Add Doppler provider (0.21+) - #439

Merged

domenkozar merged 27 commits into

cachix:mainfrom

Finc3:doppler-provider

Sep 18, 2026

Commits on Sep 11, 2026

Add Doppler provider
MaxDaten
committed
691f73e
test(doppler): let response_server take owned bodies

MaxDaten
and
claude
committed
7318de5
fix(doppler): read configs concurrently in get_many

MaxDaten
and
claude
committed
3d13cb6
fix(doppler): do not let an unreadable secret block its deletion

MaxDaten
and
claude
committed
464719d
fix(doppler): bound unrecognized failure bodies in error messages

MaxDaten
and
claude
committed
0592b7f
fix(doppler): refuse a secret object with raw but no computed value

MaxDaten
and
claude
committed
f5f53f3
fix(doppler): split an oversized secrets= filter across requests

MaxDaten
and
claude
committed
dd945a8
fix(doppler): exclude managed secrets from listings at the source

MaxDaten
and
claude
committed
5061214
refactor(doppler): answer reserved-name reads before any request

MaxDaten
and
claude
committed
bbfb78f
refactor(doppler): single owner for the implied-config rule

MaxDaten
and
claude
committed
6a4ecd3
docs(doppler): state Doppler's actual token and restricted-value rules

MaxDaten
and
claude
committed
10e092a
fix(doppler): retry rate-limited and server-error requests

MaxDaten
and
claude
committed
eaabcc2
fix(doppler): keep the session profile through a poisoned lock

MaxDaten
and
claude
committed
7118f8d
refactor(doppler): return the pinned config directly in config_for_profile

MaxDaten
and
claude
committed
9f42796
fix(doppler): keep write success bodies unread under retry

MaxDaten
and
claude
committed
f80176b
test(plan): Doppler source and cache overlapping under a profile is refused

MaxDaten
and
claude
committed
21e6db6
fix(plan): refuse a cache resolving to its source's entry under the profile

MaxDaten
and
claude
committed
51ab474
test(plan): inline cached alias overlapping its source is refused (red)

MaxDaten
and
claude
committed
bff9a8a
test(doppler): a batch read never asks Doppler for a reserved name (red)

MaxDaten
and
claude
committed
3ab3730
fix(plan): judge the inline cached alias form by its resolved primary URI

MaxDaten
and
claude
committed
6cd671f
fix(doppler): keep reserved names out of the batch filter

MaxDaten
and
claude
committed
57373e6
test(doppler): a delete refuses a secret it cannot read (red)

MaxDaten
and
claude
committed
a1920d2
fix(doppler): refuse to delete a secret whose probe Doppler refused

MaxDaten
and
claude
committed
fb37752
refactor(doppler): read a secret object in one function

MaxDaten
and
claude
committed
090b3aa
refactor(doppler): describe a Call's request in one match

MaxDaten
and
claude
committed
874ce9e
refactor(doppler): one locate_writable behind preflight and operation

MaxDaten
and
claude
committed
6c365af
refactor(doppler): one owner for the implied-config rule, reflect_config inlined

MaxDaten
and
claude
committed
2fa8cef

Navigation Menu

Add Doppler provider (0.21+) - #439

Add Doppler provider (0.21+)#439
domenkozar merged 27 commits into
cachix:mainfrom
Finc3:doppler-provider

Commits on Sep 11, 2026

Add Doppler provider

test(doppler): let response_server take owned bodies

fix(doppler): read configs concurrently in get_many

fix(doppler): do not let an unreadable secret block its deletion

fix(doppler): bound unrecognized failure bodies in error messages

fix(doppler): refuse a secret object with raw but no computed value

fix(doppler): split an oversized secrets= filter across requests

fix(doppler): exclude managed secrets from listings at the source

refactor(doppler): answer reserved-name reads before any request

refactor(doppler): single owner for the implied-config rule

docs(doppler): state Doppler's actual token and restricted-value rules

fix(doppler): retry rate-limited and server-error requests

fix(doppler): keep the session profile through a poisoned lock

refactor(doppler): return the pinned config directly in config_for_profile

fix(doppler): keep write success bodies unread under retry

test(plan): Doppler source and cache overlapping under a profile is refused

fix(plan): refuse a cache resolving to its source's entry under the profile

test(plan): inline cached alias overlapping its source is refused (red)

test(doppler): a batch read never asks Doppler for a reserved name (red)

fix(plan): judge the inline cached alias form by its resolved primary URI

fix(doppler): keep reserved names out of the batch filter

test(doppler): a delete refuses a secret it cannot read (red)

fix(doppler): refuse to delete a secret whose probe Doppler refused

refactor(doppler): read a secret object in one function

refactor(doppler): describe a Call's request in one match

refactor(doppler): one locate_writable behind preflight and operation

refactor(doppler): one owner for the implied-config rule, reflect_config inlined