@clef-sh/cli 0.1.0

package/bin/clef.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require("../dist/index.js");

package/dist/commands/delete.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "commander";
+import { SubprocessRunner } from "@clef-sh/core";
+export declare function registerDeleteCommand(program: Command, deps: {
+    runner: SubprocessRunner;
+}): void;
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../src/commands/delete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAQL,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAGvB,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAAG,IAAI,CA2GhG"}

package/dist/commands/delete.js

@@ -0,0 +1,130 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDeleteCommand = registerDeleteCommand;
+const path = __importStar(require("path"));
+const core_1 = require("@clef-sh/core");
+const formatter_1 = require("../output/formatter");
+function registerDeleteCommand(program, deps) {
+    program
+        .command("delete <target> <key>")
+        .description("Delete a key from an encrypted file.\n\n" +
+        "  target:     namespace/environment (e.g. payments/staging)\n" +
+        "              or just namespace when using --all-envs\n" +
+        "  key:        the key name to delete\n" +
+        "  --all-envs: delete the key from all environments in the namespace\n\n" +
+        "Exit codes:\n" +
+        "  0  key deleted successfully\n" +
+        "  1  operation failed")
+        .option("--all-envs", "Delete from all environments in the namespace")
+        .action(async (target, key, options) => {
+        try {
+            const repoRoot = program.opts().repo || process.cwd();
+            const parser = new core_1.ManifestParser();
+            const manifest = parser.parse(path.join(repoRoot, "clef.yaml"));
+            const sopsClient = new core_1.SopsClient(deps.runner);
+            const matrixManager = new core_1.MatrixManager();
+            if (options.allEnvs) {
+                // target is just the namespace
+                const namespace = target.includes("/") ? target.split("/")[0] : target;
+                const protectedEnvs = manifest.environments.filter((e) => e.protected).map((e) => e.name);
+                const envNames = manifest.environments.map((e) => e.name).join(", ");
+                const protectedNote = protectedEnvs.length > 0
+                    ? ` including protected environments: ${protectedEnvs.join(", ")}`
+                    : "";
+                const confirmed = await formatter_1.formatter.confirm(`This will delete '${key}' from ${manifest.environments.length} environments (${envNames})${protectedNote}.\nType the key name to confirm:`);
+                if (!confirmed) {
+                    formatter_1.formatter.info("Aborted.");
+                    return;
+                }
+                const bulkOps = new core_1.BulkOps();
+                await bulkOps.deleteAcrossEnvironments(namespace, key, manifest, sopsClient, repoRoot);
+                formatter_1.formatter.success(`Deleted '${key}' from ${namespace} in all environments`);
+            }
+            else {
+                const [namespace, environment] = parseTarget(target);
+                // Check for protected environment
+                if (matrixManager.isProtectedEnvironment(manifest, environment)) {
+                    const protConfirmed = await formatter_1.formatter.confirm(`This is a protected environment (${environment}). Are you sure you want to delete '${key}'?`);
+                    if (!protConfirmed) {
+                        formatter_1.formatter.info("Aborted.");
+                        return;
+                    }
+                }
+                const confirmed = await formatter_1.formatter.confirm(`Delete '${key}' from ${namespace}/${environment}?`);
+                if (!confirmed) {
+                    formatter_1.formatter.info("Aborted.");
+                    return;
+                }
+                const filePath = path.join(repoRoot, manifest.file_pattern
+                    .replace("{namespace}", namespace)
+                    .replace("{environment}", environment));
+                const decrypted = await sopsClient.decrypt(filePath);
+                if (!(key in decrypted.values)) {
+                    formatter_1.formatter.error(`Key '${key}' not found in ${namespace}/${environment}.`);
+                    process.exit(1);
+                }
+                delete decrypted.values[key];
+                await sopsClient.encrypt(filePath, decrypted.values, manifest, environment);
+                // Clean up pending metadata if it exists
+                try {
+                    await (0, core_1.markResolved)(filePath, [key]);
+                }
+                catch {
+                    formatter_1.formatter.warn(`Key deleted but pending metadata could not be cleaned up. Run clef lint to verify.`);
+                }
+                formatter_1.formatter.success(`Deleted '${key}' from ${namespace}/${environment}`);
+                formatter_1.formatter.hint(`Commit: git add ${manifest.file_pattern.replace("{namespace}", namespace).replace("{environment}", environment)}`);
+            }
+        }
+        catch (err) {
+            if (err instanceof core_1.SopsMissingError || err instanceof core_1.SopsVersionError) {
+                formatter_1.formatter.formatDependencyError(err);
+                process.exit(1);
+                return;
+            }
+            formatter_1.formatter.error(err.message);
+            process.exit(1);
+        }
+    });
+}
+function parseTarget(target) {
+    const parts = target.split("/");
+    if (parts.length !== 2 || !parts[0] || !parts[1]) {
+        throw new Error(`Invalid target "${target}". Expected format: namespace/environment`);
+    }
+    return [parts[0], parts[1]];
+}
+//# sourceMappingURL=delete.js.map

package/dist/commands/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../src/commands/delete.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,sDA2GC;AAzHD,2CAA6B;AAE7B,wCASuB;AACvB,mDAAgD;AAEhD,SAAgB,qBAAqB,CAAC,OAAgB,EAAE,IAAkC;IACxF,OAAO;SACJ,OAAO,CAAC,uBAAuB,CAAC;SAChC,WAAW,CACV,0CAA0C;QACxC,+DAA+D;QAC/D,yDAAyD;QACzD,wCAAwC;QACxC,yEAAyE;QACzE,eAAe;QACf,iCAAiC;QACjC,uBAAuB,CAC1B;SACA,MAAM,CAAC,YAAY,EAAE,+CAA+C,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,GAAW,EAAE,OAA8B,EAAE,EAAE;QAC5E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAe,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,qBAAc,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAEhE,MAAM,UAAU,GAAG,IAAI,iBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE/C,MAAM,aAAa,GAAG,IAAI,oBAAa,EAAE,CAAC;YAE1C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,+BAA+B;gBAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAEvE,MAAM,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC1F,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrE,MAAM,aAAa,GACjB,aAAa,CAAC,MAAM,GAAG,CAAC;oBACtB,CAAC,CAAC,sCAAsC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAClE,CAAC,CAAC,EAAE,CAAC;gBACT,MAAM,SAAS,GAAG,MAAM,qBAAS,CAAC,OAAO,CACvC,qBAAqB,GAAG,UAAU,QAAQ,CAAC,YAAY,CAAC,MAAM,kBAAkB,QAAQ,IAAI,aAAa,kCAAkC,CAC5I,CAAC;gBACF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,qBAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,IAAI,cAAO,EAAE,CAAC;gBAC9B,MAAM,OAAO,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACvF,qBAAS,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,SAAS,sBAAsB,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;gBAErD,kCAAkC;gBAClC,IAAI,aAAa,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;oBAChE,MAAM,aAAa,GAAG,MAAM,qBAAS,CAAC,OAAO,CAC3C,oCAAoC,WAAW,uCAAuC,GAAG,IAAI,CAC9F,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,qBAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;wBAC3B,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,qBAAS,CAAC,OAAO,CACvC,WAAW,GAAG,UAAU,SAAS,IAAI,WAAW,GAAG,CACpD,CAAC;gBACF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,qBAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,QAAQ,EACR,QAAQ,CAAC,YAAY;qBAClB,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC;qBACjC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,CACzC,CAAC;gBAEF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,qBAAS,CAAC,KAAK,CAAC,QAAQ,GAAG,kBAAkB,SAAS,IAAI,WAAW,GAAG,CAAC,CAAC;oBAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAED,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAE5E,yCAAyC;gBACzC,IAAI,CAAC;oBACH,MAAM,IAAA,mBAAY,EAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAS,CAAC,IAAI,CACZ,oFAAoF,CACrF,CAAC;gBACJ,CAAC;gBAED,qBAAS,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,SAAS,IAAI,WAAW,EAAE,CAAC,CAAC;gBACvE,qBAAS,CAAC,IAAI,CACZ,mBAAmB,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,EAAE,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAgB,IAAI,GAAG,YAAY,uBAAgB,EAAE,CAAC;gBACvE,qBAAS,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,qBAAS,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,2CAA2C,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/diff.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "commander";
+import { SubprocessRunner } from "@clef-sh/core";
+export declare function registerDiffCommand(program: Command, deps: {
+    runner: SubprocessRunner;
+}): void;
+//# sourceMappingURL=diff.d.ts.map

package/dist/commands/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/commands/diff.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAQL,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAIvB,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAAG,IAAI,CAuF9F"}

package/dist/commands/diff.js

@@ -0,0 +1,168 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDiffCommand = registerDiffCommand;
+const path = __importStar(require("path"));
+const picocolors_1 = __importDefault(require("picocolors"));
+const core_1 = require("@clef-sh/core");
+const formatter_1 = require("../output/formatter");
+const symbols_1 = require("../output/symbols");
+function registerDiffCommand(program, deps) {
+    program
+        .command("diff <namespace> <env-a> <env-b>")
+        .description("Compare secrets between two environments for a namespace.\n\n" +
+        "Exit codes:\n" +
+        "  0  No differences\n" +
+        "  1  Differences found")
+        .option("--show-identical", "Include identical keys in the output")
+        .option("--show-values", "Show plaintext values instead of masking them")
+        .option("--json", "Output raw DiffResult JSON")
+        .action(async (namespace, envA, envB, options) => {
+        try {
+            const repoRoot = program.opts().repo || process.cwd();
+            const parser = new core_1.ManifestParser();
+            const manifest = parser.parse(path.join(repoRoot, "clef.yaml"));
+            const sopsClient = new core_1.SopsClient(deps.runner);
+            const diffEngine = new core_1.DiffEngine();
+            const result = await diffEngine.diffFiles(namespace, envA, envB, manifest, sopsClient, repoRoot);
+            // Warn if showing values for a protected environment
+            if (options.showValues) {
+                const matrixManager = new core_1.MatrixManager();
+                if (matrixManager.isProtectedEnvironment(manifest, envA) ||
+                    matrixManager.isProtectedEnvironment(manifest, envB)) {
+                    formatter_1.formatter.warn("Warning: printing plaintext values for protected environment.");
+                }
+            }
+            if (options.json) {
+                const jsonOutput = options.showValues
+                    ? result
+                    : {
+                        ...result,
+                        rows: result.rows.map((r) => ({
+                            ...r,
+                            valueA: r.valueA !== null ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" : null,
+                            valueB: r.valueB !== null ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" : null,
+                            masked: true,
+                        })),
+                    };
+                formatter_1.formatter.raw(JSON.stringify(jsonOutput, null, 2) + "\n");
+                const hasDiffs = result.rows.some((r) => r.status !== "identical");
+                process.exit(hasDiffs ? 1 : 0);
+            }
+            formatDiffOutput(result, envA, envB, options.showIdentical ?? false, options.showValues ?? false);
+            const hasDiffs = result.rows.some((r) => r.status !== "identical");
+            process.exit(hasDiffs ? 1 : 0);
+        }
+        catch (err) {
+            if (err instanceof core_1.SopsMissingError || err instanceof core_1.SopsVersionError) {
+                formatter_1.formatter.formatDependencyError(err);
+                process.exit(1);
+                return;
+            }
+            formatter_1.formatter.error(err.message);
+            process.exit(1);
+        }
+    });
+}
+const MASKED = "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
+function formatDiffOutput(result, envA, envB, showIdentical, showValues) {
+    const filteredRows = showIdentical
+        ? result.rows
+        : result.rows.filter((r) => r.status !== "identical");
+    if (filteredRows.length === 0) {
+        formatter_1.formatter.success(`No differences between ${envA} and ${envB} for ${result.namespace}`);
+        return;
+    }
+    // Summary
+    const changed = result.rows.filter((r) => r.status === "changed").length;
+    const missingA = result.rows.filter((r) => r.status === "missing_a").length;
+    const missingB = result.rows.filter((r) => r.status === "missing_b").length;
+    const identical = result.rows.filter((r) => r.status === "identical").length;
+    const parts = [];
+    if (changed > 0)
+        parts.push(`${changed} changed`);
+    if (missingA > 0)
+        parts.push(`${missingA} missing in ${envA}`);
+    if (missingB > 0)
+        parts.push(`${missingB} missing in ${envB}`);
+    if (identical > 0)
+        parts.push(`${identical} identical`);
+    formatter_1.formatter.print(`\n${result.namespace}: ${parts.join(", ")}\n`);
+    // Table
+    const rows = [];
+    for (const row of filteredRows) {
+        let valueA;
+        let valueB;
+        let status;
+        switch (row.status) {
+            case "changed":
+                valueA = picocolors_1.default.yellow(showValues ? (row.valueA ?? "") : MASKED);
+                valueB = picocolors_1.default.cyan(showValues ? (row.valueB ?? "") : MASKED);
+                status = `${(0, symbols_1.sym)("warning")} ${picocolors_1.default.yellow("changed")}`;
+                break;
+            case "missing_a":
+                valueA = picocolors_1.default.red(picocolors_1.default.italic("(not set)"));
+                valueB = showValues ? (row.valueB ?? "") : MASKED;
+                status = `${(0, symbols_1.sym)("failure")} ${picocolors_1.default.red(`missing in ${envA}`)}`;
+                break;
+            case "missing_b":
+                valueA = showValues ? (row.valueA ?? "") : MASKED;
+                valueB = picocolors_1.default.red(picocolors_1.default.italic("(not set)"));
+                status = `${(0, symbols_1.sym)("failure")} ${picocolors_1.default.red(`missing in ${envB}`)}`;
+                break;
+            case "identical":
+                valueA = showValues ? (row.valueA ?? "") : MASKED;
+                valueB = showValues ? (row.valueB ?? "") : MASKED;
+                status = `${(0, symbols_1.sym)("success")} ${picocolors_1.default.green("identical")}`;
+                break;
+        }
+        rows.push([row.key, valueA, valueB, status]);
+    }
+    formatter_1.formatter.table(rows, ["Key", envA, envB, "Status"]);
+    // Fix hints for missing keys
+    const missingRows = result.rows.filter((r) => r.status === "missing_a" || r.status === "missing_b");
+    if (missingRows.length > 0) {
+        formatter_1.formatter.print("");
+        formatter_1.formatter.hint("Fix:");
+        for (const row of missingRows) {
+            const missingEnv = row.status === "missing_a" ? envA : envB;
+            formatter_1.formatter.hint(`clef set ${result.namespace}/${missingEnv} ${row.key} <value>`);
+        }
+    }
+}
+//# sourceMappingURL=diff.js.map

package/dist/commands/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/commands/diff.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,kDAuFC;AAvGD,2CAA6B;AAC7B,4DAA4B;AAE5B,wCASuB;AACvB,mDAAgD;AAChD,+CAAwC;AAExC,SAAgB,mBAAmB,CAAC,OAAgB,EAAE,IAAkC;IACtF,OAAO;SACJ,OAAO,CAAC,kCAAkC,CAAC;SAC3C,WAAW,CACV,+DAA+D;QAC7D,eAAe;QACf,uBAAuB;QACvB,wBAAwB,CAC3B;SACA,MAAM,CAAC,kBAAkB,EAAE,sCAAsC,CAAC;SAClE,MAAM,CAAC,eAAe,EAAE,+CAA+C,CAAC;SACxE,MAAM,CAAC,QAAQ,EAAE,4BAA4B,CAAC;SAC9C,MAAM,CACL,KAAK,EACH,SAAiB,EACjB,IAAY,EACZ,IAAY,EACZ,OAA0E,EAC1E,EAAE;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAe,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,qBAAc,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAEhE,MAAM,UAAU,GAAG,IAAI,iBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,IAAI,iBAAU,EAAE,CAAC;YAEpC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CACvC,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,UAAU,EACV,QAAQ,CACT,CAAC;YAEF,qDAAqD;YACrD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,IAAI,oBAAa,EAAE,CAAC;gBAC1C,IACE,aAAa,CAAC,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC;oBACpD,aAAa,CAAC,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,EACpD,CAAC;oBACD,qBAAS,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU;oBACnC,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC;wBACE,GAAG,MAAM;wBACT,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC5B,GAAG,CAAC;4BACJ,MAAM,EACJ,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,IAAI;4BAC/E,MAAM,EACJ,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,IAAI;4BAC/E,MAAM,EAAE,IAAI;yBACb,CAAC,CAAC;qBACJ,CAAC;gBACN,qBAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;YAED,gBAAgB,CACd,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,OAAO,CAAC,aAAa,IAAI,KAAK,EAC9B,OAAO,CAAC,UAAU,IAAI,KAAK,CAC5B,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAgB,IAAI,GAAG,YAAY,uBAAgB,EAAE,CAAC;gBACvE,qBAAS,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,qBAAS,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CACF,CAAC;AACN,CAAC;AAED,MAAM,MAAM,GAAG,kDAAkD,CAAC;AAElE,SAAS,gBAAgB,CACvB,MAAkB,EAClB,IAAY,EACZ,IAAY,EACZ,aAAsB,EACtB,UAAmB;IAEnB,MAAM,YAAY,GAAG,aAAa;QAChC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IAExD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,qBAAS,CAAC,OAAO,CAAC,0BAA0B,IAAI,QAAQ,IAAI,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,UAAU;IACV,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IAE7E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC;IAClD,IAAI,QAAQ,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,IAAI,EAAE,CAAC,CAAC;IAC/D,IAAI,QAAQ,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,IAAI,EAAE,CAAC,CAAC;IAC/D,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,YAAY,CAAC,CAAC;IACxD,qBAAS,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhE,QAAQ;IACR,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,MAAc,CAAC;QACnB,IAAI,MAAc,CAAC;QACnB,IAAI,MAAc,CAAC;QAEnB,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,SAAS;gBACZ,MAAM,GAAG,oBAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC7D,MAAM,GAAG,oBAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC3D,MAAM,GAAG,GAAG,IAAA,aAAG,EAAC,SAAS,CAAC,IAAI,oBAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,GAAG,oBAAE,CAAC,GAAG,CAAC,oBAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;gBACxC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,GAAG,GAAG,IAAA,aAAG,EAAC,SAAS,CAAC,IAAI,oBAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7D,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,GAAG,oBAAE,CAAC,GAAG,CAAC,oBAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;gBACxC,MAAM,GAAG,GAAG,IAAA,aAAG,EAAC,SAAS,CAAC,IAAI,oBAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7D,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,GAAG,GAAG,IAAA,aAAG,EAAC,SAAS,CAAC,IAAI,oBAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtD,MAAM;QACV,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,qBAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErD,6BAA6B;IAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAC5D,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,qBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpB,qBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,qBAAS,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,SAAS,IAAI,UAAU,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "commander";
+import { SubprocessRunner } from "@clef-sh/core";
+export declare function registerDoctorCommand(program: Command, deps: {
+    runner: SubprocessRunner;
+}): void;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAA0C,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAuBzF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAAG,IAAI,CAoOhG"}