@hasna/configs 0.1.3 → 0.1.4

package/dist/cli/index.js

@@ -17,6 +17,16 @@ var __toESM = (mod, isNodeMode, target) => {
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: (newValue) => all[name] = () => newValue
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
 // node_modules/commander/lib/error.js
@@ -2053,49 +2063,28 @@ var require_commander = __commonJS((exports) => {
   exports.InvalidOptionArgumentError = InvalidArgumentError;
 });
 
-// node_modules/commander/esm.mjs
-var import__ = __toESM(require_commander(), 1);
-var {
-  program,
-  createCommand,
-  createArgument,
-  createOption,
-  CommanderError,
-  InvalidArgumentError,
-  InvalidOptionArgumentError,
-  Command,
-  Argument,
-  Option,
-  Help
-} = import__.default;
-
-// src/cli/index.tsx
-import chalk from "chalk";
-import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join5, resolve as resolve5 } from "path";
-
 // src/types/index.ts
-class ConfigNotFoundError extends Error {
-  constructor(id) {
-    super(`Config not found: ${id}`);
-    this.name = "ConfigNotFoundError";
-  }
-}
-
-class ProfileNotFoundError extends Error {
-  constructor(id) {
-    super(`Profile not found: ${id}`);
-    this.name = "ProfileNotFoundError";
-  }
-}
-
-class ConfigApplyError extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "ConfigApplyError";
-  }
-}
+var ConfigNotFoundError, ProfileNotFoundError, ConfigApplyError;
+var init_types = __esm(() => {
+  ConfigNotFoundError = class ConfigNotFoundError extends Error {
+    constructor(id) {
+      super(`Config not found: ${id}`);
+      this.name = "ConfigNotFoundError";
+    }
+  };
+  ProfileNotFoundError = class ProfileNotFoundError extends Error {
+    constructor(id) {
+      super(`Profile not found: ${id}`);
+      this.name = "ProfileNotFoundError";
+    }
+  };
+  ConfigApplyError = class ConfigApplyError extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "ConfigApplyError";
+    }
+  };
+});
 
 // src/db/database.ts
 import { Database } from "bun:sqlite";
@@ -2126,8 +2115,35 @@ function now() {
 function slugify(name) {
   return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
 }
-var MIGRATIONS = [
-  `
+function getDatabase(path) {
+  if (_db)
+    return _db;
+  const dbPath = path || getDbPath();
+  ensureDir(dbPath);
+  const db = new Database(dbPath);
+  db.run("PRAGMA journal_mode = WAL");
+  db.run("PRAGMA foreign_keys = ON");
+  applyMigrations(db);
+  _db = db;
+  return db;
+}
+function applyMigrations(db) {
+  let currentVersion = 0;
+  try {
+    const row = db.query("SELECT version FROM schema_version ORDER BY version DESC LIMIT 1").get();
+    currentVersion = row?.version ?? 0;
+  } catch {
+    currentVersion = 0;
+  }
+  for (let i = currentVersion;i < MIGRATIONS.length; i++) {
+    db.run(MIGRATIONS[i]);
+    db.run(`INSERT OR REPLACE INTO schema_version (version) VALUES (${i + 1})`);
+  }
+}
+var MIGRATIONS, _db = null;
+var init_database = __esm(() => {
+  MIGRATIONS = [
+    `
   CREATE TABLE IF NOT EXISTS configs (
     id TEXT PRIMARY KEY,
     name TEXT NOT NULL,
@@ -2185,33 +2201,8 @@ var MIGRATIONS = [
 
   INSERT OR IGNORE INTO schema_version (version) VALUES (1);
   `
-];
-var _db = null;
-function getDatabase(path) {
-  if (_db)
-    return _db;
-  const dbPath = path || getDbPath();
-  ensureDir(dbPath);
-  const db = new Database(dbPath);
-  db.run("PRAGMA journal_mode = WAL");
-  db.run("PRAGMA foreign_keys = ON");
-  applyMigrations(db);
-  _db = db;
-  return db;
-}
-function applyMigrations(db) {
-  let currentVersion = 0;
-  try {
-    const row = db.query("SELECT version FROM schema_version ORDER BY version DESC LIMIT 1").get();
-    currentVersion = row?.version ?? 0;
-  } catch {
-    currentVersion = 0;
-  }
-  for (let i = currentVersion;i < MIGRATIONS.length; i++) {
-    db.run(MIGRATIONS[i]);
-    db.run(`INSERT OR REPLACE INTO schema_version (version) VALUES (${i + 1})`);
-  }
-}
+  ];
+});
 
 // src/db/configs.ts
 function rowToConfig(row) {
@@ -2374,67 +2365,10 @@ function getConfigStats(db) {
   }
   return stats;
 }
-
-// src/db/profiles.ts
-function rowToProfile(row) {
-  return { ...row };
-}
-function uniqueProfileSlug(name, db, excludeId) {
-  const base = slugify(name);
-  let slug = base;
-  let i = 1;
-  while (true) {
-    const existing = db.query("SELECT id FROM profiles WHERE slug = ?").get(slug);
-    if (!existing || existing.id === excludeId)
-      return slug;
-    slug = `${base}-${i++}`;
-  }
-}
-function createProfile(input, db) {
-  const d = db || getDatabase();
-  const id = uuid();
-  const ts = now();
-  const slug = uniqueProfileSlug(input.name, d);
-  d.run("INSERT INTO profiles (id, name, slug, description, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)", [id, input.name, slug, input.description ?? null, ts, ts]);
-  return getProfile(id, d);
-}
-function getProfile(idOrSlug, db) {
-  const d = db || getDatabase();
-  const row = d.query("SELECT * FROM profiles WHERE id = ? OR slug = ?").get(idOrSlug, idOrSlug);
-  if (!row)
-    throw new ProfileNotFoundError(idOrSlug);
-  return rowToProfile(row);
-}
-function listProfiles(db) {
-  const d = db || getDatabase();
-  return d.query("SELECT * FROM profiles ORDER BY name").all().map(rowToProfile);
-}
-function deleteProfile(idOrSlug, db) {
-  const d = db || getDatabase();
-  const existing = getProfile(idOrSlug, d);
-  d.run("DELETE FROM profiles WHERE id = ?", [existing.id]);
-}
-function addConfigToProfile(profileIdOrSlug, configId, db) {
-  const d = db || getDatabase();
-  const profile = getProfile(profileIdOrSlug, d);
-  const maxRow = d.query("SELECT MAX(sort_order) as max_order FROM profile_configs WHERE profile_id = ?").get(profile.id);
-  const order = (maxRow?.max_order ?? -1) + 1;
-  d.run("INSERT OR IGNORE INTO profile_configs (profile_id, config_id, sort_order) VALUES (?, ?, ?)", [profile.id, configId, order]);
-}
-function removeConfigFromProfile(profileIdOrSlug, configId, db) {
-  const d = db || getDatabase();
-  const profile = getProfile(profileIdOrSlug, d);
-  d.run("DELETE FROM profile_configs WHERE profile_id = ? AND config_id = ?", [profile.id, configId]);
-}
-function getProfileConfigs(profileIdOrSlug, db) {
-  const d = db || getDatabase();
-  const profile = getProfile(profileIdOrSlug, d);
-  const rows = d.query("SELECT config_id FROM profile_configs WHERE profile_id = ? ORDER BY sort_order").all(profile.id);
-  if (rows.length === 0)
-    return [];
-  const ids = rows.map((r) => r.config_id);
-  return listConfigs(undefined, d).filter((c) => ids.includes(c.id));
-}
+var init_configs = __esm(() => {
+  init_types();
+  init_database();
+});
 
 // src/db/snapshots.ts
 function createSnapshot(configId, content, version, db) {
@@ -2452,6 +2386,9 @@ function getSnapshot(id, db) {
   const d = db || getDatabase();
   return d.query("SELECT * FROM config_snapshots WHERE id = ?").get(id);
 }
+var init_snapshots = __esm(() => {
+  init_database();
+});
 
 // src/lib/apply.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, writeFileSync } from "fs";
@@ -2501,25 +2438,14 @@ async function applyConfigs(configs, opts = {}) {
   }
   return results;
 }
-
-// src/lib/sync.ts
-import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync2 } from "fs";
-import { extname, join as join2 } from "path";
-import { homedir as homedir2 } from "os";
+var init_apply = __esm(() => {
+  init_types();
+  init_database();
+  init_configs();
+  init_snapshots();
+});
 
 // src/lib/redact.ts
-var SECRET_KEY_PATTERN = /^(.*_?API_?KEY|.*_?TOKEN|.*_?SECRET|.*_?PASSWORD|.*_?PASSWD|.*_?CREDENTIAL|.*_?AUTH(?:_TOKEN|_KEY|ORIZATION)?|.*_?PRIVATE_?KEY|.*_?ACCESS_?KEY|.*_?CLIENT_?SECRET|.*_?SIGNING_?KEY|.*_?ENCRYPTION_?KEY|.*_AUTH_TOKEN)$/i;
-var VALUE_PATTERNS = [
-  { re: /npm_[A-Za-z0-9]{36,}/, reason: "npm token" },
-  { re: /gh[pousr]_[A-Za-z0-9_]{36,}/, reason: "GitHub token" },
-  { re: /sk-ant-[A-Za-z0-9\-_]{40,}/, reason: "Anthropic API key" },
-  { re: /sk-[A-Za-z0-9]{48,}/, reason: "OpenAI API key" },
-  { re: /xoxb-[0-9]+-[A-Za-z0-9\-]+/, reason: "Slack bot token" },
-  { re: /AIza[0-9A-Za-z\-_]{35}/, reason: "Google API key" },
-  { re: /ey[A-Za-z0-9_\-]{20,}\.[A-Za-z0-9_\-]{20,}\./, reason: "JWT token" },
-  { re: /AKIA[0-9A-Z]{16}/, reason: "AWS access key" }
-];
-var MIN_SECRET_VALUE_LEN = 8;
 function redactShell(content) {
   const redacted = [];
   const lines = content.split(`
@@ -2683,32 +2609,127 @@ function scanSecrets(content, format) {
   const r = redactContent(content, format);
   return r.redacted;
 }
+var SECRET_KEY_PATTERN, VALUE_PATTERNS, MIN_SECRET_VALUE_LEN = 8;
+var init_redact = __esm(() => {
+  SECRET_KEY_PATTERN = /^(.*_?API_?KEY|.*_?TOKEN|.*_?SECRET|.*_?PASSWORD|.*_?PASSWD|.*_?CREDENTIAL|.*_?AUTH(?:_TOKEN|_KEY|ORIZATION)?|.*_?PRIVATE_?KEY|.*_?ACCESS_?KEY|.*_?CLIENT_?SECRET|.*_?SIGNING_?KEY|.*_?ENCRYPTION_?KEY|.*_AUTH_TOKEN)$/i;
+  VALUE_PATTERNS = [
+    { re: /npm_[A-Za-z0-9]{36,}/, reason: "npm token" },
+    { re: /gh[pousr]_[A-Za-z0-9_]{36,}/, reason: "GitHub token" },
+    { re: /sk-ant-[A-Za-z0-9\-_]{40,}/, reason: "Anthropic API key" },
+    { re: /sk-[A-Za-z0-9]{48,}/, reason: "OpenAI API key" },
+    { re: /xoxb-[0-9]+-[A-Za-z0-9\-]+/, reason: "Slack bot token" },
+    { re: /AIza[0-9A-Za-z\-_]{35}/, reason: "Google API key" },
+    { re: /ey[A-Za-z0-9_\-]{20,}\.[A-Za-z0-9_\-]{20,}\./, reason: "JWT token" },
+    { re: /AKIA[0-9A-Z]{16}/, reason: "AWS access key" }
+  ];
+});
+
+// src/lib/sync-dir.ts
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync2, statSync } from "fs";
+import { join as join2, relative } from "path";
+import { homedir as homedir2 } from "os";
+function shouldSkip(p) {
+  return SKIP.some((s) => p.includes(s));
+}
+async function syncFromDir(dir, opts = {}) {
+  const d = opts.db || getDatabase();
+  const absDir = expandPath(dir);
+  if (!existsSync3(absDir))
+    return { added: 0, updated: 0, unchanged: 0, skipped: [`Not found: ${absDir}`] };
+  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync(absDir).map((f) => join2(absDir, f)).filter((f) => statSync(f).isFile());
+  const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
+  const home = homedir2();
+  const allConfigs = listConfigs(undefined, d);
+  for (const file of files) {
+    if (shouldSkip(file)) {
+      result.skipped.push(file);
+      continue;
+    }
+    try {
+      const content = readFileSync2(file, "utf-8");
+      if (content.length > 500000) {
+        result.skipped.push(file + " (too large)");
+        continue;
+      }
+      const targetPath = file.replace(home, "~");
+      const existing = allConfigs.find((c) => c.target_path === targetPath);
+      if (!existing) {
+        if (!opts.dryRun)
+          createConfig({ name: relative(absDir, file), category: detectCategory(file), agent: detectAgent(file), target_path: targetPath, format: detectFormat(file), content }, d);
+        result.added++;
+      } else if (existing.content !== content) {
+        if (!opts.dryRun)
+          updateConfig(existing.id, { content }, d);
+        result.updated++;
+      } else {
+        result.unchanged++;
+      }
+    } catch {
+      result.skipped.push(file);
+    }
+  }
+  return result;
+}
+async function syncToDir(dir, opts = {}) {
+  const d = opts.db || getDatabase();
+  const home = homedir2();
+  const absDir = expandPath(dir);
+  const normalized = dir.startsWith("~/") ? dir : absDir.replace(home, "~");
+  const configs = listConfigs(undefined, d).filter((c) => c.target_path && (c.target_path.startsWith(normalized) || c.target_path.startsWith(absDir)));
+  const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
+  for (const config of configs) {
+    if (config.kind === "reference")
+      continue;
+    try {
+      const r = await applyConfig(config, { dryRun: opts.dryRun, db: d });
+      r.changed ? result.updated++ : result.unchanged++;
+    } catch {
+      result.skipped.push(config.target_path || config.id);
+    }
+  }
+  return result;
+}
+function walkDir(dir, files = []) {
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    const full = join2(dir, entry.name);
+    if (shouldSkip(full))
+      continue;
+    if (entry.isDirectory())
+      walkDir(full, files);
+    else if (entry.isFile())
+      files.push(full);
+  }
+  return files;
+}
+var SKIP;
+var init_sync_dir = __esm(() => {
+  init_database();
+  init_configs();
+  init_apply();
+  init_sync();
+  SKIP = [".db", ".db-shm", ".db-wal", ".log", ".lock", ".DS_Store", "node_modules", ".git"];
+});
 
 // src/lib/sync.ts
-var KNOWN_CONFIGS = [
-  { path: "~/.claude/CLAUDE.md", name: "claude-claude-md", category: "rules", agent: "claude", format: "markdown" },
-  { path: "~/.claude/settings.json", name: "claude-settings", category: "agent", agent: "claude", format: "json" },
-  { path: "~/.claude/settings.local.json", name: "claude-settings-local", category: "agent", agent: "claude", format: "json" },
-  { path: "~/.claude/keybindings.json", name: "claude-keybindings", category: "agent", agent: "claude", format: "json" },
-  { path: "~/.claude/rules", name: "claude-rules", category: "rules", agent: "claude", rulesDir: "~/.claude/rules" },
-  { path: "~/.codex/config.toml", name: "codex-config", category: "agent", agent: "codex", format: "toml" },
-  { path: "~/.codex/AGENTS.md", name: "codex-agents-md", category: "rules", agent: "codex", format: "markdown" },
-  { path: "~/.gemini/settings.json", name: "gemini-settings", category: "agent", agent: "gemini", format: "json" },
-  { path: "~/.gemini/GEMINI.md", name: "gemini-gemini-md", category: "rules", agent: "gemini", format: "markdown" },
-  { path: "~/.claude.json", name: "claude-json", category: "mcp", agent: "claude", format: "json", description: "Claude Code global config (includes MCP server entries)" },
-  { path: "~/.zshrc", name: "zshrc", category: "shell", agent: "zsh" },
-  { path: "~/.zprofile", name: "zprofile", category: "shell", agent: "zsh" },
-  { path: "~/.bashrc", name: "bashrc", category: "shell", agent: "zsh" },
-  { path: "~/.bash_profile", name: "bash-profile", category: "shell", agent: "zsh" },
-  { path: "~/.gitconfig", name: "gitconfig", category: "git", agent: "git", format: "ini" },
-  { path: "~/.gitignore_global", name: "gitignore-global", category: "git", agent: "git" },
-  { path: "~/.npmrc", name: "npmrc", category: "tools", agent: "npm", format: "ini" },
-  { path: "~/.bunfig.toml", name: "bunfig", category: "tools", agent: "global", format: "toml" }
-];
+var exports_sync = {};
+__export(exports_sync, {
+  syncToDisk: () => syncToDisk,
+  syncToDir: () => syncToDir,
+  syncKnown: () => syncKnown,
+  syncFromDir: () => syncFromDir,
+  diffConfig: () => diffConfig,
+  detectFormat: () => detectFormat,
+  detectCategory: () => detectCategory,
+  detectAgent: () => detectAgent,
+  KNOWN_CONFIGS: () => KNOWN_CONFIGS
+});
+import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
+import { extname, join as join3 } from "path";
+import { homedir as homedir3 } from "os";
 async function syncKnown(opts = {}) {
   const d = opts.db || getDatabase();
   const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
-  const home = homedir2();
+  const home = homedir3();
   let targets = KNOWN_CONFIGS;
   if (opts.agent)
     targets = targets.filter((k) => k.agent === opts.agent);
@@ -2718,15 +2739,15 @@ async function syncKnown(opts = {}) {
   for (const known of targets) {
     if (known.rulesDir) {
       const absDir = expandPath(known.rulesDir);
-      if (!existsSync3(absDir)) {
+      if (!existsSync4(absDir)) {
         result.skipped.push(known.rulesDir);
         continue;
       }
-      const mdFiles = readdirSync(absDir).filter((f) => f.endsWith(".md"));
+      const mdFiles = readdirSync2(absDir).filter((f) => f.endsWith(".md"));
       for (const f of mdFiles) {
-        const abs2 = join2(absDir, f);
+        const abs2 = join3(absDir, f);
         const targetPath = abs2.replace(home, "~");
-        const raw = readFileSync2(abs2, "utf-8");
+        const raw = readFileSync3(abs2, "utf-8");
         const { content, isTemplate } = redactContent(raw, "markdown");
         const name = `claude-rules-${f}`;
         const slug = name.toLowerCase().replace(/[^a-z0-9]+/g, "-");
@@ -2746,12 +2767,12 @@ async function syncKnown(opts = {}) {
       continue;
     }
     const abs = expandPath(known.path);
-    if (!existsSync3(abs)) {
+    if (!existsSync4(abs)) {
       result.skipped.push(known.path);
       continue;
     }
     try {
-      const rawContent = readFileSync2(abs, "utf-8");
+      const rawContent = readFileSync3(abs, "utf-8");
       if (rawContent.length > 500000) {
         result.skipped.push(known.path + " (too large)");
         continue;
@@ -2808,9 +2829,9 @@ function diffConfig(config) {
   if (!config.target_path)
     return "(reference \u2014 no target path)";
   const path = expandPath(config.target_path);
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return `(file not found on disk: ${path})`;
-  const diskContent = readFileSync2(path, "utf-8");
+  const diskContent = readFileSync3(path, "utf-8");
   if (diskContent === config.content)
     return "(no diff \u2014 identical)";
   const stored = config.content.split(`
@@ -2836,7 +2857,7 @@ function diffConfig(config) {
 `);
 }
 function detectCategory(filePath) {
-  const p = filePath.toLowerCase().replace(homedir2(), "~");
+  const p = filePath.toLowerCase().replace(homedir3(), "~");
   if (p.includes("/.claude/rules/") || p.endsWith("claude.md") || p.endsWith("agents.md") || p.endsWith("gemini.md"))
     return "rules";
   if (p.includes("/.claude/") || p.includes("/.codex/") || p.includes("/.gemini/") || p.includes("/.cursor/"))
@@ -2854,7 +2875,7 @@ function detectCategory(filePath) {
   return "tools";
 }
 function detectAgent(filePath) {
-  const p = filePath.toLowerCase().replace(homedir2(), "~");
+  const p = filePath.toLowerCase().replace(homedir3(), "~");
   if (p.includes("/.claude/") || p.endsWith("claude.md"))
     return "claude";
   if (p.includes("/.codex/") || p.endsWith("agents.md"))
@@ -2883,17 +2904,140 @@ function detectFormat(filePath) {
     return "ini";
   return "text";
 }
+var KNOWN_CONFIGS;
+var init_sync = __esm(() => {
+  init_database();
+  init_configs();
+  init_apply();
+  init_redact();
+  init_sync_dir();
+  KNOWN_CONFIGS = [
+    { path: "~/.claude/CLAUDE.md", name: "claude-claude-md", category: "rules", agent: "claude", format: "markdown" },
+    { path: "~/.claude/settings.json", name: "claude-settings", category: "agent", agent: "claude", format: "json" },
+    { path: "~/.claude/settings.local.json", name: "claude-settings-local", category: "agent", agent: "claude", format: "json" },
+    { path: "~/.claude/keybindings.json", name: "claude-keybindings", category: "agent", agent: "claude", format: "json" },
+    { path: "~/.claude/rules", name: "claude-rules", category: "rules", agent: "claude", rulesDir: "~/.claude/rules" },
+    { path: "~/.codex/config.toml", name: "codex-config", category: "agent", agent: "codex", format: "toml" },
+    { path: "~/.codex/AGENTS.md", name: "codex-agents-md", category: "rules", agent: "codex", format: "markdown" },
+    { path: "~/.gemini/settings.json", name: "gemini-settings", category: "agent", agent: "gemini", format: "json" },
+    { path: "~/.gemini/GEMINI.md", name: "gemini-gemini-md", category: "rules", agent: "gemini", format: "markdown" },
+    { path: "~/.claude.json", name: "claude-json", category: "mcp", agent: "claude", format: "json", description: "Claude Code global config (includes MCP server entries)" },
+    { path: "~/.zshrc", name: "zshrc", category: "shell", agent: "zsh" },
+    { path: "~/.zprofile", name: "zprofile", category: "shell", agent: "zsh" },
+    { path: "~/.bashrc", name: "bashrc", category: "shell", agent: "zsh" },
+    { path: "~/.bash_profile", name: "bash-profile", category: "shell", agent: "zsh" },
+    { path: "~/.gitconfig", name: "gitconfig", category: "git", agent: "git", format: "ini" },
+    { path: "~/.gitignore_global", name: "gitignore-global", category: "git", agent: "git" },
+    { path: "~/.npmrc", name: "npmrc", category: "tools", agent: "npm", format: "ini" },
+    { path: "~/.bunfig.toml", name: "bunfig", category: "tools", agent: "global", format: "toml" }
+  ];
+});
+
+// node_modules/commander/esm.mjs
+var import__ = __toESM(require_commander(), 1);
+var {
+  program,
+  createCommand,
+  createArgument,
+  createOption,
+  CommanderError,
+  InvalidArgumentError,
+  InvalidOptionArgumentError,
+  Command,
+  Argument,
+  Option,
+  Help
+} = import__.default;
+
+// src/cli/index.tsx
+init_configs();
+import chalk from "chalk";
+import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join6, resolve as resolve5 } from "path";
+
+// src/db/profiles.ts
+init_types();
+init_database();
+init_configs();
+function rowToProfile(row) {
+  return { ...row };
+}
+function uniqueProfileSlug(name, db, excludeId) {
+  const base = slugify(name);
+  let slug = base;
+  let i = 1;
+  while (true) {
+    const existing = db.query("SELECT id FROM profiles WHERE slug = ?").get(slug);
+    if (!existing || existing.id === excludeId)
+      return slug;
+    slug = `${base}-${i++}`;
+  }
+}
+function createProfile(input, db) {
+  const d = db || getDatabase();
+  const id = uuid();
+  const ts = now();
+  const slug = uniqueProfileSlug(input.name, d);
+  d.run("INSERT INTO profiles (id, name, slug, description, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)", [id, input.name, slug, input.description ?? null, ts, ts]);
+  return getProfile(id, d);
+}
+function getProfile(idOrSlug, db) {
+  const d = db || getDatabase();
+  const row = d.query("SELECT * FROM profiles WHERE id = ? OR slug = ?").get(idOrSlug, idOrSlug);
+  if (!row)
+    throw new ProfileNotFoundError(idOrSlug);
+  return rowToProfile(row);
+}
+function listProfiles(db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM profiles ORDER BY name").all().map(rowToProfile);
+}
+function deleteProfile(idOrSlug, db) {
+  const d = db || getDatabase();
+  const existing = getProfile(idOrSlug, d);
+  d.run("DELETE FROM profiles WHERE id = ?", [existing.id]);
+}
+function addConfigToProfile(profileIdOrSlug, configId, db) {
+  const d = db || getDatabase();
+  const profile = getProfile(profileIdOrSlug, d);
+  const maxRow = d.query("SELECT MAX(sort_order) as max_order FROM profile_configs WHERE profile_id = ?").get(profile.id);
+  const order = (maxRow?.max_order ?? -1) + 1;
+  d.run("INSERT OR IGNORE INTO profile_configs (profile_id, config_id, sort_order) VALUES (?, ?, ?)", [profile.id, configId, order]);
+}
+function removeConfigFromProfile(profileIdOrSlug, configId, db) {
+  const d = db || getDatabase();
+  const profile = getProfile(profileIdOrSlug, d);
+  d.run("DELETE FROM profile_configs WHERE profile_id = ? AND config_id = ?", [profile.id, configId]);
+}
+function getProfileConfigs(profileIdOrSlug, db) {
+  const d = db || getDatabase();
+  const profile = getProfile(profileIdOrSlug, d);
+  const rows = d.query("SELECT config_id FROM profile_configs WHERE profile_id = ? ORDER BY sort_order").all(profile.id);
+  if (rows.length === 0)
+    return [];
+  const ids = rows.map((r) => r.config_id);
+  return listConfigs(undefined, d).filter((c) => ids.includes(c.id));
+}
+
+// src/cli/index.tsx
+init_snapshots();
+init_apply();
+init_sync();
+init_redact();
 
 // src/lib/export.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, rmSync, writeFileSync as writeFileSync2 } from "fs";
-import { join as join3, resolve as resolve3 } from "path";
+init_database();
+init_configs();
+import { existsSync as existsSync5, mkdirSync as mkdirSync3, rmSync, writeFileSync as writeFileSync2 } from "fs";
+import { join as join4, resolve as resolve3 } from "path";
 import { tmpdir } from "os";
 async function exportConfigs(outputPath, opts = {}) {
   const d = opts.db || getDatabase();
   const configs = listConfigs(opts.filter, d);
   const absOutput = resolve3(outputPath);
-  const tmpDir = join3(tmpdir(), `configs-export-${Date.now()}`);
-  const contentsDir = join3(tmpDir, "contents");
+  const tmpDir = join4(tmpdir(), `configs-export-${Date.now()}`);
+  const contentsDir = join4(tmpDir, "contents");
   try {
     mkdirSync3(contentsDir, { recursive: true });
     const manifest = {
@@ -2901,10 +3045,10 @@ async function exportConfigs(outputPath, opts = {}) {
       exported_at: now(),
       configs: configs.map(({ content: _content, ...meta }) => meta)
     };
-    writeFileSync2(join3(tmpDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf-8");
+    writeFileSync2(join4(tmpDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf-8");
     for (const config of configs) {
       const fileName = `${config.slug}.${config.format === "text" ? "txt" : config.format}`;
-      writeFileSync2(join3(contentsDir, fileName), config.content, "utf-8");
+      writeFileSync2(join4(contentsDir, fileName), config.content, "utf-8");
     }
     const proc = Bun.spawn(["tar", "czf", absOutput, "-C", tmpDir, "."], {
       stdout: "pipe",
@@ -2917,21 +3061,23 @@ async function exportConfigs(outputPath, opts = {}) {
     }
     return { path: absOutput, count: configs.length };
   } finally {
-    if (existsSync4(tmpDir)) {
+    if (existsSync5(tmpDir)) {
       rmSync(tmpDir, { recursive: true, force: true });
     }
   }
 }
 
 // src/lib/import.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync3, rmSync as rmSync2 } from "fs";
-import { join as join4, resolve as resolve4 } from "path";
+init_database();
+init_configs();
+import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, rmSync as rmSync2 } from "fs";
+import { join as join5, resolve as resolve4 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 async function importConfigs(bundlePath, opts = {}) {
   const d = opts.db || getDatabase();
   const conflict = opts.conflict ?? "skip";
   const absPath = resolve4(bundlePath);
-  const tmpDir = join4(tmpdir2(), `configs-import-${Date.now()}`);
+  const tmpDir = join5(tmpdir2(), `configs-import-${Date.now()}`);
   const result = { created: 0, updated: 0, skipped: 0, errors: [] };
   try {
     mkdirSync4(tmpDir, { recursive: true });
@@ -2944,15 +3090,15 @@ async function importConfigs(bundlePath, opts = {}) {
       const stderr = await new Response(proc.stderr).text();
       throw new Error(`tar extraction failed: ${stderr}`);
     }
-    const manifestPath = join4(tmpDir, "manifest.json");
-    if (!existsSync5(manifestPath))
+    const manifestPath = join5(tmpDir, "manifest.json");
+    if (!existsSync6(manifestPath))
       throw new Error("Invalid bundle: missing manifest.json");
-    const manifest = JSON.parse(readFileSync3(manifestPath, "utf-8"));
+    const manifest = JSON.parse(readFileSync4(manifestPath, "utf-8"));
     for (const meta of manifest.configs) {
       try {
         const ext = meta.format === "text" ? "txt" : meta.format;
-        const contentFile = join4(tmpDir, "contents", `${meta.slug}.${ext}`);
-        const content = existsSync5(contentFile) ? readFileSync3(contentFile, "utf-8") : "";
+        const contentFile = join5(tmpDir, "contents", `${meta.slug}.${ext}`);
+        const content = existsSync6(contentFile) ? readFileSync4(contentFile, "utf-8") : "";
         let existing = null;
         try {
           existing = getConfig(meta.slug, d);
@@ -2985,13 +3131,14 @@ async function importConfigs(bundlePath, opts = {}) {
     }
     return result;
   } finally {
-    if (existsSync5(tmpDir)) {
+    if (existsSync6(tmpDir)) {
       rmSync2(tmpDir, { recursive: true, force: true });
     }
   }
 }
 
 // src/lib/template.ts
+init_types();
 var VAR_PATTERN = /\{\{([A-Z0-9_]+)(?::([^}]*))?\}\}/g;
 function extractTemplateVars(content) {
   const vars = new Map;
@@ -3070,14 +3217,14 @@ program.command("show <id>").description("Show a config's content and metadata")
 });
 program.command("add <path>").description("Ingest a file into the config DB").option("-n, --name <name>", "config name (defaults to filename)").option("-c, --category <cat>", "category override").option("-a, --agent <agent>", "agent override").option("-k, --kind <kind>", "kind: file|reference", "file").option("--template", "mark as template (has {{VAR}} placeholders)").action(async (filePath, opts) => {
   const abs = resolve5(filePath);
-  if (!existsSync6(abs)) {
+  if (!existsSync7(abs)) {
     console.error(chalk.red(`File not found: ${abs}`));
     process.exit(1);
   }
-  const rawContent = readFileSync4(abs, "utf-8");
+  const rawContent = readFileSync5(abs, "utf-8");
   const fmt = detectFormat(abs);
   const { content, redacted, isTemplate } = redactContent(rawContent, fmt);
-  const targetPath = abs.startsWith(homedir3()) ? abs.replace(homedir3(), "~") : abs;
+  const targetPath = abs.startsWith(homedir4()) ? abs.replace(homedir4(), "~") : abs;
   const name = opts.name || filePath.split("/").pop();
   const config = createConfig({
     name,
@@ -3163,7 +3310,7 @@ program.command("import <file>").description("Import configs from a tar.gz bundl
   }
 });
 program.command("whoami").description("Show setup summary").action(async () => {
-  const dbPath = process.env["CONFIGS_DB_PATH"] || join5(homedir3(), ".configs", "configs.db");
+  const dbPath = process.env["CONFIGS_DB_PATH"] || join6(homedir4(), ".configs", "configs.db");
   const stats = getConfigStats();
   console.log(chalk.bold("@hasna/configs") + chalk.dim(" v" + pkg.version));
   console.log(chalk.cyan("DB:") + " " + dbPath);
@@ -3321,25 +3468,51 @@ templateCmd.command("vars <id>").description("Show template variables").action(a
     process.exit(1);
   }
 });
-program.command("scan [id]").description("Scan configs for secrets. Omit id to scan all.").option("--fix", "redact found secrets in-place").action(async (id, opts) => {
-  const configs = id ? [getConfig(id)] : listConfigs({ kind: "file" });
+program.command("scan [id]").description("Scan configs for secrets. Defaults to known configs only.").option("--fix", "redact found secrets in-place").option("--all", "scan every config in the DB (slow on large DBs)").option("-c, --category <cat>", "scan only a specific category").action(async (id, opts) => {
+  let configs;
+  if (id) {
+    configs = [getConfig(id)];
+  } else if (opts.all) {
+    configs = listConfigs(opts.category ? { kind: "file", category: opts.category } : { kind: "file" });
+  } else {
+    const { KNOWN_CONFIGS: KNOWN_CONFIGS2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
+    const slugs = [
+      ...KNOWN_CONFIGS2.filter((k) => !k.rulesDir).map((k) => k.name)
+    ];
+    const fetched = [];
+    for (const slug of slugs) {
+      try {
+        fetched.push(getConfig(slug));
+      } catch {}
+    }
+    const rules = listConfigs({ category: "rules", agent: "claude" });
+    for (const r of rules)
+      if (!fetched.find((c) => c.id === r.id))
+        fetched.push(r);
+    configs = fetched;
+  }
   let total = 0;
-  for (const c of configs) {
-    const secrets = scanSecrets(c.content, c.format);
-    if (secrets.length === 0)
-      continue;
-    total += secrets.length;
-    console.log(chalk.yellow(`\u26A0 ${c.slug}`) + chalk.dim(` \u2014 ${secrets.length} secret(s):`));
-    for (const s of secrets)
-      console.log(`  line ${s.line}: ${chalk.red(s.varName)} \u2014 ${s.reason}`);
-    if (opts.fix) {
-      const { content, isTemplate } = redactContent(c.content, c.format);
-      updateConfig(c.id, { content, is_template: isTemplate });
-      console.log(chalk.green("  \u2713 Redacted and updated."));
+  const BATCH = 200;
+  for (let i = 0;i < configs.length; i += BATCH) {
+    const batch = configs.slice(i, i + BATCH);
+    for (const c of batch) {
+      const fmt = c.format;
+      const secrets = scanSecrets(c.content, fmt);
+      if (secrets.length === 0)
+        continue;
+      total += secrets.length;
+      console.log(chalk.yellow(`\u26A0 ${c.slug}`) + chalk.dim(` \u2014 ${secrets.length} secret(s):`));
+      for (const s of secrets)
+        console.log(`  line ${s.line}: ${chalk.red(s.varName)} \u2014 ${s.reason}`);
+      if (opts.fix) {
+        const { content, isTemplate } = redactContent(c.content, fmt);
+        updateConfig(c.id, { content, is_template: isTemplate });
+        console.log(chalk.green("  \u2713 Redacted."));
+      }
     }
   }
   if (total === 0) {
-    console.log(chalk.green("\u2713") + " No secrets detected.");
+    console.log(chalk.green("\u2713") + ` No secrets detected${opts.all ? "" : " (known configs). Use --all to scan entire DB"}.`);
   } else if (!opts.fix) {
     console.log(chalk.yellow(`
 Run with --fix to redact in-place.`));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/configs",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "AI coding agent configuration manager — store, version, apply, and share all your AI coding configs. CLI + MCP + REST API + Dashboard.",
   "type": "module",
   "main": "dist/index.js",