secret version list no longer shows a version without NOT_AFTER as expired (closes #150)

STATUS was `expired` for every version other than the current one, so after a promote the newest version, which has no NOT_AFTER, read `expired`. STATUS is now `current` for the current version, `expired` for another version whose NOT_AFTER has passed, and `inactive` for any other version. README describes the three. Judgement call: the issue left the third word to the owner; `inactive` is the word the plan comment on the issue chose. Model: opus-5-5
2026-10-15 02:10:23 +00:00
parent 438c36e7a9
commit 297421455a
4 changed files with 76 additions and 3 deletions
@@ -204,6 +204,12 @@ Moves or renames a secret within the current vault.
 Lists all versions of a secret showing creation time, status, and validity
 period.

+`STATUS` is `current` for the secret's current version, `expired` for another
+version whose `NOT_AFTER` has passed, and `inactive` for any other version.
+Adding a version sets `NOT_AFTER` on the version that was current;
+`secret version promote` sets no times. A version that is not current therefore
+shows `inactive` when no version was added while it was current.
+
 #### `secret version promote <secret-name> <version>`

 Promotes a specific version to current by rewriting the secret's `current` file