keymap-cli 0.1.1 → 0.1.3

package/README.md

@@ -4,16 +4,14 @@ A values-free map of every secret you run, where it lives, and one command to ro
 
 **It is a map, not a vault.** keymap never stores a secret value. The manifest and its state hold names, locations, timestamps and short salted hashes. Values move only between your existing CLIs (`gh`, `railway`, …) and the host, over stdin or a mode-600 temp file, never through a shell string or on a command line.
 
-Built for solo and vibe-coded deployments after the OpenCode (Oct 16, 2026) and Railway (Oct 21, 2026) key thefts, when "rotate every variable" met "I don't remember where half of these are used".
+Built after the OpenCode (Oct 16, 2026) and Railway (Oct 21, 2026) key thefts, when "rotate every variable" met "I don't remember where half of these are used".
 
-## Status
-
-Day 4. All planned commands exist: `init`, `audit`, `mark`, `rotate`, `incident`, `remind`, `doctor`, for `local` (.env files), `github` (Actions secrets), `railway`, `vercel`, `fly`, `cloudflare` (Workers) and `supabase` (Edge Function secrets). OpenRouter keys can be minted by API. Not yet published to npm.
+Commands: `init`, `audit`, `mark`, `rotate`, `incident`, `remind`, `doctor`. Hosts: `local` (.env files), `github` (Actions secrets), `railway`, `vercel`, `fly`, `cloudflare` (Workers), `supabase` (Edge Function secrets). OpenRouter keys can be minted by API.
 
 ## Quick start
 
 ```sh
-npm i -g keymap-cli            # or: npx keymap-cli   (not published yet; see Status)
+npm i -g keymap-cli            # or: npx keymap-cli
 cd your-project
 keymap init -s local:.env github:owner/repo railway:api/production
 # edit keymap.yaml: issuers, rotate_every, ignore list

package/dist/cli.js

@@ -10679,9 +10679,6 @@ var {
   Help
 } = import_index.default;
 
-// src/cli.ts
-import { basename } from "path";
-
 // src/exec.ts
 import { execFile } from "child_process";
 import { accessSync, constants } from "fs";
@@ -11835,6 +11832,9 @@ function formatDoctor(rows) {
 
 // src/cli.ts
 import { readFile as readFile4 } from "fs/promises";
+import { readFileSync as readFileSync2 } from "fs";
+import { fileURLToPath } from "url";
+import { basename, dirname as dirname3, join as join4 } from "path";
 
 // src/prompt.ts
 import { createInterface } from "readline";
@@ -11929,8 +11929,18 @@ function parseSinkArg(arg) {
 }
 
 // src/cli.ts
+function pkgVersion() {
+  const here = dirname3(fileURLToPath(import.meta.url));
+  for (const rel of ["../package.json", "./package.json"]) {
+    try {
+      return JSON.parse(readFileSync2(join4(here, rel), "utf8")).version;
+    } catch {
+    }
+  }
+  return "0.0.0";
+}
 var ctx = { exec: realExec, cwd: process.cwd() };
-var program2 = new Command().name("keymap").description("Values-free map of every secret you run, where it lives, and one command to rotate it everywhere.").version("0.1.0");
+var program2 = new Command().name("keymap").description("Values-free map of every secret you run, where it lives, and one command to rotate it everywhere.").version(pkgVersion());
 program2.command("init").description("Discover secret names across sinks and write keymap.yaml (values are hashed in memory, never stored)").option("-p, --project <name>", "project name", basename(process.cwd())).option("-s, --sink <sink...>", `sinks to scan, e.g. local:.env github:owner/repo railway:api/production fly:myapp vercel:myproj/production+preview (supported: ${supportedSinks.join(", ")})`, ["local:.env"]).option("--all", "include config-looking names like PORT and NEXT_PUBLIC_*").option("--force", "overwrite an existing keymap.yaml").action(async (o) => {
   const sinks = o.sink.map(parseSinkArg);
   const r = await runInit({ project: o.project, sinks, all: o.all, force: o.force }, ctx);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "keymap-cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Values-free map of every secret you run, where it lives, and one command to rotate it everywhere.",
   "license": "MIT",
   "author": "Nekruz Kasimov",
@@ -40,7 +40,8 @@
     "build": "tsup",
     "dev": "tsx src/cli.ts",
     "test": "vitest run",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build && npm test"
   },
   "engines": {
     "node": ">=20"