v0.1.4

Full Changelog: v0.1.3...v0.1.4

Kavrix 0.1.3

Kavrix 0.1.3

Kavrix 0.1.3 expands the zero-knowledge CLI from local vaults into encrypted,
multi-vault database containers while strengthening protected-file rollback and
cross-platform reliability.

What's new

• Use encrypted database containers backed by either a protected local file or
  MongoDB. Sensitive vault data remains encrypted before it reaches either
  datastore.
• Configure bound datastore profiles while retaining explicit per-command
  routing overrides.
• Initialize and inspect owner databases, create and rename vaults, create local
  share keys, issue recovery kits, and replace an owner key through recovery.
• Detect stale, rolled-back, or mismatched database state with authenticated
  revision anchors.
• Migrate legacy local vaults with copy-first verification and guarded rollback.

Security and reliability

• Protected-file cleanup now follows the exact file object it created, preventing
  pathname replacement or inode reuse from redirecting rollback into another
  file.
• Ambiguous datastore commits preserve the recovery material needed to reconcile
  the result instead of assuming that a failed response means no write occurred.
• Windows protected-file replacement and user-only ACL handling are more reliable.
• Database command output paths are sanitized before terminal rendering.
• Explicit datastore, database, collection, data-file, and key-file overrides
  remain effective when a profile is selected.

Verification

• Passed the full CI matrix on Linux x64/arm64, macOS x64/arm64, and Windows x64.
• Passed CodeQL, dependency audit, package-content inspection, packed CLI smoke
  tests, file-datastore acceptance tests, and supported Node.js runtime checks.

Install or upgrade with:

npm install --global kavrix@0.1.3

Full changelog: https://github.com/d4rkNinja/kavrix/blob/v0.1.3/CHANGELOG.md

Changes since 0.1.2: v0.1.2...v0.1.3

v0.1.2

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• fix: verify the npm-only CLI across every supported platform and Node version by @d4rkNinja in #1
• feat(cli): implement production initialization adapter factory (#14) by @d4rkNinja in #79
• feat(cli): wire public creds init command into packed executable (#15) by @d4rkNinja in #80
• feat(cli): wire crash-safe creds init resume and cancel (#16) by @d4rkNinja in #81
• feat(cli): implement invocation-scoped unlocked command runner (#17) by @d4rkNinja in #82
• feat(cli): support remembered-device, protected-key-file, and passphrase unlock (#18) by @d4rkNinja in #83
• feat(cli): expose creds unlock --check and production creds lock (#19) by @d4rkNinja in #84
• feat(cli): define strict CLI group, credential, field, and lifecycle mutation schemas (#20) by @d4rkNinja in #85
• feat(cli): adapt VaultMutationService to production CLI mutation ports (#21) by @d4rkNinja in #86
• feat(cli): expose group create, list, rename, archive, restore, and delete commands (#22) by @d4rkNinja in #87
• Expose credential create, list, rename, archive, restore, and delete commands by @d4rkNinja in #88
• feat(cli): expose dynamic credential field commands (#24) by @d4rkNinja in #89
• fix(cli): polish field command tests and mutations (#24) by @d4rkNinja in #90
• fix(cli): resolve eslint unused vars in field-commands.test.ts by @d4rkNinja in #91
• feat(cli): expose encrypted group and credential note commands (#25) by @d4rkNinja in #92
• feat(cli): activate production redacted creds show (#26) by @d4rkNinja in #93
• feat(cli): implement production creds copy with durable safe clearing (#27) by @d4rkNinja in #94
• feat(cli): implement guarded creds reveal with reauthentication (#28) by @d4rkNinja in #95
• feat(cli): expose scriptable creds get for one field (#29) by @d4rkNinja in #96
• feat(cli): expose public creds sync command and JSON status (#30) by @d4rkNinja in #97
• feat: add API Mongo operational acceptance (#75) by @d4rkNinja in #98
• ci: restore cross-platform Node matrix (#54) by @d4rkNinja in #123
• test(platform): add opt-in native acceptance gate (#53) by @d4rkNinja in #122
• test(storage): enforce exact Mongo integration discovery (#52) by @d4rkNinja in #121
• test(package): record package security gates (#51) by @d4rkNinja in #120
• test(verification): record exact repository gates (#50) by @d4rkNinja in #119
• test(security): prove whole-system canary boundaries (#49) by @d4rkNinja in #118
• test(storage): prove isolated backup restore (#48) by @d4rkNinja in #117
• test(cli): prove second-device recovery (#47) by @d4rkNinja in #116
• test(cli): prove interruption recovery (#46) by @d4rkNinja in #115
• test(cli): prove packed single-device lifecycle (#45) by @d4rkNinja in #114
• feat(backup): validate semantic history and audit restore (#44) by @d4rkNinja in #113
• feat(cli): compose isolated backup restore (#43) by @d4rkNinja in #112
• feat(cli): expose non-publishing backup verification (#42) by @d4rkNinja in #111
• feat(cli): compose protected backup creation (#41) by @d4rkNinja in #110
• feat(cli): expose device remember and forget commands (#40) by @d4rkNinja in #109
• feat(cli): compose device list and revoke commands (#39) by @d4rkNinja in #108
• feat(cli): compose crash-resumable device join (#38) by @d4rkNinja in #107
• feat(cli): compose device invite management (#37) by @d4rkNinja in #106
• feat(cli): compose crash-resumable portable-key rotation (#36) by @d4rkNinja in #105
• feat(cli): compose unlock-slot lifecycle (#35) by @d4rkNinja in #104
• feat(cli): compose fresh-home recovery (#34) by @d4rkNinja in #103
• feat(cli): compose protected portable-key import (#33) by @d4rkNinja in #102
• feat(cli): compose existing-vault connect (#74) by @d4rkNinja in #101
• feat(cli): expose explicit conflict listing and resolution (#32) by @d4rkNinja in #100
• feat(cli): preserve offline mutations and avoid duplicate sync (#31) by @d4rkNinja in #99
• [12] Fix archive transition in basic CLI acceptance fixture by @d4rkNinja in #124
• fix(local-store): parse portable-key rotation journal records by @d4rkNinja in #125
• fix(cli): narrow record revision type in basic-vault-acceptance (#50) by @d4rkNinja in #126
• feat(cli): expose group template management commands by @d4rkNinja in #127
• feat(cli): expose crash-resumable template migration commands by @d4rkNinja in #128
• feat(cli): expose encrypted attachment upload, list, download, and delete commands by @d4rkNinja in #129
• feat(cli): expose encrypted credential history commands by @d4rkNinja in #130
• feat(cli): expose locally derived audit event commands (fixes #62) by @d4rkNinja in #131
• feat(cli): expose guarded creds run without secrets in argv (fixes #63) by @d4rkNinja in #132
• feat(cli): complete the scriptable get, set, and update command family (fixes #64) by @d4rkNinja in #133
• feat(cli): expose guarded vault-to-vault transfer export and import (fixes #65) by @d4rkNinja in #134
• feat(cli): bound unlocked invocations to a session that guarantees secrets clear (fixes #66) by @d4rkNinja in #135
• feat(cli): expose recovery-code element use and lifecycle commands (#67) by @d4rkNinja in #136
• feat(cli): expose stored-seed TOTP code generation (fixes #68) by @d4rkNinja in #137
• feat(cli): generate and store a credential field secret in one invocation by @d4rkNinja in #138
• feat(cli): search the unlocked vault locally by matched property (#70) by @d4rkNinja in #139
• feat(cli): rotate one group's item keys in place as creds key rekey (#71) by @d4rkNinja in #140
• feat(cli): resolve and walk credential references as creds reference (#72) by @d4rkNinja in #141
• feat(cli): purge archived vault data on a retention window as creds purge (#73) by @d4rkNinja in #142
• chore(ci): add a self-hosted Linux pipeline script by @d4rkNinja in #143

New Contributors

• @d4rkNinja made their first contribution in #1

Full Changelog: https://github.com/d4rkNinja/kavrix/commits/v0.1.1