firebase-secrets-cli 0.1.0 → 0.1.3

package/README.md

@@ -0,0 +1,120 @@
+# firebase-secrets-cli
+
+CLI interattiva per la gestione centralizzata dei **Firebase Functions Secrets** (Firebase Secrets Manager), con sincronizzazione dei riferimenti anche nei file locali del repository.
+
+## Obiettivo
+
+Semplificare e standardizzare le operazioni sui secrets usati dalle Cloud Functions, evitando errori manuali e mantenendo allineati:
+
+- **Firebase Secrets Manager (ONLINE)**: valore reale del secret
+- **functions/.secret.local (LOCALE)**: elenco chiavi (e talvolta valori) utile per sviluppo/ops
+- **functions/src/config/secret.ts (CODICE)**: “registry” tipizzato delle chiavi disponibili nel progetto
+
+## Cosa fa la CLI
+
+All’avvio, mostra un menu “Firebase Secrets Manager” con queste azioni:
+
+- **get**: legge e mostra il valore di una secret (accesso online)
+- **list**: mostra tutte le secrets presenti in `secret.ts` e ne stampa i valori (**con conferma**, perché espone valori a schermo)
+- **set**: crea una nuova secret online e aggiorna anche `.secret.local` + `secret.ts`
+- **update**: aggiorna il valore online e garantisce che la key sia presente in `.secret.local` e `secret.ts`
+- **destroy**: elimina la secret online (con conferma) e poi:
+  - commenta la riga corrispondente in `.secret.local`
+  - rimuove la key da `secret.ts`
+- **syncToLocal**: prende il valore online e lo scrive in `.secret.local` come `KEY=VALUE`
+- **reviveFromLocal**: ripristina online una secret partendo da una riga commentata ma con valore in `.secret.local` (es. `# KEY=VALORE`), poi:
+  - scrive online
+  - aggiunge la key a `secret.ts`
+  - decommenta e normalizza la riga in `.secret.local`
+
+### Come vengono scelte le secret
+
+La CLI propone una lista di chiavi lette da `functions/src/config/secret.ts`, ma permette anche di inserire una chiave manualmente con l’opzione **“Other…”**.
+
+## Sicurezza
+
+- L’azione **list** stampa i valori dei secrets: viene richiesta **conferma esplicita**.
+- Le operazioni usano i comandi `firebase functions:secrets:*`, quindi serve:
+  - essere autenticati su Firebase
+  - avere i permessi corretti sul progetto
+
+## Requisiti
+
+- **Node.js** (progetto TypeScript ESM)
+- **Firebase CLI** installata e autenticata (`firebase login`)
+- Repository che contenga (o che tu voglia allineare a) la struttura:
+  - `functions/.secret.local`
+  - `functions/src/config/secret.ts`
+
+> Nota: i path sono risolti con `process.cwd()`. In pratica la CLI si aspetta di essere lanciata dalla root del repo che contiene la cartella `functions/`.
+
+## Installazione
+
+### Globale (da npm)
+
+```bash
+npm i -g firebase-secrets-cli
+```
+
+### Esecuzione senza installare (consigliato per test)
+
+```bash
+npx firebase-secrets-cli
+```
+
+## Comandi disponibili
+
+Il pacchetto espone questi binari (da `package.json`):
+
+- `firebase-secrets` → CLI principale
+- `cic:index` → entrypoint secondario (utility/launcher)
+- `cic:bump` → utility di bump versione
+
+Esempi:
+
+```bash
+# CLI principale
+npx firebase-secrets
+
+# utility index (se prevista nel tuo flusso)
+npx cic:index
+
+# bump versione (se prevista nel tuo flusso)
+npx cic:bump
+```
+
+## Sviluppo locale
+
+Script disponibili:
+
+```bash
+npm run build   # compila TypeScript in dist/
+npm run start   # build + esegue dist/cic-index.js
+npm run pack    # build + npm pack
+npm run deploy  # build + bump + pack + publish
+```
+
+Compilazione: TypeScript con `module`/`moduleResolution` **NodeNext**, output in `dist/`.
+
+## Troubleshooting
+
+### “Non trova functions/.secret.local o secret.ts”
+- Verifica di lanciare il comando dalla **root del repo** (dove esiste `functions/`).
+- In caso di repo senza i file, la CLI dovrebbe poterli creare/aggiornare quando esegui operazioni tipo `set`/`update` (dipende dall’implementazione). Se non ci sono controlli ancora, aggiungerli è una buona prossima patch:
+  - se manca `functions/` → errore chiaro
+  - se manca `.secret.local` → creazione file vuoto
+  - se manca `secret.ts` → scaffolding minimale del registry
+
+### Permessi Firebase
+Se i comandi `firebase functions:secrets:*` falliscono:
+- `firebase login`
+- seleziona il progetto corretto (`firebase use <alias|projectId>`)
+- verifica di avere i permessi IAM necessari
+
+---
+
+## Informazioni dal pacchetto
+
+- Nome: `firebase-secrets-cli`
+- Versione: `0.1.0`
+- Bin: `firebase-secrets`, `cic:index`, `cic:bump`

package/dist/bump.js

@@ -0,0 +1,43 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { ensureFileExists, getProjectRoot } from './utils/dir.js';
+function bumpPatch(version) {
+    const parts = version.split('.').map((n) => Number(n));
+    if (parts.length !== 3 || parts.some((n) => Number.isNaN(n))) {
+        throw new Error(`❌ Invalid version format in package.json: "${version}" (expected x.y.z)`);
+    }
+    parts[2] += 1;
+    return parts.join('.');
+}
+export function bumpRootPackageVersion() {
+    const rootDir = getProjectRoot();
+    const packageJsonPath = path.join(rootDir, 'package.json');
+    ensureFileExists(packageJsonPath, 'package.json');
+    const raw = fs.readFileSync(packageJsonPath, 'utf8');
+    let pkg;
+    try {
+        pkg = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`❌ package.json is not valid JSON: ${packageJsonPath}`);
+    }
+    if (!pkg.version || typeof pkg.version !== 'string') {
+        throw new Error(`❌ package.json has no valid "version" field: ${packageJsonPath}`);
+    }
+    const oldVersion = pkg.version;
+    const newVersion = bumpPatch(oldVersion);
+    pkg.version = newVersion;
+    // mantiene formattazione standard (2 spazi) + newline finale
+    fs.writeFileSync(packageJsonPath, JSON.stringify(pkg, null, 2) + '\n', 'utf8');
+    return newVersion;
+}
+// esecuzione diretta (cli entrypoint)
+try {
+    const v = bumpRootPackageVersion();
+    console.log(`✔ Root package.json version bumped to ${v}`);
+}
+catch (err) {
+    console.error(err?.message ?? err);
+    process.exit(1);
+}
+//# sourceMappingURL=bump.js.map

package/dist/bump.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bump.js","sourceRoot":"","sources":["../src/bump.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEjE,SAAS,SAAS,CAAC,OAAe;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAEtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,oBAAoB,CAAC,CAAA;IAC9F,CAAC;IAED,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,sBAAsB;IAClC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;IAChC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAE1D,gBAAgB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IAEpD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,qCAAqC,eAAe,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gDAAgD,eAAe,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAA;IAC9B,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IAExC,GAAG,CAAC,OAAO,GAAG,UAAU,CAAA;IAExB,6DAA6D;IAC7D,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAA;IAE9E,OAAO,UAAU,CAAA;AACrB,CAAC;AAED,sCAAsC;AACtC,IAAI,CAAC;IACD,MAAM,CAAC,GAAG,sBAAsB,EAAE,CAAA;IAClC,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,EAAE,CAAC,CAAA;AAC7D,CAAC;AAAC,OAAO,GAAQ,EAAE,CAAC;IAChB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAA;IAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC"}

package/dist/cic-index.js

@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+import select from '@inquirer/select';
+import inquirer from 'inquirer';
+import { initFirebaseSecretsProject } from './utils/init.js';
+async function main() {
+    console.log('✔ cic CLI');
+    const action = await select({
+        message: 'Menu',
+        choices: [
+            { name: 'Init (Firebase Secrets)', value: 'init' },
+            { name: 'Firebase Secrets Manager', value: 'firebase-secrets' },
+            { name: 'Exit', value: 'exit' },
+        ],
+    });
+    if (action === 'init') {
+        const { ok } = await inquirer.prompt([
+            {
+                type: 'confirm',
+                name: 'ok',
+                message: 'Questa operazione creerà (solo se mancanti) functions/, functions/.secret.local e functions/src/config/secret.ts. Vuoi continuare?',
+                default: false,
+            },
+        ]);
+        if (!ok) {
+            console.log('annullato');
+            return;
+        }
+        const res = initFirebaseSecretsProject();
+        console.log('\n✔ Init completato');
+        console.log('Root:', res.rootDir);
+        if (res.created.length) {
+            console.log('\nCreati:');
+            for (const p of res.created)
+                console.log(' +', p);
+        }
+        if (res.alreadyExists.length) {
+            console.log('\nGià esistenti (non toccati):');
+            for (const p of res.alreadyExists)
+                console.log(' =', p);
+        }
+        return;
+    }
+    if (action === 'firebase-secrets') {
+        await import('./firebase-secrets.js');
+        return;
+    }
+    console.log('bye');
+}
+main().catch((err) => {
+    console.error('❌ Errore:', err instanceof Error ? err.message : err);
+    process.exit(1);
+});
+//# sourceMappingURL=cic-index.js.map

package/dist/cic-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cic-index.js","sourceRoot":"","sources":["../src/cic-index.ts"],"names":[],"mappings":";AAEA,OAAO,MAAM,MAAM,kBAAkB,CAAA;AACrC,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAI5D,KAAK,UAAU,IAAI;IACf,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAExB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAS;QAChC,OAAO,EAAE,MAAM;QACf,OAAO,EAAE;YACL,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE;YAClD,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,kBAAkB,EAAE;YAC/D,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;SAClC;KACJ,CAAC,CAAA;IAEF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAkB;YAClD;gBACI,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,IAAI;gBACV,OAAO,EACH,oIAAoI;gBACxI,OAAO,EAAE,KAAK;aACjB;SACJ,CAAC,CAAA;QAEF,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACxB,OAAM;QACV,CAAC;QAED,MAAM,GAAG,GAAG,0BAA0B,EAAE,CAAA;QAExC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QAEjC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACxB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACrD,CAAC;QAED,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;YAC7C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,OAAM;IACV,CAAC;IAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;QACrC,OAAM;IACV,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC,CAAC,CAAA"}

package/dist/firebase-secrets.js

@@ -1,15 +1,193 @@
-#!/usr/bin/env node
+#!/usr/bin/env tsx
 import select from '@inquirer/select';
+import inquirer from 'inquirer';
+import { run, runCapture } from './utils/run.js';
+import { setSecretOnline } from './utils/firebaseSecretCli.js';
+import { upsertSecretLocalKey, commentSecretLocalKey, upsertSecretLocalKeyValue, listCommentedSecretsWithValue, uncommentAndSetSecretLocal } from './utils/secretLocal.js';
+import { parseExistingSecretKeysFromTs, writeSecretTs, removeSecretKeyFromTs } from './utils/secretTs.js';
+import { pickSecretKey } from './utils/secretKeyPicker.js';
+import { hr, hrLight, coloredSecretKV } from './utils/logger.js';
+import { assertPathsExist } from './utils/dir.js';
+import { FUNCTIONS_DIR, SECRET_TS_FILE } from './utils/paths.js';
+const COMMANDS = {
+    get: 'Vedere il valore di una variabile (secret)',
+    list: 'Vedere tutte le variabili (secrets)',
+    set: 'Scrivere una variabile (secret)',
+    update: 'Aggiornare una variabile (secret)',
+    destroy: 'Eliminare una variabile (secret)',
+    syncToLocal: 'Allinea una key ONLINE in .secret.local',
+    reviveFromLocal: 'Revive da .secret.local (commentate con valore)',
+    exit: 'Esci'
+};
 async function main() {
-    const cmd = await select({
-        message: 'Firebase Secrets CLI',
-        choices: [
-            { name: 'Ping', value: 'ping' },
-            { name: 'Exit', value: 'exit' }
-        ]
-    });
-    if (cmd === 'ping')
-        console.log('pong');
+    // ✅ fail-fast: se manca qualcosa, errore ed exit subito
+    try {
+        assertPathsExist([SECRET_TS_FILE, FUNCTIONS_DIR]);
+    }
+    catch (err) {
+        console.error('\n' + err.message);
+        process.exit(1);
+    }
+    while (true) {
+        const cmd = await select({
+            message: 'Firebase Secrets Manager',
+            choices: Object.keys(COMMANDS).map((key) => ({
+                name: COMMANDS[key],
+                value: key
+            }))
+        });
+        if (cmd === 'exit')
+            process.exit(0);
+        try {
+            if (cmd === 'get') {
+                const keys = parseExistingSecretKeysFromTs();
+                const key = await pickSecretKey({
+                    message: 'Seleziona la secret da visualizzare',
+                    keys,
+                    otherLabel: 'Other… (scrivi a mano)'
+                });
+                hrLight();
+                const value = await runCapture(`firebase functions:secrets:access ${key}`, `Carico ${key}`);
+                console.log(coloredSecretKV(key, value));
+                hr();
+                continue;
+            }
+            if (cmd === 'list') {
+                const { ok } = await inquirer.prompt([
+                    {
+                        type: 'confirm',
+                        name: 'ok',
+                        message: 'Attenzione: verranno mostrati a schermo i VALORI dei secrets. Vuoi continuare?',
+                        default: false
+                    }
+                ]);
+                if (!ok)
+                    continue;
+                const keys = parseExistingSecretKeysFromTs().sort((a, b) => a.localeCompare(b));
+                hrLight();
+                for (const key of keys) {
+                    const value = await runCapture(`firebase functions:secrets:access ${key}`, `Carico ${key}`);
+                    console.log(coloredSecretKV(key, value));
+                }
+                console.log('\n✔ Fine lista secrets');
+                hr();
+                continue;
+            }
+            if (cmd === 'set') {
+                const { name } = await inquirer.prompt([
+                    { type: 'input', name: 'name', message: 'Nome secret', validate: (v) => !!v.trim() || 'Obbligatorio' }
+                ]);
+                const { value } = await inquirer.prompt([
+                    { type: 'password', name: 'value', message: 'Valore secret', mask: '*', validate: (v) => !!v.trim() || 'Obbligatorio' }
+                ]);
+                const key = name.trim();
+                const val = value.trim();
+                hrLight();
+                // 1) online first
+                await setSecretOnline(key, val);
+                // 2) local files
+                upsertSecretLocalKey(key);
+                const existing = parseExistingSecretKeysFromTs();
+                writeSecretTs([...existing, key]);
+                console.log(`\n✔ Secret "${key}" salvata online + aggiornata .secret.local + secret.ts`);
+                hr();
+                continue;
+            }
+            if (cmd === 'update') {
+                const keys = parseExistingSecretKeysFromTs();
+                const key = await pickSecretKey({
+                    message: 'Seleziona la secret da aggiornare',
+                    keys,
+                    otherLabel: 'Other… (scrivi a mano)'
+                });
+                const { value } = await inquirer.prompt([
+                    { type: 'password', name: 'value', message: `Nuovo valore per ${key}`, mask: '*', validate: (v) => !!v.trim() || 'Obbligatorio' }
+                ]);
+                const val = value.trim();
+                hrLight();
+                // 1) online first
+                await setSecretOnline(key, val);
+                // 2) local files
+                upsertSecretLocalKey(key); // mantiene KEY= (se era commentata la lascia commentata: ok per set/update)
+                const existing = parseExistingSecretKeysFromTs();
+                writeSecretTs([...existing, key]);
+                console.log(`\n✔ Secret "${key}" aggiornata online + aggiornata .secret.local + secret.ts`);
+                hr();
+                continue;
+            }
+            if (cmd === 'destroy') {
+                const keys = parseExistingSecretKeysFromTs();
+                const key = await pickSecretKey({
+                    message: 'Seleziona la secret da eliminare',
+                    keys,
+                    otherLabel: 'Other… (scrivi a mano)'
+                });
+                const { ok } = await inquirer.prompt([
+                    { type: 'confirm', name: 'ok', message: `Confermi eliminazione ONLINE di "${key}"?`, default: false }
+                ]);
+                if (!ok)
+                    continue;
+                hrLight();
+                // 1) elimina online senza ulteriore prompt Firebase
+                await run(`firebase functions:secrets:destroy ${key} --force`);
+                // 2) aggiorna files locali SOLO se online è andata a buon fine
+                commentSecretLocalKey(key);
+                const existing = parseExistingSecretKeysFromTs();
+                const updated = removeSecretKeyFromTs(existing, key);
+                writeSecretTs(updated);
+                console.log(`\n✔ Secret "${key}" eliminata online + aggiornata .secret.local + secret.ts`);
+                hr();
+                continue;
+            }
+            if (cmd === 'syncToLocal') {
+                const keys = parseExistingSecretKeysFromTs();
+                const key = await pickSecretKey({
+                    message: 'Seleziona la secret da allineare in .secret.local',
+                    keys,
+                    otherLabel: 'Other… (scrivi a mano)'
+                });
+                hrLight();
+                const value = await runCapture(`firebase functions:secrets:access ${key}`, `Carico ${key}`);
+                upsertSecretLocalKeyValue(key, value);
+                console.log(`\n✔ Allineata ${key} in functions/.secret.local`);
+                hr();
+                continue;
+            }
+            if (cmd === 'reviveFromLocal') {
+                const candidates = listCommentedSecretsWithValue();
+                if (candidates.length === 0) {
+                    console.log('\nℹ Nessuna secret commentata con valore trovata in functions/.secret.local');
+                    hr();
+                    continue;
+                }
+                const key = await pickSecretKey({
+                    message: 'Seleziona la secret da ripristinare (revive)',
+                    keys: candidates.map((c) => c.key),
+                    otherLabel: 'Other… (scrivi a mano)'
+                });
+                const found = candidates.find((c) => c.key === key);
+                if (!found) {
+                    console.log(`\n❌ La key "${key}" non è tra le commentate con valore in .secret.local`);
+                    hr();
+                    continue;
+                }
+                hrLight();
+                // 1) push online
+                await setSecretOnline(key, found.value);
+                // 1.5) aggiungi key a secret.ts
+                const existing = parseExistingSecretKeysFromTs();
+                writeSecretTs([...existing, key]);
+                // 2) decommenta + set value in .secret.local
+                uncommentAndSetSecretLocal(key, found.value);
+                console.log(`\n✔ Revive completato: ${coloredSecretKV(key, found.value)}`);
+                hr();
+                continue;
+            }
+        }
+        catch (err) {
+            console.error('\n❌ Errore:', err.message);
+        }
+    }
 }
 main();
 //# sourceMappingURL=firebase-secrets.js.map

package/dist/firebase-secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"firebase-secrets.js","sourceRoot":"","sources":["../src/firebase-secrets.ts"],"names":[],"mappings":";AACA,OAAO,MAAM,MAAM,kBAAkB,CAAA;AAErC,KAAK,UAAU,IAAI;IACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC;QACrB,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE;YACL,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;YAC/B,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;SAClC;KACJ,CAAC,CAAA;IAEF,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAC3C,CAAC;AAED,IAAI,EAAE,CAAA"}
+{"version":3,"file":"firebase-secrets.js","sourceRoot":"","sources":["../src/firebase-secrets.ts"],"names":[],"mappings":";AAEA,OAAO,MAAM,MAAM,kBAAkB,CAAA;AACrC,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AAC1K,OAAO,EAAE,6BAA6B,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAIhE,MAAM,QAAQ,GAA+B;IACzC,GAAG,EAAE,4CAA4C;IACjD,IAAI,EAAE,qCAAqC;IAC3C,GAAG,EAAE,iCAAiC;IACtC,MAAM,EAAE,mCAAmC;IAC3C,OAAO,EAAE,kCAAkC;IAC3C,WAAW,EAAE,yCAAyC;IACtD,eAAe,EAAE,iDAAiD;IAClE,IAAI,EAAE,MAAM;CACf,CAAA;AAED,KAAK,UAAU,IAAI;IACf,wDAAwD;IACxD,IAAI,CAAC;QACD,gBAAgB,CAAC,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAA;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,IAAI,GAAI,GAAa,CAAC,OAAO,CAAC,CAAA;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,MAAM,MAAM,CAAa;YACjC,OAAO,EAAE,0BAA0B;YACnC,OAAO,EAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC3D,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC;gBACnB,KAAK,EAAE,GAAG;aACb,CAAC,CAAC;SACN,CAAC,CAAA;QAEF,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEnC,IAAI,CAAC;YAED,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,6BAA6B,EAAE,CAAA;gBAE5C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;oBAC5B,OAAO,EAAE,qCAAqC;oBAC9C,IAAI;oBACJ,UAAU,EAAE,wBAAwB;iBACvC,CAAC,CAAA;gBAEF,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,qCAAqC,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;gBAC3F,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;gBACxC,EAAE,EAAE,CAAC;gBACL,SAAQ;YACZ,CAAC;YAED,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACjB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAkB;oBAClD;wBACI,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,IAAI;wBACV,OAAO,EAAE,gFAAgF;wBACzF,OAAO,EAAE,KAAK;qBACjB;iBACJ,CAAC,CAAA;gBACF,IAAI,CAAC,EAAE;oBAAE,SAAQ;gBAEjB,MAAM,IAAI,GAAG,6BAA6B,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;gBAE/E,OAAO,EAAE,CAAC;gBACV,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,qCAAqC,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;oBAC3F,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;gBAC5C,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACtC,EAAE,EAAE,CAAC;gBACL,SAAQ;YACZ,CAAC;YAED,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAChB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAmB;oBACrD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc,EAAE;iBACzG,CAAC,CAAA;gBAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAoB;oBACvD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc,EAAE;iBAC1H,CAAC,CAAA;gBAEF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;gBACvB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;gBAExB,OAAO,EAAE,CAAC;gBACV,kBAAkB;gBAClB,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;gBAE/B,iBAAiB;gBACjB,oBAAoB,CAAC,GAAG,CAAC,CAAA;gBACzB,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAA;gBAChD,aAAa,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAA;gBAEjC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,yDAAyD,CAAC,CAAA;gBACxF,EAAE,EAAE,CAAC;gBACL,SAAQ;YACZ,CAAC;YAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,6BAA6B,EAAE,CAAA;gBAE5C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;oBAC5B,OAAO,EAAE,mCAAmC;oBAC5C,IAAI;oBACJ,UAAU,EAAE,wBAAwB;iBACvC,CAAC,CAAA;gBAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAoB;oBACvD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc,EAAE;iBACpI,CAAC,CAAA;gBAEF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;gBAExB,OAAO,EAAE,CAAA;gBAET,kBAAkB;gBAClB,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;gBAE/B,iBAAiB;gBACjB,oBAAoB,CAAC,GAAG,CAAC,CAAA,CAAC,4EAA4E;gBACtG,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAA;gBAChD,aAAa,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAA;gBAEjC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,4DAA4D,CAAC,CAAA;gBAC3F,EAAE,EAAE,CAAA;gBACJ,SAAQ;YACZ,CAAC;YAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,6BAA6B,EAAE,CAAA;gBAE5C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;oBAC5B,OAAO,EAAE,kCAAkC;oBAC3C,IAAI;oBACJ,UAAU,EAAE,wBAAwB;iBACvC,CAAC,CAAA;gBAEF,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAkB;oBAClD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;iBACxG,CAAC,CAAA;gBAEF,IAAI,CAAC,EAAE;oBAAE,SAAQ;gBAEjB,OAAO,EAAE,CAAC;gBACV,oDAAoD;gBACpD,MAAM,GAAG,CAAC,sCAAsC,GAAG,UAAU,CAAC,CAAA;gBAE9D,+DAA+D;gBAC/D,qBAAqB,CAAC,GAAG,CAAC,CAAA;gBAE1B,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAA;gBAChD,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;gBACpD,aAAa,CAAC,OAAO,CAAC,CAAA;gBAEtB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,2DAA2D,CAAC,CAAA;gBAC1F,EAAE,EAAE,CAAC;gBACL,SAAQ;YACZ,CAAC;YAED,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,6BAA6B,EAAE,CAAA;gBAE5C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;oBAC5B,OAAO,EAAE,mDAAmD;oBAC5D,IAAI;oBACJ,UAAU,EAAE,wBAAwB;iBACvC,CAAC,CAAA;gBAEF,OAAO,EAAE,CAAA;gBACT,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,qCAAqC,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;gBAE3F,yBAAyB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;gBAErC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,6BAA6B,CAAC,CAAA;gBAC9D,EAAE,EAAE,CAAA;gBACJ,SAAQ;YACZ,CAAC;YAED,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAA;gBAElD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAA;oBAC1F,EAAE,EAAE,CAAA;oBACJ,SAAQ;gBACZ,CAAC;gBAED,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;oBAC5B,OAAO,EAAE,8CAA8C;oBACvD,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;oBAClC,UAAU,EAAE,wBAAwB;iBACvC,CAAC,CAAA;gBAEF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;gBAEnD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACT,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,uDAAuD,CAAC,CAAA;oBACtF,EAAE,EAAE,CAAA;oBACJ,SAAQ;gBACZ,CAAC;gBAED,OAAO,EAAE,CAAA;gBAET,iBAAiB;gBACjB,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;gBAEvC,gCAAgC;gBAChC,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAA;gBAChD,aAAa,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAA;gBAEjC,6CAA6C;gBAC7C,0BAA0B,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;gBAE5C,OAAO,CAAC,GAAG,CAAC,0BAA0B,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC1E,EAAE,EAAE,CAAA;gBACJ,SAAQ;YACZ,CAAC;QAEL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,aAAa,EAAG,GAAa,CAAC,OAAO,CAAC,CAAA;QACxD,CAAC;IACL,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAA"}

package/dist/utils/dir.js

@@ -0,0 +1,146 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Risolve la root del progetto Firebase risalendo le cartelle a partire da process.cwd().
+ * Condizioni per essere considerata root:
+ * - esiste firebase.json
+ * - esiste package.json
+ * - esiste la cartella functions
+ *
+ * Sicurezza anti-loop:
+ * - si ferma quando parent === current (root del filesystem)
+ * - ha un maxDepth failsafe
+ */
+export function getProjectRoot(startDir = process.cwd(), maxDepth = 5) {
+    let current = path.resolve(startDir);
+    let depth = 0;
+    while (depth < maxDepth) {
+        const hasFirebaseJson = fs.existsSync(path.join(current, 'firebase.json'));
+        const hasPackageJson = fs.existsSync(path.join(current, 'package.json'));
+        const hasFunctionsDir = isDir(path.join(current, 'functions'));
+        if (hasFirebaseJson && hasPackageJson && hasFunctionsDir) {
+            return current;
+        }
+        const parent = path.dirname(current);
+        // ✅ anti-loop: siamo arrivati in cima al filesystem
+        if (parent === current)
+            break;
+        current = parent;
+        depth++;
+    }
+    throw new Error('❌ Project root not found. Expected firebase.json + package.json + functions/ in the same directory. ' +
+        `Start dir: ${startDir}`);
+}
+/**
+ * Restituisce un path assoluto relativo alla root del progetto (risolta automaticamente).
+ * Esempio: projectPath('functions', '.secret.local')
+ */
+export function projectPath(...segments) {
+    const root = getProjectRoot();
+    return path.join(root, ...segments);
+}
+/**
+ * Verifica che un percorso esista ed è una directory.
+ */
+export function isDir(dirPath) {
+    try {
+        return fs.statSync(dirPath).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verifica che un percorso esista ed è un file.
+ */
+export function isFile(filePath) {
+    try {
+        return fs.statSync(filePath).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Controllo generico: assicura che esista una directory.
+ * Lancia errore con messaggio chiaro se manca.
+ */
+export function ensureDirExists(dirPath, label) {
+    if (!isDir(dirPath)) {
+        throw new Error(`❌ Directory not found: ${label ?? dirPath}`);
+    }
+}
+/**
+ * Controllo generico: assicura che esista un file.
+ * Lancia errore con messaggio chiaro se manca.
+ */
+export function ensureFileExists(filePath, label) {
+    if (!isFile(filePath)) {
+        throw new Error(`❌ File not found: ${label ?? filePath}`);
+    }
+}
+/**
+ * Utility: crea un file vuoto se non esiste (senza sovrascrivere).
+ * Utile per `.secret.local` al primo avvio.
+ */
+export function ensureFile(filePath, initialContent = '') {
+    if (!fs.existsSync(filePath)) {
+        fs.mkdirSync(path.dirname(filePath), { recursive: true });
+        fs.writeFileSync(filePath, initialContent, 'utf8');
+    }
+}
+/**
+ * Bootstrap “coerente” per la CLI:
+ * - valida di essere dentro un progetto Firebase (root detection)
+ * - valida che esista functions/
+ * - valida che esista secret.ts (obbligatorio per la tua CLI)
+ * - crea .secret.local se manca
+ *
+ * Ritorna i path risolti così li puoi usare subito.
+ */
+export function bootstrapProjectFs() {
+    const rootDir = getProjectRoot();
+    const functionsDir = path.join(rootDir, 'functions');
+    const secretLocalFile = path.join(functionsDir, '.secret.local');
+    const secretTsFile = path.join(functionsDir, 'src', 'config', 'secret.ts');
+    ensureDirExists(functionsDir, 'functions/');
+    ensureFileExists(path.join(rootDir, 'firebase.json'), 'firebase.json');
+    ensureFileExists(path.join(rootDir, 'package.json'), 'package.json');
+    // per la tua CLI: secret.ts deve esistere
+    ensureFileExists(secretTsFile, 'functions/src/config/secret.ts');
+    // .secret.local può essere creato automaticamente
+    ensureFile(secretLocalFile, '');
+    return { rootDir, functionsDir, secretLocalFile, secretTsFile };
+}
+/**
+ * Controlla che una lista di path (file o directory) esista.
+ * NON crea nulla.
+ *
+ * Ritorna:
+ * - existing: path trovati
+ * - missing: path mancanti
+ */
+export function checkPathsExist(paths) {
+    const existing = [];
+    const missing = [];
+    for (const p of paths) {
+        if (fs.existsSync(p)) {
+            existing.push(p);
+        }
+        else {
+            missing.push(p);
+        }
+    }
+    return { existing, missing };
+}
+/**
+ * Controlla che una lista di path (file o directory) esista, ma se manca qualcosa lancia errore (fail-fast).
+ */
+export function assertPathsExist(paths) {
+    const { missing } = checkPathsExist(paths);
+    if (missing.length > 0) {
+        throw new Error('❌ Missing required paths:\n' +
+            missing.map((p) => ` - ${p}`).join('\n'));
+    }
+}
+//# sourceMappingURL=dir.js.map

package/dist/utils/dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dir.js","sourceRoot":"","sources":["../../src/utils/dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE,EAAE,WAAmB,CAAC;IACjF,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpC,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,OAAO,KAAK,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAA;QAC1E,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;QACxE,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;QAE9D,IAAI,eAAe,IAAI,cAAc,IAAI,eAAe,EAAE,CAAC;YACvD,OAAO,OAAO,CAAA;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAEpC,oDAAoD;QACpD,IAAI,MAAM,KAAK,OAAO;YAAE,MAAK;QAE7B,OAAO,GAAG,MAAM,CAAA;QAChB,KAAK,EAAE,CAAA;IACX,CAAC;IAED,MAAM,IAAI,KAAK,CACX,sGAAsG;QACtG,cAAc,QAAQ,EAAE,CAC3B,CAAA;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAG,QAAkB;IAC7C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAA;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe;IACjC,IAAI,CAAC;QACD,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,QAAgB;IACnC,IAAI,CAAC;QACD,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,KAAc;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,IAAI,OAAO,EAAE,CAAC,CAAA;IACjE,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAc;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAA;IAC7D,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,cAAc,GAAG,EAAE;IAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;IACtD,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB;IAM9B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IACpD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IAE1E,eAAe,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAC3C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC,CAAA;IACtE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC,CAAA;IAEpE,0CAA0C;IAC1C,gBAAgB,CAAC,YAAY,EAAE,gCAAgC,CAAC,CAAA;IAEhE,kDAAkD;IAClD,UAAU,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;IAE/B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,CAAA;AACnE,CAAC;AAGD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAe;IAI3C,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAe;IAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACX,6BAA6B;YAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3C,CAAA;IACL,CAAC;AACL,CAAC"}

package/dist/utils/firebaseSecretCli.js

@@ -0,0 +1,5 @@
+import { runWithStdin } from './run.js';
+export async function setSecretOnline(key, val) {
+    await runWithStdin(`firebase functions:secrets:set ${key}`, `${val}\n`);
+}
+//# sourceMappingURL=firebaseSecretCli.js.map

package/dist/utils/firebaseSecretCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebaseSecretCli.js","sourceRoot":"","sources":["../../src/utils/firebaseSecretCli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAEvC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,GAAW;IAC1D,MAAM,YAAY,CAAC,kCAAkC,GAAG,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAA;AAC3E,CAAC"}

package/dist/utils/init.js

@@ -0,0 +1,88 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Cerca la root del progetto risalendo le cartelle e fermandosi in modo sicuro:
+ * - si ferma quando parent === current (root del filesystem)
+ * - maxDepth evita qualunque loop “strano”
+ *
+ * Per l'init NON richiediamo functions/ (perché potremmo doverla creare),
+ * ma richiediamo almeno:
+ * - firebase.json
+ * - package.json
+ */
+function findProjectRootForInit(startDir = process.cwd(), maxDepth = 10) {
+    let current = path.resolve(startDir);
+    let depth = 0;
+    while (depth < maxDepth) {
+        const hasFirebaseJson = fs.existsSync(path.join(current, 'firebase.json'));
+        const hasPackageJson = fs.existsSync(path.join(current, 'package.json'));
+        if (hasFirebaseJson && hasPackageJson)
+            return current;
+        const parent = path.dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+        depth++;
+    }
+    throw new Error('❌ Project root not found for init. Expected firebase.json + package.json in the same directory (somewhere above).\n' +
+        `Start dir: ${startDir}`);
+}
+/**
+ * Crea una directory se non esiste (recursive).
+ * Se esiste già, non fa nulla.
+ */
+function ensureDir(dirPath, created, alreadyExists) {
+    if (fs.existsSync(dirPath)) {
+        alreadyExists.push(dirPath);
+        return;
+    }
+    fs.mkdirSync(dirPath, { recursive: true });
+    created.push(dirPath);
+}
+/**
+ * Crea un file SOLO se non esiste.
+ * - se serve, crea anche la directory padre
+ * - non sovrascrive mai
+ */
+function ensureFile(filePath, content, created, alreadyExists) {
+    if (fs.existsSync(filePath)) {
+        alreadyExists.push(filePath);
+        return;
+    }
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, content, 'utf8');
+    created.push(filePath);
+}
+/**
+ * Inizializza i file/cartelle minimi per la Firebase Secrets CLI.
+ * Cosa fa:
+ * - trova la root (firebase.json + package.json)
+ * - crea functions/ se manca
+ * - crea functions/.secret.local se manca (vuoto)
+ * - crea functions/src/config/secret.ts se manca (template con oggetto vuoto coerente con secretTs.ts)
+ *
+ * NON sovrascrive nulla se esiste già.
+ */
+export function initFirebaseSecretsProject(startDir = process.cwd()) {
+    const rootDir = findProjectRootForInit(startDir);
+    const created = [];
+    const alreadyExists = [];
+    const functionsDir = path.join(rootDir, 'functions');
+    const secretLocalFile = path.join(functionsDir, '.secret.local');
+    const secretTsFile = path.join(functionsDir, 'src', 'config', 'secret.ts');
+    // 1) functions/
+    ensureDir(functionsDir, created, alreadyExists);
+    // 2) .secret.local (vuoto)
+    ensureFile(secretLocalFile, '', created, alreadyExists);
+    // 3) secret.ts (template coerente con parseExistingSecretKeysFromTs / writeSecretTs)
+    const secretTsTemplate = [
+        '// functions/src/config/secret.ts',
+        '',
+        'export const secret = {',
+        '} as const;',
+        ''
+    ].join('\n');
+    ensureFile(secretTsFile, secretTsTemplate, created, alreadyExists);
+    return { rootDir, created, alreadyExists };
+}
+//# sourceMappingURL=init.js.map

package/dist/utils/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/utils/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAQ5B;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE,EAAE,WAAmB,EAAE;IACnF,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpC,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,OAAO,KAAK,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAA;QAC1E,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;QAExE,IAAI,eAAe,IAAI,cAAc;YAAE,OAAO,OAAO,CAAA;QAErD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAK;QAE7B,OAAO,GAAG,MAAM,CAAA;QAChB,KAAK,EAAE,CAAA;IACX,CAAC;IAED,MAAM,IAAI,KAAK,CACX,qHAAqH;QACrH,cAAc,QAAQ,EAAE,CAC3B,CAAA;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAe,EAAE,OAAiB,EAAE,aAAuB;IAC1E,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3B,OAAM;IACV,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,QAAgB,EAAE,OAAe,EAAE,OAAiB,EAAE,aAAuB;IAC7F,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5B,OAAM;IACV,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACvE,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IAEhD,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAA;IAElC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IACpD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IAE1E,gBAAgB;IAChB,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IAE/C,2BAA2B;IAC3B,UAAU,CAAC,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IAEvD,qFAAqF;IACrF,MAAM,gBAAgB,GAAG;QACrB,mCAAmC;QACnC,EAAE;QACF,yBAAyB;QACzB,aAAa;QACb,EAAE;KACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,UAAU,CAAC,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IAElE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;AAC9C,CAAC"}

package/dist/utils/logger.js

@@ -0,0 +1,31 @@
+const RESET = '\x1b[0m';
+const DIM = '\x1b[2m';
+const COLORS = {
+    black: '\x1b[30m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    blue: '\x1b[34m',
+    magenta: '\x1b[35m',
+    cyan: '\x1b[36m',
+    white: '\x1b[37m',
+    gray: '\x1b[90m',
+    brightRed: '\x1b[91m',
+    brightGreen: '\x1b[92m',
+    brightYellow: '\x1b[93m',
+    brightBlue: '\x1b[94m',
+    brightMagenta: '\x1b[95m',
+    brightCyan: '\x1b[96m',
+    brightWhite: '\x1b[97m'
+};
+export function colorizer(text, color, dim = false) {
+    const c = COLORS[color];
+    const d = dim ? DIM : '';
+    return `${d}${c}${text}${RESET}`;
+}
+export function hrLight(color = 'cyan') { console.log(colorizer('-----------------------------------------------', color)); }
+export function hr(color = 'cyan') { console.log(colorizer('===============================================', color)); }
+export function coloredSecretKV(key, value) {
+    return `${colorizer(key, 'green')} ${colorizer('=', 'gray', true)} ${colorizer(value, 'magenta')}`;
+}
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,MAAM,KAAK,GAAG,SAAS,CAAA;AACvB,MAAM,GAAG,GAAG,SAAS,CAAA;AAErB,MAAM,MAAM,GAAG;IACX,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,UAAU;IACf,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,UAAU;IAChB,SAAS,EAAE,UAAU;IACrB,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,UAAU;IACtB,aAAa,EAAE,UAAU;IACzB,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,UAAU;CACjB,CAAA;AAIV,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAe,EAAE,GAAG,GAAG,KAAK;IAChE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IACvB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACxB,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,EAAE,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAkB,MAAM,IAAU,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7I,MAAM,UAAU,EAAE,CAAC,QAAkB,MAAM,IAAU,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC;AAEvI,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,KAAa;IACtD,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAA;AACtG,CAAC"}

package/dist/utils/package.js

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Incrementa la versione del package.json del progetto corrente.
+ * Default: patch
+ *
+ * @returns newVersion
+ */
+export function bumpPackageVersion(type = 'patch', packageJsonPath = path.resolve(process.cwd(), 'package.json')) {
+    if (!fs.existsSync(packageJsonPath)) {
+        throw new Error(`package.json non trovato: ${packageJsonPath}`);
+    }
+    const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
+    if (typeof packageJson.version !== 'string') {
+        throw new Error('Campo "version" mancante o non valido in package.json');
+    }
+    const parts = packageJson.version.split('.').map(Number);
+    if (parts.length !== 3 || parts.some(Number.isNaN)) {
+        throw new Error(`Versione non valida in package.json: "${packageJson.version}" (attesa x.y.z)`);
+    }
+    const [major, minor, patch] = parts;
+    let next;
+    if (type === 'major')
+        next = [major + 1, 0, 0];
+    else if (type === 'minor')
+        next = [major, minor + 1, 0];
+    else
+        next = [major, minor, patch + 1];
+    const newVersion = next.join('.');
+    packageJson.version = newVersion;
+    fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2) + '\n', 'utf8');
+    return newVersion;
+}
+//# sourceMappingURL=package.js.map

package/dist/utils/package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.js","sourceRoot":"","sources":["../../src/utils/package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAI5B;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAC9B,OAAiB,OAAO,EACxB,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;IAE7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAA;IAExE,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACX,yCAAyC,WAAW,CAAC,OAAO,kBAAkB,CACjF,CAAA;IACL,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,KAAK,CAAA;IAEnC,IAAI,IAAc,CAAA;IAClB,IAAI,IAAI,KAAK,OAAO;QAAE,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;SACzC,IAAI,IAAI,KAAK,OAAO;QAAE,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;;QAClD,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IAErC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjC,WAAW,CAAC,OAAO,GAAG,UAAU,CAAA;IAEhC,EAAE,CAAC,aAAa,CACZ,eAAe,EACf,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC3C,MAAM,CACT,CAAA;IAED,OAAO,UAAU,CAAA;AACrB,CAAC"}

package/dist/utils/paths.js

@@ -0,0 +1,14 @@
+import { projectPath } from "./dir.js";
+/**
+ * Path assoluto a functions/.secret.local (robusto: non dipende da process.cwd()).
+ */
+export const SECRET_LOCAL_FILE = projectPath('functions', '.secret.local');
+/**
+ * Path assoluto a functions/src/config/secret.ts (robusto: non dipende da process.cwd()).
+ */
+export const SECRET_TS_FILE = projectPath('functions', 'src', 'config', 'secret.ts');
+/**
+ * Path assoluto alla cartella functions/ (robusto: non dipende da process.cwd()).
+ */
+export const FUNCTIONS_DIR = projectPath('functions');
+//# sourceMappingURL=paths.js.map

package/dist/utils/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;AAEpF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA"}

package/dist/utils/run.js

@@ -0,0 +1,100 @@
+import { spawn } from 'node:child_process';
+/* ----------------------------------
+ * Spinner (riutilizzabile)
+ * ---------------------------------- */
+const SPINNER_FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
+function createSpinner(label = 'loading ') {
+    const enabled = process.stdout.isTTY && !process.env.CI;
+    let i = 0;
+    let timer;
+    const start = () => {
+        if (!enabled)
+            return;
+        process.stdout.write(`${SPINNER_FRAMES[i]} ${label}`);
+        timer = setInterval(() => {
+            i = (i + 1) % SPINNER_FRAMES.length;
+            process.stdout.write(`\r${SPINNER_FRAMES[i]} ${label}`);
+        }, 80);
+    };
+    const stop = () => {
+        if (!enabled)
+            return;
+        if (timer)
+            clearInterval(timer);
+        process.stdout.write('\r\x1b[2K'); // clear line
+    };
+    return { start, stop };
+}
+/* ----------------------------------
+ * run (stdout diretto)
+ * ---------------------------------- */
+export function run(command, label) {
+    return new Promise((resolve, reject) => {
+        const spinner = createSpinner(label);
+        spinner.start();
+        const child = spawn(command, { shell: true, stdio: 'inherit' });
+        child.on('error', (e) => {
+            spinner.stop();
+            reject(e);
+        });
+        child.on('exit', (code) => {
+            spinner.stop();
+            code === 0
+                ? resolve()
+                : reject(new Error(`Command failed (${code}): ${command}`));
+        });
+    });
+}
+/* ----------------------------------
+ * runWithStdin
+ * ---------------------------------- */
+export function runWithStdin(command, stdinText, label) {
+    return new Promise((resolve, reject) => {
+        const spinner = createSpinner(label);
+        spinner.start();
+        const child = spawn(command, {
+            shell: true,
+            stdio: ['pipe', 'inherit', 'inherit']
+        });
+        child.on('error', (e) => {
+            spinner.stop();
+            reject(e);
+        });
+        child.on('exit', (code) => {
+            spinner.stop();
+            code === 0
+                ? resolve()
+                : reject(new Error(`Command failed (${code}): ${command}`));
+        });
+        child.stdin?.write(stdinText);
+        child.stdin?.end();
+    });
+}
+/* ----------------------------------
+ * runCapture (stdout catturato)
+ * ---------------------------------- */
+export function runCapture(command, label) {
+    return new Promise((resolve, reject) => {
+        const spinner = createSpinner(label);
+        spinner.start();
+        const child = spawn(command, {
+            shell: true,
+            stdio: ['ignore', 'pipe', 'pipe']
+        });
+        let out = '';
+        let err = '';
+        child.stdout.on('data', (d) => (out += d.toString()));
+        child.stderr.on('data', (d) => (err += d.toString()));
+        child.on('error', (e) => {
+            spinner.stop();
+            reject(e);
+        });
+        child.on('exit', (code) => {
+            spinner.stop();
+            code === 0
+                ? resolve(out.trim())
+                : reject(new Error(err || `Command failed (${code}): ${command}`));
+        });
+    });
+}
+//# sourceMappingURL=run.js.map

package/dist/utils/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/utils/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C;;wCAEwC;AAExC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAEzE,SAAS,aAAa,CAAC,KAAK,GAAG,UAAU;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;IACvD,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,IAAI,KAAiC,CAAA;IAErC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;QACrD,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YACvB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,CAAA;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;QACzD,CAAC,EAAE,EAAE,CAAC,CAAA;IACR,CAAC,CAAA;IAED,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,KAAK;YAAE,aAAa,CAAC,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,aAAa;IACjD,CAAC,CAAA;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC;AAED;;wCAEwC;AAExC,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,KAAc;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACpC,OAAO,CAAC,KAAK,EAAE,CAAA;QAEf,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QAE/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,OAAO,CAAC,IAAI,EAAE,CAAA;YACd,MAAM,CAAC,CAAC,CAAC,CAAA;QACX,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC,IAAI,EAAE,CAAA;YACd,IAAI,KAAK,CAAC;gBACR,CAAC,CAAC,OAAO,EAAE;gBACX,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;wCAEwC;AAExC,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,SAAiB,EACjB,KAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACpC,OAAO,CAAC,KAAK,EAAE,CAAA;QAEf,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;YAC3B,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;SACtC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,OAAO,CAAC,IAAI,EAAE,CAAA;YACd,MAAM,CAAC,CAAC,CAAC,CAAA;QACX,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC,IAAI,EAAE,CAAA;YACd,IAAI,KAAK,CAAC;gBACR,CAAC,CAAC,OAAO,EAAE;gBACX,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAC7B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;wCAEwC;AAExC,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,KAAc;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACpC,OAAO,CAAC,KAAK,EAAE,CAAA;QAEf,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;YAC3B,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;QAEF,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,GAAG,GAAG,EAAE,CAAA;QAEZ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QACrD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAErD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,OAAO,CAAC,IAAI,EAAE,CAAA;YACd,MAAM,CAAC,CAAC,CAAC,CAAA;QACX,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC,IAAI,EAAE,CAAA;YACd,IAAI,KAAK,CAAC;gBACR,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACrB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/utils/secretKeyPicker.js

@@ -0,0 +1,28 @@
+import select from '@inquirer/select';
+import inquirer from 'inquirer';
+export async function pickSecretKey(opts) {
+    const otherLabel = opts.otherLabel ?? 'Other…';
+    const choices = [
+        ...opts.keys
+            .slice()
+            .sort((a, b) => a.localeCompare(b))
+            .map((k) => ({ name: k, value: k })),
+        { name: otherLabel, value: '__OTHER__' }
+    ];
+    const picked = await select({
+        message: opts.message,
+        choices
+    });
+    if (picked !== '__OTHER__')
+        return picked;
+    const { name } = await inquirer.prompt([
+        {
+            type: 'input',
+            name: 'name',
+            message: 'Nome secret',
+            validate: (v) => !!v.trim() || 'Obbligatorio'
+        }
+    ]);
+    return name.trim();
+}
+//# sourceMappingURL=secretKeyPicker.js.map

package/dist/utils/secretKeyPicker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretKeyPicker.js","sourceRoot":"","sources":["../../src/utils/secretKeyPicker.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,kBAAkB,CAAA;AACrC,OAAO,QAAQ,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAInC;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAA;IAE9C,MAAM,OAAO,GAAG;QACd,GAAG,IAAI,CAAC,IAAI;aACT,KAAK,EAAE;aACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACtC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAoB,EAAE;KAClD,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAS;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO;KACR,CAAC,CAAA;IAEF,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAA;IAEzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAmB;QACvD;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc;SAC9C;KACF,CAAC,CAAA;IAEF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAA;AACpB,CAAC"}

package/dist/utils/secretLocal.js

@@ -0,0 +1,105 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { SECRET_LOCAL_FILE } from './paths.js';
+function ensureFileDir(filePath) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+}
+function readLines(filePath) {
+    if (!fs.existsSync(filePath))
+        return [];
+    return fs
+        .readFileSync(filePath, 'utf-8')
+        .split('\n')
+        .map((l) => l.trim())
+        .filter(Boolean);
+}
+export function upsertSecretLocalKey(key) {
+    ensureFileDir(SECRET_LOCAL_FILE);
+    const lines = readLines(SECRET_LOCAL_FILE);
+    const filtered = lines.filter((l) => !l.startsWith(`${key}=`));
+    filtered.push(`${key}=`); // solo KEY=
+    filtered.sort((a, b) => a.localeCompare(b));
+    fs.writeFileSync(SECRET_LOCAL_FILE, filtered.join('\n') + '\n', 'utf-8');
+}
+export function commentSecretLocalKey(key) {
+    ensureFileDir(SECRET_LOCAL_FILE);
+    const lines = readLines(SECRET_LOCAL_FILE);
+    const keyRegex = new RegExp(`^\\s*#?\\s*${key}=.*$`);
+    const updated = lines.map((line) => {
+        if (!keyRegex.test(line))
+            return line;
+        const trimmed = line.trim();
+        // già commentata → normalizza solo lo spazio
+        if (trimmed.startsWith('#')) {
+            return `# ${trimmed.replace(/^#+\s*/, '')}`;
+        }
+        // non commentata → commenta mantenendo valore
+        return `# ${trimmed}`;
+    });
+    fs.writeFileSync(SECRET_LOCAL_FILE, updated.join('\n'), 'utf-8');
+}
+export function upsertSecretLocalKeyValue(key, value) {
+    ensureFileDir(SECRET_LOCAL_FILE);
+    const lines = readLines(SECRET_LOCAL_FILE);
+    const rx = new RegExp(`^\\s*(#\\s*)?${key}=.*$`);
+    let found = false;
+    const updated = lines.map((line) => {
+        if (!rx.test(line))
+            return line;
+        found = true;
+        return `${key}=${value}`; // decommenta + set value
+    });
+    if (!found)
+        updated.push(`${key}=${value}`);
+    // opzionale: stabilità del file
+    const normalized = updated
+        .map((l) => l.trimEnd())
+        .filter((l) => l.length > 0);
+    fs.writeFileSync(SECRET_LOCAL_FILE, normalized.join('\n') + '\n', 'utf-8');
+}
+export function listCommentedSecretsWithValue() {
+    ensureFileDir(SECRET_LOCAL_FILE);
+    const lines = readLines(SECRET_LOCAL_FILE);
+    const out = [];
+    for (const line of lines) {
+        const trimmed = line.trim();
+        // Solo commentate
+        if (!trimmed.startsWith('#'))
+            continue;
+        // rimuovi il commento: "#", "# ", "##  " ecc.
+        const uncommented = trimmed.replace(/^#+\s*/, '');
+        const eq = uncommented.indexOf('=');
+        if (eq <= 0)
+            continue;
+        const key = uncommented.slice(0, eq).trim();
+        const value = uncommented.slice(eq + 1);
+        if (!key)
+            continue;
+        if (value.trim().length === 0)
+            continue; // value non deve essere solo spazi
+        out.push({ key, value: value.trim() });
+    }
+    // dedup: ultima occorrenza vince
+    const map = new Map();
+    for (const item of out)
+        map.set(item.key, item.value);
+    return Array.from(map.entries())
+        .map(([key, value]) => ({ key, value }))
+        .sort((a, b) => a.key.localeCompare(b.key));
+}
+export function uncommentAndSetSecretLocal(key, value) {
+    ensureFileDir(SECRET_LOCAL_FILE);
+    const lines = readLines(SECRET_LOCAL_FILE);
+    const rx = new RegExp(`^\\s*(#\\s*)?${key}=.*$`);
+    let found = false;
+    const updated = lines.map((line) => {
+        if (!rx.test(line))
+            return line;
+        found = true;
+        return `${key}=${value}`; // decommenta + set value (preserva value)
+    });
+    if (!found)
+        updated.push(`${key}=${value}`);
+    fs.writeFileSync(SECRET_LOCAL_FILE, updated.join('\n') + '\n', 'utf-8');
+}
+//# sourceMappingURL=secretLocal.js.map

package/dist/utils/secretLocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretLocal.js","sourceRoot":"","sources":["../../src/utils/secretLocal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,SAAS,aAAa,CAAC,QAAgB;IACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAA;IACvC,OAAO,EAAE;SACJ,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC5C,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAA;IAE9D,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA,CAAC,YAAY;IACrC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;IAE3C,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAA;IAE1C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,CAAA;IAEpD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAErC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAE3B,6CAA6C;QAC7C,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAA;QAC7C,CAAC;QAED,8CAA8C;QAC9C,OAAO,KAAK,OAAO,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAE,KAAa;IAClE,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAA;IAEhD,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/B,KAAK,GAAG,IAAI,CAAA;QACZ,OAAO,GAAG,GAAG,IAAI,KAAK,EAAE,CAAA,CAAC,yBAAyB;IACpD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAA;IAE3C,gCAAgC;IAChC,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAE9B,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAA;IAE1C,MAAM,GAAG,GAA0C,EAAE,CAAA;IAErD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAE3B,kBAAkB;QAClB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEtC,8CAA8C;QAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAEjD,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAQ;QAErB,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAEvC,IAAI,CAAC,GAAG;YAAE,SAAQ;QAClB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ,CAAC,mCAAmC;QAE3E,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAErD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAW,EAAE,KAAa;IACnE,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAA;IAEhD,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/B,KAAK,GAAG,IAAI,CAAA;QACZ,OAAO,GAAG,GAAG,IAAI,KAAK,EAAE,CAAA,CAAC,0CAA0C;IACrE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAA;IAE3C,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;AACzE,CAAC"}

package/dist/utils/secretTs.js

@@ -0,0 +1,34 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { SECRET_TS_FILE } from './paths.js';
+function ensureFileDir(filePath) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+}
+export function parseExistingSecretKeysFromTs() {
+    if (!fs.existsSync(SECRET_TS_FILE))
+        return [];
+    const content = fs.readFileSync(SECRET_TS_FILE, 'utf-8');
+    const re = /^\s*([A-Z0-9_]+)\s*:\s*'([A-Z0-9_]+)'\s*,?\s*$/gm;
+    const keys = new Set();
+    let m;
+    while ((m = re.exec(content)))
+        keys.add(m[1]);
+    return Array.from(keys);
+}
+export function writeSecretTs(keys) {
+    ensureFileDir(SECRET_TS_FILE);
+    const unique = Array.from(new Set(keys)).sort((a, b) => a.localeCompare(b));
+    const lines = [
+        '// functions/src/config/secret.ts',
+        '',
+        'export const secret = {',
+        ...unique.map((k) => `    ${k}: '${k}',`),
+        '} as const;',
+        ''
+    ];
+    fs.writeFileSync(SECRET_TS_FILE, lines.join('\n'), 'utf-8');
+}
+export function removeSecretKeyFromTs(keys, keyToRemove) {
+    return keys.filter((k) => k !== keyToRemove);
+}
+//# sourceMappingURL=secretTs.js.map

package/dist/utils/secretTs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretTs.js","sourceRoot":"","sources":["../../src/utils/secretTs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C,SAAS,aAAa,CAAC,QAAgB;IACrC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,CAAA;IAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAExD,MAAM,EAAE,GAAG,kDAAkD,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,CAAyB,CAAA;IAE7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,aAAa,CAAC,cAAc,CAAC,CAAA;IAE7B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;IAE3E,MAAM,KAAK,GAAG;QACZ,mCAAmC;QACnC,EAAE;QACF,yBAAyB;QACzB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACzC,aAAa;QACb,EAAE;KACH,CAAA;IAED,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAc,EAAE,WAAmB;IACvE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAA;AAC9C,CAAC"}

package/package.json

@@ -1,9 +1,11 @@
 {
   "name": "firebase-secrets-cli",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "type": "module",
   "bin": {
-    "firebase-secrets": "./dist/firebase-secrets.js"
+    "firebase-secrets": "./dist/firebase-secrets.js",
+    "cic-index": "./dist/cic-index.js",
+    "cic-bump": "./dist/bump.js"
   },
   "files": [
     "dist"
@@ -11,7 +13,9 @@
   "scripts": {
     "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
     "build": "npm run clean && tsc -p tsconfig.json",
-    "pack": "npm run build && npm pack"
+    "pack": "npm run build && npm pack",
+    "deploy": "npm run build && node scripts/bump-version.cjs && npm pack && npm publish --access public",
+    "start": "npm run build && node dist/cic-index.js"
   },
   "dependencies": {
     "@inquirer/select": "^5.0.4",
@@ -21,4 +25,4 @@
     "@types/node": "^25.0.10",
     "typescript": "^5.9.3"
   }
-}
+}