localvault 1.12.1 → 1.12.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5c37fd43d64105bf78e7501e458c98159958c4a6eca101d6716a3781b6bbb61f
-  data.tar.gz: 9f869cee27f7c118f91acf009d85cb0cef9204d9a99ada99b59939c63f7c2b22
+  metadata.gz: 6798f21f6875910fa68c5300a929b4c18e757a9c03251cd71d46bb46e6cd85b7
+  data.tar.gz: a40a445f7d92baad0645bc9ab2f2a900bda43d09a657e07735c565bb5f705f01
 SHA512:
-  metadata.gz: e503618d966e392d38a84969dae01d5355fcbccef921bad3f738a33b17139c71782e880f375756d865f1457b2c3fe23faf1175d65700caab1e5a3c1a5220e52d
-  data.tar.gz: 12bbf4acd6091c45afda3489035977e88169cce34e0313f51c8f75d8d35df71379fa6799af4e1d8e6ad252dc69971f3c41d09ee65c8aaf72ec83b9b748b54cc1
+  metadata.gz: 45cf703a841eedc73c9b77ac19a92059075dd914c4c1075ff79beca784b61fce4396ffbf51b206315f55c6179c44270d3238a6174c479bc1a2e9e1e9bf4e34d7
+  data.tar.gz: 661933cfaa2a6f1a69a5459f0e87580912178e1faeeff0becf7823e4fbb007fa63fad8cfa2f7a05d363146309e20ef1ad4b316143d94a541ba1efb78ae3aa340

data/lib/localvault/cli/help_shell.rb

@@ -0,0 +1,84 @@
+require "thor"
+
+module LocalVault
+  class CLI
+    # Colors every help surface — the main screen, `help COMMAND`, and
+    # subcommand namespaces — by hooking the shell Thor already routes all
+    # help output through, rather than colorizing at each call site.
+    #
+    # Thor disables color itself when stdout is not a TTY, so piped output
+    # stays plain.
+    class HelpShell < Thor::Shell::Color
+      # "Usage:", "Options:", "Description:", "Runtime options:"
+      LABEL = /\A([A-Z][A-Za-z ]*:)\s*\z/
+      # A leading run of caps: "GETTING STARTED", "NESTED KEY (dot-notation)"
+      HEADING = /\A(\s*)([A-Z][A-Z0-9'\/\-]*(?: [A-Z0-9'\/\-]+)*)(?=\z|[\s(:])/
+
+      def say(message = "", color = nil, force_new_line = (message.to_s !~ /( |\t)\Z/))
+        if color.nil? && message.is_a?(String)
+          message = message.lines.map { |line| decorate(line.chomp) }.join("\n")
+        end
+        super
+      end
+
+      # Thor word-wraps long descriptions, which collapses the alignment of
+      # example blocks (`localvault set K V     # comment` loses its spacing).
+      # Lines flagged with \x05 — Thor's no-wrap marker, which every example in
+      # our long_desc blocks already carries — are printed verbatim instead, so
+      # examples stay aligned while prose still wraps to the terminal.
+      def print_wrapped(message, options = {})
+        indent = options[:indent] || 0
+        prose  = []
+
+        message.to_s.lines.each do |line|
+          line = line.chomp
+          if line.lstrip.start_with?("\x05")
+            wrap_prose(prose, options)
+            stdout.puts("#{" " * indent}#{decorate(line.sub("\x05", ''))}")
+          elsif line.strip.empty?
+            wrap_prose(prose, options)
+            stdout.puts
+          else
+            prose << line
+          end
+        end
+
+        wrap_prose(prose, options)
+      end
+
+      # Option tables: green the flag column ("-v, [--vault=VAULT]").
+      def print_table(array, options = {})
+        array = array.map do |row|
+          first, *rest = row
+          first.is_a?(String) && first.strip.start_with?("-") ? [set_color(first, :green), *rest] : row
+        end
+        super
+      end
+
+      private
+
+      # Hand a run of prose lines back to Thor's wrapper, then reset the buffer.
+      def wrap_prose(lines, options)
+        return if lines.empty?
+        text = lines.join("\n")
+        lines.clear
+        return if text.strip.empty?
+        Thor::Shell::Basic.instance_method(:print_wrapped)
+          .bind_call(self, text.lines.map { |l| decorate(l.chomp) }.join("\n"), options)
+      end
+
+      def decorate(line)
+        return line unless can_display_colors?
+
+        if (match = LABEL.match(line))
+          return line.sub(match[1], set_color(match[1], :cyan, true))
+        end
+
+        match = HEADING.match(line)
+        return line unless match && match[2].length >= 4
+
+        "#{match[1]}#{set_color(match[2], :cyan, true)}#{line[(match[1].length + match[2].length)..]}"
+      end
+    end
+  end
+end

data/lib/localvault/cli.rb

@@ -66,7 +66,9 @@ module LocalVault
 
     def self.start(given_args = ARGV, config = {})
       require_relative "cli/error_presenter"
-      config[:shell] ||= Thor::Base.shell.new
+      require_relative "cli/help_shell"
+      Thor::Base.shell = HelpShell   # subcommand namespaces build their own shells
+      config[:shell] ||= HelpShell.new
       result = dispatch(nil, normalize_legacy_group_option(given_args.dup), nil, config)
       result.is_a?(CommandStatus) ? result.code : 0
     rescue Thor::Error => error
@@ -114,7 +116,7 @@ module LocalVault
     # disappearing from help.
     HELP_SECTIONS = [
       ["GETTING STARTED",                                       %w[login config init demo]],
-      ["SECRETS",                                               %w[set get show groups list delete import env exec]],
+      ["SECRETS",                                               %w[set get show reveal groups list delete import env exec]],
       ["VAULT MANAGEMENT",                                      %w[vaults switch rekey unlock lock reset rename copy]],
       ["SYNC  (requires localvault login)",                     %w[sync]],
       ["TEAM SHARING  (requires localvault login)",             %w[dashboard verify add remove team]],
@@ -150,8 +152,6 @@ module LocalVault
       rendered = sections.map { |title, names| [title, names.flat_map { |n| help_rows_for(n) }] }
       width = rendered.flat_map { |_, rows| rows.map { |usage, _| usage.length } }.max + 4
 
-      say_header = ->(text) { shell.say shell.set_color(text, :cyan, true) }
-
       shell.say ""
       shell.say shell.set_color("LocalVault", :cyan, true) + " — encrypted local secrets vault with MCP support for AI agents"
       shell.say "  https://inventlist.com/tools/localvault"
@@ -159,22 +159,22 @@ module LocalVault
       rendered.each do |title, rows|
         next if rows.empty?
         shell.say ""
-        say_header.call(title)
+        shell.say title
         rows.each do |usage, desc|
           shell.say "  localvault #{shell.set_color(usage.ljust(width), :green)}#{desc}"
         end
       end
 
       shell.say ""
-      say_header.call("SAFE SECRET INPUT  (preferred over passing values as arguments)")
+      shell.say("SAFE SECRET INPUT  (preferred over passing values as arguments)")
       shell.say "  printf '%s' \"$SECRET\" | localvault set KEY --stdin"
       shell.say ""
-      say_header.call("PROJECTS  (dot-notation groups inside one vault)")
+      shell.say("PROJECTS  (dot-notation groups inside one vault)")
       shell.say "  localvault set platepose.API_KEY v    Store a key in the 'platepose' group"
       shell.say "  Filter any command with -p:  show -p platepose, exec -p platepose -- CMD"
       shell.say "  Delete a whole group:        localvault delete 'platepose.*'"
       shell.say ""
-      say_header.call("USING SECRETS WITH ANY CLI")
+      shell.say("USING SECRETS WITH ANY CLI")
       shell.say "  localvault exec -- inventlist ships list"
       shell.say "  localvault exec -- curl -H \"Authorization: Bearer $API_KEY\" ..."
       shell.say ""
@@ -526,6 +526,29 @@ module LocalVault
       abort_with "Wrong passphrase for vault '#{vault_name}'"
     end
 
+    desc "reveal [GROUP]", "Show secrets with values unmasked (same as `show --reveal`)"
+    long_desc <<~DESC
+      Show secrets with their values unmasked. Identical to `show --reveal`, and
+      it takes the same options — `reveal` is simply the verb most people reach
+      for. A bare argument is treated as the group to show.
+
+\x05    localvault reveal                          # every secret, unmasked
+\x05    localvault reveal CLOUDFLARE               # one group
+\x05    localvault reveal --group CLOUDFLARE       # the same thing
+\x05    localvault reveal -p kuickr -v intellectaco
+
+      Plaintext output is still gated: it refuses to print values when stdout is
+      not a terminal, so a redirect or a pipe can't quietly capture secrets.
+    DESC
+    method_option :group, aliases: "-g", type: :string, lazy_default: GROUP_ALL_SENTINEL, desc: "Show all groups or one group by name"
+    method_option :project, aliases: "-p", type: :string, desc: "Show only this project group"
+    def reveal(group = nil)
+      merged = options.merge("reveal" => true)
+      merged["group"] = group if group && merged["project"].nil?
+      self.options = merged
+      show
+    end
+
     desc "show", "Display secrets in a formatted table (masked by default)"
     long_desc <<~DESC
       Show secrets in the current vault. Values are masked by default.
@@ -785,6 +808,14 @@ module LocalVault
     require_relative "cli/guard"
     require_relative "cli/identity_cmd"
 
+    # Thor 1.5 injects a `tree` command into every class. Inside a namespace it
+    # lists under a name that isn't even callable (`identity_command tree`), and
+    # at top level it prints a raw class path as the root. Our grouped help
+    # covers the same ground properly, so drop it everywhere.
+    [self, Guard, Keys, Team, Sync, IdentityCommand].each do |namespace|
+      namespace.remove_command(:tree) if namespace.all_commands.key?("tree")
+    end
+
     register(Guard, "guard", "guard SUBCOMMAND", "Block plaintext secrets in agent tool traffic (Claude Code hooks)")
     register(IdentityCommand, "identity", "identity SUBCOMMAND", "Show or set your local identity (alias, handle, public key)")
     register(Keys, "keys", "keys SUBCOMMAND", "Manage your X25519 keypair for vault sharing")

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.12.1"
+  VERSION = "1.12.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.12.1
+  version: 1.12.3
 platform: ruby
 authors:
 - Nauman Tariq
@@ -112,6 +112,7 @@ files:
 - lib/localvault/cli.rb
 - lib/localvault/cli/error_presenter.rb
 - lib/localvault/cli/guard.rb
+- lib/localvault/cli/help_shell.rb
 - lib/localvault/cli/identity_cmd.rb
 - lib/localvault/cli/keys.rb
 - lib/localvault/cli/sync.rb