sluuz (slu)

Canonical: gitlab.com/safteinzz/sluuz · Mirror: github.com/safteinzz/sluuz

git, but it sleuths - a git superset with cross-repo search, secret scanning, and multi-repo management

Install

cargo install sluuz

That lands one command: slu, three letters like git itself.

It is still git

Anything git understands is forwarded verbatim, with your editor, pager, prompts, colors and exit codes intact:

slu commit -m "fix"
slu push
slu rebase -i HEAD~3

Then come the parts it does not. Each one below is a plain command and its interactive twin, because they answer the same question.

Every repo at once, and a way into them

Legend: ✚ uncommitted · ↑ unpushed commits · ↓ unpulled commits

slu repos                # every repo under here
slu repos --dirty        # only the ones needing attention
slu irepos               # the same list, with a way in
slu irepos ~/projects    # or under somewhere else

One app, three doors: slu ibranch opens it at the branches level and slu ilog at the commits level of the repo you are standing in.

Find a leaked string in every repo's history

slu search -r "1337-let-me-in"        # one string, every repo
slu scan                              # the usual terms
slu scan -t "AKIA,BEGIN RSA PRIVATE KEY"
slu iscan                             # type the terms, browse the hits

notifications-worker is the case a file listing cannot find: .env was untracked afterwards, so the secret survives only in history. The origin/ refs say it survives on the server too.

Terms are case-insensitive and default to password,secret,token,api_key,passwd,credentials; -t replaces that list. Being pickaxe-based, all three also read binary and encrypted blobs.

Read history in a real diff view

Highlighted in pure Rust, so no external diff tool is required - though Enter hands the file to yours if you want it.

slu trace [-a] [-g] [-n N]   # aligned log, optionally every branch, with a graph
slu ilog                     # this branch
slu ilog --all -n 500        # every branch, more history
slu ilog src/main.rs         # only commits touching that path

Stage and review in one place

git status you can act on. The two-column code is git's own: left is staged (green), right is unstaged (red), so M is staged, M is unstaged, MM is both and ?? is untracked.

slu status -sb           # real git, passed straight through
slu istatus              # the same two columns, with the diffs and the keys

The diff pane follows the scope. Works from any subdirectory.

Know what you have not pushed, and delete what is finished

Legend: ↑N ahead of upstream · no remote never pushed · ⚑ gone upstream was deleted · synced in step

slu ibranch [-a]         # push state of every branch, local or local + remote
slu tidy [path] [-a]     # finished branches across every repo, with a delete command to paste
slu itidy                # the same list, deleted in place

"Finished" means upstream gone, not "merged", so a branch still alive on the remote is never suggested for deletion, and the confirm defaults to No.

Keys

irepos, ilog, ibranch, istatus, itidy and iscan share one rule: plain keys drive the top pane, Ctrl and the same keys drive the diff.

Enter on a diff opens your git difftool and suspends until you close it, or says you have no diff.tool set rather than tearing down the screen.

Tab completion

Completion reuses git's own, so slu branch v<Tab> completes a real branch name and every git subcommand, alias and flag behaves exactly like git.

slu completions bash --add     # writes the loader into ~/.bashrc
slu completions zsh  --add     # ~/.zshrc
slu completions fish --add     # ~/.config/fish/config.fish

Restart your shell afterwards; without --add it just prints the script. Works in Git Bash and WSL too.

Everything else

slu sync [path] [--pull]       # fetch and prune every repo, optionally fast-forward
slu each <git args>            # run any git command in every repo, in parallel
slu self check                 # is there a newer release?
slu self update [-y]           # reinstall sluuz from crates.io

Multi-repo commands take a path (default .) and -d, --depth <N> for how deep to look (default 3). Run slu <command> --help for the full flag surface of any command.

Troubleshooting

Ctrl-J / Ctrl-K do nothing in some terminals, VS Code's integrated one among them, because they cannot tell Ctrl-J from Enter. slu takes Ctrl-Down and Ctrl-Up for the same actions, so make the terminal send those: in VS Code's Keyboard Shortcuts (JSON), bind ctrl+j and ctrl+k with "when": "terminalFocus" to workbench.action.terminal.sendSequence, the sequence being the JSON escape backslash-u-001b then [1;5B and [1;5A.

The pictures

Every clip and screenshot above is rendered by VHS from the rig in demo/, against six invented repositories it builds and throws away. It redirects HOME and every XDG variable into demo/home, so it cannot see or touch your repos or your git config.

cargo build --release
cd demo && ./render.sh

License

AGPL-3.0-only