TODO.md

@@ -18,6 +18,14 @@ https://git.eeqj.de/sneak/secret/milestone/12
 
 # Completed Steps
 
+- 2026-10-05: The Go module path is `sneak.berlin/go/secret`, as
+  `REPO_POLICIES.md` requires, not `git.eeqj.de/sneak/secret`
+  (https://git.eeqj.de/sneak/secret/issues/43). Every import uses it, as do the
+  `-X` flags in `script/build` that stamp the version and commit shown by
+  `secret info`, and the examples in `pkg/agehd/README.md` and
+  `pkg/bip85/README.md`. `go mod tidy` now lists `github.com/dustin/go-humanize`
+  and `github.com/fatih/color`, which `internal/cli` imports, as direct
+  requirements. Code that imported the old path must switch to the new one.
 - 2026-10-04: `make fmt` formats every markdown file with prettier (4-space
   tabs, `proseWrap: always`) as well as the Go code, and `make fmt-check` checks
   both, as the model scripts in the `prompts` repo do

cmd/secret/main.go

@@ -4,7 +4,7 @@ package main
 import (
 	"os"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/cli"
 )
 
 func main() {

go.mod

@@ -1,4 +1,4 @@
-module git.eeqj.de/sneak/secret
+module sneak.berlin/go/secret
 
 go 1.24.1
 
@@ -10,6 +10,8 @@ require (
 	github.com/btcsuite/btcd/btcutil v1.1.6
 	github.com/btcsuite/btcutil v0.0.0-20190425235716-9e5f4b9a998d
 	github.com/creack/pty v1.1.24
+	github.com/dustin/go-humanize v1.0.1
+	github.com/fatih/color v1.18.0
 	github.com/keybase/go-keychain v0.0.0-20230307172405-3e4884637dd1
 	github.com/oklog/ulid/v2 v2.1.1
 	github.com/spf13/afero v1.14.0
@@ -26,8 +28,6 @@ require (
 	github.com/btcsuite/btcd/chaincfg/chainhash v1.1.0 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1 // indirect
-	github.com/dustin/go-humanize v1.0.1 // indirect
-	github.com/fatih/color v1.18.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect

internal/cli/cli.go

@@ -6,10 +6,10 @@ import (
 	"io"
 	"os"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // Instance encapsulates all CLI functionality and state

internal/cli/cli_test.go

@@ -5,9 +5,9 @@ import (
 	"path/filepath"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 func TestCLIInstanceStateDir(t *testing.T) {

internal/cli/completions.go

@@ -5,9 +5,9 @@ import (
 	"slices"
 	"strings"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // getSecretNamesCompletionFunc returns a completion function that provides

internal/cli/confirm.go

@@ -8,9 +8,9 @@ import (
 	"os"
 	"strings"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/cobra"
 	"golang.org/x/term"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // Sentinel errors for asking the user to confirm a removal

internal/cli/confirm_test.go

@@ -24,12 +24,12 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/cli/create_vault_test.go

@@ -10,13 +10,13 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // TestCreateExistingVaultChangesNothing is a regression test for

internal/cli/crypto.go

@@ -7,10 +7,10 @@ import (
 	"os"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // Sentinel errors for encrypt/decrypt operations

internal/cli/entry_test.go

@@ -10,11 +10,11 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/awnumar/memguard"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // Entry must return its exit code rather than exit, so that its deferred

internal/cli/errors_test.go

@@ -3,9 +3,9 @@ package cli_test
 import (
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // TestMissingSecretOrVaultErrors checks that a command that finds no such

internal/cli/generate.go

@@ -7,10 +7,10 @@ import (
 	"math/big"
 	"os"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/cobra"
 	"github.com/tyler-smith/go-bip39"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/cli/info.go

@@ -10,11 +10,11 @@ import (
 	"strings"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/dustin/go-humanize"
 	"github.com/fatih/color"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // Version info - these are set at build time

internal/cli/info_helper.go

@@ -4,8 +4,8 @@ import (
 	"path/filepath"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // vaultStats accumulates statistics while walking vault directories

internal/cli/init.go

@@ -8,11 +8,11 @@ import (
 	"os"
 	"strings"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/cobra"
 	"github.com/tyler-smith/go-bip39"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // errPassphraseMismatch is returned when passphrase confirmation fails

internal/cli/input_errors_test.go

@@ -4,10 +4,10 @@ package cli
 import (
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // TestInvalidMnemonicError checks that every command that takes a mnemonic

internal/cli/integration_test.go

@@ -17,15 +17,15 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/creack/pty"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 const (

internal/cli/leftovers_test.go

@@ -4,12 +4,12 @@ import (
 	"io"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // TestLeftoversRemovedByNextChangingCommand is a regression test for

internal/cli/lock_test.go

@@ -13,13 +13,13 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/cli/move_test.go

@@ -5,12 +5,12 @@ import (
 	"path/filepath"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // TestRejectedMoveWithinVaultLeavesStateUnchanged is a regression test for

internal/cli/path_traversal_test.go

@@ -9,13 +9,13 @@ import (
 	"sync"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/cli/root.go

@@ -3,11 +3,11 @@ package cli
 import (
 	"os"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/cobra"
 	"golang.org/x/sys/unix"
 	"golang.org/x/term"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // Entry runs the secret CLI and returns the process exit code. It wipes

internal/cli/secrets.go

@@ -11,11 +11,11 @@ import (
 	"slices"
 	"strings"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/cli/secrets_size_test.go

@@ -10,13 +10,13 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"golang.org/x/sys/unix"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // testVaultName is the vault name used by the size tests.

internal/cli/stdout_stderr_test.go

@@ -7,9 +7,9 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // TestGetCommandOutputsToStdout tests that 'secret get' outputs the secret

internal/cli/test_helpers.go

@@ -5,7 +5,7 @@ import (
 	"os"
 	"strings"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // ExecuteCommandInProcess executes a CLI command in-process for testing

internal/cli/test_output_test.go

@@ -3,9 +3,9 @@ package cli_test
 import (
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
 )
 
 //nolint:paralleltest // executes the CLI in-process against shared state

internal/cli/unlock_failure_test.go

@@ -19,14 +19,14 @@ import (
 	"testing"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/cli/unlockers.go

@@ -15,10 +15,10 @@ import (
 	"strings"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // Unlocker type names and platform identifiers shared across the CLI

internal/cli/unlockers_add_test.go

@@ -5,12 +5,12 @@ import (
 	"path/filepath"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // unknownTestGPGUserID is a GPG user ID that no key in the test keyring has.

internal/cli/unlockers_corrupt_test.go

@@ -17,10 +17,10 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // newCorruptUnlockerVault returns the two-unlocker test vault with the

internal/cli/unlockers_ids_test.go

@@ -7,11 +7,11 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // TestSameMetadataUnlockersHaveTheirOwnIDs writes two passphrase unlockers

internal/cli/unlockers_list_test.go

@@ -21,11 +21,11 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 const (

internal/cli/unreadable_dir_test.go

@@ -28,11 +28,11 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 const (

internal/cli/usage_test.go

@@ -4,10 +4,10 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/cli"
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/cli"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // usageHeading starts the usage text cobra prints after an error.

internal/cli/vault.go

@@ -10,13 +10,13 @@ import (
 	"strings"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
 	"github.com/tyler-smith/go-bip39"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // Sentinel errors for vault operations

internal/cli/version.go

@@ -11,10 +11,10 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/cli/version_test.go

@@ -26,13 +26,13 @@ import (
 	"time"
 	"unicode/utf8"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 const (

internal/secret/atomic_test.go

@@ -8,13 +8,13 @@ import (
 	"testing"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/macse"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/macse"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 var errInjected = errors.New("injected failure")

internal/secret/crypto_test.go

@@ -4,9 +4,9 @@ import (
 	"testing"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // TestIdentityToLockedBuffer checks that the buffer holds the identity's

internal/secret/derivation_index_test.go

@@ -10,11 +10,11 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // realVault is a minimal VaultInterface backed by a real afero filesystem,

internal/secret/helpers_test.go

@@ -3,7 +3,7 @@ package secret_test
 import (
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 func TestDetermineStateDir_ErrorsWhenHomeDirUnavailable(t *testing.T) {

internal/secret/keychainunlocker.go

@@ -14,9 +14,9 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 const (

internal/secret/passphrase_test.go

@@ -7,10 +7,10 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // testMnemonic is the standard BIP39 test vector mnemonic.

internal/secret/pgpunlock_test.go

@@ -17,11 +17,11 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // pgpUnlockerType is the type of a PGP unlocker.

internal/secret/pgpunlocker_test.go

@@ -5,12 +5,12 @@ import (
 	"path/filepath"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // The GPG key ID and fingerprint passed to CreatePGPUnlocker.

internal/secret/secret_test.go

@@ -9,9 +9,9 @@ import (
 	"testing"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // testMnemonicValue is the standard BIP39 test vector mnemonic.

internal/secret/seunlocker_darwin.go

@@ -12,9 +12,9 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/macse"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/macse"
 )
 
 const (

internal/secret/version_test.go

@@ -41,11 +41,11 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 const (

internal/vault/errors_test.go

@@ -4,11 +4,11 @@ import (
 	"path/filepath"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/vault/integration_test.go

@@ -9,10 +9,10 @@ import (
 	"testing"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // deriveVaultIdentity derives the long-term identity for the given vault

internal/vault/integration_version_test.go

@@ -30,12 +30,12 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // errUnexpectedValue is returned by concurrent readers when a secret value

internal/vault/lock.go

@@ -8,8 +8,8 @@ import (
 	"sync"
 	"syscall"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // lockFileName is the file in the state directory that LockStateDir locks.

internal/vault/lock_test.go

@@ -5,11 +5,11 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 const (

internal/vault/management.go

@@ -9,10 +9,10 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // Register the GetCurrentVault function with the secret package

internal/vault/metadata.go

@@ -7,9 +7,9 @@ import (
 	"fmt"
 	"path/filepath"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // Metadata is an alias for secret.VaultMetadata

internal/vault/metadata_test.go

@@ -5,9 +5,9 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 //nolint:paralleltest // subtests share an in-memory filesystem sequentially

internal/vault/path_traversal_test.go

@@ -3,10 +3,10 @@ package vault_test
 import (
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 // TestGetSecretVersionRejectsPathTraversal verifies that GetSecretVersion

internal/vault/secrets.go

@@ -11,9 +11,9 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // ListSecrets returns a list of secret names in this vault

internal/vault/secrets_version_test.go

@@ -27,12 +27,12 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // testMnemonic is the mnemonic used to derive the vault long-term key.

internal/vault/unlockers.go

@@ -11,9 +11,9 @@ import (
 	"time"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
 )
 
 // Unlocker metadata type strings.

internal/vault/vault.go

@@ -7,10 +7,10 @@ import (
 	"path/filepath"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // Vault represents a secrets vault

internal/vault/vault_error_test.go

@@ -5,12 +5,12 @@ import (
 	"path/filepath"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
 )
 
 func TestAddSecretFailsWithMissingPublicKey(t *testing.T) {

internal/vault/vault_test.go

@@ -7,11 +7,11 @@ import (
 	"slices"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/internal/secret"
-	"git.eeqj.de/sneak/secret/internal/vault"
-	"git.eeqj.de/sneak/secret/pkg/agehd"
 	"github.com/awnumar/memguard"
 	"github.com/spf13/afero"
+	"sneak.berlin/go/secret/internal/secret"
+	"sneak.berlin/go/secret/internal/vault"
+	"sneak.berlin/go/secret/pkg/agehd"
 )
 
 // testMnemonic is the shared BIP39 test mnemonic for tests in this package.

pkg/agehd/README.md

@@ -43,7 +43,7 @@ import (
     "fmt"
     "log"
 
-    "git.eeqj.de/sneak/secret/pkg/agehd"
+    "sneak.berlin/go/secret/pkg/agehd"
 )
 
 func main() {
@@ -69,7 +69,7 @@ import (
     "fmt"
     "log"
 
-    "git.eeqj.de/sneak/secret/pkg/agehd"
+    "sneak.berlin/go/secret/pkg/agehd"
 )
 
 func main() {
@@ -95,7 +95,7 @@ import (
     "fmt"
     "log"
 
-    "git.eeqj.de/sneak/secret/pkg/agehd"
+    "sneak.berlin/go/secret/pkg/agehd"
 )
 
 func main() {
@@ -122,7 +122,7 @@ import (
     "fmt"
     "log"
 
-    "git.eeqj.de/sneak/secret/pkg/agehd"
+    "sneak.berlin/go/secret/pkg/agehd"
 )
 
 func main() {

pkg/agehd/agehd.go

@@ -14,11 +14,11 @@ import (
 	"strings"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/secret/pkg/bip85"
 	"github.com/btcsuite/btcd/btcutil/hdkeychain"
 	"github.com/btcsuite/btcd/chaincfg"
 	"github.com/btcsuite/btcutil/bech32"
 	"github.com/tyler-smith/go-bip39"
+	"sneak.berlin/go/secret/pkg/bip85"
 )
 
 const (

pkg/bip85/README.md

@@ -22,8 +22,8 @@ BIP85 enables a variety of use cases:
 ```go
 import (
     "fmt"
-    "git.eeqj.de/sneak/secret/pkg/bip85"
     "github.com/btcsuite/btcd/btcutil/hdkeychain"
+    "sneak.berlin/go/secret/pkg/bip85"
 )
 
 // Parse an existing master key
@@ -147,7 +147,7 @@ test vectors for the DRNG functionality.
 Run the tests with verbose output to see the test vectors and results:
 
 ```
-go test -v git.eeqj.de/sneak/secret/pkg/bip85
+go test -v sneak.berlin/go/secret/pkg/bip85
 ```
 
 ## References

pkg/bip85/bip85_test.go

@@ -9,9 +9,9 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/secret/pkg/bip85"
 	"github.com/btcsuite/btcd/btcutil/hdkeychain"
 	"github.com/tyler-smith/go-bip39"
+	"sneak.berlin/go/secret/pkg/bip85"
 )
 
 const (

script/build

@@ -17,7 +17,7 @@ main() {
             echo dev)"
     fi
     commit="$(git rev-parse HEAD 2>/dev/null || echo unknown)"
-    pkg=git.eeqj.de/sneak/secret/internal/cli
+    pkg=sneak.berlin/go/secret/internal/cli
     # Build the file, not the package `./cmd/secret`: a package build
     # also stamps git status into the binary and fails where git cannot
     # read the checkout, instead of falling back to `dev`/`unknown`.