Link the commands, API classes, bugs and wishlist items in the changelog (59698e6) - derivepassphrase.git

docs/changelog.md
@@ -42,16 +42,15 @@ As an exception, entries partaining to developers of `derivepassphrase` are
 specifically marked as such.)
 </small></aside>
 
-  [REFERENCE]: reference/index.md
-
 <!-- scriv changelog start -->
 
 ## 0.5 (2025-06-14)  {#v0.5}
 
 ### Removed  {#removed-in-v0.5}
 
-  - For `derivepassphrase`, remove support for (automatic) colored output or
-    output with embedded text styling.
+  - For [`derivepassphrase`][CLI], remove [support for (automatic) colored
+    output or output with embedded text styling, as introduced in
+    v0.4.0](#added-in-v0.4.0-color-support).
 
     This is a stopgap measure.
     There exist pseudo-standards (the `NO_COLOR` and `FORCE_COLOR`
@@ -62,6 +61,7 @@ specifically marked as such.)
     requested or rejected reliably across different terminal programs, we
     will rather emit only uncolored, unstyled, lowest-common-denominator
     device-independent output.
+    ([`conventional-configurable-text-styling`][WISH_CONVENTIONAL_CONFIGURABLE_TEXT_STYLING])
 
 ### Added  {#added-in-v0.5}
 
@@ -74,10 +74,10 @@ specifically marked as such.)
     in vault?][INTERCHANGABLE_PASSPHRASES] for details, including the
     practical security (non-)implications.
 
-    The `derivepassphrase vault` command-line interface does not address
-    this in any manner, mostly because the "non-standard" interchangable
-    variants of a given master password tend to be ugly to type in, and
-    because they do not have practical security implications.
+    The [`derivepassphrase vault`][CLI_VAULT] command-line interface does
+    not address this in any manner, mostly because the "non-standard"
+    interchangable variants of a given master password tend to be ugly to
+    type in, and because they do not have practical security implications.
 
   - For the [`Vault`][derivepassphrase.vault.Vault] API, accept arbitrary
     [Buffer][collections.abc.Buffer] objects as passphrases or service
@@ -87,23 +87,26 @@ specifically marked as such.)
     character sets][derivepassphrase.vault.Vault.CHARSETS] as public
     attributes.
 
-  - For `derivepassphrase vault`, support selecting the [editor
+  - For [`derivepassphrase vault`][CLI_VAULT], support selecting the [editor
     interface](#changed-in-v0.5-editor-interface) when editing notes via the
     `--modern-editor-interface` and `--vault-legacy-editor-interface`
     options.
 
-  - For `derivepassphrase vault`, support printing the service notes before
-    the passphrase, as an alternative, instead of always printing them
-    *after* the passphrase.
+  - For [`derivepassphrase vault`][CLI_VAULT], support printing the service
+    notes before the passphrase, as an alternative, instead of always
+    printing them *after* the passphrase.
+    ([`print-service-notes-above`][WISH_PRINT_SERVICE_NOTES_ABOVE])
 
-  - In the `--version` option of `derivepassphrase` and each subcommand,
-    additionally report build and environment information, such as
-    supported subcommands, derivation schemes, foreign configuration formats
-    and active [PEP 508 extras][PEP_508].
+  - In the `--version` option of [`derivepassphrase`][CLI] and each
+    subcommand, additionally report build and environment information, such
+    as supported subcommands, derivation schemes, foreign configuration
+    formats and active [PEP 508 extras](https://peps.python.org/pep-0508/).
     (Each subcommand only reports the items relevant to that subcommand.)
+    ([`report-build-flags-and-features`][WISH_REPORT_BUILD_FLAGS_AND_FEATURES])
 
-  - For developers: Rewrite the tests concerning `derivepassphrase vault`
-    and `--notes` usage into [hypothesis][]-based tests where feasible.
+  - For developers: Rewrite the tests concerning [`derivepassphrase
+    vault`][CLI_VAULT] and `--notes` usage into [hypothesis][]-based tests
+    where feasible.
 
   - For developers: Add scripts to the source tree to ensure consistent code
     quality: automatic linting, formatting and type checking, and optional
@@ -111,10 +114,6 @@ specifically marked as such.)
     The master quality control script doubles as a servicable (but
     heavyweight) "pre-commit" hook for git.
 
-[INTERCHANGABLE_PASSPHRASES]: explanation/faq-vault-interchangable-passphrases.md
-[PEP_508]: https://peps.python.org/pep-0508/
-[hypothesis]: https://pypi.org/project/hypothesis/
-
 ### Changed  {#changed-in-v0.5}
 
   - Support a new, unified interface
@@ -148,9 +147,9 @@ specifically marked as such.)
     This is a **breaking API change** due to the removal of most functions
     from the [`derivepassphrase.cli`][] module.
 
-  - For `derivepassphrase vault`, change the handling of the notes for
-    better compatibility with <i>vault</i>(1) and for better internal
-    consistency:
+  - For [`derivepassphrase vault`][CLI_VAULT], change the handling of the
+    notes for better compatibility with <i>vault</i>(1) and for better
+    internal consistency:
 
     1.  Correctly require the `--config` option in addition to the `--notes`
         option to request that the service notes be edited, for
@@ -161,10 +160,11 @@ specifically marked as such.)
 
     3.  Editing the notes successfully in any way, including no-op edits,
         will register the service name as a known service to
-        `derivepassphrase vault`, even if the settings are otherwise empty.
+        [`derivepassphrase vault`][CLI_VAULT], even if the settings are
+        otherwise empty.
 
-  - For `derivepassphrase vault`, by default, use an <a
-    id="changed-in-v0.5-editor-interface">editor interface</a> that matches
+  - For [`derivepassphrase vault`][CLI_VAULT], by default, use an <b
+    id="changed-in-v0.5-editor-interface">editor interface</b> that matches
     <i>vault</i>(1): the contents of the edited text file are used directly
     as the service notes, without interpretation.
 
@@ -188,32 +188,34 @@ specifically marked as such.)
     scheme about sensitivity (or lack thereof) to its inputs and its input
     formats.
 
-  - For developers: For `derivepassphrase vault`, store our `vault.json`
-    data file in pretty-printed form.
+  - For developers: For [`derivepassphrase vault`][CLI_VAULT], store our
+    `vault.json` data file in pretty-printed form.
     This is a stopgap measure to ease debugging and introspection until
     better built-in query functionality for the effective configuration is
     available, because users should not be rewarded for meddling around in
-    data files. ([#20])
-
-[#20]: https://github.com/the-13th-letter/derivepassphrase/issues/20
-[hypothesis]: https://pypi.org/project/hypothesis/
+    data files.
+    ([`pretty-print-json`][WISH_PRETTY_PRINT_JSON])
 
 ### Fixed  {#fixed-in-v0.5}
 
   - Fix the misbehaving shell completion for `zsh` in the presence of colons
     in the completion item.
     This was due to an overzealous workaround for
-    [`pallets/click#2703`][CLICK_2703].
+    [`pallets/click#2703`](https://github.com/pallets/click/issues/2703).
 
-  - For `derivepassphrase vault`, when exporting a vault configuration,
-    export a pretty-printed configuration, to ease debugging and
-    introspection. ([#20])
+  - For [`derivepassphrase vault`][CLI_VAULT], when exporting a vault
+    configuration, export a pretty-printed configuration, to ease debugging
+    and introspection.
+    ([`pretty-print-json`][WISH_PRETTY_PRINT_JSON])
 
-  - For `derivepassphrase vault`, also print the service notes (if any) when
-    deriving a service passphrase, just like vault(1) does.
+  - For [`derivepassphrase vault`][CLI_VAULT], also print the service notes
+    (if any) when deriving a service passphrase, just like <i>vault</i>(1)
+    does.
+    ([`print-service-notes`][BUG_PRINT_SERVICE_NOTES])
 
   - Lock our internals and their configuration against concurrent
-    modifications. ([#22])
+    modifications.
+    ([`concurrency-audit`][BUG_CONCURRENCY_AUDIT])
 
   - Test against PyPy 3.11.
 
@@ -243,22 +245,16 @@ specifically marked as such.)
     the locking system as a whole, when given functioning locking
     primitives, correctly serializes access to the facilities it is supposed
     to guard.
-
-[^the-annoying-os]: Hat tip---and apologies---to
-    [Timothée Mazzucotelli (`@pawamoy`)](https://github.com/pawamoy/) for
-    the fitting terminology.
-
-[#22]: https://github.com/the-13th-letter/derivepassphrase/issues/22
-[#23]: https://github.com/the-13th-letter/derivepassphrase/issues/23
-[CLICK_2703]: https://github.com/pallets/click/issues/2703
+    ([`concurrency-testing-in-test-suite`][BUG_CONCURRENCY_TESTING_IN_TEST_SUITE])
 
 ## 0.4.0 (2025-01-07)  {#v0.4.0}
 
 ### Added  {#added-in-v0.4.0}
 
-  - For `derivepassphrase vault` and `derivepassphrase export vault`,
-    support changing the amount of diagnostic output we emit via new
-    command-line options `--debug`, `-v`/`--verbose` and `-q`/`--quiet`.
+  - For [`derivepassphrase vault`][CLI_VAULT] and [`derivepassphrase export
+    vault`][CLI_EXPORT_VAULT], support changing the amount of diagnostic
+    output we emit via new command-line options `--debug`, `-v`/`--verbose`
+    and `-q`/`--quiet`.
     Internally, we use Python's standard [logging][] and [warnings][]
     systems.
 
@@ -266,19 +262,20 @@ specifically marked as such.)
     which are service-specific.
     (The `vault.json` configuration file is now rebranded as a data file.)
     The configuration files are user-editable, the data files are
-    `derivepassphrase`-editable.
+    [`derivepassphrase`][CLI]-editable.
 
     The configuration files are in TOML format, so installing
     `derivepassphrase` on Python 3.10 and older requires the
     [`tomli`][tomli] package.
 
-  - For `derivepassphrase vault --config`, support an `--unset` option which
-    unsets any given named setting prior to applying any other configuration
-    changes.
+  - For [`derivepassphrase vault --config`][CLI_VAULT], support an `--unset`
+    option which unsets any given named setting prior to applying any other
+    configuration changes.
 
-  - For `derivepassphrase vault --export`, support exporting the current
-    configuration as a POSIX `sh` script, using the `--export-as=sh` option.
-    The default (and previous behavior) is `--export-as=json`.
+  - For [`derivepassphrase vault --export`][CLI_VAULT], support exporting
+    the current configuration as a POSIX `sh` script, using the
+    `--export-as=sh` option.  The default (and previous behavior) is
+    `--export-as=json`.
 
   - Include basic support for localization: if the necessary translations
     are installed, then the diagnostics and help texts can be emitted in
@@ -287,9 +284,9 @@ specifically marked as such.)
 
     (As of this version, no translations have actually been prepared yet.)
 
-  - For `derivepassphrase`, explicitly support shell completion, in
-    particular filename and service name completion in the `export vault`
-    and `vault` subcommands.
+  - For [`derivepassphrase`][CLI], explicitly support shell completion, in
+    particular filename and service name completion in the [`export
+    vault`][CLI_EXPORT_VAULT] and [`vault`][CLI_VAULT] subcommands.
 
     However, because of restrictions regarding the exchange of data between
     `derivepassphrase` and the shell, `derivepassphrase` will not offer any
@@ -297,11 +294,10 @@ specifically marked as such.)
     a warning will be issued when importing or configuring such a service.
     They may still otherwise be used normally.
 
-  - Support the semi-standard `NO_COLOR` and the `FORCE_COLOR` environment
-    variables to suppress or force color output from `derivepassphrase`.
-    (`FORCE_COLOR` overrides `NO_COLOR` if both are set.)
-
-[tomli]: https://pypi.org/project/tomli/
+  - <b id="added-in-v0.4.0-color-support">Support the semi-standard
+    `NO_COLOR` and the `FORCE_COLOR` environment variables</b> to suppress
+    or force color output from [`derivepassphrase`][CLI].  (`FORCE_COLOR`
+    overrides `NO_COLOR` if both are set.)
 
 ### Changed  {#changed-in-v0.4.0}
 
@@ -376,12 +372,13 @@ specifically marked as such.)
   - Add SSH agent spawning support to the test suite.
     Use this support to test the agent functionality on all known major SSH
     agent implementations automatically.
-    ([#12])
+    ([`test-suite-isolated-ssh-agent`][WISH_TEST_SUITE_ISOLATED_SSH_AGENT])
   - Add [hypothesis][]-based tests to the test suite.
   - Update README to add explanations for virtual environments and package
     extras.
   - Update README to demonstrate configuration storing and SSH agent use.
     Include comments on Windows support for SSH agents.
+    ([`windows-ssh-agent-support`][BUG_WINDOWS_SSH_AGENT_SUPPORT])
   - Use cross-references in the documentation of function signatures.
   - Add proper support for Buffer types in the SSH agent client.
     Any Python object supporting the buffer protocol can be used as input to
@@ -393,10 +390,6 @@ specifically marked as such.)
     deserialization from the SSH agent wire format.
   - Support Python 3.9 and 3.13.
 
-[#12]: https://github.com/the-13th-letter/derivepassphrase/issues/12
-[hypothesis]: https://pypi.org/project/hypothesis/
-[scriv]: https://pypi.org/project/scriv
-
 ### Changed  {#changed-in-v0.3.0}
 
   - Change links to point to public project repositories, if possible.
@@ -405,11 +398,11 @@ specifically marked as such.)
   - Use the same filename/URL convention for API reference as the Python
     standard library does.
 
-  - Rewrite functionality for checking for valid vault(1) configurations:
-    include an actual validation function which throws errors upon
-    encountering format violations, and which allows specifying which types
-    of extensions (unknown settings, `derivepassphrase`-only settings) to
-    tolerate during validation.
+  - Rewrite functionality for checking for valid <i>vault</i>(1)
+    configurations: include an actual validation function which throws
+    errors upon encountering format violations, and which allows specifying
+    which types of extensions (unknown settings, `derivepassphrase`-only
+    settings) to tolerate during validation.
 
     This is a **breaking API change** because the function return annotation
     changed, from [`typing.TypeGuard`][] to [`typing_extensions.TypeIs`][].
@@ -421,37 +414,39 @@ specifically marked as such.)
     the SSH agent because Python does not support UNIX domain sockets on
     this system.
     In particular, this is the current situation on Windows.
+    ([`fail-gracefully-without-af-unix`][BUG_FAIL_GRACEFULLY_WITHOUT_AF_UNIX],
+    [`windows-ssh-agent-support`][BUG_WINDOWS_SSH_AGENT_SUPPORT])
 
     This adds another failure case to the `SSHAgentClient` constructor, and
     therefore constitutes a **breaking API change**.
 
-  - In `derivepassphrase vault`, accept `key` and `phrase` entries just like
-    vault(1) does: `key` always overrides `phrase` in the configuration, no
-    matter the level.
+  - In [`derivepassphrase vault`][CLI_VAULT], accept `key` and `phrase`
+    entries just like <i>vault</i>(1) does: `key` always overrides `phrase`
+    in the configuration, no matter the level.
 
     This is a command-line only change.
 
-  - In `derivepassphrase vault`, when importing settings, accept falsy values
-    everywhere `vault` does, with a warning.
+  - In [`derivepassphrase vault`][CLI_VAULT], when importing settings,
+    accept falsy values everywhere `vault` does, with a warning.
     Depending on the setting, they are equivalent to zero, the empty string,
     or "not set".
-    ([#17])
+    ([`falsy-vault-config-values`][BUG_FALSY_VAULT_CONFIG_VALUES])
 
     This is a command-line only change, and only affects importing.
     The API provides a new function to normalize falsy settings, but still
     otherwise requires settings to be of the correct type.
     Storing a malformed configuration with such falsy values will still
-    generate errors when `derivepassphrase vault` loads the settings from
-    disk.
+    generate errors when [`derivepassphrase vault`][CLI_VAULT] loads the
+    settings from disk.
 
-  - In `derivepassphrase vault`, when importing configurations,
-    correctly merge them with the existing one, same as vault(1): keep
-    all named services and their settings (and the global settings if
+  - In [`derivepassphrase vault`][CLI_VAULT], when importing configurations,
+    correctly merge them with the existing one, same as <i>vault</i>(1):
+    keep all named services and their settings (and the global settings if
     applicable) that are not mentioned in the imported configuration.
     The import procedure is thus more akin to a section-wise import of
     the configurations, instead of a "full" import, and the resulting
     configuration generally is a merge of both inputs.
-    ([#16])
+    ([`amend-vault-config`][BUG_AMEND_VAULT_CONFIG])
 
   - The following operations or configuration settings now raise
     warnings:
@@ -464,9 +459,6 @@ specifically marked as such.)
       * using an empty service name on the command-line or in an
         imported configuration
 
-[#16]: https://github.com/the-13th-letter/derivepassphrase/issues/16
-[#17]: https://github.com/the-13th-letter/derivepassphrase/issues/17
-
 ### Fixed  {#fixed-in-v0.3.0}
 
   - Fixed the textual description of the return value for
@@ -482,9 +474,7 @@ specifically marked as such.)
 
     This feature requires the `cryptography` Python module, but is available
     even if `vault` is not installed.
-    ([#1])
-
-[#1]: https://github.com/the-13th-letter/derivepassphrase/1
+    ([`export-vault-formats`][WISH_EXPORT_VAULT_FORMATS])
 
 ### Fixed  {#fixed-in-v0.2.0}
 
@@ -492,8 +482,6 @@ specifically marked as such.)
     Set up a "latest" tag and the "0.<var>x</var>" version of the
     documentation with the contents so far.
 
-[mike]: https://pypi.org/project/mike
-
 ### Changed  {#changed-in-v0.2.0}
 
   - Changed `sequin` and `ssh_agent_client` to be submodules of
@@ -501,20 +489,20 @@ specifically marked as such.)
     Further moved `derivepassphrase.Vault` and
     `derivepassphrase.AmbiguousByteRepresentation` into a new submodule
     `vault`, and renamed submodule `ssh_agent_client` to `ssh_agent`.
-    ([#3])
+    ([`single-toplevel-module`][BUG_SINGLE_TOPLEVEL_MODULE])
   - Changed internal error handling and error messages, to better work in
     the context of a command-line tool.
-    ([#4])
+    ([`better-error-messages`][BUG_BETTER_ERROR_MESSAGES])
   - Combine and consolidate `derivepassphrase.types` and
     `derivepassphrase.ssh_agent.types` into a new submodule
     `derivepassphrase._types`.
     Despite the name, the module is public.
-    ([#7])
+    ([`no-stdlib-module-names`][BUG_NO_STDLIB_MODULE_NAMES])
   - Warn the user when entering (directly, or via configuration
     editing/importing) a passphrase that is not in the configured Unicode
     normalization form.
     (But don't otherwise reject any textual master passphrases.)
-    ([#9])
+    ([`allow-all-unicode-passphrases`][BUG_ALLOW_ALL_UNICODE_PASSPHRASES])
   - Move all existing functionality into a subcommand, in anticipation of
     other passphrase derivation schemes, with different settings.
     Automatically forward calls without a subcommand to the "vault"
@@ -524,17 +512,12 @@ specifically marked as such.)
     instead of globally.
     Automatically fall back to, and migrate, the old global settings file if
     no subsystem-specific configuration was found.
-    ([#10])
-
-  - Make `derivepassphrase_export` a subcommand: `derivepassphrase export`.
-    ([#11])
+    ([`other-derivation-schemes`][WISH_OTHER_DERIVATION_SCHEMES],
+    [`scheme-specific-cli-and-config`][WISH_SCHEME_SPECIFIC_CLI_AND_CONFIG])
 
-[#3]: https://github.com/the-13th-letter/derivepassphrase/3
-[#4]: https://github.com/the-13th-letter/derivepassphrase/4
-[#7]: https://github.com/the-13th-letter/derivepassphrase/7
-[#9]: https://github.com/the-13th-letter/derivepassphrase/9
-[#10]: https://github.com/the-13th-letter/derivepassphrase/10
-[#11]: https://github.com/the-13th-letter/derivepassphrase/11
+  - Make `derivepassphrase_export` a subcommand: [`derivepassphrase
+    export`][CLI_EXPORT].
+    ([`exporter-script-as-subcommand`][WISH_EXPORTER_SCRIPT_AS_SUBCOMMAND])
 
 ### Deprecated  {#deprecated-in-v0.2.0}
 
@@ -548,22 +531,18 @@ specifically marked as such.)
 
   - Do not crash upon selecting a key on the command-line if there already
     is a key stored in the configuration.
-    ([#5])
+    ([`one-time-key-override-fails`][BUG_ONE_TIME_KEY_OVERRIDE_FAILS])
   - Create the configuration directory upon saving, if it does not yet
     exist.
-    ([#6])
+    ([`configuration-directory-must-exist`][BUG_CONFIGURATION_DIRECTORY_MUST_EXIST])
   - Isolate the tests properly and consistently from the user's
     configuration, so that user configuration problems do not cause
     unrelated test failures.
-    ([#8])
+    ([`test-filesystem-isolation`][BUG_TEST_FILESYSTEM_ISOLATION])
   - Add an alternate MkDocs configuration for building the documentation in
     offline mode.
   - Fix typing issues according to `mypy`'s strict mode.
 
-[#5]: https://github.com/the-13th-letter/derivepassphrase/5
-[#6]: https://github.com/the-13th-letter/derivepassphrase/6
-[#8]: https://github.com/the-13th-letter/derivepassphrase/8
-
 
 ## 0.1.2 (2024-07-22)  {#v0.1.2}
 
@@ -573,14 +552,12 @@ specifically marked as such.)
     distributions.
     (Previously, `sdist` contained VCS artifacts, and `wheel` was missing
     some paths.)
-  - Lint and reformat all code using [ruff](https://pypi.org/package/ruff/).
-  - Mention
-    [`mkdocstrings-python`](https://pypi.org/package/mkdocstrings-python/)
-    in the documentation's page footer.
+  - Lint and reformat all code using [ruff][].
+  - Mention [`mkdocstrings-python`][mkdocstrings-python] in the
+    documentation's page footer.
   - Remove JavaScript and external font loading from documentation website,
     so that the site works even in restricted browser settings.
-  - Set up a changelog, using
-    [towncrier](https://pypi.org/package/towncrier).
+  - Set up a changelog, using [towncrier][].
 
 
 ## 0.1.1 (2024-07-14)  {#v0.1.1}
@@ -599,3 +576,46 @@ specifically marked as such.)
 ### Added  {#added-in-v0.1.0}
 
   - Initial release.
+
+[^the-annoying-os]: Hat tip---and apologies---to
+    [Timothée Mazzucotelli (`@pawamoy`)](https://github.com/pawamoy/) for
+    the fitting terminology.
+
+[hypothesis]: https://pypi.org/project/hypothesis/
+[mike]: https://pypi.org/project/mike/
+[mkdocstrings-python]: https://pypi.org/project/mkdocstrings-python/
+[ruff]: https://pypi.org/project/ruff/
+[scriv]: https://pypi.org/project/scriv/
+[tomli]: https://pypi.org/project/tomli/
+[towncrier]: https://pypi.org/project/towncrier/
+
+[CLI]: reference/derivepassphrase.1.md
+[CLI_EXPORT]: reference/derivepassphrase-export.1.md
+[CLI_EXPORT_VAULT]: reference/derivepassphrase-export-vault.1.md
+[CLI_VAULT]: reference/derivepassphrase-vault.1.md
+[INTERCHANGABLE_PASSPHRASES]: explanation/faq-vault-interchangable-passphrases.md
+[REFERENCE]: reference/index.md
+
+[BUG_ALLOW_ALL_UNICODE_PASSPHRASES]: wishlist/allow-all-unicode-passphrases.md "Bug entry: “Allow all Unicode text strings as master passphrases”"
+[BUG_AMEND_VAULT_CONFIG]: wishlist/amend-vault-config.md "Bug entry: “derivepassphrase vault --import overwrites config instead of amending it”"
+[BUG_BETTER_ERROR_MESSAGES]: wishlist/better-error-messages.md "Bug entry: “Improve common error messages in the command-line interface”"
+[BUG_CONCURRENCY_AUDIT]: wishlist/concurrency-audit.md "Bug entry: “Audit derivepassphrase for concurrency/thread-safety issues”"
+[BUG_CONCURRENCY_TESTING_IN_TEST_SUITE]: wishlist/concurrency-testing-in-test-suite.md "Bug entry: “Test for concurrency and assert thread-safety in derivepassphrase's test suite”"
+[BUG_CONFIGURATION_DIRECTORY_MUST_EXIST]: wishlist/configuration-directory-must-exist.md "Bug entry: “derivepassphrase --config requires configuration directory to exist”"
+[BUG_FAIL_GRACEFULLY_WITHOUT_AF_UNIX]: wishlist/fail-gracefully-without-af-unix.md "Bug entry: “Fail gracefully if support for UNIX domain sockets is unavailable”"
+[BUG_FALSY_VAULT_CONFIG_VALUES]: wishlist/falsy-vault-config-values.md "Bug entry: “derivepassphrase vault differs from vault(1) behavior with falsy stored configuration values”"
+[BUG_NO_STDLIB_MODULE_NAMES]: wishlist/no-stdlib-module-names.md "Bug entry: “Rename types submodules to _types”"
+[BUG_ONE_TIME_KEY_OVERRIDE_FAILS]: wishlist/one-time-key-override-fails.md "Bug entry: “derivepassphrase -k fails when overriding the chosen key on the command-line”"
+[BUG_PRINT_SERVICE_NOTES]: wishlist/print-service-notes.md "Bug entry: “derivepassphrase vault does not print service notes”"
+[BUG_SINGLE_TOPLEVEL_MODULE]: wishlist/single-toplevel-module.md "Bug entry: “Move sequin and ssh_agent_client modules into derivepassphrase package”"
+[BUG_TEST_FILESYSTEM_ISOLATION]: wishlist/test-filesystem-isolation.md "Bug entry: “Isolate tests properly from the filesystem”"
+[BUG_WINDOWS_SSH_AGENT_SUPPORT]: wishlist/windows-ssh-agent-support.md "Bug entry: “Support PuTTY/Pageant (and maybe OpenSSH/ssh-agent) on Windows”"
+[WISH_CONVENTIONAL_CONFIGURABLE_TEXT_STYLING]: wishlist/conventional-configurable-text-styling.md "Wish entry: “derivepassphrase vault should support conventional and configurable text styling”"
+[WISH_EXPORTER_SCRIPT_AS_SUBCOMMAND]: wishlist/exporter-script-as-subcommand.md "Wish entry: “Make the exporter a subcommand of derivepassphrase”"
+[WISH_EXPORT_VAULT_FORMATS]: wishlist/export-vault-formats.md "Wish entry: “Support data export from vault v0.2, vault v0.3, and storeroom storage formats”"
+[WISH_OTHER_DERIVATION_SCHEMES]: wishlist/other-derivation-schemes.md "Wish entry: “Consider implementing passphrase schemes other than vault's”"
+[WISH_PRETTY_PRINT_JSON]: wishlist/pretty-print-json.md "Wish entry: “derivepassphrase vault should store and export the vault configuration in pretty-printed JSON”"
+[WISH_PRINT_SERVICE_NOTES_ABOVE]: wishlist/print-service-notes-above.md "Wish entry: “derivepassphrase vault should be able to print service notes above the passphrase”"
+[WISH_REPORT_BUILD_FLAGS_AND_FEATURES]: wishlist/report-build-flags-and-features.md "Wish entry: “derivepassphrase should report its build flags and supported features”"
+[WISH_SCHEME_SPECIFIC_CLI_AND_CONFIG]: wishlist/scheme-specific-cli-and-config.md "Wish entry: “Move vault-specific command-line interface into a separate CLI subcommand and matching configuration file”"
+[WISH_TEST_SUITE_ISOLATED_SSH_AGENT]: wishlist/test-suite-isolated-ssh-agent.md "Wish entry: “Support and isolate OpenSSH's ssh-agent and PuTTY's pageant in the test suite”"
