@forgezero/vault 0.1.13 → 0.1.15

package/README.md

@@ -35,12 +35,12 @@ Every row links to the detailed explanation and named-import/example area below.
 
 | public entry | short description | runtime | details |
 |---|---|---|---|
-| @forgezero/vault | One scoped contract over an explicitly injected platform backend, a managed tenant socket or an automatically derived external API-key signer. | portable | [Details + example](#forgezero-vault) |
-| @forgezero/vault/schema | Where an entry’s shape comes from: pulled from the platform when ForgeZero has to render it, declared locally when only the tenant needs it. | portable | [Details + example](#forgezero-vault-schema) |
-| @forgezero/vault/config | Read `.fz/config.json` — which project, which environment, which secrets, and what to call them. | portable | [Details + example](#forgezero-vault-config) |
-| @forgezero/vault/env | Envless: fill `process.env` from the vault at boot, refusing to run during a build. | portable | [Details + example](#forgezero-vault-env) |
-| @forgezero/vault/frameworks | SvelteKit and Next.js wiring, attached at the one place that runs once, on the server, before any request. | portable | [Details + example](#forgezero-vault-frameworks) |
-| @forgezero/vault/providers | Adapters that make Vault a provider-configuration and credential source without coupling the providers package to ForgeZero. | portable | [Details + example](#forgezero-vault-providers) |
+| @forgezero/vault | One scoped contract over an explicitly injected platform backend, a managed tenant socket or an automatically derived external API-key signer. | portable | [Reference + usage](#forgezero-vault) |
+| @forgezero/vault/schema | Where an entry’s shape comes from: pulled from the platform when ForgeZero has to render it, declared locally when only the tenant needs it. | portable | [Reference + usage](#forgezero-vault-schema) |
+| @forgezero/vault/config | Read `.fz/config.json` — which project, which environment, which secrets, and what to call them. | portable | [Reference + usage](#forgezero-vault-config) |
+| @forgezero/vault/env | Envless: fill `process.env` from the vault at boot, refusing to run during a build. | portable | [Reference + usage](#forgezero-vault-env) |
+| @forgezero/vault/frameworks | SvelteKit and Next.js wiring, attached at the one place that runs once, on the server, before any request. | portable | [Reference + usage](#forgezero-vault-frameworks) |
+| @forgezero/vault/providers | Adapters that make Vault a provider-configuration and credential source without coupling the providers package to ForgeZero. | portable | [Reference + usage](#forgezero-vault-providers) |
 
 ## Commands
 
@@ -171,6 +171,18 @@ import type {
 } from '@forgezero/vault/config';
 ```
 
+## @forgezero/vault/config — Use this entry point
+
+This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
+
+```text
+import {
+  CONFIG_PATHS,
+} from '@forgezero/vault/config';
+
+export const selectedCapability = CONFIG_PATHS;
+```
+
 <a id="forgezero-vault-env"></a>
 ## @forgezero/vault/env
 
@@ -192,6 +204,18 @@ import type {
 } from '@forgezero/vault/env';
 ```
 
+## @forgezero/vault/env — Use this entry point
+
+This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
+
+```text
+import {
+  EnvError,
+} from '@forgezero/vault/env';
+
+export const selectedCapability = EnvError;
+```
+
 <a id="forgezero-vault-frameworks"></a>
 ## @forgezero/vault/frameworks
 
@@ -213,6 +237,18 @@ import type {
 } from '@forgezero/vault/frameworks';
 ```
 
+## @forgezero/vault/frameworks — Use this entry point
+
+This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
+
+```text
+import {
+  bootstrapEnv,
+} from '@forgezero/vault/frameworks';
+
+export const selectedCapability = bootstrapEnv;
+```
+
 <a id="forgezero-vault-providers"></a>
 ## @forgezero/vault/providers
 
@@ -231,6 +267,18 @@ import type {
 } from '@forgezero/vault/providers';
 ```
 
+## @forgezero/vault/providers — Use this entry point
+
+This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
+
+```text
+import {
+  vaultConfig,
+} from '@forgezero/vault/providers';
+
+export const selectedCapability = vaultConfig;
+```
+
 ## Three paths, and why they stay explicit
 
 Platform API logic already holds the requested realm master seed, so it opens the scoped envelope directly through an injected internal backend — no HTTP call, API key or local replica. A tenant on managed compute uses the local agent and its memory-only project scope. A tenant elsewhere signs HTTPS with an API-key seed. These share vault semantics and never silently fall through from a stronger posture to a weaker one.

package/dist/index.d.ts

@@ -282,4 +282,4 @@ export declare function systemdCredentials(options?: SystemdCredentialOptions):
     readonly name: 'systemd';
     get(reference: string, field: string): Promise<string>;
 };
-export declare const VERSION = "0.1.13";
+export declare const VERSION = "0.1.15";

package/dist/index.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.13";
+var VERSION = "0.1.15";
 export {
   vaultCredentials,
   systemdCredentials,

package/dist/providers.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.13";
+var VERSION = "0.1.15";
 
 // src/providers.ts
 var MISSING = new Set(["ENTRY_NOT_FOUND", "VERSION_NOT_FOUND"]);

package/dist/schema.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.13";
+var VERSION = "0.1.15";
 
 // src/schema.ts
 function managedSchemas(vault, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/vault",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "type": "module",
   "publishConfig": {
     "access": "public",
@@ -42,7 +42,7 @@
     "@types/bun": "latest"
   },
   "dependencies": {
-    "@forgezero/runtime": "^0.1.9"
+    "@forgezero/runtime": "^0.1.11"
   },
   "peerDependencies": {
     "@noble/curves": "^2.2.0",