@sentroy-co/client-sdk 2.8.0 → 2.9.0

package/AGENTS.md

@@ -774,6 +774,43 @@ function ConfigPanel() {
 - The bootstrap token is per-(project, environment). A `prod` token cannot read `staging` and vice versa.
 - Variable values are AES-256-GCM encrypted at rest in the Sentroy vault DB. Decryption happens server-side just before the fetch endpoint streams the response.
 
+### CLI (`sentroy env ...`)
+
+The package ships a `sentroy` binary. After `npm install` (or `npm install -g`) it's available on `PATH`; `npx sentroy ...` works without a global install.
+
+Auth is the same `SENTROY_ENV_API_KEY` used by `getEnv()` (or pass `--token=stk_env_...`). Base URL defaults to `https://sentroy.com` (override with `SENTROY_ENV_API_URL` or `--url=`). The token's (project, environment) scope is implicit — never specified on the CLI.
+
+```bash
+# Push a local file to the vault. Without --delete-missing it's upsert-only.
+# With --delete-missing it's a full sync — any vault key not in the file
+# is removed (CLI prompts for confirmation interactively).
+sentroy env push .env.production --delete-missing
+sentroy env push .env.production --dry-run     # show diff, no writes
+
+# Diff local vs vault without writing.
+sentroy env diff .env.production --delete-missing
+
+# Pull the vault into a local file. Refuses to overwrite without --force.
+sentroy env pull .env.staging --force
+
+# List keys (or KEY=value with --values; only public-flagged with --public-only).
+sentroy env list
+sentroy env list --values
+sentroy env list --public-only
+```
+
+`push` requires the token to have `write` permission (toggle when generating the token in the dashboard). `pull`, `list`, and `diff` only need `read`.
+
+The CLI parses the same `.env` flavour as the dashboard's developer mode:
+
+- blank line resets pending description / public flag
+- `# any comment` above a key becomes the variable's description
+- `# @public` on its own line marks the next key as browser-readable
+- `KEY="quoted with spaces"` and `KEY='single quoted'` both supported
+- `export KEY=value` prefix is stripped
+
+REST endpoint behind `push`: `POST /api/env-vault/push` with body `{ entries: [{key, value, public?, description?}], deleteMissing?: boolean }` and `Authorization: Bearer stk_env_...`. Response: `{ added, updated, unchanged, deleted, total, project, environment }`. Each insert/update/delete writes one audit log entry (checksum, no plaintext) tagged `source: "cli-push"`.
+
 ## Requirements
 
 - Node.js 18+ (uses native `fetch`)

package/README.md

@@ -106,6 +106,20 @@ const siteKey = useEnv("TURNSTILE_SITE_KEY")
 
 Bootstrap is a single env: `SENTROY_ENV_API_KEY`. Public/private split is enforced server-side — the React hook only ever sees `public: true` variables. Full reference at [docs.sentroy.com/env-vault](https://docs.sentroy.com/env-vault).
 
+### CLI
+
+The package ships a `sentroy` CLI for syncing local `.env` files to the vault — useful for build pipelines and onboarding.
+
+```bash
+# Use SENTROY_ENV_API_KEY (or pass --token=stk_env_...)
+npx sentroy env push .env.production --delete-missing
+npx sentroy env diff .env.production
+npx sentroy env pull .env.staging --force
+npx sentroy env list --values --public-only
+```
+
+The token's (project, environment) scope is implicit. `--delete-missing` makes the push a full sync — keys not in the local file are removed from the vault. The token must have `write` permission for `push`; everything else only needs `read`.
+
 ## Self-hosted vs hosted
 
 The SDK is identical in both modes. Only `baseUrl` changes:

package/bin/sentroy.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+// Thin shim — keeps the shebang out of TypeScript-emitted files so tsc
+// can still emit them as plain CommonJS modules without preserving comments.
+require("../dist/cli/index.js")

package/dist/cli/dotenv.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Minimal .env parser + serializer used by the CLI.
+ *
+ * Format conventions (mirrors apps/core/components/admin/env-vault-content.tsx
+ * developer mode):
+ *   - blank line resets pending description/public flag
+ *   - `# @public` on its own line marks the next variable as browser-readable
+ *   - `# any other text` becomes the next variable's description
+ *   - `KEY=value`               (unquoted)
+ *   - `KEY="value with spaces"` (double-quoted; supports \n, \", \\ escapes)
+ *   - `KEY='single quotes'`     (single-quoted; literal)
+ *   - `export KEY=value`        (export prefix stripped)
+ *
+ * Anything else is reported as a parse error with the offending line number.
+ */
+export interface DotenvEntry {
+    key: string;
+    value: string;
+    public: boolean;
+    description: string | null;
+}
+export interface DotenvParseResult {
+    entries: DotenvEntry[];
+    errors: {
+        line: number;
+        message: string;
+    }[];
+}
+export declare function parseDotenv(text: string): DotenvParseResult;
+/**
+ * Inverse of parseDotenv — emit a .env document that round-trips through it.
+ * Quotes values that contain whitespace or shell-special characters.
+ */
+export declare function serializeDotenv(entries: DotenvEntry[]): string;
+//# sourceMappingURL=dotenv.d.ts.map

package/dist/cli/dotenv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.d.ts","sourceRoot":"","sources":["../../src/cli/dotenv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC5C;AAID,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CA2F3D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,CAkB9D"}

package/dist/cli/dotenv.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * Minimal .env parser + serializer used by the CLI.
+ *
+ * Format conventions (mirrors apps/core/components/admin/env-vault-content.tsx
+ * developer mode):
+ *   - blank line resets pending description/public flag
+ *   - `# @public` on its own line marks the next variable as browser-readable
+ *   - `# any other text` becomes the next variable's description
+ *   - `KEY=value`               (unquoted)
+ *   - `KEY="value with spaces"` (double-quoted; supports \n, \", \\ escapes)
+ *   - `KEY='single quotes'`     (single-quoted; literal)
+ *   - `export KEY=value`        (export prefix stripped)
+ *
+ * Anything else is reported as a parse error with the offending line number.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDotenv = parseDotenv;
+exports.serializeDotenv = serializeDotenv;
+const KEY_PATTERN = /^[A-Z_][A-Z0-9_]*$/;
+function parseDotenv(text) {
+    const lines = text.split(/\r?\n/);
+    const entries = [];
+    const errors = [];
+    const seen = new Set();
+    let pendingDescription = [];
+    let pendingPublic = false;
+    for (let i = 0; i < lines.length; i++) {
+        const raw = lines[i] ?? "";
+        const line = raw.trim();
+        if (line === "") {
+            pendingDescription = [];
+            pendingPublic = false;
+            continue;
+        }
+        if (line.startsWith("#")) {
+            const body = line.slice(1).trim();
+            if (body === "@public") {
+                pendingPublic = true;
+            }
+            else if (body) {
+                pendingDescription.push(body);
+            }
+            continue;
+        }
+        const work = line.startsWith("export ") ? line.slice(7).trimStart() : line;
+        const eq = work.indexOf("=");
+        if (eq <= 0) {
+            errors.push({
+                line: i + 1,
+                message: "invalid syntax (expected KEY=value)",
+            });
+            pendingDescription = [];
+            pendingPublic = false;
+            continue;
+        }
+        const key = work.slice(0, eq).trim();
+        let value = work.slice(eq + 1);
+        if (!KEY_PATTERN.test(key)) {
+            errors.push({
+                line: i + 1,
+                message: "key must match [A-Z_][A-Z0-9_]*",
+            });
+            pendingDescription = [];
+            pendingPublic = false;
+            continue;
+        }
+        const trimmed = value.trim();
+        if ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
+            (trimmed.startsWith("'") && trimmed.endsWith("'"))) {
+            value = trimmed.slice(1, -1);
+            if (trimmed.startsWith('"')) {
+                value = value
+                    .replace(/\\n/g, "\n")
+                    .replace(/\\"/g, '"')
+                    .replace(/\\\\/g, "\\");
+            }
+        }
+        else {
+            value = trimmed;
+        }
+        if (seen.has(key)) {
+            errors.push({ line: i + 1, message: `duplicate key ${key}` });
+            pendingDescription = [];
+            pendingPublic = false;
+            continue;
+        }
+        seen.add(key);
+        entries.push({
+            key,
+            value,
+            public: pendingPublic,
+            description: pendingDescription.length > 0 ? pendingDescription.join(" ") : null,
+        });
+        pendingDescription = [];
+        pendingPublic = false;
+    }
+    return { entries, errors };
+}
+/**
+ * Inverse of parseDotenv — emit a .env document that round-trips through it.
+ * Quotes values that contain whitespace or shell-special characters.
+ */
+function serializeDotenv(entries) {
+    const blocks = [];
+    for (const e of entries) {
+        const parts = [];
+        if (e.description)
+            parts.push(`# ${e.description}`);
+        if (e.public)
+            parts.push("# @public");
+        const value = e.value;
+        const needsQuote = /[\s"'#$`\\]/.test(value) || value === "";
+        const escaped = needsQuote
+            ? `"${value
+                .replace(/\\/g, "\\\\")
+                .replace(/"/g, '\\"')
+                .replace(/\n/g, "\\n")}"`
+            : value;
+        parts.push(`${e.key}=${escaped}`);
+        blocks.push(parts.join("\n"));
+    }
+    return blocks.join("\n\n") + (blocks.length > 0 ? "\n" : "");
+}
+//# sourceMappingURL=dotenv.js.map

package/dist/cli/dotenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../src/cli/dotenv.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAgBH,kCA2FC;AAMD,0CAkBC;AArHD,MAAM,WAAW,GAAG,oBAAoB,CAAA;AAExC,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,MAAM,MAAM,GAAgC,EAAE,CAAA;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9B,IAAI,kBAAkB,GAAa,EAAE,CAAA;IACrC,IAAI,aAAa,GAAG,KAAK,CAAA;IAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QAEvB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,kBAAkB,GAAG,EAAE,CAAA;YACvB,aAAa,GAAG,KAAK,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,aAAa,GAAG,IAAI,CAAA;YACtB,CAAC;iBAAM,IAAI,IAAI,EAAE,CAAC;gBAChB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;YACD,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAA;YACF,kBAAkB,GAAG,EAAE,CAAA;YACvB,aAAa,GAAG,KAAK,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAE9B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAA;YACF,kBAAkB,GAAG,EAAE,CAAA;YACvB,aAAa,GAAG,KAAK,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAC5B,IACE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAClD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAClD,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,KAAK,GAAG,KAAK;qBACV,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;qBACpB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC3B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,OAAO,CAAA;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,iBAAiB,GAAG,EAAE,EAAE,CAAC,CAAA;YAC7D,kBAAkB,GAAG,EAAE,CAAA;YACvB,aAAa,GAAG,KAAK,CAAA;YACrB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAEb,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,KAAK;YACL,MAAM,EAAE,aAAa;YACrB,WAAW,EACT,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;SACtE,CAAC,CAAA;QAEF,kBAAkB,GAAG,EAAE,CAAA;QACvB,aAAa,GAAG,KAAK,CAAA;IACvB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAAsB;IACpD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,IAAI,CAAC,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;QACrB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAA;QAC5D,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,IAAI,KAAK;iBACN,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;iBACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;iBACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG;YAC7B,CAAC,CAAC,KAAK,CAAA;QACT,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAC9D,CAAC"}

package/dist/cli/env.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `sentroy env <subcommand>` — vault sync from a local .env file.
+ *
+ * The token's (project, environment) scope is implicit; the CLI never
+ * asks for either since it can't change them.
+ */
+export declare function cmdPush(args: string[]): Promise<void>;
+export declare function cmdPull(args: string[]): Promise<void>;
+export declare function cmdList(args: string[]): Promise<void>;
+export declare function cmdDiff(args: string[]): Promise<void>;
+//# sourceMappingURL=env.d.ts.map

package/dist/cli/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/cli/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgMH,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgF3D;AAID,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB3D;AAID,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB3D;AAID,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB3D"}

package/dist/cli/env.js

@@ -0,0 +1,331 @@
+"use strict";
+/**
+ * `sentroy env <subcommand>` — vault sync from a local .env file.
+ *
+ * The token's (project, environment) scope is implicit; the CLI never
+ * asks for either since it can't change them.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmdPush = cmdPush;
+exports.cmdPull = cmdPull;
+exports.cmdList = cmdList;
+exports.cmdDiff = cmdDiff;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const readline = __importStar(require("readline"));
+const dotenv_1 = require("./dotenv");
+const DEFAULT_FILE = ".env";
+const DEFAULT_BASE_URL = "https://sentroy.com";
+// ── ANSI helpers (no deps) ───────────────────────────────────────────────
+const supportsColor = process.stdout.isTTY && process.env.TERM !== "dumb";
+const c = {
+    bold: (s) => (supportsColor ? `\x1b[1m${s}\x1b[0m` : s),
+    dim: (s) => (supportsColor ? `\x1b[2m${s}\x1b[0m` : s),
+    red: (s) => (supportsColor ? `\x1b[31m${s}\x1b[0m` : s),
+    green: (s) => (supportsColor ? `\x1b[32m${s}\x1b[0m` : s),
+    yellow: (s) => (supportsColor ? `\x1b[33m${s}\x1b[0m` : s),
+    cyan: (s) => (supportsColor ? `\x1b[36m${s}\x1b[0m` : s),
+    magenta: (s) => (supportsColor ? `\x1b[35m${s}\x1b[0m` : s),
+};
+function fail(msg) {
+    process.stderr.write(`${c.red("✗")} ${msg}\n`);
+    process.exit(1);
+}
+function info(msg) {
+    process.stdout.write(`${c.cyan("→")} ${msg}\n`);
+}
+function ok(msg) {
+    process.stdout.write(`${c.green("✓")} ${msg}\n`);
+}
+function warn(msg) {
+    process.stdout.write(`${c.yellow("⚠")} ${msg}\n`);
+}
+function resolveSharedOpts(rest) {
+    const token = (typeof rest.token === "string" ? rest.token : null) ??
+        process.env.SENTROY_ENV_API_KEY ??
+        null;
+    if (!token) {
+        fail("no token. Pass --token=stk_env_... or set SENTROY_ENV_API_KEY in your environment.");
+    }
+    const baseUrl = (typeof rest.url === "string" ? rest.url : null) ??
+        process.env.SENTROY_ENV_API_URL ??
+        DEFAULT_BASE_URL;
+    return { token, baseUrl: baseUrl.replace(/\/+$/, "") };
+}
+async function http(shared, path, init) {
+    const res = await fetch(`${shared.baseUrl}${path}`, {
+        ...init,
+        headers: {
+            Authorization: `Bearer ${shared.token}`,
+            ...(init?.body ? { "Content-Type": "application/json" } : {}),
+            ...(init?.headers ?? {}),
+        },
+    });
+    const text = await res.text();
+    let body;
+    try {
+        body = text ? JSON.parse(text) : null;
+    }
+    catch {
+        body = text;
+    }
+    if (!res.ok) {
+        const errMsg = body && typeof body === "object" && "error" in body
+            ? String(body.error)
+            : `HTTP ${res.status}`;
+        throw new Error(`${path}: ${errMsg}`);
+    }
+    return body?.data;
+}
+function readFileOrFail(file) {
+    if (!fs.existsSync(file)) {
+        fail(`file not found: ${file}`);
+    }
+    return fs.readFileSync(file, "utf8");
+}
+function computeDiff(local, remote) {
+    const remoteByKey = new Map(remote.map((v) => [v.key, v]));
+    const added = [];
+    const updated = [];
+    const unchanged = [];
+    for (const e of local) {
+        const r = remoteByKey.get(e.key);
+        if (!r) {
+            added.push(e);
+            continue;
+        }
+        if (r.value !== e.value || r.public !== e.public) {
+            updated.push({ entry: e, remote: r });
+        }
+        else {
+            unchanged.push({ entry: e, remote: r });
+        }
+    }
+    const localKeys = new Set(local.map((e) => e.key));
+    const deleted = remote.filter((v) => !localKeys.has(v.key));
+    return { added, updated, unchanged, deleted };
+}
+function printDiff(diff, deleteMissing) {
+    for (const e of diff.added) {
+        process.stdout.write(`  ${c.green("+")} ${e.key}\n`);
+    }
+    for (const u of diff.updated) {
+        process.stdout.write(`  ${c.yellow("~")} ${u.entry.key}\n`);
+    }
+    if (deleteMissing) {
+        for (const d of diff.deleted) {
+            process.stdout.write(`  ${c.red("-")} ${d.key}\n`);
+        }
+    }
+    else if (diff.deleted.length > 0) {
+        process.stdout.write(`  ${c.dim(`(${diff.deleted.length} key(s) only in vault, kept — pass --delete-missing to remove)`)}\n`);
+    }
+}
+async function confirm(question) {
+    if (!process.stdin.isTTY)
+        return false;
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    const answer = await new Promise((resolve) => {
+        rl.question(`${question} [y/N] `, (ans) => {
+            rl.close();
+            resolve(ans.trim().toLowerCase());
+        });
+    });
+    return answer === "y" || answer === "yes";
+}
+// ── push ─────────────────────────────────────────────────────────────────
+async function cmdPush(args) {
+    const { positional, flags } = parseFlags(args);
+    const file = positional[0] ?? DEFAULT_FILE;
+    const dryRun = !!flags["dry-run"];
+    const deleteMissing = !!flags["delete-missing"];
+    const shared = resolveSharedOpts(flags);
+    const text = readFileOrFail(path.resolve(process.cwd(), file));
+    const parsed = (0, dotenv_1.parseDotenv)(text);
+    if (parsed.errors.length > 0) {
+        process.stderr.write(`${c.red("✗")} parse errors in ${file}:\n`);
+        for (const err of parsed.errors) {
+            process.stderr.write(`    line ${err.line}: ${err.message}\n`);
+        }
+        process.exit(1);
+    }
+    info(`fetching current vault snapshot…`);
+    const remote = await http(shared, "/api/env-vault/fetch");
+    const diff = computeDiff(parsed.entries, remote.variables);
+    process.stdout.write(`\n${c.bold(remote.project)} ${c.dim("/")} ${c.magenta(remote.environment)} ${c.dim(`(${file} → ${shared.baseUrl})`)}\n`);
+    printDiff(diff, deleteMissing);
+    process.stdout.write(`\n  ${c.dim("summary:")} ${diff.added.length} new · ${diff.updated.length} updated · ${diff.unchanged.length} unchanged${deleteMissing ? ` · ${diff.deleted.length} to delete` : ""}\n\n`);
+    if (diff.added.length === 0 &&
+        diff.updated.length === 0 &&
+        (!deleteMissing || diff.deleted.length === 0)) {
+        ok("nothing to push.");
+        return;
+    }
+    if (dryRun) {
+        info("dry run — no changes pushed.");
+        return;
+    }
+    if (deleteMissing && diff.deleted.length > 0) {
+        if (flags.yes) {
+            info(`--yes provided, skipping confirmation for ${diff.deleted.length} delete(s).`);
+        }
+        else if (!process.stdin.isTTY) {
+            fail(`refusing to delete ${diff.deleted.length} key(s) without --yes in a non-interactive shell.`);
+        }
+        else {
+            const proceed = await confirm(`${c.yellow("⚠")} this will delete ${diff.deleted.length} key(s) from the vault. continue?`);
+            if (!proceed) {
+                warn("aborted.");
+                return;
+            }
+        }
+    }
+    const result = await http(shared, "/api/env-vault/push", {
+        method: "POST",
+        body: JSON.stringify({
+            entries: parsed.entries.map((e) => ({
+                key: e.key,
+                value: e.value,
+                public: e.public,
+                description: e.description,
+            })),
+            deleteMissing,
+        }),
+    });
+    ok(`${result.added} added · ${result.updated} updated · ${result.unchanged} unchanged · ${result.deleted} deleted`);
+}
+// ── pull ─────────────────────────────────────────────────────────────────
+async function cmdPull(args) {
+    const { positional, flags } = parseFlags(args);
+    const file = positional[0] ?? DEFAULT_FILE;
+    const force = !!flags.force;
+    const shared = resolveSharedOpts(flags);
+    const target = path.resolve(process.cwd(), file);
+    if (fs.existsSync(target) && !force) {
+        fail(`${file} already exists. Pass --force to overwrite.`);
+    }
+    info(`fetching from ${shared.baseUrl}…`);
+    const remote = await http(shared, "/api/env-vault/fetch");
+    const entries = remote.variables.map((v) => ({
+        key: v.key,
+        value: v.value,
+        public: v.public,
+        description: null,
+    }));
+    const text = (0, dotenv_1.serializeDotenv)(entries);
+    fs.writeFileSync(target, text, "utf8");
+    ok(`wrote ${entries.length} variable(s) to ${file} (${remote.project}/${remote.environment})`);
+}
+// ── list ─────────────────────────────────────────────────────────────────
+async function cmdList(args) {
+    const { flags } = parseFlags(args);
+    const showValues = !!flags.values;
+    const publicOnly = !!flags["public-only"];
+    const shared = resolveSharedOpts(flags);
+    const endpoint = publicOnly ? "/api/env-vault/public" : "/api/env-vault/fetch";
+    const remote = await http(shared, endpoint);
+    process.stdout.write(`${c.bold(remote.project)} ${c.dim("/")} ${c.magenta(remote.environment)} ${c.dim(`(${remote.variables.length} variable(s))`)}\n`);
+    for (const v of remote.variables) {
+        const tag = v.public ? c.dim(" [public]") : "";
+        if (showValues) {
+            process.stdout.write(`  ${c.cyan(v.key)}=${v.value}${tag}\n`);
+        }
+        else {
+            process.stdout.write(`  ${c.cyan(v.key)}${tag}\n`);
+        }
+    }
+}
+// ── diff ─────────────────────────────────────────────────────────────────
+async function cmdDiff(args) {
+    const { positional, flags } = parseFlags(args);
+    const file = positional[0] ?? DEFAULT_FILE;
+    const deleteMissing = !!flags["delete-missing"];
+    const shared = resolveSharedOpts(flags);
+    const text = readFileOrFail(path.resolve(process.cwd(), file));
+    const parsed = (0, dotenv_1.parseDotenv)(text);
+    if (parsed.errors.length > 0) {
+        process.stderr.write(`${c.red("✗")} parse errors in ${file}:\n`);
+        for (const err of parsed.errors) {
+            process.stderr.write(`    line ${err.line}: ${err.message}\n`);
+        }
+        process.exit(1);
+    }
+    const remote = await http(shared, "/api/env-vault/fetch");
+    const diff = computeDiff(parsed.entries, remote.variables);
+    process.stdout.write(`${c.bold(remote.project)} ${c.dim("/")} ${c.magenta(remote.environment)} ${c.dim(`(${file} vs vault)`)}\n`);
+    printDiff(diff, deleteMissing);
+    process.stdout.write(`\n  ${c.dim("summary:")} ${diff.added.length} new · ${diff.updated.length} updated · ${diff.unchanged.length} unchanged · ${diff.deleted.length} only in vault\n`);
+}
+/**
+ * Flags that take a value as a separate token (`--flag value`). All other
+ * `--flag` tokens are booleans. The `--flag=value` form always works
+ * regardless of this list. Keeping this explicit avoids the classic argv
+ * bug where `--dry-run /path/to/file` swallows the positional.
+ */
+const VALUE_FLAGS = new Set(["token", "url"]);
+function parseFlags(args) {
+    const positional = [];
+    const flags = {};
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (!a.startsWith("--")) {
+            positional.push(a);
+            continue;
+        }
+        const body = a.slice(2);
+        const eq = body.indexOf("=");
+        if (eq >= 0) {
+            flags[body.slice(0, eq)] = body.slice(eq + 1);
+            continue;
+        }
+        if (VALUE_FLAGS.has(body)) {
+            const next = args[i + 1];
+            if (next === undefined || next.startsWith("--")) {
+                fail(`flag --${body} requires a value (use --${body}=value or --${body} value)`);
+            }
+            flags[body] = next;
+            i++;
+        }
+        else {
+            flags[body] = true;
+        }
+    }
+    return { positional, flags };
+}
+//# sourceMappingURL=env.js.map

package/dist/cli/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/cli/env.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgMH,0BAgFC;AAID,0BAwBC;AAID,0BAmBC;AAID,0BAyBC;AA9VD,uCAAwB;AACxB,2CAA4B;AAC5B,mDAAoC;AACpC,qCAIiB;AAEjB,MAAM,YAAY,GAAG,MAAM,CAAA;AAC3B,MAAM,gBAAgB,GAAG,qBAAqB,CAAA;AA8B9C,4EAA4E;AAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAA;AACzE,MAAM,CAAC,GAAG;IACR,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CACpE,CAAA;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,EAAE,CAAC,GAAW;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;AAClD,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAsC;IAC/D,MAAM,KAAK,GACT,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,IAAI,CAAA;IACN,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CACF,oFAAoF,CACrF,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GACX,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,gBAAgB,CAAA;IAClB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAA;AACxD,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,MAAkB,EAClB,IAAY,EACZ,IAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;QAClD,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;YACvC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;SACzB;KACF,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GACV,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI;YACjD,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC;YAC5C,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;QAC1B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAA;IACvC,CAAC;IACD,OAAQ,IAAqB,EAAE,IAAS,CAAA;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAA;IACjC,CAAC;IACD,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACtC,CAAC;AASD,SAAS,WAAW,CAClB,KAAoB,EACpB,MAAwB;IAExB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAkB,EAAE,CAAA;IAC/B,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACb,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,IAAU,EAAE,aAAsB;IACnD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IACtD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,gEAAgE,CAAC,IAAI,CACxG,CAAA;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAgB;IACrC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IACtC,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACnD,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YACxC,EAAE,CAAC,KAAK,EAAE,CAAA;YACV,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAA;AAC3C,CAAC;AAED,4EAA4E;AAErE,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAA;IAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACjC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK,CAAC,CAAA;QAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;QAChE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAgB,MAAM,EAAE,sBAAsB,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IAE1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CACjF,IAAI,IAAI,MAAM,MAAM,CAAC,OAAO,GAAG,CAChC,IAAI,CACN,CAAA;IACD,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,aAC3G,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,EAC1D,MAAM,CACP,CAAA;IAED,IACE,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAC7C,CAAC;QACD,EAAE,CAAC,kBAAkB,CAAC,CAAA;QACtB,OAAM;IACR,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,8BAA8B,CAAC,CAAA;QACpC,OAAM;IACR,CAAC;IAED,IAAI,aAAa,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,6CAA6C,IAAI,CAAC,OAAO,CAAC,MAAM,aAAa,CAAC,CAAA;QACrF,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CACF,sBAAsB,IAAI,CAAC,OAAO,CAAC,MAAM,mDAAmD,CAC7F,CAAA;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,MAAM,mCAAmC,CAC5F,CAAA;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,CAAA;gBAChB,OAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAe,MAAM,EAAE,qBAAqB,EAAE;QACrE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;YACH,aAAa;SACd,CAAC;KACH,CAAC,CAAA;IACF,EAAE,CACA,GAAG,MAAM,CAAC,KAAK,YAAY,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,SAAS,gBAAgB,MAAM,CAAC,OAAO,UAAU,CAChH,CAAA;AACH,CAAC;AAED,4EAA4E;AAErE,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAA;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;IAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;IAChD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,6CAA6C,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI,CAAC,iBAAiB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAgB,MAAM,EAAE,sBAAsB,CAAC,CAAA;IACxE,MAAM,OAAO,GAAkB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC,CAAA;IACH,MAAM,IAAI,GAAG,IAAA,wBAAe,EAAC,OAAO,CAAC,CAAA;IACrC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IACtC,EAAE,CACA,SAAS,OAAO,CAAC,MAAM,mBAAmB,IAAI,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,GAAG,CAC3F,CAAA;AACH,CAAC;AAED,4EAA4E;AAErE,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;IACjC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sBAAsB,CAAA;IAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAgB,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,eAAe,CAAC,IAAI,CAClI,CAAA;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,CAAA;QAC/D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAErE,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAA;IAC1C,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK,CAAC,CAAA;QAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;QAChE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAgB,MAAM,EAAE,sBAAsB,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IAE1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAC5G,CAAA;IACD,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,kBAAkB,CACnK,CAAA;AACH,CAAC;AASD;;;;;GAKG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;AAE7C,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAqC,EAAE,CAAA;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YAC7C,SAAQ;QACV,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACxB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,UAAU,IAAI,4BAA4B,IAAI,eAAe,IAAI,SAAS,CAAC,CAAA;YAClF,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;YAClB,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AAC9B,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `sentroy` — CLI entry point.
+ *
+ * Subcommand router with no third-party deps. Today only `env` exists;
+ * future subcommands (`mail`, `media`, etc.) hook in here.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}