🔒 CloudSync-CLI

An open-source, Git-like version control CLI for secure cloud-to-local synchronization via encrypted SSH tunnels.

"Your configs, your cloud, your rules — no public repos required."

---

🚀 Quick Installation

Option 1: One-Line Automated Installers (Recommended)

🐧 Linux & 🍏 macOS (curl / bash)

curl -fsSL https://raw.githubusercontent.com/Tech4File/cloudsync-cli/main/installer/install.sh | bash

🪟 Windows (PowerShell)

irm https://raw.githubusercontent.com/Tech4File/cloudsync-cli/main/installer/Install-CloudSync.ps1 | iex

Option 2: Install via npm (Global CLI)

npm install -g cloudsync-cli

Option 3: Install via GitHub Packages (GPR)

npm install -g @tech4file/cloudsync-cli --registry=https://npm.pkg.github.com

Option 4: Download Standalone Binaries (Windows / Linux / macOS)

Download single-executable binaries directly from the latest GitHub Releases:

• 🪟 cloudsync.exe / cloudsync-windows-x64.zip (Windows)
• 🐧 cloudsync-linux-x64 (Linux x64)
• 🍏 cloudsync-macos-x64 (macOS x64 / ARM64)

---

📋 Quick Start

# 1. Initialize configuration
cloudsync init --host your-server.com --user username --port 22

# 2. Generate .cloudsyncignore file
cloudsync ignore --template node

# 3. Stage files for version control
cloudsync stage .env config.json

# 4. Commit staged changes locally
cloudsync commit "Update database config"

# 5. Securely upload to remote target
cloudsync upload --profile default

# 6. Share and receive files over peer-to-peer sessions
cloudsync share ./data --port 8095 --password mysecret
cloudsync fetch http://192.168.1.5:8095/share/abc1234 --password mysecret

# 7. Check operational health & network connectivity
cloudsync doctor

Full documentation & CLI command reference: cloudsync-cli/README.md

---

📁 Repository Structure

Path	Description
cloudsync-cli/	The npm package directory containing CLI source, commands, transport engine, and VCS modules.
.github/workflows/ci.yml	Continuous Integration matrix testing Node 18, 20, 22 on Ubuntu, Windows, and macOS.
.github/workflows/release.yml	Automated build & publication pipeline — produces standalone binaries, releases to npmjs, publishes to GitHub Packages (GPR), and creates GitHub Releases.

---

⚙️ Automated CI/CD Pipeline

Pipeline	Trigger	Automated Operations
CI Matrix (ci.yml)	Push / PR to main	Runs multi-OS test matrix across Node.js 18, 20, and 22.
Release Pipeline (release.yml)	Push to main	Runs test suite $\rightarrow$ builds bundles $\rightarrow$ compiles standalone EXEs/binaries $\rightarrow$ publishes to npmjs $\rightarrow$ publishes to GPR $\rightarrow$ generates GitHub Release with SHA-256 checksums.

---

🛡️ Security & Hardening Highlights

• AES-256-GCM Encrypted Snapshots: Local history snapshot archives encrypted on disk via Scrypt key derivation with authenticated AES-256-GCM (cloudsync commit --encrypt --passphrase <secret>).
• Streaming 64KB Chunk Integrity: Stream-based SHA-256 checksum hashing for large file archives without memory spikes.
• Zero-Dependency Security Core: Hardened with prototype pollution protection (safeJsonParse), path traversal filtering (safePath), and SSRF-safe hostname validation.
• Encrypted SSH Channels: Native ssh2 transport layer supporting keypair auth, custom ports, and SCP/SFTP/RSYNC protocols with multi-stream concurrency (-j, --concurrency).
• HTTP Share Server Security: Built-in HTTP sharing with rate limiting (60 req/min), CORS restriction, password authentication, and security headers (CSP, X-Frame-Options: DENY, X-Content-Type-Options: nosniff).

---

📄 License

Distributed under the MIT License. See LICENSE for details.

Security Policy: SECURITY.md | Contributing Guidelines: CONTRIBUTING.md