feat: migrate vault to Go binary runevault with multi-CSP installer#68

Merged

jh-lee-cryptolab merged 27 commits into

mainfrom

epic/go-migration

Jun 8, 2026

Commits on Apr 27, 2026

feat: migrate vault to Go gRPC service (runevault) (#61)
jh-lee-cryptolab
committed
ci: add release binary pipeline with multi-platform build and checksum verification
jh-lee-cryptolab
committed
docs: add security check section on README
jh-lee-cryptolab
committed
feat: add EnsureVault to server startup — activate keys and ensure index
jh-lee-cryptolab
committed
feat: add production installer with systemd/launchd service registration
jh-lee-cryptolab
committed
feat: allow runevault group members to use CLI without sudo
jh-lee-cryptolab
committed
fix: route daemon stop/restart through admin socket
jh-lee-cryptolab
committed
refactor: delegate daemon lifecycle to OS service manager
jh-lee-cryptolab
committed
feat: add logs command to tail daemon output
jh-lee-cryptolab
committed
feat: add cloud (CSP) installation to install.sh

jh-lee-cryptolab
and
claude
committed
fix: unify team_name for CSP resource naming and vault index

jh-lee-cryptolab
and
claude
committed
fix: prevent silent exit when CSP function ends with failing &&-chain

jh-lee-cryptolab
and
claude
committed
fix: poll CA cert via SCP until VM install actually completes

jh-lee-cryptolab
and
claude
committed
fix: add cloud default user to runevault group in cloud-init

jh-lee-cryptolab
and
claude
committed
chore: replace team_secret retrieval with SSH-based Next steps in CSP summary

jh-lee-cryptolab
and
claude
committed
feat: tighten CSP preflight with CLI presence + auth checks

jh-lee-cryptolab
and
claude
committed
chore: bump cloud VM images to Ubuntu 24.04 LTS

jh-lee-cryptolab
and
claude
committed
fix: use ubuntu as SCP user on OCI

jh-lee-cryptolab
and
claude
committed

Commits on Apr 30, 2026

Commits on May 6, 2026

refactor: rename GetPublicKey to GetAgentManifest, drop EvalKey from manifest
jh-lee-cryptolab
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: migrate vault to Go binary runevault with multi-CSP installer#68

feat: migrate vault to Go binary runevault with multi-CSP installer#68
jh-lee-cryptolab merged 27 commits into
mainfrom
epic/go-migration

Commits on Apr 27, 2026

feat: migrate vault to Go gRPC service (runevault) (#61)

ci: add release binary pipeline with multi-platform build and checksum verification

docs: add security check section on README

feat: add EnsureVault to server startup — activate keys and ensure index

feat: add production installer with systemd/launchd service registration

feat: allow runevault group members to use CLI without sudo

fix: route daemon stop/restart through admin socket

refactor: delegate daemon lifecycle to OS service manager

feat: add logs command to tail daemon output

feat: add cloud (CSP) installation to install.sh

fix: unify team_name for CSP resource naming and vault index

fix: prevent silent exit when CSP function ends with failing &&-chain

fix: poll CA cert via SCP until VM install actually completes

fix: add cloud default user to runevault group in cloud-init

chore: replace team_secret retrieval with SSH-based Next steps in CSP summary

feat: tighten CSP preflight with CLI presence + auth checks

chore: bump cloud VM images to Ubuntu 24.04 LTS

fix: use ubuntu as SCP user on OCI

Commits on Apr 30, 2026

feat: add CSP uninstall flow that wraps terraform destroy

feat: round out dev installer with prompts, uninstall, and CSP variants

docs: refresh markdown docs for Go migration and CSP installer

chore: drop cosign/Sigstore — keep SHA256SUMS-only release verification

docs: remove stale pyenvector compatibility notes and add GCM TODO

fix: reject permissive secret file modes at config load

fix: return gRPC status errors from Decrypt handlers

refactor: drop admin /shutdown and /restart endpoints

Commits on May 6, 2026

refactor: rename GetPublicKey to GetAgentManifest, drop EvalKey from manifest