@leanmcp/cli 0.4.5 → 0.5.0

package/dist/index.js

@@ -3,11 +3,11 @@ var __name = (target, value) => __defProp(target, "name", { value, configurable:
 
 // src/index.ts
 import { Command } from "commander";
-import fs8 from "fs-extra";
-import path8 from "path";
-import ora7 from "ora";
+import fs10 from "fs-extra";
+import path10 from "path";
+import ora8 from "ora";
 import { createRequire } from "module";
-import { confirm as confirm3 } from "@inquirer/prompts";
+import { confirm as confirm4 } from "@inquirer/prompts";
 import { spawn as spawn4 } from "child_process";
 
 // src/commands/dev.ts
@@ -1261,8 +1261,8 @@ __name(whoamiCommand, "whoamiCommand");
 
 // src/commands/deploy.ts
 import ora5 from "ora";
-import path7 from "path";
-import fs7 from "fs-extra";
+import path8 from "path";
+import fs8 from "fs-extra";
 import os3 from "os";
 import archiver from "archiver";
 import { input as input2, confirm as confirm2, select } from "@inquirer/prompts";
@@ -1444,6 +1444,128 @@ function generateProjectName() {
 }
 __name(generateProjectName, "generateProjectName");
 
+// src/utils/env-parser.ts
+import fs7 from "fs-extra";
+import path7 from "path";
+var RESERVED_ENV_KEYS = [
+  "AWS_REGION",
+  "AWS_ACCESS_KEY_ID",
+  "AWS_SECRET_ACCESS_KEY",
+  "AWS_SESSION_TOKEN",
+  "AWS_LAMBDA_FUNCTION_NAME",
+  "AWS_LAMBDA_FUNCTION_MEMORY_SIZE",
+  "AWS_LAMBDA_FUNCTION_VERSION",
+  "AWS_LAMBDA_LOG_GROUP_NAME",
+  "AWS_LAMBDA_LOG_STREAM_NAME",
+  "_HANDLER",
+  "_X_AMZN_TRACE_ID"
+];
+var SYSTEM_ENV_KEYS = [
+  "PORT",
+  "AWS_LWA_PORT",
+  "AWS_LWA_INVOKE_MODE",
+  "AWS_LWA_READINESS_CHECK_MIN_UNHEALTHY_STATUS"
+];
+function parseEnvVar(input3) {
+  if (!input3 || typeof input3 !== "string") {
+    return null;
+  }
+  const trimmed = input3.trim();
+  const equalIndex = trimmed.indexOf("=");
+  if (equalIndex === -1) {
+    return null;
+  }
+  const key = trimmed.substring(0, equalIndex).trim();
+  let value = trimmed.substring(equalIndex + 1);
+  if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+    value = value.slice(1, -1);
+  }
+  if (!isValidEnvKey(key)) {
+    return null;
+  }
+  return {
+    key,
+    value
+  };
+}
+__name(parseEnvVar, "parseEnvVar");
+function parseEnvFile(content) {
+  const result = {};
+  if (!content || typeof content !== "string") {
+    return result;
+  }
+  const lines = content.split(/\r?\n/);
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) {
+      continue;
+    }
+    const parsed = parseEnvVar(trimmed);
+    if (parsed) {
+      result[parsed.key] = parsed.value;
+    }
+  }
+  return result;
+}
+__name(parseEnvFile, "parseEnvFile");
+async function loadEnvFile(filePath) {
+  const absolutePath = path7.resolve(filePath);
+  if (!await fs7.pathExists(absolutePath)) {
+    throw new Error(`Env file not found: ${absolutePath}`);
+  }
+  const content = await fs7.readFile(absolutePath, "utf-8");
+  return parseEnvFile(content);
+}
+__name(loadEnvFile, "loadEnvFile");
+async function writeEnvFile(filePath, vars) {
+  const absolutePath = path7.resolve(filePath);
+  const lines = [
+    "# Environment variables",
+    `# Generated by leanmcp CLI at ${(/* @__PURE__ */ new Date()).toISOString()}`,
+    ""
+  ];
+  const sortedKeys = Object.keys(vars).sort();
+  for (const key of sortedKeys) {
+    const value = vars[key];
+    if (value.includes(" ") || value.includes("#") || value.includes('"')) {
+      lines.push(`${key}="${value.replace(/"/g, '\\"')}"`);
+    } else {
+      lines.push(`${key}=${value}`);
+    }
+  }
+  lines.push("");
+  await fs7.writeFile(absolutePath, lines.join("\n"));
+}
+__name(writeEnvFile, "writeEnvFile");
+function isValidEnvKey(key) {
+  if (!key || typeof key !== "string") {
+    return false;
+  }
+  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(key);
+}
+__name(isValidEnvKey, "isValidEnvKey");
+function isReservedKey(key) {
+  return RESERVED_ENV_KEYS.includes(key);
+}
+__name(isReservedKey, "isReservedKey");
+function isSystemKey(key) {
+  return SYSTEM_ENV_KEYS.includes(key);
+}
+__name(isSystemKey, "isSystemKey");
+function formatEnvVarsForDisplay(vars, reveal = false) {
+  const keys = Object.keys(vars).sort();
+  if (keys.length === 0) {
+    return "  (no environment variables)";
+  }
+  const lines = keys.map((key) => {
+    const value = reveal ? vars[key] : "***";
+    const keyType = isSystemKey(key) ? " (system)" : "";
+    return `  ${key}=${value}${keyType}`;
+  });
+  return lines.join("\n");
+}
+__name(formatEnvVarsForDisplay, "formatEnvVarsForDisplay");
+
 // src/commands/deploy.ts
 var DEBUG_MODE3 = false;
 function setDeployDebugMode(enabled) {
@@ -1490,10 +1612,10 @@ var API_ENDPOINTS = {
 var LEANMCP_CONFIG_DIR = ".leanmcp";
 var LEANMCP_CONFIG_FILE = "config.json";
 async function readLeanMCPConfig(projectPath) {
-  const configPath = path7.join(projectPath, LEANMCP_CONFIG_DIR, LEANMCP_CONFIG_FILE);
+  const configPath = path8.join(projectPath, LEANMCP_CONFIG_DIR, LEANMCP_CONFIG_FILE);
   try {
-    if (await fs7.pathExists(configPath)) {
-      const config = await fs7.readJSON(configPath);
+    if (await fs8.pathExists(configPath)) {
+      const config = await fs8.readJSON(configPath);
       debug3("Found existing .leanmcp config:", config);
       return config;
     }
@@ -1504,10 +1626,10 @@ async function readLeanMCPConfig(projectPath) {
 }
 __name(readLeanMCPConfig, "readLeanMCPConfig");
 async function writeLeanMCPConfig(projectPath, config) {
-  const configDir = path7.join(projectPath, LEANMCP_CONFIG_DIR);
-  const configPath = path7.join(configDir, LEANMCP_CONFIG_FILE);
-  await fs7.ensureDir(configDir);
-  await fs7.writeJSON(configPath, config, {
+  const configDir = path8.join(projectPath, LEANMCP_CONFIG_DIR);
+  const configPath = path8.join(configDir, LEANMCP_CONFIG_FILE);
+  await fs8.ensureDir(configDir);
+  await fs8.writeJSON(configPath, config, {
     spaces: 2
   });
   debug3("Saved .leanmcp config:", config);
@@ -1515,7 +1637,7 @@ async function writeLeanMCPConfig(projectPath, config) {
 __name(writeLeanMCPConfig, "writeLeanMCPConfig");
 async function createZipArchive(folderPath, outputPath) {
   return new Promise((resolve, reject) => {
-    const output = fs7.createWriteStream(outputPath);
+    const output = fs8.createWriteStream(outputPath);
     const archive = archiver("zip", {
       zlib: {
         level: 9
@@ -1613,13 +1735,13 @@ async function deployCommand(folderPath, options = {}) {
   }
   const apiUrl = await getApiUrl();
   debug3("API URL:", apiUrl);
-  const absolutePath = path7.resolve(process.cwd(), folderPath);
-  if (!await fs7.pathExists(absolutePath)) {
+  const absolutePath = path8.resolve(process.cwd(), folderPath);
+  if (!await fs8.pathExists(absolutePath)) {
     logger.error(`Folder not found: ${absolutePath}`);
     process.exit(1);
   }
-  const hasMainTs = await fs7.pathExists(path7.join(absolutePath, "main.ts"));
-  const hasPackageJson = await fs7.pathExists(path7.join(absolutePath, "package.json"));
+  const hasMainTs = await fs8.pathExists(path8.join(absolutePath, "main.ts"));
+  const hasPackageJson = await fs8.pathExists(path8.join(absolutePath, "package.json"));
   if (!hasMainTs && !hasPackageJson) {
     logger.error("Not a valid project folder.");
     logger.gray("Expected main.ts or package.json in the folder.\n");
@@ -1689,10 +1811,10 @@ Generated project name: ${chalk.bold(projectName)}
     } catch (e) {
       debug3("Could not fetch existing projects");
     }
-    let folderName = path7.basename(absolutePath);
+    let folderName = path8.basename(absolutePath);
     if (hasPackageJson) {
       try {
-        const pkg2 = await fs7.readJSON(path7.join(absolutePath, "package.json"));
+        const pkg2 = await fs8.readJSON(path8.join(absolutePath, "package.json"));
         folderName = pkg2.name || folderName;
       } catch (e) {
       }
@@ -1843,7 +1965,7 @@ ${error instanceof Error ? error.message : String(error)}`);
   }
   const uploadSpinner = ora5("Packaging and uploading...").start();
   try {
-    const tempZip = path7.join(os3.tmpdir(), `leanmcp-${Date.now()}.zip`);
+    const tempZip = path8.join(os3.tmpdir(), `leanmcp-${Date.now()}.zip`);
     const zipSize = await createZipArchive(absolutePath, tempZip);
     uploadSpinner.text = `Packaging... (${Math.round(zipSize / 1024)}KB)`;
     debug3("Step 2a: Getting upload URL for project:", projectId);
@@ -1870,7 +1992,7 @@ ${error instanceof Error ? error.message : String(error)}`);
       throw new Error("Backend did not return upload URL");
     }
     debug3("Step 2b: Uploading to S3...");
-    const zipBuffer = await fs7.readFile(tempZip);
+    const zipBuffer = await fs8.readFile(tempZip);
     const s3Response = await fetch(uploadUrl, {
       method: "PUT",
       body: zipBuffer,
@@ -1893,7 +2015,7 @@ ${error instanceof Error ? error.message : String(error)}`);
         s3Location
       })
     });
-    await fs7.remove(tempZip);
+    await fs8.remove(tempZip);
     uploadSpinner.succeed("Project uploaded");
   } catch (error) {
     uploadSpinner.fail("Failed to upload");
@@ -2123,8 +2245,8 @@ async function projectsDeleteCommand(projectId, options = {}) {
     process.exit(1);
   }
   if (!options.force) {
-    const { confirm: confirm4 } = await import("@inquirer/prompts");
-    const shouldDelete = await confirm4({
+    const { confirm: confirm5 } = await import("@inquirer/prompts");
+    const shouldDelete = await confirm5({
       message: `Are you sure you want to delete project ${projectId}?`,
       default: false
     });
@@ -2159,6 +2281,383 @@ ${error instanceof Error ? error.message : String(error)}`);
 }
 __name(projectsDeleteCommand, "projectsDeleteCommand");
 
+// src/commands/env.ts
+import ora7 from "ora";
+import path9 from "path";
+import fs9 from "fs-extra";
+import { confirm as confirm3 } from "@inquirer/prompts";
+var DEBUG_MODE4 = false;
+function setEnvDebugMode(enabled) {
+  DEBUG_MODE4 = enabled;
+}
+__name(setEnvDebugMode, "setEnvDebugMode");
+function debug4(message, ...args) {
+  if (DEBUG_MODE4) {
+    console.log(chalk.gray(`[DEBUG] ${message}`), ...args);
+  }
+}
+__name(debug4, "debug");
+async function debugFetch2(url, options = {}) {
+  debug4(`HTTP ${options.method || "GET"} ${url}`);
+  if (options.body && typeof options.body === "string") {
+    try {
+      const body = JSON.parse(options.body);
+      debug4("Request body:", JSON.stringify(body, null, 2));
+    } catch {
+      debug4("Request body:", options.body);
+    }
+  }
+  const startTime = Date.now();
+  const response = await fetch(url, options);
+  const duration = Date.now() - startTime;
+  debug4(`Response: ${response.status} ${response.statusText} (${duration}ms)`);
+  return response;
+}
+__name(debugFetch2, "debugFetch");
+var LEANMCP_CONFIG_DIR2 = ".leanmcp";
+var LEANMCP_CONFIG_FILE2 = "config.json";
+async function readLeanMCPConfig2(projectPath) {
+  const configPath = path9.join(projectPath, LEANMCP_CONFIG_DIR2, LEANMCP_CONFIG_FILE2);
+  try {
+    if (await fs9.pathExists(configPath)) {
+      const config = await fs9.readJSON(configPath);
+      debug4("Found existing .leanmcp config:", config);
+      return config;
+    }
+  } catch (e) {
+    debug4("Could not read .leanmcp config:", e);
+  }
+  return null;
+}
+__name(readLeanMCPConfig2, "readLeanMCPConfig");
+async function getDeploymentContext(folderPath) {
+  const apiKey = await getApiKey();
+  if (!apiKey) {
+    logger.error("Not logged in.");
+    logger.gray("Run `leanmcp login` first to authenticate.\n");
+    return null;
+  }
+  const apiUrl = await getApiUrl();
+  const absolutePath = path9.resolve(process.cwd(), folderPath);
+  const config = await readLeanMCPConfig2(absolutePath);
+  if (!config) {
+    logger.error("No deployment found.");
+    logger.gray(`No .leanmcp/config.json found in ${absolutePath}`);
+    logger.gray("Deploy first with: leanmcp deploy .\n");
+    return null;
+  }
+  if (!config.deploymentId) {
+    logger.error("Deployment ID not found in config.");
+    logger.gray("Please redeploy with: leanmcp deploy .\n");
+    return null;
+  }
+  return {
+    apiKey,
+    apiUrl,
+    config
+  };
+}
+__name(getDeploymentContext, "getDeploymentContext");
+async function envListCommand(folderPath, options = {}) {
+  logger.info("\nLeanMCP Environment Variables\n");
+  const context = await getDeploymentContext(folderPath);
+  if (!context) {
+    process.exit(1);
+  }
+  const { apiKey, apiUrl, config } = context;
+  const spinner = ora7("Fetching environment variables...").start();
+  try {
+    const reveal = options.reveal ? "?reveal=true" : "";
+    const response = await debugFetch2(`${apiUrl}/api/lambda-deploy/${config.deploymentId}/env${reveal}`, {
+      headers: {
+        "Authorization": `Bearer ${apiKey}`
+      }
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Failed to fetch env vars: ${error}`);
+    }
+    const envVars = await response.json();
+    spinner.succeed("Environment variables retrieved");
+    logger.info(`
+Project: ${config.projectName}`);
+    logger.gray(`Deployment: ${config.deploymentId.substring(0, 8)}...`);
+    logger.gray(`URL: ${config.url}
+`);
+    const formatted = formatEnvVarsForDisplay(envVars, options.reveal);
+    logger.log(formatted);
+    logger.log("");
+    if (!options.reveal) {
+      logger.gray("Use --reveal to show actual values\n");
+    }
+  } catch (error) {
+    spinner.fail("Failed to fetch environment variables");
+    logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+}
+__name(envListCommand, "envListCommand");
+async function envSetCommand(keyValue, folderPath, options = {}) {
+  const context = await getDeploymentContext(folderPath);
+  if (!context) {
+    process.exit(1);
+  }
+  const { apiKey, apiUrl, config } = context;
+  let variables = {};
+  if (options.file) {
+    const spinner2 = ora7(`Loading from ${options.file}...`).start();
+    try {
+      variables = await loadEnvFile(options.file);
+      spinner2.succeed(`Loaded ${Object.keys(variables).length} variable(s) from ${options.file}`);
+    } catch (error) {
+      spinner2.fail(`Failed to load ${options.file}`);
+      logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+      process.exit(1);
+    }
+  } else {
+    const parsed = parseEnvVar(keyValue);
+    if (!parsed) {
+      logger.error("Invalid format. Expected: KEY=VALUE");
+      logger.gray("Example: leanmcp env set API_KEY=secret123\n");
+      process.exit(1);
+    }
+    if (isReservedKey(parsed.key)) {
+      logger.error(`Cannot set reserved key: ${parsed.key}`);
+      logger.gray("This key is managed by AWS Lambda.\n");
+      process.exit(1);
+    }
+    if (isSystemKey(parsed.key) && !options.force) {
+      logger.warn(`Warning: ${parsed.key} is a system key.`);
+      const shouldContinue = await confirm3({
+        message: "Are you sure you want to modify it?",
+        default: false
+      });
+      if (!shouldContinue) {
+        logger.gray("\nCancelled.\n");
+        return;
+      }
+    }
+    variables = {
+      [parsed.key]: parsed.value
+    };
+  }
+  if (Object.keys(variables).length === 0) {
+    logger.warn("No variables to set.\n");
+    return;
+  }
+  const spinner = ora7("Updating environment variables...").start();
+  try {
+    const response = await debugFetch2(`${apiUrl}/api/lambda-deploy/${config.deploymentId}/env`, {
+      method: "PUT",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        variables
+      })
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Failed to update env vars: ${error}`);
+    }
+    const result = await response.json();
+    spinner.succeed("Environment variables updated");
+    logger.info(`
+${result.message || "Variables updated successfully"}`);
+    logger.gray("Note: Lambda will cold-start on next invocation.\n");
+  } catch (error) {
+    spinner.fail("Failed to update environment variables");
+    logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+}
+__name(envSetCommand, "envSetCommand");
+async function envGetCommand(key, folderPath, options = {}) {
+  const context = await getDeploymentContext(folderPath);
+  if (!context) {
+    process.exit(1);
+  }
+  const { apiKey, apiUrl, config } = context;
+  try {
+    const reveal = options.reveal ? "?reveal=true" : "";
+    const response = await debugFetch2(`${apiUrl}/api/lambda-deploy/${config.deploymentId}/env${reveal}`, {
+      headers: {
+        "Authorization": `Bearer ${apiKey}`
+      }
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Failed to fetch env vars: ${error}`);
+    }
+    const envVars = await response.json();
+    if (key in envVars) {
+      const value = envVars[key];
+      logger.log(`${key}=${value}`);
+    } else {
+      logger.warn(`Variable '${key}' not found.`);
+      process.exit(1);
+    }
+  } catch (error) {
+    logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+}
+__name(envGetCommand, "envGetCommand");
+async function envRemoveCommand(key, folderPath, options = {}) {
+  const context = await getDeploymentContext(folderPath);
+  if (!context) {
+    process.exit(1);
+  }
+  const { apiKey, apiUrl, config } = context;
+  if (isReservedKey(key)) {
+    logger.error(`Cannot remove reserved key: ${key}`);
+    process.exit(1);
+  }
+  if (isSystemKey(key)) {
+    logger.error(`Cannot remove system key: ${key}`);
+    process.exit(1);
+  }
+  if (!options.force) {
+    const shouldDelete = await confirm3({
+      message: `Remove environment variable '${key}'?`,
+      default: false
+    });
+    if (!shouldDelete) {
+      logger.gray("\nCancelled.\n");
+      return;
+    }
+  }
+  const spinner = ora7(`Removing ${key}...`).start();
+  try {
+    const response = await debugFetch2(`${apiUrl}/api/lambda-deploy/${config.deploymentId}/env/${key}`, {
+      method: "DELETE",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`
+      }
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Failed to remove env var: ${error}`);
+    }
+    spinner.succeed(`Removed ${key}`);
+    logger.gray("Note: Lambda will cold-start on next invocation.\n");
+  } catch (error) {
+    spinner.fail(`Failed to remove ${key}`);
+    logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+}
+__name(envRemoveCommand, "envRemoveCommand");
+async function envPullCommand(folderPath, options = {}) {
+  const context = await getDeploymentContext(folderPath);
+  if (!context) {
+    process.exit(1);
+  }
+  const { apiKey, apiUrl, config } = context;
+  const outputFile = options.file || ".env.remote";
+  const spinner = ora7("Fetching environment variables...").start();
+  try {
+    const response = await debugFetch2(`${apiUrl}/api/lambda-deploy/${config.deploymentId}/env?reveal=true`, {
+      headers: {
+        "Authorization": `Bearer ${apiKey}`
+      }
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Failed to fetch env vars: ${error}`);
+    }
+    const envVars = await response.json();
+    const userVars = {};
+    for (const [key, value] of Object.entries(envVars)) {
+      if (!isSystemKey(key)) {
+        userVars[key] = value;
+      }
+    }
+    spinner.text = `Writing to ${outputFile}...`;
+    await writeEnvFile(outputFile, userVars);
+    spinner.succeed(`Saved ${Object.keys(userVars).length} variable(s) to ${outputFile}`);
+    logger.gray(`
+System variables (PORT, AWS_LWA_*) are not included.
+`);
+  } catch (error) {
+    spinner.fail("Failed to pull environment variables");
+    logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+}
+__name(envPullCommand, "envPullCommand");
+async function envPushCommand(folderPath, options = {}) {
+  const context = await getDeploymentContext(folderPath);
+  if (!context) {
+    process.exit(1);
+  }
+  const { apiKey, apiUrl, config } = context;
+  const inputFile = options.file || ".env";
+  const loadSpinner = ora7(`Loading from ${inputFile}...`).start();
+  let variables;
+  try {
+    variables = await loadEnvFile(inputFile);
+    loadSpinner.succeed(`Loaded ${Object.keys(variables).length} variable(s) from ${inputFile}`);
+  } catch (error) {
+    loadSpinner.fail(`Failed to load ${inputFile}`);
+    logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+  if (Object.keys(variables).length === 0) {
+    logger.warn("No variables found in file.\n");
+    return;
+  }
+  logger.warn("\nThis will REPLACE ALL current environment variables.");
+  logger.gray("System variables (PORT, AWS_LWA_*) will be preserved.\n");
+  if (!options.force) {
+    const shouldPush = await confirm3({
+      message: `Replace all env vars with ${Object.keys(variables).length} variables from ${inputFile}?`,
+      default: false
+    });
+    if (!shouldPush) {
+      logger.gray("\nCancelled.\n");
+      return;
+    }
+  }
+  const pushSpinner = ora7("Pushing environment variables...").start();
+  try {
+    const response = await debugFetch2(`${apiUrl}/api/lambda-deploy/${config.deploymentId}/env`, {
+      method: "PUT",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        variables,
+        replaceAll: true
+      })
+    });
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Failed to push env vars: ${error}`);
+    }
+    const result = await response.json();
+    pushSpinner.succeed("Environment variables pushed");
+    logger.info(`
+${result.message || "Variables updated successfully"}`);
+    logger.gray("Note: Lambda will cold-start on next invocation.\n");
+  } catch (error) {
+    pushSpinner.fail("Failed to push environment variables");
+    logger.error(`
+${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+}
+__name(envPushCommand, "envPushCommand");
+
 // src/templates/readme_v1.ts
 var getReadmeTemplate = /* @__PURE__ */ __name((projectName) => `<p align="center">
   <img
@@ -2675,6 +3174,7 @@ function enableDebugIfNeeded() {
     setDebugMode(true);
     setDebugMode2(true);
     setDeployDebugMode(true);
+    setEnvDebugMode(true);
     debug("Debug mode enabled globally");
   }
 }
@@ -2692,6 +3192,8 @@ Examples:
   $ leanmcp deploy ./my-app              # Deploy to LeanMCP cloud
   $ leanmcp projects list                # List your cloud projects
   $ leanmcp projects delete <id>         # Delete a cloud project
+  $ leanmcp env list                     # List environment variables
+  $ leanmcp env set KEY=VALUE            # Set an environment variable
 
 Global Options:
   -v, --version    Output the current version
@@ -2703,14 +3205,14 @@ program.command("create <projectName>").description("Create a new LeanMCP projec
     projectName,
     ...options
   });
-  const spinner = ora7(`Creating project ${projectName}...`).start();
-  const targetDir = path8.join(process.cwd(), projectName);
-  if (fs8.existsSync(targetDir)) {
+  const spinner = ora8(`Creating project ${projectName}...`).start();
+  const targetDir = path10.join(process.cwd(), projectName);
+  if (fs10.existsSync(targetDir)) {
     spinner.fail(`Folder ${projectName} already exists.`);
     process.exit(1);
   }
-  await fs8.mkdirp(targetDir);
-  await fs8.mkdirp(path8.join(targetDir, "mcp", "example"));
+  await fs10.mkdirp(targetDir);
+  await fs10.mkdirp(path10.join(targetDir, "mcp", "example"));
   const pkg2 = {
     name: projectName,
     version: "1.0.0",
@@ -2746,7 +3248,7 @@ program.command("create <projectName>").description("Create a new LeanMCP projec
       "typescript": "^5.6.3"
     }
   };
-  await fs8.writeJSON(path8.join(targetDir, "package.json"), pkg2, {
+  await fs10.writeJSON(path10.join(targetDir, "package.json"), pkg2, {
     spaces: 2
   });
   const tsconfig = {
@@ -2769,15 +3271,15 @@ program.command("create <projectName>").description("Create a new LeanMCP projec
       "dist"
     ]
   };
-  await fs8.writeJSON(path8.join(targetDir, "tsconfig.json"), tsconfig, {
+  await fs10.writeJSON(path10.join(targetDir, "tsconfig.json"), tsconfig, {
     spaces: 2
   });
   const dashboardLine = options.dashboard === false ? `
   dashboard: false,  // Dashboard disabled via --no-dashboard` : "";
   const mainTs = getMainTsTemplate(projectName, dashboardLine);
-  await fs8.writeFile(path8.join(targetDir, "main.ts"), mainTs);
+  await fs10.writeFile(path10.join(targetDir, "main.ts"), mainTs);
   const exampleServiceTs = getExampleServiceTemplate(projectName);
-  await fs8.writeFile(path8.join(targetDir, "mcp", "example", "index.ts"), exampleServiceTs);
+  await fs10.writeFile(path10.join(targetDir, "mcp", "example", "index.ts"), exampleServiceTs);
   const gitignore = gitignoreTemplate;
   const env = `# Server Configuration
 PORT=3001
@@ -2785,10 +3287,10 @@ NODE_ENV=development
 
 # Add your environment variables here
 `;
-  await fs8.writeFile(path8.join(targetDir, ".gitignore"), gitignore);
-  await fs8.writeFile(path8.join(targetDir, ".env"), env);
+  await fs10.writeFile(path10.join(targetDir, ".gitignore"), gitignore);
+  await fs10.writeFile(path10.join(targetDir, ".env"), env);
   const readme = getReadmeTemplate(projectName);
-  await fs8.writeFile(path8.join(targetDir, "README.md"), readme);
+  await fs10.writeFile(path10.join(targetDir, "README.md"), readme);
   spinner.succeed(`Project ${projectName} created!`);
   logger.log("\nSuccess! Your MCP server is ready.\n", chalk.green);
   logger.log("To deploy to LeanMCP cloud:", chalk.cyan);
@@ -2809,12 +3311,12 @@ NODE_ENV=development
     logger.log(`  leanmcp deploy .`, chalk.gray);
     return;
   }
-  const shouldInstall = isNonInteractive ? true : await confirm3({
+  const shouldInstall = isNonInteractive ? true : await confirm4({
     message: "Would you like to install dependencies now?",
     default: true
   });
   if (shouldInstall) {
-    const installSpinner = ora7("Installing dependencies...").start();
+    const installSpinner = ora8("Installing dependencies...").start();
     try {
       await new Promise((resolve, reject) => {
         const npmInstall = spawn4("npm", [
@@ -2844,7 +3346,7 @@ NODE_ENV=development
         logger.log(`  leanmcp deploy .`, chalk.gray);
         return;
       }
-      const shouldStartDev = options.allowAll ? true : await confirm3({
+      const shouldStartDev = options.allowAll ? true : await confirm4({
         message: "Would you like to start the development server?",
         default: true
       });
@@ -2891,20 +3393,20 @@ NODE_ENV=development
 });
 program.command("add <serviceName>").description("Add a new MCP service to your project").action(async (serviceName) => {
   const cwd = process.cwd();
-  const mcpDir = path8.join(cwd, "mcp");
-  if (!fs8.existsSync(path8.join(cwd, "main.ts"))) {
+  const mcpDir = path10.join(cwd, "mcp");
+  if (!fs10.existsSync(path10.join(cwd, "main.ts"))) {
     logger.log("ERROR: Not a LeanMCP project (main.ts missing).", chalk.red);
     process.exit(1);
   }
-  const serviceDir = path8.join(mcpDir, serviceName);
-  const serviceFile = path8.join(serviceDir, "index.ts");
-  if (fs8.existsSync(serviceDir)) {
+  const serviceDir = path10.join(mcpDir, serviceName);
+  const serviceFile = path10.join(serviceDir, "index.ts");
+  if (fs10.existsSync(serviceDir)) {
     logger.log(`ERROR: Service ${serviceName} already exists.`, chalk.red);
     process.exit(1);
   }
-  await fs8.mkdirp(serviceDir);
+  await fs10.mkdirp(serviceDir);
   const indexTs = getServiceIndexTemplate(serviceName, capitalize(serviceName));
-  await fs8.writeFile(serviceFile, indexTs);
+  await fs10.writeFile(serviceFile, indexTs);
   logger.log(`\\nCreated new service: ${chalk.bold(serviceName)}`, chalk.green);
   logger.log(`   File: mcp/${serviceName}/index.ts`, chalk.gray);
   logger.log(`   Tool: greet`, chalk.gray);
@@ -2966,4 +3468,49 @@ projectsCmd.command("delete <projectId>").alias("rm").description("Delete a proj
   });
   projectsDeleteCommand(projectId, options);
 });
+var envCmd = program.command("env").description("Manage environment variables for deployed projects");
+envCmd.command("list [folder]").alias("ls").description("List all environment variables").option("--reveal", "Show actual values instead of masked").option("--project-id <id>", "Specify project ID").action((folder, options) => {
+  trackCommand("env_list", {
+    folder,
+    ...options
+  });
+  envListCommand(folder || ".", options);
+});
+envCmd.command("set <keyValue> [folder]").description("Set an environment variable (KEY=VALUE)").option("-f, --file <file>", "Load from env file").option("--force", "Skip confirmation for reserved keys").action((keyValue, folder, options) => {
+  trackCommand("env_set", {
+    folder,
+    ...options
+  });
+  envSetCommand(keyValue, folder || ".", options);
+});
+envCmd.command("get <key> [folder]").description("Get an environment variable value").option("--reveal", "Show actual value").action((key, folder, options) => {
+  trackCommand("env_get", {
+    key,
+    folder,
+    ...options
+  });
+  envGetCommand(key, folder || ".", options);
+});
+envCmd.command("remove <key> [folder]").alias("rm").description("Remove an environment variable").option("--force", "Skip confirmation").action((key, folder, options) => {
+  trackCommand("env_remove", {
+    key,
+    folder,
+    ...options
+  });
+  envRemoveCommand(key, folder || ".", options);
+});
+envCmd.command("pull [folder]").description("Download environment variables to local .env file").option("-f, --file <file>", "Output file", ".env.remote").action((folder, options) => {
+  trackCommand("env_pull", {
+    folder,
+    ...options
+  });
+  envPullCommand(folder || ".", options);
+});
+envCmd.command("push [folder]").description("Upload environment variables from local .env file (replaces all)").option("-f, --file <file>", "Input file", ".env").option("--force", "Skip confirmation").action((folder, options) => {
+  trackCommand("env_push", {
+    folder,
+    ...options
+  });
+  envPushCommand(folder || ".", options);
+});
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leanmcp/cli",
-  "version": "0.4.5",
+  "version": "0.5.0",
   "description": "Command-line interface for scaffolding LeanMCP projects",
   "bin": {
     "leanmcp": "bin/leanmcp.js"
@@ -70,4 +70,4 @@
   "publishConfig": {
     "access": "public"
   }
-}
+}