relic 0.5.0 → 0.6.1

package/README.md

@@ -0,0 +1,90 @@
+# Relic
+
+Zero-knowledge secret layer for your projects. Encrypted on your device, never exposed to anyone else. Not even us.
+
+## Installation
+
+```bash
+# npm
+npm install -g relic
+
+# Homebrew
+brew install heycupola/tap/relic
+
+# Download binary
+curl -fsSL https://github.com/heycupola/relic/releases/latest/download/relic-$(uname -s | tr '[:upper:]' '[:lower:]')-$(uname -m).tar.gz | tar -xz -C /usr/local/bin
+```
+
+## Usage
+
+```bash
+# Launch the TUI
+relic
+
+# Authenticate
+relic login
+
+# Initialize a project
+relic init
+
+# Run a command with secrets injected
+relic run -e production -- npm run deploy
+relic run -e staging -f database -- ./migrate.sh
+relic run -e production -s client -- npm run build
+```
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `relic` | Launch the TUI (default) |
+| `relic login` | Authenticate via device code flow |
+| `relic logout` | Clear session and cached data |
+| `relic whoami` | Show current user |
+| `relic projects` | List projects with environments and folders |
+| `relic init` | Create `relic.toml` for the current project |
+| `relic run` | Run a command with secrets injected |
+| `relic telemetry` | Manage anonymous usage data collection |
+
+### `relic run` options
+
+| Flag | Description |
+|------|-------------|
+| `-e, --environment` | Environment name (required) |
+| `-f, --folder` | Folder name |
+| `-s, --scope` | `client`, `server`, or `shared` |
+| `-p, --project` | Project ID (overrides `relic.toml`) |
+
+## CI/CD
+
+Use API keys for non-interactive environments:
+
+```yaml
+# GitHub Actions
+- name: Deploy with secrets
+  env:
+    RELIC_API_KEY: ${{ secrets.RELIC_API_KEY }}
+    RELIC_PASSWORD: ${{ secrets.RELIC_PASSWORD }}
+  run: npx relic run -e production -- npm run deploy
+```
+
+| Variable | Description |
+|----------|-------------|
+| `RELIC_API_KEY` | API key for authentication |
+| `RELIC_PASSWORD` | Master password for decryption |
+| `RELIC_PROJECT_ID` | Project ID (optional if `relic.toml` exists) |
+
+## Supported Platforms
+
+| Platform | Architecture |
+|----------|-------------|
+| macOS | ARM64 (Apple Silicon) |
+| macOS | x64 (Intel) |
+| Linux | x64 |
+| Windows | x64 |
+
+## Links
+
+- [Website](https://heyrelic.com)
+- [Documentation](https://docs.heyrelic.com)
+- [GitHub](https://github.com/heycupola/relic)

package/bin/relic

@@ -3,20 +3,50 @@
 import { execFileSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { join, dirname } from "node:path";
-import { fileURLToPath } from "node:url";
-import { platform } from "node:os";
+import { createRequire } from "node:module";
+import { platform, arch } from "node:os";
 
-const __dirname = dirname(fileURLToPath(import.meta.url));
+const PLATFORM_MAP = {
+  "darwin-arm64": "relic-cli-darwin-arm64",
+  "darwin-x64": "relic-cli-darwin-x64",
+  "linux-x64": "relic-cli-linux-x64",
+  "win32-x64": "relic-cli-windows-x64",
+};
+
+const currentPlatform = `${platform()}-${arch()}`;
+const pkg = PLATFORM_MAP[currentPlatform];
+
+if (!pkg) {
+  console.error(
+    `relic: Unsupported platform ${currentPlatform}.\n` +
+    `Supported: ${Object.keys(PLATFORM_MAP).join(", ")}\n` +
+    `Download manually from: https://github.com/heycupola/relic/releases`
+  );
+  process.exit(1);
+}
+
+const require = createRequire(import.meta.url);
 const isWindows = platform() === "win32";
 const binaryName = isWindows ? "relic.exe" : "relic";
-const binary = join(__dirname, binaryName);
+
+let binary;
+try {
+  const pkgJson = require.resolve(`${pkg}/package.json`);
+  binary = join(dirname(pkgJson), "bin", binaryName);
+} catch {
+  console.error(
+    `relic: Platform package ${pkg} is not installed.\n` +
+    `Try reinstalling: npm install -g relic\n\n` +
+    `If the problem persists, download from:\n` +
+    `  https://github.com/heycupola/relic/releases`
+  );
+  process.exit(1);
+}
 
 if (!existsSync(binary)) {
   console.error(
-    "relic: Binary not found. Run the postinstall script or reinstall:\n" +
-    "  npm install -g relic\n\n" +
-    "Or download manually from:\n" +
-    "  https://github.com/heycupola/relic/releases"
+    `relic: Binary not found at ${binary}\n` +
+    `Try reinstalling: npm install -g relic`
   );
   process.exit(1);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "relic",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "The Relic CLI for managing and sharing secrets. Encrypted on your device, never exposed to anyone else. Not even us.",
   "license": "MIT",
   "type": "module",
@@ -18,13 +18,16 @@
   "bin": {
     "relic": "bin/relic"
   },
-  "scripts": {
-    "postinstall": "node postinstall.mjs"
-  },
   "files": [
     "bin/",
-    "postinstall.mjs"
+    "README.md"
   ],
+  "optionalDependencies": {
+    "relic-cli-darwin-arm64": "0.6.1",
+    "relic-cli-darwin-x64": "0.6.1",
+    "relic-cli-linux-x64": "0.6.1",
+    "relic-cli-windows-x64": "0.6.1"
+  },
   "engines": {
     "node": ">=18"
   }

package/postinstall.mjs

@@ -1,102 +0,0 @@
-import { execSync } from "node:child_process";
-import { createWriteStream, existsSync, mkdirSync, chmodSync, renameSync, unlinkSync } from "node:fs";
-import { join, dirname } from "node:path";
-import { fileURLToPath } from "node:url";
-import { platform, arch } from "node:os";
-import { get } from "node:https";
-import { createGunzip } from "node:zlib";
-import { readFileSync } from "node:fs";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const pkg = JSON.parse(readFileSync(join(__dirname, "package.json"), "utf8"));
-const version = pkg.version;
-
-const PLATFORM_MAP = {
-  "darwin-arm64": { archive: `relic-darwin-arm64.tar.gz`, binary: "relic" },
-  "darwin-x64": { archive: `relic-darwin-x64.tar.gz`, binary: "relic" },
-  "linux-x64": { archive: `relic-linux-x64.tar.gz`, binary: "relic" },
-  "win32-x64": { archive: `relic-win32-x64.zip`, binary: "relic.exe" },
-};
-
-const currentPlatform = `${platform()}-${arch()}`;
-const target = PLATFORM_MAP[currentPlatform];
-
-if (!target) {
-  console.warn(
-    `[relic] Unsupported platform: ${currentPlatform}. ` +
-    `Supported: ${Object.keys(PLATFORM_MAP).join(", ")}`
-  );
-  process.exit(0);
-}
-
-const binDir = join(__dirname, "bin");
-const binaryPath = join(binDir, target.binary);
-
-if (existsSync(binaryPath)) {
-  process.exit(0);
-}
-
-const url = `https://github.com/heycupola/relic/releases/download/v${version}/${target.archive}`;
-
-function download(url) {
-  return new Promise((resolve, reject) => {
-    get(url, (res) => {
-      if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-        return download(res.headers.location).then(resolve, reject);
-      }
-      if (res.statusCode !== 200) {
-        return reject(new Error(`Download failed: HTTP ${res.statusCode} for ${url}`));
-      }
-      resolve(res);
-    }).on("error", reject);
-  });
-}
-
-async function extractTarGz(stream, destDir) {
-  const tmpFile = join(destDir, "_tmp.tar.gz");
-  await new Promise((resolve, reject) => {
-    const ws = createWriteStream(tmpFile);
-    stream.pipe(ws);
-    ws.on("finish", resolve);
-    ws.on("error", reject);
-  });
-  execSync(`tar -xzf "${tmpFile}" -C "${destDir}"`, { stdio: "ignore" });
-  unlinkSync(tmpFile);
-}
-
-async function extractZip(stream, destDir) {
-  const tmpFile = join(destDir, "_tmp.zip");
-  await new Promise((resolve, reject) => {
-    const ws = createWriteStream(tmpFile);
-    stream.pipe(ws);
-    ws.on("finish", resolve);
-    ws.on("error", reject);
-  });
-  execSync(`unzip -o -q "${tmpFile}" -d "${destDir}"`, { stdio: "ignore" });
-  unlinkSync(tmpFile);
-}
-
-try {
-  mkdirSync(binDir, { recursive: true });
-
-  console.log(`[relic] Downloading ${target.archive} for ${currentPlatform}...`);
-  const stream = await download(url);
-
-  if (target.archive.endsWith(".tar.gz")) {
-    await extractTarGz(stream, binDir);
-  } else {
-    await extractZip(stream, binDir);
-  }
-
-  if (existsSync(binaryPath)) {
-    chmodSync(binaryPath, 0o755);
-  }
-
-  console.log(`[relic] Installed successfully.`);
-} catch (err) {
-  console.warn(
-    `[relic] Failed to download binary: ${err.message}\n` +
-    `[relic] You can download manually from: https://github.com/heycupola/relic/releases`
-  );
-  process.exit(0);
-}