@seekrit/cli 1.1.0 → 1.2.1

package/README.md

@@ -30,11 +30,12 @@ seekrit login --token skt_…
 #    leaves this machine). Only needed once per account.
 seekrit keys setup
 
-# 3. Link the current directory to an org / app / environment. Writes
-#    seekrit.json, which is safe to commit.
-seekrit init --org acme --app storefront --env production
+# 3. Link the current directory to an org / app. Writes seekrit.json, which is
+#    safe to commit. The environment comes from the token at runtime.
+seekrit init --org acme --app storefront
 
-# 4. Work with secrets
+# 4. Work with secrets. A service token names its own environment; on a user
+#    session, add --env production.
 seekrit secrets set DATABASE_URL 'postgres://…'
 seekrit secrets list
 seekrit run -- ./server            # runs ./server with secrets in its env
@@ -55,7 +56,7 @@ Run `seekrit <command> --help` for full flags. The
 | `login [--token \| --dev-user] [--api-url]` | Save credentials to the global config. |
 | `whoami` | Show the authenticated identity and org membership. |
 | `keys setup` | Generate your keypair and protect it with a passphrase. |
-| `init --org --app --env` | Link this directory to an environment (`seekrit.json`). |
+| `init --org --app` | Link this directory to an org/app (`seekrit.json`). The environment comes from the token. |
 | `org create` / `app create` / `env create` | Create organizations, apps, and environments. |
 | `secrets list` | List secret names (never values). |
 | `secrets get <name> [--raw]` | Decrypt and print one secret value (`--raw` skips `${OTHER_SECRET}` expansion). |

package/dist/index.js

@@ -1907,6 +1907,8 @@ const AUDIT_ACTIONS = [
 	"org.mfa_policy_changed",
 	"org.exported",
 	"user.keys_updated",
+	"user.passkey_enrolled",
+	"user.passkey_removed",
 	"user.notification_prefs_updated",
 	"app.created",
 	"app.updated",
@@ -2151,6 +2153,16 @@ z.object({
 	*/
 	encryptedPrivateKey: z.string().min(1)
 });
+z.object({
+	/** Base64url WebAuthn credential id — what `allowCredentials` is built from. */
+	credentialId: z.string().min(1).max(512),
+	/** Human label for the device, e.g. "MacBook Touch ID". Display only. */
+	label: z.string().min(1).max(64),
+	/** Base64url PRF evaluation input for this credential; not a secret. */
+	prfInput: z.string().min(1).max(256),
+	/** The private key wrapped to this passkey's PRF output. */
+	encryptedPrivateKey: z.string().min(1).max(8192).refine((v) => v.startsWith("pk2."), { message: "expected a pk2. passkey wrap" })
+});
 const grantEnvironmentKeySchema = z.object({
 	principalType: principalTypeSchema,
 	principalId: z.string().min(1),
@@ -2483,7 +2495,8 @@ const SYNC_PROVIDER_KINDS = [
 	"github-actions",
 	"gcp-secret-manager",
 	"langgraph-platform",
-	"azure-key-vault"
+	"azure-key-vault",
+	"huggingface-spaces"
 ];
 z.enum(SYNC_PROVIDER_KINDS);
 /**
@@ -2872,6 +2885,21 @@ const azureKeyVaultConnectionConfigSchema = z.object({
 	/** Which Azure cloud the tenant and its vaults live in. */
 	cloud: z.enum(AZURE_CLOUDS).default("public")
 });
+/**
+* Hugging Face account scope — empty, as Render's and Fly's are.
+*
+* Neither half of "which account, which thing" needs stating. A Hub user access
+* token belongs to one user and carries their write access to every Space they
+* or their organizations own; a Space is addressed by `owner/name`, which is
+* globally unique. So the token plus the destination is the whole address.
+*
+* There is deliberately no `baseUrl` twin of the GitHub Enterprise Server
+* field. `HF_ENDPOINT` exists in the Python client for Hub *mirrors*, which
+* serve repository content — not the settings API this connector writes, and
+* not something a mirror is expected to accept a write on. Adding the field
+* would invite pointing a connection at a host that silently swallows secrets.
+*/
+const huggingfaceSpacesConnectionConfigSchema = z.object({ provider: z.literal("huggingface-spaces") });
 const syncConnectionConfigSchema = z.discriminatedUnion("provider", [
 	vercelConnectionConfigSchema,
 	cloudflareWorkersConnectionConfigSchema,
@@ -2890,7 +2918,8 @@ const syncConnectionConfigSchema = z.discriminatedUnion("provider", [
 	githubActionsConnectionConfigSchema,
 	gcpSecretManagerConnectionConfigSchema,
 	langgraphPlatformConnectionConfigSchema,
-	azureKeyVaultConnectionConfigSchema
+	azureKeyVaultConnectionConfigSchema,
+	huggingfaceSpacesConnectionConfigSchema
 ]);
 /** Vercel's three deployment targets. A binding writes to one or more. */
 const VERCEL_TARGETS = [
@@ -3681,6 +3710,40 @@ const azureKeyVaultDestinationSchema = z.object({
 	/** What to do with a name Key Vault cannot store — see {@link AZURE_KEY_VAULT_NAME_MODES}. */
 	nameMode: z.enum(AZURE_KEY_VAULT_NAME_MODES).default("dash")
 });
+/**
+* The Space whose secrets a binding owns, addressed the way the Hub addresses
+* every repository: `owner/name`, where `owner` is a user or an organization.
+*
+* A Space has **one** secret set, shared by every replica — there is no
+* per-target split to state, the way Vercel and Pages have one. The Hub's
+* convention is that staging and production are separate Spaces
+* (`acme/demo`, `acme/demo-staging`), so pointing at an environment means
+* naming that Space, exactly as a Fly environment means naming its own app.
+*
+* Validated by shape because the two habitual slips both fail *late*: pasting
+* the browser URL (`https://huggingface.co/spaces/acme/demo`) or the bare name
+* without its owner. Either one is a 404 from the Hub inside an alarm with
+* nobody watching, and a 404 says nothing about which half was wrong. The
+* leading character is held to alphanumeric, which is also what rejects the
+* `.` and `..` that no repository may be called.
+*/
+const huggingfaceRepoIdSchema = z.string().trim().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,95}\/[A-Za-z0-9][A-Za-z0-9._-]{0,95}$/, "must be a Space ID as owner/name, e.g. acme/support-demo — not a URL");
+/**
+* One Hugging Face **Space**, whose secrets arrive in the app's container as
+* environment variables.
+*
+* Only secrets. A Space also has *variables*, and they are not a second lane
+* seekrit could use: the Hub calls them "non-sensitive configuration values",
+* they are "publicly accessible and viewable", and they are copied into every
+* Space duplicated from this one. Writing a seekrit secret there would publish
+* it, so this connector has no variables mode — a binding that wants one is
+* asking for the wrong thing.
+*/
+const huggingfaceSpacesDestinationSchema = z.object({
+	provider: z.literal("huggingface-spaces"),
+	/** Space ID as `owner/name`, e.g. `acme/support-demo`. */
+	repoId: huggingfaceRepoIdSchema
+});
 const syncDestinationSchema = z.discriminatedUnion("provider", [
 	vercelDestinationSchema,
 	cloudflareWorkersDestinationSchema,
@@ -3699,7 +3762,8 @@ const syncDestinationSchema = z.discriminatedUnion("provider", [
 	githubActionsDestinationSchema,
 	gcpSecretManagerDestinationSchema,
 	langgraphPlatformDestinationSchema,
-	azureKeyVaultDestinationSchema
+	azureKeyVaultDestinationSchema,
+	huggingfaceSpacesDestinationSchema
 ]);
 /**
 * How seekrit secret names become destination key names. Applied in order:
@@ -4987,7 +5051,7 @@ async function createAgentTaskToken() {
 }
 //#endregion
 //#region package.json
-var version = "1.1.0";
+var version = "1.2.1";
 //#endregion
 //#region ../../packages/api-client/src/index.ts
 var SeekritApiError = class extends Error {
@@ -5060,6 +5124,22 @@ var SeekritClient = class {
 	revokeCliSession(sessionId) {
 		return this.request("DELETE", `/v1/me/cli-sessions/${sessionId}`);
 	}
+	/**
+	* The passkeys enrolled to unlock this user's keyring, each with the `pk2.`
+	* blob its PRF output decrypts. One call is everything the unlock ceremony
+	* needs; the blobs are opaque without the authenticator.
+	*/
+	listMyPasskeys() {
+		return this.request("GET", "/v1/me/passkeys");
+	}
+	/** File a private key already wrapped, client-side, to a passkey's PRF output. */
+	enrollMyPasskey(input) {
+		return this.request("POST", "/v1/me/passkeys", input);
+	}
+	/** Stop a passkey unlocking the keyring. The key itself is untouched. */
+	deleteMyPasskey(passkeyId) {
+		return this.request("DELETE", `/v1/me/passkeys/${passkeyId}`);
+	}
 	/** What a pending login request is asking for — for the approval screen. */
 	getCliLoginRequest(code) {
 		return this.request("GET", `/v1/cli-login/${encodeURIComponent(code)}`);
@@ -6066,11 +6146,46 @@ async function resolveOrg(ctx, orgSlug) {
 	fail("specify --org (or run `seekrit init`)");
 }
 /**
+* The environment a service token is bound to.
+*
+* The binding lives on the token row, not in the token string — `GET
+* /v1/resolve` is where the API publishes it, and `seekrit whoami` reads it the
+* same way. One round trip, and it also resolves `--branch` against the bound
+* environment, which is the only environment a token may name a branch of.
+*/
+async function boundEnvTarget(ctx, opts) {
+	let scope;
+	try {
+		({scope} = await ctx.client.resolve(opts.branch ? { branch: opts.branch } : {}));
+	} catch (err) {
+		fail(`specify --env — this token has no environment of its own to fall back to (${err instanceof Error ? err.message : String(err)})`);
+	}
+	const env = scope.branchOf ?? {
+		envId: scope.envId,
+		envSlug: scope.envSlug
+	};
+	const label = scope.branchOf ? `${scope.appSlug}/${scope.branchOf.envSlug}#${scope.envSlug}` : `${scope.appSlug}/${scope.envSlug}`;
+	if (opts.org && opts.org !== scope.orgSlug && opts.org !== scope.orgId) fail(`this token belongs to ${scope.orgSlug}, not "${opts.org}"`);
+	if (opts.env && opts.env !== env.envSlug && opts.env !== env.envId) fail(`this token is bound to ${scope.appSlug}/${env.envSlug}, not "${opts.env}" — add --app (or --group) to target another environment you hold a key for`);
+	return {
+		orgId: scope.orgId,
+		envId: scope.envId,
+		label
+	};
+}
+/**
 * Resolve an environment to operate on — an application env (`--app --env`,
 * or the config's app + `--env`), a branch of one (`--branch`), or a group env
 * (`--group --env`).
+*
+* `--env` is optional for a service token that names no `--app`/`--group`: it is
+* already bound to exactly one environment, so requiring the flag made every
+* documented one-liner (`seekrit secrets list`) fail for the CI job and the
+* agent that are the point of a token. The local MCP server has always inferred
+* it this way; this is the same rule, in one place, for both.
 */
 async function resolveEnvTarget(ctx, opts) {
+	if (!opts.app && !opts.group && isTokenAuth(ctx)) return boundEnvTarget(ctx, opts);
 	const org = await resolveOrg(ctx, opts.org);
 	if (!opts.env) fail("specify --env");
 	if (opts.group) {
@@ -12949,6 +13064,18 @@ function assertLanggraphDeploymentId(value) {
 	if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id)) fail(`--langgraph-deployment should be the deployment UUID from its dashboard URL, not "${id}"`);
 	return id;
 }
+/**
+* A Hugging Face Space is addressed as `owner/name`. The two habitual slips are
+* pasting the browser URL and giving the bare name without its owner; the first
+* is recovered rather than refused, since a Space URL has exactly one shape.
+*/
+function assertHuggingfaceSpace(value) {
+	if (!value) fail("--hf-space is required for huggingface-spaces (owner/name)");
+	const raw = value.trim();
+	const id = raw.match(/^https?:\/\/(?:[^/]*\.)?huggingface\.co\/spaces\/([^/?#]+\/[^/?#]+)(?:[/?#]|$)/i)?.[1] ?? raw.replace(/^\/+|\/+$/g, "");
+	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,95}\/[A-Za-z0-9][A-Za-z0-9._-]{0,95}$/.test(id)) fail(`--hf-space should be the Space ID as owner/name, e.g. acme/support-demo, not "${raw}"`);
+	return id;
+}
 /** Reject a single value outside a known set, naming the choices. */
 function assertMember(value, allowed, flag, fallback) {
 	if (value === void 0) return fallback;
@@ -13075,6 +13202,7 @@ function credentialNoun(provider) {
 	if (provider === "gcp-secret-manager") return "service-account key JSON";
 	if (provider === "langgraph-platform") return "LangSmith API key";
 	if (provider === "azure-key-vault") return "client secret";
+	if (provider === "huggingface-spaces") return "user access token";
 	return "API token";
 }
 /**
@@ -13163,6 +13291,7 @@ function buildConfig(provider, options) {
 				cloud: cloud ?? "public"
 			};
 		}
+		case "huggingface-spaces": return { provider: "huggingface-spaces" };
 	}
 }
 /** Where inside the platform a binding writes. */
@@ -13376,6 +13505,10 @@ function buildDestination(provider, options) {
 				nameMode: nameMode ?? "dash"
 			};
 		}
+		case "huggingface-spaces": return {
+			provider: "huggingface-spaces",
+			repoId: assertHuggingfaceSpace(options.hfSpace)
+		};
 	}
 }
 /** One-line description of a destination, for list output. */
@@ -13398,6 +13531,7 @@ function describeDestination(destination) {
 		case "gcp-secret-manager": return destination.layout === "json-bundle" ? `${destination.secretId} · json` : `${destination.idPrefix ?? ""}* · one per name`;
 		case "langgraph-platform": return `deployment ${destination.deploymentId}`;
 		case "azure-key-vault": return `${destination.vault}${destination.prefix ? ` (${destination.prefix}*)` : ""}`;
+		case "huggingface-spaces": return `space ${destination.repoId}`;
 		case "github-actions": switch (destination.kind) {
 			case "repo": return `${destination.owner}/${destination.repo}`;
 			case "environment": return `${destination.owner}/${destination.repo} @${destination.environment}`;
@@ -13413,7 +13547,7 @@ function describeDestination(destination) {
 * application whose environment the binding reads from.
 */
 function destinationOptions(command) {
-	return command.option("--project <id>", "vercel: project id or name · cloudflare-pages / northflank: project name or slug · bunnyshell: project ID (writes variables new environments inherit)").option("--target <list>", "vercel / cloudflare-pages: comma-separated deployment targets", "production").option("--git-branch <branch>", "vercel: restrict preview writes to one branch").option("--script <name>", "cloudflare-workers: Worker script name").option("--store-id <id>", "cloudflare-secrets-store: store ID (32 hex)").option("--scopes <list>", "cloudflare-secrets-store: comma-separated scopes", "workers").option("--railway-project <id>", "railway: project ID (a UUID)").option("--railway-environment <id>", "railway: environment ID (a UUID)").option("--service <id>", "railway: service ID (omit for the environment's shared variables) · render: service ID (srv-…, or crn-… for a cron job)").option("--skip-deploys", "railway: stage values without triggering a redeploy").option("--path <path>", "aws-parameter-store: hierarchy, e.g. /prod/storefront/ · aws-secrets-manager, azure-key-vault: name prefix").option("--layout <layout>", `aws-secrets-manager: ${AWS_SECRETS_MANAGER_LAYOUTS.join(" | ")}`).option("--secret-name <name>", "aws-secrets-manager: the secret a json-bundle writes to").option("--param-type <type>", `aws-parameter-store: ${AWS_PARAMETER_TYPES.join(" | ")}`).option("--tier <tier>", `aws-parameter-store: ${AWS_PARAMETER_TIERS.join(" | ")}`).option("--kms-key-id <id>", "aws: customer-managed KMS key id, ARN, or alias").option("--env-group <id>", "render: environment group ID (evg-…)").option("--fly-app <name>", "fly: app name, as `fly apps list` shows it").option("--secret-group <id>", "northflank: secret group ID (the slug in its URL)").option("--do-app <id>", "digitalocean: App Platform app ID (the UUID in its URL)").option("--component <name>", "digitalocean: write to one component's variables (omit for app-level)").option("--env-scope <scope>", `digitalocean: ${DIGITALOCEAN_ENV_SCOPES.join(" | ")}`).option("--heroku-app <name>", "heroku: app name, as `heroku apps` shows it (or its UUID)").option("--netlify-site <id>", "netlify: site API ID (the UUID under Project configuration)").option("--no-netlify-secret", "netlify: create readable variables instead of Netlify secrets (write-only)").option("--bunnyshell-environment <id>", "bunnyshell: environment ID (omit to write a project)").option("--no-bunnyshell-secret", "bunnyshell: create variables visible in the dashboard instead of secret ones").option("--gh-repo <owner/name>", "github-actions: repository, e.g. acme/storefront").option("--gh-environment <name>", "github-actions: write to one deployment environment's secrets (needs --gh-repo)").option("--gh-org <login>", "github-actions: write organization secrets instead of a repo's").option("--gh-visibility <v>", `github-actions org secrets: ${GITHUB_ACTIONS_VISIBILITIES.join(" | ")}`).option("--gh-repo-ids <ids>", "github-actions: comma-separated numeric repository IDs for --gh-visibility selected").option("--langgraph-deployment <id>", "langgraph-platform: deployment UUID (the one in its dashboard URL)").option("--gcp-prefix <prefix>", "gcp: prepended to every secret ID, e.g. prod-storefront-").option("--gcp-replication <policy>", `gcp: ${GCP_REPLICATION_POLICIES.join(" | ")}`, "automatic").option("--gcp-locations <list>", "gcp: regions for user-managed replication, e.g. us-east1").option("--gcp-kms-key <name>", "gcp: Cloud KMS key (projects/…/cryptoKeys/…)").option("--gcp-prune-versions", "gcp: destroy the version each push supersedes, keeping one active version").option("--vault <name>", "azure-key-vault: vault name, e.g. acme-prod").option("--name-mode <mode>", `azure-key-vault: ${AZURE_KEY_VAULT_NAME_MODES.join(" | ")} — Key Vault stores no underscores, so DATABASE_URL becomes DATABASE-URL unless you reject instead`);
+	return command.option("--project <id>", "vercel: project id or name · cloudflare-pages / northflank: project name or slug · bunnyshell: project ID (writes variables new environments inherit)").option("--target <list>", "vercel / cloudflare-pages: comma-separated deployment targets", "production").option("--git-branch <branch>", "vercel: restrict preview writes to one branch").option("--script <name>", "cloudflare-workers: Worker script name").option("--store-id <id>", "cloudflare-secrets-store: store ID (32 hex)").option("--scopes <list>", "cloudflare-secrets-store: comma-separated scopes", "workers").option("--railway-project <id>", "railway: project ID (a UUID)").option("--railway-environment <id>", "railway: environment ID (a UUID)").option("--service <id>", "railway: service ID (omit for the environment's shared variables) · render: service ID (srv-…, or crn-… for a cron job)").option("--skip-deploys", "railway: stage values without triggering a redeploy").option("--path <path>", "aws-parameter-store: hierarchy, e.g. /prod/storefront/ · aws-secrets-manager, azure-key-vault: name prefix").option("--layout <layout>", `aws-secrets-manager: ${AWS_SECRETS_MANAGER_LAYOUTS.join(" | ")}`).option("--secret-name <name>", "aws-secrets-manager: the secret a json-bundle writes to").option("--param-type <type>", `aws-parameter-store: ${AWS_PARAMETER_TYPES.join(" | ")}`).option("--tier <tier>", `aws-parameter-store: ${AWS_PARAMETER_TIERS.join(" | ")}`).option("--kms-key-id <id>", "aws: customer-managed KMS key id, ARN, or alias").option("--env-group <id>", "render: environment group ID (evg-…)").option("--fly-app <name>", "fly: app name, as `fly apps list` shows it").option("--secret-group <id>", "northflank: secret group ID (the slug in its URL)").option("--do-app <id>", "digitalocean: App Platform app ID (the UUID in its URL)").option("--component <name>", "digitalocean: write to one component's variables (omit for app-level)").option("--env-scope <scope>", `digitalocean: ${DIGITALOCEAN_ENV_SCOPES.join(" | ")}`).option("--heroku-app <name>", "heroku: app name, as `heroku apps` shows it (or its UUID)").option("--netlify-site <id>", "netlify: site API ID (the UUID under Project configuration)").option("--no-netlify-secret", "netlify: create readable variables instead of Netlify secrets (write-only)").option("--bunnyshell-environment <id>", "bunnyshell: environment ID (omit to write a project)").option("--no-bunnyshell-secret", "bunnyshell: create variables visible in the dashboard instead of secret ones").option("--gh-repo <owner/name>", "github-actions: repository, e.g. acme/storefront").option("--gh-environment <name>", "github-actions: write to one deployment environment's secrets (needs --gh-repo)").option("--gh-org <login>", "github-actions: write organization secrets instead of a repo's").option("--gh-visibility <v>", `github-actions org secrets: ${GITHUB_ACTIONS_VISIBILITIES.join(" | ")}`).option("--gh-repo-ids <ids>", "github-actions: comma-separated numeric repository IDs for --gh-visibility selected").option("--langgraph-deployment <id>", "langgraph-platform: deployment UUID (the one in its dashboard URL)").option("--gcp-prefix <prefix>", "gcp: prepended to every secret ID, e.g. prod-storefront-").option("--gcp-replication <policy>", `gcp: ${GCP_REPLICATION_POLICIES.join(" | ")}`, "automatic").option("--gcp-locations <list>", "gcp: regions for user-managed replication, e.g. us-east1").option("--gcp-kms-key <name>", "gcp: Cloud KMS key (projects/…/cryptoKeys/…)").option("--gcp-prune-versions", "gcp: destroy the version each push supersedes, keeping one active version").option("--vault <name>", "azure-key-vault: vault name, e.g. acme-prod").option("--hf-space <owner/name>", "huggingface-spaces: Space ID, e.g. acme/support-demo (its owner and name, not a URL)").option("--name-mode <mode>", `azure-key-vault: ${AZURE_KEY_VAULT_NAME_MODES.join(" | ")} — Key Vault stores no underscores, so DATABASE_URL becomes DATABASE-URL unless you reject instead`);
 }
 /** Find a connection by id or name — nobody keeps `syc_…` ids in their head. */
 async function resolveConnection(ctx, orgId, ref) {
@@ -13860,9 +13994,16 @@ function parseVersion(raw) {
 	if (!Number.isInteger(n) || n < 1) fail(`expected a positive whole number, got "${raw}"`);
 	return n;
 }
-/** Attach the environment-selection flags shared by every `secrets` command. */
+/**
+* Attach the environment-selection flags shared by every `secrets` command.
+*
+* `--env` is an ordinary option, not a required one: a service token is bound
+* to a single environment, so `seekrit secrets list` with nothing else on the
+* line is the whole invocation for CI and for agents. `resolveEnvTarget` fills
+* it in from the token, and still insists on it for a user session.
+*/
 function withTarget(cmd) {
-	return cmd.option("--org <slug>", "organization slug").option("--app <slug>", "application slug (defaults to seekrit.json)").option("--group <slug>", "target a group environment instead of an app").option("--branch <slug>", "operate on a branch of --env").requiredOption("--env <slug>", "environment slug");
+	return cmd.option("--org <slug>", "organization slug").option("--app <slug>", "application slug (defaults to seekrit.json)").option("--group <slug>", "target a group environment instead of an app").option("--branch <slug>", "operate on a branch of --env").option("--env <slug>", "environment slug (a service token infers its own)");
 }
 const secrets = program.command("secrets").description("manage secrets in an application or group environment");
 withTarget(secrets.command("list").alias("ls").description("list secret names (no values)").option("--json", "print the listing as JSON (metadata only — never values)")).action(async (options) => {
@@ -14320,7 +14461,7 @@ registerKmsCommands(program);
 registerRotationCommands(program);
 registerRecoveryCommands(program);
 program.command("mcp").description("run an MCP server over stdio so AI agents can drive seekrit").action(async () => {
-	const { runMcpServer } = await import("./mcp-DR-zla_u.js");
+	const { runMcpServer } = await import("./mcp-BOawfW_U.js");
 	await runMcpServer();
 });
 registerAuditCommands(program);

package/dist/{mcp-DR-zla_u.js → mcp-BOawfW_U.js}

@@ -180,22 +180,6 @@ const targetShape = {
 	group: z.string().optional().describe("target a group environment instead of an app"),
 	env: z.string().optional().describe("environment slug or id (a service token infers its own)")
 };
-/**
-* Resolve which environment a secret tool addresses. A service token with no
-* explicit app/group targets its own bound environment (no flags needed);
-* everyone else names app|group + env.
-*/
-async function resolveTargetEnv(ctx, o) {
-	if (isTokenAuth(ctx) && !o.app && !o.group) {
-		const { scope } = await ctx.client.resolve();
-		return {
-			orgId: scope.orgId,
-			envId: scope.envId,
-			label: `${scope.appSlug}/${scope.envSlug}`
-		};
-	}
-	return resolveEnvTarget(ctx, o);
-}
 async function runMcpServer(options = {}) {
 	setFailThrows(true);
 	await ensureM2mAdminToken();
@@ -476,7 +460,7 @@ async function runMcpServer(options = {}) {
 	});
 	tool("list_secrets", "List secret names + versions in an environment (never values).", ro, targetShape, async (o) => {
 		const ctx = getCtx();
-		const { orgId, envId } = await resolveTargetEnv(ctx, o);
+		const { orgId, envId } = await resolveEnvTarget(ctx, o);
 		const { secrets } = await ctx.client.listSecrets(orgId, envId);
 		return secrets.map((s) => ({
 			name: s.name,
@@ -665,7 +649,7 @@ async function runMcpServer(options = {}) {
 	}, async (o) => {
 		const ctx = getCtx();
 		ensureDecryptable(ctx);
-		const { orgId, envId } = await resolveTargetEnv(ctx, o);
+		const { orgId, envId } = await resolveEnvTarget(ctx, o);
 		await encryptAndSetSecret(ctx, orgId, envId, o.name, o.value);
 		return {
 			ok: true,
@@ -680,7 +664,7 @@ async function runMcpServer(options = {}) {
 		version: z.number().int().positive().optional().describe("an earlier version from list_secret_versions (default: current)")
 	}, async (o) => {
 		const ctx = getCtx();
-		const { orgId, envId } = await resolveTargetEnv(ctx, o);
+		const { orgId, envId } = await resolveEnvTarget(ctx, o);
 		if (!o.reveal) {
 			const { secrets } = await ctx.client.listSecrets(orgId, envId);
 			const row = secrets.find((s) => s.name === o.name);
@@ -715,7 +699,7 @@ async function runMcpServer(options = {}) {
 		limit: z.number().int().min(1).max(200).optional().describe("default 20")
 	}, async (o) => {
 		const ctx = getCtx();
-		const { orgId, envId } = await resolveTargetEnv(ctx, o);
+		const { orgId, envId } = await resolveEnvTarget(ctx, o);
 		const { versions, currentVersion } = await ctx.client.listSecretVersions(orgId, envId, o.name, { limit: o.limit ?? 20 });
 		return {
 			currentVersion,
@@ -733,7 +717,7 @@ async function runMcpServer(options = {}) {
 		version: z.number().int().positive()
 	}, async (o) => {
 		const ctx = getCtx();
-		const { orgId, envId } = await resolveTargetEnv(ctx, o);
+		const { orgId, envId } = await resolveEnvTarget(ctx, o);
 		const { secret, restoredFrom } = await ctx.client.restoreSecret(orgId, envId, o.name, o.version);
 		return {
 			ok: true,
@@ -747,7 +731,7 @@ async function runMcpServer(options = {}) {
 		name: z.string()
 	}, async (o) => {
 		const ctx = getCtx();
-		const { orgId, envId } = await resolveTargetEnv(ctx, o);
+		const { orgId, envId } = await resolveEnvTarget(ctx, o);
 		await ctx.client.deleteSecret(orgId, envId, o.name);
 		return {
 			ok: true,
@@ -870,7 +854,7 @@ async function runMcpServer(options = {}) {
 		if (Boolean(o.user) === Boolean(o.token)) throw new Error("pass exactly one of user or token");
 		const ctx = getCtx();
 		ensureDecryptable(ctx);
-		const { orgId, envId, label } = await resolveTargetEnv(ctx, o);
+		const { orgId, envId, label } = await resolveEnvTarget(ctx, o);
 		const dek = await getDek(ctx, orgId, envId);
 		let principalType;
 		let principalId;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seekrit/cli",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "End-to-end encrypted secrets manager CLI — inject decrypted secrets into any command.",
   "type": "module",
   "publishConfig": {
@@ -31,8 +31,8 @@
     "tsdown": "^0.22.3",
     "vitest": "^4.1.9",
     "@seekrit/api-client": "0.0.1",
-    "@seekrit/crypto": "0.0.1",
-    "@seekrit/core": "0.0.1"
+    "@seekrit/core": "0.0.1",
+    "@seekrit/crypto": "0.0.1"
   },
   "scripts": {
     "build": "tsdown",