@foir/cli 0.72.0 → 0.72.1

package/dist/cli.js

@@ -13824,6 +13824,17 @@ function projectPinProblem(block, resolved) {
   }
   return null;
 }
+async function signingSecretForEnv(read) {
+  try {
+    const { secret } = await read();
+    return { secret };
+  } catch (error) {
+    if (error instanceof ConnectError9 && error.code === Code9.PermissionDenied) {
+      return { skipped: error.rawMessage };
+    }
+    throw error;
+  }
+}
 function syncEnvVar(envPath, key, value, options) {
   const envContent = existsSync7(envPath) ? readFileSync3(envPath, "utf-8") : "";
   const pattern = new RegExp(`^${key}=(.*)$`, "m");
@@ -14593,7 +14604,16 @@ function registerPushCommand(program, globalOpts) {
             );
           }
         }
-        const { secret: signingSecret } = await client.operations.getSigningSecret();
+        const signing = await signingSecretForEnv(() => client.operations.getSigningSecret());
+        const signingSecret = "secret" in signing ? signing.secret : "";
+        if ("skipped" in signing) {
+          console.log(
+            chalk10.yellow(`\u26A0 Signing secret: not synced to ${envPath}. This credential may not read it (${signing.skipped}).`)
+          );
+          console.log(
+            chalk10.dim("    The push applied; only the .env sync was skipped, and FOIR_WEBHOOK_SECRET and FOIR_SIGNING_SECRET were left as they are.") + chalk10.dim(" To sync them, run push with a credential that holds opsecrets:read.")
+          );
+        }
         if (signingSecret) {
           const syncAndLog = (key, label) => {
             const result = syncEnvVar(envPath, key, signingSecret, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foir/cli",
-  "version": "0.72.0",
+  "version": "0.72.1",
   "description": "Universal platform CLI for Foir platform",
   "type": "module",
   "publishConfig": {