ctx-sync 1.0.0

package/dist/commands/env.js

@@ -0,0 +1,352 @@
+/**
+ * `ctx-sync env` command group.
+ *
+ * Subcommands:
+ *   - `env import <project> <file>` — Import from .env file
+ *   - `env add <project> <key>` — Add single var (hidden input / stdin)
+ *   - `env scan <project>` — Scan current shell environment
+ *   - `env list <project>` — List env vars (values hidden by default)
+ *
+ * Security:
+ *   - Secret values are NEVER accepted as CLI arguments.
+ *   - All env vars encrypted by default (encrypt-by-default).
+ *   - Values are never displayed in CLI output unless --show-values.
+ *
+ * @module commands/env
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { withErrorHandler } from '../utils/errors.js';
+import { STATE_FILES, DEFAULT_SAFE_LIST } from '@ctx-sync/shared';
+import { identityToRecipient } from 'age-encryption';
+import { loadKey } from '../core/key-store.js';
+import { commitState } from '../core/git-sync.js';
+import { getConfigDir, getSyncDir } from './init.js';
+import { parseEnvFile, importEnvVars, addEnvVar, listEnvVars, validateKeyArg, readValueFromStdin, shouldEncrypt, } from '../core/env-handler.js';
+/**
+ * Execute env import from a file or stdin.
+ */
+export async function executeEnvImport(options) {
+    const configDir = getConfigDir();
+    const syncDir = getSyncDir();
+    const privateKey = loadKey(configDir);
+    const publicKey = await identityToRecipient(privateKey);
+    let content;
+    if (options.stdin) {
+        content = await readValueFromStdin();
+    }
+    else if (options.file) {
+        const filePath = path.resolve(options.file);
+        if (!fs.existsSync(filePath)) {
+            throw new Error(`File not found: ${filePath}`);
+        }
+        content = fs.readFileSync(filePath, 'utf-8');
+    }
+    else {
+        throw new Error('Provide a file path or use --stdin.\n' +
+            'Usage: ctx-sync env import <project> <file>\n' +
+            '       cat .env | ctx-sync env import <project> --stdin');
+    }
+    const parsed = parseEnvFile(content);
+    if (parsed.length === 0) {
+        throw new Error('No environment variables found in input.');
+    }
+    // Count how many would be encrypted vs plain (informational)
+    let encryptedCount = 0;
+    let plainCount = 0;
+    for (const { key, value } of parsed) {
+        if (shouldEncrypt(key, value)) {
+            encryptedCount++;
+        }
+        else if (options.allowPlain) {
+            plainCount++;
+        }
+        else {
+            // Without --allow-plain, everything is encrypted
+            encryptedCount++;
+        }
+    }
+    // Import all vars (entire .age file is encrypted regardless)
+    const importedCount = await importEnvVars(options.project, parsed, syncDir, publicKey, privateKey);
+    // Commit
+    if (!options.noSync) {
+        await commitState(syncDir, [STATE_FILES.ENV_VARS, STATE_FILES.MANIFEST], `feat: import ${importedCount} env vars for ${options.project}`);
+    }
+    return { importedCount, encryptedCount, plainCount };
+}
+/**
+ * Execute env add (single variable).
+ */
+export async function executeEnvAdd(options) {
+    const configDir = getConfigDir();
+    const syncDir = getSyncDir();
+    const privateKey = loadKey(configDir);
+    const publicKey = await identityToRecipient(privateKey);
+    // Validate key does not contain embedded value
+    validateKeyArg(options.key);
+    let value;
+    if (options.value !== undefined) {
+        // Value provided programmatically (from hidden prompt or stdin)
+        value = options.value;
+    }
+    else if (options.stdin) {
+        value = await readValueFromStdin();
+    }
+    else {
+        throw new Error('A value is required.\n' +
+            'Use interactive prompt or --stdin to provide the value securely.');
+    }
+    await addEnvVar(options.project, options.key, value, syncDir, publicKey, privateKey);
+    // Commit
+    if (!options.noSync) {
+        await commitState(syncDir, [STATE_FILES.ENV_VARS, STATE_FILES.MANIFEST], `feat: add env var ${options.key} for ${options.project}`);
+    }
+}
+/**
+ * Scan the current shell environment for project-related variables.
+ *
+ * Heuristic: exclude common system vars and PATH-like variables.
+ * Returns candidates for user to select from.
+ */
+export function scanEnvironment() {
+    const systemVars = new Set([
+        'PATH', 'HOME', 'USER', 'LOGNAME', 'SHELL', 'TERM',
+        'TMPDIR', 'TEMP', 'TMP', 'LANG', 'LC_ALL', 'LC_CTYPE',
+        'DISPLAY', 'HOSTNAME', 'OLDPWD', 'PWD', 'SHLVL',
+        'COLORTERM', '_', 'TERM_PROGRAM', 'TERM_PROGRAM_VERSION',
+        'TERM_SESSION_ID', 'XPC_FLAGS', 'XPC_SERVICE_NAME',
+        'APPLE_TERMINAL_PROCESS_ID', 'SSH_AUTH_SOCK',
+        'SECURITYSESSIONID', 'LaunchInstanceID', 'ITERM_SESSION_ID',
+        'ITERM_PROFILE', 'COLORFGBG', 'ORIGINAL_XDG_CURRENT_DESKTOP',
+        'MallocNanoZone', '__CF_USER_TEXT_ENCODING', '__CFBundleIdentifier',
+        'COMMAND_MODE',
+        // Node/npm specific
+        'NVM_DIR', 'NVM_BIN', 'NVM_INC', 'NVM_CD_FLAGS',
+        'NODE_PATH', 'npm_config_prefix',
+        // Test environment
+        'CTX_SYNC_HOME', 'CTX_SYNC_TEST_MODE',
+        'GIT_TERMINAL_PROMPT',
+    ]);
+    const candidates = [];
+    for (const [key, value] of Object.entries(process.env)) {
+        if (!value)
+            continue;
+        if (systemVars.has(key))
+            continue;
+        // Skip PATH-like vars (contain multiple colon-separated paths)
+        if (value.includes(':') && value.includes('/') && value.split(':').length > 2)
+            continue;
+        // Heuristic: project-related if it looks like an app config var
+        const isProjectRelated = key.includes('_KEY') ||
+            key.includes('_SECRET') ||
+            key.includes('_TOKEN') ||
+            key.includes('_URL') ||
+            key.includes('_HOST') ||
+            key.includes('_PORT') ||
+            key.includes('_ENV') ||
+            key.includes('DATABASE') ||
+            key.includes('REDIS') ||
+            key.includes('API') ||
+            key.includes('AWS') ||
+            key.includes('STRIPE') ||
+            DEFAULT_SAFE_LIST.includes(key);
+        candidates.push({ key, value, isProjectRelated });
+    }
+    return candidates.sort((a, b) => {
+        // Project-related first, then alphabetical
+        if (a.isProjectRelated && !b.isProjectRelated)
+            return -1;
+        if (!a.isProjectRelated && b.isProjectRelated)
+            return 1;
+        return a.key.localeCompare(b.key);
+    });
+}
+/**
+ * Execute env scan — import selected vars from current environment.
+ */
+export async function executeEnvScan(options, selectedKeys) {
+    const configDir = getConfigDir();
+    const syncDir = getSyncDir();
+    const privateKey = loadKey(configDir);
+    const publicKey = await identityToRecipient(privateKey);
+    const vars = selectedKeys
+        .map((key) => ({
+        key,
+        value: process.env[key] ?? '',
+    }))
+        .filter((v) => v.value !== '');
+    if (vars.length === 0) {
+        return 0;
+    }
+    const count = await importEnvVars(options.project, vars, syncDir, publicKey, privateKey);
+    // Commit
+    if (!options.noSync) {
+        await commitState(syncDir, [STATE_FILES.ENV_VARS, STATE_FILES.MANIFEST], `feat: scan ${count} env vars for ${options.project}`);
+    }
+    return count;
+}
+/**
+ * Execute env list.
+ */
+export async function executeEnvList(options) {
+    const configDir = getConfigDir();
+    const syncDir = getSyncDir();
+    const privateKey = loadKey(configDir);
+    return listEnvVars(options.project, syncDir, privateKey, options.showValues ?? false);
+}
+/**
+ * Register the `env` command group on the given Commander program.
+ */
+export function registerEnvCommand(program) {
+    const env = program
+        .command('env')
+        .description('Manage environment variables (encrypted by default)');
+    // --- env import ---
+    env
+        .command('import <project> [file]')
+        .description('Import environment variables from a .env file')
+        .option('--stdin', 'Read .env content from stdin')
+        .option('--allow-plain', 'Store safe-listed keys as plaintext (not recommended)')
+        .option('--no-sync', 'Skip syncing to Git after import')
+        .action(withErrorHandler(async (project, file, opts) => {
+        const options = {
+            project,
+            file,
+            stdin: opts['stdin'],
+            allowPlain: opts['allowPlain'],
+            noSync: opts['sync'] === false,
+        };
+        const result = await executeEnvImport(options);
+        const chalk = (await import('chalk')).default;
+        console.log(chalk.green(`✅ Imported ${result.importedCount} env vars`) +
+            ` for ${project}`);
+        console.log(chalk.dim(`   🔐 All ${result.importedCount} encrypted (encrypt-by-default)`));
+        if (result.plainCount > 0) {
+            console.log(chalk.dim(`   💡 ${result.plainCount} on safe-list (still encrypted at file level)`));
+        }
+        console.log(chalk.dim('\n   State encrypted and saved to env-vars.age'));
+    }));
+    // --- env add ---
+    env
+        .command('add <project> <key>')
+        .description('Add a single environment variable (secure input)')
+        .option('--stdin', 'Read value from stdin')
+        .option('--from-fd <fd>', 'Read value from file descriptor')
+        .option('--no-sync', 'Skip syncing to Git')
+        .action(withErrorHandler(async (project, key, opts) => {
+        const addOptions = {
+            project,
+            key,
+            stdin: opts['stdin'],
+            fromFd: opts['fromFd'] !== undefined ? Number(opts['fromFd']) : undefined,
+            noSync: opts['sync'] === false,
+        };
+        // Validate key does not contain embedded value (security check)
+        validateKeyArg(key);
+        if (addOptions.stdin) {
+            // Read from stdin
+            addOptions.value = await readValueFromStdin();
+        }
+        else if (addOptions.fromFd !== undefined) {
+            // Read from file descriptor
+            try {
+                const fd = fs.openSync(`/dev/fd/${addOptions.fromFd}`, 'r');
+                const buffer = Buffer.alloc(65536);
+                const bytesRead = fs.readSync(fd, buffer, 0, buffer.length, null);
+                fs.closeSync(fd);
+                addOptions.value = buffer.slice(0, bytesRead).toString('utf-8').trim();
+            }
+            catch {
+                throw new Error(`Failed to read from file descriptor ${addOptions.fromFd}.\n` +
+                    `Usage: ctx-sync env add ${project} ${key} --from-fd 3 3< <(pass show key)`);
+            }
+        }
+        else {
+            // Interactive prompt with hidden input
+            const Enquirer = (await import('enquirer')).default;
+            const enquirer = new Enquirer();
+            const response = await enquirer.prompt({
+                type: 'password',
+                name: 'value',
+                message: `Enter value for ${key}:`,
+            });
+            addOptions.value = response.value;
+        }
+        await executeEnvAdd(addOptions);
+        const chalk = (await import('chalk')).default;
+        console.log(chalk.green(`✅ Added ${key}`) + ` for ${project}`);
+        console.log(chalk.dim('   🔐 Encrypted and saved'));
+    }));
+    // --- env scan ---
+    env
+        .command('scan <project>')
+        .description('Scan current shell environment for project-related variables')
+        .option('--no-sync', 'Skip syncing to Git')
+        .action(withErrorHandler(async (project, opts) => {
+        const candidates = scanEnvironment();
+        if (candidates.length === 0) {
+            console.log('No environment variables found to scan.');
+            return;
+        }
+        const projectRelated = candidates.filter((c) => c.isProjectRelated);
+        const chalk = (await import('chalk')).default;
+        console.log(chalk.bold(`Found ${candidates.length} env vars. `) +
+            chalk.dim(`(${projectRelated.length} appear project-related)`));
+        // In non-interactive mode, import project-related vars
+        const isNonInteractive = process.env['CTX_SYNC_TEST_MODE'] === 'true';
+        let selectedKeys;
+        if (isNonInteractive) {
+            selectedKeys = projectRelated.map((c) => c.key);
+        }
+        else {
+            // Interactive selection
+            const Enquirer = (await import('enquirer')).default;
+            const enquirer = new Enquirer();
+            const response = await enquirer.prompt({
+                type: 'multiselect',
+                name: 'selectedKeys',
+                message: 'Select variables to import:',
+                choices: candidates.map((c) => ({
+                    name: c.key,
+                    value: c.key,
+                    hint: c.isProjectRelated ? '(project-related)' : '',
+                })),
+                initial: projectRelated.map((c) => c.key),
+            });
+            selectedKeys = response.selectedKeys;
+        }
+        if (selectedKeys.length === 0) {
+            console.log('No variables selected.');
+            return;
+        }
+        const count = await executeEnvScan({ project, noSync: opts['sync'] === false }, selectedKeys);
+        console.log(chalk.green(`✅ Imported ${count} env vars`) + ` for ${project}`);
+        console.log(chalk.dim('   🔐 All encrypted (encrypt-by-default)'));
+    }));
+    // --- env list ---
+    env
+        .command('list <project>')
+        .description('List environment variables for a project')
+        .option('--show-values', 'Show decrypted values (use with caution)')
+        .action(withErrorHandler(async (project, opts) => {
+        const showValues = opts['showValues'];
+        const vars = await executeEnvList({ project, showValues });
+        if (vars.length === 0) {
+            console.log(`No environment variables for project "${project}".`);
+            console.log('\nImport from a .env file:');
+            console.log(`  $ ctx-sync env import ${project} .env`);
+            return;
+        }
+        const chalk = (await import('chalk')).default;
+        if (showValues) {
+            console.log(chalk.yellow('⚠️  Showing decrypted values — be careful with screen sharing!\n'));
+        }
+        console.log(chalk.bold(`Environment variables for ${project} (${vars.length}):\n`));
+        for (const v of vars) {
+            const added = new Date(v.addedAt);
+            console.log(`  ${chalk.cyan(v.key)} = ${v.value}`);
+            console.log(chalk.dim(`     Added: ${added.toLocaleDateString()} ${added.toLocaleTimeString()}`));
+        }
+    }));
+}
+//# sourceMappingURL=env.js.map

package/dist/commands/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/commands/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAsBhC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAyB;IAEzB,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAExD,IAAI,OAAe,CAAC;IAEpB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACvC,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,uCAAuC;YACrC,+CAA+C;YAC/C,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAErC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,6DAA6D;IAC7D,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;QACpC,IAAI,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9B,cAAc,EAAE,CAAC;QACnB,CAAC;aAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAC9B,UAAU,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,iDAAiD;YACjD,cAAc,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,aAAa,GAAG,MAAM,aAAa,CACvC,OAAO,CAAC,OAAO,EACf,MAAM,EACN,OAAO,EACP,SAAS,EACT,UAAU,CACX,CAAC;IAEF,SAAS;IACT,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,WAAW,CACf,OAAO,EACP,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,EAC5C,gBAAgB,aAAa,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AACvD,CAAC;AAaD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA2C;IAE3C,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAExD,+CAA+C;IAC/C,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5B,IAAI,KAAa,CAAC;IAElB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,gEAAgE;QAChE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACxB,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,wBAAwB;YACtB,kEAAkE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,CACb,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,GAAG,EACX,KAAK,EACL,OAAO,EACP,SAAS,EACT,UAAU,CACX,CAAC;IAEF,SAAS;IACT,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,WAAW,CACf,OAAO,EACP,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,EAC5C,qBAAqB,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC,OAAO,EAAE,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAiBD;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM;QAClD,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;QACrD,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;QAC/C,WAAW,EAAE,GAAG,EAAE,cAAc,EAAE,sBAAsB;QACxD,iBAAiB,EAAE,WAAW,EAAE,kBAAkB;QAClD,2BAA2B,EAAE,eAAe;QAC5C,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB;QAC3D,eAAe,EAAE,WAAW,EAAE,8BAA8B;QAC5D,gBAAgB,EAAE,yBAAyB,EAAE,sBAAsB;QACnE,cAAc;QACd,oBAAoB;QACpB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc;QAC/C,WAAW,EAAE,mBAAmB;QAChC,mBAAmB;QACnB,eAAe,EAAE,oBAAoB;QACrC,qBAAqB;KACtB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAuB,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,+DAA+D;QAC/D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAExF,gEAAgE;QAChE,MAAM,gBAAgB,GACpB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtB,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAElC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC9B,2CAA2C;QAC3C,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAuB,EACvB,YAAsB;IAEtB,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAExD,MAAM,IAAI,GAAG,YAAY;SACtB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,GAAG;QACH,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;KAC9B,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAEjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,OAAO,CAAC,OAAO,EACf,IAAI,EACJ,OAAO,EACP,SAAS,EACT,UAAU,CACX,CAAC;IAEF,SAAS;IACT,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,WAAW,CACf,OAAO,EACP,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,EAC5C,cAAc,KAAK,iBAAiB,OAAO,CAAC,OAAO,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAUD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEtC,OAAO,WAAW,CAChB,OAAO,CAAC,OAAO,EACf,OAAO,EACP,UAAU,EACV,OAAO,CAAC,UAAU,IAAI,KAAK,CAC5B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,qDAAqD,CAAC,CAAC;IAEtE,qBAAqB;IACrB,GAAG;SACA,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,SAAS,EAAE,8BAA8B,CAAC;SACjD,MAAM,CAAC,eAAe,EAAE,uDAAuD,CAAC;SAChF,MAAM,CAAC,WAAW,EAAE,kCAAkC,CAAC;SACvD,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAe,EAAE,IAAwB,EAAE,IAA6B,EAAE,EAAE;QAC1G,MAAM,OAAO,GAAqB;YAC9B,OAAO;YACP,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,OAAO,CAAwB;YAC3C,UAAU,EAAE,IAAI,CAAC,YAAY,CAAwB;YACrD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK;SAC/B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,aAAa,WAAW,CAAC;YACxD,QAAQ,OAAO,EAAE,CACpB,CAAC;QACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,aAAa,iCAAiC,CAAC,CAC9E,CAAC;QAEF,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,SAAS,MAAM,CAAC,UAAU,+CAA+C,CAC1E,CACF,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC,CAAC;IAEN,kBAAkB;IAClB,GAAG;SACA,OAAO,CAAC,qBAAqB,CAAC;SAC9B,WAAW,CAAC,kDAAkD,CAAC;SAC/D,MAAM,CAAC,SAAS,EAAE,uBAAuB,CAAC;SAC1C,MAAM,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;SAC3D,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC;SAC1C,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAe,EAAE,GAAW,EAAE,IAA6B,EAAE,EAAE;QAC7F,MAAM,UAAU,GAAuC;YACnD,OAAO;YACP,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,OAAO,CAAwB;YAC3C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACzE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK;SAC/B,CAAC;QAEF,gEAAgE;QAChE,cAAc,CAAC,GAAG,CAAC,CAAC;QAEpB,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,kBAAkB;YAClB,UAAU,CAAC,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAChD,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3C,4BAA4B;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,UAAU,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAClE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjB,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,uCAAuC,UAAU,CAAC,MAAM,KAAK;oBAC3D,2BAA2B,OAAO,IAAI,GAAG,kCAAkC,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uCAAuC;YACvC,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAqB,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACrC,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,mBAAmB,GAAG,GAAG;aACnC,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACpC,CAAC;QAED,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAEhC,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,QAAQ,OAAO,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC,CAAC;IAEN,mBAAmB;IACnB,GAAG;SACA,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC;SAC1C,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA6B,EAAE,EAAE;QAChF,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;QAEnC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,MAAM,aAAa,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,0BAA0B,CAAC,CACjE,CAAC;QAEF,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,CAAC;QACtE,IAAI,YAAsB,CAAC;QAE3B,IAAI,gBAAgB,EAAE,CAAC;YACrB,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,wBAAwB;YACxB,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAA8B,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACrC,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,6BAA6B;gBACtC,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,IAAI,EAAE,CAAC,CAAC,GAAG;oBACX,KAAK,EAAE,CAAC,CAAC,GAAG;oBACZ,IAAI,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE;iBACpD,CAAC,CAAC;gBACH,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;aACD,CAAC,CAAC;YAC5C,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;QACvC,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAChC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,EAC3C,YAAY,CACb,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,WAAW,CAAC,GAAG,QAAQ,OAAO,EAAE,CAChE,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC,CAAC;IAEN,mBAAmB;IACnB,GAAG;SACA,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;SACnE,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAe,EAAE,IAA6B,EAAE,EAAE;QAChF,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAwB,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAE3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,yCAAyC,OAAO,IAAI,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,OAAO,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAE9C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,kEAAkE,CAAC,CACjF,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,6BAA6B,OAAO,KAAK,IAAI,CAAC,MAAM,MAAM,CAAC,CACvE,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,kBAAkB,EAAE,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CACrF,CAAC;QACJ,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,89 @@
+/**
+ * `ctx-sync init` command.
+ *
+ * Handles first-time setup (key generation, Git repo init, remote config)
+ * and `--restore` flow (key restoration, repo clone, state decryption).
+ *
+ * @module commands/init
+ */
+import type { Command } from 'commander';
+import type { Manifest } from '@ctx-sync/shared';
+/** Options for the init command */
+export interface InitOptions {
+    restore?: boolean;
+    noInteractive?: boolean;
+    skipBackup?: boolean;
+    remote?: string;
+    stdin?: boolean;
+}
+/** Result of a fresh init */
+export interface InitResult {
+    publicKey: string;
+    configDir: string;
+    syncDir: string;
+    remoteUrl?: string;
+    manifestCreated: boolean;
+}
+/** Result of a restore init */
+export interface RestoreResult {
+    configDir: string;
+    syncDir: string;
+    remoteUrl?: string;
+    projectCount: number;
+    projectNames: string[];
+}
+/**
+ * Get the config directory path.
+ * Uses CTX_SYNC_HOME env var for testing, otherwise ~/.config/ctx-sync.
+ */
+export declare function getConfigDir(): string;
+/**
+ * Get the sync directory path.
+ * Uses CTX_SYNC_HOME env var for testing, otherwise ~/.context-sync.
+ */
+export declare function getSyncDir(): string;
+/**
+ * Create the initial manifest.json in the sync directory.
+ *
+ * The manifest is the only plaintext file in the sync repo.
+ * It contains only version and timestamps — no sensitive data.
+ */
+export declare function createManifest(syncDir: string): Manifest;
+/**
+ * Execute the fresh init flow.
+ *
+ * 1. Generate Age key pair.
+ * 2. Save private key to config dir (0o600).
+ * 3. Display public key.
+ * 4. Handle backup (skip in --no-interactive).
+ * 5. Prompt for Git remote URL (or use --remote).
+ * 6. Validate remote URL.
+ * 7. Initialize sync Git repo.
+ * 8. Add remote.
+ * 9. Create manifest.json.
+ * 10. Commit and push.
+ */
+export declare function executeInit(options: InitOptions): Promise<InitResult>;
+/**
+ * Execute the restore flow.
+ *
+ * 1. Accept private key (from --stdin or prompt).
+ * 2. Save key with 0o600 permissions.
+ * 3. Prompt for Git remote URL (or use --remote).
+ * 4. Validate remote URL.
+ * 5. Clone the sync repo to ~/.context-sync/.
+ * 6. Decrypt manifest, list found projects.
+ * 7. Print summary.
+ */
+export declare function executeRestore(options: InitOptions & {
+    key?: string;
+}): Promise<RestoreResult>;
+/**
+ * Read key from stdin (for piped input).
+ */
+export declare function readKeyFromStdin(): Promise<string>;
+/**
+ * Register the `init` command on the given Commander program.
+ */
+export declare function registerInitCommand(program: Command): void;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAQjD,mCAAmC;AACnC,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,6BAA6B;AAC7B,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,+BAA+B;AAC/B,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAGnC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAWxD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAwC3E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,WAAW,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC,aAAa,CAAC,CA4ExB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,CAkBlD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyF1D"}