Summary

• add encrypted, device-local secret variables to HTTP environments
• keep secret values outside the Markdown Vault while syncing secret names
• resolve secrets only in the main process and mask previews and request history
• handle vault moves, legacy environment scopes, Linux keyring availability, and durable protect/unprotect transitions
• document secret storage, sync behavior, and plain-text limitations

Validation

• 75 scoped tests
• scoped ESLint
• VitePress build
• independent review and verification