onetime-up 0.7.0 → 0.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 608460e67b5939792b49aad0117baa385911125337337624113f4e1a95388063
-  data.tar.gz: ff189cbd5cd36d19e102dea6dcd16acc2015a7de13400b5c42bd2638152e4533
+  metadata.gz: 44363e304d46201be0d1362d29b83afc834932fca947814d8ff641e852906122
+  data.tar.gz: cca803e708264e825b106274a6e07732991c84e2c6c1036d77997ca26a5671cc
 SHA512:
-  metadata.gz: dfd25117746474d2ccb452aaeeaa5dcbb4b8ebe3c4a28c078ed11f33c2011bb19d60a25058be2a1fa5e9f98a9e56da75a4a5c877a7c559b6305f40753f38c031
-  data.tar.gz: 66b1255b1dd1d9f8c18e7e617daea8034ad518a0391f230276cb93a919a054a733fd2d2040ce3086c012ac29fc0dc76a824578e5e2f27acc2f584f2cbe3bfbf2
+  metadata.gz: 0f4e96784f5e441a3d9625b56a0f8a5a318a27bd12109535f2e50ee5dd5e89ee9e7b35f21334062952f19ad3059d7b2ca08c95144d2f6206f5f203e21fb7f62e
+  data.tar.gz: f4eccb25d18d9c504b9f8c06a12b7a11520b9a8e0022d296caacde3e7ca1651e5017972c853feb74e7814b2608b4103415fa709749e639711ddbc2a5ed626a41

data/CHANGELOG.md

@@ -8,6 +8,10 @@
 - Restore `apiversion` path handling for callers that pass an API version explicitly
 - Add safer CLI response handling for changed or partial API responses
 - Accept secret URLs from root and regional onetimesecret.com hosts
+- `generate` no longer hangs when stdin is an idle open pipe (e.g. ssh, cron)
+- Accept secret URLs with a trailing slash
+- `-H` takes precedence over `ONETIME_HOST`
+- Report non-JSON API responses with their HTTP status instead of a backtrace
 
 ## [0.6.0] - 2026-01-18
 

data/README.md

@@ -1,6 +1,13 @@
 # Onetime-up
 
-Fork of the Ruby program [`One-Time Secret`](https://github.com/onetimesecret/onetime-ruby), using the API v2.
+Fork of the Ruby program [`One-Time Secret`](https://github.com/onetimesecret/onetime-ruby), using the API v2, with the following improvements:
+
+- CLI built on Ruby stdlib — no third-party CLI dependency (the upstream `drydock` requirement has been removed)
+- Uses the API v2 (response shapes updated accordingly)
+- `share` accepts a positional file path (e.g. `onetime share /path/to/file`) in addition to stdin redirection
+- `generate` rejects misuse (extra positional args, piped stdin) with a clear hint pointing at `onetime share`
+- Default API host is `https://eu.onetimesecret.com/api`
+- The `metadata` command is renamed `receipt` for consistency with the API
 
 ## Basic usage
 
@@ -8,12 +15,10 @@ Share a secret:
 
 ```sh
 echo "secret text" | onetime share
-```
-
-Share a secret protected by a passphrase:
-
-```sh
+# Share a secret protected by a passphrase:
 echo "secret text" | onetime share -p "shared-passphrase"
+# Share the contents of a local file:
+onetime share /path/to/file
 ```
 
 Retrieve a secret:
@@ -42,3 +47,5 @@ The command `metadata` has been renamed `receipt` for consistency with the API.
 The default API host is now `https://eu.onetimesecret.com/api`.
 
 The library now uses API v2 response shapes. Programmatic callers should read receipt data from `record.receipt` and secret data from `record.secret` or reveal responses from `record.secret_value`.
+
+The `generate` command now rejects extra positional arguments and piped stdin (previously both were silently ignored). Use `onetime share` to share file contents or piped data.

data/bin/onetime

@@ -3,226 +3,6 @@
 base_path = File.expand_path File.join(File.dirname(__FILE__), '..')
 $:.unshift File.join(base_path, 'lib')
 
-require 'uri'
-require 'onetime/api'
-require 'drydock'
+require 'onetime/cli'
 
-class Onetime::CLI
-  class Definition
-    extend Drydock
-
-    default :share
-
-    global :H, String, "Base URI (e.g. https://onetimesecret.com/api)"
-    global :c, :custid, String, "Customer ID (e.g. you@yourcompany.com)"
-    global :k, :apikey, String, "API key (e.g. 4eb33c6340006d6607c813fc7e707a32f8bf5342)"
-
-    global :r, :recipient, Array, "Email address to deliver the secret link"
-
-    global :f, :format, String, "Output format (json or yaml)"
-    global :j, :json, "Shorthand for -f json"
-    global :y, :yaml, "Shorthand for -f yaml"
-    global :s, :string, "Shorthand for -f string (default)"
-
-    global :D, :debug do
-      OT::API.debug_output STDERR
-    end
-
-    global :V, :version do
-      puts OT::VERSION
-      exit 0
-    end
-
-    before do |obj|
-      OT::API.base_uri obj.global.H if obj.global.H
-      @api = OT::API.new obj.global.custid, obj.global.apikey
-      obj.global.format = 'yaml' if obj.global.yaml
-      obj.global.format = 'json' if obj.global.json
-      obj.global.format = 'string' if obj.global.string
-      obj.global.format = nil if obj.global.format == 'string'
-      if obj.global.format && !['json', 'yaml', 'csv'].member?(obj.global.format)
-        raise RuntimeError, "Unsupported format: #{obj.global.format}"
-      end
-    end
-
-    usage "onetime status"
-    command :status do |obj|
-      @res = @api.get '/status'
-      if @res.nil?
-        raise RuntimeError, 'Could not complete request'
-      elsif @api.response.code != 200
-        raise RuntimeError, OT::API.response_error_message(@res)
-      end
-      case obj.global.format
-      when 'json'
-        puts @res.to_json
-      when 'yaml'
-        puts @res.to_yaml
-      else
-        msg = @api.anonymous ? 'Anonymous' : @api.custid
-        STDERR.puts '# Host: %s' % OT::API.base_uri
-        STDERR.puts '# Account: %s' % msg
-        puts 'Service Status: %s' % @res[:status]
-      end
-    end
-
-    argv :key
-    usage "onetime receipt <KEY>"
-    command :receipt do |obj|
-      raise RuntimeError, "csv not supported" if obj.global.format == 'csv'
-      raise RuntimeError, "Usage: #{$0} receipt <KEY>" unless obj.argv.key
-
-      # Handle case where argv.key might be an array due to drydock parsing
-      receipt_key = Array(obj.argv.key).first.to_s
-
-      @res = @api.get '/receipt/%s' % receipt_key
-      if @res.nil?
-        raise RuntimeError, 'Could not complete request'
-      elsif @api.response.code != 200
-        raise RuntimeError, OT::API.response_error_message(@res)
-      end
-      case obj.global.format
-      when 'json'
-        puts @res.to_json
-      when 'yaml'
-        puts @res.to_yaml
-      else
-        puts @res.to_yaml
-      end
-    end
-
-    option :p, :passphrase, String, "Passphrase to decrypt the secret (only required if one was provided to you)"
-    argv :key
-    usage "onetime secret <KEY>"
-    usage "onetime secret [-p PASSPHRASE] <KEY>"
-    command :secret do |obj|
-      raise RuntimeError, "csv not supported" if obj.global.format == 'csv'
-      raise RuntimeError, "Usage: #{$0} secret <KEY>" unless obj.argv.key
-
-      # Handle case where argv.key might be an array due to drydock parsing
-      secret_key = Array(obj.argv.key).first.to_s
-
-      opts = { continue: true }
-      opts[:passphrase] = obj.option.passphrase if obj.option.passphrase
-      secret_key = OT::API.extract_secret_key(secret_key)
-      @res = @api.post '/secret/%s/reveal' % [secret_key], opts
-      if @res.nil?
-        raise RuntimeError, 'Could not complete request'
-      elsif @api.response.code != 200
-        raise RuntimeError, OT::API.response_error_message(@res)
-      end
-      case obj.global.format
-      when 'json'
-        puts @res.to_json
-      when 'yaml'
-        puts @res.to_yaml
-      else
-        value = @res.dig('record', 'secret_value')
-        puts value if value
-      end
-    end
-    command_alias :secret, :get
-
-    usage "onetime share"
-    usage "onetime share [-t 3600] [-p PASSPHRASE]"
-    usage "echo 'your secret' | onetime share"
-    usage "<path/2/file onetime share"
-    option :t, :ttl, Integer, "Time-to-live in seconds"
-    option :p, :passphrase, String, "Passphrase to encrypt the secret (something only you and recipient know)"
-    option :r, :recipient, Array, "Email address to deliver the secret link"
-    command :share do |obj|
-      recipients = [obj.option.recipient, obj.global.recipient].flatten.compact.uniq
-      begin
-        if Kernel.select [$stdin], nil, nil, 0
-          secret_value = STDIN.read
-        else
-          STDERR.puts "Paste message here (hit control-D to continue):"
-          secret_value = ARGF.read
-          STDERR.puts # new line to let the person know we got it.
-        end
-      rescue Interrupt => ex
-        puts "Exiting..."
-        exit 0
-      end
-      raise RuntimeError, "No secret provided" if secret_value.chomp.empty?
-      opts = { :secret => secret_value, :ttl => obj.option.ttl, :recipient => recipients }
-      opts[:passphrase] = obj.option.passphrase if obj.option.passphrase
-      @res = @api.post '/secret/conceal', opts
-      if @res.nil?
-        raise RuntimeError, 'Could not complete request'
-      elsif @api.response.code != 200
-        raise RuntimeError, OT::API.response_error_message(@res)
-      end
-      secret_key = OT::API.secret_key_from_response(@res)
-      raise RuntimeError, 'Unexpected response: missing record.secret.key' unless secret_key
-      uri = OT::API.web_uri('secret', secret_key)
-      case obj.global.format
-      when 'json'
-        puts @res.to_json
-      when 'yaml'
-        puts @res.to_yaml
-      else
-        recipients = OT::API.recipients_from_response(@res)
-        if !recipients.empty?
-          STDERR.puts '# Secret link sent to: %s' % recipients.join(',')
-        else
-          puts uri
-        end
-      end
-    end
-
-    usage "onetime generate"
-    usage "onetime generate [-t 3600] [-p PASSPHRASE]"
-    option :t, :ttl, Integer, "Time-to-live in seconds"
-    option :p, :passphrase, String, "Passphrase to encrypt the secret (something only you and recipient know)"
-    option :r, :recipient, Array, "Email address to deliver the secret link"
-    command :generate do |obj|
-      extra_args = Array(obj.argv).flatten.compact
-      unless extra_args.empty?
-        raise RuntimeError, "generate takes no arguments (got: %s). Did you mean: onetime share < %s" % [extra_args.join(' '), extra_args.first]
-      end
-      if !$stdin.tty? && !$stdin.eof?
-        raise RuntimeError, "generate does not read stdin. Did you mean: onetime share"
-      end
-      recipients = [obj.option.recipient, obj.global.recipient].flatten.compact.uniq
-      opts = { :ttl => obj.option.ttl, :recipient => recipients }
-      opts[:passphrase] = obj.option.passphrase if obj.option.passphrase
-      @res = @api.post '/secret/generate', opts
-      if @res.nil?
-        raise RuntimeError, 'Could not complete request'
-      elsif @api.response.code != 200
-        raise RuntimeError, OT::API.response_error_message(@res)
-      end
-      secret_key = OT::API.secret_key_from_response(@res)
-      raise RuntimeError, 'Unexpected response: missing record.secret.key' unless secret_key
-      uri = OT::API.web_uri('secret', secret_key)
-      case obj.global.format
-      when 'json'
-        puts @res.to_json
-      when 'yaml'
-        puts @res.to_yaml
-      when 'csv'
-        puts uri
-      else
-        recipients = OT::API.recipients_from_response(@res)
-        if !recipients.empty?
-          STDERR.puts '# Secret link sent to: %s' % recipients.join(',')
-        else
-          puts uri
-        end
-      end
-    end
-
-  end
-end
-
-begin
-  Drydock.run! ARGV, STDIN
-rescue RuntimeError => ex
-  STDERR.puts ex.message
-  exit 1
-rescue => ex
-  puts ex.message
-  puts ex.backtrace
-  exit 1
-end
+exit Onetime::CLI.run(ARGV)

data/lib/onetime/api.rb

@@ -146,7 +146,7 @@ module Onetime
         return value unless uri.host && uri.path
         return value unless accepted_secret_host?(uri.host, api_base_uri)
 
-        match = uri.path.match(%r{\A/secret/([a-zA-Z0-9]+)\z})
+        match = uri.path.match(%r{\A/secret/([a-zA-Z0-9]+)/?\z})
         match ? match[1] : value
       rescue URI::InvalidURIError
         value

data/lib/onetime/cli/parser.rb

@@ -0,0 +1,134 @@
+require 'optparse'
+
+require_relative '../version'
+
+module Onetime
+  module CLI
+    class Parser
+      class Error < StandardError; end
+
+      DEFAULT_COMMAND = 'share'.freeze
+      KNOWN_COMMANDS = %w[status receipt secret share generate].freeze
+      COMMAND_ALIASES = { 'get' => 'secret' }.freeze
+      VALID_FORMATS = %w[json yaml csv].freeze
+
+      COMMAND_OPTIONS = {
+        'share'    => %i[ttl passphrase recipient].freeze,
+        'generate' => %i[ttl passphrase recipient].freeze,
+        'secret'   => %i[passphrase].freeze,
+        'receipt'  => [].freeze,
+        'status'   => [].freeze,
+      }.freeze
+
+      Result = Struct.new(
+        :command, :argv,
+        :base_uri, :custid, :apikey, :recipients,
+        :format, :debug, :show_version,
+        :ttl, :passphrase,
+        keyword_init: true,
+      )
+
+      def self.parse(argv)
+        new(argv).parse
+      end
+
+      def initialize(argv)
+        @argv = argv.dup
+        @base_uri = nil
+        @custid = nil
+        @apikey = nil
+        @global_recipients = []
+        @command_recipients = []
+        @format = nil
+        @debug = false
+        @show_version = false
+        @ttl = nil
+        @passphrase = nil
+        @yaml_flag = false
+        @json_flag = false
+        @string_flag = false
+      end
+
+      def parse
+        global_option_parser.order!(@argv)
+        command, rest = extract_command
+        if command
+          command_option_parser(command).order!(rest)
+        end
+        apply_format_precedence!
+        normalize_format!
+        Result.new(
+          command: command,
+          argv: rest,
+          base_uri: @base_uri,
+          custid: @custid,
+          apikey: @apikey,
+          recipients: (@command_recipients + @global_recipients).uniq,
+          format: @format,
+          debug: @debug,
+          show_version: @show_version,
+          ttl: @ttl,
+          passphrase: @passphrase,
+        )
+      rescue OptionParser::ParseError => e
+        raise Error, e.message
+      end
+
+      private
+
+      def global_option_parser
+        OptionParser.new do |opts|
+          opts.on('-H BASE_URI', String) { |v| @base_uri = v }
+          opts.on('-c CUSTID', '--custid CUSTID', String) { |v| @custid = v }
+          opts.on('-k APIKEY', '--apikey APIKEY', String) { |v| @apikey = v }
+          opts.on('-r RECIPIENT', '--recipient RECIPIENT', Array) { |v| @global_recipients.concat(Array(v)) }
+          opts.on('-f FORMAT', '--format FORMAT', String) { |v| @format = v }
+          opts.on('-j', '--json') { @json_flag = true }
+          opts.on('-y', '--yaml') { @yaml_flag = true }
+          opts.on('-s', '--string') { @string_flag = true }
+          opts.on('-D', '--debug') { @debug = true }
+          opts.on('-V', '--version') { @show_version = true }
+        end
+      end
+
+      def command_option_parser(command)
+        allowed = COMMAND_OPTIONS.fetch(command, [])
+        OptionParser.new do |opts|
+          if allowed.include?(:ttl)
+            opts.on('-t TTL', '--ttl TTL', Integer) { |v| @ttl = v }
+          end
+          if allowed.include?(:passphrase)
+            opts.on('-p PASSPHRASE', '--passphrase PASSPHRASE', String) { |v| @passphrase = v }
+          end
+          if allowed.include?(:recipient)
+            opts.on('-r RECIPIENT', '--recipient RECIPIENT', Array) { |v| @command_recipients.concat(Array(v)) }
+          end
+        end
+      end
+
+      def apply_format_precedence!
+        @format = 'yaml' if @yaml_flag
+        @format = 'json' if @json_flag
+        @format = 'string' if @string_flag
+      end
+
+      def normalize_format!
+        @format = nil if @format == 'string'
+        return if @format.nil?
+        return if VALID_FORMATS.include?(@format)
+        raise Error, "Unsupported format: #{@format}"
+      end
+
+      def extract_command
+        return [nil, []] if @show_version
+
+        raw = @argv.shift || DEFAULT_COMMAND
+        canonical = COMMAND_ALIASES.fetch(raw, raw)
+        unless KNOWN_COMMANDS.include?(canonical)
+          raise Error, "unknown command: #{raw}"
+        end
+        [canonical, @argv]
+      end
+    end
+  end
+end

data/lib/onetime/cli/runner.rb

@@ -0,0 +1,216 @@
+require 'json'
+require 'yaml'
+
+require_relative '../api'
+require_relative '../version'
+
+module Onetime
+  module CLI
+    class Runner
+      class Error < StandardError; end
+
+      PROGRAM_NAME = 'onetime'.freeze
+
+      def initialize(parsed, stdin: $stdin, stdout: $stdout, stderr: $stderr)
+        @parsed = parsed
+        @stdin = stdin
+        @stdout = stdout
+        @stderr = stderr
+      end
+
+      def run
+        return print_version if @parsed.show_version
+
+        configure_api!
+        case @parsed.command
+        when 'status'   then run_status
+        when 'receipt'  then run_receipt
+        when 'secret'   then run_secret
+        when 'share'    then run_share
+        when 'generate' then run_generate
+        else
+          raise Error, "unhandled command: #{@parsed.command.inspect}"
+        end
+      end
+
+      private
+
+      def print_version
+        @stdout.puts Onetime::VERSION
+        0
+      end
+
+      def configure_api!
+        OT::API.debug_output @stderr if @parsed.debug
+        @api = OT::API.new(@parsed.custid, @parsed.apikey)
+        # Set after API.new, which applies ONETIME_HOST, so that -H takes precedence.
+        OT::API.base_uri @parsed.base_uri if @parsed.base_uri
+      end
+
+      def run_status
+        res = api_get('/status')
+        case @parsed.format
+        when 'json'
+          @stdout.puts res.to_json
+        when 'yaml'
+          @stdout.puts res.to_yaml
+        else
+          account = @api.anonymous ? 'Anonymous' : @api.custid
+          @stderr.puts '# Host: %s' % OT::API.base_uri
+          @stderr.puts '# Account: %s' % account
+          @stdout.puts 'Service Status: %s' % res[:status]
+        end
+        0
+      end
+
+      def run_receipt
+        raise Error, 'csv not supported' if @parsed.format == 'csv'
+        raise Error, "Usage: #{PROGRAM_NAME} receipt <KEY>" if @parsed.argv.empty?
+
+        key = @parsed.argv.first.to_s
+        res = api_get('/receipt/%s' % key)
+        case @parsed.format
+        when 'json'
+          @stdout.puts res.to_json
+        else
+          @stdout.puts res.to_yaml
+        end
+        0
+      end
+
+      def run_secret
+        raise Error, 'csv not supported' if @parsed.format == 'csv'
+        raise Error, "Usage: #{PROGRAM_NAME} secret <KEY>" if @parsed.argv.empty?
+
+        raw_key = @parsed.argv.first.to_s
+        key = OT::API.extract_secret_key(raw_key)
+        opts = { continue: true }
+        opts[:passphrase] = @parsed.passphrase if @parsed.passphrase
+        res = api_post('/secret/%s/reveal' % key, opts)
+        case @parsed.format
+        when 'json'
+          @stdout.puts res.to_json
+        when 'yaml'
+          @stdout.puts res.to_yaml
+        else
+          value = res.dig('record', 'secret_value')
+          @stdout.puts value if value
+        end
+        0
+      end
+
+      def run_share
+        begin
+          secret_value = read_share_input
+        rescue Interrupt
+          @stdout.puts 'Exiting...'
+          return 0
+        end
+        raise Error, 'No secret provided' if secret_value.chomp.empty?
+
+        opts = { secret: secret_value, ttl: @parsed.ttl, recipient: @parsed.recipients }
+        opts[:passphrase] = @parsed.passphrase if @parsed.passphrase
+        res = api_post('/secret/conceal', opts)
+        emit_share_result(res)
+        0
+      end
+
+      def run_generate
+        unless @parsed.argv.empty?
+          extras = @parsed.argv
+          raise Error, "generate takes no arguments (got: %s). Did you mean: onetime share < %s" % [extras.join(' '), extras.first]
+        end
+        # Non-blocking check: an idle pipe that is never closed (ssh, cron) must not hang.
+        if !@stdin.tty? && IO.select([@stdin], nil, nil, 0) && !@stdin.eof?
+          raise Error, 'generate does not read stdin. Did you mean: onetime share'
+        end
+        opts = { ttl: @parsed.ttl, recipient: @parsed.recipients }
+        opts[:passphrase] = @parsed.passphrase if @parsed.passphrase
+        res = api_post('/secret/generate', opts)
+        emit_generate_result(res)
+        0
+      end
+
+      def read_share_input
+        if !@parsed.argv.empty?
+          read_argv_inputs(@parsed.argv)
+        elsif !@stdin.tty?
+          @stdin.read
+        else
+          @stderr.puts 'Paste message here (hit control-D to continue):'
+          content = @stdin.read
+          @stderr.puts
+          content
+        end
+      end
+
+      def read_argv_inputs(paths)
+        paths.map { |path| path == '-' ? @stdin.read : File.read(path) }.join
+      end
+
+      def emit_share_result(res)
+        secret_key = OT::API.secret_key_from_response(res)
+        raise Error, 'Unexpected response: missing record.secret.key' unless secret_key
+
+        uri = OT::API.web_uri('secret', secret_key)
+        case @parsed.format
+        when 'json'
+          @stdout.puts res.to_json
+        when 'yaml'
+          @stdout.puts res.to_yaml
+        else
+          recipients = OT::API.recipients_from_response(res)
+          if !recipients.empty?
+            @stderr.puts '# Secret link sent to: %s' % recipients.join(',')
+          else
+            @stdout.puts uri
+          end
+        end
+      end
+
+      def emit_generate_result(res)
+        secret_key = OT::API.secret_key_from_response(res)
+        raise Error, 'Unexpected response: missing record.secret.key' unless secret_key
+
+        uri = OT::API.web_uri('secret', secret_key)
+        case @parsed.format
+        when 'json'
+          @stdout.puts res.to_json
+        when 'yaml'
+          @stdout.puts res.to_yaml
+        when 'csv'
+          @stdout.puts uri
+        else
+          recipients = OT::API.recipients_from_response(res)
+          if !recipients.empty?
+            @stderr.puts '# Secret link sent to: %s' % recipients.join(',')
+          else
+            @stdout.puts uri
+          end
+        end
+      end
+
+      def api_get(path)
+        request { @api.get(path) }
+      end
+
+      def api_post(path, params)
+        request { @api.post(path, params) }
+      end
+
+      def request
+        res = yield
+        check_response!(res)
+        res
+      rescue JSON::ParserError
+        raise Error, "Unexpected non-JSON response (HTTP #{@api.response.code})"
+      end
+
+      def check_response!(res)
+        raise Error, 'Could not complete request' if res.nil?
+        return if @api.response.code == 200
+        raise Error, OT::API.response_error_message(res)
+      end
+    end
+  end
+end

data/lib/onetime/cli.rb

@@ -0,0 +1,20 @@
+require_relative 'api'
+require_relative 'version'
+require_relative 'cli/parser'
+require_relative 'cli/runner'
+
+module Onetime
+  module CLI
+    def self.run(argv, stdin: $stdin, stdout: $stdout, stderr: $stderr)
+      parsed = Parser.parse(argv)
+      Runner.new(parsed, stdin: stdin, stdout: stdout, stderr: stderr).run
+    rescue Parser::Error, Runner::Error, RuntimeError => e
+      stderr.puts e.message
+      1
+    rescue StandardError => e
+      stdout.puts e.message
+      stdout.puts e.backtrace
+      1
+    end
+  end
+end

data/lib/onetime/version.rb

@@ -1,3 +1,3 @@
 module Onetime
-  VERSION = "0.7.0"
+  VERSION = "0.8.1"
 end

metadata

@@ -1,29 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: onetime-up
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.8.1
 platform: ruby
 authors:
 - Delano Mandelbaum
 - Saverio Miroddi
 bindir: bin
 cert_chain: []
-date: 2026-05-13 00:00:00.000000000 Z
+date: 2026-10-06 00:00:00.000000000 Z
 dependencies:
-- !ruby/object:Gem::Dependency
-  name: drydock
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.0.0
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.0.0
 - !ruby/object:Gem::Dependency
   name: httparty
   requirement: !ruby/object:Gem::Requirement
@@ -82,6 +68,9 @@ files:
 - README.md
 - bin/onetime
 - lib/onetime/api.rb
+- lib/onetime/cli.rb
+- lib/onetime/cli/parser.rb
+- lib/onetime/cli/runner.rb
 - lib/onetime/version.rb
 homepage: https://github.com/onetimesecret/onetime-ruby-up
 licenses:
@@ -102,7 +91,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.0.0
 requirements: []
-rubygems_version: 4.0.9
+rubygems_version: 4.0.20
 specification_version: 4
 summary: Command-line tool and library for onetimesecret.com API (API v2)
 test_files: []