nolo-cli 0.212.0-alpha.1 → 0.222.0-alpha.2

package/{secretCommands-4QS3HCA2.js → chunk-D726I5AZ.js}

@@ -1,13 +1,9 @@
 import {
   createFileCredentialBroker
-} from "./chunk-OQHIVPG4.js";
+} from "./chunk-SNBZZPYH.js";
 import {
   t
-} from "./chunk-3RQVYR4B.js";
-import "./chunk-G7Y4GXTY.js";
-import "./chunk-6UBGXX2W.js";
-import "./chunk-3EUW3WEO.js";
-import "./chunk-4VNS5WPM.js";
+} from "./chunk-OB6DVWPF.js";
 
 // packages/core/secretsStore.ts
 import {
@@ -452,6 +448,41 @@ function parseSecretValue(raw) {
   }
   return parsed;
 }
+function formatRedactedSecretValue(val) {
+  if (typeof val === "string") {
+    return `<redacted:secret len=${val.length}>`;
+  }
+  if (val === null) {
+    return "<redacted:secret>";
+  }
+  if (Array.isArray(val)) {
+    return val.map((item) => formatRedactedSecretValue(item));
+  }
+  if (typeof val === "object") {
+    const res = {};
+    for (const [k, v] of Object.entries(val)) {
+      res[k] = formatRedactedSecretValue(v);
+    }
+    return res;
+  }
+  return `<redacted:secret len=${String(val).length}>`;
+}
+async function defaultConfirmReader(promptText, input = process.stdin, output = process.stderr) {
+  const readline = await import("node:readline/promises");
+  const rl = readline.createInterface({
+    input,
+    output
+  });
+  try {
+    const answer = await rl.question(promptText);
+    const normalized = answer.trim().toLowerCase();
+    return normalized === "y" || normalized === "yes";
+  } catch {
+    return false;
+  } finally {
+    rl.close();
+  }
+}
 var PromptReadError = class extends Error {
   constructor(i18nKey) {
     super(i18nKey);
@@ -565,6 +596,110 @@ async function defaultPromptReader(promptLabel, input = process.stdin, output =
     }
   });
 }
+function stripTrailingNewline(value) {
+  if (value.endsWith("\r\n")) return value.slice(0, -2);
+  if (value.endsWith("\n")) return value.slice(0, -1);
+  return value;
+}
+var GUI_PROMPT_TITLE = "nolo secret";
+var GUI_DIALOG_TOOLS = [
+  {
+    command: "zenity",
+    buildArgs: (promptText) => [
+      "--entry",
+      "--hide-text",
+      `--text=${promptText}`,
+      `--title=${GUI_PROMPT_TITLE}`
+    ],
+    isCancelExitCode: (exitCode) => exitCode === 1 || exitCode === 5
+  },
+  {
+    command: "kdialog",
+    buildArgs: (promptText) => ["--password", promptText, "--title", GUI_PROMPT_TITLE],
+    isCancelExitCode: (exitCode) => exitCode === 1
+  },
+  {
+    command: "yad",
+    buildArgs: (promptText) => [
+      "--entry",
+      "--hide-text",
+      `--text=${promptText}`,
+      `--title=${GUI_PROMPT_TITLE}`
+    ],
+    // yad exits 1 for the Cancel button, and 252 for the window close button
+    // (X) / Esc — both are "the user backed out", not a read failure.
+    isCancelExitCode: (exitCode) => exitCode === 1 || exitCode === 252
+  }
+];
+function isMissingCommandError(error) {
+  return typeof error === "object" && error !== null && error.code === "ENOENT";
+}
+var spawnGuiDialog = (command, args) => new Promise((resolve2, reject) => {
+  let settled = false;
+  let stdout = "";
+  let child;
+  try {
+    child = spawn(command, args, { stdio: ["ignore", "pipe", "ignore"] });
+  } catch (error) {
+    reject(error);
+    return;
+  }
+  child.stdout?.setEncoding("utf8");
+  child.stdout?.on("data", (chunk) => {
+    stdout += chunk;
+  });
+  child.on("error", (error) => {
+    if (settled) return;
+    settled = true;
+    reject(error);
+  });
+  child.on("close", (exitCode) => {
+    if (settled) return;
+    settled = true;
+    resolve2({ exitCode, stdout });
+  });
+});
+function hasGraphicalSession(env) {
+  const has = (value) => typeof value === "string" && value.trim().length > 0;
+  return has(env.DISPLAY) || has(env.WAYLAND_DISPLAY);
+}
+function createGuiPromptReader(host = {}) {
+  const spawnFn = host.spawnFn ?? spawnGuiDialog;
+  const env = host.env ?? process.env;
+  return async (promptText) => {
+    const text = (promptText ?? "").trim();
+    if (!hasGraphicalSession(env)) {
+      throw new PromptReadError("secret.promptGuiUnavailable");
+    }
+    for (const tool of GUI_DIALOG_TOOLS) {
+      let result;
+      try {
+        result = await spawnFn(tool.command, tool.buildArgs(text));
+      } catch (error) {
+        if (isMissingCommandError(error)) continue;
+        throw new PromptReadError("secret.promptReadError");
+      }
+      if (tool.isCancelExitCode(result.exitCode)) {
+        throw new PromptReadError("secret.promptAborted");
+      }
+      if (result.exitCode !== 0) {
+        throw new PromptReadError("secret.promptReadError");
+      }
+      return stripTrailingNewline(result.stdout);
+    }
+    throw new PromptReadError("secret.promptGuiUnavailable");
+  };
+}
+async function defaultSecretPromptReader(promptText, input = process.stdin, output = process.stderr, guiPromptHost = {}) {
+  try {
+    return await defaultPromptReader(promptText, input, output);
+  } catch (error) {
+    if (error instanceof PromptReadError && error.i18nKey === "secret.promptNonTtyNotSupported") {
+      return createGuiPromptReader(guiPromptHost)(promptText);
+    }
+    throw error;
+  }
+}
 var StdinReadError = class extends Error {
   constructor(i18nKey) {
     super(i18nKey);
@@ -676,7 +811,9 @@ async function runSecretCommand(args, options = {}) {
         return;
       }
       case "get": {
-        const [name] = rest;
+        const reveal = rest.includes("--reveal");
+        const nonFlagArgs = rest.filter((arg) => arg !== "--reveal");
+        const [name] = nonFlagArgs;
         if (!name) {
           console.error(t("secret.getNameRequired"));
           process.exitCode = 1;
@@ -694,7 +831,43 @@ async function runSecretCommand(args, options = {}) {
           process.exitCode = 1;
           return;
         }
-        console.log(typeof val === "object" ? JSON.stringify(val, null, 2) : String(val));
+        if (!reveal) {
+          const redacted = formatRedactedSecretValue(val);
+          console.log(
+            typeof redacted === "object" && redacted !== null ? JSON.stringify(redacted, null, 2) : String(redacted)
+          );
+          console.log(t("secret.getRevealHint", name));
+          return;
+        }
+        const input = options.stdin ?? process.stdin;
+        const output = options.stdout ?? process.stdout;
+        const isInteractive = Boolean(input?.isTTY) && Boolean(output?.isTTY);
+        if (!isInteractive) {
+          console.error(t("secret.getRevealNonTty"));
+          process.exitCode = 1;
+          return;
+        }
+        const promptText = t("secret.getRevealConfirmPrompt", name);
+        let confirmed = false;
+        try {
+          if (options.confirmReader) {
+            confirmed = await options.confirmReader(promptText);
+          } else {
+            confirmed = await defaultConfirmReader(
+              promptText,
+              input,
+              options.stdout ?? process.stderr
+            );
+          }
+        } catch {
+          confirmed = false;
+        }
+        if (!confirmed) {
+          console.error(t("secret.getRevealCancelled"));
+          process.exitCode = 1;
+          return;
+        }
+        console.log(typeof val === "object" && val !== null ? JSON.stringify(val, null, 2) : String(val));
         return;
       }
       case "set": {
@@ -775,10 +948,11 @@ async function runSecretCommand(args, options = {}) {
             if (options.promptReader) {
               rawInput = await options.promptReader(t("secret.promptLabel", name2));
             } else {
-              rawInput = await defaultPromptReader(
+              rawInput = await defaultSecretPromptReader(
                 t("secret.promptLabel", name2),
                 options.stdin ?? process.stdin,
-                options.stdout ?? process.stderr
+                options.stdout ?? process.stderr,
+                options.guiPromptHost ?? {}
               );
             }
           } catch (err) {
@@ -790,12 +964,7 @@ async function runSecretCommand(args, options = {}) {
             process.exitCode = 1;
             return;
           }
-          let val = rawInput;
-          if (val.endsWith("\r\n")) {
-            val = val.slice(0, -2);
-          } else if (val.endsWith("\n")) {
-            val = val.slice(0, -1);
-          }
+          let val = stripTrailingNewline(rawInput);
           if (val.length === 0 || /^\s*$/.test(val)) {
             console.error(t("secret.promptEmpty"));
             process.exitCode = 1;
@@ -997,8 +1166,14 @@ async function runSecretCommand(args, options = {}) {
     process.exitCode = 1;
   }
 }
+
 export {
+  setSecret,
+  formatRedactedSecretValue,
+  defaultConfirmReader,
   PromptReadError,
   defaultPromptReader,
+  createGuiPromptReader,
+  defaultSecretPromptReader,
   runSecretCommand
 };

package/{chunk-INSBKSBB.js → chunk-DNKTQ3IN.js}

@@ -1,16 +1,16 @@
 import {
   require_formatISO
-} from "./chunk-WPORQFYN.js";
+} from "./chunk-UVLYNWIE.js";
 import {
   getActiveDialogKey
-} from "./chunk-OWYYDMGJ.js";
+} from "./chunk-S2NTVGA2.js";
 import {
   patch,
   selectById
-} from "./chunk-BFM34N54.js";
+} from "./chunk-44X52WOJ.js";
 import {
   __toESM
-} from "./chunk-4VNS5WPM.js";
+} from "./chunk-U67V476Y.js";
 
 // packages/chat/dialog/actions/setDialogExtraReferencesAction.ts
 var import_formatISO = __toESM(require_formatISO());