@oc-forge/secret 0.1.0 → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 oc-forge
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,115 +1,78 @@
 # @oc-forge/secret
 
-**Infisical secret management CLI with local caching — for OpenClaw teams**
+Infisical secret management CLI with local caching. Built for [OpenClaw](https://openclaw.ai) teams.
 
-一个用于管理 [Infisical](https://infisical.com) secrets 的命令行工具，带本地缓存，专为 OpenClaw 团队设计。
-
----
-
-## 安装 / Installation
-
-需要 [Bun](https://bun.sh) runtime（v1.0+）。
+## Install
 
 ```bash
 npm i -g @oc-forge/secret
-# 或
-bun add -g @oc-forge/secret
 ```
 
-安装后即可使用 `secret` 命令。
-
----
-
-## 配置 / Configuration
+> Requires [Bun](https://bun.sh) runtime (`curl -fsSL https://bun.sh/install | bash`)
 
-### 方式一：配置文件（推荐）
+## Configure
 
-创建 `~/.config/openclaw-fleet/config.json`：
+### Option 1: Config file (recommended)
 
-```json
+```bash
+mkdir -p ~/.config/openclaw-fleet
+cat > ~/.config/openclaw-fleet/config.json << 'EOF'
 {
-  "clientId": "your-machine-identity-client-id",
-  "clientSecret": "your-machine-identity-client-secret",
+  "clientId": "your-infisical-client-id",
+  "clientSecret": "your-infisical-client-secret",
   "projectId": "your-infisical-project-id",
-  "env": "dev"
+  "env": "dev",
+  "ttlMs": 86400000
 }
+EOF
+chmod 600 ~/.config/openclaw-fleet/config.json
 ```
 
-### 方式二：环境变量
+### Option 2: Environment variables
 
 ```bash
-export INFISICAL_CLIENT_ID="your-client-id"
-export INFISICAL_CLIENT_SECRET="your-client-secret"
-export INFISICAL_PROJECT_ID="your-project-id"
-export INFISICAL_ENV="dev"  # 可选，默认 dev
+export INFISICAL_CLIENT_ID="..."
+export INFISICAL_CLIENT_SECRET="..."
+export INFISICAL_PROJECT_ID="..."
+export INFISICAL_ENV="dev"
 ```
 
-> ⚠️ 不要将实际凭证提交到代码仓库。
-
----
-
-## 命令 / Commands
+## Usage
 
 ```bash
-# 获取 secret（优先读取缓存）
-secret get <KEY>
-secret get <KEY> --fresh        # 强制从 Infisical 拉取最新值
-
-# 设置 / 更新 secret
-secret set <KEY> <VALUE>
-
-# 列出所有 secret keys
-secret list
-secret list --show              # 同时显示值
-
-# 全量同步到本地缓存
-secret sync
-
-# 注入所有 secrets 为环境变量并运行命令
-secret exec -- <command> [args...]
-
-# 帮助
-secret --help
+secret list [--show]          # List all secret keys (--show to reveal values)
+secret get <KEY>              # Get a secret value (cached)
+secret get <KEY> --fresh      # Get from Infisical (bypass cache)
+secret set <KEY> <VALUE>      # Create or update a secret
+secret sync                   # Sync all secrets to local cache
+secret exec -- <cmd>          # Run command with secrets injected as env vars
 ```
 
-### 示例 / Examples
+## Examples
 
 ```bash
-# 获取数据库密码
-secret get DATABASE_URL
+# List all secrets
+secret list
 
-# 设置 API key
-secret set OPENAI_API_KEY sk-...
+# Get a specific secret
+secret get GITHUB_TOKEN
 
-# 注入 secrets 运行应用
-secret exec -- node server.js
+# Set a new secret
+secret set MY_API_KEY sk-xxxxx
 
-# 同步所有 secrets 到缓存
-secret sync
+# Run a command with all secrets as environment variables
+secret exec -- node server.js
 ```
 
----
-
-## 缓存 / Caching
-
-- 缓存文件：`~/.config/openclaw-fleet/cache.json`（权限 600）
-- 默认 TTL：24 小时
-- `secret get` 自动使用缓存；`secret exec` 在缓存过期时自动同步
-- 可在 config.json 中设置 `ttlMs` 自定义缓存时长
+## Cache
 
----
-
-## 认证方式 / Authentication
+Secrets are cached locally at `~/.config/openclaw-fleet/cache.json` with a default TTL of 24 hours. Use `--fresh` to bypass cache or `secret sync` to refresh all.
 
-使用 Infisical [Universal Auth (Machine Identity)](https://infisical.com/docs/documentation/platform/identities/universal-auth) 认证。
+## Source
 
-配置步骤：
-1. 在 Infisical 控制台创建 Machine Identity
-2. 授予项目访问权限
-3. 将 `clientId` 和 `clientSecret` 填入配置文件
+- GitHub: https://github.com/shazhou-ww/secret-cli
+- Gitee: https://gitee.com/xiaoju-neko/secret-cli
 
 ---
 
-## License
-
-MIT © 小橘 🍊
+Made with 🔨 by [oc-forge](https://www.npmjs.com/org/oc-forge) — 小橘 🍊

package/bin/secret

@@ -0,0 +1,2 @@
+#!/usr/bin/env bun
+import "./secret.ts";

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@oc-forge/secret",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Infisical secret management CLI with local caching — for OpenClaw teams",
   "type": "module",
   "bin": {
-    "secret": "./secret.ts"
+    "secret": "./bin/secret"
   },
   "files": ["secret.ts", "README.md", "LICENSE"],
   "keywords": ["infisical", "secret", "cli", "openclaw", "oc-forge"],