sneak be56ae533c Give every new unlocker a directory of its own (closes #71) ...

A passphrase unlocker added to a vault that had one, and a PGP, keychain
or Secure Enclave unlocker added on the same day as another of its type,
were written into the existing unlocker's directory file by file, so a
crash part-way left a current unlocker whose files did not belong
together.

Unlocker directories, keychain items and Secure Enclave keys are now
named with the time to the nanosecond, and secret.WriteDir refuses a
directory that exists. Adding a passphrase unlocker writes the new one,
points current-unlocker at it, and only then removes the vault's other
passphrase unlockers.

Model: opus-5-5

2026-10-04 14:28:25 +00:00

..

cli_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

cli.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

completion.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

completions_test.go

Check vault names in every command that takes one (closes #68)

2026-10-04 13:58:46 +02:00

completions.go

Check vault names in every command that takes one (closes #68)

2026-10-04 13:58:46 +02:00

create_vault_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

crypto.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

entry_test.go

Wipe memguard buffers on every exit and restore echo (closes #35)

2026-10-04 02:07:58 +02:00

generate.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

info_helper.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

info.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

init.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

integration_test.go

Give every new unlocker a directory of its own (closes #71)

2026-10-04 14:28:25 +00:00

lock_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

move_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

path_traversal_test.go

Give every new unlocker a directory of its own (closes #71)

2026-10-04 14:28:25 +00:00

root.go

Print usage only for a command called wrongly (closes #41)

2026-10-04 12:08:06 +02:00

secrets_size_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

secrets.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

stdout_stderr_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_helpers.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

test_output_test.go

Update golangci-lint to v2.12.2 with canonical config (#29)

2026-08-10 15:23:33 +02:00

unlockers_add_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

unlockers_corrupt_test.go

Skip corrupt unlocker metadata in unlocker select and remove (closes #72)

2026-10-04 12:42:01 +02:00

unlockers_list_test.go

Keep unlocker list working when unlocker metadata is corrupt (closes #42)

2026-10-04 06:42:14 +02:00

unlockers.go

Give every new unlocker a directory of its own (closes #71)

2026-10-04 14:28:25 +00:00

unreadable_dir_test.go

Make secret unlocker add pgp work on Linux (closes #88)

2026-10-04 14:42:01 +02:00

usage_test.go

Print usage only for a command called wrongly (closes #41)

2026-10-04 12:08:06 +02:00

vault.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

version_test.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00

version.go

Read secret environment variables once per command, then unset them (closes #60)

2026-10-04 16:07:57 +02:00