@envsave/cli 1.0.42 → 1.0.43

package/dist/cli.js

@@ -836,7 +836,7 @@ async function checkLicense() {
 // package.json
 var package_default = {
   name: "@envsave/cli",
-  version: "1.0.42",
+  version: "1.0.43",
   description: "Local secret vault for LLM-safe environments — encrypted secrets that agents can't bulk-discover",
   type: "module",
   main: "dist/index.js",
@@ -933,7 +933,7 @@ Usage:
   envsave backup                        Upload encrypted vault to server
   envsave restore                       Download vault backup from server
   envsave sync                          Sync vault with server (pull if cloud newer)
-  envsave vercel <KEY|es_key>...        Push secrets to Vercel (accepts names or opaque keys)
+  envsave vercel <KEY|es_key>...        Push secrets to Vercel under both clean name + opaque id
   envsave help                          Show this help
 
 Security model:
@@ -1568,22 +1568,30 @@ Pushing ${secrets.length} secret(s) to Vercel (${environments.join(", ")})...
 `);
       let success = 0;
       let failed = 0;
+      const pushVar = (varName, value, env) => {
+        spawnSync("vercel", ["env", "rm", varName, env, "-y"], {
+          stdio: "ignore"
+        });
+        const proc = spawnSync("vercel", ["env", "add", varName, env], {
+          input: Buffer.from(value),
+          stdio: ["pipe", "pipe", "pipe"]
+        });
+        if (proc.status === 0)
+          return true;
+        const errMsg = proc.stderr.toString().trim();
+        console.error(`  \x1B[31m✗\x1B[0m ${varName} [${env}]: ${errMsg}`);
+        return false;
+      };
       for (const secret of secrets) {
+        const varNames = secret.name !== secret.opaque ? [secret.opaque, secret.name] : [secret.opaque];
         for (const env of environments) {
-          spawnSync("vercel", ["env", "rm", secret.opaque, env, "-y"], {
-            stdio: "ignore"
-          });
-          const proc = spawnSync("vercel", ["env", "add", secret.opaque, env], {
-            input: Buffer.from(secret.value),
-            stdio: ["pipe", "pipe", "pipe"]
-          });
-          if (proc.status === 0) {
-            console.log(`  \x1B[32m✓\x1B[0m ${secret.name} → ${secret.opaque} [${env}]`);
-            success++;
-          } else {
-            const errMsg = proc.stderr.toString().trim();
-            console.error(`  \x1B[31m✗\x1B[0m ${secret.name} → ${secret.opaque} [${env}]: ${errMsg}`);
-            failed++;
+          for (const varName of varNames) {
+            if (pushVar(varName, secret.value, env)) {
+              console.log(`  \x1B[32m✓\x1B[0m ${varName} [${env}]`);
+              success++;
+            } else {
+              failed++;
+            }
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envsave/cli",
-  "version": "1.0.42",
+  "version": "1.0.43",
   "description": "Local secret vault for LLM-safe environments — encrypted secrets that agents can't bulk-discover",
   "type": "module",
   "main": "dist/index.js",