secenvvault 1.0.1__py3-none-any.whl

secenvvault/__init__.py

@@ -0,0 +1,60 @@
+"""
+SecEnvVault Python SDK
+Zero-Knowledge secret manager and runtime environment injector.
+"""
+
+import os
+from contextlib import contextmanager
+from typing import Optional, Dict, Iterator
+from .client import SecEnvVaultClient, find_project_config, load_credentials
+
+__version__ = "1.0.1"
+__all__ = ["SecEnvVaultClient", "load_secrets", "with_secrets", "find_project_config"]
+
+
+def load_secrets(
+    environment: Optional[str] = None,
+    project_id: Optional[str] = None,
+    api_url: Optional[str] = None,
+    token: Optional[str] = None,
+) -> Dict[str, str]:
+    """
+    Loads project secrets into os.environ.
+    Ideal for Django, FastAPI, Flask, and Celery applications at startup.
+    """
+    client = SecEnvVaultClient(token=token, api_url=api_url, project_id=project_id, environment=environment or "development")
+    secrets = client.get_all_secrets(environment)
+
+    for k, v in secrets.items():
+        if k not in os.environ:
+            os.environ[k] = str(v)
+
+    return secrets
+
+
+@contextmanager
+def with_secrets(
+    environment: Optional[str] = None,
+    project_id: Optional[str] = None,
+    api_url: Optional[str] = None,
+    token: Optional[str] = None,
+) -> Iterator[Dict[str, str]]:
+    """
+    Context manager that temporarily injects secrets into os.environ
+    and cleanly restores original environment state upon exit.
+    """
+    client = SecEnvVaultClient(token=token, api_url=api_url, project_id=project_id, environment=environment or "development")
+    secrets = client.get_all_secrets(environment)
+
+    original_env = dict(os.environ)
+    try:
+        for k, v in secrets.items():
+            os.environ[k] = str(v)
+        yield secrets
+    finally:
+        # Restore environment
+        for k in secrets:
+            if k in original_env:
+                os.environ[k] = original_env[k]
+            else:
+                os.environ.pop(k, None)

secenvvault/cli.py

@@ -0,0 +1,72 @@
+"""
+SecEnvVault Python CLI Runner
+Allows executing commands with memory-injected secrets in Python-only environments.
+"""
+
+import sys
+import subprocess
+try:
+    from .client import SecEnvVaultClient
+except ImportError:
+    from secenvvault.client import SecEnvVaultClient
+
+
+def main():
+    args = sys.argv[1:]
+    if not args or args[0] in ("-h", "--help"):
+        print("""
+SecEnvVault CLI (Python Edition)
+
+Usage:
+  secenvvault run -e <environment> -- <command...>
+  sev run -- python app.py
+""")
+        sys.exit(0)
+
+    cmd = args[0]
+    if cmd == "run":
+        rest = args[1:]
+        env = "development"
+        if "-e" in rest:
+            idx = rest.index("-e")
+            env = rest[idx + 1]
+            rest = rest[:idx] + rest[idx + 2:]
+        elif "--env" in rest:
+            idx = rest.index("--env")
+            env = rest[idx + 1]
+            rest = rest[:idx] + rest[idx + 2:]
+
+        if "--" in rest:
+            dash_idx = rest.index("--")
+            subcommand = rest[dash_idx + 1:]
+        else:
+            subcommand = rest
+
+        if not subcommand:
+            print("Error: No command specified to run.")
+            sys.exit(1)
+
+        try:
+            client = SecEnvVaultClient()
+            secrets = client.get_all_secrets(env)
+        except Exception as e:
+            print(f"Error fetching secrets: {e}", file=sys.stderr)
+            sys.exit(1)
+
+        import os
+        merged_env = os.environ.copy()
+        merged_env.update(secrets)
+
+        try:
+            res = subprocess.run(subcommand, env=merged_env)
+            sys.exit(res.returncode)
+        except Exception as e:
+            print(f"Execution failed: {e}", file=sys.stderr)
+            sys.exit(1)
+    else:
+        print(f"Unknown command: {cmd}. Run with --help for options.")
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

secenvvault/client.py

@@ -0,0 +1,91 @@
+import os
+import sys
+import json
+import urllib.request
+import urllib.error
+from pathlib import Path
+from typing import Dict, Optional, Any
+
+CONFIG_FILE_NAME = ".secenv.json"
+CREDENTIALS_FILE = Path.home() / ".secenv" / "credentials.json"
+
+
+def find_project_config(start_dir: Optional[Path] = None) -> Optional[Dict[str, Any]]:
+    curr = (start_dir or Path.cwd()).resolve()
+    while True:
+        candidate = curr / CONFIG_FILE_NAME
+        if candidate.is_file():
+            try:
+                with open(candidate, "r", encoding="utf-8") as f:
+                    return json.load(f)
+            except Exception:
+                return None
+        if curr.parent == curr:
+            break
+        curr = curr.parent
+    return None
+
+
+def load_credentials() -> Dict[str, str]:
+    token = os.environ.get("SECENV_TOKEN") or os.environ.get("SECENV_SERVICE_TOKEN")
+    api_url = os.environ.get("SECENV_API_URL")
+
+    creds: Dict[str, str] = {}
+    if CREDENTIALS_FILE.is_file():
+        try:
+            with open(CREDENTIALS_FILE, "r", encoding="utf-8") as f:
+                creds = json.load(f)
+        except Exception:
+            pass
+
+    return {
+        "token": token or creds.get("token", ""),
+        "api_url": api_url or creds.get("apiUrl", "http://localhost:3000"),
+    }
+
+
+class SecEnvVaultClient:
+    def __init__(
+        self,
+        token: Optional[str] = None,
+        api_url: Optional[str] = None,
+        project_id: Optional[str] = None,
+        environment: str = "development",
+    ):
+        creds = load_credentials()
+        self.token = token or creds.get("token")
+        self.api_url = (api_url or creds.get("api_url", "http://localhost:3000")).rstrip("/")
+        
+        cfg = find_project_config()
+        self.project_id = project_id or (cfg.get("projectId") if cfg else None)
+        self.default_environment = environment or (cfg.get("defaultEnvironment") if cfg else "development")
+
+    def _request(self, endpoint: str) -> Dict[str, str]:
+        url = f"{self.api_url}/{endpoint.lstrip('/')}"
+        headers = {
+            "Content-Type": "application/json",
+            "User-Agent": "secenvvault-python/1.0.1",
+        }
+        if self.token:
+            headers["Authorization"] = f"Bearer {self.token}"
+
+        req = urllib.request.Request(url, headers=headers)
+        try:
+            with urllib.request.urlopen(req) as resp:
+                data = resp.read().decode("utf-8")
+                return json.loads(data)
+        except urllib.error.HTTPError as e:
+            err_body = e.read().decode("utf-8")
+            raise RuntimeError(f"SecEnvVault API error ({e.code}): {err_body}")
+        except Exception as e:
+            raise RuntimeError(f"Connection failed: {str(e)}")
+
+    def get_all_secrets(self, environment: Optional[str] = None) -> Dict[str, str]:
+        env = environment or self.default_environment
+        if not self.project_id:
+            raise ValueError("No projectId provided or found in .secenv.json")
+        return self._request(f"/api/v1/projects/{self.project_id}/environments/{env}/raw?format=json")
+
+    def get_secret(self, key: str, environment: Optional[str] = None) -> Optional[str]:
+        secrets = self.get_all_secrets(environment)
+        return secrets.get(key)

secenvvault-1.0.1.dist-info/METADATA

@@ -0,0 +1,91 @@
+Metadata-Version: 2.4
+Name: secenvvault
+Version: 1.0.1
+Summary: Zero-Knowledge .env & secret orchestration CLI and SDK for developers and teams.
+Author: SecEnvVault Team
+Author-email: SecEnvVault Team <support@secenvvault.com>
+License-Expression: MIT
+Keywords: secrets,env,dotenv,vault,zero-knowledge,security,credentials
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Dynamic: author
+Dynamic: requires-python
+
+# SecEnvVault Python SDK & CLI
+
+> Zero-Knowledge .env & secret orchestration CLI and SDK for Python developers, teams, and CI/CD pipelines.
+
+[![PyPI version](https://img.shields.io/pypi/v/secenvvault.svg)](https://pypi.org/project/secenvvault/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+SecEnvVault eliminates plaintext `.env` files floating across developer machines and repositories. Secrets are injected directly into process memory with **zero disk writes**.
+
+---
+
+## 📦 Installation
+
+```bash
+pip install secenvvault
+```
+
+---
+
+## 🚀 Quickstart
+
+### 1. Python SDK Usage
+
+#### Automatic `os.environ` Injection at Startup (Django, FastAPI, Flask):
+```python
+import os
+from secenvvault import load_secrets
+
+# Loads secrets into os.environ before app initialization:
+load_secrets(environment="production")
+
+print(os.getenv("DATABASE_URL"))
+```
+
+#### Scoped Sandbox Execution (Context Manager):
+```python
+from secenvvault import with_secrets
+
+# Temporarily injects secrets and restores previous environment on exit:
+with with_secrets(environment="staging"):
+    run_database_migrations()
+```
+
+#### Programmatic Client:
+```python
+from secenvvault import SecEnvVaultClient
+
+client = SecEnvVaultClient()
+stripe_key = client.get_secret("STRIPE_SECRET_KEY", environment="production")
+```
+
+---
+
+## ⚡ CLI Runner
+
+The Python package includes the CLI runner for Python-only environments:
+
+```bash
+secenvvault run -e production -- python main.py
+# or shorthand:
+sev run -- uvicorn app.main:app --port 8000
+```
+
+---
+
+## 🛡️ Security
+* **Zero Third-Party Dependencies**: Built exclusively with Python standard library.
+* **In-Memory Injection**: Process environment variables never touch disk.
+* **Encrypted API Communication**: Direct HTTPS with SecEnvVault backend.
+
+---
+
+## 📄 License
+MIT © SecEnvVault

secenvvault-1.0.1.dist-info/RECORD

@@ -0,0 +1,8 @@
+secenvvault/__init__.py,sha256=VHc70fsjixiN73ux0-PgJ_Loevyk4TGSEw-nad0G3W0,1876
+secenvvault/cli.py,sha256=MwPtAl9Rz-syCbFBCQmTlY60-nuxNiB3zVtNMxmYrCQ,1851
+secenvvault/client.py,sha256=PkKlu3g0s0v5uyb1PZ7xF84MZHgZmMZtsRNa-K8o390,3268
+secenvvault-1.0.1.dist-info/METADATA,sha256=93IXzxAE881GcoIU_ep4thvLQdMK3IojUMZ9CQHDsk4,2588
+secenvvault-1.0.1.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+secenvvault-1.0.1.dist-info/entry_points.txt,sha256=mcGjw_pm_c2F9UFhuMkgL3o_i42ZJJwdcsB4tNTXzlQ,80
+secenvvault-1.0.1.dist-info/top_level.txt,sha256=anrZO7VLMkFl4NfPwSKlrGmDJiDE8Ls63HL0Y4arMAs,12
+secenvvault-1.0.1.dist-info/RECORD,,

secenvvault-1.0.1.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (84.0.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

secenvvault-1.0.1.dist-info/entry_points.txt

@@ -0,0 +1,3 @@
+[console_scripts]
+secenvvault = secenvvault.cli:main
+sev = secenvvault.cli:main

secenvvault-1.0.1.dist-info/top_level.txt

@@ -0,0 +1 @@
+secenvvault