docs: mark encrypted secret storage complete

2026-06-29 20:13:44 +08:00
parent 8cb4416a8f
commit 958bfaa102
2 changed files with 4 additions and 3 deletions
@@ -320,8 +320,9 @@ secrets.write-ui
 Текущий статус: platform contract defines the draft `secret-store`,
 `secrets.read-ui`, and `secrets.write-ui` capabilities plus dangerous
 `secrets.read` / `secrets.write` permissions in the SDK manifest contract.
-Encrypted local storage and the official UI-only Secrets plugin are still
-future work.
+Desktop core now has a local AES-GCM secret store that keeps secret IDs and
+values out of plaintext files. The official UI-only Secrets plugin and
+workspace secret references are still future work.

 ## 11. `official.templates`

@@ -188,7 +188,7 @@ notes or plain files.
 Tasks:

 - [x] define secret-store capability and permissions;
- implement encrypted local secret storage;
+- [x] implement encrypted local secret storage;
 - add UI-only official secrets plugin;
 - integrate secret references with workspaces without exposing raw values to
  unrelated plugins.