feat: OOB secure input improvements + credential_store toolset#128

Merged

kumaakh merged 33 commits into

mainfrom

feat/oob-improvements

Apr 20, 2026

Commits on Apr 19, 2026

feat(oob): replace raw-mode input with secureInput in auth.ts
Bot
committed
feat(credential-store): add credential_store toolset and {{secure.NAME}} resolution in execute_command

Bot
and
claude
committed
feat(oob): add secure-input utility and @inquirer/password dependency
Bot
committed
fix(credential-store): address Phase 2 review findings (security + correctness)
Bot
committed
fix(credential-store): add migration path for old encrypted credentials; move SEC_RE to module scope
Bot
committed
fix: replace stale salt-file test with key-file persistence test

Bot
and
claude
committed
fix: replace stale salt-file test with key-file persistence test

Bot
and
claude
committed
fix: resolve TypeScript errors in auth.ts

Bot
and
claude
committed
fix(crypto): store key at salt path in hex format
Bot
committed

Commits on Apr 20, 2026

fix(oob): rename 'API key' label to 'Secure Value' in auth terminal prompt
Bot
committed
feat(register-member): resolve {{secure.NAME}} tokens in password field
Bot
committed
review: oob-improvements feedback

Akhil Kumar
authored and
Akhil Kumar
committed
fix(security): resolve all H/M/L findings from security review
Bot
committed
fix(H2): redact credentials in monitor_task log output via task-scoped registry
Bot
committed
chore: update feedback.md SHA references to current commits (c14255b, bfcaceb)
Bot
committed
review: re-review oob-improvements

Akhil Kumar
authored and
Akhil Kumar
committed
feat: resolve {{secure.NAME}} tokens in provision-vcs-auth and provision-auth
Bot
committed
review: final review of provision token resolution

Akhil Kumar
authored and
Akhil Kumar
committed
feat(update-member): resolve {{secure.NAME}} tokens in password field
Bot
committed
review: update-member secure token resolution

Akhil Kumar
authored and
Akhil Kumar
committed
docs: comprehensive credential store documentation across README, fleet skill, PM skill
Bot
committed
chore: regenerate llms-full.txt [skip ci]
github-actions[bot]
committed
fix(security): reject {{secure.NAME}} tokens in execute_prompt; fix docs
Bot
committed
review: execute_prompt security guard and docs

Akhil Kumar
authored and
Akhil Kumar
committed
chore: regenerate llms-full.txt [skip ci]
github-actions[bot]
committed
feat(A): OOB fallback for provision_vcs_auth and provision_auth
Bot
committed
feat(A): OOB fallback for provision_vcs_auth and provision_auth
Bot
committed
feat(E): resolve {{secure.NAME}} tokens as PEM content in setup_git_app
Bot
committed
chore: mark E complete in progress.json
Bot
committed
review: Features A and E

Akhil Kumar
authored and
Akhil Kumar
committed
polish: generic secure-input message, rename smoke script, document {{secure.NAME}} fields
Bot
committed
polish: fix {{secure.NAME}} warning example in skills
Bot
committed
cleanup: remove fleet control files
Bot
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: OOB secure input improvements + credential_store toolset#128

feat: OOB secure input improvements + credential_store toolset#128
kumaakh merged 33 commits into
mainfrom
feat/oob-improvements

Commits on Apr 19, 2026

feat(oob): replace raw-mode input with secureInput in auth.ts

feat(credential-store): add credential_store toolset and {{secure.NAME}} resolution in execute_command

feat(oob): add secure-input utility and @inquirer/password dependency

fix(credential-store): address Phase 2 review findings (security + correctness)

fix(credential-store): add migration path for old encrypted credentials; move SEC_RE to module scope

fix: replace stale salt-file test with key-file persistence test

fix: replace stale salt-file test with key-file persistence test

fix: resolve TypeScript errors in auth.ts

fix(crypto): store key at salt path in hex format

Commits on Apr 20, 2026

fix(oob): rename 'API key' label to 'Secure Value' in auth terminal prompt

feat(register-member): resolve {{secure.NAME}} tokens in password field

review: oob-improvements feedback

fix(security): resolve all H/M/L findings from security review

fix(H2): redact credentials in monitor_task log output via task-scoped registry

chore: update feedback.md SHA references to current commits (c14255b, bfcaceb)

review: re-review oob-improvements

feat: resolve {{secure.NAME}} tokens in provision-vcs-auth and provision-auth

review: final review of provision token resolution

feat(update-member): resolve {{secure.NAME}} tokens in password field

review: update-member secure token resolution

docs: comprehensive credential store documentation across README, fleet skill, PM skill

chore: regenerate llms-full.txt [skip ci]

fix(security): reject {{secure.NAME}} tokens in execute_prompt; fix docs

review: execute_prompt security guard and docs

chore: regenerate llms-full.txt [skip ci]

feat(A): OOB fallback for provision_vcs_auth and provision_auth

feat(A): OOB fallback for provision_vcs_auth and provision_auth

feat(E): resolve {{secure.NAME}} tokens as PEM content in setup_git_app

chore: mark E complete in progress.json

review: Features A and E

polish: generic secure-input message, rename smoke script, document {{secure.NAME}} fields

polish: fix {{secure.NAME}} warning example in skills

cleanup: remove fleet control files