@psg2/env-sync 1.0.0 → 1.0.1

package/dist/cli.js

@@ -6906,7 +6906,7 @@ var require_public_api = __commonJS((exports) => {
 });
 
 // src/cli.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import { resolve as resolve4 } from "path";
 
 // src/config.ts
@@ -7280,8 +7280,84 @@ async function syncGitHub(name, target, vars, _configDir, opts) {
 }
 
 // src/targets/vercel.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { homedir } from "os";
 import { resolve as resolve3 } from "path";
+function getVercelAuthToken() {
+  const candidates = [
+    `${homedir()}/Library/Application Support/com.vercel.cli/auth.json`,
+    `${homedir()}/.local/share/com.vercel.cli/auth.json`,
+    process.env.XDG_CONFIG_HOME ? `${process.env.XDG_CONFIG_HOME}/com.vercel.cli/auth.json` : undefined,
+    process.env.APPDATA ? `${process.env.APPDATA}/com.vercel.cli/auth.json` : undefined
+  ].filter(Boolean);
+  for (const path of candidates) {
+    if (!existsSync3(path))
+      continue;
+    try {
+      const raw = JSON.parse(readFileSync2(path, "utf8"));
+      if (raw.token)
+        return raw.token;
+    } catch {}
+  }
+  throw new Error("Vercel auth token not found in any of the standard CLI store paths. Run `vercel login` first.");
+}
+function getProjectInfo(configDir, override) {
+  const path = resolve3(configDir, ".vercel/project.json");
+  if (!existsSync3(path)) {
+    throw new Error(`.vercel/project.json not found at ${configDir}. Run \`vercel link\` first.`);
+  }
+  const data = JSON.parse(readFileSync2(path, "utf8"));
+  if (override && data.projectName !== override) {
+    console.warn(`  \u26A0 Configured project '${override}' differs from .vercel/project.json '${data.projectName}'. Using linked project.`);
+  }
+  return { projectId: data.projectId, teamId: data.orgId };
+}
+async function vercelApi(method, endpoint, teamId, token, body) {
+  const url = `https://api.vercel.com${endpoint}${endpoint.includes("?") ? "&" : "?"}teamId=${encodeURIComponent(teamId)}`;
+  const headers = {
+    Authorization: `Bearer ${token}`
+  };
+  if (body !== undefined)
+    headers["Content-Type"] = "application/json";
+  const res = await fetch(url, {
+    method,
+    headers,
+    body: body !== undefined ? JSON.stringify(body) : undefined
+  });
+  const text = await res.text();
+  let parsed;
+  try {
+    parsed = text ? JSON.parse(text) : undefined;
+  } catch {
+    parsed = text;
+  }
+  return { ok: res.ok, status: res.status, body: parsed };
+}
+async function listExistingEnvVars(projectId, teamId, token) {
+  const res = await vercelApi("GET", `/v9/projects/${projectId}/env`, teamId, token);
+  if (!res.ok) {
+    throw new Error(`Failed to list env vars: ${res.status} ${JSON.stringify(res.body)}`);
+  }
+  const body = res.body;
+  return body.envs ?? [];
+}
+async function deleteEnvVar(projectId, teamId, token, envId) {
+  const res = await vercelApi("DELETE", `/v9/projects/${projectId}/env/${envId}`, teamId, token);
+  if (!res.ok) {
+    throw new Error(`Delete env var ${envId} failed: ${res.status} ${JSON.stringify(res.body)}`);
+  }
+}
+async function createEnvVar(projectId, teamId, token, payload) {
+  const res = await vercelApi("POST", `/v10/projects/${projectId}/env`, teamId, token, {
+    key: payload.key,
+    value: payload.value,
+    target: payload.target,
+    type: payload.type ?? "encrypted"
+  });
+  if (!res.ok) {
+    throw new Error(`Create env var ${payload.key} failed: ${res.status} ${JSON.stringify(res.body)}`);
+  }
+}
 async function syncVercel(name, target, vars, configDir, opts) {
   const errors2 = [];
   const envLabel = target.environments.join(", ");
@@ -7289,29 +7365,44 @@ async function syncVercel(name, target, vars, configDir, opts) {
     console.log(`  Would back up and push ${vars.length} vars to Vercel [${envLabel}]`);
     return { target: name, type: "vercel", vars: vars.length, errors: errors2 };
   }
+  let token;
+  let projectId;
+  let teamId;
+  try {
+    token = getVercelAuthToken();
+    const info = getProjectInfo(configDir, target.project);
+    projectId = info.projectId;
+    teamId = info.teamId;
+  } catch (err) {
+    errors2.push(`  \u2717 Vercel API setup: ${err instanceof Error ? err.message : err}`);
+    return { target: name, type: "vercel", vars: vars.length, errors: errors2 };
+  }
   for (const env of target.environments) {
     await backupVercelEnv(env, target.project, configDir);
   }
+  let existing;
+  try {
+    existing = await listExistingEnvVars(projectId, teamId, token);
+  } catch (err) {
+    errors2.push(`  \u2717 List env failed: ${err instanceof Error ? err.message : err}`);
+    return { target: name, type: "vercel", vars: vars.length, errors: errors2 };
+  }
   for (const v of vars) {
     for (const env of target.environments) {
       try {
-        const args = ["env", "add", v.key, env, "--force"];
-        if (target.project)
-          args.push("--project", target.project);
-        const proc = Bun.spawn(["vercel", ...args], {
-          stdin: new TextEncoder().encode(v.value),
-          stdout: "pipe",
-          stderr: "pipe"
-        });
-        const stderr = await new Response(proc.stderr).text();
-        const exitCode = await proc.exited;
-        if (exitCode !== 0) {
-          errors2.push(`  \u2717 ${v.key} [${env}]: ${stderr.trim()}`);
-        } else {
-          console.log(`  \u2713 ${v.key} [${env}]`);
+        const conflict = existing.find((e) => e.key === v.key && e.target.includes(env) && !e.gitBranch);
+        if (conflict) {
+          await deleteEnvVar(projectId, teamId, token, conflict.id);
+          existing = existing.filter((e) => e.id !== conflict.id);
         }
+        await createEnvVar(projectId, teamId, token, {
+          key: v.key,
+          value: v.value,
+          target: [env]
+        });
+        console.log(`  \u2713 ${v.key} [${env}]`);
       } catch (err) {
-        errors2.push(`  \u2717 ${v.key} [${env}]: ${err}`);
+        errors2.push(`  \u2717 ${v.key} [${env}]: ${err instanceof Error ? err.message : err}`);
       }
     }
   }
@@ -7513,7 +7604,7 @@ function parseArgs(args) {
       case "-v":
       case "--version": {
         const pkgPath = resolve4(import.meta.dirname ?? ".", "..", "package.json");
-        const pkg = JSON.parse(readFileSync2(pkgPath, "utf-8"));
+        const pkg = JSON.parse(readFileSync3(pkgPath, "utf-8"));
         console.log(`env-sync v${pkg.version}`);
         process.exit(0);
         break;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@psg2/env-sync",
-	"version": "1.0.0",
+	"version": "1.0.1",
 	"description": "Declarative env var management — 1Password → local files, Vercel, GitHub secrets",
 	"type": "module",
 	"bin": {
@@ -46,7 +46,7 @@
 		"yaml": "^2.7.1"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "^1.9.4",
+		"@biomejs/biome": "^2.4.7",
 		"@types/bun": "^1.2.4"
 	}
 }