iec-cli 0.6.6

package/README.md

@@ -0,0 +1,159 @@
+# iec-cli
+
+Developer CLI for the InsurEco Tawa platform. Deploy, manage, and monitor services with a single tool.
+
+## Installation
+
+```bash
+npm install -g iec-cli
+```
+
+Or use without installing:
+
+```bash
+npx iec-cli deploy
+```
+
+## Quick Start
+
+```bash
+# Login to the platform
+iec login
+
+# Option 1: AI-powered setup (recommended)
+iec init --ai
+
+# Option 2: Use a starter template
+iec sample --nextjs
+cd my-service
+
+# Check everything is configured correctly
+iec preflight
+
+# Deploy to sandbox
+iec deploy
+```
+
+## Commands
+
+### Setup & Configuration
+
+| Command | Description |
+|---------|-------------|
+| `iec login` | Authenticate with the platform |
+| `iec logout` | Sign out |
+| `iec whoami` | Show current user |
+| `iec config` | View/set CLI configuration |
+| `iec init` | Scaffold new service |
+| `iec init --ai` | AI-powered interactive setup |
+| `iec sample --api` | Scaffold Express/Hono API starter |
+| `iec sample --nextjs` | Scaffold Next.js starter |
+| `iec sample --crosspod` | Scaffold two services with pod-to-pod auth demo |
+
+### Deployment
+
+| Command | Description |
+|---------|-------------|
+| `iec preflight` | Run pre-deployment checks |
+| `iec register` | Register service with Koko |
+| `iec link` | Connect repo to iec-builder |
+| `iec deploy` | Build and deploy (via GitHub) |
+| `iec push` | Push code directly to builder (no GitHub needed) |
+| `iec rollback <version>` | Redeploy a previous version |
+| `iec versions` | List deployable versions |
+| `iec destroy` | Delete deployment |
+
+### Monitoring
+
+| Command | Description |
+|---------|-------------|
+| `iec status` | Show service and build status |
+| `iec logs` | Stream container logs |
+| `iec logs --build <id>` | View build logs |
+| `iec builds` | List recent builds |
+
+### Data Management
+
+| Command | Description |
+|---------|-------------|
+| `iec env` | Manage environments |
+| `iec program` | View programs |
+| `iec backup` | Manage backups |
+| `iec restore` | Restore from backup |
+
+## Configuration
+
+### Global Config (`~/.iec/config.yaml`)
+
+```yaml
+koko_url: https://janus.tawa.insureco.io/koko
+builder_url: https://builder.tawa.insureco.io
+registry: registry.digitalocean.com/insureco
+```
+
+### Project Config (`catalog-info.yaml`)
+
+```yaml
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: my-service
+  description: My awesome service
+  annotations:
+    insureco.io/framework: nextjs
+    insureco.io/node-version: "20"
+spec:
+  type: service
+  lifecycle: production
+  owner: my-team
+  routes:
+    - path: /api/users
+      methods: [GET, POST]
+      auth: required
+```
+
+## Environment Flags
+
+```bash
+iec deploy              # Deploy to sandbox (default)
+iec deploy --prod       # Deploy to production
+iec deploy --uat        # Deploy to UAT
+iec deploy --watch      # Watch build progress
+```
+
+## Development
+
+```bash
+# Install dependencies
+npm install
+
+# Run in development
+npm run dev
+
+# Build
+npm run build
+
+# Run built CLI
+npm start
+```
+
+## Publishing
+
+To publish a new version:
+
+```bash
+npm version patch     # or minor, major
+npm publish           # publish to npm
+git push              # push version bump to remote
+```
+
+The `prepublishOnly` script runs `npm run build` automatically.
+
+## Requirements
+
+- Node.js 20+
+- npm or pnpm
+
+## License
+
+MIT

package/dist/commands/backup.d.ts

@@ -0,0 +1,11 @@
+interface BackupOptions {
+    type?: 'mongodb' | 'redis' | 'neo4j';
+    database?: string;
+}
+interface RestoreOptions {
+    confirm?: boolean;
+}
+export declare function backupCommand(options: BackupOptions): Promise<void>;
+export declare function restoreCommand(backupId: string, options: RestoreOptions): Promise<void>;
+export {};
+//# sourceMappingURL=backup.d.ts.map

package/dist/commands/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAKA,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAA;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,cAAc;IACtB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAkBD,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzE;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CAkCf"}

package/dist/commands/backup.js

@@ -0,0 +1,112 @@
+import { log, formatTable, spinner } from '../lib/output.js';
+const BACKUP_API_URL = 'http://jefferson.daryx.com:8090';
+export async function backupCommand(options) {
+    if (options.type) {
+        // Trigger manual backup
+        await triggerBackup(options.type, options.database);
+    }
+    else {
+        // Show backup status
+        await showBackupStatus();
+    }
+}
+export async function restoreCommand(backupId, options) {
+    if (!options.confirm) {
+        log.error('Restore requires --confirm flag');
+        log.dim('This is a destructive operation that will overwrite existing data');
+        process.exit(1);
+    }
+    const sp = spinner(`Restoring backup ${backupId}`);
+    try {
+        const response = await fetch(`${BACKUP_API_URL}/api/restore`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ backupId, confirm: true }),
+        });
+        const result = (await response.json());
+        if (!result.success) {
+            sp.stop(false);
+            log.error(`Restore failed: ${result.error?.message}`);
+            process.exit(1);
+        }
+        sp.stop(true);
+        log.success(`Restore started: job ${result.data?.jobId}`);
+        log.dim('Monitor progress with: iec backup --status');
+    }
+    catch (error) {
+        sp.stop(false);
+        if (error instanceof Error) {
+            log.error(`Failed to start restore: ${error.message}`);
+        }
+        process.exit(1);
+    }
+}
+async function showBackupStatus() {
+    log.info('Backup status');
+    log.info('');
+    try {
+        const response = await fetch(`${BACKUP_API_URL}/api/status`);
+        const result = (await response.json());
+        if (!result.success || !result.data) {
+            log.error(`Failed to get status: ${result.error?.message}`);
+            process.exit(1);
+        }
+        const { lastRun, nextScheduled, storage } = result.data;
+        log.info('Last backups:');
+        const lastRunRows = Object.entries(lastRun).map(([type, info]) => {
+            const typed = info;
+            return [
+                type,
+                typed.status,
+                new Date(typed.timestamp).toLocaleString(),
+                `${typed.durationSec}s`,
+            ];
+        });
+        console.log(formatTable(['TYPE', 'STATUS', 'TIMESTAMP', 'DURATION'], lastRunRows));
+        log.info('');
+        log.info('Next scheduled:');
+        for (const [type, timestamp] of Object.entries(nextScheduled)) {
+            log.dim(`  ${type}: ${new Date(timestamp).toLocaleString()}`);
+        }
+        log.info('');
+        log.info('Storage:');
+        log.dim(`  Provider: ${storage.provider}`);
+        log.dim(`  Bucket:   ${storage.bucket}`);
+        log.dim(`  Used:     ${(storage.usedBytes / 1024 / 1024 / 1024).toFixed(2)} GB`);
+        log.dim(`  Backups:  ${storage.backupCount}`);
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            log.error(`Failed to connect to backup service: ${error.message}`);
+            log.dim(`Backup service URL: ${BACKUP_API_URL}`);
+        }
+        process.exit(1);
+    }
+}
+async function triggerBackup(type, database) {
+    const sp = spinner(`Triggering ${type} backup`);
+    try {
+        const response = await fetch(`${BACKUP_API_URL}/api/backups`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ type, database }),
+        });
+        const result = (await response.json());
+        if (!result.success) {
+            sp.stop(false);
+            log.error(`Backup failed: ${result.error?.message}`);
+            process.exit(1);
+        }
+        sp.stop(true);
+        log.success(`Backup started: job ${result.data?.jobId}`);
+        log.dim('Monitor progress with: iec backup');
+    }
+    catch (error) {
+        sp.stop(false);
+        if (error instanceof Error) {
+            log.error(`Failed to trigger backup: ${error.message}`);
+        }
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=backup.js.map

package/dist/commands/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAG5D,MAAM,cAAc,GAAG,iCAAiC,CAAA;AA2BxD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB;IACxD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,wBAAwB;QACxB,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrD,CAAC;SAAM,CAAC;QACN,qBAAqB;QACrB,MAAM,gBAAgB,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,OAAuB;IAEvB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAC5C,GAAG,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAA;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAA;IAElD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,cAAc,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SAClD,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmC,CAAA;QAExE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACd,GAAG,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,GAAG,CAAC,OAAO,CAAC,wBAAwB,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACzD,GAAG,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAA;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACzB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEZ,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,aAAa,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkC,CAAA;QAEvE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QAEvD,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACzB,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAoB,EAAE,EAAE;YAClF,MAAM,KAAK,GAAG,IAAkE,CAAA;YAChF,OAAO;gBACL,IAAI;gBACJ,KAAK,CAAC,MAAM;gBACZ,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;gBAC1C,GAAG,KAAK,CAAC,WAAW,GAAG;aACxB,CAAA;QACH,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,CAAA;QAElF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACZ,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,IAAI,IAAI,CAAC,SAAmB,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QACzE,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACZ,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpB,GAAG,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC1C,GAAG,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACxC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAChF,GAAG,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,wCAAwC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAClE,GAAG,CAAC,GAAG,CAAC,uBAAuB,cAAc,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAmC,EACnC,QAAiB;IAEjB,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC,CAAA;IAE/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,cAAc,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SACzC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmC,CAAA;QAExE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACd,GAAG,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,GAAG,CAAC,OAAO,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/config.d.ts

@@ -0,0 +1,28 @@
+/**
+ * iec config set KEY=VALUE [KEY2=VALUE2 ...] [--secret]
+ */
+export declare function configSetCommand(pairs: string[], options: {
+    service?: string;
+    secret?: boolean;
+}): Promise<void>;
+/**
+ * iec config list
+ */
+export declare function configListCommand(options: {
+    service?: string;
+}): Promise<void>;
+/**
+ * iec config unset KEY [KEY2 ...]
+ */
+export declare function configUnsetCommand(keys: string[], options: {
+    service?: string;
+}): Promise<void>;
+/**
+ * iec config pull
+ * Downloads all config + decrypted secrets to .env.local
+ */
+export declare function configPullCommand(options: {
+    service?: string;
+    output?: string;
+}): Promise<void>;
+//# sourceMappingURL=config.d.ts.map

package/dist/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAgDA;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9C,OAAO,CAAC,IAAI,CAAC,CAmDf;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAgDf"}

package/dist/commands/config.js

@@ -0,0 +1,190 @@
+import { writeFile, readFile } from 'fs/promises';
+import { join, resolve, relative } from 'path';
+import { parse as parseYaml } from 'yaml';
+import { BuilderClient } from '../lib/builder.js';
+import { loadLinkedService } from '../lib/config.js';
+import { log } from '../lib/output.js';
+/**
+ * Resolve service name from --service flag, .iec.yaml, or catalog-info.yaml
+ */
+async function resolveServiceName(serviceFlag) {
+    if (serviceFlag) {
+        return serviceFlag;
+    }
+    const linked = await loadLinkedService();
+    if (linked?.serviceName) {
+        return linked.serviceName;
+    }
+    // Try catalog-info.yaml
+    try {
+        const content = await readFile(join(process.cwd(), 'catalog-info.yaml'), 'utf-8');
+        const catalog = parseYaml(content);
+        if (catalog?.metadata?.name) {
+            return catalog.metadata.name;
+        }
+    }
+    catch {
+        // catalog-info.yaml not found or invalid
+    }
+    log.error('Could not determine service name');
+    log.dim('Run from a project directory with .iec.yaml or catalog-info.yaml,');
+    log.dim('or use --service <name> to specify the service.');
+    process.exit(1);
+}
+/**
+ * Quote a value for .env file format if it contains special characters.
+ */
+function formatEnvValue(key, value) {
+    if (/[\s#"'\\]/.test(value) || value === '') {
+        const escaped = value.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+        return `${key}="${escaped}"`;
+    }
+    return `${key}=${value}`;
+}
+/**
+ * iec config set KEY=VALUE [KEY2=VALUE2 ...] [--secret]
+ */
+export async function configSetCommand(pairs, options) {
+    if (pairs.length === 0) {
+        log.error('No KEY=VALUE pairs provided');
+        log.dim('Usage: iec config set KEY=VALUE [KEY2=VALUE2 ...]');
+        process.exit(1);
+    }
+    // Parse KEY=VALUE pairs
+    const vars = {};
+    for (const pair of pairs) {
+        const eqIndex = pair.indexOf('=');
+        if (eqIndex === -1) {
+            log.error(`Invalid format: "${pair}" (expected KEY=VALUE)`);
+            process.exit(1);
+        }
+        const key = pair.substring(0, eqIndex);
+        const value = pair.substring(eqIndex + 1);
+        if (!key) {
+            log.error(`Invalid key in "${pair}"`);
+            process.exit(1);
+        }
+        vars[key] = value;
+    }
+    const serviceName = await resolveServiceName(options.service);
+    const client = await BuilderClient.create();
+    log.info(`Setting ${options.secret ? 'secrets' : 'config'} for ${serviceName}...`);
+    const result = await client.setConfig(serviceName, vars, options.secret);
+    if (!result.success) {
+        log.error(`Failed to set config: ${result.error?.message}`);
+        process.exit(1);
+    }
+    const data = result.data;
+    if (!data) {
+        log.error('Unexpected empty response');
+        process.exit(1);
+    }
+    log.success(`${Object.keys(vars).length} variable(s) ${options.secret ? 'encrypted and ' : ''}saved`);
+    // Show summary
+    const configCount = Object.keys(data.config).length;
+    const secretCount = data.secrets.length;
+    log.dim(`  Config vars: ${configCount}`);
+    log.dim(`  Secrets:     ${secretCount}`);
+    log.info('');
+    log.warning('Deploy to apply changes: iec deploy or iec push --deploy');
+}
+/**
+ * iec config list
+ */
+export async function configListCommand(options) {
+    const serviceName = await resolveServiceName(options.service);
+    const client = await BuilderClient.create();
+    const result = await client.getConfig(serviceName);
+    if (!result.success) {
+        log.error(`Failed to get config: ${result.error?.message}`);
+        process.exit(1);
+    }
+    const data = result.data;
+    if (!data) {
+        log.error('Unexpected empty response');
+        process.exit(1);
+    }
+    log.info(`Config for ${serviceName}`);
+    if (data.updatedAt) {
+        log.dim(`Last updated: ${data.updatedAt}`);
+    }
+    log.info('');
+    const configEntries = Object.entries(data.config);
+    const secretKeys = data.secrets;
+    if (configEntries.length === 0 && secretKeys.length === 0) {
+        log.dim('No config vars set. Use "iec config set KEY=VALUE" to add some.');
+        return;
+    }
+    // Show plain config vars
+    for (const [key, value] of configEntries) {
+        log.dim(`  ${key}=${value}`);
+    }
+    // Show secret names (values hidden)
+    for (const key of secretKeys) {
+        log.dim(`  ${key}=********`);
+    }
+}
+/**
+ * iec config unset KEY [KEY2 ...]
+ */
+export async function configUnsetCommand(keys, options) {
+    if (keys.length === 0) {
+        log.error('No keys provided');
+        log.dim('Usage: iec config unset KEY [KEY2 ...]');
+        process.exit(1);
+    }
+    const serviceName = await resolveServiceName(options.service);
+    const client = await BuilderClient.create();
+    log.info(`Removing config for ${serviceName}...`);
+    const result = await client.unsetConfig(serviceName, keys);
+    if (!result.success) {
+        log.error(`Failed to unset config: ${result.error?.message}`);
+        process.exit(1);
+    }
+    log.success(`${keys.length} variable(s) removed`);
+    log.info('');
+    log.warning('Deploy to apply changes: iec deploy or iec push --deploy');
+}
+/**
+ * iec config pull
+ * Downloads all config + decrypted secrets to .env.local
+ */
+export async function configPullCommand(options) {
+    const serviceName = await resolveServiceName(options.service);
+    const client = await BuilderClient.create();
+    log.info(`Pulling config for ${serviceName}...`);
+    const result = await client.pullConfig(serviceName);
+    if (!result.success) {
+        log.error(`Failed to pull config: ${result.error?.message}`);
+        process.exit(1);
+    }
+    const data = result.data;
+    if (!data) {
+        log.error('Unexpected empty response');
+        process.exit(1);
+    }
+    const vars = data.vars;
+    const entries = Object.entries(vars);
+    if (entries.length === 0) {
+        log.dim('No config vars to pull.');
+        return;
+    }
+    // Resolve output path
+    const outputPath = options.output
+        ? resolve(process.cwd(), options.output)
+        : join(process.cwd(), '.env.local');
+    // Warn if writing outside the current project directory
+    const rel = relative(process.cwd(), outputPath);
+    if (rel.startsWith('..')) {
+        log.warning(`Writing secrets outside project directory: ${outputPath}`);
+    }
+    // Format with proper quoting for special characters
+    const content = entries
+        .map(([key, value]) => formatEnvValue(key, value))
+        .join('\n') + '\n';
+    // Write with restricted permissions (owner-only read/write)
+    await writeFile(outputPath, content, { encoding: 'utf-8', mode: 0o600 });
+    log.success(`${entries.length} variable(s) written to ${outputPath}`);
+    log.warning('Do not commit .env.local to version control');
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAC9C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAEtC;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,WAAoB;IACpD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAA;IACxC,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,WAAW,CAAA;IAC3B,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAA;QACjF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAA;QAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAC7C,GAAG,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAA;IAC5E,GAAG,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa;IAChD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACjE,OAAO,GAAG,GAAG,KAAK,OAAO,GAAG,CAAA;IAC9B,CAAC;IACD,OAAO,GAAG,GAAG,IAAI,KAAK,EAAE,CAAA;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAe,EACf,OAA+C;IAE/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QACxC,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAA;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,wBAAwB;IACxB,MAAM,IAAI,GAA2B,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,wBAAwB,CAAC,CAAA;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAA;YACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAA;IAE3C,GAAG,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,WAAW,KAAK,CAAC,CAAA;IAElF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAExE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,gBAAgB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAErG,eAAe;IACf,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;IACvC,GAAG,CAAC,GAAG,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAA;IACxC,GAAG,CAAC,GAAG,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAA;IACxC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACZ,GAAG,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAA;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA6B;IAE7B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAA;IAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAElD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,cAAc,WAAW,EAAE,CAAC,CAAA;IACrC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;IAC5C,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEZ,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAA;IAE/B,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAA;QAC1E,OAAM;IACR,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,oCAAoC;IACpC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,CAAA;IAC9B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAc,EACd,OAA6B;IAE7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAC7B,GAAG,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAA;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAA;IAE3C,GAAG,CAAC,IAAI,CAAC,uBAAuB,WAAW,KAAK,CAAC,CAAA;IAEjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IAE1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,2BAA2B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,sBAAsB,CAAC,CAAA;IACjD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACZ,GAAG,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAA;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA8C;IAE9C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAA;IAE3C,GAAG,CAAC,IAAI,CAAC,sBAAsB,WAAW,KAAK,CAAC,CAAA;IAEhD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;QAClC,OAAM;IACR,CAAC;IAED,sBAAsB;IACtB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM;QAC/B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAA;IAErC,wDAAwD;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAA;IAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,OAAO,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAG,OAAO;SACpB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;SACjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAEpB,4DAA4D;IAC5D,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAExE,GAAG,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,2BAA2B,UAAU,EAAE,CAAC,CAAA;IACrE,GAAG,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAA;AAC5D,CAAC"}

package/dist/commands/deploy.d.ts

@@ -0,0 +1,16 @@
+import type { Environment } from '../types/index.js';
+interface DeployOptions {
+    branch?: string;
+    watch?: boolean;
+    env?: Environment;
+    prod?: boolean;
+    sandbox?: boolean;
+    uat?: boolean;
+}
+export declare function deployCommand(options: DeployOptions): Promise<void>;
+export declare function listBuildsCommand(options: {
+    service?: string;
+    limit?: number;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=deploy.d.ts.map

package/dist/commands/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAe,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAIjE,UAAU,aAAa;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,GAAG,CAAC,EAAE,WAAW,CAAA;IACjB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqLzE;AAGD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCpG"}