Repository navigation

feat(cli): reverse migration (stash decrypt) for moving columns back to plaintext - #1193

Merged

tobyhede merged 18 commits into

mainfrom

cj/cip-4165-stash-cli-reverse-migration-decrypt-backfill-for-moving

Oct 20, 2026

Merged

feat(cli): reverse migration (stash decrypt) for moving columns back to plaintext#1193
tobyhede merged 18 commits into
mainfrom
cj/cip-4165-stash-cli-reverse-migration-decrypt-backfill-for-moving

Commits on Oct 13, 2026
- feat(migrate): shared chunked engine and reverse (decrypt) backfill
  
  calvinbrewer
  and
  claude
  committed
  4e067bd
- refactor(cli): share migration-file writing, table output and PK detection
  
  calvinbrewer
  and
  claude
  committed
  dabc84a
- feat(cli): add stash decrypt plan/backfill/drop/status for reverse migration
  
  calvinbrewer
  and
  claude
  committed
  531d22a
- docs(cli): document stash decrypt and extend the encrypt e2e to a round trip
  
  calvinbrewer
  and
  claude
  committed
  bca02b6
Commits on Oct 14, 2026
- fix(migrate): keep decrypted plaintext out of write errors and resume after a failed run
  
  calvinbrewer
  and
  claude
  committed
  1001ff7
- fix(cli): refuse stale plaintext twins and keep decrypt dual-writes until the drop
  
  calvinbrewer
  and
  claude
  committed
  7bfc234
- fix(cli): derive the decrypt status twin name with the rules plan uses
  
  calvinbrewer
  and
  claude
  committed
  c332f23
- docs(skills): keep dual-writing until the decrypt drop applies, and document stale twins
  
  calvinbrewer
  and
  claude
  committed
  23a157e
- fix(migrate): keep a decrypt pass in the mode it started
  
  calvinbrewer
  and
  claude
  committed
  106ea90
Commits on Oct 15, 2026
Commits on Oct 16, 2026
- fix(migrate): guard decrypt writes against concurrent dual-writes
  tobyhede
  committed
  597089b
- fix(cli): close a forward migration whose source was removed outside stash
  tobyhede
  committed
  3ff6002
Commits on Oct 20, 2026

Navigation Menu

Repository navigation

feat(cli): reverse migration (stash decrypt) for moving columns back to plaintext - #1193

feat(cli): reverse migration (stash decrypt) for moving columns back to plaintext#1193
tobyhede merged 18 commits into
mainfrom
cj/cip-4165-stash-cli-reverse-migration-decrypt-backfill-for-moving

Commits on Oct 13, 2026

feat(migrate): shared chunked engine and reverse (decrypt) backfill

refactor(cli): share migration-file writing, table output and PK detection

feat(cli): add stash decrypt plan/backfill/drop/status for reverse migration

docs(cli): document stash decrypt and extend the encrypt e2e to a round trip

Commits on Oct 14, 2026

fix(migrate): keep decrypted plaintext out of write errors and resume after a failed run

fix(cli): refuse stale plaintext twins and keep decrypt dual-writes until the drop

fix(cli): derive the decrypt status twin name with the rules plan uses

docs(skills): keep dual-writing until the decrypt drop applies, and document stale twins

fix(migrate): keep a decrypt pass in the mode it started

Commits on Oct 15, 2026

fix(migrate): finish a started forced decrypt pass on every later run

fix(migrate): owe a forced pass from the --force acknowledgement of a stale twin

test(migrate): pin that a completed forced pass closes the obligation

fix(cli): refuse to reverse a forward encryption that was never dropped

Commits on Oct 16, 2026

fix(migrate): guard decrypt writes against concurrent dual-writes

fix(cli): close a forward migration whose source was removed outside stash

Commits on Oct 20, 2026

fix(migrate,cli): clear skipped rows in a forced decrypt pass

docs(cli,migrate): warn that a forced decrypt pass clears undecryptable rows

fix(cli): stop telling users to hand-edit .cipherstash/migrations.json