envpkt 0.6.4 → 0.6.6

package/dist/cli.js

@@ -2440,10 +2440,7 @@ const printConfig = (config, path, resolveResult, opts) => {
 		console.log("");
 		console.log(`${BOLD}Environment Defaults:${RESET} ${envKeys.length}`);
 		for (const [key, entry] of Object.entries(envEntries)) {
-			const currentValue = process.env[key];
-			const statusIcon = currentValue === void 0 ? `${RED}!${RESET}` : currentValue === entry.value ? `${GREEN}=${RESET}` : `${YELLOW}~${RESET}`;
-			const statusLabel = currentValue === void 0 ? `${DIM}not set${RESET}` : currentValue === entry.value ? `${DIM}using default${RESET}` : `${YELLOW}overridden${RESET}`;
-			console.log(`  ${statusIcon} ${BOLD}${key}${RESET} = "${entry.value}" ${statusLabel}`);
+			console.log(`  ${BOLD}${key}${RESET} = "${entry.value}"`);
 			if (entry.purpose) console.log(`    purpose: ${entry.purpose}`);
 			if (entry.comment) console.log(`    comment: ${DIM}${entry.comment}${RESET}`);
 		}
@@ -2475,7 +2472,8 @@ const runInspect = (options) => {
 			console.error(formatError(err));
 			process.exit(2);
 		}, (config) => {
-			resolveConfig(config, dirname(path)).fold((err) => {
+			const configDir = dirname(path);
+			resolveConfig(config, configDir).fold((err) => {
 				console.error(formatError(err));
 				process.exit(2);
 			}, (resolveResult) => {
@@ -2486,10 +2484,23 @@ const runInspect = (options) => {
 					return;
 				}
 				const showSecrets = showConfig.secret ?? {};
-				const printOpts = options.secrets ? {
-					secrets: Object.fromEntries(Object.keys(showSecrets).filter((key) => process.env[key] !== void 0).map((key) => [key, process.env[key]])),
-					secretDisplay: options.plaintext ? "plaintext" : "encrypted"
-				} : void 0;
+				const printOpts = options.secrets ? (() => {
+					const sealedEntries = Object.fromEntries(Object.entries(showSecrets).filter(([, meta]) => meta.encrypted_value));
+					return {
+						secrets: Object.keys(sealedEntries).length > 0 ? (() => {
+							const identityPath = showConfig.identity?.key_file ? resolve(configDir, expandPath(showConfig.identity.key_file)) : (() => {
+								const defaultPath = resolveKeyPath();
+								return existsSync(defaultPath) ? defaultPath : void 0;
+							})();
+							if (!identityPath) return {};
+							return unsealSecrets(sealedEntries, identityPath).fold((err) => {
+								console.error(`${YELLOW}Warning:${RESET} Could not decrypt sealed secrets: ${err.message}`);
+								return {};
+							}, (d) => d);
+						})() : {},
+						secretDisplay: options.plaintext ? "plaintext" : "encrypted"
+					};
+				})() : void 0;
 				printConfig(showConfig, path, showResolved ? resolveResult : void 0, printOpts);
 			});
 		});
@@ -2974,7 +2985,6 @@ const writeSealedToml = (configPath, sealedMeta) => {
 				output.push(`encrypted_value = """`);
 				output.push(pendingSeals.get(currentMetaKey));
 				output.push(`"""`);
-				output.push("");
 				pendingSeals.delete(currentMetaKey);
 			} else output.push(line);
 			if (line.slice(line.indexOf("=") + 1).trim().includes("\"\"\"")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "envpkt",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Credential lifecycle and fleet management for AI agents",
   "keywords": [
     "credentials",