• Improve release version selection
• Prepare all release: CLI 0.2.0, bindings 0.5.0
• Prepare all release: CLI 0.1.0, bindings 0.4.0
• Match CI test sharding during dependency upgrades
• Serialize dependency upgrade validation tests
• Fix CLI test Clippy warnings
• Remove obsolete DVault design documents
• Add automated dependency upgrades
• Improve release monitoring and fix CLI auto-open test failures
• Prepare cli release: CLI 0.0.19, bindings
• Simplify release commands and report binding publication status
• Refresh fuzz lockfile during release preparation
• Prepare all release: CLI 0.0.18, bindings 0.3.16
• fail matrix validation promptly
• fail release validation faster and show wait progress
• Prepare all release: CLI 0.0.17, bindings 0.3.15
• report release CI failures with job details
• Prepare cli release: CLI 0.0.16, bindings
• Remove the superseded Dart implementation
• Consolidate branch histories and use main as the default
• Add CI release candidates with resumable CLI-first promotion
• Route language binding file operations through Rust
• Require Rust-owned binding operations unless explicitly approved
• Support read-only lockboxes with archive handle locking
• Fix lockbox moves across filesystems and clarify move guidance
• Add password profiles and release CLI 0.0.14 (#306)

• Prepare all release: CLI 0.1.0, bindings 0.4.0
• Match CI test sharding during dependency upgrades
• Serialize dependency upgrade validation tests
• Fix CLI test Clippy warnings
• Remove obsolete DVault design documents
• Add automated dependency upgrades
• Improve release monitoring and fix CLI auto-open test failures
• Prepare cli release: CLI 0.0.19, bindings
• Simplify release commands and report binding publication status
• Refresh fuzz lockfile during release preparation
• Prepare all release: CLI 0.0.18, bindings 0.3.16
• fail matrix validation promptly
• fail release validation faster and show wait progress
• Prepare all release: CLI 0.0.17, bindings 0.3.15
• report release CI failures with job details
• Prepare cli release: CLI 0.0.16, bindings
• Remove the superseded Dart implementation
• Consolidate branch histories and use main as the default
• Add CI release candidates with resumable CLI-first promotion
• Route language binding file operations through Rust
• Require Rust-owned binding operations unless explicitly approved
• Support read-only lockboxes with archive handle locking
• Fix lockbox moves across filesystems and clarify move guidance
• Add password profiles and release CLI 0.0.14 (#306)

• Match CI test sharding during dependency upgrades
• Serialize dependency upgrade validation tests
• Fix CLI test Clippy warnings
• Remove obsolete DVault design documents
• Add automated dependency upgrades
• Improve release monitoring and fix CLI auto-open test failures
• Prepare cli release: CLI 0.0.19, bindings
• Simplify release commands and report binding publication status
• Refresh fuzz lockfile during release preparation
• Prepare all release: CLI 0.0.18, bindings 0.3.16
• fail matrix validation promptly
• fail release validation faster and show wait progress
• Prepare all release: CLI 0.0.17, bindings 0.3.15
• report release CI failures with job details
• Prepare cli release: CLI 0.0.16, bindings
• Remove the superseded Dart implementation
• Consolidate branch histories and use main as the default
• Add CI release candidates with resumable CLI-first promotion
• Route language binding file operations through Rust
• Require Rust-owned binding operations unless explicitly approved
• Support read-only lockboxes with archive handle locking
• Fix lockbox moves across filesystems and clarify move guidance
• Add password profiles and release CLI 0.0.14 (#306)

Changelog #

• Restore the optional Revault.load(nativeLibraryPath: ...) installer hook while retaining native-assets loading as the default.
• Allow the bundled native client to use a session agent from a different package release when both implement the same agent protocol.
• Added encrypted Lockbox descriptions through description, setDescription, and clearDescription. Descriptions use existing encrypted variable storage, so the .lbox format version is unchanged.
• Add a runnable vault-and-lockbox quick start and clarify installation, package examples, and links to the reVault manual.
• Declare WebAssembly as a supported Dart target.

• Add process-local lockbox handles with deterministic close support.
• Add agent-backed lockbox handle acquisition without extending the agent TTL.
• Add explicit platform credential context support for sudo-safe vault access.

• Throw VaultPassphraseAccessException with platform credential-store recovery guidance when a remembered Vault passphrase cannot be retrieved.

• feat(dart): bundle native rust libraries with build hooks
• docs(bindings): added worked examples to each method.
• fix(release): normalize Windows package paths
• fix(release): avoid Windows evidence stack overflow
• Fix #270: define identifier case sensitivity
• Fix #271: disallow variable directory collisions
• Fix #269: accept move destination directories (#274)

• Refresh the checked Rust binding lockfile used by the release validation workflow.
• Use Dart native assets and build hooks to bundle the target-specific carrier.

• Breaking: rename the runtime entry point from Vault to Revault and use Vault exclusively for the persistent local security store.
• Breaking: create and open archives through Lockbox.create, Lockbox.open, Lockbox.createInMemory, and Lockbox.openBytes.
• Breaking: accept SecretString for passphrases and passwords and SecretBytes for binary keys so callers can wipe owned secret buffers with close().
• Add SecretBytes.fromString for UTF-8 text stored in binary secret fields.
• Breaking: name Vault signing identities ProfileSigningKeyPair and ProfileSigningPublicKey; retain “owner” only for the Lockbox owner role.
• Replace the misleading LocalVault facade with the explicit singleton AgentSession. Ordinary lockbox operations no longer use the agent.
• Add process-local Lockbox.close and Vault.close; agent-held keys are managed independently with AgentSession.closeLockbox and closeAll.
• Allow credential-free Lockbox.open(path) to open the default Vault through its platform-stored passphrase and resolve the lockbox credential there; it never consults the agent.
• Replace stringly typed key formats, cache policies, worker policies, workload profiles, and agent activity kinds with Dart enums.
• Throw RevaultException with structured native details instead of requiring callers to inspect lastError and lastErrorDetails.
• Expand public API documentation, including credential provenance, secret lifetimes, and the security consequences of platform-stored passphrases.
• Keep generated native operations under lib/src so they are not package API.
• Expose only package:revault_api/revault_api.dart as a public Dart library.

See UPGRADING.md for the complete 0.2.x migration guide.

• Initial complete lockbox and vault API binding.
• Initial binary structured transport and concrete result models.
• Linux, macOS, and Windows native runtime discovery for x86-64 and ARM64.