Joseph O'Brien
1359def673
Some checks failed
Public Repo Readiness / Check Public Repo Readiness (push) Has been cancelled
Add a config-driven, strongly-typed secret/env resolution system to notsecrets with 11 provider backends. The system supports explicit key bindings with typed SecretRef enums and a priority chain fallback. Tier 1 providers (implemented): Env, 1Password, dotenvx, SOPS, GSM Tier 2 providers (stubbed): nuenv, direnv, mise, Bitwarden, Vault, dotenvy New types: Provider, ProviderConfig, SecretRef, SecretsConfig, SecretsError, SecretSource, EnumerableSecretSource, SecretResolver Config lives in notsecrets.toml with typed serde deserialization. ISP split: EnumerableSecretSource for backends that support bulk enumeration, SecretSource for single-key lookup only. Includes conformance test suite, 33 new tests (161 workspace total). notstrap EnvInjector migration deferred to follow-up.
20 lines
668 B
YAML
20 lines
668 B
YAML
project: notfiles
|
|
id: notfile
|
|
updated: 2026-06-06
|
|
items: []
|
|
log:
|
|
- date: 2026-04-17
|
|
summary: Added notnet crate with YubikeySource and threaded Tailscale into notstrap; design spec complete
|
|
commits: []
|
|
- date: 2026-04-15
|
|
summary: Hardened bootstrap and hook-state failure handling, made notfiles FileStore usage real, and fixed copy-drift safety coverage
|
|
commits: []
|
|
- date: 2026-04-15
|
|
summary: Pruned completed items from handoff; GitHub issues plus doob are now the source of truth for active work
|
|
commits: []
|
|
branch: main
|
|
state:
|
|
tests: passing
|
|
build: clean
|
|
notes: Handoff is now ephemeral; track active work via GitHub issues synced through doob.
|