v0.8.1 Dev-B: org add/edit parity for Card/Key/Totp #10

Open
alee wants to merge 0 commits from feature/v0.8.1-dev-b-card-key-totp into main
Owner

Stream B of the v0.8.1 org item-type parity lift. Rebased on merged Dev-A (b09e0ce).

  • B1+B2: org add card/key/totp via shared item_build builders; --*-stdin secret flags; build_org_item drops tags (run_add sets them).
  • B3: org edit converted to interactive per-type editing via item_build edit helpers; Edit{query,totp_qr}; item-update trailer retained.
  • Tests: org_items 14/14, org_authz adapted; full relicario-cli suite green; clippy adds zero new warnings.
  • Skeleton kept additive for Dev-C (Document arm + run_edit file param slot in without a rewrite).

3-lens adversarial review (security/spec/test-adequacy) all PASS; minor coverage gaps closed.

Stream B of the v0.8.1 org item-type parity lift. Rebased on merged Dev-A (b09e0ce). - B1+B2: `org add card/key/totp` via shared item_build builders; --*-stdin secret flags; build_org_item drops tags (run_add sets them). - B3: `org edit` converted to interactive per-type editing via item_build edit helpers; Edit{query,totp_qr}; item-update trailer retained. - Tests: org_items 14/14, org_authz adapted; full relicario-cli suite green; clippy adds zero new warnings. - Skeleton kept additive for Dev-C (Document arm + run_edit file param slot in without a rewrite). 3-lens adversarial review (security/spec/test-adequacy) all PASS; minor coverage gaps closed.
alee added 5 commits 2026-06-21 01:02:33 +00:00
Adds run_stdin + create_collection_and_grant fixture helpers and three
acceptance tests for org add card/key/totp. Red until B1/B2 wire the
subcommands (currently: unrecognized subcommand). Asserts org get masks
card number + key material without --show. Edit round-trips land with B3.
B3 dropped the flat --username/--url/... flags from `org edit`, so the
ungranted-member denial test must drive the bare interactive form. The
ungranted member is now rejected at manifest lookup (filter_for_member +
resolve_org_query) before any prompt is read.
Closes the minor coverage gaps from the final adversarial review:
- org add card/key/totp reject ungranted + unknown collections (pins the
  grant gate on the new write paths, which runs before any secret prompt)
- secure-note --body-stdin masks body; totp --secret-stdin round-trips
  (completes the --*-stdin matrix for the org surface)
- key-material edit accept-branch round-trip, verified via get --show
This branch is already included in the target branch. There is nothing to merge.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feature/v0.8.1-dev-b-card-key-totp:feature/v0.8.1-dev-b-card-key-totp
git checkout feature/v0.8.1-dev-b-card-key-totp
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alee/relicario#10