sneak 10a709e897 Create a vault whole in a temporary directory, then select it (closes #105) ...

vault.CreateVault takes the unlocker passphrase and writes the vault
directory, its metadata, long-term public key and passphrase unlocker
into a temporary directory, renames that into vaults.d once complete,
and only then makes the vault current. secret init and secret vault
create call it once instead of adding the unlocker afterwards, so a
kill part-way leaves either no vault, whose temporary directory the
next command that takes the lock deletes, or a complete one. A test
records the state directory before every change the call makes and
checks each state, and the command run again from it.

Model: opus-5-5

2026-10-04 18:25:43 +00:00

..

errors.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

integration_test.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

integration_version_test.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

lock_test.go

Delete .tmp- leftovers of a killed command when the lock is next taken (closes #75)

2026-10-04 19:25:25 +02:00

lock.go

Delete .tmp- leftovers of a killed command when the lock is next taken (closes #75)

2026-10-04 19:25:25 +02:00

management.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

metadata_test.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

metadata.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

path_traversal_test.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

secrets_name_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

secrets_version_test.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

secrets.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

unlockers.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

vault_error_test.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

vault_test.go

Create a vault whole in a temporary directory, then select it (closes #105)

2026-10-04 18:25:43 +00:00

vault.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00