@sekyuriti/cloak 0.1.0 → 0.1.2

package/bin/cloak.js

@@ -113,6 +113,17 @@ function printHeader() {
 }
 
 function loadConfig() {
+  // CI/CD: Use env vars if available (bypasses machine-specific encryption)
+  // Note: tier is NOT set here - it's fetched from the server via /license endpoint
+  if (process.env.SEKYURITI_CLOAK_API_KEY) {
+    return {
+      apiKey: process.env.SEKYURITI_CLOAK_API_KEY,
+      projectId: process.env.SEKYURITI_CLOAK_PROJECT_ID,
+      email: "ci@sekyuriti.build",
+    };
+  }
+
+  // Otherwise read from config file
   try {
     if (fs.existsSync(CONFIG_FILE)) {
       const config = JSON.parse(fs.readFileSync(CONFIG_FILE, "utf8"));
@@ -151,6 +162,44 @@ function deleteConfig() {
   }
 }
 
+function writeEnvFile(apiKey, projectId) {
+  // Write env vars to .env.local for CI/CD usage
+  const envPath = path.join(process.cwd(), ".env");
+  const envLocalPath = path.join(process.cwd(), ".env.local");
+  let targetEnvPath = envLocalPath;
+
+  // Prefer .env.local, fall back to .env if it exists
+  if (fs.existsSync(envLocalPath)) {
+    targetEnvPath = envLocalPath;
+  } else if (fs.existsSync(envPath)) {
+    targetEnvPath = envPath;
+  }
+
+  const envVars = `
+# CLOAK Configuration (for CI/CD)
+SEKYURITI_CLOAK_API_KEY=${apiKey}
+SEKYURITI_CLOAK_PROJECT_ID=${projectId}
+`.trim();
+
+  try {
+    if (fs.existsSync(targetEnvPath)) {
+      let content = fs.readFileSync(targetEnvPath, "utf-8");
+      if (!content.includes("SEKYURITI_CLOAK_API_KEY")) {
+        content += "\n\n" + envVars + "\n";
+        fs.writeFileSync(targetEnvPath, content);
+        success(`Added CLOAK config to ${path.basename(targetEnvPath)}`);
+      } else {
+        info(`CLOAK config already in ${path.basename(targetEnvPath)}`);
+      }
+    } else {
+      fs.writeFileSync(envLocalPath, envVars + "\n");
+      success("Created .env.local with CLOAK config");
+    }
+  } catch (err) {
+    info(`Could not write env file: ${err.message}`);
+  }
+}
+
 function httpRequest(method, urlPath, body = null, apiKey = null, timeout = REQUEST_TIMEOUT) {
   return new Promise((resolve, reject) => {
     const url = new URL(urlPath.startsWith("http") ? urlPath : API_BASE + urlPath);
@@ -250,6 +299,9 @@ async function cmdLogin() {
 
         saveConfig(config);
 
+        // Also write to .env.local for CI/CD
+        writeEnvFile(config.apiKey, config.projectId);
+
         success(`Authenticated as ${config.email}`);
         info(`  Project: ${config.projectName}`);
         info(`  Tier: ${config.tier.toUpperCase()}`);
@@ -642,6 +694,10 @@ function cmdHelp() {
   log("    cloak protect app.js --domain-lock example.com,www.example.com");
   log("    cloak protect app.js --expiration 2025-12-31 --anti-debug");
   log("");
+  log("  CI/CD Environment Variables:");
+  log("    SEKYURITI_CLOAK_API_KEY       API key (bypasses config file)");
+  log("    SEKYURITI_CLOAK_PROJECT_ID    Project ID");
+  log("");
 }
 
 // ============================================================

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sekyuriti/cloak",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "JavaScript obfuscation CLI - code never leaves your machine",
   "main": "src/index.js",
   "bin": {