Skip to content

Encrypted-file secret store via swift-crypto (Closes #35) #55

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cursor merged 17 commits into from
Jul 19, 2026
Merged

Encrypted-file secret store via swift-crypto (Closes #35) #55

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
6838fb4
Encrypted-file secret store via swift-crypto (Closes #35)
0xLeif Jul 19, 2026
0e35f56
Fix linux-smoke: bump Swift toolchain to 6.1
0xLeif Jul 19, 2026
b3b5d2b
linux-smoke: align toolchain to 6.3.1
0xLeif Jul 19, 2026
aa08189
linux-smoke: use Swift 6.2 (6.3.1 unavailable on setup-swift for Ubuntu)
0xLeif Jul 19, 2026
7265542
Fix linux-smoke properly: cap swift-asn1 below 1.7, keep Swift 6.0
0xLeif Jul 19, 2026
b2c926b
linux-smoke: try Swift 6.3 line for the Observation threading link
0xLeif Jul 19, 2026
b25185f
linux-smoke: link libswiftThreading explicitly on 6.0.x
0xLeif Jul 19, 2026
0526b61
linux-smoke: pin 6.0.1 (6.0.3 toolchain ships the broken libswiftObse…
0xLeif Jul 19, 2026
158638a
linux-smoke: --allow-shlib-undefined for the Observation shlib link
0xLeif Jul 19, 2026
41ef89a
linux-smoke: actually apply --allow-shlib-undefined (verified in nobl…
0xLeif Jul 19, 2026
dcc60f8
Fix smoke perms check: GNU stat -f is filesystem status, gate by uname
0xLeif Jul 19, 2026
3d80291
Gate the interactive passphrase path for Windows (fileDescriptor unav…
0xLeif Jul 19, 2026
28dc483
Gate POSIX perms test for Windows (unsetenv/posixPermissions are POSI…
0xLeif Jul 19, 2026
7c9c201
Fix: retire stale Keychain secret requirements after encrypted store
cursoragent Jul 19, 2026
58a072d
Fix: restore stacked smoke coverage after secret rebase
cursoragent Jul 19, 2026
0aebf4f
Fix: enable EncryptedFile secret checks in smoke.ps1
cursoragent Jul 19, 2026
210365b
Fix: unset APS_SECRET_PASSPHRASE before key-file smoke checks
cursoragent Jul 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion .github/workflows/linux-smoke.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,10 @@ jobs:
run: swift --version

- name: Test (debug)
run: swift test
# libswiftObservation.so has an undefined swift::threading::fatal ref on
# Linux 6.0.x toolchains; tolerate it at the shared-lib link (same as the
# executable's default). Verified in swift:6.0.3-noble containers.
run: swift test -Xlinker --allow-shlib-undefined

- name: Smoke CLI
env:
Expand Down
4 changes: 2 additions & 2 deletions .specsync/change-sequence.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"schema_version": 1,
"sequence": 23,
"id": "CHG-0023-watch-signal-handling-and-termination-semantics-issue-34",
"sequence": 24,
"id": "CHG-0024-encrypted-file-secret-store-via-swift-crypto-issue-35",
"acknowledged_collisions": []
}
144 changes: 144 additions & 0 deletions ...s-0-2-0-agent-ready-json-state-dir-watch-and-profile-filestate/verification-attempts.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -720,6 +720,150 @@
"REQ-state-store-010",
"REQ-state-store-011"
]
},
{
"timestamp": 1784429732,
"commit": "97b784fc4b6925ddc54900d70ab2f0a273ad1eb5",
"contract_digest": "73c000607b3050c54981b4c29532280dd08bf00b7a15c8ec1801e045fa5496c9",
"workspace_digest": "f8fa9433c36fea5ee5f024de58e407f682d1443b439aa2488bb3985eed86e9f4",
"passed": true,
"commands": [
{
"command": "fledge lanes run verify",
"success": true,
"exit_code": 0
}
],
"requirement_ids": [
"REQ-aps-cli-001",
"REQ-aps-cli-010",
"REQ-aps-cli-011",
"REQ-aps-cli-012",
"REQ-aps-cli-013",
"REQ-state-store-001",
"REQ-state-store-010",
"REQ-state-store-011"
]
},
{
"timestamp": 1784430523,
"commit": "c1dc563bfed6bcbbfa594fbf5a811a48294a54a3",
"contract_digest": "73c000607b3050c54981b4c29532280dd08bf00b7a15c8ec1801e045fa5496c9",
"workspace_digest": "e17d700c1eeb45a3dd219b0a15a35be24ba1d13af121a6036f18c25108111995",
"passed": true,
"commands": [
{
"command": "fledge lanes run verify",
"success": true,
"exit_code": 0
}
],
"requirement_ids": [
"REQ-aps-cli-001",
"REQ-aps-cli-010",
"REQ-aps-cli-011",
"REQ-aps-cli-012",
"REQ-aps-cli-013",
"REQ-state-store-001",
"REQ-state-store-010",
"REQ-state-store-011"
]
},
{
"timestamp": 1784431619,
"commit": "408aa1da3ab880836e3aa7eb1348dd5f3cce3ca9",
"contract_digest": "73c000607b3050c54981b4c29532280dd08bf00b7a15c8ec1801e045fa5496c9",
"workspace_digest": "022da05d019d831880b3d1ba8341cece917151c2a61a1a7a4b153e47c7f023d8",
"passed": true,
"commands": [
{
"command": "fledge lanes run verify",
"success": true,
"exit_code": 0
}
],
"requirement_ids": [
"REQ-aps-cli-001",
"REQ-aps-cli-010",
"REQ-aps-cli-011",
"REQ-aps-cli-012",
"REQ-aps-cli-013",
"REQ-state-store-001",
"REQ-state-store-010",
"REQ-state-store-011"
]
},
{
"timestamp": 1784437085,
"commit": "9e4e9a9816f38f9d3c25080ae0f9cd7cde733d3f",
"contract_digest": "73c000607b3050c54981b4c29532280dd08bf00b7a15c8ec1801e045fa5496c9",
"workspace_digest": "4d6dccf1abc426bbba43bf26de0966607c2c33caee231ababd563794a5abbde9",
"passed": true,
"commands": [
{
"command": "fledge lanes run verify",
"success": true,
"exit_code": 0
}
],
"requirement_ids": [
"REQ-aps-cli-001",
"REQ-aps-cli-010",
"REQ-aps-cli-011",
"REQ-aps-cli-012",
"REQ-aps-cli-013",
"REQ-state-store-001",
"REQ-state-store-010",
"REQ-state-store-011"
]
},
{
"timestamp": 1784439566,
"commit": "80068c8bbfcff3fc429485601c82a5e5b6894f66",
"contract_digest": "73c000607b3050c54981b4c29532280dd08bf00b7a15c8ec1801e045fa5496c9",
"workspace_digest": "f187d3481fcb19b1cb722e10459b3f6f15cc8240ca1bb0f9953201bdd00b2b7f",
"passed": true,
"commands": [
{
"command": "fledge lanes run verify",
"success": true,
"exit_code": 0
}
],
"requirement_ids": [
"REQ-aps-cli-001",
"REQ-aps-cli-010",
"REQ-aps-cli-011",
"REQ-aps-cli-012",
"REQ-aps-cli-013",
"REQ-state-store-001",
"REQ-state-store-010",
"REQ-state-store-011"
]
},
{
"timestamp": 1784441229,
"commit": "1186171781863b10457af7306a1ef4abe9fb59d5",
"contract_digest": "73c000607b3050c54981b4c29532280dd08bf00b7a15c8ec1801e045fa5496c9",
"workspace_digest": "6687504506a657b5aa02ea267f5760956e4dd1f54169fa120f08fe3912336ac7",
"passed": true,
"commands": [
{
"command": "fledge lanes run verify",
"success": true,
"exit_code": 0
}
],
"requirement_ids": [
"REQ-aps-cli-001",
"REQ-aps-cli-010",
"REQ-aps-cli-011",
"REQ-aps-cli-012",
"REQ-aps-cli-013",
"REQ-state-store-001",
"REQ-state-store-010",
"REQ-state-store-011"
]
}
]
}
15 changes: 15 additions & 0 deletions .specsync/changes/CHG-0007-hermetic-userdefaults-in-tests/verification-attempts.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -180,6 +180,21 @@
}
],
"requirement_ids": []
},
{
"timestamp": 1784441254,
"commit": "1186171781863b10457af7306a1ef4abe9fb59d5",
"contract_digest": "0c72a7f1bfaa780b21b7b2ac7904ab5352e8186a8293caf6f91354fddff40610",
"workspace_digest": "6687504506a657b5aa02ea267f5760956e4dd1f54169fa120f08fe3912336ac7",
"passed": true,
"commands": [
{
"command": "fledge lanes run verify",
"success": true,
"exit_code": 0
}
],
"requirement_ids": []
}
]
}
Loading
Loading