Repository navigation

Add credential fill, vaults, TOTP and 1Password tokens, with LLM tools - #142

Open

AHarmlessPyro wants to merge 22 commits into

mainfrom

credentials

Open

Add credential fill, vaults, TOTP and 1Password tokens, with LLM tools#142
AHarmlessPyro wants to merge 22 commits into
mainfrom
credentials

Commits on Oct 15, 2026
- Add website credentials and session credential fill
  
  AHarmlessPyro
  and
  claude
  committed
  ed127ea
- Add a fill_credential LLM tool and Gemini tool declarations
  
  AHarmlessPyro
  and
  claude
  committed
  fd52288
- Document credential fill and the LLM tools
  
  AHarmlessPyro
  and
  claude
  committed
  98e4209
- Parse secret types the API adds later, and update README models
  
  AHarmlessPyro
  and
  claude
  committed
  2f36941
- Bump the version to 1.13.0
  
  AHarmlessPyro
  and
  claude
  committed
  0f3a66b
- Correct the browser sessions scope and SECRET_TYPE_MISMATCH status in the README
  
  AHarmlessPyro
  and
  claude
  committed
  e723757
- Leave the version for the release to set
  
  AHarmlessPyro
  and
  claude
  committed
  08c1d38
- List credential fill events in session event logs
  
  AHarmlessPyro
  and
  claude
  committed
  96a31da
- Fill secrets and vaults, and add TOTP and op_token secrets
  
  AHarmlessPyro
  and
  claude
  committed
  81c02ca
- Document vaults, TOTP and 1Password secrets, and fill by vault
  
  AHarmlessPyro
  and
  claude
  committed
  3d5ca75
- Name VAULT_ENTRY_INVALID for entries of the wrong kind in the README
  
  AHarmlessPyro
  and
  claude
  committed
  166d5a7
- Read TOTP seeds as vm-service does, and refuse non-object tool input
  
  AHarmlessPyro
  and
  claude
  committed
  a8abb08
- Document SECRET_TOTP_UNSUPPORTED as 501
  
  AHarmlessPyro
  and
  claude
  committed
  0718a89
- Document SECRET_ONEPASSWORD_UNSUPPORTED as 501
  
  AHarmlessPyro
  and
  claude
  committed
  bc83f8f
- Drop TOTP as the example of a value a host can't fill
  
  AHarmlessPyro
  and
  claude
  committed
  3b5b3fe
- Take 1Password fields per request instead of linking vaults
  
  AHarmlessPyro
  and
  claude
  committed
  b5bed00
- Explain how a fill chooses its tab, with the origin check after
  
  AHarmlessPyro
  and
  claude
  committed
  0dac769
- Fill 1Password fields into browser sessions through an op_token
  
  AHarmlessPyro
  and
  claude
  committed
  f617848
- Read TOTP seeds split across lines, as vm-service now does
  
  AHarmlessPyro
  and
  claude
  committed
  4225fdf
- Check origins and secret env names as master does
  
  AHarmlessPyro
  and
  claude
  committed
  5a8ef8d
- Accept tab_opened session events
  
  AHarmlessPyro
  and
  claude
  committed
  133d554
- Simplify credential validation and keep Gemini tools scoped to fill
  AHarmlessPyro
  committed
  cb53593

Commits

Commits on Oct 15, 2026