Commit Graph

16 Commits

Author SHA1 Message Date
Manoj Bajaj e2e82dff6a Merge branch 'develop' into convenience-ux-issues 2026-04-29 15:57:13 +05:30
beubax e831c53287 refactor: simplify CLI usage by removing complex setup instructions and mentions of init; update export to set environment variables directly 2026-04-29 13:50:19 +05:30
Manoj Bajaj a57a7de009 feat: support regex proxy host urls 2026-04-29 12:48:00 +05:30
Manoj Bajaj 946576a652 fix: keep proxy routing on default connections 2026-04-28 17:44:47 +05:30
Manoj Bajaj 0fd02c6530 fix: harden auth proxy routing 2026-04-28 17:36:22 +05:30
beubax ee172dbbee feat: add base URL templating support for providers 2026-04-27 17:12:13 +05:30
Manoj Bajaj f53f86c1fe docs: Remove superpower 2026-04-27 14:37:31 +05:30
Manoj Bajaj ffeda6500c chore: update lock files and add implementation plan for loguru migration
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-27 14:37:31 +05:30
Manoj Bajaj e4eef7a7e2 docs: clarify authsome architecture direction 2026-04-27 12:22:19 +05:30
Manoj Bajaj 7cc0e2cc37 docs: Add documentation for current design and future direction 2026-04-27 11:05:52 +05:30
Manoj Bajaj bfd75eeae0 feat!: v0.2.0 — Vault + AuthLayer architecture, InputProvider, FlowResult
BREAKING CHANGE: Complete internal restructuring. All public Python API
has moved; CLI commands and flags are unchanged.

Architecture changes:
- Introduce Vault layer (vault/) — generic encrypted KV store; replaces
  store/ + crypto/ monolith. Compact AES-256-GCM format, LocalFile and
  Keyring backends.
- Introduce AuthLayer (auth/) — owns flows, token refresh, login/logout/
  revoke. Receives Vault + ProviderRegistry as deps; no direct crypto.
- Introduce AuthsomeContext (context.py) — thin wiring container
  replacing AuthClient as the CLI entry point.
- Move flows/ → auth/flows/, models/ → auth/models/,
  providers/ → auth/providers/. Delete store/, crypto/, client.py.

New features:
- InputProvider protocol: BridgeInputProvider, InteractiveInputProvider,
  MockInputProvider — replaces ad-hoc secure_input_bridge calls and
  simplifies test setup.
- FlowResult dataclass: flows now return FlowResult(connection,
  client_record) instead of a bare ConnectionRecord. DCR flow populates
  client_record only when it actually registered a new client.
- RequestRouter class removed; routing inlined as _route() module-level
  function in proxy/server.py. AuthProxyAddon takes only auth: AuthLayer.
- ConnectionRecord v2: tokens are plaintext str (Vault handles
  encryption at rest). Sensitive annotation marks fields for redaction.

Docs:
- docs/UBIQUITOUS_LANGUAGE.md: added Architecture Layers section (Vault,
  AuthLayer, AuthsomeContext, Sensitive); deprecated CredentialStore,
  CryptoBackend, EncryptedField.
- docs/manual-testing.md: end-to-end manual testing guide.

Tests reorganized under tests/auth/, tests/vault/, tests/proxy/,
tests/common/. 262 tests pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-26 13:15:05 +05:30
Manoj Bajaj 4c756a07b4 fix: add host_url to bundled providers and update docs for current API
Add host_url field to atlassian, discord, gitlab, hubspot, microsoft,
notion, and slack provider JSON configs. Fix docs to reflect current
flow names (api_key, device_code), add --show-secret to README example,
and remove --profile flag references that are no longer supported.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-24 20:14:44 +05:30
Manoj Bajaj 456d9bd811 feat: add proxy runner, RC publishing, and OAuth scope support (#53)
- Add local HTTP proxy runner for on-the-fly credential injection in child processes
- Add RC publish workflow triggered on successful tests on develop branch
- Add OAuth scope management and prompting during client login
2026-04-24 15:03:12 +05:30
Manoj Bajaj 4b7dad4fef docs: overhaul authsome skill and consolidate reference docs (#46)
- Simplify SKILL.md to focus on three happy paths: list, login, run
- Remove secret extraction guidance (export, --field, --show-secret) from skill
- Add security notes: no secrets in chat, verify OAuth endpoints, only run trusted commands
- Move REGISTER_PROVIDER.md and CLI_REFERENCE.md into docs/ as register-provider.md and merged into cli.md
- Cross-reference cli.md against actual CLI implementation; fix --flow valid values, add --show-secret to get, add -p alias for run, remove non-existent --connection from run
- Update evals to match revised skill (remove export/echo eval, fix provider registration path)
- All doc references now use raw GitHub URLs so agents can fetch them directly

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-23 13:10:07 +05:30
Tejas 69bc5d4018 Add undo functions (#34)
* feat: replace reset flow with force flag and reorganize provider lifecycle commands into logout, revoke, and remove

* feat: update remove command to support resetting bundled providers alongside local ones
2026-04-22 13:02:46 +05:30
Manoj Bajaj 12cbfae72f docs: refresh readme (#30) 2026-04-22 12:26:31 +05:30