Skip to content

feat(auth): bind stored credentials to explicit transport destinations - #188

Draft
YoungSx wants to merge 25 commits into
mainfrom
feat/acp-credential-bindings
Draft

feat(auth): bind stored credentials to explicit transport destinations#188
YoungSx wants to merge 25 commits into
mainfrom
feat/acp-credential-bindings

Conversation

@YoungSx

@YoungSx YoungSx commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

配置编辑页与 CLI 现在可以把保存的 Token / API Key 绑定到当前 stdio 命令的环境变量,或完整 HTTP / 桌面 WebSocket 地址的指定请求头。修改目的地后需重新绑定;网络请求禁止重定向,浏览器 WebSocket 提示使用 HTTP。

凭据不回显:留空保留,显式清除才删除。连接复用比对内存中的不可变凭据快照,清除或更换后旧初始化不会恢复旧连接;秘密和秘密哈希不进入普通 YAML、缓存键或日志。正式 GUI 门禁核验安全存储文件的写入、重启和删除。

包含 #184 鉴权边界及 #186 取消/权限归属前置,并修正配置菜单原生可访问名称与启动焦点时序。终端交互登录单独跟踪于 #190。Refs #144,不关闭总单。

验证(当前 7a14e51c):

  • SDK 647/647;格式、分析器、Release 构建、1.0.0 包兼容与真实外部 consumer 全通过,含旧 transport binary 和 37 个草案类型编译保护。
  • Desktop Release 0 警告 / 0 错误;WASM Release 3 条已有 Uno 模板警告 / 0 错误
  • 本次真实 WASM 产物的正式凭据 GUI 通过:绑定→移除→换目标→再绑、保存 canary→重启、清除→撤销→再清除→保存→确认 .secret 删除→再次重启;HTTP/WS 零请求,metadata/console/pageerror 无秘密。
  • 功能阶段配置、连接复用、真实传输及重定向 canary、CLI 发布产物和相关反向验证已通过;本次完整平台 CI 继续核验。

保持 draft:GUI 仅在本次 en-US WASM 产物实测。Windows/移动端真实 GUI、真实第三方 Agent 和生产 bridge 尚未验收,不能由模拟对端或条件跳过替代。

Default only an absent v1 type to agent, reject non-string discriminators, and preserve unsupported strings and payload fields. Share version-aware authentication serialization across DTO, collection, and initialize roots so unknown fields cannot override the negotiated method identity.

Add raw initialize transport regressions, presentation selection coverage, and schema round-trip properties. Validation: 593 SDK tests, 26 presentation authentication tests, analyzer and package validation, external nupkg consumer, and a 9-case failing whitelist mutation.

Refs #147
@vercel

vercel Bot commented Sep 9, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
salmonegg Ready Ready Preview Sep 9, 2026 3:42pm UTC

Wait for the native canvas and splash removal within the existing boot deadline before enabling accessibility once. Uno 6.7.103 (cd452e3ee242c9a2a8dee5e65ad8088b6f5dbf83) can retain initial sibling bounds when ancestor layout moves after early semantic activation, causing pointer gates to click an adjacent card.

Validated against the same Debug product with CPU throttle 4: early activation fails, late activation passes, restoring early fails, restoring late passes. The unchanged two-round pointer gate passes with the final helper at CPU rates 4 and 1. Product focus code is unchanged.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant