| | | 1 | | import 'reflect-metadata'; |
| | | 2 | | import { dirname, join } from 'node:path'; |
| | | 3 | | import { fileURLToPath } from 'node:url'; |
| | | 4 | | import { Command } from 'commander'; |
| | | 5 | | import type { Container } from 'inversify'; |
| | | 6 | | import pc from 'picocolors'; |
| | | 7 | | import { DispatchActionCommand } from '../../../core/application/dispatch/DispatchActionCommand.js'; |
| | | 8 | | import type { DispatchActionCommandHandler } from '../../../core/application/dispatch/DispatchActionCommandHandler.js'; |
| | | 9 | | import type { CliOptions } from '../../../core/domain/CliOptions.js'; |
| | | 10 | | import type { MapFileConfig } from '../../../core/domain/MapFileConfig.js'; |
| | | 11 | | import { PackageVersionReader } from '../../../core/infrastructure/package/PackageVersionReader.js'; |
| | | 12 | | import { readMapFileConfig } from '../../../core/infrastructure/variableStore/FileVariableStore.js'; |
| | | 13 | | import { TYPES } from '../../../core/types.js'; |
| | | 14 | | import { executeWithSsoRecovery } from '../recovery/SsoLoginRecovery.js'; |
| | | 15 | | import { Startup } from '../Startup.js'; |
| | | 16 | | |
| | | 17 | | let serviceProvider: Container; |
| | | 18 | | |
| | | 19 | | async function executeCommand(options: CliOptions): Promise<void> { |
| | 3 | 20 | | const commandHandler = serviceProvider.get<DispatchActionCommandHandler>( |
| | | 21 | | TYPES.DispatchActionCommandHandler, |
| | | 22 | | ); |
| | | 23 | | |
| | 3 | 24 | | const command = DispatchActionCommand.fromCliOptions(options); |
| | 3 | 25 | | await commandHandler.handleCommand(command); |
| | | 26 | | } |
| | | 27 | | |
| | | 28 | | export async function main() { |
| | 4 | 29 | | const program = new Command(); |
| | 4 | 30 | | const version = await readPackageVersion(); |
| | | 31 | | |
| | 4 | 32 | | const banner = ` |
| | | 33 | | ${pc.green('███████╗')}${pc.cyan('███╗ ██╗')}${pc.magenta('██╗ ██╗')}${pc.yellow('██╗')}${pc.red('██╗ ')}${pc. |
| | | 34 | | ${pc.green('██╔════╝')}${pc.cyan('████╗ ██║')}${pc.magenta('██║ ██║')}${pc.yellow('██║')}${pc.red('██║ ')}${pc. |
| | | 35 | | ${pc.green('█████╗ ')}${pc.cyan('██╔██╗ ██║')}${pc.magenta('██║ ██║')}${pc.yellow('██║')}${pc.red('██║ ')}${pc. |
| | | 36 | | ${pc.green('██╔══╝ ')}${pc.cyan('██║╚██╗██║')}${pc.magenta('╚██╗ ██╔╝')}${pc.yellow('██║')}${pc.red('██║ ')}${pc. |
| | | 37 | | ${pc.green('███████╗')}${pc.cyan('██║ ╚████║')}${pc.magenta(' ╚████╔╝ ')}${pc.yellow('██║')}${pc.red('███████╗')}${pc. |
| | | 38 | | ${pc.green('╚══════╝')}${pc.cyan('╚═╝ ╚═══╝')}${pc.magenta(' ╚═══╝ ')}${pc.yellow('╚═╝')}${pc.red('╚══════╝')}${pc. |
| | | 39 | | ${pc.dim('Your secrets, one command away')} ${pc.dim('aws & azure')} |
| | | 40 | | |
| | | 41 | | ${pc.yellow('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━')} |
| | | 42 | | ${pc.green('WORLD 1-1')} ${pc.dim('— SELECT YOUR MISSION')} |
| | | 43 | | ${pc.yellow('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━')} |
| | | 44 | | |
| | | 45 | | ${pc.green('>')} ${pc.bold('Generate a .env file')} ${pc.dim('(pull secrets from the cloud)')} |
| | | 46 | | ${pc.cyan('envilder --map=envilder.json --envfile=.env')} |
| | | 47 | | |
| | | 48 | | ${pc.magenta('>')} ${pc.bold('Sync .env back to cloud')} ${pc.dim('(push secrets up)')} |
| | | 49 | | ${pc.cyan('envilder --push --map=envilder.json --envfile=.env')} |
| | | 50 | | |
| | | 51 | | ${pc.red('>')} ${pc.bold('Push a single secret')} |
| | | 52 | | ${pc.cyan('envilder --push --key=API_KEY --value=s3cret --secret-path=/my/path')} |
| | | 53 | | |
| | | 54 | | ${pc.blue('>')} ${pc.bold('Use Azure Key Vault')} |
| | | 55 | | ${pc.cyan('envilder --provider=azure --map=envilder.json --envfile=.env')} |
| | | 56 | | `; |
| | | 57 | | |
| | 4 | 58 | | program |
| | | 59 | | .name('envilder') |
| | | 60 | | .description(banner) |
| | | 61 | | .version(version) |
| | | 62 | | .option( |
| | | 63 | | '--map <path>', |
| | | 64 | | 'Path to the JSON file with environment variable mapping (required for most commands)', |
| | | 65 | | ) |
| | | 66 | | .option( |
| | | 67 | | '--envfile <path>', |
| | | 68 | | 'Path to the .env file to be generated or imported (required for most commands)', |
| | | 69 | | ) |
| | | 70 | | .option('--profile <name>', 'AWS CLI profile to use (optional)') |
| | | 71 | | .option( |
| | | 72 | | '--provider <name>', |
| | | 73 | | 'Cloud provider to use: aws or azure (default: aws)', |
| | | 74 | | ) |
| | | 75 | | .option( |
| | | 76 | | '--vault-url <url>', |
| | | 77 | | 'Azure Key Vault URL (overrides $config.vaultUrl in map file)', |
| | | 78 | | ) |
| | | 79 | | .option('--push', 'Push local .env file back to cloud provider') |
| | | 80 | | .option( |
| | | 81 | | '--key <name>', |
| | | 82 | | 'Single environment variable name to push (only with --push)', |
| | | 83 | | ) |
| | | 84 | | .option( |
| | | 85 | | '--value <value>', |
| | | 86 | | 'Value of the single environment variable to push (only with --push)', |
| | | 87 | | ) |
| | | 88 | | .option( |
| | | 89 | | '--secret-path <path>', |
| | | 90 | | 'Secret path in your cloud provider for the single variable (only with --push)', |
| | | 91 | | ) |
| | | 92 | | .option( |
| | | 93 | | '--ssm-path <path>', |
| | | 94 | | '[DEPRECATED: use --secret-path] Alias for --secret-path', |
| | | 95 | | ) |
| | | 96 | | .hook('preAction', (thisCommand) => { |
| | 3 | 97 | | const opts = thisCommand.opts(); |
| | 3 | 98 | | if (opts.ssmPath) { |
| | 0 | 99 | | console.warn( |
| | | 100 | | pc.yellow( |
| | | 101 | | '⚠️ --ssm-path is deprecated and will be removed in a future release. Use --secret-path instead.', |
| | | 102 | | ), |
| | | 103 | | ); |
| | 0 | 104 | | if (!opts.secretPath) { |
| | 0 | 105 | | thisCommand.setOptionValue('secretPath', opts.ssmPath); |
| | | 106 | | } |
| | | 107 | | } |
| | | 108 | | }) |
| | | 109 | | .action( |
| | | 110 | | async ({ |
| | | 111 | | provider, |
| | | 112 | | vaultUrl, |
| | | 113 | | ...options |
| | | 114 | | }: CliOptions & { provider?: string; vaultUrl?: string }) => { |
| | 3 | 115 | | const fileConfig = options.map |
| | | 116 | | ? await readMapFileConfig(options.map) |
| | | 117 | | : {}; |
| | | 118 | | |
| | 3 | 119 | | const config: MapFileConfig = { |
| | | 120 | | ...fileConfig, |
| | | 121 | | ...(provider && { provider }), |
| | | 122 | | ...(vaultUrl && { vaultUrl }), |
| | | 123 | | ...(options.profile && { profile: options.profile }), |
| | | 124 | | }; |
| | | 125 | | |
| | 3 | 126 | | const infraOptions: Record<string, unknown> = {}; |
| | 3 | 127 | | const extraHosts = process.env.ENVILDER_ALLOWED_VAULT_HOSTS; |
| | 3 | 128 | | if (extraHosts) { |
| | 1 | 129 | | infraOptions.allowedVaultHosts = extraHosts |
| | | 130 | | .split(',') |
| | 2 | 131 | | .map((h) => h.trim()); |
| | 1 | 132 | | infraOptions.disableChallengeResourceVerification = true; |
| | | 133 | | } |
| | | 134 | | |
| | 3 | 135 | | serviceProvider = Startup.build() |
| | | 136 | | .configureServices() |
| | | 137 | | .configureInfrastructure(config, infraOptions) |
| | | 138 | | .create(); |
| | | 139 | | |
| | 3 | 140 | | await executeWithSsoRecovery(() => executeCommand(options)); |
| | | 141 | | }, |
| | | 142 | | ); |
| | | 143 | | |
| | 4 | 144 | | await program.parseAsync(process.argv); |
| | | 145 | | } |
| | | 146 | | |
| | | 147 | | function readPackageVersion(): Promise<string> { |
| | 4 | 148 | | const __filename = fileURLToPath(import.meta.url); |
| | 4 | 149 | | const __dirname = dirname(__filename); |
| | 4 | 150 | | const packageJsonPath = join(__dirname, '../../../../../package.json'); |
| | | 151 | | |
| | 4 | 152 | | return new PackageVersionReader().getVersion(packageJsonPath); |
| | | 153 | | } |