@suronai/cli 0.1.14 → 0.1.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suronai/cli",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "CLI for Suron — suron login, init, whoami, rotate",
   "type": "module",
   "bin": {

package/src/index.js

@@ -11,7 +11,7 @@ const program = new Command();
 program
   .name("suron")
   .description("Secrets delivery with Telegram approval")
-  .version("0.1.11");
+  .version("0.1.15");
 
 program.addCommand(loginCommand);
 program.addCommand(initCommand);

package/src/utils/config.js

@@ -39,7 +39,10 @@ export function saveConfig(values) {
 
 /** @returns {string | null} */
 export function getApiUrl() {
-  return process.env.SURON_API_URL?.replace(/\/$/, "") ?? readConfig().apiUrl ?? null;
+  // Strip trailing slash from both sources so callers always get a clean URL.
+  const fromEnv    = process.env.SURON_API_URL?.replace(/\/$/, "");
+  const fromConfig = readConfig().apiUrl?.replace(/\/$/, "");
+  return fromEnv ?? fromConfig ?? null;
 }
 
 /** @returns {string} */

package/src/utils/dotenvx.js

@@ -13,12 +13,13 @@ export function encryptDotenv(cwd) {
   if (!existsSync(join(cwd, ".env"))) {
     throw new Error(`.env not found in ${cwd}`);
   }
-  // Strip DOTENV_PRIVATE_KEY from the child environment.
-  // If dotenvx sees an existing key it reuses that keypair and skips
-  // writing .env.keys, which breaks readPrivateKey() immediately after.
+  // Strip all dotenvx keypair vars from the child environment.
+  // If dotenvx sees DOTENV_PRIVATE_KEY *or* DOTENV_PUBLIC_KEY already set
+  // it reuses that keypair and skips writing .env.keys entirely, which
+  // breaks readPrivateKey() immediately after.
   const env = { ...process.env };
   for (const k of Object.keys(env)) {
-    if (k.startsWith("DOTENV_PRIVATE_KEY")) delete env[k];
+    if (k.startsWith("DOTENV_PRIVATE_KEY") || k.startsWith("DOTENV_PUBLIC_KEY")) delete env[k];
   }
 
   try {