me
be87900794
Mechanical rename (package agent_credential_broker; entry points
agent-broker{,-mcp,-plugin}; env AGENT_BROKER_*; paths agent-broker;
agent-browser credential provider 'broker'; MCP server name agent-broker).
New backend 'openbao': stdlib-only HTTP client for OpenBao/Vault KV v2
(approle login or token file/env; metadata-only ref index; lazy re-login
on 401/403; token renewal). bitwarden-cli backend kept as transition.
13 lines
442 B
JSON
13 lines
442 B
JSON
{
|
|
"id": "example-echo",
|
|
"description": "Test profile: echoes argv, reads the injected credential only inside the child.",
|
|
"executable": "echo-fixture",
|
|
"injection": {"method": "env", "name": "EXAMPLE_TOKEN"},
|
|
"allowed_subcommands": ["hello", "version"],
|
|
"arg_regex": "^[\\w .\\-/:]+$",
|
|
"forbidden_regex": "[;&|`$<>(){}\\[\\]\n]|(^|/)\\.\\.(/|$)",
|
|
"target_hosts": ["example.com"],
|
|
"timeout": 10,
|
|
"max_output_bytes": 8192
|
|
}
|