oche-cli 0.3.0 → 0.4.0

package/README.md

@@ -33,7 +33,7 @@ oche logs --stage prod            # the running container's log: why it's crash-
 oche logs --stage prod --failures # just the errors and the tail
 oche logs --app api --build       # the build log of the latest deployment instead
 oche deployments                  # recent deployments per app: status, commit, how long, when
-oche envs                         # which stages define each variable (names only)
+oche envs                         # which stages define each variable, and which are empty (names only)
 oche envs --stage prod --key DATABASE_URL
 oche deploy --stage staging       # redeploy (--force rebuilds without the cache); asks first
 oche rollback --app api           # the images Coolify can go back to
@@ -44,7 +44,14 @@ oche preflight --to prod          # missing variables, and whether staging is he
 
 Each one picks the app with `--app <name>` (or the start of its uuid) or `--stage prod|staging|dev`; with one app it needs neither, and with several it says which ones there are. `oche deploy` and `oche rollback` ask before they act unless you pass `-y`.
 
-`oche envs` never prints values. The server compares names, and whether staging and production hold the same value, and sends only that. Log lines Coolify marks as holding secrets are left out too.
+`oche envs` marks each variable per stage: `✓` set, `∅` defined but empty, `·` not defined, `-` no app on that stage. A `∅` is counted as a problem, not a note: the key is there, so nothing complains, and the app reads it and gets nothing.
+
+```
+  VARIABLE          dev  staging  prod
+  TURNSTILE_SECRET  ∅    ∅        ∅     defined but empty
+```
+
+`oche envs` never prints values. The server compares names, whether each key holds anything at all, and whether staging and production hold the same value, and sends only that. Log lines Coolify marks as holding secrets are left out too.
 
 ## Without a server: `oche pr`
 

package/dist/index.js

@@ -3371,7 +3371,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "oche-cli",
-  version: "0.3.0",
+  version: "0.4.0",
   description: "Command-line client for Oche: promote dev \u2192 staging \u2192 main from your terminal.",
   license: "MIT",
   repository: {
@@ -3880,9 +3880,16 @@ ${data.instance.url}`));
 var ISSUE_LABEL = {
   "missing-in-prod": "missing in production",
   "missing-in-staging": "missing in staging",
+  "empty-value": "defined but empty",
   "same-secret": "same value in staging and production"
 };
-var issueText = (issue) => issue === null ? "" : issue === "missing-in-prod" ? c.red(ISSUE_LABEL[issue]) : c.yellow(ISSUE_LABEL[issue]);
+var issueText = (issue) => issue === null ? "" : issue === "missing-in-prod" || issue === "empty-value" ? c.red(ISSUE_LABEL[issue]) : c.yellow(ISSUE_LABEL[issue]);
+function legend() {
+  const set = `${c.green("\u2713")} ${c.dim("set")}`;
+  const empty = `${c.red("\u2205")} ${c.dim("defined but empty, so the app sees nothing")}`;
+  const absent = `${c.red("\xB7")} ${c.dim("not defined")}`;
+  return `${set}  ${empty}  ${absent}  ${c.dim("-  no app on that stage")}`;
+}
 async function envsCommand(getClient, repoArg, opts) {
   const repo = await resolveRepo(repoArg);
   const { groups } = await (await getClient()).envs(repo);
@@ -3896,32 +3903,36 @@ async function envsCommand(getClient, repoArg, opts) {
   }
   kept.forEach((g, i) => {
     if (i) print();
-    printGroup(g, opts.stage, !key);
+    envGroupLines(g, opts.stage, !key).forEach((l) => print(l));
   });
-  print(c.dim("\nOche compares names, and whether staging and production hold the same value. It never shows values."));
+  print(`
+${legend()}`);
+  print(c.dim("Oche compares names, and whether staging and production hold the same value. It never shows values."));
 }
-function printGroup(group, only, totals) {
+function envGroupLines(group, only, totals) {
   const stages = STAGES.filter((s) => group.apps[s] && (!only || s === only));
   const where = stages.map((s) => `${s}: ${group.apps[s].name}`).join(" \xB7 ");
-  print(`${c.bold(group.label)}  ${c.dim(where)}`);
   const header = [["VARIABLE", c.dim("VARIABLE")], ...stages.map((s) => [s, c.dim(s)]), ""];
   const rows = group.rows.map((r) => [
     r.key,
     ...stages.map((s) => {
       if (r.present[s] === void 0) return ["-", c.dim("-")];
-      return r.present[s] ? ["\u2713", c.green("\u2713")] : ["\xB7", c.red("\xB7")];
+      if (!r.present[s]) return ["\xB7", c.red("\xB7")];
+      return r.hasValue?.[s] === false ? ["\u2205", c.red("\u2205")] : ["\u2713", c.green("\u2713")];
     }),
     issueText(r.issue)
   ]);
-  columns([header, ...rows]).forEach((l) => print(l));
-  if (!totals) return;
-  const { missingInProd, missingInStaging, sameSecret } = group.counts;
+  const lines = [`${c.bold(group.label)}  ${c.dim(where)}`, ...columns([header, ...rows])];
+  if (!totals) return lines;
+  const { missingInProd, missingInStaging, emptyValue, sameSecret } = group.counts;
   const issues = [
+    emptyValue ? c.red(`${emptyValue} defined but empty`) : "",
     missingInProd ? c.red(`${missingInProd} missing in production`) : "",
     missingInStaging ? c.yellow(`${missingInStaging} missing in staging`) : "",
     sameSecret ? c.yellow(`${sameSecret} shared with staging`) : ""
   ].filter(Boolean);
-  print(issues.length ? `  ${issues.join(c.dim(" \xB7 "))}` : c.dim("  in step across environments"));
+  lines.push(issues.length ? `  ${issues.join(c.dim(" \xB7 "))}` : c.dim("  in step across environments"));
+  return lines;
 }
 async function deployCommand(getClient, repoArg, opts) {
   const repo = await resolveRepo(repoArg);
@@ -5276,7 +5287,7 @@ function buildProgram() {
   const npm = program2.command("npm").description("Publish this package to npm on every release");
   npm.command("setup").description("Add the publish workflow and let npm trust it (uses your npm login)").argument(repoArg, repoHelp).option("-y, --yes", "don't ask for confirmation").option("--keep-existing", "keep a workflow that already publishes to npm instead of replacing it").option("--skip-pr", "only do the npm side; don't open the workflow PR").action((repo, opts) => npmSetupCommand(client, repo, opts));
   npm.command("status", { isDefault: true }).description("Publishing setup, the npm version and the last run").argument(repoArg, repoHelp).option("--json", "print raw JSON").action((repo, opts) => npmStatusCommand(client, repo, opts));
-  program2.command("envs").description("Which stages define each environment variable (names only, never values)").argument(repoArg, repoHelp).addOption(stageOption("only this stage's column")).option("--key <name>", "only variables whose name contains this").option("--json", "print raw JSON").action((repo, opts) => envsCommand(client, repo, opts));
+  program2.command("envs").description("Which stages define each environment variable, and which are defined but empty (names only, never values)").argument(repoArg, repoHelp).addOption(stageOption("only this stage's column")).option("--key <name>", "only variables whose name contains this").option("--json", "print raw JSON").action((repo, opts) => envsCommand(client, repo, opts));
   program2.command("deploy").description("Redeploy an app on Coolify").argument(repoArg, repoHelp).addOption(appOption).addOption(stageOption("the app deploying this stage")).option("--force", "rebuild without the build cache").option("-y, --yes", "don't ask for confirmation").option("--json", "print raw JSON").action((repo, opts) => deployCommand(client, repo, opts));
   program2.command("rollback").description("List the images Coolify can roll an app back to, and roll back to one").argument(repoArg, repoHelp).addOption(appOption).addOption(stageOption("the app deploying this stage")).option("--to <commit>", "roll back to this image (a commit SHA from the list)").option("-y, --yes", "don't ask for confirmation").option("--json", "print raw JSON").action((repo, opts) => rollbackCommand(client, repo, opts));
   program2.command("explain").description("Ask your Oche server's AI what broke a deployment").argument(repoArg, repoHelp).addOption(appOption).addOption(stageOption("the app deploying this stage")).option("--deployment <uuid>", "explain this deployment (default: the latest failed one)").option("--json", "print raw JSON").action((repo, opts) => explainCommand(client, repo, opts));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oche-cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Command-line client for Oche: promote dev → staging → main from your terminal.",
   "license": "MIT",
   "repository": {