@clef-sh/cli 0.1.0

package/dist/commands/lint.js

@@ -0,0 +1,152 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerLintCommand = registerLintCommand;
+const path = __importStar(require("path"));
+const picocolors_1 = __importDefault(require("picocolors"));
+const core_1 = require("@clef-sh/core");
+const formatter_1 = require("../output/formatter");
+const symbols_1 = require("../output/symbols");
+function registerLintCommand(program, deps) {
+    program
+        .command("lint")
+        .description("Full repo health check — matrix completeness, schema validation, SOPS integrity.\n\n" +
+        "Exit codes:\n" +
+        "  0  No errors (warnings are allowed)\n" +
+        "  1  Errors found")
+        .option("--fix", "Auto-fix safe issues (scaffold missing files)")
+        .option("--json", "Output raw LintResult JSON")
+        .action(async (options) => {
+        try {
+            const repoRoot = program.opts().repo || process.cwd();
+            const parser = new core_1.ManifestParser();
+            const manifest = parser.parse(path.join(repoRoot, "clef.yaml"));
+            const sopsClient = new core_1.SopsClient(deps.runner);
+            const matrixManager = new core_1.MatrixManager();
+            const schemaValidator = new core_1.SchemaValidator();
+            const lintRunner = new core_1.LintRunner(matrixManager, schemaValidator, sopsClient);
+            let result;
+            if (options.fix) {
+                result = await lintRunner.fix(manifest, repoRoot);
+            }
+            else {
+                result = await lintRunner.run(manifest, repoRoot);
+            }
+            if (options.json) {
+                formatter_1.formatter.raw(JSON.stringify(result, null, 2) + "\n");
+                const hasErrors = result.issues.some((i) => i.severity === "error");
+                process.exit(hasErrors ? 1 : 0);
+            }
+            formatLintOutput(result);
+            const hasErrors = result.issues.some((i) => i.severity === "error");
+            process.exit(hasErrors ? 1 : 0);
+        }
+        catch (err) {
+            if (err instanceof core_1.SopsMissingError || err instanceof core_1.SopsVersionError) {
+                formatter_1.formatter.formatDependencyError(err);
+                process.exit(1);
+                return;
+            }
+            formatter_1.formatter.error(err.message);
+            process.exit(1);
+        }
+    });
+}
+function formatLintOutput(result) {
+    const errors = result.issues.filter((i) => i.severity === "error");
+    const warnings = result.issues.filter((i) => i.severity === "warning");
+    const infos = result.issues.filter((i) => i.severity === "info");
+    if (result.issues.length === 0) {
+        formatter_1.formatter.success(`All clear \u2014 ${result.fileCount} files healthy`);
+        return;
+    }
+    formatter_1.formatter.print("");
+    if (errors.length > 0) {
+        formatter_1.formatter.print(picocolors_1.default.red(picocolors_1.default.bold(`${(0, symbols_1.sym)("failure")} ${errors.length} error(s)`)));
+        for (const issue of errors) {
+            const keyRef = issue.key ? ` ${picocolors_1.default.white(issue.key)}` : "";
+            const categoryBadge = picocolors_1.default.dim(`[${issue.category}]`);
+            formatter_1.formatter.print(`  ${picocolors_1.default.red((0, symbols_1.sym)("failure"))} ${categoryBadge} ${issue.file}${keyRef}`);
+            formatter_1.formatter.print(`    ${issue.message}`);
+            if (issue.fixCommand) {
+                formatter_1.formatter.hint(issue.fixCommand);
+            }
+        }
+        formatter_1.formatter.print("");
+    }
+    if (warnings.length > 0) {
+        formatter_1.formatter.print(picocolors_1.default.yellow(picocolors_1.default.bold(`${(0, symbols_1.sym)("warning")} ${warnings.length} warning(s)`)));
+        for (const issue of warnings) {
+            const keyRef = issue.key ? ` ${picocolors_1.default.white(issue.key)}` : "";
+            const categoryBadge = picocolors_1.default.dim(`[${issue.category}]`);
+            formatter_1.formatter.print(`  ${picocolors_1.default.yellow((0, symbols_1.sym)("warning"))} ${categoryBadge} ${issue.file}${keyRef}`);
+            formatter_1.formatter.print(`    ${issue.message}`);
+            if (issue.fixCommand) {
+                formatter_1.formatter.hint(issue.fixCommand);
+            }
+        }
+        formatter_1.formatter.print("");
+    }
+    if (infos.length > 0) {
+        formatter_1.formatter.print(picocolors_1.default.blue(picocolors_1.default.bold(`${(0, symbols_1.sym)("info")} ${infos.length} info`)));
+        for (const issue of infos) {
+            const keyRef = issue.key ? ` ${picocolors_1.default.white(issue.key)}` : "";
+            const categoryBadge = picocolors_1.default.dim(`[${issue.category}]`);
+            formatter_1.formatter.print(`  ${picocolors_1.default.blue((0, symbols_1.sym)("info"))} ${categoryBadge} ${issue.file}${keyRef}`);
+            formatter_1.formatter.print(`    ${issue.message}`);
+        }
+        formatter_1.formatter.print("");
+    }
+    // Summary line
+    const parts = [];
+    if (errors.length > 0)
+        parts.push(picocolors_1.default.red(`${errors.length} error(s)`));
+    if (warnings.length > 0)
+        parts.push(picocolors_1.default.yellow(`${warnings.length} warning(s)`));
+    if (infos.length > 0)
+        parts.push(picocolors_1.default.blue(`${infos.length} info`));
+    formatter_1.formatter.print(parts.join(", "));
+    // Fixable hints at the end
+    const fixableIssues = result.issues.filter((i) => i.fixCommand);
+    if (fixableIssues.length > 0) {
+        for (const issue of fixableIssues) {
+            formatter_1.formatter.hint(issue.fixCommand);
+        }
+    }
+}
+//# sourceMappingURL=lint.js.map

package/dist/commands/lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint.js","sourceRoot":"","sources":["../../src/commands/lint.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,kDAiDC;AAlED,2CAA6B;AAC7B,4DAA4B;AAE5B,wCAUuB;AACvB,mDAAgD;AAChD,+CAAwC;AAExC,SAAgB,mBAAmB,CAAC,OAAgB,EAAE,IAAkC;IACtF,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CACV,sFAAsF;QACpF,eAAe;QACf,yCAAyC;QACzC,mBAAmB,CACtB;SACA,MAAM,CAAC,OAAO,EAAE,+CAA+C,CAAC;SAChE,MAAM,CAAC,QAAQ,EAAE,4BAA4B,CAAC;SAC9C,MAAM,CAAC,KAAK,EAAE,OAA0C,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAe,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,qBAAc,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAEhE,MAAM,UAAU,GAAG,IAAI,iBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,aAAa,GAAG,IAAI,oBAAa,EAAE,CAAC;YAC1C,MAAM,eAAe,GAAG,IAAI,sBAAe,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,IAAI,iBAAU,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YAE9E,IAAI,MAAkB,CAAC;YACvB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,qBAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;YAED,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAgB,IAAI,GAAG,YAAY,uBAAgB,EAAE,CAAC;gBACvE,qBAAS,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,qBAAS,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAEjE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,qBAAS,CAAC,OAAO,CAAC,oBAAoB,MAAM,CAAC,SAAS,gBAAgB,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,qBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEpB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,qBAAS,CAAC,KAAK,CAAC,oBAAE,CAAC,GAAG,CAAC,oBAAE,CAAC,IAAI,CAAC,GAAG,IAAA,aAAG,EAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QAChF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,oBAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,aAAa,GAAG,oBAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;YACpD,qBAAS,CAAC,KAAK,CAAC,KAAK,oBAAE,CAAC,GAAG,CAAC,IAAA,aAAG,EAAC,SAAS,CAAC,CAAC,IAAI,aAAa,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YACvF,qBAAS,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,qBAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,qBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,qBAAS,CAAC,KAAK,CAAC,oBAAE,CAAC,MAAM,CAAC,oBAAE,CAAC,IAAI,CAAC,GAAG,IAAA,aAAG,EAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,oBAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,aAAa,GAAG,oBAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;YACpD,qBAAS,CAAC,KAAK,CAAC,KAAK,oBAAE,CAAC,MAAM,CAAC,IAAA,aAAG,EAAC,SAAS,CAAC,CAAC,IAAI,aAAa,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YAC1F,qBAAS,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,qBAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,qBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,qBAAS,CAAC,KAAK,CAAC,oBAAE,CAAC,IAAI,CAAC,oBAAE,CAAC,IAAI,CAAC,GAAG,IAAA,aAAG,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,oBAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,aAAa,GAAG,oBAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;YACpD,qBAAS,CAAC,KAAK,CAAC,KAAK,oBAAE,CAAC,IAAI,CAAC,IAAA,aAAG,EAAC,MAAM,CAAC,CAAC,IAAI,aAAa,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YACrF,qBAAS,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,qBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IAED,eAAe;IACf,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,oBAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,oBAAE,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,oBAAE,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC;IAClE,qBAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAElC,2BAA2B;IAC3B,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,qBAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAW,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/merge-driver.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "commander";
+import { SubprocessRunner } from "@clef-sh/core";
+export declare function registerMergeDriverCommand(program: Command, deps: {
+    runner: SubprocessRunner;
+}): void;
+//# sourceMappingURL=merge-driver.d.ts.map

package/dist/commands/merge-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-driver.d.ts","sourceRoot":"","sources":["../../src/commands/merge-driver.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAML,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAsCvB,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GACjC,IAAI,CAqFN"}

package/dist/commands/merge-driver.js

@@ -0,0 +1,152 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerMergeDriverCommand = registerMergeDriverCommand;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const YAML = __importStar(require("yaml"));
+const core_1 = require("@clef-sh/core");
+const formatter_1 = require("../output/formatter");
+/**
+ * Locate the repo root by walking up from a file path looking for clef.yaml.
+ * Falls back to cwd if not found.
+ */
+function findRepoRoot(filePath) {
+    let dir = path.dirname(path.resolve(filePath));
+    for (let i = 0; i < 50; i++) {
+        if (fs.existsSync(path.join(dir, "clef.yaml")))
+            return dir;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    throw new Error("Could not find clef.yaml in any parent directory of: " + filePath);
+}
+/**
+ * Resolve the age key file path from environment or .clef/config.yaml.
+ */
+function resolveAgeKeyFile(repoRoot) {
+    if (process.env.SOPS_AGE_KEY_FILE)
+        return process.env.SOPS_AGE_KEY_FILE;
+    if (process.env.SOPS_AGE_KEY)
+        return undefined; // inline key, no file needed
+    const configPath = path.join(repoRoot, ".clef", "config.yaml");
+    if (fs.existsSync(configPath)) {
+        try {
+            const config = YAML.parse(fs.readFileSync(configPath, "utf-8"));
+            if (config?.age_key_file)
+                return config.age_key_file;
+        }
+        catch {
+            // ignore parse errors
+        }
+    }
+    return undefined;
+}
+function registerMergeDriverCommand(program, deps) {
+    program
+        .command("merge-driver")
+        .description("SOPS-aware git merge driver. Called by git during merge conflicts on encrypted files.\n" +
+        "Not typically invoked directly — configured via .gitattributes and git config.")
+        .argument("<base>", "Path to common ancestor file (%O)")
+        .argument("<ours>", "Path to current branch file (%A)")
+        .argument("<theirs>", "Path to incoming branch file (%B)")
+        .action(async (basePath, oursPath, theirsPath) => {
+        try {
+            const repoRoot = program.opts().repo || findRepoRoot(oursPath);
+            const ageKeyFile = resolveAgeKeyFile(repoRoot);
+            const sopsClient = new core_1.SopsClient(deps.runner, ageKeyFile);
+            const driver = new core_1.SopsMergeDriver(sopsClient);
+            const result = await driver.mergeFiles(basePath, oursPath, theirsPath);
+            if (result.clean) {
+                // Resolve the manifest and environment for re-encryption
+                const manifestPath = path.join(repoRoot, "clef.yaml");
+                let manifest;
+                let environment;
+                if (fs.existsSync(manifestPath)) {
+                    const parser = new core_1.ManifestParser();
+                    manifest = parser.parse(manifestPath);
+                    // Determine the environment by matching against resolved file patterns
+                    for (const ns of manifest.namespaces) {
+                        for (const env of manifest.environments) {
+                            const expected = manifest.file_pattern
+                                .replace("{namespace}", ns.name)
+                                .replace("{environment}", env.name);
+                            const resolvedOurs = path.relative(repoRoot, path.resolve(oursPath));
+                            if (resolvedOurs === expected ||
+                                path.basename(oursPath) === path.basename(expected)) {
+                                environment = env.name;
+                                break;
+                            }
+                        }
+                        if (environment)
+                            break;
+                    }
+                }
+                if (manifest) {
+                    await sopsClient.encrypt(oursPath, result.merged, manifest, environment);
+                }
+                else {
+                    // Fallback: write merged YAML to ours path without re-encrypting via manifest.
+                    // This shouldn't happen in a properly configured Clef repo.
+                    formatter_1.formatter.error("Could not find clef.yaml — cannot re-encrypt merged file.");
+                    process.exit(1);
+                    return;
+                }
+                // Exit 0 signals git that the merge was resolved
+                process.exit(0);
+            }
+            else {
+                // Report conflicts to stderr so the user can resolve them
+                formatter_1.formatter.error(`Merge conflict in encrypted file: ${result.conflicts.length} key(s) conflict`);
+                for (const c of result.conflicts) {
+                    formatter_1.formatter.failure(`  ${c.key}:`);
+                    formatter_1.formatter.failure(`    base:   ${c.baseValue ?? "(absent)"}`);
+                    formatter_1.formatter.failure(`    ours:   ${c.oursValue ?? "(deleted)"}`);
+                    formatter_1.formatter.failure(`    theirs: ${c.theirsValue ?? "(deleted)"}`);
+                }
+                formatter_1.formatter.hint("Resolve conflicts manually with: clef set <namespace>/<env> <KEY> <value>");
+                // Exit 1 signals git that the merge has unresolved conflicts
+                process.exit(1);
+            }
+        }
+        catch (err) {
+            formatter_1.formatter.error(`Merge driver failed: ${err.message}`);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=merge-driver.js.map

package/dist/commands/merge-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-driver.js","sourceRoot":"","sources":["../../src/commands/merge-driver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,gEAwFC;AAzID,uCAAyB;AACzB,2CAA6B;AAC7B,2CAA6B;AAE7B,wCAOuB;AACvB,mDAAgD;AAEhD;;;GAGG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,QAAQ,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACxE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC,CAAC,6BAA6B;IAE7E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;YACnF,IAAI,MAAM,EAAE,YAAY;gBAAE,OAAO,MAAM,CAAC,YAAY,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,0BAA0B,CACxC,OAAgB,EAChB,IAAkC;IAElC,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CACV,yFAAyF;QACvF,gFAAgF,CACnF;SACA,QAAQ,CAAC,QAAQ,EAAE,mCAAmC,CAAC;SACvD,QAAQ,CAAC,QAAQ,EAAE,kCAAkC,CAAC;SACtD,QAAQ,CAAC,UAAU,EAAE,mCAAmC,CAAC;SACzD,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,QAAgB,EAAE,UAAkB,EAAE,EAAE;QACvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAe,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,IAAI,iBAAU,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,sBAAe,CAAC,UAAU,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAEvE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,yDAAyD;gBACzD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACtD,IAAI,QAAkC,CAAC;gBACvC,IAAI,WAA+B,CAAC;gBAEpC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,IAAI,qBAAc,EAAE,CAAC;oBACpC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBAEtC,uEAAuE;oBACvE,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;wBACrC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;4BACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY;iCACnC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC;iCAC/B,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;4BACtC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;4BACrE,IACE,YAAY,KAAK,QAAQ;gCACzB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACnD,CAAC;gCACD,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC;gCACvB,MAAM;4BACR,CAAC;wBACH,CAAC;wBACD,IAAI,WAAW;4BAAE,MAAM;oBACzB,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,+EAA+E;oBAC/E,4DAA4D;oBAC5D,qBAAS,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;oBAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAChB,OAAO;gBACT,CAAC;gBAED,iDAAiD;gBACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,0DAA0D;gBAC1D,qBAAS,CAAC,KAAK,CACb,qCAAqC,MAAM,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAC/E,CAAC;gBAEF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACjC,qBAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;oBACjC,qBAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;oBAC9D,qBAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC,CAAC;oBAC/D,qBAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAED,qBAAS,CAAC,IAAI,CACZ,2EAA2E,CAC5E,CAAC;gBAEF,6DAA6D;gBAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qBAAS,CAAC,KAAK,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/recipients.d.ts

@@ -0,0 +1,7 @@
+import { Command } from "commander";
+import { SubprocessRunner } from "@clef-sh/core";
+export declare function waitForEnter(message: string): Promise<void>;
+export declare function registerRecipientsCommand(program: Command, deps: {
+    runner: SubprocessRunner;
+}): void;
+//# sourceMappingURL=recipients.d.ts.map

package/dist/commands/recipients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipients.d.ts","sourceRoot":"","sources":["../../src/commands/recipients.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAML,gBAAgB,EAIjB,MAAM,eAAe,CAAC;AAIvB,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW3D;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GACjC,IAAI,CAgVN"}