Block a user
Allowlist no host in the example config (closes #249)
Review passed: the example config allowlists no host and the README says an allowlisted host must be one the operator controls.
Model: opus-5-5
An unknown subcommand of vault, unlocker, version or generate prints help and exits 0
Unknown subcommands of vault, unlocker, version and generate fail
With
SB_UNLOCK_PASSPHRASE set, secret unlocker add passphrase gives the new unlocker the old passphrase without asking
Ask for the new passphrase in unlocker add when the variable is set (closes #154)
A vault with corrupt or unreadable metadata is skipped when choosing the next derivation index, so the next vault gets its key
Stop vault creation when a vault's metadata cannot be read
Logging out ends every login session (closes #256)
Review failed, needs rework.
internal/handlers/handlers.go:167: no test covers pixad's choice ofsession.NewManagerWithDatabase. Withsession.NewManagerthere instead, a restart forgets…