@zincapp/znvault-cli 2.16.5 → 2.18.0

package/dist/commands/secret/create.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Secret create command
+ */
+import type { Command } from 'commander';
+export declare function registerCreateCommand(secretCmd: Command): void;
+//# sourceMappingURL=create.d.ts.map

package/dist/commands/secret/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/create.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUzC,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CA4T9D"}

package/dist/commands/secret/create.js

@@ -0,0 +1,297 @@
+// Path: src/commands/secret/create.ts
+import ora from 'ora';
+import inquirer from 'inquirer';
+import { client } from '../../lib/client.js';
+import * as output from '../../lib/output.js';
+import { getAuthContext } from '../../lib/auth-context.js';
+import { formatBytes } from './helpers.js';
+import { analyzeFileForSuggestion, formatPemType } from './pem-analysis.js';
+export function registerCreateCommand(secretCmd) {
+    secretCmd
+        .command('create <alias>')
+        .description('Create a new secret (use --suggest for AI naming help)')
+        .option('-t, --tenant <id>', 'Tenant ID (defaults to current user tenant)')
+        .option('--type <type>', 'Secret type (opaque, credential, setting)', 'opaque')
+        .option('--sub-type <subType>', 'Semantic sub-type')
+        .option('--tags <tags>', 'Comma-separated tags')
+        .option('--ttl <datetime>', 'TTL expiration (ISO 8601)')
+        .option('--expires <datetime>', 'Natural expiration (ISO 8601)')
+        .option('--content-type <mime>', 'Content type for settings')
+        .option('--json', 'Output as JSON')
+        .option('--suggest', 'Get AI suggestions for naming (alias becomes description)')
+        // Non-interactive data options
+        .option('--username <username>', 'Username for credential type (non-interactive)')
+        .option('--password <password>', 'Password for credential type (non-interactive)')
+        .option('--text <text>', 'Text content (non-interactive)')
+        .option('--data <json>', 'JSON data (non-interactive)')
+        .option('--file <path>', 'File to upload (non-interactive)')
+        .action(async (aliasOrDescription, options) => {
+        let alias = aliasOrDescription;
+        let actualType = options.type || 'opaque';
+        let actualSubType = options.subType;
+        let actualTags = options.tags;
+        // AI Suggestion flow
+        if (options.suggest) {
+            const tenant = options.tenant || 'me';
+            // Analyze file if --file is provided
+            let fileInfo = null;
+            if (options.file) {
+                const analyzeSpinner = ora('Analyzing file...').start();
+                fileInfo = await analyzeFileForSuggestion(options.file);
+                analyzeSpinner.stop();
+                if (fileInfo) {
+                    output.section('File Analysis');
+                    const analysisInfo = {
+                        'Filename': fileInfo.filename,
+                        'Extension': fileInfo.extension,
+                        'MIME Type': fileInfo.mimeType,
+                        'Size': formatBytes(fileInfo.size),
+                    };
+                    if (fileInfo.pemInfo) {
+                        analysisInfo['PEM Type'] = formatPemType(fileInfo.pemInfo.type);
+                        if (fileInfo.pemInfo.algorithm) {
+                            analysisInfo['Algorithm'] = fileInfo.pemInfo.algorithm.toUpperCase();
+                        }
+                        if (fileInfo.pemInfo.detectedPurpose) {
+                            analysisInfo['Detected Purpose'] = fileInfo.pemInfo.detectedPurpose;
+                        }
+                        if (fileInfo.pemInfo.isAppleP8) {
+                            analysisInfo['Special'] = 'Apple .p8 authentication key';
+                        }
+                        if (fileInfo.pemInfo.certificateCount && fileInfo.pemInfo.certificateCount > 1) {
+                            analysisInfo['Certificates'] = `${fileInfo.pemInfo.certificateCount} (chain/bundle)`;
+                        }
+                    }
+                    output.keyValue(analysisInfo);
+                    console.log();
+                }
+            }
+            const spinner = ora('Getting AI suggestions...').start();
+            try {
+                const body = { description: aliasOrDescription };
+                // Include file analysis in the request
+                if (fileInfo) {
+                    body.fileInfo = fileInfo;
+                }
+                const response = await client.post(`/v1/advisor/${tenant}/suggest`, body);
+                spinner.stop();
+                const result = response.data;
+                // Show suggestions
+                output.section('AI Suggestions');
+                output.keyValue({
+                    'Suggested Alias': result.alias,
+                    'Type': result.type,
+                    'Sub-Type': result.subType || '-',
+                    'Tags': result.tags.join(', ') || 'none',
+                    'Confidence': `${Math.round(result.confidence * 100)}%`,
+                });
+                if (result.alternativeAliases && result.alternativeAliases.length > 0) {
+                    output.info(`Alternatives: ${result.alternativeAliases.join(', ')}`);
+                }
+                if (result.warnings && result.warnings.length > 0) {
+                    for (const w of result.warnings) {
+                        console.log(`  ⚠ ${w}`);
+                    }
+                }
+                console.log(`\nReasoning: ${result.reasoning}\n`);
+                // Let user confirm or modify
+                const aliasChoices = [
+                    { name: `${result.alias} (suggested)`, value: result.alias },
+                    ...(result.alternativeAliases || []).map(a => ({ name: a, value: a })),
+                    { name: 'Enter custom alias', value: '__custom__' },
+                ];
+                const { useAlias } = await inquirer.prompt([
+                    {
+                        type: 'list',
+                        name: 'useAlias',
+                        message: 'Use which alias?',
+                        choices: aliasChoices,
+                    },
+                ]);
+                if (useAlias === '__custom__') {
+                    const { customAlias } = await inquirer.prompt([
+                        { type: 'input', name: 'customAlias', message: 'Enter alias:' },
+                    ]);
+                    alias = customAlias;
+                }
+                else {
+                    alias = useAlias;
+                }
+                // Apply suggested values (unless overridden by CLI options)
+                if (!options.type || options.type === 'opaque') {
+                    actualType = result.type;
+                }
+                if (!options.subType && result.subType) {
+                    actualSubType = result.subType;
+                }
+                if (!options.tags && result.tags.length > 0) {
+                    actualTags = result.tags.join(',');
+                }
+                output.success(`Using alias: ${alias}`);
+                console.log();
+            }
+            catch (err) {
+                spinner.fail('Failed to get AI suggestions');
+                output.error(err instanceof Error ? err.message : String(err));
+                // Continue without suggestions?
+                const { continueWithout } = await inquirer.prompt([
+                    {
+                        type: 'confirm',
+                        name: 'continueWithout',
+                        message: 'Continue creating secret without AI suggestions?',
+                        default: true,
+                    },
+                ]);
+                if (!continueWithout) {
+                    process.exit(0);
+                }
+                // Use the description as alias
+                alias = aliasOrDescription;
+            }
+        }
+        // Resolve tenant: use explicit option, or get from stored credentials
+        const authContext = getAuthContext();
+        const tenantId = options.tenant || authContext.tenantId;
+        if (!tenantId) {
+            output.error('Tenant is required. Use --tenant <id> or login to a tenant account.');
+            process.exit(1);
+        }
+        let data = {};
+        // Check for non-interactive data options first
+        const hasNonInteractiveData = options.username || options.password || options.text || options.data || options.file;
+        if (hasNonInteractiveData) {
+            // Non-interactive mode: use CLI options
+            if (options.username || options.password) {
+                actualType = 'credential';
+                data = {
+                    username: options.username || '',
+                    password: options.password || '',
+                };
+            }
+            else if (options.text) {
+                data = { text: options.text };
+            }
+            else if (options.data) {
+                try {
+                    data = JSON.parse(options.data);
+                }
+                catch (e) {
+                    output.error('Invalid JSON in --data option');
+                    process.exit(1);
+                }
+            }
+            else if (options.file) {
+                const fs = await import('fs');
+                const pathModule = await import('path');
+                if (!fs.existsSync(options.file)) {
+                    output.error(`File not found: ${options.file}`);
+                    process.exit(1);
+                }
+                const content = fs.readFileSync(options.file);
+                const filename = pathModule.basename(options.file);
+                data = {
+                    filename,
+                    content: content.toString('base64'),
+                    contentType: options.contentType || 'application/octet-stream',
+                };
+            }
+        }
+        else {
+            // Interactive mode: prompt for data
+            const { dataType } = await inquirer.prompt([
+                {
+                    type: 'list',
+                    name: 'dataType',
+                    message: 'What type of data?',
+                    choices: [
+                        { name: 'Credential (username/password)', value: 'credential' },
+                        { name: 'Plain Text', value: 'text' },
+                        { name: 'Key-Value pairs', value: 'keyvalue' },
+                        { name: 'File upload', value: 'file' },
+                    ],
+                },
+            ]);
+            if (dataType === 'credential') {
+                actualType = 'credential';
+                const answers = await inquirer.prompt([
+                    { type: 'input', name: 'username', message: 'Username:' },
+                    { type: 'password', name: 'password', message: 'Password:', mask: '*' },
+                ]);
+                data = answers;
+            }
+            else if (dataType === 'text') {
+                const { text } = await inquirer.prompt([
+                    { type: 'editor', name: 'text', message: 'Enter text content:' },
+                ]);
+                data = { text: text.trim() };
+            }
+            else if (dataType === 'keyvalue') {
+                console.log('Enter key-value pairs (empty key to finish):');
+                while (true) {
+                    const { key } = await inquirer.prompt([
+                        { type: 'input', name: 'key', message: 'Key:' },
+                    ]);
+                    if (!key)
+                        break;
+                    const { value } = await inquirer.prompt([
+                        { type: 'input', name: 'value', message: `Value for "${key}":` },
+                    ]);
+                    data[key] = value;
+                }
+            }
+            else if (dataType === 'file') {
+                const { filePath } = await inquirer.prompt([
+                    { type: 'input', name: 'filePath', message: 'File path:' },
+                ]);
+                const fs = await import('fs');
+                const pathModule = await import('path');
+                if (!fs.existsSync(filePath)) {
+                    output.error(`File not found: ${filePath}`);
+                    process.exit(1);
+                }
+                const content = fs.readFileSync(filePath);
+                const filename = pathModule.basename(filePath);
+                data = {
+                    filename,
+                    content: content.toString('base64'),
+                    contentType: options.contentType || 'application/octet-stream',
+                };
+            }
+        }
+        const spinner = ora('Creating secret...').start();
+        try {
+            const body = {
+                alias,
+                tenant: tenantId,
+                type: actualType,
+                data,
+            };
+            if (actualSubType)
+                body.subType = actualSubType;
+            if (actualTags)
+                body.tags = actualTags.split(',').map(t => t.trim());
+            if (options.ttl)
+                body.ttlUntil = options.ttl;
+            if (options.expires)
+                body.expiresAt = options.expires;
+            if (options.contentType)
+                body.contentType = options.contentType;
+            const result = await client.post('/v1/secrets', body);
+            spinner.stop();
+            if (options.json) {
+                output.json(result);
+                return;
+            }
+            output.success(`Secret created successfully!`);
+            console.log(`  ID:     ${result.id}`);
+            console.log(`  Alias:  ${result.alias}`);
+            console.log(`  Tenant: ${result.tenant}`);
+        }
+        catch (error) {
+            spinner.fail('Failed to create secret');
+            output.error(error.message);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=create.js.map

package/dist/commands/secret/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/secret/create.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAOtC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAyB,MAAM,mBAAmB,CAAC;AAEnG,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,SAAS;SACN,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;SAC1E,MAAM,CAAC,eAAe,EAAE,2CAA2C,EAAE,QAAQ,CAAC;SAC9E,MAAM,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SACnD,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC;SAC/C,MAAM,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;SACvD,MAAM,CAAC,sBAAsB,EAAE,+BAA+B,CAAC;SAC/D,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;QACjF,+BAA+B;SAC9B,MAAM,CAAC,uBAAuB,EAAE,gDAAgD,CAAC;SACjF,MAAM,CAAC,uBAAuB,EAAE,gDAAgD,CAAC;SACjF,MAAM,CAAC,eAAe,EAAE,gCAAgC,CAAC;SACzD,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,kCAAkC,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,kBAA0B,EAAE,OAAsB,EAAE,EAAE;QACnE,IAAI,KAAK,GAAG,kBAAkB,CAAC;QAC/B,IAAI,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;QAC1C,IAAI,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QACpC,IAAI,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAE9B,qBAAqB;QACrB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;YAEtC,qCAAqC;YACrC,IAAI,QAAQ,GAA4B,IAAI,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;gBACxD,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxD,cAAc,CAAC,IAAI,EAAE,CAAC;gBAEtB,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;oBAChC,MAAM,YAAY,GAA2B;wBAC3C,UAAU,EAAE,QAAQ,CAAC,QAAQ;wBAC7B,WAAW,EAAE,QAAQ,CAAC,SAAS;wBAC/B,WAAW,EAAE,QAAQ,CAAC,QAAQ;wBAC9B,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;qBACnC,CAAC;oBAEF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACrB,YAAY,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAChE,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;4BAC/B,YAAY,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;wBACvE,CAAC;wBACD,IAAI,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;4BACrC,YAAY,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC;wBACtE,CAAC;wBACD,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;4BAC/B,YAAY,CAAC,SAAS,CAAC,GAAG,8BAA8B,CAAC;wBAC3D,CAAC;wBACD,IAAI,QAAQ,CAAC,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,OAAO,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;4BAC/E,YAAY,CAAC,cAAc,CAAC,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,iBAAiB,CAAC;wBACvF,CAAC;oBACH,CAAC;oBAED,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;oBAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC;YAEzD,IAAI,CAAC;gBACH,MAAM,IAAI,GAA4B,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;gBAE1E,uCAAuC;gBACvC,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC3B,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAG/B,eAAe,MAAM,UAAU,EAAE,IAAI,CAAC,CAAC;gBAE1C,OAAO,CAAC,IAAI,EAAE,CAAC;gBAEf,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAE7B,mBAAmB;gBACnB,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACjC,MAAM,CAAC,QAAQ,CAAC;oBACd,iBAAiB,EAAE,MAAM,CAAC,KAAK;oBAC/B,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,UAAU,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG;oBACjC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;oBACxC,YAAY,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG;iBACxD,CAAC,CAAC;gBAEH,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACvE,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;gBAElD,6BAA6B;gBAC7B,MAAM,YAAY,GAAG;oBACnB,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;oBAC5D,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBACtE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,YAAY,EAAE;iBACpD,CAAC;gBAEF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB;oBAC/D;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,kBAAkB;wBAC3B,OAAO,EAAE,YAAY;qBACtB;iBACF,CAAC,CAAC;gBAEH,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC9B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAA0B;wBACrE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE;qBAChE,CAAC,CAAC;oBACH,KAAK,GAAG,WAAW,CAAC;gBACtB,CAAC;qBAAM,CAAC;oBACN,KAAK,GAAG,QAAQ,CAAC;gBACnB,CAAC;gBAED,4DAA4D;gBAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/C,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC3B,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACvC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;gBACjC,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5C,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrC,CAAC;gBAED,MAAM,CAAC,OAAO,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;gBACxC,OAAO,CAAC,GAAG,EAAE,CAAC;YAEhB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE/D,gCAAgC;gBAChC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAA+B;oBAC9E;wBACE,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,kDAAkD;wBAC3D,OAAO,EAAE,IAAI;qBACd;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAED,+BAA+B;gBAC/B,KAAK,GAAG,kBAAkB,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC;QAExD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,IAAI,GAA4B,EAAE,CAAC;QAEvC,+CAA+C;QAC/C,MAAM,qBAAqB,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;QAEnH,IAAI,qBAAqB,EAAE,CAAC;YAC1B,wCAAwC;YACxC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACzC,UAAU,GAAG,YAAY,CAAC;gBAC1B,IAAI,GAAG;oBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;oBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;iBACjC,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxB,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YAChC,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;gBAExC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,MAAM,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAEnD,IAAI,GAAG;oBACL,QAAQ;oBACR,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACnC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,0BAA0B;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB;gBAC/D;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,oBAAoB;oBAC7B,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,YAAY,EAAE;wBAC/D,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE;wBACrC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE;wBAC9C,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE;qBACvC;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC9B,UAAU,GAAG,YAAY,CAAC;gBAC1B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAyC;oBAC5E,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE;oBACzD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE;iBACxE,CAAC,CAAC;gBACH,IAAI,GAAG,OAAO,CAAC;YACjB,CAAC;iBAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAmB;oBACvD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE;iBACjE,CAAC,CAAC;gBACH,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,CAAC;iBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBAC5D,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAkB;wBACrD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;qBAChD,CAAC,CAAC;oBACH,IAAI,CAAC,GAAG;wBAAE,MAAM;oBAChB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAoB;wBACzD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,EAAE;qBACjE,CAAC,CAAC;oBACH,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACpB,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB;oBAC/D,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE;iBAC3D,CAAC,CAAC;gBAEH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;gBAExC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,MAAM,CAAC,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;oBAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAE/C,IAAI,GAAG;oBACL,QAAQ;oBACR,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACnC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,0BAA0B;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,IAAI,GAA4B;gBACpC,KAAK;gBACL,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,UAAU;gBAChB,IAAI;aACL,CAAC;YAEF,IAAI,aAAa;gBAAE,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;YAChD,IAAI,UAAU;gBAAE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;YAC7C,IAAI,OAAO,CAAC,OAAO;gBAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;YACtD,IAAI,OAAO,CAAC,WAAW;gBAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAEhE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAiB,aAAa,EAAE,IAAI,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/secret/decrypt.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Secret decrypt command
+ */
+import type { Command } from 'commander';
+export declare function registerDecryptCommand(secretCmd: Command): void;
+//# sourceMappingURL=decrypt.d.ts.map

package/dist/commands/secret/decrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decrypt.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/decrypt.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CA+F/D"}

package/dist/commands/secret/decrypt.js

@@ -0,0 +1,104 @@
+// Path: src/commands/secret/decrypt.ts
+import ora from 'ora';
+import { client } from '../../lib/client.js';
+import * as output from '../../lib/output.js';
+import { formatType, formatBytes } from './helpers.js';
+import { resolveSecretId } from './resolve.js';
+export function registerDecryptCommand(secretCmd) {
+    secretCmd
+        .command('decrypt <id-or-alias>')
+        .description('Decrypt and show secret value (supports UUID or tenant/alias format)')
+        .option('-o, --output <file>', 'Write content to file')
+        .option('--json', 'Output as JSON')
+        .addHelpText('after', `
+Examples:
+  znvault secret decrypt zn-admin/config             # by alias path
+  znvault secret decrypt alias:web/api-key           # with alias: prefix
+  znvault secret decrypt abc12345-...                # by UUID
+  znvault secret decrypt certs/server-key -o key.pem # save to file
+`)
+        .action(async (idOrAlias, options) => {
+        const spinner = ora('Resolving secret...').start();
+        try {
+            // Resolve alias to UUID if needed
+            const id = await resolveSecretId(idOrAlias);
+            spinner.text = 'Decrypting secret...';
+            const secret = await client.post(`/v1/secrets/${id}/decrypt`, {});
+            spinner.stop();
+            if (options.json) {
+                output.json(secret);
+                return;
+            }
+            // If output file specified and it's a file-based secret
+            if (options.output && secret.data) {
+                const fs = await import('fs');
+                // Check if it's a file-based secret
+                if ('content' in secret.data && typeof secret.data.content === 'string') {
+                    const content = Buffer.from(secret.data.content, 'base64');
+                    fs.writeFileSync(options.output, content);
+                    output.success(`File written to: ${options.output}`);
+                    return;
+                }
+                // Otherwise write JSON
+                fs.writeFileSync(options.output, JSON.stringify(secret.data, null, 2));
+                output.success(`Data written to: ${options.output}`);
+                return;
+            }
+            // Display metadata
+            console.log('\n--- Secret Metadata ---');
+            console.log(`ID:      ${secret.id}`);
+            console.log(`Alias:   ${secret.alias}`);
+            console.log(`Tenant:  ${secret.tenant}`);
+            console.log(`Type:    ${formatType(secret.type, secret.subType)}`);
+            console.log(`Version: ${secret.version}`);
+            // Display data based on type
+            console.log('\n--- Secret Data ---');
+            if (secret.type === 'credential' && secret.data) {
+                if ('username' in secret.data)
+                    console.log(`Username: ${secret.data.username}`);
+                if ('password' in secret.data)
+                    console.log(`Password: ${secret.data.password}`);
+                // Show any additional fields
+                const knownFields = ['username', 'password'];
+                for (const [key, value] of Object.entries(secret.data)) {
+                    if (!knownFields.includes(key)) {
+                        console.log(`${key}: ${typeof value === 'object' ? JSON.stringify(value) : value}`);
+                    }
+                }
+            }
+            else if (secret.data && 'text' in secret.data) {
+                // Plain text secret
+                console.log(secret.data.text);
+            }
+            else if (secret.data && 'content' in secret.data && 'filename' in secret.data) {
+                // File-based secret
+                console.log(`File: ${secret.data.filename}`);
+                console.log(`Size: ${formatBytes(Buffer.from(secret.data.content, 'base64').length)}`);
+                if (secret.data.contentType)
+                    console.log(`Type: ${secret.data.contentType}`);
+                console.log('\nUse --output <file> to save the file content');
+            }
+            else if (secret.data && 'privateKey' in secret.data) {
+                // Key pair secret
+                console.log('Key Pair Secret:');
+                const pk = secret.data.privateKey;
+                const pub = secret.data.publicKey;
+                if (pk?.filename)
+                    console.log(`  Private Key: ${pk.filename}`);
+                if (pub?.filename)
+                    console.log(`  Public Key: ${pub.filename}`);
+                console.log('\nUse --output <file> to save the keys');
+            }
+            else {
+                // Generic key-value
+                console.log(JSON.stringify(secret.data, null, 2));
+            }
+        }
+        catch (error) {
+            spinner.fail('Failed to decrypt secret');
+            output.error(error.message);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=decrypt.js.map

package/dist/commands/secret/decrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decrypt.js","sourceRoot":"","sources":["../../../src/commands/secret/decrypt.ts"],"names":[],"mappings":"AAAA,uCAAuC;AAOvC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,sBAAsB,CAAC,SAAkB;IACvD,SAAS;SACN,OAAO,CAAC,uBAAuB,CAAC;SAChC,WAAW,CAAC,sEAAsE,CAAC;SACnF,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,WAAW,CAAC,OAAO,EAAE;;;;;;CAMzB,CAAC;SACG,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAAuB,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEnD,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,GAAG,sBAAsB,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAkB,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,wDAAwD;YACxD,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAE9B,oCAAoC;gBACpC,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACxE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAiB,EAAE,QAAQ,CAAC,CAAC;oBACrE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC1C,MAAM,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBAED,uBAAuB;gBACvB,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvE,MAAM,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAE1C,6BAA6B;YAC7B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAErC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChD,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChF,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChF,6BAA6B;gBAC7B,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACtF,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChD,oBAAoB;gBACpB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChF,oBAAoB;gBACpB,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,SAAS,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAiB,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACjG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC7E,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,IAAI,YAAY,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACtD,kBAAkB;gBAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAChC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAqC,CAAC;gBAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAoC,CAAC;gBAC7D,IAAI,EAAE,EAAE,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/D,IAAI,GAAG,EAAE,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChE,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,oBAAoB;gBACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/secret/delete.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Secret delete command
+ */
+import type { Command } from 'commander';
+export declare function registerDeleteCommand(secretCmd: Command): void;
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/secret/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/delete.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAuD9D"}

package/dist/commands/secret/delete.js

@@ -0,0 +1,60 @@
+// Path: src/commands/secret/delete.ts
+import ora from 'ora';
+import inquirer from 'inquirer';
+import { client } from '../../lib/client.js';
+import * as output from '../../lib/output.js';
+import { resolveSecretId } from './resolve.js';
+export function registerDeleteCommand(secretCmd) {
+    secretCmd
+        .command('delete <id-or-alias>')
+        .description('Delete a secret (supports UUID or tenant/alias format)')
+        .option('-f, --force', 'Skip confirmation')
+        .action(async (idOrAlias, options) => {
+        let id;
+        // Resolve alias to UUID first
+        try {
+            id = await resolveSecretId(idOrAlias);
+        }
+        catch (error) {
+            output.error(error.message);
+            process.exit(1);
+        }
+        if (!options.force) {
+            // Get metadata first
+            const spinner = ora('Fetching secret...').start();
+            try {
+                const secret = await client.get(`/v1/secrets/${id}/meta`);
+                spinner.stop();
+                const { confirm } = await inquirer.prompt([
+                    {
+                        type: 'confirm',
+                        name: 'confirm',
+                        message: `Delete secret "${secret.alias}" (${id})? This cannot be undone.`,
+                        default: false,
+                    },
+                ]);
+                if (!confirm) {
+                    output.info('Deletion cancelled');
+                    return;
+                }
+            }
+            catch (error) {
+                spinner.fail('Failed to fetch secret');
+                output.error(error.message);
+                process.exit(1);
+            }
+        }
+        const deleteSpinner = ora('Deleting secret...').start();
+        try {
+            await client.delete(`/v1/secrets/${id}`);
+            deleteSpinner.stop();
+            output.success('Secret deleted successfully');
+        }
+        catch (error) {
+            deleteSpinner.fail('Failed to delete secret');
+            output.error(error.message);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=delete.js.map

package/dist/commands/secret/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/commands/secret/delete.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAOtC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,SAAS;SACN,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC;SAC1C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAAsB,EAAE,EAAE;QAC1D,IAAI,EAAU,CAAC;QAEf,8BAA8B;QAC9B,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,qBAAqB;YACrB,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAiB,eAAe,EAAE,OAAO,CAAC,CAAC;gBAC1E,OAAO,CAAC,IAAI,EAAE,CAAC;gBAEf,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB;oBAC9D;wBACE,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,kBAAkB,MAAM,CAAC,KAAK,MAAM,EAAE,2BAA2B;wBAC1E,OAAO,EAAE,KAAK;qBACf;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;oBAClC,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACvC,MAAM,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YACzC,aAAa,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/secret/get.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Secret get command (metadata only)
+ */
+import type { Command } from 'commander';
+export declare function registerGetCommand(secretCmd: Command): void;
+//# sourceMappingURL=get.d.ts.map

package/dist/commands/secret/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/get.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAmE3D"}

package/dist/commands/secret/get.js

@@ -0,0 +1,60 @@
+// Path: src/commands/secret/get.ts
+import ora from 'ora';
+import Table from 'cli-table3';
+import { client } from '../../lib/client.js';
+import * as output from '../../lib/output.js';
+import { formatDate, formatType, formatBytes } from './helpers.js';
+import { resolveSecretId } from './resolve.js';
+export function registerGetCommand(secretCmd) {
+    secretCmd
+        .command('get <id-or-alias>')
+        .description('Get secret metadata (supports UUID or tenant/alias format)')
+        .option('--json', 'Output as JSON')
+        .action(async (idOrAlias, options) => {
+        const spinner = ora('Resolving secret...').start();
+        try {
+            // Resolve alias to UUID if needed
+            const id = await resolveSecretId(idOrAlias);
+            spinner.text = 'Fetching secret metadata...';
+            const secret = await client.get(`/v1/secrets/${id}/meta`);
+            spinner.stop();
+            if (options.json) {
+                output.json(secret);
+                return;
+            }
+            const table = new Table({
+                colWidths: [20, 60],
+            });
+            table.push(['ID', secret.id], ['Alias', secret.alias], ['Tenant', secret.tenant], ['Type', formatType(secret.type, secret.subType)], ['Version', String(secret.version)]);
+            if (secret.fileName) {
+                table.push(['File Name', secret.fileName]);
+            }
+            if (secret.fileSize) {
+                table.push(['File Size', formatBytes(secret.fileSize)]);
+            }
+            if (secret.fileMime) {
+                table.push(['MIME Type', secret.fileMime]);
+            }
+            if (secret.contentType) {
+                table.push(['Content Type', secret.contentType]);
+            }
+            if (secret.expiresAt) {
+                table.push(['Expires At', formatDate(secret.expiresAt)]);
+            }
+            if (secret.ttlUntil) {
+                table.push(['TTL Until', formatDate(secret.ttlUntil)]);
+            }
+            if (secret.tags && secret.tags.length > 0) {
+                table.push(['Tags', secret.tags.join(', ')]);
+            }
+            table.push(['Created By', secret.createdBy || '-'], ['Created At', formatDate(secret.createdAt)], ['Updated At', formatDate(secret.updatedAt)]);
+            console.log(table.toString());
+        }
+        catch (error) {
+            spinner.fail('Failed to get secret');
+            output.error(error.message);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=get.js.map

package/dist/commands/secret/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../src/commands/secret/get.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAOnC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,SAAS;SACN,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAAmB,EAAE,EAAE;QACvD,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEnD,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,GAAG,6BAA6B,CAAC;YAE7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAiB,eAAe,EAAE,OAAO,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;gBACtB,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;aACpB,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,EACjB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EACvB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EACzB,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,EACjD,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CACpC,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,KAAK,CAAC,IAAI,CACR,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,EACvC,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAC5C,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAC7C,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/secret/helpers.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Helper functions for secret commands
+ */
+export declare function formatDate(dateStr: string | undefined): string;
+export declare function formatType(type: string, subType?: string): string;
+export declare function formatTags(tags?: string[]): string;
+export declare function truncateAlias(alias: string, maxLen?: number): string;
+export declare function formatBytes(bytes?: number): string;
+export declare function getDaysUntilExpiry(expiresAt?: string): number | null;
+export declare function formatExpiry(expiresAt?: string): string;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/commands/secret/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/helpers.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG9D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAIlD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAGhE;AAED,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKpE;AAED,wBAAgB,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CASvD"}