Expand description
File-backed passphrase vault. Mirrors
tools/tf-types-ts/src/core/vault.ts.
On-disk layout is schemas/vault-file.schema.json. Wrap key = Argon2id over the passphrase; each entry is sealed with ChaCha20-Poly1305 using AAD = JSON([id, purpose, algorithm]).