86 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
agent	08e81363c9	release(secrets-mcp): v0.3.2 — 修复 key_ref 多租户与歧义 ... - env_map：key_ref 解析传入 user_id；支持 folder/name；多条匹配时报错 - 文档同步 key_ref 说明 - bump secrets-mcp 0.3.1 → 0.3.2，更新 Cargo.lock Made-with: Cursor secrets-mcp-0.3.2	2026-03-27 10:45:12 +08:00
voson	beade4503d	release(secrets-mcp): v0.3.1 ... - MCP: secrets_find, secrets_overview; secrets_get id-only; id on update/delete/history/rollback - Add meta_obj/secrets_obj; delete guard; env_map/instructions updates - Core: resolve_entry_by_id; get_*_by_id validates entry + tenant before decrypt Made-with: Cursor secrets-mcp-0.3.1	2026-03-26 17:35:56 +08:00
voson	409fd78a35	Release secrets-mcp 0.3.0: folder/type schema and MCP folder disambiguation ... - Rename namespace/kind to folder/type on entries, audit_log, and history tables; add notes. Unique key is (user_id, folder, name). - Service layer and MCP tools support name-first lookup with optional folder when multiple entries share the same name. - secrets_delete dry_run uses the same disambiguation as real deletes. - Add scripts/migrate-v0.3.0.sql for manual DB migration. Refresh README and AGENTS.md. Made-with: Cursor secrets-mcp-0.3.0	2026-03-26 15:12:28 +08:00
voson	f7afd7f819	docs: 同步 CI 触发路径、覆盖式 tag/Release 说明与 RUST_LOG 示例 ... - AGENTS.md / README：与 workflow 变更路径、远端 tag 覆盖及非 draft Release 行为一致 - deploy/.env.example：补充可选 RUST_LOG 注释 Made-with: Cursor secrets-mcp-0.2.2	2026-03-22 16:15:29 +08:00
voson	719bdd7e08	feat(secrets-mcp): public home at /, login at /login (0.2.2) ... Bump secrets-mcp to 0.2.2 and sync Cargo.lock. Add home.html landing with SEO and footer link to the refining/secrets repository; serve it at / and expose /login for sign-in. Update OAuth error redirects and dashboard unauthenticated redirects to /login. Improve login page meta tags, back-home link, and OAuth error alert. Refresh llms.txt and robots.txt. Made-with: Cursor	2026-03-22 16:11:59 +08:00
voson	1e597559a2	feat(core): FK for user_id columns; MCP search requires user ... - Add fk_entries_user_id, fk_entries_history_user_id, fk_audit_log_user_id (ON DELETE SET NULL) - Add scripts/cleanup-orphan-user-ids.sql for pre-deploy orphan user_id cleanup - Remove deprecated SERVER_MASTER_KEY / per-user key wrap helpers from secrets-core - secrets-mcp: require authenticated user for secrets_search; improve body-read failure response - Bump secrets-mcp to 0.2.1 Made-with: Cursor secrets-mcp-0.2.1	2026-03-22 15:40:02 +08:00
voson	e3ca43ca3f	release(secrets-mcp): 0.2.0 ... - 日志时间戳使用本地时区（chrono RFC3339 + 偏移） - MCP tools / Web 路由与行为调整 - 新增 static/llms.txt、robots.txt；文档与 deploy 示例同步 Made-with: Cursor secrets-mcp-0.2.0	2026-03-22 14:44:00 +08:00
voson	0b57605103	feat(secrets-mcp): MCP 请求日志、探测 404 与资源元数据 ... - 新增 logging 中间件：记录 client_ip、ua、JSON-RPC、tool 等 - tools 各入口/出口结构化日志 - 探测型 404（/.well-known、GET /mcp）降为 debug - /.well-known/oauth-protected-resource 最小元数据 - secrets-mcp 0.1.11 Made-with: Cursor secrets-mcp-0.1.11	2026-03-21 17:57:10 +08:00
voson	8b191937cd	docs(AGENTS): 精简提交/推送规则第4条 ... Made-with: Cursor	2026-03-21 16:56:06 +08:00
voson	11c936a5b8	docs(AGENTS): 明确提交/推送前必须检查版本号与运行 fmt/clippy/test ... Made-with: Cursor	2026-03-21 16:48:47 +08:00
voson	b6349dd1c8	chore(secrets-mcp): bump version to 0.1.10 ... Made-with: Cursor secrets-mcp-0.1.10	2026-03-21 16:46:33 +08:00
voson	f720983328	refactor(db): 移除无意义 actor，修复 history 多租户与模型 ... - 删除 entries_history / audit_log / secrets_history 的 actor 列及写入逻辑 - MCP secrets_history 透传当前 user_id - Entry 增加 user_id，search 查询不再用伪 UUID - 迁移：保留 users.api_key，从 api_keys 表回退时生成新明文 key 并删表 - 文档：audit_log auth 语义、API Key 存储说明 Made-with: Cursor	2026-03-21 16:45:50 +08:00
voson	7bd0603dc6	chore(secrets-mcp): bump version to 0.1.9 ... Made-with: Cursor secrets-mcp-0.1.9	2026-03-21 12:25:38 +08:00
voson	17a95bea5b	refactor(audit): 移除旧格式兼容，user_id 统一走列字段 ... - audit_log 查询去掉 detail->>'user_id' 回退分支 - login_detail 不再冗余写入 user_id 到 detail JSON - 迁移 SQL 去掉多余的 ALTER TABLE ADD COLUMN Made-with: Cursor	2026-03-21 12:24:00 +08:00
voson	a42db62702	style(secrets-mcp): rustfmt web.rs audit mapping ... Made-with: Cursor secrets-mcp-0.1.8	2026-03-21 12:06:29 +08:00
voson	2edb970cba	chore(secrets-mcp): bump version to 0.1.8 ... Made-with: Cursor	2026-03-21 12:05:22 +08:00
voson	17f8ac0dbc	web: 审计页时间按浏览器本地时区显示 ... Made-with: Cursor	2026-03-21 12:03:44 +08:00
voson	259fbe10a6	ci: 精简 Release upsert 逻辑 ... 提取 auth/api 公共变量避免重复；用 xargs 单行替换 while 循环清理 旧 assets；POST 分支用管道直接取 id 省去临时文件。 279 行 → 248 行。 Made-with: Cursor secrets-mcp-0.1.7	2026-03-21 11:36:43 +08:00
voson	c815fb4cc8	ci: 修复覆盖重发时 Release 唯一约束冲突 ... DELETE + POST 同名 release 会触发 Gitea 的 UQE_release_n 约束。 改为：已有 release → PATCH 更新 name/body，再逐个删除旧 assets 后重传； 无 release → 正常 POST 新建。 Made-with: Cursor	2026-03-21 11:33:45 +08:00
voson	90cd1eca15	ci: 允许对同版本覆盖重发版 ... - 解析版本时不再 exit 1，改为记录 tag_exists=true 并打印警告 - 创建 Tag 步骤：若 tag 已存在则先本地删除再远端删除，再重新打带注释的 tag - 创建 Release 步骤：先查询同名 Release，若存在则 DELETE 旧 Release，再 POST 新建 Made-with: Cursor	2026-03-21 11:22:24 +08:00
voson	da007348ea	ci: 合并为 ci + deploy 两个 job，check 先于 build ... 单台 self-hosted runner 下并行 job 只是排队，多 job 拆分带来的 artifact 传递、重复 checkout、调度延迟反而更慢。 改动： - 原 version/check/build-linux/publish-release 四个 job 合并为单个 ci job - 步骤顺序：版本拦截 → fmt/clippy/test → build → 打 tag → 发 Release - tag 在构建成功后才创建，避免失败提交留下脏 tag - Release 创建+上传+发布合并为单步，去掉草稿中转 - deploy job 仅保留 artifact 下载 + SSH 部署逻辑，不再重复编译 - 整体从 400 行缩减至 244 行 Made-with: Cursor	2026-03-21 11:18:10 +08:00
voson	f2344b7543	feat(secrets-mcp): 审计页、audit_log user_id、OAuth 登录与仪表盘 footer ... - audit_log 增加 user_id；业务写审计透传 user_id - Web /audit 与侧边栏；Dashboard 版本 footer 贴底（margin-top: auto） - 停止 API Key 鉴权成功写入登录审计 - 文档、CI、release-check 配套更新 Made-with: Cursor	2026-03-21 11:12:11 +08:00
voson	ee028d45c3	ci: 优化 workflow 并行度与产物传递 ... - check 与 build-linux 改为并行执行，节省约 10min - 新增 upload-artifact / download-artifact，deploy-mcp 直接复用二进制，免重复编译（节省约 15min） - check / build 缓存加入 target/ 目录，加速增量编译 - 提取 MUSL_TARGET 全局变量，消除 x86_64-unknown-linux-musl 硬编码 - publish-release 增加 check 结果检查，质量失败时不发布 Release - 移除 build-linux 冗余飞书通知，publish-release 汇总已覆盖 Made-with: Cursor	2026-03-21 10:07:29 +08:00
voson	a44c8ebf08	feat(mcp): persist login audit for OAuth and API key ... - Add audit::log_login in secrets-core (audit_log detail: user_id, provider, client_ip, user_agent) - Log web Google OAuth success after session established - Log MCP Bearer API key auth success in middleware - Bump secrets-mcp to 0.1.6 (tag 0.1.5 existed) Made-with: Cursor secrets-mcp-0.1.6	2026-03-21 09:48:52 +08:00
voson	a595081c4c	fix(dashboard): OpenCode 配置顶层 mcp 包裹；bump secrets-mcp 0.1.5 ... Made-with: Cursor secrets-mcp-0.1.5	2026-03-21 09:23:51 +08:00
voson	0a8b14211a	ci: 恢复 secrets workflow 为标准发版流程 ... Made-with: Cursor	2026-03-21 09:17:35 +08:00
voson	9cebbd7587	ci: 支持构建重跑并跳过重复发版 ... 让 workflow 根据变更范围区分发版构建与仅验证构建，并补充手动触发入口，避免已有版本 tag 阻塞缓存恢复后的重跑验证。 Made-with: Cursor	2026-03-21 09:10:05 +08:00
voson	4d136a5a20	ci: 停止缓存 target，避免 runner 磁盘耗尽 ... 同时将 secrets-mcp 版本提升到 0.1.4，以触发新的构建与发布流程。 Made-with: Cursor secrets-mcp-0.1.4	2026-03-20 22:10:48 +08:00
voson	7ce4aaf835	ci: 缓存键包含 Rust 版本；chore(secrets-mcp): 0.1.3 ... Made-with: Cursor secrets-mcp-0.1.3	2026-03-20 22:04:40 +08:00
voson	bce01a0f2b	chore(secrets-mcp): bump version to 0.1.2 ... Made-with: Cursor secrets-mcp-0.1.2	2026-03-20 21:56:57 +08:00
voson	8cd4dbf592	ci: 固定 Rust 1.94.0（rust-toolchain + Gitea Actions） ... Made-with: Cursor	2026-03-20 21:54:13 +08:00
voson	ad3c8d1672	chore(secrets-mcp): bump version to 0.1.1 ... Made-with: Cursor secrets-mcp-0.1.1	2026-03-20 21:37:20 +08:00
voson	8d6b9f0368	ci: 质量检查依赖版本 job，重复 tag 时提前失败 ... Made-with: Cursor	2026-03-20 21:35:00 +08:00
voson	ce9e089348	chore: CI 微调、文档与 dashboard 更新、精简 Gitea Actions 安装脚本 ... Made-with: Cursor	2026-03-20 21:31:43 +08:00
voson	786675ce42	ci: allow secrets-mcp workflow on mcp branch ... Enable build and deploy jobs when pushing the current mcp branch so CI artifacts can be used for deployment without waiting for manual server compilation. Made-with: Cursor secrets-mcp-0.1.0	2026-03-20 20:33:47 +08:00
voson	5df4141935	feat: user-scoped history/delete/rollback, dashboard & login UI, ignore *.pem ... - Filter history/rollback/delete by user_id in secrets-core - MCP tools/web pass user context; dashboard refresh; favicon static - .gitignore *.pem; vscode tasks tweaks - clippy: collapse else-if in rollback latest-history branch Made-with: Cursor	2026-03-20 20:11:19 +08:00
voson	49fb7430a8	refactor: workspace secrets-core + secrets-mcp MCP SaaS ... - Split library (db/crypto/service) and MCP/Web/OAuth binary - Add deploy examples and CI/docs updates Made-with: Cursor	2026-03-20 17:36:00 +08:00
voson	ff9767ff95	chore(ci): 精简 publish-release job，移除多余 checkout ... Made-with: Cursor	2026-03-19 20:26:45 +08:00
voson	955acfe9ec	feat(run): 选择性字段注入、dry-run 预览、默认 JSON 输出 ... - run 新增 -s/--secret 字段过滤，只注入指定字段到子进程（最小权限） - run 新增 --dry-run 模式，输出变量名与来源映射，不执行命令、不暴露值 - run 新增 -o 参数，dry-run 默认 JSON 输出 - 默认输出格式改为始终 json，移除 TTY 自动切换逻辑，-o text 供人类使用 - build_injected_env_map 签名从 &[SecretField] 改为 &[&SecretField] - 更新 AGENTS.md、README.md、.vscode/tasks.json - version: 0.9.5 → 0.9.6 Made-with: Cursor secrets-0.9.6	2026-03-19 17:39:09 +08:00
voson	3a5ec92bf0	fix: inject/run 仅注入 secrets 字段，不含 metadata ... - build_injected_env_map 不再合并 metadata - 删除 build_metadata_env_map 及其测试 - 更新 README、AGENTS.md 文档 - bump 版本至 0.9.5 Made-with: Cursor secrets-0.9.5	2026-03-19 17:03:01 +08:00
voson	854720f10c	chore: remove field_type and value_len from secrets schema ... - Drop field_type, value_len from secrets and secrets_history tables - Remove infer_field_type, compute_value_len from add.rs - Simplify search output to field names only - Update AGENTS.md, README.md documentation Bump version to 0.9.4 Made-with: Cursor secrets-0.9.4	2026-03-19 16:48:23 +08:00
voson	62a1df316b	docs: README 补充 delete 批量删除与 --dry-run 示例 ... Made-with: Cursor secrets-0.9.3	2026-03-19 16:32:20 +08:00
voson	d0796e9c9a	feat: delete 命令支持批量删除，--name 改为可选 ... 省略 --name 时按 namespace（+ 可选 --kind）批量删除所有匹配记录； 支持 --dry-run 预览；删除前自动快照历史并写入审计日志。 移除独立的 delete-ns 子命令，合并为统一的 delete 入口。 更新 AGENTS.md 文档，版本 bump 至 0.9.3。 Made-with: Cursor	2026-03-19 16:31:18 +08:00
voson	66b6417faa	feat: 开源准备与 upgrade URL 构建时配置 ... - upgrade: SECRETS_UPGRADE_URL 改为构建时优先（option_env!），CI 自动注入 - upgrade: 支持运行时回退（.env/export），添加 dotenvy 加载 .env - 泛化示例：IP/实例 ID/域名/密钥名改为示例值（10.0.0.1、example.com 等） - tasks.json: 文件 secret 测试改用 test-fixtures/example-key.pem - 文档更新：AGENTS.md、README.md Made-with: Cursor	2026-03-19 16:08:27 +08:00
voson	56a28e8cf7	refactor: 消除冗余、统一设计，bump 0.9.1 ... - 提取 EntryRow/SecretFieldRow 到 models.rs - 提取 current_actor()、print_json() 公共函数 - ExportFormat::from_extension 复用 from_str - fetch_entries 默认 limit 100k（export/inject/run 不再截断） - history 独立为 history.rs 模块 - delete 改用 DeleteArgs 结构体 - config_dir 改为 Result，Argon2id 参数提取常量 - Cargo 依赖 ^ 前缀、tokio 精简 features - 更新 AGENTS.md 项目结构 Made-with: Cursor secrets-0.9.1	2026-03-19 15:46:57 +08:00
voson	12aec6675a	feat: add export/import commands for batch backup (JSON/TOML/YAML) ... - export: filter by namespace/kind/name/tag/query, decrypt secrets, write to file or stdout - import: parse file, conflict check (error by default, --force to overwrite), --dry-run preview - Add ExportFormat enum, ExportData/ExportEntry in models.rs with TOML↔JSON conversion - Bump version to 0.9.0 Made-with: Cursor secrets-0.9.0	2026-03-19 15:29:26 +08:00
voson	e1cd6e736c	refactor: entries + secrets 双表，search 展示 field schema，key_ref PEM 共享 ... - secrets 表拆为 entries（主表）+ secrets（每字段一行） - search 无需 master_key 即可展示 secrets 字段名、类型、长度 - inject/run 支持 metadata.key_ref 引用 kind=key 记录，PEM 轮换 O(1) - entries_history + secrets_history 字段级历史，rollback 按 version 恢复 - 移除迁移用 DROP 语句，migrate 幂等 - v0.8.0 Made-with: Cursor secrets-0.8.0	2026-03-19 15:18:12 +08:00
voson	0a5317e477	feat: remove -o env from search command ... - Remove OutputMode::Env from output.rs - Remove env output branch and shell_quote from search.rs - Update docs (AGENTS.md, README.md, main.rs help) Bump version to 0.7.5 Made-with: Cursor secrets-0.7.5	2026-03-19 14:33:38 +08:00
voson	efa76cae55	feat(add,update): key:=json typed values, nested path for meta/secrets, bump 0.7.4 ... Made-with: Cursor secrets-0.7.4	2026-03-19 14:27:04 +08:00
voson	5a5867adc1	chore: local timezone in text output, search metadata-only, bump 0.7.3 ... Made-with: Cursor secrets-0.7.3	2026-03-19 12:24:20 +08:00