revault_api 0.4.1-x86_64-linux → 0.5.1-x86_64-linux
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +24 -20
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 514df79a07502e13ab04078ce8fab1951cc17b913b1a292e220ee7179fe0b26c
|
|
4
|
+
data.tar.gz: c29c4efefea330630388af85dacf7defb7b586cf82a1d34b5a6149317ff75fa7
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: cc7b554ab13dcc06d5978ecaea18ae2eaeb4163ea38db91e48e7a5621154030309b0db887781f17bf586c858911b44179f33604810dcf09ac332e143afdd3cab
|
|
7
|
+
data.tar.gz: 341503b9d9d21f53e13805c2a3878c4b1130b794fcbc4b608e0305b2615a94e3f734c927b45c79de90c98e82efdf7c78406dc0a832e146c1138eeb0d38f8db2b
|
data/README.md
CHANGED
|
@@ -16,6 +16,11 @@ the archive, and recover data from partial corruption.
|
|
|
16
16
|
Read the [reVault manual](https://docs.revault.onepub.dev/) for the quick start,
|
|
17
17
|
core concepts, and security model.
|
|
18
18
|
|
|
19
|
+
The [project goals](manual/project-goals.md) state reVault's purpose and
|
|
20
|
+
priorities. Contributors should use the [v4 work entry point](docs/archive_v4_plan.md)
|
|
21
|
+
to locate the implementation branch and its plan, and the
|
|
22
|
+
[documentation map](docs/documentation_map.md) to find maintained references.
|
|
23
|
+
|
|
19
24
|
reVault runs on Linux, macOS, and Windows. You can use it through the command
|
|
20
25
|
line interface or through libraries for supported programming languages.
|
|
21
26
|
|
|
@@ -118,10 +123,10 @@ including its include and exclude rules, is encrypted inside the lockbox and
|
|
|
118
123
|
travels with it.
|
|
119
124
|
|
|
120
125
|
```bash
|
|
121
|
-
lbx secrets.lbox
|
|
122
|
-
lbx secrets.lbox
|
|
123
|
-
lbx secrets.lbox
|
|
124
|
-
lbx secrets.lbox
|
|
126
|
+
lbx secrets.lbox mirrors source create --from ./src --to /projects/source
|
|
127
|
+
lbx secrets.lbox mirrors source rules add exclude target/** '*.tmp'
|
|
128
|
+
lbx secrets.lbox mirrors source status
|
|
129
|
+
lbx secrets.lbox mirrors source update
|
|
125
130
|
```
|
|
126
131
|
|
|
127
132
|
`status` previews the complete plan; `update` recalculates and applies it.
|
|
@@ -158,7 +163,7 @@ See [docs/cli_how_to.md](docs/cli_how_to.md) for command-focused examples.
|
|
|
158
163
|
Create another local profile:
|
|
159
164
|
|
|
160
165
|
```bash
|
|
161
|
-
lockbox vault
|
|
166
|
+
lockbox vault profiles create laptop
|
|
162
167
|
```
|
|
163
168
|
|
|
164
169
|
Create an independent encrypted vault with a fresh profile and register that
|
|
@@ -180,14 +185,14 @@ material from the current vault.
|
|
|
180
185
|
List profiles and export a public key:
|
|
181
186
|
|
|
182
187
|
```bash
|
|
183
|
-
lockbox vault
|
|
184
|
-
lockbox vault
|
|
188
|
+
lockbox vault profiles list
|
|
189
|
+
lockbox vault profiles export ./laptop.pub --name laptop
|
|
185
190
|
```
|
|
186
191
|
|
|
187
192
|
Import a contact public key after independently verifying its fingerprint:
|
|
188
193
|
|
|
189
194
|
```bash
|
|
190
|
-
lockbox vault
|
|
195
|
+
lockbox vault contacts import alice ./alice.pub \
|
|
191
196
|
--fingerprint <fingerprint> \
|
|
192
197
|
--fingerprint-channel phone-call-to-owner
|
|
193
198
|
```
|
|
@@ -210,7 +215,7 @@ Exporting a private key is supported for backup and migration, but treat the
|
|
|
210
215
|
output as a secret:
|
|
211
216
|
|
|
212
217
|
```bash
|
|
213
|
-
lockbox vault
|
|
218
|
+
lockbox vault profiles backup ./default.profile-backup
|
|
214
219
|
```
|
|
215
220
|
|
|
216
221
|
Private vault keys are stored inside the local vault as secret variable records,
|
|
@@ -221,23 +226,22 @@ not as normal files in the vault lockbox. See the CLI help and
|
|
|
221
226
|
|
|
222
227
|
Variables are encrypted metadata, not files. They do not appear in file
|
|
223
228
|
listings and are loaded only when variable commands or APIs request them. The
|
|
224
|
-
|
|
225
|
-
aliases.
|
|
229
|
+
command group is `variables`.
|
|
226
230
|
|
|
227
231
|
Plain variables are for values that are useful configuration but not high-value
|
|
228
232
|
secrets:
|
|
229
233
|
|
|
230
234
|
```bash
|
|
231
|
-
lockbox secrets.lbox
|
|
232
|
-
lockbox secrets.lbox
|
|
233
|
-
lockbox secrets.lbox
|
|
235
|
+
lockbox secrets.lbox variables set DATABASE_URL --value 'postgres://localhost/app'
|
|
236
|
+
lockbox secrets.lbox variables set DATABASE_URL='postgres://localhost/app'
|
|
237
|
+
lockbox secrets.lbox variables get DATABASE_URL
|
|
234
238
|
```
|
|
235
239
|
|
|
236
240
|
With a session-default lockbox, assignment syntax is also supported:
|
|
237
241
|
|
|
238
242
|
```bash
|
|
239
|
-
lockbox
|
|
240
|
-
lockbox
|
|
243
|
+
lockbox variables set DATABASE_URL='postgres://localhost/app'
|
|
244
|
+
lockbox variables set DATABASE_URL 'postgres://localhost/app'
|
|
241
245
|
```
|
|
242
246
|
|
|
243
247
|
Secret variables are for passwords, API tokens, signing keys, and similar
|
|
@@ -245,10 +249,10 @@ material. They use secure-memory handling in the variable path and must be provi
|
|
|
245
249
|
through an explicit source:
|
|
246
250
|
|
|
247
251
|
```bash
|
|
248
|
-
lockbox secrets.lbox
|
|
249
|
-
lockbox secrets.lbox
|
|
250
|
-
lockbox secrets.lbox
|
|
251
|
-
lockbox secrets.lbox
|
|
252
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --interactive
|
|
253
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --file ./api-token.txt
|
|
254
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --stdin
|
|
255
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --from-env API_TOKEN
|
|
252
256
|
```
|
|
253
257
|
|
|
254
258
|
Avoid passing secrets as command-line arguments. Shell history and process
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: revault_api
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.5.1
|
|
5
5
|
platform: x86_64-linux
|
|
6
6
|
authors:
|
|
7
7
|
- OnePub
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2026-
|
|
11
|
+
date: 2026-10-15 00:00:00.000000000 Z
|
|
12
12
|
dependencies: []
|
|
13
13
|
description: Complete class-based reVault lockbox and vault API
|
|
14
14
|
email:
|