vaulttool 2.0.0__tar.gz → 2.0.2__tar.gz

{vaulttool-2.0.0 → vaulttool-2.0.2}/PKG-INFO

@@ -1,9 +1,9 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.4
 Name: vaulttool
-Version: 2.0.0
+Version: 2.0.2
 Summary: Secure file encryption for secrets/configs
-Home-page: https://github.com/yourusername/vaulttool
 License: Apache-2
+License-File: LICENSE
 Author: Josef Fuchs
 Requires-Python: >=3.10
 Classifier: License :: Other/Proprietary License
@@ -12,10 +12,11 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Requires-Dist: cryptography
-Requires-Dist: pytest (>=8.4.2,<9.0.0)
 Requires-Dist: pyyaml
 Requires-Dist: typer
+Project-URL: Homepage, https://github.com/yourusername/vaulttool
 Description-Content-Type: text/markdown
 
 # Vault Tool
@@ -65,47 +66,69 @@ vaulttool refresh
 
 ## Table of Contents
 
-- [Features](#features)
-- [What's New in Version 2.0.0](#whats-new-in-version-200)
-  - [Cryptographic Components](#cryptographic-components)
+- [Vault Tool](#vault-tool)
+  - [TL;DR](#tldr)
+  - [Table of Contents](#table-of-contents)
+  - [Features](#features)
+  - [What's New in Version 2.0.0](#whats-new-in-version-200)
+    - [Cryptographic Components](#cryptographic-components)
   - [Vault File Format](#vault-file-format)
-  - [Simplified Installation](#simplified-installation)
-  - [Enhanced Security & Reliability](#enhanced-security--reliability)
-  - [Better Error Messages](#better-error-messages)
-  - [Comprehensive Logging](#comprehensive-logging)
-  - [Improved Error Handling](#improved-error-handling)
-  - [Test Coverage](#test-coverage)
-  - [What This Means For You](#what-this-means-for-you)
-  - [Upgrade Path](#upgrade-path)
-- [Requirements](#requirements)
-- [Installation](#installation)
-  - [Install Vault Tool (Recommended: Poetry)](#install-vault-tool-recommended-poetry)
-  - [Generate Encryption Key](#generate-encryption-key)
-- [Configuration](#configuration)
-  - [Environment Variable Configuration](#environment-variable-configuration)
-- [Usage](#usage)
-  - [Generate example configuration](#generate-example-configuration)
-  - [Display version information](#display-version-information)
-  - [Encrypt Files](#encrypt-files)
-  - [Remove all vault files](#remove-all-vault-files)
-  - [Refresh plaintext from vaults](#refresh-plaintext-from-vaults)
-  - [Ensure Plaintext Files Are Added to .gitignore](#ensure-plaintext-files-are-added-to-gitignore)
-- [Example Workflow](#example-workflow)
-  - [Initial Setup](#initial-setup)
-  - [Daily Workflow](#daily-workflow)
-- [Pre-commit Installation](#pre-commit-installation)
-- [Pre-commit Integration](#pre-commit-integration)
-- [Related Tools](#related-tools)
-- [Contributing](#contributing)
-  - [How to Contribute](#how-to-contribute)
-  - [Development Setup](#development-setup)
-- [Python API Usage](#python-api-usage)
-- [Utility Functions](#utility-functions)
-- [Security Best Practices](#security-best-practices)
-- [Troubleshooting](#troubleshooting)
-  - [Common Issues](#common-issues)
-  - [Getting Help](#getting-help)
-- [License](#license)
+    - [Simplified Installation](#simplified-installation)
+    - [Enhanced Security \& Reliability](#enhanced-security--reliability)
+    - [Better Error Messages](#better-error-messages)
+    - [Comprehensive Logging](#comprehensive-logging)
+    - [Improved Error Handling](#improved-error-handling)
+    - [Test Coverage](#test-coverage)
+    - [What This Means For You](#what-this-means-for-you)
+    - [Upgrade Path](#upgrade-path)
+  - [Requirements](#requirements)
+  - [Installation](#installation)
+    - [Install Vault Tool (Recommended: Poetry)](#install-vault-tool-recommended-poetry)
+      - [Development/Local Installation](#developmentlocal-installation)
+      - [Running the CLI](#running-the-cli)
+    - [Generate Encryption Key](#generate-encryption-key)
+  - [Configuration](#configuration)
+    - [Environment Variable Configuration](#environment-variable-configuration)
+      - [Environment Variable Naming Pattern](#environment-variable-naming-pattern)
+      - [Data Types](#data-types)
+      - [Example: CI/CD Pipeline](#example-cicd-pipeline)
+      - [Example: Docker Container](#example-docker-container)
+      - [Validation Rules](#validation-rules)
+  - [Usage](#usage)
+    - [Generate example configuration](#generate-example-configuration)
+    - [Display version information](#display-version-information)
+    - [Generate or rotate encryption key](#generate-or-rotate-encryption-key)
+    - [Encrypt Files](#encrypt-files)
+    - [Remove all vault files](#remove-all-vault-files)
+    - [Refresh plaintext from vaults](#refresh-plaintext-from-vaults)
+    - [Ensure Plaintext Files Are Added to .gitignore](#ensure-plaintext-files-are-added-to-gitignore)
+  - [Example Workflow](#example-workflow)
+    - [Initial Setup](#initial-setup)
+    - [Daily Workflow](#daily-workflow)
+  - [Pre-commit Installation](#pre-commit-installation)
+  - [Pre-commit Integration](#pre-commit-integration)
+  - [Related Tools](#related-tools)
+  - [Contributing](#contributing)
+    - [How to Contribute](#how-to-contribute)
+    - [Development Setup](#development-setup)
+    - [Releasing to PyPI](#releasing-to-pypi)
+      - [1. Setup GitHub Secret (One-Time)](#1-setup-github-secret-one-time)
+      - [2. Release Process](#2-release-process)
+      - [3. Automated Steps](#3-automated-steps)
+      - [4. Quick Commands](#4-quick-commands)
+      - [5. Monitor Release](#5-monitor-release)
+  - [Python API Usage](#python-api-usage)
+  - [Utility Functions](#utility-functions)
+  - [Security Best Practices](#security-best-practices)
+  - [Troubleshooting](#troubleshooting)
+    - [Common Issues](#common-issues)
+      - [Key file too small](#key-file-too-small)
+      - [Permission denied](#permission-denied)
+      - [Key file missing](#key-file-missing)
+      - [Configuration not found](#configuration-not-found)
+      - [Cryptography module errors](#cryptography-module-errors)
+    - [Getting Help](#getting-help)
+  - [License](#license)
 
 ## Features
 
@@ -293,7 +316,7 @@ except OSError as e:
 
 **Comprehensive Test Suite:**
 
-- **71 tests** covering all functionality (was 56)
+- **99 tests** covering all functionality (was 56)
 - **15 new tests** specifically for error handling paths
 - **100% pass rate** with 2.5s execution time
 - **Zero regressions** - all original tests still passing
@@ -388,15 +411,52 @@ pipx install dist/vaulttool-*.whl --force
 
 ### Generate Encryption Key
 
-To create a secure encryption key for your vault, you can use the provided script or generate one manually:
+To create a secure encryption key for your vault, you can use the built-in command or generate one manually:
 
-**Option 1: Using the provided script:**
+**Option 1: Using VaultTool CLI (Recommended):**
+
+```bash
+# Generate new key (reads path from .vaulttool.yml)
+vaulttool generate-key
+
+# Generate key in custom location
+vaulttool generate-key --key-file ~/.vaulttool/vault.key
+
+# Replace existing key with backup
+vaulttool generate-key --force
+
+# Replace key AND re-encrypt all vault files
+vaulttool generate-key --rekey --force
+```
+
+The `generate-key` command provides:
+- Automatic key generation with proper entropy (64 hex chars = 32 bytes)
+- Automatic backup of existing keys with timestamp
+- Optional rekey functionality to re-encrypt all vaults with new key
+- Proper file permissions (600 - owner read/write only)
+- Interactive prompts for safety (unless `--force` is used)
+
+**Rekey Process:**
+
+When using `--rekey`, the command performs these steps automatically:
+1. Restores all plaintext files from existing vaults
+2. Removes all old vault files
+3. Backs up the old key with timestamp
+4. Writes the new key
+5. Re-encrypts all files with the new key
+
+This is useful when:
+- You need to rotate encryption keys for security
+- A key may have been compromised
+- Migrating to a new key management system
+
+**Option 2: Using the provided script:**
 
 ```bash
 ./vaulttool-generate-key.sh
 ```
 
-**Option 2: Manual generation using Python:**
+**Option 3: Manual generation using Python:**
 
 ```bash
 # Create vaulttool directory in home
@@ -409,7 +469,7 @@ python3 -c "import secrets; print(secrets.token_hex(32))" > "$HOME/.vaulttool/va
 chmod 600 "$HOME/.vaulttool/vault.key"
 ```
 
-**Option 3: Manual generation using OpenSSL (if available):**
+**Option 4: Manual generation using OpenSSL (if available):**
 
 ```bash
 mkdir -p "$HOME/.vaulttool"
@@ -592,6 +652,46 @@ vaulttool gen-vaulttool > .vaulttool.yml
 vaulttool version
 ```
 
+### Generate or rotate encryption key
+
+Generate a new encryption key or rotate an existing one:
+
+```bash
+vaulttool generate-key [OPTIONS]
+
+  OPTIONS:
+    --key-file  -k       Path to key file (default: from .vaulttool.yml config)
+    --rekey              Re-encrypt all vault files with the new key
+    --force              Skip confirmation prompts (use with caution)
+    --verbose  -v        Enable verbose debug logging
+    --quiet    -q        Show only errors (suppress info/warning)
+    --help               Show this message and exit.
+```
+
+Examples:
+
+```bash
+# Generate new key using path from config
+vaulttool generate-key
+
+# Generate key in specific location
+vaulttool generate-key --key-file ~/.vaulttool/vault.key
+
+# Replace existing key (with backup)
+vaulttool generate-key --force
+
+# Rotate key and re-encrypt all vaults
+vaulttool generate-key --rekey --force
+```
+
+The command will:
+- Create a new key if none exists
+- Backup existing key with timestamp before replacing
+- Optionally re-encrypt all vault files with new key (`--rekey`)
+- Set proper file permissions (600)
+
+**Important:** Always test decryption after rekeying before deleting backup keys!
+
 ### Encrypt Files
 
 To encrypt your sensitive files, navigate to your project directory and run:
@@ -747,6 +847,84 @@ pip install -e .[dev]
 pre-commit install
 ```
 
+### Releasing to PyPI
+
+VaultTool uses automated GitHub Actions to publish releases to PyPI. Here's the quick guide:
+
+#### 1. Setup GitHub Secret (One-Time)
+
+**Choose one approach:**
+
+**Option A: Repository Secret** (Simple, automatic releases)
+1. Get PyPI token: https://pypi.org/manage/account/token/
+2. Go to: https://github.com/jifox/vaulttool/settings/secrets/actions
+3. Add secret: Name = `PYPI_TOKEN`, Value = your token
+
+**Option B: Environment Secret** (More secure, requires approval)
+1. Get PyPI token: https://pypi.org/manage/account/token/
+2. Go to: https://github.com/jifox/vaulttool/settings/environments
+3. Create environment: `pypi-production` with protection rules
+4. Add secret to environment: Name = `PYPI_TOKEN`
+5. Uncomment `environment: pypi-production` in `.github/workflows/release.yml`
+
+#### 2. Release Process
+
+```bash
+# Update version
+poetry version 2.0.1
+
+# Update CHANGELOG.md with release notes
+
+# Commit changes
+git add pyproject.toml CHANGELOG.md
+git commit -m "chore: prepare release v2.0.1"
+git push origin main
+
+# Create and push tag (triggers automated release)
+git tag v2.0.1
+git push origin v2.0.1
+```
+
+#### 3. Automated Steps
+
+When you push a `v*` tag, GitHub Actions automatically:
+
+1. ✅ Validates version matches tag
+2. ✅ Runs all tests
+3. ✅ Builds wheel and source distribution
+4. ✅ Publishes to PyPI
+5. ✅ Creates GitHub release with artifacts
+
+#### 4. Quick Commands
+
+```bash
+# Patch release (2.0.0 → 2.0.1)
+poetry version patch && git add pyproject.toml CHANGELOG.md && \
+git commit -m "chore: release v$(poetry version -s)" && \
+git tag v$(poetry version -s) && \
+git push origin main && git push origin v$(poetry version -s)
+
+# Minor release (2.0.0 → 2.1.0)
+poetry version minor && git add pyproject.toml CHANGELOG.md && \
+git commit -m "chore: release v$(poetry version -s)" && \
+git tag v$(poetry version -s) && \
+git push origin main && git push origin v$(poetry version -s)
+
+# Pre-release (beta/RC)
+poetry version 2.1.0-beta.1 && git add pyproject.toml CHANGELOG.md && \
+git commit -m "chore: release v$(poetry version -s)" && \
+git tag v$(poetry version -s) && \
+git push origin main && git push origin v$(poetry version -s)
+```
+
+#### 5. Monitor Release
+
+- **Workflow**: https://github.com/jifox/vaulttool/actions/workflows/release.yml
+- **Releases**: https://github.com/jifox/vaulttool/releases
+- **PyPI**: https://pypi.org/project/vaulttool/
+
+For detailed documentation, see [docs/PYPI_RELEASE_WORKFLOW.md](docs/PYPI_RELEASE_WORKFLOW.md)
+
 ## Python API Usage
 
 ```python

{vaulttool-2.0.0 → vaulttool-2.0.2}/README.md

@@ -45,47 +45,69 @@ vaulttool refresh
 
 ## Table of Contents
 
-- [Features](#features)
-- [What's New in Version 2.0.0](#whats-new-in-version-200)
-  - [Cryptographic Components](#cryptographic-components)
+- [Vault Tool](#vault-tool)
+  - [TL;DR](#tldr)
+  - [Table of Contents](#table-of-contents)
+  - [Features](#features)
+  - [What's New in Version 2.0.0](#whats-new-in-version-200)
+    - [Cryptographic Components](#cryptographic-components)
   - [Vault File Format](#vault-file-format)
-  - [Simplified Installation](#simplified-installation)
-  - [Enhanced Security & Reliability](#enhanced-security--reliability)
-  - [Better Error Messages](#better-error-messages)
-  - [Comprehensive Logging](#comprehensive-logging)
-  - [Improved Error Handling](#improved-error-handling)
-  - [Test Coverage](#test-coverage)
-  - [What This Means For You](#what-this-means-for-you)
-  - [Upgrade Path](#upgrade-path)
-- [Requirements](#requirements)
-- [Installation](#installation)
-  - [Install Vault Tool (Recommended: Poetry)](#install-vault-tool-recommended-poetry)
-  - [Generate Encryption Key](#generate-encryption-key)
-- [Configuration](#configuration)
-  - [Environment Variable Configuration](#environment-variable-configuration)
-- [Usage](#usage)
-  - [Generate example configuration](#generate-example-configuration)
-  - [Display version information](#display-version-information)
-  - [Encrypt Files](#encrypt-files)
-  - [Remove all vault files](#remove-all-vault-files)
-  - [Refresh plaintext from vaults](#refresh-plaintext-from-vaults)
-  - [Ensure Plaintext Files Are Added to .gitignore](#ensure-plaintext-files-are-added-to-gitignore)
-- [Example Workflow](#example-workflow)
-  - [Initial Setup](#initial-setup)
-  - [Daily Workflow](#daily-workflow)
-- [Pre-commit Installation](#pre-commit-installation)
-- [Pre-commit Integration](#pre-commit-integration)
-- [Related Tools](#related-tools)
-- [Contributing](#contributing)
-  - [How to Contribute](#how-to-contribute)
-  - [Development Setup](#development-setup)
-- [Python API Usage](#python-api-usage)
-- [Utility Functions](#utility-functions)
-- [Security Best Practices](#security-best-practices)
-- [Troubleshooting](#troubleshooting)
-  - [Common Issues](#common-issues)
-  - [Getting Help](#getting-help)
-- [License](#license)
+    - [Simplified Installation](#simplified-installation)
+    - [Enhanced Security \& Reliability](#enhanced-security--reliability)
+    - [Better Error Messages](#better-error-messages)
+    - [Comprehensive Logging](#comprehensive-logging)
+    - [Improved Error Handling](#improved-error-handling)
+    - [Test Coverage](#test-coverage)
+    - [What This Means For You](#what-this-means-for-you)
+    - [Upgrade Path](#upgrade-path)
+  - [Requirements](#requirements)
+  - [Installation](#installation)
+    - [Install Vault Tool (Recommended: Poetry)](#install-vault-tool-recommended-poetry)
+      - [Development/Local Installation](#developmentlocal-installation)
+      - [Running the CLI](#running-the-cli)
+    - [Generate Encryption Key](#generate-encryption-key)
+  - [Configuration](#configuration)
+    - [Environment Variable Configuration](#environment-variable-configuration)
+      - [Environment Variable Naming Pattern](#environment-variable-naming-pattern)
+      - [Data Types](#data-types)
+      - [Example: CI/CD Pipeline](#example-cicd-pipeline)
+      - [Example: Docker Container](#example-docker-container)
+      - [Validation Rules](#validation-rules)
+  - [Usage](#usage)
+    - [Generate example configuration](#generate-example-configuration)
+    - [Display version information](#display-version-information)
+    - [Generate or rotate encryption key](#generate-or-rotate-encryption-key)
+    - [Encrypt Files](#encrypt-files)
+    - [Remove all vault files](#remove-all-vault-files)
+    - [Refresh plaintext from vaults](#refresh-plaintext-from-vaults)
+    - [Ensure Plaintext Files Are Added to .gitignore](#ensure-plaintext-files-are-added-to-gitignore)
+  - [Example Workflow](#example-workflow)
+    - [Initial Setup](#initial-setup)
+    - [Daily Workflow](#daily-workflow)
+  - [Pre-commit Installation](#pre-commit-installation)
+  - [Pre-commit Integration](#pre-commit-integration)
+  - [Related Tools](#related-tools)
+  - [Contributing](#contributing)
+    - [How to Contribute](#how-to-contribute)
+    - [Development Setup](#development-setup)
+    - [Releasing to PyPI](#releasing-to-pypi)
+      - [1. Setup GitHub Secret (One-Time)](#1-setup-github-secret-one-time)
+      - [2. Release Process](#2-release-process)
+      - [3. Automated Steps](#3-automated-steps)
+      - [4. Quick Commands](#4-quick-commands)
+      - [5. Monitor Release](#5-monitor-release)
+  - [Python API Usage](#python-api-usage)
+  - [Utility Functions](#utility-functions)
+  - [Security Best Practices](#security-best-practices)
+  - [Troubleshooting](#troubleshooting)
+    - [Common Issues](#common-issues)
+      - [Key file too small](#key-file-too-small)
+      - [Permission denied](#permission-denied)
+      - [Key file missing](#key-file-missing)
+      - [Configuration not found](#configuration-not-found)
+      - [Cryptography module errors](#cryptography-module-errors)
+    - [Getting Help](#getting-help)
+  - [License](#license)
 
 ## Features
 
@@ -273,7 +295,7 @@ except OSError as e:
 
 **Comprehensive Test Suite:**
 
-- **71 tests** covering all functionality (was 56)
+- **99 tests** covering all functionality (was 56)
 - **15 new tests** specifically for error handling paths
 - **100% pass rate** with 2.5s execution time
 - **Zero regressions** - all original tests still passing
@@ -368,15 +390,52 @@ pipx install dist/vaulttool-*.whl --force
 
 ### Generate Encryption Key
 
-To create a secure encryption key for your vault, you can use the provided script or generate one manually:
+To create a secure encryption key for your vault, you can use the built-in command or generate one manually:
 
-**Option 1: Using the provided script:**
+**Option 1: Using VaultTool CLI (Recommended):**
+
+```bash
+# Generate new key (reads path from .vaulttool.yml)
+vaulttool generate-key
+
+# Generate key in custom location
+vaulttool generate-key --key-file ~/.vaulttool/vault.key
+
+# Replace existing key with backup
+vaulttool generate-key --force
+
+# Replace key AND re-encrypt all vault files
+vaulttool generate-key --rekey --force
+```
+
+The `generate-key` command provides:
+- Automatic key generation with proper entropy (64 hex chars = 32 bytes)
+- Automatic backup of existing keys with timestamp
+- Optional rekey functionality to re-encrypt all vaults with new key
+- Proper file permissions (600 - owner read/write only)
+- Interactive prompts for safety (unless `--force` is used)
+
+**Rekey Process:**
+
+When using `--rekey`, the command performs these steps automatically:
+1. Restores all plaintext files from existing vaults
+2. Removes all old vault files
+3. Backs up the old key with timestamp
+4. Writes the new key
+5. Re-encrypts all files with the new key
+
+This is useful when:
+- You need to rotate encryption keys for security
+- A key may have been compromised
+- Migrating to a new key management system
+
+**Option 2: Using the provided script:**
 
 ```bash
 ./vaulttool-generate-key.sh
 ```
 
-**Option 2: Manual generation using Python:**
+**Option 3: Manual generation using Python:**
 
 ```bash
 # Create vaulttool directory in home
@@ -389,7 +448,7 @@ python3 -c "import secrets; print(secrets.token_hex(32))" > "$HOME/.vaulttool/va
 chmod 600 "$HOME/.vaulttool/vault.key"
 ```
 
-**Option 3: Manual generation using OpenSSL (if available):**
+**Option 4: Manual generation using OpenSSL (if available):**
 
 ```bash
 mkdir -p "$HOME/.vaulttool"
@@ -572,6 +631,46 @@ vaulttool gen-vaulttool > .vaulttool.yml
 vaulttool version
 ```
 
+### Generate or rotate encryption key
+
+Generate a new encryption key or rotate an existing one:
+
+```bash
+vaulttool generate-key [OPTIONS]
+
+  OPTIONS:
+    --key-file  -k       Path to key file (default: from .vaulttool.yml config)
+    --rekey              Re-encrypt all vault files with the new key
+    --force              Skip confirmation prompts (use with caution)
+    --verbose  -v        Enable verbose debug logging
+    --quiet    -q        Show only errors (suppress info/warning)
+    --help               Show this message and exit.
+```
+
+Examples:
+
+```bash
+# Generate new key using path from config
+vaulttool generate-key
+
+# Generate key in specific location
+vaulttool generate-key --key-file ~/.vaulttool/vault.key
+
+# Replace existing key (with backup)
+vaulttool generate-key --force
+
+# Rotate key and re-encrypt all vaults
+vaulttool generate-key --rekey --force
+```
+
+The command will:
+- Create a new key if none exists
+- Backup existing key with timestamp before replacing
+- Optionally re-encrypt all vault files with new key (`--rekey`)
+- Set proper file permissions (600)
+
+**Important:** Always test decryption after rekeying before deleting backup keys!
+
 ### Encrypt Files
 
 To encrypt your sensitive files, navigate to your project directory and run:
@@ -727,6 +826,84 @@ pip install -e .[dev]
 pre-commit install
 ```
 
+### Releasing to PyPI
+
+VaultTool uses automated GitHub Actions to publish releases to PyPI. Here's the quick guide:
+
+#### 1. Setup GitHub Secret (One-Time)
+
+**Choose one approach:**
+
+**Option A: Repository Secret** (Simple, automatic releases)
+1. Get PyPI token: https://pypi.org/manage/account/token/
+2. Go to: https://github.com/jifox/vaulttool/settings/secrets/actions
+3. Add secret: Name = `PYPI_TOKEN`, Value = your token
+
+**Option B: Environment Secret** (More secure, requires approval)
+1. Get PyPI token: https://pypi.org/manage/account/token/
+2. Go to: https://github.com/jifox/vaulttool/settings/environments
+3. Create environment: `pypi-production` with protection rules
+4. Add secret to environment: Name = `PYPI_TOKEN`
+5. Uncomment `environment: pypi-production` in `.github/workflows/release.yml`
+
+#### 2. Release Process
+
+```bash
+# Update version
+poetry version 2.0.1
+
+# Update CHANGELOG.md with release notes
+
+# Commit changes
+git add pyproject.toml CHANGELOG.md
+git commit -m "chore: prepare release v2.0.1"
+git push origin main
+
+# Create and push tag (triggers automated release)
+git tag v2.0.1
+git push origin v2.0.1
+```
+
+#### 3. Automated Steps
+
+When you push a `v*` tag, GitHub Actions automatically:
+
+1. ✅ Validates version matches tag
+2. ✅ Runs all tests
+3. ✅ Builds wheel and source distribution
+4. ✅ Publishes to PyPI
+5. ✅ Creates GitHub release with artifacts
+
+#### 4. Quick Commands
+
+```bash
+# Patch release (2.0.0 → 2.0.1)
+poetry version patch && git add pyproject.toml CHANGELOG.md && \
+git commit -m "chore: release v$(poetry version -s)" && \
+git tag v$(poetry version -s) && \
+git push origin main && git push origin v$(poetry version -s)
+
+# Minor release (2.0.0 → 2.1.0)
+poetry version minor && git add pyproject.toml CHANGELOG.md && \
+git commit -m "chore: release v$(poetry version -s)" && \
+git tag v$(poetry version -s) && \
+git push origin main && git push origin v$(poetry version -s)
+
+# Pre-release (beta/RC)
+poetry version 2.1.0-beta.1 && git add pyproject.toml CHANGELOG.md && \
+git commit -m "chore: release v$(poetry version -s)" && \
+git tag v$(poetry version -s) && \
+git push origin main && git push origin v$(poetry version -s)
+```
+
+#### 5. Monitor Release
+
+- **Workflow**: https://github.com/jifox/vaulttool/actions/workflows/release.yml
+- **Releases**: https://github.com/jifox/vaulttool/releases
+- **PyPI**: https://pypi.org/project/vaulttool/
+
+For detailed documentation, see [docs/PYPI_RELEASE_WORKFLOW.md](docs/PYPI_RELEASE_WORKFLOW.md)
+
 ## Python API Usage
 
 ```python

{vaulttool-2.0.0 → vaulttool-2.0.2}/pyproject.toml

@@ -1,9 +1,9 @@
 [project]
 name = "vaulttool"
-version = "2.0.0"
+version = "2.0.2"
 description = "Secure file encryption for secrets/configs"
-authors = ["Josef Fuchs"]
-license = { text = "Apache-2" }
+authors = [{name = "Josef Fuchs"}]
+license = {text = "Apache-2"}
 readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
@@ -18,7 +18,7 @@ vaulttool = "vaulttool.cli:app"
 
 [tool.poetry]
 name = "vaulttool"
-version = "2.0.0"
+version = "2.0.2"
 description = "Secure file encryption for secrets/configs"
 authors = ["Josef Fuchs"]
 license = "Apache-2"