fix: polish init, config, docs, and db autodetect

- Add DB images (postgres:16-alpine, mysql:8, redis:7-alpine, mongo:7)
  so generated DB-only configs pass devbox validate
- Fix devbox config to read/write local config file without
  auto-starting the engine daemon
- Remove duplicate start command registration in root.go
- Add devbox init --force flag for reinitializing existing projects
- Fix README: remove engine status, secrets delete -> rm,
  snapshot gc --keep -> --keep-last, secrets get --reveal
- Add tests: DB autodetect images, init --force overwrite

Author: parv68

README.md

@@ -246,9 +246,6 @@ devbox version
 ```bash
 # Start the engine daemon (auto-launched on first `devbox start`)
 devbox engine start
-
-# Check status
-devbox engine status   # (coming soon)
 ```
 
 The engine runs as a background process and is automatically started when you run `devbox start` if it's not already running. You can manage it explicitly with `devbox engine {start|stop|restart}`.
@@ -377,7 +374,7 @@ devbox stop
 | `devbox snapshot export <id> <file>` | Export a snapshot to a tarball | No (fallback) |
 | `devbox snapshot import <file>` | Import a snapshot from a tarball | No (fallback) |
 | `devbox snapshot gc` | Garbage collect old snapshots | No (fallback) |
-| `devbox snapshot gc --keep <n>` | Keep only the N most recent snapshots | No (fallback) |
+| `devbox snapshot gc --keep-last <n>` | Keep only the N most recent snapshots | No (fallback) |
 | `devbox snapshot gc --older-than <duration>` | Remove snapshots older than duration | No (fallback) |
 
 ### Secrets Commands
@@ -387,7 +384,7 @@ devbox stop
 | `devbox secrets set <key> <value>` | Set an encrypted secret | No (fallback) |
 | `devbox secrets get <key>` | Retrieve a secret value | No (fallback) |
 | `devbox secrets list` | List all secret keys | No (fallback) |
-| `devbox secrets delete <key>` | Delete a secret | No (fallback) |
+| `devbox secrets rm <key>` | Remove a secret | No (fallback) |
 | `devbox secrets rotate` | Re-encrypt all secrets with a new key | No (fallback) |
 
 ### Utility Commands
@@ -507,7 +504,7 @@ devbox snapshot import ./snapshot.tar
 devbox snapshot load abc12345
 
 # Delete old snapshots
-devbox snapshot gc --keep 5
+devbox snapshot gc --keep-last 5
 devbox snapshot gc --older-than 7d
 
 # Delete a specific snapshot
@@ -522,17 +519,14 @@ Secrets are encrypted with [age](https://age-encryption.org/) (X25519 + ChaCha20
 # Set a secret
 devbox secrets set DATABASE_URL "postgres://user:pass@db:5432/myapp"
 
-# Get a secret (masked by default)
+# Get a secret
 devbox secrets get DATABASE_URL
 
-# Get a secret (unmasked)
-devbox secrets get DATABASE_URL --reveal
-
 # List all secrets
 devbox secrets list
 
-# Delete a secret
-devbox secrets delete DATABASE_URL
+# Remove a secret
+devbox secrets rm DATABASE_URL
 
 # Re-encrypt all secrets with a new key
 devbox secrets rotate
@@ -897,7 +891,7 @@ make lint
 
 **Q: Do I need the engine daemon running all the time?**
 
-A: No. Commands like `init`, `validate`, `build`, `exec`, `shell`, `cp`, `logs`, `graph`, `ps`, `prune`, `destroy`, `snapshot`, `secrets`, and `config` work without the engine by falling back to the Docker SDK directly. Only `start`, `stop`, `status`, `reset`, `wait`, `top`, and `engine stop`/`engine restart` require the engine. Use `devbox engine start` to launch it when needed.
+A: No. Commands like `init`, `validate`, `build`, `exec`, `shell`, `cp`, `logs`, `graph`, `ps`, `prune`, `destroy`, `snapshot`, `secrets`, and `config` work without the engine. Only `start`, `stop`, `status`, `reset`, `wait`, `top`, and `engine stop`/`engine restart` require the engine. Use `devbox engine start` to launch it when needed.
 
 **Q: Where is data stored?**
 

cli/cmd/config.go

@@ -2,6 +2,7 @@ package cmd
 
 import (
 	"fmt"
+	"sort"
 
 	"github.com/devboxos/devboxos/cli/internal/client"
 	"github.com/devboxos/devboxos/cli/internal/output"
@@ -11,39 +12,49 @@ import (
 var configCmd = &cobra.Command{
 	Use:   "config [key] [value]",
 	Short: "Manage DevBoxOS configuration",
-	Long:  "Get or set DevBoxOS configuration values.",
-	RunE: func(cmd *cobra.Command, args []string) error {
-		conn, err := client.New()
-		if err != nil {
-			return fmt.Errorf("connect to engine: %w", err)
-		}
-		defer conn.Close()
+	Long:  "Get or set DevBoxOS configuration values from the local config file.",
+	RunE:  runConfig,
+}
 
-		if len(args) == 0 {
-			// Show all config
-			cfg, err := conn.GetConfig()
-			if err != nil {
-				return fmt.Errorf("get config: %w", err)
-			}
-			output.Config(cfg)
-			return nil
-		}
+func runConfig(cmd *cobra.Command, args []string) error {
+	cfg, err := client.LoadConfig()
+	if err != nil {
+		return fmt.Errorf("load config: %w", err)
+	}
 
-		if len(args) == 1 {
-			// Get specific key
-			val, err := conn.GetConfigKey(args[0])
-			if err != nil {
-				return fmt.Errorf("get config key: %w", err)
+	if len(args) == 0 {
+		output.Title("DevBoxOS Configuration")
+		keys := make([]string, 0, len(cfg))
+		for k := range cfg {
+			keys = append(keys, k)
+		}
+		sort.Strings(keys)
+		for _, k := range keys {
+			if k == "test_key" {
+				continue
 			}
-			fmt.Printf("%s = %s\n", args[0], val)
-			return nil
+			fmt.Printf("  %-20s = %s\n", k, cfg[k])
 		}
+		return nil
+	}
 
-		// Set key=value
-		if err := conn.SetConfigKey(args[0], args[1]); err != nil {
-			return fmt.Errorf("set config key: %w", err)
+	if len(args) == 1 {
+		val, ok := cfg[args[0]]
+		if !ok {
+			return fmt.Errorf("unknown config key: %s", args[0])
 		}
-		output.Success("Set %s = %s", args[0], args[1])
+		fmt.Printf("%s = %s\n", args[0], val)
 		return nil
-	},
+	}
+
+	cfg[args[0]] = args[1]
+	if err := client.SaveConfig(cfg); err != nil {
+		return fmt.Errorf("save config: %w", err)
+	}
+	output.Success("Set %s = %s", args[0], args[1])
+	return nil
+}
+
+func init() {
+	rootCmd.AddCommand(configCmd)
 }

cli/cmd/init.go

@@ -23,6 +23,7 @@ var (
 	initMaxDepth     int
 	initInteractive  bool
 	initCI           string
+	initForce        bool
 )
 
 var initCmd = &cobra.Command{
@@ -36,6 +37,7 @@ Examples:
   devbox init --dry-run
   devbox init --max-depth 4
   devbox init --interactive
+  devbox init --force
   devbox init --ci github-actions
   devbox init --from-git https://github.com/user/project.git
   devbox init --template react-express-postgres`,
@@ -50,6 +52,7 @@ func init() {
 	initCmd.Flags().BoolVar(&initDryRun, "dry-run", false, "Print generated configuration to stdout without writing files")
 	initCmd.Flags().IntVar(&initMaxDepth, "max-depth", 2, "Maximum subdirectory depth for monorepo scanning")
 	initCmd.Flags().BoolVarP(&initInteractive, "interactive", "i", false, "Review and override detected configuration interactively")
+	initCmd.Flags().BoolVarP(&initForce, "force", "f", false, "Overwrite existing devbox.yml")
 	initCmd.Flags().StringVar(&initCI, "ci", "", "Generate CI workflow (options: github-actions)")
 }
 
@@ -77,10 +80,12 @@ func runInit(cmd *cobra.Command, args []string) error {
 	}
 
 	configPath := filepath.Join(dir, "devbox.yml")
-	if !initDryRun && !initInteractive {
+	if !initDryRun {
 		if _, err := os.Stat(configPath); err == nil {
-			output.Warning("devbox.yml already exists in %s", dir)
-			return nil
+			if !initForce {
+				output.Warning("devbox.yml already exists in %s (use --force to overwrite)", dir)
+				return nil
+			}
 		}
 	}
 

cli/cmd/init_test.go

@@ -65,3 +65,38 @@ func TestInitCmd_NamedProject(t *testing.T) {
 		t.Error("devbox.yml was not created")
 	}
 }
+
+func TestInitCmd_ForceOverwrite(t *testing.T) {
+	tmpDir := t.TempDir()
+	origDir, _ := os.Getwd()
+	os.Chdir(tmpDir)
+	defer os.Chdir(origDir)
+
+	// Create an existing devbox.yml
+	os.WriteFile(filepath.Join(tmpDir, "devbox.yml"), []byte("name: existing\n"), 0644)
+
+	// Without --force, init should warn and not overwrite
+	initForce = false
+	err := runInit(initCmd, nil)
+	if err != nil {
+		t.Fatalf("runInit should return nil when file exists without --force, got: %v", err)
+	}
+	data, _ := os.ReadFile(filepath.Join(tmpDir, "devbox.yml"))
+	if string(data) != "name: existing\n" {
+		t.Errorf("existing file was overwritten without --force: got %q", string(data))
+	}
+
+	// With --force, init should overwrite
+	initForce = true
+	os.WriteFile(filepath.Join(tmpDir, "package.json"), []byte(`{"name":"test"}`), 0644)
+	os.WriteFile(filepath.Join(tmpDir, "index.js"), []byte(`const app = require('express')(); app.listen(3000);`), 0644)
+	err = runInit(initCmd, nil)
+	if err != nil {
+		t.Fatalf("runInit with --force failed: %v", err)
+	}
+	data, _ = os.ReadFile(filepath.Join(tmpDir, "devbox.yml"))
+	if string(data) == "name: existing\n" {
+		t.Error("existing file was NOT overwritten with --force")
+	}
+	initForce = false
+}

cli/cmd/root.go

@@ -62,11 +62,9 @@ func guessCommandName() string {
 func init() {
 	rootCmd.AddCommand(versionCmd)
 	rootCmd.AddCommand(initCmd)
-	rootCmd.AddCommand(startCmd)
 	rootCmd.AddCommand(stopCmd)
 	rootCmd.AddCommand(statusCmd)
 	rootCmd.AddCommand(logsCmd)
 	rootCmd.AddCommand(resetCmd)
 	rootCmd.AddCommand(doctorCmd)
-	rootCmd.AddCommand(configCmd)
 }

cli/internal/autodetect/autodetect.go

@@ -68,8 +68,6 @@ func AutoDetectWithDepth(dir string, maxDepth int) (*types.Config, error) {
 			svc.Ports = rs.AllPorts
 		}
 
-		cfg.Services[name] = svc
-
 		switch rs.Language {
 		case "node":
 			cfg.Runtimes["node"] = "18"
@@ -79,7 +77,17 @@ func AutoDetectWithDepth(dir string, maxDepth int) (*types.Config, error) {
 			cfg.Runtimes["ruby"] = "3.3"
 		case "php":
 			cfg.Runtimes["php"] = "8.3"
+		case "postgres":
+			svc.Image = "postgres:16-alpine"
+		case "mysql":
+			svc.Image = "mysql:8"
+		case "redis":
+			svc.Image = "redis:7-alpine"
+		case "mongo":
+			svc.Image = "mongo:7"
 		}
+
+		cfg.Services[name] = svc
 	}
 
 	if len(cfg.Services) == 0 {

cli/internal/autodetect/autodetect_test.go

@@ -256,3 +256,87 @@ func TestAutoDetectPHPLaravel(t *testing.T) {
 		t.Fatal("expected php runtime in config")
 	}
 }
+
+func TestAutoDetectPostgreSQL(t *testing.T) {
+	dir := t.TempDir()
+	writeFile(t, filepath.Join(dir, "postgresql.conf"), "port = 5432\n")
+
+	cfg, err := AutoDetect(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(cfg.Services) == 0 {
+		t.Fatal("expected at least 1 service")
+	}
+	for name, svc := range cfg.Services {
+		if svc.Port != "5432" {
+			t.Fatalf("service %s expected port 5432, got %s", name, svc.Port)
+		}
+		if svc.Image != "postgres:16-alpine" {
+			t.Fatalf("service %s expected image postgres:16-alpine, got %s", name, svc.Image)
+		}
+	}
+}
+
+func TestAutoDetectMySQL(t *testing.T) {
+	dir := t.TempDir()
+	writeFile(t, filepath.Join(dir, "my.cnf"), "[mysqld]\nport = 3306\n")
+
+	cfg, err := AutoDetect(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(cfg.Services) == 0 {
+		t.Fatal("expected at least 1 service")
+	}
+	for name, svc := range cfg.Services {
+		if svc.Port != "3306" {
+			t.Fatalf("service %s expected port 3306, got %s", name, svc.Port)
+		}
+		if svc.Image != "mysql:8" {
+			t.Fatalf("service %s expected image mysql:8, got %s", name, svc.Image)
+		}
+	}
+}
+
+func TestAutoDetectRedis(t *testing.T) {
+	dir := t.TempDir()
+	writeFile(t, filepath.Join(dir, "redis.conf"), "port 6379\n")
+
+	cfg, err := AutoDetect(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(cfg.Services) == 0 {
+		t.Fatal("expected at least 1 service")
+	}
+	for name, svc := range cfg.Services {
+		if svc.Port != "6379" {
+			t.Fatalf("service %s expected port 6379, got %s", name, svc.Port)
+		}
+		if svc.Image != "redis:7-alpine" {
+			t.Fatalf("service %s expected image redis:7-alpine, got %s", name, svc.Image)
+		}
+	}
+}
+
+func TestAutoDetectMongoDB(t *testing.T) {
+	dir := t.TempDir()
+	writeFile(t, filepath.Join(dir, "mongod.conf"), "port: 27017\n")
+
+	cfg, err := AutoDetect(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(cfg.Services) == 0 {
+		t.Fatal("expected at least 1 service")
+	}
+	for name, svc := range cfg.Services {
+		if svc.Port != "27017" {
+			t.Fatalf("service %s expected port 27017, got %s", name, svc.Port)
+		}
+		if svc.Image != "mongo:7" {
+			t.Fatalf("service %s expected image mongo:7, got %s", name, svc.Image)
+		}
+	}
+}

cli/internal/client/grpc_client.go

@@ -51,6 +51,16 @@ func configPath() string {
 	return filepath.Join(platform.ConfigDir(), "config.json")
 }
 
+// LoadConfig reads CLI configuration from the local config file.
+func LoadConfig() (map[string]string, error) {
+	return loadConfig()
+}
+
+// SaveConfig writes CLI configuration to the local config file.
+func SaveConfig(cfg map[string]string) error {
+	return saveConfig(cfg)
+}
+
 func loadConfig() (map[string]string, error) {
 	cfg := map[string]string{
 		"telemetry": "true",

shared/config/autodetect.go

@@ -75,6 +75,14 @@ func AutoDetectWithDepth(dir string, maxDepth int) (*types.Config, error) {
 			if rs.Image != "" {
 				svc.Image = rs.Image
 			}
+		case "postgres":
+			svc.Image = "postgres:16-alpine"
+		case "mysql":
+			svc.Image = "mysql:8"
+		case "redis":
+			svc.Image = "redis:7-alpine"
+		case "mongo":
+			svc.Image = "mongo:7"
 		}
 
 		if rs.BuildCommand != "" {