1 files changed, 69 insertions, 0 deletions

diff --git a/cmd/ship/env/list.go b/cmd/ship/env/list.go
new file mode 100644
index 0000000..ad76eb6
--- /dev/null
+++ b/cmd/ship/env/list.go
@@ -0,0 +1,69 @@
+package env
+
+import (
+        "fmt"
+        "strings"
+
+        "github.com/bdw/ship/internal/state"
+        "github.com/spf13/cobra"
+)
+
+var listCmd = &cobra.Command{
+        Use:   "list <app>",
+        Short: "List environment variables for an app",
+        Args:  cobra.ExactArgs(1),
+        RunE:  runList,
+}
+
+func runList(cmd *cobra.Command, args []string) error {
+        name := args[0]
+
+        st, err := state.Load()
+        if err != nil {
+                return fmt.Errorf("error loading state: %w", err)
+        }
+
+        host, _ := cmd.Flags().GetString("host")
+        if host == "" {
+                host = st.GetDefaultHost()
+        }
+
+        if host == "" {
+                return fmt.Errorf("--host is required")
+        }
+
+        app, err := st.GetApp(host, name)
+        if err != nil {
+                return err
+        }
+
+        if app.Type != "app" {
+                return fmt.Errorf("env is only available for apps, not static sites")
+        }
+
+        fmt.Printf("Environment variables for %s:\n\n", name)
+        if len(app.Env) == 0 {
+                fmt.Println("  (none)")
+        } else {
+                for k, v := range app.Env {
+                        display := v
+                        if isSensitive(k) {
+                                display = "***"
+                        }
+                        fmt.Printf("  %s=%s\n", k, display)
+                }
+        }
+
+        return nil
+}
+
+func isSensitive(key string) bool {
+        key = strings.ToLower(key)
+        sensitiveWords := []string{"key", "secret", "password", "token", "api"}
+        for _, word := range sensitiveWords {
+                if strings.Contains(key, word) {
+                        return true
+                }
+        }
+        return false
+}