Skip to content

Replace platform keyrings with daz-secrets - #4925

Open
darrenoakey wants to merge 2 commits into
block:mainfrom
darrenoakey:codex/daz-secrets-no-keychain
Open

Replace platform keyrings with daz-secrets#4925
darrenoakey wants to merge 2 commits into
block:mainfrom
darrenoakey:codex/daz-secrets-no-keychain

Conversation

@darrenoakey

Copy link
Copy Markdown

Summary

  • route desktop identity, managed-agent credentials, CLI/admin/MCP/ACP, Git credential, and Git signing secrets through the public daz-secrets provider protocol
  • remove direct OS keyring/Keychain dependencies, plaintext secret fallbacks, and secret environment propagation
  • pin the audited Mesh LLM fork whose credential storage also uses daz-secrets
  • update reset, migration, documentation, and CI contracts

Verification

  • just ci
  • scripts/test-reset-desktop-standalone-state.sh
  • cargo tree --target all -i keyring -e all (no keyring package)
  • desktop cargo tree --features mesh-llm --target all -i keyring -e all (no keyring package)

@darrenoakey
darrenoakey requested a review from a team as a code owner August 5, 2026 17:48
Comment thread .github/workflows/ci.yml Fixed
@darrenoakey
darrenoakey force-pushed the codex/daz-secrets-no-keychain branch 2 times, most recently from c325196 to b6c03f0 Compare August 5, 2026 23:22
Darren Oakey added 2 commits August 6, 2026 09:23
Signed-off-by: Darren Oakey <darren@insidemind.com.au>
Signed-off-by: Darren Oakey <darren@insidemind.com.au>
@darrenoakey
darrenoakey force-pushed the codex/daz-secrets-no-keychain branch from b6c03f0 to 5186acc Compare August 5, 2026 23:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants