Skip to content

v0.2.3

Choose a tag to compare

@github-actions github-actions released this 27 Aug 09:39
· 17 commits to main since this release

Kavrix 0.2.3 — declarative legacy configuration

Kavrix 0.2.3 added a non-secret config.toml for the retained legacy version 2 single-vault kavrix init path. On a first TTY run with no routing or secret flags, kavrix init creates the file under the user Kavrix directory and stops. It never writes a MongoDB URI, passphrase, key bytes, or credential data; edit the routing options, then use masked prompts or an explicit stdin flow.

Recommended first run

The supported multi-vault database-container flow is profile, database initialization, then vault creation. The local encrypted file datastore is first-class; MongoDB is optional and database writes require transactions.

kavrix db profile add work --datastore file --data-file ./work.kavrix --key-file ./work.kavrix.key
kavrix db profile use work
kavrix db init --profile work
kavrix db vault create --profile work
kavrix put github/token --profile work --vault <vault-id>
kavrix list --profile work --vault <vault-id>
kavrix get github/token --reveal --profile work --vault <vault-id>

Use Node.js >=24.12.0 <25 or >=25.1.0. For MongoDB profiles, provide the URI only through protected input; remote connections require validated TLS.

0.2.3 change details

  • Added the Zod-validated apps/cli/src/kavrix-config.ts parser and template generator.
  • Added commented [datastore], [security], [mongodb], [vault], and [profile] examples containing non-secret options only.
  • Preserved owner-only file permissions and never-overwrite behavior for an existing configuration file.
  • Updated initialization tests to match the declarative legacy path.

Install or upgrade from the public npm registry, then use kavrix --help as the authority for the installed version.

Full changelog: https://github.com/d4rkNinja/kavrix/blob/v0.2.3/CHANGELOG.md