feat: set for [vars]

[yawn]

I use mise in a monorepo setting and configure everything at the root level. In the various subprojects I use sometimes override these vars (per environment) and actually populate the respective [env]'s with the (environment specific) values.

Some of these values are actually (age) encrypted (does not seem to be documented, but age-encryption also works for vars).

mise currently does not offer a set/encrypted helper for vars, only for env variables (via mise set). While the syntax is not difficult to reproduce (binary output, base64 encoded w/o padding) it would be nice to have this parity.

Maybe a new flag for mise set e.g. --var to set the key / value par in the [vars] section?

[jdx]

mise set --var seems solid to me

[yawn]

In the meantime (if somebody else is looking for a generic encryption helper):

#!/usr/bin/env bash
#MISE description="Encrypt stdin using age with environment specific pubkeys, output as base64 (suitable for use in vars/env)"
#MISE env={PUBKEYS = "{{vars.pubkeys}}"}
set -euo pipefail

# Build recipients array from pubkeys
recipients=()
while IFS= read -r key; do
    [[ -z "$key" ]] && continue
    recipients+=(-r "$key")
done <<< "$PUBKEYS"

# Read stdin, strip trailing newlines, encrypt, base64 without padding or line wraps
OUTPUT=$(tr -d '\n' | age --encrypt "${recipients[@]}" | base64 | tr -d '\n=')

echo "{ age = \"${OUTPUT}\" }"

It references public keys defined centrally / per environment (background is here).