mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-09-15 23:32:46 +00:00
6dfc96d3fd
lithos-llm now owns which named secrets each provider reads and how they
shape into its auth scheme, including a derived `<PROVIDER>_API_KEY` for
operator-defined providers. Fabro's job shrinks to supplying the store:
`VaultCredentialSource` hands lithos a lookup that reads the process
environment, then the vault, under the same conventional names.
What Fabro still adds on top: the Codex OAuth credential in the vault,
refreshed and persisted when it expires; `{{ secrets.NAME }}` tokens in a
provider's `default_headers`, resolved against the vault and re-sent as
credential headers; and OpenAI organization and project headers from the
environment.
Deleted with the `metadata.fabro.credentials` list: `CredentialRef`,
`CredentialResolver`, `EnvCredentialSource` (now
`VaultCredentialSource::environment_only`), and the `env_var_names` /
`expected_vault_secret_name` helpers, replaced by `secret_names` and
`expected_secret_name` over the lithos table. `openai-codex` joins the
first-party provider id constants.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| assets/brand | ||
| demo | ||
| licenses | ||
| product | ||
| cargo-target-apfs-churn-plan.md | ||
| cli-workflow-coupling-audit.md | ||
| error-handling-strategy.md | ||
| event-schema-competitive-analysis.md | ||
| events-strategy.md | ||
| events.md | ||
| fabro-event-schema-v2-concrete-shape.md | ||
| fabro-event-schema-v2-proposal.md | ||
| llm-client-resolution.md | ||
| logging-strategy.md | ||
| mcp-server-qa-test-plan.md | ||
| migrations-strategy.md | ||
| panic-policy.md | ||
| parallel-strategy.md | ||
| plan-events-as-source-of-truth-follow-ups.md | ||
| plan-events-as-source-of-truth.md | ||
| react-effects-policy.md | ||
| run-directory-keys.md | ||
| server-secrets-strategy.md | ||
| slow-test-opportunities-2026-04-07.md | ||
| testing-strategy.md | ||
| updating-web-screenshots.md | ||