lsh-framework 3.1.0 → 3.1.1

package/dist/commands/doctor.js

@@ -8,6 +8,7 @@ import * as path from 'path';
 import { createClient } from '@supabase/supabase-js';
 import { getPlatformPaths, getPlatformInfo } from '../lib/platform-utils.js';
 import { IPFSClientManager } from '../lib/ipfs-client-manager.js';
+import * as os from 'os';
 /**
  * Register doctor commands
  */
@@ -15,6 +16,7 @@ export function registerDoctorCommands(program) {
     program
         .command('doctor')
         .description('Health check and troubleshooting')
+        .option('-g, --global', 'Use global workspace ($HOME)')
         .option('-v, --verbose', 'Show detailed information')
         .option('--json', 'Output results as JSON')
         .action(async (options) => {
@@ -28,12 +30,25 @@ export function registerDoctorCommands(program) {
         }
     });
 }
+/**
+ * Get the base directory for .env files
+ */
+function getBaseDir(globalMode) {
+    return globalMode ? os.homedir() : process.cwd();
+}
 /**
  * Run comprehensive health check
  */
 async function runHealthCheck(options) {
+    const baseDir = getBaseDir(options.global);
     if (!options.json) {
-        console.log(chalk.bold.cyan('\n🏥 LSH Health Check'));
+        if (options.global) {
+            console.log(chalk.bold.cyan('\n🏥 LSH Health Check (Global Workspace)'));
+            console.log(chalk.yellow(`   Location: ${baseDir}`));
+        }
+        else {
+            console.log(chalk.bold.cyan('\n🏥 LSH Health Check'));
+        }
         console.log(chalk.gray('━'.repeat(50)));
         console.log('');
     }
@@ -41,18 +56,20 @@ async function runHealthCheck(options) {
     // Platform check
     checks.push(await checkPlatform(options.verbose));
     // .env file check
-    checks.push(await checkEnvFile(options.verbose));
+    checks.push(await checkEnvFile(options.verbose, baseDir));
     // Encryption key check
-    checks.push(await checkEncryptionKey(options.verbose));
+    checks.push(await checkEncryptionKey(options.verbose, baseDir));
     // Storage backend check
-    const storageChecks = await checkStorageBackend(options.verbose);
+    const storageChecks = await checkStorageBackend(options.verbose, baseDir);
     checks.push(...storageChecks);
-    // Git repository check
-    checks.push(await checkGitRepository(options.verbose));
+    // Git repository check (skip for global mode)
+    if (!options.global) {
+        checks.push(await checkGitRepository(options.verbose));
+    }
     // IPFS client check
     checks.push(await checkIPFSClient(options.verbose));
     // Permissions check
-    checks.push(await checkPermissions(options.verbose));
+    checks.push(await checkPermissions(options.verbose, baseDir));
     // Display results
     if (options.json) {
         console.log(JSON.stringify({ checks, summary: getSummary(checks) }, null, 2));
@@ -86,9 +103,9 @@ async function checkPlatform(verbose) {
 /**
  * Check .env file
  */
-async function checkEnvFile(verbose) {
+async function checkEnvFile(verbose, baseDir) {
     try {
-        const envPath = path.join(process.cwd(), '.env');
+        const envPath = path.join(baseDir || process.cwd(), '.env');
         // Read file directly without access check to avoid TOCTOU race condition
         const content = await fs.readFile(envPath, 'utf-8');
         const lines = content.split('\n').filter(l => l.trim() && !l.startsWith('#'));
@@ -111,9 +128,9 @@ async function checkEnvFile(verbose) {
 /**
  * Check encryption key
  */
-async function checkEncryptionKey(verbose) {
+async function checkEncryptionKey(verbose, baseDir) {
     try {
-        const envPath = path.join(process.cwd(), '.env');
+        const envPath = path.join(baseDir || process.cwd(), '.env');
         const content = await fs.readFile(envPath, 'utf-8');
         const match = content.match(/^LSH_SECRETS_KEY=(.+)$/m);
         if (!match) {
@@ -163,10 +180,10 @@ async function checkEncryptionKey(verbose) {
 /**
  * Check storage backend configuration
  */
-async function checkStorageBackend(verbose) {
+async function checkStorageBackend(verbose, baseDir) {
     const checks = [];
     try {
-        const envPath = path.join(process.cwd(), '.env');
+        const envPath = path.join(baseDir || process.cwd(), '.env');
         const content = await fs.readFile(envPath, 'utf-8');
         const supabaseUrl = content.match(/^SUPABASE_URL=(.+)$/m)?.[1]?.trim();
         const supabaseKey = content.match(/^SUPABASE_ANON_KEY=(.+)$/m)?.[1]?.trim();
@@ -332,7 +349,7 @@ async function checkIPFSClient(verbose) {
 /**
  * Check file permissions
  */
-async function checkPermissions(verbose) {
+async function checkPermissions(verbose, _baseDir) {
     try {
         const paths = getPlatformPaths();
         // Check if we can write to temp directory with secure permissions

package/dist/commands/init.js

@@ -11,6 +11,7 @@ import { createClient } from '@supabase/supabase-js';
 import ora from 'ora';
 import { getPlatformPaths } from '../lib/platform-utils.js';
 import { getGitRepoInfo } from '../lib/git-utils.js';
+import * as os from 'os';
 /**
  * Register init commands
  */
@@ -18,6 +19,7 @@ export function registerInitCommands(program) {
     program
         .command('init')
         .description('Interactive setup wizard (first-time configuration)')
+        .option('-g, --global', 'Use global workspace ($HOME)')
         .option('--local', 'Use local-only encryption (no cloud sync)')
         .option('--storacha', 'Use Storacha IPFS network sync (recommended)')
         .option('--supabase', 'Use Supabase cloud storage')
@@ -34,15 +36,30 @@ export function registerInitCommands(program) {
         }
     });
 }
+/**
+ * Get the base directory for .env files
+ */
+function getBaseDir(globalMode) {
+    return globalMode ? os.homedir() : process.cwd();
+}
 /**
  * Run the interactive setup wizard
  */
 async function runSetupWizard(options) {
-    console.log(chalk.bold.cyan('\n🔐 LSH Secrets Manager - Setup Wizard'));
-    console.log(chalk.gray('━'.repeat(50)));
+    const globalMode = options.global ?? false;
+    const baseDir = getBaseDir(globalMode);
+    if (globalMode) {
+        console.log(chalk.bold.cyan('\n🔐 LSH Secrets Manager - Global Setup Wizard'));
+        console.log(chalk.gray('━'.repeat(50)));
+        console.log(chalk.yellow(`\n🌐 Global Mode: Using $HOME (${baseDir})`));
+    }
+    else {
+        console.log(chalk.bold.cyan('\n🔐 LSH Secrets Manager - Setup Wizard'));
+        console.log(chalk.gray('━'.repeat(50)));
+    }
     console.log('');
     // Check if already configured
-    const existingConfig = await checkExistingConfig();
+    const existingConfig = await checkExistingConfig(baseDir);
     if (existingConfig) {
         const { overwrite } = await inquirer.prompt([
             {
@@ -181,16 +198,16 @@ async function runSetupWizard(options) {
         }
     }
     // Save configuration
-    await saveConfiguration(config);
+    await saveConfiguration(config, baseDir, globalMode);
     // Show success message
     showSuccessMessage(config);
 }
 /**
  * Check if LSH is already configured
  */
-async function checkExistingConfig() {
+async function checkExistingConfig(baseDir) {
     try {
-        const envPath = path.join(process.cwd(), '.env');
+        const envPath = path.join(baseDir, '.env');
         // Read file directly without access check to avoid TOCTOU race condition
         const content = await fs.readFile(envPath, 'utf-8');
         return content.includes('LSH_SECRETS_KEY') ||
@@ -417,10 +434,10 @@ function generateEncryptionKey() {
 /**
  * Save configuration to .env file
  */
-async function saveConfiguration(config) {
+async function saveConfiguration(config, baseDir, globalMode) {
     const spinner = ora('Saving configuration...').start();
     try {
-        const envPath = path.join(process.cwd(), '.env');
+        const envPath = path.join(baseDir, '.env');
         let envContent = '';
         // Try to read existing .env
         try {
@@ -461,8 +478,10 @@ async function saveConfiguration(config) {
         }
         // Write .env file
         await fs.writeFile(envPath, envContent, 'utf-8');
-        // Update .gitignore
-        await updateGitignore();
+        // Update .gitignore (skip for global mode since it's in $HOME)
+        if (!globalMode) {
+            await updateGitignore();
+        }
         spinner.succeed(chalk.green('✅ Configuration saved'));
     }
     catch (error) {

package/dist/services/secrets/secrets.js

@@ -222,10 +222,12 @@ export async function init_secrets(program) {
         .command('create')
         .description('Create a new .env file')
         .option('-f, --file <path>', 'Path to .env file', '.env')
+        .option('-g, --global', 'Use global workspace ($HOME)')
         .option('-t, --template', 'Create with common template variables')
         .action(async (options) => {
         try {
-            const envPath = path.resolve(options.file);
+            const manager = new SecretsManager({ globalMode: options.global });
+            const envPath = path.resolve(manager.resolveFilePath(options.file));
             // Check if file already exists
             if (fs.existsSync(envPath)) {
                 console.log(`❌ File already exists: ${envPath}`);
@@ -882,6 +884,7 @@ API_KEY=
     program
         .command('clear')
         .description('Clear local metadata and cache to resolve stuck registries')
+        .option('-g, --global', 'Use global workspace ($HOME) - default behavior')
         .option('--repo <name>', 'Clear metadata for specific repo only')
         .option('--cache', 'Also clear local encrypted secrets cache')
         .option('--storacha', 'Also delete old Storacha uploads (registries and secrets)')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lsh-framework",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Simple, cross-platform encrypted secrets manager with automatic sync, IPFS audit logs, and multi-environment support. Just run lsh sync and start managing your secrets.",
   "main": "dist/app.js",
   "bin": {
@@ -17,7 +17,7 @@
   "scripts": {
     "build": "tsc",
     "watch": "tsc --watch",
-    "test": "node --experimental-vm-modules ./node_modules/.bin/jest",
+    "test": "node --experimental-vm-modules ./node_modules/.bin/jest --runInBand",
     "test:ci": "node --experimental-vm-modules ./node_modules/.bin/jest --runInBand",
     "test:coverage": "node --experimental-vm-modules ./node_modules/.bin/jest --coverage --runInBand",
     "clean": "rm -rf ./build; rm -rf ./bin; rm -rf ./dist",