feat: encrypted replication for private subtrees (B1/B2/B3) for #18#36

Open

beardthelion wants to merge 26 commits into

Gitlawb:mainfrom

beardthelion:feat/encrypted-replication

Commits on Jun 18, 2026

feat(core): ed25519 to x25519 key conversion for envelope crypto
beardthelion
committed
feat(core): seal/open per-blob encryption envelopes
beardthelion
committed
feat(node): resolve per-blob encryption recipients (least-privilege)
beardthelion
committed
feat(node): encrypted_blobs table and recipient-scoped queries
beardthelion
committed
feat(node): encrypt-then-pin withheld blobs at push (IPFS)
beardthelion
committed
feat(node): authenticated discovery and fetch for encrypted blobs
beardthelion
committed
feat(gl): transparent recovery of authorized encrypted blobs on clone
beardthelion
committed
style: cargo fmt
beardthelion
committed
fix(node): re-seal encrypted blob when recipient set changes
beardthelion
committed
feat(node): unscoped encrypted-blob listing for replication
beardthelion
committed
feat(node): encrypted-blobs/replicate endpoint for peer mirrors
beardthelion
committed
feat(node): route encrypted-blobs/replicate under git_read_routes
beardthelion
committed
feat(node): peer mirrors replicate encrypted withheld blobs (Option B2)
beardthelion
committed
feat(node): anchor_encrypted_manifest for Option B3 Arweave manifests
beardthelion
committed
feat(node): encrypt_and_pin returns the per-push sealed delta
beardthelion
committed
feat(node): anchor encrypted-blob manifest on push (Option B3)
beardthelion
committed
feat(gl): Arweave/IPFS gateway recovery for encrypted blobs (Option B3)
beardthelion
committed
feat(gl): transparent Arweave fallback recovery on clone (Option B3)
beardthelion
committed
style: cargo fmt
beardthelion
committed
fix(gl): bound Arweave recovery gateway requests with a 30s timeout
beardthelion
committed
test(gl): read-path recovery tests for Arweave fallback; quiet promisor present-check
beardthelion
committed
fix: surface corrupt recipients JSON and silent recovery I/O failures
beardthelion
committed
feat(core): blind recipient identities in withheld-blob envelopes

beardthelion
and
CommandCodeBot
committed
fix(core): reject malformed envelope nonces instead of panicking
beardthelion
committed
feat(node): blind recipient identities on the B2 replication surface
beardthelion
committed
feat(node): stop anchoring recipient identities to Arweave
beardthelion
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: encrypted replication for private subtrees (B1/B2/B3) for #18#36

feat: encrypted replication for private subtrees (B1/B2/B3) for #18#36
beardthelion wants to merge 26 commits into
Gitlawb:mainfrom
beardthelion:feat/encrypted-replication

Commits on Jun 18, 2026

feat(core): ed25519 to x25519 key conversion for envelope crypto

feat(core): seal/open per-blob encryption envelopes

feat(node): resolve per-blob encryption recipients (least-privilege)

feat(node): encrypted_blobs table and recipient-scoped queries

feat(node): encrypt-then-pin withheld blobs at push (IPFS)

feat(node): authenticated discovery and fetch for encrypted blobs

feat(gl): transparent recovery of authorized encrypted blobs on clone

style: cargo fmt

fix(node): re-seal encrypted blob when recipient set changes

feat(node): unscoped encrypted-blob listing for replication

feat(node): encrypted-blobs/replicate endpoint for peer mirrors

feat(node): route encrypted-blobs/replicate under git_read_routes

feat(node): peer mirrors replicate encrypted withheld blobs (Option B2)

feat(node): anchor_encrypted_manifest for Option B3 Arweave manifests

feat(node): encrypt_and_pin returns the per-push sealed delta

feat(node): anchor encrypted-blob manifest on push (Option B3)

feat(gl): Arweave/IPFS gateway recovery for encrypted blobs (Option B3)

feat(gl): transparent Arweave fallback recovery on clone (Option B3)

style: cargo fmt

fix(gl): bound Arweave recovery gateway requests with a 30s timeout

test(gl): read-path recovery tests for Arweave fallback; quiet promisor present-check

fix: surface corrupt recipients JSON and silent recovery I/O failures

feat(core): blind recipient identities in withheld-blob envelopes

fix(core): reject malformed envelope nonces instead of panicking

feat(node): blind recipient identities on the B2 replication surface

feat(node): stop anchoring recipient identities to Arweave