[david-Darkcollective]

The three 1.0.0 issues, one commit each.

relix init (#55)

Creates a project's .relix/: catalog/, profiles.json at 0600, a .gitignore inside .relix/ holding profiles.json, plus relixrc with -o/-P and the root marker with --root. It trusts what it wrote, refuses (exit 2) a directory that already has a .relix/, warns outside $HOME, and writes nothing to stdout.

One deviation: with -P NAME, profiles.json is {"NAME": {}} rather than {}. Otherwise the relixrc it writes names a profile nothing defines, and the very next run fails with "no profile".

relix profiles ls | set | get | rm, and the trust rule (#56)

• ls lists profile, variable and file, never a value. A bare relix profiles does the same.
• set reads the value from a prompt that does not echo on a terminal, or from stdin otherwise, never from an argument.
• get prints the value a run under that profile would resolve, nearest file first.
• rm PROFILE [VARIABLE] removes one variable, or the whole profile.
• set and rm write the nearest project's file, or ~/.relix's with --user, at 0600. They refuse a looser file and warn when git tracks it.
• Trust.keep is the rule every writing command follows. A project that is trusted and unchanged since stays trusted across the command's own write. Any other stays untrusted. Which one happened is said on stderr.
• Tests cover both directions, plus an externally changed project.

relix source / relix connection: add | ls | edit | rm | test (#57)

• Files. Each add writes one declaration to catalog/00-source-<name>.relix or 00-connection-<name>.relix, printed by ScriptFormatter. That is the engine's canonical one-line form, so relix fmt leaves it unchanged.
• Parsing. The declaration is parsed by the engine before it is written. A missing option is the parser's "missing 'url'", reported as exit 2 naming --url.
• Locations. A relative LOCATION is rewritten relative to the catalog file, which is what it resolves against.
• Secrets. A secret is accepted only as ${NAME}: an option named password, secret, token, key or credential, or a URL carrying password=.
• Hand-written files. edit and rm change only a declaration alone in its file. One beside others is reported with its file and line, and --editor opens $VISUAL/$EDITOR at that line.
• rm. It refuses a name another declaration reads, unless --force, and says when a farther declaration now shows through.
• test. source test reads one row per source under the profile and checks a declared schema against what was read. connection test opens each database connection with a probe of a table no database has: "table not found" means it connected. Both exit 5 when one fails.

Three choices worth a look:

• --global, not --user, writes ~/.relix for source and connection. The issue's own example passes --user='${WAREHOUSE_USER}' as a connection option, so --user can't also be the scope flag there. profiles keeps --user.
• A JSON source takes no --infer-schema. The engine's JSON source is schema-on-read and has no schema option, so the flag is refused with exit 2. --infer-schema covers CSV files, connection tables and database sources.
• connection test only opens database connections. Any other kind (a file connection, mongodb) is listed as untested after its placeholders are checked. The engine has no public API to open one.

Docs

New command pages (init, profiles, source, connection), sections in catalog.md and secrets.md, and design.md §3, §5.1, §5.3 and §5.4. Every new example runs in GuideExamplesTest.

./gradlew clean build passes, and so does each commit on its own.

Fixes #55
Fixes #56
Fixes #57