@cprof/cli 0.0.1-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Vedant Nandoskar
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,72 @@
+# cprof
+
+[![npm](https://img.shields.io/npm/v/@cprof/cli/alpha?label=npm%40alpha)](https://www.npmjs.com/package/@cprof/cli)
+[![license: MIT](https://img.shields.io/badge/license-MIT-blue)](https://github.com/Vedant1202/claude-prof/blob/main/LICENSE)
+
+Snapshot, scrub, and migrate your Claude Code setup as a redacted, portable profile.
+
+> **Alpha.** cprof is early and the profile format may still change. Redaction is
+> best-effort — always review a generated profile before sharing it.
+
+`cprof` captures your project or global Claude Code configuration — settings, MCP
+servers, `CLAUDE.md` memory, rules, skills, commands, agents, and plugin
+inventory — into a deterministic, schema-valid, **secret-redacted**
+`claude-profile.json`. You can then `diff`, `validate`, and `install` a trusted
+profile onto another machine with a non-destructive deep merge. It runs fully
+offline and never executes hook or plugin code.
+
+## Install
+
+```bash
+npm install -g @cprof/cli@alpha
+# or run it without installing:
+npx @cprof/cli@alpha --help
+```
+
+The npm package is **`@cprof/cli`**; the installed command is **`cprof`**.
+Requires Node.js >= 22.
+
+## Quickstart
+
+```bash
+# 1. Snapshot the current project into claude-profile.json
+cprof init
+
+# 2. Review what was captured — and confirm secrets are redacted
+cat claude-profile.json
+
+# 3. On another machine, apply it with a non-destructive deep merge
+cprof install claude-profile.json --dry-run   # preview the write plan
+cprof install claude-profile.json             # apply it
+```
+
+## Commands
+
+| Command                                            | What it does                                                    |
+| -------------------------------------------------- | --------------------------------------------------------------- |
+| `cprof init [--global \| --include-global]`        | Snapshot the current setup into `claude-profile.json`           |
+| `cprof refresh`                                    | Rebuild the profile from its recorded source scope              |
+| `cprof install <file> [--dry-run] [--force] [...]` | Apply a trusted profile (deep merge; backs up before overwrite) |
+| `cprof validate <file>`                            | Validate a profile against the schema                           |
+| `cprof diff <a.json> <b.json>`                     | Compare two profiles semantically                               |
+| `cprof profiles list`                              | List profiles recorded by local installs                        |
+
+Run `cprof --help` for the full usage.
+
+## Redaction & limits
+
+Secrets are redacted on capture: provider keys (via
+[secretlint](https://github.com/secretlint/secretlint)), secret-like key names,
+JWTs, and high-entropy values become `${env:NAME}` placeholders, and the
+generated manifest is re-scanned before it is written. It will **not** catch
+low-entropy secrets stored under non-sensitive keys. Review every profile before
+sharing it.
+
+## Documentation
+
+Full docs: **https://vedant1202.github.io/claude-prof/** · Source & issues:
+[github.com/Vedant1202/claude-prof](https://github.com/Vedant1202/claude-prof)
+
+## License
+
+MIT

package/dist/command-utils.d.ts

@@ -0,0 +1,12 @@
+import type { CprofProfile } from "@cprof/schema";
+export type CommandWriter = Pick<NodeJS.WriteStream, "write">;
+export type ReadProfileFileResult = {
+    readonly ok: true;
+    readonly profile: CprofProfile;
+} | {
+    readonly ok: false;
+    readonly exitCode: 1 | 2;
+    readonly errors: readonly string[];
+};
+export declare function readProfileFile(filePath: string): Promise<ReadProfileFileResult>;
+//# sourceMappingURL=command-utils.d.ts.map

package/dist/command-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-utils.d.ts","sourceRoot":"","sources":["../src/command-utils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAE9D,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GACrD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,CAAC;AAEN,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAmChC"}

package/dist/command-utils.js

@@ -0,0 +1,38 @@
+import { readFile } from "node:fs/promises";
+import { validateProfile } from "@cprof/core";
+export async function readProfileFile(filePath) {
+    let contents;
+    try {
+        contents = await readFile(filePath, "utf8");
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === "ENOENT") {
+            return {
+                ok: false,
+                exitCode: 2,
+                errors: [`file not found: ${filePath}`],
+            };
+        }
+        throw error;
+    }
+    try {
+        const value = JSON.parse(contents);
+        const validation = validateProfile(value);
+        if (!validation.valid) {
+            return { ok: false, exitCode: 1, errors: validation.errors };
+        }
+        return { ok: true, profile: value };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            exitCode: 1,
+            errors: [
+                error instanceof Error ? error.message : "profile JSON is invalid",
+            ],
+        };
+    }
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}

package/dist/commands/diff.d.ts

@@ -0,0 +1,7 @@
+export interface DiffCommandOptions {
+    readonly cwd: string;
+    readonly stdout: Pick<NodeJS.WriteStream, "write">;
+    readonly stderr: Pick<NodeJS.WriteStream, "write">;
+}
+export declare function runDiff(flags: readonly string[], options: DiffCommandOptions): Promise<number>;
+//# sourceMappingURL=diff.d.ts.map

package/dist/commands/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/commands/diff.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACpD;AAED,wBAAsB,OAAO,CAC3B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAoBjB"}

package/dist/commands/diff.js

@@ -0,0 +1,21 @@
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { diffProfiles, formatProfileDiff } from "@cprof/core";
+export async function runDiff(flags, options) {
+    const json = flags.includes("--json");
+    const paths = flags.filter((flag) => flag !== "--json");
+    if (paths.length !== 2) {
+        options.stderr.write("usage: cprof diff [--json] <a.json> <b.json>\n");
+        return 1;
+    }
+    const leftPath = paths[0];
+    const rightPath = paths[1];
+    const left = await readJson(resolve(options.cwd, leftPath));
+    const right = await readJson(resolve(options.cwd, rightPath));
+    const diff = diffProfiles(left, right);
+    options.stdout.write(json ? `${JSON.stringify(diff, null, 2)}\n` : formatProfileDiff(diff));
+    return 0;
+}
+async function readJson(filePath) {
+    return JSON.parse(await readFile(filePath, "utf8"));
+}

package/dist/commands/init.d.ts

@@ -0,0 +1,8 @@
+export interface InitCommandOptions {
+    readonly cwd: string;
+    readonly homeDir?: string;
+    readonly stdout: Pick<NodeJS.WriteStream, "write">;
+    readonly stderr: Pick<NodeJS.WriteStream, "write">;
+}
+export declare function runInit(flags: readonly string[], options: InitCommandOptions): Promise<number>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACpD;AAED,wBAAsB,OAAO,CAC3B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA0DjB"}

package/dist/commands/init.js

@@ -0,0 +1,66 @@
+import { writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { basename, join, resolve } from "node:path";
+import { createProfileGitignore, createScanReport, scanClaudeProfile, validateProfile, } from "@cprof/core";
+export async function runInit(flags, options) {
+    const parsed = parseInitFlags(flags);
+    if (parsed.valid === false) {
+        options.stderr.write(`${parsed.error}\n`);
+        return 1;
+    }
+    const scan = await scanClaudeProfile({
+        name: createProfileName(options.cwd, parsed.mode, parsed.includeGlobal),
+        version: "1.0.0",
+        cwd: options.cwd,
+        homeDir: options.homeDir ?? homedir(),
+        outputRoot: options.cwd,
+        mode: parsed.mode,
+        includeGlobal: parsed.mode === "project" ? parsed.includeGlobal : false,
+    });
+    const manifest = scan.manifest;
+    const validation = validateProfile(manifest);
+    if (!validation.valid) {
+        options.stderr.write(`${validation.errors.join("\n")}\n`);
+        return validation.exitCode;
+    }
+    if (!scan.leakCheck.ok) {
+        const leakedPaths = [
+            ...new Set(scan.leakCheck.leaks.map((leak) => leak.path)),
+        ];
+        options.stderr.write(`refusing to write: redaction left a secret in ${leakedPaths.join(", ")}\n`);
+        return 3;
+    }
+    await writeFile(join(options.cwd, "claude-profile.json"), `${JSON.stringify(manifest, null, 2)}\n`, "utf8");
+    await writeFile(join(options.cwd, ".gitignore"), createProfileGitignore(), "utf8");
+    await writeFile(join(options.cwd, "cprof-scan-report.txt"), createScanReport(scan.report), "utf8");
+    options.stdout.write(`Wrote claude-profile.json (${manifest.profileScope}${manifest.includesGlobal ? " + global" : ""})\n`);
+    return 0;
+}
+function parseInitFlags(flags) {
+    const supportedFlags = new Set(["--global", "--include-global"]);
+    const unknownFlag = flags.find((flag) => !supportedFlags.has(flag));
+    if (unknownFlag !== undefined) {
+        return { valid: false, error: `unknown init flag: ${unknownFlag}` };
+    }
+    if (flags.includes("--global") && flags.includes("--include-global")) {
+        return {
+            valid: false,
+            error: "init cannot combine --global and --include-global",
+        };
+    }
+    if (flags.includes("--global")) {
+        return { valid: true, mode: "global", includeGlobal: false };
+    }
+    return {
+        valid: true,
+        mode: "project",
+        includeGlobal: flags.includes("--include-global"),
+    };
+}
+function createProfileName(cwd, mode, includeGlobal) {
+    if (mode === "global") {
+        return "global-profile";
+    }
+    const projectName = basename(resolve(cwd)) || "project";
+    return includeGlobal ? `${projectName}-with-global` : projectName;
+}

package/dist/commands/install.d.ts

@@ -0,0 +1,9 @@
+export interface InstallCommandOptions {
+    readonly cwd: string;
+    readonly homeDir?: string;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly stdout: Pick<NodeJS.WriteStream, "write">;
+    readonly stderr: Pick<NodeJS.WriteStream, "write">;
+}
+export declare function runInstall(flags: readonly string[], options: InstallCommandOptions): Promise<number>;
+//# sourceMappingURL=install.d.ts.map

package/dist/commands/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACpD;AAUD,wBAAsB,UAAU,CAC9B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA6BjB"}

package/dist/commands/install.js

@@ -0,0 +1,73 @@
+import { homedir } from "node:os";
+import { resolve } from "node:path";
+import { installProfile } from "@cprof/core";
+export async function runInstall(flags, options) {
+    const parsed = parseInstallFlags(flags);
+    if (parsed.valid === false) {
+        options.stderr.write(`${parsed.error}\n`);
+        return 1;
+    }
+    const result = await installProfile({
+        profilePath: resolve(options.cwd, parsed.profilePath),
+        cwd: options.cwd,
+        homeDir: options.homeDir ?? homedir(),
+        env: options.env,
+        dryRun: parsed.dryRun,
+        force: parsed.force,
+        scope: parsed.scope,
+        installSource: parsed.profilePath,
+    });
+    const output = result.ok ? options.stdout : options.stderr;
+    output.write(result.report);
+    if (result.ok) {
+        options.stdout.write(`${parsed.dryRun ? "Planned" : "Installed"} ${result.writes.length} writes\n`);
+    }
+    return result.exitCode;
+}
+function parseInstallFlags(flags) {
+    let profilePath;
+    let dryRun = false;
+    let force = false;
+    let scope;
+    for (const flag of flags) {
+        if (flag === "--dry-run") {
+            dryRun = true;
+            continue;
+        }
+        if (flag === "--force") {
+            force = true;
+            continue;
+        }
+        if (flag === "--global") {
+            scope = "global";
+            continue;
+        }
+        if (flag === "--include-global") {
+            scope = "include-global";
+            continue;
+        }
+        if (flag.startsWith("--")) {
+            return { valid: false, error: `unknown install flag: ${flag}` };
+        }
+        if (profilePath !== undefined) {
+            return { valid: false, error: `unexpected install argument: ${flag}` };
+        }
+        profilePath = flag;
+    }
+    if (profilePath === undefined) {
+        return { valid: false, error: "install requires a profile path" };
+    }
+    if (flags.includes("--global") && flags.includes("--include-global")) {
+        return {
+            valid: false,
+            error: "install cannot combine --global and --include-global",
+        };
+    }
+    return {
+        valid: true,
+        profilePath,
+        dryRun,
+        force,
+        scope,
+    };
+}

package/dist/commands/profiles.d.ts

@@ -0,0 +1,8 @@
+export interface ProfilesCommandOptions {
+    readonly cwd: string;
+    readonly homeDir?: string;
+    readonly stdout: Pick<NodeJS.WriteStream, "write">;
+    readonly stderr: Pick<NodeJS.WriteStream, "write">;
+}
+export declare function runProfiles(flags: readonly string[], options: ProfilesCommandOptions): Promise<number>;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/commands/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/commands/profiles.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACpD;AAQD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAcjB"}

package/dist/commands/profiles.js

@@ -0,0 +1,47 @@
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { loadInstalledProfileState, } from "@cprof/core";
+export async function runProfiles(flags, options) {
+    const parsed = parseProfilesFlags(flags);
+    if (!parsed.valid) {
+        options.stderr.write(`${parsed.error}\n`);
+        return 1;
+    }
+    const state = await loadInstalledProfileState(statePath(options.cwd, options.homeDir ?? homedir(), parsed.global));
+    options.stdout.write(formatInstalls(state.installs, parsed.json));
+    return 0;
+}
+function parseProfilesFlags(flags) {
+    const global = flags.includes("--global");
+    const json = flags.includes("--json");
+    const positional = flags.filter((flag) => flag !== "--global" && flag !== "--json");
+    const unknownFlag = positional.find((flag) => flag.startsWith("--"));
+    if (unknownFlag !== undefined) {
+        return { valid: false, error: `unknown profiles flag: ${unknownFlag}` };
+    }
+    const [action, extra] = positional;
+    if (action !== "list") {
+        return { valid: false, error: "profiles requires action: list" };
+    }
+    if (extra !== undefined) {
+        return { valid: false, error: `unexpected profiles argument: ${extra}` };
+    }
+    return { valid: true, global, json };
+}
+function statePath(cwd, homeDir, global) {
+    return global
+        ? join(resolve(homeDir), ".claude", ".cprof-state.json")
+        : join(resolve(cwd), ".cprof-state.json");
+}
+function formatInstalls(installs, json) {
+    if (json) {
+        return `${JSON.stringify({ installs }, null, 2)}\n`;
+    }
+    if (installs.length === 0) {
+        return "No installed profiles recorded.\n";
+    }
+    return `${installs.map(formatInstallLine).join("\n")}\n`;
+}
+function formatInstallLine(install) {
+    return `${install.name} ${install.version} (${install.target}) - ${install.source}`;
+}

package/dist/commands/refresh.d.ts

@@ -0,0 +1,9 @@
+import { type CommandWriter } from "../command-utils.js";
+export interface RefreshCommandOptions {
+    readonly cwd: string;
+    readonly homeDir?: string;
+    readonly stdout: CommandWriter;
+    readonly stderr: CommandWriter;
+}
+export declare function runRefresh(flags: readonly string[], options: RefreshCommandOptions): Promise<number>;
+//# sourceMappingURL=refresh.d.ts.map

package/dist/commands/refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../src/commands/refresh.ts"],"names":[],"mappings":"AAWA,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE1E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAgEjB"}

package/dist/commands/refresh.js

@@ -0,0 +1,48 @@
+import { writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { createProfileGitignore, createScanReport, scanClaudeProfile, validateProfile, } from "@cprof/core";
+import { readProfileFile } from "../command-utils.js";
+export async function runRefresh(flags, options) {
+    if (flags.length > 0) {
+        options.stderr.write(`unknown refresh flag: ${flags[0]}\n`);
+        return 1;
+    }
+    const profilePath = join(options.cwd, "claude-profile.json");
+    const existing = await readProfileFile(profilePath);
+    if (!existing.ok) {
+        options.stderr.write(`${existing.errors.join("\n")}\n`);
+        return existing.exitCode;
+    }
+    const scan = await scanClaudeProfile({
+        name: existing.profile.name,
+        version: existing.profile.version,
+        description: existing.profile.description,
+        claudeCode: existing.profile.claudeCode,
+        cwd: options.cwd,
+        homeDir: options.homeDir ?? homedir(),
+        outputRoot: options.cwd,
+        mode: existing.profile.profileScope,
+        includeGlobal: existing.profile.profileScope === "project"
+            ? existing.profile.includesGlobal
+            : false,
+    });
+    const refreshed = scan.manifest;
+    const validation = validateProfile(refreshed);
+    if (!validation.valid) {
+        options.stderr.write(`${validation.errors.join("\n")}\n`);
+        return validation.exitCode;
+    }
+    if (!scan.leakCheck.ok) {
+        const leakedPaths = [
+            ...new Set(scan.leakCheck.leaks.map((leak) => leak.path)),
+        ];
+        options.stderr.write(`refusing to write: redaction left a secret in ${leakedPaths.join(", ")}\n`);
+        return 3;
+    }
+    await writeFile(profilePath, `${JSON.stringify(refreshed, null, 2)}\n`, "utf8");
+    await writeFile(join(options.cwd, ".gitignore"), createProfileGitignore(), "utf8");
+    await writeFile(join(options.cwd, "cprof-scan-report.txt"), createScanReport(scan.report), "utf8");
+    options.stdout.write("Refreshed claude-profile.json\n");
+    return 0;
+}

package/dist/commands/validate.d.ts

@@ -0,0 +1,7 @@
+export interface ValidateCommandOptions {
+    readonly cwd: string;
+    readonly stdout: Pick<NodeJS.WriteStream, "write">;
+    readonly stderr: Pick<NodeJS.WriteStream, "write">;
+}
+export declare function runValidate(flags: readonly string[], options: ValidateCommandOptions): Promise<number>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/commands/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/commands/validate.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACpD;AAED,wBAAsB,WAAW,CAC/B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAqBjB"}

package/dist/commands/validate.js

@@ -0,0 +1,22 @@
+import { resolve } from "node:path";
+import { validateProfileFile } from "@cprof/core";
+export async function runValidate(flags, options) {
+    const json = flags.includes("--json");
+    const paths = flags.filter((flag) => flag !== "--json");
+    const filePath = paths[0];
+    if (filePath === undefined || paths.length > 1) {
+        options.stderr.write("usage: cprof validate [--json] <file>\n");
+        return 1;
+    }
+    const result = await validateProfileFile(resolve(options.cwd, filePath));
+    if (json) {
+        options.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+    }
+    else if (result.valid) {
+        options.stdout.write("valid\n");
+    }
+    else {
+        options.stderr.write(`${result.errors.join("\n")}\n`);
+    }
+    return result.exitCode;
+}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+export interface MainOptions {
+    readonly cwd?: string;
+    readonly homeDir?: string;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly stdout?: Pick<NodeJS.WriteStream, "write">;
+    readonly stderr?: Pick<NodeJS.WriteStream, "write">;
+}
+export declare function main(argv?: readonly string[], options?: MainOptions): Promise<number>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAaA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACrD;AAyCD,wBAAsB,IAAI,CACxB,IAAI,GAAE,SAAS,MAAM,EAA0B,EAC/C,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CA8EjB"}

package/dist/index.js

@@ -0,0 +1,110 @@
+#!/usr/bin/env node
+import { runDiff } from "./commands/diff.js";
+import { runInit } from "./commands/init.js";
+import { runInstall } from "./commands/install.js";
+import { runProfiles } from "./commands/profiles.js";
+import { runRefresh } from "./commands/refresh.js";
+import { runValidate } from "./commands/validate.js";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+const USAGE = `cprof — snapshot, scrub, and migrate your Claude Code setup
+
+Usage: cprof <command> [options]
+
+Commands:
+  init [--global | --include-global]   Snapshot the current setup into claude-profile.json
+  refresh                              Rebuild the profile from its recorded source scope
+  install <file> [--dry-run] [--force] [--global | --include-global]
+                                       Apply a trusted profile to this machine (deep merge)
+  validate <file>                      Validate a profile against the schema
+  diff <a.json> <b.json>               Compare two profiles semantically
+  profiles list                        List profiles recorded by local installs
+
+Options:
+  -h, --help                           Show this help
+  -v, --version                        Show the version
+
+Profiles are local-first and secret-redacted on capture, but redaction is
+best-effort — always review a profile before sharing it.
+
+Docs: https://vedant1202.github.io/claude-prof/
+`;
+function readVersion() {
+    try {
+        const pkgPath = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+export async function main(argv = process.argv.slice(2), options = {}) {
+    const stdout = options.stdout ?? process.stdout;
+    const stderr = options.stderr ?? process.stderr;
+    if (argv.includes("--version") || argv.includes("-v")) {
+        stdout.write(`${readVersion()}\n`);
+        return 0;
+    }
+    if (argv.length === 0 ||
+        argv[0] === "help" ||
+        argv.includes("--help") ||
+        argv.includes("-h")) {
+        stdout.write(USAGE);
+        return 0;
+    }
+    const [command, ...flags] = argv;
+    if (command === "init") {
+        return runInit(flags, {
+            cwd: options.cwd ?? process.cwd(),
+            homeDir: options.homeDir,
+            stdout,
+            stderr,
+        });
+    }
+    if (command === "refresh") {
+        return runRefresh(flags, {
+            cwd: options.cwd ?? process.cwd(),
+            homeDir: options.homeDir,
+            stdout,
+            stderr,
+        });
+    }
+    if (command === "install") {
+        return runInstall(flags, {
+            cwd: options.cwd ?? process.cwd(),
+            homeDir: options.homeDir,
+            env: options.env,
+            stdout,
+            stderr,
+        });
+    }
+    if (command === "validate") {
+        return runValidate(flags, {
+            cwd: options.cwd ?? process.cwd(),
+            stdout,
+            stderr,
+        });
+    }
+    if (command === "profiles") {
+        return runProfiles(flags, {
+            cwd: options.cwd ?? process.cwd(),
+            homeDir: options.homeDir,
+            stdout,
+            stderr,
+        });
+    }
+    if (command === "diff") {
+        return runDiff(flags, {
+            cwd: options.cwd ?? process.cwd(),
+            stdout,
+            stderr,
+        });
+    }
+    stderr.write(`unknown command: ${command}\nRun \`cprof --help\` to see available commands.\n`);
+    return 1;
+}
+if (import.meta.url === `file://${process.argv[1]}`) {
+    process.exitCode = await main();
+}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@cprof/cli",
+  "version": "0.0.1-alpha.0",
+  "description": "Local-first CLI to snapshot, scrub, and migrate your Claude Code setup as a redacted, portable profile.",
+  "license": "MIT",
+  "type": "module",
+  "homepage": "https://vedant1202.github.io/claude-prof/",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Vedant1202/claude-prof.git",
+    "directory": "packages/cli"
+  },
+  "bugs": "https://github.com/Vedant1202/claude-prof/issues",
+  "keywords": [
+    "claude",
+    "claude-code",
+    "anthropic",
+    "mcp",
+    "cli",
+    "developer-tools",
+    "local-first",
+    "secret-redaction",
+    "dotfiles",
+    "configuration",
+    "migration",
+    "backup"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "cprof": "./dist/index.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@cprof/schema": "0.0.1-alpha.0",
+    "@cprof/core": "0.0.1-alpha.0"
+  },
+  "devDependencies": {
+    "vitest": "^3.2.4"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run"
+  }
+}