envilder 0.5.1 → 0.5.3

package/README.md

@@ -1,12 +1,9 @@
 <h1 align="center">
   <br>
   <img src="https://github.com/user-attachments/assets/96bf1efa-7d21-440a-a414-3a20e7f9a1f1" alt="Envilder">
-  <br>
-  Envilder
-  <br>
 </h1>
 
-<h4 align="center">Secure Your Environment Variables with AWS SSM Parameter Store</h4>
+<h4 align="center">A CLI that securely centralizes your environment variables from AWS SSM as a single source of truth</h4>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/envilder">
@@ -20,11 +17,17 @@
   </a>
 </p>
 
-<p align="center">
-  <b>Stop committing secrets to your repo! Start using AWS SSM Parameter Store to secure your credentials.</b>
-</p>
+## 🌟 Key benefits
+
+- **🔒 Strict access control** - AWS IAM policies control who accesses which secrets (dev vs prod)
+- **📊 Full audit trail** - All parameter access is logged in CloudTrail for compliance requirements
+- **🧩 Single source of truth** - No more copying .env files from Notion or emails - SSM is your only source
+- **🔁 Idempotent operations** - Overwrites values in your `.env` file *only* for variables defined in your mapping
+file, using the latest from SSM. Variables not in the mapping file are preserved. Safe for automation.
+- **⚙️ Environment-aware** - Use templates like `/project/${ENV}/DB_PASSWORD` to dynamically fetch the right secrets
+- **🧱 No extra infrastructure** - Uses AWS SSM's existing reliability instead of additional secret managers
 
-## ⚡ Quick Start
+## ⚡ Quick start
 
 ```bash
 # Install globally
@@ -37,7 +40,7 @@ echo '{"DB_PASSWORD": "/my-app/db/password"}' > param-map.json
 envilder --map=param-map.json --envfile=.env
 ```
 
-## 🤔 What Problem Does Envilder Solve?
+## 🤔 What problem does Envilder solve?
 
 <table>
 <tr>
@@ -72,23 +75,23 @@ envilder --map=param-map.json --envfile=.env
 
 ## 💡 Why Envilder?
 
-- 🔐 **No More Secrets in Git** - Store credentials in AWS SSM Parameter Store instead of version control
-- 🤖 **Automate Everything** - One command to generate your `.env` files across all environments
-- 🔄 **Always in Sync** - Keep your local, dev, and production environments consistent
-- 🏎️ **Fast to Set Up** - Configure once, then generate `.env` files with a single command
-- 🪶 **Simple but Powerful** - Easy interface with support for encrypted parameters and multiple AWS profiles
+- 🔐 **No more secrets in git** - Store credentials in AWS SSM Parameter Store instead of version control
+- 🤖 **Automate everything** - One command to generate your `.env` files across all environments
+- 🔄 **Always in sync** - Keep your local, dev, and production environments consistent
+- 🏎️ **Fast to set up** - Configure once, then generate `.env` files with a single command
+- 🪶 **Simple but powerful** - Easy interface with support for encrypted parameters and multiple AWS profiles
 
-## 🎯 Perfect for Teams
+## 🎯 Perfect for teams
 
 Envilder is the tool you need if you:
 
-- 👥 **Work in a Development Team** - Ensure everyone has the same environment without sharing raw secrets
-- 🔑 **Deal with API Keys & Tokens** - Securely store and retrieve sensitive credentials
-- ⚙️ **Run CI/CD Pipelines** - Automatically generate environment files during deployments
-- ☁️ **Use AWS Already** - Leverage your existing AWS infrastructure more effectively
-- 🌐 **Manage Multiple Environments** - Switch easily between dev, staging, and production
+- 👥 **Work in a development team** - Ensure everyone has the same environment without sharing raw secrets
+- 🔑 **Deal with API keys & tokens** - Securely store and retrieve sensitive credentials
+- ⚙️ **Run CI/CD pipelines** - Automatically generate environment files during deployments
+- ☁️ **Use AWS already** - Leverage your existing AWS infrastructure more effectively
+- 🌐 **Manage multiple environments** - Switch easily between dev, staging, and production
 
-## 🔍 How It Works (Simple!)
+## 🔍 How it works (simple!)
 
 ```mermaid
 graph LR
@@ -98,19 +101,19 @@ graph LR
     E[SSM Parameters] --> B
 ```
 
-1. 📖 **Define Your Mapping** - Simple JSON mapping env vars to SSM paths
+1. 📖 **Define your mapping** - Simple JSON mapping env vars to SSM paths
 2. 🚀 **Run Envilder** - One command with your mapping file
-3. 🔄 **Auto-Fetch from AWS** - Retrieves values using your AWS credentials
-4. 💾 **Get Your .env File** - Ready to use in your project
+3. 🔄 **Auto-fetch from AWS** - Retrieves values using your AWS credentials
+4. 💾 **Get your .env file** - Ready to use in your project
 
 ## ⚙️ Prerequisites
 
 You'll need:
 
 - ✅ **AWS CLI** - Installed and configured with proper permissions to access SSM Parameter Store
-- ✅ **Node.js** - Version 14 or higher
+- ✅ **Node.js** - Version 20.0.0 or higher (as specified in `package.json`)
 
-### AWS CLI Setup
+### AWS CLI setup
 
 1. Install the AWS CLI by following the [official instructions](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html).
 2. After installation, configure the AWS CLI:
@@ -132,9 +135,6 @@ You'll need:
 ```bash
 # Using npm
 npm install -g envilder
-
-# Using yarn
-yarn global add envilder
 ```
 
 ## 🚀 Usage
@@ -149,7 +149,7 @@ envilder --map=<mapping-file> --envfile=<output-file> [--profile=<aws-profile>]
 | `--envfile` | Path to output .env file (required) |
 | `--profile` | AWS CLI profile to use (optional) |
 
-## 🔧 Quick Example
+## 🔧 Quick example
 
 1. Create a mapping file `param-map.json`:
 
@@ -172,7 +172,7 @@ envilder --map=<mapping-file> --envfile=<output-file> [--profile=<aws-profile>]
     envilder --map=param-map.json --envfile=.env --profile=dev-account
     ```
 
-## 🌐 Working with Multiple AWS Profiles
+## 🌐 Working with multiple AWS profiles
 
 For multiple AWS accounts or environments, configure different profiles in your AWS credentials file:
 
@@ -203,17 +203,66 @@ or `%USERPROFILE%\.aws\credentials` on Windows):
     envilder --map=param-map.json --envfile=.env.production --profile=prod-account
     ```
 
-## 📂 Sample `.env` Output
+## 🛠️ Advanced usage: environment-specific parameters
+
+Envilder works brilliantly with environment variables for dynamic parameter paths:
+
+1. Set up your SSM parameters with environment-specific paths:
+
+   ```text
+   /project/dev/DB_PASSWORD
+   /project/stage/DB_PASSWORD
+   /project/prod/DB_PASSWORD
+   ```
+
+2. Create a template-based mapping file `env-map.json`:
+
+   ```json
+   {
+     "DB_PASSWORD": "/project/${ENV}/DB_PASSWORD"
+   }
+   ```
+
+3. Generate environment-specific .env files:
+
+   ```powershell
+   # Development
+   $env:ENV = "dev"
+   envilder --map=env-map.json --envfile=.env.dev
+
+   # Staging 
+   $env:ENV = "stage"
+   envilder --map=env-map.json --envfile=.env.stage
+   
+   # Production
+   $env:ENV = "prod" 
+   envilder --map=env-map.json --envfile=.env.prod --profile=prod-account
+   ```
+
+This approach ensures the right variables are pulled for each environment with minimal configuration.
+
+## 📂 Sample `.env` output
 
 ```ini
 SECRET_TOKEN=mockedEmail@example.com
 SECRET_KEY=mockedPassword
 ```
 
-## 🧪 Running Tests
+## 🎯 Why use Envilder in practice?
+
+Envilder eliminates common problems in development teams:
+
+- **🛑 No more "it works on my machine"** - Everyone uses the exact same environment variables from the same source
+- **🔄 Always fresh credentials** - Update a secret in SSM and everyone gets it automatically on next run
+- **🛡️ Access control built-in** - Developers only see dev secrets, CI/CD systems see what they need
+- **🧠 Zero mental overhead** - No need to remember which variables are needed - the mapping defines everything
+- **🚫 No more sharing secrets** - Stop pasting credentials in Slack, email, or Notion documents
+- **📋 Compliance ready** - All accesses are logged in AWS CloudTrail for auditing
+
+## 🧪 Running tests
 
 ```bash
-yarn test
+npm test
 ```
 
 Check the current coverage report: [Coverage Report](https://macalbert.github.io/envilder/)

package/lib/{cli/cli.d.ts → Cli.d.ts}

@@ -7,4 +7,4 @@
  * @throws {Error} If either `--map` or `--envfile` arguments are missing.
  */
 export declare function main(): Promise<void>;
-//# sourceMappingURL=cli.d.ts.map
+//# sourceMappingURL=Cli.d.ts.map

package/lib/Cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Cli.d.ts","sourceRoot":"","sources":["../src/Cli.ts"],"names":[],"mappings":";AA6CA;;;;;;GAMG;AACH,wBAAsB,IAAI,kBA0BzB"}

package/lib/{cli/cli.js → Cli.js}

@@ -12,7 +12,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { Command } from 'commander';
-import { run } from '../index.js';
+import { EnvilderBuilder } from './cli/domain/EnvilderBuilder.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 /**
@@ -65,7 +65,11 @@ export function main() {
         if (!options.map || !options.envfile) {
             throw new Error('Missing required arguments: --map and --envfile');
         }
-        yield run(options.map, options.envfile, options.profile);
+        const envilder = EnvilderBuilder.build()
+            .withDefaultFileManager()
+            .withAwsProvider(options.profile)
+            .create();
+        yield envilder.run(options.map, options.envfile);
     });
 }
 // Execute the CLI
@@ -73,4 +77,4 @@ main().catch((error) => {
     console.error('🚨 Uh-oh! Looks like Mario fell into the wrong pipe! 🍄💥');
     console.error(error);
 });
-//# sourceMappingURL=cli.js.map
+//# sourceMappingURL=Cli.js.map

package/lib/Cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Cli.js","sourceRoot":"","sources":["../src/Cli.ts"],"names":[],"mappings":";;;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC;;;;;GAKG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,QAAQ,GAAG,CAAC;IACrD,IAAI,UAAU,GAAG,QAAQ,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,sBAAsB;QACtB,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,yBAAyB;YACzB,MAAM;QACR,CAAC;QAED,UAAU,GAAG,SAAS,CAAC;QACvB,KAAK,EAAE,CAAC;IACV,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0DAA0D;AAC1D,MAAM,eAAe,GACnB,eAAe,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,UAAgB,IAAI;;QACxB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO;aACJ,IAAI,CAAC,UAAU,CAAC;aAChB,WAAW,CAAC,2DAA2D,CAAC;aACxE,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;aAC5B,cAAc,CACb,cAAc,EACd,yDAAyD,CAC1D;aACA,cAAc,CAAC,kBAAkB,EAAE,uCAAuC,CAAC;aAC3E,MAAM,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC;QAExD,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAE/B,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE;aACrC,sBAAsB,EAAE;aACxB,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;aAChC,MAAM,EAAE,CAAC;QAEZ,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;CAAA;AAED,kBAAkB;AAClB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/lib/cli/application/EnvilderHandler.d.ts

@@ -0,0 +1,18 @@
+import type { IEnvFileManager } from '../domain/ports/IEnvFileManager';
+import type { ISecretProvider } from '../domain/ports/ISecretProvider';
+export declare class Envilder {
+    private keyVault;
+    private envFileManager;
+    constructor(keyVault: ISecretProvider, envFileManager: IEnvFileManager);
+    /**
+     * Orchestrates the process of fetching environment variable values from a key vault and writing them to a local environment file.
+     *
+     * Loads a parameter mapping from a JSON file, retrieves existing environment variables, fetches updated values from the key vault, merges them, and writes the result to the specified environment file.
+     *
+     * @param mapPath - Path to the JSON file mapping environment variable names to key vault parameter names.
+     * @param envFilePath - Path to the local environment file to read and update.
+     */
+    run(mapPath: string, envFilePath: string): Promise<void>;
+    private fetchAndUpdateEnvVariables;
+}
+//# sourceMappingURL=EnvilderHandler.d.ts.map

package/lib/cli/application/EnvilderHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvilderHandler.d.ts","sourceRoot":"","sources":["../../../src/cli/application/EnvilderHandler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,cAAc,CAAkB;gBAE5B,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe;IAKtE;;;;;;;OAOG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;YAYhC,0BAA0B;CAoCzC"}

package/lib/cli/application/EnvilderHandler.js

@@ -0,0 +1,64 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+export class Envilder {
+    constructor(keyVault, envFileManager) {
+        this.keyVault = keyVault;
+        this.envFileManager = envFileManager;
+    }
+    /**
+     * Orchestrates the process of fetching environment variable values from a key vault and writing them to a local environment file.
+     *
+     * Loads a parameter mapping from a JSON file, retrieves existing environment variables, fetches updated values from the key vault, merges them, and writes the result to the specified environment file.
+     *
+     * @param mapPath - Path to the JSON file mapping environment variable names to key vault parameter names.
+     * @param envFilePath - Path to the local environment file to read and update.
+     */
+    run(mapPath, envFilePath) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const paramMap = this.envFileManager.loadParamMap(mapPath);
+            const existingEnvVariables = this.envFileManager.loadExistingEnvVariables(envFilePath);
+            const updatedEnvVariables = yield this.fetchAndUpdateEnvVariables(paramMap, existingEnvVariables);
+            this.envFileManager.writeEnvFile(envFilePath, updatedEnvVariables);
+            console.log(`Environment File generated at '${envFilePath}'`);
+        });
+    }
+    fetchAndUpdateEnvVariables(paramMap, existingEnvVariables) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const errors = [];
+                for (const [envVar, secretName] of Object.entries(paramMap)) {
+                    try {
+                        const value = yield this.keyVault.getSecret(secretName);
+                        if (!value) {
+                            console.error(`Warning: No value found for: '${secretName}'`);
+                            continue;
+                        }
+                        existingEnvVariables[envVar] = value;
+                        console.log(`${envVar}=${value.length > 10 ? '*'.repeat(value.length - 3) + value.slice(-3) : '*'.repeat(value.length)}`);
+                    }
+                    catch (error) {
+                        console.error(`Error fetching parameter: '${secretName}'`);
+                        errors.push(`ParameterNotFound: ${secretName}`);
+                    }
+                }
+                if (errors.length > 0) {
+                    throw new Error(`Some parameters could not be fetched:\n${errors.join('\n')}`);
+                }
+                return existingEnvVariables;
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                console.error(`Failed to generate environment file: ${errorMessage}`);
+                throw error;
+            }
+        });
+    }
+}
+//# sourceMappingURL=EnvilderHandler.js.map

package/lib/cli/application/EnvilderHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvilderHandler.js","sourceRoot":"","sources":["../../../src/cli/application/EnvilderHandler.ts"],"names":[],"mappings":";;;;;;;;;AAGA,MAAM,OAAO,QAAQ;IAInB,YAAY,QAAyB,EAAE,cAA+B;QACpE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACG,GAAG,CAAC,OAAe,EAAE,WAAmB;;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,oBAAoB,GACxB,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;YAC5D,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAC/D,QAAQ,EACR,oBAAoB,CACrB,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,kCAAkC,WAAW,GAAG,CAAC,CAAC;QAChE,CAAC;KAAA;IAEa,0BAA0B,CACtC,QAAgC,EAChC,oBAA4C;;YAE5C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5D,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,OAAO,CAAC,KAAK,CAAC,iCAAiC,UAAU,GAAG,CAAC,CAAC;4BAC9D,SAAS;wBACX,CAAC;wBACD,oBAAoB,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;wBACrC,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,GAAG,CAAC,CAAC;wBAC3D,MAAM,CAAC,IAAI,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;gBACJ,CAAC;gBAED,OAAO,oBAAoB,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,OAAO,CAAC,KAAK,CAAC,wCAAwC,YAAY,EAAE,CAAC,CAAC;gBACtE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;CACF"}

package/lib/cli/domain/EnvilderBuilder.d.ts

@@ -0,0 +1,14 @@
+import { Envilder } from '../application/EnvilderHandler.js';
+import type { IEnvFileManager } from './ports/IEnvFileManager.js';
+import type { ISecretProvider } from './ports/ISecretProvider.js';
+export declare class EnvilderBuilder {
+    private provider?;
+    private fileManager?;
+    static build(): EnvilderBuilder;
+    withDefaultFileManager(): this;
+    withEnvFileManager(fileManager: IEnvFileManager): this;
+    withProvider(provider: ISecretProvider): this;
+    withAwsProvider(profile?: string): this;
+    create(): Envilder;
+}
+//# sourceMappingURL=EnvilderBuilder.d.ts.map

package/lib/cli/domain/EnvilderBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvilderBuilder.d.ts","sourceRoot":"","sources":["../../../src/cli/domain/EnvilderBuilder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAG7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAElE,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,CAAkB;IACnC,OAAO,CAAC,WAAW,CAAC,CAAkB;IAEtC,MAAM,CAAC,KAAK,IAAI,eAAe;IAI/B,sBAAsB,IAAI,IAAI;IAK9B,kBAAkB,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI;IAKtD,YAAY,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAK7C,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAYvC,MAAM,IAAI,QAAQ;CAWnB"}

package/lib/cli/domain/EnvilderBuilder.js

@@ -0,0 +1,41 @@
+import { SSM } from '@aws-sdk/client-ssm';
+import { fromIni } from '@aws-sdk/credential-providers';
+import { Envilder } from '../application/EnvilderHandler.js';
+import { AwsSsmSecretProvider } from '../infrastructure/AwsSsmStoreSecrets.js';
+import { EnvFileManager } from '../infrastructure/EnvFileManager.js';
+export class EnvilderBuilder {
+    static build() {
+        return new EnvilderBuilder();
+    }
+    withDefaultFileManager() {
+        this.fileManager = new EnvFileManager();
+        return this;
+    }
+    withEnvFileManager(fileManager) {
+        this.fileManager = fileManager;
+        return this;
+    }
+    withProvider(provider) {
+        this.provider = provider;
+        return this;
+    }
+    withAwsProvider(profile) {
+        const ssm = profile == null
+            ? new SSM()
+            : new SSM({
+                credentials: fromIni({ profile: profile }),
+            });
+        this.provider = new AwsSsmSecretProvider(ssm);
+        return this;
+    }
+    create() {
+        if (!this.provider) {
+            throw new Error('Secret provider must be specified');
+        }
+        if (!this.fileManager) {
+            throw new Error('Env file manager must be specified');
+        }
+        return new Envilder(this.provider, this.fileManager);
+    }
+}
+//# sourceMappingURL=EnvilderBuilder.js.map

package/lib/cli/domain/EnvilderBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvilderBuilder.js","sourceRoot":"","sources":["../../../src/cli/domain/EnvilderBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAIrE,MAAM,OAAO,eAAe;IAI1B,MAAM,CAAC,KAAK;QACV,OAAO,IAAI,eAAe,EAAE,CAAC;IAC/B,CAAC;IAED,sBAAsB;QACpB,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kBAAkB,CAAC,WAA4B;QAC7C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,QAAyB;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,OAAgB;QAC9B,MAAM,GAAG,GACP,OAAO,IAAI,IAAI;YACb,CAAC,CAAC,IAAI,GAAG,EAAE;YACX,CAAC,CAAC,IAAI,GAAG,CAAC;gBACN,WAAW,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;aACxB,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC;CACF"}

package/lib/cli/domain/ports/IEnvFileManager.d.ts

@@ -0,0 +1,6 @@
+export interface IEnvFileManager {
+    loadParamMap(mapPath: string): Record<string, string>;
+    loadExistingEnvVariables(envFilePath: string): Record<string, string>;
+    writeEnvFile(envFilePath: string, envVariables: Record<string, string>): void;
+}
+//# sourceMappingURL=IEnvFileManager.d.ts.map

package/lib/cli/domain/ports/IEnvFileManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IEnvFileManager.d.ts","sourceRoot":"","sources":["../../../../src/cli/domain/ports/IEnvFileManager.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAC/E"}

package/lib/cli/domain/ports/IEnvFileManager.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=IEnvFileManager.js.map

package/lib/cli/domain/ports/IEnvFileManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IEnvFileManager.js","sourceRoot":"","sources":["../../../../src/cli/domain/ports/IEnvFileManager.ts"],"names":[],"mappings":""}

package/lib/cli/domain/ports/ISecretProvider.d.ts

@@ -0,0 +1,4 @@
+export interface ISecretProvider {
+    getSecret(name: string): Promise<string | undefined>;
+}
+//# sourceMappingURL=ISecretProvider.d.ts.map

package/lib/cli/domain/ports/ISecretProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ISecretProvider.d.ts","sourceRoot":"","sources":["../../../../src/cli/domain/ports/ISecretProvider.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACtD"}

package/lib/cli/domain/ports/ISecretProvider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ISecretProvider.js.map

package/lib/cli/domain/ports/ISecretProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ISecretProvider.js","sourceRoot":"","sources":["../../../../src/cli/domain/ports/ISecretProvider.ts"],"names":[],"mappings":""}

package/lib/cli/infrastructure/AwsSsmStoreSecrets.d.ts

@@ -0,0 +1,8 @@
+import { type SSM } from '@aws-sdk/client-ssm';
+import type { ISecretProvider } from '../domain/ports/ISecretProvider';
+export declare class AwsSsmSecretProvider implements ISecretProvider {
+    private ssm;
+    constructor(ssm: SSM);
+    getSecret(name: string): Promise<string | undefined>;
+}
+//# sourceMappingURL=AwsSsmStoreSecrets.d.ts.map

package/lib/cli/infrastructure/AwsSsmStoreSecrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsSsmStoreSecrets.d.ts","sourceRoot":"","sources":["../../../src/cli/infrastructure/AwsSsmStoreSecrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,GAAG,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,OAAO,CAAC,GAAG,CAAM;gBAEL,GAAG,EAAE,GAAG;IAId,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAQ3D"}

package/lib/cli/infrastructure/AwsSsmStoreSecrets.js

@@ -0,0 +1,26 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { GetParameterCommand } from '@aws-sdk/client-ssm';
+export class AwsSsmSecretProvider {
+    constructor(ssm) {
+        this.ssm = ssm;
+    }
+    getSecret(name) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const command = new GetParameterCommand({
+                Name: name,
+                WithDecryption: true,
+            });
+            const { Parameter } = yield this.ssm.send(command);
+            return Parameter === null || Parameter === void 0 ? void 0 : Parameter.Value;
+        });
+    }
+}
+//# sourceMappingURL=AwsSsmStoreSecrets.js.map

package/lib/cli/infrastructure/AwsSsmStoreSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsSsmStoreSecrets.js","sourceRoot":"","sources":["../../../src/cli/infrastructure/AwsSsmStoreSecrets.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,mBAAmB,EAAY,MAAM,qBAAqB,CAAC;AAGpE,MAAM,OAAO,oBAAoB;IAG/B,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAEK,SAAS,CAAC,IAAY;;YAC1B,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;gBACtC,IAAI,EAAE,IAAI;gBACV,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,KAAK,CAAC;QAC1B,CAAC;KAAA;CACF"}

package/lib/cli/infrastructure/EnvFileManager.d.ts

@@ -0,0 +1,7 @@
+import type { IEnvFileManager } from '../domain/ports/IEnvFileManager';
+export declare class EnvFileManager implements IEnvFileManager {
+    loadParamMap(mapPath: string): Record<string, string>;
+    loadExistingEnvVariables(envFilePath: string): Record<string, string>;
+    writeEnvFile(envFilePath: string, envVariables: Record<string, string>): void;
+}
+//# sourceMappingURL=EnvFileManager.d.ts.map

package/lib/cli/infrastructure/EnvFileManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvFileManager.d.ts","sourceRoot":"","sources":["../../../src/cli/infrastructure/EnvFileManager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,qBAAa,cAAe,YAAW,eAAe;IACpD,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAUrD,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWrE,YAAY,CACV,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,IAAI;CAYR"}

package/lib/cli/infrastructure/EnvFileManager.js

@@ -0,0 +1,37 @@
+import * as fs from 'node:fs';
+import * as dotenv from 'dotenv';
+export class EnvFileManager {
+    loadParamMap(mapPath) {
+        const content = fs.readFileSync(mapPath, 'utf-8');
+        try {
+            return JSON.parse(content);
+        }
+        catch (error) {
+            console.error(`Error parsing JSON from ${mapPath}`);
+            throw new Error(`Invalid JSON in parameter map file: ${mapPath}`);
+        }
+    }
+    loadExistingEnvVariables(envFilePath) {
+        const envVariables = {};
+        if (!fs.existsSync(envFilePath)) {
+            return envVariables;
+        }
+        const existingEnvContent = fs.readFileSync(envFilePath, 'utf-8');
+        const parsedEnv = dotenv.parse(existingEnvContent);
+        Object.assign(envVariables, parsedEnv);
+        return envVariables;
+    }
+    writeEnvFile(envFilePath, envVariables) {
+        const envContent = Object.entries(envVariables)
+            .map(([key, value]) => {
+            const escapedValue = value
+                .replace(/\\/g, '\\\\')
+                .replace(/(\r\n|\n|\r)/g, '\\n')
+                .replace(/"/g, '\\"');
+            return `${key}=${escapedValue}`;
+        })
+            .join('\n');
+        fs.writeFileSync(envFilePath, envContent);
+    }
+}
+//# sourceMappingURL=EnvFileManager.js.map

package/lib/cli/infrastructure/EnvFileManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvFileManager.js","sourceRoot":"","sources":["../../../src/cli/infrastructure/EnvFileManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAGjC,MAAM,OAAO,cAAc;IACzB,YAAY,CAAC,OAAe;QAC1B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,wBAAwB,CAAC,WAAmB;QAC1C,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,kBAAkB,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,YAAY,CACV,WAAmB,EACnB,YAAoC;QAEpC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;aAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACpB,MAAM,YAAY,GAAG,KAAK;iBACvB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;iBACtB,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC;iBAC/B,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/package.json

@@ -1,34 +1,43 @@
 {
   "name": "envilder",
-  "version": "0.5.1",
-  "description": "A CLI tool to generate .env files from AWS SSM parameters",
-  "exports": {
-    ".": {
-      "import": "./lib/index.js",
-      "types": "./lib/index.d.ts"
-    }
-  },
-  "main": "./lib/index.js",
+  "version": "0.5.3",
+  "description": "A CLI that securely centralizes your environment variables from AWS SSM as a single source of truth",
+  "main": "./lib/Cli.js",
   "bin": {
-    "envilder": "lib/cli/cli.js"
+    "envilder": "lib/Cli.js"
   },
   "scripts": {
-    "clean": "npx jest --clearCache && yarn cache clean --force && npx rimraf lib && npx rimraf node_modules && npx rimraf coverage && npx rimraf yarn.lock",
-    "test-run": "yarn build && node lib/cli/cli.js --map=tests/sample/param-map.json --envfile=tests/sample/autogenerated.env",
-    "build": "tsc -p tsconfig.build.json --sourceMap --declaration && node --no-warnings scripts/chmod-cli.js",
-    "validate-cli": "node --no-warnings --loader ts-node/esm scripts/validate-cli.ts",
-    "format": "npx biome format",
-    "format:write": "npx biome format --write",
-    "lint": "npx secretlint \"**/*\" && biome lint --write && biome format --write && biome check --write && tsc --noEmit",
-    "lint:fix": "npx biome lint --fix",
+    "clean": "jest --clearCache && npm cache clean --force && rimraf lib && rimraf coverage && rimraf node_modules",
+    "build": "tsc",
+    "local:install": "npm run build && node --loader ts-node/esm scripts/pack-and-install.ts",
+    "local:test-run": "npm run build && node lib/cli/cli.js --map=tests/cli/sample/param-map.json --envfile=tests/cli/sample/autogenerated.env",
+    "format": "biome format",
+    "format:write": "biome format --write",
+    "lint": "secretlint \"**/*\" && biome check --write && tsc --noEmit",
+    "lint:fix": "biome lint --fix",
     "test": "vitest run --reporter verbose --coverage",
-    "cli-run": "yarn build && node --trace-warnings lib",
-    "npm-publish": "yarn lint && yarn build && yarn test && npm pack --dry-run && yarn publish",
-    "npm-release-patch": "yarn version --new-version patch",
-    "npm-release-minor": "yarn version --new-version minor",
-    "npm-release-prerelease": "yarn version --new-version prerelease"
+    "npm-publish": "npm run lint && npm run build && npm run test && npm pack --dry-run && npm publish",
+    "npm-release-patch": "npm version patch",
+    "npm-release-minor": "npm version minor",
+    "npm-release-prerelease": "npm version prerelease"
   },
-  "keywords": [],
+  "keywords": [
+    "env",
+    "dotenv",
+    "aws",
+    "ssm",
+    "parameter-store",
+    "cli",
+    "environment",
+    "secrets",
+    "automation",
+    "config",
+    "aws-cli",
+    "devops",
+    "ci-cd",
+    "secure",
+    "envfile"
+  ],
   "repository": {
     "type": "git",
     "url": "git://github.com/macalbert/envilder.git"
@@ -52,22 +61,24 @@
     "@aws-sdk/client-ssm": "^3.806.0",
     "@aws-sdk/credential-providers": "^3.806.0",
     "@types/node": "^22.5.5",
-    "commander": "^13.1.0",
+    "commander": "^14.0.0",
     "dotenv": "^16.4.5",
     "picocolors": "^1.1.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.1",
     "@secretlint/secretlint-rule-preset-recommend": "^9.3.2",
+    "@testcontainers/localstack": "^11.0.1",
     "@vitest/coverage-v8": "^3.1.1",
+    "jest": "^29.7.0",
     "rimraf": "^6.0.1",
     "secretlint": "^9.3.2",
+    "testcontainers": "^11.0.1",
     "ts-node": "^10.9.2",
     "typescript": "^5.6.2",
     "vitest": "^3.1.1"
   },
   "engines": {
-    "node": ">=20.0.0",
-    "yarn": ">=1.22"
+    "node": ">=20.0.0"
   }
 }

package/lib/cli/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":";AA4CA;;;;;;GAMG;AACH,wBAAsB,IAAI,kBAkBzB"}

package/lib/cli/cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":";;;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC;;;;;GAKG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,QAAQ,GAAG,CAAC;IACrD,IAAI,UAAU,GAAG,QAAQ,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,sBAAsB;QACtB,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,yBAAyB;YACzB,MAAM;QACR,CAAC;QAED,UAAU,GAAG,SAAS,CAAC;QACvB,KAAK,EAAE,CAAC;IACV,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0DAA0D;AAC1D,MAAM,eAAe,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAClG,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,UAAgB,IAAI;;QACxB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO;aACJ,IAAI,CAAC,UAAU,CAAC;aAChB,WAAW,CAAC,2DAA2D,CAAC;aACxE,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;aAC5B,cAAc,CAAC,cAAc,EAAE,yDAAyD,CAAC;aACzF,cAAc,CAAC,kBAAkB,EAAE,uCAAuC,CAAC;aAC3E,MAAM,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC;QAExD,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAE/B,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;CAAA;AAED,kBAAkB;AAClB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/lib/index.d.ts

@@ -1,11 +0,0 @@
-/**
- * Orchestrates the process of fetching environment variable values from AWS SSM Parameter Store and writing them to a local environment file.
- *
- * Loads a parameter mapping from a JSON file, retrieves existing environment variables, fetches updated values from SSM (optionally using a specified AWS profile), merges them, and writes the result to the specified environment file.
- *
- * @param mapPath - Path to the JSON file mapping environment variable names to SSM parameter names.
- * @param envFilePath - Path to the local environment file to read and update.
- * @param profile - Optional AWS profile name to use for credentials.
- */
-export declare function run(mapPath: string, envFilePath: string, profile?: string): Promise<void>;
-//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,wBAAsB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,iBAY/E"}

package/lib/index.js

@@ -1,116 +0,0 @@
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-import * as fs from 'node:fs';
-import { GetParameterCommand, SSM } from '@aws-sdk/client-ssm';
-import { fromIni } from '@aws-sdk/credential-providers';
-import * as dotenv from 'dotenv';
-/**
- * Orchestrates the process of fetching environment variable values from AWS SSM Parameter Store and writing them to a local environment file.
- *
- * Loads a parameter mapping from a JSON file, retrieves existing environment variables, fetches updated values from SSM (optionally using a specified AWS profile), merges them, and writes the result to the specified environment file.
- *
- * @param mapPath - Path to the JSON file mapping environment variable names to SSM parameter names.
- * @param envFilePath - Path to the local environment file to read and update.
- * @param profile - Optional AWS profile name to use for credentials.
- */
-export function run(mapPath, envFilePath, profile) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const defaultAwsConfig = {};
-        const ssmClientConfig = profile ? { credentials: fromIni({ profile }) } : defaultAwsConfig;
-        const ssm = new SSM(ssmClientConfig);
-        const paramMap = loadParamMap(mapPath);
-        const existingEnvVariables = loadExistingEnvVariables(envFilePath);
-        const updatedEnvVariables = yield fetchAndUpdateEnvVariables(paramMap, existingEnvVariables, ssm);
-        writeEnvFile(envFilePath, updatedEnvVariables);
-        console.log(`Environment File generated at '${envFilePath}'`);
-    });
-}
-function loadParamMap(mapPath) {
-    const content = fs.readFileSync(mapPath, 'utf-8');
-    try {
-        return JSON.parse(content);
-    }
-    catch (error) {
-        console.error(`Error parsing JSON from ${mapPath}`);
-        throw new Error(`Invalid JSON in parameter map file: ${mapPath}`);
-    }
-}
-function loadExistingEnvVariables(envFilePath) {
-    const envVariables = {};
-    if (!fs.existsSync(envFilePath))
-        return envVariables;
-    const existingEnvContent = fs.readFileSync(envFilePath, 'utf-8');
-    const parsedEnv = dotenv.parse(existingEnvContent);
-    Object.assign(envVariables, parsedEnv);
-    return envVariables;
-}
-/**
- * Fetches parameter values from AWS SSM for each environment variable in the map and updates the existing environment variables record.
- *
- * For each mapping, retrieves the corresponding SSM parameter value and updates the environment variable if found. Logs masked values and warnings for missing parameters. Throws an error if any parameters fail to fetch.
- *
- * @param paramMap - Mapping of environment variable names to SSM parameter names.
- * @param existingEnvVariables - Current environment variables to be updated.
- * @param ssm - AWS SSM client instance used for fetching parameters.
- * @returns The updated environment variables record.
- *
- * @throws {Error} If any SSM parameters cannot be fetched.
- */
-function fetchAndUpdateEnvVariables(paramMap, existingEnvVariables, ssm) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const errors = [];
-        for (const [envVar, ssmName] of Object.entries(paramMap)) {
-            try {
-                const value = yield fetchSSMParameter(ssmName, ssm);
-                if (value) {
-                    existingEnvVariables[envVar] = value;
-                    console.log(`${envVar}=${value.length > 3 ? '*'.repeat(value.length - 3) + value.slice(-3) : '*'.repeat(value.length)}`);
-                }
-                else {
-                    console.error(`Warning: No value found for: '${ssmName}'`);
-                }
-            }
-            catch (error) {
-                console.error(`Error fetching parameter: '${ssmName}'`);
-                errors.push(`ParameterNotFound: ${ssmName}`);
-            }
-        }
-        if (errors.length > 0) {
-            throw new Error(`Some parameters could not be fetched:\n${errors.join('\n')}`);
-        }
-        return existingEnvVariables;
-    });
-}
-/**
- * Retrieves the value of a parameter from AWS SSM Parameter Store with decryption enabled.
- *
- * @param ssmName - The name of the SSM parameter to retrieve.
- * @returns The decrypted parameter value if found, or undefined if the parameter does not exist.
- */
-function fetchSSMParameter(ssmName, ssm) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const command = new GetParameterCommand({
-            Name: ssmName,
-            WithDecryption: true,
-        });
-        const { Parameter } = yield ssm.send(command);
-        return Parameter === null || Parameter === void 0 ? void 0 : Parameter.Value;
-    });
-}
-function writeEnvFile(envFilePath, envVariables) {
-    const envContent = Object.entries(envVariables)
-        .map(([key, value]) => {
-        const escapedValue = value.replace(/(\n|\r|\n\r)/g, '\\n').replace(/"/g, '\\"');
-        return `${key}=${escapedValue}`;
-    })
-        .join('\n');
-    fs.writeFileSync(envFilePath, envContent);
-}
-//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAgB,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAE,OAAgB;;QAC9E,MAAM,gBAAgB,GAAG,EAAE,CAAC;QAC5B,MAAM,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC3F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAErC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAEnE,MAAM,mBAAmB,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;QAElG,YAAY,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,kCAAkC,WAAW,GAAG,CAAC,CAAC;IAChE,CAAC;CAAA;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAmB;IACnD,MAAM,YAAY,GAA2B,EAAE,CAAC;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,YAAY,CAAC;IAErD,MAAM,kBAAkB,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAEvC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAe,0BAA0B,CACvC,QAAgC,EAChC,oBAA4C,EAC5C,GAAQ;;QAER,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACpD,IAAI,KAAK,EAAE,CAAC;oBACV,oBAAoB,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;oBACrC,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAC5G,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,GAAG,CAAC,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,oBAAoB,CAAC;IAC9B,CAAC;CAAA;AAED;;;;;GAKG;AACH,SAAe,iBAAiB,CAAC,OAAe,EAAE,GAAQ;;QACxD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QAEH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,KAAK,CAAC;IAC1B,CAAC;CAAA;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,YAAoC;IAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChF,OAAO,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAC5C,CAAC"}