humanish 0.94.0 → 0.95.0

package/dist/secret-prompt.d.ts

@@ -0,0 +1,2 @@
+/** Host-owned entry: no secret crosses the TUI view contract or reaches a writable terminal. */
+export declare function promptSecret(label: string, stdin: NodeJS.ReadStream, stdout: NodeJS.WriteStream): Promise<string | null>;

package/dist/secret-prompt.js

@@ -0,0 +1,36 @@
+import { createInterface } from "node:readline/promises";
+import { Writable } from "node:stream";
+/** Host-owned entry: no secret crosses the TUI view contract or reaches a writable terminal. */
+export async function promptSecret(label, stdin, stdout) {
+    if (!stdin.isTTY || !stdout.isTTY)
+        return null;
+    const wasRaw = stdin.isRaw;
+    // readline owns editing, paste and raw-mode lifecycle; all of its echo goes to this sink.
+    const sink = new Writable({ write(_chunk, _encoding, done) { done(); } });
+    const reader = createInterface({ input: stdin, output: sink, terminal: true, historySize: 0 });
+    // Ink unrefs stdin on unmount. A pending promise alone does not keep Node alive.
+    stdin.ref?.();
+    return await new Promise(resolve => {
+        let settled = false;
+        const finish = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            reader.close();
+            stdin.setRawMode?.(wasRaw === true);
+            stdin.pause();
+            stdin.unref?.();
+            stdout.write("\n");
+            resolve(value);
+        };
+        reader.once("line", line => finish(line.trim() || null));
+        reader.once("SIGINT", () => finish(null));
+        reader.once("close", () => finish(null));
+        reader.once("error", () => finish(null));
+        // Advertise readiness only after raw mode and handlers are active. Printing this first lets
+        // fast paste race terminal echo and exposes the very value this prompt exists to hide.
+        stdin.resume();
+        stdout.write(`${label} (input hidden; Ctrl+C cancels): `);
+    });
+}
+//# sourceMappingURL=secret-prompt.js.map

package/dist/secret-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-prompt.js","sourceRoot":"","sources":["../src/secret-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,KAAwB,EAAE,MAA0B;IACpG,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,0FAA0F;IAC1F,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,iFAAiF;IACjF,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;IACd,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QACjC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAQ,EAAE;YAC5C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;YACpC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,4FAA4F;QAC5F,uFAAuF;QACvF,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}