breakaway 1.4.0-main.56 → 1.4.0-main.58

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "breakaway",
-  "version": "1.4.0-main.56",
+  "version": "1.4.0-main.58",
   "description": "The task board for you and your coding agents: a Cloudflare Worker, its web app, Taskwarrior sync, and the CLI (npx breakaway).",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/scripts/tasks/keep.js

@@ -0,0 +1,17 @@
+/**
+ * What the owner keeps (DOC-22): the files on their machine that hold the only copy of a value the board needs again.
+ * The Secrets Store, Worker secrets, and the board never give a value back. init-secrets prints this list, and the
+ * operations docs give a recovery for each (docs/tasks.md#what-to-keep). Names files only, never a value.
+ *
+ * @param {{ envFile: string, routinesFile: string, githubFile: string }} paths  as the owner should read them (~/…)
+ * @returns {string[]}
+ */
+export function keepLines({ envFile, routinesFile, githubFile }) {
+  const width = Math.max(envFile.length, routinesFile.length, githubFile.length) + 2;
+  return [
+    "Keep these in your password manager: the board can't give their values back (docs/tasks.md#what-to-keep).",
+    `  ${envFile.padEnd(width)}the token, and the only copy of the sync secret`,
+    `  ${routinesFile.padEnd(width)}once agents-connect --repo writes it: the other repositories' routines`,
+    `  ${githubFile.padEnd(width)}only if github-connect writes it: the App's keys, until they're stored`,
+  ];
+}

package/scripts/tasks.mjs

@@ -80,6 +80,7 @@ import {
   removedRepoByHand,
   unknownSubcommand,
 } from './tasks/cli.js';
+import { keepLines } from './tasks/keep.js';
 import { mergeViews, pelotonLines, pelotonPost, pickPeloton } from './tasks/peloton.js';
 import { CLI_VERSION } from '../src/cli-version.js';
 import { parseInstall, secretName } from '../src/install.js';
@@ -1821,13 +1822,26 @@ const commands = {
         ...newSyncCredentials(),
       }),
     );
+    const keep = keepLines({
+      envFile: tildePath(ENV_FILE, homedir()),
+      routinesFile: tildePath(ROUTINES_FILE, homedir()),
+      githubFile: tildePath(join(CONFIG_DIR, 'github-app.json'), homedir()),
+    });
     if (install.secretsStore) {
-      console.log(`Wrote ${ENV_FILE} (0600). Next: put the values in the Secrets Store (docs/tasks.md#secrets).`);
+      console.log(
+        [
+          `Wrote ${ENV_FILE} (0600). Next: put the values in the Secrets Store (docs/tasks.md#secrets).`,
+          '',
+          ...keep,
+        ].join('\n'),
+      );
       return;
     }
     console.log(
       [
-        `Wrote ${ENV_FILE} (0600). Keep it, and a copy in your password manager: it holds the sync secret.`,
+        `Wrote ${ENV_FILE} (0600).`,
+        '',
+        ...keep,
         '',
         'Next, deploy the board (docs/tasks.md#deploy-to-cloudflare) with three of its values as secrets:',
         `  TASKS_API_TOKEN  is ${envName('TOKEN')}`,