feat(floot): ingest secrets as capabilities, not transcript text #25

Open

floot wants to merge 0 commits from feature/secret-ingestion into feat/hosted-endo-management

pull from: feature/secret-ingestion

merge into: floot:feat/hosted-endo-management

floot:llm

floot:codex/ironhorse-workflow-recovery

floot:fae/ironhorse-phase4-muy3ne05-ksg3ow-1

floot:codex/claude-provisioning-fixes

floot:pre-rebase/4e2644c37

floot:codex/tokyo-network-20260910

floot:codex/tokyo-pr1248-deploy-20260910

floot:codex/tokyo-llm-20260909

floot:codex/tokyo-pr-1224

floot:codex/tokyo-upstream-20260908

floot:agent

floot:feat/hosted-endo-management

floot:deploy/endo-tokyo

floot:chat-header-bar

floot:pre-rebase/f722336893

floot:pre-rebase/8ea79151a

Conversation 0 Commits - Files changed -

floot commented 2026-08-29 10:29:42 +09:00

Owner

Copy link

Closes #22

Summary

• Floot sessions get requestSecret and writeSecret. The operator pastes into a UI box; the model receives only a capability handle.
• EndoHost.writeSecret writes credential material to a mount without revealing the bytes.
• Form fields can opt in (asCredential / audience / secretKind) so submit mints a credential cap instead of storing the string.
• Prompts tell the agent never to ask for secrets in chat or put them in exec.

Test plan

• packages/floot/test/secret-request.test.js (3 passing)
• After deploy: in Floot, ask for a GitHub token; confirm a paste box appears and the assistant only reports a petname
• Pass that handle to provideGitRemote / writeSecret
• Confirm the secret does not appear in session history or tool args

Closes https://git.goooooo.ooo/floot/endo/issues/22 ## Summary - Floot sessions get `requestSecret` and `writeSecret`. The operator pastes into a UI box; the model receives only a capability handle. - `EndoHost.writeSecret` writes credential material to a mount without revealing the bytes. - Form fields can opt in (`asCredential` / `audience` / `secretKind`) so submit mints a credential cap instead of storing the string. - Prompts tell the agent never to ask for secrets in chat or put them in exec. ## Test plan - [x] `packages/floot/test/secret-request.test.js` (3 passing) - [ ] After deploy: in Floot, ask for a GitHub token; confirm a paste box appears and the assistant only reports a petname - [ ] Pass that handle to `provideGitRemote` / `writeSecret` - [ ] Confirm the secret does not appear in session history or tool args

floot added 1 commit 2026-08-29 10:29:42 +09:00

feat(floot): ingest secrets as capabilities, not transcript text ... a48bea2b35

Give the operator a paste box (and an opt-in form field) that mints a
daemon credential. The agent receives only a handle it can pass to
provideGitRemote or writeSecret, so tokens never enter chat, exec, or
the model transcript.

floot referenced this pull request 2026-08-29 17:38:14 +09:00

Codex CLI Pro 20x runtime: durable host auth via #22 secret ingestion #26

floot added 2 commits 2026-08-29 18:34:56 +09:00

chore: Update yarn.lock 2bb0c6f806

fix(floot): bind secret submissions to acceptors 649ce44526

floot referenced this pull request from a commit 2026-09-01 14:37:39 +09:00

fix(daemon): writeSecret threw on every successful call

Some checks failed

Hide all checks

CI / lint (pull_request) Has been cancelled

Details

CI / familiar-bundle (pull_request) Has been cancelled

Details

CI / test (pull_request) Has been cancelled

Details

CI / test-1 (pull_request) Has been cancelled

Details

CI / test-2 (pull_request) Has been cancelled

Details

CI / test-3 (pull_request) Has been cancelled

Details

CI / sandbox-drivers (pull_request) Has been cancelled

Details

CI / test-async-hooks (pull_request) Has been cancelled

Details

CI / cover (pull_request) Has been cancelled

Details

CI / cover-1 (pull_request) Has been cancelled

Details

CI / test262 (pull_request) Has been cancelled

Details

CI / test262-1 (pull_request) Has been cancelled

Details

CI / test-hermes (pull_request) Has been cancelled

Details

CI / check-action-pins (pull_request) Has been cancelled

Details

CI / viable-release (pull_request) Has been cancelled

Details

CI / viable-release-1 (pull_request) Has been cancelled

Details

CI / test-xs (pull_request) Has been cancelled

Details

CI / build-xsnap (pull_request) Has been cancelled

Details

CI / test-ironhorse (pull_request) Has been cancelled

Details

CI / test-ocapn-python (pull_request) Has been cancelled

Details

CI / build-wasm (pull_request) Has been cancelled

Details

Test project mutual dependency versions / build (pull_request) Has been cancelled

Details

Workflow security audit / zizmor (pull_request) Has been cancelled

Details

This branch is already included in the target branch. There is nothing to merge.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feature/secret-ingestion:feature/secret-ingestion

git switch feature/secret-ingestion

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch feat/hosted-endo-management

git merge --no-ff feature/secret-ingestion

git switch feature/secret-ingestion

git rebase feat/hosted-endo-management

git switch feat/hosted-endo-management

git merge --ff-only feature/secret-ingestion

git switch feature/secret-ingestion

git rebase feat/hosted-endo-management

git switch feat/hosted-endo-management

git merge --no-ff feature/secret-ingestion

git switch feat/hosted-endo-management

git merge --squash feature/secret-ingestion

git switch feat/hosted-endo-management

git merge --ff-only feature/secret-ingestion

git switch feat/hosted-endo-management

git merge feature/secret-ingestion

git push origin feat/hosted-endo-management

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

floot/endo!25

No description provided.