apra-fleet Files

What's new in v0.1.7

Credential store & {{secure.NAME}} token resolution

Secrets can now be stored out-of-band and referenced by name — they never appear in prompts, logs, or chat history.

• credential_store_set — prompts for a secret value in a separate terminal window (OOB), stores it encrypted at ~/.apra-fleet/data/credentials.enc
• credential_store_list — lists stored credential names (values never shown)
• credential_store_delete — removes a credential from both session and persistent tiers
• {{secure.NAME}} token resolution — use credential handles in execute_command, register_member, update_member, provision_vcs_auth, provision_auth, and setup_git_app; the server resolves and redacts values before the LLM sees any output
• execute_prompt guard — prompts containing {{secure.NAME}} tokens are rejected with an error; secrets must never reach LLM context
• setup_git_app — {{secure.NAME}} tokens now resolve as PEM content for private key fields
• OOB fallback for provision_vcs_auth and provision_auth — when no token is provided, triggers secure out-of-band collection automatically

OOB secure input improvements

• Replaced raw-mode terminal input with @inquirer/password masked input for secure value entry
• OOB prompt header changed from "Member: X" to "Enter secure value for: X" — accurate for both member auth and credential store use
• Generic secure-input message on the OOB collection window (no longer labels as "API key")

Bug fixes

• OOB retry hang (#164) — after a cancel or fallback, hasPendingAuth() was returning true and blocking re-entry; fixed by cleaning up pendingRequests and passwordWaiters in all exit paths
• Credential name shown as member name (#165) — credential_store_set was passing the credential name as memberName to the OOB prompt; now shows "Enter secure value for: MY_CRED" instead of "Member: MY_CRED"
• ESM __dirname incompatibility (#33) — __dirname used in ESM context replaced with fileURLToPath(import.meta.url) across affected modules
• cloud_activity_command blocked empty string (#5) — removed .min(1) Zod validation that prevented clearing the custom activity command
• Headless OOB hint (#106) — when the OOB terminal can't open (headless / CI environment), the error message now includes a hint to use credential_store_set pre-flight

CI & deliverable fixes

• update-llms-full workflow now checks out by commit SHA rather than branch name — survives branch deletion after PR merge
• CLAUDE.md and AGENTS.md are now restored from origin/main by the cleanup command rather than deleted — preserves them as project deliverables
• paths-ignore added for llms-full.txt on main push — prevents auto-commit loops
• Refuse-to-commit guard added: update-llms-full will not auto-commit directly to main

Documentation

• Comprehensive credential store documentation added to README, fleet skill, and PM skill
• PM skill documents {{secure.NAME}} usage rules, OOB workflow, and mid-sprint credential rotation
• llms-full.txt regenerated