cli-7.100.0

🆕 Changelog

Added

• Interactive build credentials manage command for browsing, editing, exporting, and deleting build credentials through a keyboard-driven terminal interface
• Platform-specific credential management with support for adding configuration options (BUILD_OUTPUT_UPLOAD_ENABLED, BUILD_OUTPUT_RETENTION_SECONDS, SKIP_BUILD_NUMBER_BUMP, distribution modes, build flavors, schemes, and targets)
• Credential inspector with per-field actions: show raw value, decode base64, copy to clipboard, edit with type-aware prompts, explain field purpose, and remove
• Export credentials to CI/CD-ready .env files with secure 0600 file permissions and native macOS file picker support
• --platform flag for scoping credential operations to iOS or Android only
• Auto-detection of current app from capacitor.config for single-app projects

Changed

• Credential export now uses base64 encoding for provisioning maps to prevent newline and quoting issues in CI secret stores
• Credential inspector displays platform drift as separate rows when shared fields differ between iOS and Android
• Navigation flow in Add sub-menus now returns one level up on Esc instead of bubbling to main menu

Fixed

• Exported .env files now correctly enforce 0600 permissions even when overwriting existing files
• Secret redaction in decoded JSON output now hides sensitive keys (private_key, client_secret, api_key, passwords, tokens) while preserving structure

Security

• Build credential files are always created with restrictive 0600 permissions to prevent unauthorized access
• Sensitive JSON fields are automatically redacted when decoding base64 credential values in the terminal

---

🔗 Full Changelog: capgo-12.137.3...cli-7.100.0