localvault 1.9.0 → 1.9.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f49d7a925b997780d6d03a2b071117e20da0827d24331d28c9cd5043a70b0056
-  data.tar.gz: 27b2be6fa5bb90d3df68eec4a27fcba483a175b574afd96f7aeba7dd0e175412
+  metadata.gz: 20aa094af163dfa0173fae2eabfc274da78badf84ebc37366bf85163f7b7f77d
+  data.tar.gz: f113382f8edb4a630732b56de9abe163470c0c377bbcbf64951fde108f6d5e0b
 SHA512:
-  metadata.gz: 7863c066d383db0a2ad4a98ae9665fe1fafc04de61b1fdbfec590d4af0ea04e47f31f1635a4c63d5886f0f71780a5f9f0ebd143348af23d404415991487dd214
-  data.tar.gz: b61cb7b5096ad2250560a1462f87ecfd81e538ed823971c46fe4820be3bb50443574055e40d0e080c7f4e5f7b7ce93d2d2f9cceedd03ea4f39a9a13141f35c44
+  metadata.gz: e65ac37ab002da71e42ed5d1e31369dd492982683e2817165060962777e197b8873b6c73c11761d2f7aa829c1c6729f7334691d83d16f0de858c59de2a8abbec
+  data.tar.gz: 2efaf71acba0f24beaa48313a88d0a9f58058d42f7c80a5ef439af76f29deac6df30435dd74868d04d1bbedf224e1d87499a647e32509cecf0895d696f453934

data/README.md

@@ -16,12 +16,29 @@ Part of [InventList Tools](https://inventlist.com/tools/localvault) — free, op
 brew install inventlist/tap/localvault
 ```
 
+### Install script (no Homebrew)
+
+```bash
+curl -sSL https://raw.githubusercontent.com/inventlist/localvault/main/install.sh | sh
+```
+
+Installs into an isolated prefix (`~/.localvault/runtime`) and writes a wrapper
+to your PATH that pins its own Ruby. It never adds a version-manager shim and
+never touches your project gems, so `localvault` keeps working when you switch
+Ruby versions. Override with `LOCALVAULT_BIN_DIR`, `LOCALVAULT_PREFIX`,
+`LOCALVAULT_VERSION`, or `LOCALVAULT_RUBY`.
+
 ### RubyGems
 
 ```bash
 gem install localvault
 ```
 
+A plain `gem install` under asdf/rbenv creates a shim that can shadow your
+Homebrew build and silently pin you to an old version. If `localvault version`
+disagrees with what you installed, run `localvault doctor` — it lists every
+copy on your PATH.
+
 **Requires libsodium:**
 
 ```bash

data/lib/localvault/cli/guard.rb

@@ -64,8 +64,9 @@ module LocalVault
         # missing PATH binary never breaks the user's sessions — but it also
         # silently guards nothing, which deserves a loud note at install time.
         def warn_if_path_binary_lacks_guard
-          help_output = `localvault help 2>/dev/null`
-          return if help_output.include?("guard")
+          # Probe the PATH binary itself: `guard status` exits 0 only where the
+          # command exists. Parsing curated help text is not a version check.
+          return if system("localvault guard status", out: File::NULL, err: File::NULL)
 
           $stderr.puts "Note: the `localvault` on your PATH does not support `guard hook` " \
                        "(old version or different install). The hook fails open and guards " \

data/lib/localvault/cli.rb

@@ -174,6 +174,8 @@ module LocalVault
       shell.say "  localvault mcp                Start MCP server (stdio)"
       shell.say "  localvault mcp --check        Check setup and active-vault readiness"
       shell.say "  Agents: list names, then use localvault_build_exec for safe injection"
+      shell.say "  localvault guard install      Block secrets in agent commands (Claude Code hooks)"
+      shell.say "  localvault guard status       Show guard hook installation state"
       shell.say ""
       shell.say "LEGACY SHARING  (pre-v1.2 direct share, still works as fallback)"
       shell.say "  localvault keygen             Generate X25519 keypair (same as `keys generate`)"

data/lib/localvault/version.rb

@@ -1,3 +1,3 @@
 module LocalVault
-  VERSION = "1.9.0"
+  VERSION = "1.9.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: localvault
 version: !ruby/object:Gem::Version
-  version: 1.9.0
+  version: 1.9.1
 platform: ruby
 authors:
 - Nauman Tariq