@occam-scaly/scaly-cli 0.1.0

package/lib/scaly-secrets.js

@@ -0,0 +1,91 @@
+'use strict';
+
+const api = require('./scaly-api');
+
+const LIST_BUILD_SECRETS = `
+  query ListAppBuildSecrets($appId: String!) {
+    listAppBuildSecrets(appId: $appId) {
+      id
+      name
+      secretArn
+      createdAt
+      updatedAt
+      rotatedAt
+      createdByName
+    }
+  }
+`;
+
+const CREATE_BUILD_SECRET = `
+  mutation CreateAppBuildSecret($input: CreateAppBuildSecretInput!) {
+    createAppBuildSecret(input: $input) {
+      id
+      name
+      secretArn
+      createdAt
+      updatedAt
+      rotatedAt
+      createdByName
+    }
+  }
+`;
+
+const UPDATE_BUILD_SECRET = `
+  mutation UpdateAppBuildSecret($input: UpdateAppBuildSecretInput!) {
+    updateAppBuildSecret(input: $input) {
+      id
+      name
+      secretArn
+      createdAt
+      updatedAt
+      rotatedAt
+      createdByName
+    }
+  }
+`;
+
+const DELETE_BUILD_SECRET = `
+  mutation DeleteAppBuildSecret($input: DeleteAppBuildSecretInput!) {
+    deleteAppBuildSecret(input: $input)
+  }
+`;
+
+async function listBuildSecrets(appId) {
+  const data = await api.graphqlRequest(LIST_BUILD_SECRETS, { appId });
+  return data?.listAppBuildSecrets || [];
+}
+
+async function setBuildSecret({ appId, name, value }) {
+  if (!appId) throw new Error('appId is required');
+  if (!name) throw new Error('name is required');
+  if (typeof value !== 'string' || value.length === 0) {
+    throw new Error('value is required');
+  }
+
+  const existing = await listBuildSecrets(appId);
+  const match = existing.find((s) => s.name === name) || null;
+
+  if (match) {
+    const data = await api.graphqlRequest(UPDATE_BUILD_SECRET, {
+      input: { id: match.id, value }
+    });
+    return { action: 'updated', secret: data?.updateAppBuildSecret };
+  }
+
+  const data = await api.graphqlRequest(CREATE_BUILD_SECRET, {
+    input: { appId, name, value }
+  });
+  return { action: 'created', secret: data?.createAppBuildSecret };
+}
+
+async function deleteBuildSecret({ id }) {
+  if (!id) throw new Error('id is required');
+  const data = await api.graphqlRequest(DELETE_BUILD_SECRET, { input: { id } });
+  return Boolean(data?.deleteAppBuildSecret);
+}
+
+module.exports = {
+  listBuildSecrets,
+  setBuildSecret,
+  deleteBuildSecret
+};

package/lib/stable-json.js

@@ -0,0 +1,45 @@
+'use strict';
+
+const crypto = require('crypto');
+
+function isPlainObject(value) {
+  if (!value || typeof value !== 'object') return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+
+function stableNormalize(value) {
+  if (Array.isArray(value)) {
+    return value.map(stableNormalize);
+  }
+  if (isPlainObject(value)) {
+    const out = {};
+    const keys = Object.keys(value).sort();
+    for (const key of keys) {
+      const v = value[key];
+      if (typeof v === 'undefined') continue;
+      out[key] = stableNormalize(v);
+    }
+    return out;
+  }
+  return value;
+}
+
+function stableStringify(value) {
+  return JSON.stringify(stableNormalize(value));
+}
+
+function sha256Hex(input) {
+  return crypto.createHash('sha256').update(input).digest('hex');
+}
+
+function sha256Prefixed(input) {
+  return `sha256:${sha256Hex(input)}`;
+}
+
+module.exports = {
+  stableNormalize,
+  stableStringify,
+  sha256Hex,
+  sha256Prefixed
+};

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@occam-scaly/scaly-cli",
+  "version": "0.1.0",
+  "description": "Scaly CLI (auth + MCP helpers)",
+  "bin": {
+    "scaly": "./bin/scaly-public.js"
+  },
+  "scripts": {
+    "test": "node -c ./bin/scaly-public.js && node -c ./lib/scaly-auth.js"
+  },
+  "dependencies": {
+    "axios": "^1.7.9"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "bin",
+    "lib",
+    "README.md"
+  ]
+}
+