@skillrecordings/cli 0.2.3 → 0.4.0

package/dist/{pipeline-JELLPZAE.js → pipeline-DRKFIH73.js}

@@ -53,7 +53,7 @@ import {
   storeDraftSuccess,
   validate,
   validateSync
-} from "./chunk-5QCJIGF3.js";
+} from "./chunk-TFLLCHUX.js";
 import "./chunk-KEV3QKXP.js";
 import "./chunk-HK3PEWFD.js";
 import "./chunk-WYKL32C3.js";
@@ -117,4 +117,4 @@ export {
   validate,
   validateSync
 };
-//# sourceMappingURL=pipeline-JELLPZAE.js.map
+//# sourceMappingURL=pipeline-DRKFIH73.js.map

package/dist/preload.js

@@ -1,6 +1,3 @@
-import {
-  decrypt
-} from "./chunk-MNFDM56Q.js";
 import {
   init_esm_shims
 } from "./chunk-WFANXVQG.js";
@@ -11,12 +8,21 @@ import path2 from "path";
 
 // src/lib/env-loader.ts
 init_esm_shims();
-import { execSync } from "child_process";
 import fs from "fs/promises";
-import os from "os";
 import path from "path";
 import { config } from "dotenv-flow";
-var OP_AGE_KEY_REF = "op://Support/skill-cli-age-key/private_key";
+
+// src/lib/crypto.ts
+init_esm_shims();
+import { Decrypter } from "age-encryption";
+async function decrypt(encrypted, privateKey) {
+  const decrypter = new Decrypter();
+  decrypter.addIdentity(privateKey);
+  const input = encrypted instanceof Buffer ? new Uint8Array(encrypted) : encrypted;
+  return decrypter.decrypt(input, "text");
+}
+
+// src/lib/env-loader.ts
 async function loadSecrets(cliDirOverride) {
   const cliDir2 = cliDirOverride ?? path.resolve(import.meta.dirname, "../..");
   const localEnvExists = await checkLocalEnv(cliDir2);
@@ -25,15 +31,11 @@ async function loadSecrets(cliDirOverride) {
     return;
   }
   const encryptedPath = path.join(cliDir2, ".env.encrypted");
-  const encryptedExists = await fileExists(encryptedPath);
-  if (encryptedExists) {
-    let privateKey = process.env.AGE_SECRET_KEY;
-    if (!privateKey) {
-      privateKey = await tryLoadKeyFrom1Password();
-    }
+  if (await fileExists(encryptedPath)) {
+    const privateKey = process.env.AGE_SECRET_KEY;
     if (!privateKey) {
       throw new Error(
-        "Found .env.encrypted but cannot decrypt.\n\nOptions:\n1. Set AGE_SECRET_KEY env var with the private key\n2. Create ~/.op-token with 1Password service account token\n\nSee docs/CLI-AUTH.md for setup instructions."
+        'Found .env.encrypted but AGE_SECRET_KEY is not set.\n\nAdd to your shell profile (~/.zshrc):\n  export AGE_SECRET_KEY="AGE-SECRET-KEY-1..."\n\nOr create .env.local in the CLI package directory to bypass encryption.'
       );
     }
     try {
@@ -44,56 +46,14 @@ async function loadSecrets(cliDirOverride) {
     } catch (error) {
       throw new Error(
         `Failed to decrypt .env.encrypted: ${error instanceof Error ? error.message : String(error)}
-Check that the decryption key matches the encryption key.`
+Check that AGE_SECRET_KEY matches the encryption key.`
       );
     }
   }
   throw new Error(
-    "No environment configuration found.\n\nOptions:\n1. Create .env.local in packages/cli/ with your secrets\n2. Set AGE_SECRET_KEY and use encrypted .env.encrypted\n3. Create ~/.op-token for automatic 1Password-based decryption\n\nSee docs/CLI-AUTH.md for setup instructions."
+    "No environment configuration found.\n\nOptions:\n1. Set AGE_SECRET_KEY in your shell profile (for .env.encrypted)\n2. Create .env.local in the CLI package directory\n\nSee docs/CLI-AUTH.md for setup instructions."
   );
 }
-async function tryLoadKeyFrom1Password() {
-  const opTokenPath = path.join(os.homedir(), ".op-token");
-  if (!await fileExists(opTokenPath)) {
-    return void 0;
-  }
-  try {
-    const tokenFileContent = await fs.readFile(opTokenPath, "utf-8");
-    const token = parseOpTokenFile(tokenFileContent);
-    if (!token) {
-      return void 0;
-    }
-    process.env.OP_SERVICE_ACCOUNT_TOKEN = token;
-    const privateKey = execSync(`op read "${OP_AGE_KEY_REF}"`, {
-      encoding: "utf-8",
-      stdio: ["ignore", "pipe", "pipe"],
-      env: process.env
-      // Explicit env pass required for token to be visible
-    }).trim();
-    return privateKey || void 0;
-  } catch {
-    return void 0;
-  }
-}
-function parseOpTokenFile(content) {
-  const lines = content.split("\n");
-  for (const line of lines) {
-    const trimmed = line.trim();
-    const match = trimmed.match(
-      /^export\s+OP_SERVICE_ACCOUNT_TOKEN\s*=\s*["']?([^"'\s]+)["']?/
-    );
-    if (match?.[1]) {
-      return match[1];
-    }
-    const bareMatch = trimmed.match(
-      /^OP_SERVICE_ACCOUNT_TOKEN\s*=\s*["']?([^"'\s]+)["']?/
-    );
-    if (bareMatch?.[1]) {
-      return bareMatch[1];
-    }
-  }
-  return void 0;
-}
 async function checkLocalEnv(dir) {
   const candidates = [".env.local", ".env"];
   for (const file of candidates) {

package/dist/preload.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../preload.ts","../src/lib/env-loader.ts"],"sourcesContent":["import path from 'node:path'\nimport { loadSecrets } from './src/lib/env-loader.js'\n\n// Calculate CLI package root - works for both dev (preload.ts) and bundled (dist/preload.js)\n// In dev: dirname is packages/cli, so '..' goes to packages, '../..' to root - wrong, we want '.'\n// In bundle: dirname is packages/cli/dist, so '..' goes to packages/cli - correct\n// Solution: check if we're in dist/ and adjust accordingly\nconst dirname = import.meta.dirname\nconst cliDir =\n  dirname.endsWith('/dist') || dirname.endsWith('\\\\dist')\n    ? path.resolve(dirname, '..')\n    : dirname\n\n// Don't crash for commands that don't need secrets (--help, auth, etc.)\nconst noSecretsNeeded =\n  process.argv.length <= 2 ||\n  process.argv.some((a) =>\n    ['--help', '-h', '--version', '-V', 'auth'].includes(a)\n  )\n\ntry {\n  await loadSecrets(cliDir)\n} catch (err) {\n  if (noSecretsNeeded) {\n    // Skip env validation so index.js can load without DATABASE_URL\n    process.env.SKIP_ENV_VALIDATION = '1'\n  } else {\n    console.error(err instanceof Error ? err.message : String(err))\n    process.exit(1)\n  }\n}\n","import { execSync } from 'node:child_process'\nimport fs from 'node:fs/promises'\nimport os from 'node:os'\nimport path from 'node:path'\nimport { config } from 'dotenv-flow'\nimport { decrypt } from './crypto.js'\n\n/** 1Password reference for the age private key */\nconst OP_AGE_KEY_REF = 'op://Support/skill-cli-age-key/private_key'\n\n/**\n * Load secrets from layered fallback:\n * 1. Local .env/.env.local files\n * 2. Encrypted .env.encrypted file (auto-fetches key from 1Password if ~/.op-token exists)\n * 3. Fail with clear instructions\n *\n * Injects secrets into process.env\n *\n * @param cliDirOverride - Optional path to CLI package root (use when calling from bundled code)\n */\nexport async function loadSecrets(cliDirOverride?: string): Promise<void> {\n  const cliDir = cliDirOverride ?? path.resolve(import.meta.dirname, '../..')\n\n  // Layer 1: Check for local .env files\n  const localEnvExists = await checkLocalEnv(cliDir)\n  if (localEnvExists) {\n    config({ path: cliDir, silent: true })\n    return\n  }\n\n  // Layer 2: Try encrypted fallback\n  const encryptedPath = path.join(cliDir, '.env.encrypted')\n  const encryptedExists = await fileExists(encryptedPath)\n\n  if (encryptedExists) {\n    // Try to get the private key - either from env or via 1Password\n    let privateKey = process.env.AGE_SECRET_KEY\n\n    if (!privateKey) {\n      // Attempt to load from 1Password via ~/.op-token\n      privateKey = await tryLoadKeyFrom1Password()\n    }\n\n    if (!privateKey) {\n      throw new Error(\n        'Found .env.encrypted but cannot decrypt.\\n\\n' +\n          'Options:\\n' +\n          '1. Set AGE_SECRET_KEY env var with the private key\\n' +\n          '2. Create ~/.op-token with 1Password service account token\\n\\n' +\n          'See docs/CLI-AUTH.md for setup instructions.'\n      )\n    }\n\n    try {\n      const encryptedData = await fs.readFile(encryptedPath)\n      const decrypted = await decrypt(encryptedData, privateKey)\n\n      // Parse decrypted env file format (KEY=VALUE lines)\n      parseAndInjectEnv(decrypted)\n      return\n    } catch (error) {\n      throw new Error(\n        `Failed to decrypt .env.encrypted: ${error instanceof Error ? error.message : String(error)}\\n` +\n          'Check that the decryption key matches the encryption key.'\n      )\n    }\n  }\n\n  // Layer 3: Nothing found - fail with instructions\n  throw new Error(\n    'No environment configuration found.\\n\\n' +\n      'Options:\\n' +\n      '1. Create .env.local in packages/cli/ with your secrets\\n' +\n      '2. Set AGE_SECRET_KEY and use encrypted .env.encrypted\\n' +\n      '3. Create ~/.op-token for automatic 1Password-based decryption\\n\\n' +\n      'See docs/CLI-AUTH.md for setup instructions.'\n  )\n}\n\n/**\n * Try to load the age private key from 1Password using ~/.op-token\n * Returns the key if successful, undefined otherwise\n */\nasync function tryLoadKeyFrom1Password(): Promise<string | undefined> {\n  const opTokenPath = path.join(os.homedir(), '.op-token')\n\n  // Check if ~/.op-token exists\n  if (!(await fileExists(opTokenPath))) {\n    return undefined\n  }\n\n  try {\n    // Read and parse ~/.op-token (format: export VAR=\"value\")\n    const tokenFileContent = await fs.readFile(opTokenPath, 'utf-8')\n    const token = parseOpTokenFile(tokenFileContent)\n\n    if (!token) {\n      return undefined\n    }\n\n    // Set the token in env for op CLI to use\n    process.env.OP_SERVICE_ACCOUNT_TOKEN = token\n\n    // Fetch the age private key from 1Password\n    const privateKey = execSync(`op read \"${OP_AGE_KEY_REF}\"`, {\n      encoding: 'utf-8',\n      stdio: ['ignore', 'pipe', 'pipe'],\n      env: process.env, // Explicit env pass required for token to be visible\n    }).trim()\n\n    return privateKey || undefined\n  } catch {\n    // Silently fail - caller will show appropriate error\n    return undefined\n  }\n}\n\n/**\n * Parse ~/.op-token file format: export OP_SERVICE_ACCOUNT_TOKEN=\"value\"\n */\nfunction parseOpTokenFile(content: string): string | undefined {\n  const lines = content.split('\\n')\n\n  for (const line of lines) {\n    const trimmed = line.trim()\n\n    // Match: export OP_SERVICE_ACCOUNT_TOKEN=\"value\" or =value\n    const match = trimmed.match(\n      /^export\\s+OP_SERVICE_ACCOUNT_TOKEN\\s*=\\s*[\"']?([^\"'\\s]+)[\"']?/\n    )\n    if (match?.[1]) {\n      return match[1]\n    }\n\n    // Also support bare assignment: OP_SERVICE_ACCOUNT_TOKEN=value\n    const bareMatch = trimmed.match(\n      /^OP_SERVICE_ACCOUNT_TOKEN\\s*=\\s*[\"']?([^\"'\\s]+)[\"']?/\n    )\n    if (bareMatch?.[1]) {\n      return bareMatch[1]\n    }\n  }\n\n  return undefined\n}\n\n/**\n * Check if any local .env files exist\n */\nasync function checkLocalEnv(dir: string): Promise<boolean> {\n  const candidates = ['.env.local', '.env']\n  for (const file of candidates) {\n    if (await fileExists(path.join(dir, file))) {\n      return true\n    }\n  }\n  return false\n}\n\n/**\n * Check if a file exists\n */\nasync function fileExists(filePath: string): Promise<boolean> {\n  try {\n    await fs.access(filePath)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Parse env file format (KEY=VALUE) and inject into process.env\n * Handles quoted values, comments, and empty lines\n */\nfunction parseAndInjectEnv(content: string): void {\n  const lines = content.split('\\n')\n\n  for (const line of lines) {\n    const trimmed = line.trim()\n\n    // Skip comments and empty lines\n    if (!trimmed || trimmed.startsWith('#')) {\n      continue\n    }\n\n    const eqIndex = trimmed.indexOf('=')\n    if (eqIndex === -1) {\n      continue\n    }\n\n    const key = trimmed.slice(0, eqIndex).trim()\n    let value = trimmed.slice(eqIndex + 1).trim()\n\n    // Remove quotes if present\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1)\n    }\n\n    // Only set if not already defined (respect existing env vars)\n    if (key && process.env[key] === undefined) {\n      process.env[key] = value\n    }\n  }\n}\n"],"mappings":";;;;;;;;AAAA;AAAA,OAAOA,WAAU;;;ACAjB;AAAA,SAAS,gBAAgB;AACzB,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,cAAc;AAIvB,IAAM,iBAAiB;AAYvB,eAAsB,YAAY,gBAAwC;AACxE,QAAMC,UAAS,kBAAkB,KAAK,QAAQ,YAAY,SAAS,OAAO;AAG1E,QAAM,iBAAiB,MAAM,cAAcA,OAAM;AACjD,MAAI,gBAAgB;AAClB,WAAO,EAAE,MAAMA,SAAQ,QAAQ,KAAK,CAAC;AACrC;AAAA,EACF;AAGA,QAAM,gBAAgB,KAAK,KAAKA,SAAQ,gBAAgB;AACxD,QAAM,kBAAkB,MAAM,WAAW,aAAa;AAEtD,MAAI,iBAAiB;AAEnB,QAAI,aAAa,QAAQ,IAAI;AAE7B,QAAI,CAAC,YAAY;AAEf,mBAAa,MAAM,wBAAwB;AAAA,IAC7C;AAEA,QAAI,CAAC,YAAY;AACf,YAAM,IAAI;AAAA,QACR;AAAA,MAKF;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,GAAG,SAAS,aAAa;AACrD,YAAM,YAAY,MAAM,QAAQ,eAAe,UAAU;AAGzD,wBAAkB,SAAS;AAC3B;AAAA,IACF,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA;AAAA,MAE7F;AAAA,IACF;AAAA,EACF;AAGA,QAAM,IAAI;AAAA,IACR;AAAA,EAMF;AACF;AAMA,eAAe,0BAAuD;AACpE,QAAM,cAAc,KAAK,KAAK,GAAG,QAAQ,GAAG,WAAW;AAGvD,MAAI,CAAE,MAAM,WAAW,WAAW,GAAI;AACpC,WAAO;AAAA,EACT;AAEA,MAAI;AAEF,UAAM,mBAAmB,MAAM,GAAG,SAAS,aAAa,OAAO;AAC/D,UAAM,QAAQ,iBAAiB,gBAAgB;AAE/C,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAGA,YAAQ,IAAI,2BAA2B;AAGvC,UAAM,aAAa,SAAS,YAAY,cAAc,KAAK;AAAA,MACzD,UAAU;AAAA,MACV,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,MAChC,KAAK,QAAQ;AAAA;AAAA,IACf,CAAC,EAAE,KAAK;AAER,WAAO,cAAc;AAAA,EACvB,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAKA,SAAS,iBAAiB,SAAqC;AAC7D,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,aAAW,QAAQ,OAAO;AACxB,UAAM,UAAU,KAAK,KAAK;AAG1B,UAAM,QAAQ,QAAQ;AAAA,MACpB;AAAA,IACF;AACA,QAAI,QAAQ,CAAC,GAAG;AACd,aAAO,MAAM,CAAC;AAAA,IAChB;AAGA,UAAM,YAAY,QAAQ;AAAA,MACxB;AAAA,IACF;AACA,QAAI,YAAY,CAAC,GAAG;AAClB,aAAO,UAAU,CAAC;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;AAKA,eAAe,cAAc,KAA+B;AAC1D,QAAM,aAAa,CAAC,cAAc,MAAM;AACxC,aAAW,QAAQ,YAAY;AAC7B,QAAI,MAAM,WAAW,KAAK,KAAK,KAAK,IAAI,CAAC,GAAG;AAC1C,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAKA,eAAe,WAAW,UAAoC;AAC5D,MAAI;AACF,UAAM,GAAG,OAAO,QAAQ;AACxB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,SAAS,kBAAkB,SAAuB;AAChD,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,aAAW,QAAQ,OAAO;AACxB,UAAM,UAAU,KAAK,KAAK;AAG1B,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,GAAG;AACvC;AAAA,IACF;AAEA,UAAM,UAAU,QAAQ,QAAQ,GAAG;AACnC,QAAI,YAAY,IAAI;AAClB;AAAA,IACF;AAEA,UAAM,MAAM,QAAQ,MAAM,GAAG,OAAO,EAAE,KAAK;AAC3C,QAAI,QAAQ,QAAQ,MAAM,UAAU,CAAC,EAAE,KAAK;AAG5C,QACG,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,KAC3C,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,GAC5C;AACA,cAAQ,MAAM,MAAM,GAAG,EAAE;AAAA,IAC3B;AAGA,QAAI,OAAO,QAAQ,IAAI,GAAG,MAAM,QAAW;AACzC,cAAQ,IAAI,GAAG,IAAI;AAAA,IACrB;AAAA,EACF;AACF;;;ADxMA,IAAM,UAAU,YAAY;AAC5B,IAAM,SACJ,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,QAAQ,IAClDC,MAAK,QAAQ,SAAS,IAAI,IAC1B;AAGN,IAAM,kBACJ,QAAQ,KAAK,UAAU,KACvB,QAAQ,KAAK;AAAA,EAAK,CAAC,MACjB,CAAC,UAAU,MAAM,aAAa,MAAM,MAAM,EAAE,SAAS,CAAC;AACxD;AAEF,IAAI;AACF,QAAM,YAAY,MAAM;AAC1B,SAAS,KAAK;AACZ,MAAI,iBAAiB;AAEnB,YAAQ,IAAI,sBAAsB;AAAA,EACpC,OAAO;AACL,YAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":["path","cliDir","path"]}
+{"version":3,"sources":["../preload.ts","../src/lib/env-loader.ts","../src/lib/crypto.ts"],"sourcesContent":["import path from 'node:path'\nimport { loadSecrets } from './src/lib/env-loader.js'\n\n// Calculate CLI package root - works for both dev (preload.ts) and bundled (dist/preload.js)\n// In dev: dirname is packages/cli, so '..' goes to packages, '../..' to root - wrong, we want '.'\n// In bundle: dirname is packages/cli/dist, so '..' goes to packages/cli - correct\n// Solution: check if we're in dist/ and adjust accordingly\nconst dirname = import.meta.dirname\nconst cliDir =\n  dirname.endsWith('/dist') || dirname.endsWith('\\\\dist')\n    ? path.resolve(dirname, '..')\n    : dirname\n\n// Don't crash for commands that don't need secrets (--help, auth, etc.)\nconst noSecretsNeeded =\n  process.argv.length <= 2 ||\n  process.argv.some((a) =>\n    ['--help', '-h', '--version', '-V', 'auth'].includes(a)\n  )\n\ntry {\n  await loadSecrets(cliDir)\n} catch (err) {\n  if (noSecretsNeeded) {\n    // Skip env validation so index.js can load without DATABASE_URL\n    process.env.SKIP_ENV_VALIDATION = '1'\n  } else {\n    console.error(err instanceof Error ? err.message : String(err))\n    process.exit(1)\n  }\n}\n","import fs from 'node:fs/promises'\nimport path from 'node:path'\nimport { config } from 'dotenv-flow'\nimport { decrypt } from './crypto.js'\n\n/**\n * Load secrets from layered fallback:\n * 1. Local .env/.env.local files (dev override)\n * 2. Encrypted .env.encrypted + AGE_SECRET_KEY (npm installs)\n * 3. Fail with clear instructions\n *\n * Injects secrets into process.env\n *\n * @param cliDirOverride - Optional path to CLI package root (use when calling from bundled code)\n */\nexport async function loadSecrets(cliDirOverride?: string): Promise<void> {\n  const cliDir = cliDirOverride ?? path.resolve(import.meta.dirname, '../..')\n\n  // Layer 1: Check for local .env files (takes priority — dev workflow)\n  const localEnvExists = await checkLocalEnv(cliDir)\n  if (localEnvExists) {\n    config({ path: cliDir, silent: true })\n    return\n  }\n\n  // Layer 2: Decrypt .env.encrypted with AGE_SECRET_KEY\n  const encryptedPath = path.join(cliDir, '.env.encrypted')\n  if (await fileExists(encryptedPath)) {\n    const privateKey = process.env.AGE_SECRET_KEY\n    if (!privateKey) {\n      throw new Error(\n        'Found .env.encrypted but AGE_SECRET_KEY is not set.\\n\\n' +\n          'Add to your shell profile (~/.zshrc):\\n' +\n          '  export AGE_SECRET_KEY=\"AGE-SECRET-KEY-1...\"\\n\\n' +\n          'Or create .env.local in the CLI package directory to bypass encryption.'\n      )\n    }\n\n    try {\n      const encryptedData = await fs.readFile(encryptedPath)\n      const decrypted = await decrypt(encryptedData, privateKey)\n      parseAndInjectEnv(decrypted)\n      return\n    } catch (error) {\n      throw new Error(\n        `Failed to decrypt .env.encrypted: ${error instanceof Error ? error.message : String(error)}\\n` +\n          'Check that AGE_SECRET_KEY matches the encryption key.'\n      )\n    }\n  }\n\n  // Layer 3: Nothing found\n  throw new Error(\n    'No environment configuration found.\\n\\n' +\n      'Options:\\n' +\n      '1. Set AGE_SECRET_KEY in your shell profile (for .env.encrypted)\\n' +\n      '2. Create .env.local in the CLI package directory\\n\\n' +\n      'See docs/CLI-AUTH.md for setup instructions.'\n  )\n}\n\n/**\n * Check if any local .env files exist\n */\nasync function checkLocalEnv(dir: string): Promise<boolean> {\n  const candidates = ['.env.local', '.env']\n  for (const file of candidates) {\n    if (await fileExists(path.join(dir, file))) {\n      return true\n    }\n  }\n  return false\n}\n\n/**\n * Check if a file exists\n */\nasync function fileExists(filePath: string): Promise<boolean> {\n  try {\n    await fs.access(filePath)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Parse env file format (KEY=VALUE) and inject into process.env\n * Handles quoted values, comments, and empty lines\n */\nfunction parseAndInjectEnv(content: string): void {\n  const lines = content.split('\\n')\n\n  for (const line of lines) {\n    const trimmed = line.trim()\n\n    // Skip comments and empty lines\n    if (!trimmed || trimmed.startsWith('#')) {\n      continue\n    }\n\n    const eqIndex = trimmed.indexOf('=')\n    if (eqIndex === -1) {\n      continue\n    }\n\n    const key = trimmed.slice(0, eqIndex).trim()\n    let value = trimmed.slice(eqIndex + 1).trim()\n\n    // Remove quotes if present\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1)\n    }\n\n    // Only set if not already defined (respect existing env vars)\n    if (key && process.env[key] === undefined) {\n      process.env[key] = value\n    }\n  }\n}\n","import { Decrypter } from 'age-encryption'\n\n/**\n * Decrypt data with an age private key\n * @param encrypted - Encrypted data as Uint8Array or Buffer\n * @param privateKey - age private key (AGE-SECRET-KEY-1...)\n * @returns Decrypted data as string\n */\nexport async function decrypt(\n  encrypted: Uint8Array | Buffer,\n  privateKey: string\n): Promise<string> {\n  const decrypter = new Decrypter()\n  decrypter.addIdentity(privateKey)\n\n  const input =\n    encrypted instanceof Buffer ? new Uint8Array(encrypted) : encrypted\n  return decrypter.decrypt(input, 'text')\n}\n"],"mappings":";;;;;AAAA;AAAA,OAAOA,WAAU;;;ACAjB;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,cAAc;;;ACFvB;AAAA,SAAS,iBAAiB;AAQ1B,eAAsB,QACpB,WACA,YACiB;AACjB,QAAM,YAAY,IAAI,UAAU;AAChC,YAAU,YAAY,UAAU;AAEhC,QAAM,QACJ,qBAAqB,SAAS,IAAI,WAAW,SAAS,IAAI;AAC5D,SAAO,UAAU,QAAQ,OAAO,MAAM;AACxC;;;ADHA,eAAsB,YAAY,gBAAwC;AACxE,QAAMC,UAAS,kBAAkB,KAAK,QAAQ,YAAY,SAAS,OAAO;AAG1E,QAAM,iBAAiB,MAAM,cAAcA,OAAM;AACjD,MAAI,gBAAgB;AAClB,WAAO,EAAE,MAAMA,SAAQ,QAAQ,KAAK,CAAC;AACrC;AAAA,EACF;AAGA,QAAM,gBAAgB,KAAK,KAAKA,SAAQ,gBAAgB;AACxD,MAAI,MAAM,WAAW,aAAa,GAAG;AACnC,UAAM,aAAa,QAAQ,IAAI;AAC/B,QAAI,CAAC,YAAY;AACf,YAAM,IAAI;AAAA,QACR;AAAA,MAIF;AAAA,IACF;AAEA,QAAI;AACF,YAAM,gBAAgB,MAAM,GAAG,SAAS,aAAa;AACrD,YAAM,YAAY,MAAM,QAAQ,eAAe,UAAU;AACzD,wBAAkB,SAAS;AAC3B;AAAA,IACF,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA;AAAA,MAE7F;AAAA,IACF;AAAA,EACF;AAGA,QAAM,IAAI;AAAA,IACR;AAAA,EAKF;AACF;AAKA,eAAe,cAAc,KAA+B;AAC1D,QAAM,aAAa,CAAC,cAAc,MAAM;AACxC,aAAW,QAAQ,YAAY;AAC7B,QAAI,MAAM,WAAW,KAAK,KAAK,KAAK,IAAI,CAAC,GAAG;AAC1C,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAKA,eAAe,WAAW,UAAoC;AAC5D,MAAI;AACF,UAAM,GAAG,OAAO,QAAQ;AACxB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,SAAS,kBAAkB,SAAuB;AAChD,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,aAAW,QAAQ,OAAO;AACxB,UAAM,UAAU,KAAK,KAAK;AAG1B,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,GAAG;AACvC;AAAA,IACF;AAEA,UAAM,UAAU,QAAQ,QAAQ,GAAG;AACnC,QAAI,YAAY,IAAI;AAClB;AAAA,IACF;AAEA,UAAM,MAAM,QAAQ,MAAM,GAAG,OAAO,EAAE,KAAK;AAC3C,QAAI,QAAQ,QAAQ,MAAM,UAAU,CAAC,EAAE,KAAK;AAG5C,QACG,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,KAC3C,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,GAC5C;AACA,cAAQ,MAAM,MAAM,GAAG,EAAE;AAAA,IAC3B;AAGA,QAAI,OAAO,QAAQ,IAAI,GAAG,MAAM,QAAW;AACzC,cAAQ,IAAI,GAAG,IAAI;AAAA,IACrB;AAAA,EACF;AACF;;;ADnHA,IAAM,UAAU,YAAY;AAC5B,IAAM,SACJ,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,QAAQ,IAClDC,MAAK,QAAQ,SAAS,IAAI,IAC1B;AAGN,IAAM,kBACJ,QAAQ,KAAK,UAAU,KACvB,QAAQ,KAAK;AAAA,EAAK,CAAC,MACjB,CAAC,UAAU,MAAM,aAAa,MAAM,MAAM,EAAE,SAAS,CAAC;AACxD;AAEF,IAAI;AACF,QAAM,YAAY,MAAM;AAC1B,SAAS,KAAK;AACZ,MAAI,iBAAiB;AAEnB,YAAQ,IAAI,sBAAsB;AAAA,EACpC,OAAO;AACL,YAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":["path","cliDir","path"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillrecordings/cli",
-  "version": "0.2.3",
+  "version": "0.4.0",
   "type": "module",
   "bin": {
     "skill": "./bin/skill.mjs"