@lifestreamdynamics/vault-cli 1.1.0 → 1.3.0

package/dist/utils/output.js

@@ -108,12 +108,15 @@ export class Output {
     list(data, options) {
         if (data.length === 0) {
             if (this.flags.output === 'json') {
-                // empty json array: no output
+                process.stdout.write('[]\n');
                 return;
             }
             if (options?.emptyMessage && !this.flags.quiet) {
                 this.status(options.emptyMessage);
             }
+            else if (!this.flags.quiet && !options?.emptyMessage) {
+                process.stdout.write('No results found.\n');
+            }
             return;
         }
         switch (this.flags.output) {

package/dist/utils/prompt.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Shared interactive prompt utilities.
+ *
+ * These helpers write prompts to stderr so they do not corrupt stdout piping,
+ * and they disable terminal echo so passwords are never visible on screen or
+ * in scroll-back buffers.
+ */
+/**
+ * Prompt for a password from stdin (non-echoing).
+ *
+ * @param prompt - Label written to stderr before the user types (default: "Password: ")
+ * @returns The entered password, or null if stdin is not a TTY (non-interactive).
+ */
+export declare function promptPassword(prompt?: string): Promise<string | null>;
+/**
+ * Read a password from stdin in non-TTY / CI mode (i.e. piped input).
+ *
+ * Reads the first line of stdin and trims whitespace. Callers should
+ * gate this behind a `--password-stdin` flag so the intent is explicit.
+ *
+ * @returns The password string, or null if stdin is empty / already ended.
+ */
+export declare function readPasswordFromStdin(): Promise<string | null>;
+/**
+ * Prompt for an MFA code from stdin (6 digits, non-echoing).
+ *
+ * @returns The entered code, or null if stdin is not a TTY.
+ */
+export declare function promptMfaCode(): Promise<string | null>;

package/dist/utils/prompt.js

@@ -0,0 +1,146 @@
+/**
+ * Shared interactive prompt utilities.
+ *
+ * These helpers write prompts to stderr so they do not corrupt stdout piping,
+ * and they disable terminal echo so passwords are never visible on screen or
+ * in scroll-back buffers.
+ */
+/**
+ * Prompt for a password from stdin (non-echoing).
+ *
+ * @param prompt - Label written to stderr before the user types (default: "Password: ")
+ * @returns The entered password, or null if stdin is not a TTY (non-interactive).
+ */
+export async function promptPassword(prompt = 'Password: ') {
+    if (!process.stdin.isTTY) {
+        return null;
+    }
+    const readline = await import('node:readline');
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stderr,
+            terminal: true,
+        });
+        process.stderr.write(prompt);
+        process.stdin.setRawMode?.(true);
+        let password = '';
+        const onData = (chunk) => {
+            const char = chunk.toString('utf-8');
+            if (char === '\n' || char === '\r' || char === '\u0004') {
+                process.stderr.write('\n');
+                process.stdin.setRawMode?.(false);
+                process.stdin.removeListener('data', onData);
+                rl.close();
+                resolve(password);
+            }
+            else if (char === '\u0003') {
+                // Ctrl+C
+                process.stderr.write('\n');
+                process.stdin.setRawMode?.(false);
+                process.stdin.removeListener('data', onData);
+                rl.close();
+                resolve(null);
+            }
+            else if (char === '\u007F' || char === '\b') {
+                // Backspace
+                if (password.length > 0) {
+                    password = password.slice(0, -1);
+                }
+            }
+            else {
+                password += char;
+            }
+        };
+        process.stdin.on('data', onData);
+        process.stdin.resume();
+    });
+}
+/**
+ * Read a password from stdin in non-TTY / CI mode (i.e. piped input).
+ *
+ * Reads the first line of stdin and trims whitespace. Callers should
+ * gate this behind a `--password-stdin` flag so the intent is explicit.
+ *
+ * @returns The password string, or null if stdin is empty / already ended.
+ */
+export async function readPasswordFromStdin() {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        const onData = (chunk) => {
+            data += chunk.toString('utf-8');
+            // Stop after the first newline — we only want one line.
+            if (data.includes('\n')) {
+                cleanup();
+                resolve(data.split('\n')[0].trim() || null);
+            }
+        };
+        const onEnd = () => {
+            cleanup();
+            resolve(data.trim() || null);
+        };
+        const onError = (err) => {
+            cleanup();
+            reject(err);
+        };
+        const cleanup = () => {
+            process.stdin.removeListener('data', onData);
+            process.stdin.removeListener('end', onEnd);
+            process.stdin.removeListener('error', onError);
+        };
+        process.stdin.on('data', onData);
+        process.stdin.once('end', onEnd);
+        process.stdin.once('error', onError);
+        process.stdin.resume();
+    });
+}
+/**
+ * Prompt for an MFA code from stdin (6 digits, non-echoing).
+ *
+ * @returns The entered code, or null if stdin is not a TTY.
+ */
+export async function promptMfaCode() {
+    if (!process.stdin.isTTY) {
+        return null;
+    }
+    const readline = await import('node:readline');
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stderr,
+            terminal: true,
+        });
+        process.stderr.write('MFA code: ');
+        process.stdin.setRawMode?.(true);
+        let code = '';
+        const onData = (chunk) => {
+            const char = chunk.toString('utf-8');
+            if (char === '\n' || char === '\r' || char === '\u0004') {
+                process.stderr.write('\n');
+                process.stdin.setRawMode?.(false);
+                process.stdin.removeListener('data', onData);
+                rl.close();
+                resolve(code);
+            }
+            else if (char === '\u0003') {
+                // Ctrl+C
+                process.stderr.write('\n');
+                process.stdin.setRawMode?.(false);
+                process.stdin.removeListener('data', onData);
+                rl.close();
+                resolve(null);
+            }
+            else if (char === '\u007F' || char === '\b') {
+                // Backspace
+                if (code.length > 0) {
+                    code = code.slice(0, -1);
+                }
+            }
+            else {
+                code += char;
+            }
+        };
+        process.stdin.on('data', onData);
+        process.stdin.resume();
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifestreamdynamics/vault-cli",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Command-line interface for Lifestream Vault",
   "engines": {
     "node": ">=20"
@@ -44,7 +44,7 @@
     "prepublishOnly": "npm run build && npm test"
   },
   "dependencies": {
-    "@lifestreamdynamics/vault-sdk": "^1.1.0",
+    "@lifestreamdynamics/vault-sdk": "^2.1.0",
     "chalk": "^5.4.0",
     "chokidar": "^4.0.3",
     "commander": "^13.0.0",