localvault 1.6.0 → 1.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6c3cc5ee20ea5b0017e6ce6b7879234c36d2c30f6a507ca8dd119c9b24a32fa9
-  data.tar.gz: 28c32bd08489c90748782c8320bca666e95a1cf71cf5deb22bcb443bf776e406
+  metadata.gz: 9cf502e2c11320a16bbf04e20ce1202d799d360775b664c1902c6ef337557302
+  data.tar.gz: 1504ab893d079a1308519a8dd9fdfd941560348fca5d92cc1548edd9f6bf6549
 SHA512:
-  metadata.gz: efd141b468fe4f8c0ec3b1b180ef492c3521f074574bbb600ec0d2cc871927df73d7db4c06093eb25444816ae0fa7b92452470f41b65ad7b959a1f6e8a1511b8
-  data.tar.gz: c385bc4e21bec7ca233633e452496589a626f6706672270efc3365b4036f1da1c0274809a96d4d4880f6ba519bf319c7f860afe644f742d01d657e3b3d8327e1
+  metadata.gz: 5aee20035eb1f290f95648c146b7a05f650f033d2f4cfa4ee4dbc565133031871607974c8c3eca58009bf1a3b5fff53ff11940c8841b476d281909d8d72d6ac4
+  data.tar.gz: d8a9f184fc3c636742293a74901d24e12c7c8d48191b1816824e90cf0d7162f670373e78dd54ecc4bc6ef7daffbe6e73f1e341fdb786b258ba7ef3d8ffc1a4da

data/README.md

@@ -100,8 +100,10 @@ localvault exec -- rails server
 | `login [TOKEN]` | Log in to InventList — auto-generates X25519 keypair + publishes public key |
 | `login --status` | Show current login status |
 | `logout` | Clear stored credentials |
-| `sync push [NAME]` | Push encrypted vault to cloud |
-| `sync pull [NAME]` | Pull vault from cloud (auto-unlocks if you have a key slot) |
+| `sync` | Sync all vaults bidirectionally (push local, pull remote, detect conflicts) |
+| `sync --dry-run` | Preview what sync would do without making changes |
+| `sync push [NAME]` | Push one vault to cloud |
+| `sync pull [NAME]` | Pull one vault from cloud (auto-unlocks if you have a key slot) |
 | `sync status` | Show sync state for all vaults |
 | `config set server URL` | Point at a custom server (default: inventlist.com) |
 
@@ -147,22 +149,32 @@ All commands accept `--vault NAME` (or `-v NAME`) to target a specific vault. De
 Sync your vaults between machines — same passphrase, no team features needed:
 
 ```bash
-# Machine A: push your vault
-localvault sync push
+# Machine A: push all your vaults at once
+localvault sync
 
-# Machine B: install, login, pull
+# Machine B: install, login, sync
 brew install inventlist/tap/localvault
 localvault login YOUR_TOKEN
-localvault sync pull
-localvault show  # enter your passphrase — same secrets
+localvault sync                # pulls everything, pushes local-only vaults
+localvault show                # enter your passphrase — same secrets
 ```
 
-Check what's synced:
+Or push/pull individual vaults:
 
 ```bash
-localvault sync status
-# default        synced        2 minutes ago
-# production     local only    —
+localvault sync push production    # push one vault
+localvault sync pull production    # pull one vault
+localvault sync status             # check what's synced vs local-only
+```
+
+Preview before syncing:
+
+```bash
+localvault sync --dry-run
+#   Vault         Action    Reason
+#   default       skip      up to date
+#   production    push      local changes
+#   staging       pull      remote changes
 ```
 
 ## Team Sharing

data/lib/localvault/cli/sync.rb

@@ -165,6 +165,15 @@ module LocalVault
 
       # ── Core push logic ──────────────────────────────────────────
 
+      # Push a single vault to the cloud. Detects team vs personal mode,
+      # checks push authorization, packs the SyncBundle, uploads, and
+      # records the checksum in +.sync_state+ on success.
+      #
+      # Used by both the public +push+ command and the +all+ sync loop.
+      #
+      # @param vault_name [String] vault to push
+      # @param client [ApiClient] authenticated API client
+      # @return [Boolean] true on success, false on any error
       def perform_push(vault_name, client)
         store = Store.new(vault_name)
         unless store.exists?
@@ -220,6 +229,14 @@ module LocalVault
 
       # ── Core pull logic ──────────────────────────────────────────
 
+      # Pull a single vault from the cloud. Downloads the SyncBundle,
+      # writes meta.yml and secrets.enc locally, records +.sync_state+,
+      # and attempts automatic unlock via the user's identity key slot.
+      #
+      # @param vault_name [String] vault to pull
+      # @param client [ApiClient] authenticated API client
+      # @param force [Boolean] overwrite existing local vault (default: false)
+      # @return [Boolean] true on success, false on any error
       def perform_pull(vault_name, client, force: false)
         store = Store.new(vault_name)
         if store.exists? && !force
@@ -267,6 +284,15 @@ module LocalVault
 
       # ── Classification ───────────────────────────────────────────
 
+      # Determine the sync action for a single vault by comparing local,
+      # remote, and baseline state. Returns a hash with +:name+, +:action+
+      # (one of +:push+, +:pull+, +:skip+, +:conflict+), and +:reason+.
+      #
+      # @param name [String] vault name
+      # @param local_set [Set<String>] vaults that exist on disk
+      # @param remote_map [Hash{String => Hash}] remote vault info keyed by name
+      # @param my_handle [String] current user's InventList handle
+      # @return [Hash] +{name:, action:, reason:}+
       def classify_vault(name, local_set, remote_map, my_handle)
         l_exists = local_set.include?(name)
         r_info   = remote_map[name]
@@ -294,6 +320,10 @@ module LocalVault
         { name: name, action: action, reason: reason }
       end
 
+      # Core decision matrix. Compares local/remote existence, checksums,
+      # and the stored baseline to decide: push, pull, skip, or conflict.
+      #
+      # @return [Array(Symbol, String)] +[action, reason]+ tuple
       def determine_action(l_exists, r_exists, s_exists,
                            local_cs, remote_cs, baseline, is_read_only)
         # Only local

data/lib/localvault/cli.rb

@@ -42,10 +42,11 @@ module LocalVault
       shell.say "  localvault copy KEY --to V    Copy a secret to another vault"
       shell.say ""
       shell.say "SYNC  (requires localvault login)"
-      shell.say "  localvault sync push [NAME]   Push vault to cloud"
-      shell.say "  localvault sync pull [NAME]   Pull vault from cloud"
-      shell.say "  localvault sync status        Show sync status"
-      shell.say "  localvault sync SUBCOMMAND    See `localvault help sync` for full sync reference"
+      shell.say "  localvault sync               Sync all vaults bidirectionally (smart push/pull with conflict detection)"
+      shell.say "  localvault sync --dry-run     Show what would happen without making changes"
+      shell.say "  localvault sync push [NAME]   Push one vault to cloud"
+      shell.say "  localvault sync pull [NAME]   Pull one vault from cloud"
+      shell.say "  localvault sync status        Show sync status for all vaults"
       shell.say ""
       shell.say "TEAM SHARING  (requires localvault login)"
       shell.say "  localvault dashboard          Aggregate view: owned vaults, vaults shared with you, legacy shares"

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.6.0"
+  VERSION = "1.6.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.6.0
+  version: 1.6.1
 platform: ruby
 authors:
 - Nauman Tariq