varlock 0.0.0 → 0.0.1

package/dist/chunk-QCC3P7BT.js

@@ -0,0 +1,39 @@
+import { define } from './chunk-33ROL4J5.js';
+import { __name } from './chunk-XN24GZXQ.js';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+
+var commandSpec = define({
+  name: "opt-out",
+  description: "Opt out of anonymous usage analytics"
+});
+var commandFn = /* @__PURE__ */ __name(async (ctx) => {
+  const configDir = join(homedir(), ".varlock");
+  const configPath = join(configDir, "config.json");
+  try {
+    if (!existsSync(configDir)) {
+      await mkdir(configDir, { recursive: true });
+    }
+    let config = {};
+    if (existsSync(configPath)) {
+      const configContent = await readFile(configPath, "utf-8");
+      config = JSON.parse(configContent);
+    }
+    config = {
+      ...config,
+      analytics_opt_out: true
+    };
+    await writeFile(configPath, JSON.stringify(config, null, 2));
+    console.log("\u2705 Successfully opted out of anonymous usage analytics");
+    console.log("This setting is stored in:", configPath);
+  } catch (error) {
+    console.error("Failed to opt out of analytics:", error);
+    process.exit(1);
+  }
+}, "commandFn");
+
+export { commandFn, commandSpec };
+//# sourceMappingURL=chunk-QCC3P7BT.js.map
+//# sourceMappingURL=chunk-QCC3P7BT.js.map

package/dist/chunk-QCC3P7BT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/opt-out.command.ts"],"names":[],"mappings":";;;;;;;AAQO,IAAM,cAAc,MAAO,CAAA;AAAA,EAChC,IAAM,EAAA,SAAA;AAAA,EACN,WAAa,EAAA;AACf,CAAC;AAEY,IAAA,SAAA,iCAA6D,GAAQ,KAAA;AAChF,EAAA,MAAM,SAAY,GAAA,IAAA,CAAK,OAAQ,EAAA,EAAG,UAAU,CAAA;AAC5C,EAAM,MAAA,UAAA,GAAa,IAAK,CAAA,SAAA,EAAW,aAAa,CAAA;AAEhD,EAAI,IAAA;AAEF,IAAI,IAAA,CAAC,UAAW,CAAA,SAAS,CAAG,EAAA;AAC1B,MAAA,MAAM,KAAM,CAAA,SAAA,EAAW,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA;AAI5C,IAAA,IAAI,SAAS,EAAC;AACd,IAAI,IAAA,UAAA,CAAW,UAAU,CAAG,EAAA;AAC1B,MAAA,MAAM,aAAgB,GAAA,MAAM,QAAS,CAAA,UAAA,EAAY,OAAO,CAAA;AACxD,MAAS,MAAA,GAAA,IAAA,CAAK,MAAM,aAAa,CAAA;AAAA;AAInC,IAAS,MAAA,GAAA;AAAA,MACP,GAAG,MAAA;AAAA,MACH,iBAAmB,EAAA;AAAA,KACrB;AAGA,IAAA,MAAM,UAAU,UAAY,EAAA,IAAA,CAAK,UAAU,MAAQ,EAAA,IAAA,EAAM,CAAC,CAAC,CAAA;AAE3D,IAAA,OAAA,CAAQ,IAAI,4DAAuD,CAAA;AACnE,IAAQ,OAAA,CAAA,GAAA,CAAI,8BAA8B,UAAU,CAAA;AAAA,WAC7C,KAAO,EAAA;AACd,IAAQ,OAAA,CAAA,KAAA,CAAM,mCAAmC,KAAK,CAAA;AACtD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA;AAElB,CAhCmE,EAAA,WAAA","file":"chunk-QCC3P7BT.js","sourcesContent":["import { homedir } from 'node:os';\nimport { join } from 'node:path';\nimport { mkdir, writeFile, readFile } from 'node:fs/promises';\nimport { existsSync } from 'node:fs';\nimport { define } from 'gunshi';\nimport { TypedGunshiCommandFn } from '../helpers/gunshi-type-utils';\n\n\nexport const commandSpec = define({\n  name: 'opt-out',\n  description: 'Opt out of anonymous usage analytics',\n});\n\nexport const commandFn: TypedGunshiCommandFn<typeof commandSpec> = async (ctx) => {\n  const configDir = join(homedir(), '.varlock');\n  const configPath = join(configDir, 'config.json');\n\n  try {\n    // Create .varlock directory if it doesn't exist\n    if (!existsSync(configDir)) {\n      await mkdir(configDir, { recursive: true });\n    }\n\n    // Read existing config if it exists\n    let config = {};\n    if (existsSync(configPath)) {\n      const configContent = await readFile(configPath, 'utf-8');\n      config = JSON.parse(configContent);\n    }\n\n    // Update config with opt-out setting\n    config = {\n      ...config,\n      analytics_opt_out: true,\n    };\n\n    // Write updated config\n    await writeFile(configPath, JSON.stringify(config, null, 2));\n\n    console.log('✅ Successfully opted out of anonymous usage analytics');\n    console.log('This setting is stored in:', configPath);\n  } catch (error) {\n    console.error('Failed to opt out of analytics:', error);\n    process.exit(1);\n  }\n};\n"]}

package/dist/chunk-QTYVZQSF.js

@@ -0,0 +1,225 @@
+import { my_dash_default, loadEnvGraph } from './chunk-HZADDTO5.js';
+import { ansis_default } from './chunk-7UQXFWKN.js';
+import { __name } from './chunk-XN24GZXQ.js';
+
+// src/lib/redaction-helpers.ts
+var UNMASK_STR = "\u{1F441}";
+function redactString(valStr, mode, hideLength = true) {
+  if (!valStr) return valStr;
+  const hiddenLength = hideLength ? 5 : valStr.length - 2;
+  const hiddenStr = "\u2592".repeat(hiddenLength);
+  if (mode === "show_last_2") {
+    return `${hiddenStr}${valStr.substring(valStr.length - 2, valStr.length)}`;
+  } else if (mode === "show_first_last") {
+    return `${valStr.substring(0, 1)}${hiddenStr}${valStr.substring(valStr.length - 1, valStr.length)}`;
+  } else {
+    return `${valStr.substring(0, 2)}${hiddenStr}`;
+  }
+}
+__name(redactString, "redactString");
+var sensitiveSecretsMap = {};
+var redactorFindReplace;
+function resetRedactionMap(graph) {
+  sensitiveSecretsMap = {};
+  for (const itemKey in graph.configSchema) {
+    const item = graph.configSchema[itemKey];
+    if (item.isSensitive && item.resolvedValue && my_dash_default.isString(item.resolvedValue)) {
+      const redacted = redactString(item.resolvedValue);
+      if (redacted) sensitiveSecretsMap[item.resolvedValue] = redacted;
+    }
+  }
+  const findRegex = new RegExp(
+    [
+      `(${UNMASK_STR} )?`,
+      "(",
+      Object.keys(sensitiveSecretsMap).map((s) => s.replace(/[()[\]{}*+?^$|#.,/\\\s-]/g, "\\$&")).sort((a, b) => b.length - a.length).join("|"),
+      ")",
+      `( ${UNMASK_STR})?`
+    ].join(""),
+    "g"
+  );
+  const replaceFn = /* @__PURE__ */ __name((match, pre, val, post) => {
+    if (pre && post) return match;
+    return sensitiveSecretsMap[val];
+  }, "replaceFn");
+  redactorFindReplace = { find: findRegex, replace: replaceFn };
+}
+__name(resetRedactionMap, "resetRedactionMap");
+var CONSOLE_METHODS = ["trace", "debug", "info", "log", "info", "warn", "error"];
+var VarlockRedactor = {
+  /**
+   * Redacts senstive config values from any string/array/object/etc
+   *
+   * NOTE - must be used only after varlock has loaded config
+   * */
+  redactSensitiveConfig(o) {
+    if (!redactorFindReplace) return o;
+    if (!o) return o;
+    if (Array.isArray(o)) {
+      return o.map(VarlockRedactor.redactSensitiveConfig);
+    }
+    if (o && typeof o === "object" && Object.getPrototypeOf(o) === Object.prototype) {
+      try {
+        return JSON.parse(VarlockRedactor.redactSensitiveConfig(JSON.stringify(o)));
+      } catch (err) {
+        return o;
+      }
+    }
+    const type = typeof o;
+    if (type === "string" || type === "object" && Object.prototype.toString.call(o) === "[object String]") {
+      return o.replaceAll(redactorFindReplace.find, redactorFindReplace.replace);
+    }
+    return o;
+  },
+  /**
+   * utility to unmask a secret/sensitive value when logging to the console
+   * currently this only works on a single secret, not objects or aggregated strings
+   * */
+  unredact(secretStr) {
+    if (!globalThis._varlockOrigWriteToConsoleFn) return secretStr;
+    return `${UNMASK_STR} ${secretStr} ${UNMASK_STR}`;
+  },
+  /**
+   * patches global console methods to redact sensitive config
+   *
+   * NOTE - this may not be 100% foolproof depending on the platform
+   * */
+  patchConsole() {
+    if (!redactorFindReplace) return;
+    const kWriteToConsoleSymbol = Object.getOwnPropertySymbols(globalThis.console).find((s) => s.description === "kWriteToConsole");
+    globalThis._varlockOrigWriteToConsoleFn ||= globalThis.console[kWriteToConsoleSymbol];
+    globalThis.console[kWriteToConsoleSymbol] = function() {
+      globalThis._varlockOrigWriteToConsoleFn.apply(this, [
+        arguments[0],
+        VarlockRedactor.redactSensitiveConfig(arguments[1]),
+        arguments[2]
+      ]);
+    };
+    if (
+      // !console.log.toString().includes('[native code]') &&
+      !console.log._varlockPatchedFn
+    ) {
+      for (const logMethodName of CONSOLE_METHODS) {
+        const originalLogMethod = globalThis.console[logMethodName];
+        const patchedFn = /* @__PURE__ */ __name(function() {
+          originalLogMethod.apply(this, Array.from(arguments).map(VarlockRedactor.redactSensitiveConfig));
+        }, "patchedFn");
+        patchedFn._varlockPatchedFn = true;
+        globalThis.console[logMethodName] = patchedFn;
+      }
+    }
+  },
+  /**
+   * restore's original global console methods to stop redacting secrets
+   *
+   * (only needed during local development when switching settings on/off in a process that does not reload)
+   * */
+  unpatchConsole() {
+    if (!globalThis._varlockOrigWriteToConsoleFn) return;
+    const kWriteToConsoleSymbol = Object.getOwnPropertySymbols(globalThis.console).find((s) => s.description === "kWriteToConsole");
+    globalThis.console[kWriteToConsoleSymbol] = globalThis._varlockOrigWriteToConsoleFn;
+    delete globalThis._varlockOrigWriteToConsoleFn;
+  }
+};
+
+// src/lib/formatting.ts
+function applyMods(str, mods) {
+  if (!mods) return str;
+  if (my_dash_default.isArray(mods)) {
+    let modStr = str;
+    mods.forEach((mod) => {
+      modStr = ansis_default[mod](modStr);
+    });
+    return modStr;
+  }
+  return ansis_default[mods](str);
+}
+__name(applyMods, "applyMods");
+function formattedValue(val, showType = false) {
+  let strVal = "";
+  let strType = "";
+  let mods;
+  if (my_dash_default.isBoolean(val)) {
+    strVal = val.toString();
+    mods = ["yellow", "italic"];
+    strType = "boolean";
+  } else if (my_dash_default.isNumber(val)) {
+    strVal = val.toString();
+    mods = "yellow";
+    strType = "number";
+  } else if (my_dash_default.isString(val)) {
+    strVal = `"${val}"`;
+    strType = "string";
+  } else if (my_dash_default.isPlainObject(val)) {
+    strVal = JSON.stringify(val);
+    strType = "object";
+  } else if (val === null) {
+    strVal = "null";
+    mods = "gray";
+  } else if (val === void 0) {
+    strVal = "undefined";
+    mods = "gray";
+  }
+  return [
+    applyMods(strVal, mods),
+    showType && strType ? ansis_default.gray(` (${strType})`) : ""
+  ].join("");
+}
+__name(formattedValue, "formattedValue");
+function joinAndCompact(strings, joinChar = " ") {
+  return strings.filter((s) => (
+    // we'll not filter out empty strings - because it's useful to just add newlines
+    s !== void 0 && s !== null && s !== false
+  )).join(joinChar);
+}
+__name(joinAndCompact, "joinAndCompact");
+var VALIDATION_STATE_COLORS = {
+  error: "red",
+  warn: "yellow",
+  valid: "cyan"
+};
+function getItemSummary(item) {
+  const summary = [];
+  const itemErrors = item.errors;
+  const icon = itemErrors.length ? itemErrors[0].icon : "\u2705";
+  const isSensitive = item.isSensitive;
+  const isRequired = item.isRequired;
+  summary.push(joinAndCompact([
+    icon,
+    ansis_default[VALIDATION_STATE_COLORS[item.validationState]](item.key) + (isRequired ? ansis_default.magenta("*") : ""),
+    // ansis.gray(`[type = ${item.type.typeLabel}]`),
+    isSensitive && ` \u{1F510}${ansis_default.gray.italic("sensitive")}`
+    // item.useAt ? ansis.gray.italic(`(${item.useAt?.join(', ')})`) : undefined,
+  ]));
+  let valAsStr = formattedValue(item.resolvedValue, false);
+  if (isSensitive && item.resolvedValue && my_dash_default.isString(item.resolvedValue)) {
+    valAsStr = redactString(item.resolvedValue);
+  }
+  summary.push(joinAndCompact([
+    ansis_default.gray("   \u2514"),
+    valAsStr,
+    item.isCoerced && ansis_default.gray.italic("< coerced from ") + (isSensitive ? formattedValue(item.resolvedRawValue) : formattedValue(item.resolvedRawValue, false))
+  ]));
+  itemErrors?.forEach((err) => {
+    summary.push(ansis_default[err.isWarning ? "yellow" : "red"](`   - ${err.isWarning ? "[WARNING] " : ""}${err.message}`));
+    if (err.tip) {
+      summary.push(...err.tip.split("\n").map((line) => `     ${line}`));
+    }
+  });
+  return summary.join("\n");
+}
+__name(getItemSummary, "getItemSummary");
+
+// src/lib/load-graph.ts
+async function loadVarlockEnvGraph() {
+  const envGraph = await loadEnvGraph({
+    afterInit: /* @__PURE__ */ __name(async (g) => {
+    }, "afterInit")
+  });
+  return envGraph;
+}
+__name(loadVarlockEnvGraph, "loadVarlockEnvGraph");
+
+export { VarlockRedactor, getItemSummary, joinAndCompact, loadVarlockEnvGraph, resetRedactionMap };
+//# sourceMappingURL=chunk-QTYVZQSF.js.map
+//# sourceMappingURL=chunk-QTYVZQSF.js.map

package/dist/chunk-QTYVZQSF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/redaction-helpers.ts","../src/lib/formatting.ts","../src/lib/load-graph.ts"],"names":[],"mappings":";;;;;AAGA,IAAM,UAAa,GAAA,WAAA;AAUZ,SAAS,YAAa,CAAA,MAAA,EAA4B,IAAmB,EAAA,UAAA,GAAa,IAAM,EAAA;AAC7F,EAAI,IAAA,CAAC,QAAe,OAAA,MAAA;AAEpB,EAAA,MAAM,YAAe,GAAA,UAAA,GAAa,CAAI,GAAA,MAAA,CAAO,MAAS,GAAA,CAAA;AACtD,EAAM,MAAA,SAAA,GAAY,QAAI,CAAA,MAAA,CAAO,YAAY,CAAA;AAEzC,EAAA,IAAI,SAAS,aAAe,EAAA;AAC1B,IAAO,OAAA,CAAA,EAAG,SAAS,CAAA,EAAG,MAAO,CAAA,SAAA,CAAU,OAAO,MAAS,GAAA,CAAA,EAAG,MAAO,CAAA,MAAM,CAAC,CAAA,CAAA;AAAA,GAC1E,MAAA,IAAW,SAAS,iBAAmB,EAAA;AACrC,IAAA,OAAO,GAAG,MAAO,CAAA,SAAA,CAAU,CAAG,EAAA,CAAC,CAAC,CAAG,EAAA,SAAS,CAAG,EAAA,MAAA,CAAO,UAAU,MAAO,CAAA,MAAA,GAAS,CAAG,EAAA,MAAA,CAAO,MAAM,CAAC,CAAA,CAAA;AAAA,GAC5F,MAAA;AACL,IAAA,OAAO,GAAG,MAAO,CAAA,SAAA,CAAU,GAAG,CAAC,CAAC,GAAG,SAAS,CAAA,CAAA;AAAA;AAEhD;AAbgB,MAAA,CAAA,YAAA,EAAA,cAAA,CAAA;AAiBhB,IAAI,sBAA8C,EAAC;AAGnD,IAAI,mBAAA;AAEG,SAAS,kBAAkB,KAAiB,EAAA;AAEjD,EAAA,mBAAA,GAAsB,EAAC;AACvB,EAAW,KAAA,MAAA,OAAA,IAAW,MAAM,YAAc,EAAA;AACxC,IAAM,MAAA,IAAA,GAAO,KAAM,CAAA,YAAA,CAAa,OAAO,CAAA;AACvC,IAAI,IAAA,IAAA,CAAK,eAAe,IAAK,CAAA,aAAA,IAAiB,gBAAE,QAAS,CAAA,IAAA,CAAK,aAAa,CAAG,EAAA;AAE5E,MAAM,MAAA,QAAA,GAAW,YAAa,CAAA,IAAA,CAAK,aAAa,CAAA;AAChD,MAAA,IAAI,QAAU,EAAA,mBAAA,CAAoB,IAAK,CAAA,aAAa,CAAI,GAAA,QAAA;AAAA;AAC1D;AAIF,EAAA,MAAM,YAAY,IAAI,MAAA;AAAA,IACpB;AAAA,MACE,IAAI,UAAU,CAAA,GAAA,CAAA;AAAA,MACd,GAAA;AAAA,MACA,MAAA,CAAO,KAAK,mBAAmB,CAAA,CAE5B,IAAI,CAAC,CAAA,KAAM,CAAE,CAAA,OAAA,CAAQ,2BAA6B,EAAA,MAAM,CAAC,CAEzD,CAAA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAM,KAAA,CAAA,CAAE,SAAS,CAAE,CAAA,MAAM,CAClC,CAAA,IAAA,CAAK,GAAG,CAAA;AAAA,MACX,GAAA;AAAA,MACA,KAAK,UAAU,CAAA,EAAA;AAAA,KACjB,CAAE,KAAK,EAAE,CAAA;AAAA,IACT;AAAA,GACF;AAEA,EAAA,MAAM,SAAuB,mBAAA,MAAA,CAAA,CAAC,KAAO,EAAA,GAAA,EAAK,KAAK,IAAS,KAAA;AAGtD,IAAI,IAAA,GAAA,IAAO,MAAa,OAAA,KAAA;AACxB,IAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,GAJH,EAAA,WAAA,CAAA;AAM7B,EAAA,mBAAA,GAAsB,EAAE,IAAA,EAAM,SAAW,EAAA,OAAA,EAAS,SAAU,EAAA;AAC9D;AApCgB,MAAA,CAAA,iBAAA,EAAA,mBAAA,CAAA;AAuChB,IAAM,eAAA,GAAkB,CAAC,OAAS,EAAA,OAAA,EAAS,QAAQ,KAAO,EAAA,MAAA,EAAQ,QAAQ,OAAO,CAAA;AAM1E,IAAM,eAAkB,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM7B,sBAAsB,CAAa,EAAA;AACjC,IAAI,IAAA,CAAC,qBAA4B,OAAA,CAAA;AACjC,IAAI,IAAA,CAAC,GAAU,OAAA,CAAA;AAKf,IAAI,IAAA,KAAA,CAAM,OAAQ,CAAA,CAAC,CAAG,EAAA;AACpB,MAAO,OAAA,CAAA,CAAE,GAAI,CAAA,eAAA,CAAgB,qBAAqB,CAAA;AAAA;AAGpD,IAAI,IAAA,CAAA,IAAK,OAAQ,CAAO,KAAA,QAAA,IAAY,OAAO,cAAe,CAAA,CAAC,CAAM,KAAA,MAAA,CAAO,SAAW,EAAA;AACjF,MAAI,IAAA;AACF,QAAO,OAAA,IAAA,CAAK,MAAM,eAAgB,CAAA,qBAAA,CAAsB,KAAK,SAAU,CAAA,CAAC,CAAC,CAAC,CAAA;AAAA,eACnE,GAAK,EAAA;AACZ,QAAO,OAAA,CAAA;AAAA;AACT;AAGF,IAAA,MAAM,OAAO,OAAO,CAAA;AACpB,IAAI,IAAA,IAAA,KAAS,QAAa,IAAA,IAAA,KAAS,QAAY,IAAA,MAAA,CAAO,UAAU,QAAS,CAAA,IAAA,CAAK,CAAC,CAAA,KAAM,iBAAoB,EAAA;AACvG,MAAA,OAAQ,CAAa,CAAA,UAAA,CAAW,mBAAoB,CAAA,IAAA,EAAM,oBAAoB,OAAO,CAAA;AAAA;AAGvF,IAAO,OAAA,CAAA;AAAA,GACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAS,SAAmB,EAAA;AAE1B,IAAI,IAAA,CAAE,UAAmB,CAAA,4BAAA,EAAqC,OAAA,SAAA;AAE9D,IAAA,OAAO,CAAG,EAAA,UAAU,CAAI,CAAA,EAAA,SAAS,IAAI,UAAU,CAAA,CAAA;AAAA,GACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAe,GAAA;AAEb,IAAA,IAAI,CAAC,mBAAqB,EAAA;AAQ1B,IAAM,MAAA,qBAAA,GAAwB,MAAO,CAAA,qBAAA,CAAsB,UAAW,CAAA,OAAO,CAAE,CAAA,IAAA,CAAK,CAAC,CAAA,KAAM,CAAE,CAAA,WAAA,KAAgB,iBAAiB,CAAA;AAG9H,IAAC,UAAmB,CAAA,4BAAA,KAAiC,UAAW,CAAA,OAAA,CAAQ,qBAAqB,CAAA;AAE7F,IAAW,UAAA,CAAA,OAAA,CAAQ,qBAAqB,CAAA,GAAI,WAAY;AACtD,MAAC,UAAA,CAAmB,4BAA6B,CAAA,KAAA,CAAM,IAAM,EAAA;AAAA,QAC3D,UAAU,CAAC,CAAA;AAAA,QACX,eAAgB,CAAA,qBAAA,CAAsB,SAAU,CAAA,CAAC,CAAC,CAAA;AAAA,QAClD,UAAU,CAAC;AAAA,OACZ,CAAA;AAAA,KACH;AAMA,IAAA;AAAA;AAAA,MAEE,CAAE,QAAQ,GAAY,CAAA;AAAA,MACtB;AACA,MAAA,KAAA,MAAW,iBAAiB,eAAiB,EAAA;AAE3C,QAAM,MAAA,iBAAA,GAAoB,UAAW,CAAA,OAAA,CAAQ,aAAa,CAAA;AAE1D,QAAA,MAAM,4BAAwB,MAAA,CAAA,WAAA;AAE5B,UAAkB,iBAAA,CAAA,KAAA,CAAM,MAAM,KAAM,CAAA,IAAA,CAAK,SAAS,CAAE,CAAA,GAAA,CAAI,eAAgB,CAAA,qBAAqB,CAAC,CAAA;AAAA,SAF9E,EAAA,WAAA,CAAA;AAIlB,QAAA,SAAA,CAAU,iBAAoB,GAAA,IAAA;AAG9B,QAAW,UAAA,CAAA,OAAA,CAAQ,aAAa,CAAI,GAAA,SAAA;AAAA;AACtC;AACF,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAAiB,GAAA;AAEf,IAAI,IAAA,CAAE,WAAmB,4BAA8B,EAAA;AAEvD,IAAM,MAAA,qBAAA,GAAwB,MAAO,CAAA,qBAAA,CAAsB,UAAW,CAAA,OAAO,CAAE,CAAA,IAAA,CAAK,CAAC,CAAA,KAAM,CAAE,CAAA,WAAA,KAAgB,iBAAiB,CAAA;AAE9H,IAAW,UAAA,CAAA,OAAA,CAAQ,qBAAqB,CAAA,GAAK,UAAmB,CAAA,4BAAA;AAChE,IAAA,OAAQ,UAAmB,CAAA,4BAAA;AAAA;AAE/B;;;ACpLA,SAAS,SAAA,CAAU,KAAa,IAAkB,EAAA;AAChD,EAAI,IAAA,CAAC,MAAa,OAAA,GAAA;AAClB,EAAI,IAAA,eAAA,CAAE,OAAQ,CAAA,IAAI,CAAG,EAAA;AACnB,IAAA,IAAI,MAAS,GAAA,GAAA;AACb,IAAK,IAAA,CAAA,OAAA,CAAQ,CAAC,GAAQ,KAAA;AACpB,MAAS,MAAA,GAAA,aAAA,CAAM,GAAG,CAAA,CAAE,MAAM,CAAA;AAAA,KAC3B,CAAA;AACD,IAAO,OAAA,MAAA;AAAA;AAET,EAAO,OAAA,aAAA,CAAM,IAAI,CAAA,CAAE,GAAG,CAAA;AACxB;AAVS,MAAA,CAAA,SAAA,EAAA,WAAA,CAAA;AAYF,SAAS,cAAA,CAAe,GAAU,EAAA,QAAA,GAAW,KAAO,EAAA;AACzD,EAAA,IAAI,MAAiB,GAAA,EAAA;AACrB,EAAA,IAAI,OAAkB,GAAA,EAAA;AACtB,EAAI,IAAA,IAAA;AACJ,EAAI,IAAA,eAAA,CAAE,SAAU,CAAA,GAAG,CAAG,EAAA;AACpB,IAAA,MAAA,GAAS,IAAI,QAAS,EAAA;AACtB,IAAO,IAAA,GAAA,CAAC,UAAU,QAAQ,CAAA;AAC1B,IAAU,OAAA,GAAA,SAAA;AAAA,GACD,MAAA,IAAA,eAAA,CAAE,QAAS,CAAA,GAAG,CAAG,EAAA;AAC1B,IAAA,MAAA,GAAS,IAAI,QAAS,EAAA;AACtB,IAAO,IAAA,GAAA,QAAA;AACP,IAAU,OAAA,GAAA,QAAA;AAAA,GACD,MAAA,IAAA,eAAA,CAAE,QAAS,CAAA,GAAG,CAAG,EAAA;AAC1B,IAAA,MAAA,GAAS,IAAI,GAAG,CAAA,CAAA,CAAA;AAChB,IAAU,OAAA,GAAA,QAAA;AAAA,GACD,MAAA,IAAA,eAAA,CAAE,aAAc,CAAA,GAAG,CAAG,EAAA;AAE/B,IAAS,MAAA,GAAA,IAAA,CAAK,UAAU,GAAG,CAAA;AAC3B,IAAU,OAAA,GAAA,QAAA;AAAA,GACZ,MAAA,IAAW,QAAQ,IAAM,EAAA;AACvB,IAAS,MAAA,GAAA,MAAA;AACT,IAAO,IAAA,GAAA,MAAA;AAAA,GACT,MAAA,IAAW,QAAQ,MAAW,EAAA;AAC5B,IAAS,MAAA,GAAA,WAAA;AACT,IAAO,IAAA,GAAA,MAAA;AAAA;AAET,EAAO,OAAA;AAAA,IACL,SAAA,CAAU,QAAQ,IAAI,CAAA;AAAA,IACtB,YAAY,OAAU,GAAA,aAAA,CAAM,KAAK,CAAK,EAAA,EAAA,OAAO,GAAG,CAAI,GAAA;AAAA,GACtD,CAAE,KAAK,EAAE,CAAA;AACX;AA9BgB,MAAA,CAAA,cAAA,EAAA,gBAAA,CAAA;AAwDT,SAAS,cAAA,CAAe,OAAsE,EAAA,QAAA,GAAW,GAAK,EAAA;AACnH,EAAO,OAAA,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA;AAAA,IAErB,CAAM,KAAA,MAAA,IAAa,CAAM,KAAA,IAAA,IAAQ,CAAM,KAAA;AAAA,GACxC,CAAA,CAAE,KAAK,QAAQ,CAAA;AAClB;AALgB,MAAA,CAAA,cAAA,EAAA,gBAAA,CAAA;AAOhB,IAAM,uBAA0B,GAAA;AAAA,EAC9B,KAAO,EAAA,KAAA;AAAA,EACP,IAAM,EAAA,QAAA;AAAA,EACN,KAAO,EAAA;AACT,CAAA;AAEO,SAAS,eAAe,IAAkB,EAAA;AAC/C,EAAA,MAAM,UAAyB,EAAC;AAChC,EAAA,MAAM,aAAa,IAAK,CAAA,MAAA;AACxB,EAAA,MAAM,OAAO,UAAW,CAAA,MAAA,GAAS,UAAW,CAAA,CAAC,EAAE,IAAO,GAAA,QAAA;AACtD,EAAA,MAAM,cAAc,IAAK,CAAA,WAAA;AACzB,EAAA,MAAM,aAAa,IAAK,CAAA,UAAA;AACxB,EAAA,OAAA,CAAQ,KAAK,cAAe,CAAA;AAAA,IAC1B,IAAA;AAAA,IACA,aAAM,CAAA,uBAAA,CAAwB,IAAK,CAAA,eAAe,CAAC,CAAA,CAAE,IAAK,CAAA,GAAG,CAAK,IAAA,UAAA,GAAa,aAAM,CAAA,OAAA,CAAQ,GAAG,CAAI,GAAA,EAAA,CAAA;AAAA;AAAA,IAGpG,eAAe,CAAM,UAAA,EAAA,aAAA,CAAM,IAAK,CAAA,MAAA,CAAO,WAAW,CAAC,CAAA;AAAA;AAAA,GAGpD,CAAC,CAAA;AAEF,EAAA,IAAI,QAAW,GAAA,cAAA,CAAe,IAAK,CAAA,aAAA,EAAe,KAAK,CAAA;AACvD,EAAA,IAAI,eAAe,IAAK,CAAA,aAAA,IAAiB,gBAAE,QAAS,CAAA,IAAA,CAAK,aAAa,CAAG,EAAA;AACvE,IAAW,QAAA,GAAA,YAAA,CAAa,KAAK,aAAa,CAAA;AAAA;AAG5C,EAAA,OAAA,CAAQ,KAAK,cAAe,CAAA;AAAA,IAC1B,aAAA,CAAM,KAAK,WAAM,CAAA;AAAA,IACjB,QAAA;AAAA,IACA,IAAK,CAAA,SAAA,IACH,aAAM,CAAA,IAAA,CAAK,OAAO,iBAAiB,CAAA,IAChC,WAAc,GAAA,cAAA,CAAe,KAAK,gBAAgB,CAAA,GAAI,cAAe,CAAA,IAAA,CAAK,kBAAkB,KAAK,CAAA;AAAA,GAEvG,CAAC,CAAA;AAUF,EAAY,UAAA,EAAA,OAAA,CAAQ,CAAC,GAAQ,KAAA;AAC3B,IAAA,OAAA,CAAQ,KAAK,aAAM,CAAA,GAAA,CAAI,SAAY,GAAA,QAAA,GAAW,KAAK,CAAE,CAAA,CAAA,KAAA,EAAQ,GAAI,CAAA,SAAA,GAAY,eAAe,EAAE,CAAA,EAAG,GAAI,CAAA,OAAO,EAAE,CAAC,CAAA;AAK/G,IAAA,IAAI,IAAI,GAAK,EAAA;AACX,MAAA,OAAA,CAAQ,IAAK,CAAA,GAAG,GAAI,CAAA,GAAA,CAAI,KAAM,CAAA,IAAI,CAAE,CAAA,GAAA,CAAI,CAAC,IAAA,KAAS,CAAQ,KAAA,EAAA,IAAI,EAAE,CAAC,CAAA;AAAA;AACnE,GACD,CAAA;AAQD,EAAO,OAAA,OAAA,CAAQ,KAAK,IAAI,CAAA;AAC1B;AAxDgB,MAAA,CAAA,cAAA,EAAA,gBAAA,CAAA;;;ACzFhB,eAAsB,mBAAsB,GAAA;AAC1C,EAAM,MAAA,QAAA,GAAW,MAAM,YAAa,CAAA;AAAA,IAClC,SAAA,gCAAkB,CAAM,KAAA;AAAA,KAAb,EAAA,WAAA;AAAA,GAGZ,CAAA;AAED,EAAO,OAAA,QAAA;AACT;AARsB,MAAA,CAAA,mBAAA,EAAA,qBAAA,CAAA","file":"chunk-QTYVZQSF.js","sourcesContent":["import { EnvGraph } from '@env-spec/env-graph';\nimport _ from '@env-spec/utils/my-dash';\n\nconst UNMASK_STR = '👁';\n\nexport type RedactMode = 'show_first_2' | 'show_last_2' | 'show_first_last';\n\n/**\n * utility to mask/redact a string, for example transforming \"hello\" into \"he▒▒▒\"\n * this function just redacts _any_ string passed in\n *\n * To redact sensitive parts of a larger object/string, use redactSensitiveConfig\n * */\nexport function redactString(valStr: string | undefined, mode?: RedactMode, hideLength = true) {\n  if (!valStr) return valStr;\n\n  const hiddenLength = hideLength ? 5 : valStr.length - 2;\n  const hiddenStr = '▒'.repeat(hiddenLength);\n\n  if (mode === 'show_last_2') {\n    return `${hiddenStr}${valStr.substring(valStr.length - 2, valStr.length)}`;\n  } else if (mode === 'show_first_last') {\n    return `${valStr.substring(0, 1)}${hiddenStr}${valStr.substring(valStr.length - 1, valStr.length)}`;\n  } else { // 'show_first_2' - also default\n    return `${valStr.substring(0, 2)}${hiddenStr}`;\n  }\n}\n\n\n/** key value lookup of sensitive values to their redacted version */\nlet sensitiveSecretsMap: Record<string, string> = {};\n\ntype ReplaceFn = (match: string, pre: string, val: string, post: string) => string;\nlet redactorFindReplace: undefined | { find: RegExp, replace: ReplaceFn };\n\nexport function resetRedactionMap(graph: EnvGraph) {\n  // reset map of { [sensitive] => redacted }\n  sensitiveSecretsMap = {};\n  for (const itemKey in graph.configSchema) {\n    const item = graph.configSchema[itemKey];\n    if (item.isSensitive && item.resolvedValue && _.isString(item.resolvedValue)) {\n      // TODO: we want to respect masking settings from the schema (once added)\n      const redacted = redactString(item.resolvedValue);\n      if (redacted) sensitiveSecretsMap[item.resolvedValue] = redacted;\n    }\n  }\n\n  // reset find/replace regex+fn used for redacting secrets in strings\n  const findRegex = new RegExp(\n    [\n      `(${UNMASK_STR} )?`,\n      '(',\n      Object.keys(sensitiveSecretsMap)\n        // Escape special characters\n        .map((s) => s.replace(/[()[\\]{}*+?^$|#.,/\\\\\\s-]/g, '\\\\$&'))\n        // Sort for maximal munch\n        .sort((a, b) => b.length - a.length)\n        .join('|'),\n      ')',\n      `( ${UNMASK_STR})?`,\n    ].join(''),\n    'g',\n  );\n\n  const replaceFn: ReplaceFn = (match, pre, val, post) => {\n    // the pre and post matches only will be populated if they were present\n    // and they are used to unmask the secret - so we do not want to replace in this case\n    if (pre && post) return match;\n    return sensitiveSecretsMap[val];\n  };\n  redactorFindReplace = { find: findRegex, replace: replaceFn };\n}\n\n\nconst CONSOLE_METHODS = ['trace', 'debug', 'info', 'log', 'info', 'warn', 'error'];\n\n// While the module itself acts as a singleton to hold the current map of redacted values\n// we expose only the below const to end users\n\n/** singleton wrapper for varlock's redaction utilities */\nexport const VarlockRedactor = {\n  /**\n   * Redacts senstive config values from any string/array/object/etc\n   *\n   * NOTE - must be used only after varlock has loaded config\n   * */\n  redactSensitiveConfig(o: any): any {\n    if (!redactorFindReplace) return o;\n    if (!o) return o;\n\n    // TODO: handle more cases?\n    // we can probably redact safely from a few other datatypes - like set,map,etc?\n    // objects are a bit tougher\n    if (Array.isArray(o)) {\n      return o.map(VarlockRedactor.redactSensitiveConfig);\n    }\n    // try to redact if it's a plain object - not necessarily great for perf...\n    if (o && typeof (o) === 'object' && Object.getPrototypeOf(o) === Object.prototype) {\n      try {\n        return JSON.parse(VarlockRedactor.redactSensitiveConfig(JSON.stringify(o)));\n      } catch (err) {\n        return o;\n      }\n    }\n\n    const type = typeof o;\n    if (type === 'string' || (type === 'object' && Object.prototype.toString.call(o) === '[object String]')) {\n      return (o as string).replaceAll(redactorFindReplace.find, redactorFindReplace.replace);\n    }\n\n    return o;\n  },\n\n  /**\n   * utility to unmask a secret/sensitive value when logging to the console\n   * currently this only works on a single secret, not objects or aggregated strings\n   * */\n  unredact(secretStr: string) {\n    // if redaction not enabled, we just return the secret itself\n    if (!(globalThis as any)._varlockOrigWriteToConsoleFn) return secretStr;\n    // otherwise we add some wrapper characters which will be removed by the patched console behaviour\n    return `${UNMASK_STR} ${secretStr} ${UNMASK_STR}`;\n  },\n\n  /**\n   * patches global console methods to redact sensitive config\n   *\n   * NOTE - this may not be 100% foolproof depending on the platform\n   * */\n  patchConsole() {\n    /* eslint-disable no-console, prefer-rest-params */\n    if (!redactorFindReplace) return;\n\n    // our method of patching involves replacing an internal node method which may not be called if console.log itself has also been patched\n    // for example AWS lambdas patches this to write the logs to a file which then is pushed to the rest of their system\n\n    // so first we'll just patch the internal method do deal with normal stdout/stderr logs -------------------------------------\n\n    // we need the internal symbol name to access the internal method\n    const kWriteToConsoleSymbol = Object.getOwnPropertySymbols(globalThis.console).find((s) => s.description === 'kWriteToConsole');\n\n    // @ts-ignore\n    (globalThis as any)._varlockOrigWriteToConsoleFn ||= globalThis.console[kWriteToConsoleSymbol];\n    // @ts-ignore\n    globalThis.console[kWriteToConsoleSymbol] = function () {\n      (globalThis as any)._varlockOrigWriteToConsoleFn.apply(this, [\n        arguments[0],\n        VarlockRedactor.redactSensitiveConfig(arguments[1]),\n        arguments[2],\n      ]);\n    };\n\n    // and now we'll wrap console.log (and the other methods) if it looks like they have been patched already ------------------\n    // NOTE - this will not fully redact from everything since we can't safely reach deep into objects\n    // ideally we would only turn this when the above method does not work, but it's not trivial to detect when it that is the case\n    // so we'll turn it on all the time for now...\n    if (\n      // !console.log.toString().includes('[native code]') &&\n      !(console.log as any)._varlockPatchedFn\n    ) {\n      for (const logMethodName of CONSOLE_METHODS) {\n        // @ts-ignore\n        const originalLogMethod = globalThis.console[logMethodName];\n\n        const patchedFn = function () {\n          // @ts-ignore\n          originalLogMethod.apply(this, Array.from(arguments).map(VarlockRedactor.redactSensitiveConfig));\n        };\n        patchedFn._varlockPatchedFn = true;\n\n        // @ts-ignore\n        globalThis.console[logMethodName] = patchedFn;\n      }\n    }\n  },\n\n  /**\n   * restore's original global console methods to stop redacting secrets\n   *\n   * (only needed during local development when switching settings on/off in a process that does not reload)\n   * */\n  unpatchConsole() {\n    // we'll only care about the normal case where console.log has NOT been patched by something else... (see above)\n    if (!(globalThis as any)._varlockOrigWriteToConsoleFn) return;\n\n    const kWriteToConsoleSymbol = Object.getOwnPropertySymbols(globalThis.console).find((s) => s.description === 'kWriteToConsole');\n    // @ts-ignore\n    globalThis.console[kWriteToConsoleSymbol] = (globalThis as any)._varlockOrigWriteToConsoleFn;\n    delete (globalThis as any)._varlockOrigWriteToConsoleFn;\n  },\n};\n","import ansis, { AnsiColors, AnsiStyles } from 'ansis';\nimport _ from '@env-spec/utils/my-dash';\n\nimport { ConfigItem } from '../../../env-graph/src/lib/config-item';\nimport { VarlockError } from '../../../env-graph/src/lib/errors';\nimport { redactString } from './redaction-helpers';\n\ntype ColorMod = AnsiStyles | AnsiColors;\ntype ColorMods = ColorMod | Array<ColorMod>;\n\nfunction applyMods(str: string, mods?: ColorMods) {\n  if (!mods) return str;\n  if (_.isArray(mods)) {\n    let modStr = str;\n    mods.forEach((mod) => {\n      modStr = ansis[mod](modStr);\n    });\n    return modStr;\n  }\n  return ansis[mods](str);\n}\n\nexport function formattedValue(val: any, showType = false) {\n  let strVal: string = '';\n  let strType: string = '';\n  let mods: ColorMods | undefined;\n  if (_.isBoolean(val)) {\n    strVal = val.toString();\n    mods = ['yellow', 'italic'];\n    strType = 'boolean';\n  } else if (_.isNumber(val)) {\n    strVal = val.toString();\n    mods = 'yellow';\n    strType = 'number';\n  } else if (_.isString(val)) {\n    strVal = `\"${val}\"`;\n    strType = 'string';\n  } else if (_.isPlainObject(val)) {\n    // TODO: can definitely make this better...\n    strVal = JSON.stringify(val);\n    strType = 'object';\n  } else if (val === null) {\n    strVal = 'null';\n    mods = 'gray';\n  } else if (val === undefined) {\n    strVal = 'undefined';\n    mods = 'gray';\n  }\n  return [\n    applyMods(strVal, mods),\n    showType && strType ? ansis.gray(` (${strType})`) : '',\n  ].join('');\n}\n\n\nexport function formatError(err: VarlockError) {\n  let whenStr = '';\n  if (err.type === 'SchemaError') {\n    whenStr += 'during schema initialization';\n  }\n  if (err.type === 'ValidationError') {\n    whenStr += 'during validation';\n  }\n  if (err.type === 'CoercionError') {\n    whenStr += 'during coercion';\n  }\n  if (err.type === 'ResolutionError') {\n    whenStr += 'during resolution';\n  }\n\n  let errStr = `${err.icon} ${err.message}`;\n  if (err.isUnexpected) {\n    errStr += ansis.gray.italic(`\\n   (unexpected error${whenStr ? ` ${whenStr}` : ''})`);\n    if ('stack' in err) errStr += err.stack;\n  }\n  return errStr;\n}\n\nexport function joinAndCompact(strings: Array<string | number | boolean | undefined | null | false>, joinChar = ' ') {\n  return strings.filter((s) => (\n    // we'll not filter out empty strings - because it's useful to just add newlines\n    s !== undefined && s !== null && s !== false\n  )).join(joinChar);\n}\n\nconst VALIDATION_STATE_COLORS = {\n  error: 'red',\n  warn: 'yellow',\n  valid: 'cyan',\n} as const;\n\nexport function getItemSummary(item: ConfigItem) {\n  const summary: Array<string> = [];\n  const itemErrors = item.errors;\n  const icon = itemErrors.length ? itemErrors[0].icon : '✅';\n  const isSensitive = item.isSensitive;\n  const isRequired = item.isRequired;\n  summary.push(joinAndCompact([\n    icon,\n    ansis[VALIDATION_STATE_COLORS[item.validationState]](item.key) + (isRequired ? ansis.magenta('*') : ''),\n\n    // ansis.gray(`[type = ${item.type.typeLabel}]`),\n    isSensitive && ` 🔐${ansis.gray.italic('sensitive')}`,\n\n    // item.useAt ? ansis.gray.italic(`(${item.useAt?.join(', ')})`) : undefined,\n  ]));\n\n  let valAsStr = formattedValue(item.resolvedValue, false);\n  if (isSensitive && item.resolvedValue && _.isString(item.resolvedValue)) {\n    valAsStr = redactString(item.resolvedValue)!;\n  }\n\n  summary.push(joinAndCompact([\n    ansis.gray('   └'),\n    valAsStr,\n    item.isCoerced && (\n      ansis.gray.italic('< coerced from ')\n      + (isSensitive ? formattedValue(item.resolvedRawValue) : formattedValue(item.resolvedRawValue, false))\n    ),\n  ]));\n\n  // if (item.overrides?.length) {\n  //   const activeOverride = item.overrides[0];\n  //   let overrideNote = ansis.gray.italic('value set via override: ');\n  //   overrideNote += ansis.gray(activeOverride.sourceType);\n  //   if (activeOverride.sourceLabel) overrideNote += ansis.gray(` - ${activeOverride.sourceLabel}`);\n  //   summary.push(`      ${overrideNote}`);\n  // }\n\n  itemErrors?.forEach((err) => {\n    summary.push(ansis[err.isWarning ? 'yellow' : 'red'](`   - ${err.isWarning ? '[WARNING] ' : ''}${err.message}`));\n\n    // TODO: standardize here how we show parse error locations and stack info?\n\n    // summary.push(...err.cleanedStack || '');\n    if (err.tip) {\n      summary.push(...err.tip.split('\\n').map((line) => `     ${line}`));\n    }\n  });\n\n  // NO OBJECT/CHILDREN FOR NOW\n  // for (const childItem of _.values(item.children)) {\n  //   const childSummary = getItemSummary(childItem);\n  //   summary.push(childSummary.split('\\n').map((l) => `  ${l}`).join('\\n'));\n  // }\n\n  return summary.join('\\n');\n}\n","import { loadEnvGraph } from '@env-spec/env-graph';\n\nexport async function loadVarlockEnvGraph() {\n  const envGraph = await loadEnvGraph({\n    afterInit: async (g) => {\n      // TODO: register varlock resolver\n    },\n  });\n\n  return envGraph;\n}\n"]}

package/dist/chunk-R53MTEAM.js

@@ -0,0 +1,32 @@
+import { define } from './chunk-33ROL4J5.js';
+import { loadEnvGraph } from './chunk-HZADDTO5.js';
+import { __name } from './chunk-XN24GZXQ.js';
+
+// src/cli/helpers/install-detection.ts
+function isBundledSEA() {
+  try {
+    return false;
+  } catch (e) {
+    return false;
+  }
+}
+__name(isBundledSEA, "isBundledSEA");
+
+// src/cli/commands/doctor.command.ts
+var commandSpec = define({
+  name: "doctor",
+  description: "Debug and diagnose issues with your env file(s) and system",
+  args: {}
+});
+var commandFn = /* @__PURE__ */ __name(async (ctx) => {
+  console.log("");
+  await console.log("\u{1F9D9} Scanning for issues... \u2728");
+  console.log("Bundled SEA?", isBundledSEA());
+  const envGraph = await loadEnvGraph();
+  await envGraph.resolveEnvValues();
+  envGraph.getResolvedEnvObject();
+}, "commandFn");
+
+export { commandFn, commandSpec };
+//# sourceMappingURL=chunk-R53MTEAM.js.map
+//# sourceMappingURL=chunk-R53MTEAM.js.map

package/dist/chunk-R53MTEAM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/helpers/install-detection.ts","../src/cli/commands/doctor.command.ts"],"names":[],"mappings":";;;;;AACO,SAAS,YAAe,GAAA;AAC7B,EAAI,IAAA;AACF,IAAO,OAAA,KAAA;AAAA,WACA,CAAG,EAAA;AACV,IAAO,OAAA,KAAA;AAAA;AAEX;AANgB,MAAA,CAAA,YAAA,EAAA,cAAA,CAAA;;;ACIT,IAAM,cAAc,MAAO,CAAA;AAAA,EAChC,IAAM,EAAA,QAAA;AAAA,EACN,WAAa,EAAA,4DAAA;AAAA,EACb,MAAM;AACR,CAAC;AAEY,IAAA,SAAA,iCAA6D,GAAQ,KAAA;AAChF,EAAA,OAAA,CAAQ,IAAI,EAAE,CAAA;AACd,EAAM,MAAA,OAAA,CAAQ,IAAI,yCAA6B,CAAA;AAE/C,EAAQ,OAAA,CAAA,GAAA,CAAI,cAAgB,EAAA,YAAA,EAAc,CAAA;AAE1C,EAAM,MAAA,QAAA,GAAW,MAAM,YAAa,EAAA;AACpC,EAAA,MAAM,SAAS,gBAAiB,EAAA;AAChC,EAAoB,SAAS,oBAAqB;AAIpD,CAZmE,EAAA,WAAA","file":"chunk-R53MTEAM.js","sourcesContent":["\nexport function isBundledSEA() {\n  try {\n    return __VARLOCK_SEA_BUILD__;\n  } catch (e) {\n    return false;\n  }\n}\n","import { define } from 'gunshi';\nimport { loadEnvGraph } from '@env-spec/env-graph';\nimport { isBundledSEA } from '../helpers/install-detection';\nimport { TypedGunshiCommandFn } from '../helpers/gunshi-type-utils';\n\nexport const commandSpec = define({\n  name: 'doctor',\n  description: 'Debug and diagnose issues with your env file(s) and system',\n  args: {},\n});\n\nexport const commandFn: TypedGunshiCommandFn<typeof commandSpec> = async (ctx) => {\n  console.log('');\n  await console.log('🧙 Scanning for issues... ✨');\n\n  console.log('Bundled SEA?', isBundledSEA());\n\n  const envGraph = await loadEnvGraph();\n  await envGraph.resolveEnvValues();\n  const resolvedEnv = envGraph.getResolvedEnvObject();\n\n  // TODO: Mac app checks\n  // - installed, running, logged in, set up (keys exist), locked/unlocked state\n};\n\n"]}

package/dist/chunk-RCHPHIHX.js

@@ -0,0 +1,15 @@
+import { define } from './chunk-33ROL4J5.js';
+import { __name } from './chunk-XN24GZXQ.js';
+
+// src/cli/commands/help.command.ts
+var commandSpec = define({
+  name: "help",
+  description: "Show help info for varlock",
+  args: {}
+});
+var commandFn = /* @__PURE__ */ __name(async (ctx) => {
+}, "commandFn");
+
+export { commandFn, commandSpec };
+//# sourceMappingURL=chunk-RCHPHIHX.js.map
+//# sourceMappingURL=chunk-RCHPHIHX.js.map

package/dist/chunk-RCHPHIHX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/help.command.ts"],"names":[],"mappings":";;;;AAGO,IAAM,cAAc,MAAO,CAAA;AAAA,EAChC,IAAM,EAAA,MAAA;AAAA,EACN,WAAa,EAAA,4BAAA;AAAA,EACb,MAAM;AACR,CAAC;AAEY,IAAA,SAAA,iCAA6D,GAAQ,KAAA;AAElF,CAFmE,EAAA,WAAA","file":"chunk-RCHPHIHX.js","sourcesContent":["import { define } from 'gunshi';\nimport { TypedGunshiCommandFn } from '../helpers/gunshi-type-utils';\n\nexport const commandSpec = define({\n  name: 'help',\n  description: 'Show help info for varlock',\n  args: {},\n});\n\nexport const commandFn: TypedGunshiCommandFn<typeof commandSpec> = async (ctx) => {\n  // no-op - we'll trigger help from main entry point\n};\n"]}

package/dist/chunk-XN24GZXQ.js

@@ -0,0 +1,35 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __glob = (map) => (path) => {
+  var fn = map[path];
+  if (fn) return fn();
+  throw new Error("Module not found in bundle: " + path);
+};
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+export { __commonJS, __glob, __name, __toESM };
+//# sourceMappingURL=chunk-XN24GZXQ.js.map
+//# sourceMappingURL=chunk-XN24GZXQ.js.map

package/dist/chunk-XN24GZXQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-XN24GZXQ.js"}

package/dist/cli/cli-executable.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/cli/cli-executable.js

@@ -0,0 +1,206 @@
+import { commandSpec as commandSpec$2 } from '../chunk-35HGPX6I.js';
+import { commandSpec as commandSpec$3 } from '../chunk-B4UBSMSZ.js';
+import { commandSpec as commandSpec$4 } from '../chunk-R53MTEAM.js';
+import { commandSpec as commandSpec$5 } from '../chunk-RCHPHIHX.js';
+import { commandSpec as commandSpec$6 } from '../chunk-QCC3P7BT.js';
+import { CONFIG, commandSpec as commandSpec$7 } from '../chunk-CPA2D42B.js';
+import { CliExitError, commandSpec } from '../chunk-EMPXU5TW.js';
+import '../chunk-DAZNZPLN.js';
+import { fmt } from '../chunk-LQZ6ICSS.js';
+import { commandSpec as commandSpec$1 } from '../chunk-BRP5MZU6.js';
+import { InvalidEnvError } from '../chunk-NZDUC7Q3.js';
+import { cli } from '../chunk-33ROL4J5.js';
+import '../chunk-QTYVZQSF.js';
+import { EnvSourceParseError } from '../chunk-HZADDTO5.js';
+import { ansis_default } from '../chunk-7UQXFWKN.js';
+import { __name } from '../chunk-XN24GZXQ.js';
+import { homedir } from 'os';
+import { join } from 'path';
+import { readFile } from 'fs/promises';
+import { existsSync } from 'fs';
+
+var VARLOCK_BANNER = [
+  "",
+  " \u2588\u2588\u2592   \u2588\u2593 \u2584\u2584\u2584       \u2588\u2588\u2580\u2588\u2588\u2588   \u2588\u2588\u2593     \u2592\u2588\u2588\u2588\u2588\u2588   \u2584\u2588\u2588\u2588\u2588\u2584   \u2588\u2588 \u2584\u2588\u2580",
+  " \u2593\u2588\u2588\u2591   \u2588\u2592\u2592\u2588\u2588\u2588\u2588\u2584    \u2593\u2588\u2588 \u2592 \u2588\u2588\u2592\u2593\u2588\u2588\u2592    \u2592\u2588\u2588\u2592  \u2588\u2588\u2592\u2592\u2588\u2588\u2580 \u2580\u2588   \u2588\u2588\u2584\u2588\u2592 ",
+  "  \u2593\u2588\u2588  \u2588\u2592\u2591\u2592\u2588\u2588  \u2580\u2588\u2584  \u2593\u2588\u2588 \u2591\u2584\u2588 \u2592\u2592\u2588\u2588\u2591    \u2592\u2588\u2588\u2591  \u2588\u2588\u2592\u2592\u2588\u2588    \u2584 \u2593\u2588\u2588\u2588\u2584\u2591 ",
+  "   \u2592\u2588\u2588 \u2588\u2591\u2591\u2591\u2588\u2588\u2584\u2584\u2584\u2584\u2588\u2588 \u2592\u2588\u2588\u2580\u2580\u2588\u2584  \u2592\u2588\u2588\u2591    \u2592\u2588\u2588   \u2588\u2588\u2591\u2592\u2588\u2588\u2584 \u2584\u2588\u2588\u2592\u2593\u2588\u2588 \u2588\u2584 ",
+  "    \u2592\u2580\u2588\u2591   \u2593\u2588   \u2593\u2588\u2588\u2592\u2591\u2588\u2588\u2593 \u2592\u2588\u2588\u2592\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2592\u2591 \u2588\u2588\u2588\u2588\u2588\u2592\u2591\u2592 \u2588\u2588\u2588\u2588\u2580 \u2591\u2592\u2588\u2588\u2592 \u2588\u2584",
+  "    \u2591 \u2590\u2591   \u2592\u2592   \u2593\u2592\u2588\u2591\u2591 \u2592\u2593 \u2591\u2592\u2593\u2591\u2591 \u2592\u2591\u2593  \u2591\u2591 \u2592\u2591\u2592\u2591\u2592\u2591 \u2591 \u2591\u2592 \u2592  \u2591\u2592 \u2592\u2592 \u2593\u2592",
+  "    \u2591 \u2591\u2591    \u2592   \u2592\u2592 \u2591  \u2591\u2592 \u2591 \u2592\u2591\u2591 \u2591 \u2592  \u2591  \u2591 \u2592 \u2592\u2591   \u2591  \u2592   \u2591 \u2591\u2592 \u2592\u2591",
+  "      \u2591\u2591    \u2591   \u2592     \u2591\u2591   \u2591   \u2591 \u2591   \u2591 \u2591 \u2591 \u2592  \u2591        \u2591 \u2591\u2591 \u2591 ",
+  "       \u2591        \u2591  \u2591   \u2591         \u2591  \u2591    \u2591 \u2591  \u2591 \u2591      \u2591  \u2591   "
+  // '      ░                                       ░               ',
+].join("\n");
+var VARLOCK_BANNER_COLOR = VARLOCK_BANNER.replaceAll(/([▀▁▂▃▄▅▆▇█▉▊▋▌▍▎▏▐▔▕▖▗▘▙▚▛▜▝▞▟]+)/g, (m) => ansis_default.hex("#DD0000")(m)).replaceAll(/([▓░▒]+)/g, (m) => ansis_default.blue(m));
+async function checkIsOptedOut() {
+  if (process.env.PH_OPT_OUT === "true") {
+    return true;
+  }
+  const configPath = join(homedir(), ".varlock", "config.json");
+  if (existsSync(configPath)) {
+    try {
+      const configContent = await readFile(configPath, "utf-8");
+      const config = JSON.parse(configContent);
+      return config.analytics_opt_out === true;
+    } catch (error) {
+      console.debug("Failed to read analytics config:", error);
+    }
+  }
+  return false;
+}
+__name(checkIsOptedOut, "checkIsOptedOut");
+var DEBUG_PH = !!process.env.DEBUG_PH;
+var isOptedOut = await checkIsOptedOut();
+if (DEBUG_PH) console.log("posthog opted out: ", isOptedOut);
+async function posthogCapture(event, properties) {
+  if (isOptedOut) return;
+  const payload = {
+    api_key: CONFIG.POSTHOG_API_KEY,
+    event,
+    properties: {
+      $process_person_profile: false,
+      ...properties
+    },
+    distinct_id: "anonymous"
+  };
+  const res = await fetch(`${CONFIG.POSTHOG_HOST}/i/v0/e/`, {
+    method: "POST",
+    body: JSON.stringify(payload),
+    headers: {
+      "Content-Type": "application/json"
+    }
+  });
+  if (DEBUG_PH) console.log("res", await res.text());
+}
+__name(posthogCapture, "posthogCapture");
+async function trackCommand(command, properties) {
+  await posthogCapture("cli_command_executed", {
+    command,
+    ...properties
+  });
+}
+__name(trackCommand, "trackCommand");
+
+// package.json
+var package_default = {
+  name: "varlock",
+  version: "0.0.1",
+  description: "",
+  main: "index.js",
+  type: "module",
+  author: "dmno-dev",
+  license: "MIT",
+  scripts: {
+    build: "tsup",
+    "build:sea": "tsup --config tsup-sea.config.ts",
+    dev: "tsup",
+    test: "vitest",
+    lint: "eslint .",
+    "lint:fix": "pnpm run lint --fix"
+  },
+  keywords: [],
+  files: [
+    "/bin",
+    "/dist"
+  ],
+  bin: {
+    varlock: "./bin/cli.js"
+  },
+  exports: {
+    ".": "./dist/index.js",
+    "./auto-load": "./dist/auto-load.js",
+    "./config": "./dist/dotenv-compat.js",
+    "./config.js": "./dist/dotenv-compat.js"
+  },
+  dependencies: {
+    "@env-spec/parser": "workspace:*",
+    debug: "catalog:",
+    execa: "^9.5.2",
+    which: "^5.0.0"
+  },
+  devDependencies: {
+    "@clack/core": "^0.5.0",
+    "@clack/prompts": "^0.11.0",
+    "@env-spec/env-graph": "workspace:*",
+    "@env-spec/utils": "workspace:*",
+    "@sindresorhus/is": "catalog:",
+    "@types/debug": "catalog:",
+    "@types/node": "catalog:",
+    "@types/which": "^3.0.4",
+    "@yao-pkg/pkg": "^6.4.1",
+    ansis: "catalog:",
+    gunshi: "^0.26.3",
+    "is-unicode-supported": "^2.1.0",
+    outdent: "^0.8.0",
+    tsup: "catalog:",
+    vitest: "catalog:"
+  }
+};
+
+// src/cli/cli-executable.ts
+var mainCommand = {
+  run: /* @__PURE__ */ __name(() => {
+    console.log("Use one of the sub-commands...");
+  }, "run")
+};
+function buildLazyCommand(commandSpec9, loadCommandFn) {
+  const commandName = commandSpec9.name;
+  return {
+    ...commandSpec9,
+    run: /* @__PURE__ */ __name(async (...args) => {
+      await trackCommand(commandName, { command: commandName });
+      const commandSpecAndFn = await loadCommandFn();
+      return commandSpecAndFn.commandFn(...args);
+    }, "run")
+  };
+}
+__name(buildLazyCommand, "buildLazyCommand");
+var subCommands = /* @__PURE__ */ new Map();
+subCommands.set("init", buildLazyCommand(commandSpec, async () => await import('../init.command-7BSALNL5.js')));
+subCommands.set("load", buildLazyCommand(commandSpec$1, async () => await import('../load.command-4MJR5J43.js')));
+subCommands.set("run", buildLazyCommand(commandSpec$2, async () => await import('../run.command-ASKXIWBC.js')));
+subCommands.set("encrypt", buildLazyCommand(commandSpec$3, async () => await import('../encrypt.command-VGJABHNK.js')));
+subCommands.set("doctor", buildLazyCommand(commandSpec$4, async () => await import('../doctor.command-N5JAIXRM.js')));
+subCommands.set("help", buildLazyCommand(commandSpec$5, async () => await import('../help.command-YZDL2VEQ.js')));
+subCommands.set("opt-out", buildLazyCommand(commandSpec$6, async () => await import('../opt-out.command-Y4KUQ6PQ.js')));
+subCommands.set("login", buildLazyCommand(commandSpec$7, async () => await import('../login.command-22RUZJLR.js')));
+(/* @__PURE__ */ __name(async function go() {
+  try {
+    let args = process.argv.slice(2);
+    if (args[0] === "help") args = ["--help"];
+    if (false) ;
+    await cli(args, mainCommand, {
+      name: "varlock",
+      description: "Encrypt and protect your env vars",
+      version: package_default.version,
+      subCommands,
+      renderHeader: /* @__PURE__ */ __name(async (ctx) => {
+        if (ctx.name) return "";
+        return VARLOCK_BANNER_COLOR;
+      }, "renderHeader")
+    });
+    process.exit(0);
+  } catch (error) {
+    if (error instanceof CliExitError || error instanceof InvalidEnvError) {
+      console.error(error.getFormattedOutput());
+    } else if (error instanceof EnvSourceParseError) {
+      console.log(`\u{1F6A8} Error encountered while loading ${error.location.path}`);
+      console.log(error.message);
+      const errLoc = error.location;
+      const errPreview = [
+        errLoc.lineStr,
+        `${ansis_default.gray("-".repeat(errLoc.colNumber - 1))}${ansis_default.red("^")}`
+      ].join("\n");
+      console.log("Error parsing .env file");
+      console.log(fmt.filePath(`${errLoc.path}:${errLoc.lineNumber}:${errLoc.colNumber}`));
+      console.log(errPreview);
+      process.exit(1);
+    } else {
+      throw error;
+    }
+    process.exit(1);
+  }
+}, "go"))();
+//# sourceMappingURL=cli-executable.js.map
+//# sourceMappingURL=cli-executable.js.map