feat(sdk): read host-delivered worker secrets from Task.runtimeMetadata (all 4 SDKs) - #313

Open

v1r3n wants to merge 24 commits into

mainfrom

feat/embedded-secrets-sdk-taskdef

Commits on Jul 10, 2026

feat(server): embedded secret delivery via TaskDef.runtimeMetadata + AgentspanSecretsDAO

v1r3n
and
claude
committed
2b6030f
feat(sdk): read host-delivered worker secrets from Task.runtimeMetadata (all 4 SDKs)

v1r3n
and
claude
committed
9ea65d7
refactor(server): move CredentialMaskingResponseAdvice to the server module

v1r3n
and
claude
committed
01a6c7e
refactor(credentials): make CredentialStoreProvider a single-scope (global) store

v1r3n
and
claude
committed
81a62d9
refactor(credentials): remove userId from CredentialResolutionService

v1r3n
and
claude
committed
f3149fd
refactor(server): remove ExecutionTokenService + native worker-pull

v1r3n
and
claude
committed
3da18b4
refactor(credentials): resolve HTTP/MCP header secrets via ${workflow.secrets.NAME}

v1r3n
and
claude
committed
320d033
fix(credentials): keep secret references out of INLINE enrich scripts (plaintext leak)

v1r3n
and
claude
committed
0cf3c6e

Commits on Jul 11, 2026

test(server): move ToolCompilerTest + EnrichToolsScriptTest to the core module

v1r3n
and
claude
committed
9a5b725
test(server): move core-class unit tests to the conductor-agentspan module

v1r3n
and
claude
committed
9be34cf
ci: split into Server CI and SDK CI workflows

v1r3n
and
claude
committed
d15d14c
fix(server): declare TaskDef.runtimeMetadata in standalone mode too

v1r3n
and
claude
committed
464f3d1
Merge server branch (embedded-secrets server changes) into the SDK branch
v1r3n
committed
128d3d1
feat(python-sdk): read worker secrets ONLY from Task.runtime_metadata

v1r3n
and
claude
committed
a14cbb3
feat(ts-sdk): read worker secrets ONLY from Task.runtimeMetadata

v1r3n
and
claude
committed
81ee761
feat(java-sdk): read worker secrets ONLY from Task.runtimeMetadata (reflective)

v1r3n
and
claude
committed
a36e24f
ci: remove the SDK CI workflow

v1r3n
and
claude
committed
1a7a370
Merge server branch: remove SDK CI workflow
v1r3n
committed
91b5125
fixes
v1r3n
committed
337ac6f
Update build.gradle
v1r3n
committed
f050430

Commits on Jul 12, 2026

Commits on Jul 13, 2026

clean up
v1r3n
committed
d4a6998