murk-cli 0.6.0

Encrypted secrets manager for developers — one file, age encryption, git-friendly
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159

"""Tests for the murk Python SDK."""

import os

import murk


class TestLoad:
    def test_load_vault(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        assert vault is not None

    def test_load_with_explicit_path(self, vault_dir):
        os.environ["MURK_KEY"] = vault_dir["key"]
        vault_path = os.path.join(vault_dir["path"], ".murk")

        vault = murk.load(vault_path)
        assert vault is not None

    def test_load_missing_vault_raises(self, vault_dir):
        os.environ["MURK_KEY"] = vault_dir["key"]

        try:
            murk.load("/nonexistent/.murk")
            assert False, "Expected RuntimeError"
        except RuntimeError:
            pass

    def test_load_missing_key_raises(self, tmp_path):
        # Use a clean dir with no .murk or .env to avoid key auto-discovery.
        os.chdir(tmp_path)
        os.environ.pop("MURK_KEY", None)
        os.environ.pop("MURK_KEY_FILE", None)

        try:
            murk.load()
            assert False, "Expected RuntimeError"
        except RuntimeError:
            pass


class TestGet:
    def test_get_existing_key(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        assert vault.get("DATABASE_URL") == "postgres://localhost/mydb"
        assert vault.get("API_KEY") == "sk-test-123"

    def test_get_missing_key_returns_none(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        assert vault.get("NONEXISTENT") is None

    def test_get_oneliner(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        assert murk.get("DATABASE_URL") == "postgres://localhost/mydb"

    def test_get_oneliner_missing_returns_none(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        assert murk.get("NONEXISTENT") is None


class TestExport:
    def test_export_returns_all_secrets(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        secrets = vault.export()

        assert isinstance(secrets, dict)
        assert secrets["DATABASE_URL"] == "postgres://localhost/mydb"
        assert secrets["API_KEY"] == "sk-test-123"
        assert secrets["STRIPE_SECRET"] == "sk_live_abc"
        assert len(secrets) == 3

    def test_export_all_oneliner(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        secrets = murk.export_all()
        assert len(secrets) == 3
        assert secrets["API_KEY"] == "sk-test-123"


class TestVaultMethods:
    def test_keys(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        keys = vault.keys()
        assert sorted(keys) == ["API_KEY", "DATABASE_URL", "STRIPE_SECRET"]

    def test_len(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        assert len(vault) == 3

    def test_contains(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        assert "DATABASE_URL" in vault
        assert "NONEXISTENT" not in vault

    def test_getitem(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        assert vault["API_KEY"] == "sk-test-123"

    def test_getitem_missing_raises(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        try:
            _ = vault["NONEXISTENT"]
            assert False, "Expected RuntimeError"
        except RuntimeError:
            pass

    def test_repr(self, vault_dir):
        os.chdir(vault_dir["path"])
        os.environ["MURK_KEY"] = vault_dir["key"]

        vault = murk.load()
        r = repr(vault)
        assert "3 secrets" in r
        assert "1 recipients" in r


class TestHasKey:
    def test_has_key_true(self, vault_dir):
        os.environ["MURK_KEY"] = vault_dir["key"]
        assert murk.has_key() is True

    def test_has_key_false(self, tmp_path):
        os.environ.pop("MURK_KEY", None)
        os.environ.pop("MURK_KEY_FILE", None)
        # Use a clean dir with no .murk or .env to avoid auto-discovery.
        os.chdir(tmp_path)
        assert murk.has_key() is False