vendor_fabric.secrets_sync.pipeline

SecretSync binding facade and transitional Python pipeline helpers.

Module Contents

Classes

SecretSyncPipeline

Transitional Python pipeline for tests and compatibility.

Functions

validate_config	Validate a config file through the SecretSync binding.
get_config_info	Return public configuration info through the SecretSync binding.
run_pipeline	Run a SecretSync config file through the SecretSync binding.
dry_run	Run a dry-run pipeline through the SecretSync binding.
get_targets	Return target names through the SecretSync binding.
get_sources	Return source names through the SecretSync binding.
merge	Run only the merge phase through the SecretSync binding.
sync	Run only the sync phase through the SecretSync binding.
diff_trees	Return a diff summary for two secret trees.
format_diff	Format target diffs for CLI and agent diagnostics.

API

class vendor_fabric.secrets_sync.pipeline.SecretSyncPipeline(config: vendor_fabric.secrets_sync.models.SecretSyncConfig, *, stores: vendor_fabric.secrets_sync.stores.StoreRegistry | None = None, logger: extended_data.logging.Logging | None = None)

Transitional Python pipeline for tests and compatibility.

The canonical SecretSync execution engine lives in jbcom/secrets-sync. New public execution paths should use the gopy binding adapter in this module rather than expanding this Python implementation.

Initialization

classmethod from_file(config_path: str, *, stores: vendor_fabric.secrets_sync.stores.StoreRegistry | None = None, logger: extended_data.logging.Logging | None = None) → vendor_fabric.secrets_sync.pipeline.SecretSyncPipeline

Create a pipeline from a YAML config path.

run(options: vendor_fabric.secrets_sync.models.SyncOptions | None = None) → vendor_fabric.secrets_sync.models.SyncResult

Execute the configured pipeline.

run_extended(options: vendor_fabric.secrets_sync.models.SyncOptions | None = None) → extended_data.containers.ExtendedData

Execute the pipeline and wrap the result in a generic ExtendedData facade.

validate_config() → extended_data.containers.ExtendedDict

Return a validation result payload.

config_info() → vendor_fabric.secrets_sync.models.ConfigInfo

Return public configuration info.

resolve_targets(requested: list[str] | None = None) → list[str]

Resolve requested targets and their target dependencies.

merge_target(target_name: str, *, dry_run: bool = False) → vendor_fabric.secrets_sync.models.OperationResult

Merge sources for one target into the merge store.

sync_target(target_name: str, *, dry_run: bool = False) → vendor_fabric.secrets_sync.models.OperationResult

Sync one target bundle into its target store.

bundle_path_for_target(target_name: str) → str

Return the deterministic merge-store path for a target.

vendor_fabric.secrets_sync.pipeline.validate_config(config_path: str) → extended_data.containers.ExtendedDict

Validate a config file through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.get_config_info(config_path: str) → extended_data.containers.ExtendedDict

Return public configuration info through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.run_pipeline(config_path: str, options: vendor_fabric.secrets_sync.models.SyncOptions | None = None, provider_session: vendor_fabric.secrets_sync.models.ProviderSession | collections.abc.Mapping[str, Any] | None = None) → extended_data.containers.ExtendedDict

Run a SecretSync config file through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.dry_run(config_path: str, provider_session: vendor_fabric.secrets_sync.models.ProviderSession | collections.abc.Mapping[str, Any] | None = None) → extended_data.containers.ExtendedDict

Run a dry-run pipeline through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.get_targets(config_path: str) → extended_data.containers.ExtendedDict

Return target names through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.get_sources(config_path: str) → extended_data.containers.ExtendedDict

Return source names through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.merge(config_path: str, *, dry_run: bool = False, provider_session: vendor_fabric.secrets_sync.models.ProviderSession | collections.abc.Mapping[str, Any] | None = None) → extended_data.containers.ExtendedDict

Run only the merge phase through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.sync(config_path: str, *, dry_run: bool = False, provider_session: vendor_fabric.secrets_sync.models.ProviderSession | collections.abc.Mapping[str, Any] | None = None) → extended_data.containers.ExtendedDict

Run only the sync phase through the SecretSync binding.

vendor_fabric.secrets_sync.pipeline.diff_trees(target: str, phase: str, before: collections.abc.Mapping[str, Any], after: collections.abc.Mapping[str, Any]) → vendor_fabric.secrets_sync.models.TargetDiff

Return a diff summary for two secret trees.

vendor_fabric.secrets_sync.pipeline.format_diff(diffs: list[vendor_fabric.secrets_sync.models.TargetDiff], *, output_format: vendor_fabric.secrets_sync.models.OutputFormat = OutputFormat.JSON) → str

Format target diffs for CLI and agent diagnostics.