claudemesh-cli 0.8.3 → 0.8.4

package/dist/index.js

@@ -47880,6 +47880,12 @@ class BrokerClient {
   getSessionSecretKey() {
     return this.sessionSecretKey;
   }
+  getMeshPubkey() {
+    return this.mesh.pubkey;
+  }
+  getMeshSecretKey() {
+    return this.mesh.secretKey;
+  }
   makeReqId() {
     return Math.random().toString(36).slice(2) + Date.now().toString(36);
   }
@@ -51002,18 +51008,25 @@ ${lines.join(`
         if (!client2)
           return text("vault_set: not connected", true);
         const entryType = vType ?? "env";
-        let plaintext = value;
+        let plaintextBytes;
         if (entryType === "file") {
           const { existsSync: existsSync2, readFileSync: readFileSync2 } = await import("node:fs");
           if (!existsSync2(value))
             return text(`vault_set: file not found: ${value}`, true);
-          plaintext = readFileSync2(value, "base64");
-        }
-        const encoded = Buffer.from(plaintext).toString("base64");
-        const ok = await client2.vaultSet(key, encoded, "placeholder-nonce", "placeholder-sealed", entryType, mount_path, description);
+          plaintextBytes = new Uint8Array(readFileSync2(value));
+        } else {
+          plaintextBytes = new TextEncoder().encode(value);
+        }
+        const { encryptFile: encryptFile2, sealKeyForPeer: sealKeyForPeer2 } = await Promise.resolve().then(() => (init_file_crypto(), exports_file_crypto));
+        const { ciphertext, nonce, key: kf } = await encryptFile2(plaintextBytes);
+        const sealedKey = await sealKeyForPeer2(kf, client2.getMeshPubkey());
+        const { ensureSodium: ensureSodium2 } = await Promise.resolve().then(() => (init_keypair(), exports_keypair));
+        const sodium2 = await ensureSodium2();
+        const ciphertextB64 = sodium2.to_base64(ciphertext, sodium2.base64_variants.ORIGINAL);
+        const ok = await client2.vaultSet(key, ciphertextB64, nonce, sealedKey, entryType, mount_path, description);
         if (!ok)
           return text("vault_set: broker did not acknowledge", true);
-        return text(`Vault entry "${key}" stored (${entryType}).`);
+        return text(`Vault entry "${key}" stored (${entryType}, E2E encrypted).`);
       }
       case "vault_list": {
         const client2 = allClients()[0];
@@ -52522,7 +52535,7 @@ init_config();
 // package.json
 var package_default = {
   name: "claudemesh-cli",
-  version: "0.8.3",
+  version: "0.8.4",
   description: "Claude Code MCP client for claudemesh — peer mesh messaging between Claude sessions.",
   keywords: [
     "claude-code",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudemesh-cli",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "description": "Claude Code MCP client for claudemesh — peer mesh messaging between Claude sessions.",
   "keywords": [
     "claude-code",
@@ -48,10 +48,10 @@
     "prettier": "3.6.2",
     "typescript": "5.9.3",
     "vitest": "4.0.14",
+    "@turbostarter/vitest-config": "0.1.0",
     "@turbostarter/tsconfig": "0.1.0",
     "@turbostarter/prettier-config": "0.1.0",
-    "@turbostarter/eslint-config": "0.1.0",
-    "@turbostarter/vitest-config": "0.1.0"
+    "@turbostarter/eslint-config": "0.1.0"
   },
   "scripts": {
     "build": "bun build src/index.ts --target=node --outfile dist/index.js --banner \"#!/usr/bin/env node\" && chmod +x dist/index.js",