feat(desktop): store nsec private keys in the OS keyring - #1172

Merged

wpfleger96 merged 8 commits into

mainfrom

duncan/desktop-keyring-migration

Jun 24, 2026

Commits on Jun 24, 2026

feat(desktop): store nsec private keys in OS keyring

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
d1e2df1
fix(desktop): purge lingering plaintext nsec in keyring failure paths

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
e4dbce2
refactor(desktop): move types.rs test module to sibling tests.rs

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
819d137
fix(desktop): recover from a corrupt keyring nsec without rotating identity

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
406312d
fix(desktop): fail closed on keyring outage instead of rotating identity

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
e6f865b
fix(desktop): close two keyring-outage fail-closed gaps

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
d422482
fix(desktop): write managed-agents.json 0o600 before secret bytes hit disk

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
129ca83
fix(desktop): write managed-agents.json 0o600 on the migration reconcile path

npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
and
wpfleger96
committed
fb539bf