feat(integrations): run catalog tools with local credentials - #3843

Merged

kojiwakayama merged 26 commits into

mainfrom

feat/issue-495-byo-local-integration-credentials

Aug 19, 2026

Commits on Aug 18, 2026

Define the safe boundary for account-free integration tools
kojiwakayama
committed
8119a22
Sequence account-free integration delivery through bounded TDD seams
kojiwakayama
committed
0413f9e
Prevent implicit capability grants in local integration sources
kojiwakayama
committed
bd8bb68
Keep local provider secrets inside a name-addressed credential boundary
kojiwakayama
committed
9f3a2a4
Keep local integration HTTP execution inside a bounded egress contract
kojiwakayama
committed
11b567d
Make explicit local grants executable without a Veryfront account
kojiwakayama
committed
db2ddab
Make local integration credentials discoverable without an account
kojiwakayama
committed
874e29d
Keep local credential execution stable in a shared host realm
kojiwakayama
committed
52ae29e
Keep local integration credentials bound to trusted catalog metadata
kojiwakayama
committed
58b499c
Reject malformed local integration calls before credentials move
kojiwakayama
committed
3d2112f
Keep documentation contracts independent of process cwd
kojiwakayama
committed
b18cc14
fix(integrations): honor catalog token contracts
kojiwakayama
committed
fb75b78
docs(integrations): align credential contract
kojiwakayama
committed
9ab5b17
fix(integrations): harden local credential execution
kojiwakayama
committed
5fe6ca2
Merge origin/main into feat/issue-495-byo-local-integration-credentials
kojiwakayama
committed
42b2891
fix(integrations): harden local-credential shapes and defer catalog capture
kojiwakayama
committed
d8b9d0d
docs(api-reference): regenerate integrations source line pins
kojiwakayama
committed
b9cf6b4
test(integrations): gate the primordial-poison proof to the Deno runner
kojiwakayama
committed
9e690a9

Navigation Menu

Uh oh!

feat(integrations): run catalog tools with local credentials - #3843

feat(integrations): run catalog tools with local credentials#3843
kojiwakayama merged 26 commits into
mainfrom
feat/issue-495-byo-local-integration-credentials

Commits on Aug 18, 2026

Define the safe boundary for account-free integration tools

Sequence account-free integration delivery through bounded TDD seams

Prevent implicit capability grants in local integration sources

Keep local provider secrets inside a name-addressed credential boundary

Keep local integration HTTP execution inside a bounded egress contract

Make explicit local grants executable without a Veryfront account

Make local integration credentials discoverable without an account

Keep local credential execution stable in a shared host realm

Keep local integration credentials bound to trusted catalog metadata

Reject malformed local integration calls before credentials move

Keep documentation contracts independent of process cwd

fix(integrations): honor catalog token contracts

docs(integrations): align credential contract

fix(integrations): harden local credential execution

Merge origin/main into feat/issue-495-byo-local-integration-credentials

fix(integrations): harden local-credential shapes and defer catalog capture

docs(api-reference): regenerate integrations source line pins

test(integrations): gate the primordial-poison proof to the Deno runner

Commits on Aug 19, 2026

fix(integrations): pin a granted endpoint path against dot-segment arguments

fix(integrations): sanitize the tool name in local integration config errors

docs(api-reference): refresh integrations source line pins

fix(integrations): reject dot-segment path arguments before minting credentials

fix(integrations): validate header arguments before minting credentials

fix(integrations): bound-check the assembled body before minting credentials

fix(integrations): send the body that was bound-checked before minting

fix(integrations): skip re-serializing a body the caller already assembled