@forgezero/vault 0.1.17 → 0.1.19

package/README.md

@@ -11,7 +11,7 @@ One scoped contract over platform-direct, managed-agent and external API-key tru
 
 ## Package overview
 
-The scoped vault facade. A tenant application uses its local agent or an API key; trusted platform code injects a direct realm backend instead of calling itself. The one package that ends up in somebody else's production dependency tree, which is why it stays alone and stays small. Supported runtimes: bun, node, workers, deno. Package root: @forgezero/vault. The sections below show the actual named imports emitted by each declaration entry point; wildcard imports are intentionally not used in the documentation.
+The scoped vault facade. A tenant application uses its local agent or an API key; trusted platform code injects a direct realm backend instead of calling itself. The one package that ends up in somebody else's production dependency tree, which is why it stays alone and stays small. Supported runtimes: bun, node, workers, deno. Package root: @forgezero/vault. Consumer documentation is curated with each module's explicit public flag; the complete internal/export inventory remains in the typed SSOT and declaration files.
 
 ```text
 bun add @forgezero/vault
@@ -29,9 +29,9 @@ The five packages are installation boundaries. Choose a package by who installs
 | @forgezero/runtime | Portable runtime primitives for queries, jobs, events, schemas and finance. | bun, node | [Open](https://www.forgezero.net/docs/runtime) |
 | @forgezero/agent | Operator CLI and managed-node agent for bootstrap, deploy and lifecycle. | bun, node | [Open](https://www.forgezero.net/docs/agent) |
 
-## @forgezero/vault public imports and commands
+## @forgezero/vault supported imports and commands
 
-Every row links to the detailed explanation and named-import/example area below. This table and those details are generated from the package inventory and emitted declarations.
+These are supported consumer entry points, not every internal module shipped for ForgeZero managed installation. Each row links to its task-oriented usage.
 
 | public entry | short description | runtime | details |
 |---|---|---|---|
@@ -53,38 +53,11 @@ bun add @forgezero/vault
 <a id="forgezero-vault"></a>
 ## @forgezero/vault
 
-One scoped contract over an explicitly injected platform backend, a managed tenant socket or an automatically derived external API-key signer. This entry exposes 13 named value exports and 12 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+One scoped contract over an explicitly injected platform backend, a managed tenant socket or an automatically derived external API-key signer. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   DEFAULT_API_URL,
-  DEFAULT_REQUEST_TIMEOUT_MS,
-  DEFAULT_SOCKET,
-  ForgeZero,
-  VERSION,
-  VaultError,
-  createVault,
-  directCredentials,
-  discover,
-  managedAgentTransport,
-  signerFromApiKey,
-  systemdCredentials,
-  vaultCredentials,
-} from '@forgezero/vault';
-
-import type {
-  AgentRequest,
-  AgentResponse,
-  AgentTransport,
-  Change,
-  Credential,
-  CredentialMode,
-  DiscoveryEnvironment,
-  EntryMeta,
-  SignRequest,
-  Signer,
-  SystemdCredentialOptions,
-  VaultOptions,
 } from '@forgezero/vault';
 ```
 
@@ -104,18 +77,11 @@ const token = await vault.get('STRIPE_KEY');
 <a id="forgezero-vault-schema"></a>
 ## @forgezero/vault/schema
 
-Where an entry’s shape comes from: pulled from the platform when ForgeZero has to render it, declared locally when only the tenant needs it. This entry exposes 3 named value exports and 2 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Where an entry’s shape comes from: pulled from the platform when ForgeZero has to render it, declared locally when only the tenant needs it. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   localSchemas,
-  managedSchemas,
-  preferManaged,
-} from '@forgezero/vault/schema';
-
-import type {
-  SchemaRef,
-  SchemaSource,
 } from '@forgezero/vault/schema';
 ```
 
@@ -150,24 +116,11 @@ const { schema, version } = await schemas.get('postmark');
 <a id="forgezero-vault-config"></a>
 ## @forgezero/vault/config
 
-Read `.fz/config.json` — which project, which environment, which secrets, and what to call them. This entry exposes 8 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Read `.fz/config.json` — which project, which environment, which secrets, and what to call them. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   CONFIG_PATHS,
-  ConfigError,
-  assertNoSecrets,
-  bindingsOf,
-  exampleConfig,
-  loadConfig,
-  parseConfig,
-  resolveConfig,
-} from '@forgezero/vault/config';
-
-import type {
-  FzConfig,
-  LoadOptions,
-  SecretBinding,
 } from '@forgezero/vault/config';
 ```
 
@@ -186,21 +139,11 @@ export const selectedCapability = CONFIG_PATHS;
 <a id="forgezero-vault-env"></a>
 ## @forgezero/vault/env
 
-Envless: fill `process.env` from the vault at boot, refusing to run during a build. This entry exposes 5 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Envless: fill `process.env` from the vault at boot, refusing to run during a build. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   EnvError,
-  clearEnv,
-  describeReport,
-  hydrateEnv,
-  isBuildTime,
-} from '@forgezero/vault/env';
-
-import type {
-  HydrateOptions,
-  HydrateReport,
-  SecretReader,
 } from '@forgezero/vault/env';
 ```
 
@@ -219,21 +162,11 @@ export const selectedCapability = EnvError;
 <a id="forgezero-vault-frameworks"></a>
 ## @forgezero/vault/frameworks
 
-SvelteKit and Next.js wiring, attached at the one place that runs once, on the server, before any request. This entry exposes 6 named value exports and 2 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+SvelteKit and Next.js wiring, attached at the one place that runs once, on the server, before any request. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   bootstrapEnv,
-  forgeZeroHandle,
-  forgeZeroInit,
-  forgeZeroRegister,
-  resetHydration,
-  setupEnv,
-} from '@forgezero/vault/frameworks';
-
-import type {
-  SetupOptions,
-  SvelteKitHandleEvent,
 } from '@forgezero/vault/frameworks';
 ```
 
@@ -252,18 +185,11 @@ export const selectedCapability = bootstrapEnv;
 <a id="forgezero-vault-providers"></a>
 ## @forgezero/vault/providers
 
-Adapters that make Vault a provider-configuration and credential source without coupling the providers package to ForgeZero. This entry exposes 2 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Adapters that make Vault a provider-configuration and credential source without coupling the providers package to ForgeZero. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   vaultConfig,
-  vaultCredentials,
-} from '@forgezero/vault/providers';
-
-import type {
-  StoredProviderInstance,
-  StoredServiceMethodAttachment,
-  VaultConfigOptions,
 } from '@forgezero/vault/providers';
 ```
 

package/dist/index.d.ts

@@ -282,4 +282,4 @@ export declare function systemdCredentials(options?: SystemdCredentialOptions):
     readonly name: 'systemd';
     get(reference: string, field: string): Promise<string>;
 };
-export declare const VERSION = "0.1.17";
+export declare const VERSION = "0.1.19";

package/dist/index.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.17";
+var VERSION = "0.1.19";
 export {
   vaultCredentials,
   systemdCredentials,

package/dist/providers.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.17";
+var VERSION = "0.1.19";
 
 // src/providers.ts
 var MISSING = new Set(["ENTRY_NOT_FOUND", "VERSION_NOT_FOUND"]);

package/dist/schema.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.17";
+var VERSION = "0.1.19";
 
 // src/schema.ts
 function managedSchemas(vault, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/vault",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "type": "module",
   "publishConfig": {
     "access": "public",
@@ -42,7 +42,7 @@
     "@types/bun": "latest"
   },
   "dependencies": {
-    "@forgezero/runtime": "^0.1.12"
+    "@forgezero/runtime": "^0.1.14"
   },
   "peerDependencies": {
     "@noble/curves": "^2.2.0",