feat(datastore): add opt-in SQLCipher encryption support#584

Open

TimeToBuildBob wants to merge 7 commits into

ActivityWatch:masterfrom

TimeToBuildBob:feat/sqlcipher-encryption

Commits on May 22, 2026

feat(datastore): add opt-in SQLCipher encryption support
TimeToBuildBob
committed
fix(datastore): redact encryption key in Debug output and validate passphrase early
TimeToBuildBob
committed
fix(server): warn when AW_DB_PASSWORD set but encryption not compiled in
TimeToBuildBob
committed
fix(server): clear AW_DB_PASSWORD from env after reading; fix test force_commit
TimeToBuildBob
committed
fix(server): panic when AW_DB_PASSWORD set without encryption build
TimeToBuildBob
committed
fix(datastore): zero encryption key on drop with zeroize::Zeroizing
TimeToBuildBob
committed
fix(server): clear AW_DB_PASSWORD before setup_logger; reject empty passphrase
TimeToBuildBob
committed