jseeqret

JavaScript/Electron/Svelte 5 port of seeqret - a secure secrets manager.

Fully compatible with Python seeqret vaults - reads and writes the same database, encryption keys, and formats.

Setup

npm install

CLI Usage

# Initialize a new vault
node src/cli/index.js init . --user myuser --email [email protected]

# Add a secret
node src/cli/index.js add key DB_PASSWORD "s3cret" --app myapp --env prod

# List secrets
node src/cli/index.js list
node src/cli/index.js list -f "myapp:prod:*"

# Get a secret value
node src/cli/index.js get "myapp:prod:DB_PASSWORD"

# Edit a secret
node src/cli/index.js edit value "myapp:prod:DB_PASSWORD" "new-value"

# Remove a secret
node src/cli/index.js rm key "myapp:prod:DB_PASSWORD"

# User management
node src/cli/index.js users
node src/cli/index.js owner
node src/cli/index.js whoami
node src/cli/index.js keys

Electron GUI

npm run dev

Architecture

• src/core/ - Shared library (crypto, storage, models, filter)
• src/cli/ - CLI interface (Commander.js)
• src/main/ - Electron main process
• src/preload/ - Electron preload (IPC bridge)
• src/renderer/ - Svelte 5 UI

Encryption Compatibility

• At rest: Fernet (AES-128-CBC + HMAC-SHA256) - identical to Python cryptography.fernet
• In transit: X25519 + XSalsa20-Poly1305 via tweetnacl - compatible with PyNaCl
• Signing: SHA-256

Dependencies

• sql.js - Pure JS SQLite (WASM)
• tweetnacl / tweetnacl-util - NaCl crypto
• commander - CLI framework
• cli-table3 - Terminal tables
• electron-vite - Electron + Vite + Svelte 5