keyabra 0.1.0

Securely prompt for API tokens and run CLI commands — no notepad copy-paste dance

keyabra

Prompt for API tokens once, run the command — no export/copy/delete/notepad loop.

Part of the spell family: binabra (bin anchor) → keyabra (key/token input).

Install

pip install keyabra

Also need twine and build for PyPI uploads:

pip install build twine

Publish binabra (or any project)

cd ~/Projects/binabra
keyabra pypi publish

That will:

1. Run python -m build if dist/ is empty
2. Prompt: PyPI token (pypi-...): (hidden input)
3. Run twine upload — token never hits disk or your shell history

Other commands

keyabra pypi upload dist/*
keyabra pypi publish ~/Projects/binabra --skip-build

# Generic — any secret env var + any command
keyabra run --env GITHUB_TOKEN -- gh auth status
keyabra run --env TWINE_PASSWORD --env TWINE_USERNAME -- twine upload dist/*

Publish keyabra itself

First upload needs an account-scoped PyPI token: https://pypi.org/manage/account/token/

cd ~/Projects/keyabra
python3 -m pip install --user build twine
python3 -m build
keyabra pypi publish --skip-build   # after build, uses prompted token

Security

• Uses getpass — token is not echoed
• Token lives only in process memory for the subprocess
• Never written to files or shell history