 James MaesandClaude Fable 5
|
a060c6735b
|
Phase 1: accounts foundation — model, credential vault, store, CLI (#16)
- Account record + AccountsStore: metadata-only accounts.json (atomic
temp-file + File.Replace persistence with .bak; corrupt files are
preserved aside so vault tokens can be re-associated, never clobbered)
- ITokenVault with CredentialManagerVault (Win32 CredRead/CredWrite
P/Invoke, spike-proven on plain net10.0; token blob zeroed while
pinned) and InMemoryVault for tests
- CLI: gclo accounts [--json]; gclo sync --account <name> with explicit
flags overriding account values, RecordSyncResult on completion,
Windows-only guard; interactive --token-stdin now reads without echo
- Security review (3 lenses, adversarially verified): 4 confirmed
findings fixed pre-ship, 13 refuted
- 20 new tests (146 total) incl. real Credential Manager round-trip
and crash-safety pinning; plan doc updated (vault decision, Phase 3
active strip)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-04 15:29:42 -05:00 |
|