sneak 6bce6f2c66 Delete the keychain item or Secure Enclave key of a failed unlocker add (closes #89) ...

A Secure Enclave unlocker add gets the long-term key before it creates
the Secure Enclave key, so a wrong passphrase creates none, and deletes
the key if encrypting with it or writing the unlocker then fails. A
keychain unlocker add writes all of the unlocker's files before it
stores the keychain item, and deletes the item if moving the unlocker
into place then fails. A failure to delete is reported along with the
original error.

These files build only on macOS: the code is type-checked and linted
from Linux by script/lint-darwin; the new tests run only on a Mac.

Model: opus-5-5

2026-10-04 16:52:46 +00:00

..

cli

Put age identity keys into locked buffers through one function (closes #38)

2026-10-04 18:42:00 +02:00

macse

Type-check and lint the macOS build from Linux (closes #50)

2026-10-04 18:07:56 +02:00

secret

Delete the keychain item or Secure Enclave key of a failed unlocker add (closes #89)

2026-10-04 16:52:46 +00:00

vault

Put age identity keys into locked buffers through one function (closes #38)

2026-10-04 18:42:00 +02:00