@forgezero/vault 0.1.20 → 0.1.21

package/README.md

@@ -195,14 +195,14 @@ import {
 
 ## @forgezero/vault/providers — Attach a versioned Git forge to Git Connect
 
-The service remains stable while each forge owns its API versions. Credentials are scoped Vault lookups and ordered arrays allow an explicitly reviewed legacy branch during migration.
+One GitHub App provider is projected into separate OAuth Server and Git Connect method sets. Its shared credential source remains Vault-scoped and installation tokens are minted only when needed.
 
 ```text
 import {
   createService,
 } from '@forgezero/providers';
 import {
-  defineGitConnectProvider,
+  defineGitHubProvider,
   gitConnectService,
 } from '@forgezero/providers/git';
 import {
@@ -212,22 +212,23 @@ import {
   vaultCredentials,
 } from '@forgezero/vault/providers';
 
-declare const githubAdapter: Parameters<typeof defineGitConnectProvider>[0]['adapter'];
+declare const githubAdapter: Parameters<typeof defineGitHubProvider>[0]['adapter'];
 const vault = createVault({ project: 'control-plane', environment: 'production' });
-const github = defineGitConnectProvider({
-  id: 'github-app', label: 'GitHub App', version: '2026-03-10',
-  adapter: githubAdapter // Your HTTP boundary implements the five typed methods.
-});
+const credentials = vaultCredentials(vault, 'github');
+const github = defineGitHubProvider({ version: 'github-app:2026-03-10', adapter: githubAdapter });
 const git = createService(gitConnectService, {
-  listAccounts: [{ provider: github, method: 'listAccounts', version: '2026-03-10', credentials: vaultCredentials(vault, 'github-app'), priority: 1 }],
-  listRepositories: [{ provider: github, method: 'listRepositories', version: '2026-03-10', credentials: vaultCredentials(vault, 'github-app'), priority: 1 }],
-  listBranches: [{ provider: github, method: 'listBranches', version: '2026-03-10', credentials: vaultCredentials(vault, 'github-app'), priority: 1 }],
-  ensureWebhook: [{ provider: github, method: 'ensureWebhook', version: '2026-03-10', credentials: vaultCredentials(vault, 'github-app'), priority: 1 }],
-  cloneCredential: [{ provider: github, method: 'cloneCredential', version: '2026-03-10', credentials: vaultCredentials(vault, 'github-app'), priority: 1 }]
+  beginInstallation: [],
+  completeInstallation: [],
+  listInstallations: [],
+  listRepositories: [{ provider: github, method: 'listRepositories', version: 'github-app:2026-03-10', credentials, priority: 1 }],
+  listBranches: [],
+  mintCloneCredential: [],
+  verifyWebhook: [],
+  disconnectInstallation: []
 });
 
-const accounts = await git.call('listAccounts', {});
-if (!accounts.ok) throw accounts.error;
+const repositories = await git.call('listRepositories', { installationId: '42' });
+if (!repositories.ok) throw repositories.error;
 ```
 
 ## Three paths, and why they stay explicit
@@ -261,9 +262,9 @@ import {
   ForgeZero,
 } from '@forgezero/vault';
 
-const fz = new ForgeZero({ project: 'altpilot', environment: 'production' });
+const fz = new ForgeZero({ project: 'payments-api', environment: 'production' });
 
-const key   = await fz.get('STRIPE_KEY');
+const value = await fz.get('PAYMENT_PROVIDER');
 const names = await fz.list();      // names; HTTPS reads also carry metadata
 ```
 

package/dist/index.d.ts

@@ -282,4 +282,4 @@ export declare function systemdCredentials(options?: SystemdCredentialOptions):
     readonly name: 'systemd';
     get(reference: string, field: string): Promise<string>;
 };
-export declare const VERSION = "0.1.20";
+export declare const VERSION = "0.1.21";

package/dist/index.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.20";
+var VERSION = "0.1.21";
 export {
   vaultCredentials,
   systemdCredentials,

package/dist/providers.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.20";
+var VERSION = "0.1.21";
 
 // src/providers.ts
 var MISSING = new Set(["ENTRY_NOT_FOUND", "VERSION_NOT_FOUND"]);

package/dist/schema.js

@@ -382,7 +382,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.20";
+var VERSION = "0.1.21";
 
 // src/schema.ts
 function managedSchemas(vault, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/vault",
-  "version": "0.1.20",
+  "version": "0.1.21",
   "type": "module",
   "publishConfig": {
     "access": "public",
@@ -42,7 +42,7 @@
     "@types/bun": "latest"
   },
   "dependencies": {
-    "@forgezero/runtime": "^0.1.14"
+    "@forgezero/runtime": "^0.1.16"
   },
   "peerDependencies": {
     "@noble/curves": "^2.2.0",