ConfigValidationError creates detailed validation errors with suggestions

FileOperationError creates errors for file system operations

Error constructors for common scenarios ConfigError creates errors related to configuration parsing and validation

NewValidator creates a new validator instance

NewHashStore creates or loads a hash store from disk

TokenError creates token-related errors with setup instructions

WrapWithSuggestions wraps an error and adds suggestions

HasChanged checks if a secret has changed since last deployment

save writes the hash store to disk

GetToken retrieves token from environment or file

Load loads a single config file

ProcessSecretChanges processes secrets and determines which services need restart

UserGroupError creates errors for user/group validation issues

Helper functions

NewManager creates a new systemd integration manager

OnePasswordError creates errors for 1Password integration issues

ServiceError creates errors for systemd service operations

ValidateConfigStruct validates a config with slice of SecretData

ValidationError creates general validation errors

calculateHash calculates SHA-256 hash of a file's content

Helper function to check if string contains substring

Helper functions

mockSystemdIntegration creates a test systemd integration config

ExtractServiceActions extracts service actions from secret configuration

LoadMultiple loads and merges multiple config files (GitHub #3)

Validate checks for duplicate secret paths across all configs Deprecated: Use validation.Validator.ValidateConfigStruct() for comprehensive validation

convertToValidationSecrets converts config secrets to validation format

min returns the minimum of two integers

SetDryRun enables dry-run mode for testing

ValidateTokenFile validates the token file exists and has correct permissions

Wrap provides a simple way to wrap existing errors with OpNix context

executeServiceAction executes a single service action with retry logic

getAvailableGroups returns a list of available system groups

getAvailableUsers returns a list of available system users

handleError provides user-friendly error output

isServiceGroup checks if a groupname looks like a service group

isServiceUser checks if a username looks like a service user

resolveSecretPath resolves the final path for a secret based on custom path logic (legacy)

substituteVariables replaces template variables in a path

substituteVariables replaces template variables in a path

validateAbsolutePath validates absolute paths for security

validateGroup validates that a group exists

validateMode validates file permission mode

validatePath validates secret path and checks for duplicates

validateReference validates 1Password reference format

validateSecretPath validates that the resolved path is secure and accessible

validateUser validates that a user exists

checkOutputDirectory ensures the output directory is accessible

checkWritePermissions verifies we can write to the directory

createSymlinks creates symlinks for a secret file

ensureDirectoryWritable ensures a directory exists and is writable

getAvailableGroups returns a list of common system groups for error suggestions

getAvailableUsers returns a list of common system users for error suggestions

load reads the hash store from disk

processServiceActions executes the required service actions

resolvePath resolves the final path using templates and variables

resolveSecretPathWithTemplate resolves the final path for a secret with template support