feat(wallet): add encrypted local vault runtime

2026-07-09 00:08:24 -05:00
parent 480d686c41
commit fc17c44c38
11 changed files with 608 additions and 3 deletions
@@ -61,3 +61,8 @@ The current app can open but is still a shell. The MVP work should prioritize:
 - Unsafe/incomplete wallet requests are rejected.
 - Dashboard totals and high-risk approval counts are computed.
 - Settings customization defaults validate.
+
+
+## Implemented runtime slices
+
+- Encrypted local wallet dashboard vault: `rabby-runtime::wallet_vault::EncryptedWalletVault` writes AES-256-GCM encrypted JSON envelopes using Argon2id-derived keys, rejects blank/wrong passphrases, avoids plaintext wallet fields in storage, and is exposed to Tauri via `save_demo_wallet_vault` / `load_wallet_vault`.