v1.0.0
1.0.0 (2026-07-29)
- feat!: encrypt by default, add migrate, and add the headless ladder as tests (2be02c8)
Bug Fixes
- hand back the refresh lease when a read is not followed by a write (43d0f26)
Features
- add a programmatic facade so a second front-end cannot drift (6cbbcf1)
- add keyring import, CLI, and fix a self-deadlock in the refresh lease (451a6c3)
- add locking, three-way merge, and the credential vault (0c73718)
- add the KeyChain shim, CJS preload, and now-sdk wrapper (fd5bb22)
- scaffold sn-credstore with file and systemd-creds backends (ba6c9bb)
BREAKING CHANGES
- the default backend is now systemd-creds rather than an
unencrypted file. Existing plaintext stores keep working via SN_CRED_STORE=file,
or convert withsn-credstore migrate --to systemd-creds. Hosts without
systemd (containers) must set SN_CRED_STORE=file explicitly — there is no silent
downgrade to plaintext.
Co-Authored-By: Claude Opus 5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_01MggifJUgccB2gu3NsPbtUV