cf-envsync 0.3.4 → 0.3.6

package/dist/index.js

@@ -13110,7 +13110,15 @@ function decryptValue(token, password) {
 function decryptEnvMap(envMap, password) {
   const result = {};
   for (const [key, value] of Object.entries(envMap)) {
-    result[key] = isEnvsyncEncrypted(value) ? decryptValue(value, password) : value;
+    if (isEnvsyncEncrypted(value)) {
+      try {
+        result[key] = decryptValue(value, password);
+      } catch {
+        throw new Error(`Failed to decrypt ${key}: wrong password or corrupted data. ` + `Check ENVSYNC_PASSWORD or .env.password`);
+      }
+    } else {
+      result[key] = value;
+    }
   }
   return result;
 }
@@ -14934,6 +14942,15 @@ var init_encrypt = __esm(() => {
       }
       const content = await readFile(envFilePath);
       const lines = parseLines(content);
+      const firstEncrypted = lines.find((l2) => l2.key && l2.value && isEnvsyncEncrypted(l2.value.trim()));
+      if (firstEncrypted) {
+        try {
+          decryptValue(firstEncrypted.value.trim(), password);
+        } catch {
+          consola.error(`Password mismatch: cannot decrypt existing value for ${firstEncrypted.key}. ` + `The current password differs from the one used to encrypt existing values.`);
+          process.exit(1);
+        }
+      }
       let encryptedCount = 0;
       let skippedCount = 0;
       const outputLines = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cf-envsync",
-  "version": "0.3.4",
+  "version": "0.3.6",
   "description": "Sync .env files to Cloudflare Workers secrets, .dev.vars, and more",
   "type": "module",
   "exports": {