Skip to content

feat(secrets): support prompt secret references - #376

Draft
JongSikLim wants to merge 1 commit into
mainfrom
feat/secret-references
Draft

feat(secrets): support prompt secret references#376
JongSikLim wants to merge 1 commit into
mainfrom
feat/secret-references

Conversation

@JongSikLim

Copy link
Copy Markdown
Contributor

Summary

  • add @secret:{ENV_VAR_NAME} references backed by the main-owned encrypted secret vault
  • inject resolved values only into primary provider runtime environments while keeping plaintext out of renderer and model-visible channels
  • document the syntax, surface it in Settings > Secrets, and cover valid, missing, protected, malformed, and read-only cases

Verification

  • bun test tests/secrets.test.ts tests/secrets-settings.test.tsx tests/codex-app-server-secret-env.test.ts tests/codex-app-server-mcp-lifecycle.test.ts (47 pass)
  • bun run typecheck
  • bun run build:desktop
  • bun run check:licenses
  • bun run check:reliability-gates
  • bun run check:doc-paths
  • bun run check:max-lines-ratchet
  • bun run check:switch-exhaustiveness

Browser visual validation was not run; the Settings copy is covered by the focused SSR rendering test.

@upwind-code-us

upwind-code-us Bot commented Aug 13, 2026

Copy link
Copy Markdown

Upwind Upwind Code Scan - ✅ Proceed with Deployment

0 newly introduced vulnerabilities · 0 resolved · 0 total in this PR vs the default branch

View full analysis in Upwind Console

Scan completed in 17s

Scan history (2 scans)
Commit Scanned at New Resolved Net
a7ed089 2026-08-13 05:04 UTC
a7ed089 < 2026-08-13 05:04 UTC 0 0 0

Last scanned: a7ed089 · 2026-08-13 05:04 UTC

@upwind-code-us

upwind-code-us Bot commented Aug 13, 2026

Copy link
Copy Markdown

Upwind Upwind IaC Scan - ✅ Proceed with Deployment

0 newly introduced misconfigurations · 0 resolved · 0 total in this PR vs main

View full analysis in Upwind Console →

Scan completed in 6s

Scan history (1 scan)
Commit Scanned at New Resolved Net
a7ed089 < 2026-08-13 05:04 UTC 0 0 0

Last scanned: a7ed089 · 2026-08-13 05:04 UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant