@catladder/cli 0.0.0-next-a9386ffe → 0.0.0-next-1d12aca2

package/package.json

@@ -53,7 +53,7 @@
     }
   ],
   "license": "MIT",
-  "version": "0.0.0-next-a9386ffe",
+  "version": "0.0.0-next-1d12aca2",
   "scripts": {
     "lint": "eslint \"src/**/*.ts\"",
     "lint:fix": "eslint \"src/**/*.ts\" --fix",

package/src/adapters/terminal.ts

@@ -7,6 +7,7 @@ import type {
   PromptChoice,
 } from "../core/types";
 import { MissingInputError } from "../core/types";
+import type { SecretsMode } from "../vault";
 import { BaseContext } from "./baseContext";
 import { createVaultManagerGetter } from "./vaultManagerAccess";
 
@@ -82,6 +83,13 @@ export interface TerminalOptions {
   interactive?: boolean;
   /** If true, all confirm() calls return true without prompting (--yes flag) */
   yes?: boolean;
+  /**
+   * log to stderr instead of stdout (catenv: stdout may be evaluated
+   * by direnv or piped, so only data belongs there)
+   */
+  logToStderr?: boolean;
+  /** how to interact with the secrets vault (--vault-mode) */
+  vaultMode?: SecretsMode;
 }
 
 class TerminalContext<
@@ -187,9 +195,15 @@ export function createTerminalContext<TInputs extends InputsSchema>(
 export function createTerminalIO(options: TerminalOptions = {}): IO {
   const io: IO = {
     interactive: options.interactive ?? process.stdin.isTTY === true,
-    getVaultManager: createVaultManagerGetter(() => io),
+    getVaultManager: createVaultManagerGetter(() => io, {
+      mode: options.vaultMode,
+    }),
     log(message: string): void {
-      console.log(message);
+      if (options.logToStderr) {
+        console.error(message);
+      } else {
+        console.log(message);
+      }
     },
     async confirm(message: string): Promise<boolean> {
       if (options.yes) return true;

package/src/apps/catenv/catenv.ts

@@ -10,11 +10,17 @@ import {
 } from "@catladder/pipeline";
 import type { SecretsMode } from "../../vault";
 import { createNonInteractiveIO } from "../../adapters/nonInteractive";
+import { createTerminalIO } from "../../adapters/terminal";
 
 type Options = {
   verbose?: boolean;
   printVariables?: boolean;
   vaultMode?: SecretsMode;
+  /**
+   * whether prompting is allowed (token setup, vault unlock). Callers
+   * pass the TTY detection result; direnv/turbo/CI runs come out false.
+   */
+  interactive?: boolean;
 };
 export default async (choice?: Choice, options?: Options) => {
   const config = await getProjectConfig();
@@ -22,7 +28,15 @@ export default async (choice?: Choice, options?: Options) => {
     return;
   }
 
-  const io = createNonInteractiveIO({ vaultMode: options?.vaultMode });
+  const io = options?.interactive
+    ? // logs still go to stderr: even on a TTY, stdout is reserved for
+      // data (--print-variables) and may be piped
+      createTerminalIO({
+        interactive: true,
+        logToStderr: true,
+        vaultMode: options?.vaultMode,
+      })
+    : createNonInteractiveIO({ vaultMode: options?.vaultMode });
   const context = { ...createCatenvContext(config), io };
   if (options?.verbose) {
     printVerboseBanner();

package/src/catenv.ts

@@ -27,6 +27,10 @@ program
       .choices(["auto", "no-prompt", "offline", "refresh"])
       .default("auto"),
   )
+  .option(
+    "--non-interactive",
+    "never prompt (token setup, vault unlock) — assumed automatically when not attached to a terminal (direnv, turbo, CI)",
+  )
   .action(
     (
       envComponent: string | undefined,
@@ -34,12 +38,20 @@ program
         verbose?: boolean;
         printVariables?: boolean;
         vaultMode: SecretsMode;
+        nonInteractive?: boolean;
       },
     ) => {
+      // interactive iff a human is attached: direnv captures stdout,
+      // turbo/CI pipe it — all of those auto-degrade to non-interactive
+      const interactive =
+        !opts.nonInteractive &&
+        process.stdin.isTTY === true &&
+        process.stdout.isTTY === true;
       catenv(envComponent ? parseChoice(envComponent) : null, {
         verbose: opts.verbose ?? false,
         printVariables: opts.printVariables ?? false,
         vaultMode: opts.vaultMode,
+        interactive,
       }).then(() => {
         // we have to exit manually, because we have some file watches
         process.exit();

package/src/utils/gitlab.ts

@@ -45,6 +45,13 @@ export const getGitlabToken = async (io: IO | null) => {
       );
       process.exit(1);
     }
+    if (!io.interactive) {
+      // don't start the setup wizard in a context that cannot prompt
+      // (direnv, turbo, CI) — fail with the remedy instead
+      throw new Error(
+        "gitlab token missing — run `catenv` (or any `catladder` command) once in a terminal to set it up",
+      );
+    }
     await setupGitlabToken(io);
   }
   return getPreference(TOKEN_KEY);

package/src/vault/VaultManager.ts

@@ -63,7 +63,10 @@ export class VaultManager {
         return new BitwardenVault(
           this.config,
           vaultConfig,
-          this.mode === "auto" || this.mode === "refresh",
+          // unlock prompts need a mode that allows them AND an IO that
+          // can actually prompt (catenv under direnv/turbo/CI cannot)
+          (this.mode === "auto" || this.mode === "refresh") &&
+            (this.io?.interactive ?? true),
         );
     }
   }