localvault 1.11.3 → 1.12.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 57abcee5bdce8a863134e73333323eba61ed5d969f0675d2a0886f4c71f76a1d
-  data.tar.gz: 35114201fc535b678d90b50cc6b8876a6d589a2079750a1e2fd912fb7a32c903
+  metadata.gz: 5c37fd43d64105bf78e7501e458c98159958c4a6eca101d6716a3781b6bbb61f
+  data.tar.gz: 9f869cee27f7c118f91acf009d85cb0cef9204d9a99ada99b59939c63f7c2b22
 SHA512:
-  metadata.gz: a3f24c9f87df7fbd9e6595c70899c234d439718eca08eeb5b0907a9642014f9f6c52cac651312cdf4abe32e26ab9be8a16c9def5230ddb5b08f953c5fd50c3f3
-  data.tar.gz: 927d395de3866fd187f0fbe676a518cbd26eea2f08813e6b746940b9e746794514419a22a94e1972d6068522caa313075159fb0a31df160f62237aebccb53734
+  metadata.gz: e503618d966e392d38a84969dae01d5355fcbccef921bad3f738a33b17139c71782e880f375756d865f1457b2c3fe23faf1175d65700caab1e5a3c1a5220e52d
+  data.tar.gz: 12bbf4acd6091c45afda3489035977e88169cce34e0313f51c8f75d8d35df71379fa6799af4e1d8e6ad252dc69971f3c41d09ee65c8aaf72ec83b9b748b54cc1

data/bin/lv

@@ -0,0 +1,13 @@
+#!/usr/bin/env ruby
+
+# Support both development (require_relative) and installed (load path) usage
+begin
+  require_relative "../lib/localvault"
+  require_relative "../lib/localvault/cli"
+rescue LoadError
+  require "localvault"
+  require "localvault/cli"
+end
+
+status = LocalVault::CLI.start(ARGV)
+exit(status) if status.is_a?(Integer) && !status.zero?

data/lib/localvault/cli/sync.rb

@@ -111,18 +111,20 @@ module LocalVault
       default_task :all
 
       desc "push [NAME]", "Push a vault to InventList cloud sync"
+      method_option :vault, type: :string, aliases: "-v", desc: "Vault name (same as NAME)"
       def push(vault_name = nil)
         return unless logged_in?
-        vault_name ||= Config.default_vault
+        vault_name ||= options[:vault] || Config.default_vault
         client = ApiClient.new(token: Config.token)
         perform_push(vault_name, client)
       end
 
       desc "pull [NAME]", "Pull a vault from InventList cloud sync"
       method_option :force, type: :boolean, default: false, desc: "Overwrite existing local vault"
+      method_option :vault, type: :string, aliases: "-v", desc: "Vault name (same as NAME)"
       def pull(vault_name = nil)
         return unless logged_in?
-        vault_name ||= Config.default_vault
+        vault_name ||= options[:vault] || Config.default_vault
         client = ApiClient.new(token: Config.token)
         perform_pull(vault_name, client, force: options[:force])
       end

data/lib/localvault/cli.rb

@@ -150,27 +150,31 @@ module LocalVault
       rendered = sections.map { |title, names| [title, names.flat_map { |n| help_rows_for(n) }] }
       width = rendered.flat_map { |_, rows| rows.map { |usage, _| usage.length } }.max + 4
 
+      say_header = ->(text) { shell.say shell.set_color(text, :cyan, true) }
+
       shell.say ""
-      shell.say "LocalVault — encrypted local secrets vault with MCP support for AI agents"
+      shell.say shell.set_color("LocalVault", :cyan, true) + " — encrypted local secrets vault with MCP support for AI agents"
       shell.say "  https://inventlist.com/tools/localvault"
 
       rendered.each do |title, rows|
         next if rows.empty?
         shell.say ""
-        shell.say title
-        rows.each { |usage, desc| shell.say "  localvault #{usage.ljust(width)}#{desc}" }
+        say_header.call(title)
+        rows.each do |usage, desc|
+          shell.say "  localvault #{shell.set_color(usage.ljust(width), :green)}#{desc}"
+        end
       end
 
       shell.say ""
-      shell.say "SAFE SECRET INPUT  (preferred over passing values as arguments)"
+      say_header.call("SAFE SECRET INPUT  (preferred over passing values as arguments)")
       shell.say "  printf '%s' \"$SECRET\" | localvault set KEY --stdin"
       shell.say ""
-      shell.say "PROJECTS  (dot-notation groups inside one vault)"
+      say_header.call("PROJECTS  (dot-notation groups inside one vault)")
       shell.say "  localvault set platepose.API_KEY v    Store a key in the 'platepose' group"
       shell.say "  Filter any command with -p:  show -p platepose, exec -p platepose -- CMD"
       shell.say "  Delete a whole group:        localvault delete 'platepose.*'"
       shell.say ""
-      shell.say "USING SECRETS WITH ANY CLI"
+      say_header.call("USING SECRETS WITH ANY CLI")
       shell.say "  localvault exec -- inventlist ships list"
       shell.say "  localvault exec -- curl -H \"Authorization: Bearer $API_KEY\" ..."
       shell.say ""
@@ -316,15 +320,38 @@ module LocalVault
       vault.list.each { |key| $stdout.puts key }
     end
 
-    desc "groups [QUERY]", "List or search stored secret groups without revealing values"
+    desc "groups [QUERY]", "List or search secret groups / projects without revealing values"
     long_desc <<~DESC
-      Discover dot-notation namespaces and flat-key prefix groups.
-
-\x05    localvault groups
-\x05    localvault groups str
-\x05    localvault show --group STRIPE
-\x05    localvault set --group STRIPE API_KEY VALUE
+      Discover the groups in a vault. "Group" and "project" are the same
+      thing: a named bucket of keys inside one vault. You never create one
+      explicitly — storing a key in it creates it, deleting its last key
+      removes it.
+
+      CREATE by storing keys into a group (three equivalent spellings):
+\x05    localvault set kuickr.API_KEY abc123        # dot-notation
+\x05    localvault set --group kuickr API_KEY abc123
+\x05    localvault set -g kuickr API_KEY abc123
+
+      LIST groups (names and key counts only — values stay hidden):
+\x05    localvault groups                    # all groups in the default vault
+\x05    localvault groups stock              # only groups matching "stock"
+\x05    localvault groups -v intellectaco    # groups in another vault
+
+      WORK WITH one group (any command takes -p / --project):
+\x05    localvault show -p kuickr         # see its keys (masked)
+\x05    localvault list -p kuickr         # just the key names
+\x05    localvault exec -p kuickr -- rails s     # inject only its keys as env vars
+\x05    localvault env -p kuickr          # export only its keys
+\x05    localvault import .env -p kuickr  # import a .env file into the group
+
+      DELETE one key or the whole group:
+\x05    localvault delete kuickr.API_KEY
+\x05    localvault delete 'kuickr.*'
+
+      `localvault projects` is an alias for this command.
     DESC
+    map "projects" => "groups"
+
     def groups(query = nil)
       vault = open_vault!
       matches = GroupCatalog.new(vault.all).search(query)

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.11.3"
+  VERSION = "1.12.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.11.3
+  version: 1.12.1
 platform: ruby
 authors:
 - Nauman Tariq
@@ -99,12 +99,14 @@ email:
 - nauman@intellecta.co
 executables:
 - localvault
+- lv
 extensions: []
 extra_rdoc_files: []
 files:
 - LICENSE
 - README.md
 - bin/localvault
+- bin/lv
 - lib/localvault.rb
 - lib/localvault/api_client.rb
 - lib/localvault/cli.rb