CLI subcommand handlers. Each function handles one clap subcommand
(provider, tunnel, password, snippet, add, import, sync, logs, theme,
vault sign) and runs outside the TUI in a non-interactive terminal context.
Small reusable fuzzy ranking using the same nucleo configuration as the jump
palette (smart case and normalization). Lets pickers offer type-to-filter
without duplicating the full jump scoring pipeline. The matcher is cached in
a thread-local so its scratch buffers are reused across keystrokes and frames
instead of being reallocated on every call.
Static, execution-free blast-radius analysis of a snippet command, surfaced
by the Snippets detail IMPACT card. A snippet is a single-line shell command
run over SSH against a fleet of hosts; this judges what it does BEFORE a
fleet run, so an operator sees the blast radius at a glance.