Kavrix 0.1.3

Kavrix 0.1.3

Kavrix 0.1.3 expands the zero-knowledge CLI from local vaults into encrypted,
multi-vault database containers while strengthening protected-file rollback and
cross-platform reliability.

What's new

• Use encrypted database containers backed by either a protected local file or
  MongoDB. Sensitive vault data remains encrypted before it reaches either
  datastore.
• Configure bound datastore profiles while retaining explicit per-command
  routing overrides.
• Initialize and inspect owner databases, create and rename vaults, create local
  share keys, issue recovery kits, and replace an owner key through recovery.
• Detect stale, rolled-back, or mismatched database state with authenticated
  revision anchors.
• Migrate legacy local vaults with copy-first verification and guarded rollback.

Security and reliability

• Protected-file cleanup now follows the exact file object it created, preventing
  pathname replacement or inode reuse from redirecting rollback into another
  file.
• Ambiguous datastore commits preserve the recovery material needed to reconcile
  the result instead of assuming that a failed response means no write occurred.
• Windows protected-file replacement and user-only ACL handling are more reliable.
• Database command output paths are sanitized before terminal rendering.
• Explicit datastore, database, collection, data-file, and key-file overrides
  remain effective when a profile is selected.

Verification

• Passed the full CI matrix on Linux x64/arm64, macOS x64/arm64, and Windows x64.
• Passed CodeQL, dependency audit, package-content inspection, packed CLI smoke
  tests, file-datastore acceptance tests, and supported Node.js runtime checks.

Install or upgrade with:

npm install --global kavrix@0.1.3

Full changelog: https://github.com/d4rkNinja/kavrix/blob/v0.1.3/CHANGELOG.md

Changes since 0.1.2: v0.1.2...v0.1.3