envpkt inspect

Display a human-readable view of your envpkt.toml configuration. Automatically resolves catalog references.

Usage

envpkt inspect [options]

Options

| Option | Description | Default | | --------------------- | ------------------------------------------------------- | ------------- | | -c, --config <path> | Path to envpkt.toml | Auto-detected | | --format <format> | Output format: table, json | table | | --resolved | Show resolved view (catalog merged) | false | | --secrets | Show secret values from environment (masked by default) | false | | --plaintext | Show secret values in plaintext (requires --secrets) | false |

Examples

# Inspect current directory
envpkt inspect

# Inspect specific file
envpkt inspect -c path/to/envpkt.toml

# Raw JSON dump
envpkt inspect --format json

# Show resolved view with catalog merged
envpkt inspect --resolved

# Show secret values (masked)
envpkt inspect --secrets

# Show secret values in plaintext
envpkt inspect --secrets --plaintext

Secret Display Modes

The --secrets flag reads values from environment variables matching each secret key:

• Without --secrets: Only metadata is shown, no values
• With --secrets: Values are masked (e.g., pos•••••t/db)
• With --secrets --plaintext: Full values are displayed

Aliases

Entries with from_key (see Aliases) are shown as separate rows with an [alias → secret.X] tag next to the service name, making the relationship visible. They don’t have their own value — they inherit from their target at boot time.