dc-ops-cli 1.0.0

package/README.md

@@ -0,0 +1,310 @@
+# ops - 1Password CLI Helper
+
+Easy secret retrieval from 1Password with smart fallbacks and interactive prompts.
+
+## Features
+
+- 🔐 **Smart retrieval** - Get secrets with automatic fallback prompts
+- 📝 **Interactive prompts** - Create secrets on-the-fly if not found
+- 📋 **List & search** - Browse your vault items
+- ⭐ **Favorites** - Quick access to your most-used secrets
+- 📤 **Export** - Generate .env files from your vault
+- 🔍 **Inspect** - Discover available fields for any secret
+- 🏦 **Vaults** - List and browse available vaults
+- 💡 **Smart suggestions** - Get hints when secrets or fields aren't found
+- 🎨 **Beautiful UI** - Colored output and progress indicators
+- 🔒 **Secure** - Never exposes secrets in logs or chat
+
+## Installation
+
+```bash
+# Install dependencies
+cd op-cli-helper
+npm install
+
+# Build
+npm run build
+
+# Link globally for development
+npm link
+```
+
+## Prerequisites
+
+1. Install [1Password CLI](https://1password.com/downloads/command-line/)
+2. Sign in: `op signin`
+
+## Usage
+
+### Get a secret
+
+```bash
+# Get a secret (prompts to create if not found)
+ops get GITHUB_TOKEN
+
+# Specify vault and field
+ops get GITHUB_TOKEN --vault Personal --field api-key
+
+# Plain output (for piping)
+export TOKEN=$(ops get GITHUB_TOKEN --plain)
+
+# JSON output
+ops get GITHUB_TOKEN --json
+```
+
+### Store a secret
+
+```bash
+# Interactive prompt for value
+ops set GITHUB_TOKEN
+
+# Pass value directly
+ops set GITHUB_TOKEN --value "ghp_xxxxxxxxxxxx"
+
+# Read value from file or stdin
+ops set GITHUB_TOKEN --value-file ~/.secrets/github_token
+cat token.txt | ops set GITHUB_TOKEN --value -
+
+# Specify vault
+ops set GITHUB_TOKEN --vault Work
+```
+
+### Copy a secret to the clipboard
+
+```bash
+# Copy and clear after 30s
+ops copy GITHUB_TOKEN
+
+# Custom TTL
+ops copy GITHUB_TOKEN --ttl 10
+```
+
+### List secrets
+
+```bash
+# List all items in default vault
+ops list
+
+# List from specific vault
+ops list --vault Work
+
+# Search items
+ops list --search "github"
+
+# Dedicated search command
+ops search "github"
+
+# JSON output
+ops list --json
+
+# Plain output (tab-delimited)
+ops list --plain
+```
+
+### View favorites
+
+```bash
+# List only favorite items (⭐ markers in regular list)
+ops favorites
+
+# Or use the flag
+ops list --favorites
+
+# Favorites also show in regular list with ⭐ markers
+ops list
+
+# Mark items as favorites in 1Password app or web interface
+```
+
+### Export secrets
+
+```bash
+# Export as .env to stdout
+ops export
+
+# Export to file
+ops export --output .env
+
+# Export as JSON
+ops export --format json --output secrets.json
+
+# JSON to stdout
+ops export --json
+
+# From specific vault
+ops export --vault Work --output work.env
+```
+
+### Import secrets
+
+```bash
+# Import from a .env file (KEY=VALUE per line)
+ops import .env
+
+# Import into a specific vault
+ops import .env --vault Work
+
+# Preview what would be imported without making changes
+ops import .env --dry-run
+```
+
+### Run a command with injected secrets
+
+Create a `.env.ops` file that maps environment variables to secret names:
+
+```
+API_KEY=MY_API_KEY_SECRET
+DB_PASSWORD=MY_DB_PASSWORD
+```
+
+Then run:
+
+```bash
+ops run -- node app.js
+
+# Or inline mappings
+ops run --env API_KEY=MY_API_KEY_SECRET -- node app.js
+
+# Verbose mode shows which secrets are injected
+ops run --verbose --env API_KEY=MY_API_KEY_SECRET -- node app.js
+```
+
+### Resolve a share link
+
+```bash
+# Resolve a 1Password share link to an op:// reference
+ops resolve "https://share.1password.com/s#..."
+
+# JSON output for scripting
+ops resolve "https://share.1password.com/s#..." --json
+```
+
+Outputs all available fields (id/label/type) so you can pick the right `--field`.
+
+### Inspect a secret
+
+```bash
+# List available fields for a secret
+ops inspect "GitHub PAT"
+
+# JSON output
+ops inspect "GitHub PAT" --json
+```
+
+Useful for discovering field names before using `ops get --field`.
+
+### List vaults
+
+```bash
+# List all available vaults
+ops vaults
+
+# JSON output
+ops vaults --json
+```
+
+### Smart suggestions
+
+When a secret or field isn't found, ops provides helpful suggestions:
+
+```bash
+# If field doesn't exist, suggests available fields
+$ ops get "GitHub PAT" --field token
+Error: Field "token" not found
+Available fields: password, username, otp
+Try: ops get "GitHub PAT" --field password
+
+# If secret doesn't exist, suggests similar names
+$ ops get "GutHub PAT"
+Error: Secret "GutHub PAT" not found
+Did you mean: GitHub PAT, GitLab PAT
+```
+
+The clipboard `copy` command also confirms when it clears the clipboard after the TTL expires.
+
+## Integration with AGENTS.md Pattern
+
+This tool follows the pattern in §13 of AGENTS.md:
+
+```bash
+# 1. Check 1Password first
+ops get OPENAI_API_KEY --silent 2>/dev/null || echo "not_found"
+
+# 2. If not found, prompt and store
+ops set OPENAI_API_KEY
+
+# 3. Never leave raw tokens in files
+# Always use: ops get SERVICE_KEY --silent
+```
+
+## Common Patterns
+
+### Development Environment Setup
+
+```bash
+# Generate .env from 1Password
+ops export --vault Development --output .env
+
+# Source it
+source .env
+```
+
+### CI/CD Integration
+
+```bash
+# Get secret for GitHub Actions
+export TOKEN=$(ops get DEPLOY_TOKEN --silent)
+
+# Or export all secrets
+ops export --format json | jq -r 'to_entries | .[] | "\(.key)=\(.value)"' >> $GITHUB_ENV
+```
+
+### Shell Script Integration
+
+```bash
+#!/bin/bash
+set -e
+
+# Get API key with automatic prompt if missing
+API_KEY=$(ops get MY_SERVICE_API_KEY --silent)
+
+# Use in curl
+curl -H "Authorization: Bearer $API_KEY" https://api.example.com
+```
+
+## Commands Reference
+
+| Command | Description | Options |
+|---------|-------------|---------|
+| `get <name>` | Get a secret | `-v, --vault`, `-f, --field`, `--plain`, `--json`, `-s, --silent`, `--no-input` |
+| `set <name>` | Store a secret | `-v, --vault`, `-f, --field`, `--value`, `--value-file`, `--force`, `--no-input` |
+| `copy <name>` | Copy a secret to clipboard | `-v, --vault`, `-f, --field`, `--ttl`, `-q, --quiet` |
+| `list` | List vault items | `-v, --vault`, `-s, --search`, `-j, --json`, `--plain`, `--favorites` |
+| `search <query>` | Search items by title | `-v, --vault`, `-j, --json`, `--plain` |
+| `favorites` | List favorite items | `-v, --vault`, `-j, --json`, `--plain` |
+| `export` | Export to .env/JSON | `-v, --vault`, `-f, --format`, `-j, --json`, `-o, --output` |
+| `import <file>` | Import secrets from .env | `-v, --vault`, `--dry-run` |
+| `run` | Run a command with secrets injected | `-v, --vault`, `-f, --field`, `-e, --env`, `--env-file`, `--verbose` |
+| `resolve <shareLink>` | Resolve share link to ops reference | `-j, --json` |
+| `inspect <name>` | Show available fields for a secret | `-v, --vault`, `-j, --json` |
+| `vaults` | List available vaults | `-j, --json` |
+
+## Development
+
+```bash
+# Install dependencies
+npm install
+
+# Run in dev mode
+npm run dev -- get GITHUB_TOKEN
+
+# Type check
+npm run typecheck
+
+# Build
+npm run build
+```
+
+## License
+
+MIT

package/dist/commands/copy.d.ts

@@ -0,0 +1,23 @@
+import { getSecret, checkOpCli } from '../utils/op.js';
+import { applyColorConfig, createSpinner, resolveBooleanOption, resolveField, resolveVault } from '../utils/cli.js';
+export interface CopyOptions {
+    vault?: string;
+    field?: string;
+    ttl?: number;
+    quiet?: boolean;
+    color?: boolean;
+}
+export interface CopyDependencies {
+    getSecret: typeof getSecret;
+    checkOpCli: typeof checkOpCli;
+    clipboardRead: () => Promise<string>;
+    clipboardWrite: (value: string) => Promise<void>;
+    applyColorConfig: typeof applyColorConfig;
+    createSpinner: typeof createSpinner;
+    resolveBooleanOption: typeof resolveBooleanOption;
+    resolveField: typeof resolveField;
+    resolveVault: typeof resolveVault;
+}
+export declare function createCopyCommand(overrides?: Partial<CopyDependencies>): (name: string, options: CopyOptions) => Promise<void>;
+export declare const copyCommand: (name: string, options: CopyOptions) => Promise<void>;
+//# sourceMappingURL=copy.d.ts.map

package/dist/commands/copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copy.d.ts","sourceRoot":"","sources":["../../src/commands/copy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACb,MAAM,iBAAiB,CAAC;AAGzB,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,aAAa,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,YAAY,EAAE,OAAO,YAAY,CAAC;CACnC;AAcD,wBAAgB,iBAAiB,CAC/B,SAAS,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACxC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CA4DvD;AAED,eAAO,MAAM,WAAW,SA9Dd,MAAM,WAAW,WAAW,KAAK,OAAO,CAAC,IAAI,CA8DT,CAAC"}

package/dist/commands/copy.js

@@ -0,0 +1,74 @@
+import chalk from 'chalk';
+import clipboardy from 'clipboardy';
+import { getSecret, checkOpCli } from '../utils/op.js';
+import { applyColorConfig, createSpinner, resolveBooleanOption, resolveField, resolveVault, } from '../utils/cli.js';
+import { OpError } from '../utils/types.js';
+const DEFAULT_TTL_SECONDS = 30;
+function resolveTtlSeconds(value) {
+    if (value === undefined)
+        return DEFAULT_TTL_SECONDS;
+    if (!Number.isFinite(value) || value < 0) {
+        throw new OpError('Clipboard TTL must be a non-negative number of seconds.', 2);
+    }
+    return value;
+}
+const defaultDependencies = {
+    getSecret,
+    checkOpCli,
+    clipboardRead: () => clipboardy.read(),
+    clipboardWrite: (value) => clipboardy.write(value),
+    applyColorConfig,
+    createSpinner,
+    resolveBooleanOption,
+    resolveField,
+    resolveVault,
+};
+export function createCopyCommand(overrides = {}) {
+    const deps = { ...defaultDependencies, ...overrides };
+    return async function copyCommand(name, options) {
+        try {
+            deps.checkOpCli();
+            const vault = deps.resolveVault(options.vault);
+            const field = deps.resolveField(options.field);
+            const envQuiet = deps.resolveBooleanOption(undefined, 'OPS_QUIET');
+            const quiet = options.quiet === true || envQuiet;
+            const envNoColor = deps.resolveBooleanOption(undefined, 'OPS_NO_COLOR');
+            const noColor = options.color === false || envNoColor;
+            const ttlSeconds = resolveTtlSeconds(options.ttl);
+            deps.applyColorConfig(noColor);
+            const spinner = deps.createSpinner('Copying secret to clipboard...', quiet);
+            const secret = deps.getSecret(name, vault, field);
+            if (secret === null) {
+                spinner.fail(chalk.yellow(`Secret "${name}" not found in vault "${vault}"`));
+                throw new OpError('Secret not found.', 1);
+            }
+            await deps.clipboardWrite(secret);
+            if (!quiet) {
+                spinner.succeed(chalk.green(`Copied to clipboard! Will clear in ${ttlSeconds}s.`));
+            }
+            setTimeout(async () => {
+                try {
+                    const current = await deps.clipboardRead();
+                    if (current === secret) {
+                        await deps.clipboardWrite('');
+                        if (!quiet) {
+                            console.log(chalk.gray('✓ Clipboard cleared'));
+                        }
+                    }
+                }
+                catch {
+                    // Best-effort clipboard cleanup.
+                }
+            }, ttlSeconds * 1000);
+        }
+        catch (error) {
+            if (error instanceof OpError) {
+                console.error(chalk.red(`Error: ${error.message}`));
+                process.exit(error.exitCode);
+            }
+            throw error;
+        }
+    };
+}
+export const copyCommand = createCopyCommand();
+//# sourceMappingURL=copy.js.map

package/dist/commands/copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copy.js","sourceRoot":"","sources":["../../src/commands/copy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,UAAU,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAU5C,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,OAAO,CAAC,yDAAyD,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD,MAAM,mBAAmB,GAAqB;IAC5C,SAAS;IACT,UAAU;IACV,aAAa,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;IACtC,cAAc,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1D,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,YAAY;IACZ,YAAY;CACb,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAC/B,YAAuC,EAAE;IAEzC,MAAM,IAAI,GAAG,EAAE,GAAG,mBAAmB,EAAE,GAAG,SAAS,EAAE,CAAC;IAEtD,OAAO,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,OAAoB;QAEpB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,CAAC;YAElB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC;YACjD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,CAAC;YACtD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAElD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YAE5E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAElD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,yBAAyB,KAAK,GAAG,CAAC,CAC/D,CAAC;gBACF,MAAM,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAElC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,OAAO,CACb,KAAK,CAAC,KAAK,CAAC,sCAAsC,UAAU,IAAI,CAAC,CAClE,CAAC;YACJ,CAAC;YAED,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC3C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;wBACvB,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;wBAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;wBACjD,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;YACH,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC"}

package/dist/commands/export.d.ts

@@ -0,0 +1,14 @@
+import { ExportOptions, OpItem } from '../utils/types.js';
+import type oraType from 'ora';
+export interface ExportDeps {
+    checkOpCli: () => void;
+    listItems: (vault: string) => OpItem[];
+    getItem: (title: string, vault: string) => OpItem | null;
+    existsSync: (path: string) => boolean;
+    dirname: (path: string) => string;
+    writeFileSync: (path: string, content: string) => void;
+    createSpinner: (text: string, quiet: boolean) => ReturnType<typeof oraType>;
+}
+export declare function createExportCommand(deps?: ExportDeps): (options: ExportOptions) => Promise<void>;
+export declare const exportCommand: (options: ExportOptions) => Promise<void>;
+//# sourceMappingURL=export.d.ts.map

package/dist/commands/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":"AAWA,OAAO,EAAW,aAAa,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,OAAO,MAAM,KAAK,CAAC;AAE/B,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACvC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACzD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;CAC7E;AAYD,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,UAAwB,IAC5B,SAAS,aAAa,KAAG,OAAO,CAAC,IAAI,CAAC,CAgH3E;AAGD,eAAO,MAAM,aAAa,YAnHqB,aAAa,KAAG,OAAO,CAAC,IAAI,CAmHzB,CAAC"}

package/dist/commands/export.js

@@ -0,0 +1,111 @@
+import { writeFileSync, existsSync } from 'fs';
+import { dirname } from 'path';
+import chalk from 'chalk';
+import { listItems, getItem, checkOpCli } from '../utils/op.js';
+import { applyColorConfig, createSpinner, resolveBooleanOption, resolveFormat, resolveVault, } from '../utils/cli.js';
+import { OpError } from '../utils/types.js';
+const defaultDeps = {
+    checkOpCli,
+    listItems,
+    getItem,
+    existsSync,
+    dirname,
+    writeFileSync,
+    createSpinner,
+};
+export function createExportCommand(deps = defaultDeps) {
+    return async function exportCommand(options) {
+        try {
+            deps.checkOpCli();
+            if (options.json && options.format && options.format !== 'json') {
+                throw new OpError('Use either --json or --format, not both.', 2);
+            }
+            const vault = resolveVault(options.vault);
+            const envQuiet = resolveBooleanOption(undefined, 'OPS_QUIET');
+            const quiet = options.quiet === true || envQuiet;
+            const envNoColor = resolveBooleanOption(undefined, 'OPS_NO_COLOR');
+            const noColor = options.color === false || envNoColor;
+            const format = resolveFormat(options.json ? 'json' : options.format);
+            applyColorConfig(noColor);
+            // Validate output path early (before fetching secrets)
+            if (options.output && options.output !== '-') {
+                const dir = deps.dirname(options.output);
+                if (!deps.existsSync(dir)) {
+                    throw new OpError(`Output directory not found: ${dir}`, 2);
+                }
+            }
+            const outputToStdout = !options.output || options.output === '-';
+            const quietSpinner = quiet || outputToStdout || format === 'json';
+            const spinner = deps.createSpinner(`Exporting secrets from vault "${vault}"...`, quietSpinner);
+            // Get all items from vault
+            const items = deps.listItems(vault);
+            if (items.length === 0) {
+                if (!quietSpinner) {
+                    spinner.warn(chalk.yellow('No items found in vault.'));
+                }
+                return;
+            }
+            // Fetch full details for each item
+            const secrets = {};
+            for (const item of items) {
+                const fullItem = deps.getItem(item.title, vault);
+                if (!fullItem?.fields)
+                    continue;
+                // Find password or concealed field
+                const secretField = fullItem.fields.find((f) => f.type === 'CONCEALED' || f.id === 'password');
+                if (secretField?.value) {
+                    // Convert title to env var format (uppercase, replace spaces/hyphens with underscore)
+                    const envKey = item.title
+                        .toUpperCase()
+                        .replace(/[^A-Z0-9]/g, '_')
+                        .replace(/_+/g, '_');
+                    secrets[envKey] = secretField.value;
+                }
+            }
+            if (!quietSpinner) {
+                spinner.stop();
+            }
+            // Format output
+            let output;
+            if (format === 'json') {
+                output = JSON.stringify(secrets, null, 2);
+            }
+            else {
+                // .env format
+                output = Object.entries(secrets)
+                    .map(([key, value]) => {
+                    // Escape quotes and newlines
+                    const escapedValue = value
+                        .replace(/\\/g, '\\\\')
+                        .replace(/"/g, '\\"')
+                        .replace(/\n/g, '\\n');
+                    return `${key}="${escapedValue}"`;
+                })
+                    .join('\n');
+            }
+            // Output to file or stdout
+            if (!outputToStdout) {
+                deps.writeFileSync(options.output, output);
+                if (!quiet) {
+                    console.log(chalk.green(`✓ Exported ${Object.keys(secrets).length} secrets to ${options.output}`));
+                }
+            }
+            else {
+                console.log(output);
+            }
+            if (!quiet && !outputToStdout) {
+                console.log(chalk.gray(`\n${Object.keys(secrets).length} secrets exported from "${vault}"`));
+            }
+        }
+        catch (error) {
+            if (error instanceof OpError) {
+                console.error(chalk.red(`Error: ${error.message}`));
+                process.exit(error.exitCode);
+            }
+            throw error;
+        }
+    };
+}
+// Default export for CLI usage
+export const exportCommand = createExportCommand();
+//# sourceMappingURL=export.js.map

package/dist/commands/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAyB,MAAM,mBAAmB,CAAC;AAanE,MAAM,WAAW,GAAe;IAC9B,UAAU;IACV,SAAS;IACT,OAAO;IACP,UAAU;IACV,OAAO;IACP,aAAa;IACb,aAAa;CACd,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,OAAmB,WAAW;IAChE,OAAO,KAAK,UAAU,aAAa,CAAC,OAAsB;QACxD,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,CAAC;YAElB,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAChE,MAAM,IAAI,OAAO,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC;YACjD,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,CAAC;YACtD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAErE,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAE1B,uDAAuD;YACvD,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,OAAO,CAAC,+BAA+B,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC;YACjE,MAAM,YAAY,GAAG,KAAK,IAAI,cAAc,IAAI,MAAM,KAAK,MAAM,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,iCAAiC,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;YAE/F,2BAA2B;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAEpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACzD,CAAC;gBACD,OAAO;YACT,CAAC;YAED,mCAAmC;YACnC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAE3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACjD,IAAI,CAAC,QAAQ,EAAE,MAAM;oBAAE,SAAS;gBAEhC,mCAAmC;gBACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU,CACrD,CAAC;gBAEF,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;oBACvB,sFAAsF;oBACtF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;yBACtB,WAAW,EAAE;yBACb,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;yBAC1B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAEvB,OAAO,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC;gBACtC,CAAC;YACH,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,CAAC;YAED,gBAAgB;YAChB,IAAI,MAAc,CAAC;YAEnB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,cAAc;gBACd,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;qBAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;oBACpB,6BAA6B;oBAC7B,MAAM,YAAY,GAAG,KAAK;yBACvB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;yBACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;yBACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACzB,OAAO,GAAG,GAAG,KAAK,YAAY,GAAG,CAAC;gBACpC,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YAED,2BAA2B;YAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAO,EAAE,MAAM,CAAC,CAAC;gBAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,cAAc,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,eAAe,OAAO,CAAC,MAAM,EAAE,CACzE,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAED,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,2BAA2B,KAAK,GAAG,CAAC,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC"}

package/dist/commands/get.d.ts

@@ -0,0 +1,31 @@
+import inquirer from 'inquirer';
+import { getSecret, setSecret, checkOpCli, itemExists, getItemFields, findSimilarItems } from '../utils/op.js';
+import { applyColorConfig, createSpinner, isInteractiveInput, resolveBooleanOption, resolveField, resolveVault } from '../utils/cli.js';
+export interface GetOptions {
+    vault?: string;
+    field?: string;
+    silent?: boolean;
+    plain?: boolean;
+    json?: boolean;
+    input?: boolean;
+    quiet?: boolean;
+    color?: boolean;
+}
+export interface GetDependencies {
+    getSecret: typeof getSecret;
+    setSecret: typeof setSecret;
+    checkOpCli: typeof checkOpCli;
+    itemExists: typeof itemExists;
+    getItemFields: typeof getItemFields;
+    findSimilarItems: typeof findSimilarItems;
+    prompt: typeof inquirer.prompt;
+    applyColorConfig: typeof applyColorConfig;
+    createSpinner: typeof createSpinner;
+    isInteractiveInput: typeof isInteractiveInput;
+    resolveBooleanOption: typeof resolveBooleanOption;
+    resolveField: typeof resolveField;
+    resolveVault: typeof resolveVault;
+}
+export declare function createGetCommand(overrides?: Partial<GetDependencies>): (name: string, options: GetOptions) => Promise<void>;
+export declare const getCommand: (name: string, options: GetOptions) => Promise<void>;
+//# sourceMappingURL=get.d.ts.map

package/dist/commands/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../src/commands/get.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC/G,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACb,MAAM,iBAAiB,CAAC;AAGzB,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,MAAM,EAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAC/B,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,YAAY,EAAE,OAAO,YAAY,CAAC;CACnC;AAkBD,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,eAAe,CAAM,GACvC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAgJtD;AAED,eAAO,MAAM,UAAU,SAlJb,MAAM,WAAW,UAAU,KAAK,OAAO,CAAC,IAAI,CAkJV,CAAC"}