npm - secretcarousel - Versions diffs - 1.0.3 → 2.1.0 - Mend

secretcarousel 1.0.3 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (33) hide show

package/LICENSE +74 -14
package/README.md +85 -37
package/bin/cli.js +7 -83
package/dist/api.js +1 -0
package/dist/commands/audit.js +1 -0
package/dist/commands/auth.js +1 -0
package/dist/commands/backup.js +1 -0
package/dist/commands/claim.js +1 -0
package/dist/commands/env.js +1 -0
package/dist/commands/partner.js +1 -0
package/dist/commands/rotate.js +1 -0
package/dist/commands/secret.js +1 -0
package/dist/commands/secrets.js +1 -0
package/dist/commands/share.js +1 -0
package/dist/commands/signup.js +1 -0
package/dist/commands/status.js +1 -0
package/dist/config.js +1 -0
package/dist/format.js +1 -0
package/dist/main.js +1 -0
package/package.json +7 -3
package/commands/audit-export.js +0 -12
package/commands/backup-create.js +0 -13
package/commands/config.js +0 -20
package/commands/env-export.js +0 -27
package/commands/env-promote.js +0 -36
package/commands/rotate.js +0 -7
package/commands/secrets-create.js +0 -16
package/commands/secrets-delete.js +0 -7
package/commands/secrets-get.js +0 -7
package/commands/secrets-list.js +0 -12
package/commands/signup.js +0 -32
package/lib/api.js +0 -53
package/lib/config.js +0 -49

package/LICENSE CHANGED Viewed

@@ -2,26 +2,86 @@ SecretCarousel Software License
 Copyright (c) 2026 Tyga.Cloud Ltd
 Company number 14643275, England and Wales
+Registered office: Ground Floor, Unit 2 Mallard Court, Mallard Way,
+Crewe Business Park, Crewe, Cheshire, England, CW1 6ZQ
-Permission is granted to use this software in connection with the
-SecretCarousel service (https://secretcarousel.com) subject to the
-following conditions:
+1. GRANT OF LICENSE
-1. You may install, copy, and use this software solely to interact with
-   the SecretCarousel API using a valid API key (prefix: sc_).
+   Permission is granted to install and use this software solely to
+   interact with the SecretCarousel service (https://secretcarousel.com)
+   using a valid API key issued by SecretCarousel (prefix: sc_).
-2. You may NOT modify, reverse-engineer, decompile, or create derivative
-   works of this software.
+2. RESTRICTIONS
-3. You may NOT redistribute this software outside of the npm package
-   registry or the official SecretCarousel documentation.
+   You may NOT:
+   (a) modify, adapt, translate, or create derivative works of this
+       software;
+   (b) reverse-engineer, decompile, disassemble, or otherwise attempt
+       to derive the source code of this software;
+   (c) redistribute this software outside of the npm package registry
+       (https://www.npmjs.com/package/secretcarousel);
+   (d) sublicense, sell, lease, or otherwise transfer this software
+       to third parties;
+   (e) remove or alter any proprietary notices, labels, or marks.
-4. This software is provided "AS IS" without warranty of any kind,
-   express or implied, including but not limited to warranties of
-   merchantability, fitness for a particular purpose, and noninfringement.
+3. DISCLAIMER OF WARRANTIES
-5. In no event shall Tyga.Cloud Ltd be liable for any claim, damages, or
-   other liability arising from the use of this software.
+   THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
+   EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND
+   NONINFRINGEMENT. TYGA.CLOUD LTD DOES NOT WARRANT THAT THE SOFTWARE
+   WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.
+4. LIMITATION OF LIABILITY
+   IN NO EVENT SHALL TYGA.CLOUD LTD, ITS DIRECTORS, OFFICERS,
+   EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL,
+   SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT
+   LIMITED TO LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER
+   INTANGIBLE LOSSES, ARISING OUT OF OR IN CONNECTION WITH YOUR USE
+   OF THIS SOFTWARE, WHETHER BASED ON WARRANTY, CONTRACT, TORT
+   (INCLUDING NEGLIGENCE), OR ANY OTHER LEGAL THEORY, EVEN IF
+   TYGA.CLOUD LTD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
+   DAMAGES.
+   THE TOTAL LIABILITY OF TYGA.CLOUD LTD SHALL NOT EXCEED THE
+   GREATER OF (A) THE AMOUNTS PAID BY YOU TO TYGA.CLOUD LTD IN
+   THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED
+   POUNDS STERLING (GBP 100).
+5. INDEMNIFICATION
+   You agree to indemnify, defend, and hold harmless Tyga.Cloud Ltd,
+   its directors, officers, employees, and agents from and against
+   any and all claims, damages, losses, liabilities, costs, and
+   expenses (including reasonable legal fees) arising out of or
+   relating to:
+   (a) your use of this software;
+   (b) your violation of this license;
+   (c) your violation of any applicable law or regulation;
+   (d) any data or content you store, transmit, or process using
+       the SecretCarousel service.
+6. DATA PROCESSING
+   Your use of this software may involve the transmission of data to
+   SecretCarousel servers. All data is encrypted in transit (TLS) and
+   at rest (AES-256-GCM). By using this software you acknowledge and
+   agree to the SecretCarousel Privacy Policy.
+7. TERMINATION
+   This license is effective until terminated. Tyga.Cloud Ltd may
+   terminate this license at any time if you fail to comply with any
+   term. Upon termination, you must cease all use and destroy all
+   copies of this software.
+8. GOVERNING LAW
+   This license shall be governed by and construed in accordance with
+   the laws of England and Wales. Any disputes arising under this
+   license shall be subject to the exclusive jurisdiction of the
+   courts of England and Wales.
 Terms of Service: https://secretcarousel.com/terms
 Privacy Policy: https://secretcarousel.com/privacy

package/README.md CHANGED Viewed

@@ -1,6 +1,6 @@
 # secretcarousel
-The agent-native secret vault. Store, rotate, and share secrets from any AI coding agent.
+The agent-first secret vault. Store, rotate, and share secrets from any coding agent.
 ## Install
@@ -11,79 +11,127 @@ npm install -g secretcarousel
 Or run directly:
 ```bash
-npx secretcarousel signup --tenant my-project
+npx secretcarousel signup my-project --local
 ```
 ## Quick Start
 ```bash
-# Self-provision (zero friction, instant API key)
-sc signup --tenant my-project
+# Self-provision a tenant (key saved to .sc/config.json)
+sc signup my-project --local
 # Store a secret (AES-256-GCM encrypted at rest)
-sc secrets:create --name DB_URL --value postgres://user:pass@host/db
+sc secret "DB_URL" "postgres://user:pass@host/db" -t database-credentials
-# Retrieve (decrypted on demand, access logged)
-sc secrets:get sec-abc123
+# Retrieve (decrypted on demand)
+sc secret show sec-abc123
+# List all secrets
+sc secrets
 # Export as .env
-sc env:export --environment production > .env
+sc env pull --env production > .env
 # Rotate immediately
 sc rotate sec-abc123
+# Share with another agent (time-limited link)
+sc share sec-abc123 --hours 1 --views 1
 ```
 ## Commands
+**Getting Started**
+| Command | Description |
+|---------|-------------|
+| `signup <tenant> [--local]` | Self-provision a tenant |
+| `login --key KEY [--local]` | Store API key |
+| `logout [--local]` | Clear config |
+| `me` | Show tenant info + plan + usage |
+| `config` | Show active config source |
+| `status` | Project overview |
+**Secrets**
+| Command | Description |
+|---------|-------------|
+| `secret "NAME" "VALUE" [-t TYPE]` | Create a secret |
+| `secret show <ID>` | Get decrypted value |
+| `secret update <ID> --value NEW` | Update (new version) |
+| `secret delete <ID>` | Delete |
+| `secrets [--type X] [--env X]` | List all |
+**Operations**
+| Command | Description |
+|---------|-------------|
+| `rotate <ID>` | Rotate now |
+| `rotate set <ID> --schedule "30d"` | Set rotation policy |
+| `share <ID> [--hours 1] [--views 1]` | Create share link |
+| `shares` | List active shares |
+| `claim "VALUE" --to T --contract C` | Create claim token |
+| `claim redeem <TOKEN>` | Claim a token |
+| `claims` | List claim tokens |
+**Environment**
 | Command | Description |
 |---------|-------------|
-| `signup` | Self-provision a tenant and get API key |
-| `config` | Set apiKey or baseUrl |
-| `secrets:list` | List secrets |
-| `secrets:get` | Get a secret value (decrypted) |
-| `secrets:create` | Create a secret |
-| `secrets:delete` | Delete a secret |
-| `env:export` | Export secrets as .env file |
-| `env:promote` | Promote secrets between environments |
-| `audit:export` | Export audit logs (CSV/JSON) |
-| `backup:create` | Create encrypted backup |
-| `rotate` | Rotate a secret immediately |
+| `env pull [--env production]` | Export as .env |
+| `env promote --from X --to Y` | Promote secrets |
+**Compliance**
+| Command | Description |
+|---------|-------------|
+| `audit [--action X] [--limit N]` | Query audit trail |
+| `audit export [--format csv]` | Export audit log |
+| `backup [--name X]` | Create encrypted backup |
+| `backups` | List backups |
 ## Configuration
-Environment variables (recommended for agents):
+Config priority (first match wins):
+1. `--key` flag (inline)
+2. `SC_API_KEY` environment variable
+3. `.sc/config.json` (local project)
+4. `~/.secretcarousel/config.json` (global)
 ```bash
+# Environment variable (recommended for CI/agents)
 export SC_API_KEY=sc_free_my_project_a1b2c3...
-export SC_BASE_URL=https://secretcarousel.com  # optional, this is the default
+# Or store permanently
+sc login --key sc_free_my_project_a1b2c3...
+# Per-project config (auto-loaded, add .sc/ to .gitignore)
+sc login --key sc_free_... --local
 ```
-Or save permanently:
+## Output
+Human-readable output by default. Add `--json` for structured JSON:
 ```bash
-sc config apiKey sc_free_my_project_a1b2c3...
-sc config baseUrl https://secretcarousel.com
+sc secrets --json    # JSON array
+sc me --json         # JSON object
 ```
-Config file: `~/.secretcarousel/config.json`
 ## Features
-- **Agent-native** — self-signup via API, no dashboard required
-- **AES-256-GCM** — every secret encrypted at rest with unique keys
-- **Zero dependencies** — uses Node.js 18+ built-in fetch
-- **Versioning** — automatic version history on every update
-- **Rotation** — cron-based or on-demand with webhook notifications
-- **Sharing** — time-limited, view-limited share links with passphrase protection
-- **Audit trail** — every operation logged with full context
-- **Claim tokens** — cross-agent secret exchange via Buggazi contracts
+- AES-256-GCM encrypted storage with unique keys per secret
+- Automatic version history on every update
+- Cron-based or on-demand secret rotation
+- Time-limited, view-limited share links with passphrase protection
+- Cross-agent secret exchange via Buggazi claim tokens
+- Immutable audit trail with CSV/JSON export
+- Encrypted backups with per-backup keys
+- Zero dependencies (Node.js 18+ built-in fetch)
 ## Links
-- Quick Start: https://secretcarousel.com/api
+- Quickstart: https://secretcarousel.com/docs/quickstart.html
+- API Reference: https://secretcarousel.com/api
 - Pricing: https://secretcarousel.com/#pricing
-- Status: https://secretcarousel.com/health
 ## License
-Proprietary — Tyga.Cloud Ltd. See LICENSE file.
+Proprietary. Copyright (c) 2026 Tyga.Cloud Ltd (Company No. 14643275).
+See LICENSE file for full terms including indemnification and liability provisions.

package/bin/cli.js CHANGED Viewed

@@ -1,86 +1,10 @@
 #!/usr/bin/env node
-const config = require('../lib/config');
-const COMMANDS = {
-  'signup':         '../commands/signup',
-  'config':         '../commands/config',
-  'secrets:list':   '../commands/secrets-list',
-  'secrets:get':    '../commands/secrets-get',
-  'secrets:create': '../commands/secrets-create',
-  'secrets:delete': '../commands/secrets-delete',
-  'env:export':     '../commands/env-export',
-  'env:promote':    '../commands/env-promote',
-  'audit:export':   '../commands/audit-export',
-  'backup:create':  '../commands/backup-create',
-  'rotate':         '../commands/rotate'
-};
-function usage() {
-  console.log(`
-SecretCarousel CLI v1.0.0 — The Agent-Native Secret Vault
-Usage: sc <command> [options]
-Getting Started:
-  signup            Self-provision a tenant (zero friction)
-  config            Set apiKey or baseUrl
-Secrets:
-  secrets:list      List secrets
-  secrets:get       Get a secret value (decrypted)
-  secrets:create    Create a secret (AES-256-GCM encrypted)
-  secrets:delete    Delete a secret
-Environment:
-  env:export        Export secrets as .env file
-  env:promote       Promote secrets between environments
-Operations:
-  audit:export      Export audit logs (CSV/JSON)
-  backup:create     Create encrypted backup
-  rotate            Rotate a secret immediately
-Options:
-  --help            Show this help message
-Environment Variables:
-  SC_API_KEY        API key (overrides config file)
-  SC_BASE_URL       Base URL (default: https://secretcarousel.com)
-Quick Start:
-  $ npx secretcarousel signup --tenant my-project
-  $ sc secrets:create --name DB_URL --value postgres://...
-  $ sc secrets:get sec-abc123
-Config: ${config.CONFIG_FILE}
-Docs:   https://secretcarousel.com/api
-`);
-}
-async function main() {
-  const args = process.argv.slice(2);
-  if (args.length === 0 || args.includes('--help') || args.includes('-h')) {
-    usage();
-    process.exit(0);
-  }
-  const command = args[0];
-  if (!COMMANDS[command]) {
-    console.error(`Unknown command: ${command}\n`);
-    usage();
-    process.exit(1);
-  }
-  const handler = require(COMMANDS[command]);
-  try {
-    await handler(args.slice(1));
-  } catch (error) {
-    console.error(`Error: ${error.message}`);
-    process.exit(1);
+try {
+  require('../dist/main');
+} catch (e) {
+  if (e.code === 'MODULE_NOT_FOUND' && e.message.includes('dist/main')) {
+    require('../src/main');
+  } else {
+    throw e;
   }
 }
-main();

package/dist/api.js ADDED Viewed

@@ -0,0 +1 @@

package/dist/commands/audit.js ADDED Viewed

@@ -0,0 +1 @@

package/dist/commands/auth.js ADDED Viewed

@@ -0,0 +1 @@

package/dist/commands/backup.js ADDED Viewed

@@ -0,0 +1 @@