VaultPerch CLI 0.1.0: Ubuntu 24.04 Linux x64, installed Node.js 24 required.
Verify the adjacent archive .sha256 before unpacking. Keep this entire directory together.
Add its bin directory to PATH, then run vaultperch --help. Do not move or symlink the launcher alone.
No npm install, dependency download, sudo, or native helper is needed.
Every authenticated command requires explicit --service-account-dir PATH.
Create a dedicated directory owned by the running user with mode 0700 (mkdir -m 700 PATH).
State uses owned 0600 files, atomic replacement and an exclusive lock. Unsafe directory/file modes and links are refused.
There is no implicit file fallback or Linux Secret Service support in this archive.
Import secret bytes only through --stdin, --file PATH (owned protected file), or --fd NUMBER.
Passwords use the terminal or explicit --password-stdin, never command arguments.
Save requires a fresh --output PATH in an owned 0700 directory; the file is 0600.
Run uses --exec ABSOLUTE_PATH with an inherited descriptor by default; the child is a trusted recipient.
Only the local synthetic workerd journey is covered by packaging CI; no hosted Linux proof is claimed.
Use the operator-accepted HTTPS API origin; no other Linux distribution/architecture, desktop store, hosted MCP or HOS claim.
Retain THIRD_PARTY_NOTICES.txt and licenses/ when redistributing bundled third-party code.
