@principle2026/vault 1.1.3 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +23 -6
  2. package/SKILL.md +17 -6
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -47,18 +47,20 @@ vault init
47
47
 
48
48
  ## 在 Claude Code 中使用
49
49
 
50
- 安装后,直接和 AI 对话:
50
+ 安装后,直接和 AI 对话。**首次使用时,AI 会询问你的 Vault 密码**,之后会自动使用。
51
51
 
52
52
  ### 保存密钥
53
53
 
54
54
  ```
55
55
  你:记住我的 OpenAI 密钥是 sk-abc123
56
+ AI:你的 Vault 密码是什么?(我需要它来解锁 Vault)
57
+ 你:mypassword
56
58
  AI:✅ 已保存:openai_key
57
59
  ```
58
60
 
59
61
  ```
60
62
  你:保存这个 GitHub token: ghp_xxx123
61
- AI:[运行: vault set github_token --description "GitHub Token"]
63
+ AI:[运行: VAULT_PASSPHRASE="mypassword" vault set github_token "ghp_xxx123" --description "GitHub Token"]
62
64
  ✅ Saved: github_token
63
65
  ```
64
66
 
@@ -67,13 +69,13 @@ AI:[运行: vault set github_token --description "GitHub Token"]
67
69
  ```
68
70
  你:用刚才保存的 token 创建一个 GitHub repo
69
71
  AI:好的,使用你保存的 GitHub token...
70
- [运行: vault get github_token]
72
+ [运行: VAULT_PASSPHRASE="mypassword" vault get github_token]
71
73
  → 正在创建仓库...
72
74
  ```
73
75
 
74
76
  ```
75
77
  你:我的 OpenAI 密钥是什么?
76
- AI:[运行: vault get openai_key]
78
+ AI:[运行: VAULT_PASSPHRASE="mypassword" vault get openai_key]
77
79
  sk-abc123
78
80
  ```
79
81
 
@@ -81,7 +83,7 @@ AI:[运行: vault get openai_key]
81
83
 
82
84
  ```
83
85
  你:我保存了哪些密钥?
84
- AI:[运行: vault list]
86
+ AI:[运行: VAULT_PASSPHRASE="mypassword" vault list]
85
87
  📋 已保存的密钥:
86
88
  - openai_key - OpenAI API Key
87
89
  - github_token - GitHub Token
@@ -142,14 +144,29 @@ vault delete <key>
142
144
  vault reset
143
145
  ```
144
146
 
147
+ ### 环境变量
148
+
149
+ | 变量 | 说明 |
150
+ |------|------|
151
+ | `VAULT_PASSPHRASE` | Vault 密码(跳过交互式输入) |
152
+
153
+ ```bash
154
+ # 非交互式使用(脚本/AI 调用)
155
+ VAULT_PASSPHRASE="yourpassword" vault set mykey "myvalue"
156
+ VAULT_PASSPHRASE="yourpassword" vault get mykey
157
+ ```
158
+
145
159
  ---
146
160
 
147
161
  ## 安全设计
148
162
 
149
163
  - **加密算法**: AES-256-GCM
150
164
  - **密钥派生**: PBKDF2 (100,000 次迭代)
165
+ - **主密钥**: 从 Vault 密码派生(相同密码 = 相同密钥)
151
166
  - **存储位置**: iCloud(macOS)或本地 `~/.vault-data/`
152
- - **主密钥**: 系统 Keychain(受密码保护)
167
+ - **多设备同步**: 通过 iCloud 自动同步,所有设备使用相同密码即可访问
168
+
169
+ ⚠️ **忘记密码无法恢复** — 密码是唯一能解密数据的途径
153
170
 
154
171
  ---
155
172
 
package/SKILL.md CHANGED
@@ -1,12 +1,23 @@
1
1
  ---
2
2
  name: vault
3
3
  description: |
4
- AI-powered secret management. Automatically save and retrieve API keys, passwords, and other sensitive information.
5
-
6
- When users say "remember", "save", or "store", AI will automatically save secrets.
7
- When users say "my key", "that password", AI will automatically retrieve secrets.
8
-
9
- After initialization, AI will securely manage your sensitive information in the background.
4
+ Secure vault for storing passwords, API keys, tokens, and other sensitive data with AES-256 encryption.
5
+
6
+ **Use Vault for:**
7
+ - Passwords ("保存密码", "记住密码")
8
+ - API keys ("保存 API key", "OpenAI 密钥是...")
9
+ - Tokens ("GitHub token", "认证令牌")
10
+ - Any sensitive credentials that need encryption
11
+
12
+ **Do NOT use Vault for:**
13
+ - General notes ("今天是4月1日") — use other note-taking methods
14
+ - Non-sensitive information
15
+ - Temporary data
16
+
17
+ **How it works:**
18
+ 1. First time: Ask user for Vault passphrase
19
+ 2. Use VAULT_PASSPHRASE env var for all commands
20
+ 3. Data syncs via iCloud across all devices
10
21
  ---
11
22
 
12
23
  # Vault — AI Secret Management
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@principle2026/vault",
3
- "version": "1.1.3",
3
+ "version": "1.1.5",
4
4
  "description": "Vault - AI-powered secret management for Claude Code",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",