sefy-cli 0.10.0 → 0.11.1

package/README.md

@@ -120,6 +120,9 @@ Every command, with its flags: **[the reference](https://lacodda.github.io/sefy/
 - **Two-factor sign-in built in.** `sefy otp` turns the key a site shows
   into the one-time code, and `sefy fill` hands over login, password and code
   one Enter at a time.
+- **Tokens for scripts without a `.env` file.** `sefy run -e TOKEN=github --
+  ./deploy.sh` puts the secret in the environment of that one command - not in
+  a file, the shell history or a process listing.
 - **Transports, not lock-in.** `sefy sync` carries the vault through a
   `sefy-plugin-*` executable - github and sftp ship today - and folds what
   comes back in without a credential ever passing through the transport.

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "sefy-cli",
-  "version": "0.10.0",
+  "version": "0.11.1",
   "sefy": {
-    "binary": "v0.10.0"
+    "binary": "v0.11.1"
   },
   "description": "An inconspicuous encrypted store for notes, credentials and files",
   "license": "MIT",

package/run.js

@@ -2,12 +2,35 @@
 // Thin launcher: forwards everything to the sefy binary, downloading it on
 // first run when the postinstall script was skipped (npm v12 default).
 const fs = require("fs");
+const os = require("os");
 const { spawnSync } = require("child_process");
 const { install, exePath } = require("./download");
 
+// The keystrokes a terminal sends to every process on it, this launcher
+// included. Left to the default, the launcher would die at once and hand the
+// prompt back while sefy - or the command `sefy run` started - is still
+// deciding what to do with the same keystroke. Listening keeps the launcher
+// alive until the binary is done; the binary alone decides.
+const KEYSTROKES =
+  process.platform === "win32" ? ["SIGINT", "SIGBREAK"] : ["SIGINT", "SIGQUIT"];
+
 function exec() {
+  const stayPut = () => {};
+  for (const signal of KEYSTROKES) process.on(signal, stayPut);
+
   const result = spawnSync(exePath, process.argv.slice(2), { stdio: "inherit" });
-  process.exit(result.status === null ? 1 : result.status);
+  if (result.error) {
+    console.error(`sefy-cli: cannot start ${exePath}: ${result.error.message}`);
+    process.exit(1);
+  }
+  if (result.signal) {
+    // Ended by a signal: end the same way, so the shell reports it as it
+    // would for the binary run directly (130 after Ctrl+C), not as a plain 1.
+    for (const signal of KEYSTROKES) process.removeListener(signal, stayPut);
+    process.kill(process.pid, result.signal);
+    process.exit(128 + (os.constants.signals[result.signal] || 0));
+  }
+  process.exit(result.status);
 }
 
 if (fs.existsSync(exePath)) {