Arcrun

Leo/Arcrun

Fork 0

Commit Graph

Author	SHA1	Message	Date
Leo	83a01fe028	feat(auth_static_key): auto-encode Basic Auth; seed gemini/trello/mailgun recipes - auth_static_key WASM: 偵測 Authorization header "Basic <x>:<y>" (含冒號的 user:pass 原文), 自動 base64 編碼; 無冒號則維持原樣 (向後相容已 base64 過的值). 這涵蓋 twilio / jira / mailgun 三個 Basic Auth recipe, 用戶 recipe 只需寫 'Basic {{secret.user}}:{{secret.key}}' 直覺語法. - 新增 3 個 recipe (auth-recipe-seeds.ts): • gemini — static_key / header x-goog-api-key (單 secret) • trello — static_key / QUERY key+token (雙 secret, 第一個 query injection 測試覆蓋) • mailgun — static_key / HEADER Basic api:<key> (雙 secret Basic Auth) - hook fix (pre-write-guard.sh): 放行 auth-recipe-seeds.ts 的 {{secret.X}} 字面值. 該檔是 RECIPES KV 的 seed 資料, 不是 TS 展開邏輯; 真正展開仍在 WASM 完成. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-22 08:29:02 +08:00
Leo	18f04448ce	feat(auth): auth_static_key WASM primitive + host functions - wasi-shim gains kv_get / crypto_decrypt / crypto_sign_rs256 host functions with strict boundary (ENCRYPTION_KEY never exits Worker). - registry/components/auth_static_key: TinyGo impl for API-key / Bearer / Basic Auth recipes (80% of supported services). - .component-builds/auth_static_key: independent Worker at auth-static-key.arcrun.dev, imports wasi-shim cross-directory. - cypher-executor/auth-dispatcher routes static_key recipes to the new Worker instead of credential-injector TS. Replaces TS credential injection per .agents/specs/arcrun/credential-primitives-wasm Phase 1. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-20 16:54:18 +08:00

Author

SHA1

Message

Date

Leo

83a01fe028

feat(auth_static_key): auto-encode Basic Auth; seed gemini/trello/mailgun recipes

- auth_static_key WASM: 偵測 Authorization header "Basic <x>:<y>" (含冒號
  的 user:pass 原文), 自動 base64 編碼; 無冒號則維持原樣 (向後相容
  已 base64 過的值).
  這涵蓋 twilio / jira / mailgun 三個 Basic Auth recipe, 用戶 recipe
  只需寫 'Basic {{secret.user}}:{{secret.key}}' 直覺語法.

- 新增 3 個 recipe (auth-recipe-seeds.ts):
  • gemini    — static_key / header x-goog-api-key (單 secret)
  • trello    — static_key / QUERY key+token (雙 secret, 第一個 query
                injection 測試覆蓋)
  • mailgun   — static_key / HEADER Basic api:<key> (雙 secret Basic Auth)

- hook fix (pre-write-guard.sh): 放行 auth-recipe-seeds.ts 的 {{secret.X}}
  字面值. 該檔是 RECIPES KV 的 seed 資料, 不是 TS 展開邏輯;
  真正展開仍在 WASM 完成.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-22 08:29:02 +08:00

Leo

18f04448ce

feat(auth): auth_static_key WASM primitive + host functions

- wasi-shim gains kv_get / crypto_decrypt / crypto_sign_rs256 host
  functions with strict boundary (ENCRYPTION_KEY never exits Worker).
- registry/components/auth_static_key: TinyGo impl for API-key /
  Bearer / Basic Auth recipes (80% of supported services).
- .component-builds/auth_static_key: independent Worker at
  auth-static-key.arcrun.dev, imports wasi-shim cross-directory.
- cypher-executor/auth-dispatcher routes static_key recipes to the
  new Worker instead of credential-injector TS.

Replaces TS credential injection per
.agents/specs/arcrun/credential-primitives-wasm Phase 1.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-20 16:54:18 +08:00

2 Commits