hereya-cli 0.9.1 → 0.10.0

package/README.md

@@ -20,7 +20,7 @@ $ npm install -g hereya-cli
 $ hereya COMMAND
 running command...
 $ hereya (--version)
-hereya-cli/0.9.1 linux-x64 node-v20.15.0
+hereya-cli/0.10.0 linux-x64 node-v20.15.0
 $ hereya --help [COMMAND]
 USAGE
   $ hereya COMMAND
@@ -45,6 +45,8 @@ USAGE
 * [`hereya workspace create NAME`](#hereya-workspace-create-name)
 * [`hereya workspace delete NAME`](#hereya-workspace-delete-name)
 * [`hereya workspace env [NAME]`](#hereya-workspace-env-name)
+* [`hereya workspace env set`](#hereya-workspace-env-set)
+* [`hereya workspace env unset`](#hereya-workspace-env-unset)
 * [`hereya workspace install PACKAGE`](#hereya-workspace-install-package)
 * [`hereya workspace uninstall PACKAGE`](#hereya-workspace-uninstall-package)
 
@@ -71,7 +73,7 @@ EXAMPLES
   $ hereya add cloudy/docker_postgres
 ```
 
-_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/add/index.ts)_
+_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/add/index.ts)_
 
 ## `hereya bootstrap INFRASTRUCTURETYPE`
 
@@ -96,7 +98,7 @@ EXAMPLES
   $ hereya bootstrap local
 ```
 
-_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/bootstrap/index.ts)_
+_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/bootstrap/index.ts)_
 
 ## `hereya deploy`
 
@@ -117,7 +119,7 @@ EXAMPLES
   $ hereya deploy
 ```
 
-_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/deploy/index.ts)_
+_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/deploy/index.ts)_
 
 ## `hereya down`
 
@@ -139,7 +141,7 @@ EXAMPLES
   $ hereya down
 ```
 
-_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/down/index.ts)_
+_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/down/index.ts)_
 
 ## `hereya env [NAME]`
 
@@ -170,7 +172,7 @@ EXAMPLES
   $ hereya env -w dev -l
 ```
 
-_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/env/index.ts)_
+_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/env/index.ts)_
 
 ## `hereya help [COMMAND]`
 
@@ -216,7 +218,7 @@ EXAMPLES
   $ hereya init myProject -w=defaultWorkspace --chdir=./myProject
 ```
 
-_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/init/index.ts)_
+_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/init/index.ts)_
 
 ## `hereya remote exec [PKGPATH]`
 
@@ -240,7 +242,7 @@ EXAMPLES
   $ hereya remote exec
 ```
 
-_See code: [src/commands/remote/exec/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/remote/exec/index.ts)_
+_See code: [src/commands/remote/exec/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/remote/exec/index.ts)_
 
 ## `hereya remove PACKAGE`
 
@@ -263,7 +265,7 @@ EXAMPLES
   $ hereya remove cloudy/docker_postgres
 ```
 
-_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/remove/index.ts)_
+_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/remove/index.ts)_
 
 ## `hereya run CMD`
 
@@ -289,7 +291,7 @@ EXAMPLES
   $ hereya run -w uat -- node index.js
 ```
 
-_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/run/index.ts)_
+_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/run/index.ts)_
 
 ## `hereya unbootstrap INFRASTRUCTURETYPE`
 
@@ -314,7 +316,7 @@ EXAMPLES
   $ hereya unbootstrap local
 ```
 
-_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/unbootstrap/index.ts)_
+_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/unbootstrap/index.ts)_
 
 ## `hereya undeploy`
 
@@ -335,7 +337,7 @@ EXAMPLES
   $ hereya undeploy
 ```
 
-_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/undeploy/index.ts)_
+_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/undeploy/index.ts)_
 
 ## `hereya up`
 
@@ -357,7 +359,7 @@ EXAMPLES
   $ hereya up
 ```
 
-_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/up/index.ts)_
+_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/up/index.ts)_
 
 ## `hereya workspace create NAME`
 
@@ -377,7 +379,7 @@ EXAMPLES
   $ hereya workspace create dev
 ```
 
-_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/workspace/create/index.ts)_
+_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/create/index.ts)_
 
 ## `hereya workspace delete NAME`
 
@@ -397,7 +399,7 @@ EXAMPLES
   $ hereya workspace delete dev
 ```
 
-_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/workspace/delete/index.ts)_
+_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/delete/index.ts)_
 
 ## `hereya workspace env [NAME]`
 
@@ -423,7 +425,52 @@ EXAMPLES
   $ hereya workspace env myEnv -w dev
 ```
 
-_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/workspace/env/index.ts)_
+_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/env/index.ts)_
+
+## `hereya workspace env set`
+
+set an env var for a workspace
+
+```
+USAGE
+  $ hereya workspace env set -i <value> -n <value> -v <value> -w <value> [-s]
+
+FLAGS
+  -i, --infra=<value>      (required) the infrastructure to store the env var in
+  -n, --name=<value>       (required) name of the env var to set
+  -s, --sensitive          whether the env var is sensitive
+  -v, --value=<value>      (required) value of the env var to set
+  -w, --workspace=<value>  (required) name of the workspace to set an env var for
+
+DESCRIPTION
+  set an env var for a workspace
+
+EXAMPLES
+  $ hereya workspace env set -w my-workspace -n myVar -v my-value -i aws -s
+```
+
+_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/env/set/index.ts)_
+
+## `hereya workspace env unset`
+
+unset an env var for a workspace
+
+```
+USAGE
+  $ hereya workspace env unset -n <value> -w <value>
+
+FLAGS
+  -n, --name=<value>       (required) name of the env var to unset
+  -w, --workspace=<value>  (required) name of the workspace to unset an env var for
+
+DESCRIPTION
+  unset an env var for a workspace
+
+EXAMPLES
+  $ hereya workspace env unset -w my-workspace -n myVar
+```
+
+_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/env/unset/index.ts)_
 
 ## `hereya workspace install PACKAGE`
 
@@ -449,7 +496,7 @@ EXAMPLES
   $ hereya workspace install hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/workspace/install/index.ts)_
+_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/install/index.ts)_
 
 ## `hereya workspace uninstall PACKAGE`
 
@@ -475,5 +522,5 @@ EXAMPLES
   $ hereya workspace uninstall hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.9.1/src/commands/workspace/uninstall/index.ts)_
+_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/uninstall/index.ts)_
 <!-- commandsstop -->

package/dist/backend/common.d.ts

@@ -11,6 +11,8 @@ export interface Backend {
     init(options: InitProjectInput): Promise<InitProjectOutput>;
     removePackageFromWorkspace(input: RemovePackageFromWorkspaceInput): Promise<RemovePackageFromWorkspaceOutput>;
     saveState(config: Omit<Config, 'workspace'>): Promise<void>;
+    setEnvVar(input: SetEnvVarInput): Promise<SetEnvVarOutput>;
+    unsetEnvVar(input: UnsetEnvVarInput): Promise<UnsetEnvVarOutput>;
 }
 export type AddPackageToWorkspaceInput = {
     env: {
@@ -81,7 +83,9 @@ export type GetWorkspaceEnvOutput = {
     reason: string;
     success: false;
 };
-export type GetWorkspaceOutput = ({
+export type GetWorkspaceOutput = {
+    found: false;
+} | ({
     found: true;
     hasError: false;
     workspace: {
@@ -103,9 +107,7 @@ export type GetWorkspaceOutput = ({
     error: string;
     found: true;
     hasError: true;
-}) | {
-    found: false;
-};
+});
 export type GetStateInput = {
     project: string;
 };
@@ -137,3 +139,21 @@ export type GetProvisioningIdOutput = {
     reason: string;
     success: false;
 };
+export type SetEnvVarInput = {
+    infra: InfrastructureType;
+    name: string;
+    sensitive?: boolean;
+    value: string;
+    workspace: string;
+};
+export type SetEnvVarOutput = {
+    reason: string;
+    success: false;
+} | {
+    success: true;
+};
+export type UnsetEnvVarInput = {
+    name: string;
+    workspace: string;
+};
+export type UnsetEnvVarOutput = SetEnvVarOutput;

package/dist/backend/local.d.ts

@@ -1,5 +1,5 @@
 import { Config } from '../lib/config/common.js';
-import { AddPackageToWorkspaceInput, AddPackageToWorkspaceOutput, Backend, CreateWorkspaceInput, CreateWorkspaceOutput, DeleteWorkspaceInput, DeleteWorkspaceOutput, GetProvisioningIdInput, GetProvisioningIdOutput, GetStateInput, GetStateOutput, GetWorkspaceEnvInput, GetWorkspaceEnvOutput, GetWorkspaceOutput, InitProjectInput, InitProjectOutput, RemovePackageFromWorkspaceInput, RemovePackageFromWorkspaceOutput } from './common.js';
+import { AddPackageToWorkspaceInput, AddPackageToWorkspaceOutput, Backend, CreateWorkspaceInput, CreateWorkspaceOutput, DeleteWorkspaceInput, DeleteWorkspaceOutput, GetProvisioningIdInput, GetProvisioningIdOutput, GetStateInput, GetStateOutput, GetWorkspaceEnvInput, GetWorkspaceEnvOutput, GetWorkspaceOutput, InitProjectInput, InitProjectOutput, RemovePackageFromWorkspaceInput, RemovePackageFromWorkspaceOutput, SetEnvVarInput, SetEnvVarOutput, UnsetEnvVarInput, UnsetEnvVarOutput } from './common.js';
 export declare class LocalBackend implements Backend {
     addPackageToWorkspace(input: AddPackageToWorkspaceInput): Promise<AddPackageToWorkspaceOutput>;
     createWorkspace(input: CreateWorkspaceInput): Promise<CreateWorkspaceOutput>;
@@ -11,6 +11,8 @@ export declare class LocalBackend implements Backend {
     init(options: InitProjectInput): Promise<InitProjectOutput>;
     removePackageFromWorkspace(input: RemovePackageFromWorkspaceInput): Promise<RemovePackageFromWorkspaceOutput>;
     saveState(config: Omit<Config, 'workspace'>): Promise<void>;
+    setEnvVar(input: SetEnvVarInput): Promise<SetEnvVarOutput>;
+    unsetEnvVar(input: UnsetEnvVarInput): Promise<UnsetEnvVarOutput>;
     private getProjectStatePath;
     private getWorkspacePath;
     private saveWorkspace;

package/dist/backend/local.js

@@ -2,6 +2,7 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { z } from 'zod';
+import { getInfrastructure } from '../infrastructure/index.js';
 import { resolveEnvValues } from '../lib/env-utils.js';
 import { getAnyPath } from '../lib/filesystem.js';
 import { load, save } from '../lib/yaml-utils.js';
@@ -9,10 +10,12 @@ const WorkspaceSchema = z.object({
     env: z.record(z.string()).optional(),
     id: z.string().min(2),
     name: z.string().min(2),
-    packages: z.record(z.object({
+    packages: z
+        .record(z.object({
         parameters: z.record(z.any()).optional(),
         version: z.string(),
-    })).optional(),
+    }))
+        .optional(),
 });
 export class LocalBackend {
     async addPackageToWorkspace(input) {
@@ -37,8 +40,7 @@ export class LocalBackend {
                 version: '',
             },
         };
-        const newEnv = Object.fromEntries(Object.entries(input.env)
-            .map(([key, value]) => [key, `${input.infra}:${value}`]));
+        const newEnv = Object.fromEntries(Object.entries(input.env).map(([key, value]) => [key, `${input.infra}:${value}`]));
         workspace.env = {
             ...workspace.env,
             ...newEnv,
@@ -60,14 +62,16 @@ export class LocalBackend {
     async createWorkspace(input) {
         const workspace$ = await this.getWorkspace(input.name);
         if (workspace$.found) {
-            return workspace$.hasError ? {
-                reason: workspace$.error,
-                success: false,
-            } : {
-                isNew: false,
-                success: true,
-                workspace: workspace$.workspace,
-            };
+            return workspace$.hasError
+                ? {
+                    reason: workspace$.error,
+                    success: false,
+                }
+                : {
+                    isNew: false,
+                    success: true,
+                    workspace: workspace$.workspace,
+                };
         }
         const workspace = {
             id: input.name,
@@ -116,8 +120,11 @@ export class LocalBackend {
         };
     }
     async getProvisioningId(input) {
-        const id = ((input.project || input.workspace) ? [input.project, input.workspace, input.packageCanonicalName] : [input.packageCanonicalName])
-            .filter(Boolean).join('')
+        const id = (input.project || input.workspace
+            ? [input.project, input.workspace, input.packageCanonicalName]
+            : [input.packageCanonicalName])
+            .filter(Boolean)
+            .join('')
             .replaceAll(/[^\dA-Za-z]/g, '');
         return {
             id,
@@ -205,10 +212,8 @@ export class LocalBackend {
             };
         }
         const { workspace } = workspace$;
-        workspace.packages = Object.fromEntries(Object.entries(workspace.packages ?? {})
-            .filter(([key]) => key !== input.package));
-        workspace.env = Object.fromEntries(Object.entries(workspace.env ?? {})
-            .filter(([key]) => !(key in input.env)));
+        workspace.packages = Object.fromEntries(Object.entries(workspace.packages ?? {}).filter(([key]) => key !== input.package));
+        workspace.env = Object.fromEntries(Object.entries(workspace.env ?? {}).filter(([key]) => !(key in input.env)));
         try {
             await this.saveWorkspace(workspace, input.workspace);
             return {
@@ -227,6 +232,95 @@ export class LocalBackend {
         const projectStatePath = await this.getProjectStatePath(config.project);
         await save(config, projectStatePath);
     }
+    async setEnvVar(input) {
+        const workspace$ = await this.getWorkspace(input.workspace);
+        if (!workspace$.found) {
+            return {
+                reason: `Workspace ${input.workspace} not found`,
+                success: false,
+            };
+        }
+        if (workspace$.hasError) {
+            return {
+                reason: workspace$.error,
+                success: false,
+            };
+        }
+        const { workspace } = workspace$;
+        const infrastructure$ = getInfrastructure({ type: input.infra });
+        if (!infrastructure$.supported) {
+            return {
+                reason: `Infrastructure ${input.infra} not found`,
+                success: false,
+            };
+        }
+        const { infrastructure } = infrastructure$;
+        const setEnvVarOutput = await infrastructure.storeEnv({
+            name: input.name,
+            oldValue: workspace.env?.[input.name]?.split(':').slice(1).join(':'),
+            sensitive: input.sensitive,
+            value: input.value,
+        });
+        if (!setEnvVarOutput.success) {
+            return {
+                reason: setEnvVarOutput.reason,
+                success: false,
+            };
+        }
+        workspace.env = {
+            ...workspace.env,
+            [input.name]: `${input.infra}:${setEnvVarOutput.value}`,
+        };
+        await this.saveWorkspace(workspace, input.workspace);
+        return {
+            success: true,
+        };
+    }
+    async unsetEnvVar(input) {
+        const workspace$ = await this.getWorkspace(input.workspace);
+        if (!workspace$.found) {
+            return {
+                reason: `Workspace ${input.workspace} not found`,
+                success: false,
+            };
+        }
+        if (workspace$.hasError) {
+            return {
+                reason: workspace$.error,
+                success: false,
+            };
+        }
+        const { workspace } = workspace$;
+        const value = workspace.env?.[input.name];
+        if (!value) {
+            return {
+                success: true,
+            };
+        }
+        const infra = value.split(':')[0];
+        const infrastructure$ = getInfrastructure({ type: infra });
+        if (!infrastructure$.supported) {
+            return {
+                reason: `Infrastructure ${infra} not found`,
+                success: false,
+            };
+        }
+        const { infrastructure } = infrastructure$;
+        const unsetEnvVarOutput = await infrastructure.unstoreEnv({
+            value: value.split(':').slice(1).join(':'),
+        });
+        if (!unsetEnvVarOutput.success) {
+            return {
+                reason: unsetEnvVarOutput.reason,
+                success: false,
+            };
+        }
+        workspace.env = Object.fromEntries(Object.entries(workspace.env ?? {}).filter(([key]) => key !== input.name));
+        await this.saveWorkspace(workspace, input.workspace);
+        return {
+            success: true,
+        };
+    }
     async getProjectStatePath(project) {
         return getAnyPath(path.join(os.homedir(), '.hereya', 'state', 'projects', `${project}.yaml`), path.join(os.homedir(), '.hereya', 'state', 'projects', `${project}.yml`));
     }

package/dist/commands/remote/exec/index.js

@@ -2,7 +2,7 @@ import { Args, Command, Flags } from '@oclif/core';
 import path from 'node:path';
 import { getIac } from '../../../iac/index.js';
 import { getInfrastructure } from '../../../infrastructure/index.js';
-import { base64ToJSONString, tryBase64ToJSONString } from '../../../lib/object-utils.js';
+import { tryBase64ToJSONString } from '../../../lib/object-utils.js';
 import { save } from '../../../lib/yaml-utils.js';
 export default class RemoteExec extends Command {
     static args = {
@@ -12,9 +12,7 @@ export default class RemoteExec extends Command {
         }),
     };
     static description = 'remotely provision or destroy a package';
-    static examples = [
-        '<%= config.bin %> <%= command.id %>',
-    ];
+    static examples = ['<%= config.bin %> <%= command.id %>'];
     static flags = {
         output: Flags.string({
             char: 'o',
@@ -30,14 +28,13 @@ export default class RemoteExec extends Command {
     async run() {
         const { args, flags } = await this.parse(RemoteExec);
         const workspaceEnv = Object.fromEntries((process.env.HEREYA_WORKSPACE_ENV?.split(',') ?? [])
-            .filter(param => param.trim())
-            .map(param => param.split('='))
+            .filter((param) => param.trim())
+            .map((param) => param.split('='))
             .map(([key, value]) => [key, tryBase64ToJSONString(value)]));
         const parameters = Object.fromEntries((process.env.HEREYA_PARAMETERS?.split(',') ?? [])
-            .filter(param => param.trim())
-            .map(param => param.split('='))
+            .filter((param) => param.trim())
+            .map((param) => param.split('='))
             .map(([key, value]) => [key, tryBase64ToJSONString(value)]));
-        parameters.hereyaProjectEnv = parameters.hereyaProjectEnv ? base64ToJSONString(parameters.hereyaProjectEnv) : '';
         const id = process.env.HEREYA_ID;
         const iacType = process.env.HEREYA_IAC_TYPE;
         const destroy = process.env.HEREYA_DESTROY === 'true';
@@ -56,7 +53,10 @@ export default class RemoteExec extends Command {
             `);
         }
         const input = {
-            env: workspaceEnv, id, parameters, pkgPath: args.pkgPath || process.cwd(),
+            env: workspaceEnv,
+            id,
+            parameters,
+            pkgPath: args.pkgPath || process.cwd(),
         };
         if (deploy) {
             input.parameters = {

package/dist/commands/workspace/env/set/index.d.ts

@@ -0,0 +1,13 @@
+import { Command } from '@oclif/core';
+export default class WorkspaceEnvSet extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        infra: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        name: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        sensitive: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+        value: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/workspace/env/set/index.js

@@ -0,0 +1,39 @@
+import { Command, Flags } from '@oclif/core';
+import { getBackend } from '../../../../backend/index.js';
+export default class WorkspaceEnvSet extends Command {
+    static description = 'set an env var for a workspace';
+    static examples = ['<%= config.bin %> <%= command.id %> -w my-workspace -n myVar -v my-value -i aws -s'];
+    static flags = {
+        infra: Flags.string({ char: 'i', description: 'the infrastructure to store the env var in', required: true }),
+        name: Flags.string({ char: 'n', description: 'name of the env var to set', required: true }),
+        sensitive: Flags.boolean({ char: 's', description: 'whether the env var is sensitive' }),
+        value: Flags.string({ char: 'v', description: 'value of the env var to set', required: true }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'name of the workspace to set an env var for',
+            required: true,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(WorkspaceEnvSet);
+        const backend = await getBackend();
+        const getWorkspaceOutput = await backend.getWorkspace(flags.workspace);
+        if (!getWorkspaceOutput.found) {
+            this.error(`Workspace ${flags.workspace} not found`);
+        }
+        if (getWorkspaceOutput.hasError) {
+            this.error(getWorkspaceOutput.error);
+        }
+        const setEnvVarOutput = await backend.setEnvVar({
+            infra: flags.infra,
+            name: flags.name,
+            sensitive: flags.sensitive,
+            value: flags.value,
+            workspace: flags.workspace,
+        });
+        if (!setEnvVarOutput.success) {
+            this.error(setEnvVarOutput.reason);
+        }
+        this.log(`Env var ${flags.name} set for workspace ${flags.workspace}`);
+    }
+}

package/dist/commands/workspace/env/unset/index.d.ts

@@ -0,0 +1,10 @@
+import { Command } from '@oclif/core';
+export default class WorkspaceEnvUnset extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        name: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/workspace/env/unset/index.js

@@ -0,0 +1,33 @@
+import { Command, Flags } from '@oclif/core';
+import { getBackend } from '../../../../backend/index.js';
+export default class WorkspaceEnvUnset extends Command {
+    static description = 'unset an env var for a workspace';
+    static examples = ['<%= config.bin %> <%= command.id %> -w my-workspace -n myVar'];
+    static flags = {
+        name: Flags.string({ char: 'n', description: 'name of the env var to unset', required: true }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'name of the workspace to unset an env var for',
+            required: true,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(WorkspaceEnvUnset);
+        const backend = await getBackend();
+        const getWorkspaceOutput = await backend.getWorkspace(flags.workspace);
+        if (!getWorkspaceOutput.found) {
+            this.error(`Workspace ${flags.workspace} not found`);
+        }
+        if (getWorkspaceOutput.hasError) {
+            this.error(getWorkspaceOutput.error);
+        }
+        const unsetEnvVarOutput = await backend.unsetEnvVar({
+            name: flags.name,
+            workspace: flags.workspace,
+        });
+        if (!unsetEnvVarOutput.success) {
+            this.error(unsetEnvVarOutput.reason);
+        }
+        this.log(`Unset env var ${flags.name} for workspace ${flags.workspace}`);
+    }
+}

package/dist/infrastructure/aws.d.ts

@@ -1,4 +1,4 @@
-import { BootstrapInput, DeployInput, DeployOutput, DestroyInput, DestroyOutput, Infrastructure, ProvisionInput, ProvisionOutput, ResolveEnvInput, ResolveEnvOutput, SaveEnvInput, SaveEnvOutput, UndeployInput, UndeployOutput } from './common.js';
+import { BootstrapInput, DeployInput, DeployOutput, DestroyInput, DestroyOutput, Infrastructure, ProvisionInput, ProvisionOutput, ResolveEnvInput, ResolveEnvOutput, SaveEnvInput, SaveEnvOutput, StoreEnvInput, StoreEnvOutput, UndeployInput, UndeployOutput, UnstoreEnvInput, UnstoreEnvOutput } from './common.js';
 export declare class AwsInfrastructure implements Infrastructure {
     bootstrap(_: BootstrapInput): Promise<void>;
     deploy(input: DeployInput): Promise<DeployOutput>;
@@ -6,8 +6,10 @@ export declare class AwsInfrastructure implements Infrastructure {
     provision(input: ProvisionInput): Promise<ProvisionOutput>;
     resolveEnv(input: ResolveEnvInput): Promise<ResolveEnvOutput>;
     saveEnv(input: SaveEnvInput): Promise<SaveEnvOutput>;
+    storeEnv(input: StoreEnvInput): Promise<StoreEnvOutput>;
     unbootstrap(_: BootstrapInput): Promise<void>;
     undeploy(input: UndeployInput): Promise<UndeployOutput>;
+    unstoreEnv(input: UnstoreEnvInput): Promise<UnstoreEnvOutput>;
     private getEnv;
     private getFilesToUpload;
     private removeEnv;

package/dist/infrastructure/aws.js

@@ -12,7 +12,7 @@ import { IacType } from '../iac/common.js';
 import { fileExists, getAnyPath } from '../lib/filesystem.js';
 import { objectToBase64 } from '../lib/object-utils.js';
 import { runShell } from '../lib/shell.js';
-import { InfrastructureType } from './common.js';
+import { InfrastructureType, } from './common.js';
 import { destroyPackage, provisionPackage } from './index.js';
 export class AwsInfrastructure {
     async bootstrap(_) {
@@ -33,7 +33,7 @@ export class AwsInfrastructure {
             Name: key,
             Overwrite: true,
             Type: 'String',
-            Value: value
+            Value: value,
         }));
     }
     async deploy(input) {
@@ -42,6 +42,7 @@ export class AwsInfrastructure {
         let s3Client = new S3Client({});
         let s3Key = '';
         try {
+            ;
             ({ files, s3Bucket, s3Client, s3Key } = await this.uploadProjectFiles(input));
             input.parameters = {
                 ...input.parameters,
@@ -50,7 +51,7 @@ export class AwsInfrastructure {
             const output = await this.runCodeBuild({
                 ...input,
                 deploy: true,
-                sourceS3Key: s3Key
+                sourceS3Key: s3Key,
             });
             if (!output.success) {
                 return output;
@@ -63,8 +64,8 @@ export class AwsInfrastructure {
                 await s3Client.send(new DeleteObjectsCommand({
                     Bucket: s3Bucket,
                     Delete: {
-                        Objects: files.map(file => ({ Key: `${s3Key}/${file}` }))
-                    }
+                        Objects: files.map((file) => ({ Key: `${s3Key}/${file}` })),
+                    },
                 }));
             }
         }
@@ -97,7 +98,7 @@ export class AwsInfrastructure {
                 }));
                 return {
                     isSecret: response.Parameter?.Type === 'SecureString',
-                    value: response.Parameter?.Value ?? input.value
+                    value: response.Parameter?.Value ?? input.value,
                 };
             }
             const secretManagerArnPattern = /^arn:aws:secretsmanager:[\da-z-]+:\d{12}:secret:[\w-]+/;
@@ -108,7 +109,7 @@ export class AwsInfrastructure {
                 }));
                 return {
                     isSecret: true,
-                    value: response.SecretString ?? input.value
+                    value: response.SecretString ?? input.value,
                 };
             }
             return { value: input.value };
@@ -127,7 +128,7 @@ export class AwsInfrastructure {
                 Name: key,
                 Overwrite: true,
                 Type: 'String',
-                Value: value
+                Value: value,
             }));
             return { success: true };
         }
@@ -135,6 +136,27 @@ export class AwsInfrastructure {
             return { reason: error.message, success: false };
         }
     }
+    async storeEnv(input) {
+        if (!input.sensitive) {
+            return { success: true, value: input.value };
+        }
+        const ssmClient = new SSMClient({});
+        const id = randomUUID();
+        const ssmParameterName = input.oldValue ?? `/hereya/${input.name}/${id}`;
+        await ssmClient.send(new PutParameterCommand({
+            Name: ssmParameterName,
+            Overwrite: true,
+            Type: 'SecureString',
+            Value: input.value,
+        }));
+        const parameter = await ssmClient.send(new GetParameterCommand({
+            Name: ssmParameterName,
+        }));
+        if (!parameter.Parameter?.ARN) {
+            throw new Error(`Could not store env var ${input.name} for AWS infrastructure`);
+        }
+        return { success: true, value: parameter.Parameter.ARN };
+    }
     async unbootstrap(_) {
         const ssmClient = new SSMClient({});
         const key = '/hereya-bootstrap/config';
@@ -165,6 +187,7 @@ export class AwsInfrastructure {
             console.log(`Could not get env for ${input.id}: ${error.message}. Continuing with undeployment...`);
         }
         try {
+            ;
             ({ files, s3Bucket, s3Client, s3Key } = await this.uploadProjectFiles(input));
             input.parameters = {
                 ...input.parameters,
@@ -174,7 +197,7 @@ export class AwsInfrastructure {
                 ...input,
                 deploy: true,
                 destroy: true,
-                sourceS3Key: s3Key
+                sourceS3Key: s3Key,
             });
             if (!output.success) {
                 return output;
@@ -186,12 +209,30 @@ export class AwsInfrastructure {
                 await s3Client.send(new DeleteObjectsCommand({
                     Bucket: s3Bucket,
                     Delete: {
-                        Objects: files.map(file => ({ Key: `${s3Key}/${file}` }))
-                    }
+                        Objects: files.map((file) => ({ Key: `${s3Key}/${file}` })),
+                    },
                 }));
             }
         }
     }
+    async unstoreEnv(input) {
+        const parameterStoreArnPattern = /^arn:aws:ssm:[\da-z-]+:\d{12}:parameter\/[\w./-]+$/;
+        if (!parameterStoreArnPattern.test(input.value)) {
+            return { success: true };
+        }
+        const ssmClient = new SSMClient({});
+        const parameter = await ssmClient.send(new GetParameterCommand({
+            Name: input.value,
+        }));
+        const ssmParameterName = parameter.Parameter?.Name;
+        if (!ssmParameterName) {
+            return { success: true };
+        }
+        await ssmClient.send(new DeleteParameterCommand({
+            Name: ssmParameterName,
+        }));
+        return { success: true };
+    }
     async getEnv(id) {
         const ssmClient = new SSMClient({});
         const ssmParameterName = `/hereya/${id}`;
@@ -202,7 +243,7 @@ export class AwsInfrastructure {
             return JSON.parse(ssmParameter.Parameter?.Value ?? '{}');
         }
         catch (error) {
-            if (error.name === "ParameterNotFound") {
+            if (error.name === 'ParameterNotFound') {
                 console.debug(`Parameter "${ssmParameterName}" does not exist.`);
                 return {};
             }
@@ -217,7 +258,7 @@ export class AwsInfrastructure {
             ig.add(ignoreFileContent);
         }
         const files = glob.sync('**/*', { cwd: rootDir, nodir: true });
-        return files.filter(file => !ig.ignores(file));
+        return files.filter((file) => !ig.ignores(file));
     }
     async removeEnv(id) {
         const ssmClient = new SSMClient({});
@@ -244,7 +285,9 @@ export class AwsInfrastructure {
         }
         const ssmClient = new SSMClient({});
         const parameterName = `/hereya/package-parameters/${input.id}`;
-        const parameterValue = Object.entries(input.parameters ?? {}).map(([key, value]) => `${key}=${typeof value === "object" ? objectToBase64(value) : value}`).join(',');
+        const parameterValue = Object.entries(input.parameters ?? {})
+            .map(([key, value]) => `${key}=${typeof value === 'object' ? objectToBase64(value) : value}`)
+            .join(',');
         if (parameterValue) {
             await ssmClient.send(new PutParameterCommand({
                 Name: parameterName,
@@ -278,7 +321,9 @@ export class AwsInfrastructure {
                 {
                     name: 'HEREYA_WORKSPACE_ENV',
                     type: 'PLAINTEXT',
-                    value: Object.entries(input.env ?? {}).map(([key, value]) => `${key}=${typeof value === "object" ? objectToBase64(value) : value}`).join(','),
+                    value: Object.entries(input.env ?? {})
+                        .map(([key, value]) => `${key}=${typeof value === 'object' ? objectToBase64(value) : value}`)
+                        .join(','),
                 },
                 {
                     name: 'PKG_REPO_URL',
@@ -299,7 +344,7 @@ export class AwsInfrastructure {
                     name: 'HEREYA_PROJECT_S3_KEY',
                     type: 'PLAINTEXT',
                     value: input.deploy ? input.sourceS3Key : '',
-                }
+                },
             ],
             projectName: codebuildProjectName,
         }));

package/dist/infrastructure/common.d.ts

@@ -12,8 +12,10 @@ export interface Infrastructure {
     provision(input: ProvisionInput): Promise<ProvisionOutput>;
     resolveEnv(input: ResolveEnvInput): Promise<ResolveEnvOutput>;
     saveEnv(input: SaveEnvInput): Promise<SaveEnvOutput>;
+    storeEnv(input: StoreEnvInput): Promise<StoreEnvOutput>;
     unbootstrap(input: BootstrapInput): Promise<void>;
     undeploy(input: UndeployInput): Promise<UndeployOutput>;
+    unstoreEnv(input: UnstoreEnvInput): Promise<UnstoreEnvOutput>;
 }
 export type BootstrapInput = {
     force?: boolean;
@@ -70,3 +72,25 @@ export type SaveEnvOutput = {
 } | {
     success: true;
 };
+export type StoreEnvInput = {
+    name: string;
+    oldValue?: string;
+    sensitive?: boolean;
+    value: string;
+};
+export type StoreEnvOutput = {
+    reason: string;
+    success: false;
+} | {
+    success: true;
+    value: string;
+};
+export type UnstoreEnvInput = {
+    value: string;
+};
+export type UnstoreEnvOutput = {
+    reason: string;
+    success: false;
+} | {
+    success: true;
+};

package/dist/infrastructure/local.d.ts

@@ -1,4 +1,4 @@
-import { DeployInput, DeployOutput, Infrastructure, ProvisionInput, ProvisionOutput, SaveEnvInput, SaveEnvOutput, UndeployInput, UndeployOutput } from './common.js';
+import { DeployInput, DeployOutput, Infrastructure, ProvisionInput, ProvisionOutput, SaveEnvInput, SaveEnvOutput, StoreEnvInput, StoreEnvOutput, UndeployInput, UndeployOutput, UnstoreEnvInput, UnstoreEnvOutput } from './common.js';
 export declare class LocalInfrastructure implements Infrastructure {
     bootstrap(): Promise<void>;
     deploy(input: DeployInput): Promise<DeployOutput>;
@@ -10,8 +10,10 @@ export declare class LocalInfrastructure implements Infrastructure {
         value: string;
     }>;
     saveEnv(input: SaveEnvInput): Promise<SaveEnvOutput>;
+    storeEnv(input: StoreEnvInput): Promise<StoreEnvOutput>;
     unbootstrap(): Promise<void>;
     undeploy(input: UndeployInput): Promise<UndeployOutput>;
+    unstoreEnv(_: UnstoreEnvInput): Promise<UnstoreEnvOutput>;
     private download;
     private isNotEmpty;
 }

package/dist/infrastructure/local.js

@@ -11,7 +11,7 @@ export class LocalInfrastructure {
         input.parameters = {
             ...input.parameters,
             hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
-            hereyaProjectRootDir: input.projectRootDir
+            hereyaProjectRootDir: input.projectRootDir,
         };
         return this.provision(input);
     }
@@ -28,7 +28,7 @@ export class LocalInfrastructure {
             env: input.env ?? {},
             id: input.id,
             parameters: input.parameters,
-            pkgPath: downloadPath
+            pkgPath: downloadPath,
         });
         if (!output.success) {
             return { reason: output.reason, success: false };
@@ -50,7 +50,7 @@ export class LocalInfrastructure {
             env: input.env ?? {},
             id: input.id,
             parameters: input.parameters,
-            pkgPath: downloadPath
+            pkgPath: downloadPath,
         });
         if (!output.success) {
             return { reason: output.reason, success: false };
@@ -64,6 +64,9 @@ export class LocalInfrastructure {
         console.log(`Saving env to ${input.id}`);
         return { success: true };
     }
+    async storeEnv(input) {
+        return { success: true, value: input.value };
+    }
     async unbootstrap() {
         console.log('Unbootstrapping local infrastructure');
     }
@@ -71,10 +74,13 @@ export class LocalInfrastructure {
         input.parameters = {
             ...input.parameters,
             hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
-            hereyaProjectRootDir: input.projectRootDir
+            hereyaProjectRootDir: input.projectRootDir,
         };
         return this.destroy(input);
     }
+    async unstoreEnv(_) {
+        return { success: true };
+    }
     async download(pkgUrl, destPath) {
         if (await this.isNotEmpty(destPath)) {
             console.log(`Package already downloaded at ${destPath}`);

package/oclif.manifest.json

@@ -48,45 +48,6 @@
         "index.js"
       ]
     },
-    "bootstrap": {
-      "aliases": [],
-      "args": {
-        "infrastructureType": {
-          "description": "infrastructure to bootstrap. Options are local, aws",
-          "name": "infrastructureType",
-          "required": true
-        }
-      },
-      "description": "Install necessary resources for hereya operations in an infrastructure.",
-      "examples": [
-        "<%= config.bin %> <%= command.id %> aws",
-        "<%= config.bin %> <%= command.id %> local"
-      ],
-      "flags": {
-        "force": {
-          "char": "f",
-          "description": "redeploy hereya resources if already deployed",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "bootstrap",
-      "pluginAlias": "hereya-cli",
-      "pluginName": "hereya-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "bootstrap",
-        "index.js"
-      ]
-    },
     "deploy": {
       "aliases": [],
       "args": {},
@@ -129,6 +90,45 @@
         "index.js"
       ]
     },
+    "bootstrap": {
+      "aliases": [],
+      "args": {
+        "infrastructureType": {
+          "description": "infrastructure to bootstrap. Options are local, aws",
+          "name": "infrastructureType",
+          "required": true
+        }
+      },
+      "description": "Install necessary resources for hereya operations in an infrastructure.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> aws",
+        "<%= config.bin %> <%= command.id %> local"
+      ],
+      "flags": {
+        "force": {
+          "char": "f",
+          "description": "redeploy hereya resources if already deployed",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "bootstrap",
+      "pluginAlias": "hereya-cli",
+      "pluginName": "hereya-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "bootstrap",
+        "index.js"
+      ]
+    },
     "down": {
       "aliases": [],
       "args": {},
@@ -781,7 +781,122 @@
         "uninstall",
         "index.js"
       ]
+    },
+    "workspace:env:set": {
+      "aliases": [],
+      "args": {},
+      "description": "set an env var for a workspace",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> -w my-workspace -n myVar -v my-value -i aws -s"
+      ],
+      "flags": {
+        "infra": {
+          "char": "i",
+          "description": "the infrastructure to store the env var in",
+          "name": "infra",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "name": {
+          "char": "n",
+          "description": "name of the env var to set",
+          "name": "name",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "sensitive": {
+          "char": "s",
+          "description": "whether the env var is sensitive",
+          "name": "sensitive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "value": {
+          "char": "v",
+          "description": "value of the env var to set",
+          "name": "value",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "char": "w",
+          "description": "name of the workspace to set an env var for",
+          "name": "workspace",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "workspace:env:set",
+      "pluginAlias": "hereya-cli",
+      "pluginName": "hereya-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "workspace",
+        "env",
+        "set",
+        "index.js"
+      ]
+    },
+    "workspace:env:unset": {
+      "aliases": [],
+      "args": {},
+      "description": "unset an env var for a workspace",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> -w my-workspace -n myVar"
+      ],
+      "flags": {
+        "name": {
+          "char": "n",
+          "description": "name of the env var to unset",
+          "name": "name",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "char": "w",
+          "description": "name of the workspace to unset an env var for",
+          "name": "workspace",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "workspace:env:unset",
+      "pluginAlias": "hereya-cli",
+      "pluginName": "hereya-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "workspace",
+        "env",
+        "unset",
+        "index.js"
+      ]
     }
   },
-  "version": "0.9.1"
+  "version": "0.10.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hereya-cli",
   "description": "Infrastructure as Package",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "author": "Hereya Developers",
   "bin": {
     "hereya": "./bin/run.js"