joe/notfiles
1
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(notstrap): migrate to notsecrets age-native API, remove sops shell-out

Browse Source 
Replace AgeKeySource/resolve_age_key/install_age_key with IdentitySource/resolve_identities.
Update integration tests to use a valid age bech32 key fixture.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Joseph O'Brien
2026-04-01 21:19:23 -04:00
parent f80ea02f07
commit 58de007e19
4 changed files with 22 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
tests/integration/tests/bootstrap.rs
View File

@@ -19,7 +19,11 @@ fn make_test_env() -> TestEnv {
// age key file (content doesn't matter — FileSource reads it verbatim)
let key_file = d.join("age.key");
fs::write(&key_file, "AGE-SECRET-KEY-1TESTKEY\n").unwrap();
fs::write(
&key_file,
"AGE-SECRET-KEY-1X3QKFQ4MZQM7LTJ3AX0N3EM63RGRV4J6N5ZDWPVKCEUCZKJWJSUSU6GYN6\n",
)
.unwrap();
// notfiles.toml — one package "shell" targeting home tempdir
fs::write(

18
tests/integration/tests/cross_crate.rs
View File

@@ -5,7 +5,8 @@ use tempfile::TempDir;
use notcore::{HookPhase, HookSpec};
use notfiles::{LinkOptions, link};
use nothooks::{HookResult, HookRunner};
use notsecrets::{AgeKeySource, FileSource, resolve_age_key};
use notsecrets::{FileSource, resolve_identities};
use notsecrets::sources::IdentitySource;
/// Test that notsecrets and nothooks can each be used independently
/// in the same integration boundary — resolving an age key from a file
@@ -16,14 +17,15 @@ fn test_nothooks_notsecrets_independent() {
// Write a fake age key via FileSource
let key_path = dir.path().join("age.key");
fs::write(&key_path, "AGE-SECRET-KEY-1CROSSCRATE\n").unwrap();
fs::write(
&key_path,
"AGE-SECRET-KEY-1X3QKFQ4MZQM7LTJ3AX0N3EM63RGRV4J6N5ZDWPVKCEUCZKJWJSUSU6GYN6\n",
)
.unwrap();
let sources: Vec<Box<dyn AgeKeySource>> = vec![Box::new(FileSource::new(key_path))];
let key = resolve_age_key(sources).expect("resolve_age_key failed");
assert!(
key.trim().starts_with("AGE-SECRET-KEY-"),
"expected age key prefix, got: {key:?}"
);
let sources: Vec<Box<dyn IdentitySource>> = vec![Box::new(FileSource::new(key_path))];
let identities = resolve_identities(sources).expect("resolve_identities failed");
assert!(!identities.is_empty(), "expected at least one identity");
// Write a hook that just prints
let script = dir.path().join("chain.nu");