112 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
voson	a595081c4c	fix(dashboard): OpenCode 配置顶层 mcp 包裹；bump secrets-mcp 0.1.5 ... Made-with: Cursor secrets-mcp-0.1.5	2026-03-21 09:23:51 +08:00
voson	0a8b14211a	ci: 恢复 secrets workflow 为标准发版流程 ... Made-with: Cursor	2026-03-21 09:17:35 +08:00
voson	9cebbd7587	ci: 支持构建重跑并跳过重复发版 ... 让 workflow 根据变更范围区分发版构建与仅验证构建，并补充手动触发入口，避免已有版本 tag 阻塞缓存恢复后的重跑验证。 Made-with: Cursor	2026-03-21 09:10:05 +08:00
voson	4d136a5a20	ci: 停止缓存 target，避免 runner 磁盘耗尽 ... 同时将 secrets-mcp 版本提升到 0.1.4，以触发新的构建与发布流程。 Made-with: Cursor secrets-mcp-0.1.4	2026-03-20 22:10:48 +08:00
voson	7ce4aaf835	ci: 缓存键包含 Rust 版本；chore(secrets-mcp): 0.1.3 ... Made-with: Cursor secrets-mcp-0.1.3	2026-03-20 22:04:40 +08:00
voson	bce01a0f2b	chore(secrets-mcp): bump version to 0.1.2 ... Made-with: Cursor secrets-mcp-0.1.2	2026-03-20 21:56:57 +08:00
voson	8cd4dbf592	ci: 固定 Rust 1.94.0（rust-toolchain + Gitea Actions） ... Made-with: Cursor	2026-03-20 21:54:13 +08:00
voson	ad3c8d1672	chore(secrets-mcp): bump version to 0.1.1 ... Made-with: Cursor secrets-mcp-0.1.1	2026-03-20 21:37:20 +08:00
voson	8d6b9f0368	ci: 质量检查依赖版本 job，重复 tag 时提前失败 ... Made-with: Cursor	2026-03-20 21:35:00 +08:00
voson	ce9e089348	chore: CI 微调、文档与 dashboard 更新、精简 Gitea Actions 安装脚本 ... Made-with: Cursor	2026-03-20 21:31:43 +08:00
voson	786675ce42	ci: allow secrets-mcp workflow on mcp branch ... Enable build and deploy jobs when pushing the current mcp branch so CI artifacts can be used for deployment without waiting for manual server compilation. Made-with: Cursor secrets-mcp-0.1.0	2026-03-20 20:33:47 +08:00
voson	5df4141935	feat: user-scoped history/delete/rollback, dashboard & login UI, ignore *.pem ... - Filter history/rollback/delete by user_id in secrets-core - MCP tools/web pass user context; dashboard refresh; favicon static - .gitignore *.pem; vscode tasks tweaks - clippy: collapse else-if in rollback latest-history branch Made-with: Cursor	2026-03-20 20:11:19 +08:00
voson	49fb7430a8	refactor: workspace secrets-core + secrets-mcp MCP SaaS ... - Split library (db/crypto/service) and MCP/Web/OAuth binary - Add deploy examples and CI/docs updates Made-with: Cursor	2026-03-20 17:36:00 +08:00
voson	ff9767ff95	chore(ci): 精简 publish-release job，移除多余 checkout ... Made-with: Cursor	2026-03-19 20:26:45 +08:00
voson	955acfe9ec	feat(run): 选择性字段注入、dry-run 预览、默认 JSON 输出 ... - run 新增 -s/--secret 字段过滤，只注入指定字段到子进程（最小权限） - run 新增 --dry-run 模式，输出变量名与来源映射，不执行命令、不暴露值 - run 新增 -o 参数，dry-run 默认 JSON 输出 - 默认输出格式改为始终 json，移除 TTY 自动切换逻辑，-o text 供人类使用 - build_injected_env_map 签名从 &[SecretField] 改为 &[&SecretField] - 更新 AGENTS.md、README.md、.vscode/tasks.json - version: 0.9.5 → 0.9.6 Made-with: Cursor secrets-0.9.6	2026-03-19 17:39:09 +08:00
voson	3a5ec92bf0	fix: inject/run 仅注入 secrets 字段，不含 metadata ... - build_injected_env_map 不再合并 metadata - 删除 build_metadata_env_map 及其测试 - 更新 README、AGENTS.md 文档 - bump 版本至 0.9.5 Made-with: Cursor secrets-0.9.5	2026-03-19 17:03:01 +08:00
voson	854720f10c	chore: remove field_type and value_len from secrets schema ... - Drop field_type, value_len from secrets and secrets_history tables - Remove infer_field_type, compute_value_len from add.rs - Simplify search output to field names only - Update AGENTS.md, README.md documentation Bump version to 0.9.4 Made-with: Cursor secrets-0.9.4	2026-03-19 16:48:23 +08:00
voson	62a1df316b	docs: README 补充 delete 批量删除与 --dry-run 示例 ... Made-with: Cursor secrets-0.9.3	2026-03-19 16:32:20 +08:00
voson	d0796e9c9a	feat: delete 命令支持批量删除，--name 改为可选 ... 省略 --name 时按 namespace（+ 可选 --kind）批量删除所有匹配记录； 支持 --dry-run 预览；删除前自动快照历史并写入审计日志。 移除独立的 delete-ns 子命令，合并为统一的 delete 入口。 更新 AGENTS.md 文档，版本 bump 至 0.9.3。 Made-with: Cursor	2026-03-19 16:31:18 +08:00
voson	66b6417faa	feat: 开源准备与 upgrade URL 构建时配置 ... - upgrade: SECRETS_UPGRADE_URL 改为构建时优先（option_env!），CI 自动注入 - upgrade: 支持运行时回退（.env/export），添加 dotenvy 加载 .env - 泛化示例：IP/实例 ID/域名/密钥名改为示例值（10.0.0.1、example.com 等） - tasks.json: 文件 secret 测试改用 test-fixtures/example-key.pem - 文档更新：AGENTS.md、README.md Made-with: Cursor	2026-03-19 16:08:27 +08:00
voson	56a28e8cf7	refactor: 消除冗余、统一设计，bump 0.9.1 ... - 提取 EntryRow/SecretFieldRow 到 models.rs - 提取 current_actor()、print_json() 公共函数 - ExportFormat::from_extension 复用 from_str - fetch_entries 默认 limit 100k（export/inject/run 不再截断） - history 独立为 history.rs 模块 - delete 改用 DeleteArgs 结构体 - config_dir 改为 Result，Argon2id 参数提取常量 - Cargo 依赖 ^ 前缀、tokio 精简 features - 更新 AGENTS.md 项目结构 Made-with: Cursor secrets-0.9.1	2026-03-19 15:46:57 +08:00
voson	12aec6675a	feat: add export/import commands for batch backup (JSON/TOML/YAML) ... - export: filter by namespace/kind/name/tag/query, decrypt secrets, write to file or stdout - import: parse file, conflict check (error by default, --force to overwrite), --dry-run preview - Add ExportFormat enum, ExportData/ExportEntry in models.rs with TOML↔JSON conversion - Bump version to 0.9.0 Made-with: Cursor secrets-0.9.0	2026-03-19 15:29:26 +08:00
voson	e1cd6e736c	refactor: entries + secrets 双表，search 展示 field schema，key_ref PEM 共享 ... - secrets 表拆为 entries（主表）+ secrets（每字段一行） - search 无需 master_key 即可展示 secrets 字段名、类型、长度 - inject/run 支持 metadata.key_ref 引用 kind=key 记录，PEM 轮换 O(1) - entries_history + secrets_history 字段级历史，rollback 按 version 恢复 - 移除迁移用 DROP 语句，migrate 幂等 - v0.8.0 Made-with: Cursor secrets-0.8.0	2026-03-19 15:18:12 +08:00
voson	0a5317e477	feat: remove -o env from search command ... - Remove OutputMode::Env from output.rs - Remove env output branch and shell_quote from search.rs - Update docs (AGENTS.md, README.md, main.rs help) Bump version to 0.7.5 Made-with: Cursor secrets-0.7.5	2026-03-19 14:33:38 +08:00
voson	efa76cae55	feat(add,update): key:=json typed values, nested path for meta/secrets, bump 0.7.4 ... Made-with: Cursor secrets-0.7.4	2026-03-19 14:27:04 +08:00
voson	5a5867adc1	chore: local timezone in text output, search metadata-only, bump 0.7.3 ... Made-with: Cursor secrets-0.7.3	2026-03-19 12:24:20 +08:00
voson	4ddafbe4b6	chore: remove dead code, bump to 0.7.2 ... - Remove unused delete_master_key from crypto.rs - Remove unused audit::log from audit.rs - Simplify HistoryRow in rollback.rs (drop unused namespace/kind/name) - Update AGENTS.md: audit::log → audit::log_tx Made-with: Cursor secrets-0.7.2	2026-03-19 11:43:01 +08:00
voson	6ea9f0861b	chore: bump to 0.7.1, workflow/readme/init/upgrade updates, fix clippy needless_borrows ... Made-with: Cursor secrets-0.7.1	2026-03-19 11:34:10 +08:00
voson	3973295d6a	chore(release): enforce version bump checks ... Fail fast when a release tag already exists, and add a local release-check script so version mistakes are caught before commit and publish. Made-with: Cursor	2026-03-19 11:17:23 +08:00
voson	c371da95c3	chore: bump version to 0.7.0 for upgrade feature ... Made-with: Cursor secrets-0.7.0	2026-03-19 11:06:59 +08:00
voson	baad623efe	feat(upgrade): SHA-256校验、Intel mac 交叉编译、全平台后发布 ... - upgrade: 下载后校验 .sha256 摘要再安装 - workflow: ARM mac 同时产出 aarch64/x86_64 双架构，补全 Intel mac 产物 - workflow: 各平台上传主资产及 .sha256，Linux/macOS/Windows 全成功才发布 Release - upgrade: 补充 parse_tag_version、parse_checksum_file、extract_from_targz 单元测试 - docs: README/AGENTS 同步 upgrade 与平台说明 Made-with: Cursor	2026-03-19 11:06:10 +08:00
voson	2da7aab3e5	feat(upgrade): add self-update command from Gitea Release ... - Add secrets upgrade command: --check to verify, default to download and replace binary - No database or master key required - Support tar.gz and zip artifacts from Gitea Release Made-with: Cursor	2026-03-19 11:01:43 +08:00
voson	fcac14a8c4	docs(AGENTS): clarify version bump must update Cargo.lock too ... Made-with: Cursor	2026-03-19 10:41:49 +08:00
voson	ff79a3a9cc	chore: sync Cargo.lock for 0.6.1 ... Made-with: Cursor	2026-03-19 10:40:30 +08:00
voson	3c21b3dac1	chore: bump version to 0.6.1 ... Made-with: Cursor secrets-0.6.1	2026-03-19 10:39:07 +08:00
voson	3b36d5a3dd	feat(config): verify DB connection before saving set-db ... - Check connection with create_pool before writing to config - Show 'Database connection failed' on error, do not overwrite config - Update AGENTS.md and README.md Made-with: Cursor	2026-03-19 10:38:38 +08:00
voson	a765dcc428	feat: 0.6.0 — 事务/版本化/类型化/inject/run ... - 写路径事务化：add/update/delete 与 audit 同事务，update CAS 并发保护 - 版本化与回滚：secrets_history 表、version 字段、history/rollback 命令 - 类型化字段：key:=<json> 支持数字、布尔、数组、对象 - 临时 env 模式：inject 输出 KEY=VALUE，run 向子进程注入 - inject/run 至少需一个过滤条件；search -o env 使用 shell_quote；JSON 输出含 version Made-with: Cursor secrets-0.6.0	2026-03-19 10:30:45 +08:00
voson	31b0ea9bf1	refactor: 代码审阅优化 ... P0: - fix(config): config_dir 使用 home_dir 回退，避免 ~ 不展开 - fix(search): 模糊查询转义 LIKE 通配符 % 和 _ P1: - chore(db): 连接池添加 acquire_timeout 10s - refactor(update): 消除 meta_keys/secret_keys 重复计算 P2: - refactor(config): 合并 ConfigAction 枚举 - chore(deps): 移除 clap/env、uuid/v4 无用 features - perf(main): delete 命令跳过 master_key 加载 - i18n(config): 统一错误消息为英文 - perf(search): show_secrets=false 时不再解密获取 key_count - feat(delete,update): 支持 -o json/json-compact 输出 P3: - feat(search): --tag 支持多值交叉过滤 docs: 将 seed-data.sh 替换为 setup-gitea-actions.sh Made-with: Cursor	2026-03-19 09:31:53 +08:00
voson	dc0534cbc9	refactor(secrets): remove migrate_encrypt command ... Made-with: Cursor	2026-03-19 09:17:04 +08:00
voson	8fdb6db87b	feat: 客户端加密 encrypted 字段，数据库只存密文 (v0.5.0) ... - 新增 src/crypto.rs：AES-256-GCM 加解密 + Argon2id 密钥派生 + OS Keychain 读写 - 新增 `secrets init` 命令：输入 Master Password，派生 Master Key 存入 Keychain - 新增 `secrets migrate-encrypt` 命令：将旧明文 JSONB 数据批量加密 - 修改 db.rs：encrypted 列 JSONB → BYTEA，新增 kv_config 表（存 Argon2id salt） - 修改 models.rs：encrypted 字段类型 Value → Vec<u8> - 修改 add/update：写入前 encrypt_json，update 读取后 decrypt → 合并 → 重新加密 - 修改 search：按需解密，未解密时显示 _encrypted:true/_key_count:N - 通过 6 个 crypto 单元测试（加解密、JSON roundtrip、Argon2id 确定性） Made-with: Cursor secrets-0.5.0	2026-03-18 20:10:13 +08:00
voson	1f7984d798	feat: AI 优先的 search 增强与结构化输出 (v0.4.0) ... - search: 新增 --name、-f/--field、-o/--output、--summary、--limit、--offset、--sort - search: 非 TTY 自动输出 json-compact，便于 AI 解析 - search: -f secret.* 自动解锁 secrets - add: 支持 -o json/json-compact 输出 - add: 重构为 AddArgs 结构体 - 全局: 各子命令 after_help 补充典型值示例 - output.rs: OutputMode 枚举 + TTY 检测 - 文档: README/AGENTS 面向 AI 的用法，连接串改为 <host>:<port> Made-with: Cursor secrets-0.4.0	2026-03-18 17:17:43 +08:00
voson	140162f39a	ci(secrets): 飞书通知分散到各构建 job，放宽超时与构建条件 ... - 各 build job 超时 10→15min，publish-release 2→5min - 移除 build-macos/build-windows 的 if 条件，默认全平台构建 - 删除独立 notify job，在各 build job 内增加飞书单 job 通知 - 汇总通知并入 publish-release，用 needs 取状态不再调 API - publish-release 增加 if: always() 与 checkout 步骤 Made-with: Cursor	2026-03-18 16:32:45 +08:00
voson	535683b15c	feat: 添加结构化日志与审计 ... - tracing + tracing-subscriber，全局 --verbose/-v 与 RUST_LOG 控制 - 新增 audit_log 表，add/update/delete 成功后自动写入审计记录 - 新增 src/audit.rs，审计失败仅 warn 不中断主流程 - 更新 README/AGENTS.md，补充 verbose、audit_log 说明 - .vscode/tasks.json 增加 verbose/update/audit 测试任务 Made-with: Cursor secrets-0.3.0	2026-03-18 16:30:42 +08:00
voson	9620ff1923	feat(config): persist database URL to ~/.config/secrets/config.toml ... - Add 'secrets config set-db/show/path' subcommands - Remove dotenvy and DATABASE_URL env var support - Config file created with 0600 permission - Bump version to 0.3.0 Made-with: Cursor	2026-03-18 16:19:11 +08:00
voson	e6db23bd6d	fix(ci): 移除 probe-runners，用变量控制 build，解耦 notify ... - 删除探测 Runner job（API 解析不可靠，且 always() 导致 job 被错误调度） - build-linux: 仅 needs version+check，默认执行 - build-macos: if vars.BUILD_MACOS != 'false'（默认开，runner 离线时设 false） - build-windows: if vars.BUILD_WINDOWS == 'true'（默认关，无 runner） - publish-release: 仅依赖 build-linux，避免被 macOS/Windows 阻塞 - notify: 仅 needs version+check + always()，失败也能发飞书；build 状态通过 API 查询 Made-with: Cursor	2026-03-18 16:04:16 +08:00
voson	c61c8292aa	fix: CI 无 DB 下 clippy 通过 + 失败时也发飞书通知 ... - update.rs: sqlx::query! 改为 query/query_as，不依赖编译期 DB - workflow: build job 加 always() 且 check.result==success，失败时 notify 能执行 Made-with: Cursor	2026-03-18 15:50:10 +08:00
voson	c1d86bc96d	feat: add update command, bump to 0.2.0, doc version check ... - add secrets update: incremental merge for tags/metadata/encrypted - AGENTS.md: 提交前检查增加版本号与 git tag 说明 - README/AGENTS: update 命令文档与示例 - Cargo.toml 0.1.0 -> 0.2.0 (secrets-0.1.0 已存在) Made-with: Cursor secrets-0.2.0	2026-03-18 15:40:44 +08:00
voson	f87cf3fd20	fix: store RELEASE_TOKEN as raw value, not base64 ... Gitea Actions secrets API stores the data field as-is, base64 encoding caused CI to use the encoded string as the token, resulting in 401. Made-with: Cursor	2026-03-18 15:27:05 +08:00
voson	1aef267bbd	ci: fix runner probe curl error and re-sync RELEASE_TOKEN ... - Replace curl -fsS with HTTP status code check in probe-runners to avoid ugly 401 errors - Graceful fallback: API failure defaults to trying all platforms - RELEASE_TOKEN re-synced with correct PAT value Made-with: Cursor	2026-03-18 15:18:03 +08:00
voson	2ad1abe846	ci: fix release 401 handling and notify based on actual results ... - Replace curl -fsS with HTTP status code checking to avoid hard failures on 401/404 - Release creation failure no longer blocks the entire workflow, just skips asset upload - Notification now depends on all jobs and reports actual success/failure per platform Made-with: Cursor	2026-03-18 15:04:07 +08:00