Comparing e6643bdc4d..03576b7f72 - xworkspace-console - gitea.svc.plus

ai-workspace-lab/xworkspace-console

Author	SHA1	Message	Date
Haitao Pan	03576b7f72	ci: honor AI_WORKSPACE_AUTH_TOKEN from input/Vault, pass through to host (#11 ) (#12 ) Restore the Vault kv/CICD/AI_WORKSPACE_AUTH_TOKEN read in the deploy job (the key now exists) and resolve the bootstrap token with a clear precedence: workflow_dispatch input overrides, else Vault value, else the on-host installer's resolve_unified_auth_token reuses the persisted ~/.ai_workspace_auth_token or generates a new one. Also fix run-on-host-bootstrap.sh which silently dropped AI_WORKSPACE_AUTH_TOKEN: it is now written to the remote env payload and exported, so an input/Vault-provided token is actually honored on the host instead of being regenerated. Empty stays empty so the no-arg curl\|bash install path still self-generates. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-28 17:10:06 +08:00
Haitao Pan	6d934be2cb	ci: remove AI_WORKSPACE_AUTH_TOKEN from vault-action reads (#10 ) vault-action ignoreNotFound only suppresses path-level 404, not missing keys within an existing path. Token is now sourced exclusively from the ai_workspace_auth_token workflow_dispatch input. Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-28 16:56:20 +08:00
Haitao Pan	fe4cfa7601	ci: simplify AI_WORKSPACE_AUTH_TOKEN input description for consistency (#8 ) Remove openssl rand -hex 32 alternative (format inconsistent with UUID output). Standardize to UUID-only generation hint matching existing input description style. Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-28 16:45:26 +08:00
Haitao Pan	0f08464a77	ci: support customizable AI_WORKSPACE_AUTH_TOKEN in deployment workflow (#5 ) - Add AI_WORKSPACE_AUTH_TOKEN to Vault KV secret reads (provision + deploy jobs) - Add ai_workspace_auth_token as optional workflow_dispatch input parameter - Allow runtime override of auth token (input takes precedence over Vault) - Include TLDR token generation guidance in workflow description - Wire token through all-in-one bootstrap with precedence: input > Vault Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>	2026-06-28 16:33:59 +08:00
Haitao Pan	6257cd41ea	backport: support customizable AI_WORKSPACE_AUTH_TOKEN in deployment workflow	2026-06-28 16:32:30 +08:00
Haitao Pan	b9c649af68	ci: backport release/* source validation workflow to release/v1.1.5 (#3 ) 让现有 release/v1.1.5 分支自身包含门禁 workflow（pull_request_target 用 base 分支版本）。详见 iac_modules/docs/tldr-github-branch-model.md Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-28 12:41:18 +08:00

Diff Content Not Available