@palettelab/cli 0.3.31 → 0.3.32

package/README.md

@@ -429,6 +429,9 @@ For developer sandboxes where manual approval should not block OS testing, run t
 `pltt sandbox --env staging` is the same hosted preview flow as
 `pltt dev --sandbox --env staging`.
 
+`pltt preview --env staging` is also supported as a developer-friendly alias
+for the same hosted preview flow.
+
 `pltt dev --platform` runs the full Docker `platform-dev` image for internal platform parity testing. App developers should not need it. It pulls `ghcr.io/palette-lab/platform-dev:latest` and mounts your plugin at `/plugins/<your-id>`.
 
 Environment variables:
@@ -462,6 +465,7 @@ Commands:
 ```bash
 pltt secrets init
 pltt secrets set STRIPE_SECRET --env staging --value sk_live_...
+pltt secrets rotate STRIPE_SECRET --env staging --value sk_live_...
 pltt secrets list --env staging
 pltt publish --env staging --secrets-file plugin-secrets.env
 ```

package/lib/cli.js

@@ -22,6 +22,10 @@ const COMMANDS = {
     run: (args, ctx) => dev([...args, "--sandbox"], ctx),
     help: "Publish a no-Docker hosted sandbox preview",
   },
+  preview: {
+    run: (args, ctx) => dev([...args, "--sandbox"], ctx),
+    help: "Alias for sandbox preview publish",
+  },
   login: { run: login, help: "Save a Palette sandbox environment for publish/dev preview" },
   doctor: {
     run: doctor,
@@ -76,12 +80,14 @@ function printHelp() {
   console.log("\nSecrets:")
   console.log("  pltt secrets init")
   console.log("  pltt secrets set NAME --value <secret> --env staging")
+  console.log("  pltt secrets rotate NAME --value <secret> --env staging")
   console.log("  pltt secrets list --env staging")
   console.log("\nExamples:")
   console.log("  pltt init my-app --template database")
   console.log("  pltt login --env staging --url https://sandbox.pltt.ai --token <token>")
   console.log("  cd my-app && pltt dev")
   console.log("  pltt sandbox --env staging")
+  console.log("  pltt preview --env staging")
   console.log("  pltt dev --sandbox --env staging")
   console.log("  pltt package")
   console.log("  pltt publish --env staging")

package/lib/commands/secrets.js

@@ -50,15 +50,17 @@ function loadFileValues(cwd, file) {
 
 async function run(args, { cwd }) {
   const [subcommand, ...tail] = args
-  const manifest = loadManifest(cwd)
-  const declared = declaredSecrets(manifest)
 
   if (!subcommand || subcommand === "help" || subcommand === "--help") {
     console.log("Usage: pltt secrets <init|list|set|rotate> [NAME] [--env staging]")
-    console.log("       pltt secrets set NAME --value <secret> --env staging")
-    console.log("       pltt secrets set NAME --secrets-file plugin-secrets.env --env staging")
-    return
-  }
+     console.log("       pltt secrets set NAME --value <secret> --env staging")
+     console.log("       pltt secrets set NAME --secrets-file plugin-secrets.env --env staging")
+    console.log("       pltt secrets rotate NAME --value <secret> --env staging")
+     return
+   }
+
+  const manifest = loadManifest(cwd)
+  const declared = declaredSecrets(manifest)
 
   if (subcommand === "init") {
     const result = initLocalEnv(cwd, manifest)
@@ -69,7 +71,7 @@ async function run(args, { cwd }) {
   }
 
   const { own, rest } = parseOwnFlags(tail)
-  const { flags } = parseFlags(rest)
+  const { flags, rest: positional } = parseFlags(rest)
   let env
   try {
     env = resolveEnvironment({ cwd, flags })
@@ -96,7 +98,7 @@ async function run(args, { cwd }) {
     process.exit(1)
   }
 
-  const name = rest.find((item) => !item.startsWith("-"))
+  const name = positional[0]
   if (!name) {
     console.error("[pltt] usage: pltt secrets set NAME --value <secret> [--env staging]")
     process.exit(1)

package/lib/secrets.js

@@ -31,7 +31,15 @@ function readDotEnvFile(filePath) {
   return parseDotEnv(fs.readFileSync(filePath, "utf8"))
 }
 
-function writeDotEnvFile(filePath, values, manifest) {
+function formatDotEnvValue(value) {
+  if (value === undefined || value === null) return ""
+  const str = String(value)
+  if (!str) return ""
+  if (/[\s#"'\\]/.test(str)) return JSON.stringify(str)
+  return str
+}
+
+function writeDotEnvFile(filePath, values, manifest, secretValues = {}) {
   const lines = [
     "# Palette local developer secrets.",
     "# This file is for pltt dev only and must not be committed.",
@@ -43,7 +51,7 @@ function writeDotEnvFile(filePath, values, manifest) {
     lines.push(`# scope: ${scope || "dev"}`)
     if (meta.label) lines.push(`# label: ${meta.label}`)
     if (meta.help) lines.push(`# help: ${meta.help}`)
-    lines.push(`${name}=`)
+    lines.push(`${name}=${formatDotEnvValue(secretValues[name])}`)
     lines.push("")
   }
   if (Object.keys(values).length === 0 && manifest?.id) {
@@ -118,7 +126,8 @@ function initLocalEnv(cwd, manifest, { overwrite = false } = {}) {
   const declared = declaredSecrets(manifest)
   const localPath = path.join(cwd, LOCAL_ENV_PATH)
   const examplePath = path.join(cwd, EXAMPLE_ENV_PATH)
-  if (overwrite || !fs.existsSync(localPath)) writeDotEnvFile(localPath, declared, manifest)
+  const existingLocal = overwrite ? {} : readDotEnvFile(localPath)
+  writeDotEnvFile(localPath, declared, manifest, existingLocal)
   writeDotEnvFile(examplePath, declared, manifest)
   return { localPath, examplePath, declared }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palettelab/cli",
-  "version": "0.3.31",
+  "version": "0.3.32",
   "description": "Developer CLI for building Palette platform plugins — no platform source access required.",
   "bin": {
     "pltt": "bin/pltt.js"