envstash-cli 0.5.1 → 0.5.2

package/README.md

@@ -38,6 +38,7 @@ envs pull
 | `diff`    | Show which keys differ, and how                   |
 | `pull`    | Write the cloud's version of each file to disk    |
 | `push`    | Send local files to the cloud                     |
+| `remove`  | Delete files from the cloud (local copies stay)   |
 | `version` | Show the CLI version and its environment          |
 
 Run `envs help <command>` for details on any one of them.
@@ -111,6 +112,8 @@ definition and therefore has no undo:
   file are left alone, so pushing a partial `.env` cannot destroy a teammate's
   key. Use `--prune` when you do want the cloud to mirror local exactly.
 - **`diff` masks values.** Use `--show-values` to reveal them.
+- **`remove` needs every file named** — there is no "remove everything"
+  default — and it only touches the cloud copy; files on your machines stay.
 - Pulled files are written `0600`, and `~/.envstash/config.json` is `0600`
   inside a `0700` directory.
 
@@ -125,6 +128,7 @@ whichever repo needs them:
 ```bash
 envs push --shared .npmrc     # from any repo, once
 envs pull --shared .npmrc     # in every repo that needs it
+envs rm --shared .npmrc       # remove it from the cloud again
 ```
 
 `--shared` always needs the files named: discovery sweeps up a repo's own

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "envstash-cli",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Git-style CLI for EnvStash — keep your .env files in sync with your cloud account.",
   "keywords": [
     "env",

package/src/api.mjs

@@ -159,6 +159,12 @@ export const api = {
       token,
       body: { kind: 'file', contentBase64 },
     }),
+
+  deleteFile: (host, token, project, file) =>
+    request(host, `/api/cli/projects/${encodeURIComponent(project)}/files/${encodePath(file)}`, {
+      method: 'DELETE',
+      token,
+    }),
 }
 
 /** Encode each path segment but keep the "/" separators that address a nested file. */

package/src/commands/remove.mjs

@@ -0,0 +1,72 @@
+import { api, ApiError } from '../api.mjs'
+import { resolveContext, SHARED_SCOPE } from '../context.mjs'
+import { CliError, out, pluralize, style } from '../ui.mjs'
+
+/**
+ * `envs remove` (alias `rm`) — delete files from the cloud.
+ *
+ * Cloud-side only, and the report says so: the copies on this machine are not
+ * this command's to touch, which is also what makes it survivable — a removed
+ * file is one `envs push` away as long as a local copy exists.
+ *
+ * Names are always required. Every other sync command can fall back to
+ * discovery or the link file because acting on "everything tracked" is safe
+ * for a compare, a pull, or a push; for a delete it is the whole account's
+ * files gone on an empty invocation, so there is no default set.
+ *
+ * `--shared` targets the account-wide shared files instead of this repo's
+ * project, mirroring push and pull.
+ */
+export async function remove(flags, args) {
+  const shared = Boolean(flags.shared)
+
+  if (args.length === 0) {
+    throw new CliError('Name the files to remove.', {
+      hint: shared ? 'Example: envs rm --shared .npmrc' : 'Example: envs rm .env.local',
+    })
+  }
+
+  const context = resolveContext(flags)
+  const scope = shared ? SHARED_SCOPE : context.project.name
+
+  out()
+
+  let removed = 0
+
+  for (const name of [...new Set(args)].sort()) {
+    if (flags['dry-run']) {
+      out(`  ${style.dim('would remove')} ${name}`)
+      continue
+    }
+
+    try {
+      await api.deleteFile(context.host, context.token, scope, name)
+    } catch (error) {
+      // "Already gone" is a state, not a failure — the file the user wanted
+      // absent is absent. Say which it was and keep going.
+      if (error instanceof ApiError && error.status === 404) {
+        out(`  ${style.dim('=')} ${name} ${style.dim('not in the cloud — nothing to remove')}`)
+        continue
+      }
+
+      throw error
+    }
+
+    removed += 1
+    out(`  ${style.red('✗')} ${name} ${style.dim('removed')}`)
+  }
+
+  out()
+
+  if (!flags['dry-run'] && removed > 0) {
+    const source = shared ? 'your shared files' : context.project.name
+    out(
+      `  ${style.dim(
+        `Removed ${pluralize(removed, 'file')} from ${source}. Local copies are untouched.`
+      )}`
+    )
+    out()
+  }
+
+  return 0
+}

package/src/index.mjs

@@ -7,6 +7,7 @@ import { login, logout } from './commands/login.mjs'
 import { init, link, list, version as versionCommand, whoami } from './commands/misc.mjs'
 import { pull } from './commands/pull.mjs'
 import { push } from './commands/push.mjs'
+import { remove } from './commands/remove.mjs'
 import { status } from './commands/status.mjs'
 import { DEFAULT_HOST } from './config.mjs'
 import { CLI_ALIASES, CLI_COMMAND_PAD, CLI_COMMANDS, CLI_ENV_VARS } from './manifest.mjs'
@@ -33,6 +34,7 @@ const HANDLERS = {
   diff,
   pull,
   push,
+  remove,
   version: versionCommand,
 }
 
@@ -268,8 +270,10 @@ function printHelp(topic) {
     `    --json             ${style.dim('Machine-readable output (status, list, whoami, version)')}`
   )
   out(`    --exit-zero        ${style.dim('Always exit 0, even when out of sync (status, diff)')}`)
-  out(`    --dry-run          ${style.dim('Show what would happen (pull, push)')}`)
-  out(`    --shared           ${style.dim('Target your account-wide shared files (pull, push)')}`)
+  out(`    --dry-run          ${style.dim('Show what would happen (pull, push, remove)')}`)
+  out(
+    `    --shared           ${style.dim('Target your account-wide shared files (pull, push, remove)')}`
+  )
   out(`    --dev              ${style.dim('Log in to a local dev server if one is running')}`)
   out()
   out(
@@ -345,6 +349,17 @@ const COMMAND_HELP = {
     '  envs push --prune',
     '  envs push --shared .npmrc',
   ],
+  remove: [
+    'Delete files from the cloud. Copies on your machines are untouched, so a',
+    'removed file is one `envs push` away as long as a local copy exists.',
+    '',
+    'Names are always required — there is no "remove everything" default.',
+    'A name that is not in the cloud is reported and skipped, not an error.',
+    '',
+    '  envs rm .env.local',
+    '  envs rm --shared .npmrc',
+    '  envs rm --dry-run .env.local',
+  ],
   login: [
     'Authorize this machine using a browser device code.',
     '',

package/src/manifest.mjs

@@ -27,6 +27,7 @@ export const CLI_COMMANDS = [
   { name: 'diff', summary: 'Show which keys differ, and how' },
   { name: 'pull', summary: 'Write the cloud’s version of each file to disk' },
   { name: 'push', summary: 'Send local files to the cloud' },
+  { name: 'remove', summary: 'Delete files from the cloud (local copies stay)', aliases: ['rm'] },
   { name: 'version', summary: 'Show the CLI version and its environment' },
 ]