vaultkit 1.0.0 → 1.0.2

data/lib/vkit/policy/packs/starter/policies/05_limit_production_access.yaml

@@ -0,0 +1,16 @@
+id: limit_production_access
+description: "Restrict production data access to approved roles."
+
+match: {}
+
+context:
+  environment: production
+  requester_role: analyst
+
+priority: 70
+
+action:
+  require_approval: true
+  approver_role: admin
+  reason: "Production access for analysts requires approval."
+  ttl: "2h"

data/lib/vkit/policy/packs/starter/policies/06_default_ttl.yaml

@@ -0,0 +1,10 @@
+id: default_ttl_for_allows
+description: "Apply a default TTL to allow decisions."
+
+match: {}
+
+priority: 10
+
+action:
+  allow: true
+  ttl: "4h"

data/lib/vkit/policy/schema/policy_bundle.schema.json

@@ -67,7 +67,22 @@
             "min_control_plane": { "type": "string" },
             "max_control_plane": { "type": "string" }
           }
+        },
+
+        "installed_packs": {
+          "type": "array",
+          "description": "List of policy packs active when this bundle was compiled.",
+          "items": {
+            "type": "object",
+            "required": ["name", "version"],
+            "additionalProperties": false,
+            "properties": {
+              "name": { "type": "string" },
+              "version": { "type": "string" }
+            }
+          }
         }
+
       }
     },
 
@@ -138,7 +153,7 @@
           }
         }
       }
-    },    
+    },
 
     "policies": {
       "type": "array",

data/lib/vkit/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Vkit
-  VERSION = "1.0.0"
+  VERSION = "1.0.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: vaultkit
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.2
 platform: ruby
 authors:
 - Nnamdi Ogundu
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-01-22 00:00:00.000000000 Z
+date: 2026-02-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -44,26 +44,53 @@ files:
 - lib/vkit/cli/commands/agent_tokens_list_command.rb
 - lib/vkit/cli/commands/agent_tokens_revoke_command.rb
 - lib/vkit/cli/commands/approval_command.rb
+- lib/vkit/cli/commands/approval_watch_command.rb
 - lib/vkit/cli/commands/base_command.rb
 - lib/vkit/cli/commands/datasource_command.rb
 - lib/vkit/cli/commands/fetch_command.rb
+- lib/vkit/cli/commands/grant_revoke_command.rb
+- lib/vkit/cli/commands/init_command.rb
 - lib/vkit/cli/commands/login_command.rb
 - lib/vkit/cli/commands/logout_command.rb
 - lib/vkit/cli/commands/policy_bundle_command.rb
 - lib/vkit/cli/commands/policy_deploy_command.rb
+- lib/vkit/cli/commands/policy_pack_add_command.rb
+- lib/vkit/cli/commands/policy_pack_info_command.rb
+- lib/vkit/cli/commands/policy_pack_list_command.rb
+- lib/vkit/cli/commands/policy_pack_remove_command.rb
+- lib/vkit/cli/commands/policy_pack_upgrade_command.rb
+- lib/vkit/cli/commands/policy_revoke_command.rb
 - lib/vkit/cli/commands/policy_validate_command.rb
 - lib/vkit/cli/commands/request_command.rb
 - lib/vkit/cli/commands/requests_list_command.rb
+- lib/vkit/cli/commands/reset_command.rb
 - lib/vkit/cli/commands/scan_command.rb
 - lib/vkit/cli/commands/whoami_command.rb
 - lib/vkit/cli/errors.rb
 - lib/vkit/cli/policy_bundle_validator.rb
+- lib/vkit/cli/policy_pack/manager.rb
 - lib/vkit/cli/requests_cli.rb
 - lib/vkit/core/auth_client.rb
 - lib/vkit/core/credential_resolver.rb
 - lib/vkit/core/credential_store.rb
 - lib/vkit/core/table_formatter.rb
 - lib/vkit/policy/bundle_compiler.rb
+- lib/vkit/policy/packs/ai_safety/metadata.yaml
+- lib/vkit/policy/packs/ai_safety/policies/01_deny_agent_prod_without_clearance.yaml
+- lib/vkit/policy/packs/ai_safety/policies/02_require_approval_for_sensitive_in_prod.yaml
+- lib/vkit/policy/packs/ai_safety/policies/03_mask_sensitive_by_default_for_agents.yaml
+- lib/vkit/policy/packs/financial_compliance/metadata.yaml
+- lib/vkit/policy/packs/financial_compliance/policies/01_require_approval_for_financial_prod.yaml
+- lib/vkit/policy/packs/financial_compliance/policies/02_mask_payment_tokens.yaml
+- lib/vkit/policy/packs/financial_compliance/policies/03_deny_non_admin_access_pci_in_prod.yaml
+- lib/vkit/policy/packs/financial_compliance/policies/04_short_ttl_for_financial_grants.yaml
+- lib/vkit/policy/packs/starter/metadata.yaml
+- lib/vkit/policy/packs/starter/policies/01_deny_sensitive_without_clearance.yaml
+- lib/vkit/policy/packs/starter/policies/02_mask_pii_by_default.yaml
+- lib/vkit/policy/packs/starter/policies/03_require_approval_high_sensitivity.yaml
+- lib/vkit/policy/packs/starter/policies/04_block_cross_region.yaml
+- lib/vkit/policy/packs/starter/policies/05_limit_production_access.yaml
+- lib/vkit/policy/packs/starter/policies/06_default_ttl.yaml
 - lib/vkit/policy/policy_validator.rb
 - lib/vkit/policy/schema/policy_bundle.schema.json
 - lib/vkit/policy/validate_bundle.rb