From 958bfaa102cf618ffceab3d8901b76b1d51c86bb Mon Sep 17 00:00:00 2001 From: mirivlad Date: Mon, 29 Jun 2026 20:13:44 +0800 Subject: [PATCH] docs: mark encrypted secret storage complete --- 05_Official_Plugins.md | 5 +++-- 07_Full_Implementation_Roadmap.md | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/05_Official_Plugins.md b/05_Official_Plugins.md index 2611c85..cc0a867 100644 --- a/05_Official_Plugins.md +++ b/05_Official_Plugins.md @@ -320,8 +320,9 @@ secrets.write-ui Текущий статус: platform contract defines the draft `secret-store`, `secrets.read-ui`, and `secrets.write-ui` capabilities plus dangerous `secrets.read` / `secrets.write` permissions in the SDK manifest contract. -Encrypted local storage and the official UI-only Secrets plugin are still -future work. +Desktop core now has a local AES-GCM secret store that keeps secret IDs and +values out of plaintext files. The official UI-only Secrets plugin and +workspace secret references are still future work. ## 11. `official.templates` diff --git a/07_Full_Implementation_Roadmap.md b/07_Full_Implementation_Roadmap.md index 019369a..f94c2b7 100644 --- a/07_Full_Implementation_Roadmap.md +++ b/07_Full_Implementation_Roadmap.md @@ -188,7 +188,7 @@ notes or plain files. Tasks: - [x] define secret-store capability and permissions; -- implement encrypted local secret storage; +- [x] implement encrypted local secret storage; - add UI-only official secrets plugin; - integrate secret references with workspaces without exposing raw values to unrelated plugins.