keepassxc-cli 0.2.0__tar.gz → 1.0.0__tar.gz

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/.gitignore

@@ -205,3 +205,4 @@ cython_debug/
 marimo/_static/
 marimo/_lsp/
 __marimo__/
+.DS_Store

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/CLAUDE.md

@@ -4,7 +4,7 @@ This document provides context for AI assistants working on this project.
 
 ## Project Purpose
 
-`keepassxc-cli` is a Python command-line tool that communicates with a running KeePassXC instance using the KeePassXC Browser Extension protocol (native messaging over a Unix socket). It enables terminal users to interact with KeePassXC — listing, searching, adding, editing, and deleting entries — while leveraging KeePassXC's biometric (TouchID/fingerprint) unlock support.
+`keepassxc-cli` is a Python command-line tool that communicates with a running KeePassXC instance using the KeePassXC Browser Extension protocol (native messaging over a Unix socket). It enables terminal users to interact with KeePassXC — adding, editing, and deleting entries — while leveraging KeePassXC's biometric (TouchID/fingerprint) unlock support.
 
 ## Package Structure
 
@@ -13,20 +13,17 @@ keepassxc_cli/
 ├── __init__.py          # empty (just from __future__ import annotations)
 ├── __main__.py          # CLI entry point; argument parsing; dispatches to commands
 ├── config.py            # CliConfig dataclass; save/load ~/.keepassxc/cli.json
-├── output.py            # Output formatting: table, json, tsv
+├── output.py            # Output formatting: table, json
 └── commands/
     ├── __init__.py      # empty
     ├── setup.py         # associate with KeePassXC
     ├── status.py        # show connection/association status
     ├── show.py          # show entries by URL
-    ├── search.py        # search all entries
-    ├── ls.py            # list entries or groups
     ├── add.py           # add new entry
     ├── edit.py          # edit existing entry by UUID
     ├── rm.py            # delete entry by UUID
     ├── totp.py          # get TOTP code
     ├── clip.py          # copy field to clipboard
-    ├── generate.py      # generate password
     ├── lock.py          # lock database
     └── mkdir.py         # create group
 
@@ -103,6 +100,7 @@ ruff check --ignore=E501 --exclude=__init__.py ./keepassxc_cli
 - **Config permissions**: Config files are written with `0o600` (owner read/write only).
 - **Venv**: Always use `.venv` for development.
 - **Python ≥ 3.10** required.
+- **Password visibility**: `show` omits password and TOTP entirely when `-p` is not passed (no masking).
 
 ## Config Files
 
@@ -113,4 +111,4 @@ ruff check --ignore=E501 --exclude=__init__.py ./keepassxc_cli
 
 ## Output Formats
 
-Three formats are supported everywhere: `table` (default), `json`, `tsv`. The `--format` global flag or `default_format` in `cli.json` controls the default.
+Two formats are supported: `table` (default) and `json`. The `-j / --json` flag on individual subcommands or `default_format` in `cli.json` controls the default.

{keepassxc_cli-0.2.0/keepassxc_cli.egg-info → keepassxc_cli-1.0.0}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: keepassxc-cli
-Version: 0.2.0
+Version: 1.0.0
 Summary: CLI for KeePassXC using the browser extension protocol with biometric unlock
 License-Expression: MIT
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: keepassxc-browser-api==0.1.3
+Requires-Dist: keepassxc-browser-api==1.0.0
 Requires-Dist: pyperclip==1.8.0
 Provides-Extra: dev
 Requires-Dist: pytest>=7.0; extra == "dev"
@@ -23,7 +23,7 @@ A command-line interface for [KeePassXC](https://keepassxc.org/) that communicat
 
 - **Biometric unlock**: On macOS with TouchID (or similar) configured in KeePassXC, you can authenticate via fingerprint rather than typing your master password.
 - **No master password in shell history**: Authentication happens through KeePassXC's GUI, not the terminal.
-- **Full CRUD**: List, search, add, edit, delete entries and groups.
+- **CRUD**: Add, edit, delete entries and groups.
 - **TOTP**: Retrieve time-based one-time passwords.
 - **Clipboard**: Copy credentials directly to the clipboard.
 
@@ -71,11 +71,11 @@ keepassxc-cli [--config PATH] [--browser-api-config PATH] [-v] COMMAND [COMMAND
 | `--browser-api-config` | Path to browser API config file (default: `~/.keepassxc/browser-api.json`) |
 | `-v, --verbose` | Enable verbose/debug logging |
 
-Most commands support a `-j / --json` flag for JSON output — pass it anywhere after the subcommand name:
+Some commands support a `-j / --json` flag for JSON output — pass it anywhere after the subcommand name:
 
 ```bash
 keepassxc-cli show https://github.com -j
-keepassxc-cli ls -j
+keepassxc-cli status -j
 ```
 
 ### Commands
@@ -93,29 +93,6 @@ keepassxc-cli status
 keepassxc-cli status -j
 ```
 
-#### `ls` — List all entries or groups
-
-> **Requires** "Allow access to all entries" to be enabled in  
-> KeePassXC → Settings → Browser Integration.
-
-```bash
-keepassxc-cli ls              # list all entries (includes UUID column)
-keepassxc-cli ls --groups     # list groups as a tree
-keepassxc-cli ls -j           # output as JSON
-```
-
-The UUIDs shown here are needed for `edit` and `rm`.
-
-#### `search` — Search entries by URL or hostname
-
-```bash
-keepassxc-cli search github.com
-keepassxc-cli search https://github.com -p   # reveal passwords
-keepassxc-cli search github.com -j
-```
-
-KeePassXC matches entries by URL/hostname (the same mechanism the browser extension uses).
-
 #### `show` — Show entries for a URL
 
 ```bash
@@ -124,6 +101,8 @@ keepassxc-cli show https://github.com -p     # reveal password and TOTP
 keepassxc-cli show https://github.com -j
 ```
 
+Without `-p`, password and TOTP are omitted from the output entirely.
+
 #### `totp` — Get TOTP code
 
 ```bash
@@ -151,7 +130,7 @@ keepassxc-cli add --url https://example.com --username user --password mypass
 
 ```bash
 # Get the UUID first
-keepassxc-cli show https://github.com
+keepassxc-cli show https://github.com -p
 
 # Then edit — --url is required to resolve the current entry
 keepassxc-cli edit <uuid> --url https://github.com --username newuser
@@ -165,16 +144,6 @@ keepassxc-cli rm <uuid>        # prompts for confirmation
 keepassxc-cli rm <uuid> --yes  # skip confirmation
 ```
 
-#### `generate` — Generate a password
-
-```bash
-keepassxc-cli generate             # prints a password
-keepassxc-cli generate --clip      # copy to clipboard instead
-keepassxc-cli generate -j
-```
-
-KeePassXC uses its own configured password generator profile (set in KeePassXC → Tools → Password Generator).
-
 #### `lock` — Lock the database
 
 ```bash
@@ -237,7 +206,7 @@ ruff check --ignore=E501 --exclude=__init__.py ./keepassxc_cli
 ## Known Limitations
 
 - Requires KeePassXC to be **running** and the database to be **open** (or biometric auto-unlock configured).
-- The `ls` command requires "Allow access to all entries" to be enabled in KeePassXC → Settings → Browser Integration.
-- The `clip` and `generate --clip` commands require `pyperclip` and a working clipboard (e.g., `xclip`/`xsel` on Linux, built-in on macOS/Windows).
+- The `clip` command requires `pyperclip` and a working clipboard (e.g., `xclip`/`xsel` on Linux, built-in on macOS/Windows).
 - The browser integration protocol does not support moving entries between groups directly.
-- Entry URLs in the database are stored as `KPH: url` string fields; entries without a URL field may not appear in `show`/`search` results.
+- Entry lookup is by URL/hostname only (same as the browser extension). Title-based search is not supported by the protocol.
+- **String fields** (`string_fields` in JSON output) require the KeePassXC setting "Support KPH fields" to be enabled, and custom attributes must be prefixed with `KPH: ` in the KeePassXC entry's "Advanced" tab. This is a server-side KeePassXC requirement, not something the CLI can control.

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/README.md

@@ -8,7 +8,7 @@ A command-line interface for [KeePassXC](https://keepassxc.org/) that communicat
 
 - **Biometric unlock**: On macOS with TouchID (or similar) configured in KeePassXC, you can authenticate via fingerprint rather than typing your master password.
 - **No master password in shell history**: Authentication happens through KeePassXC's GUI, not the terminal.
-- **Full CRUD**: List, search, add, edit, delete entries and groups.
+- **CRUD**: Add, edit, delete entries and groups.
 - **TOTP**: Retrieve time-based one-time passwords.
 - **Clipboard**: Copy credentials directly to the clipboard.
 
@@ -56,11 +56,11 @@ keepassxc-cli [--config PATH] [--browser-api-config PATH] [-v] COMMAND [COMMAND
 | `--browser-api-config` | Path to browser API config file (default: `~/.keepassxc/browser-api.json`) |
 | `-v, --verbose` | Enable verbose/debug logging |
 
-Most commands support a `-j / --json` flag for JSON output — pass it anywhere after the subcommand name:
+Some commands support a `-j / --json` flag for JSON output — pass it anywhere after the subcommand name:
 
 ```bash
 keepassxc-cli show https://github.com -j
-keepassxc-cli ls -j
+keepassxc-cli status -j
 ```
 
 ### Commands
@@ -78,29 +78,6 @@ keepassxc-cli status
 keepassxc-cli status -j
 ```
 
-#### `ls` — List all entries or groups
-
-> **Requires** "Allow access to all entries" to be enabled in  
-> KeePassXC → Settings → Browser Integration.
-
-```bash
-keepassxc-cli ls              # list all entries (includes UUID column)
-keepassxc-cli ls --groups     # list groups as a tree
-keepassxc-cli ls -j           # output as JSON
-```
-
-The UUIDs shown here are needed for `edit` and `rm`.
-
-#### `search` — Search entries by URL or hostname
-
-```bash
-keepassxc-cli search github.com
-keepassxc-cli search https://github.com -p   # reveal passwords
-keepassxc-cli search github.com -j
-```
-
-KeePassXC matches entries by URL/hostname (the same mechanism the browser extension uses).
-
 #### `show` — Show entries for a URL
 
 ```bash
@@ -109,6 +86,8 @@ keepassxc-cli show https://github.com -p     # reveal password and TOTP
 keepassxc-cli show https://github.com -j
 ```
 
+Without `-p`, password and TOTP are omitted from the output entirely.
+
 #### `totp` — Get TOTP code
 
 ```bash
@@ -136,7 +115,7 @@ keepassxc-cli add --url https://example.com --username user --password mypass
 
 ```bash
 # Get the UUID first
-keepassxc-cli show https://github.com
+keepassxc-cli show https://github.com -p
 
 # Then edit — --url is required to resolve the current entry
 keepassxc-cli edit <uuid> --url https://github.com --username newuser
@@ -150,16 +129,6 @@ keepassxc-cli rm <uuid>        # prompts for confirmation
 keepassxc-cli rm <uuid> --yes  # skip confirmation
 ```
 
-#### `generate` — Generate a password
-
-```bash
-keepassxc-cli generate             # prints a password
-keepassxc-cli generate --clip      # copy to clipboard instead
-keepassxc-cli generate -j
-```
-
-KeePassXC uses its own configured password generator profile (set in KeePassXC → Tools → Password Generator).
-
 #### `lock` — Lock the database
 
 ```bash
@@ -222,7 +191,7 @@ ruff check --ignore=E501 --exclude=__init__.py ./keepassxc_cli
 ## Known Limitations
 
 - Requires KeePassXC to be **running** and the database to be **open** (or biometric auto-unlock configured).
-- The `ls` command requires "Allow access to all entries" to be enabled in KeePassXC → Settings → Browser Integration.
-- The `clip` and `generate --clip` commands require `pyperclip` and a working clipboard (e.g., `xclip`/`xsel` on Linux, built-in on macOS/Windows).
+- The `clip` command requires `pyperclip` and a working clipboard (e.g., `xclip`/`xsel` on Linux, built-in on macOS/Windows).
 - The browser integration protocol does not support moving entries between groups directly.
-- Entry URLs in the database are stored as `KPH: url` string fields; entries without a URL field may not appear in `show`/`search` results.
+- Entry lookup is by URL/hostname only (same as the browser extension). Title-based search is not supported by the protocol.
+- **String fields** (`string_fields` in JSON output) require the KeePassXC setting "Support KPH fields" to be enabled, and custom attributes must be prefixed with `KPH: ` in the KeePassXC entry's "Advanced" tab. This is a server-side KeePassXC requirement, not something the CLI can control.

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/keepassxc_cli/__main__.py

@@ -11,7 +11,7 @@ from keepassxc_browser_api import BrowserClient, BrowserConfig
 from keepassxc_browser_api.exceptions import KeePassXCError, ConnectionError
 
 from .config import CliConfig, DEFAULT_CLI_CONFIG_PATH
-from .commands import setup, status, show, search, ls, add, edit, rm, totp, clip, generate, lock, mkdir
+from .commands import setup, status, show, add, edit, rm, totp, clip, lock, mkdir
 
 # Shared parent parser that injects -j/--json into each subparser that supports it.
 # Defined at module level so command modules can import it if needed.
@@ -48,14 +48,11 @@ def main() -> None:
     setup.add_parser(subparsers)
     status.add_parser(subparsers, fmt_parent)
     show.add_parser(subparsers, fmt_parent)
-    search.add_parser(subparsers, fmt_parent)
-    ls.add_parser(subparsers, fmt_parent)
     add.add_parser(subparsers)
     edit.add_parser(subparsers)
     rm.add_parser(subparsers)
     totp.add_parser(subparsers, fmt_parent)
     clip.add_parser(subparsers)
-    generate.add_parser(subparsers, fmt_parent)
     lock.add_parser(subparsers)
     mkdir.add_parser(subparsers)
 

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/keepassxc_cli/commands/edit.py

@@ -14,7 +14,7 @@ def add_parser(subparsers: argparse._SubParsersAction) -> None:
         "edit",
         help="Edit an existing entry by UUID",
         description=(
-            "Edit an existing entry. The UUID must be known (use 'ls' or 'show' to find it).\n"
+            "Edit an existing entry. The UUID must be known (use 'show' to find it).\n"
             "Provide --url so the entry can be resolved; omitted fields are left unchanged."
         ),
     )

keepassxc_cli-1.0.0/keepassxc_cli/output.py

@@ -0,0 +1,55 @@
+from __future__ import annotations
+
+import json
+
+from keepassxc_browser_api import Entry
+
+
+def print_entry_detail(entry: Entry, fmt: str = "table", show_password: bool = False) -> None:
+    totp = entry.totp if show_password else None
+    if fmt == "json":
+        data = {
+            "uuid": entry.uuid,
+            "name": entry.name,
+            "login": entry.login,
+            "group": entry.group,
+            "group_uuid": entry.group_uuid,
+            "string_fields": entry.string_fields,
+        }
+        if show_password:
+            data["password"] = entry.password
+            if totp is not None:
+                data["totp"] = totp
+        print(json.dumps(data, indent=2))
+        return
+
+    print(f"UUID:       {entry.uuid}")
+    print(f"Title:      {entry.name}")
+    print(f"Username:   {entry.login}")
+    if show_password:
+        print(f"Password:   {entry.password}")
+    if totp:
+        print(f"TOTP:       {totp}")
+    if entry.group:
+        print(f"Group:      {entry.group}")
+    if entry.group_uuid:
+        print(f"Group UUID: {entry.group_uuid}")
+    if entry.string_fields:
+        for sf in entry.string_fields:
+            for k, v in sf.items():
+                print(f"{k}: {v}")
+
+
+def print_totp(totp: str, fmt: str = "table") -> None:
+    if fmt == "json":
+        print(json.dumps({"totp": totp}, indent=2))
+        return
+    print(totp)
+
+
+def print_status(info: dict, fmt: str = "table") -> None:
+    if fmt == "json":
+        print(json.dumps(info, indent=2))
+        return
+    for k, v in info.items():
+        print(f"{k}: {v}")

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0/keepassxc_cli.egg-info}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: keepassxc-cli
-Version: 0.2.0
+Version: 1.0.0
 Summary: CLI for KeePassXC using the browser extension protocol with biometric unlock
 License-Expression: MIT
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: keepassxc-browser-api==0.1.3
+Requires-Dist: keepassxc-browser-api==1.0.0
 Requires-Dist: pyperclip==1.8.0
 Provides-Extra: dev
 Requires-Dist: pytest>=7.0; extra == "dev"
@@ -23,7 +23,7 @@ A command-line interface for [KeePassXC](https://keepassxc.org/) that communicat
 
 - **Biometric unlock**: On macOS with TouchID (or similar) configured in KeePassXC, you can authenticate via fingerprint rather than typing your master password.
 - **No master password in shell history**: Authentication happens through KeePassXC's GUI, not the terminal.
-- **Full CRUD**: List, search, add, edit, delete entries and groups.
+- **CRUD**: Add, edit, delete entries and groups.
 - **TOTP**: Retrieve time-based one-time passwords.
 - **Clipboard**: Copy credentials directly to the clipboard.
 
@@ -71,11 +71,11 @@ keepassxc-cli [--config PATH] [--browser-api-config PATH] [-v] COMMAND [COMMAND
 | `--browser-api-config` | Path to browser API config file (default: `~/.keepassxc/browser-api.json`) |
 | `-v, --verbose` | Enable verbose/debug logging |
 
-Most commands support a `-j / --json` flag for JSON output — pass it anywhere after the subcommand name:
+Some commands support a `-j / --json` flag for JSON output — pass it anywhere after the subcommand name:
 
 ```bash
 keepassxc-cli show https://github.com -j
-keepassxc-cli ls -j
+keepassxc-cli status -j
 ```
 
 ### Commands
@@ -93,29 +93,6 @@ keepassxc-cli status
 keepassxc-cli status -j
 ```
 
-#### `ls` — List all entries or groups
-
-> **Requires** "Allow access to all entries" to be enabled in  
-> KeePassXC → Settings → Browser Integration.
-
-```bash
-keepassxc-cli ls              # list all entries (includes UUID column)
-keepassxc-cli ls --groups     # list groups as a tree
-keepassxc-cli ls -j           # output as JSON
-```
-
-The UUIDs shown here are needed for `edit` and `rm`.
-
-#### `search` — Search entries by URL or hostname
-
-```bash
-keepassxc-cli search github.com
-keepassxc-cli search https://github.com -p   # reveal passwords
-keepassxc-cli search github.com -j
-```
-
-KeePassXC matches entries by URL/hostname (the same mechanism the browser extension uses).
-
 #### `show` — Show entries for a URL
 
 ```bash
@@ -124,6 +101,8 @@ keepassxc-cli show https://github.com -p     # reveal password and TOTP
 keepassxc-cli show https://github.com -j
 ```
 
+Without `-p`, password and TOTP are omitted from the output entirely.
+
 #### `totp` — Get TOTP code
 
 ```bash
@@ -151,7 +130,7 @@ keepassxc-cli add --url https://example.com --username user --password mypass
 
 ```bash
 # Get the UUID first
-keepassxc-cli show https://github.com
+keepassxc-cli show https://github.com -p
 
 # Then edit — --url is required to resolve the current entry
 keepassxc-cli edit <uuid> --url https://github.com --username newuser
@@ -165,16 +144,6 @@ keepassxc-cli rm <uuid>        # prompts for confirmation
 keepassxc-cli rm <uuid> --yes  # skip confirmation
 ```
 
-#### `generate` — Generate a password
-
-```bash
-keepassxc-cli generate             # prints a password
-keepassxc-cli generate --clip      # copy to clipboard instead
-keepassxc-cli generate -j
-```
-
-KeePassXC uses its own configured password generator profile (set in KeePassXC → Tools → Password Generator).
-
 #### `lock` — Lock the database
 
 ```bash
@@ -237,7 +206,7 @@ ruff check --ignore=E501 --exclude=__init__.py ./keepassxc_cli
 ## Known Limitations
 
 - Requires KeePassXC to be **running** and the database to be **open** (or biometric auto-unlock configured).
-- The `ls` command requires "Allow access to all entries" to be enabled in KeePassXC → Settings → Browser Integration.
-- The `clip` and `generate --clip` commands require `pyperclip` and a working clipboard (e.g., `xclip`/`xsel` on Linux, built-in on macOS/Windows).
+- The `clip` command requires `pyperclip` and a working clipboard (e.g., `xclip`/`xsel` on Linux, built-in on macOS/Windows).
 - The browser integration protocol does not support moving entries between groups directly.
-- Entry URLs in the database are stored as `KPH: url` string fields; entries without a URL field may not appear in `show`/`search` results.
+- Entry lookup is by URL/hostname only (same as the browser extension). Title-based search is not supported by the protocol.
+- **String fields** (`string_fields` in JSON output) require the KeePassXC setting "Support KPH fields" to be enabled, and custom attributes must be prefixed with `KPH: ` in the KeePassXC entry's "Advanced" tab. This is a server-side KeePassXC requirement, not something the CLI can control.

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/keepassxc_cli.egg-info/SOURCES.txt

@@ -21,12 +21,9 @@ keepassxc_cli/commands/__init__.py
 keepassxc_cli/commands/add.py
 keepassxc_cli/commands/clip.py
 keepassxc_cli/commands/edit.py
-keepassxc_cli/commands/generate.py
 keepassxc_cli/commands/lock.py
-keepassxc_cli/commands/ls.py
 keepassxc_cli/commands/mkdir.py
 keepassxc_cli/commands/rm.py
-keepassxc_cli/commands/search.py
 keepassxc_cli/commands/setup.py
 keepassxc_cli/commands/show.py
 keepassxc_cli/commands/status.py

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/keepassxc_cli.egg-info/requires.txt

@@ -1,4 +1,4 @@
-keepassxc-browser-api==0.1.3
+keepassxc-browser-api==1.0.0
 pyperclip==1.8.0
 
 [dev]

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/pyproject.toml

@@ -10,7 +10,7 @@ readme = "README.md"
 requires-python = ">=3.10"
 license = "MIT"
 dependencies = [
-    "keepassxc-browser-api==0.1.3",
+    "keepassxc-browser-api==1.0.0",
     "pyperclip==1.8.0",
 ]
 

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/tests/conftest.py

@@ -70,11 +70,8 @@ def mock_client():
     client.test_associate.return_value = True
     client.get_logins.return_value = [make_entry()]
     client.set_login.return_value = True
-    client.get_database_entries.return_value = [make_entry()]
-    client.get_database_groups.return_value = [make_group()]
     client.create_group.return_value = make_group(uuid="new-uuid", name="NewGroup")
     client.get_totp.return_value = "123456"
     client.delete_entry.return_value = True
     client.lock_database.return_value = True
-    client.generate_password.return_value = "GeneratedPass123"
     return client

{keepassxc_cli-0.2.0 → keepassxc_cli-1.0.0}/tests/test_commands.py

@@ -7,10 +7,10 @@ from unittest.mock import MagicMock, patch
 
 import pytest
 
-from keepassxc_browser_api import Entry, Group, BrowserConfig, Association
+from keepassxc_browser_api import Entry, BrowserConfig, Association
 from keepassxc_cli.config import CliConfig
 from keepassxc_cli.commands import (
-    setup, status, show, search, ls, add, edit, rm, totp, clip, generate, lock, mkdir,
+    setup, status, show, add, edit, rm, totp, clip, lock, mkdir,
 )
 
 
@@ -33,16 +33,13 @@ def make_args(**kwargs) -> argparse.Namespace:
     defaults = {
         "show_password": False,
         "yes": False,
-        "groups": False,
         "field": "password",
-        "clip": False,
         "url": "https://example.com",
         "username": "user",
         "password": "pass",
         "title": "Example",
         "group_uuid": "",
         "uuid": "abcdef12-0000-0000-0000-000000000000",
-        "query": "test",
         "name": "NewGroup",
         "parent_uuid": "",
     }
@@ -109,52 +106,26 @@ class TestShowCommand:
         assert rc == 0
         out = capsys.readouterr().out
         assert "Test Entry" in out
+        assert "Password" not in out
 
-    def test_no_entries(self, mock_client, cli_config, browser_config, browser_config_path, capsys):
-        mock_client.get_logins.return_value = []
-        args = make_args(url="https://notfound.com")
-        rc = show.run(mock_client, args, cli_config, browser_config, browser_config_path)
-        assert rc == 1
-        assert "No entries" in capsys.readouterr().err
-
-
-# --- search ---
-
-class TestSearchCommand:
-    def test_matches_found(self, mock_client, cli_config, browser_config, browser_config_path, capsys, mock_entry):
-        entry = mock_entry(name="GitHub", login="user@github.com")
+    def test_found_entries_show_password(self, mock_client, cli_config, browser_config, browser_config_path, capsys, mock_entry):
+        entry = mock_entry()
         mock_client.get_logins.return_value = [entry]
-        args = make_args(query="github.com")
-        rc = search.run(mock_client, args, cli_config, browser_config, browser_config_path)
+        args = make_args(url="https://example.com", show_password=True)
+        rc = show.run(mock_client, args, cli_config, browser_config, browser_config_path)
         assert rc == 0
-        assert "GitHub" in capsys.readouterr().out
+        out = capsys.readouterr().out
+        assert "Test Entry" in out
+        assert "Password:" in out
 
-    def test_no_matches(self, mock_client, cli_config, browser_config, browser_config_path, capsys):
+    def test_no_entries(self, mock_client, cli_config, browser_config, browser_config_path, capsys):
         mock_client.get_logins.return_value = []
-        args = make_args(query="zzznomatch.com")
-        rc = search.run(mock_client, args, cli_config, browser_config, browser_config_path)
+        args = make_args(url="https://notfound.com")
+        rc = show.run(mock_client, args, cli_config, browser_config, browser_config_path)
         assert rc == 1
         assert "No entries" in capsys.readouterr().err
 
 
-# --- ls ---
-
-class TestLsCommand:
-    def test_list_entries(self, mock_client, cli_config, browser_config, browser_config_path, capsys, mock_entry):
-        mock_client.get_database_entries.return_value = [mock_entry()]
-        args = make_args(groups=False)
-        rc = ls.run(mock_client, args, cli_config, browser_config, browser_config_path)
-        assert rc == 0
-        assert "Test Entry" in capsys.readouterr().out
-
-    def test_list_groups(self, mock_client, cli_config, browser_config, browser_config_path, capsys, mock_group):
-        mock_client.get_database_groups.return_value = [mock_group()]
-        args = make_args(groups=True)
-        rc = ls.run(mock_client, args, cli_config, browser_config, browser_config_path)
-        assert rc == 0
-        assert "Root" in capsys.readouterr().out
-
-
 # --- add ---
 
 class TestAddCommand:
@@ -265,30 +236,6 @@ class TestClipCommand:
         assert "pyperclip" in capsys.readouterr().err
 
 
-# --- generate ---
-
-class TestGenerateCommand:
-    def test_success(self, mock_client, cli_config, browser_config, browser_config_path, capsys):
-        mock_client.generate_password.return_value = "GenPass123!"
-        args = make_args(clip=False)
-        rc = generate.run(mock_client, args, cli_config, browser_config, browser_config_path)
-        assert rc == 0
-        assert "GenPass123!" in capsys.readouterr().out
-
-    def test_failure(self, mock_client, cli_config, browser_config, browser_config_path, capsys):
-        mock_client.generate_password.return_value = None
-        args = make_args(clip=False)
-        rc = generate.run(mock_client, args, cli_config, browser_config, browser_config_path)
-        assert rc == 1
-
-    def test_clip(self, mock_client, cli_config, browser_config, browser_config_path, capsys):
-        mock_client.generate_password.return_value = "GenPass123!"
-        args = make_args(clip=True)
-        with patch.dict("sys.modules", {"pyperclip": MagicMock()}):
-            rc = generate.run(mock_client, args, cli_config, browser_config, browser_config_path)
-        assert rc == 0
-
-
 # --- lock ---
 
 class TestLockCommand:

keepassxc_cli-1.0.0/tests/test_output.py

@@ -0,0 +1,80 @@
+from __future__ import annotations
+
+import json
+
+import pytest
+
+from keepassxc_browser_api import Entry
+from keepassxc_cli.output import (
+    print_entry_detail,
+    print_totp,
+    print_status,
+)
+
+
+@pytest.fixture
+def sample_entry():
+    return Entry(
+        uuid="abcdef12-0000-0000-0000-000000000000",
+        name="GitHub",
+        login="user@example.com",
+        password="s3cr3t",
+        totp="",
+        group="Root",
+        group_uuid="root-uuid",
+        string_fields=[{"KPH: url": "https://github.com"}],
+    )
+
+
+class TestPrintEntryDetail:
+    def test_table_format_hidden(self, capsys, sample_entry):
+        print_entry_detail(sample_entry, fmt="table", show_password=False)
+        out = capsys.readouterr().out
+        assert "GitHub" in out
+        assert "user@example.com" in out
+        assert "Password" not in out
+        assert "s3cr3t" not in out
+
+    def test_table_format_show_password(self, capsys, sample_entry):
+        print_entry_detail(sample_entry, fmt="table", show_password=True)
+        out = capsys.readouterr().out
+        assert "s3cr3t" in out
+        assert "Password:" in out
+
+    def test_json_format_hidden(self, capsys, sample_entry):
+        print_entry_detail(sample_entry, fmt="json", show_password=False)
+        out = capsys.readouterr().out
+        data = json.loads(out)
+        assert data["name"] == "GitHub"
+        assert "password" not in data
+
+    def test_json_format_show_password(self, capsys, sample_entry):
+        print_entry_detail(sample_entry, fmt="json", show_password=True)
+        out = capsys.readouterr().out
+        data = json.loads(out)
+        assert data["name"] == "GitHub"
+        assert data["password"] == "s3cr3t"
+
+
+class TestPrintTotp:
+    def test_table_format(self, capsys):
+        print_totp("123456", fmt="table")
+        assert capsys.readouterr().out.strip() == "123456"
+
+    def test_json_format(self, capsys):
+        print_totp("123456", fmt="json")
+        data = json.loads(capsys.readouterr().out)
+        assert data["totp"] == "123456"
+
+
+class TestPrintStatus:
+    def test_table_format(self, capsys):
+        print_status({"Connected": "yes", "Associated": "no"}, fmt="table")
+        out = capsys.readouterr().out
+        assert "Connected: yes" in out
+        assert "Associated: no" in out
+
+    def test_json_format(self, capsys):
+        print_status({"Connected": "yes"}, fmt="json")
+        data = json.loads(capsys.readouterr().out)
+        assert data["Connected"] == "yes"

keepassxc_cli-0.2.0/keepassxc_cli/commands/generate.py

@@ -1,49 +0,0 @@
-from __future__ import annotations
-
-import argparse
-import sys
-from pathlib import Path
-
-from keepassxc_browser_api import BrowserClient, BrowserConfig
-
-from keepassxc_cli.config import CliConfig
-from keepassxc_cli.output import print_password
-
-
-def add_parser(subparsers: argparse._SubParsersAction, fmt_parent: argparse.ArgumentParser | None = None) -> None:
-    parents = [fmt_parent] if fmt_parent else []
-    p = subparsers.add_parser(
-        "generate",
-        parents=parents,
-        help="Generate a password using KeePassXC's configured password profile",
-    )
-    p.add_argument("--clip", action="store_true", help="Copy to clipboard instead of printing")
-    p.set_defaults(func=run)
-
-
-def run(
-    client: BrowserClient,
-    args: argparse.Namespace,
-    cli_config: CliConfig,
-    browser_config: BrowserConfig,
-    browser_config_path: Path,
-    *,
-    fmt: str = "table",
-) -> int:
-    password = client.generate_password()
-    if password is None:
-        print("Failed to generate password.", file=sys.stderr)
-        return 1
-
-    if args.clip:
-        try:
-            import pyperclip
-            pyperclip.copy(password)
-            print("Password copied to clipboard.")
-        except ImportError:
-            print("Error: pyperclip is required for clipboard support. Install it with: pip install pyperclip", file=sys.stderr)
-            return 1
-    else:
-        print_password(password, fmt)
-
-    return 0

keepassxc_cli-0.2.0/keepassxc_cli/commands/ls.py

@@ -1,43 +0,0 @@
-from __future__ import annotations
-
-import argparse
-from pathlib import Path
-
-from keepassxc_browser_api import BrowserClient, BrowserConfig
-
-from keepassxc_cli.config import CliConfig
-from keepassxc_cli.output import print_entries, print_groups
-
-
-def add_parser(subparsers: argparse._SubParsersAction, fmt_parent: argparse.ArgumentParser | None = None) -> None:
-    parents = [fmt_parent] if fmt_parent else []
-    p = subparsers.add_parser(
-        "ls",
-        parents=parents,
-        help="List all database entries or groups",
-        description=(
-            "List all entries or groups in the open database.\n\n"
-            "NOTE: requires 'Allow access to all entries' to be enabled in\n"
-            "KeePassXC → Settings → Browser Integration."
-        ),
-    )
-    p.add_argument("--groups", action="store_true", help="List groups instead of entries")
-    p.set_defaults(func=run)
-
-
-def run(
-    client: BrowserClient,
-    args: argparse.Namespace,
-    cli_config: CliConfig,
-    browser_config: BrowserConfig,
-    browser_config_path: Path,
-    *,
-    fmt: str = "table",
-) -> int:
-    if args.groups:
-        groups = client.get_database_groups()
-        print_groups(groups, fmt)
-    else:
-        entries = client.get_database_entries()
-        print_entries(entries, fmt)
-    return 0

keepassxc_cli-0.2.0/keepassxc_cli/commands/search.py

@@ -1,39 +0,0 @@
-from __future__ import annotations
-
-import argparse
-import sys
-from pathlib import Path
-
-from keepassxc_browser_api import BrowserClient, BrowserConfig
-
-from keepassxc_cli.config import CliConfig
-from keepassxc_cli.output import print_entries
-
-
-def add_parser(subparsers: argparse._SubParsersAction, fmt_parent: argparse.ArgumentParser | None = None) -> None:
-    parents = [fmt_parent] if fmt_parent else []
-    p = subparsers.add_parser(
-        "search",
-        parents=parents,
-        help="Search database entries by URL or hostname",
-    )
-    p.add_argument("query", help="URL or hostname to search for")
-    p.add_argument("-p", "--show-password", action="store_true", help="Reveal passwords")
-    p.set_defaults(func=run)
-
-
-def run(
-    client: BrowserClient,
-    args: argparse.Namespace,
-    cli_config: CliConfig,
-    browser_config: BrowserConfig,
-    browser_config_path: Path,
-    *,
-    fmt: str = "table",
-) -> int:
-    entries = client.get_logins(args.query)
-    if not entries:
-        print(f"No entries found matching: {args.query}", file=sys.stderr)
-        return 1
-    print_entries(entries, fmt, show_password=args.show_password)
-    return 0

keepassxc_cli-0.2.0/keepassxc_cli/output.py

@@ -1,132 +0,0 @@
-from __future__ import annotations
-
-import json
-
-from keepassxc_browser_api import Entry, Group
-
-
-def _truncate(s: str, n: int) -> str:
-    if len(s) > n:
-        return s[: n - 1] + "…"
-    return s
-
-
-def _table_row(cols: list[str], widths: list[int]) -> str:
-    return "| " + " | ".join(v.ljust(w) for v, w in zip(cols, widths)) + " |"
-
-
-def _table_sep(widths: list[int]) -> str:
-    return "+-" + "-+-".join("-" * w for w in widths) + "-+"
-
-
-def _print_table(headers: list[str], rows: list[list[str]]) -> None:
-    widths = [len(h) for h in headers]
-    for row in rows:
-        for i, cell in enumerate(row):
-            widths[i] = max(widths[i], len(cell))
-    sep = _table_sep(widths)
-    print(sep)
-    print(_table_row(headers, widths))
-    print(sep)
-    for row in rows:
-        print(_table_row(row, widths))
-    print(sep)
-
-
-def print_entries(entries: list[Entry], fmt: str = "table", show_password: bool = False) -> None:
-    if fmt == "json":
-        data = [
-            {
-                "uuid": e.uuid,
-                "name": e.name,
-                "login": e.login,
-                "password": e.password if show_password else "***",
-                "url": next((sf.get("KPH: url", "") for sf in e.string_fields if "KPH: url" in sf), ""),
-                "group": e.group,
-            }
-            for e in entries
-        ]
-        print(json.dumps(data, indent=2))
-        return
-
-    # table
-    headers = ["UUID", "Title", "Username", "URL", "Group"]
-    rows = []
-    for e in entries:
-        url = next((sf.get("KPH: url", "") for sf in e.string_fields if "KPH: url" in sf), "")
-        rows.append([_truncate(e.uuid, 9), e.name, e.login, url, e.group])
-    _print_table(headers, rows)
-
-
-def _print_group_tree(group: Group, indent: int = 0) -> None:
-    prefix = "  " * indent
-    print(f"{prefix}{group.name}  [{_truncate(group.uuid, 9)}]")
-    for child in group.children:
-        _print_group_tree(child, indent + 1)
-
-
-def print_groups(groups: list[Group], fmt: str = "table") -> None:
-    if fmt == "json":
-        def _g2d(g: Group) -> dict:
-            return {"uuid": g.uuid, "name": g.name, "children": [_g2d(c) for c in g.children]}
-        print(json.dumps([_g2d(g) for g in groups], indent=2))
-        return
-
-    for g in groups:
-        _print_group_tree(g)
-
-
-def print_entry_detail(entry: Entry, fmt: str = "table", show_password: bool = False) -> None:
-    password = entry.password if show_password else "***"
-    totp = entry.totp if show_password else None
-    if fmt == "json":
-        data = {
-            "uuid": entry.uuid,
-            "name": entry.name,
-            "login": entry.login,
-            "password": password,
-            "group": entry.group,
-            "group_uuid": entry.group_uuid,
-            "string_fields": entry.string_fields,
-        }
-        if totp is not None:
-            data["totp"] = totp
-        print(json.dumps(data, indent=2))
-        return
-
-    print(f"UUID:       {entry.uuid}")
-    print(f"Title:      {entry.name}")
-    print(f"Username:   {entry.login}")
-    print(f"Password:   {password}")
-    if totp:
-        print(f"TOTP:       {totp}")
-    if entry.group:
-        print(f"Group:      {entry.group}")
-    if entry.group_uuid:
-        print(f"Group UUID: {entry.group_uuid}")
-    if entry.string_fields:
-        for sf in entry.string_fields:
-            for k, v in sf.items():
-                print(f"{k}: {v}")
-
-
-def print_totp(totp: str, fmt: str = "table") -> None:
-    if fmt == "json":
-        print(json.dumps({"totp": totp}, indent=2))
-        return
-    print(totp)
-
-
-def print_password(password: str, fmt: str = "table") -> None:
-    if fmt == "json":
-        print(json.dumps({"password": password}, indent=2))
-        return
-    print(password)
-
-
-def print_status(info: dict, fmt: str = "table") -> None:
-    if fmt == "json":
-        print(json.dumps(info, indent=2))
-        return
-    for k, v in info.items():
-        print(f"{k}: {v}")

keepassxc_cli-0.2.0/tests/test_output.py

@@ -1,137 +0,0 @@
-from __future__ import annotations
-
-import json
-
-import pytest
-
-from keepassxc_browser_api import Entry, Group
-from keepassxc_cli.output import (
-    print_entries,
-    print_groups,
-    print_entry_detail,
-    print_totp,
-    print_password,
-    print_status,
-)
-
-
-@pytest.fixture
-def sample_entry():
-    return Entry(
-        uuid="abcdef12-0000-0000-0000-000000000000",
-        name="GitHub",
-        login="user@example.com",
-        password="s3cr3t",
-        totp="",
-        group="Root",
-        group_uuid="root-uuid",
-        string_fields=[{"KPH: url": "https://github.com"}],
-    )
-
-
-@pytest.fixture
-def sample_group():
-    child = Group(uuid="child-uuid", name="Personal", children=[])
-    return Group(uuid="root-uuid", name="Root", children=[child])
-
-
-class TestPrintEntries:
-    def test_table_format(self, capsys, sample_entry):
-        print_entries([sample_entry], fmt="table")
-        out = capsys.readouterr().out
-        assert "GitHub" in out
-        assert "user@example.com" in out
-        assert "Root" in out
-        assert "abcdef12…" in out  # truncated UUID (8 chars + ellipsis)
-
-    def test_json_format(self, capsys, sample_entry):
-        print_entries([sample_entry], fmt="json")
-        out = capsys.readouterr().out
-        data = json.loads(out)
-        assert len(data) == 1
-        assert data[0]["name"] == "GitHub"
-        assert data[0]["login"] == "user@example.com"
-        assert data[0]["password"] == "***"
-
-    def test_json_format_show_password(self, capsys, sample_entry):
-        print_entries([sample_entry], fmt="json", show_password=True)
-        out = capsys.readouterr().out
-        data = json.loads(out)
-        assert data[0]["password"] == "s3cr3t"
-
-    def test_table_format_multiple_entries(self, capsys, sample_entry):
-        entries = [sample_entry, sample_entry]
-        print_entries(entries, fmt="table")
-        out = capsys.readouterr().out
-        assert out.count("GitHub") == 2
-
-
-class TestPrintGroups:
-    def test_table_format(self, capsys, sample_group):
-        print_groups([sample_group], fmt="table")
-        out = capsys.readouterr().out
-        assert "Root" in out
-        assert "Personal" in out
-
-    def test_json_format(self, capsys, sample_group):
-        print_groups([sample_group], fmt="json")
-        out = capsys.readouterr().out
-        data = json.loads(out)
-        assert data[0]["name"] == "Root"
-        assert data[0]["children"][0]["name"] == "Personal"
-
-
-class TestPrintEntryDetail:
-    def test_table_format(self, capsys, sample_entry):
-        print_entry_detail(sample_entry, fmt="table", show_password=False)
-        out = capsys.readouterr().out
-        assert "GitHub" in out
-        assert "user@example.com" in out
-        assert "***" in out
-
-    def test_table_format_show_password(self, capsys, sample_entry):
-        print_entry_detail(sample_entry, fmt="table", show_password=True)
-        out = capsys.readouterr().out
-        assert "s3cr3t" in out
-
-    def test_json_format(self, capsys, sample_entry):
-        print_entry_detail(sample_entry, fmt="json", show_password=True)
-        out = capsys.readouterr().out
-        data = json.loads(out)
-        assert data["name"] == "GitHub"
-        assert data["password"] == "s3cr3t"
-
-
-class TestPrintTotp:
-    def test_table_format(self, capsys):
-        print_totp("123456", fmt="table")
-        assert capsys.readouterr().out.strip() == "123456"
-
-    def test_json_format(self, capsys):
-        print_totp("123456", fmt="json")
-        data = json.loads(capsys.readouterr().out)
-        assert data["totp"] == "123456"
-
-
-class TestPrintPassword:
-    def test_table_format(self, capsys):
-        print_password("mypass", fmt="table")
-        assert capsys.readouterr().out.strip() == "mypass"
-
-    def test_json_format(self, capsys):
-        print_password("mypass", fmt="json")
-        data = json.loads(capsys.readouterr().out)
-        assert data["password"] == "mypass"
-
-
-class TestPrintStatus:
-    def test_table_format(self, capsys):
-        print_status({"Connected": "yes", "Associated": "no"}, fmt="table")
-        out = capsys.readouterr().out
-        assert "Connected: yes" in out
-        assert "Associated: no" in out
-
-    def test_json_format(self, capsys):
-        print_status({"Connected": "yes"}, fmt="json")
-        data = json.loads(capsys.readouterr().out)
-        assert data["Connected"] == "yes"