kbsecret 0.4.4 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 40118cac4e5abfe1a536fefb044f62266df790b8
-  data.tar.gz: 52f20d03e5855f7609c41e51787e530fa01e7f38
+  metadata.gz: 95555b8ca2d5833158c8575fb15a5de20f03e954
+  data.tar.gz: 1bf659569930104b29a28057750260d8ae868b24
 SHA512:
-  metadata.gz: 1b920a36a162c11b7b94b925ce495f6246a4645711b987ff5c9629845e881934918fc179cbfdd6d2452d858fc800dedbe220edd4b0723c42271f88c3faeb69b5
-  data.tar.gz: 3102a1a4481fdd75a8dfebd4e56543a6fe079b95f5e4405800ff6b3532e0d2e4efb6b151d3c325b55f6edd4d4d1421713452337fe932b617f6a6bf42d12caf8e
+  metadata.gz: 595437bc9f394bfed347a23c05fdb480a329b40230aceeddeec4592bb2c1523cadace82c4f694b85722e3f6d29d7e46239ed9bef6db143db206617d5fd217723
+  data.tar.gz: ca76b4d7e0709eebe3b1260572ac3d4e84b872487532909cce88523d19e4a0f5e9a5e8375222d619caffa70c534ea28841a30ff7e868fecfb30434a47361b9fe

data/bin/kbsecret-dump-fields

@@ -3,22 +3,28 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Dump all fields for the given record.
-
-    Usage:
-      kbsecret dump-fields [--session <name>] <label>
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
-  o.bool "-x", "--terse", "output in field:value format"
-  o.string "-i", "--ifs", "separate terse pairs with this string", default: ":"
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Dump all fields for the given record.
+
+      Usage:
+        kbsecret dump-fields [--session <name>] <label>
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+    o.bool "-x", "--terse", "output in field:value format"
+    o.string "-i", "--ifs", "separate terse pairs with this string", default: ":"
+  end
+
+  dreck do
+    string :label
+  end
 end
 
-session = KBSecret::CLI.ensure_session opts[:session]
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
 
-label = opts.args.shift
+label = cmd.args[:label]
 record = session[label]
 
 KBSecret::CLI.die "No such record." unless record
@@ -26,8 +32,8 @@ KBSecret::CLI.die "No such record." unless record
 field_values = record.class.data_fields.map { |f| record.send f }
 field_pairs = record.class.data_fields.zip(field_values)
 
-if opts.terse?
-  puts field_pairs.map { |f, v| "#{f}#{opts[:ifs]}#{v}" }.join "\n"
+if cmd.opts.terse?
+  puts field_pairs.map { |f, v| "#{f}#{cmd.opts[:ifs]}#{v}" }.join "\n"
 else
   puts field_pairs.map { |f, v| "#{f}: #{v}" }.join "\n"
 end

data/bin/kbsecret-env

@@ -3,37 +3,42 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Retrieve environment records in a source-able format.
-
-    Usage:
-      kbsecret env [--session <name>] [--all] <label1 label2 ...>
-
-    Examples:
-      kbsecret env --all
-      kbsecret env staging beta
-  EOS
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Retrieve environment records in a source-able format.
+
+      Usage:
+        kbsecret env [--session <name>] [--all] <label1 label2 ...>
+
+      Examples:
+        kbsecret env --all
+        kbsecret env staging beta
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+    o.bool "-a", "--all", "retrieve all environment records, not just listed ones"
+    o.bool "-v", "--value-only", "print only the environment value, not the key"
+  end
 
-  o.string "-s", "--session", "the session name", default: :default
-  o.bool "-a", "--all", "retrieve all environment records, not just listed ones"
-  o.bool "-v", "--value-only", "print only the environment value, not the key"
+  dreck do
+    list :string, :labels
+  end
 end
 
-session = KBSecret::CLI.ensure_session opts[:session]
-
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
 records = session.records :environment
 
-selected_records = if opts.all?
+selected_records = if cmd.opts.all?
                      records
                    else
                      records.select do |record|
-                       opts.args.include? record.label
+                       cmd.args[:labels].include? record.label
                      end
                    end
 
 selected_records.each do |record|
-  if opts.value_only?
+  if cmd.opts.value_only?
     puts record.value
   else
     puts record.to_export

data/bin/kbsecret-list

@@ -3,27 +3,29 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    List all secrets known to the specified session (or the default session).
-
-    Usage:
-      kbsecret list [--session <name>] [--show-all]
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
-  o.string "-t", "--type", "the type of secrets to list", default: nil
-  o.bool "-a", "--show-all", "show everything in each secret (i.e. metadata)"
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      List all secrets known to the specified session (or the default session).
+
+      Usage:
+        kbsecret list [--session <name>] [--show-all]
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+    o.string "-t", "--type", "the type of secrets to list", default: nil
+    o.bool "-a", "--show-all", "show everything in each secret (i.e. metadata)"
+  end
 end
 
-session = KBSecret::CLI.ensure_session opts[:session]
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
 
-records = session.records opts[:type]
+records = session.records cmd.opts[:type]
 
 records.each do |record|
   puts record.label
 
-  next unless opts.show_all?
+  next unless cmd.opts.show_all?
 
   puts <<~EOS
     \tType: #{record.type}

data/bin/kbsecret-login

@@ -3,39 +3,45 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Retrieve login records.
-
-    Usage:
-      kbsecret login [--session <name>] <label1 label2 ...>
-
-    Examples:
-      kbsecret login --terse --ifs "*" gmail
-      kbsecret login gmail netflix
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
-  o.bool "-a", "--all", "retrieve all login records, not just listed ones"
-  o.bool "-x", "--terse", "output in label:username:password format"
-  o.string "-i", "--ifs", "separate terse fields with this string", default: ":"
-end
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Retrieve login records.
+
+      Usage:
+        kbsecret login [--session <name>] <label1 label2 ...>
 
-session = KBSecret::CLI.ensure_session opts[:session]
+      Examples:
+        kbsecret login --terse --ifs "*" gmail
+        kbsecret login gmail netflix
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+    o.bool "-a", "--all", "retrieve all login records, not just listed ones"
+    o.bool "-x", "--terse", "output in label:username:password format"
+    o.string "-i", "--ifs", "separate terse fields with this string", default: ":"
+  end
 
+  dreck do
+    list :string, :labels
+  end
+end
+
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
 records = session.records :login
-selected_records = if opts.all?
+
+selected_records = if cmd.opts.all?
                      records
                    else
                      records.select do |record|
-                       opts.args.include? record.label
+                       cmd.args[:labels].include? record.label
                      end
                    end
 
 selected_records.each do |record|
-  if opts.terse?
+  if cmd.opts.terse?
     fields = %i[label username password].map { |m| record.send(m) }
-    puts fields.join(opts[:ifs])
+    puts fields.join(cmd.opts[:ifs])
   else
     puts <<~EOS
       Label: #{record.label}

data/bin/kbsecret-new

@@ -8,34 +8,40 @@ require "tty-prompt"
 # allows for abbreviated types (e.g., `kbsecret new env ...`)
 TYPE_ALIASES = Abbrev.abbrev(KBSecret::Record.record_types).freeze
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Create a new secret record.
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Create a new secret record.
 
-    Usage:
-      kbsecret new [options] <type> <label>
-      kbsecret new [options] --args <type> <label> <fields>
+      Usage:
+        kbsecret new [options] <type> <label>
+        kbsecret new [options] --args <type> <label> <fields>
 
-    Examples:
-      kbsecret new login gmail
-      kbsecret new environment foo-api
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
-  o.bool "-f", "--force", "force creation (ignore overwrites, etc.)"
-  o.bool "-a", "--args", "use trailing arguments as fields, even with a tty"
-  o.bool "-e", "--echo", "echo input to tty (only affects interactive input)"
-end
+      Examples:
+        kbsecret new login gmail
+        kbsecret new environment foo-api
+    EOS
 
-session = KBSecret::CLI.ensure_session opts[:session]
+    o.string "-s", "--session", "the session name", default: :default
+    o.bool "-f", "--force", "force creation (ignore overwrites, etc.)"
+    o.bool "-a", "--args", "use trailing arguments as fields, even with a tty"
+    o.bool "-e", "--echo", "echo input to tty (only affects interactive input)"
+  end
 
-KBSecret::CLI.die "Not enough arguments." if opts.args.size < 2
+  dreck do
+    string :type
+    string :label
+    list :string, :fields
+  end
+end
 
-type, label = opts.args.shift 2
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
 
+type          = cmd.args[:type]
+label         = cmd.args[:label]
 resolved_type = TYPE_ALIASES[type]
 
-if session.record?(label) && !opts.force?
+if session.record?(label) && !cmd.opts.force?
   KBSecret::CLI.die "Refusing to overwrite an existing record without --force."
 end
 
@@ -46,17 +52,15 @@ unless KBSecret::Record.type?(resolved_type)
   EOS
 end
 
-fields = []
-
-if $stdin.tty? && !opts.args?
-  prompt = TTY::Prompt.new
-  klass = KBSecret::Record.class_for(resolved_type)
-  klass.data_fields.each do |field|
-    fields << prompt.ask("#{field.capitalize}?", echo: opts.echo?)
-  end
-else
-  fields = opts.args
-end
+fields = if $stdin.tty? && !cmd.opts.args?
+           prompt = TTY::Prompt.new
+           klass = KBSecret::Record.class_for(resolved_type)
+           klass.data_fields.map do |field|
+             prompt.ask("#{field.capitalize}?", echo: cmd.opts.echo?)
+           end
+         else
+           cmd.args[:fields]
+         end
 
 begin
   session.add_record(resolved_type, label, *fields)

data/bin/kbsecret-new-session

@@ -4,32 +4,34 @@
 require "keybase"
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Create a new session.
-
-    Usage:
-      kbsecret new-session --label <label> --users <user1,...> --root <dir>
-
-    Example:
-      kbsecret new-session -l dev -u me,otherperson -r devsecrets
-  EOS
-
-  o.string "-l", "--label", "the session label", default: :default
-  o.array "-u", "--users", "the keybase users", default: [Keybase.current_user]
-  o.string "-r", "--root", "the secret root directory", default: "kbsecret"
-  o.bool "-f", "--force", "force creation (ignore overwrites, etc.)"
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Create a new session.
+
+      Usage:
+        kbsecret new-session --label <label> --users <user1,...> --root <dir>
+
+      Example:
+        kbsecret new-session -l dev -u me,otherperson -r devsecrets
+    EOS
+
+    o.string "-l", "--label", "the session label", default: :default
+    o.array "-u", "--users", "the keybase users", default: [Keybase.current_user]
+    o.string "-r", "--root", "the secret root directory", default: "kbsecret"
+    o.bool "-f", "--force", "force creation (ignore overwrites, etc.)"
+  end
 end
 
-session_label = opts[:label]
+session_label = cmd.opts[:label]
 
-if KBSecret::Config.session?(session_label) && !opts.force?
+if KBSecret::Config.session?(session_label) && !cmd.opts.force?
   KBSecret::CLI.die "Refusing to overwrite an existing session without --force."
 end
 
 session_hash = {
-  users: opts[:users],
-  root: opts[:root],
+  users: cmd.opts[:users],
+  root: cmd.opts[:root],
 }
 
 KBSecret::Config.configure_session(session_label, session_hash)

data/bin/kbsecret-pass

@@ -4,30 +4,36 @@
 require "kbsecret"
 require "clipboard"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Retrieve a login record's password.
-
-    Usage:
-      kbsecret pass [--session <name>] [--clipboard] <label>
-
-    Examples:
-      kbsecret pass gmail | xclip
-      kbsecret pass --clipboard gmail
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
-  o.bool "-c", "--clipboard", "dump the password in the clipboard"
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Retrieve a login record's password.
+
+      Usage:
+        kbsecret pass [--session <name>] [--clipboard] <label>
+
+      Examples:
+        kbsecret pass gmail | xclip
+        kbsecret pass --clipboard gmail
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+    o.bool "-c", "--clipboard", "dump the password in the clipboard"
+  end
+
+  dreck do
+    string :label
+  end
 end
 
-session = KBSecret::CLI.ensure_session opts[:session]
-label   = opts.args.shift
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
+label   = cmd.args[:label]
 record  = session[label]
 
 KBSecret::CLI.die "No such record." unless record
 KBSecret::CLI.die "'#{record}' is not a login record." unless record.type == :login
 
-if opts.clipboard?
+if cmd.opts.clipboard?
   Clipboard.copy record.password
 else
   puts record.password

data/bin/kbsecret-raw-edit

@@ -3,22 +3,28 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Edit the raw JSON of a record in $EDITOR.
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Edit the raw JSON of a record in $EDITOR.
 
-    Usage:
-      kbsecret raw-edit [--session <name>] <label1...>
+      Usage:
+        kbsecret raw-edit [--session <name>] <label>
 
-    Examples:
-      kbsecret raw-edit gmail
-  EOS
+      Examples:
+        kbsecret raw-edit gmail
+    EOS
 
-  o.string "-s", "--session", "the session name", default: :default
+    o.string "-s", "--session", "the session name", default: :default
+  end
+
+  dreck do
+    string :label
+  end
 end
 
-session = KBSecret::CLI.ensure_session opts[:session]
-label   = opts.args.shift
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
+label   = cmd.args[:label]
 record  = session[label]
 
 KBSecret::CLI.die "No such record." unless record

data/bin/kbsecret-rm

@@ -6,28 +6,33 @@ require "tty-prompt"
 
 $VERBOSE = nil # tty-prompt blasts us with irrelevant warnings on 2.4
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Delete a record.
-
-    Usage:
-      kbsecret rm [--session <name>] [--interactive] <label>
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
-  o.bool "-i", "--interactive", "ask for confirmation before deleting"
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Delete a record.
+
+      Usage:
+        kbsecret rm [--session <name>] [--interactive] <label>
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+    o.bool "-i", "--interactive", "ask for confirmation before deleting"
+  end
+
+  dreck do
+    string :label
+  end
 end
 
-session = KBSecret::CLI.ensure_session opts[:session]
-
-label = opts.args.shift
+label   = cmd.args[:label]
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
 
 KBSecret::CLI.die "I need the label of a record to delete." unless label
 KBSecret::CLI.die "I can't delete a nonexistent record." unless session.record? label
 
 tty = TTY::Prompt.new
 
-confirm = if opts.interactive?
+confirm = if cmd.opts.interactive?
             tty.yes?("Delete '#{label}' from the #{session.label} session?")
           else true
           end

data/bin/kbsecret-rm-session

@@ -3,26 +3,30 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Deconfigure (and optionally delete) a session.
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Deconfigure (and optionally delete) a session.
 
-    Usage:
-      kbsecret rm-session --delete <label>
+      Usage:
+        kbsecret rm-session --delete <label>
 
-    Example:
-      kbsecret rm-session old-keys
-      kbsecret rm-session --delete even-older-keys
-  EOS
+      Example:
+        kbsecret rm-session old-keys
+        kbsecret rm-session --delete even-older-keys
+    EOS
 
-  o.bool "-d", "--delete", "unlink the session in addition to deconfiguration"
-end
+    o.bool "-d", "--delete", "unlink the session in addition to deconfiguration"
+  end
 
-label = opts.args.shift
+  dreck do
+    string :label
+  end
+end
 
-KBSecret::CLI.die "I need the label of a session to deconfigure." unless label
+label = cmd.args[:label]
 
 session = KBSecret::CLI.ensure_session label
-session.unlink! if opts.delete?
+session.unlink! if cmd.opts.delete?
 
 KBSecret::Config.deconfigure_session label

data/bin/kbsecret-sessions

@@ -3,24 +3,27 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    List all available sessions.
-    The sessions listed can be passed to other commands via the -s flag.
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      List all available sessions.
+      The sessions listed can be passed to other commands via the -s flag.
 
-    Usage:
-      kbsecret sessions [--show-all]
-  EOS
+      Usage:
+        kbsecret sessions [--show-all]
+    EOS
 
-  o.bool "-a", "--show-all", "show each session in depth (i.e. metadata)"
+    o.bool "-a", "--show-all", "show each session in depth (i.e. metadata)"
+  end
 end
 
 KBSecret::Config.session_labels.each do |sess_name|
   session_hash = KBSecret::Config.session(sess_name)
-  session = KBSecret::Session.new label: sess_name
+  session      = KBSecret::Session.new label: sess_name
+
   puts sess_name
 
-  next unless opts.show_all?
+  next unless cmd.opts.show_all?
 
   puts <<~EOS
     \tUsers: #{session_hash[:users].join(", ")}

data/bin/kbsecret-stash-file

@@ -3,27 +3,35 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop do |o|
-  o.banner = <<~EOS
-    Stash the given file (or stdin) as an unstructured record.
-
-    Usage:
-      kbsecret stash-file <label> [file]
-
-    Example:
-      kbsecret stash-file foo ~/foo
-      echo "using stdin" | kbsecret stash-file from-stdin
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
+cmd = KBSecret::CLI.new do
+  slop do |o|
+    o.banner = <<~EOS
+      Stash the given file (or stdin) as an unstructured record.
+
+      Usage:
+        kbsecret stash-file <label> [file]
+
+      Example:
+        kbsecret stash-file foo ~/foo
+        echo "using stdin" | kbsecret stash-file from-stdin
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+  end
+
+  dreck errors: false do
+    string :label
+    string :filename
+  end
 end
 
-session         = KBSecret::CLI.ensure_session opts[:session]
-label, filename = opts.args.shift 2
+session  = KBSecret::CLI.ensure_session cmd.opts[:session]
+label    = cmd.args[:label]
+filename = cmd.args[:filename]
 
 KBSecret::CLI.die "Missing a record label to create." unless label
 
-contents = if filename.nil? || filename == "-"
+contents = if filename.empty? || filename == "-"
              STDIN.read
            elsif File.file?(filename)
              File.read(filename)

data/bin/kbsecret-todo

@@ -3,33 +3,38 @@
 
 require "kbsecret"
 
-opts = KBSecret::CLI.slop cmds: %w[start suspend complete] do |o|
-  o.banner = <<~EOS
-    Manage 'to do' records.
-
-    Usage:
-      kbsecret todo <start|suspend|complete> <label>
-
-    Examples:
-      kbsecret todo start unit-tests
-      kbsecret todo suspend laundry
-      kbsecret todo complete shopping
-  EOS
-
-  o.string "-s", "--session", "the session name", default: :default
+cmd = KBSecret::CLI.new do
+  slop cmds: %w[start suspend complete] do |o|
+    o.banner = <<~EOS
+      Manage 'to do' records.
+
+      Usage:
+        kbsecret todo <start|suspend|complete> <label>
+
+      Examples:
+        kbsecret todo start unit-tests
+        kbsecret todo suspend laundry
+        kbsecret todo complete shopping
+    EOS
+
+    o.string "-s", "--session", "the session name", default: :default
+  end
+
+  dreck do
+    string :command
+    string :label
+  end
 end
 
-session        = KBSecret::CLI.ensure_session opts[:session]
-command, label = opts.args.shift 2
-
-KBSecret::CLI.die "Missing subcommand." unless command && label
+session = KBSecret::CLI.ensure_session cmd.opts[:session]
+label   = cmd.args[:label]
 
 todo = session[label]
 
 KBSecret::CLI.die "No such record." unless todo
 KBSecret::CLI.die "'#{todo}' is not a todo record." unless todo.type == :todo
 
-case command
+case cmd.args[:command]
 when "start"
   KBSecret::CLI.die "That task is already started!" if todo.started?
   todo.start!

data/lib/kbsecret.rb

@@ -11,7 +11,7 @@ require_relative "kbsecret/cli"
 # The primary namespace for kbsecret.
 module KBSecret
   # kbsecret's current version
-  VERSION = "0.4.4"
+  VERSION = "0.5.0"
 
   # fail very early if the user doesn't have keybase and KBFS running
   raise Keybase::KeybaseNotRunningError unless Keybase.running?

data/lib/kbsecret/cli.rb

@@ -1,22 +1,83 @@
 # frozen_string_literal: true
 
-require "pastel"
+require "colored2"
 require "slop"
+require "dreck"
 
 module KBSecret
   # An encapsulation of useful methods for kbsecret's CLI.
-  module CLI
-    class << self
-      # The pastel object used to generate colorful output.
-      # @api private
-      PASTEL = Pastel.new
+  class CLI
+    # @return [Slop::Result] the result of option parsing
+    attr_reader :opts
+
+    # @return [Dreck::Result] the result of trailing argument parsing
+    attr_reader :args
+
+    # Encapsulate both the options and trailing arguments passed to a `kbsecret` command.
+    # @example
+    #  cmd = KBSecret::CLI.new do
+    #    slop do |o|
+    #      o.bool "-f", "--foo", "whatever"
+    #    end
+    #
+    #    dreck do
+    #      string :name
+    #    end
+    #  end
+    #
+    #  cmd.opts # => Slop::Result
+    #  cmd.args # => Dreck::Result
+    def initialize(&block)
+      @trailing = ARGV
+      @opts = nil
+      @args = nil
+      instance_eval(&block)
+    end
+
+    # Parse options for a kbsecret utility, adding some default options for
+    #  introspection and help output.
+    # @param cmds [Array<String>] additional commands to print in `--introspect-flags`
+    # @param errors [Boolean] whether or not to produce Slop errors
+    # @return [Slop::Result] the result of argument parsing
+    # @note This should be called within the block passed to {initialize}.
+    def slop(cmds: [], errors: false)
+      @opts = Slop.parse suppress_errors: !errors do |o|
+        yield o
+
+        o.on "-h", "--help" do
+          puts o
+          exit
+        end
+
+        o.on "--introspect-flags" do
+          comp = o.options.flat_map(&:flags) + cmds
+          puts comp.join "\n"
+          exit
+        end
+      end
+
+      @trailing = @opts.args
+    end
 
+    # Parse trailing arguments for a kbsecret utility, using the elements remaining
+    #  after options have been removed and interpreted via {slop}.
+    # @param errors [Boolean] whether or not to produce (strict) Dreck errors
+    # @note *If* {slop} is called, it must be called before this.
+    def dreck(errors: true, &block)
+      @args = Dreck.parse @trailing, strict: errors do
+        instance_eval(&block)
+      end
+    rescue => e
+      KBSecret::CLI.die "#{e.to_s.capitalize}."
+    end
+
+    class << self
       # Print an error message and terminate.
       # @param msg [String] the message to print
       # @return [void]
       # @note This method does not return!
       def die(msg)
-        pretty = "#{PASTEL.bright_red("Fatal")}: #{msg}"
+        pretty = "#{"Fatal".red}: #{msg}"
         abort pretty
       end
 
@@ -35,6 +96,7 @@ module KBSecret
       # @param cmds [Array<String>] additional commands to print in `--introspect-flags`
       # @param errors [Boolean] whether or not to produce Slop errors
       # @return [Slop::Result] the result of argument parsing
+      # @deprecated Use {#initialize} instead.
       def slop(cmds: [], errors: false)
         Slop.parse suppress_errors: !errors do |o|
           yield o

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kbsecret
 version: !ruby/object:Gem::Version
-  version: 0.4.4
+  version: 0.5.0
 platform: ruby
 authors:
 - William Woodruff
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-06-22 00:00:00.000000000 Z
+date: 2017-06-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: clipboard
@@ -25,33 +25,47 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.1'
 - !ruby/object:Gem::Dependency
-  name: keybase-unofficial
+  name: colored2
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.0.8
+        version: '3.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.0.8
+        version: '3.1'
 - !ruby/object:Gem::Dependency
-  name: pastel
+  name: dreck
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.7'
+        version: 0.0.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.7'
+        version: 0.0.4
+- !ruby/object:Gem::Dependency
+  name: keybase-unofficial
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.0.8
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.0.8
 - !ruby/object:Gem::Dependency
   name: slop
   requirement: !ruby/object:Gem::Requirement