eenv 0.1.2

Encrypted Env Manager: encrypts .env files, manages examples, and enforces safety via git hooks.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112

use std::io;
use std::path::Path;

pub fn run(repo_root: &Path) -> io::Result<()> {
    let state = crate::envscan::compute_eenv_state(repo_root)?;
    println!("[state]");
    println!("enc      = {}", state.enc);
    println!("example  = {}", state.example);
    println!("env      = {}", state.env);
    println!("eenvjson = {}", state.eenvjson);
    println!("-----------------");

    if state.enc {
        if state.eenvjson {
            if let Err(e) = crate::crypto::handle_enc_workflow(repo_root) {
                eprintln!("[enc] error: {e}");
            }
        } else {
            match crate::crypto::bootstrap_key_and_decrypt(repo_root) {
                Ok(()) => {
                    eprintln!("[enc] key accepted, config created, decrypted where possible.")
                }
                Err(e) => {
                    eprintln!("[enc] could not bootstrap from key: {e}");
                    return Err(e);
                }
            }
        }
    }

    if state.env {
        let (files, _t_find) = crate::util::time_result("find_env_files_recursive", || {
            crate::envscan::find_env_files_recursive(repo_root)
        })?;
        let ((real, examples, encs), _t_split) =
            crate::util::time_ok("split_env_files", move || {
                crate::envscan::split_env_files(files)
            });

        println!("--- real env files ---");
        for p in &real {
            println!("{}", p.display());
        }
        println!("--- example env files ---");
        for p in &examples {
            println!("{}", p.display());
        }
        println!("--- encrypted env files ---");
        for p in &encs {
            println!("{}", p.display());
        }

        if !state.example && !real.is_empty() {
            let skeletons = crate::examples::extract_env_skeletons(&real)?;
            if let Ok(actions) = crate::examples::ensure_env_examples_from_skeletons(&skeletons) {
                for (src, dst, action) in actions {
                    let label = match action {
                        crate::examples::ExampleAction::Created => "created",
                        crate::examples::ExampleAction::Overwritten => "overwritten",
                        crate::examples::ExampleAction::SourceIsExample => "skip",
                    };
                    println!(
                        "[env-example] {:<11} {}  ->  {}",
                        label,
                        src.display(),
                        dst.display()
                    );
                }
            }
        }

        match crate::gitignore::fix_gitignore_from_found(repo_root, &real) {
            Ok(report) => {
                if report.changed {
                    println!(
                        "[gitignore] updated: {}\n  + added:   {:?}\n  - removed: {:?}",
                        report.path.display(),
                        report.added,
                        report.removed
                    );
                } else {
                    println!("[gitignore] no changes needed ({})", report.path.display());
                }
            }
            Err(e) => eprintln!("[gitignore] error: {e}"),
        }

        match crate::config::ensure_eenv_config(repo_root) {
            Ok(crate::config::ConfigStatus::Created) => {
                eprintln!("[config] created eenv.config.json")
            }
            Ok(crate::config::ConfigStatus::FixedMissingKey) => {
                eprintln!("[config] injected key into eenv.config.json")
            }
            Ok(crate::config::ConfigStatus::RewrittenFromInvalid { backup }) => eprintln!(
                "[config] repaired eenv.config.json (backup: {})",
                backup.display()
            ),
            Ok(crate::config::ConfigStatus::Valid) => {}
            Err(e) => eprintln!("[config] error: {e}"),
        }

        let produced = crate::crypto::encrypt_envs_to_enc(repo_root, &real)?;
        for p in &produced {
            println!("[init] encrypted -> {}", p.display());
        }
    }

    // also make sure we ignore generated hooks if hooks path is inside the repo
    let _ = crate::hooks::ensure_gitignore_ignores_hooks(repo_root);
    Ok(())
}