@secr/cli 0.1.0

package/dist/completions/zsh.sh

@@ -0,0 +1,106 @@
+#compdef secr
+
+_secr() {
+  local -a commands
+  commands=(
+    'login:Authenticate with the secr platform'
+    'logout:Clear saved credentials'
+    'whoami:Show current user and linked project'
+    'init:Create a new project interactively'
+    'link:Link current directory to a project'
+    'pull:Pull decrypted secrets'
+    'run:Run a command with secrets injected'
+    'set:Set one or more secrets'
+    'delete:Delete a secret'
+    'ls:List secret keys'
+    'log:View audit log entries'
+    'diff:Compare secrets between environments'
+    'env:Manage environments'
+    'rotate-key:Rotate the project encryption key'
+    'promote:Promote secrets between environments'
+    'template:Manage secret templates'
+    'scan:Scan for leaked secrets'
+    'guard:Manage pre-commit hook'
+    'completion:Output shell completion script'
+  )
+
+  _arguments -C \
+    '--help[Show help]' \
+    '--version[Show version]' \
+    '1: :->command' \
+    '*:: :->args'
+
+  case $state in
+    command)
+      _describe -t commands 'secr command' commands
+      ;;
+    args)
+      case $words[1] in
+        env)
+          local -a subcommands
+          subcommands=('list:List environments' 'create:Create an environment')
+          _describe -t subcommands 'env subcommand' subcommands
+          ;;
+        template)
+          local -a subcommands
+          subcommands=('list:List template keys' 'add:Add a template key' 'remove:Remove a template key' 'validate:Validate env against template')
+          _describe -t subcommands 'template subcommand' subcommands
+          ;;
+        guard)
+          local -a subcommands
+          subcommands=('install:Install pre-commit hook' 'uninstall:Remove pre-commit hook' 'status:Check hook status')
+          _describe -t subcommands 'guard subcommand' subcommands
+          ;;
+        completion)
+          local -a shells
+          shells=('bash:Bash completion' 'zsh:Zsh completion' 'fish:Fish completion')
+          _describe -t shells 'shell' shells
+          ;;
+        pull)
+          _arguments \
+            '--env[Environment]:env:(development staging production)' \
+            '--format[Output format]:format:(dotenv json table)'
+          ;;
+        set)
+          _arguments \
+            '--env[Environment]:env:(development staging production)' \
+            '--from-env[Import from .env file]:file:_files'
+          ;;
+        delete)
+          _arguments \
+            '--env[Environment]:env:(development staging production)' \
+            '--force[Skip confirmation]'
+          ;;
+        run|ls|log)
+          _arguments \
+            '--env[Environment]:env:(development staging production)'
+          ;;
+        diff)
+          _arguments \
+            '--env[Environments to compare]' \
+            '--reveal[Show actual values]'
+          ;;
+        promote)
+          _arguments \
+            '--from[Source environment]:env:(development staging production)' \
+            '--to[Target environment]:env:(development staging production)' \
+            '--dry-run[Preview without changes]' \
+            '--overwrite[Overwrite existing]' \
+            '--keys[Specific keys]'
+          ;;
+        scan)
+          _arguments \
+            '--pre-commit[Scan staged files only]' \
+            '--json[JSON output]' \
+            '--list-patterns[Show detection patterns]'
+          ;;
+        login)
+          _arguments \
+            '--token[Token for CI/headless login]'
+          ;;
+      esac
+      ;;
+  esac
+}
+
+_secr "$@"

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import chalk from "chalk";
+import { loginCommand } from "./commands/login.js";
+import { linkCommand } from "./commands/link.js";
+import { initCommand } from "./commands/init.js";
+import { pullCommand } from "./commands/pull.js";
+import { runCommand } from "./commands/run.js";
+import { setCommand } from "./commands/set.js";
+import { deleteCommand } from "./commands/delete.js";
+import { lsCommand } from "./commands/ls.js";
+import { logCommand } from "./commands/log.js";
+import { whoamiCommand } from "./commands/whoami.js";
+import { logoutCommand } from "./commands/logout.js";
+import { diffCommand } from "./commands/diff.js";
+import { envCommand } from "./commands/env.js";
+import { rotateKeyCommand } from "./commands/rotate-key.js";
+import { promoteCommand } from "./commands/promote.js";
+import { templateCommand } from "./commands/template.js";
+import { scanCommand } from "./commands/scan.js";
+import { guardCommand } from "./commands/guard.js";
+import { completionCommand } from "./commands/completion.js";
+import { orgCommand } from "./commands/org.js";
+import { configCommand } from "./commands/config.js";
+const program = new Command();
+program
+    .name("secr")
+    .description("Secrets management for teams. Replace .env files with something better.")
+    .version("0.1.0");
+program.addCommand(loginCommand);
+program.addCommand(linkCommand);
+program.addCommand(initCommand);
+program.addCommand(pullCommand);
+program.addCommand(runCommand);
+program.addCommand(setCommand);
+program.addCommand(deleteCommand);
+program.addCommand(lsCommand);
+program.addCommand(logCommand);
+program.addCommand(envCommand);
+program.addCommand(rotateKeyCommand);
+program.addCommand(whoamiCommand);
+program.addCommand(logoutCommand);
+program.addCommand(diffCommand);
+program.addCommand(promoteCommand);
+program.addCommand(templateCommand);
+program.addCommand(scanCommand);
+program.addCommand(guardCommand);
+program.addCommand(completionCommand);
+program.addCommand(orgCommand);
+program.addCommand(configCommand);
+// Global error handling
+program.hook("preAction", () => { });
+program.parseAsync(process.argv).catch((err) => {
+    if (err.code === "unauthorized" || err.statusCode === 401) {
+        console.error(chalk.red("\n✗ Authentication failed. Run `secr login` to re-authenticate.\n"));
+    }
+    else {
+        console.error(chalk.red(`\n✗ ${err.message}\n`));
+    }
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,yEAAyE,CAAC;KACtF,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9B,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACpC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACtC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAElC,wBAAwB;AACxB,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAEpC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib/api.d.ts

@@ -0,0 +1,94 @@
+import type { ApiProject, ApiSecret, ApiUser, ApiAuditEntry, ApiSecretMeta, ApiPromoteResult, ApiBulkDeleteResult, ApiTemplate, ApiTemplateValidation, PaginationInfo, ProjectConfig, ApiProjectConfigImportResult } from "@secr/shared";
+export declare function apiGetMe(): Promise<ApiUser & {
+    orgs: any[];
+}>;
+export declare function apiCreateToken(name: string): Promise<{
+    token: string;
+    lastFour: string;
+}>;
+export declare function apiListProjects(orgId: string): Promise<{
+    projects: ApiProject[];
+}>;
+export declare function apiGetProject(orgId: string, slug: string): Promise<ApiProject>;
+export declare function apiPullSecrets(orgSlug: string, projectSlug: string, envSlug: string): Promise<{
+    secrets: ApiSecret[];
+}>;
+export declare function apiListKeys(orgSlug: string, projectSlug: string, envSlug: string, options?: {
+    limit?: number;
+    offset?: number;
+    search?: string;
+}): Promise<{
+    keys: ApiSecretMeta[];
+    pagination?: PaginationInfo;
+}>;
+export declare function apiSetSecret(orgSlug: string, projectSlug: string, envSlug: string, key: string, value: string): Promise<{
+    key: string;
+    version: number;
+}>;
+export declare function apiBulkSetSecrets(orgSlug: string, projectSlug: string, envSlug: string, secrets: {
+    key: string;
+    value: string;
+}[]): Promise<{
+    created: number;
+    updated: number;
+    total: number;
+}>;
+export declare function apiDeleteSecret(orgSlug: string, projectSlug: string, envSlug: string, key: string): Promise<void>;
+export declare function apiBulkDeleteSecrets(orgSlug: string, projectSlug: string, envSlug: string, keys: string[]): Promise<ApiBulkDeleteResult>;
+export declare function apiCreateOrg(data: {
+    name: string;
+    slug: string;
+}): Promise<{
+    id: string;
+    name: string;
+    slug: string;
+    plan: string;
+}>;
+export declare function apiDeleteOrg(orgId: string): Promise<{
+    deleted: boolean;
+    slug: string;
+}>;
+export declare function apiGetAuditLog(orgId: string, options?: {
+    limit?: number;
+    projectId?: string;
+}): Promise<{
+    entries: ApiAuditEntry[];
+}>;
+export declare function apiCreateProject(orgId: string, data: {
+    name: string;
+    slug: string;
+}): Promise<ApiProject>;
+export declare function apiCreateEnvironment(orgId: string, projectSlug: string, data: {
+    name: string;
+    slug: string;
+}): Promise<{
+    id: string;
+    name: string;
+    slug: string;
+}>;
+export declare function apiRotateKey(orgId: string, projectSlug: string): Promise<{
+    keyVersion: number;
+    secretsReEncrypted: number;
+}>;
+export declare function apiPromoteSecrets(orgSlug: string, projectSlug: string, body: {
+    fromEnv: string;
+    toEnv: string;
+    keys?: string[];
+    overwrite?: boolean;
+}): Promise<ApiPromoteResult>;
+export declare function apiListTemplates(orgSlug: string, projectSlug: string): Promise<{
+    templates: ApiTemplate[];
+}>;
+export declare function apiAddTemplate(orgSlug: string, projectSlug: string, body: {
+    key: string;
+    description?: string;
+    required?: boolean;
+}): Promise<{
+    template: ApiTemplate;
+}>;
+export declare function apiRemoveTemplate(orgSlug: string, projectSlug: string, key: string): Promise<void>;
+export declare function apiValidateTemplate(orgSlug: string, projectSlug: string, envSlug: string): Promise<ApiTemplateValidation>;
+export declare function apiExportProjectConfig(orgId: string, projectSlug: string): Promise<ProjectConfig>;
+export declare function apiImportProjectConfig(orgId: string, projectSlug: string, config: ProjectConfig): Promise<ApiProjectConfigImportResult>;
+export declare function resolveOrgId(slug: string): Promise<string>;
+//# sourceMappingURL=api.d.ts.map

package/dist/lib/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAC5D,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,EAAE,qBAAqB,EAAE,cAAc,EACzF,aAAa,EAAE,4BAA4B,EAC5C,MAAM,cAAc,CAAC;AA0DtB,wBAAsB,QAAQ,IAAI,OAAO,CAAC,OAAO,GAAG;IAAE,IAAI,EAAE,GAAG,EAAE,CAAA;CAAE,CAAC,CAEnE;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAK/F;AAID,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CAExF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAEpF;AAID,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,CAEnC;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC;IAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC,CAOjE;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAK3C;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,GACxC,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAK9D;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,mBAAmB,CAAC,CAK9B;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAKnE;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAI7C;AAID,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CAMvC;AAID,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAKrD;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC,CAI7D;AAID,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7E,OAAO,CAAC,gBAAgB,CAAC,CAK3B;AAID,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,SAAS,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC,CAEvC;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9D,OAAO,CAAC;IAAE,QAAQ,EAAE,WAAW,CAAA;CAAE,CAAC,CAKpC;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,CAAC,CAEhC;AAID,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,4BAA4B,CAAC,CAKvC;AAID,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOhE"}

package/dist/lib/api.js

@@ -0,0 +1,185 @@
+import { loadCredentials } from "./config.js";
+const DEFAULT_API_URL = "https://api.secr.dev";
+function getApiUrl() {
+    return process.env.SECR_API_URL || DEFAULT_API_URL;
+}
+async function request(path, options = {}) {
+    const creds = loadCredentials();
+    if (!creds?.token) {
+        throw new Error("Not authenticated. Run `secr login` first.");
+    }
+    const url = `${getApiUrl()}/v1${path}`;
+    let res;
+    try {
+        res = await fetch(url, {
+            ...options,
+            signal: AbortSignal.timeout(30_000),
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${creds.token}`,
+                ...options.headers,
+            },
+        });
+    }
+    catch (err) {
+        if (err.name === "TimeoutError") {
+            throw new Error(`Request timed out after 30s. Is the API at ${getApiUrl()} responding?`);
+        }
+        if (err.cause?.code === "ECONNREFUSED" || err.message?.includes("fetch failed")) {
+            throw new Error(`Cannot connect to API at ${getApiUrl()}. Is the server running?`);
+        }
+        throw new Error(`Network error: ${err.message}`);
+    }
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        let message = body.message || `API error: ${res.status} ${res.statusText}`;
+        if (body.details?.length) {
+            const fieldErrors = body.details.map((d) => `${d.field}: ${d.message}`).join(", ");
+            message += ` (${fieldErrors})`;
+        }
+        const err = new Error(message);
+        err.statusCode = res.status;
+        err.code = body.error || "api_error";
+        throw err;
+    }
+    return res.json();
+}
+// ─── Auth ───────────────────────────────────────────────────────────────────
+export async function apiGetMe() {
+    return request("/auth/me");
+}
+export async function apiCreateToken(name) {
+    return request("/auth/token", {
+        method: "POST",
+        body: JSON.stringify({ name }),
+    });
+}
+// ─── Projects ───────────────────────────────────────────────────────────────
+export async function apiListProjects(orgId) {
+    return request(`/projects/${orgId}`);
+}
+export async function apiGetProject(orgId, slug) {
+    return request(`/projects/${orgId}/${slug}`);
+}
+// ─── Secrets ────────────────────────────────────────────────────────────────
+export async function apiPullSecrets(orgSlug, projectSlug, envSlug) {
+    return request(`/secrets/${orgSlug}/${projectSlug}/${envSlug}`);
+}
+export async function apiListKeys(orgSlug, projectSlug, envSlug, options) {
+    const params = new URLSearchParams();
+    if (options?.limit)
+        params.set("limit", options.limit.toString());
+    if (options?.offset)
+        params.set("offset", options.offset.toString());
+    if (options?.search)
+        params.set("search", options.search);
+    const qs = params.toString() ? `?${params}` : "";
+    return request(`/secrets/${orgSlug}/${projectSlug}/${envSlug}/keys${qs}`);
+}
+export async function apiSetSecret(orgSlug, projectSlug, envSlug, key, value) {
+    return request(`/secrets/${orgSlug}/${projectSlug}/${envSlug}`, {
+        method: "PUT",
+        body: JSON.stringify({ key, value }),
+    });
+}
+export async function apiBulkSetSecrets(orgSlug, projectSlug, envSlug, secrets) {
+    return request(`/secrets/${orgSlug}/${projectSlug}/${envSlug}/bulk`, {
+        method: "POST",
+        body: JSON.stringify({ secrets }),
+    });
+}
+export async function apiDeleteSecret(orgSlug, projectSlug, envSlug, key) {
+    await request(`/secrets/${orgSlug}/${projectSlug}/${envSlug}/${key}`, {
+        method: "DELETE",
+    });
+}
+export async function apiBulkDeleteSecrets(orgSlug, projectSlug, envSlug, keys) {
+    return request(`/secrets/${orgSlug}/${projectSlug}/${envSlug}/bulk-delete`, {
+        method: "POST",
+        body: JSON.stringify({ keys }),
+    });
+}
+export async function apiCreateOrg(data) {
+    return request("/orgs", {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+export async function apiDeleteOrg(orgId) {
+    return request(`/orgs/${orgId}`, {
+        method: "DELETE",
+    });
+}
+// ─── Audit ──────────────────────────────────────────────────────────────────
+export async function apiGetAuditLog(orgId, options) {
+    const params = new URLSearchParams();
+    if (options?.limit)
+        params.set("limit", options.limit.toString());
+    if (options?.projectId)
+        params.set("projectId", options.projectId);
+    const qs = params.toString() ? `?${params}` : "";
+    return request(`/audit/${orgId}${qs}`);
+}
+// ─── Projects (additional) ──────────────────────────────────────────────────
+export async function apiCreateProject(orgId, data) {
+    return request(`/projects/${orgId}`, {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+export async function apiCreateEnvironment(orgId, projectSlug, data) {
+    return request(`/projects/${orgId}/${projectSlug}/environments`, {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+export async function apiRotateKey(orgId, projectSlug) {
+    return request(`/projects/${orgId}/${projectSlug}/rotate-key`, {
+        method: "POST",
+    });
+}
+// ─── Promote ─────────────────────────────────────────────────────────────────
+export async function apiPromoteSecrets(orgSlug, projectSlug, body) {
+    return request(`/secrets/${orgSlug}/${projectSlug}/promote`, {
+        method: "POST",
+        body: JSON.stringify(body),
+    });
+}
+// ─── Templates ──────────────────────────────────────────────────────────────
+export async function apiListTemplates(orgSlug, projectSlug) {
+    return request(`/templates/${orgSlug}/${projectSlug}`);
+}
+export async function apiAddTemplate(orgSlug, projectSlug, body) {
+    return request(`/templates/${orgSlug}/${projectSlug}`, {
+        method: "POST",
+        body: JSON.stringify(body),
+    });
+}
+export async function apiRemoveTemplate(orgSlug, projectSlug, key) {
+    await request(`/templates/${orgSlug}/${projectSlug}/${key}`, {
+        method: "DELETE",
+    });
+}
+export async function apiValidateTemplate(orgSlug, projectSlug, envSlug) {
+    return request(`/templates/${orgSlug}/${projectSlug}/validate/${envSlug}`);
+}
+// ─── Project Config ─────────────────────────────────────────────────────────
+export async function apiExportProjectConfig(orgId, projectSlug) {
+    return request(`/projects/${orgId}/${projectSlug}/export`);
+}
+export async function apiImportProjectConfig(orgId, projectSlug, config) {
+    return request(`/projects/${orgId}/${projectSlug}/import`, {
+        method: "POST",
+        body: JSON.stringify(config),
+    });
+}
+// ─── Helpers ────────────────────────────────────────────────────────────────
+export async function resolveOrgId(slug) {
+    const me = await apiGetMe();
+    const org = me.orgs.find((o) => o.slug === slug);
+    if (!org) {
+        throw new Error(`Organization "${slug}" not found. Run \`secr whoami\` to see your organizations.`);
+    }
+    return org.id;
+}
+//# sourceMappingURL=api.js.map

package/dist/lib/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,eAAe,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,UAAuB,EAAE;IAEzB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC;IACvC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,GAAG,OAAO;YACV,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE;gBACtC,GAAG,OAAO,CAAC,OAAO;aACnB;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,EAAE,cAAc,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAQ,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC3E,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxF,OAAO,IAAI,KAAK,WAAW,GAAG,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAiD,CAAC;QAC/E,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC;QACrC,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,OAAO,OAAO,CAAC,aAAa,EAAE;QAC5B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,OAAO,OAAO,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY;IAC7D,OAAO,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,WAAmB,EACnB,OAAe;IAEf,OAAO,OAAO,CAAC,YAAY,OAAO,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,WAAmB,EACnB,OAAe,EACf,OAA8D;IAE9D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,EAAE,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrE,IAAI,OAAO,EAAE,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,OAAO,OAAO,CAAC,YAAY,OAAO,IAAI,WAAW,IAAI,OAAO,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,WAAmB,EACnB,OAAe,EACf,GAAW,EACX,KAAa;IAEb,OAAO,OAAO,CAAC,YAAY,OAAO,IAAI,WAAW,IAAI,OAAO,EAAE,EAAE;QAC9D,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,WAAmB,EACnB,OAAe,EACf,OAAyC;IAEzC,OAAO,OAAO,CAAC,YAAY,OAAO,IAAI,WAAW,IAAI,OAAO,OAAO,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,WAAmB,EACnB,OAAe,EACf,GAAW;IAEX,MAAM,OAAO,CAAC,YAAY,OAAO,IAAI,WAAW,IAAI,OAAO,IAAI,GAAG,EAAE,EAAE;QACpE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,WAAmB,EACnB,OAAe,EACf,IAAc;IAEd,OAAO,OAAO,CAAC,YAAY,OAAO,IAAI,WAAW,IAAI,OAAO,cAAc,EAAE;QAC1E,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAoC;IAEpC,OAAO,OAAO,CAAC,OAAO,EAAE;QACtB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa;IAEb,OAAO,OAAO,CAAC,SAAS,KAAK,EAAE,EAAE;QAC/B,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,OAAgD;IAEhD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,EAAE,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,OAAO,OAAO,CAAC,UAAU,KAAK,GAAG,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,IAAoC;IAEpC,OAAO,OAAO,CAAC,aAAa,KAAK,EAAE,EAAE;QACnC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,WAAmB,EACnB,IAAoC;IAEpC,OAAO,OAAO,CAAC,aAAa,KAAK,IAAI,WAAW,eAAe,EAAE;QAC/D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,WAAmB;IAEnB,OAAO,OAAO,CAAC,aAAa,KAAK,IAAI,WAAW,aAAa,EAAE;QAC7D,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,WAAmB,EACnB,IAA8E;IAE9E,OAAO,OAAO,CAAC,YAAY,OAAO,IAAI,WAAW,UAAU,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,WAAmB;IAEnB,OAAO,OAAO,CAAC,cAAc,OAAO,IAAI,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,WAAmB,EACnB,IAA+D;IAE/D,OAAO,OAAO,CAAC,cAAc,OAAO,IAAI,WAAW,EAAE,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,WAAmB,EACnB,GAAW;IAEX,MAAM,OAAO,CAAC,cAAc,OAAO,IAAI,WAAW,IAAI,GAAG,EAAE,EAAE;QAC3D,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,WAAmB,EACnB,OAAe;IAEf,OAAO,OAAO,CAAC,cAAc,OAAO,IAAI,WAAW,aAAa,OAAO,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,WAAmB;IAEnB,OAAO,OAAO,CAAC,aAAa,KAAK,IAAI,WAAW,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,WAAmB,EACnB,MAAqB;IAErB,OAAO,OAAO,CAAC,aAAa,KAAK,IAAI,WAAW,SAAS,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,6DAA6D,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAC;AAChB,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,18 @@
+import { type SecrConfig } from "@secr/shared";
+interface Credentials {
+    token: string;
+    email: string;
+    apiUrl?: string;
+}
+export declare function saveCredentials(creds: Credentials): void;
+export declare function loadCredentials(): Credentials | null;
+export declare function clearCredentials(): void;
+export declare function loadProjectConfig(dir?: string): SecrConfig | null;
+export declare function saveProjectConfig(config: SecrConfig, dir?: string): void;
+export declare function requireProjectConfig(): SecrConfig;
+export declare function parseEnvFile(filePath: string): {
+    key: string;
+    value: string;
+}[];
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAIjE,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAKD,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAGxD;AAED,wBAAgB,eAAe,IAAI,WAAW,GAAG,IAAI,CAOpD;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAMvC;AAID,wBAAgB,iBAAiB,CAAC,GAAG,SAAgB,GAAG,UAAU,GAAG,IAAI,CAcxE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,SAAgB,GAAG,IAAI,CAG/E;AAED,wBAAgB,oBAAoB,IAAI,UAAU,CAQjD;AAID,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CA6B/E"}

package/dist/lib/config.js

@@ -0,0 +1,81 @@
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { ZodError } from "zod";
+import { SecrConfigSchema } from "@secr/shared";
+const SECR_DIR = join(homedir(), ".secr");
+const CREDENTIALS_FILE = join(SECR_DIR, "credentials.json");
+export function saveCredentials(creds) {
+    mkdirSync(SECR_DIR, { recursive: true });
+    writeFileSync(CREDENTIALS_FILE, JSON.stringify(creds, null, 2), { mode: 0o600 });
+}
+export function loadCredentials() {
+    try {
+        const raw = readFileSync(CREDENTIALS_FILE, "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export function clearCredentials() {
+    try {
+        writeFileSync(CREDENTIALS_FILE, "{}", { mode: 0o600 });
+    }
+    catch {
+        // Ignore
+    }
+}
+// ─── Project Config (.secr.json in project root) ────────────────────────────
+export function loadProjectConfig(dir = process.cwd()) {
+    const configPath = join(dir, ".secr.json");
+    try {
+        const raw = readFileSync(configPath, "utf8");
+        return SecrConfigSchema.parse(JSON.parse(raw));
+    }
+    catch (err) {
+        if (err instanceof ZodError) {
+            const issue = err.issues[0];
+            throw new Error(`.secr.json is invalid: ${issue.path.join(".")} — ${issue.message}. Run \`secr link\` to recreate it.`);
+        }
+        return null;
+    }
+}
+export function saveProjectConfig(config, dir = process.cwd()) {
+    const configPath = join(dir, ".secr.json");
+    writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+}
+export function requireProjectConfig() {
+    const config = loadProjectConfig();
+    if (!config) {
+        throw new Error("No .secr.json found in this directory. Run `secr init` or `secr link` first.");
+    }
+    return config;
+}
+// ─── .env File Parser ───────────────────────────────────────────────────────
+export function parseEnvFile(filePath) {
+    if (!existsSync(filePath)) {
+        throw new Error(`File not found: ${filePath}`);
+    }
+    const content = readFileSync(filePath, "utf8");
+    const secrets = [];
+    for (const line of content.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eqIndex = trimmed.indexOf("=");
+        if (eqIndex === -1)
+            continue;
+        const key = trimmed.slice(0, eqIndex).trim();
+        let value = trimmed.slice(eqIndex + 1).trim();
+        // Remove surrounding quotes
+        if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key && value) {
+            secrets.push({ key, value });
+        }
+    }
+    return secrets;
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAUjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAE5D,MAAM,UAAU,eAAe,CAAC,KAAkB;IAChD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,qCAAqC,CACvG,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAkB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC3C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAqC,EAAE,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAE7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE9C,4BAA4B;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/scanner.d.ts

@@ -0,0 +1,29 @@
+export interface SecretPattern {
+    name: string;
+    regex: RegExp;
+    description: string;
+    severity: "high" | "medium" | "low";
+}
+export interface ScanFinding {
+    file: string;
+    line: number;
+    column: number;
+    patternName: string;
+    redactedMatch: string;
+    severity: "high" | "medium" | "low";
+}
+export interface ScanResult {
+    findings: ScanFinding[];
+    filesScanned: number;
+    duration: number;
+}
+export declare const SECRET_PATTERNS: SecretPattern[];
+export declare function redactMatch(match: string): string;
+export interface ScanOptions {
+    directory?: string;
+    exclude?: string[];
+}
+export declare function scanDirectory(opts?: ScanOptions): ScanResult;
+export declare function scanStagedFiles(): ScanResult;
+export declare function checkGitignoreForEnv(dir?: string): ScanFinding[];
+//# sourceMappingURL=scanner.d.ts.map

package/dist/lib/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/lib/scanner.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACrC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,eAAO,MAAM,eAAe,EAAE,aAAa,EAiD1C,CAAC;AAqCF,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD;AA8BD,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,UAAU,CA+C5D;AAED,wBAAgB,eAAe,IAAI,UAAU,CAoC5C;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAY,GAAG,WAAW,EAAE,CAmCrE"}