TSYS Group COO
6c7cb6bb52
docs: add resume-prompt.md for session 2 handoff
...
Comprehensive handoff document covering:
- What works (BW host CLI, bw_helper.py lifecycle safety)
- What's broken (container BW sync, 2FA, Redmine/Discourse SSO)
- Cloudron Pankow UI patterns (keyboard.type, role=button)
- Per-app SSO button selectors
- Mistakes from session 1 to avoid repeating
- Suggested first actions (fix BW sync before Playwright)
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
2026-09-07 14:51:13 -05:00
TSYS Group COO
6abd688ff5
chore: add AGPLv3 license, update README license section
...
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
2026-09-07 14:51:13 -05:00
TSYS Group COO
dce7164889
feat: container-based Bitwarden CLI using native Rust binary (no Node.js)
...
Replace the Node.js @bitwarden/cli dependency with the pre-compiled
native Rust binary (v2026.7.0) for CMMC/ITAR/STIG audit readiness.
The Node.js dependency tree was a significant attack surface that
would fail security audits.
Infrastructure:
- docker/bw-native/Dockerfile: minimal debian-slim + native bw binary
- scripts/bw-cli.sh: host wrapper handling full auth lifecycle
(config, API-key login, unlock, sync) inside the container
- scripts/bw-entrypoint.sh: container entrypoint for auth lifecycle
- scripts/bw-install.sh: one-command installer (download, build, deploy)
Root causes fixed:
- ~/.config/bw/env values now single-quoted (master password has $
chars that shell expansion corrupted, truncating 32→16 chars)
- Added BW_SERVER for self-hosted instance (pwvault.turnsys.com)
- Entrypoint bw config server tolerates re-run (|| true)
All scripts pass shellcheck with zero warnings including info-level.
Verified: bw status (unlocked, coo@turnsys.com ), generate, list items.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
2026-09-07 14:51:13 -05:00
TSYS Group COO
2c91545c0f
docs: update STATUS.md with code review results + repo inventory
...
Added provisioning code review findings (8 bugs found and fixed in
agent-identity-provisioning repo). Updated repo inventory to show
total commits per repo this session.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
2026-09-07 14:51:13 -05:00
TSYS Group COO
fbf9a6571c
docs: add STATUS.md + questions-v1.md for TSGCOO handoff
...
STATUS.md tracks the full state of the agent identity bootstrap: what's
built, all 6 blockers with specific remediation steps, the provisioning
execution path, and repo inventory.
questions-v1.md captures 7 questions for Charles (4 blocking, 3
non-blocking). Blocking: docker group, BW credentials, Cloudron invites,
Gitea push access.
Also adds AGENTS.md, STATUS.md, questions-v1.md to README index.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
2026-09-07 14:51:13 -05:00
TSYS Group COO