Repository navigation
secrethandoff 0.0.2
Secret Handoff 0.0.2 adds grouped local credential requests and owner-selected host approval.
- Collect 2–8 credentials, such as username and password, on one private browser form. Values become ready together; forgetting the group or any member erases the whole group.
- Keep browser command approval by default, or explicitly opt into supported Claude Code permission prompts or Codex approval settings. Codex policy may authorize automatically; this mode does not claim a fresh human click.
- Receive complete structured command outcomes, including execution, exit code, redacted output, and timeout/cancellation state.
Secret entry stays in the isolated browser. Approved commands receive the credentials and can leak them; API policy does not confine commands. Phone/remote relay is disabled on the public service.
Update the binary and the companion plugin separately, then start a new client session. See the CLI guide for opt-in compatibility and configuration.
Downloads include SHA-256 checksums, Developer ID signed/notarized macOS binaries, and GitHub build provenance. Verify an artifact with gh attestation verify <file> --repo geland/secrethandoff.