Release v7.127.0

Agents can now model, configure, render and run Cratis applications that sign people in through AuthProxy and onboard them through their own Ante.

Added

• cratis-screenplay-authentication-and-onboarding: the Screenplay authentication and onboarding blocks, their diagnostics and the environment keys derived from them
• cratis-environments-and-secrets: Cratis environments in .cratis/environments, passphrase-encrypted values and Azure Key Vault or HashiCorp Vault references, and how cratis run resolves them
• cratis-showrunner-herald: sending email with Herald, its templates, images and transports
• cratis-onboarding-runtime: how AuthProxy, Ante and the Stage Manager operator run an application, including local development mode
• The Stage rendering and render-and-gap-fill skills teach what Stage renders for authentication and onboarding, the sandbox's forwarded identity, and what cratis run starts when a model declares authentication (#969)

Security

• The secrets guard hook blocks cratis config get --show-secret; run cratis ai update to get the updated hook