2 Commits

Include renames

Author	SHA1	Message	Date
TSYS Group COO	7534964c13	fix: handle 2FA on the Bitwarden account during API login [#442] ... bw login --apikey prompts for a TOTP code when 2FA is enabled on the BW account. The previous code didn't pass one, so it would hang or fail. Now generates a TOTP from BW_TOTP_SECRET and passes via --code. Changes: - BitwardenHelper.__init__ accepts totp_secret param - login() generates a pyotp code and passes --code when secret is set - provision-agent.py passes BW_TOTP_SECRET from environment - docker-compose.yml and .env.example updated for the new var - BW_PASSWORD removed from the login env (only needed for unlock via stdin) The BW account's own TOTP secret lives in ~/.config/bw/env alongside the other BW access info — the one exception (can't store BW's 2FA in BW itself). 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-08-13 12:14:16 -05:00
mrcharles	8ce279276f	feat: initial agent identity provisioning automation [#442] ... Playwright-based tool for enrolling AI agent identities in Cloudron, generating API keys via SSO (Gitea/Discourse/Redmine), and storing all credentials in Bitwarden per-agent collections. - provision-agent.py: main Playwright automation (Cloudron enroll, SSO login, API key generation, verification) - bw-helper.py: Bitwarden CLI wrapper (password gen, item CRUD, TOTP, session management) - Dockerfile: Playwright v1.52.0 + bw CLI + Python deps - agents.yaml.example: manifest template for Q3/Q4 agents - TSYSGroupAIOS framework adopted (hooks, rules engine, Makefile) 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-08-13 08:59:14 -05:00