sealcode 1.1.0 → 1.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sealcode",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Lock your source code in your own git repo. Stop AI agents, scrapers, and curious eyes from reading what's yours.",
   "keywords": [
     "encryption",

package/src/cli-grants.js

@@ -74,17 +74,38 @@ function getActiveConfig(projectRoot) {
  * a real cryptographic bug; we don't want to silently downgrade in that
  * case).
  */
-async function maybeWrapKeyForRecipient({ projectRoot, recipientEmail, verbose = false }) {
+async function maybeWrapKeyForRecipient({
+  projectRoot,
+  recipientEmail,
+  verbose = false,
+  resolveKey = null,
+}) {
   if (!recipientEmail) return null;
 
-  // Need the master key K to wrap. If there's no live session on this
-  // machine, we can't wrap — owner has to `sealcode unlock` first.
+  // Need the master key K to wrap. Prefer a cached session; if none, ask
+  // the caller (cli.js) to prompt for the passphrase. We deliberately do
+  // NOT silently downgrade to "passphrase fallback" here — the whole point
+  // of `--email` is to spare the recipient the passphrase exchange.
   const config = getActiveConfig(projectRoot);
   if (!isInitialized(projectRoot, config.lockedDir)) return null;
-  const K = loadSession(projectRoot);
+  let K = loadSession(projectRoot);
+  if (!K && typeof resolveKey === 'function') {
+    if (verbose) {
+      ui.step('No cached master key — prompting for passphrase so we can wrap for the recipient.');
+    }
+    try {
+      K = await resolveKey(projectRoot, config);
+    } catch (err) {
+      if (verbose) {
+        ui.warn(`Could not derive master key (${err.message || err}). Will mint without wrapping.`);
+      }
+      return null;
+    }
+  }
   if (!K) {
     if (verbose) {
-      ui.hint('(no cached session — skipping team-key wrap; recipient will need the passphrase)');
+      ui.warn('No cached master key — minting code WITHOUT wrapped key. Recipient will need the passphrase.');
+      ui.hint('Run `sealcode unlock` first, or supply a passphrase prompt, to enable passphrase-free sharing.');
     }
     return null;
   }
@@ -100,13 +121,14 @@ async function maybeWrapKeyForRecipient({ projectRoot, recipientEmail, verbose =
   } catch (err) {
     if (err instanceof ApiError) {
       if (err.status === 404) {
-        // Either the user doesn't exist or hasn't published a pubkey
-        // yet. We still mint the code; the recipient just falls back to
-        // the legacy flow when they redeem.
         if (verbose) {
+          ui.warn(
+            `Recipient ${recipientEmail} hasn't signed in to sealcode.dev yet, so no pubkey is on file.`,
+          );
           ui.hint(
-            `(recipient hasn't published a pubkey yet — falling back to passphrase-share flow)`,
+            'Ask them to visit https://sealcode.dev/login, then re-run `sealcode share --email`.',
           );
+          ui.hint('Continuing with passphrase-fallback for this code…');
         }
         return null;
       }
@@ -146,6 +168,7 @@ async function runShare({
   singleDeviceEnforce = false,
   ndaText = null,
   json = false,
+  resolveKey = null,
 }) {
   const link = requireLink(projectRoot);
 
@@ -159,6 +182,7 @@ async function runShare({
       projectRoot,
       recipientEmail: email,
       verbose: !json,
+      resolveKey,
     });
   } catch (err) {
     // Network errors during pubkey lookup shouldn't be silent — degrade

package/src/cli.js

@@ -714,6 +714,7 @@ function build() {
           singleDeviceEnforce: !!opts.singleDevice,
           ndaText: opts.nda || null,
           json: !!opts.json,
+          resolveKey,
         });
       } catch (err) {
         process.exitCode = reportError(err);