secrethandoff 0.0.3

Secret Handoff now reuses each agent session's isolated browser window as tabs and disables password saving in its temporary profile.

• Retire the owned browser and temporary profile 30 seconds after the last Secret Handoff tab disconnects.
• Preserve the window across brief reloads and reconnects.
• Run normal session cleanup on interrupt and SIGTERM.
• Keep separate profiles for separate agent sessions, with extensions and sync disabled and no browser debugging port.

Closing the browser does not forget secrets already held by the running tool process. Restart existing agent sessions after updating the CLI to use this version.

macOS binaries are Developer ID signed and notarized. Verify package provenance with gh attestation verify <file> --repo geland/secrethandoff.

secrethandoff 0.0.2

Secret Handoff 0.0.2 adds grouped local credential requests and owner-selected host approval.

• Collect 2–8 credentials, such as username and password, on one private browser form. Values become ready together; forgetting the group or any member erases the whole group.
• Keep browser command approval by default, or explicitly opt into supported Claude Code permission prompts or Codex approval settings. Codex policy may authorize automatically; this mode does not claim a fresh human click.
• Receive complete structured command outcomes, including execution, exit code, redacted output, and timeout/cancellation state.

Secret entry stays in the isolated browser. Approved commands receive the credentials and can leak them; API policy does not confine commands. Phone/remote relay is disabled on the public service.

Update the binary and the companion plugin separately, then start a new client session. See the CLI guide for opt-in compatibility and configuration.

Downloads include SHA-256 checksums, Developer ID signed/notarized macOS binaries, and GitHub build provenance. Verify an artifact with gh attestation verify <file> --repo geland/secrethandoff.

secrethandoff 0.0.1

Verify a download: gh attestation verify --repo geland/secrethandoff