mirror of
https://github.com/Dvorinka/Primora.git
synced 2026-10-28 07:41:23 +00:00
Tomas DvorakandDevin
585bb04ab2
Local vault (apps/cli): clean-room PRMVLT01 format — Argon2id → XChaCha20-Poly1305, AEAD-bound header, atomic writes. vault:* / secrets:* / inject (primora:// refs) / agent credential broker (dummy tokens in the child, real secret on the wire) / TTL sessions / stack:* operator group. Project vault (backend): core.project_secrets, AES-256-GCM via the platform encryptor. Metadata-only list, audit-logged reveal, and secret://NAME refs resolved at job delivery — refs stored, values never. Surfaces: dashboard Vault page (+ local-vault card under the Tauri shell), desktop vault window via IPC to the primora binary, secrets:* --remote CLI mode, metadata/write-only MCP tools so agents consume secrets via secret:// refs without holding plaintext. Authored By: TDvorak <[email protected]> Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
37 lines
908 B
TypeScript
37 lines
908 B
TypeScript
/* generated using openapi-typescript-codegen -- do not edit */
|
|
/* istanbul ignore file */
|
|
/* tslint:disable */
|
|
/* eslint-disable */
|
|
export const $ProjectSecret = {
|
|
properties: {
|
|
id: {
|
|
type: 'string',
|
|
isRequired: true,
|
|
format: 'uuid',
|
|
},
|
|
name: {
|
|
type: 'string',
|
|
description: `Env-var-safe name; referenced as secret://NAME in job payloads.`,
|
|
isRequired: true,
|
|
},
|
|
url: {
|
|
type: 'string',
|
|
isRequired: true,
|
|
},
|
|
notes: {
|
|
type: 'string',
|
|
isRequired: true,
|
|
},
|
|
created_at: {
|
|
type: 'string',
|
|
isRequired: true,
|
|
format: 'date-time',
|
|
},
|
|
updated_at: {
|
|
type: 'string',
|
|
isRequired: true,
|
|
format: 'date-time',
|
|
},
|
|
},
|
|
} as const;
|