@uagents/syncenv-cli 0.1.5 → 0.1.6

package/README.md

@@ -30,85 +30,129 @@ curl -sL https://syncenv-files.uagents.app/cli/install.sh | INSTALL_DIR=~/.local
 
 ## Quick Start
 
-1. **Initialize a project:**
+### One-Command Setup (Recommended)
 
-   ```bash
-   syncenv init
-   ```
-
-2. **Create an account or login:**
-
-   ```bash
-   syncenv auth signup
-   # or
-   syncenv auth login
-   ```
+```bash
+syncenv setup
+```
 
-3. **Create a project on the server:**
+The `setup` wizard will:
+1. Check if you're authenticated (prompt for login/signup if not)
+2. Guide you through account creation if needed
+3. Automatically generate your encryption keys
+4. Save keys to server and cache locally
 
-   ```bash
-   syncenv project create
-   ```
+### Then Initialize Your Project
 
-4. **Push your .env file:**
+```bash
+cd ~/my-project
+syncenv init
+syncenv env push
+```
 
-   ```bash
-   syncenv env push
-   ```
+## Commands
 
-5. **Pull environment variables:**
-   ```bash
-   syncenv env pull
-   ```
+### Setup
 
-## Commands
+- `syncenv setup` - First-time setup wizard (login + encryption keys)
+  - `--debug` - Enable debug mode with verbose logging
 
 ### Authentication
 
-- `syncenv auth signup` - Create a new account
 - `syncenv auth login` - Login to your account
+  - `--debug` - Enable debug mode
 - `syncenv auth logout` - Logout and clear session
 - `syncenv auth status` - Check authentication status
+- `syncenv auth signup` - Open browser to create account
 
 ### Project Management
 
-- `syncenv init` - Initialize project configuration
+- `syncenv init` - Initialize project configuration (creates `.syncenvrc` and optionally creates project on server)
+  - `-y, --yes` - Skip prompts and use defaults
+  - `--debug` - Enable debug mode
+
+  **Note:** Environments are created automatically on first push. Run `syncenv env push -e <env>` to create and upload to an environment.
 - `syncenv project list` - List all projects
+  - `-s, --search <query>` - Search projects by name
+  - `-l, --limit <number>` - Number of projects to show (default: 20)
+  - `--cursor <cursor>` - Cursor for pagination
+  - `--debug` - Enable debug mode
 - `syncenv project create [name]` - Create a new project
-- `syncenv project get <id>` - Get project details
-- `syncenv project delete <id>` - Delete a project
-- `syncenv project use <id>` - Set default project
+  - `-d, --description <description>` - Project description
+  - `--debug` - Enable debug mode
+- `syncenv project get <identifier>` - Get project details. Identifier can be project ID (`proj_xxx`) or project name
+  - `--debug` - Enable debug mode
+- `syncenv project delete <identifier>` - Delete a project. Identifier can be project ID (`proj_xxx`) or project name
+  - `-f, --force` - Skip confirmation
+  - `--debug` - Enable debug mode
+- `syncenv project use <identifier>` - Set default project for current directory (updates `.syncenvrc`). Identifier can be project ID (`proj_xxx`) or project name
+  - `--debug` - Enable debug mode
+
+### Configuration Management
+
+- `syncenv config list` - List all configuration values
+  - `--debug` - Enable debug mode
+- `syncenv config get <key>` - Get a configuration value
+  - `--debug` - Enable debug mode
+- `syncenv config set <key> [value]` - Set a configuration value
+  - `--debug` - Enable debug mode
+- `syncenv config delete <key>` - Delete a configuration value (reset to default)
+  - `--debug` - Enable debug mode
+- `syncenv config reset` - Reset all configuration to defaults
+  - `-f, --force` - Skip confirmation
+  - `--debug` - Enable debug mode
+- `syncenv config path` - Show configuration file path
 
 ### Environment Variables
 
 - `syncenv env push` - Push .env file to server
-  - `-p, --project <id>` - Project ID
-  - `-e, --env <name>` - Environment name
+  - `-p, --project <id>` - Project ID (or use `.syncenvrc` project.id)
+  - `-e, --env <name>` - Environment name (default: dev)
   - `-f, --file <path>` - File path
   - `-m, --message <message>` - Change description
-
+  - `--force` - Force push without conflict check
+  - `--strategy <strategy>` - Merge strategy on conflict
+  - `--debug` - Enable debug mode
 - `syncenv env pull` - Pull .env file from server
   - `-p, --project <id>` - Project ID
   - `-e, --env <name>` - Environment name
   - `-f, --file <path>` - Output file path
   - `-v, --version <number>` - Specific version to pull
   - `-m, --merge` - Merge with existing file
-
+  - `--debug` - Enable debug mode
+- `syncenv env sync` - Smart sync (pull + merge + push)
+  - `--strategy <strategy>` - Conflict resolution: `interactive`, `local-wins`, `remote-wins`, `fail-on-conflict`
+  - `--dry-run` - Preview changes without applying
+  - `-y, --yes` - Skip confirmation prompts
+  - `--debug` - Enable debug mode
 - `syncenv env history` - Show version history
   - `-l, --limit <number>` - Number of versions to show
-
+  - `--debug` - Enable debug mode
 - `syncenv env diff <v1> <v2>` - Compare two versions
-
+  - `--debug` - Enable debug mode
 - `syncenv env rollback <version>` - Rollback to a specific version
-
-- `syncenv env sync` - Smart sync (pull + merge + push)
-  - `--dry-run` - Preview changes without applying
-  - `--strategy <strategy>` - Conflict resolution: `local-wins`, `remote-wins`, `interactive`
-  - `-y, --yes` - Skip confirmation prompts
+  - `-f, --force` - Skip confirmation
+  - `--debug` - Enable debug mode
+
+### User Keys (Encryption Management)
+
+- `syncenv user-keys setup` - Initialize encryption keys (first time)
+  - `--debug` - Enable debug mode
+- `syncenv user-keys unlock` - Unlock encryption keys for session
+  - `--no-remember` - Do not store in keychain
+  - `--debug` - Enable debug mode
+- `syncenv user-keys lock` - Lock keys from memory
+  - `--forget` - Also remove from keychain
+  - `--debug` - Enable debug mode
+- `syncenv user-keys status` - Check encryption key status
+  - `--debug` - Enable debug mode
+- `syncenv user-keys rotate` - Re-encrypt keys with new password
+  - `--debug` - Enable debug mode
 
 ### Device Management
 
 - `syncenv device list` - List all devices
+  - `--debug` - Enable debug mode
 - `syncenv device authorize <id>` - Authorize a pending device
 - `syncenv device revoke <id>` - Revoke a device
 - `syncenv device remove <id>` - Remove a device
@@ -117,6 +161,7 @@ curl -sL https://syncenv-files.uagents.app/cli/install.sh | INSTALL_DIR=~/.local
 ### Diagnostics
 
 - `syncenv doctor` - Diagnose configuration and connectivity issues
+  - `--debug` - Enable debug mode
 
 ## Smart Merge
 
@@ -151,14 +196,18 @@ syncenv env push --strategy=fail-on-conflict
 
 ### CLI Config
 
-Stored in OS-specific config directory (e.g., `~/.config/syncenv/` on Linux).
+Stored in OS-specific config directory:
+- **macOS:** `~/Library/Application Support/syncenv/`
+- **Linux:** `~/.config/syncenv/`
+- **Windows:** `%APPDATA%/syncenv/`
 
-- `apiUrl` - API base URL
-- `authToken` - Authentication token
+Contains:
+- `apiUrl` - API base URL (default: https://syncenv-api.uagents.app)
+- `autoLockMinutes` - Auto-lock timeout in minutes (0 to disable, default: 30)
 - `userId` - User ID
-- `deviceId` - Device ID
+- `userEmail` - User email
 
-### Project Config (`.envsyncrc`)
+### Project Config (`.syncenvrc`)
 
 Example:
 
@@ -188,16 +237,125 @@ environments:
 
 ## Environment Variables
 
-- `SYNCENV_API_URL` - API base URL (default: http://localhost:8787)
+- `SYNCENV_API_URL` - API base URL (default: https://syncenv-api.uagents.app)
+- `SYNCENV_DEBUG` - Enable debug mode (set to `true`)
 - `SYNCENV_VERBOSE` - Enable verbose logging
 
+## Common Workflows
+
+### First-Time Setup
+
+```bash
+# Install CLI
+curl -sL https://syncenv-files.uagents.app/cli/install.sh | bash
+
+# Run setup wizard
+syncenv setup
+
+# Initialize your project
+cd ~/my-project
+syncenv init
+
+# Push your first environment
+syncenv env push -m "Initial setup"
+```
+
+### Daily Development
+
+```bash
+# Unlock keys (cached in keychain by default)
+syncenv user-keys unlock
+
+# Sync environment (pull + merge + push)
+syncenv env sync
+
+# Make changes to .env...
+
+# Push with message
+syncenv env push -m "Added Stripe API keys"
+
+# Lock when done (optional on personal machine)
+syncenv user-keys lock
+```
+
+### Working with Multiple Environments
+
+```bash
+# Push to specific environment
+syncenv env push -e production -m "Database migration config"
+
+# Pull from staging
+syncenv env pull -e staging
+
+# Sync with specific strategy
+syncenv env sync -e production --strategy=interactive
+```
+
+### CI/CD Pipeline
+
+```bash
+# Non-interactive pull
+syncenv env pull -e production -y
+
+# Or with specific strategy
+syncenv env sync -e production --strategy=local-wins -y
+```
+
+## Troubleshooting
+
+### Debug Mode
+
+Most commands support `--debug` flag:
+
+```bash
+syncenv setup --debug
+syncenv auth login --debug
+syncenv env push --debug
+```
+
+### Common Issues
+
+**"Not authenticated" error:**
+```bash
+syncenv auth login
+# or
+syncenv setup
+```
+
+**"Encryption keys are locked" error:**
+```bash
+syncenv user-keys unlock
+```
+
+**"No project specified" error:**
+```bash
+# Option 1: Set project in .syncenvrc (supports ID or name)
+syncenv project use my-project-name
+# or
+syncenv project use proj_xxx
+
+# Option 2: Use --project flag
+syncenv env push --project proj_xxx
+```
+
+**Merge conflicts:**
+```bash
+# Interactive resolution
+syncenv env sync --strategy=interactive
+
+# Or force local changes
+syncenv env push --force
+```
+
 ## Security
 
 - All encryption/decryption happens locally on your device
-- Master password never leaves your device
+- Your login password never leaves your device
 - Data Encryption Keys (DEK) are encrypted with your Key Encryption Key (KEK)
-- KEK is derived from your master password using Argon2id
+- KEK is derived from your login password using PBKDF2
 - Server only stores encrypted data and cannot decrypt your environment variables
+- Keys are cached in system keychain by default (use `--no-remember` to disable)
+- Always run `syncenv user-keys lock` when done on shared machines
 
 ## License
 

package/dist/{chunk-JBMZAAVP.js → chunk-LWTV6MO2.js}

@@ -2,7 +2,7 @@ import {
   deleteConfig,
   getConfig,
   setConfig
-} from "./chunk-OVEYHV4C.js";
+} from "./chunk-YXE467TO.js";
 
 // src/secure-storage.ts
 var SERVICE_NAME = "syncenv-cli";

package/dist/{chunk-OVEYHV4C.js → chunk-YXE467TO.js}

@@ -6,6 +6,7 @@ import chalk from "chalk";
 import Conf from "conf";
 import yaml from "js-yaml";
 import { z } from "zod";
+import inquirer from "inquirer";
 var ProjectConfigSchema = z.object({
   project: z.object({
     name: z.string(),
@@ -28,7 +29,7 @@ var ProjectConfigSchema = z.object({
   )
 });
 var defaultConfig = {
-  apiUrl: process.env.SYNCENV_API_URL || "https://syncenv.uagents.app"
+  apiUrl: process.env.SYNCENV_API_URL || "https://syncenv-api.uagents.app"
 };
 var conf;
 try {
@@ -57,6 +58,9 @@ function setConfig(key, value) {
 function deleteConfig(key) {
   conf.delete(key);
 }
+function clearConfig() {
+  conf.clear();
+}
 function getConfigPath() {
   return conf.path;
 }
@@ -65,7 +69,7 @@ function isAuthenticated() {
   return !!cookieHeader && cookieHeader.includes("better-auth");
 }
 async function loadProjectConfig(cwd = process.cwd()) {
-  const configPath = path.join(cwd, ".envsyncrc");
+  const configPath = path.join(cwd, ".syncenvrc");
   try {
     const content = await fs.readFile(configPath, "utf-8");
     const parsed = yaml.load(content);
@@ -74,17 +78,17 @@ async function loadProjectConfig(cwd = process.cwd()) {
     if (error.code === "ENOENT") {
       return null;
     }
-    throw new Error(`Failed to parse .envsyncrc: ${error.message}`);
+    throw new Error(`Failed to parse .syncenvrc: ${error.message}`);
   }
 }
 async function saveProjectConfig(config, cwd = process.cwd()) {
-  const configPath = path.join(cwd, ".envsyncrc");
+  const configPath = path.join(cwd, ".syncenvrc");
   const content = yaml.dump(config, { indent: 2 });
   await fs.writeFile(configPath, content, "utf-8");
 }
 async function hasProjectConfig(cwd = process.cwd()) {
   try {
-    await fs.access(path.join(cwd, ".envsyncrc"));
+    await fs.access(path.join(cwd, ".syncenvrc"));
     return true;
   } catch {
     return false;
@@ -99,10 +103,15 @@ async function loadConfig() {
   };
 }
 async function fetchWithCookies(input, init) {
+  const apiUrl = conf.get("apiUrl") || defaultConfig.apiUrl;
+  const webOrigin = apiUrl.replace("-api", "");
+  const origin = apiUrl.startsWith("http://localhost") ? apiUrl : webOrigin;
   if (input instanceof Request) {
     const url2 = input.url;
     const cookieHeader2 = getCookieHeader();
-    const headers2 = {};
+    const headers2 = {
+      Origin: origin
+    };
     input.headers.forEach((value, key) => {
       headers2[key] = value;
     });
@@ -123,7 +132,8 @@ async function fetchWithCookies(input, init) {
   const url = input.toString();
   const cookieHeader = getCookieHeader();
   const headers = {
-    ...init?.headers
+    ...init?.headers,
+    Origin: origin
   };
   if (cookieHeader) {
     headers["Cookie"] = cookieHeader;
@@ -149,7 +159,7 @@ function createClient() {
 }
 var client = createClient();
 async function clearAuthState() {
-  const { clearCachedKEK, deleteKEKPassword, deleteEncryptedKEK } = await import("./secure-storage-UEK3LD5L.js");
+  const { clearCachedKEK, deleteKEKPassword, deleteEncryptedKEK } = await import("./secure-storage-AR7HZFTA.js");
   clearCachedKEK();
   await deleteKEKPassword();
   deleteEncryptedKEK();
@@ -181,7 +191,7 @@ function handleAuthError(_error) {
   process.exit(1);
 }
 async function getOrUnlockUserKEK() {
-  const { getCachedKEK, cacheKEKInMemory, getKEKPassword, saveEncryptedKEK } = await import("./secure-storage-UEK3LD5L.js");
+  const { getCachedKEK, cacheKEKInMemory, getKEKPassword, saveEncryptedKEK } = await import("./secure-storage-AR7HZFTA.js");
   const cached = getCachedKEK();
   if (cached) return cached;
   const password = await getKEKPassword();
@@ -196,7 +206,7 @@ async function getOrUnlockUserKEK() {
       userKeys.kekSalt
     );
     if (!kek) {
-      const { deleteKEKPassword } = await import("./secure-storage-UEK3LD5L.js");
+      const { deleteKEKPassword } = await import("./secure-storage-AR7HZFTA.js");
       await deleteKEKPassword();
       return null;
     }
@@ -225,6 +235,34 @@ async function withAuthGuard(apiCall) {
     throw error;
   }
 }
+async function resolveProjectIdentifier(identifier) {
+  if (identifier.startsWith("proj_")) {
+    try {
+      return await withAuthGuard(() => client.projects.get(identifier));
+    } catch (err) {
+      if (err instanceof ApiError && err.statusCode === 404) {
+        throw new Error(`Project not found: ${identifier}`);
+      }
+      throw err;
+    }
+  }
+  const result = await withAuthGuard(() => client.projects.getByName(identifier));
+  if ("error" in result && "projects" in result) {
+    const { selectedId } = await inquirer.prompt([
+      {
+        type: "list",
+        name: "selectedId",
+        message: `Multiple projects match "${identifier}". Select one:`,
+        choices: result.projects.map((p) => ({
+          name: `${p.name} (ID: ${p.id}, Updated: ${new Date(p.updatedAt).toLocaleDateString()})`,
+          value: p.id
+        }))
+      }
+    ]);
+    return result.projects.find((p) => p.id === selectedId);
+  }
+  return result;
+}
 
 // src/cookie-store.ts
 function parseSetCookie(setCookieValue) {
@@ -320,6 +358,7 @@ export {
   getConfig,
   setConfig,
   deleteConfig,
+  clearConfig,
   getConfigPath,
   isAuthenticated,
   loadProjectConfig,
@@ -329,5 +368,6 @@ export {
   client,
   clearAuthState,
   getOrUnlockUserKEK,
-  withAuthGuard
+  withAuthGuard,
+  resolveProjectIdentifier
 };

package/dist/{cookie-store-Z6DNTUGS.js → cookie-store-UGGEBXBV.js}

@@ -5,7 +5,7 @@ import {
   loadCookies,
   saveCookies,
   storeCookies
-} from "./chunk-OVEYHV4C.js";
+} from "./chunk-YXE467TO.js";
 export {
   clearCookies,
   getCookieHeader,