@rmartz/envctl 3.1.1

package/dist/lib/subprocess.d.ts

@@ -0,0 +1,8 @@
+import type { SpawnSyncOptions } from "child_process";
+export declare function run(cmd: string, args: string[], opts?: SpawnSyncOptions): string;
+export declare function commandExists(cmd: string): boolean;
+export declare function runStatus(cmd: string, args: string[], opts?: SpawnSyncOptions): {
+    status: number | null;
+    stdout: string;
+};
+//# sourceMappingURL=subprocess.d.ts.map

package/dist/lib/subprocess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.d.ts","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGtD,wBAAgB,GAAG,CACjB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB,MAAM,CAUR;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGlD;AAMD,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAK3C"}

package/dist/lib/subprocess.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+exports.commandExists = commandExists;
+exports.runStatus = runStatus;
+const child_process_1 = require("child_process");
+function run(cmd, args, opts) {
+    const result = (0, child_process_1.spawnSync)(cmd, args, { encoding: "utf-8", ...opts });
+    if (result.error)
+        throw new Error(`Failed to run ${cmd}: ${result.error.message}`);
+    if (result.status !== 0) {
+        throw new Error(`${cmd} exited with code ${String(result.status)}: ${String(result.stderr)}`);
+    }
+    return String(result.stdout);
+}
+function commandExists(cmd) {
+    const result = (0, child_process_1.spawnSync)("which", [cmd]);
+    return result.status === 0;
+}
+// Like `run`, but returns the exit status instead of throwing on a non-zero
+// exit — for callers that treat the code itself as data (e.g. `git check-ignore`,
+// where 0 = ignored, 1 = not ignored, 128 = not a repo). A failure to spawn the
+// process at all still throws; guard with `commandExists` when that matters.
+function runStatus(cmd, args, opts) {
+    const result = (0, child_process_1.spawnSync)(cmd, args, { encoding: "utf-8", ...opts });
+    if (result.error)
+        throw new Error(`Failed to run ${cmd}: ${result.error.message}`);
+    return { status: result.status, stdout: String(result.stdout ?? "") };
+}
+//# sourceMappingURL=subprocess.js.map

package/dist/lib/subprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.js","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":";;AAGA,kBAcC;AAED,sCAGC;AAMD,8BASC;AApCD,iDAA0C;AAE1C,SAAgB,GAAG,CACjB,GAAW,EACX,IAAc,EACd,IAAuB;IAEvB,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,KAAK;QACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,qBAAqB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAgB,aAAa,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,4EAA4E;AAC5E,kFAAkF;AAClF,gFAAgF;AAChF,6EAA6E;AAC7E,SAAgB,SAAS,CACvB,GAAW,EACX,IAAc,EACd,IAAuB;IAEvB,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,KAAK;QACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC"}

package/dist/lib/targets.d.ts

@@ -0,0 +1,3 @@
+export declare function envTargetResolver(deploymentDir: string): (envName: string) => string;
+export declare function resolveEnvTarget(deploymentDir: string, envName: string): string;
+//# sourceMappingURL=targets.d.ts.map

package/dist/lib/targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../src/lib/targets.ts"],"names":[],"mappings":"AAYA,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,GACpB,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAK7B;AAGD,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,GACd,MAAM,CAER"}

package/dist/lib/targets.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.envTargetResolver = envTargetResolver;
+exports.resolveEnvTarget = resolveEnvTarget;
+const environments_1 = require("./environments");
+const manifest_1 = require("./manifest");
+// Env → provider infrastructure-target resolution (#87). The manifest's
+// `deployments[].targets` map is authoritative; the name convention
+// (vercelTarget / TARGET_MAP) is only the fallback for an env the manifest does
+// not declare — a legacy config with no `targets:` block, or an env omitted from
+// the map — so existing repos resolve exactly as before.
+// Build a resolver bound to one deployment dir, parsing the manifest once. Use
+// this when resolving several environments (config push, the dev-source scan,
+// `env list`); {@link resolveEnvTarget} is the single-env convenience.
+function envTargetResolver(deploymentDir) {
+    const manifest = (0, manifest_1.parseManifest)(deploymentDir);
+    const vercel = manifest.deployments.find((d) => d.provider === "vercel");
+    const targets = vercel?.targets ?? {};
+    return (envName) => targets[envName] ?? (0, environments_1.vercelTarget)(envName);
+}
+// The provider target for a single environment.
+function resolveEnvTarget(deploymentDir, envName) {
+    return envTargetResolver(deploymentDir)(envName);
+}
+//# sourceMappingURL=targets.js.map

package/dist/lib/targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.js","sourceRoot":"","sources":["../../src/lib/targets.ts"],"names":[],"mappings":";;AAYA,8CAOC;AAGD,4CAKC;AA3BD,iDAA8C;AAC9C,yCAA2C;AAE3C,wEAAwE;AACxE,oEAAoE;AACpE,gFAAgF;AAChF,iFAAiF;AACjF,yDAAyD;AAEzD,+EAA+E;AAC/E,8EAA8E;AAC9E,uEAAuE;AACvE,SAAgB,iBAAiB,CAC/B,aAAqB;IAErB,MAAM,QAAQ,GAAG,IAAA,wBAAa,EAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IACtC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAA,2BAAY,EAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,gDAAgD;AAChD,SAAgB,gBAAgB,CAC9B,aAAqB,EACrB,OAAe;IAEf,OAAO,iBAAiB,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC"}

package/dist/lib/vercel-api.d.ts

@@ -0,0 +1,50 @@
+export interface VercelEnvVar {
+    id: string;
+    key: string;
+    value: string;
+    target: string[];
+    type: "plain" | "encrypted" | "secret";
+    createdAt?: number;
+    updatedAt?: number;
+}
+export interface VercelEnvVarList {
+    envs: VercelEnvVar[];
+    pagination?: {
+        next?: number;
+    };
+}
+export interface VercelDeployment {
+    uid: string;
+    url: string;
+    name: string;
+    readyState?: string;
+    status?: string;
+}
+export declare class VercelClient {
+    private token;
+    private projectId;
+    private teamId?;
+    private baseUrl;
+    constructor(token: string, projectId: string, teamId?: string | undefined);
+    private buildUrl;
+    request<T>(path: string, method?: string, body?: unknown): Promise<T>;
+    listEnvVars(): Promise<VercelEnvVarList>;
+    getEnvVarValue(envId: string): Promise<string>;
+    createEnvVar(key: string, value: string, target: string, type?: "plain" | "encrypted"): Promise<VercelEnvVar>;
+    updateEnvVar(existing: VercelEnvVar, value: string): Promise<void>;
+    deleteEnvVar(envId: string): Promise<void>;
+    /**
+     * Remove one Vercel target from an env-var record. If the record covers only
+     * that target, the record is deleted outright; otherwise it is patched to
+     * remove just that target so the credential is preserved for the remaining
+     * environments.
+     */
+    removeEnvVarFromTarget(envId: string, existingTargets: string[], vercelEnv: string): Promise<void>;
+    findEnvVar(envs: VercelEnvVar[], key: string, target: string): VercelEnvVar | undefined;
+    setEnvForTarget(key: string, value: string, target: string, allEnvs: VercelEnvVar[], type?: "plain" | "encrypted"): Promise<string>;
+    getLatestDeployment(target: "production" | "staging"): Promise<VercelDeployment | null>;
+    triggerRedeployment(deploymentId: string, name: string, target?: string): Promise<string>;
+    listPreviewDeployments(): Promise<VercelDeployment[]>;
+    pollDeploymentStatus(deploymentId: string, maxAttempts?: number, intervalMs?: number): Promise<"ready" | "canceled">;
+}
+//# sourceMappingURL=vercel-api.d.ts.map

package/dist/lib/vercel-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-api.d.ts","sourceRoot":"","sources":["../../src/lib/vercel-api.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,YAAY;IAIrB,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,MAAM,CAAC;IALjB,OAAO,CAAC,OAAO,CAA4B;gBAGjC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,YAAA;IAGzB,OAAO,CAAC,QAAQ;IAMV,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,SAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAoBpE,WAAW,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAgBxC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAO9C,YAAY,CAChB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,OAAO,GAAG,WAAqB,GACpC,OAAO,CAAC,YAAY,CAAC;IAkBlB,YAAY,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAalE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD;;;;;OAKG;IACG,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,EAAE,EACzB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAahB,UAAU,CACR,IAAI,EAAE,YAAY,EAAE,EACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,YAAY,GAAG,SAAS;IAIrB,eAAe,CACnB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,YAAY,EAAE,EACvB,IAAI,GAAE,OAAO,GAAG,WAAyB,GACxC,OAAO,CAAC,MAAM,CAAC;IAmBZ,mBAAmB,CACvB,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAmB7B,mBAAmB,CACvB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC;IAWZ,sBAAsB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAwBrD,oBAAoB,CACxB,YAAY,EAAE,MAAM,EACpB,WAAW,SAAK,EAChB,UAAU,SAAS,GAClB,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC;CAkBjC"}

package/dist/lib/vercel-api.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VercelClient = void 0;
+const logger_1 = require("./logger");
+class VercelClient {
+    token;
+    projectId;
+    teamId;
+    baseUrl = "https://api.vercel.com";
+    constructor(token, projectId, teamId) {
+        this.token = token;
+        this.projectId = projectId;
+        this.teamId = teamId;
+    }
+    buildUrl(path) {
+        const url = new URL(`${this.baseUrl}${path}`);
+        if (this.teamId)
+            url.searchParams.set("teamId", this.teamId);
+        return url.toString();
+    }
+    async request(path, method = "GET", body) {
+        const url = this.buildUrl(path);
+        const res = await fetch(url, {
+            method,
+            headers: {
+                Authorization: `Bearer ${this.token}`,
+                "Content-Type": "application/json",
+            },
+            body: body !== undefined ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            const text = await res.text();
+            throw new logger_1.FatalError(`Vercel API ${method} ${path} failed (${res.status}): ${text}`);
+        }
+        if (res.status === 204 || method === "DELETE")
+            return undefined;
+        return res.json();
+    }
+    async listEnvVars() {
+        let result = await this.request(`/v9/projects/${this.projectId}/env?limit=100`);
+        while (result.pagination?.next) {
+            const page = await this.request(`/v9/projects/${this.projectId}/env?limit=100&since=${result.pagination.next}`);
+            result = {
+                envs: [...result.envs, ...page.envs],
+                pagination: page.pagination,
+            };
+        }
+        return result;
+    }
+    async getEnvVarValue(envId) {
+        const record = await this.request(`/v1/projects/${this.projectId}/env/${envId}`);
+        return record.value;
+    }
+    async createEnvVar(key, value, target, type = "plain") {
+        return this.request(`/v10/projects/${this.projectId}/env`, "POST", {
+            key,
+            value,
+            target: [target],
+            type,
+        });
+    }
+    // Edit an existing env var in place. Vercel's PATCH silently ignores a
+    // value-only body (leaving the var stale — #124); the reliable edit request
+    // carries the record's full descriptor, so we resend key/type/target from the
+    // existing record alongside the new value. Preserving `target` also keeps a
+    // multi-target record's other environments intact.
+    async updateEnvVar(existing, value) {
+        await this.request(`/v9/projects/${this.projectId}/env/${existing.id}`, "PATCH", {
+            key: existing.key,
+            type: existing.type,
+            target: existing.target,
+            value,
+        });
+    }
+    async deleteEnvVar(envId) {
+        await this.request(`/v9/projects/${this.projectId}/env/${envId}`, "DELETE");
+    }
+    /**
+     * Remove one Vercel target from an env-var record. If the record covers only
+     * that target, the record is deleted outright; otherwise it is patched to
+     * remove just that target so the credential is preserved for the remaining
+     * environments.
+     */
+    async removeEnvVarFromTarget(envId, existingTargets, vercelEnv) {
+        const remaining = existingTargets.filter((t) => t !== vercelEnv);
+        if (remaining.length === 0) {
+            await this.deleteEnvVar(envId);
+        }
+        else {
+            await this.request(`/v9/projects/${this.projectId}/env/${envId}`, "PATCH", { target: remaining });
+        }
+    }
+    findEnvVar(envs, key, target) {
+        return envs.find((e) => e.key === key && e.target.includes(target));
+    }
+    async setEnvForTarget(key, value, target, allEnvs, type = "encrypted") {
+        const existing = this.findEnvVar(allEnvs, key, target);
+        if (existing) {
+            await this.deleteEnvVar(existing.id);
+        }
+        const created = await this.createEnvVar(key, value, target, type);
+        if (!created.id) {
+            const refetched = await this.listEnvVars();
+            const confirmed = this.findEnvVar(refetched.envs, key, target);
+            if (!confirmed?.id) {
+                throw new Error(`Failed to confirm ${key} was saved for ${target} after write`);
+            }
+            return confirmed.id;
+        }
+        return created.id;
+    }
+    async getLatestDeployment(target) {
+        const url = new URL(`${this.baseUrl}/v6/deployments`);
+        url.searchParams.set("projectId", this.projectId);
+        url.searchParams.set("target", target);
+        url.searchParams.set("limit", "1");
+        url.searchParams.set("state", "READY");
+        if (this.teamId)
+            url.searchParams.set("teamId", this.teamId);
+        const res = await fetch(url.toString(), {
+            headers: { Authorization: `Bearer ${this.token}` },
+        });
+        if (!res.ok)
+            return null;
+        const text = await res.text();
+        // eslint-disable-next-line no-control-regex
+        const cleaned = text.replace(/[\x00-\x08\x0b\x0c\x0e-\x1f]/g, "");
+        const data = JSON.parse(cleaned);
+        return data.deployments[0] ?? null;
+    }
+    async triggerRedeployment(deploymentId, name, target) {
+        const body = { deploymentId, name };
+        if (target !== undefined)
+            body.target = target;
+        const result = await this.request("/v13/deployments", "POST", body);
+        return result.id;
+    }
+    async listPreviewDeployments() {
+        const url = new URL(`${this.baseUrl}/v6/deployments`);
+        url.searchParams.set("projectId", this.projectId);
+        url.searchParams.set("state", "READY");
+        url.searchParams.set("limit", "50");
+        if (this.teamId)
+            url.searchParams.set("teamId", this.teamId);
+        const res = await fetch(url.toString(), {
+            headers: { Authorization: `Bearer ${this.token}` },
+        });
+        if (!res.ok)
+            return [];
+        const data = (await res.json());
+        // PR preview deployments have target === null; production and aliased
+        // preview (staging) deployments have an explicit target string.
+        return data.deployments.filter((d) => d.target === null);
+    }
+    // Poll until the deployment reaches a terminal state. `READY` → "ready";
+    // `CANCELED` → "canceled" (a benign auto-cancel — Vercel supersedes a redeploy
+    // with a newer build, or the project auto-cancels redundant ones — so the
+    // caller warns rather than fails, #125). Only a genuine `ERROR` (or a timeout)
+    // throws.
+    async pollDeploymentStatus(deploymentId, maxAttempts = 60, intervalMs = 10_000) {
+        for (let attempt = 0; attempt < maxAttempts; attempt++) {
+            const result = await this.request(`/v13/deployments/${deploymentId}`);
+            if (result.status === "READY")
+                return "ready";
+            if (result.status === "CANCELED")
+                return "canceled";
+            if (result.status === "ERROR") {
+                throw new Error(`Deployment ${deploymentId} ended with status: ${result.status}`);
+            }
+            await new Promise((r) => setTimeout(r, intervalMs));
+        }
+        throw new Error(`Deployment ${deploymentId} timed out after ${maxAttempts} attempts`);
+    }
+}
+exports.VercelClient = VercelClient;
+//# sourceMappingURL=vercel-api.js.map

package/dist/lib/vercel-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-api.js","sourceRoot":"","sources":["../../src/lib/vercel-api.ts"],"names":[],"mappings":";;;AAAA,qCAAsC;AAyBtC,MAAa,YAAY;IAIb;IACA;IACA;IALF,OAAO,GAAG,wBAAwB,CAAC;IAE3C,YACU,KAAa,EACb,SAAiB,EACjB,MAAe;QAFf,UAAK,GAAL,KAAK,CAAQ;QACb,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAS;IACtB,CAAC;IAEI,QAAQ,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,MAAM,GAAG,KAAK,EAAE,IAAc;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;gBACrC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAU,CAClB,cAAc,MAAM,IAAI,IAAI,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAc,CAAC;QACrE,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,gBAAgB,IAAI,CAAC,SAAS,gBAAgB,CAC/C,CAAC;QACF,OAAO,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,gBAAgB,IAAI,CAAC,SAAS,wBAAwB,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAC/E,CAAC;YACF,MAAM,GAAG;gBACP,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,gBAAgB,IAAI,CAAC,SAAS,QAAQ,KAAK,EAAE,CAC9C,CAAC;QACF,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,GAAW,EACX,KAAa,EACb,MAAc,EACd,OAA8B,OAAO;QAErC,OAAO,IAAI,CAAC,OAAO,CACjB,iBAAiB,IAAI,CAAC,SAAS,MAAM,EACrC,MAAM,EACN;YACE,GAAG;YACH,KAAK;YACL,MAAM,EAAE,CAAC,MAAM,CAAC;YAChB,IAAI;SACL,CACF,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,mDAAmD;IACnD,KAAK,CAAC,YAAY,CAAC,QAAsB,EAAE,KAAa;QACtD,MAAM,IAAI,CAAC,OAAO,CAChB,gBAAgB,IAAI,CAAC,SAAS,QAAQ,QAAQ,CAAC,EAAE,EAAE,EACnD,OAAO,EACP;YACE,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK;SACN,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,SAAS,QAAQ,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,eAAyB,EACzB,SAAiB;QAEjB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,OAAO,CAChB,gBAAgB,IAAI,CAAC,SAAS,QAAQ,KAAK,EAAE,EAC7C,OAAO,EACP,EAAE,MAAM,EAAE,SAAS,EAAE,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,UAAU,CACR,IAAoB,EACpB,GAAW,EACX,MAAc;QAEd,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,GAAW,EACX,KAAa,EACb,MAAc,EACd,OAAuB,EACvB,OAA8B,WAAW;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,kBAAkB,MAAM,cAAc,CAC/D,CAAC;YACJ,CAAC;YACD,OAAO,SAAS,CAAC,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,OAAO,CAAC,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,MAAgC;QAEhC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,4CAA4C;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwC,CAAC;QACxE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,YAAoB,EACpB,IAAY,EACZ,MAAe;QAEf,MAAM,IAAI,GAA2B,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC5D,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,kBAAkB,EAClB,MAAM,EACN,IAAI,CACL,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAE7B,CAAC;QACF,sEAAsE;QACtE,gEAAgE;QAChE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,yEAAyE;IACzE,+EAA+E;IAC/E,0EAA0E;IAC1E,+EAA+E;IAC/E,UAAU;IACV,KAAK,CAAC,oBAAoB,CACxB,YAAoB,EACpB,WAAW,GAAG,EAAE,EAChB,UAAU,GAAG,MAAM;QAEnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,oBAAoB,YAAY,EAAE,CACnC,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,UAAU,CAAC;YACpD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,cAAc,YAAY,uBAAuB,MAAM,CAAC,MAAM,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,cAAc,YAAY,oBAAoB,WAAW,WAAW,CACrE,CAAC;IACJ,CAAC;CACF;AA5OD,oCA4OC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@rmartz/envctl",
+  "version": "3.1.1",
+  "description": "Personal gh-style CLI for managing deploy configuration and atomically rotating provider secrets.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rmartz/envctl.git"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "@rmartz:registry": "https://registry.npmjs.org/",
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "packageManager": "pnpm@10.30.3",
+  "bin": {
+    "envctl": "dist/envctl.js"
+  },
+  "engines": {
+    "node": ">=18",
+    "pnpm": ">=9"
+  },
+  "scripts": {
+    "build": "tsc && chmod +x dist/envctl.js",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint --max-warnings 0 .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test:ts": "vitest run",
+    "check:file-length": "node scripts/check-file-length.mjs"
+  },
+  "dependencies": {
+    "js-yaml": "^5.4.1",
+    "yaml": "^2.9.1"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^26.5.1",
+    "@vitest/coverage-v8": "^5.0.0",
+    "conventional-changelog-conventionalcommits": "^8.0.0",
+    "eslint": "^10.10.0",
+    "globals": "^17.12.0",
+    "prettier": "^3.9.6",
+    "semantic-release": "^25.0.9",
+    "typescript": "^6.0.3",
+    "typescript-eslint": "^8.70.0",
+    "vitest": "^5.0.0"
+  }
+}