Celia Chen a5ed46ca37 Populate the local secrets cache after successful saves (#59520) ...

## Why

Saving local secrets invalidated the decrypted cache, forcing the next read to decrypt contents already available in memory.

## What changed

Populate the cache with the saved snapshot after the atomic write succeeds. Only cache the current schema version, leaving normalization and rejection of other versions to the read path. Reads continue to verify the ciphertext and keyring before reusing cached contents.

## Testing

Add coverage across all four local secrets namespaces for cache reuse after saving, including through backend clones, and preservation of the committed snapshot after a failed write. Update existing tests to verify cache reuse after setting and deleting secrets while retaining concurrent cold-read coverage.

GitOrigin-RevId: 61519aadc16bbe8db8c5055b126885500716418a

2026-11-04 23:46:52 +00:00

..

src

Populate the local secrets cache after successful saves (#59520)

2026-11-04 23:46:52 +00:00

BUILD.bazel

Move sanitizer into codex-secrets (#12306)

2026-02-20 22:47:54 +00:00

Cargo.toml

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00