Tomas DvorakandDevin 585bb04ab2 feat: encrypted secrets vault across CLI, desktop, dashboard, and backend ...

Local vault (apps/cli): clean-room PRMVLT01 format — Argon2id →
XChaCha20-Poly1305, AEAD-bound header, atomic writes. vault:* / secrets:*
/ inject (primora:// refs) / agent credential broker (dummy tokens in the
child, real secret on the wire) / TTL sessions / stack:* operator group.

Project vault (backend): core.project_secrets, AES-256-GCM via the
platform encryptor. Metadata-only list, audit-logged reveal, and
secret://NAME refs resolved at job delivery — refs stored, values never.

Surfaces: dashboard Vault page (+ local-vault card under the Tauri
shell), desktop vault window via IPC to the primora binary,
secrets:* --remote CLI mode, metadata/write-only MCP tools so agents
consume secrets via secret:// refs without holding plaintext.

Authored By: TDvorak <[email protected]>

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-09-24 18:46:37 +02:00

..

api_keys.sql.go

feat: phase 6 production hardening + DB-to-DB transfer

2026-09-17 09:15:42 +02:00

audit.sql.go

initiall commit

2026-04-10 12:03:31 +02:00

bootstrap.sql.go

feat: phase 6 production hardening + DB-to-DB transfer

2026-09-17 09:15:42 +02:00

buckets.sql.go

initiall commit

2026-04-10 12:03:31 +02:00

collections.sql.go

initiall commit

2026-04-10 12:03:31 +02:00

db_connections.sql.go

feat: phase 2 databases via DBX (v0.3.0)

2026-09-16 14:54:33 +02:00

db.go

initiall commit

2026-04-10 12:03:31 +02:00

integrations.sql.go

feat: phase 4 integrations — connectors, rybbit analytics, webhooks

2026-09-16 18:47:31 +02:00

jobs.sql.go

feat: phase 7 automation & realtime — scheduled jobs, domain events, SSE

2026-09-18 15:15:01 +02:00

models.go

feat: encrypted secrets vault across CLI, desktop, dashboard, and backend

2026-09-24 18:46:37 +02:00

objects.sql.go

initiall commit

2026-04-10 12:03:31 +02:00

organizations.sql.go

initiall commit

2026-04-10 12:03:31 +02:00

project_secrets.sql.go

feat: encrypted secrets vault across CLI, desktop, dashboard, and backend

2026-09-24 18:46:37 +02:00

projects.sql.go

feat: phase 6 production hardening + DB-to-DB transfer

2026-09-17 09:15:42 +02:00

querier.go

feat: encrypted secrets vault across CLI, desktop, dashboard, and backend

2026-09-24 18:46:37 +02:00

retention.sql.go

feat: phase 6 production hardening + DB-to-DB transfer

2026-09-17 09:15:42 +02:00

settings.sql.go

feat: instance administration, bootstrap admin, and managed-tier OAuth gate

2026-09-21 17:46:47 +02:00

telemetry.sql.go

feat: phase 6 production hardening + DB-to-DB transfer

2026-09-17 09:15:42 +02:00

users.sql.go

initiall commit

2026-04-10 12:03:31 +02:00

webhooks.sql.go

feat: phase 4 integrations — connectors, rybbit analytics, webhooks

2026-09-16 18:47:31 +02:00