lazy-vault 1.0.0 → 2.0.0

package/README.md

@@ -1,47 +1,52 @@
-# Lazy Vault
+# lazy-vault
 
 ![npm version](https://img.shields.io/npm/v/lazy-vault?color=blue)
 ![license](https://img.shields.io/badge/license-MIT-green)
 ![status](https://img.shields.io/badge/status-stable-brightgreen)
 
-**Stop leaking secrets & Start committing safely.**
+**Security for the lazy developer.**
+Stop worrying about sharing `.env` files. `lazy-vault` encrypts your secrets so you can safely commit them to Git.
 
-`lazy-vault` is a simple CLI tool that lets you **encrypt `.env` files**, commit them to Git safely, and **sync secrets across machines** using a password you control.
-
-No cloud. No accounts. No lock-in.
+Now with **Smart Profiles** and **Project Configuration**.
 
 ---
 
-## Why Lazy Vault?
-
-Environment variables are:
+## What is lazy-vault?
 
-- Critical
-- Sensitive
-- Painful to share across machines and teams
+`lazy-vault` is a CLI tool for **secure environment variable management**:
 
-`.env` files don’t belong in Git — but **encrypted `.env` files do**.
+- Encrypt `.env` files
+- Commit encrypted secrets to Git
+- Sync secrets across machines safely
+- Manage multiple environments (dev, prod, staging)
+- Use strong cryptography without complexity
 
-`lazy-vault` solves this by giving you a **password-based, zero-trust workflow**.
+No cloud.
+No accounts.
+No vendor lock-in.
+Your password never leaves your machine.
 
 ---
 
 ## Core Features
 
 - **Strong Encryption**
-  Uses modern, authenticated encryption with a password-derived key.
+  AES-256-GCM + Argon2id (memory-hard key derivation)
+
+- **Git-Safe Workflow**
+  Commit `.env.enc`, never `.env`
 
-- **Git-Friendly**
-  Encrypt once → commit `.env.enc` → safely sync anywhere.
+- **Smart Profiles (v2)**
+  Security modes for speed vs paranoia
 
-- **Simple CLI Workflow**
-  Two commands. No config files. No magic.
+- **Project Configuration (v2)**
+  Multi-environment support via config file
 
-- **Merge-Aware Syncing**
-  Remote secrets override conflicts, local-only keys are preserved.
+- **Merge-Safe Syncing**
+  Remote secrets override conflicts, local-only keys are preserved
 
-- **Safe by Default**
-  Automatically adds `.env` to `.gitignore`.
+- **Automation Ready**
+  Headless mode for CI/CD and deployments
 
 ---
 
@@ -51,7 +56,7 @@ Environment variables are:
 npm install -g lazy-vault
 ```
 
-Or use without installing:
+Or without installing:
 
 ```bash
 npx lazy-vault
@@ -59,121 +64,180 @@ npx lazy-vault
 
 ---
 
-## Quick Start
+# Quick Start
 
-### Encrypt Your `.env`
+## Initialize (Optional)
+
+Create a project config for multi-environment setups:
 
 ```bash
-lazy-vault lock
+lazy-vault init
 ```
 
-You will be prompted for a password.
+Creates:
 
-This will:
+```json
+lazy.config.json
+```
+
+---
 
-- Encrypt `.env` → `.env.enc`
-- Add `.env` to `.gitignore`
-- Leave `.env.enc` safe to commit
+## Lock (Encrypt)
+
+When you add new secrets:
 
 ```bash
-git add .env.enc
-git commit -m "Add encrypted env"
+lazy-vault lock
 ```
 
+### What it does:
+
+- Encrypts `.env` → `.env.enc`
+- Uses **AES-256-GCM + Argon2id**
+- Adds `.env` to `.gitignore`
+- Safe to commit `.env.enc`
+
 ---
 
-### Sync on Another Machine
+## Sync (Decrypt & Merge)
+
+When pulling code or deploying:
 
 ```bash
 lazy-vault sync
 ```
 
-- Enter the same password
-- `.env` will be created or merged automatically
+### What it does:
 
----
+- Decrypts `.env.enc`
+- Merges into `.env`
+
+**Smart Merge Logic:**
 
-## How It Works (High Level)
+- Remote keys overwrite local conflicts
+- Local-only keys are preserved
 
-1. Your password is converted into a cryptographic key using a memory-hard algorithm
-2. `.env` is encrypted using authenticated encryption
-3. The encrypted file (`.env.enc`) contains:
-   - A random salt
-   - A random IV
-   - An authentication tag
-   - The encrypted payload
+---
+
+# Configuration & Profiles (v2)
+
+## Project Configuration
+
+`lazy.config.json`
+
+```json
+{
+  "default": {
+    "source": ".env",
+    "output": ".env.enc",
+    "security": "light"
+  },
+  "production": {
+    "source": ".env.prod",
+    "output": ".env.prod.enc",
+    "security": "heavy"
+  }
+}
+```
 
-4. On sync, the file is decrypted and merged safely
+Now you can run:
 
-**Your password is never stored. Ever.**
+```bash
+lazy-vault lock production
+lazy-vault sync production
+```
 
 ---
 
-## Security Model
+## Security Profiles
 
-- **Zero-Knowledge**:
-  `lazy-vault` cannot recover your password.
+Trade speed for paranoia.
 
-- **Authenticated Encryption**:
-  Tampered or corrupted files will fail to decrypt.
+### Light (default)
 
-- **Local-Only Secrets**:
-  All encryption happens on your machine.
+- Fast (~0.5s)
+- Optimized for frequent dev usage
 
-**Important**
-If you lose your password, your secrets cannot be recovered.
+### Heavy
+
+- Slow (~1s+)
+- Uses ~256MB RAM
+- GPU-resistant
+- Designed for production secrets
+
+```bash
+lazy-vault lock --profile heavy
+```
 
 ---
 
-## Supported `.env` Format
+# Automation & CI (Headless Mode)
+
+For scripts, pipelines, and deployments:
 
-- Simple `KEY=value` pairs
-- Comments (`#`) are ignored
-- Quotes are supported
+```bash
+export LAZY_VAULT_PASSWORD="your-secure-password"
+lazy-vault sync
+```
 
-```env
-DATABASE_URL="postgres://localhost/db"
-API_KEY=super-secret
+PowerShell:
+
+```powershell
+$env:LAZY_VAULT_PASSWORD="your-secure-password"
+lazy-vault sync
 ```
 
-Advanced `.env` features (multiline values, shell expansion) are intentionally not supported.
+No interactive prompts.
+Safe for CI/CD.
 
 ---
 
-## Commands
+# 🛠 CLI Reference
 
-### `lazy-vault lock`
+| Command      | Description                 |
+| ------------ | --------------------------- |
+| `init`       | Create `lazy.config.json`   |
+| `lock [env]` | Encrypt environment         |
+| `sync [env]` | Decrypt & merge environment |
 
-Encrypts `.env` into `.env.enc`.
+### Flags
 
-```bash
-lazy-vault lock
-```
+| Flag                   | Description                          |
+| ---------------------- | ------------------------------------ |
+| `-p, --profile <mode>` | Security profile (`light` / `heavy`) |
+| `-i, --input <path>`   | Input file override                  |
+| `-o, --output <path>`  | Output file override                 |
 
 ---
 
-### `lazy-vault sync`
+# Security Model
 
-Decrypts `.env.enc` and merges it into `.env`.
+- Zero-knowledge encryption
+- Local-only cryptography
+- Authenticated encryption (tamper detection)
+- No password storage
+- No recovery backdoors
 
-```bash
-lazy-vault sync
-```
+> If you lose your password, your secrets **cannot be recovered**.
+
+This is by design.
 
 ---
 
-## Contributing
+# 🤝 Contributing
 
 Contributions are welcome.
 
 1. Fork the repo
 2. Create a feature branch
-3. Open a pull request
+3. Open a PR
 
-Security-related issues should be reported responsibly.
+Security issues should be reported responsibly.
 
 ---
 
-## 📄 License
+# 📄 License
 
 MIT License © ghost
+
+---

package/dist/cli/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/cli/bin.ts
-import { Command as Command3 } from "commander";
+import { Command as Command4 } from "commander";
 
 // src/cli/commands/sync.ts
 import { Command } from "commander";
@@ -10,43 +10,32 @@ import inquirer from "inquirer";
 
 // src/lib/storage.ts
 import fs from "fs-extra";
-
-// src/constants/index.ts
-var ENC_FILE = ".env.enc";
-var RAW_FILE = ".env";
-
-// src/lib/storage.ts
-async function hasRawEnv() {
-  return fs.pathExists(RAW_FILE);
-}
-async function hasEncEnv() {
-  return fs.pathExists(ENC_FILE);
+import path from "path";
+async function exists(filePath) {
+  return fs.pathExists(filePath);
 }
-async function readRawEnv() {
-  if (!await hasRawEnv()) return "";
-  return fs.readFile(RAW_FILE, "utf-8");
-}
-async function readEncEnv() {
-  if (!await hasEncEnv()) {
-    throw new Error("No encrypted .env.enc file found.");
+async function readFile(filePath) {
+  if (!await exists(filePath)) {
+    throw new Error(`File not found: ${filePath}`);
   }
-  return fs.readFile(ENC_FILE, "utf-8");
-}
-async function writeRawEnv(content) {
-  await fs.writeFile(RAW_FILE, content, "utf-8");
+  return fs.readFile(filePath, "utf-8");
 }
-async function writeEncEnv(content) {
-  await fs.writeFile(ENC_FILE, content, "utf-8");
+async function writeFile(filePath, content) {
+  await fs.writeFile(filePath, content, "utf-8");
 }
-async function ensureGitIgnore() {
+async function addToGitIgnore(filePath) {
   const gitignorePath = ".gitignore";
-  const ignoreRule = "\n# Added by lazy-vault\n.env\n";
+  const filename = path.basename(filePath);
+  const ignoreRule = `
+${filename}`;
+  if (filename.endsWith(".enc")) return;
   if (!await fs.pathExists(gitignorePath)) {
-    await fs.writeFile(gitignorePath, ignoreRule);
+    await fs.writeFile(gitignorePath, `# Added by lazy-vault${ignoreRule}
+`);
     return;
   }
   const content = await fs.readFile(gitignorePath, "utf-8");
-  if (!content.includes(".env")) {
+  if (!content.includes(filename)) {
     await fs.appendFile(gitignorePath, ignoreRule);
   }
 }
@@ -54,9 +43,20 @@ async function ensureGitIgnore() {
 // src/lib/crypto.ts
 import crypto from "crypto";
 import argon2 from "argon2";
+
+// src/constants/index.ts
 var ALGORITHM = "aes-256-gcm";
-var VERSION = "v1";
-async function encrypt(text, password) {
+var CONFIG_FILE = "lazy.config.json";
+var PROFILES = {
+  // Good for CI/CD and frequent locking
+  light: { timeCost: 3, memoryCost: 64 * 1024, parallelism: 1 },
+  // Good for long-term storage or high-value keys
+  heavy: { timeCost: 10, memoryCost: 256 * 1024, parallelism: 4 }
+};
+
+// src/lib/crypto.ts
+async function encrypt(text, password, profileName = "light") {
+  const settings = PROFILES[profileName];
   const salt = crypto.randomBytes(16);
   const iv = crypto.randomBytes(16);
   const key = await argon2.hash(password, {
@@ -64,52 +64,60 @@ async function encrypt(text, password) {
     salt,
     raw: true,
     hashLength: 32,
-    timeCost: 3,
-    memoryCost: 65536,
-    parallelism: 1
+    timeCost: settings.timeCost,
+    memoryCost: settings.memoryCost,
+    parallelism: settings.parallelism
   });
-  if (ALGORITHM !== "aes-256-gcm") {
-    throw new Error("Unsupported encryption algorithm");
-  }
   const cipher = crypto.createCipheriv(ALGORITHM, key, iv);
   const encrypted = Buffer.concat([
     cipher.update(text, "utf8"),
     cipher.final()
   ]);
   const authTag = cipher.getAuthTag();
+  const envelope = {
+    v: 2,
+    mode: "password",
+    profile: profileName,
+    ops: {
+      mem: settings.memoryCost,
+      time: settings.timeCost,
+      parallel: settings.parallelism
+    },
+    salt: salt.toString("hex"),
+    iv: iv.toString("hex"),
+    tag: authTag.toString("hex"),
+    data: encrypted.toString("hex")
+  };
   key.fill(0);
-  return `${VERSION}:${salt.toString("hex")}:${iv.toString("hex")}:${authTag.toString("hex")}:${encrypted.toString("hex")}`;
+  return JSON.stringify(envelope, null, 2);
 }
-async function decrypt(encryptedText, password) {
-  const parts = encryptedText.split(":");
-  if (parts.length !== 5) {
-    throw new Error("Invalid encrypted file format");
-  }
-  const [version, saltHex, ivHex, authTagHex, cipherTextHex] = parts;
-  if (version !== "v1") {
-    throw new Error(`Unsupported encrypted format version: ${version}`);
+async function decrypt(content, password) {
+  try {
+    const envelope = JSON.parse(content);
+    const key = await argon2.hash(password, {
+      type: argon2.argon2id,
+      salt: Buffer.from(envelope.salt, "hex"),
+      raw: true,
+      hashLength: 32,
+      timeCost: envelope.ops.time,
+      memoryCost: envelope.ops.mem,
+      parallelism: envelope.ops.parallel
+    });
+    const decipher = crypto.createDecipheriv(
+      ALGORITHM,
+      key,
+      Buffer.from(envelope.iv, "hex")
+    );
+    decipher.setAuthTag(Buffer.from(envelope.tag, "hex"));
+    const decrypted = Buffer.concat([
+      decipher.update(Buffer.from(envelope.data, "hex")),
+      decipher.final()
+    ]);
+    key.fill(0);
+    return decrypted.toString("utf8");
+  } catch (error) {
+    throw new Error(`Decryption failed: ${error.message}`);
   }
-  const salt = Buffer.from(saltHex, "hex");
-  const iv = Buffer.from(ivHex, "hex");
-  const authTag = Buffer.from(authTagHex, "hex");
-  const cipherText = Buffer.from(cipherTextHex, "hex");
-  const key = await argon2.hash(password, {
-    type: argon2.argon2id,
-    salt,
-    raw: true,
-    hashLength: 32,
-    timeCost: 3,
-    memoryCost: 65536,
-    parallelism: 1
-  });
-  const decipher = crypto.createDecipheriv(ALGORITHM, key, iv);
-  decipher.setAuthTag(authTag);
-  const decrypted = Buffer.concat([
-    decipher.update(cipherText),
-    decipher.final()
-  ]);
-  key.fill(0);
-  return decrypted.toString("utf8");
 }
 
 // src/lib/parser.ts
@@ -147,42 +155,92 @@ function merge(local, remote) {
   return { ...local, ...remote };
 }
 
+// src/lib/config.ts
+import fs2 from "fs-extra";
+import "path";
+var DEFAULTS = {
+  source: ".env",
+  output: ".env.env",
+  security: "light"
+};
+async function loadConfig(envName = "default") {
+  if (!await fs2.pathExists(CONFIG_FILE)) {
+    return DEFAULTS;
+  }
+  try {
+    const raw = await fs2.readFile(CONFIG_FILE, "utf-8");
+    const config = JSON.parse(raw);
+    if (!config[envName]) {
+      if (envName === "default") return DEFAULTS;
+      throw new Error(`Environment "${envName}" not found in ${CONFIG_FILE}`);
+    }
+    return { ...DEFAULTS, ...config[envName] };
+  } catch (error) {
+    throw new Error(`Failed to parse ${CONFIG_FILE}: ${error.message}`);
+  }
+}
+async function createTemplateConfig() {
+  const template = {
+    default: { source: ".env", output: ".env.enc", security: "light" },
+    production: {
+      source: ".env.prod",
+      output: ".env.prod.enc",
+      security: "heavy"
+    }
+  };
+  await fs2.writeJson(CONFIG_FILE, template, { spaces: 2 });
+}
+
 // src/cli/commands/sync.ts
-var syncCommand = new Command("sync").description("Decrypts .env.enc and merges it with local .env").action(async () => {
+var syncCommand = new Command("sync").description("Decrypts .env.enc and merges it with local .env").argument("[env]", "Environment name", "default").option("-i, --input <path>", "Override encrypted file path").option("-o, --output <path>", "Override target .env path").action(async (envName, options) => {
   try {
-    console.log(chalk.blue("Preparing to Sync (Decrypt)..."));
-    if (!await hasEncEnv()) {
-      console.error(chalk.red("Error: No .env.enc file found."));
+    console.log(chalk.blue("Preparing to Sync..."));
+    const fileConfig = await loadConfig(envName);
+    const encryptedPath = options.input || fileConfig.output;
+    const rawPath = options.output || fileConfig.source;
+    console.log(chalk.blue(`   Syncing [${envName}]...`));
+    console.log(chalk.gray(`   Source (Encrypted): ${encryptedPath}`));
+    console.log(chalk.gray(`   Target (Raw):       ${rawPath}`));
+    if (!await exists(encryptedPath)) {
+      console.error(chalk.red(`Error: File ${encryptedPath} not found.`));
       process.exit(1);
     }
-    const answers = await inquirer.prompt([
-      {
-        type: "password",
-        name: "password",
-        message: "Enter password to decrypt:",
-        mask: "*"
-      }
-    ]);
-    const password = answers.password;
-    const encryptedContent = await readEncEnv();
+    let password = process.env.LAZY_ENV_PASSWORD;
+    if (!password) {
+      const answers = await inquirer.prompt([
+        {
+          type: "password",
+          name: "password",
+          message: "Enter password to decrypt:",
+          mask: "*"
+        }
+      ]);
+      password = answers.password;
+    } else {
+      console.log(chalk.yellow(" Using password from LAZY_ENV_PASSWORD"));
+    }
+    const encryptedContent = await readFile(encryptedPath);
     let decryptedRaw = "";
     try {
-      decryptedRaw = await decrypt(encryptedContent, password);
+      decryptedRaw = await decrypt(
+        encryptedContent,
+        password
+      );
     } catch (e) {
       throw new Error("Invalid password or corrupted file.");
     }
     const remoteObj = parse(decryptedRaw);
     let finalObj = remoteObj;
-    let actionMsg = "Created new .env";
-    if (await hasRawEnv()) {
-      console.log(chalk.gray("Local .env found. Merging..."));
-      const localRaw = await readRawEnv();
+    let actionMsg = `Created new ${rawPath}`;
+    if (await exists(rawPath)) {
+      console.log(chalk.gray(` Local ${rawPath} found. Merging...`));
+      const localRaw = await readFile(rawPath);
       const localObj = parse(localRaw);
       finalObj = merge(localObj, remoteObj);
       actionMsg = "Merged with local .env";
     }
     const finalString = stringify(finalObj);
-    await writeRawEnv(finalString);
+    await writeFile(rawPath, finalString);
     console.log(chalk.green(`
 Success! ${actionMsg}`));
     console.log(
@@ -195,43 +253,62 @@ Success! ${actionMsg}`));
 });
 
 // src/cli/commands/lock.ts
-import { Command as Command2 } from "commander";
+import { Command as Command2, Option } from "commander";
 import chalk2 from "chalk";
 import inquirer2 from "inquirer";
-var lockCommand = new Command2("lock").description("Encrypts local .env file and saves it to env.enc").action(async () => {
+var lockCommand = new Command2("lock").description("Encrypts local .env file and saves it to env.enc").argument("[env]", "Environment name (default, production, etc)", "default").option("-i, --input <path>", "Override input path").option("-o, --output <path>", "Override output path").addOption(
+  new Option("-p, --profile <mode>", "Override security profile").choices([
+    "light",
+    "heavy"
+  ])
+).action(async (envName, options) => {
   try {
-    console.log(chalk2.blue("Preparing to lock (Encrypt)..."));
-    if (!await hasRawEnv()) {
-      console.error(chalk2.red("Error: No .env file found to encrypt."));
+    console.log(chalk2.blue("Preparing to lock ..."));
+    const fileConfig = await loadConfig(envName);
+    const sourcePath = options.input || fileConfig.source;
+    const outputPath = options.output || fileConfig.output;
+    const securityProfile = options.profile || fileConfig.security;
+    console.log(chalk2.blue(`   Locking [${envName}]...`));
+    console.log(chalk2.gray(`   Source: ${sourcePath}`));
+    console.log(chalk2.gray(`   Target: ${outputPath}`));
+    console.log(chalk2.gray(`   Profile: ${securityProfile}`));
+    if (!await exists(sourcePath)) {
+      console.error(chalk2.red(`Error: File ${sourcePath} not found.`));
       process.exit(1);
     }
-    const answers = await inquirer2.prompt([
-      {
-        type: "password",
-        name: "password",
-        message: "Enter Password to encrypt: ",
-        mask: "*",
-        validate: (input) => input.length > 0 ? true : "Password cannot be empty."
-      },
-      {
-        type: "password",
-        name: "passwordConfirm",
-        message: "Confirm password:",
-        mask: "*",
-        validate: (input, answers2) => input === answers2.password || "Passwords do not match."
+    let password = process.env.LAZY_ENV_PASSWORD;
+    if (!password) {
+      const answers = await inquirer2.prompt([
+        {
+          type: "password",
+          name: "password",
+          message: "Enter Password to encrypt: ",
+          mask: "*",
+          validate: (input) => input.length > 0 ? true : "Password cannot be empty."
+        },
+        {
+          type: "password",
+          name: "passwordConfirm",
+          message: "Confirm password:",
+          mask: "*"
+        }
+      ]);
+      if (answers.password !== answers.passwordConfirm) {
+        console.error(chalk2.red("\n Error: Passwords do not match."));
+        process.exit(1);
       }
-    ]);
-    const password = answers.password;
-    const rawContent = await readRawEnv();
-    const parsed = parse(rawContent);
-    const keysCount = Object.keys(parsed).length;
-    const encryptedData = await encrypt(rawContent, password);
-    await writeEncEnv(encryptedData);
-    await ensureGitIgnore();
-    console.log(
-      chalk2.green(`
-Success! Encrypted ${keysCount} secrets to .env.enc`)
+      password = answers.password;
+    }
+    const rawContent = await readFile(sourcePath);
+    const encryptedData = await encrypt(
+      rawContent,
+      password,
+      securityProfile
     );
+    await writeFile(outputPath, encryptedData);
+    await addToGitIgnore(sourcePath);
+    console.log(chalk2.green(`
+Success! Encrypted secrets to ${outputPath}`));
     console.log(chalk2.gray("You can now commit .env.enc to Git."));
   } catch (error) {
     console.error(chalk2.red("\n Failed:"), error.message);
@@ -240,14 +317,32 @@ Success! Encrypted ${keysCount} secrets to .env.enc`)
 });
 
 // src/cli/bin.ts
+import chalk4 from "chalk";
+
+// src/cli/commands/init.ts
+import { Command as Command3 } from "commander";
 import chalk3 from "chalk";
-var program = new Command3();
+import fs3 from "fs-extra";
+var initCommand = new Command3("init").description("Creates a lazy.config.json file").action(async () => {
+  if (await fs3.pathExists(CONFIG_FILE)) {
+    console.log(chalk3.yellow("lazy.config.json already exists."));
+    return;
+  }
+  await createTemplateConfig();
+  console.log(chalk3.green(`
+Created ${CONFIG_FILE}`));
+  console.log(chalk3.gray('You can now run "lazy-env lock production"'));
+});
+
+// src/cli/bin.ts
+var program = new Command4();
 program.name("lazy-vault").description("A secure, simple way to manage encrypted .env files in Git").version("1.0.0");
 program.addCommand(syncCommand);
 program.addCommand(lockCommand);
+program.addCommand(initCommand);
 program.on("command:*", () => {
   console.error(
-    chalk3.red(
+    chalk4.red(
       "Invalid command: %s\nSee --help for a list of available commands."
     ),
     program.args.join(" ")

package/dist/cli/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/bin.ts","../../src/cli/commands/sync.ts","../../src/lib/storage.ts","../../src/constants/index.ts","../../src/lib/crypto.ts","../../src/lib/parser.ts","../../src/cli/commands/lock.ts"],"sourcesContent":["#!/usr/bin/env node\r\nimport { Command } from \"commander\";\r\nimport { syncCommand } from \"./commands/sync\";\r\nimport { lockCommand } from \"./commands/lock\";\r\nimport chalk from \"chalk\";\r\n\r\nconst program = new Command();\r\n\r\nprogram\r\n  .name(\"lazy-vault\")\r\n  .description(\"A secure, simple way to manage encrypted .env files in Git\")\r\n  .version(\"1.0.0\");\r\n\r\nprogram.addCommand(syncCommand);\r\nprogram.addCommand(lockCommand);\r\n\r\nprogram.on(\"command:*\", () => {\r\n  console.error(\r\n    chalk.red(\r\n      \"Invalid command: %s\\nSee --help for a list of available commands.\",\r\n    ),\r\n    program.args.join(\" \"),\r\n  );\r\n  process.exit(1);\r\n});\r\n\r\nprogram.parse(process.argv);\r\n\r\nif (!process.argv.slice(2).length) {\r\n  program.outputHelp();\r\n}\r\n","import { Command } from \"commander\";\r\nimport chalk from \"chalk\";\r\nimport inquirer from \"inquirer\";\r\n\r\nimport * as storage from \"../../lib/storage\";\r\nimport * as crypto from \"../../lib/crypto\";\r\nimport * as parser from \"../../lib/parser\";\r\n\r\nexport const syncCommand = new Command(\"sync\")\r\n  .description(\"Decrypts .env.enc and merges it with local .env\")\r\n  .action(async () => {\r\n    try {\r\n      console.log(chalk.blue(\"Preparing to Sync (Decrypt)...\"));\r\n\r\n      if (!(await storage.hasEncEnv())) {\r\n        console.error(chalk.red(\"Error: No .env.enc file found.\"));\r\n        process.exit(1);\r\n      }\r\n\r\n      const answers = await inquirer.prompt([\r\n        {\r\n          type: \"password\",\r\n          name: \"password\",\r\n          message: \"Enter password to decrypt:\",\r\n          mask: \"*\",\r\n        },\r\n      ]);\r\n\r\n      const password = answers.password;\r\n\r\n      const encryptedContent = await storage.readEncEnv();\r\n      let decryptedRaw = \"\";\r\n\r\n      try {\r\n        decryptedRaw = await crypto.decrypt(encryptedContent, password);\r\n      } catch (e) {\r\n        throw new Error(\"Invalid password or corrupted file.\");\r\n      }\r\n\r\n      const remoteObj = parser.parse(decryptedRaw);\r\n\r\n      let finalObj = remoteObj;\r\n      let actionMsg = \"Created new .env\";\r\n\r\n      if (await storage.hasRawEnv()) {\r\n        console.log(chalk.gray(\"Local .env found. Merging...\"));\r\n        const localRaw = await storage.readRawEnv();\r\n        const localObj = parser.parse(localRaw);\r\n\r\n        // MERGE: Remote wins conflicts, Local keeps unique keys\r\n        finalObj = parser.merge(localObj, remoteObj);\r\n        actionMsg = \"Merged with local .env\";\r\n      }\r\n\r\n      const finalString = parser.stringify(finalObj);\r\n      await storage.writeRawEnv(finalString);\r\n\r\n      console.log(chalk.green(`\\nSuccess! ${actionMsg}`));\r\n      console.log(\r\n        chalk.white(\"Keys in final .env: \") +\r\n          chalk.yellow(Object.keys(finalObj).length),\r\n      );\r\n    } catch (error: any) {\r\n      console.error(chalk.red(\"\\nFailed:\"), error.message);\r\n      process.exit(1);\r\n    }\r\n  });\r\n","import fs from \"fs-extra\";\r\nimport { ENC_FILE, RAW_FILE } from \"../constants\";\r\n\r\n/**\r\n * Checks if the raw .env file exists.\r\n * @return True if the file exists, false otherwise\r\n */\r\nexport async function hasRawEnv(): Promise<boolean> {\r\n  return fs.pathExists(RAW_FILE);\r\n}\r\n\r\n/**\r\n * Checks if the encrypted .env file exists.\r\n * @return True if the file exists, false otherwise\r\n */\r\nexport async function hasEncEnv(): Promise<boolean> {\r\n  return fs.pathExists(ENC_FILE);\r\n}\r\n\r\n/**\r\n * Reads the RAW .env file.\r\n * @return The content of the raw .env file\r\n */\r\nexport async function readRawEnv(): Promise<string> {\r\n  if (!(await hasRawEnv())) return \"\";\r\n  return fs.readFile(RAW_FILE, \"utf-8\");\r\n}\r\n\r\n/**\r\n * Reads the ENCRYPTED .env.enc file.\r\n * @return The content of the encrypted .env.enc file\r\n */\r\nexport async function readEncEnv(): Promise<string> {\r\n  if (!(await hasEncEnv())) {\r\n    throw new Error(\"No encrypted .env.enc file found.\");\r\n  }\r\n  return fs.readFile(ENC_FILE, \"utf-8\");\r\n}\r\n\r\n/**\r\n * Writes data to the RAW .env file.\r\n * @param content The content to write to the raw .env file\r\n * @return A promise that resolves when the write is complete\r\n */\r\nexport async function writeRawEnv(content: string): Promise<void> {\r\n  await fs.writeFile(RAW_FILE, content, \"utf-8\");\r\n}\r\n\r\n/**\r\n * Writes data to the ENCRYPTED .env.enc file.\r\n * @param content The content to write to the encrypted .env.enc file\r\n * @return A promise that resolves when the write is complete\r\n */\r\nexport async function writeEncEnv(content: string): Promise<void> {\r\n  await fs.writeFile(ENC_FILE, content, \"utf-8\");\r\n}\r\n\r\n/**\r\n * Adds .env to .gitignore if it's missing.\r\n * This is a safety feature to prevent accidental commits.\r\n */\r\nexport async function ensureGitIgnore(): Promise<void> {\r\n  const gitignorePath = \".gitignore\";\r\n  const ignoreRule = \"\\n# Added by lazy-vault\\n.env\\n\";\r\n\r\n  if (!(await fs.pathExists(gitignorePath))) {\r\n    await fs.writeFile(gitignorePath, ignoreRule);\r\n    return;\r\n  }\r\n\r\n  const content = await fs.readFile(gitignorePath, \"utf-8\");\r\n  if (!content.includes(\".env\")) {\r\n    await fs.appendFile(gitignorePath, ignoreRule);\r\n  }\r\n}\r\n","export const ALGORITHM = \"aes-256-gcm\";\r\nexport const ENC_FILE = \".env.enc\";\r\nexport const RAW_FILE = \".env\";\r\n","import crypto from \"node:crypto\";\r\nimport argon2 from \"argon2\";\r\n\r\nconst ALGORITHM = \"aes-256-gcm\" as const;\r\nconst VERSION = \"v1\";\r\n\r\n/**\r\n * Encrypts a raw string using a password.\r\n * Format: salt:iv:authTag:cipherText\r\n * @param text The string to encrypt\r\n * @param password The password to use for encryption\r\n */\r\n\r\nexport async function encrypt(text: string, password: string): Promise<string> {\r\n  const salt = crypto.randomBytes(16);\r\n  const iv = crypto.randomBytes(16);\r\n\r\n  const key = await argon2.hash(password, {\r\n    type: argon2.argon2id,\r\n    salt: salt,\r\n    raw: true,\r\n    hashLength: 32,\r\n    timeCost: 3,\r\n    memoryCost: 65536,\r\n    parallelism: 1,\r\n  });\r\n\r\n  if (ALGORITHM !== \"aes-256-gcm\") {\r\n    throw new Error(\"Unsupported encryption algorithm\");\r\n  }\r\n\r\n  const cipher = crypto.createCipheriv(ALGORITHM, key, iv);\r\n\r\n  const encrypted = Buffer.concat([\r\n    cipher.update(text, \"utf8\"),\r\n    cipher.final(),\r\n  ]);\r\n  const authTag = cipher.getAuthTag();\r\n\r\n  key.fill(0);\r\n\r\n  return `${VERSION}:${salt.toString(\"hex\")}:${iv.toString(\"hex\")}:${authTag.toString(\"hex\")}:${encrypted.toString(\"hex\")}`;\r\n}\r\n\r\n/** * Decrypts an encrypted string using a password.\r\n * @param encryptedText The encrypted string to decrypt\r\n * @param password The password to use for decryption\r\n * @return The decrypted string\r\n */\r\nexport async function decrypt(\r\n  encryptedText: string,\r\n  password: string,\r\n): Promise<string> {\r\n  const parts = encryptedText.split(\":\");\r\n\r\n  if (parts.length !== 5) {\r\n    throw new Error(\"Invalid encrypted file format\");\r\n  }\r\n  const [version, saltHex, ivHex, authTagHex, cipherTextHex] = parts as [\r\n    string,\r\n    string,\r\n    string,\r\n    string,\r\n    string,\r\n  ];\r\n\r\n  if (version !== \"v1\") {\r\n    throw new Error(`Unsupported encrypted format version: ${version}`);\r\n  }\r\n  const salt = Buffer.from(saltHex, \"hex\");\r\n  const iv = Buffer.from(ivHex, \"hex\");\r\n  const authTag = Buffer.from(authTagHex, \"hex\");\r\n  const cipherText = Buffer.from(cipherTextHex, \"hex\");\r\n\r\n  const key = await argon2.hash(password, {\r\n    type: argon2.argon2id,\r\n    salt: salt,\r\n    raw: true,\r\n    hashLength: 32,\r\n    timeCost: 3,\r\n    memoryCost: 65536,\r\n    parallelism: 1,\r\n  });\r\n\r\n  const decipher = crypto.createDecipheriv(ALGORITHM, key, iv);\r\n  decipher.setAuthTag(authTag);\r\n\r\n  const decrypted = Buffer.concat([\r\n    decipher.update(cipherText),\r\n    decipher.final(),\r\n  ]);\r\n\r\n  key.fill(0);\r\n\r\n  return decrypted.toString(\"utf8\");\r\n}\r\n","import type { EnvObject } from \"..\";\r\n\r\n/**\r\n * Parses a raw .env string into a Key-Value object.\r\n * Ignores comments and empty lines.\r\n * @param content The raw .env string\r\n * @return An object representing the parsed .env variables\r\n */\r\n\r\nexport function parse(content: string): EnvObject {\r\n  const result: EnvObject = {};\r\n  const lines = content.split(/\\r?\\n/);\r\n\r\n  for (const line of lines) {\r\n    const trimmedLine = line.trim();\r\n    if (trimmedLine === \"\" || trimmedLine.startsWith(\"#\")) {\r\n      continue;\r\n    }\r\n\r\n    if (!trimmedLine.includes(\"=\")) {\r\n      throw new Error(`Invalid env line (missing '='): ${line}`);\r\n    }\r\n\r\n    const [rawKey, ...valueParts] = trimmedLine.split(\"=\") as [string, any];\r\n\r\n    const key = rawKey.trim();\r\n    if (!key) {\r\n      throw new Error(`Invalid env line (empty key): ${line}`);\r\n    }\r\n\r\n    const value = valueParts.join(\"=\");\r\n    const cleanValue = value.replace(/^['\"](.*)['\"]$/, \"$1\").trim();\r\n\r\n    result[key] = cleanValue;\r\n  }\r\n\r\n  return result;\r\n}\r\n\r\n/**\r\n * Stringifies a Key-Value object into a raw .env string.\r\n * @param envObject The object representing .env variables\r\n * @return A raw .env string\r\n */\r\nexport function stringify(envObject: EnvObject): string {\r\n  let result = \"\";\r\n  for (const [key, value] of Object.entries(envObject)) {\r\n    result += `${key}=${value}\\n`;\r\n  }\r\n\r\n  return result.trimEnd();\r\n}\r\n\r\n/**\r\n * Merge logic\r\n * Remote keys override local keys if they exist\r\n * Unique keys from both are preserved\r\n * @param local The local .env object\r\n * @param remote The remote .env object\r\n */\r\n\r\nexport function merge(local: EnvObject, remote: EnvObject): EnvObject {\r\n  return { ...local, ...remote };\r\n}\r\n","import { Command } from \"commander\";\r\nimport chalk from \"chalk\";\r\nimport inquirer, { type Answers } from \"inquirer\";\r\n\r\nimport * as storage from \"../../lib/storage\";\r\nimport * as crypto from \"../../lib/crypto\";\r\nimport { parse } from \"../../lib/parser\";\r\n\r\nexport const lockCommand = new Command(\"lock\")\r\n  .description(\"Encrypts local .env file and saves it to env.enc\")\r\n  .action(async () => {\r\n    try {\r\n      console.log(chalk.blue(\"Preparing to lock (Encrypt)...\"));\r\n\r\n      if (!(await storage.hasRawEnv())) {\r\n        console.error(chalk.red(\"Error: No .env file found to encrypt.\"));\r\n        process.exit(1);\r\n      }\r\n\r\n      const answers = await inquirer.prompt([\r\n        {\r\n          type: \"password\",\r\n          name: \"password\",\r\n          message: \"Enter Password to encrypt: \",\r\n          mask: \"*\",\r\n          validate: (input) =>\r\n            input.length > 0 ? true : \"Password cannot be empty.\",\r\n        },\r\n        {\r\n          type: \"password\",\r\n          name: \"passwordConfirm\",\r\n          message: \"Confirm password:\",\r\n          mask: \"*\",\r\n          validate: (input: string, answers: Answers) =>\r\n            input === answers.password || \"Passwords do not match.\",\r\n        },\r\n      ]);\r\n\r\n      const password = answers.password;\r\n\r\n      const rawContent = await storage.readRawEnv();\r\n      const parsed = parse(rawContent);\r\n      const keysCount = Object.keys(parsed).length;\r\n\r\n      const encryptedData = await crypto.encrypt(rawContent, password);\r\n      await storage.writeEncEnv(encryptedData);\r\n      await storage.ensureGitIgnore();\r\n\r\n      console.log(\r\n        chalk.green(`\\nSuccess! Encrypted ${keysCount} secrets to .env.enc`),\r\n      );\r\n      console.log(chalk.gray(\"You can now commit .env.enc to Git.\"));\r\n    } catch (error: any) {\r\n      console.error(chalk.red(\"\\n Failed:\"), error.message);\r\n      process.exit(1);\r\n    }\r\n  });\r\n"],"mappings":";;;AACA,SAAS,WAAAA,gBAAe;;;ACDxB,SAAS,eAAe;AACxB,OAAO,WAAW;AAClB,OAAO,cAAc;;;ACFrB,OAAO,QAAQ;;;ACCR,IAAM,WAAW;AACjB,IAAM,WAAW;;;ADKxB,eAAsB,YAA8B;AAClD,SAAO,GAAG,WAAW,QAAQ;AAC/B;AAMA,eAAsB,YAA8B;AAClD,SAAO,GAAG,WAAW,QAAQ;AAC/B;AAMA,eAAsB,aAA8B;AAClD,MAAI,CAAE,MAAM,UAAU,EAAI,QAAO;AACjC,SAAO,GAAG,SAAS,UAAU,OAAO;AACtC;AAMA,eAAsB,aAA8B;AAClD,MAAI,CAAE,MAAM,UAAU,GAAI;AACxB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,GAAG,SAAS,UAAU,OAAO;AACtC;AAOA,eAAsB,YAAY,SAAgC;AAChE,QAAM,GAAG,UAAU,UAAU,SAAS,OAAO;AAC/C;AAOA,eAAsB,YAAY,SAAgC;AAChE,QAAM,GAAG,UAAU,UAAU,SAAS,OAAO;AAC/C;AAMA,eAAsB,kBAAiC;AACrD,QAAM,gBAAgB;AACtB,QAAM,aAAa;AAEnB,MAAI,CAAE,MAAM,GAAG,WAAW,aAAa,GAAI;AACzC,UAAM,GAAG,UAAU,eAAe,UAAU;AAC5C;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,GAAG,SAAS,eAAe,OAAO;AACxD,MAAI,CAAC,QAAQ,SAAS,MAAM,GAAG;AAC7B,UAAM,GAAG,WAAW,eAAe,UAAU;AAAA,EAC/C;AACF;;;AE1EA,OAAO,YAAY;AACnB,OAAO,YAAY;AAEnB,IAAM,YAAY;AAClB,IAAM,UAAU;AAShB,eAAsB,QAAQ,MAAc,UAAmC;AAC7E,QAAM,OAAO,OAAO,YAAY,EAAE;AAClC,QAAM,KAAK,OAAO,YAAY,EAAE;AAEhC,QAAM,MAAM,MAAM,OAAO,KAAK,UAAU;AAAA,IACtC,MAAM,OAAO;AAAA,IACb;AAAA,IACA,KAAK;AAAA,IACL,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,aAAa;AAAA,EACf,CAAC;AAED,MAAI,cAAc,eAAe;AAC/B,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAEA,QAAM,SAAS,OAAO,eAAe,WAAW,KAAK,EAAE;AAEvD,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,OAAO,OAAO,MAAM,MAAM;AAAA,IAC1B,OAAO,MAAM;AAAA,EACf,CAAC;AACD,QAAM,UAAU,OAAO,WAAW;AAElC,MAAI,KAAK,CAAC;AAEV,SAAO,GAAG,OAAO,IAAI,KAAK,SAAS,KAAK,CAAC,IAAI,GAAG,SAAS,KAAK,CAAC,IAAI,QAAQ,SAAS,KAAK,CAAC,IAAI,UAAU,SAAS,KAAK,CAAC;AACzH;AAOA,eAAsB,QACpB,eACA,UACiB;AACjB,QAAM,QAAQ,cAAc,MAAM,GAAG;AAErC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AACA,QAAM,CAAC,SAAS,SAAS,OAAO,YAAY,aAAa,IAAI;AAQ7D,MAAI,YAAY,MAAM;AACpB,UAAM,IAAI,MAAM,yCAAyC,OAAO,EAAE;AAAA,EACpE;AACA,QAAM,OAAO,OAAO,KAAK,SAAS,KAAK;AACvC,QAAM,KAAK,OAAO,KAAK,OAAO,KAAK;AACnC,QAAM,UAAU,OAAO,KAAK,YAAY,KAAK;AAC7C,QAAM,aAAa,OAAO,KAAK,eAAe,KAAK;AAEnD,QAAM,MAAM,MAAM,OAAO,KAAK,UAAU;AAAA,IACtC,MAAM,OAAO;AAAA,IACb;AAAA,IACA,KAAK;AAAA,IACL,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,aAAa;AAAA,EACf,CAAC;AAED,QAAM,WAAW,OAAO,iBAAiB,WAAW,KAAK,EAAE;AAC3D,WAAS,WAAW,OAAO;AAE3B,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,SAAS,OAAO,UAAU;AAAA,IAC1B,SAAS,MAAM;AAAA,EACjB,CAAC;AAED,MAAI,KAAK,CAAC;AAEV,SAAO,UAAU,SAAS,MAAM;AAClC;;;ACtFO,SAAS,MAAM,SAA4B;AAChD,QAAM,SAAoB,CAAC;AAC3B,QAAM,QAAQ,QAAQ,MAAM,OAAO;AAEnC,aAAW,QAAQ,OAAO;AACxB,UAAM,cAAc,KAAK,KAAK;AAC9B,QAAI,gBAAgB,MAAM,YAAY,WAAW,GAAG,GAAG;AACrD;AAAA,IACF;AAEA,QAAI,CAAC,YAAY,SAAS,GAAG,GAAG;AAC9B,YAAM,IAAI,MAAM,mCAAmC,IAAI,EAAE;AAAA,IAC3D;AAEA,UAAM,CAAC,QAAQ,GAAG,UAAU,IAAI,YAAY,MAAM,GAAG;AAErD,UAAM,MAAM,OAAO,KAAK;AACxB,QAAI,CAAC,KAAK;AACR,YAAM,IAAI,MAAM,iCAAiC,IAAI,EAAE;AAAA,IACzD;AAEA,UAAM,QAAQ,WAAW,KAAK,GAAG;AACjC,UAAM,aAAa,MAAM,QAAQ,kBAAkB,IAAI,EAAE,KAAK;AAE9D,WAAO,GAAG,IAAI;AAAA,EAChB;AAEA,SAAO;AACT;AAOO,SAAS,UAAU,WAA8B;AACtD,MAAI,SAAS;AACb,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AACpD,cAAU,GAAG,GAAG,IAAI,KAAK;AAAA;AAAA,EAC3B;AAEA,SAAO,OAAO,QAAQ;AACxB;AAUO,SAAS,MAAM,OAAkB,QAA8B;AACpE,SAAO,EAAE,GAAG,OAAO,GAAG,OAAO;AAC/B;;;AJvDO,IAAM,cAAc,IAAI,QAAQ,MAAM,EAC1C,YAAY,iDAAiD,EAC7D,OAAO,YAAY;AAClB,MAAI;AACF,YAAQ,IAAI,MAAM,KAAK,gCAAgC,CAAC;AAExD,QAAI,CAAE,MAAc,UAAU,GAAI;AAChC,cAAQ,MAAM,MAAM,IAAI,gCAAgC,CAAC;AACzD,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,UAAU,MAAM,SAAS,OAAO;AAAA,MACpC;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA,IACF,CAAC;AAED,UAAM,WAAW,QAAQ;AAEzB,UAAM,mBAAmB,MAAc,WAAW;AAClD,QAAI,eAAe;AAEnB,QAAI;AACF,qBAAe,MAAa,QAAQ,kBAAkB,QAAQ;AAAA,IAChE,SAAS,GAAG;AACV,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAEA,UAAM,YAAmB,MAAM,YAAY;AAE3C,QAAI,WAAW;AACf,QAAI,YAAY;AAEhB,QAAI,MAAc,UAAU,GAAG;AAC7B,cAAQ,IAAI,MAAM,KAAK,8BAA8B,CAAC;AACtD,YAAM,WAAW,MAAc,WAAW;AAC1C,YAAM,WAAkB,MAAM,QAAQ;AAGtC,iBAAkB,MAAM,UAAU,SAAS;AAC3C,kBAAY;AAAA,IACd;AAEA,UAAM,cAAqB,UAAU,QAAQ;AAC7C,UAAc,YAAY,WAAW;AAErC,YAAQ,IAAI,MAAM,MAAM;AAAA,WAAc,SAAS,EAAE,CAAC;AAClD,YAAQ;AAAA,MACN,MAAM,MAAM,sBAAsB,IAChC,MAAM,OAAO,OAAO,KAAK,QAAQ,EAAE,MAAM;AAAA,IAC7C;AAAA,EACF,SAAS,OAAY;AACnB,YAAQ,MAAM,MAAM,IAAI,WAAW,GAAG,MAAM,OAAO;AACnD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;;;AKlEH,SAAS,WAAAC,gBAAe;AACxB,OAAOC,YAAW;AAClB,OAAOC,eAAgC;AAMhC,IAAM,cAAc,IAAIC,SAAQ,MAAM,EAC1C,YAAY,kDAAkD,EAC9D,OAAO,YAAY;AAClB,MAAI;AACF,YAAQ,IAAIC,OAAM,KAAK,gCAAgC,CAAC;AAExD,QAAI,CAAE,MAAc,UAAU,GAAI;AAChC,cAAQ,MAAMA,OAAM,IAAI,uCAAuC,CAAC;AAChE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,UAAU,MAAMC,UAAS,OAAO;AAAA,MACpC;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,QACT,MAAM;AAAA,QACN,UAAU,CAAC,UACT,MAAM,SAAS,IAAI,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,QACT,MAAM;AAAA,QACN,UAAU,CAAC,OAAeC,aACxB,UAAUA,SAAQ,YAAY;AAAA,MAClC;AAAA,IACF,CAAC;AAED,UAAM,WAAW,QAAQ;AAEzB,UAAM,aAAa,MAAc,WAAW;AAC5C,UAAM,SAAS,MAAM,UAAU;AAC/B,UAAM,YAAY,OAAO,KAAK,MAAM,EAAE;AAEtC,UAAM,gBAAgB,MAAa,QAAQ,YAAY,QAAQ;AAC/D,UAAc,YAAY,aAAa;AACvC,UAAc,gBAAgB;AAE9B,YAAQ;AAAA,MACNF,OAAM,MAAM;AAAA,qBAAwB,SAAS,sBAAsB;AAAA,IACrE;AACA,YAAQ,IAAIA,OAAM,KAAK,qCAAqC,CAAC;AAAA,EAC/D,SAAS,OAAY;AACnB,YAAQ,MAAMA,OAAM,IAAI,YAAY,GAAG,MAAM,OAAO;AACpD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;;;ANpDH,OAAOG,YAAW;AAElB,IAAM,UAAU,IAAIC,SAAQ;AAE5B,QACG,KAAK,YAAY,EACjB,YAAY,4DAA4D,EACxE,QAAQ,OAAO;AAElB,QAAQ,WAAW,WAAW;AAC9B,QAAQ,WAAW,WAAW;AAE9B,QAAQ,GAAG,aAAa,MAAM;AAC5B,UAAQ;AAAA,IACND,OAAM;AAAA,MACJ;AAAA,IACF;AAAA,IACA,QAAQ,KAAK,KAAK,GAAG;AAAA,EACvB;AACA,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,QAAQ,MAAM,QAAQ,IAAI;AAE1B,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,QAAQ;AACjC,UAAQ,WAAW;AACrB;","names":["Command","Command","chalk","inquirer","Command","chalk","inquirer","answers","chalk","Command"]}
+{"version":3,"sources":["../../src/cli/bin.ts","../../src/cli/commands/sync.ts","../../src/lib/storage.ts","../../src/lib/crypto.ts","../../src/constants/index.ts","../../src/lib/parser.ts","../../src/lib/config.ts","../../src/cli/commands/lock.ts","../../src/cli/commands/init.ts"],"sourcesContent":["#!/usr/bin/env node\r\nimport { Command } from \"commander\";\r\nimport { syncCommand } from \"./commands/sync\";\r\nimport { lockCommand } from \"./commands/lock\";\r\nimport chalk from \"chalk\";\r\nimport { initCommand } from \"./commands/init\";\r\n\r\nconst program = new Command();\r\n\r\nprogram\r\n  .name(\"lazy-vault\")\r\n  .description(\"A secure, simple way to manage encrypted .env files in Git\")\r\n  .version(\"1.0.0\");\r\n\r\nprogram.addCommand(syncCommand);\r\nprogram.addCommand(lockCommand);\r\nprogram.addCommand(initCommand);\r\n\r\nprogram.on(\"command:*\", () => {\r\n  console.error(\r\n    chalk.red(\r\n      \"Invalid command: %s\\nSee --help for a list of available commands.\",\r\n    ),\r\n    program.args.join(\" \"),\r\n  );\r\n  process.exit(1);\r\n});\r\n\r\nprogram.parse(process.argv);\r\n\r\nif (!process.argv.slice(2).length) {\r\n  program.outputHelp();\r\n}\r\n","import { Command } from \"commander\";\r\nimport chalk from \"chalk\";\r\nimport inquirer from \"inquirer\";\r\n\r\nimport * as storage from \"../../lib/storage\";\r\nimport * as crypto from \"../../lib/crypto\";\r\nimport * as parser from \"../../lib/parser\";\r\nimport * as config from \"../../lib/config\";\r\n\r\nexport const syncCommand = new Command(\"sync\")\r\n  .description(\"Decrypts .env.enc and merges it with local .env\")\r\n  .argument(\"[env]\", \"Environment name\", \"default\") // Support for 'lazy-guard sync production'\r\n  .option(\"-i, --input <path>\", \"Override encrypted file path\")\r\n  .option(\"-o, --output <path>\", \"Override target .env path\")\r\n  .action(async (envName, options) => {\r\n    try {\r\n      console.log(chalk.blue(\"Preparing to Sync...\"));\r\n\r\n      const fileConfig = await config.loadConfig(envName);\r\n\r\n      const encryptedPath = options.input || fileConfig.output;\r\n      const rawPath = options.output || fileConfig.source;\r\n\r\n      console.log(chalk.blue(`   Syncing [${envName}]...`));\r\n      console.log(chalk.gray(`   Source (Encrypted): ${encryptedPath}`));\r\n      console.log(chalk.gray(`   Target (Raw):       ${rawPath}`));\r\n\r\n      if (!(await storage.exists(encryptedPath))) {\r\n        console.error(chalk.red(`Error: File ${encryptedPath} not found.`));\r\n        process.exit(1);\r\n      }\r\n\r\n      let password = process.env.LAZY_ENV_PASSWORD; // FOR CI/CD support.\r\n      if (!password) {\r\n        const answers = await inquirer.prompt([\r\n          {\r\n            type: \"password\",\r\n            name: \"password\",\r\n            message: \"Enter password to decrypt:\",\r\n            mask: \"*\",\r\n          },\r\n        ]);\r\n\r\n        password = answers.password;\r\n      } else {\r\n        console.log(chalk.yellow(\" Using password from LAZY_ENV_PASSWORD\"));\r\n      }\r\n\r\n      const encryptedContent = await storage.readFile(encryptedPath);\r\n      let decryptedRaw = \"\";\r\n\r\n      try {\r\n        decryptedRaw = await crypto.decrypt(\r\n          encryptedContent,\r\n          password as string,\r\n        );\r\n      } catch (e) {\r\n        throw new Error(\"Invalid password or corrupted file.\");\r\n      }\r\n\r\n      const remoteObj = parser.parse(decryptedRaw);\r\n\r\n      let finalObj = remoteObj;\r\n      let actionMsg = `Created new ${rawPath}`;\r\n\r\n      if (await storage.exists(rawPath)) {\r\n        console.log(chalk.gray(` Local ${rawPath} found. Merging...`));\r\n        const localRaw = await storage.readFile(rawPath);\r\n        const localObj = parser.parse(localRaw);\r\n\r\n        // MERGE: Remote wins conflicts, Local keeps unique keys\r\n        finalObj = parser.merge(localObj, remoteObj);\r\n        actionMsg = \"Merged with local .env\";\r\n      }\r\n\r\n      const finalString = parser.stringify(finalObj);\r\n      await storage.writeFile(rawPath, finalString);\r\n\r\n      console.log(chalk.green(`\\nSuccess! ${actionMsg}`));\r\n      console.log(\r\n        chalk.white(\"Keys in final .env: \") +\r\n          chalk.yellow(Object.keys(finalObj).length),\r\n      );\r\n    } catch (error: any) {\r\n      console.error(chalk.red(\"\\nFailed:\"), error.message);\r\n      process.exit(1);\r\n    }\r\n  });\r\n","import fs from \"fs-extra\";\r\nimport path from \"path\";\r\n\r\n/**\r\n * Checks if the .env files exists.\r\n * @return True if the file exists, false otherwise\r\n */\r\nexport async function exists(filePath: string): Promise<boolean> {\r\n  return fs.pathExists(filePath);\r\n}\r\n\r\n/**\r\n * Reads the .env files.\r\n * @return The content of the raw .env file\r\n */\r\nexport async function readFile(filePath: string): Promise<string> {\r\n  if (!(await exists(filePath))) {\r\n    throw new Error(`File not found: ${filePath}`);\r\n  }\r\n  return fs.readFile(filePath, \"utf-8\");\r\n}\r\n\r\n/**\r\n * Writes data to the .env files.\r\n * @param content The content to write to the raw .env file\r\n * @return A promise that resolves when the write is complete\r\n */\r\nexport async function writeFile(\r\n  filePath: string,\r\n  content: string,\r\n): Promise<void> {\r\n  await fs.writeFile(filePath, content, \"utf-8\");\r\n}\r\n\r\n/**\r\n * Adds .env to .gitignore if it's missing.\r\n * This is a safety feature to prevent accidental commits.\r\n */\r\nexport async function addToGitIgnore(filePath: string): Promise<void> {\r\n  const gitignorePath = \".gitignore\";\r\n  const filename = path.basename(filePath);\r\n  const ignoreRule = `\\n${filename}`;\r\n\r\n  // Don't ignore encrypted files!\r\n  if (filename.endsWith(\".enc\")) return;\r\n\r\n  if (!(await fs.pathExists(gitignorePath))) {\r\n    await fs.writeFile(gitignorePath, `# Added by lazy-vault${ignoreRule}\\n`);\r\n    return;\r\n  }\r\n\r\n  const content = await fs.readFile(gitignorePath, \"utf-8\");\r\n  if (!content.includes(filename)) {\r\n    await fs.appendFile(gitignorePath, ignoreRule);\r\n  }\r\n}\r\n","import crypto from \"node:crypto\";\r\nimport argon2 from \"argon2\";\r\nimport { ALGORITHM, PROFILES, VERSION } from \"../constants\";\r\nimport type { EncryptedEnvelope, ProfileName } from \"../types\";\r\n\r\n/**\r\n * Encrypts a raw string using a password.\r\n * Format: salt:iv:authTag:cipherText\r\n * @param text The string to encrypt\r\n * @param password The password to use for encryption\r\n */\r\n\r\nexport async function encrypt(\r\n  text: string,\r\n  password: string,\r\n  profileName: ProfileName = \"light\",\r\n): Promise<string> {\r\n  const settings = PROFILES[profileName];\r\n\r\n  const salt = crypto.randomBytes(16);\r\n  const iv = crypto.randomBytes(16);\r\n\r\n  const key = await argon2.hash(password, {\r\n    type: argon2.argon2id,\r\n    salt: salt,\r\n    raw: true,\r\n    hashLength: 32,\r\n    timeCost: settings.timeCost,\r\n    memoryCost: settings.memoryCost,\r\n    parallelism: settings.parallelism,\r\n  });\r\n\r\n  const cipher = crypto.createCipheriv(ALGORITHM, key, iv);\r\n\r\n  const encrypted = Buffer.concat([\r\n    cipher.update(text, \"utf8\"),\r\n    cipher.final(),\r\n  ]);\r\n  const authTag = cipher.getAuthTag();\r\n\r\n  const envelope: EncryptedEnvelope = {\r\n    v: 2,\r\n    mode: \"password\",\r\n    profile: profileName,\r\n    ops: {\r\n      mem: settings.memoryCost,\r\n      time: settings.timeCost,\r\n      parallel: settings.parallelism,\r\n    },\r\n    salt: salt.toString(\"hex\"),\r\n    iv: iv.toString(\"hex\"),\r\n    tag: authTag.toString(\"hex\"),\r\n    data: encrypted.toString(\"hex\"),\r\n  };\r\n\r\n  key.fill(0);\r\n\r\n  return JSON.stringify(envelope, null, 2);\r\n}\r\n\r\n/** * Decrypts an encrypted string using a password.\r\n * @param encryptedText The encrypted string to decrypt\r\n * @param password The password to use for decryption\r\n * @return The decrypted string\r\n */\r\nexport async function decrypt(\r\n  content: string,\r\n  password: string,\r\n): Promise<string> {\r\n  try {\r\n    const envelope = JSON.parse(content) as EncryptedEnvelope;\r\n    const key = await argon2.hash(password, {\r\n      type: argon2.argon2id,\r\n      salt: Buffer.from(envelope.salt, \"hex\"),\r\n      raw: true,\r\n      hashLength: 32,\r\n      timeCost: envelope.ops.time,\r\n      memoryCost: envelope.ops.mem,\r\n      parallelism: envelope.ops.parallel,\r\n    });\r\n\r\n    const decipher = crypto.createDecipheriv(\r\n      ALGORITHM,\r\n      key,\r\n      Buffer.from(envelope.iv, \"hex\"),\r\n    );\r\n    decipher.setAuthTag(Buffer.from(envelope.tag, \"hex\"));\r\n\r\n    const decrypted = Buffer.concat([\r\n      decipher.update(Buffer.from(envelope.data, \"hex\")),\r\n      decipher.final(),\r\n    ]);\r\n\r\n    key.fill(0);\r\n\r\n    return decrypted.toString(\"utf8\");\r\n  } catch (error: any) {\r\n    throw new Error(`Decryption failed: ${error.message}`);\r\n  }\r\n}\r\n","export const ALGORITHM = \"aes-256-gcm\";\r\nexport const ENC_FILE = \".env.enc\";\r\nexport const RAW_FILE = \".env\";\r\nexport const VERSION = \"v1\";\r\nexport const CONFIG_FILE = \"lazy.config.json\";\r\n\r\nexport const PROFILES = {\r\n  // Good for CI/CD and frequent locking\r\n  light: { timeCost: 3, memoryCost: 64 * 1024, parallelism: 1 },\r\n  // Good for long-term storage or high-value keys\r\n  heavy: { timeCost: 10, memoryCost: 256 * 1024, parallelism: 4 },\r\n};\r\n","import type { EnvObject } from \"..\";\r\n\r\n/**\r\n * Parses a raw .env string into a Key-Value object.\r\n * Ignores comments and empty lines.\r\n * @param content The raw .env string\r\n * @return An object representing the parsed .env variables\r\n */\r\n\r\nexport function parse(content: string): EnvObject {\r\n  const result: EnvObject = {};\r\n  const lines = content.split(/\\r?\\n/);\r\n\r\n  for (const line of lines) {\r\n    const trimmedLine = line.trim();\r\n    if (trimmedLine === \"\" || trimmedLine.startsWith(\"#\")) {\r\n      continue;\r\n    }\r\n\r\n    if (!trimmedLine.includes(\"=\")) {\r\n      throw new Error(`Invalid env line (missing '='): ${line}`);\r\n    }\r\n\r\n    const [rawKey, ...valueParts] = trimmedLine.split(\"=\") as [string, any];\r\n\r\n    const key = rawKey.trim();\r\n    if (!key) {\r\n      throw new Error(`Invalid env line (empty key): ${line}`);\r\n    }\r\n\r\n    const value = valueParts.join(\"=\");\r\n    const cleanValue = value.replace(/^['\"](.*)['\"]$/, \"$1\").trim();\r\n\r\n    result[key] = cleanValue;\r\n  }\r\n\r\n  return result;\r\n}\r\n\r\n/**\r\n * Stringifies a Key-Value object into a raw .env string.\r\n * @param envObject The object representing .env variables\r\n * @return A raw .env string\r\n */\r\nexport function stringify(envObject: EnvObject): string {\r\n  let result = \"\";\r\n  for (const [key, value] of Object.entries(envObject)) {\r\n    result += `${key}=${value}\\n`;\r\n  }\r\n\r\n  return result.trimEnd();\r\n}\r\n\r\n/**\r\n * Merge logic\r\n * Remote keys override local keys if they exist\r\n * Unique keys from both are preserved\r\n * @param local The local .env object\r\n * @param remote The remote .env object\r\n */\r\n\r\nexport function merge(local: EnvObject, remote: EnvObject): EnvObject {\r\n  return { ...local, ...remote };\r\n}\r\n","import fs from \"fs-extra\";\r\nimport path from \"path\";\r\nimport type { ConfigMap, ENVConfig } from \"../types\";\r\nimport type { EnvObject } from \"..\";\r\nimport { CONFIG_FILE } from \"../constants\";\r\n\r\nconst DEFAULTS: ENVConfig = {\r\n  source: \".env\",\r\n  output: \".env.env\",\r\n  security: \"light\",\r\n};\r\n\r\nexport async function loadConfig(\r\n  envName: string = \"default\",\r\n): Promise<ENVConfig> {\r\n  if (!(await fs.pathExists(CONFIG_FILE))) {\r\n    return DEFAULTS;\r\n  }\r\n\r\n  try {\r\n    const raw = await fs.readFile(CONFIG_FILE, \"utf-8\");\r\n    const config = JSON.parse(raw) as ConfigMap;\r\n\r\n    if (!config[envName]) {\r\n      if (envName === \"default\") return DEFAULTS;\r\n      throw new Error(`Environment \"${envName}\" not found in ${CONFIG_FILE}`);\r\n    }\r\n\r\n    return { ...DEFAULTS, ...config[envName] };\r\n  } catch (error: any) {\r\n    throw new Error(`Failed to parse ${CONFIG_FILE}: ${error.message}`);\r\n  }\r\n}\r\n\r\nexport async function createTemplateConfig(): Promise<void> {\r\n  const template: ConfigMap = {\r\n    default: { source: \".env\", output: \".env.enc\", security: \"light\" },\r\n    production: {\r\n      source: \".env.prod\",\r\n      output: \".env.prod.enc\",\r\n      security: \"heavy\",\r\n    },\r\n  };\r\n  await fs.writeJson(CONFIG_FILE, template, { spaces: 2 });\r\n}\r\n","import { Command, Option } from \"commander\";\r\nimport chalk from \"chalk\";\r\nimport inquirer, { type Answers } from \"inquirer\";\r\n\r\nimport * as storage from \"../../lib/storage\";\r\nimport * as crypto from \"../../lib/crypto\";\r\nimport * as config from \"../../lib/config\";\r\n\r\nimport { parse } from \"../../lib/parser\";\r\nimport type { ProfileName } from \"../../types\";\r\n\r\nexport const lockCommand = new Command(\"lock\")\r\n  .description(\"Encrypts local .env file and saves it to env.enc\")\r\n  .argument(\"[env]\", \"Environment name (default, production, etc)\", \"default\")\r\n  .option(\"-i, --input <path>\", \"Override input path\")\r\n  .option(\"-o, --output <path>\", \"Override output path\")\r\n  .addOption(\r\n    new Option(\"-p, --profile <mode>\", \"Override security profile\").choices([\r\n      \"light\",\r\n      \"heavy\",\r\n    ]),\r\n  )\r\n  .action(async (envName, options) => {\r\n    try {\r\n      console.log(chalk.blue(\"Preparing to lock ...\"));\r\n\r\n      const fileConfig = await config.loadConfig(envName);\r\n      const sourcePath = options.input || fileConfig.source;\r\n      const outputPath = options.output || fileConfig.output;\r\n      const securityProfile = options.profile || fileConfig.security;\r\n\r\n      console.log(chalk.blue(`   Locking [${envName}]...`));\r\n      console.log(chalk.gray(`   Source: ${sourcePath}`));\r\n      console.log(chalk.gray(`   Target: ${outputPath}`));\r\n      console.log(chalk.gray(`   Profile: ${securityProfile}`));\r\n\r\n      if (!(await storage.exists(sourcePath))) {\r\n        console.error(chalk.red(`Error: File ${sourcePath} not found.`));\r\n        process.exit(1);\r\n      }\r\n\r\n      let password = process.env.LAZY_ENV_PASSWORD;\r\n      if (!password) {\r\n        const answers = await inquirer.prompt([\r\n          {\r\n            type: \"password\",\r\n            name: \"password\",\r\n            message: \"Enter Password to encrypt: \",\r\n            mask: \"*\",\r\n            validate: (input) =>\r\n              input.length > 0 ? true : \"Password cannot be empty.\",\r\n          },\r\n          {\r\n            type: \"password\",\r\n            name: \"passwordConfirm\",\r\n            message: \"Confirm password:\",\r\n            mask: \"*\",\r\n          },\r\n        ]);\r\n\r\n        if (answers.password !== answers.passwordConfirm) {\r\n          console.error(chalk.red(\"\\n Error: Passwords do not match.\"));\r\n          process.exit(1);\r\n        }\r\n\r\n        password = answers.password;\r\n      }\r\n\r\n      const rawContent = await storage.readFile(sourcePath);\r\n\r\n      const encryptedData = await crypto.encrypt(\r\n        rawContent,\r\n        password as string,\r\n        securityProfile as ProfileName,\r\n      );\r\n      await storage.writeFile(outputPath, encryptedData);\r\n      await storage.addToGitIgnore(sourcePath);\r\n\r\n      console.log(chalk.green(`\\nSuccess! Encrypted secrets to ${outputPath}`));\r\n      console.log(chalk.gray(\"You can now commit .env.enc to Git.\"));\r\n    } catch (error: any) {\r\n      console.error(chalk.red(\"\\n Failed:\"), error.message);\r\n      process.exit(1);\r\n    }\r\n  });\r\n","import { Command } from \"commander\";\r\nimport chalk from \"chalk\";\r\nimport * as config from \"../../lib/config\";\r\nimport fs from \"fs-extra\";\r\nimport { CONFIG_FILE } from \"../../constants\";\r\n\r\nexport const initCommand = new Command(\"init\")\r\n  .description(\"Creates a lazy.config.json file\")\r\n  .action(async () => {\r\n    if (await fs.pathExists(CONFIG_FILE)) {\r\n      console.log(chalk.yellow(\"lazy.config.json already exists.\"));\r\n      return;\r\n    }\r\n\r\n    await config.createTemplateConfig();\r\n    console.log(chalk.green(`\\nCreated ${CONFIG_FILE}`));\r\n    console.log(chalk.gray('You can now run \"lazy-env lock production\"'));\r\n  });\r\n"],"mappings":";;;AACA,SAAS,WAAAA,gBAAe;;;ACDxB,SAAS,eAAe;AACxB,OAAO,WAAW;AAClB,OAAO,cAAc;;;ACFrB,OAAO,QAAQ;AACf,OAAO,UAAU;AAMjB,eAAsB,OAAO,UAAoC;AAC/D,SAAO,GAAG,WAAW,QAAQ;AAC/B;AAMA,eAAsB,SAAS,UAAmC;AAChE,MAAI,CAAE,MAAM,OAAO,QAAQ,GAAI;AAC7B,UAAM,IAAI,MAAM,mBAAmB,QAAQ,EAAE;AAAA,EAC/C;AACA,SAAO,GAAG,SAAS,UAAU,OAAO;AACtC;AAOA,eAAsB,UACpB,UACA,SACe;AACf,QAAM,GAAG,UAAU,UAAU,SAAS,OAAO;AAC/C;AAMA,eAAsB,eAAe,UAAiC;AACpE,QAAM,gBAAgB;AACtB,QAAM,WAAW,KAAK,SAAS,QAAQ;AACvC,QAAM,aAAa;AAAA,EAAK,QAAQ;AAGhC,MAAI,SAAS,SAAS,MAAM,EAAG;AAE/B,MAAI,CAAE,MAAM,GAAG,WAAW,aAAa,GAAI;AACzC,UAAM,GAAG,UAAU,eAAe,wBAAwB,UAAU;AAAA,CAAI;AACxE;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,GAAG,SAAS,eAAe,OAAO;AACxD,MAAI,CAAC,QAAQ,SAAS,QAAQ,GAAG;AAC/B,UAAM,GAAG,WAAW,eAAe,UAAU;AAAA,EAC/C;AACF;;;ACvDA,OAAO,YAAY;AACnB,OAAO,YAAY;;;ACDZ,IAAM,YAAY;AAIlB,IAAM,cAAc;AAEpB,IAAM,WAAW;AAAA;AAAA,EAEtB,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,MAAM,aAAa,EAAE;AAAA;AAAA,EAE5D,OAAO,EAAE,UAAU,IAAI,YAAY,MAAM,MAAM,aAAa,EAAE;AAChE;;;ADCA,eAAsB,QACpB,MACA,UACA,cAA2B,SACV;AACjB,QAAM,WAAW,SAAS,WAAW;AAErC,QAAM,OAAO,OAAO,YAAY,EAAE;AAClC,QAAM,KAAK,OAAO,YAAY,EAAE;AAEhC,QAAM,MAAM,MAAM,OAAO,KAAK,UAAU;AAAA,IACtC,MAAM,OAAO;AAAA,IACb;AAAA,IACA,KAAK;AAAA,IACL,YAAY;AAAA,IACZ,UAAU,SAAS;AAAA,IACnB,YAAY,SAAS;AAAA,IACrB,aAAa,SAAS;AAAA,EACxB,CAAC;AAED,QAAM,SAAS,OAAO,eAAe,WAAW,KAAK,EAAE;AAEvD,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,OAAO,OAAO,MAAM,MAAM;AAAA,IAC1B,OAAO,MAAM;AAAA,EACf,CAAC;AACD,QAAM,UAAU,OAAO,WAAW;AAElC,QAAM,WAA8B;AAAA,IAClC,GAAG;AAAA,IACH,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,MACH,KAAK,SAAS;AAAA,MACd,MAAM,SAAS;AAAA,MACf,UAAU,SAAS;AAAA,IACrB;AAAA,IACA,MAAM,KAAK,SAAS,KAAK;AAAA,IACzB,IAAI,GAAG,SAAS,KAAK;AAAA,IACrB,KAAK,QAAQ,SAAS,KAAK;AAAA,IAC3B,MAAM,UAAU,SAAS,KAAK;AAAA,EAChC;AAEA,MAAI,KAAK,CAAC;AAEV,SAAO,KAAK,UAAU,UAAU,MAAM,CAAC;AACzC;AAOA,eAAsB,QACpB,SACA,UACiB;AACjB,MAAI;AACF,UAAM,WAAW,KAAK,MAAM,OAAO;AACnC,UAAM,MAAM,MAAM,OAAO,KAAK,UAAU;AAAA,MACtC,MAAM,OAAO;AAAA,MACb,MAAM,OAAO,KAAK,SAAS,MAAM,KAAK;AAAA,MACtC,KAAK;AAAA,MACL,YAAY;AAAA,MACZ,UAAU,SAAS,IAAI;AAAA,MACvB,YAAY,SAAS,IAAI;AAAA,MACzB,aAAa,SAAS,IAAI;AAAA,IAC5B,CAAC;AAED,UAAM,WAAW,OAAO;AAAA,MACtB;AAAA,MACA;AAAA,MACA,OAAO,KAAK,SAAS,IAAI,KAAK;AAAA,IAChC;AACA,aAAS,WAAW,OAAO,KAAK,SAAS,KAAK,KAAK,CAAC;AAEpD,UAAM,YAAY,OAAO,OAAO;AAAA,MAC9B,SAAS,OAAO,OAAO,KAAK,SAAS,MAAM,KAAK,CAAC;AAAA,MACjD,SAAS,MAAM;AAAA,IACjB,CAAC;AAED,QAAI,KAAK,CAAC;AAEV,WAAO,UAAU,SAAS,MAAM;AAAA,EAClC,SAAS,OAAY;AACnB,UAAM,IAAI,MAAM,sBAAsB,MAAM,OAAO,EAAE;AAAA,EACvD;AACF;;;AE1FO,SAAS,MAAM,SAA4B;AAChD,QAAM,SAAoB,CAAC;AAC3B,QAAM,QAAQ,QAAQ,MAAM,OAAO;AAEnC,aAAW,QAAQ,OAAO;AACxB,UAAM,cAAc,KAAK,KAAK;AAC9B,QAAI,gBAAgB,MAAM,YAAY,WAAW,GAAG,GAAG;AACrD;AAAA,IACF;AAEA,QAAI,CAAC,YAAY,SAAS,GAAG,GAAG;AAC9B,YAAM,IAAI,MAAM,mCAAmC,IAAI,EAAE;AAAA,IAC3D;AAEA,UAAM,CAAC,QAAQ,GAAG,UAAU,IAAI,YAAY,MAAM,GAAG;AAErD,UAAM,MAAM,OAAO,KAAK;AACxB,QAAI,CAAC,KAAK;AACR,YAAM,IAAI,MAAM,iCAAiC,IAAI,EAAE;AAAA,IACzD;AAEA,UAAM,QAAQ,WAAW,KAAK,GAAG;AACjC,UAAM,aAAa,MAAM,QAAQ,kBAAkB,IAAI,EAAE,KAAK;AAE9D,WAAO,GAAG,IAAI;AAAA,EAChB;AAEA,SAAO;AACT;AAOO,SAAS,UAAU,WAA8B;AACtD,MAAI,SAAS;AACb,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,SAAS,GAAG;AACpD,cAAU,GAAG,GAAG,IAAI,KAAK;AAAA;AAAA,EAC3B;AAEA,SAAO,OAAO,QAAQ;AACxB;AAUO,SAAS,MAAM,OAAkB,QAA8B;AACpE,SAAO,EAAE,GAAG,OAAO,GAAG,OAAO;AAC/B;;;AC/DA,OAAOC,SAAQ;AACf,OAAiB;AAKjB,IAAM,WAAsB;AAAA,EAC1B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,UAAU;AACZ;AAEA,eAAsB,WACpB,UAAkB,WACE;AACpB,MAAI,CAAE,MAAMC,IAAG,WAAW,WAAW,GAAI;AACvC,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,MAAM,MAAMA,IAAG,SAAS,aAAa,OAAO;AAClD,UAAM,SAAS,KAAK,MAAM,GAAG;AAE7B,QAAI,CAAC,OAAO,OAAO,GAAG;AACpB,UAAI,YAAY,UAAW,QAAO;AAClC,YAAM,IAAI,MAAM,gBAAgB,OAAO,kBAAkB,WAAW,EAAE;AAAA,IACxE;AAEA,WAAO,EAAE,GAAG,UAAU,GAAG,OAAO,OAAO,EAAE;AAAA,EAC3C,SAAS,OAAY;AACnB,UAAM,IAAI,MAAM,mBAAmB,WAAW,KAAK,MAAM,OAAO,EAAE;AAAA,EACpE;AACF;AAEA,eAAsB,uBAAsC;AAC1D,QAAM,WAAsB;AAAA,IAC1B,SAAS,EAAE,QAAQ,QAAQ,QAAQ,YAAY,UAAU,QAAQ;AAAA,IACjE,YAAY;AAAA,MACV,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,UAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAMA,IAAG,UAAU,aAAa,UAAU,EAAE,QAAQ,EAAE,CAAC;AACzD;;;ALnCO,IAAM,cAAc,IAAI,QAAQ,MAAM,EAC1C,YAAY,iDAAiD,EAC7D,SAAS,SAAS,oBAAoB,SAAS,EAC/C,OAAO,sBAAsB,8BAA8B,EAC3D,OAAO,uBAAuB,2BAA2B,EACzD,OAAO,OAAO,SAAS,YAAY;AAClC,MAAI;AACF,YAAQ,IAAI,MAAM,KAAK,sBAAsB,CAAC;AAE9C,UAAM,aAAa,MAAa,WAAW,OAAO;AAElD,UAAM,gBAAgB,QAAQ,SAAS,WAAW;AAClD,UAAM,UAAU,QAAQ,UAAU,WAAW;AAE7C,YAAQ,IAAI,MAAM,KAAK,eAAe,OAAO,MAAM,CAAC;AACpD,YAAQ,IAAI,MAAM,KAAK,0BAA0B,aAAa,EAAE,CAAC;AACjE,YAAQ,IAAI,MAAM,KAAK,0BAA0B,OAAO,EAAE,CAAC;AAE3D,QAAI,CAAE,MAAc,OAAO,aAAa,GAAI;AAC1C,cAAQ,MAAM,MAAM,IAAI,eAAe,aAAa,aAAa,CAAC;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,WAAW,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU;AACb,YAAM,UAAU,MAAM,SAAS,OAAO;AAAA,QACpC;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QACR;AAAA,MACF,CAAC;AAED,iBAAW,QAAQ;AAAA,IACrB,OAAO;AACL,cAAQ,IAAI,MAAM,OAAO,wCAAwC,CAAC;AAAA,IACpE;AAEA,UAAM,mBAAmB,MAAc,SAAS,aAAa;AAC7D,QAAI,eAAe;AAEnB,QAAI;AACF,qBAAe,MAAa;AAAA,QAC1B;AAAA,QACA;AAAA,MACF;AAAA,IACF,SAAS,GAAG;AACV,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAEA,UAAM,YAAmB,MAAM,YAAY;AAE3C,QAAI,WAAW;AACf,QAAI,YAAY,eAAe,OAAO;AAEtC,QAAI,MAAc,OAAO,OAAO,GAAG;AACjC,cAAQ,IAAI,MAAM,KAAK,UAAU,OAAO,oBAAoB,CAAC;AAC7D,YAAM,WAAW,MAAc,SAAS,OAAO;AAC/C,YAAM,WAAkB,MAAM,QAAQ;AAGtC,iBAAkB,MAAM,UAAU,SAAS;AAC3C,kBAAY;AAAA,IACd;AAEA,UAAM,cAAqB,UAAU,QAAQ;AAC7C,UAAc,UAAU,SAAS,WAAW;AAE5C,YAAQ,IAAI,MAAM,MAAM;AAAA,WAAc,SAAS,EAAE,CAAC;AAClD,YAAQ;AAAA,MACN,MAAM,MAAM,sBAAsB,IAChC,MAAM,OAAO,OAAO,KAAK,QAAQ,EAAE,MAAM;AAAA,IAC7C;AAAA,EACF,SAAS,OAAY;AACnB,YAAQ,MAAM,MAAM,IAAI,WAAW,GAAG,MAAM,OAAO;AACnD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;;;AMvFH,SAAS,WAAAC,UAAS,cAAc;AAChC,OAAOC,YAAW;AAClB,OAAOC,eAAgC;AAShC,IAAM,cAAc,IAAIC,SAAQ,MAAM,EAC1C,YAAY,kDAAkD,EAC9D,SAAS,SAAS,+CAA+C,SAAS,EAC1E,OAAO,sBAAsB,qBAAqB,EAClD,OAAO,uBAAuB,sBAAsB,EACpD;AAAA,EACC,IAAI,OAAO,wBAAwB,2BAA2B,EAAE,QAAQ;AAAA,IACtE;AAAA,IACA;AAAA,EACF,CAAC;AACH,EACC,OAAO,OAAO,SAAS,YAAY;AAClC,MAAI;AACF,YAAQ,IAAIC,OAAM,KAAK,uBAAuB,CAAC;AAE/C,UAAM,aAAa,MAAa,WAAW,OAAO;AAClD,UAAM,aAAa,QAAQ,SAAS,WAAW;AAC/C,UAAM,aAAa,QAAQ,UAAU,WAAW;AAChD,UAAM,kBAAkB,QAAQ,WAAW,WAAW;AAEtD,YAAQ,IAAIA,OAAM,KAAK,eAAe,OAAO,MAAM,CAAC;AACpD,YAAQ,IAAIA,OAAM,KAAK,cAAc,UAAU,EAAE,CAAC;AAClD,YAAQ,IAAIA,OAAM,KAAK,cAAc,UAAU,EAAE,CAAC;AAClD,YAAQ,IAAIA,OAAM,KAAK,eAAe,eAAe,EAAE,CAAC;AAExD,QAAI,CAAE,MAAc,OAAO,UAAU,GAAI;AACvC,cAAQ,MAAMA,OAAM,IAAI,eAAe,UAAU,aAAa,CAAC;AAC/D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,WAAW,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU;AACb,YAAM,UAAU,MAAMC,UAAS,OAAO;AAAA,QACpC;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,UACN,UAAU,CAAC,UACT,MAAM,SAAS,IAAI,OAAO;AAAA,QAC9B;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QACR;AAAA,MACF,CAAC;AAED,UAAI,QAAQ,aAAa,QAAQ,iBAAiB;AAChD,gBAAQ,MAAMD,OAAM,IAAI,mCAAmC,CAAC;AAC5D,gBAAQ,KAAK,CAAC;AAAA,MAChB;AAEA,iBAAW,QAAQ;AAAA,IACrB;AAEA,UAAM,aAAa,MAAc,SAAS,UAAU;AAEpD,UAAM,gBAAgB,MAAa;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAc,UAAU,YAAY,aAAa;AACjD,UAAc,eAAe,UAAU;AAEvC,YAAQ,IAAIA,OAAM,MAAM;AAAA,gCAAmC,UAAU,EAAE,CAAC;AACxE,YAAQ,IAAIA,OAAM,KAAK,qCAAqC,CAAC;AAAA,EAC/D,SAAS,OAAY;AACnB,YAAQ,MAAMA,OAAM,IAAI,YAAY,GAAG,MAAM,OAAO;AACpD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;;;APhFH,OAAOE,YAAW;;;AQJlB,SAAS,WAAAC,gBAAe;AACxB,OAAOC,YAAW;AAElB,OAAOC,SAAQ;AAGR,IAAM,cAAc,IAAIC,SAAQ,MAAM,EAC1C,YAAY,iCAAiC,EAC7C,OAAO,YAAY;AAClB,MAAI,MAAMC,IAAG,WAAW,WAAW,GAAG;AACpC,YAAQ,IAAIC,OAAM,OAAO,kCAAkC,CAAC;AAC5D;AAAA,EACF;AAEA,QAAa,qBAAqB;AAClC,UAAQ,IAAIA,OAAM,MAAM;AAAA,UAAa,WAAW,EAAE,CAAC;AACnD,UAAQ,IAAIA,OAAM,KAAK,4CAA4C,CAAC;AACtE,CAAC;;;ARVH,IAAM,UAAU,IAAIC,SAAQ;AAE5B,QACG,KAAK,YAAY,EACjB,YAAY,4DAA4D,EACxE,QAAQ,OAAO;AAElB,QAAQ,WAAW,WAAW;AAC9B,QAAQ,WAAW,WAAW;AAC9B,QAAQ,WAAW,WAAW;AAE9B,QAAQ,GAAG,aAAa,MAAM;AAC5B,UAAQ;AAAA,IACNC,OAAM;AAAA,MACJ;AAAA,IACF;AAAA,IACA,QAAQ,KAAK,KAAK,GAAG;AAAA,EACvB;AACA,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,QAAQ,MAAM,QAAQ,IAAI;AAE1B,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,QAAQ;AACjC,UAAQ,WAAW;AACrB;","names":["Command","fs","fs","Command","chalk","inquirer","Command","chalk","inquirer","chalk","Command","chalk","fs","Command","fs","chalk","Command","chalk"]}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "lazy-vault",
-  "version": "1.0.0",
+  "version": "2.0.0",
   "description": "A simple CLI for encrypting and syncing .env files safely in Git",
   "license": "MIT",
   "author": "ghost",
   "type": "module",
   "bin": {
-    "lazy-env": "./dist/cli/bin.js"
+    "lazy-vault": "./dist/cli/bin.js"
   },
   "engines": {
     "node": ">=18"
@@ -24,12 +24,12 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/Ghunter254/lazy-env"
+    "url": "https://github.com/Ghunter254/lazy-vault"
   },
   "bugs": {
-    "url": "https://github.com/Ghunter254/lazy-env/issues"
+    "url": "https://github.com/Ghunter254/lazy-vault/issues"
   },
-  "homepage": "https://github.com/Ghunter254/lazy-env#readme",
+  "homepage": "https://github.com/Ghunter254/lazy-vault#readme",
   "keywords": [
     "env",
     "dotenv",