@krislavten/env-sync 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 krislavten
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,233 @@
+# env-sync
+
+> Local-first env file synchronization for people who live across worktrees, repos, and project variants.
+
+`env-sync` is a small CLI for keeping local `.env` files aligned without turning secrets into a shared service, a git artifact, or a Slack message.
+
+It is built around a simple idea: env files are local operational state, but modern development is rarely done in one checkout. You may have multiple worktrees for the same repo, a web app and worker split across directories, test-only env files, and project-specific variants that should never bleed into each other. `env-sync` gives that workflow a boring, explicit, auditable local mechanism.
+
+```sh
+env-sync push pilot
+env-sync pull pilot
+env-sync status pilot
+env-sync diff pilot
+```
+
+By default, it syncs `.env.local` in the current directory to:
+
+```text
+~/.env-sync/<project>/files/.env.local
+```
+
+No cloud account. No secret values in status output. No implicit overwrite.
+
+## Why
+
+Most env-file workflows fail in one of three ways:
+
+- **Copy-paste drift**: one worktree gets the new key, another keeps the stale value.
+- **Unsafe visibility**: debugging commands print secret values into logs, terminals, or shared tickets.
+- **Namespace accidents**: two projects both have `.env.local`, but the contents are not interchangeable.
+
+`env-sync` treats those as product constraints, not documentation warnings.
+
+## Design Principles
+
+- **Local-first**: the source of truth is on your machine, under `~/.env-sync`.
+- **Project-explicit**: every sync operation belongs to a namespace such as `pilot`, `rush-app`, or `side-project`.
+- **No silent clobbering**: `pull` refuses to overwrite different local content unless you pass `--force`.
+- **Secret-aware output**: `status` and `diff` show key names and short digests, never raw values.
+- **Repo-agnostic**: the CLI does not know or care whether the current directory is Pilot, a worktree, a monorepo package, or a standalone app.
+- **Small surface area**: first make local synchronization dependable; add remote or team workflows only when the local contract is solid.
+
+## Install
+
+Requirements:
+
+- Node.js 20 or newer
+- pnpm 10 or newer
+
+From npm:
+
+```sh
+npm install -g @krislavten/env-sync
+```
+
+From source:
+
+```sh
+git clone https://github.com/krislavten/env-sync.git
+cd env-sync
+pnpm install
+pnpm build
+pnpm link --global
+```
+
+Then:
+
+```sh
+env-sync --help
+```
+
+## Quick Start
+
+Save the current directory's `.env.local` under the `pilot` namespace:
+
+```sh
+env-sync push pilot
+```
+
+Restore it in another worktree:
+
+```sh
+env-sync pull pilot
+```
+
+If the destination already has different content, the pull is blocked:
+
+```text
+.env.local: blocked-different
+```
+
+Overwrite intentionally:
+
+```sh
+env-sync pull pilot --force
+```
+
+`--force` updates the local file in place. It does not create a backup or audit trail, so use it only when the stored snapshot is the version you intend to keep.
+
+Check whether local and stored files match:
+
+```sh
+env-sync status pilot
+env-sync diff pilot
+```
+
+`diff` output is intentionally redacted:
+
+```text
+.env.local: different
+  ~ API_TOKEN local:f44e64e75f39 stored:8ed3f6ad685b
+  + NEW_FEATURE_FLAG stored:7f021a1415b8
+```
+
+The key names are visible. The values are not.
+
+## Multiple Env Files
+
+Pass extra files explicitly:
+
+```sh
+env-sync push pilot \
+  --file .env.local \
+  --file .env.test.local \
+  --file apps/agent-hub/.env.local
+```
+
+Or create a project config:
+
+```sh
+env-sync init pilot \
+  --file .env.local \
+  --file .env.test.local \
+  --file apps/agent-hub/.env.local
+```
+
+This writes:
+
+```json
+{
+  "project": "pilot",
+  "files": [
+    ".env.local",
+    ".env.test.local",
+    "apps/agent-hub/.env.local"
+  ]
+}
+```
+
+`.env-sync.json` is safe to commit because it contains only the namespace and file paths, not secret values.
+
+After `init`, the project argument becomes optional for read-only checks:
+
+```sh
+env-sync status
+env-sync diff
+```
+
+## Command Reference
+
+```text
+env-sync init <project> [--file <path>...]
+env-sync push <project> [--file <path>...]
+env-sync pull <project> [--file <path>...] [--force]
+env-sync status [project] [--file <path>...]
+env-sync diff [project] [--file <path>...]
+```
+
+If no `--file` is provided, `env-sync` uses files from `.env-sync.json`. If no config exists, it falls back to `.env.local`.
+
+## Storage Model
+
+Each project namespace gets its own directory:
+
+```text
+~/.env-sync/
+  pilot/
+    files/
+      .env.local
+      .env.test.local
+      apps/agent-hub/.env.local
+  rush-app/
+    files/
+      .env.local
+```
+
+This is deliberately plain. You can inspect it, back it up, remove it, or copy it between machines using tools you already trust.
+
+The CLI creates project store directories with owner-only directory permissions and writes synced files with owner-only file permissions where the platform supports POSIX modes. The contents are still plaintext on disk.
+
+## Safety Model
+
+`env-sync` is not a secret manager. It is a local file synchronization tool with conservative defaults.
+
+What it does:
+
+- Keeps project namespaces separated.
+- Refuses accidental overwrites.
+- Avoids printing secret values in `status` and `diff`.
+- Stores synced files with owner-only file permissions where the platform supports it.
+- Rejects env file paths outside the current project directory.
+
+What it does not do:
+
+- Encrypt stored env files.
+- Manage cloud secret rotation.
+- Share secrets with teammates.
+- Decide which values are production-safe.
+
+If you need centralized access control, audit logs, or encryption at rest, use a real secret manager. `env-sync` is for the local development gap before that system should be involved.
+
+## Development
+
+```sh
+pnpm install
+pnpm check
+```
+
+`pnpm check` runs TypeScript build and tests.
+
+## Roadmap
+
+- Safer `init` flows for existing repos and worktrees.
+- Optional named profiles per project, for example `pilot/testing` and `pilot/dogfood`.
+- Better human-readable summaries for added, removed, and changed keys.
+- Optional encrypted local store.
+- Optional import/export bundles for machine migration.
+
+The project will stay local-first unless there is a clear reason to expand the trust boundary.
+
+## License
+
+MIT

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+import { CONFIG_FILE, diffText, initConfig, installHook, pull, push, resolveScope, status, uninstallHook } from "./index.js";
+async function main(argv) {
+    const args = parseArgs(argv);
+    if (args.help || !args.command) {
+        printHelp();
+        return args.command ? 0 : 1;
+    }
+    if (args.command === "init") {
+        const result = await initConfig({ cwd: process.cwd(), project: args.project, files: args.files });
+        console.log(`created ${CONFIG_FILE}`);
+        console.log(`project: ${result.config.project}`);
+        console.log(`files: ${result.config.files.join(", ")}`);
+        return 0;
+    }
+    if (args.command === "hook") {
+        if (args.subcommand === "install") {
+            const project = requireArg(args.project, "hook install requires a project");
+            const result = await installHook({ cwd: process.cwd(), project, bin: args.bin });
+            console.log(`installed post-checkout hook: ${result.path}`);
+            return 0;
+        }
+        if (args.subcommand === "uninstall") {
+            const result = await uninstallHook(process.cwd());
+            console.log(`uninstalled post-checkout hook: ${result.path}`);
+            return 0;
+        }
+        throw new Error("usage: env-sync hook install <project> | env-sync hook uninstall");
+    }
+    const scope = await resolveScope({ cwd: process.cwd(), project: args.project, files: args.files });
+    if (args.command === "push") {
+        const results = await push(scope);
+        for (const result of results) {
+            console.log(`${result.file}: ${result.action}`);
+        }
+        return results.some((result) => result.action === "missing-local") ? 2 : 0;
+    }
+    if (args.command === "pull") {
+        const results = await pull(scope, args.force);
+        for (const result of results) {
+            console.log(`${result.file}: ${result.action}`);
+        }
+        return results.some((result) => result.action === "blocked-different" || result.action === "missing-store") ? 2 : 0;
+    }
+    if (args.command === "status" || args.command === "diff") {
+        const entries = await status(scope);
+        for (const entry of entries) {
+            console.log(`${entry.file}: ${entry.state}`);
+            if (args.command === "diff") {
+                const text = diffText(entry.localKeys, entry.storedKeys);
+                console.log(text ? indent(text) : "  no key changes");
+            }
+        }
+        return entries.some((entry) => entry.state === "different" || entry.state.startsWith("missing")) ? 1 : 0;
+    }
+    throw new Error(`unknown command: ${args.command}`);
+}
+function parseArgs(argv) {
+    const parsed = { files: [], force: false, help: false };
+    for (let index = 0; index < argv.length; index += 1) {
+        const arg = argv[index];
+        if (arg === "--help" || arg === "-h") {
+            parsed.help = true;
+            continue;
+        }
+        if (arg === "--force") {
+            parsed.force = true;
+            continue;
+        }
+        if (arg === "--file" || arg === "-f") {
+            const file = argv[index + 1];
+            if (!file) {
+                throw new Error(`${arg} requires a path`);
+            }
+            parsed.files.push(file);
+            index += 1;
+            continue;
+        }
+        if (arg === "--bin") {
+            if (parsed.command !== "hook") {
+                throw new Error("--bin is only supported by env-sync hook install");
+            }
+            const bin = argv[index + 1];
+            if (!bin) {
+                throw new Error("--bin requires a path");
+            }
+            parsed.bin = bin;
+            index += 1;
+            continue;
+        }
+        if (arg.startsWith("-")) {
+            throw new Error(`unknown option: ${arg}`);
+        }
+        if (!parsed.command) {
+            parsed.command = arg;
+            continue;
+        }
+        if (parsed.command === "hook" && !parsed.subcommand) {
+            parsed.subcommand = arg;
+            continue;
+        }
+        if (!parsed.project) {
+            parsed.project = arg;
+            continue;
+        }
+        throw new Error(`unexpected argument: ${arg}`);
+    }
+    return parsed;
+}
+function printHelp() {
+    console.log(`env-sync
+
+Usage:
+  env-sync init <project> [--file <path>...]
+  env-sync push <project> [--file <path>...]
+  env-sync pull <project> [--file <path>...] [--force]
+  env-sync status [project] [--file <path>...]
+  env-sync diff [project] [--file <path>...]
+  env-sync hook install <project>
+  env-sync hook uninstall
+`);
+}
+function requireArg(value, message) {
+    if (!value) {
+        throw new Error(message);
+    }
+    return value;
+}
+function indent(text) {
+    return text
+        .split("\n")
+        .map((line) => `  ${line}`)
+        .join("\n");
+}
+main(process.argv.slice(2))
+    .then((code) => {
+    process.exitCode = code;
+})
+    .catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAY7H,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,SAAS,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,iCAAiC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnG,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,mBAAmB,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,MAAM,GAAe,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB,EAAE,OAAe;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACxB,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/core.d.ts

@@ -0,0 +1,50 @@
+export declare const CONFIG_FILE = ".env-sync.json";
+export declare const DEFAULT_ENV_FILE = ".env.local";
+export type EnvSyncConfig = {
+    project?: string;
+    files?: string[];
+};
+export type ResolveOptions = {
+    cwd: string;
+    project?: string;
+    files?: string[];
+};
+export type ResolvedScope = {
+    cwd: string;
+    project: string;
+    files: string[];
+    storeRoot: string;
+};
+export type FileState = "missing-both" | "missing-local" | "missing-store" | "same" | "different";
+export type StatusEntry = {
+    file: string;
+    state: FileState;
+    localKeys: RedactedEnvEntry[];
+    storedKeys: RedactedEnvEntry[];
+};
+export type RedactedEnvEntry = {
+    key: string;
+    digest: string;
+};
+export type PullResult = {
+    file: string;
+    action: "created" | "updated" | "skipped-same" | "blocked-different" | "missing-store";
+};
+export type PushResult = {
+    file: string;
+    action: "stored" | "missing-local";
+};
+export type InitResult = {
+    path: string;
+    config: Required<EnvSyncConfig>;
+};
+export declare function initConfig(options: ResolveOptions): Promise<InitResult>;
+export declare function push(scope: ResolvedScope): Promise<PushResult[]>;
+export declare function pull(scope: ResolvedScope, force?: boolean): Promise<PullResult[]>;
+export declare function status(scope: ResolvedScope): Promise<StatusEntry[]>;
+export declare function resolveScope(options: ResolveOptions): Promise<ResolvedScope>;
+export declare function readConfig(cwd: string): Promise<EnvSyncConfig>;
+export declare function projectStoreRoot(project: string): string;
+export declare function storedFilePath(scope: ResolvedScope, file: string): string;
+export declare function localFilePath(cwd: string, file: string): string;
+export declare function redactEnv(content: string | undefined): RedactedEnvEntry[];

package/dist/core.js

@@ -0,0 +1,199 @@
+import { createHash } from "node:crypto";
+import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+export const CONFIG_FILE = ".env-sync.json";
+export const DEFAULT_ENV_FILE = ".env.local";
+export async function initConfig(options) {
+    const project = requireProject(options.project);
+    const files = uniqueFiles(options.files?.length ? options.files : [DEFAULT_ENV_FILE]);
+    const config = { project, files };
+    const configPath = path.join(options.cwd, CONFIG_FILE);
+    await writeFile(configPath, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+    return { path: configPath, config };
+}
+export async function push(scope) {
+    const results = [];
+    for (const file of scope.files) {
+        const localPath = localFilePath(scope.cwd, file);
+        const local = await readTextIfExists(localPath);
+        if (local === undefined) {
+            results.push({ file, action: "missing-local" });
+            continue;
+        }
+        const storedPath = storedFilePath(scope, file);
+        await mkdir(path.dirname(storedPath), { recursive: true, mode: 0o700 });
+        await writeFile(storedPath, local, { encoding: "utf8", mode: 0o600 });
+        results.push({ file, action: "stored" });
+    }
+    return results;
+}
+export async function pull(scope, force = false) {
+    const results = [];
+    for (const file of scope.files) {
+        const stored = await readTextIfExists(storedFilePath(scope, file));
+        if (stored === undefined) {
+            results.push({ file, action: "missing-store" });
+            continue;
+        }
+        const localPath = localFilePath(scope.cwd, file);
+        const local = await readTextIfExists(localPath);
+        if (local === stored) {
+            results.push({ file, action: "skipped-same" });
+            continue;
+        }
+        if (local !== undefined && !force) {
+            results.push({ file, action: "blocked-different" });
+            continue;
+        }
+        await mkdir(path.dirname(localPath), { recursive: true });
+        await writeFile(localPath, stored, { encoding: "utf8", mode: 0o600 });
+        results.push({ file, action: local === undefined ? "created" : "updated" });
+    }
+    return results;
+}
+export async function status(scope) {
+    const results = [];
+    for (const file of scope.files) {
+        const local = await readTextIfExists(localFilePath(scope.cwd, file));
+        const stored = await readTextIfExists(storedFilePath(scope, file));
+        results.push({
+            file,
+            state: fileState(local, stored),
+            localKeys: redactEnv(local),
+            storedKeys: redactEnv(stored),
+        });
+    }
+    return results;
+}
+export async function resolveScope(options) {
+    const config = await readConfig(options.cwd);
+    const project = options.project ?? config.project;
+    const files = options.files?.length ? options.files : config.files?.length ? config.files : [DEFAULT_ENV_FILE];
+    return {
+        cwd: options.cwd,
+        project: requireProject(project),
+        files: uniqueFiles(files),
+        storeRoot: projectStoreRoot(requireProject(project)),
+    };
+}
+export async function readConfig(cwd) {
+    const configPath = path.join(cwd, CONFIG_FILE);
+    const raw = await readTextIfExists(configPath);
+    if (raw === undefined) {
+        return {};
+    }
+    const parsed = JSON.parse(raw);
+    if (parsed.project !== undefined && typeof parsed.project !== "string") {
+        throw new Error(`${CONFIG_FILE}: project must be a string`);
+    }
+    if (parsed.files !== undefined && !Array.isArray(parsed.files)) {
+        throw new Error(`${CONFIG_FILE}: files must be an array`);
+    }
+    return parsed;
+}
+export function projectStoreRoot(project) {
+    return path.join(homedir(), ".env-sync", safeProjectName(project));
+}
+export function storedFilePath(scope, file) {
+    return path.join(scope.storeRoot, "files", safeRelativePath(file));
+}
+export function localFilePath(cwd, file) {
+    const resolved = path.resolve(cwd, file);
+    const relative = path.relative(cwd, resolved);
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        throw new Error(`file path must stay inside the current directory: ${file}`);
+    }
+    return resolved;
+}
+export function redactEnv(content) {
+    if (content === undefined) {
+        return [];
+    }
+    const entries = new Map();
+    for (const rawLine of content.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith("#")) {
+            continue;
+        }
+        const normalized = line.startsWith("export ") ? line.slice("export ".length).trimStart() : line;
+        const equalsIndex = normalized.indexOf("=");
+        if (equalsIndex <= 0) {
+            continue;
+        }
+        const key = normalized.slice(0, equalsIndex).trim();
+        const value = normalized.slice(equalsIndex + 1);
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+            continue;
+        }
+        entries.set(key, shortDigest(value));
+    }
+    return [...entries.entries()]
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, digest]) => ({ key, digest }));
+}
+function fileState(local, stored) {
+    if (local === undefined && stored === undefined) {
+        return "missing-both";
+    }
+    if (local === undefined) {
+        return "missing-local";
+    }
+    if (stored === undefined) {
+        return "missing-store";
+    }
+    return local === stored ? "same" : "different";
+}
+function safeProjectName(project) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(project)) {
+        throw new Error("project must contain only letters, numbers, dot, underscore, or dash");
+    }
+    return project;
+}
+function safeRelativePath(file) {
+    if (!file || path.isAbsolute(file)) {
+        throw new Error(`file path must be relative: ${file}`);
+    }
+    const normalized = path.normalize(file);
+    if (normalized.startsWith("..") || path.isAbsolute(normalized)) {
+        throw new Error(`file path must stay inside the current directory: ${file}`);
+    }
+    return normalized;
+}
+function requireProject(project) {
+    if (!project) {
+        throw new Error(`project is required. Pass it explicitly or run env-sync init <project>`);
+    }
+    return safeProjectName(project);
+}
+function uniqueFiles(files) {
+    const seen = new Set();
+    const unique = [];
+    for (const file of files) {
+        const safe = safeRelativePath(file);
+        if (!seen.has(safe)) {
+            seen.add(safe);
+            unique.push(safe);
+        }
+    }
+    return unique;
+}
+async function readTextIfExists(file) {
+    try {
+        await stat(file);
+        return await readFile(file, "utf8");
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === "ENOENT") {
+            return undefined;
+        }
+        throw error;
+    }
+}
+function shortDigest(value) {
+    return createHash("sha256").update(value).digest("hex").slice(0, 12);
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAiD7C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtF,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAoB;IAC7C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAoB,EAAE,KAAK,GAAG,KAAK;IAC5D,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QAED,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAoB;IAC/C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;YAC/B,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;YAC3B,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAuB;IACxD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE/G,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;QACzB,SAAS,EAAE,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,0BAA0B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAoB,EAAE,IAAY;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,IAAY;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAA2B;IACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChG,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,MAA0B;IACtE,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,OAA2B;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/hook.d.ts

@@ -0,0 +1,11 @@
+export type HookInstallOptions = {
+    cwd: string;
+    project: string;
+    bin?: string;
+};
+export type HookInstallResult = {
+    path: string;
+};
+export declare function installHook(options: HookInstallOptions): Promise<HookInstallResult>;
+export declare function uninstallHook(cwd: string): Promise<HookInstallResult>;
+export declare function renderHookBlock(project: string, bin: string): string;

package/dist/hook.js

@@ -0,0 +1,84 @@
+import { execFile } from "node:child_process";
+import { chmod, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const START_MARKER = "# >>> env-sync";
+const END_MARKER = "# <<< env-sync";
+const ZERO_HEAD = "0000000000000000000000000000000000000000";
+export async function installHook(options) {
+    validateProject(options.project);
+    const hookPath = await gitPath(options.cwd, "hooks/post-checkout");
+    const existing = await readTextIfExists(hookPath);
+    const block = renderHookBlock(options.project, options.bin ?? "env-sync");
+    const next = upsertManagedBlock(existing ?? "#!/bin/sh\n", block);
+    await writeFile(hookPath, next, "utf8");
+    await chmod(hookPath, 0o755);
+    return { path: hookPath };
+}
+export async function uninstallHook(cwd) {
+    const hookPath = await gitPath(cwd, "hooks/post-checkout");
+    const existing = await readTextIfExists(hookPath);
+    if (existing === undefined) {
+        return { path: hookPath };
+    }
+    await writeFile(hookPath, removeManagedBlock(existing), "utf8");
+    return { path: hookPath };
+}
+export function renderHookBlock(project, bin) {
+    return `${START_MARKER}
+# Managed by env-sync. Runs only for the initial checkout of a new worktree.
+old_head="$1"
+is_branch_checkout="$3"
+zero="${ZERO_HEAD}"
+
+if [ "$old_head" = "$zero" ] && [ "$is_branch_checkout" = "1" ]; then
+  ENV_SYNC_BIN=${quoteShell(bin)}
+  if [ -x "$ENV_SYNC_BIN" ] || command -v "$ENV_SYNC_BIN" >/dev/null 2>&1; then
+    "$ENV_SYNC_BIN" pull ${quoteShell(project)} || {
+      echo "env-sync: pull skipped or blocked; run env-sync status ${project}" >&2
+    }
+  else
+    echo "env-sync: command not found, skip env pull" >&2
+  fi
+fi
+${END_MARKER}
+`;
+}
+function upsertManagedBlock(existing, block) {
+    const without = removeManagedBlock(existing).trimEnd();
+    return `${without}\n\n${block}`;
+}
+function removeManagedBlock(existing) {
+    const pattern = new RegExp(`\\n?${escapeRegExp(START_MARKER)}[\\s\\S]*?${escapeRegExp(END_MARKER)}\\n?`, "g");
+    const next = existing.replace(pattern, "\n").replace(/\n{3,}/g, "\n\n").trimEnd();
+    return next ? `${next}\n` : "";
+}
+async function gitPath(cwd, relativePath) {
+    const { stdout } = await execFileAsync("git", ["rev-parse", "--git-path", relativePath], { cwd });
+    const gitPathOutput = stdout.trim();
+    return path.isAbsolute(gitPathOutput) ? gitPathOutput : path.resolve(cwd, gitPathOutput);
+}
+async function readTextIfExists(file) {
+    try {
+        return await readFile(file, "utf8");
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+            return undefined;
+        }
+        throw error;
+    }
+}
+function quoteShell(value) {
+    return `'${value.replaceAll("'", "'\"'\"'")}'`;
+}
+function validateProject(project) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(project)) {
+        throw new Error("project must contain only letters, numbers, dot, underscore, or dash");
+    }
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=hook.js.map

package/dist/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAY7D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2B;IAC3D,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,IAAI,aAAa,EAAE,KAAK,CAAC,CAAC;IAElE,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,SAAS,CAAC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,GAAW;IAC1D,OAAO,GAAG,YAAY;;;;QAIhB,SAAS;;;iBAGA,UAAU,CAAC,GAAG,CAAC;;2BAEL,UAAU,CAAC,OAAO,CAAC;qEACuB,OAAO;;;;;;EAM1E,UAAU;CACX,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,KAAa;IACzD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,OAAO,GAAG,OAAO,OAAO,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,YAAY,CAAC,YAAY,CAAC,aAAa,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAClF,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,YAAoB;IACtD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClG,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./core.js";
+export * from "./hook.js";
+export * from "./render.js";

package/dist/index.js

@@ -0,0 +1,4 @@
+export * from "./core.js";
+export * from "./hook.js";
+export * from "./render.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,2 @@
+import type { RedactedEnvEntry } from "./core.js";
+export declare function diffText(localKeys: RedactedEnvEntry[], storedKeys: RedactedEnvEntry[]): string;

package/dist/render.js

@@ -0,0 +1,21 @@
+export function diffText(localKeys, storedKeys) {
+    const local = new Map(localKeys.map((entry) => [entry.key, entry.digest]));
+    const stored = new Map(storedKeys.map((entry) => [entry.key, entry.digest]));
+    const keys = [...new Set([...local.keys(), ...stored.keys()])].sort();
+    const lines = [];
+    for (const key of keys) {
+        const localDigest = local.get(key);
+        const storedDigest = stored.get(key);
+        if (localDigest === undefined) {
+            lines.push(`+ ${key} stored:${storedDigest}`);
+        }
+        else if (storedDigest === undefined) {
+            lines.push(`- ${key} local:${localDigest}`);
+        }
+        else if (localDigest !== storedDigest) {
+            lines.push(`~ ${key} local:${localDigest} stored:${storedDigest}`);
+        }
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,QAAQ,CAAC,SAA6B,EAAE,UAA8B;IACpF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,WAAW,YAAY,EAAE,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,WAAW,WAAW,YAAY,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@krislavten/env-sync",
+  "version": "0.1.0",
+  "description": "A small local CLI for syncing env files across worktrees and projects.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/krislavten/env-sync.git"
+  },
+  "homepage": "https://github.com/krislavten/env-sync#readme",
+  "bugs": {
+    "url": "https://github.com/krislavten/env-sync/issues"
+  },
+  "type": "module",
+  "bin": {
+    "env-sync": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "check": "pnpm build && pnpm test"
+  },
+  "keywords": [
+    "env",
+    "dotenv",
+    "cli",
+    "worktree"
+  ],
+  "author": "krislavten",
+  "license": "MIT",
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}