feat(encryption): choose where this device's key is kept - #13

Merged

paviro merged 19 commits into

mainfrom

feat/key-source

Aug 4, 2026

Commits on Aug 3, 2026

feat(encryption): keep this device's key outside the identity file
paviro
committed
b79e759
docs(encryption): document where the key lives and how to back it up
paviro
committed
02c9105
feat(encryption): keep this device's key in the OS keychain
paviro
committed
f31b8ba
fix(tui): keep the fetched key across a failed unlock attempt
paviro
committed
095df70
fix(encryption): tell a locked keychain from an unreachable one
paviro
committed
ea60cb1
fix(encryption): close two ways a key move could strand key material
paviro
committed
47b909a
fix(encryption): name the real problem in an unreadable identity file
paviro
committed
20d7f41
test(storage): cover disabling encryption with an external key source
paviro
committed
8d5f2dd
feat(cli): group the encryption commands into device and key
paviro
committed
1c71067
test(ci): exercise a real keychain on Linux
paviro
committed
e4bf2ec
docs(encryption): correct what the key-source docs promised
paviro
committed
c652538

Commits on Aug 4, 2026