lsh-framework 2.2.2 → 2.2.4

package/dist/lib/secrets-manager.js

@@ -661,7 +661,7 @@ LSH_SECRETS_KEY=${this.encryptionKey}
                 out('⬇️  Cloud secrets available but no local file');
                 if (autoExecute) {
                     out('   Pulling from cloud...');
-                    await this.pull(envFilePath, effectiveEnv, false);
+                    await this.pull(envFilePath, environment, false); // Use raw environment, not effectiveEnv
                     out('✅ Secrets pulled from cloud!');
                 }
                 else {
@@ -712,7 +712,7 @@ LSH_SECRETS_KEY=${this.encryptionKey}
                         out(`   Cloud: ${status.cloudModified.toLocaleString()}`);
                         if (autoExecute) {
                             out('   Pulling from cloud (backup created)...');
-                            await this.pull(envFilePath, effectiveEnv, false);
+                            await this.pull(envFilePath, environment, false); // Use raw environment, not effectiveEnv
                             out('✅ Secrets synced from cloud!');
                         }
                         else {

package/dist/lib/storacha-client.js

@@ -282,7 +282,8 @@ export class StorachaClient {
                 cursor: '',
                 size: pageSize,
             });
-            // Check recent uploads for registry file
+            // Collect all registry files for this repo
+            const registries = [];
             for (const upload of results.results) {
                 try {
                     const cid = upload.root.toString();
@@ -297,9 +298,12 @@ export class StorachaClient {
                     // Try to parse as JSON
                     const json = JSON.parse(content.toString('utf-8'));
                     // Check if it's an LSH registry file for our repo
-                    if (json.repoName === repoName && json.version && json.cid) {
-                        logger.debug(`✅ Found latest CID for ${repoName}: ${json.cid}`);
-                        return json.cid;
+                    if (json.repoName === repoName && json.version && json.cid && json.timestamp) {
+                        registries.push({
+                            cid: cid,
+                            timestamp: json.timestamp,
+                            secretsCid: json.cid,
+                        });
                     }
                 }
                 catch {
@@ -307,6 +311,13 @@ export class StorachaClient {
                     continue;
                 }
             }
+            // Sort by timestamp (newest first) and return the most recent secrets CID
+            if (registries.length > 0) {
+                registries.sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
+                const latest = registries[0];
+                logger.debug(`✅ Found latest CID for ${repoName}: ${latest.secretsCid} (timestamp: ${latest.timestamp})`);
+                return latest.secretsCid;
+            }
             // No registry found
             return null;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lsh-framework",
-  "version": "2.2.2",
+  "version": "2.2.4",
   "description": "Simple, cross-platform encrypted secrets manager with automatic sync, IPFS audit logs, and multi-environment support. Just run lsh sync and start managing your secrets.",
   "main": "dist/app.js",
   "bin": {