15079 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
joshavant	ea1ccf4896	docs(secrets): add direct 1password exec example	2026-02-26 14:47:22 +00:00
joshavant	f46b9c996f	feat(secrets): allow opt-in symlink exec command paths	2026-02-26 14:47:22 +00:00
joshavant	06290b49b2	feat(secrets): finalize mode rename and validated exec docs	2026-02-26 14:47:22 +00:00
joshavant	ba2eb583c0	fix(secrets): make apply idempotent and keep audit read-only	2026-02-26 14:47:22 +00:00
joshavant	f413e314b9	feat(secrets): replace migrate flow with audit/configure/apply	2026-02-26 14:47:22 +00:00
joshavant	8944b75e16	fix(secrets): align ref contracts and non-interactive ref persistence	2026-02-26 14:47:22 +00:00
joshavant	86622ebea9	fix(secrets): enforce file provider read timeouts	2026-02-26 14:47:22 +00:00
joshavant	67e9554645	test(session): normalize parent fork parentSession path assertion	2026-02-26 14:47:22 +00:00
joshavant	060ede8aaa	test(secrets): skip windows ACL-sensitive file-provider runtime tests	2026-02-26 14:47:22 +00:00
joshavant	b84d7796be	test(secrets): skip strict file-permission resolver tests on windows	2026-02-26 14:47:22 +00:00
joshavant	bde9cbb058	docs(secrets): align provider model and add exec resolver coverage	2026-02-26 14:47:22 +00:00
joshavant	4e7a833a24	feat(security): add provider-based external secrets management	2026-02-26 14:47:22 +00:00
joshavant	bb60cab76d	test: sops invocation assertion ... Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>	2026-02-26 14:47:22 +00:00
joshavant	5e3a86fd2f	feat(secrets): expand onboarding secret-ref flows and custom-provider parity	2026-02-26 14:47:22 +00:00
joshavant	e8637c79b3	fix(secrets): harden sops migration sops rule matching	2026-02-26 14:47:22 +00:00
joshavant	0e69660c41	feat(secrets): finalize external secrets runtime and migration hardening	2026-02-26 14:47:22 +00:00
joshavant	c5b89fbaea	Docs: address review feedback on secrets docs	2026-02-26 14:47:22 +00:00
joshavant	9203d583f9	Docs: add secrets and CLI secrets reference pages	2026-02-26 14:47:22 +00:00
joshavant	c0a3801086	Docs: document secrets refs runtime and migration	2026-02-26 14:47:22 +00:00
joshavant	cb119874dc	Onboard: require explicit mode for env secret refs	2026-02-26 14:47:22 +00:00
joshavant	4d94b05ac5	Secrets: keep read-only runtime sync in-memory	2026-02-26 14:47:22 +00:00
joshavant	13b4993289	Onboard non-interactive: avoid rewriting profile-backed keys	2026-02-26 14:47:22 +00:00
joshavant	59e5f12bf9	Onboard: move volcengine/byteplus auth from .env to profiles	2026-02-26 14:47:22 +00:00
joshavant	2ef109f00a	Onboard OpenAI: explicit secret-input-mode behavior	2026-02-26 14:47:22 +00:00
joshavant	e8d1725187	Onboard auth: remove leftover merge marker	2026-02-26 14:47:22 +00:00
joshavant	fce4d76a78	Tests: narrow OpenAI default model assertion typing	2026-02-26 14:47:22 +00:00
joshavant	68b9d89ee7	Onboard: store OpenAI auth in profiles instead of .env	2026-02-26 14:47:22 +00:00
joshavant	09c7cb5d34	Tests: update onboard credential expectations for explicit ref mode	2026-02-26 14:47:22 +00:00
joshavant	b50d2ce93c	Tests: align auth-choice helper expectations with secret mode	2026-02-26 14:47:22 +00:00
joshavant	04aa856fc0	Onboard: require explicit mode for env secret refs	2026-02-26 14:47:22 +00:00
joshavant	103d02f98c	Auth choice tests: expect env-backed key refs	2026-02-26 14:47:22 +00:00
joshavant	56f73ae080	Auth choice tests: assert env-backed keyRef persistence	2026-02-26 14:47:22 +00:00
joshavant	58590087de	Onboard auth: use shared secret-ref helpers	2026-02-26 14:47:22 +00:00
joshavant	7e1557b8c9	Onboard: persist env-backed API keys as secret refs	2026-02-26 14:47:22 +00:00
joshavant	363334253b	Secrets migrate: split plan/apply/backup modules	2026-02-26 14:47:22 +00:00
joshavant	4807e40cbd	Agents: restore auth.json static scrub during pi auth discovery	2026-02-26 14:47:22 +00:00
joshavant	8e439e2d81	Secrets migrate: ensure unique backup ids per write	2026-02-26 14:47:22 +00:00
joshavant	a74067d00b	Secrets migrate: share helpers and narrow env scrub scope	2026-02-26 14:47:22 +00:00
joshavant	f6a854bd37	Secrets: add migrate rollback and skill ref support	2026-02-26 14:47:22 +00:00
joshavant	2e53033f22	Gateway: serialize secrets activation across reload paths	2026-02-26 14:47:22 +00:00
joshavant	fe56700026	Gateway: add manual secrets reload command	2026-02-26 14:47:22 +00:00
joshavant	301fe18909	Agents: inject pi auth storage from runtime profiles	2026-02-26 14:47:22 +00:00
joshavant	6a251d8d74	Auth profiles: resolve keyRef/tokenRef outside gateway	2026-02-26 14:47:22 +00:00
joshavant	5ae367aadd	Tests: stub discoverAuthStorage in model catalog mocks	2026-02-26 14:47:22 +00:00
joshavant	cec404225d	Auth labels: handle token refs and share Pi credential conversion	2026-02-26 14:47:22 +00:00
joshavant	e1301c31e7	Auth profiles: never persist plaintext when refs are present	2026-02-26 14:47:22 +00:00
joshavant	4c5a2c3c6d	Agents: inject pi auth storage from runtime profiles	2026-02-26 14:47:22 +00:00
joshavant	45ec5aaf2b	Secrets: keep read-only runtime sync in-memory	2026-02-26 14:47:22 +00:00
joshavant	8e33ebe471	Secrets: make runtime activation auth loads read-only	2026-02-26 14:47:22 +00:00
joshavant	3dbb6be270	Gateway tests: handle async restart callback path	2026-02-26 14:47:22 +00:00