secenvvault 1.0.1__tar.gz

secenvvault-1.0.1/PKG-INFO

@@ -0,0 +1,91 @@
+Metadata-Version: 2.4
+Name: secenvvault
+Version: 1.0.1
+Summary: Zero-Knowledge .env & secret orchestration CLI and SDK for developers and teams.
+Author: SecEnvVault Team
+Author-email: SecEnvVault Team <support@secenvvault.com>
+License-Expression: MIT
+Keywords: secrets,env,dotenv,vault,zero-knowledge,security,credentials
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Dynamic: author
+Dynamic: requires-python
+
+# SecEnvVault Python SDK & CLI
+
+> Zero-Knowledge .env & secret orchestration CLI and SDK for Python developers, teams, and CI/CD pipelines.
+
+[![PyPI version](https://img.shields.io/pypi/v/secenvvault.svg)](https://pypi.org/project/secenvvault/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+SecEnvVault eliminates plaintext `.env` files floating across developer machines and repositories. Secrets are injected directly into process memory with **zero disk writes**.
+
+---
+
+## 📦 Installation
+
+```bash
+pip install secenvvault
+```
+
+---
+
+## 🚀 Quickstart
+
+### 1. Python SDK Usage
+
+#### Automatic `os.environ` Injection at Startup (Django, FastAPI, Flask):
+```python
+import os
+from secenvvault import load_secrets
+
+# Loads secrets into os.environ before app initialization:
+load_secrets(environment="production")
+
+print(os.getenv("DATABASE_URL"))
+```
+
+#### Scoped Sandbox Execution (Context Manager):
+```python
+from secenvvault import with_secrets
+
+# Temporarily injects secrets and restores previous environment on exit:
+with with_secrets(environment="staging"):
+    run_database_migrations()
+```
+
+#### Programmatic Client:
+```python
+from secenvvault import SecEnvVaultClient
+
+client = SecEnvVaultClient()
+stripe_key = client.get_secret("STRIPE_SECRET_KEY", environment="production")
+```
+
+---
+
+## ⚡ CLI Runner
+
+The Python package includes the CLI runner for Python-only environments:
+
+```bash
+secenvvault run -e production -- python main.py
+# or shorthand:
+sev run -- uvicorn app.main:app --port 8000
+```
+
+---
+
+## 🛡️ Security
+* **Zero Third-Party Dependencies**: Built exclusively with Python standard library.
+* **In-Memory Injection**: Process environment variables never touch disk.
+* **Encrypted API Communication**: Direct HTTPS with SecEnvVault backend.
+
+---
+
+## 📄 License
+MIT © SecEnvVault

secenvvault-1.0.1/README.md

@@ -0,0 +1,74 @@
+# SecEnvVault Python SDK & CLI
+
+> Zero-Knowledge .env & secret orchestration CLI and SDK for Python developers, teams, and CI/CD pipelines.
+
+[![PyPI version](https://img.shields.io/pypi/v/secenvvault.svg)](https://pypi.org/project/secenvvault/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+SecEnvVault eliminates plaintext `.env` files floating across developer machines and repositories. Secrets are injected directly into process memory with **zero disk writes**.
+
+---
+
+## 📦 Installation
+
+```bash
+pip install secenvvault
+```
+
+---
+
+## 🚀 Quickstart
+
+### 1. Python SDK Usage
+
+#### Automatic `os.environ` Injection at Startup (Django, FastAPI, Flask):
+```python
+import os
+from secenvvault import load_secrets
+
+# Loads secrets into os.environ before app initialization:
+load_secrets(environment="production")
+
+print(os.getenv("DATABASE_URL"))
+```
+
+#### Scoped Sandbox Execution (Context Manager):
+```python
+from secenvvault import with_secrets
+
+# Temporarily injects secrets and restores previous environment on exit:
+with with_secrets(environment="staging"):
+    run_database_migrations()
+```
+
+#### Programmatic Client:
+```python
+from secenvvault import SecEnvVaultClient
+
+client = SecEnvVaultClient()
+stripe_key = client.get_secret("STRIPE_SECRET_KEY", environment="production")
+```
+
+---
+
+## ⚡ CLI Runner
+
+The Python package includes the CLI runner for Python-only environments:
+
+```bash
+secenvvault run -e production -- python main.py
+# or shorthand:
+sev run -- uvicorn app.main:app --port 8000
+```
+
+---
+
+## 🛡️ Security
+* **Zero Third-Party Dependencies**: Built exclusively with Python standard library.
+* **In-Memory Injection**: Process environment variables never touch disk.
+* **Encrypted API Communication**: Direct HTTPS with SecEnvVault backend.
+
+---
+
+## 📄 License
+MIT © SecEnvVault

secenvvault-1.0.1/pyproject.toml

@@ -0,0 +1,29 @@
+[build-system]
+requires = ["setuptools>=61.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "secenvvault"
+version = "1.0.1"
+description = "Zero-Knowledge .env & secret orchestration CLI and SDK for developers and teams."
+readme = "README.md"
+requires-python = ">=3.8"
+license = "MIT"
+authors = [
+    { name = "SecEnvVault Team", email = "support@secenvvault.com" }
+]
+keywords = ["secrets", "env", "dotenv", "vault", "zero-knowledge", "security", "credentials"]
+classifiers = [
+    "Programming Language :: Python :: 3",
+    "Operating System :: OS Independent",
+    "Topic :: Security",
+    "Topic :: Software Development :: Libraries :: Python Modules"
+]
+
+[project.scripts]
+secenvvault = "secenvvault.cli:main"
+sev = "secenvvault.cli:main"
+
+[tool.setuptools.packages.find]
+where = ["."]
+include = ["secenvvault*"]

secenvvault-1.0.1/secenvvault/__init__.py

@@ -0,0 +1,60 @@
+"""
+SecEnvVault Python SDK
+Zero-Knowledge secret manager and runtime environment injector.
+"""
+
+import os
+from contextlib import contextmanager
+from typing import Optional, Dict, Iterator
+from .client import SecEnvVaultClient, find_project_config, load_credentials
+
+__version__ = "1.0.1"
+__all__ = ["SecEnvVaultClient", "load_secrets", "with_secrets", "find_project_config"]
+
+
+def load_secrets(
+    environment: Optional[str] = None,
+    project_id: Optional[str] = None,
+    api_url: Optional[str] = None,
+    token: Optional[str] = None,
+) -> Dict[str, str]:
+    """
+    Loads project secrets into os.environ.
+    Ideal for Django, FastAPI, Flask, and Celery applications at startup.
+    """
+    client = SecEnvVaultClient(token=token, api_url=api_url, project_id=project_id, environment=environment or "development")
+    secrets = client.get_all_secrets(environment)
+
+    for k, v in secrets.items():
+        if k not in os.environ:
+            os.environ[k] = str(v)
+
+    return secrets
+
+
+@contextmanager
+def with_secrets(
+    environment: Optional[str] = None,
+    project_id: Optional[str] = None,
+    api_url: Optional[str] = None,
+    token: Optional[str] = None,
+) -> Iterator[Dict[str, str]]:
+    """
+    Context manager that temporarily injects secrets into os.environ
+    and cleanly restores original environment state upon exit.
+    """
+    client = SecEnvVaultClient(token=token, api_url=api_url, project_id=project_id, environment=environment or "development")
+    secrets = client.get_all_secrets(environment)
+
+    original_env = dict(os.environ)
+    try:
+        for k, v in secrets.items():
+            os.environ[k] = str(v)
+        yield secrets
+    finally:
+        # Restore environment
+        for k in secrets:
+            if k in original_env:
+                os.environ[k] = original_env[k]
+            else:
+                os.environ.pop(k, None)

secenvvault-1.0.1/secenvvault/cli.py

@@ -0,0 +1,72 @@
+"""
+SecEnvVault Python CLI Runner
+Allows executing commands with memory-injected secrets in Python-only environments.
+"""
+
+import sys
+import subprocess
+try:
+    from .client import SecEnvVaultClient
+except ImportError:
+    from secenvvault.client import SecEnvVaultClient
+
+
+def main():
+    args = sys.argv[1:]
+    if not args or args[0] in ("-h", "--help"):
+        print("""
+SecEnvVault CLI (Python Edition)
+
+Usage:
+  secenvvault run -e <environment> -- <command...>
+  sev run -- python app.py
+""")
+        sys.exit(0)
+
+    cmd = args[0]
+    if cmd == "run":
+        rest = args[1:]
+        env = "development"
+        if "-e" in rest:
+            idx = rest.index("-e")
+            env = rest[idx + 1]
+            rest = rest[:idx] + rest[idx + 2:]
+        elif "--env" in rest:
+            idx = rest.index("--env")
+            env = rest[idx + 1]
+            rest = rest[:idx] + rest[idx + 2:]
+
+        if "--" in rest:
+            dash_idx = rest.index("--")
+            subcommand = rest[dash_idx + 1:]
+        else:
+            subcommand = rest
+
+        if not subcommand:
+            print("Error: No command specified to run.")
+            sys.exit(1)
+
+        try:
+            client = SecEnvVaultClient()
+            secrets = client.get_all_secrets(env)
+        except Exception as e:
+            print(f"Error fetching secrets: {e}", file=sys.stderr)
+            sys.exit(1)
+
+        import os
+        merged_env = os.environ.copy()
+        merged_env.update(secrets)
+
+        try:
+            res = subprocess.run(subcommand, env=merged_env)
+            sys.exit(res.returncode)
+        except Exception as e:
+            print(f"Execution failed: {e}", file=sys.stderr)
+            sys.exit(1)
+    else:
+        print(f"Unknown command: {cmd}. Run with --help for options.")
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

secenvvault-1.0.1/secenvvault/client.py

@@ -0,0 +1,91 @@
+import os
+import sys
+import json
+import urllib.request
+import urllib.error
+from pathlib import Path
+from typing import Dict, Optional, Any
+
+CONFIG_FILE_NAME = ".secenv.json"
+CREDENTIALS_FILE = Path.home() / ".secenv" / "credentials.json"
+
+
+def find_project_config(start_dir: Optional[Path] = None) -> Optional[Dict[str, Any]]:
+    curr = (start_dir or Path.cwd()).resolve()
+    while True:
+        candidate = curr / CONFIG_FILE_NAME
+        if candidate.is_file():
+            try:
+                with open(candidate, "r", encoding="utf-8") as f:
+                    return json.load(f)
+            except Exception:
+                return None
+        if curr.parent == curr:
+            break
+        curr = curr.parent
+    return None
+
+
+def load_credentials() -> Dict[str, str]:
+    token = os.environ.get("SECENV_TOKEN") or os.environ.get("SECENV_SERVICE_TOKEN")
+    api_url = os.environ.get("SECENV_API_URL")
+
+    creds: Dict[str, str] = {}
+    if CREDENTIALS_FILE.is_file():
+        try:
+            with open(CREDENTIALS_FILE, "r", encoding="utf-8") as f:
+                creds = json.load(f)
+        except Exception:
+            pass
+
+    return {
+        "token": token or creds.get("token", ""),
+        "api_url": api_url or creds.get("apiUrl", "http://localhost:3000"),
+    }
+
+
+class SecEnvVaultClient:
+    def __init__(
+        self,
+        token: Optional[str] = None,
+        api_url: Optional[str] = None,
+        project_id: Optional[str] = None,
+        environment: str = "development",
+    ):
+        creds = load_credentials()
+        self.token = token or creds.get("token")
+        self.api_url = (api_url or creds.get("api_url", "http://localhost:3000")).rstrip("/")
+        
+        cfg = find_project_config()
+        self.project_id = project_id or (cfg.get("projectId") if cfg else None)
+        self.default_environment = environment or (cfg.get("defaultEnvironment") if cfg else "development")
+
+    def _request(self, endpoint: str) -> Dict[str, str]:
+        url = f"{self.api_url}/{endpoint.lstrip('/')}"
+        headers = {
+            "Content-Type": "application/json",
+            "User-Agent": "secenvvault-python/1.0.1",
+        }
+        if self.token:
+            headers["Authorization"] = f"Bearer {self.token}"
+
+        req = urllib.request.Request(url, headers=headers)
+        try:
+            with urllib.request.urlopen(req) as resp:
+                data = resp.read().decode("utf-8")
+                return json.loads(data)
+        except urllib.error.HTTPError as e:
+            err_body = e.read().decode("utf-8")
+            raise RuntimeError(f"SecEnvVault API error ({e.code}): {err_body}")
+        except Exception as e:
+            raise RuntimeError(f"Connection failed: {str(e)}")
+
+    def get_all_secrets(self, environment: Optional[str] = None) -> Dict[str, str]:
+        env = environment or self.default_environment
+        if not self.project_id:
+            raise ValueError("No projectId provided or found in .secenv.json")
+        return self._request(f"/api/v1/projects/{self.project_id}/environments/{env}/raw?format=json")
+
+    def get_secret(self, key: str, environment: Optional[str] = None) -> Optional[str]:
+        secrets = self.get_all_secrets(environment)
+        return secrets.get(key)

secenvvault-1.0.1/secenvvault.egg-info/PKG-INFO

@@ -0,0 +1,91 @@
+Metadata-Version: 2.4
+Name: secenvvault
+Version: 1.0.1
+Summary: Zero-Knowledge .env & secret orchestration CLI and SDK for developers and teams.
+Author: SecEnvVault Team
+Author-email: SecEnvVault Team <support@secenvvault.com>
+License-Expression: MIT
+Keywords: secrets,env,dotenv,vault,zero-knowledge,security,credentials
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Dynamic: author
+Dynamic: requires-python
+
+# SecEnvVault Python SDK & CLI
+
+> Zero-Knowledge .env & secret orchestration CLI and SDK for Python developers, teams, and CI/CD pipelines.
+
+[![PyPI version](https://img.shields.io/pypi/v/secenvvault.svg)](https://pypi.org/project/secenvvault/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+SecEnvVault eliminates plaintext `.env` files floating across developer machines and repositories. Secrets are injected directly into process memory with **zero disk writes**.
+
+---
+
+## 📦 Installation
+
+```bash
+pip install secenvvault
+```
+
+---
+
+## 🚀 Quickstart
+
+### 1. Python SDK Usage
+
+#### Automatic `os.environ` Injection at Startup (Django, FastAPI, Flask):
+```python
+import os
+from secenvvault import load_secrets
+
+# Loads secrets into os.environ before app initialization:
+load_secrets(environment="production")
+
+print(os.getenv("DATABASE_URL"))
+```
+
+#### Scoped Sandbox Execution (Context Manager):
+```python
+from secenvvault import with_secrets
+
+# Temporarily injects secrets and restores previous environment on exit:
+with with_secrets(environment="staging"):
+    run_database_migrations()
+```
+
+#### Programmatic Client:
+```python
+from secenvvault import SecEnvVaultClient
+
+client = SecEnvVaultClient()
+stripe_key = client.get_secret("STRIPE_SECRET_KEY", environment="production")
+```
+
+---
+
+## ⚡ CLI Runner
+
+The Python package includes the CLI runner for Python-only environments:
+
+```bash
+secenvvault run -e production -- python main.py
+# or shorthand:
+sev run -- uvicorn app.main:app --port 8000
+```
+
+---
+
+## 🛡️ Security
+* **Zero Third-Party Dependencies**: Built exclusively with Python standard library.
+* **In-Memory Injection**: Process environment variables never touch disk.
+* **Encrypted API Communication**: Direct HTTPS with SecEnvVault backend.
+
+---
+
+## 📄 License
+MIT © SecEnvVault

secenvvault-1.0.1/secenvvault.egg-info/SOURCES.txt

@@ -0,0 +1,11 @@
+README.md
+pyproject.toml
+setup.py
+secenvvault/__init__.py
+secenvvault/cli.py
+secenvvault/client.py
+secenvvault.egg-info/PKG-INFO
+secenvvault.egg-info/SOURCES.txt
+secenvvault.egg-info/dependency_links.txt
+secenvvault.egg-info/entry_points.txt
+secenvvault.egg-info/top_level.txt

secenvvault-1.0.1/secenvvault.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

secenvvault-1.0.1/secenvvault.egg-info/entry_points.txt

@@ -0,0 +1,3 @@
+[console_scripts]
+secenvvault = secenvvault.cli:main
+sev = secenvvault.cli:main

secenvvault-1.0.1/secenvvault.egg-info/top_level.txt

@@ -0,0 +1 @@
+secenvvault

secenvvault-1.0.1/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

secenvvault-1.0.1/setup.py

@@ -0,0 +1,17 @@
+from setuptools import setup, find_packages
+
+setup(
+    name="secenvvault",
+    version="1.0.1",
+    description="Zero-Knowledge .env & secret orchestration CLI and SDK for developers and teams.",
+    author="SecEnvVault Team",
+    author_email="support@secenvvault.com",
+    packages=find_packages(),
+    entry_points={
+        "console_scripts": [
+            "secenvvault=secenvvault.cli:main",
+            "sev=secenvvault.cli:main",
+        ],
+    },
+    python_requires=">=3.8",
+)