107 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
voson	cab234cfcb	feat(secrets-mcp): 增强 MCP 请求日志与 encryption_key 参数支持 ... logging.rs: - 每条 MCP POST 日志新增 auth_key（Bearer token 前12字符掩码）、 enc_key（X-Encryption-Key 前4后4字符指纹，如 146b…5516(64) 或 absent）、 user_id、tool_args（白名单非敏感参数摘要）字段 - 新增辅助函数 mask_bearer / mask_enc_key / extract_tool_args / summarize_value tools.rs: - extract_enc_key 成功路径增加 debug 级指纹日志（raw_len/trimmed_len/prefix/suffix） - 新增 extract_enc_key_or_arg / require_user_and_key_or_arg：优先使用参数传入的密钥， fallback 到 X-Encryption-Key 头，绕过 Cursor Chat MCP 头透传异常 - GetSecretInput / AddInput / UpdateInput / ExportInput / EnvMapInput 各增加可选 encryption_key 字段，对应工具实现改用 require_user_and_key_or_arg secrets-mcp-0.5.7	2026-04-06 11:03:01 +08:00
voson	e0fee639c1	release(secrets-mcp): 0.5.7	2026-04-05 17:07:31 +08:00
voson	7c53bfb782	feat(core): entry 历史附带关联 secret 密文快照，rollback 可恢复 N:N 与密文 ... - db: metadata_with_secret_snapshot / strip / parse 辅助 - add/update/delete/rollback 在写 entries_history 前合并快照 - rollback: 按历史快照同步 entry_secrets、更新或插入 secrets - 满足 clippy collapsible_if	2026-04-05 17:06:53 +08:00
voson	63cb3a8216	release(secrets-mcp): 0.5.6 ... 修复 OAuth 解绑时非法聚合 FOR UPDATE，Web OAuth 审计 IP 与 TRUST_PROXY 对齐并校验 IP，账号绑定写入 oauth_state 失败时回滚 bind 标记。回滚条目时恢复 folder/type，导入冲突检查在 DB 失败时传播错误，MCP delete/history 要求已登录用户，全局请求体 10MiB 限制。CI 部署支持 DEPLOY_KNOWN_HOSTS，默认 accept-new；文档与 deploy 示例补充连接池、限流、TRUST_PROXY。移除含明文凭据的 sync-test-to-prod 脚本。 secrets-mcp-0.5.6	2026-04-05 15:29:03 +08:00
voson	2b994141b8	release(secrets-mcp): 0.5.5 — 生产 CORS 显式 allow_methods，修复 tower-http 启动 panic ... credentials + wildcard methods/headers 被 tower-http 禁止；生产环境改为 GET/POST/PATCH/DELETE/OPTIONS 白名单。 secrets-mcp-0.5.5	2026-04-05 12:27:40 +08:00
voson	9d6ac5c13a	release(secrets-mcp): 0.5.4 — Web 分页修正与 hex 解码；批量删除上限；MCP @ 路径检测 secrets-mcp-0.5.4	2026-04-05 12:14:40 +08:00
voson	1860cce86c	release(secrets-mcp): 0.5.3 — 审计日志分页与 Web；CONTRIBUTING；文档与模板修正	2026-04-05 11:34:04 +08:00
agent	dd24f7cc44	release: secrets-mcp 0.5.2 ... Bump version: secrets-mcp-0.5.1 tag already existed while crates had further changes. Made-with: Cursor secrets-mcp-0.5.2	2026-04-05 10:38:50 +08:00
voson	aefad33870	chore(secrets-mcp): 0.5.1 — 移除 entry type 归一化，MCP 参数兼容字符串形式 ... - 去掉 taxonomy 对 entry type 的自动映射与 metadata.subtype 回填；仅 trim 后入库 - MCP tools：Vec/Map/bool 等可选字段支持 JSON 内嵌字符串解析，并改进解析失败提示 - 新增 deser 单元测试；README/AGENTS 与 models 注释同步 Made-with: Cursor secrets-mcp-0.5.1	2026-04-04 21:27:33 +08:00
voson	0ffb81e57f	feat: entry update links existing secrets (link_secret_names) ... - secrets-core: update flow validates and applies secret links - secrets-mcp: MCP tool params and UI for managing links on edit - Align errors and templates; minor crypto/.gitignore tweaks Made-with: Cursor secrets-mcp-0.5.0	2026-04-04 20:30:32 +08:00
voson	4a1654c820	docs: update MCP tools list, env vars, taxonomy and deploy structure	2026-04-04 18:04:35 +08:00
voson	a15e2eaf4a	docs: align README with removed SQL migration scripts ... Made-with: Cursor	2026-04-04 17:58:26 +08:00
voson	1518388374	chore(release): secrets-mcp 0.4.0 ... Bump version for the N:N entry_secrets data model and related MCP/Web changes. Remove superseded SQL migration artifacts; rely on auto-migrate. Add structured errors, taxonomy normalization, and web i18n helpers. Made-with: Cursor secrets-mcp-0.4.0	2026-04-04 17:58:12 +08:00
voson	b99d821644	Merge pull request 'refactor/entry-secret-nn' (#1) from refactor/entry-secret-nn into main ... Reviewed-on: #1 secrets-mcp-0.3.9	2026-04-03 19:44:47 +08:00
voson	32f275f88a	feat(secrets-mcp): bump 0.3.9 and normalize listen address log ... Prepare a new release version and improve startup log readability by showing localhost for loopback bind addresses without changing runtime binding behavior. Made-with: Cursor	2026-04-03 19:36:12 +08:00
王松	c6fb457734	feat(nn): entry–secret N:N, unique secret names, web unlink ... Bump secrets-mcp to 0.3.8 (tag 0.3.7 already used). - Junction table entry_secrets; secrets user-scoped with type - Per-user unique secrets.name; link_secret_names on add - Manual migrations + migrate script; MCP/tool and Web updates Made-with: Cursor secrets-mcp-0.3.8	2026-04-03 17:37:04 +08:00
agent	df701f21b9	feat(secrets-mcp): 共享 key 删除时自动迁移并重定向 (v0.3.7) ... 删除仍被 metadata.key_ref 引用的 key 条目时，在同一事务内将密文复制到首个引用方， 其余引用方的 key_ref 重定向到新 owner；env_map 解析 key_ref 时不再限定 type=key。 Web 删除 API 返回 migrated；Dashboard 删除成功后提示迁移。 Bump secrets-mcp to 0.3.7；补充删除迁移相关单测（需 SECRETS_DATABASE_URL）。 Made-with: Cursor secrets-mcp-0.3.7	2026-04-03 09:27:20 +08:00
agent	c3c536200e	feat(secrets-mcp): Web 条目编辑 API 与 Notes 列表展示优化（0.3.6） ... - secrets-core: EntryWriteRow；按 id 更新/删除（含并发冲突与唯一键） - Web: PATCH/DELETE /api/entries/{id}；列表编辑/删除与错误映射 - entries 模板：Notes 限高滚动；空 Notes 不显示占位框 - 版本 0.3.5 → 0.3.6，同步 Cargo.lock Made-with: Cursor secrets-mcp-0.3.6	2026-04-02 14:58:10 +08:00
agent	7909f7102d	feat(secrets-mcp): 条目页按 folder/type 筛选并发版 0.3.5 ... - entries 路由支持 ?folder=&type= 查询，与搜索层 SearchParams 对齐 - 条目列表页增加筛选表单与说明文案 - 版本 0.3.4 → 0.3.5，同步 Cargo.lock Made-with: Cursor	2026-04-02 14:37:36 +08:00
agent	87a29af82d	feat(web): 条目列表页 /entries 与总条数统计 ... - 新增受会话保护的 GET /entries，仅展示 entries 非敏感列 - search: list_entries、count_entries 共享筛选条件；分页与计数不读 secrets - 侧边栏在 dashboard/audit 增加「条目」入口 - secrets-mcp 0.3.4（tag 尚未存在） Made-with: Cursor secrets-mcp-0.3.4	2026-04-02 11:26:51 +08:00
agent	1b11f7e976	release(secrets-mcp): v0.3.3 — 强制 PostgreSQL TLS 校验 ... 显式引入数据库 TLS 配置并在生产环境拒绝弱 sslmode，避免连接静默降级。同步更新 deploy/README 与运维 runbook，落地 db.refining.ltd 的证书与服务器配置流程。 Made-with: Cursor secrets-mcp-0.3.3	2026-04-01 15:18:14 +08:00
agent	08e81363c9	release(secrets-mcp): v0.3.2 — 修复 key_ref 多租户与歧义 ... - env_map：key_ref 解析传入 user_id；支持 folder/name；多条匹配时报错 - 文档同步 key_ref 说明 - bump secrets-mcp 0.3.1 → 0.3.2，更新 Cargo.lock Made-with: Cursor secrets-mcp-0.3.2	2026-03-27 10:45:12 +08:00
voson	beade4503d	release(secrets-mcp): v0.3.1 ... - MCP: secrets_find, secrets_overview; secrets_get id-only; id on update/delete/history/rollback - Add meta_obj/secrets_obj; delete guard; env_map/instructions updates - Core: resolve_entry_by_id; get_*_by_id validates entry + tenant before decrypt Made-with: Cursor secrets-mcp-0.3.1	2026-03-26 17:35:56 +08:00
voson	409fd78a35	Release secrets-mcp 0.3.0: folder/type schema and MCP folder disambiguation ... - Rename namespace/kind to folder/type on entries, audit_log, and history tables; add notes. Unique key is (user_id, folder, name). - Service layer and MCP tools support name-first lookup with optional folder when multiple entries share the same name. - secrets_delete dry_run uses the same disambiguation as real deletes. - Add scripts/migrate-v0.3.0.sql for manual DB migration. Refresh README and AGENTS.md. Made-with: Cursor secrets-mcp-0.3.0	2026-03-26 15:12:28 +08:00
voson	f7afd7f819	docs: 同步 CI 触发路径、覆盖式 tag/Release 说明与 RUST_LOG 示例 ... - AGENTS.md / README：与 workflow 变更路径、远端 tag 覆盖及非 draft Release 行为一致 - deploy/.env.example：补充可选 RUST_LOG 注释 Made-with: Cursor secrets-mcp-0.2.2	2026-03-22 16:15:29 +08:00
voson	719bdd7e08	feat(secrets-mcp): public home at /, login at /login (0.2.2) ... Bump secrets-mcp to 0.2.2 and sync Cargo.lock. Add home.html landing with SEO and footer link to the refining/secrets repository; serve it at / and expose /login for sign-in. Update OAuth error redirects and dashboard unauthenticated redirects to /login. Improve login page meta tags, back-home link, and OAuth error alert. Refresh llms.txt and robots.txt. Made-with: Cursor	2026-03-22 16:11:59 +08:00
voson	1e597559a2	feat(core): FK for user_id columns; MCP search requires user ... - Add fk_entries_user_id, fk_entries_history_user_id, fk_audit_log_user_id (ON DELETE SET NULL) - Add scripts/cleanup-orphan-user-ids.sql for pre-deploy orphan user_id cleanup - Remove deprecated SERVER_MASTER_KEY / per-user key wrap helpers from secrets-core - secrets-mcp: require authenticated user for secrets_search; improve body-read failure response - Bump secrets-mcp to 0.2.1 Made-with: Cursor secrets-mcp-0.2.1	2026-03-22 15:40:02 +08:00
voson	e3ca43ca3f	release(secrets-mcp): 0.2.0 ... - 日志时间戳使用本地时区（chrono RFC3339 + 偏移） - MCP tools / Web 路由与行为调整 - 新增 static/llms.txt、robots.txt；文档与 deploy 示例同步 Made-with: Cursor secrets-mcp-0.2.0	2026-03-22 14:44:00 +08:00
voson	0b57605103	feat(secrets-mcp): MCP 请求日志、探测 404 与资源元数据 ... - 新增 logging 中间件：记录 client_ip、ua、JSON-RPC、tool 等 - tools 各入口/出口结构化日志 - 探测型 404（/.well-known、GET /mcp）降为 debug - /.well-known/oauth-protected-resource 最小元数据 - secrets-mcp 0.1.11 Made-with: Cursor secrets-mcp-0.1.11	2026-03-21 17:57:10 +08:00
voson	8b191937cd	docs(AGENTS): 精简提交/推送规则第4条 ... Made-with: Cursor	2026-03-21 16:56:06 +08:00
voson	11c936a5b8	docs(AGENTS): 明确提交/推送前必须检查版本号与运行 fmt/clippy/test ... Made-with: Cursor	2026-03-21 16:48:47 +08:00
voson	b6349dd1c8	chore(secrets-mcp): bump version to 0.1.10 ... Made-with: Cursor secrets-mcp-0.1.10	2026-03-21 16:46:33 +08:00
voson	f720983328	refactor(db): 移除无意义 actor，修复 history 多租户与模型 ... - 删除 entries_history / audit_log / secrets_history 的 actor 列及写入逻辑 - MCP secrets_history 透传当前 user_id - Entry 增加 user_id，search 查询不再用伪 UUID - 迁移：保留 users.api_key，从 api_keys 表回退时生成新明文 key 并删表 - 文档：audit_log auth 语义、API Key 存储说明 Made-with: Cursor	2026-03-21 16:45:50 +08:00
voson	7bd0603dc6	chore(secrets-mcp): bump version to 0.1.9 ... Made-with: Cursor secrets-mcp-0.1.9	2026-03-21 12:25:38 +08:00
voson	17a95bea5b	refactor(audit): 移除旧格式兼容，user_id 统一走列字段 ... - audit_log 查询去掉 detail->>'user_id' 回退分支 - login_detail 不再冗余写入 user_id 到 detail JSON - 迁移 SQL 去掉多余的 ALTER TABLE ADD COLUMN Made-with: Cursor	2026-03-21 12:24:00 +08:00
voson	a42db62702	style(secrets-mcp): rustfmt web.rs audit mapping ... Made-with: Cursor secrets-mcp-0.1.8	2026-03-21 12:06:29 +08:00
voson	2edb970cba	chore(secrets-mcp): bump version to 0.1.8 ... Made-with: Cursor	2026-03-21 12:05:22 +08:00
voson	17f8ac0dbc	web: 审计页时间按浏览器本地时区显示 ... Made-with: Cursor	2026-03-21 12:03:44 +08:00
voson	259fbe10a6	ci: 精简 Release upsert 逻辑 ... 提取 auth/api 公共变量避免重复；用 xargs 单行替换 while 循环清理 旧 assets；POST 分支用管道直接取 id 省去临时文件。 279 行 → 248 行。 Made-with: Cursor secrets-mcp-0.1.7	2026-03-21 11:36:43 +08:00
voson	c815fb4cc8	ci: 修复覆盖重发时 Release 唯一约束冲突 ... DELETE + POST 同名 release 会触发 Gitea 的 UQE_release_n 约束。 改为：已有 release → PATCH 更新 name/body，再逐个删除旧 assets 后重传； 无 release → 正常 POST 新建。 Made-with: Cursor	2026-03-21 11:33:45 +08:00
voson	90cd1eca15	ci: 允许对同版本覆盖重发版 ... - 解析版本时不再 exit 1，改为记录 tag_exists=true 并打印警告 - 创建 Tag 步骤：若 tag 已存在则先本地删除再远端删除，再重新打带注释的 tag - 创建 Release 步骤：先查询同名 Release，若存在则 DELETE 旧 Release，再 POST 新建 Made-with: Cursor	2026-03-21 11:22:24 +08:00
voson	da007348ea	ci: 合并为 ci + deploy 两个 job，check 先于 build ... 单台 self-hosted runner 下并行 job 只是排队，多 job 拆分带来的 artifact 传递、重复 checkout、调度延迟反而更慢。 改动： - 原 version/check/build-linux/publish-release 四个 job 合并为单个 ci job - 步骤顺序：版本拦截 → fmt/clippy/test → build → 打 tag → 发 Release - tag 在构建成功后才创建，避免失败提交留下脏 tag - Release 创建+上传+发布合并为单步，去掉草稿中转 - deploy job 仅保留 artifact 下载 + SSH 部署逻辑，不再重复编译 - 整体从 400 行缩减至 244 行 Made-with: Cursor	2026-03-21 11:18:10 +08:00
voson	f2344b7543	feat(secrets-mcp): 审计页、audit_log user_id、OAuth 登录与仪表盘 footer ... - audit_log 增加 user_id；业务写审计透传 user_id - Web /audit 与侧边栏；Dashboard 版本 footer 贴底（margin-top: auto） - 停止 API Key 鉴权成功写入登录审计 - 文档、CI、release-check 配套更新 Made-with: Cursor	2026-03-21 11:12:11 +08:00
voson	ee028d45c3	ci: 优化 workflow 并行度与产物传递 ... - check 与 build-linux 改为并行执行，节省约 10min - 新增 upload-artifact / download-artifact，deploy-mcp 直接复用二进制，免重复编译（节省约 15min） - check / build 缓存加入 target/ 目录，加速增量编译 - 提取 MUSL_TARGET 全局变量，消除 x86_64-unknown-linux-musl 硬编码 - publish-release 增加 check 结果检查，质量失败时不发布 Release - 移除 build-linux 冗余飞书通知，publish-release 汇总已覆盖 Made-with: Cursor	2026-03-21 10:07:29 +08:00
voson	a44c8ebf08	feat(mcp): persist login audit for OAuth and API key ... - Add audit::log_login in secrets-core (audit_log detail: user_id, provider, client_ip, user_agent) - Log web Google OAuth success after session established - Log MCP Bearer API key auth success in middleware - Bump secrets-mcp to 0.1.6 (tag 0.1.5 existed) Made-with: Cursor secrets-mcp-0.1.6	2026-03-21 09:48:52 +08:00
voson	a595081c4c	fix(dashboard): OpenCode 配置顶层 mcp 包裹；bump secrets-mcp 0.1.5 ... Made-with: Cursor secrets-mcp-0.1.5	2026-03-21 09:23:51 +08:00
voson	0a8b14211a	ci: 恢复 secrets workflow 为标准发版流程 ... Made-with: Cursor	2026-03-21 09:17:35 +08:00
voson	9cebbd7587	ci: 支持构建重跑并跳过重复发版 ... 让 workflow 根据变更范围区分发版构建与仅验证构建，并补充手动触发入口，避免已有版本 tag 阻塞缓存恢复后的重跑验证。 Made-with: Cursor	2026-03-21 09:10:05 +08:00
voson	4d136a5a20	ci: 停止缓存 target，避免 runner 磁盘耗尽 ... 同时将 secrets-mcp 版本提升到 0.1.4，以触发新的构建与发布流程。 Made-with: Cursor secrets-mcp-0.1.4	2026-03-20 22:10:48 +08:00
voson	7ce4aaf835	ci: 缓存键包含 Rust 版本；chore(secrets-mcp): 0.1.3 ... Made-with: Cursor secrets-mcp-0.1.3	2026-03-20 22:04:40 +08:00