envseal 0.3.8

Write-only secret vault with process-level access control — post-agent secret management
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

//! Developer-migration tooling — make switching to envseal cheaper
//! than continuing to paste secrets.
//!
//! # Submodules
//!
//! - [`preexec`] — Detect API keys in a shell command line. Powers
//!   the `envseal __preexec` internal mode invoked by the bash/zsh/
//!   fish shell hooks.
//! - [`shell_hooks`] — The bash `DEBUG`-trap, zsh `preexec`, and fish
//!   `fish_preexec` hook scripts plus the install/uninstall logic that
//!   wires them into the user's shell rc files idempotently.
//! - [`history`] — Scan `~/.bash_history`, `~/.zsh_history`,
//!   `~/.local/share/fish/fish_history` for secrets the developer has
//!   already typed at least once. Used by `envseal init --from-history`.
//!
//! These three together cover three points in the developer's
//! workflow where secrets enter the system: the moment of typing
//! (preexec), one-time backfill (history), and bulk migration from
//! `.env` files (existing `envseal import`).

pub mod history;
pub mod preexec;
pub mod shell_hooks;