@gorlitzer-labs/comb 0.1.2 → 0.1.4

package/README.md

@@ -55,7 +55,7 @@ matters. Everything else is recoverable; that is not. Back it up somewhere real.
 |---|---|
 | `comb init` | create the age key and the encrypted store |
 | `comb set <NAME> [--url <where>]` | take a value without echoing it, and store it |
-| `comb ls` | names, dates and notes — never values |
+| `comb ls` | names, age and notes — never values |
 | `comb run --with A,B -- <cmd>` | run a command with those secrets in its environment |
 | `comb rotate <NAME>` | tell you where to go, then take the new value |
 | `comb audit` | which secrets leaked into transcripts and shell history |
@@ -65,6 +65,40 @@ Values are never printed, never passed as command-line arguments, never logged.
 `comb get NAME --reveal` exists for when you genuinely need to read one, and
 refuses without the flag.
 
+## Tokens in MCP configs
+
+An HTTP MCP server with a bearer token tends to end up as a plaintext
+`"headers": {"Authorization": "Bearer …"}` in `~/.claude.json` — a file every
+agent session reads, and that gets pasted into conversations. Claude Code can
+fetch headers from a command instead (`headersHelper`), so the token can stay
+in comb:
+
+```bash
+comb set AGENT_COORD_REMOTE_TOKEN --url "http://my-box:8765 (agent-coord-remote)"
+```
+
+```sh
+#!/bin/sh
+# ~/.claude/bin/agent-coord-remote-headers.sh  (chmod +x)
+export PATH="$HOME/Library/pnpm:/opt/homebrew/bin:/usr/bin:/bin"   # Claude may not have your shell PATH
+exec comb run --with AGENT_COORD_REMOTE_TOKEN -- \
+  sh -c 'printf "{\"Authorization\":\"Bearer %s\"}" "$AGENT_COORD_REMOTE_TOKEN"'
+```
+
+```jsonc
+// ~/.claude.json → mcpServers
+"agent-coord-remote": {
+  "type": "http",
+  "url": "http://my-box:8765/mcp",
+  "headersHelper": "/Users/you/.claude/bin/agent-coord-remote-headers.sh"
+}
+```
+
+The helper prints the headers as JSON and Claude reads them at connect time. The
+token never sits in the config, and `comb run` keeps it out of argv. Moving a token
+that was already in plaintext is not the same as rotating it: run `comb audit`,
+and if it shows up as LEAKED, rotate it.
+
 ## `comb audit`
 
 This is the half no vault does, and the half that makes manual rotation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gorlitzer-labs/comb",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Keep your keys out of your conversations. A small vault front-end over SOPS + age.",
   "type": "module",
   "bin": {

package/src/realms.mjs

@@ -11,8 +11,9 @@
 // be rotated, because that realm can no longer decrypt anything, old copies
 // included (its key never changes what the current ciphertext is encrypted to).
 import { spawnSync } from "node:child_process";
-import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, rmSync } from "node:fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, rmSync, mkdtempSync } from "node:fs";
 import { join } from "node:path";
+import { tmpdir } from "node:os";
 import { combHome, storePath, keyPath } from "./backends/sops.mjs";
 
 export const recipientsDir = (home = combHome()) => join(home, "recipients");
@@ -54,11 +55,20 @@ export function rekeyStore(home = combHome()) {
   // Decrypt to JSON in memory, then re-encrypt to the new recipient set.
   const dec = spawnSync("sops", ["--decrypt", "--output-type", "json", storePath(home)], { encoding: "utf-8", env });
   if (dec.status !== 0) throw new Error(`could not decrypt to re-key: ${dec.stderr?.trim()}`);
-  const enc = spawnSync("sops",
-    ["--encrypt", "--age", recipients.join(","), "--input-type", "json", "--output-type", "yaml", "/dev/stdin"],
-    { input: dec.stdout, encoding: "utf-8", env });
-  if (enc.status !== 0) throw new Error(`could not re-encrypt: ${enc.stderr?.trim()}`);
-  writeFileSync(storePath(home), enc.stdout);
+  // Encrypt from a private temp FILE rather than `/dev/stdin`: /dev/stdin is not
+  // openable in non-interactive contexts (CI, some sandboxes), which broke re-key.
+  const dir = mkdtempSync(join(tmpdir(), "comb-rekey-"));
+  const plain = join(dir, "store.json");
+  try {
+    writeFileSync(plain, dec.stdout, { mode: 0o600 });
+    const enc = spawnSync("sops",
+      ["--encrypt", "--age", recipients.join(","), "--input-type", "json", "--output-type", "yaml", plain],
+      { encoding: "utf-8", env });
+    if (enc.status !== 0) throw new Error(`could not re-encrypt: ${enc.stderr?.trim()}`);
+    writeFileSync(storePath(home), enc.stdout);
+  } finally {
+    rmSync(dir, { recursive: true, force: true });   // wipe the plaintext temp
+  }
   return recipients.length;
 }