lsh-framework 0.5.6 → 0.5.7

package/dist/lib/secrets-manager.js

@@ -45,14 +45,30 @@ export class SecretsManager {
      * Decrypt a value
      */
     decrypt(text) {
-        const parts = text.split(':');
-        const iv = Buffer.from(parts[0], 'hex');
-        const encryptedText = parts[1];
-        const key = Buffer.from(this.encryptionKey, 'hex');
-        const decipher = crypto.createDecipheriv('aes-256-cbc', key.slice(0, 32), iv);
-        let decrypted = decipher.update(encryptedText, 'hex', 'utf8');
-        decrypted += decipher.final('utf8');
-        return decrypted;
+        try {
+            const parts = text.split(':');
+            if (parts.length !== 2) {
+                throw new Error('Invalid encrypted format');
+            }
+            const iv = Buffer.from(parts[0], 'hex');
+            const encryptedText = parts[1];
+            const key = Buffer.from(this.encryptionKey, 'hex');
+            const decipher = crypto.createDecipheriv('aes-256-cbc', key.slice(0, 32), iv);
+            let decrypted = decipher.update(encryptedText, 'hex', 'utf8');
+            decrypted += decipher.final('utf8');
+            return decrypted;
+        }
+        catch (error) {
+            if (error.message.includes('bad decrypt') || error.message.includes('wrong final block length')) {
+                throw new Error('Decryption failed. This usually means:\n' +
+                    '  1. You need to set LSH_SECRETS_KEY environment variable\n' +
+                    '  2. The key must match the one used during encryption\n' +
+                    '  3. Generate a shared key with: lsh secrets key\n' +
+                    '  4. Add it to your .env: LSH_SECRETS_KEY=<key>\n' +
+                    '\nOriginal error: ' + error.message);
+            }
+            throw error;
+        }
     }
     /**
      * Parse .env file into key-value pairs
@@ -100,6 +116,13 @@ export class SecretsManager {
         if (!fs.existsSync(envFilePath)) {
             throw new Error(`File not found: ${envFilePath}`);
         }
+        // Warn if using default key
+        if (!process.env.LSH_SECRETS_KEY) {
+            logger.warn('⚠️  Warning: No LSH_SECRETS_KEY set. Using machine-specific key.');
+            logger.warn('   To share secrets across machines, generate a key with: lsh secrets key');
+            logger.warn('   Then add LSH_SECRETS_KEY=<key> to your .env on all machines');
+            console.log();
+        }
         logger.info(`Pushing ${envFilePath} to Supabase (${environment})...`);
         const content = fs.readFileSync(envFilePath, 'utf8');
         const env = this.parseEnvFile(content);

package/dist/services/secrets/secrets.js

@@ -41,12 +41,18 @@ export async function init_secrets(program) {
     });
     // List environments
     secretsCmd
-        .command('list')
+        .command('list [environment]')
         .alias('ls')
-        .description('List all stored environments')
-        .action(async () => {
+        .description('List all stored environments or show secrets for specific environment')
+        .action(async (environment) => {
         try {
             const manager = new SecretsManager();
+            // If environment specified, show secrets for that environment
+            if (environment) {
+                await manager.show(environment);
+                return;
+            }
+            // Otherwise, list all environments
             const envs = await manager.listEnvironments();
             if (envs.length === 0) {
                 console.log('No environments found. Push your first .env with: lsh secrets push');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lsh-framework",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "description": "A powerful, extensible shell with advanced job management, database persistence, and modern CLI features",
   "main": "dist/app.js",
   "bin": {