@konker.dev/config-o-tron 0.0.1

package/LICENSE

@@ -0,0 +1,15 @@
+ISC License
+
+Copyright (c) 2024 Konrad Markus <mail@konker.dev>
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
+SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
+OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
+CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/README.md

@@ -0,0 +1,131 @@
+# Config-o-tron
+
+CLI tool for configuration and secrets management using AWS SSM with a pluggable validation layer (Effect Schema or Zod).
+
+## Prerequisites
+
+- Node.js 18+ (or a compatible runtime)
+- pnpm
+- AWS credentials and region configuration for the default `aws-ssm` provider
+
+## Setup
+
+Install dependencies:
+
+```sh
+pnpm install
+```
+
+Build the CLI:
+
+```sh
+pnpm run build
+```
+
+## Configure
+
+Config-o-tron reads configuration from `config-o-tronrc.json` or `config-o-tronrc.json5` (searches current and parent directories) and
+environment variables. Both files are parsed with JSON5, so comments and trailing commas are allowed.
+Validation is pluggable; set `validation` to `effect` (default) or `zod`. Your schema file must export a single
+`ConfigSchema` value that matches the selected validator.
+
+Example `config-o-tronrc.json`:
+
+```json
+{
+  "env": "dev",
+  "provider": "aws-ssm",
+  "ssmPrefix": "/config-o-tron",
+  "schema": "src/schema.ts",
+  "validation": "effect",
+  "providerGuards": {
+    "aws-ssm": {
+      "accountId": "123456789012",
+      "region": "us-east-1"
+    }
+  }
+}
+```
+
+Provider guards are provider-specific safety checks that run before any provider operation. They can be bypassed with
+`CONFIG_O_TRON_IGNORE_PROVIDER_GUARDS=1` for emergencies.
+For `aws-ssm`, `accountId` is resolved from `AWS_ACCOUNT_ID` or STS `GetCallerIdentity`, and `region` is resolved
+from `AWS_REGION`/`AWS_DEFAULT_REGION` or the AWS SDK client configuration.
+
+Environment overrides:
+
+- `CONFIG_O_TRON_ENV`
+- `CONFIG_O_TRON_PROVIDER`
+- `CONFIG_O_TRON_SSM_PREFIX`
+- `CONFIG_O_TRON_SCHEMA`
+- `CONFIG_O_TRON_VALIDATION`
+- `CONFIG_O_TRON_FORMAT`
+- `CONFIG_O_TRON_SEPARATOR`
+- `CONFIG_O_TRON_CACHE`
+- `CONFIG_O_TRON_CI`
+- `CONFIG_O_TRON_IGNORE_PROVIDER_GUARDS`
+
+## Run
+
+Show CLI help:
+
+```sh
+pnpm run config-o-tron -- --help
+```
+
+List keys for a service:
+
+```sh
+pnpm run config-o-tron list <service>
+```
+
+Export config for a service:
+
+```sh
+pnpm run config-o-tron export <service>
+```
+
+Use a different provider:
+
+```sh
+CONFIG_O_TRON_PROVIDER=mock pnpm run config-o-tron list <service>
+```
+
+## Programmatic API (export-only)
+
+Config-o-tron exposes a TypeScript API for export-only usage. It resolves configuration the same way as the CLI (rc file,
+env vars, defaults), but lets you override values inline.
+
+```ts
+import { exportConfig } from '@konker.dev/config-o-tron';
+
+const result = await exportConfig({
+  service: 'api',
+  sources: ['shared'],
+  format: 'json',
+  config: {
+    env: 'prod',
+    provider: 'aws-ssm',
+    ssmPrefix: '/config-o-tron',
+    schema: 'src/schema.ts',
+    validation: 'effect',
+  },
+});
+
+// Structured config object
+console.log(result.config);
+```
+
+## Development
+
+Run tests:
+
+```sh
+pnpm run test
+```
+
+Lint:
+
+```sh
+pnpm run lint-check
+```

package/dist/api.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Programmatic Export API
+ */
+import './providers/index.js';
+import { type ResolvedConfig } from './config.js';
+import type { MergeConflict } from './lib/merge.js';
+export type ExportApiOptions = {
+    readonly service: string;
+    readonly sources?: ReadonlyArray<string> | undefined;
+    readonly format?: 'env' | 'json' | undefined;
+    readonly separator?: string | undefined;
+    readonly strict?: boolean | undefined;
+    readonly strictMerge?: boolean | undefined;
+    readonly warnOnOverride?: boolean | undefined;
+    readonly config?: Partial<ResolvedConfig> | undefined;
+};
+export type ExportApiResult = {
+    readonly config: Record<string, unknown>;
+    readonly formatted: string;
+    readonly conflicts: ReadonlyArray<MergeConflict>;
+    readonly warnings: ReadonlyArray<string>;
+};
+export declare function exportConfig(options: ExportApiOptions): Promise<ExportApiResult>;
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,sBAAsB,CAAC;AAM9B,OAAO,EAAkC,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC1C,CAAC;AA+BF,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAkBtF"}

package/dist/api.js

@@ -0,0 +1,44 @@
+/**
+ * Programmatic Export API
+ */
+import './providers/index.js';
+import * as Effect from 'effect/Effect';
+import { pipe } from 'effect/Function';
+import { executeExport } from './commands/export.js';
+import { resolveConfig } from './config.js';
+function buildCliOptions(options) {
+    const overrides = options.config;
+    return {
+        env: overrides?.env,
+        provider: overrides?.provider,
+        ssmPrefix: overrides?.ssmPrefix,
+        schema: overrides?.schema,
+        validation: overrides?.validation,
+        source: overrides?.sources,
+        format: options.format ?? overrides?.format,
+        separator: options.separator ?? overrides?.separator,
+        cache: overrides?.cache,
+        ci: overrides?.ci,
+        strict: options.strict ?? overrides?.strict,
+    };
+}
+function applyConfigOverrides(config, overrides) {
+    if (!overrides) {
+        return config;
+    }
+    return {
+        ...config,
+        providerGuards: overrides.providerGuards ?? config.providerGuards,
+    };
+}
+export async function exportConfig(options) {
+    const cliOptions = buildCliOptions(options);
+    return Effect.runPromise(pipe(resolveConfig(cliOptions), Effect.map((config) => applyConfigOverrides(config, options.config)), Effect.flatMap((config) => executeExport({
+        service: options.service,
+        sources: options.sources ?? config.sources,
+        config,
+        strictMerge: options.strictMerge,
+        warnOnOverride: options.warnOnOverride,
+    }))));
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,sBAAsB,CAAC;AAE9B,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAmB,aAAa,EAAuB,MAAM,aAAa,CAAC;AAqBlF,SAAS,eAAe,CAAC,OAAyB;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjC,OAAO;QACL,GAAG,EAAE,SAAS,EAAE,GAAG;QACnB,QAAQ,EAAE,SAAS,EAAE,QAAQ;QAC7B,SAAS,EAAE,SAAS,EAAE,SAAS;QAC/B,MAAM,EAAE,SAAS,EAAE,MAAM;QACzB,UAAU,EAAE,SAAS,EAAE,UAAU;QACjC,MAAM,EAAE,SAAS,EAAE,OAAO;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,MAAM;QAC3C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,SAAS;QACpD,KAAK,EAAE,SAAS,EAAE,KAAK;QACvB,EAAE,EAAE,SAAS,EAAE,EAAE;QACjB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,MAAM;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAsB,EAAE,SAAmC;IACvF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,GAAG,MAAM;QACT,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE5C,OAAO,MAAM,CAAC,UAAU,CACtB,IAAI,CACF,aAAa,CAAC,UAAU,CAAC,EACzB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EACpE,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,aAAa,CAAC;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;QAC1C,MAAM;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+/**
+ * ConfigOTron CLI
+ *
+ * Configuration and secrets management tool
+ */
+import './providers/index.js';
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AACH,OAAO,sBAAsB,CAAC"}

package/dist/cli.js

@@ -0,0 +1,267 @@
+#!/usr/bin/env node
+/**
+ * ConfigOTron CLI
+ *
+ * Configuration and secrets management tool
+ */
+import './providers/index.js';
+import { Command } from 'commander';
+import * as Cause from 'effect/Cause';
+import * as Effect from 'effect/Effect';
+import * as Exit from 'effect/Exit';
+import { pipe } from 'effect/Function';
+import * as Option from 'effect/Option';
+import { runDelete } from './commands/delete.js';
+import { runExport } from './commands/export.js';
+import { runList } from './commands/list.js';
+import { runSnapshotRestore, runSnapshotSave } from './commands/snapshot.js';
+import { runUpsert } from './commands/upsert.js';
+import { runValidate } from './commands/validate.js';
+import { resolveConfig } from './config.js';
+import { EXIT_VALIDATION_ERROR, formatError } from './errors.js';
+// --------------------------------------------------------------------------
+// Error Handling
+// --------------------------------------------------------------------------
+const handleError = (error) => {
+    if (error && typeof error === 'object' && 'context' in error && '_tag' in error) {
+        // ConfigOTron error
+        console.error(formatError(error));
+        const exitCode = 'exitCode' in error ? error.exitCode : EXIT_VALIDATION_ERROR;
+        process.exit(exitCode);
+    }
+    if (error instanceof Error) {
+        console.error(`Error: ${error.message}`);
+        process.exit(EXIT_VALIDATION_ERROR);
+    }
+    console.error('Unknown error:', error);
+    process.exit(EXIT_VALIDATION_ERROR);
+};
+const runEffect = (effect) => {
+    Effect.runPromiseExit(effect)
+        .then((exit) => {
+        if (Exit.isSuccess(exit)) {
+            return;
+        }
+        const causeOpt = Exit.causeOption(exit);
+        const failure = pipe(causeOpt, Option.flatMap(Cause.failureOption), Option.getOrUndefined);
+        if (failure) {
+            handleError(failure);
+            return;
+        }
+        const prettyCause = pipe(causeOpt, Option.map(Cause.pretty), Option.getOrUndefined);
+        if (prettyCause) {
+            console.error(prettyCause);
+            process.exit(EXIT_VALIDATION_ERROR);
+        }
+        handleError(new Error('Unknown error'));
+    })
+        .catch(handleError);
+};
+// --------------------------------------------------------------------------
+// CLI Setup
+// --------------------------------------------------------------------------
+const program = new Command();
+program
+    .name('config-o-tron')
+    .description('Configuration and secrets management tool')
+    .version('0.0.1')
+    .option('--ci', 'Disable prompts; require explicit flags like --confirm')
+    .option('--strict', 'Treat warnings as errors');
+// --------------------------------------------------------------------------
+// Export Command
+// --------------------------------------------------------------------------
+program
+    .command('export <service>')
+    .description('Export configuration')
+    .option('--source <service>', 'Additional sources (repeatable)', (val, prev) => [...prev, val], [])
+    .option('--format <env|json>', 'Output format (default: env)')
+    .option('--provider <name>', 'Provider name (default: aws-ssm)')
+    .option('--env <environment>', 'Environment name')
+    .option('--separator <char>', 'Env key separator (default: _)')
+    .option('--strict-merge', 'Fail on type conflicts during merge')
+    .option('--warn-on-override', 'Log all key overrides')
+    .option('--cache <duration>', 'Cache provider fetches')
+    .option('--no-cache', 'Disable cache')
+    .option('--ssm-prefix <prefix>', 'SSM path prefix (default: /config-o-tron)')
+    .option('--schema <path>', 'Schema path')
+    .option('--validation <effect|zod>', 'Validation layer (default: effect)')
+    .action((service, options) => {
+    runEffect(pipe(resolveConfig({
+        ...options,
+        source: options.source,
+        ci: program.opts().ci,
+        strict: program.opts().strict,
+    }), Effect.flatMap((config) => runExport({
+        service,
+        sources: options.source,
+        config,
+        strictMerge: options.strictMerge,
+        warnOnOverride: options.warnOnOverride,
+    }))));
+});
+// --------------------------------------------------------------------------
+// Upsert Command
+// --------------------------------------------------------------------------
+program
+    .command('upsert <service> <key> [value]')
+    .description('Upsert configuration value')
+    .option('--provider <name>', 'Provider name (default: aws-ssm)')
+    .option('--env <environment>', 'Environment name')
+    .option('--stdin', 'Read value from stdin')
+    .option('--type <auto|string|int|float|bool|json>', 'How to parse input')
+    .option('--skip-encryption-check', 'Skip encryption verification')
+    .option('--ssm-prefix <prefix>', 'SSM path prefix (default: /config-o-tron)')
+    .option('--schema <path>', 'Schema path')
+    .option('--validation <effect|zod>', 'Validation layer (default: effect)')
+    .action((service, key, value, options) => {
+    runEffect(pipe(resolveConfig({
+        ...options,
+        ci: program.opts().ci,
+        strict: program.opts().strict,
+    }), Effect.flatMap((config) => runUpsert({
+        service,
+        key,
+        value,
+        stdin: options.stdin,
+        type: options.type,
+        skipEncryptionCheck: options.skipEncryptionCheck,
+        config,
+    }))));
+});
+// --------------------------------------------------------------------------
+// Validate Command
+// --------------------------------------------------------------------------
+program
+    .command('validate')
+    .description('Validate configuration file')
+    .requiredOption('--file <path>', 'Path to JSON or .env file')
+    .option('--schema <path>', 'Schema path')
+    .option('--format <env|json>', 'File format (auto-detected if not specified)')
+    .option('--validation <effect|zod>', 'Validation layer (default: effect)')
+    .action((options) => {
+    runEffect(pipe(resolveConfig({
+        ...options,
+        ci: program.opts().ci,
+        strict: program.opts().strict,
+    }), Effect.flatMap((config) => runValidate({
+        file: options.file,
+        format: options.format,
+        config,
+    })), Effect.tap((valid) => Effect.sync(() => {
+        if (!valid) {
+            process.exit(EXIT_VALIDATION_ERROR);
+        }
+    }))));
+});
+// --------------------------------------------------------------------------
+// List Command
+// --------------------------------------------------------------------------
+program
+    .command('list <service>')
+    .description('List configuration keys for a service')
+    .option('--provider <name>', 'Provider name (default: aws-ssm)')
+    .option('--env <environment>', 'Environment name')
+    .option('--format <keys|table|json>', 'Output format (default: keys)')
+    .option('--show-values', 'Print secret values (TTY only)')
+    .option('--unsafe-show-values', 'Allow printing secrets even when stdout is not a TTY')
+    .option('--ssm-prefix <prefix>', 'SSM path prefix (default: /config-o-tron)')
+    .action((service, options) => {
+    runEffect(pipe(resolveConfig({
+        ...options,
+        ci: program.opts().ci,
+        strict: program.opts().strict,
+    }), Effect.flatMap((config) => runList({
+        service,
+        format: options.format,
+        showValues: options.showValues,
+        unsafeShowValues: options.unsafeShowValues,
+        config,
+    }))));
+});
+// --------------------------------------------------------------------------
+// Delete Command
+// --------------------------------------------------------------------------
+program
+    .command('delete <service> <key>')
+    .description('Delete configuration value')
+    .option('--provider <name>', 'Provider name (default: aws-ssm)')
+    .option('--env <environment>', 'Environment name')
+    .option('--confirm', 'Skip interactive confirmation')
+    .option('--ssm-prefix <prefix>', 'SSM path prefix (default: /config-o-tron)')
+    .option('--schema <path>', 'Schema path')
+    .option('--validation <effect|zod>', 'Validation layer (default: effect)')
+    .action((service, key, options) => {
+    runEffect(pipe(resolveConfig({
+        ...options,
+        ci: program.opts().ci,
+        strict: program.opts().strict,
+    }), Effect.flatMap((config) => runDelete({
+        service,
+        key,
+        confirm: options.confirm,
+        config,
+    }))));
+});
+// --------------------------------------------------------------------------
+// Snapshot Commands
+// --------------------------------------------------------------------------
+const snapshotCmd = program.command('snapshot').description('Snapshot management');
+snapshotCmd
+    .command('save <service>')
+    .description('Save configuration snapshot')
+    .option('--source <service>', 'Additional sources (repeatable)', (val, prev) => [...prev, val], [])
+    .option('--provider <name>', 'Provider name (default: aws-ssm)')
+    .option('--env <environment>', 'Environment name')
+    .option('--output <path>', 'Output path')
+    .option('--encrypt', 'Encrypt snapshot at rest')
+    .option('--snapshot-key-file <path>', 'Read encryption key from file')
+    .option('--ssm-prefix <prefix>', 'SSM path prefix (default: /config-o-tron)')
+    .option('--schema <path>', 'Schema path')
+    .option('--validation <effect|zod>', 'Validation layer (default: effect)')
+    .action((service, options) => {
+    runEffect(pipe(resolveConfig({
+        ...options,
+        source: options.source,
+        ci: program.opts().ci,
+        strict: program.opts().strict,
+    }), Effect.flatMap((config) => runSnapshotSave({
+        service,
+        sources: options.source,
+        output: options.output,
+        encrypt: options.encrypt,
+        snapshotKeyFile: options.snapshotKeyFile,
+        config,
+    }))));
+});
+snapshotCmd
+    .command('restore <snapshot-file>')
+    .description('Restore configuration from snapshot')
+    .option('--provider <name>', 'Provider name (default: aws-ssm)')
+    .option('--dry-run', 'Show diff without applying changes')
+    .option('--force-schema-mismatch', 'Allow restore despite schema hash mismatch')
+    .option('--confirm', 'Skip interactive confirmation')
+    .option('--show-values', 'Print secret values in diff output (TTY only)')
+    .option('--unsafe-show-values', 'Allow printing secrets even when stdout is not a TTY')
+    .option('--ssm-prefix <prefix>', 'SSM path prefix (default: /config-o-tron)')
+    .option('--schema <path>', 'Schema path')
+    .option('--validation <effect|zod>', 'Validation layer (default: effect)')
+    .action((snapshotFile, options) => {
+    runEffect(pipe(resolveConfig({
+        ...options,
+        ci: program.opts().ci,
+        strict: program.opts().strict,
+    }), Effect.flatMap((config) => runSnapshotRestore({
+        snapshotFile,
+        dryRun: options.dryRun,
+        forceSchemaMatch: options.forceSchemaMismatch,
+        confirm: options.confirm,
+        showValues: options.showValues,
+        unsafeShowValues: options.unsafeShowValues,
+        config,
+    }))));
+});
+// --------------------------------------------------------------------------
+// Parse and Run
+// --------------------------------------------------------------------------
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AACH,OAAO,sBAAsB,CAAC;AAE9B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAmB,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAA6B,qBAAqB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE5F,6EAA6E;AAC7E,iBAAiB;AACjB,6EAA6E;AAE7E,MAAM,WAAW,GAAG,CAAC,KAAc,EAAS,EAAE;IAC5C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QAChF,oBAAoB;QACpB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAA6B,CAAC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,UAAU,IAAI,KAAK,CAAC,CAAC,CAAE,KAAK,CAAC,QAAmB,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AACtC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAI,MAAiC,EAAQ,EAAE;IAC/D,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAE3F,IAAI,OAAO,EAAE,CAAC;YACZ,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACpF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACtC,CAAC;QAED,WAAW,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;SACD,KAAK,CAAC,WAAW,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,6EAA6E;AAC7E,YAAY;AACZ,6EAA6E;AAE7E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,eAAe,CAAC;KACrB,WAAW,CAAC,2CAA2C,CAAC;KACxD,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,MAAM,EAAE,wDAAwD,CAAC;KACxE,MAAM,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;AAElD,6EAA6E;AAC7E,iBAAiB;AACjB,6EAA6E;AAE7E,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,sBAAsB,CAAC;KACnC,MAAM,CAAC,oBAAoB,EAAE,iCAAiC,EAAE,CAAC,GAAG,EAAE,IAAmB,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;KACjH,MAAM,CAAC,qBAAqB,EAAE,8BAA8B,CAAC;KAC7D,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;KAC9D,MAAM,CAAC,gBAAgB,EAAE,qCAAqC,CAAC;KAC/D,MAAM,CAAC,oBAAoB,EAAE,uBAAuB,CAAC;KACrD,MAAM,CAAC,oBAAoB,EAAE,wBAAwB,CAAC;KACtD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC;KACrC,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;KAC5E,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;KACxC,MAAM,CAAC,2BAA2B,EAAE,oCAAoC,CAAC;KACzE,MAAM,CACL,CACE,OAAe,EACf,OAAiG,EACjG,EAAE;IACF,SAAS,CACP,IAAI,CACF,aAAa,CAAC;QACZ,GAAG,OAAO;QACV,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;KAC9B,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,SAAS,CAAC;QACR,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,MAAM;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEJ,6EAA6E;AAC7E,iBAAiB;AACjB,6EAA6E;AAE7E,OAAO;KACJ,OAAO,CAAC,gCAAgC,CAAC;KACzC,WAAW,CAAC,4BAA4B,CAAC;KACzC,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,SAAS,EAAE,uBAAuB,CAAC;KAC1C,MAAM,CAAC,0CAA0C,EAAE,oBAAoB,CAAC;KACxE,MAAM,CAAC,yBAAyB,EAAE,8BAA8B,CAAC;KACjE,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;KAC5E,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;KACxC,MAAM,CAAC,2BAA2B,EAAE,oCAAoC,CAAC;KACzE,MAAM,CACL,CACE,OAAe,EACf,GAAW,EACX,KAAyB,EACzB,OAAuF,EACvF,EAAE;IACF,SAAS,CACP,IAAI,CACF,aAAa,CAAC;QACZ,GAAG,OAAO;QACV,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;KAC9B,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,SAAS,CAAC;QACR,OAAO;QACP,GAAG;QACH,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAyE;QACvF,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,MAAM;KACP,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEJ,6EAA6E;AAC7E,mBAAmB;AACnB,6EAA6E;AAE7E,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,cAAc,CAAC,eAAe,EAAE,2BAA2B,CAAC;KAC5D,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;KACxC,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC;KAC7E,MAAM,CAAC,2BAA2B,EAAE,oCAAoC,CAAC;KACzE,MAAM,CAAC,CAAC,OAAsC,EAAE,EAAE;IACjD,SAAS,CACP,IAAI,CACF,aAAa,CAAC;QACZ,GAAG,OAAO;QACV,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;KAC9B,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,WAAW,CAAC;QACV,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM;KACP,CAAC,CACH,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAC7E,eAAe;AACf,6EAA6E;AAE7E,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,4BAA4B,EAAE,+BAA+B,CAAC;KACrE,MAAM,CAAC,eAAe,EAAE,gCAAgC,CAAC;KACzD,MAAM,CAAC,sBAAsB,EAAE,sDAAsD,CAAC;KACtF,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;KAC5E,MAAM,CACL,CAAC,OAAe,EAAE,OAA2F,EAAE,EAAE;IAC/G,SAAS,CACP,IAAI,CACF,aAAa,CAAC;QACZ,GAAG,OAAO;QACV,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;KAC9B,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,OAAO,CAAC;QACN,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAgC;QAChD,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,MAAM;KACP,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEJ,6EAA6E;AAC7E,iBAAiB;AACjB,6EAA6E;AAE7E,OAAO;KACJ,OAAO,CAAC,wBAAwB,CAAC;KACjC,WAAW,CAAC,4BAA4B,CAAC;KACzC,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,WAAW,EAAE,+BAA+B,CAAC;KACpD,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;KAC5E,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;KACxC,MAAM,CAAC,2BAA2B,EAAE,oCAAoC,CAAC;KACzE,MAAM,CAAC,CAAC,OAAe,EAAE,GAAW,EAAE,OAA2C,EAAE,EAAE;IACpF,SAAS,CACP,IAAI,CACF,aAAa,CAAC;QACZ,GAAG,OAAO;QACV,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;KAC9B,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,SAAS,CAAC;QACR,OAAO;QACP,GAAG;QACH,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM;KACP,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAC7E,oBAAoB;AACpB,6EAA6E;AAE7E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;AAEnF,WAAW;KACR,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,oBAAoB,EAAE,iCAAiC,EAAE,CAAC,GAAG,EAAE,IAAmB,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;KACjH,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;KACxC,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;KAC/C,MAAM,CAAC,4BAA4B,EAAE,+BAA+B,CAAC;KACrE,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;KAC5E,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;KACxC,MAAM,CAAC,2BAA2B,EAAE,oCAAoC,CAAC;KACzE,MAAM,CACL,CACE,OAAe,EACf,OAA8G,EAC9G,EAAE;IACF,SAAS,CACP,IAAI,CACF,aAAa,CAAC;QACZ,GAAG,OAAO;QACV,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;KAC9B,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,eAAe,CAAC;QACd,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,MAAM;KACP,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEJ,WAAW;KACR,OAAO,CAAC,yBAAyB,CAAC;KAClC,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;KAC/D,MAAM,CAAC,WAAW,EAAE,oCAAoC,CAAC;KACzD,MAAM,CAAC,yBAAyB,EAAE,4CAA4C,CAAC;KAC/E,MAAM,CAAC,WAAW,EAAE,+BAA+B,CAAC;KACpD,MAAM,CAAC,eAAe,EAAE,+CAA+C,CAAC;KACxE,MAAM,CAAC,sBAAsB,EAAE,sDAAsD,CAAC;KACtF,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;KAC5E,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;KACxC,MAAM,CAAC,2BAA2B,EAAE,oCAAoC,CAAC;KACzE,MAAM,CACL,CACE,YAAoB,EACpB,OAMC,EACD,EAAE;IACF,SAAS,CACP,IAAI,CACF,aAAa,CAAC;QACZ,GAAG,OAAO;QACV,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM;KAC9B,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,kBAAkB,CAAC;QACjB,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,gBAAgB,EAAE,OAAO,CAAC,mBAAmB;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,MAAM;KACP,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEJ,6EAA6E;AAC7E,gBAAgB;AAChB,6EAA6E;AAE7E,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/delete.d.ts

@@ -0,0 +1,22 @@
+import * as Effect from 'effect/Effect';
+import { type ResolvedConfig } from '../config.js';
+import { type ConfigOTronError, type ProviderError, type SystemError, type ValidationError } from '../errors.js';
+export type DeleteOptions = {
+    readonly service: string;
+    readonly key: string;
+    readonly confirm?: boolean | undefined;
+    readonly config: ResolvedConfig;
+};
+export type DeleteResult = {
+    readonly canonicalKey: string;
+    readonly deleted: boolean;
+};
+/**
+ * Execute the delete workflow
+ */
+export declare function executeDelete(options: DeleteOptions): Effect.Effect<DeleteResult, ProviderError | ValidationError | SystemError | ConfigOTronError>;
+/**
+ * Run delete and print result
+ */
+export declare function runDelete(options: DeleteOptions): Effect.Effect<boolean, ProviderError | ValidationError | SystemError | ConfigOTronError>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../src/commands/delete.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAWjH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,CAAC;AA6BF;;GAEG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,GACrB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,GAAG,eAAe,GAAG,WAAW,GAAG,gBAAgB,CAAC,CA+E/F;AAED;;GAEG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,aAAa,GACrB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,eAAe,GAAG,WAAW,GAAG,gBAAgB,CAAC,CAU1F"}

package/dist/commands/delete.js

@@ -0,0 +1,105 @@
+/**
+ * Delete Command
+ *
+ * Workflow: Input -> Validate -> Confirm -> Remove -> Audit
+ */
+import * as readline from 'node:readline';
+import * as Effect from 'effect/Effect';
+import { pipe } from 'effect/Function';
+import {} from '../config.js';
+import {} from '../errors.js';
+import { checkProviderGuards } from '../providers/guards.js';
+import {} from '../providers/Provider.js';
+import { getProvider } from '../providers/registry.js';
+import { loadSchemaWithDefaults } from '../schema/loader.js';
+import { resolvePath, validateKeyPathSegments } from '../schema/resolver.js';
+// --------------------------------------------------------------------------
+// Helper Functions
+// --------------------------------------------------------------------------
+/**
+ * Prompt for confirmation
+ */
+function promptConfirmation(message) {
+    return Effect.promise(async () => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        return new Promise((resolve) => {
+            rl.question(`${message} [y/N] `, (answer) => {
+                rl.close();
+                resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
+            });
+        });
+    });
+}
+// --------------------------------------------------------------------------
+// Delete Command
+// --------------------------------------------------------------------------
+/**
+ * Execute the delete workflow
+ */
+export function executeDelete(options) {
+    return pipe(
+    // 1. Validate key path segments
+    validateKeyPathSegments(options.key), 
+    // 2. Load schema
+    Effect.flatMap(() => loadSchemaWithDefaults(options.config.schema, options.config.validation)), Effect.flatMap(({ adapter, schema }) => 
+    // 3. Resolve the key path (may not exist in schema - warn but allow)
+    pipe(Effect.either(resolvePath(schema, options.key, adapter)), Effect.map((resolveResult) => {
+        if (resolveResult._tag === 'Left') {
+            // Key not in schema - warn but use the input as-is
+            console.warn(`[config-o-tron] Warning: Key '${options.key}' not found in schema. Proceeding with deletion anyway.`);
+            return options.key;
+        }
+        return resolveResult.right.canonicalPath;
+    }))), Effect.flatMap((canonicalKey) => {
+        const { config, confirm = false, service } = options;
+        // 4. Confirm deletion
+        if (!confirm && !config.ci) {
+            return pipe(promptConfirmation(`Delete key '${canonicalKey}' from ${config.ssmPrefix}/${config.env}/${service}?`), Effect.flatMap((confirmed) => {
+                if (!confirmed) {
+                    console.log('Deletion cancelled.');
+                    return Effect.succeed({ canonicalKey, deleted: false, shouldDelete: false });
+                }
+                return Effect.succeed({ canonicalKey, deleted: false, shouldDelete: true });
+            }));
+        }
+        else if (!confirm && config.ci) {
+            // CI mode requires explicit --confirm
+            console.error('Error: --confirm flag required in CI mode');
+            return Effect.succeed({ canonicalKey, deleted: false, shouldDelete: false });
+        }
+        return Effect.succeed({ canonicalKey, deleted: false, shouldDelete: true });
+    }), Effect.flatMap(({ canonicalKey, shouldDelete }) => {
+        if (!shouldDelete) {
+            return Effect.succeed({ canonicalKey, deleted: false });
+        }
+        const { config, service } = options;
+        const ctx = {
+            prefix: config.ssmPrefix,
+            service,
+            env: config.env,
+        };
+        // 5. Get provider and delete
+        return pipe(getProvider(config.provider), Effect.flatMap((provider) => pipe(checkProviderGuards(provider, ctx, config.providerGuards), Effect.flatMap(() => provider.delete(ctx, canonicalKey)))), Effect.map(() => {
+            // 6. Audit log
+            const timestamp = new Date().toISOString();
+            const user = process.env.USER ?? process.env.USERNAME ?? 'unknown';
+            console.error(`[${timestamp}] Deleted: ${canonicalKey} by ${user}`);
+            return { canonicalKey, deleted: true };
+        }));
+    }));
+}
+/**
+ * Run delete and print result
+ */
+export function runDelete(options) {
+    return pipe(executeDelete(options), Effect.map((result) => {
+        if (result.deleted) {
+            console.log(`Successfully deleted ${result.canonicalKey}`);
+        }
+        return result.deleted;
+    }));
+}
+//# sourceMappingURL=delete.js.map