@runtypelabs/cli 2.59.0 → 2.59.2

package/dist/chunk-DjNTPhfO.js

@@ -0,0 +1,481 @@
+#!/usr/bin/env node
+import { t as isTTY } from "./index.js";
+import { ConfirmPrompt, DataList, EntityCard, MutationResult, React, mutationResultProps, render, useEffect, useMutationState, useState } from "./chunk-CoAWdSiE.js";
+import { r as createCliClient } from "./chunk-BW2fg46T.js";
+import { n as ensureAuth } from "./chunk-CJraEBVd.js";
+import { a as printJson, i as printDetail } from "./chunk-CcFCyqbB.js";
+import { Command } from "commander";
+import chalk from "chalk";
+// src/commands/secrets.ts
+/**
+* Read a secret value from stdin without echoing it back. Used when `--value`
+* is not supplied so the value never appears in shell history or terminal
+* scrollback in the same way an inline flag would.
+*/
+async function readSecretFromStdin() {
+	if (process.stdin.isTTY) throw new Error("No secret value provided. Pass --value <v> or pipe the value on stdin.");
+	const chunks = [];
+	for await (const chunk of process.stdin) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+	const value = Buffer.concat(chunks).toString("utf-8").replace(/\r?\n$/, "");
+	if (value.length === 0) throw new Error("No secret value provided. Pass --value <v> or pipe the value on stdin.");
+	return value;
+}
+const secretsCommand = new Command("secrets").description("Manage secrets (values are write-only and never displayed)");
+secretsCommand.command("list").description("List your secrets (metadata only)").option("--json", "Output as JSON").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").action(async (options) => {
+	const apiKey = await ensureAuth();
+	if (!apiKey) return;
+	const client = createCliClient(apiKey);
+	if (!isTTY(options) || options.json) {
+		try {
+			const data = await client.get("/secrets");
+			if (options.json) {
+				printJson(data);
+				return;
+			}
+			const secrets = data.data ?? [];
+			if (secrets.length === 0) {
+				console.log(chalk.gray("No secrets found"));
+				return;
+			}
+			console.log(chalk.cyan("Your Secrets:"));
+			for (const s of secrets) {
+				const status = s.status === "active" ? chalk.green(s.status) : chalk.yellow(s.status);
+				const desc = s.description ? chalk.gray(` — ${s.description}`) : "";
+				console.log(`  ${chalk.green(s.id)} ${s.key} [${status}] v${s.version}${desc}`);
+			}
+			console.log(chalk.dim(`\n  Total: ${data.total ?? secrets.length} secrets`));
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Unknown error";
+			console.error(chalk.red(`Failed to fetch secrets: ${message}`));
+			process.exit(1);
+		}
+		return;
+	}
+	const App = () => {
+		const [items, setItems] = useState(null);
+		const [error, setError] = useState(null);
+		const [total, setTotal] = useState();
+		useEffect(() => {
+			client.get("/secrets").then((res) => {
+				setItems(res.data ?? []);
+				setTotal(res.total);
+			}).catch((err) => setError(err instanceof Error ? err : new Error(String(err))));
+		}, []);
+		return React.createElement(DataList, {
+			title: "Your Secrets",
+			items,
+			error,
+			loading: items === null && error === null,
+			total,
+			emptyMessage: "No secrets found",
+			renderCard: (item) => {
+				const s = item;
+				return React.createElement(EntityCard, { fields: [
+					{
+						label: "ID",
+						value: s.id,
+						color: "green"
+					},
+					{
+						label: "Key",
+						value: s.key
+					},
+					{
+						label: "Status",
+						value: s.status
+					},
+					{
+						label: "Version",
+						value: String(s.version)
+					},
+					{
+						label: "Description",
+						value: s.description,
+						color: "gray"
+					}
+				] });
+			}
+		});
+	};
+	const { waitUntilExit } = render(React.createElement(App));
+	await waitUntilExit();
+});
+secretsCommand.command("get <id>").description("Get secret metadata (value is never displayed)").option("--json", "Output as JSON").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").action(async (id, options) => {
+	const apiKey = await ensureAuth();
+	if (!apiKey) return;
+	const client = createCliClient(apiKey);
+	if (!isTTY(options) || options.json) {
+		try {
+			const data = await client.get(`/secrets/${id}`);
+			if (options.json) {
+				printJson(data);
+				return;
+			}
+			const s = data.data;
+			printDetail("Secret", [
+				{
+					label: "ID",
+					value: s.id
+				},
+				{
+					label: "Key",
+					value: s.key
+				},
+				{
+					label: "Description",
+					value: s.description
+				},
+				{
+					label: "Status",
+					value: s.status
+				},
+				{
+					label: "Version",
+					value: s.version
+				},
+				{
+					label: "Value Preview",
+					value: s.valuePreview
+				},
+				{
+					label: "Last Rotated",
+					value: s.lastRotatedAt
+				},
+				{
+					label: "Created",
+					value: s.createdAt
+				},
+				{
+					label: "Updated",
+					value: s.updatedAt
+				}
+			]);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Unknown error";
+			console.error(chalk.red(`Failed to fetch secret: ${message}`));
+			process.exit(1);
+		}
+		return;
+	}
+	const App = () => {
+		const mutation = useMutationState();
+		useEffect(() => {
+			const run = async () => {
+				try {
+					const s = (await client.get(`/secrets/${id}`)).data;
+					mutation.succeed(React.createElement(EntityCard, { fields: [
+						{
+							label: "ID",
+							value: s.id,
+							color: "green"
+						},
+						{
+							label: "Key",
+							value: s.key
+						},
+						{
+							label: "Description",
+							value: s.description
+						},
+						{
+							label: "Status",
+							value: s.status
+						},
+						{
+							label: "Version",
+							value: String(s.version)
+						},
+						{
+							label: "Value Preview",
+							value: s.valuePreview
+						},
+						{
+							label: "Created",
+							value: s.createdAt
+						}
+					] }));
+				} catch (err) {
+					mutation.fail(err);
+				}
+			};
+			run();
+		}, []);
+		return React.createElement(MutationResult, {
+			...mutationResultProps(mutation.state),
+			loadingLabel: "Fetching secret...",
+			successMessage: "Secret"
+		});
+	};
+	const { waitUntilExit } = render(React.createElement(App));
+	await waitUntilExit();
+});
+secretsCommand.command("create").description("Create a new secret (provide the value via --value or stdin)").requiredOption("-k, --key <key>", "Secret key (alphanumeric/underscore, starts with a letter)").option("--value <value>", "Secret value (omit to read from stdin without echo)").option("-d, --description <text>", "Secret description").option("--product-tenant-id <id>", "Scope the secret to a Product Tenant (tnt_*). Omit for an org-level secret; a scoped secret requires a value.").option("--end-user-id <id>", "Scope the secret to an End User (eu_*); its enclosing tenant is derived server-side. Omit for an org-level secret; a scoped secret requires a value.").option("--json", "Output as JSON").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").action(async (options) => {
+	const apiKey = await ensureAuth();
+	if (!apiKey) return;
+	let value = options.value;
+	if (value === void 0 && !process.stdin.isTTY) try {
+		value = await readSecretFromStdin();
+	} catch (error) {
+		const message = error instanceof Error ? error.message : "Unknown error";
+		console.error(chalk.red(`Failed to read secret value: ${message}`));
+		process.exit(1);
+	}
+	const client = createCliClient(apiKey);
+	const body = {
+		key: options.key,
+		description: options.description
+	};
+	if (value !== void 0) body.value = value;
+	if (options.productTenantId !== void 0) body.productTenantId = options.productTenantId;
+	if (options.endUserId !== void 0) body.endUserId = options.endUserId;
+	if (!isTTY(options) || options.json) {
+		try {
+			const data = await client.post("/secrets", body);
+			if (options.json) {
+				printJson(data);
+				return;
+			}
+			const s = data.data;
+			console.log(chalk.green("Secret created"));
+			console.log(`  ID: ${chalk.green(s.id)}`);
+			console.log(`  Key: ${s.key}`);
+			console.log(`  Status: ${s.status}`);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Unknown error";
+			console.error(chalk.red(`Failed to create secret: ${message}`));
+			process.exit(1);
+		}
+		return;
+	}
+	const App = () => {
+		const mutation = useMutationState();
+		useEffect(() => {
+			const run = async () => {
+				try {
+					const data = await client.post("/secrets", body);
+					mutation.succeed(React.createElement(EntityCard, { fields: [
+						{
+							label: "ID",
+							value: data.data.id,
+							color: "green"
+						},
+						{
+							label: "Key",
+							value: data.data.key
+						},
+						{
+							label: "Status",
+							value: data.data.status
+						}
+					] }));
+				} catch (err) {
+					mutation.fail(err);
+				}
+			};
+			run();
+		}, []);
+		return React.createElement(MutationResult, {
+			...mutationResultProps(mutation.state),
+			loadingLabel: "Creating secret...",
+			successMessage: "Secret created"
+		});
+	};
+	const { waitUntilExit } = render(React.createElement(App));
+	await waitUntilExit();
+});
+secretsCommand.command("update <id>").description("Update or rotate a secret (value via --value or stdin)").option("--value <value>", "New secret value (omit to read from stdin without echo)").option("-d, --description <text>", "New secret description").option("--expected-version <n>", "Expected current version for optimistic concurrency").option("--json", "Output as JSON").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").action(async (id, options) => {
+	const apiKey = await ensureAuth();
+	if (!apiKey) return;
+	let value = options.value;
+	if (value === void 0 && !process.stdin.isTTY) try {
+		value = await readSecretFromStdin();
+	} catch (error) {
+		const message = error instanceof Error ? error.message : "Unknown error";
+		console.error(chalk.red(`Failed to read secret value: ${message}`));
+		process.exit(1);
+	}
+	if (value === void 0 && options.description === void 0) {
+		console.error(chalk.red("Error: provide at least one of --value (or piped stdin) or --description"));
+		process.exit(1);
+	}
+	const client = createCliClient(apiKey);
+	const body = {};
+	if (value !== void 0) body.value = value;
+	if (options.description !== void 0) body.description = options.description;
+	if (options.expectedVersion !== void 0) {
+		const parsedVersion = parseInt(options.expectedVersion, 10);
+		if (Number.isNaN(parsedVersion)) {
+			console.error(chalk.red("Error: --expected-version must be a number"));
+			process.exit(1);
+		}
+		body.expectedVersion = parsedVersion;
+	}
+	if (!isTTY(options) || options.json) {
+		try {
+			const data = await client.put(`/secrets/${id}`, body);
+			if (options.json) {
+				printJson(data);
+				return;
+			}
+			const s = data.data;
+			console.log(chalk.green("Secret updated"));
+			console.log(`  ID: ${chalk.green(s.id)}`);
+			console.log(`  Key: ${s.key}`);
+			console.log(`  Version: ${s.version}`);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Unknown error";
+			console.error(chalk.red(`Failed to update secret: ${message}`));
+			process.exit(1);
+		}
+		return;
+	}
+	const App = () => {
+		const mutation = useMutationState();
+		useEffect(() => {
+			const run = async () => {
+				try {
+					const data = await client.put(`/secrets/${id}`, body);
+					mutation.succeed(React.createElement(EntityCard, { fields: [
+						{
+							label: "ID",
+							value: data.data.id,
+							color: "green"
+						},
+						{
+							label: "Key",
+							value: data.data.key
+						},
+						{
+							label: "Version",
+							value: String(data.data.version)
+						}
+					] }));
+				} catch (err) {
+					mutation.fail(err);
+				}
+			};
+			run();
+		}, []);
+		return React.createElement(MutationResult, {
+			...mutationResultProps(mutation.state),
+			loadingLabel: "Updating secret...",
+			successMessage: "Secret updated"
+		});
+	};
+	const { waitUntilExit } = render(React.createElement(App));
+	await waitUntilExit();
+});
+secretsCommand.command("delete <id>").description("Delete a secret").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").option("--yes", "Skip confirmation").action(async (id, options) => {
+	const apiKey = await ensureAuth();
+	if (!apiKey) return;
+	const client = createCliClient(apiKey);
+	if (!isTTY(options)) {
+		try {
+			await client.secrets.delete(id);
+			console.log(chalk.green("Secret deleted"));
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Unknown error";
+			console.error(chalk.red(`Failed to delete secret: ${message}`));
+			process.exit(1);
+		}
+		return;
+	}
+	const runDelete = () => {
+		const App = () => {
+			const mutation = useMutationState();
+			useEffect(() => {
+				client.delete(`/secrets/${id}`).then(() => {
+					mutation.succeed();
+				}).catch((err) => {
+					mutation.fail(err);
+				});
+			}, []);
+			return React.createElement(MutationResult, {
+				...mutationResultProps(mutation.state),
+				loadingLabel: "Deleting secret...",
+				successMessage: "Secret deleted"
+			});
+		};
+		return App;
+	};
+	if (options.yes) {
+		const { waitUntilExit } = render(React.createElement(runDelete()));
+		await waitUntilExit();
+		return;
+	}
+	if (!await new Promise((resolve) => {
+		const { unmount } = render(React.createElement(ConfirmPrompt, {
+			message: `Delete secret ${id}?`,
+			defaultValue: false,
+			onConfirm: (result) => {
+				resolve(result);
+				unmount();
+			}
+		}));
+	})) return;
+	const { waitUntilExit } = render(React.createElement(runDelete()));
+	await waitUntilExit();
+});
+secretsCommand.command("check <keys...>").description("Check which secret keys exist, are missing, or revoked").option("--json", "Output as JSON").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").action(async (keys, options) => {
+	const apiKey = await ensureAuth();
+	if (!apiKey) return;
+	const client = createCliClient(apiKey);
+	const body = { keys };
+	if (!isTTY(options) || options.json) {
+		try {
+			const data = await client.post("/secrets/check", body);
+			if (options.json) {
+				printJson(data);
+				return;
+			}
+			console.log(chalk.cyan("Secret Check:"));
+			if (data.found.length > 0) console.log(`  ${chalk.green("found")}: ${data.found.join(", ")}`);
+			if (data.missing.length > 0) console.log(`  ${chalk.yellow("missing")}: ${data.missing.join(", ")}`);
+			if (data.revoked.length > 0) console.log(`  ${chalk.red("revoked")}: ${data.revoked.join(", ")}`);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Unknown error";
+			console.error(chalk.red(`Failed to check secrets: ${message}`));
+			process.exit(1);
+		}
+		return;
+	}
+	const App = () => {
+		const mutation = useMutationState();
+		useEffect(() => {
+			const run = async () => {
+				try {
+					const data = await client.post("/secrets/check", body);
+					mutation.succeed(React.createElement(EntityCard, { fields: [
+						{
+							label: "Found",
+							value: data.found.join(", ") || "(none)",
+							color: "green"
+						},
+						{
+							label: "Missing",
+							value: data.missing.join(", ") || "(none)",
+							color: "yellow"
+						},
+						{
+							label: "Revoked",
+							value: data.revoked.join(", ") || "(none)",
+							color: "red"
+						}
+					] }));
+				} catch (err) {
+					mutation.fail(err);
+				}
+			};
+			run();
+		}, []);
+		return React.createElement(MutationResult, {
+			...mutationResultProps(mutation.state),
+			loadingLabel: "Checking secrets...",
+			successMessage: "Secret check"
+		});
+	};
+	const { waitUntilExit } = render(React.createElement(App));
+	await waitUntilExit();
+});
+export { secretsCommand };
+