Repository navigation

feat(security): secrets and credentials on the storage backend - #7183

Merged

senamakel merged 27 commits into

tinyhumansai:mainfrom

senamakel:storage-secrets

Oct 9, 2026

Commits on Oct 9, 2026
- feat(keyring): add storage master key resolution
  
  senamakel
  and
  medullabot
  committed
  cc258d0
- chore(core): enable secrets feature for tinystoragedrivers
  
  senamakel
  and
  medullabot
  committed
  cd699f3
- feat(keyring): route secrets through the storage backend when configured
  
  senamakel
  and
  medullabot
  committed
  90a624e
- feat(deps): add tinystoragedrivers-secrets crate
  
  senamakel
  and
  medullabot
  committed
  2a3f39f
- fix(keyring): include source error in invalid utf8 variant
  
  senamakel
  and
  medullabot
  committed
  b9b1866
- feat(security): persist credentials to the storage backend
  
  senamakel
  and
  medullabot
  committed
  bef7dca
- refactor(security): delegate keyring crypto to tinystoragedrivers
  
  senamakel
  and
  medullabot
  committed
  f33c38a
- chore(security): remove unused chacha20poly1305 imports
  
  senamakel
  and
  medullabot
  committed
  95cd6bd
- test(storage): add secrets storage tests
  
  senamakel
  and
  medullabot
  committed
  b56dadb
- test(storage): remove redundant backend absence test
  
  senamakel
  and
  medullabot
  committed
  bc547f2
- test(cli): register storage_secrets_e2e test binary
  
  senamakel
  and
  medullabot
  committed
  57c700a
- style: apply rustfmt formatting to security and storage modules
  
  senamakel
  and
  medullabot
  committed
  da2b516
- chore(deps): add tinystoragedrivers-secrets to lockfile
  
  senamakel
  and
  medullabot
  committed
  5d7b0af
- docs(storage): document storage-backed secrets and credentials
  
  senamakel
  and
  medullabot
  committed
  0fed911
- fix(security): retry master key load and migrate legacy credential files
  
  senamakel
  and
  medullabot
  committed
  3a5a523
- test(storage): cover legacy credential adoption by the secrets backend
  
  senamakel
  and
  medullabot
  committed
  397ccd6
- test(storage): assert secret files are unchanged after install
  
  senamakel
  and
  medullabot
  committed
  ebc5bb1
- refactor(security): extract keyring file operations into ops module
  
  senamakel
  and
  medullabot
  committed
  f5344c8
- fix(security): tolerate failed credential migration to storage
  
  senamakel
  and
  medullabot
  committed
  9d8e496
- test(storage): cover keyring adoption and deletion of legacy secrets
  
  senamakel
  and
  medullabot
  committed
  ef59bd4
- test(storage): assert secrets stay out of the process keychain
  
  senamakel
  and
  medullabot
  committed
  5e1212a
- refactor(security): simplify master key cache lookup
  
  senamakel
  and
  medullabot
  committed
  bcbc3ee
- chore(ci): bump dep-sim calibration to 314 names
  
  senamakel
  and
  medullabot
  committed
  7382cd7
- chore(ci): raise the flows kernel floor for tinystoragedrivers-secrets
  
  senamakel
  and
  medullabot
  committed
  621445c
- Merge upstream main into storage-secrets
  
  senamakel
  and
  medullabot
  committed
  c8002d3
- fix(rpc): use crate-relative path for background completion store release
  
  senamakel
  and
  medullabot
  committed
  e3d78e1
- style(storage): order module declarations after the merge
  
  senamakel
  and
  medullabot
  committed
  cff1d30

Navigation Menu

Repository navigation

feat(security): secrets and credentials on the storage backend - #7183

feat(security): secrets and credentials on the storage backend#7183
senamakel merged 27 commits into
tinyhumansai:mainfrom
senamakel:storage-secrets

Commits on Oct 9, 2026

feat(keyring): add storage master key resolution

chore(core): enable secrets feature for tinystoragedrivers

feat(keyring): route secrets through the storage backend when configured

feat(deps): add tinystoragedrivers-secrets crate

fix(keyring): include source error in invalid utf8 variant

feat(security): persist credentials to the storage backend

refactor(security): delegate keyring crypto to tinystoragedrivers

chore(security): remove unused chacha20poly1305 imports

test(storage): add secrets storage tests

test(storage): remove redundant backend absence test

test(cli): register storage_secrets_e2e test binary

style: apply rustfmt formatting to security and storage modules

chore(deps): add tinystoragedrivers-secrets to lockfile

docs(storage): document storage-backed secrets and credentials

fix(security): retry master key load and migrate legacy credential files

test(storage): cover legacy credential adoption by the secrets backend

test(storage): assert secret files are unchanged after install

refactor(security): extract keyring file operations into ops module

fix(security): tolerate failed credential migration to storage

test(storage): cover keyring adoption and deletion of legacy secrets

test(storage): assert secrets stay out of the process keychain

refactor(security): simplify master key cache lookup

chore(ci): bump dep-sim calibration to 314 names

chore(ci): raise the flows kernel floor for tinystoragedrivers-secrets

Merge upstream main into storage-secrets

fix(rpc): use crate-relative path for background completion store release

style(storage): order module declarations after the merge