envsec 0.1.1 → 0.1.4

package/README.md

@@ -1,15 +1,77 @@
-# secenv
+# envsec
 
-To install dependencies:
+Secure environment secrets management for macOS using the native Keychain.
+
+## Features
+
+- Store secrets in macOS Keychain (not plain text files)
+- Organize secrets by environment (dev, staging, prod, etc.)
+- Track secret types (string, number, boolean) and metadata via SQLite
+- Search secrets with glob patterns
+
+## Requirements
+
+- macOS
+- Node.js >= 18
+
+## Installation
+
+```bash
+npm install -g envsec
+```
+
+```bash
+npx envsec
+```
+
+## Usage
+
+All commands require an environment specified with `--env` (or `-e`):
+
+### Add a secret
+
+```bash
+# Store a string
+secenv -e dev add api.key --word "sk-abc123"
+
+# Store a number
+secenv -e dev add server.port --digit 3000
+
+# Store a boolean
+secenv -e dev add feature.enabled --bool
+```
+
+### Get a secret
+
+```bash
+secenv -e dev get api.key
+```
+
+### List all secrets
 
 ```bash
-bun install
+secenv -e dev list
 ```
 
-To run:
+### Search secrets
 
 ```bash
-bun run index.ts
+secenv -e dev search "api.*"
 ```
 
-This project was created using `bun init` in bun v1.3.10. [Bun](https://bun.com) is a fast all-in-one JavaScript runtime.
+### Delete a secret
+
+```bash
+secenv -e dev delete api.key
+
+# or use the alias
+secenv -e dev del api.key
+```
+
+## How it works
+
+Secrets are stored in the macOS Keychain using the `security` command-line tool. Metadata (key names, types, timestamps) is kept in a SQLite database at `~/.secenv/store.sqlite`. Keys must contain at least one dot separator (e.g., `service.account`) which maps to the Keychain service/account structure.
+
+## License
+
+MIT

package/dist/cli/delete.js

@@ -0,0 +1,12 @@
+import { Command, Args } from "@effect/cli";
+import { Effect } from "effect";
+import { SecretStore } from "../services/SecretStore.js";
+import { rootCommand } from "./root.js";
+const key = Args.text({ name: "key" });
+const handler = ({ key }) => Effect.gen(function* () {
+    const { env } = yield* rootCommand;
+    yield* SecretStore.remove(env, key);
+    yield* Effect.log(`Secret "${key}" removed from env "${env}"`);
+});
+export const deleteCommand = Command.make("delete", { key }, handler);
+export const delCommand = Command.make("del", { key }, handler);

package/dist/cli/read.js

@@ -3,7 +3,7 @@ import { Effect, Console } from "effect";
 import { SecretStore } from "../services/SecretStore.js";
 import { rootCommand } from "./root.js";
 const key = Args.text({ name: "key" });
-export const readCommand = Command.make("read", { key }, ({ key }) => Effect.gen(function* () {
+export const getCommand = Command.make("get", { key }, ({ key }) => Effect.gen(function* () {
     const { env } = yield* rootCommand;
     const value = yield* SecretStore.get(env, key);
     yield* Console.log(String(value));

package/dist/implementations/SqliteMetadataStore.js

@@ -1,15 +1,19 @@
 import { Effect, Layer } from "effect";
-import Database from "better-sqlite3";
-import { mkdirSync } from "node:fs";
+import initSqlJs from "sql.js";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { MetadataStore } from "../services/MetadataStore.js";
 import { MetadataStoreError, SecretNotFoundError } from "../errors.js";
-const dbPath = join(homedir(), ".secenv", "store.sqlite");
-const initDb = () => {
-    mkdirSync(join(homedir(), ".secenv"), { recursive: true });
-    const db = new Database(dbPath);
-    db.exec(`
+const dbDir = join(homedir(), ".secenv");
+const dbPath = join(dbDir, "store.sqlite");
+const initDb = async () => {
+    mkdirSync(dbDir, { recursive: true });
+    const SQL = await initSqlJs();
+    const db = existsSync(dbPath)
+        ? new SQL.Database(readFileSync(dbPath))
+        : new SQL.Database();
+    db.run(`
     CREATE TABLE IF NOT EXISTS secrets (
       id         INTEGER PRIMARY KEY AUTOINCREMENT,
       env        TEXT NOT NULL,
@@ -20,10 +24,14 @@ const initDb = () => {
       UNIQUE(env, key)
     )
   `);
+    persist(db);
     return db;
 };
+const persist = (db) => {
+    writeFileSync(dbPath, Buffer.from(db.export()));
+};
 const make = Effect.gen(function* () {
-    const db = yield* Effect.try({
+    const db = yield* Effect.tryPromise({
         try: () => initDb(),
         catch: (error) => new MetadataStoreError({
             operation: "init",
@@ -34,11 +42,12 @@ const make = Effect.gen(function* () {
         upsert: Effect.fn("SqliteMetadataStore.upsert")(function* (env, key, type) {
             yield* Effect.try({
                 try: () => {
-                    db.prepare(`INSERT INTO secrets (env, key, type)
+                    db.run(`INSERT INTO secrets (env, key, type)
              VALUES (?, ?, ?)
              ON CONFLICT(env, key) DO UPDATE SET
                type = excluded.type,
-               updated_at = datetime('now')`).run(env, key, type);
+               updated_at = datetime('now')`, [env, key, type]);
+                    persist(db);
                 },
                 catch: (error) => new MetadataStoreError({
                     operation: "upsert",
@@ -48,9 +57,17 @@ const make = Effect.gen(function* () {
         }),
         get: Effect.fn("SqliteMetadataStore.get")(function* (env, key) {
             const row = yield* Effect.try({
-                try: () => db
-                    .prepare(`SELECT key, type, created_at, updated_at FROM secrets WHERE env = ? AND key = ?`)
-                    .get(env, key),
+                try: () => {
+                    const stmt = db.prepare(`SELECT key, type, created_at, updated_at FROM secrets WHERE env = ? AND key = ?`);
+                    stmt.bind([env, key]);
+                    if (!stmt.step()) {
+                        stmt.free();
+                        return null;
+                    }
+                    const result = stmt.getAsObject();
+                    stmt.free();
+                    return result;
+                },
                 catch: (error) => new MetadataStoreError({
                     operation: "get",
                     message: `Failed to get metadata for ${env}/${key}: ${error}`,
@@ -68,7 +85,8 @@ const make = Effect.gen(function* () {
         remove: Effect.fn("SqliteMetadataStore.remove")(function* (env, key) {
             yield* Effect.try({
                 try: () => {
-                    db.prepare(`DELETE FROM secrets WHERE env = ? AND key = ?`).run(env, key);
+                    db.run(`DELETE FROM secrets WHERE env = ? AND key = ?`, [env, key]);
+                    persist(db);
                 },
                 catch: (error) => new MetadataStoreError({
                     operation: "remove",
@@ -78,9 +96,16 @@ const make = Effect.gen(function* () {
         }),
         search: Effect.fn("SqliteMetadataStore.search")(function* (env, pattern) {
             return yield* Effect.try({
-                try: () => db
-                    .prepare(`SELECT key, type FROM secrets WHERE env = ? AND key GLOB ?`)
-                    .all(env, pattern),
+                try: () => {
+                    const results = [];
+                    const stmt = db.prepare(`SELECT key, type FROM secrets WHERE env = ? AND key GLOB ?`);
+                    stmt.bind([env, pattern]);
+                    while (stmt.step()) {
+                        results.push(stmt.getAsObject());
+                    }
+                    stmt.free();
+                    return results;
+                },
                 catch: (error) => new MetadataStoreError({
                     operation: "search",
                     message: `Failed to search metadata for ${env}/${pattern}: ${error}`,
@@ -89,9 +114,16 @@ const make = Effect.gen(function* () {
         }),
         list: Effect.fn("SqliteMetadataStore.list")(function* (env) {
             return yield* Effect.try({
-                try: () => db
-                    .prepare(`SELECT key, type, updated_at FROM secrets WHERE env = ? ORDER BY key`)
-                    .all(env),
+                try: () => {
+                    const results = [];
+                    const stmt = db.prepare(`SELECT key, type, updated_at FROM secrets WHERE env = ? ORDER BY key`);
+                    stmt.bind([env]);
+                    while (stmt.step()) {
+                        results.push(stmt.getAsObject());
+                    }
+                    stmt.free();
+                    return results;
+                },
                 catch: (error) => new MetadataStoreError({
                     operation: "list",
                     message: `Failed to list metadata for ${env}: ${error}`,

package/dist/main.js

@@ -5,13 +5,14 @@ import { Effect } from "effect";
 import { createRequire } from "node:module";
 import { rootCommand } from "./cli/root.js";
 import { addCommand } from "./cli/add.js";
-import { readCommand } from "./cli/read.js";
+import { getCommand } from "./cli/read.js";
+import { deleteCommand, delCommand } from "./cli/delete.js";
 import { searchCommand } from "./cli/search.js";
 import { listCommand } from "./cli/list.js";
 import { SecretStore } from "./services/SecretStore.js";
 const require = createRequire(import.meta.url);
 const pkg = require("../package.json");
-const command = rootCommand.pipe(Command.withSubcommands([addCommand, readCommand, searchCommand, listCommand]));
+const command = rootCommand.pipe(Command.withSubcommands([addCommand, getCommand, deleteCommand, delCommand, searchCommand, listCommand]));
 const cli = Command.run(command, {
     name: "secenv",
     version: pkg.version,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "envsec",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "description": "Secure environment secrets management using macOS Keychain",
   "type": "module",
   "bin": {
@@ -31,7 +31,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/davidnussio/secenv.git"
+    "url": "git+https://github.com/davidnussio/envsec.git"
   },
   "publishConfig": {
     "access": "public"
@@ -40,12 +40,12 @@
     "@effect/cli": "^0.73.2",
     "@effect/platform": "^0.94.5",
     "@effect/platform-node": "^0.104.1",
-    "better-sqlite3": "^12.8.0",
-    "effect": "^3.19.19"
+    "effect": "^3.19.19",
+    "sql.js": "^1.14.1"
   },
   "devDependencies": {
-    "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^22",
+    "@types/sql.js": "^1.4.9",
     "typescript": "^5"
   }
 }