@secretstore/cli 0.7.1 → 0.8.0

package/dist/secretstore.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// secretstore 0.7.1: readable bundle of apps/cli for Node.js 20+. Source: https://github.com/CodingDiego/secret-store (apps/cli/src). AGPL-3.0-only.
+// secretstore 0.8.0: readable bundle of apps/cli for Node.js 20+. Source: https://github.com/CodingDiego/secret-store (apps/cli/src). AGPL-3.0-only.
 // apps/cli/src/runtime.ts
 import { spawn as nodeSpawn } from "node:child_process";
 import { createHash } from "node:crypto";
@@ -344,7 +344,7 @@ async function readTarget(ctx, args, need) {
   let production = true;
   try {
     const { environments } = firstJson(await ctx.client.call(TOOLS.listEnvironments, { project: target.project }));
-    production = environments.some((e) => e.kind === "production" && (e.slug === target.environment || e.id === target.environment));
+    production = environments.some((e) => e.kind === "production" && (e.slug === target.environment || e.id?.toLowerCase() === target.environment.toLowerCase()));
   } catch {}
   if (production)
     confirmPinned(ctx, target.source, `${target.project}/${target.environment}`, "Read");
@@ -353,7 +353,7 @@ async function readTarget(ctx, args, need) {
 // apps/cli/package.json
 var package_default = {
   name: "cli",
-  version: "0.7.1",
+  version: "0.8.0",
   private: true,
   license: "AGPL-3.0-only",
   type: "module",
@@ -367,9 +367,9 @@ var package_default = {
   devDependencies: {
     "@secret-store/auth": "*",
     "@secret-store/typescript-config": "*",
-    "@types/bun": "^1.4.3",
-    oxlint: "^1.88.0",
-    "oxlint-tsgolint": "^7.0.2004",
+    "@types/bun": "^1.4.4",
+    oxlint: "^1.89.0",
+    "oxlint-tsgolint": "^7.0.2005",
     typescript: "^7.0.2"
   }
 };
@@ -1123,12 +1123,13 @@ var doctor = async ({ io, flags, client }) => {
       results.push({ check: name, status: "fail", detail: error instanceof Error ? error.message : String(error), ...hint ? { hint } : {} });
     }
   };
-  const seen = { serverDate: null, reachable: false, credential: false };
+  const seen = { serverDate: null, serverAgeMs: 0, reachable: false, credential: false };
   await check("version", "", async () => ["ok", package_default.version]);
   await check("server", "Check the address (--url or SECRET_STORE_URL) and your network.", async () => {
     const meta = await discover(origin, async (url, init) => {
       const response = await fetch(url, init);
       seen.serverDate = response.headers.get("date");
+      seen.serverAgeMs = (Number(response.headers.get("age")) || 0) * 1000;
       return response;
     });
     seen.reachable = true;
@@ -1171,7 +1172,7 @@ var doctor = async ({ io, flags, client }) => {
     const server = Date.parse(seen.serverDate ?? "");
     if (Number.isNaN(server))
       return ["warn", `not checked: ${seen.reachable ? "the server's answer had no Date header" : "the server was not reached"}`];
-    const skew = io.now() - server;
+    const skew = io.now() - (server + seen.serverAgeMs);
     const detail = `${Math.round(skew / 1000)} s from the server`;
     return Math.abs(skew) > SKEW_WARN_MS ? ["warn", detail, "DPoP proofs need a clock within about 30 s of the server's: sync your system clock."] : ["ok", detail];
   });
@@ -1207,9 +1208,10 @@ function entries(env) {
 var lines = (rows) => rows.length ? rows.join(`
 `) + `
 ` : "";
+var dotenvValue = (value) => BARE.test(value) ? value : !/['\n\r]/.test(value) && !value.endsWith("\\") ? `'${value}'` : `"${value.replaceAll("\\", "\\\\").replaceAll('"', "\\\"").replaceAll(`
+`, "\\n").replaceAll("\r", "\\r").replaceAll("$", "\\$").replaceAll("`", "\\`")}"`;
 function toDotenv(env) {
-  return lines(entries(env).map(([key, value]) => BARE.test(value) ? `${key}=${value}` : `${key}="${value.replaceAll("\\", "\\\\").replaceAll('"', "\\\"").replaceAll(`
-`, "\\n").replaceAll("\r", "\\r")}"`));
+  return lines(entries(env).map(([key, value]) => `${key}=${dotenvValue(value)}`));
 }
 function toShell(env) {
   return lines(entries(env).map(([key, value]) => `export ${key}='${value.replaceAll("'", "'\\''")}'`));
@@ -1239,7 +1241,7 @@ function requireTty({ io, flags }) {
     throw new CliError('Refusing to print secrets to a pipe or file because an agent or a log can read it; pass --allow-non-tty if you mean it (or use "run" or "pull").', EXIT.usage);
   }
 }
-var OVERRIDES = /^(PATH|PATHEXT|COMSPEC|SYSTEMROOT|NODE_OPTIONS|NODE_PATH|SHELLOPTS|BASH_ENV|ENV|PERL5OPT|PERL5LIB|RUBYOPT|RUBYLIB|PROMPT_COMMAND|NODE_EXTRA_CA_CERTS|JAVA_TOOL_OPTIONS|_JAVA_OPTIONS|DOTNET_STARTUP_HOOKS|PYTHON.*|(LD|DYLD|BUN|GIT|SSH|NPM_CONFIG)_.*|.*_PRELOAD)$/i;
+var OVERRIDES = /^(PATH|PATHEXT|COMSPEC|SYSTEMROOT|NODE_OPTIONS|NODE_PATH|SHELLOPTS|BASH_ENV|ENV|PERL5OPT|PERL5LIB|RUBYOPT|RUBYLIB|PROMPT_COMMAND|NODE_EXTRA_CA_CERTS|NODE_TLS_REJECT_UNAUTHORIZED|AWS_CA_BUNDLE|GCONV_PATH|CLASSPATH|ZDOTDIR|GOPROXY|HOME|XDG_CONFIG_HOME|SSL_CERT_FILE|SSL_CERT_DIR|REQUESTS_CA_BUNDLE|CURL_CA_BUNDLE|HTTP_PROXY|HTTPS_PROXY|ALL_PROXY|NO_PROXY|JAVA_TOOL_OPTIONS|_JAVA_OPTIONS|DOTNET_STARTUP_HOOKS|LESSOPEN|LESSCLOSE|PAGER|MANPAGER|EDITOR|VISUAL|BROWSER|ERL_AFLAGS|ERL_FLAGS|ERL_ZFLAGS|ELIXIR_ERL_OPTIONS|JDK_JAVA_OPTIONS|RUSTC.*|PSMODULEPATH|PHPRC|PHP_INI_SCAN_DIR|GOTOOLCHAIN|GOFLAGS|PS4|PYTHON.*|(LD|DYLD|BUN|GIT|SSH|NPM_CONFIG|CARGO|YARN|PIP|LUA|GEM)_.*|.*_PRELOAD)$/i;
 var overridingKeys = (keys) => keys.filter((key) => OVERRIDES.test(key));
 function fetchEnvironment(ctx, project, environment) {
   return withAccess(ctx, { project, environment }, async () => {
@@ -1552,7 +1554,7 @@ var get = async (ctx) => {
 };
 
 // apps/cli/update-public-key.txt
-var update_public_key_default = "";
+var update_public_key_default = "TeXlgoyHl0XXy2h5JOw2o/DTRB97Dpw+TWtoyuXrGrQ=";
 
 // apps/cli/src/prompt.ts
 import { readSync } from "node:fs";

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.1",
+  "version": "0.8.0",
   "license": "AGPL-3.0-only",
   "homepage": "https://secretstore.sh/docs/cli",
   "publishConfig": {
@@ -20,10 +20,10 @@
     "dist/"
   ],
   "optionalDependencies": {
-    "@secretstore/cli-windows-x64": "0.7.1",
-    "@secretstore/cli-linux-x64": "0.7.1",
-    "@secretstore/cli-linux-arm64": "0.7.1",
-    "@secretstore/cli-darwin-x64": "0.7.1",
-    "@secretstore/cli-darwin-arm64": "0.7.1"
+    "@secretstore/cli-windows-x64": "0.8.0",
+    "@secretstore/cli-linux-x64": "0.8.0",
+    "@secretstore/cli-linux-arm64": "0.8.0",
+    "@secretstore/cli-darwin-x64": "0.8.0",
+    "@secretstore/cli-darwin-arm64": "0.8.0"
   }
 }