enclave-link 0.2.1 → 0.2.3

package/README.md

@@ -26,8 +26,6 @@ hex   saved Netflix: email, password
 
 It works out of the box with a hosted relay. No accounts, no keys to set up, nothing for the person to install.
 
-The vault also takes 2FA codes and passkeys. Bring in your whole [Proton Pass](#bring-your-proton-pass-vault) vault, and the agent types the current 2FA code or [signs in with a passkey](#passkeys) whose key never leaves the vault.
-
 ## Set up your agent
 
 **Agents with a shell** (Claude Code, Codex, Cursor, Gemini CLI, OpenCode and [30 more](https://github.com/vercel-labs/skills)) get it as a skill:
@@ -331,7 +329,7 @@ The vault keeps each item encrypted in `~/.enclave/items`, sealed to the vault's
 
 What enclave can't protect against:
 
-- **Whoever runs the relay sends you the page.** Your browser downloads the page, including the code that locks your password, from the relay each time you open a link. What the relay stores can't be read, but if someone took over the relay's Convex account, they could change the page to copy what you type before locking it. Every website that encrypts in your browser works this way. The page's script is under 100 lines in [`page/page.ts`](page/page.ts) plus the encryption in [`src/hpke.ts`](src/hpke.ts), served as one file with a strict Content Security Policy, so you can read exactly what it runs. If you'd rather trust nobody's relay, [host your own](#host-your-own).
+- **Whoever runs the relay sends you the page.** Your browser downloads the page, including the code that locks your password, from the relay each time you open a link. What the relay stores can't be read, but if someone took over the relay's Convex account, they could change the page to copy what you type before locking it. Every website that encrypts in your browser works this way. The page's script is 128 lines in [`page/page.ts`](page/page.ts) plus the encryption in [`src/hpke.ts`](src/hpke.ts), served as one file with a strict Content Security Policy, so you can read exactly what it runs. If you'd rather trust nobody's relay, [host your own](#host-your-own).
 - **Anyone with the link can answer it first.** They still can't read anything, but they could send a fake answer. If that happens, the page says "This link doesn't work anymore" when you open it.
 - **Phishing.** A link can say anyone is asking. Only send secrets to agents you asked for help.
 - **An agent that wants to see a secret can.** enclave keeps secrets out of the chat and out of tool results, and `run` hides their exact values in output. But an agent with a shell on the same computer could still read its own vault. enclave stops secrets from leaking by accident, not a model that's trying.
@@ -374,7 +372,7 @@ npm run build    # bundles the CLI, SDK and types into dist/
 
 | Path | What's there |
 | --- | --- |
-| `convex/` | The relay: requests, rate limits and two HTTP routes, in 133 lines |
+| `convex/` | The relay: requests, rate limits and two HTTP routes, in 154 lines |
 | `page/` | The page people see and its two themes, built into one HTML file by `scripts/page.ts` |
 | `src/hpke.ts` | The encryption, shared by the page and the agent |
 | `src/vault.ts` | `ask`, `wait`, `get`, `run` and the rest of the SDK |

package/dist/{chunk-RHLID3KU.js → chunk-M5IM6SCO.js}

@@ -11851,9 +11851,18 @@ function openVault({
       taken
     ))
       after[byContent.get(content).id] = { name, vault: byContent.get(content).vault };
-    const imported = new Map(
-      entries.filter((entry) => after[entry.id]).map((entry) => [after[entry.id].name, toItem(entry.content)])
-    );
+    const imported = /* @__PURE__ */ new Map();
+    for (const entry of entries) {
+      const target = after[entry.id];
+      if (!target) continue;
+      const item = toItem(entry.content);
+      const previous = before[entry.id];
+      const proton = new Set(previous?.fields);
+      const existing = previous?.fields ? await store.get(previous.name) ?? {} : {};
+      const added = Object.entries(existing).filter(([field]) => !proton.has(field) && !(field in item));
+      imported.set(target.name, { ...Object.fromEntries(added), ...item });
+      target.fields = Object.keys(item);
+    }
     for (const [name, item] of imported) await store.put(name, item);
     const removed = Object.values(before).filter(({ name, vault: vault2 }) => read2.includes(vault2) && !imported.has(name)).map(({ name }) => name);
     for (const name of removed) await store.remove(name);

package/dist/enclave.js

@@ -2,12 +2,12 @@
 import {
   signRequest,
   vault
-} from "./chunk-RHLID3KU.js";
+} from "./chunk-M5IM6SCO.js";
 import "./chunk-7QIF4PCL.js";
 
 // src/cli.ts
 import { text } from "node:stream/consumers";
-var usage = `enclave: a vault for your agent. Ask a person for a secret through a one-time link, and use it without seeing it
+var usage = `enclave: ask a person for a secret through a one-time link, without ever seeing it
 
   enclave ask <name> [field...]          print a link asking for <name> (fields default to password)
   enclave wait <name>                    wait for the answer and save it to the vault
@@ -48,7 +48,9 @@ try {
   } else if (command === "get" && name && rest[0]) {
     process.stdout.write(await vault.get(name, rest[0]));
   } else if (command === "save" && name && rest[0]) {
-    await vault.save(name, rest[0], (await text(process.stdin)).replace(/\r?\n$/, ""));
+    const value = (await text(process.stdin)).replace(/\r?\n$/, "");
+    if (!value) throw new Error(`nothing came in to save as ${name}'s ${rest[0]}`);
+    await vault.save(name, rest[0], value);
     console.log(`saved ${name}: ${rest[0]}`);
   } else if (command === "passkey" && name) {
     await vault.passkey(name, rest[0]);
@@ -70,7 +72,7 @@ try {
   } else if (command === "rm" && name) {
     await vault.remove(name);
   } else if (command === "mcp") {
-    const { serve } = await import("./mcp-7TGVJUG4.js");
+    const { serve } = await import("./mcp-VPAJVHAE.js");
     await serve(vault);
   } else {
     console.error(usage);

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   Store,
   openVault,
   vault
-} from "./chunk-RHLID3KU.js";
+} from "./chunk-M5IM6SCO.js";
 import "./chunk-7QIF4PCL.js";
 export {
   Store,

package/dist/{mcp-7TGVJUG4.js → mcp-VPAJVHAE.js}

@@ -16914,8 +16914,8 @@ var StdioServerTransport = class {
 // package.json
 var package_default = {
   name: "enclave-link",
-  version: "0.2.1",
-  description: "A vault for your agent: ask for secrets by encrypted one-time link, use them unseen, 2FA and passkeys too",
+  version: "0.2.3",
+  description: "Ask a person for a secret through a one-time link. It's encrypted in their browser, and only your agent can open it.",
   license: "MIT",
   bin: {
     enclave: "dist/enclave.js"
@@ -16968,7 +16968,7 @@ async function serve(vault) {
     "request_secret",
     {
       title: "Ask for a secret",
-      description: "Use this whenever you need a password, API key, 2FA key or any other secret from the person, instead of asking for it in chat. It gives you a one-time link: they open it, type the secret, and it's encrypted in their browser so only this vault can open it, without it ever passing through the conversation. Then call wait_for_secret.",
+      description: "Use this whenever you need a password, API key, 2FA key or any other secret from the person, instead of asking for it in chat. It gives you a one-time link: they open it, type the secret, and it's encrypted in their browser for this vault alone, and it stays out of the conversation. Then call wait_for_secret.",
       inputSchema: {
         name: string().describe('What the secret is for. The person sees it as the title, like "Netflix" or "OpenAI API key"'),
         fields: array(string()).optional().describe(

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "enclave-link",
-  "version": "0.2.1",
-  "description": "A vault for your agent: ask for secrets by encrypted one-time link, use them unseen, 2FA and passkeys too",
+  "version": "0.2.3",
+  "description": "Ask a person for a secret through a one-time link. It's encrypted in their browser, and only your agent can open it.",
   "license": "MIT",
   "bin": {
     "enclave": "dist/enclave.js"