vaultkeeper@0.8.0
·
10 commits
to main
since this release
Minor Changes
- #317
5231999Thanks @mike-north! - AddPresenceSimulatorBackendto@vaultkeeper/test-helpers: a test-only backend that scripts vaultkeeper's presence signal (including its absence) so a consumer can prove in CI that an automation signer attempting a presence-gated operation is refused. Per-operation outcomes are scriptable across'grant'/'refuse'/'timeout'/'not-capable'viaforTesting({ operations }), or armed one call at a time viaarmPresenceto prove presence is demanded fresh on every call. Three stacked guards keep it unreachable from production: it is never registered with the backend registry, has no default constructor, and itsforTesting()factory throws a newTestDoubleMisuseError(exported fromvaultkeeper) whenNODE_ENVis'production'.
Patch Changes
- #323
8be4d18Thanks @mike-north! - Harden the Linuxsecret-toolbackend: a--separator now precedes every positional attribute/id argument so ids beginning with dashes cannot be parsed as flags; not-found detection depends solely on the exit code, andretrieve()strips exactly one trailing newline instead of trimming, so empty and whitespace-only secret values round-trip byte-for-byte.