tsafe-cli 1.0.23

Local-first developer secret vault CLI — encrypted storage, process injection via exec, cloud sync, audit trail
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

//! KeePass `.kdbx` cloud-pull provider.
//!
//! Opens a local `.kdbx` database file and extracts entries as key/value pairs
//! suitable for import into the tsafe vault.  This provider performs file I/O
//! only — no network calls are made.
//!
//! ## Configuration (`.tsafe.yml`)
//!
//! ```yaml
//! pulls:
//!   - source: kp
//!     path: /home/user/.secrets/dev.kdbx
//!     password_env: TSAFE_KP_PASSWORD   # env var; never literal in manifest
//!     keyfile_path: /home/user/.keys/dev.keyx  # optional
//!     group: Infrastructure             # optional group filter
//!     recursive: false                  # default
//!     ns: infra                         # ADR-012 namespace prefix
//! ```
//!
//! ## Key mapping
//!
//! Standard KeePass fields are mapped as follows (title normalised):
//!
//! | KeePass field | Vault key example        |
//! |---------------|--------------------------|
//! | `UserName`    | `DATABASE_CREDS_USERNAME`|
//! | `Password`    | `DATABASE_CREDS_PASSWORD`|
//! | `URL`         | `DATABASE_CREDS_URL`     |
//! | custom field  | `DATABASE_CREDS_<FIELD>` |
//!
//! `Notes` are skipped by default.

pub mod config;
pub mod error;
pub mod reader;

pub use config::KeePassConfig;
pub use error::KeePassError;
pub use reader::pull_entries;