envsec 0.1.4 → 0.1.5

package/README.md

@@ -1,4 +1,4 @@
-# envsec
+# secenv
 
 Secure environment secrets management for macOS using the native Keychain.
 
@@ -8,6 +8,8 @@ Secure environment secrets management for macOS using the native Keychain.
 - Organize secrets by environment (dev, staging, prod, etc.)
 - Track secret types (string, number, boolean) and metadata via SQLite
 - Search secrets with glob patterns
+- Run commands with secret interpolation
+- Export secrets to `.env` files
 
 ## Requirements
 
@@ -17,11 +19,11 @@ Secure environment secrets management for macOS using the native Keychain.
 ## Installation
 
 ```bash
-npm install -g envsec
+npm install -g secenv
 ```
 
 ```bash
-npx envsec
+npx secenv
 ```
 
 ## Usage
@@ -59,6 +61,28 @@ secenv -e dev list
 secenv -e dev search "api.*"
 ```
 
+### Generate a .env file
+
+```bash
+# Creates .env with all secrets from the environment
+secenv -e dev env-file
+
+# Specify a custom output path
+secenv -e dev env-file --output .env.local
+```
+
+Keys are converted to `UPPER_SNAKE_CASE` (e.g. `api.token` → `API_TOKEN`).
+
+### Run a command with secrets
+
+```bash
+# Placeholders {key} are resolved with secret values before execution
+secenv -e dev run 'curl {api.url} -H "Authorization: Bearer {api.token}"'
+
+# Any {dotted.key} in the command string is replaced with its value
+secenv -e prod run 'psql {db.connection_string}'
+```
+
 ### Delete a secret
 
 ```bash

package/dist/cli/env-file.js

@@ -0,0 +1,22 @@
+import { Command, Options } from "@effect/cli";
+import { Effect } from "effect";
+import { SecretStore } from "../services/SecretStore.js";
+import { rootCommand } from "./root.js";
+import { writeFileSync } from "node:fs";
+const output = Options.text("output").pipe(Options.withAlias("o"), Options.withDescription("Output file path (default: .env)"), Options.withDefault(".env"));
+export const envFileCommand = Command.make("env-file", { output }, ({ output }) => Effect.gen(function* () {
+    const { env } = yield* rootCommand;
+    const secrets = yield* SecretStore.list(env);
+    if (secrets.length === 0) {
+        yield* Effect.log(`No secrets found for env "${env}"`);
+        return;
+    }
+    const lines = [];
+    for (const item of secrets) {
+        const value = yield* SecretStore.get(env, item.key);
+        const envKey = item.key.toUpperCase().replaceAll(".", "_");
+        lines.push(`${envKey}=${String(value)}`);
+    }
+    writeFileSync(output, lines.join("\n") + "\n", "utf-8");
+    yield* Effect.log(`Written ${secrets.length} secret(s) to ${output}`);
+}));

package/dist/cli/run.js

@@ -0,0 +1,26 @@
+import { Command, Args } from "@effect/cli";
+import { Effect } from "effect";
+import { SecretStore } from "../services/SecretStore.js";
+import { rootCommand } from "./root.js";
+import { execSync } from "node:child_process";
+const cmd = Args.text({ name: "command" }).pipe(Args.withDescription("Command to execute. Use {key} placeholders for secret interpolation"));
+export const runCommand = Command.make("run", { cmd }, ({ cmd }) => Effect.gen(function* () {
+    const { env } = yield* rootCommand;
+    // Find all {key} placeholders
+    const placeholders = [...cmd.matchAll(/\{([^}]+)\}/g)];
+    let resolved = cmd;
+    for (const match of placeholders) {
+        const key = match[1];
+        const value = yield* SecretStore.get(env, key);
+        resolved = resolved.replaceAll(`{${key}}`, String(value));
+    }
+    if (placeholders.length > 0) {
+        yield* Effect.log(`Resolved ${placeholders.length} secret(s)`);
+    }
+    try {
+        execSync(resolved, { stdio: "inherit", shell: "/bin/bash" });
+    }
+    catch (e) {
+        yield* Effect.fail(new Error(`Command exited with code ${e.status ?? 1}`));
+    }
+}));

package/dist/main.js

@@ -9,10 +9,12 @@ import { getCommand } from "./cli/read.js";
 import { deleteCommand, delCommand } from "./cli/delete.js";
 import { searchCommand } from "./cli/search.js";
 import { listCommand } from "./cli/list.js";
+import { runCommand } from "./cli/run.js";
+import { envFileCommand } from "./cli/env-file.js";
 import { SecretStore } from "./services/SecretStore.js";
 const require = createRequire(import.meta.url);
 const pkg = require("../package.json");
-const command = rootCommand.pipe(Command.withSubcommands([addCommand, getCommand, deleteCommand, delCommand, searchCommand, listCommand]));
+const command = rootCommand.pipe(Command.withSubcommands([addCommand, getCommand, deleteCommand, delCommand, searchCommand, listCommand, runCommand, envFileCommand]));
 const cli = Command.run(command, {
     name: "secenv",
     version: pkg.version,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "envsec",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Secure environment secrets management using macOS Keychain",
   "type": "module",
   "bin": {