teamsecret-pull 0.1.0

package/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "teamsecret-pull",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Pull your team's secrets into .env — encrypted, versioned, access-controlled.",
+  "bin": {
+    "teamsecret-pull": "teamsecret-pull.js"
+  },
+  "files": [
+    "teamsecret-pull.js"
+  ],
+  "keywords": ["env", "secrets", "dotenv", "environment", "team", "cli"],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Tristan1075/teamsecret"
+  }
+}

package/teamsecret-pull.js

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+
+import { readFileSync, writeFileSync, existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+
+const CONFIG_FILE = ".teamsecret.json";
+const KEY_FILE = join(homedir(), ".teamsecret");
+const OUTPUT_FILE = ".env";
+
+function fatal(msg) {
+  console.error(`\x1b[31m[teamsecret]\x1b[0m ${msg}`);
+  process.exit(1);
+}
+
+function info(msg) {
+  console.log(`\x1b[36m[teamsecret]\x1b[0m ${msg}`);
+}
+
+// 0. Read environment from CLI argument
+const environment = process.argv[2];
+if (!environment) {
+  fatal(
+    `Missing environment argument.\n` +
+      `  Usage: npx teamsecret-pull <environment>\n` +
+      `  Example: npx teamsecret-pull development`
+  );
+}
+
+// 1. Read .teamsecret.json from project root
+if (!existsSync(CONFIG_FILE)) {
+  fatal(
+    `${CONFIG_FILE} not found. Create it with:\n` +
+      `  { "url": "http://localhost:3000", "projectId": "..." }`
+  );
+}
+
+let config;
+try {
+  config = JSON.parse(readFileSync(CONFIG_FILE, "utf-8"));
+} catch {
+  fatal(`Failed to parse ${CONFIG_FILE}`);
+}
+
+const { url, projectId } = config;
+if (!url || !projectId) {
+  fatal(`${CONFIG_FILE} must have "url" and "projectId" fields.`);
+}
+
+// 2. Read API key from ~/.teamsecret or TEAMSECRET_API_KEY env var
+let apiKey = process.env.TEAMSECRET_API_KEY;
+if (!apiKey && existsSync(KEY_FILE)) {
+  apiKey = readFileSync(KEY_FILE, "utf-8").trim();
+}
+if (!apiKey) {
+  fatal(
+    `API key not found. Either:\n` +
+      `  - Set TEAMSECRET_API_KEY environment variable\n` +
+      `  - Save your key in ~/.teamsecret`
+  );
+}
+
+// 3. Fetch secrets from TeamSecret
+info(`Pulling ${environment} secrets from ${url}...`);
+
+try {
+  const res = await fetch(`${url}/api/v1/pull?env=${encodeURIComponent(environment)}`, {
+    headers: { Authorization: `Bearer ${apiKey}` },
+  });
+
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({}));
+    fatal(`API error (${res.status}): ${body.error || "Unknown error"}`);
+  }
+
+  const data = await res.json();
+
+  // 4. Write .env file
+  const lines = [
+    `# Generated by TeamSecret — ${data.project} (${data.environment})`,
+    `# Pulled at ${new Date().toISOString()}`,
+    `# DO NOT COMMIT THIS FILE`,
+    "",
+    ...Object.entries(data.secrets).map(([key, value]) => `${key}=${value}`),
+    "",
+  ];
+
+  writeFileSync(OUTPUT_FILE, lines.join("\n"));
+  info(`Wrote ${Object.keys(data.secrets).length} secrets to ${OUTPUT_FILE}`);
+} catch (e) {
+  if (e.message?.includes("API error")) throw e;
+  fatal(`Failed to connect to ${url}: ${e.message}`);
+}