localvault 1.11.0 → 1.11.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 026a87452013bc8910082a3b582dcbdea76eb0bfccb0730f419e4f1a244b8d3d
-  data.tar.gz: 5365ca55bf39269fe4e722054a1d4e0af4ddbe3cf21de4027dcf09f004df6530
+  metadata.gz: 1f7a9ef056579778ef2dabd22148af8fe8fbd19b2e0b4aefafde3c9eb6a454ee
+  data.tar.gz: e5006419cb47849c63a7f4c123ba661e6c95bd2f93fe8ef3230faff2ab5fe7ec
 SHA512:
-  metadata.gz: 441807ea68cd2f70b0e746a320f7fd1ece69adb13ff3727b5357a4c43de3a077cb52827d57e60003624ef5b7a04f8200acb71f2ca197d1d5b34ce416cecdd0ce
-  data.tar.gz: 300fdd00e8b103ee0926ffcf4f45ce95a39a3a3cc0745c7f392177938dded7096518cfc9e014709304fc25b47305e3c38bc8ce3e01767d386fa220d2f554b186
+  metadata.gz: 9cfc5a0d2635e86601077c1600f58339252262960663d39e45213ff59aeca09ec47c8a8e392e2ad16a0d4e7b2731b500b33d268c239e44b2567ea2b09cd51ef0
+  data.tar.gz: 8a14b7b627c493f710c89738c0726f2cc4bca895996a76fcfca4801ff46aaf5047f27a7480aec157b876e807c757f0b3cb9dd3e9bfbe0ffe9d3313ce7dcfe5f8

data/README.md

@@ -19,7 +19,7 @@ brew install inventlist/tap/localvault
 ### Install script (no Homebrew)
 
 ```bash
-curl -sSL https://raw.githubusercontent.com/inventlist/localvault/main/install.sh | sh
+curl -sSL https://inventlist.com/tools/localvault/install.sh | sh
 ```
 
 Installs into an isolated prefix (`~/.localvault/runtime`) and writes a wrapper

data/lib/localvault/cli/team_helpers.rb

@@ -32,7 +32,11 @@ module LocalVault
         end
 
         passphrase = prompt_passphrase("Passphrase for '#{vault_name}': ")
-        return nil if passphrase.nil? || passphrase.empty?
+        if passphrase.nil? || passphrase.empty?
+          $stderr.puts "Error: Vault '#{vault_name}' is locked and no passphrase was entered."
+          $stderr.puts "Run: localvault unlock #{vault_name}   # caches the passphrase for this session"
+          return nil
+        end
 
         vault = Vault.open(name: vault_name, passphrase: passphrase)
         vault.all # raises Crypto::DecryptionError on wrong passphrase

data/lib/localvault/cli.rb

@@ -108,25 +108,51 @@ module LocalVault
 
     class_option :vault, aliases: "-v", type: :string, desc: "Vault name"
 
-    # Main help = Thor's auto-generated command list (always complete, so new
-    # commands appear without touching this file) + a handwritten guide for
-    # the concepts and workflows Thor can't derive from command descriptions.
+    # Grouped help, generated from the command registry. Only command NAMES
+    # are declared per section — usage strings and descriptions come from
+    # Thor, and any command missing from this map lands in OTHER instead of
+    # disappearing from help.
+    HELP_SECTIONS = [
+      ["GETTING STARTED",                                       %w[login config init demo]],
+      ["SECRETS",                                               %w[set get show groups list delete import env exec]],
+      ["VAULT MANAGEMENT",                                      %w[vaults switch rekey unlock lock reset rename copy]],
+      ["SYNC  (requires localvault login)",                     %w[sync]],
+      ["TEAM SHARING  (requires localvault login)",             %w[dashboard verify add remove team]],
+      ["KEYS  (X25519 identity for vault sharing)",             %w[keys identity]],
+      ["AI / MCP",                                              %w[install-mcp mcp guard]],
+      ["LEGACY SHARING  (pre-v1.2 direct share, still works)",  %w[keygen share receive revoke]],
+      ["OTHER",                                                 %w[logout version doctor help]]
+    ].freeze
+
     def self.help(shell, subcommand = false)
+      visible = all_commands.reject { |_, c| c.hidden? }
+      width   = visible.values.map { |c| c.usage.length }.max + 4
+
       shell.say ""
       shell.say "LocalVault — encrypted local secrets vault with MCP support for AI agents"
       shell.say "  https://inventlist.com/tools/localvault"
-      shell.say ""
-      super
-      shell.say ""
-      shell.say "GETTING STARTED"
-      shell.say "  localvault init [NAME]        Create a new encrypted vault"
-      shell.say "  localvault demo               Create a demo vault to explore commands"
-      shell.say "  localvault login [TOKEN]      Log in to a sync server (enables sync + team features)"
-      shell.say "  localvault config set server URL   Use your own sync host (default: inventlist.com)"
+
+      listed = []
+      sections = HELP_SECTIONS.map { |title, names| [title, names.dup] }
+      leftovers = visible.keys - HELP_SECTIONS.flat_map { |_, names| names.map { |n| n.tr("-", "_") } }
+      sections.last[1].concat(leftovers.map { |n| n.tr("_", "-") })
+
+      sections.each do |title, names|
+        rows = names.filter_map do |name|
+          command = visible[name.tr("-", "_")]
+          next unless command
+          listed << name
+          "  localvault #{command.usage.ljust(width)}#{command.description}"
+        end
+        next if rows.empty?
+        shell.say ""
+        shell.say title
+        rows.each { |row| shell.say row }
+      end
+
       shell.say ""
       shell.say "SAFE SECRET INPUT  (preferred over passing values as arguments)"
       shell.say "  printf '%s' \"$SECRET\" | localvault set KEY --stdin"
-      shell.say "                                Store a secret without argv/history exposure"
       shell.say ""
       shell.say "PROJECTS  (dot-notation groups inside one vault)"
       shell.say "  localvault set platepose.API_KEY v    Store a key in the 'platepose' group"
@@ -137,18 +163,8 @@ module LocalVault
       shell.say "  localvault exec -- inventlist ships list"
       shell.say "  localvault exec -- curl -H \"Authorization: Bearer $API_KEY\" ..."
       shell.say ""
-      shell.say "TEAM SHARING  (requires localvault login)"
-      shell.say "  Convert with `team init`, then `add @HANDLE` / `remove @HANDLE`."
-      shell.say "  Use --scope KEY... for partial access; `team rotate` re-keys for all members."
-      shell.say "  `team add/remove/verify` also work as aliases for the top-level commands."
-      shell.say ""
-      shell.say "AI / MCP"
-      shell.say "  Agents: list secret names, then use localvault_build_exec for safe injection."
-      shell.say "  `guard install` blocks plaintext secrets in agent commands (Claude Code hooks)."
-      shell.say ""
-      shell.say "LEGACY SHARING  (pre-v1.2 direct share, still works as fallback)"
-      shell.say "  keygen / share / receive / revoke — superseded by `keys` + team vaults."
-      shell.say ""
+      shell.say "Own sync host: localvault config set server URL (default: inventlist.com)"
+      shell.say "Subcommands:   localvault help team|keys|guard|identity|sync"
       shell.say "Full help for any command: localvault help COMMAND"
       shell.say ""
     end

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.11.0"
+  VERSION = "1.11.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.11.0
+  version: 1.11.2
 platform: ruby
 authors:
 - Nauman Tariq