quote spaced secrets for shell consumers

cae0e8c4704bd6646309e8d603eadc414664b6a3 · 2026-08-29 14:06:26 -0700 · Steve Abrams

Files touched

M cli.js

Diff

commit cae0e8c4704bd6646309e8d603eadc414664b6a3
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sat Aug 29 14:06:26 2026 -0700

    quote spaced secrets for shell consumers
---
 cli.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/cli.js b/cli.js
index 4e1bfd2..8296781 100755
--- a/cli.js
+++ b/cli.js
@@ -106,7 +106,10 @@ function loadEnvFile(p) {
 function envEscape(v) {
   const s = String(v);
   if (s === '') return '';
-  if (/[#"'\n\r]|^\s|\s$/.test(s)) return '"' + s.replace(/(["\\])/g, '\\$1') + '"';
+  // Any whitespace requires quoting for shell-source consumers. Without this, an Authorization
+  // value such as `Basic abc...` is parsed by zsh as IG_AGENT_AUTH=Basic plus a command named
+  // `abc...`, silently exporting only "Basic" while Node's dotenv parser still appears healthy.
+  if (/[#"'\n\r\s]/.test(s)) return '"' + s.replace(/(["\\])/g, '\\$1') + '"';
   return s;
 }
 function writeEnvFile(p, kv, preserveComments = true) {

← 87ca939 auto-data-snapshot: 2026-08-29T12:47:37 (2 data files) — reg · back to Secrets Manager · register Norma reels authorization route 82baf8b →