localvault 1.11.2 → 1.12.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1f7a9ef056579778ef2dabd22148af8fe8fbd19b2e0b4aefafde3c9eb6a454ee
-  data.tar.gz: e5006419cb47849c63a7f4c123ba661e6c95bd2f93fe8ef3230faff2ab5fe7ec
+  metadata.gz: 6ffea91e8b5b758be685a82b78154018889db3b8ece76a942f10879fe79e19d8
+  data.tar.gz: 4b43e48d4913b88dffcb0ce18ddb819dd9470edde959cde7b8d4c50e86294e3d
 SHA512:
-  metadata.gz: 9cfc5a0d2635e86601077c1600f58339252262960663d39e45213ff59aeca09ec47c8a8e392e2ad16a0d4e7b2731b500b33d268c239e44b2567ea2b09cd51ef0
-  data.tar.gz: 8a14b7b627c493f710c89738c0726f2cc4bca895996a76fcfca4801ff46aaf5047f27a7480aec157b876e807c757f0b3cb9dd3e9bfbe0ffe9d3313ce7dcfe5f8
+  metadata.gz: 73c0bb42f97afff36f09cce9a66e6ea9f37d8a25c8609a424f9c190cdaa3abc0dd6fb70765bdd2c4f0d5d113812a36f8a645dd557b4914c3620b48c5838b62d7
+  data.tar.gz: 5766f8a512cebf5be3ceb4778f72fa2f5cf591b098e435d3a4cfa623912016c07bb8a3073f557ae4bf5764845802584750cc2434d472907474e81ac9bfdada27

data/lib/localvault/cli/sync.rb

@@ -111,18 +111,20 @@ module LocalVault
       default_task :all
 
       desc "push [NAME]", "Push a vault to InventList cloud sync"
+      method_option :vault, type: :string, aliases: "-v", desc: "Vault name (same as NAME)"
       def push(vault_name = nil)
         return unless logged_in?
-        vault_name ||= Config.default_vault
+        vault_name ||= options[:vault] || Config.default_vault
         client = ApiClient.new(token: Config.token)
         perform_push(vault_name, client)
       end
 
       desc "pull [NAME]", "Pull a vault from InventList cloud sync"
       method_option :force, type: :boolean, default: false, desc: "Overwrite existing local vault"
+      method_option :vault, type: :string, aliases: "-v", desc: "Vault name (same as NAME)"
       def pull(vault_name = nil)
         return unless logged_in?
-        vault_name ||= Config.default_vault
+        vault_name ||= options[:vault] || Config.default_vault
         client = ApiClient.new(token: Config.token)
         perform_pull(vault_name, client, force: options[:force])
       end

data/lib/localvault/cli.rb

@@ -124,42 +124,57 @@ module LocalVault
       ["OTHER",                                                 %w[logout version doctor help]]
     ].freeze
 
-    def self.help(shell, subcommand = false)
-      visible = all_commands.reject { |_, c| c.hidden? }
-      width   = visible.values.map { |c| c.usage.length }.max + 4
+    # One row per plain command; registered subcommands (sync, team, keys,
+    # guard, identity, ...) expand to a row per action, straight from that
+    # registry — so `sync push` or a newly added `guard` action is always
+    # visible without touching this method.
+    def self.help_rows_for(name)
+      command = all_commands[name.tr("-", "_")]
+      return [] if command.nil? || command.hidden?
 
-      shell.say ""
-      shell.say "LocalVault — encrypted local secrets vault with MCP support for AI agents"
-      shell.say "  https://inventlist.com/tools/localvault"
+      registry = subcommand_classes[command.name]
+      return [[command.usage, command.description]] unless registry
+
+      registry.all_commands.filter_map do |sub_name, sub|
+        next if sub.hidden? || %w[help tree].include?(sub_name)  # Thor built-ins, redundant per-namespace
+        ["#{command.name} #{sub.usage}", sub.description]
+      end
+    end
 
-      listed = []
+    def self.help(shell, subcommand = false)
       sections = HELP_SECTIONS.map { |title, names| [title, names.dup] }
-      leftovers = visible.keys - HELP_SECTIONS.flat_map { |_, names| names.map { |n| n.tr("-", "_") } }
+      known    = HELP_SECTIONS.flat_map { |_, names| names.map { |n| n.tr("-", "_") } }
+      leftovers = all_commands.reject { |_, c| c.hidden? }.keys - known
       sections.last[1].concat(leftovers.map { |n| n.tr("_", "-") })
 
-      sections.each do |title, names|
-        rows = names.filter_map do |name|
-          command = visible[name.tr("-", "_")]
-          next unless command
-          listed << name
-          "  localvault #{command.usage.ljust(width)}#{command.description}"
-        end
+      rendered = sections.map { |title, names| [title, names.flat_map { |n| help_rows_for(n) }] }
+      width = rendered.flat_map { |_, rows| rows.map { |usage, _| usage.length } }.max + 4
+
+      say_header = ->(text) { shell.say shell.set_color(text, :cyan, true) }
+
+      shell.say ""
+      shell.say shell.set_color("LocalVault", :cyan, true) + " — encrypted local secrets vault with MCP support for AI agents"
+      shell.say "  https://inventlist.com/tools/localvault"
+
+      rendered.each do |title, rows|
         next if rows.empty?
         shell.say ""
-        shell.say title
-        rows.each { |row| shell.say row }
+        say_header.call(title)
+        rows.each do |usage, desc|
+          shell.say "  localvault #{shell.set_color(usage.ljust(width), :green)}#{desc}"
+        end
       end
 
       shell.say ""
-      shell.say "SAFE SECRET INPUT  (preferred over passing values as arguments)"
+      say_header.call("SAFE SECRET INPUT  (preferred over passing values as arguments)")
       shell.say "  printf '%s' \"$SECRET\" | localvault set KEY --stdin"
       shell.say ""
-      shell.say "PROJECTS  (dot-notation groups inside one vault)"
+      say_header.call("PROJECTS  (dot-notation groups inside one vault)")
       shell.say "  localvault set platepose.API_KEY v    Store a key in the 'platepose' group"
       shell.say "  Filter any command with -p:  show -p platepose, exec -p platepose -- CMD"
       shell.say "  Delete a whole group:        localvault delete 'platepose.*'"
       shell.say ""
-      shell.say "USING SECRETS WITH ANY CLI"
+      say_header.call("USING SECRETS WITH ANY CLI")
       shell.say "  localvault exec -- inventlist ships list"
       shell.say "  localvault exec -- curl -H \"Authorization: Bearer $API_KEY\" ..."
       shell.say ""
@@ -305,15 +320,38 @@ module LocalVault
       vault.list.each { |key| $stdout.puts key }
     end
 
-    desc "groups [QUERY]", "List or search stored secret groups without revealing values"
+    desc "groups [QUERY]", "List or search secret groups / projects without revealing values"
     long_desc <<~DESC
-      Discover dot-notation namespaces and flat-key prefix groups.
-
-\x05    localvault groups
-\x05    localvault groups str
-\x05    localvault show --group STRIPE
-\x05    localvault set --group STRIPE API_KEY VALUE
+      Discover the groups in a vault. "Group" and "project" are the same
+      thing: a named bucket of keys inside one vault. You never create one
+      explicitly — storing a key in it creates it, deleting its last key
+      removes it.
+
+      CREATE by storing keys into a group (three equivalent spellings):
+\x05    localvault set kuickr.API_KEY abc123        # dot-notation
+\x05    localvault set --group kuickr API_KEY abc123
+\x05    localvault set -g kuickr API_KEY abc123
+
+      LIST groups (names and key counts only — values stay hidden):
+\x05    localvault groups                    # all groups in the default vault
+\x05    localvault groups stock              # only groups matching "stock"
+\x05    localvault groups -v intellectaco    # groups in another vault
+
+      WORK WITH one group (any command takes -p / --project):
+\x05    localvault show -p kuickr         # see its keys (masked)
+\x05    localvault list -p kuickr         # just the key names
+\x05    localvault exec -p kuickr -- rails s     # inject only its keys as env vars
+\x05    localvault env -p kuickr          # export only its keys
+\x05    localvault import .env -p kuickr  # import a .env file into the group
+
+      DELETE one key or the whole group:
+\x05    localvault delete kuickr.API_KEY
+\x05    localvault delete 'kuickr.*'
+
+      `localvault projects` is an alias for this command.
     DESC
+    map "projects" => "groups"
+
     def groups(query = nil)
       vault = open_vault!
       matches = GroupCatalog.new(vault.all).search(query)

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.11.2"
+  VERSION = "1.12.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.11.2
+  version: 1.12.0
 platform: ruby
 authors:
 - Nauman Tariq