clawbot
3e4ca5b999
check / check (push) Successful in 3m51s
Removes the Completed Steps work log and the Workflow step that fed it, and drops history notes from the open items. Items that named removed macOS code now name what is still open. Model: opus-5-5
1.5 KiB
1.5 KiB
Workflow
- branch from
next - do the Next Step: the next open issue in the
1.0.0milestone - commit (
TODO.mdchanges in the same commit as the work) - push, and open a PR against
next
Status
pre-1.0. Open work is tracked on the issue tracker, which is authoritative.
Next Step
Take the next open issue in the 1.0.0 milestone:
https://git.eeqj.de/sneak/secret/milestone/12
Future Steps
- Implement version-number shell completion for the second arg of
secret version promoteandsecret version rm(internal/cli/version.go). - Cover mnemonic-vs-xprv identity consistency in
pkg/agehd/agehd_test.goTestMnemonicVsXPRVConsistency. - No macOS test runs in CI:
internal/secret/pgpunlock_test.gobuilds only on macOS. A macOS runner would cover it. - 1.0 critical security blockers:
- Memory security: age writes an identity's private key out as a string in
ordinary memory, and the copies it makes on the way stay there
(
secret.IdentityToLockedBufferoverwrites only the string itself).
- Memory security: age writes an identity's private key out as a string in
ordinary memory, and the copies it makes on the way stay there
(
- Medium priority:
- Standardize error messages; stop leaking internals.
- Split oversized CLI functions.
- Cleanups: read statedir from environment or default instead of passing it around.
- Enhancements: help examples, colored output, --quiet flag, name suggestions on miss, audit logging, hardware integration tests (GPG), naming consistency, vault export/import, batch operations, search, secret metadata (descriptions, tags).