dagger-env 0.6.7 → 1.0.0

package/README.md

@@ -1,6 +1,6 @@
 # dagger-env
 
-A type-safe, reusable environment configuration abstraction for Dagger modules with full Zod v4 validation and 1Password integration.
+A type-safe, reusable environment configuration abstraction for Dagger modules with full Zod v4 validation and Infisical integration.
 
 ## Features
 
@@ -9,7 +9,7 @@ A type-safe, reusable environment configuration abstraction for Dagger modules w
 - 🎯 **Consistent**: Standardized API across all Dagger modules
 - 🛡️ **Validated**: Runtime validation of arguments, environment variables, and secrets
 - 📦 **Modular**: Secret presets and derived environment variables
-- 🔐 **1Password Integration**: Built-in command runner with `op run` support
+- 🔐 **Infisical Integration**: Built-in command runner backed by `infisical export`
 - 🚀 **Easy to use**: Simple configuration-based setup
 
 ## Installation
@@ -18,7 +18,7 @@ A type-safe, reusable environment configuration abstraction for Dagger modules w
 npm install dagger-env zod
 ```
 
-**Note:** The command runner functionality (`dagger-env/run`) requires the 1Password CLI (`op`) to be installed.
+**Note:** The command runner functionality (`dagger-env/run`) requires the Infisical CLI (`infisical`) to be installed and authenticated.
 
 ## Quick Start
 
@@ -73,9 +73,9 @@ export class MyModule {
 }
 ```
 
-## Command Runner (1Password Integration)
+## Command Runner (Infisical Integration)
 
-For projects using 1Password for secret management, `dagger-env` provides a convenient command runner that integrates with `op run`:
+For projects using Infisical for secret management, `dagger-env` provides a convenient command runner that fetches secrets with `infisical export` and passes them to `dagger call` via the `DAGGER_OPTIONS` environment variable:
 
 ```typescript
 import { createDaggerEnv } from 'dagger-env'
@@ -102,14 +102,9 @@ const myDaggerEnv = createDaggerEnv({
 
 // Create a command runner - simply pass your DaggerEnv instance
 const runDaggerCommand = createDaggerCommandRunner({
-  opVault: 'your-vault-id',
-  opItem: 'your-item-id',
-  opSections: [
-    {
-      id: 'your-section-id',
-      label: 'Shared'
-    }
-  ],
+  projectId: 'your-project-id',
+  env: 'prod',
+  path: '/ci/my-repo',
   dockerCommands: ['build', 'deploy', 'test'],
   daggerEnv: myDaggerEnv
 })
@@ -124,14 +119,11 @@ await runDaggerCommand('test', {
 ### Advanced Configuration
 
 ```typescript
-// Advanced configuration with multiple sections and pre-command setup
+// Advanced configuration with pre-command setup
 const runDaggerCommand = createDaggerCommandRunner({
-  opVault: 'your-vault-id',
-  opItem: 'your-item-id',
-  opSections: [
-    { id: 'shared-section-id', label: 'Shared' },
-    { id: 'project-section-id', label: 'Project Specific' }
-  ],
+  projectId: 'your-project-id',
+  env: 'prod',
+  path: '/ci/my-repo',
   dockerCommands: ['build', 'deploy', 'test'],
   beforeCommand: async () => {
     // Setup vendor files, modules, etc.
@@ -208,13 +200,13 @@ Returns array of secret names for a specific preset.
 
 #### `createDaggerCommandRunner(config)`
 
-Creates a function to run Dagger commands with 1Password integration.
+Creates a function to run Dagger commands with Infisical integration.
 
 **Parameters:**
 
-- `config.opVault`: 1Password vault ID
-- `config.opItem`: 1Password item ID
-- `config.opSections`: Array of 1Password sections to include for secrets
+- `config.projectId`: Infisical project ID
+- `config.env`: Infisical environment slug (e.g. `prod`)
+- `config.path`: Infisical folder path to fetch secrets from (e.g. `/ci/my-repo`)
 - `config.dockerCommands`: Optional array of command names that should include Docker socket
 - `config.beforeCommand`: Optional async function to run before executing the command
 - `config.daggerEnv`: DaggerEnv instance for schema validation and type safety

package/dist/dagger-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"dagger-env.js","sourceRoot":"","sources":["../src/dagger-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAA;AA6B1B;;GAEG;AACH,MAAM,OAAO,SAAS;IAOQ;IANZ,aAAa,CAI5B;IAEF,YAA6B,MAAS;QAAT,WAAM,GAAN,MAAM,CAAG;QACrC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC,CAAA;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAe;QACvC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,CACP,CAAA;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CACf,aAAkD,EAClD,aAA+D,EAC/D,WAAkE;QAWlE,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAiB,EAAE,CAC5C,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,IAAI,IAAI,GAAG;YACX,WAAW,IAAI,GAAG;YAClB,OAAO,GAAG,CAAC,EAAE,KAAK,UAAU;YAC5B,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU,CAAA;QAEpC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;YACnC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC;YAC9C,CAAC,CAAC,aAAa,CAAA;QAEhB,OAAO;YACN,OAAO,EAAE,CAAC,GAAc,EAAE,EAAE;gBAC3B,IAAI,CAAC,GAAG,GAAG,CAAA;gBAEX,8BAA8B;gBAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;oBACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACtD,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,IAAI,CAAC,CAAA;wBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC,CAAA;wBAC/C,CAAC;wBACD,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC5D,CAAC;gBACF,CAAC;gBAED,MAAM,cAAc,GAAa,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAA;gBAEzD,qBAAqB;gBACrB,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;oBACpC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;oBACvD,IAAI,CAAC,aAAa,EAAE,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBAC5D,CAAC;oBAED,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;wBACxC,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,UAAU,CAAC,CAAA;wBACnE,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,eAAe,CAAC,CAAA;wBACrD,CAAC;wBACD,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;wBAC/B,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;oBACxE,CAAC;gBACF,CAAC;gBAED,4CAA4C;gBAC5C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBACnC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;oBACvD,IAAI,cAAc,EAAE,CAAC;wBACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC3D,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;wBAClC,CAAC;oBACF,CAAC;gBACF,CAAC;gBAED,yCAAyC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAA;gBACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACtD,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;oBAClC,CAAC;gBACF,CAAC;gBAED,OAAO,CAAC,CAAA;YACT,CAAC;YACD,UAAU,EAAE,CAAC,GAAc,EAAE,EAAE;gBAC9B,IAAI,CAAC,GAAG,GAAG,CAAA;gBAEX,8BAA8B;gBAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;oBACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACtD,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,IAAI,CAAC,CAAA;wBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC,CAAA;wBAC/C,CAAC;wBACD,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAA;oBAClC,CAAC;gBACF,CAAC;gBAED,MAAM,cAAc,GAAa,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAA;gBAEzD,wBAAwB;gBACxB,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;oBACpC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;oBACvD,IAAI,CAAC,aAAa,EAAE,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBAC5D,CAAC;oBAED,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;wBACxC,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,UAAU,CAAC,CAAA;wBACnE,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,eAAe,CAAC,CAAA;wBACrD,CAAC;wBACD,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;wBAC/B,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAA;oBACxC,CAAC;gBACF,CAAC;gBAED,+CAA+C;gBAC/C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBACnC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;oBACvD,IAAI,cAAc,EAAE,CAAC;wBACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC/C,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;wBAC9B,CAAC;oBACF,CAAC;gBACF,CAAC;gBAED,4CAA4C;gBAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAA;gBACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxC,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;gBAC9B,CAAC;gBAED,OAAO,CAAC,CAAA;YACT,CAAC;SACD,CAAA;IACF,CAAC;IAED;;OAEG;IACH,gBAAgB;QACf,OAAO,IAAI,CAAC,aAAa,CAAA;IAC1B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC9C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAiD;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;CACD;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAA4B,MAAS;IACnE,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;AAC7B,CAAC"}
+{"version":3,"file":"dagger-env.js","sourceRoot":"","sources":["../src/dagger-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAA;AA6B1B;;GAEG;AACH,MAAM,OAAO,SAAS;IAOQ;IANZ,aAAa,CAI5B;IAEF,YAA6B,MAAS;QAAT,WAAM,GAAN,MAAM,CAAG;QACrC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC,CAAA;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAe;QACvC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,CACP,CAAA;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CACf,aAAkD,EAClD,aAA+D,EAC/D,WAAkE;QAWlE,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAiB,EAAE,CAC5C,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,IAAI,IAAI,GAAG;YACX,WAAW,IAAI,GAAG;YAClB,OAAO,GAAG,CAAC,EAAE,KAAK,UAAU;YAC5B,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU,CAAA;QAEpC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;YACnC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC;YAC9C,CAAC,CAAC,aAAa,CAAA;QAEhB,OAAO;YACN,OAAO,EAAE,CAAC,GAAc,EAAE,EAAE;gBAC3B,IAAI,CAAC,GAAG,GAAG,CAAA;gBAEX,8BAA8B;gBAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;oBACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACtD,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,IAAI,CAAC,CAAA;wBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC,CAAA;wBAC/C,CAAC;wBACD,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC5D,CAAC;gBACF,CAAC;gBAED,MAAM,cAAc,GAAa,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAA;gBAEzD,qBAAqB;gBACrB,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;oBACpC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;oBACvD,IAAI,CAAC,aAAa,EAAE,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBAC5D,CAAC;oBAED,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;wBACxC,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,UAAU,CAAC,CAAA;wBACnE,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,eAAe,CAAC,CAAA;wBACrD,CAAC;wBACD,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;wBAC/B,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;oBACxE,CAAC;gBACF,CAAC;gBAED,4CAA4C;gBAC5C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBACnC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;oBACvD,IAAI,cAAc,EAAE,CAAC;wBACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC3D,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;wBAClC,CAAC;oBACF,CAAC;gBACF,CAAC;gBAED,yCAAyC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAA;gBACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACtD,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;oBAClC,CAAC;gBACF,CAAC;gBAED,OAAO,CAAC,CAAA;YACT,CAAC;YACD,UAAU,EAAE,CAAC,GAAc,EAAE,EAAE;gBAC9B,IAAI,CAAC,GAAG,GAAG,CAAA;gBAEX,8BAA8B;gBAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;oBACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACtD,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,IAAI,CAAC,CAAA;wBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC,CAAA;wBAC/C,CAAC;wBACD,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAA;oBAClC,CAAC;gBACF,CAAC;gBAED,MAAM,cAAc,GAAa,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAA;gBAEzD,wBAAwB;gBACxB,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;oBACpC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;oBACvD,IAAI,CAAC,aAAa,EAAE,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBAC5D,CAAC;oBAED,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;wBACxC,MAAM,MAAM,GAAI,IAAI,CAAC,OAAkC,CAAC,UAAU,CAAC,CAAA;wBACnE,IAAI,CAAC,MAAM,EAAE,CAAC;4BACb,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,eAAe,CAAC,CAAA;wBACrD,CAAC;wBACD,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;wBAC/B,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAA;oBACxC,CAAC;gBACF,CAAC;gBAED,+CAA+C;gBAC/C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBACnC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;oBACvD,IAAI,cAAc,EAAE,CAAC;wBACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC/C,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;wBAC9B,CAAC;oBACF,CAAC;gBACF,CAAC;gBAED,4CAA4C;gBAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAA;gBACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxC,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;gBAC9B,CAAC;gBAED,OAAO,CAAC,CAAA;YACT,CAAC;SACD,CAAA;IACF,CAAC;IAED;;OAEG;IACH,gBAAgB;QACf,OAAO,IAAI,CAAC,aAAa,CAAA;IAC1B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC9C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAiD;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;CACD;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAA4B,MAAS;IACnE,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;AAC7B,CAAC","sourcesContent":["import { dag } from '@dagger.io/dagger'\nimport { z } from 'zod/v4'\n\nimport type { Container, Secret } from '@dagger.io/dagger'\n\n/**\n * Generic configuration for DaggerEnv\n */\nexport type DaggerEnvConfig = {\n\t/** Arguments schema */\n\targs: z.ZodObject<any>\n\t/** Environment variables schema */\n\tenv: z.ZodObject<any>\n\t/** Secrets schema */\n\tsecrets: z.ZodObject<any>\n\t/** Secret presets mapping preset names to arrays of secret names */\n\tsecretPresets: Record<string, readonly string[]>\n\t/** Derived environment variables based on secret names */\n\tderivedEnvVars: Record<string, Record<string, string>>\n}\n\n/**\n * Inferred options type from config\n */\nexport type DaggerOptionsFromConfig<T extends DaggerEnvConfig> = {\n\targs: z.output<T['args']>\n\tenv: z.output<T['env']>\n\tsecrets: z.output<T['secrets']>\n}\n\n/**\n * Reusable Dagger environment abstraction\n */\nexport class DaggerEnv<T extends DaggerEnvConfig> {\n\tprivate readonly optionsSchema: z.ZodObject<{\n\t\targs: T['args']\n\t\tenv: T['env']\n\t\tsecrets: T['secrets']\n\t}>\n\n\tconstructor(private readonly config: T) {\n\t\tthis.optionsSchema = z.object({\n\t\t\targs: config.args,\n\t\t\tenv: config.env,\n\t\t\tsecrets: config.secrets,\n\t\t})\n\t}\n\n\t/**\n\t * Parse dagger options from a Secret\n\t */\n\tasync parseDaggerOptions(options: Secret): Promise<DaggerOptionsFromConfig<T>> {\n\t\treturn this.optionsSchema.parse(\n\t\t\tJSON.parse(await options.plaintext())\n\t\t) as DaggerOptionsFromConfig<T>\n\t}\n\n\t/**\n\t * Create a function that applies environment variables and secrets to a container\n\t * based on the provided Dagger options, secret presets, and additional secret names.\n\t */\n\tasync getWithEnv(\n\t\tdaggerOptions: Secret | DaggerOptionsFromConfig<T>,\n\t\tsecretPresets: Array<Extract<keyof T['secretPresets'], string>>,\n\t\tsecretNames?: Array<Extract<keyof z.output<T['secrets']>, string>>\n\t): Promise<{\n\t\t/**\n\t\t * Apply environment variables and secrets to a container\n\t\t */\n\t\twithEnv: (con: Container) => Container\n\t\t/**\n\t\t * Remove environment variables and secrets from a container\n\t\t */\n\t\twithoutEnv: (con: Container) => Container\n\t}> {\n\t\tconst isSecret = (obj: any): obj is Secret =>\n\t\t\tobj &&\n\t\t\ttypeof obj === 'object' &&\n\t\t\t'id' in obj &&\n\t\t\t'plaintext' in obj &&\n\t\t\ttypeof obj.id === 'function' &&\n\t\t\ttypeof obj.plaintext === 'function'\n\n\t\tconst opts = isSecret(daggerOptions)\n\t\t\t? await this.parseDaggerOptions(daggerOptions)\n\t\t\t: daggerOptions\n\n\t\treturn {\n\t\t\twithEnv: (con: Container) => {\n\t\t\t\tlet c = con\n\n\t\t\t\t// Add individual secret names\n\t\t\t\tfor (const name of secretNames ?? []) {\n\t\t\t\t\tif (typeof name === 'string' && name in opts.secrets) {\n\t\t\t\t\t\tconst secret = (opts.secrets as Record<string, string>)[name]\n\t\t\t\t\t\tif (!secret) {\n\t\t\t\t\t\t\tthrow new Error(`Secret ${name} is undefined`)\n\t\t\t\t\t\t}\n\t\t\t\t\t\tc = c.withSecretVariable(name, dag.setSecret(name, secret))\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst allSecretNames: string[] = [...(secretNames ?? [])]\n\n\t\t\t\t// Add secret presets\n\t\t\t\tfor (const preset of secretPresets) {\n\t\t\t\t\tconst presetSecrets = this.config.secretPresets[preset]\n\t\t\t\t\tif (!presetSecrets) {\n\t\t\t\t\t\tthrow new Error(`Unknown secret preset: ${String(preset)}`)\n\t\t\t\t\t}\n\n\t\t\t\t\tfor (const secretName of presetSecrets) {\n\t\t\t\t\t\tconst secret = (opts.secrets as Record<string, string>)[secretName]\n\t\t\t\t\t\tif (!secret) {\n\t\t\t\t\t\t\tthrow new Error(`Secret ${secretName} is undefined`)\n\t\t\t\t\t\t}\n\t\t\t\t\t\tallSecretNames.push(secretName)\n\t\t\t\t\t\tc = c.withSecretVariable(secretName, dag.setSecret(secretName, secret))\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Add derived env vars based on secretNames\n\t\t\t\tfor (const name of allSecretNames) {\n\t\t\t\t\tconst derivedEnvVars = this.config.derivedEnvVars[name]\n\t\t\t\t\tif (derivedEnvVars) {\n\t\t\t\t\t\tfor (const [key, value] of Object.entries(derivedEnvVars)) {\n\t\t\t\t\t\t\tc = c.withEnvVariable(key, value)\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Add environment variables from options\n\t\t\t\tconst envVars = opts.env\n\t\t\t\tfor (const [key, value] of Object.entries(envVars)) {\n\t\t\t\t\tif (value !== undefined && typeof value === 'string') {\n\t\t\t\t\t\tc = c.withEnvVariable(key, value)\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\treturn c\n\t\t\t},\n\t\t\twithoutEnv: (con: Container) => {\n\t\t\t\tlet c = con\n\n\t\t\t\t// Add individual secret names\n\t\t\t\tfor (const name of secretNames ?? []) {\n\t\t\t\t\tif (typeof name === 'string' && name in opts.secrets) {\n\t\t\t\t\t\tconst secret = (opts.secrets as Record<string, string>)[name]\n\t\t\t\t\t\tif (!secret) {\n\t\t\t\t\t\t\tthrow new Error(`Secret ${name} is undefined`)\n\t\t\t\t\t\t}\n\t\t\t\t\t\tc = c.withoutSecretVariable(name)\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst allSecretNames: string[] = [...(secretNames ?? [])]\n\n\t\t\t\t// remove secret presets\n\t\t\t\tfor (const preset of secretPresets) {\n\t\t\t\t\tconst presetSecrets = this.config.secretPresets[preset]\n\t\t\t\t\tif (!presetSecrets) {\n\t\t\t\t\t\tthrow new Error(`Unknown secret preset: ${String(preset)}`)\n\t\t\t\t\t}\n\n\t\t\t\t\tfor (const secretName of presetSecrets) {\n\t\t\t\t\t\tconst secret = (opts.secrets as Record<string, string>)[secretName]\n\t\t\t\t\t\tif (!secret) {\n\t\t\t\t\t\t\tthrow new Error(`Secret ${secretName} is undefined`)\n\t\t\t\t\t\t}\n\t\t\t\t\t\tallSecretNames.push(secretName)\n\t\t\t\t\t\tc = c.withoutSecretVariable(secretName)\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// remove derived env vars based on secretNames\n\t\t\t\tfor (const name of allSecretNames) {\n\t\t\t\t\tconst derivedEnvVars = this.config.derivedEnvVars[name]\n\t\t\t\t\tif (derivedEnvVars) {\n\t\t\t\t\t\tfor (const key of Object.keys(derivedEnvVars)) {\n\t\t\t\t\t\t\tc = c.withoutEnvVariable(key)\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// remove environment variables from options\n\t\t\t\tconst envVars = opts.env\n\t\t\t\tfor (const key of Object.keys(envVars)) {\n\t\t\t\t\tc = c.withoutEnvVariable(key)\n\t\t\t\t}\n\n\t\t\t\treturn c\n\t\t\t},\n\t\t}\n\t}\n\n\t/**\n\t * Get the options schema for this DaggerEnv instance\n\t */\n\tgetOptionsSchema() {\n\t\treturn this.optionsSchema\n\t}\n\n\t/**\n\t * Get available secret presets\n\t */\n\tgetSecretPresets(): Array<keyof T['secretPresets']> {\n\t\treturn Object.keys(this.config.secretPresets)\n\t}\n\n\t/**\n\t * Get secrets for a specific preset\n\t */\n\tgetPresetSecrets(preset: Extract<keyof T['secretPresets'], string>): readonly string[] {\n\t\tconst secrets = this.config.secretPresets[preset]\n\t\tif (!secrets) {\n\t\t\tthrow new Error(`Unknown secret preset: ${String(preset)}`)\n\t\t}\n\t\treturn secrets\n\t}\n}\n\n/**\n * Helper function to create a DaggerEnv instance with proper typing\n */\nexport function createDaggerEnv<T extends DaggerEnvConfig>(config: T): DaggerEnv<T> {\n\treturn new DaggerEnv(config)\n}\n"]}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA","sourcesContent":["export * from './dagger-env.js'\n"]}

package/dist/run-dagger-cmd.d.ts

@@ -1,17 +1,23 @@
+import { z } from 'zod/v4';
 import type { DaggerEnv, DaggerEnvConfig } from './dagger-env.js';
 /**
- * Configuration for running Dagger commands with 1Password integration
+ * A single secret returned by `infisical export --format=json`
+ */
+export type InfisicalSecret = z.infer<typeof InfisicalSecret>;
+export declare const InfisicalSecret: z.ZodObject<{
+    key: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strip>;
+/**
+ * Configuration for running Dagger commands with Infisical integration
  */
 export interface RunDaggerCommandConfig<T extends DaggerEnvConfig = DaggerEnvConfig> {
-    /** 1Password vault ID */
-    opVault: string;
-    /** 1Password item ID */
-    opItem: string;
-    /** 1Password sections to include for secrets */
-    opSections: Array<{
-        label: string;
-        id: string;
-    }>;
+    /** Infisical project ID */
+    projectId: string;
+    /** Infisical environment slug (e.g. `prod`) */
+    env: string;
+    /** Infisical folder path to fetch secrets from (e.g. `/ci/my-repo`) */
+    path: string;
     /** Commands that should include Docker socket if available */
     dockerCommands?: string[];
     /** Hook to run before executing the command (e.g., vendor file setup) */
@@ -31,7 +37,7 @@ export interface RunDaggerCommandOptions {
     extraArgs?: string[];
 }
 /**
- * Creates a function to run Dagger commands with 1Password integration
+ * Creates a function to run Dagger commands with Infisical integration
  * @param config Configuration for the command runner
  * @returns Function to execute Dagger commands
  */

package/dist/run-dagger-cmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-dagger-cmd.d.ts","sourceRoot":"","sources":["../src/run-dagger-cmd.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjE;;GAEG;AACH,MAAM,WAAW,sBAAsB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe;IAClF,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,gDAAgD;IAChD,UAAU,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChD,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,+DAA+D;IAC/D,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACvC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,eAAe,EAClE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAKhC,aAAa,MAAM,EACnB,UAAU,uBAAuB,KAC/B,OAAO,CAAC,IAAI,CAAC,CAuFhB"}
+{"version":3,"file":"run-dagger-cmd.d.ts","sourceRoot":"","sources":["../src/run-dagger-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAA;AAG1B,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjE;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAC7D,eAAO,MAAM,eAAe;;;iBAG1B,CAAA;AAEF;;GAEG;AACH,MAAM,WAAW,sBAAsB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe;IAClF,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAA;IACZ,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,+DAA+D;IAC/D,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACvC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,eAAe,EAClE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAGhC,aAAa,MAAM,EACnB,UAAU,uBAAuB,KAC/B,OAAO,CAAC,IAAI,CAAC,CA8EhB"}

package/dist/run-dagger-cmd.js

@@ -1,24 +1,23 @@
+import { z } from 'zod/v4';
 import { $, fs } from 'zx';
-import { OPItem, OPSection } from './op.js';
+export const InfisicalSecret = z.object({
+    key: z.string(),
+    value: z.string(),
+});
 /**
- * Creates a function to run Dagger commands with 1Password integration
+ * Creates a function to run Dagger commands with Infisical integration
  * @param config Configuration for the command runner
  * @returns Function to execute Dagger commands
  */
 export function createDaggerCommandRunner(config) {
-    const opItemUri = `op://${config.opVault}/${config.opItem}`;
     return async function runDaggerCommand(commandName, options) {
         const { args = {}, env = {}, extraArgs = [] } = options ?? {};
         // Run any pre-command setup
         if (config.beforeCommand) {
             await config.beforeCommand();
         }
-        // Environment variables to pass to the `op run` command
+        // Environment variables to pass to the `dagger` command
         const envVars = {};
-        // Pass dagger cloud token in CI because we don't have user auth
-        if (process.env.CI !== undefined) {
-            envVars.DAGGER_CLOUD_TOKEN = `${opItemUri}/DAGGER_CLOUD_TOKEN`;
-        }
         const commandArgs = [...extraArgs];
         // Add Docker socket for specific commands if available
         if (config.dockerCommands?.includes(commandName)) {
@@ -31,17 +30,17 @@ export function createDaggerCommandRunner(config) {
                 // Ignore if fs is not available or docker socket doesn't exist
             }
         }
-        // Fetch 1Password item
-        const opItem = OPItem.parse(await $ `op item get ${config.opItem} --vault ${config.opVault} --format json`.json());
-        // Parse sections to include
-        const sectionsToInclude = OPSection.array().parse(config.opSections);
-        // Extract secrets from specified sections
-        const secrets = opItem.fields
-            .filter((f) => sectionsToInclude.some((s) => s.id === f.section?.id))
-            .reduce((acc, f) => {
-            acc[f.label] = f.value;
+        // Fetch secrets from Infisical
+        const exportedSecrets = InfisicalSecret.array().parse(await $ `infisical export --silent --format=json --projectId ${config.projectId} --env ${config.env} --path ${config.path}`.json());
+        // Extract secrets into a key/value map
+        const secrets = exportedSecrets.reduce((acc, s) => {
+            acc[s.key] = s.value;
             return acc;
         }, {});
+        // Pass dagger cloud token in CI because we don't have user auth
+        if (process.env.CI !== undefined && secrets.DAGGER_CLOUD_TOKEN !== undefined) {
+            envVars.DAGGER_CLOUD_TOKEN = secrets.DAGGER_CLOUD_TOKEN;
+        }
         // Build environment variables for Dagger
         const daggerEnv = { ...env };
         if (process.env.CI !== undefined) {
@@ -59,10 +58,6 @@ export function createDaggerCommandRunner(config) {
         envVars.DAGGER_OPTIONS = JSON.stringify(daggerOptions);
         // Construct the command
         const cmd = [
-            'op',
-            'run',
-            '--no-masking',
-            '--',
             'dagger',
             'call',
             commandName,

package/dist/run-dagger-cmd.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-dagger-cmd.js","sourceRoot":"","sources":["../src/run-dagger-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,IAAI,CAAA;AAE1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAkC3C;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACxC,MAAiC;IAEjC,MAAM,SAAS,GAAG,QAAQ,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAA;IAE3D,OAAO,KAAK,UAAU,gBAAgB,CACrC,WAAmB,EACnB,OAAiC;QAEjC,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,OAAO,IAAI,EAAE,CAAA;QAE7D,4BAA4B;QAC5B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,aAAa,EAAE,CAAA;QAC7B,CAAC;QAED,wDAAwD;QACxD,MAAM,OAAO,GAA2B,EAAE,CAAA;QAE1C,gEAAgE;QAChE,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,kBAAkB,GAAG,GAAG,SAAS,qBAAqB,CAAA;QAC/D,CAAC;QAED,MAAM,WAAW,GAAa,CAAC,GAAG,SAAS,CAAC,CAAA;QAE5C,uDAAuD;QACvD,IAAI,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC;gBACJ,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBAC7C,WAAW,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;gBACzD,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,+DAA+D;YAChE,CAAC;QACF,CAAC;QAED,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAC1B,MAAM,CAAC,CAAA,eAAe,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,OAAO,gBAAgB,CAAC,IAAI,EAAE,CACpF,CAAA;QAED,4BAA4B;QAC5B,MAAM,iBAAiB,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAEpE,0CAA0C;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aACpE,MAAM,CACN,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACV,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAA;YACtB,OAAO,GAAG,CAAA;QACX,CAAC,EACD,EAA4B,CAC5B,CAAA;QAEF,yCAAyC;QACzC,MAAM,SAAS,GAA2B,EAAE,GAAG,GAAG,EAAE,CAAA;QACpD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC9C,SAAS,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;QACtD,CAAC;QAED,wCAAwC;QACxC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC;YAC/D,IAAI;YACJ,GAAG,EAAE,SAAS;YACd,OAAO;SACP,CAAC,CAAA;QACF,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAEtD,wBAAwB;QACxB,MAAM,GAAG,GAAa;YACrB,IAAI;YACJ,KAAK;YACL,cAAc;YACd,IAAI;YACJ,QAAQ;YACR,MAAM;YACN,WAAW;YACX,GAAG,WAAW;YACd,gCAAgC;SAChC,CAAA;QAED,sBAAsB;QACtB,MAAM,CAAC,CAAC;YACP,GAAG,EAAE;gBACJ,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,OAAO;aACV;YACD,KAAK,EAAE,SAAS;SAChB,CAAC,CAAA,GAAG,GAAG,EAAE,CAAA;IACX,CAAC,CAAA;AACF,CAAC"}
+{"version":3,"file":"run-dagger-cmd.js","sourceRoot":"","sources":["../src/run-dagger-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAA;AAC1B,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,IAAI,CAAA;AAQ1B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAA;AAgCF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACxC,MAAiC;IAEjC,OAAO,KAAK,UAAU,gBAAgB,CACrC,WAAmB,EACnB,OAAiC;QAEjC,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,OAAO,IAAI,EAAE,CAAA;QAE7D,4BAA4B;QAC5B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,aAAa,EAAE,CAAA;QAC7B,CAAC;QAED,wDAAwD;QACxD,MAAM,OAAO,GAA2B,EAAE,CAAA;QAE1C,MAAM,WAAW,GAAa,CAAC,GAAG,SAAS,CAAC,CAAA;QAE5C,uDAAuD;QACvD,IAAI,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC;gBACJ,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBAC7C,WAAW,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;gBACzD,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,+DAA+D;YAChE,CAAC;QACF,CAAC;QAED,+BAA+B;QAC/B,MAAM,eAAe,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CACpD,MAAM,CAAC,CAAA,uDAAuD,MAAM,CAAC,SAAS,UAAU,MAAM,CAAC,GAAG,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CACjI,CAAA;QAED,uCAAuC;QACvC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CACrC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACV,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAA;YACpB,OAAO,GAAG,CAAA;QACX,CAAC,EACD,EAA4B,CAC5B,CAAA;QAED,gEAAgE;QAChE,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAA;QACxD,CAAC;QAED,yCAAyC;QACzC,MAAM,SAAS,GAA2B,EAAE,GAAG,GAAG,EAAE,CAAA;QACpD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC9C,SAAS,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;QACtD,CAAC;QAED,wCAAwC;QACxC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC;YAC/D,IAAI;YACJ,GAAG,EAAE,SAAS;YACd,OAAO;SACP,CAAC,CAAA;QACF,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAEtD,wBAAwB;QACxB,MAAM,GAAG,GAAa;YACrB,QAAQ;YACR,MAAM;YACN,WAAW;YACX,GAAG,WAAW;YACd,gCAAgC;SAChC,CAAA;QAED,sBAAsB;QACtB,MAAM,CAAC,CAAC;YACP,GAAG,EAAE;gBACJ,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,OAAO;aACV;YACD,KAAK,EAAE,SAAS;SAChB,CAAC,CAAA,GAAG,GAAG,EAAE,CAAA;IACX,CAAC,CAAA;AACF,CAAC","sourcesContent":["import { z } from 'zod/v4'\nimport { $, fs } from 'zx'\n\nimport type { DaggerEnv, DaggerEnvConfig } from './dagger-env.js'\n\n/**\n * A single secret returned by `infisical export --format=json`\n */\nexport type InfisicalSecret = z.infer<typeof InfisicalSecret>\nexport const InfisicalSecret = z.object({\n\tkey: z.string(),\n\tvalue: z.string(),\n})\n\n/**\n * Configuration for running Dagger commands with Infisical integration\n */\nexport interface RunDaggerCommandConfig<T extends DaggerEnvConfig = DaggerEnvConfig> {\n\t/** Infisical project ID */\n\tprojectId: string\n\t/** Infisical environment slug (e.g. `prod`) */\n\tenv: string\n\t/** Infisical folder path to fetch secrets from (e.g. `/ci/my-repo`) */\n\tpath: string\n\t/** Commands that should include Docker socket if available */\n\tdockerCommands?: string[]\n\t/** Hook to run before executing the command (e.g., vendor file setup) */\n\tbeforeCommand?: () => Promise<void>\n\t/** DaggerEnv instance for schema validation and type safety */\n\tdaggerEnv: DaggerEnv<T>\n}\n\n/**\n * Options for individual command execution\n */\nexport interface RunDaggerCommandOptions {\n\t/** Arguments to pass to the Dagger command */\n\targs?: Record<string, any>\n\t/** Additional environment variables */\n\tenv?: Record<string, string>\n\t/** Additional command-line arguments */\n\textraArgs?: string[]\n}\n\n/**\n * Creates a function to run Dagger commands with Infisical integration\n * @param config Configuration for the command runner\n * @returns Function to execute Dagger commands\n */\nexport function createDaggerCommandRunner<T extends DaggerEnvConfig>(\n\tconfig: RunDaggerCommandConfig<T>\n) {\n\treturn async function runDaggerCommand(\n\t\tcommandName: string,\n\t\toptions?: RunDaggerCommandOptions\n\t): Promise<void> {\n\t\tconst { args = {}, env = {}, extraArgs = [] } = options ?? {}\n\n\t\t// Run any pre-command setup\n\t\tif (config.beforeCommand) {\n\t\t\tawait config.beforeCommand()\n\t\t}\n\n\t\t// Environment variables to pass to the `dagger` command\n\t\tconst envVars: Record<string, string> = {}\n\n\t\tconst commandArgs: string[] = [...extraArgs]\n\n\t\t// Add Docker socket for specific commands if available\n\t\tif (config.dockerCommands?.includes(commandName)) {\n\t\t\ttry {\n\t\t\t\tif (await fs.exists('/var/run/docker.sock')) {\n\t\t\t\t\tcommandArgs.push('--docker-socket=/var/run/docker.sock')\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// Ignore if fs is not available or docker socket doesn't exist\n\t\t\t}\n\t\t}\n\n\t\t// Fetch secrets from Infisical\n\t\tconst exportedSecrets = InfisicalSecret.array().parse(\n\t\t\tawait $`infisical export --silent --format=json --projectId ${config.projectId} --env ${config.env} --path ${config.path}`.json()\n\t\t)\n\n\t\t// Extract secrets into a key/value map\n\t\tconst secrets = exportedSecrets.reduce(\n\t\t\t(acc, s) => {\n\t\t\t\tacc[s.key] = s.value\n\t\t\t\treturn acc\n\t\t\t},\n\t\t\t{} as Record<string, string>\n\t\t)\n\n\t\t// Pass dagger cloud token in CI because we don't have user auth\n\t\tif (process.env.CI !== undefined && secrets.DAGGER_CLOUD_TOKEN !== undefined) {\n\t\t\tenvVars.DAGGER_CLOUD_TOKEN = secrets.DAGGER_CLOUD_TOKEN\n\t\t}\n\n\t\t// Build environment variables for Dagger\n\t\tconst daggerEnv: Record<string, string> = { ...env }\n\t\tif (process.env.CI !== undefined) {\n\t\t\tdaggerEnv.CI = process.env.CI\n\t\t}\n\t\tif (process.env.GITHUB_ACTIONS !== undefined) {\n\t\t\tdaggerEnv.GITHUB_ACTIONS = process.env.GITHUB_ACTIONS\n\t\t}\n\n\t\t// Validate and serialize dagger options\n\t\tconst daggerOptions = config.daggerEnv.getOptionsSchema().parse({\n\t\t\targs,\n\t\t\tenv: daggerEnv,\n\t\t\tsecrets,\n\t\t})\n\t\tenvVars.DAGGER_OPTIONS = JSON.stringify(daggerOptions)\n\n\t\t// Construct the command\n\t\tconst cmd: string[] = [\n\t\t\t'dagger',\n\t\t\t'call',\n\t\t\tcommandName,\n\t\t\t...commandArgs,\n\t\t\t'--options=env://DAGGER_OPTIONS',\n\t\t]\n\n\t\t// Execute the command\n\t\tawait $({\n\t\t\tenv: {\n\t\t\t\t...process.env,\n\t\t\t\t...envVars,\n\t\t\t},\n\t\t\tstdio: 'inherit',\n\t\t})`${cmd}`\n\t}\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dagger-env",
-  "version": "0.6.7",
+  "version": "1.0.0",
   "private": false,
   "description": "A type-safe, reusable environment configuration abstraction for Dagger modules.",
   "keywords": [
@@ -28,12 +28,6 @@
         "default": "./dist/index.js"
       }
     },
-    "./op": {
-      "import": {
-        "types": "./dist/op.d.ts",
-        "default": "./dist/op.js"
-      }
-    },
     "./run": {
       "import": {
         "types": "./dist/run-dagger-cmd.d.ts",
@@ -44,13 +38,14 @@
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "files": [
-    "dist"
+    "dist",
+    "src"
   ],
   "dependencies": {
     "zx": "8.8.4"
   },
   "devDependencies": {
-    "@dagger.io/dagger": "0.20.0",
+    "@dagger.io/dagger": "0.20.6",
     "typescript": "5.8.2",
     "vitest": "3.2.4",
     "zod": "4.1.12",
@@ -64,7 +59,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "runx build tsc ./src/index.ts ./src/op.ts ./src/run-dagger-cmd.ts",
+    "build": "runx build tsc ./src/index.ts ./src/run-dagger-cmd.ts",
     "check:exports": "runx check --exports",
     "check:lint": "run-eslint",
     "check:types": "run-tsc",

package/src/dagger-env.spec.ts

@@ -0,0 +1,203 @@
+import { describe, expect, it } from 'vitest'
+import { z } from 'zod/v4'
+
+import { createDaggerEnv } from './dagger-env'
+
+import type { DaggerOptionsFromConfig } from './dagger-env'
+
+describe('DaggerEnv', () => {
+	const daggerEnv = createDaggerEnv({
+		args: z.object({
+			push: z.string().optional(),
+			environment: z.enum(['dev', 'prod']).optional(),
+		}),
+		env: z.object({
+			CI: z.string().optional(),
+			NODE_ENV: z.string().optional(),
+		}),
+		secrets: z.object({
+			API_TOKEN: z.string(),
+			DATABASE_URL: z.string(),
+			REDIS_URL: z.string(),
+		}),
+		secretPresets: {
+			api: ['API_TOKEN', 'DATABASE_URL'],
+			cache: ['REDIS_URL'],
+		},
+		derivedEnvVars: {
+			API_TOKEN: {
+				API_BASE_URL: 'https://api.example.com',
+				API_VERSION: 'v1',
+			},
+			DATABASE_URL: {
+				DB_POOL_SIZE: '10',
+			},
+		},
+	})
+
+	it('should create a DaggerEnv instance', () => {
+		expect(daggerEnv).toBeDefined()
+		expect(typeof daggerEnv.parseDaggerOptions).toBe('function')
+		expect(typeof daggerEnv.getWithEnv).toBe('function')
+	})
+
+	it('should return the options schema', () => {
+		const schema = daggerEnv.getOptionsSchema()
+		expect(schema).toBeDefined()
+		expect(schema.shape.args).toBeDefined()
+		expect(schema.shape.env).toBeDefined()
+		expect(schema.shape.secrets).toBeDefined()
+	})
+
+	it('should return available secret presets', () => {
+		const presets = daggerEnv.getSecretPresets()
+		expect(presets).toEqual(['api', 'cache'])
+	})
+
+	it('should return secrets for a specific preset', () => {
+		const apiSecrets = daggerEnv.getPresetSecrets('api')
+		expect(apiSecrets).toEqual(['API_TOKEN', 'DATABASE_URL'])
+
+		const cacheSecrets = daggerEnv.getPresetSecrets('cache')
+		expect(cacheSecrets).toEqual(['REDIS_URL'])
+	})
+
+	it('should throw error for unknown preset', () => {
+		expect(() => {
+			daggerEnv.getPresetSecrets('unknown' as any)
+		}).toThrow('Unknown secret preset: unknown')
+	})
+
+	it('should validate options schema', () => {
+		const schema = daggerEnv.getOptionsSchema()
+
+		const validOptions = {
+			args: {
+				push: 'true',
+				environment: 'dev',
+			},
+			env: {
+				CI: 'true',
+				NODE_ENV: 'development',
+			},
+			secrets: {
+				API_TOKEN: 'test-token',
+				DATABASE_URL: 'postgres://localhost/test',
+				REDIS_URL: 'redis://localhost:6379',
+			},
+		}
+
+		const result = schema.parse(validOptions)
+		expect(result).toEqual(validOptions)
+	})
+
+	it('should reject invalid options', () => {
+		const schema = daggerEnv.getOptionsSchema()
+
+		const invalidOptions = {
+			args: {
+				environment: 'invalid', // not in enum
+			},
+			env: {
+				CI: 'true',
+			},
+			secrets: {
+				// missing required secrets
+			},
+		}
+
+		expect(() => schema.parse(invalidOptions)).toThrow()
+	})
+
+	describe('getWithEnv()', () => {
+		describe('type inference', () => {
+			describe('secretPresets', () => {
+				it('should not have type error for valid preset', async () => {
+					await daggerEnv.getWithEnv({} as any, ['api'], ['API_TOKEN'])
+				})
+
+				it('should have type error for unknown preset', async () => {
+					await daggerEnv.getWithEnv(
+						{} as any,
+						[
+							// @ts-expect-error
+							'unknown',
+						],
+						['API_TOKEN']
+					)
+				})
+			})
+
+			describe('secretNames', () => {
+				it('should not have type error for valid secret name', async () => {
+					await daggerEnv.getWithEnv({} as any, ['api'], ['API_TOKEN'])
+				})
+
+				it('should have type error for unknown secret name', async () => {
+					await daggerEnv.getWithEnv(
+						{} as any,
+						['api'],
+						[
+							// @ts-expect-error
+							'INVALID_SECRET',
+						]
+					)
+				})
+			})
+		})
+	})
+})
+
+describe('DaggerEnv integration', () => {
+	it('should work with a complex configuration', () => {
+		const complexConfig = {
+			args: z.object({
+				push: z.string().optional(),
+				filter: z.string().optional(),
+			}),
+			env: z.object({
+				CI: z.string().optional(),
+				GITHUB_ACTIONS: z.string().optional(),
+			}),
+			secrets: z.object({
+				BUILD_TOKEN: z.string(),
+				CACHE_KEY: z.string(),
+				API_TOKEN: z.string(),
+				DEPLOY_TOKEN: z.string(),
+			}),
+			secretPresets: {
+				build: ['BUILD_TOKEN', 'CACHE_KEY'],
+				deploy: ['API_TOKEN', 'DEPLOY_TOKEN'],
+			},
+			derivedEnvVars: {
+				BUILD_TOKEN: {
+					BUILD_API: 'https://build.example.com',
+					BUILD_TEAM: 'team_example',
+				},
+				API_TOKEN: {
+					API_ACCOUNT_ID: 'test-account-id',
+				},
+			},
+		} as const
+
+		const daggerEnv = createDaggerEnv(complexConfig)
+
+		expect(daggerEnv.getSecretPresets()).toEqual(['build', 'deploy'])
+		expect(daggerEnv.getPresetSecrets('build')).toEqual(['BUILD_TOKEN', 'CACHE_KEY'])
+
+		const schema = daggerEnv.getOptionsSchema()
+		const validOptions = {
+			args: { push: 'true', filter: 'api' },
+			env: { CI: 'true', GITHUB_ACTIONS: 'true' },
+			secrets: {
+				BUILD_TOKEN: 'test-build-token',
+				CACHE_KEY: 'test-cache-key',
+				API_TOKEN: 'test-api-token',
+				DEPLOY_TOKEN: 'test-deploy-token',
+			},
+		} satisfies DaggerOptionsFromConfig<typeof complexConfig>
+
+		const result = schema.parse(validOptions)
+		expect(result).toEqual(validOptions)
+	})
+})

package/src/dagger-env.ts

@@ -0,0 +1,227 @@
+import { dag } from '@dagger.io/dagger'
+import { z } from 'zod/v4'
+
+import type { Container, Secret } from '@dagger.io/dagger'
+
+/**
+ * Generic configuration for DaggerEnv
+ */
+export type DaggerEnvConfig = {
+	/** Arguments schema */
+	args: z.ZodObject<any>
+	/** Environment variables schema */
+	env: z.ZodObject<any>
+	/** Secrets schema */
+	secrets: z.ZodObject<any>
+	/** Secret presets mapping preset names to arrays of secret names */
+	secretPresets: Record<string, readonly string[]>
+	/** Derived environment variables based on secret names */
+	derivedEnvVars: Record<string, Record<string, string>>
+}
+
+/**
+ * Inferred options type from config
+ */
+export type DaggerOptionsFromConfig<T extends DaggerEnvConfig> = {
+	args: z.output<T['args']>
+	env: z.output<T['env']>
+	secrets: z.output<T['secrets']>
+}
+
+/**
+ * Reusable Dagger environment abstraction
+ */
+export class DaggerEnv<T extends DaggerEnvConfig> {
+	private readonly optionsSchema: z.ZodObject<{
+		args: T['args']
+		env: T['env']
+		secrets: T['secrets']
+	}>
+
+	constructor(private readonly config: T) {
+		this.optionsSchema = z.object({
+			args: config.args,
+			env: config.env,
+			secrets: config.secrets,
+		})
+	}
+
+	/**
+	 * Parse dagger options from a Secret
+	 */
+	async parseDaggerOptions(options: Secret): Promise<DaggerOptionsFromConfig<T>> {
+		return this.optionsSchema.parse(
+			JSON.parse(await options.plaintext())
+		) as DaggerOptionsFromConfig<T>
+	}
+
+	/**
+	 * Create a function that applies environment variables and secrets to a container
+	 * based on the provided Dagger options, secret presets, and additional secret names.
+	 */
+	async getWithEnv(
+		daggerOptions: Secret | DaggerOptionsFromConfig<T>,
+		secretPresets: Array<Extract<keyof T['secretPresets'], string>>,
+		secretNames?: Array<Extract<keyof z.output<T['secrets']>, string>>
+	): Promise<{
+		/**
+		 * Apply environment variables and secrets to a container
+		 */
+		withEnv: (con: Container) => Container
+		/**
+		 * Remove environment variables and secrets from a container
+		 */
+		withoutEnv: (con: Container) => Container
+	}> {
+		const isSecret = (obj: any): obj is Secret =>
+			obj &&
+			typeof obj === 'object' &&
+			'id' in obj &&
+			'plaintext' in obj &&
+			typeof obj.id === 'function' &&
+			typeof obj.plaintext === 'function'
+
+		const opts = isSecret(daggerOptions)
+			? await this.parseDaggerOptions(daggerOptions)
+			: daggerOptions
+
+		return {
+			withEnv: (con: Container) => {
+				let c = con
+
+				// Add individual secret names
+				for (const name of secretNames ?? []) {
+					if (typeof name === 'string' && name in opts.secrets) {
+						const secret = (opts.secrets as Record<string, string>)[name]
+						if (!secret) {
+							throw new Error(`Secret ${name} is undefined`)
+						}
+						c = c.withSecretVariable(name, dag.setSecret(name, secret))
+					}
+				}
+
+				const allSecretNames: string[] = [...(secretNames ?? [])]
+
+				// Add secret presets
+				for (const preset of secretPresets) {
+					const presetSecrets = this.config.secretPresets[preset]
+					if (!presetSecrets) {
+						throw new Error(`Unknown secret preset: ${String(preset)}`)
+					}
+
+					for (const secretName of presetSecrets) {
+						const secret = (opts.secrets as Record<string, string>)[secretName]
+						if (!secret) {
+							throw new Error(`Secret ${secretName} is undefined`)
+						}
+						allSecretNames.push(secretName)
+						c = c.withSecretVariable(secretName, dag.setSecret(secretName, secret))
+					}
+				}
+
+				// Add derived env vars based on secretNames
+				for (const name of allSecretNames) {
+					const derivedEnvVars = this.config.derivedEnvVars[name]
+					if (derivedEnvVars) {
+						for (const [key, value] of Object.entries(derivedEnvVars)) {
+							c = c.withEnvVariable(key, value)
+						}
+					}
+				}
+
+				// Add environment variables from options
+				const envVars = opts.env
+				for (const [key, value] of Object.entries(envVars)) {
+					if (value !== undefined && typeof value === 'string') {
+						c = c.withEnvVariable(key, value)
+					}
+				}
+
+				return c
+			},
+			withoutEnv: (con: Container) => {
+				let c = con
+
+				// Add individual secret names
+				for (const name of secretNames ?? []) {
+					if (typeof name === 'string' && name in opts.secrets) {
+						const secret = (opts.secrets as Record<string, string>)[name]
+						if (!secret) {
+							throw new Error(`Secret ${name} is undefined`)
+						}
+						c = c.withoutSecretVariable(name)
+					}
+				}
+
+				const allSecretNames: string[] = [...(secretNames ?? [])]
+
+				// remove secret presets
+				for (const preset of secretPresets) {
+					const presetSecrets = this.config.secretPresets[preset]
+					if (!presetSecrets) {
+						throw new Error(`Unknown secret preset: ${String(preset)}`)
+					}
+
+					for (const secretName of presetSecrets) {
+						const secret = (opts.secrets as Record<string, string>)[secretName]
+						if (!secret) {
+							throw new Error(`Secret ${secretName} is undefined`)
+						}
+						allSecretNames.push(secretName)
+						c = c.withoutSecretVariable(secretName)
+					}
+				}
+
+				// remove derived env vars based on secretNames
+				for (const name of allSecretNames) {
+					const derivedEnvVars = this.config.derivedEnvVars[name]
+					if (derivedEnvVars) {
+						for (const key of Object.keys(derivedEnvVars)) {
+							c = c.withoutEnvVariable(key)
+						}
+					}
+				}
+
+				// remove environment variables from options
+				const envVars = opts.env
+				for (const key of Object.keys(envVars)) {
+					c = c.withoutEnvVariable(key)
+				}
+
+				return c
+			},
+		}
+	}
+
+	/**
+	 * Get the options schema for this DaggerEnv instance
+	 */
+	getOptionsSchema() {
+		return this.optionsSchema
+	}
+
+	/**
+	 * Get available secret presets
+	 */
+	getSecretPresets(): Array<keyof T['secretPresets']> {
+		return Object.keys(this.config.secretPresets)
+	}
+
+	/**
+	 * Get secrets for a specific preset
+	 */
+	getPresetSecrets(preset: Extract<keyof T['secretPresets'], string>): readonly string[] {
+		const secrets = this.config.secretPresets[preset]
+		if (!secrets) {
+			throw new Error(`Unknown secret preset: ${String(preset)}`)
+		}
+		return secrets
+	}
+}
+
+/**
+ * Helper function to create a DaggerEnv instance with proper typing
+ */
+export function createDaggerEnv<T extends DaggerEnvConfig>(config: T): DaggerEnv<T> {
+	return new DaggerEnv(config)
+}

package/src/examples/run-dagger-cmd-usage.ts

@@ -0,0 +1,76 @@
+/**
+ * Example usage of the runDaggerCommand abstraction
+ *
+ * This example shows a realistic configuration for a project that uses Dagger
+ * with Infisical integration for secret management.
+ *
+ * Import pattern:
+ * - Main DaggerEnv functionality: import { createDaggerEnv } from 'dagger-env'
+ * - Command runner functionality: import { createDaggerCommandRunner } from 'dagger-env/run'
+ */
+
+import { createDaggerEnv } from 'dagger-env'
+import { createDaggerCommandRunner } from 'dagger-env/run'
+import { z } from 'zod/v4'
+
+// Create a DaggerEnv instance with your project's specific configuration
+const daggerEnv = createDaggerEnv({
+	args: z.object({
+		environment: z.enum(['dev', 'staging', 'prod']).optional(),
+		push: z.boolean().optional(),
+		verbose: z.boolean().optional(),
+	}),
+	env: z.object({
+		// CI environment variables
+		CI: z.string().optional(),
+		GITHUB_ACTIONS: z.string().optional(),
+		GITHUB_SHA: z.string().optional(),
+		// Project-specific environment variables
+		NODE_ENV: z.string().optional(),
+		LOG_LEVEL: z.string().optional(),
+	}),
+	secrets: z.object({
+		// API credentials
+		API_TOKEN: z.string(),
+		API_SECRET: z.string(),
+		// Database connection
+		DATABASE_URL: z.string(),
+		// External service keys
+		AWS_ACCESS_KEY_ID: z.string(),
+		AWS_SECRET_ACCESS_KEY: z.string(),
+		SENTRY_DSN: z.string().optional(),
+	}),
+	secretPresets: {
+		api: ['API_TOKEN', 'API_SECRET'],
+		database: ['DATABASE_URL'],
+		aws: ['AWS_ACCESS_KEY_ID', 'AWS_SECRET_ACCESS_KEY'],
+		all: [
+			'API_TOKEN',
+			'API_SECRET',
+			'DATABASE_URL',
+			'AWS_ACCESS_KEY_ID',
+			'AWS_SECRET_ACCESS_KEY',
+			'SENTRY_DSN',
+		],
+	} as const,
+	derivedEnvVars: {} as const,
+})
+
+// Create the command runner with Infisical configuration
+export const runDaggerCommand = createDaggerCommandRunner({
+	// Infisical configuration
+	projectId: 'your-project-id', // Replace with your actual Infisical project ID
+	env: 'prod', // Infisical environment slug
+	path: '/ci/my-repo', // Infisical folder path to fetch secrets from
+	// Commands that need Docker socket access
+	dockerCommands: ['build', 'test', 'deploy', 'migrate', 'seed'],
+	// Optional: Run setup before executing commands
+	beforeCommand: async () => {
+		// Example: Set up vendor files, download dependencies, etc.
+		console.log('Preparing Dagger environment...')
+		// const modules = await getDaggerModules()
+		// await setupDaggerVendorFiles(modules)
+	},
+	// Pass the DaggerEnv instance directly
+	daggerEnv,
+})

package/src/index.ts

@@ -0,0 +1 @@
+export * from './dagger-env.js'

package/src/run-dagger-cmd.spec.ts

@@ -0,0 +1,191 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { z } from 'zod/v4'
+
+import { createDaggerEnv } from './dagger-env'
+import { createDaggerCommandRunner } from './run-dagger-cmd'
+
+import type { RunDaggerCommandConfig } from './run-dagger-cmd'
+
+const mocks = vi.hoisted(() => ({
+	/** Resolves the JSON payload returned by `infisical export` */
+	exportJson: vi.fn(),
+	/** Records the rendered `infisical export` command string */
+	exportCmd: vi.fn(),
+	/** Records the final command execution: (options, argv) */
+	spawn: vi.fn(
+		async (_opts: { env: Record<string, string | undefined> }, _argv: string[]) => undefined
+	),
+	/** Mock for fs.exists() (docker socket probe) */
+	exists: vi.fn(async () => false),
+}))
+
+vi.mock('zx', () => {
+	const $ = (firstArg: unknown, ...vals: unknown[]) => {
+		if (Array.isArray(firstArg)) {
+			// Direct template call: $`infisical export ...`
+			const pieces = firstArg as readonly string[]
+			const cmd = pieces.reduce(
+				(acc, piece, i) => acc + piece + (i < vals.length ? String(vals[i]) : ''),
+				''
+			)
+			mocks.exportCmd(cmd)
+			return { json: mocks.exportJson }
+		}
+		// Options call: $({ env, stdio }) returns a template executor
+		return (_pieces: TemplateStringsArray, ...templateVals: unknown[]) =>
+			mocks.spawn(
+				firstArg as { env: Record<string, string | undefined> },
+				templateVals[0] as string[]
+			)
+	}
+	return { $, fs: { exists: mocks.exists } }
+})
+
+/**
+ * Environment variables passed to the spawned process
+ */
+type SpawnEnv = Record<string, string | undefined>
+
+function getSpawnCall(): { env: SpawnEnv; argv: string[] } {
+	expect(mocks.spawn).toHaveBeenCalledTimes(1)
+	const call = mocks.spawn.mock.calls.at(0)
+	if (!call) {
+		throw new Error('spawn was not called')
+	}
+	const [opts, argv] = call
+	return { env: opts.env, argv }
+}
+
+function createRunner(overrides?: Partial<Pick<RunDaggerCommandConfig, 'dockerCommands'>>) {
+	const daggerEnv = createDaggerEnv({
+		args: z.object({
+			push: z.string().optional(),
+		}),
+		env: z.object({
+			CI: z.string().optional(),
+			GITHUB_ACTIONS: z.string().optional(),
+			NODE_ENV: z.string().optional(),
+		}),
+		secrets: z.object({
+			API_TOKEN: z.string(),
+		}),
+		secretPresets: {
+			api: ['API_TOKEN'],
+		},
+		derivedEnvVars: {},
+	})
+
+	return createDaggerCommandRunner({
+		projectId: 'test-project-id',
+		env: 'prod',
+		path: '/ci/test',
+		daggerEnv,
+		...overrides,
+	})
+}
+
+describe('createDaggerCommandRunner()', () => {
+	beforeEach(() => {
+		vi.clearAllMocks()
+		vi.stubEnv('CI', undefined)
+		vi.stubEnv('GITHUB_ACTIONS', undefined)
+		vi.stubEnv('DAGGER_CLOUD_TOKEN', undefined)
+		mocks.exportJson.mockResolvedValue([
+			{ key: 'API_TOKEN', value: 'test-api-token', comment: '' },
+			{ key: 'DAGGER_CLOUD_TOKEN', value: 'test-dagger-cloud-token', comment: '' },
+		])
+	})
+
+	afterEach(() => {
+		vi.unstubAllEnvs()
+	})
+
+	it('builds the expected DAGGER_OPTIONS payload from the infisical export', async () => {
+		const runDaggerCommand = createRunner()
+		await runDaggerCommand('test-cmd', {
+			args: { push: 'true' },
+			env: { NODE_ENV: 'production' },
+		})
+
+		expect(mocks.exportCmd).toHaveBeenCalledWith(
+			'infisical export --silent --format=json --projectId test-project-id --env prod --path /ci/test'
+		)
+
+		const { env } = getSpawnCall()
+		expect(JSON.parse(env.DAGGER_OPTIONS as string)).toStrictEqual({
+			args: { push: 'true' },
+			env: { NODE_ENV: 'production' },
+			secrets: { API_TOKEN: 'test-api-token' },
+		})
+		expect(env.DAGGER_CLOUD_TOKEN).toBeUndefined()
+	})
+
+	it('passes DAGGER_CLOUD_TOKEN to the runner env (but not DAGGER_OPTIONS) in CI', async () => {
+		vi.stubEnv('CI', 'true')
+		vi.stubEnv('GITHUB_ACTIONS', 'true')
+
+		const runDaggerCommand = createRunner()
+		await runDaggerCommand('test-cmd')
+
+		const { env } = getSpawnCall()
+		const daggerOptions = JSON.parse(env.DAGGER_OPTIONS as string)
+		expect(daggerOptions.secrets).not.toHaveProperty('DAGGER_CLOUD_TOKEN')
+		expect(daggerOptions.env).toStrictEqual({ CI: 'true', GITHUB_ACTIONS: 'true' })
+		expect(env.DAGGER_CLOUD_TOKEN).toBe('test-dagger-cloud-token')
+	})
+
+	it('spawns dagger directly without an op wrapper', async () => {
+		const runDaggerCommand = createRunner()
+		await runDaggerCommand('test-cmd', { extraArgs: ['--verbose'] })
+
+		const { argv } = getSpawnCall()
+		expect(argv[0]).toBe('dagger')
+		expect(argv).not.toContain('op')
+		expect(argv).toStrictEqual([
+			'dagger',
+			'call',
+			'test-cmd',
+			'--verbose',
+			'--options=env://DAGGER_OPTIONS',
+		])
+	})
+
+	describe('docker socket', () => {
+		it('appends --docker-socket for dockerCommands when the socket exists', async () => {
+			mocks.exists.mockResolvedValue(true)
+
+			const runDaggerCommand = createRunner({ dockerCommands: ['build'] })
+			await runDaggerCommand('build')
+
+			const { argv } = getSpawnCall()
+			expect(argv).toStrictEqual([
+				'dagger',
+				'call',
+				'build',
+				'--docker-socket=/var/run/docker.sock',
+				'--options=env://DAGGER_OPTIONS',
+			])
+		})
+
+		it('does not append --docker-socket for non-docker commands', async () => {
+			mocks.exists.mockResolvedValue(true)
+
+			const runDaggerCommand = createRunner({ dockerCommands: ['build'] })
+			await runDaggerCommand('test-cmd')
+
+			const { argv } = getSpawnCall()
+			expect(argv).not.toContain('--docker-socket=/var/run/docker.sock')
+			expect(mocks.exists).not.toHaveBeenCalled()
+		})
+
+		it('does not append --docker-socket when the socket does not exist', async () => {
+			mocks.exists.mockResolvedValue(false)
+
+			const runDaggerCommand = createRunner({ dockerCommands: ['build'] })
+			await runDaggerCommand('build')
+
+			const { argv } = getSpawnCall()
+			expect(argv).not.toContain('--docker-socket=/var/run/docker.sock')
+		})
+	})
+})

package/src/run-dagger-cmd.ts

@@ -0,0 +1,134 @@
+import { z } from 'zod/v4'
+import { $, fs } from 'zx'
+
+import type { DaggerEnv, DaggerEnvConfig } from './dagger-env.js'
+
+/**
+ * A single secret returned by `infisical export --format=json`
+ */
+export type InfisicalSecret = z.infer<typeof InfisicalSecret>
+export const InfisicalSecret = z.object({
+	key: z.string(),
+	value: z.string(),
+})
+
+/**
+ * Configuration for running Dagger commands with Infisical integration
+ */
+export interface RunDaggerCommandConfig<T extends DaggerEnvConfig = DaggerEnvConfig> {
+	/** Infisical project ID */
+	projectId: string
+	/** Infisical environment slug (e.g. `prod`) */
+	env: string
+	/** Infisical folder path to fetch secrets from (e.g. `/ci/my-repo`) */
+	path: string
+	/** Commands that should include Docker socket if available */
+	dockerCommands?: string[]
+	/** Hook to run before executing the command (e.g., vendor file setup) */
+	beforeCommand?: () => Promise<void>
+	/** DaggerEnv instance for schema validation and type safety */
+	daggerEnv: DaggerEnv<T>
+}
+
+/**
+ * Options for individual command execution
+ */
+export interface RunDaggerCommandOptions {
+	/** Arguments to pass to the Dagger command */
+	args?: Record<string, any>
+	/** Additional environment variables */
+	env?: Record<string, string>
+	/** Additional command-line arguments */
+	extraArgs?: string[]
+}
+
+/**
+ * Creates a function to run Dagger commands with Infisical integration
+ * @param config Configuration for the command runner
+ * @returns Function to execute Dagger commands
+ */
+export function createDaggerCommandRunner<T extends DaggerEnvConfig>(
+	config: RunDaggerCommandConfig<T>
+) {
+	return async function runDaggerCommand(
+		commandName: string,
+		options?: RunDaggerCommandOptions
+	): Promise<void> {
+		const { args = {}, env = {}, extraArgs = [] } = options ?? {}
+
+		// Run any pre-command setup
+		if (config.beforeCommand) {
+			await config.beforeCommand()
+		}
+
+		// Environment variables to pass to the `dagger` command
+		const envVars: Record<string, string> = {}
+
+		const commandArgs: string[] = [...extraArgs]
+
+		// Add Docker socket for specific commands if available
+		if (config.dockerCommands?.includes(commandName)) {
+			try {
+				if (await fs.exists('/var/run/docker.sock')) {
+					commandArgs.push('--docker-socket=/var/run/docker.sock')
+				}
+			} catch {
+				// Ignore if fs is not available or docker socket doesn't exist
+			}
+		}
+
+		// Fetch secrets from Infisical
+		const exportedSecrets = InfisicalSecret.array().parse(
+			await $`infisical export --silent --format=json --projectId ${config.projectId} --env ${config.env} --path ${config.path}`.json()
+		)
+
+		// Extract secrets into a key/value map
+		const secrets = exportedSecrets.reduce(
+			(acc, s) => {
+				acc[s.key] = s.value
+				return acc
+			},
+			{} as Record<string, string>
+		)
+
+		// Pass dagger cloud token in CI because we don't have user auth
+		if (process.env.CI !== undefined && secrets.DAGGER_CLOUD_TOKEN !== undefined) {
+			envVars.DAGGER_CLOUD_TOKEN = secrets.DAGGER_CLOUD_TOKEN
+		}
+
+		// Build environment variables for Dagger
+		const daggerEnv: Record<string, string> = { ...env }
+		if (process.env.CI !== undefined) {
+			daggerEnv.CI = process.env.CI
+		}
+		if (process.env.GITHUB_ACTIONS !== undefined) {
+			daggerEnv.GITHUB_ACTIONS = process.env.GITHUB_ACTIONS
+		}
+
+		// Validate and serialize dagger options
+		const daggerOptions = config.daggerEnv.getOptionsSchema().parse({
+			args,
+			env: daggerEnv,
+			secrets,
+		})
+		envVars.DAGGER_OPTIONS = JSON.stringify(daggerOptions)
+
+		// Construct the command
+		const cmd: string[] = [
+			'dagger',
+			'call',
+			commandName,
+			...commandArgs,
+			'--options=env://DAGGER_OPTIONS',
+		]
+
+		// Execute the command
+		await $({
+			env: {
+				...process.env,
+				...envVars,
+			},
+			stdio: 'inherit',
+		})`${cmd}`
+	}
+}

package/dist/op.d.ts

@@ -1,90 +0,0 @@
-import { z } from 'zod/v4';
-/**
- * 1Password vault information
- */
-export type OPVault = z.infer<typeof OPVault>;
-export declare const OPVault: z.ZodObject<{
-    id: z.ZodString;
-    name: z.ZodString;
-}, z.core.$strip>;
-/**
- * 1Password item section information
- */
-export type OPSection = z.infer<typeof OPSection>;
-export declare const OPSection: z.ZodObject<{
-    id: z.ZodString;
-    label: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-/**
- * 1Password item field
- */
-export type OPField = z.infer<typeof OPField>;
-export declare const OPField: z.ZodObject<{
-    id: z.ZodString;
-    section: z.ZodOptional<z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    type: z.ZodEnum<{
-        STRING: "STRING";
-        CONCEALED: "CONCEALED";
-        MONTH_YEAR: "MONTH_YEAR";
-    }>;
-    purpose: z.ZodOptional<z.ZodEnum<{
-        NOTES: "NOTES";
-    }>>;
-    label: z.ZodString;
-    value: z.ZodString;
-    reference: z.ZodString;
-}, z.core.$strip>;
-/**
- * 1Password item category
- */
-export type OPCategory = z.infer<typeof OPCategory>;
-export declare const OPCategory: z.ZodEnum<{
-    SECURE_NOTE: "SECURE_NOTE";
-}>;
-/**
- * Complete 1Password item structure
- */
-export type OPItem = z.infer<typeof OPItem>;
-export declare const OPItem: z.ZodObject<{
-    id: z.ZodString;
-    title: z.ZodString;
-    favorite: z.ZodBoolean;
-    version: z.ZodInt;
-    vault: z.ZodObject<{
-        id: z.ZodString;
-        name: z.ZodString;
-    }, z.core.$strip>;
-    category: z.ZodEnum<{
-        SECURE_NOTE: "SECURE_NOTE";
-    }>;
-    last_edited_by: z.ZodString;
-    created_at: z.ZodISODateTime;
-    updated_at: z.ZodISODateTime;
-    additional_information: z.ZodString;
-    sections: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    fields: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        section: z.ZodOptional<z.ZodObject<{
-            id: z.ZodString;
-            label: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-        type: z.ZodEnum<{
-            STRING: "STRING";
-            CONCEALED: "CONCEALED";
-            MONTH_YEAR: "MONTH_YEAR";
-        }>;
-        purpose: z.ZodOptional<z.ZodEnum<{
-            NOTES: "NOTES";
-        }>>;
-        label: z.ZodString;
-        value: z.ZodString;
-        reference: z.ZodString;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-//# sourceMappingURL=op.d.ts.map

package/dist/op.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"op.d.ts","sourceRoot":"","sources":["../src/op.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAA;AAE1B;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAC7C,eAAO,MAAM,OAAO;;;iBAGlB,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAA;AACjD,eAAO,MAAM,SAAS;;;iBAGpB,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAC7C,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;iBAQlB,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AACnD,eAAO,MAAM,UAAU;;EAA0B,CAAA;AAEjD;;GAEG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAA;AAC3C,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAajB,CAAA"}

package/dist/op.js

@@ -1,34 +0,0 @@
-import { z } from 'zod/v4';
-export const OPVault = z.object({
-    id: z.string(),
-    name: z.string(),
-});
-export const OPSection = z.object({
-    id: z.string(),
-    label: z.string().optional(),
-});
-export const OPField = z.object({
-    id: z.string(),
-    section: OPSection.optional(),
-    type: z.enum(['STRING', 'CONCEALED', 'MONTH_YEAR']),
-    purpose: z.enum(['NOTES']).optional(),
-    label: z.string(),
-    value: z.string(),
-    reference: z.string(),
-});
-export const OPCategory = z.enum(['SECURE_NOTE']);
-export const OPItem = z.object({
-    id: z.string(),
-    title: z.string(),
-    favorite: z.boolean(),
-    version: z.int(),
-    vault: OPVault,
-    category: OPCategory,
-    last_edited_by: z.string(),
-    created_at: z.iso.datetime(),
-    updated_at: z.iso.datetime(),
-    additional_information: z.string(),
-    sections: z.array(OPSection),
-    fields: z.array(OPField),
-});
-//# sourceMappingURL=op.js.map

package/dist/op.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"op.js","sourceRoot":"","sources":["../src/op.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAA;AAM1B,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAA;AAMF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAA;AAMF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAA;AAMF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;AAMjD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC5B,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;CACxB,CAAC,CAAA"}