@better-forge/vault 0.1.0 → 0.1.1

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 BetterStatusPage contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 BetterStatusPage contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,5 +1,5 @@
-# @better-forge/vault
-
-Local vault crypto, HashiCorp client, secret resolution and vault routes.
-
-Status: skeleton. Depends on: `@better-forge/db`.
+# @better-forge/vault
+
+Local vault crypto, HashiCorp client, secret resolution and vault routes.
+
+Status: skeleton. Depends on: `@better-forge/db`.

package/dist/migrations.js

@@ -1,27 +1,27 @@
 /** Vaults and the secrets in them. Steps run in this order. */
 export const vaultMigrations = [
-    { kind: 'exec', sql: `
-CREATE TABLE IF NOT EXISTS vaults (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  name TEXT NOT NULL,
-  type TEXT NOT NULL DEFAULT 'local',
-  description TEXT,
-  created_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL
-);
+    { kind: 'exec', sql: `
+CREATE TABLE IF NOT EXISTS vaults (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  name TEXT NOT NULL,
+  type TEXT NOT NULL DEFAULT 'local',
+  description TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
 ` },
-    { kind: 'exec', sql: `
-CREATE TABLE IF NOT EXISTS vault_secrets (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  vault_id INTEGER NOT NULL,
-  name TEXT NOT NULL,
-  type TEXT NOT NULL,
-  encrypted_value TEXT NOT NULL,
-  created_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL,
-  FOREIGN KEY (vault_id) REFERENCES vaults(id) ON DELETE CASCADE,
-  UNIQUE (vault_id, name)
-);
+    { kind: 'exec', sql: `
+CREATE TABLE IF NOT EXISTS vault_secrets (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  vault_id INTEGER NOT NULL,
+  name TEXT NOT NULL,
+  type TEXT NOT NULL,
+  encrypted_value TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  FOREIGN KEY (vault_id) REFERENCES vaults(id) ON DELETE CASCADE,
+  UNIQUE (vault_id, name)
+);
 ` },
     { kind: 'column', sql: `ALTER TABLE vaults ADD COLUMN connection_config TEXT`, desc: 'vaults.connection_config' },
 ];

package/package.json

@@ -1,56 +1,56 @@
-{
-  "name": "@better-forge/vault",
-  "version": "0.1.0",
-  "description": "Local vault crypto, HashiCorp client, secret resolution and vault routes.",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/BElluu/Better-Forge.git",
-    "directory": "packages/vault"
-  },
-  "homepage": "https://github.com/BElluu/Better-Forge/tree/main/packages/vault#readme",
-  "bugs": {
-    "url": "https://github.com/BElluu/Better-Forge/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "dist",
-    "src",
-    "!src/**/*.test.*"
-  ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "dev": "tsc -p tsconfig.json --watch --preserveWatchOutput"
-  },
-  "peerDependencies": {
-    "drizzle-orm": "^0.45.2",
-    "fastify": "^5.3.2",
-    "undici": "^7.4.0"
-  },
-  "devDependencies": {
-    "@types/node": "^26.6.2",
-    "drizzle-orm": "^0.45.2",
-    "fastify": "^5.3.2",
-    "typescript": "^5.7.3",
-    "undici": "^7.4.0"
-  },
-  "dependencies": {
-    "@better-forge/contracts": "0.1.0",
-    "@better-forge/db": "0.1.0"
-  },
-  "engines": {
-    "node": ">=26.10.0"
-  }
-}
+{
+  "name": "@better-forge/vault",
+  "version": "0.1.1",
+  "description": "Local vault crypto, HashiCorp client, secret resolution and vault routes.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/BElluu/Better-Forge.git",
+    "directory": "packages/vault"
+  },
+  "homepage": "https://github.com/BElluu/Better-Forge/tree/main/packages/vault#readme",
+  "bugs": {
+    "url": "https://github.com/BElluu/Better-Forge/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "src",
+    "!src/**/*.test.*"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch --preserveWatchOutput"
+  },
+  "peerDependencies": {
+    "drizzle-orm": "^0.45.2",
+    "fastify": "^5.3.2",
+    "undici": "^7.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.2",
+    "drizzle-orm": "^0.45.2",
+    "fastify": "^5.3.2",
+    "typescript": "^5.7.3",
+    "undici": "^7.4.0"
+  },
+  "dependencies": {
+    "@better-forge/contracts": "0.1.1",
+    "@better-forge/db": "0.1.1"
+  },
+  "engines": {
+    "node": ">=26.10.0"
+  }
+}

package/src/createVault.ts

@@ -1,45 +1,45 @@
-import type { FastifyRequest } from 'fastify'
-import type { SqliteDatabase } from '@better-forge/db'
-import { createHashicorp } from './hashicorp.js'
-import { createSecretBox, type SecretBox } from './secretBox.js'
-import { createSecretResolver } from './resolveSecret.js'
-import { createVaultRoutes, type VaultAudit } from './vaultRoutes.js'
-
-export interface VaultOptions {
-  /** The application's database handle. It is used lazily, so it may be opened after this is created. */
-  db: SqliteDatabase
-  audit: VaultAudit
-  /** The signed-in caller of a request; the routes sit behind the application's own guards. */
-  identity: (req: FastifyRequest) => { userId: number; email: string }
-  /** Where the encryption key comes from. Defaults to the process environment. */
-  env?: NodeJS.ProcessEnv
-  /** A box the application already created, for the tables that seal their own columns; it is made from `env` when absent. */
-  secretBox?: SecretBox
-}
-
-/**
- * Vaults of secrets (kept encrypted here, or read live from HashiCorp Vault), the lookup that turns a reference into
- * its value, and the routes that manage them. Everything is built from `options` and kept in the returned closures.
- */
-export function createVault(options: VaultOptions) {
-  const secretBox = options.secretBox ?? createSecretBox(options.env ? { env: options.env } : {})
-  const ctx = { db: options.db, secretBox }
-  const hashicorp = createHashicorp(ctx)
-  const resolver = createSecretResolver(ctx, hashicorp)
-  const routes = createVaultRoutes({ ...ctx, audit: options.audit, identity: options.identity }, { hashicorp, resolver })
-
-  return {
-    secretBox,
-    hashicorp,
-    resolver,
-    /** Plain plugins, so the hooks of the scope they are registered in apply to them. */
-    routes: {
-      /** Read-only catalogue of vault and secret names and types, never values. */
-      catalogue: routes.vaultCatalogRoutes,
-      /** Create, change, reveal and delete vaults and secrets. */
-      manage: routes.vaultRoutes,
-    },
-  }
-}
-
-export type Vault = ReturnType<typeof createVault>
+import type { FastifyRequest } from 'fastify'
+import type { SqliteDatabase } from '@better-forge/db'
+import { createHashicorp } from './hashicorp.js'
+import { createSecretBox, type SecretBox } from './secretBox.js'
+import { createSecretResolver } from './resolveSecret.js'
+import { createVaultRoutes, type VaultAudit } from './vaultRoutes.js'
+
+export interface VaultOptions {
+  /** The application's database handle. It is used lazily, so it may be opened after this is created. */
+  db: SqliteDatabase
+  audit: VaultAudit
+  /** The signed-in caller of a request; the routes sit behind the application's own guards. */
+  identity: (req: FastifyRequest) => { userId: number; email: string }
+  /** Where the encryption key comes from. Defaults to the process environment. */
+  env?: NodeJS.ProcessEnv
+  /** A box the application already created, for the tables that seal their own columns; it is made from `env` when absent. */
+  secretBox?: SecretBox
+}
+
+/**
+ * Vaults of secrets (kept encrypted here, or read live from HashiCorp Vault), the lookup that turns a reference into
+ * its value, and the routes that manage them. Everything is built from `options` and kept in the returned closures.
+ */
+export function createVault(options: VaultOptions) {
+  const secretBox = options.secretBox ?? createSecretBox(options.env ? { env: options.env } : {})
+  const ctx = { db: options.db, secretBox }
+  const hashicorp = createHashicorp(ctx)
+  const resolver = createSecretResolver(ctx, hashicorp)
+  const routes = createVaultRoutes({ ...ctx, audit: options.audit, identity: options.identity }, { hashicorp, resolver })
+
+  return {
+    secretBox,
+    hashicorp,
+    resolver,
+    /** Plain plugins, so the hooks of the scope they are registered in apply to them. */
+    routes: {
+      /** Read-only catalogue of vault and secret names and types, never values. */
+      catalogue: routes.vaultCatalogRoutes,
+      /** Create, change, reveal and delete vaults and secrets. */
+      manage: routes.vaultRoutes,
+    },
+  }
+}
+
+export type Vault = ReturnType<typeof createVault>