clawbot 7e4e0f7806 Give every new unlocker a directory of its own (closes #71) ...

A passphrase unlocker added to a vault that had one, and a PGP, keychain
or Secure Enclave unlocker added on the same day as another of its type,
were written into the existing unlocker's directory file by file, so a
crash part-way left a current unlocker whose files did not belong
together.

Unlocker directories, keychain items and Secure Enclave keys are now
named with the time to the nanosecond, and secret.WriteDir refuses a
directory that exists. Adding a passphrase unlocker writes the new one,
points current-unlocker at it, and only then removes the vault's other
passphrase unlockers.

Model: opus-5-5

2026-10-04 16:58:45 +02:00

..

errors.go

Check vault names in every command that takes one (closes #68)

2026-10-04 13:58:46 +02:00

integration_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

integration_version_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

lock_test.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

lock.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

management.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

metadata_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

metadata.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

path_traversal_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

secrets_name_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

secrets_version_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

secrets.go

Keep secret get values in locked memory (closes #37)

2026-10-04 11:16:23 +02:00

unlockers.go

Give every new unlocker a directory of its own (closes #71)

2026-10-04 16:58:45 +02:00

vault_error_test.go

Lock the state directory and write vault files atomically (closes #34)

2026-10-04 04:57:58 +02:00

vault_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

vault.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00