veylix-cli 1.2.2 → 1.4.0

package/README.md

@@ -93,9 +93,10 @@ veylix pull > .env              # or write a .env file
 | `veylix envs` | List the environments of the current project |
 | `veylix pull [--format dotenv\|json\|shell] [--output <file>]` | Print or save variables |
 | `veylix run -- <command> [args…]` | Run a command with the variables injected |
-| `veylix push [--file .env] [--replace]` | Upload a `.env` file (needs a read-write token) |
+| `veylix push [--file .env] [--replace] [--dry-run] [--yes]` | Upload a `.env` file (needs a read-write token). Shows the changes first and asks before deleting anything |
 | `veylix set KEY=value [KEY2=value…]` | Create or update variables |
 | `veylix unset KEY` | Delete a variable |
+| `veylix diff <env> <other-env> [--all] [--fail-on-missing]` | Compare two environments: keys missing on either side (names only) |
 | `veylix help` / `veylix --version` | Show help or the version |
 
 Every command accepts `--project <name|id>` and `--env <name>` to override the folder link.
@@ -116,7 +117,11 @@ eval "$(veylix pull --format shell)"
 veylix pull --output .env.local
 
 # Sync a local .env up to Veylix; --replace also deletes keys missing from the file
-veylix push --file .env.production --env production --replace
+veylix push --file .env.production --env production --replace --dry-run   # preview only
+veylix push --file .env.production --env production --replace             # asks before deleting
+
+# Find keys missing from production (exit 1 in CI if any)
+veylix diff development production --fail-on-missing
 
 # Quick edits
 veylix set STRIPE_KEY=sk_live_… FEATURE_FLAG=true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veylix-cli",
-  "version": "1.2.2",
+  "version": "1.4.0",
   "description": "Veylix CLI: pull, inject and sync environment variables from Veylix into your apps, shells and CI pipelines. Zero dependencies.",
   "keywords": [
     "veylix",

package/veylix.mjs

@@ -8,7 +8,7 @@ import { homedir } from "node:os";
 import { dirname, join, relative } from "node:path";
 import { createInterface } from "node:readline/promises";
 
-const VERSION = "1.2.2";
+const VERSION = "1.4.0";
 const DEFAULT_URL = "https://veylix-omega.vercel.app";
 const CONFIG_PATH = join(process.env.XDG_CONFIG_HOME || join(homedir(), ".config"), "veylix", "config.json");
 // Per-folder project/environment choice (no secrets, safe to commit).
@@ -27,10 +27,14 @@ Usage:
   veylix envs                         List environments of the project with variable counts
   veylix pull [--format dotenv|json|shell] [--output <file>]
   veylix run -- <command> [args…]     Run a command with the variables injected
-  veylix push [--file .env] [--replace]
-                                      Upload a .env file (read-write token)
+  veylix push [--file .env] [--replace] [--dry-run] [--yes]
+                                      Upload a .env file (read-write token). Shows what will
+                                      change first; --replace also deletes keys missing from
+                                      the file and asks before deleting (--yes skips the question)
   veylix set KEY=value [KEY2=value…]
   veylix unset KEY
+  veylix diff <env> <other-env> [--all] [--fail-on-missing]
+                                      Compare two environments (key names only, never values)
 
   Every command accepts --project <name> and --env <name> to override the link.
 
@@ -65,6 +69,7 @@ function parseArgs(argv) {
       else if (argv[i + 1] && !argv[i + 1].startsWith("--")) flags[key] = argv[++i];
       else flags[key] = true;
     } else if (a === "-h") flags.help = true;
+    else if (a === "-y") flags.yes = true;
     else positional.push(a);
   }
   return { command: positional[0], args: positional.slice(1), flags, rest };
@@ -213,6 +218,41 @@ function fail(msg) {
   process.exit(1);
 }
 
+// ---------- push preview ----------
+
+/** What a push would do: keys added, changed, deleted (only with replace) and left unchanged. */
+function diffSecrets(current, incoming, replace) {
+  const plan = { added: [], changed: [], deleted: [], unchanged: 0 };
+  for (const [key, value] of Object.entries(incoming)) {
+    if (!(key in current)) plan.added.push(key);
+    else if (current[key] !== value) plan.changed.push(key);
+    else plan.unchanged++;
+  }
+  if (replace) plan.deleted = Object.keys(current).filter((key) => !(key in incoming));
+  return plan;
+}
+
+function printPlan(plan) {
+  const width = Math.max(0, ...[...plan.added, ...plan.changed, ...plan.deleted].map((k) => k.length));
+  for (const key of plan.added) info(`  ${c(32, "+")} ${key.padEnd(width)}  ${c(2, "new")}`);
+  for (const key of plan.changed) info(`  ${c(33, "~")} ${key.padEnd(width)}  ${c(2, "changed")}`);
+  for (const key of plan.deleted) info(`  ${c(31, "-")} ${key.padEnd(width)}  ${c(31, "will be DELETED")}`);
+  if (plan.unchanged) info(c(2, `  ${plan.unchanged} unchanged`));
+}
+
+/** Yes/no question on stderr; anything but y/yes counts as no. */
+async function confirm(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    return /^y(es)?$/i.test((await rl.question(`${question} [y/N] `)).trim());
+  } catch (e) {
+    if (e.name === "AbortError") return false;
+    throw e;
+  } finally {
+    rl.close();
+  }
+}
+
 // ---------- commands ----------
 
 const commands = {
@@ -328,10 +368,58 @@ const commands = {
     if (!existsSync(file)) fail(`File not found: ${file}`);
     const secrets = parseDotenv(readFileSync(file, "utf8"));
     if (!Object.keys(secrets).length) fail(`No KEY=value lines found in ${file}`);
-    const res = JSON.parse(await api(flags, "/api/v1/secrets", { method: "PUT", body: JSON.stringify({ ...target(flags), secrets, replace: !!flags.replace }) }));
+    const replace = !!flags.replace;
+
+    // Preview what will change before writing anything (key names only, never values).
+    const current = await fetchSecrets(flags);
+    const plan = diffSecrets(current.secrets, secrets, replace);
+    info(`${c(1, where(current))} ${c(2, `(from ${file})`)}`);
+    printPlan(plan);
+    if (!plan.added.length && !plan.changed.length && !plan.deleted.length) return success("Already up to date. Nothing to push.");
+    if (flags["dry-run"]) return info(c(2, "Dry run: nothing was changed."));
+
+    if (plan.deleted.length && !flags.yes) {
+      const n = plan.deleted.length;
+      const warning = `${n} key${n === 1 ? "" : "s"} will be permanently deleted.`;
+      if (!process.stdin.isTTY) fail(`${warning} Re-run with --yes to confirm (or --dry-run to preview).`);
+      info(c(33, `⚠ ${warning}`));
+      if (!(await confirm("Continue?"))) fail("Cancelled. Nothing was changed.");
+    }
+
+    const res = JSON.parse(await api(flags, "/api/v1/secrets", { method: "PUT", body: JSON.stringify({ ...target(flags), secrets, replace }) }));
     success(`${where(res)}: ${res.created} created, ${res.updated} updated${res.deleted ? `, ${res.deleted} deleted` : ""}`);
   },
 
+  async diff(args, flags) {
+    const linked = target(flags).env;
+    const [envA, envB] = args.length >= 2 ? args : [linked, args[0]];
+    if (!envA || !envB) fail("Usage: veylix diff <env> <other-env>   (or `veylix diff <other-env>` in a linked folder)");
+    const [a, b] = await Promise.all([fetchSecrets({ ...flags, env: envA }), fetchSecrets({ ...flags, env: envB })]);
+    const keys = [...new Set([...Object.keys(a.secrets), ...Object.keys(b.secrets)])].sort();
+    const missing = [];
+    let different = 0;
+    let same = 0;
+    const width = Math.max(0, ...keys.map((k) => k.length));
+    info(`${c(1, `${a.project} › ${a.environment}`)} ↔ ${c(1, b.environment)}`);
+    for (const key of keys) {
+      if (!(key in b.secrets)) {
+        missing.push(key);
+        info(`  ${c(31, "-")} ${key.padEnd(width)}  ${c(31, `missing in ${b.environment}`)}`);
+      } else if (!(key in a.secrets)) {
+        missing.push(key);
+        info(`  ${c(31, "-")} ${key.padEnd(width)}  ${c(31, `missing in ${a.environment}`)}`);
+      } else if (a.secrets[key] !== b.secrets[key]) {
+        different++;
+        if (flags.all) info(`  ${c(33, "~")} ${key.padEnd(width)}  ${c(2, "different")}`);
+      } else {
+        same++;
+        if (flags.all) info(`  ${c(2, "=")} ${key.padEnd(width)}  ${c(2, "same value")}`);
+      }
+    }
+    info(c(2, `  ${missing.length} missing · ${different} different · ${same} same${flags.all ? "" : "  (--all lists every key)"}`));
+    if (missing.length && flags["fail-on-missing"]) process.exit(1);
+  },
+
   async set(args, flags) {
     const pairs = args.map((a) => a.match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/s));
     if (!pairs.length || pairs.some((p) => !p)) fail("Usage: veylix set KEY=value [KEY2=value…]");