Add --quiet flag, --json output, and config permission check

- Add global --quiet/-q flag to suppress non-error output
- Add --json flag to verify, snapshot rm, and prune commands
- Add config file permission check (warns if world/group readable)
- Update TODO.md to remove completed items

internal/vaultik/prune.go

@@ -1,7 +1,9 @@
 package vaultik
 
 import (
+	"encoding/json"
 	"fmt"
+	"os"
 	"strings"
 
 	"git.eeqj.de/sneak/vaultik/internal/log"
@@ -11,6 +13,15 @@ import (
 // PruneOptions contains options for the prune command
 type PruneOptions struct {
 	Force bool
+	JSON  bool
+}
+
+// PruneBlobsResult contains the result of a blob prune operation
+type PruneBlobsResult struct {
+	BlobsFound   int   `json:"blobs_found"`
+	BlobsDeleted int   `json:"blobs_deleted"`
+	BlobsFailed  int   `json:"blobs_failed,omitempty"`
+	BytesFreed   int64 `json:"bytes_freed"`
 }
 
 // PruneBlobs removes unreferenced blobs from storage
@@ -103,18 +114,27 @@ func (v *Vaultik) PruneBlobs(opts *PruneOptions) error {
 		}
 	}
 
+	result := &PruneBlobsResult{
+		BlobsFound: len(unreferencedBlobs),
+	}
+
 	if len(unreferencedBlobs) == 0 {
 		log.Info("No unreferenced blobs found")
+		if opts.JSON {
+			return outputPruneBlobsJSON(result)
+		}
 		fmt.Println("No unreferenced blobs to remove.")
 		return nil
 	}
 
 	// Show what will be deleted
 	log.Info("Found unreferenced blobs", "count", len(unreferencedBlobs), "total_size", humanize.Bytes(uint64(totalSize)))
-	fmt.Printf("Found %d unreferenced blob(s) totaling %s\n", len(unreferencedBlobs), humanize.Bytes(uint64(totalSize)))
+	if !opts.JSON {
+		fmt.Printf("Found %d unreferenced blob(s) totaling %s\n", len(unreferencedBlobs), humanize.Bytes(uint64(totalSize)))
+	}
 
-	// Confirm unless --force is used
-	if !opts.Force {
+	// Confirm unless --force is used (skip in JSON mode - require --force)
+	if !opts.Force && !opts.JSON {
 		fmt.Printf("\nDelete %d unreferenced blob(s)? [y/N] ", len(unreferencedBlobs))
 		var confirm string
 		if _, err := fmt.Scanln(&confirm); err != nil {
@@ -154,12 +174,20 @@ func (v *Vaultik) PruneBlobs(opts *PruneOptions) error {
 		}
 	}
 
+	result.BlobsDeleted = deletedCount
+	result.BlobsFailed = len(unreferencedBlobs) - deletedCount
+	result.BytesFreed = deletedSize
+
 	log.Info("Prune complete",
 		"deleted_count", deletedCount,
 		"deleted_size", humanize.Bytes(uint64(deletedSize)),
 		"failed", len(unreferencedBlobs)-deletedCount,
 	)
 
+	if opts.JSON {
+		return outputPruneBlobsJSON(result)
+	}
+
 	fmt.Printf("\nDeleted %d blob(s) totaling %s\n", deletedCount, humanize.Bytes(uint64(deletedSize)))
 	if deletedCount < len(unreferencedBlobs) {
 		fmt.Printf("Failed to delete %d blob(s)\n", len(unreferencedBlobs)-deletedCount)
@@ -167,3 +195,10 @@ func (v *Vaultik) PruneBlobs(opts *PruneOptions) error {
 
 	return nil
 }
+
+// outputPruneBlobsJSON outputs the prune result as JSON
+func outputPruneBlobsJSON(result *PruneBlobsResult) error {
+	encoder := json.NewEncoder(os.Stdout)
+	encoder.SetIndent("", "  ")
+	return encoder.Encode(result)
+}