vaulter 0.2.0

package/dist/lib/s3-key-loader.js

@@ -0,0 +1,83 @@
+/**
+ * S3 Key Loader
+ *
+ * Fetches encryption keys from S3-compatible storage
+ * Supports: AWS S3, MinIO, R2, Spaces, B2
+ */
+export function parseS3Url(url) {
+    const parsed = new URL(url);
+    if (parsed.protocol === 's3:') {
+        // s3://bucket/path/to/key
+        const bucket = parsed.hostname;
+        const key = parsed.pathname.slice(1); // Remove leading /
+        const region = parsed.searchParams.get('region') || undefined;
+        return { bucket, key, region };
+    }
+    if (parsed.protocol === 'http:' || parsed.protocol === 'https:') {
+        // HTTP endpoint (MinIO, R2, etc.)
+        // Format: http://host:port/bucket/path or with auth http://key:secret@host/bucket/path
+        const endpoint = `${parsed.protocol}//${parsed.host}`;
+        const pathParts = parsed.pathname.slice(1).split('/');
+        const bucket = pathParts[0];
+        const key = pathParts.slice(1).join('/');
+        return {
+            bucket,
+            key,
+            endpoint,
+            accessKeyId: parsed.username || undefined,
+            secretAccessKey: parsed.password || undefined
+        };
+    }
+    throw new Error(`Unsupported S3 URL format: ${url}`);
+}
+/**
+ * Fetch a key from S3
+ * Uses dynamic import to avoid bundling AWS SDK when not needed
+ */
+export async function fetchKeyFromS3(location) {
+    try {
+        // Dynamically import AWS SDK
+        const { S3Client, GetObjectCommand } = await import('@aws-sdk/client-s3');
+        // Build client config
+        const clientConfig = {};
+        if (location.region) {
+            clientConfig.region = location.region;
+        }
+        if (location.endpoint) {
+            clientConfig.endpoint = location.endpoint;
+            clientConfig.forcePathStyle = true; // Required for MinIO/custom endpoints
+        }
+        if (location.accessKeyId && location.secretAccessKey) {
+            clientConfig.credentials = {
+                accessKeyId: location.accessKeyId,
+                secretAccessKey: location.secretAccessKey
+            };
+        }
+        const client = new S3Client(clientConfig);
+        const command = new GetObjectCommand({
+            Bucket: location.bucket,
+            Key: location.key
+        });
+        const response = await client.send(command);
+        if (!response.Body) {
+            throw new Error('Empty response from S3');
+        }
+        // Read body as string
+        const bodyContents = await response.Body.transformToString();
+        return bodyContents.trim();
+    }
+    catch (err) {
+        if (err.code === 'ERR_MODULE_NOT_FOUND' || err.message?.includes('Cannot find module')) {
+            throw new Error('AWS SDK not installed. To use S3 key source, install: pnpm add @aws-sdk/client-s3');
+        }
+        throw new Error(`Failed to fetch key from S3: ${err.message}`);
+    }
+}
+/**
+ * Load encryption key from S3 URL
+ */
+export async function loadKeyFromS3(s3Url) {
+    const location = parseS3Url(s3Url);
+    return fetchKeyFromS3(location);
+}
+//# sourceMappingURL=s3-key-loader.js.map

package/dist/lib/s3-key-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-key-loader.js","sourceRoot":"","sources":["../../src/lib/s3-key-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAE3B,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,0BAA0B;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAA;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,mBAAmB;QACxD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAA;QAE7D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,kCAAkC;QAClC,uFAAuF;QACvF,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAA;QACrD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAExC,OAAO;YACL,MAAM;YACN,GAAG;YACH,QAAQ;YACR,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;YACzC,eAAe,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;SAC9C,CAAA;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAA;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAuB;IAC1D,IAAI,CAAC;QACH,6BAA6B;QAC7B,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAA;QAEzE,sBAAsB;QACtB,MAAM,YAAY,GAAQ,EAAE,CAAA;QAE5B,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,YAAY,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;QACvC,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;YACzC,YAAY,CAAC,cAAc,GAAG,IAAI,CAAA,CAAC,sCAAsC;QAC3E,CAAC;QAED,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YACrD,YAAY,CAAC,WAAW,GAAG;gBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,eAAe,EAAE,QAAQ,CAAC,eAAe;aAC1C,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAA;QAEzC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;SAClB,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAE3C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC3C,CAAC;QAED,sBAAsB;QACtB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAC5D,OAAO,YAAY,CAAC,IAAI,EAAE,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAA;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAChE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAA;AACjC,CAAC"}

package/dist/lib/secret-patterns.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Secret detection utilities based on glob patterns.
+ */
+import type { VaulterConfig } from '../types.js';
+export declare function getSecretPatterns(config?: VaulterConfig | null): string[];
+export declare function splitVarsBySecret(vars: Record<string, string>, patterns: string[]): {
+    secrets: Record<string, string>;
+    plain: Record<string, string>;
+};
+//# sourceMappingURL=secret-patterns.d.ts.map

package/dist/lib/secret-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-patterns.d.ts","sourceRoot":"","sources":["../../src/lib/secret-patterns.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAIhD,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,EAAE,CAMzE;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAcpE"}

package/dist/lib/secret-patterns.js

@@ -0,0 +1,27 @@
+/**
+ * Secret detection utilities based on glob patterns.
+ */
+import { DEFAULT_SECRET_PATTERNS } from '../types.js';
+import { compileGlobPatterns } from './pattern-matcher.js';
+export function getSecretPatterns(config) {
+    const patterns = config?.security?.auto_encrypt?.patterns;
+    if (patterns && patterns.length > 0) {
+        return patterns;
+    }
+    return DEFAULT_SECRET_PATTERNS;
+}
+export function splitVarsBySecret(vars, patterns) {
+    const isSecret = compileGlobPatterns(patterns);
+    const secrets = {};
+    const plain = {};
+    for (const [key, value] of Object.entries(vars)) {
+        if (isSecret(key)) {
+            secrets[key] = value;
+        }
+        else {
+            plain[key] = value;
+        }
+    }
+    return { secrets, plain };
+}
+//# sourceMappingURL=secret-patterns.js.map

package/dist/lib/secret-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-patterns.js","sourceRoot":"","sources":["../../src/lib/secret-patterns.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,UAAU,iBAAiB,CAAC,MAA6B;IAC7D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAA;IACzD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,OAAO,uBAAuB,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAA4B,EAC5B,QAAkB;IAElB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,MAAM,KAAK,GAA2B,EAAE,CAAA;IAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC"}

package/dist/load.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Vaulter - Auto-load environment variables
+ *
+ * Import this module to automatically load .env files into process.env
+ *
+ * Usage:
+ *   import 'vaulter/load'
+ *
+ * This is equivalent to:
+ *   import dotenv from 'dotenv'
+ *   dotenv.config()
+ */
+export {};
+//# sourceMappingURL=load.d.ts.map

package/dist/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../src/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/load.js

@@ -0,0 +1,15 @@
+/**
+ * Vaulter - Auto-load environment variables
+ *
+ * Import this module to automatically load .env files into process.env
+ *
+ * Usage:
+ *   import 'vaulter/load'
+ *
+ * This is equivalent to:
+ *   import dotenv from 'dotenv'
+ *   dotenv.config()
+ */
+import dotenv from 'dotenv';
+dotenv.config();
+//# sourceMappingURL=load.js.map

package/dist/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../src/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,MAAM,CAAC,MAAM,EAAE,CAAA"}

package/dist/loader.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Vaulter - Programmatic environment loader
+ *
+ * Usage:
+ *   import { loader } from 'vaulter'
+ *   loader()
+ *
+ * With options:
+ *   loader({ path: '.env.local' })
+ *   loader({ path: '.env.production', override: true })
+ */
+import type { DotenvConfigOptions, DotenvConfigOutput } from 'dotenv';
+export interface LoaderOptions extends DotenvConfigOptions {
+    /**
+     * Path to .env file
+     * @default '.env'
+     */
+    path?: string;
+    /**
+     * Override existing environment variables
+     * @default false
+     */
+    override?: boolean;
+    /**
+     * Enable debug output
+     * @default false
+     */
+    debug?: boolean;
+}
+/**
+ * Load environment variables from .env file into process.env
+ *
+ * @param options - Configuration options
+ * @returns Result with parsed variables or error
+ *
+ * @example
+ * // Basic usage
+ * import { loader } from 'vaulter'
+ * loader()
+ *
+ * @example
+ * // Load specific file
+ * loader({ path: '.env.production' })
+ *
+ * @example
+ * // Override existing vars
+ * loader({ path: '.env.local', override: true })
+ */
+export declare function loader(options?: LoaderOptions): DotenvConfigOutput;
+/**
+ * Parse a string containing environment variables
+ * Does NOT modify process.env
+ *
+ * @param src - String to parse (e.g., contents of .env file)
+ * @returns Parsed key-value pairs
+ *
+ * @example
+ * import { parse } from 'vaulter'
+ * const vars = parse('FOO=bar\nBAZ=qux')
+ * // { FOO: 'bar', BAZ: 'qux' }
+ */
+export declare function parse(src: string): Record<string, string>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAErE,MAAM,WAAW,aAAc,SAAQ,mBAAmB;IACxD;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,kBAAkB,CAElE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEzD"}

package/dist/loader.js

@@ -0,0 +1,50 @@
+/**
+ * Vaulter - Programmatic environment loader
+ *
+ * Usage:
+ *   import { loader } from 'vaulter'
+ *   loader()
+ *
+ * With options:
+ *   loader({ path: '.env.local' })
+ *   loader({ path: '.env.production', override: true })
+ */
+import dotenv from 'dotenv';
+/**
+ * Load environment variables from .env file into process.env
+ *
+ * @param options - Configuration options
+ * @returns Result with parsed variables or error
+ *
+ * @example
+ * // Basic usage
+ * import { loader } from 'vaulter'
+ * loader()
+ *
+ * @example
+ * // Load specific file
+ * loader({ path: '.env.production' })
+ *
+ * @example
+ * // Override existing vars
+ * loader({ path: '.env.local', override: true })
+ */
+export function loader(options) {
+    return dotenv.config(options);
+}
+/**
+ * Parse a string containing environment variables
+ * Does NOT modify process.env
+ *
+ * @param src - String to parse (e.g., contents of .env file)
+ * @returns Parsed key-value pairs
+ *
+ * @example
+ * import { parse } from 'vaulter'
+ * const vars = parse('FOO=bar\nBAZ=qux')
+ * // { FOO: 'bar', BAZ: 'qux' }
+ */
+export function parse(src) {
+    return dotenv.parse(src);
+}
+//# sourceMappingURL=loader.js.map

package/dist/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAuB3B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,MAAM,CAAC,OAAuB;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC"}

package/dist/mcp/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Vaulter MCP Server Entry Point
+ *
+ * Run with: npx vaulter-mcp
+ * Or: node dist/mcp/index.js
+ */
+import './preload.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,cAAc,CAAA"}

package/dist/mcp/index.js

@@ -0,0 +1,14 @@
+/**
+ * Vaulter MCP Server Entry Point
+ *
+ * Run with: npx vaulter-mcp
+ * Or: node dist/mcp/index.js
+ */
+// Preload must be first - sets process.maxListeners before other imports
+import './preload.js';
+import { startServer } from './server.js';
+startServer().catch((error) => {
+    console.error('Failed to start MCP server:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,yEAAyE;AACzE,OAAO,cAAc,CAAA;AAErB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAA;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/mcp/preload.d.ts

@@ -0,0 +1,6 @@
+/**
+ * MCP Preload module - runs before any other imports
+ * Prevents MaxListenersExceededWarning from s3db.js dependencies
+ */
+export {};
+//# sourceMappingURL=preload.d.ts.map

package/dist/mcp/preload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preload.d.ts","sourceRoot":"","sources":["../../src/mcp/preload.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/mcp/preload.js

@@ -0,0 +1,7 @@
+/**
+ * MCP Preload module - runs before any other imports
+ * Prevents MaxListenersExceededWarning from s3db.js dependencies
+ */
+process.setMaxListeners(50);
+export {};
+//# sourceMappingURL=preload.js.map

package/dist/mcp/preload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preload.js","sourceRoot":"","sources":["../../src/mcp/preload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA"}

package/dist/mcp/resources.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Vaulter MCP Resources
+ *
+ * Resource definitions and handlers for the MCP server
+ * Resources expose environment variables as readable content
+ */
+import type { Resource } from '@modelcontextprotocol/sdk/types.js';
+/**
+ * List available resources
+ * Returns resources for each project/environment combination found in config
+ */
+export declare function listResources(): Promise<Resource[]>;
+/**
+ * Read a resource by URI
+ */
+export declare function handleResourceRead(uri: string): Promise<{
+    contents: Array<{
+        uri: string;
+        mimeType: string;
+        text: string;
+    }>;
+}>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/mcp/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../src/mcp/resources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAgDlE;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CA2BzD;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAyCnI"}

package/dist/mcp/resources.js

@@ -0,0 +1,112 @@
+/**
+ * Vaulter MCP Resources
+ *
+ * Resource definitions and handlers for the MCP server
+ * Resources expose environment variables as readable content
+ */
+import { VaulterClient } from '../client.js';
+import { loadConfig, loadEncryptionKey } from '../lib/config-loader.js';
+const ENVIRONMENTS = ['dev', 'stg', 'prd', 'sbx', 'dr'];
+/**
+ * Get current config and client
+ */
+async function getClientAndConfig() {
+    let config = null;
+    try {
+        config = loadConfig();
+    }
+    catch {
+        // Config not found is OK
+    }
+    const connectionString = config?.backend?.url;
+    const passphrase = config ? await loadEncryptionKey(config) : undefined;
+    const client = new VaulterClient({
+        connectionString: connectionString || undefined,
+        passphrase: passphrase || undefined
+    });
+    return { client, config };
+}
+/**
+ * Parse a vaulter:// URI
+ * Format: vaulter://project/environment
+ * Example: vaulter://my-app/dev
+ */
+function parseResourceUri(uri) {
+    const match = uri.match(/^vaulter:\/\/([^/]+)\/([^/]+)(?:\/([^/]+))?$/);
+    if (!match)
+        return null;
+    const [, project, env, service] = match;
+    if (!ENVIRONMENTS.includes(env))
+        return null;
+    return {
+        project,
+        environment: env,
+        service
+    };
+}
+/**
+ * List available resources
+ * Returns resources for each project/environment combination found in config
+ */
+export async function listResources() {
+    const { config } = await getClientAndConfig();
+    if (!config?.project) {
+        return [];
+    }
+    const project = config.project;
+    const environments = config.environments || ENVIRONMENTS;
+    const service = config.service;
+    const resources = [];
+    for (const env of environments) {
+        const uri = service
+            ? `vaulter://${project}/${env}/${service}`
+            : `vaulter://${project}/${env}`;
+        resources.push({
+            uri,
+            name: `${project}/${env}${service ? `/${service}` : ''}`,
+            description: `Environment variables for ${project} in ${env}`,
+            mimeType: 'text/plain'
+        });
+    }
+    return resources;
+}
+/**
+ * Read a resource by URI
+ */
+export async function handleResourceRead(uri) {
+    const parsed = parseResourceUri(uri);
+    if (!parsed) {
+        throw new Error(`Invalid resource URI: ${uri}. Expected format: vaulter://project/environment[/service]`);
+    }
+    const { project, environment, service } = parsed;
+    const { client } = await getClientAndConfig();
+    try {
+        await client.connect();
+        const vars = await client.export(project, environment, service);
+        const entries = Object.entries(vars);
+        if (entries.length === 0) {
+            return {
+                contents: [{
+                        uri,
+                        mimeType: 'text/plain',
+                        text: `# No variables found for ${project}/${environment}`
+                    }]
+            };
+        }
+        // Format as .env file content
+        const envContent = entries
+            .map(([key, value]) => `${key}=${value}`)
+            .join('\n');
+        return {
+            contents: [{
+                    uri,
+                    mimeType: 'text/plain',
+                    text: `# Environment: ${project}/${environment}${service ? `/${service}` : ''}\n# Variables: ${entries.length}\n\n${envContent}`
+                }]
+        };
+    }
+    finally {
+        await client.disconnect();
+    }
+}
+//# sourceMappingURL=resources.js.map

package/dist/mcp/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../src/mcp/resources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAGvE,MAAM,YAAY,GAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;AAEtE;;GAEG;AACH,KAAK,UAAU,kBAAkB;IAC/B,IAAI,MAAM,GAAyB,IAAI,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,EAAE,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,CAAA;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAEvE,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,gBAAgB,EAAE,gBAAgB,IAAI,SAAS;QAC/C,UAAU,EAAE,UAAU,IAAI,SAAS;KACpC,CAAC,CAAA;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,KAAK,CAAA;IACvC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAkB,CAAC;QAAE,OAAO,IAAI,CAAA;IAE3D,OAAO;QACL,OAAO;QACP,WAAW,EAAE,GAAkB;QAC/B,OAAO;KACR,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,EAAE,CAAA;IAE7C,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,YAAY,CAAA;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAE9B,MAAM,SAAS,GAAe,EAAE,CAAA;IAEhC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO;YACjB,CAAC,CAAC,aAAa,OAAO,IAAI,GAAG,IAAI,OAAO,EAAE;YAC1C,CAAC,CAAC,aAAa,OAAO,IAAI,GAAG,EAAE,CAAA;QAEjC,SAAS,CAAC,IAAI,CAAC;YACb,GAAG;YACH,IAAI,EAAE,GAAG,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACxD,WAAW,EAAE,6BAA6B,OAAO,OAAO,GAAG,EAAE;YAC7D,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,4DAA4D,CAAC,CAAA;IAC3G,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,EAAE,CAAA;IAE7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QAEtB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAEpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,QAAQ,EAAE,CAAC;wBACT,GAAG;wBACH,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,4BAA4B,OAAO,IAAI,WAAW,EAAE;qBAC3D,CAAC;aACH,CAAA;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,OAAO;aACvB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;aACxC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,OAAO;YACL,QAAQ,EAAE,CAAC;oBACT,GAAG;oBACH,QAAQ,EAAE,YAAY;oBACtB,IAAI,EAAE,kBAAkB,OAAO,IAAI,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,OAAO,CAAC,MAAM,OAAO,UAAU,EAAE;iBACjI,CAAC;SACH,CAAA;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,UAAU,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC"}

package/dist/mcp/server.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Vaulter MCP Server
+ *
+ * Model Context Protocol server for Claude integration
+ * Exposes vaulter tools and resources via stdio transport
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+/**
+ * Create and configure the MCP server
+ */
+export declare function createServer(): Server;
+/**
+ * Start the MCP server with stdio transport
+ */
+export declare function startServer(): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/mcp/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAgBlE;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CA6CrC;AAED;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAgBjD"}

package/dist/mcp/server.js

@@ -0,0 +1,81 @@
+/**
+ * Vaulter MCP Server
+ *
+ * Model Context Protocol server for Claude integration
+ * Exposes vaulter tools and resources via stdio transport
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, ReadResourceRequestSchema, ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';
+import { registerTools, handleToolCall } from './tools.js';
+import { handleResourceRead, listResources } from './resources.js';
+const SERVER_NAME = 'vaulter';
+const SERVER_VERSION = process.env.VAULTER_VERSION || '0.1.0';
+/**
+ * Create and configure the MCP server
+ */
+export function createServer() {
+    const server = new Server({
+        name: SERVER_NAME,
+        version: SERVER_VERSION
+    }, {
+        capabilities: {
+            tools: {},
+            resources: {}
+        }
+    });
+    // Register tool handlers
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: registerTools()
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const { name, arguments: args } = request.params;
+        try {
+            return await handleToolCall(name, args || {});
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new McpError(ErrorCode.InternalError, message);
+        }
+    });
+    // Register resource handlers
+    server.setRequestHandler(ListResourcesRequestSchema, async () => ({
+        resources: await listResources()
+    }));
+    server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
+        const { uri } = request.params;
+        try {
+            return await handleResourceRead(uri);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new McpError(ErrorCode.InternalError, message);
+        }
+    });
+    return server;
+}
+/**
+ * Start the MCP server with stdio transport
+ */
+export async function startServer() {
+    const server = createServer();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // Handle graceful shutdown
+    process.on('SIGINT', async () => {
+        await server.close();
+        process.exit(0);
+    });
+    process.on('SIGTERM', async () => {
+        await server.close();
+        process.exit(0);
+    });
+}
+// Start server if run directly
+if (process.argv[1]?.endsWith('server.js') || process.argv[1]?.endsWith('server.ts')) {
+    startServer().catch((error) => {
+        console.error('Failed to start MCP server:', error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,SAAS,EACT,QAAQ,EACT,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAElE,MAAM,WAAW,GAAG,SAAS,CAAA;AAC7B,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAA;AAE7D;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,cAAc;KACxB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;SACd;KACF,CACF,CAAA;IAED,yBAAyB;IACzB,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,aAAa,EAAE;KACvB,CAAC,CAAC,CAAA;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAChD,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QACtD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,6BAA6B;IAC7B,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAChE,SAAS,EAAE,MAAM,aAAa,EAAE;KACjC,CAAC,CAAC,CAAA;IAEH,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QACtD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAE5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAE/B,2BAA2B;IAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,+BAA+B;AAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACrF,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAA;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/mcp/tools.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Vaulter MCP Tools
+ *
+ * Tool definitions and handlers for the MCP server
+ */
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+/**
+ * Register all available tools
+ */
+export declare function registerTools(): Tool[];
+/**
+ * Handle tool calls
+ */
+export declare function handleToolCall(name: string, args: Record<string, unknown>): Promise<{
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+}>;
+//# sourceMappingURL=tools.d.ts.map

package/dist/mcp/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAA;AA6B9D;;GAEG;AACH,wBAAgB,aAAa,IAAI,IAAI,EAAE,CAgLtC;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAkN7D"}