@gorlitzer-labs/comb 0.1.0 → 0.1.1

package/README.md

@@ -1,6 +1,6 @@
 # comb
 
-Keep your keys out of your conversations.
+**the vault** — keep your keys out of your conversations. Keys by name, never by value.
 
 You paste a Cloudflare token to an agent so it can do a job. That token is now in
 a transcript file on your disk, in plaintext, forever. Do it enough times and you
@@ -19,6 +19,19 @@ comb run --with CF_API_TOKEN -- curl -H "Authorization: Bearer $CF_API_TOKEN" ..
 comb audit
 ```
 
+## Install
+
+```bash
+npm i -g @gorlitzer-labs/comb
+```
+
+Also needs `sops` and `age` on your `PATH`, and Node 20+ — see [Requires](#requires)
+below.
+
+`comb` is part of the
+[`gorlitzer-labs/seldon`](https://github.com/gorlitzer-labs/seldon/tree/main/modules/comb)
+monorepo, at `modules/comb`.
+
 ## Why not a secrets server
 
 Infisical and OpenBao are good. They are also a database, a cache, a patch

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gorlitzer-labs/comb",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Keep your keys out of your conversations. A small vault front-end over SOPS + age.",
   "type": "module",
   "bin": {

package/src/backends/sops.mjs

@@ -17,9 +17,9 @@
  * matters. Everything else is recoverable; that is not. It never goes in the
  * store, it never goes in the repo.
  */
-import { execFileSync, spawnSync } from "node:child_process";
+import { spawnSync } from "node:child_process";
 import { existsSync, mkdirSync, writeFileSync, readFileSync, chmodSync } from "node:fs";
-import { join, dirname } from "node:path";
+import { join } from "node:path";
 import { homedir } from "node:os";
 
 /** Where the encrypted store and the key live. Override for tests. */

package/src/realms.mjs

@@ -10,7 +10,7 @@
 // Revoking a realm is re-encrypting the store WITHOUT its key — no secret has to
 // be rotated, because that realm can no longer decrypt anything, old copies
 // included (its key never changes what the current ciphertext is encrypted to).
-import { execFileSync, spawnSync } from "node:child_process";
+import { spawnSync } from "node:child_process";
 import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { combHome, storePath, keyPath } from "./backends/sops.mjs";