localvault 1.10.0 → 1.11.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 89b873121ec4642cd62fc4b8e7d18fb5bf4dd7f456d0b25b9690a154d3392d51
-  data.tar.gz: 90915ed8508f056077cc64ed5c06e9d6925f9c893c70daaf71727fcf4c5d852c
+  metadata.gz: 9410cbaa6bef6d91974153c36555f7e8c799350adfa59ddf821ec261cb4dafc7
+  data.tar.gz: 9df3cc0ac84194f0f1259b12b411bfec083c3c690467741879f212046fc535c4
 SHA512:
-  metadata.gz: dfcff8362dfd3ec7cbfa25fa4f8b0c599fe6584eedcea0c53f8e6515b028bfada2576cdcf7ef03e1ac130a083b4a869fbb5fe3ec282ab909a9a6f72a0affcdbb
-  data.tar.gz: 85ba5c571866b4aa78ad40394d8ffcc3aedfaf6c8c9b5b1013042d1bc3e63ee5d9deb324e0fe8b52ddea8df7026cfa107d1e2b076b9cbf3e741d74d703d8f7aa
+  metadata.gz: ad55628d78a992ff835b090871ddf20331118d306c536db173c57109efe05886d90c874d5fdb74d850a5623e4fd0a5d56ca825b28ec84da1de72fb43a86905ad
+  data.tar.gz: 62960222621adc9edaf9d469f35a6a8868284f0b6a01f99b9a09ebadd3b32ac162a6838ad37f281cc8384f4ed5c2ca9b2d144b16a992ec6f7acfd2d91e62ae25

data/lib/localvault/cli/sync.rb

@@ -468,8 +468,8 @@ module LocalVault
         $stderr.puts "  localvault login YOUR_TOKEN"
         $stderr.puts
         $stderr.puts "Get your token at: https://inventlist.com/@YOUR_HANDLE/edit#developer"
-        $stderr.puts "New to InventList? Sign up free at https://inventlist.com"
-        $stderr.puts "Docs: https://inventlist.com/sites/localvault/series/localvault"
+        $stderr.puts "Or use your own server: localvault config set server URL (free InventList account: https://inventlist.com)"
+        $stderr.puts "Docs: https://kuickr.co/localvault/series"
         false
       end
 

data/lib/localvault/cli/team.rb

@@ -94,8 +94,8 @@ module LocalVault
           $stderr.puts "  localvault login YOUR_TOKEN"
           $stderr.puts
           $stderr.puts "Get your token at: https://inventlist.com/@YOUR_HANDLE/edit#developer"
-          $stderr.puts "New to InventList? Sign up free at https://inventlist.com"
-          $stderr.puts "Docs: https://inventlist.com/sites/localvault/series/localvault"
+          $stderr.puts "Or use your own server: localvault config set server URL (free InventList account: https://inventlist.com)"
+          $stderr.puts "Docs: https://kuickr.co/localvault/series"
           return
         end
 

data/lib/localvault/cli.rb

@@ -108,24 +108,51 @@ module LocalVault
 
     class_option :vault, aliases: "-v", type: :string, desc: "Vault name"
 
-    # Main help = Thor's auto-generated command list (always complete, so new
-    # commands appear without touching this file) + a handwritten guide for
-    # the concepts and workflows Thor can't derive from command descriptions.
+    # Grouped help, generated from the command registry. Only command NAMES
+    # are declared per section — usage strings and descriptions come from
+    # Thor, and any command missing from this map lands in OTHER instead of
+    # disappearing from help.
+    HELP_SECTIONS = [
+      ["GETTING STARTED",                                       %w[login config init demo]],
+      ["SECRETS",                                               %w[set get show groups list delete import env exec]],
+      ["VAULT MANAGEMENT",                                      %w[vaults switch rekey unlock lock reset rename copy]],
+      ["SYNC  (requires localvault login)",                     %w[sync]],
+      ["TEAM SHARING  (requires localvault login)",             %w[dashboard verify add remove team]],
+      ["KEYS  (X25519 identity for vault sharing)",             %w[keys identity]],
+      ["AI / MCP",                                              %w[install-mcp mcp guard]],
+      ["LEGACY SHARING  (pre-v1.2 direct share, still works)",  %w[keygen share receive revoke]],
+      ["OTHER",                                                 %w[logout version doctor help]]
+    ].freeze
+
     def self.help(shell, subcommand = false)
+      visible = all_commands.reject { |_, c| c.hidden? }
+      width   = visible.values.map { |c| c.usage.length }.max + 4
+
       shell.say ""
       shell.say "LocalVault — encrypted local secrets vault with MCP support for AI agents"
       shell.say "  https://inventlist.com/tools/localvault"
-      shell.say ""
-      super
-      shell.say ""
-      shell.say "GETTING STARTED"
-      shell.say "  localvault login [TOKEN]      Log in to InventList (enables sync + team features)"
-      shell.say "  localvault init [NAME]        Create a new encrypted vault"
-      shell.say "  localvault demo               Create a demo vault to explore commands"
+
+      listed = []
+      sections = HELP_SECTIONS.map { |title, names| [title, names.dup] }
+      leftovers = visible.keys - HELP_SECTIONS.flat_map { |_, names| names.map { |n| n.tr("-", "_") } }
+      sections.last[1].concat(leftovers.map { |n| n.tr("_", "-") })
+
+      sections.each do |title, names|
+        rows = names.filter_map do |name|
+          command = visible[name.tr("-", "_")]
+          next unless command
+          listed << name
+          "  localvault #{command.usage.ljust(width)}#{command.description}"
+        end
+        next if rows.empty?
+        shell.say ""
+        shell.say title
+        rows.each { |row| shell.say row }
+      end
+
       shell.say ""
       shell.say "SAFE SECRET INPUT  (preferred over passing values as arguments)"
       shell.say "  printf '%s' \"$SECRET\" | localvault set KEY --stdin"
-      shell.say "                                Store a secret without argv/history exposure"
       shell.say ""
       shell.say "PROJECTS  (dot-notation groups inside one vault)"
       shell.say "  localvault set platepose.API_KEY v    Store a key in the 'platepose' group"
@@ -136,18 +163,8 @@ module LocalVault
       shell.say "  localvault exec -- inventlist ships list"
       shell.say "  localvault exec -- curl -H \"Authorization: Bearer $API_KEY\" ..."
       shell.say ""
-      shell.say "TEAM SHARING  (requires localvault login)"
-      shell.say "  Convert with `team init`, then `add @HANDLE` / `remove @HANDLE`."
-      shell.say "  Use --scope KEY... for partial access; `team rotate` re-keys for all members."
-      shell.say "  `team add/remove/verify` also work as aliases for the top-level commands."
-      shell.say ""
-      shell.say "AI / MCP"
-      shell.say "  Agents: list secret names, then use localvault_build_exec for safe injection."
-      shell.say "  `guard install` blocks plaintext secrets in agent commands (Claude Code hooks)."
-      shell.say ""
-      shell.say "LEGACY SHARING  (pre-v1.2 direct share, still works as fallback)"
-      shell.say "  keygen / share / receive / revoke — superseded by `keys` + team vaults."
-      shell.say ""
+      shell.say "Own sync host: localvault config set server URL (default: inventlist.com)"
+      shell.say "Subcommands:   localvault help team|keys|guard|identity|sync"
       shell.say "Full help for any command: localvault help COMMAND"
       shell.say ""
     end
@@ -760,13 +777,16 @@ module LocalVault
       $stdout.puts "Public key: #{Identity.public_key}"
     end
 
-    desc "login [TOKEN]", "Log in to InventList — validate token, auto-keygen, publish public key"
+    desc "login [TOKEN]", "Log in to a sync server — validate token, auto-keygen, publish public key"
     method_option :status, type: :boolean, default: false, desc: "Show current login status"
+    method_option :server, type: :string, desc: "Sync server URL (persisted; defaults to https://inventlist.com)"
     def login(token = nil)
+      Config.api_url = options[:server] if options[:server]
+
       if options[:status]
         handle = Config.inventlist_handle
         if handle
-          $stdout.puts "Logged in as @#{handle}"
+          $stdout.puts "Logged in as @#{handle} (server: #{Config.api_url})"
         else
           $stdout.puts "Not logged in. Run: localvault login TOKEN"
         end
@@ -776,13 +796,26 @@ module LocalVault
       unless token
         $stdout.puts "Usage: localvault login YOUR_TOKEN"
         $stdout.puts
-        $stdout.puts "Get your token at: https://inventlist.com/@YOUR_HANDLE/edit#developer"
-        $stdout.puts "New to InventList? Sign up free at https://inventlist.com"
+        $stdout.puts "Local vault encryption works without any account or server."
+        $stdout.puts "Sync and team features need a sync server. LocalVault is server-agnostic —"
+        $stdout.puts "pick either:"
         $stdout.puts
-        $stdout.puts "LocalVault sync and team features require a free InventList account."
-        $stdout.puts "Local vault encryption works without an account."
+        $stdout.puts "  1. Your own host (any server implementing the 4-endpoint protocol):"
+        $stdout.puts "       localvault config set server https://vaulthost.example"
+        $stdout.puts "       localvault login YOUR_TOKEN"
+        $stdout.puts "     (or one-shot: localvault login YOUR_TOKEN --server https://vaulthost.example)"
         $stdout.puts
-        $stdout.puts "Docs: https://inventlist.com/sites/localvault/series/localvault"
+        $stdout.puts "  2. InventList (free account):"
+        $stdout.puts "       Sign up at https://inventlist.com, then get your token at"
+        $stdout.puts "       https://inventlist.com/@YOUR_HANDLE/edit#developer"
+        $stdout.puts
+        $stdout.puts "Login generates your X25519 keypair and publishes the public key"
+        $stdout.puts "automatically. To do it manually:"
+        $stdout.puts "  localvault keys generate      # create keypair in ~/.localvault/keys/"
+        $stdout.puts "  localvault keys publish       # upload public key so others can share with you"
+        $stdout.puts "  localvault keys show          # print your public key"
+        $stdout.puts
+        $stdout.puts "Docs: https://kuickr.co/localvault/series"
         return
       end
 
@@ -798,15 +831,53 @@ module LocalVault
 
       client.publish_public_key(Identity.public_key)
 
-      $stdout.puts "Logged in as @#{handle}"
-      $stdout.puts "Public key published to your InventList profile."
+      $stdout.puts "Logged in as @#{handle} (server: #{Config.api_url})"
+      $stdout.puts "Public key published to your profile."
       $stdout.puts
-      $stdout.puts "Next: localvault sync push   # sync your vault to the cloud"
+      $stdout.puts "Next: localvault sync push   # sync your vault to the server"
     rescue ApiClient::ApiError => e
       if e.status == 401
-        $stdout.puts "Invalid token. Check your token at: https://inventlist.com/@YOUR_HANDLE/edit#developer"
+        $stdout.puts "Invalid token for #{Config.api_url}."
+        $stdout.puts "InventList tokens: https://inventlist.com/@YOUR_HANDLE/edit#developer"
+      else
+        $stdout.puts "Error connecting to #{Config.api_url}: #{e.message}"
+      end
+    end
+
+    desc "config SUBCOMMAND ...", "Get or set CLI configuration (currently: server)"
+    long_desc <<~DESC
+      Read or write LocalVault configuration in ~/.localvault/config.yml.
+
+      LocalVault is server-agnostic — point it at any host implementing the
+      sync protocol:
+
+      \x05    localvault config get server
+      \x05    localvault config set server https://vaulthost.example
+      \x05    localvault config unset server              # back to https://inventlist.com
+    DESC
+    def config(action = "get", field = nil, value = nil)
+      unless field == "server" || (action == "get" && field.nil?)
+        return abort_with "Unknown config field '#{field}'. Supported: server"
+      end
+
+      case action
+      when "get"
+        $stdout.puts "server: #{Config.api_url}"
+      when "set"
+        return abort_with "Usage: localvault config set server URL" unless value
+        unless value.match?(%r{\Ahttps?://\S+\z})
+          return abort_with "Server must be an http(s) URL, e.g. https://vaulthost.example"
+        end
+        Config.api_url = value
+        $stdout.puts "server set to #{value}"
+        $stdout.puts "Note: tokens are per-server — run `localvault login YOUR_TOKEN` for this host."
+      when "unset"
+        data = Config.load
+        data.delete("api_url")
+        Config.save(data)
+        $stdout.puts "server reset to #{Config.api_url}"
       else
-        $stdout.puts "Error connecting to InventList: #{e.message}"
+        abort_with "Usage: localvault config [get|set|unset] server [URL]"
       end
     end
 
@@ -1143,8 +1214,8 @@ module LocalVault
         $stderr.puts "  localvault login YOUR_TOKEN"
         $stderr.puts
         $stderr.puts "Get your token at: https://inventlist.com/@YOUR_HANDLE/edit#developer"
-        $stderr.puts "New to InventList? Sign up free at https://inventlist.com"
-        $stderr.puts "Docs: https://inventlist.com/sites/localvault/series/localvault"
+        $stderr.puts "Or use your own server: localvault config set server URL (free InventList account: https://inventlist.com)"
+        $stderr.puts "Docs: https://kuickr.co/localvault/series"
         return
       end
 

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.10.0"
+  VERSION = "1.11.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.10.0
+  version: 1.11.1
 platform: ruby
 authors:
 - Nauman Tariq