security(desktop): encrypt project data at rest (text stores) - #356

Open

qnbs wants to merge 12 commits into

fix/desktop-api-key-encryptionfrom

fix/desktop-project-data-encryption

Commits on Aug 13, 2026

security(desktop): encrypt project data at rest (text stores)

qnbs
and
claude
committed
8717e94
security(desktop): migrate fs-backed protected data before disable/rotate

qnbs
and
claude
committed
8106b7a
fix(desktop): migrate existing plaintext on first-time setup, detect interrupted migrations

qnbs
and
claude
committed
9dd151c
fix(desktop): close remaining PR #356 review findings — locked-session propagation, migration safety, and nuclear-reset fs cleanup

qnbs
and
claude
committed
aea6d69
fix(desktop): close remaining PR #356 external-review findings — write-ordering race, set-mode rollback, docs accuracy

qnbs
and
claude
committed
c93a92f
fix(desktop): close fresh review wave on PR #356 — marker-clear timing, project-enumeration bypass, malformed-envelope classification

qnbs
and
claude
committed
bbd3820
fix(settings): refresh stored keys after encryption unlock
qnbs
committed
b2245b6
fix(storage): fail closed for filesystem read errors
qnbs
committed
54ec14d
fix(storage): block boot on interrupted fs migrations
qnbs
committed
21914e3
fix(storage): migrate legacy filesystem snapshots
qnbs
committed
4bc0a6d
fix(storage): retain write admission through fs commit
qnbs
committed
3cf8c5e
fix(storage): coordinate desktop key transitions
qnbs
committed
1b1c7fd