vaultic 1.0.0

Secure your secrets. Sync your team. Trust your configs.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

use std::path::PathBuf;

/// All domain errors for Vaultic.
///
/// Each variant provides enough context to diagnose the issue
/// without needing a debugger.
#[derive(Debug, thiserror::Error)]
pub enum VaulticError {
    #[error(
        "File not found: {path}\n\n  \
         Check that the path is correct and the file exists.\n  \
         Run 'vaultic status' to see available environments and files."
    )]
    FileNotFound { path: PathBuf },

    #[error("Encryption failed: {reason}")]
    EncryptionFailed { reason: String },

    #[error(
        "Decryption failed: no matching key found\n\n  \
         Your private key is not in the recipients list for this file.\n\n  \
         Solutions:\n    \
         → Ask a project admin to add your public key: vaultic keys add <your-key>\n    \
         → Then re-encrypt: vaultic encrypt --all\n    \
         → Check your recipient status: vaultic status"
    )]
    DecryptionNoKey,

    #[error(
        "Parse error in {file}: {detail}\n\n  \
         Expected format: KEY=value (one per line).\n  \
         Comments (#) and blank lines are allowed."
    )]
    ParseError { file: PathBuf, detail: String },

    #[error(
        "Environment '{name}' not found\n\n  \
         Available environments: {available}\n  \
         Check .vaultic/config.toml for environment definitions."
    )]
    EnvironmentNotFound { name: String, available: String },

    #[error(
        "Circular inheritance detected: {chain}\n\n  \
         Two or more environments inherit from each other, creating a loop.\n\n  \
         Fix: edit .vaultic/config.toml and ensure inheritance forms a tree:\n    \
         → Valid:   base → dev, base → staging, base → prod\n    \
         → Invalid: dev → staging → dev (cycle)"
    )]
    CircularInheritance { chain: String },

    #[error("Key '{identity}' not found in recipients")]
    KeyNotFound { identity: String },

    #[error("Key '{identity}' already exists in recipients")]
    KeyAlreadyExists { identity: String },

    #[error("Invalid configuration: {detail}")]
    InvalidConfig { detail: String },

    #[error("Audit log error: {detail}")]
    AuditError { detail: String },

    #[error("Git hook error: {detail}")]
    HookError { detail: String },

    #[error(transparent)]
    Io(#[from] std::io::Error),
}

/// Convenience alias used throughout the crate.
pub type Result<T> = std::result::Result<T, VaulticError>;