Ghostable CLI 3.x

Ghostable stores encrypted environment values and the signed records needed to manage them inside your project repository. The CLI creates environments, encrypts and decrypts values, validates configuration, reviews code for environment drift and hard-coded secrets, and prepares values for local processes or deployment providers.

There is no Ghostable login and no hosted Ghostable vault in the v3 architecture. Your repository carries the encrypted project state; each authorized device keeps its private identity outside the repository.

1. Initialize a repository. ghostable setup creates a project manifest, the first device identity, environment keys, policy, and signed activity state.
2. Commit encrypted state. The .ghostable/ directory is designed to travel through Git and code review. Plaintext .env files are not.
3. Grant access by device. New team members create their own device identities and request a role for one or more environments.
4. Work locally. Pull to a file only when necessary, or inject values directly into a command with env run.
5. Review every change. Signed value history, validation, hygiene reports, and secret scanning make environment changes visible without disclosing secret contents.

A normal development loop is intentionally small:

$ ghostable status
$ ghostable env diff --env default --file .env
$ ghostable env push --env default --file .env --reason "Update local configuration"
$ ghostable validate --env default
$ ghostable review
$ git add .ghostable && git commit -m "Update encrypted environment"
 

Commands prompt for missing choices in an interactive terminal. Scripts, CI jobs, and coding agents should pass explicit flags and prefer --json output.

The CLI is Ghostable's versioned engine and the source of truth for project behavior. Ghostable Desktop is a paid macOS interface that runs the CLI underneath, so encryption, repository formats, access rules, and command behavior remain consistent between both products.

Use these versioned 3.x docs for the shared engine. Use the Desktop documentation for installation, application diagnostics, and interface-specific guidance.