Daily Development | Ghostable CLI 3.x | Ghostable Menu Daily Development Start from current state ------------------------ Pull the branch before materializing values so local work uses the latest encrypted records and grants: Start work Copy ``` $ git pull --ff-only $ ghostable status $ ghostable env diff --env default --file .env ``` If the diff is intentional local work, keep it. Otherwise, pull the shared environment into the file before starting. Run the application ------------------- Prefer process injection when the application does not require a physical `.env` file: Run with Ghostable values Copy ``` $ ghostable env run --env default -- php artisan serve $ ghostable env run --env default --mask-output -- npm test ``` Use `env pull` when framework tooling specifically reads a file. Change configuration -------------------- Edit the local env file with normal developer tools, then inspect the redacted diff before storing it: Store a reviewed change Copy ``` $ ghostable env diff --env default --file .env $ ghostable env push --env default --file .env --reason "Configure local mail testing" ``` For one key, use `var push --file`. Use `env sync` only when keys absent from the file should be deleted. Validate and review ------------------- Pre-commit checks Copy ``` $ ghostable validate --env default $ ghostable review $ ghostable hygiene report --env default ``` Validation checks declared schema rules. Review checks changed-code ENV usage and hard-coded secrets. Hygiene checks operational age and rotation state. Commit the change ----------------- Commit encrypted state Copy ``` $ git diff -- .ghostable $ git add .ghostable && git commit -m "Configure local mail testing" ``` Commit the application code and its Ghostable state together when they are part of the same change. Clean plaintext files --------------------- At the end of sensitive work, preview and remove project-root env files: Remove local plaintext Copy ``` $ ghostable env clean --dry-run $ ghostable env clean ``` Cleanup removes `.env`, `.env.*`, and Ghostable backup files from the project root. It keeps `.env.example` unless `--include-example` is explicitly passed. On this page [ ![Ghostable](https://ghostable.dev/images/logo-dark.svg) ![Ghostable](https://ghostable.dev/images/logo-light.svg) ](https://ghostable.dev) CLI 3.x [ CLI 3.x ](https://ghostable.dev/docs/3.x) [ Desktop ](https://ghostable.dev/docs/desktop) CLI 3.x introduction Documentation local first no login encrypted repository plaintext hosted service Installation Documentation brew homebrew npm npx linux windows PATH version update Start a new project Getting Started setup seed dotenv owner initialize Adopt an existing project Getting Started existing env import authoritative source adopt Onboard a team member Getting Started join request approve roles offboarding pull request Repository and storage Core Concepts .ghostable git conflict merge worktree private identity metadata Environments Core Concepts protected production preview staging push sync pull replace run mask-output Variables and promotions Core Concepts var promote copy context annotation key Access and devices Core Concepts identity reader writer grantor owner revoke rotate leave delete Daily development workflow Workflows pull diff validate review clean daily Review and secret scanning Workflows scan sarif github suppress secrets drift Hygiene and rotation Workflows rotation stale unused suppression environment key Automation credentials Automation & CI GHOSTABLE\_CI\_TOKEN ci deploy credential powershell revoke replace Continuous integration Automation & CI GitHub Actions fork pull request JSON stdout stderr exit codes mask-output Deployments Automation & CI Forge Vapor Cloud provider CLI dry-run preserve remote keys temporary files Validation Reference schema required nullable regex min max different\_from Command reference Reference --help --json NO\_COLOR flags aliases exit code automation Configuration Reference ghostable.yaml activity mode auditEnvironments scan ignores deployTarget dotenv syntax Security Reference cryptography XChaCha20 Poly1305 HKDF user presence threat model Backups & Offline Reference recovery offline restore clone key identity Agent integration Reference AGENTS.md capabilities allowlist coding agent Troubleshooting Reference no project found revoked identity stale policy user presence invalid CI token provider CLI git conflict diagnostics Ghostable Desktop overview Desktop Installation Desktop Projects and setup Desktop Interface tour Desktop Environments and variables Desktop Local environment files Desktop Validation and review Desktop Activity Desktop Access and automation Desktop Project settings Desktop Application settings Desktop Licensing and updates Desktop Security and storage Desktop Troubleshooting Desktop No results found