feat: name undefined variables when secrets_inventory is missing (#55)#59

Merged

Zorlin merged 10 commits into

mainfrom

feat/template-var-extraction

Jun 26, 2026

Commits on Jun 25, 2026

feat(playbooks): static template-variable extraction via the handlebars AST

Zorlin
and
claude
committed
refactor(playbooks): extract reusable resolve_role from find_role

Zorlin
and
claude
committed
feat(playbooks): referenced_variables_in_value walks a parsed YAML value

Zorlin
and
claude
committed
feat(playbooks): ref_collector walks a playbook tree for referenced vars

Zorlin
and
claude
committed
feat(playbooks): ref_collector also collects playbook-defined variables

Zorlin
and
claude
committed
feat(cli): missing_secret_variables names vars undefined without secrets

Zorlin
and
claude
committed
feat(cli): name undefined variables in the missing-secrets notice

Zorlin
and
claude
committed
feat(cli): make the missing-secrets diagnostic exact per-play

Zorlin
and
claude
committed
docs(proofs): formal + empirical proof of the diagnostic's exactness

Zorlin
and
claude
committed
refactor(playbooks): share the role walk between execution and analysis

Zorlin
and
claude
committed