CLI reference

penv gets the right values into the right process at the right time. This reference documents penv 1.0.0-alpha.3.

Start with the global options, which every command takes.

First minute

Declare what the app needs, then run it.

Command	What it does
`penv init`	Read .env, write .env.schema, and keep .env out of the repository
`penv ls`	List keys, types and which ones have a value
`penv check`	Report schema problems and missing values
`penv run`	Validate, then run a command with the values in its environment only

Values in the cloud instead of a file on one laptop.

Command	What it does
`penv login`	Sign in with a device code; the credential goes to the OS keychain
`penv logout`	Remove the stored credential
`penv push`	Move local values to the cloud and delete .env
`penv pull`	Write a plain .env from the cloud
`penv set`	Write one value without echoing it
`penv unset`	Remove one value
`penv machine`	Machine identities
`penv machine enroll`	Bind a server keypair from a one-time secret

The schema, and the file your language reads it through.

Command	What it does
`penv gen`	Write the typed file for a language target
`penv schema`	Print the schema as JSON

What an agent may see, and what it has to ask for.

Command	What it does
`penv guard`	Write the harness rules that keep agents out of .env
`penv hook`	Run as a harness hook; a payload it cannot read is refused
`penv reveal`	Print one value; an agent session needs a person's approval

Keeping the binary and the shell current.

Command	What it does
`penv upgrade`	Replace this binary from the latest release
`penv completions`	Print the shell completion script
`penv help`	Print the command manifest