busya
5c59a2c79b
feat(security): add encryption health inventory and key recovery wizard
Backend:
- GET /api/security/encryption/health — inventory of all stored encrypted
secrets (LLM providers, DB connections, profile Git tokens) with
decrypt attempt and structured broken/healthy status
- GET /api/security/encryption/fingerprint — non-secret key fingerprint
- POST /api/security/encryption/recover — bulk replacement of
undecryptable secrets with partial_success semantics
Frontend:
- KeyRecoveryModel.svelte.ts — state machine (idle→scanning→
healthy/needs_recovery→editing→saving→complete/partial_success/error)
- KeyRecoveryWizard.svelte — tabbed dialog with LLM/DB/Git sections,
security guidance, re-encrypt command display, edit/save flow
- SystemSettings entry point — 'Check encrypted secrets' card with
fingerprint and broken count
- API methods: getEncryptionHealth, recoverEncryptedSecrets
- Types: EncryptionRecoveryTypes
- i18n: en/ru strings for recovery flow
Tests: 226 passed
2026-07-06 18:05:05 +03:00
..
2026-07-04 22:43:17 +03:00
2026-07-04 22:47:17 +03:00
2026-07-04 22:43:17 +03:00
2026-07-06 18:05:05 +03:00
2026-07-02 08:53:19 +03:00
2026-05-08 10:07:05 +03:00
2026-05-11 22:58:01 +03:00
2026-04-24 17:10:02 +03:00
2026-04-19 20:05:45 +03:00