Repository navigation

Add credential fill, vaults, TOTP and 1Password tokens, with LLM tools - #131

Merged

AHarmlessPyro merged 23 commits into

mainfrom

credentials

Oct 15, 2026

Merged

Add credential fill, vaults, TOTP and 1Password tokens, with LLM tools#131
AHarmlessPyro merged 23 commits into
mainfrom
credentials

Commits on Oct 15, 2026
- Add credential secrets, session credential fill, and a fill_credential tool
  
  AHarmlessPyro
  and
  claude
  committed
  1c2f1a0
- Document credential fill and bump version to 1.3.0
  
  AHarmlessPyro
  and
  claude
  committed
  a3e68c4
- Keep error details as the body and add Gemini definitions to every tool
  
  AHarmlessPyro
  and
  claude
  committed
  e592b87
- Use the API's spelling of the browser sessions scope in the README
  
  AHarmlessPyro
  and
  claude
  committed
  e682872
- Leave the version for the release to set
  
  AHarmlessPyro
  and
  claude
  committed
  b7a71d3
- Fill secrets and vaults into sessions with selectors
  
  AHarmlessPyro
  and
  claude
  committed
  d363d8e
- Replace credential secrets with allowed origins, TOTP and op_token types
  
  AHarmlessPyro
  and
  claude
  committed
  f093306
- Add client.vaults for stored and 1Password vaults
  
  AHarmlessPyro
  and
  claude
  committed
  ef9bcb8
- Deliver vaults to sandboxes and report every binding kind
  
  AHarmlessPyro
  and
  claude
  committed
  a434489
- Document secrets with origins, TOTP, vaults and 1Password in the README
  
  AHarmlessPyro
  and
  claude
  committed
  2d519d6
- Refuse incomplete and HOTP TOTP values, and drop the short-seed warning
  
  AHarmlessPyro
  and
  claude
  committed
  983c3c4
- Attribute wrong-kind vault entries to VAULT_ENTRY_INVALID in the README
  
  AHarmlessPyro
  and
  claude
  committed
  bc31886
- Read TOTP seeds as vm-service does, and keep fill and sandbox fixes
  
  AHarmlessPyro
  and
  claude
  committed
  f46ad68
- Refuse an empty source in a vault update, as the API now does
  
  AHarmlessPyro
  and
  claude
  committed
  234f8e1
- Drop TOTP as the example of a value a host can't fill
  
  AHarmlessPyro
  and
  claude
  committed
  8991b10
- Move 1Password from vaults to a per-request onePassword source
  
  AHarmlessPyro
  and
  claude
  committed
  9a23677
- Explain how a fill chooses its tab, with the origin check after
  
  AHarmlessPyro
  and
  claude
  committed
  a902ee8
- Fill 1Password fields into browser sessions through an op_token
  
  AHarmlessPyro
  and
  claude
  committed
  05ca387
- Read TOTP seeds split across lines, as vm-service now does
  
  AHarmlessPyro
  and
  claude
  committed
  5cade7a
- Check a vault description's length after trimming, as the API does
  
  AHarmlessPyro
  and
  claude
  committed
  27643bf
- Type tab_opened session events
  
  AHarmlessPyro
  and
  claude
  committed
  9d92768
- Simplify credential validation and keep Gemini tools scoped to fill
  AHarmlessPyro
  committed
  8c7a73c
- Bump the version to 1.3.1
  
  AHarmlessPyro
  and
  claude
  committed
  6899a11

Commits

Commits on Oct 15, 2026