kavrix 0.2.4 → 0.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -2
- package/dist/bin.js +1244 -134
- package/dist/index.d.ts +1 -1
- package/dist/index.js +1 -1
- package/dist/kavrix.cdx.json +8 -8
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -63,8 +63,8 @@ options in your installed version.
|
|
|
63
63
|
| `doctor`, `doctor health` | Validate a vault; repair bounded transient state safely. |
|
|
64
64
|
| `init`, `vault`, `legacy v2 commands` | Version 2 compatibility surface. |
|
|
65
65
|
| `run` | Execute one command with selected credentials injected as environment variables only. |
|
|
66
|
-
| `policy create/list/show/remove`
|
|
67
|
-
| `grant create/list/revoke`
|
|
66
|
+
| `policy create/list/show/remove/check/explain/lint/diff/suggest` | Stored rules plus read-only simulation, diagnostics, previews, and narrowing advice. |
|
|
67
|
+
| `grant create/list/show/revoke` | Temporary consumable authorizations with live expiry, restrictions, and use caps. |
|
|
68
68
|
| `audit` | Plaintext-free security audit trail. |
|
|
69
69
|
| `agent run`, `agent exec` | Credential firewall that brokers AI coding agents. |
|
|
70
70
|
|
|
@@ -78,8 +78,13 @@ kavrix run --secret AWS_KEY=aws/deploy-key -- terraform plan
|
|
|
78
78
|
|
|
79
79
|
kavrix policy create deploy --secret aws/deploy-key \
|
|
80
80
|
--command terraform --hash terraform=<sha256> --ttl 30m
|
|
81
|
+
kavrix policy check deploy -- terraform plan
|
|
82
|
+
kavrix policy explain deploy -- terraform plan
|
|
83
|
+
kavrix policy lint
|
|
84
|
+
kavrix policy suggest
|
|
81
85
|
|
|
82
86
|
kavrix grant create aws/deploy-key --ttl 15m --max-uses 3
|
|
87
|
+
kavrix grant show <grant-id>
|
|
83
88
|
|
|
84
89
|
kavrix agent run
|
|
85
90
|
```
|
|
@@ -87,6 +92,9 @@ kavrix agent run
|
|
|
87
92
|
Policies are evaluated fail-closed before any child process spawns, grants are
|
|
88
93
|
consumed atomically and can be revoked immediately, and `kavrix audit` records
|
|
89
94
|
policy, grant, authorization, and completion events without secret material.
|
|
95
|
+
The policy developer tools and grant inspection authenticate metadata without
|
|
96
|
+
decrypting credential payloads, modifying audit state, or creating a missing
|
|
97
|
+
authorization sidecar.
|
|
90
98
|
|
|
91
99
|
## Options worth knowing
|
|
92
100
|
|