@keynv/cli 0.1.0-rc.17 → 0.1.0-rc.18

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
 import { createHash, randomBytes } from 'crypto';
-import { readFileSync, writeFileSync, unlinkSync, existsSync, statSync, readdirSync, mkdirSync, rmSync, lstatSync } from 'fs';
+import { readFileSync, unlinkSync, existsSync, statSync, writeFileSync, readdirSync, mkdirSync, rmSync, lstatSync } from 'fs';
 import { hostname, platform, homedir } from 'os';
 import * as nodePath from 'path';
 import { relative, join, isAbsolute, resolve, dirname, basename } from 'path';
@@ -1057,7 +1057,7 @@ var require_lib = __commonJS({
 var VERSION, AGENT;
 var init_version = __esm({
   "src/version.ts"() {
-    VERSION = "0.1.0-rc.17" ;
+    VERSION = "0.1.0-rc.18" ;
     AGENT = `keynv-cli/${VERSION}`;
   }
 });
@@ -5778,6 +5778,13 @@ var init_http = __esm({
        Check the server is running: curl ${serverUrl}/v1/health`
               );
             }
+          } else {
+            this.creds = null;
+            throw clientError(
+              401,
+              "auth.session_expired",
+              "Session expired. Run `keynv` to reconnect."
+            );
           }
         }
         if (res.status === 204) return void 0;
@@ -46718,6 +46725,28 @@ function toAliasKey2(name) {
   if (KEY_RE3.test(normalised)) return normalised;
   return normalised.replace(/[^a-zA-Z0-9_-]/g, "").slice(0, 64) || "key";
 }
+function escapeRegExp2(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function writeKeynvEnvMappings(path, projectName, envName, secrets) {
+  const existing = existsSync(path) ? readFileSync(path, "utf8") : "";
+  const lines = [];
+  for (const s of secrets) {
+    const hasEntry = new RegExp(`^${escapeRegExp2(s.name)}=`, "m").test(existing);
+    if (!hasEntry) {
+      lines.push(`# ${s.name}`, `${s.name}=@${projectName}.${envName}.${s.aliasKey}`);
+    }
+  }
+  if (lines.length === 0) return 0;
+  const prefix = existing.trimEnd();
+  const block = `# Generated by keynv setup
+${lines.join("\n")}
+`;
+  writeFileSync(path, prefix ? `${prefix}
+
+${block}` : block);
+  return lines.length / 2;
+}
 var InitCommand = class extends Command {
   static paths = [["init"]];
   static usage = Command.Usage({
@@ -46874,7 +46903,22 @@ any prompts.
       return 0;
     }
     const secretsWithKeys = secrets.map((s) => ({ ...s, aliasKey: toAliasKey2(s.name) }));
-    return this.uploadSecrets(client, projectId2, projectName, envName, secretsWithKeys);
+    const result = await this.uploadSecrets(
+      client,
+      projectId2,
+      projectName,
+      envName,
+      secretsWithKeys
+    );
+    if (result !== 0) return result;
+    const keynvEnvPath = join(process.cwd(), ".keynv.env");
+    const written = writeKeynvEnvMappings(keynvEnvPath, projectName, envName, secretsWithKeys);
+    this.context.stdout.write(
+      written > 0 ? `keynv: wrote ${keynvEnvPath}
+` : `keynv: ${keynvEnvPath} already up to date
+`
+    );
+    return 0;
   }
   /**
    * Auto-scan mode (--yes without explicit --env-file). Finds .env files
@@ -46948,14 +46992,13 @@ any prompts.
       secretsWithKeys
     );
     if (result !== 0) return result;
-    const aliasLines = secretsWithKeys.map((s) => `# ${s.name}
-${s.name}=@${projectName}.${envName}.${s.aliasKey}`).join("\n");
     const keynvEnvPath = join(root.path, ".keynv.env");
-    writeFileSync(keynvEnvPath, `# Auto-generated by keynv init --yes
-${aliasLines}
-`);
-    this.context.stdout.write(`keynv: wrote ${keynvEnvPath}
-`);
+    const written = writeKeynvEnvMappings(keynvEnvPath, projectName, envName, secretsWithKeys);
+    this.context.stdout.write(
+      written > 0 ? `keynv: wrote ${keynvEnvPath}
+` : `keynv: ${keynvEnvPath} already up to date
+`
+    );
     try {
       const outcome = writeAiContext(root.path);
       if (outcome === "created") this.context.stdout.write("keynv: wrote AGENTS.md\n");
@@ -48537,28 +48580,27 @@ cli.register(RedactStreamCommand);
 cli.register(TestCommand);
 cli.register(ServerInitCommand);
 var argv = process.argv.slice(2);
-if (argv.length === 0) {
-  const { runMenu: runMenu2 } = await Promise.resolve().then(() => (init_menu(), menu_exports));
-  const { isInteractive: isInteractive2 } = await Promise.resolve().then(() => (init_tty(), tty_exports));
-  if (isInteractive2()) {
-    runMenu2().then((code) => process.exit(code)).catch((err) => {
-      process.stderr.write(`${fmtError(err)}
-`);
-      process.exit(1);
-    });
-  } else {
+async function main() {
+  if (argv.length === 0) {
+    const { runMenu: runMenu2 } = await Promise.resolve().then(() => (init_menu(), menu_exports));
+    const { isInteractive: isInteractive2 } = await Promise.resolve().then(() => (init_tty(), tty_exports));
+    if (isInteractive2()) {
+      return runMenu2();
+    }
     process.stdout.write(
       "keynv \u2014 AI-safe secrets management.\nRun `keynv --help` for the full command list, or run `keynv` in an interactive\nterminal to open the menu.\n"
     );
-    process.exit(0);
+    return 0;
   }
-} else {
-  cli.run(argv).then((code) => process.exit(code ?? 0)).catch((err) => {
-    process.stderr.write(`${fmtError(err)}
-`);
-    process.exit(1);
-  });
+  return cli.run(argv);
 }
+main().then((code) => {
+  process.exitCode = code ?? 0;
+}).catch((err) => {
+  process.stderr.write(`${fmtError(err)}
+`);
+  process.exitCode = 1;
+});
 /*! Bundled license information:
 
 long/umd/index.js: