# dsh-vault bundle patch: the layer applied when a profile lists this bundle.
# Rows reference the package by name, so Node resolution finds the installed
# code (lib/index.js on the host, lib/client.js in the browser via the
# package's dsh.client declaration). The master password is read from the
# DSH_VAULT_PASSWORD environment variable at unlock time — never written into
# any composition file.

- insert:
    - id: vault
      name: dsh-vault
      config:
        masterPasswordEnv: DSH_VAULT_PASSWORD