@soulbatical/tetra-dev-toolkit 1.20.5 → 1.20.6

package/lib/commands/dev-token.js

@@ -8,9 +8,10 @@
  */
 
 import { createClient } from '@supabase/supabase-js'
-import { readFileSync, writeFileSync, existsSync } from 'fs'
+import { readFileSync, writeFileSync, existsSync, openSync, closeSync } from 'fs'
 import { join, basename, dirname, resolve } from 'path'
 import { createInterface } from 'readline'
+import { execSync } from 'child_process'
 import { config as dotenvConfig } from 'dotenv'
 import chalk from 'chalk'
 
@@ -204,39 +205,36 @@ export async function refresh(url, key, refreshToken) {
   }
 }
 
-/** Prompt for input (password is hidden) */
+/** Prompt for input (password is always hidden, works through npm/doppler pipes) */
 export function promptInput(question) {
-  const rl = createInterface({ input: process.stdin, output: process.stdout })
-  return new Promise((resolve) => {
-    if (question.toLowerCase().includes('password')) {
+  const isPassword = question.toLowerCase().includes('password')
+
+  if (isPassword) {
+    // Read password from /dev/tty with echo disabled.
+    // This bypasses npm/doppler stdin piping that breaks setRawMode.
+    return new Promise((resolve) => {
       process.stdout.write(question)
-      process.stdin.setRawMode(true)
-      process.stdin.resume()
-      process.stdin.setEncoding('utf8')
-      let password = ''
-      const onData = (char) => {
-        if (char === '\n' || char === '\r') {
-          process.stdin.setRawMode(false)
-          process.stdin.removeListener('data', onData)
-          console.log('')
-          rl.close()
-          resolve(password)
-        } else if (char === '\u0003') {
-          process.exit()
-        } else if (char === '\u007F') {
-          if (password.length > 0) {
-            password = password.slice(0, -1)
-            process.stdout.write('\b \b')
-          }
-        } else {
-          password += char
-          process.stdout.write('*')
-        }
+      try {
+        // bash -c ensures stty works even in non-interactive shells
+        const password = execSync(
+          'bash -c \'stty -echo </dev/tty; read -r pw </dev/tty; stty echo </dev/tty; echo "$pw"\'',
+          { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }
+        ).replace(/\n$/, '')
+        console.log('') // newline after hidden input
+        resolve(password)
+      } catch {
+        // Fallback for non-unix systems: readline with warning
+        console.warn(chalk.yellow('\n⚠️  Cannot hide password input on this system'))
+        const rl = createInterface({ input: process.stdin, output: process.stdout })
+        rl.question('  Password: ', (answer) => { rl.close(); resolve(answer) })
       }
-      process.stdin.on('data', onData)
-    } else {
-      rl.question(question, (answer) => { rl.close(); resolve(answer) })
-    }
+    })
+  }
+
+  // Non-password input: normal readline
+  const rl = createInterface({ input: process.stdin, output: process.stdout })
+  return new Promise((resolve) => {
+    rl.question(question, (answer) => { rl.close(); resolve(answer) })
   })
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soulbatical/tetra-dev-toolkit",
-  "version": "1.20.5",
+  "version": "1.20.6",
   "publishConfig": {
     "access": "restricted"
   },