7e67bd61c7
fix(secrets-cli): doctor flow — contained old-key errors, corrupt-row + rewrap-failure coverage
2026-07-19 10:27:54 -04:00
1b65e820fb
test(secrets): serialize env-var-mutating test classes into one xunit collection
...
Environment.SetEnvironmentVariable/GetEnvironmentVariable mutate the
process-wide environ; concurrent setenv/getenv across parallel xunit test
classes is a documented crash/flake source on glibc even with unique
variable names. Group the six classes that touch process env vars into a
DisableParallelization=true collection so they run serially against each
other while everything else keeps running in parallel.
2026-07-19 10:27:09 -04:00
04018aab6e
fix(secrets-cli): bundle import — source-key verification, format gate up front, access-denied containment
2026-07-19 10:00:59 -04:00
e8b34be255
fix(secrets-cli): audit flow — cipher guard, shared actor helper, summary + branch coverage
2026-07-19 09:55:16 -04:00
d1ec0fe5da
feat(secrets-cli): lockout-recovery flow — KEK diagnosis, guided rewrap, lost-KEK reset
2026-07-19 09:53:10 -04:00
000d283c99
feat(secrets-cli): bundle export/import flows
2026-07-19 09:52:31 -04:00
e5a4d0276a
fix(secrets-cli): CRUD flows — escaped validation markup, shared prompt helpers, delete existence check
2026-07-19 09:47:10 -04:00
6ad710bdbd
test(secrets-cli): structural no-plaintext assert (base64 '+' JSON-escaping flake) + override doc note
2026-07-19 09:46:26 -04:00
779f8a8d78
feat(secrets-cli): deployment seeding flow — audit ${secret:} refs and fill the gaps
2026-07-19 09:43:17 -04:00
fe3ea684f5
feat(secrets-cli): CRUD flows for the interactive console
2026-07-19 09:37:46 -04:00
138e2c1006
fix(secrets-cli): bundle import — verbatim ApplyReplicated writes, format gate, entry-aware errors
2026-07-19 09:35:39 -04:00
4576f73c4c
fix(secrets-cli): KEK doctor — fresh-row verdicts, degraded rewrap guard test, vanished-row visibility
2026-07-19 09:33:53 -04:00
e60f2d5dad
fix(secrets-cli): reference auditor — InvalidName containment, comment-key parity, name normalization
2026-07-19 09:27:13 -04:00
21f6a0df92
fix(secrets-cli): shell — contain UnauthorizedAccess, flow-title guard, cancel-path test
2026-07-19 09:26:04 -04:00
e49496c856
feat(secrets-cli): interactive shell skeleton — target picker, degraded-KEK upgrade, flow dispatch
2026-07-19 09:16:06 -04:00
6255409f16
feat(secrets-cli): ciphertext-only bundle export/import with LWW + cross-KEK rewrap
2026-07-19 09:14:43 -04:00
f0f2b23d03
feat(secrets-cli): KEK doctor — per-row diagnosis + guided rewrap remedy
2026-07-19 09:11:35 -04:00
38d33cf4b7
feat(secrets-cli): reference auditor — classify every ${secret:} the target app needs
2026-07-19 09:11:21 -04:00
9bc1e5852e
fix(secrets-cli): degrade on malformed master-key source + topology note
2026-07-19 09:08:24 -04:00
83af2b2eaf
feat(secrets-cli): per-target session factory with degraded-KEK mode + literal KEK provider
2026-07-19 09:01:46 -04:00
b8c6c7d432
test(secrets-cli): clean up temp dirs in TargetConfigReaderTests
2026-07-19 08:54:54 -04:00
b9a57fe06e
feat(secrets-cli): target config reader — operate on the app's own composed Secrets config
2026-07-19 08:50:52 -04:00
1b013a56a7
feat(secrets-cli): recent-targets store for the interactive console
2026-07-19 08:50:03 -04:00
Joseph Doherty