@hienlh/ppm 0.7.12 → 0.7.14

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [0.7.14] - 2026-03-21
+
+### Fixed
+- **Explorer .env access**: removed hardcoded `.env` block from file tree, directory browser, and file read/write — `.env` files are now visible and editable like any other file
+
+## [0.7.13] - 2026-03-20
+
+### Fixed
+- **Account decrypt crash on different machine**: `getWithTokens` now catches decrypt errors (mismatched `account.key`) and returns `null` instead of crashing the API
+
 ## [0.7.12] - 2026-03-20
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.7.12",
+  "version": "0.7.14",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/services/account.service.ts

@@ -66,7 +66,13 @@ class AccountService {
 
   getWithTokens(id: string): AccountWithTokens | null {
     const row = getAccountById(id);
-    return row ? this.toAccountWithTokens(row) : null;
+    if (!row) return null;
+    try {
+      return this.toAccountWithTokens(row);
+    } catch (e) {
+      console.error(`[accounts] Failed to decrypt tokens for ${row.label ?? id}:`, (e as Error).message);
+      return null;
+    }
   }
 
   add(params: {

package/src/services/file.service.ts

@@ -13,7 +13,7 @@ import { resolve, relative, basename, dirname, join, normalize } from "node:path
 import type { FileNode } from "../types/project.ts";
 
 /** Directories/files excluded from tree listing */
-const EXCLUDED_NAMES = new Set([".git", "node_modules", ".env"]);
+const EXCLUDED_NAMES = new Set([".git", "node_modules"]);
 
 /** Max buffer size for binary detection (first 8KB) */
 const BINARY_CHECK_BYTES = 8192;
@@ -64,8 +64,6 @@ class FileService {
 
     for (const entry of entries) {
       if (this.isExcluded(entry.name)) continue;
-      // Skip hidden files at root level (like .env.local etc.)
-      if (entry.name.startsWith(".env")) continue;
 
       const fullPath = join(dirPath, entry.name);
       const relPath = relative(rootPath, fullPath);
@@ -219,7 +217,7 @@ class FileService {
     this.renameFile(projectPath, source, destination);
   }
 
-  /** Block access to sensitive paths (.git/, .env*) */
+  /** Block access to sensitive paths (.git/) */
   private blockSensitive(filePath: string): void {
     const normalized = normalize(filePath);
     const parts = normalized.split("/");
@@ -228,11 +226,6 @@ class FileService {
         throw new SecurityError(`Access denied: ${filePath}`);
       }
     }
-    // Block .env files
-    const file = basename(normalized);
-    if (file.startsWith(".env")) {
-      throw new SecurityError(`Access denied: ${filePath}`);
-    }
   }
 }
 

package/src/services/fs-browse.service.ts

@@ -88,7 +88,6 @@ export function browse(
 
   for (const entry of raw) {
     if (!options?.showHidden && entry.name.startsWith(".")) continue;
-    if (entry.name.startsWith(".env")) continue; // always hide .env*
 
     const fullPath = resolve(resolved, entry.name);
     try {