@rowlabs/ev 0.3.1 → 0.4.0

package/dist/index.js

@@ -6306,8 +6306,12 @@ function parseGitEnvConfig(content) {
   if (!parsed.project || typeof parsed.project !== "string") {
     throw new Error("Invalid ev.yaml: missing or invalid 'project' field");
   }
+  if (!parsed.name || typeof parsed.name !== "string") {
+    throw new Error("Invalid ev.yaml: missing or invalid 'name' field");
+  }
   return {
     project: parsed.project,
+    name: parsed.name,
     defaultEnv: parsed.default_env,
     envFiles: parsed.env_files ?? [".env", ".env.local"],
     apps: parsed.apps,
@@ -6693,16 +6697,18 @@ async function getDecryptedProjectKey(projectId) {
 async function resolveEnvironmentId(projectId, appName, envName) {
   const client = await createApiClient();
   const project = await client.getProject(projectId);
-  const app = appName ? project.apps.find((a2) => a2.name === appName) : project.apps.find((a2) => a2.name === "default") ?? project.apps[0];
+  let app = appName ? project.apps.find((a2) => a2.name === appName) : project.apps.find((a2) => a2.name === "default") ?? project.apps[0];
+  if (!app && appName) {
+    app = await client.createApp(projectId, appName);
+  }
   if (!app) {
     console.error(chalk3.red(`App "${appName ?? "default"}" not found`));
     process.exit(1);
   }
   const envs = await client.listEnvironments(app.id);
-  const env = envs.find((e) => e.name === envName);
+  let env = envs.find((e) => e.name === envName);
   if (!env) {
-    console.error(chalk3.red(`Environment "${envName}" not found in app "${app.name}"`));
-    process.exit(1);
+    env = await client.createEnvironment(app.id, envName);
   }
   return env.id;
 }
@@ -6877,6 +6883,7 @@ var initCommand = new Command2("init").description("Initialize ev in the current
     await saveProjectKey(project.id, sealedKey);
     const configData = {
       project: project.id,
+      name,
       default_env: "dev",
       env_files: [".env", ".env.local"]
     };
@@ -6948,6 +6955,7 @@ init_api_client();
 init_config();
 init_auth();
 import { Command as Command3 } from "commander";
+import { join as join5 } from "path";
 import chalk4 from "chalk";
 import ora3 from "ora";
 
@@ -6988,6 +6996,70 @@ async function readEnvFiles(dir, fileNames) {
 }
 
 // src/commands/push.ts
+async function pushSingleApp(projectId, appName, envName, dir, envFileNames, options, isEvBackend, backendConfig) {
+  const { vars: localEnv, files } = await readEnvFiles(dir, envFileNames);
+  const keys = Object.keys(localEnv);
+  if (keys.length === 0) return false;
+  const label = `${appName ?? "default"}:${envName}`;
+  const envId = await resolveEnvironmentId(projectId, appName, envName);
+  const client = await createApiClient(backendConfig);
+  const remoteResponse = await client.pullSecrets(envId);
+  const remoteEnv = {};
+  let projectKey;
+  if (isEvBackend) {
+    projectKey = await getDecryptedProjectKey(projectId);
+    for (const secret of remoteResponse.secrets) {
+      remoteEnv[secret.key] = decryptSecret(secret.encryptedValue, projectKey);
+    }
+  } else {
+    for (const secret of remoteResponse.secrets) {
+      remoteEnv[secret.key] = secret.encryptedValue;
+    }
+  }
+  const diff = diffEnvs(remoteEnv, localEnv);
+  const hasChanges = diff.added.length > 0 || diff.removed.length > 0 || diff.changed.length > 0;
+  if (!hasChanges) {
+    console.log(chalk4.dim(`  ${label} \u2014 no changes (${files.join(", ")})`));
+    return true;
+  }
+  console.log(chalk4.bold(`
+  ${label}`) + chalk4.dim(` (${files.join(", ")})`));
+  for (const { key, value } of diff.added) {
+    console.log(chalk4.green(`    + ${key}=${maskValue(value)}`));
+  }
+  for (const { key, oldValue, newValue } of diff.changed) {
+    console.log(chalk4.yellow(`    ~ ${key}`));
+    console.log(chalk4.red(`      - ${maskValue(oldValue)}`));
+    console.log(chalk4.green(`      + ${maskValue(newValue)}`));
+  }
+  if (options.prune) {
+    for (const { key, value } of diff.removed) {
+      console.log(
+        chalk4.red(`    - ${key}=${maskValue(value)}`) + chalk4.dim("  (will be removed)")
+      );
+    }
+  }
+  console.log(
+    `    ${chalk4.green(`+${diff.added.length}`)} ${chalk4.red(`-${diff.removed.length}`)} ${chalk4.yellow(`~${diff.changed.length}`)}`
+  );
+  let secrets;
+  if (isEvBackend) {
+    if (!projectKey) projectKey = await getDecryptedProjectKey(projectId);
+    const resolvedKey = projectKey;
+    secrets = keys.map((key) => ({
+      key,
+      encryptedValue: encryptSecret(localEnv[key], resolvedKey)
+    }));
+  } else {
+    secrets = keys.map((key) => ({ key, encryptedValue: localEnv[key] }));
+  }
+  await client.pushSecrets(envId, {
+    secrets,
+    message: options.message,
+    prune: options.prune
+  });
+  return true;
+}
 var pushCommand = new Command3("push").description("Push local .env files to remote").argument("[target]", "app:env or env to push to").option("--prune", "Remove remote keys not present locally", false).option("-m, --message <message>", "Push message").option("-y, --yes", "Skip confirmation prompt", false).action(async (target, options) => {
   const spinner = ora3("Pushing secrets...").start();
   try {
@@ -6996,94 +7068,136 @@ var pushCommand = new Command3("push").description("Push local .env files to rem
       spinner.fail(chalk4.red("No ev.yaml found. Run `ev init` first."));
       process.exit(1);
     }
-    const { context, backendConfig, envFiles } = resolved;
+    const { context, backendConfig, envFiles, repoRoot } = resolved;
     const isEvBackend = !backendConfig || backendConfig.type === "ev";
-    const { vars: localEnv, files } = await readEnvFiles(process.cwd(), envFiles);
-    const keys = Object.keys(localEnv);
-    if (keys.length === 0) {
-      spinner.fail(chalk4.red("No env files found (.env, .env.local)"));
-      process.exit(1);
-    }
-    spinner.text = `Reading from ${files.join(", ")}...`;
-    spinner.text = "Fetching remote secrets...";
-    const envId = await resolveEnvironmentId(context.project, context.app, context.env);
-    const client = await createApiClient(backendConfig);
-    const remoteResponse = await client.pullSecrets(envId);
-    const remoteEnv = {};
-    let projectKey;
-    if (isEvBackend) {
-      projectKey = await getDecryptedProjectKey(context.project);
-      for (const secret of remoteResponse.secrets) {
-        remoteEnv[secret.key] = decryptSecret(secret.encryptedValue, projectKey);
+    const config = await loadEvConfig(process.cwd());
+    const cwd = process.cwd();
+    const isAtRoot = cwd === repoRoot;
+    if (isAtRoot && config?.apps && Object.keys(config.apps).length > 0) {
+      spinner.text = "Pushing all apps...";
+      spinner.stop();
+      let totalPushed = 0;
+      const opts = options ?? { prune: false, yes: false };
+      for (const [appName, appConfig] of Object.entries(config.apps)) {
+        const appDir = join5(repoRoot, appConfig.path);
+        const pushed = await pushSingleApp(
+          context.project,
+          appName,
+          context.env,
+          appDir,
+          envFiles,
+          opts,
+          isEvBackend,
+          backendConfig
+        );
+        if (pushed) totalPushed++;
+      }
+      if (totalPushed === 0) {
+        console.log(chalk4.yellow("\nNo env files found in any app directory."));
+      } else if (!opts.yes) {
+        console.log();
+        const answer = await prompt("Confirm push all? (y/N) ");
+        if (answer.toLowerCase() !== "y") {
+          console.log(chalk4.yellow("Push cancelled."));
+          process.exit(0);
+        }
+        console.log(chalk4.green(`
+\u2714 Pushed ${totalPushed} apps`));
+      } else {
+        console.log(chalk4.green(`
+\u2714 Pushed ${totalPushed} apps`));
       }
     } else {
-      for (const secret of remoteResponse.secrets) {
-        remoteEnv[secret.key] = secret.encryptedValue;
+      const { vars: localEnv, files } = await readEnvFiles(cwd, envFiles);
+      const keys = Object.keys(localEnv);
+      if (keys.length === 0) {
+        spinner.fail(chalk4.red("No env files found (.env, .env.local)"));
+        process.exit(1);
       }
-    }
-    const diff = diffEnvs(remoteEnv, localEnv);
-    const hasChanges = diff.added.length > 0 || diff.removed.length > 0 || diff.changed.length > 0;
-    spinner.stop();
-    console.log(chalk4.bold(`
+      spinner.text = `Reading from ${files.join(", ")}...`;
+      spinner.text = "Fetching remote secrets...";
+      const envId = await resolveEnvironmentId(context.project, context.app, context.env);
+      const client = await createApiClient(backendConfig);
+      const remoteResponse = await client.pullSecrets(envId);
+      const remoteEnv = {};
+      let projectKey;
+      if (isEvBackend) {
+        projectKey = await getDecryptedProjectKey(context.project);
+        for (const secret of remoteResponse.secrets) {
+          remoteEnv[secret.key] = decryptSecret(secret.encryptedValue, projectKey);
+        }
+      } else {
+        for (const secret of remoteResponse.secrets) {
+          remoteEnv[secret.key] = secret.encryptedValue;
+        }
+      }
+      const diff = diffEnvs(remoteEnv, localEnv);
+      const hasChanges = diff.added.length > 0 || diff.removed.length > 0 || diff.changed.length > 0;
+      spinner.stop();
+      console.log(
+        chalk4.bold(`
 Pushing to ${context.app ?? "default"}:${context.env}
-`));
-    if (!hasChanges) {
-      console.log(chalk4.green("No changes to push."));
-      return;
-    }
-    for (const { key, value } of diff.added) {
-      console.log(chalk4.green(`+ ${key}=${maskValue(value)}`));
-    }
-    for (const { key, oldValue, newValue } of diff.changed) {
-      console.log(chalk4.yellow(`~ ${key}`));
-      console.log(chalk4.red(`  - ${maskValue(oldValue)}`));
-      console.log(chalk4.green(`  + ${maskValue(newValue)}`));
-    }
-    if (options?.prune) {
-      for (const { key, value } of diff.removed) {
-        console.log(
-          chalk4.red(`- ${key}=${maskValue(value)}`) + chalk4.dim("    (will be removed)")
-        );
+`)
+      );
+      if (!hasChanges) {
+        console.log(chalk4.green("No changes to push."));
+        return;
       }
-    }
-    console.log(
-      `
+      for (const { key, value } of diff.added) {
+        console.log(chalk4.green(`+ ${key}=${maskValue(value)}`));
+      }
+      for (const { key, oldValue, newValue } of diff.changed) {
+        console.log(chalk4.yellow(`~ ${key}`));
+        console.log(chalk4.red(`  - ${maskValue(oldValue)}`));
+        console.log(chalk4.green(`  + ${maskValue(newValue)}`));
+      }
+      if (options?.prune) {
+        for (const { key, value } of diff.removed) {
+          console.log(
+            chalk4.red(`- ${key}=${maskValue(value)}`) + chalk4.dim("    (will be removed)")
+          );
+        }
+      }
+      console.log(
+        `
 ${chalk4.green(`+${diff.added.length}`)} ${chalk4.red(`-${diff.removed.length}`)} ${chalk4.yellow(`~${diff.changed.length}`)}
 `
-    );
-    if (!options?.yes) {
-      const answer = await prompt("Confirm push? (y/N) ");
-      if (answer.toLowerCase() !== "y") {
-        console.log(chalk4.yellow("Push cancelled."));
-        process.exit(0);
+      );
+      if (!options?.yes) {
+        const answer = await prompt("Confirm push? (y/N) ");
+        if (answer.toLowerCase() !== "y") {
+          console.log(chalk4.yellow("Push cancelled."));
+          process.exit(0);
+        }
       }
+      const pushSpinner = ora3("Encrypting and pushing secrets...").start();
+      let secrets;
+      if (isEvBackend) {
+        if (!projectKey) projectKey = await getDecryptedProjectKey(context.project);
+        const resolvedKey = projectKey;
+        secrets = keys.map((key) => ({
+          key,
+          encryptedValue: encryptSecret(localEnv[key], resolvedKey)
+        }));
+      } else {
+        secrets = keys.map((key) => ({ key, encryptedValue: localEnv[key] }));
+      }
+      await client.pushSecrets(envId, {
+        secrets,
+        message: options?.message,
+        prune: options?.prune
+      });
+      const result = { keysAdded: diff.added, keysChanged: diff.changed, keysRemoved: diff.removed };
+      const parts = [];
+      if (result.keysAdded.length) parts.push(`${result.keysAdded.length} added`);
+      if (result.keysChanged.length) parts.push(`${result.keysChanged.length} changed`);
+      if (result.keysRemoved.length) parts.push(`${result.keysRemoved.length} removed`);
+      pushSpinner.succeed(
+        chalk4.green(
+          `Pushed to ${context.app ?? "default"}:${context.env} \u2014 ${parts.join(", ") || "no changes"}`
+        )
+      );
     }
-    const pushSpinner = ora3("Encrypting and pushing secrets...").start();
-    let secrets;
-    if (isEvBackend) {
-      if (!projectKey) projectKey = await getDecryptedProjectKey(context.project);
-      const resolvedKey = projectKey;
-      secrets = keys.map((key) => ({
-        key,
-        encryptedValue: encryptSecret(localEnv[key], resolvedKey)
-      }));
-    } else {
-      secrets = keys.map((key) => ({ key, encryptedValue: localEnv[key] }));
-    }
-    const result = await client.pushSecrets(envId, {
-      secrets,
-      message: options?.message,
-      prune: options?.prune
-    });
-    const parts = [];
-    if (result.keysAdded?.length) parts.push(`${result.keysAdded.length} added`);
-    if (result.keysChanged?.length) parts.push(`${result.keysChanged.length} changed`);
-    if (result.keysRemoved?.length) parts.push(`${result.keysRemoved.length} removed`);
-    pushSpinner.succeed(
-      chalk4.green(
-        `Pushed to ${context.app ?? "default"}:${context.env} \u2014 ${parts.join(", ") || "no changes"}`
-      )
-    );
   } catch (err) {
     ora3().fail(chalk4.red(`Push failed: ${err.message}`));
     process.exit(1);
@@ -7097,9 +7211,45 @@ init_config();
 init_auth();
 import { Command as Command4 } from "commander";
 import { writeFile as writeFile4, copyFile } from "fs/promises";
-import { join as join5 } from "path";
+import { existsSync as existsSync5 } from "fs";
+import { join as join6 } from "path";
 import chalk5 from "chalk";
 import ora4 from "ora";
+async function pullSingleApp(projectId, appName, envName, dir, envFileNames, isEvBackend, backendConfig) {
+  const label = `${appName ?? "default"}:${envName}`;
+  const envId = await resolveEnvironmentId(projectId, appName, envName);
+  const client = await createApiClient(backendConfig);
+  const response = await client.pullSecrets(envId);
+  if (response.secrets.length === 0) {
+    console.log(chalk5.dim(`  ${label} \u2014 no secrets`));
+    return 0;
+  }
+  const remoteEnv = {};
+  if (isEvBackend) {
+    const projectKey = await getDecryptedProjectKey(projectId);
+    for (const secret of response.secrets) {
+      remoteEnv[secret.key] = decryptSecret(secret.encryptedValue, projectKey);
+    }
+  } else {
+    for (const secret of response.secrets) {
+      remoteEnv[secret.key] = secret.encryptedValue;
+    }
+  }
+  const envPath = join6(dir, ".env");
+  const backupPath = join6(dir, ".env.backup");
+  const { vars: localEnv, files: localFiles } = await readEnvFiles(dir, envFileNames);
+  if (localFiles.length > 0) {
+    const diff = diffEnvs(remoteEnv, localEnv);
+    if (diff.added.length > 0 || diff.changed.length > 0) {
+      if (existsSync5(envPath)) {
+        await copyFile(envPath, backupPath);
+      }
+    }
+  }
+  await writeFile4(envPath, serializeEnv(remoteEnv), "utf-8");
+  console.log(chalk5.green(`  \u2714 ${label} \u2014 ${response.secrets.length} secrets \u2192 ${dir}`));
+  return response.secrets.length;
+}
 var pullCommand = new Command4("pull").description("Pull remote secrets into local .env").argument("[target]", "app:env or env to pull from").option("-y, --yes", "Skip confirmation prompt", false).action(async (target, options) => {
   const spinner = ora4("Pulling secrets...").start();
   try {
@@ -7108,66 +7258,96 @@ var pullCommand = new Command4("pull").description("Pull remote secrets into loc
       spinner.fail(chalk5.red("No ev.yaml found. Run `ev init` first."));
       process.exit(1);
     }
-    const { context, backendConfig, envFiles } = resolved;
+    const { context, backendConfig, envFiles, repoRoot } = resolved;
     const isEvBackend = !backendConfig || backendConfig.type === "ev";
-    const envId = await resolveEnvironmentId(context.project, context.app, context.env);
-    const client = await createApiClient(backendConfig);
-    const response = await client.pullSecrets(envId);
-    if (response.secrets.length === 0) {
-      spinner.warn(
-        chalk5.yellow(`No secrets found in ${context.app ?? "default"}:${context.env}`)
-      );
-      return;
-    }
-    spinner.text = "Decrypting secrets...";
-    const remoteEnv = {};
-    if (isEvBackend) {
-      const projectKey = await getDecryptedProjectKey(context.project);
-      for (const secret of response.secrets) {
-        remoteEnv[secret.key] = decryptSecret(secret.encryptedValue, projectKey);
+    const config = await loadEvConfig(process.cwd());
+    const cwd = process.cwd();
+    const isAtRoot = cwd === repoRoot;
+    if (isAtRoot && config?.apps && Object.keys(config.apps).length > 0) {
+      spinner.stop();
+      console.log(chalk5.bold("\nPulling all apps...\n"));
+      let totalSecrets = 0;
+      for (const [appName, appConfig] of Object.entries(config.apps)) {
+        const appDir = join6(repoRoot, appConfig.path);
+        const count = await pullSingleApp(
+          context.project,
+          appName,
+          context.env,
+          appDir,
+          envFiles,
+          isEvBackend,
+          backendConfig
+        );
+        totalSecrets += count;
       }
+      console.log(chalk5.green(`
+\u2714 Pulled ${totalSecrets} total secrets across ${Object.keys(config.apps).length} apps`));
     } else {
-      for (const secret of response.secrets) {
-        remoteEnv[secret.key] = secret.encryptedValue;
+      const envId = await resolveEnvironmentId(context.project, context.app, context.env);
+      const client = await createApiClient(backendConfig);
+      const response = await client.pullSecrets(envId);
+      if (response.secrets.length === 0) {
+        spinner.warn(
+          chalk5.yellow(
+            `No secrets found in ${context.app ?? "default"}:${context.env}`
+          )
+        );
+        return;
       }
-    }
-    const envPath = join5(process.cwd(), ".env");
-    const backupPath = join5(process.cwd(), ".env.backup");
-    const { vars: localEnv, files: localFiles } = await readEnvFiles(process.cwd(), envFiles);
-    if (localFiles.length > 0) {
-      const diff = diffEnvs(remoteEnv, localEnv);
-      const localOnlyKeys = diff.added;
-      const localChangedKeys = diff.changed;
-      if (localOnlyKeys.length > 0 || localChangedKeys.length > 0) {
-        spinner.stop();
-        console.log(chalk5.yellow(`Warning: Local .env has changes not on remote:`));
-        for (const { key } of localOnlyKeys) {
-          console.log(chalk5.green(`+ ${key}`));
+      spinner.text = "Decrypting secrets...";
+      const remoteEnv = {};
+      if (isEvBackend) {
+        const projectKey = await getDecryptedProjectKey(context.project);
+        for (const secret of response.secrets) {
+          remoteEnv[secret.key] = decryptSecret(secret.encryptedValue, projectKey);
         }
-        for (const { key } of localChangedKeys) {
-          console.log(chalk5.yellow(`~ ${key}`));
+      } else {
+        for (const secret of response.secrets) {
+          remoteEnv[secret.key] = secret.encryptedValue;
         }
-        console.log(
-          chalk5.dim(`
-These will be overwritten. A backup will be saved to .env.backup.`)
-        );
-        if (!options?.yes) {
-          const answer = await prompt("Continue? (y/N) ");
-          if (answer.toLowerCase() !== "y") {
-            console.log(chalk5.yellow("Pull cancelled."));
-            process.exit(0);
+      }
+      const envPath = join6(cwd, ".env");
+      const backupPath = join6(cwd, ".env.backup");
+      const { vars: localEnv, files: localFiles } = await readEnvFiles(cwd, envFiles);
+      if (localFiles.length > 0) {
+        const diff = diffEnvs(remoteEnv, localEnv);
+        const localOnlyKeys = diff.added;
+        const localChangedKeys = diff.changed;
+        if (localOnlyKeys.length > 0 || localChangedKeys.length > 0) {
+          spinner.stop();
+          console.log(chalk5.yellow(`Warning: Local .env has changes not on remote:`));
+          for (const { key } of localOnlyKeys) {
+            console.log(chalk5.green(`+ ${key}`));
+          }
+          for (const { key } of localChangedKeys) {
+            console.log(chalk5.yellow(`~ ${key}`));
+          }
+          console.log(
+            chalk5.dim(
+              `
+These will be overwritten. A backup will be saved to .env.backup.`
+            )
+          );
+          if (!options?.yes) {
+            const answer = await prompt("Continue? (y/N) ");
+            if (answer.toLowerCase() !== "y") {
+              console.log(chalk5.yellow("Pull cancelled."));
+              process.exit(0);
+            }
+          }
+          if (existsSync5(envPath)) {
+            await copyFile(envPath, backupPath);
+            console.log(chalk5.dim(`Backup saved to .env.backup`));
           }
         }
-        await copyFile(envPath, backupPath);
-        console.log(chalk5.dim(`Backup saved to .env.backup`));
       }
+      await writeFile4(envPath, serializeEnv(remoteEnv), "utf-8");
+      spinner.succeed(
+        chalk5.green(
+          `Pulled ${response.secrets.length} secrets from ${context.app ?? "default"}:${context.env}`
+        )
+      );
     }
-    await writeFile4(envPath, serializeEnv(remoteEnv), "utf-8");
-    spinner.succeed(
-      chalk5.green(
-        `Pulled ${response.secrets.length} secrets from ${context.app ?? "default"}:${context.env}`
-      )
-    );
   } catch (err) {
     ora4().fail(chalk5.red(`Pull failed: ${err.message}`));
     process.exit(1);
@@ -7325,6 +7505,7 @@ var statusCommand = new Command7("status").description("Show current context").a
   const auth = await loadAuth();
   const keypair = await loadKeypair();
   const resolved = await resolveCurrentContext();
+  const config = await loadEvConfig(process.cwd());
   console.log(chalk9.bold("\nev status\n"));
   if (auth) console.log(`  ${chalk9.green("\u25CF")} Logged in (${auth.apiUrl})`);
   else console.log(`  ${chalk9.red("\u25CF")} Not logged in`);
@@ -7332,9 +7513,12 @@ var statusCommand = new Command7("status").description("Show current context").a
   else console.log(`  ${chalk9.red("\u25CF")} No keypair`);
   if (resolved) {
     const { context } = resolved;
-    console.log(`  ${chalk9.green("\u25CF")} Project: ${context.project}`);
+    console.log(`  ${chalk9.green("\u25CF")} Project: ${config?.name ?? context.project}`);
     console.log(`  ${chalk9.green("\u25CF")} App: ${context.app ?? "default"}`);
     console.log(`  ${chalk9.green("\u25CF")} Env: ${context.env}`);
+    if (config?.envFiles) {
+      console.log(`  ${chalk9.green("\u25CF")} Env files: ${config.envFiles.join(", ")}`);
+    }
   } else {
     console.log(`  ${chalk9.yellow("\u25CF")} No ev.yaml found in this directory`);
   }
@@ -7797,7 +7981,7 @@ var getCommand = new Command12("get").description("Get a single secret value").a
 init_config();
 import { Command as Command13 } from "commander";
 import { readFile as readFile5, writeFile as writeFile5 } from "fs/promises";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 import chalk15 from "chalk";
 import ora9 from "ora";
 import YAML3 from "yaml";
@@ -7810,7 +7994,7 @@ backendCommand.command("show").description("Show current backend configuration")
     console.error(chalk15.red("No ev.yaml found."));
     process.exit(1);
   }
-  const content = await readFile5(join6(root, "ev.yaml"), "utf-8");
+  const content = await readFile5(join7(root, "ev.yaml"), "utf-8");
   const config = YAML3.parse(content);
   console.log(chalk15.bold("\nBackend Configuration\n"));
   const defaultBackend = config.backend ?? { type: "ev" };
@@ -7869,7 +8053,7 @@ backendCommand.command("set <type>").description("Set the default storage backen
         spinner.fail(chalk15.red("No ev.yaml found."));
         process.exit(1);
       }
-      const configPath = join6(root, "ev.yaml");
+      const configPath = join7(root, "ev.yaml");
       const content = await readFile5(configPath, "utf-8");
       const config = YAML3.parse(content);
       let backendConfig;
@@ -8376,8 +8560,8 @@ import { Command as Command17 } from "commander";
 import chalk19 from "chalk";
 import ora11 from "ora";
 import { readdir, readFile as readFile6, stat } from "fs/promises";
-import { existsSync as existsSync5 } from "fs";
-import { join as join7, extname } from "path";
+import { existsSync as existsSync6 } from "fs";
+import { join as join8, extname } from "path";
 var SCAN_EXTENSIONS = /* @__PURE__ */ new Set([
   ".ts",
   ".tsx",
@@ -8443,7 +8627,7 @@ async function scanDir(dir) {
     }
     for (const entry of entries) {
       if (SKIP_DIRS.has(entry)) continue;
-      const fullPath = join7(currentDir, entry);
+      const fullPath = join8(currentDir, entry);
       const stats = await stat(fullPath);
       if (stats.isDirectory()) {
         await walk(fullPath);
@@ -8468,8 +8652,8 @@ async function scanDir(dir) {
 async function getLocalEnvKeys(dir, configEnvFiles) {
   const keys = /* @__PURE__ */ new Set();
   for (const file of configEnvFiles) {
-    const filePath = join7(dir, file);
-    if (existsSync5(filePath)) {
+    const filePath = join8(dir, file);
+    if (existsSync6(filePath)) {
       const content = await readFile6(filePath, "utf-8");
       const parsed = parseEnvFile(content);
       for (const key of Object.keys(parsed)) {
@@ -8558,7 +8742,7 @@ var scanCommand = new Command17("scan").description("Scan codebase for env var r
       let totalMissing = 0;
       let totalVars = 0;
       for (const [appName, appConfig] of Object.entries(config.apps)) {
-        const appDir = join7(repoRoot, appConfig.path);
+        const appDir = join8(repoRoot, appConfig.path);
         try {
           await stat(appDir);
         } catch {
@@ -8612,7 +8796,7 @@ var scanCommand = new Command17("scan").description("Scan codebase for env var r
       }
       console.log();
     } else {
-      const scanRoot = context.app && config.apps?.[context.app] ? join7(repoRoot, config.apps[context.app].path) : cwd;
+      const scanRoot = context.app && config.apps?.[context.app] ? join8(repoRoot, config.apps[context.app].path) : cwd;
       const refs = await scanDir(scanRoot);
       if (refs.size === 0) {
         spinner.succeed(
@@ -8661,7 +8845,7 @@ var updateCommand = new Command18("update").description("Update ev to the latest
   const spinner = ora12("Checking for updates...").start();
   try {
     const latest = execSync2("npm view @rowlabs/ev version", { encoding: "utf-8" }).trim();
-    const current = "0.3.1";
+    const current = "0.4.0";
     if (current === latest) {
       spinner.succeed(chalk20.green(`Already on the latest version (${current})`));
       return;
@@ -8677,7 +8861,7 @@ var updateCommand = new Command18("update").description("Update ev to the latest
 
 // src/index.ts
 var program = new Command19();
-program.name("ev").description("Git for env vars \u2014 sync environment variables across teams securely").version("0.3.1");
+program.name("ev").description("Git for env vars \u2014 sync environment variables across teams securely").version("0.4.0");
 program.addCommand(loginCommand);
 program.addCommand(initCommand);
 program.addCommand(pushCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rowlabs/ev",
-	"version": "0.3.1",
+	"version": "0.4.0",
 	"description": "Git for env vars — sync environment variables across teams securely",
 	"type": "module",
 	"bin": {