umputun / stash / 20610152120

Pull #47

github

feat(store): add ZK payload validation for secrets paths

validates $ZK$ prefixed values only in secrets paths:
- checks valid base64 encoding
- enforces minimum 44-byte payload (salt + nonce + auth tag)
- rejects malformed ZK payloads to prevent accidental plaintext storage

non-secrets paths allow any $ZK$ prefixed values for flexibility
with other encryption schemes or client implementations.

updates documentation with ZK + secrets path combination behavior.

199 of 238 new or added lines in 5 files covered. (83.61%)

3305 of 3954 relevant lines covered (83.59%)

98.99 hits per line