@seekrit/cli 1.1.0 → 1.2.0

package/dist/index.js

@@ -1907,6 +1907,8 @@ const AUDIT_ACTIONS = [
 	"org.mfa_policy_changed",
 	"org.exported",
 	"user.keys_updated",
+	"user.passkey_enrolled",
+	"user.passkey_removed",
 	"user.notification_prefs_updated",
 	"app.created",
 	"app.updated",
@@ -2151,6 +2153,16 @@ z.object({
 	*/
 	encryptedPrivateKey: z.string().min(1)
 });
+z.object({
+	/** Base64url WebAuthn credential id — what `allowCredentials` is built from. */
+	credentialId: z.string().min(1).max(512),
+	/** Human label for the device, e.g. "MacBook Touch ID". Display only. */
+	label: z.string().min(1).max(64),
+	/** Base64url PRF evaluation input for this credential; not a secret. */
+	prfInput: z.string().min(1).max(256),
+	/** The private key wrapped to this passkey's PRF output. */
+	encryptedPrivateKey: z.string().min(1).max(8192).refine((v) => v.startsWith("pk2."), { message: "expected a pk2. passkey wrap" })
+});
 const grantEnvironmentKeySchema = z.object({
 	principalType: principalTypeSchema,
 	principalId: z.string().min(1),
@@ -2483,7 +2495,8 @@ const SYNC_PROVIDER_KINDS = [
 	"github-actions",
 	"gcp-secret-manager",
 	"langgraph-platform",
-	"azure-key-vault"
+	"azure-key-vault",
+	"huggingface-spaces"
 ];
 z.enum(SYNC_PROVIDER_KINDS);
 /**
@@ -2872,6 +2885,21 @@ const azureKeyVaultConnectionConfigSchema = z.object({
 	/** Which Azure cloud the tenant and its vaults live in. */
 	cloud: z.enum(AZURE_CLOUDS).default("public")
 });
+/**
+* Hugging Face account scope — empty, as Render's and Fly's are.
+*
+* Neither half of "which account, which thing" needs stating. A Hub user access
+* token belongs to one user and carries their write access to every Space they
+* or their organizations own; a Space is addressed by `owner/name`, which is
+* globally unique. So the token plus the destination is the whole address.
+*
+* There is deliberately no `baseUrl` twin of the GitHub Enterprise Server
+* field. `HF_ENDPOINT` exists in the Python client for Hub *mirrors*, which
+* serve repository content — not the settings API this connector writes, and
+* not something a mirror is expected to accept a write on. Adding the field
+* would invite pointing a connection at a host that silently swallows secrets.
+*/
+const huggingfaceSpacesConnectionConfigSchema = z.object({ provider: z.literal("huggingface-spaces") });
 const syncConnectionConfigSchema = z.discriminatedUnion("provider", [
 	vercelConnectionConfigSchema,
 	cloudflareWorkersConnectionConfigSchema,
@@ -2890,7 +2918,8 @@ const syncConnectionConfigSchema = z.discriminatedUnion("provider", [
 	githubActionsConnectionConfigSchema,
 	gcpSecretManagerConnectionConfigSchema,
 	langgraphPlatformConnectionConfigSchema,
-	azureKeyVaultConnectionConfigSchema
+	azureKeyVaultConnectionConfigSchema,
+	huggingfaceSpacesConnectionConfigSchema
 ]);
 /** Vercel's three deployment targets. A binding writes to one or more. */
 const VERCEL_TARGETS = [
@@ -3681,6 +3710,40 @@ const azureKeyVaultDestinationSchema = z.object({
 	/** What to do with a name Key Vault cannot store — see {@link AZURE_KEY_VAULT_NAME_MODES}. */
 	nameMode: z.enum(AZURE_KEY_VAULT_NAME_MODES).default("dash")
 });
+/**
+* The Space whose secrets a binding owns, addressed the way the Hub addresses
+* every repository: `owner/name`, where `owner` is a user or an organization.
+*
+* A Space has **one** secret set, shared by every replica — there is no
+* per-target split to state, the way Vercel and Pages have one. The Hub's
+* convention is that staging and production are separate Spaces
+* (`acme/demo`, `acme/demo-staging`), so pointing at an environment means
+* naming that Space, exactly as a Fly environment means naming its own app.
+*
+* Validated by shape because the two habitual slips both fail *late*: pasting
+* the browser URL (`https://huggingface.co/spaces/acme/demo`) or the bare name
+* without its owner. Either one is a 404 from the Hub inside an alarm with
+* nobody watching, and a 404 says nothing about which half was wrong. The
+* leading character is held to alphanumeric, which is also what rejects the
+* `.` and `..` that no repository may be called.
+*/
+const huggingfaceRepoIdSchema = z.string().trim().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,95}\/[A-Za-z0-9][A-Za-z0-9._-]{0,95}$/, "must be a Space ID as owner/name, e.g. acme/support-demo — not a URL");
+/**
+* One Hugging Face **Space**, whose secrets arrive in the app's container as
+* environment variables.
+*
+* Only secrets. A Space also has *variables*, and they are not a second lane
+* seekrit could use: the Hub calls them "non-sensitive configuration values",
+* they are "publicly accessible and viewable", and they are copied into every
+* Space duplicated from this one. Writing a seekrit secret there would publish
+* it, so this connector has no variables mode — a binding that wants one is
+* asking for the wrong thing.
+*/
+const huggingfaceSpacesDestinationSchema = z.object({
+	provider: z.literal("huggingface-spaces"),
+	/** Space ID as `owner/name`, e.g. `acme/support-demo`. */
+	repoId: huggingfaceRepoIdSchema
+});
 const syncDestinationSchema = z.discriminatedUnion("provider", [
 	vercelDestinationSchema,
 	cloudflareWorkersDestinationSchema,
@@ -3699,7 +3762,8 @@ const syncDestinationSchema = z.discriminatedUnion("provider", [
 	githubActionsDestinationSchema,
 	gcpSecretManagerDestinationSchema,
 	langgraphPlatformDestinationSchema,
-	azureKeyVaultDestinationSchema
+	azureKeyVaultDestinationSchema,
+	huggingfaceSpacesDestinationSchema
 ]);
 /**
 * How seekrit secret names become destination key names. Applied in order:
@@ -4987,7 +5051,7 @@ async function createAgentTaskToken() {
 }
 //#endregion
 //#region package.json
-var version = "1.1.0";
+var version = "1.2.0";
 //#endregion
 //#region ../../packages/api-client/src/index.ts
 var SeekritApiError = class extends Error {
@@ -5060,6 +5124,22 @@ var SeekritClient = class {
 	revokeCliSession(sessionId) {
 		return this.request("DELETE", `/v1/me/cli-sessions/${sessionId}`);
 	}
+	/**
+	* The passkeys enrolled to unlock this user's keyring, each with the `pk2.`
+	* blob its PRF output decrypts. One call is everything the unlock ceremony
+	* needs; the blobs are opaque without the authenticator.
+	*/
+	listMyPasskeys() {
+		return this.request("GET", "/v1/me/passkeys");
+	}
+	/** File a private key already wrapped, client-side, to a passkey's PRF output. */
+	enrollMyPasskey(input) {
+		return this.request("POST", "/v1/me/passkeys", input);
+	}
+	/** Stop a passkey unlocking the keyring. The key itself is untouched. */
+	deleteMyPasskey(passkeyId) {
+		return this.request("DELETE", `/v1/me/passkeys/${passkeyId}`);
+	}
 	/** What a pending login request is asking for — for the approval screen. */
 	getCliLoginRequest(code) {
 		return this.request("GET", `/v1/cli-login/${encodeURIComponent(code)}`);
@@ -12949,6 +13029,18 @@ function assertLanggraphDeploymentId(value) {
 	if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id)) fail(`--langgraph-deployment should be the deployment UUID from its dashboard URL, not "${id}"`);
 	return id;
 }
+/**
+* A Hugging Face Space is addressed as `owner/name`. The two habitual slips are
+* pasting the browser URL and giving the bare name without its owner; the first
+* is recovered rather than refused, since a Space URL has exactly one shape.
+*/
+function assertHuggingfaceSpace(value) {
+	if (!value) fail("--hf-space is required for huggingface-spaces (owner/name)");
+	const raw = value.trim();
+	const id = raw.match(/^https?:\/\/(?:[^/]*\.)?huggingface\.co\/spaces\/([^/?#]+\/[^/?#]+)(?:[/?#]|$)/i)?.[1] ?? raw.replace(/^\/+|\/+$/g, "");
+	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,95}\/[A-Za-z0-9][A-Za-z0-9._-]{0,95}$/.test(id)) fail(`--hf-space should be the Space ID as owner/name, e.g. acme/support-demo, not "${raw}"`);
+	return id;
+}
 /** Reject a single value outside a known set, naming the choices. */
 function assertMember(value, allowed, flag, fallback) {
 	if (value === void 0) return fallback;
@@ -13075,6 +13167,7 @@ function credentialNoun(provider) {
 	if (provider === "gcp-secret-manager") return "service-account key JSON";
 	if (provider === "langgraph-platform") return "LangSmith API key";
 	if (provider === "azure-key-vault") return "client secret";
+	if (provider === "huggingface-spaces") return "user access token";
 	return "API token";
 }
 /**
@@ -13163,6 +13256,7 @@ function buildConfig(provider, options) {
 				cloud: cloud ?? "public"
 			};
 		}
+		case "huggingface-spaces": return { provider: "huggingface-spaces" };
 	}
 }
 /** Where inside the platform a binding writes. */
@@ -13376,6 +13470,10 @@ function buildDestination(provider, options) {
 				nameMode: nameMode ?? "dash"
 			};
 		}
+		case "huggingface-spaces": return {
+			provider: "huggingface-spaces",
+			repoId: assertHuggingfaceSpace(options.hfSpace)
+		};
 	}
 }
 /** One-line description of a destination, for list output. */
@@ -13398,6 +13496,7 @@ function describeDestination(destination) {
 		case "gcp-secret-manager": return destination.layout === "json-bundle" ? `${destination.secretId} · json` : `${destination.idPrefix ?? ""}* · one per name`;
 		case "langgraph-platform": return `deployment ${destination.deploymentId}`;
 		case "azure-key-vault": return `${destination.vault}${destination.prefix ? ` (${destination.prefix}*)` : ""}`;
+		case "huggingface-spaces": return `space ${destination.repoId}`;
 		case "github-actions": switch (destination.kind) {
 			case "repo": return `${destination.owner}/${destination.repo}`;
 			case "environment": return `${destination.owner}/${destination.repo} @${destination.environment}`;
@@ -13413,7 +13512,7 @@ function describeDestination(destination) {
 * application whose environment the binding reads from.
 */
 function destinationOptions(command) {
-	return command.option("--project <id>", "vercel: project id or name · cloudflare-pages / northflank: project name or slug · bunnyshell: project ID (writes variables new environments inherit)").option("--target <list>", "vercel / cloudflare-pages: comma-separated deployment targets", "production").option("--git-branch <branch>", "vercel: restrict preview writes to one branch").option("--script <name>", "cloudflare-workers: Worker script name").option("--store-id <id>", "cloudflare-secrets-store: store ID (32 hex)").option("--scopes <list>", "cloudflare-secrets-store: comma-separated scopes", "workers").option("--railway-project <id>", "railway: project ID (a UUID)").option("--railway-environment <id>", "railway: environment ID (a UUID)").option("--service <id>", "railway: service ID (omit for the environment's shared variables) · render: service ID (srv-…, or crn-… for a cron job)").option("--skip-deploys", "railway: stage values without triggering a redeploy").option("--path <path>", "aws-parameter-store: hierarchy, e.g. /prod/storefront/ · aws-secrets-manager, azure-key-vault: name prefix").option("--layout <layout>", `aws-secrets-manager: ${AWS_SECRETS_MANAGER_LAYOUTS.join(" | ")}`).option("--secret-name <name>", "aws-secrets-manager: the secret a json-bundle writes to").option("--param-type <type>", `aws-parameter-store: ${AWS_PARAMETER_TYPES.join(" | ")}`).option("--tier <tier>", `aws-parameter-store: ${AWS_PARAMETER_TIERS.join(" | ")}`).option("--kms-key-id <id>", "aws: customer-managed KMS key id, ARN, or alias").option("--env-group <id>", "render: environment group ID (evg-…)").option("--fly-app <name>", "fly: app name, as `fly apps list` shows it").option("--secret-group <id>", "northflank: secret group ID (the slug in its URL)").option("--do-app <id>", "digitalocean: App Platform app ID (the UUID in its URL)").option("--component <name>", "digitalocean: write to one component's variables (omit for app-level)").option("--env-scope <scope>", `digitalocean: ${DIGITALOCEAN_ENV_SCOPES.join(" | ")}`).option("--heroku-app <name>", "heroku: app name, as `heroku apps` shows it (or its UUID)").option("--netlify-site <id>", "netlify: site API ID (the UUID under Project configuration)").option("--no-netlify-secret", "netlify: create readable variables instead of Netlify secrets (write-only)").option("--bunnyshell-environment <id>", "bunnyshell: environment ID (omit to write a project)").option("--no-bunnyshell-secret", "bunnyshell: create variables visible in the dashboard instead of secret ones").option("--gh-repo <owner/name>", "github-actions: repository, e.g. acme/storefront").option("--gh-environment <name>", "github-actions: write to one deployment environment's secrets (needs --gh-repo)").option("--gh-org <login>", "github-actions: write organization secrets instead of a repo's").option("--gh-visibility <v>", `github-actions org secrets: ${GITHUB_ACTIONS_VISIBILITIES.join(" | ")}`).option("--gh-repo-ids <ids>", "github-actions: comma-separated numeric repository IDs for --gh-visibility selected").option("--langgraph-deployment <id>", "langgraph-platform: deployment UUID (the one in its dashboard URL)").option("--gcp-prefix <prefix>", "gcp: prepended to every secret ID, e.g. prod-storefront-").option("--gcp-replication <policy>", `gcp: ${GCP_REPLICATION_POLICIES.join(" | ")}`, "automatic").option("--gcp-locations <list>", "gcp: regions for user-managed replication, e.g. us-east1").option("--gcp-kms-key <name>", "gcp: Cloud KMS key (projects/…/cryptoKeys/…)").option("--gcp-prune-versions", "gcp: destroy the version each push supersedes, keeping one active version").option("--vault <name>", "azure-key-vault: vault name, e.g. acme-prod").option("--name-mode <mode>", `azure-key-vault: ${AZURE_KEY_VAULT_NAME_MODES.join(" | ")} — Key Vault stores no underscores, so DATABASE_URL becomes DATABASE-URL unless you reject instead`);
+	return command.option("--project <id>", "vercel: project id or name · cloudflare-pages / northflank: project name or slug · bunnyshell: project ID (writes variables new environments inherit)").option("--target <list>", "vercel / cloudflare-pages: comma-separated deployment targets", "production").option("--git-branch <branch>", "vercel: restrict preview writes to one branch").option("--script <name>", "cloudflare-workers: Worker script name").option("--store-id <id>", "cloudflare-secrets-store: store ID (32 hex)").option("--scopes <list>", "cloudflare-secrets-store: comma-separated scopes", "workers").option("--railway-project <id>", "railway: project ID (a UUID)").option("--railway-environment <id>", "railway: environment ID (a UUID)").option("--service <id>", "railway: service ID (omit for the environment's shared variables) · render: service ID (srv-…, or crn-… for a cron job)").option("--skip-deploys", "railway: stage values without triggering a redeploy").option("--path <path>", "aws-parameter-store: hierarchy, e.g. /prod/storefront/ · aws-secrets-manager, azure-key-vault: name prefix").option("--layout <layout>", `aws-secrets-manager: ${AWS_SECRETS_MANAGER_LAYOUTS.join(" | ")}`).option("--secret-name <name>", "aws-secrets-manager: the secret a json-bundle writes to").option("--param-type <type>", `aws-parameter-store: ${AWS_PARAMETER_TYPES.join(" | ")}`).option("--tier <tier>", `aws-parameter-store: ${AWS_PARAMETER_TIERS.join(" | ")}`).option("--kms-key-id <id>", "aws: customer-managed KMS key id, ARN, or alias").option("--env-group <id>", "render: environment group ID (evg-…)").option("--fly-app <name>", "fly: app name, as `fly apps list` shows it").option("--secret-group <id>", "northflank: secret group ID (the slug in its URL)").option("--do-app <id>", "digitalocean: App Platform app ID (the UUID in its URL)").option("--component <name>", "digitalocean: write to one component's variables (omit for app-level)").option("--env-scope <scope>", `digitalocean: ${DIGITALOCEAN_ENV_SCOPES.join(" | ")}`).option("--heroku-app <name>", "heroku: app name, as `heroku apps` shows it (or its UUID)").option("--netlify-site <id>", "netlify: site API ID (the UUID under Project configuration)").option("--no-netlify-secret", "netlify: create readable variables instead of Netlify secrets (write-only)").option("--bunnyshell-environment <id>", "bunnyshell: environment ID (omit to write a project)").option("--no-bunnyshell-secret", "bunnyshell: create variables visible in the dashboard instead of secret ones").option("--gh-repo <owner/name>", "github-actions: repository, e.g. acme/storefront").option("--gh-environment <name>", "github-actions: write to one deployment environment's secrets (needs --gh-repo)").option("--gh-org <login>", "github-actions: write organization secrets instead of a repo's").option("--gh-visibility <v>", `github-actions org secrets: ${GITHUB_ACTIONS_VISIBILITIES.join(" | ")}`).option("--gh-repo-ids <ids>", "github-actions: comma-separated numeric repository IDs for --gh-visibility selected").option("--langgraph-deployment <id>", "langgraph-platform: deployment UUID (the one in its dashboard URL)").option("--gcp-prefix <prefix>", "gcp: prepended to every secret ID, e.g. prod-storefront-").option("--gcp-replication <policy>", `gcp: ${GCP_REPLICATION_POLICIES.join(" | ")}`, "automatic").option("--gcp-locations <list>", "gcp: regions for user-managed replication, e.g. us-east1").option("--gcp-kms-key <name>", "gcp: Cloud KMS key (projects/…/cryptoKeys/…)").option("--gcp-prune-versions", "gcp: destroy the version each push supersedes, keeping one active version").option("--vault <name>", "azure-key-vault: vault name, e.g. acme-prod").option("--hf-space <owner/name>", "huggingface-spaces: Space ID, e.g. acme/support-demo (its owner and name, not a URL)").option("--name-mode <mode>", `azure-key-vault: ${AZURE_KEY_VAULT_NAME_MODES.join(" | ")} — Key Vault stores no underscores, so DATABASE_URL becomes DATABASE-URL unless you reject instead`);
 }
 /** Find a connection by id or name — nobody keeps `syc_…` ids in their head. */
 async function resolveConnection(ctx, orgId, ref) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seekrit/cli",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "End-to-end encrypted secrets manager CLI — inject decrypted secrets into any command.",
   "type": "module",
   "publishConfig": {
@@ -31,8 +31,8 @@
     "tsdown": "^0.22.3",
     "vitest": "^4.1.9",
     "@seekrit/api-client": "0.0.1",
-    "@seekrit/crypto": "0.0.1",
-    "@seekrit/core": "0.0.1"
+    "@seekrit/core": "0.0.1",
+    "@seekrit/crypto": "0.0.1"
   },
   "scripts": {
     "build": "tsdown",