kavrix 0.2.3 → 0.2.4

package/dist/chunks/{chunk-3MTK6AVM.js → chunk-MTADWNBJ.js}

@@ -335,57 +335,24 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
-
-smol-toml@1.3.1 (BSD-3-Clause)
-Copyright (c) Squirrel Chat et al., All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
-
-1. Redistributions of source code must retain the above copyright notice, this
-   list of conditions and the following disclaimer.
-2. Redistributions in binary form must reproduce the above copyright notice,
-   this list of conditions and the following disclaimer in the
-   documentation and/or other materials provided with the distribution.
-3. Neither the name of the copyright holder nor the names of its contributors
-   may be used to endorse or promote products derived from this software without
-   specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
-WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
-SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
-CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
-OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */
 import { createRequire as __kavrixCreateRequire } from 'node:module';
 const __kavrixNodeRequire = __kavrixCreateRequire(import.meta.url);
 const __kavrixNodeBuiltin = (name) => __kavrixNodeRequire(`node:${name}`);
 import {
-  external_exports
-} from "./chunk-D4JYLAAS.js";
-import "./chunk-S4PSIM2L.js";
+  ensureSecureDirectory,
+  validateSecureFileSource
+} from "./chunk-3LXISP6O.js";
+import "./chunk-MNQHU3EJ.js";
+import "./chunk-T5WUZPWZ.js";
 
 // src/kavrix-config.ts
 import { existsSync } from "node:fs";
-import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
+import { writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 var CONFIG_FILE_NAME = "config.toml";
-var kavrixConfigSchema = external_exports.object({
-  datastore: external_exports.enum(["file", "mongodb"]).optional(),
-  dataFile: external_exports.string().optional(),
-  keyFile: external_exports.string().optional(),
-  database: external_exports.string().optional(),
-  collection: external_exports.string().optional(),
-  databaseCollection: external_exports.string().optional(),
-  vaultCollection: external_exports.string().optional(),
-  vaultLabel: external_exports.string().optional()
-}).strict();
+var MAX_CONFIG_FILE_BYTES = 64 * 1024;
 function getKavrixConfigDir() {
   return join(homedir(), ".kavrix");
 }
@@ -393,114 +360,50 @@ function getKavrixConfigPath() {
   return join(getKavrixConfigDir(), CONFIG_FILE_NAME);
 }
 function generateDefaultConfigToml() {
-  return `# Kavrix Configuration
-# =====================
+  return `# Kavrix Onboarding Reference
+# ===========================
 # Location: ~/.kavrix/config.toml
 #   Windows: %USERPROFILE%\\.kavrix\\config.toml
 #   macOS/Linux: ~/.kavrix/config.toml
 #
-# This file is created by \`kavrix init\`. Edit the values below, then run
-# \`kavrix init\` again (or \`kavrix db init\` with --secrets-stdin) to
-# initialize your encrypted vault. All paths must be inside a private
-# directory that only your account can access.
+# This file is created by a first interactive \`kavrix init\`. It is a
+# non-secret onboarding reference, not an automatically loaded settings file.
+# Copy the examples you need into your terminal and keep profile and vault
+# selection explicit. All protected paths must be inside a private directory.
 #
 # Secrets are NEVER stored here. Passphrases and MongoDB URLs are always
 # read via masked prompts or --passphrase-stdin / --database-url-stdin.
 #
-# Uncomment a line to activate it. Lines starting with # are ignored.
 # See https://github.com/d4rkNinja/kavrix#readme for full documentation.
 
-# === Datastore ===
-# Choose where ciphertext lives. "file" is simplest for one device;
-# "mongodb" syncs opaque ciphertext through your own MongoDB deployment.
-# Allowed values: "file", "mongodb"
-# Example: datastore = "file"
-datastore = "file"
-
-# === Local File Datastore ===
-# Only used when datastore = "file"
-# Path to the encrypted vault file. Can be absolute or relative.
-# The parent directory must be private (chmod 700 / icacls).
-# Examples:
-#   dataFile = "./kavrix.vault"
-#   dataFile = "~/.kavrix/kavrix.vault"
-#   dataFile = "/secure/vaults/work.vault"
-dataFile = "./kavrix.vault"
-
-# === Security ===
-# Path to the protected portable key file. This file holds your
-# encrypted vault key and is essential \u2014 losing it can make the vault
-# permanently unrecoverable. Keep it separate from the vault file.
-# On Windows, ACLs are enforced via icacls /inheritance:r.
-# Examples:
-#   keyFile = "./kavrix.key"
-#   keyFile = "~/.kavrix/kavrix.key"
-keyFile = "./kavrix.key"
-
-# Optional: path to the database revision anchor file.
-# Defaults to "<keyFile>.database-anchor" if not set.
-# Example: anchorFile = "./kavrix.key.database-anchor"
-# anchorFile = "./kavrix.key.database-anchor"
-
-# === MongoDB Datastore ===
-# Only used when datastore = "mongodb"
-# Your MongoDB connection string is NEVER stored here.
-# It is read via --database-url-stdin (masked, never in argv).
+# Canonical file-datastore setup:
+#   kavrix db profile add work --datastore file \\
+#     --data-file ./work.kavrix --key-file ./work.kavrix.key
+#   kavrix db profile use work
+#   kavrix db init --profile work
+#   kavrix db vault create --profile work
+#
+# MongoDB is optional. Register its non-secret database and collection routing
+# with \`kavrix db profile add --datastore mongodb\`; provide the URI only via
+# the masked prompt or --database-url-stdin. Remote connections require
+# validated TLS, and database-container writes require transaction support.
 #
-# Database name (1-63 chars: letters, numbers, underscore, hyphen)
-# If omitted, it is inferred from the connection string.
-# Example: database = "kavrix"
-# database = "kavrix"
-
-# Collection for encrypted database documents (1-64 chars)
-# Default: "kavrix_databases" for databaseCollection, "kavrix_vaults" for vaultCollection
-# Example: collection = "kavrix_vaults"
-# collection = "kavrix_vaults"
-# databaseCollection = "kavrix_databases"
-# vaultCollection = "kavrix_vaults"
-
-# === Vault ===
-# Initial vault label for \`kavrix init\` (human-readable, not the ID).
-# Allowed: 1-64 chars, no control characters.
-# Example: vaultLabel = "personal"
-# vaultLabel = "personal"
-
-# === Profiles (optional) ===
-# Datastore profiles let you manage multiple vaults/databases.
-# They are stored separately in ~/.kavrix/profiles/ and managed via
-# \`kavrix db profile add/list/use\`. You do not need to edit them here.
-# Example:
-#   [profile]
-#   id = "work"
-#   configDir = "~/.kavrix/profiles"
-
-# === Advanced ===
-# Allow unencrypted transport to a non-local MongoDB (isolated networks only).
-# Default: false (TLS required for remote hosts)
-# allowInsecureTransport = false
-
-# End of Kavrix config.toml
-# After editing, run:
-#   kavrix init --secrets-stdin   # then enter label, passphrase x2 when prompted
-# Or for MongoDB:
-#   kavrix init --datastore mongodb --secrets-stdin
-# See \`kavrix init --help\` and \`kavrix frames init\` for stdin frame contracts.
+# Credential commands keep the profile and opaque vault ID explicit:
+#   kavrix put github/token --profile work --vault <vault-id>
+#   kavrix list --profile work --vault <vault-id>
+#   kavrix get github/token --reveal --profile work --vault <vault-id>
+#
+# Legacy version 2 single-vault initialization remains available only when
+# explicit legacy init routing options are supplied. See \`kavrix init --help\`.
 `;
 }
 async function ensureKavrixConfig() {
   const dir = getKavrixConfigDir();
   const path = getKavrixConfigPath();
+  await ensureSecureDirectory(dir);
   if (existsSync(path)) {
-    const st = await stat(path).catch(() => null);
-    if (st?.isFile()) return path;
-  }
-  await mkdir(dir, { recursive: true });
-  if (process.platform !== "win32") {
-    try {
-      const { chmod } = await import("node:fs/promises");
-      await chmod(dir, 448);
-    } catch {
-    }
+    await validateSecureFileSource(path, MAX_CONFIG_FILE_BYTES);
+    return path;
   }
   if (!existsSync(path)) {
     const content = generateDefaultConfigToml();
@@ -514,62 +417,10 @@ async function ensureKavrixConfig() {
       }
       throw error;
     });
-    if (process.platform !== "win32") {
-      try {
-        const { chmod } = await import("node:fs/promises");
-        await chmod(path, 384);
-      } catch {
-      }
-    }
   }
+  await validateSecureFileSource(path, MAX_CONFIG_FILE_BYTES);
   return path;
 }
-async function loadKavrixConfig() {
-  const path = getKavrixConfigPath();
-  if (!existsSync(path)) return null;
-  const raw = await readFile(path, "utf8");
-  const { parse } = await import("./chunk-TQHLXSBI.js");
-  let parsed;
-  try {
-    parsed = parse(raw);
-  } catch (error) {
-    throw new Error(
-      `Kavrix config.toml is not valid TOML at ${path}: ${error instanceof Error ? error.message : String(error)}`,
-      { cause: error }
-    );
-  }
-  const flattened = flattenConfig(parsed);
-  const result = kavrixConfigSchema.safeParse(flattened);
-  if (!result.success) {
-    throw new Error(
-      `Kavrix config.toml at ${path} is invalid: ${result.error.message}`
-    );
-  }
-  return result.data;
-}
-function flattenConfig(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
-    return {};
-  }
-  const record = value;
-  const out = {};
-  for (const [key, val] of Object.entries(record)) {
-    if (val !== null && typeof val === "object" && !Array.isArray(val)) {
-      const nested = val;
-      const isTable = Object.keys(nested).length > 0 && Object.values(nested).every(
-        (v) => typeof v === "string" || typeof v === "number" || typeof v === "boolean"
-      );
-      if (isTable) {
-        for (const [k, v] of Object.entries(nested)) {
-          if (!(k in out)) out[k] = v;
-        }
-        continue;
-      }
-    }
-    if (!(key in out)) out[key] = val;
-  }
-  return out;
-}
 function getConfigPathForDisplay() {
   const p = getKavrixConfigPath();
   if (process.platform === "win32") return p;
@@ -582,7 +433,6 @@ export {
   generateDefaultConfigToml,
   getConfigPathForDisplay,
   getKavrixConfigDir,
-  getKavrixConfigPath,
-  loadKavrixConfig
+  getKavrixConfigPath
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/chunks/{chunk-S4PSIM2L.js → chunk-T5WUZPWZ.js}

@@ -335,32 +335,6 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
-
-smol-toml@1.3.1 (BSD-3-Clause)
-Copyright (c) Squirrel Chat et al., All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
-
-1. Redistributions of source code must retain the above copyright notice, this
-   list of conditions and the following disclaimer.
-2. Redistributions in binary form must reproduce the above copyright notice,
-   this list of conditions and the following disclaimer in the
-   documentation and/or other materials provided with the distribution.
-3. Neither the name of the copyright holder nor the names of its contributors
-   may be used to endorse or promote products derived from this software without
-   specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
-WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
-SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
-CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
-OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */
 import { createRequire as __kavrixCreateRequire } from 'node:module';
 const __kavrixNodeRequire = __kavrixCreateRequire(import.meta.url);

package/dist/index.d.ts

@@ -1 +1 @@
-export declare const CLI_VERSION: "0.2.3";
+export declare const CLI_VERSION: "0.2.4";

package/dist/index.js

@@ -1 +1 @@
-export const CLI_VERSION = "0.2.3";
+export const CLI_VERSION = "0.2.4";

package/dist/kavrix.cdx.json

@@ -2,14 +2,14 @@
   "$schema": "https://cyclonedx.org/schema/bom-1.6.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:5f15ad7c-1df8-56fb-9965-b44180f1e269",
+  "serialNumber": "urn:uuid:d3421c7c-b36c-52f8-b41f-d2e2ecb7c749",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
-      "bom-ref": "pkg:npm/kavrix@0.2.3",
+      "bom-ref": "pkg:npm/kavrix@0.2.4",
       "name": "kavrix",
-      "version": "0.2.3",
+      "version": "0.2.4",
       "licenses": [
         {
           "license": {
@@ -17,49 +17,45 @@
           }
         }
       ],
-      "purl": "pkg:npm/kavrix@0.2.3",
+      "purl": "pkg:npm/kavrix@0.2.4",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e2edc037499ba077e3c013d9b4dece7548fb692181389e993e1ad97949eef06a"
+          "content": "768718b5a15f0879b330078f9cb99458eb2e2ed9ad2e313331bd7bfcf79e4d8f"
         }
       ],
       "properties": [
         {
           "name": "kavrix:artifact-sha256:dist/bin.js",
-          "value": "2a97208845deccfbbc7ecfd85e4cd75284970ea0cc1aab0c0c4a11dfaa3302c7"
+          "value": "533f0f9c7af1fab1e7b52e10559467f5c77150bd41bdf00a77326b609b30ea4c"
         },
         {
-          "name": "kavrix:artifact-sha256:dist/chunks/chunk-3MTK6AVM.js",
-          "value": "b97edcef4518f1ed837395dabcb52e37ba9290c6503683b135d65909510b2a85"
+          "name": "kavrix:artifact-sha256:dist/chunks/chunk-3LXISP6O.js",
+          "value": "61f0c83a61a6f465a0fb89dffba857eb10c8a1ccf8cbfafb2881093242a771b8"
         },
         {
-          "name": "kavrix:artifact-sha256:dist/chunks/chunk-D4JYLAAS.js",
-          "value": "831829635e39ac48a7ee8f8c29aba9ee4d6b26c692e4596ae87496364df10cb6"
+          "name": "kavrix:artifact-sha256:dist/chunks/chunk-7AJQTDJG.js",
+          "value": "c4fd05039ab74c74b2c8bec042a9d50b1c6a6582121b290a7114b8a7423207d1"
         },
         {
-          "name": "kavrix:artifact-sha256:dist/chunks/chunk-EOAERCV7.js",
-          "value": "79354c7a8d4830976ef80181b068451db168687ca1a62c2dc4b3e5d5647ae81e"
+          "name": "kavrix:artifact-sha256:dist/chunks/chunk-G6X4LRO2.js",
+          "value": "b3ef6cf44896c862c10b473eb8c28f26c10dc37b13ea01c6f5aab8762528860f"
         },
         {
-          "name": "kavrix:artifact-sha256:dist/chunks/chunk-FLG24WVK.js",
-          "value": "638f17426bf841930908111b95aa34800f81ac0e873e4a93fde80d85ad2105ad"
+          "name": "kavrix:artifact-sha256:dist/chunks/chunk-MNQHU3EJ.js",
+          "value": "99e6dd8cc70aec956bcf744f16d38208ddff83a23e53fb347f0f908869b1288d"
         },
         {
-          "name": "kavrix:artifact-sha256:dist/chunks/chunk-JOPGABL4.js",
-          "value": "639385ce75f9ba2830b6c3c24058c3991b79b6bffaf46ba6fd511bb3be1a79b8"
+          "name": "kavrix:artifact-sha256:dist/chunks/chunk-MTADWNBJ.js",
+          "value": "e3db9e58b9568a168716755bea5a8700312576c1b6d29e6a05a18d3e1dd34dd8"
         },
         {
-          "name": "kavrix:artifact-sha256:dist/chunks/chunk-S4PSIM2L.js",
-          "value": "ab78a6b45213adc80949d641b5f6be3640c4a2f275a1edbf12777a7f108d48a6"
-        },
-        {
-          "name": "kavrix:artifact-sha256:dist/chunks/chunk-TQHLXSBI.js",
-          "value": "21fceb7b0923f79c7b2e6bec86a134ece640ab97496bf92ab62d8e8e535ce87c"
+          "name": "kavrix:artifact-sha256:dist/chunks/chunk-T5WUZPWZ.js",
+          "value": "0cf9f2d2037159c935b8f70d8432f7b7b14f942ee02c651ffdf2e257d9dd9d10"
         },
         {
           "name": "kavrix:artifact-sha256:dist/index.js",
-          "value": "8a0382d40aba49d9663a24b540701a9f8d2e973adfcc5327e99bce00b3446efa"
+          "value": "2e7103dbbb89e1843298707402b3788d2eae3080fdac75dad803f81542fbdc08"
         }
       ]
     }
@@ -611,20 +607,6 @@
       ],
       "purl": "pkg:npm/slice-ansi@9.0.0"
     },
-    {
-      "type": "library",
-      "bom-ref": "pkg:npm/smol-toml@1.3.1",
-      "name": "smol-toml",
-      "version": "1.3.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "purl": "pkg:npm/smol-toml@1.3.1"
-    },
     {
       "type": "library",
       "bom-ref": "pkg:npm/sparse-bitfield@3.0.3",
@@ -877,7 +859,7 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/kavrix@0.2.3",
+      "ref": "pkg:npm/kavrix@0.2.4",
       "dependsOn": [
         "pkg:npm/mongodb@7.5.0",
         "urn:kavrix:data:eff-short-wordlist-for-passphrases-1"
@@ -1102,10 +1084,6 @@
         "pkg:npm/is-fullwidth-code-point@5.1.0"
       ]
     },
-    {
-      "ref": "pkg:npm/smol-toml@1.3.1",
-      "dependsOn": []
-    },
     {
       "ref": "pkg:npm/sparse-bitfield@3.0.3",
       "dependsOn": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kavrix",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Zero-knowledge credential vault command-line interface",
   "license": "MIT",
   "repository": {