@envseal/cli 0.1.1 → 0.1.2

package/dist/bin.js

@@ -13,7 +13,7 @@ import { doctor } from './commands/doctor.js';
 import { revoke } from './commands/revoke.js';
 import { mcp } from './commands/mcp.js';
 import { init } from './commands/init.js';
-const VERSION = '0.1.1';
+const VERSION = '0.1.2';
 async function main() {
     const argv = process.argv.slice(2);
     if (argv.length === 0 || argv[0] === '--help' || argv[0] === '-h') {

package/dist/commands/ensure.js

@@ -1,8 +1,8 @@
+import { SepError } from '@envseal/protocol';
 import { emit, fail } from '../output.js';
 import { EXIT } from '../exit-codes.js';
 import { loadManifest, projectPaths } from '@envseal/core';
-import { SepError } from '@envseal/protocol';
-import { createBroker, outcomeForKey } from '../cli-utils.js';
+import { createBroker, hasInteractiveSurface, outcomeForKey } from '../cli-utils.js';
 import { finish } from '../exit.js';
 export async function ensure(root, json, check = false) {
     try {
@@ -80,6 +80,18 @@ export async function ensure(root, json, check = false) {
             }
             return;
         }
+        // F2: without --check, ensure asks the user for values. When there is no
+        // interactive surface and no double-gated test prompter configured, refuse
+        // now instead of selecting the loopback surface and waiting on a browser
+        // page nobody can see (the W4 hang). Mirrors run.ts's fail-closed stance.
+        if (!hasInteractiveSurface() && !(process.env.ENVSEAL_TEST_PROMPTER_VALUE !== undefined ||
+            process.env.ENVSEAL_TEST_PROMPTER_OUTCOME !== undefined)) {
+            throw new SepError({
+                code: 'SEP_NO_INTERACTIVE_SURFACE',
+                userMessage: 'envseal ensure needs to collect missing keys, but there is no interactive surface here. ' +
+                    'Use --check to gate without prompting, provide values out of band, or run interactively.',
+            });
+        }
         // Request all missing keys at once
         const ticket = await broker.request({
             keys: missingRequired,

package/dist/commands/init.js

@@ -1,4 +1,5 @@
-import { projectPaths, loadManifest, declareEntries } from '@envseal/core';
+import { projectPaths, loadManifest, declareEntries, scanManifestEntry } from '@envseal/core';
+import { SepError } from '@envseal/protocol';
 import { emit, fail } from '../output.js';
 import { detectHost } from '../host.js';
 import { scanForEnvKeys, entryForKey } from '../scan.js';
@@ -31,6 +32,26 @@ export async function init(root, json, hostOverride) {
         }
         const paths = projectPaths(root);
         const discovered = scanForEnvKeys(root);
+        // F1: a manifest that already exists was authored by someone else (an
+        // editor, another tool, a malicious repo). Declaring into it without
+        // validating it first would launder hostile entries — e.g. a
+        // secret-shaped format.example — through envseal's own write path and
+        // commit them as blessed. Re-run the same schema+guard validation the
+        // declare path uses over every entry already on disk.
+        const existing = loadManifest(paths);
+        if (existing !== null) {
+            for (const [index, entry] of existing.entries.entries()) {
+                const finding = scanManifestEntry(entry, `entries[${index}]`);
+                if (finding !== null) {
+                    throw new SepError({
+                        code: 'SEP_VALUE_IN_REQUEST',
+                        details: { field: finding.path },
+                        userMessage: `Refusing to init: the existing ${finding.path} entry looks like it contains a real credential (${finding.label}). ` +
+                            'Manifest fields are committed to git and must describe keys, never contain values.',
+                    });
+                }
+            }
+        }
         const entries = discovered.map(entryForKey);
         // declareEntries creates the manifest when absent and edits it surgically
         // when present, so re-running init on an existing project is safe and

package/dist/commands/run.js

@@ -2,6 +2,7 @@ import { createInterface } from 'node:readline';
 import { SepError } from '@envseal/protocol';
 import { emit, fail } from '../output.js';
 import { createBroker } from '../cli-utils.js';
+import { loadManifest, projectPaths } from '@envseal/core';
 import { finish } from '../exit.js';
 /**
  * Ask the user to approve running a command with secrets injected.
@@ -55,6 +56,15 @@ export async function run(root, command, json, assumeYes = false) {
         const broker = await createBroker(root, {
             onConfirm: assumeYes ? async () => true : confirmInteractive,
         });
+        // F4: a missing manifest while values still resolve is a suspicious state
+        // (deleted by hand or tooling). The run proceeds — the .env is user-owned —
+        // but never silently: the condition goes to stderr in both output modes.
+        if (loadManifest(projectPaths(root)) === null) {
+            const warning = 'envseal: no env.schema.jsonc found for this project. ' +
+                'Values are still resolved from .env/keychain because those are user-owned, ' +
+                "but nothing is declared here anymore. Run `envseal init` to re-create the manifest.";
+            process.stderr.write(`\n${warning}\n\n`);
+        }
         const status = await broker.describe();
         const presentKeys = status.entries.filter((e) => e.present).map((e) => e.key);
         const result = await broker.use({ keys: presentKeys, command });

package/dist/commands/set.js

@@ -1,8 +1,9 @@
 import { emit, fail } from '../output.js';
 import { EXIT, exitCodeForOutcome } from '../exit-codes.js';
-import { createBroker, outcomeForKey } from '../cli-utils.js';
+import { createBroker, hasInteractiveSurface, outcomeForKey } from '../cli-utils.js';
 import { finish } from '../exit.js';
 import { loadManifest, projectPaths, saveManifest } from '@envseal/core';
+import { SepError } from '@envseal/protocol';
 /**
  * Undo a declaration THIS invocation added, after nothing was stored under it.
  *
@@ -37,6 +38,27 @@ export async function set(root, key, json) {
     let declaredHere = false;
     try {
         const broker = await createBroker(root);
+        // F2: same fail-closed rule as ensure/run. Without this, a non-TTY caller
+        // (agent shell, scheduler) selected the loopback surface and waited on a
+        // browser page nobody could see.
+        //
+        // The guard fires BEFORE any declare, so a refused run also leaves no
+        // phantom declaration — but only for keys that are NOT already declared
+        // (those keep the pre-existing rollback semantics below). CI=1 keeps the
+        // original path: declare-then-request so the refusal is announced with the
+        // "declared X but nothing was stored" mutation message, which the contract
+        // test pins.
+        const surfaceUsable = hasInteractiveSurface() ||
+            process.env.CI !== undefined ||
+            process.env.ENVSEAL_TEST_PROMPTER_VALUE !== undefined ||
+            process.env.ENVSEAL_TEST_PROMPTER_OUTCOME !== undefined;
+        if (!surfaceUsable) {
+            throw new SepError({
+                code: 'SEP_NO_INTERACTIVE_SURFACE',
+                userMessage: 'envseal set needs to collect a value, but there is no interactive surface here. ' +
+                    'Run it in an interactive shell, or use the documented ENVSEAL_TEST_MODE hooks in tests.',
+            });
+        }
         // Declare the key only if it is not already in the manifest.
         //
         // `declareEntries` replaces an entry wholesale rather than merging, so

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envseal/cli",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
@@ -23,13 +23,13 @@
     "provenance": true
   },
   "dependencies": {
-    "@envseal/protocol": "0.1.1",
-    "@envseal/core": "0.1.1",
-    "@envseal/prompters": "0.1.1",
-    "@envseal/registry": "0.1.1",
-    "@envseal/mcp-server": "0.1.1",
-    "@envseal/http-server": "0.1.1",
-    "@envseal/detector": "0.1.1"
+    "@envseal/prompters": "0.1.2",
+    "@envseal/registry": "0.1.2",
+    "@envseal/detector": "0.1.2",
+    "@envseal/mcp-server": "0.1.2",
+    "@envseal/protocol": "0.1.2",
+    "@envseal/core": "0.1.2",
+    "@envseal/http-server": "0.1.2"
   },
   "repository": {
     "type": "git",