feat(security): credentialed exec + HTTP RBAC + API key cache (#197)#199

Merged

viettranx merged 14 commits intomainfrom

feat/197-credentialed-exec

Mar 15, 2026

Commits on Mar 14, 2026

feat(tools): add credentialed exec for secure CLI credential injection (#197)
mrgoonie
committed
fix(tools): address code review findings for credentialed exec
mrgoonie
committed

Commits on Mar 15, 2026

Add API key management with fine-grained RBAC scopes
claude
committed
Add interactive API documentation with Swagger UI at /docs
claude
committed
Add comprehensive API documentation (HTTP, WebSocket RPC, API keys)
claude
committed
Update README with API key management, API docs, and documentation links
claude
committed
fix: address code review findings for API key management
mrgoonie
committed
fix(ci): use anthropic_api_key instead of claude_code_oauth_token
mrgoonie
committed
fix: rename api_keys migration from 000019 to 000020 to avoid conflict
mrgoonie
committed
fix(tools): address review findings for credentialed exec
viettranx
committed
merge: integrate PR #208 (API key RBAC) into credentialed-exec branch
viettranx
committed
fix(security): enforce API key auth + constant-time comparison across all HTTP handlers
viettranx
committed
feat(security): add HTTP RBAC, API key cache, and security hardening
viettranx
committed
merge: resolve conflicts with main (team events + schema version)
viettranx
committed