CLI
Command reference for the stash CLI, generated from v1.0.0.
The stash CLI. Install with npx [email protected]. Every command accepts --help and --version.
| Command | Description |
|---|
init | Initialize CipherStash for your project |
plan | Draft a reviewable encryption plan at .cipherstash/plan.md |
impl | Execute the plan with a local agent |
status | Displays implementation status |
wizard | AI-guided encryption setup (reads your codebase) |
doctor | Diagnose install problems (native binaries, runtime) |
manifest | Print the structured, versioned command surface |
telemetry | Manage anonymous usage analytics |
| Command | Description |
|---|
auth login | Authenticate with CipherStash |
auth regions | List the regions you can authenticate against |
| Command | Description |
|---|
eql install | Scaffold stash.config.ts (if missing) and install EQL extensions |
eql migration | Generate an EQL v3 install migration for your ORM (Drizzle; Prisma Next installs EQL through its own migrations) |
eql repair | Repair migrations drizzle-kit generated with an un-runnable ALTER COLUMN to an encrypted type |
eql upgrade | Upgrade EQL extensions to the latest version |
eql status | Show EQL installation status |
| Command | Description |
|---|
schema build | Build an encryption schema from your database |
| Command | Description |
|---|
encrypt status | Show per-column migration status (phase, progress, drift) |
encrypt plan | Diff intent (.cipherstash/migrations.json) vs observed state |
encrypt backfill | Resumably encrypt plaintext into the encrypted column |
encrypt drop | Generate a migration to drop the plaintext column |
| Command | Description |
|---|
env | Mint deployment credentials and print them as env vars |
