open-envault 0.4.0

Local-first SOPS-compatible secrets for Git and Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

//! Public API for open_envault.
//!
//! ```no_run
//! if let Ok(values) = open_envault::load_environment("dev") {
//!     let _ = values.contains_key("EXAMPLE");
//! }
//! ```

pub mod core;
pub mod crypto;
pub mod output;
pub mod runtime;
pub mod schema;

use anyhow::Context;
use std::collections::BTreeMap;

/// Discover the project rooted at the current directory, resolve `name`, and
/// decrypt + parse that environment profile into an in-memory map.
pub fn load_environment(name: &str) -> anyhow::Result<BTreeMap<String, String>> {
    let path = core::discover(&std::env::current_dir()?)?;
    let project = core::load(&path)?;
    let profile = core::environment(&project, name)?;
    let root = path.parent().unwrap_or(&path);
    let encrypted = core::resolve_path(&profile.file, root);
    let configured_key = profile
        .key_file
        .as_deref()
        .map(|key| core::resolve_path(key, root));
    let plaintext =
        crypto::decrypt_for_with_key_file(&encrypted, Some(name), configured_key.as_deref())
            .with_context(|| format!("decrypt environment {name}"))?;
    Ok(schema::parse_env(&plaintext))
}