vaultfs 1.0.2 → 1.0.4

package/src/sync/FirestoreSync.java

@@ -99,7 +99,13 @@ public class FirestoreSync {
                     if (attempt == maxRetries) {
                         Logger.warn("[sync] Push failed after " + maxRetries + " attempts");
                     } else {
-                        Thread.sleep((long) Math.pow(2, attempt) * 1000); // Exponential backoff
+                        try {
+                            Thread.sleep((long) Math.pow(2, attempt) * 1000); // Exponential backoff
+                        } catch (InterruptedException ie) {
+                            Thread.currentThread().interrupt();
+                            Logger.warn("[sync] Push interrupted");
+                            break;
+                        }
                     }
                 }
             }
@@ -136,7 +142,9 @@ public class FirestoreSync {
                 return null;
             }
 
-            // Use char array for private key so we can zero it after use
+            // Best-effort zeroing: char array can be wiped, but intermediate String
+            // instances (strippedKey, jwt) remain in the JVM string pool until GC.
+            // For stronger guarantees, consider an HSM or vault-based signer.
             char[] privateKeyChars = privateKey.toCharArray();
             privateKey = null; // Release string reference
 

package/src/utils/EnvParser.java

@@ -11,17 +11,38 @@ public class EnvParser {
     private static final Map<String, String> envMap = new HashMap<>();
 
     static {
-        loadEnvFile(System.getProperty("user.dir") + "/.env");
+        // Try user.dir first (development), then VAULTFS_HOME / -Dvaultfs.home (global install)
+        String userDir = System.getProperty("user.dir");
+        String envPath = userDir + "/.env";
+        if (!new java.io.File(envPath).exists()) {
+            String home = System.getProperty("vaultfs.home");
+            if (home == null || home.isEmpty()) {
+                home = System.getenv("VAULTFS_HOME");
+            }
+            if (home != null && !home.isEmpty()) {
+                envPath = home + "/.env";
+            }
+        }
+        loadEnvFile(envPath);
     }
 
     private static void loadEnvFile(String path) {
-        // Validate the .env path is within the project directory
+        // Validate the .env path is within an allowed base directory
         try {
             java.io.File envFile = new java.io.File(path);
             String canonicalEnv = envFile.getCanonicalPath();
             String canonicalBase = new java.io.File(System.getProperty("user.dir")).getCanonicalPath();
-            if (!canonicalEnv.startsWith(canonicalBase)) {
-                System.err.println("[EnvParser] Warning: .env path outside project directory, skipping");
+            boolean allowed = canonicalEnv.startsWith(canonicalBase);
+            if (!allowed) {
+                String home = System.getProperty("vaultfs.home");
+                if (home == null || home.isEmpty()) home = System.getenv("VAULTFS_HOME");
+                if (home != null && !home.isEmpty()) {
+                    String canonicalHome = new java.io.File(home).getCanonicalPath();
+                    allowed = canonicalEnv.startsWith(canonicalHome);
+                }
+            }
+            if (!allowed) {
+                System.err.println("[EnvParser] Warning: .env path outside allowed directories, skipping");
                 return;
             }
         } catch (IOException e) {

package/version.txt

@@ -1 +1 @@
-1.0.2
+1.0.4