47 Commits

Author	SHA1	Message	Date
agent	5333b863c5	refactor(entries): 将编辑弹窗中的密文管理功能移到查看密文弹窗 ... - 编辑弹窗移除密文区域（重命名、类型修改、解绑） - 查看密文弹窗增加：重命名（带 debounce 校验）、类型选择、解绑、保存 - 列表行密文 chips 保留只读展示，移除解绑按钮 - 简化编辑弹窗保存逻辑，不再处理密文变更 - bump 0.5.12	2026-04-07 13:32:29 +08:00
agent	6fde982c20	refactor(entries): 将编辑弹窗中的密文管理功能移到查看密文弹窗 ... - 编辑弹窗移除密文区域（重命名、类型修改、解绑） - 查看密文弹窗增加：重命名（带 debounce 校验）、类型选择、解绑、保存 - 列表行密文 chips 保留只读展示，移除解绑按钮 - 简化编辑弹窗保存逻辑，不再处理密文变更	2026-04-07 13:25:33 +08:00
agent	a2a80a1744	fix(dashboard): 修正 OpenCode MCP 配置，移除 enabled 字段、添加 oauth: false	2026-04-07 11:17:03 +08:00
agent	dfe282095c	feat(dashboard): OpenCode MCP 配置改用原生 Streamable HTTP，移除 mcp-remote 中转；bump 0.5.11	2026-04-07 10:43:17 +08:00
voson	59084a409d	release(secrets-mcp): 0.5.10 — Web 模块化、性能与错误处理 ... - 拆分 web.rs 为 web/ 子模块；统一 client_ip 提取 - core: user_scope SQL 复用、env_map N+1 消除、FETCH_ALL 上限调整 - entries 列表页并行查询；PgPool 去 Arc；结构化 NotFound 等错误 - CI: SSH 私钥安全写入；crypto/hex 与依赖清理；MCP 输入长度校验 - AGENTS: API Key 明文存储设计说明	2026-04-06 23:41:07 +08:00
voson	b0fcb83592	release(secrets-mcp): 0.5.9 — users.key_version 与会话失效；Web 条目解密 API 与列表增强	2026-04-06 17:23:20 +08:00
voson	53d53ff96a	release(secrets-mcp): 0.5.8 — 修复更换密码短语流程 ... - secrets-core: change_user_key() 事务内全量解密并重加密 secrets - web: POST /api/key-change；已有密钥时拒绝 POST /api/key-setup（409） - dashboard: 更换密码需当前密码，调用 key-change - 同步 Cargo.lock	2026-04-06 12:04:35 +08:00
voson	cab234cfcb	feat(secrets-mcp): 增强 MCP 请求日志与 encryption_key 参数支持 ... logging.rs: - 每条 MCP POST 日志新增 auth_key（Bearer token 前12字符掩码）、 enc_key（X-Encryption-Key 前4后4字符指纹，如 146b…5516(64) 或 absent）、 user_id、tool_args（白名单非敏感参数摘要）字段 - 新增辅助函数 mask_bearer / mask_enc_key / extract_tool_args / summarize_value tools.rs: - extract_enc_key 成功路径增加 debug 级指纹日志（raw_len/trimmed_len/prefix/suffix） - 新增 extract_enc_key_or_arg / require_user_and_key_or_arg：优先使用参数传入的密钥， fallback 到 X-Encryption-Key 头，绕过 Cursor Chat MCP 头透传异常 - GetSecretInput / AddInput / UpdateInput / ExportInput / EnvMapInput 各增加可选 encryption_key 字段，对应工具实现改用 require_user_and_key_or_arg	2026-04-06 11:03:01 +08:00
voson	e0fee639c1	release(secrets-mcp): 0.5.7	2026-04-05 17:07:31 +08:00
voson	63cb3a8216	release(secrets-mcp): 0.5.6 ... 修复 OAuth 解绑时非法聚合 FOR UPDATE，Web OAuth 审计 IP 与 TRUST_PROXY 对齐并校验 IP，账号绑定写入 oauth_state 失败时回滚 bind 标记。回滚条目时恢复 folder/type，导入冲突检查在 DB 失败时传播错误，MCP delete/history 要求已登录用户，全局请求体 10MiB 限制。CI 部署支持 DEPLOY_KNOWN_HOSTS，默认 accept-new；文档与 deploy 示例补充连接池、限流、TRUST_PROXY。移除含明文凭据的 sync-test-to-prod 脚本。	2026-04-05 15:29:03 +08:00
voson	2b994141b8	release(secrets-mcp): 0.5.5 — 生产 CORS 显式 allow_methods，修复 tower-http 启动 panic ... credentials + wildcard methods/headers 被 tower-http 禁止；生产环境改为 GET/POST/PATCH/DELETE/OPTIONS 白名单。	2026-04-05 12:27:40 +08:00
voson	9d6ac5c13a	release(secrets-mcp): 0.5.4 — Web 分页修正与 hex 解码；批量删除上限；MCP @ 路径检测	2026-04-05 12:14:40 +08:00
voson	1860cce86c	release(secrets-mcp): 0.5.3 — 审计日志分页与 Web；CONTRIBUTING；文档与模板修正	2026-04-05 11:34:04 +08:00
agent	dd24f7cc44	release: secrets-mcp 0.5.2 ... Bump version: secrets-mcp-0.5.1 tag already existed while crates had further changes. Made-with: Cursor	2026-04-05 10:38:50 +08:00
voson	aefad33870	chore(secrets-mcp): 0.5.1 — 移除 entry type 归一化，MCP 参数兼容字符串形式 ... - 去掉 taxonomy 对 entry type 的自动映射与 metadata.subtype 回填；仅 trim 后入库 - MCP tools：Vec/Map/bool 等可选字段支持 JSON 内嵌字符串解析，并改进解析失败提示 - 新增 deser 单元测试；README/AGENTS 与 models 注释同步 Made-with: Cursor	2026-04-04 21:27:33 +08:00
voson	0ffb81e57f	feat: entry update links existing secrets (link_secret_names) ... - secrets-core: update flow validates and applies secret links - secrets-mcp: MCP tool params and UI for managing links on edit - Align errors and templates; minor crypto/.gitignore tweaks Made-with: Cursor	2026-04-04 20:30:32 +08:00
voson	1518388374	chore(release): secrets-mcp 0.4.0 ... Bump version for the N:N entry_secrets data model and related MCP/Web changes. Remove superseded SQL migration artifacts; rely on auto-migrate. Add structured errors, taxonomy normalization, and web i18n helpers. Made-with: Cursor	2026-04-04 17:58:12 +08:00
voson	32f275f88a	feat(secrets-mcp): bump 0.3.9 and normalize listen address log ... Prepare a new release version and improve startup log readability by showing localhost for loopback bind addresses without changing runtime binding behavior. Made-with: Cursor	2026-04-03 19:36:12 +08:00
王松	c6fb457734	feat(nn): entry–secret N:N, unique secret names, web unlink ... Bump secrets-mcp to 0.3.8 (tag 0.3.7 already used). - Junction table entry_secrets; secrets user-scoped with type - Per-user unique secrets.name; link_secret_names on add - Manual migrations + migrate script; MCP/tool and Web updates Made-with: Cursor	2026-04-03 17:37:04 +08:00
agent	df701f21b9	feat(secrets-mcp): 共享 key 删除时自动迁移并重定向 (v0.3.7) ... 删除仍被 metadata.key_ref 引用的 key 条目时，在同一事务内将密文复制到首个引用方， 其余引用方的 key_ref 重定向到新 owner；env_map 解析 key_ref 时不再限定 type=key。 Web 删除 API 返回 migrated；Dashboard 删除成功后提示迁移。 Bump secrets-mcp to 0.3.7；补充删除迁移相关单测（需 SECRETS_DATABASE_URL）。 Made-with: Cursor	2026-04-03 09:27:20 +08:00
agent	c3c536200e	feat(secrets-mcp): Web 条目编辑 API 与 Notes 列表展示优化（0.3.6） ... - secrets-core: EntryWriteRow；按 id 更新/删除（含并发冲突与唯一键） - Web: PATCH/DELETE /api/entries/{id}；列表编辑/删除与错误映射 - entries 模板：Notes 限高滚动；空 Notes 不显示占位框 - 版本 0.3.5 → 0.3.6，同步 Cargo.lock Made-with: Cursor	2026-04-02 14:58:10 +08:00
agent	7909f7102d	feat(secrets-mcp): 条目页按 folder/type 筛选并发版 0.3.5 ... - entries 路由支持 ?folder=&type= 查询，与搜索层 SearchParams 对齐 - 条目列表页增加筛选表单与说明文案 - 版本 0.3.4 → 0.3.5，同步 Cargo.lock Made-with: Cursor	2026-04-02 14:37:36 +08:00
agent	87a29af82d	feat(web): 条目列表页 /entries 与总条数统计 ... - 新增受会话保护的 GET /entries，仅展示 entries 非敏感列 - search: list_entries、count_entries 共享筛选条件；分页与计数不读 secrets - 侧边栏在 dashboard/audit 增加「条目」入口 - secrets-mcp 0.3.4（tag 尚未存在） Made-with: Cursor	2026-04-02 11:26:51 +08:00
agent	1b11f7e976	release(secrets-mcp): v0.3.3 — 强制 PostgreSQL TLS 校验 ... 显式引入数据库 TLS 配置并在生产环境拒绝弱 sslmode，避免连接静默降级。同步更新 deploy/README 与运维 runbook，落地 db.refining.ltd 的证书与服务器配置流程。 Made-with: Cursor	2026-04-01 15:18:14 +08:00
agent	08e81363c9	release(secrets-mcp): v0.3.2 — 修复 key_ref 多租户与歧义 ... - env_map：key_ref 解析传入 user_id；支持 folder/name；多条匹配时报错 - 文档同步 key_ref 说明 - bump secrets-mcp 0.3.1 → 0.3.2，更新 Cargo.lock Made-with: Cursor	2026-03-27 10:45:12 +08:00
voson	beade4503d	release(secrets-mcp): v0.3.1 ... - MCP: secrets_find, secrets_overview; secrets_get id-only; id on update/delete/history/rollback - Add meta_obj/secrets_obj; delete guard; env_map/instructions updates - Core: resolve_entry_by_id; get_*_by_id validates entry + tenant before decrypt Made-with: Cursor	2026-03-26 17:35:56 +08:00
voson	409fd78a35	Release secrets-mcp 0.3.0: folder/type schema and MCP folder disambiguation ... - Rename namespace/kind to folder/type on entries, audit_log, and history tables; add notes. Unique key is (user_id, folder, name). - Service layer and MCP tools support name-first lookup with optional folder when multiple entries share the same name. - secrets_delete dry_run uses the same disambiguation as real deletes. - Add scripts/migrate-v0.3.0.sql for manual DB migration. Refresh README and AGENTS.md. Made-with: Cursor	2026-03-26 15:12:28 +08:00
voson	719bdd7e08	feat(secrets-mcp): public home at /, login at /login (0.2.2) ... Bump secrets-mcp to 0.2.2 and sync Cargo.lock. Add home.html landing with SEO and footer link to the refining/secrets repository; serve it at / and expose /login for sign-in. Update OAuth error redirects and dashboard unauthenticated redirects to /login. Improve login page meta tags, back-home link, and OAuth error alert. Refresh llms.txt and robots.txt. Made-with: Cursor	2026-03-22 16:11:59 +08:00
voson	1e597559a2	feat(core): FK for user_id columns; MCP search requires user ... - Add fk_entries_user_id, fk_entries_history_user_id, fk_audit_log_user_id (ON DELETE SET NULL) - Add scripts/cleanup-orphan-user-ids.sql for pre-deploy orphan user_id cleanup - Remove deprecated SERVER_MASTER_KEY / per-user key wrap helpers from secrets-core - secrets-mcp: require authenticated user for secrets_search; improve body-read failure response - Bump secrets-mcp to 0.2.1 Made-with: Cursor	2026-03-22 15:40:02 +08:00
voson	e3ca43ca3f	release(secrets-mcp): 0.2.0 ... - 日志时间戳使用本地时区（chrono RFC3339 + 偏移） - MCP tools / Web 路由与行为调整 - 新增 static/llms.txt、robots.txt；文档与 deploy 示例同步 Made-with: Cursor	2026-03-22 14:44:00 +08:00
voson	0b57605103	feat(secrets-mcp): MCP 请求日志、探测 404 与资源元数据 ... - 新增 logging 中间件：记录 client_ip、ua、JSON-RPC、tool 等 - tools 各入口/出口结构化日志 - 探测型 404（/.well-known、GET /mcp）降为 debug - /.well-known/oauth-protected-resource 最小元数据 - secrets-mcp 0.1.11 Made-with: Cursor	2026-03-21 17:57:10 +08:00
voson	b6349dd1c8	chore(secrets-mcp): bump version to 0.1.10 ... Made-with: Cursor	2026-03-21 16:46:33 +08:00
voson	f720983328	refactor(db): 移除无意义 actor，修复 history 多租户与模型 ... - 删除 entries_history / audit_log / secrets_history 的 actor 列及写入逻辑 - MCP secrets_history 透传当前 user_id - Entry 增加 user_id，search 查询不再用伪 UUID - 迁移：保留 users.api_key，从 api_keys 表回退时生成新明文 key 并删表 - 文档：audit_log auth 语义、API Key 存储说明 Made-with: Cursor	2026-03-21 16:45:50 +08:00
voson	7bd0603dc6	chore(secrets-mcp): bump version to 0.1.9 ... Made-with: Cursor	2026-03-21 12:25:38 +08:00
voson	a42db62702	style(secrets-mcp): rustfmt web.rs audit mapping ... Made-with: Cursor	2026-03-21 12:06:29 +08:00
voson	2edb970cba	chore(secrets-mcp): bump version to 0.1.8 ... Made-with: Cursor	2026-03-21 12:05:22 +08:00
voson	17f8ac0dbc	web: 审计页时间按浏览器本地时区显示 ... Made-with: Cursor	2026-03-21 12:03:44 +08:00
voson	f2344b7543	feat(secrets-mcp): 审计页、audit_log user_id、OAuth 登录与仪表盘 footer ... - audit_log 增加 user_id；业务写审计透传 user_id - Web /audit 与侧边栏；Dashboard 版本 footer 贴底（margin-top: auto） - 停止 API Key 鉴权成功写入登录审计 - 文档、CI、release-check 配套更新 Made-with: Cursor	2026-03-21 11:12:11 +08:00
voson	a44c8ebf08	feat(mcp): persist login audit for OAuth and API key ... - Add audit::log_login in secrets-core (audit_log detail: user_id, provider, client_ip, user_agent) - Log web Google OAuth success after session established - Log MCP Bearer API key auth success in middleware - Bump secrets-mcp to 0.1.6 (tag 0.1.5 existed) Made-with: Cursor	2026-03-21 09:48:52 +08:00
voson	a595081c4c	fix(dashboard): OpenCode 配置顶层 mcp 包裹；bump secrets-mcp 0.1.5 ... Made-with: Cursor	2026-03-21 09:23:51 +08:00
voson	4d136a5a20	ci: 停止缓存 target，避免 runner 磁盘耗尽 ... 同时将 secrets-mcp 版本提升到 0.1.4，以触发新的构建与发布流程。 Made-with: Cursor	2026-03-20 22:10:48 +08:00
voson	7ce4aaf835	ci: 缓存键包含 Rust 版本；chore(secrets-mcp): 0.1.3 ... Made-with: Cursor	2026-03-20 22:04:40 +08:00
voson	bce01a0f2b	chore(secrets-mcp): bump version to 0.1.2 ... Made-with: Cursor	2026-03-20 21:56:57 +08:00
voson	ad3c8d1672	chore(secrets-mcp): bump version to 0.1.1 ... Made-with: Cursor	2026-03-20 21:37:20 +08:00
voson	ce9e089348	chore: CI 微调、文档与 dashboard 更新、精简 Gitea Actions 安装脚本 ... Made-with: Cursor	2026-03-20 21:31:43 +08:00
voson	5df4141935	feat: user-scoped history/delete/rollback, dashboard & login UI, ignore *.pem ... - Filter history/rollback/delete by user_id in secrets-core - MCP tools/web pass user context; dashboard refresh; favicon static - .gitignore *.pem; vscode tasks tweaks - clippy: collapse else-if in rollback latest-history branch Made-with: Cursor	2026-03-20 20:11:19 +08:00
voson	49fb7430a8	refactor: workspace secrets-core + secrets-mcp MCP SaaS ... - Split library (db/crypto/service) and MCP/Web/OAuth binary - Add deploy examples and CI/docs updates Made-with: Cursor	2026-03-20 17:36:00 +08:00