org-buildout

14 Commits 1 Branch 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
TSYS Group COO	dce7164889	feat: container-based Bitwarden CLI using native Rust binary (no Node.js) Replace the Node.js @bitwarden/cli dependency with the pre-compiled native Rust binary (v2026.7.0) for CMMC/ITAR/STIG audit readiness. The Node.js dependency tree was a significant attack surface that would fail security audits. Infrastructure: - docker/bw-native/Dockerfile: minimal debian-slim + native bw binary - scripts/bw-cli.sh: host wrapper handling full auth lifecycle (config, API-key login, unlock, sync) inside the container - scripts/bw-entrypoint.sh: container entrypoint for auth lifecycle - scripts/bw-install.sh: one-command installer (download, build, deploy) Root causes fixed: - ~/.config/bw/env values now single-quoted (master password has $ chars that shell expansion corrupted, truncating 32→16 chars) - Added BW_SERVER for self-hosted instance (pwvault.turnsys.com) - Entrypoint bw config server tolerates re-run (\|\| true) All scripts pass shellcheck with zero warnings including info-level. Verified: bw status (unlocked, coo@turnsys.com), generate, list items. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-09-07 14:51:13 -05:00
TSYS Group COO	2c91545c0f	docs: update STATUS.md with code review results + repo inventory Added provisioning code review findings (8 bugs found and fixed in agent-identity-provisioning repo). Updated repo inventory to show total commits per repo this session. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-09-07 14:51:13 -05:00
TSYS Group COO	fbf9a6571c	docs: add STATUS.md + questions-v1.md for TSGCOO handoff STATUS.md tracks the full state of the agent identity bootstrap: what's built, all 6 blockers with specific remediation steps, the provisioning execution path, and repo inventory. questions-v1.md captures 7 questions for Charles (4 blocking, 3 non-blocking). Blocking: docker group, BW credentials, Cloudron invites, Gitea push access. Also adds AGENTS.md, STATUS.md, questions-v1.md to README index. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-09-07 14:51:13 -05:00

Author

SHA1

Message

Date

TSYS Group COO

dce7164889

feat: container-based Bitwarden CLI using native Rust binary (no Node.js)

Replace the Node.js @bitwarden/cli dependency with the pre-compiled
native Rust binary (v2026.7.0) for CMMC/ITAR/STIG audit readiness.
The Node.js dependency tree was a significant attack surface that
would fail security audits.

Infrastructure:
- docker/bw-native/Dockerfile: minimal debian-slim + native bw binary
- scripts/bw-cli.sh: host wrapper handling full auth lifecycle
  (config, API-key login, unlock, sync) inside the container
- scripts/bw-entrypoint.sh: container entrypoint for auth lifecycle
- scripts/bw-install.sh: one-command installer (download, build, deploy)

Root causes fixed:
- ~/.config/bw/env values now single-quoted (master password has $
  chars that shell expansion corrupted, truncating 32→16 chars)
- Added BW_SERVER for self-hosted instance (pwvault.turnsys.com)
- Entrypoint bw config server tolerates re-run (|| true)

All scripts pass shellcheck with zero warnings including info-level.
Verified: bw status (unlocked, coo@turnsys.com), generate, list items.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-09-07 14:51:13 -05:00

TSYS Group COO

2c91545c0f

docs: update STATUS.md with code review results + repo inventory

Added provisioning code review findings (8 bugs found and fixed in
agent-identity-provisioning repo). Updated repo inventory to show
total commits per repo this session.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-09-07 14:51:13 -05:00

TSYS Group COO

fbf9a6571c

docs: add STATUS.md + questions-v1.md for TSGCOO handoff

STATUS.md tracks the full state of the agent identity bootstrap: what's
built, all 6 blockers with specific remediation steps, the provisioning
execution path, and repo inventory.

questions-v1.md captures 7 questions for Charles (4 blocking, 3
non-blocking). Blocking: docker group, BW credentials, Cloudron invites,
Gitea push access.

Also adds AGENTS.md, STATUS.md, questions-v1.md to README index.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-09-07 14:51:13 -05:00