Module env 

Environment and .env file handling.

Enums

EnvrcStatus

Status of .envrc after writing.

Constants

ENV_MURK_KEY

Environment variable for the secret key.

ENV_MURK_KEY_FILE

Environment variable for the secret key file path.

ENV_MURK_VAULT

Environment variable for the vault filename.

Functions

dotenv_has_murk_key

Check whether .env already contains a MURK_KEY line.

key_file_path

Compute the key file path for a vault: ~/.config/murk/keys/<hash>. The hash is a truncated SHA-256 of the absolute vault path.

parse_env

Parse a .env file into key-value pairs. Skips comments, blank lines, MURK_* keys, and strips quotes and export prefixes.

read_key_from_dotenv

Read MURK_KEY from .env file if present.

resolve_key

Resolve the secret key, checking in order:

warn_env_permissions

Warn if .env has loose permissions (Unix only).

write_envrc

Write a .envrc file for direnv integration.

write_key_ref_to_dotenv

Write a MURK_KEY_FILE reference to .env, removing any existing MURK_KEY/MURK_KEY_FILE lines.

write_key_to_dotenv

Write a MURK_KEY to .env, removing any existing MURK_KEY lines. On Unix, sets file permissions to 600 atomically at creation time to prevent a TOCTOU window where the secret key is world-readable. On non-Unix platforms, permissions are not hardened.

write_key_to_file

Write a secret key to a file with restricted permissions.