fix(cli): exit after interactive secret input

[TheodoreSpeaks]

Summary

• Stop interactive secret entry from keeping stdin active after completion
• Add Node stream-state regression coverage and bump the CLI to 2.1.2

Type of Change

• Bug fix

Testing

• Manually verified the interactive process exits successfully
• Passed CLI tests, type check, production build, root lint, block registry, docs manifest, and all repo audits

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 26, 2026 7:38pm

[greptile-apps]

Greptile Summary

This PR updates interactive secret entry to pause stdin after completion or cancellation so the CLI process can exit normally.

• Unconditionally pauses the input stream during secret-prompt cleanup.
• Adds regression coverage using Node-compatible readableFlowing semantics.
• Bumps the sim CLI package from 2.1.1 to 2.1.2 in the manifest and lockfile.

Confidence Score: 5/5

The PR appears safe to merge, with the stdin lifecycle fix covered by focused regression tests and no reachable caller regression identified.

The only production caller finishes its secret interaction before performing non-interactive request and rendering work, while release metadata remains consistently derived from the package manifest.

Important Files Changed

Filename	Overview
packages/sim-cli/src/terminal/secret-input.ts	Cleanup now always pauses stdin after restoring raw mode, addressing the process-liveness issue without disrupting any current caller.
packages/sim-cli/src/terminal/secret-input.test.ts	The fake stream now models Node's idle and flowing states and verifies pausing after successful and cancelled prompts.
packages/sim-cli/package.json	Bumps the published CLI version to 2.1.2 consistently with the lockfile.
bun.lock	Updates the sim-cli workspace package metadata to version 2.1.2.

_{Reviews (1): Last reviewed commit: "fix(cli): exit after interactive secret ..." | Re-trigger Greptile}

[cubic-dev-ai]

No issues found across 4 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}