raqeb-cli 1.0.0

package/README.md

@@ -0,0 +1,134 @@
+# raqeb-cli
+
+Official Raqeb CLI - Command-line tool for Database PAM and Developer Secrets Management.
+
+## Installation
+
+### Via npm (Recommended)
+
+```bash
+npm install -g raqeb-cli
+```
+
+### Via yarn
+
+```bash
+yarn global add raqeb-cli
+```
+
+## Quick Start
+
+### 1. Login
+
+```bash
+raqeb login --api-key sa_your_api_key_here
+```
+
+### 2. Get Secret
+
+```bash
+raqeb secrets get <secret-id>
+```
+
+### 3. Get Database Credentials
+
+```bash
+raqeb db connect <database-id> --ttl 4 --access-level read-only
+```
+
+### 4. Revoke Credentials
+
+```bash
+raqeb db revoke <lease-id>
+```
+
+## Commands
+
+### Authentication
+
+```bash
+raqeb login --api-key <key>
+```
+
+### Secrets Management
+
+```bash
+# Get secret value
+raqeb secrets get <secret-id>
+```
+
+### Database Access
+
+```bash
+# Get temporary credentials
+raqeb db connect <database-id> [options]
+  --ttl <hours>              Time to live (default: 4)
+  --access-level <level>     read-only, read-write, or admin (default: read-only)
+
+# Revoke credentials
+raqeb db revoke <lease-id>
+```
+
+### API Keys
+
+```bash
+# List API keys
+raqeb keys list
+
+# Create new API key
+raqeb keys create <name> [--scopes <scopes>]
+
+# Delete API key
+raqeb keys delete <key-id>
+```
+
+## Configuration
+
+Configuration is stored in `~/.raqeb/config.json`
+
+```json
+{
+  "base_url": "https://app.raqeb.cloud/api/v1",
+  "api_key": "sa_your_api_key"
+}
+```
+
+## Examples
+
+### CI/CD Integration
+
+```bash
+#!/bin/bash
+# Get database credentials for deployment
+
+# Login (use environment variable)
+raqeb login --api-key $RAQEB_API_KEY
+
+# Get temporary credentials
+raqeb db connect prod-mysql-db --ttl 1 --access-level read-write
+
+# ... your deployment script ...
+
+# Revoke when done
+raqeb db revoke $LEASE_ID
+```
+
+### Retrieve Application Secrets
+
+```bash
+# Get API key from secrets vault
+raqeb secrets get api-key-prod
+
+# Use in your application
+export EXTERNAL_API_KEY=$(raqeb secrets get api-key-prod | grep "Value:" | cut -d' ' -f2)
+```
+
+## License
+
+MIT
+
+## Support
+
+- Documentation: https://docs.raqeb.cloud
+- Email: support@raqeb.cloud
+- GitHub: https://github.com/raqeb/cli

package/bin/raqeb.js

@@ -0,0 +1,212 @@
+#!/usr/bin/env node
+
+const { program } = require('commander');
+const axios = require('axios');
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const chalk = require('chalk');
+
+const CONFIG_DIR = path.join(os.homedir(), '.raqeb');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+
+// Ensure config directory exists
+if (!fs.existsSync(CONFIG_DIR)) {
+  fs.mkdirSync(CONFIG_DIR, { recursive: true });
+}
+
+// Load config
+function loadConfig() {
+  if (fs.existsSync(CONFIG_FILE)) {
+    return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+  }
+  return { base_url: 'https://app.raqeb.cloud/api/v1' };
+}
+
+// Save config
+function saveConfig(config) {
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+  fs.chmodSync(CONFIG_FILE, 0o600);
+}
+
+// Get API client
+function getClient() {
+  const config = loadConfig();
+  if (!config.api_key) {
+    console.error(chalk.red('❌ Not authenticated. Run: raqeb login --api-key <key>'));
+    process.exit(1);
+  }
+  return axios.create({
+    baseURL: config.base_url,
+    headers: {
+      'Authorization': `Bearer ${config.api_key}`,
+      'Content-Type': 'application/json'
+    }
+  });
+}
+
+// Login command
+program
+  .command('login')
+  .description('Authenticate with API key')
+  .requiredOption('--api-key <key>', 'Your API key')
+  .action((options) => {
+    const config = loadConfig();
+    config.api_key = options.apiKey;
+    saveConfig(config);
+    console.log(chalk.green('✅ Successfully authenticated!'));
+    console.log(chalk.gray(`Config saved to: ${CONFIG_FILE}`));
+  });
+
+// Secrets commands
+const secrets = program.command('secrets').description('Manage secrets');
+
+secrets
+  .command('get <secret-id>')
+  .description('Get secret value')
+  .action(async (secretId) => {
+    try {
+      const client = getClient();
+      const response = await client.post('/service-accounts/secrets/retrieve', null, {
+        params: { secret_id: secretId }
+      });
+      const data = response.data;
+      console.log(chalk.cyan(`\n🔐 Secret: ${data.name}`));
+      console.log(chalk.white(`Value: ${data.value}`));
+      console.log(chalk.gray(`Retrieved at: ${data.retrieved_at}`));
+    } catch (error) {
+      console.error(chalk.red(`❌ Error: ${error.response?.data?.detail || error.message}`));
+      process.exit(1);
+    }
+  });
+
+// Database commands
+const db = program.command('db').description('Manage database access');
+
+db
+  .command('connect <database-id>')
+  .description('Get temporary database credentials')
+  .option('--ttl <hours>', 'Time to live in hours', '4')
+  .option('--access-level <level>', 'Access level (read-only, read-write, admin)', 'read-only')
+  .action(async (databaseId, options) => {
+    try {
+      const client = getClient();
+      const response = await client.post('/service-accounts/databases/dynamic-credentials', {
+        database_id: databaseId,
+        ttl_hours: parseInt(options.ttl),
+        access_level: options.accessLevel
+      });
+      const data = response.data;
+      
+      console.log(chalk.cyan('\n🔑 Temporary Database Credentials'));
+      console.log(chalk.gray('━'.repeat(40)));
+      console.log(chalk.white(`Username: ${data.username}`));
+      console.log(chalk.white(`Password: ${data.password}`));
+      console.log(chalk.white(`Access Level: ${data.access_level}`));
+      console.log(chalk.white(`Expires: ${data.expires_at}`));
+      console.log(chalk.white(`Lease ID: ${data.lease_id}`));
+      console.log(chalk.yellow(`\n⚠️  These credentials will expire in ${options.ttl} hours`));
+      console.log(chalk.gray(`To revoke early: raqeb db revoke ${data.lease_id}`));
+    } catch (error) {
+      console.error(chalk.red(`❌ Error: ${error.response?.data?.detail || error.message}`));
+      process.exit(1);
+    }
+  });
+
+db
+  .command('revoke <lease-id>')
+  .description('Revoke database credentials')
+  .action(async (leaseId) => {
+    try {
+      const client = getClient();
+      await client.post(`/service-accounts/leases/${leaseId}/revoke`);
+      console.log(chalk.green(`✅ Lease ${leaseId} revoked successfully`));
+    } catch (error) {
+      console.error(chalk.red(`❌ Error: ${error.response?.data?.detail || error.message}`));
+      process.exit(1);
+    }
+  });
+
+// API Keys commands
+const keys = program.command('keys').description('Manage API keys');
+
+keys
+  .command('list')
+  .description('List API keys')
+  .action(async () => {
+    try {
+      const client = getClient();
+      const response = await client.get('/service-accounts/api-keys');
+      const apiKeys = response.data;
+      
+      if (apiKeys.length === 0) {
+        console.log(chalk.yellow('No API keys found'));
+        return;
+      }
+      
+      console.log(chalk.cyan(`\n📋 API Keys (${apiKeys.length})`));
+      console.log(chalk.gray('━'.repeat(40)));
+      
+      apiKeys.forEach(key => {
+        const status = key.is_active ? chalk.green('🟢 Active') : chalk.red('🔴 Inactive');
+        console.log(chalk.white(`\n${key.name}`));
+        console.log(chalk.gray(`  ID: ${key.id}`));
+        console.log(chalk.gray(`  Prefix: ${key.key_prefix}...`));
+        console.log(`  Status: ${status}`);
+        console.log(chalk.gray(`  Created: ${key.created_at}`));
+        if (key.last_used_at) {
+          console.log(chalk.gray(`  Last Used: ${key.last_used_at}`));
+        }
+      });
+    } catch (error) {
+      console.error(chalk.red(`❌ Error: ${error.response?.data?.detail || error.message}`));
+      process.exit(1);
+    }
+  });
+
+keys
+  .command('create <name>')
+  .description('Create new API key')
+  .option('--scopes <scopes>', 'Comma-separated scopes', 'secrets:read,databases:read')
+  .action(async (name, options) => {
+    try {
+      const client = getClient();
+      const response = await client.post('/service-accounts/api-keys', {
+        name: name,
+        scopes: options.scopes.split(',')
+      });
+      const data = response.data;
+      
+      console.log(chalk.green('\n✅ API Key Created!'));
+      console.log(chalk.gray('━'.repeat(40)));
+      console.log(chalk.white(`Name: ${data.name}`));
+      console.log(chalk.white(`API Key: ${data.api_key}`));
+      console.log(chalk.yellow('\n⚠️  IMPORTANT: Save this key now! It won\'t be shown again.'));
+      console.log(chalk.gray(`\nTo use this key:`));
+      console.log(chalk.gray(`  raqeb login --api-key ${data.api_key}`));
+    } catch (error) {
+      console.error(chalk.red(`❌ Error: ${error.response?.data?.detail || error.message}`));
+      process.exit(1);
+    }
+  });
+
+keys
+  .command('delete <key-id>')
+  .description('Delete API key')
+  .action(async (keyId) => {
+    try {
+      const client = getClient();
+      await client.delete(`/service-accounts/api-keys/${keyId}`);
+      console.log(chalk.green(`✅ API key ${keyId} deleted successfully`));
+    } catch (error) {
+      console.error(chalk.red(`❌ Error: ${error.response?.data?.detail || error.message}`));
+      process.exit(1);
+    }
+  });
+
+program
+  .name('raqeb')
+  .description('Raqeb CLI - Database PAM and Secrets Management')
+  .version('1.0.0');
+
+program.parse();

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "raqeb-cli",
+  "version": "1.0.0",
+  "description": "Raqeb CLI - Command-line tool for Database PAM and Developer Secrets Management",
+  "main": "index.js",
+  "bin": {
+    "raqeb": "bin/raqeb.js"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "raqeb",
+    "pam",
+    "database",
+    "secrets",
+    "cli",
+    "security",
+    "credentials"
+  ],
+  "author": "Raqeb",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/raqeb/cli"
+  },
+  "dependencies": {
+    "axios": "^1.6.0",
+    "commander": "^11.0.0",
+    "chalk": "^4.1.2",
+    "ora": "^5.4.1",
+    "inquirer": "^8.2.5"
+  },
+  "engines": {
+    "node": ">=14.0.0"
+  },
+  "files": [
+    "bin",
+    "lib",
+    "README.md",
+    "LICENSE"
+  ]
+}