mirror of
https://github.com/profullstack/logicsrc.git
synced 2026-09-10 19:26:00 +00:00
Anthony Ettinger
ca21348fcd
Teams on the left, their vaults in the middle, and the selected vault's
detail on the right across three tabs: secret names, who can decrypt,
and the audit trail.
It never handles plaintext, and that is the point rather than a
limitation. The server only ever holds ciphertext and this keeps it that
way: no decryption key is fetched, none is unwrapped, and there is no
keybinding that would. The secrets tab says so on screen and points at
`logicsrc teams pull`, because otherwise the first thing anyone does is
hunt for a reveal key. A value that can appear on screen can appear in a
screen share, a scrollback buffer or a recording; names are what you
need to navigate, values are what you rarely need to look at.
Names, fingerprints and versions are enough to answer the questions you
actually open this for: does the vault exist, has the rotation landed,
and who can still read it.
Notes on the shape:
- Vaults and detail load lazily, because each is a round trip. The
three detail calls are settled independently, so a member without
decryption access still sees the vault's shape and a missing audit
endpoint does not blank the secrets list.
- Changing team resets the vault selection. The old index means
nothing in a different team's list, and keeping it silently selects
an unrelated vault.
- The secrets table shows a date rather than a timestamp. Three fixed
columns plus a name that can run to thirty characters leaves no room,
and a truncated clock looks like data while telling you nothing.
- The audit table gives its widest floor to the action, not the actor:
an email truncates to something recognisable, where "secrets…" could
be put, get or delete.
The view is split from the loader so it renders headlessly without an
authenticated client or a terminal. 17 tests cover that, including one
asserting no ciphertext reaches the screen; 226 pass across the CLI.
Claude-Session: https://claude.ai/code/session_017Df2FNu5DhinMV2soRz3cy
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| config.test.ts | ||
| config.ts | ||
| context.ts | ||
| creds.ts | ||
| fixtures.ts | ||
| format.ts | ||
| index.test.ts | ||
| index.ts | ||
| numeric-options.test.ts | ||
| numeric-options.ts | ||
| ontology.ts | ||
| openspec.ts | ||
| prd.ts | ||
| registry.ts | ||
| rotate.ts | ||
| secrets-link.test.ts | ||
| secrets-link.ts | ||
| ssh.test.ts | ||
| ssh.ts | ||
| teams.test.ts | ||
| teams.ts | ||
| update.test.ts | ||
| update.ts | ||
| vault-tui-run.ts | ||
| vault-tui.test.ts | ||
| vault-tui.ts | ||