envstash 0.1.12

Manage .env files across git branches with versioning, diffing, and optional encryption
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75

use std::path::Path;

use chrono::{SecondsFormat, Utc};

use colored::Colorize;

use crate::cli;
use crate::error::{Error, Result};
use crate::parser;
use crate::store::queries::{self, SaveInput};
use crate::util::fs as util_fs;

/// Run the `save` command: read .env from disk, parse, and store.
pub fn run(
    cwd: &Path,
    file: Option<&str>,
    key_file: Option<&str>,
    message: Option<&str>,
) -> Result<()> {
    let mut conn = cli::require_store()?;
    let aes_key = cli::load_encryption_key(&conn, key_file)?;
    let (project_path, git_ctx) = cli::resolve_project(cwd)?;

    let file_name = file.unwrap_or(".env");
    let disk_path = cwd.join(file_name);

    if !disk_path.exists() {
        return Err(Error::FileNotFound(disk_path));
    }

    // Refuse to read through a symlink, which can bypass validate_target_path
    // and exfiltrate arbitrary files.
    util_fs::refuse_symlink(&disk_path, "save")?;

    let content = std::fs::read_to_string(&disk_path)?;
    let entries = parser::parse(&content)?;
    let hash = parser::content_hash(&entries);
    let file_path = cli::resolve_file_path(file_name, cwd, &git_ctx)?;

    let (branch, commit) = match &git_ctx {
        Some(ctx) => (ctx.branch.as_str(), ctx.commit.as_str()),
        None => ("", ""),
    };

    let timestamp = Utc::now().to_rfc3339_opts(SecondsFormat::Secs, true);

    queries::insert_save_input(
        &mut conn,
        &SaveInput {
            project_path: &project_path,
            file_path: &file_path,
            branch,
            commit_hash: commit,
            timestamp: &timestamp,
            content_hash: &hash,
            entries: &entries,
            aes_key: aes_key.as_deref(),
            message,
        },
    )?;

    let msg_suffix = match message {
        Some(m) => format!(" {}", format!("-- {m}").dimmed()),
        None => String::new(),
    };

    println!(
        "{} {} ({} variables){}",
        "Saved".green().bold(),
        file_path,
        entries.len(),
        msg_suffix
    );
    Ok(())
}