Skip to content

v0.1.2: the credential store stops lying

Choose a tag to compare

View all tags
@Fanfulla Fanfulla released this 06 Aug 12:57
· 80 commits to main since this release
v0.1.2
a801b52

Two fixes for the same family of failure, both found on a real Windows machine on 2026-08-05/06.

Fixed

  • The credential split-brain now tells the truth (ADR-43). When a secret moves from the 600 file into the OS keychain (lazy promotion, or a keychain-mode overwrite of a stale file copy), the file copy is replaced by a non-secret marker instead of being deleted. A file-only install that misses the credential now says it lives in the OS keychain this install cannot read, names the move date, and gives the real fix (npm i @napi-rs/keyring, or a re-login) instead of claiming there are no credentials. Deleting a credential removes the marker too, and a pure-keychain write still never creates the file.
  • A keychain that refuses a value no longer breaks the read that already has it. Lazy promotion swallows the backend error, serves the file value, and leaves the file copy in place for the next attempt.

Full record: CHANGELOG.md, docs/DECISIONS.md ADR-43.

Assets 2
Loading