bearcli 1.2.0__tar.gz → 1.2.1__tar.gz

{bearcli-1.2.0 → bearcli-1.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bearcli
-Version: 1.2.0
+Version: 1.2.1
 Summary: The missing CLI for Bear notes — read, search, export, and manage your notes from the terminal
 Keywords: bear,notes,cli,markdown,macos
 Author: Michel Tricot
@@ -120,8 +120,16 @@ attachments — with a generated index, so GitHub renders the whole export as a
 browsable tree.
 
 Before anything is written, the notes are scanned for potential secrets
-(token formats, key blocks, credential assignments); findings block the export
-with a list of the affected notes (`--allow-secrets` overrides).
+(token formats, key blocks, credential assignments, high-entropy strings);
+findings block the export with a list of the affected notes. Override with
+`--allow-secrets` (export as-is) or `--redact-secrets` (replace each secret
+with a `[redacted: <rule>]` placeholder — notes in Bear are untouched).
+
+> **⚠️ Warning** — detection and redaction are best-effort: a secret that
+> reads like ordinary text (a password written as prose, an account number)
+> will not be caught. Ideally, don't keep secrets in notes at all — use a
+> password manager, or at least Bear's encrypted notes, which never leave
+> the app.
 
 ```sh
 bearcli export ~/bear-backup

{bearcli-1.2.0 → bearcli-1.2.1}/README.md

@@ -97,8 +97,16 @@ attachments — with a generated index, so GitHub renders the whole export as a
 browsable tree.
 
 Before anything is written, the notes are scanned for potential secrets
-(token formats, key blocks, credential assignments); findings block the export
-with a list of the affected notes (`--allow-secrets` overrides).
+(token formats, key blocks, credential assignments, high-entropy strings);
+findings block the export with a list of the affected notes. Override with
+`--allow-secrets` (export as-is) or `--redact-secrets` (replace each secret
+with a `[redacted: <rule>]` placeholder — notes in Bear are untouched).
+
+> **⚠️ Warning** — detection and redaction are best-effort: a secret that
+> reads like ordinary text (a password written as prose, an account number)
+> will not be caught. Ideally, don't keep secrets in notes at all — use a
+> password manager, or at least Bear's encrypted notes, which never leave
+> the app.
 
 ```sh
 bearcli export ~/bear-backup

{bearcli-1.2.0 → bearcli-1.2.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "bearcli"
-version = "1.2.0"
+version = "1.2.1"
 description = "The missing CLI for Bear notes — read, search, export, and manage your notes from the terminal"
 readme = "README.md"
 keywords = ["bear", "notes", "cli", "markdown", "macos"]