@forgezero/vault 0.1.4 → 0.1.6

package/README.md

@@ -37,10 +37,14 @@ their next fetch, and nothing is redeployed.
 
 ## Two application transports, and the socket wins
 
-On a ForgeZero compute the client reads the environment's in-memory replica over
-a Unix socket held by the local agent. Anywhere else it derives a hybrid signer
-from an API key and reads over HTTPS. When both are present the socket wins,
-because the application then holds no reusable remote credential.
+On a ForgeZero compute the Agent keeps the enrolled project's environments in
+RAM and the client selects one environment over its group-scoped Unix socket.
+Anywhere else it derives the same hybrid request identity from an API-key seed
+and reads over HTTPS. Each remote request also carries a signed one-use hybrid
+ML-KEM-768 + X25519 response key; the API seals the JSON value to that key with
+AES-256-GCM, so a TLS-terminating edge can route the call but cannot read its
+secret response. When both are present the socket wins, because the
+application then holds no reusable remote credential.
 
 ## The API key is a seed, not a password
 

package/dist/index.d.ts

@@ -66,6 +66,7 @@ export interface SignRequest {
     path: string;
     query: string;
     body: string;
+    responseKey?: string;
 }
 /** Hybrid-signs one exact HTTP request. */
 export interface Signer {
@@ -76,9 +77,13 @@ export interface Signer {
 export declare function signerFromApiKey(secret: string): Signer;
 export type AgentRequest = {
     op: 'get';
+    project: string;
+    environment: string;
     name: string;
 } | {
     op: 'held';
+    project: string;
+    environment: string;
 } | {
     op: 'sync';
 };
@@ -127,6 +132,8 @@ export interface EntryMeta {
 export interface Change {
     name: string;
     version: number;
+    /** True when ciphertext was destroyed and the local value must be removed. */
+    deleted?: boolean;
 }
 export declare const DEFAULT_API_URL = "https://api.forgezero.net";
 export declare const DEFAULT_REQUEST_TIMEOUT_MS = 15000;
@@ -267,4 +274,4 @@ export declare function systemdCredentials(options?: SystemdCredentialOptions):
     readonly name: 'systemd';
     get(reference: string, field: string): Promise<string>;
 };
-export declare const VERSION = "0.1.4";
+export declare const VERSION = "0.1.6";

package/dist/index.js

@@ -1,5 +1,12 @@
 // src/index.ts
-import { deriveKeysFromSeed, signRequest } from "@forgezero/runtime/identity";
+import {
+  deriveKeysFromSeed,
+  encodeSignatureHeader,
+  generateResponseRecipient,
+  openResponse,
+  RESPONSE_KEY_HEADER,
+  signRequest
+} from "@forgezero/runtime/identity";
 
 class VaultError extends Error {
   code;
@@ -41,13 +48,6 @@ var unbase64url = (encoded) => {
   }
   return Uint8Array.from(binary, (character) => character.charCodeAt(0));
 };
-var base64url = (value) => {
-  const bytes = new TextEncoder().encode(value);
-  let binary = "";
-  for (const byte of bytes)
-    binary += String.fromCharCode(byte);
-  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
-};
 function signerFromApiKey(secret) {
   const parts = secret.split(".");
   const legacy = parts.length === 3 && parts[0] === "fz";
@@ -67,13 +67,7 @@ function signerFromApiKey(secret) {
   return {
     keyId,
     async sign(request) {
-      const envelope = signRequest(keys, keyId, request);
-      return base64url(JSON.stringify({
-        timestamp: envelope.timestamp,
-        nonce: envelope.nonce,
-        edSignature: envelope.edSignature,
-        mlDsaSignature: envelope.mlDsaSignature
-      }));
+      return encodeSignatureHeader(signRequest(keys, keyId, request));
     }
   };
 }
@@ -160,14 +154,19 @@ class ForgeZero {
       "content-type": "application/json",
       ...init.headers
     };
+    const recipient = this.signer ? generateResponseRecipient() : undefined;
+    let signature;
     if (this.signer) {
       headers["x-fz-key"] = this.signer.keyId;
-      headers["x-fz-signature"] = await this.signer.sign({
+      signature = await this.signer.sign({
         method: init.method ?? "GET",
         path: target.pathname,
         query: target.search.replace(/^\?/, ""),
-        body
+        body,
+        responseKey: recipient.publicKey
       });
+      headers["x-fz-signature"] = signature;
+      headers[RESPONSE_KEY_HEADER] = recipient.publicKey;
     }
     const response = await this.doFetch(target, {
       ...init,
@@ -180,6 +179,13 @@ class ForgeZero {
     if (!response.ok) {
       throw new VaultError(payload?.error?.code ?? "REQUEST_FAILED", payload?.error?.message ?? `The vault refused with ${response.status}.`);
     }
+    if (recipient && signature) {
+      try {
+        return await openResponse(recipient.secretKey, signature, payload);
+      } catch {
+        throw new VaultError("RESPONSE_NOT_SEALED", "The vault response was not sealed to this request.");
+      }
+    }
     return payload;
   }
   async managedRequest(path, init) {
@@ -191,6 +197,8 @@ class ForgeZero {
     if (method === "GET" && entry) {
       response = await this.agentTransport(socketPath, {
         op: "get",
+        project: this.project,
+        environment: this.environment,
         name: decodeURIComponent(entry[1])
       });
       if (!response.ok)
@@ -200,7 +208,11 @@ class ForgeZero {
       return { value: response.value };
     }
     if (method === "GET" && target.pathname.endsWith("/list")) {
-      response = await this.agentTransport(socketPath, { op: "held" });
+      response = await this.agentTransport(socketPath, {
+        op: "held",
+        project: this.project,
+        environment: this.environment
+      });
       if (!response.ok)
         throw new VaultError(response.error.code, response.error.message);
       if (response.op !== "held")
@@ -208,14 +220,23 @@ class ForgeZero {
       return { entries: response.names.map((name) => ({ name })) };
     }
     if (method === "GET" && target.pathname.endsWith("/entries")) {
-      response = await this.agentTransport(socketPath, { op: "held" });
+      response = await this.agentTransport(socketPath, {
+        op: "held",
+        project: this.project,
+        environment: this.environment
+      });
       if (!response.ok)
         throw new VaultError(response.error.code, response.error.message);
       if (response.op !== "held")
         throw new VaultError("AGENT_RESPONSE_MALFORMED", "The agent answered with the wrong operation.");
       const values = {};
       for (const name of response.names) {
-        const read = await this.agentTransport(socketPath, { op: "get", name });
+        const read = await this.agentTransport(socketPath, {
+          op: "get",
+          project: this.project,
+          environment: this.environment,
+          name
+        });
         if (!read.ok)
           throw new VaultError(read.error.code, read.error.message);
         if (read.op !== "get")
@@ -346,7 +367,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.4";
+var VERSION = "0.1.6";
 export {
   vaultCredentials,
   systemdCredentials,

package/dist/providers.js

@@ -1,5 +1,12 @@
 // src/index.ts
-import { deriveKeysFromSeed, signRequest } from "@forgezero/runtime/identity";
+import {
+  deriveKeysFromSeed,
+  encodeSignatureHeader,
+  generateResponseRecipient,
+  openResponse,
+  RESPONSE_KEY_HEADER,
+  signRequest
+} from "@forgezero/runtime/identity";
 
 class VaultError extends Error {
   code;
@@ -41,13 +48,6 @@ var unbase64url = (encoded) => {
   }
   return Uint8Array.from(binary, (character) => character.charCodeAt(0));
 };
-var base64url = (value) => {
-  const bytes = new TextEncoder().encode(value);
-  let binary = "";
-  for (const byte of bytes)
-    binary += String.fromCharCode(byte);
-  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
-};
 function signerFromApiKey(secret) {
   const parts = secret.split(".");
   const legacy = parts.length === 3 && parts[0] === "fz";
@@ -67,13 +67,7 @@ function signerFromApiKey(secret) {
   return {
     keyId,
     async sign(request) {
-      const envelope = signRequest(keys, keyId, request);
-      return base64url(JSON.stringify({
-        timestamp: envelope.timestamp,
-        nonce: envelope.nonce,
-        edSignature: envelope.edSignature,
-        mlDsaSignature: envelope.mlDsaSignature
-      }));
+      return encodeSignatureHeader(signRequest(keys, keyId, request));
     }
   };
 }
@@ -160,14 +154,19 @@ class ForgeZero {
       "content-type": "application/json",
       ...init.headers
     };
+    const recipient = this.signer ? generateResponseRecipient() : undefined;
+    let signature;
     if (this.signer) {
       headers["x-fz-key"] = this.signer.keyId;
-      headers["x-fz-signature"] = await this.signer.sign({
+      signature = await this.signer.sign({
         method: init.method ?? "GET",
         path: target.pathname,
         query: target.search.replace(/^\?/, ""),
-        body
+        body,
+        responseKey: recipient.publicKey
       });
+      headers["x-fz-signature"] = signature;
+      headers[RESPONSE_KEY_HEADER] = recipient.publicKey;
     }
     const response = await this.doFetch(target, {
       ...init,
@@ -180,6 +179,13 @@ class ForgeZero {
     if (!response.ok) {
       throw new VaultError(payload?.error?.code ?? "REQUEST_FAILED", payload?.error?.message ?? `The vault refused with ${response.status}.`);
     }
+    if (recipient && signature) {
+      try {
+        return await openResponse(recipient.secretKey, signature, payload);
+      } catch {
+        throw new VaultError("RESPONSE_NOT_SEALED", "The vault response was not sealed to this request.");
+      }
+    }
     return payload;
   }
   async managedRequest(path, init) {
@@ -191,6 +197,8 @@ class ForgeZero {
     if (method === "GET" && entry) {
       response = await this.agentTransport(socketPath, {
         op: "get",
+        project: this.project,
+        environment: this.environment,
         name: decodeURIComponent(entry[1])
       });
       if (!response.ok)
@@ -200,7 +208,11 @@ class ForgeZero {
       return { value: response.value };
     }
     if (method === "GET" && target.pathname.endsWith("/list")) {
-      response = await this.agentTransport(socketPath, { op: "held" });
+      response = await this.agentTransport(socketPath, {
+        op: "held",
+        project: this.project,
+        environment: this.environment
+      });
       if (!response.ok)
         throw new VaultError(response.error.code, response.error.message);
       if (response.op !== "held")
@@ -208,14 +220,23 @@ class ForgeZero {
       return { entries: response.names.map((name) => ({ name })) };
     }
     if (method === "GET" && target.pathname.endsWith("/entries")) {
-      response = await this.agentTransport(socketPath, { op: "held" });
+      response = await this.agentTransport(socketPath, {
+        op: "held",
+        project: this.project,
+        environment: this.environment
+      });
       if (!response.ok)
         throw new VaultError(response.error.code, response.error.message);
       if (response.op !== "held")
         throw new VaultError("AGENT_RESPONSE_MALFORMED", "The agent answered with the wrong operation.");
       const values = {};
       for (const name of response.names) {
-        const read = await this.agentTransport(socketPath, { op: "get", name });
+        const read = await this.agentTransport(socketPath, {
+          op: "get",
+          project: this.project,
+          environment: this.environment,
+          name
+        });
         if (!read.ok)
           throw new VaultError(read.error.code, read.error.message);
         if (read.op !== "get")
@@ -346,7 +367,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.4";
+var VERSION = "0.1.6";
 
 // src/providers.ts
 var MISSING = new Set(["ENTRY_NOT_FOUND", "VERSION_NOT_FOUND"]);

package/dist/schema.js

@@ -1,5 +1,12 @@
 // src/index.ts
-import { deriveKeysFromSeed, signRequest } from "@forgezero/runtime/identity";
+import {
+  deriveKeysFromSeed,
+  encodeSignatureHeader,
+  generateResponseRecipient,
+  openResponse,
+  RESPONSE_KEY_HEADER,
+  signRequest
+} from "@forgezero/runtime/identity";
 
 class VaultError extends Error {
   code;
@@ -41,13 +48,6 @@ var unbase64url = (encoded) => {
   }
   return Uint8Array.from(binary, (character) => character.charCodeAt(0));
 };
-var base64url = (value) => {
-  const bytes = new TextEncoder().encode(value);
-  let binary = "";
-  for (const byte of bytes)
-    binary += String.fromCharCode(byte);
-  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
-};
 function signerFromApiKey(secret) {
   const parts = secret.split(".");
   const legacy = parts.length === 3 && parts[0] === "fz";
@@ -67,13 +67,7 @@ function signerFromApiKey(secret) {
   return {
     keyId,
     async sign(request) {
-      const envelope = signRequest(keys, keyId, request);
-      return base64url(JSON.stringify({
-        timestamp: envelope.timestamp,
-        nonce: envelope.nonce,
-        edSignature: envelope.edSignature,
-        mlDsaSignature: envelope.mlDsaSignature
-      }));
+      return encodeSignatureHeader(signRequest(keys, keyId, request));
     }
   };
 }
@@ -160,14 +154,19 @@ class ForgeZero {
       "content-type": "application/json",
       ...init.headers
     };
+    const recipient = this.signer ? generateResponseRecipient() : undefined;
+    let signature;
     if (this.signer) {
       headers["x-fz-key"] = this.signer.keyId;
-      headers["x-fz-signature"] = await this.signer.sign({
+      signature = await this.signer.sign({
         method: init.method ?? "GET",
         path: target.pathname,
         query: target.search.replace(/^\?/, ""),
-        body
+        body,
+        responseKey: recipient.publicKey
       });
+      headers["x-fz-signature"] = signature;
+      headers[RESPONSE_KEY_HEADER] = recipient.publicKey;
     }
     const response = await this.doFetch(target, {
       ...init,
@@ -180,6 +179,13 @@ class ForgeZero {
     if (!response.ok) {
       throw new VaultError(payload?.error?.code ?? "REQUEST_FAILED", payload?.error?.message ?? `The vault refused with ${response.status}.`);
     }
+    if (recipient && signature) {
+      try {
+        return await openResponse(recipient.secretKey, signature, payload);
+      } catch {
+        throw new VaultError("RESPONSE_NOT_SEALED", "The vault response was not sealed to this request.");
+      }
+    }
     return payload;
   }
   async managedRequest(path, init) {
@@ -191,6 +197,8 @@ class ForgeZero {
     if (method === "GET" && entry) {
       response = await this.agentTransport(socketPath, {
         op: "get",
+        project: this.project,
+        environment: this.environment,
         name: decodeURIComponent(entry[1])
       });
       if (!response.ok)
@@ -200,7 +208,11 @@ class ForgeZero {
       return { value: response.value };
     }
     if (method === "GET" && target.pathname.endsWith("/list")) {
-      response = await this.agentTransport(socketPath, { op: "held" });
+      response = await this.agentTransport(socketPath, {
+        op: "held",
+        project: this.project,
+        environment: this.environment
+      });
       if (!response.ok)
         throw new VaultError(response.error.code, response.error.message);
       if (response.op !== "held")
@@ -208,14 +220,23 @@ class ForgeZero {
       return { entries: response.names.map((name) => ({ name })) };
     }
     if (method === "GET" && target.pathname.endsWith("/entries")) {
-      response = await this.agentTransport(socketPath, { op: "held" });
+      response = await this.agentTransport(socketPath, {
+        op: "held",
+        project: this.project,
+        environment: this.environment
+      });
       if (!response.ok)
         throw new VaultError(response.error.code, response.error.message);
       if (response.op !== "held")
         throw new VaultError("AGENT_RESPONSE_MALFORMED", "The agent answered with the wrong operation.");
       const values = {};
       for (const name of response.names) {
-        const read = await this.agentTransport(socketPath, { op: "get", name });
+        const read = await this.agentTransport(socketPath, {
+          op: "get",
+          project: this.project,
+          environment: this.environment,
+          name
+        });
         if (!read.ok)
           throw new VaultError(read.error.code, read.error.message);
         if (read.op !== "get")
@@ -346,7 +367,7 @@ function systemdCredentials(options = {}) {
     }
   };
 }
-var VERSION = "0.1.4";
+var VERSION = "0.1.6";
 
 // src/schema.ts
 function managedSchemas(vault, options = {}) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "Publishing happens from an operator's machine, not CI \u2014 CLAUDE.md records that the absence of CI is deliberate. npm's `provenance` attests a tarball was built by a recognised CI provider from a named commit, so it cannot be produced here: it was set, and the first publish failed with `Automatic provenance generation not supported for provider: null`. A setting that can never be satisfied is worse than none, because it reads as a guarantee nobody is getting. Restore it the day this publishes from CI, and not before.",
   "name": "@forgezero/vault",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -32,8 +32,9 @@
       "default": "./dist/providers.js"
     }
   },
-  "scripts": {
-    "check": "tsc --noEmit",
+	"scripts": {
+		"check": "tsc --noEmit",
+		"prebuild": "rm -rf dist",
     "build": "bun build src/index.ts src/config.ts src/schema.ts src/env.ts src/frameworks.ts src/providers.ts --root src --outdir dist --target browser --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
     "prepublishOnly": "bun run check && bun run build"
   },
@@ -42,7 +43,7 @@
     "@types/bun": "latest"
   },
   "dependencies": {
-    "@forgezero/runtime": "^0.1.2"
+    "@forgezero/runtime": "^0.1.3"
   },
   "peerDependencies": {
     "@noble/curves": "^2.2.0",