feat: add durable encryption migration journal - #337

Merged

qnbs merged 94 commits into

mainfrom

feat/encryption-recovery-journal

Aug 12, 2026

Commits on Aug 11, 2026

fix: fail closed encrypted storage lifecycle
qnbs
committed
7057cf8
fix: harden desktop AI integrations
qnbs
committed
3f70e0e
feat: add durable encryption migration journal
qnbs
committed
814ff04
docs: clarify encryption journal rollout
qnbs
committed
349b962
fix: expose local provider diagnostics
qnbs
committed
79b482c
fix: resolve audited dependency vulnerabilities
qnbs
committed
8145eec
fix: resolve audited dependency vulnerabilities
qnbs
committed
366fcfe
Merge branch 'fix/encryption-lifecycle-safety' into fix/desktop-reliability-hardening
qnbs
committed
f978606
Merge branch 'fix/desktop-reliability-hardening' into feat/encryption-recovery-journal
qnbs
committed
c0707ed
fix: make encryption journal updates atomic
qnbs
committed
a130b00
fix: enforce pnpm v11 build-script policy
qnbs
committed
82e2e8d
docs: reconcile PR 310 migration work
qnbs
committed
05d590c
feat(storage): add secure record envelope primitives
qnbs
committed
0ebbca2
feat(storage): checkpoint resumable migration batches
qnbs
committed
9afbdec
chore: harden dependency execution policy
qnbs
committed
7498444
feat(storage): add resumable secondary store adapters
qnbs
committed
58a3a82
fix(storage): fail closed during migration reads
qnbs
committed
cb87963
fix(storage): harden migration recovery protocol
qnbs
committed
2017957
fix(deps): reconcile release-age lockfile
qnbs
committed
c4b64f8
fix(storage): harden migration recovery protocol
qnbs
committed
997b2f6
fix(tauri): bound Python probes and LoRA process lifecycle
qnbs
committed
88016dd
chore(deps): align pnpm v11 security policy
qnbs
committed
fa3cd98
chore: merge encryption lifecycle foundation
qnbs
committed
fd7ed7c
chore: merge desktop reliability foundation
qnbs
committed
dda48b3
docs: add desktop performance evidence ledger
qnbs
committed
fefd9ef
docs: capture current agent handoff state
qnbs
committed
8b0afe5
docs: correct README i18n key count (2869 → 2876)
qnbs
committed
a623213
fix(storage): close TOCTOU/fail-closed gaps in the IDB encryption guard

qnbs
and
claude
committed
264fb7d
fix(storage,i18n): correct encryption-scope claims and salt-loss fail-closed gap

qnbs
and
claude
committed
d318abc
fix: backfill writingSurfaceStyle in all Settings producers; correct advisory metadata; document hooks:install

qnbs
and
claude
committed
ebdcac1
fix(storage): correct transaction-ordering regression and cross-tab sentinel-cache staleness

qnbs
and
claude
committed
d0ca4e6
fix(i18n): synchronize stale feature-flag counts and add missing Basque translations

qnbs
and
claude
committed
759a9ec
fix(settings): distinguish setup-failed from wrong-passphrase errors; add missing QNBS-v3 comment

qnbs
and
claude
committed
5e80aaa
Merge remote-tracking branch 'origin/fix/encryption-lifecycle-safety' into fix/desktop-reliability-hardening
qnbs
committed
09d8c59
Merge branch 'fix/desktop-reliability-hardening' into feat/encryption-recovery-journal

qnbs
and
claude
committed
1a081cf
fix(desktop): fix LoRA env-report deserialization, panic risk, Python identity check, and stuck cancellation

qnbs
and
claude
committed
e42fd3c
Merge remote-tracking branch 'origin/fix/desktop-reliability-hardening' into feat/encryption-recovery-journal
qnbs
committed
da3b4d7
fix: correct Tauri arg casing and surface native diagnostics in LoRA onboarding

qnbs
and
claude
committed
501a403
fix: correct AiCreativity casing typo blocking typecheck

qnbs
and
claude
committed
e204463
fix: classify a killed training process as aborted, not failed

qnbs
and
claude
committed
fd38847
fix: sync Local AI panel when a preload finishes outside handleDownload

qnbs
and
claude
committed
8a6f895
fix: scope the global download modal to explicit preloads only

qnbs
and
claude
committed
a01e298
fix: guard connection-context races and the WebGPU spinner in AiProviderCard

qnbs
and
claude
committed
20c9954
fix: correct LM Studio/vLLM/custom local-backend streaming and routing

qnbs
and
claude
committed
756e3c0
test: cover vLLM preset and invalid OpenAI-compatible models responses

qnbs
and
claude
committed
2438f99
Merge branch 'fix/desktop-reliability-hardening' into feat/encryption-recovery-journal
qnbs
committed
7cdd128
fix: resolve tsgo narrowing issue in AiProviderCard's stale-context test

qnbs
and
claude
committed
3253c41
fix: enforce legal phase transitions and close the checkpoint cursor-stall gap

qnbs
and
claude
committed
56e2509
fix: gate protected-store writes against an active migration

qnbs
and
claude
committed
a8dd917
fix(storage): skip corrupt scene revisions instead of hiding history; narrow write guard to migration-only

qnbs
and
claude
committed
46198b2
fix(storage): fail migration to recovery-required on a verification shortfall

qnbs
and
claude
committed
411943a
fix(ai): degrade cache reads to a miss on lock/migration, re-encrypt legacy entries on read

qnbs
and
claude
committed
beadfa2
fix(ollama): report invalidResponse instead of a false-positive connection success

qnbs
and
claude
committed
3f31c1e
docs(test): clarify encryptionMigrationJournal.test.ts's ownership-CAS comment

qnbs
and
claude
committed
68050d8
fix(settings): stop rendering the connection test result twice in AiProviderCard

qnbs
and
claude
committed
dc0b526
docs: refresh stack SHAs in the performance ledger; reconcile PR310-R009 to a valid disposition

qnbs
and
claude
committed
ed46bef
fix(storage): route locked encrypted startup and Lock Session to the unlock modal, not a dead end

qnbs
and
claude
committed
667f6f3
fix(storage): route locked encrypted startup and Lock Session to the unlock modal, not a dead end

qnbs
and
claude
committed
99c2839
fix(settings): restore sepia as the first-run appearance default

qnbs
and
claude
committed
0353364
Merge branch 'fix/encryption-lifecycle-safety' into fix/desktop-reliability-hardening
qnbs
committed
ad4364a
Merge branch 'fix/desktop-reliability-hardening' into feat/encryption-recovery-journal
qnbs
committed
dd92628
docs: refresh stack SHAs after the appearancePreset/unlock-routing fix cascade

qnbs
and
claude
committed
74ce8fd
docs: refresh session handoff, archive the prior capture

qnbs
and
claude
committed
58d95d1
fix(lora,settings): stale-run training race, stuck onboarding on cancel, stale model list on context switch

qnbs
and
claude
committed
be11482
fix(settings,ai): decouple URL edits from protocol preset; guard preload progress against superseded attempts

qnbs
and
claude
committed
d536649
fix(desktop): revalidate the cached Python interpreter before trusting it

qnbs
and
claude
committed
ebafce7
fix(settings): auto-validate a newly saved Gemini key instead of deferring to the next generation call

qnbs
and
claude
committed
c3f00cf
Merge branch 'fix/desktop-reliability-hardening' into feat/encryption-recovery-journal
qnbs
committed
0b1cc2e
docs: refresh session handoff after the #336 fresh-review-wave fix cascade

qnbs
and
claude
committed
bc078b8
fix(deps): exclude the two unpatched uuid releases from the override range

qnbs
and
claude
committed
edc3ef1
Merge branch 'fix/encryption-lifecycle-safety' into fix/desktop-reliability-hardening
qnbs
committed
e99f354
Merge branch 'fix/desktop-reliability-hardening' into feat/encryption-recovery-journal
qnbs
committed
5bd4c77
fix(lora): clear cancellationRequested on a failed native abort; collapse wrapped QNBS-v3 comments

qnbs
and
claude
committed
451f681
fix(i18n): translate LoRA onboarding strings and fix broken shell commands in 9 locales

qnbs
and
claude
committed
b01564e

Commits on Aug 12, 2026