sneak b405224775 Hold the encrypt and decrypt result in memory until it is written (closes #143) ...

With --output, secret encrypt and secret decrypt emptied that file before
reading any input, so a failed command left it empty, and encrypting a file
onto itself gave the encryption of nothing.

With --output they now hold the result in memory and open --output, with the
same call as before, only once encryption or decryption has succeeded. A
failure to encrypt or decrypt leaves --output untouched, and --input can be the
same file. A failure while writing --output, such as a full disk, can leave it
empty or partly written; an error from closing it is reported. Without
--output the result still goes to stdout as it is produced.

Model: opus-5-5

2026-10-15 02:50:18 +00:00

..

bip39

Copy go-bip39 into internal/bip39 (closes #122)

2026-10-07 12:56:10 +02:00

cli

Hold the encrypt and decrypt result in memory until it is written (closes #143)

2026-10-15 02:50:18 +00:00

secret

secret version list no longer shows a version without NOT_AFTER as expired (closes #150)

2026-10-15 04:48:53 +02:00

vault

Print an empty unlocker or vault list as [] in JSON (closes #148)

2026-10-15 04:48:46 +02:00