internal/

Package cli implements the hush command dispatch and shared helpers.

Package config loads the per-repo .hush.toml — the value-free declaration of which keys a project needs and how to pick a profile.

Package keychain wraps the macOS `security` CLI to store the hush master age identity.

Package resolve turns a Config + the current git/cwd state into a concrete project, active profile, and the resolved key/value set (walking `extends`).

Package store manages the single global encrypted secret file.