TDvorak/Primora
1
0 Fork 0
mirror of https://github.com/Dvorinka/Primora.git synced 2026-10-28 15:51:23 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: encrypted secrets vault across CLI, desktop, dashboard, and backend

Browse Source 
Local vault (apps/cli): clean-room PRMVLT01 format — Argon2id →
XChaCha20-Poly1305, AEAD-bound header, atomic writes. vault:* / secrets:*
/ inject (primora:// refs) / agent credential broker (dummy tokens in the
child, real secret on the wire) / TTL sessions / stack:* operator group.

Project vault (backend): core.project_secrets, AES-256-GCM via the
platform encryptor. Metadata-only list, audit-logged reveal, and
secret://NAME refs resolved at job delivery — refs stored, values never.

Surfaces: dashboard Vault page (+ local-vault card under the Tauri
shell), desktop vault window via IPC to the primora binary,
secrets:* --remote CLI mode, metadata/write-only MCP tools so agents
consume secrets via secret:// refs without holding plaintext.

Authored By: TDvorak <[email protected]>

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
Tomas DvorakandDevin committed 2026-09-24 18:46:37 +02:00
1 parent 31bc23386b
commit 585bb04ab2
52 files changed
+3929 -142
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

packages/api-client/src/generated/index.ts
+11
View File
@@ -96,8 +96,11 @@ export type { Project } from './models/Project';
export type { ProjectID } from './models/ProjectID';
export { ProjectMember } from './models/ProjectMember';
export type { ProjectOverview } from './models/ProjectOverview';
export type { ProjectSecret } from './models/ProjectSecret';
export type { ProjectSecretListResponse } from './models/ProjectSecretListResponse';
export type { ProjectSummary } from './models/ProjectSummary';
export type { ReadinessStatus } from './models/ReadinessStatus';
export type { RevealProjectSecretResponse } from './models/RevealProjectSecretResponse';
export type { RybbitMetricItem } from './models/RybbitMetricItem';
export type { RybbitSite } from './models/RybbitSite';
export { ScheduledJob } from './models/ScheduledJob';
@@ -106,6 +109,8 @@ export type { ScheduledJobListResponse } from './models/ScheduledJobListResponse
export { ScheduledJobRun } from './models/ScheduledJobRun';
export type { ScheduledJobRunListResponse } from './models/ScheduledJobRunListResponse';
export type { SchemaQuery } from './models/SchemaQuery';
export type { SecretName } from './models/SecretName';
export type { SetProjectSecretRequest } from './models/SetProjectSecretRequest';
export type { TableQuery } from './models/TableQuery';
export type { TelemetryComponent } from './models/TelemetryComponent';
export type { TelemetryComponentListResponse } from './models/TelemetryComponentListResponse';
@@ -223,8 +228,11 @@ export { $Project } from './schemas/$Project';
export { $ProjectID } from './schemas/$ProjectID';
export { $ProjectMember } from './schemas/$ProjectMember';
export { $ProjectOverview } from './schemas/$ProjectOverview';
export { $ProjectSecret } from './schemas/$ProjectSecret';
export { $ProjectSecretListResponse } from './schemas/$ProjectSecretListResponse';
export { $ProjectSummary } from './schemas/$ProjectSummary';
export { $ReadinessStatus } from './schemas/$ReadinessStatus';
export { $RevealProjectSecretResponse } from './schemas/$RevealProjectSecretResponse';
export { $RybbitMetricItem } from './schemas/$RybbitMetricItem';
export { $RybbitSite } from './schemas/$RybbitSite';
export { $ScheduledJob } from './schemas/$ScheduledJob';
@@ -233,6 +241,8 @@ export { $ScheduledJobListResponse } from './schemas/$ScheduledJobListResponse';
export { $ScheduledJobRun } from './schemas/$ScheduledJobRun';
export { $ScheduledJobRunListResponse } from './schemas/$ScheduledJobRunListResponse';
export { $SchemaQuery } from './schemas/$SchemaQuery';
export { $SecretName } from './schemas/$SecretName';
export { $SetProjectSecretRequest } from './schemas/$SetProjectSecretRequest';
export { $TableQuery } from './schemas/$TableQuery';
export { $TelemetryComponent } from './schemas/$TelemetryComponent';
export { $TelemetryComponentListResponse } from './schemas/$TelemetryComponentListResponse';
@@ -270,6 +280,7 @@ export { IntegrationsService } from './services/IntegrationsService';
export { OrganizationsService } from './services/OrganizationsService';
export { PlatformService } from './services/PlatformService';
export { ProjectsService } from './services/ProjectsService';
export { SecretsService } from './services/SecretsService';
export { StorageService } from './services/StorageService';
export { TelemetryService } from './services/TelemetryService';
export { WebhooksService } from './services/WebhooksService';