lsh-framework 3.2.0 → 3.2.2

package/dist/commands/init.js

@@ -87,6 +87,7 @@ async function runSetupWizard(options) {
     // Check if secrets already exist locally
     const cloudCheck = await checkCloudSecretsExist();
     let encryptionKey;
+    let importedKey = false;
     if (cloudCheck.exists && cloudCheck.repoName) {
         // Secrets found! This is an existing project
         console.log(chalk.cyan(`\n✨ Found existing secrets for "${cloudCheck.repoName}" in cloud!`));
@@ -120,6 +121,7 @@ async function runSetupWizard(options) {
                 },
             ]);
             encryptionKey = existingKey.trim();
+            importedKey = true;
         }
         else {
             // Generate new key (will overwrite existing)
@@ -128,28 +130,61 @@ async function runSetupWizard(options) {
         }
     }
     else {
-        // No existing secrets - generate new key
-        encryptionKey = generateEncryptionKey();
+        // No existing secrets found locally — ask if joining an existing project
+        const { keyChoice } = await inquirer.prompt([
+            {
+                type: 'list',
+                name: 'keyChoice',
+                message: 'How would you like to set up this project?',
+                choices: [
+                    { name: '🔑 Generate a new encryption key (new project)', value: 'generate' },
+                    { name: '🤝 Import an existing key from a teammate', value: 'import' },
+                ],
+            },
+        ]);
+        if (keyChoice === 'import') {
+            const { existingKey } = await inquirer.prompt([
+                {
+                    type: 'password',
+                    name: 'existingKey',
+                    message: 'Enter the LSH_SECRETS_KEY from your teammate:',
+                    mask: '*',
+                    validate: (input) => {
+                        if (!input.trim())
+                            return 'Encryption key is required';
+                        if (input.length < 16)
+                            return 'Key is too short (minimum 16 characters)';
+                        return true;
+                    },
+                },
+            ]);
+            encryptionKey = existingKey.trim();
+            importedKey = true;
+        }
+        else {
+            encryptionKey = generateEncryptionKey();
+        }
     }
     const config = {
         encryptionKey,
     };
-    // If using existing key and secrets exist, offer to pull them now
-    if (cloudCheck.exists && config.encryptionKey && cloudCheck.repoName) {
+    // Save configuration first so LSH_SECRETS_KEY is available for pull
+    await saveConfiguration(config, baseDir, globalMode);
+    // If user imported a key, offer to pull secrets via IPNS
+    if (importedKey && daemonRunning) {
         const { pullNow } = await inquirer.prompt([
             {
                 type: 'confirm',
                 name: 'pullNow',
-                message: 'Pull secrets now?',
+                message: 'Pull secrets now via IPNS?',
                 default: true,
             },
         ]);
         if (pullNow) {
-            await pullSecretsAfterInit(config.encryptionKey, cloudCheck.repoName);
+            const gitInfo = getGitRepoInfo();
+            await pullSecretsAfterInit(config.encryptionKey, cloudCheck.repoName || gitInfo?.repoName || '');
         }
     }
-    // Save configuration
-    await saveConfiguration(config, baseDir, globalMode);
     // Show success message
     showSuccessMessage(config);
 }
@@ -333,18 +368,12 @@ function showSuccessMessage(config) {
     console.log(chalk.gray('   1. (Optional) Start IPFS daemon for network sync:'));
     console.log(chalk.cyan('      lsh ipfs install && lsh ipfs init && lsh ipfs start'));
     console.log('');
-    console.log(chalk.gray('   2. Push your secrets to IPFS:'));
-    console.log(chalk.cyan('      lsh sync push'));
-    console.log(chalk.gray('      (Returns a CID - share this with teammates)'));
-    console.log('');
-    console.log(chalk.gray('   3. On another machine:'));
-    console.log(chalk.cyan('      lsh init'));
-    console.log(chalk.cyan('      export LSH_SECRETS_KEY=<key-from-teammate>'));
-    console.log(chalk.cyan('      lsh sync pull <cid>'));
+    console.log(chalk.gray('   2. Push your secrets:'));
+    console.log(chalk.cyan('      lsh push'));
     console.log('');
-    console.log(chalk.gray('   Alternatively, use the classic push/pull commands:'));
-    console.log(chalk.cyan('      lsh push --env dev'));
-    console.log(chalk.cyan('      lsh pull --env dev'));
+    console.log(chalk.gray('   3. Teammates (share only the key, nothing else):'));
+    console.log(chalk.cyan('      lsh init        # Choose "Import existing key"'));
+    console.log(chalk.cyan('      lsh pull         # Auto-resolves latest via IPNS'));
     console.log('');
     console.log(chalk.gray('📖 Documentation: https://github.com/gwicho38/lsh'));
     console.log('');

package/dist/lib/ipfs-sync.js

@@ -350,9 +350,12 @@ export class IPFSSync {
      */
     async publishToIPNS(cid, keyName) {
         try {
-            const response = await fetch(`${this.LOCAL_IPFS_API}/name/publish?arg=${cid}&key=${encodeURIComponent(keyName)}&lifetime=87600h&resolve=false`, {
+            // allow-offline=true stores the record locally and returns immediately;
+            // the daemon propagates it to the DHT in the background.
+            // Without this, first publishes can take 60-90s for DHT propagation.
+            const response = await fetch(`${this.LOCAL_IPFS_API}/name/publish?arg=${cid}&key=${encodeURIComponent(keyName)}&lifetime=87600h&resolve=false&offline=true`, {
                 method: 'POST',
-                signal: AbortSignal.timeout(30000),
+                signal: AbortSignal.timeout(15000),
             });
             if (!response.ok) {
                 const errorText = await response.text();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lsh-framework",
-  "version": "3.2.0",
+  "version": "3.2.2",
   "description": "Simple, cross-platform encrypted secrets manager with automatic sync, IPFS audit logs, and multi-environment support. Just run lsh sync and start managing your secrets.",
   "main": "dist/app.js",
   "bin": {