vaultkit 0.1.0 → 0.1.1

data/lib/vkit/cli/base_cli.rb

@@ -157,7 +157,7 @@ module Vkit
 
         desc "deploy", "Deploy a policy bundle to VaultKit"
         option :bundle, type: :string, default: "dist/policy_bundle.json"
-        option :org, type: :string, required: true
+        option :org, type: :string
         option :activate, type: :boolean, default: true
 
         def deploy

data/lib/vkit/cli/commands/base_command.rb

@@ -1,3 +1,5 @@
+require_relative "../api/client"
+
 module Vkit
   module CLI
     module Commands

data/lib/vkit/cli/commands/policy_bundle_command.rb

@@ -1,10 +1,13 @@
+# frozen_string_literal: true
+
 require "json"
+require "fileutils"
 require_relative "../../policy/bundle_compiler"
 
 module Vkit
   module CLI
     module Commands
-      class PolicyBundleCommand
+      class PolicyBundleCommand < BaseCommand
         def call(policies_dir:, registry_dir:, out:, org:, version:)
           policies_dir = File.expand_path(policies_dir)
           registry_dir = File.expand_path(registry_dir)
@@ -15,26 +18,46 @@ module Vkit
 
           version ||= git_sha
 
-          bundle = Vkit::Policy::BundleCompiler.compile!(
-            org_slug: org || "unknown",
-            bundle_version: version,
-            policies_dir: policies_dir,
-            registry_dir: registry_dir,
-            source: {
-              repo: git_repo,
-              ref: git_ref,
-              commit_sha: version
-            }
-          )
-
-          FileUtils.mkdir_p(File.dirname(out))
-          File.write(out, JSON.pretty_generate(bundle))
-
-          puts "✅ Policy bundle created"
-          puts "   Org:     #{bundle.dig("bundle", "org_slug")}"
-          puts "   Version: #{bundle.dig("bundle", "bundle_version")}"
-          puts "   Checksum: #{bundle.dig("bundle", "checksum")}"
-          puts "   Output:  #{out}"
+          with_auth do
+            derived_org = credential_store.user["organization_slug"]
+
+            raise "Unable to determine organization from credentials. Please login." \
+              if derived_org.nil? || derived_org.empty?
+
+            if org && org != derived_org
+              raise <<~MSG
+                Organization mismatch detected.
+
+                  Authenticated organization: #{derived_org}
+                  Provided via --org:          #{org}
+
+                Refusing to continue to prevent cross-organization policy bundles.
+              MSG
+            end
+
+            org_slug = org || derived_org
+
+            bundle = Vkit::Policy::BundleCompiler.compile!(
+              org_slug: org_slug,
+              bundle_version: version,
+              policies_dir: policies_dir,
+              registry_dir: registry_dir,
+              source: {
+                repo: git_repo,
+                ref: git_ref,
+                commit_sha: version
+              }
+            )
+
+            FileUtils.mkdir_p(File.dirname(out))
+            File.write(out, JSON.pretty_generate(bundle))
+
+            puts "✅ Policy bundle created"
+            puts "   Org:      #{bundle.dig("bundle", "org_slug")}"
+            puts "   Version:  #{bundle.dig("bundle", "bundle_version")}"
+            puts "   Checksum: #{bundle.dig("bundle", "checksum")}"
+            puts "   Output:   #{out}"
+          end
         end
 
         private

data/lib/vkit/cli/commands/policy_deploy_command.rb

@@ -11,10 +11,28 @@ module Vkit
             bundle_path = File.expand_path(bundle_path)
             raise "Bundle not found: #{bundle_path}" unless File.exist?(bundle_path)
 
+            derived_org = credential_store.user["organization_slug"]
+
+            raise "Unable to determine organization from credentials. Please login." \
+              if derived_org.nil? || derived_org.empty?
+
+            if org && org != derived_org
+              raise <<~MSG
+                Organization mismatch detected.
+
+                  Authenticated organization: #{derived_org}
+                  Provided via --org:          #{org}
+
+                Refusing to deploy policy bundle to a different organization.
+              MSG
+            end
+
+            org_slug = org || derived_org
+
             bundle = JSON.parse(File.read(bundle_path))
 
             response = authenticated_client.post(
-              "/api/v1/orgs/#{org}/policy_bundles",
+              "/api/v1/orgs/#{org_slug}/policy_bundles",
               body: {
                 bundle: bundle,
                 activate: activate
@@ -22,6 +40,7 @@ module Vkit
             )
 
             puts "🚀 Policy bundle deployed"
+            puts "   Org:     #{org_slug}"
             puts "   Version: #{response['bundle_version']}"
             puts "   State:   #{response['state']}"
           end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: vaultkit
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Nnamdi Ogundu
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-01-03 00:00:00.000000000 Z
+date: 2026-01-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -68,7 +68,7 @@ files:
 - lib/vkit/utils/logger.rb
 homepage: https://vaultkit.io
 licenses:
-- Proprietary
+- Nonstandard
 metadata:
   rubygems_mfa_required: 'true'
   source_code_uri: https://github.com/ndbaba1/vaultkitcli