bytedesk-vault-sdk

Vault plugin SDK plus the Vault v1 identity client.

Inherits all common objects and plugin requirements from bytedesk-sdk-dependencies (Manifest, Validate, LoadDir, pack, serve, bus.Envelope, semver). This module only orchestrates vault host differences:

• env: VAULT_PLUGIN_SOCKET, VAULT_PLUGIN_ID
• plugin.json targets must include vault (empty targets stay gateway-only)
• identity client: enroll + password begin/finish

import vaultsdk "github.com/ByteDeskAI/bytedesk-vault-sdk"

// Process plugin (same Manifest as gateway, vault target required)
vaultsdk.Serve(vaultsdk.Config{Handler: mux})

// Identity client (login still belongs on the gateway host before /p/)
c := vaultsdk.Client{BaseURL: vaultURL, GatewayID: id}
ok, user, err := c.PasswordLogin(ctx, user, pass)
pkg, err := c.RedeemEnroll(ctx, token)

Gateway plugins use bytedesk-remote-gateway-plugin-sdk (same inherited Manifest, GATEWAY_PLUGIN_*). A plugin that lists both targets can import either SDK for serve/validate; pack once.

Versioning

This SDK’s SemVer (VERSION) is independent of bytedesk-sdk-dependencies. go.mod requires the dependency revision to use; those version numbers need not match (this module is already an example: SDK 0.1.1 requires dependencies v0.1.2). Bump this repo when the vault SDK changes. Bump the require when adopting a newer common contract.

See gateway ADR 0014.