dugout 0.1.10

Git-native secrets manager for development teams, written in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

//! Dot command - auto-detect project type and run.

use crate::cli::output;
use crate::core::config::Config;
use crate::core::detect::ProjectKind;
use crate::core::domain::Identity;
use crate::core::store;
use crate::error::Result;

/// Auto-detect project and run with secrets.
pub fn execute(vault: Option<String>) -> Result<()> {
    // dot always uses default vault unless explicit
    let vault_name = crate::cli::resolve::resolve_vault_default(vault.as_deref())?;

    // Check if vault is initialized
    if !Config::exists_for(vault_name.as_deref()) {
        output::error("no vault found");
        output::hint("run: dugout init");
        return Err(crate::error::ConfigError::NotInitialized.into());
    }

    // Check if user has access
    let config = Config::load_from(vault_name.as_deref())?;

    if store::has_global()? {
        let pubkey = Identity::load_global_pubkey()?;

        if !config.recipients.values().any(|k| k == &pubkey) {
            output::error("no access to this vault");
            output::hint("run: dugout knock");
            return Err(crate::error::ConfigError::AccessDenied.into());
        }
    }

    // Detect project type
    let kind = match ProjectKind::detect() {
        Some(k) => k,
        None => {
            output::error("couldn't detect project type");
            output::hint("use: dugout run -- <command>");
            return Err(crate::error::ConfigError::InvalidValue {
                field: "project",
                reason: "could not detect project type".to_string(),
            }
            .into());
        }
    };
    let command = kind.command();

    // Check if the tool exists before trying to run
    if which::which(&command[0]).is_err() {
        output::error(&format!("{} not found", command[0]));
        output::hint(&format!(
            "install {} or use: dugout run -- <command>",
            command[0]
        ));
        return Err(crate::error::Error::Other(format!(
            "{} not found",
            command[0]
        )));
    }

    // Show what we're doing (one concise line)
    let secrets_count = config.secrets.len();
    let cmd_display = command.join(" ");
    output::success(&format!(
        "{} project, {} secrets → {}",
        kind.display_name(),
        secrets_count,
        cmd_display
    ));

    crate::cli::run::execute_with_vault(&command, vault_name)
}