v0.23.0

Changelog

• f2c7bee feat(secrets)!: drop the TF_VAR_ default from env and exec

v0.22.1

Changelog

• f4f4a6b fix(binding): worktrees share the main repo's pin

v0.22.0

Changelog

• f9e09b9 docs: the binding flow no longer starts with a detour
• 2cdab83 feat(binding): monorepo support, inline first-use pin, visible recovery lines

v0.21.2

Changelog

• b18407a fix(cli): three spec refs on Long-block continuation lines

v0.21.1

Changelog

• f3a3f41 fix(cli): stop citing spec sections in user-facing text

v0.21.0

Changelog

• 32ff2fc chore(worker): migrate to vitest 4 — clears the dev-dep advisories
• 4803df6 refactor!: move secrets projects to wapps projects
• 06cc502 fix(doctor): check what actually gates a secret read
• 4b5d96b docs(changelog): cut v0.21.0
• aa8fc04 docs: rewrite for a world with no encrypted archive
• 46ee53e refactor(secrets)!: remove the legacy git-age backend

v0.20.0

Changelog

• 44dddf7 fix(secrets): control plane was unreachable — move policy under /v1/admin, add login --write
• f295d88 docs(changelog): projects list/rm + clierr cause in v0.20.0
• e545b63 fix(clierr): print the wrapped cause in error output
• 3b29cda feat(secrets): wapps secrets projects list/rm — see and remove projects
• 3f7ee6b docs(changelog): cut v0.20.0
• 68d7096 fix(worker): resolve the npm ERESOLVE deadlock; commit a lockfile
• 60e1c04 feat(secrets): wapps secrets rm + separate delete policy verb
• db07ff7 docs(skill): add wapps tofu to the embedded wapps-secrets skill (v0.19.0+) (#34)

v0.19.0

Changelog

• 60c8da7 feat(cli): add wapps tofu — clean first-class wrapper over secrets exec --prefix '' -- tofu (#33)

v0.18.0

Changelog

• 2da78e2 feat(secrets): zero-git store core — deploy/dr/coolify store-backed, dr bootstrap + epoch-reset, mTLS, worker replication (#32)

v0.17.2

Changelog

• af19fe5 feat(secrets): dr split / dr combine — MASTER_KEK Shamir offline custody (#31)