@hasna/configs 0.2.9 → 0.2.11

package/dist/cli/index.js

@@ -2364,6 +2364,11 @@ function updateConfig(idOrSlug, input, db) {
   d.run(`UPDATE configs SET ${updates.join(", ")} WHERE id = ?`, params);
   return getConfigById(existing.id, d);
 }
+function deleteConfig(idOrSlug, db) {
+  const d = db || getDatabase();
+  const existing = getConfig(idOrSlug, d);
+  d.run("DELETE FROM configs WHERE id = ?", [existing.id]);
+}
 function getConfigStats(db) {
   const d = db || getDatabase();
   const rows = d.query("SELECT category, COUNT(*) as count FROM configs GROUP BY category").all();
@@ -4083,15 +4088,59 @@ program.command("watch").description("Watch known config files for changes and a
         mtimes.set(abs, newMtime);
       }
     }
+    const { readdirSync: rd } = await import("fs");
+    for (const k of KNOWN_CONFIGS) {
+      if (k.rulesDir) {
+        const absDir = expandPath2(k.rulesDir);
+        if (!existsSync7(absDir))
+          continue;
+        for (const f of rd(absDir).filter((f2) => f2.endsWith(".md"))) {
+          const abs = join6(absDir, f);
+          if (!mtimes.has(abs)) {
+            mtimes.set(abs, st(abs).mtimeMs);
+            changed++;
+          }
+        }
+      } else {
+        const abs = expandPath2(k.path);
+        if (existsSync7(abs) && !mtimes.has(abs)) {
+          mtimes.set(abs, st(abs).mtimeMs);
+          changed++;
+        }
+      }
+    }
     if (changed > 0) {
       const result = await syncKnown({});
       const ts = new Date().toLocaleTimeString();
-      console.log(`${chalk.dim(ts)} ${chalk.green("\u2713")} ${changed} file(s) changed \u2192 synced +${result.added} updated:${result.updated}`);
+      console.log(`${chalk.dim(ts)} ${chalk.green("\u2713")} ${changed} file(s) changed/new \u2192 synced +${result.added} updated:${result.updated}`);
     }
   };
   setInterval(tick, interval);
   await new Promise(() => {});
 });
+program.command("clean").description("Remove configs from DB whose target files no longer exist on disk").option("--dry-run", "show what would be removed").action(async (opts) => {
+  const configs = listConfigs({ kind: "file" });
+  let removed = 0;
+  for (const c of configs) {
+    if (!c.target_path)
+      continue;
+    const abs = expandPath(c.target_path);
+    if (!existsSync7(abs)) {
+      if (opts.dryRun) {
+        console.log(chalk.yellow("  would remove:") + ` ${c.slug} ${chalk.dim(`(${c.target_path})`)}`);
+      } else {
+        deleteConfig(c.id);
+        console.log(chalk.red("  removed:") + ` ${c.slug} ${chalk.dim(`(${c.target_path})`)}`);
+      }
+      removed++;
+    }
+  }
+  if (removed === 0)
+    console.log(chalk.green("\u2713") + " All stored configs still exist on disk.");
+  else
+    console.log(chalk.dim(`
+${removed} orphaned config(s) ${opts.dryRun ? "found" : "removed"}`));
+});
 program.command("bootstrap").description("Install the full @hasna ecosystem: CLI tools + MCP servers + configs").option("--dry-run", "show what would be installed without doing it").option("--skip-mcp", "skip MCP server registration").action(async (opts) => {
   const packages = [
     { name: "@hasna/todos", bin: "todos", mcp: "todos-mcp" },

package/dist/mcp/index.js

@@ -395,6 +395,12 @@ var init_apply = __esm(() => {
 });
 
 // src/lib/redact.ts
+var exports_redact = {};
+__export(exports_redact, {
+  scanSecrets: () => scanSecrets,
+  redactContent: () => redactContent,
+  hasSecrets: () => hasSecrets
+});
 function redactShell(content) {
   const redacted = [];
   const lines = content.split(`
@@ -554,6 +560,13 @@ function redactContent(content, format) {
       return redactGeneric(content);
   }
 }
+function scanSecrets(content, format) {
+  const r = redactContent(content, format);
+  return r.redacted;
+}
+function hasSecrets(content, format) {
+  return scanSecrets(content, format).length > 0;
+}
 var SECRET_KEY_PATTERN, VALUE_PATTERNS, MIN_SECRET_VALUE_LEN = 8;
 var init_redact = __esm(() => {
   SECRET_KEY_PATTERN = /^(.*_?API_?KEY|.*_?TOKEN|.*_?SECRET|.*_?PASSWORD|.*_?PASSWD|.*_?CREDENTIAL|.*_?AUTH(?:_TOKEN|_KEY|ORIZATION)?|.*_?PRIVATE_?KEY|.*_?ACCESS_?KEY|.*_?CLIENT_?SECRET|.*_?SIGNING_?KEY|.*_?ENCRYPTION_?KEY|.*_AUTH_TOKEN)$/i;
@@ -1000,14 +1013,15 @@ var TOOL_DOCS = {
   list_profiles: "List all profiles. Returns array of profile objects.",
   apply_profile: "Apply all configs in a profile to disk. Params: id_or_slug, dry_run?. Returns array of apply results.",
   get_snapshot: "Get snapshot(s) for a config. Params: config_id_or_slug, version?. Returns latest snapshot or specific version.",
-  get_status: "Single-call orientation. Returns: total configs, counts by category, drifted count, unredacted secrets, templates, DB path.",
+  get_status: "Single-call orientation. Returns: total configs, counts by category, templates, DB path.",
+  scan_secrets: "Scan configs for unredacted secrets. Params: id_or_slug? (omit for all known), fix? (true to redact in-place). Returns findings.",
   sync_known: "Sync all known config files from disk into DB. Params: agent?, category?. Replaces sync_directory for standard use.",
   search_tools: "Search tool descriptions. Params: query. Returns matching tool names and descriptions.",
   describe_tools: "Get full descriptions for tools. Params: names? (array). Returns tool docs."
 };
 var PROFILES = {
   minimal: ["get_status", "get_config", "sync_known"],
-  standard: ["list_configs", "get_config", "create_config", "update_config", "apply_config", "sync_known", "get_status", "list_profiles", "apply_profile", "search_tools", "describe_tools"],
+  standard: ["list_configs", "get_config", "create_config", "update_config", "apply_config", "sync_known", "get_status", "scan_secrets", "list_profiles", "apply_profile", "search_tools", "describe_tools"],
   full: []
 };
 var activeProfile = process.env["CONFIGS_PROFILE"] || "full";
@@ -1024,6 +1038,7 @@ var ALL_LEAN_TOOLS = [
   { name: "get_snapshot", inputSchema: { type: "object", properties: { config_id_or_slug: { type: "string" }, version: { type: "number" } }, required: ["config_id_or_slug"] } },
   { name: "get_status", inputSchema: { type: "object", properties: {} } },
   { name: "sync_known", inputSchema: { type: "object", properties: { agent: { type: "string" }, category: { type: "string" } } } },
+  { name: "scan_secrets", inputSchema: { type: "object", properties: { id_or_slug: { type: "string" }, fix: { type: "boolean" } } } },
   { name: "search_tools", inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] } },
   { name: "describe_tools", inputSchema: { type: "object", properties: { names: { type: "array", items: { type: "string" } } } } }
 ];
@@ -1131,6 +1146,23 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         });
         return ok(result);
       }
+      case "scan_secrets": {
+        const { scanSecrets: scanSecrets2, redactContent: redactContent2 } = await Promise.resolve().then(() => (init_redact(), exports_redact));
+        const configs = args["id_or_slug"] ? [getConfig(args["id_or_slug"])] : listConfigs({ kind: "file" });
+        const findings = [];
+        for (const c of configs) {
+          const fmt = c.format;
+          const secrets = scanSecrets2(c.content, fmt);
+          if (secrets.length > 0) {
+            findings.push({ slug: c.slug, secrets: secrets.length, vars: secrets.map((s) => s.varName) });
+            if (args["fix"]) {
+              const { content, isTemplate } = redactContent2(c.content, fmt);
+              updateConfig(c.id, { content, is_template: isTemplate });
+            }
+          }
+        }
+        return ok({ clean: findings.length === 0, findings, fixed: !!args["fix"] });
+      }
       case "search_tools": {
         const query = (args["query"] || "").toLowerCase();
         const matches = Object.entries(TOOL_DOCS).filter(([k, v]) => k.includes(query) || v.toLowerCase().includes(query)).map(([name2, description]) => ({ name: name2, description }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/configs",
-  "version": "0.2.9",
+  "version": "0.2.11",
   "description": "AI coding agent configuration manager — store, version, apply, and share all your AI coding configs. CLI + MCP + REST API + Dashboard.",
   "type": "module",
   "main": "dist/index.js",