5f85d895c1
The CRS-served harnesses still carried `secrets_files: [{encrypted: true}]`
which now hard-fails on H-SECRET-1 ("SOPS-encrypted secrets_files entries
are no longer permitted") in the dispatcher's harness validator. Sync the
8 provider harnesses with the agent-runtimes copies: same `secrets_required`
shape, same `init.sh` (ESO-mounted file paths), same `bin/` wrappers.
Use bare `account_ref: "<provider>"` (not `<provider>.cp:cp` — that
scope-kind isn't valid per SR-DISP-1-FIELD).
Provider key names follow the per-provider schema as emitted by the CP
provisioner: minimax/airouter/z-ai → api_key; gitea-https/gitea-admin →
{token,base_url,username}; gitea-ssh* → {host,private_key}.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
46 lines
1.9 KiB
Bash
Executable File
46 lines
1.9 KiB
Bash
Executable File
#!/bin/bash
|
|
# gitea-admin-wrapper.sh — reads the ESO-mounted gitea-admin token at exec time
|
|
# and prefixes it as a transient env var to the underlying tool.
|
|
#
|
|
# M22 Phase 9: token mounted at /run/agent/secrets/gitea-admin/token (read-only,
|
|
# tmpfs, mode 0400). The token NEVER enters the wrapper's parent shell — only
|
|
# the exec'd tool's environment via `exec env VAR=value cmd`. The brief
|
|
# presence in /proc/<tool_pid>/environ of the tool process is the accepted
|
|
# floor (per spec/secrets-runtime.md SR-DISP-7 / H-SECRET-4).
|
|
set -euo pipefail
|
|
|
|
TOKEN_FILE="/run/agent/secrets/gitea-admin/token"
|
|
|
|
# git-credential-helper subcommand: read token and emit git credential format.
|
|
# Git invokes us as `gitea-admin-wrapper.sh git-credential-helper get` and
|
|
# expects key=value lines on stdout terminated by a blank line.
|
|
git_credential_helper() {
|
|
if [[ ! -r "$TOKEN_FILE" ]]; then
|
|
echo "gitea-admin-wrapper: token file not readable at $TOKEN_FILE" >&2
|
|
exit 1
|
|
fi
|
|
local base_url="${GITEA_BASE_URL:-https://gitea.oreillyit.nz}"
|
|
local host
|
|
host=$(echo "$base_url" | sed 's|https\?://||')
|
|
# Trailing blank line per git credential-helper protocol.
|
|
printf 'protocol=https\nhost=%s\nusername=git\npassword=%s\n\n' "$host" "$(cat "$TOKEN_FILE")"
|
|
exit 0
|
|
}
|
|
|
|
case "${1:-}" in
|
|
git-credential-helper)
|
|
git_credential_helper
|
|
;;
|
|
*)
|
|
if [[ ! -r "$TOKEN_FILE" ]]; then
|
|
echo "gitea-admin-wrapper: token file not readable at $TOKEN_FILE" >&2
|
|
exit 1
|
|
fi
|
|
# `exec env VAR=...` keeps the secret out of the wrapper's parent shell
|
|
# — it lands only in the exec'd tool's /proc/<pid>/environ. NEVER use
|
|
# `export VAR=` here, which would leak the secret to the wrapper's
|
|
# ancestors (H-SECRET-4 violation).
|
|
exec env GITEA_ADMIN_TOKEN="$(cat "$TOKEN_FILE")" "$@"
|
|
;;
|
|
esac
|