localvault 1.4.0 → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6ec85a7f67eb8705f2078a55eeeb1a24997f61e965a76284ef9a9eb314eef032
-  data.tar.gz: d799cbfabdced0595eb91132e35daa2930f19a705cc189357cb9a5c3b794cc05
+  metadata.gz: 1c3bc70e3ad51b1b7ddebc905fac13e29e3a9c817e4da80e6bf137ab0ae5a0d3
+  data.tar.gz: 1db6e6edb29546b72ae8105f1e811e655bae036f37af5a1c3a7a362189c0e089
 SHA512:
-  metadata.gz: 74123bc8d783ace6773c11223486974d7210870903d5901d0f1c3410266d7d9c29d2ffe9f0bead2137629b3132495854c490c1a771becf06355a26b527afa435
-  data.tar.gz: b95d606abec4fe145d23b7028a5091f4ec1fab3a9b5d6df3a8ae201b238b9a334a8c07033892a6d3ae36d73f1e116cc3f0c72dcde955f1109f09d58405025021
+  metadata.gz: c10706f2b8bb9e7471ff4cb6e03dc59fe26e6ea87d64c4438e3183a4917b03989e862b5ee76639f108e6e7ae445f29c3246b97a7cacdfa90517a369a2b613b5a
+  data.tar.gz: 9ebdb6b7c4918335e938508b8e48e3a0d7874b6d7eec6320aa2f1178643c77440d9987779836b5ca48018b0531772120d0283e1e1106764c8387a2a8f23d0041

data/lib/localvault/cli.rb

@@ -48,6 +48,7 @@ module LocalVault
       shell.say "  localvault sync SUBCOMMAND    See `localvault help sync` for full sync reference"
       shell.say ""
       shell.say "TEAM SHARING  (requires localvault login)"
+      shell.say "  localvault dashboard          Aggregate view: owned vaults, vaults shared with you, legacy shares"
       shell.say "  localvault verify @HANDLE     Check if a person has a published public key"
       shell.say "  localvault add @HANDLE        Add teammate (use --scope KEY... for partial access)"
       shell.say "  localvault remove @HANDLE     Remove teammate  (--scope KEY to strip one key, --rotate to re-key)"
@@ -979,6 +980,125 @@ module LocalVault
       $stderr.puts "Error: #{e.message}"
     end
 
+    desc "dashboard", "Show who has access to which vaults, and what's shared with you"
+    long_desc <<~DESC
+      Aggregate view across every vault you can see on InventList. Sections:
+
+      \x05OWNED BY YOU       — team vaults where you are the owner, with all members + their scopes
+      \x05SHARED WITH YOU    — team vaults where someone else is the owner and you're a member
+      \x05LEGACY DIRECT SHARES — pre-v1.2 one-shot direct shares (outgoing + incoming)
+
+      Unlike `team list [VAULT]`, which shows a single vault's members, this
+      gives you one screen that answers: who can see my stuff, and whose
+      stuff can I see.
+    DESC
+    def dashboard
+      unless Config.token
+        $stderr.puts "Error: Not logged in."
+        $stderr.puts "\n  localvault login YOUR_TOKEN\n"
+        $stderr.puts "Get your token at: https://inventlist.com/@YOUR_HANDLE/edit#developer"
+        return
+      end
+
+      client = ApiClient.new(token: Config.token)
+      my_handle = Config.inventlist_handle
+
+      begin
+        list = client.list_vaults
+      rescue ApiClient::ApiError => e
+        $stderr.puts "Error: #{e.message}"
+        return
+      end
+
+      vaults = list["vaults"] || []
+      owned   = []
+      shared  = []
+      skipped = []
+
+      vaults.each do |v|
+        name = v["name"]
+        next unless name
+
+        begin
+          blob = client.pull_vault(name)
+        rescue ApiClient::ApiError => e
+          skipped << [name, e.message]
+          next
+        end
+
+        next if blob.nil? || blob.empty?
+
+        begin
+          data = SyncBundle.unpack(blob)
+        rescue SyncBundle::UnpackError => e
+          skipped << [name, e.message]
+          next
+        end
+
+        owner = data[:owner] || v["owner_handle"]
+        row = {
+          name:       name,
+          owner:      owner,
+          key_slots:  data[:key_slots] || {},
+          is_team:    !owner.nil?,
+          remote_shared: v["shared"] == true
+        }
+
+        if owner && owner == my_handle
+          owned << row
+        elsif v["shared"] == true || (owner && owner != my_handle)
+          shared << row
+        else
+          # v1 personal vault (no owner) — treat as owned (it's yours)
+          owned << row
+        end
+      end
+
+      # ── OWNED BY YOU ──
+      $stdout.puts
+      $stdout.puts VAULT_STYLE.render("OWNED BY YOU") + "  " + COUNT_STYLE.render("(#{owned.size} vault#{owned.size == 1 ? "" : "s"})")
+      $stdout.puts
+      if owned.empty?
+        $stdout.puts "  " + COUNT_STYLE.render("No vaults owned yet. Create one with `localvault init NAME`.")
+      else
+        owned.sort_by { |r| r[:name] }.each { |row| render_dashboard_vault(row, my_handle: my_handle) }
+      end
+
+      # ── SHARED WITH YOU ──
+      $stdout.puts
+      $stdout.puts VAULT_STYLE.render("SHARED WITH YOU") + "  " + COUNT_STYLE.render("(#{shared.size} vault#{shared.size == 1 ? "" : "s"})")
+      $stdout.puts
+      if shared.empty?
+        $stdout.puts "  " + COUNT_STYLE.render("No vaults shared with you.")
+      else
+        shared.sort_by { |r| r[:name] }.each { |row| render_dashboard_vault(row, my_handle: my_handle) }
+      end
+
+      # ── LEGACY DIRECT SHARES ──
+      sent    = safe_fetch_shares { client.sent_shares }
+      pending = safe_fetch_shares { client.pending_shares }
+      outgoing_count = (sent["shares"] || []).reject { |s| s["status"] == "revoked" }.size
+      pending_count  = (pending["shares"] || []).size
+
+      $stdout.puts
+      $stdout.puts VAULT_STYLE.render("LEGACY DIRECT SHARES") + "  " + COUNT_STYLE.render("(pre-v1.2 fallback)")
+      $stdout.puts "  outgoing: #{outgoing_count}    pending: #{pending_count}"
+      if outgoing_count + pending_count > 0
+        $stdout.puts "  " + COUNT_STYLE.render("Manage with `localvault receive`, `localvault revoke SHARE_ID`.")
+      end
+
+      # ── Skipped ──
+      unless skipped.empty?
+        $stdout.puts
+        $stderr.puts "Note: #{skipped.size} vault(s) could not be loaded:"
+        skipped.each do |name, reason|
+          $stderr.puts "  #{name}: #{reason}"
+        end
+      end
+
+      $stdout.puts
+    end
+
     desc "import FILE", "Bulk-import secrets from a .env, .json, or .yml file"
     long_desc <<~DESC
       Import all secrets from a file into a vault. Supports .env, .json, and .yml.
@@ -1269,6 +1389,63 @@ module LocalVault
       end
     end
 
+    # Render one vault row for `localvault dashboard`, as a Lipgloss table
+    # of its members (handle, access, scopes). Style mirrors `show`'s
+    # render_table — rounded border, purple header, alternating rows.
+    def render_dashboard_vault(row, my_handle:)
+      slots = row[:key_slots]
+      valid = slots.select { |_, v| v.is_a?(Hash) && v["pub"].is_a?(String) }
+
+      count_label = "#{valid.size} member#{valid.size == 1 ? "" : "s"}"
+      owner_label = row[:owner] ? "owner @#{row[:owner]}" : "personal (v1 bundle, no team access)"
+      $stdout.puts "  " + GROUP_STYLE.render(row[:name]) + "  " + COUNT_STYLE.render("#{count_label} · #{owner_label}")
+
+      if !row[:is_team]
+        # v1 personal bundle — no members to list
+        $stdout.puts "  " + COUNT_STYLE.render("No team members. Convert with `localvault team init #{row[:name]}` to share.")
+        $stdout.puts
+        return
+      end
+
+      if valid.empty?
+        $stdout.puts "  " + COUNT_STYLE.render("No members yet. Add someone with `localvault add @HANDLE -v #{row[:name]}`.")
+        $stdout.puts
+        return
+      end
+
+      rows = valid.sort.map do |handle, slot|
+        marker = handle == my_handle ? " (you)" : ""
+        access = slot["scopes"].is_a?(Array) ? "scoped" : "full"
+        scopes = slot["scopes"].is_a?(Array) ? slot["scopes"].join(", ") : "—"
+        ["@#{handle}#{marker}", access, scopes]
+      end
+
+      require "lipgloss"
+      table = Lipgloss::Table.new
+        .headers(["Member", "Access", "Scopes"])
+        .rows(rows)
+        .border(:rounded)
+        .style_func(rows: rows.size, columns: 3) do |row_idx, _col|
+          if row_idx == Lipgloss::Table::HEADER_ROW
+            HEADER_STYLE
+          else
+            row_idx.odd? ? ODD_STYLE : EVEN_STYLE
+          end
+        end
+        .render
+
+      $stdout.puts table
+      $stdout.puts
+    end
+
+    # Fetch shares, swallowing API errors so the dashboard never bails
+    # because the legacy endpoint hiccuped.
+    def safe_fetch_shares
+      yield
+    rescue ApiClient::ApiError
+      { "shares" => [] }
+    end
+
     def parse_import_file(file)
       ext = File.extname(file).downcase
       case ext

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.4.0"
+  VERSION = "1.5.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.4.0
+  version: 1.5.0
 platform: ruby
 authors:
 - Nauman Tariq