@secr/cli 0.1.0

package/dist/lib/scanner.js

@@ -0,0 +1,211 @@
+import { readFileSync, readdirSync, statSync, existsSync } from "node:fs";
+import { execSync } from "node:child_process";
+import { join, extname, relative } from "node:path";
+// ─── Detection Patterns ─────────────────────────────────────────────────────
+export const SECRET_PATTERNS = [
+    // AWS
+    { name: "AWS Access Key ID", regex: /AKIA[0-9A-Z]{16}/g, description: "AWS access key ID", severity: "high" },
+    { name: "AWS Secret Key", regex: /(?:aws_secret_access_key|AWS_SECRET_ACCESS_KEY)\s*[=:]\s*["']?([A-Za-z0-9/+=]{40})["']?/g, description: "AWS secret access key assignment", severity: "high" },
+    // Stripe
+    { name: "Stripe Live Secret Key", regex: /sk_live_[a-zA-Z0-9]{24,}/g, description: "Stripe live secret key", severity: "high" },
+    { name: "Stripe Live Restricted Key", regex: /rk_live_[a-zA-Z0-9]{24,}/g, description: "Stripe live restricted key", severity: "high" },
+    // GitHub
+    { name: "GitHub PAT (classic)", regex: /ghp_[A-Za-z0-9_]{36,}/g, description: "GitHub personal access token (classic)", severity: "high" },
+    { name: "GitHub OAuth Token", regex: /gho_[A-Za-z0-9_]{36,}/g, description: "GitHub OAuth access token", severity: "high" },
+    { name: "GitHub User Token", regex: /ghu_[A-Za-z0-9_]{36,}/g, description: "GitHub user-to-server token", severity: "high" },
+    { name: "GitHub Server Token", regex: /ghs_[A-Za-z0-9_]{36,}/g, description: "GitHub server-to-server token", severity: "high" },
+    { name: "GitHub Fine-Grained PAT", regex: /github_pat_[A-Za-z0-9_]{22,}/g, description: "GitHub fine-grained PAT", severity: "high" },
+    // OpenAI
+    { name: "OpenAI API Key", regex: /sk-proj-[A-Za-z0-9_-]{40,}/g, description: "OpenAI project API key", severity: "high" },
+    // Anthropic
+    { name: "Anthropic API Key", regex: /sk-ant-[A-Za-z0-9_-]{40,}/g, description: "Anthropic API key", severity: "high" },
+    // Google
+    { name: "Google API Key", regex: /AIza[0-9A-Za-z_-]{35}/g, description: "Google API key", severity: "high" },
+    // Slack
+    { name: "Slack Bot Token", regex: /xoxb-[0-9]{10,}-[0-9A-Za-z-]{24,}/g, description: "Slack bot token", severity: "high" },
+    { name: "Slack Webhook", regex: /https:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]+/g, description: "Slack incoming webhook URL", severity: "medium" },
+    // Database URLs with credentials
+    { name: "Database URL with Password", regex: /(?:postgres|mysql|mongodb|redis):\/\/[^:]+:[^@\s]+@[^\s]+/g, description: "Database connection string with credentials", severity: "high" },
+    // Private Keys
+    { name: "Private Key", regex: /-----BEGIN\s(?:RSA|DSA|EC|OPENSSH|PGP)?\s?PRIVATE KEY-----/g, description: "Private key file", severity: "high" },
+    // SendGrid
+    { name: "SendGrid API Key", regex: /SG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43}/g, description: "SendGrid API key", severity: "high" },
+    // Twilio
+    { name: "Twilio API Key", regex: /SK[0-9a-fA-F]{32}/g, description: "Twilio API key", severity: "medium" },
+    // npm
+    { name: "npm Token", regex: /npm_[A-Za-z0-9]{36,}/g, description: "npm access token", severity: "high" },
+    // Vercel
+    { name: "Vercel Token", regex: /vercel_[A-Za-z0-9_-]{24,}/g, description: "Vercel API token", severity: "high" },
+    // Generic patterns — lower severity due to higher false positive rate
+    { name: "Generic Secret Assignment", regex: /(?:secret|password|token|api_key|apikey|auth_token)\s*[=:]\s*["'][A-Za-z0-9_+/=.!@#$%^&*-]{8,}["']/gi, description: "Generic secret assignment in code", severity: "low" },
+];
+// ─── File Filtering ─────────────────────────────────────────────────────────
+const BINARY_EXTENSIONS = new Set([
+    ".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg", ".ico", ".bmp", ".tiff",
+    ".woff", ".woff2", ".ttf", ".eot", ".otf",
+    ".zip", ".tar", ".gz", ".bz2", ".7z", ".rar",
+    ".pdf", ".doc", ".docx", ".xls", ".xlsx",
+    ".mp3", ".mp4", ".avi", ".mov", ".flv", ".wav",
+    ".exe", ".dll", ".so", ".dylib", ".o",
+    ".pyc", ".class", ".jar",
+    ".min.js", ".min.css",
+]);
+const IGNORED_DIRS = new Set([
+    "node_modules", ".git", "dist", "build", ".next", "__pycache__",
+    ".venv", "venv", "vendor", "coverage", ".turbo", ".cache",
+]);
+const IGNORED_FILES = new Set([
+    "package-lock.json", "yarn.lock", "pnpm-lock.yaml", "bun.lockb",
+    "composer.lock", "Gemfile.lock", "Pipfile.lock", "poetry.lock",
+]);
+function shouldSkipFile(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    const base = filePath.split("/").pop() || "";
+    return BINARY_EXTENSIONS.has(ext) || IGNORED_FILES.has(base);
+}
+function shouldSkipDir(dirName) {
+    return IGNORED_DIRS.has(dirName) || dirName.startsWith(".");
+}
+// ─── Redaction ──────────────────────────────────────────────────────────────
+export function redactMatch(match) {
+    if (match.length <= 8)
+        return "****";
+    const head = match.slice(0, 4);
+    const tail = match.slice(-4);
+    return `${head}${"*".repeat(Math.min(match.length - 8, 20))}${tail}`;
+}
+// ─── Scanning ───────────────────────────────────────────────────────────────
+function scanContent(content, filePath) {
+    const findings = [];
+    const lines = content.split("\n");
+    for (let lineIdx = 0; lineIdx < lines.length; lineIdx++) {
+        const line = lines[lineIdx];
+        for (const pattern of SECRET_PATTERNS) {
+            // Reset regex lastIndex for each line
+            pattern.regex.lastIndex = 0;
+            let regexMatch;
+            while ((regexMatch = pattern.regex.exec(line)) !== null) {
+                findings.push({
+                    file: filePath,
+                    line: lineIdx + 1,
+                    column: regexMatch.index + 1,
+                    patternName: pattern.name,
+                    redactedMatch: redactMatch(regexMatch[0]),
+                    severity: pattern.severity,
+                });
+            }
+        }
+    }
+    return findings;
+}
+export function scanDirectory(opts) {
+    const dir = opts?.directory || ".";
+    const excludeSet = new Set(opts?.exclude || []);
+    const start = Date.now();
+    let filesScanned = 0;
+    const findings = [];
+    function walk(currentDir) {
+        let entries;
+        try {
+            entries = readdirSync(currentDir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(currentDir, entry.name);
+            const relativePath = relative(dir, fullPath);
+            if (excludeSet.has(relativePath) || excludeSet.has(entry.name))
+                continue;
+            if (entry.isDirectory()) {
+                if (!shouldSkipDir(entry.name)) {
+                    walk(fullPath);
+                }
+            }
+            else if (entry.isFile() && !shouldSkipFile(entry.name)) {
+                try {
+                    const stat = statSync(fullPath);
+                    // Skip files > 1MB
+                    if (stat.size > 1_048_576)
+                        continue;
+                    const content = readFileSync(fullPath, "utf-8");
+                    filesScanned++;
+                    findings.push(...scanContent(content, relativePath));
+                }
+                catch {
+                    // Skip unreadable files
+                }
+            }
+        }
+    }
+    walk(dir);
+    return {
+        findings,
+        filesScanned,
+        duration: Date.now() - start,
+    };
+}
+export function scanStagedFiles() {
+    const start = Date.now();
+    let filesScanned = 0;
+    const findings = [];
+    let stagedOutput;
+    try {
+        stagedOutput = execSync("git diff --cached --name-only --diff-filter=ACMR", { encoding: "utf-8" }).trim();
+    }
+    catch {
+        return { findings: [], filesScanned: 0, duration: Date.now() - start };
+    }
+    if (!stagedOutput) {
+        return { findings: [], filesScanned: 0, duration: Date.now() - start };
+    }
+    const files = stagedOutput.split("\n").filter(Boolean);
+    for (const file of files) {
+        if (shouldSkipFile(file))
+            continue;
+        try {
+            // Get the staged version of the file
+            const content = execSync(`git show :${file}`, { encoding: "utf-8" });
+            filesScanned++;
+            findings.push(...scanContent(content, file));
+        }
+        catch {
+            // Skip files we can't read
+        }
+    }
+    return {
+        findings,
+        filesScanned,
+        duration: Date.now() - start,
+    };
+}
+export function checkGitignoreForEnv(dir = ".") {
+    const gitignorePath = join(dir, ".gitignore");
+    const findings = [];
+    if (!existsSync(gitignorePath)) {
+        findings.push({
+            file: ".gitignore",
+            line: 0,
+            column: 0,
+            patternName: "Missing .gitignore",
+            redactedMatch: "No .gitignore file found — .env files may be committed",
+            severity: "medium",
+        });
+        return findings;
+    }
+    const content = readFileSync(gitignorePath, "utf-8");
+    const lines = content.split("\n").map((l) => l.trim());
+    const hasEnvIgnore = lines.some((l) => l === ".env" || l === ".env*" || l === ".env.*" || l === "*.env" || l === ".env.local");
+    if (!hasEnvIgnore) {
+        findings.push({
+            file: ".gitignore",
+            line: 0,
+            column: 0,
+            patternName: ".env not gitignored",
+            redactedMatch: ".env files are not in .gitignore — secrets may be committed",
+            severity: "medium",
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=scanner.js.map

package/dist/lib/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/lib/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AA0BpD,+EAA+E;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,MAAM;IACN,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7G,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,0FAA0F,EAAE,WAAW,EAAE,kCAAkC,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEhM,SAAS;IACT,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC/H,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,4BAA4B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEvI,SAAS;IACT,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,wCAAwC,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1I,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3H,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,6BAA6B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC5H,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,+BAA+B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAChI,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,+BAA+B,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAErI,SAAS;IACT,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,6BAA6B,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEzH,YAAY;IACZ,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,4BAA4B,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEtH,SAAS;IACT,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAE5G,QAAQ;IACR,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,oCAAoC,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1H,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,8EAA8E,EAAE,WAAW,EAAE,4BAA4B,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAE/K,iCAAiC;IACjC,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,4DAA4D,EAAE,WAAW,EAAE,6CAA6C,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEzL,eAAe;IACf,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,6DAA6D,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEhJ,WAAW;IACX,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,2CAA2C,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEnI,SAAS;IACT,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAE1G,MAAM;IACN,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAExG,SAAS;IACT,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,4BAA4B,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEhH,sEAAsE;IACtE,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,sGAAsG,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,KAAK,EAAE;CACxN,CAAC;AAEF,+EAA+E;AAE/E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACzC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAC5C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;IACxC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI;IACrC,MAAM,EAAE,QAAQ,EAAE,MAAM;IACxB,SAAS,EAAE,UAAU;CACtB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa;IAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ;CAC1D,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW;IAC/D,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa;CAC/D,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7C,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,+EAA+E;AAE/E,SAAS,WAAW,CAAC,OAAe,EAAE,QAAgB;IACpD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YAC5B,IAAI,UAAU,CAAC;YACf,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO,GAAG,CAAC;oBACjB,MAAM,EAAE,UAAU,CAAC,KAAK,GAAG,CAAC;oBAC5B,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,aAAa,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,MAAM,GAAG,GAAG,IAAI,EAAE,SAAS,IAAI,GAAG,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,SAAS,IAAI,CAAC,UAAkB;QAC9B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAE7C,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEzE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAChC,mBAAmB;oBACnB,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;wBAAE,SAAS;oBACpC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAChD,YAAY,EAAE,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,QAAQ,CAAC,kDAAkD,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,SAAS;QAEnC,IAAI,CAAC;YACH,qCAAqC;YACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,YAAY,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,GAAG;IACpD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,oBAAoB;YACjC,aAAa,EAAE,wDAAwD;YACvE,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,YAAY,CAC9F,CAAC;IAEF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,qBAAqB;YAClC,aAAa,EAAE,6DAA6D;YAC5E,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@secr/cli",
+  "version": "0.1.0",
+  "description": "CLI for secr — secrets management for teams",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "secr": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "dev": "tsc --watch",
+    "build": "tsc",
+    "postbuild": "cp -r src/completions dist/",
+    "start": "node dist/index.js",
+    "test": "vitest run"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/secr-dev/secr",
+    "directory": "apps/cli"
+  },
+  "keywords": [
+    "secr",
+    "secrets",
+    "env",
+    "cli",
+    "dotenv",
+    "configuration"
+  ],
+  "dependencies": {
+    "@secr/shared": "^0.1.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "dotenv": "^16.4.0",
+    "ora": "^8.1.0",
+    "open": "^10.1.0"
+  },
+  "devDependencies": {
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+  }
+}