kavrix 0.2.8 → 0.2.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -1
- package/dist/bin.js +3993 -10628
- package/dist/chunks/{chunk-ZMOWONMK.js → chunk-ANPXACEG.js} +8 -5
- package/dist/chunks/{chunk-IEMCXQSI.js → chunk-M5JGVDUB.js} +5033 -5037
- package/dist/chunks/chunk-U3OGKLIP.js +357 -0
- package/dist/chunks/{chunk-YBEYXNQM.js → chunk-USR7UIAH.js} +2780 -2780
- package/dist/chunks/{chunk-6DRI32NY.js → chunk-YD2AVKUK.js} +1 -1
- package/dist/chunks/chunk-ZPPX5ZN4.js +7875 -0
- package/dist/index.d.ts +1 -1
- package/dist/index.js +1 -1
- package/dist/kavrix.cdx.json +24 -16
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -28,6 +28,20 @@ kavrix --help
|
|
|
28
28
|
|
|
29
29
|
## Quick start
|
|
30
30
|
|
|
31
|
+
For a new local-file setup, run:
|
|
32
|
+
|
|
33
|
+
```sh
|
|
34
|
+
kavrix init
|
|
35
|
+
```
|
|
36
|
+
|
|
37
|
+
The guided TTY flow preflights the profile and protected destinations, then uses
|
|
38
|
+
masked prompts to create an encrypted database, one default vault, and a
|
|
39
|
+
separate recovery kit. It verifies recovery before selecting the profile.
|
|
40
|
+
Protected labels and passphrases never enter argv, environment variables, or
|
|
41
|
+
the generated non-secret config reference.
|
|
42
|
+
|
|
43
|
+
For MongoDB or explicitly routed setup, use the database commands directly:
|
|
44
|
+
|
|
31
45
|
```sh
|
|
32
46
|
# 1. Register and select a non-secret route to your datastore.
|
|
33
47
|
kavrix db profile add work --datastore file \
|
|
@@ -83,7 +97,7 @@ never store MongoDB credentials, passphrases, private labels, keys, or values.
|
|
|
83
97
|
| `key status/verify/copy/replicate/assign/rewrap` | Manage protected key files. |
|
|
84
98
|
| `recovery create/verify/status/revoke/use` | Manage recovery kits. |
|
|
85
99
|
| `doctor`, `doctor health` | Validate a vault; repair bounded transient state safely. |
|
|
86
|
-
| `init`, `vault`, `legacy v2 commands` |
|
|
100
|
+
| `init`, `vault`, `legacy v2 commands` | Guided local setup; explicit/non-TTY init remains version 2 compatible. |
|
|
87
101
|
| `run` | Execute one command with selected credentials injected as environment variables only. |
|
|
88
102
|
| `policy create/list/show/remove/check/explain/lint/diff/suggest` | Stored rules plus read-only simulation, diagnostics, previews, and narrowing advice. |
|
|
89
103
|
| `grant create/list/show/revoke` | Temporary consumable authorizations with live expiry, restrictions, and use caps. |
|