@seekrit/cli 0.23.0 → 0.23.2

package/dist/index.js

@@ -1976,7 +1976,7 @@ function isServiceToken(value) {
 }
 //#endregion
 //#region package.json
-var version = "0.23.0";
+var version = "0.23.2";
 //#endregion
 //#region ../../packages/api-client/src/index.ts
 var SeekritApiError = class extends Error {
@@ -4582,16 +4582,34 @@ program.command("run").description("run a command with decrypted secrets injecte
 		for (const name of Object.keys(values)) if (process.env[name] !== void 0 && process.env[name] !== values[name]) provenance[name] = "env";
 		printExplain(provenance);
 	}
+	const posix = process.platform !== "win32";
 	const child = spawn(cmd, args, {
 		stdio: "inherit",
 		env: {
 			...values,
 			...process.env
-		}
+		},
+		detached: posix
 	});
+	const signals = [
+		"SIGINT",
+		"SIGTERM",
+		"SIGHUP",
+		"SIGQUIT"
+	];
+	const forward = (signal) => {
+		if (child.exitCode !== null || child.signalCode !== null) return;
+		if (posix && child.pid) try {
+			process.kill(-child.pid, signal);
+			return;
+		} catch {}
+		child.kill(signal);
+	};
+	for (const signal of signals) process.on(signal, forward);
 	child.on("exit", (code, signal) => {
+		for (const s of signals) process.off(s, forward);
 		if (signal) process.kill(process.pid, signal);
-		process.exit(code ?? 1);
+		else process.exit(code ?? 1);
 	});
 	child.on("error", (err) => fail(`failed to start ${cmd}: ${err.message}`));
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seekrit/cli",
-  "version": "0.23.0",
+  "version": "0.23.2",
   "description": "End-to-end encrypted secrets manager CLI — inject decrypted secrets into any command.",
   "type": "module",
   "publishConfig": {