fix(node): close under-withholding via full ref scope and reachable-only pin set by beardthelion · Pull Request #46 · Gitlawb/node

feat(core): ed25519 to x25519 key conversion for envelope crypto

beardthelion

committed

feat(core): seal/open per-blob encryption envelopes

beardthelion

committed

feat(node): resolve per-blob encryption recipients (least-privilege)

beardthelion

committed

feat(node): encrypted_blobs table and recipient-scoped queries

beardthelion

committed

feat(node): encrypt-then-pin withheld blobs at push (IPFS)

beardthelion

committed

feat(node): authenticated discovery and fetch for encrypted blobs

beardthelion

committed

feat(gl): transparent recovery of authorized encrypted blobs on clone

beardthelion

committed

style: cargo fmt

beardthelion

committed

fix(node): re-seal encrypted blob when recipient set changes

beardthelion

committed

feat(node): unscoped encrypted-blob listing for replication

beardthelion

committed

feat(node): encrypted-blobs/replicate endpoint for peer mirrors

beardthelion

committed

feat(node): route encrypted-blobs/replicate under git_read_routes

beardthelion

committed

feat(node): peer mirrors replicate encrypted withheld blobs (Option B2)

beardthelion

committed

feat(node): anchor_encrypted_manifest for Option B3 Arweave manifests

beardthelion

committed

feat(node): encrypt_and_pin returns the per-push sealed delta

beardthelion

committed

feat(node): anchor encrypted-blob manifest on push (Option B3)

beardthelion

committed

feat(gl): Arweave/IPFS gateway recovery for encrypted blobs (Option B3)

beardthelion

committed

feat(gl): transparent Arweave fallback recovery on clone (Option B3)

beardthelion

committed

style: cargo fmt

beardthelion

committed

fix(gl): bound Arweave recovery gateway requests with a 30s timeout

beardthelion

committed

test(gl): read-path recovery tests for Arweave fallback; quiet promisor present-check

beardthelion

committed

fix: surface corrupt recipients JSON and silent recovery I/O failures

beardthelion

committed

feat(core): blind recipient identities in withheld-blob envelopes

beardthelion

and

CommandCodeBot

committed

fix(core): reject malformed envelope nonces instead of panicking

beardthelion

committed

feat(node): blind recipient identities on the B2 replication surface

beardthelion

committed

feat(node): stop anchoring recipient identities to Arweave

beardthelion

committed

feat(node): blind recipient identities at rest and gate B1 by repo readability

beardthelion

committed

chore: remove redundant .gitignore entry (covered by local exclude)

beardthelion

committed

fix(node): gate /replicate by repo readability; harden reseal on DB error

beardthelion

committed

fix(node): close under-withholding via full ref scope and reachable-only pin set

beardthelion

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(node): close under-withholding via full ref scope and reachable-only pin set#46

fix(node): close under-withholding via full ref scope and reachable-only pin set#46
beardthelion wants to merge 30 commits into
Gitlawb:mainfrom
beardthelion:fix/withholding-ref-scope

Commits on Jun 18, 2026

feat(core): ed25519 to x25519 key conversion for envelope crypto

feat(core): seal/open per-blob encryption envelopes

feat(node): resolve per-blob encryption recipients (least-privilege)

feat(node): encrypted_blobs table and recipient-scoped queries

feat(node): encrypt-then-pin withheld blobs at push (IPFS)

feat(node): authenticated discovery and fetch for encrypted blobs

feat(gl): transparent recovery of authorized encrypted blobs on clone

style: cargo fmt

fix(node): re-seal encrypted blob when recipient set changes

feat(node): unscoped encrypted-blob listing for replication

feat(node): encrypted-blobs/replicate endpoint for peer mirrors

feat(node): route encrypted-blobs/replicate under git_read_routes

feat(node): peer mirrors replicate encrypted withheld blobs (Option B2)

feat(node): anchor_encrypted_manifest for Option B3 Arweave manifests

feat(node): encrypt_and_pin returns the per-push sealed delta

feat(node): anchor encrypted-blob manifest on push (Option B3)

feat(gl): Arweave/IPFS gateway recovery for encrypted blobs (Option B3)

feat(gl): transparent Arweave fallback recovery on clone (Option B3)

style: cargo fmt

fix(gl): bound Arweave recovery gateway requests with a 30s timeout

test(gl): read-path recovery tests for Arweave fallback; quiet promisor present-check

fix: surface corrupt recipients JSON and silent recovery I/O failures

feat(core): blind recipient identities in withheld-blob envelopes

fix(core): reject malformed envelope nonces instead of panicking

feat(node): blind recipient identities on the B2 replication surface

feat(node): stop anchoring recipient identities to Arweave

feat(node): blind recipient identities at rest and gate B1 by repo readability

chore: remove redundant .gitignore entry (covered by local exclude)

fix(node): gate /replicate by repo readability; harden reseal on DB error

fix(node): close under-withholding via full ref scope and reachable-only pin set