2 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
mrcharles	627948a98e	scripts: fix oidc code extraction + Cloudron 10 totp routes ... - sed kept the URL prefix in the auth-code extraction; the garbage code was the cause of every invalid_grant on the token exchange - enrollment now uses the Cloudron 10 profile-scoped routes mined from the dashboard bundle: POST /api/v1/profile/totp_secret and POST /api/v1/profile/totp_enable - seed storage verifies the setfield write and falls back to a full vault item recreate (smcli setfield 400s on some ciphers) - prompt=login added to the auth URL for session-switch flows Verified: 32 COO-org identities enrolled end-to-end (seed in vault + real TOTP login as each identity). Full detail on the #942 comment. https://projects.knownelement.com/issues/942	2026-09-09 12:34:40 -05:00
mrcharles	8ce279276f	feat: initial agent identity provisioning automation [#442] ... Playwright-based tool for enrolling AI agent identities in Cloudron, generating API keys via SSO (Gitea/Discourse/Redmine), and storing all credentials in Bitwarden per-agent collections. - provision-agent.py: main Playwright automation (Cloudron enroll, SSO login, API key generation, verification) - bw-helper.py: Bitwarden CLI wrapper (password gen, item CRUD, TOTP, session management) - Dockerfile: Playwright v1.52.0 + bw CLI + Python deps - agents.yaml.example: manifest template for Q3/Q4 agents - TSYSGroupAIOS framework adopted (hooks, rules engine, Makefile) 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-08-13 08:59:14 -05:00