@secretstore/cli 0.10.0 → 0.13.0

package/dist/secretstore.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-// secretstore 0.10.0: readable bundle of apps/cli for Node.js 20+. Proprietary: see LICENSE and https://secretstore.sh/terms-and-conditions.
-// apps/cli/src/runtime.ts
+// secretstore 0.13.0: readable bundle of apps/cli for Node.js 20+. Proprietary: see LICENSE and https://secretstore.sh/terms-and-conditions.
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/runtime.ts
 import { spawn as nodeSpawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { open } from "node:fs/promises";
@@ -94,7 +94,7 @@ async function fileWriter(path) {
   return { write: (chunk) => handle.write(chunk), end: () => handle.close() };
 }
 
-// apps/cli/src/browser.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/browser.ts
 async function openInBrowser(url) {
   if (!/^https?:\/\//.test(url))
     throw new Error("not an http(s) URL");
@@ -104,11 +104,11 @@ async function openInBrowser(url) {
     throw new Error(`${argv[0]} exited with ${code}`);
 }
 
-// apps/cli/src/config.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/config.ts
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
-// apps/cli/src/errors.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/errors.ts
 var EXIT = { error: 1, usage: 2, auth: 3, notFound: 4, denied: 4, approval: 5, cannotRun: 127 };
 
 class CliError extends Error {
@@ -128,12 +128,12 @@ function classify(message) {
   return EXIT.error;
 }
 
-// apps/cli/src/is-record.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/is-record.ts
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-// apps/cli/src/mcp.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/mcp.ts
 var TOOLS = {
   whoami: "whoami",
   listProjects: "list_projects",
@@ -260,13 +260,42 @@ async function allProjects(client) {
   return rows;
 }
 
-// apps/cli/src/config.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/config.ts
 var DEFAULT_URL = "https://secretstore.sh";
 var PIN_FILE = ".secret-store.json";
 var LOOPBACK = new Set(["localhost", "127.0.0.1", "[::1]"]);
-function resolveUrl(flag, env) {
+function resolveUrl(flag, env, cwd) {
+  if (!flag && env.SECRET_STORE_URL && cwd && process.versions.bun) {
+    const file = dotenvNaming("SECRET_STORE_URL", env.SECRET_STORE_URL, cwd);
+    if (file)
+      throw new CliError(`SECRET_STORE_URL is set in ${file}, which this command does not trust (a cloned repository could redirect your credentials). Remove it from the file, or pass --url.`, EXIT.usage);
+  }
   return secureOrigin(flag || env.SECRET_STORE_URL || DEFAULT_URL);
 }
+var DOTENV_FILES = [".env", ".env.local", ".env.development", ".env.development.local", ".env.production", ".env.production.local"];
+function dotenvNaming(name, value, cwd) {
+  for (const file of DOTENV_FILES) {
+    const path = join(cwd, file);
+    if (!existsSync(path))
+      continue;
+    let text;
+    try {
+      text = readFileSync(path, "utf8");
+    } catch {
+      continue;
+    }
+    for (const line of text.split(/\r?\n/)) {
+      const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/.exec(line);
+      if (!match || match[1] !== name)
+        continue;
+      const raw = match[2] ?? "";
+      const unquoted = /^(["'`])(.*)\1\s*(?:#.*)?$/.exec(raw)?.[2] ?? raw.replace(/\s+#.*$/, "");
+      if (unquoted === value)
+        return file;
+    }
+  }
+  return;
+}
 function secureOrigin(raw) {
   let url;
   try {
@@ -350,10 +379,10 @@ async function readTarget(ctx, args, need) {
     confirmPinned(ctx, target.source, `${target.project}/${target.environment}`, "Read");
   return target;
 }
-// apps/cli/package.json
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/package.json
 var package_default = {
   name: "cli",
-  version: "0.10.0",
+  version: "0.13.0",
   private: true,
   license: "SEE LICENSE IN LICENSE",
   type: "module",
@@ -375,7 +404,7 @@ var package_default = {
   }
 };
 
-// apps/cli/src/args.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/args.ts
 var VALUE_FLAGS = ["url", "token", "out", "format", "kind", "scopes", "keys", "reason", "duration", "status"];
 var SWITCHES = {
   json: "json",
@@ -429,7 +458,7 @@ function parseArgs(argv) {
   return { command, args, rest, flags };
 }
 
-// apps/cli/src/help.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/help.ts
 var USAGE = {
   login: "secretstore login [--url <origin>] [--write] [--no-browser]",
   logout: "secretstore logout",
@@ -498,7 +527,7 @@ read it from stdin.
 Exit codes: 0 ok, 1 error, 2 usage, 3 auth, 4 not found (or sign-in denied), 5 needs approval (protected or sealed item), 127 run could not start the command
 `;
 
-// apps/cli/src/commands/access.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/access.ts
 var POLL_MS = 2000;
 var DURATIONS = ["once", "15m", "1h", "8h"];
 var DEFAULT_REASON = "Requested from the secretstore CLI";
@@ -600,13 +629,13 @@ Run again with --request-access to ask for it and wait for the answer.`, error.c
   }
 }
 
-// packages/auth/src/first-party.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/packages/auth/src/first-party.ts
 var CLI_CLIENT_PATH = "/.well-known/oauth-client/cli.json";
 function cliClientId(origin) {
   return origin + CLI_CLIENT_PATH;
 }
 
-// apps/cli/src/dpop.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/dpop.ts
 var ES256 = { name: "ECDSA", namedCurve: "P-256" };
 var base64url = (data) => Buffer.from(typeof data === "string" ? data : new Uint8Array(data)).toString("base64url");
 var sha2562 = async (text) => new Uint8Array(await crypto.subtle.digest("SHA-256", Buffer.from(text)));
@@ -631,7 +660,7 @@ async function dpopProof(key, request) {
   return `${input}.${base64url(signature)}`;
 }
 
-// apps/cli/src/oauth.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/oauth.ts
 class OAuthError extends CliError {
   oauthCode;
   constructor(oauthCode, message, code) {
@@ -759,7 +788,7 @@ async function revokeToken(login, fetcher = fetch) {
     throw refusal(response.status, await response.text());
 }
 
-// apps/cli/src/callback.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/callback.ts
 var PAGE = '<!doctype html><meta charset="utf-8"><title>Secret Store CLI</title><p>You can close this tab and return to the terminal.</p>';
 function refusal2(error, description) {
   if (error === "access_denied")
@@ -804,7 +833,7 @@ async function listenForCallback(state, timeoutMs) {
   return { port: server.port, code, close: () => stop(true) };
 }
 
-// apps/cli/src/keystore.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/keystore.ts
 import { mkdirSync, readFileSync as readFileSync2, renameSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname as dirname2, join as join2 } from "node:path";
@@ -932,7 +961,7 @@ function openKeystore(env, warn, secrets2 = secrets ?? null) {
   };
 }
 
-// apps/cli/src/commands/auth.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/auth.ts
 var LOGIN_TIMEOUT_MS = 5 * 60000;
 var READ_SCOPES = ["projects:read", "secrets:read"];
 var reason = (error) => error instanceof Error ? error.message : String(error);
@@ -940,7 +969,7 @@ var login = async ({ args, flags, io }) => {
   if (args.length > 0)
     throw usage("login");
   const store = openKeystore(io.env, io.stderr);
-  const name = resolveUrl(flags.url, io.env);
+  const name = resolveUrl(flags.url, io.env, io.cwd);
   const meta = await discover(name);
   const { verifier, challenge } = await pkce();
   const state = randomState();
@@ -1006,7 +1035,7 @@ var logout = async ({ args, flags, io }) => {
   if (args.length > 0)
     throw usage("logout");
   const store = openKeystore(io.env, io.stderr);
-  const name = resolveUrl(flags.url, io.env);
+  const name = resolveUrl(flags.url, io.env, io.cwd);
   const stored = await store.get(name);
   if (!stored) {
     io.stdout(`Not signed in to ${name}.
@@ -1051,7 +1080,7 @@ var keystoreSelftest = async ({ io }) => {
 `);
 };
 
-// apps/cli/src/commands/completion.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/completion.ts
 var byCommand = () => Object.entries(USAGE).map(([name, line]) => [name, [...new Set([...line.match(/--[a-z][a-z-]*/g) ?? [], ...GLOBAL_FLAGS])]]);
 var bash = (commands) => `# bash completion for secretstore. In ~/.bashrc: source <(secretstore completion bash)
 _secretstore() {
@@ -1110,11 +1139,11 @@ var completion = async ({ args, io }) => {
   io.stdout(script(byCommand()));
 };
 
-// apps/cli/src/commands/doctor.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/doctor.ts
 var SKEW_WARN_MS = 30000;
 var LOGIN_HINT = 'Run "secretstore login", or export SECRET_STORE_TOKEN for a personal token.';
 var doctor = async ({ io, flags, client }) => {
-  const origin = resolveUrl(flags.url, io.env);
+  const origin = resolveUrl(flags.url, io.env, io.cwd);
   const results = [];
   const check = async (name, hint, test) => {
     try {
@@ -1187,13 +1216,13 @@ var doctor = async ({ io, flags, client }) => {
   return results.some((r) => r.status === "fail") ? EXIT.error : 0;
 };
 
-// apps/cli/src/commands/env.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/env.ts
 import { randomUUID } from "node:crypto";
 import { chmodSync, lstatSync, renameSync as renameSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { constants } from "node:os";
 import { resolve } from "node:path";
 
-// apps/cli/src/format.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/format.ts
 var KEY = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var BARE = /^[A-Za-z0-9_./:@+=,-]+$/;
 function assertKeys(env) {
@@ -1230,7 +1259,7 @@ function table(header, rows) {
 }
 var red = (text, on) => on ? `\x1B[31m${text}\x1B[0m` : text;
 
-// apps/cli/src/commands/env.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/env.ts
 var signalNumber = (signal) => {
   const signals = constants.signals;
   return (typeof signal === "string" ? signals[signal] : undefined) ?? 0;
@@ -1242,7 +1271,7 @@ function requireTty({ io, flags }) {
     throw new CliError('Refusing to print secrets to a pipe or file because an agent or a log can read it; pass --allow-non-tty if you mean it (or use "run" or "pull").', EXIT.usage);
   }
 }
-var OVERRIDES = /^(PATH|PATHEXT|COMSPEC|SYSTEMROOT|NODE_OPTIONS|NODE_PATH|SHELLOPTS|BASH_ENV|ENV|PERL5OPT|PERL5LIB|RUBYOPT|RUBYLIB|PROMPT_COMMAND|NODE_EXTRA_CA_CERTS|NODE_TLS_REJECT_UNAUTHORIZED|AWS_CA_BUNDLE|GCONV_PATH|CLASSPATH|ZDOTDIR|GOPROXY|HOME|XDG_CONFIG_HOME|SSL_CERT_FILE|SSL_CERT_DIR|REQUESTS_CA_BUNDLE|CURL_CA_BUNDLE|HTTP_PROXY|HTTPS_PROXY|ALL_PROXY|NO_PROXY|JAVA_TOOL_OPTIONS|_JAVA_OPTIONS|DOTNET_STARTUP_HOOKS|LESSOPEN|LESSCLOSE|PAGER|MANPAGER|EDITOR|VISUAL|BROWSER|ERL_AFLAGS|ERL_FLAGS|ERL_ZFLAGS|ELIXIR_ERL_OPTIONS|JDK_JAVA_OPTIONS|RUSTC.*|PSMODULEPATH|PHPRC|PHP_INI_SCAN_DIR|GOTOOLCHAIN|GOFLAGS|PS4|PYTHON.*|(LD|DYLD|BUN|GIT|SSH|NPM_CONFIG|CARGO|YARN|PIP|LUA|GEM)_.*|.*_PRELOAD)$/i;
+var OVERRIDES = /^(PATH|PATHEXT|COMSPEC|SYSTEMROOT|NODE_OPTIONS|NODE_PATH|SHELLOPTS|BASH_ENV|ENV|PERL5OPT|PERL5LIB|RUBYOPT|RUBYLIB|PROMPT_COMMAND|NODE_EXTRA_CA_CERTS|NODE_TLS_REJECT_UNAUTHORIZED|AWS_CA_BUNDLE|GCONV_PATH|CLASSPATH|ZDOTDIR|GOPROXY|HOME|XDG_CONFIG_HOME|SSL_CERT_FILE|SSL_CERT_DIR|REQUESTS_CA_BUNDLE|CURL_CA_BUNDLE|HTTP_PROXY|HTTPS_PROXY|ALL_PROXY|NO_PROXY|JAVA_TOOL_OPTIONS|_JAVA_OPTIONS|DOTNET_STARTUP_HOOKS|LESSOPEN|LESSCLOSE|PAGER|MANPAGER|EDITOR|VISUAL|BROWSER|ERL_AFLAGS|ERL_FLAGS|ERL_ZFLAGS|ELIXIR_ERL_OPTIONS|JDK_JAVA_OPTIONS|RUSTC.*|COREPACK_.*|UV_.*|CORECLR_.*|COR_.*|MAKEFLAGS|(MAVEN|GRADLE|SBT|ANT)_OPTS|R_PROFILE_USER|R_ENVIRON_USER|R_LIBS.*|DOCKER_HOST|PSMODULEPATH|PHPRC|PHP_INI_SCAN_DIR|GOTOOLCHAIN|GOFLAGS|PS4|PYTHON.*|(LD|DYLD|BUN|GIT|SSH|NPM_CONFIG|CARGO|YARN|PIP|LUA|GEM)_.*|.*_PRELOAD)$/i;
 var overridingKeys = (keys) => keys.filter((key) => OVERRIDES.test(key));
 function fetchEnvironment(ctx, project, environment) {
   return withAccess(ctx, { project, environment }, async () => {
@@ -1325,7 +1354,7 @@ var run = async (ctx) => {
   return child.exitCode ?? 128 + signalNumber(child.signalCode);
 };
 
-// apps/cli/src/commands/init.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/init.ts
 import { writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join3 } from "node:path";
 var init = async ({ args, client, flags, io }) => {
@@ -1373,11 +1402,11 @@ If you use "secretstore pull", add .env to your .gitignore (this command never e
 `);
 };
 
-// apps/cli/src/commands/push.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/push.ts
 import { readFileSync as readFileSync3 } from "node:fs";
 import { resolve as resolve2 } from "node:path";
 
-// apps/cli/src/dotenv.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/dotenv.ts
 var CHUNK_BYTES = 200 * 1024;
 var ENTRY = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/;
 function closingQuote(text, from, q) {
@@ -1437,7 +1466,7 @@ function chunkDotenv(text, max = CHUNK_BYTES) {
   return chunks;
 }
 
-// apps/cli/src/commands/push.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/push.ts
 var NOT_DONE = [
   ["protected", "protected"],
   ["sealed", "sealed in the browser"],
@@ -1510,7 +1539,7 @@ var push = async (ctx) => {
   return done === 0 && total.protected.length + total.sealed.length > 0 ? EXIT.approval : 0;
 };
 
-// apps/cli/src/commands/read.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/read.ts
 var pretty = (value) => JSON.stringify(value, null, 2) + `
 `;
 var whoami = async ({ args, client, io }) => {
@@ -1554,10 +1583,10 @@ var get = async (ctx) => {
 `);
 };
 
-// apps/cli/update-public-key.txt
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/update-public-key.txt
 var update_public_key_default = "TeXlgoyHl0XXy2h5JOw2o/DTRB97Dpw+TWtoyuXrGrQ=";
 
-// apps/cli/src/prompt.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/prompt.ts
 import { readSync } from "node:fs";
 function confirmOnStderr(question) {
   process.stderr.write(`${question} [y/N] `);
@@ -1572,11 +1601,11 @@ function confirmOnStderr(question) {
   return /^y(es)?$/i.test(line.trim());
 }
 
-// apps/cli/src/update.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/update.ts
 import { chmodSync as chmodSync2, readFileSync as readFileSync4, realpathSync, renameSync as renameSync3, rmSync as rmSync2 } from "node:fs";
 import { basename, dirname as dirname3, join as join4 } from "node:path";
 
-// apps/web/src/lib/desktop-version.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/web/src/lib/desktop-version.ts
 var VERSION = /^(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
 function isVersion(value) {
   return VERSION.test(value);
@@ -1617,14 +1646,14 @@ function compareVersions(a, b) {
   return 0;
 }
 
-// apps/cli/src/update-verify.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/update-verify.ts
 var toHex = (bytes) => Buffer.from(bytes).toString("hex");
 async function verifyDigest(publicKey, digest, signature) {
   const key = await crypto.subtle.importKey("raw", Buffer.from(publicKey, "base64"), "Ed25519", false, ["verify"]);
   return crypto.subtle.verify("Ed25519", key, Buffer.from(signature, "base64"), digest);
 }
 
-// apps/cli/src/update.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/update.ts
 var FEED_TIMEOUT_MS = 30000;
 var CHECK_TIMEOUT_MS = 5000;
 var DOWNLOAD_TIMEOUT_MS = 10 * 60000;
@@ -1756,7 +1785,7 @@ async function runUpdate({ io, flags, args }, deps) {
     let error;
     let origin = "";
     try {
-      origin = resolveUrl(flags.url, io.env);
+      origin = resolveUrl(flags.url, io.env, io.cwd);
       available = (await fetchRelease(origin, deps.fetcher, CHECK_TIMEOUT_MS))?.version ?? null;
       updateAvailable = available !== null && compareVersions(available, deps.version) > 0;
     } catch (e) {
@@ -1776,7 +1805,7 @@ Package-managed installation: update with bun add --global @secretstore/cli@${ta
     throw new CliError("update replaces the installed binary; this is a development run", EXIT.usage);
   if (!flags.check && !deps.publicKey)
     throw new CliError("this build has no update key; build with apps/cli/update-public-key.txt set");
-  const origin = resolveUrl(flags.url, io.env);
+  const origin = resolveUrl(flags.url, io.env, io.cwd);
   const say = (text) => {
     if (!flags.json)
       io.stdout(`${text}
@@ -1850,7 +1879,7 @@ ${release.notes}
   return 0;
 }
 
-// apps/cli/src/commands/update.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/update.ts
 var update = (ctx) => runUpdate(ctx, {
   version: package_default.version,
   execPath: installedPath(),
@@ -1863,7 +1892,7 @@ var update = (ctx) => runUpdate(ctx, {
   confirm: confirmOnStderr
 });
 
-// apps/cli/src/commands/write.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/commands/write.ts
 var set = async ({ args, client, flags, io }) => {
   const { project, environment, rest } = targetFor({ io, flags }, args, { environment: true, need: 1, write: true });
   const [key, given] = rest;
@@ -1893,7 +1922,7 @@ var del = async ({ args, client, flags, io }) => {
 `);
 };
 
-// apps/cli/src/session.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/session.ts
 var REFRESH_MARGIN_MS = 60000;
 var signIn = (reason) => new CliError(`${reason} Run "secretstore login" to sign in.`, EXIT.auth);
 async function refreshLogin(store, name, stale, now, fetcher = fetch) {
@@ -1937,7 +1966,7 @@ function loginSession(store, name, login, now, fetcher) {
   };
 }
 async function openSession(io, flags) {
-  const origin = resolveUrl(flags.url, io.env);
+  const origin = resolveUrl(flags.url, io.env, io.cwd);
   const given = resolveToken(flags.token, io.env);
   if (given)
     return { via: given.via, endpoint: mcpEndpoint(origin), headers: async () => ({ authorization: `Bearer ${given.token}` }) };
@@ -1948,7 +1977,7 @@ async function openSession(io, flags) {
   return loginSession(store, origin, login, io.now);
 }
 
-// packages/telemetry/src/index.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/packages/telemetry/src/index.ts
 var TIMEOUT_MS3 = 2000;
 var QUIET_MS = 60000;
 var MESSAGE_MAX = 200;
@@ -2050,17 +2079,17 @@ async function reportError(error, context, options = {}) {
   }
 }
 
-// apps/cli/src/telemetry.ts
-var CLI_SENTRY_DSN = "https://fb7c83374c44e1644c2074204a9f22e5@o4511685264932864.ingest.us.sentry.io/4512325682987008";
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/telemetry.ts
+var CLI_SENTRY_DSN = undefined;
 async function reportCliError(error, env, version, fetcher, dsn = CLI_SENTRY_DSN) {
-  if (env.SECRETSTORE_TELEMETRY === "0" || !dsn)
+  if (env.SECRETSTORE_TELEMETRY === "0" || env.DO_NOT_TRACK === "1" || !dsn)
     return;
   if (error instanceof Error && "code" in error && typeof error.code === "string" && !error.code.startsWith("ERR_"))
     return;
   await reportError(error, { area: "cli" }, { env: { SENTRY_DSN: dsn }, release: version, platform: "cli", environment: "production", ...fetcher ? { fetcher } : {} });
 }
 
-// apps/cli/src/main.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/main.ts
 var COMMANDS = {
   login,
   logout,
@@ -2130,7 +2159,7 @@ async function main(argv, io) {
   }
 }
 
-// apps/cli/src/index.ts
+// ../../../../C--Users-valen-Escritorio-secret-store/5a6b7732-87a9-4858-8123-ca0d205eaba6/scratchpad/rel-0.13.0/apps/cli/src/index.ts
 removeStale(process.execPath);
 process.exitCode = await main(process.argv.slice(2), {
   env: process.env,

package/package.json

@@ -1,7 +1,11 @@
 {
-  "version": "0.10.0",
+  "version": "0.13.0",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://secretstore.sh/docs/cli",
+  "author": "Diego Palacios",
+  "bugs": {
+    "url": "https://secretstore.sh/contact"
+  },
   "publishConfig": {
     "access": "public",
     "provenance": false
@@ -20,10 +24,10 @@
     "dist/"
   ],
   "optionalDependencies": {
-    "@secretstore/cli-windows-x64": "0.10.0",
-    "@secretstore/cli-linux-x64": "0.10.0",
-    "@secretstore/cli-linux-arm64": "0.10.0",
-    "@secretstore/cli-darwin-x64": "0.10.0",
-    "@secretstore/cli-darwin-arm64": "0.10.0"
+    "@secretstore/cli-windows-x64": "0.13.0",
+    "@secretstore/cli-linux-x64": "0.13.0",
+    "@secretstore/cli-linux-arm64": "0.13.0",
+    "@secretstore/cli-darwin-x64": "0.13.0",
+    "@secretstore/cli-darwin-arm64": "0.13.0"
   }
 }