sneak bde833193c Write encrypt and decrypt output only once they succeed (closes #143) ...

`secret encrypt` and `secret decrypt` emptied the file named by
`--output` before reading any input, so a failure left it empty, and a
file given as both `--input` and `--output` was emptied before it was
read. They now write into a temporary file of mode 0600 next to it, or
next to the file it is a symbolic link to, and rename that over it only
on success, with the new `secret.WriteFileAtomicFunc`. An output file
that cannot be written still fails. Ctrl-C, SIGTERM or a hangup removes
the temporary file. A device or pipe, such as `/dev/null`, is written to
directly.

Judgement calls: the device and pipe case; a command started with
`nohup` still ignores a hangup.

Model: opus-5-5

2026-10-14 22:32:52 +00:00

..

bip39

Copy go-bip39 into internal/bip39 (closes #122)

2026-10-07 12:56:10 +02:00

cli

Write encrypt and decrypt output only once they succeed (closes #143)

2026-10-14 22:32:52 +00:00

secret

Write encrypt and decrypt output only once they succeed (closes #143)

2026-10-14 22:32:52 +00:00

vault

secret list gives each secret's own creation and last-update times (closes #142)

2026-10-15 00:32:05 +02:00