Skip to content

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, this project adheres to Semantic Versioning, commits follow Conventional Commits, and this changelog is generated by Structured Changelog.

Unreleased

v0.3.0 - 2026-03-01

Highlights

  • Module path migrated from agentplexus to plexusone organization

Changed

  • Module path changed from github.com/agentplexus/omnivault to github.com/plexusone/omnivault
  • All internal imports updated to use new module path
  • Documentation URLs updated to plexusone organization
  • Bump golang.org/x/crypto from 0.47.0 to 0.48.0

v0.2.1 - 2026-01-18

Highlights

  • Cross-platform daemon code refactored to use oscompat library

Changed

  • Replace platform-specific daemon code with github.com/grokify/oscompat library (61da315)
  • Go version updated to 1.25.5 (61da315)
  • Update CI workflow Go versions (6b6f0e6)
  • Bump golang.org/x/crypto from 0.46.0 to 0.47.0 (f13bde7)

v0.2.0 - 2026-01-10

Highlights

  • Full-featured CLI tool for local secret management
  • AES-256-GCM encryption with Argon2id key derivation
  • Daemon architecture with cross-platform support (macOS, Linux, Windows)

Security

  • Secrets encrypted at rest using AES-256-GCM (00b5bbd)
  • Master password never stored, only used for key derivation (00b5bbd)
  • Constant-time password verification to prevent timing attacks (00b5bbd)
  • Keys zeroed from memory on vault lock (8942c99)

Added

  • CLI tool (cmd/omnivault) for local secret management (e8c2cd1)
  • Encrypted local store with AES-256-GCM encryption (internal/store) (00b5bbd)
  • Argon2id key derivation with OWASP-recommended parameters (00b5bbd)
  • Daemon server with Unix socket IPC (internal/daemon) (8942c99)
  • Daemon client library for IPC (internal/client) (050da9c)
  • Platform-specific path configuration (internal/config) (8942c99)
  • Auto-lock with configurable inactivity timeout (default: 15 minutes) (8942c99)
  • Master password change with automatic re-encryption (00b5bbd)
  • CLI commands: init, unlock, lock, status, get, set, list, delete (e8c2cd1)
  • Daemon commands: daemon start, daemon stop, daemon status, daemon run (e8c2cd1)
  • Secure password input without terminal echo (e8c2cd1)
  • Integration tests for daemon and encrypted store (9fa1cbf)
  • Windows daemon support via TCP on localhost (127.0.0.1:19839) (c8a501a)
  • Cross-platform IPC: Unix socket on macOS/Linux, TCP on Windows (c8a501a)

Changed

  • Go version updated to 1.24.0

v0.1.0 - 2025-01-01

Highlights

  • Unified Go library for secret management across multiple providers
  • Extensible provider architecture with zero external dependencies
  • URI-based secret resolution for multi-provider environments

Added

  • Core vault.Vault interface for secret management (91795f4)
  • Built-in providers: environment variables, file-based, in-memory (91795f4)
  • URI-based secret resolution with Resolver (91795f4)
  • Client API with Get, Set, Delete, List, Exists operations (91795f4)
  • Extensible provider architecture for external modules (91795f4)
  • Secret metadata support with tags and timestamps (91795f4)
  • Multi-field secrets support (91795f4)