5 commits

Author	SHA1	Message	Date
Claude	3a4f2c0101	fix: keep GITHUB_TOKEN/CODEBERG_TOKEN secrets in release vault action ... formulas/release.sh still uses API tokens for mirror pushes. Add mounts alongside secrets rather than replacing them, so both the .sh (token) and .toml (SSH) formula paths work. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-10 06:36:59 +00:00
Claude	43af38046c	fix: feat: vault actions should support mount declarations for credentials like SSH keys (#528) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-10 06:30:08 +00:00
Claude	77de5ef4c5	fix: bug: dispatcher runner invokes formulas as bash scripts but formulas are TOML (#516) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-09 19:02:52 +00:00
Agent	a7ad6eb32a	fix: feat: versioned releases — vault-gated tag, image build, and deploy (#112)	2026-04-01 14:03:49 +00:00
Agent	af8b675b36	fix: feat: define vault action TOML schema for PR-based approval (#74) ... - Add vault/SCHEMA.md documenting the TOML schema for vault actions - Add validate_vault_action() function to vault/vault-env.sh that: - Validates required fields (id, formula, context, secrets) - Validates secret names against allowlist - Rejects unknown fields - Validates formula exists in formulas/ - Create vault/validate.sh script for CLI validation - Add example TOML files in vault/examples/: - webhook-call.toml: Example calling external webhook - promote.toml: Example promoting build/artifact - publish.toml: Example publishing to ClawHub	2026-03-31 20:58:51 +00:00