@redaktyn/cli 1.1.0 → 1.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redaktyn/cli",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Redaktyn CLI: bulk-enrol secrets from a .env or any vault (--project aware), local fingerprints, git/directory digest scans. Digests are computed on your machine; secret values never leave it.",
   "type": "module",
   "bin": {

package/redaktyn-fingerprint.mjs

@@ -32,7 +32,7 @@
 import { createHmac, pbkdf2 as _pbkdf2, createHash, hkdfSync } from "node:crypto";
 import { promisify } from "node:util";
 import * as readline from "node:readline";
-import { readFileSync, existsSync } from "node:fs";
+import { readFileSync, existsSync, realpathSync } from "node:fs";
 import { pathToFileURL } from "node:url";
 
 const pbkdf2 = promisify(_pbkdf2);
@@ -803,8 +803,15 @@ async function main() {
   Without this check, importing anything from here would run the whole CLI —
   argv policy, wizard and all — as a side effect of asking for a function.
 */
+// argv[1] is the path the shell used. Under npx, `npm i -g` or any package-manager
+// bin it is a SYMLINK, so comparing it to import.meta.url unresolved is false and the
+// command exits silently without running (found 2026-10-09, first published 1.1.0).
+// Resolve it first.
+function realArgv1() {
+  try { return realpathSync(process.argv[1]); } catch { return process.argv[1]; }
+}
 const invokedDirectly =
-  !!process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+  !!process.argv[1] && import.meta.url === pathToFileURL(realArgv1()).href;
 
 if (invokedDirectly) {
   main().catch((err) => {

package/redaktyn-import.mjs

@@ -36,7 +36,7 @@
  * Requires Node.js >= 18.
  */
 
-import { readFileSync } from "node:fs";
+import { readFileSync, realpathSync } from "node:fs";
 import { basename } from "node:path";
 import * as readline from "node:readline";
 import { pathToFileURL } from "node:url";
@@ -1635,8 +1635,15 @@ function projectAfterImport({ existing, plan, byKey }) {
   return out;
 }
 
+// argv[1] is the path the shell used. Under npx, `npm i -g` or any package-manager
+// bin it is a SYMLINK, so comparing it to import.meta.url unresolved is false and the
+// command exits silently without running (found 2026-10-09, first published 1.1.0).
+// Resolve it first.
+function realArgv1() {
+  try { return realpathSync(process.argv[1]); } catch { return process.argv[1]; }
+}
 const invokedDirectly =
-  !!process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+  !!process.argv[1] && import.meta.url === pathToFileURL(realArgv1()).href;
 
 if (invokedDirectly) {
   main()