secshare-cli 0.2.0__tar.gz → 0.2.1__tar.gz

{secshare_cli-0.2.0 → secshare_cli-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: secshare-cli
-Version: 0.2.0
+Version: 0.2.1
 Summary: CLI for SecShare — zero-knowledge secret sharing
 Project-URL: Homepage, https://secshare.link
 Project-URL: Source, https://github.com/rdney/secshare

{secshare_cli-0.2.0 → secshare_cli-0.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "secshare-cli"
-version = "0.2.0"
+version = "0.2.1"
 description = "CLI for SecShare — zero-knowledge secret sharing"
 readme = "README.md"
 requires-python = ">=3.11"

{secshare_cli-0.2.0 → secshare_cli-0.2.1}/secshare_cli/cli.py

@@ -127,14 +127,20 @@ def whoami():
 
 @cli.command()
 @click.argument("link")
-def get(link):
+@click.option("--show", is_flag=True, help="Print plaintext to terminal (use only when not piping).")
+def get(link, show):
     """Fetch and decrypt a secret.
 
     \b
-    Examples:
-      secshare get https://secshare.link/s/abc123#KEY
+    Inject .env secrets into your shell (recommended):
       eval "$(secshare get https://secshare.link/s/abc123#KEY)"
+
+    \b
+    Explicitly print to terminal:
+      secshare get https://secshare.link/s/abc123#KEY --show
     """
+    import sys
+
     try:
         secret_id, key_fragment = _parse_link(link)
         data = fetch_secret(secret_id)
@@ -144,6 +150,13 @@ def get(link):
     except Exception as e:
         raise click.ClickException(str(e))
 
+    if sys.stdout.isatty() and not show:
+        raise click.ClickException(
+            "Refusing to print secret to terminal.\n"
+            "  To inject into your shell:  eval \"$(secshare get <link>)\"\n"
+            "  To print explicitly:        secshare get <link> --show"
+        )
+
     # .env payload — output KEY=VALUE lines
     try:
         parsed = json.loads(plaintext)