@toa.io/cli 0.9.2-dev.0 → 0.20.0-alpha.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toa.io/cli",
-  "version": "0.9.2-dev.0",
+  "version": "0.20.0-alpha.0",
   "description": "Toa CLI",
   "author": "temich <tema.gurtovoy@gmail.com>",
   "homepage": "https://github.com/toa-io/toa#readme",
@@ -22,14 +22,15 @@
     "@toa.io/runtime": "*"
   },
   "dependencies": {
-    "@toa.io/console": "0.6.0",
-    "@toa.io/generic": "0.9.0",
-    "@toa.io/kubernetes": "0.7.2",
-    "@toa.io/norm": "0.10.1-dev.0",
-    "@toa.io/yaml": "0.7.3",
-    "dotenv": "16.0.3",
+    "@toa.io/console": "0.20.0-alpha.0",
+    "@toa.io/generic": "0.20.0-alpha.0",
+    "@toa.io/kubernetes": "0.20.0-alpha.0",
+    "@toa.io/norm": "0.20.0-alpha.0",
+    "@toa.io/yaml": "0.20.0-alpha.0",
+    "dotenv": "16.1.1",
     "find-up": "5.0.0",
+    "paseto": "3.1.4",
     "yargs": "17.6.2"
   },
-  "gitHead": "7f1fdbfe3aa33eb4a06cb1a33d15be18854bcd88"
+  "gitHead": "d047190899218b5249901a01a2a4caec5b34cf09"
 }

package/readme.md

@@ -1,44 +1,49 @@
 # Toa Command Line Interface
 
+## Common Options
+
+<dl>
+<dt><code>--env</code></dt>
+<dd>Path to the environment variables file (`.env` format)</dd>
+</dl>
+
 ## Development
 
-### configure
+### compose
 
-Outputs shell commands to manipulate local environment variables, thus must be piped
-with `source /dev/stdin` to apply.
+Run composition.
 
 <dl>
-<dt><code>toa configure &lt;key&gt; [value]</code></dt>
+<dt><code>toa compose [paths]</code></dt>
 <dd>
-Set Configuration Object key. Nested keys are addressed with dot notation.
-
-<code>--path</code> path to component (default <code>.</code>)<br/>
-<code>--reset</code> clear <code>key</code><br/>
-
-#### Examples
-
-It is assumed you are in the component's directory, use `--path` otherwise.
+<code>paths</code> Glob patterns to look for components.<br/>
+<code>--kill</code> Shutdown composition after it's started<br/>
+<code>--dock</code> Run in Docker using current <code>.env</code>.<br/>
+<code>--context</code> Path to the Context root (default <code>.</code>).<br/>
+<code>--bindnings</code> Override bindings (obsolete).
+</dd>
+</dl>
 
-```shell
-# set new value
-$ toa configure foo 'new value' | source /dev/stdin
-```
+> Note that your `localhost` it is accessible from a container as `host.docker.internal`.
 
-```shell
-# clear key
-$ toa configure bar.baz --reset | source /dev/stdin
-```
+### env
 
-</dd>
-<dt><code>toa configure reset</code></dt>
-<dd>Remove Configuration Object.</dd>
-<dt><code>toa configure print</code></dt>
-<dd>Output Configuration Object as YAML.
+Export environment to a `.env` file.
 
-<code>--json</code> as JSON
+<dl>
+<dt><code>toa env [environment]</code></dt>
+<dd>
+<code>environment</code> deployment environment name (default <code>local</code>).<br/>
+<code>--path</code> path to a Context (default <code>.</code>)<br/>
+<code>--as</code> output file path (default <code>.env</code>)<br/>
+<code>--interactive</code> prompt for secret values
 </dd>
 </dl>
 
+Credentials specified in the output file are preserved.
+
+> It is recommended to add `.env*` to `.gitignore`.
+
 ### replay
 
 [Replay](/extensions/sampling/docs/replay.md) samples. Reports in [TAP](https://testanything.org)
@@ -47,11 +52,13 @@ format.
 <dl>
 <dt><code>toa replay [paths...]</code></dt>
 <dd>
-<code>paths</code> path(s) to component(s) or a context (default <code>.</code>)<br/>
-<code>--integration</code> replay integration tests only<br/>
-<code>--component &lt;id&gt;</code> replay samples for specified component id<br/>
-<code>--operation &lt;name&gt;</code> replay samples for specified operation<br/>
-<code>--title &lt;regexp&gt;</code> regexp to match sample titles<br/>
+<code>paths</code> Path(s) to Component(s) or a Context (default <code>.</code>).<br/>
+<code>--component &lt;id&gt;</code> Replay samples for a specified component <code>id</code>.<br/>
+<code>--integration</code> Replay integration tests only.<br/>
+<code>--autonomous</code> Replay autonomous tests only.<br/>
+<code>--operation &lt;name&gt;</code> Replay samples for specified operation.<br/>
+<code>--title &lt;regexp&gt;</code> Regexp to match sample titles.<br/>
+<code>--dock</code> Run in Docker. Applicable only for component samples.
 </dd>
 </dl>
 
@@ -60,16 +67,15 @@ format.
 ```shell
 $ toa replay
 $ toa replay ./path/to/component
-$ toa replay ./components/a ./components/b
+$ toa replay ./components/a ./components/b --dock
 $ toa replay ./components/*
 $ toa replay ./path/to/context
 $ toa replay --title "should add numbers"
 ```
 
-If path is a context directory (containing `context.toa.yaml` file), samples for components within
-the context will be found and replayed sequentially.
-
-## Exporting
+If the path is a Context root (containing `context.toa.yaml` file), samples for components within
+the Context will be
+found and replayed sequentially.
 
 ### export manifest
 
@@ -78,59 +84,109 @@ the context will be found and replayed sequentially.
 <dd>Print normalized manifest.
 
 <code>--path</code> path to component (default <code>.</code>)<br/>
-<code>--error</code> print errors only<br/>
+<code>--error</code> print errors only
 </dd>
 </dl>
 
-### env
+## Operations
 
-<dl>
-<dt><code>toa env [environment]</code></dt>
-<dd>Select environment. Set local environment variables to <code>.env</code> file.
+> Some commands use current `kubectl` and `docker` context.
 
-<code>environment</code> deployment environment name (default <code>local</code>).<br/>
-<code>--path</code> path to context (default <code>.</code>)<br/>
-</dd>
-</dl>
+### build
 
-> It is recommended to add `.env` to `.gitignore`.
+Build Docker images.
 
-> Credentials specified in a `.env` file are preserved during environment selection.
+<dl>
+<dt><code>toa build</code></dt>
+<dd>
+<code>--path</code> path to a Context (default <code>.</code>)
+</dd>
+</dl>
 
-## Deployment
+### deploy
 
-> Deployment commands use current `kubectl` context.
+Deploy a Context.
 
-### deploy
+- Build Docker images.
+- Push Docker images to the registry.
+- Build a Helm chart.
+- Apply the Helm chart to the current Kubernetes context.
 
 <dl>
 <dt><code>toa deploy [environment]</code></dt>
-<dd>Deploy context.
-
+<dd>
 <code>environment</code> deployment environment name (default <code>default</code>).<br/>
+<code>--path</code> path to a Context (default <code>.</code>)<br/>
+<code>--namespace</code> Kubernetes namespace to apply the Helm chat to<br/>
+<code>--wait</code> wait until all
+Pods [are ready](https://helm.sh/docs/intro/using_helm/#helpful-options-for-installupgraderollback)<br/>
+<code>--dry</code> do not apply the Helm chart
 </dd>
 </dl>
 
 ### conceal
 
+Deploy a generic Kubernetes secret with the prefix `toa-`.
+
+<dl>
+<dt><code>toa conceal &lt;secret&gt; &lt;key-values...&gt;</code></dt>
+<dd>
+<code>secret</code> Secret name.<br/>
+<code>key-values</code> List of keys and values of the secret as <code>key=value</code>.<br/>
+<code>--namespace</code> Kubernetes namespace where the secret should be deployed.<br/>
+<code>--interactive</code> prompt for secret values<br/>
+<code>--environment</code> environment name for interactive mode<br/>
+<code>--path</code> path to a context for interactive mode
+</dd>
+</dl>
+
+> If a secret already exists, then given `key-values` will be added to it.
+
+#### Example
+
+```shell
+$ toa conceal bindings-amqp-default username=developer password=secret
+```
+
+### reveal
+
+Outputs keys and values of a secret.
+
 <dl>
 <dt>
-<code>toa conceal</code>
-<img src="https://img.shields.io/badge/Not_Implemented-red" alt="Not Implemented"/>
+<code>toa reveal &lt;secret&gt;</code>
 </dt>
-<dd>Deploy new declared secrets.
+</dl>
+
+### shell
 
-<code>--reset</code> don't skip already deployed</dd>
+Run interactive shell inside a disposable pod inside a Kubernetes cluster.
 
-<dt><code>toa conceal &lt;secret&gt; &lt;key&gt; &lt;value&gt;</code></dt>
-<dd>Deploy a <code>key</code> with a <code>value</code> to a <code>secret</code>.</dd>
+<dl>
+<dt>
+<code>toa shell [image]</code>
+</dt>
+<dd>
+<code>image</code> Docker image to Run (default <code>alpine</code>).<br/>
+</dd>
 </dl>
 
-### reveal
+#### Examples
+
+```shell
+$ toa shell mongo
+$ toa shell -- ping 1.1 # extra arguments can be passed
+```
+
+### key
+
+Generate a secret PASETO key.
 
 <dl>
 <dt>
-<code>toa reveal &lt;secret&gt;</code>
+<code>toa key</code>
 </dt>
-<dd>Print keys and values of a secret.</dd>
+<dd>
+<code>--public</code> <code>boolean</code> generate a public/private key pair.<br/>
+</dd>
 </dl>

package/src/commands/build.js

@@ -4,10 +4,6 @@ const { build } = require('../handlers/build')
 
 const builder = (yargs) => {
   yargs
-    .positional('environment', {
-      type: 'string',
-      desc: 'Deployment environment'
-    })
     .option('path', {
       alias: 'p',
       group: 'Command options:',
@@ -17,7 +13,7 @@ const builder = (yargs) => {
     })
 }
 
-exports.command = 'build [environment]'
-exports.desc = 'Build and push docker images'
+exports.command = 'build'
+exports.desc = 'Build Docker images'
 exports.builder = builder
 exports.handler = build

package/src/commands/compose.js

@@ -12,10 +12,26 @@ const builder = (yargs) => {
       default: '.'
     })
     .array('paths')
+    .option('kill', {
+      group: 'Command options:',
+      type: 'boolean',
+      desc: 'Immediate shutdown'
+    })
+    .option('dock', {
+      group: 'Command options:',
+      type: 'boolean',
+      desc: 'Run in Docker'
+    })
+    .option('context', {
+      group: 'Command options:',
+      type: 'string',
+      desc: 'Path to the Context (used with --dock)',
+      default: '.'
+    })
     .option('bindings', {
       group: 'Command options:',
       type: 'string',
-      desc: 'Bindings'
+      desc: 'OBSOLETE'
     })
     .array('bindings')
     .example([

package/src/commands/conceal.js

@@ -7,15 +7,46 @@ const builder = (yargs) => {
     .positional('secret', {
       type: 'string'
     })
-    .positional('key', {
-      type: 'string'
+    .positional('key-values', {
+      type: 'string',
+      array: true,
+      desc: 'Secret key-value pairs'
+    })
+    .option('namespace', {
+      alias: 'n',
+      group: 'Command options:',
+      type: 'string',
+      desc: 'Target Kubernetes namespace'
     })
-    .positional('value', {
+    .option('interactive', {
+      alias: 'i',
+      group: 'Command options:',
+      describe: 'Prompt for secrets',
+      type: 'boolean',
+      default: false
+    })
+    .option('environment', {
+      alias: 'e',
+      group: 'Command options:',
+      describe: 'Environment name for interactive mode',
       type: 'string'
     })
+    .option('path', {
+      alias: 'p',
+      group: 'Command options:',
+      describe: 'Path to a Context for interactive mode',
+      type: 'string',
+      default: '.'
+    })
+    .example([
+      ['$0 conceal -i'],
+      ['$0 conceal credentials username=developer'],
+      ['$0 conceal credentials username=developer password=secret'],
+      ['$0 conceal credentials username=developer --namespace app']
+    ])
 }
 
-exports.command = 'conceal <secret> <key> <value>'
-exports.desc = 'Deploy a key with a value to a secret'
+exports.command = 'conceal [secret] [key-values...]'
+exports.desc = 'Deploy a secret'
 exports.builder = builder
 exports.handler = conceal

package/src/commands/env.js

@@ -12,10 +12,23 @@ const builder = (yargs) => {
     .option('path', {
       alias: 'p',
       group: 'Command options:',
-      describe: 'Path to component',
+      describe: 'Path to a Context',
       type: 'string',
       default: '.'
     })
+    .option('as', {
+      group: 'Command options:',
+      describe: 'Output file path',
+      type: 'string',
+      default: '.env'
+    })
+    .option('interactive', {
+      alias: 'i',
+      group: 'Command options:',
+      describe: 'Prompt for secrets',
+      type: 'boolean',
+      default: false
+    })
 }
 
 exports.command = 'env [environment]'

package/src/commands/export/deployment.js

@@ -6,7 +6,7 @@ const builder = (yargs) => {
   yargs
     .positional('target', {
       type: 'string',
-      desc: 'Export target path'
+      desc: 'Path to export to'
     })
     .positional('environment', {
       type: 'string',
@@ -21,7 +21,7 @@ const builder = (yargs) => {
     })
 }
 
-exports.command = ['deployment <target> [environment]', 'dep']
+exports.command = ['deployment <environment> <target>', 'dep']
 exports.desc = 'Export context deployment'
 exports.builder = builder
 exports.handler = dump

package/src/commands/export/images.js

@@ -6,7 +6,7 @@ const builder = (yargs) => {
   yargs
     .positional('target', {
       type: 'string',
-      desc: 'Export target path'
+      desc: 'Path to export to'
     })
     .option('path', {
       alias: 'p',
@@ -17,7 +17,7 @@ const builder = (yargs) => {
     })
 }
 
-exports.command = ['images [target]', 'imgs']
+exports.command = ['images <target>', 'img']
 exports.desc = 'Export docker image sources'
 exports.builder = builder
 exports.handler = prepare

package/src/commands/key.js

@@ -0,0 +1,18 @@
+'use strict'
+
+const { key } = require('../handlers/key')
+
+const builder = (yargs) => {
+  yargs
+    .option('public', {
+      group: 'Command options:',
+      describe: 'Generate a public/private key pair',
+      type: 'boolean',
+      default: false
+    })
+}
+
+exports.command = 'key'
+exports.desc = 'Generate a secret PASETO key'
+exports.builder = builder
+exports.handler = key

package/src/commands/push.js

@@ -0,0 +1,19 @@
+'use strict'
+
+const { push } = require('../handlers/push')
+
+const builder = (yargs) => {
+  yargs
+    .option('path', {
+      alias: 'p',
+      group: 'Command options:',
+      type: 'string',
+      desc: 'Path to context',
+      default: '.'
+    })
+}
+
+exports.command = 'push'
+exports.desc = 'Build and push Docker images'
+exports.builder = builder
+exports.handler = push

package/src/commands/replay.js

@@ -4,6 +4,10 @@
 
 const { replay } = require('../handlers/replay')
 
+/*
+!!! OPTIONS MUST BE SYNCHRONIZED WITH ../handlers/.replay/args !!!
+ */
+
 const builder = (yargs) => {
   yargs
     .positional('paths', {
@@ -17,6 +21,12 @@ const builder = (yargs) => {
       group: 'Command options:',
       describe: 'Replay samples for specified component'
     })
+    .option('autonomous', {
+      alias: 'a',
+      type: 'boolean',
+      group: 'Command options:',
+      describe: 'Replay autonomous tests only'
+    })
     .option('integration', {
       alias: 'i',
       type: 'boolean',
@@ -35,6 +45,19 @@ const builder = (yargs) => {
       group: 'Command options:',
       describe: 'Replay samples with titles matching given regexp'
     })
+    .option('dock', {
+      alias: 'd',
+      type: 'boolean',
+      default: false,
+      group: 'Command options:',
+      describe: 'Replay inside Docker container'
+    })
+    .option('context', {
+      group: 'Command options:',
+      type: 'string',
+      desc: 'Path to the Context (used with --dock)',
+      default: '.'
+    })
 }
 
 exports.command = 'replay [paths...]'

package/src/commands/serve.js

@@ -5,15 +5,14 @@ const { serve } = require('../handlers/serve')
 const builder = (yargs) => {
   yargs
     .positional('path', {
-      alias: 'p',
       group: 'Command options:',
       type: 'string',
-      desc: 'Path to package',
+      desc: 'Path or a shortcut of an extension',
       default: '.'
     })
 }
 
 exports.command = 'serve [path]'
-exports.desc = 'Run service'
+exports.desc = 'Run an extension service'
 exports.builder = builder
 exports.handler = serve

package/src/commands/shell.js

@@ -0,0 +1,22 @@
+'use strict'
+
+const { shell } = require('../handlers/shell')
+
+const builder = (yargs) => {
+  yargs
+    .positional('image', {
+      group: 'Command options:',
+      type: 'string',
+      desc: 'Docker image',
+      default: 'alpine'
+    })
+    .example([
+      ['$0 shell'],
+      ['$0 shell -- ping localhost']
+    ])
+}
+
+exports.command = 'shell [image]'
+exports.desc = 'Run interactive shell from the current Kubernetes context'
+exports.builder = builder
+exports.handler = shell

package/src/handlers/build.js

@@ -6,9 +6,9 @@ const { context: find } = require('../util/find')
 
 const build = async (argv) => {
   const path = find(argv.path)
-  const operator = await boot.deployment(path, argv.environment)
+  const registry = await boot.registry(path)
 
-  await operator.build()
+  await registry.build()
 }
 
 exports.build = build

package/src/handlers/compose.js

@@ -1,14 +1,39 @@
 'use strict'
 
+const { pick } = require('@toa.io/generic')
 const boot = require('@toa.io/boot')
+const { version } = require('@toa.io/runtime')
 
+const docker = require('./docker')
 const { components: find } = require('../util/find')
 
+/**
+ * @param {Record<string, string | boolean>} argv
+ * @return {Promise<void>}
+ */
 async function compose (argv) {
+  console.log('Runtime version:', version)
+
+  if (argv.dock === true) return dock(argv)
+
   const paths = find(argv.paths)
   const composition = await boot.composition(paths, argv)
 
   await composition.connect()
+
+  if (argv.kill === true) await composition.disconnect()
+}
+
+/**
+ * @param {Record<string, string | string[] | boolean>} argv
+ * @return {Promise<void>}
+ */
+async function dock (argv) {
+  const repository = await docker.build(argv.context, argv.paths)
+  const args = pick(argv, ['kill', 'bindings'])
+  const command = docker.command('toa compose *', args)
+
+  await docker.run(repository, command, argv.env)
 }
 
 exports.compose = compose

package/src/handlers/conceal.js

@@ -1,11 +1,61 @@
 'use strict'
 
 const { secrets } = require('@toa.io/kubernetes')
+const boot = require('@toa.io/boot')
+const { context: find } = require('../util/find')
+const { promptSecrets } = require('./env')
 
 const conceal = async (argv) => {
-  const { secret, key, value } = argv
+  if (argv.interactive) await concealValues(argv)
+  else await concealValue(argv)
+}
+
+async function concealValue (argv) {
+  if (argv['key-values'].length === 0) throw new Error('Key-values must be passed')
+
+  const values = argv['key-values'].reduce((values, pair) => {
+    const [key, value] = pair.split('=')
+
+    values[key] = value
+
+    return values
+  }, {})
+
+  const secret = PREFIX + argv.secret
+
+  await secrets.upsert(secret, values, argv.namespace)
+}
 
-  await secrets.store(secret, { [key]: value })
+async function concealValues (argv) {
+  const path = find(argv.path)
+  const operator = await boot.deployment(path, argv.environment)
+  const variables = operator.variables()
+  const values = await promptSecrets(variables)
+  const groups = groupValues(values)
+
+  for (const [secret, values] of Object.entries(groups)) {
+    await secrets.upsert(secret, values, argv.namespace)
+  }
+}
+
+/**
+ * @return {Record<string, Record<string, string>>}
+ */
+function groupValues (values) {
+  const secrets = {}
+
+  for (const [key, value] of Object.entries(values)) {
+    const [secret, variable] = key.split('/')
+
+    if (!(secret in secrets)) secrets[secret] = {}
+
+    secrets[secret][variable] = value
+  }
+
+  return secrets
 }
 
+const PREFIX = 'toa-'
+
 exports.conceal = conceal
+exports.PREFIX = PREFIX

package/src/handlers/docker/build.js

@@ -0,0 +1,61 @@
+'use strict'
+
+const { newid } = require('@toa.io/generic')
+const norm = require('@toa.io/norm')
+const { deployment: { Factory } } = require('@toa.io/operations')
+
+const find = require('../../util/find')
+
+/**
+ * @param {string} contextPath
+ * @param {string[]} componentPatterns
+ * @return {Promise<string>}
+ */
+async function build (contextPath, componentPatterns) {
+  const context = await createContext(contextPath, componentPatterns)
+  const factory = new Factory(context)
+  const registry = factory.registry()
+
+  await registry.build()
+
+  const composition = context.compositions[0].name
+
+  return `${context.registry.base === undefined ? '' : context.registry.base + '/'}${context.name}/composition-${composition}`
+}
+
+/**
+ * @param {string} contextPath
+ * @param {string[]} componentPatterns
+ * @return {Promise<toa.norm.Context>}
+ */
+async function createContext (contextPath, componentPatterns) {
+  const contextRoot = find.context(contextPath)
+  const context = await norm.context(contextRoot)
+  const paths = componentPatterns.map((pattern) => find.components(pattern))
+  const components = await loadComponents(paths)
+  const rnd = newid().substring(0, 6)
+  const name = 'replay-' + rnd
+
+  context.name += '-' + rnd
+  context.compositions = [{ name, components }]
+
+  return context
+}
+
+/**
+ * @param {string[]} paths
+ * @return {Promise<toa.norm.Component[]>}
+ */
+async function loadComponents (paths) {
+  const components = []
+
+  for (const path of paths) {
+    const component = await norm.component(path)
+
+    components.push(component)
+  }
+
+  return components
+}
+
+exports.build = build

package/src/handlers/docker/command.js

@@ -0,0 +1,23 @@
+'use strict'
+
+/**
+ * @param {string} command
+ * @param {Record<string, any>} args
+ */
+const command = (command, args) => {
+  const options = []
+
+  for (const [name, value] of Object.entries(args)) {
+    if (value === undefined) continue
+
+    options.push('--' + name)
+
+    if (typeof value !== 'boolean') options.push(`"${value}"`)
+  }
+
+  const argumentLine = options.join(' ')
+
+  return command + ' ' + argumentLine
+}
+
+exports.command = command

package/src/handlers/docker/index.js

@@ -0,0 +1,9 @@
+'use strict'
+
+const { build } = require('./build')
+const { command } = require('./command')
+const { run } = require('./run')
+
+exports.build = build
+exports.command = command
+exports.run = run

package/src/handlers/docker/run.js

@@ -0,0 +1,39 @@
+'use strict'
+
+const { spawn, exec } = require('node:child_process')
+const { promisify } = require('node:util')
+
+const { promex } = require('@toa.io/generic')
+const { file: { dot } } = require('@toa.io/filesystem')
+
+const execute = promisify(exec)
+
+/**
+ * @param {string} repository
+ * @param {string} command
+ * @param {string} [envFile]
+ * @return {Promise<void>}
+ */
+async function run (repository, command, envFile) {
+  if (envFile === undefined) envFile = await dot('env')
+
+  const envArgs = envFile === undefined ? [] : ['--env-file', envFile]
+
+  const found =
+    /** @type {{ stdout: string }} */
+    await execute(`docker images -q ${repository} | head -n 1`)
+
+  const id = found.stdout.trim()
+  const args = ['run', '--rm', ...envArgs, id, 'sh', '-c', command]
+  const done = promex()
+
+  const running = await spawn('docker', args, { stdio: 'inherit' })
+
+  running.on('exit', done.resolve)
+
+  await done
+
+  await execute(`docker rmi --force ${id}`)
+}
+
+exports.run = run

package/src/handlers/env.js

@@ -1,6 +1,9 @@
 'use strict'
 
 const { join } = require('node:path')
+const readline = require('node:readline/promises')
+const { stdin: input, stdout: output } = require('node:process')
+
 const dotenv = require('dotenv')
 const { file } = require('@toa.io/filesystem')
 const boot = require('@toa.io/boot')
@@ -8,17 +11,20 @@ const { context: find } = require('../util/find')
 
 async function env (argv) {
   const path = find(argv.path)
-  const filepath = join(path, '.env')
+  const filepath = join(path, argv.as)
   const operator = await boot.deployment(path, argv.environment)
   const variables = operator.variables()
   const currentValues = await read(filepath)
-  const values = []
 
-  for (const scoped of Object.values(variables)) values.push(...scoped)
+  const result = merge(variables, currentValues)
+
+  if (argv.interactive) {
+    const secrets = await promptSecrets(result)
 
-  const nextValues = merge(values, currentValues)
+    mergeSecrets(result, secrets)
+  }
 
-  await write(filepath, nextValues)
+  await write(filepath, result)
 }
 
 /**
@@ -41,25 +47,71 @@ async function read (path) {
  * @return {Promise<void>}
  */
 async function write (path, values) {
-  const contents = values.reduce((lines, { name, value }) => lines + `${name}=${value}\n`, '')
+  const contents = values.reduce((lines, { name, value }) => lines + `${name}=${value ?? ''}\n`, '')
 
   await file.write(path, contents)
 }
 
 /**
- * @param {toa.deployment.dependency.Variable[] } variables
+ * @param {toa.deployment.dependency.Variable[]} variables
  * @param {Record<string, string>} current
  * @return {toa.deployment.dependency.Variable[]}
  */
 function merge (variables, current) {
   return variables.map((variable) => {
-    if (variable.secret === undefined) return variable
+    if (variable.secret === undefined || !current[variable.name]) return variable
 
     return {
       name: variable.name,
-      value: current[variable.name] ?? ''
+      value: current[variable.name]
     }
   })
 }
 
+async function promptSecrets (variables) {
+  const rl = readline.createInterface({ input, output })
+  const secrets = {}
+
+  for (const variable of variables) {
+    if (variable.secret === undefined) continue
+
+    const key = getKey(variable.secret)
+
+    secrets[key] = await promptSecret(key, rl)
+  }
+
+  rl.close()
+
+  return secrets
+}
+
+async function promptSecret (key, rl) {
+  if (SECRETS[key] === undefined) SECRETS[key] = await rl.question(`${key}: `)
+
+  return SECRETS[key]
+}
+
+/**
+ * @param {toa.deployment.dependency.Variable[]} variables
+ * @param {Record<string, string>} secrets
+ */
+function mergeSecrets (variables, secrets) {
+  for (const variable of variables) {
+    if (variable.secret === undefined) continue
+
+    const key = getKey(variable.secret)
+
+    variable.value = secrets[key]
+
+    delete variable.secret
+  }
+}
+
+function getKey (secret) {
+  return `${secret.name}/${secret.key}`
+}
+
+const SECRETS = {}
+
 exports.env = env
+exports.promptSecrets = promptSecrets

package/src/handlers/export/images.js

@@ -13,4 +13,12 @@ const prepare = async (argv) => {
   console.log(path)
 }
 
+// const prepare = async (argv) => {
+//   const context = find(argv.path)
+//   const registry = await boot.registry(context)
+//   const path = await registry.prepare(argv.target)
+//
+//   console.log(path)
+// }
+
 exports.prepare = prepare

package/src/handlers/key.js

@@ -0,0 +1,16 @@
+'use strict'
+
+const { V3 } = require('paseto')
+
+async function key (argv) {
+  const purpose = argv.public ? 'public' : 'local'
+  const key = await V3.generateKey(purpose, { format: 'paserk' })
+
+  if (argv.public) {
+    console.log(key.secretKey)
+    console.log(key.publicKey)
+  } else
+    console.log(key)
+}
+
+exports.key = key

package/src/handlers/push.js

@@ -0,0 +1,14 @@
+'use strict'
+
+const boot = require('@toa.io/boot')
+
+const { context: find } = require('../util/find')
+
+const push = async (argv) => {
+  const path = find(argv.path)
+  const registry = await boot.registry(path)
+
+  await registry.push()
+}
+
+exports.push = push

package/src/handlers/replay.js

@@ -1,10 +1,17 @@
 'use strict'
 
+const { pick } = require('@toa.io/generic')
+const { context, components } = require('@toa.io/userland/samples')
+
 const find = require('../util/find')
+const docker = require('./docker')
 
+/**
+ * @param {Record<string, string | string[] | boolean>} argv
+ * @return {Promise<void>}
+ */
 async function replay (argv) {
-  // prevent loading userland which is intended for local use only
-  const { context, components } = require('@toa.io/userland/samples')
+  if (argv.dock) return dock(argv)
 
   /** @type {boolean} */
   let ok
@@ -14,9 +21,11 @@ async function replay (argv) {
   /** @type {toa.samples.suite.Options} */
   const options = {
     component: argv.component,
+    autonomous: argv.autonomous,
     integration: argv.integration,
     operation: argv.operation,
-    title: argv.title
+    title: argv.title,
+    runner: { bail: true }
   }
 
   if (paths !== null) {
@@ -36,6 +45,18 @@ async function replay (argv) {
   process.on('beforeExit', () => console.log(message))
 }
 
+/**
+ * @param {Record<string, string | string[] | boolean>} argv
+ * @return {Promise<void>}
+ */
+async function dock (argv) {
+  const repository = await docker.build(argv.context, argv.paths)
+  const args = pick(argv, ['component', 'operation', 'integration', 'title'])
+  const command = docker.command('toa replay *', args)
+
+  await docker.run(repository, command, argv.env)
+}
+
 const GREEN = '\x1b[32m'
 const RED = '\x1b[31m'
 const RESET = '\x1b[0m'

package/src/handlers/reveal.js

@@ -1,13 +1,16 @@
 'use strict'
 
 const { secrets } = require('@toa.io/kubernetes')
-const { remap, decode } = require('@toa.io/generic')
+
+const { PREFIX } = require('./conceal')
 
 const reveal = async (argv) => {
-  const secret = await secrets.get(argv.secret)
-  const values = remap(secret.data, decode)
+  const prefixed = PREFIX + argv.secret
+  const data = await secrets.get(prefixed)
+
+  if (data === null) return
 
-  for (const [key, value] of Object.entries(values)) {
+  for (const [key, value] of Object.entries(data)) {
     const line = `${key}: ${value}`
 
     console.log(line)

package/src/handlers/serve.js

@@ -3,21 +3,22 @@
 const boot = require('@toa.io/boot')
 const { shortcuts } = require('@toa.io/norm')
 const { directory: { find } } = require('@toa.io/filesystem')
+const { version } = require('@toa.io/runtime')
 
 const serve = async (argv) => {
+  console.log('Runtime version:', version)
+
   argv.path = shortcuts.resolve(argv.path)
 
   const module = find(argv.path, process.cwd())
 
   const { Factory } = require(module)
 
-  /** @type {toa.core.extensions.Factory} */
   const factory = new Factory(boot)
 
-  /** @type {toa.core.Connector} */
-  const service = factory.service()
+  if (factory.service === undefined) throw new Error(`Service is not implemented by ${argv.path}`)
 
-  if (service === undefined) throw new Error(`Cannot find service '${argv.name}' in ${argv.path}`)
+  const service = factory.service()
 
   await service.connect()
 

package/src/handlers/shell.js

@@ -0,0 +1,29 @@
+'use strict'
+
+const { spawn } = require('node:child_process')
+const { newid } = require('@toa.io/generic')
+
+const shell = async (argv) => {
+  const rnd = newid().substring(0, 6)
+
+  const args = [
+    'run',
+    'shell-' + rnd,
+    '--rm',
+    '-i',
+    '--tty',
+    '--image',
+    argv.image,
+    '--restart=Never',
+    '--'
+  ]
+
+  const extra = argv._.splice(1)
+
+  if (extra.length > 0) args.push(...extra)
+  else args.push('sh')
+
+  await spawn('kubectl', args, { stdio: 'inherit' })
+}
+
+exports.shell = shell

package/src/program.js

@@ -2,8 +2,6 @@
 
 'use strict'
 
-if (!('TOA_ENV' in process.env)) require('dotenv').config()
-
 const yargs = require('yargs/yargs')
 
 const { console } = require('@toa.io/console')
@@ -18,16 +16,25 @@ yargs(process.argv.slice(2))
 
     console.level(argv.log)
   })
+  .middleware(async (argv) => {
+    if (argv.env === undefined) return
+
+    require('dotenv').config({ path: /** @type {string} */ argv.env })
+  })
   .fail((msg, err) => {
     const actual = err || new Error(msg)
 
-    console.error(process.env.TOA_DEBUG === '1' ? actual : actual.message)
+    console.error(actual)
 
     process.exit(actual.exitCode > 0 ? actual.exitCode : 1)
   })
   .option('log', {
     describe: 'Log level'
   })
+  .option('env', {
+    type: 'string',
+    describe: 'Path to environment variables file (.env format)'
+  })
   .commandDir('./commands')
   .demandCommand(1, 'A command is required. Pass --help to see all available commands and options.')
   .strict()

package/src/util/find.js

@@ -17,7 +17,7 @@ const find = (from, filename, test) => {
 
     if (found.size === 0) {
       if (test === true) return null
-      else throw new Error(`File '${filename}' is found in ${from.join(', ')}`)
+      else throw new Error(`File '${filename}' is not found in ${from.join(', ')}`)
     }
 
     return [...found]

package/src/commands/configure.js

@@ -1,43 +0,0 @@
-'use strict'
-
-const { configure } = require('../handlers/configure')
-
-const builder = (yargs) => {
-  yargs
-    .positional('key', {
-      type: 'string',
-      desc: 'Configuration Object key'
-    })
-    .positional('value', {
-      type: 'string',
-      desc: 'Key value'
-    })
-    .option('path', {
-      alias: 'p',
-      group: 'Command options:',
-      describe: 'Path to component',
-      type: 'string',
-      default: '.'
-    })
-    .option('reset', {
-      group: 'Command options:',
-      type: 'boolean',
-      desc: 'Remove Configuration Object key'
-    })
-    .option('json', {
-      group: 'Command options:',
-      type: 'boolean',
-      desc: 'Print as JSON'
-    })
-    .example([
-      ['$0 configure myKey \'new value\' | source /dev/stdin'],
-      ['$0 configure myObject.myKey --reset | source /dev/stdin'],
-      ['$0 configure reset | source /dev/stdin'],
-      ['$0 configure print --json']
-    ])
-}
-
-exports.command = 'configure [key] [value]'
-exports.desc = 'Output shell command to update local environment Configuration Object'
-exports.builder = builder
-exports.handler = configure

package/src/handlers/.configure/subcommands.js

@@ -1,15 +0,0 @@
-'use strict'
-
-const { dump } = require('@toa.io/yaml')
-
-const reset = (provider) => console.log('unset ' + provider.key)
-
-const print = async (provider, argv) => {
-  await provider.connect()
-
-  const formatter = argv.json ? JSON.stringify : dump
-
-  console.log(formatter(provider.object))
-}
-
-exports.subcommands = { print, reset }

package/src/handlers/configure.js

@@ -1,46 +0,0 @@
-'use strict'
-
-const boot = require('@toa.io/boot')
-
-const { Factory } = require('@toa.io/extensions.configuration')
-
-const { subcommands } = require('./.configure/subcommands')
-const { components: find } = require('../util/find')
-
-async function configure (argv) {
-  const path = find(argv.path)
-  const manifest = await boot.manifest(path)
-  const factory = new Factory()
-  const provider = factory.provider(manifest)
-
-  if (argv.value === undefined && subcommands[argv.key] !== undefined) {
-    await subcommands[argv.key](provider, argv)
-
-    return
-  }
-
-  await provider.connect()
-
-  let key = argv.key
-  let value = argv.value
-
-  // :(
-  if (key !== undefined) {
-    if (value === undefined && key.includes('=')) [key, value] = key.split('=')
-
-    if (value === undefined) {
-      if (argv.reset !== true) throw new Error('Key value expected')
-      else provider.unset(key)
-    } else provider.set(key, value)
-  }
-
-  let command
-  const exported = provider.export()
-
-  if (exported === undefined) command = `unset ${provider.key}`
-  else command = `export ${provider.key}=` + exported
-
-  console.log(command)
-}
-
-exports.configure = configure