kagi-vault 0.1.1

Encrypted secrets and environment variable manager for teams — a secure, team-ready dotenv alternative with per-service isolation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89

use crate::domain::error::DomainError;
use crate::domain::repository::secret_repo::SecretRepository;

pub struct ListServicesService<R: SecretRepository> {
    repo: R,
}

impl<R: SecretRepository> ListServicesService<R> {
    pub fn new(repo: R) -> Self {
        Self { repo }
    }

    /// When service_name is None, returns list of service names (value and description are empty).
    /// When service_name is Some, returns list of (key, value, description) pairs for that service.
    pub fn execute(
        &self,
        service_name: Option<&str>,
    ) -> Result<Vec<(String, String, Option<String>)>, DomainError> {
        match service_name {
            Some(name) => {
                let service = self.repo.load(name)?;
                let mut items: Vec<_> = service
                    .secrets
                    .iter()
                    .map(|(k, v)| (k.clone(), v.value.clone(), v.description.clone()))
                    .collect();
                items.sort_by(|a, b| a.0.cmp(&b.0));
                Ok(items)
            }
            None => {
                let mut services = self.repo.list_services()?;
                services.sort();
                Ok(services
                    .into_iter()
                    .map(|s| (s, String::new(), None))
                    .collect())
            }
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::domain::crypto::encryptor::mock::XorEncryptor;
    use crate::domain::entity::secret::Secret;
    use crate::domain::entity::service::Service;
    use crate::infrastructure::fs_store::FileStore;
    use tempfile::TempDir;

    fn setup(dir: &TempDir) -> ListServicesService<FileStore> {
        let base = dir.path().join(".kagi");
        std::fs::create_dir(&base).unwrap();
        let config = serde_json::json!({"version": "2", "project_id": "kgp_test", "services": {}});
        std::fs::write(
            base.join(crate::domain::config::KAGI_CONFIG_FILE),
            serde_json::to_string(&config).unwrap(),
        )
        .unwrap();
        let store = FileStore::new(base, Box::new(XorEncryptor::new(0xAB)));
        let mut svc = Service::new("api");
        svc.set_secret(Secret::new("A", "1"));
        svc.set_secret(Secret::new("B", "2"));
        store.save(&svc).unwrap();
        ListServicesService::new(store)
    }

    #[test]
    fn test_list_services() {
        let dir = TempDir::new().unwrap();
        let svc = setup(&dir);
        let list = svc.execute(None).unwrap();
        assert_eq!(list, vec![("api".into(), "".into(), None)]);
    }

    #[test]
    fn test_list_keys() {
        let dir = TempDir::new().unwrap();
        let svc = setup(&dir);
        let keys = svc.execute(Some("api")).unwrap();
        assert_eq!(
            keys,
            vec![
                ("A".into(), "1".into(), None),
                ("B".into(), "2".into(), None)
            ]
        );
    }
}