Vault Bundle

⭐ Found this useful? Give it a star on GitHub so more developers can find it.

Symfony bundle for a password and secrets vault: logins, secure notes, credit cards, contacts, identity documents, folders, sharing, trash, read-only events, and a built-in password generator.

FrankenPHP worker mode: Supported — demo uses FrankenPHP on Symfony 8 (Demo with FrankenPHP).

Features

• Item types: login, secure note, credit card, contact, ID card, driver's license, passport, document
• Folders with share and trash; item soft-delete with restore/purge
• VaultGrant for users and teams (read / write / admin) + share UI
• VaultTeamMembershipResolverInterface for team-based grants
• Events: list query/result, access check, read-only resolve
• Server-side libsodium payload encryption
• Dark manage UI + password generator (modal + inline)
• Document attachments (encrypted in payload)

Installation

composer require nowo-tech/vault-bundle

php -r 'echo base64_encode(random_bytes(32)), PHP_EOL;'

# config/packages/nowo_vault.yaml
nowo_vault:
    user_class: App\Entity\User
    encryption_key: '%env(VAULT_ENCRYPTION_KEY)%'

See Installation.

Demo

make -C demo/symfony8 up
# Demo started at: http://localhost:8023  →  /tools/vault (auto-login)

Documentation

• Installation
• Configuration
• Usage
• Contributing
• Changelog
• Upgrading
• Release process
• Security
• Engram
• Spec-driven development

Additional documentation

• Access control & read-only events
• Demo with FrankenPHP

Tests and coverage

make test              # PHPUnit
make test-ts           # Vitest
make test-coverage     # PHP coverage report
make release-check     # Full pre-release QA

Run make test-coverage and make test-ts for current PHP and TS coverage percentages.

License

MIT — see LICENSE.