Repository navigation

feat(golang)!: the Go SDK: stash tags, stashgen and generated Encrypt/Decrypt - #1094

Merged

coderdan merged 30 commits into

mainfrom

feat/go-stashgen

Oct 7, 2026

Commits on Oct 7, 2026

feat(golang): stashgen generator library and encrypt/gensupport
coderdan
authored
481890a
feat(golang): stashgen command, refusal tests and the stub contract check
coderdan
authored
698b3af
feat(golang): declarations from a policy, and protosource
coderdan
authored
579eb8d
refactor(golang)!: rename stackencrypt to encrypt and stackauth to auth
coderdan
authored
d0c4e2c
feat(golang)!: the generated API replaces the value and record calls
coderdan
authored
739ecf1
fix(golang): every field type the generator accepts round-trips
coderdan
authored
3b53ce9
fix(golang): a term the engine cannot derive names its field and index
coderdan
authored
711c08a
fix(golang): the deterministic test guest lives under testdata, out of the embed
coderdan
authored
21995e6
fix(golang): Get reads every type the generator accepts, and a model round-trips
coderdan
authored
4573a05
fix(golang): se_targets entries are read whole against the agreed wire keys
coderdan
authored
cf04a94
test(golang): the refusals hold against the embedded engine, not only the fake
coderdan
authored
60c2821
test(golang): residency on every pull request, and the fixture test fails on any other error
coderdan
authored
2695b38
refactor(golang): one DeterministicSource, protoc-gen-go's GoName, and the review's small findings
coderdan
authored
772be38
chore(stack-kms): DeterministicSource debugs opaquely; stack-encrypt drops sha2
coderdan
authored
e739fdf
fix(golang)!: index-only fields and nil interface passthroughs round-trip
coderdan
authored
fa106c4
chore(golang): mark stashgen output as linguist-generated
auxesis
authored
62f223d
chore(golang): keep generated *_stash.go files expanded in review
auxesis
authored
b7a4a72
fix(golang): Decrypt errors hold no plaintext and wrap ErrEncoding
coderdan
authored
49e7480
fix(golang): docs say what this build does; -redact covers %#v
coderdan
authored
115c783
fix(golang): a field added to an embedded struct stops the build; CI catches an uncommitted generated file
coderdan
authored
9f7e191
fix(golang)!: the policy path checks names and takes its output as a parameter
coderdan
authored
8337266
refactor(golang)!: names that do not repeat their package, in Go's spelling
coderdan
authored
c1741ba
docs(stack-encrypt): drop the Go plan.Custom note, the package is removed here
coderdan
authored
2a802ad
fix(golang): parseTarget refuses an unknown kind or index
coderdan
authored
34f95f7
docs(golang): say what the SDK does not protect, and fix the example's Decrypt
coderdan
authored
ac6897a
feat(stack-encrypt): a data plan can take its context from a field of the record
coderdan
authored
57e9ad1
feat(golang): the guest opens a record under the context the host expects
coderdan
authored
cfa9664
feat(golang): a context_field tag binds each row to its own context
coderdan
authored
4c92d5f
fix(stack-kms): the deterministic source refuses a wrong context as forbidden
coderdan
authored
8309934
test(golang): code generated with -for and from a policy runs against the guest
coderdan
authored
c1bb0dd