steve cb0425f18d feat(store): envelope DEK with admin/agent wrap slots ...

Open() now opens LOCKED; InitKeys generates a DEK sealed under both KEKs;
Unlock loads it from the role's slot (admin slot has no agent fallback).
s.key becomes the DEK, so account/mail crypto is unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-22 22:52:21 +01:00

..

account_test.go

feat(send): Phase 2 send path — SMTP, MIME, reply threading, outbound policy

2026-06-22 17:39:07 +01:00

account.go

feat(admin): Phase 4 — doctor, admin completeness, and bubbletea TUI

2026-06-22 20:09:43 +01:00

audit_test.go

feat(store): audit log with retention-based purge

2026-06-21 23:45:57 +01:00

audit.go

feat(admin): Phase 4 — doctor, admin completeness, and bubbletea TUI

2026-06-22 20:09:43 +01:00

keys_test.go

feat(store): envelope DEK with admin/agent wrap slots

2026-06-22 22:52:21 +01:00

keys.go

feat(store): envelope DEK with admin/agent wrap slots

2026-06-22 22:52:21 +01:00

schema.go

feat(store): open encrypted SQLite, schema v1, settings

2026-06-21 23:34:31 +01:00

seenset_test.go

feat(store): seen-set read state with floor baseline and compaction

2026-06-21 23:43:35 +01:00

seenset.go

feat(store): seen-set read state with floor baseline and compaction

2026-06-21 23:43:35 +01:00

settings.go

feat(store): open encrypted SQLite, schema v1, settings

2026-06-21 23:34:31 +01:00

store_test.go

feat(store): envelope DEK with admin/agent wrap slots

2026-06-22 22:52:21 +01:00

store.go

feat(store): envelope DEK with admin/agent wrap slots

2026-06-22 22:52:21 +01:00

update_test.go

feat(admin): Phase 4 — doctor, admin completeness, and bubbletea TUI

2026-06-22 20:09:43 +01:00

whitelist_test.go

feat(store): per-account inbound/outbound whitelist CRUD

2026-06-21 23:41:10 +01:00

whitelist.go

feat(store): per-account inbound/outbound whitelist CRUD

2026-06-21 23:41:10 +01:00