1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
use clap::Subcommand;
use clap_verbosity_flag::Verbosity;
use clap::Parser;
use std::ffi::OsString;
#[derive(Parser, Debug)]
pub struct UpgradeCommand {
/// Upgrade to specific version (e.g. 1.0.0)
#[clap(long)]
pub version: Option<String>,
/// Do not ask for version confirmation
#[clap(short, long, default_value_t = false)]
pub yes: bool,
}
#[derive(Parser, Debug)]
pub struct EvalCommand {
#[clap(trailing_var_arg = true, allow_hyphen_values = true, required = true)]
pub commands: Vec<String>,
}
/// Default replacement format: `{}` is replaced by the variable name.
/// Produces bash self-rehydrating tokens like `${MY_VAR:-REDACTED}`.
pub const DEFAULT_MASK_FORMAT: &str = "${{}:-REDACTED}";
#[derive(Parser, Debug)]
pub struct InjectCommand {
/// Do not mask secret values in the subprocess output.
#[clap(long, default_value_t = false)]
pub no_mask: bool,
/// Format used for masked values. `{}` is substituted with the variable
/// name; omit `{}` for a static replacement (e.g. `REDACTED`).
#[clap(long, default_value = DEFAULT_MASK_FORMAT)]
pub mask_format: String,
#[clap(trailing_var_arg = true, allow_hyphen_values = true)]
pub commands: Vec<String>,
}
#[derive(Parser, Debug)]
pub struct McpCommand {
/// Remote Streamable HTTP MCP endpoint.
pub url: Option<String>,
/// Local stdio MCP server command. It must follow `--`.
#[arg(last = true, allow_hyphen_values = true)]
pub argv: Vec<OsString>,
}
#[derive(Parser, Debug)]
pub struct StatusCommand {
/// Check all supported vault CLIs, not only those referenced in lade.yml.
#[clap(long, default_value_t = false)]
pub all: bool,
/// Emit a machine-readable JSON report to stdout instead of human text.
#[clap(long, default_value_t = false)]
pub json: bool,
}
#[derive(Subcommand, Debug)]
pub enum Command {
/// Upgrade lade.
Upgrade(UpgradeCommand),
/// Report lade version, config, hooks, and CLI compatibility.
Status(StatusCommand),
/// Enable execution hooks.
On,
/// Disable execution hooks.
Off,
/// Install auto launcher in shell profile.
Install,
/// Uninstall auto launcher in shell profile.
Uninstall,
/// Inject environment into nested command.
Inject(InjectCommand),
/// Resolve secrets for a local or remote MCP server.
Mcp(McpCommand),
/// Set environment for shell.
Set(EvalCommand),
/// Unset environment for shell.
Unset(EvalCommand),
/// Evaluate a secret URI and print its resolved value.
Eval {
/// The secret URI to resolve (e.g., op://vault/item/field)
uri: String,
},
/// Handle agentic tools hooks. Reads JSON from stdin, outputs platform-specific response.
Hook,
/// Approve a pending disclaimer and run the command, using the code shown in
/// the disclaimer message.
Approve {
/// The approval code printed in the disclaimer (e.g. `ab12c`).
code: Option<String>,
},
/// Manage user
User {
/// The username to set
username: Option<String>,
/// Reset/remove the current user. lade will fallback to the OS user for secrets
#[arg(long)]
reset: bool,
},
/// Shortcut for `lade inject <command...>`.
#[command(external_subcommand)]
InjectAlias(Vec<String>),
}
#[derive(Parser, Debug)]
#[clap(name="lade", about, long_about = None, disable_version_flag = true, disable_help_flag = true)]
pub struct Args {
#[clap(long, value_parser)]
pub version: bool,
#[clap(short, long, value_parser)]
pub help: bool,
#[clap(subcommand)]
pub command: Option<Command>,
#[command(flatten)]
pub verbose: Verbosity,
}