77a8a6d7f3
Implement TH-07 password ingress channels for CLI: - --password-stdin flag (reads one line from stdin) - PDFTRACT_PASSWORD env var - --password VALUE (rejected unless PDFTRACT_INSECURE_CLI_PASSWORD=1) Exit code 64 for insecure password usage with stderr hint. Stderr warning emitted when --password VALUE accepted via opt-in. Priority order: stdin > env var > value (opt-in) > none. Empty password (bare newline) treated as no password. Acceptance criteria: - --password-stdin: PASS - PDFTRACT_PASSWORD: PASS - --password VALUE rejection (exit 64): PASS - Stderr warning on opt-in: PASS - Exit codes: PASS - Python/MCP/Serve: N/A (crates don't exist yet) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| pdftract-cer-diff | ||
| pdftract-cli | ||
| pdftract-core | ||