/utils/codegen\";\nimport { resolveProvider } from \"@/utils/providers\";\nimport { readLocalSecretsFromConfig, writeLocalSecretsToConfig } from \"@/utils/secrets-config\";\nimport { resolveSecretsRuntimeConfigPath } from \"@/utils/secrets-runtime\";\n\nconst LOGO = \"🦋\";\n\nexport default defineCommand({\n  meta: {\n    name: \"delete\",\n    description: \"Delete a secret from remote runtime and local config\",\n  },\n  args: {\n    key: {\n      type: \"string\",\n      alias: \"k\",\n      description: \"Secret key to delete\",\n    },\n    yes: {\n      type: \"boolean\",\n      alias: \"y\",\n      description: \"Skip confirmation prompt\",\n      default: false,\n    },\n    help: {\n      type: \"boolean\",\n      alias: \"h\",\n      description: \"Show help\",\n      default: false,\n    },\n  },\n  async run({ args }) {\n    const cwd = process.cwd();\n\n    if (args.help) {\n      p.log.info(`${pc.bold(\"Usage\")}: kalp secrets delete -k <KEY>`);\n      return;\n    }\n\n    p.intro(`${LOGO} ${pc.bold(\"kalp secrets delete\")}`);\n\n    await requireAuth().catch(() => {\n      p.log.error(\"Not authenticated. Run `kalp login` first.\");\n      process.exit(1);\n    });\n\n    let configPath: string;\n    try {\n      configPath = await resolveSecretsRuntimeConfigPath(cwd);\n    } catch (error) {\n      p.log.error(error instanceof Error ? error.message : String(error));\n      process.exit(1);\n    }\n\n    const provider = resolveProvider();\n    let remoteSecrets;\n    try {\n      remoteSecrets = await provider.listSecrets({ cwd, configPath });\n    } catch (error) {\n      p.log.error(error instanceof Error ? error.message : String(error));\n      process.exit(1);\n    }\n\n    if (!remoteSecrets || remoteSecrets.length === 0) {\n      p.log.info(pc.dim(\"No remote secrets to delete.\"));\n      p.outro(\"Done\");\n      return;\n    }\n\n    let key = args.key?.trim();\n    if (!key) {\n      const selected = await p.select({\n        message: \"Select a secret to delete\",\n        options: remoteSecrets\n          .map((secret) => secret.name)\n          .sort((a, b) => a.localeCompare(b))\n          .map((name) => ({ value: name, label: name })),\n      });\n      if (p.isCancel(selected)) {\n        p.outro(\"Cancelled\");\n        return;\n      }\n      key = String(selected);\n    }\n\n    const existsRemote = remoteSecrets.some((secret) => secret.name === key);\n    if (!existsRemote) {\n      p.log.error(`Secret ${pc.cyan(key)} not found in remote runtime.`);\n      process.exit(1);\n    }\n\n    if (!args.yes) {\n      const confirmed = await p.confirm({\n        message: `Delete ${pc.cyan(key)} from remote runtime and local config?`,\n        initialValue: false,\n      });\n      if (p.isCancel(confirmed) || !confirmed) {\n        p.outro(\"Cancelled\");\n        return;\n      }\n    }\n\n    const spinner = p.spinner();\n    spinner.start(`Deleting ${pc.cyan(key)}`);\n\n    try {\n      await provider.deleteSecret({ cwd, configPath, name: key });\n      const localSecrets = await readLocalSecretsFromConfig(cwd);\n      await writeLocalSecretsToConfig(\n        cwd,\n        localSecrets.filter((secret) => secret !== key),\n      );\n      await generateTypes(cwd);\n\n      spinner.stop(`Secret ${pc.cyan(key)} deleted`);\n      p.outro(\"Done\");\n    } catch (error) {\n      spinner.stop(\"Failed to delete secret\");\n      p.log.error(error instanceof Error ? error.message : String(error));\n      process.exit(1);\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,YAAY,OAAO;AACnB,OAAO,QAAQ;AAOf,IAAM,OAAO;AAEb,IAAO,iBAAQ,cAAc;AAAA,EAC3B,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,KAAK;AAAA,MACH,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,IACA,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,UAAM,MAAM,QAAQ,IAAI;AAExB,QAAI,KAAK,MAAM;AACb,MAAE,MAAI,KAAK,GAAG,GAAG,KAAK,OAAO,CAAC,gCAAgC;AAC9D;AAAA,IACF;AAEA,IAAE,QAAM,GAAG,IAAI,IAAI,GAAG,KAAK,qBAAqB,CAAC,EAAE;AAEnD,UAAM,YAAY,EAAE,MAAM,MAAM;AAC9B,MAAE,MAAI,MAAM,4CAA4C;AACxD,cAAQ,KAAK,CAAC;AAAA,IAChB,CAAC;AAED,QAAI;AACJ,QAAI;AACF,mBAAa,MAAM,gCAAgC,GAAG;AAAA,IACxD,SAAS,OAAO;AACd,MAAE,MAAI,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,WAAW,gBAAgB;AACjC,QAAI;AACJ,QAAI;AACF,sBAAgB,MAAM,SAAS,YAAY,EAAE,KAAK,WAAW,CAAC;AAAA,IAChE,SAAS,OAAO;AACd,MAAE,MAAI,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,CAAC,iBAAiB,cAAc,WAAW,GAAG;AAChD,MAAE,MAAI,KAAK,GAAG,IAAI,8BAA8B,CAAC;AACjD,MAAE,QAAM,MAAM;AACd;AAAA,IACF;AAEA,QAAI,MAAM,KAAK,KAAK,KAAK;AACzB,QAAI,CAAC,KAAK;AACR,YAAM,WAAW,MAAQ,SAAO;AAAA,QAC9B,SAAS;AAAA,QACT,SAAS,cACN,IAAI,CAAC,WAAW,OAAO,IAAI,EAC3B,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,EACjC,IAAI,CAAC,UAAU,EAAE,OAAO,MAAM,OAAO,KAAK,EAAE;AAAA,MACjD,CAAC;AACD,UAAM,WAAS,QAAQ,GAAG;AACxB,QAAE,QAAM,WAAW;AACnB;AAAA,MACF;AACA,YAAM,OAAO,QAAQ;AAAA,IACvB;AAEA,UAAM,eAAe,cAAc,KAAK,CAAC,WAAW,OAAO,SAAS,GAAG;AACvE,QAAI,CAAC,cAAc;AACjB,MAAE,MAAI,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,+BAA+B;AACjE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,CAAC,KAAK,KAAK;AACb,YAAM,YAAY,MAAQ,UAAQ;AAAA,QAChC,SAAS,UAAU,GAAG,KAAK,GAAG,CAAC;AAAA,QAC/B,cAAc;AAAA,MAChB,CAAC;AACD,UAAM,WAAS,SAAS,KAAK,CAAC,WAAW;AACvC,QAAE,QAAM,WAAW;AACnB;AAAA,MACF;AAAA,IACF;AAEA,UAAMA,WAAY,UAAQ;AAC1B,IAAAA,SAAQ,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,EAAE;AAExC,QAAI;AACF,YAAM,SAAS,aAAa,EAAE,KAAK,YAAY,MAAM,IAAI,CAAC;AAC1D,YAAM,eAAe,MAAM,2BAA2B,GAAG;AACzD,YAAM;AAAA,QACJ;AAAA,QACA,aAAa,OAAO,CAAC,WAAW,WAAW,GAAG;AAAA,MAChD;AACA,YAAM,cAAc,GAAG;AAEvB,MAAAA,SAAQ,KAAK,UAAU,GAAG,KAAK,GAAG,CAAC,UAAU;AAC7C,MAAE,QAAM,MAAM;AAAA,IAChB,SAAS,OAAO;AACd,MAAAA,SAAQ,KAAK,yBAAyB;AACtC,MAAE,MAAI,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AACF,CAAC;","names":["spinner"]}