Peter Steinberger 6bb85f177f feat(onepassword): optional 1Password secrets broker plugin (#106133) ...

* feat(onepassword): add optional 1Password secrets broker plugin

Curated slug registry with per-item auto/approve/deny policy, plugin-approval
gating with expiring allow-always grants, SQLite audit history, onepassword
status/audit CLI, and a single-attempt op client (--cache=false, minimal env).

Closes #105924

* docs(plugins): refresh generated inventory count after rebase

* fix(onepassword): scope grants and field reads

* fix(onepassword): bound grant retention

* fix(onepassword): satisfy deadcode ratchet and hook allowlist contract

* fix(onepassword): honor live policy reloads

* refactor(onepassword): trim private exports

* test(onepassword): satisfy plugin boundaries

* test(onepassword): document temp directory boundary

2026-07-13 03:12:47 -07:00

..

reference

feat(onepassword): optional 1Password secrets broker plugin (#106133)

2026-07-13 03:12:47 -07:00

adding-capabilities.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

admin-http-rpc.md

fix(gateway): admit plugin HTTP work during suspension (#104112)

2026-07-10 22:34:57 -07:00

agent-tools.md

…

architecture-internals.md

chore: migrate active GPT-5.5 references to GPT-5.6 (#104452)

2026-07-11 06:30:57 -07:00

architecture.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

building-extensions.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

building-plugins.md

fix(sqlite): reject runtimes vulnerable to WAL corruption (#106065)

2026-07-13 13:59:00 +08:00

bundles.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

cli-backend-plugins.md

fix(agents): honor claude-cli contextTokens setting (#93198)

2026-07-13 01:58:44 -07:00

codex-computer-use.md

fix(onboarding): skip setup for configured gateways and require inference first (#102883)

2026-07-11 10:25:14 -07:00

codex-harness-reference.md

fix(codex): update managed app-server to 0.144.3 [AI] (#106098)

2026-07-13 01:27:42 -07:00

codex-harness-runtime.md

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

codex-harness.md

fix(openai): align auth availability with effective routes (#104685)

2026-07-11 15:26:48 -07:00

codex-native-plugins.md

feat(codex): support workspace-directory plugins (#104188)

2026-07-11 09:04:55 -07:00

codex-supervision.md

feat: unify external sessions with native catalog pagination (#104717)

2026-07-11 17:26:26 -07:00

community.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

compatibility.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

copilot.md

chore(repo): remove stale repository artifacts (#103152)

2026-07-10 05:28:12 +05:30

dependency-resolution.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

google-meet.md

feat(google-meet): retain the full caption transcript per session (#103387) (#103811)

2026-07-12 09:16:46 +01:00

hooks.md

feat(gateway): land remaining durable-approvals stack and repair main gates (#104837)

2026-07-12 10:51:38 +01:00

install-overrides.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

llama-cpp.md

docs(memory): explain llama.cpp runtime diagnostics

2026-07-11 16:40:14 +08:00

logbook.md

chore: migrate active GPT-5.5 references to GPT-5.6 (#104452)

2026-07-11 06:30:57 -07:00

manage-plugins.md

feat: add Control UI plugin management (#103176)

2026-07-10 11:56:44 +01:00

manifest.md

feat(cloud-workers): pinned SSH tunnel runtime and provider-owned key resolution (#104553)

2026-07-11 09:26:08 -07:00

memory-lancedb.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

memory-wiki.md

feat(memory-wiki): isolate vaults per agent (#103349)

2026-07-10 05:19:13 +01:00

message-presentation.md

feat(channels): add typed cross-surface approval actions (#103679)

2026-07-11 18:31:05 -07:00

oc-path.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

onepassword.md

feat(onepassword): optional 1Password secrets broker plugin (#106133)

2026-07-13 03:12:47 -07:00

plugin-inventory.md

feat(onepassword): optional 1Password secrets broker plugin (#106133)

2026-07-13 03:12:47 -07:00

plugin-permission-requests.md

feat(gateway): land remaining durable-approvals stack and repair main gates (#104837)

2026-07-12 10:51:38 +01:00

reference.md

feat(onepassword): optional 1Password secrets broker plugin (#106133)

2026-07-13 03:12:47 -07:00

sdk-agent-harness.md

fix(openai): align auth availability with effective routes (#104685)

2026-07-11 15:26:48 -07:00

sdk-channel-inbound.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

sdk-channel-ingress.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

sdk-channel-message.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

sdk-channel-outbound.md

fix(outbound): preserve attributed inline formatting (#104118)

2026-07-11 12:03:11 -07:00

sdk-channel-plugins.md

feat(channels): add typed cross-surface approval actions (#103679)

2026-07-11 18:31:05 -07:00

sdk-channel-turn.md

refactor: remove channel turn runtime aliases

2026-05-27 11:37:23 +01:00

sdk-entrypoints.md

feat: unify external sessions with native catalog pagination (#104717)

2026-07-11 17:26:26 -07:00

sdk-migration.md

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

sdk-overview.md

fix(agents): honor claude-cli contextTokens setting (#93198)

2026-07-13 01:58:44 -07:00

sdk-provider-plugins.md

feat(xai): support Grok Imagine Video 1.5 (#103316)

2026-07-10 04:49:42 +01:00

sdk-runtime.md

fix(channels): tombstone corrupt ingress rows (#105259)

2026-07-12 11:09:52 +01:00

sdk-setup.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

sdk-subpaths.md

refactor(channels): share plugin contract scaffolds (#105838)

2026-07-13 01:51:32 -07:00

sdk-testing.md

test: wire Control UI suite into CI, fix its broken tests, drop dead harness surface (#104361)

2026-07-11 03:04:11 -07:00

tool-plugins.md

fix(sqlite): reject runtimes vulnerable to WAL corruption (#106065)

2026-07-13 13:59:00 +08:00

vault.md

Add Vault SecretRef plugin (#89255)

2026-07-09 05:30:12 -05:00

voice-call.md

feat(providers): add Qwen 3.6 Flash and Gemini 3.1 Live (#102791)

2026-07-09 13:37:16 +01:00

webhooks.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

workboard.md

chore: migrate active GPT-5.5 references to GPT-5.6 (#104452)

2026-07-11 06:30:57 -07:00

zalouser.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00