feat(env): env set --sops writes one key into a SOPS file, value never in argv - #517

Merged

cameronsjo merged 11 commits into

mainfrom

feat/env-set-sops

Sep 12, 2026

Commits on Sep 12, 2026

wip: broken — internal/sops path and value rules only, no package yet
cameronsjo
committed
645daa2
feat(sops): pure domain package — path grammar, value rules, and the line editor

cameronsjo
and
claude
committed
bbcd762
feat(env): env set --sops writes one key into a SOPS file, value never in argv

cameronsjo
and
claude
committed
8cf2084
test(sops): cover the doctor check and the --sops clipboard route

cameronsjo
and
claude
committed
17a197c
fix(sops): the rules check walks the whole path and the verifier resolves it

cameronsjo
and
claude
committed
59538fc
docs(plans): record the PR number now that it exists

cameronsjo
and
claude
committed
670afe7
ci: install sops and age from release assets on the macOS runner

cameronsjo
and
claude
committed
60cad88
Merge remote-tracking branch 'refs/remotes/origin/fix/any-file-confirm' into feat/env-set-sops
cameronsjo
committed
9a88d96
fix(env): the lock open validates its own descriptor, and refusals close theirs

cameronsjo
and
claude
committed
d40cf53
fix(sops): the block refusal names the rule, not the key the operator supplied

cameronsjo
and
claude
committed
281ff61
docs: spell the secrets target names out instead of a bracket shorthand

cameronsjo
and
claude
committed
71f34c2