feat(provider-security): ChefVault-backed per-request credentials - #38

Merged

OnlineChef merged 21 commits into

devfrom

feat/provider-security-plane

Aug 2, 2026

Commits on Aug 1, 2026

feat(provider-security): ChefVault client, in-memory slots, degraded stub (PSP-008)

OnlineChef
and
Cursor Agent (cursoragent)
committed
feat(provider-security): ChefVault client, slots, and degraded mode

OnlineChef
and
Cursor Agent (cursoragent)
committed
fix(ci): refresh gui bun.lock for frozen install

OnlineChef
and
Cursor Agent (cursoragent)
committed
fix(ci): unblock actionlint SC2129 and keep gui lockfile frozen

OnlineChef
and
Cursor Agent (cursoragent)
committed
fix(provider-security): lease chefvault credentials on every provider request

OnlineChef
and
[code]smith (codesmith-bot)
committed
fix(provider-security): send ChefVault bearer token and split doctor readiness

OnlineChef
and
Cursor Agent (cursoragent)
committed
chore(provider-security): drop unrelated workflow/lockfile churn from PSP PR

OnlineChef
and
Cursor Agent (cursoragent)
committed
fix(provider-security): align doctor auth assertions and auth_forbidden code

OnlineChef
and
Cursor Agent (cursoragent)
committed
fix(tests): use allowlisted bearer fixture token for privacy scan

OnlineChef
and
[code]smith (codesmith-bot)
committed

Commits on Aug 2, 2026