Skip to content

v1.1.3 - Keychain-auth integration

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 May 02:22
· 88 commits to main since this release
v1.1.3
c54ba6b

AgentSecrets v1.1.3 — Keychain-auth integration

This release marks a milestone in zero-knowledge security with the full integration of the keychain-auth daemon, alongside significant improvements to collaboration workflows and platform visibility.

🛡️ The Security Spearhead: keychain-auth Integration

The core of v1.1.3 is the architectural shift to a verified-access model for OS keychains.

  • Process Verification: Secrets are no longer directly accessible by the CLI. All requests now pass through the keychain-auth daemon, which performs binary hash validation and PID verification.
  • Hardened Keychain Boundary: This ensures that only an authentic, untampered AgentSecrets binary can retrieve credentials from the macOS Keychain, Windows Credential Manager, or Linux Secret Service.
  • Zero-Knowledge Persistence: Credentials remain locked at the OS level, resolved only in-memory by the verified daemon, and injected at the transport layer by the proxy.

🚀 Key Features

Seamless Project Migration (project invite)

Inviting a collaborator to a project in your personal workspace now triggers an automated, secure migration. AgentSecrets automatically creates a shared workspace, moves the project context, and re-encrypts all secrets (dev/staging/prod) with a new workspace key. Ths ensures that personal workspaces with your personal projects do not get compromised.

Platform Telemetry & Analytics

A privacy-first telemetry system now tracks aggregate usage patterns (command volume, proxy styles, integration health). This allows for continuous platform optimization without ever touching or seeing your secret values.

Robust Multi-Channel Distribution

Our NPM and Pip wrappers now feature dynamic resolution logic, automatically pulling the latest stable Go binary from GitHub for a seamless installation experience across all environments.

Changelog

  • f4aac5d Revise README for clarity and feature updates
  • e69055c Update README
  • c54ba6b feat: implement project invite with personal workspace migration, telemetry, and release prep
  • 43d4df8 feat: integrate keychain-auth socket client and auto-setup
  • 5c7ba35 fix: wrapper with auto-update binary logic and set it to use latest agentsecrets binary, not v1.0.4
Assets 9
Loading