v0.4.2

Rust runtime release. See MIGRATION.md for Bash → Rust notes.

Install pin:

VAULTED_AGENT_VERSION=v0.4.2 curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

What's Changed

• Document how to refresh the hosted bootstrap installer by @JacobStephens2 in #40
• docs: pin README latest links to v0.4.1 by @JacobStephens2 in #41
• Add 1Password item selection to va refresh by @JacobStephens2 in #42

Full Changelog: v0.4.1...v0.4.2

v0.4.1

Rust runtime release. See MIGRATION.md for Bash → Rust notes.

Install pin:

VAULTED_AGENT_VERSION=v0.4.1 curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

What's Changed

• Rust runtime: full vaulted-agent rewrite (v0.4.0) by @JacobStephens2 in #27
• Ship Linux releases as static musl builds by @JacobStephens2 in #39

New Contributors

• @JacobStephens2 made their first contribution in #27

Full Changelog: v0.4.0...v0.4.1

v0.4.0

Rust runtime release. See MIGRATION.md for Bash → Rust notes.

Install pin:

VAULTED_AGENT_VERSION=v0.4.0 curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

Full Changelog: v0.3.0...v0.4.0

v0.3.0

vaulted-agent 0.3.0

New

• va run -m MANIFEST [--backend NAME] -- cmd… – inject vault secrets into any command without a harness file
• va doctor – check harnesses, backend CLIs, auth files, manifest syntax (no secret values)
• va secrets list|get|which|validate – Bitwarden SM helpers using the same auth as launches
• va version / --version / -V
• Named Bitwarden refs: UUID, uuid:…, name:KEY, project:PROJECT/KEY
• Manifest validation rejects placeholders (REPLACE_…, all-zero UUIDs, …) before launch
• Bitwarden setup explains SM access token vs vault password and can build a refs file from bws secret list

Fixes

• install.sh --backend … rewrites DEFAULT_BACKEND in the installed launcher
• Install summary prints the correct token path (bws.env / op.env / …)
• Clearer no-TTY / agent→agent auth errors when a token prompt is impossible
• Remote installer pin: DEFAULT_VERSION=v0.3.0

Upgrade

curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash
# or
VAULTED_AGENT_VERSION=v0.3.0 curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

Existing harnesses and token files are kept.

v0.2.0

Zero-friction install

curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash
va claude
va codex
va grok

What is new

1. Auto-detect agents — if claude / codex / grok are on PATH, live harnesses are written (plainfile + empty.env so launch works before vault wiring).
2. Vault setup — interactive backend choice during install (TTY), or vaulted-agent setup later. Non-interactive: --backend onepassword --op-token-file ./token.
3. No token on disk — va claude --prompt-auth (or -p) prompts for the vault token for this launch only.

Skip auto-detect: --no-auto-harness. Skip prompts: --no-setup / -y.

v0.1.3

Short alias: va

va claude
va pick
sudo va uninstall

Install creates /usr/local/bin/va (and ~/.local/bin/va when linking into a
home directory) as a symlink to vaulted-agent. Skip with --no-va. If va
already exists and is not ours, install refuses unless you pass --force.

Upgrade

curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

v0.1.2

Uninstall after curl|bash

sudo vaulted-agent uninstall
sudo vaulted-agent uninstall --purge   # also remove config

Uninstall lives in the installed binary, so you no longer need the repo tree
(or a re-download of uninstall.sh) to reverse a one-liner install.

Still never deletes backend credentials (op.env / etc.).

Upgrade

curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

v0.1.1

macOS + Linux

The one-liner now works on both platforms (stock macOS bash 3.2 included):

curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

Fixes

• Portable home-directory lookup (no getent required)
• Portable path resolution (no GNU readlink -f required)
• No mapfile / associative arrays (bash 3.2 safe)
• demo/try-it.sh works without /proc (uses ps on macOS)
• Creates /usr/local/bin when missing

Install from GitHub

git clone --branch v0.1.1 --depth 1 \
  https://github.com/JacobStephens2/vaulted-agent-launcher
cd vaulted-agent-launcher && sudo ./install.sh

v0.1.0

First release of vaulted-agent-launcher.

Install

One-liner (bootstrap on stephens.page; payload is this release tarball):

curl -fsSL https://stephens.page/vaulted-agent/install.sh | bash

From GitHub:

git clone --branch v0.1.0 --depth 1 \
  https://github.com/JacobStephens2/vaulted-agent-launcher
cd vaulted-agent-launcher && sudo ./install.sh

Pin explicitly with VAULTED_AGENT_VERSION=v0.1.0 if you use the one-liner on a shared host.

What's included

• vaulted-agent launcher with harness registry and manifests
• install.sh / uninstall.sh for local install
• install-remote.sh bootstrap used by the stephens.page one-liner
• demo/try-it.sh for a no-root, no-vault walkthrough