Repository navigation

feat(golang)!: the Go SDK: stash tags, stashgen and generated Encrypt/Decrypt - #1094

Open

coderdan wants to merge 25 commits into

mainfrom

feat/go-stashgen

Commits on Oct 7, 2026

feat(golang): stashgen generator library and encrypt/gensupport
coderdan
authored
5cca158
feat(golang): stashgen command, refusal tests and the stub contract check
coderdan
authored
16546c3
feat(golang): declarations from a policy, and protosource
coderdan
authored
dc9e348
refactor(golang)!: rename stackencrypt to encrypt and stackauth to auth
coderdan
authored
fc591d8
feat(golang)!: the generated API replaces the value and record calls
coderdan
authored
2c635ef
fix(golang): every field type the generator accepts round-trips
coderdan
authored
35680fa
fix(golang): a term the engine cannot derive names its field and index
coderdan
authored
b127482
fix(golang): the deterministic test guest lives under testdata, out of the embed
coderdan
authored
4f93d35
fix(golang): Get reads every type the generator accepts, and a model round-trips
coderdan
authored
b51efd6
fix(golang): se_targets entries are read whole against the agreed wire keys
coderdan
authored
b9348c1
test(golang): the refusals hold against the embedded engine, not only the fake
coderdan
authored
6e3e9ef
test(golang): residency on every pull request, and the fixture test fails on any other error
coderdan
authored
54618a2
refactor(golang): one DeterministicSource, protoc-gen-go's GoName, and the review's small findings
coderdan
authored
65039a3
chore(stack-kms): DeterministicSource debugs opaquely; stack-encrypt drops sha2
coderdan
authored
d7a2dd8
fix(golang)!: index-only fields and nil interface passthroughs round-trip
coderdan
authored
2eeb79c
chore(golang): mark stashgen output as linguist-generated
auxesis
authored
af1b266
chore(golang): keep generated *_stash.go files expanded in review
auxesis
authored
811b70b
fix(golang): Decrypt errors hold no plaintext and wrap ErrEncoding
coderdan
authored
5f0c393
fix(golang): docs say what this build does; -redact covers %#v
coderdan
authored
0c5417e
fix(golang): a field added to an embedded struct stops the build; CI catches an uncommitted generated file
coderdan
authored
8a63d8e
fix(golang)!: the policy path checks names and takes its output as a parameter
coderdan
authored
bbcf03e
refactor(golang)!: names that do not repeat their package, in Go's spelling
coderdan
authored
d7e7f81
docs(stack-encrypt): drop the Go plan.Custom note, the package is removed here
coderdan
authored
d680c27
fix(golang): parseTarget refuses an unknown kind or index
coderdan
committed
8903021
docs(golang): say what the SDK does not protect, and fix the example's Decrypt
coderdan
committed
8619046

Navigation Menu

Repository navigation

feat(golang)!: the Go SDK: stash tags, stashgen and generated Encrypt/Decrypt - #1094

feat(golang)!: the Go SDK: stash tags, stashgen and generated Encrypt/Decrypt#1094
coderdan wants to merge 25 commits into
mainfrom
feat/go-stashgen

Commits on Oct 7, 2026

feat(golang): stashgen generator library and encrypt/gensupport

feat(golang): stashgen command, refusal tests and the stub contract check

feat(golang): declarations from a policy, and protosource

refactor(golang)!: rename stackencrypt to encrypt and stackauth to auth

feat(golang)!: the generated API replaces the value and record calls

fix(golang): every field type the generator accepts round-trips

fix(golang): a term the engine cannot derive names its field and index

fix(golang): the deterministic test guest lives under testdata, out of the embed

fix(golang): Get reads every type the generator accepts, and a model round-trips

fix(golang): se_targets entries are read whole against the agreed wire keys

test(golang): the refusals hold against the embedded engine, not only the fake

test(golang): residency on every pull request, and the fixture test fails on any other error

refactor(golang): one DeterministicSource, protoc-gen-go's GoName, and the review's small findings

chore(stack-kms): DeterministicSource debugs opaquely; stack-encrypt drops sha2

fix(golang)!: index-only fields and nil interface passthroughs round-trip

chore(golang): mark stashgen output as linguist-generated

chore(golang): keep generated *_stash.go files expanded in review

fix(golang): Decrypt errors hold no plaintext and wrap ErrEncoding

fix(golang): docs say what this build does; -redact covers %#v

fix(golang): a field added to an embedded struct stops the build; CI catches an uncommitted generated file

fix(golang)!: the policy path checks names and takes its output as a parameter

refactor(golang)!: names that do not repeat their package, in Go's spelling

docs(stack-encrypt): drop the Go plan.Custom note, the package is removed here

fix(golang): parseTarget refuses an unknown kind or index

docs(golang): say what the SDK does not protect, and fix the example's Decrypt