colineonset

Public

Onset: version control where nobody waits and nothing gets lost. The on command, its core and onset-server.

CodeIssuesChange requestsActionsDiscussionsCommitsBranchesReleasesSearchContributorsCompare

Code Issues Change requests Actions Discussions Commits Branches Releases Search Contributors Compare

Upstream

Docs Pricing Support Changelog

coline/onset

colineonset

Public

Onset: version control where nobody waits and nothing gets lost. The on command, its core and onset-server.

CodeIssuesChange requestsActionsDiscussionsCommitsBranchesReleasesSearchContributorsCompare

Code Issues Change requests Actions Discussions Commits Branches Releases Search Contributors Compare

feat(vcs): sealed folders, encrypted on their readers' machines so the host can't read them

Radin committed …

Author: Radin · radin@coline.appOct 28, 2026 at 20:41
Committer: Radin · radin@coline.appOct 28, 2026 at 20:41
Parents: dc0a22c0c4c6

feat(vcs): sealed folders, encrypted on their readers' machines so the host can't read them

vcs access <folder> @sam --sealed keeps a folder's files encrypted
(XChaCha20-Poly1305, nonce from the content so unchanged files keep their
IDs) under a folder key wrapped for each reader's machine (X25519). The
host keeps the wraps and never a key: it won't show, blame or edit sealed
files, leaves them out of git views (a git push keeps them as they are),
and hands conflicts in them back, which vcs sync merges on the machine.
A machine without the key asks for it, and the next reader's machine
wraps it for it; vcs access <folder> lists machines by fingerprint and
vcs key shows this machine's. Naming fewer people makes a new key.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

24 files changed+984−38

← Back to history