clawbot 3a58377127 Parse age_recipients at config load and never echo the entry (closes #153) ...

Config.Validate now parses every age_recipients entry with age.ParseX25519Recipient, so a bad recipient fails at config load instead of deep in a backup after the snapshot row and tree walk. On failure the error names the position (age_recipients[N]) and never the value: a recipient string can itself be a secret key an operator pasted by mistake, and age's own error quotes its input. An entry starting with AGE-SECRET-KEY- gets a specific message.

The remaining parse sites (blobgen.NewWriter, crypto NewEncryptor and UpdateRecipients), reachable by callers that skip config.Load, likewise drop the value and age's wrapped error, naming only the position.

Model: opus-4-8

2026-09-22 13:01:00 +02:00

..

compress_test.go

Update golangci-lint to v2.12.2 with canonical config (#62)

2026-08-07 23:22:48 +02:00

compress.go

Finish the lint remediation: script/cibuild exits 0 (closes #61)

2026-08-09 04:25:11 +02:00

reader.go

Update golangci-lint to v2.12.2 with canonical config (#62)

2026-08-07 23:22:48 +02:00

writer_test.go

Parse age_recipients at config load and never echo the entry (closes #153)

2026-09-22 13:01:00 +02:00

writer.go

Parse age_recipients at config load and never echo the entry (closes #153)

2026-09-22 13:01:00 +02:00