@naturalcycles/nodejs-lib/dist/bin/secrets-encrypt.js

#!/usr/bin/env node
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const yargs = require("yargs");
const colors_1 = require("../colors");
const script_1 = require("../script");
const secrets_encrypt_util_1 = require("../secret/secrets-encrypt.util");
(0, script_1.runScript)(() => {
    const { pattern, file, encKey, del, jsonMode } = getEncryptCLIOptions();
    (0, secrets_encrypt_util_1.secretsEncrypt)(pattern, file, encKey, del, jsonMode);
});
function getEncryptCLIOptions() {
    require('dotenv').config();
    let { pattern, file, encKey, encKeyVar, del, jsonMode } = yargs.options({
        pattern: {
            type: 'string',
            array: true,
            desc: 'Globby pattern for secrets. Can be many.',
            // demandOption: true,
            default: './secret/**',
        },
        file: {
            type: 'string',
            desc: 'Single file to decrypt. Useful in jsonMode',
        },
        encKey: {
            type: 'string',
            desc: 'Encryption key',
            // demandOption: true,
            // default: process.env.SECRET_ENCRYPTION_KEY!,
        },
        encKeyVar: {
            type: 'string',
            desc: 'Env variable name to get `encKey` from.',
            default: 'SECRET_ENCRYPTION_KEY',
        },
        // algorithm: {
        //   type: 'string',
        //   default: 'aes-256-cbc',
        // },
        del: {
            type: 'boolean',
            desc: 'Delete source files after encryption/decryption. Be careful!',
            default: false,
        },
        jsonMode: {
            type: 'boolean',
            desc: 'JSON mode. Encrypts only json values, not the whole file',
            default: false,
        },
    }).argv;
    if (!encKey) {
        encKey = process.env[encKeyVar];
        if (encKey) {
            console.log(`using encKey from process.env.${(0, colors_1.dimGrey)(encKeyVar)}`);
        }
        else {
            throw new Error(`encKey is required. Can be provided as --encKey or env.SECRET_ENCRYPTION_KEY (see readme.md)`);
        }
    }
    // `as any` because @types/yargs can't handle string[] type properly
    return { pattern: pattern, file, encKey, del, jsonMode };
}