sync-cf-secrets 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jason
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,185 @@
+# sync-cf-secrets
+
+Sync secrets from your password manager to Cloudflare Workers. Supports 1Password and Bitwarden with a pluggable provider architecture.
+
+## Why
+
+Managing Cloudflare Workers secrets is tedious — tokens from third parties are often single-use, so they end up in your password manager, then need to be manually pushed via `wrangler secret put` for each environment. This tool automates that.
+
+## Install
+
+```bash
+npm install -g sync-cf-secrets
+# or as a devDependency
+npm install -D sync-cf-secrets
+```
+
+Requires Node.js 18.3+ and [wrangler](https://developers.cloudflare.com/workers/wrangler/) installed.
+
+## Quick Start
+
+```bash
+# 1. Bootstrap: create password manager items for all environments
+sync-cf-secrets init
+
+# 2. Copy local secrets to staging (most values are the same)
+sync-cf-secrets copy local staging
+
+# 3. Edit staging item in your password manager — change any values that differ
+
+# 4. Push secrets to Cloudflare
+sync-cf-secrets push staging
+
+# 5. Generate .dev.vars for local dev from password manager
+sync-cf-secrets pull local
+```
+
+## Commands
+
+### `init`
+
+Create password manager items for all environments discovered from your wrangler config. Reads field names and values from `.dev.vars`:
+
+- **local** item gets the actual values from `.dev.vars`
+- **staging**, **production**, etc. get the same fields with `CHANGE_ME` placeholders
+
+Any variables already defined as `vars` in your wrangler config are automatically excluded — they're non-secret config and don't belong in the password manager.
+
+If items already exist, you'll be prompted before they're replaced.
+
+```bash
+sync-cf-secrets init
+sync-cf-secrets init --dry-run
+```
+
+### `copy <from> <to>`
+
+Copy secrets from one environment's password manager item to another. Useful when environments share most values (e.g. local and staging both use test/sandbox API keys).
+
+Variables defined as `vars` in the target environment's wrangler config are excluded.
+
+```bash
+sync-cf-secrets copy local staging
+sync-cf-secrets copy staging production
+```
+
+### `push <env>`
+
+Push secrets from your password manager to a Cloudflare Workers environment.
+
+Variables already defined as `vars` in your wrangler config are automatically skipped.
+
+```bash
+sync-cf-secrets push staging
+sync-cf-secrets push production --dry-run   # preview without pushing
+```
+
+### `pull <env>`
+
+Generate a `.dev.vars` file from your password manager.
+
+```bash
+sync-cf-secrets pull local
+```
+
+### `list <env>`
+
+List secret names deployed to a Cloudflare Workers environment.
+
+```bash
+sync-cf-secrets list staging
+```
+
+### `diff <env>`
+
+Compare secrets in your password manager vs what's deployed to Cloudflare.
+
+```bash
+sync-cf-secrets diff production --verbose
+```
+
+## Options
+
+| Flag | Description |
+|---|---|
+| `--provider <name>` | Password manager: `1password`, `bitwarden` (auto-detected by default) |
+| `--vault <name>` | Override vault name |
+| `--dry-run` | Show what would happen without doing it |
+| `--verbose` | Show more detail |
+| `--help` | Show help |
+
+## Wrangler Vars vs Secrets
+
+The tool automatically reads your wrangler config (`wrangler.toml` / `wrangler.jsonc`) and excludes any names defined as `vars`. These are non-secret environment config (like `DEPLOY_ENV` or `AUTH_URL`) that Cloudflare manages as plaintext bindings — pushing them as secrets would cause a "Binding name already in use" error.
+
+This filtering is per-environment, so a variable that's a `var` in staging but not in production is handled correctly.
+
+## Configuration
+
+Create a `.sync-cf-secrets.json` in your project root (all fields optional):
+
+```json
+{
+  "provider": "1password",
+  "vault": "Engineering",
+  "prefix": "myproject",
+  "wranglerConfig": "apps/web/wrangler.jsonc",
+  "devVarsPath": "apps/web/.dev.vars",
+  "environments": {
+    "local": { "item": "myproject local" },
+    "staging": { "item": "myproject staging" },
+    "production": { "item": "myproject production" }
+  }
+}
+```
+
+### Defaults
+
+- **provider** — auto-detected from available CLIs (`op` or `bw`)
+- **vault** — project name from `package.json`
+- **prefix** — same as vault
+- **wranglerConfig** — auto-searches for `wrangler.toml`, `wrangler.jsonc`, or `wrangler.json` (including `apps/web/`)
+- **devVarsPath** — `.dev.vars` next to your wrangler config
+- **environments** — auto-discovered from your wrangler config's `env` block, plus `local`
+
+## Password Manager Setup
+
+### 1Password
+
+The easiest way to get started is `sync-cf-secrets init`, which creates Secure Note items with the right fields. You can also create them manually — one Secure Note per environment with custom fields where the **label** is the env var name and the **value** is the secret.
+
+Requires the [1Password CLI](https://developer.1password.com/docs/cli/get-started/) (`op`). Auth is handled via the 1Password desktop app (biometric/Touch ID).
+
+### Bitwarden
+
+Same concept — one Secure Note per environment with custom fields for each secret.
+
+Requires the [Bitwarden CLI](https://bitwarden.com/help/cli/) (`bw`).
+
+### Adding a Provider
+
+Providers implement the `SecretProvider` interface:
+
+```typescript
+interface SecretProvider {
+  name: string;
+  cli: string;
+  validate(): Promise<void>;
+  exists(opts: { vault: string; item: string }): Promise<boolean>;
+  fetch(opts: { vault: string; item: string }): Promise<Map<string, string>>;
+  save(opts: { vault: string; item: string; secrets: Map<string, string> }): Promise<void>;
+  listFields(opts: { vault: string; item: string }): Promise<string[]>;
+}
+```
+
+## Security
+
+- Secret values are piped to wrangler via stdin — never exposed in CLI arguments or process listings
+- No intermediate temp files
+- Requires password manager authentication (biometrics/master password)
+- Generated `.dev.vars` files include a "do not commit" warning
+- Duplicate items are detected and cleaned up by unique ID
+
+## License
+
+MIT

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+import { parseArgs } from "node:util";
+import { loadConfig } from "./config.js";
+import { copy } from "./commands/copy.js";
+import { diff } from "./commands/diff.js";
+import { init } from "./commands/init.js";
+import { list } from "./commands/list.js";
+import { pull } from "./commands/pull.js";
+import { push } from "./commands/push.js";
+import { resolveProvider } from "./providers/index.js";
+import { error } from "./utils.js";
+const USAGE = `
+sync-cf-secrets — Sync secrets from your password manager to Cloudflare Workers
+
+Usage:
+  sync-cf-secrets push <env>               Push secrets to Cloudflare
+  sync-cf-secrets pull <env>               Write .dev.vars from password manager
+  sync-cf-secrets init                     Create items for all environments from .dev.vars
+  sync-cf-secrets copy <from> <to>         Copy secrets between environments
+  sync-cf-secrets list <env>               List deployed Cloudflare secrets
+  sync-cf-secrets diff <env>               Compare password manager vs Cloudflare
+
+Options:
+  --provider <name>   Password manager: 1password, bitwarden (auto-detected)
+  --vault <name>      Override vault name
+  --dry-run           Show what would happen without doing it
+  --verbose           Show more detail
+  --help              Show this help
+
+Examples:
+  sync-cf-secrets push staging --dry-run
+  sync-cf-secrets pull local
+  sync-cf-secrets init
+  sync-cf-secrets copy local staging
+  sync-cf-secrets diff production --verbose
+`.trim();
+async function main() {
+    const { values, positionals } = parseArgs({
+        allowPositionals: true,
+        options: {
+            provider: { type: "string" },
+            vault: { type: "string" },
+            "dry-run": { type: "boolean", default: false },
+            verbose: { type: "boolean", default: false },
+            help: { type: "boolean", short: "h", default: false },
+        },
+    });
+    if (values.help || positionals.length === 0) {
+        console.log(USAGE);
+        process.exit(0);
+    }
+    const [command, env, env2] = positionals;
+    if (!env && !["help", "init"].includes(command)) {
+        const usage = command === "copy"
+            ? "sync-cf-secrets copy <from> <to>"
+            : `sync-cf-secrets ${command} <env>`;
+        error(`Missing argument(s).\n\nUsage: ${usage}`);
+        process.exit(1);
+    }
+    const config = loadConfig({
+        provider: values.provider,
+        vault: values.vault,
+    });
+    // Commands that need a provider
+    if (["push", "pull", "init", "copy", "diff"].includes(command)) {
+        const provider = resolveProvider(config.provider);
+        await provider.validate();
+        switch (command) {
+            case "push":
+                return push(provider, config, {
+                    env: env,
+                    dryRun: values["dry-run"],
+                    verbose: values.verbose,
+                });
+            case "pull":
+                return pull(provider, config, {
+                    env: env,
+                    dryRun: values["dry-run"],
+                    verbose: values.verbose,
+                });
+            case "init":
+                return init(provider, config, {
+                    dryRun: values["dry-run"],
+                    verbose: values.verbose,
+                });
+            case "copy":
+                if (!env2) {
+                    error("Missing target environment.\n\nUsage: sync-cf-secrets copy <from> <to>");
+                    process.exit(1);
+                }
+                return copy(provider, config, {
+                    from: env,
+                    to: env2,
+                    dryRun: values["dry-run"],
+                    verbose: values.verbose,
+                });
+            case "diff":
+                return diff(provider, config, {
+                    env: env,
+                    verbose: values.verbose,
+                });
+        }
+    }
+    // Commands that don't need a provider
+    if (command === "list") {
+        return list(config, { env: env });
+    }
+    error(`Unknown command "${command}".\n`);
+    console.log(USAGE);
+    process.exit(1);
+}
+main().catch((err) => {
+    error(err.message);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBb,CAAC,IAAI,EAAE,CAAC;AAET,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE;YACP,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC9C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;SACtD;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,WAAW,CAAC;IAEzC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,KAAK,MAAM;YAC9B,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,mBAAmB,OAAO,QAAQ,CAAC;QACvC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;IAEH,gCAAgC;IAChC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAQ,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAE1B,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE;oBAC5B,GAAG,EAAE,GAAI;oBACT,MAAM,EAAE,MAAM,CAAC,SAAS,CAAE;oBAC1B,OAAO,EAAE,MAAM,CAAC,OAAQ;iBACzB,CAAC,CAAC;YACL,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE;oBAC5B,GAAG,EAAE,GAAI;oBACT,MAAM,EAAE,MAAM,CAAC,SAAS,CAAE;oBAC1B,OAAO,EAAE,MAAM,CAAC,OAAQ;iBACzB,CAAC,CAAC;YACL,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE;oBAC5B,MAAM,EAAE,MAAM,CAAC,SAAS,CAAE;oBAC1B,OAAO,EAAE,MAAM,CAAC,OAAQ;iBACzB,CAAC,CAAC;YACL,KAAK,MAAM;gBACT,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,KAAK,CAAC,wEAAwE,CAAC,CAAC;oBAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE;oBAC5B,IAAI,EAAE,GAAI;oBACV,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,MAAM,CAAC,SAAS,CAAE;oBAC1B,OAAO,EAAE,MAAM,CAAC,OAAQ;iBACzB,CAAC,CAAC;YACL,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE;oBAC5B,GAAG,EAAE,GAAI;oBACT,OAAO,EAAE,MAAM,CAAC,OAAQ;iBACzB,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,oBAAoB,OAAO,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IAC1B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/commands/copy.d.ts

@@ -0,0 +1,9 @@
+import type { Config } from "../config.js";
+import type { SecretProvider } from "../providers/types.js";
+export interface CopyOptions {
+    from: string;
+    to: string;
+    dryRun: boolean;
+    verbose: boolean;
+}
+export declare function copy(provider: SecretProvider, config: Config, opts: CopyOptions): Promise<void>;

package/dist/commands/copy.js

@@ -0,0 +1,84 @@
+import { createInterface } from "node:readline";
+import { error, log, success, warn } from "../utils.js";
+import { getWranglerVars } from "../wrangler.js";
+function confirm(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => {
+        rl.question(`${question} [y/N] `, (answer) => {
+            rl.close();
+            resolve(answer.trim().toLowerCase() === "y");
+        });
+    });
+}
+export async function copy(provider, config, opts) {
+    const fromEnv = config.environments[opts.from];
+    const toEnv = config.environments[opts.to];
+    if (!fromEnv) {
+        throw new Error(`Unknown source environment "${opts.from}". ` +
+            `Available: ${Object.keys(config.environments).join(", ")}`);
+    }
+    if (!toEnv) {
+        throw new Error(`Unknown target environment "${opts.to}". ` +
+            `Available: ${Object.keys(config.environments).join(", ")}`);
+    }
+    log(`Fetching secrets from "${fromEnv.item}"...`);
+    const secrets = await provider.fetch({
+        vault: config.vault,
+        item: fromEnv.item,
+    });
+    if (secrets.size === 0) {
+        warn(`No secrets found in "${fromEnv.item}".`);
+        return;
+    }
+    // Filter out vars defined in wrangler config for the target environment
+    const wranglerVars = getWranglerVars(opts.to, config.wranglerConfig);
+    const skipped = [];
+    for (const name of secrets.keys()) {
+        if (wranglerVars.has(name)) {
+            skipped.push(name);
+            secrets.delete(name);
+        }
+    }
+    if (skipped.length > 0) {
+        log(`Skipping ${skipped.length} wrangler var(s): ${skipped.join(", ")}`);
+    }
+    log(`${secrets.size} secret(s) to copy.\n`);
+    if (opts.dryRun) {
+        log(`Dry run — would copy ${secrets.size} field(s) from "${fromEnv.item}" to "${toEnv.item}":`);
+        for (const name of secrets.keys()) {
+            log(`  ${name}`);
+        }
+        return;
+    }
+    // Check if target exists
+    if (await provider.exists({ vault: config.vault, item: toEnv.item })) {
+        warn(`"${toEnv.item}" already exists in ${provider.name}.`);
+        const confirmed = await confirm("Delete and replace it?");
+        if (!confirmed) {
+            log("Aborted.");
+            return;
+        }
+        log("");
+    }
+    log(`Copying to "${toEnv.item}"...`);
+    try {
+        await provider.save({
+            vault: config.vault,
+            item: toEnv.item,
+            secrets,
+        });
+        success(`Copied ${secrets.size} field(s) from "${fromEnv.item}" to "${toEnv.item}".`);
+        log(`  → Open ${provider.name} and update any values that differ for ${opts.to}.`);
+    }
+    catch (err) {
+        if (err && typeof err === "object" && "stderr" in err) {
+            const stderr = err.stderr;
+            error(`Failed to create "${toEnv.item}": ${stderr}`);
+        }
+        else {
+            const msg = err instanceof Error ? err.message : String(err);
+            error(`Failed to create "${toEnv.item}": ${msg}`);
+        }
+    }
+}
+//# sourceMappingURL=copy.js.map

package/dist/commands/copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copy.js","sourceRoot":"","sources":["../../src/commands/copy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AASjD,SAAS,OAAO,CAAC,QAAgB;IAC/B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,QAAwB,EACxB,MAAc,EACd,IAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,IAAI,KAAK;YAC3C,cAAc,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,EAAE,KAAK;YACzC,cAAc,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,0BAA0B,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,wBAAwB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,wEAAwE;IACxE,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,uBAAuB,CAAC,CAAC;IAE5C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,wBAAwB,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAChG,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,uBAAuB,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,UAAU,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;IAED,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QACtF,GAAG,CAAC,YAAY,QAAQ,CAAC,IAAI,0CAA0C,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACtD,MAAM,MAAM,GAAI,GAAmC,CAAC,MAAM,CAAC;YAC3D,KAAK,CAAC,qBAAqB,KAAK,CAAC,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,KAAK,CAAC,qBAAqB,KAAK,CAAC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/diff.d.ts

@@ -0,0 +1,7 @@
+import type { Config } from "../config.js";
+import type { SecretProvider } from "../providers/types.js";
+export interface DiffOptions {
+    env: string;
+    verbose: boolean;
+}
+export declare function diff(provider: SecretProvider, config: Config, opts: DiffOptions): Promise<void>;

package/dist/commands/diff.js

@@ -0,0 +1,63 @@
+import { error, log, success, warn } from "../utils.js";
+import { listSecrets, validateWrangler } from "../wrangler.js";
+export async function diff(provider, config, opts) {
+    const envConfig = config.environments[opts.env];
+    if (!envConfig) {
+        throw new Error(`Unknown environment "${opts.env}". ` +
+            `Available: ${Object.keys(config.environments).join(", ")}`);
+    }
+    validateWrangler();
+    log(`Comparing ${provider.name} item "${envConfig.item}" vs Cloudflare ${opts.env}...\n`);
+    // Fetch field names from provider
+    const providerFields = new Set(await provider.listFields({
+        vault: config.vault,
+        item: envConfig.item,
+    }));
+    // Fetch deployed secret names from Cloudflare
+    const cfSecrets = new Set(listSecrets(opts.env, config.wranglerConfig));
+    const missingFromCf = [];
+    const extraInCf = [];
+    const matching = [];
+    for (const name of providerFields) {
+        if (cfSecrets.has(name)) {
+            matching.push(name);
+        }
+        else {
+            missingFromCf.push(name);
+        }
+    }
+    for (const name of cfSecrets) {
+        if (!providerFields.has(name)) {
+            extraInCf.push(name);
+        }
+    }
+    if (missingFromCf.length > 0) {
+        warn(`Missing from Cloudflare (in ${provider.name} but not deployed):`);
+        for (const name of missingFromCf.sort()) {
+            log(`  + ${name}`);
+        }
+        log("");
+    }
+    if (extraInCf.length > 0) {
+        warn(`Extra in Cloudflare (deployed but not in ${provider.name}):`);
+        for (const name of extraInCf.sort()) {
+            log(`  - ${name}`);
+        }
+        log("");
+    }
+    if (matching.length > 0 && opts.verbose) {
+        log("Matching:");
+        for (const name of matching.sort()) {
+            log(`  = ${name}`);
+        }
+        log("");
+    }
+    if (missingFromCf.length === 0 && extraInCf.length === 0) {
+        success(`All ${matching.length} secret(s) are in sync.`);
+    }
+    else {
+        error(`${missingFromCf.length} missing, ${extraInCf.length} extra, ${matching.length} matching.`);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=diff.js.map

package/dist/commands/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/commands/diff.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAO/D,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,QAAwB,EACxB,MAAc,EACd,IAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,GAAG,KAAK;YACnC,cAAc,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,gBAAgB,EAAE,CAAC;IAEnB,GAAG,CAAC,aAAa,QAAQ,CAAC,IAAI,UAAU,SAAS,CAAC,IAAI,mBAAmB,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAE1F,kCAAkC;IAClC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,MAAM,QAAQ,CAAC,UAAU,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC,CACH,CAAC;IAEF,8CAA8C;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IAExE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,+BAA+B,QAAQ,CAAC,IAAI,qBAAqB,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,4CAA4C,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;QACpE,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,CACL,OAAO,QAAQ,CAAC,MAAM,yBAAyB,CAChD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CACH,GAAG,aAAa,CAAC,MAAM,aAAa,SAAS,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,YAAY,CAC3F,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,7 @@
+import type { Config } from "../config.js";
+import type { SecretProvider } from "../providers/types.js";
+export interface InitOptions {
+    dryRun: boolean;
+    verbose: boolean;
+}
+export declare function init(provider: SecretProvider, config: Config, opts: InitOptions): Promise<void>;

package/dist/commands/init.js

@@ -0,0 +1,128 @@
+import { createInterface } from "node:readline";
+import { existsSync, readFileSync } from "node:fs";
+import { error, log, success, warn } from "../utils.js";
+import { getWranglerVars } from "../wrangler.js";
+/**
+ * Parse a .dev.vars file into a Map of key-value pairs.
+ */
+function parseDevVars(path) {
+    const content = readFileSync(path, "utf-8");
+    const secrets = new Map();
+    for (const line of content.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eqIndex = trimmed.indexOf("=");
+        if (eqIndex === -1)
+            continue;
+        const key = trimmed.slice(0, eqIndex).trim();
+        const value = trimmed.slice(eqIndex + 1).trim();
+        if (key) {
+            secrets.set(key, value);
+        }
+    }
+    return secrets;
+}
+/**
+ * Prompt the user for yes/no confirmation.
+ */
+function confirm(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => {
+        rl.question(`${question} [y/N] `, (answer) => {
+            rl.close();
+            resolve(answer.trim().toLowerCase() === "y");
+        });
+    });
+}
+export async function init(provider, config, opts) {
+    if (!existsSync(config.devVarsPath)) {
+        throw new Error(`File not found: ${config.devVarsPath}`);
+    }
+    const devVars = parseDevVars(config.devVarsPath);
+    if (devVars.size === 0) {
+        warn("No secrets found in .dev.vars file.");
+        return;
+    }
+    log(`Parsed ${devVars.size} field(s) from ${config.devVarsPath}\n`);
+    // Check which items already exist
+    const envNames = Object.keys(config.environments);
+    const existing = [];
+    for (const env of envNames) {
+        const envConfig = config.environments[env];
+        if (await provider.exists({ vault: config.vault, item: envConfig.item })) {
+            existing.push(envConfig.item);
+        }
+    }
+    if (existing.length > 0 && !opts.dryRun) {
+        warn(`These items already exist in ${provider.name}:`);
+        for (const name of existing) {
+            log(`  • ${name}`);
+        }
+        log("");
+        const confirmed = await confirm("Delete and recreate them? Existing values will be lost.");
+        if (!confirmed) {
+            log("Aborted.");
+            return;
+        }
+        log("");
+    }
+    for (const env of envNames) {
+        const envConfig = config.environments[env];
+        const isLocal = env === "local";
+        // Filter out vars defined in wrangler config for this environment
+        const wranglerVars = getWranglerVars(env, config.wranglerConfig);
+        const secrets = new Map();
+        const skipped = [];
+        for (const [name, value] of devVars) {
+            if (wranglerVars.has(name)) {
+                skipped.push(name);
+            }
+            else {
+                secrets.set(name, isLocal ? value : "CHANGE_ME");
+            }
+        }
+        if (skipped.length > 0) {
+            log(`  Skipping wrangler var(s): ${skipped.join(", ")}`);
+        }
+        if (opts.dryRun) {
+            const label = isLocal ? "with values from .dev.vars" : "with CHANGE_ME placeholders";
+            const action = existing.includes(envConfig.item) ? "Replace" : "Create";
+            log(`Dry run — would ${action.toLowerCase()} "${envConfig.item}" ${label}`);
+            if (opts.verbose) {
+                for (const name of secrets.keys()) {
+                    log(`  ${name}`);
+                }
+            }
+            continue;
+        }
+        const label = isLocal ? "with values" : "with placeholders";
+        log(`Creating "${envConfig.item}" ${label}...`);
+        try {
+            await provider.save({
+                vault: config.vault,
+                item: envConfig.item,
+                secrets,
+            });
+            if (isLocal) {
+                success(`Created "${envConfig.item}" with ${secrets.size} field(s).`);
+            }
+            else {
+                success(`Created "${envConfig.item}" with ${secrets.size} placeholder field(s).`);
+                log(`  → Open ${provider.name} and replace CHANGE_ME values with real secrets.`);
+            }
+        }
+        catch (err) {
+            if (err && typeof err === "object" && "stderr" in err) {
+                const stderr = err.stderr;
+                error(`Failed to create "${envConfig.item}": ${stderr}`);
+            }
+            else {
+                const msg = err instanceof Error ? err.message : String(err);
+                error(`Failed to create "${envConfig.item}": ${msg}`);
+            }
+        }
+        log("");
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGnD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAOjD;;GAEG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAE7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEhD,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,OAAO,CAAC,QAAgB;IAC/B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,QAAwB,EACxB,MAAc,EACd,IAAiB;IAEjB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEjD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,GAAG,CAAC,UAAU,OAAO,CAAC,IAAI,kBAAkB,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IAEpE,kCAAkC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACxC,IAAI,CAAC,gCAAgC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,yDAAyD,CAC1D,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,UAAU,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,KAAK,OAAO,CAAC;QAEhC,kEAAkE;QAClE,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,+BAA+B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,6BAA6B,CAAC;YACrF,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxE,GAAG,CAAC,mBAAmB,MAAM,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;YAC5E,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBAClC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC5D,GAAG,CAAC,aAAa,SAAS,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,YAAY,SAAS,CAAC,IAAI,UAAU,OAAO,CAAC,IAAI,YAAY,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,YAAY,SAAS,CAAC,IAAI,UAAU,OAAO,CAAC,IAAI,wBAAwB,CAAC,CAAC;gBAClF,GAAG,CAAC,YAAY,QAAQ,CAAC,IAAI,kDAAkD,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAI,GAAmC,CAAC,MAAM,CAAC;gBAC3D,KAAK,CAAC,qBAAqB,SAAS,CAAC,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,KAAK,CAAC,qBAAqB,SAAS,CAAC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/commands/list.d.ts

@@ -0,0 +1,5 @@
+import type { Config } from "../config.js";
+export interface ListOptions {
+    env: string;
+}
+export declare function list(config: Config, opts: ListOptions): Promise<void>;