[feat] Write-only vault secrets (values never readable back by users) - #6164

Merged

mmabrouk merged 31 commits into

release/v0.114.0from

write-only-secrets-api

Aug 23, 2026

Commits on Aug 23, 2026

feat(api,sdk): write-only vault secrets (values never readable back by users)
mmabrouk
committed
a27686d
feat(api): gate the write-only default behind AGENTA_VAULT_WRITE_ONLY_DEFAULT
mmabrouk
committed
26b8a15
fix(api,sdk): close write-only leak paths from review (shared classifier, outward surfaces, cache generation, atomic one-way, identity-local carry-over)
mmabrouk
committed
22fc179
fix(api): build the update-path secret payload at every vault update call site
mmabrouk
committed
f470762
fix(api): keep webhook signing secrets readable to the subscriber
mmabrouk
committed
9fb88ef
refactor(api): stop caching the vault secrets list
mmabrouk
committed
58b74c9
fix(sdk): use this run's own provider key when the vault redacts a write-only secret
mmabrouk
committed
876233d
fix(api): stop the permissions exchange from minting the secret-resolve grant
mmabrouk
committed
c7ed707
fix(api): carry a secret's kept credential over from the locked row
mmabrouk
committed
8c10305
fix(sdk): accept every credential channel a redacted connection could use
mmabrouk
committed
0604378
fix(api): require a client secret when an SSO secret is created
mmabrouk
committed
15b2978
chore: allow four unit-test credential fixtures that survive in history
mmabrouk
committed
0598972
fix(api): keep the SSO client secret plaintext where it authenticates
mmabrouk
committed
d8b2577
fix(api): treat a custom secret's format as part of its identity
mmabrouk
committed
9dcb402
fix(api,sdk): issue the run credential's grant to the platform runtime, not to whoever asks
mmabrouk
committed
71a2857
fix(api,sdk): refuse the placeholder as proof of being the platform runtime
mmabrouk
committed
037feb0
test(services): pin what the agent app sends when it exchanges a caller's key
mmabrouk
committed
dbae9c1
fix(sdk): say when the platform runtime key is missing, instead of blaming the provider key
mmabrouk
committed
6adce72
chore: exempt two dead fixture strings by value, not by fingerprint
mmabrouk
committed
d373758
feat(api): warn at startup when write-only secrets have no runtime key
mmabrouk
committed
c21b86b
fix(api): do not assume the EE bridge config exists at startup
mmabrouk
committed
e697aa2
fix(api): enforce the write-only secrets contract
mmabrouk
committed
5353e2f
refactor(api): separate write-only secret DTO roles
mmabrouk
committed
44c16bf
fix(api): fail startup without the runtime key
mmabrouk
committed
8fb95b8
fix(api): preserve unauthorized grant failures
mmabrouk
committed
fb05f40
test(api): isolate grant exchange authorization
mmabrouk
committed
2c9b0c1
fix(api): keep managed secrets in their own PR
mmabrouk
committed
6be5ebf
fix(sdk): consume value status for redacted secrets
mmabrouk
committed
1a2a5de
refactor(api): keep webhook secrets explicitly readable
mmabrouk
committed
afcb1c8
fix(api): clarify blank secret updates
mmabrouk
committed
324e20b
fix(secrets): isolate custom gateway credentials
mmabrouk
committed
52d3ca5

Navigation Menu

Uh oh!

[feat] Write-only vault secrets (values never readable back by users) - #6164

[feat] Write-only vault secrets (values never readable back by users)#6164
mmabrouk merged 31 commits into
release/v0.114.0from
write-only-secrets-api

Commits on Aug 23, 2026

feat(api,sdk): write-only vault secrets (values never readable back by users)

feat(api): gate the write-only default behind AGENTA_VAULT_WRITE_ONLY_DEFAULT

fix(api,sdk): close write-only leak paths from review (shared classifier, outward surfaces, cache generation, atomic one-way, identity-local carry-over)

fix(api): build the update-path secret payload at every vault update call site

fix(api): keep webhook signing secrets readable to the subscriber

refactor(api): stop caching the vault secrets list

fix(sdk): use this run's own provider key when the vault redacts a write-only secret

fix(api): stop the permissions exchange from minting the secret-resolve grant

fix(api): carry a secret's kept credential over from the locked row

fix(sdk): accept every credential channel a redacted connection could use

fix(api): require a client secret when an SSO secret is created

chore: allow four unit-test credential fixtures that survive in history

fix(api): keep the SSO client secret plaintext where it authenticates

fix(api): treat a custom secret's format as part of its identity

fix(api,sdk): issue the run credential's grant to the platform runtime, not to whoever asks

fix(api,sdk): refuse the placeholder as proof of being the platform runtime

test(services): pin what the agent app sends when it exchanges a caller's key

fix(sdk): say when the platform runtime key is missing, instead of blaming the provider key

chore: exempt two dead fixture strings by value, not by fingerprint

feat(api): warn at startup when write-only secrets have no runtime key

fix(api): do not assume the EE bridge config exists at startup

fix(api): enforce the write-only secrets contract

refactor(api): separate write-only secret DTO roles

fix(api): fail startup without the runtime key

fix(api): preserve unauthorized grant failures

test(api): isolate grant exchange authorization

fix(api): keep managed secrets in their own PR

fix(sdk): consume value status for redacted secrets

refactor(api): keep webhook secrets explicitly readable

fix(api): clarify blank secret updates

fix(secrets): isolate custom gateway credentials