@vibesdotdev/secrets 0.0.1

package/dist/cli/import/secrets.import.cli-command.impl.js

@@ -0,0 +1,155 @@
+import { resolve } from 'node:path';
+import { readFile } from 'node:fs/promises';
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { canonicalImportManifest } from '../../manifest/canonical';
+import { resolveSecretsEnvironment } from '../shared/resolve-environment';
+/**
+ * Tiny line-oriented .env parser. Returns a flat KEY → value map.
+ * Quoted values are unwrapped. Comments and blank lines are ignored.
+ * Missing files yield an empty map (not an error) — sources are bootstrap inputs.
+ */
+async function readEnvFile(path) {
+    let content;
+    try {
+        content = await readFile(path, 'utf-8');
+    }
+    catch {
+        return {};
+    }
+    const result = {};
+    for (const raw of content.split('\n')) {
+        const line = raw.trim();
+        if (line === '' || line.startsWith('#'))
+            continue;
+        const eqIdx = raw.indexOf('=');
+        if (eqIdx === -1)
+            continue;
+        const key = raw.slice(0, eqIdx).trim();
+        let value = raw.slice(eqIdx + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        result[key] = value;
+    }
+    return result;
+}
+function pickValue(envMap, key, aliases) {
+    if (envMap[key] !== undefined && envMap[key] !== '')
+        return envMap[key];
+    for (const alias of aliases) {
+        if (envMap[alias] !== undefined && envMap[alias] !== '')
+            return envMap[alias];
+    }
+    return undefined;
+}
+export default {
+    async execute(_args, opts) {
+        const runtime = getVibesRuntime();
+        const ui = (await runtime.context('cli/ui'));
+        const options = opts;
+        const { name: envName, tier: envTier } = await resolveSecretsEnvironment(ui, options.environment);
+        const sourceFilter = options.source;
+        if (sourceFilter && !canonicalImportManifest.sources[sourceFilter]) {
+            ui.error(`Unknown source: ${sourceFilter}. Known: ${Object.keys(canonicalImportManifest.sources).join(', ')}`);
+            process.exit(1);
+        }
+        const repoRoot = process.cwd();
+        const sourceContents = new Map();
+        const manualSources = new Set();
+        for (const [id, src] of Object.entries(canonicalImportManifest.sources)) {
+            if (sourceFilter && id !== sourceFilter)
+                continue;
+            if (!src.path) {
+                manualSources.add(id);
+                continue;
+            }
+            sourceContents.set(id, await readEnvFile(resolve(repoRoot, src.path)));
+        }
+        const found = {};
+        const missingRequired = [];
+        const missingOptional = [];
+        const manualEntries = [];
+        for (const entry of canonicalImportManifest.secrets) {
+            if (sourceFilter && entry.source !== sourceFilter)
+                continue;
+            if (manualSources.has(entry.source)) {
+                manualEntries.push({ key: entry.key, required: entry.required });
+                continue;
+            }
+            const sourceMap = sourceContents.get(entry.source);
+            if (!sourceMap) {
+                if (entry.required)
+                    missingRequired.push(entry.key);
+                else
+                    missingOptional.push(entry.key);
+                continue;
+            }
+            const value = pickValue(sourceMap, entry.key, entry.aliases);
+            if (value === undefined) {
+                if (entry.required)
+                    missingRequired.push(entry.key);
+                else
+                    missingOptional.push(entry.key);
+                continue;
+            }
+            found[entry.key] = value;
+        }
+        const foundCount = Object.keys(found).length;
+        if (options.dryRun) {
+            ui.log(`\nDry run: would import ${foundCount} secret(s) for ${envName}\n`);
+            for (const key of Object.keys(found).sort())
+                ui.log(`  + ${key}`);
+            if (missingRequired.length) {
+                ui.log(`\n  ${missingRequired.length} required secret(s) not found:`);
+                for (const key of missingRequired)
+                    ui.log(`  ! ${key}`);
+            }
+            if (missingOptional.length) {
+                ui.log(`\n  ${missingOptional.length} optional secret(s) not found:`);
+                for (const key of missingOptional)
+                    ui.log(`  ? ${key}`);
+            }
+            if (manualEntries.length) {
+                ui.log(`\n  ${manualEntries.length} manual entry/entries (set via 'vibes secrets set'):`);
+                for (const { key, required } of manualEntries) {
+                    ui.log(`  m ${key} (${required ? 'required' : 'optional'})`);
+                }
+            }
+            ui.log('');
+            return;
+        }
+        if (foundCount === 0) {
+            ui.warn('No secrets found in any source file. Nothing to import.');
+            if (missingRequired.length > 0)
+                process.exit(1);
+            return;
+        }
+        const descriptors = runtime.assets('secrets/store').descriptors();
+        const targetId = options.to ?? 'encrypted-local';
+        const target = descriptors.find((d) => d.id === targetId)
+            ?? descriptors.filter((d) => d.tiers.includes(envTier) && d.backend === 'encrypted-local')[0];
+        if (!target) {
+            ui.error(`No backend available with id [${targetId}] for tier ${envTier}`);
+            process.exit(1);
+        }
+        const impl = (await runtime
+            .query('secrets/store')
+            .withId(target.id)
+            .resolve());
+        await impl.setAll(envName, found);
+        ui.success(`Imported ${foundCount} secret(s) into [${target.id}] for ${envName}`);
+        const missingManualRequired = manualEntries.filter((e) => e.required).map((e) => e.key);
+        if (manualEntries.length > 0) {
+            ui.info(`${manualEntries.length} manual entry/entries — set via 'vibes secrets set <KEY>' (${missingManualRequired.length} required)`);
+        }
+        if (missingRequired.length > 0) {
+            ui.warn(`${missingRequired.length} required secret(s) missing from sources: ${missingRequired.join(', ')}`);
+            process.exit(1);
+        }
+        if (missingOptional.length > 0) {
+            ui.info(`${missingOptional.length} optional secret(s) skipped: ${missingOptional.join(', ')}`);
+        }
+    }
+};
+//# sourceMappingURL=secrets.import.cli-command.impl.js.map

package/dist/cli/import/secrets.import.cli-command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.import.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/import/secrets.import.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IACC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC7C,CAAC;YACF,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CACjB,MAA8B,EAC9B,GAAW,EACX,OAAiB;IAEjB,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACxE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,IAA6B;QAC1E,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAc,CAAC;QAC1D,MAAM,OAAO,GAAG,IAKf,CAAC;QAEF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CACvE,EAAE,EACF,OAAO,CAAC,WAAW,CACnB,CAAC;QAEF,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,IAAI,YAAY,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,EAAE,CAAC,KAAK,CAAC,mBAAmB,YAAY,YAAY,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkC,CAAC;QACjE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,IAAI,YAAY,IAAI,EAAE,KAAK,YAAY;gBAAE,SAAS;YAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACf,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtB,SAAS;YACV,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,MAAM,aAAa,GAAyC,EAAE,CAAC;QAE/D,KAAK,MAAM,KAAK,IAAI,uBAAuB,CAAC,OAAO,EAAE,CAAC;YACrD,IAAI,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;gBAAE,SAAS;YAC5D,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACjE,SAAS;YACV,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,IAAI,KAAK,CAAC,QAAQ;oBAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;;oBAC/C,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,SAAS;YACV,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,QAAQ;oBAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;;oBAC/C,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,SAAS;YACV,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAE7C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,EAAE,CAAC,GAAG,CAAC,2BAA2B,UAAU,kBAAkB,OAAO,IAAI,CAAC,CAAC;YAC3E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;gBAAE,EAAE,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;YAClE,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;gBAC5B,EAAE,CAAC,GAAG,CAAC,OAAO,eAAe,CAAC,MAAM,gCAAgC,CAAC,CAAC;gBACtE,KAAK,MAAM,GAAG,IAAI,eAAe;oBAAE,EAAE,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;gBAC5B,EAAE,CAAC,GAAG,CAAC,OAAO,eAAe,CAAC,MAAM,gCAAgC,CAAC,CAAC;gBACtE,KAAK,MAAM,GAAG,IAAI,eAAe;oBAAE,EAAE,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;gBAC1B,EAAE,CAAC,GAAG,CAAC,OAAO,aAAa,CAAC,MAAM,sDAAsD,CAAC,CAAC;gBAC1F,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,aAAa,EAAE,CAAC;oBAC/C,EAAE,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;gBAC9D,CAAC;YACF,CAAC;YACD,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACX,OAAO;QACR,CAAC;QAED,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACtB,EAAE,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACnE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChD,OAAO;QACR,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAA8B,CAAC;QAC9F,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,IAAI,iBAAiB,CAAC;QACjD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;eACrD,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/F,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,EAAE,CAAC,KAAK,CAAC,iCAAiC,QAAQ,cAAc,OAAO,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO;aACzB,KAAK,CAAC,eAAe,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aACjB,OAAO,EAAE,CAA+B,CAAC;QAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAElC,EAAE,CAAC,OAAO,CAAC,YAAY,UAAU,oBAAoB,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC,CAAC;QAElF,MAAM,qBAAqB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,IAAI,CACN,GAAG,aAAa,CAAC,MAAM,8DACtB,qBAAqB,CAAC,MACvB,YAAY,CACZ,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,6CAA6C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,gCAAgC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/list/secrets.list.cli-command.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/cli/schemas/types';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=secrets.list.cli-command.descriptor.d.ts.map

package/dist/cli/list/secrets.list.cli-command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.list.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/list/secrets.list.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAEhF,QAAA,MAAM,UAAU,EAAE,yBAgBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/list/secrets.list.cli-command.descriptor.js

@@ -0,0 +1,18 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'secrets.list',
+    name: 'list',
+    description: 'List secrets for the current environment',
+    group: 'secrets',
+    options: [
+        { flags: '--environment <name>', description: 'Target environment (default: current)' },
+        { flags: '--backend <id>', description: 'Filter to a specific backend' },
+        { flags: '--json', description: 'Output as JSON' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 10
+};
+export default descriptor;
+//# sourceMappingURL=secrets.list.cli-command.descriptor.js.map

package/dist/cli/list/secrets.list.cli-command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.list.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/list/secrets.list.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,0CAA0C;IACvD,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACvF,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAExE,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;KAClD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;CACT,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/list/secrets.list.cli-command.impl.d.ts

@@ -0,0 +1,5 @@
+declare const _default: {
+    execute(_args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=secrets.list.cli-command.impl.d.ts.map

package/dist/cli/list/secrets.list.cli-command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.list.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/list/secrets.list.cli-command.impl.ts"],"names":[],"mappings":";mBAQsB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD5F,wBAuEE"}

package/dist/cli/list/secrets.list.cli-command.impl.js

@@ -0,0 +1,61 @@
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { resolveSecretRequirements } from '../../requirements/resolver';
+import { resolveSecretsEnvironment } from '../shared/resolve-environment';
+export default {
+    async execute(_args, opts) {
+        const runtime = getVibesRuntime();
+        const ui = (await runtime.context('cli/ui'));
+        const options = opts;
+        const { name: envName, tier: envTier } = await resolveSecretsEnvironment(ui, options.environment);
+        const descriptors = runtime.assets('secrets/store').descriptors();
+        const matching = descriptors.filter((d) => {
+            if (options.backend && d.id !== options.backend)
+                return false;
+            return d.tiers.includes(envTier);
+        });
+        const aggregated = new Map();
+        const storesByPriority = [...matching].sort((a, b) => (a.priority ?? 0) - (b.priority ?? 0));
+        for (const desc of storesByPriority) {
+            const impl = (await runtime
+                .query('secrets/store')
+                .withId(desc.id)
+                .resolve());
+            const entries = await impl.list(envName);
+            for (const entry of entries) {
+                aggregated.set(entry.key, entry);
+            }
+        }
+        const entries = [...aggregated.values()].sort((a, b) => a.key.localeCompare(b.key));
+        if (options.json) {
+            const secrets = entries.map((e) => ({ key: e.key, hasValue: e.hasValue, source: e.source }));
+            ui.render({ environment: envName, secrets }, { format: 'json' });
+            return;
+        }
+        if (entries.length === 0) {
+            ui.info(`No secrets found for environment: ${envName}`);
+            return;
+        }
+        ui.log(`\nSecrets for environment: ${envName}\n`);
+        ui.log('  KEY'.padEnd(45) + 'SOURCE'.padEnd(20) + 'STATUS');
+        ui.log('  ' + '─'.repeat(70));
+        for (const entry of entries) {
+            const status = entry.hasValue ? 'set' : 'empty';
+            ui.log(`  ${entry.key.padEnd(43)} ${entry.source.padEnd(18)} ${status}`);
+        }
+        ui.log('');
+        try {
+            const requirements = await resolveSecretRequirements(runtime);
+            const required = requirements.filter((r) => r.required);
+            const setKeys = new Set(entries.filter((e) => e.hasValue).map((e) => e.key));
+            const missing = required.filter((r) => !setKeys.has(r.key));
+            if (missing.length > 0) {
+                ui.log(`  ${missing.length} required secret(s) missing. Run 'vibes secrets check' for details.`);
+                ui.log('');
+            }
+        }
+        catch {
+            // infra kinds may not be loaded in all contexts
+        }
+    }
+};
+//# sourceMappingURL=secrets.list.cli-command.impl.js.map

package/dist/cli/list/secrets.list.cli-command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.list.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/list/secrets.list.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,IAA6B;QAC1E,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAc,CAAC;QAC1D,MAAM,OAAO,GAAG,IAIf,CAAC;QAEF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CACvE,EAAE,EACF,OAAO,CAAC,WAAW,CACnB,CAAC;QAEF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAA8B,CAAC;QAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACzC,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC9D,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,MAAM,gBAAgB,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAE7F,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO;iBACzB,KAAK,CAAC,eAAe,CAAC;iBACtB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;iBACf,OAAO,EAAE,CAA+B,CAAC;YAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACF,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7F,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,IAAI,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO;QACR,CAAC;QAED,EAAE,CAAC,GAAG,CAAC,8BAA8B,OAAO,IAAI,CAAC,CAAC;QAClD,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5D,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAChD,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEX,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,qEAAqE,CAAC,CAAC;gBACjG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACZ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,gDAAgD;QACjD,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/cli/schemas/types';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=secrets.pre-commit-check.cli-command.descriptor.d.ts.map

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pre-commit-check.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/pre-commit/secrets.pre-commit-check.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAEhF,QAAA,MAAM,UAAU,EAAE,yBAajB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.descriptor.js

@@ -0,0 +1,16 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'dev.secrets.pre-commit-check',
+    name: 'pre-commit-check',
+    description: 'Run secrets pattern detection on staged files',
+    group: 'secrets',
+    options: [
+        { flags: '--workspace <path>', description: 'Workspace root (default: cwd)' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 1
+};
+export default descriptor;
+//# sourceMappingURL=secrets.pre-commit-check.cli-command.descriptor.js.map

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pre-commit-check.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/pre-commit/secrets.pre-commit-check.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,8BAA8B;IAClC,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,+CAA+C;IAC5D,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,+BAA+B,EAAE;KAC7E;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,CAAC;CACR,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.impl.d.ts

@@ -0,0 +1,5 @@
+declare const _default: {
+    execute(_args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=secrets.pre-commit-check.cli-command.impl.d.ts.map

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pre-commit-check.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/pre-commit/secrets.pre-commit-check.cli-command.impl.ts"],"names":[],"mappings":";mBAGsB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD5F,wBAQE"}

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.impl.js

@@ -0,0 +1,10 @@
+import { runSecretsPreCommitCheck } from '../hooks/pre-commit-secrets.js';
+export default {
+    async execute(_args, opts) {
+        const options = opts;
+        const workspacePath = options.workspace ?? process.cwd();
+        const exitCode = await runSecretsPreCommitCheck(workspacePath);
+        process.exit(exitCode);
+    }
+};
+//# sourceMappingURL=secrets.pre-commit-check.cli-command.impl.js.map

package/dist/cli/pre-commit/secrets.pre-commit-check.cli-command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pre-commit-check.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/pre-commit/secrets.pre-commit-check.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,IAA6B;QAC1E,MAAM,OAAO,GAAG,IAA8B,CAAC;QAC/C,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,aAAa,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;CACD,CAAC"}

package/dist/cli/pull/secrets.pull.cli-command.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/cli/schemas/types';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=secrets.pull.cli-command.descriptor.d.ts.map

package/dist/cli/pull/secrets.pull.cli-command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pull.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/pull/secrets.pull.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAEhF,QAAA,MAAM,UAAU,EAAE,yBAiBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/pull/secrets.pull.cli-command.descriptor.js

@@ -0,0 +1,20 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'secrets.pull',
+    name: 'pull',
+    description: 'Pull secrets from a remote backend to local store',
+    group: 'secrets',
+    options: [
+        { flags: '--environment <name>', description: 'Target environment (default: current)' },
+        { flags: '--from <backend>', description: 'Source remote backend (default: vault)' },
+        { flags: '--to <backend>', description: 'Target local backend (default: encrypted-local)' },
+        { flags: '--key <key>', description: 'Pull only one secret key (repeat or comma-separate for multiple keys)' },
+        { flags: '--dry-run', description: 'Show what would be pulled without pulling' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 70
+};
+export default descriptor;
+//# sourceMappingURL=secrets.pull.cli-command.descriptor.js.map

package/dist/cli/pull/secrets.pull.cli-command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pull.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/pull/secrets.pull.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,mDAAmD;IAChE,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACvF,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,wCAAwC,EAAE;QACpF,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,iDAAiD,EAAE;QAC3F,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,uEAAuE,EAAE;QAC9G,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,2CAA2C,EAAE;KAChF;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;CACT,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/pull/secrets.pull.cli-command.impl.d.ts

@@ -0,0 +1,5 @@
+declare const _default: {
+    execute(_args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=secrets.pull.cli-command.impl.d.ts.map

package/dist/cli/pull/secrets.pull.cli-command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pull.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/pull/secrets.pull.cli-command.impl.ts"],"names":[],"mappings":";mBAuBsB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD5F,wBAgFE"}

package/dist/cli/pull/secrets.pull.cli-command.impl.js

@@ -0,0 +1,76 @@
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { resolveSecretsEnvironment } from '../shared/resolve-environment';
+const LOCAL_BACKENDS = new Set(['env-file', 'encrypted-local']);
+const REMOTE_BACKENDS = new Set(['cloudflare-api', 'vault']);
+function parseKeyFilter(value) {
+    const rawValues = Array.isArray(value)
+        ? value.filter((entry) => typeof entry === 'string')
+        : typeof value === 'string'
+            ? [value]
+            : [];
+    const keys = rawValues
+        .flatMap((entry) => entry.split(','))
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+    return keys.length > 0 ? new Set(keys) : undefined;
+}
+export default {
+    async execute(_args, opts) {
+        const runtime = getVibesRuntime();
+        const ui = (await runtime.context('cli/ui'));
+        const options = opts;
+        const { name: envName, tier: envTier } = await resolveSecretsEnvironment(ui, options.environment);
+        const descriptors = runtime.assets('secrets/store').descriptors();
+        const source = options.from
+            ? descriptors.find((d) => d.id === options.from)
+            : descriptors
+                .filter((d) => d.tiers.includes(envTier) && REMOTE_BACKENDS.has(d.backend))
+                .sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))[0];
+        const target = options.to
+            ? descriptors.find((d) => d.id === options.to)
+            : descriptors
+                .filter((d) => d.tiers.includes(envTier) && LOCAL_BACKENDS.has(d.backend))
+                .sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))[0];
+        if (!source) {
+            ui.error('No remote secrets store available. Cloudflare does not support pulling secret values.');
+            process.exit(1);
+        }
+        if (!target) {
+            ui.error('No local secrets store available.');
+            process.exit(1);
+        }
+        if (source.backend === 'cloudflare-api' || source.backend === 'cloudflare-secrets-store') {
+            ui.warn('Cloudflare secrets backends do not expose secret values. Pull is only supported from Vault.');
+            process.exit(1);
+        }
+        const sourceImpl = (await runtime
+            .query('secrets/store')
+            .withId(source.id)
+            .resolve());
+        let secrets = await sourceImpl.getAll(envName);
+        const keyFilter = parseKeyFilter(options.key);
+        if (keyFilter) {
+            secrets = Object.fromEntries(Object.entries(secrets).filter(([key]) => keyFilter.has(key)));
+        }
+        const keys = Object.keys(secrets);
+        if (keys.length === 0) {
+            ui.info(`No secrets found in [${source.id}] for environment: ${envName}`);
+            return;
+        }
+        if (options.dryRun) {
+            ui.log(`\nDry run: would pull ${keys.length} secret(s) from [${source.id}] to [${target.id}]\n`);
+            for (const key of keys.sort()) {
+                ui.log(`  ${key}`);
+            }
+            ui.log('');
+            return;
+        }
+        const targetImpl = (await runtime
+            .query('secrets/store')
+            .withId(target.id)
+            .resolve());
+        await targetImpl.setAll(envName, secrets);
+        ui.success(`Pulled ${keys.length} secret(s) from [${source.id}] to [${target.id}] for ${envName}`);
+    }
+};
+//# sourceMappingURL=secrets.pull.cli-command.impl.js.map

package/dist/cli/pull/secrets.pull.cli-command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.pull.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/pull/secrets.pull.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAChE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7D,SAAS,cAAc,CAAC,KAAc;IACrC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YAC1B,CAAC,CAAC,CAAC,KAAK,CAAC;YACT,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,SAAS;SACpB,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,IAA6B;QAC1E,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAc,CAAC;QAC1D,MAAM,OAAO,GAAG,IAMf,CAAC;QAEF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CACvE,EAAE,EACF,OAAO,CAAC,WAAW,CACnB,CAAC;QAEF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAA8B,CAAC;QAE9F,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI;YAC1B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC;YAChD,CAAC,CAAC,WAAW;iBACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;iBAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE;YACxB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;YAC9C,CAAC,CAAC,WAAW;iBACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;iBACzE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,EAAE,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;YAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,EAAE,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,gBAAgB,IAAI,MAAM,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;YAC1F,EAAE,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;YACvG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,OAAO;aAC/B,KAAK,CAAC,eAAe,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aACjB,OAAO,EAAE,CAA+B,CAAC;QAC3C,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,SAAS,EAAE,CAAC;YACf,OAAO,GAAG,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAC7D,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,EAAE,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;YAC1E,OAAO;QACR,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,EAAE,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,MAAM,oBAAoB,MAAM,CAAC,EAAE,SAAS,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YACjG,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/B,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACpB,CAAC;YACD,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACX,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,OAAO;aAC/B,KAAK,CAAC,eAAe,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aACjB,OAAO,EAAE,CAA+B,CAAC;QAC3C,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE1C,EAAE,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,oBAAoB,MAAM,CAAC,EAAE,SAAS,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC,CAAC;IACpG,CAAC;CACD,CAAC"}

package/dist/cli/push/secrets.push.cli-command.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/cli/schemas/types';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=secrets.push.cli-command.descriptor.d.ts.map

package/dist/cli/push/secrets.push.cli-command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.push.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/push/secrets.push.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAEhF,QAAA,MAAM,UAAU,EAAE,yBAmBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/push/secrets.push.cli-command.descriptor.js

@@ -0,0 +1,22 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'secrets.push',
+    name: 'push',
+    description: 'Deploy secrets from local store to a remote backend',
+    group: 'secrets',
+    options: [
+        { flags: '--environment <name>', description: 'Target environment (default: current)' },
+        { flags: '--source-env <name>', description: 'Source environment in the source backend (default: source backend\'s primary tier, e.g. "local" for encrypted-local)' },
+        { flags: '--from <backend>', description: 'Source backend (default: highest-priority local)' },
+        { flags: '--to <backend>', description: 'Target backend (default: highest-priority remote)' },
+        { flags: '--key <key>', description: 'Push only one secret key (repeat or comma-separate for multiple keys)' },
+        { flags: '--app <id>', description: 'Push only secrets required by this app' },
+        { flags: '--dry-run', description: 'Show what would be pushed without pushing' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 60
+};
+export default descriptor;
+//# sourceMappingURL=secrets.push.cli-command.descriptor.js.map

package/dist/cli/push/secrets.push.cli-command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.push.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/push/secrets.push.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,qDAAqD;IAClE,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACvF,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,sHAAsH,EAAE;QACrK,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,kDAAkD,EAAE;QAC9F,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,mDAAmD,EAAE;QAC7F,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,uEAAuE,EAAE;QAC9G,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,wCAAwC,EAAE;QAC9E,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,2CAA2C,EAAE;KAChF;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;CACT,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/push/secrets.push.cli-command.impl.d.ts

@@ -0,0 +1,5 @@
+declare const _default: {
+    execute(_args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=secrets.push.cli-command.impl.d.ts.map

package/dist/cli/push/secrets.push.cli-command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.push.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/push/secrets.push.cli-command.impl.ts"],"names":[],"mappings":";mBAmDsB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD5F,wBAkGE"}