getmyenv 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 getenv.dev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,13 @@
+# getmyenv
+
+CLI for [getmyenv](https://getmyenv.com) - encrypted environment variables for any language.
+
+```bash
+npx getmyenv login
+npx getmyenv migrate
+npx getmyenv run -- npm start
+```
+
+Create a token at https://getmyenv.com/cli, then `login` (or paste when a command asks). Login may offer to run `migrate`. Migrate searches this folder tree for `.env*` files (including `.env.example` / `.env.sample`) and lists candidates. Use `--file` to pick a path. Defaults to `https://getmyenv.com`. Use `login --api-url` or `--api-url` for another origin.
+
+See https://getmyenv.com/docs

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import { runCli } from "./cli.js";
+runCli(process.argv).catch((err) => {
+    const message = err instanceof Error ? err.message : "Unexpected error";
+    // Never print secret values - sanitize to message only
+    console.error(`getmyenv: ${message}`);
+    process.exit(1);
+});
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC1C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACxE,uDAAuD;IACvD,OAAO,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+export declare function runCli(argv: string[]): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AA0BA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmI1D"}

package/dist/cli.js

@@ -0,0 +1,105 @@
+import { Command } from "commander";
+import { initCommand } from "./commands/init.js";
+import { migrateCommand } from "./commands/migrate.js";
+import { addCommand } from "./commands/add.js";
+import { statusCommand } from "./commands/status.js";
+import { exportCommand } from "./commands/export.js";
+import { backupCommand } from "./commands/backup.js";
+import { restoreCommand } from "./commands/restore.js";
+import { runCommand } from "./commands/run.js";
+import { loginCommand } from "./commands/login.js";
+import { logoutCommand } from "./commands/logout.js";
+import { normalizeEnvName } from "./lib/env-name.js";
+import { resolveApiUrl } from "./lib/api.js";
+const ENV_OPTION = [
+    "-e, --env <name>",
+    "Environment (lowercase, e.g. development or production)",
+    "development",
+];
+function withNormalizedEnv(fn) {
+    return (opts) => fn({ ...opts, env: normalizeEnvName(opts.env) });
+}
+export async function runCli(argv) {
+    const apiDefault = resolveApiUrl();
+    const program = new Command();
+    program
+        .name("getmyenv")
+        .description("Keep using environment variables. Stop managing them as files.")
+        .version("0.1.1");
+    program
+        .command("login")
+        .description("Save a dashboard CLI token (paste once; no shell env needed)")
+        .option("--api-url <url>", "API base URL to remember (default production)")
+        .action(loginCommand);
+    program
+        .command("logout")
+        .description("Clear the saved CLI token")
+        .action(logoutCommand);
+    program
+        .command("init")
+        .description("Detect expected environment variable names across languages (never collects values)")
+        .action(initCommand);
+    program
+        .command("migrate")
+        .description("Encrypt an .env* file locally and upload (searches this folder tree)")
+        .option(...ENV_OPTION)
+        .option("-f, --file <path>", "Path to .env file to migrate")
+        .option("--api-url <url>", "API base URL", apiDefault)
+        .option("--vault-password-stdin", "Read vault password from stdin (non-interactive)")
+        .action((opts) => migrateCommand({
+        ...opts,
+        env: normalizeEnvName(opts.env),
+        envWasDefault: !process.argv.includes("-e") && !process.argv.includes("--env"),
+    }));
+    program
+        .command("add <name>")
+        .description("Add a secret via secure interactive input (never pass values on the CLI)")
+        .option(...ENV_OPTION)
+        .option("--api-url <url>", "API base URL", apiDefault)
+        .option("--vault-password-stdin", "Read vault password from stdin (non-interactive)")
+        .action((name, opts) => addCommand(name, { ...opts, env: normalizeEnvName(opts.env) }));
+    program
+        .command("status")
+        .description("Show secret status for the current project")
+        .option(...ENV_OPTION)
+        .option("--api-url <url>", "API base URL", apiDefault)
+        .action(withNormalizedEnv(statusCommand));
+    program
+        .command("export")
+        .description("Export secrets to a plaintext .env file")
+        .option(...ENV_OPTION)
+        .option("-o, --output <file>", "Output file", ".env")
+        .option("--api-url <url>", "API base URL", apiDefault)
+        .option("--vault-password-stdin", "Read vault password from stdin (non-interactive)")
+        .action(withNormalizedEnv(exportCommand));
+    program
+        .command("backup")
+        .description("Create a portable encrypted .getmyenv backup")
+        .option("-o, --output <file>", "Output file")
+        .option("--api-url <url>", "API base URL", apiDefault)
+        .action(backupCommand);
+    program
+        .command("restore <file>")
+        .description("Restore from an encrypted .getmyenv backup (creates a new project by default)")
+        .option("--api-url <url>", "API base URL", apiDefault)
+        .option("--into-linked", "Overwrite the project linked in the current directory")
+        .option("--vault-password-stdin", "Read vault password from stdin (non-interactive)")
+        .action(restoreCommand);
+    program
+        .command("run")
+        .description("Decrypt authorized secrets and run a command with the secrets available as environment variables")
+        .option(...ENV_OPTION)
+        .option("--api-url <url>", "API base URL", apiDefault)
+        .option("--vault-password-stdin", "Read vault password from stdin (non-interactive)")
+        .allowUnknownOption(true)
+        .allowExcessArguments(true)
+        .action(async (opts, cmd) => {
+        const args = cmd.args;
+        // Support: getmyenv run -- npm start
+        const dashIdx = process.argv.indexOf("--");
+        const childArgs = dashIdx >= 0 ? process.argv.slice(dashIdx + 1) : args;
+        await runCommand({ ...opts, env: normalizeEnvName(opts.env) }, childArgs);
+    });
+    await program.parseAsync(argv);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,UAAU,GAAG;IACjB,kBAAkB;IAClB,yDAAyD;IACzD,aAAa;CACL,CAAC;AAEX,SAAS,iBAAiB,CACxB,EAA8B;IAE9B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO;SACJ,IAAI,CAAC,UAAU,CAAC;SAChB,WAAW,CACV,gEAAgE,CACjE;SACA,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,iBAAiB,EAAE,+CAA+C,CAAC;SAC1E,MAAM,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzB,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CACV,qFAAqF,CACtF;SACA,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,sEAAsE,CACvE;SACA,MAAM,CAAC,GAAG,UAAU,CAAC;SACrB,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;SAC3D,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC;SACrD,MAAM,CACL,wBAAwB,EACxB,kDAAkD,CACnD;SACA,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,cAAc,CAAC;QACb,GAAG,IAAI;QACP,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,aAAa,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;KAC/E,CAAC,CACH,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CACV,0EAA0E,CAC3E;SACA,MAAM,CAAC,GAAG,UAAU,CAAC;SACrB,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC;SACrD,MAAM,CACL,wBAAwB,EACxB,kDAAkD,CACnD;SACA,MAAM,CAAC,CAAC,IAAY,EAAE,IAAmE,EAAE,EAAE,CAC5F,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAC/D,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CAAC,GAAG,UAAU,CAAC;SACrB,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC;SACrD,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;IAE5C,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,GAAG,UAAU,CAAC;SACrB,MAAM,CAAC,qBAAqB,EAAE,aAAa,EAAE,MAAM,CAAC;SACpD,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC;SACrD,MAAM,CACL,wBAAwB,EACxB,kDAAkD,CACnD;SACA,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;IAE5C,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,qBAAqB,EAAE,aAAa,CAAC;SAC5C,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC;SACrD,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzB,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CACV,+EAA+E,CAChF;SACA,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC;SACrD,MAAM,CACL,eAAe,EACf,uDAAuD,CACxD;SACA,MAAM,CACL,wBAAwB,EACxB,kDAAkD,CACnD;SACA,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CACV,kGAAkG,CACnG;SACA,MAAM,CAAC,GAAG,UAAU,CAAC;SACrB,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,UAAU,CAAC;SACrD,MAAM,CACL,wBAAwB,EACxB,kDAAkD,CACnD;SACA,kBAAkB,CAAC,IAAI,CAAC;SACxB,oBAAoB,CAAC,IAAI,CAAC;SAC1B,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAgB,CAAC;QAClC,qCAAqC;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,MAAM,UAAU,CACd,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC5C,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC"}

package/dist/commands/add.d.ts

@@ -0,0 +1,8 @@
+type AddOpts = {
+    env: string;
+    apiUrl: string;
+    vaultPasswordStdin?: boolean;
+};
+export declare function addCommand(name: string, opts: AddOpts): Promise<void>;
+export {};
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAeA,KAAK,OAAO,GAAG;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAkE3E"}

package/dist/commands/add.js

@@ -0,0 +1,64 @@
+import pc from "picocolors";
+import { createWrappedProjectKey, encryptSecret, serializePayload, serializeWrappedKey, unwrapProjectKey, parseWrappedKey, } from "@getmyenv/crypto";
+import { secretNameSchema } from "@getmyenv/shared";
+import { promptHidden, readProjectMeta, writeProjectMeta } from "../lib/fs.js";
+import { ApiClient, ensureSessionToken } from "../lib/api.js";
+import fs from "node:fs";
+import path from "node:path";
+export async function addCommand(name, opts) {
+    const parsed = secretNameSchema.safeParse(name);
+    if (!parsed.success) {
+        throw new Error("Invalid secret name. Use a valid environment variable name.");
+    }
+    // Reject accidental value-in-argv patterns
+    if (name.includes("=")) {
+        throw new Error('Do not pass secret values on the command line. Use: npx getmyenv add NAME');
+    }
+    console.log(pc.bold("\ngetmyenv add\n"));
+    console.log(`Secret: ${name}`);
+    console.log(`Environment: ${opts.env}\n`);
+    const value = await promptHidden("Secret value: ");
+    if (!value)
+        throw new Error("Value required");
+    const password = await promptHidden("Vault password: ", {
+        allowStdin: opts.vaultPasswordStdin,
+    });
+    const meta = readProjectMeta() ?? {};
+    const pendingPath = path.join(process.cwd(), ".getmyenv", "wrapped-key.json");
+    let pek;
+    let wrappedRaw;
+    if (fs.existsSync(pendingPath)) {
+        const wrapped = parseWrappedKey(fs.readFileSync(pendingPath, "utf8"));
+        pek = await unwrapProjectKey(password, wrapped);
+        wrappedRaw = serializeWrappedKey(wrapped);
+    }
+    else {
+        const created = await createWrappedProjectKey(password);
+        pek = created.pek;
+        wrappedRaw = serializeWrappedKey(created.wrapped);
+        fs.mkdirSync(path.dirname(pendingPath), { recursive: true });
+        fs.writeFileSync(pendingPath, wrappedRaw, { mode: 0o600 });
+    }
+    const ciphertext = serializePayload(encryptSecret(pek, value));
+    const token = await ensureSessionToken();
+    const client = new ApiClient(opts.apiUrl, token);
+    if (!meta.projectId) {
+        const queue = path.join(process.cwd(), ".getmyenv", "pending-secrets.json");
+        const existing = fs.existsSync(queue)
+            ? JSON.parse(fs.readFileSync(queue, "utf8"))
+            : [];
+        existing.push({ name, environment: opts.env, ciphertext });
+        fs.writeFileSync(queue, JSON.stringify(existing, null, 2), { mode: 0o600 });
+        writeProjectMeta({ ...meta, protectionMode: "advanced", apiUrl: opts.apiUrl });
+        console.log(`${pc.green("✓")} Encrypted locally and queued (link a project with migrate to sync)\n`);
+        return;
+    }
+    await client.request("POST", `/api/cli/projects/${meta.projectId}/secrets`, {
+        name,
+        environment: opts.env,
+        ciphertext,
+        wrappedProjectKey: JSON.parse(wrappedRaw),
+    });
+    console.log(`${pc.green("✓")} Added ${name}\n`);
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAQ7B,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAa;IAC1D,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,2CAA2C;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE;QACtD,UAAU,EAAE,IAAI,CAAC,kBAAkB;KACpC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,eAAe,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAE9E,IAAI,GAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IAEvB,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACtE,GAAG,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACxD,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QAClB,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEjD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;YACnC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAe;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CACT,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,uEAAuE,CACxF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC,SAAS,UAAU,EAAE;QAC1E,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,GAAG;QACrB,UAAU;QACV,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;KAC1C,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/commands/backup.d.ts

@@ -0,0 +1,7 @@
+type BackupOpts = {
+    output?: string;
+    apiUrl: string;
+};
+export declare function backupCommand(opts: BackupOpts): Promise<void>;
+export {};
+//# sourceMappingURL=backup.d.ts.map

package/dist/commands/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAYA,KAAK,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CnE"}

package/dist/commands/backup.js

@@ -0,0 +1,35 @@
+import fs from "node:fs";
+import path from "node:path";
+import pc from "picocolors";
+import { createBackupEnvelope, parsePayload, parseWrappedKey, serializeBackup, } from "@getmyenv/crypto";
+import { readProjectMeta } from "../lib/fs.js";
+import { ApiClient, ensureSessionToken } from "../lib/api.js";
+export async function backupCommand(opts) {
+    console.log(pc.bold("\ngetmyenv backup\n"));
+    const meta = readProjectMeta();
+    if (!meta?.projectId) {
+        throw new Error("Linked project required for backup. Run migrate first, then npx getmyenv login if needed.");
+    }
+    const token = await ensureSessionToken();
+    const client = new ApiClient(opts.apiUrl, token);
+    const data = await client.request("GET", `/api/cli/projects/${meta.projectId}/backup`);
+    const envelope = createBackupEnvelope({
+        projectName: data.projectName,
+        wrappedProjectKey: parseWrappedKey(JSON.stringify(data.wrappedProjectKey)),
+        secrets: data.secrets.map((s) => ({
+            name: s.name,
+            environment: s.environment,
+            status: s.status,
+            expiresAt: s.expiresAt,
+            payload: s.ciphertext != null && s.status !== "placeholder"
+                ? parsePayload(s.ciphertext)
+                : null,
+        })),
+    });
+    const out = opts.output ??
+        path.join(process.cwd(), `${data.projectName.replace(/\s+/g, "-").toLowerCase()}.getmyenv`);
+    fs.writeFileSync(out, serializeBackup(envelope), { mode: 0o600 });
+    console.log(`${pc.green("✓")} Wrote encrypted backup: ${out}`);
+    console.log(pc.dim("Portable. No plaintext. Usable offline with your vault password.\n"));
+}
+//# sourceMappingURL=backup.js.map

package/dist/commands/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAI9D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAgB;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAU9B,KAAK,EAAE,qBAAqB,IAAI,CAAC,SAAS,SAAS,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,iBAAiB,EAAE,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1E,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EACL,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;gBAChD,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC5B,CAAC,CAAC,IAAI;SACX,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,GAAG,GACP,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9F,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC,CAAC;AAC5F,CAAC"}

package/dist/commands/export.d.ts

@@ -0,0 +1,9 @@
+type ExportOpts = {
+    env: string;
+    output: string;
+    apiUrl: string;
+    vaultPasswordStdin?: boolean;
+};
+export declare function exportCommand(opts: ExportOpts): Promise<void>;
+export {};
+//# sourceMappingURL=export.d.ts.map

package/dist/commands/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":"AAYA,KAAK,UAAU,GAAG;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiEnE"}

package/dist/commands/export.js

@@ -0,0 +1,48 @@
+import fs from "node:fs";
+import pc from "picocolors";
+import { decryptSecret, parsePayload, parseWrappedKey, unwrapProjectKey, } from "@getmyenv/crypto";
+import { EXPORT_WARNING } from "@getmyenv/shared";
+import { promptHidden, readProjectMeta } from "../lib/fs.js";
+import { ApiClient, ensureSessionToken } from "../lib/api.js";
+export async function exportCommand(opts) {
+    console.log(pc.bold("\ngetmyenv export\n"));
+    console.log(pc.yellow(EXPORT_WARNING));
+    console.log("");
+    const meta = readProjectMeta();
+    if (!meta?.projectId) {
+        throw new Error("Linked project required for export. Run migrate first, then npx getmyenv login if needed.");
+    }
+    const token = await ensureSessionToken();
+    const password = await promptHidden("Vault password: ", {
+        allowStdin: opts.vaultPasswordStdin,
+    });
+    const client = new ApiClient(opts.apiUrl, token);
+    const data = await client.request("GET", `/api/cli/projects/${meta.projectId}/export?environment=${encodeURIComponent(opts.env)}`);
+    const pek = await unwrapProjectKey(password, parseWrappedKey(typeof data.wrappedProjectKey === "string"
+        ? data.wrappedProjectKey
+        : JSON.stringify(data.wrappedProjectKey)));
+    const lines = [
+        "# Exported by getmyenv - PLAINTEXT SECRETS",
+        `# Environment: ${opts.env}`,
+        "# Do not commit this file.",
+        "",
+    ];
+    for (const secret of data.secrets) {
+        if (secret.status === "revoked") {
+            lines.push("# revoked - getmyenv is not providing this");
+        }
+        if (secret.status === "placeholder" ||
+            secret.ciphertext == null ||
+            secret.ciphertext === "") {
+            lines.push(`# placeholder - no value yet`);
+            lines.push(`${secret.name}=`);
+            continue;
+        }
+        const value = decryptSecret(pek, parsePayload(secret.ciphertext));
+        lines.push(`${secret.name}=${value}`);
+    }
+    fs.writeFileSync(opts.output, lines.join("\n") + "\n", { mode: 0o600 });
+    console.log(`${pc.green("✓")} Wrote ${opts.output}`);
+    console.log(pc.dim("Your secrets are yours. Protect this file.\n"));
+}
+//# sourceMappingURL=export.js.map

package/dist/commands/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAS9D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAgB;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE;QACtD,UAAU,EAAE,IAAI,CAAC,kBAAkB;KACpC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAI/B,KAAK,EACL,qBAAqB,IAAI,CAAC,SAAS,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,QAAQ,EACR,eAAe,CACb,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;QACxC,CAAC,CAAC,IAAI,CAAC,iBAAiB;QACxB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAC3C,CACF,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,4CAA4C;QAC5C,kBAAkB,IAAI,CAAC,GAAG,EAAE;QAC5B,4BAA4B;QAC5B,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3D,CAAC;QACD,IACE,MAAM,CAAC,MAAM,KAAK,aAAa;YAC/B,MAAM,CAAC,UAAU,IAAI,IAAI;YACzB,MAAM,CAAC,UAAU,KAAK,EAAE,EACxB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CACzB,GAAG,EACH,YAAY,CAAC,MAAM,CAAC,UAAoB,CAAC,CAC1C,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,2 @@
+export declare function initCommand(): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAUA,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAyEjD"}

package/dist/commands/init.js

@@ -0,0 +1,58 @@
+import pc from "picocolors";
+import { detectEnvNames, detectLanguages, writeProjectMeta, writeRequirements, readProjectMeta, } from "../lib/fs.js";
+import { ApiClient, ensureSessionToken, resolveApiUrl } from "../lib/api.js";
+export async function initCommand() {
+    console.log(pc.bold("\ngetmyenv\n"));
+    const languages = detectLanguages();
+    const names = detectEnvNames();
+    const meta = readProjectMeta();
+    if (languages.length > 0) {
+        console.log(pc.green("✓") +
+            " Project detected: " +
+            languages.map((l) => l.label).join(", "));
+    }
+    else {
+        console.log(pc.green("✓") + " Project detected");
+    }
+    console.log(pc.green("✓") + " Environment files scanned");
+    console.log("");
+    console.log(`Detected ${names.length} environment variables:\n`);
+    for (const name of names) {
+        console.log(`  ${pc.green("✓")} ${name}`);
+    }
+    console.log("");
+    writeRequirements(names);
+    if (!meta) {
+        writeProjectMeta({
+            projectName: process.cwd().split(/[/\\]/).pop() ?? "project",
+            protectionMode: "advanced",
+        });
+    }
+    console.log(pc.dim("Wrote .getmyenv/requirements.json (names only - no values collected)."));
+    const projectId = meta?.projectId ?? readProjectMeta()?.projectId;
+    if (projectId && names.length > 0) {
+        try {
+            const token = await ensureSessionToken();
+            const client = new ApiClient(resolveApiUrl(), token);
+            const result = await client.request("POST", `/api/cli/projects/${projectId}/secrets`, {
+                names,
+                environment: "development",
+                placeholder: true,
+            });
+            console.log(pc.green("✓") +
+                ` Dashboard placeholders: ${result.created} new name(s) (both environments synced).`);
+            console.log(pc.dim("Fill values in the dashboard or with: npx getmyenv add NAME"));
+        }
+        catch (err) {
+            console.log(pc.yellow("!") +
+                " Could not push placeholders to the dashboard: " +
+                (err instanceof Error ? err.message : String(err)));
+            console.log(pc.dim("Local requirements were still saved."));
+        }
+    }
+    else if (names.length > 0) {
+        console.log(pc.dim("Link a project (migrate), then re-run init to create dashboard placeholders."));
+    }
+    console.log(pc.dim("Next: npx getmyenv migrate  (or fill placeholders)\n"));
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE7E,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAE/B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;YACX,qBAAqB;YACrB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3C,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,4BAA4B,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,MAAM,2BAA2B,CAAC,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,gBAAgB,CAAC;YACf,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS;YAC5D,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAChF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,eAAe,EAAE,EAAE,SAAS,CAAC;IAClE,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,aAAa,EAAE,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CACjC,MAAM,EACN,qBAAqB,SAAS,UAAU,EACxC;gBACE,KAAK;gBACL,WAAW,EAAE,aAAa;gBAC1B,WAAW,EAAE,IAAI;aAClB,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;gBACX,4BAA4B,MAAM,CAAC,OAAO,0CAA0C,CACvF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,6DAA6D,CAAC,CACtE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;gBACZ,iDAAiD;gBACjD,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACrD,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,8EAA8E,CAC/E,CACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,6 @@
+type LoginOpts = {
+    apiUrl?: string;
+};
+export declare function loginCommand(opts: LoginOpts): Promise<void>;
+export {};
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAcA,KAAK,SAAS,GAAG;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAuCjE"}

package/dist/commands/login.js

@@ -0,0 +1,35 @@
+import pc from "picocolors";
+import { listEnvFiles, promptConfirm, promptHidden, } from "../lib/fs.js";
+import { credentialsFilePath, readCredentials, writeCredentials, } from "../lib/credentials.js";
+import { resolveApiUrl } from "../lib/api.js";
+import { runMigrateFromLogin } from "./migrate.js";
+export async function loginCommand(opts) {
+    console.log(pc.bold("\ngetmyenv login\n"));
+    console.log(pc.dim("Create a token in the dashboard CLI page, then paste it here (hidden)."));
+    console.log("");
+    const token = (await promptHidden("Paste CLI token: ")).trim();
+    if (!token) {
+        throw new Error("No token entered.");
+    }
+    const apiUrl = opts.apiUrl?.trim() ||
+        process.env.GETMYENV_API_URL?.trim() ||
+        readCredentials()?.apiUrl;
+    const file = writeCredentials({
+        token,
+        apiUrl: apiUrl || undefined,
+    });
+    const effectiveApi = resolveApiUrl(opts.apiUrl);
+    console.log(`\n${pc.green("✓")} Saved to ${file}`);
+    console.log(pc.dim(`API: ${effectiveApi}`));
+    console.log(pc.dim(`File: ${credentialsFilePath()}\n`));
+    const candidates = listEnvFiles();
+    if (process.stdin.isTTY && candidates.length > 0) {
+        const run = await promptConfirm("Run migrate now?", { defaultYes: true });
+        if (run) {
+            await runMigrateFromLogin(opts.apiUrl);
+            return;
+        }
+    }
+    console.log("Next: npx getmyenv migrate   or   npx getmyenv run -- <cmd>\n");
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAMnD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAe;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,wEAAwE,CACzE,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,KAAK,GAAG,CAAC,MAAM,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;QACnB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE;QACpC,eAAe,EAAE,EAAE,MAAM,CAAC;IAE5B,MAAM,IAAI,GAAG,gBAAgB,CAAC;QAC5B,KAAK;QACL,MAAM,EAAE,MAAM,IAAI,SAAS;KAC5B,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,YAAY,EAAE,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;AAC/E,CAAC"}

package/dist/commands/logout.d.ts

@@ -0,0 +1,2 @@
+export declare function logoutCommand(): Promise<void>;
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAGA,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAQnD"}

package/dist/commands/logout.js

@@ -0,0 +1,13 @@
+import pc from "picocolors";
+import { clearCredentials, credentialsFilePath } from "../lib/credentials.js";
+export async function logoutCommand() {
+    console.log(pc.bold("\ngetmyenv logout\n"));
+    const path = credentialsFilePath();
+    if (clearCredentials()) {
+        console.log(`${pc.green("✓")} Cleared credentials at ${path}\n`);
+    }
+    else {
+        console.log(pc.dim(`No credentials file at ${path}\n`));
+    }
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/commands/migrate.d.ts

@@ -0,0 +1,13 @@
+type MigrateOpts = {
+    env: string;
+    apiUrl: string;
+    file?: string;
+    vaultPasswordStdin?: boolean;
+    /** When true, caller already defaulted env to development (allow basename infer). */
+    envWasDefault?: boolean;
+};
+export declare function migrateCommand(opts: MigrateOpts): Promise<void>;
+/** Shared entry for login → migrate offer. */
+export declare function runMigrateFromLogin(apiUrl?: string): Promise<void>;
+export {};
+//# sourceMappingURL=migrate.d.ts.map

package/dist/commands/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/commands/migrate.ts"],"names":[],"mappings":"AAyBA,KAAK,WAAW,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qFAAqF;IACrF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAqCF,wBAAsB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAmHrE;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxE"}