passvault-cli 0.1.0__tar.gz

passvault_cli-0.1.0/.freebuff/project-id

@@ -0,0 +1 @@
+e81d8a33-4837-4bf9-93e1-0c76f931902a

passvault_cli-0.1.0/.github/workflows/tests.yml

@@ -0,0 +1,32 @@
+name: tests
+
+on:
+  push:
+    branches: ["**"]
+  pull_request:
+
+jobs:
+  test:
+    name: pytest (${{ matrix.os }}, py${{ matrix.python-version }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      - name: Run tests
+        run: pytest --cov=passvault --cov-report=term-missing

passvault_cli-0.1.0/.gitignore

@@ -0,0 +1,46 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# Distribution / packaging
+build/
+dist/
+*.egg-info/
+*.egg
+eggs/
+.eggs/
+wheels/
+
+# Virtual environments
+.venv/
+venv/
+env/
+ENV/
+
+# Test / coverage artifacts
+.pytest_cache/
+.coverage
+.coverage.*
+htmlcov/
+.tox/
+.mypy_cache/
+.ruff_cache/
+
+# Environment / secrets
+.env
+.env.*
+*.env
+
+# Local test vault files (never commit real vaults)
+*.dat
+vault.dat
+test-vault/
+tmp_vault*
+
+# Editors / OS
+.idea/
+.vscode/
+*.swp
+.DS_Store
+Thumbs.db

passvault_cli-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 passvault contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

passvault_cli-0.1.0/PKG-INFO

@@ -0,0 +1,211 @@
+Metadata-Version: 2.5
+Name: passvault-cli
+Version: 0.1.0
+Summary: A local, encrypted, offline password manager CLI.
+Project-URL: Homepage, https://github.com/Ajeet2005/passvault
+Project-URL: Repository, https://github.com/Ajeet2005/passvault
+Project-URL: Issues, https://github.com/Ajeet2005/passvault/issues
+Author: passvault contributors
+License: MIT License
+        
+        Copyright (c) 2026 passvault contributors
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Keywords: cli,encryption,offline,password-manager,security,vault
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security :: Cryptography
+Classifier: Topic :: Utilities
+Requires-Python: >=3.10
+Requires-Dist: argon2-cffi>=23.1
+Requires-Dist: cryptography>=42.0
+Requires-Dist: inquirerpy>=0.3.4
+Requires-Dist: platformdirs>=4.0
+Requires-Dist: pyperclip>=1.8
+Requires-Dist: rich>=13.0
+Requires-Dist: typer>=0.12
+Provides-Extra: dev
+Requires-Dist: build>=1.2; extra == 'dev'
+Requires-Dist: pytest-cov>=5.0; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: twine>=5.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# passvault
+
+A local, encrypted, offline password manager CLI.
+
+> **PyPI note:** the distribution is published as
+> [`passvault-cli`](https://pypi.org/project/passvault-cli/) because the name
+> `passvault` was already taken. The installed command and import name are
+> still `passvault`.
+
+- No network calls, no accounts, no telemetry.
+- Everything lives in a single encrypted file on your machine.
+- Your master password is required on **every** command. There is no session
+  caching and no OS keychain integration — by design.
+
+## How it works
+
+Entries are stored as a JSON object and encrypted with
+[Fernet](https://cryptography.io/en/latest/fernet/) (AES-128-CBC + HMAC-SHA256,
+authenticated encryption).
+
+The encryption key is derived from your master password with **Argon2id**
+(memory-hard, 64 MiB, 3 passes) using a random 16-byte salt.
+
+The vault file is laid out as:
+
+```
+salt (16 bytes) || Fernet token
+```
+
+The salt is generated once at vault creation and never rotated. Deriving the
+key requires the master password, which is never stored, logged, or written
+anywhere. A wrong master password fails loudly — authenticated decryption means
+we never return garbage plaintext.
+
+## Install
+
+From PyPI:
+
+```bash
+pip install passvault-cli
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/Ajeet2005/passvault.git
+cd passvault
+python -m venv .venv
+# Windows: .venv\Scripts\activate
+source .venv/bin/activate
+pip install -e .
+```
+
+Requires Python 3.10+.
+
+## Usage
+
+### Create a vault
+
+```bash
+passvault init
+```
+
+Refuses to run if a vault already exists. You'll be asked for your master
+password twice.
+
+### Add an entry
+
+```bash
+passvault add github --generate --length 24 --username me@example.com
+passvault add email                 # prompt for the password (hidden input)
+```
+
+Existing entries are only overwritten after a confirmation prompt. Passwords
+are never echoed back to the terminal.
+
+### List entries
+
+```bash
+passvault list
+```
+
+Shows names, usernames, and whether notes are set. **Never** prints stored
+passwords.
+
+### Retrieve a password
+
+```bash
+passvault get github               # print the password to stdout
+passvault get github --clipboard   # copy to the clipboard, don't print it
+```
+
+The behavior is always explicit: you choose whether the secret is printed or
+copied. There is no silent default.
+
+### Delete an entry
+
+```bash
+passvault delete github
+```
+
+Asks for confirmation first.
+
+### Generate a password without a vault
+
+```bash
+passvault generate --length 32
+passvault generate --no-symbols
+passvault generate --no-digits --clipboard
+```
+
+## Vault location
+
+The vault lives in your OS's user data directory:
+
+| OS      | Path                                              |
+| ------- | ------------------------------------------------- |
+| Windows | `%LOCALAPPDATA%\passvault\vault.dat`              |
+| macOS   | `~/Library/Application Support/passvault/vault.dat` |
+| Linux   | `~/.local/share/passvault/vault.dat`              |
+
+## Development
+
+```bash
+pip install -e ".[dev]"
+pytest --cov=passvault
+```
+
+Test layout:
+
+- `tests/test_crypto.py` — key derivation determinism, round trips, wrong-password
+  failure.
+- `tests/test_storage.py` — create/load/save round trips, salt persistence,
+  refusing writes on a wrong password.
+- `tests/test_generator.py` — length and character-class guarantees.
+- `tests/test_cli.py` — end-to-end command tests via Typer's `CliRunner`.
+
+## Security notes
+
+- The master password is never stored, in any form.
+- Decrypted passwords are only printed when you explicitly run `get` without
+  `--clipboard`.
+- All randomness uses Python's `secrets` module, never `random`.
+- A wrong master password always fails loudly.
+- No session caching and no OS keychain support in this version.
+
+## Disclaimer
+
+This is a learning project. It has **not** been audited. For real secrets, use a
+battle-tested password manager.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

passvault_cli-0.1.0/README.md

@@ -0,0 +1,154 @@
+# passvault
+
+A local, encrypted, offline password manager CLI.
+
+> **PyPI note:** the distribution is published as
+> [`passvault-cli`](https://pypi.org/project/passvault-cli/) because the name
+> `passvault` was already taken. The installed command and import name are
+> still `passvault`.
+
+- No network calls, no accounts, no telemetry.
+- Everything lives in a single encrypted file on your machine.
+- Your master password is required on **every** command. There is no session
+  caching and no OS keychain integration — by design.
+
+## How it works
+
+Entries are stored as a JSON object and encrypted with
+[Fernet](https://cryptography.io/en/latest/fernet/) (AES-128-CBC + HMAC-SHA256,
+authenticated encryption).
+
+The encryption key is derived from your master password with **Argon2id**
+(memory-hard, 64 MiB, 3 passes) using a random 16-byte salt.
+
+The vault file is laid out as:
+
+```
+salt (16 bytes) || Fernet token
+```
+
+The salt is generated once at vault creation and never rotated. Deriving the
+key requires the master password, which is never stored, logged, or written
+anywhere. A wrong master password fails loudly — authenticated decryption means
+we never return garbage plaintext.
+
+## Install
+
+From PyPI:
+
+```bash
+pip install passvault-cli
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/Ajeet2005/passvault.git
+cd passvault
+python -m venv .venv
+# Windows: .venv\Scripts\activate
+source .venv/bin/activate
+pip install -e .
+```
+
+Requires Python 3.10+.
+
+## Usage
+
+### Create a vault
+
+```bash
+passvault init
+```
+
+Refuses to run if a vault already exists. You'll be asked for your master
+password twice.
+
+### Add an entry
+
+```bash
+passvault add github --generate --length 24 --username me@example.com
+passvault add email                 # prompt for the password (hidden input)
+```
+
+Existing entries are only overwritten after a confirmation prompt. Passwords
+are never echoed back to the terminal.
+
+### List entries
+
+```bash
+passvault list
+```
+
+Shows names, usernames, and whether notes are set. **Never** prints stored
+passwords.
+
+### Retrieve a password
+
+```bash
+passvault get github               # print the password to stdout
+passvault get github --clipboard   # copy to the clipboard, don't print it
+```
+
+The behavior is always explicit: you choose whether the secret is printed or
+copied. There is no silent default.
+
+### Delete an entry
+
+```bash
+passvault delete github
+```
+
+Asks for confirmation first.
+
+### Generate a password without a vault
+
+```bash
+passvault generate --length 32
+passvault generate --no-symbols
+passvault generate --no-digits --clipboard
+```
+
+## Vault location
+
+The vault lives in your OS's user data directory:
+
+| OS      | Path                                              |
+| ------- | ------------------------------------------------- |
+| Windows | `%LOCALAPPDATA%\passvault\vault.dat`              |
+| macOS   | `~/Library/Application Support/passvault/vault.dat` |
+| Linux   | `~/.local/share/passvault/vault.dat`              |
+
+## Development
+
+```bash
+pip install -e ".[dev]"
+pytest --cov=passvault
+```
+
+Test layout:
+
+- `tests/test_crypto.py` — key derivation determinism, round trips, wrong-password
+  failure.
+- `tests/test_storage.py` — create/load/save round trips, salt persistence,
+  refusing writes on a wrong password.
+- `tests/test_generator.py` — length and character-class guarantees.
+- `tests/test_cli.py` — end-to-end command tests via Typer's `CliRunner`.
+
+## Security notes
+
+- The master password is never stored, in any form.
+- Decrypted passwords are only printed when you explicitly run `get` without
+  `--clipboard`.
+- All randomness uses Python's `secrets` module, never `random`.
+- A wrong master password always fails loudly.
+- No session caching and no OS keychain support in this version.
+
+## Disclaimer
+
+This is a learning project. It has **not** been audited. For real secrets, use a
+battle-tested password manager.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

passvault_cli-0.1.0/pyproject.toml

@@ -0,0 +1,62 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+# PyPI distribution name; the importable package remains `passvault`.
+name = "passvault-cli"
+version = "0.1.0"
+description = "A local, encrypted, offline password manager CLI."
+readme = "README.md"
+requires-python = ">=3.10"
+license = { file = "LICENSE" }
+authors = [{ name = "passvault contributors" }]
+keywords = ["password-manager", "cli", "encryption", "security", "offline", "vault"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Environment :: Console",
+    "Intended Audience :: End Users/Desktop",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Security :: Cryptography",
+    "Topic :: Utilities",
+]
+dependencies = [
+    "typer>=0.12",
+    "rich>=13.0",
+    "inquirerpy>=0.3.4",
+    "cryptography>=42.0",
+    "argon2-cffi>=23.1",
+    "pyperclip>=1.8",
+    "platformdirs>=4.0",
+]
+
+[project.optional-dependencies]
+dev = [
+    "pytest>=8.0",
+    "pytest-cov>=5.0",
+    "build>=1.2",
+    "twine>=5.0",
+]
+
+[project.urls]
+Homepage = "https://github.com/Ajeet2005/passvault"
+Repository = "https://github.com/Ajeet2005/passvault"
+Issues = "https://github.com/Ajeet2005/passvault/issues"
+
+[project.scripts]
+passvault = "passvault.cli:app"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/passvault"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "-q"
+
+[tool.coverage.run]
+source = ["passvault"]

passvault_cli-0.1.0/src/passvault/__init__.py

@@ -0,0 +1,7 @@
+"""passvault — a local, encrypted, offline password manager CLI."""
+
+from __future__ import annotations
+
+__version__ = "0.1.0"
+
+__all__ = ["__version__"]