Code review

Workflow runs for Code review

• fix(deps): patch minimatch to 11.0.1

  completed successfully:
  Code review#195:Pull request#1564openedbycipherstash-agent
  fix/cip-5331-minimatch

  Nov 7, 20266s
  More actions for workflow run 195

• docs: record that vendor keys and long-lived credentials cross the Go host

  skipped:
  Code review#194:Pull request#1563openedbyfreshtonic
  james/kms-host-boundary-record

  Nov 6, 20261s
  More actions for workflow run 194

• fix(stack-kms-vendor): let a key router hold at most one vendor by type

  skipped:
  Code review#193:Pull request#1562openedbyfreshtonic
  james/kms-router-one-vendor

  Nov 6, 20262s
  More actions for workflow run 193

• refactor(guest,auth): name each key vendor backend in one place

  skipped:
  Code review#192:Pull request#1561openedbyfreshtonic
  james/kms-vendor-dispatch

  Nov 6, 20261s
  More actions for workflow run 192

• refactor(guest): hold no key vendor backend as None, not a fake one

  skipped:
  Code review#191:Pull request#1560openedbyfreshtonic
  james/guest-vendor-option

  Nov 6, 20262s
  More actions for workflow run 191

• fix(auth): take the backend names that stash keyset prints

  skipped:
  Code review#190:Pull request#1559openedbyfreshtonic
  james/auth-keyset-vendor-names

  Nov 6, 20261s
  More actions for workflow run 190

• refactor(stack-kms): make the vendor in backend errors a typed value

  skipped:
  Code review#189:Pull request#1558openedbyfreshtonic
  james/kms-vendor-name-type

  Nov 6, 20261s
  More actions for workflow run 189

• refactor(stack-kms-vendor): share one credential cache across vendors

  skipped:
  Code review#188:Pull request#1557openedbyfreshtonic
  james/kms-vendor-cached-token

  Nov 6, 20261s
  More actions for workflow run 188

• test(stack-kms-vendor): share the vendor test harness and live workflow

  skipped:
  Code review#187:Pull request#1556openedbyfreshtonic
  james/kms-vendor-test-harness

  Nov 6, 20261s
  More actions for workflow run 187

• test(stack-kms-azure): name the fixture AES key the vendor key

  skipped:
  Code review#186:Pull request#1555openedbyfreshtonic
  james/kms-tests-vendor-key-name

  Nov 6, 20261s
  More actions for workflow run 186

• fix(stack,supabase,prisma): keep plaintext search terms out of errors and logs

  skipped:
  Code review#185:Pull request#1554openedbycipherstash-agent
  claude/project-thread-uthgtw

  Nov 6, 202612s
  More actions for workflow run 185

• fix(stack-auth,stack-profile): clamp server expires_in and wipe secret buffers

  skipped:
  Code review#184:Pull request#1553openedbycipherstash-agent
  claude/project-thread-n479p0

  Nov 6, 20261s
  More actions for workflow run 184

• fix(cli): follow drizzle-kit's reported path for drop migrations

  skipped:
  Code review#183:Pull request#1552openedbycipherstash-agent
  claude/project-thread-1t65aj

  Nov 6, 202610s
  More actions for workflow run 183

• fix(eql): schema-qualify operators in comparison wrapper bodies

  skipped:
  Code review#182:Pull request#1551openedbycipherstash-agent
  claude/project-thread-rckj8w

  Nov 6, 20267s
  More actions for workflow run 182

• fix(golang): wipe guest buffers on failed placement and close stashgen's engine

  skipped:
  Code review#181:Pull request#1550openedbycipherstash-agent
  claude/project-thread-ql9v09

  Nov 6, 20269s
  More actions for workflow run 181

• fix(stack-auth): honour CS_WORKSPACE_CRN with CLI sign-in

  skipped:
  Code review#180:Pull request#1549openedbycipherstash-agent
  claude/project-thread-ciexa3

  Nov 6, 20261s
  More actions for workflow run 180

• fix(eql): drop ignored query_json cast and correct eql-bindings wire docs

  skipped:
  Code review#179:Pull request#1548openedbycipherstash-agent
  claude/project-thread-7am8g0

  Nov 6, 202610s
  More actions for workflow run 179

• fix(eql): block a domain compared with another domain's query operand

  skipped:
  Code review#178:Pull request#1547openedbycipherstash-agent
  claude/project-thread-h06x5y

  Nov 6, 20267s
  More actions for workflow run 178

• fix(stack-kms)!: only trust a CipherStash-hosted ZeroKMS from a token claim

  skipped:
  Code review#177:Pull request#1546openedbycipherstash-agent
  claude/project-thread-q004du

  Nov 6, 20261s
  More actions for workflow run 177

• fix(eql): align JSON array flag with SQL and handle empty arrays

  skipped:
  Code review#176:Pull request#1545openedbycipherstash-agent
  claude/project-thread-62v10t

  Nov 6, 20261s
  More actions for workflow run 176

• fix(stack-supabase): read tables that have no encrypted columns

  skipped:
  Code review#175:Pull request#1544openedbycipherstash-agent
  claude/project-thread-qzt4qf

  Nov 6, 20262s
  More actions for workflow run 175

• fix(nextjs): harden the CipherStash session cookie

  skipped:
  Code review#174:Pull request#1543openedbycipherstash-agent
  claude/project-thread-5bswx7

  Nov 6, 20269s
  More actions for workflow run 174

• docs: key vendor backend capability matrix, and refuse an unsafe rewrap (CIP-5313)

  skipped:
  Code review#173:Pull request#1541openedbyfreshtonic
  james/cip-5313-document-key-vendor-backend-trade-offs-capability-matrix

  Nov 6, 20261s
  More actions for workflow run 173

• feat(cli): stash keyset create and rewrap for key vendor backends (CIP-5312)

  skipped:
  Code review#172:Pull request#1533openedbyfreshtonic
  james/cip-5312-stash-keyset-create-rewrap-commands

  Nov 6, 20261s
  More actions for workflow run 172

• feat(go): key vendor backends through the encrypt guest (CIP-5311)

  skipped:
  Code review#171:Pull request#1532openedbyfreshtonic
  james/cip-5311-go-sdk-key-vendor-backends-through-the-encrypt-guest

  Nov 6, 20261s
  More actions for workflow run 171