secret

194 Commits 5 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
clawbot	5ec59862ff	Speed up the internal/cli lock and two-vault tests (closes #80 ) check / check (push) Failing after 2s Details The test that each changing command waits for the state directory lock slept a fixed 100 ms per command. It now polls the goroutine stacks until the command is parked in vault.LockStateDir, checks the state directory is unchanged, and releases the lock; a command that takes no lock still fails by finishing first. newTwoVaultFs creates its two vaults, each with a passphrase unlocker, once, and returns a fresh copy of them on every call, so the six path and move tests no longer each pay for two passphrase key derivations. Model: opus-5-5	2026-10-04 08:08:04 +02:00
clawbot	bdb1c7ec18	Accept a version argument only if the secret has that version (closes #67 ) check / check (push) Successful in 1m30s Details version rm, version promote and get --version joined the version argument into a path unchecked, so "", ".", "..", "../../.." removed or read every version, the secret, the vault or directories above it. A version is now accepted only if it is one of the versions ListVersions lists for the secret, compared by name before any path is built (secret.VersionExists, used by all three). An empty --version is rejected instead of meaning the current version: GetSecretVersion no longer treats "" as current, and GetSecret looks the current version up itself. Model: opus-5-5	2026-10-04 03:25:00 +02:00
clawbot	a5faec0466	Reject invalid secret names before any command builds a path (closes #33 ) check / check (push) Successful in 1m13s Details `secret rm ..` deleted the whole vault; `secret rm .` and `secret rm ""` deleted every secret. rm, mv, the version commands, encrypt and decrypt built paths from the name unchecked; import checked it only after reading the source file. Each now calls vault.ValidateSecretName, which wraps the existing rule, on the name as given, before building any path; MoveSecret checks both names before switching the current vault. Its error and README.md state the rule. The test-only copy of the rule in internal/secret is removed. The regression test runs each rejected command on a copy of two in-memory vaults and requires the exact error and an unchanged state directory. Model: opus-5-5	2026-10-04 01:29:28 +02:00

Author

SHA1

Message

Date

clawbot

5ec59862ff

Speed up the internal/cli lock and two-vault tests (closes #80 )

check / check (push) Failing after 2s

Details

The test that each changing command waits for the state directory lock
slept a fixed 100 ms per command. It now polls the goroutine stacks until
the command is parked in vault.LockStateDir, checks the state directory
is unchanged, and releases the lock; a command that takes no lock still
fails by finishing first.

newTwoVaultFs creates its two vaults, each with a passphrase unlocker,
once, and returns a fresh copy of them on every call, so the six path and
move tests no longer each pay for two passphrase key derivations.

Model: opus-5-5

2026-10-04 08:08:04 +02:00

clawbot

bdb1c7ec18

Accept a version argument only if the secret has that version (closes #67 )

check / check (push) Successful in 1m30s

Details

version rm, version promote and get --version joined the version
argument into a path unchecked, so "", ".", "..", "../../.." removed or
read every version, the secret, the vault or directories above it.

A version is now accepted only if it is one of the versions
ListVersions lists for the secret, compared by name before any path is
built (secret.VersionExists, used by all three). An empty --version is
rejected instead of meaning the current version: GetSecretVersion no
longer treats "" as current, and GetSecret looks the current version
up itself.

Model: opus-5-5

2026-10-04 03:25:00 +02:00

clawbot

a5faec0466

Reject invalid secret names before any command builds a path (closes #33 )

check / check (push) Successful in 1m13s

Details

`secret rm ..` deleted the whole vault; `secret rm .` and `secret rm ""`
deleted every secret. rm, mv, the version commands, encrypt and decrypt
built paths from the name unchecked; import checked it only after
reading the source file.

Each now calls vault.ValidateSecretName, which wraps the existing rule,
on the name as given, before building any path; MoveSecret checks both
names before switching the current vault. Its error and README.md state
the rule. The test-only copy of the rule in internal/secret is removed.

The regression test runs each rejected command on a copy of two
in-memory vaults and requires the exact error and an unchanged state
directory.

Model: opus-5-5

2026-10-04 01:29:28 +02:00