Peter Steinberger
|
45b5c23825
|
docs(changelog): reorder unreleased changes by user interest
|
2026-02-26 16:03:29 +01:00 |
|
Peter Steinberger
|
0f9c602591
|
docs(changelog): highlight external secrets management (#26155)
|
2026-02-26 16:01:23 +01:00 |
|
Peter Steinberger
|
cc1eaf130b
|
docs(gateway): clarify remote token local fallback semantics
|
2026-02-26 15:59:44 +01:00 |
|
Peter Steinberger
|
47fc6a0806
|
fix: stabilize secrets land + docs note (#26155) (thanks @joshavant)
|
2026-02-26 14:47:22 +00:00 |
|
Peter Steinberger
|
4380d74d49
|
docs(secrets): add dedicated apply plan contract page
|
2026-02-26 14:47:22 +00:00 |
|
Peter Steinberger
|
820d614757
|
fix(secrets): harden plan target paths and ref-only auth profiles
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
485cd0c512
|
fix(test): skip exec-backed audit batching assertion on windows
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
14897e8de7
|
docs(secrets): clarify partial migration guidance
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
7671c1dd10
|
test(secrets): cover skill migration and symlinked exec command flow
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
d879c7c641
|
fix(secrets): harden apply and audit plan handling
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
ea1ccf4896
|
docs(secrets): add direct 1password exec example
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
f46b9c996f
|
feat(secrets): allow opt-in symlink exec command paths
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
06290b49b2
|
feat(secrets): finalize mode rename and validated exec docs
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
ba2eb583c0
|
fix(secrets): make apply idempotent and keep audit read-only
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
f413e314b9
|
feat(secrets): replace migrate flow with audit/configure/apply
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
8944b75e16
|
fix(secrets): align ref contracts and non-interactive ref persistence
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
86622ebea9
|
fix(secrets): enforce file provider read timeouts
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
67e9554645
|
test(session): normalize parent fork parentSession path assertion
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
060ede8aaa
|
test(secrets): skip windows ACL-sensitive file-provider runtime tests
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
b84d7796be
|
test(secrets): skip strict file-permission resolver tests on windows
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
bde9cbb058
|
docs(secrets): align provider model and add exec resolver coverage
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
4e7a833a24
|
feat(security): add provider-based external secrets management
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
bb60cab76d
|
test: sops invocation assertion
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
5e3a86fd2f
|
feat(secrets): expand onboarding secret-ref flows and custom-provider parity
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
e8637c79b3
|
fix(secrets): harden sops migration sops rule matching
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
0e69660c41
|
feat(secrets): finalize external secrets runtime and migration hardening
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
c5b89fbaea
|
Docs: address review feedback on secrets docs
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
9203d583f9
|
Docs: add secrets and CLI secrets reference pages
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
c0a3801086
|
Docs: document secrets refs runtime and migration
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
cb119874dc
|
Onboard: require explicit mode for env secret refs
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
4d94b05ac5
|
Secrets: keep read-only runtime sync in-memory
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
13b4993289
|
Onboard non-interactive: avoid rewriting profile-backed keys
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
59e5f12bf9
|
Onboard: move volcengine/byteplus auth from .env to profiles
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
2ef109f00a
|
Onboard OpenAI: explicit secret-input-mode behavior
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
e8d1725187
|
Onboard auth: remove leftover merge marker
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
fce4d76a78
|
Tests: narrow OpenAI default model assertion typing
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
68b9d89ee7
|
Onboard: store OpenAI auth in profiles instead of .env
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
09c7cb5d34
|
Tests: update onboard credential expectations for explicit ref mode
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
b50d2ce93c
|
Tests: align auth-choice helper expectations with secret mode
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
04aa856fc0
|
Onboard: require explicit mode for env secret refs
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
103d02f98c
|
Auth choice tests: expect env-backed key refs
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
56f73ae080
|
Auth choice tests: assert env-backed keyRef persistence
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
58590087de
|
Onboard auth: use shared secret-ref helpers
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
7e1557b8c9
|
Onboard: persist env-backed API keys as secret refs
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
363334253b
|
Secrets migrate: split plan/apply/backup modules
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
4807e40cbd
|
Agents: restore auth.json static scrub during pi auth discovery
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
8e439e2d81
|
Secrets migrate: ensure unique backup ids per write
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
a74067d00b
|
Secrets migrate: share helpers and narrow env scrub scope
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
f6a854bd37
|
Secrets: add migrate rollback and skill ref support
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
2e53033f22
|
Gateway: serialize secrets activation across reload paths
|
2026-02-26 14:47:22 +00:00 |
|